Re: [Samba] Re: UID and GID's
Le mercredi 8 Septembre 2004 22:37, Tom a écrit : > ok, so how do I do that? > > Do I take out: > idmap uid = 16777216-33554431 > idmap gid = 16777216-33554431 > and add: > ldap idmap suffix = ou=Idmap,dc=samba,dc=org No you must keep the uid/gid ranges. you must add some entries for ldap too, and create an adapted ldap server. the relevant section in my smb.conf is: idmap backend = ldap:ldap://the.ldap.server idmap uid = 1-2 idmap gid = 1-2 ldap suffix = dc=domain,dc=local ldap idmap suffix = ou=Idmap ldap admin dn = cn=admin,dc=domain,dc=local Emmanuel -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Home directory is not acessible
Good day Sir. I had setup a network in which user1,user2,and user3 are users of group users. I have configured the smb.file as follows # Global parameters [global] workgroup = PRANAN netbios name = SANTOSH security = user [homes] comment = SHARE valid users = %S read only = No browseable = yes [public] comment = data path = /export force user = mary force group = users guest ok = Yes My problem is whenever I logon as user1,user2,user3, I only have acess to public, but users home directory is challenged for authentication again,and it fails every time. Is there any missing in configuration. Please help me. __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Users are home directories are not acessible
Good day Sir. I had setup a network in which user1,user2,and user3 are users of group users. I have configured the smb.file as follows # Global parameters [global] workgroup = PRANAN netbios name = SANTOSH security = user [homes] comment = SHARE valid users = %S read only = No browseable = yes [public] comment = data path = /export force user = mary force group = users guest ok = Yes My problem is whenever I logon as user1,user2,user3, I only have acess to public, but users home directory is challenged for authentication again,and it fails every time. Is there any missing in configuration. Please help me. __ Do you Yahoo!? Yahoo! Mail - 50x more storage than other providers! http://promotions.yahoo.com/new_mail -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Query on Authentication with ADS
Hi, I am using Samba 3.0.5 version on Debian. Here is my requirement. User authentication should happen from my win2k ADS server. I configured as per help but I am not successful during authentication. I am able to get wbinfo -u , wbinfo -g & wbinfo -t commands successfully. Here is my configuration. [global] workgroup = SOLUTIAINVENT server string = %L security = DOMAIN obey pam restrictions = Yes password server = prasaddr passdb backend = tdbsam, guest passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n . log level = 4 syslog = 0 log file = /var/log/samba/log.%m max log size = 1000 name resolve order = bcast lmhosts host wins hostname lookups = Yes dns proxy = No panic action = /usr/share/samba/panic-action %d idmap uid = 15000-2 idmap gid = 15000-2 template shell = /bin/bash winbind cache time = 5 invalid users = root [homes] comment = Home Directories read only = No create mask = 0700 directory mask = 0700 browseable = No Error Mesage: push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/09/09 11:36:34, 3] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/09/09 11:36:34, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/09/09 11:36:34, 4] auth/pampass.c:smb_pam_start(459) smb_pam_start: PAM: Init user: SOLUTIAINVENT\Administrator [2004/09/09 11:36:34, 1] lib/util_sock.c:get_peer_name(937) Gethostbyaddr failed for 192.168.2.221 [2004/09/09 11:36:34, 4] auth/pampass.c:smb_pam_start(476) smb_pam_start: PAM: setting rhost to: 192.168.2.221 [2004/09/09 11:36:34, 4] auth/pampass.c:smb_pam_start(485) smb_pam_start: PAM: setting tty [2004/09/09 11:36:34, 4] auth/pampass.c:smb_pam_start(493) smb_pam_start: PAM: Init passed for user: SOLUTIAINVENT\Administrator [2004/09/09 11:36:34, 4] auth/pampass.c:smb_pam_account(551) smb_pam_account: PAM: Account Management for User: SOLUTIAINVENT\Administrator [2004/09/09 11:36:34, 0] auth/pampass.c:smb_pam_account(573) smb_pam_account: PAM: UNKNOWN PAM ERROR (9) during Account Management for User: SOLUTIAINVENT\Administrator [2004/09/09 11:36:34, 2] auth/pampass.c:smb_pam_error_handler(73) smb_pam_error_handler: PAM: Account Check Failed : Authentication service cannot retrieve authentication info. [2004/09/09 11:36:34, 0] auth/pampass.c:smb_pam_accountcheck(781) smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User SOLUTIAINVENT\Administrator! [2004/09/09 11:36:34, 4] auth/pampass.c:smb_pam_end(440) smb_pam_end: PAM: PAM_END OK. [2004/09/09 11:36:34, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/09/09 11:36:34, 3] auth/auth.c:check_ntlm_password(295) check_ntlm_password: PAM Account for user [SOLUTIAINVENT\Administrator] FAILED with error NT_STATUS_LOGON_FAILURE [2004/09/09 11:36:34, 2] auth/auth.c:check_ntlm_password(312) check_ntlm_password: Authentication for user [Administrator] -> [Administrator] FAILED with error NT_STATUS_LOGON_FAILURE [2004/09/09 11:36:34, 3] smbd/process.c:timeout_processing(1104) timeout_processing: End of file from client (client has disconnected). [2004/09/09 11:36:34, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/09/09 11:36:34, 2] smbd/server.c:exit_server(568) Any help is highly appreciated. -- Venkat +65 9855 1209 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Lam Research Messaging Security Notification
Hello, I have got the mails recently that my PC has been infected by virus. But I scan my PC every time, there is no any problem. I have found the article form the web. Can you tell me what this is? Thanks for your help. Best regards, Vito Subject: Lam Research Messaging Security Notification Sender Note - Inbound Virus Found Attention: Lam Research detected a virus in a message you recently sent to our location. The infected message was cleaned and will be delivered to the recipients at this organization. Please run an antivirus program immediately to scan your desktop for known viruses. After you have ensured that your desktop is virus-free, you can resend the message. If you need assistance, please contact your mail administrator. Virus information on this infected message follows: Virus Scanner found the W32/[EMAIL PROTECTED] virus in the attached file: mydate_number_phone.zip -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] General Question
I am pretty new to LDAP, and have attempted to install and configure LDAP, but I am a bit confused as to if the samba server and LDAP server be on 2 different server or on the same server?. Mark -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Host bases protection
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wayne Rasmussen wrote: | In the hosts.allow entry for samba 3+, is there still | a limit of localhost + 2 private networks? If so, Are | there any plans to extend this? Otherwise, | what is the current limit? | | Currently I have a situation where 10+ ranges are needed | so if 2 is the limit we are stuck. There was a 1024 character limit in Samba 2.2. This has been removed in Samba 3.0 cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song"--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBP7CGIR7qMdg1EfYRAvo4AJ9MYzCcJuDCnPCu9Oj26NfjMRArUwCfXLJ0 ANVoIooJc1xVAuyP2aPBKpY= =48MH -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: UPDATE Where are the ADOBE PS Drivers?
Sean E. Millichamp wrote: The new cupsaddsmb apparently is designed to modify these "bad" PPDs during the installation so they generate Postscript output that is acceptable to CUPS. So what you are saying is that if the vendor has "bad" PPD files, and you upload them via the APW method, then it will not print correctly? Maybe I know why I use Samba / CUPS for raw spooling and use the vendor print drivers (HP PCL6 for example) -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] UPDATE Where are the ADOBE PS Drivers?
On Wed, 2004-09-08 at 19:53, Chris McKeever wrote: > Sean - thanks for the information, that clears up a ton of confusion - > so the new cupsaddsmb takes into account the new psotscript files - > good to know... I had originally tried to install the new drivers manually using the procedure in the Samba How-to called (from memory) "Manually installing printer drivers using rpcclient". That was not sufficient because the manufacturer-supplied (HP) PPDs that I was using generated not entirely legal Postscript that resulted in uninterpreted Postscript being printed as CUPS mis-typed it. The new cupsaddsmb apparently is designed to modify these "bad" PPDs during the installation so they generate Postscript output that is acceptable to CUPS. > if you dont mind, would it be possible to email me the man page > output? I would like to read it, and no box I have is running > 1.1.21rc* I don't have it installed anywhere either. I just downloaded and untarred the 1.1.21rc2 source and found it in there. So as to not flood the samba mailing list I will send it attached in a separate email and send it directly to you. > thanks for the post! Not a problem. Glad I could help. Best, Sean signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Hot to configure Samba 3 as PDC and BDC for a Windows network
On Wednesday 08 September 2004 18:12, Geoff Scott wrote: Geoff, Thanks for the PR. I enjoyed it! :) PS: I also like eating my meals, but must point out that I did not write Samba-3 by Example with the expectation that I might eat gourmet meals. :) - John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 OpenLDAP by Example, ISBN: 0131488732 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Hot to configure Samba 3 as PDC and BDC for a Windows network
> -Original Message- > From: Charlie [mailto:[EMAIL PROTECTED] > > I hoping someone out there might be able to tell my how to configure and > Samba > box to be a PDC and BDC for a windows network? I'd like to use the LDAP > backend, but and too new to the Unix world to understand how this is > accomplished. Any help would be greatly appreciated. > There is nothing in the samba world relating to PDC and BDC functionality that is point and click. You will need to go the hard yards and study thoroughly how *nix works. If you really want to follow through on this then the path that I would recommend is: Go to www.lpi.org and study the LPIC-1 certification material listed. This will give you the relevant knowledge to enable you to get out of common *nix problems. Some of the free course material out there that is good is written by Daniel Robbins who is the Chief Architect of Gentoo Linux. You can find it at ibm.com/developerWorks John Terpstra has written the samba 3 by example book which can be found on the docs section of the samba web page. Or can be purchased in book form, I'm sure John would appreciate you purchasing the book as it means he gets fed. ;-) That book is excellent: http://www.samba.org/samba/docs/man/Samba-Guide/ Read chapter 6 in particular: Making users happy It's faster of course if you go to your relevant mirror. It doesn't help you understand basic LDAP or DNS though, it just helps you get up and running. So as a nice little primer I would recommend reading the relevant sections in this Suse PDF: http://www.novell.com/documentation/suse91/pdfdoc/adm91-screen/adm91-screen. pdf And also after that the LDAP docs at: http://www.openldap.org/doc/ Treat Linux and samba like a giant Salami. It looks horribly greasy and disgusting from the outside if you attempt to eat it in one hit, but if you slice it up wafer thin you'll find that each little slice is delicious! ;-) >From one relative newbie to an even greener one, Geoff. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Password Problems (Alt-Characters)
On Thu, 2004-09-09 at 06:41, Stuart Highlander wrote: > Good Afternoon All: > > Here is the setup: > A RedHat 7.2 Samba 2.2.7 Server upgraded to Fedora Core 1 Samba 3.0.6-2.FC1. > The server is acting as the PDC. No Windows servers are providing > authentication. > Windows 2000 clients. > testparm -v | grep "unix charset" results in UTF-8. > locale charmap results in ISO-8859-1. > using smbpasswd. > > > Before upgrading the server, I was able to authenticate users to the domain > on the Win2k boxes with alt-characters (alt-0162=Â) in their passwords. > Since upgrading the server, users who had these type of characters in their > passwords with passwords that have not changed, are able to authenticate, > but changing a user's password to a new password that contains these > characters results in not being able to authenticate. If you are setting the password from the Linux side, then I suggest that you fix your locale to be UTF8, as is the default in Fedora. Having a different 'display charset' (based on your localle) from your unix charset is not something that I personally recommend. Likewise, your terminal should expect to be inputing utf8 sequences. (I am very much a UTF8-all-the-way man, because everything else seems to lead to insanity). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Authentication Developer, Samba Teamhttp://samba.org Student Network Administrator, Hawker College [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] UPDATE Where are the ADOBE PS Drivers?
On Wed, 08 Sep 2004 19:11:16 -0400, Sean E. Millichamp <[EMAIL PROTECTED]> wrote: > > Apparently the new recommended way of setting up printing according to > CUPS is to use the Windows 2000 Postscript driver from Microsoft (who, > in turn, apparently obtained it from Adobe). Apparently, the NT 4 > driver that the old CUPS driver for Windows were based on were too > buggy. The V1.06 Adobe driver you referred to seems to have the new PS > driver files that are recommended (ps5ui.dll, pscript5.dll, pscript.hlp, > pscript.ntf). However, don't think you can just install those manually, > you really need to use the cupsaddsmb program as it does other things > with the PPD. > > So, the cupsaddsmb script in CUPS 1.1.21rc2 handles the files properly > for the new recommended way of doing things. The files needed are > listed in the accompanying cupsaddsmb manpage. > Sean - thanks for the information, that clears up a ton of confusion - so the new cupsaddsmb takes into account the new psotscript files - good to know... if you dont mind, would it be possible to email me the man page output? I would like to read it, and no box I have is running 1.1.21rc* thanks for the post! > > > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smb.conf syntax
[EMAIL PROTECTED] wrote: Greetings, When a new file is created it's permissions need to be RWX for all users, as this a lock file is created, edited and deleted after each session... First User on App Creates the File, all users are editing, and the last one off deletes... (Paradox Database) Is this config correct for this scenario? [specworks] browseable = yes comment = SpecWorks Data path = /home/specworks writeable = yes valid users = user1 user2 user3 user4 security mask = 0777 force security mode = 0 directory security mask = 0777 force directory security mode = 0 Do I need a Force User or anything else to accomplish this?? Unfortunately I think the answer is yes. I have read that ACL's will alleviate this in many ways. However, I am just getting ACLs setup, and cannot advise at this point. Users are all members of SPECWORKS group... TIA -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.6 Problems w/AD and Kerberos
I had some of the symptoms described in the thread at: http://marc.theaimsgroup.com/?l=samba&m=109467105202571&w=2 which appear to have been solved by changing the value of the "valid users" parameter from '@Domain Users' to @"Domain Users". It appears that samba 3.0.6 got very picky about how the "valid users" parameter value is defined. In my Fedora Core setup (samba 3.0.3 from FC2), I originally had >valid users = '+Domain Users' which worked with 3.0.3 (and 3.0.4 on my Redhat 8.0 boxes). Upgrading to 3.0.6, this stopped working. It worked when I changed it to valid users = @"Domain Users". However, editing shares in swat reverts this value to '@Domain Users' and it stops working. Moreover, downgrades to 3.0.5 seem to change this value to '@Domain, Users' (note the comma) and that does not work with 3.0.5 either (hand-editing to get rid of the comma "solves" the problem). So, now I do have samba 3.0.6 working with ADS (Win 2k, SP4) and kerberos 1.3.4 (fc2's latest update) and have to remember not to edit shares with swat. I hope this is not just one of those flash-in-the-pan symptom and cures, which it sure sounds like. However, I have been able to replicate the behavior I've described ... HTH, Murthy __ Do you Yahoo!? Yahoo! Mail Address AutoComplete - You start. We finish. http://promotions.yahoo.com/new_mail -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smb.conf syntax
Greetings, When a new file is created it's permissions need to be RWX for all users, as this a lock file is created, edited and deleted after each session... First User on App Creates the File, all users are editing, and the last one off deletes... (Paradox Database) Is this config correct for this scenario? [specworks] browseable = yes comment = SpecWorks Data path = /home/specworks writeable = yes valid users = user1 user2 user3 user4 security mask = 0777 force security mode = 0 directory security mask = 0777 force directory security mode = 0 Do I need a Force User or anything else to accomplish this?? Users are all members of SPECWORKS group... TIA -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.6 Problems w/AD and Kerberos
Christian Merrill wrote: Checking right now to see what SP level the affected customers are on. However if this is true I would have to assume that they are not running SP4 as they are using 1.2.x kerberos packages and (at least according to them) are functional on any version of Samba 3 prior to 3.0.6. Nobody mentioned it yet. It would be good to ask for the DNS domain names of the AD and samba server systems. I ran into some problems trying to join an AD whose DNS was a subdomain of my samba servers. I'm probably not alone. Regards, Doug -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba performance issue
Hi, In the last a couple of weeks, Eric helped me fixed a couple of my new samba 3.0.5 running on HP-UX 11i hang issues. Right now, people still experience slowness when they run some applications on the samba shares OR recursive list directories on the samba shares. There was not a lot of errors in the individual log files. However,there are some errors in log.smbd and log.0.0.0.0 file. 1) what is log.0.0.0.0 file? Is it a problem that it exists? 2) In log.smbd file, I saw the following type of errors: [2004/09/08 09:23:51, 0] lib/util_sock.c:get_peer_addr(978) getpeername failed. Error was Invalid argument [2004/09/08 09:27:52, 0] smbd/server.c:open_sockets_smbd(382) open_sockets_smbd: accept: No buffer space available [2004/09/08 09:30:15, 0] smbd/server.c:open_sockets_smbd(382) open_sockets_smbd: accept: No buffer space available [2004/09/08 09:31:17, 0] lib/util_sock.c:set_socket_options(185) Failed to set socket option SO_KEEPALIVE (Error Invalid argument) [2004/09/08 09:31:17, 0] lib/util_sock.c:set_socket_options(185) Failed to set socket option TCP_NODELAY (Error Invalid argument) [2004/09/08 09:31:17, 0] lib/util_sock.c:get_peer_addr(978) getpeername failed. Error was Invalid argument [2004/09/08 09:33:08, 0] smbd/server.c:open_sockets_smbd(382) open_sockets_smbd: accept: No buffer space available 3) In log.0.0.0.0 file, I saw the following type of errors: [2004/09/08 15:54:22, 0] lib/util_sock.c:get_peer_addr(978) getpeername failed. Error was Invalid argument [2004/09/08 15:54:22, 0] lib/access.c:check_access(326) [2004/09/08 15:54:22, 0] lib/util_sock.c:get_peer_addr(978) getpeername failed. Error was Invalid argument Denied connection from (0.0.0.0) [2004/09/08 15:54:22, 1] smbd/process.c:process_smb(883) [2004/09/08 15:54:22, 0] lib/util_sock.c:get_peer_addr(978) getpeername failed. Error was Invalid argument Connection denied from 0.0.0.0 [2004/09/08 15:54:22, 0] lib/util_sock.c:write_socket_data(413) write_socket_data: write failure. Error = Broken pipe [2004/09/08 15:54:22, 0] lib/util_sock.c:write_socket(437) write_socket: Error writing 5 bytes to socket 23: ERRNO = Broken pipe [2004/09/08 15:54:22, 0] lib/util_sock.c:send_smb(629) Error writing 5 bytes to client. -1. (Broken pipe) Are these real problems and how to get rid of them? BTW, we have the following configuration in smb.conf file: socket options = TCP_NODELAY Thank you very much for your help! Xiaoqin Qiu Agilent Technologies, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] UPDATE Where are the ADOBE PS Drivers?
On Wed, 2004-09-08 at 14:42, Chris McKeever wrote:
> I had an old version 1.02 of the PSDRIVER - that turns out to have all
> the correct files needed - SO - I am thinking that V1.06 has been
> updated, and the files are no longer available.
I was just dealing with CUPS Drivers for Windows problems which resulted
in a post to the CUPS newsgroups and learning far more then I had wanted
to about all this.
Apparently the new recommended way of setting up printing according to
CUPS is to use the Windows 2000 Postscript driver from Microsoft (who,
in turn, apparently obtained it from Adobe). Apparently, the NT 4
driver that the old CUPS driver for Windows were based on were too
buggy. The V1.06 Adobe driver you referred to seems to have the new PS
driver files that are recommended (ps5ui.dll, pscript5.dll, pscript.hlp,
pscript.ntf). However, don't think you can just install those manually,
you really need to use the cupsaddsmb program as it does other things
with the PPD.
So, the cupsaddsmb script in CUPS 1.1.21rc2 handles the files properly
for the new recommended way of doing things. The files needed are
listed in the accompanying cupsaddsmb manpage.
If you want the new cupsaddsmb functionality you can either upgrade to
CUPS 1.1.21rc2 (if appropriate in your situation), or grab the
systemv/cupsaddsmb.c and man/cupsaddsmb.man files from the 1.1.21rc2
source tree and replace the ones in whatever version of CUPS you are
using (although I only tested with 1.1.17 so older versions might have
problems). Then you only need one little patch to cupsaddsmb.c to get
it to compile properly:
--- cupsaddsmb-old.c2004-08-23 14:36:50.0 -0400
+++ cupsaddsmb.c 2004-09-08 18:24:08.0 -0400
@@ -496,7 +496,7 @@
* Get the PPD file...
*/
- if ((ppdfile = cupsGetPPD2(http, dest)) == NULL)
+ if ((ppdfile = cupsGetPPD(dest)) == NULL)
{
fprintf(stderr, "cupsaddsmb: No PPD file for printer \"%s\" -
skipping!\n", dest);
The cupsGetPPD2 call didn't exist until CUPS 1.1.21 so all older
versions will at least need that modification. The substitution works
fine in my testing here. YMMV. The new cupsaddsmb manpage describes the
newer drivers files this cupsaddsmb looks for.
Also, FWIW, I have opened a Bugzilla issue with Red Hat asking them to
consider updating their shipping cupsaddsmb:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=132118
Regards,
Sean
signature.asc
Description: This is a digitally signed message part
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Minimum Permissions Required to Associate to a Windows Server 2003 AD Realm
You can find the two traces mentioned in this email here http://dream.cx/traces/samba.fail http://dream.cx/traces/samba.success Tavis wrote: This is a repeat of an earlier email with more debugging information. The issue i'm experiencing is that the windows account i'm using to join samba to the ADS realm (with net join ads -U ...) needs to be in the "administrator" group on the Win2k3 DC otherwise the join fails and net returns "ads_join_realm: Insufficient access" error. The join is successful if the account is added to the "administrator" group. What i'm trying to accomplish is joining the samba server to the ADS Realm using an account that has the absolute minimum privileges required as this account is only going to be used to join/remove the samba server from the realm. I've taken some traces showing the exchange in either case and attached them to this email (samba.fail where the account "lin1" IS NOT in the administrator group, samba.success where the account "lin1" IS in the administrator group) it seems that at index 26 the samba server sends a "Modify Request" to the Win2k3 DC that is rejected unless the user is in the administrator group. Now as a side note, i am able to join Windows XP/2k3 clients to the realm using this account without being added to the administrator group. At this point, i'm assuming that perhaps there is some quirky behaviour on samba's part that is causing this issue? or perhaps some permission(s) is(are) required that should be documented? I've googled around and searched through the samba mailing lists, all references i'v found to this problem concluded without anything to suggest what the actual problem was. (usually, "i redid everything from scratch and "it just worked" ") System is running debian 3.0r2 Woody with Debian Testing Kerberos libraries - libkrb5-dev 1.3.4-3 - libkrb53 1.3.4-3 - krb5-user1.3.4-3 - krb5-config 1.6 Linux lin1.dev.hq.galnet.ca 2.4.27-flaneur_grsec2 #1 SMP Fri Aug 13 03:00:15 UTC 2004 i686 unknown. Kernel is a plain kernel.org kernel patched with grsecurity-2.0.1-2.4.27.patch from www.grsecurity.net Samba version is 3.0.6 (fresh install from source) : /configure --prefix=/usr/local/samba --with-configdir=/etc/samba \ --with-logfilebase=/var/log/samba --with-smbmount \ --with-pam_smbpass --with-syslog --with-ads --with-winbind Relevant smb.conf configuration ### [global] workgroup = DEV realm = DEV.HQ.GALNET.CA netbios name = LIN1_DEV server string = lin1.dev.hq.galnet.ca security = ADS password server = windev1.dev.hq.galnet.ca restrict anonymous = 2 lanman auth = No ntlm auth = No client NTLMv2 auth = Yes client lanman auth = No client plaintext auth = No log file = /var/log/samba/log.%m disable netbios = Yes server signing = auto deadtime = 15 max smbd processes = 1000 socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 load printers = No local master = No domain master = No pid directory = /var/run/samba strict sync = Yes sync always = Yes hide special files = Yes hide unreadable = Yes include = /etc/samba/smb.conf.shares follow symlinks = No ## Environment is pure Win2k3 ADS, Running in both forest and domain native 2003 mode Here is the output from a "net join ads -d 3 -U lin1%password": ### [2004/09/08 21:49:58, 3] param/loadparm.c:lp_load(3911) lp_load: refreshing parameters [2004/09/08 21:49:58, 3] param/loadparm.c:init_globals(1324) Initialising global parameters [2004/09/08 21:49:58, 3] param/params.c:pm_process(566) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" [2004/09/08 21:49:58, 3] param/loadparm.c:do_section(3404) Processing section "[global]" [2004/09/08 21:49:58, 3] param/params.c:pm_process(566) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf.shares" [2004/09/08 21:49:58, 2] lib/interface.c:add_interface(79) added interface ip=192.168.0.231 bcast=192.168.3.255 nmask=255.255.252.0 [2004/09/08 21:49:58, 3] libads/ldap.c:ads_connect(247) Connected to LDAP server 192.168.2.80 [2004/09/08 21:49:58, 3] libads/ldap.c:ads_server_info(2318) got ldap server name [EMAIL PROTECTED], using bind path: dc=DEV,dc=HQ,dc=GALNET,dc=CA [2004/09/08 21:49:58, 3] libads/sasl.c:ads_sasl_spnego_bind(204) ads_sasl_spnego_bind: got OID=1 2 840 48018 1 2 2 [2004/09/08 21:49:58, 3] libads/sasl.c:ads_sasl_spnego_bind(204) ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 [2004/09/08 21:49:58, 3] libads/sasl.c:ads_sasl_spnego_bind(204) ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 3 [2004/09/08 21:49:58, 3] libads/sasl.c:ads_sasl_spnego_bind(204) ads_sasl_spnego_bind: go
[Samba] Anybody got any ideas as to how to fix this problem? -- on both 3.0.5 and 3.0.6 PDC
I previously reported a problem where I was seeing all sorts of Interrupted system call errors for the /etc/samba/smbpasswd file. This caused some significant temporary problems at our site in user validations. Seems upon analysis of the various log material, and coding.that the Interrupted system call is legit. It is simply indicating a timeout for the lock request on the /etc/samba/smbpasswd file which really should not happen but it does. OK, in checking the system further, we find one system basically constantly holding open / or using the passwd file for authentication for some reason thus causing the other clients to become basically locked out. This client has the following log entries: [2004/09/07 18:32:52, 2] smbd/server.c:exit_server(568) Closing connections [2004/09/07 18:45:32, 2] smbd/sesssetup.c:setup_new_vc_session(602) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2004/09/07 18:45:32, 2] smbd/sesssetup.c:setup_new_vc_session(602) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2004/09/07 18:45:32, 2] lib/access.c:check_access(324) Allowed connection from (141.248.152.163) [2004/09/07 18:45:32, 2] lib/access.c:check_access(324) Allowed connection from (141.248.152.163) [2004/09/07 18:45:32, 0] passdb/pdb_smbpasswd.c:mod_smbfilepwd_entry(899) mod_smbfilepwd_entry: Using old smbpasswd format. This is no longer supported.! [2004/09/07 18:45:32, 0] passdb/pdb_smbpasswd.c:mod_smbfilepwd_entry(900) mod_smbfilepwd_entry: No changes made, failing.! [2004/09/07 18:45:32, 0] passdb/pdb_smbpasswd.c:smbpasswd_update_sam_account(1436) smbpasswd_update_sam_account: mod_smbfilepwd_entry failed! [2004/09/07 18:45:32, 0] passdb/pdb_smbpasswd.c:mod_smbfilepwd_entry(899) mod_smbfilepwd_entry: Using old smbpasswd format. This is no longer supported.! [2004/09/07 18:45:32, 0] passdb/pdb_smbpasswd.c:mod_smbfilepwd_entry(900) mod_smbfilepwd_entry: No changes made, failing.! [2004/09/07 18:45:32, 0] passdb/pdb_smbpasswd.c:smbpasswd_update_sam_account(1436) smbpasswd_update_sam_account: mod_smbfilepwd_entry failed! [2004/09/07 18:47:40, 2] smbd/process.c:timeout_processing(1138) Closing idle connection [2004/09/07 18:47:40, 2] smbd/server.c:exit_server(568) Closing connections NOTE: Both the machine and client smbpasswd entries are of the "NEW" type as noted by the number of fields in each entry: client$:753::BDCCBA58CAE2136EE5F68206ADC748E A:[W ]:LCT-40F2BF93: username:962:A8AD058EA120084B1486235A2333E4D2:11D4C351D6C291170C2D6192EB8E99 FC:[U ]:LCT-41360DED: Further entries in the /etc/passwd and /etc/shadow file track correctly to the information in the samba passwd file. I'm not sure any changes are being made here as our site (by directive unfortunately) so I do not understand what would be changing either. What problem are we seeing? Any ideas what to do to fix this? == M. D. Parker Systems Administrator General Atomics / Electromagnetic Systems +1 858 455 2877 [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Minimum Permissions Required to Associate to a Windows Server 2003 AD Realm
This is a repeat of an earlier email with more debugging information. The issue i'm experiencing is that the windows account i'm using to join samba to the ADS realm (with net join ads -U ...) needs to be in the "administrator" group on the Win2k3 DC otherwise the join fails and net returns "ads_join_realm: Insufficient access" error. The join is successful if the account is added to the "administrator" group. What i'm trying to accomplish is joining the samba server to the ADS Realm using an account that has the absolute minimum privileges required as this account is only going to be used to join/remove the samba server from the realm. I've taken some traces showing the exchange in either case and attached them to this email (samba.fail where the account "lin1" IS NOT in the administrator group, samba.success where the account "lin1" IS in the administrator group) it seems that at index 26 the samba server sends a "Modify Request" to the Win2k3 DC that is rejected unless the user is in the administrator group. Now as a side note, i am able to join Windows XP/2k3 clients to the realm using this account without being added to the administrator group. At this point, i'm assuming that perhaps there is some quirky behaviour on samba's part that is causing this issue? or perhaps some permission(s) is(are) required that should be documented? I've googled around and searched through the samba mailing lists, all references i'v found to this problem concluded without anything to suggest what the actual problem was. (usually, "i redid everything from scratch and "it just worked" ") System is running debian 3.0r2 Woody with Debian Testing Kerberos libraries - libkrb5-dev 1.3.4-3 - libkrb53 1.3.4-3 - krb5-user1.3.4-3 - krb5-config 1.6 Linux lin1.dev.hq.galnet.ca 2.4.27-flaneur_grsec2 #1 SMP Fri Aug 13 03:00:15 UTC 2004 i686 unknown. Kernel is a plain kernel.org kernel patched with grsecurity-2.0.1-2.4.27.patch from www.grsecurity.net Samba version is 3.0.6 (fresh install from source) : /configure --prefix=/usr/local/samba --with-configdir=/etc/samba \ --with-logfilebase=/var/log/samba --with-smbmount \ --with-pam_smbpass --with-syslog --with-ads --with-winbind Relevant smb.conf configuration ### [global] workgroup = DEV realm = DEV.HQ.GALNET.CA netbios name = LIN1_DEV server string = lin1.dev.hq.galnet.ca security = ADS password server = windev1.dev.hq.galnet.ca restrict anonymous = 2 lanman auth = No ntlm auth = No client NTLMv2 auth = Yes client lanman auth = No client plaintext auth = No log file = /var/log/samba/log.%m disable netbios = Yes server signing = auto deadtime = 15 max smbd processes = 1000 socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 load printers = No local master = No domain master = No pid directory = /var/run/samba strict sync = Yes sync always = Yes hide special files = Yes hide unreadable = Yes include = /etc/samba/smb.conf.shares follow symlinks = No ## Environment is pure Win2k3 ADS, Running in both forest and domain native 2003 mode Here is the output from a "net join ads -d 3 -U lin1%password": ### [2004/09/08 21:49:58, 3] param/loadparm.c:lp_load(3911) lp_load: refreshing parameters [2004/09/08 21:49:58, 3] param/loadparm.c:init_globals(1324) Initialising global parameters [2004/09/08 21:49:58, 3] param/params.c:pm_process(566) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" [2004/09/08 21:49:58, 3] param/loadparm.c:do_section(3404) Processing section "[global]" [2004/09/08 21:49:58, 3] param/params.c:pm_process(566) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf.shares" [2004/09/08 21:49:58, 2] lib/interface.c:add_interface(79) added interface ip=192.168.0.231 bcast=192.168.3.255 nmask=255.255.252.0 [2004/09/08 21:49:58, 3] libads/ldap.c:ads_connect(247) Connected to LDAP server 192.168.2.80 [2004/09/08 21:49:58, 3] libads/ldap.c:ads_server_info(2318) got ldap server name [EMAIL PROTECTED], using bind path: dc=DEV,dc=HQ,dc=GALNET,dc=CA [2004/09/08 21:49:58, 3] libads/sasl.c:ads_sasl_spnego_bind(204) ads_sasl_spnego_bind: got OID=1 2 840 48018 1 2 2 [2004/09/08 21:49:58, 3] libads/sasl.c:ads_sasl_spnego_bind(204) ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 [2004/09/08 21:49:58, 3] libads/sasl.c:ads_sasl_spnego_bind(204) ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 3 [2004/09/08 21:49:58, 3] libads/sasl.c:ads_sasl_spnego_bind(204) ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10 [2004/09/08 21:49:58, 3] libads/sasl.c:ads_sasl_spnego_bind(211) ads_sasl_spnego_bind: got server principal name
[Samba] 3.0.6 PDC/tdbsam backend
I recently converted my Samba PDC from ldapsam to tdbsam as I was having too many problems with the ldap backend failing after a power outages. I now have a few questions regarding tdbsam: 1. Is there any GUI user administration tool that I can use in conjunction with a tdbsam backend? Usrmgr seems to function as user root on the domain, but does not seem very reliable. I'm looking for something equivalent to LAM that I can give to the business owner, so he can easily create new accounts, etc. 2. What should my method of backup be? Should I just shutdown smbd/nmbd and copy secrets.tdb and passdb.tdb to backup media? I was using 'slapcat' when the backend was LDAP, which worked just fine. 3. How can I force a password change at next logon for new users? I have a few users who have kept their default password and I'd like to force them to change. 4. What are some good utils to use to perform an audit on my system? I would like to audit each workstation attached to the domain to make sure that permissions are set correctly on the proper files, etc. Any answers to the above questions would be greatly appreciated. Thanks, Mike -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Possible passdb corruption on upgrade to 3.0.6?
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=132077 is a bug report saying that the UWX flags are lost when the passdb.tdb file is upgraded from 3.0.4 to 3.0.6. Has anyone else seen this behavior? Could this be responsible for some of the trouble folks are having with 3.0.6 upgrades? Will someone who's better at passdbs and tdbs look into this before I get a round tuit? -- JF -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Best way to update old Mdk box w/2.09 to 3.06??
Mates, I am at the point that I will have to update my trusty samba 2.0.9 to 3.0.6 or 2.2.11. (damn SP2) Problem is that my production machine is still running Mandrake 7.2 and, of course, there aren't any RPMs for the old distro. So, I guess my option is to install from source. Do I need to rpm -e the 2.0.9 before attempting to compile and install 2.2.11 or 3.0.6? My server is a simple server that doesn't rely on ldap, kerbose, winbind, etc. Does is make sense to go to 3.0.6 instead of 2.2.11? Any pointers or gotchas?? Installing from source, is there anything other than ./configure, make, make install and rtfm for the new smb.conf entries?? -- David C. Rankin, J.D., P.E. RANKIN * BERTIN, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 (936) 715-9333 (936) 715-9339 fax www.rankin-bertin.com -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Runaway processes on Solaris
Hi Jerry and crew, Our solaris 2.8 machine running Samba 2.2.8a ran out of swap. The Sun engineer sent us the following which seemed to point to Samba. Have you seen something like this before? Thanks, Dom Verlezza (704)988-3156 Joe requested that I provide an update on the analysis when it was complete. The kernel engineer who analyzed the core file provided the following: release: 5.8 (64-bit) version: Generic_108528-18 machine: sun4u node name: srv500 domain: yp.tiaa.org hw_provider: Sun_Microsystems system type: SUNW,Ultra-Enterprise-1 hostid: 80a70288 time of crash: Tue Sep 7 05:23:09 MDT 2004 age of system: 35 days 23 hours 8 minutes 56.51 seconds panic cpu: 0 (ncpus: 3) panic string: sync initiated The system was *hung* and reports being out of swap. WARNING: Sorry, no swap space to grow stack for pid 1424 (naviagent) WARNING: Sorry, no swap space to grow stack for pid 2216 (naviagent) WARNING: nfsauth: RPC: Unitdata error WARNING: Sorry, no swap space to grow stack for pid 2526 (naviagent) We see that this domain has only 3 cpus and about 8250 processes in the process table. Of these 8250 processes 7375 of these are smbd, and look like: smbd -D -s /opt/samba/etc/smb.conf It appears these processes have overwhelmed the system and would also explain the system running short on swap space. It appears these proceses are related to Samba. The explorer output gathered a ps output and it only shows 506 of these processes in the process table. So it does appear that there are *considerably* more running in the corefile. The issue stems from the total number of smbd processes running. It may be helpful to request assistance from the Samba folks to investigate why there would be so many samba processes running. Thank you, -- Alexis Lusher Sun Microsystems High Availability Systems Hours: Mon-Thurs 9am-7pm MST e-mail: [EMAIL PROTECTED] ** This message, including any attachments, contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, please contact sender immediately by reply e-mail and destroy all copies. You are hereby notified that any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited. TIAA-CREF ** -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba Password Problems (Alt-Characters)
Good Afternoon All: Here is the setup: A RedHat 7.2 Samba 2.2.7 Server upgraded to Fedora Core 1 Samba 3.0.6-2.FC1. The server is acting as the PDC. No Windows servers are providing authentication. Windows 2000 clients. testparm -v | grep "unix charset" results in UTF-8. locale charmap results in ISO-8859-1. using smbpasswd. Before upgrading the server, I was able to authenticate users to the domain on the Win2k boxes with alt-characters (alt-0162=¢) in their passwords. Since upgrading the server, users who had these type of characters in their passwords with passwords that have not changed, are able to authenticate, but changing a user's password to a new password that contains these characters results in not being able to authenticate. Any ideas? Stuart -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: UID and GID's
"Blindauer Emmanuel" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] Le mercredi 08 Septembre 2004 20:08, Tom a écrit : > Is it possible to have the same uid and gid mappings on multiple machines? > This is for NFS mounting. > > I've searched around and it's not clear to me if it possible. > > I'm running samba 3.0.6-2, and I have everything working for ADS. > > Also, I installed SFU so there is a uid and gid field in the AD schema, is > there any way I can tell samba to use that instead of using the "idmap uid > = 16777216-33554431" declaration? > > thanks, > -tom I'm sharing /home like you probably want: users are in AD, winbind does the uid-gid-sid mapping. I don't use SFU, but the ldap backend to store the mapping, and all winbind uses this mapping, so the mapping is unique. I don't know if it is possible to used the uid/sid from SFU directly Emmanuel -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba ok, so how do I do that? Do I take out: idmap uid = 16777216-33554431 idmap gid = 16777216-33554431 and add: ldap idmap suffix = ou=Idmap,dc=samba,dc=org thanks, -tom -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Best strategy to undo an update
Andrew B. Young wrote: My http authentication through winbind has stopped working with a Fedora Core 2 update of httpd and samba (and others), httpd-2.0.49-4 -> httpd-2.0.50-2.1 & samba-3.0.3-5 -> samba-3.0.6-2.fc2 which I believe is caused by a winbind bug (http://us1.samba.org/samba/news/#comingsoon_3.0.7) What is the best strategy to fix this? I can think of two: 1) rpm --erase all the samba-*-3.0.6-2.fc2 packages and rpm --install all the samba-*-3.0.3-5 packages I have never done this, but suppose it will work. 2) download the Samba 3.0.6 source, apply the patch, compile, install, & run I am worried this will somehow interfer w/ samba-*-3.0.6-2.fc2 packages preventing me from using the Fedora update in the future. Thanks, Andrw 1 should work quite well, however keep in mind that by doing that you are going to lose everything in /var/cache/samba (idmaps etc.) so you may need to reapply permissions on local files. I'm not sure how 2 will work and I imagine it would cause some confusion with Fedora's update feature. Christian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Best strategy to undo an update
My http authentication through winbind has stopped working with a Fedora Core 2 update of httpd and samba (and others), httpd-2.0.49-4 -> httpd-2.0.50-2.1 & samba-3.0.3-5 -> samba-3.0.6-2.fc2 which I believe is caused by a winbind bug (http://us1.samba.org/samba/news/#comingsoon_3.0.7) What is the best strategy to fix this? I can think of two: 1) rpm --erase all the samba-*-3.0.6-2.fc2 packages and rpm --install all the samba-*-3.0.3-5 packages I have never done this, but suppose it will work. 2) download the Samba 3.0.6 source, apply the patch, compile, install, & run I am worried this will somehow interfer w/ samba-*-3.0.6-2.fc2 packages preventing me from using the Fedora update in the future. Thanks, Andrw -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: CUPS integration does not work properly when not linked
Hi Adam, Maybe I'm missing something here, but you won't see your printer in the browse lists unless you create a share for that printer. You can either create a specific printer stanza for Kyocera_FS-3750, or create a [printers] stanza to export all printers listed in printcap. I will try that tomorrow, thanks for the tip. But shouldn't load printers = yes which is the default show up this printer automagically? Thanks Florian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Host bases protection
In the hosts.allow entry for samba 3+, is there still a limit of localhost + 2 private networks? If so, Are there any plans to extend this? Otherwise, what is the current limit? Currently I have a situation where 10+ ranges are needed so if 2 is the limit we are stuck. Thanks, Wjrasmussen -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: CUPS integration does not work properly when not linked
Florian Effenberger wrote: I have a Samba 3.0.6 server and a CUPS 1.2.0 server running on my machine. They have been compiled with: Samba: ./configure --with-pam --with-pam_smbpass --with-quotas --with-sys-quotas CUPS: ./configure --prefix=/usr/local/cups --with-cups-user=cups --with-cups- group=cups --with-docdir=/usr/local/cups/docdir --with- logdir=/usr/local/cups/logdir --with-rcdir=/usr/local/cups/rcdir --enable-ssl As you can see, CUPS lies in an unusual path, so Samba did NOT see the cups- config file and was NOT linked to CUPS. Your documentation states that even without linking it should work fine, however, it doesn't. /etc/printcap contains: === # This file was automatically generated by cupsd(8) from the # /usr/local/cups/etc/cups/printers.conf file. All changes to this file # will be lost. Kyocera_FS-3750|Kyocera_FS-3750:rm=flux:rp=Kyocera_FS-3750: === This is the printer I set up via CUPS. I can print to it using the CUPS web interface (print test page). My /usr/local/samba/lib/smb.conf looks like: === # Samba config file created using SWAT # from 192.168.10.105 (192.168.10.105) # Date: 2004/09/08 17:58:00 # Global parameters [global] workgroup = MYGROUP netbios aliases = FILESERVER server string = Dateiserver security = SHARE passdb backend = tdbsam passwd program = /usr/bin/passwd %u passwd chat = *new*password* %n\n *new*password* %n\n *updated* unix password sync = Yes time server = Yes deadtime = 15 printcap name = cups os level = 65535 preferred master = Yes domain master = Yes ldap ssl = no invalid users = root admin users = flux write list = flux printer admin = flux create mask = 0700 directory mask = 0700 printing = cups print command = /usr/local/cups/bin/lp -c -d%p %s; rm %s lpq command = /usr/local/cups/bin/lpstat -o%p lprm command = /usr/local/cups/bin/cancel %p-%j lppause command = /usr/local/cups/bin/lp -i %p-%j -H hold lpresume command = /usr/local/cups/bin/lp -i %p-%j -H resume queuepause command = /usr/local/cups/bin/disable %p queueresume command = /usr/local/cups/bin/enable %p (and then some file shares follow) === I cannot see the CUPS printers in my list (using Windows and smbclient). There is no chance to print with my Windows clients. Maybe I'm missing something here, but you won't see your printer in the browse lists unless you create a share for that printer. You can either create a specific printer stanza for Kyocera_FS-3750, or create a [printers] stanza to export all printers listed in printcap. Adam Bottchen -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.6 Problems w/AD and Kerberos
I'll add something more about this problem, but I don't know if is is related to: my users can't mount 2 share on two differents domain all the time (one share is a 2.2.x samba, the other is the 3.0.6 samba). Emmanuel -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: UPDATE Where are the ADOBE PS Drivers?
John H Terpstra wrote: Gents, Have you checked out the cups.org site to see if they have replacement drivers? Last I recall you can just use their replacements for the Adobe drivers. That soynds way too logical John! ;-) Anyway, INF remains for those that wish to use the Adobe binaries. I like to know I can still use old skills now and then. -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.6 Problems w/AD and Kerberos
I found that if you use the FQDN it works.. (which was not acceptable to us).. we (unfortuantely) went to security = domain. Tom On Wed, 8 Sep 2004, Blindauer Emmanuel wrote: > Le dimanche 05 Septembre 2004 13:38, Christian Merrill a écrit : > > Running into a lot of people upgrading to the 3.0.6 package that all > > of a sudden begin to experience the "Failed to verify incoming > > ticket!" errors etc., that are generally associated with a kerberos > > package incompatibility. > > > > However many of these people are running later versions of kerberos > > *and* reverting to a previous version of Samba appears to fix the > > issue. Is there something new setting wise that has taken place, is > > something really wrong with this new package, or is this all just a > > strange coincidence? > > > > Christian > I confirm the problem: > I'm running win2k SP4, AD, mixed mode, no other special conf. > the samba is 3.0.6, compiled from sources. I use winbind too. > winbind has some " krb5_cc_get_principal failed (No credentials cache found)" > but nothing special. > but the samba daemon get, for some users, > "smbd/sesssetup.c:reply_spnego_kerberos(173) > Failed to verify incoming ticket " > and this prevent user from acceding their share. > the used kerberos is 1.3.4 > > The 2000 domain has been started from scratch, no NT4 migration. > > Emmanuel > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > ___ Tom RyanVoice: 856-225-6361 Consulting System Administrator Fax: 856-969-7900 Rutgers School of Law - Camden IT Help Desk: 856-225-2343 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.6 Problems w/AD and Kerberos
Blindauer Emmanuel wrote: Le dimanche 05 Septembre 2004 13:38, Christian Merrill a écrit : Running into a lot of people upgrading to the 3.0.6 package that all of a sudden begin to experience the "Failed to verify incoming ticket!" errors etc., that are generally associated with a kerberos package incompatibility. However many of these people are running later versions of kerberos *and* reverting to a previous version of Samba appears to fix the issue. Is there something new setting wise that has taken place, is something really wrong with this new package, or is this all just a strange coincidence? Christian I confirm the problem: I'm running win2k SP4, AD, mixed mode, no other special conf. the samba is 3.0.6, compiled from sources. I use winbind too. winbind has some " krb5_cc_get_principal failed (No credentials cache found)" but nothing special. but the samba daemon get, for some users, "smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket " and this prevent user from acceding their share. the used kerberos is 1.3.4 The 2000 domain has been started from scratch, no NT4 migration. Emmanuel My customers are using 1.2.X packages but this sounds identical to the problem they are seeing. The effect of all this is the classic "I can browse to shares by \\ip.address\share_name but when I try to browse by \\netbios_name\share_name I get prompted for a account/password and these errors start popping up in the logs" Emmanuel does this problem also go away for you when you revert to an older samba release? Christian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] CORRECTIONS Where are the ADOBE PS Drivers?
Ok, please use this INF, a bit cleaner in this version...
Copy out the following files while you have Adobe's installer up and running, first
screen is fine, once copied out then cancel the installer. They will be under your
temp dir in a ...\Win2000 dir.
03/09/2000 02:22p 13,492 DEFPRTR2.PPD
06/01/2001 12:00p 135,248 PS5UI.DLL
01/18/2001 10:03a 26,056 PSCRIPT.HLP
01/09/2001 01:12p 792,644 PSCRIPT.NTF
06/01/2001 12:00p 470,608 PSCRIPT5.DLL
; PSCRIPT.INF
;
; Michael Lueck, Lueck Data Systems
; Version 1.1
; This INF is intended to be used with:
; Adobe Universal PostScript Windows Driver Installer 1.0.6 - English
[Version]
Signature="$Windows NT$"
Provider="Adobe"
LayoutFile=layout.inf
ClassGUID={4D36E979-E325-11CE-BFC1-08002BE10318}
Class=Printer
[Manufacturer]
"Adobe"
[Adobe]
"AdobePSGenericPostScriptPrinter" = DEFPRTR2.PPD
[DEFPRTR2.PPD]
CopyFiles=PSCRIPT
DataSection=PSCRIPT_DATA
[PSCRIPT]
DEFPRTR2.PPD
PS5UI.DLL
PSCRIPT.HLP
PSCRIPT.NTF
PSCRIPT5.DLL
[PSCRIPT_DATA]
DriverFile=PSCRIPT5.DLL
ConfigFile=PS5UI.DLL
HelpFile=PSCRIPT.HLP
[DestinationDirs]
DefaultDestDir=66000
[ControlFlags]
ExcludeFromSelect = 2369
--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] UID and GID's
Le mercredi 08 Septembre 2004 20:08, Tom a écrit : > Is it possible to have the same uid and gid mappings on multiple machines? > This is for NFS mounting. > > I've searched around and it's not clear to me if it possible. > > I'm running samba 3.0.6-2, and I have everything working for ADS. > > Also, I installed SFU so there is a uid and gid field in the AD schema, is > there any way I can tell samba to use that instead of using the "idmap uid > = 16777216-33554431" declaration? > > thanks, > -tom I'm sharing /home like you probably want: users are in AD, winbind does the uid-gid-sid mapping. I don't use SFU, but the ldap backend to store the mapping, and all winbind uses this mapping, so the mapping is unique. I don't know if it is possible to used the uid/sid from SFU directly Emmanuel -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.6 Problems w/AD and Kerberos
Le dimanche 05 Septembre 2004 13:38, Christian Merrill a écrit : > Running into a lot of people upgrading to the 3.0.6 package that all > of a sudden begin to experience the "Failed to verify incoming > ticket!" errors etc., that are generally associated with a kerberos > package incompatibility. > > However many of these people are running later versions of kerberos > *and* reverting to a previous version of Samba appears to fix the > issue. Is there something new setting wise that has taken place, is > something really wrong with this new package, or is this all just a > strange coincidence? > > Christian I confirm the problem: I'm running win2k SP4, AD, mixed mode, no other special conf. the samba is 3.0.6, compiled from sources. I use winbind too. winbind has some " krb5_cc_get_principal failed (No credentials cache found)" but nothing special. but the samba daemon get, for some users, "smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket " and this prevent user from acceding their share. the used kerberos is 1.3.4 The 2000 domain has been started from scratch, no NT4 migration. Emmanuel -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] UPDATE Where are the ADOBE PS Drivers?
On Wed, 8 Sep 2004 12:50:21 -0600, John H Terpstra <[EMAIL PROTECTED]> wrote: > Gents, > > Have you checked out the cups.org site to see if they have replacement > drivers? Last I recall you can just use their replacements for the Adobe > drivers. from looking through the archives - it sounded like the CUPS drivers were acting up (plus not compatible with older windows 98/ME) systems - and that the suggested approach till they release new drivers was to use the ADOBE ones... I will do some more research > > - John T. > > > > On Wednesday 08 September 2004 12:45, Michael Lueck wrote: > > On Wed, 8 Sep 2004 13:42:05 -0500, Chris McKeever wrote: > > >I had an old version 1.02 of the PSDRIVER - that turns out to have all > > >the correct files needed - SO - I am thinking that V1.06 has been > > >updated, and the files are no longer available. > > > > Hang on, I downloaded 1.06, found the six needed files under my temp dir, > > and am crafting up an INF to install it as you wrote... Gggeee Adobe, > > this ain't rocket science! > > > > Yes it does appear they make this has hard as possible... > > > > Michael Lueck > > Lueck Data Systems > > http://www.lueckdatasystems.com/ > > -- > John H Terpstra > Samba-Team Member > Phone: +1 (650) 580-8668 > > Author: > The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556 > Samba-3 by Example, ISBN: 0131472216 > Hardening Linux, ISBN: 0072254971 > OpenLDAP by Example, ISBN: 0131488732 > Other books in production. > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: UPDATE Where are the ADOBE PS Drivers?
All right, no warranty, Crank up the 1.0.6 installer, grab the files under temp in the ...\WIN2000 dir, cancel out of the installer, then add this text to be in PSCRIPT.INF and treat it like a normal
driver (have disk, point it at the dir, etc...)
; PSCRIPT.INF
;
; Michael Lueck, Lueck Data Systems
[Version]
Signature="$Windows NT$"
Provider="Adobe"
LayoutFile=layout.inf
ClassGUID={4D36E979-E325-11CE-BFC1-08002BE10318}
Class=Printer
[Manufacturer]
"Adobe"
[Adobe]
"Generic PostScript Printer" = DEFPRTR2.PPD
[DEFPRTR2.PPD]
CopyFiles=PSCRIPT
DataSection=PSCRIPT_DATA
[PSCRIPT]
DEFPRTR2.PPD
PS5UI.DLL
PSCRIPT.HLP
PSCRIPT.NTF
PSCRIPT5.DLL
PSCRPTFE.NTF
[PSCRIPT_DATA]
DriverFile=PSCRIPT5.DLL
ConfigFile=PS5UI.DLL
HelpFile=PSCRIPT.HLP
[DestinationDirs]
DefaultDestDir=66000
[ControlFlags]
ExcludeFromSelect = 2369
--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] UPDATE Where are the ADOBE PS Drivers?
Gents, Have you checked out the cups.org site to see if they have replacement drivers? Last I recall you can just use their replacements for the Adobe drivers. - John T. On Wednesday 08 September 2004 12:45, Michael Lueck wrote: > On Wed, 8 Sep 2004 13:42:05 -0500, Chris McKeever wrote: > >I had an old version 1.02 of the PSDRIVER - that turns out to have all > >the correct files needed - SO - I am thinking that V1.06 has been > >updated, and the files are no longer available. > > Hang on, I downloaded 1.06, found the six needed files under my temp dir, > and am crafting up an INF to install it as you wrote... Gggeee Adobe, > this ain't rocket science! > > Yes it does appear they make this has hard as possible... > > Michael Lueck > Lueck Data Systems > http://www.lueckdatasystems.com/ -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 OpenLDAP by Example, ISBN: 0131488732 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] UPDATE Where are the ADOBE PS Drivers?
On Wed, 8 Sep 2004 13:42:05 -0500, Chris McKeever wrote: >I had an old version 1.02 of the PSDRIVER - that turns out to have all >the correct files needed - SO - I am thinking that V1.06 has been >updated, and the files are no longer available. Hang on, I downloaded 1.06, found the six needed files under my temp dir, and am crafting up an INF to install it as you wrote... Gggeee Adobe, this ain't rocket science! Yes it does appear they make this has hard as possible... Michael Lueck Lueck Data Systems http://www.lueckdatasystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] UPDATE Where are the ADOBE PS Drivers?
I had an old version 1.02 of the PSDRIVER - that turns out to have all the correct files needed - SO - I am thinking that V1.06 has been updated, and the files are no longer available. On Wed, 8 Sep 2004 13:22:17 -0500, Chris McKeever <[EMAIL PROTECTED]> wrote: > On Wed, 08 Sep 2004 14:15:48 -0400, Michael Lueck > <[EMAIL PROTECTED]> wrote: > > Chris McKeever wrote: > > > > > A - install the ADOBE POSTSCRIPT file onto a windows machine - check > > > B - SHARE that printer - check > > > C - Grab the specified files from the print$ share on the windows machine > > > -- none are there... > > > D - Place them into: /usr/share/cups > > > E - run the cupsaddsmb > > > > Maybe John himself will jump in as these instructions sound redundant... and I'm > > not walking over to the book shelf. > > > > Redundant as... if steps a-c post files to print$, then there should be no need > > for cupsaddsmb as that is the Linux command line equiv of uploading the driver > > from a Windows client box. > > > > You are missing a small piece - the only way to get the ADOBE files > (unless you already have them broken out of the installer) is to > install on a windows client machine, grab them and install them on the > CUPS server the print$ share that is being referred to is that on > the client machine, hence why you need to copy them and then use > cupsaddsmb, which then put them into the print$ onto the cups/samba > server > > it is a bit redundant, but the only way to get the files > > my issue is that, none of the files needed for the cupsaddsmb are > there - almost as if ADOBE has changed the driver and those are no > longer included -- however, the archives say the 1.06 version does > contain them...yet, as I posted earlier, these are the installed > files: > > > > DEFPRTR2.BPDA12188 Tue Sep 7 23:27:50 2004 > defprtr2.ppdA13492 Tue Apr 23 12:50:10 2002 > efisysprint.sep A 3277 Fri Nov 22 01:54:02 2002 > efisysprtj.sep A 3640 Fri Nov 22 01:54:04 2002 > EFME4320.BPDA61420 Tue Sep 7 22:14:24 2004 > EFME4320.bxeA 102400 Tue Jan 7 20:23:48 2003 > EFME4320.cntA 1230 Fri Jun 28 23:56:24 2002 > EFME4320.dllA81994 Tue Jan 7 20:24:16 2003 > EFME4320.extA 532535 Tue Jan 7 20:23:48 2003 > EFME4320.finA 1175613 Tue Jan 7 20:23:46 2003 > EFME4320.hlpA56090 Tue May 21 23:44:48 2002 > EFME4320.iniA 74 Wed Jan 15 02:24:14 2003 > EFME4320.lanA 1851449 Tue Jan 7 20:23:48 2003 > EFME4320.oemA 2109512 Tue Jan 7 20:24:10 2003 > EFME4320.pgeA 4243 Thu Aug 8 18:30:22 2002 > EFME4320.PPDA74812 Sat Jan 11 02:18:42 2003 > EFME4320.psrA47858 Tue Jan 7 20:24:16 2003 > EFME4320.uimA 1855546 Tue Jan 7 20:23:46 2003 > ehm10.dll A 421930 Wed Jul 17 10:06:00 2002 > ehmbrg.dll A 299051 Wed Jul 17 10:05:40 2002 > ehmcore.dll A98348 Wed Jul 17 10:05:20 2002 > ehmecol.dll A 155692 Wed Jul 17 10:07:18 2002 > ehmefi.dll A 487467 Wed Jul 17 10:06:58 2002 > HPLJ4.BUD A39312 Tue Sep 7 20:21:20 2004 > HPLJ4.GPD A26569 Fri Jul 30 16:02:58 1999 > PCL5ERES.DLLA 676352 Tue Nov 30 01:30:54 1999 > PS5UI.DLL A 130048 Thu Jun 19 14:05:04 2003 > PSCRIPT.HLP A26038 Mon Jul 22 14:05:04 2002 > PSCRIPT.NTF A 792644 Mon Jul 22 14:05:04 2002 > PSCRIPT5.DLLA 455168 Thu Jun 19 14:05:04 2003 > STDNAMES.GPDA14362 Thu Jun 19 14:05:04 2003 > TTFSUB.GPD A 698 Mon Jun 7 15:48:52 1999 > TTY.BUD A21596 Tue Sep 7 23:22:27 2004 > TTY.DLL A 8464 Thu Jun 19 14:05:04 2003 > TTY.GPD A12507 Fri Jul 30 16:06:18 1999 > TTY.INI A 62 Fri May 8 18:04:12 1998 > TTYRES.DLL A39424 Thu Jun 19 14:05:04 2003 > TTYUI.DLL A16144 Thu Jun 19 14:05:04 2003 > TTYUI.HLP A14318 Thu Oct 7 15:08:06 1999 > UNIDRV.DLL A 239104 Thu Jun 19 14:05:04 2003 > UNIDRV.HLP A21225 Thu Jun 19 14:05:04 2003 > UNIDRVUI.DLLA 197120 Thu Jun 19 14:05:04 2003 > UNIRES.DLL A 619520
Re: [Samba] Re: Where are the ADOBE PS Drivers?
On Wed, 08 Sep 2004 14:15:48 -0400, Michael Lueck <[EMAIL PROTECTED]> wrote: > Chris McKeever wrote: > > > A - install the ADOBE POSTSCRIPT file onto a windows machine - check > > B - SHARE that printer - check > > C - Grab the specified files from the print$ share on the windows machine > > -- none are there... > > D - Place them into: /usr/share/cups > > E - run the cupsaddsmb > > Maybe John himself will jump in as these instructions sound redundant... and I'm not > walking over to the book shelf. > > Redundant as... if steps a-c post files to print$, then there should be no need for > cupsaddsmb as that is the Linux command line equiv of uploading the driver from a > Windows client box. > You are missing a small piece - the only way to get the ADOBE files (unless you already have them broken out of the installer) is to install on a windows client machine, grab them and install them on the CUPS server the print$ share that is being referred to is that on the client machine, hence why you need to copy them and then use cupsaddsmb, which then put them into the print$ onto the cups/samba server it is a bit redundant, but the only way to get the files my issue is that, none of the files needed for the cupsaddsmb are there - almost as if ADOBE has changed the driver and those are no longer included -- however, the archives say the 1.06 version does contain them...yet, as I posted earlier, these are the installed files: DEFPRTR2.BPDA12188 Tue Sep 7 23:27:50 2004 defprtr2.ppdA13492 Tue Apr 23 12:50:10 2002 efisysprint.sep A 3277 Fri Nov 22 01:54:02 2002 efisysprtj.sep A 3640 Fri Nov 22 01:54:04 2002 EFME4320.BPDA61420 Tue Sep 7 22:14:24 2004 EFME4320.bxeA 102400 Tue Jan 7 20:23:48 2003 EFME4320.cntA 1230 Fri Jun 28 23:56:24 2002 EFME4320.dllA81994 Tue Jan 7 20:24:16 2003 EFME4320.extA 532535 Tue Jan 7 20:23:48 2003 EFME4320.finA 1175613 Tue Jan 7 20:23:46 2003 EFME4320.hlpA56090 Tue May 21 23:44:48 2002 EFME4320.iniA 74 Wed Jan 15 02:24:14 2003 EFME4320.lanA 1851449 Tue Jan 7 20:23:48 2003 EFME4320.oemA 2109512 Tue Jan 7 20:24:10 2003 EFME4320.pgeA 4243 Thu Aug 8 18:30:22 2002 EFME4320.PPDA74812 Sat Jan 11 02:18:42 2003 EFME4320.psrA47858 Tue Jan 7 20:24:16 2003 EFME4320.uimA 1855546 Tue Jan 7 20:23:46 2003 ehm10.dll A 421930 Wed Jul 17 10:06:00 2002 ehmbrg.dll A 299051 Wed Jul 17 10:05:40 2002 ehmcore.dll A98348 Wed Jul 17 10:05:20 2002 ehmecol.dll A 155692 Wed Jul 17 10:07:18 2002 ehmefi.dll A 487467 Wed Jul 17 10:06:58 2002 HPLJ4.BUD A39312 Tue Sep 7 20:21:20 2004 HPLJ4.GPD A26569 Fri Jul 30 16:02:58 1999 PCL5ERES.DLLA 676352 Tue Nov 30 01:30:54 1999 PS5UI.DLL A 130048 Thu Jun 19 14:05:04 2003 PSCRIPT.HLP A26038 Mon Jul 22 14:05:04 2002 PSCRIPT.NTF A 792644 Mon Jul 22 14:05:04 2002 PSCRIPT5.DLLA 455168 Thu Jun 19 14:05:04 2003 STDNAMES.GPDA14362 Thu Jun 19 14:05:04 2003 TTFSUB.GPD A 698 Mon Jun 7 15:48:52 1999 TTY.BUD A21596 Tue Sep 7 23:22:27 2004 TTY.DLL A 8464 Thu Jun 19 14:05:04 2003 TTY.GPD A12507 Fri Jul 30 16:06:18 1999 TTY.INI A 62 Fri May 8 18:04:12 1998 TTYRES.DLL A39424 Thu Jun 19 14:05:04 2003 TTYUI.DLL A16144 Thu Jun 19 14:05:04 2003 TTYUI.HLP A14318 Thu Oct 7 15:08:06 1999 UNIDRV.DLL A 239104 Thu Jun 19 14:05:04 2003 UNIDRV.HLP A21225 Thu Jun 19 14:05:04 2003 UNIDRVUI.DLLA 197120 Thu Jun 19 14:05:04 2003 UNIRES.DLL A 619520 Thu Jun 19 14:05:04 2003 > If you just had the driver files from Adobe, including the .INF file, that is the issue -- there is no INF, and the files reuired are not in the downloaded/installed driver that I have gotten then you should be able to upload them through the printer wizard just like any other driver... or use cupsaddsmb from the Linux > command line. > > > > -
[Samba] Hot to configure Samba 3 as PDC and BDC for a Windows network
Hi all, I hoping someone out there might be able to tell my how to configure and Samba box to be a PDC and BDC for a windows network? I'd like to use the LDAP backend, but and too new to the Unix world to understand how this is accomplished. Any help would be greatly appreciated. Thanks, Charlie -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.6 Problems w/AD and Kerberos
Ross, Alex wrote: Christian, FYI: win2k SP4 on AD cause Win3K like behavior of forcing Kerberos Ticket sighning http://support.microsoft.com/default.aspx?scid=kb;en-us;811422 So on win2k ad this breaks krb5 before 1.3.x... -Alex -Original Message- From: Christian Merrill [mailto:[EMAIL PROTECTED] Sent: Sunday, September 05, 2004 9:34 AM To: Rick Brown Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Samba 3.0.6 Problems w/AD and Kerberos Rick Brown wrote: On Sun, 5 Sep 2004, Christian Merrill wrote: Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian Merrill wrote: | Running into a lot of people upgrading to the 3.0.6 | package that all of a sudden begin to experience | the "Failed to verify incoming ticket!" errors | etc., that are generally associated with a kerberos | package incompatibility. | | However many of these people are running later | versions of kerberos *and* reverting to a previous | version of Samba appears to fix the issue. Is there | something new setting wise that has taken place, is | something really wrong with this new package, or | is this all just a strange coincidence? I've not been able to reproduce this or track it down. Is there a consensus whether this is an specific issue with using MIT or Heimdal ? Or with Windows 2000 or 2003 DCs ? Any details would be helpful. I've created bug report at https://bugzilla.samba.org/show_bug.cgi?id=1739 Well from my end (Redhat) the behavior is indicative of a known issue with the MIT kerberos 1.2.x packages that we currently support and Win2k3 DC's...however Win2k DC's have been operating fine as far as I know. What I am seeing are customers who were previously running upgrade to the 3.0.6 samba package and then start to encounter these errors. If they downgrade the samba package the problem goes away. I've also noticed a few other posts from users on other distros such as Debian encountering very similar behavior. On the surface it really looks like a kerberos problem, but people are reporting that it seems to be directly linked to the samba package. My current test environment is on 2k3 so I'm still in the process of setting up a 2k AD environment to do testing on...at this point just relaying feedback that I am getting from others. I've seen this problem on a new machine/samba install.. Our DC recently changed from 2k to 2k3, and I believe that might be part of the cause of the problem. I have 2 samba machines (running 3.0.2) that I joined into the realm when our DC was 2k, they still work great. Last week I brought a new machine online (running 3.0.4) joined the realm with no problems, but then proceeded to get the following error: ads_verify_ticket: enc type [3] failed to decrypt with error Decrypt integrity check failed when authenticating.. I've since downgraded to 3.0.2 with no success, and tried upgrading to 3.0.6 with no success. Oh yea, these are solaris 9 boxes with kerberos 1.2.5 (fully patched). Unfortunately I can't upgrade kerberos to 1.3.4 without a bunch of red tape... so that's not an option. IMO, MIT krb is not the problem, as the two existing machines still work fine. I think it might have something to do with the way AD in 2k3 is storing the cifs and host keys. [ Rick Brown ][ (404) 894-6175 ] [ Office of Information Technology ][[EMAIL PROTECTED] ] [ Georgia Institute of Technology ][ 258 4th street. Atlanta, GA ] I think the only accurate test would be in a 2k environment, I have definately seen these issues on 2k3 with the pre 1.3.x kerberos packages regardless of what version of Samba is being used. The behavior I tend to see in a 2k3 environment is that Samba/Kerberos will work quite happily for about 90 days and then the DC will issue a ticket that the older versions of MIT kerberos can't handle. However when using 2k this really didn't appear to be a problem until upgrading to the 3.0.6 versions. Hopefully I'll be able to get a 2k environment setup soon to test against...I don't understand how the Samba package could in any way be responsible for these kerberos-like problems but that is what appears to be the case at this point. I should also mention that Redhat's packages are somewhat different from the actual ones provided by samba.org -- I am mainly looking at this on the RHEL3 platform, however I have seen some similar issues reported by people using other distros. Christian Checking right now to see what SP level the affected customers are on. However if this is true I would have to assume that they are not running SP4 as they are using 1.2.x kerberos packages and (at least according to them) are functional on any version of Samba 3 prior to 3.0.6. Christian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/list
[Samba] create 350 accounts
ho do i create 350 users with samba on debian linux without webmin
is there any script, which creates the useracount, the home-directory,
this script also should be able to delete users
lg joachim
--
{ An Apple a day keeps Windoof away }
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Where are the ADOBE PS Drivers?
Chris McKeever wrote: A - install the ADOBE POSTSCRIPT file onto a windows machine - check B - SHARE that printer - check C - Grab the specified files from the print$ share on the windows machine -- none are there... D - Place them into: /usr/share/cups E - run the cupsaddsmb Maybe John himself will jump in as these instructions sound redundant... and I'm not walking over to the book shelf. Redundant as... if steps a-c post files to print$, then there should be no need for cupsaddsmb as that is the Linux command line equiv of uploading the driver from a Windows client box. If you just had the driver files from Adobe, including the .INF file, then you should be able to upload them through the printer wizard just like any other driver... or use cupsaddsmb from the Linux command line. -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] UID and GID's
Is it possible to have the same uid and gid mappings on multiple machines? This is for NFS mounting. I've searched around and it's not clear to me if it possible. I'm running samba 3.0.6-2, and I have everything working for ADS. Also, I installed SFU so there is a uid and gid field in the AD schema, is there any way I can tell samba to use that instead of using the "idmap uid = 16777216-33554431" declaration? thanks, -tom -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.6 Problems w/AD and Kerberos
Christian, FYI: win2k SP4 on AD cause Win3K like behavior of forcing Kerberos Ticket sighning http://support.microsoft.com/default.aspx?scid=kb;en-us;811422 So on win2k ad this breaks krb5 before 1.3.x... -Alex -Original Message- From: Christian Merrill [mailto:[EMAIL PROTECTED] Sent: Sunday, September 05, 2004 9:34 AM To: Rick Brown Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Samba 3.0.6 Problems w/AD and Kerberos Rick Brown wrote: >On Sun, 5 Sep 2004, Christian Merrill wrote: > > > >>Gerald (Jerry) Carter wrote: >> >> >> >>>-BEGIN PGP SIGNED MESSAGE- >>>Hash: SHA1 >>> >>>Christian Merrill wrote: >>>| Running into a lot of people upgrading to the 3.0.6 >>>| package that all of a sudden begin to experience >>>| the "Failed to verify incoming ticket!" errors >>>| etc., that are generally associated with a kerberos >>>| package incompatibility. >>>| >>>| However many of these people are running later >>>| versions of kerberos *and* reverting to a previous >>>| version of Samba appears to fix the issue. Is there >>>| something new setting wise that has taken place, is >>>| something really wrong with this new package, or >>>| is this all just a strange coincidence? >>> >>>I've not been able to reproduce this or track it down. >>>Is there a consensus whether this is an specific issue >>>with using MIT or Heimdal ? Or with Windows 2000 or >>>2003 DCs ? >>> >>>Any details would be helpful. I've created bug report at >>>https://bugzilla.samba.org/show_bug.cgi?id=1739 >>> >>> >>Well from my end (Redhat) the behavior is indicative of a known issue >>with the MIT kerberos 1.2.x packages that we currently support and >>Win2k3 DC's...however Win2k DC's have been operating fine as far as I >>know. What I am seeing are customers who were previously running >>upgrade to the 3.0.6 samba package and then start to encounter these >>errors. If they downgrade the samba package the problem goes away. >>I've also noticed a few other posts from users on other distros such as >>Debian encountering very similar behavior. >> >>On the surface it really looks like a kerberos problem, but people are >>reporting that it seems to be directly linked to the samba package. My >>current test environment is on 2k3 so I'm still in the process of >>setting up a 2k AD environment to do testing on...at this point just >>relaying feedback that I am getting from others. >> >> > >I've seen this problem on a new machine/samba install.. >Our DC recently changed from 2k to 2k3, and I believe that might >be part of the cause of the problem. I have 2 samba machines (running >3.0.2) that I joined into the realm when our DC was 2k, they still work >great. Last week I brought a new machine online (running 3.0.4) joined >the realm with no problems, but then proceeded to get the following error: > > ads_verify_ticket: enc type [3] failed to decrypt with error Decrypt integrity check failed > >when authenticating.. I've since downgraded to 3.0.2 with no success, >and tried upgrading to 3.0.6 with no success. > >Oh yea, these are solaris 9 boxes with kerberos 1.2.5 (fully patched). >Unfortunately I can't upgrade kerberos to 1.3.4 without a bunch of >red tape... so that's not an option. IMO, MIT krb is not the problem, as >the two existing machines still work fine. I think it might have >something to do with the way AD in 2k3 is storing the cifs and host >keys. > >[ Rick Brown ][ (404) 894-6175 ] >[ Office of Information Technology ][[EMAIL PROTECTED] ] >[ Georgia Institute of Technology ][ 258 4th street. Atlanta, GA ] > > > I think the only accurate test would be in a 2k environment, I have definately seen these issues on 2k3 with the pre 1.3.x kerberos packages regardless of what version of Samba is being used. The behavior I tend to see in a 2k3 environment is that Samba/Kerberos will work quite happily for about 90 days and then the DC will issue a ticket that the older versions of MIT kerberos can't handle. However when using 2k this really didn't appear to be a problem until upgrading to the 3.0.6 versions. Hopefully I'll be able to get a 2k environment setup soon to test against...I don't understand how the Samba package could in any way be responsible for these kerberos-like problems but that is what appears to be the case at this point. I should also mention that Redhat's packages are somewhat different from the actual ones provided by samba.org -- I am mainly looking at this on the RHEL3 platform, however I have seen some similar issues reported by people using other distros. Christian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] CUPS integration does not work properly when not linked
I have a Samba 3.0.6 server and a CUPS 1.2.0 server running on my machine. They have been compiled with: Samba: ./configure --with-pam --with-pam_smbpass --with-quotas --with-sys-quotas CUPS: ./configure --prefix=/usr/local/cups --with-cups-user=cups --with-cups- group=cups --with-docdir=/usr/local/cups/docdir --with- logdir=/usr/local/cups/logdir --with-rcdir=/usr/local/cups/rcdir --enable-ssl As you can see, CUPS lies in an unusual path, so Samba did NOT see the cups- config file and was NOT linked to CUPS. Your documentation states that even without linking it should work fine, however, it doesn't. /etc/printcap contains: === # This file was automatically generated by cupsd(8) from the # /usr/local/cups/etc/cups/printers.conf file. All changes to this file # will be lost. Kyocera_FS-3750|Kyocera_FS-3750:rm=flux:rp=Kyocera_FS-3750: === This is the printer I set up via CUPS. I can print to it using the CUPS web interface (print test page). My /usr/local/samba/lib/smb.conf looks like: === # Samba config file created using SWAT # from 192.168.10.105 (192.168.10.105) # Date: 2004/09/08 17:58:00 # Global parameters [global] workgroup = MYGROUP netbios aliases = FILESERVER server string = Dateiserver security = SHARE passdb backend = tdbsam passwd program = /usr/bin/passwd %u passwd chat = *new*password* %n\n *new*password* %n\n *updated* unix password sync = Yes time server = Yes deadtime = 15 printcap name = cups os level = 65535 preferred master = Yes domain master = Yes ldap ssl = no invalid users = root admin users = flux write list = flux printer admin = flux create mask = 0700 directory mask = 0700 printing = cups print command = /usr/local/cups/bin/lp -c -d%p %s; rm %s lpq command = /usr/local/cups/bin/lpstat -o%p lprm command = /usr/local/cups/bin/cancel %p-%j lppause command = /usr/local/cups/bin/lp -i %p-%j -H hold lpresume command = /usr/local/cups/bin/lp -i %p-%j -H resume queuepause command = /usr/local/cups/bin/disable %p queueresume command = /usr/local/cups/bin/enable %p (and then some file shares follow) === I cannot see the CUPS printers in my list (using Windows and smbclient). There is no chance to print with my Windows clients. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Where are the ADOBE PS Drivers?
On Wed, 08 Sep 2004 14:00:24 -0400, Michael Lueck <[EMAIL PROTECTED]> wrote: > On Wed, 8 Sep 2004 12:48:55 -0500, Chris McKeever wrote: > > >That is what I am going off - and it lists the dozen files that are > >needed, and none of them are listed > > Time out there... Just what exactly is not working? You post to the Samba list: What isnt working is the fact that none of the files that are supposed to be in the share provided by the ADOBE install are there . > > >>And installed the Generic Driver, shared the printer and went > >>the the print$ share > thoughts are clear HOWTO says A - install the ADOBE POSTSCRIPT file onto a windows machine - check B - SHARE that printer - check C - Grab the specified files from the print$ share on the windows machine -- none are there... D - Place them into: /usr/share/cups E - run the cupsaddsmb > which makes me think you are talking about the Windows client, printer wizard > driver upload to print$, etc... I never said I was uploading files to the print server using the APW, all I said was I was trying to find the necessary ADOBE files for use with the cupsaddsmb, which requires an install of the drivers onto a standalone machine -- which could be confusing since you need to get the files off the client that you will eventually be installing again, though this time from the server If I am missing something, I apologize, but I am following the HOWTO as described Now you're talking about /usr/share/cups which > Samba could care less about... I'd suggest you clear your thoughts, clearly > explain your exact problem, and send it to the correct list. > > Michael Lueck > Lueck Data Systems > http://www.lueckdatasystems.com/ > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Where are the ADOBE PS Drivers?
On Wed, 8 Sep 2004 12:48:55 -0500, Chris McKeever wrote: >That is what I am going off - and it lists the dozen files that are >needed, and none of them are listed Time out there... Just what exactly is not working? You post to the Samba list: >>And installed the Generic Driver, shared the printer and went >>the the print$ share which makes me think you are talking about the Windows client, printer wizard driver upload to print$, etc... Now you're talking about /usr/share/cups which Samba could care less about... I'd suggest you clear your thoughts, clearly explain your exact problem, and send it to the correct list. Michael Lueck Lueck Data Systems http://www.lueckdatasystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] New projects
Respected Sir Gerald (Jerry) Carter and Christopher Odenbach, Thanks for your kind suggestion. Basically, I wanted to do a coding project of the graduate level and preferably in either systems (OS like linux or windows) or networking area. Can you now give me your guidance for any of the project idea?or any kind of link to that of project idea page. I myself is searching desparately for the problem statement of the project. It would be so much kind of you if you help me out of this problem earliest. Thank you, Regards, Amar - Do you Yahoo!? New and Improved Yahoo! Mail - Send 10MB messages! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Where are the ADOBE PS Drivers?
On Wed, 08 Sep 2004 13:34:23 -0400, Michael Lueck <[EMAIL PROTECTED]> wrote: > Check the Samba HOWTO on this topic. John specifically points out there are three > different ways to install the driver, only one does it correctly. I believe this > might be what you are bumping into, > but I have no first hand expirence since I read the docs before I dug in. > That is what I am going off - and it lists the dozen files that are needed, and none of them are listed Once you have extracted the driver files, create a "drivers" directory in the CUPS data directory (usually /usr/share/cups) and copy the Adobe files using UPPERCASE filenames, as follows: [Windows 95, 98, and Me] ADFONTS.MFM ADOBEPS4.DRV ADOBEPS4.HLP DEFPRTR2.PPD ICONLIB.DLL PSMON.DLL [Windows NT, 2000, and XP] ADOBEPS5.DLL ADOBEPSU.DLL ADOBEPSU.HLP thanks > -- > Michael Lueck > Lueck Data Systems > > Remove the upper case letters NOSPAM to contact me directly. > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem compiling on solaris 9
I'm trying to compile Samba-3.0.6 on Solaris 9. Config options are --with-ads --with-krb5=/usr/local Using FLAGS = -O -I/usr/local/include -Iinclude -I/usr/local/src/samba-3.0.6/source/include -I/usr/local/src/samba-3.0.6/source/ubiqx -I/usr/local/src/samba-3.0.6/source/smbwrapper -I. -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/local/include -I/usr/local/src/samba-3.0.6/source LIBS = -lsendfile -lsec -lgen -lresolv -lsocket -lnsl -ldl LDSHFLAGS = -G LDFLAGS = Compiling passdb/pdb_ldap.c passdb/pdb_ldap.c: In function `ldapsam_delete_entry': passdb/pdb_ldap.c:274: warning: assignment makes pointer from integer without a cast passdb/pdb_ldap.c: In function `ldapsam_update_sam_account': passdb/pdb_ldap.c:1590: warning: assignment makes pointer from integer without a cast passdb/pdb_ldap.c: In function `ldapsam_add_sam_account': passdb/pdb_ldap.c:1737: warning: assignment makes pointer from integer without a cast passdb/pdb_ldap.c:1785: warning: assignment makes pointer from integer without a cast passdb/pdb_ldap.c: In function `ldapsam_add_group_mapping_entry': passdb/pdb_ldap.c:2188: warning: assignment makes pointer from integer without a cast passdb/pdb_ldap.c: In function `ldapsam_update_group_mapping_entry': passdb/pdb_ldap.c:2273: warning: assignment makes pointer from integer without a cast passdb/pdb_ldap.c: In function `ldapsam_modify_aliasmem': passdb/pdb_ldap.c:2500: warning: assignment makes pointer from integer without a cast passdb/pdb_ldap.c: In function `pdb_init_ldapsam_common': passdb/pdb_ldap.c:2761: incompatible types in assignment passdb/pdb_ldap.c: In function `pdb_init_ldapsam': passdb/pdb_ldap.c:2847: incompatible types in assignment *** Error code 1 make: Fatal error: Command failed for target `passdb/pdb_ldap.o' Any tips and/or assistance would be welcome. --Mark -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Where are the ADOBE PS Drivers?
Check the Samba HOWTO on this topic. John specifically points out there are three different ways to install the driver, only one does it correctly. I believe this might be what you are bumping into, but I have no first hand expirence since I read the docs before I dug in. -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Where are the ADOBE PS Drivers?
I downloaded the drivers from: http://www.adobe.com/support/downloads/product.jsp?product=pdrv&platform=win 7.4MB Adobe Universal PostScript Windows Driver Installer 1.0.6 - English 5/23/2002 And installed the Generic Driver, shared the printer and went the the print$ share - none of the expected files were in there ... any ideas??? DEFPRTR2.BPDA12188 Tue Sep 7 23:27:50 2004 defprtr2.ppdA13492 Tue Apr 23 12:50:10 2002 efisysprint.sep A 3277 Fri Nov 22 01:54:02 2002 efisysprtj.sep A 3640 Fri Nov 22 01:54:04 2002 EFME4320.BPDA61420 Tue Sep 7 22:14:24 2004 EFME4320.bxeA 102400 Tue Jan 7 20:23:48 2003 EFME4320.cntA 1230 Fri Jun 28 23:56:24 2002 EFME4320.dllA81994 Tue Jan 7 20:24:16 2003 EFME4320.extA 532535 Tue Jan 7 20:23:48 2003 EFME4320.finA 1175613 Tue Jan 7 20:23:46 2003 EFME4320.hlpA56090 Tue May 21 23:44:48 2002 EFME4320.iniA 74 Wed Jan 15 02:24:14 2003 EFME4320.lanA 1851449 Tue Jan 7 20:23:48 2003 EFME4320.oemA 2109512 Tue Jan 7 20:24:10 2003 EFME4320.pgeA 4243 Thu Aug 8 18:30:22 2002 EFME4320.PPDA74812 Sat Jan 11 02:18:42 2003 EFME4320.psrA47858 Tue Jan 7 20:24:16 2003 EFME4320.uimA 1855546 Tue Jan 7 20:23:46 2003 ehm10.dll A 421930 Wed Jul 17 10:06:00 2002 ehmbrg.dll A 299051 Wed Jul 17 10:05:40 2002 ehmcore.dll A98348 Wed Jul 17 10:05:20 2002 ehmecol.dll A 155692 Wed Jul 17 10:07:18 2002 ehmefi.dll A 487467 Wed Jul 17 10:06:58 2002 HPLJ4.BUD A39312 Tue Sep 7 20:21:20 2004 HPLJ4.GPD A26569 Fri Jul 30 16:02:58 1999 PCL5ERES.DLLA 676352 Tue Nov 30 01:30:54 1999 PS5UI.DLL A 130048 Thu Jun 19 14:05:04 2003 PSCRIPT.HLP A26038 Mon Jul 22 14:05:04 2002 PSCRIPT.NTF A 792644 Mon Jul 22 14:05:04 2002 PSCRIPT5.DLLA 455168 Thu Jun 19 14:05:04 2003 STDNAMES.GPDA14362 Thu Jun 19 14:05:04 2003 TTFSUB.GPD A 698 Mon Jun 7 15:48:52 1999 TTY.BUD A21596 Tue Sep 7 23:22:27 2004 TTY.DLL A 8464 Thu Jun 19 14:05:04 2003 TTY.GPD A12507 Fri Jul 30 16:06:18 1999 TTY.INI A 62 Fri May 8 18:04:12 1998 TTYRES.DLL A39424 Thu Jun 19 14:05:04 2003 TTYUI.DLL A16144 Thu Jun 19 14:05:04 2003 TTYUI.HLP A14318 Thu Oct 7 15:08:06 1999 UNIDRV.DLL A 239104 Thu Jun 19 14:05:04 2003 UNIDRV.HLP A21225 Thu Jun 19 14:05:04 2003 UNIDRVUI.DLLA 197120 Thu Jun 19 14:05:04 2003 UNIRES.DLL A 619520 Thu Jun 19 14:05:04 2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: 'point-and-print' general questions
On Wed, 8 Sep 2004 12:53:16 +0530, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > > Would like to know which series of TOSHIBA drivers are causing this > problem. > so - anyone know why they are listed twice? 'enumdrivers' [Windows NT x86] Printer Driver Info 1: Driver Name: [TOSHIBA e-STUDIO810 srs-PS3UC] Printer Driver Info 1: Driver Name: [HP LaserJet 4] [Windows NT x86] Printer Driver Info 1: Driver Name: [TOSHIBA e-STUDIO810 srs-PS3UC] Printer Driver Info 1: Driver Name: [HP LaserJet 4] > Regards, > Sandy > > > > > -Original Message- > From: Chris McKeever [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 08, 2004 7:56 AM > To: Sandeep Sundaram (WT01 - EMBEDDED & PRODUCT ENGINEERING SOLUTIONS); > [EMAIL PROTECTED] > Subject: Re: [Samba] Re: 'point-and-print' general questions > > On Mon, 6 Sep 2004 14:50:39 +0530, [EMAIL PROTECTED] > <[EMAIL PROTECTED]> wrote: > > > > Hi, > > > > >I am using SAMBA/CUPS in the raw mode, so each of the printers has > > >its > > own WINDOWS >.drivers --- > > > > >I have been playing with this a bunch - it seems to work when > > >selecting > > APPLY after > > >uploading the drivers - it hangs for a little while, but eventually > > finishes and closes > > >out the dialog box... > > > > > > One possible reason for this could be that the devmode information > > (Printer specific) might not be available and hence you see that delay > > > in the Properties window closing. You could probably confirm this by > > sniffing out the network packets You might see repeated "Open > > Printer" and "Get Printer" calls. You might also see an increase in > > the memory usage by the Samba daemons. > > > > I ran an ethereal...granted this is one of the first times using it - I > didnt seem to find anything as straight forward as what you said to look > for. I did notice that the SMB daemon does crank up on its CPU load > while the conversation is going on. I tried this all with an HP4 and it > seemed to work much smoother - it was when I tried it with a TOSHIBA > that is hangs. Almost 10 minutes waiting after uploading the DRIVER > files and trying to close out of the window using APPLY .. any hints on > ETHEREAL to packet sniff more telling, or why in general this hangs?? > > thanks > > > > > >I am testing this with Windows 2000 - and notieced something rather > > strange..after > > >installing the printer for two different accounts, if I go int oone > > >and > > edit the > > >preferences using an account with PRINT ADMIN priviledges, it > > >actually > > updates the > > >defaults on the other users preferences > > > > Changes made to the printing defaults (Advanced Tab) will be reflected > > > on the other machines where the drivers have been downloaded. Changes > > made to the printing preferences will be local to that machine only. > > > > The settings stored on the Samba server will be reflected in > > "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows > > NT\CurrentVersion\Print\Providers\LanMan Print Services\Servers" > > > > This is what you see when you invoke the Advanced properties. > > > > Sandy > > > > > > > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On > > Behalf Of Chris McKeever > > Sent: Monday, September 06, 2004 6:08 AM > > To: John Hewitt; [EMAIL PROTECTED] > > Subject: Re: [Samba] Re: 'point-and-print' general questions > > > > On Mon, 6 Sep 2004 10:27:30 +1000, John Hewitt <[EMAIL PROTECTED]> > > wrote: > > > What version of windows printer driver are you using? Are you using > > > > the adobe drivers or the cups drivers? I understand the current cups > > > > drivers have some big issues (hanging windows, unable to print > > > landscape) and the cups boys are dumping the current code completely > > > > and writing from scratch for the new 6 version. In the meantime > > > using > > > > > the adobe drivers is advisable. > > > > > > > I am using SAMBA/CUPS in the raw mode, so each of the printers has its > > > own WINDOWS drivers --- > > > > I have been playing with this a bunch - it seems to work when > > selecting APPLY after uploading the drivers - it hangs for a little > > while, but eventually finishes and closes out the dialog box...I can > > also change the name of the printer via that dialog as well, and it > > changes it on the SAMBA server. How one deletes a printer from the > > command line, I am not sure, other than editing the smb.conf and > > removing the specific printer > > > > I am testing this with Windows 2000 - and notieced something rather > > strange..after installing the printer for two different accounts, if I > > > go int oone and edit the preferences using an account with PRINT ADMIN > > > priviledges, it actually updates the defaults on the other users > > preferences --- I dont know if this is just smoe strange things via > > TSRV. From the reading, it sounds like once the driver is installed, > > the server default
Re: [Samba] Samba 3.0.6 Problems w/AD and Kerberos
Rick Brown wrote: On Sun, 5 Sep 2004, Christian Merrill wrote: Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian Merrill wrote: | Running into a lot of people upgrading to the 3.0.6 | package that all of a sudden begin to experience | the "Failed to verify incoming ticket!" errors | etc., that are generally associated with a kerberos | package incompatibility. | | However many of these people are running later | versions of kerberos *and* reverting to a previous | version of Samba appears to fix the issue. Is there | something new setting wise that has taken place, is | something really wrong with this new package, or | is this all just a strange coincidence? I've not been able to reproduce this or track it down. Is there a consensus whether this is an specific issue with using MIT or Heimdal ? Or with Windows 2000 or 2003 DCs ? Any details would be helpful. I've created bug report at https://bugzilla.samba.org/show_bug.cgi?id=1739 Well from my end (Redhat) the behavior is indicative of a known issue with the MIT kerberos 1.2.x packages that we currently support and Win2k3 DC's...however Win2k DC's have been operating fine as far as I know. What I am seeing are customers who were previously running upgrade to the 3.0.6 samba package and then start to encounter these errors. If they downgrade the samba package the problem goes away. I've also noticed a few other posts from users on other distros such as Debian encountering very similar behavior. On the surface it really looks like a kerberos problem, but people are reporting that it seems to be directly linked to the samba package. My current test environment is on 2k3 so I'm still in the process of setting up a 2k AD environment to do testing on...at this point just relaying feedback that I am getting from others. I've seen this problem on a new machine/samba install.. Our DC recently changed from 2k to 2k3, and I believe that might be part of the cause of the problem. I have 2 samba machines (running 3.0.2) that I joined into the realm when our DC was 2k, they still work great. Last week I brought a new machine online (running 3.0.4) joined the realm with no problems, but then proceeded to get the following error: ads_verify_ticket: enc type [3] failed to decrypt with error Decrypt integrity check failed when authenticating.. I've since downgraded to 3.0.2 with no success, and tried upgrading to 3.0.6 with no success. Oh yea, these are solaris 9 boxes with kerberos 1.2.5 (fully patched). Unfortunately I can't upgrade kerberos to 1.3.4 without a bunch of red tape... so that's not an option. IMO, MIT krb is not the problem, as the two existing machines still work fine. I think it might have something to do with the way AD in 2k3 is storing the cifs and host keys. [ Rick Brown ][ (404) 894-6175 ] [ Office of Information Technology ][[EMAIL PROTECTED] ] [ Georgia Institute of Technology ][ 258 4th street. Atlanta, GA ] I think the only accurate test would be in a 2k environment, I have definately seen these issues on 2k3 with the pre 1.3.x kerberos packages regardless of what version of Samba is being used. The behavior I tend to see in a 2k3 environment is that Samba/Kerberos will work quite happily for about 90 days and then the DC will issue a ticket that the older versions of MIT kerberos can't handle. However when using 2k this really didn't appear to be a problem until upgrading to the 3.0.6 versions. Hopefully I'll be able to get a 2k environment setup soon to test against...I don't understand how the Samba package could in any way be responsible for these kerberos-like problems but that is what appears to be the case at this point. I should also mention that Redhat's packages are somewhat different from the actual ones provided by samba.org -- I am mainly looking at this on the RHEL3 platform, however I have seen some similar issues reported by people using other distros. Christian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Rejected posting to WISENET@LISTSERV.UIC.EDU
You are not authorized to send mail to the WISENET list from your [EMAIL PROTECTED] account. You might be authorized to send to the list from another of your accounts, or perhaps when using another mail program which generates slightly different addresses, but LISTSERV has no way to associate this other account or address with yours. If you need assistance or if you have any question regarding the policy of the WISENET list, please contact the list owners: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] FILE LOCK PROBLEM
Hello,
I'm not a list subscriber, so please send messages to
[EMAIL PROTECTED]
First of all, sorry about my bad English.
I'm trying to use a Linux box with samba 3.0.4 configured as an standalone
file server.
I have a Cobol application (AcuCobol) that is running ok on Windows 98
workstations, with data files at Linux.
When I try to run the same application on a Windows 2000 / XP workstation,
the application starts to run, but suddenly it stops working and the cursor
becomes an hourglass. I think that it is because the workstation is waiting
for liberation of a file.
When I start the same application on a Windows 98 workstation at the same
option, the Windows 2000 workstation starts to run again, but it stops again
later (I think that it's because another workstation locks a file).
I tried to disable oplocks at samba and at Windows 2000, but it don't solve
the problem
The same behaviour occurred when I try to use RedHat 9 (Samba 2.2.7a).
When I start running this application with data files on a Windows 2000
Server, it works fine, so for a while :-{
I would have to let the data files on a Windows 2000 Server.
I really need some help. How can I diagnose this problem ?
Please, help me.
I'm using the above smb.conf:
[global]
workgroup = X
netbios name = y
server string = Linux SMB Server
large readwrite = yes
max xmit = 65535
dns proxy = no
printing = cups
local master = no
os level = 70
debug level = 1
printcap name = cups
security = user
add machine script = /usr/sbin/adduser -n -r -g machines -c "Samba
machine" -d /dev/null -s /bin/false %u
getwd cache = yes
max log size = 50
log file = /var/log/samba/%m.log
read raw = yes
load printers = yes
smb passwd file = /etc/samba/smbpasswd
write raw = yes
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8576 SO_RCVBUF=8192
deadtime = 15
client use spnego = yes
username map = /etc/samba/smbusers
interfaces = 192.168.1.1/255.255.255.0
encrypt passwords = yes
winbind use default domain = no
oplock break wait time = 10
passdb backend = smbpasswd
template shell = /bin/false
wins support = yes
preferred master = no
domain logons = no
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
[print$]
path = /var/lib/samba/drivers
guest ok = yes
browseable = yes
read only = yes
write list = root
[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
guest ok = no
writable = no
printable = yes
printer admin = root
[apli]
comment = Diretorio do Sistema
path = /vv/apli
valid users = @vila
public = no
browseable = yes
writable = yes
printable = no
directory mode = 2770
create mask = 0770
create mode = 0770
force create mode = 0770
force directory mode = 2770
force group = vila
# veto oplock files = /*.DAT/*.dat/*.DAD/*.dad/
oplocks = no
level2 oplocks = no
Thanks for any help that can be provided.
Edilson Carlos Belluomini
[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.6 Problems w/AD and Kerberos
On Sun, 5 Sep 2004, Christian Merrill wrote: > Gerald (Jerry) Carter wrote: > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > Christian Merrill wrote: > > | Running into a lot of people upgrading to the 3.0.6 > > | package that all of a sudden begin to experience > > | the "Failed to verify incoming ticket!" errors > > | etc., that are generally associated with a kerberos > > | package incompatibility. > > | > > | However many of these people are running later > > | versions of kerberos *and* reverting to a previous > > | version of Samba appears to fix the issue. Is there > > | something new setting wise that has taken place, is > > | something really wrong with this new package, or > > | is this all just a strange coincidence? > > > > I've not been able to reproduce this or track it down. > > Is there a consensus whether this is an specific issue > > with using MIT or Heimdal ? Or with Windows 2000 or > > 2003 DCs ? > > > > Any details would be helpful. I've created bug report at > > https://bugzilla.samba.org/show_bug.cgi?id=1739 > > Well from my end (Redhat) the behavior is indicative of a known issue > with the MIT kerberos 1.2.x packages that we currently support and > Win2k3 DC's...however Win2k DC's have been operating fine as far as I > know. What I am seeing are customers who were previously running > upgrade to the 3.0.6 samba package and then start to encounter these > errors. If they downgrade the samba package the problem goes away. > I've also noticed a few other posts from users on other distros such as > Debian encountering very similar behavior. > > On the surface it really looks like a kerberos problem, but people are > reporting that it seems to be directly linked to the samba package. My > current test environment is on 2k3 so I'm still in the process of > setting up a 2k AD environment to do testing on...at this point just > relaying feedback that I am getting from others. I've seen this problem on a new machine/samba install.. Our DC recently changed from 2k to 2k3, and I believe that might be part of the cause of the problem. I have 2 samba machines (running 3.0.2) that I joined into the realm when our DC was 2k, they still work great. Last week I brought a new machine online (running 3.0.4) joined the realm with no problems, but then proceeded to get the following error: ads_verify_ticket: enc type [3] failed to decrypt with error Decrypt integrity check failed when authenticating.. I've since downgraded to 3.0.2 with no success, and tried upgrading to 3.0.6 with no success. Oh yea, these are solaris 9 boxes with kerberos 1.2.5 (fully patched). Unfortunately I can't upgrade kerberos to 1.3.4 without a bunch of red tape... so that's not an option. IMO, MIT krb is not the problem, as the two existing machines still work fine. I think it might have something to do with the way AD in 2k3 is storing the cifs and host keys. [ Rick Brown ][ (404) 894-6175 ] [ Office of Information Technology ][[EMAIL PROTECTED] ] [ Georgia Institute of Technology ][ 258 4th street. Atlanta, GA ] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] net getlocalsid
This is the message I am getting when I run netgetlocalsid, can some one explain to me what's going on here and what I need to do to correct it. Thank lib/smbldap.c:smbldap_search_suffix(1126) smbldap_search_suffix: Problem during the LDAP search: (No such object) SID for domain MAIN is: S-1-5-21-2470107187-2724548050-2265896567 Your comments are greatly appreciated Mark -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Groups not recognized
I've got an issue with a fresh (and I mean really fresh) 3.0.5 + ldap server where doesn't seem to recognize unix group membership. The server was 2.2.8a last night and things were working. The unix side works flawlessly, in other words if I log in as myself I can get where I need to, but under samba I get nothing. Here's some supporting info: Ok, apparently this is a solaris-vs.-LDAP issue. I've tested with a machine running Solaris 9 12/02 (that I could reboot) and with anything higher than 112960-03 you can't see supplimentary groups, but with -03 you can do everything like you want to, although the id command never shows all the groups, but I think that's a solaris-ism. Here's the rub, I've got a Solaris 9 8/03 box that has to be upgraded, but that version is post 112960-03. Does anybody know of a way around this??? I'm not completely averse to ripping out sun's nss library, but that's a little more work than this cat likes to do. I think this is bug #395 in bugzilla.samba.org (it's a solaris issue as you state). Is there ANY way to work around this? I know it's a solaris bug, but it doesn't seem to be going away in Sol9, I've tested all versions I can get my hands on with the current patch revs and it's all broken. We've got at least one server that needs to be upgraded to Samba 3 and this is a show stopper for it. If you're running an old version of solaris you can back down to a compatible patch level, but newer ones don't let you, and of course backing out patches isn't the bestest thing in the world if you can avoid it. I'd love to be able to say that it works on Solaris 10 and go with that, but Samba doesn't like to compile on 10 atm and the version of samba they include doesn't include LDAP (as far as I can tell). Any help is appreciated. -- Paul Gienger Office: 701-281-1884 Applied Engineering Inc. Information Systems Consultant Fax:701-281-1322 URL: www.ae-solutions.commailto: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Logging the hostname with a Samba share connection
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Brian Simper wrote: | I am new to Samba but I set up a server and I am trying to get the | logging to my liking. | In /var/log/samba the entries are of the format: | | date.ipaddress.ipaddress | | I would prefer the logging to be: | | date.ipaddress:hostname | | I tried to do this with the /etc/samba/smb.conf setting: | | log file = /var/log/samba/%m:%M:%I.log | | The man page seems to indicate that either %m or %M | should include the hostname but I keep just getting | the IP address only. Set 'hostname lookups = yes' ( and make sure you reverse DNS lookups work correctly). | | I have tried setting "security = user" and I then | get the hostname but it asks for a password to connect | the share. With "security = share" I don't get the | password request but it then only logs the IP address. I don't recommend security = share unless you really know what you are doing and why you want to use it. 'security = user' is much more intuitive. | This is supposed to be a publicly available share. | I don't want to ask for a password but I do want | to get hostname information for See the 'map to guest' parameter and possibly 'force user' cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song"--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBPzEgIR7qMdg1EfYRAnJZAJ46lzfmnrIijElZPaNAcU2qJJ9lhgCgutqp 4Ivnjsjfb2QgR46essogNT4= =iJf4 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] locked files in smbstatus
hello, can anybody explain or point me to a document that explain the locked files section produced by smbstatus -L (see below). what means denymode ? access ? what means exclusive+batch in the oplock section ? can anybody point me to a document explaining the way file locking works ? regards # smbstatus -L Locked files: PidDenyMode Access R/WOplock Name -- 18621 DENY_NONE 0x2019f RDWR EXCLUSIVE+BATCH /share/users/David.Schreiber/Ancillon, Notes.doc Wed Sep 8 14:42:50 2004 9447 DENY_WRITE 0x2019f RDWR EXCLUSIVE+BATCH /share/users/Julie.Valet/mail/attach/Inscription Recto 2004.rtf Wed Sep 8 11:44:49 2004 13412 DENY_WRITE 0x20089 RDONLY EXCLUSIVE+BATCH /share/users/suppr_tmp_users.bat Wed Sep 8 13:10:44 2004 22515 DENY_NONE 0x20089 RDONLY EXCLUSIVE+BATCH ¾W Wed Sep 8 15:22:31 2004 19366 DENY_WRITE 0x20089 RDONLY EXCLUSIVE+BATCH K Wed Sep 8 14:51:40 2004 3782 DENY_NONE 0x20189 RDONLY EXCLUSIVE+BATCH /share/users/Anne.Wettly/mail/attach/Agrippa d'Aubigné.xls Wed Sep 8 11:12:30 2004 8 -- _ Eric LE HENAFF Informaticien auprès des bibliothèques de l'ENS Centre de Ressources Informatiques Ecole Normale Supérieure Paris -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Logging the hostname with a Samba share connection
I am new to Samba but I set up a server and I am trying to get the logging to my liking. In /var/log/samba the entries are of the format: date.ipaddress.ipaddress I would prefer the logging to be: date.ipaddress:hostname I tried to do this with the /etc/samba/smb.conf setting: log file = /var/log/samba/%m:%M:%I.log The man page seems to indicate that either %m or %M should include the hostname but I keep just getting the IP address only. I have tried setting "security = user" and I then get the hostname but it asks for a password to connect the share. With "security = share" I don't get the password request but it then only logs the IP address. This is supposed to be a publicly available share. I don't want to ask for a password but I do want to get hostname information for tracking.With dhcp in use on my network I would have no good clue about which machine is making transactions. Since Windows machines connect to this server I need to know if one of them is inadvertantly passing viruses to me. This is a ProLiant DL 380 running Red Hat Enterprise Linux 3.0. Any ideas? Thanks, -- -Brian [EMAIL PROTECTED] [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.6 Problems w/AD and Kerberos
Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian Merrill wrote: | Running into a lot of people upgrading to the 3.0.6 | package that all of a sudden begin to experience | the "Failed to verify incoming ticket!" errors | etc., that are generally associated with a kerberos | package incompatibility. | | However many of these people are running later | versions of kerberos *and* reverting to a previous | version of Samba appears to fix the issue. Is there | something new setting wise that has taken place, is | something really wrong with this new package, or | is this all just a strange coincidence? I've not been able to reproduce this or track it down. Is there a consensus whether this is an specific issue with using MIT or Heimdal ? Or with Windows 2000 or 2003 DCs ? Any details would be helpful. I've created bug report at https://bugzilla.samba.org/show_bug.cgi?id=1739 cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song"--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBPym1IR7qMdg1EfYRAmY5AJ4s+KBbFv3phU9TJzH4/gegWpBPaQCfU21v pv5nb9vsPWHrJtcNS8zzGgE= =HOe8 -END PGP SIGNATURE- Well from my end (Redhat) the behavior is indicative of a known issue with the MIT kerberos 1.2.x packages that we currently support and Win2k3 DC's...however Win2k DC's have been operating fine as far as I know. What I am seeing are customers who were previously running upgrade to the 3.0.6 samba package and then start to encounter these errors. If they downgrade the samba package the problem goes away. I've also noticed a few other posts from users on other distros such as Debian encountering very similar behavior. On the surface it really looks like a kerberos problem, but people are reporting that it seems to be directly linked to the samba package. My current test environment is on 2k3 so I'm still in the process of setting up a 2k AD environment to do testing on...at this point just relaying feedback that I am getting from others. Christian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.6 Problems w/AD and Kerberos
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian Merrill wrote: | Running into a lot of people upgrading to the 3.0.6 | package that all of a sudden begin to experience | the "Failed to verify incoming ticket!" errors | etc., that are generally associated with a kerberos | package incompatibility. | | However many of these people are running later | versions of kerberos *and* reverting to a previous | version of Samba appears to fix the issue. Is there | something new setting wise that has taken place, is | something really wrong with this new package, or | is this all just a strange coincidence? I've not been able to reproduce this or track it down. Is there a consensus whether this is an specific issue with using MIT or Heimdal ? Or with Windows 2000 or 2003 DCs ? Any details would be helpful. I've created bug report at https://bugzilla.samba.org/show_bug.cgi?id=1739 cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song"--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBPym1IR7qMdg1EfYRAmY5AJ4s+KBbFv3phU9TJzH4/gegWpBPaQCfU21v pv5nb9vsPWHrJtcNS8zzGgE= =HOe8 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] net getlocalsid
This is the message I am getting when I run net getlocalsid, can some one explain to me what's going on here and what I need to do to correct it. Thank lib/smbldap.c:smbldap_search_suffix(1126) smbldap_search_suffix: Problem during the LDAP search: (No such object) SID for domain MAIN is: S-1-5-21-2470107187-2724548050-2265896567 Your comments are greatly appreciated Mark -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] net getlocalsid
This is the message I am getting when I run netgetlocalsid, can some one explain to me what's going on here and what I need to do to correct it. Thank lib/smbldap.c:smbldap_search_suffix(1126) smbldap_search_suffix: Problem during the LDAP search: (No such object) SID for domain MAIN is: S-1-5-21-2470107187-2724548050-2265896567 Your comments are greatly appreciated Mark -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.6 speed problem
Ok, so I straced the same file copy twice, first one with the slow process, second one after a kill HUP command. Then I made a diff and it appeared that, in the first one, there are a lot of "error packet at smbd/notify.c" when doing a "kernel_ckeck_notify"... I don't know what it means but I hope that you will understand it and that you will be able to help me :-)) (It is quite critical in my company...) Regards, Fabrice Robin PS: You will find the strace output files attached to this mail Trace OK: http://fr.f1.pg.briefcase.yahoo.com/bc/dionyweb/vwp2?.tok=bcCbyCUB_h64F3xe&.dir=/Samba3.0.6&.dnm=straceOK.out&.src=bc Traces KO: http://fr.f1.pg.briefcase.yahoo.com/bc/dionyweb/vwp2?.tok=bcCbyCUBBJsrBwku&.dir=/Samba3.0.6&.dnm=straceKO.out&.src=bc - Original Message - From: "Gerald (Jerry) Carter" <[EMAIL PROTECTED]> To: "Fabrice Robin" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Tuesday, September 07, 2004 2:53 PM Subject: Re: [Samba] Samba 3.0.6 speed problem > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Fabrice Robin wrote: > | Hi, > | > | I'm running a samba server version 3.0.6-2.FC2 on > | a Dell PowerEdge 2600 SC RAID5, linux Fedora Core > | 2 (Up to date). > | > | Windows user often experience critical speed problem > | when writing files on a samba share (ex: 19mn for > | a 36 mb file instead of nearly 10s), or printing. > | > | A "top", or "ps -ax", or even samba log files do > | not indicate anything. > | > | I have to make a 'kill -HUP' on their smbd pid in > | order for them to recover a normal writing/printing > | speed !!! > | > | Am I the only one to experience this problem ??? > > Haven't seen this. You could try > > (a) runnign strace on one of the slow process to see if > the smbd process is tied up with something else. > > (b) look at network trace to see if the XP client is > being slow or if there is some other traffic going on. > > Although I will admit that the fact of sending the slow > process a HUP signal restores normal performance is very > strange. > > > > > cheers, jerry > - - > Alleviating the pain of Windows(tm) --- http://www.samba.org > GnuPG Key- http://www.plainjoe.org/gpg_public.asc > "If we're adding to the noise, turn off this song"--Switchfoot (2003) > -BEGIN PGP SIGNATURE- > Version: GnuPG v1.2.4 (GNU/Linux) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iD8DBQFBPa8xIR7qMdg1EfYRAryQAJ4wMsOhMRjFddmLYBUF/pTITnktggCfZJxR > f4zKHZE42F9LKF3IboiW8ZE= > =tFlJ > -END PGP SIGNATURE- > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.6 Problems w/AD and Kerberos
Running into a lot of people upgrading to the 3.0.6 package that all of a sudden begin to experience the "Failed to verify incoming ticket!" errors etc., that are generally associated with a kerberos package incompatibility. However many of these people are running later versions of kerberos *and* reverting to a previous version of Samba appears to fix the issue. Is there something new setting wise that has taken place, is something really wrong with this new package, or is this all just a strange coincidence? Christian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 4
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | Does any one know the status of Samba 4. I was reading | about it on the Samba web site and it sounds really | nice. I am not complaining, just wondering how it is | doing, if they are able to make it smaller with the | web configuration built into the smbd. It will be | so good. Samba 3, I could not believe how much better | it got so when 4 comes out it should just be out of | this world. I also read that they plan to release a 3.5 | which will include as much from 4 as they can. Any info | would be great. I just can't get enough when hearing | about someone that is helping people leave Microsoft. Here's my notes on upcoming plans. http://marc.theaimsgroup.com/?l=samba-technical&m=109254071522084&w=2 You should subcribe to the Samba-technical list if you want to monitor Samba 4 development. cheers, jerry - -- - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song"--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBPxwxIR7qMdg1EfYRAmhzAKDMcRjHiRprY8I+/Y5a5i/61safOACfTzc9 mYNZFLnnsHbpYRA5Sui2OZg= =SYOW -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Sorry, Gerald (Jerry) Carter now please help me
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 MUDRANKIT AMAR wrote: | I am a student of computer science. I have in my | course of study a project to be done. I am interested | in doing project related to Samba. | | I have got one of the ideas for the project. Can | anybody be kindly help me regarding this idea? Please | do reply about this idea. | | In the project I am planning to achieve server | independency , means ---Consider an organization is | having 2 kinds of server SAMBA and NFS, then if a | request is made from a Samba client and required | file is on NFS server then the request should get | satisfied. I will be planning to convert a SAMBA | request into a NFS request that is finally be given | to the NFS server. The client does not care about | the thing that to which server it has made request. Using Samba as a gateway to NFS has been in use for a while. You just NFS mount the remote fs and re-export via Samba. No changes necessary. | | Also, I have to make the similar thing in case of | NFS client and SAMBA server. In this way it will help | the system administrator to achieve a server | independency. Can't say that I would recommend re-export an smbfs or cifsvfs file system via NFS. | If the ideas is not up to the mark, can anybody please | send me a good idea for the project. Better to have | a new idea. Are you looking for network administration projects or coding projects ? cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song"--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBPxcGIR7qMdg1EfYRAsKRAJ4hPBPmB4ul7mUjl/D3kxnq4ZdXIACfdF/n AVIOsle1x7LOMkcEEDdsjmY= =kEav -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba passwords problems
Hi list I have some problems with my samba PDC. 1- The users can't change the password, i have configured: unix password sync passwd program passwd chat Im using whitebox 3.0 with samba 3.0.4-6.3E 2- How can i give privileges to a normal user ? 3- I need some good LDAP tutorial to setting up on my PDC. Thanks in advance Cristhian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] upgrade from 3.0.2a to 3.0.6
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 éric le hénaff wrote: | hello, | i tried to upgrade from 3.0.2a to 3.0.6 tonight. my smb.conf is below. (i | upgraded by apt-get install "samba samba-common winbind" ) | it didnt work : i was asked for a username and password for everything even | when i tried to acces the shares' root with its unc name ( \\server ). | do u have any information on that ? somethng changed in the authentification | ? | my server is a debian sarge on a dell biprocessor. it is a secondary file | server holding homes and groups shares documents. the pdc is a windows nt 4. | regards see the winbind_getpwnam_v1.patch at http://www.samba.org/~jerry/patches/post-3.0.6 instructions for apply are at the top of the file. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song"--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBPxSTIR7qMdg1EfYRAtc/AKCYlc4KvJXNJXRKtlniN2Q58euWTACdHeyQ w6lWpDWHKlT8gGYkHKT0GSQ= =r6AB -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How to Upgrade from 2.2.8a to 3.0.6
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | cd nsswitch | cp libnss_winbind.so /lib Make sure that there is a symlink from /lib/libnss_winbind.so.2 -> /lib/libnss_winbind.so | if I do a directory listing it now looks like this | | | drwxrws--- 22 16043 CITDOM+Domain Admins make sure nscd is not caching previous negative lookups. Also, is 16043 within the winbind uid range ? | If I type chown OP86V op86v it works but is using | a uid of 20266 Hmmm...make sure you set 'winbind enable local accounts = no'. Now run 'getent passwd OP86V'. If you get an entry back, run 'wbinfo -x OP86V'. Now run getent passwd OP86V' again. See if this helps. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song"--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBPxQ5IR7qMdg1EfYRAkrRAKC6d8NtfFZDYS8zLhzVdOvJbimaAwCeOqnb 5bJpON62dlVpIXSghJv/Vv4= =7Uqe -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: 'point-and-print' general questions
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | Chris, | | Ethereal might show it to you as packets from the | "SPOOLSS" protocol or as "DCERPC" packets. If it shows | as SPOOLSS, then you would be able to see the "OpenPrinter" | and "GetPrinter" calls. On the other hand, if the | packets are displayed as DCERPC calls, then you | should be looking at the "Opnum". | | 69 -> OpenPrinter | 8 -> GetPrinter | 29 -> ClosePrinter. The trick is to close all printer windows, stop the client spooler, start ethereal and then restart the client's spooler. This way, ethereal can see the spoolss pipe open and should recognize the spoolss rpcs correctly. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song"--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBPxGHIR7qMdg1EfYRAoKgAJ4jwsvA6JOYWAure62b7vFBTgx5bwCgo6Zc LorIX/mzAK2R+ksaW3YnOu0= =jsNV -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smb.conf syntax
Greetings, When a new file is created it's permissions need to be RWX for all users, as this a lock file is created, edited and deleted after each session... First User on App Creates the File, all users are editing, and the last one off deletes... (Paradox Database) Is this config correct for this scenario? [specworks] browseable = yes comment = SpecWorks Data path = /home/specworks writeable = yes valid users = user1 user2 user3 user4 security mask = 0777 force security mode = 0 directory security mask = 0777 force directory security mode = 0 Do I need a Force User or anything else to accomplish this?? TIA -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba + Exchange 5.5 SP4
Hi. Here's the trace. Server's IP = 172.30.5.15 Client (Exchange) IP = 172.30.2.30 Tanx for your time and patiente. Bruno Guerreiro -Original Message- From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] Sent: Monday, September 06, 2004 12:35 PM To: Bruno Guerreiro Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Samba + Exchange 5.5 SP4 -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bruno Guerreiro wrote: | Hi all. | | Scenario: | Fedora Core 2 | Samba 3.0.6 PDC with ldap | Exchange 5.5 on Win2K SP4 ... | exchange -> pdc: SamrEnumerateAliasesInDomain request | pdc -> exchange: Fault: call_id: 145 ctx_id: 0 status: | nca_s_fault_context_mismatch | exchange -> pdc: Close Request, FID: 0x7499 | pdc -> exchange: Close Response | | End quote Ahhok that makes sense. Can you send me an ethereal trace of the installation process? cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song"--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBPEt9IR7qMdg1EfYRApgxAKDMUMxGyRZoRa9j0ZimbzTtk0yvqwCgiiRu xTBHrkz4op2fEfuZsBwG8O8= =lF0E -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Permission denied after upgrade to FC2
Well, after hearing nothing, and being irritated enough with this problem, I did some exhaustive googling and turned up with this: http://www.redhat.com/archives/fedora-list/2004-June/msg00769.html Apparently there are now 2 security policy changes you must make on a 2003 dc instead of just the one like before. Once I had our Win Admin make the change, I was able to smbmount everything again. / Previous **/ Hello all, hopefully someone has run into this before. I was previously running RH9 with Samba 3.0.2a and would normally mount a document folder to a Win2003 server share. Prior to the upgrade, my mount would work fine, but after upgrading to FC2 (Samba 3.0.5) I now receive "Permission denied" when trying to access the succesfully mounted share. In addition, when I try to 'ls -al' in the mount folder I see: ?- ? ? ? ?? David Also, when I do a 'df' it shows 'Permission denied'. I thought there might be an issue with the version of samba that came with FC2, so I upgraded to the 3.0.6-1 rpm's I downloaded from the samba.org site - no luck. I can access my folder just fine from a Windows XP SP1 client. Nothing has changed in regards to the permissions on my folder or share - its been this way for over a year. On the share Everyone has full control, on the directory permissions, my account and administrators have full control. When I try to mount as administrator, I get the same thing... so I'm guessing a permission bit Windows sends is getting mapped incorrectly. ___ Do you Yahoo!? Win 1 of 4,000 free domain names from Yahoo! Enter now. http://promotions.yahoo.com/goldrush -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] postfix > sasl > pam > winbind
Hi! i hope that the right address. my problem is: i'm using a freebsd-server with postfix and sasl > pam to authentificate users via smtp_auth over a windows-pdc from the syslog, i get the message: User "Michael" granted access, also all wbinfo-command work, my e-mail-programm says: 435 error: authentification failed my debug.log tells me: group, endgrent, not found Apr 20 18:34:57 bert postfix/smtpd[2525]: NSSWITCH(nss_method_lookup): file, hosts, gethostbyaddr, not found Apr 20 18:34:57 bert postfix/smtpd[2525]: NSSWITCH(nss_method_lookup): file, hosts, gethostbyname, not found Apr 20 18:34:57 bert saslauthd[639]: NSSWITCH(nss_method_lookup): winbind, passwd, getpwnam_r, not found Apr 20 18:34:57 bert saslauthd[639]: NSSWITCH(nss_method_lookup): winbind, passwd, getpwnam_r, not found Apr 20 18:34:57 bert saslauthd[639]: DEBUG: auth_pam: pam_authenticate failed: authentication error Apr 20 18:35:00 bert cron[2528]: NSSWITCH(nss_method_lookup): winbind, group, setgrent, not found Apr 20 18:35:00 bert cron[2528]: NSSWITCH(nss_method_lookup): winbind, group, getgrent_r, not found Apr 20 18:35:00 bert cron[2528]: NSSWITCH(nss_method_lookup): winbind, group, endgrent, not found Apr 20 18:35:00 bert cron[2528]: NSSWITCH(nss_method_lookup): winbind, passwd, endpwent, not found Apr 20 18:35:22 bert -su: NSSWITCH(nss_method_lookup): winbind, passwd, endpwent, not found and maillog: Apr 20 18:34:57 bert postfix/smtpd[2525]: smtpd_sasl_authenticate: decoded response: michael Apr 20 18:34:57 bert postfix/smtpd[2525]: smtpd_sasl_authenticate: uncoded challenge: Password: Apr 20 18:34:57 bert postfix/smtpd[2525]: > ernie.bio2.RWTH-Aachen.DE[134.130.63.5]: 334 UGFzc3dvcmQ6 Apr 20 18:34:57 bert postfix/smtpd[2525]: < ernie.bio2.RWTH-Aachen.DE[134.130.63.5]: UjZvYTBmSENUSlBvaA== Apr 20 18:34:57 bert postfix/smtpd[2525]: smtpd_sasl_authenticate: decoded response: $passwort Apr 20 18:34:57 bert postfix/smtpd[2525]: warning: ernie.bio2.RWTH-Aachen.DE[134.130.63.5]: SASL LOGIN authentication failed Apr 20 18:34:57 bert postfix/smtpd[2525]: > ernie.bio2.RWTH-Aachen.DE[134.130.63.5]: 435 Error: authentication failed Apr 20 18:34:58 bert postfix/smtpd[2525]: watchdog_pat: 0x247288 Apr 20 18:35:03 bert postfix/smtpd[2525]: smtp_get: EOF Apr 20 18:35:03 bert postfix/smtpd[2525]: lost connection after AUTH from ernie.bio2.RWTH-Aachen.DE[134.130.63.5] Apr 20 18:35:03 bert postfix/smtpd[2525]: disconnect from ernie.bio2.RWTH-Aachen.DE[134.130.63.5] Apr 20 18:35:03 bert postfix/smtpd[2525]: master_notify: status 1 my configuration is sasl2/smtp.conf : pwcheck_method: saslauthd mech_list: PLAIN LOGIN CRAM_MD5 DIGEST_MD5 log_level: 6 smb.conf: [global] workgroup = Biologie2 netbios name = bert server string = bert security = DOMAIN log file = /var/log/samba/log.%m max log size = 50 load printers = No os level = 20 interfaces = dc0 bind interfaces only = yes winbind uid = 1-2 winbind cache time = 10 template shell = /bin/bash template homedir = winbind gid = 1-2 winbind use default domain = yes winbind separator = + winbind enum users = Yes winbind enum groups = Yes nt acl support = Yes password server = avifauna encrypt passwords = yes socket options = TCP_NODELAY local master = no domain master = no preferred master = no [www] comment = HTTP-Server path = /usr/local/www/data-dist valid users = Administrator public = no writeable = yes printable = no create mask = 0655 /pam.d/smtpd: account sufficient pam_winbind.so debug (tried other settings but made no difference) i also compiled postfix with sasl2-support and smb with nss and started saslauthd -a pam the same works with pam_unix.so so the problem must be the winbind-module how i have no idea how i can solve that problem, i pray for help! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problems with 'ntlm_auth --require-membership-of' using Samba 3.0.6
On Tue, 2004-09-07 at 23:08, Matt Doran wrote: > Hi there, > > I'm trying to configure Squid to use a windows domain for > authentication, and all goes well until I add the > "--require-membership-of" option on ntlm_auth. I need to restrict > access based on group membership, however ntlm_auth does not seem to be > behaving correctly. I'm using Samba 3.0.6 on Debian and I'm using a > Windows 2000 (SP4) Domain Controller. I configured winbind as discussed > here: http://www.squid-cache.org/Doc/FAQ/FAQ-23.html#ss23.5 > > ntlm_auth seems to report the membership of some groups correctly, but > incorrectly for others. You are actually lucky it didn't segfault. There are a number of logic bugs, the fixes for which I think didn't make 3.0.6. Try current SVN, but I suspect we might need some extra code to correctly pick up the universal groups. (We know how to do it, so it's a simple matter of programming - bug #1562.) Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Authentication Developer, Samba Teamhttp://samba.org Student Network Administrator, Hawker College [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: curious behavior
Check to see if the affected ID is affected on all workstations... If so -> Check for syntax errors in /etc/group If not -> Then... Are all ID's affected on the one computer? If so and you are doing PDC -> Consider the possability that your PDC machine account stuff is unhappy. Remove the machine entry from /etc/passwd and /etc/samba/smbpasswd and rejoin the domain (assuming you have a vaild add computer script) Just some random thoughts... -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Mail Delivery (failure info@membershipplus.net)
This is automated reply to your email. You have sent an email to an address that is no longer used at Membership+ Your email has not been received by anyone at Membership+. We apologize for this inconvenience. If you are trying to contact someone at Membership+, please visit our support page located online at http://www.membershipplus.net/support.shtml Also, if you could, please let us know which email address you were trying to contact us at, and where you obtained that email address. Thank you for contacting Membership+. Membership+ Staff http://www.membershipplus.net -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] curious behavior
Howdy People, I have a small problem with my redhat9-samba3.05 setup. I have various shares which have access to them by valid user = @unixgroup Some of the users in any particular group can get access whilst others cant. The curious thing is that this setup worked happily for some months and then, suddenly, it doesn't. I am now forced to list the users indivdually . I am open to ideas . Any and all help appreciated. Greg Andrews System Manager RGTechnologies Pty Ltd 606 Skipton Street Ballarat 3350 613 53363603 0417 511 731 [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Printing an extra blank page all the time.
On 7 Sep 2004 , Craig Hammond entreated about "[Samba] Printing an extra blank page all the time": } Hi, } I'm trying out using samba as a print server for the first time, and it } works ok, but I have this problem where everytime I print anything, a } additional blank page comes out of the printer at the end of what was } just printed. yup, same here, 3 print servers and they all do it and I was just asking myself the question when i found your query, so I did a web search } It's an old HP Laserjet 4 connected to the parallel port of the samba } server. I've got a IIp, and 4000/4100/2200, and they'll all do it. } /etc/printcap } lp|HP4|HP Laserjet 4:\ } :sh:lp=/dev/lpt0:sd=/var/spool/output:lf=/var/log/lpd-errs: add to that ff=: This tell LPD that the FormFeed string is null. It 'always' sends a formfeed after a job, but if the formfeed is null, the printer won't feed. So it is in effect a LPD/BSD printing 'feature' I found this answer at http://www.vttoth.com/sambaff.htm and have just tested it and it works just fine now. } smb.conf not a smb problem... -- DA Fo rsythNetwork Supervisor Principal Technical Officer -- Institute for Water Research http://www.ru.ac.za/institutes/iwr/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] 2 HD, same PC
Behalf Of Bryan Peifer > I have two hard drives on one PC. One is a Windows XP drive and the > other is a Linux (redhat 9.0) drive. I want Linux to recognize and > share files on the XP drive. Where is there documentation addressing > this situation? Because now I work mostly with my Linux > environment, I > wanted to access the XP drive from Linux. As an alternative to mounting your Windows partition under Linux, you can run colinux under Windows. You then have both OSes running at the same time. Since colinux has a virtual network card you can then use samba to mount the shared Windows partition under colinux. You can set up colinux to mount a native Linux partition as its / partition. I currently do this with a native Fedora Core 2 install. By enabling XMDCP on the X display manager and using the cygwin X server I get the same graphical work environment as under a native Linux boot. Getting colinux set up isn't that difficult and I've been amazed at colinux performance. As I re-read the previous paragraph before sending I would have to admit that getting NTFS support in the Linux kernel may be easier, but what does that have to do with samba? :-) Tony Richardson -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Postfix > sasl2 > pam > winbind
Hi! i hope that the right address. my problem is: i'm using a freebsd-server with postfix and sasl > pam to authentificate users via smtp_auth over a windows-pdc from the syslog, i get the message: User "Michael" granted access, also all wbinfo-command work, my e-mail-programm says: 435 error: authentification failed my debug.log tells me: group, endgrent, not found Apr 20 18:34:57 bert postfix/smtpd[2525]: NSSWITCH(nss_method_lookup): file, hosts, gethostbyaddr, not found Apr 20 18:34:57 bert postfix/smtpd[2525]: NSSWITCH(nss_method_lookup): file, hosts, gethostbyname, not found Apr 20 18:34:57 bert saslauthd[639]: NSSWITCH(nss_method_lookup): winbind, passwd, getpwnam_r, not found Apr 20 18:34:57 bert saslauthd[639]: NSSWITCH(nss_method_lookup): winbind, passwd, getpwnam_r, not found Apr 20 18:34:57 bert saslauthd[639]: DEBUG: auth_pam: pam_authenticate failed: authentication error Apr 20 18:35:00 bert cron[2528]: NSSWITCH(nss_method_lookup): winbind, group, setgrent, not found Apr 20 18:35:00 bert cron[2528]: NSSWITCH(nss_method_lookup): winbind, group, getgrent_r, not found Apr 20 18:35:00 bert cron[2528]: NSSWITCH(nss_method_lookup): winbind, group, endgrent, not found Apr 20 18:35:00 bert cron[2528]: NSSWITCH(nss_method_lookup): winbind, passwd, endpwent, not found Apr 20 18:35:22 bert -su: NSSWITCH(nss_method_lookup): winbind, passwd, endpwent, not found and maillog: Apr 20 18:34:57 bert postfix/smtpd[2525]: smtpd_sasl_authenticate: decoded response: michael Apr 20 18:34:57 bert postfix/smtpd[2525]: smtpd_sasl_authenticate: uncoded challenge: Password: Apr 20 18:34:57 bert postfix/smtpd[2525]: > ernie.bio2.RWTH-Aachen.DE[134.130.63.5]: 334 UGFzc3dvcmQ6 Apr 20 18:34:57 bert postfix/smtpd[2525]: < ernie.bio2.RWTH-Aachen.DE[134.130.63.5]: UjZvYTBmSENUSlBvaA== Apr 20 18:34:57 bert postfix/smtpd[2525]: smtpd_sasl_authenticate: decoded response: $passwort Apr 20 18:34:57 bert postfix/smtpd[2525]: warning: ernie.bio2.RWTH-Aachen.DE[134.130.63.5]: SASL LOGIN authentication failed Apr 20 18:34:57 bert postfix/smtpd[2525]: > ernie.bio2.RWTH-Aachen.DE[134.130.63.5]: 435 Error: authentication failed Apr 20 18:34:58 bert postfix/smtpd[2525]: watchdog_pat: 0x247288 Apr 20 18:35:03 bert postfix/smtpd[2525]: smtp_get: EOF Apr 20 18:35:03 bert postfix/smtpd[2525]: lost connection after AUTH from ernie.bio2.RWTH-Aachen.DE[134.130.63.5] Apr 20 18:35:03 bert postfix/smtpd[2525]: disconnect from ernie.bio2.RWTH-Aachen.DE[134.130.63.5] Apr 20 18:35:03 bert postfix/smtpd[2525]: master_notify: status 1 my configuration is sasl2/smtp.conf : pwcheck_method: saslauthd mech_list: PLAIN LOGIN CRAM_MD5 DIGEST_MD5 log_level: 6 smb.conf: [global] workgroup = Biologie2 netbios name = bert server string = bert security = DOMAIN log file = /var/log/samba/log.%m max log size = 50 load printers = No os level = 20 interfaces = dc0 bind interfaces only = yes winbind uid = 1-2 winbind cache time = 10 template shell = /bin/bash template homedir = winbind gid = 1-2 winbind use default domain = yes winbind separator = + winbind enum users = Yes winbind enum groups = Yes nt acl support = Yes password server = avifauna encrypt passwords = yes socket options = TCP_NODELAY local master = no domain master = no preferred master = no [www] comment = HTTP-Server path = /usr/local/www/data-dist valid users = Administrator public = no writeable = yes printable = no create mask = 0655 /pam.d/smtpd: account sufficient pam_winbind.so debug (tried other settings but made no difference) i also compiled postfix with sasl2-support and smb with nss and started saslauthd -a pam the same works with pam_unix.so so the problem must be the winbind-module how i have no idea how i can solve that problem, i pray for help! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] machine account with w2k
Dear Samba Friends, I've a problem to join with Windows2000-Clients a Samba-PDC. When I join the samba-pdc with a WinNT4.0-Client it is no problem, first I create a machine-account for the machine: 1. in /etc/group exists the group: machines:x:515: 2. useradd -g machines -d /dev/null -c nickname -s /bin/false neuch205$ 3. pdbedit -a -m -u neuch205 In this way, it isn't a problem to join the PDC with WinNT4.0-Clients, only that I log in as Administrator into the Windows-machine and give in the domainname an, then the client answers, without password-asking, I should reboot and the client joined successfully. When I try to do the same, I get an asking for an password. Ok, for that I created the user "domadmin" on the Samba as a member of the "Domain Adminstrators", but this user is not accepted from the W2K-Client. I can not understand why not. Normally it should going on. Please have a look of my documentation about this: -- Heinz Allerberger Systemadministrator Zentrum Neurologie Universitätsklinikum Frankfurt am Main Tel: 069/6301-4274 Fax: 069/6301-6842 Piepser 18-0455 # Samba config file # [EMAIL PROTECTED] # Date: 2004/09/03 # Global parameters [global] unix charset = ISO8859-1 workgroup = NEUROCH server string = %h server (Samba %v) preferred master = Yes domain master = Yes local master = yes os level = 33 # entspricht NT Server dns proxy = No ldap ssl = no security = user encrypt passwords = yes update encrypted = Yes obey pam restrictions = Yes passdb backend = tdbsam, guest passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n . invalid users = root domain logons = Yes logon path = \\%N\profiles\%U logon drive = H: logon home = \\neuch240\%U\.winprofile logon script = logon.cmd add machine script = /usr/sbin/useradd -g machines -d /dev/null -s /bin/false -M %u add user script = /usr/sbin/useradd "%u" delete user script = /usr/sbin/userdel "%u" add group script = /usr/local/bin/smbgrpadd.sh "%g" delete group script = /usr/sbin/groupdel "%g" add user to group script = /usr/bin/gpasswd -a "%u" "%g" delete user from group script = /usr/bin/gpasswd -d "%u" "%g" set primary group script = /usr/sbin/usermod -g "%g" "%u" syslog = 0 log file = /var/log/samba/log.%m max log size = 1000 panic action = /usr/share/samba/panic-action %d [netlogon] path = /var/lib/samba/netlogon read only = yes browseable = no [profiles] path = /var/lib/samba/profiles read only = no create mask = 0600 directory mask = 0700 browseable = No [homes] comment = Home Directories read only = No create mask = 0755 browseable = No [shared] comment = shared Directory path = /home/shared read only = No create mask = 0777 browseable = no [printers] comment = All Printers path = /tmp create mask = 0700 printable = Yes browseable = No [print$] comment = Printer Drivers path = /var/lib/samba/printers Unix username:neuch205$ NT username: Account Flags:[W ] User SID: S-1-5-21-1656000120-2433418590-619812953-4006 Primary Group SID:S-1-5-21-1656000120-2433418590-619812953-515 Full Name:neuch205$ Home Directory: \\neuch240\neuch205_\.winprofile HomeDir Drive:H: Logon Script: logon.cmd Profile Path: \\neuch240\profiles\neuch205_ Domain: NEUROCH Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Fri, 13 Dec 1901 21:45:51 GMT Kickoff time: Fri, 13 Dec 1901 21:45:51 GMT Password last set:Wed, 08 Sep 2004 10:26:17 GMT Password can change: Wed, 08 Sep 2004 10:26:17 GMT Password must change: Fri, 13 Dec 1901 21:45:51 GMT Last bad password : 0 Bad password count : 0 Logon hours : FF Unix username:domadmin NT username: Account Flags:[U ] User SID: S-1-5-21-1656000120-2433418590-619812953-2000 Primary Group SID:S-1-5-21-1656000120-2433418590-619812953-512 Full Name: Home Directory: \\neuch240\domadmin\.winprofile HomeDir Drive:H: Logon Script: logon.cmd Profile Path: \\neuch240\profiles\domadmin Domain: NEUROCH Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Fri, 13 Dec 1901 21:45:51 GMT Kickoff time: Fri, 13 Dec 1901 21:45:51 GMT Password last set:Fri, 03 Sep 2004 11:18:37 GMT Password can change: Fri, 03 Sep 2004 11:18:37 GMT Password must change:
Re: [Samba] SIDs , RIDs & UIDs
> Hi , I want to understand the above terms , where can I find good > doucmentation please ? Any decent UNIX administration text, any decent NT administration text. Or ftp://ftp.kalamazoolinux.org/pub/pdf/CIFSnPOSIX.pdf -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SIDs , RIDs & UIDs
Hi , I want to understand the above terms , where can I find good doucmentation please ? Thanks . Visit us at http://www.zahid.com Legal Disclaimer The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying, or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba 3 share folder
Hello all, I just migrate a samba 2.2 in a workgroup to a samba 3.0.4 (with kerberos & winbind) into active directory 2003. It runs on a debian woody with a 2.4.23. Everything is working fine except 3 things: 1) Every user has his personal home folder under samba (it worked before in domain). [users] comment = Strict Personnal Directory (no share) path = /shr/user/%u admin users = CARDS+Domain Admins browseable = yes public = yes writable = yes Since it's in the ads, every user receives "network access is denied". I can't find the exact way to set up that. 2) The server with the new samba( let's call it S1) mount a share from another linux server (S2). This mountdirectory (M1) is into a folder wich is also a share. A windows server pull M1 to see if there are new files on S2. So, it's using a login wich is authenticated trough the ads. I set up the same login and same pass on all servers. On S2, the rights of the files are rw-rw-rw. On S1, these files got rwx-rx-rx. And the windows server cannot delete the files ( we need to delete it). Probably cause there are no rights to write. I configured the creation mode etc in the config of both samba in 777. I try to change unix permissions on these files, it doesn't work. Any idea? 3) Since S1 is into the ads, the name of the folders under the shares wich got an "accent" (like é or è) are remplaced by a little square. Something like a locales problem into samba? Thnx in advance, BM -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: 'point-and-print' general questions
Chris, Ethereal might show it to you as packets from the "SPOOLSS" protocol or as "DCERPC" packets. If it shows as SPOOLSS, then you would be able to see the "OpenPrinter" and "GetPrinter" calls. On the other hand, if the packets are displayed as DCERPC calls, then you should be looking at the "Opnum". 69 -> OpenPrinter 8 -> GetPrinter 29 -> ClosePrinter. If you are able to see these repeatedly, on clicking the APPLY button, then it *COULD* be a problem with the entries in the TDB file. (or rather the lack of entries...) As you have already gathered, this is specific to certain drivers.. Mainly due to the way they have been designed / coded. Some drivers are dependent on the correct "Private Devmode" data to be given by the Printer server (Samba in our case). The Private devmode is data pertaining to the capabilities of the driver and hence there is no standard / specifications attributed to this (AFAIK !!). So, if this data is not available or is incomplete then some of the drivers go into an insane loop of querying the server for these settings. I have noticed this while downloading the drivers. I had used the rpcclient utility to upload the drivers on to the Samba server. After downloading, some times the property window used to take ages to come up. Even on clicking the Apply button, it used to take about 10 minutes for the UI to close. But this was only on the first or second download. Once the entries were made in the TDB, everything worked smoothly. One possible work around for this is to use the rpcclient tool with the "SetPrinter" and "SetPrinterData" commands, provided you already know what entries need to be set. This will demand a small tweak in the rpcclient sources. Would like to know which series of TOSHIBA drivers are causing this problem. Regards, Sandy -Original Message- From: Chris McKeever [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 08, 2004 7:56 AM To: Sandeep Sundaram (WT01 - EMBEDDED & PRODUCT ENGINEERING SOLUTIONS); [EMAIL PROTECTED] Subject: Re: [Samba] Re: 'point-and-print' general questions On Mon, 6 Sep 2004 14:50:39 +0530, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > Hi, > > >I am using SAMBA/CUPS in the raw mode, so each of the printers has > >its > own WINDOWS >.drivers --- > > >I have been playing with this a bunch - it seems to work when > >selecting > APPLY after > >uploading the drivers - it hangs for a little while, but eventually > finishes and closes > >out the dialog box... > > > One possible reason for this could be that the devmode information > (Printer specific) might not be available and hence you see that delay > in the Properties window closing. You could probably confirm this by > sniffing out the network packets You might see repeated "Open > Printer" and "Get Printer" calls. You might also see an increase in > the memory usage by the Samba daemons. > I ran an ethereal...granted this is one of the first times using it - I didnt seem to find anything as straight forward as what you said to look for. I did notice that the SMB daemon does crank up on its CPU load while the conversation is going on. I tried this all with an HP4 and it seemed to work much smoother - it was when I tried it with a TOSHIBA that is hangs. Almost 10 minutes waiting after uploading the DRIVER files and trying to close out of the window using APPLY .. any hints on ETHEREAL to packet sniff more telling, or why in general this hangs?? thanks > > >I am testing this with Windows 2000 - and notieced something rather > strange..after > >installing the printer for two different accounts, if I go int oone > >and > edit the > >preferences using an account with PRINT ADMIN priviledges, it > >actually > updates the > >defaults on the other users preferences > > Changes made to the printing defaults (Advanced Tab) will be reflected > on the other machines where the drivers have been downloaded. Changes > made to the printing preferences will be local to that machine only. > > The settings stored on the Samba server will be reflected in > "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows > NT\CurrentVersion\Print\Providers\LanMan Print Services\Servers" > > This is what you see when you invoke the Advanced properties. > > Sandy > > > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Chris McKeever > Sent: Monday, September 06, 2004 6:08 AM > To: John Hewitt; [EMAIL PROTECTED] > Subject: Re: [Samba] Re: 'point-and-print' general questions > > On Mon, 6 Sep 2004 10:27:30 +1000, John Hewitt <[EMAIL PROTECTED]> > wrote: > > What version of windows printer driver are you using? Are you using > > the adobe drivers or the cups drivers? I understand the current cups > > drivers have some big issues (hanging windows, unable to print > > landscape) and the cups boys are dumping the current code completely > > and writing from scratch for the new 6 version. In the meantime > > using > > > the adobe drivers is advi
