Re: [Samba] really needs help on compiling samba 3.0.9 with ldap

[Adi Nugraha]

yes they do but I compiled from the tarball from the samba site ( the samba
binaries from mandrake is ver 2) , and when I first compiled it I haven't
Installed LDAP yet and to have ldap support on samba you need to install
ldap first or so I read might be wrong, anyway my problem now is that I cant
run the smbd and nmbd or any utility from samba, something like this :

[EMAIL PROTECTED] src]# /usr/local/samba-3.0.9-2i/sbin/smbd
/usr/local/samba-3.0.9-2i/sbin/smbd: error while loading shared libraries:
liblber-2.2.so.7: cannot open shared object file: No such file or directory

does anyone know what the hell is liblber-2.2.so.7 is ?, what package should
I install to have it, btw I am a total newbie in Linux and samba, so i
there's anything I missed, pls tell me

thanks

- Original Message -
From: "Craig White" <[EMAIL PROTECTED]>
To: 
Sent: Wednesday, January 05, 2005 12:52 PM
Subject: Re: [Samba] really needs help on compiling samba 3.0.9 with ldap


> On Wed, 2005-01-05 at 10:48 +0700, Adi Nugraha wrote:
> > already did and this is what I got :
> >
> > Builtin modules:
> > pdb_smbpasswd pdb_tdbsam pdb_guest rpc_lsa rpc_reg rpc_lsa_ds
rpc_wks
> > rpc_net rpc_dfs rpc_srv rpc_spoolss rpc_samr idmap_tdb auth_rhosts
auth_sam
> > auth_unix auth_winbind auth_server auth_domain auth_builtin
> >
> > and I don't see any LDAP module built in, I decided to recompile it
because
> > when i tried pdbedit on a LDAP backend, samba shows that it was unable
to
> > find the ldap module, so can anyone help me with this issue, and as I've
> > said I'm running Mandrake 9.1, the documentation doesn't seem to have
> > anything specific to Mandrake
> ---
> I don't use Mandrake but I would bet a lot of money that the samba
> binaries from Mandrake have ldap compiled in.
>
> Craig
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] really needs help on compiling samba 3.0.9 with ldap

[Gémes Géza]

already did and this is what I got :
Builtin modules:
   pdb_smbpasswd pdb_tdbsam pdb_guest rpc_lsa rpc_reg rpc_lsa_ds rpc_wks
rpc_net rpc_dfs rpc_srv rpc_spoolss rpc_samr idmap_tdb auth_rhosts auth_sam
auth_unix auth_winbind auth_server auth_domain auth_builtin
and I don't see any LDAP module built in, I decided to recompile it because
when i tried pdbedit on a LDAP backend, samba shows that it was unable to
find the ldap module, so can anyone help me with this issue, and as I've
said I'm running Mandrake 9.1, the documentation doesn't seem to have
anything specific to Mandrake
thanks
- Original Message -
From: "Paul Gienger" <[EMAIL PROTECTED]>
To: "Adi Nugraha" <[EMAIL PROTECTED]>
Cc: "thomas constans" <[EMAIL PROTECTED]>; 
Sent: Wednesday, January 05, 2005 10:29 AM
Subject: Re: [Samba] really needs help on compiling samba 3.0.9 with ldap
 

I compiled it just to make sure that there is ldap support in this
installations, my previous installations didn't have ldap support because
 

I
 

was unable to compile with ldap activated
 

Rather than going through all the pain of possibly unnecessarily
compiling, first try running
smbd -b
and grep for LDAP.  This will tell you for sure what you've got compiled
   

in.
 

--
--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]

   

 

My suggestion (Mandrake 9.2/10.0/10.1 mixture here):
Download the samba source RPM (samba-3.0.10) from one of the cooker mirrors.
Take care to have the development tools, plus libacl-devel, 
libattr-devel, libkrb5-devel, libldap-devel installed.
Rebuild the source RPM, and you should have it.

Good Luck!
Geza
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] installing samba 3.0.7 on kernel 2.6

[caas it]

 I am trying to install samba 3.0.7 on kernel 2.6.5-3
(Fedora Core 2)
1) According to the installation procedure mentioned
in the documentation the samba client is working fine.
But for the samaba server, when a remote client tries
to contact the server the follwing error is reported
during tree connect request for IPC$ -
BAD_NETWORK_NAME.  

2)If we wish to undo the chages made by above
procedure is there any option other than "make revert"?


Yahoo! India Matrimony: Find your life partner online
Go to: http://yahoo.shaadi.com/india-matrimony
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 3 on RedHat Linux 9?

[Mandar Kulkarni/PUN/IN/STTL]

Hi,

After going through the available documentation, i hv decided to install
Samba 3 on RH Linux 9 with LDap
Just wanted to check whether any one has done the same before and how
stable it is?

Thanks & Regards
Mandar Kulkarni

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Using windows homedirs as a linux homedirs

[Markus Översti]

Hello,

I would like to have linux users to have same homedirs as in windows. Now home
directories are on windows 2000 server.

How I can map users homedirectory from windows 2000 server to linux workstation
with credentials user gives at logintime?

Or even better, how I can persistently map those homedirectories to linux
(without mapping them as an administrator)?

--
  /\_/\
 ( o.o )  mailto:[EMAIL PROTECTED]
  > ^ < http://www.edu.haapavesi.fi/~moversti

BOFH excuse #67:

descramble code needed from software company

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] really needs help on compiling samba 3.0.9 with ldap

[Craig White]

On Wed, 2005-01-05 at 10:48 +0700, Adi Nugraha wrote:
> already did and this is what I got :
> 
> Builtin modules:
> pdb_smbpasswd pdb_tdbsam pdb_guest rpc_lsa rpc_reg rpc_lsa_ds rpc_wks
> rpc_net rpc_dfs rpc_srv rpc_spoolss rpc_samr idmap_tdb auth_rhosts auth_sam
> auth_unix auth_winbind auth_server auth_domain auth_builtin
> 
> and I don't see any LDAP module built in, I decided to recompile it because
> when i tried pdbedit on a LDAP backend, samba shows that it was unable to
> find the ldap module, so can anyone help me with this issue, and as I've
> said I'm running Mandrake 9.1, the documentation doesn't seem to have
> anything specific to Mandrake
---
I don't use Mandrake but I would bet a lot of money that the samba
binaries from Mandrake have ldap compiled in.

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] really needs help on compiling samba 3.0.9 with ldap

[Adi Nugraha]

already did and this is what I got :

Builtin modules:
pdb_smbpasswd pdb_tdbsam pdb_guest rpc_lsa rpc_reg rpc_lsa_ds rpc_wks
rpc_net rpc_dfs rpc_srv rpc_spoolss rpc_samr idmap_tdb auth_rhosts auth_sam
auth_unix auth_winbind auth_server auth_domain auth_builtin

and I don't see any LDAP module built in, I decided to recompile it because
when i tried pdbedit on a LDAP backend, samba shows that it was unable to
find the ldap module, so can anyone help me with this issue, and as I've
said I'm running Mandrake 9.1, the documentation doesn't seem to have
anything specific to Mandrake

thanks

- Original Message -
From: "Paul Gienger" <[EMAIL PROTECTED]>
To: "Adi Nugraha" <[EMAIL PROTECTED]>
Cc: "thomas constans" <[EMAIL PROTECTED]>; 
Sent: Wednesday, January 05, 2005 10:29 AM
Subject: Re: [Samba] really needs help on compiling samba 3.0.9 with ldap


>
> >I compiled it just to make sure that there is ldap support in this
> >installations, my previous installations didn't have ldap support because
I
> >was unable to compile with ldap activated
> >
> >
> Rather than going through all the pain of possibly unnecessarily
> compiling, first try running
> smbd -b
> and grep for LDAP.  This will tell you for sure what you've got compiled
in.
>
> --
> --
> Paul GiengerOffice: 701-281-1884
> Applied Engineering Inc.
> Systems Architect   Fax:701-281-1322
> URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]
>
>
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Master domain browser after IP change?

[Marc Sherman]

I just renumbered my local network, from 192.168.1/24 to 192.168.23/24. 
 My samba 3.0.10 server, which is configured to be the local and master 
domain browser, seems to be a bit confused:

Jan  4 22:03:34 pyloric nmbd[2308]: [2005/01/04 22:03:34, 0] 
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(327)
Jan  4 22:03:34 pyloric nmbd[2308]:   become_domain_master_browser_wins:
Jan  4 22:03:34 pyloric nmbd[2308]:   Attempting to become domain master 
browser on workgroup PROJECTILE_WRK, subnet UNICAST_SUBNET.
Jan  4 22:03:34 pyloric nmbd[2308]: [2005/01/04 22:03:34, 0] 
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(341)
Jan  4 22:03:34 pyloric nmbd[2308]:   become_domain_master_browser_wins: 
querying WINS server from IP 192.168.23.5 for domain master browser name 
PROJECTILE_WRK<1b> on workgroup PROJECTILE_WRK
Jan  4 22:03:34 pyloric nmbd[2308]: [2005/01/04 22:03:34, 0] 
nmbd/nmbd_become_dmb.c:become_domain_master_query_success(225)
Jan  4 22:03:34 pyloric nmbd[2308]:   become_domain_master_query_success:
Jan  4 22:03:34 pyloric nmbd[2308]:   There is already a domain master 
browser at IP 192.168.1.5 for workgroup PROJECTILE_WRK registered on 
subnet UNICAST_SUBNET.

It is successfully becomming the local master browser, but it's failing 
to become the domain master browser.  Is there any way to get samba to 
forget about its own old IP address?

Thanks,
- Marc
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] really needs help on compiling samba 3.0.9 with ldap

[Paul Gienger]

I compiled it just to make sure that there is ldap support in this
installations, my previous installations didn't have ldap support because I
was unable to compile with ldap activated
 

Rather than going through all the pain of possibly unnecessarily 
compiling, first try running
smbd -b
and grep for LDAP.  This will tell you for sure what you've got compiled in.

--
--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbmount performance stinks, smbclient is good

[Paul Gienger]

Bandwidth for transferring a big file (via cp) is 1/5th that
of when I do the equivalent using smbclient to transfer the file.
These (mount -t smbfs and smbclient) are completely different programs 
running.  Using a mount is a kernel module and smbclient is the samba 
maintained program.

1. Make sure you've got a new(ish) kernel.  Read the changelogs to see 
if you're missing anything in new versions.
2. Try using the cifs mount instead.  Personally I've never tried it, 
but it is a common solution given 'round these parts for probmes with 
smbfs kernel operations.

--
--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Smab 3 printing

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
| Samba 3 printing does not work.  Samba 2.2.x printing does work.
| They are using the same smb.conf file.  Any ideas?
There are radical differences in functionality between the two versions.
It would be better two use two different smb.conf's  What do testparm
and testparm3 return?
Jim C.
- --
- -
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: j_c_llings @ hotmail.com  AIM: WyteLi0n  ICQ: 123291844  |
|---|
| Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz|
- -
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFB21zk57L0B7uXm9oRAp+qAJ46axT8tdqA48DiaWtcMpo6wxHZBQCfdfnm
aEsZRE3J3lm9IBJ2RvVUmpg=
=nwYf
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] really needs help on compiling samba 3.0.9 with ldap

[Adi Nugraha]

You're right the compiling worked, but I can't run samba or any samba
utility, I have multiple samba installations, and they all wotked fine as in
I'm able to run them, but I can't run this particular installation, this is
what happened :

sbin/smbd: error while loading shared libraries: liblber-2.2.so.7: cannot
open shared object file: No such file or directory

do you know what that means ?? Thanks

>BTW, since ldap support is enabled on binary >packages, why do you want to
compile ?

I compiled it just to make sure that there is ldap support in this
installations, my previous installations didn't have ldap support because I
was unable to compile with ldap activated

- Original Message -
From: "thomas constans" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, January 04, 2005 5:51 PM
Subject: Re: [Samba] really needs help on compiling samba 3.0.9 with ldap


Le mardi 04 janvier 2005 à 14:04 +0700, Adi Nugraha a écrit :

> /usr/bin/ld: cannot find -lgssapi_krb5
> collect2: ld returned 1 exit status
> make: *** [bin/smbd] Error 1

looks like you are missing some libs:

try installing kerberos devel packages, or similar

BTW, since ldap support is enabled on binary packages, why do you want
to compile ?

cheers

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] XP delete problem

[Jeff Landers]

We have moved from nt/2000 clients to XP clients and find that now the
users cannot delete their own files even though they own them and the
permissions are set to 777 on the files.  Is this a configuration issue,
do I need a newer version, or is this just a way for microsoft to make
life difficult? Thanks for the help.
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] PDC moved; domain admin user lost privs

[Abe Shelton]

Greetings,
We recently moved our Samba PDC from one linux-based samba server to 
another. I copied samba's settings (rsync'd /etc/samba/*) exactly, and 
the new PDC has the same IP address, host name and overall config. (same 
version of samba, same kernel, etc)

Since moving the PDC, Windows XP workstations no longer recognize the 
smb.conf defined "admin users"  as domain admins. Prior to moving the 
PDC, WinXP workstations properly recognized the "admin users" as domain 
administrators without issue.

One hardware component in the Samba PDC that did change is the MAC 
address of the network card.

** Perhaps WinXP clients will stop trusting a PDC if it's MAC address 
suddenly changes? **

Logins, roaming profiles and general file sharing works fine with the 
new PDC; the only thing that's giving us trouble is that "admin users" 
suddenly are not domain admins. (admin users do still have root-level 
access to files/shares on samba servers -- only domain admin functions 
fail.)

We have found that manually removing and re-adding machines to the 
domain seems to fix the problem. But if reverting to the prior MAC 
address or some other trickery with the new samba PDC works, that is 
much preferred over a late night spent fixing a bunch of broken windows.

Any advice is much appreciated. Thanks!
Abe
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] smbmount performance stinks, smbclient is good

[Zachary Filan]

Hi,
I use smbmount to mount a share from a linux smbd.
Bandwidth for transferring a big file (via cp) is 1/5th that
of when I do the equivalent using smbclient to transfer the file.
Duh?!
Any clues? Any pointers on how to debug the problem?
Thanks!
/Zac
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Smbd AIX syslog error messages

[Rob_Lee]

Hello,

I'm looking for an explanation of the errors we are seeing in syslog
pertaining to samba.
This is an AIX 5.2 ML04 samba server running version 3.0.7 of samba.


The ones we see the most are the following:

1.) Jan  4 04:16:40 server smbd[104176]:   getpeername failed. Error
was A socket must be already connected.
2.) Jan  4 04:16:40 server smbd[104176]:   write_socket_data: write
failure. Error = There is no process to read data written to a pipe.
Jan  4 04:16:40 server smbd[104176]:   write_socket: Error
writing 4 bytes to socket 23: ERRNO = There is no process to read data
written to a pipe.
Jan  4 04:16:40 server smbd[104176]:   Error writing 4 bytes to
client. -1. (There is no process to read data written to a pipe.)
3.) Jan  4 04:16:40 server smbd[104176]:   Failed to set socket
option TCP_NODELAY (Error A system call received a parameter that is not
valid.)
4.) Jan  4 06:33:25 server smbd[46074]: [2005/01/04 06:33:25, 0]
lib/util_sock.c:read_socket_data(384)

I searched and found "getpeername failed" but none had "Error was A
socket must be already connected"

If there is one location to get information on samba error messages that
would be useful as well.

Thank you in advance

Robert E. Lee (Rob)
Administaff Services, L.L.P.
Sr. AIX Administrator
Office: (281) 348-3717
Email: [EMAIL PROTECTED]
MS150 E-donate:
 


Administaff
"We take care of your people,
  so you can take care of your business!"


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Isolated printer problem

[Misty Stanley-Jones]

On Tuesday 04 January 2005 16:54, John H Terpstra wrote:

>
> Is the 10th user a manager of the "printer operators" group?
No.  Nobody is.

>
> At "log level = 5" what do the logs for that 10th machine show has
> happened. I suspect you will find your answer there.
>
>   log level = 5
>   max log size = 0
>   log file = /var/log/samba/%m
>
> Note: %m gets expanded to the name of the workstation.

Of note -- It turns out through testing (rather than taking the user's word 
for it) that he is not able to see any spooled jobs on any network printer of 
his.

Nothing odd that I can see here except that the message gets sent to the 
plotter 8 times ... maybe that is normal... Spewed here:

[2005/01/04 17:21:11, 5] 
printing/notify.c:print_notify_send_messages_to_printer(169)
  print_notify_send_messages_to_printer: sending 8 print notify messages to 
printer plotter
[2005/01/04 17:21:46, 3] smbd/process.c:process_smb(1092)
  Transaction 71331 of length 39
[2005/01/04 17:21:46, 5] lib/util.c:show_msg(461)
[2005/01/04 17:21:46, 5] lib/util.c:show_msg(471)
  size=35
  smb_com=0x71
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=2
  smb_pid=65279
  smb_uid=129
  smb_mid=14665
  smt_wct=0
  smb_bcc=0
[2005/01/04 17:21:46, 3] smbd/process.c:switch_message(887)
  switch message SMBtdis (pid 25406) conn 0x83dc9c8
[2005/01/04 17:21:46, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/01/04 17:21:46, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2005/01/04 17:21:46, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2005/01/04 17:21:46, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/01/04 17:21:46, 4] smbd/vfs.c:vfs_ChDir(654)
  vfs_ChDir to /data/samba/netlogon
[2005/01/04 17:21:46, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/01/04 17:21:46, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2005/01/04 17:21:46, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2005/01/04 17:21:46, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/01/04 17:21:46, 1] smbd/service.c:close_cnum(836)
  w2kgreg (192.168.1.57) closed connection to service netlogon
[2005/01/04 17:21:46, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to netlogon
[2005/01/04 17:21:46, 4] smbd/vfs.c:vfs_ChDir(654)
  vfs_ChDir to /
[2005/01/04 17:21:46, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/01/04 17:21:46, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2005/01/04 17:21:46, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2005/01/04 17:21:46, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/01/04 17:21:46, 5] lib/util.c:show_msg(461)
[2005/01/04 17:21:46, 5] lib/util.c:show_msg(471)
  size=35
  smb_com=0x71
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=2
  smb_pid=65279
  smb_uid=129
  smb_mid=14665
  smt_wct=0
  smb_bcc=0
[2005/01/04 17:22:20, 3] smbd/process.c:process_smb(1092)
  Transaction 71332 of length 39
[2005/01/04 17:22:20, 5] lib/util.c:show_msg(461)
[2005/01/04 17:22:20, 5] lib/util.c:show_msg(471)
  size=35
  smb_com=0x71
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=65279
  smb_uid=163
  smb_mid=14729
  smt_wct=0
  smb_bcc=0
[2005/01/04 17:22:20, 3] smbd/process.c:switch_message(887)
  switch message SMBtdis (pid 25406) conn 0x840fa48
[2005/01/04 17:22:20, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/01/04 17:22:20, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2005/01/04 17:22:20, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2005/01/04 17:22:20, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/01/04 17:22:20, 4] smbd/vfs.c:vfs_ChDir(654)
  vfs_ChDir to /tmp
[2005/01/04 17:22:20, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/01/04 17:22:20, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2005/01/04 17:22:20, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2005/01/04 17:22:20, 5] smbd/uid.c:change_to_root_user(296)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/01/04 17:22:20, 3] smbd/service.c:close_cnum(836)
  w2kgreg (192.168.1.57) closed connection to service IPC$
[2005/01/04 17:22:20, 3] smbd/connection.c:yield_connect

Re: [Samba] Problems on HP-UX 11i with 'user add script'

[John H Terpstra]

On Tuesday 04 January 2005 14:49, Ryan Novosielski wrote:
> This one doesn't make any sense to me. What's worse, it seems to
> occasionally work and sometimes not. I am attempting to log into a domain
> (DOMA let's say) and I only have an account on DOMB. When DOMA's Samba PDC
> attempts to create a UNIX account for me, this is what happens:
>
...
> ...when running that command from a shell, it does not exit 1. I can't
> figure out why it does that, or why there is a problem with the
> netsamlogon_cache.tdb. I read something about requiring Winbindd, but I
> don't see how my situation (two Samba PDC's with a trust relationship
> between the two different domains) requires Winbindd, unless Winbindd
> running would keep me from having to do 'add user script' work (simply
> using the same accounting info via NSS that it is getting from Samba).
>
> Can someone shed some light on this for me? The docs are not making it
> clearer.

Let's consider an example:

DOMA has a user 'freddy' with UID=2349
DOMB has a user 'freddy' with UID=5412

DOMA\freddy has SID='S-1-5-21-12345678-12345678-12345678-4698
DOMB\freddy has SID='S-1-5-21-87654321-87654321-87654321-10824

There is a two-way trust relationship between DOMA and DOMB. The method for 
establishing interdomain trusts is documented in the Samba-HOWTO-Collection. 
There is a chapter on it.

DOMA\freddy is an entirely different person from DOMB\freddy. One is the CEO 
and the other the janitor. I guess the CEO of DOMA would not like the janitor 
of DOMB to have access to his files.

What happens with your method? My guess:
DOMB\freddy accesses DOMA and inherits DOMA\freddy file access permissions.
After all, what is there to distinguish DOMA\freddy from DOMAB\freddy - they 
will have the same account name because you will not create a new account by 
calling the user add script if the local account already exists. In other 
words DOMA\freddy is the same user as DOMB\freddy in your configuration.

With winbind, DOMB\freddy will on access to the DOMA domain be allocated a UID 
out of the IDMAP UID pool, and for all intents and purposes will be an 
entirely different user from DOMA\freddy.

Does that clear up why you need to use winbind? The other reason is that 
winbind caches the domain credentials for each trusted domain thus making the 
entire network operation more efficient.

I hope this helps. This should be in the HOWTO-Collection - if not it must be 
added. I'll check and update this too.

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems on HP-UX 11i with 'user add script'

[John H Terpstra]

On Tuesday 04 January 2005 14:49, Ryan Novosielski wrote:
>
> Can someone shed some light on this for me? The docs are not making it
> clearer.

Ryan, please clarify which documentation has failed to live up to your 
expectations. I am in the process of updating the Samba docs and would like 
to get it right for once (I'd really like to get a score of 10 out of 10 - I 
do not want another fail). Please can you help me. I'll do my best to help 
you over the hump also.

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Isolated printer problem

[John H Terpstra]

On Tuesday 04 January 2005 14:43, Misty Stanley-Jones wrote:
> Hi all,
>
> I've got one printer on our network where the drivers have to be installed
> locally.  This has been a pain in the butt so far, and today is no
> different. I've got 10 users using this printer on Windows 2000.  They are
> all administrators on their local machines.  I installed the printer on
> each of their systems by browsing to \\server\, opening the Printers
> folder, right-clicking the printer, and clicking Install.  I get asked if I
> want to use the local driver, I say yes.  The driver installs, and on 9 out
> of the 10 computers all is well.  On the 10th computer, the user can print
> to the printer just fine, but cannot see any jobs in the queue.  His jobs
> are visible to other users, but he can't see anyone's jobs.  Another odd
> side-effect on his computer is that he cannot change any of the "Printing
> Defaults" such as whether the job starts printing before it has finished
> spooling.  He just gets an error that says "Settings could not be changed."
> I would expect him to get such an error if he is using a driver installed
> on the server, but not if he used a driver from his local system, and he is
> an administrator.
>
> Sorry if this is a simple one but I haven't seen it before.

Is the 10th user a manager of the "printer operators" group?

At "log level = 5" what do the logs for that 10th machine show has happened. I 
suspect you will find your answer there.

log level = 5
max log size = 0
log file = /var/log/samba/%m

Note: %m gets expanded to the name of the workstation.

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Problems on HP-UX 11i with 'user add script'

[Ryan Novosielski]

This one doesn't make any sense to me. What's worse, it seems to 
occasionally work and sometimes not. I am attempting to log into a domain 
(DOMA let's say) and I only have an account on DOMB. When DOMA's Samba PDC 
attempts to create a UNIX account for me, this is what happens:

[2005/01/04 15:47:15, 3] auth/auth_util.c:smb_create_user(53)
  smb_create_user: Running the command `/usr/sbin/useradd -g guestsmb -c "" -s /bin/false tmpwacc' gave 1
[2005/01/04 15:47:15, 3] auth/auth_util.c:make_server_info_info3(1127)
  User tmpwacc does not exist, trying to add it
Permission Denied
[2005/01/04 15:47:15, 3] auth/auth_util.c:smb_create_user(53)
  smb_create_user: Running the command `/usr/sbin/useradd -g guestsmb -c "" -s /bin/false tmpwacc' gave 1
Permission Denied
[2005/01/04 15:47:15, 3] auth/auth_util.c:smb_create_user(53)
  smb_create_user: Running the command `/usr/sbin/useradd -g guestsmb -c "" -s /bin/false tmpwacc' gave 1
[2005/01/04 15:47:15, 0] auth/auth_util.c:make_server_info_info3(1134)
  make_server_info_info3: pdb_init_sam failed!
[2005/01/04 15:47:15, 0] libsmb/samlogon_cache.c:netsamlogon_cache_store(123)
  netsamlogon_cache_store: cannot open netsamlogon_cache.tdb for write!
[2005/01/04 15:47:15, 2] auth/auth.c:check_ntlm_password(310)
  check_ntlm_password:  Authentication for user [tmpwacc] -> [tmpwacc] FAILED 
with error NT_STATUS_NO_SUCH_USER
...when running that command from a shell, it does not exit 1. I can't 
figure out why it does that, or why there is a problem with the 
netsamlogon_cache.tdb. I read something about requiring Winbindd, but I 
don't see how my situation (two Samba PDC's with a trust relationship 
between the two different domains) requires Winbindd, unless Winbindd 
running would keep me from having to do 'add user script' work (simply 
using the same accounting info via NSS that it is getting from Samba).

Can someone shed some light on this for me? The docs are not making it 
clearer.

 _  _ _  _ ___  _  _  _
|Y#| |  | |\/| |  \ |\ |  |  | Ryan Novosielski - User Support Spec. III
|$&| |__| |  | |__/ | \| _|  | [EMAIL PROTECTED] - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Isolated printer problem

[Misty Stanley-Jones]

Hi all,

I've got one printer on our network where the drivers have to be installed 
locally.  This has been a pain in the butt so far, and today is no different.  
I've got 10 users using this printer on Windows 2000.  They are all 
administrators on their local machines.  I installed the printer on each of 
their systems by browsing to \\server\, opening the Printers folder, 
right-clicking the printer, and clicking Install.  I get asked if I want to 
use the local driver, I say yes.  The driver installs, and on 9 out of the 10 
computers all is well.  On the 10th computer, the user can print to the 
printer just fine, but cannot see any jobs in the queue.  His jobs are 
visible to other users, but he can't see anyone's jobs.  Another odd 
side-effect on his computer is that he cannot change any of the "Printing 
Defaults" such as whether the job starts printing before it has finished 
spooling.  He just gets an error that says "Settings could not be changed."  
I would expect him to get such an error if he is using a driver installed on 
the server, but not if he used a driver from his local system, and he is an 
administrator.

Sorry if this is a simple one but I haven't seen it before.

Misty
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: samba 3.0.10 pkg

[Fatima . Lakniz]

Hi Jerry
Thank you so much for your help.
It did work with the new script makepkg.sh.
But during the creation of samba user I got this following error:
==
# ./smbpasswd -a $user
New SMB password:

Retype new SMB password:

Failed to open group mapping database
failed to initialize group mapping
Failed to open account policy database
Failed to open account policy database
Failed to open account policy database
Added user $user
==
Any idea why I got this error???
Thank you
Fatima
[EMAIL PROTECTED]





"Gerald (Jerry) Carter" <[EMAIL PROTECTED]> on 04 Jan 2005 10:29



To:[EMAIL PROTECTED]
Subject:Re: samba 3.0.10 pkg


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

[EMAIL PROTECTED] wrote:
|
| Hi samba team
| I am having a problem making samba3.0.10 pkg
| The following is the error I get at the end :

There's an updated version of the mkpkg.sh script at
ftp://ftp.samba.org/pub/unpacked/samba_3_0/packaging/Solaris/
I would try that one before I did anything else.







cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFB2rZAIR7qMdg1EfYRAjXWAKCyBSY+wnr3EVaTR7w7LjmwTRWzQACgzCZ4
ymjAQdKvAxxz+bx7A1flAVM=
=JPvJ
 -END PGP SIGNATURE-



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Question about soft mounting samba shares...

[John H Terpstra]

On Tuesday 04 January 2005 13:28, BJ Quinn wrote:
> I'm backing up a bunch of Windows machines onto a linux box (FC3,  Samba
> 3.0.8-0.pre1.3) and it works great... UNLESS some idiot disconnects or
> shuts down his computer while I'm running the backup, and then my rsync
> command hangs while trying to copy the files from that computer's
> smbmounted drive to the server.  Isn't there some sort of way to soft mount
> the samba share or something or allow a timeout or whatever?

Sorry, you seem to have your wires crossed! smbfs is a Linux kernel facility 
and has nothing at all to do with Samba. smbmount is only a front-end to the 
Linux kernel based smbfs interface.

The smbfs technology is mostly obsolete and has been replaced with the CIFSFS 
toolset. Again, CIFSFS is NOT a part of Samba and for any issues you should 
identify and address your issues with the correct mailing list.

Cheers,
John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Question about soft mounting samba shares...

[BJ Quinn]

I'm backing up a bunch of Windows machines onto a linux box (FC3,  Samba
3.0.8-0.pre1.3) and it works great... UNLESS some idiot disconnects or shuts
down his computer while I'm running the backup, and then my rsync command
hangs while trying to copy the files from that computer's smbmounted drive to
the server.  Isn't there some sort of way to soft mount the samba share or
something or allow a timeout or whatever?

-BJ Quinn
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] group membership + acl

[Dr. Matthias Schlett (987)]

During the last two years our fileserver was a VERITAS Samba-2.0.10-VRTS server.
This Veritas version of samba contains a special ACL component for the
uid <-> sid and gid <-> sid mapping. It also transparently converts
Windows access rights to Unix access rights and vice versa.
The recent changes in the Windows mbx driver forced us to move to Samba3.
The uid mapping works without problems because our Unix and Windows accounts
are identical.
For the gid mapping the net groupmap command has the same functionality as the
Veritas vmapadm command.
The Windows ACL's are correctly converted into the Unix ACL's, but now we have
a problem with the group membership:

If a Windows account is a member of some Windows group and the corresponding
Unix account is not a member of the corresponding Unix group, the
Windows account cannot use the Windows group rights.
This means that have to synchronize the group membership between Windows and 
Unix.

But this is not the behavior I was used to have with the Veritas Samba.

How can I reach that the Windows group membership is recognized without 
converting
all these memberships into Unix group memberships ?
I know that one possibility to avoid this problem is the use of winbind instead 
of NIS,
but at the moment we are not ready to change our NIS environment.

I hope somebody from the Samba team will have time to explain me how the
access rights of an account are checked.
I spent a lot of time to read all available Samba documentation, but about this
topic I couldn't find anything yet.

Regards
M.Schlett
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbldap-tools [smbldap-useradd.pl]

[Henrik Skantz]

tis 2005-01-04 klockan 12:05 -0600 skrev Paul Gienger:
> >I've checked cvs for any diffs. but haven't found any.
> >  
> >
> Was this the samba cvs or the idealx cvs (assuming there is one)?   You 
> may want to talk to them directly at [EMAIL PROTECTED] since the 
> smbldap-tools scripts aren't maintained by the samba team (to my knowledge).
> 
Hmm.. i wasn't thinking. It's from the samba-doc package in debian and
if i read the README file... it says http://samba.IDEALX.org/

ok, thanks



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] winbind auth pppd 2.4.3/pptpd dialup samba pdc works

[Robert Schetterer]

Hi @ll it works
(now a small description, please note this was only test setup to bring 
me nearer to the desired function !!!)

i just compiled the new
pppd 2.4.3 in my suse 9.2 system.
( i build a suse rpm )
i ve configured a test smb pdc

[global]
   encrypt passwords = yes
   unix charset = ISO8859-1
   display charset = ISO8859-1
   admin users = root, Administrator, rruegner
   use sendfile = Yes
   large readwrite = Yes
   socket options = TCP_NODELAY SO_KEEPALIVE SO_SNDBUF=8192 
SO_RCVBUF=8192
   utmp = Yes
   workgroup = robo
   passdb backend = tdbsam:/etc/samba/passdb.tdb
   password server = *
   debuglevel = 5
   interfaces = lo, eth0
   bind interfaces only = true
   wins support = Yes
   local master = Yes
   domain master = Yes
   domain logons = Yes
   security = user
   csc policy = manual
   passwd chat debug = Yes
   unix password sync = True
   passwd program = /usr/bin/passwd %u
   passwd chat = *password* %n\n *password* %n\n *changed*
   winbind separator = _
#   winbind use default domain = Yes
   winbind cache time = 600
   template shell = /bin/bash
   template homedir = /home/%U
   idmap uid = 1-2
   idmap gid = 1-2
   winbind enum groups = Yes
   winbind enum users = Yes
   add user script = /usr/sbin/useradd -m %u
   delete user script = /usr/sbin/userdel -r %u
   add group script = /usr/sbin/groupadd -r %g
   delete group script = /usr/sbin/groupdel %g
   add user to group script = /usr/bin/gpasswd -a %u %g
   delete user from group script = /usr/bin/gpasswd -d %u %g
   set primary group script = /usr/sbin/usermod -g '%g' '%u'
   add machine script = /usr/sbin/useradd -g machines -c Machine -s 
/bin/false %u
[homes]
   comment = Home Directories
   valid users = %S
   browseable = No
   read only = No
   inherit acls = Yes


and prepared a machine account for the local machine
after that i joined the pdcs own domain
net rpc join -S localhost
added a root and a testuser
smbpasswd -a root etc.
started winbind
After that i configured pam / nsswitch for winbind as described in smb 
faqs.(dont know if this is really is a must here)

test winbind
linux:/var/log/samba # wbinfo -t
checking the trust secret via RPC calls succeeded
Installed pptpd from suse 9.2, configured parameters in /etc/pptpd.conf
my  ppp.options file is like this

noauth
lock
proxyarp
#ms-dns 192.168.1.1
#ms-dns 192.168.1.2
ms-wins 10.10.100.198
#ms-wins 192.168.1.51
refuse-pap
refuse-chap
refuse-mschap
require-mschap-v2
#require-mppe-128
require-mppe
nobsdcomp
defaultroute
debug
logfile /var/log/pptpd.log
plugin winbind.so
ntlm_auth-helper "/usr/bin/ntlm_auth --helper-protocol=ntlm-server-1 
--require-membership-of=S-1-5-21-2430330691-2538081181-1539622471-3001"
--
for some magic the --require-membership parameter did not accept the 
group name , but it works nice with sid
of my group vpnuser.
-
linux:/var/log/samba # net groupmap list
System Operators (S-1-5-32-549) -> sys
dialup (S-1-5-21-2430330691-2538081181-1539622471-1207) -> dialup
Replicators (S-1-5-32-552) -> daemon
Guests (S-1-5-32-546) -> nobody
Domain Admins (S-1-5-21-2430330691-2538081181-1539622471-512) -> root
Domain Guests (S-1-5-21-2430330691-2538081181-1539622471-514) -> nobody
Power Users (S-1-5-32-547) -> sys
vpnuser (S-1-5-21-2430330691-2538081181-1539622471-3001) -> vpnuser
Print Operators (S-1-5-32-550) -> lp
Administrators (S-1-5-32-544) -> ntadmin
Account Operators (S-1-5-32-548) -> ntadmin
Domain Users (S-1-5-21-2430330691-2538081181-1539622471-513) -> users
Backup Operators (S-1-5-32-551) -> bin
Users (S-1-5-32-545) -> users
--


note : i had to use /usr/bin/ntlm_auth (samba) not 
/usr/sbin/ntlm_auth(squid) .

now users which are in the group smb-nt-vpnuser are allowed to 
dialup,others got rejected

My thx goes to Andrew which made this possible
this feature was  very wanted .
Best Regards
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] removing a file lock

[David Mendenhall]

Hi all,
I'm trying to find a way to remove a file lock. I haven't found any 
method using the smb tools. I'm assuming I could remove the file lock by 
deleting the entry in the locking.tbd file, but the keys are stored as 
binary, so I can't figure out a way to give tdbtool a proper key name to 
delete the entry. Anyone know how to remove a file lock? We're using 
samba version 3.0.10.

The reason I'm looking into this is that when saving a file using a 
Mac's smb client, it creates a "dot underscore" resource fork file, but 
doesn't unlock this resource fork when it unlocks the data file. The 
result is that other Macs can save the data file, but not the resource 
file, causing all kinds of strange behavior. I've seen mention of this 
problem on this list, but the only solution I've seen has been to buy 
Thursby's Mac client, which is cost prohibitive for us. As a hack, I 
hope was hoping to routinely parse the locking.tdb and delete any 
orphaned ._ file locks. Not the best solution, but it should get us by 
if we can't get a fix from Apple.

Any help would be appreciated.
-dmenden
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] "password server" not failing over

[casey]

In my smb.conf, I have 2 servers specified in "password server"

E.g.

password server = windc01, windc02


windc01 crashed, and Samba did not fail over to the second entry
(windc02). Netbios/WINS resolution is correct for both servers. The log
entry corresponding to this event was "Connection to  lost". Is this
expected behavior?

smbd -V = Version 3.0.9-1


[global]
workgroup = WinDomain
netbios aliases = servername0
security = server
encrypt passwords = yes
password server = windc01, windc02
smb passwd file = /etc/samba/smbpasswd
interfaces = xxx.xxx.xxx.xxx
wins server = xxx.xxx.xxx.xxx, xxx.xxx.xxx.xxx
server string = servername0
winbind uid = 1-2
winbind gid = 1-2
winbind use default domain = yes
template shell = /bin/false
log file = /var/log/samba/%m.log
max log size = 200
log level = 3
announce version = 4.0
dns proxy = no
name resolve order = hosts wins bcast
socket options = TCP_NODELAY
read raw = yes
getwd cache = yes
invalid users = root
username map = /etc/samba/usermap
time server = yes



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbldap-tools [smbldap-useradd.pl]

[Paul Gienger]

I've checked cvs for any diffs. but haven't found any.
 

Was this the samba cvs or the idealx cvs (assuming there is one)?   You 
may want to talk to them directly at [EMAIL PROTECTED] since the 
smbldap-tools scripts aren't maintained by the samba team (to my knowledge).

--
--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] smbldap-tools [smbldap-useradd.pl]

[Henrik Skantz]

Hi, I have a question about smbldap-useradd.pl.
When i add a user with smbldap-useradd -m -a USERNAME, USERNAME
is not appended to sambaHomePath.

In smbldap_conf.pm i have sambaHomePath = q(SERVER\\)

I've solved this by adding ". $userName;" in 
smbldap-useradd.pl (358).

...
 my $valsmbhome;
  if (defined $_userSmbHome) {
   $valsmbhome = "$_userSmbHome" . $userName;
...

I've checked cvs for any diffs. but haven't found any.


/Henrik 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Thank you! Upgrade from Novell 4.11 is complete

[Greg Folkert]

On Tue, 2005-01-04 at 10:51 -0500, Misty Stanley-Jones wrote:
> I just wanted to write to you guys and thank you for all of your help and 
> hand-holding as I upgraded our company's file server from a Pentium 200mmx 
> running Novell 4.11 to a nice P4 server running Linux and Samba 3.0.9.  It 
> took from September to the end of December to accomplish it, but I have 
> gotten compliments from several users about how smooth the transition was.
> 
> My environment includes every version of Windows since (and including) 
> Windows 
> 95.  I even have a computerized saw on my network, and it is happily getting 
> its cut files from the Samba server.  I only have about 60 users, so I guess 
> it is a much smaller install than most.  But Samba is running extremely lean, 
> and not bogging the server down at all.
> 
> Below is a brief summary of what I did:
> 
> 1.  Used 'rsync' to keep all of the data on the new server up-to-date with 
> what was on the Novell server so the users would not lose any data in the 
> transition.
> 
> 2.  Completely rearranged the shares and the way they are presented to much 
> users, while providing some shares to certain users who needed to see certain 
> drive letters for their ancient (RBase, QBasic) applications to work.
> 
> 3.  Improved security and eliminated home directories for users who have not 
> worked here for years and years.
> 
> 4.  All printer drivers except for the pen plotter are now stored on the 
> server.  Printing via CUPS+Samba, and the print performance has outstripped 
> the Novell print server by thousands of percents.
> 
> 5.  LDAP for authentication to not only Samba, but most UNIX servers, 
> incoming 
> and outgoing mail servers, and implemented a searchable white-pages while I 
> was at it.
> 
> 6.  I am using Kixtart for login scripts.  Drive letters are assigned based 
> on 
> group membership and machine type, and roaming profiles are implemented with 
> folder redirection for non-laptop machines.
> 
> My users are very very happy, and my boss is extremely pleased with the 
> price-point and the performance.  I just wanted to let you guys hear of a 
> Samba success story.  I will be happy to offer any advice for what I have 
> learned along the way.

I am sure that John Terpstra and Jeremy Allison would like to see you
publish an in-depth Success Story article or HOWTO to document your
progression (including the rsync, Kixtart, LDAP for everything
(including WP publishing), Of course anonymizing the configs and names
to protect the innocent (or guilty as the case may be) 

There might even be some people willing to pay a modest amount of
publishing costs to you or your company, providing it be released
similarly as John has done Samba by Example.

I know, if it were edited well and had good content, I'd be extremely
interested in purchasing a book on it. I just like to have things around
to refer to. You never know, you might get feedback on how to improve
your design and/or performance for little work or a small change doing
both.

I'd have done the same thing, but I am being blocked by the place I
wrote my write up for (as part of doing the work), as they claim it
property of their's. They will not allow any configs or setup info out,
though completely re-written without ANY of their info in it, for Samba
and AD integration, for logins on Windows and Unix using kerberos
tickets that are automagically generated, being able to login to other
unix machines from other unix machines without a password forwarding
credentials, etc... It is a really smooth setup.
-- 
greg, [EMAIL PROTECTED]

The technology that is
Stronger, better, faster: Linux


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Will This Fix Your Problem?

[Charmaine Landis]

Shed the Pounds Off in the Winter
http://www.slender7debit.com/?0d9b/f=2/PNQ/LoiW/E9qCZ


phenolic claus obfuscate furze haiku dam garish auditory caddy aging 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Except for parsing "smb.conf", how can I get a share's full settings?

[Spike Burkhardt]

Iap,

  Try testparm!

spike

"Iap, Singuan" wrote:

> Such settings as valid users, write list, comments, path.
>
> by utilities in samba/bin/net, wbinfo,...
>
> ("net rpc shares" seems not what I am looking for)
>
> Any hints are very appreciated.
>
> Iap
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Thank you! Upgrade from Novell 4.11 is complete

[Misty Stanley-Jones]

I just wanted to write to you guys and thank you for all of your help and 
hand-holding as I upgraded our company's file server from a Pentium 200mmx 
running Novell 4.11 to a nice P4 server running Linux and Samba 3.0.9.  It 
took from September to the end of December to accomplish it, but I have 
gotten compliments from several users about how smooth the transition was.

My environment includes every version of Windows since (and including) Windows 
95.  I even have a computerized saw on my network, and it is happily getting 
its cut files from the Samba server.  I only have about 60 users, so I guess 
it is a much smaller install than most.  But Samba is running extremely lean, 
and not bogging the server down at all.

Below is a brief summary of what I did:

1.  Used 'rsync' to keep all of the data on the new server up-to-date with 
what was on the Novell server so the users would not lose any data in the 
transition.

2.  Completely rearranged the shares and the way they are presented to much 
users, while providing some shares to certain users who needed to see certain 
drive letters for their ancient (RBase, QBasic) applications to work.

3.  Improved security and eliminated home directories for users who have not 
worked here for years and years.

4.  All printer drivers except for the pen plotter are now stored on the 
server.  Printing via CUPS+Samba, and the print performance has outstripped 
the Novell print server by thousands of percents.

5.  LDAP for authentication to not only Samba, but most UNIX servers, incoming 
and outgoing mail servers, and implemented a searchable white-pages while I 
was at it.

6.  I am using Kixtart for login scripts.  Drive letters are assigned based on 
group membership and machine type, and roaming profiles are implemented with 
folder redirection for non-laptop machines.

My users are very very happy, and my boss is extremely pleased with the 
price-point and the performance.  I just wanted to let you guys hear of a 
Samba success story.  I will be happy to offer any advice for what I have 
learned along the way.

Appreciatively,
Misty
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: a question about acl's... [solution]

[John H Terpstra]

On Tuesday 04 January 2005 02:01, Xavi León wrote:
> Spike wrote:
> > Xavi,
> >
> >  Did you try it out?  I tried it at our site and it didn't appear to
> > work.
> >
> > spike
>
> yes, i tried and it works, with windows and linux clients. Do you have
> looked arround permissions of the folders?
>
> I have all the folders with root.admin permisions (root and group admin) to
> rwx and other with no permissions (this in server side -> linux with samba)
> Then, If i want a group to see a folder i grant the access in rwx mode for
> this group with acl's.
> I supose it's the problem, the correct permissions. I hope you will get
> working it!

Did you mount the file system with ACL and EA support?

Example:
mount -o rw,acl.user_xattr /dev/sdc6 /mnt

If the kernel has ACLs support and the file system has been mounted with ACLs 
enabled, AND Samba has been linked with the libacls library there will be 
ACLs support. If you miss any of these steps there will be NO ACLs support.

Cheers,
John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] acl quotas

[John H Terpstra]

On Tuesday 04 January 2005 01:48, Patrick DUBAU wrote:
> Hi,
>
> i'm about to reinstall samba 3.7 on debian sarge with quota and acl
> support. What is  the best file system to use : ext3 or xfs ?
> Does i have to compile the kernel for having the quota and acl support ?

On 2.4 kernel you need to patch in the best-bits ACLs and EA patches. The 2.6 
kernel has them already. It is necessary to activate the ACLs and EA 
capabilities before building the kernel.

Cheers,
John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] pptp/pppd 2.4.3 ntlm auth acts different to your example/update partly solved

[Robert Schetterer]

Hi @ll,
the problem is partly solved
ntlm auth from squid and samba
have the same name
but different paths on suse 9.2
linux:~ # locate ntlm_auth
/usr/bin/ntlm_auth (samba)
/usr/sbin/ntlm_auth (squid)
so they act different
/usr/bin/ntlm_auth --username=example --domain=EXAMPLE
shows up the desired results as described by Andrew
Regards

Robert Schetterer schrieb:
Hi Andrew i studied
http://hawkerc.net/staff/abartlet/comp3700/final-report.pdf
and did
linux:~ # wbinfo -p
Ping to winbindd succeeded on fd 4
linux:~ # wbinfo -t
checking the trust secret via RPC calls succeeded
( joining the domain itself worked as you described , but after 
building a  machine account

net rpc join -S localhost)
next lines
would be ( taken from  your report )
ntlm_auth --username=example --domain=EXAMPLE
but this is what i get
ntlm_auth [-b] [-f] [-d] [-l] domain\controller [domain\controller ...]
-b enables load-balancing among controllers
-f enables failover among controllers (DEPRECATED and always active)
-l changes behavior on domain controller failyures to last-ditch.
-d enables debugging statements if DEBUG was defined at build-time.
You MUST specify at least one Domain Controller.
You can use either \ or / as separator between the domain name
and the controller name
ntlm_auth: invalid option -- O
unknown option: -?. Exiting
ntlm_auth usage:
ntlm_auth [-b] [-f] [-d] [-l] domain\controller [domain\controller ...]
-b enables load-balancing among controllers
-f enables failover among controllers (DEPRECATED and always active)
-l changes behavior on domain controller failyures to last-ditch.
-d enables debugging statements if DEBUG was defined at build-time.
You MUST specify at least one Domain Controller.
You can use either \ or / as separator between the domain name
and the controller name
(i double checked the pptpd logs and winbind logs
it seems clear that winbind is never asked by the plugin)
myppp.options
plugin winbind.so
ntlm_auth-helper "/usr/sbin/ntlm_auth --helper-protocol=ntlm-server-1"
/usr/sbin/ntlm_auth is taken out of squid helpers
its not a failure from general pptpd/pppd cause it works like charme 
with chap only

Any idea?
Best Regards
Andrew Bartlett schrieb:
On Tue, 2005-01-04 at 10:07 +0100, Robert Schetterer wrote:
 

Hi Andrew,
thx for this info so i have to do more study,
its clear to me that and how to join a samba pdc, but
is it possible to join the pdc/smb domain on the same pdc machine?
  

Quite possible.  Standard practice.
net rpc join -S localhost
Andrew Bartlett
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 3.0.10 issues with native mode ADS...

[David Wruck]

Earlier I had written regarding an issue with ADS
support not compiling in in the 3.0.9 release. As of a
few days ago, we scrapped the 3.0.9 install, and set
up 3.0.10, and ADS support compiled in immediately. It
looks like there might be something funny in the make
file for 3.0.9 building on Solaris 9?

Anyhow, we are much closer to an implementation on
3.0.10, but still are not quite there yet. Once again,
we are running Solaris 9, and have Samba 3.0.10
installed, and running. We joined the Win2k ADS
without any issues at all, and seemed to have a near
flawless compile and installation.

Where we are at now, the SMB service is advertising
correctly, including allowing for auto fill-in in the
RUN box, however access is still denied to any
Win-Only account. Those with a twined Unix/Win account
seem to have access. We tried manually adding a Samba
account for one of the Win-Only users, but they still
were unable to access the share, the error on the
Windows side was unknown user or password, on the
Samba side we got this:

[2005/01/03 15:25:35, 5] libsmb/credentials.c:(167)
new clnt cred: B7B5BB53C76108AD
[2005/01/03 15:25:35, 2] nsswitch/winbindd_pam.c:(361)
  Plain-text authentication for user root returned
NT_STATUS_NO_SUCH_USER (PAM: 13)
[2005/01/03 15:25:35, 10] nsswitch/winbindd.c:(524)
  client_write: wrote 1300 bytes.
[2005/01/03 15:25:35, 10] nsswitch/winbindd.c:(470)
  client_read: read 0 bytes. Need 1824 more for a full
request.
[2005/01/03 15:25:35, 5] nsswitch/winbindd.c:(477)
  read failed on sock 21, pid 6255: EOF
[2005/01/03 15:25:35, 3] smbd/sec_ctx.c:(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/01/03 15:25:35, 5] auth/auth_util.c:(486)
  NT user token: (NULL)
[2005/01/03 15:25:35, 5] auth/auth_util.c:(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary
groups

Indicating that for some reason I am not sure of,
Samba is trying to contact the domain as root.
Frankly, we are stumped here. I have logs, and configs
available to post, but will refrain unless someone
need to see them, as it would turn what is already a
fairly long post into a book-like nightmare.

David
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] problems includind a samba server in a 2003 network

[Pierre Le SIDANER]

Hello I am brand new on samba server
I am trying to put a samba server in a windows 2003 domain
the autentification have to be done by the 2003 AD, and my configuration 
does not work

my samba version is samba-3.0.10-1 on redhat
as i try to access samba server from a xp on the domain it does not work
i have try to access the pdc with ads "laurel" with net join from the 
samba server
with an acount Pierre_admin on the AD witch is administrator
and it does not work

[EMAIL PROTECTED] etc]# net join -S laurel.obspm.fr -U Pierre_admin%toto
[2005/01/04 16:25:43, 0] libads/kerberos.c:ads_kinit_password(146)
 kerberos_kinit_password [EMAIL PROTECTED] failed: Cannot 
find KDC for requested realm
[2005/01/04 16:25:43, 0] utils/net_ads.c:ads_startup(186)
 ads_connect: Cannot find KDC for requested realm
[2005/01/04 16:25:43, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(256)
 cli_nt_setup_creds: request challenge failed
[2005/01/04 16:25:43, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(256)
 cli_nt_setup_creds: request challenge failed
[2005/01/04 16:25:43, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(319)
 Error domain join verification (reused connection): 
NT_STATUS_INVALID_COMPUTER_NAME

I give you my smb.conf config, thank you for some help
[global]
workgroup = SERVICES
server string = Samba test pierre
netbios name = test_pierre
printcap name = /etc/printcap
load printers = yes
log file = /var/log/samba/smbd.log
max log size = 500
security = ADS
password server = laurel.obspm.fr
encrypt passwords = yes
add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s 
/bin/false -M 
%u

socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
  dns proxy = no
--
--- 
  Pierre Le Sidaner 
Observatoire de Paris-Meudon-Nancay 

Service Informatique de l'Observatoire 01 45 07 76 33 
Observatoire Virtuel 01 40 51 20 89 

mail:[EMAIL PROTECTED] 

--- 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Except for parsing "smb.conf", how can I get a share's full settings?

[Iap, Singuan]

Such settings as valid users, write list, comments, path.

by utilities in samba/bin/net, wbinfo,...

("net rpc shares" seems not what I am looking for)

Any hints are very appreciated.

Iap

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] pptp/pppd 2.4.3 ntlm auth acts different to your example

[Robert Schetterer]

Hi Andrew i studied
http://hawkerc.net/staff/abartlet/comp3700/final-report.pdf
and did
linux:~ # wbinfo -p
Ping to winbindd succeeded on fd 4
linux:~ # wbinfo -t
checking the trust secret via RPC calls succeeded
( joining the domain itself worked as you described , but after building 
a  machine account

net rpc join -S localhost)
next lines
would be ( taken from  your report )
ntlm_auth --username=example --domain=EXAMPLE
but this is what i get
ntlm_auth [-b] [-f] [-d] [-l] domain\controller [domain\controller ...]
-b enables load-balancing among controllers
-f enables failover among controllers (DEPRECATED and always active)
-l changes behavior on domain controller failyures to last-ditch.
-d enables debugging statements if DEBUG was defined at build-time.
You MUST specify at least one Domain Controller.
You can use either \ or / as separator between the domain name
and the controller name
ntlm_auth: invalid option -- O
unknown option: -?. Exiting
ntlm_auth usage:
ntlm_auth [-b] [-f] [-d] [-l] domain\controller [domain\controller ...]
-b enables load-balancing among controllers
-f enables failover among controllers (DEPRECATED and always active)
-l changes behavior on domain controller failyures to last-ditch.
-d enables debugging statements if DEBUG was defined at build-time.
You MUST specify at least one Domain Controller.
You can use either \ or / as separator between the domain name
and the controller name
(i double checked the pptpd logs and winbind logs
it seems clear that winbind is never asked by the plugin)
myppp.options
plugin winbind.so
ntlm_auth-helper "/usr/sbin/ntlm_auth --helper-protocol=ntlm-server-1"
/usr/sbin/ntlm_auth is taken out of squid helpers
its not a failure from general pptpd/pppd cause it works like charme 
with chap only

Any idea?
Best Regards
Andrew Bartlett schrieb:
On Tue, 2005-01-04 at 10:07 +0100, Robert Schetterer wrote:
 

Hi Andrew,
thx for this info so i have to do more study,
its clear to me that and how to join a samba pdc, but
is it possible to join the pdc/smb domain on the same pdc machine?
   

Quite possible.  Standard practice.
net rpc join -S localhost
Andrew Bartlett
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] FC2 to FC3 Upgrade help

[Jonathan Allen]

Hi All,

Due to a hard-disc crash, I have just upgraded from a working Samba setup
running in FC2 to a non-functional Samba setup running in FC3.  The Windows
XP machine has not changed, but won't connect.  Samba is fully up2date
from the FC3 repositories.

smb.conf

   [global]
   workgroup = MYGROUP
   server string = Samba Server
   hosts deny = ALL
   hosts allow = 192.168.1.0/24 127.
   interfaces = eth0 lo
   printcap name = /etc/printcap
   load printers = yes
   cups options = raw
   log file = /var/log/samba/%m.log
   max log size = 50
   security = user
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   domain master = yes 
   preferred master = yes
   dns proxy = no 
   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
   template shell = /bin/false
   winbind use default domain = no

   [homes]
   comment = Home Directories
   browseable = no
   writable = yes

   [printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
   guest ok = yes
   writable = no
   printable = yes

   [share]
   comment = Shared filespace
   path = /share
   read only = no
   public = yes

   [tmp]
   comment = Temporary file space
   path = /tmp
   read only = no
   public = yes

Following through the tests in the diagnosis section of the on-line manual:

Test 1: testparm is happy

Test 2: client and server can ping each other; 

   /etc/hosts.deny
   ALL:ALL

   /etc/hosts.allow
   ALL:83.104.103.142
   ALL:192.168.1.0/255.255.255.0

   No iptables

Test 3: expected output, but a password is required

   [EMAIL PROTECTED] samba]# smbclient -L PURSE
   Password:
   Anonymous login successful
   Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.0.10-1.fc3]
   
   Sharename   Type  Comment
   -     ---
   share   Disk  Shared filespace
   tmp Disk  Temporary file space
   IPC$IPC   IPC Service (Samba Server)
   ADMIN$  IPC   IPC Service (Samba Server)
   stylus  Printer   Created by redhat-config-printer 0.6.x
   laser   Printer   laser
   Anonymous login successful
   Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.0.10-1.fc3]
   
   Server   Comment
   ----
   PURSESamba Server
   
   WorkgroupMaster
   ----
   MYGROUP  PURSE

Test 4: seems OK

   [EMAIL PROTECTED] samba]# nmblookup -B PURSE __SAMBA__
   querying __SAMBA__ on 192.168.1.10
   192.168.1.10 __SAMBA__<00>

Test 5: doesn't work

   [EMAIL PROTECTED] samba]# nmblookup -B FAX '*'
   querying * on 192.168.1.7
   name_query failed to find name *

Test 6: doesn't exactly work

   [EMAIL PROTECTED] samba]# nmblookup -d 2 '*'
   added interface ip=192.168.1.10 bcast=192.168.1.11 nmask=255.255.255.254
   added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
   querying * on 192.168.1.11
   querying * on 127.255.255.255
   Got a positive name query response from 127.0.0.1 ( 192.168.1.10 )
   192.168.1.10 *<00>

Test 7: works

   [EMAIL PROTECTED] samba]# smbclient //PURSE/TMP
   Password:
   Anonymous login successful
   Domain=[MYGROUP] OS=[Unix] Server=[Samba 3.0.10-1.fc3]
   smb: \>

Test 8: fails completely

   C:\\Documents and Settings\jonathan\> net view \\purse
   System error 5 has occurred.

   Access is denied.

How do I move forward ?

Jonathan
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Slow network and 100% CPU

[spu]

The problem is very difficult, because is only windows 9x computers that
have problem. no with windows 2000.

Any idea ?


---
Stéphane PURNELLE [EMAIL PROTECTED]
Service Informatique   Corman S.A.   Tel : 00 32 087/342467


   
 Stéphane Purnelle   
A
   samba@lists.samba.org   
 03/01/2005 19:13   cc
   [EMAIL PROTECTED],   
   [EMAIL PROTECTED] 
 Objet
   Re: [Samba] Slow network and 100%
   CPU 
   
   
   
   
   
   




The problem of nscd was runningout out of file gandles is due to an
incorrect glibc.
nscd and the correct glibc correct version is very important.  It's not
this problem.

The problem is very odd, some compuets hangs as soon as one types
something in a spreadsheet for example.

Collins, Kevin a écrit :

>I don't know if this is your problem, but I had a similar problem with
Samba
>2.2.8 + LDAP.  It turns out that my server was running out of file
handles.
>The culprit was NSCD.  I killed it off and things have been fine ever
since.
>Good luck.
>
>Kevin
>
>
>
>>-Original Message-
>>From: Stéphane Purnelle [mailto:[EMAIL PROTECTED]
>>Sent: Monday, January 03, 2005 10:02 AM
>>To: samba@lists.samba.org; [EMAIL PROTECTED];
>>[EMAIL PROTECTED]
>>Subject: [Samba] Slow network and 100% CPU
>>
>>Hi,
>>
>>I have a samba server which functioned correctly.  Only,
>>since 2 weeks, the users have complained about slowness
>>networks and the server is to 100% CPU on the initial process smbd.
>>
>>My version is 3.0.7 and I have a Windows 2000 WINS server for
>>netbios resolution.
>>The samba server use nscd and ldap for password module.
>>
>>I upgraded to samba 3.0.10 for a test, but the problem is not
>>resolved.
>>I would like to know how to determine if is the samba server
>>or the ldap server or is the nscd or is the wins server or is
>>a conflict between to computers which have the same IP adress
>>cause these problems.
>>
>>I don't found in log a trace that is a samba problem.
>>Sometimes I read "connection reset by peer" and also in
>>nmbd.log, I can read "Failing wins test #1".
>>
>>Any information is very apprecied
>>
>>Thank you
>>
>>
>>--
>>Stéphane Purnelle <[EMAIL PROTECTED]> Site Web :
>>http://www.linuxplusvalue.be
>>
>>--
>>To unsubscribe from this list go to the following URL and read the
>>instructions:  https://lists.samba.org/mailman/listinfo/samba
>>
>>
>>
>
>
>


--
Stéphane Purnelle <[EMAIL PROTECTED]>
Site Web : http://www.linuxplusvalue.be



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 3.0.9 , mount and Win2003

[Giovanni Affuso]

Hi,
I have the seguent problem with samba ver 3.0.9 and win2003.:
when i use the command mount -t smbfs I have the seguent error:
cli_negprot: SMB signing is mandatory and we have disabled it.
21442: protocol negotiation failed
SMB connection failed
Have You solution?
Thanks in advance.
Giovanni
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] PDC and guest access

[Ilia Chipitsine]

Hi,
is it possible to prepare a share with guest access (i.e., without username
and password) on a server that is playing as PDC (i.e., security=user)? The
security setting is global, thus it's like not possible, but I'm not sure.
Thanks,
Luca

map to guest = bad user
will do the job
--
Luca Ferrari,
[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] really needs help on compiling samba 3.0.9 with ldap

[thomas constans]

Le mardi 04 janvier 2005 à 14:04 +0700, Adi Nugraha a écrit :

> /usr/bin/ld: cannot find -lgssapi_krb5
> collect2: ld returned 1 exit status
> make: *** [bin/smbd] Error 1

looks like you are missing some libs:

try installing kerberos devel packages, or similar

BTW, since ldap support is enabled on binary packages, why do you want
to compile ?

cheers

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] msdfs: links to shares not visible/accessible in dfs root

[Andreas Ntaflos]

Hello list, 

I am trying to get a DFS share to work here, linking to a few Windows 2000,
XP and NT machines. Using Samba 3.0.6 on Debian. I followed the
instructions in chapter 17 of the official HOWTO collections and set it
up like this: 

[global]
...
netbios name = fileserver
host msdfs = yes

[dfs]
path = /home/data/shares/postdfs
valid users = @post
force group = +post
read only = No
force create mode = 0770
browseable = Yes
msdfs root = Yes

an ls -/home/data/shares/postdfs looks like this:

lrwxrwxrwx1 root root 19  4. Jan 10:44 testlink -> msdfs:pc030\install

(post stands for post production)

I can access \\pc030\install manually and the permissions seem to
be correct. However, none of the clients see anything when I connect to
the \\fileserver\postdfs share. The folder just appears empty. I've set
the log level to 10 and see some funny things, for example:

[2005/01/04 10:48:56, 10] smbd/msdfs.c:parse_processed_dfs_path(90)
  temp in parse_processed_dfs_path: .fileserver/dfs/desktop.ini. after
  trimming \'s
[2005/01/04 10:48:56, 10] smbd/msdfs.c:parse_processed_dfs_path(99)
  parse_processed_dfs_path: hostname: fileserver
[2005/01/04 10:48:56, 10] smbd/msdfs.c:parse_processed_dfs_path(111)
  parse_processed_dfs_path: servicename: dfs
[2005/01/04 10:48:56, 10]
  smbd/msdfs.c:parse_processed_dfs_path(116)
  parse_processed_dfs_path: rest of the path: desktop.ini
[2005/01/04 10:48:56, 10] smbd/msdfs.c:resolve_dfs_path(307)
  resolve_dfs_path: Conn path = /home/data/shares/postdfs
  req_path = desktop.ini
[2005/01/04 10:48:56, 5] smbd/filename.c:unix_convert(109)
  unix_convert called on file "desktop.ini"
[2005/01/04 10:48:56, 10]
  smbd/statcache.c:stat_cache_lookup(249)
  stat_cache_lookup: lookup failed for name [DESKTOP.INI]
...
[2005/01/04 10:48:56, 8] lib/util.c:is_in_path(1498)
  is_in_path: testlink
[2005/01/04 10:48:56, 8] lib/util.c:is_in_path(1525)
  is_in_path: match not found
...
[2005/01/04 10:48:56, 5] smbd/msdfs.c:is_msdfs_link(244)
  is_msdfs_link: desktop.ini does not exist.
...
[2005/01/04 10:48:56, 5] smbd/msdfs.c:is_msdfs_link(244)
  is_msdfs_link: * does not exist.

I don't know if it has anything to do with it, but why does Samba keep
looking for a desktop.ini file, which doesn't (and shouldn't?) exist?
Anyway, it is the last line I posted that seems most wrong, saying "* does
not exist". Also, the only occurence of "testlink" in the log file is the
one I posted above. 

Something is definately not right there. Does anybody have any ideas?
What am I overlooking? I'd really appreciate your help, this is kind of
urgent.

Thanks a lot in advance!
-- 
Andreas "daff" Ntaflos 
daff AT dword DOT org
Vienna, Austria 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] has this bug been fixed?

[Farkas Levente]

hi,
in this not:
http://us2.samba.org/samba/docs/man/Samba-Guide/happy.html#id2536622
we can read that this's a samba bug and will be fixed. is this fixed?
we curretnly keep:
ldap machine suffix = ou=Computers
ldap user suffix = ou=People
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmap
but as a workaround to the problem we use in /etc/ldap.conf in stead of:
nss_base_passwdou=People,dc=example,dc=com?one
nss_base_shadowou=People,dc=example,dc=com?one
nss_base_group ou=Group,dc=example,dc=com?one
this settings:
nss_base_passwddc=example,dc=com?sub
nss_base_shadowdc=example,dc=com?sub
nss_base_group ou=Group,dc=example,dc=com?one
i'd be happy if i can switch back to the original one, but it doesn't 
seems to be working with the latest samba and nss_*:-(
is there any progress or it's more deeper problem?
yours.

--
  Levente   "Si vis pacem para bellum!"
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] new version of ico2sambaconf (graphical conf tool for samba) released !!!

[ico2 ico2]

ok, in response to people who have reported bugs, there is a new
version of ico2sambaconf released this morning, anyone who couldn't
run 0.8.0 should go and download 0.8.0.1 from
http://www.sourceforge.net/projects/ico2sambaconf and see if this
version fixes the prob.
if this does not fix your problem them please email me at [EMAIL PROTECTED]
if you do not know what ico2sambaconf is then below is the email i
sent yesterday giving details.



thanks
ico2





i have been working on a graphical configuration tool for samba, i
have pretty much finished the program which is written in tcl/tk.
however, i need people to test it and report bugs and features they
would like.

to use it you will need:
a unix type operating system: (it is designed for linux, but i am
interested to find if it is compatable with other OSs ie: unix, bsd,
etc.
samba: it should be compatable with most recent versions.
an xserver: this is a graphical program, so it requires an xserver.
a tcl/tk interpreter.

the program automatically makes restorable backups of the files it
edits and thus shouldn't destroy  everything, however until beta
testing is finished, i reccommend people to make backups of their
smb.conf and /etc/network/interfaces files manually.

the program should be untarred into /opt and the .tcl file run.

it can be downloaded here: http://www.sourceforge.net/projects/ico2sambaconf

i welcome feedback, questions and suggestions, my email address is
[EMAIL PROTECTED]

thanks to anyone who has taken the time to read this and/or try out my software.
ico2 :)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Swat not working

[Matt]

I have used the commands
/usr/sbin/smbd -D and /usr/sbin/nmbd -D And killall -HUP smbd and killall
-HUP nmbd and killall -HUP xinetd

all of which have produced no results.

>From what I have been able to tell I am supposed to create a file in the
xinetd.d directory with the swat information. Was I also supposed to edit
the xinetd.conf file?

Thanks for your time
`Matt

-Original Message-
From: Jeff Saxton [mailto:[EMAIL PROTECTED] 
Sent: Monday, January 03, 2005 2:35 PM
To: 'Matt'; samba@lists.samba.org
Subject: RE: [Samba] Swat not working

Did you hup xinetd? 


Jeff Saxton
Sr. Support Engineer
SenSage, Inc. ( Formerly Addamark Technologies, Inc. )
http://www.sensage.com
mailto:[EMAIL PROTECTED]
OFFICE: +1 415-281-1900x128
CELL: +1 415-640-6392

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Matt
Sent: Monday, January 03, 2005 12:29 PM
To: samba@lists.samba.org
Subject: [Samba] Swat not working

I recently decided to set up a Linux machine with the intent to run samba on
it.

 

I am running Mandrake 10 and I have installed the latest version of samba
from the website.

 

But I can't seem to get samba and swat to work. Because when I go to
http://localhost:901   I receive an error, informing
me that it cannot be reached.

 

This is what I have done so far.

Edit the services file

Edit the xinetd

Created and edited the smb.conf

 

>From what I can tell I should be able to access swat now, but it just 
>does
not seem to be working. Any help would be appreciated.

 

Thanks for your time.

`Matt

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: a question about acl's... [solution]

[Xavi León]

Spike wrote:
Xavi,
 Did you try it out?  I tried it at our site and it didn't appear to work.
spike
yes, i tried and it works, with windows and linux clients. Do you have looked 
arround permissions of the folders? 

I have all the folders with root.admin permisions (root and group admin) to rwx
and other with no permissions (this in server side -> linux with samba) 
Then, If i want a group to see a folder i grant the access in rwx mode for this
group with acl's.
I supose it's the problem, the correct permissions. I hope you will get working it!

Xavi
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] acl quotas

[Patrick DUBAU]

Hi,
i'm about to reinstall samba 3.7 on debian sarge with quota and acl support.
What is  the best file system to use : ext3 or xfs ?
Does i have to compile the kernel for having the quota and acl support ?
Thanks
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smb_trans2: invalid data

[Michael Gasch]

hi,
i also have this problem
e.g.
"touch test" on smb FS ends with an timeout and error like "could not 
set time ... " although unix extensions is of

mounting with cifs does not show this behaviour
greez

mountingJan Romportl wrote:
Hello everyone,
I have tried to solve out the 'smb_trans2: invalid data' by 'unix extensions = 
no' as it was written in one of the previous mails. Still I have a bad 
problem:

when I mount like this:
mount.smbfs //server/service /local_dir -o 
username=my_remote_login,uid=my_local_login,gid=users,rw

and then I try to copy a file to /local_dir as the user my_local_login, the 
file is copied ok but then it takes a looong time to go on (perhaps when 
changing the file's uid or attributes, or whatever...). Actually before I set 
'unix extensions = no', it took a long time even before any copying (after 
copying too). So now it became little better, but still quite unusable ;-)

Do I do something wrong, or is there a way how to solve this problem?
Thank you very much.
J.R.

--
 Michael Gasch
   - Central IT Department -
Max Planck Institute for Evolutionary Anthropology
Deutscher Platz 6
04103 Leipzig
Germany
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba