[Samba] Logging into WIndows 2000 ADS from Linux Clients
Hi everyone, I want to convert some 50 new machines that an organization is getting into Fedora Linux workstations. This is the current setup: The organization currently has one Primary Windows 2000 ADS and 2 numbers of Windows 2000 servers acting as Backup domain servers. There are currently some 50 workstations already in the network and these are all Windows 2000 professional machines. There are HP laser network printers in the network. Now the organization wants to add about 50 more workstations in the network. I am trying to convince them to use Fedora Linux on these machines instead of Windows 2000 professionnal. My ultimate goal is to convert more machines to Linux. From these Fedora machines, users should be able to login to the Windows servers using their Windows username and passwords. They will be using a lot of files from the Windows 2000 servers which currently also act as the file servers. They are currently reluctant on converting the Windows servers and converting to Linux as some critical applications that they use are available only on windows. In addition to this they would need to print to the Network printers in the network. I googled and found a LOT of information on modifying the SAMBA and modifying the krb5 for the above purpose. I am using a couple of machines to do a test setup. I have installed FC1 on these machines and have configured SAMBA on both these machines. Some of the settings done are as follows: SAMBA smb.conf file is at the very bottom of this email KRB5 krb5.conf file is also at the bottom of the email nsswitch.conf file was modified also at the bottom of this email The authentication that I am using is SMB and KRB5 My FC1 machines are registered into the ADS using net ads join -U user1. This went well and showed me as joined to the domain. I have set up test users user1 and user2 in both the windows domain as well as on the FC1 machines. The passwords of the above users on the local FC1 machines and the Windows 2000 ADS machines are differrent. (The reason I have kept these differrent is to test that the login using the Windows 2000 username and password works.) The problem that I face is this: 1. I cannot log in at the FC1 GUI login prompt (I'm using gnome) using the windows username (user1 or user2) and password. I can only login using my FC1 local username and password. This is the first thing that I should be able to do. I should be able to login as any user (even if the user is not added in the local FC1 machine) 2. After logging into gnome as the local FC1 user, when I browse the network and click on any machine on the network it asks me for a username and password again for that machine. After entering the correct windows username and password I get access to the shared resources in the network. I want to maintain one central username and password into the Windows 2000 ADS. So if a username is added or is a password of an existing user is changed it is maintained at one location only and not in multiple locations. Can someone point out what I could be doing wrong here. At this point I'm quite zonked actually. Some sites mentinoed that all I need to do was enable kerbrose authintication on the local machine (no need to setup samba). In other places there is nothing mentioned about krb5 but a lot of settings about samba. I'd appretiate your help a lot. I'm sorry for the long email, but I just wanted to make sure I've given all the details. Thanks, PAG -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] FYI - Why RPMs are important
Hi, Josh! I think there's a workaround to avoid using RPMs. When you do smb restart you are doing smb stop and smb start, and that closes alls client connections, so you've got to stop service anyway. That's it: - Compile and install samba with a prefix like /opt/samba-x.y.z - ln -s /opt/samba-x.y.z /opt/samba - Set your new initscript like /etc/init.d/samba , which uses your new path (/opt/samba) and use it to define the passes through every run level. - Set the appropiate environment variables to your scripts to avoid using the ones are already working (/usr/bin or whatever) (PATH=/opt/samba/bin:$PATH , for example) - /etc/init.d/smb stop - /etc/init.d/samba start - rpm -e samba* (do it after, once the new version works fine, if you prefer) You can test it before in your development servers, something like this should do the work for you. Once you've done it this way you will be able to compile newer versions with previx = /opt/samba-x'.y'.z' and the restart will be just: #!/bin/sh /etc/init.d/samba stop rm /opt/samba ln -s /opt/samba-x'.y'.z' /opt /etc/init.d/samba stop Theese both procedures are totally scriptable and has so few impact in you HA environment like using RPMs, with the goody of being using anytime the version that you prefer, independently of which one is RPM packed by your distro. Hope it helps! Josh Skains wrote: Someone emailed me directly when I was asking about the 8.0 RPMs, and why I didn't just compile it. Due to the production nature of our servers which run practially 24/7, I can do an rpm -Uhv samba.rpm and then do an smb restart with very little impact. If I move to non-rpm versions, I am forced to compile first, remove the RPM, which is a longer downtime, then install Samba and then turn Samba back on. Just FYI. *shrug* JMS -- Angel Galindo Muñoz [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Smbd not running
You need to configure Samba. Look for smb.conf.sample, included in the distribution someplace. You will need to edit it to suit your liking and then place it in the lib directory. _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Tue, 4 May 2004, Opeyemi Adeola wrote: I get the follwing from my log.smbd file lib/smb.conf: No such file or directory [2004/04/29 15:50:31, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:31, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:32, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:32, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:33, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:33, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:34, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:34, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:35, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:35, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:36, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:36, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:37, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:37, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:38, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:38, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:39, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:39, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:40, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:40, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:41, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:41, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:43, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:43, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:44, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:44, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf:
Re: [Samba] When do i need /etc/pam.d/samba ???
Look in the pam_smbpass directory under the source directory of the samba tree. There is some information regarding the pam_smbpass module here, which is probably why that file is there. _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Tue, 4 May 2004, Michael Gasch wrote: hi im wondering, where the need of samba in /etc/pam.d is ?? could somebody explain it ? thanks very much... micha -- Matrix - more than a vision ** Michael Gasch - Central IT Department - Max Planck Institute for Evolutionary Anthropology Deutscher Platz 6 04103 Leipzig Germany ** -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Smbd not running
Thanks you so much, I finally solved the problem. From this error from my log.smbd [2004/05/04 14:25:07, 0] lib/util_sock.c:open_socket_in(666) bind failed on port 139 socket_addr = 0.0.0.0. Error = Address already in use It shows port 139 was in use by another program and I remember adding this command in /etc/services file Netbios-ns 137/udp #samba nmbd Netbios-ssn 139/tcp #samba smbd SO I removed the line, restarted inetd and ran grep smbd and grep nmbd,it works -Original Message- From: Ryan Novosielski [mailto:[EMAIL PROTECTED] Sent: Friday, May 14, 2004 8:21 AM To: Opeyemi Adeola Cc: [EMAIL PROTECTED] Subject: RE: [Samba] Smbd not running You need to configure Samba. Look for smb.conf.sample, included in the distribution someplace. You will need to edit it to suit your liking and then place it in the lib directory. _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Tue, 4 May 2004, Opeyemi Adeola wrote: I get the follwing from my log.smbd file lib/smb.conf: No such file or directory [2004/04/29 15:50:31, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:31, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:32, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:32, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:33, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:33, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:34, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:34, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:35, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:35, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:36, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:36, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:37, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:37, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:38, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:38, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:39, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:39, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:40, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:40, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf: No such file or directory [2004/04/29 15:50:41, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/29 15:50:41, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file /usr/local/samba/ lib/smb.conf:
[Samba] nmbd dies every day
Hi there, i have 2 samba servers (1 with ver 3.0.0-15 - will do an update soon - other with 3.0.2-7.FC1) both installed on Fedora 1.B and my problem is that for some reason one of them (3.0.0-15 to be exact) stops every day a few hours after everybody goes home. I had the same version on the other server and that never happened. Please any ideas why this happens? [2004/05/13 20:20:36, 3] nmbd/nmbd_elections.c:check_for_master_browser_success(76) check_for_master_browser_success: Local master browser for workgroup TOTOLEFT exists at IP 10.1.xx.xx (just checking). [2004/05/13 20:21:04, 2] nmbd/nmbd.c:reload_interfaces(254) Deleting dead interface 10.1.xx.yy [2004/05/13 20:21:04, 0] nmbd/nmbd.c:reload_interfaces(263) reload_interfaces: No subnets to listen to. Shutting down... [2004/05/14 09:06:53, 0] nmbd/nmbd.c:main(665) Netbios nameserver version 3.0.0-15 started. -- * There are really two of me; if what I say is stupid, it certainly came from the other guy. * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] syslog priority for read_socket_data: recv failure messages
My logs are full of messages May 13 13:57:19 frogserver smbd[19440]: [2004/05/13 13:57:19, 0] lib/util_sock.c:read_socket_data(365) May 13 13:57:19 frogserver smbd[19440]: read_socket_data: recv failure for 4. Error = Connection reset by peer which seem to be logged at a syslog priority of err These messages seem to be fairly boring, and not indicative of a failure withing Samba. Could the syslog priority level be reduced to warning, info or debug? http://lists.samba.org/archive/samba/2001-December/033191.html http://lists.samba.org/archive/samba/2002-April/041735.html http://lists.samba.org/archive/samba/2004-April/083915.html -- Alan J. Wylie Frogtrade, Halifax, UK http://www.frogtrade.com/ alan.wylie (at) frogtrade.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Sending message to connected users ?
Hi, Is there any simple way to send messages to all users who are connected to my Samba server. I've just a basic fileserver setup (in a workgroup not Domain) all clients are using Win2k and mapping to shares. I'd like to be able to send them a popup message from the Linux console (or my PC, or somewhere !) to let them know when I'm intending to reboot the server ! Slackware Linux (8.0) Samba 2.2.8a --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.680 / Virus Database: 442 - Release Date: 11/05/2004 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind problems with linux domain member
Hi, not to get you hopes down, but I think this is the same problem that is adressed in: http://lists.samba.org/archive/samba/2004-May/085521.html http://lists.samba.org/archive/samba/2004-May/085808.html Look at: http://www.linuxquestions.org/questions/showthread.php?s=threadid=161506http://www.linuxquestions.org/questions/showthread.php?s=threadid=161506 that may help. Appart from that, and countless postings about this problem, there is little. That said. I am not sure its is the same problem. I am just one that has got a similar problem (except want a access from a XP client to a samba server in a Win2003 DMC). I think its a kerberos problem so far. YS. Anders Berg At 09:43 13.05.2004 -0700, you wrote: Hey everyone, I'm having some strange responses, and a bit of trouble with getting access to a member server on my domain. I've got Samba running on another Linux box as a PDC, and my Win2k clients can login just fine, and share between one another. The problem comes in with another Linux workstation that's setup as a member server. Here's the relevant smb.conf section from the member server: [global] workgroup = 102010 server string = Samba Server %v log file = /var/log/samba3/log.%m max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy = no netbios name = miru security = domain printcap name = cups disable spoolss = yes show add printer wizard = no printing = cups idmap uid = 15000-2 idmap gid = 15000-2 winbind separator = + winbind use default domain = yes winbind enum users = yes winbind enum groups = yes winbind enable local accounts = no use sendfile = yes testparm comes out okay, with the caveat that using '+' as a separator might cause problems with group membership. I also get success response from wbinfo -t What's strange is this: miru root # wbinfo -u root sak michael Shouldn't it show the domain+user output? When I do: miru root # getent passwd ... guest:x:405:100:guest:/dev/null:/dev/null nobody:x:65534:65534:nobody:/:/bin/false sak:x:1000:100::/home/sak:/bin/bash ntp:x:123:123:added by portage for ntp:/dev/null:/bin/false root:x:15007:15001:root:/home/102010/root:/bin/false sak:x:15006:15001::/home/102010/sak:/bin/false michael:x:15008:15001::/home/102010/michael:/bin/false If I understand correctly, this is okay; listing the local users and then the domain users. When I do: miru root # getent passwd sak sak:x:1000:100::/home/sak:/bin/bash which is probably correct, but when I do: miru root # getent passwd 102010+sak I get no response whatsoever. All of this results in the shares on the member server showing up on the domain, but unable to access them. From a Win2k client, logged into the domain, I can't get it to accept any type of login to access a share on the member server. When I try to access a share it asks for a username and password. If I try sak, it doesn't work, if I try 102010+sak it gives me an hourglass for about thirty seconds, and then gives me \\Miru\sak is not accessible. The specified username is invalid. Anyway, I'm stuck. I don't know what else to try. Anyone have any thoughts or suggestions? -- Thanks, Sak. - i've got this epic problem this epic problem's not a problem for me and inside i know i'm broken but i'm working as far as you can see and outside it's all production it's all illusion set scenery i've got this epic problem this epic problem's not a problem for me -fugazi -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba * Denne fotnoten bekrefter at denne e-postmeldingen ble skannet av MailSweeper og funnet fri for virus. * This footnote confirms that this email message has been swept by MailSweeper for the presence of computer viruses. * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] Sending message to connected users ?
Hi Mike, there is a simple way for that. you can use the smbclient on your linux system. f.e. smbclient -M Computer sends a message to the PC with the netbiosname Computer. regards Arno -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Auftrag von Mike Stewart Gesendet: Freitag, 14. Mai 2004 10:54 An: Samba Betreff: [Samba] Sending message to connected users ? Hi, Is there any simple way to send messages to all users who are connected to my Samba server. I've just a basic fileserver setup (in a workgroup not Domain) all clients are using Win2k and mapping to shares. I'd like to be able to send them a popup message from the Linux console (or my PC, or somewhere !) to let them know when I'm intending to reboot the server ! Slackware Linux (8.0) Samba 2.2.8a --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.680 / Virus Database: 442 - Release Date: 11/05/2004 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] fedora core 1 smb
Have you tried using /etc/hosts or a dns service? * There are really two of me; if what I say is stupid, it certainly came from the other guy. * Florian Idelberger wrote: I've tried to get windows share browsing to work for quite some time now. Even with the help of the fedora list I wasnt able to fully figure it out. If I know the ip adress of a host and the share i can mount it using smbmount. but this is unusable, because ip adresses get assigned by dhcp. Any Ideas are appreciated, florian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Winbind ADS Issues w/ *TONS* of Pre-Research
Hi, just like: http://lists.samba.org/archive/samba/2004-May/085521.html http://lists.samba.org/archive/samba/2004-May/085808.html huh? Another *just* came in also: http://lists.samba.org/archive/samba/2004-May/085881.html Well, this one has many persons puzzeled. The best place so far is: http://www.linuxquestions.org/questions/showthread.php?s=threadid=161506http://www.linuxquestions.org/questions/showthread.php?s=threadid=161506 I guess that the Samba community is still (which of course we are part of) does not have the solution for this problem, since it has not been answered/adressed by anybody in great lenght/detail. The HOWTO adresses it in: http://se.samba.org/samba/docs/man/howto/domain-member.html#ads-member but really that is no HOWTO. As long as it does not show you HOW-TO. I also guess that some people that have followed this thread for a while are starting to get bugged by me :) Sorry I can't help you, I have not figured it out either. YS Anders Berg At 18:18 13.05.2004 -0400, William R. Lorenz wrote: Samba Team, I've been trying to get my Samba server to authenticate users against a Windows 2000 Active Directory domain controller, and it just doesn't work. I've encountered a TREMENDOUS amount of postings from people who have run into the same issue, and there's never any responses with a resolution. I must have viewed more than 500 postings over the course of the day. I have a seemingly valid Samba configuration file. All of the `wbinfo -u`, `wbinfo -g`, `getent passwd`, and `getent group` commands work just fine. Howver, `wbinfo -t` and `wbinfo -a` don't work, and I can't authenticate users against the domain controller. As an example: [EMAIL PROTECTED] samba]# net ads join -U Administrator Administrator's password: [2004/05/13 17:49:30, 0] libads/ldap.c:ads_add_machine_acct(1006) Host account for nasone already exists - modifying old account Using short domain name -- ECHUDSON Joined 'NASONE' to realm 'HUDSON-OFFICE.ECEDIINC.COM' [EMAIL PROTECTED] samba]# net rpc join -U Administrator Password: Joined domain ECHUDSON. [EMAIL PROTECTED] samba]# wbinfo -t checking the trust secret via RPC calls failed error code was NT_STATUS_UNSUCCESSFUL (0xc001) Could not check secret [EMAIL PROTECTED] samba]# After trying to do the `wbinfo -t`, I see the following in 'winbindd.log': [2004/05/13 17:49:41, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(535) Doing kerberos session setup [2004/05/13 17:49:41, 0] rpc_client/cli_pipe.c:rpc_auth_pipe(336) rpc_auth_pipe: wrong schannel auth len 24 [2004/05/13 17:49:41, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(249) cli_nt_setup_creds: request challenge failed [2004/05/13 17:49:41, 2] nsswitch/winbindd_misc.c:winbindd_check_machine_acct(98) Checking the trust account password returned NT_STATUS_UNSUCCESSFUL I am using Samba 3.0.4, as distributed in Fedora Core 1 RPM format on the main Samba website @ http://www.samba.org/. Here's the details: [EMAIL PROTECTED] samba]# rpm -qa | grep ^samba samba-common-3.0.4-2 samba-client-3.0.4-2 samba-3.0.4-2 [EMAIL PROTECTED] samba]# rpm -qa | grep ^krb5 krb5-libs-1.3.1-6 krb5-workstation-1.3.1-6 [EMAIL PROTECTED] samba]# The output of `wbinfo -a` produces the following: [EMAIL PROTECTED] samba]# wbinfo -a Administrator plaintext password authentication failed error code was NT_STATUS_NO_SUCH_USER (0xc064) error messsage was: No such user Could not authenticate user Administrator with plaintext password challenge/response password authentication failed error code was NT_STATUS_NO_LOGON_SERVERS (0xc05e) error messsage was: No logon servers Could not authenticate user Administrator with challenge/response [EMAIL PROTECTED] samba]# And this results in the following in 'winbindd.log': [2004/05/13 17:53:04, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(535) Doing kerberos session setup [2004/05/13 17:53:04, 0] rpc_client/cli_pipe.c:rpc_auth_pipe(336) rpc_auth_pipe: wrong schannel auth len 24 [2004/05/13 17:53:04, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(249) cli_nt_setup_creds: request challenge failed [2004/05/13 17:53:04, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(612) NTLM CRAP authentication for user [ECHUDSON]\[Administrator] returned NT_STATUS_NO_LOGON_SERVERS (PAM: 4) NTLM CRAP authentication is right -- this just doesn't want to work! ;) Here's the contents of my '/etc/samba/smb.conf' configuration file: [EMAIL PROTECTED] samba]# grep -v ^\; /etc/samba/smb.conf [global] workgroup = ECHUDSON realm = HUDSON-OFFICE.LOCAL server string = NASONE hosts allow = 10.0.0.0/24 load printers = no security = ads auth methods = winbind password server = ARIEL name resolve order = bcast wins host wins server = 10.0.0.150 10.0.0.151 log level = 2 log file =
[Samba] WINS Server: Use Samba or Windows?
Hi, The Samba documentation recommends that a Windows WINS server is used for WinNT/200x clients, i.e. http://samba.mirror.ac.uk/samba/docs/man/howto/NetworkBrowsing.html#id2531484 says In a mixed NT/200x server and Samba environment on a Wide Area Network, it is recommended that you use the Microsoft WINS server capabilities. But there's no justification as to why Samba isn't recommended in this scenario; the only missing feature I can see is replication. Does anyone know the basis is of this recommendation? What about good or bad experiences with either Windows or Samba WINS servers? Thanks in advance, Leon... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Sending message to connected users ?
Thanks Arno... I'd looked at smbclient and completely missed that command ! Seems to work OK for some of the users but strangely it can't resolve my PC's netbios name ! I'll need to check some other settings I suppose. Is there a way of sending to ALL users at once ? ATB Mike - Original Message - From: Arno Seidel [EMAIL PROTECTED] To: Samba [EMAIL PROTECTED] Sent: Friday, May 14, 2004 10:25 AM Subject: AW: [Samba] Sending message to connected users ? Hi Mike, there is a simple way for that. you can use the smbclient on your linux system. f.e. smbclient -M Computer sends a message to the PC with the netbiosname Computer. regards Arno -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Auftrag von Mike Stewart Gesendet: Freitag, 14. Mai 2004 10:54 An: Samba Betreff: [Samba] Sending message to connected users ? Hi, Is there any simple way to send messages to all users who are connected to my Samba server. I've just a basic fileserver setup (in a workgroup not Domain) all clients are using Win2k and mapping to shares. I'd like to be able to send them a popup message from the Linux console (or my PC, or somewhere !) to let them know when I'm intending to reboot the server ! Slackware Linux (8.0) Samba 2.2.8a --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.680 / Virus Database: 442 - Release Date: 11/05/2004 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.680 / Virus Database: 442 - Release Date: 11/05/2004 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] friendly printer name
Hi, I have sucessfully installed an ad-integrated samba server. We mainly use the server for printer sharing and are very happy with it. We only have one problem or missing feature: On a Windows Server, you change the name of a printer, so that it is different to the share name. We use 8-letter sharenames for being compatible to old Win9x-Clients, bbut we would like to have logner, more comprehendable names for our Win2k/XP users. The printer name on Windows in the Properties under the general-tab; the textbox next to the printer icon can be altered and pressing ok saves the new name on the server. I tries to track the problem, and it seems like windows saves this name under the value printerName in the DsSpooler Key. rpcclient doesnt support a setdataex command so i changed the value manually in the ntprinters.tdb. But this had no effect! Is there any opportunity to change the printer name on a samba server?! Christoph Klein -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] Sending message to connected users ?
Hi Mike, hm if you are good in Shell-Programming you could write a script which excludes from the /var/lib/samba/browse.dat (ascii-textfile) the active pc´s and sends them a message. regards Arno -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Auftrag von Mike Stewart Gesendet: Freitag, 14. Mai 2004 11:57 An: Samba Betreff: Re: [Samba] Sending message to connected users ? Thanks Arno... I'd looked at smbclient and completely missed that command ! Seems to work OK for some of the users but strangely it can't resolve my PC's netbios name ! I'll need to check some other settings I suppose. Is there a way of sending to ALL users at once ? ATB Mike - Original Message - From: Arno Seidel [EMAIL PROTECTED] To: Samba [EMAIL PROTECTED] Sent: Friday, May 14, 2004 10:25 AM Subject: AW: [Samba] Sending message to connected users ? Hi Mike, there is a simple way for that. you can use the smbclient on your linux system. f.e. smbclient -M Computer sends a message to the PC with the netbiosname Computer. regards Arno -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Auftrag von Mike Stewart Gesendet: Freitag, 14. Mai 2004 10:54 An: Samba Betreff: [Samba] Sending message to connected users ? Hi, Is there any simple way to send messages to all users who are connected to my Samba server. I've just a basic fileserver setup (in a workgroup not Domain) all clients are using Win2k and mapping to shares. I'd like to be able to send them a popup message from the Linux console (or my PC, or somewhere !) to let them know when I'm intending to reboot the server ! Slackware Linux (8.0) Samba 2.2.8a --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.680 / Virus Database: 442 - Release Date: 11/05/2004 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.680 / Virus Database: 442 - Release Date: 11/05/2004 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How to disable changing of modification times on file access?
Gerald (Jerry) Carter [EMAIL PROTECTED] writes: Hannu Koivisto wrote: ... | noticed that whenever I open a file using a Windows | (I'm using Windows 2000) application, Samba changes | its modification time to the current time. The old | modification time is restored when the windows application | quits / closes the file. ... Samba is only doing what the client applciation asks for. Could you elaborate? It sounds odd that the client application would specifically ask for the modification time to be changed in this case. Even if it does that, would it not make sense to provide an option that could be used to ignore such requests and only let the modification time change when the file is actually modified? The only alternative I can see is to downgrade back to 2.2.x series but since I have noticed that 3.0.x is noticeably faster in my use, I'd rather not do that. -- Hannu -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Sending message to connected users ?
Thanks again Arno, that's a possibility for the future. Getting rather frustrated with the servers here... browse.dat is in different places on our 2 servers and neither where you said it might be ! Reason for all this messing around is that one server (built by someone else) is *extremely* flakey so I've built a replacement and I'm in the process of swapping them over. New to Linux and Samba so struggling with commands :-( Wanted to use at to reboot the old server at midnight and it took hours yesterday to discover that ctrl-D was the command I needed to enter after I'd typed reboot at the at prompt. I've got 5 Linux manuals and not one of them told me how to use the at command properly so ended up trawling the web. Oh well, when it's all up and running I'm sure things will get better, and I will have learnt a lot thanks to this Samba list :-) ATB Mike - Original Message - From: Arno Seidel [EMAIL PROTECTED] To: Samba [EMAIL PROTECTED] Sent: Friday, May 14, 2004 11:05 AM Subject: AW: [Samba] Sending message to connected users ? Hi Mike, hm if you are good in Shell-Programming you could write a script which excludes from the /var/lib/samba/browse.dat (ascii-textfile) the active pc´s and sends them a message. regards Arno --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.680 / Virus Database: 442 - Release Date: 09/05/2004 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] problem with vscan
hello, I'v installed samba vscan 0.3.5 on whiteboxlinux 3 with samba 3.0.4, whe I try to access to test file on vscan dir my log say: lookup 'U?]??E ??v???û?!/samba.ldif' search for 'U?]??E ??v???û?!/samba.ldif' in lrufiles file 'U?]??E ??v???û?!/samba.ldif' not matched entry 'U?]??E ??v???û?!/samba.ldif' not found file entry 'U?]??E ??v???û?!/samba.ldif' should be deleted search for 'U?]??E ??v???û?!/samba.ldif' in lrufiles file 'U?]??E ??v???û?!/samba.ldif' not matched fd_open: name samba.ldif, flags = 00 mode = 0640, fd = -1. Permission denied Error opening file samba.ldif (Permission denied) (local_flags=0) (flags=0) and in /var/log/messages May 14 12:50:28 pdc smbd_vscan-clamav[11746]: ERROR: daemon failed with a minor error - access to file samba.ldif denied -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] problem with vscan
sorry my fault :(, I'v samba-3.0.3 but I'v compiled samba-vscan with samba-3.0.4, sorry again. francesco. Francesco Defilippo wrote: hello, I'v installed samba vscan 0.3.5 on whiteboxlinux 3 with samba 3.0.4, whe I try to access to test file on vscan dir my log say: lookup 'U?]??E ??v???û?!/samba.ldif' search for 'U?]??E ??v???û?!/samba.ldif' in lrufiles file 'U?]??E ??v???û?!/samba.ldif' not matched entry 'U?]??E ??v???û?!/samba.ldif' not found file entry 'U?]??E ??v???û?!/samba.ldif' should be deleted search for 'U?]??E ??v???û?!/samba.ldif' in lrufiles file 'U?]??E ??v???û?!/samba.ldif' not matched fd_open: name samba.ldif, flags = 00 mode = 0640, fd = -1. Permission denied Error opening file samba.ldif (Permission denied) (local_flags=0) (flags=0) and in /var/log/messages May 14 12:50:28 pdc smbd_vscan-clamav[11746]: ERROR: daemon failed with a minor error - access to file samba.ldif denied -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Bug 1315 -- wrong schannel auth len 24 [was Re: [Samba] Winbind ADS Issues w/ *TONS* of Pre-Research]
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 William R. Lorenz wrote : | [2004/05/13 17:49:41, 2] | libsmb/cliconnect.c:cli_session_setup_kerberos(535) | Doing kerberos session setup | [2004/05/13 17:49:41, 0] rpc_client/cli_pipe.c:rpc_auth_pipe(336) | rpc_auth_pipe: wrong schannel auth len 24 Already fixed (everyone please listen this time!) This was a bug introduced in 3.0.3 and 3.0.4. It is only seen from what I can tell by using a DC that does not support 128 bit encryption for signing and sealing of rpc packets. This includes Windows 2000 with no patches and non-us service packs (i'm guessing on the second one). The fix for 3.0.4 is attached to https://bugzilla.samba.org/show_bug.cgi?id=1315 Anders, I posted this previsouly in response to one of the threads you referred to. http://lists.samba.org/archive/samba/2004-May/085842.html cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFApMCJIR7qMdg1EfYRAmcpAKCbOk3BkiBMOL9TSQ8lyTFpcew5KwCg7wK8 kUMW/OF0KOzdfKDG+WaF/+8= =drqv -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] WINS Server: Use Samba or Windows?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Leon Stringer wrote: | But there's no justification as to why Samba isn't | recommended in this scenario; the only missing feature I | can see is replication. Does anyone know the basis is | of this recommendation? What about good or bad | experiences with either Windows or Samba WINS servers? I'm not sure I agree with that recommendation but the reason its sthere is because Samba does not support WINS Replication currently. cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFApMLYIR7qMdg1EfYRAu6pAKDfjflrxhox4B3hVcX9AfUS95mfZgCfWrKQ 2AZiURjgs4pIqIUxkT/ttZ8= =wE7m -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind problems with linux domain member
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sak wrote: | Another bit of output that raises an eyebrow is... | | miru root # wbinfo --authenticate=sak%password | plaintext password authentication failed | error code was NT_STATUS_NO_SUCH_USER (0xc064) | error messsage was: No such user | Could not authenticate user sak%password with plaintext password | challenge/response password authentication succeeded | | Anyway, hope this extra bit of output might offer some clues as to | what might be going wrong. Send me the level 10 debug log from winbindd for thie failure And Try the patch in https://bugzilla.samba.org/show_bug.cgi?id=1315 cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFApMONIR7qMdg1EfYRAoc2AJ4wPnym7bP2ANMkXKtwkrxMFZdz2gCgpmqb gflnWjEiM2+TNYl5pp98hkA= =FfFf -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] nmbd dies every day
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Florin Grosu wrote: | Hi there, i have 2 samba servers (1 with ver 3.0.0-15 - will do an | update soon - other with 3.0.2-7.FC1) both installed on Fedora 1.B and | my problem is that for some reason one of them (3.0.0-15 to be exact) | stops every day a few hours after everybody goes home. I had the same | version on the other server and that never happened. Please any ideas | why this happens? | | [2004/05/13 20:20:36, 3] | nmbd/nmbd_elections.c:check_for_master_browser_success(76) | check_for_master_browser_success: Local master browser for workgroup | TOTOLEFT exists at IP 10.1.xx.xx (just checking). | [2004/05/13 20:21:04, 2] nmbd/nmbd.c:reload_interfaces(254) | Deleting dead interface 10.1.xx.yy | [2004/05/13 20:21:04, 0] nmbd/nmbd.c:reload_interfaces(263) | reload_interfaces: No subnets to listen to. Shutting down... I think we fixed this already, but I can't find the commit messsage for it. Please test 3.0.4. cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFApMSkIR7qMdg1EfYRAiVzAKCrpOunI/jRAVwbLeHa7VwLMMagMACfRABw WIPAQe6pIZ6ZZPY3nBqHBzA= =5WAj -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind problems with linux domain member
Hi Jerry ! Hi everyone ! I'm currently working on a Mandrake 9.2 with a domain member server 3.0.4 and winbind If I can be of any help, I'll be very to pleased to ! I also am trying to apply the patch you've uploaded earlier. Do you use diff, or something else to apply it ? Sorry for what that may be stupid questions to you ! Thanks for reading. Bertram From: Gerald (Jerry) Carter [EMAIL PROTECTED] To: Sak [EMAIL PROTECTED] CC: [EMAIL PROTECTED] Subject: Re: [Samba] winbind problems with linux domain member Date: Fri, 14 May 2004 08:03:09 -0500 -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sak wrote: | Another bit of output that raises an eyebrow is... | | miru root # wbinfo --authenticate=sak%password | plaintext password authentication failed | error code was NT_STATUS_NO_SUCH_USER (0xc064) | error messsage was: No such user | Could not authenticate user sak%password with plaintext password | challenge/response password authentication succeeded | | Anyway, hope this extra bit of output might offer some clues as to | what might be going wrong. Send me the level 10 debug log from winbindd for thie failure And Try the patch in https://bugzilla.samba.org/show_bug.cgi?id=1315 cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFApMONIR7qMdg1EfYRAoc2AJ4wPnym7bP2ANMkXKtwkrxMFZdz2gCgpmqb gflnWjEiM2+TNYl5pp98hkA= =FfFf -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba _ MSN Actions Solidaires : http://www.msn.fr/actionssolidaires/ la solidarité à portée de click -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Fwd: Re: [Samba] nmbd dies every day
when i try: mount -t smbfs -o username,password,and rw options //windblowsserver/backup/system\ products/ mount chokes on the windblows directory system products . i assume this is b/c of the space in the directory name. what should i do so i can mount this windblows share? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: AW: [Samba] SID History Mechanism / Trust Accounts
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Laurenz, Dirk wrote: | so far i found out, that there's an LDAP | Attribute sambaSIDList on the subversion server | http://tinyurl.com/3edtz. Is this the attribute, which | cares about the SID history? It's important to know thanks. SID history was introduced with Windows 2000. To my knowledge it is not supported under NT 4. And since Samba acts as an NT4 DC, there is no support for maintaing the SID histsory list. We do honor the SID history list as a member server though. The SambaSIDList you see in the schema is used to stored nested group membership (winbind nested groups). | Does net rpc vampire preserve domain trust accounts? Yes. cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFApMa8IR7qMdg1EfYRAn/OAKC9BDm+Q/J4P27gGiqD83Yc+skMsACgowui B3yKEL0/m+ER1JYhraQv76k= =Wj4r -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind problems with linux domain member
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yohann Ferreira wrote: | Hi Jerry ! Hi everyone ! | | I'm currently working on a Mandrake 9.2 with a domain | member server 3.0.4 and winbind I think Buchan is working on new 3.0.4 Mandrake packages that include this patch. Might just be for 10.0 though. | If I can be of any help, I'll be very to pleased to ! | | I also am trying to apply the patch you've uploaded earlier. | | Do you use diff, or something else to apply it ? $ tar zxvf samba-3.0.4.tar.gz $ cd samba-3.0.4/source $ patch -p0 winbind.patch recompile | Sorry for what that may be stupid questions to you ! not stupid at all . BUG 1315 was our fault, not yours. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFApMopIR7qMdg1EfYRAp1jAKCsNOHEVTkyPHTKE5PC/tw2qLNfpQCfWsur pklIOV8AxRAgq8H97ZrAk/8= =SRus -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] nmbd dies every day
Thank you, i'll upgrade to 3.0.4 then, maybe i'll get rid of it :) What is weird (for me) is that on the other server when i had the same version i never had this error. But well, if 3.0.4 works i won't complain :) Thank you again. Florin * There are really two of me; if what I say is stupid, it certainly came from the other guy. * Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Florin Grosu wrote: | Hi there, i have 2 samba servers (1 with ver 3.0.0-15 - will do an | update soon - other with 3.0.2-7.FC1) both installed on Fedora 1.B and | my problem is that for some reason one of them (3.0.0-15 to be exact) | stops every day a few hours after everybody goes home. I had the same | version on the other server and that never happened. Please any ideas | why this happens? | | [2004/05/13 20:20:36, 3] | nmbd/nmbd_elections.c:check_for_master_browser_success(76) | check_for_master_browser_success: Local master browser for workgroup | TOTOLEFT exists at IP 10.1.xx.xx (just checking). | [2004/05/13 20:21:04, 2] nmbd/nmbd.c:reload_interfaces(254) | Deleting dead interface 10.1.xx.yy | [2004/05/13 20:21:04, 0] nmbd/nmbd.c:reload_interfaces(263) | reload_interfaces: No subnets to listen to. Shutting down... I think we fixed this already, but I can't find the commit messsage for it. Please test 3.0.4. cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFApMSkIR7qMdg1EfYRAiVzAKCrpOunI/jRAVwbLeHa7VwLMMagMACfRABw WIPAQe6pIZ6ZZPY3nBqHBzA= =5WAj -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind problems with linux domain member
Hi again Jerry ! Hi everyone ! I've successfully applied the winbind patch on a samba 3.0.4 : Made 'make clean', ./configure --with-fhs --prefix=/usr --sysconfdir=/etc --with-privatedir=/etc/samba --localstatedir=/var --with-netatalk= --with-smbmount --with-pam --with-syslog --with-utmp --with-readline --with-smb_pass --with-libsmbclient --with-winbind --with-msdfs --with-acl-support --with-quotas --enable-cups --with-ads --with-ldap --with-krb5 --with-ldapsam, make, make install, kinit admin net ads join -U admin Joined Domain bla bla successfull, then, /usr/sbin/smbd -D, /usr/sbin/nmbd -D, /usr/sbin/winbindd -s /etc/samba/smb.conf ( smbd -V = Version 3.0.4...) wbinfo -ugmt are working well, but ... getent passwd and getent group don't show me any 200x groups In 3.0.2a, actually, it did, of course ! Did I make any mistakes ? Do you want any futher info ? (BTW : Remove the three previous lines in /etc/krb5.conf) (#default_tgs_enctypes = des-cbc-crc des-cbc-md5) (#default_tkt_enctypes = des-cbc-crc des-cbc-md5) (#permitted_enctypes = des-cbc-crc des-cbc-md5) Thanks for reading ! Bertram _ Bloquez les fenêtres pop-up, c'est gratuit ! http://toolbar.msn.fr -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Smbpasswd -x doesn't delete entry
I hope someone give me a clue to what is happening here. This is a new installation. I can add users to samba with no problems but I can't delete them from the ldap db using smbpasswd -x username nor via pdbedit -x -u username The ldap entry looks like this - # dn: uid=tester,ou=People,dc=mycompany,dc=com uid: tester sambaSID: S-1-5-21-118495222-1838158642-270368766-2026 sambaPrimaryGroupSID: S-1-5-21-118495222-1838158642-270368766-2023 sambaPwdCanChange: 1084486966 sambaPwdMustChange: 2147483647 sambaLMPassword: 27B5F7A8A911453AFA8297B31DAE3F0B sambaNTPassword: D005EA53CDE1161A736D8CA6D63529CB sambaPwdLastSet: 1084486966 sambaAcctFlags: [U ] objectClass: sambaSamAccount objectClass: account == When I try to delete that entry I get the following error messages - # smbpasswd -x tester ldapsam_delete_sam_account: Deleting user tester from LDAP. smbldap_search: base = [dc=mycompany,dc=com], filter = [((uid=tester)(objectclass=sambaSamAccount))], scope = [2] ldapsam_delete_entry: deleting attribute uid ldapsam_delete_entry: deleting attribute sambaSID ldapsam_delete_entry: deleting attribute sambaPrimaryGroupSID ldapsam_delete_entry: deleting attribute sambaPwdCanChange ldapsam_delete_entry: deleting attribute sambaPwdMustChange ldapsam_delete_entry: deleting attribute sambaLMPassword ldapsam_delete_entry: deleting attribute sambaNTPassword ldapsam_delete_entry: deleting attribute sambaPwdLastSet ldapsam_delete_entry: deleting attribute sambaAcctFlags ldapsam_delete_entry: deleting attribute objectClass smbldap_modify: dn = [uid=tester,ou=People,dc=mycompany,dc=com] ldapsam_delete_entry: Could not delete attributes for uid=tester,ou=People,dc=mycompany,dc=com, error: Object class violation (object class 'account' requires attribute 'uid') Failed to delete entry for user tester. Failed to modify password entry for user tester # I'm not sure why this is happening. Any ideas or pointers? Thanks jay -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Winbind ADS Issues w/ *TONS* of Pre-Research
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Samba Team, | | I've been trying to get my Samba server to authenticate users against a | Windows 2000 Active Directory domain controller, and it just doesn't work. | I've encountered a TREMENDOUS amount of postings from people who have run | into the same issue, and there's never any responses with a resolution. | I must have viewed more than 500 postings over the course of the day. | | I have a seemingly valid Samba configuration file. All of the `wbinfo | -u`, `wbinfo -g`, `getent passwd`, and `getent group` commands work just | fine. Howver, `wbinfo -t` and `wbinfo -a` don't work, and I can't | authenticate users against the domain controller. As an example: | | [EMAIL PROTECTED] samba]# net ads join -U Administrator | Administrator's password: | [2004/05/13 17:49:30, 0] libads/ldap.c:ads_add_machine_acct(1006) | Host account for nasone already exists - modifying old account | Using short domain name -- ECHUDSON | Joined 'NASONE' to realm 'HUDSON-OFFICE.ECEDIINC.COM' | [EMAIL PROTECTED] samba]# net rpc join -U Administrator | Password: | Joined domain ECHUDSON. ^^^ Surely this is redundant? | [EMAIL PROTECTED] samba]# wbinfo -t | checking the trust secret via RPC calls failed | error code was NT_STATUS_UNSUCCESSFUL (0xc001) | Could not check secret | [EMAIL PROTECTED] samba]# | | After trying to do the `wbinfo -t`, I see the following in 'winbindd.log': | | [2004/05/13 17:49:41, 2] | libsmb/cliconnect.c:cli_session_setup_kerberos(535) | Doing kerberos session setup | [2004/05/13 17:49:41, 0] rpc_client/cli_pipe.c:rpc_auth_pipe(336) | rpc_auth_pipe: wrong schannel auth len 24 This looks like https://bugzilla.samba.org/show_bug.cgi?id=1315, where you will find a patch that fixed it for everyone who has tried (including me). The patch is also in the 3.0.4-2mdk packages in Mandrake cooker (and the RPMS for Mandrake 9.1-10 that hopefully should be available soon on the samba mirrors). Regards, Buchan - -- Buchan Milne Senior Support Technician Obsidian Systems http://www.obsidian.co.za B.EngRHCE (803004789010797) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFApNawrJK6UGDSBKcRAm1kAKC4oVmdGXxgDIKPehnslAEG0eED9ACfcXJe LDeLPWp3/Y/fafXfcVMwPmY= =byBX -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 2 terabyte filesystem limitation on linux client
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Hi all. | | I have recently introduced two 5.5TB XFS filesystems to our storage | backend. I export the filesystem via samba 3.0.3 on Fedora core 2. | Linux clients that mount the share show only 2TB available. Windows | clients show the full capacity. Before I put these filesystems into | production I'd like to find out if the reported filesystem size is going | to cause a problem. Is SMB actually limited to 2TB? If so, why do | Windows clients see the full capacity? Is this a limitation of the | samba client software on the linux side? Well, only if you are using samba client software (ie smbclient, but *not* smbmount or mount.cifs). Are you smbmount'ing the share? If so, this may be a limitation in the smbfs filesystem driver in the kernel. You may want to try using the cifs driver (mounting with mount.cifs which is part of samba), which is available in the 2.4 kernels of some distros (ie Mandrake 9.2 and later), and 2.6 kernels for others. Regards, Buchan - -- Buchan Milne Senior Support Technician Obsidian Systems http://www.obsidian.co.za B.EngRHCE (803004789010797) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFApNejrJK6UGDSBKcRAvHAAKCYkYBvOgsauwjwQeikqw/sD2cG9QCglUSt 0bOrbI9PtrHGTjs7YpHIzZI= =PvT6 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind problems with linux domain member
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yohann Ferreira wrote: | I've successfully applied the winbind patch on a samba 3.0.4 : ... | wbinfo -ugmt are working well, but ... | getent passwd and getent group don't show me any 200x groups Could you send me a level 10 debug log from winbindd from startup to the failure ? Thanks. cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFApNh0IR7qMdg1EfYRAlQuAJ91I3fD/RBFiN392d6FsgGGJ3936gCgmUbw IijVHd+RVXk5ogAYfCLI0mM= =UWyB -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem setting up a Domain with Smb-ldap
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Hi everybody: | | I´m using Samba 3.0.2 (Suse 9.1) with LDAP, and everything works | fine...for workgroups, but when I try to build up a Domain, I do set | up the controller, etc but the Windows machine gives me the log that | appear down under, everything seems ok but I think the problem lies in | these two lines (apprxoimately in the middle) | |Returning domain sid for domain FMDV - S-1-5-21-78767638-71612024-1917398797 |_samr_open_domain: ACCESS DENIED (requested: 0x0211) | Returning domain sid for domain FMDV - | S-1-5-21-78767638-71612024-1917398797 _samr_create_user: | ACCESS DENIED (granted: 0x0201; required: 0x0010) | | But I haven´t find anything in google, so , would anyone be so kind to | help me? thanks in advance Looks like the LDAP dn samba is using does not have permission to create ~ entries where you have told it to create entries in your LDAP tree. Regards, Buchan - -- Buchan Milne Senior Support Technician Obsidian Systems http://www.obsidian.co.za B.EngRHCE (803004789010797) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFApNhgrJK6UGDSBKcRAgRQAJ4n136nVyeAk2dIZw+1Un1rQ/YfcACgw/8V amGAgvTkDKCleS/chTiTtvw= =HdsZ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] BUG IN SAMBA 3.0.4 ?
I used the samba-3.0.1pre1 without problems. When I use the samba-3.0.4 (bug ms04-011 fixed), i can´t write in all shares. Is this a bug?! I use the same smb.conf [global] workgroup = jfsecco server string = JFSECCO PDC netbios name = belpo2 hosts allow = 10.18. interfaces = eth0 # Windows administrators # You can add users or groups (prefix groups with a '@') #domain admin group = l.rathbone c.evans @domadm # SAMBA-LDAP declarations ldap suffix = dc=jfsecco,dc=com,dc=ar # User with write access to the LDAP directory ldap admin dn = cn=Manager,dc=jfsecco,dc=com,dc=ar #ldap ssl = start tls ldap ssl = no ldap passwd sync = yes # Create machine trust accounts automatically add user script = /usr/local/sbin/smbldap-useradd.pl -w %u # this tells Samba to use a separate log file for each machine # that connects log file = /usr/local/samba/var/log.%m # How much information do you want to see in the logs? # default (1) is only to log critical messages log level = 2 # Put a capping on the size of the log files (in Kb). max log size = 50 # MUST be security = user for PDC security = user # Most people will find that this option gives better performance. # See speed.txt and the manual pages for details # You may want to add the following on a Linux system: # SO_RCVBUF=8192 SO_SNDBUF=8192 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 # set local master to no if you don't want Samba to become a master # browser on your network. Otherwise the normal election rules apply local master = yes # OS Level determines the precedence of this server in master browser # elections. The default value (20) should be reasonable os level = 90 # Domain Master specifies Samba to be the Domain Master Browser. This # allows Samba to collate browse lists between subnets. Don't use this # if you already have a Windows NT domain controller doing this job domain master = yes # Preferred Master causes Samba to force a local browser election on startup # and gives it a slightly higher chance of winning the election preferred master = yes ###WINS wins support = yes wins server = belpo2 belpo4 ### # I have stuck this in because it was in a HOWTO but I have no idea what it does - but it does not sound good null passwords = no restrict anonymous = 1 ##AGREGADO passdb backend = ldapsam:ldap://ldapservermaster # You MUST use password encryption. Please read # ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation. encrypt passwords = yes passwd program =/usr/local/sbin/smbldap-passwd.pl -o %u # When using encrypted passwords, Samba can synchronize the local # UNIX password as well. You will also need the passwd chat parameters unix password sync = no # how should smbd talk to the local system when changing a UNIX # password? See smb.conf(5) for details passwd chat = *new*password* %n\n *new*password* %n\n *successfully* # Enable this if you want Samba act as a domain controller. domain logons = yes # Where to store roving profiles (only for Win95 and WinNT) # %L substitutes for this servers netbios name, %U is username # This refers to the [profiles] share below # The permissions on the profiles directory should be # chmod 1757 /usr/local/samba/profiles # drwxr-xrwt 5 root root 4096 May 1 08:43 profiles #logon path = \\%L\profiles\%u # UNC path specifying the network location of the user's home directory # only used when acting as a DC for WinNT/2k/XP. Ignored by Win9x clients #logon home = \\%L\%U # What drive should the logon home be mounted at upon login ? # only used when acting as a DC for WinNT/2k/XP. Ignored by Win9x clients #logon drive = Z: logon script = login.bat #Share Definitions [homes] comment = Home Directories browseable = no writable = no write list = %S @administradores valid users = %S @administradores invalid users = force create mode = 0770 force directory mode = 0770 directory mask = 0770 create mask = 0770 force user = %S force group = administradores [netlogon] comment = Network Logon Service path = /usr/local/samba/netlogon read only = yes public = no valid users = %S @usuarios @administradores writable = no write list = llattan locking = no [fprotdefs] comment = Definiciones de Virus path = /usr/local/f-prot/fprotdefs public = no valid users = %S @usuarios @administradores writable = no write list = llattan locking = no [total_usuarios] comment = Directorio para Administrador path = /home browseable = no read only = yes public = no valid users = @administradores writable = no write list = [total_grupos] comment = Directorio para Administrador path = /home2 browseable = no read only = yes public = no valid users = @administradores writable = no write list = # Provide a specific roving profile share # the default is to use the user's home directory # The permissions on the profiles directory should be # chmod 1757 /usr/local/samba/profiles # drwxr-xrwt 5 root
RE: [Samba] Poor performance with Mac OS X Panther clients
In principal it does not surprise me that it is much slower on your OS X client than on your Linux or Windows clients. When you open a folder in your Linux or Windows file browser all they will need to do is request a file listing. On the other hand an OS X client will read the resourse fork (meta data) for each file to give it the correct application association and icon in the finder. Does your customer not see a similar problem when the files are stored on a Windows file server? I would expect they would (that is if they are mounting from the Windows server over SMB not AFP which may prove quicker). I agree with your assessment about the metadata reads causing additional load on the server. We've tried to take that into account when evaluating the performance of the shares. Windows clients connecting to the Samba server appear to use a different API call to get the directory listing plus they don't use the Mac OS X metadata. For Windows clients, the performance is quite zippy. Same scenario for the Linux clients. Mac OS X clients connecting to the server and then scrolling the directory view in the Finder cause a huge CPU spike. They appear to be using a completely different API call to access the directory contents and then they do a another API call for every file in the directory including metadata calls. I will test the results from both Windows and Mac OS X clients with the data hosted on a Windows server to measure the results. From experience, I expect that the Mac OS X clients will still perform worse but not to the same degree as when the data was hosted on Samba. -- Nathan R. Valentine [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] BUG IN SAMBA 3.0.4 ?
add to each share writeable = yes or read-only = no This Helps! Rauno -Original Message- From: Leandro I used the samba-3.0.1pre1 without problems. When I use the samba-3.0.4 (bug ms04-011 fixed), i can´t write in all shares. Is this a bug?! I use the same smb.conf #Share Definitions [homes] comment = Home Directories browseable = no writable = no write list = %S @administradores valid users = %S @administradores invalid users = force create mode = 0770 force directory mode = 0770 directory mask = 0770 create mask = 0770 force user = %S force group = administradores [netlogon] comment = Network Logon Service path = /usr/local/samba/netlogon read only = yes public = no valid users = %S @usuarios @administradores writable = no write list = llattan locking = no [fprotdefs] comment = Definiciones de Virus path = /usr/local/f-prot/fprotdefs public = no valid users = %S @usuarios @administradores writable = no write list = llattan locking = no [total_usuarios] comment = Directorio para Administrador path = /home browseable = no read only = yes public = no valid users = @administradores writable = no write list = [total_grupos] comment = Directorio para Administrador path = /home2 browseable = no read only = yes public = no valid users = @administradores writable = no write list = # Provide a specific roving profile share # the default is to use the user's home directory # The permissions on the profiles directory should be # chmod 1757 /usr/local/samba/profiles # drwxr-xrwt 5 root root 4096 May 1 08:43 profiles #[profiles] # path = /usr/local/samba/profiles # read only = no # create mask = 0600 # directory mask = 0700 # writable = yes # ;browseable = no # ;guest ok = yes ##[ingenieria] ## path = /home/ingenieria ## valid users = @administradores @ingenieria ## public = no ## writable = no ## write list = @administradores @ingenieria ## force create mode = 0770 ## force directory mode = 0770 ## directory mask = 0770 ## create mask = 0770 ## force group = ingenieria [sistemas] path = /home2/sistemas valid users = @administradores @sistemas browseable = no public = no writable = no write list = @administradores @sistemas force create mode = 0770 force directory mode = 0770 directory mask = 0770 create mask = 0770 force user = administrador force group = sistemas [compras] path = /home2/compras valid users = @administradores @compras browseable = no public = no writable = no write list = @administradores @compras force create mode = 0770 force directory mode = 0770 directory mask = 0770 create mask = 0770 force user = administrador force group = compras [administrac] path = /home2/administracion valid users = @administradores @administracion browseable = no public = no writable = no write list = @administradores @administracion force create mode = 0770 force directory mode = 0770 directory mask = 0770 create mask = 0770 force user = administrador force group = administracion [vencimientos] path = /home2/vencimientos valid users = @administradores @vencimientos browseable = no public = no writable = no write list = @administradores @vencimientos force create mode = 0770 force directory mode = 0770 directory mask = 0770 create mask = 0770 force user = administrador force group = vencimientos [finanzas] path = /home2/finanzas valid users = @administradores @finanzas browseable = no public = no writable = no write list = @administradores @finanzas force create mode = 0770 force directory mode = 0770 directory mask = 0770 create mask = 0770 force user = administrador force group = finanzas [auditoria] path = /home2/auditoria valid users = @administradores @auditoria browseable = no public = no writable = no write list = @administradores @auditoria force create mode = 0770 force directory mode = 0770 directory mask = 0770 create mask = 0770 force user = administrador force group = auditoria [comercioext] path = /home2/comercioext valid users = @administradores @comercioext browseable = no public = no writable = no write list = @administradores @comercioext force create mode = 0770 force directory mode = 0770 directory mask = 0770 create mask = 0770 force user = administrador force group = comercioext [tipodecambio] path = /home2/tipodecambio valid users = @administradores @tipodecambio browseable = no public = no writable = no write list = @administradores rvalentini force create mode = 0770 force directory mode = 0770 directory mask = 0770 create mask = 0770 force user = administrador force group = tipodecambio [reloj] comment = Fichadas Reloj Empleados path = /home2/reloj valid users = @administradores @reloj public = no browsable = no writable = no writelist = @administradores @reloj force create mode = 0770 force directory mode = 0770 directory mask = 0770 create mask = 0770 force user = administrador force
Re: [Samba] Winbind ADS Issues w/ *TONS* of Pre-Research
Hello I have your same problem. There are many people fighting againt ADS / samba integration ? If yes, I should like a mailing list only for that. However new book from John Terpstra is a good resource, with a section for kerberos - ADS. Giuseppe Panei (I apologize for my bad english) On Friday 14 May 2004 11:36, Anders Berg wrote: Hi, just like: http://lists.samba.org/archive/samba/2004-May/085521.html http://lists.samba.org/archive/samba/2004-May/085808.html huh? Another *just* came in also: http://lists.samba.org/archive/samba/2004-May/085881.html Well, this one has many persons puzzeled. The best place so far is: http://www.linuxquestions.org/questions/showthread.php?s=threadid=161506 http://www.linuxquestions.org/questions/showthread.php?s=threadid=161506 I guess that the Samba community is still (which of course we are part of) does not have the solution for this problem, since it has not been answered/adressed by anybody in great lenght/detail. The HOWTO adresses it in: http://se.samba.org/samba/docs/man/howto/domain-member.html#ads-member but really that is no HOWTO. As long as it does not show you HOW-TO. I also guess that some people that have followed this thread for a while are starting to get bugged by me :) Sorry I can't help you, I have not figured it out either. YS Anders Berg -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Poor performance with Mac OS X Panther clients
I will test the results from both Windows and Mac OS X clients with the data hosted on a Windows server to measure the results. From experience, I expect that the Mac OS X clients will still perform worse but not to the same degree as when the data was hosted on Samba. Turns out that we are seeing similar CPU spikes on the server whether the server is a Windows box of a *nix box running Samba. To me, this would indicate that this is a problem with the Mac OS X client. Based on the packet dumps, I would say that the Mac OS X Samba system is doing the the directory contents lookups in a very inefficient manner. Since OS X is running a version of Samba... Anyone have any tips? -- Nathan R. Valentine [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] odd problem with getent,
I am using samba 3.0.2a. on Suse Linux 9.0 for AMD64. If I issue 'getent passwd' I get a list of the domain user accounts. If I select one of the usernames from the output and issue 'getent passwd DOMAIN-user' I get no response. I have put the debug level of winbind to 10 and queries without a username result in a lot of activity on winbindd's part. Hower doing the same for a single user results in no output from winbind, it seems the query is not forwarded to the daemon if the details for a particular user are requested. Mike -- Mike Sullivan V.P. Performance Computing @lliance Technologies, Voice: (416) 385-3255 x 228, 18 Wynford Dr, Suite 407Fax: (416) 385-1774 Toronto, ON, Canada, M3C-3S2Toll Free:1-877-216-3199 http://www.alltec.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 2 terabyte filesystem limitation on linux client
Thanks for the reply Buchan. I'll try cifs instead of smbfs. On Fri, 2004-05-14 at 07:28, Buchan Milne wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | Hi all. | | I have recently introduced two 5.5TB XFS filesystems to our storage | backend. I export the filesystem via samba 3.0.3 on Fedora core 2. | Linux clients that mount the share show only 2TB available. Windows | clients show the full capacity. Before I put these filesystems into | production I'd like to find out if the reported filesystem size is going | to cause a problem. Is SMB actually limited to 2TB? If so, why do | Windows clients see the full capacity? Is this a limitation of the | samba client software on the linux side? Well, only if you are using samba client software (ie smbclient, but *not* smbmount or mount.cifs). Are you smbmount'ing the share? If so, this may be a limitation in the smbfs filesystem driver in the kernel. You may want to try using the cifs driver (mounting with mount.cifs which is part of samba), which is available in the 2.4 kernels of some distros (ie Mandrake 9.2 and later), and 2.6 kernels for others. Regards, Buchan - -- Buchan Milne Senior Support Technician Obsidian Systems http://www.obsidian.co.za B.EngRHCE (803004789010797) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFApNejrJK6UGDSBKcRAvHAAKCYkYBvOgsauwjwQeikqw/sD2cG9QCglUSt 0bOrbI9PtrHGTjs7YpHIzZI= =PvT6 -END PGP SIGNATURE- -- David Smithson [EMAIL PROTECTED] Custom Film Effects www.customfilmeffects.com 818-840-6833 x126 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.2 net join questions
1. What is the right procedure for a Samba 3.x server to join multiple domains? I have seen below error intermittently when using net join: Create of workstation account failed User specified does not have administrator privileges Unable to join domain domain_name. 2. Is there a Samba (v3.0.2) command to show what domain(s) it has already joined? Thanks in advance. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Poor performance with Mac OS X Panther clients
I would strongly suspect that the Mac OS finder is simply hammering the file server because, in your case, it as to do 1 seperate read opertions just to display the folder contents. Try with an NFS share, this would identify whether the SMB support in either the client or server is ineffecient or if you just have unrealistic expectations of performance from this type of configuration. If you are using an OS X server have you tried connected via Apple Talk instead? This has native support for resource fork data and may give better performance, thanks Andy. I will test the results from both Windows and Mac OS X clients with the data hosted on a Windows server to measure the results. From experience, I expect that the Mac OS X clients will still perform worse but not to the same degree as when the data was hosted on Samba. Turns out that we are seeing similar CPU spikes on the server whether the server is a Windows box of a *nix box running Samba. To me, this would indicate that this is a problem with the Mac OS X client. Based on the packet dumps, I would say that the Mac OS X Samba system is doing the the directory contents lookups in a very inefficient manner. Since OS X is running a version of Samba... Anyone have any tips? -- Nathan R. Valentine [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] mount.cifs returns error 13
Hi. Google shows that this problem has been brought up before, but I can't find the solution in the list archives. If I try to mount a samba share (v3.0.3) using cifs it returns: mount error 13 = Permission denied and in the log: May 14 11:41:31 myriapod kernel: CIFS VFS: Send error in SessSetup = -13 May 14 11:41:31 myriapod kernel: CIFS VFS: cifs_mount failed w/return code = -13 mounting the share with the same credentials using smbfs works, so there must be some deeper authentication problem. Can somebody drop me a hint? Thanks. -- David Smithson [EMAIL PROTECTED] Custom Film Effects www.customfilmeffects.com 818-840-6833 x126 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] WINS Server: Use Samba or Windows?
On Fri, May 14, 2004 at 08:00:08AM -0500, Gerald (Jerry) Carter wrote: Leon Stringer wrote: | But there's no justification as to why Samba isn't | recommended in this scenario; the only missing feature I | can see is replication. Does anyone know the basis is | of this recommendation? What about good or bad | experiences with either Windows or Samba WINS servers? I'm not sure I agree with that recommendation but the reason its sthere is because Samba does not support WINS Replication currently. At one point it was hoped this would be working in Samba 3 but didn't make it. Jerry, Do you know if anyone is wroking on this any more? Nathan -- nre :wq -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Poor performance with Mac OS X Panther clients
On Fri, 2004-05-14 at 14:22, ww m-pubsyssamba wrote: I would strongly suspect that the Mac OS finder is simply hammering the file server because, in your case, it as to do 1 seperate read opertions just to display the folder contents. Try with an NFS share, this would identify whether the SMB support in either the client or server is ineffecient or if you just have unrealistic expectations of performance from this type of configuration. We are confident that it is something goofy about the way the Finder behaves when reading the content of the directory. Doing an 'ls' on the share from the OS X command line is quite snappy. It's only when the Finder does the reads on the directory for both the files and the metadata that things slow down and we get the CPU spike. My counterpart has been doing some research and, although I've not seen the material that he is referencing, he has reported to me that Panther seems to have a few known issues with performance when it comes to accessing NFS and Samba exports/shares and he is hearing that the next version will provide several fixes in this area. I'm not an OS X user so I will have to trust him on this one. If you are using an OS X server have you tried connected via Apple Talk instead? This has native support for resource fork data and may give better performance, We are not using OS X as a server. The servers are all Windows 2000 or Debian GNU/Linux stable + Samba. The client wants to completely eliminate AppleTalk from the network based on his past experiences with AppleTalk performance. Thanks for your help everyone. For now, I think we are going to chalk this one up to lots and lots of files in the shares and the somewhat goofy way that the Finder handles directory listings. -- Nathan R. Valentine [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] WINS Server: Use Samba or Windows?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nathan Ehresman wrote: | I'm not sure I agree with that recommendation but the reason | its sthere is because Samba does not support WINS Replication | currently. | | | At one point it was hoped this would be working in Samba | 3 but didn't make it. Jerry, Do you know if anyone is | woking on this any more? Nope. You interested ? I can get you started. :-) cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFApRbgIR7qMdg1EfYRAl8qAKCWwt6NNoi7NgdZx6IwbYFiVIl48wCdGpOb LfYmHlINKpDJIjv4ZJwEE60= =4d8P -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] win2k login to samba 3.03/4 PDC problem
I am having a problem getting a user to login to a win2k box that was successfully added to the samba3.0.3/4 domain. Originally I had a problem with adding the machines but I modified the smbldap_conf.pm add machine function to add the machine to the local passwd file as well as ldap and it was fine. This does seem strange to me though because I can't figure out why it would need to be added to the passwd file and ldap with the passdb set as follows: passdb backend = ldapsam:ldap://127.0.0.1:389 Any ideas on this? My actual issue now is although I can add the machine to the domain, I can't log into it. I have setup a couple of users and while I can authenticate to open local shared folders I can not log into the domain. I debugged both the ldap server and the samba server and I see it says I passed the authentication process on the samba side as follows: [2004/05/14 14:46:27, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: sam authentication for user [campbell] succeeded [2004/05/14 14:46:27, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 [2004/05/14 14:46:27, 3] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(101) : conn_ctx_stack_ndx = 0 [2004/05/14 14:46:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/14 14:46:27, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 [2004/05/14 14:46:27, 2] auth/auth.c:check_ntlm_password(305) check_ntlm_password: authentication for user [campbell] - [campbell] - [campbell] succeeded [2004/05/14 14:46:27, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 4814 [2004/05/14 14:46:27, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=71f3 nwritten=352 [2004/05/14 14:46:27, 3] smbd/process.c:process_smb(890) Transaction 39 of length 63 [2004/05/14 14:46:27, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 4628) [2004/05/14 14:46:27, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=71f3 min=1024 max=1024 nread=596 But on the windows box I get an error of The system could not log you on. Please check your username and domain are correct. etc Any ides? I have searched high and low as well as tried to debug this myself but can't figure out what is going on. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] win2k login to samba 3.03/4 PDC problem
For your 'user must be in passwd file' issue, are you saying /etc/passwd or smbpasswd? Are you trying to store computers in a different ou than your regular user accounts? There is a somewhat well known bug/design issue with that feature... Daniel Campbell wrote: I am having a problem getting a user to login to a win2k box that was successfully added to the samba3.0.3/4 domain. Originally I had a problem with adding the machines but I modified the smbldap_conf.pm add machine function to add the machine to the local passwd file as well as ldap and it was fine. This does seem strange to me though because I can't figure out why it would need to be added to the passwd file and ldap with the passdb set as follows: passdb backend = ldapsam:ldap://127.0.0.1:389 Any ideas on this? My actual issue now is although I can add the machine to the domain, I can't log into it. I have setup a couple of users and while I can authenticate to open local shared folders I can not log into the domain. I debugged both the ldap server and the samba server and I see it says I passed the authentication process on the samba side as follows: [2004/05/14 14:46:27, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: sam authentication for user [campbell] succeeded [2004/05/14 14:46:27, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 [2004/05/14 14:46:27, 3] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(101) : conn_ctx_stack_ndx = 0 [2004/05/14 14:46:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/14 14:46:27, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 [2004/05/14 14:46:27, 2] auth/auth.c:check_ntlm_password(305) check_ntlm_password: authentication for user [campbell] - [campbell] - [campbell] succeeded [2004/05/14 14:46:27, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 4814 [2004/05/14 14:46:27, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=71f3 nwritten=352 [2004/05/14 14:46:27, 3] smbd/process.c:process_smb(890) Transaction 39 of length 63 [2004/05/14 14:46:27, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 4628) [2004/05/14 14:46:27, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=71f3 min=1024 max=1024 nread=596 But on the windows box I get an error of The system could not log you on. Please check your username and domain are correct. etc Any ides? I have searched high and low as well as tried to debug this myself but can't figure out what is going on. -- Paul Gienger Office:701-281-1884 Applied Engineering Inc. Cell: 701-306-6254 Information Systems Consultant Fax: 701-281-1322 URL: www.ae-solutions.commailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How to disable changing of modification times on file access?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hannu Koivisto wrote: || noticed that whenever I open a file using a Windows || (I'm using Windows 2000) application, Samba changes || its modification time to the current time. The old || modification time is restored when the windows application || quits / closes the file. | | Samba is only doing what the client applciation asks for. | | Could you elaborate? It sounds odd that the client application | would specifically ask for the modification time to be changed in | this case. Even if it does that, would it not make sense to | provide an option that could be used to ignore such requests and | only let the modification time change when the file is actually | modified? My observations is that the behavior is by design in applications like Excel. cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFApSCLIR7qMdg1EfYRAu/uAJ4sMy/SdJJ4v3dOAJxb5A2EaO/zHwCcD2Gq hmJO08ezB/4sjRJJbavq54o= =rZEH -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Windows 2003 Active Directory and Group Access
After so many days of whining - now it works. For all who have the same problem on a debian system mentioned below. Upgrade to 3.0.4 and everything is fine. Kind regards Franz -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Franz Gsell Gesendet: Montag, 10. Mai 2004 19:31 An: [EMAIL PROTECTED] Betreff: RE: [Samba] Windows 2003 Active Directory and Group Access As I have written - this is NO solution. And this has nothing to do with Permissions. I must be able to use the winbind use default domain = yes option. But when I use this option all users have to enter the Domain suffix on they usernames like DOMAIN+testuser for pop3 and ssh. This is a bad thing to tell 100 users that they have to enter anoter username for pop3 or ssh - but simple testuser for the share. I still need help ?? Kind regards Franz -Ursprüngliche Nachricht- Von: Kevin Kallsen [mailto:[EMAIL PROTECTED] Gesendet: Montag, 10. Mai 2004 00:31 An: 'Franz Gsell' Betreff: RE: [Samba] Windows 2003 Active Directory and Group Access I had this problem too. The solution was to chmod the directory/folder with readable/writable access. Also chgrp for the directory -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Franz Gsell Sent: Sunday, May 09, 2004 11:03 AM To: [EMAIL PROTECTED] Subject: RE: [Samba] Windows 2003 Active Directory and Group Access Hi together, I have still the problems I have mentioned below. Is there any developer who can help me? If it is not possible to find a workaround, I have to enter every user explicitly in the valid users option, and there are about 100 users who are trying to access the share. It would be great if a developer can tell me more - perhaps I can make a hack by myself - but it's very difficult to understand all source files and how they work together. Kind regars Franz -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Franz Gsell Gesendet: Mittwoch, 5. Mai 2004 21:20 An: [EMAIL PROTECTED] Cc: 'Alex de Vaal' Betreff: RE: [Samba] Windows 2003 Active Directory and Group Access Hi Alex, Yes I have already tried this settings: winbind use default domain = yes and valid users = @AMATEC.LOCAL+GG_Entwicklung But this only works for windows 2000 Clients and not for Windows XP Clients. As you have written before everything works without winbind use default domain = yes but then a user has to login e.g. for ssh with AMATEC+username. I don't think it's a good idea to hack the pam module too, perhaps is there another possibility - perhaps any of the developer team has a workaround? Kind regards Franz -Ursprüngliche Nachricht- Von: Alex de Vaal [mailto:[EMAIL PROTECTED] Gesendet: Mittwoch, 5. Mai 2004 12:22 An: 'Franz Gsell' Betreff: RE: [Samba] Windows 2003 Active Directory and Group Access Hello Franz, You can try to set winbind use default domain = yes again and use as valid users: valid users = @AMATEC.LOCAL+GG_Entwicklung I've found in a faq the following: Q: I tried to set valid users = @Engineers, but it does not work. My Samba server is an Active Directory Domain Member server. Has this been fixed now? A: The use of this parameter has always required the full specification of the Domain account, for example, valid users = @MEGANET2\Domain Admins. You can always try if this work, while hacking pam_winbind.so seems not to be a good idea to me. Best regards, Alex. -Original Message- From: Franz Gsell [mailto:[EMAIL PROTECTED] Sent: Monday 26 April 2004 18:43 To: [EMAIL PROTECTED] Cc: 'Alex de Vaal' Subject: RE: [Samba] Windows 2003 Active Directory and Group Access Hi, thanks for your help - now it works :-))) But there is a new problem. We log on to the linux machine for email and ssh and so on. So the new problem is that a user is now AMATEC+testuser instead simple testuser (for the pam module). But I think we can make a hack to the pam_winbind.so file to add AMATEC+ to the entered username (so a user has not to enter AMATEC+testuser but only testuser). Or is there a better way? Kind regards -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] win2k login to samba 3.03/4 PDC problem
The machine name must be in the file /etc/passwd. And yes I have the computers in computers and the users in ou users. Should I try them both in users? Paul Gienger wrote: For your 'user must be in passwd file' issue, are you saying /etc/passwd or smbpasswd? Are you trying to store computers in a different ou than your regular user accounts? There is a somewhat well known bug/design issue with that feature... Daniel Campbell wrote: I am having a problem getting a user to login to a win2k box that was successfully added to the samba3.0.3/4 domain. Originally I had a problem with adding the machines but I modified the smbldap_conf.pm add machine function to add the machine to the local passwd file as well as ldap and it was fine. This does seem strange to me though because I can't figure out why it would need to be added to the passwd file and ldap with the passdb set as follows: passdb backend = ldapsam:ldap://127.0.0.1:389 Any ideas on this? My actual issue now is although I can add the machine to the domain, I can't log into it. I have setup a couple of users and while I can authenticate to open local shared folders I can not log into the domain. I debugged both the ldap server and the samba server and I see it says I passed the authentication process on the samba side as follows: [2004/05/14 14:46:27, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: sam authentication for user [campbell] succeeded [2004/05/14 14:46:27, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 [2004/05/14 14:46:27, 3] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(101) : conn_ctx_stack_ndx = 0 [2004/05/14 14:46:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/14 14:46:27, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 [2004/05/14 14:46:27, 2] auth/auth.c:check_ntlm_password(305) check_ntlm_password: authentication for user [campbell] - [campbell] - [campbell] succeeded [2004/05/14 14:46:27, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 4814 [2004/05/14 14:46:27, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=71f3 nwritten=352 [2004/05/14 14:46:27, 3] smbd/process.c:process_smb(890) Transaction 39 of length 63 [2004/05/14 14:46:27, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 4628) [2004/05/14 14:46:27, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=71f3 min=1024 max=1024 nread=596 But on the windows box I get an error of The system could not log you on. Please check your username and domain are correct. etc Any ides? I have searched high and low as well as tried to debug this myself but can't figure out what is going on. -- Daniel Campbell Director of Networking On2 Technologies 21 Corporate Drive Suite 103 Clifton Park, NY 12065 518-348-0099 x234 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] win2k login to samba 3.03/4 PDC problem
It has been stated that anything but user and computer acccounts in the same ou simply wont work. I forget the bug number, but if you do some searching on the samba bugzilla db, it's there in black and white. That being said, I know I got it to work once on a linux only environment, but then as soon as tried to roll out on solaris the fertilizer hit the ventilator. Don't know what I did, but it would appear it was an anomaly. Daniel Campbell wrote: The machine name must be in the file /etc/passwd. And yes I have the computers in computers and the users in ou users. Should I try them both in users? Paul Gienger wrote: For your 'user must be in passwd file' issue, are you saying /etc/passwd or smbpasswd? Are you trying to store computers in a different ou than your regular user accounts? There is a somewhat well known bug/design issue with that feature... Daniel Campbell wrote: I am having a problem getting a user to login to a win2k box that was successfully added to the samba3.0.3/4 domain. Originally I had a problem with adding the machines but I modified the smbldap_conf.pm add machine function to add the machine to the local passwd file as well as ldap and it was fine. This does seem strange to me though because I can't figure out why it would need to be added to the passwd file and ldap with the passdb set as follows: passdb backend = ldapsam:ldap://127.0.0.1:389 Any ideas on this? My actual issue now is although I can add the machine to the domain, I can't log into it. I have setup a couple of users and while I can authenticate to open local shared folders I can not log into the domain. I debugged both the ldap server and the samba server and I see it says I passed the authentication process on the samba side as follows: [2004/05/14 14:46:27, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: sam authentication for user [campbell] succeeded [2004/05/14 14:46:27, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 [2004/05/14 14:46:27, 3] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(101) : conn_ctx_stack_ndx = 0 [2004/05/14 14:46:27, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/14 14:46:27, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 [2004/05/14 14:46:27, 2] auth/auth.c:check_ntlm_password(305) check_ntlm_password: authentication for user [campbell] - [campbell] - [campbell] succeeded [2004/05/14 14:46:27, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 4814 [2004/05/14 14:46:27, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=71f3 nwritten=352 [2004/05/14 14:46:27, 3] smbd/process.c:process_smb(890) Transaction 39 of length 63 [2004/05/14 14:46:27, 3] smbd/process.c:switch_message(685) switch message SMBreadX (pid 4628) [2004/05/14 14:46:27, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=71f3 min=1024 max=1024 nread=596 But on the windows box I get an error of The system could not log you on. Please check your username and domain are correct. etc Any ides? I have searched high and low as well as tried to debug this myself but can't figure out what is going on. -- Paul Gienger Office:701-281-1884 Applied Engineering Inc. Cell: 701-306-6254 Information Systems Consultant Fax: 701-281-1322 URL: www.ae-solutions.commailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] REPOST Linux network with access to NT4 domain using Samba
Sorry if this is repost, but I didn¹t see this hit the list. I have a problem I am trying to resolve. I have Linux firewalls protecting the users on many networks. Everything works but Domain logons to the NT4 Domain. This is due to NETBIOS and NAT problem. So I have users that have a private address and a PDC that has a pubilc address due to the network design that can¹t be changed. I have install Samba 3.x and thought I could join it to the domain to allow the samba server to handle the connection for the NATed users. Is there a way to do this? I need the local users to be able to authenticate to an NT4 domain or I have to remove the firewalls. I am working on trying to convince them to migrate from the NT4 domain to samba, but it is a battle. If I can show them that Linux can work with the current network for now it could by me more time to convince them to migrate. Thanks in a advance, Jason -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] OTHER BUG IN SAMBA 3.0.4 ?! FORCE USER
(excuse me for my bad english) I CAN´T CHANGE WRITABLE/READ-ONLY VALUE BECAUSE I NEED THAT ANYONE WRITE EXCEPT THE USER/GROUP IN WRITELIST I used the samba-3.0.1pre1 without problems. Now, I use the samba-3.0.4 (bug ms04-011 fixed) Is this a samba 3.0.4 bug ?! : [rental] comment = Rental path = /home/rental valid users = @administradores @rental mesaayuda ctoledo public = no browsable = no writable = no writelist = @administradores apetrone force create mode = 0770 force directory mode = 0770 directory mask = 0770 create mask = 0770 force group = rental SAMBA 3.0.1pre1 ALL OK SAMBA 3.0.4 ALL OK BUT ... when i add the force user parameter [rental] comment = Rental path = /home/rental valid users = @administradores @rental mesaayuda public = no browsable = no writable = no writelist = @administradores apetrone force create mode = 0770 force directory mode = 0770 directory mask = 0770 create mask = 0770 force user = administrador force group = rental SAMBA 3.0.1pre1 ALL OK (files/dirs: mod 770 own administrador:rental) SAMBA 3.0.4 i can´t write with all users (administrador, apetrone, administradores, etc) i switch the versions and confirm the error. Leandro LATTANZIO. [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] winbind - pam_listfile.so for solaris
We use samba 2.2.9 with winbind. We use winbind for authentication. I was able to selectively limit pop3 use among winbind users on redhat 9 with this pam configuration. (As you would use it in ftpusers, in the reverse sense.) auth required /lib/security/pam_listfile.so item=user onerr=fail sense=allow file=/etc/pop3users This is the best solution for my situation, and I want to have that on my Solaris servers as well. However, I couldn't find from my long searches whether there's an equivalent of pam_listfile.so for solaris. I understand users can make their own pam modules, but I am looking for a ready made solution. I'd appreciate any help. Regards, Ben Kim -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Syncronising off-line content with my Samba Server in WinXP
Hello, I get an error when I want to syncronise my 'changed off-line files' with the files of my Samba Server. The off-line files are located on my laptop with windows XP running on it. I can syncronise and acces my files manually (by drag-and-drop or copy-paste) without a problem. There is no problem with the internet connection. The error message I get from the syncronisation program of WinXP: Off-line file (PathToServer on NameServer): Acces to NameFile has been refused on PathToFile. (This is a translation from Dutch). The 'chmod' of the file is 777 and the owner is nobody:nobody. (I changed the 'chmod' myself, normally it is 744.) This is a part of my configuration file: [download] comment = DownLoad path = /download/ read only = no guest ok = yes The samba version is 2.2.7a (RedHat 9). What is wrong? Koen -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] XP pro can't join Domain
I have been working on a a Linux server (file, printer, PDC) for the last 6 months. I am currently using Fedora with Samba 3.0 as my server. I have an XP pro(xppro) and Win 98(winlin) machines on my small network. The file and print server seems to be working fine on both clients. However, my XP machine is not joining the the domain. Symptoms: 1. As I try to join the domain as a root, I get The following error occured attempting to join the domain Domain Name: User name could not be found On the 'xppro.log' file it says, root logged in as admin user (root privileges) 2. As I try to join the domain as me, it says, The following error occured attempting to join the domain Domain Name: Access is denied. Here are some of the things I have tried so far. - changed the registery settings on the XP machine accordingly - added root as a samba user (smbpasswd -a root). The account also exists in /etc/samba/smbpasswd file. - my user add script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u I have been trying this for the last 3 days. I have used RedHat 9.0 with samba 2.2. and was able to join the domain from this XP machine. I really need your help!!! I have to get the server ready with BDC and LDAP for testing under a network containing 30 XP pro and 40 win 98 machines and two printers. If you need my smb.conf file, I will be happy to provide it! - Do you Yahoo!? SBC Yahoo! - Internet access at a great low price. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] OSX upgrade effcts 8.3 fielpath
Hi All, I have received a cry for help from someone that has upgraded their system from OSX 10.2 to OSX 10.3. They use samba to serve an application that stores relative filepaths in an access db. Some of the the filepaths are stored in 8.3 format. A client running XP can access all the std filepaths, but is no longer able to access those stored in 8.3 format since upgrading to OSX 10.3. One thought came to mind that the default 8.3 mangling may have changed, however this should only represent a part of the 8.3 filepaths, not all of them. Is anyone aware of any devlopments in the samba chain at any point that has modified the way samba handles 8.3 filepath requests from 32 bit clients? Thanks for any suggestions. Lewis Shobbrook -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] XP pro can't join Domain
From the Howto Collection 30.4.2. Changes in Behavior 2. When adding machines to a Samba-2.2 controlled domain, the add user script was used to create the UNIX identity of the Machine Trust Account. Samba-3 introduces a new add machine script that must be specified for this purpose. Samba-3 will not fall back to using the add user script in the absence of an add machine script. Mark -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] fedora core 1 smb
There is a way using dhcp without dns or hosts: Getting the ip of clients in /var/lib/dhcp/leases or so (take a look, now I'm at home cannot remember the file) you can just adjust your dhcpd.conf to asign fixed address to ciertain mac addres. To know the mac address of each client u have to boot each client in order, one after other. Hope you understand, if not it's the stupid part of me always talking. Regards. Have you tried using /etc/hosts or a dns service? * There are really two of me; if what I say is stupid, it certainly came from the other guy. * Florian Idelberger wrote: I've tried to get windows share browsing to work for quite some time now. Even with the help of the fedora list I wasnt able to fully figure it out. If I know the ip adress of a host and the share i can mount it using smbmount. but this is unusable, because ip adresses get assigned by dhcp. Any Ideas are appreciated, florian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] rejected our name registration of WORKGROUP1d with errorcode 6
Ok, some directives were not right( I has them commented), now with: master local = yes preferred master = yes os level = 34 and in the machine that rejected the name (w98) disabled master browser. The samba server wins the election and you can see it in nethood in all boxes BUT 172.26.0.2, samba server cannot mount its shares (timeout exceed, no connection to 172.26.0.2:139) and a xp that I try couldn't access it. This is not a samba affaire, its another thing, but it puzzled me that others win98 boxes could access its shares. And why there is an autoreply of some people when I send a message to the list? Regards. Hi to all, I have a samba server that was working with security share in one subnet and now is listening on another interface, configured as a PDC logon server with wins support and w98 clients, I followed the howto: http://www.linuxfocus.org/English/March2002/article177.shtml The clients added to the domain execute the logon scripts fine, but they do not see the samba server in nethood, though they can access it in nethood with \\ip_samba_server or \\netbios_name_samba_server, all the clients w98 see each others. I have this in log.nmbd [2004/05/13 11:52:29, 0] nmbd/nmbd_nameregister.c:register_name_response(109) register_name_response: server at IP 172.26.0.2 rejected our name registration of ADMINISTRACION1d with error code 6. [2004/05/13 11:52:29, 0] nmbd/nmbd_become_lmb.c:become_local_master_fail2(425) become_local_master_fail2: failed to register name ADMINISTRACION1d on subnet 172.26.0.101. Failed to become a local master browser. [2004/05/13 11:52:29, 0] nmbd/nmbd_namelistdb.c:standard_fail_register(290) standard_fail_register: Failed to register/refresh name ADMINISTRACION1d on subnet 172.26.0.101 I have to say that box in 172.26.0.2 is not networking very well, because it doesn't response to ping's though it can access internet, see other boxes share's in nethood and ping other boxes. workgroup = ADMINISTRACION and samba server ip is 172.26.0.101 Could anybody give me a tip on what is going bad, if log.nmbd doesn't show who is local master browser, is something wrong? what is the error code 6? thanks in advance best regards -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] BUG IN SAMBA 3.0.4 ?
Hi
try write list = %S , administradores, another_brick_on_the_wall
I have seen the `,' in ${man smb.con}
Let us know if it works.
I used the samba-3.0.1pre1 without problems.
When I use the samba-3.0.4 (bug ms04-011 fixed), i can´t write in all
shares.
Is this a bug?!
I use the same smb.conf
[global]
workgroup = jfsecco
server string = JFSECCO PDC
netbios name = belpo2
hosts allow = 10.18.
interfaces = eth0
# Windows administrators
# You can add users or groups (prefix groups with a '@')
#domain admin group = l.rathbone c.evans @domadm
# SAMBA-LDAP declarations
ldap suffix = dc=jfsecco,dc=com,dc=ar
# User with write access to the LDAP directory
ldap admin dn = cn=Manager,dc=jfsecco,dc=com,dc=ar
#ldap ssl = start tls
ldap ssl = no
ldap passwd sync = yes
# Create machine trust accounts automatically
add user script = /usr/local/sbin/smbldap-useradd.pl -w %u
# this tells Samba to use a separate log file for each machine
# that connects
log file = /usr/local/samba/var/log.%m
# How much information do you want to see in the logs?
# default (1) is only to log critical messages
log level = 2
# Put a capping on the size of the log files (in Kb).
max log size = 50
# MUST be security = user for PDC
security = user
# Most people will find that this option gives better performance.
# See speed.txt and the manual pages for details
# You may want to add the following on a Linux system:
# SO_RCVBUF=8192 SO_SNDBUF=8192
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
# set local master to no if you don't want Samba to become a master
# browser on your network. Otherwise the normal election rules apply
local master = yes
# OS Level determines the precedence of this server in master browser
# elections. The default value (20) should be reasonable
os level = 90
# Domain Master specifies Samba to be the Domain Master Browser. This
# allows Samba to collate browse lists between subnets. Don't use this
# if you already have a Windows NT domain controller doing this job
domain master = yes
# Preferred Master causes Samba to force a local browser election on
startup
# and gives it a slightly higher chance of winning the election
preferred master = yes
###WINS
wins support = yes
wins server = belpo2 belpo4
###
# I have stuck this in because it was in a HOWTO but I have no idea what
it does - but it does not sound good
null passwords = no
restrict anonymous = 1
##AGREGADO
passdb backend = ldapsam:ldap://ldapservermaster
# You MUST use password encryption. Please read
# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
encrypt passwords = yes
passwd program =/usr/local/sbin/smbldap-passwd.pl -o %u
# When using encrypted passwords, Samba can synchronize the local
# UNIX password as well. You will also need the passwd chat parameters
unix password sync = no
# how should smbd talk to the local system when changing a UNIX
# password? See smb.conf(5) for details
passwd chat = *new*password* %n\n *new*password* %n\n *successfully*
# Enable this if you want Samba act as a domain controller.
domain logons = yes
# Where to store roving profiles (only for Win95 and WinNT)
# %L substitutes for this servers netbios name, %U is username
# This refers to the [profiles] share below
# The permissions on the profiles directory should be
# chmod 1757 /usr/local/samba/profiles
# drwxr-xrwt 5 root root 4096 May 1 08:43 profiles
#logon path = \\%L\profiles\%u
# UNC path specifying the network location of the user's home directory
# only used when acting as a DC for WinNT/2k/XP. Ignored by Win9x clients
#logon home = \\%L\%U
# What drive should the logon home be mounted at upon login ?
# only used when acting as a DC for WinNT/2k/XP. Ignored by Win9x clients
#logon drive = Z:
logon script = login.bat
#Share Definitions
[homes]
comment = Home Directories
browseable = no
writable = no
write list = %S @administradores
valid users = %S @administradores
invalid users
force create mode = 0770
force directory mode = 0770
directory mask = 0770
create mask = 0770
force user = %S
force group = administradores
[netlogon]
comment = Network Logon Service
path = /usr/local/samba/netlogon
read only = yes
public = no
valid users = %S @usuarios @administradores
writable = no
write list = llattan
locking = no
[fprotdefs]
comment = Definiciones de Virus
path = /usr/local/f-prot/fprotdefs
public = no
valid users = %S @usuarios @administradores
writable = no
write list = llattan
locking = no
[total_usuarios]
comment = Directorio para Administrador
path = /home
browseable = no
read only = yes
public = no
valid users = @administradores
writable = no
write list =
[total_grupos]
comment = Directorio para Administrador
path = /home2
browseable = no
read only = yes
public = no
valid
Re: [Samba] OTHER BUG IN SAMBA 3.0.4 ?! FORCE USER
¿ isn't it: write list = user1 , user2 ? look at the blank between 'write' and 'list' (excuse me for my bad english) I CAN´T CHANGE WRITABLE/READ-ONLY VALUE BECAUSE I NEED THAT ANYONE WRITE EXCEPT THE USER/GROUP IN WRITELIST I used the samba-3.0.1pre1 without problems. Now, I use the samba-3.0.4 (bug ms04-011 fixed) Is this a samba 3.0.4 bug ?! : [rental] comment = Rental path = /home/rental valid users = @administradores @rental mesaayuda ctoledo public = no browsable = no writable = no writelist = @administradores apetrone force create mode = 0770 force directory mode = 0770 directory mask = 0770 create mask = 0770 force group = rental SAMBA 3.0.1pre1 ALL OK SAMBA 3.0.4 ALL OK BUT ... when i add the force user parameter [rental] comment = Rental path = /home/rental valid users = @administradores @rental mesaayuda public = no browsable = no writable = no writelist = @administradores apetrone force create mode = 0770 force directory mode = 0770 directory mask = 0770 create mask = 0770 force user = administrador force group = rental SAMBA 3.0.1pre1 ALL OK (files/dirs: mod 770 own administrador:rental) SAMBA 3.0.4 i can´t write with all users (administrador, apetrone, administradores, etc) i switch the versions and confirm the error. Leandro LATTANZIO. [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Poor performance with Mac OS X Panther clients
On Sat, 2004-05-15 at 03:34, Nathan R. Valentine wrote: I will test the results from both Windows and Mac OS X clients with the data hosted on a Windows server to measure the results. From experience, I expect that the Mac OS X clients will still perform worse but not to the same degree as when the data was hosted on Samba. Turns out that we are seeing similar CPU spikes on the server whether the server is a Windows box of a *nix box running Samba. To me, this would indicate that this is a problem with the Mac OS X client. Based on the packet dumps, I would say that the Mac OS X Samba system is doing the the directory contents lookups in a very inefficient manner. Since OS X is running a version of Samba... Anyone have any tips? Actually, the OSX client is the smbfs originally from FreeBSD. (And unrelated to the Linux smbfs). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Guest shares
I'm trying to setup Samba to function like a regular XP box connected to a workgroup. In that I mean that there is no password to browse or to connect to certain shares. Just like an XP box in Workgroup mode. Just connect and go. I have tried using various combinations of public = yes, guest ok = yes, and guest only = yes with no luck. No matter what I do I'm prompted for a password on the XP boxes. Using the smbclient with the -N flag works however. What am I doing wrong? -- David Russell _ Watch LIVE baseball games on your computer with MLB.TV, included with MSN Premium! http://join.msn.click-url.com/go/onm00200439ave/direct/01/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
svn commit: samba r721 - hooks
Author: metze Date: 2004-05-14 06:10:51 + (Fri, 14 May 2004) New Revision: 721 Modified: hooks/svnperms.conf Log: Add tpot to svnadmin group so I can fix subversion upgrade/install problems. -tpot WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=721nolog=1
svn commit: samba-web r59 - trunk/support
Author: deryck Date: 2004-05-14 11:33:00 + (Fri, 14 May 2004) New Revision: 59 Modified: trunk/support/germany.html trunk/support/italy.html trunk/support/latvia.html Log: Fixed formatting problem with pre tags in recent updates. WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=samba-webpath=/rev=59nolog=1
svn commit: samba r725 - in branches/SAMBA_4_0/source: build/smb_build script
Author: metze Date: 2004-05-14 12:01:31 + (Fri, 14 May 2004) New Revision: 725 Modified: branches/SAMBA_4_0/source/build/smb_build/makefile.pl branches/SAMBA_4_0/source/script/build_idl.sh Log: fix usage of $PERL to $PERL to handle perl -W correct metze WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=725nolog=1
svn commit: samba r726 - branches/SAMBA_4_0/source
Author: metze Date: 2004-05-14 12:03:14 + (Fri, 14 May 2004) New Revision: 726 Modified: branches/SAMBA_4_0/source/configure.in Log: fix the build: libcli/raw/clirewrite.o is gone:-) metze WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=726nolog=1
svn commit: samba r727 - in branches/SAMBA_4_0: . packaging packaging/debian
Author: jelmer Date: 2004-05-14 12:05:48 + (Fri, 14 May 2004) New Revision: 727 Added: branches/SAMBA_4_0/packaging/ branches/SAMBA_4_0/packaging/debian/ branches/SAMBA_4_0/packaging/debian/README.debian branches/SAMBA_4_0/packaging/debian/changelog branches/SAMBA_4_0/packaging/debian/control branches/SAMBA_4_0/packaging/debian/copyright branches/SAMBA_4_0/packaging/debian/dirs branches/SAMBA_4_0/packaging/debian/diversions branches/SAMBA_4_0/packaging/debian/gregedit.files branches/SAMBA_4_0/packaging/debian/init.d branches/SAMBA_4_0/packaging/debian/ldb-tools.files branches/SAMBA_4_0/packaging/debian/rules branches/SAMBA_4_0/packaging/debian/samba4-client.files branches/SAMBA_4_0/packaging/debian/samba4-common.dirs branches/SAMBA_4_0/packaging/debian/samba4-common.files branches/SAMBA_4_0/packaging/debian/samba4-server.files branches/SAMBA_4_0/packaging/debian/samba4-testsuite.files branches/SAMBA_4_0/packaging/debian/winregistry-tools.files Log: Start working on debian package for samba4 WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0rev=727nolog=1
svn commit: samba r728 - in branches/SAMBA_4_0/source/lib: . ldb tdb
Author: metze Date: 2004-05-14 12:09:21 + (Fri, 14 May 2004) New Revision: 728 Added: branches/SAMBA_4_0/source/lib/tdb/config.m4 branches/SAMBA_4_0/source/lib/tdb/config.mk branches/SAMBA_4_0/source/lib/tdb_helper.c Modified: branches/SAMBA_4_0/source/lib/basic.m4 branches/SAMBA_4_0/source/lib/ldb/config.mk branches/SAMBA_4_0/source/lib/tdb/tdb.h branches/SAMBA_4_0/source/lib/tdb/tdbutil.c Log: - let libldb_tdb depend on new subsystem LIBTDB - remove tdb logging helper functions out of LIBTDB subsystem - build libtdb shared lib with 'make library_libtdb' the libs are not usable for now, tridge: please remove the dependecy of CatchSignal() and smb_panic() from libtdb maybe use function pointers in the TDB_CONTEXT then run make library_libtdb and then make build/tests/trivial.o and then gcc -o trivial -L./bin -ltdb and then gcc -o trivial -L./bin -lldb metze WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/source/librev=728nolog=1
svn commit: samba r729 - branches/SAMBA_4_0/source
Author: metze Date: 2004-05-14 12:32:23 + (Fri, 14 May 2004) New Revision: 729 Modified: branches/SAMBA_4_0/source/configure.in Log: fix the build : inlcude lib/tdb/config.m4 metze WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=729nolog=1
svn commit: samba r730 - branches/SAMBA_3_0/packaging/Debian
Author: idra Date: 2004-05-14 12:42:42 + (Fri, 14 May 2004) New Revision: 730 Added: branches/SAMBA_3_0/packaging/Debian/debian-unstable/ Removed: branches/SAMBA_3_0/packaging/Debian/debian/ Log: move the current debian dir to debian-unstable WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=730nolog=1
svn commit: samba r731 - in branches/SAMBA_3_0/packaging/Debian: . debian-stable debian-stable/patches debian-stable/po debian-stable/scripts
Author: idra Date: 2004-05-14 12:44:59 + (Fri, 14 May 2004) New Revision: 731 Added: branches/SAMBA_3_0/packaging/Debian/debian-stable/ branches/SAMBA_3_0/packaging/Debian/debian-stable/README.build branches/SAMBA_3_0/packaging/Debian/debian-stable/README.build-upstream branches/SAMBA_3_0/packaging/Debian/debian-stable/README.debian branches/SAMBA_3_0/packaging/Debian/debian-stable/TODO branches/SAMBA_3_0/packaging/Debian/debian-stable/changelog branches/SAMBA_3_0/packaging/Debian/debian-stable/config.cache branches/SAMBA_3_0/packaging/Debian/debian-stable/config.cache.alpha-linux branches/SAMBA_3_0/packaging/Debian/debian-stable/config.cache.sparc-linux branches/SAMBA_3_0/packaging/Debian/debian-stable/control branches/SAMBA_3_0/packaging/Debian/debian-stable/copyright branches/SAMBA_3_0/packaging/Debian/debian-stable/files branches/SAMBA_3_0/packaging/Debian/debian-stable/gdbcommands branches/SAMBA_3_0/packaging/Debian/debian-stable/libpam-smbpass.docs branches/SAMBA_3_0/packaging/Debian/debian-stable/libpam-smbpass.examples branches/SAMBA_3_0/packaging/Debian/debian-stable/libpam-smbpass.files branches/SAMBA_3_0/packaging/Debian/debian-stable/libsmbclient-dev.examples branches/SAMBA_3_0/packaging/Debian/debian-stable/libsmbclient-dev.files branches/SAMBA_3_0/packaging/Debian/debian-stable/libsmbclient.files branches/SAMBA_3_0/packaging/Debian/debian-stable/libsmbclient.shlibs branches/SAMBA_3_0/packaging/Debian/debian-stable/mksmbpasswd.8 branches/SAMBA_3_0/packaging/Debian/debian-stable/mksmbpasswd.awk branches/SAMBA_3_0/packaging/Debian/debian-stable/panic-action branches/SAMBA_3_0/packaging/Debian/debian-stable/patches/ branches/SAMBA_3_0/packaging/Debian/debian-stable/patches/documentation.patch branches/SAMBA_3_0/packaging/Debian/debian-stable/patches/fhs.patch branches/SAMBA_3_0/packaging/Debian/debian-stable/patches/installswat.sh.patch branches/SAMBA_3_0/packaging/Debian/debian-stable/patches/nmbd-signalling.patch branches/SAMBA_3_0/packaging/Debian/debian-stable/patches/samba.patch branches/SAMBA_3_0/packaging/Debian/debian-stable/patches/smbclient-pager.patch branches/SAMBA_3_0/packaging/Debian/debian-stable/patches/smbclient-tar.patch.unused branches/SAMBA_3_0/packaging/Debian/debian-stable/patches/smbmount-mtab-flags.patch branches/SAMBA_3_0/packaging/Debian/debian-stable/patches/smbmount-nomtab.patch branches/SAMBA_3_0/packaging/Debian/debian-stable/patches/smbstatus-locking.patch branches/SAMBA_3_0/packaging/Debian/debian-stable/po/ branches/SAMBA_3_0/packaging/Debian/debian-stable/po/POTFILES.in branches/SAMBA_3_0/packaging/Debian/debian-stable/po/es.po branches/SAMBA_3_0/packaging/Debian/debian-stable/po/fr.po branches/SAMBA_3_0/packaging/Debian/debian-stable/po/nl.po branches/SAMBA_3_0/packaging/Debian/debian-stable/po/pt_BR.po branches/SAMBA_3_0/packaging/Debian/debian-stable/po/templates.pot branches/SAMBA_3_0/packaging/Debian/debian-stable/python2.2-samba.files branches/SAMBA_3_0/packaging/Debian/debian-stable/rules branches/SAMBA_3_0/packaging/Debian/debian-stable/samba-common.config branches/SAMBA_3_0/packaging/Debian/debian-stable/samba-common.dhcp branches/SAMBA_3_0/packaging/Debian/debian-stable/samba-common.dirs branches/SAMBA_3_0/packaging/Debian/debian-stable/samba-common.files branches/SAMBA_3_0/packaging/Debian/debian-stable/samba-common.postinst branches/SAMBA_3_0/packaging/Debian/debian-stable/samba-common.postrm branches/SAMBA_3_0/packaging/Debian/debian-stable/samba-common.templates branches/SAMBA_3_0/packaging/Debian/debian-stable/samba-doc.docs branches/SAMBA_3_0/packaging/Debian/debian-stable/samba-doc.examples branches/SAMBA_3_0/packaging/Debian/debian-stable/samba.config branches/SAMBA_3_0/packaging/Debian/debian-stable/samba.cron.daily branches/SAMBA_3_0/packaging/Debian/debian-stable/samba.dirs branches/SAMBA_3_0/packaging/Debian/debian-stable/samba.docs branches/SAMBA_3_0/packaging/Debian/debian-stable/samba.files branches/SAMBA_3_0/packaging/Debian/debian-stable/samba.init branches/SAMBA_3_0/packaging/Debian/debian-stable/samba.logrotate branches/SAMBA_3_0/packaging/Debian/debian-stable/samba.pamd branches/SAMBA_3_0/packaging/Debian/debian-stable/samba.postinst branches/SAMBA_3_0/packaging/Debian/debian-stable/samba.postrm branches/SAMBA_3_0/packaging/Debian/debian-stable/samba.prerm branches/SAMBA_3_0/packaging/Debian/debian-stable/samba.templates branches/SAMBA_3_0/packaging/Debian/debian-stable/scripts/ branches/SAMBA_3_0/packaging/Debian/debian-stable/scripts/patch-source branches/SAMBA_3_0/packaging/Debian/debian-stable/scripts/unpatch-source branches/SAMBA_3_0/packaging/Debian/debian-stable/smb.conf branches/SAMBA_3_0/packaging/Debian/debian-stable/smbclient.files branches/SAMBA_3_0/packaging/Debian/debian-stable/smbfs.files
svn commit: samba r732 - in trunk/packaging/Debian: . debian-stable debian-stable/scripts debian-unstable debian-unstable/scripts
Author: idra Date: 2004-05-14 12:51:21 + (Fri, 14 May 2004) New Revision: 732 Added: trunk/packaging/Debian/debian-stable/ trunk/packaging/Debian/debian-unstable/ Removed: trunk/packaging/Debian/debian/ Modified: trunk/packaging/Debian/debian-stable/rules trunk/packaging/Debian/debian-stable/scripts/patch-source trunk/packaging/Debian/debian-stable/scripts/unpatch-source trunk/packaging/Debian/debian-unstable/rules trunk/packaging/Debian/debian-unstable/scripts/patch-source trunk/packaging/Debian/debian-unstable/scripts/unpatch-source Log: merge debian stuff to trunk WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/trunk/packaging/Debianrev=732nolog=1
svn commit: samba r733 - branches/SAMBA_4_0/source
Author: metze Date: 2004-05-14 12:53:43 + (Fri, 14 May 2004) New Revision: 733 Removed: branches/SAMBA_4_0/source/Doxyfile branches/SAMBA_4_0/source/change-log branches/SAMBA_4_0/source/ignore.txt branches/SAMBA_4_0/source/smbadduser Log: remove unused files in source/ maybe we can readd the Doxyfile later if someone wants to maintain it and a web server metze WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=733nolog=1
svn commit: samba r734 - branches/SAMBA_4_0/source/lib/registry/reg_backend_rpc
Author: jelmer Date: 2004-05-14 13:07:20 + (Fri, 14 May 2004) New Revision: 734 Modified: branches/SAMBA_4_0/source/lib/registry/reg_backend_rpc/reg_backend_rpc.c Log: Fix crash bug WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=734nolog=1
svn commit: samba r735 - branches/SAMBA_4_0/packaging/debian
Author: jelmer Date: 2004-05-14 13:14:11 + (Fri, 14 May 2004) New Revision: 735 Modified: branches/SAMBA_4_0/packaging/debian/rules Log: Fix some paths WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=735nolog=1
svn commit: samba r736 - branches/SAMBA_4_0/source/build/pidl
Author: jelmer Date: 2004-05-14 15:39:06 + (Fri, 14 May 2004) New Revision: 736 Modified: branches/SAMBA_4_0/source/build/pidl/NOTES.txt Log: Add list of supported and unsupported MIDL attributes WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=736nolog=1
svn commit: samba-docs r65 - in trunk: . xslt
Author: jelmer Date: 2004-05-14 16:36:04 + (Fri, 14 May 2004) New Revision: 65 Modified: trunk/docbook.txt trunk/xslt/man.xsl Log: Fixes in manpage generating WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=samba-docspath=/trunkrev=65nolog=1
svn commit: samba-docs r66 - in branches: . SAMBA_4 SAMBA_4/manpages
Author: jelmer Date: 2004-05-14 16:41:39 + (Fri, 14 May 2004) New Revision: 66 Added: branches/SAMBA_4/ branches/SAMBA_4/docbook.txt branches/SAMBA_4/manpages/pidl.1.xml branches/SAMBA_4/xslt/ Removed: branches/SAMBA_4/devel/ branches/SAMBA_4/docbook.txt branches/SAMBA_4/guide/ branches/SAMBA_4/howto/ branches/SAMBA_4/manpages/editreg.1.xml branches/SAMBA_4/manpages/findsmb.1.xml branches/SAMBA_4/manpages/lmhosts.5.xml branches/SAMBA_4/manpages/log2pcap.1.xml branches/SAMBA_4/manpages/mount.cifs.8.xml branches/SAMBA_4/manpages/net.8.xml branches/SAMBA_4/manpages/nmbd.8.xml branches/SAMBA_4/manpages/nmblookup.1.xml branches/SAMBA_4/manpages/ntlm_auth.1.xml branches/SAMBA_4/manpages/pdbedit.8.xml branches/SAMBA_4/manpages/profiles.1.xml branches/SAMBA_4/manpages/rpcclient.1.xml branches/SAMBA_4/manpages/samba.7.xml branches/SAMBA_4/manpages/smbcacls.1.xml branches/SAMBA_4/manpages/smbclient.1.xml branches/SAMBA_4/manpages/smbcontrol.1.xml branches/SAMBA_4/manpages/smbcquotas.1.xml branches/SAMBA_4/manpages/smbd.8.xml branches/SAMBA_4/manpages/smbget.1.xml branches/SAMBA_4/manpages/smbgetrc.5.xml branches/SAMBA_4/manpages/smbmnt.8.xml branches/SAMBA_4/manpages/smbmount.8.xml branches/SAMBA_4/manpages/smbpasswd.5.xml branches/SAMBA_4/manpages/smbpasswd.8.xml branches/SAMBA_4/manpages/smbsh.1.xml branches/SAMBA_4/manpages/smbspool.8.xml branches/SAMBA_4/manpages/smbstatus.1.xml branches/SAMBA_4/manpages/smbtar.1.xml branches/SAMBA_4/manpages/smbtree.1.xml branches/SAMBA_4/manpages/smbumount.8.xml branches/SAMBA_4/manpages/swat.8.xml branches/SAMBA_4/manpages/tdbbackup.8.xml branches/SAMBA_4/manpages/tdbdump.8.xml branches/SAMBA_4/manpages/testparm.1.xml branches/SAMBA_4/manpages/testprns.1.xml branches/SAMBA_4/manpages/vfstest.1.xml branches/SAMBA_4/manpages/wbinfo.1.xml branches/SAMBA_4/manpages/winbindd.8.xml branches/SAMBA_4/registry/ branches/SAMBA_4/smbdotconf/ branches/SAMBA_4/xslt/ Log: Add SAMBA_4 brancg for the docs. The only thing there right now is the pidl manpage. WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=samba-docspath=/branchesrev=66nolog=1
svn commit: samba-docs r67 - branches/SAMBA_4
Author: jelmer Date: 2004-05-14 16:44:02 + (Fri, 14 May 2004) New Revision: 67 Modified: branches/SAMBA_4/Makefile.in Log: Don't build smb.conf.5 WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=samba-docspath=/rev=67nolog=1
svn commit: samba r737 - branches/SAMBA_3_0/source/client
Author: sfrench Date: 2004-05-14 18:05:06 + (Fri, 14 May 2004) New Revision: 737 Modified: branches/SAMBA_3_0/source/client/mount.cifs.c Log: Handle -S and user mount parms WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=737nolog=1
svn commit: samba-web r60 - trunk
Author: sfrench Date: 2004-05-14 18:40:44 + (Fri, 14 May 2004) New Revision: 60 Modified: trunk/Linux_CIFS_client.html Log: Update cifs vfs page with new version info WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=samba-webpath=/rev=60nolog=1
svn commit: samba r739 - in branches/SAMBA_4_0/source: librpc/idl torture/rpc
Author: jelmer Date: 2004-05-14 18:59:00 + (Fri, 14 May 2004) New Revision: 739 Modified: branches/SAMBA_4_0/source/librpc/idl/eventlog.idl branches/SAMBA_4_0/source/torture/rpc/eventlog.c branches/SAMBA_4_0/source/torture/rpc/winreg.c Log: Implement GetNumRecords() call from eventlog pipe, including a torture test WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=739nolog=1
svn commit: samba r740 - branches/SAMBA_3_0/source/smbd
Author: sharpe Date: 2004-05-14 20:58:26 + (Fri, 14 May 2004) New Revision: 740 Modified: branches/SAMBA_3_0/source/smbd/open.c Log: Fix Bug #1301. Return NT_STATUS_SHARING_VIOLATION when share mode locking requests fail. WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=740nolog=1
svn commit: samba r741 - in branches/SAMBA_4_0/source/torture: . raw
Author: jra Date: 2004-05-14 22:07:43 + (Fri, 14 May 2004) New Revision: 741 Modified: branches/SAMBA_4_0/source/torture/raw/open.c branches/SAMBA_4_0/source/torture/torture.c Log: Test from Volker in RAW-OPEN for truncating a file containing locks. Also added the same ad-hoc test is LOCK7. Jeremy. WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/source/torturerev=741nolog=1
svn commit: samba r742 - branches/SAMBA_3_0/source/smbd
Author: jra Date: 2004-05-14 22:08:19 + (Fri, 14 May 2004) New Revision: 742 Modified: branches/SAMBA_3_0/source/smbd/open.c Log: Volker discovered that we can truncate a locked file. Well I never ! :-). Jeremy WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=742nolog=1
svn commit: samba-web r61 - trunk/devel
Author: deryck Date: 2004-05-15 03:15:56 + (Sat, 15 May 2004) New Revision: 61 Modified: trunk/devel/TODO.html Log: Updating link to external cifs TODO list. WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=samba-webpath=/rev=61nolog=1
