Re: [WORKAROUND] Re: [Samba] duplicate domains in browse list
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 27 May 2004, Jeremy Allison wrote: On Thu, May 27, 2004 at 08:45:22PM +0200, Joerg Pulz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 27 May 2004, Jeremy Allison wrote: Ok, all the changes here are just to reduce the size of string used from an unstring to an nstring. Unfortunately this cannot be correct as it would cause truncation for multibyte characters in code pages like Japanese. It may be that the change you added causes extra non-zero bytes not to be examined in the comparison functions. If that is the case the following patch should have the same effect. If you could test this instead of your patch I'd appreciate it. I've tested the small patch on one DMB but it did NOT work. I stopped 'smbd' and 'nmbd', removed the browse.dat file, installed the new binaries, and started the whole thing. as soon as the browse.dat file is recreated, it contains domain names with trailing spaces until MAX_NETBIOSNAME_LEN is reached. Can you send me your smb.conf please. I'd really like to make sure I've fixed this for 3.0.5. Hi Jeremy, i tested your last patch, but it did NOT work too. sorry. i've upgraded all DMB's with it, removed browse.dat and started all DMB's. the same as above, the browse.dat is recreated and conatins entries with trailing spaces for the domains the DMB is NOT the master. i will send you my smb.conf files in another mail directly. thanks for your help Joerg -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFAtuHzSPOsGF+KA+MRAuG7AJ9CQ0R7a97thZDK8zkNbhseEo/shgCgr82E E+bHQ5NZIMOZpQ4lIiP8Caw= =hG8L -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] A Hihetetlen egyperces megrendelése
Nyilvntartsunk szerint n a Hihetetlen Egypercesre jelentkezett. Ha valban tag kvn lenni, krem kldje vissza vltozatlan formban ezt a levelet a feladnak, ehhez kattintson bngsz#337;je Reply/Vlasz gombjra. Tagsgt 1 hten bell trljk, ha nem er#337;sti meg a jelentekezst. dvzlettel: Egypercesek -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] MAXIMA - Hitelesítés a(z) hihetetlen csoportban
dvzljk az Egyperces olvasinak tborban! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Computer Accounts
Hi, I've just migrated NT domain to samba+ldap - works great, but there is one thing I don't quite understand: What is the reason to have a 'computer account' on host UNIX serving samba? I know, that NT PDC needs ID+password for each computer within its domain. But samba TDB or LDAP pwdb backend look quite sufficient. I don't see a reason to have those exposed (shadowed) as UNIX accounts - are there any? In other words, I don't see any activity, that NT domain computer does *on*its*own*account* - e.g. as UNIX process - on samba server. Is there any? Is there any other reason to have UNIX account ID for NT domain computer? (I have already tested a setup, where all NT domain coputers share common home directory, and it looks like nobody makes any attempt to write there - so that feature of UNIX account does not look necesary) Thenx, -R -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3 How-to and Kerberos ...
Hi everyone ! I've some questions about the documentation in the samba how-to : Page 76, 6.4.3.1 Possible errors : It is said : ... try net use * \\server\share. You should be logged in with Kerberos without needing to know a password. If it fails ... Does it have an encryption type of DES-CBC-MD5 ? Ok ! (I just run 'klist -ae' to know about that. Have an Arcfour HMAC-MD5...) So I want to change it, but page 73 6.4.2, it is said : With both MIT and Heimdal Kerberos, it is unnecessary to configure /etc/krb5.conf, and it may be detrimental. So how can I do to configure my encryption type to have the correct one if Kerberos auto-configures itself ? Does the /etc/krb5.conf overpasses kerberos configuration ? Thanks for reading ! Bertram _ Bloquez les fenêtres pop-up, c'est gratuit ! http://toolbar.msn.fr -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3 and LDAP - Error loading profiles
Have a look at this http://support.microsoft.com/default.aspx?scid=kb;en-us;327462 John -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [WORKAROUND] Re: [Samba] duplicate domains in browse list
Jeremy Allison wrote: On Thu, May 27, 2004 at 08:45:22PM +0200, Joerg Pulz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 27 May 2004, Jeremy Allison wrote: Ok, all the changes here are just to reduce the size of string used from an unstring to an nstring. Unfortunately this cannot be correct as it would cause truncation for multibyte characters in code pages like Japanese. It may be that the change you added causes extra non-zero bytes not to be examined in the comparison functions. If that is the case the following patch should have the same effect. If you could test this instead of your patch I'd appreciate it. I've tested the small patch on one DMB but it did NOT work. I stopped 'smbd' and 'nmbd', removed the browse.dat file, installed the new binaries, and started the whole thing. as soon as the browse.dat file is recreated, it contains domain names with trailing spaces until MAX_NETBIOSNAME_LEN is reached. Can you send me your smb.conf please. I'd really like to make sure I've fixed this for 3.0.5. I've similar entries in my log files: --- May 25 10:16:24 kek nmbd[10096]: [2004/05/25 10:16:24, 0] nmbd/nmbd_workgroupdb.c:create_workgroup(68) May 25 10:16:24 kek nmbd[10096]: create_workgroup: workgroup name MKK ^[ is too long. Truncating to MKK if I not wrap the lines (the middle of the line): create_workgroup: workgroup name MKK^[ is too long. Truncating to MKK -- Levente Si vis pacem para bellum! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Signal 11 on winbindd start: memory leak in malloc
Version: 3.0.2a-1 (both in distributed package and in package rebuilt on my machine) OS: Debian testing Environment: Windows 2000 Active Directory I am trying to setup winbind on my machine as described in the Samba HOWTO collection. I have edited nsswitch.conf and smb.conf as instructed and my samba server has joined the domain (security = ads). Kerberos is configured and the samba server runs fine. However every time I start the winbindd daemon, it crashes immediately with the following error message: [2004/05/28 09:33:21, 0] lib/fault.c:fault_report(36) === [2004/05/28 09:33:21, 0] lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 23236 (3.0.2a-Debian) Please read the appendix Bugs of the Samba HOWTO collection [2004/05/28 09:33:21, 0] lib/fault.c:fault_report(39) === [2004/05/28 09:33:21, 0] lib/util.c:smb_panic(1400) PANIC: internal error [2004/05/28 09:33:21, 0] lib/util.c:smb_panic(1408) BACKTRACE: 28 stack frames: #0 /usr/sbin/winbindd(smb_panic+0x101) [0x80c2491] #1 /usr/sbin/winbindd [0x80b06a8] #2 /lib/libc.so.6 [0x4018c658] #3 /lib/libc.so.6(malloc+0x93) [0x401d3ed3] #4 /lib/libc.so.6 [0x401c2e8f] #5 /lib/libc.so.6(fopen+0x2f) [0x401c2f4f] #6 /lib/libnss_files.so.2 [0x4039e275] #7 /lib/libnss_files.so.2(_nss_files_gethostbyname_r+0x37) [0x4039e747] #8 /lib/libc.so.6(gethostbyname_r+0x10b) [0x4024d96b] #9 /lib/libc.so.6(gethostbyname+0xf6) [0x4024d2e6] #10 /usr/sbin/winbindd(interpret_addr+0x88) [0x80c1bf8] #11 /usr/sbin/winbindd(interpret_addr2+0x11) [0x80c1cb1] #12 /usr/sbin/winbindd [0x8107075] #13 /usr/sbin/winbindd [0x8107685] #14 /usr/sbin/winbindd(get_dc_list+0x297) [0x8107e97] #15 /usr/sbin/winbindd(get_sorted_dc_list+0x40) [0x8107b70] #16 /usr/sbin/winbindd [0x815e94d] #17 /usr/sbin/winbindd(ads_connect+0x65) [0x815ebd5] #18 /usr/sbin/winbindd [0x816a89e] #19 /usr/sbin/winbindd(get_dc_name+0x69) [0x816ad19] #20 /usr/sbin/winbindd [0x807cd56] #21 /usr/sbin/winbindd(set_dc_type_and_flags+0x65) [0x807dc85] #22 /usr/sbin/winbindd [0x80739ad] #23 /usr/sbin/winbindd(add_trusted_domains+0x197) [0x8073e37] #24 /usr/sbin/winbindd(init_domain_list+0xdf) [0x807407f] #25 /usr/sbin/winbindd(main+0x40f) [0x806e6bf] #26 /lib/libc.so.6(__libc_start_main+0xc6) [0x40178dc6] #27 /usr/sbin/winbindd(chroot+0x35) [0x806ccd1] There were similar problem reports in February 2004: ww m-pubsyssamba, 2004-02-04 Christopher Odenbach, 2004-02-10 Since in both messages the advise was to use valgrind to analyze the problem (obviously because of the malloc call), I ran winbindd with valgrind --leak-check=yes and here's the result: ==23407== Memcheck, a memory error detector for x86-linux. ==23407== Copyright (C) 2002-2004, and GNU GPL'd, by Julian Seward. ==23407== Using valgrind-2.1.1, a program supervision framework for x86-linux. ==23407== Copyright (C) 2000-2004, and GNU GPL'd, by Julian Seward. ==23407== For more details, rerun with: -v ==23407== ==23407== ==23407== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 45 from 1) ==23407== malloc/free: in use at exit: 705082 bytes in 390 blocks. ==23407== malloc/free: 2634 allocs, 2244 frees, 1446331 bytes allocated. ==23407== For counts of detected errors, rerun with: -v ==23407== searching for pointers to 390 not-freed blocks. ==23407== checked 5367356 bytes. ==23407== ==23407== 28 bytes in 1 blocks are definitely lost in loss record 10 of 27 ==23407==at 0x3C01F40D: malloc (vg_replace_malloc.c:105) ==23407==by 0x3C1F196F: strdup (in /lib/libc-2.3.2.so) ==23407==by 0x80BA887: (within /usr/sbin/winbindd) ==23407==by 0x80ABA9B: lp_set_logfile (in /usr/sbin/winbindd) ==23407== ==23407== LEAK SUMMARY: ==23407==definitely lost: 28 bytes in 1 blocks. ==23407==possibly lost: 0 bytes in 0 blocks. ==23407==still reachable: 705054 bytes in 389 blocks. ==23407== suppressed: 0 bytes in 0 blocks. ==23407== Reachable blocks (those to which a pointer was found) are not shown. ==23407== To see them, rerun with: --show-reachable=yes vassil-d:~# ==23409== Conditional jump or move depends on uninitialised value(s) ==23409==at 0x3C0EA05A: krb5_get_cred_via_tkt (in /usr/lib/libkrb5.so.3.2) ==23409==by 0x3C0E981D: (within /usr/lib/libkrb5.so.3.2) ==23409==by 0x3C0E9CD2: krb5_get_cred_from_kdc (in /usr/lib/libkrb5.so.3.2) ==23409==by 0x3C0EA6D5: krb5_get_credentials (in /usr/lib/libkrb5.so.3.2) ==23409== ==23409== Conditional jump or move depends on uninitialised value(s) ==23409==at 0x3C0EA05A: krb5_get_cred_via_tkt (in /usr/lib/libkrb5.so.3.2) ==23409==by 0x3C0E9AB5: (within /usr/lib/libkrb5.so.3.2) ==23409==by 0x3C0E9CD2: krb5_get_cred_from_kdc (in /usr/lib/libkrb5.so.3.2) ==23409==by 0x3C0EA6D5: krb5_get_credentials (in /usr/lib/libkrb5.so.3.2) If you need any more information for debugging the
RE: Same Problem.... RE: [Samba] Can see server, but can't see shares. Whazzup?
Hi thanks for the suggestions, but it did not help.. and I think the error might be a combination of dhcp and smb config... . While trying to open the windows network places sometimes I can see the other pcs, sometimes not... if I see the machines (including the server) I can not access them (something like You do not have the right to access the Network, please ask your administrator.. haha...). So at the moment I am open for any help. because I never had this problems before CU Matthias -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Shanks Sent: Wednesday, May 26, 2004 4:17 PM To: [EMAIL PROTECTED] Subject: RE: Same Problem RE: [Samba] Can see server,but can't see shares. Whazzup? I noticed a couple of things in you smb.conf that have given me problems in the past. You have the OS level at 32 which should cause this machine to win all elections as the master browser, but WINS support is not on, which means after it wins the election, it won't provide any name resolution and you won't be able to browse you network. You can lower your OS level to 20 or turn on WINS support. If you have another wins server, you will have to reference it as the primary wins server. Also, you socket options look a lot different than anything that I have seen. I don't know if it's causing a problem, but I would leave them at the default for testing. I will post a smb.conf that I have been using on my primary domain controller for two years now. I has gone through minor changes with the various versions of 2.2.x samba, and it is running on a 2.2.9 server now. You should be able to use the WINS stuff. This one will not work with a 3.x domain controller. # Global parameters [global] workgroup = LRLEC-DOMAIN netbios name = CRUISER server string = LRLEC File Server interfaces = eth0 172.17.0.0/16 lo encrypt passwords = Yes update encrypted = Yes pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password:* %n\n *new*password:* %n\n *updated*successfully.* unix password sync = Yes log file = /var/log/samba/log.%m max log size = 50 time server = Yes unix extensions = Yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 domain admin group = @admins domain guest group = nobody add user script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false -M %u;passwd -l %u delete user script = userdel %u logon script = netlogon.bat logon path = \\%L\%U\.profile logon drive = H: logon home = \\%L\%U domain logons = Yes os level = 65 preferred master = Yes domain master = Yes dns proxy = No wins support = Yes winbind use default domain = Yes admin users = administrator write list = administrator,root printer admin = administrator,root hosts allow = 172.17.0.0/16 127.0.0.1 hosts deny = 0.0.0.0/0 printing = cups dos filemode = Yes dos filetimes = Yes dos filetime resolution = Yes [homes] comment = Home Directories read only = No browseable = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [netlogon] comment = Network Logon Service path = /home/samba/netlogon browseable = No [profiles] comment = Personal Profile Folder path = \\%L\%U\.profile read only = No profile acls = Yes browseable = No [public] comment = Public Files and Folders on Server %h path = /home/samba/public force group = +users read only = No create mask = 0774 directory mask = 0775 oplocks = No level2 oplocks = No [samba-root] comment = Top Level Shared Directory on Server path = /home/samba valid users = administrator, ddj, jshanks read only = No create mask = 0774 directory mask = 0775 [tools] comment = Tools and Utilities for Windows Workstations path = /home/samba/tools force group = +users read only = No create mask = 0774 directory mask = 0775 [911home] comment = Lake Region 911 Group Folder path = /home/samba/911home force group = +911users read only = No create mask = 0774 directory mask = 0775 [dlpdhome] comment = DL Police Dept. Group Folder path = /home/samba/dlpdhome force group = +dlpdusers read only = No create mask = 0774 directory mask = 0775 [rcsdhome] comment = Ramsey County Sheriff Dept. Group Folder path = /home/samba/rcsdhome force group = +rcsdusers read only = No create mask =
[Samba] domain admin
Hello, I have configfured in /etc/samba/smusers: root = administrator and in /etc/group: root:x:0:root,administrator Further I have mapped the groups: Administrators (S-1-5-32-544) - root Domain Admins (S-1-5-21-3965442966-3812898117-3611004146-512) - root But my Windows XP Clients won't the the Administrator as domain admin. I can log in as administrator but I do not have the privilidges. Does anoyone know why? Greetings Sascha -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind problem
Hi, As requested, here are the versions: samba-3.0.2-7.FC1 samba-common-3.0.2-7.FC1 samba-client-3.0.2-7.FC1 krb5-server-1.3.1-6 krb5-libs-1.3.1-6 krb5-workstation-1.3.1-6 pam_krb5-2.0.5-1 It's all FC1 standard. Thank you. JB On Thu, 2004-05-27 at 16:46, Jeremy Allison wrote: On Thu, May 27, 2004 at 09:59:27AM +0100, Jorge Manta Bulhoes wrote: Hi there, I've setup a configuration using samba, kerberos and squid for integrating a proxy in a company using their existing active directory structure. But it remains a single problem. The kerberos and samba point to a active directory server, but when that server crashes or is rebooted my winbind dies. My question is how can I set it up in a way I can have multiple active directory servers, and when one dies it uses another server for his authentication? My problem is only in the winbind deamon. What versions of Samba and kerberos please. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] File already in use?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Jeremy, Jeremy Allison wrote: On Wed, May 26, 2004 at 08:41:35AM -0500, Chris Garrigues wrote: Hi, I'm running 3.0.4 and have had several reports from users both using Office and Lotus where the application tells them that the file is already in use when we know it isn't. Can anyone give me a reproducible test case for this please ? A set of client operations that reliably reproduces it would be best. If not, an ethereal capture trace showing the entire session might help track this down. We just had this problem again and this time I have lots of debug information available: *) A full network trace from all traffic between the fileserver and the windows PC in tcpdump binary format (can be examined with ethereal) *) A samba logfile with debuglevel 10 where the event is logged in detail *) Output of smbstatus for the user in question a few minutes before and after the event, with an interval of 2 seconds The whole log information is about 3MB in size (tar archive, compressed with bzip2). As I do not want to send it to the list due to it's size (and it contains confidental information, too) I would like to send it to you in private mail. Is this ok? I could also put the file into some private FTP account and give you access. Please advise what is your preferred method. We also have a test case for this which we could reproduce at least 6 times in a row now: a) User starts Excel with empty workspace and opens the file using the Excel Open dialog - no problem b) User starts Excel first with empty workspace. User then starts Windows Explorer and opens the file by double-klicking on the filename in Windows Explorer - no problem c) Excel is not running. User starts Windows Explorer and opens the file by double-klicking on the filename in Windows Explorer - Excel starts up and presents the error dialog that the file was already in use! User can acknowledge the error dialog by klicking on OK - file opens in Excel without problem. Does this ring a bell? - - andreas - -- Andreas Haumer | mailto:[EMAIL PROTECTED] *x Software + Systeme | http://www.xss.co.at/ Karmarschgasse 51/2/20 | Tel: +43-1-6060114-0 A-1100 Vienna, Austria | Fax: +43-1-6060114-71 -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFAty8hxJmyeGcXPhERAlyxAKCevg4iiJbQxfU5zIp6ClyZWh4zVgCfdcTB mEYoT9odRsUnRNub3v/NJ+I= =qtgY -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba 3 PDC and ADS member server
Greg Adams wrote: I've been reading some documentation and can't find an answer to my question... I work in an environment where we have a bunch of Solaris 2.8 servers and a bunch of developers using Windows 2000 and XP desktops. We support a client using a Windows 2000 Server ADS PDC, and they need to map some of the NFS drives on our Solaris 2.8 servers. Currently we run a PCNetLink PDC (don't worry much about that, it's basically the same as a Samba 2 NT4 PDC), and our PCNetLink PDC has a trust relationship to the Windows 2000 Server ADS PDC that our client has. Additionally our internal development staff uses the PCNetLink PDC for user authentication, netlogon services, file sharing, etc. Fairly soon the corporation that both our development group and our client belong to is going to disallow all NT4 domain services, including PCNetLink and legacy mode operations, so we are looking at switching to Samba 3, as we have heard that it can communicate with ADS servers. Here's my question: I would like to move to an OpenLDAP/Kerberos authentication scheme for our Solaris machines and have a Samba 3 PDC using this OpenLDAP/Kerb5 backend for authentication as the PDC for our Windows 2000 and XP workstations. Additionally, I would like to be able to have the same Samba 3 PDC interact with the Windows 2000 ADS Server that our client runs in either a trust relationship or as a member server to allow the customer clients to use the filesharing services on our Solaris servers. From my reading, it seems that the trust relationship is not possible (something about NT4 trusts vs. ADS trusts, and Samba 3 only supporting NT4 trusts). Is it possible to have one samba 3 PDC also be an ADS member server? Is there some better way to achieve what I've described? Thanks for any help. Greg I don't know if I understood you right, but you can either make your samba server work as a PDC or keep your Windows 2000 Server as the primary one. The advantage of keeping Windows as the boss is that you can use group policy rights assignment to your windows machines; if you intend to use Samba as a PDC you should consider, if you want to have group policies, http://www.nitrobit.com/Index.html. In case you want Windows as the boss you can use the implemented LDAPv3 and the MIT Kerberos of the Windows 200x Server editions. Making your users visible on Unix you can use either nssldap (depends on: pam_ldap, openldap, [openssl, cyrus-sasl]) or winbind to map Windows to Unix users. I don't know if nssldap works on Solaris, but take look here: http://www.padl.com/download. You have to extend your Windows Server Schema with the MKSADPlugins.msi, which adds a Unix Settings tab creating new users or groups, or download the Services for Unix 3.0 which are free from Microsoft. If you use nssldap you just need to install the SFU at minimum, just to extend your schema, nothing more. For a Samba 3 PDC you have to use a passdb backend, while many of them are supported by samba, like the pdb, the smbpasswd or ldap. They are described very well in the samba documentation or in the examples book from John Terpstra. For some more infos about using Windows as the boss, take a look at http://forums.gentoo.org/viewtopic.php?t=114837. Instead of emerge do your Solaris compiles. -markus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] kerberos5 / gssapi support in mount.cifs?
Am Montag, 24. Mai 2004 15:06 schrieb Gerald (Jerry) Carter: Timo Veith wrote: | Hi, | | allow me another question. Is it planned or already | implemented to support gssapi with mount.cifs? It is planned according to what I understand from Steve French. Just not done yet. And what about the user mount option? Where can I read about that, do you have a link to that? regards Timo -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] [Samba + CIFS] Symbolic link problems
Hello, I am using Samba 2.2.8a with 2.6.6 CIFS Linux clients and I've got problems with symbolic links : I can't make them point outside the share. I understand that it is a security feature if the server resolves the link. But, in my case, I'd like Samba to serve link files *as is*, so that the Unix clients resolve the link. Symlinks are an important filesystem feature and their lack breaks many software, especially when using home directories exported from Samba shares. OpenOffice for example, which makes a shorcut from '/usr/lib/ooo-1.1/program/soffice' to '~/.rhopenoffice-1.1/soffice', and refuses to start if it can't :( I've seen previous discussions on this topic, but found no solution. Cf. http://groups.google.fr/groups?th=16eee5a8241654f1 and http://groups.google.fr/groups?th=44b101ab6fdb7541. Thanks a lot, -- Damiano -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: Same Problem.... RE: [Samba] Can see server, but can't see shares. Whazzup?
OK, Now, if you set you set the following, do you still have a problem browsing? os level = 10 wins support = no You will have to restart samba after the change, you may also have to restart all of the workstations. This should force that samba server to not be the master browser on the network, and let one of your Windows machines take the task. By the way, do you have any Microsoft Windows NT or 2000 servers on your network? Jim Hi thanks for the suggestions, but it did not help.. and I think the error might be a combination of dhcp and smb config... . While trying to open the windows network places sometimes I can see the other pcs, sometimes not... if I see the machines (including the server) I can not access them (something like You do not have the right to access the Network, please ask your administrator.. haha...). So at the moment I am open for any help. because I never had this problems before CU Matthias -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Shanks Sent: Wednesday, May 26, 2004 4:17 PM To: [EMAIL PROTECTED] Subject: RE: Same Problem RE: [Samba] Can see server,but can't see shares. Whazzup? I noticed a couple of things in you smb.conf that have given me problems in the past. You have the OS level at 32 which should cause this machine to win all elections as the master browser, but WINS support is not on, which means after it wins the election, it won't provide any name resolution and you won't be able to browse you network. You can lower your OS level to 20 or turn on WINS support. If you have another wins server, you will have to reference it as the primary wins server. Also, you socket options look a lot different than anything that I have seen. I don't know if it's causing a problem, but I would leave them at the default for testing. I will post a smb.conf that I have been using on my primary domain controller for two years now. I has gone through minor changes with the various versions of 2.2.x samba, and it is running on a 2.2.9 server now. You should be able to use the WINS stuff. This one will not work with a 3.x domain controller. # Global parameters [global] workgroup = LRLEC-DOMAIN netbios name = CRUISER server string = LRLEC File Server interfaces = eth0 172.17.0.0/16 lo encrypt passwords = Yes update encrypted = Yes pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password:* %n\n *new*password:* %n\n *updated*successfully.* unix password sync = Yes log file = /var/log/samba/log.%m max log size = 50 time server = Yes unix extensions = Yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 domain admin group = @admins domain guest group = nobody add user script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false -M %u;passwd -l %u delete user script = userdel %u logon script = netlogon.bat logon path = \\%L\%U\.profile logon drive = H: logon home = \\%L\%U domain logons = Yes os level = 65 preferred master = Yes domain master = Yes dns proxy = No wins support = Yes winbind use default domain = Yes admin users = administrator write list = administrator,root printer admin = administrator,root hosts allow = 172.17.0.0/16 127.0.0.1 hosts deny = 0.0.0.0/0 printing = cups dos filemode = Yes dos filetimes = Yes dos filetime resolution = Yes [homes] comment = Home Directories read only = No browseable = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [netlogon] comment = Network Logon Service path = /home/samba/netlogon browseable = No [profiles] comment = Personal Profile Folder path = \\%L\%U\.profile read only = No profile acls = Yes browseable = No [public] comment = Public Files and Folders on Server %h path = /home/samba/public force group = +users read only = No create mask = 0774 directory mask = 0775 oplocks = No level2 oplocks = No [samba-root] comment = Top Level Shared Directory on Server path = /home/samba valid users = administrator, ddj, jshanks read only = No create mask = 0774 directory mask = 0775 [tools] comment = Tools and Utilities for Windows Workstations path = /home/samba/tools force group = +users read only = No create mask = 0774 directory mask = 0775 [911home] comment = Lake Region 911 Group Folder path = /home/samba/911home force group = +911users read only = No create mask = 0774
[Samba] disappearing shares after upgrade to 3.0.4
Hi List, Have just upgraded from 2.2.7 to 3.0.4 and have a problem with two shares that refuse to show. The other 6 shares appear fine. smb.conf is below - it's an old file from 2.0.x ;) There is a Samba PDC on the network too - 192.168.10.246 this does WINS etc, runs 3.0.1 I have tried; 1. Adding a new share - appears OK 2. Using browsable = yes on the two rogue shares 3. Showing one of the hidden shares - appears OK I can map the rogue shares to a network drive from \\server\sharename The rogue shares are; [assist_common] comment = Assistance Common Data Area path = /data/assist_common read only = No guest only = Yes guest ok = Yes [claims_common] comment = Claims Common Data Area path = /data/claims_common read only = No guest only = Yes guest ok = Yes Little bit stuck, could someone help me out please? Thanks Neal # Global parameters [global] workgroup = MERCURY netbios name = WINSERVER server string = Samba Server interfaces = 192.168.10.40/24 security = share log file = /var/log/samba/log.%m log level = 0 max log size = 10 keepalive = 0 max open files = 6000 socket options = TCP_NODELAY SO_SNDBUF=16384 SO_RCVBUF=16384 load printers = No dns proxy = No blocking locks = Yes kernel oplocks = No oplocks = No level2 oplocks = No create mask = 0777 force create mode = 0777 directory mask = 0777 force directory mode = 0777 os level = 33 domain master = No local master = No wins support = No wins server = 192.168.10.246 name resolve order = wins lmhosts host unix charset = CP850 [assist_common] comment = Assistance Common Data Area path = /data/assist_common read only = No guest only = Yes guest ok = Yes [claims_common] comment = Claims Common Data Area path = /data/claims_common read only = No guest only = Yes guest ok = Yes [backup] comment = Backup Data Area path = /backup read only = Yes guest only = Yes guest ok = Yes browsable = No [data] comment = Data Area One path = /data read only = No guest only = Yes guest ok = Yes browsable = No [data2] comment = Data Area 2 path = /data2 read only = No guest only = Yes guest ok = Yes browsable = No [policywordings] comment = policy wordings path = /data2/policywordings read only = No guest only = Yes guest ok = Yes [common] comment = Common Data Area path = /data/common read only = No guest only = Yes guest ok = Yes [admin_common] comment = Admin Common Data Area path = /data/admin_common read only = No guest only = Yes guest ok = Yes [sales_common] comment = Sales/Marketing Common Data Area path = /data/sales_common read only = No guest only = Yes guest ok = Yes [medscan] comment = Medscan Data directory path = /data2/medscan read only = No guest only = Yes guest ok = Yes oplocks = False level2 oplocks = False #kernel oplocks = Yes #level2 oplocks = Yes #oplocks = No [medscanBROM] comment = Medscan Bromley path = /data2/medscanBROM read only = No guest only = Yes guest ok = Yes #kernel oplocks = Yes #level2 oplocks = Yes #oplocks = No [neal] comment = Medscan Data Neal path = /data2/neal read only = No guest only = Yes guest ok = Yes oplocks = False level2 oplocks = False #kernel oplocks = Yes #level2 oplocks = Yes #oplocks = No -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Heightening Shoes
HI, could you please tell me if you stock womens heightening shoes? Could you send me your website or photos and prices. Thanks, samantha -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain security, users still asked for login
After installing 3.0.4 on suse, I had the same problem again, I figured it out this time! nscd was still running... stop nscd (on suse /etc/init.d/nscd stop) and it works fine! Sorry for the hassle! Hamish wrote: Hi Jerry Thanks for your patience, I have tried installing 3.0.3 again and it has once again started to ask for logins. I restarted all the services (nmb,smb,winbind) and it continued. After another 5 minutes, i restarted the services again, it started accepting connections - I am really sorry for the hassle, still trying to figure out what I did wrong! Some things have been added to smb.conf: here is the working one: [global] unix charset = LOCALE workgroup = MYDOMAIN realm = MYDOMAIN.MYDOMAIN.MY server string = dataserver interfaces = 127.0.0.1, eth0 bind interfaces only = Yes security = DOMAIN password server = MYPWDSERVER local master = No idmap uid = 1-2 idmap gid = 1-2 [share defs...] My next step is to move some multi-user (around 15 max users) approach database files to the samba server. Thanks again, and sorry for being a pain! Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hamish wrote: | Thanks Jerry | I have reverted to 3.0.2a and it seems to work fine. ok, but I would really like to find out why upgrading to 3.0.3 broke your configuration? Did you update /lib/*nss_winbind* ? cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFAmPphIR7qMdg1EfYRAs5mAJ91ceEOZRovzIDrtRVWrpw5T304YACZAYyK ZPnKgAzr7SEnQOKSNrt+UOk= =bBln -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] NetBIOS names resolution and Linux
Hi I use Mandrake Linux 10.0 and I recently upgraded from Samba 2.2.8 to Samba 3.0.2a. The Samba box is in a network that I do not control. The Win clients have nothing set in their network properties: no DNS server, no WINS server. Question 1: is it true that they get their name resolution from broadcasting? or from where else? Question 2: before the upgrade I was able to do ping netbiosname. Now ping does not work with a netbios name. I could not find what the difference is in the configuration. Is there a way to have ping (and other utilities) get the information from samba? (nmblookup, findsmb, all work fine and read all machines on the network). Question 3: When I use Linneighborhood it says master without browse list. How can I fix that? Thanks Marc -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] two Problems with Samba 3.0.4
Hello I have to strange problems since we changed from samba 3.0.2a to 3.0.4. The first one is, everytime I enter SWAT the entry in smb.conf printcap name changes from /etc/printcap to lpstat even when i switch back to default in SWAT (wich is /etc/printcap ) i get the entry lpstat in my smb.conf. I have to change the smb.conf by hand, everytime i opend it with SWAT. Don't tell me don't use SWAT we need it for the local admins. The second problem has someting to with filesystem rights. We use acl's with samba. But on the Windows clients we only see the acl's and not the main group. So the main group, even if it has the right on the linux filesystem, can't open the files or enter the directory. We have to Samba Servers one PDC and one BDC together with two LDAP-Servers. The Problem is only on the filesystem of the BDC. Both smb.conf files are exactly the same for the filesystemrights. May be some of you can help me. Stefan -- Kösliner Straße 75 48147 Münster Tel. 0251 / 3835950 www.kania-online.de signature.asc Description: Dies ist ein digital signierter Nachrichtenteil -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3 and LDAP - Error loading profiles
hi list, Solved my own problem with: [profiles] nt acl support = Yes regards, -- RNuno -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Ricardo Nuno Sent: quarta-feira, 26 de Maio de 2004 13:43 To: [EMAIL PROTECTED] Subject: [Samba] Samba 3 and LDAP - Error loading profiles Hi, I'm setting up Samba with ldap backend and everythin appears to be working correctly except for profiles. Using: samba-3.0.2 openldap-2.1.26 smbldap-tools-0.8.4 When a user 'testa' tries to logon from a Win2K system that has joined the domain he gets the following error message: Windows did not load your roaming profile and is attempting to log you on with your local profile. Changes to the profile will not be copied to the server when you logoff. Windows did not load your profile because a server copy of the profile folder already exists that does not have the correct security. Either the current user or the Administrator's group must be the owner of the folder. Contact your network administrator. But on the server he creates the profile dir. It is created when he tries to log on, but with nothing on it. The profile folder before he tries to logon: [profiles]# ls -la total 12 drwxr-xrwt3 root Domain Admins 4096 Apr 24 09:09 . drwxr-xr-x4 root Domain Admins 4096 Apr 22 23:04 .. The profile folder after he's logged on: minho profiles # ls -la total 12 drwxrwxrwt 3 root root 4096 May 26 14:02 . drwxr-xr-x 8 root root 4096 May 25 18:41 .. drwx-- 2 testa Domain Users 4096 May 26 14:02 testa minho profiles # ls -la testa/ total 8 drwx-- 2 testa Domain Users 4096 May 26 14:02 . drwxrwxrwt 3 root root 4096 May 26 14:02 .. My smb.conf: ... [profiles] # chmod 1777 /opt/samba/profiles path = /opt/samba/profiles read only = no writeable = yes create mask = 0600 directory mask = 0700 browseable = No guest ok = Yes profile acls = yes force user = %U valid users = %U Domain Admins minho samba # pdbedit -Lv testa Searching for:[((objectClass=sambaDomain)(sambaDomainName=MOONORG))] smbldap_open_connection: connection opened Searching for:[((objectClass=sambaDomain)(sambaDomainName=MOONORG))] smbldap_open_connection: connection opened init_sam_from_ldap: Entry found for user: testa Unix username:testa NT username: testa Account Flags:[U ] User SID: S-1-5-21-2374267749-3844533553-1363514809-3002 Primary Group SID:S-1-5-21-2374267749-3844533553-1363514809-513 Full Name:System User LDAP Home Directory: \\PDC-MOONORG\testa HomeDir Drive:H: Logon Script: testa.cmd Profile Path: \\PDC-MOONORG\profiles\testa Domain: MOONORG Account desc: System User LDAP Workstations: Munged dial: Logon time: 0 Logoff time: Tue, 19 Jan 2038 03:14:07 GMT Kickoff time: Tue, 19 Jan 2038 03:14:07 GMT Password last set:Tue, 25 May 2004 20:37:22 GMT Password can change: 0 Password must change: Mon, 19 Jul 2004 20:37:22 GMT From the log i can catch this errors: [2004/05/26 14:07:16, 2] rpc_parse/parse_prs.c:netsec_decode(1575) netsec_decode: FAILED: packet sequence number: [2004/05/26 14:07:16, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1371) failed to decode PDU [2004/05/26 14:07:16, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605) process_request_pdu: failed to do schannel processing. [2004/05/26 14:07:17, 1] smbd/service.c:make_connection_snum(705) medeiros (192.168.10.123) connect to service profiles initially as user testa (uid=1001, gid=513) (pid 19184) Everything else is working. testa can logon and access all shares including the home share, and write to the profile dir. It's like it was some problem only on the logon. Anyone was a clue on this ?? really need help on this Tnx Regards, RNuno -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] joining a domain with KB828741
Hello, I have problems with my Samba servers. The PDC in the Windows domain is a NT4 and has the patch KB828741 installed on it. 1st server : HP-UX 10.20 with Samba 2.2.8a workgroup = FR-MON netbios name = TIMIX security = domain encrypt passwords = Yes password server = * All shares are OK when accessed from Windows workstations. But from the Unix server, I get : timix # smbclient -L localhost -U% added interface ip=10.58.80.32 bcast=10.58.95.255 nmask=255.255.240.0 Domain=[FR-MON] OS=[Unix] Server=[Samba 2.2.8a] tree connect failed: Call returned zero bytes (EOF) -- 2nd server : HP-UX 10.20 with Samba 2.2.8a workgroup = FR-MON netbios name = HAWKING security = domain encrypt passwords = Yes password server = * It worked fine (and perhaps with the same problem as above) Because I need to migrate the Unix server to a domain with Active Directory, I installed Samba 3.0.4 and tested it inside the same old domain. (I wanted to change the domain when everything'll be OK in this one) I did : hawking # net join -S monnet01 -Uadmin_mon [2004/05/27 17:25:54, 0] param/loadparm.c:map_parameter(2420) Unknown parameter encountered: read size [2004/05/27 17:25:54, 0] param/loadparm.c:lp_do_parameter(3110) Ignoring unknown parameter read size Password: Joined domain FR-MON. hawking # /sbin/init.d/samba start (daemons well started) hawking # /usr/local/samba/bin/smbclient -L localhost -U% Unknown parameter encountered: read size Ignoring unknown parameter read size session setup failed: NT_STATUS_LOGON_FAILURE And shares are accessible, but read/write permissions not respected. I can access a share only if it is with guest ok=yes. So I tested Samba 2.2.9 : hawking # /usr/local/samba/bin/smbpasswd -j FR-MON -r monnet01 -Uadmin_mon Password: Joined domain FR-MON. hawking # /sbin/init.d/samba start hawking # /usr/local/samba/bin/smbclient -L localhost -U% added interface ip=10.58.80.23 bcast=10.58.95.255 nmask=255.255.240.0 Domain=[FR-MON] OS=[Unix] Server=[Samba 2.2.9] tree connect failed: NT_STATUS_WRONG_PASSWORD Acess rights to Samba shares impossible. -- I then removed KB828741 from the PDC. -- I tested again Samba 3.0.4 : same result as first test. I tested Samba 2.2.9 : everything OK. --- I re-installed KB828741 on the PDC. --- Shares with Samba 2.2.9 are still OK. But I still have : hawking # /usr/local/samba/bin/smbclient -L localhost -U% added interface ip=10.58.80.23 bcast=10.58.95.255 nmask=255.255.240.0 Domain=[FR-MON] OS=[Unix] Server=[Samba 2.2.9] tree connect failed: NT_STATUS_WRONG_PASSWORD So now, I can't execute a new smbpasswd or net join to test another version because I am convinced that I won't be able to re-established this working version without to remove patch KB... (and I can't remove it, I am not administrator of the Windows domain) Is there a problem in my tests ? (I used the same smb.conf in all tests) Is it a bug ? (i want to ask to you before sending a mail to Samba team) Is it possible to run a 2nd version of Samba (with another smb.conf and another NetBios name) on the same server, in order to test Samba 3.0.4 ? thanks Marc. -- Marc Seguin AtosOrigin - NIS [EMAIL PROTECTED] +33(0)1 4614 5937 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Same Problem.... RE: [Samba] Can see server, but can't see shares. Whazzup?
Hi Jim Sorry for inserting me in the discussion, but I have the same problem here and I tryed to set os level = 10 wins support = no and nothing changes... I tryed to disable the wins support in win98 clients... do not work too.. I don't have any WinNT/XP/2k in my network, just win98 clients I will thank you for any tips... I'm using Samba 3.0.2a on Mandrake 9.2 Flávio Henrique. Here is my smb.conf # Samba config file created using SWAT # from 127.0.0.1 (127.0.0.1) # Date: 2004/05/28 08:41:01 # Global parameters [global] workgroup = PROVENDA server string = Samba Server %v map to guest = Bad User passwd program = /usr/bin/passwd3 %u client plaintext auth = No log level = 1 log file = /var/log/samba3/log.%m max log size = 1000 time server = Yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 printcap name = cups logon script = logon.bat logon path = logon home = domain logons = Yes os level = 100 lm announce = No preferred master = Yes domain master = Yes enhanced browsing = No dns proxy = No wins support = Yes ldap ssl = start tls printer admin = @adm create mask = 02777 force create mode = 02777 directory mask = 02777 force directory mode = 02777 printing = cups [printers] comment = All Printers path = /var/spool/samba3 create mask = 0700 guest ok = Yes max print jobs = 5000 printable = Yes print command = lpr-cups -P %p -o raw %s -r # using client side printer drivers. use client driver = Yes browseable = No [print$] path = /var/lib/samba3/printers write list = @adm, root guest ok = Yes [c] path = /servidor/c read only = No [netlogon] path = /servidor/netlogon write list = root browseable = No [openoffice] path = /servidor/openoffice [iso9001] path = /servidor/c/iso9001 read only = No inherit permissions = Yes [win98] path = /servidor/win98 [documentos] path = /servidor/documentos read only = No [d] path = /d read only = No [homes] comment = Home Directories read only = No hide special files = Yes hide unreadable = Yes hide unwriteable files = Yes browseable = No [drivers] path = /servidor/drivers -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Sub-directories are empty
I sent this yesterday, but it didn't seem to make it to the list - sorry
if its a dup...
Hello,
I have been using Red Hat 8.0 with SAMBA for a while (but I am by no
means an expert at either) without issue. Anyway I just migrated my
system to SuSe 9.0. SAMBA appears to be setup properly as I can connect
to the two shares I have from a windows machine. However I am having
diffaculty with one of my shares. This one share has a bunch of files in
it and a couple of sub-directories. There are files in these
sub-directories (which I can see when I am logged into the machine). But
when I connect to the share from a Windows XP Pro machine the files in
the main directory appear and are accessable, but when I click to open
the sub-directories they come up empty. The other share seems to work
fine as I can the contents of sub-folders.
I am running SuSe 9.0 which appears to have SAMBA 2.2.8a (smbd version
2.2.8a-SuSE started.)
Clients are all running Windows XP Pro with all the latest Critical updates.
So just to re-interate, I can connect to the 'games' share and I can see
the contents of the directory fine. But if I click on a sub-directory it
comes up empty. If I use a console (DOS BOX) and type dir z:\sub-dir
it comes up empty.
The files permissions for all files in the 'games' directory is 644
(rw_r__r__) and are owned by root (I've actually changed the owner to be
the 'game_player' account [which is the user that connects to the
share], and it had no affect).
Looking at the /var/log/samba/smb.conf doesn't show anything when I
connect or enter the directory or sub-directory.
Any help is welcome.
Here is the smb.conf I am using, the 'sl' share works fine, the 'games'
share is the one with the problem.
[global]
workgroup = workgroup
server string = Starfury Samba Server
hosts allow = 192.168.1.
username map = /etc/samba/smbusers
unix password sync = Yes
large readwrite = Yes
local master = no
os level = 2
time server = Yes
unix extensions = Yes
encrypt passwords = yes
map to guest = Bad User
printing = CUPS
printcap name = CUPS
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
wins support = No
veto files = /*.eml/*.nws/riched20.dll/*.{*}/
add user script =
domain logons = no
preferred master = auto
# Removed [homes], [printers] [print$] from this as I don't use them
[sl]
comment = SL User shares
path = /kosh/SL
users = game_player Jim
writable = yes
public = no
printable = no
browseable = yes
guest ok = no
# The game CD images
[games]
comment = Game CD's
path = /kosh/game_backup
users = game_player Jim
public = no
writable = yes
printable = no
# write list = Jim
browseable = yes
guest ok = no
--
Jim Marshall
Owner/Manager
The Internet ConneXtion
http://www.iconnextion.com
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] How to apply a patch?
On 18 May 2004 at 10:28, Gerald (Jerry) Carter wrote: please see the patch attached to bug 1319 (as of yesterday) and try it out. The bug is actually an interaction between 'force user' adn 'write list' Sorry for the late answer. Can you tell me how to apply this patch (or tell me where I can find the documentation how to do it)? I always compile Samba from the source RPMS (of RHL9) on the Samba FTP site on my RHL9 Linux server (don't know how to do it else... ;-). Cheers, Alex. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: How to apply a patch?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex de Vaal wrote: | | please see the patch attached to bug 1319 (as | of yesterday) and try it out. The bug is actually | an interaction between 'force user' adn 'write list' | | Sorry for the late answer. | | Can you tell me how to apply this patch (or tell me where | I can find the documentation how to do it)? | I always compile Samba from the source RPMS (of RHL9) | on the Samba FTP site on my RHL9 Linux server (don't know how | to do it else... ;-). # rpm -Uvh samba-3.0.4-1.src.rpm # cd /usr/src/redhat/SOURCES/ # tar jxf samba-3.0.4.tar.bz2 # wget http://samba.org/~jerry/patches/post-3.0.4/samba-3.0.4.patch # cd samba-3.0.4 # patch -p0 ../samba-3.0.4.patch # cd .. # mv samba-3.0.4.tar.bz2 samba-3.0.4.tar.bz2.old # tar jcf samba-3.0.4.tar.bz2 samba-3.0.4 # cd /usr/src/redhat/SPECS/ # rpmbuild -bb samba.spec cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFAt2JwIR7qMdg1EfYRAkxGAKCDlLcwXfYHWiVEZg7pU+W44J0vJgCg4uL5 lEf2N12P+tzfPMAV+Qp1Nrk= =7n35 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba PDF printer...
Hello Using Samba 2.2.8a on a Redhat 7.2 box I set up a PDF generator relying on Samba and a shell script to create the output. This works fine but I have a further trouble that I am stumped by. The files cannot be viewed from within a Citrix session (the point of the entire exercise) unless they are available from this one NT Server share. So if I mount a Windows NT server share under '/mnt/gpsc/pdfs' and then redirect the output to that directory, everything looks like it works but I get no output. I can create/edit files, as a variety of users, on this NT share from the Linux box so I think that part is fine but I cannot do this from Samba. I would normally expect some sort of complaint in the form of a log entry but nothing shows up in the logs (log level = 3). -8snip from smb.conf--- [PDFFiles] path = /mnt/gpsc/pdfs invalid users = read only = No guest ok = Yes [Create a PDF] comment = Check your 'K:' drive for your .PDF file. Check in the folder named 'PDFFiles'. path = /tmp guest ok = Yes printable = Yes print command = /usr/local/bin/printpdf %s %m %U -8end snip from smb.conf--- *AND* -8snip from 'printpdf'--- # !/bin/bash # /usr/local/bin/printpdf # written by Blue Groper # Last modified 29/9/03 (d/m/y) # Modified by Anzac 25-1-04 # Modified by Steven Macfarlane 27.5.04 - Trying to get it to write to '/mnt/gpsc/pdfs' # # Script to generated pdf files and a message for Windows domain users # with filename. Windows 98 clients must have WinPopup loaded. # # Count = value from /etc/pdf/pdfcount files. Used for part of output filename. SAMBAUSERNAME=$1 # (%s from /etc/samba/samba.conf call) MACHINENETBIOSNAME=$2 # (%m from /etc/samba/samba.conf call) NAMEFILE=$3 # (%U from /etc/samba/samba.conf call) OUTPUTDIR=/mnt/gpsc/pdfs # (Can be mapped in GPSC domain as network drive Q: if required for MESSAGE below) # Write the variables somewhere, handy when it is broken # Uncommment line below if no output file see if file is being created # Must comment out MachineNetBiosName line for this to work #echo SambaPrintFileName: $1/tmp/pdfdebug # Machine name to check popup going to correct netbios name echo MachineNetBiosName: $2/tmp/pdfdebug # Username supplied to samba for creating filename echo SambaUserName: $3/tmp/pdfdebug # Options are not essential, but useful to control finer features of pdf's OPTIONS=-dSubsetFonts=true -dEmbedAllFonts=true # Counter ensures meaningless but unique filenames PDFCOUNTFILE=/etc/pdf/pdfcount if [ -f $PDFCOUNTFILE ] ; then COUNT=`cat $PDFCOUNTFILE` else COUNT=0 fi let COUNT=COUNT+1 # write counter to /etc/pdf/pdfcount echo $COUNT$PDFCOUNTFILE # filename for pdf output based on Windows Username and COUNT number OUTPUTFILENAME=$NAMEFILE-$COUNT.pdf # Send the message first to make it seem faster. MESSAGE=\\134\134PdfServer\134pdfs\134$OUTPUTFILENAME has been created echo -e $MESSAGE | smbclient -M $MACHINENETBIOSNAME -U PDF SERVER /dev/null 21 # Finally, make the pdf... ps2pdf13 $OPTIONS /tmp/$SAMBAUSERNAME $OUTPUTDIR/$OUTPUTFILENAME # Remove the temporary file written by Samba rm /tmp/$SAMBAUSERNAME # End -8 end snip --- Any helpful guidance would be welcomed, Thank you for reading Gus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [WORKAROUND] Re: [Samba] duplicate domains in browse list
On Fri, May 28, 2004 at 10:42:27AM +0200, Farkas Levente wrote: Jeremy Allison wrote: On Thu, May 27, 2004 at 08:45:22PM +0200, Joerg Pulz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 27 May 2004, Jeremy Allison wrote: Ok, all the changes here are just to reduce the size of string used from an unstring to an nstring. Unfortunately this cannot be correct as it would cause truncation for multibyte characters in code pages like Japanese. It may be that the change you added causes extra non-zero bytes not to be examined in the comparison functions. If that is the case the following patch should have the same effect. If you could test this instead of your patch I'd appreciate it. I've tested the small patch on one DMB but it did NOT work. I stopped 'smbd' and 'nmbd', removed the browse.dat file, installed the new binaries, and started the whole thing. as soon as the browse.dat file is recreated, it contains domain names with trailing spaces until MAX_NETBIOSNAME_LEN is reached. Can you send me your smb.conf please. I'd really like to make sure I've fixed this for 3.0.5. I've similar entries in my log files: --- May 25 10:16:24 kek nmbd[10096]: [2004/05/25 10:16:24, 0] nmbd/nmbd_workgroupdb.c:create_workgroup(68) May 25 10:16:24 kek nmbd[10096]: create_workgroup: workgroup name MKK ^[ is too long. Truncating to MKK if I not wrap the lines (the middle of the line): create_workgroup: workgroup name MKK^[ is too long. Truncating to MKK Could you send me the smb.conf and the log file please. Also copies of your browse.dat files. Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] [Samba + CIFS] Symbolic link problems
On Fri, May 28, 2004 at 03:24:16PM +0200, ALBANI damiano wrote: Hello, I am using Samba 2.2.8a with 2.6.6 CIFS Linux clients and I've got problems with symbolic links : I can't make them point outside the share. I understand that it is a security feature if the server resolves the link. But, in my case, I'd like Samba to serve link files *as is*, so that the Unix clients resolve the link. Symlinks are an important filesystem feature and their lack breaks many software, especially when using home directories exported from Samba shares. OpenOffice for example, which makes a shorcut from '/usr/lib/ooo-1.1/program/soffice' to '~/.rhopenoffice-1.1/soffice', and refuses to start if it can't :( This isn't going to work with Samba 2.2.x. I recently fixed this and it will work correctly in Samba 3.0.5. You can try Samba 3.0.5pre1 to test. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Sub-directories are empty
There are files in these sub-directories (which I can see when I am logged into the machine). But when I connect to the share from a Windows XP Pro machine the files in the main directory appear and are accessable, but when I click to open the sub-directories they come up empty. The other share seems to work fine as I can the contents of sub-folders. My first guess is the user on the Windows machine doesn't have permission to view those files on the unix filesystem level. Or they match your veto files list. -- Steven Kurylo -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] To all with FreeBSD 5.2.1 and net ads join problems
If your getting kinit problems with net ads join (don't bother with
testjoin-it will error out no matter), do the following:
1. Change an administrators password, especially if you upgraded from
NT 4.
2. Create a krb5.conf file int /etc that looks like this:
logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
ticket_lifetime = 24000
default_realm = YOURDOMAIN.COM
dns_lookup_realm = true
dns_lookup_kdc = true
default_etypes = des-cbc-crc des-cbc-md5
default_etypes_des = des-cbc-crc des-cbc-md5
[realms]
FSKLAW.NET = {
kdc = kerberos.yourdomain.com
admin_server = servername.yourdomain.com
default_domain= yourdomain.com
}
[domain_realm]
.kerberos.server = KERBEROS.FSKLAW.NET
[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf
[pam]
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
3. Test kinit: kinit [EMAIL PROTECTED] enter new password.
You should be at a prompt. You'll get nothing if it's working.
4. Join the domain. net ads --user=someadmin join. Enter password.
You should get some message telling you you were successfull. Check out
the Win2k machine. The samba name of your Unix box should be in active
directory users and computers, in computers. Double click the listing
and check version. It should say the OS is Samba 3.0.x. Your in,
mostly at this point.
Hope this helps, I've been at this three weeks now.
TMS III
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] binary package
Good morning, How do I find out what options where built in to the rpm binary of Samba 3.0.4? I'm looking for features; msdfs ads automount quotas acl-support Bri- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3 write performance drop on files 16 MB
Jeremy, I have the protocol traces but they are about 44MB and 70MB. Is there a way I can send them to you? As for the testing, we are running Windows 2003 advanced server with no service packs. From the 2003 client, we map a drive to the server (Samba or W2003). Then from that drive we have been running the IO-zone basic suite of tests. Running (from the command line in the mapped drive, I.e. Y:\...) iozone -s 16m -i 0 -A -R -f report.txt should show normal results and iozone -s 32m -i 0 -A -R -f report2.txt should show the problem. Here is an example of a full report. File size is the left column, and record size is the top row. Speed is in KB/sec. You can see where the speed drops dramatically at 32MB. Thanks, David Writer report 4 8 16 32 64 128 256 512 1024 2048 4096 8192 16384 64 75628 78294 77721 78513 74395 128 90751 95369 96809 95184 95865 93212 256 107823 107711 107092 109354 107665 105674 105504 512 114706 115112 115430 115644 114250 110561 112454 112175 1024 115586 118498 119247 118106 118558 117669 117109 115713 113378 2048 117543 117730 119502 118905 120940 117782 120144 118108 118950 118211 4096 119136 117897 121224 120629 121265 120565 120701 118823 119519 119297 119750 8192 119864 120137 121090 120940 121612 120158 120953 119481 118914 119388 120234 120022 16384 119758 120410 121239 121283 121382 121003 121197 49943 120290 120309 71590 120519 120383 32768 8815 8517 8410 8390 7580 7907 7489 7784 8075 7372 7526 7374 8710 65536 5923 6028 6118 6053 6147 6109 6125 6161 6061 6040 6118 6182 6058 131072 5355 5320 5329 5324 5337 5340 5305 5316 5295 5328 5316 5358 5121 262144 5000 5008 5010 5022 5010 5015 5032 5016 5006 5002 5010 5016 5025 524288 4855 4868 4777 4857 4869 4842 4842 4865 4869 4836 4864 4864 4852 -Original Message- From: Jeremy Allison [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 25, 2004 8:03 PM To: Krause, David Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Samba] Samba 3 write performance drop on files 16 MB On Mon, May 24, 2004 at 11:56:11AM -0400, [EMAIL PROTECTED] wrote: I tried W2K3 to W2K3 server, still on same hardware. It does not get as high of performance initially, but it also does not drop off after 16MB. It stayed at about 25 to 30,000KB/sec. Ok, I'd really like to see some protocol traces of it going fast (to w2k3) and slow (to samba). These might be quite large, or can you tell me *exactly* how to reproduce this on a system here ? I'd need W2k3 SP level, file size and exaclty what client operations you do to reproduce it (ie. is it a mapped drive or unc pathname, do you use a command line copy or explorer etc.). Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] binary package
run smbd -b to get the build options [EMAIL PROTECTED] wrote: Good morning, How do I find out what options where built in to the rpm binary of Samba 3.0.4? I'm looking for features; msdfs ads automount quotas acl-support Bri- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] FW: file names between unix and windows
On Thu, May 27, 2004 at 08:14:48PM -0400, Wayne R. Prior wrote: I've searched, but can't find any information concerning unix and windows file naming conventions. We want to use SAMBA, but are concerned about our users being able to work with files named Boy, BOY, bOY, etc... Please provide some direction to the most current info available for Samba 3.0.4. Samba presents a case-insensitive view of the case-sensitive UNIX filesystem. So Windows users can open the unix file boy as Boy, BOY, bOY, etc... Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3 PDC BDC Servers
I'm not sure what the configurations of the Primary and Backup servers should be to enable them to operate as a domain across a WAN. The original server has been running for some time as the master server, but now I am adding a second (backup) server at the remote site. The global section of the original server is: [global] log file = /var/log/samba/%m.log printer = Lab_LJ1200 guest account = pcguest passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* admin users = root @sysadmin printer admin = @sysadmin socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=8192 obey pam restrictions = yes printer name = Lab_LJ1200 guest ok = yes local master = yes domain master = yes encrypt passwords = yes passwd program = /usr/bin/passwd %u dns proxy = no netbios name = MAINSERVER printing = cups server string = mainserver logon script = default.bat unix password sync = yes workgroup = OFFICE os level = 125 preferred master = yes max log size = 1000 pam password change = yes log level = 3 security = user domain logons = yes add user script = /usr/sbin/useradd -g machines -c NTMachine -d /dev/null -s /bin/false %u delete user script = usr/sbin/userdel %u delete group script = /usr/sbin/groupdel %g add user to group script = /usr/bin/gpasswd -a %u %g set primary group script = /usr/sbin/usermod -g %g %u add machine script = /usr/sbin/useradd -d /dev/null -g 600 -s /bin/false -M %u winbind separator = + idmap uid = 1-2 idmap gid = 1-2 winbind enum users = yes winbind enum groups = yes disable netbios = yes use client driver = yes time server = yes wins support = yes name resolve order = wins lmhosts bcast When I added the server at the remote site, I set up the global section like this: [global] # dos charset = CP932 dos charset = UTF-8 # unix charset = EUC-JP unix charset = UTF-8 display charset = CP932 workgroup = OFFICE server string = remoteserver security = domain obey pam restrictions = Yes password server = mainserver guest account = pcguest pam password change = Yes passwd program = /usr/bin/passwd %u smb passwd file = /etc/samba/smbpasswd passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* unix password sync = Yes log level = 3 log file = /var/log/samba/%m.log max log size = 1000 socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=8192 add user script = /usr/sbin/useradd -g machines -c NTMachine -d /dev/null -s /bin/false %u logon script = default.bat delete user script = usr/sbin/userdel %u delete group script = /usr/sbin/groupdel %g add user to group script = /usr/bin/gpasswd -a %u %g os level = 30 preferred master = No local master = No domain master = No dns proxy = No guest ok = Yes printer name = Remote_LJ6P name resolve order = wins lmhosts bcast encrypt passwords = yes wins support = yes admin users = root @sysadmin printer admin = @sysadmin netbios name = REMOTESERVER printing = cups domain logons = yes set primary group script = /usr/sbin/usermod -g %g %u add machine script = /usr/sbin/useradd -d /dev/null -g 600 -s /bin/false -M %u winbind separator = + idmap uid = 1-2 idmap gid = 1-2 winbind enum users = yes winbind enum groups = yes disable netbios = yes use client driver = yes I joined the secondary one to the domain, and all the users can access all directories/files, but I get the following warning in the /var/log/messages file on the secondary server: Server's Role (logon server) NOT ADVISED with domain-level security What should I change in the two server's global sections to ensure they operate at primary and backup? Thanks! Larry -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind problem
On Fri, May 28, 2004 at 01:03:29PM +0100, Jorge Manta Bulhoes wrote: Hi, As requested, here are the versions: samba-3.0.2-7.FC1 samba-common-3.0.2-7.FC1 samba-client-3.0.2-7.FC1 krb5-server-1.3.1-6 krb5-libs-1.3.1-6 krb5-workstation-1.3.1-6 pam_krb5-2.0.5-1 It's all FC1 standard. Please try Samba 3.0.4 (or Samba 3.0.5pre1), there have been several winbindd updates between 3.0.2 and now. Thanks, Jeremy -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Mounting file shares in UTF-8
Hi, I've searched for lots of messages similar to this, but none as detailed as this, and I haven't seen an answer that helps me. I have a Win 2000 machine that has some file shares on it. These shares are international; files and directories have characters from many languages. The system codepage is set to 932. I'm using the smb binaries from samba 3 to mount these shares on a Linux box. My goal is to mount it so that file names and directories are in UTF-8 from the point of view of the Linux filesystem. Unfortunately, I haven't figured out how to get this to work. Here is my bare bones smb.conf file: unix charset = UTF8 display charset = UTF8 unicode = yes Here's the command I run: $ smbmount //.../greek /greek -o username=... creating lame upcase table creating lame lowcase table Password: I don't have a terminal that's set up to show UTF-8 correctly, so I run ls -b to see an escaped listing: $ ls -b /greek df gtrdfhsdf \203\241\203\257\203\241\203\263\203\242\203\241\203\263\203\301\203\320\203\302\203\323 \203\301\203\317\203\303\203\303\203\310.txt That last file has Greek characters; in Unicode, the first byte would be 03; in UTF-8, CE; in CP932, 83. Octal 203 = hex 83, so that file is listed in the Win2K codepage. This is the only output relevant to conversions from configure: checking for iconv in /usr... yes checking can we convert from CP850 to UCS2-LE?... CP850 checking can we convert from ASCII to UCS2-LE?... ASCII checking can we convert from UTF-8 to UCS2-LE?... UTF-8 At the end of this message I have the complete conversation between Samba and the server, for any SMB protocol experts that happen to see this. My iconv is coming from glibc 2.2.5. My Linux is Slackware 9.1. Samba 3.0.2a. Based on what I've gathered from resources I've found online, Samba 3 should be able to get file listings from Win 2K in Unicode, right? And this could be converted to UTF-8? Would this ability be dependent on any settings outside of Samba 3, for example, locale? My current locale is C and there are no UTF-8 locales on my box. On a side note, when I don't build and install CP850.so, I see smbmount/smbclient spew out ~65000 lines of convert_string_internal: Conversion not supported. When I do install it, I get smbmount: relocation error: /etc/charset/CP850.so: undefined symbol: smb_register_charset And when I run nm on CP850.so, I see U smb_register_charset Thanks for reading. Here is the conversation between Samba and the server. *** Conversation for mounting *** 0.0162 (0.0162) CS --- 00 00 00 b3 ff 53 4d 42 72 00 00 00 00 08 01 c0.SMBr... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 72...r 00 00 01 00 00 90 00 02 50 43 20 4e 45 54 57 4fPC NETWO 52 4b 20 50 52 4f 47 52 41 4d 20 31 2e 30 00 02RK PROGRAM 1.0.. 4d 49 43 52 4f 53 4f 46 54 20 4e 45 54 57 4f 52MICROSOFT NETWOR 4b 53 20 31 2e 30 33 00 02 4d 49 43 52 4f 53 4fKS 1.03..MICROSO 46 54 20 4e 45 54 57 4f 52 4b 53 20 33 2e 30 00FT NETWORKS 3.0. 02 4c 41 4e 4d 41 4e 31 2e 30 00 02 4c 4d 31 2e.LANMAN1.0..LM1. 32 58 30 30 32 00 02 44 4f 53 20 4c 41 4e 4d 412X002..DOS LANMA 4e 32 2e 31 00 02 53 61 6d 62 61 00 02 4e 54 20N2.1..Samba..NT 4c 41 4e 4d 41 4e 20 31 2e 30 00 02 4e 54 20 4cLANMAN 1.0..NT L 4d 20 30 2e 31 32 00 M 0.12. --- 0.0169 (0.0006) SC --- 00 00 00 6d ff 53 4d 42 72 00 00 00 00 88 01 c0...m.SMBr... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 72...r 00 00 01 00 11 08 00 07 32 00 01 00 04 41 00 002A.. 00 00 01 00 00 00 00 00 fd f3 00 00 a0 1c 51 d3..Q. 8f 42 c4 01 a4 01 08 28 00 f4 2a 3f b5 4c 96 13.B.(..*?.L.. 16 53 00 4f 00 4c 00 41 00 52 00 53 00 59 00 53.S.O.L.A.R.S.Y.S 00 54 00 45 00 4d 00 00 00 53 00 55 00 4e 00 00.T.E.M...S.U.N.. 00 . --- 3.5151 (3.4982) CS --- 00 00 00 90 ff 53 4d 42 73 00 00 00 00 08 01 00.SMBs... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 72...r 00 00 02 00 0d ff 00 00 00 ff ff 02 00 82 72 00..r. 00 00 00 18 00 18 00 00 00 00 00 10 00 00 00 53...S 00 4b 1c 33 7e 60 70 2c a2 81 51 42 b2 62 9e 51.K.3~`p,..QB.b.Q 50 82 41 be 44 16 11 07 82 63 f6 36 91 09 4b 6bP.A.Dc.6..Kk 8b 29 ab fc bd fb 91 ff 51 91 a0 5c 68 1b 90 a2.)..Q..\h... ad 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 00 57.Administrator.W 4f 52 4b 47 52 4f 55 50 00 55 6e 69 78 00 53 61ORKGROUP.Unix.Sa 6d 62 61 00mba. --- 3.5185 (0.0033) SC
[Samba] Re: samba Version 3.0.5pre1
Buchan, I'm sending this to the samba list also. I'm hoping someone can pick out my config error - if that is what my problem is... On Fri, 2004-05-28 at 11:16, Buchan Milne wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tim Jordan wrote: | Is this package OK to use? I started building yesterday and did not | notice that it moved from 3.0.4 to 3.0.5. I haven't used it much myself yet ... been too busy with real work ... but we need to get an update out, so I wanted some testing. I uderstand, this is the first time this week I have had time to play. On a testing note I noticed that the krb5-client package was not installed with your samba package. Is this by design? | I'm asking becasue I'm having | trouble getting a BDC configuration working. Trouble seems to be | related to winbind. | Are you setting up a BDC to a windows server YES! I want to migrate my users over to my samba server. Then I will take it samba out of the production environment and put it into a test network at which time I would reconfigure samba to be a PDC. This is all for testing, I CAN NOT impact the production domain (labor.ak). You shouldn't need winbind for a BDC to another samba server (although I have seem some ridiculous guides that suggest this ...), you just need all the samba servers looking at the same LDAP tree. Okay, after I joined the labor domain I tried a wbinfo -t and recieved this error: #wbinfo -t checking the trust secret via RPC calls failed Error code was STATUS_BUFFER_OVERFLOW (0x8005) could not check secret This led me to install winbind. Obviously I'm off base on that one | getent passwd - brings up local account then pauses, like it's going to | bring in the domain users, and then just ends. log snip | | nsswitch/winbind_user.c:winbindd_gerpwent(571) | could not lookup domain user TIMJORDAN | | If it can't lookup the domain user account, then how does it know | TIMJORDAN exists??? | Depends what you were doing at the time, but if you were trying to access a share or otherwise authenticate, it would know the user you're connecting as. The log shows each user in the domain (labor). I simply issued a getent passwd command. I have no local TIMJORDAN account. | /etc/samba/smb.conf | | [global] | workgroup = LABOR | realm = labor.ak | encrypt passwords = yes | password server = * | passdb backend = ldapsam:ldap://localhost | domain master = no | domain logons = no This needs to be yes for a BDC. Really? I don't want to offer a logon service until I have the samba server out of our production environment. | idmap backend = ldap:ldap://localhost | ldap admin dn = cn=root,dc=smb2ldap,dc=org | ldap suffix = dc=smb2ldap,dc=org | ldap machine suffix = ou=computers | ldap user suffix = ou=People | ldap group suffix = ou=Groups | ldap idmap suffix = ou=Idmap | ldap ssl = off | idmap uid = 1-2 | idmap gid = 1-2 | wins server = ipaddres | Regards, Buchan Thanks Buchan! TJ - -- Buchan Milne Senior Support Technician Obsidian Systems http://www.obsidian.co.za B.EngRHCE (803004789010797) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFAt5AUrJK6UGDSBKcRAiBgAJ9zl4V0R1vVHtJSCCgFjCAmwnk8/ACeNRQL cR8AHbuD2hMV1E3WfNBXLEw= =QG0O -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Computer Accounts
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rafal Pietrak wrote: | What is the reason to have a 'computer account' on host UNIX serving samba? | | I know, that NT PDC needs ID+password for each computer within its domain. | But samba TDB or LDAP pwdb backend look quite sufficient. I don't see a | reason to have those exposed (shadowed) as UNIX accounts - are there any? | | In other words, I don't see any activity, that NT domain computer does | *on*its*own*account* - e.g. as UNIX process - on samba server. Is there | any? Is there any other reason to have UNIX account ID for NT domain | computer? (I have already tested a setup, where all NT domain coputers | share common home directory, and it looks like nobody makes any attempt to | write there - so that feature of UNIX account does not look necesary) Rafal, please search the archives. I'm not explaining the details of this again. cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFAt5ckIR7qMdg1EfYRAuDhAKDobt7CXief4gdxQSDC1mvMcEA5mQCg8njF 8jsFxVLZG1M2L6C2e5tSUdQ= =DRcd -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Can't print multiple copies from XP to Samba 2.2.8a on Linux, hp 932c
We've been using samba for in house domain serving for a small network of XP machines. We have an HP 932c shared via samba 2.2.8a on a Linux box. We loaded the drivers that come with windows on the print$ share for automatic installation. In samba, the print command is lpr-cups -P %p -o raw %s -r. Printing single copies works fine. When we hook the printer directly to a xp machine, printing multiple copies does work, but printing over the network to samba will only ever print a single copy no matter what. Anyone have any ideas of things we can try? The XP machines all have the latest service packs and are up to date on updates. I tried the hp drivers from their website since some postings seem to indicate it is a driver problem. Any help is appreciated. -Chris -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Using Samba and Rational ClearCase Tools
Hello,
We are using Samba to connect our ClearCase server to the Windows environment. Our
original configuration was one server hosting all our VOBs and Views. We have Samba
configured to allow mapping of shares to our ClearCase Windows Clients. Everything was
working fine. Now we have set up a second server to host all our Views separate from
the VOBs. So we have a View server and a separate VOB separate. When we setup the View
server we installed Samba on that server, copied the config file from the original
setup to the new server and the only configuration change made was in the Global
parameters, the NetBios Name to be the new server name.
We are able to map a network drive to our new server. We are able to create a View on
the UNIX server, region synchronize on the Win Client side and mount a VOB. However
when we try to create a new file we get a window stating Access Denied. If we try to
check out an existing file we get an Error checking out {filename}. Unable to update
view {viewname}: Permission Denied. Unable to check out {filename}.
We are able to complete all these steps within the UNIX environment, we are only
having problems from the Windows environment and so we are assuming it has to do with
our Samba configuration.
We already know groups, permissions are okay. We've checked credmap against the two
servers. Any ideas?
Thank you,
April A. Asadourian
SW Development Environment, Tools Processes
The Boeing Company - Huntington Beach
(714) 372-0182
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Using Samba and Rational ClearCase Tools
On Fri, 2004-05-28 at 13:59, Sharpe, Annik A wrote:
Hello,
We are using Samba to connect our ClearCase server to the Windows environment. Our
original configuration was one server hosting all our VOBs and Views. We have Samba
configured to allow mapping of shares to our ClearCase Windows Clients. Everything
was working fine. Now we have set up a second server to host all our Views separate
from the VOBs. So we have a View server and a separate VOB separate. When we setup
the View server we installed Samba on that server, copied the config file from the
original setup to the new server and the only configuration change made was in the
Global parameters, the NetBios Name to be the new server name.
We are able to map a network drive to our new server. We are able to create a View
on the UNIX server, region synchronize on the Win Client side and mount a VOB.
However when we try to create a new file we get a window stating Access Denied. If
we try to check out an existing file we get an Error checking out {filename}.
Unable to update view {viewname}: Permission Denied. Unable to check out
{filename}.
We are able to complete all these steps within the UNIX environment, we are only
having problems from the Windows environment and so we are assuming it has to do
with our Samba configuration.
We already know groups, permissions are okay. We've checked credmap against the two
servers. Any ideas?
---
If you already know groups, permissions are okay then that means that
you've checked all the logs, right? syslog as well as all samba logs -
especially the log for the ip/computer trying to connect.
Craig
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Share lock between server
Hi, I would like to know if it is possible to share lock between two network dispatched samba server. ex: we have a cname named samba, which dispatch connection on samba01 and samba02. But if a user open a Microsoft Word file on samba01, I don't want someone connected on samba02 to be able to make change on it at the same time. thanx -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Using Samba and Rational ClearCase Tools
On Fri, May 28, 2004 at 04:59:05PM -0400, Sharpe, Annik A wrote:
April == Sharpe, Annik A [EMAIL PROTECTED] writes:
April Hello, We are using Samba to connect our ClearCase server
April to the Windows environment. Our original configuration was
April one server hosting all our VOBs and Views. We have Samba
April configured to allow mapping of shares to our ClearCase
April Windows Clients. Everything was working fine. Now we have
April set up a second server to host all our Views separate from
April the VOBs. So we have a View server and a separate VOB
April separate. When we setup the View server we installed Samba
April on that server, copied the config file from the original
April setup to the new server and the only configuration change
April made was in the Global parameters, the NetBios Name to be
April the new server name.
April We are able to map a network drive to our new server. We
April are able to create a View on the UNIX server, region
April synchronize on the Win Client side and mount a VOB. However
April when we try to create a new file we get a window stating
April Access Denied. If we try to check out an existing file we
April get an Error checking out {filename}. Unable to update
April view {viewname}: Permission Denied. Unable to check out
April {filename}.
April We are able to complete all these steps within the UNIX
April environment, we are only having problems from the Windows
April environment and so we are assuming it has to do with our
April Samba configuration.
This is usually caused by a permission problem.
Did you copy username.map from the VOB server to the View server?
What are the exact details in the view_log on the client?
Is there anything in the error_log?
What is the ALBD Account? Is there a corresponding UNIX account?
Do you realize that performance of views through Samba will probably
be 50-200+% worse than a local view?
If you increase the Samba debug level to 3 and repeat the operation,
what is in the Samba log?
Do you have 'log file = /usr/local/samba/var/log.%m' in your smb.conf?
This will make it easier to debug.
--
Eric M. Boehm /\ ASCII Ribbon Campaign
[EMAIL PROTECTED] \ / No HTML or RTF in mail
X No proprietary word-processing
Respect Open Standards / \ files in mail
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Share lock between server
On Fri, May 28, 2004 at 09:00:18PM -0400, Yannick Bergeron wrote: Hi, I would like to know if it is possible to share lock between two network dispatched samba server. ex: we have a cname named samba, which dispatch connection on samba01 and samba02. But if a user open a Microsoft Word file on samba01, I don't want someone connected on samba02 to be able to make change on it at the same time. Nope, this is not currently possible with Samba. It's not possible on Windows either though :-). Jeremy -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
svn commit: samba-web r82 - trunk/support
Author: deryck Date: 2004-05-28 06:01:48 + (Fri, 28 May 2004) New Revision: 82 Added: trunk/support/slovakia.html Modified: trunk/support/countries.html trunk/support/germany.html trunk/support/greece.html trunk/support/italy.html trunk/support/pakistan.html trunk/support/romania.html trunk/support/singapore.html trunk/support/spain.html trunk/support/us.html Log: Finishing the last of the backlogged requests for being added to support lists. Added slovakia to countries header. Added a 'last updated' comment to romania. WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=samba-webpath=/rev=82nolog=1
svn commit: samba-web r83 - trunk/support
Author: deryck Date: 2004-05-28 06:17:29 + (Fri, 28 May 2004) New Revision: 83 Modified: trunk/support/germany.html trunk/support/italy.html Log: Correcting format problems in last update. WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=samba-webpath=/rev=83nolog=1
svn commit: samba r936 - branches/SAMBA_3_0/source/passdb
Author: abartlet Date: 2004-05-28 08:57:00 + (Fri, 28 May 2004) New Revision: 936 Modified: branches/SAMBA_3_0/source/passdb/lookup_sid.c Log: Fix a rather weird error that crippled my site, when we upgraded to Samba 3.0.4. If we fail a query for the members of the 'administrators' group (and we may well just have the IDL wrong), this destroys later parts of the domain logon process. For reasons I can't understand, the client-side 'heck, what happened' bailout causes the connection to the DC to be dropped, and causes the mandetory profile not to be loaded. (This also only occours after a reboot) Return the members of 'administrators', and it all works fine. The reason we hit this is because we run winbindd (to support pam_winbind) on our DC, and the winbindd lookup in sid_to_gid was messing things up. As we don't care what type of thing this is, provided it exists in the group mapping db, we should not bother winbindd here. Andrew Bartlett WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=936nolog=1
Re: svn commit: samba r936 - branches/SAMBA_3_0/source/passdb
This seem related to a bug I recently had. My problem this time was a misconfigured group mapping, but the effect was that a NULL struct (I think) was passed back as members of the administrators group. I think we are getting wrong the way to return we have zero members, and windows picks up a NULL pointer and at this point all the bad happens. Unfortunately I was not able to determine exactly which was the right way to address such issue (happens only on misconfigurations or misbehaviours of the lookup functions). Simo. On Fri, 2004-05-28 at 10:57, [EMAIL PROTECTED] wrote: Author: abartlet Date: 2004-05-28 08:57:00 + (Fri, 28 May 2004) New Revision: 936 Modified: branches/SAMBA_3_0/source/passdb/lookup_sid.c Log: Fix a rather weird error that crippled my site, when we upgraded to Samba 3.0.4. If we fail a query for the members of the 'administrators' group (and we may well just have the IDL wrong), this destroys later parts of the domain logon process. For reasons I can't understand, the client-side 'heck, what happened' bailout causes the connection to the DC to be dropped, and causes the mandetory profile not to be loaded. (This also only occours after a reboot) Return the members of 'administrators', and it all works fine. The reason we hit this is because we run winbindd (to support pam_winbind) on our DC, and the winbindd lookup in sid_to_gid was messing things up. As we don't care what type of thing this is, provided it exists in the group mapping db, we should not bother winbindd here. Andrew Bartlett WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=936nolog=1 -- Simo Sorce- [EMAIL PROTECTED] Samba Team- http://www.samba.org Italian Site - http://samba.xsec.it
svn commit: samba r937 - in branches/SAMBA_4_0/source: include lib librpc/idl librpc/ndr rpc_server/netlogon rpc_server/samr torture/rpc
Author: tridge Date: 2004-05-28 13:23:30 + (Fri, 28 May 2004) New Revision: 937 Added: branches/SAMBA_4_0/source/lib/util_secdesc.c Modified: branches/SAMBA_4_0/source/include/rpc_secdes.h branches/SAMBA_4_0/source/lib/basic.mk branches/SAMBA_4_0/source/librpc/idl/lsa.idl branches/SAMBA_4_0/source/librpc/idl/misc.idl branches/SAMBA_4_0/source/librpc/idl/netlogon.idl branches/SAMBA_4_0/source/librpc/idl/samr.idl branches/SAMBA_4_0/source/librpc/idl/winreg.idl branches/SAMBA_4_0/source/librpc/ndr/ndr_basic.c branches/SAMBA_4_0/source/rpc_server/netlogon/dcerpc_netlogon.c branches/SAMBA_4_0/source/rpc_server/samr/dcesrv_samr.c branches/SAMBA_4_0/source/rpc_server/samr/samdb.c branches/SAMBA_4_0/source/torture/rpc/netlogon.c branches/SAMBA_4_0/source/torture/rpc/samr.c Log: - added a simple QuerySecurity implementation in samr server - moved some sec desc defines into misc.idl - fixed pw_len field in UserInfo26 - made some pipes available on TCP - added netr_DsrEnumerateDomainTrusts() to netlogon - added templates for remaining netlogon IDL calls (from ethereal) - added a unistr_noterm vs unistr error detector in ndr basic decoder - added torture test for netr_DsrEnumerateDomainTrusts() WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=937nolog=1
svn commit: samba r938 - branches/SAMBA_3_0/source/lib
Author: herb Date: 2004-05-28 17:57:18 + (Fri, 28 May 2004) New Revision: 938 Modified: branches/SAMBA_3_0/source/lib/iconv.c Log: on an error save the original errno before calling iconv to reset the conversion state WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=938nolog=1
svn commit: samba r939 - trunk/source/lib
Author: jra Date: 2004-05-28 18:28:18 + (Fri, 28 May 2004) New Revision: 939 Modified: trunk/source/lib/iconv.c Log: Patch penguin... merging Herbs change. Jeremy. WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=939nolog=1
svn commit: samba r940 - trunk/source/passdb
Author: jra Date: 2004-05-28 18:29:40 + (Fri, 28 May 2004) New Revision: 940 Modified: trunk/source/passdb/lookup_sid.c Log: Patch penguin : Merging : Fix a rather weird error that crippled my site, when we upgraded to Samba 3.0.4. If we fail a query for the members of the 'administrators' group (and we may well just have the IDL wrong), this +destroys later parts of the domain logon process. For reasons I can't understand, the client-side 'heck, what happened' bailout causes the connection to the DC to be dropped, and causes the mandetory profile not to be loaded. (This also only occours after a reboot) Return the members of 'administrators', and it all works fine. The reason we hit this is because we run winbindd (to support pam_winbind) on our DC, and the winbindd lookup in sid_to_gid was messing things up. As we don't care what type of thing this is, provided it exists in the group mapping db, we should not bother winbindd here. Andrew Bartlett WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=940nolog=1
svn commit: samba-docs r89 - in branches/SAMBA_4: entities manpages
Author: jelmer Date: 2004-05-28 18:55:06 + (Fri, 28 May 2004) New Revision: 89 Modified: branches/SAMBA_4/entities/global.entities branches/SAMBA_4/manpages/gregedit.1.xml branches/SAMBA_4/manpages/ldb.7.xml branches/SAMBA_4/manpages/ldbadd.1.xml branches/SAMBA_4/manpages/pidl.1.xml branches/SAMBA_4/manpages/regdiff.1.xml branches/SAMBA_4/manpages/regpatch.1.xml branches/SAMBA_4/manpages/regshell.1.xml branches/SAMBA_4/manpages/regtree.1.xml Log: Update author info in manpages, add more information to the pidl manpage. WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=samba-docspath=/branches/SAMBA_4rev=89nolog=1
svn commit: samba r941 - trunk/source/smbd
Author: vlendec Date: 2004-05-28 19:14:47 + (Fri, 28 May 2004) New Revision: 941 Modified: trunk/source/smbd/reply.c Log: If using DOS error codes, we need to return ERRDOS/ERRbadpath for chkpth even if only the last component failed. I'm not sure if all the other cases of NT_STATUS_OBJECT_NAME_NOT_FOUND also need to be fixed, this at least helps with 'copy test1.txt test2.txt' from DOS within a subdirectory. Yes, I do have someone who needs this :-) Jeremy, could you take a look at this? Thanks, Volker WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=941nolog=1
Re: svn commit: samba r942 - branches/SAMBA_3_0/source/smbd
On Fri, May 28, 2004 at 07:15:12PM +, [EMAIL PROTECTED] wrote: Author: vlendec Date: 2004-05-28 19:15:11 + (Fri, 28 May 2004) New Revision: 942 Modified: branches/SAMBA_3_0/source/smbd/reply.c Log: If using DOS error codes, we need to return ERRDOS/ERRbadpath for chkpth even if only the last component failed. I'm not sure if all the other cases of NT_STATUS_OBJECT_NAME_NOT_FOUND also need to be fixed, this at least helps with 'copy test1.txt test2.txt' from DOS within a subdirectory. Yes, I do have someone who needs this :-) Jeremy, could you take a look at this? Looks ok but have you also tested with Win9x ? I'm assuming when you say DOS you mean DOS 6.x ? Jeremy.
Re: svn commit: samba r942 - branches/SAMBA_3_0/source/smbd
On Fri, May 28, 2004 at 12:18:06PM -0700, Jeremy Allison wrote: On Fri, May 28, 2004 at 07:15:12PM +, [EMAIL PROTECTED] wrote: Author: vlendec Date: 2004-05-28 19:15:11 + (Fri, 28 May 2004) New Revision: 942 Modified: branches/SAMBA_3_0/source/smbd/reply.c Log: If using DOS error codes, we need to return ERRDOS/ERRbadpath for chkpth even if only the last component failed. I'm not sure if all the other cases of NT_STATUS_OBJECT_NAME_NOT_FOUND also need to be fixed, this at least helps with 'copy test1.txt test2.txt' from DOS within a subdirectory. Yes, I do have someone who needs this :-) Jeremy, could you take a look at this? Looks ok but have you also tested with Win9x ? I'm assuming when you say DOS you mean DOS 6.x ? In addition this may be a change that depends on protocol level negotiated Jeremy.
svn commit: samba-docs r90 - branches/SAMBA_4/manpages
Author: jelmer Date: 2004-05-28 19:44:58 + (Fri, 28 May 2004) New Revision: 90 Modified: branches/SAMBA_4/manpages/pidl.1.xml Log: Syntax format WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=samba-docspath=/rev=90nolog=1
svn commit: samba-docs r91 - in branches/SAMBA_4: . manpages
Author: jelmer Date: 2004-05-28 23:34:57 + (Fri, 28 May 2004) New Revision: 91 Added: branches/SAMBA_4/manpages/ldbdel.1.xml Modified: branches/SAMBA_4/TODO branches/SAMBA_4/manpages/ldbadd.1.xml Log: More Samba-4 manpages... only 10 utilities left to document :-) WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=samba-docspath=/branches/SAMBA_4rev=91nolog=1
svn commit: samba-docs r92 - in branches/SAMBA_4: . entities manpages
Author: jelmer Date: 2004-05-29 00:32:57 + (Sat, 29 May 2004) New Revision: 92 Modified: branches/SAMBA_4/TODO branches/SAMBA_4/entities/global.entities branches/SAMBA_4/manpages/gregedit.1.xml branches/SAMBA_4/manpages/regdiff.1.xml branches/SAMBA_4/manpages/regpatch.1.xml branches/SAMBA_4/manpages/regshell.1.xml branches/SAMBA_4/manpages/regtree.1.xml Log: Document available registry backends WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=samba-docspath=/branches/SAMBA_4rev=92nolog=1
