[Samba] Where to find the CUPS-SAMBA client drivers for Win2K/XP?
Hi all! I'm studying the book "The Official Samba 3 HOWTO and Reference Guide", and now want to set up my samba server cooperated with CUPS to provide network printing. I want to download the "CUPS 1.1.x Windows NT/200x/XP Printer Driver for Samba", however now I cannot find out where such drivers are. I cannot download it neither from http://www.cups.org/software.php nor from http://www.easysw.com/software.php I also searched on google but couldn't find out something helpful. Could you please tell me where to get such drivers now? Thanks! Best Regards, Frank -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbmount, max_xmit and block size negotiation
Hi, I am wondering what the right way is to have smbmount negotiate a block size value of more than 4kB with the Samba server. I cannot seem to let smbmount understand the value I want it to use. I assumed first it gets this from smb.conf, and by adding DEBUG() info to the code and printing c->max_xmit, that's what it is using in smbmount.c. I also tried influencing the number using the sockopt smbmount option, but with no effect. The smbd itself is using max xmit of either 65535 or 32384. Neither seem to have an effect on the negotiation. The resulting connection (from Linux to Linux) seems to always use 4kB blocks. I'm debugging this with: tethereal -c 100 -i bond0 port 445 How can I debug the actual negotiating process ? Wouldn't it be useful to have ethereal display this information, or is this already visible somehow ? Any help would be very welcome. If smbmount is not able to use anything other than 4kB blocks, would a patch to add a max_xmit option to smbmount be accepted ? PS I noticed that the 2.0.2 smbmount option had a -m switch for defining max_xmit, but in 2.0.3 it was removed. I'm using 3.0.9 myself. Thanks in advance, -- dag wieers, [EMAIL PROTECTED], http://dag.wieers.com/ -- [Any errors in spelling, tact or fact are transmission errors] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] (no subject)
Do you want a cheap Watch? http://trl.afeet.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] trouble connecting to domain controller
If I'm not mistaken you need to use the NT Server Administration Tools. They can be downloaded from the Microsoft site. (SRVMGR.EXE) Thanks -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] n Behalf Of André Ventura Lemos Sent: Thursday, 25 November 2004 1:29 PM To: [EMAIL PROTECTED] Subject: [Samba] trouble connecting to domain controller When trying to connect to the "Domain Controller" via the "Active Directory Users and Computers" on Windows, I get that "cannot connect to the pre-windows 2000 domain controller" under Windows, and the following on Samba's logs: [2004/11/25 02:21:11, 5] smbd/filename.c:unix_convert(328) New file netshellicon [2004/11/25 02:21:11, 3] smbd/trans2.c:call_trans2qfilepathinfo(2371) call_trans2qfilepathinfo: SMB_VFS_STAT of netshellicon failed (No such file or directory) [2004/11/25 02:21:11, 3] smbd/error.c:error_packet(105) error string = No such file or directory [2004/11/25 02:21:11, 3] smbd/error.c:error_packet(129) error packet at smbd/trans2.c(2240) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND Help? Ps.: at this point samba is already acting as a PDC, and am logged on as Administrator (on the samba domain) on the windows machine while doing the previous operations. -- Netiquette -> http://www.ietf.org/rfc/rfc1855.txt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] trouble connecting to domain controller
When trying to connect to the "Domain Controller" via the "Active Directory Users and Computers" on Windows, I get that "cannot connect to the pre-windows 2000 domain controller" under Windows, and the following on Samba's logs: [2004/11/25 02:21:11, 5] smbd/filename.c:unix_convert(328) New file netshellicon [2004/11/25 02:21:11, 3] smbd/trans2.c:call_trans2qfilepathinfo(2371) call_trans2qfilepathinfo: SMB_VFS_STAT of netshellicon failed (No such file or directory) [2004/11/25 02:21:11, 3] smbd/error.c:error_packet(105) error string = No such file or directory [2004/11/25 02:21:11, 3] smbd/error.c:error_packet(129) error packet at smbd/trans2.c(2240) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND Help? Ps.: at this point samba is already acting as a PDC, and am logged on as Administrator (on the samba domain) on the windows machine while doing the previous operations. -- Netiquette -> http://www.ietf.org/rfc/rfc1855.txt signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Publish printer into ADS
Hi, I'd like to publish the printer queues on a SAMBA server to a Win2k native mode ADS. Apparently, the command fails due to NT_STATUS_LOGON_FAILURE--the output below is when run as root. # net ads printer publish "tall" -d 2 [2004/11/24 17:28:37, 2] lib/interface.c:add_interface(79) added interface ip=192.168.1.5 bcast=192.168.1.255 nmask=255.255.255.0 [2004/11/24 17:28:37, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(538) Doing kerberos session setup [2004/11/24 17:28:37, 1] libsmb/cliconnect.c:cli_full_connection(1464) failed session setup with NT_STATUS_LOGON_FAILURE Unable to open a connnection to BERTHA to obtain data for tall [2004/11/24 17:28:37, 2] utils/net.c:main(792) return code = -1 However, smbclient is able to connect just fine: # smbclient //192.168.1.5/adam -Uadam Password: Domain=[BDTI] OS=[Unix] Server=[Samba 3.0.7-1.3E] smb: \> The printer is a valid queue on this server: # net rap printq Password: Print queues at \\127.0.0.1 Name Job # SizeStatus --- copierQueue 0 jobs *Printer Active* scratch Queue 0 jobs *Printer Active* tall Queue 0 jobs *Printer Active* Any ideas welcome. Thanks, -Adam -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RE: Winbind and changing directories
> However, cd ~user doesn't work anymore. I guess I expected > the cd built-in command for bash or tcsh to use getent to > locate the user directory, but it doesn't seem to. This is > going to be inconvenient for everyone. OK, I should RTFM ... by adding winbind use default domain = yes to my smb.conf, cd ~username works as I want it to. -Adam -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] VFS module to block directory listing
Hi, I wonder if it is posible to write a VFS module to block the listing of directory in a share? The files inside the directory should be accesible for read/write operations, but should be able to list the files in the directory. Is that posible? Many thanks Oliver -- Oliver Schulze L. <[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] upgrading print server from 2.2.8a to 3.0.8 - more info
I found it necessary to completely erase the /usr/local/samba/var/locks directory when upgrading from 2.2.x to 3.0 on solaris. Samba rebuilds all these tbd files when it restarts if necessary...also sometimes had to do this when upgrading between various releases of 3.0.x. Seemed to fix probs with clients losing connections to shares or printers... Mike M. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] vampire fails because of Debian smbldap-tools problem
On Wednesday 24 November 2004 16:44, Alex Satrapa wrote: > On 25 Nov 2004, at 10:09, John H Terpstra wrote: > > On Wednesday 24 November 2004 15:30, tom burkart wrote: > >> The other really useful thing I found while looking for the above > >> reference is in the Samba-Guide/happy.html#id2536161 where in the > >> note it > >> says that having separate containers for users and computers does not > >> yet > >> work, yet examples appear to use this (hence I got the crazy idea it > >> should just work and it didn't). > > > > Smile. :) It can be made to work by moving the basedn up the tree. The > > performance impact works against that. > > Another option is to add a new ou into the tree - I can't remember > where I read this idea: > > dc=example,dc=com > >+ ou=Accounts > > + ou=People > > + ou=Computers > > That way you can limit the search to ou=Account,dc=example,dc=com, and > still separate Computer accounts from People accounts. Precisely how does this help? What is the benefit? You still need to be able to resolve BOTH machine accounts AND user accounts via NSS. There is only one vehicle that is the mechanism for user account resolution - the NSS entry for passwd. This is achieved through ldap.conf by specifying the nss_base_passwd entry. No matter how you cut your cake with this, the machine accounts _AND_ the user accounts must be listed by: getent passwd So - why separate them? What is the gain? - John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] vampire fails because of Debian smbldap-tools problem
On Wednesday 24 November 2004 17:00, Geoff Scott wrote: > > The issue of this thread was authenticating machine accounts if I > > remember correctly... > > No I was just having a hard time getting the smbldap tools to work > properly. It all came down to me not knowing at what point you switch from > chapter 6 of the example book to chapter 8 to vampire accounts of the NT > server. Of course if you vampire accounts straight after you use the > preload.ldif then you end up with different GID's than what the smbldap > tools expect in their defaults. therefore the vampire fails as the expected > GID for the group is different to what vampire sets up as it creates the > groups from the NT server. > It would be nice if John could add to chapter 8 something like: Build the > Base server the same as in Chapter 6 including step ? "using the > smbldap-populate script" then continue with vampiring the accounts. I'll consider this when I do the update in January. Cheers, John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] vampire fails because of Debian smbldap-tools problem
> The issue of this thread was authenticating machine accounts if I remember > correctly... > No I was just having a hard time getting the smbldap tools to work properly. It all came down to me not knowing at what point you switch from chapter 6 of the example book to chapter 8 to vampire accounts of the NT server. Of course if you vampire accounts straight after you use the preload.ldif then you end up with different GID's than what the smbldap tools expect in their defaults. therefore the vampire fails as the expected GID for the group is different to what vampire sets up as it creates the groups from the NT server. It would be nice if John could add to chapter 8 something like: Build the Base server the same as in Chapter 6 including step ? "using the smbldap-populate script" then continue with vampiring the accounts. Regards Geoff -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba connection through NT 4.0 explorer
Hi my name is kiran and im a Digpal too, iv'e just typed in the surname because i was curious to find out what i will find and it been interesting so far. If you have the same surname as i do, does that mean were related? Email me if u can. [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] vampire fails because of Debian smbldap-tools problem
On 25 Nov 2004, at 10:09, John H Terpstra wrote: On Wednesday 24 November 2004 15:30, tom burkart wrote: The other really useful thing I found while looking for the above reference is in the Samba-Guide/happy.html#id2536161 where in the note it says that having separate containers for users and computers does not yet work, yet examples appear to use this (hence I got the crazy idea it should just work and it didn't). Smile. :) It can be made to work by moving the basedn up the tree. The performance impact works against that. Another option is to add a new ou into the tree - I can't remember where I read this idea: dc=example,dc=com | + ou=Accounts | + ou=People | + ou=Computers That way you can limit the search to ou=Account,dc=example,dc=com, and still separate Computer accounts from People accounts. HTH Alex -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] vampire fails because of Debian smbldap-tools problem
On Nov 24, John H Terpstra wrote: The other really useful thing I found while looking for the above reference is in the Samba-Guide/happy.html#id2536161 where in the note it says that having separate containers for users and computers does not yet work, yet examples appear to use this (hence I got the crazy idea it should just work and it didn't). Smile. :) It can be made to work by moving the basedn up the tree. The So I noticed... ;-( performance impact works against that. Yeah, which could be significant if you are using LDAP for other things as well. This brings me to my last point about the LDAP issue that seemed to bring this thread up: Why is samba using NSS when it has all the necessary information to do the proper LDAP search itself? This does not appear to make sense. Surely you realize that Samba stores files in the file system. The file system is completely divorced from Samba. Who would own the files if the UID and GID Identities are NOT resolved via NSS? No argument with that. You are completely correct that Samba can do an LDAP lookup to get user and group ID information, but that is not the issue. How do you propose to resolve IDs within the OS if not through NSS? The issue of this thread was authenticating machine accounts if I remember correctly... tom. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 can't listen on VPN / tun interfaces?
rruegner wrote: Hi, pleases read the faqs from openvpn, you will find that only tap interfaces are working with windows/samba, but youre in a luck that it isnt a big problem to setup them quite the contrary, switching from tun to tap appeared to be a big problem - I spent a couple of hours trying to figure out why can't I reach or ping hosts on the other side of the VPN when I use tap (using tun it wasn't a problem at all). So here is the solution if someone had a similar problem (both sides are running Linux 2.6 and OpenVPN 1.6): Side A - standalone server: openvpn --remote remote-side-B.tld --dev tap --ifconfig 192.168.5.2 255.255.255.0 --verb 4 --comp-lzo --resolv-retry 99 --ping-restart 120 --ping 60 --port 5001 --daemon route add -net 192.168.0.0/24 gw 192.168.5.2 dev tap0 Side B - a server + LAN: openvpn --remote remote-side-B --dev tap --ifconfig 192.168.0.232 255.255.255.0 --verb 4 --comp-lzo --resolv-retry 99 --ping-restart 120 --ping60 --port 5001 --daemon route add -host 192.168.5.2 gw 192.168.0.232 dev tap0 echo "1">/proc/sys/net/ipv4/conf/tap0/proxy_arp The last line (echo ... proxy_arp) is necessary if you want to reach LAN clients from Side A! This is not necessary with tun however. I was getting something like this if I didn't set it (and couldnt ping nor reach any machine): linux:~ # tcpdump -i tap0 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on tap0, link-type EN10MB (Ethernet), capture size 96 bytes 21:36:43.553713 arp who-has pc009 tell 192.168.5.2 21:36:44.552816 arp who-has pc009 tell 192.168.5.2 Don't forget to setup a right routing on LAN clients (if necessary). Tomek -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] vampire fails because of Debian smbldap-tools problem
On Wednesday 24 November 2004 15:30, tom burkart wrote: > Sorry, Geoff, I thought I'd reply to the list as this seems an important > issue... > > On Nov 24, Geoff Scott wrote: > >> There is a note in the book (and online) that says that you have to > >> create all these yourself in the case that you are using ldap. Nowhere > >> does it make mention of that in the example scripts. This is how I > >> missed it first time around. > > > > Does it say it in the TOSHARG book? I looked again and I can't find any > > reference to it in the samba by example book online. > > Ok, I lied. I had seen it somewhere... > it is in the Samba-HOWTO-Collection/groupmapping.html#id2537327 paragraph > (the note...) > > The other really useful thing I found while looking for the above > reference is in the Samba-Guide/happy.html#id2536161 where in the note it > says that having separate containers for users and computers does not yet > work, yet examples appear to use this (hence I got the crazy idea it > should just work and it didn't). Smile. :) It can be made to work by moving the basedn up the tree. The performance impact works against that. > > This brings me to my last point about the LDAP issue that seemed to bring > this thread up: > Why is samba using NSS when it has all the necessary information to do the > proper LDAP search itself? This does not appear to make sense. Surely you realize that Samba stores files in the file system. The file system is completely divorced from Samba. Who would own the files if the UID and GID Identities are NOT resolved via NSS? You are completely correct that Samba can do an LDAP lookup to get user and group ID information, but that is not the issue. How do you propose to resolve IDs within the OS if not through NSS? - John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] vampire fails because of Debian smbldap-tools problem
Sorry, Geoff, I thought I'd reply to the list as this seems an important issue... On Nov 24, Geoff Scott wrote: There is a note in the book (and online) that says that you have to create all these yourself in the case that you are using ldap. Nowhere does it make mention of that in the example scripts. This is how I missed it first time around. Does it say it in the TOSHARG book? I looked again and I can't find any reference to it in the samba by example book online. Ok, I lied. I had seen it somewhere... it is in the Samba-HOWTO-Collection/groupmapping.html#id2537327 paragraph (the note...) The other really useful thing I found while looking for the above reference is in the Samba-Guide/happy.html#id2536161 where in the note it says that having separate containers for users and computers does not yet work, yet examples appear to use this (hence I got the crazy idea it should just work and it didn't). This brings me to my last point about the LDAP issue that seemed to bring this thread up: Why is samba using NSS when it has all the necessary information to do the proper LDAP search itself? This does not appear to make sense. tom. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] du size differences
Does no one have an idea about this problem or did this question get buried? Please help! > > From: <[EMAIL PROTECTED]> > Date: 2004/11/19 Fri PM 06:09:30 EST > To: <[EMAIL PROTECTED]> > Subject: [Samba] du size differences > > We just upgraded several clients and a server to SLES9. The clients mount a > SMB volume on the server and when a du command is ran across the network the > sizes are vastly different. Using NFS or looking at the directory via ssh > and the sizes match. > Is there a switch I am missing that "fixes" this? Using an older RH7 client > to the SLES9 server did not have this issue. > Thanks for your help, > Patrick > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain authentication failing after a period of time
OK, I tried removing and readding the machine account from the domain, and still no luck - logons work for 15 minutes and then stop. Anyone else seeing anything like this? Anyone have any ideas? At this point, I'll try nearly anything. As I said, everything had been working like a charm under 3.0.2a, through a few upgrades and everything. Bill Knox Lead Operating Systems Programmer/Analyst The MITRE Corporation On Fri, 19 Nov 2004, William R. Knox wrote: > Date: Fri, 19 Nov 2004 13:02:47 -0500 (EST) > From: William R. Knox <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subject: Re: [Samba] Domain authentication failing after a period of time > > Adding a little bit more detail: > > It still happens with a just upgraded 3.0.9 install > > The period of time appears to be 15 minutes (tested twice, connecting > every 30 seconds, 15 minutes both times) - until then, connections work > fine. After that, see below. > > Here is the output from a debug level 3 smbclient connection: > > $ smbclient -d 3 -L server_name -U user%pass > lp_load: refreshing parameters > Initialising global parameters > params.c:pm_process() - Processing configuration file > "/path/to/smb.conf" > Processing section "[global]" > added interface ip=XXX.XXX.XXX.XXX bcast=XXX.XXX.XXX.XXX nmask=255.255.255.0 > Client started (version 3.0.9). > resolve_lmhosts: Attempting lmhosts lookup for name server_name<0x20> > resolve_wins: Attempting wins lookup for name server_name<0x20> > resolve_wins: using WINS server XXX.XXX.XXX.XXX and tag '*' > Got a positive name query response from XXX.XXX.XXX.XXX ( XXX.XXX.XXX.XXX ) > Connecting to XXX.XXX.XXX.XXX at port 445 > Doing spnego session setup (blob length=58) > got OID=1 3 6 1 4 1 311 2 2 10 > got principal=NONE > Got challenge flags: > Got NTLMSSP neg_flags=0x60890215 > NTLMSSP: Set final flags: > Got NTLMSSP neg_flags=0x60080215 > NTLMSSP Sign/Seal - Initialising with flags: > Got NTLMSSP neg_flags=0x60080215 > SPNEGO login failed: No logon servers > session setup failed: NT_STATUS_NO_LOGON_SERVERS > > Bill Knox > Lead Operating Systems Programmer/Analyst > The MITRE Corporation > > On Thu, 18 Nov 2004, William R. Knox wrote: > > > Date: Thu, 18 Nov 2004 14:36:53 -0500 (EST) > > From: William R. Knox <[EMAIL PROTECTED]> > > To: [EMAIL PROTECTED] > > Subject: [Samba] Domain authentication failing after a period of time > > > > I am having an unusual bit of behavior with a recently upgraded 3.0.8 > > installation (from 3.0.2a). I upgraded the server and retained the > > secrets.tdb file. The server itself is using security = domain, and it had > > been joined to the domain prior to the upgrade. Now, once I started the > > new version, I couldn't log on, and would get the error "There are no > > logon servers available to service the logon request". If I "rejoin" the > > domain (using the net join command), I can access the shares, but only for > > a period of time. After a few minutes (there doesn't seem to be a specific > > interval), that same message is returned. Running a smbclient -L against > > the system yields "session setup failed: NT_STATUS_NO_LOGON_SERVERS". > > > > I haven't tried failing back to 3.0.2a yet, but I will if that will help > > in any diagnoses. > > > > Thanks in advance for any help anyone may be able to give. > > > > Bill Knox > > Lead Operating Systems Programmer/Analyst > > The MITRE Corporation > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Weird group mapping problem
Hi everyone,
I have a weird problem on samba 3.0.6 with group mapping. I am running
samba as PDC with smbpasswd pwd backend.
I have added some groups with 'net groupmap {add,modify} ntgroup=...
unixgroup=...'
and as it seems the linux machines see the mapping (via winbind) just
fine (pam_winbind is also set up) and if I do 'id username' I do see
the user as member of the "Domain Admins" group. If I login into a
windows XP machine as that same user the user is a member of every
other group, just not the Domain Admins.
Did anyone else experience any behaviour like this?
If so, does anyone know what I did wrong, or what I could do to fix it?
Regards,
Bostjan
--
buhdej evridej
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Re: PROFILES - XP - SAMBA 3.0.8 - 3.0.9
1. What is the specific error message your users recieve? 2. Who is the owner/group of the profile you are trying to load? 3. What is the mode of that directory? 4. What is the mode of the /raid/smb/profiles directory? 5. For a given user, what does pdbedit -v report as that user's profile directory? Jan Kellerhoff wrote: > Danny Paul wrote: > >>Please post a copy of your smb.conf >> >> >> > > Here is my [Profiles] part: > > [profiles] >path = /raid/smb/profiles >read only = No >create mask = 0600 >directory mask = 0700 >nt acl support = yes >profile acls = yes > > Do you still need something > Thats all about my profiles in smb.conf... > > THX > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Roaming Profiles XPSP2 - SAMBA 3.0.9
On Wed, Nov 24, 2004 at 06:59:11PM +0100, Jan Kellerhoff wrote: > Hi can anyone help please? > > I recently updated from 3.0.7 to3.0.8 to 3.0.9. 3.0.8 had a bug in this area. Are you sure 3.0.9 is not working also? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Réponse automatique
A partir du 1° novembre 2004 veuilez m'écrire à l'adresse [EMAIL PROTECTED] La réexpédition ne durera qu'un temps limité. Cordialement. Bernard Guibert -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Migrating NT4 Domain with Idealx tools
--On Wednesday, November 17, 2004 05:09:19 PM +0100 Paul Coray <[EMAIL PROTECTED]> wrote: Marcel de Riedmatten schrieb: Now I realize this works when i configure LDAP and Idealx-Tools to store machine accounts in the same container as useraccounts. Although this makes my directory look somewhat messy, I can live with it if I have to. Still I can't add machines doing smbldap-useradd -w, nor when I try to join the domain from a client. you can have them separated. What count is that the machines account are visible on domain controllers (PDC BDC) ie getent passwd must show the machine (posix) account. This is nss_ldap configuration. If samba doesn't see the machine (posix) account it won't work . So can I specify more then one nss base for passwd in libnss-ldap.conf? i.e. nss_base_passwd ou=Users,dc=mydomain,dc=ch nss_base_passwd ou=Computers,dc=mydomain,dc=ch Rather than specify this twice why don't you just move the base up? For example: nss_base_passwd dc=mydomain,dc=ch Bill nss_base_group ou=Groups,dc=mydomain,dc=ch So I would suspect some problem in the communication with the PDC and double check that on the samba box 1) you have the domain SID as local SID Do SIDS for the PDC and for the domain have to be the same? yes the domain SID _is_ the (local) SID of the PDC and all domain controllers must have the same SID. Thanks Marcel, this is very valuable information to me! I think these should be pointed out more clearly in the docs. Cheers Paul -- Paul Coray Administrator Server und Netzwerk Oeffentliche Bibliothek der Universitaet Basel EDV-Abteilung Schoenbeinstrasse 18-20 CH-4056 Basel Tel: +41 61 267 05 13 Fax: +41 61 267 31 03 mailto:[EMAIL PROTECTED] http://www.ub.unibas.ch +--- | Bill MacAllister | 14219 Auburn Road | Grass Valley, CA 95949 | 530-272-8555 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: PROFILES - XP - SAMBA 3.0.8 - 3.0.9
Danny Paul wrote: Please post a copy of your smb.conf Here is my [Profiles] part: [profiles] path = /raid/smb/profiles read only = No create mask = 0600 directory mask = 0700 nt acl support = yes profile acls = yes Do you still need something Thats all about my profiles in smb.conf... THX -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problems with samba under FreeBSD, not under Linux
Dear All,
(Context: Office windows LAN; PC Pentium 3 with 128 MB, FreeBSD 5.3.)
Here you are the unanswered message I sent to the FreeBSD mailing list:
\BEGIN{MESSAGE}
--
After installing and launching samba 3.0.7 daemons under my postgresql
FBSD5.3
stable server at office, I'm having trouble in connecting to whatever
windows
share in the M$ LAN.
Here you are what's going on:
1) I can ping to my windows server srvs1.myco;
2) If I issue
smbclient -L srvs1.myco -U myuserid
pasword:
Domain=[BOH_SS] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
Sharename Type Comment
- ---
DataDisk
ADMIN$ Disk Remote Admin
H$ Disk Default share
.
Domain=[BOH_SS] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
Server Comment
----
WorkgroupMaster My very short smb.conf
----
3) If I issue
smbclient //srvs1.myco/Data -U myuserid
pasword:
Domain=[BOH_SS] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
smb: \> dir
. DA0 Tue Nov 23 09:13:08
2004
.. DA0 Tue Nov 23 09:13:08
2004
ScambioDA0 Tue Nov 23 09:13:09
2004
Utenti My very short smb.conf
DA0 Tue Nov 23 09:13:09
2004
>>
>>
BUT if I issue
mount_smbfs -I srvs1.myco //[EMAIL PROTECTED]/Data /mnt/smb
password:*
mount_smbfs: unable to open connection: syserr = Connection reset by
peer
This error pops up.
Could you please help me, a poor samba newbie, straight things up?
Thanks in advance
Vittorio
-
\END{MESSAGE}
Now, I can add that I had a go with Samba 3.08 under a linux gentoo
slice on the same box, replicating all the commands I had given under
FreBSD (with the exception of smbmount under gentoo & mount_smbfs under
freebsd, somewhat different synthax, too) and - under linux - it works
perfectly well.
My very short smb.conf (both under linux and FreeBSD)
[global]
workgroup = BOH_SS
server string = Samba
load printers = no
log file = /var/log/samba3/log.%m
max log size = 50
security = user
encrypt passwords = yes
smb passwd file = /etc/samba/private/smbpasswd
domain master = no
# Share Definitions
==
[homes]
comment = Home Directories
browseable = no
writable = yes
PLEASE HELP
Ciao
Vittorio
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: PROFILES - XP - SAMBA 3.0.8 - 3.0.9
Please post a copy of your smb.conf -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Roaming Profiles XPSP2 - SAMBA 3.0.9
Hi can anyone help please? I recently updated from 3.0.7 to3.0.8 to 3.0.9. Since 3.0.8 I recognized XP not loading the roaming profiles, without any error report temporary local profiles were used, but not copied to the server. All worked fine with 3.0.7. Only members of the admingroup are able to load and to save their profiles. Is there any known issue about profiles and ACL??? The smblogs don't show any errors. Can anyone PLEASE POST WORKING SETTINGS, all the accessrules for the profile folders, profiles part of smb.conf, who is allowed and who is not... and any hints needed I don't want to change any XP settings as long there is another (proper)way. Also using 3.0.8 I changed the settings in XP not to check permissions on the profiles folder. Didn't work anyway. At all the updates didn't change anything to my problem. Kelly -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] User not Administrator to add machine to domain
Hi Everybody, Does anybody have a clue how do I create a user that does not have admin privileges but is able to include XP/2k machines in the domain using samba + ldap? Thank´s everybody. Gustavo -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smb_open and smb_readpage_sync errors
Hi, on my backup server (on which I have a smbfs mount) I get several of these logs when I copy files during backup... Nov 23 00:16:20 localhost kernel: smb_open: Fonts/CHB_.TTF\225 open failed, result=-2 Nov 23 00:16:20 localhost kernel: smb_readpage_sync: Fonts/CHB_.TTF\225 open failed, error=-2 Nov 23 00:21:57 localhost kernel: smb_open: 67YZUXY7/search[1].\234ë# open failed, result=-2 Nov 23 00:21:57 localhost kernel: smb_readpage_sync: 67YZUXY7/search[1].\234ë# open failed, error=-2 I don't know what these files are, in fact I did a find on the source server and did not get any results. What I can tell you though is that we have had a problem with a corrupted filesystem on our source server which has been repaired since yet these logs keep on appearing daily. Some of our files have been corrupted. I would like to know what result=-2 and error=-2 mean. Thank you -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Access from Apple Powerbook fails
Greetings, I have a user who cannot access a Samba server (3.0.7 FC1) but can access other Windows machines in the same domain when attempting from an Apple Powerbook (the same user succeeds when attempting from a Win machine). In the logs I get: [2004/11/24 10:21:58, 0, effective(0, 0), real(0, 0)] auth/auth_domain.c:domain_client_validate(199) domain_client_validate: unable to validate password for user in domain to Domain controller \\DC. Error was NT_STATUS_NO_SUCH_USER so it seems that Samba is not getting a user and a domain from the Powerbook. By the way, is Apple using Samba for this ? Thank you for your consideration, Davide Bolcioni -- There is no place like /home. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] (no subject)
-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba performance issues (compared win2k)
Isaac Ojeda Llebry wrote: We're running samba in our organization to serve files in a LAN to windows machines (almost XP), and we're having some performance issues with small files. With big files (ie, ISO images), it works pretty well. But, when small files are involved in the transference, problems arise. In the same environment, a Windows 2000 machine (the 'old' server) is able to send data to clients nearly at double speed. We've tried to change some parameters to make the performance better but... no way. So, we're looking for any idea or a point to start to search for some additional info. We are using in a Samba-3.0.7-1.3E, Linux AS 3 Update 4 box, with the Red Hat's kernel 2.4.21-15.0.3.ELsmp. Configuration is as follow: # Global parameters [global] workgroup = OURWORKGROUP server string = Software Server interfaces = eth1 auth methods = guest, sam, winbind map to guest = Bad User null passwords = Yes guest account = ouruser passwd program = /usr/bin/passwd %u passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* username map = /etc/samba/smbusers log file = /var/log/samba/smbd.log max log size = 10240 max xmit = 65535 dns proxy = No wins server = 192.168.10.10 ldap ssl = no create mask = 0775 hosts allow = 127., 192.168. cups options = raw socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 IPTOS_LOWDELAY Try: socket options = TCP_NODELAY SO_SNDBUF=65536 SO_RCVBUF=65536 IPTOS_LOWDELAY Have a look at: http://www.drouillard.ca/Tips&Tricks/Samba/Oplocks.htm -- Regards -- Gerald Drouillard Technology Architect Drouillard & Associates, Inc. http://www.Drouillard.ca -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] PROFILES - XP - SAMBA 3.0.8 - 3.0.9
Please anyone can help me? We use samba 3.0.9 at the moment as pdc with xp clients. Since 3.0.8 the profiles are no more loaded from the server. Only members of the admingroup are having functional profiles. XP tries to load them, I offered an empty folder for a poweruser, which was found, but the profile is only temporary and not copied to the server (xp doesn't report any error on logon or logoff, deleting the users-folder results in an error, like "not found using temporary..."). I did no chamnges to the registry, using XP SP2, after clean setup the machine still behaved like that. Does anyone know, out of which parts poweruser-roaming profiles are build, if they don't exist? From the local "Default User"??? Thank you for your help. Kelly -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] File Creation Error on an SMB Volume
Hi folks, My SMB server is a Helios Ethershare 3.1 on a Tru64 Alpha machine. We are now integrating more and more gentoo-Linux Servers. These are the SMB Clients. On Obelix (one of our gentoo-Servers) I can mount the SMB Volume from the Ethershare Server. obelix nc4smb # whoami root obelix # mount -t smbfs -o username=m.heckmann //192.9.100.32/MIB_Pat_01 /mnt/nc4smb i can also: obelix # cd /mnt/nc4smb obelix nc4smb # ls -al total 44 drwxr-xr-x 1 root root 4096 Nov 23 10:20 . drwxr-xr-x 5 root root 144 Nov 23 10:19 .. -rwxr--r-- 1 root root 20183 Oct 6 14:32 excuses -rwxr--r-- 1 root root 5011 Apr 15 2002 java.jpg drwxr-xr-x 1 root root 4096 Nov 23 10:32 layouts -rwxr--r-- 1 root root99 Nov 23 2004 todo.txt -rwxr--r-- 1 root root 10560 Nov 16 2001 tomcatlogo.jpg obelix nc4smb # cat todo.txt TODO - hover the garden - make sandwich - brush my teeth - kidnap my neighbours dog obelix nc4smb # echo "- grease my bikes chain" >> todo.txt obelix nc4smb # cat todo.txt TODO - hover the garden - make sandwich - brush my teeth - kidnap my neighbours dog - grease my bikes chainobelix nc4smb # but: obelix nc4smb # echo "i want to create a file" > new.txt -bash: new.txt: Input/output error also: obelix nc4smb # cp /tmp/cptofile.txt /mnt/nc4smb/ cp: cannot create regular file `/mnt/nc4smb/cptofile.txt': Input/output error So you see the problem. Can mount, can read can write to an existing file. But _Cant_ create a file. By the way: On the Helios Ethershare Server i did: chmod -R 777 /data/MIB_Pat_01 (which is the smb share) but the ls -al on obelix shows "-rwxr--r--" further Infos: obelix nc4smb # uname -a Linux obelix 2.6.9-gentoo-r1 #1 SMP Wed Nov 3 15:27:32 CET 2004 i686 Intel(R) Xeon(TM) CPU 3.06GHz GenuineIntel GNU/Linux obelix nc4smb # smbstatus Samba version 3.0.7 obelix nc4smb # cat /etc/samba/smb.conf [global] workgroup = ncag server string = "" show add printer wizard = no local master = no domain master = no preferred master = no os level = 0 [just_a_few_shares] . . . . My Windoze has no problem with this share, everything works fine. Tell me what additional infos you need to get along the problem. I have everything. Debug outputs, ethereal caps (window$ connect,create. successing. / linux mount,create. failing. ). Thanks for your help, in advance. I would really welcome a solution for this. It is a crucial criterion for the future of LiNUX in our company. ;-) Matthias Heckmann - Matthias Heckmann Systemadministrator n c ag In der Luberzen 25 8902 Urdorf - t:+41 1 735 38 38 t dir:+41 1 735 38 10 - Web: www.ncag.ch E-mail:[EMAIL PROTECTED] - -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Trying to find a bottleneck
Jeff Morrow wrote: I'm trying to get my network setup as streamlined as possible. I ran a brain-dead-simple speed test of Samba and I'm very confused by the results. Here's my setup: Fast new WinXP Pro machine NetGear GA311 gigabit ethernet ^ | dedicated gigabit ethernet line (no switch) v RTL8169 gigabit ethernet Relatively fast new Debian Linux machine I set up ramdisks on both machines to ensure that the hard drives were not the bottleneck. I then put a roughly 7 MB file on the linux ramdisk and mounted that disk on my windows box via Samba. I then wrote a .bat script on the windows side that copies the file from the linux ramdisk to the windows ramdisk over and over again. On the windows side, the network utilization monitor says that network load stays around 25-30%. It occasionally gets as high as 40%. CPU usage on the windows side is negligible. On the linux side, top reports that smbd is taking about 30% CPU. I'm confused by the fact that neither network utilization nor CPU usage on either computer is getting anywhere near 100%. I'm wondering if there are any config settings I can tweak to get Samba to fill my gigabit line more fully. Thanks alot. Jeff Morrow Have you tried in your smb.conf: socket options = TCP_NODELAY SO_SNDBUF=65536 SO_RCVBUF=65536 IPTOS_LOWDELAY -- Regards -- Gerald Drouillard Technology Architect Drouillard & Associates, Inc. http://www.Drouillard.ca -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Missing smbd, nmbd in Samba package 2.2.10?
Hello group, OS is OpenBSD 3.6 (macppc). I've been away for a while so excuse the obvious here... I did a pkg_add samba2.2.10.tgz which completed successfully. Now I'd like to start the daemons, however, where are the smbd and nmbd daemons? I've looked in /usr/local/bin and see: /usr/local/sbin laxbcastdns01# cd .. laxbcastdns01# cd bin laxbcastdns01# l total 8606 drwxr-xr-x 2 root wheel 512 Nov 22 11:04 ./ drwxr-xr-x 11 root wheel 512 Nov 21 04:21 ../ -r-xr-xr-x 1 root bin446 Sep 2 16:24 convert_smbpasswd* -rwxr-xr-x 1 root wheel 437892 Sep 2 16:24 make_printerdef* -rwxr-xr-x 1 root wheel 435785 Sep 2 16:24 make_smbcodepage* -rwxr-xr-x 1 root wheel 433285 Sep 2 16:24 make_unicodemap* -r-xr-xr-x 1 root bin205 Sep 2 16:24 mksmbpasswd.sh* -rwxr-xr-x 1 root wheel 634494 Sep 2 16:24 nmblookup* -rwxr-xr-x 1 root wheel 1149659 Sep 2 16:24 rpcclient* -rwxr-xr-x 1 root wheel 1117028 Sep 2 16:24 smbcacls* -rwxr-xr-x 1 root wheel 79 Sep 2 16:24 smbclient* -rwxr-xr-x 1 root wheel 471639 Sep 2 16:24 smbcontrol* ---x--x--x 1 root bin1074028 Sep 2 16:24 smbpasswd* -rwxr-xr-x 1 root wheel 631331 Sep 2 16:24 smbspool* -rwxr-xr-x 1 root wheel 473844 Sep 2 16:24 smbstatus* -rwxr-xr-x 1 root wheel 4899 Sep 2 16:24 smbtar* -rwxr-xr-x 1 root wheel32681 Sep 2 16:24 tdbbackup* -rwxr-xr-x 1 root wheel 435429 Sep 2 16:24 testparm* -rwxr-xr-x 1 root wheel 447617 Sep 2 16:24 testprns* laxbcastdns01# but no smbd, nmbd - smb.conf is in /etc/samba... any thoughts? TIA for any insight. Chris Rondthaler MIS Manager G-TV Guide, Inc. / TVG Network Los Angeles, CA. 90045 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] %macros not expanded in ldap attributes?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andreas wrote: | samba-3.0.8 | | Are the % macros not expanded in LDAP attributes? For example, | the following is the only way sambaProfilePath works: | \\SERVER\share\path | | If I substitute sambaProfilePath with, say, \\%L\%U\path, then | it doesn't work anymore, although the same string works with | logon path in smb.conf. Known issue at the momemnt. Sorry for the inconvienence. Patches welcome (since we haven't been able to get to this bug very quickly). cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song"--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBpLB2IR7qMdg1EfYRAv9YAJ9CihRpV5qB69QiHEhIP6QpJ9J/YwCfR2+A lhmgOP6KA/ktSBFNK1WNWCo= =3VhZ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbldap-usermod over ssh
On Wednesday 24 November 2004 09:34, Misty Stanley-Jones wrote: > Hi all, > > I'm writing a script, and one thing it does is the following: > > ssh [EMAIL PROTECTED] /usr/local/sbin/smbldap-usermod -a -P some.samba.user I RTFM and discovered the -t option to ssh. It works now. Can't seem to figure out how to send the password from a script though. Misty -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbldap-usermod over ssh
Hi all, I'm writing a script, and one thing it does is the following: ssh [EMAIL PROTECTED] /usr/local/sbin/smbldap-usermod -a -P some.samba.user If I left off the -P all works fine. With the -P it does not prompt me for the password on my screen, but it seems to have done it on the host I am ssh'ing to. I straced the command on that host and I am stuck at a read() call. However, I can't see the password prompt or type in the password either. What I would really like to do anyway is pass the password as a parameter, since I will be getting the password from input to the script. But I don't see it as one of the valid options for smbldap-usermod. Is anyone doing a similar thing and if so, can you offer me wisdom? Thanks, Misty -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Files being corrupted on export, md5sums don't match.
Strangely enaugh, i tried getting samba 3.08 and compiling it with -O2 -pipe -mcpu=7400 -maltivec -mabi=altivec this time which worked. Thanks for your help. On Wed, 24 Nov 2004 14:49:56 +0100, Holger Krull <[EMAIL PROTECTED]> wrote: > Can't see anything wrong. > Are you using smbfs to mount? Maybe a charset problem as smbfs defaults to > cp437 if i remember right. If you are using only unix/linux clients maybe > change dos charset to utf8, and mount with utf8. > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem with certain users logging into a Samba PDC (Reposted)
Sorry for the reposting, but someone replied with a new subject to my question, and thus I am asuming people thing it has already been answered, which is not the case ... Hi there, We have a problem with our Samba PDC setup, I hope somebody can help! Problem: From the below example: martin and christ can logon to all Windows machines using Samba as the PDC. zeroscale and jeremy cannot logon. zeroscale and jeremy _can_ connect manually to shares from the Samba Server, though. Environment: Server: Samba 3.0.7 on Debian Clients: Windows 2000 and XP, any Service Pack Things from the Samba setup: xen:/etc/samba# egrep "martin|jeremy|zeroscale|christ" smbpasswd christ:30012:D3B435B5...1404EE:C14C235C87C4:[U ]:LCT-4147FF1B: martin:500:51404EE:736D0A3...B7E9697F9:[U ]:LCT-3BE6DB28: zeroscale:30069:09416AB8:6C58...C51E9BCC407:[UX ]:LCT-40BDAB5F: jeremy:30077:435B51404EE:A8280...7973B89537:[U ]:LCT-41A32301: xen:/etc/samba# id christ uid=30012(christ) gid=100(users) groups=100(users) xen:/etc/samba# id jeremy uid=30077(jeremy) gid=100(users) groups=100(users) xen:/home/samba/profiles# ls -lad christ martin jeremy zeroscale drwx-- 19 christusers 4096 2004-11-22 20:32 christ drwx-- 2 jeremyusers 17 2004-11-23 13:22 jeremy drwx-- 21 martinusers 4096 2004-11-23 13:52 martin drwx-- 14 zeroscale users 4096 2004-11-09 09:57 zeroscale From the Windows 2000 log (FAILED case): Fehlgeschlagene Anmeldung (unsucessful authentication): Grund: Während der Anmeldung ist ein unerwarteter Fehler aufgetreten (unexpected error during autentication) Benutzername: jeremy Domäne: PFGROUP Anmeldetyp: 2 Anmeldevorgang: User32 Authentifizierungspaket:Negotiate Name der Arbeitsstation:ULALA From the Windows 2000 log (SUCESS case): Erfolgreiche Anmeldung (sucessful authentication): Benutzername: martin Domäne: PFGROUP Anmeldekennung: (0x0,0x146624) Anmeldetyp: 2 Anmeldevorgang: User32 Authentifizierungspaket:Negotiate Name der Arbeitsstation:ULALA Samba Log: -- Even on log level 8 for me there was nothing useful in the samba logs. And dear developers: These logs are really unusable from a users perspective. I would like to easily see / read: * Who logged on and when * Who did not loggon and why * Textual distinction between SUCESS and FAILURE * Consise brief information I can READ and USE * Example: "setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0" this says NOTHING to me :-)!! Anyway, Samba proves to be the most important tool for us! Good job everybody! Take Care & Thanks for your support Martin -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] upgrading print server from 2.2.8a to 3.0.8 - more info
Here's what I sent yesterday, more info follows: > Hello. I'm having a bit of trouble with my upgrade. I installed 3.0.8 > over a copy of the 2.2.8a directory, and when I went to start it up, got > errors about accessing the secrets.tdb. I was able to use tdbdump to > access it and created one in the new format using tdbtool, but then it's > also unable to access other old-format tdb files, most notably ntdrivers > and ntprinters. The only reference I can find to dealing with tdb files > during an upgrade is that samba3 will automatically upgrade old format > tdb files as it needs them, but that doesn't appear to be happenning for > me. I'm hoping to avoid having to reinstall all the drivers and > reassociate them with the printers. Is there a tool around to upgrade > tdb file formats? Am I starting with too old of a version? > > I can't start up 3.0.8 right now because the machine is in production > with 2.2.8a, but I can tinker with it tomorrow morning to get some log > entries if anyone needs to see them. Log entries from samba3 startup: tdb/tdbutil.c:tdb_log(725) tdb(/usr/local/samba308/var/locks/share_info.tdb): tdb_lock spinlock failed on list 103 ltype=1 tdb/tdbutil.c:tdb_log(725) tdb(/usr/local/samba308/var/locks/share_info.tdb): tdb_lock spinlock failed on list 103 ltype=0 tdb/tdbutil.c:tdb_log(725) tdb(/usr/local/samba308/var/locks/share_info.tdb): tdb_lock spinlock failed on list 0 ltype=1 tdb/tdbutil.c:tdb_log(725) tdb(/usr/local/samba308/var/locks/share_info.tdb): tdb_lock spinlock failed on list 103 ltype=1 tdb/tdbutil.c:tdb_log(725) tdb(/usr/local/samba308/var/locks/share_info.tdb): tdb_unlock: count is 0 ... and then it lists the same set of messages for ntprinters.tdb, and again for each of those two files any time samba attempts to access them. -- Scott McCallum Sr. Unix Administrator Whitehead Institute (http://wi.mit.edu/) s k m @ w i . m i t . e d u ext 85120 quidquid latine dictum sit altum sonatur -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Files being corrupted on export, md5sums don't match.
[global] netbios name = Rancorwe workgroup = MSHOME server string = Rancorwe GNU/Linux (Samba %v, %h) show add printer wizard = no # Local master, see # /docs/htmldocs/Samba-HOWTO-Collection/NetworkBrowsing.html in the # sourcecode. # domain master = no # yes # local master = no local master = yes # yes # preferred master = no preferred master = yes # 65 # os level = 0 os level = 65 # Logging log level = 2 log file = /var/log/samba/%m.log max log size = 0 security = share # Charset #dos charset = UTF-8 unix charset = UTF8 #unix charset = ISO8859-1 # Securatah! #socket address = 192.168.1.25 interfaces = eth0 #hosts allow = 192.168.1. EXCEPT 192.168.1.1 # Handling of messages # using a hacked shellthingy #message command = bash -c 'printf "From: %m (%M)\nDate: %T\nFile: %s\n\n" >> /tmp/smbmsg;cat %s >> /tmp/smbmsg; echo '%' >> /tmp/smbmsg' & # using a custom perlscript message command = perl /home/avar/bin/smbmsg.pl --from %m --ip %M --file %s & [portage] browseable = no path = /usr/portage comment = The Gentoo GNU/Linux portage tree read only = Yes guest ok = Yes [share] browseable = no path = /home/share comment = Shared Audio and Video files read only = Yes guest ok = Yes [src] browseable = no path = /usr/src comment = Miscellaneous source-code read only = Yes guest ok = Yes On Wed, 24 Nov 2004 12:05:20 +0100, Holger Krull <[EMAIL PROTECTED]> wrote: > > (smb.conf attached) > > Attachments get striped in this list > Send smb.conf inline please. > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] User sessions opens and closses very quickly
Dear Samba experts, Setup : Solaris Samba Server - Windows XP clients Problem: when we try to access a bunch of big directory stored on our unix clients through samba from our windowsXP machine we see the user sessions being opened and closed very very quickly and because of that it takes long time to get the unix files on windows. My log shows something like, pc-svijay (192.168.9.192) connect to service sld4 initially as user svijay (uid=9924, gid=1001) (pid 1797) pc-svijay (192.168.9.192) closed connection to service sld4 and this opening and closing of connection happens very quickly, for some reason which I dont understand whenever the connection is open for long then I could access all the files without any problems, however when it closes I couldnt. How should I go about this. We are using SECURITY=SERVER mode. Any big hearted person helping to solve this issue at our end kindly reply back , I will be happy to give more information and our smb.* files Vijay. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba + CFS
On Tue, 23 Nov 2004 15:19:44 +0100, Holger Krull <[EMAIL PROTECTED]>
wrote:
I think that the problem is Samba. A cfs directory can only be accessed
by the user who set it up. Even root won't see anything.
Samba will access the dir with user priviliges but tries to read the
disk-free info as user root or samba or whatever but not as user.
Take a look at the 'dfree command'. You can insert a script there or
return a fixed value.
Hello Holger, thank you for your advise. That does the trick.
I've written my own dfree script and now I can write to my crypted share.
If anybody should ever run into the same problems, here is my (simple)
dfree script:
#!/bin/sh
DIR=`pwd`
if [ $DIR = "/var/cfs/crypt" ] ; then
df -k /home | tail -1 | awk '{print $2" "$4}'
else
df -k $1 | tail -1 | awk '{print $2" "$4}'
fi
I've stored the crypted files in a home dir, so please adapt for your own
needs.
Rado
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba performance issues (compared win2k)
We're running samba in our organization to serve files in a LAN to windows machines (almost XP), and we're having some performance issues with small files. With big files (ie, ISO images), it works pretty well. But, when small files are involved in the transference, problems arise. In the same environment, a Windows 2000 machine (the 'old' server) is able to send data to clients nearly at double speed. We've tried to change some parameters to make the performance better but... no way. So, we're looking for any idea or a point to start to search for some additional info. We are using in a Samba-3.0.7-1.3E, Linux AS 3 Update 4 box, with the Red Hat's kernel 2.4.21-15.0.3.ELsmp. Configuration is as follow: # Global parameters [global] workgroup = OURWORKGROUP server string = Software Server interfaces = eth1 auth methods = guest, sam, winbind map to guest = Bad User null passwords = Yes guest account = ouruser passwd program = /usr/bin/passwd %u passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* username map = /etc/samba/smbusers log file = /var/log/samba/smbd.log max log size = 10240 max xmit = 65535 dns proxy = No wins server = 192.168.10.10 ldap ssl = no create mask = 0775 hosts allow = 127., 192.168. cups options = raw socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 IPTOS_LOWDELAY -- Isaac Ojeda Llebry Servicio de Informática y Comunicaciones de la ULPGC e-mail: iojeda en becarios.ulpgc.es Teléfono: +34 928 459568 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Files being corrupted on export, md5sums don't match.
(smb.conf attached) When i mount the exported shares on my computer on either it or another machine they get damaged during transfer, for example i made a file in my shared folder with the contents "this is a test", mounted that folder at /mnt/losmb/, resaults below: $ cat /home/share/test this is a test $ cat /mnt/losmb/test JïSMB.ï$ $ md5sum /home/share/test && du -s /home/share/test e19c1283c925b3206685ff522acfe3e6 /home/share/test 4 /home/share/test $ md5sum /mnt/losmb/test && du -s /mnt/losmb/test 77b6cfbf88d1fc931a994b9914ded559 /mnt/losmb/test 524288 /mnt/losmb/test $ Uname: Linux Rancorwe 2.6.9-rc2 #1 Fri Oct 1 06:47:57 GMT 2004 ppc 7447A, altivec supported PowerBook6,5 GNU/Linux Samba version: 3.07 CFLAGS used to compile samba: -mtune=G4 -pipe -O1 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.8 + AD 2003 + Windows 2000
Hello, I'm trying to integrate a samba server in 2003 AD. I've read different howto, And I've integrate computer with net ads join with success. Kinit user works fine. smbclient -k works fine too. But when I try to make a net use * \\server\share on a 2000 member server, I've the following error : error 1311 There are currently no logon servers available to service the logon request On any windows 2003 server it works fine ! I've tried to disable smb signing on both side, no change. Here is my global section of smb.conf : workgroup = groupesigma netbios name = necpiii866-02 realm = GROUPESIGMA.FR security = ADS wins server = 89.131.0.80 encrypt passwords = true password server = * smb passwd file = /etc/samba/smbpasswd unix password sync = Yes passwd program = /usr/bin/passwd %u pam password change = yes username map = /etc/samba/smbusers obey pam restrictions = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local master = no os level = 33 domain master = no preferred master = no dns proxy = no preserve case = no short preserve case = no default case = lower case sensitive = no # allow trusted domains = yes nt acl support = yes winbind separator = + winbind cache time = 10 winbind uid = 1-2 winbind gid = 1-2 winbind enum users = yes winbind enum groups = yes client signing = yes use spnego = yes Thanks for help. Olivier BATARD, Technicien Système - Poste 1655 SIGMA Informatique http://www.sigma.fr 3 rue Newton, BP 4127, 44241 La Chapelle sur Erdre Cedex Tel direct : 0240371456 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: 3.0.9
Christian Marx wrote: Hi, du you know any web sources about getting sage office line to work with samba? thanks, chris Not sure of any links Chris, it was a worry about getting it working, but it "just worked" with no trickery whatsoever. Our accounts dept is smallish, so there is a max of about 6 simultaneous users, but it has been running fine for about 6 months. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: 3.0.9
Hi, du you know any web sources about getting sage office line to work with samba? thanks, chris Hamish wrote: Just a quick thanks to everyone involved with samba3 dev, I upgraded last night from 3.0.7 to 3.0.9 and it went really smoothly - just had to reset the permissions on /var/spool/samba so that people could print again! (It seems to reset perms each upgrade, but at least I know this now!). We are running the following without any hassle: Sage Approch Access all ms office suite openoffice Outlook pst files about 15 printers (all with point and print - yay!) a pdf "printer" that emails a pdf of whatever you print to you brilliant logging Full integration with existing active directory user accounts (no need to keep a seperate list) Easy backups Freedom to do what we want to without having to worry about licencing and intimidation! Once again, thanks everyone! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[samba] calculate machine SID?
hi list, How do you calculate a machine SID and primarygroupSID? On a user you would do 2*uidNumber+1000 and 2*uidNumber+1001 But machines accounts dont have a uidNumber so how is the SID genrated?? Im trying to create some perl scripts of my own which need to do some other things too! Thanks, -- Daniel Wilson Systems Administrator IT & Communications Service University of Sunderland Unit1 Technology Park Chester Road Sunderland SR2 7PT Tel: 0191 515 2695 This e-mail contains information which is confidential and may be privileged and is for the exclusive use of the recipient. It is the responsibility of the recipient to ensure that this message and its attachments are virus free. Any views or opinions presented are solely those of the author and do not necessarily represent those of the University, unless otherwise specifically stated. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] how to test membership with samba
Hi, i installed samba 3.0.7 with ldap 2.1.30-3 and idealx-tools 0.8.5 on a Debian sarge. Maping home directories for each user works fine. My goal is now to map a network drive for all members of a group. For example : if someone logs in and is member of group1 then he has a drive letter J: maping at /home/group1 I read about ifmember.exe tools from windows NT but it doesn't works. Does someone know how to achieve this ? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Upgrade from 3.0.7 to 3.0.8 breaks winbind
This is my first post to this list.
The domain names etc have been changed slightly in the examples below, but you
should get the idea.
For a long time now (since 3.0.2a?), I have been using the samba 3.0.x series at
one of our client sites.
The Linux server is joined to a Win2k3 Active Directory.
All users are created in the ADS, and the Linux server is able to authenticate
them, etc.
I recently upgraded from 3.0.7 to 3.0.8
At this point winbind was partially broken.
The following commands still worked fine after the upgrade:
wbinfo -u
wbinfo -g
getent passwd
getent group
However the following commands now failed:
wbinfo -t
wbinfo -a user%password
Also authentication is now failing for our POP daemon and SQUID proxy software.
The POP daemon is using the pam pam_winbind.so method of authenticating.
Messages from the syslog daemon related to the POP failures are as follows:
popa3d[15772]: Authentication failed for UNKNOWN USER
Squid 2.5.7 uses winbind to authenticate our users to the proxy via ntlm.
When a user called 'dineshbh' tried to authenticate, the following was logged by
syslog:
squid[15114]: authenticateNTLMHandleReply: Error validating user via NTLM.
Error returned 'BH NT_STATUS_ACCESS_DENIED'
The relevent config in squid.conf for this is like so:
auth_param ntlm program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 5
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes
auth_param basic program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-basic
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
So I checked to see if kerberos was working still.
Running 'kinit [EMAIL PROTECTED]' prompted me for a password and worked
properly.
So I decided to try and rejoin the ADS again with 'net ads join -U administrator'
It successfully joined saying the machine account already existed, and that it
has updated it.
The wbinfo and getent commands behave as before.
Commands that fetch group and user info all work, but the authentication
commands failed.
After downgrading back to 3.0.7 again, everything started to work correctly
again.
Unfortunately I've lost the window that I was working in, so I don't have exact
responses from the failure of the 'wbinfo -t' and 'wbinfo -a' commands, however
I can show my config and error messages that appeared in logs.
When I ran the wbinfo -t command the following appeared in the log.winbindd
file:
[2004/11/24 18:38:23, 1] nsswitch/winbindd_cm.c:cm_open_connection(333)
failed tcon_X with NT_STATUS_ACCESS_DENIED
[2004/11/24 18:38:23, 1] nsswitch/winbindd_cm.c:cm_open_connection(333)
failed tcon_X with NT_STATUS_ACCESS_DENIED
[2004/11/24 18:38:23, 1] nsswitch/winbindd_cm.c:cm_open_connection(333)
failed tcon_X with NT_STATUS_ACCESS_DENIED
There were no other error messages in logs, and samba, winbind, etc seem to
start just fine with no error messages.
The config is as follows:
The /etc/krb5.conf contains the following relevent entries:
[libdefaults]
default_realm = SITE.COM.AU
[realms]
SITE.COM.AU = {
kdc = sitepdc
admin_server = sitepdc
}
[domain_realm]
site.com.au = SITE.COM.AU
.site.com.au = SITE.COM.AU
The /etc/smb.conf contains the following relevent entries:
[global]
workgroup = site
password server = sitepdc
realm = site.com.au
security = ads
idmap uid = 1-2
idmap gid = 1-2
template homedir = /home/%u
winbind cache time = 120
winbind use default domain = yes
# Disable weak LANMAN hash (only required for Win95/98 boxes).
client lanman auth = no
lanman auth = no
# Only allow NTLMv2 authentication (disables NTLMv1) for the
best security.
client ntlmv2 auth = yes
ntlm auth = no
# Do not allow anonymous users to collect user and group lists.
restrict anonymous = 2
I have an entry like so in the /etc/samba/lmhosts file:
172.16.0.10 sitepdc.site.com.au sitepdc
Any ideas why the trust used for authenticating users no longer works in 3.0.8?
--
Jim Barber
Digital Diagnostic Imaging (The Filmless Future)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] very large smbprn files
Hello, I'm running Samba version 2.2.3a and I have a problem with the temp printfiles getting VERY large. My printer-conf looks like this and I use lprng as printerdaemon: path= /var/tmp browsable = yes printable = yes guest ok= yes writeable = no create mode = 0700 printer admin = root queuepause command = /usr/sbin/lpc stop %p queueresume command = /usr/sbin/lpc start %p lppause command = /usr/sbin/lpc hold %p %j lpresume command= /usr/sbin/lpc redo %p %j lprm command= /usr/sbin/lpc lprm %p %j lpq command = /usr/bin/lpq -P%p Today I noticed that my smbprn-files in /var/tmp has grown to 16 gigabytes! Why are these temp-files not deleted after each printjob has finished? Are they safe to delete? Regards, Frank Nørvig -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
