[Samba] Notification

[Spamserver]

* eManager Notification **

Recipient, Content filter has detected a sensitive e-mail.

Source mailbox: "[EMAIL PROTECTED]"
Destination mailbox(es): "[EMAIL PROTECTED]"

*** End of message ***
Received: from 208.8.92.60 by jupiter.INSIDEAI.COM (InterScan E-Mail VirusWall NT); 
Wed, 07 Jul 2004 01:49:39 -0400
Received: from lists.samba.org ([66.70.73.150]) by viruswall.ai-logix.com
  (Post.Office MTA v3.5.3 release 223 ID# 0-0U10L2S100V35)
  with ESMTP id com for <[EMAIL PROTECTED]>;
  Wed, 7 Jul 2004 01:49:39 -0400
Received: from dp.samba.org (localhost [127.0.0.1])
by lists.samba.org (Postfix) with ESMTP id 72E9716382A
for <[EMAIL PROTECTED]>; Wed,  7 Jul 2004 05:49:39 + (GMT)
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from main.gmane.org (main.gmane.org [80.91.224.249])
by lists.samba.org (Postfix) with ESMTP id 52144163841
for <[EMAIL PROTECTED]>; Wed,  7 Jul 2004 05:49:01 + (GMT)
Received: from list by main.gmane.org with local (Exim 3.35 #1 (Debian))
id 1Bi5Ii-000434-00
for <[EMAIL PROTECTED]>; Wed, 07 Jul 2004 07:49:00 +0200
Received: from c-24-19-120-131.client.comcast.net ([24.19.120.131])
by main.gmane.org with esmtp (Gmexim 0.1 (Debian))
id 1AlnuQ-0007hv-00
for <[EMAIL PROTECTED]>; Wed, 07 Jul 2004 07:49:00 +0200
Received: from jcllings by c-24-19-120-131.client.comcast.net with local
(Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00
for <[EMAIL PROTECTED]>; Wed, 07 Jul 2004 07:49:00 +0200
X-Injected-Via-Gmane: http://gmane.org/
To: [EMAIL PROTECTED]
From: "Jim C." <[EMAIL PROTECTED]>
Date: Tue, 06 Jul 2004 22:48:52 -0700
Lines: 72
Message-ID: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-Complaints-To: [EMAIL PROTECTED]
X-Gmane-NNTP-Posting-Host: c-24-19-120-131.client.comcast.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.6) Gecko/20040113
X-Accept-Language: en-us, en
In-Reply-To: <[EMAIL PROTECTED]>
X-Enigmail-Version: 0.83.4.0
X-Enigmail-Supports: pgp-inline, pgp-mime
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on dp.samba.org
X-Spam-Status: No, hits=-4.4 required=3.8 tests=BAYES_00,RCVD_IN_BLARS_RBL 
autolearn=no version=2.63
X-Spam-Level: 
Subject: [Samba] Re: ACCESS DENIED when trying to log into domain
X-BeenThere: [EMAIL PROTECTED]
X-Mailman-Version: 2.1.4
Precedence: list
List-Id: General questions regarding Samba 
List-Unsubscribe: ,

List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: ,

Sender: [EMAIL PROTECTED]
Errors-To: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Notification

[Spamserver]

* eManager Notification **

Recipient, Content filter has detected a sensitive e-mail.

Source mailbox: "[EMAIL PROTECTED]"
Destination mailbox(es): "[EMAIL PROTECTED]"

*** End of message ***
Received: from 208.8.92.60 by jupiter.INSIDEAI.COM (InterScan E-Mail VirusWall NT); 
Wed, 07 Jul 2004 01:49:31 -0400
Received: from lists.samba.org ([66.70.73.150]) by viruswall.ai-logix.com
  (Post.Office MTA v3.5.3 release 223 ID# 0-0U10L2S100V35)
  with ESMTP id com for <[EMAIL PROTECTED]>;
  Wed, 7 Jul 2004 01:49:30 -0400
Received: from dp.samba.org (localhost [127.0.0.1])
by lists.samba.org (Postfix) with ESMTP id BA6DA1638C3
for <[EMAIL PROTECTED]>; Wed,  7 Jul 2004 05:49:30 + (GMT)
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from main.gmane.org (main.gmane.org [80.91.224.249])
by lists.samba.org (Postfix) with ESMTP id 52144163841
for <[EMAIL PROTECTED]>; Wed,  7 Jul 2004 05:49:01 + (GMT)
Received: from list by main.gmane.org with local (Exim 3.35 #1 (Debian))
id 1Bi5Ii-000434-00
for <[EMAIL PROTECTED]>; Wed, 07 Jul 2004 07:49:00 +0200
Received: from c-24-19-120-131.client.comcast.net ([24.19.120.131])
by main.gmane.org with esmtp (Gmexim 0.1 (Debian))
id 1AlnuQ-0007hv-00
for <[EMAIL PROTECTED]>; Wed, 07 Jul 2004 07:49:00 +0200
Received: from jcllings by c-24-19-120-131.client.comcast.net with local
(Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00
for <[EMAIL PROTECTED]>; Wed, 07 Jul 2004 07:49:00 +0200
X-Injected-Via-Gmane: http://gmane.org/
To: [EMAIL PROTECTED]
From: "Jim C." <[EMAIL PROTECTED]>
Date: Tue, 06 Jul 2004 22:48:52 -0700
Lines: 72
Message-ID: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-Complaints-To: [EMAIL PROTECTED]
X-Gmane-NNTP-Posting-Host: c-24-19-120-131.client.comcast.net
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.6) Gecko/20040113
X-Accept-Language: en-us, en
In-Reply-To: <[EMAIL PROTECTED]>
X-Enigmail-Version: 0.83.4.0
X-Enigmail-Supports: pgp-inline, pgp-mime
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on dp.samba.org
X-Spam-Status: No, hits=-4.4 required=3.8 tests=BAYES_00,RCVD_IN_BLARS_RBL 
autolearn=no version=2.63
X-Spam-Level: 
Subject: [Samba] Re: ACCESS DENIED when trying to log into domain
X-BeenThere: [EMAIL PROTECTED]
X-Mailman-Version: 2.1.4
Precedence: list
List-Id: General questions regarding Samba 
List-Unsubscribe: ,

List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: ,

Sender: [EMAIL PROTECTED]
Errors-To: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: ACCESS DENIED when trying to log into domain

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Read this: http://www.samba.org/samba/docs/man/guide/secure.html#id2520407
Ken Miller wrote:
| Michael Lueck wrote:
|
|> Ken Miller wrote:
|>
|>>  However, when I try and connect to the domain, I get an 'Access
|>> Denied' message after entering my userid and password.
|>
|>
|>
|> What client OS? If NT/2K/XPPro have you joined it to the domain
|> successfully?
|
|
| D'Oh!  XP Pro.
| How do you join it to the domain?  If you do that by altering the
| properties of 'My Computer', then yes, I have.  If I change the domain
| to something other than SHETLAND, then I get an error about being unable
| to find the domain.  I can also watch the log files on the PDC and see
| traffic.
|
|> You need a user ID on the Samba box set up as a Domain Admin to use to
|> join these OS's to your domain.
|
|
| Ok, I'm missing something pretty fundamental here then, as I have not
| done that.
|
|> I assume you are using a smbpasswd back end, you did add the user ID
|> to that database?
|
|
| Yes, and yes.  I've also added the name of the computer trying to
| connect to the domain to both /etc/passwd and smbpasswd (as a machine).
|
|> Some of the text within my ramblings to this list on net groupmap
|> apply to the topic of creating a domain admin account. You might read
|> through the small office example URL on the Samba web site I posted in
|> that thread as well. Sounds like what you are up to is what that
|> describes.
|
|
| I'll dig it up and give it a read.  Many thanks.
|
|-klm.
|
|
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA647E57L0B7uXm9oRAlbrAJ0UB38uu06XvVgaj68cUNtS0oy9GQCfRJuX
byd24AkiW/pX2W0c1cpx5FI=
=9TQU
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: ACCESS DENIED when trying to log into domain

[Ken Miller]

Michael Lueck wrote:
Ken Miller wrote:
 However, when I try and connect to the domain, I get an 'Access 
Denied' message after entering my userid and password.

What client OS? If NT/2K/XPPro have you joined it to the domain 
successfully?
D'Oh!  XP Pro. 

How do you join it to the domain?  If you do that by altering the 
properties of 'My Computer', then yes, I have.  If I change the domain 
to something other than SHETLAND, then I get an error about being unable 
to find the domain.  I can also watch the log files on the PDC and see 
traffic.

You need a user ID on the Samba box set up as a Domain Admin to use to 
join these OS's to your domain.
Ok, I'm missing something pretty fundamental here then, as I have not 
done that.

I assume you are using a smbpasswd back end, you did add the user ID 
to that database?
Yes, and yes.  I've also added the name of the computer trying to 
connect to the domain to both /etc/passwd and smbpasswd (as a machine).

Some of the text within my ramblings to this list on net groupmap 
apply to the topic of creating a domain admin account. You might read 
through the small office example URL on the Samba web site I posted in 
that thread as well. Sounds like what you are up to is what that 
describes.
I'll dig it up and give it a read.  Many thanks.
   -klm.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Adding printers

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 6 Jul 2004, Hamish wrote:

> Hello all
> Is there a way to make printers show up on a samba server for windows 
> clients without restarting smbd and nmbd?

The 'printcap cache time' option will be in 3.0.5 to handle this.






cheers, jerry

- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"...a hundred billion castaways looking for a home." --- Sting 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFA616GIR7qMdg1EfYRAqbtAJ9THqMWcroEGydfApycq1Z7zVqrHACgiOUs
IUalBmCRbTs+G4FNvbQVtLc=
=MtzW
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: AW: [Samba] Wishlist for v4.0 Integration / Setup of samba.

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 6 Jul 2004, Arno Seidel wrote:

> my wish for 4.0 is a deeper integration of ldap. maybe in that way, that
> share configurations could be stored direct in a ldap-entry.

This is slated for 3.2





cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"...a hundred billion castaways looking for a home." --- Sting 
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFA613xIR7qMdg1EfYRAv36AKDh8U5xIS2jsOj8Ffm/Z9+GUL1FowCfSvbh
MnZwr6orTKc5Z7tLd0L2FAk=
=Nf36
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: ACCESS DENIED when trying to log into domain

[Michael Lueck]

Ken Miller wrote:
 However, when I try 
and connect to the domain, I get an 'Access Denied' message after 
entering my userid and password.
What client OS? If NT/2K/XPPro have you joined it to the domain successfully?
You need a user ID on the Samba box set up as a Domain Admin to use to join these OS's 
to your domain.
I assume you are using a smbpasswd back end, you did add the user ID to that database?
Some of the text within my ramblings to this list on net groupmap apply to the topic of creating a domain admin account. You might read through the small office example URL on the Samba web site I 
posted in that thread as well. Sounds like what you are up to is what that describes.

--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Q about net groupmap examples on samba.org

[Michael Lueck]

One more piece of data on this... Various messages were talking about ifmember.exe so I tracked it down. Thankfully it dumps out the effective group memberships for the id logged in. I find the 
following for the various groups I have created...

ntadmin
User is a member of group LDS-SMB\pianoman.
User is a member of group \Everyone.
User is a member of group BUILTIN\Users.
User is a member of group BUILTIN\Administrators.
User is a member of group NT AUTHORITY\INTERACTIVE.
User is a member of group NT AUTHORITY\Authenticated Users.
User is a member of group \LOCAL.
User is a member of group LDS-SMB\ntadmins.
ntpwrusr
User is a member of group LDS-SMB\pianoman.
User is a member of group \Everyone.
User is a member of group BUILTIN\Users.
User is a member of group NT AUTHORITY\INTERACTIVE.
User is a member of group NT AUTHORITY\Authenticated Users.
User is a member of group \LOCAL.
ntusers
User is a member of group LDS-SMB\pianoman.
User is a member of group \Everyone.
User is a member of group BUILTIN\Users.
User is a member of group NT AUTHORITY\INTERACTIVE.
User is a member of group NT AUTHORITY\Authenticated Users.
User is a member of group \LOCAL.
User is a member of group LDS-SMB\ntusers.
ntguests
User is a member of group LDS-SMB\pianoman.
User is a member of group \Everyone.
User is a member of group BUILTIN\Users.
User is a member of group NT AUTHORITY\INTERACTIVE.
User is a member of group NT AUTHORITY\Authenticated Users.
User is a member of group \LOCAL.
<><><><><>
Thus, the Win2K client is not mapping the Power User and Guests groups correctly but 
the others it is, and they were all created using the same mehtods as I outlined 
previously.
Checking the Advanced user/group GUI manager on the client, all localgroups look 
correct as in having the correct domain / global group as a member.
"net user pianoman /domain" looks correct at all levels shown above, yet for the two levels it 
just "DON'T" click!
When did Samba become Rocket Science?
--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] ACCESS DENIED when trying to log into domain

[Ken Miller]

I'm in the process of setting up a domain controller (moving from a 
workgroup configuration).  I've installed the latest version of Samba 
(3.0.5), and have configured it to work as a PDC.  However, when I try 
and connect to the domain, I get an 'Access Denied' message after 
entering my userid and password.  Here's the snip from the client system 
log:

[2004/07/06 12:01:15, 2] auth/auth.c:check_ntlm_password(305)
 check_ntlm_password:  authentication for user [miller] -> [miller] -> 
[miller] succeeded
[2004/07/06 12:01:15, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2477)
 Returning domain sid for domain SHETLAND -> 
S-1-5-21-194255544-2319376921-1693202501
[2004/07/06 12:01:15, 2] 
rpc_server/srv_samr_nt.c:access_check_samr_object(93)
 _samr_open_domain: ACCESS DENIED  (requested: 0x0211)
[2004/07/06 12:01:15, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2477)
 Returning domain sid for domain SHETLAND -> 
S-1-5-21-194255544-2319376921-1693202501
[2004/07/06 12:01:15, 2] 
rpc_server/srv_samr_nt.c:access_check_samr_function(115)
 _samr_create_user: ACCESS DENIED (granted: 0x0201;  required: 
0x0010)
[2004/07/06 12:01:15, 2] smbd/server.c:exit_server(568)
 Closing connections

As you can see, my userid and password are accepted, but something to do 
with the domain SID for SHETLAND is causing access to be denied. 

I'm really not sure what is causing this problem.  I have configured 
Samba to act as a domain controller, but that was a few years ago with 
Windows NT - things have obviously changed since then :-)

Here's my smb configuration, as returned from testparam:
Load smb config files from /usr/local/samba/lib/smb.conf
Processing section "[netlogon]"
Processing section "[profiles]"
Processing section "[homes]"
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions
# Global parameters
[global]
   workgroup = SHETLAND
   log level = 2
   log file = /var/log/samba/log.%m
   time server = Yes
   server signing = Yes
   add user script = /usr/sbin/useradd -d /dev/null -g 100 -s 
/bin/false -M %u
   logon script = logon.bat
   logon path = \\%L\profiles\%u\%m
   logon drive = H:
   logon home = \\%L\%u\.win_profile\%m
   domain logons = Yes
   os level = 65
   preferred master = Yes
   domain master = Yes

[netlogon]
   path = /usr/local/samba/lib/netlogon
   guest ok = Yes
   browseable = No
[profiles]
   path = /usr/local/samba/lib/profiles
   read only = No
   create mask = 0600
   directory mask = 0700
   browseable = No
[homes]
   read only = No
   browseable = No
I've googled, and have not found any solutions, so I'm tossing out this 
query to the list - any suggestions are certainly welcome.

Cheers!
   -klm.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Profiles

[Miles Scruggs]

I have a few weird problems with profiles on my samba PDC.  Right now I'm
just testing with two XP pro clients.  Samba is
Samba version 3.0.2a-Debian

The problems that I'm having and I believe are related are:

1.) Profiles are saved to the server, but don't migrate to different
clients.  This is very odd, I can make all sorts of changes to the profile
and I can see those changes being saved to the server.  When I log back in
those changes are loaded to the local machine, if I try to login to another
client, I see a totally separate profile.  

The kicker is that all data is being saved to the same path, but somehow it
can differenetite which client is logging in.

2.) Once the profile is created on one client, the home dir is writable to
only that client.

The home dirs and profile dir is two separate locations

/home/%u for homedirs
/home/profile/%u for profiles


Thanks for the help

Miles


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] pam_makehomedir with ADS/LDAP

[Thomas Reed]

I'm new to brand new to Samba and am having an issue that I can't 
resolve.  I have my server working in an ADS environment, with 
kerberos/ldap, my ACL's are working great and everything appears to be 
humming along.

However I can't seem to get the pam_mkhomedir.so to work.  When I add 
this mod to /etc/pam.d/samba I cannot connect to the server via a 
browser.  I get a prompt for a username/password.  If I supply a domain 
user and password I get an error returned that there's a conflict with 
an exisiting set of credentials..

Any pointers where to start.  I'll be happy to post configs if necessary.
Thanks much
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Correction

[Sean Hendricks]

Hi all,

Just a correction to my earlier message.  I'm using Samba 3.0.4, not
2.2.7a.

Sean

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Q about net groupmap examples on samba.org

[Michael Lueck]

Well, I am one to keep hacking while I wait and listen to the silence on the email 
list, so I now have the following tested...
Idea: Since domain (global) groups were showing up on the Win2K client, mMake additional domain groups since those were working, and on the clients map domain groups to local groups via a script - 
easy enough.

Implementaiton:
To initGrps.sh I added the following:
# Create some Domain Groups to administer local security
net groupmap add ntgroup=ntadmins unixgroup=ntadmins type=d
net groupmap add ntgroup=ntpwrusr unixgroup=ntpwrusr type=d
net groupmap add ntgroup=ntusers  unixgroup=ntusers  type=d
net groupmap add ntgroup=ntguests unixgroup=ntguests type=d
And on the test client I executed:
net localgroup "Administrators" "LDS-SMB\ntadmins" /add
net localgroup "Power Users""LDS-SMB\ntpwrusr" /add
net localgroup "Users"  "LDS-SMB\ntusers"  /add
net localgroup "Guests" "LDS-SMB\ntguests" /add
So, starting at the top I added pianoman to the ntadmins group in the group file, 
logged in, sure enough had *ntadmins global group, and admin rights were in effect.
Moved on to Power User testing. Moved pianoman down in the group file to ntpwrusr, loged off/on, sure enough had *ntpwrusr global group. Now, changing the local time is allowed by Power Users, as well 
as adding local printers, both were grayed out, thus I only have user permissions, not power user..

Oh, I forgot to say I had removed the link between Domain Admins and the Administrators localgroup, and the same with Domain Users and the Users localgroup, thus the above mappings is the only way I 
intended to specify local permissions on the Win2K client.

Any ideas, gottchas with these groups, etc...

Anyone doing this, or do ya'll just let your Windows users run around with local admin 
rights all the time? ;-)
--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Windows XP Home problems

[Sean Hendricks]

Hi all,

I looked through the archives to see if this problem had come up before,
but I didn't find anything similar.  But, I apologize ahead of time if
this has been dealt with already.

I'm running Samba 2.2.7a on Fedora Core 1 and I'm attempting to network
with a Windows XP Home computer.  The following is my smb.conf:

[global]
workgroup = M
netbios name = K
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
wins support = yes
[test]
comment = for testing only
path = /usr/local/test
read only = no

[homes]
browseable = yes
writable = yes
valid users = d

I can connect to the Windows XP machine from the Linux machine quite
easily, and I'm sharing a printer with it.  However, the problem comes
when I try to go the opposite direction, and attempt to connect to my
Linux machine from the Windows XP machine.  Going to My Network Places
>> View Workgroup Computers, I can see an appropriately labeled icon for
the Linux machine.  However, when I try to access it, I get the
following error message:

\\K is not accessible.  You might not have permission to use the
network resource.  Contact the administrator of the server to find out
if you have access permissions.  The network path was not found.

I have checked the username and password used on the XP machine and
ensured that that username and password are valid for the Linux machine
and that they are in smbpasswd.  But, no dice.

Any help you can give me would be greatly appreciated, as it's quite
frustrating.  Why would I be able to access the XP machine, but not the
other way around?

Sean


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Policy Violation

[Symantec_Mail_Security_for_SMTP]

The following message sent by this account has violated system policy:

From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Date: Tue, 06 Jul 2004 20:42:33 -0400
Subject: Mail Delivery (failure [EMAIL PROTECTED])


The following violations were detected:

--- Scan information follows ---

Virus Name: [EMAIL PROTECTED]
File Attachment: M2004070620423315134.mes
Attachment Status: infected

Virus Name: [EMAIL PROTECTED]
File Attachment: message.scr
Attachment Status: deleted

--- File name Block information follows ---

File Attachment: M2004070620423315134.mes/message.scr
Matching file name: *.scr




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Problems with Samba 3.0.5 - Domain Groups acting funny

[Michael Lueck]

Hi Matt-
I have a bit different script specified to add the machine, and from what I can tell 
it is working as needed. My machines end up in the passwd file, not the group file in 
/etc.
add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] 2.2.3a connection failure from XP to 10.3.4

[cwelton]

First, I apologise if this gets diverted into another group. I've tried 
three times to send to '[EMAIL PROTECTED]' but find it in 'linux.samba'

Hello from a neophyte!
Is there a diagnostic programme which can be run to determine if there
are any faults in Samba 2.2.3a?
I cannot connect from Win XP to my rev/b iMac (suddenly, maybe 'upgrade'
to 10.3.4 had some effect) and the smb crashlog (shown below) has a pile
of stuff which is incomprehensible to me.
Secondly, how does one upgrade to another version of Samba and is this
done on the iMac or Win XP, or both?
** 

Host Name:  iMac.local
Date/Time:  2004-07-03 16:31:42 +0100
OS Version: 10.3.4 (Build 7H63)
Report Version: 2
Command: smbd
Path:/usr/sbin/smbd
Version: ??? (???)
PID: 653
Thread:  0
Exception:  EXC_BAD_ACCESS (0x0001)
Codes:  KERN_INVALID_ADDRESS (0x0001) at 0x002ff000
Thread 0 Crashed:
0   <<>> 0x88a4 __memcpy + 0x104
1   smbd 0x0015ec98 talloc_memdup + 0x34
2   smbd 0x00156f5c data_blob_talloc + 0x5c
3   smbd 0x00194dd8 password_ok + 0x470
4   smbd 0x0008cd58 ntlmssp_end + 0xa98
5   smbd 0x0008c25c ntlmssp_update + 0x220
6   smbd 0x00195094 auth_ntlmssp_update + 0x28
7   smbd 0x0003940c reply_getattrE + 0x129c
8   smbd 0x00039778 reply_getattrE + 0x1608
9   smbd 0x00039a28 reply_sesssetup_and_X + 0x1a4
10  smbd 0x000570c8 respond_to_all_remaining_local_messages + 0x770
11  smbd 0x00057198 respond_to_all_remaining_local_messages + 0x840
12  smbd 0x0005752c process_smb + 0x1d0
13  smbd 0x000580d4 smbd_process + 0x178
14  smbd 0x001bdbf8 main + 0x694
15  smbd 0x5f44 start + 0x1bc
16  smbd 0x5db8 start + 0x30
etc.etc.etc.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Fw: Help with long PC names and AIX

[lars]

OK I am new to Samba.

I need a solution for a problem of long PC names and short AIX names.

I cannot get a windows 98 PC connected to an AIX Samba server, I think 
because the PC name is too long.  AIX allows only a maximum of 8 
characters in a user name.  My PC name is "ghostraider" and I cannot 
create a user named ghostraider in the AIX system.  So when I try to 
connect, I get a Samba error telling me user ghostraider not found.

How do I work around this issue?

Thanks !!!
Larry S. Singleton
[EMAIL PROTECTED]
Systems Analyst
E-Mail Administrator/Webmaster/"Guru in Training"
Thornwood Furniture Mfg., Inc.
"Remember.The best team does NOT always win"
"PLEASE WEAR YOUR SEATBELT AND BUCKLE YOUR KIDS IN EVERYTIME "
disclaimer:  Views expressed in this signature are the PROUD and sole 
responsibility of the sender and not his employer.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba & Windows session limits

[Jonathan Daub]

Hi,
I'm trying to figure out a problem related to accessing Windows shares from 
Linux samba clients (either smbfs or libsmbclient).

According to Microsoft, there is a limit to the number of open incoming 
sessions that Windows XP/2000 will permit at one time: the limit is 5 for XP 
Home, and 10 for XP Pro. The XP "net session" command shows the open 
sessions.

Microsoft says that incoming sessions originating from the same computer are 
counted as one session. I've tested this by accessing multiple shares 
simultaneously (not password protected) from another Windows PC, and indeed 
the "net session" command shows only one session active.

However, using the Linux samba libraries, it appears that each time a 
Windows share is mounted, it consumes one session, even if the shares are 
mounted from the same Linux PC. For example, after mounting two shares, "net 
session" shows the following:

C:\>net session
Computer   User nameClient Type   Opens Idle 
time
---
\\192.168.0.11 ROOT Unix  0 00:00:03
\\192.168.0.11 ROOT Unix  0 00:00:19

Perhaps the Linux samba libraries are not creating the underlying smb 
sessions in the same way that Windows is? At any rate this behavior causes 
Windows XP to run out of available sessions, after which you get an Access 
Denied error attempting to create or access additional sessions...

Any ideas on how to make the Linux samba libraries use one slot per source 
PC? Or do I have this all wrong?

Thanks,
Jon
P.S. Tested on samba 2.2 and 3.0.
_
MSN Life Events gives you the tips and tools to handle the turning points in 
your life. http://lifeevents.msn.com

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Wishlist for v4.0 Integration / Setup of samba.

[Guenther Deschner]

Hi,

On Tue, Jul 06, 2004 at 10:34:51PM +0200, Arno Seidel wrote:
> Hi there,
> 
> my wish for 4.0 is a deeper integration of ldap.
> maybe in that way, that share configurations could be stored direct
> in a ldap-entry.

samba3 HEAD has code for that already since a long time (although a feature
probably not very well tested and obviously not very well known).

Bye,
Guenther
-- 
Guenther Deschner, SerNet Service Network GmbH
Phone: +49-(0)551-37-0,  Fax: +49-(0)551-37-9
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 2.2.8.a for Solaris

[Majid Chavoshi]

Hi,

I just downloaded and installed samba2.2.8.a on a sun4u sparc box running Solaris8. 
The installation process completed w/o errors and I can now confirm that by "$pkginfo 
-l samba". I can even start and stop samba by "/etc/rc3.d/S99samba.server start" and 
see that smbd and nmbd processes are running. However, I can not find the "configure" 
file in the source directory to execute for initial configuration. For that matter I 
can not even find "source" directory.

I would greatly appreciate a reply with some instructions.

Regards,
Majid Chavoshi
Unix System Administrator

Belkin Corporation
Information Services
310-604-2098 Office
310-604-2022 Fax
310-877-1428 Mobile
[EMAIL PROTECTED]
www.belkin.com


Confidential
This e-mail and any files transmitted with it are the property
of Belkin Corporation and/or its affiliates, are confidential,
and are intended solely for the use of the individual or
entity to whom this e-mail is addressed.  If you are not one
of the named recipients or otherwise have reason to believe
that you have received this e-mail in error, please notify the
sender and delete this message immediately from your computer.
Any other use, retention, dissemination, forwarding, printing
or copying of this e-mail is strictly prohibited.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

possible patch for username map bug [was Re: [Samba] bug in parsing the 'username map' in 3.0.5pre1]

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Could you both (and anyone else having 'username map'
problems in 3.0.4 or later)  try this patch which hopefully
fixes the username map bug.
Thanks.  Let me know how it goes.

cheers, jerry
| the parsing of the 'username map' file seems to be
| broken in 3.0.5pre1 and a few earlier releases. The '!'
| at the beginning of a line is ignored. Something like
|
| !lp = lp
| !chbeyer = chbeyer
| !guest = guest
| nobody = *
|
| doesn't work anymore :-(
|
| from the man page:
|
| [ snip ]
|   If any line begins with an '!' then the processing will
|   stop after that line if a mapping was done by the line.
|   Otherwise mapping continues with every line being  pro-
|   cessed.  Using '!' is most useful when you have a wild-
|   card mapping line later in the file.
| [ snip ]

- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"...a hundred billion castaways looking for a home." --- Sting
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA6xsZIR7qMdg1EfYRAnzFAKChF7QIKOcWfVMw0x/7SfU3O1nhZQCfU/Fc
5ueDSSX0axBqQOSdVH/n7F4=
=Aka7
-END PGP SIGNATURE-
Index: smbd/sesssetup.c
===
--- smbd/sesssetup.c(revision 1369)
+++ smbd/sesssetup.c(working copy)
@@ -242,6 +242,8 @@

/* lookup the passwd struct, create a new user if necessary */
 
+   map_username( user );
+
pw = smb_getpwnam( user, real_username, True );

if (!pw) {
Index: auth/auth_util.c
===
--- auth/auth_util.c(revision 1369)
+++ auth/auth_util.c(working copy)
@@ -972,25 +972,25 @@
 {
struct passwd *pw = NULL;
char *p;
-   fstring mapped_username;
-   fstring strip_username;
+   fstring username;

/* we only save a copy of the username it has been mangled 
   by winbindd use default domain */
   
save_username[0] = '\0';
-   
-   /* save a local copy of the username and run it through the 
-  username map */
   
-   fstrcpy( mapped_username, domuser );
-   map_username( mapped_username );
+   /* don't call map_username() here since it has to be done higher 
+  up the stack so we don't call it mutliple times */
+
+   fstrcpy( username, domuser );

-   p = strchr_m( mapped_username, *lp_winbind_separator() );
+   p = strchr_m( username, *lp_winbind_separator() );

/* code for a DOMAIN\user string */

if ( p ) {
+   fstring strip_username;
+
pw = Get_Pwnam( domuser );
if ( pw ) { 
/* make sure we get the case of the username correct */
@@ -999,8 +999,10 @@
if ( !strchr_m( pw->pw_name, *lp_winbind_separator() ) ) {
char *domain;

-   domain = mapped_username;
+   /* split the domain and username into 2 strings */
*p = '\0';
+   domain = username;
+
fstr_sprintf(save_username, "%s%c%s", domain, 
*lp_winbind_separator(), pw->pw_name);
}
else
@@ -1011,26 +1013,26 @@
}
 
/* setup for lookup of just the username */
-   /* remember that p and mapped_username are overlapping memory */
+   /* remember that p and username are overlapping memory */
 
p++;
fstrcpy( strip_username, p );
-   fstrcpy( mapped_username, strip_username );
+   fstrcpy( username, strip_username );
}

/* just lookup a plain username */

-   pw = Get_Pwnam(mapped_username);
+   pw = Get_Pwnam(username);

/* Create local user if requested. */

if ( !pw && create ) {
/* Don't add a machine account. */
-   if (mapped_username[strlen(mapped_username)-1] == '$')
+   if (username[strlen(username)-1] == '$')
return NULL;
 
-   auth_add_user_script(NULL, mapped_username);
-   pw = Get_Pwnam(mapped_username);
+   auth_add_user_script(NULL, username);
+   pw = Get_Pwnam(username);
}

/* one last check for a valid passwd struct */
-- 
To unsubscribe from this list go to the follow

[Samba] Samba 2.2.9

[Tom]

Is there a reason why the Samba 2.2.9 is not available as a Binary Package for RedHat?

Pre-built packages of Samba 3.0.4 and 2.2.9 can be downloaded from the 
http://us4.samba.org/samba/ftp/Binary_Packages/ directory on samba.org. 

Thanx 
  Tom Gwilliam
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Help with long PC names and AIX

[lars]

OK I am new to Samba.

I need a solution for a problem of long PC names and short AIX names.

I cannot get a windows 98 PC connected to an AIX Samba server, I think 
because the PC name is too long.  AIX allows only a maximum of 8 
characters in a user name.  My PC name is "ghostraider" and I cannot 
create a user named ghostraider in the AIX system.  So when I try to 
connect, I get a Samba error telling me user ghostraider not found.

How do I work around this issue?

Thanks !!!
Larry S. Singleton
[EMAIL PROTECTED]
Systems Analyst
E-Mail Administrator/Webmaster/"Guru in Training"
Thornwood Furniture Mfg., Inc.
"Remember.The best team does NOT always win"
"PLEASE WEAR YOUR SEATBELT AND BUCKLE YOUR KIDS IN EVERYTIME "
disclaimer:  Views expressed in this signature are the PROUD and sole 
responsibility of the sender and not his employer.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Problems with Samba 3.0.5 - Domain Groups acting funny

[Matthew Koster]

Ok, seems to be a problem with the groups, and its not relly limited to 
3.0.5, it happened with 3.0.2a as well.

Here are the deets...

Mandrake 10
Samba 3.0.5

Add Machine Script = /usr/sbin/adduser -n -g machines -c Machine -d 
/dev/null -s /bin/false -M %u

Symtoms and background

Username: mkoster
Machine name: matt-idc
Domain Groups: Sales, Finance, Marketing, Service
Login script using ifmember statements to map drives depending on group 
membership
Domain name: INTLDATA

WHen I add my computer to the domain, it adds a samba user called matt-idc$
When I log on as mkoster from matt-idc$ I get the following groups relevant 
to the situation

\INTLDATA\mkoster
\INTLDATA\Sales
\INTLDATA\Finance
\INTLDATA\Marketing
\INTLDATA\matt-idc$

Now I get the relevance mappings, I get the Sales, Finance, and Marketing 
folders mapped, however the Service folder is not being mapped because for 
some reaon my computer name became a Group, but neither the Samba Group 
list, not the machin group list have matt-idc listed as a group.

I originaly though this was caused by uid and gid, since both Service and 
matt-idc had the number 502 (matt-idc had uid 502, Service had gid 502)  
However I changed all the special groupd to gid 1000+ and I am still getting 
this problem.  Now it it not directly pertaining to Service either, basicaly 
when I switch things around, matt-idc$ will replace one of the 4 groups, if 
I only become a member of one group, it replaces it, if I become a member of 
2 it replaces one of them.  I can;t seem to fix ti at all.  Anyone ever had 
this problem?


___

Matthew Koster
Customer Support Technician
International Datacasting Corporation
http://www.intldata.ca
613-596-4120 ext 254

This message, and the documents attached hereto, is intended only for the
addressee and may contain privileged or confidential information.  Any
unauthorized disclosure is strictly prohibited.  If you have received this
message in error, please notify us immediately so that we may correct our
internal records.  Please then delete the original message.  Thank you.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Basics of folder re-direction

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Uh... where on the server does it live?  It needs to be global.
| There is a registry setting that can be used to redirect the My
| Documents and AppData folders.
|
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\She
| ll Folders\Personal
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\She
| ll Folders\AppData
|
| Have fun!
| Derek
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA6w4P57L0B7uXm9oRAjHBAJ0bbUSzmFl+/Qumzu8DgMuAZ0fI7wCfWh/r
cpgLpjJxC/pmEy1iz7hD2zs=
=9IRA
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

AW: [Samba] Wishlist for v4.0 Integration / Setup of samba.

[Arno Seidel]

Hi there,

my wish for 4.0 is a deeper integration of ldap.
maybe in that way, that share configurations could be stored direct
in a ldap-entry.

a an example the isc dhcpd can read its configuration out of a ldap-server
and the dhcpd.conf only consits of lines like ldap port ... ldap server ...
and so on.

this would let samba and ldap feel more like ads.

regards

Arno

 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Q about net groupmap examples on samba.org

[Michael Lueck]

Considering the following page...
http://us3.samba.org/samba/docs/man/guide/small.html
First of, my compliments to John for some great examples to study.
In my mind I see three levels of security:
1) Linux - such as SSH'ing into the Linux server, Linux accounts and groups come into play here
2) Samba PDC - "Domain Admins"  "Domain Users" come into play here. Examples would be a specific domain account being logged into on a Win2K client which has joined the domain, and then domain related 
functions being run on that Win2K client.
3) Windows Security - Local Groups specifying what permissions that domain account user has on the local Win2K box while they are logged in.

So I created some groups in /etc/group as follows:
domadmin:x:2000:pianoman
domusers:x:2001:
domguest:x:2002:
ntadmins:x:2010:pianoman
ntpwrusr:x:2011:
ntusers:x:2012:
ntguests:x:2013:
Then I built my own initGrps.sh as follows:
#!/bin/bash
#
# initGrps.sh
#
# Map Windows Domain Groups to UNIX groups
net groupmap modify ntgroup="Domain Admins"  unixgroup=domadmin
net groupmap modify ntgroup="Domain Users"   unixgroup=domusers
net groupmap modify ntgroup="Domain Guests"  unixgroup=domguest
# Map Windows NT machine local groups to local UNIX groups
net groupmap modify ntgroup="Administrators" unixgroup=ntadmins
net groupmap modify ntgroup="Power Users"unixgroup=ntpwrusr
net groupmap modify ntgroup="Users"  unixgroup=ntusers
net groupmap modify ntgroup="Guests" unixgroup=ntguests
My thought on these dom* and nt* groups is they are for mapping permissions only, we won't assign local Linux security through these groups, we will use other groups such as the default groups Linux 
comes with. We will add user ID's (such as the pianoman example above) out behind the group names to manage permissions to the domain and to the Win2K client OS.

Anyway... My questions now that you have the background of the configuration:
1) Where does the net groupmap command store these mappings? The Domain Admins is working for example, but I sure don't see where the settings were stored on disk.
2) Running "net user pianoman /domain" on the Win2K client side shows the Domain Group membership, but not the local group. Since DOMAINNAME\Domain Admins is made a member of the localgroup 
administrators I have the admin permissions, but I did not get it via the ntadmins mapping I did above. Did I miss something in this example that was the key to making it work?

--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] XP Pro password changing and popups

[Michal Kurowski]

Hi,

I'm not sure how it's exactly done but XP Pro seems to block
winpopups during ctrl-alt-delete session (changing passwords,
workstation locking, etc) somehow.

I'd like to prevent people from password changing trials and 
send them a popup like this:

smb.conf:

passwd program = my_script %m

my_script:

#!/bin/sh

echo "Please log to 'some machine' to change your password" | \
smbclient -M $* 

The script works OK but not when ii is actually needed. Samba
doesn't fire it up or Windows machines block it. I wonder how to 
make it work.

Ideas ?

-- 
Michal Kurowski
<[EMAIL PROTECTED]>


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] where is smbgroupedit and differenet other questions to Samba & AD

["Markus Schröder"]

Hello List-Friends ;-)

 
O.K. I am a real beginner, so please don't hurt me ;-)
but im still working since a few days to get it running and google is my best friend.
I also bought O'Reilly 's Samba Book and a lot of other online stuff, but 
AD-Samba-winbind should be too new.
 

I use Suse 9.1 and Samba 3.0.4 as ADS Member Server.
We have an W2k Advanced Server (and a M$-Admin which don't (want) know anything about 
linux) in our Company as AD-PDC.

You find my smb.conf / ldap.conf / nsswitch.conf at the end of this Mail !


what should the linux do:
1. webserver -> login for the webpage/folder and/or webDav should be the same as the 
ActiveDirectory UserName und Password and mapped to the homedir (on linux)
2. add with an CMS (webpage) new AD-User and also delete them.
3. are new users added in the AD i need also a new home folder on the linux, so that 
they are existing for the samba home share
 
 
First i want to say, that for a linux-beginner it isn't easy to understood the 
different ways you could use,
and also which .conf file is used by which daemon (seems stupid)... use winbind the 
ldap.conf ?
 
to hard stuff, so i want to use winbind instead of LDAP. LDAP is much more difficult 
than winbind...
could test it in a few days with an standalone LDAP server/client solution.

 
What i've done:
w2k: installed ad4unix to get the new sheme there.
installed SSL Cert, ad an AD-user account with the netbiosname as Name, but for 
logon-name linux .
Then export and transfer the kerberos keytab to the linux.
i could use net ads join without any problems.
 
 
winbind works fine, testet with getent passwd and also wbinfo works.
kerberos works also, i get my tickets with kinit and klist show them.
 
i could reachead and access the shares on the linux without problems.
 
but there are different things i don't understood, some hints would be glad:
 
 
 
 
log.winbind said:
 
1.  [2004/07/06 21:02:34, 1] libsmb/ntlmssp.c:ntlmssp_update(245)
  Failed to parse NTLMSSP packet, could not extract NTLMSSP command

Not any idea for an solution ;-(
 
 

2. [2004/07/06 21:12:07, 1] nsswitch/winbindd_ads.c:ads_cached_connection(81)
  ads_connect for domain DAP failed: Invalid credentials

which username, which password use winbind for kerberos auth ? did it take it from the 
ldap.conf ?
 

 
3. [2004/07/06 21:15:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032)
  user 'root' does not exist

I thin i had to transfer the users and groups from the linux server to the 
ActiveDirectory (PDC).
i want to do it with smbgroupedit, but i didn't find it. why it is not in /usr/bin/ ?
 


 
log.smbd said:
 
1. [2004/07/06 18:59:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(174)
  Failed to verify incoming ticket!



2. [2004/07/06 20:00:13, 1] smbd/service.c:make_connection_snum(619)
  192.168.0.208 (192.168.0.208) connect to service dap-intern initially as user 
DAP+mschroeder (uid=0, gid=1) (pid 5550)

I don't understood why the uid=0 anf one hour later it show's this (PDC restartet!):

[2004/07/06 21:13:47, 1] smbd/service.c:make_connection_snum(619)
  192.168.0.208 (192.168.0.208) connect to service mschroeder initially as user 
DAP+mschroeder (uid=10005, gid=1) (pid 5981)



3. [2004/07/06 20:00:28, 0] rpc_server/srv_util.c:get_domain_user_groups(376)
  get_domain_user_groups: primary gid of user [root] is not a Domain group !
  get_domain_user_groups: You should fix it, NT doesn't like that 

Same as point 3 in the log.winbind


O.k. i hope there is somebody who could help...



Some words in german:

Ich würde mich freuen, jemanden in Deutschland (NRW) kennen zu lernen, der sich mit 
Linux auskennt, so daß man mal (!!!) drüber telefonieren kann.
Ich suche niemanden der mir meine Probleme löst, sondern nur mal Unklarheiten 
beseitigen kann. Das geht am Phone halt zügiger als mit Mails. Als PC-Win-Spezi weiß 
ich natürlich, was es heißt ständig wegen irgendwelchen Kleinigkeiten genervt zu 
werden.


if i am on the right way, 
 
 
Mit freundlichem Gruß
 
 
Markus Schröder
DAP Deutsche Assekuranz Pool GmbH
IT-Support
 
Berliner Allee 34-36
40212 Düsseldorf
 
Fon: 0211-13065-122
Fax: 0211-13065-230
Email: [EMAIL PROTECTED]
 
Privat: [EMAIL PROTECTED]
Tel: 0173-4126516




Smb.conf:
# Global parameters
[global]
workgroup = DAP
realm = DAP.LOCAL
security = ADS
auth methods = winbind
password server = 192.168.0.3
disable spoolss = Yes
show add printer wizard = No
#ldap ssl = start tls
idmap uid = 1-2
idmap gid = 1-2
winbind separator = +
use sendfile = Yes
winbind uid = 1
winbind gid = 1
winbind enum users = yes
winbind enum groups = yes
template homedir = /home/%U
#template shell = /bin/bash

[www]
comment = www-root (@DAP+Domänen-Admins)
path = /srv/www
valid users = @DAP+Domänen-Admins
admin users = @DAP+Domänen-Admins
 

[Samba] Re: Adding printers

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Well since there *is* a way to add or edit a share dynamicly there
should be. Don't know much about it myself, though.
Try this:
http://au1.samba.org/samba/devel/docs/html/Samba-HOWTO-Collection.html#id2911674
| Hello all
| Is there a way to make printers show up on a samba server for windows
| clients without restarting smbd and nmbd?
| Thanks,
| H
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA6wW457L0B7uXm9oRAvngAJ9xXibUU31GjqP0QKpQSbDFgeBOpACeNX3o
O886sueu+fuUUtcBqHqtw7Q=
=n/qx
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Wishlist for v4.0 Integration / Setup of samba.

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Wrapper scripts are a good idea. Would be really good for transitioning
over to samba from 'doze.  Could even be written as a separate package.
| I don't like the windows's net command, nor the route, nor the "tracert"
| (come on, who wrote these?), nor the ping (yes, not even the ping).  If
| somebody wants a "windows compatible" net command, write a wrap script.
| (please, read on, I just don't like the feeling of using the same thing
| on windows and linux).
|> for example make everything integrated into the net command.
| Improve the swat wizard, sounds cool.  Altough I only used it once, I
| think that any newbe would be thankful.
Another good idea for transitioners.
|> There should also be a way to configure ldap and samba to work
|> together, this manual config-shit is useless.
Well a SWAT style GUI configurator would be nice.  Probably best to work
it into something like GQ though rather than Samba, though.
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA6wMv57L0B7uXm9oRAv8zAJ9JychxyjH/j3ZsHIzK58uciPALNwCeOHXQ
9WcwOC2SXet2kpHa+U3JaS8=
=4l+q
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Basics of folder re-direction

[Derek Harkness]

There is a registry setting that can be used to redirect the My  
Documents and AppData folders.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\She 
ll Folders\Personal
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\She 
ll Folders\AppData

Have fun!
Derek
On Jul 6, 2004, at 3:30 PM, Jim C. wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I want to re-direct My Documents and Application Data on my PDC.  Where
can I learn how to do this?
Jim C.
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA6v3E57L0B7uXm9oRAh53AJoC5e+EFXBj8QZs+DRVrpWDSVMaeQCfVDSQ
qRPra0EF4X1Vvr5F57dydLA=
=a6lU
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
"When you come to the edge of all the light that you know to be true  
and are about to step off into the darkness of the unknown, faith is  
knowing that one of two things will happen; there will be something  
solid to stand on or you will be taught how to fly." ~Unknown

Productivity:  Increased procrastination should not be viewed  
negatively because inevitably where procrastination in one task exists,  
awareness and timely completion of all other tasks -big and small  
increase.
-- Christie Hahn


PGP.sig
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Basics of folder re-direction

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I want to re-direct My Documents and Application Data on my PDC.  Where
can I learn how to do this?
Jim C.
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA6v3E57L0B7uXm9oRAh53AJoC5e+EFXBj8QZs+DRVrpWDSVMaeQCfVDSQ
qRPra0EF4X1Vvr5F57dydLA=
=a6lU
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] BEWARE when compiling with CUPS support

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Richard Bonomo wrote:
| If you configure with the --enable-cups option,
| but do not have the cups-devel package installed
| (in addition to simply cups), the binaries
| eventually produced simply will not work with
| CUPS, but the configure and make process does
| not complain.
Here's the patch.  You'll need to rerun autogen.sh after
applying.


cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"...a hundred billion castaways looking for a home." --- Sting
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA6vwXIR7qMdg1EfYRApYhAKDnXq58g3zQU5CIPoZjn3EtN0WgVgCfYq6k
1XftATwE2KAChy3OXtQS1Qg=
=eZSS
-END PGP SIGNATURE-
Index: configure.in
===
--- configure.in(revision 1367)
+++ configure.in(working copy)
@@ -712,10 +712,12 @@
AC_PATH_PROG(CUPS_CONFIG, cups-config)
 
 if test "x$CUPS_CONFIG" != x; then
-AC_DEFINE(HAVE_CUPS,1,[Whether we have CUPS])
+AC_DEFINE(HAVE_CUPS,1,[Whether we have CUPS])
CFLAGS="$CFLAGS `$CUPS_CONFIG --cflags`"
LDFLAGS="$LDFLAGS `$CUPS_CONFIG --ldflags`"
PRINT_LIBS="$PRINT_LIBS `$CUPS_CONFIG --libs`"
+   elif test x$enable_cups == xyes; then
+   AC_MSG_ERROR(Cups support required but cups-config not located.  Make 
sure cups-devel related files are installed.)
 fi
 fi
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: [v3.0.4] can not set SSID

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jim C. wrote:
| The lynch pin here is the secrets.tdb file.  This is where the SID is
| stored.  The SID is generated by smbpasswd.  If you have the old one,
| you can retrive the SID from it.  If you don't, you can try and see if
| it is in /etc/samba/smbldap_conf.pm It this is also a bust you can try
| and fake by setting them all to something that looks like an SID.
You'll have to reset all of them later of course.
One thing you might try is setting the new SID and then just giving the
system the new one when it asks.
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA6vmY57L0B7uXm9oRArf7AJ9wxsMU7cWPRPE4V0hbKHKIyhsq9gCghgHd
KVG6yUeYjhYWZ4S0/PfTGlE=
=vMWs
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] get_domain_user_groups fails

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
| hi
| can i know how to fix this problem
|
| Jul  1 13:40:17 rhel smbd[23105]:   get_domain_user_groups: primary gid
| of user [firdaus2003] is not a Domain group !
| Jul  1 13:40:17 rhel smbd[23105]:   get_domain_user_groups: You should
| fix it, NT doesn't like that
Sounds like it is not getting your groups.  Is this an LDAP setup?
In the future please do not use a blank subject.  All of these wind up
in a single thread that isn't about anything specific and therefore
probably wont recieve any responses.
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA6vim57L0B7uXm9oRAnJeAJ9Y7aj1+8RyHV4jea7SDwRQB+rDPgCcCouz
L+R0btDXzlmJRKzqTRvN1I0=
=qvBF
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Netlogon

[Jerome Alet]

Hi,

On Tue, Jul 06, 2004 at 01:41:08PM -0300, James Coggan wrote:
> Is it possible to use some kind of netlogon script to add a printer?
> net use \\server\printert ??

in STARTUP.CMD :

rundll32 printui.dll,PrintUIEntry /in /n\\SERVER\QUEUENAME

On my system I've installed CUPS driver for Windows with cupsaddsmb, 
and I've login once as administrator, it seems to work fine for other
unpriviledged users now.

hth

Jerome Alet
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] NMBD shutting down problem

[Jeremy Allison]

On Mon, Jul 05, 2004 at 02:59:43PM +0200, Gérard Guével wrote:
> 
> Hi,
> 
> I use a samba 3.0.2a server on a Linux Mandrake 10.0.
> This morning, I found the nmb daemon shut down
> with the following message in the nmbd log file :
> [2004/07/03 20:39:53, 0] nmbd/nmbd.c:reload_interfaces(263)
> reload_interfaces: No subnets to listen to. Shutting down...
> 
> Over the web, I found many questions about this problem but no real answer.
> 
> Any idea or precision about this. It is a real problem to loose the shares
> and to wait for the administrator to restart smb.

Here is the fix  for this that will be in 3.0.5pre2. Sorry for the bug.

Jeremy.
Modified: branches/SAMBA_3_0/source/lib/interface.c
===
--- branches/SAMBA_3_0/source/lib/interface.c   2004-06-24 21:35:16 UTC (rev 1247)
+++ branches/SAMBA_3_0/source/lib/interface.c   2004-06-24 23:27:00 UTC (rev 1248)
@@ -94,7 +94,7 @@
 4) ip/mask
 5) bcast/mask
 /
-static void interpret_interface(const char *token)
+static void interpret_interface(char *token)
 {
struct in_addr ip, nmask;
char *p;
@@ -130,9 +130,9 @@
}
 
/* parse it into an IP address/netmasklength pair */
-   *p++ = 0;
-
+   *p = 0;
ip = *interpret_addr2(token);
+   *p++ = '/';
 
if (strlen(p) > 2) {
nmask = *interpret_addr2(p);
@@ -207,7 +207,11 @@
 
if (ptr) {
while (*ptr) {
-   interpret_interface(*ptr);
+   char *ptr_cpy = strdup(*ptr);
+   if (ptr_cpy) {
+   interpret_interface(ptr_cpy);
+   free(ptr_cpy);
+   }
ptr++;
}
}

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba and SuSE 9.1?

[Fulvio PentiuX]

Hi everyone,
I have so many problems with samba on one PC with SuSE 9.1 on.
This PC is on a local area network with another PC with SuSE 9.0 on it 
with a working samba connection, and some windows clients.
My 9.1 PC has an ASUS P4S800 motherboard and I use the integrated 
Asustek sis900 ethernet lan configured as eth0 with the sis900 module. 
Static IP and static gateway (the SuSE 9.0 machine).
I'm able to surf the net without any problem, with my eth0. I ping-ed so 
many clients on the same networks for hours... no problems.
I surfed internet (via eth0 and SuSE 9.0 as gateway) for long time, no 
problems.
But when I start a samba connection involving the SuSE 9.1 PC, from the 
9.1 machine or from the 9.0 machine or from some win machine as well, it 
works  but just after some while I have all my network dropped down... I 
can't surf, I can't ping anything. Just dead!
All my network is down, and I'm not able to see the net anymore, not 
only the samba connections!

I really need some help, or something to try, 'cos I'm completely out of 
resources.
Thank you very much in advance!

Fulvio
Some configuration files:
in /var/log/messages I have only:
server kernel: NETDEV WATCHDOG: eth0: trasmit timed out
server kernel: eth0: Trasmit timeout, status  0260
in /var/log/samba/log.nmbd I have:
[2004/07/06 11:50:14, 0] nmbd/nmbd.c:terminate(54)
Got SIGTERM: going down...
[2004/07/06 11:51:18, 0] nmbd/nmbd.c:main(664)
Netbios nameserver version 3.0.2a-SUSE started
in /var/log/samba/log.smbd I can see only:
[2004/07/06 11:51:29, 0] smbd/server.c:main(748)
smbd version 3.0.2a-SUSE started
in /etc/samba:
lmhosts smbfstab smbpasswd smbusers are quite identical to ones in the 
SuSE 9.0 machine (empty at all)

smb.conf should be very close to the SuSE 9.0 one, and there is:
# smb.conf is the main Samba configuration file. You find a full commented
# version at /usr/share/doc/packages/samba/examples/smb.conf.SuSE
# Date: 2004-04-06
[global]
workgroup = Ragnatela
os level = 2
# interfaces = 127.0.0.1 eth0
# bind interfaces only = true
printing = cups
printcap name = cups
printer admin = @ntadmin, root, administrator
map to guest = Bad User
security = user
encrypt passwords = yes
server string = Server
add machine script =
domain master = false
domain logons = no
local master = no
preferred master = auto
ldap suffix = dc=example,dc=com
passdb backend = smbpasswd
time server = Yes
unix extensions = Yes
wins support = No
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
[homes]
comment = Home Directories
valid users = %S
browseable = no
read only = No
guest ok = no
printable = no
[printers]
comment = All Printers
path = /var/tmp
printable = yes
create mask = 0600
browseable = no
guest ok = no
[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
write list = @ntadmin root
force group = ntadmin
create mask = 0664
directory mask = 0775
browseable = yes
guest ok = no
printable = no
[rete]
path = /home/server/Rete
comment = /home/server/Rete
writeable = yes
create mask = 0640
force user = server
public = yes
guest ok = yes
wide links = no
browseable = yes
printable = no
I tried to nmap from the SuSE 9.0 machine, ad I've got this:
Starting nmap 3.30 ( http://www.insecure.org/nmap/ ) at 2004-07-06 17:58 
CEST
Interesting ports on 192.168.0.101:
(The 1183 ports scanned but not shown below are in state: filtered)
Port State Service (RPC) Owner
22/tcp open ssh
23/tcp closed telnet
25/tcp closed smtp
80/tcp closed http
110/tcp closed pop-3
113/tcp closed auth
137/tcp closed netbios-ns
138/tcp closed netbios-dgm
139/tcp open netbios-ssn
143/tcp closed imap2
443/tcp closed https
873/tcp closed rsync
993/tcp closed imaps
995/tcp closed pop3s

Nmap run completed -- 1 IP address (1 host up) scanned in 57.392 seconds
(but I tried to open the 137 and the 138 ports too, via YaST)
I just can say more that the shared samba disk space is on a software 
RAID 1 partition, but without any problem used locally...

Thanks again!!!
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] 3.0.4: smbd's + nscd's = 100% CPU; load > 4

[Jeremy Allison]

On Tue, Jul 06, 2004 at 03:35:59AM -0500, Dragan Krnic wrote:

>#5  0x081298fd in get_memberuids ()
>#6  0x08129b09 in _samr_query_groupmem ()
>#7  0x081215d1 in api_samr_query_groupmem ()
>#8  0x081358b2 in api_rpcTNP ()
>#9  0x08135632 in api_pipe_request ()
>#10 0x0812fc10 in process_request_pdu ()
>#11 0x0812fdec in process_complete_pdu ()
>#12 0x08130069 in process_incoming_data ()
>#13 0x08130220 in write_to_internal_pipe ()
>#14 0x081301a4 in write_to_pipe ()
>#15 0x080883e0 in api_fd_reply ()
>#16 0x080885b9 in named_pipe ()
>#17 0x080891bc in reply_trans ()
>#18 0x080c80e0 in switch_message ()
>#19 0x080c8172 in construct_reply ()
>#20 0x080c8491 in process_smb ()
>#21 0x080c9004 in smbd_process ()
>#22 0x081f812e in main ()
>#23 0x402268ae in __libc_start_main () from /lib/libc.so.6

get_memberuids is expanding out the list of users in a group.
Can you tell me what the group membership matrix looks like
for this user ?

> Unfortunately I didn't trace the nscd processes. 
> What a shame! I'll do it next time.

Yes, that would help too I think.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba and XP problem

[Oleg]

Hello All,

We had a problem and I hope that somebody will help me.

We had some Windows XP machines that have connection to Samba 2.2.8a file server. On 
the Windows XP machines we mapped the drive to Samba. It's working almost fine, 
however sometimes when we rebooting XP machines the mapped drives does not working 
(they should reconnect automatically). But if we manually click on them (in Windows 
explorer for example) it will reconnect just fine.

Can we change/correct something on Samba/Windows side to make the connections more 
stable?

Can somebody help me to resolve this problem?

Best regards,
Oleg

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Netlogon

[Derek Harkness]

Just found a solution to that this morning.
Here is the script I've been testing, replace ServerName and PrinterName
 '  VBScript.' Guy Thomas February 2004.
 '  http://computerperformance.co.uk
 '  Purpose of script to create a local printer
 ' **
 Dim net
 Set net = CreateObject("WScript.Network")
 net.AddWindowsPrinterConnection "\\ServerName\PrinterName"
It appears to work really well.  I found this and several other useful 
thing on this site

http://www.computerperformance.co.uk/Logon/LogonScript_Printer.htm
Hope that helps,
Derek
On Jul 6, 2004, at 12:41 PM, James Coggan wrote:
Is it possible to use some kind of netlogon script to add a printer?
net use \\server\printert ??
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
The future is no place to place your better days.
-- Dave Matthews Band


PGP.sig
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Netlogon

[Paul Gienger]

Tony Whitmore wrote:
James Coggan wrote:
Is it possible to use some kind of netlogon script to add a printer?
net use \\server\printert ??
You can use con2prt from the Windows Zero Administration Kit to do 
this as part of a logon script.
You can do it with no extra software using a rundll command.  This is 
the exact line from one of my scripts:

rundll32 printui.dll,PrintUIEntry /in /n \\fgoserv\hplj /r 
\\fgoserv\hplj /m "HP LaserJet 5000 Series PS "

Use this command to get a help dialogue that will explain the options
rundll32 printui.dll,PrintUIEntry /?
--
Paul Gienger Office:701-281-1884
Applied Engineering Inc. Cell:  701-306-6254
Information Systems Consultant   Fax:   701-281-1322
URL: www.ae-solutions.commailto:[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Netlogon

[Tony Whitmore]

James Coggan wrote:
Is it possible to use some kind of netlogon script to add a printer?
net use \\server\printert ??
You can use con2prt from the Windows Zero Administration Kit to do this 
as part of a logon script.

Cheers,
Tony
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] backup to samba 3.0.2 Linux kernel 2.6.2

[Markus Benkovski]

I am running samba 3.0.2a on Linux kernel 2.6.2 on a system running 2x 120Gb
Maxtor IDE drives (no raid).  I'm trying to use Backup Exec 8.6 rev 3878 to
backup Exchange 5.5 mailboxes to the Linux server mentioned above but in the
job log I get a "An inconsistency was encountered on the storage media"

Has anyone encountered this problem before?


Markus

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Netlogon

[James Coggan]

Is it possible to use some kind of netlogon script to add a printer?
net use \\server\printert ??
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] migrating ldap server from one platform to another

[Charles Hamel]

Hi

Maybe you just forgot to modify your nss_ldap parameters on Server 2 so that
it auths with the (now local) openldap server ?

A debug log from openldap and smbd would help (loglevel=2).

Charles

On Tue, 06 Jul 2004 17:20:05 +0100, Alex Sharaz wrote
> Hi all,
> 
> Got a wee problem here that I'm looking for some help with
> :-
> 
> Two servers, Server 1  one has openldap something running on it and 
> hosts profiles and users home directories
> 
> Server 2 (newer) has all their high capacity directories on it and 
> uses the ldap server on the
> 
> Server 1 is to be phased out.
> 
> I downloaded and built openldap 2.2.11 on server 2
> generated an ldif file of the contents of server 1's ldap server
> uploaded the file into the ldap server on Server 2
> modified the ldap.conf file on server 2 to talk to its own ldap server.
> 
> User logs on to server 1 and can see all assigned drives etc on 
> original server.
> 
> Authentication failures on any attempt to access anything on server 
> 2 e.g. drive h: maps to home directory on server 1, that's fine coz 
> its the original ldap server. Drive P: maps to a directory on Server 
> 2 - this fails with an authentication failure.
> 
> i've no idea what options were used when building server 1's ldap 
> daemon, but I built the Server 2 version as follows
> 
> ./configure --enable-crypt --without-cyrus-sasl --enable-bdb=no 
> --enable-ldbm=yes
> 
> Guess it might be the --enable-crypt option that's causing the 
> problem on the import.
> 
> Anyone got an idea how to migrate data from 1 ldap database to another?
> 
> TIa
> Alex
> 
> Sent using Mulberry 3.1.2
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba


--
Open WebMail Project (http://openwebmail.org)

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Difficulties with samba and ADS

[Chris]

Hello.

I thought I had this fixed 3 times now... but it keeps coming up.  I have 2 
smbservers that are part of an ADS domain (windows 2003 server).

I have my samba servers set up, and it works great for a month or so, then it 
starts giving smbmount and smbclient a hard time.  This is very bad news 
because I rely upon smbmount heavily.

When I try to view the shares my main server, and use the correct password for 
user chris:

 # smbclient -L smbserver -U chris -W domainname
Password:
session setup failed: NT_STATUS_NO_LOGON_SERVERS

When I try to view the shares on my main server with no password for user 
chris:
# smbclient -L smbserver -U chris -W domainname
Password:
Anonymous login successful
Domain=[DOMAINNAME] OS=[Unix] Server=[Samba 3.0.4]

Sharename  Type  Comment
-    ---
print$ Disk  Windows Printer Drivers
accthp8150 Printer
genadmhp4siPrinter
DOMAINNAME_tmp   Disk
IPC$   IPC   IPC Service (SMBSERVER)
ADMIN$ IPC   IPC Service (SMBSERVER)
Anonymous login successful
Domain=[DOMAINNAME] OS=[Unix] Server=[Samba 3.0.4]

Server   Comment
----
SMBSERVER SMBSERVER
DOMAINSERVER

WorkgroupMaster
----
DOMAINNAME  DOMAINSERVER


When I try an smbmount with correct password:

# smbmount //smbserver/chris /mnt/misc -o username=chris,workgroup=domainname
Password:
23598: session setup failed: ERRDOS - 2215
SMB connection failed

When I try a smbmount with no passwd:

# smbmount //smbserver/chris /mnt/misc -o username=chris,workgroup=domainname
Password:
Anonymous login successful
23599: tree connect failed: ERRDOS - ERRnoaccess (Access denied.)
SMB connection failed

Smbmount works just fine on windows machines on the domain, and my old 2.0.7 
samba servers on the old NT domain (which I am trying to migrate from).

I have read the documents, scoured the internet and bought a book on the 
subject, and I just can't see what I am doing wrong here!  Can someone please 
give me a hand?  I am thinking it is a kerberos thing... but I cannot be 
certain.

I include my smb.conf at the bottom of this post.

Thank you very much!


Chris


smb.conf===
[global]
netbios name = SMBSERVER
socket options = TCP_NODELAY SO_RCVBUF=16384 SO_SNDBUF=16384
dns proxy = no
realm = DOMAINNAME.INT
workgroup = DOMAINNAME
netbios aliases = SMBSERVER
server string = SMBSERVER
security = ADS
wins proxy = no
map to guest = Bad User
password server = domainserver.domainname.int
name resolve order = lmhosts wins bcast
time server = Yes
os level = 0
preferred master = No
local master = No
domain master = No
wins server = 208.226.104.10
hosts allow = 127.0.0.1, 208.226.104.
oplocks = No
follow symlinks = No
printing = cups
printcap name = CUPS
load printers = yes

[print$]
comment = Windows Printer Drivers
path = /var/lib/samba/printers
browseable = yes
read only = yes
guest ok = yes
write list = @ntadmin,root,administrator

[homes]
path = %H/sam
valid users = +%U, %U
write list = +%U
force user = %U
force group = %U
read only = No
create mask = 0660
directory mask = 0770
browseable = No

[DOMAINNAME_tmp]
path = /DOMAINNAME_tmp
admin users = chrisd, kurtk, administrator
force user = %U
force group = %G
read only = No
create mask = 0666
directory mask = 0777
guest ok = Yes


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] migrating ldap server from one platform to another

[Alex Sharaz]

Hi all,
Got a wee problem here that I'm looking for some help with
:-
Two servers, Server 1  one has openldap something running on it and hosts 
profiles and users home directories

Server 2 (newer) has all their high capacity directories on it and uses the 
ldap server on the

Server 1 is to be phased out.
I downloaded and built openldap 2.2.11 on server 2
generated an ldif file of the contents of server 1's ldap server
uploaded the file into the ldap server on Server 2
modified the ldap.conf file on server 2 to talk to its own ldap server.
User logs on to server 1 and can see all assigned drives etc on original 
server.

Authentication failures on any attempt to access anything on server 2 e.g. 
drive h: maps to home directory on server 1, that's fine coz its the 
original ldap server. Drive P: maps to a directory on Server 2 - this fails 
with an authentication failure.

i've no idea what options were used when building server 1's ldap daemon, 
but I built the Server 2 version as follows

./configure --enable-crypt --without-cyrus-sasl --enable-bdb=no 
--enable-ldbm=yes

Guess it might be the --enable-crypt option that's causing the problem on 
the import.

Anyone got an idea how to migrate data from 1 ldap database to another?
TIa
Alex
Sent using Mulberry 3.1.2
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] destroyed files using shares on nfs-mounted filesystem

[Klaus Renner]

Hallo,

we are using samba V.3.0.2a  on Linux 2.4.18 
Previous Versions of samba showed the same effect.

The linux-box has mounted nfs-shares from solaris SunOS 5.8

This nfs-connection is a WAN-connection, that has limited bandwidth(some 
Megabit/second).  When connection is slow, then  it happened often that saving a file 
to this share is disturbed. Sometime it simply hangs, sometime an error "device is 
full" (Gigabytes free) or "device IO - error" occures. 
Sometimes, and this is really bad, it silently cuts some blocks out of the file. 
So, for example, my sourcefile seems OK from line 1 to the middle of line 183, then 
after the gap it continues with text from line 370 to the end.  
Another example is: The file saved has 8 kilobytes lowvalues at the beginning and then 
it continues with parts of my saved text.
The only hint I found was inconsistence with oplocks. Every spoilt file was used by 
only one person this day. So I don't belive , that oplocks are the problem. 
Beeing sure, I defined 
oplocks = No
level2 oplocks = No
for this shares, but it does not help.

Has anyone else used samba this way sharing nfs-shares to windows? 
Any problems?
I used this combination for 3 years with different  versions of samba on reliant-unix 
with nfs over WAN from a second reliant-unix box and it worked well without errors, 
but sometimes slow. 

How can I find it out, wheter the problem is in linux or in solaris or in samba or 
elsewhere??

Using the nfs-shares directly from linux  with cp seems to work, sometimes fast, 
sometimes slow.  So it seems to be the combination samba and nfs.

Perhaps statistics helps to understand, what happens.
Output from /usr/sbin/nfsstat on linux-side:
...
Client rpc stats:
calls  retransauthrefrsh
27769636929   0
...
Client nfs v3:
null   getattrsetattrlookup access readlink
0   0% 2174692 78% 19220% 211235  7% 625 0% 87  0%
read   write  create mkdir  symlinkmknod
153630  5% 36875   1% 709 0% 26  0% 0   0% 0   0%
remove rmdir  rename link   readdirreaddirplus
67290% 144 0% 350 0% 0   0% 18790% 165178  5%
fsstat fsinfo pathconf   commit
60020% 8   0% 0   0% 16872   0%

thank you for your help in advance!

Klaus

Aufnehmen, abschicken, nah sein - So einfach ist 
WEB.DE Video-Mail: http://freemail.web.de/?mc=021200

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Moving Profiles

[Mark Lidstone]

Hi Jonathan,

Thanks for that information.  Looks like I've got a bit of light reading
to do tonight.

As for the Logon Path stuff at the end, I suppose it could be expanded
(albeit messily) to having "include = smb.conf.%U" and a default "logon
path" setting in smb.conf and have separate "smb.conf.username" files
with "logon path" (and any other per-user settings) overridden?  E.g.

smb.conf
[global]
logon path = //server/profile
include = smb.conf.%U

[profile]
directory = /home/profiles/%U
browseable = no

smb.conf.testuser
[global]
logon path = 

Thanks again,

Mark Lidstone
IT and Network Support Administrator

BMT SeaTech Ltd
Grove House, Meridians Cross, 7 Ocean Way
Ocean Village, Southampton.  SO14 3TJ. UK
Tel: +44 (0)23 8063 5122 
Fax: +44 (0)23 8063 5144

E-Mail:  mailto:[EMAIL PROTECTED]
Website: www.bmtseatech.co.uk

==
Confidentiality Notice and Disclaimer: 
The contents of this e-mail and any attachments are intended only for
the
use of the e-mail addressee(s) shown. If you are not that person, or one
of those persons, you are not allowed to take any action based upon it
or
to copy it, forward, distribute or disclose the contents of it and you
should please delete it from your system. BMT SeaTech Limited does not
accept liability for any errors or omissions in the context of this
e-mail
or its attachments which arise as a result of Internet transmission, nor
accept liability for statements which are those of the author and not
clearly made on behalf of BMT SeaTech Limited.

==
  

-Original Message-
From: Jonathan Johnson [mailto:[EMAIL PROTECTED] 
Sent: 06 July 2004 16:27
To: Mark Lidstone
Cc: Hamish; [EMAIL PROTECTED]
Subject: RE: [Samba] Moving Profiles


I've done this many times. More than I care to admit. :-)

Here's an archive of a previous post that I made on the subject:
   http://lists.samba.org/archive/samba/2004-June/087799.html

You'll also want to read this afterthought:
http://lists.samba.org/archive/samba/2004-June/087800.html

My instructions are basically the same, but more detailed; one VERY
important thing you will need to do is manually edit the user's registry
hive to change paths (see the first link for instructions). Also, you'll
need to join the domain and log in with the new username BEFORE
migrating the profile, as WinNT/2K/XP will create a new profile with an
unused folder name for a new logon.

This means that if you log in for the first time as 'fred' and there is
no 'fred' profile, a profile named 'fred' will be created. If there IS a
'fred' profile, or even an empty folder named 'fred', then the new
profile will be named 'fred.DOMAIN' or 'fred.000'. If there's already a
'fred.DOMAIN' or 'fred.000' folder, then the new profile will be named
'fred.DOMAIN.000' or 'fred.001' and so on. It's messy, but NT et al is
paranoid about destroying data in this context.

As for diabling roaming profiles, see the 'Logon Path' parameter:
http://us2.samba.org/samba/docs/man/smb.conf.5.html#LOGONPATH
hint: include 'Logon Path =' (no paramaters) to disable roaming profiles
altogether.

--Jon Johnson
Sutinen Consulting, Inc.
[EMAIL PROTECTED]

On Tue, 6 Jul 2004, Mark Lidstone wrote:

> There are 7 users, but I was planning on having to visit each machine 
> separately anyway.  That's basically what I was looking at doing, but 
> you're right - doing it after joining the machine to the domain seems 
> to make more sense.
> 
> On a bit of a side note - does anyone know if it's possible to turn 
> off roaming profiles at the Samba server end?  On Windows it's an 
> option you can set on a per-user basis, which is pretty handy.  For 
> instance, we have a couple of user accounts for testing software, and 
> it's good to know that if something goes really screwy with the 
> account's registry, we only have to clean it off the computer it went 
> wrong on.
> 

> -Original Message-
> From: Hamish [mailto:[EMAIL PROTECTED]
> Sent: 06 July 2004 10:03
> To: Mark Lidstone
> 
> I guess there are not too many users to move over? (also that you are
> using win2k/xp) There is a way to move the profiles *after* they have 
> been joined to the PDC.
> Log in to the machine with the new username, this will create a new 
> profile, log out immediately. Log in as an admin account (but not the 
> "addministrator" that the users were using) Right click my computer > 
> properties > advanced > user profiles > settings. Select the old
account
> 
> and click copy to.. choose the new user folder in documents and 
> settings
> 
> (this will warn that there is alreadyy a profile there and it will be
> cleared > just ok it. The last bit to do is change permission to use
(or
> 
> something very s

[Samba] Problems with Samba x CUPS x win98 clients... (Help)

[Flávio Henrique]

Hi all!
I'm using Samba 3.0.2a with CUPS serving about 50 win98 clients...
All my printers works fine though samba/cups, but sometimes nobody can 
print in a certain netword printer.

I open my CUPS (http://localhost:631) and see the printer stoped (not 
always) and always with one of the errors messsages above:

Printer state: Idle, accepting jobs
"Unable to connect to SAMBA host, will retry in 60 seconds..."
Printer state: Idle, accepting jobs
"Unable to connect to SAMBA host, will retry in 60 seconds... ERROR:  
Connection failed with error NT_STATUS_UNSUCCESFUL"

Printer state: Idle, accepting jobs
"Unable to connect to SAMBA host, will retry in 60 seconds... ERROR:  
Connection failed with error NT_STATUS_BAD_DEVICE_TYPE"

Printer state: Idle, accepting jobs
"Unable to connect to SAMBA host, will retry in 60 seconds... ERROR:  
ERRSVR - ERRerror (Non-especific error code) opening remote file 
smbpm_0604 Without Name1"

And most of cases I need to delete the .tdb file in 
/var/cache/samba/printing to make the printer work again...

Someone can help with this? Why this happens and what can I do to avoid 
this ?

I post my smb.conf above too.
Thank you.
Flávio Henrique


# Samba config file created using SWAT
# from 127.0.0.1 (127.0.0.1)
# Date: 2004/06/25 08:22:20
# Global parameters
[global]
   dos charset = 850
   unix charset = ISO8859-1
   workgroup =  MYGROUP
   netbios name = SERVIDOR
   log level = 1
   log file = /var/log/samba/log.%m
   time server = Yes
   printcap name = cups
   logon script = logon.bat
   logon home = \\%N\%U\profile
   domain logons = Yes
   os level = 100
   preferred master = Yes
   domain master = Yes
   wins support = Yes
   ldap ssl = no
   create mask = 02777
   force create mode = 02770
   directory mask = 02750
   printing = cups
[C]
   path = /server/sistemas
   read only = No
   browseable = No
[printers]
   comment = Todas as impressoras
   path = /var/spool/samba
   guest ok = Yes
   printable = Yes
   use client driver = Yes
   browseable = No
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Moving Profiles

[Jonathan Johnson]

I've done this many times. More than I care to admit. :-)

Here's an archive of a previous post that I made on the subject:
   http://lists.samba.org/archive/samba/2004-June/087799.html

You'll also want to read this afterthought:
http://lists.samba.org/archive/samba/2004-June/087800.html

My instructions are basically the same, but more detailed; one VERY
important thing you will need to do is manually edit the user's
registry hive to change paths (see the first link for instructions).
Also, you'll need to join the domain and log in with the new username
BEFORE migrating the profile, as WinNT/2K/XP will create a new profile
with an unused folder name for a new logon.

This means that if you log in for the first time as 'fred' and there is
no 'fred' profile, a profile named 'fred' will be created. If there IS
a 'fred' profile, or even an empty folder named 'fred', then the new
profile will be named 'fred.DOMAIN' or 'fred.000'. If there's already a
'fred.DOMAIN' or 'fred.000' folder, then the new profile will be named
'fred.DOMAIN.000' or 'fred.001' and so on. It's messy, but NT et al is
paranoid about destroying data in this context.

As for diabling roaming profiles, see the 'Logon Path' parameter:
http://us2.samba.org/samba/docs/man/smb.conf.5.html#LOGONPATH
hint: include 'Logon Path =' (no paramaters) to disable roaming
profiles altogether.

--Jon Johnson
Sutinen Consulting, Inc.
[EMAIL PROTECTED]

On Tue, 6 Jul 2004, Mark Lidstone wrote:

> There are 7 users, but I was planning on having to visit each machine
> separately anyway.  That's basically what I was looking at doing, but
> you're right - doing it after joining the machine to the domain seems to
> make more sense.
> 
> On a bit of a side note - does anyone know if it's possible to turn off
> roaming profiles at the Samba server end?  On Windows it's an option you
> can set on a per-user basis, which is pretty handy.  For instance, we
> have a couple of user accounts for testing software, and it's good to
> know that if something goes really screwy with the account's registry,
> we only have to clean it off the computer it went wrong on.
> 

> -Original Message-
> From: Hamish [mailto:[EMAIL PROTECTED] 
> Sent: 06 July 2004 10:03
> To: Mark Lidstone
> 
> I guess there are not too many users to move over? (also that you are 
> using win2k/xp) There is a way to move the profiles *after* they have 
> been joined to the PDC.
> Log in to the machine with the new username, this will create a new 
> profile, log out immediately. Log in as an admin account (but not the 
> "addministrator" that the users were using) Right click my computer > 
> properties > advanced > user profiles > settings. Select the old account
> 
> and click copy to.. choose the new user folder in documents and settings
> 
> (this will warn that there is alreadyy a profile there and it will be 
> cleared > just ok it. The last bit to do is change permission to use (or
> 
> something very similar) change this to the new username (make sure you 
> put it in the format DOMAIN\user) - this will copy the profile 
> flawlessly to the new user, a bit slow if there are a number of them, 
> but less than 5 or so and its a good fix.
> Hope that helps,
> H
> 

> Mark Lidstone wrote:
> 
> >Hi everyone,
> >
> >I'm about to install a Samba PDC in a network that previously was 
> >working as a workgroup.  All the users have been logging into their 
> >local machines as "administrator" and all with the same password.
> >
> >What I would really like to do is to move their profiles with them, but
> 
> >as they are all using the same username and the like I can see this is 
> >going to cause problems.
> >
> >So far I have been thinking about doing the following:
> >
> > 1) Create a second administrator account on each machine
> > 2) Login as the second administrator and copy the
> "administrator" 
> >profile to another folder, renamed for the new user's username (e.g. 
> >"Documents and Settings\Administrator" -> "Documents and
> >Settings\DOMAIN.username")
> > 3) Change ownership/permissions on the new profile folder to
> match 
> >that of the new user
> >
> >I'm also planning on making sure that roaming profiles are disabled 
> >using the "LocalProfile" registry key that Michael Lueck recently 
> >posted about on here.  Users will have a network-home folder that will 
> >be backed up which should be plenty enough for them.
> >
> >Can anyone point out what problems this will cause?  I think there is 
> >going to be an issue with the registry, is the SID in there somewhere? 
> >How can I reset it?  Is there a better way of doing this?
> >

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] GSSAPI/KRB5 based LDAP binds

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Enrico Scholz wrote:
| Hello,
|
| I am using LDAP as passdb and idmap backends with Samba
| 3.0.3, and have a problem with the configuration of 'ldap admin
| dn'. Currently, I have to set the password for this DN
| with 'smbpasswd -w' (which works) and Samba is doing simple
| LDAP binds then.
|
| I would prefer a GSSAPI based LDAP authentication, which
| would have the following advantages:
I agree.  It's own my TODO list.  Dunno when I'll be able
to get to it though.


cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"...a hundred billion castaways looking for a home." --- Sting
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA6sIEIR7qMdg1EfYRAuKsAKDCSrKjP4TUgfAAgjhFg2MTmTPXOwCdE5Da
7trRoEStLoOnyfN8/mrZVNM=
=Xbnj
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: .tdb spoilt, tdbbackup -v does not see corrupt data

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
andreas oster wrote:
|> I am using Version 3.0.2a of samba on Linux 2.4.18 (suse with
|> self-compiled samba from tarball)
...
|> Invalid handle (OTHER:25527:25530)
|>
|
| just reread your posting, maybe this is a completely
| different problem you have, but I think it's worth to
| give 3.04 a try :)
I think its probablyh the same as bug 1147 so you recommendation
was correct.

cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"...a hundred billion castaways looking for a home." --- Sting
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA6sBNIR7qMdg1EfYRAi7aAJ90y3GG97Vebf/uKyVCPa3KWbdWwwCfRTuP
EMYmRmlREpQPgfDgJEoB54U=
=JKDA
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Windows users can create files but Linux users can not?

[Jacob Friis Larsen]

I have a Samba server running on a Fedora Core 1 Linux server, and my 
problem is that Windows users can create files but Linux users can not.

This is my smb.conf file:
[global]
workgroup = IDG_DK
server string = WebDev
log file = /var/log/samba/%m.log
max log size = 50
[jfl]
path = /var/www/websites/jfl
valid users = jfl
read only = No
Thanks,
Jacob
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: .tdb spoilt, tdbbackup -v does not see corrupt data

[andreas oster]

Klaus Renner schrieb:
Hi,
I am using Version 3.0.2a of samba on Linux 2.4.18 (suse with self-compiled samba from 
tarball)
smb.conf:
[IEPRINT]
path = /home/htmprint/tmp
printable = Yes
print command = /home/htmprint/Programme/virtual_printer.sh %s
After some weeks with some thousand printjobs generated by a program running as 
W2k-service the printer was no more available.
I checked printing from windows: it hangs notepad.
Samba-logfile says:
[2004/07/05 17:48:39, 3] smbd/ipc.c:api_fd_reply(296)
 Got API command 0x26 on pipe "spoolss" (pnum 739f)free_pipe_context: destroy
ing talloc pool of size 0
[2004/07/05 17:48:39, 3] rpc_server/srv_pipe.c:api_rpcTNP(1509)
 api_rpcTNP: rpc command: SPOOLSS_WRITEPRINTER
[2004/07/05 17:48:39, 2] rpc_server/srv_spoolss_nt.c:find_printer_index_by_hnd
(268)
 find_printer_index_by_hnd: Printer handle not found: _spoolss_writeprinter:
Invalid handle (OTHER:25527:25530)
[2004/07/05 17:48:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
 free_pipe_context: destroying talloc pool of size 24576

I tried to check with 
tdbbackup -v /usr/local/samba/var/locks/printing/IEPRINT.tdb
I got returncode 0 , but  that ~.tdb was spoilt .

Moving the file IEPRINT.tdb away makes the printer IEPRINT running.
Some weeks ago I had the same error, but could not find any reason. So I removed samba 
and installed it again. So I deleted the problem without knowing, what file is affeted.
It seems, that the error depends on the number of printjobs or on the time, the 
printer is used(about 5 weeks)
I can provide this spoilt file  IEPRINT.tdb . It is perhaps helpful in finding the bug.
I think its to big to attach it . (139K)
greetings

Verschicken Sie romantische, coole und witzige Bilder per SMS!
Jetzt neu bei WEB.DE FreeMail: http://freemail.web.de/?mc=021193
Uups,
just reread your posting, maybe this is a completely different problem 
you have, but I think it's worth to give 3.04 a try :)

My Problem was, that after some time a print spool that is hosted on the 
samba server stopped working.

best regards
Andreas
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: .tdb spoilt, tdbbackup -v does not see corrupt data

[andreas oster]

Klaus Renner schrieb:
Hi,
I am using Version 3.0.2a of samba on Linux 2.4.18 (suse with self-compiled samba from 
tarball)
smb.conf:
[IEPRINT]
path = /home/htmprint/tmp
printable = Yes
print command = /home/htmprint/Programme/virtual_printer.sh %s
After some weeks with some thousand printjobs generated by a program running as 
W2k-service the printer was no more available.
I checked printing from windows: it hangs notepad.
Samba-logfile says:
[2004/07/05 17:48:39, 3] smbd/ipc.c:api_fd_reply(296)
 Got API command 0x26 on pipe "spoolss" (pnum 739f)free_pipe_context: destroy
ing talloc pool of size 0
[2004/07/05 17:48:39, 3] rpc_server/srv_pipe.c:api_rpcTNP(1509)
 api_rpcTNP: rpc command: SPOOLSS_WRITEPRINTER
[2004/07/05 17:48:39, 2] rpc_server/srv_spoolss_nt.c:find_printer_index_by_hnd
(268)
 find_printer_index_by_hnd: Printer handle not found: _spoolss_writeprinter:
Invalid handle (OTHER:25527:25530)
[2004/07/05 17:48:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
 free_pipe_context: destroying talloc pool of size 24576

I tried to check with 
tdbbackup -v /usr/local/samba/var/locks/printing/IEPRINT.tdb
I got returncode 0 , but  that ~.tdb was spoilt .

Moving the file IEPRINT.tdb away makes the printer IEPRINT running.
Some weeks ago I had the same error, but could not find any reason. So I removed samba 
and installed it again. So I deleted the problem without knowing, what file is affeted.
It seems, that the error depends on the number of printjobs or on the time, the 
printer is used(about 5 weeks)
I can provide this spoilt file  IEPRINT.tdb . It is perhaps helpful in finding the bug.
I think its to big to attach it . (139K)
greetings

Verschicken Sie romantische, coole und witzige Bilder per SMS!
Jetzt neu bei WEB.DE FreeMail: http://freemail.web.de/?mc=021193
Dear Klaus,
I had a similar problem when a network printer suddenly was not
accessible anymore. Only deleting of some .tdb files could solve
the problem, but unfortunately not for long :(
Jerry, from the samba team recommended to upgrade to 3.04, because
there is a known bug which has been fixed in this release.
Now everything works fine :)
best regards
Andreas
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] bug in parsing the 'username map' in 3.0.5pre1

[Davide Bolcioni]

[EMAIL PROTECTED] wrote:
Hi Jerry et al,
the parsing of the 'username map' file seems to be broken in 3.0.5pre1 and
a few earlier releases. The '!' at the beginning of a line is ignored.
Something like
!lp = lp
!chbeyer = chbeyer
!guest = guest
nobody = *
You might be facing Samba Bug #1297, where the problem is that the
username map is unexpectedly consulted twice. The bug discussion also 
includes a band-aid which worked for me, e.g. having in smbusers

  !unixuser = ntuser
  !unixuser = NTDOMAIN/unixuser
helps me to map ntuser into unixuser (in my case unixuser does not
exist as domain user; I guess the point would be moot otherwise).
You might have to put the two lines directly as shown, i.e. one
after another with nothing in between.
Hope this helps,
Davide Bolcioni
--
There is no place like /home.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba/win2k ??

[Sheakoski, Corey M (PKI)]

-Original Message-
From: Robert Adkins [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 06, 2004 8:19 AM
To: Sheakoski, Corey M (PKI)
Cc: '[EMAIL PROTECTED]'
Subject: Re: [Samba] Samba/win2k ??


Sheakoski, Corey M (PKI) wrote:

>They are logging onto a domain. 
>

What/Who is/are logging onto a domain? Your users or your workstations?

-the users are logging onto the network

Is the server a Windows Running Domain Controller or do you have 
Samba setup as a Domain Controler on some form of Linux/UNIX/*BSD?

-It is a Windows Running Domain Controller

>When going to "map a network drive" I can
>bring up a list of the users on the network, so I know that the users
exist.
>  
>
When you say users, are you referring to 'Computers' or an Active 
Directory Store of User Accounts?

-There is a directory of user account names

>it's just a matter of the password, using the win logon password doesnt
work
>so I'm stuck right now. thanks for your help. 
>  
>
With those answers I am sure that someone, either myself or others, 
could point you into the right direction.

-Rob

-Thanks again
-Corey
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] .tdb spoilt, tdbbackup -v does not see corrupt data

[Klaus Renner]

Hi,

I am using Version 3.0.2a of samba on Linux 2.4.18 (suse with self-compiled samba from 
tarball)
smb.conf:
[IEPRINT]
path = /home/htmprint/tmp
printable = Yes
print command = /home/htmprint/Programme/virtual_printer.sh %s

After some weeks with some thousand printjobs generated by a program running as 
W2k-service the printer was no more available.
I checked printing from windows: it hangs notepad.
Samba-logfile says:
> [2004/07/05 17:48:39, 3] smbd/ipc.c:api_fd_reply(296)
>   Got API command 0x26 on pipe "spoolss" (pnum 739f)free_pipe_context: destroy
ing talloc pool of size 0
> [2004/07/05 17:48:39, 3] rpc_server/srv_pipe.c:api_rpcTNP(1509)
>   api_rpcTNP: rpc command: SPOOLSS_WRITEPRINTER
> [2004/07/05 17:48:39, 2] rpc_server/srv_spoolss_nt.c:find_printer_index_by_hnd
(268)
>   find_printer_index_by_hnd: Printer handle not found: _spoolss_writeprinter:
Invalid handle (OTHER:25527:25530)
> [2004/07/05 17:48:39, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
>   free_pipe_context: destroying talloc pool of size 24576

I tried to check with 
tdbbackup -v /usr/local/samba/var/locks/printing/IEPRINT.tdb
I got returncode 0 , but  that ~.tdb was spoilt .

Moving the file IEPRINT.tdb away makes the printer IEPRINT running.

Some weeks ago I had the same error, but could not find any reason. So I removed samba 
and installed it again. So I deleted the problem without knowing, what file is affeted.
It seems, that the error depends on the number of printjobs or on the time, the 
printer is used(about 5 weeks)

I can provide this spoilt file  IEPRINT.tdb . It is perhaps helpful in finding the bug.
I think its to big to attach it . (139K)

greetings

Verschicken Sie romantische, coole und witzige Bilder per SMS!
Jetzt neu bei WEB.DE FreeMail: http://freemail.web.de/?mc=021193

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] nmbd crashes

[Christian Zoffoli]

Hi to all.
Does anyone experienced crashes of the nmbd daemon?
My samba 3.0.4 (gentoo) fail one a day ...
Thanks,
Christian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba/win2k ??

[Robert Adkins]

Sheakoski, Corey M (PKI) wrote:
They are logging onto a domain. 

   What/Who is/are logging onto a domain? Your users or your workstations?
   Is the server a Windows Running Domain Controller or do you have 
Samba setup as a Domain Controler on some form of Linux/UNIX/*BSD?

When going to "map a network drive" I can
bring up a list of the users on the network, so I know that the users exist.
 

   When you say users, are you referring to 'Computers' or an Active 
Directory Store of User Accounts?

it's just a matter of the password, using the win logon password doesnt work
so I'm stuck right now. thanks for your help. 
 

   With those answers I am sure that someone, either myself or others, 
could point you into the right direction.

   -Rob
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] General setup questions?

[Derek Harkness]

I have a Samba 3.0.4 PDC and several domain member servers and for the 
most part everything appears to be working.  Do I need to manually sync 
domain group maps?

net groupmap list on a member server indicates that no maps have been 
established.

net groupmap list on the PDC has the correct mapping.
net rpc group list on member server lists only local groups
System Operators
Replicators
Guests
Power Users
Print Operators
Administrators
Account Operators
Backup Operators
Users
net rpc group list on PDC lists local and domain groups
Domain Admins
Domain Users
Domain Guests
System Operators
Replicators
Guests
Power Users
Print Operators
Administrators
Account Operators
Backup Operators
Users
The unix side does use ldap to keep group membership synced, but it 
will be some time before I get Samba in LDAP.

Thanks,
Derek
I believe the technical term is "Oops!"


PGP.sig
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] bug in parsing the 'username map' in 3.0.5pre1

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] wrote:
| Hi Jerry et al,
|
| the parsing of the 'username map' file seems to be
| broken in 3.0.5pre1 and a few earlier releases. The '!'
| at the beginning of a line is ignored. Something like
|
| !lp = lp
| !chbeyer = chbeyer
| !guest = guest
| nobody = *
|
| doesn't work anymore :-(
|
| from the man page:
|
| [ snip ]
|   If any line begins with an '!' then the processing will
|   stop after that line if a mapping was done by the line.
|   Otherwise mapping continues with every line being  pro-
|   cessed.  Using '!' is most useful when you have a wild-
|   card mapping line later in the file.
| [ snip ]
I'll look into it.  Please send me your smb,conf.

cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"...a hundred billion castaways looking for a home." --- Sting
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA6pepIR7qMdg1EfYRAu8iAKCxeSd46YB4T0YJ9GJM7cgLQfiviQCgj80I
Hqz6Ecg8CyLxW0Z9D30l0lQ=
=ulfw
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba/win2k ??

[Sheakoski, Corey M (PKI)]

They are logging onto a domain. When going to "map a network drive" I can
bring up a list of the users on the network, so I know that the users exist.
it's just a matter of the password, using the win logon password doesnt work
so I'm stuck right now. thanks for your help. 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Can't print properly through server, only direct client->printer

[Simon Hobson]

At 2:57 am +1000 6/7/04, Alex Satrapa wrote:
What happens if you change the line to:
print command = grep -v '^[0-9][0-9]* *VM\?$' ...
It would have to be '^[0-9][0-9]* *VM\?^M$', but it didn't seem to 
match that. I think the chances of having a line that starts with 
that pattern is pretty remote, especially when you consider that it 
is Postscript code (or what the MS system passes for Postscript !) 
rather than raw text.

Simon
--
Simon Hobson MA MIEE, Technology Specialist
Colony Gift Corporation Limited
Lindal in Furness, Ulverston, Cumbria, LA12 0LD
Tel 01229 461100, Fax 01229 461101
Registered in England No. 1499611
Regd. Office : 100 New Bridge Street, London, EC4V 6JA.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba/win2k ??

[Sheakoski, Corey M (PKI)]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] bug in parsing the 'username map' in 3.0.5pre1

[christoph . beyer]

Hi Jerry et al,

the parsing of the 'username map' file seems to be broken in 3.0.5pre1 and
a few earlier releases. The '!' at the beginning of a line is ignored.
Something like

!lp = lp
!chbeyer = chbeyer
!guest = guest
nobody = *

doesn't work anymore :-(

from the man page:

[ snip ]
  If any line begins with an '!' then the processing will
  stop after that line if a mapping was done by the line.
  Otherwise mapping continues with every line being  pro-
  cessed.  Using '!' is most useful when you have a wild-
  card mapping line later in the file.
[ snip ]

best regards
~christoph


-- 
/*   Christoph Beyer |   Office: Building 2b / 23 *\
 *   DESY|Phone: 040-8998-2317*
 *   - IT -  |  Fax: 040-8998-4060*
\*   22603 Hamburg   | http://www.desy.de */

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: Re: [Samba] problem with smbpasswd

[Yunus]

  thanks Shawn, your method worked.

> I just had this problem try smbpasswd -a it sounds kinda goofy but it 
> worked for me. But Im not using ldap.

 It would make sense that samba 
> wouldnt find it if your using ldap by using smbpasswd wouldnt you need 
> to use smbldap command for changing passwd.
> Just a thought

  Ya you are right, but my users are unable to join the samba server until i 
  do this. i.e. 

  smbpasswd -a testuser

thanks again 

bye

> Yunus wrote:
> 
> > hi list
> > 
> >   i have got a redhat 9 system with samba-3.0.2a installed running as a PDC.
> >   I am using the smbldap-tools-8.5 from idealx.org.
> > 
> >   now the problem is that  when i try to change change a user password using
> >   smbpasswd i get this:
> > 
> > [EMAIL PROTECTED] smb-pdc]#>/usr/local/samba/bin/smbpasswd testuser
> >   New SMB password:
> >   Retype new SMB password:
> >   Failed to find entry for user testuser.
> >   Failed to modify password entry for user testuser
> > -
> > 
> >   I have another samba server running as PDC on another machine with the
> same
> >   configuration without trouble. I don't know whats wrong with this one.
> > 
> > 
> >   below is my smb.conf file
> > 
> > 
> > [global]
> >   workgroup = SMB-NT
> >   netbios name = PDC-SMB-MAGNET
> >   server string = SAMBA-LDAP PDC Server
> >   encrypt passwords = Yes
> >   passwd program = /usr/local/sbin/smbldap-passwd -o %u
> >   passwd chat = *new*password* %n\n *new*password* %n\n *successfully*
> >   ldap passwd sync = Yes
> >   #unix password sync = Yes
> >   username map = /usr/local/samba/smbusers
> >   min passwd length = 3
> >   obey pam restrictions = No
> >   log file = /var/log/samba/%m.log
> >   log level = 0 
> >   max log size = 1
> >   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> >   mangling method = hash2
> >   Dos charset = 850
> >   Unix charset = ISO8859-1
> >   domain logons = Yes
> >   os level = 80
> >   preferred master = Yes
> >   domain master = True
> >   dns proxy = No
> >   wins support = Yes
> >   ; SAMBA-LDAP declarations
> >   ldap suffix = dc=magnet,dc=pdc
> >   ldap user suffix = ou=Users
> >   ldap group suffix = ou=Groups
> >   ldap machine suffix = ou=Computers
> >   ldap admin dn = cn=manager,dc=magnet,dc=pdc
> >   ldap idmap suffix = ou=Users
> >   ldap port = 389
> >   ldap server = 127.0.0.1
> >   ldap ssl = No
> >   ;printing = lprng
> >   ; Deactivate opportunistic locks (wised)
> >   ; opLocks = False
> >   ; encoding to french
> >   ;character set = iso8859-1
> >   ; using smbldap-tools to add machines
> >   add user script = /usr/local/sbin/smbldap-useradd -m %u
> >   #delete user script = /usr/local/sbin/smbldap-userdel "%u"
> >   add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
> >   add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
> >   #delete group script = /usr/local/sbin/smbldap-groupdel "%g"
> >   add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g"
> >   delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u"
> "%g"
> >   set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u"
> >   ; users and groups allowed to be 'Domain Admins'
> >   ;admin users = " @"Domain Admins" "
> >admin users = root
> > [homes]
> >   comment = Home Directories
> >   valid users = %S
> >   read only = No
> >   create mask = 0664
> >   directory mask = 0775
> >   browseable = No
> > [netlogon]
> >   comment = Network Logon Service
> >   path = /opt/samba/netlogon
> >   guest ok = Yes
> > [profiles]
> >   path = /opt/samba/profiles
> >   writeable = yes
> >   browseable = no
> >   create mode = 0644
> >   directory mode = 0755
> >   guest ok = yes
> > [printers]
> >   comment = All Printers
> >   path = /var/spool/samba
> >   printable = Yes
> >   browseable = No
> > [tmp]
> >   comment = Temporary file space
> >   path = /tmp
> >   read only = No
> >   guest ok = Yes
> > 
> > #[public]
> > #comment = public
> > #path = /home/
> > #guest ok = Yes
> > #read only = No
> > #directory mask = 0775
> > #create mask = 0664
> > ---
> > 
> >  now i need some help from this list.
> > 
> >   Thanks in advance.
> > 
> >   yunus
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Warning: Possible Virus Infection

[Passerelle guinevere]

Ceci est un message automatique de la passerelle antivirus Guinevere. 
 
Un message a été reçu de votre part avec pour objet  Re: Thanks! 
Le message était adressé à [EMAIL PROTECTED] 
 The message probably contains a virus. 
 
Il est possible que ce message ait été envoyé par un poste infecté  
par un virus ayant utilisé votre adresse de messagerie en tant qu'adresse 
d'expédition (usurpation d'adresse ou "spoofing"). 
CELA NE SIGNIFIE PAS FORCEMENT QUE VOTRE POSTE EST INFECTE. 
 
En cas de doute veuillez contacter le support. 
 
- 
- 
 
This is an automatic message from the Guinevere 
Internet Antivirus Scanner. 
 
A message was received from you with a subject of  Re: Thanks! 
The message was addressed to [EMAIL PROTECTED] 
 The message probably contains a virus. 
 
You will want to consult with your system administator on how 
to deal with this. 
 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] 3.0.4: smbd's + nscd's = 100% CPU; load > 4

[Hansjoerg Maurer]

Hi,
I had a similiar Problem , and a loglevel of 4 shows , that samba was 
trying to look up
a user nobody and a user Administrator, all the time.
If I killed nscd the load of the ldap server becomes high...

I added these user to my ldap backend, and the problem disappears.
Greetings
Hansjörg

Dragan Krnic schrieb:
the new 3.0.4 Samba installation seems to work fine
except that from time to time but at least a couple
of times a day one or more smbd processes start
running at 20%-40% CPU each and 6 nscd processes
then share the remaining CPU power. System 70%-80%
users the rest 20%-30%. Load rises fast to over 4.
I'm sure that each such process is just idling,
but why does it engage so much nscd processing?
As soon as I kill the excessive smbd process(es)
the situation drops to normal, i.e. load < 0,1
no perceptible CPU%.
Does anyone know what's happening?
 

What does strace say ? Can you attach with gdb to
a CPU bound process and give a backtrace ?
   

Ah backtrace, to see the steps to the black hole?
OK. Will do, sooen as I get back to office (tomorrow).
 

A pot watched never boils.
But as soon as it happens again, I'll consult
strace and gdb to see how and why it happens.
   

It does, when you stop watching.
I was away yesterday and what do I see
this morning:
  top - 09:55:35 up 6 days, 17:28,  6 users,  load average: 3.59, 3.82, 3.15
  Tasks: 182 total,   3 running, 179 sleeping,   0 stopped,   0 zombie
  Cpu(s):  21.6% user,  78.4% system,   0.0% nice,   0.0% idle
  Mem:   2060704k total,  2004324k used,56380k free,   185272k buffers 
  Swap:  2402296k total, 5236k used,  2397060k free,  1068752k cached
  
PID USER  PR NI  VIRT  RES  SHR S %CPU %MEM TIME+   Command
  12808 robf  25  0  2996 2596 2244 R 23.6  0.1   4:46.98   smbd
  12741 robf  22  0  3028 2628 2280 R 20.6  0.1   5:44.55   smbd
   2354 root  15  0   724  716  536 S 15.3  0.0 150:31.23   nscd
   2356 root  15  0   724  716  536 S 14.9  0.0 150:35.87   nscd
   2352 root  15  0   724  716  536 S  9.0  0.0 151:14.08   nscd
   2353 root  15  0   724  716  536 S  6.3  0.0 150:39.89   nscd
   2355 root  15  0   724  716  536 S  6.3  0.0 150:31.82   nscd
   2350 root  15  0   724  716  536 S  3.7  0.0 150:49.78   nscd
  
I attached both of the smbd processes to gdb and 
backtrace was always:

  #0  0x402e5328 in read () from /lib/libc.so.6
  #1  0x40343b90 in __DTOR_END__ () from /lib/libc.so.6
  #2  0x4031d58b in __nscd_getpwnam_r () from /lib/libc.so.6
  #3  0x402c130d in getpwnam_r@@GLIBC_2.1.2 () from /lib/libc.so.6
  #4  0x402c0e6f in getpwnam () from /lib/libc.so.6
  #5  0x081298fd in get_memberuids ()
  #6  0x08129b09 in _samr_query_groupmem ()
  #7  0x081215d1 in api_samr_query_groupmem ()
  #8  0x081358b2 in api_rpcTNP ()
  #9  0x08135632 in api_pipe_request ()
  #10 0x0812fc10 in process_request_pdu ()
  #11 0x0812fdec in process_complete_pdu ()
  #12 0x08130069 in process_incoming_data ()
  #13 0x08130220 in write_to_internal_pipe ()
  #14 0x081301a4 in write_to_pipe ()
  #15 0x080883e0 in api_fd_reply ()
  #16 0x080885b9 in named_pipe ()
  #17 0x080891bc in reply_trans ()
  #18 0x080c80e0 in switch_message ()
  #19 0x080c8172 in construct_reply ()
  #20 0x080c8491 in process_smb ()
  #21 0x080c9004 in smbd_process ()
  #22 0x081f812e in main ()
  #23 0x402268ae in __libc_start_main () from /lib/libc.so.6
After killing both smbd processes with -9 the top soon
stabilizes at:
  top - 10:12:01 up 6 days, 17:45,  6 users,  load average: 0.03, 0.19, 1.17
  Tasks: 175 total,   2 running, 173 sleeping,   0 stopped,   0 zombie
  Cpu(s):   0.0% user,   0.7% system,   0.0% nice,  99.3% idle
  Mem:   2060704k total,  2034272k used,26432k free,   185272k buffers
  Swap:  2402296k total, 5236k used,  2397060k free,  1100020k cached
  
PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+Command
  15182 root  15   0   956  956  700 R  0.3  0.0   0:03.67   top

Unfortunately I didn't trace the nscd processes. 
What a shame! I'll do it next time.

Nobody complained yet about reduced performance. 

It's hard to tell when this behaviour started. 
The upper bound seems to be 9 hours,
the combined run times of the nscd processe, 
some time during the night when the computers 
were totally quiet. The lower bound based on 
the run times of the smbd processes is more
like half an hour ago.

This is the fourth out of 5 times that the same user, 
"robf", is involved as the effective UID of the smbd process. 
The other one time was root's own smbd.

Jeremy, can I provide more information?
Cheers,
Dragan
 


--
_
Dr.  Hansjoerg Maurer   | LAN- & System-Manager
   |
Deutsches Zentrum   | DLR Oberpfaffenhofen
 f. Luft- und Raumfahrt e.V.   |
Institut f. Robotik |
Postfach 1116   | Muenchner Strasse 20
82230 Wessling  | 82234 Wessling
Germany

[Samba] More than one domain on one box

[Christoffer Gurell]

I have 2 logically differentiated parts of an office. I am planning to
build a domain for one of them but the other one needs file sharing
aswell (within that part, not with the other). It just needs file sharing
not a complete domain. 

Can this be acomplished with samba on one computer?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Moving Profiles

[Mark Lidstone]

Hi Hamish,

There are 7 users, but I was planning on having to visit each machine
separately anyway.  That's basically what I was looking at doing, but
you're right - doing it after joining the machine to the domain seems to
make more sense.

On a bit of a side note - does anyone know if it's possible to turn off
roaming profiles at the Samba server end?  On Windows it's an option you
can set on a per-user basis, which is pretty handy.  For instance, we
have a couple of user accounts for testing software, and it's good to
know that if something goes really screwy with the account's registry,
we only have to clean it off the computer it went wrong on.

Thanks,

Mark Lidstone
IT and Network Support Administrator

BMT SeaTech Ltd
Grove House, Meridians Cross, 7 Ocean Way
Ocean Village, Southampton.  SO14 3TJ. UK
Tel: +44 (0)23 8063 5122 
Fax: +44 (0)23 8063 5144

E-Mail:  mailto:[EMAIL PROTECTED]
Website: www.bmtseatech.co.uk

==
Confidentiality Notice and Disclaimer: 
The contents of this e-mail and any attachments are intended only for
the
use of the e-mail addressee(s) shown. If you are not that person, or one
of those persons, you are not allowed to take any action based upon it
or
to copy it, forward, distribute or disclose the contents of it and you
should please delete it from your system. BMT SeaTech Limited does not
accept liability for any errors or omissions in the context of this
e-mail
or its attachments which arise as a result of Internet transmission, nor
accept liability for statements which are those of the author and not
clearly made on behalf of BMT SeaTech Limited.

==
  

-Original Message-
From: Hamish [mailto:[EMAIL PROTECTED] 
Sent: 06 July 2004 10:03
To: Mark Lidstone
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] Moving Profiles


I guess there are not too many users to move over? (also that you are 
using win2k/xp) There is a way to move the profiles *after* they have 
been joined to the PDC.
Log in to the machine with the new username, this will create a new 
profile, log out immediately. Log in as an admin account (but not the 
"addministrator" that the users were using) Right click my computer > 
properties > advanced > user profiles > settings. Select the old account

and click copy to.. choose the new user folder in documents and settings

(this will warn that there is alreadyy a profile there and it will be 
cleared > just ok it. The last bit to do is change permission to use (or

something very similar) change this to the new username (make sure you 
put it in the format DOMAIN\user) - this will copy the profile 
flawlessly to the new user, a bit slow if there are a number of them, 
but less than 5 or so and its a good fix.
Hope that helps,
H

Mark Lidstone wrote:

>Hi everyone,
>
>I'm about to install a Samba PDC in a network that previously was 
>working as a workgroup.  All the users have been logging into their 
>local machines as "administrator" and all with the same password.
>
>What I would really like to do is to move their profiles with them, but

>as they are all using the same username and the like I can see this is 
>going to cause problems.
>
>So far I have been thinking about doing the following:
>
>   1) Create a second administrator account on each machine
>   2) Login as the second administrator and copy the
"administrator" 
>profile to another folder, renamed for the new user's username (e.g. 
>"Documents and Settings\Administrator" -> "Documents and
>Settings\DOMAIN.username")
>   3) Change ownership/permissions on the new profile folder to
match 
>that of the new user
>
>I'm also planning on making sure that roaming profiles are disabled 
>using the "LocalProfile" registry key that Michael Lueck recently 
>posted about on here.  Users will have a network-home folder that will 
>be backed up which should be plenty enough for them.
>
>Can anyone point out what problems this will cause?  I think there is 
>going to be an issue with the registry, is the SID in there somewhere? 
>How can I reset it?  Is there a better way of doing this?
>
>Many thanks,
>
>Mark Lidstone
>IT and Network Support Administrator
>
>BMT SeaTech Ltd
>Grove House, Meridians Cross, 7 Ocean Way
>Ocean Village, Southampton.  SO14 3TJ. UK
>Tel: +44 (0)23 8063 5122 
>Fax: +44 (0)23 8063 5144
>
>E-Mail:  mailto:[EMAIL PROTECTED]
>Website: www.bmtseatech.co.uk 
>===
>=
>==
>Confidentiality Notice and Disclaimer: 
>The contents of this e-mail and any attachments are intended only for
>the
>use of the e-mail addressee(s) shown. If you are not that person, or
one
>of those persons, you are not allowed to take any action based upon it
>or
>to copy it, forward, distribute or disclose the contents of it and you
>should please delete it from your system. BMT Se

[Samba] Q: browsing yes/no

[Dr.Peer-Joachim Koch]

Hi,
we have ~50 shares on our file server. In the moment only
a few are visible. Most of the shares are hidden using "browseable = No"
But if someone does not know the name of the share, it#s sometimes
not so esay to find it 
Is it possible (general flag) to show all shares which
can be used and hide all unreadable ?
--
Bye,
Peer
_
Max-Planck-Institut fuer Biogeochemie
Dr. Peer-Joachim Koch
Hans-Knöll Str.10Telefon: ++49 3641 57-6705
D-07745 Jena Telefax: ++49 3641 57-7864
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Usrmgr.exe / W2K Server

[Beschorner Daniel]

Hi!

I can use this legacy tool fine to display/modify user information on W2K
workstations.
Double click a user on W2K Server gives "procedure out of range"
Any idea?

Environment is Samba 3.0.4 / LDAP.

DB
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Moving Profiles

[Hamish]

I guess there are not too many users to move over? (also that you are 
using win2k/xp) There is a way to move the profiles *after* they have 
been joined to the PDC.
Log in to the machine with the new username, this will create a new 
profile, log out immediately. Log in as an admin account (but not the 
"addministrator" that the users were using) Right click my computer > 
properties > advanced > user profiles > settings. Select the old account 
and click copy to.. choose the new user folder in documents and settings 
(this will warn that there is alreadyy a profile there and it will be 
cleared > just ok it. The last bit to do is change permission to use (or 
something very similar) change this to the new username (make sure you 
put it in the format DOMAIN\user) - this will copy the profile 
flawlessly to the new user, a bit slow if there are a number of them, 
but less than 5 or so and its a good fix.
Hope that helps,
H

Mark Lidstone wrote:
Hi everyone,
I'm about to install a Samba PDC in a network that previously was
working as a workgroup.  All the users have been logging into their
local machines as "administrator" and all with the same password.
What I would really like to do is to move their profiles with them, but
as they are all using the same username and the like I can see this is
going to cause problems.
So far I have been thinking about doing the following:
1) Create a second administrator account on each machine
2) Login as the second administrator and copy the
"administrator" profile to another folder, renamed for the new user's
username (e.g. "Documents and Settings\Administrator" -> "Documents and
Settings\DOMAIN.username")
3) Change ownership/permissions on the new profile folder to
match that of the new user
I'm also planning on making sure that roaming profiles are disabled
using the "LocalProfile" registry key that Michael Lueck recently posted
about on here.  Users will have a network-home folder that will be
backed up which should be plenty enough for them.
Can anyone point out what problems this will cause?  I think there is
going to be an issue with the registry, is the SID in there somewhere?
How can I reset it?  Is there a better way of doing this?
Many thanks,
Mark Lidstone
IT and Network Support Administrator
BMT SeaTech Ltd
Grove House, Meridians Cross, 7 Ocean Way
Ocean Village, Southampton.  SO14 3TJ. UK
Tel: +44 (0)23 8063 5122 
Fax: +44 (0)23 8063 5144

E-Mail:  mailto:[EMAIL PROTECTED]
Website: www.bmtseatech.co.uk

==
Confidentiality Notice and Disclaimer: 
The contents of this e-mail and any attachments are intended only for
the
use of the e-mail addressee(s) shown. If you are not that person, or one
of those persons, you are not allowed to take any action based upon it
or
to copy it, forward, distribute or disclose the contents of it and you
should please delete it from your system. BMT SeaTech Limited does not
accept liability for any errors or omissions in the context of this
e-mail
or its attachments which arise as a result of Internet transmission, nor
accept liability for statements which are those of the author and not
clearly made on behalf of BMT SeaTech Limited.

==
 
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Moving Profiles

[Mark Lidstone]

Hi everyone,

I'm about to install a Samba PDC in a network that previously was
working as a workgroup.  All the users have been logging into their
local machines as "administrator" and all with the same password.

What I would really like to do is to move their profiles with them, but
as they are all using the same username and the like I can see this is
going to cause problems.

So far I have been thinking about doing the following:

1) Create a second administrator account on each machine
2) Login as the second administrator and copy the
"administrator" profile to another folder, renamed for the new user's
username (e.g. "Documents and Settings\Administrator" -> "Documents and
Settings\DOMAIN.username")
3) Change ownership/permissions on the new profile folder to
match that of the new user

I'm also planning on making sure that roaming profiles are disabled
using the "LocalProfile" registry key that Michael Lueck recently posted
about on here.  Users will have a network-home folder that will be
backed up which should be plenty enough for them.

Can anyone point out what problems this will cause?  I think there is
going to be an issue with the registry, is the SID in there somewhere?
How can I reset it?  Is there a better way of doing this?

Many thanks,

Mark Lidstone
IT and Network Support Administrator

BMT SeaTech Ltd
Grove House, Meridians Cross, 7 Ocean Way
Ocean Village, Southampton.  SO14 3TJ. UK
Tel: +44 (0)23 8063 5122 
Fax: +44 (0)23 8063 5144

E-Mail:  mailto:[EMAIL PROTECTED]
Website: www.bmtseatech.co.uk

==
Confidentiality Notice and Disclaimer: 
The contents of this e-mail and any attachments are intended only for
the
use of the e-mail addressee(s) shown. If you are not that person, or one
of those persons, you are not allowed to take any action based upon it
or
to copy it, forward, distribute or disclose the contents of it and you
should please delete it from your system. BMT SeaTech Limited does not
accept liability for any errors or omissions in the context of this
e-mail
or its attachments which arise as a result of Internet transmission, nor
accept liability for statements which are those of the author and not
clearly made on behalf of BMT SeaTech Limited.

==
  
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Adding printers

[Hamish]

Hello all
Is there a way to make printers show up on a samba server for windows 
clients without restarting smbd and nmbd?
Thanks,
H
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] 3.0.4: smbd's + nscd's = 100% CPU; load > 4

[Dragan Krnic]

 the new 3.0.4 Samba installation seems to work fine
 except that from time to time but at least a couple
 of times a day one or more smbd processes start
 running at 20%-40% CPU each and 6 nscd processes
 then share the remaining CPU power. System 70%-80%
 users the rest 20%-30%. Load rises fast to over 4.
 
 I'm sure that each such process is just idling,
 but why does it engage so much nscd processing?
 
 As soon as I kill the excessive smbd process(es)
 the situation drops to normal, i.e. load < 0,1
 no perceptible CPU%.
 
 Does anyone know what's happening?
>>> 
>>> What does strace say ? Can you attach with gdb to
>>> a CPU bound process and give a backtrace ?
>> 
>> Ah backtrace, to see the steps to the black hole?
>> OK. Will do, sooen as I get back to office (tomorrow).
>
> A pot watched never boils.
> But as soon as it happens again, I'll consult
> strace and gdb to see how and why it happens.

It does, when you stop watching.
I was away yesterday and what do I see
this morning:

   top - 09:55:35 up 6 days, 17:28,  6 users,  load average: 3.59, 3.82, 3.15
   Tasks: 182 total,   3 running, 179 sleeping,   0 stopped,   0 zombie
   Cpu(s):  21.6% user,  78.4% system,   0.0% nice,   0.0% idle
   Mem:   2060704k total,  2004324k used,56380k free,   185272k buffers 
   Swap:  2402296k total, 5236k used,  2397060k free,  1068752k cached
   
 PID USER  PR NI  VIRT  RES  SHR S %CPU %MEM TIME+   Command
   12808 robf  25  0  2996 2596 2244 R 23.6  0.1   4:46.98   smbd
   12741 robf  22  0  3028 2628 2280 R 20.6  0.1   5:44.55   smbd
2354 root  15  0   724  716  536 S 15.3  0.0 150:31.23   nscd
2356 root  15  0   724  716  536 S 14.9  0.0 150:35.87   nscd
2352 root  15  0   724  716  536 S  9.0  0.0 151:14.08   nscd
2353 root  15  0   724  716  536 S  6.3  0.0 150:39.89   nscd
2355 root  15  0   724  716  536 S  6.3  0.0 150:31.82   nscd
2350 root  15  0   724  716  536 S  3.7  0.0 150:49.78   nscd
   
I attached both of the smbd processes to gdb and 
backtrace was always:

   #0  0x402e5328 in read () from /lib/libc.so.6
   #1  0x40343b90 in __DTOR_END__ () from /lib/libc.so.6
   #2  0x4031d58b in __nscd_getpwnam_r () from /lib/libc.so.6
   #3  0x402c130d in getpwnam_r@@GLIBC_2.1.2 () from /lib/libc.so.6
   #4  0x402c0e6f in getpwnam () from /lib/libc.so.6
   #5  0x081298fd in get_memberuids ()
   #6  0x08129b09 in _samr_query_groupmem ()
   #7  0x081215d1 in api_samr_query_groupmem ()
   #8  0x081358b2 in api_rpcTNP ()
   #9  0x08135632 in api_pipe_request ()
   #10 0x0812fc10 in process_request_pdu ()
   #11 0x0812fdec in process_complete_pdu ()
   #12 0x08130069 in process_incoming_data ()
   #13 0x08130220 in write_to_internal_pipe ()
   #14 0x081301a4 in write_to_pipe ()
   #15 0x080883e0 in api_fd_reply ()
   #16 0x080885b9 in named_pipe ()
   #17 0x080891bc in reply_trans ()
   #18 0x080c80e0 in switch_message ()
   #19 0x080c8172 in construct_reply ()
   #20 0x080c8491 in process_smb ()
   #21 0x080c9004 in smbd_process ()
   #22 0x081f812e in main ()
   #23 0x402268ae in __libc_start_main () from /lib/libc.so.6

After killing both smbd processes with -9 the top soon
stabilizes at:

   top - 10:12:01 up 6 days, 17:45,  6 users,  load average: 0.03, 0.19, 1.17
   Tasks: 175 total,   2 running, 173 sleeping,   0 stopped,   0 zombie
   Cpu(s):   0.0% user,   0.7% system,   0.0% nice,  99.3% idle
   Mem:   2060704k total,  2034272k used,26432k free,   185272k buffers
   Swap:  2402296k total, 5236k used,  2397060k free,  1100020k cached
   
 PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+Command
   15182 root  15   0   956  956  700 R  0.3  0.0   0:03.67   top

Unfortunately I didn't trace the nscd processes. 
What a shame! I'll do it next time.

Nobody complained yet about reduced performance. 

It's hard to tell when this behaviour started. 
The upper bound seems to be 9 hours,
the combined run times of the nscd processe, 
some time during the night when the computers 
were totally quiet. The lower bound based on 
the run times of the smbd processes is more
like half an hour ago.

This is the fourth out of 5 times that the same user, 
"robf", is involved as the effective UID of the smbd process. 
The other one time was root's own smbd.

Jeremy, can I provide more information?

Cheers,
Dragan
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba