[Samba] ACHTUNG! Sie haben eine mit einem Virus infizierte Mail verschickt.

[Cottbus Service]

G DATA AntiVirenKit hat in folgender Mail einen Virus entdeckt:

Absender:   [EMAIL PROTECTED]
Empfänger:  [EMAIL PROTECTED]
Cc:
Bcc:
Datum:  5.04.2004  22:18
Betreff:
Virus:  Win32/[EMAIL PROTECTED]

Der infizierte Teil wurde gelöscht.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba (2.2.8a or 3.0.2a) + WinXP not updating roaming profiles on logout

[Jeremy Huddleston]

I have a linux box running samba configured as my PDC with roaming
profiles.  Everything was running great until I upgraded to WinXP
instead of Win2K.  Now, when I log out of my XP session, my profile
doesn't get uploaded to the server.  The local copy remains in effect
until I reboot.  When I log out, the following message gets sent to the
event logger:

[quote]
Windows has detected that Offline Caching is enabled on the Roaming
Profile share - to avoid potential profile corruption, Offline Caching
must be disabled on shares where roaming user profiles are stored. 



For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
[/quote]

I searched around and found an email which suggested adding the
following to my profiles share to fix this warning message (not sure if
it's supposed to fix my problem, but I figured it was worth a shot):

   csc policy = disabled
   share modes = no

The warning still occurs (yes, I restarted samba and I restarted
windows).

Here's my smb.conf file with comments stripped

[global]
   workgroup = HOME
  netbios name = ERADICATOR
   server string = Samba Server %v
   printcap name = lpstat
   load printers = yes
   printing = cups
   printer admin = @adm
   log file = /var/log/samba/log.%m
   max log size = 50
  guest account = guest
   security = user
  encrypt passwords = yes
  smb passwd file = /etc/samba/private/smbpasswd
  username map = /etc/samba/smbusers
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   interfaces = eth1
   local master = yes
   os level = 65
   domain master = yes 
   preferred master = yes
   domain logons = yes
   logon path = \\%L\%U\profile
   logon home = \\%L\%U
   logon drive = I:
add user script = /usr/sbin/useradd -d /dev/null -g machines -c 'Machine
Account' -s /bin/false -M %u
domain admin group = root @wheel
domain guest group = nobody guest @nobody @nogroup @guest
   wins support = yes
   dns proxy = no 
[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   profile acls = yes
   csc policy = disabled
   share modes = no
[netlogon]
   comment = Network Logon Service
   path = /var/lib/samba/netlogon
   guest ok = yes
   writable = no
[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
   guest ok = yes
   writable = no
   printable = yes
   create mode = 0700
   print command = lpr -P %p %s # using cups own drivers (use generic
PostScript on clients).
   lpq command = lpq -P %p
   lprm command = cancel %p-%j
[download]
   comment = Downloads
   path = /usr/local/download
   public = yes
   writable = no
   write list = @adm
   
   create mode = 0664
   directory mode = 2775
   force create mode = 0660
   force directory mode = 2770
[music]
   comment = Music
   path = /home/jeremy/Music
   public = yes
   writable = no
   write list = @adm
   
   create mode = 0664
   directory mode = 2775
   force create mode = 0660
   force directory mode = 2770
[movies]
   comment = Movies
   path = /home/jeremy/Movies
   public = yes
   writable = no
   write list = @adm
   
   create mode = 0664
   directory mode = 2775
   force create mode = 0660
   force directory mode = 2770
[root]
comment = Root Directory
path = /
read only = No
[raid0]
comment = RAID 0
path = /mnt/raid0
read only = No


---

As another note, I get the following message in log. since
going to samba3... 

[2004/04/05 23:16:16, 0]
rpc_server/srv_util.c:get_domain_user_groups(372)
  get_domain_user_groups: primary gid of user [jeremy] is not a Domain
group !
  get_domain_user_groups: You should fix it, NT doesn't like that
[2004/04/05 23:16:20, 1] smbd/service.c:make_connection_snum(705)
  aerith (192.168.0.3) connect to service jeremy initially as user
jeremy (uid=1000, gid=4) (pid 22991)

---

Thanks in advance for any help you have to offer.  It is very much
appreciated.



signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] samba pam kerberos

[aarumuga arumugam]

Hi Everybody,
   We are working on samba 3.0.2a with sun
kerberos SEAM and Netscape iDirectory Server support. 
We are able to integrate samba with ldap support. we
tried integrater kerberos for authentication. We found
a solution using pam via pam_krb5 module provided by
the sun solaris 8. 

One important fact we found out using samba pam
authentication, it directly calls for an account
management function instead of an authentication
function. Please refer pam_smb_accountcheck function
() in pampass.c in source/auth . 

We have included options like obey pam instructions
and pam password change to be positive in smb.conf 
and we have included information about samba service
in the pam configuration file. we have included
information about pam in the krb5.conf of kerberos. I
have also set  the encrypt password to be positive in
smb.conf file. 

I am able to get a solaris machine getting
authenticated by the kerberos server.The problem is
when i try to join a Win xp computer to the samba
server . I get access denied error. when i check the
samba logs, i could find the samba sam authentication
succeded but when the pam authentication takes place ,
It says authentication failed , User rejected etc., 

I could not find any information about samba server
contacting in the kerberose server logs.
SAMBA server is not contacting the KERBEROS server for
authentication.  
Please any suggestions is appreciated. I could send
the configuration of samba and pam and kerberos if the
information is not sufficient. 

eccsamba

__
Do you Yahoo!?
Yahoo! Small Business $15K Web Design Giveaway 
http://promotions.yahoo.com/design_giveaway/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Cannot umount as user

[Torben Mikael Hansen]

I have to connect to XP-windows machine where my colleague have choosen 
to make a share name with a space in it.

I can mount to just fine having in the fstab the following line

//machine/direc\040tory /mp smbfs password=,user,noauto,rw,exec 0 0

However when I try to umount, I get

umount: /mp mount disagrees with the fstab

In mtab I find

//machine/direc_tory /mp smbfs 0 0

How do I solve it so that 'space' is not replaced by 'underscore'

I running RH9

Torben

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] how could i know when accounts logoff

[ÕÔÁÖ]

hi all

i have a samba3.0.2a as a domain controller, win2kpros as clients.
when accounts logoff, the connections will be kept for some more time,
such as 20 mins.
how could i immediately know the logoff?

thanks for any help or discussion.

Eric Zhao
SCGY,USTC
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] (CAN ANYONE READ THIS ?) Samba2.2.8a and TOUCH option in recycle.conf ??

[mlist]

yes, i can see your post. but i can't help . no experience with recycle.conf

>On Tuesday 06 April 2004 09:41, ipguy  wrote:
> CAN ANYONE READ THIS ?
>
> is anyone having issues with the TOUCH option in recycle.conf for samba-
> 2.2.8a ?

-- 
Regards,
MList
"Sharing The Power Of IT Through Linux"
Mandrake 9.2
Kernel 2.4.22-21
KDE 3.2
OpenOffice 1.1
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Browsing a domain under a samba PDC

[Gianni Mariani]

I have a number of XP machines using Samba 3.0.2a (as well as 2 other 
Linux boxes running samba) and when browsing the domain under WinXP I 
can see all the samba machines but the XP machines are not there.

I've read about everything, I have Wins set up and being announced by 
the DHCP server, I have the other samba servers not competing for domain 
browsing etc.  On the PDC, the /var/cache/samba/browse.dat shows all the 
machines (including those not in the domain).

I've resorted to writing a script that parses browse.dat and presents a 
web page !

Any other ideas on what I might be doing wrong ?

Thanks
G
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] (CAN ANYONE READ THIS ?) Samba2.2.8a and TOUCH option in recycle.conf ??

[ipguy]

CAN ANYONE READ THIS ?

is anyone having issues with the TOUCH option in recycle.conf for samba-
2.2.8a ?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Fw: Error returning browse list: NT_STATUS_ACCESS_DENIED

[David Rankin]

Not sure if this got through the 1st time, so I am trying a repost. I
appologize if you get this twice, but I need help!


--
David C. Rankin, J.D., P.E.
Rankin * Bertin, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
(936) 715-9333
(936) 715-9339 fax
www.rankin-bertin.com
--
- Original Message - 
From: "David Rankin" <[EMAIL PROTECTED]>
To: "samba" <[EMAIL PROTECTED]>
Sent: Saturday, April 03, 2004 11:35 AM
Subject: Error returning browse list: NT_STATUS_ACCESS_DENIED


> Andrew, Jerry and the rest of the team:
>
> Hello again! It has been quite some time since I was here and waded
the
> waters to set up bind8 and samba 2.07 on my trust mdk 7.2 box. (by the
way,
> it is still working like a champ) over 400 days uptime before the last
> extended power outage. Well, obviously a lot has changed since the 2.07
days
> and I am now working on a SuSE 8.2 box with samba 2.2.7a with XP pro
> clients. So far, all has gone well, but one lingering problem remains (as
> the title suggests). I'm sure this has been asked and answered numerous
> times in my absence, but googling has been fruitless.
>
> So, sell me another t-shirt and mug, and let's see if we can get to
the
> bottom of this. How is that old Aussie Bartlett anyway??
>
> The problem: The Win XP boxes will not return a browse list resulting
in
> the "Error returning browse list: NT_STATUS_ACCESS_DENIED." The Suse box
has
> no problems. The output for smbclient is shown below and illustrates the
> problem. Bind 9 is working like a champ with dhcpd and ddns all playing
> nicely together. I have appended the smb.conf at the end for your
reference.
> (still a work in progress)  I can browse from XP to samba just fine. I
just
> can't get samba to use, or see for that matter, the shared resources on
the
> XP box. So what do I need to do? Upgrade samba? Dork with the XP registry?
> As always, your help and advise is greatly appreciated.
>
> skyline:/home/david # smbclient -U% -L localhost
> added interface ip=192.168.7.14 bcast=192.168.7.255 nmask=255.255.255.0
> Domain=[RB_LAW] OS=[Unix] Server=[Samba 2.2.7a-SuSE]
>
> Sharename  Type  Comment
> -    ---
> SkylineDisk  Skyline Shares
> config Disk  Admin Config Share
> IPC$   IPC   IPC Service (RB_LAW Skyline Server
> 2.2.7a-SuSE)
> ADMIN$ Disk  IPC Service (RB_LAW Skyline Server
> 2.2.7a-SuSE)
>
> Server   Comment
> ----
> RIPPER   XP2800
> SKYLINE  RB_LAW Skyline Server 2.2.7a-SuSE
>
> WorkgroupMaster
> ----
> RB_LAW   SKYLINE
>
> skyline:/home/david # smbclient -U% -L ripper
> added interface ip=192.168.7.14 bcast=192.168.7.255 nmask=255.255.255.0
> Domain=[RB_LAW] OS=[Windows 5.1] Server=[Windows 2000 LAN Manager]
>
> Sharename  Type  Comment
> -    ---
> Error returning browse list: NT_STATUS_ACCESS_DENIED
>
> Server   Comment
> ----
>
> WorkgroupMaster
> ----
>
>
> skyline:/home/david/Documents/linux_config/etc # cat /etc/samba/smb.conf
> # Global parameters
> [global]
> netbios name = skyline
> workgroup = RB_LAW
> server string = RB_LAW Skyline Server %v
> encrypt passwords = Yes
> update encrypted = Yes
> smb passwd file = /etc/samba/smbpasswd
> passwd program = /usr/bin/passwd %u
> passwd chat = *New*password* %n\n *new*password* %n\n *success*
> passwd chat debug = Yes
> unix password sync = Yes
> log file = /var/log/samba/log.%m
> max log size = 50
> name resolve order = wins hosts lmhosts bcast
> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> printcap name = lpstat
> logon script = %U.bat
> domain logons = Yes
> time server = yes
> os level = 99
> preferred master = Yes
> domain master = Yes
> dns proxy = No
> wins support = Yes
> hosts allow = 192.168.7. localhost 66.76.63.60
> min print space = 2000
> printing = cups
> print command = /usr/bin/lp -d%p -oraw %s; rm %s
> lpq command = /usr/bin/lpstat -o%p
> lprm command = /usr/bin/cancel %p-%j
> queuepause command = /usr/bin/disable %p
> queueresume command = /usr/bin/enable %p
>
> [Skyline]
> comment = Skyline Shares
> path = /home/samba/skyline
> valid users = @skyline
> force group = skyline
> admin users = david
> writeable = Yes
> map archive = Yes
> inherit permissions = Yes
>
> [homes]
> comment = Homes Directory
> writeable = Yes
> browseable

[Samba] Register Name with nmbd fails after network move

[Ricky Chan]

Hello,

I am new to SAMBA.  Originally, the WIN server and the SAMBA server 
were located in the same subnet.  After the migration of the Microsoft end 
users subnet to 10.32.12.x, the SAMBA server is no longer able to seem 
by the Windows clients in 10.32.12.x.  The following is the error indicated
at /usr/local/samba/var/log.nmbd.  I appreciate if anyone can guide me to 
resolve the problem.  Thanks!


[2004/04/05 16:20:58, 0] nmbd/nmbd.c:main(795)
  Netbios nameserver version 2.2.8a started.
  Copyright Andrew Tridgell and the Samba Team 1994-2002
[2004/04/05 16:20:58, 0]
nmbd/nmbd_nameregister.c:register_name_response(109)
  register_name_response: server at IP 10.32.12.10 rejected our name
registration of MROTH<03> with error code 6.
[2004/04/05 16:20:58, 0] nmbd/nmbd_mynames.c:my_name_register_failed(40)
  my_name_register_failed: Failed to register my name MROTH<03> on subnet
UNICAST_SUBNET.
[2004/04/05 16:20:58, 0] nmbd/nmbd_namelistdb.c:standard_fail_register(290)
  standard_fail_register: Failed to register/refresh name MROTH<03> on
subnet UNICAST_SUBNET


The following is the smb.conf for your reference.

# Samba config file created using SWAT
# from 192.168.249.79 (192.168.249.79)
# Date: 2002/01/22 14:53:16

# Global parameters
[global]
workgroup = XYPOINT
netbios name = MROTH
server string = Matt Roth's Workstation
security = DOMAIN
encrypt passwords = Yes
password server = rogue
username map = /usr/local/samba/lib/users.map
load printers = No
local master = No
dns proxy = No
wins server = rogue
guest account =
case sensitive = Yes

[home]
comment = home
path = /usr/local/export/home/mroth
read only = No

[viewstore]
comment = viewstore
path = /usr/local/viewstore
read only = No

Regards,
Ricky Chan
Development UNIX System Administrator
Telecommunication System
email:  [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] No My Network Places or Net Neighborbood Icons, & /tmp log entries

[Curt Harms]

Hi,

	I am having the following problems with Samba:
		1) My server system is not immediately visible to windows machines, 
i.e., there is no icon in "My Network Places" XP, or in "Network 
Neighborhood" in 98. I am able to manually log into the system via 
Windows XP by doing the run command for my server name. I am also able 
to log in via Mac OS X, but I must also specify a directory 
smb://bucket/charms for example. I am unable to log in via Window 98 at 
all.
		2) I get lots of entries in my log similar to the following:
			Apr  5 15:47:29 bucket smbd[3253]: [2004/04/05 15:47:29, 0] 
smbd/service.c:make_connection_snum(677)
			Apr  5 15:47:29 bucket smbd[3253]:   '/tmp' does not exist or is not 
a directory, when connecting to [IPC$]
		The /tmp directory is permissions are 777, yet I continue to get this 
error.
	I am running Samba 3.0.2a on a Gentoo Linux machine with the 2.6.4 
kernel. SMB support is compiled into the kernel. I previously tried 
2.2.8a and had similar problems.
	I have done my best to be sure that the workgroup, WINS server, etc. 
settings are correct on all the machines.
	My config file reads as follows (with a few item ***ed out for 
security.)
[global]
workgroup = ***
writeable = yes
encrypt passwords = yes
wins support = yes
browsable = yes
server string = Samba %v on %h
hosts allow = 10.11.12.0/255.255.255.0 127.0.0.1
hosts deny = 10.11.12.1
syslog only = yes
log level = 1
oplocks = no
level2 oplocks = no
invalid users = , 
username level = 3
security = user
passwd program = /usr/bin/passwd
unix password sync = yes
domain master = yes
local master = yes
preferred master = yes
os level = 255
domain logons = no

[homes]
browsable = no
writeable = yes
[archive]
path = /bucket/archive
comment = The Main Archive
browsable = yes
volume = archv
writeable = yes
strict locking = yes
valid users = @employees
create mode = 0660
directory mode = 0770
admin users = ***, ***
	I would REALLY appreciate any help that I can get on this issue. I 
have tried everything I can think of and cannot fix the problems.
			Thanks so much,
Curt Harms

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] special chars in windows filenames

[Matthew Geier]

On Mon, 2004-04-05 at 20:47, Joachim ThÃx wrote:
> Hi folks!
> 
> I upgraded a red hat linux fileserver (kernel version 2.4.18-14)
> from samba 2.x to samba 3.02.
> 
> After the upgrade, the special chars in windows filenames
> (German Umlaute) were no more visible to clients but either
> substituted with a little black rectangle or completely suppressed -
> depending on the client operating system (W2000/W98).

> Within the archived list I found a hint that the smb options dos/unix charset
> might not be the solution, but it could be related to kernel restrictions.

 Samba 3 uses UTF8 on the file system instead of a dos code page. If you
have lots of non ascii in your file system you either have to convert
them to UTF-8 (There are scripts around to do this), or lock the Unix
charset into the most common code page that was written to your disk.

 Using the unix charset option then 'knobbles' Samba's multi-charset
handling some what, you won't be able to put glyphs from other character
sets on Samba volumes. Better to convert unless you have Unix
application that need to access the files created by Windows users and
it depends on a certain code page being used in the file system.

 I've been using Samba 3 since it was beta, as not only were people
putting German Umlaute's in file names, but the accents used in just
about every other European language. But the people trying to use
Chinese caused much pain with Samba 2 as it plain wouldn't co-exist with
the others.

 The changeover to Samba 3 caused a little pain for those who had been
using filenames with accents but the pain was worth it to get the
European and Asian languages to co-exist on the one file server. Since I
did that people have written conversion scripts. I did it by hand,
fielding user complaints and then renaming their files. (Which they then
renamed back into what they wanted, but it was stored on the Unix side
UTF-8 now)


 Of note on Fedora Core if I do an 'ls' of a folder containing something
like Chinese put there by a Windows client, gterminal will render it
correctly...

-- 
Matthew Geier <[EMAIL PROTECTED]>
Arts IT Unit, Faculty of Arts, Sydney University

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Creating Shares from Windows Management Console

[John Petro]

All,

  I have what I hope is a small problem  Here at RIT, we are testing
using Samba 3.x hooked into windows AD for filesharing between Windows
and Apple fileshares.  The way we are set up is in a OU structure where
there is really no one domain admin.  We are split up into multiple OU's
and each OU has an administrator.  What we are trying to do is to get
what I call an "Administrative share" that I assign to the OU
administrators.  Once I give that to them, I would like to be able to
let them loose on creating shares for their respective departments.  One
thing I noticed that I was wondering if there was a way around was the
administrative users field in the smb.conf file.  Is there a way to give
someone the privs to create a share in samba without being listed in the
admin users field.When I tried this with a user who wasn't listed,
we got a "Access Denied" but as soon as I put the username in the field,
it was fine.

 

Any thoughts or ideas would be greatly appreciated...

 

---John

 

-
John Petro
Rochester Institute of Technology
System Programmer - 
Technical Support Services/ITS
585-475-4925
[EMAIL PROTECTED]
-

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Active Directory Problem

[Trenton Cameron]

I am having a problem with samba.  I am using it in conjunction with 
Active directory.  It is fine when I start it up and everything 
authenticates OK but when I go to brows a shared directory I can see the 
files but as soon as I go to open a file everything locks up.  Any help 
would be greatly appreciated.  I have included some log files at debug 
level 3 as well as my samba config file and information about my system.

This is samba 3.02a on a solaris 9 sparc machine

I can join the domain and the wbinfo -u and wbinfo -g commands work just 
fine
net ads testjoin
Join is OK

Parts of the smb.conf follow
[global]
  
   netbios name = BUCK
   workgroup = MY
   realm = my.home.edu
   security = ADS
   encrypt passwords = yes
   domain master = No
   password server = *
   idmap uid = 1-2
   idmap gid = 1-2

   template homedir = /home/winnt/%D/%U
   template shell = /bin/bash
   admin users = "@my.home.edu+Domain Admins"
  
[intrastaging]
   comment = intra-staging webroot
   path = /webpages/intra/intrastaging/www
   valid users = MY\tcameron
   force group = web
   read only = No
   #force create mode = 0660
   #force directory mode = 02775
   inherit permissions = Yes

log.nmbd
 Netbios nameserver version 3.0.2a started.
 Copyright Andrew Tridgell and the Samba Team 1994-2004
[2004/04/05 13:33:18, 3] param/loadparm.c:lp_load(3810)
 lp_load: refreshing parameters
[2004/04/05 13:33:18, 3] param/loadparm.c:init_globals(1300)
 Initialising global parameters
[2004/04/05 13:33:18, 3] param/params.c:pm_process(566)
 params.c:pm_process() - Processing configuration file 
"/usr/local/samba/lib/smb.conf"
[2004/04/05 13:33:18, 3] param/loadparm.c:do_section(3322)
 Processing section "[global]"
[2004/04/05 13:33:19, 3] nmbd/nmbd.c:reload_nmbd_services(295)
 services not loaded
[2004/04/05 13:33:19, 2] nmbd/nmbd.c:main(688)
 Becoming a daemon.
[2004/04/05 13:33:19, 2] lib/tallocmsg.c:register_msg_pool_usage(57)
 Registered MSG_REQ_POOL_USAGE
[2004/04/05 13:33:19, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71)
 Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
[2004/04/05 13:33:19, 3] nmbd/nmbd.c:main(720)
 Opening sockets 137
[2004/04/05 13:33:19, 3] nmbd/nmbd.c:open_sockets(589)
 open_sockets: Broadcast sockets opened.
[2004/04/05 13:33:19, 2] lib/interface.c:add_interface(79)
 added interface ip=129.123.191.1 bcast=129.123.191.255 nmask=255.255.255.0
[2004/04/05 13:33:19, 2] lib/interface.c:add_interface(79)
 added interface ip=192.168.128.1 bcast=192.168.128.255 nmask=255.255.255.0

log.smbd

 Transaction 37 of length 45
[2004/04/05 13:36:10, 3] smbd/process.c:switch_message(685)
 switch message SMBclose (pid 15706)
[2004/04/05 13:36:10, 3] smbd/reply.c:reply_close(2567)
 close fd=-1 fnum=6389 (numopen=2)
[2004/04/05 13:36:10, 2] smbd/close.c:close_normal_file(228)
 USURF\tcameron closed file robots.txt (numopen=1)
[2004/04/05 13:36:10, 3] smbd/process.c:process_smb(890)
 Transaction 38 of length 112
[2004/04/05 13:36:10, 3] smbd/process.c:switch_message(685)
 switch message SMBntcreateX (pid 15706)
[2004/04/05 13:36:10, 3] lib/util.c:unix_clean_name(580)
 unix_clean_name [/robots.txt]
[2004/04/05 13:36:10, 2] smbd/dosmode.c:unix_mode(58)
 unix_mode(robots.txt) inheriting from .
[2004/04/05 13:36:10, 2] smbd/dosmode.c:unix_mode(66)
 unix_mode(robots.txt) inherit mode 42775
[2004/04/05 13:36:10, 3] smbd/dosmode.c:unix_mode(110)
 unix_mode(robots.txt) returning 0764
[2004/04/05 13:36:10, 3] lib/util.c:unix_clean_name(580)
 unix_clean_name [robots.txt]
[2004/04/05 13:36:10, 2] smbd/open.c:open_file(240)
 tcameron opened file robots.txt read=Yes write=No (numopen=2)
[2004/04/05 13:36:10, 3] smbd/process.c:process_smb(890)
 Transaction 39 of length 76
[2004/04/05 13:36:10, 3] smbd/process.c:switch_message(685)
 switch message SMBtrans2 (pid 15706)
[2004/04/05 13:36:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(1855)
 call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1022
[2004/04/05 13:36:10, 3] smbd/trans2.c:call_trans2qfilepathinfo(1943)
 call_trans2qfilepathinfo robots.txt (fnum = 6390) level=1022 call=7 
total_data=0
[2004/04/05 13:36:10, 3] smbd/process.c:process_smb(890)
 Transaction 40 of length 63
[2004/04/05 13:36:10, 3] smbd/process.c:switch_message(685)
 switch message SMBreadX (pid 15706)
[2004/04/05 13:36:53, 3] smbd/sec_ctx.c:set_sec_ctx(288)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/04/05 13:36:53, 2] smbd/process.c:timeout_processing(1138)
 Closing idle connection
[2004/04/05 13:36:53, 3] smbd/sec_ctx.c:set_sec_ctx(288)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/04/05 13:36:53, 2] smbd/server.c:exit_server(558)
 Closing connections
[2004/04/05 13:36:53, 3] smbd/connection.c:yield_connection(69)
 Yielding connection to
[2004/04/05 13:36:53, 3] smbd/server.c:exit_server(601)
 Server exit (normal exit)

--
To unsubscribe from this list go to the followin

[Samba] Mac OS 9 And Mac OS 10 Clients

[James Coggan]

Is there a Mac OS 9 and Mac OS 10 Samba File/Printer Shares Client
Or i have to install a server using the macintosh protocol ?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] winbind uid range missing or invalid

[Porta, Thomas E]

My apologies, I meant to include the smb.conf GLOBAL parms, and
nsswitch.conf parms. Here they are:
  (I X'd out some of the settings)

[global]
workgroup = x
netbios name = 
security = domain
password server = xx xx
wins server = xxx.xxx.xxx.xxx
winbind uid = 1 - 1
winbind gid = 1 - 1
template homedir = /home/windows/%D/%U
template shell = /bin/bash
os level = 2
unix extensions = yes
encrypt passwords = yes
log level = 1
syslog = 0
printing = CUPS
printcap name = CUPS
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
wins support = no
veto files = /*.eml/*.nws/riched20.dll/*.{*}/


Here is the nsswitch parms:


passwd: files winbind
group:  files winbind

hosts:  files dns
networks:   files dns

services:   files
protocols:  files
rpc:files
ethers: files
netmasks:   files
netgroup:   files
publickey:  files

bootparams: files
automount:  files nis
aliases:files





-Original Message-
From: Michael Brown [mailto:[EMAIL PROTECTED]
 ] 
Sent: Friday, April 02, 2004 3:44 PM
To: Porta, Thomas E
Subject: Re: [Samba] winbind uid range missing or invalid


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


On Fri, 2 Apr 2004 14:57:01 -0500 
"Porta, Thomas E" <[EMAIL PROTECTED]> wrote:

> Hello ... I am trying to run winbindd on my SuSE LINUX V8 system.  When I
> start windbindd I eventually get the following message:
> 
>  'winbind uid range missing or invalid'



Did you set 'winbind uid =' and 'winbind gid =' in smb.conf?

Michael Brown
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAbdCqyEfMczxaHdsRAjWqAJ4uN09dAk82eCR6Locr8nqsM6nvcQCePOOp
zHHDhyI7ozPqscdT4Np+RzU=
=luC1
-END PGP SIGNATURE-



Thomas E. Porta
 Mgr OS/390 Tech. Supt.
 TYCO Electronics Corporation
 Phone: (717) 810-2148 
 Fax: (717) 810-2236
 [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Accessing samba machine with IP address but not withfqdn/hostnam e

[Scott Moseman]

What version of Kerberos are you running on your box?
Upgrade to 1.3.1 (or higher) and it may work for you.
I think older versions of Kerberos may not be working
with Active Directory servers.  I had the same issue,
and upgrading my Kerberos version solved the problem.

When you map via IP address, it is using NTLM, AFAIK.
When you map via hostname, it is using Kerberos, which
if you have an old version, is not going to work right.

Thanks,
Scott Moseman


-Original Message-
From: [EMAIL PROTECTED]
Sent: Monday, April 05, 2004 1:48 PM
To: '[EMAIL PROTECTED]'
Subject: [Samba] Accessing samba machine with IP address but not
withfqdn/hostnam e


I have a Debian woody running Samba 3.0.2a in ads security mode as
member
of a Windows 2003 Active Directory, I run winbind+pam, wbinfo e net ads
testjoin, its all working fine. 

>From any workstation, or even from the W2003 domain controller itself,
I
can´t access the samba server as \\linuxnetbiosname
 , as \\machine_ip_address
  works.
 

I also could see a error in the log. the messages:

[2004/04/04 00:20:26, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)

  Failed to verify incoming ticket!

After what the user is prompted with a logon screen, even if I type the
correct user and password, he it´s not able to browser in this server.

Any help ?

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 3 fake-kaserver keytab

[Jan Chorowski]

Hi,

I've been trying to run samba-3.02a with the fakekaserver option and realised that it 
needs to have the afs keyfile in secrets.tdb. The function doing this resides in 
surces/passdb/secrets.c and is called secrets_store_afs_keyfile .
How can I use it (and generaly speaking which program do I need to use to manipulate 
the tdb files)

Jan Chorowski

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Accessing samba machine with IP address but not with fqdn/hostnam e

[Estevam Henrique Carvalho]

I have a Debian woody running Samba 3.0.2a in ads security mode as member of
a Windows 2003 Active Directory, I run winbind+pam, wbinfo e net ads
testjoin, its all working fine. 

>From any workstation, or even from the W2003 domain controller itself, I
can´t access the samba server as \\linuxnetbiosname
 , as \\machine_ip_address
  works.

 

I also could see a error in the log. the messages:

[2004/04/04 00:20:26, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)

  Failed to verify incoming ticket!

 

After what the user is prompted with a logon screen, even if I type the
correct user and password, he it´s not able to browser in this server.

 

Any help ?

 

 

 

 

 



= 
Esta mensagem pode conter informação confidencial e/ou privilegiada. Se você
não for o destinatário ou a pessoa autorizada a receber esta mensagem, não
deverá utilizar, copiar, alterar, divulgar a informação nela contida ou
tomar qualquer ação baseada nessas informações. Se você recebeu esta
mensagem por engano, por favor avise imediatamente o remetente, respondendo
o e-mail e em seguida apague-o. Agradecemos sua cooperação. 

This message may contain confidential and/or privileged information. If you
are not the addressee or authorized to receive this for the addressee, you
must not use, copy, disclose, change, take any action based on this message
or any information herein. If you have received this message in error,
please advise the sender immediately by reply e-mail and delete this
message. Thank you for your cooperation. 
= 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] WINS Caching Error?

[Chad Vincent]

Bringing this back to the ML incase someone else has some insight

Removed wins.dat from /var/lib/samba, restarted samba, still no 
luck.  smbclient is still looking at the old address.

I just checked, and it rebuilt wins.dat exactly as it was before.  A backup 
copy somewhere, perhaps?

"[DOMAIN]#1c"  1081448833 192.168.x.195 192.168.x.19 e4R

"[SERVER]#00"  1081448833 192.168.x.195 192.168.x.19 66R
"[SERVER]#03"  1081448833 192.168.x.195 192.168.x.19 66R
"[SERVER]#20"  1081448833 192.168.x.195 192.168.x.19 66R
*** THEN AN EPIPHANY OCCURS ***

Stopped Samba, THEN deleted the wins.dat, then re-started samba.  All is 
right with the world.  For now, at least.

It must read the cached file on start-up, then re-write it on shutdown.

The big question is, though... why aren't the old addresses getting 
un-registered when new ones are registered with WINS?  Or if that's 
standard, why do the old addresses take precedent over the new ones?

At 12:57 PM 4/5/2004 -0500, you wrote:
>
>ls /var/cache/samba/
>
>-rw-r--r--1 root root  962 Apr 05 13:27 browse.dat
>drwxr-xr-x 2 root root 104 Mar 22 09:05 printing
>
>No wins.dat.
>
> >find / wins.dat
>
>find: wins.dat: No such file or directory
Hmmm.

ls /var/cache/samba/
brlock.tdb   messages.tdbntforms.tdb share_info.tdb
browse.dat   namelist.debug  ntprinters.tdb  smbd.pid
connections.tdb  nmbd.pidprinting.tdbunexpected.tdb
locking.tdb  ntdrivers.tdb   sessionid.tdb   wins.dat
I'm still running 2.2.8a, I wonder if 3.x puts its
WINS data somewhere else.
I just did a quick (and I mean quick) bit of googling, I searched
for "samba 3 wins.dat" and the first entry that comes up is
from a guy who is having a similar issue to you, and is using
Debian.  He shows wins.dat as living in /var/lib/samba instead
of /var/cache/samba.  You may want to read it:
http://lists.samba.org/archive/samba/2003-December/076382.html

HTH,

--J(K)
Chad Vincent
Owner
RhiannonWEB
Phone: 330-283-4681
To: "'Chad Vincent'" <[EMAIL PROTECTED]>
Subject: RE: [Samba] WINS Caching Error?
It's possible you have a corrupted wins.dat.

On my system it's in /var/cache/samba/ and
I've sucessfully changed it without trouble
(I had an issue similar to yours).  Just
make your change to the wins.dat and restart
Samba.  (Make sure you make a backup first --
it worked for me, but it might not for you.)
HTH,

--J(K)

>-Original Message-
>From:
>[EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED]
>a.org] On Behalf Of Chad Vincent
>Sent: Monday, April 05, 2004 11:26 AM
>To: [EMAIL PROTECTED]
>Subject: [Samba] WINS Caching Error?
>
>
>Here is the problem:
>
>Installed Debian Woody
>Installed Samba 3.02a-1
>Setup Samba
>Setup Network to use Static IP address (Being a PDC / WINS
>Server and all...)
>
>Now I'm getting the following:
>
> >ifconfig eth0
>eth0:
>Link encap:Ethernet  HWaddr: [MAC address here]
>inet addr:192.168.x.19  Bcast:192.168.x.255  Mask: 255.255.255.0
>UP BROADCAST RUNNING MULTICAST MTU:1500  Metric:1
>.etc
>
> >smbclient -L [SERVER]
>Error connecting to 192.168.x.195
>Connection to [SERVER] failed
>
> >ping [SERVER]
>PING [SERVER].localdomain (192.168.x.19): 56 data bytes
>64 bytes from 192.168.x.19: icmp_seq=0 ttl=64 time=0.0ms
>**SNIP**
>
> >cat /etc/hosts
>**SNIP**
>192.168.x.19  [server].localdomain  [server]
>
>Normally, I wouldn't be too concerned, but apparently this has
>propagated
>into WINS, and so we have one computer (so far, we're
>transitioning to this
>new server in stages) that cannot connect to the server until
>the NetBIOS
>has propagated to it, and I don't want to have to set up a
>custom LMHOSTS
>for every client.  That's what WINS is for.
>
>Also, if it makes any difference, 192.168.x.195 was the last
>DHCP address
>on that network card before I changed it to Static IP.
>
>Appropriate sections of smb.conf, ask if you need more:
>
>[global]
>interfaces=eth0 192.168.x.19
>netbios name=[SERVER]
>workgroup=DM.NET
>security=USER
>socket options=TCP_NODELAY
>dns proxy=no
>os level=65
>domain master=yes
>prefered master=yes
>wins support=yes
>local master=yes
>domain logons=yes
>name resolve order=wins lmhosts bcast host
>
>
>Chad Vincent
>Owner
>RhiannonWEB
>Phone: 330-283-4681
>
>--
>To unsubscribe from this list go to the following URL and read the
>instructions:  http://lists.samba.org/mailman/listinfo/samba
>
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] winbind fails

[Majeed]

Im going to install the new version, and report back in a week or so. 
Thanks for the reply!

Majeed

Tim Jordan wrote:

I seen a there  is a fix for winbind crashing in the latest release notes.
http://download.samba.org/samba/ftp/pre/
TJ
On Mon, 2004-04-05 at 10:25, Majeed wrote:
/I have also been seeing this over the last few weeks. For me it also 
happens randomly as you stated. I am trying to pin point when it 
started, and I believe it started right after I upgraded the kernel 
2.4.24 to 2.4.25 (vanilla sources on gentoo 1.4) (mremap problems), but 
I can't be too sure. Samba 3.0.2 compiled with the following options:
./configure --prefix=/usr --sysconfdir=/etc/samba --localstatedir=/var 
--libdir=/usr/lib/samba --with-privatedir=/etc/samba/private 
--with-lockdir=/var/cache/samba --with-piddir=/var/run/samba 
--with-swatdir=/usr/share/swat --with-configdir=/etc/samba 
--with-logfilebase=/var/log/samba --enable-static --enable-shared 
--with-manpages-langs=en --without-spinlocks --with-libsmbclient 
--with-automount --with-smbmount --with-winbind --with-syslog 
--with-idmap --with-ldap --with-ads --with-krb5 --with-pam

Here are some symptoms I am seeing when the problem occurs.
Symptom 1)  I cannot login through ssh: Its wierd becuase i can 
connnect, put in my username and password it authenticates but then the 
connection gets reset. There is even a line in the ssh log file that 
says access was granted. I then to to the console and login.

Symptom 2) While logged into the console I run a "netstat -antu" and get 
some interesting results
tcp0  0 sambaserv_ip:44134   win2000dc_ip:139  
CLOSE_WAIT
tcp0  0 sambaserv_ip:44072   win2000dc_ip:139  
CLOSE_WAIT
tcp0  0 sambaserv_ip:44075   win2000dc_ip:139  
CLOSE_WAIT
tcp0  0 sambaserv_ip:44076   win2000dc_ip:139  
CLOSE_WAIT
tcp0  0 sambaserv_ip:44078   win2000dc_ip:139  
CLOSE_WAIT
tcp0  0 sambaserv_ip:44079   win2000dc_ip:139  
CLOSE_WAIT

There are HUNDREDS of these CLOSE_WAIT lines all with different 
ascending port numbers
After restarting samba and winbind netstat looked normal and everything 
worked as it should have.

Symptom 3) While logged into the console I check the samba log files and 
log.winbind showed the following problems.
[2004/04/05 10:11:05, 0] lib/util_sock.c:open_socket_in(634)
 open_socket_in(): socket() call failed: Too many open files
[2004/04/05 10:11:05, 0] lib/util_sock.c:open_socket_in(634)
 open_socket_in(): socket() call failed: Too many open files
[2004/04/05 10:11:05, 0] lib/util_sock.c:open_socket_in(634)
 open_socket_in(): socket() call failed: Too many open files
[2004/04/05 10:11:05, 0] lib/util_sock.c:open_socket_in(634)
 open_socket_in(): socket() call failed: Too many open files
[2004/04/05 10:11:05, 0] lib/util_sock.c:open_socket_in(634)
 open_socket_in(): socket() call failed: Too many open files
[2004/04/05 10:11:05, 0] lib/util_sock.c:open_socket_in(634)
 open_socket_in(): socket() call failed: Too many open files
[2004/04/05 10:11:05, 0] lib/util_sock.c:open_socket_in(634)
 open_socket_in(): socket() call failed: Too many open files
[2004/04/05 10:11:05, 0] lib/util_sock.c:open_socket_in(634)
 open_socket_in(): socket() call failed: Too many open files

Again there were HUNDREDS of these lines.

So I think winbind might be the cause of the problems. This happens on 
both my production and my test server. Test server is mirrored to 
production for testing.

Today I am going to download the newest version of the samba 3 and see 
if that helps, if it doesn't then I might try a different kernel 
version. As mentioned before all i do is restart samba and winbind and 
thinks will work perfectly for a random amount of time. Usually 3 or 
more days before it happens again.

Does anyone have any suggestions? Maybe some different things I could 
look for? Maybe different compile options?

Thanks
Majeed Qulbain






Hoskinson, David P wrote:

We have a windows 2003 dc here at the university and I have successfully
setup samba-3.0.2-6.3E on a RHEL WS3 machine. The problem is that after
several hours, or several days winbind stops running and connections
fail.  I have seen instances of this on other sites, but no firm
answers.  I can provide files and logs if helpful
 
/

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] winbind fails

[Majeed]

I have also been seeing this over the last few weeks. For me it also 
happens randomly as you stated. I am trying to pin point when it 
started, and I believe it started right after I upgraded the kernel 
2.4.24 to 2.4.25 (vanilla sources on gentoo 1.4) (mremap problems), but 
I can't be too sure. Samba 3.0.2 compiled with the following options:
./configure --prefix=/usr --sysconfdir=/etc/samba --localstatedir=/var 
--libdir=/usr/lib/samba --with-privatedir=/etc/samba/private 
--with-lockdir=/var/cache/samba --with-piddir=/var/run/samba 
--with-swatdir=/usr/share/swat --with-configdir=/etc/samba 
--with-logfilebase=/var/log/samba --enable-static --enable-shared 
--with-manpages-langs=en --without-spinlocks --with-libsmbclient 
--with-automount --with-smbmount --with-winbind --with-syslog 
--with-idmap --with-ldap --with-ads --with-krb5 --with-pam

Here are some symptoms I am seeing when the problem occurs.
Symptom 1)  I cannot login through ssh: Its wierd becuase i can 
connnect, put in my username and password it authenticates but then the 
connection gets reset. There is even a line in the ssh log file that 
says access was granted. I then to to the console and login.

Symptom 2) While logged into the console I run a "netstat -antu" and get 
some interesting results
tcp0  0 sambaserv_ip:44134   win2000dc_ip:139  
CLOSE_WAIT
tcp0  0 sambaserv_ip:44072   win2000dc_ip:139  
CLOSE_WAIT
tcp0  0 sambaserv_ip:44075   win2000dc_ip:139  
CLOSE_WAIT
tcp0  0 sambaserv_ip:44076   win2000dc_ip:139  
CLOSE_WAIT
tcp0  0 sambaserv_ip:44078   win2000dc_ip:139  
CLOSE_WAIT
tcp0  0 sambaserv_ip:44079   win2000dc_ip:139  
CLOSE_WAIT

There are HUNDREDS of these CLOSE_WAIT lines all with different 
ascending port numbers
After restarting samba and winbind netstat looked normal and everything 
worked as it should have.

Symptom 3) While logged into the console I check the samba log files and 
log.winbind showed the following problems.
[2004/04/05 10:11:05, 0] lib/util_sock.c:open_socket_in(634)
 open_socket_in(): socket() call failed: Too many open files
[2004/04/05 10:11:05, 0] lib/util_sock.c:open_socket_in(634)
 open_socket_in(): socket() call failed: Too many open files
[2004/04/05 10:11:05, 0] lib/util_sock.c:open_socket_in(634)
 open_socket_in(): socket() call failed: Too many open files
[2004/04/05 10:11:05, 0] lib/util_sock.c:open_socket_in(634)
 open_socket_in(): socket() call failed: Too many open files
[2004/04/05 10:11:05, 0] lib/util_sock.c:open_socket_in(634)
 open_socket_in(): socket() call failed: Too many open files
[2004/04/05 10:11:05, 0] lib/util_sock.c:open_socket_in(634)
 open_socket_in(): socket() call failed: Too many open files
[2004/04/05 10:11:05, 0] lib/util_sock.c:open_socket_in(634)
 open_socket_in(): socket() call failed: Too many open files
[2004/04/05 10:11:05, 0] lib/util_sock.c:open_socket_in(634)
 open_socket_in(): socket() call failed: Too many open files

Again there were HUNDREDS of these lines.

So I think winbind might be the cause of the problems. This happens on 
both my production and my test server. Test server is mirrored to 
production for testing.

Today I am going to download the newest version of the samba 3 and see 
if that helps, if it doesn't then I might try a different kernel 
version. As mentioned before all i do is restart samba and winbind and 
thinks will work perfectly for a random amount of time. Usually 3 or 
more days before it happens again.

Does anyone have any suggestions? Maybe some different things I could 
look for? Maybe different compile options?

Thanks
Majeed Qulbain






Hoskinson, David P wrote:

We have a windows 2003 dc here at the university and I have successfully
setup samba-3.0.2-6.3E on a RHEL WS3 machine. The problem is that after
several hours, or several days winbind stops running and connections
fail.  I have seen instances of this on other sites, but no firm
answers.  I can provide files and logs if helpful
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] IPC$ ?

[Alex Forrow]

This is a share which lists all the other shares. Its use is invisible
to users, but it has to be there

Not sure why Windows is still using it after the users have loged out,
but shouldn't cause any harm.

Alex Forrow

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Christian Hennig
Sent: 04 April 2004 10:11
To: [EMAIL PROTECTED]
Subject: [Samba] IPC$ ?

Some of my users doesent log out. smbstatus show me, that IPC$ is in use

by the users, but all are out of the office ;-(
i use Samba as PDC for WindowsXP-pro.

What is IPC$?

Thanks for Help

CU

CHristin Hennig
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Two major issues with Mac OS X clients

[Andrew]

Hello,

I am having to major issues with Mac clients on our samba server. One
has to do with how the Mac vs. the PC locks files and the other has to do
with a very slow connection to one of our larger shares.

1.) File locking issue:

I am having a strange problem occur with shared excel and word files being
opened by multiple users. The problem appears to be a result of a Mac
opening the file first. So I assume the Mac is locking the file differently.
Here is an example:

If user A who uses a Mac (OSX Panther) opens up the excel file on the samba
server everyone else gets an error message when trying to open it and cannot
open the file.

If user B running windows XP opens up the excel file other people can open
the file at the same time


Here is what the locks look like in smbstatus (Notice the different access
modes):

Mac:
8336   DENY_NONE  0x3 RDWR   NONE
/mnt/share/Applied_Minds/Files/Ext List by 1st Name.xls   Wed Mar 24
16:09:02 2004

PC:
8798   DENY_NONE  0x2019f RDWR   NONE
/mnt/share/Applied_Minds/Files/Ext List by 1st Name.xls   Wed Mar 24
16:08:21 2004

2.) Slow connection issue

When a Mac connects to one of our shares on our fileserver the connection
can take up to a minute. So far the only reference to the slow connection
that I can see is the following error:

Mac log file:
mount_smbfs: No credentials cache found krb5_cc_get_principal


If anyone can help it would be greatly appreciated... Here is the my conf
file and version:

Samba 3.0.2-6.3E Redhat ES

[global]
log level = 1
log file = /var/log/samba/%m.log
realm = domain.net
workgroup = DOMAIN
security = ADS
encrypt passwords = yes
password server = dc0.domain.net dc1.domain.net
server string = AMI File Server
socket options = TCP_NODELAY SO_KEEPALIVE
kernel oplocks = yes
oplocks = yes
veto oplock files =
/*.doc/*.DOC/*.xls/*.XLS/*.ppt/*.PPT/*.pst/*.PST/*.mdb/*.MDB/*.ldb/*.LDB/*.v
sd/*.VSD/*.mpp/*.MPP/*.qbw/*.QBW/*.qbb/*.QBB/*.qbI/*.qbl/*.dxf/*.DXF/*.dwg/*
.DWG/*.cdr/*.CDR/*.bak/*.BAK/*.ord/*.xlo/*.igs/*.ipt/*.ipj/*.slp/*.stp/*.opt
/*.xli/*.stl/*.cur/*.sjb/*.log/*.LOG/*.sbs/*.iam/*.idv/
interfaces = eth0*,lo
bind interfaces only = yes
# strict locking
# strict sync
# separate domain and username with +, like DOMAIN+username
winbind separator = +
# use uids from 11000 to 19000 for domain users
idmap uid = 11000-19000
# use gids from 11000 to 19000 for domain groups
idmap gid = 11000-19000
# allow enumeration of winbind users and groups
winbind enum users = yes
winbind enum groups = yes
# give winbind users a real shell (only needed if they have telnet access)
template shell = /bin/bash

[Share]
   comment = Share
   path = /mnt/share/share
   create mask = 0770
   directory mask = 0770
   public = yes
   writable = yes



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] IIS Virtual Directories and SAMBA

[Donald, Adam]

In summary, I have the following problem:
When opening files in particular folders contained in a Virtual Directory on
Windows IIS 5 server that points to a SAMBA share, via a web browser (I have
tried IE and cURL), I get a 404 - file not found error, however, I am able
to open these same files on the SAMBA server with Windows Explorer, using
the same SAMBA account that the IIS server is using.  Please note that I AM
able to open up other files of the same type via the web browser from the
SAMBA share when pointing to the Virtual Directory on the SAMBA share.
 
When I point the Virtual Directory toward a Windows server share that is a
mirror of the SAMBA share, I can open up every file just fine.
 
I have checked the file permissions on the SAMBA server, I can open up some
of the files that are located even in the same subfolder via web browser,
and I can browse all folders regardless of wheter or not I can open files in
them or not.
 
I am using SAMBA version 2.2.3a on HP-UX 11i.  
 
I appreciate any input!!!
Thank you.
 
 
AD
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Problem managing user accounts by usermgr

[M. Vancl]

Hi,

I'm using samba 3.0.2 PDC with LDAP backend.
I'd like to be able to manage user accounts by Microsoft's usrmgr tool (from
srvtools package).
In my smb.conf are configured functional IDEALX scripts. Additionally I
added debug output to start of all scripts which prints current time and
parameters of script.
When I use usrmgr.exe for creating a new user account I get strange error
(insufficient privileges). Curiously on the ldap database is new user
account present after it. Exactly - there is account made by
smbldap-useradd. There are missing sambaLMPassword and sambaNTPassword and
displayName (Full Name in usrmgr) is set to default value "System User".
Interesting record is in session logfile:
[2004/04/05 18:37:41, 0] rpc_server/srv_samr_nt.c:_samr_create_user(2251)
  could not add user/computer u2 to passdb.  Check permissions?
When after it I do refresh of user list in usrmgr and try to correct newly
created account (Full Name and password) everything is ok.
When I look to my scripts debug log, I see that smbldap-passwd was called
only during my second attempt.
Next when I try delete user account by usrmgr, I got the same error message
as when was created - insufficient privileges. In the session log on samba
is record:
[2004/04/05 18:58:32, 0] passdb/pdb_ldap.c:ldapsam_delete_entry(269)
  ldapsam_delete_entry: Entry must exist exactly once!
But curiously account was successfully deleted. My script debug log contain
message about call od smbldap-userdel.

Does anybody know, what is the reason of it ?

Thanks

M. Vancl



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Very strange XP behaviour

[Paul P Komkoff Jr]

I see *things* happening here.

XP. Trying to access \\host\sharea. works fine
\\host\shareb - pops up password window

shares a and ba may vary between reboots.
I spent 15 minutes scratching my head and finally tossed out
"snoop port 445"

So what I've seen.
On shares I can access wxp do:
1. Send: Tree Connect AndX Request \\host\sharea
2. Receive: Tree Connect AndX Response
3. Send: Trans2 Request: QUERY_PATH_INFO, Query basic path info, Path:
(empty)
4. Receive good response
and so on.

But on failing shares (\host\shareb), on step 3, it trying to query_path_info with
path \host\shareb

Of course it cannot access it. When I did a basic test (mkdir
host/shareb in shareb dir) it stops popping up auth window and starts
connecting - but I cannot descend deeper into directories and cannot
access any file. Here I already turned snoop off so I cannot provide
exactly which path winXP adds to actual path.

I can provide dump to team members, and will glad to provide any
additional information.

-- 
Paul P 'Stingray' Komkoff Jr // http://stingr.net/key <- my pgp key
 This message represents the official view of the voices in my head
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] smbclient and hidden share

[Mark Berntheisel]

Hello,

how can i get access to a hidden share (c$)?  i use the smbclient (Version
3.0.2a-Debian) and try to get access to a windows xp workstation. the
request is all the same: "NT_STATUS_ACCESS_DENIED".  Username and password
are correct.

office-backup-center:/etc/samba# smbclient //b-man/C$ byte -U
Administrator -W BA-FFM
Domain=[B-MAN] OS=[Windows 5.1] Server=[Windows 2000 LAN Manager]
tree connect failed: NT_STATUS_ACCESS_DENIED

THX 4 HELP

Mark Berntheisel
Fachinformatiker in Richtung Systemintegration i.A.

ByteACTION GmbH
Auf der Beune 83-85
64839 Münster
HRB 33271

email : [EMAIL PROTECTED]
URL   : www.byteaction.de
Tel.  : 06071-9216-0 (Mo.-Fr. 9-18 Uhr)
0700-BYTEACTION (24x7)
0700-29832284   (24x7)
Fax   : 06071-9216-20



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] WINS Caching Error?

[Chad Vincent]

Here is the problem:

Installed Debian Woody
Installed Samba 3.02a-1
Setup Samba
Setup Network to use Static IP address (Being a PDC / WINS Server and all...)
Now I'm getting the following:

>ifconfig eth0
eth0:
Link encap:Ethernet  HWaddr: [MAC address here]
inet addr:192.168.x.19  Bcast:192.168.x.255  Mask: 255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500  Metric:1
.etc
>smbclient -L [SERVER]
Error connecting to 192.168.x.195
Connection to [SERVER] failed
>ping [SERVER]
PING [SERVER].localdomain (192.168.x.19): 56 data bytes
64 bytes from 192.168.x.19: icmp_seq=0 ttl=64 time=0.0ms
**SNIP**
>cat /etc/hosts
**SNIP**
192.168.x.19  [server].localdomain  [server]
Normally, I wouldn't be too concerned, but apparently this has propagated 
into WINS, and so we have one computer (so far, we're transitioning to this 
new server in stages) that cannot connect to the server until the NetBIOS 
has propagated to it, and I don't want to have to set up a custom LMHOSTS 
for every client.  That's what WINS is for.

Also, if it makes any difference, 192.168.x.195 was the last DHCP address 
on that network card before I changed it to Static IP.

Appropriate sections of smb.conf, ask if you need more:

[global]
interfaces=eth0 192.168.x.19
netbios name=[SERVER]
workgroup=DM.NET
security=USER
socket options=TCP_NODELAY
dns proxy=no
os level=65
domain master=yes
prefered master=yes
wins support=yes
local master=yes
domain logons=yes
name resolve order=wins lmhosts bcast host
Chad Vincent
Owner
RhiannonWEB
Phone: 330-283-4681 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 3.0.3pre2 Available for Download

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
This is the second preview release of the Samba 3.0.3 code base
and is provided for testing only.  This release is *not* intended
for production servers.  Use at your own risk.
There have been several bug fixes since the 3.0.2a release that
we feel are important to make available to the Samba community
for wider testings.  See the "Changes" section for details on
exact updates.
Common bugs fixed in this preview release include:

~  o Substitution errors for %[UuGg] in smb.conf.
~  o winbindd crashes when using ADS security mode.
~  o SMB signing errors.
New features introduced in this preview release include:

~  o Experimental support for storing DOS attribute on files
~and folders in Extended Attributes.
The source code can be downloaded from:

~   http://download.samba.org/samba/ftp/pre/

The uncompressed tarball and patch file have been signed
using GnuPG.  The Samba public key is available at
~   http://download.samba.org/samba/ftp/samba-pubkey.asc

Links to binary packages can be found on the

~   http://www.samba.org/samba/samba.html

A simplified version of the CVS log of updates since 3.0.3pre1
can be found in the the download directory under the name
ChangeLog-3.0.3pre1-3.0.3pre2.  The release notes are also available
in the same directory.
As always, all bugs are our responsibility.

~   --Enjoy
~   The Samba Team
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFAcYiuIR7qMdg1EfYRAnCPAKDihuJSZwd5j/9w7HzZMVmbjKLdVgCglAJr
ZciCvu4QpvzwZ6rx72260is=
=70/e
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] NT/ADS and UNIX user convergence using Samba

[news.gmane.org]

Hi-

I'm deploying a fileserver running Samba 3.0.2a in an environment that
contains NT and UNIX users.  I'd like to have my fileserver set up as
follows:

- Users connecting to the fileserver from NT boxes are authenticated against
the Win2K ADS Domain Controller.
- Users connecting to the fileserver from other UNIX boxes are authenticated
locally using NIS and access the shared volume via NFS.

Each user has an account on the Win2K ADS Domain, and also an account on the
NIS server.  I have this setup running now, but there's one problem:  When
the user accesses a file from a Windows client it's accessed using the
UID/GID generated by winbind, but when the user accesses a file from a UNIX
client it's accessed using the NIS UID/GID.  Effectively they have different
ownership.

I'd like this fileserver set up so that files created from either type of
client have the same ownership.  Basically I need to somehow map my ADS
UID/GID's to my UNIX UID/GID's.  I've looked around in the docs and on the
web and can't find an answer (other than warnings that the winbind UIDs
should *not* map to existing UNIX UIDs - but this is what I want!).  I know
from working with NetApps in the past that there is a way to configure those
fileservers so that they attempt to do a username match from NT to/from
UNIX, and if the same named user exists, then it will use the same UID/GID.

I really want a way to set up a mapping file or something to the effect of
this:

# NT userUNIX user
DOMAIN+user1 user1
DOMAIN+user2 user2

It is *not* important that users have login accounts on the fileserver ...
so one idea I had was this:
- Remove NIS from the nsswitch.conf entries on the fileserver.
- Edit my /etc/passwd file on my NIS server so that UID/GID entries for a
user are the same as they ones generated by winbind

Will this work?  Will I run into a problem down the road if I add a new
fileserver (if winbind's SID->UID/GID mapping is not the same on that new
server)?

Thanks in advance,
Steve



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Fwd: Re: [Samba] Need Samba 3.0.0 help] More info...

[lea]

Well folks this is getting irritating.
When we map our Solaris Home directory to a network drive on the NT side of
life then attempt to "make a new folder"
it actually does make the new folder in the home directory, but it just hangs
up on the Windows side.

Any ideas why we don't get a return response?
Another thing is that if we select a ".txt" file to view, the log files on
samba will state that it has granted the OPLOCK
for the file, thne it states that it has it opened for viewing.  However, the
same thing happens, it goes out into
never never land.
Clues are appreciated!?
-- 



-- Original Message --
Subject: Re: [Samba] Need Samba 3.0.0 help
From:[EMAIL PROTECTED]
Date:Mon, April 5, 2004 10:56 am
To:  "Paul Gienger" <[EMAIL PROTECTED]>
Cc:  [EMAIL PROTECTED]
--

Paul et all,
I tried to add the webserver to see if this would clear up the problem I was
having with it seeming to hang from the NT machines, but it is still not
working.
The thing istwo of our shares work...very simple shares...shared
automounts from our NIS network served off and SGI system.  We have other
shares off the SGI that do NOT work.

Home directories are out of the question.
It maps but then you can't do a blasted thing from the  samba mount.

This is getting very frustrating and I have customers banging me every day. So
any suggestions would be helpful.

Lea
-- 


On Tue, March 30, 2004 6:10 pm, Paul Gienger said:
> You can always install a basic web server on the samba box to give a quick
'No' rather than waiting for windows to time out waiting.
>
> Watch the logs and you'll see lots of 404's.
>
>
> [EMAIL PROTECTED] wrote:
>
>>Jason,
>>I do not have access to all the NT or XP machines that connect and map
>> drives.
>> We are not the administrators.
>>I did turn it off on one of the XP's that we have.  There was no change. Any
other suggestions?  Possibly something on the server?
>>
>>Lea
>>
>>
>
> --
> Paul Gienger Office:  701-281-1884
> Applied Engineering Inc. Cell:701-306-6254
> Information Systems Consultant   Fax: 701-281-1322
> URL: www.ae-solutions.commailto:[EMAIL PROTECTED]
>
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbldap_tools

[Jérôme Tournier]

Le Mon, Apr 05, 2004 at 11:57:40AM +0200, Brendon Standing a ecrit:
> failed to perform search; invalid DN at
> /usr/share/samba/scripts//smbldap_tools.pm line 154,  line 283.
> Can't call method "get_value" on an undefined value at
> /usr/bin/smbldap-useradd line 152,  line 283.

. does the default group defined in smbldap.conf exist (defaultUserGid="513") ?
. does the NT "Domain Users" group mapped to a unix group of rid 513
  (see option -r of smbldap-groupadd and smbldap-groupmod to set a rid) ?
-- 
Jérôme
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] winbind fails

[Hoskinson, David P]

We have a windows 2003 dc here at the university and I have successfully
setup samba-3.0.2-6.3E on a RHEL WS3 machine. The problem is that after
several hours, or several days winbind stops running and connections
fail.  I have seen instances of this on other sites, but no firm
answers.  I can provide files and logs if helpful

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Automatic SAMBA user creation from UNIX

[Mike Stewart]

I _think_ you can do it by pointing Samba at the Unix password shadow
file... something like

In your smb.conf:
update encrypted = Yes
smb passwd file = /etc/shadow
unix password sync = Yes

Mike


- Original Message - 
From: "carmoda" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, April 05, 2004 2:04 PM
Subject: [Samba] Automatic SAMBA user creation from UNIX


> Hi,
>
> i was wondering how i could have SAMBA automatically add a user when
> they are created under Unix.
>
> /carmoda
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>
>


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Need Samba 3.0.0 help

[lea]

Paul et all,
I tried to add the webserver to see if this would clear up the problem I was
having with it seeming to hang from the NT machines, but it is still not
working.
The thing istwo of our shares work...very simple shares...shared
automounts from our NIS network served off and SGI system.  We have other
shares off the SGI that do NOT work.

Home directories are out of the question.
It maps but then you can't do a blasted thing from the  samba mount.

This is getting very frustrating and I have customers banging me every day.
So any suggestions would be helpful.

Lea
-- 


On Tue, March 30, 2004 6:10 pm, Paul Gienger said:
> You can always install a basic web server on the samba box to give a
> quick 'No' rather than waiting for windows to time out waiting.
>
> Watch the logs and you'll see lots of 404's.
>
>
> [EMAIL PROTECTED] wrote:
>
>>Jason,
>>I do not have access to all the NT or XP machines that connect and map
>> drives.
>> We are not the administrators.
>>I did turn it off on one of the XP's that we have.  There was no change.
>>Any other suggestions?  Possibly something on the server?
>>
>>Lea
>>
>>
>
> --
> Paul Gienger Office:  701-281-1884
> Applied Engineering Inc. Cell:701-306-6254
> Information Systems Consultant   Fax: 701-281-1322
> URL: www.ae-solutions.commailto:[EMAIL PROTECTED]
>
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Cups printers. Won't print first page! sometimes not atall.

[Torben Thomsen]

Hi,

I use Samba and cups on my debian-box to share printers, but sometimes, 
for no apperently reason, windows machines (XP-pro and XP-home), 
sudently won't print after reboot and this is only solved by a samba 
restart. Other times the first print after win-reboot, just gets lost, 
and never apper in the cups-printing log.
It's not domain controled, but everyone is mounting their homedirs on 
login, so the connection should be established, when trying to print.

Any help would be appreciated!

Thanks Torben

I attached the smbd and the nmbd log from the last two days, and cat'ed 
the smb.conf and cupsd.conf beneath...

---
cat smb.conf
[global]
workgroup = AKC
netbios name = SERVER1
server string = AKCServer
interfaces = eth1
passdb backend = tdbsam
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
os level = 64
preferred master = Yes
domain master = No
wins support = Yes
load printers = Yes
printing = cups
printcap name = cups
[printers]
comment = All Printers
path = /tmp
browseable = no
public = yes
guest ok = yes
writable = no
printable = yes
printer admin = @lpadmin
[homes]
comment = "HomeDirs"
read only = No
create mask = 0600
directory mask = 0700
browseable = No
[share]
comment = "Share"
path = /share/
valid users = @lpadmin
write list = @lpadmin
read only = No
create mask = 0775
directory mask = 0775
guest ok = Yes
+ some more just like share



cat /etc/cups/cupsd.conf

DefaultCharset notused
LogLevel info
PageLog /var/log/cups/page_log
PreserveJobHistory Yes
PreserveJobFiles No
AutoPurgeJobs No
MaxCopies 100
MaxJobs 50
MaxJobsPerUser 20
Printcap /var/run/cups/printcap

User lp
Group lpadmin
RIPCache 50m
TempDir /tmp
Port 631
Browsing On
BrowseProtocols cups
BrowseAddress 10.10.10.*
BrowseAllow 10.10.10.*
BrowseDeny All
BrowseOrder deny,allow
BrowsePort 631
SystemGroup lpadmin


  Order Deny,Allow
  Deny From All
  Allow From 10.10.10.*


  Order Deny,Allow
  Deny From All
  Allow From 10.10.10.*

[2004/04/04 06:28:01, 0] printing/print_cups.c:cups_printer_fn(108)
  Unable to connect to CUPS server localhost - Connection refused
[2004/04/04 16:49:58, 1] smbd/service.c:make_connection_snum(705)
  akc-toshiba (192.168.0.7) connect to service billeder initially as user thorkild 
(uid=1021, gid=103) (pid 22768)
[2004/04/04 16:49:58, 1] smbd/service.c:make_connection_snum(705)
  akc-toshiba (192.168.0.7) connect to service share initially as user thorkild 
(uid=1021, gid=103) (pid 22768)
[2004/04/04 16:49:59, 1] smbd/service.c:make_connection_snum(705)
  akc-toshiba (192.168.0.7) connect to service thorkild initially as user thorkild 
(uid=1021, gid=103) (pid 22768)
[2004/04/04 20:15:56, 1] smbd/service.c:make_connection_snum(705)
  akc-toshiba (192.168.0.7) connect to service farve initially as user thorkild 
(uid=1021, gid=103) (pid 22768)
[2004/04/04 20:17:12, 1] smbd/service.c:close_cnum(887)
  akc-toshiba (192.168.0.7) closed connection to service farve
[2004/04/04 20:17:22, 1] smbd/service.c:make_connection_snum(705)
  akc-toshiba (192.168.0.7) connect to service farve initially as user thorkild 
(uid=1021, gid=103) (pid 22768)
[2004/04/04 20:18:18, 1] smbd/service.c:close_cnum(887)
  akc-toshiba (192.168.0.7) closed connection to service farve
[2004/04/04 20:20:11, 1] smbd/service.c:make_connection_snum(705)
  akc-toshiba (192.168.0.7) connect to service farve initially as user thorkild 
(uid=1021, gid=103) (pid 22768)
[2004/04/04 20:21:35, 1] smbd/service.c:close_cnum(887)
  akc-toshiba (192.168.0.7) closed connection to service farve
[2004/04/04 20:23:35, 1] smbd/service.c:make_connection_snum(705)
  akc-toshiba (192.168.0.7) connect to service farve initially as user thorkild 
(uid=1021, gid=103) (pid 22768)
[2004/04/04 20:24:52, 1] smbd/service.c:close_cnum(887)
  akc-toshiba (192.168.0.7) closed connection to service farve
[2004/04/04 20:26:36, 1] smbd/service.c:make_connection_snum(705)
  akc-toshiba (192.168.0.7) connect to service farve initially as user thorkild 
(uid=1021, gid=103) (pid 22768)
[2004/04/04 20:27:36, 1] smbd/service.c:close_cnum(887)
  akc-toshiba (192.168.0.7) closed connection to service farve
[2004/04/04 20:40:03, 1] smbd/service.c:make_connection_snum(705)
  akc-toshiba (192.168.0.7) connect to service farve initially as user thorkild 
(uid=1021, gid=103) (pid 22768)
[2004/04/04 20:41:16, 1] smbd/service.c:close_cnum(887)
  akc-toshiba (192.168.0.7) closed connection to service farve
[2004/04/04 20:47:34, 1] smbd/service.c:make_connection_snum(705)
  akc-toshiba (192.168.0.7) connect to service farve initially as user thorkild 
(uid=1021, gid=103) (pid 22768)
[2004/04/04 20:48:56, 1] smbd/service.c:close_cnum(887)
  a

Re: [Samba] Win2k Clients cant connect to Samba 2.2.8

[Jan Hill]

Radio Gong 2000 GmbH & Co. KG [Technik] wrote:

> Du musst in der Firewall  für windows 2k den port 445 öffnen, dann klappt's 
> wahrscheinlich
> 

der ist auf :-(

MfG
Jan

> Grüsse
> 
> Sascha
> 
> Am Montag, 5. April 2004 16:01 schrieb Jan Hill:
> 
>>Hello,
>>
>>I have a "small" Problem.
>>
>>I have a Network with some Samba servers, one of them is behind a
>>firewall. I can not access this Server with Win2k/2k3 Clients.
>>
>>I can access the Server with WinNT Clients and I can access the Server
>>with win2k Clients which are also behind the FW.
>>
>>I can see the Server in the browslist, but if I try to ope the link I
>>get the following Error:
>>
>>Auf \\Okenanos kann nicht zugegriffen werden
>>Der angegebene Netzwerkname ist nicht mehr verfügbar
>>
>>my bad translation:
>>
>>okenanos can not be accessed
>>the requested host is no longer existent
>>
>>
>>All windows PC have the latest Patches/SP.
>>
>>Thanks for help
>>
>>Jan
> 
> 


-- 
Dipl.-Inf. Jan Hill +49(0)3677-694566
TU Ilmenau/PATONPF 10 05 65 D-98684 Ilmenau
Langewiesener Str. 37   Zimmer CC425
http://www.PATON.TU-Ilmenau.DE


signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Win2k Clients cant connect to Samba 2.2.8

[Radio Gong 2000 GmbH & Co. KG [Technik]]

Du musst in der Firewall  für windows 2k den port 445 öffnen, dann klappt's 
wahrscheinlich

Grüsse

Sascha

Am Montag, 5. April 2004 16:01 schrieb Jan Hill:
> Hello,
>
> I have a "small" Problem.
>
> I have a Network with some Samba servers, one of them is behind a
> firewall. I can not access this Server with Win2k/2k3 Clients.
>
> I can access the Server with WinNT Clients and I can access the Server
> with win2k Clients which are also behind the FW.
>
> I can see the Server in the browslist, but if I try to ope the link I
> get the following Error:
>
> Auf \\Okenanos kann nicht zugegriffen werden
> Der angegebene Netzwerkname ist nicht mehr verfügbar
>
> my bad translation:
>
> okenanos can not be accessed
> the requested host is no longer existent
>
>
> All windows PC have the latest Patches/SP.
>
> Thanks for help
>
> Jan

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Win2k Clients cant connect to Samba 2.2.8

[Jan Hill]

Hello,

I have a "small" Problem.

I have a Network with some Samba servers, one of them is behind a
firewall. I can not access this Server with Win2k/2k3 Clients.

I can access the Server with WinNT Clients and I can access the Server
with win2k Clients which are also behind the FW.

I can see the Server in the browslist, but if I try to ope the link I
get the following Error:

Auf \\Okenanos kann nicht zugegriffen werden
Der angegebene Netzwerkname ist nicht mehr verfügbar

my bad translation:

okenanos can not be accessed
the requested host is no longer existent


All windows PC have the latest Patches/SP.

Thanks for help

Jan



signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba and Multiple NICs

[L. Mark Stone]

On Mon, 2004-04-05 at 09:24, Alexander Sbitnev wrote:
> Hello AndyLiebman,
> 
> Monday, April 5, 2004, 5:23:43 AM, you wrote:
> 
> Aac> Hi, 
> 
> Aac> I'm a happy Samba user. I've been working sucessfully in Linux for the past 6
> Aac> months. I've built a Linux Server with very fast storage and I'm connecting
> Aac> it to many Windows XP "video editing workstations" via Gigabit Ethernet (all
> Aac> NICs using Jumbo Frames, by the way). 
> 
> Aac> Now I want to see if I can increase my data flow in and out of the Server so
> Aac> that more workstations to connect to it simultaneously. I'm pretty much maxing
> Aac> out on the amount of data that can flow through a single Gigabit Ethernet
> Aac> connection (from the Server to a single Gigabit Switch). So I'm wondering what's
> Aac> involved in adding a second NIC to my Server and dividing my workstations into
> Aac> two groups. 

> 
> Can't explain my solution in detail but i will try to give you right
> direction. First of all take a look at the Advanced linux routing
> howto. We did things similiar to your request but with two
> FastEthernet interfaces. First of all we just install two interface
> cards and give to it ips within the same network. 10.10.10.40 and
> 10.10.10.41 for example (both mask 255.0.0.0). Next we setup a routing like
> that


If your NICs and your switch supports it, "teaming" is a more elegant
and efficient approach and won't require you to reconfigure your network
settings.

In a "teaming" environment, the NIC drivers support bundling several
individual NICs together so that they appear as one NIC to the operating
system.  This is much like a RAID controller "teams" several physical
hard drives together to appear as one drive to the operating system.

We do this a lot with name-brand file servers (Compaq, HP, etc.). Load
balancing and other neat features are handled by the driver
automatically, with nothing to configure manually in the operating
system.

On the switch end, you do need a managed switch so you can "team"
multiple ports together as one port. Again, the switch will handle load
balancing, routing, etc.

Compaq provides drivers that support SuSE; the switch end obviously
doesn't care what operating system you are running. But, there are
several standards, and you want to make sure that your NICs and your
switch support the same standard! (Most better-quality hardware support
multiple standards, so this isn't a big deal except if you have low-end
hardware.)

I hope this is helpful; if your hardware supports this, it will be a lot
less work to configure.  Possibly the average throughputs will be higher
too.

Mark

-- 
_
A Message From  L. Mark Stone

President
Reliable Networks of Maine, LLC
477 Congress Street, 5th Floor
Portland, ME 04107

Tel: (207) 772-5678
Web: http://www.rnome.com


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba eating to much of servers resources

[Oleksiy Podopryhora]

tried but still no luck...





> fc-1 is up to 3.0.2-7, should be easy enough to get up2date.
>
> That would be the first thing that I would do.
>
> Also, check the log files in /var/log/samba for any other clues
>
> Craig
>
>






> On Fri, 2004-04-02 at 04:29, Oleksiy Podopryhora wrote:
>> I run Samba 3.0.0-15 on Linux ( FEDORA CORE 1) and it acts as a DOMAIN
>> CONTROLER for our small networks which comprises of 4 WINDOWS XP
>> PROFESSINAL PCs. But we have a problem with samba eating to much of
>> servers resources. If I reboot the server it cures the problem but soot
>> it
>> appears again. Anyone knows what might be a problem?
>>
>> Thanks to all.
>>
>>
>> Snapshot 1
>> PID USER PRI  NI  SIZE  RSS SHARE STAT %CPU %MEM   TIME CPU COMMAND
>> 4222 root  34  19  277M 100M   584 R N   0.1 40.4   2:49   0 samba
>>
>> Snapshot 2
>> PID USER PRI  NI  SIZE  RSS SHARE STAT %CPU %MEM   TIME CPU COMMAND
>> 2938 root  16   0  1744  988   988 S97.4  0.3  1055m   0 smbd
>>
>>
>> Snapshot 3
>> PID USER PRI  NI  SIZE  RSS SHARE STAT %CPU %MEM   TIME CPU COMMAND
>> 12023 root  25   0  2400 1572  1528 R44.1  0.6 526:34   0 smbd
>> 11972 root  25   0  2400 1564  1528 R43.9  0.6 530:33   0 smbd
> 


--
SECURITY NOTICE
This email has been virus scanned

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba and Multiple NICs

[Alexander Sbitnev]

Hello AndyLiebman,

Monday, April 5, 2004, 5:23:43 AM, you wrote:

Aac> Hi, 

Aac> I'm a happy Samba user. I've been working sucessfully in Linux for the past 6
Aac> months. I've built a Linux Server with very fast storage and I'm connecting
Aac> it to many Windows XP "video editing workstations" via Gigabit Ethernet (all
Aac> NICs using Jumbo Frames, by the way). 

Aac> Now I want to see if I can increase my data flow in and out of the Server so
Aac> that more workstations to connect to it simultaneously. I'm pretty much maxing
Aac> out on the amount of data that can flow through a single Gigabit Ethernet
Aac> connection (from the Server to a single Gigabit Switch). So I'm wondering what's
Aac> involved in adding a second NIC to my Server and dividing my workstations into
Aac> two groups. 

Aac> Is this a difficult thing to configure? Would somebody be willing to tell me
Aac> what are the crucial settings that need to be made (in smb.conf, for example,
Aac> or in /etc/*.* stuff). Do I have to create subnets? 

Aac> I'm currently working on an internal network where all the workstations have
Aac> 192.168.1.XXX static addresses. These workstations occasionally connect to the
Aac> Internet through a Cable/DSL router that's also on the network and that
Aac> serves as the gateway. 

Aac> Is it possible to give my server two fixed IP addresses (one corresponding to
Aac> each NIC) and then connect each NIC to its own switch, which would then be
Aac> connected to half of the workstations? I tried this today and had no luck.

Aac> And how can I make it possible for each workstations to have access to the
Aac> Internet. Presumably, only one switch can be connected to the cable/dsl router
Aac> -- or else data traffic could go through the cable/dsl router to get from a
Aac> workstation to the Server. But I suppose that's the least of my worries.

Aac> I'm not looking for somebody else to do my homework. I've spent about 6 hours
Aac> today googling around trying to figure out what's required and I'm coming up
Aac> more confused with each article or discussion thread I read. 

Aac> I would sure appreciate it if somebody out there was willing to lend a hand.
Aac> I'm sure this is basic stuff to an IT guy, but I'm just working on this
Aac> networking stuff at a "hobby level" -- doing pretty well, but now a bit stumped.

Aac> By the way, does anybody know if this scenario is covered in the new Samba
Aac> cookbook? I'd be happy to purchase it tomorrow if I thought it would give me the
Aac> recipe to do what I'm trying to accomplish. 

Can't explain my solution in detail but i will try to give you right
direction. First of all take a look at the Advanced linux routing
howto. We did things similiar to your request but with two
FastEthernet interfaces. First of all we just install two interface
cards and give to it ips within the same network. 10.10.10.40 and
10.10.10.41 for example (both mask 255.0.0.0). Next we setup a routing like
that:

# Deleting ordinary routes
ip route del 10.0.0.0/8 dev eth0
ip route del 10.0.0.0/8 dev eth1
# Adding multipath route
ip route add 10.0.0.0/8 scope global nexthop via 10.10.10.40 dev eth0
   weight 1 nexthop via 10.10.10.41 dev eth1 weight 1
ip route flush cache

After that got something like connection balancing for OUTGOING
traffic over two our interfaces. It's just keeps balance of clients
over interfaces, but not the clients bandwidth. But it's better than
nothing. The more clients you have, the better balance you will
reach.

-- 
Best regards,
 Alexandermailto:[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba and SMB Signing.

[reacend]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Evans Chris - cevans wrote:

| I have a question I hope one of you can help me with.
|
| In what version did Samba begin to include support for SMB signing?
| It looks like 3.0 but I need to be sure.
|
| According to http://de.samba.org/samba/whatsnew/samba-3.0.0rc4.html
|    on line
| 14 is states:
|
| 14) Full support for client and server SMB signing to ensure
| compatibility with default Windows 2003 security settings.
|
| Any help you can provide will be appreciated.
|
| Thanks...Chris
|
|
| **
|  The information contained in this communication is confidential,
| is intended only for the use of the recipient named above, and may
| be legally privileged. If the reader of this message is not the
| intended recipient, you are hereby notified that any dissemination,
|  distribution, or copying of this communication is strictly
| prohibited. If you have received this communication in error,
| please re-send this communication to the sender and delete the
| original message or any copy of it from your computer system. Thank
| You.
|
Hi Evans,
if you only want to mount a share from a windows 2003 server and don't
want to disable smb signing,
you need this:
http://us1.samba.org/samba/Linux_CIFS_client.html

If you want that the samba server act like a win2k3 domain member than
you need kerberos, but I'm also not informed and I got seen only
solutions with disabling smb signing...
her are some infos about that:

http://linux.ittoolbox.com/documents/document.asp?i=2666

Best Regards,
Mark Nicolas
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFAcV7FoKtmDMYNuGsRAp0rAKCs5Qgpzf7KyIpvj6Il00dddWHd/gCgirW+
4oDHkz3k6UkImZkN3zcf0BM=
=ZaJs
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba and SMB Signing.

[Evans Chris - cevans]

I have a question I hope one of you can help me with. 
 
In what version did Samba begin to include support for SMB signing? It looks
like 3.0 but I need to be sure.
 
According to http://de.samba.org/samba/whatsnew/samba-3.0.0rc4.html
  on line 14 is
states:
 
14) Full support for client and server SMB signing to ensure compatibility
with default Windows 2003 security settings.

Any help you can provide will be appreciated. 
 
Thanks...Chris


**
The information contained in this communication is
confidential, is intended only for the use of the recipient
named above, and may be legally privileged.
If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination, 
distribution, or copying of this communication is strictly
prohibited.
If you have received this communication in error,
please re-send this communication to the sender and
delete the original message or any copy of it from your
computer system. Thank You.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba and Multiple NICs

[AndyLiebman]

I>n a message dated 4/4/2004 11:13:44 PM Eastern Daylight Time, 
[EMAIL PROTECTED] >writes:
>Andy,

>I'd have to say you've got yourself a bit of a conundrum.  Basically at
>this point, if you want to double the capacity your server can output, I
>would recommend segmenting your network into two VLANs (or separate
>switches if your switches aren't capable of doing VLANs, although any
>switch worth it's snuff is).
>
>However, before I go into more detail about how to actually accomplish
>that, what kind of hardware is this running on?  I'd be seriously
>concerned that you'd be wasting a lot of time and effort if your
>hardware isn't capable of capping two GigE cards.  I'd attach one
>machine with a GigE interface via a crossover cable to the second GigE
>interface on your Samba server and leave the other interface connected
>to the switch you have now.  I'd then try to cap the interface from the
>side connected to the switch and from the side connected to another
>computer via the crossover and see if you can actually exceed greater
>than the speed one GigE is going to give you (or at least what you were
>getting previously).  Also, some details on your hardware would be
>helpful.
>
>Clint

Clint, 

Thanks for your reply. 

What I want to do is straightforward in concept (perhaps difficult in 
practice, though I doubt it). 

I want to put two Gigabit Ethernet Cards in one Linux server -- and have each 
card talk to half the Windows workstations in my place. In part, I'm looking 
for a way to get more data in and out of my server (the storage part can 
support it). Each workstation is running a video editing application and it's 
looking for about 4 to 4.5 MB/sec of data. The data is time critical. It HAS to 
arrive when needed, or the editing application stops. So far I'm doing okay with 
just one network segment, but I think I can add a few additional workstations 
if I split the network -- because my storage subsystem is capable of doing 
well over 100 MB/sec -- and that's a lot more than I'm going to push down one 
Gigabit Ethernet pipe. 

In part, I want to configure the two Ethernet cards differently so that one 
can talk to workstations that are optimized for "Gigabit Ethernet and Jumbo 
Frames" and the other can talk to workstations that only have "normal Ethernet" 
capabilities. 

I'm NOT looking to get more data to a single workstation. I'm looking to get 
the maximum number of workstations that can all receive the 4 to 4.5 MB/sec 
that they need. 

By the way, my Server hardware is: 
3.06 Ghz single processor Xeon, 1 GB RAM, Intel Gigabit nics, fast RAID 
arrays, two switches capable of supporting Jumbo Frames. 

Andy
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Automatic SAMBA user creation from UNIX

[carmoda]

Hi,

i was wondering how i could have SAMBA automatically add a user when
they are created under Unix.

/carmoda

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] SAMBA UNIX and Windows Permissions with winbindd

[Murray Robert-rmurra01]

Hi

Is it possible to have both unix permissions and Windows permissions on the same 
Directory?
We are Migrating to a SAMBA fileserver, and want this functionality.

I have a Win2k AD Domain, and SAMBA 2.2.8a , with these basic settings
security = domain
and winbindd running
nt acl support yes

 I currently have winbind providing me with fully functional windows permissions..
BUT .. also creating Windows-Like UID's within the unix permissions .
How can I get it to stop this behaviour, its going to break my UNIX setup.

If I avoid using winbindd , can I still have fully functional windows permissions?

rgds
rob

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Alexander Skwar
Sent: 05 April 2004 12:15
To: [EMAIL PROTECTED]
Subject: [Samba] Re: special chars in windows filenames


Am 05 Apr 2004 12:58:38 +0200 schrieb Fernando Pintabona:

> Check the "unix charset" setting in smb.conf.
> For Spanish, I had to add the following:
> unix charset = CP850

I'm having:

dos charset = 850
unix charset= ISO8859-1

Alexander Skwar
-- 
downtime (noun.) The period during which a system is error-free and immune
from user input.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba can't be a Domain Member of a Windows 2003 Network ?

[reacend]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi there can I configure samba to be a Domain member in a Windows 2003
Domain?
Is it been possible to make this without disabling SMB Signing on the
win2k3 DC server?
Best Regards,
Mark Nicolas
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFAcVSkoKtmDMYNuGsRAkdBAJ9i6XDbr2v6BsowoLFDzc1X/5bLaACeKSFI
/Y2oqbNsnULQaYNkJix+Dgg=
=TQV5
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] HELP : VFS audit module...

[Suhaimi Jamalludin]

BERAMICE, Frantz wrote:

Hello,

I have  problem with the audit VFS module.
Connexion and deconnexion actions are logged, but the others ( open file...)
are not logged in the file "/var/log/messages".
I use SAMBA 3.0.2a for RedHat. (Binarry package for RedHat)

My service :
...
[fmphtm]
   path = /expl/fic/fmphtm
   vfs objects = audit
   valid users = @fmp
   read only = No
   create mask = 0640
   directory mask = 0770
...
The result after that the file is open :
...
avr  5 13:10:23 lc2002 smbd_audit[2401]: connect to service fmphtm by user
beramicf
avr  5 13:10:23 lc2002 smbd_audit[2401]: disconnected
...
Why the file open do not appear ?

Could you help me, please.

Im so sorry for my english level...

Frantz
 

Hi Frantz,

Try to use :
vfs objects = extd_audit
This is for extra Audit log that you want.

regards,
suhaimi


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] How to print from Linux to printer connected to WIn98

[Vladimir Khovanskov]

I have Linux Slackware 9.0 and HP LaserJet 4 connected to another PC with 
Win98. How to configure samba to print from Linux to the printer.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] how to create a computer account

[Christian Lange]

[CC me on replies because i`m not subscribed]

Hello,

I have Samba 3.0.2a and a w2k domain-controller installed.
I wanted to test creating computer accounts in special
containers on the active directory.
Creating the computer account inside the standard folder
"Computers" works fine. But how can I create an account
inside an userdefined folder / organizational directory?
I have tried

\\

or

\

and many other combinations.

The machine account has been created neither in
"Computers" nor anywhere.
Furthermore I think it is not possible to create an
organizational directory or folder under "Computers".
"Computers" seems to be a system directory. I have no chance there
to create folders or organizational directories.
Correct me if i am wrong.

Thanks in advance

Christian Lange

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] HELP : VFS audit module...

[BERAMICE, Frantz]

Hello,

I have  problem with the audit VFS module.
Connexion and deconnexion actions are logged, but the others ( open file...)
are not logged in the file "/var/log/messages".

I use SAMBA 3.0.2a for RedHat. (Binarry package for RedHat)

My service :
...
[fmphtm]
path = /expl/fic/fmphtm
vfs objects = audit
valid users = @fmp
read only = No
create mask = 0640
directory mask = 0770
...

The result after that the file is open :
...
avr  5 13:10:23 lc2002 smbd_audit[2401]: connect to service fmphtm by user
beramicf
avr  5 13:10:23 lc2002 smbd_audit[2401]: disconnected
...

Why the file open do not appear ?

Could you help me, please.

Im so sorry for my english level...

Frantz
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: special chars in windows filenames

[Alexander Skwar]

Am 05 Apr 2004 12:58:38 +0200 schrieb Fernando Pintabona:

> Check the "unix charset" setting in smb.conf.
> For Spanish, I had to add the following:
> unix charset = CP850

I'm having:

dos charset = 850
unix charset= ISO8859-1

Alexander Skwar
-- 
downtime (noun.) The period during which a system is error-free and immune
from user input.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] special chars in windows filenames

[Fernando Pintabona]

Check the "unix charset" setting in smb.conf.
For Spanish, I had to add the following:
unix charset = CP850

Cheers

Fernando P

On Mon, 2004-04-05 at 12:47, Joachim Thüx wrote:
> Hi folks!
> 
> I upgraded a red hat linux fileserver (kernel version 2.4.18-14)
> from samba 2.x to samba 3.02.
> 
> After the upgrade, the special chars in windows filenames
> (German Umlaute) were no more visible to clients but either
> substituted with a little black rectangle or completely suppressed -
> depending on the client operating system (W2000/W98).
> 
> Within the archived list I found a hint that the smb options dos/unix charset
> might not be the solution, but it could be related to kernel restrictions.
> 
> Any hints?
> 
> Regards,
> 
> Joachim


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] special chars in windows filenames

[Joachim Thüx]

Hi folks!

I upgraded a red hat linux fileserver (kernel version 2.4.18-14)
from samba 2.x to samba 3.02.
After the upgrade, the special chars in windows filenames
(German Umlaute) were no more visible to clients but either
substituted with a little black rectangle or completely suppressed -
depending on the client operating system (W2000/W98).
Within the archived list I found a hint that the smb options dos/unix charset
might not be the solution, but it could be related to kernel restrictions.
Any hints?

Regards,

Joachim

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbldap_tools

[Matthias Spork]

Brendon Standing schrieb:

I am having a problem getting samba ldap tools to work.

I am running Mandrake 10.0 community and have installed ldap and samba
to use to work in conjuction as a samba domain server. It has
automatically install the smbldap tools for user and group creation and
modifications. The error's that I am getting however are something like
this:
failed to perform search; invalid DN at
/usr/share/samba/scripts//smbldap_tools.pm line 154,  line 283.
Can't call method "get_value" on an undefined value at
/usr/bin/smbldap-useradd line 152,  line 283.
The line of code in this config file is:
$mesg->code && warn "failed to perform search; ", $mesg->error;
Any idea's?
Did you configure LDAP and the ldap-Scripts?

matz
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] samba3 PDC machine trust acount changes to user-account

[Mario Hinterreiter]

Hi to all,

I have a problem with samba3 working as a PDC and can't find anything about 
this but it drives me mad. Perhaps some of you saw this before.

Installed I've got the debian paket v3.0.2a-1.

After creating a machine trust account with: "pdbedit -a -m -u MACHINE" it 
seems correct -> "pdbedit -Lv MACHINE" lists a "W" in account flags. 
But that moment I enter the domain with the win2k client - which still 
works fine - the account flag changes into "U" and so at logon samba 
doesn't find an account for the machine.

As a backend I use smbpasswd again.
With tdbsam I had nearby the same behavior, with the only difference that 
the account flag was empty instead of changing to "U".

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] guest account parameter in service section

[Beninga Reiner]

Hi,

Now I have updated from samba 2.2.5 to 3.0.2. But the anonymous
write access to serveral share sections doesn't work any more.

It seems that the guest account parameter is now only allowed in
the global section since I get the error message from testparm:
Global parameter guest account found in service section!

Why can't I assign different guest accounts to different sections
any more?

Regards

Reiner Beninga

-- 
Reiner Beninga, FSC EP LP SM 5
mailto:[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] smbldap_tools

[Brendon Standing]

Hi all,

I am having a problem getting samba ldap tools to work.

I am running Mandrake 10.0 community and have installed ldap and samba
to use to work in conjuction as a samba domain server. It has
automatically install the smbldap tools for user and group creation and
modifications. The error's that I am getting however are something like
this:
failed to perform search; invalid DN at
/usr/share/samba/scripts//smbldap_tools.pm line 154,  line 283.
Can't call method "get_value" on an undefined value at
/usr/bin/smbldap-useradd line 152,  line 283.

The line of code in this config file is:
$mesg->code && warn "failed to perform search; ", $mesg->error;

Any idea's?

Brendon.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3.0.x and Netapp filers

[Jeremy Allison]

On Mon, Apr 05, 2004 at 09:40:57AM +0200, Thomas Eitzenberger wrote:
> 
> Our support states a cite from netapp as: "samba is not compliant with 
> the specs"
> 
> Could anyone suply me with ammunition to counter that or knows why the 
> netapp does not allow to authenticate/connect (even not for only listing 
> the shares)

This is untrue. If you're having problems please
escalate up NetApp support - if you keep having difficulty
I can give you some contacts within NetApp to get support
to give you the right answer.

We test with NetApp at Connectathon and at the CIFS
conference, up to and including joining NetApp filers
to a Samba domain.

Samba and NetApp filers work very well together.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba disbales accounts

[Tilo Lutz]

Hi 
 
I'm using Samba 3.03 and LDAP-backend. 
If a user enters a wrong password the account 
will be disabled immediately. 
 
I read it's possible to disable accounts after X wrong 
passwords. 
Where can I set X? 
 
Is it possible to disable that new feature? 
 
Tilo 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] another "Failed to verify incoming ticket"

[pgs]

Hello everyone,

I'm sorry for this long post, but I think there is a real understanding
problem for many people on ADS domain membership.
I'm not the first to post about this type of problem, however I didn't find
an answer to it in the archives and I followed the HOWTO-collection.

Well, this is what I'm doing :

I am using samba-3.0.1 compiled from source,
MIT kerberos 1.3.1 compiled from source
openldap 2.1.25 compiled from source

on a non-standard linux distribution.

I have:
a win2k DC that controls a test domain, my linux domain member with samba and
kerberos and a WinXP workstation.

I made my configurations as follows :

smb.conf :

[global]
  netbios name = linuxbox
  workgroup = test
  realm = TEST.COM

  security = ads

  encrypt passwords = yes

  obey pam restrictions = yes
  idmap uid = 1-10813
  idmap gid = 1-10813
  winbind separator = -
  winbind enum users = yes
  winbind enum groups = yes
  template homedir = /share/%U
  winbind use default domain = yes

  log file = /var/log/samba/log.%m
  log level = 3


krb5.conf :

[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 ticket_lifetime = 24000
 default_realm = TEST.COM
 default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5
 default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5
 permitted_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5
 dns_lookup_realm = false
 dns_lookup_kdc = false

[realms]
 TEST.COM = {
  kdc = ntserver.test.com
  admin_server = ntserver.test.com
  default_domain = test.com
 }

[domain_realm]
 test.com = TEST.COM
 .test.com = TEST.COM

I also tried with enctypes rc4-hmac, the results were the same.

I ran successively :
$ nmbd -D
$ smbd -D
$ kinit [EMAIL PROTECTED]
$ net ads join -U administrator
$ winbindd

All this works fine, I can see my ADS users, klist gives me :
$ klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [EMAIL PROTECTED]

Valid starting ExpiresService principal
04/02/04 13:47:34  04/02/04 23:47:40  krbtgt/[EMAIL PROTECTED]
renew until 04/03/04 13:47:34


Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached

Then I run on my linux box :
$ smbclient -k //linuxbox/pascal -U pascal

and get a 
tree connect failed: NT_STATUS_ACCESS_DENIED

If I run klist after this command I get the following :
$ klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [EMAIL PROTECTED]

Valid starting ExpiresService principal
04/02/04 13:47:34  04/02/04 23:47:40  krbtgt/[EMAIL PROTECTED]
renew until 04/03/04 13:47:34
04/02/04 13:50:52  04/02/04 23:47:40  [EMAIL PROTECTED]
renew until 04/03/04 13:47:34


Kerberos 4 ticket cache: /tmp/tkt0
...

/var/log/samba/log.linuxbox is empty bu I get the following lines in 
/var/log/samba/log.172.16.1.58 :

[2004/04/02 14:57:24, 3] smbd/oplock.c:init_oplocks(1226)
  open_oplock_ipc: opening loopback UDP socket.
[2004/04/02 14:57:24, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
  Linux kernel oplocks enabled
[2004/04/02 14:57:24, 3] smbd/oplock.c:init_oplocks(1257)
  open_oplock ipc: pid = 31339, global_oplock_port = 33200
[2004/04/02 14:57:24, 3] smbd/process.c:process_smb(890)
  Transaction 0 of length 183
[2004/04/02 14:57:24, 3] smbd/process.c:switch_message(685)
  switch message SMBnegprot (pid 31339)
[2004/04/02 14:57:24, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/04/02 14:57:24, 3] smbd/negprot.c:reply_negprot(455)
  Requested protocol [PC NETWORK PROGRAM 1.0]
[2004/04/02 14:57:24, 3] smbd/negprot.c:reply_negprot(455)
  Requested protocol [MICROSOFT NETWORKS 1.03]
[2004/04/02 14:57:24, 3] smbd/negprot.c:reply_negprot(455)
  Requested protocol [MICROSOFT NETWORKS 3.0]
[2004/04/02 14:57:24, 3] smbd/negprot.c:reply_negprot(455)
  Requested protocol [LANMAN1.0]
[2004/04/02 14:57:24, 3] smbd/negprot.c:reply_negprot(455)
  Requested protocol [LM1.2X002]
[2004/04/02 14:57:24, 3] smbd/negprot.c:reply_negprot(455)
  Requested protocol [DOS LANMAN2.1]
[2004/04/02 14:57:24, 3] smbd/negprot.c:reply_negprot(455)
  Requested protocol [Samba]
[2004/04/02 14:57:24, 3] smbd/negprot.c:reply_nt1(329)
  using SPNEGO
[2004/04/02 14:57:24, 3] smbd/negprot.c:reply_negprot(532)
  Selected protocol NT LANMAN 1.0
[2004/04/02 14:57:24, 3] smbd/process.c:process_smb(890)
  Transaction 1 of length 1488
[2004/04/02 14:57:24, 3] smbd/process.c:switch_message(685)
  switch message SMBsesssetupX (pid 31339)
[2004/04/02 14:57:24, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/04/02 14:57:24, 3] smbd/sesssetup.c:reply_sesssetup_and_X(591)
  wct=12 flg2=0xc801
[2004/04/02 14:57:24, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(471)
  Doing spnego session setup
[2004/04/02 14:57:24, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(502)
  NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[]
[2004/04/02 14:57:24, 3] smbd/s

[Samba] winbind stops authenticating until a restart.

[Thomas Lang]

I'm runnign Samba 3.0.2a on Suse Linux 8.2 and I've the same problem as
descriped here http://lists.samba.org/archive/samba/2003-July/070784.html .
Is this problem already solved. If yes can anybody tell me how?
best regards
thomas
Thomas Lang, INTENTIA Austria
System Engineer
Seering 5/32, A-8141 Unterpremstätten / AUSTRIA
Phone: +43 (0) 3135 56550
Cell Phone: +43 (0) 664 6119619
Internet e-Mail Disclaimer
This e-mail and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you are not the intended recipient you are notified that any use,
disclosure, copying or distribution of the information is prohibited. In
such case, you should destroy this message and kindly notify the sender by
reply e-mail.The views expressed in this e-mail and any attachments are
personal and, unless stated explicitly, do not represent the views of
Intentia. Furthermore, Intentia will not be bound by this e-mail.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Unable to delete folders in samba shares

[mlist]

>On Friday 02 April 2004 20:57, Radio Gong 2000 GmbH & Co. KG [Technik]  
wrote:
> Please send smb.conf... To many questions...
>

Sascha, here is the smb.conf file. hope u can help.

-- 
Regards,
MList

# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options (perhaps too
# many!) most of which are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash) 
# is a comment and is ignored. In this example we will use a #
# for commentry and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command "testparm"
# to check that you have not made any basic syntactic errors. 
#


#=== Global Settings =
[global]

# 1. Server Naming Options:
# workgroup = NT-Domain-Name or Workgroup-Name
   workgroup = LINUXHOUSE

# netbios name is the name you will see in "Network Neighbourhood",
# but defaults to your hostname
  netbios name = SERVER01

# server string is the equivalent of the NT Description field
   server string = Server %v

# Message command is run by samba when a "popup" message is sent to it.
# The example below is for use with LinPopUp:
; message command = /usr/bin/linpopup "%f" "%m" %s; rm %s

# 2. Printing Options:
# CHANGES TO ENABLE PRINTING ON ALL CUPS PRINTERS IN THE NETWORK
# (as cups is now used in linux-mandrake 7.2 by default)
# if you want to automatically load your printer list rather
# than setting them up individually then you'll need this
   printcap name = cups
   load printers = yes

# It should not be necessary to spell out the print system type unless
# yours is non-standard. Currently supported print systems include:
# bsd, sysv, plp, lprng, aix, hpux, qnx, cups
   printing = cups

# Samba 2.2 supports the Windows NT-style point-and-print feature. To
# use this, you need to be able to upload print drivers to the samba
# server. The printer admins (or root) may install drivers onto samba.
# Note that this feature uses the print$ share, so you will need to 
# enable it below.
# This parameter works like domain admin group:
# printer admin = @ 
   printer admin = @adm root
# This should work well for winbind:
;   printer admin = @"Domain Admins"

# 3. Logging Options:
# this tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba/log.%m

# Put a capping on the size of the log files (in Kb).
   max log size = 50

# Set the log (verbosity) level (0 <= log level <= 10)
; log level = 3

# 4. Security and Domain Membership Options:
# This option is important for security. It allows you to restrict
# connections to machines which are on your local network. The
# following example restricts access to two C class networks and
# the "loopback" interface. For more examples of the syntax see
# the smb.conf man page. Do not enable this if (tcp/ip) name resolution does
# not work for all the hosts in your network.
   hosts allow = 192.168.0. 127.0.0.1

# Uncomment this if you want a guest account, you must add this to /etc/passwd
# otherwise the user "nobody" is used
  guest account = guest
# Allow users to map to guest:
  map to guest = bad user

# Security mode. Most people will want user level security. See
# security_level.txt for details.
   security = user
# Use password server option only with security = server or security = domain
# When using security = domain, you should use password server = *
;   password server = 
;   password server = *

# Password Level allows matching of _n_ characters of the password for
# all combinations of upper and lower case.
  password level = 8
  username level = 8

# You may wish to use password encryption. Please read
# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
# Do not enable this option unless you have read those documents
# Encrypted passwords are required for any use of samba in a Windows NT domain
# The smbpasswd file is only required by a server doing authentication, thus
# members of a domain do not need one.
  encrypt passwords = yes
  smb passwd file = /etc/samba/smbpasswd

# The following are needed to allow password changing from Windows to
# also update the Linux system password.
# NOTE: Use these with 'encrypt passwords' and 'smb passwd file' above.
# NOTE2: You do NOT need these to allow workstations to change only
#the encrypted SMB passwords. They allow the Unix password
#to be kept in sync with the SMB password.
  unix password sync = Yes
# You either need to setup a passwd program and passwd chat, or
# enable pam password change
;  pam password change = yes
  passwd program = /usr/bin/passwd %u
  passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* 
%n\n*passwd:*all*authentication*tokens*updated*successfully*

# Unix users can map to different SMB User names
  u

[Samba] Samba 3.0.x and Netapp filers

[Thomas Eitzenberger]

Hi !

Siemens is migrating away from Windows fileservers to Netapp Filers. 
First I thought great thats cool get rid of some more MS boxes...
But now I face troubles connecting to the shares on the filers.

Our support states a cite from netapp as: "samba is not compliant with 
the specs"

Could anyone suply me with ammunition to counter that or knows why the 
netapp does not allow to authenticate/connect (even not for only listing 
the shares)

best regards
--
*Eitzenberger Thomas*
Head COC Mobile Apps
PSE CSS PSG Ref
Siemens AG Austria
/ office: +43 51707 63680
mobile: +43 676 6798191
email: [EMAIL PROTECTED] /
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Why samba-3.0.2 give me this error message?

[Suhaimi Jamalludin]

Hi All,

Need your expert advice regarding Samba3 + OpenLDAP.
I have configure openldap and Samba3 on my FreeBSD5.2.1. I have make 
Samba3 as a PDC on and Authenticate using LDAP.
Everythings works fine I can login using sambauser1 to my Samba3-PDC 
and do profile roaming. However I come accross bellow error message on 
my /var/log/message and it's really annoying me.

Can some body advice me how to make this error go away...I'm in the 
final phase to real the system to my user.

Short Error Message Desc:
---
failed to decode PDU
process_request_pdu: failed to do schannel processing.
smbldap_open: cannot access LDAP when not root..
ldapsam_search_one_group: Problem during the LDAP search: LDAP error: 
(Insufficient access)
ldapsam_search_one_group: Query was: ou=groups,dc=test,dc=com, 
(&(objectClass=posixGroup)(gidNumber=4294967295))

OS: FreeBSD 5.2.1-RELEASE-p4
Application:openldap-server-2.1.29, openldap-client-2.1.29,  
samba-3.0.2a_1,1,  pam_ldap-1.6.9, nss_ldap-1.204_5

Really appreciate your advice.

Thanks & regards,
Suhaimi
# more /var/log/message
Apr 5 14:58:38 my-svr smbd[1034]: [2004/04/05 14:58:38, 0] 
rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
Apr 5 14:58:38 my-svr smbd[1034]:  failed to decode PDU
Apr 5 14:58:38 my-svr smbd[1034]: [2004/04/05 14:58:38, 0] 
rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
Apr 5 14:58:38 my-svr smbd[1034]:  process_request_pdu: failed to do 
schannel processing.
Apr 5 14:59:21 my-svr kernel: Connection attempt to TCP 10.1.6.111:80 
from 10.1.6.185:4472 flags:0x02
Apr 5 14:59:22 my-svr last message repeated 2 times
Apr 5 14:59:23 my-svr smbd[1036]: [2004/04/05 14:59:23, 0] 
smbd/service.c:make_connection(857)
Apr 5 14:59:23 my-svr smbd[1036]:  suhaimi-wxp (10.1.6.185) couldn't 
find service home
Apr 5 14:59:23 my-svr smbd[1036]: [2004/04/05 14:59:23, 0] 
smbd/service.c:make_connection(857)
Apr 5 14:59:23 my-svr smbd[1036]:  suhaimi-wxp (10.1.6.185) couldn't 
find service home
Apr 5 14:59:23 my-svr kernel: Connection attempt to TCP 10.1.6.111:80 
from 10.1.6.185:4473 flags:0x02
Apr 5 14:59:24 my-svr last message repeated 2 times
Apr 5 14:59:50 my-svr smbd[1036]: [2004/04/05 14:59:50, 0] 
lib/smbldap.c:smbldap_open(807)
Apr 5 14:59:50 my-svr smbd[1036]:  smbldap_open: cannot access LDAP when 
not root..
Apr 5 14:59:50 my-svr smbd[1036]: [2004/04/05 14:59:50, 0] 
passdb/pdb_ldap.c:ldapsam_search_one_group(1668)
Apr 5 14:59:50 my-svr smbd[1036]:  ldapsam_search_one_group: Problem 
during the LDAP search: LDAP error: (Insufficient access)
Apr 5 14:59:50 my-svr smbd[1036]:  ldapsam_search_one_group: Query was: 
ou=groups,dc=test,dc=com, 
(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))
Apr 5 14:59:50 my-svr smbd[1036]: [2004/04/05 14:59:50, 0] 
lib/smbldap.c:smbldap_open(807)
Apr 5 14:59:50 my-svr smbd[1036]:  smbldap_open: cannot access LDAP when 
not root..
Apr 5 14:59:50 my-svr smbd[1036]: [2004/04/05 14:59:50, 0] 
passdb/pdb_ldap.c:ldapsam_search_one_group(1668)
Apr 5 14:59:50 my-svr smbd[1036]:  ldapsam_search_one_group: Problem 
during the LDAP search: LDAP error: (Insufficient access)
Apr 5 14:59:50 my-svr smbd[1036]:  ldapsam_search_one_group: Query was: 
ou=groups,dc=test,dc=com, (&(objectClass=posixGroup)(gidNumber=4294967295))
Apr 5 14:59:50 my-svr smbd[1036]: [2004/04/05 14:59:50, 0] 
lib/smbldap.c:smbldap_open(807)
Apr 5 14:59:50 my-svr smbd[1036]:  smbldap_open: cannot access LDAP when 
not root..
Apr 5 14:59:50 my-svr smbd[1036]: [2004/04/05 14:59:50, 0] 
passdb/pdb_ldap.c:ldapsam_search_one_group(1668)
Apr 5 14:59:50 my-svr smbd[1036]:  ldapsam_search_one_group: Problem 
during the LDAP search: LDAP error: (Insufficient access)
Apr 5 14:59:50 my-svr smbd[1036]:  ldapsam_search_one_group: Query was: 
ou=groups,dc=test,dc=com, 
(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))
Apr 5 14:59:50 my-svr smbd[1036]: [2004/04/05 14:59:50, 0] 
lib/smbldap.c:smbldap_open(807)
Apr 5 14:59:50 my-svr smbd[1036]:  smbldap_open: cannot access LDAP when 
not root..
Apr 5 14:59:50 my-svr smbd[1036]: [2004/04/05 14:59:50, 0] 
passdb/pdb_ldap.c:ldapsam_search_one_group(1668)
Apr 5 14:59:50 my-svr smbd[1036]:  ldapsam_search_one_group: Problem 
during the LDAP search: LDAP error: (Insufficient access)
Apr 5 14:59:50 my-svr smbd[1036]:  ldapsam_search_one_group: Query was: 
ou=groups,dc=test,dc=com, (&(objectClass=posixGroup)(gidNumber=4294967295))
Apr 5 14:59:50 my-svr smbd[1036]: [2004/04/05 14:59:50, 0] 
lib/smbldap.c:smbldap_open(807)
Apr 5 14:59:50 my-svr smbd[1036]:  smbldap_open: cannot access LDAP when 
not root..
Apr 5 14:59:50 my-svr smbd[1036]: [2004/04/05 14:59:50, 0] 
passdb/pdb_ldap.c:ldapsam_search_one_group(1668)
Apr 5 14:59:50 my-svr smbd[1036]:  ldapsam_search_one_group: Problem 
during the LDAP search: LDAP error: (Insufficient access)
Apr 5 14:59:50 my-svr smbd[1036]:  ldapsam_search_one_group: Query was: 
ou=groups,dc=test,dc=com, 
(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))
Apr 5