Re: [Samba] Horrible Linux/Samba vs Windows political battle - can you help?

[Tomasz Chmielewski]

Gregory A. Cain schrieb:

Greetings,

I am currently the IT Manager for a 30-person architectural firm. About 
5 months ago we hired a new employee. He is quite good at what he does. 
He is also extremely opinionated, particularly when it comes to computer 
software, including server software.


I'm running the office server functions on RedHat, Fedora and Trustix 
servers. He has managed to convince my boss that there are serious 
problems with these servers and with Linux in general. After having 
worked here for over 14 years, I would have hoped my boss would have 
more trust in my choices.


In any case, I now find myself in the position of having to defend my 
position here. My boss has gone as far as to hire an independent 
consultant to evaluate our whole network infrastructure, simply on the 
basis of the new employee's statemenets about the worthlessness of 
Linux. I do not relish being put in this position, however I'm going to 
take a stand.


If there is anyone reading this who works in the field of architecture 
or engineering, and with CAD or BIM software, who is using Linux as your 
server software, I would sure be appreciative it if you could write a 
testimonial for me to help me convince my boss that migrating from Linux 
to MS would be a horrible mistake.


perhaps it would help us if you told which statements he said about "the 
worthlessness of Linux"?

and why he claims Windows would be superior over Linux in your case.

what our company does at the moment is quite reverse - migrating our 
customers Windows to Linux, or just setting Linux in new locations, as 
it has better value and is easier to manage.


--
Tomek
http://wpkg.org

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

AW: [Samba] smbd errors from "getpeername"

[Benjamin.Oeltze]

I,ve read that this is normal behavior.
Win XP uses two Ports at the same time (145 and 137???).
It gets a connection on one of them and then drops the second connection.
Samba does not recognise this and tries to communicate to the dropped port.
Because of this you get this messages.



Von: [EMAIL PROTECTED] im Auftrag von Kevin Duckett
Gesendet: Mo 19.09.2005 17:26
An: Samba
Betreff: [Samba] smbd errors from "getpeername"



I receive the following errors/warnings in this scenario.

- From my Windows XP client, I open Network Places. I then click View
workgroup computers. When the list of computers is displayed into the
window I receive the following messages in /var/log/messages.

Sep 19 09:48:53 lnx04 smbd[3101]: [2005/09/19 09:48:53, 0]
lib/util_sock.c:get_peer_addr(1222)
Sep 19 09:48:53 lnx04 smbd[3101]:   getpeername failed. Error was
Transport endpoint is not connected
Sep 19 09:48:53 lnx04 smbd[4314]: [2005/09/19 09:48:53, 0]
lib/util_sock.c:get_peer_addr(1222)
Sep 19 09:48:53 lnx04 smbd[4314]:   getpeername failed. Error was
Transport endpoint is not connected
Sep 19 09:48:53 lnx04 smbd[4314]: [2005/09/19 09:48:53, 0]
lib/util_sock.c:get_peer_addr(1222)
Sep 19 09:48:53 lnx04 smbd[4314]:   getpeername failed. Error was
Transport endpoint is not connected
Sep 19 09:48:53 lnx04 smbd[4314]: [2005/09/19 09:48:53, 0]
lib/access.c:check_access(328)
Sep 19 09:48:53 lnx04 smbd[4314]: [2005/09/19 09:48:53, 0]
lib/util_sock.c:get_peer_addr(1222)
Sep 19 09:48:53 lnx04 smbd[4314]:   getpeername failed. Error was
Transport endpoint is not connected
Sep 19 09:48:53 lnx04 smbd[4314]:   Denied connection from  (0.0.0.0)
Sep 19 09:48:53 lnx04 smbd[4314]: [2005/09/19 09:48:53, 0]
lib/util_sock.c:get_peer_addr(1222)
Sep 19 09:48:53 lnx04 smbd[4314]:   getpeername failed. Error was
Transport endpoint is not connected
Sep 19 09:48:53 lnx04 smbd[4314]:   Connection denied from 0.0.0.0
Sep 19 09:48:53 lnx04 smbd[4314]: [2005/09/19 09:48:53, 0]
lib/util_sock.c:write_data(554)
Sep 19 09:48:53 lnx04 smbd[4314]:   write_data: write failure in writing
to client 0.0.0.0. Error Connection reset by peer
Sep 19 09:48:53 lnx04 smbd[4314]: [2005/09/19 09:48:53, 0]
lib/util_sock.c:send_smb(762)
Sep 19 09:48:53 lnx04 smbd[4314]:   Error writing 5 bytes to client. -1.
(Connection reset by peer)

Next, I close the Network Places window and execute the same steps to
see if the messages come back the second time around.  They do not.
However, if I restart the smbd services and do it all over again, they
do.


--
<[EMAIL PROTECTED]>

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba 

 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] passdb backend = pizza

[Chris]

Just want to discuss the limits of testparm. I know it has found 
problems for me in the past but never realized previously how gullible 
it really was.

There are, apparently, many things it never uncovers as an error. Such 
as "passdb backend = pizza", not a valid argument but it passes 
testparm. So does "name resolution order = pizza".

Pizza, is, afterall, a special case (and delicious) but how about "name 
resolve order = hosts wins bcast"? Notice that the correct argument is 
"host" and not "hosts". A running of testparm fails to identify this 
typo just as easily as it accepts "pizza".

Is it just the systems I've. examined? Am I looking for too much? Or 
does testparm need to pay more attention?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Group names matching user names

[Albert Chin]

We're configuring Windows Server 2003 against Samba with an LDAP
backend. Things are mostly working. On the UNIX end, all users have,
as their primary group, a groupname matching their login id. So,
username "china" has groupname "china" as the primary group. I tried
creating a local user on the Windows Server 2003 box and a groupname
equivalent to the username but it wouldn't let me ("The account
already exists" is the error returned). Is the way we're doing things
on UNIX going to cause a problem for Windows? One Windows application
we tested wouldn't allow us to login because of this issue.

-- 
albert chin ([EMAIL PROTECTED])
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] sambaSIDList attribute

[Albert Chin]

On Thu, Sep 15, 2005 at 04:39:48PM +0200, Christian Sengstock wrote:
> 
> Anyone knows what the "sambaSIDList" attribute is for? I can't find
> this entry in my ldap ("ldapsearch -D ... -b ... | grep sambaSIDList")
> but the attribute is defined in the samba3.schema (suse92enterpr).

I think sambaSIDList is a list of SIDs that are members of the group.

-- 
albert chin ([EMAIL PROTECTED])
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] USRMGR group problems

[Eric A. Hall]

On 9/19/2005 9:06 AM, Michael Gasch wrote:
> do the groups have correct mappings to local ones?
> i've had the same error "The group name could not be found" and had some 
> errors in my mappings

Yup, that was the first thing I checked.

Also, due to untimely hardware crash I got to rebuild my LDAP directory
over the weekend, and the new entries are exhibiting the exact same
problems, with the exact same groups.

-- 
Eric A. Hallhttp://www.ehsco.com/
Internet Core Protocols  http://www.oreilly.com/catalog/coreprot/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Horrible Linux/Samba vs Windows political battle - can you help?

[Gregory A. Cain]

Greetings,

I am currently the IT Manager for a 30-person architectural firm. About 
5 months ago we hired a new employee. He is quite good at what he does. 
He is also extremely opinionated, particularly when it comes to computer 
software, including server software.


I'm running the office server functions on RedHat, Fedora and Trustix 
servers. He has managed to convince my boss that there are serious 
problems with these servers and with Linux in general. After having 
worked here for over 14 years, I would have hoped my boss would have 
more trust in my choices.


In any case, I now find myself in the position of having to defend my 
position here. My boss has gone as far as to hire an independent 
consultant to evaluate our whole network infrastructure, simply on the 
basis of the new employee's statemenets about the worthlessness of 
Linux. I do not relish being put in this position, however I'm going to 
take a stand.


If there is anyone reading this who works in the field of architecture 
or engineering, and with CAD or BIM software, who is using Linux as your 
server software, I would sure be appreciative it if you could write a 
testimonial for me to help me convince my boss that migrating from Linux 
to MS would be a horrible mistake.


Also, if you know of any other resources that might be helpful to me, 
I'd greatly appreciate hearing from you.


ANY help would be MUCH appreciated!!

Thank you.

Greg


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] reverse veto files? feature request?

[Guido Lorenzutti]

Jeremy Allison escribió:


On Mon, Sep 19, 2005 at 07:50:56PM -0300, Guido Lorenzutti wrote:
 

Hi people, is there anyway to have a reverse list of the veto files = ? 
I mean, ONLY THIS type of file? Like


only like = /*.mp3/ ?
Instead of having to put everysingle extension that I can think of?
   



H - good idea. I don't know how to do this right now - let me
think about it

Jeremy.
 



Ohhh it would be PERFECT to have this.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba as an NT5 (Win2K) PDC

[Javid Mahdavi]

Hi

I am trying to find someone who can help me with configuring samba as a 
Win2k PDC, I have read various How-TO's and the online reference material 
but some of it has conflicting advice. I wondered if someone who has 
actually managed to configure and uses samba as a Win2k PDC and logon server 
could email me to help me with this issue.


Javid Mahdavi


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] SMBPASSWD failing for normal users - smb 3.0.14a

[Todd Johnson]

Hello -

Im having a problem w/ my users being able to change their SMB password. 
What is the best approach to allow users acces to smbpasswd to change 
their own passwords when they want?


Right now Im getting the following error:

machine 127.0.0.1 rejected the (anonymous) password change: Error was : 
Wrong Password.

Failed to change password for donald


Here is my global from the smb.conf

[global]
  netbios name = WOOT
  socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 
SO_SNDBUF=8192

  server string = SMB v3.0.14a
  local master = yes
  preferred master = yes
  domain logons = no
  domain master = no
  workgroup = Puddin
  interfaces = 146.61.201.2
  bind interfaces only = no
  log file = /var/log/samba-log.%m
  log level = 2
  max log size = 50
  lock directory = /var/lock/samba
  printcap name = /etc/printcap
  wins support = no
  wins server = 136.61.203.14
  os level = 62
  remote announce = 136.61.203.255
  deadtime = 15
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] reverse veto files? feature request?

[Jeremy Allison]

On Mon, Sep 19, 2005 at 07:50:56PM -0300, Guido Lorenzutti wrote:
> Hi people, is there anyway to have a reverse list of the veto files = ? 
> I mean, ONLY THIS type of file? Like
> 
> only like = /*.mp3/ ?
> Instead of having to put everysingle extension that I can think of?

H - good idea. I don't know how to do this right now - let me
think about it

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] reverse veto files? feature request?

[Guido Lorenzutti]

Hi people, is there anyway to have a reverse list of the veto files = ? 
I mean, ONLY THIS type of file? Like


only like = /*.mp3/ ?
Instead of having to put everysingle extension that I can think of?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] samba duplicate name error FIXED

[Modus Operandi]

In the immortal words of Modus Operandi <[EMAIL PROTECTED]>:
> 
> we have been trying to move our samba box to a faster server, with better
> NICs, faster processor and more memory.
> 
> both the old and new server are using samba 3.0.14A
> both on debian based distributions (old was sarge, new is breezy)
> 
> here are the steps we followed:
> install samba from the apt archives.
> confirmed that they were the same version.
> copied smb.conf from old server to new server.
> changed domain name, or workgroup = domain2
> as well as netbios name

  

  Well, that was the problem. I set the workgroup and
the netbios to the same name, which was causing the
"duplicate name" error.

  Not sure why the old install worked just fine with
netbios and workgroup set to the same thing.

  Anyway, we can now log on to the domain without the
error. There are still problems, though ... the
authenication procedure is incredibly slow -- and the
reason we got a new server was so it would be faster.

  Tomorrow, I will make sure all the users are created
with the same uid on the new server, and then convert
our old smbpasswd to tdb format.

-- 
/home/modus/.signature
Mon Sep 19 18:19:45 EDT 2005
The Moon is Waning Gibbous (95% of Full)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba / Windows server 2003 SP1 conflict

[Jeremy Allison]

On Mon, Sep 19, 2005 at 05:47:44PM -0400, Timothy A. Holmes wrote:
> Hi Folks:
> 
> It seems that there is a problem with samba and Server 2003 SP1.  When
> SP1 Installs, samba stops authenticating in ADS mode, and causes
> considerable heartburn.  The research that I have found (dated April of
> this year) seems to indicate that it is a problem with samba
> communicating with the Kerbros server using a protocol called schannel
> (I hope im getting this straight, Our domain controller crashed, and I
> have lost my history to go back to the sources that I found).
> 
> Is there a work around other than not using SP1,  I seem to remember
> that one of the sources that I saw indicated a command to be included in
> the smb.conf file, but I cannot find it readily.  Can someone please
> enlighten me as to how to get this working???

client schannel = no

will stop winbindd using schannel. This has been fixed in 3.0.20.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba / Windows server 2003 SP1 conflict

[Timothy A. Holmes]

Hi Folks:

It seems that there is a problem with samba and Server 2003 SP1.  When
SP1 Installs, samba stops authenticating in ADS mode, and causes
considerable heartburn.  The research that I have found (dated April of
this year) seems to indicate that it is a problem with samba
communicating with the Kerbros server using a protocol called schannel
(I hope im getting this straight, Our domain controller crashed, and I
have lost my history to go back to the sources that I found).

Is there a work around other than not using SP1,  I seem to remember
that one of the sources that I saw indicated a command to be included in
the smb.conf file, but I cannot find it readily.  Can someone please
enlighten me as to how to get this working???

Thank you so much for your time and trouble

TIM

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Erro winbind and ACLs

[Jeremy Allison]

On Mon, Sep 19, 2005 at 06:00:02PM -0300, Luis Henrique de Faria Guimarães 
wrote:
> Hi,
> I am configuring a machine with Red Hat Enterprise Linux 3 with samba 3.0.14 
> to be member of a domain with PDC windows 2003.
> However, the control of ACLCs is not functioning and winbind is interrupting 
> the service frequently.
> Below smb.conf follows mine and a part of the archive of log.

This looks like it may be a crash in the krb5 libs. Have you
got all the krb5 updates installed for that platform ?

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Erro winbind and ACLs

[Luis Henrique de Faria Guimarães]

Hi,
I am configuring a machine with Red Hat Enterprise Linux 3 with samba 3.0.14 to 
be member of a domain with PDC windows 2003.
However, the control of ACLCs is not functioning and winbind is interrupting 
the service frequently.
Below smb.conf follows mine and a part of the archive of log.

# Global parameters
[global]
workgroup = ECPNET
realm = ECP.ORG.BR
server string = Samba Server
security = ADS
client schannel = No
password server = 10.0.0.5, *
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *
passwd:*all*authentication*tokens*updated*successfully*
username map = /etc/samba/smbusers
password level = 8
username level = 8
log file = /var/log/samba/%m.log
max log size = 50
acl compatibility = win2k
name resolve order = host lmhosts wins bcast
server signing = auto
client use spnego = No
socket options = TCP_NODELAY SO_RCVBUF=131072 SO_SNDBUF=131072
addprinter command = addprinter
deleteprinter command = delprinter
add machine script = /usr/sbin/useradd -d /dev/null -g 504 -c
local master = No
dns proxy = No
wins server = 10.0.0.5
ldap idmap suffix = ou
ldap ssl = no
add share command = /usr/local/samba/modify_samba_config.pl
change share command = /usr/local/samba/modify_samba_config.pl
delete share command = /usr/local/samba/modify_samba_config.pl
idmap uid = 1-2
idmap gid = 1-2
template primary group =
template homedir = /data/users/%U
template shell = /bin/ksh
winbind separator = +
winbind cache time = 120
#winbind enable local accounts = Yes
   winbind use default domain = Yes
auth methods = winbind, ntdomain
admin users = ECPNET+administrator, ECPNET+corniani, administrator, root
read only = No
force unknown acl user = Yes
guest ok = Yes
profile acls = Yes
preexec = sh /usr/bin/makedir %U

#Share
[data]
comment = Area de dados do Servidor Pinheiros
path = /data
browseable = No
#Otimizacoes DataFlex
veto oplock files = /*.dat/*.DAT/*.k*/*.K*/*.cfg/*.CFG/*.VLD/*.vld/
#Fim das otimizacoes DataFlex
###

Log file /var/log/messages

Sep 17 06:54:22 pinheiros winbindd[22844]: [2005/09/17 06:54:22, 0] 
lib/fault.c:fault_report(36)
Sep 17 06:54:22 pinheiros winbindd[22844]:   
===
Sep 17 06:54:22 pinheiros winbindd[22844]: [2005/09/17 06:54:22, 0] 
lib/fault.c:fault_report(37)
Sep 17 06:54:22 pinheiros winbindd[22844]:   INTERNAL ERROR: Signal 6 in pid 
22844 (3.0.14a)
Sep 17 06:54:22 pinheiros winbindd[22844]:   Please read the appendix Bugs of 
the Samba HOWTO collection
Sep 17 06:54:22 pinheiros winbindd[22844]: [2005/09/17 06:54:22, 0] 
lib/fault.c:fault_report(39)
Sep 17 06:54:22 pinheiros winbindd[22844]:   ===

Sep 17 06:54:22 pinheiros winbindd[22844]: [2005/09/17 06:54:22, 0] 
lib/util.c:smb_panic2(1495)
Sep 17 06:54:22 pinheiros winbindd[22844]:   PANIC: internal error
Sep 17 06:54:22 pinheiros winbindd[22844]: [2005/09/17 06:54:22, 0] 
lib/util.c:smb_panic2(1503)
Sep 17 06:54:22 pinheiros winbindd[22844]:   BACKTRACE: 27 stack frames:
Sep 17 06:54:22 pinheiros winbindd[22844]:#0 winbindd(smb_panic2+0x128) 
[0x80cfc48]
Sep 17 06:54:22 pinheiros winbindd[22844]:#1 winbindd(smb_panic+0x19) 
[0x80cfb19]
Sep 17 06:54:22 pinheiros winbindd[22844]:#2 winbindd [0x80bd592]
Sep 17 06:54:22 pinheiros winbindd[22844]:#3 /lib/libc.so.6 [0x546188]
Sep 17 06:54:22 pinheiros winbindd[22844]:#4 /lib/libc.so.6(abort+0x157) 
[0x5471cb]
Sep 17 06:54:22 pinheiros winbindd[22844]:#5 winbindd [0x80f1e76]
ep 17 06:54:22 pinheiros winbindd[22844]:#6 winbindd [0x80f2095]
Sep 17 06:54:22 pinheiros winbindd[22844]:#7 
winbindd(cli_krb5_get_ticket+0x1fa) [0x80f24ca]
Sep 17 06:54:22 pinheiros winbindd[22844]:#8 
winbindd(spnego_gen_negTokenTarg+0x41) [0x80f30f1]
Sep 17 06:54:22 pinheiros winbindd[22844]:#9 winbindd [0x817922f]
Sep 17 06:54:22 pinheiros winbindd[22844]:#10 winbindd [0x8179519]
Sep 17 06:54:22 pinheiros winbindd[22844]:#11 
winbindd(ads_sasl_bind+0x132)[0x8179c32]
Sep 17 06:54:22 pinheiros winbindd[22844]:#12 winbindd(ads_connect+0x1a9) 
[0x81734f9]
Sep 17 06:54:22 pinheiros winbindd[22844]:#13 
winbindd(ads_do_search_retry+0xd5) [0x817ef35]
Sep 17 06:54:22 pinheiros winbindd[22844]:#14 winbindd(ads_USN+0x51) 
[0x81778d1]
Sep 17 06:54:22 pinheiros winbindd[22844]:#15 winbindd [0x80885e2]
Sep 17 06:54:22 pinheiros winbindd[22844]:#16 winbindd [0x8078fd8]
Sep 17 06:54:22 pinheiros w

Re: [Samba] Permissions not recursive on win2K?

[Shawn Wright]

On 19 Sep 2005 at 12:02, Jeremy Allison wrote:

> On Mon, Sep 19, 2005 at 11:32:22AM -0700, Shawn Wright wrote:
> > Sorry for the report, but I got exactly zero replies, so I will try again:
> > 
> > I am now running 3.0.14a, but the permissions recursion problem still 
> > exists. Each time I apply permissions to a tree using the Win2K GUI, the 
> > addition or removal of an> > n other words, if the tree is 4 levels deep, 
> > it will take 3 passes of the 
> > operation before the ACL change appears in the 4th level. This long 
> > standing problem is seriously limiting our migration to samba. Can 
> > someone please tell me if this has been fixed in 3.0.20?
> > 
> > I have offered configs, debug, etc. and the offer still stands. I just want 
> > to 
> > see this problem fixed, and can't believe it is not affecting more users. 
> > 
> > For the record, here is the environment:
> > Mandrake 10.1 with ACL support on XFS
> > The share used for testing the issue is the "home" share.
> > PDC is running NT4 SP6a
> > Client used for setting ACLs running Win2K SP4, tested using GUI, cacls, 
> > and xcacls.
> 
> Do you know if it's allowing EA's to be set on the filesystem ?
> The inheritance code uses EA's.

Sorry for my ignorance, but how would I check this? Thanks.


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Shawn Wright, I.T. Manager
Shawnigan Lake School
http://www.sls.bc.ca
[EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Permissions not recursive on win2K?

[Jeremy Allison]

On Mon, Sep 19, 2005 at 11:32:22AM -0700, Shawn Wright wrote:
> Sorry for the report, but I got exactly zero replies, so I will try again:
> 
> I am now running 3.0.14a, but the permissions recursion problem still exists. 
> Each time I apply permissions to a tree using the Win2K GUI, the addition or 
> removal of an ACL will move exactly one level deeper than before.  I
> n other words, if the tree is 4 levels deep, it will take 3 passes of the 
> operation before the ACL change appears in the 4th level. This long 
> standing problem is seriously limiting our migration to samba. Can 
> someone please tell me if this has been fixed in 3.0.20?
> 
> I have offered configs, debug, etc. and the offer still stands. I just want 
> to 
> see this problem fixed, and can't believe it is not affecting more users. 
> 
> For the record, here is the environment:
> Mandrake 10.1 with ACL support on XFS
> The share used for testing the issue is the "home" share.
> PDC is running NT4 SP6a
> Client used for setting ACLs running Win2K SP4, tested using GUI, cacls, 
> and xcacls.

Do you know if it's allowing EA's to be set on the filesystem ?
The inheritance code uses EA's.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problem over VPN

[Covington, Chris]

> Sorry for replying to my own post.  As nobody has any input, is it 
> appropriate to forward it to the devel list?

ps - sometimes it takes more than 24 hours to get a response


---
Chris Covington
IT
Plus One Health Management
75 Maiden Lane Suite 801
NY, NY 10038
646-312-6269
http://www.plusoneactive.com
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Permissions not recursive on win2K?

[Shawn Wright]

Sorry for the report, but I got exactly zero replies, so I will try again:

Way back on Mar 10 2004, I wrote this: 
> 
> == 
> Perhaps this is a known problem, and if so, hopefully it is fixed 
> in 3.x: 
> 
> Win2K SP4 clients, Samba 2.2.8a servers on Linux using ACL 
> support with 
> XFS filesystem (Redhat SGI-XFS build, and Mandrake 9.2). 
> 
> Adding/editing an ACL for an NT domain group (or user) to a 
> folder on samba, and 
> attempting to apply permissions to all subdirs and files only 
> goes one 
> level deep when using the win2k standard gui tool. ie: Only 
> ACLS for the 
> selected folder and files in top level are touched. Problem does 
> not occur 
> when using an NT4 client. Interestingly, using the NT4 security 
> dialog on 
> win2k (by way of the RSHXMENU powertoy for NT) works fine 
> on win2K.  
> 
> Is this a known issue? I can provide conf and debug output if 
> necessary, 
> but I assumed someone else must have seen this already (and 
> fixed it? :-) 
> == 
> 
> Then, I got this reply: 
> 
> >On 24 Mar 2004 at 9:13, Gerald (Jerry) Carter wrote: 
> >  
> > Yup.  It is fixed in 3.0 what what I remember.  Jeremy worked 
> on it. 
> 
> Eventually I got around to upgrading the affected servers to 
> 3.0.11, but  the problem persists, and I didn't have time to dig 
> into it. Now I need to  replace two samba servers, and would 
> like to resolve this issue. I've now  read the release notes from 
> 3.0.12 to 3.0.20RC2 and couldn't find  mention of a fix.  

I am now running 3.0.14a, but the permissions recursion problem still exists. 
Each time I apply permissions to a tree using the Win2K GUI, the addition or 
removal of an ACL will move exactly one level deeper than before.  I
n other words, if the tree is 4 levels deep, it will take 3 passes of the 
operation before the ACL change appears in the 4th level. This long 
standing problem is seriously limiting our migration to samba. Can 
someone please tell me if this has been fixed in 3.0.20?

I have offered configs, debug, etc. and the offer still stands. I just want to 
see this problem fixed, and can't believe it is not affecting more users. 

For the record, here is the environment:
Mandrake 10.1 with ACL support on XFS
The share used for testing the issue is the "home" share.
PDC is running NT4 SP6a
Client used for setting ACLs running Win2K SP4, tested using GUI, cacls, 
and xcacls.

Build options:
./configure --with-winbind --with-acl-support --with-quotas --
sbindir=/usr/sbin --bindir=/usr/bin --localstatedir=/var/log/samba  --with-
swatdir=/usr/share/swat --with-lockdir=/var/cache/samba --with-
configdir=/etc/samba --with-piddir=/var/run

conf file:
[global]
workgroup = SHAWNIGAN
netbios name = ADMIN3
server string = ADMIN3 Server
winbind uid = 1-2
winbind enum users = yes
winbind gid = 1-2
winbind separator = +
winbind enum groups = yes
disable spoolss = yes
unix password sync = no
max xmit = 65535
hosts allow = 10. 72.2.0.
dns proxy = no
oplocks = yes
inherit permissions = yes
debug level = 1
security = domain
getwd cache = yes
log level = 3
read raw = yes
write raw = yes
socket options = TCP_NODELAY IPTOS_LOWDELAY 
SO_RCVBUF=16384 SO_SNDBUF=16384
wins server = 72.2.0.5 72.2.0.4
create mask = 0700
domain master = no
map to guest = never
null passwords = no
encrypt passwords = yes
template shell = /bin/false
dead time = 0
password level = 0
password server = *
directory mask = 0700
preferred master = no

[homes]
comment = Staff Home Directories
browseable = no
writable = yes
available = yes
public = no
create mask = 2700
inherit permissions = yes
nt acl support = no
force group = "shawnigan+domain users"
force security mode = 0777
path = /home/staff/%U


[home]
comment = Homes
browseable = yes
writable = yes
available = yes
public = no
only user = no
path=/home 
valid users = @"shawnigan+domain admins"
admin users = @"shawnigan+domain admins"

[sysroot]
comment = sysroot
valid users = @"shawnigan+domain admins"
admin users = @"shawnigan+domain admins"
writeable = yes
path = /
hosts allow =10.4. 72.2.0.

[staffhome]
comment = Staff Homes - Web Access
browseable = yes
writable = yes
available = yes
public = no
only user = no
path=/home/staff
valid users = @"shawnigan+domain admins","shawnigan+Apache-
Internal"
admin users = @"shawnigan+domain admins"



-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Shawn Wright, I.T. Manager
Shawnigan Lake School
http://www.sls.bc.ca
[EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://l

Re: [Samba] Problem over VPN

[Covington, Chris]

> Sorry for replying to my own post.  As nobody has any input, 
> is it appropriate to forward it to the devel list?

It would be off-topic for the devel list, unless you have a patch to fix
the problem, or something like that.  If you don't get a response you
can either rephrase the question, provide more information, or pay
someone to fix it.  There isn't a guarantee of support for samba as far
as I know. 

---
Chris Covington
IT
Plus One Health Management
75 Maiden Lane Suite 801
NY, NY 10038
646-312-6269
http://www.plusoneactive.com

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Password expire

[Tom Diehl]

On Mon, 19 Sep 2005, Marcelo Garabelli wrote:

> I`d like to know if it`s possible to configure user passwords to expire
> after xx days and if it`s possible to show a dialogue to change the password
> in windows clients

Yes. Suggest you look at http://us3.samba.org/samba/docs/man/Samba-Guide/

There are several different ways to do it depending on your requirements
but samba 3.0.20 with an ldap backend it WORKSFORME.

Hope this helps,

Tom Diehl   [EMAIL PROTECTED]   Spamtrap address [EMAIL 
PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Problem: FreeBSD 5.4 and Samba 3.0.20 not working with ADS

[Thomas Lesh]

Hello all,

I'm having a really difficult time with this setup.  I can communicate
with my Win2k3 PDC from my FreeBSD Samba file server by using the wbinfo
utility.  The wbinfo utility returns all of the information that I
expect it to successfully.  I've joined the Samba file server to the AD
already.  Users can access shared resources on the Samba file server
*ONLY IF* they have a local account on the Samba file server.  What am I
doing wrong, it's giving me massive headaches?!  Here are my config
files:

---[ smb.conf ]---
[global]
workgroup = HELLO
realm = HELLO.LOCAL
server string = Samba File Server
security = ADS
auth methods = winbind
password server = 192.168.20.5
log level = 3
log file = /var/log/samba/log.%m
max log size = 100
socket options = TCP_NODELAY SO_RCVBUF=16384 SO_SNDBUF=16384
printcap name = cups
preferred master = No
domain master = No
dns proxy = No
wins server = 192.168.20.5
ldap ssl = no
idmap uid = 1-2
idmap gid = 2-3
winbind use default domain = Yes
winbind trusted domains only = Yes
invalid users = root
acl group control = Yes
inherit permissions = Yes
inherit acls = Yes
write cache size = 262144

[homes]
comment = Home Directories
read only = No
browseable = No

[public]
comment = Public Share
path = /home/pub
admin users = Administrator
read only = No
create mask = 0664
directory mask = 0775
guest ok = Yes

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No

---[ krb5.conf ]---
 [libdefaults]
default_realm = HELLO.LOCAL

[realms]
HELLO.LOCAL = {
kdc = champion.hello.local
admin_server = champion.hello.local
}

[domain_realm]
.hello.local = HELLO.LOCAL

---[ nsswitch.conf ]---
group: compat files winbind
group_compat: nis
hosts: files dns
networks: files
passwd: compat files winbind
passwd_compat: nis
shells: files
shadow: files winbind

---[ /etc/pam.d/login ]---
# auth
authrequiredpam_nologin.so  no_warn
authsufficient  pam_self.so no_warn
authinclude system
authsufficient  pam_winbind.so

# account
account requisite   pam_securetty.so
account include system
account sufficient  pam_winbind.so

# session
session include system

# password
passwordinclude system


Thanks for taking the time to check this out!
-Tom
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] stale name lookup result

[Brandon Kuczenski]

I am running a Samba 3.0.10 server on freeBSD and 3.0.10-Debian client.  I 
just had a perplexing problem.


The client is a laptop and moves about different samba networks.  My home 
computer's name (Unix hostname and samba name) is 'ocean'.  When I'm at 
home I run smbmount //ocean/mydir /mnt/samba/ocean/mydir -o 


Normally this is fine.  I've been running the same script to do this for 
about 2 years, without problems.


But this morning when I tried to connect it kept telling me
timeout connecting to NOT.MY.IP.ADDR:445
timeout connecting to NOT.MY.IP.ADDR:139

[NOT.MY.IP.ADDR is replaced by an actual IP address that I've never seen 
before, but belongs to a separate wireless network that I occasionally 
visit]


Running nmblookup:
# nmblookup ocean
querying ocean on 192.168.0.255 <-- this IS my network
192.168.0.5 ocean<00> <-- this IS the right IP address

Ocean is right there in the next room -- AND it's acting as a WINS server 
-- AND nmblookup seems to find it just fine.  Why is my laptop trying to 
connect to the wrong host?


Thanks in advance,
Brandon

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Password expire

[Marcelo Garabelli]

I`d like to know if it`s possible to configure user passwords to expire
after xx days and if it`s possible to show a dialogue to change the password
in windows clients
Thanks
--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.344 / Virus Database: 267.10.25/102 - Release Date: 14/09/2005

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problem over VPN

[Antony Gelberg]

Antony Gelberg wrote:
> Hi all,
> 
> Samba 3.0.14, Debian Sarge.  I've asked on IRC but didn't get a response. 
> I am having problems dragging files to my Samba share in Windows XP, over
> an IPSEC VPN.  The file in question is a simple small text file.  I have
> no problem directly creating and editing a file on the share.



Sorry for replying to my own post.  As nobody has any input, is it
appropriate to forward it to the devel list?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Windows printing qeue with Samba and Cups

[2005]

Hi!

I got a problem with a small office network.  There's a laser printer
installed on the server and is distributed to the lan with samba and
cups.
I can print without errors, but the printing qeue displayed on the
windows client gets bigger and bigger.
The printing jobs which are already completed stay in the list.
There is no status shown in this list.

Has any one had a similar problem and knows a solution?
Maybe some wrong permissions on the linux server?
where is this list stored?

Thanks for your answers!

Greetz Leini

p.s. Server runs Redhat Enterprise Linux 3 with the latest samba and
cups version from redhat
Client run Windows XP Pro SP2


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Solved] Re: [Samba] any known issue with printing from MS Access ?

[Roger Eisenecher]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi All

Gerald (Jerry) Carter schrieb:
> Ilia Chipitsine wrote:
> 
> |> MS Access is known to have issues with certain drivers
> |> if they have not been initialized on the server properly.
> |>
> |
> | so, MS Access wants something from samba which it
> | cannot do at all ?
> 
> No. But I think you both need to re-read the documentation
> on printing in the Samba-HOWTO0-Collection to really understand
> what a non-initialized driver is.  If you have read that and
> it still doesn't make sense, then I will try to clarify.

I was absolutly sure that I have everything done as described in the
howto. But I rechecked every thing and every setting of the printers and
it looks like I was wrong or did something wrong; Now everything works
as expeceted also from Access without any glitches!!!

Ilia: Follow every step in the howto and recheck every thing!

Jerry: Thank you!

kindly regards
rOger
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDLuMgpF3l9rYt4bARAp/kAJ9Rhxi8IsSNYdl3P1L6oOEfAVXj/QCeOTRc
JYus9RJUKOJpCemlHiClByg=
=4ulp
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] File access rights on a NFS share: please help !

[Jeremy Allison]

On Mon, Sep 19, 2005 at 05:03:34PM +0200, Sabrina Lautier wrote:
> 
> Hello,
> 
> As I didn't get any answer, I'm posting my question again.
> Sorry to insist but I'm very embarrassed...
> 
> I'm having troubles with access rights on files located on a NFS server
> (Solaris 8).
> The client  machine is a Linux SuSe E9.0 and the samba suite version is
> samba-3.0.20, directly installed from a Linux package.

Solaris 8 has a limit of 16 groups I believe. If your user
is in more than 16 groups the groups over 16 will be silently
truncated for NFS access.

Any way you can move to an NFS server that supports more
groups ?

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] SMB User connection Log

[Geert Stappers]

On Mon, Sep 19, 2005 at 10:38:44AM -0400, Talwar, Puneet (NIH/NIAID) wrote:
> Is there anyway I can check if any users are connected to the server via SMB
> connection

| SMBSTATUS(1)SMBSTATUS(1)
| 
| NAME
|smbstatus - report on current Samba connections


> and how long have they been connected for?

Would  'utmp' and 'utmp directory' help?

This is from the smb.conf manual page:

|  utmp (G)
| This boolean parameter is only available if Samba has been con-
| figured  and  compiled  with the option  --with-utmp. If set to
| yes then Samba will  attempt  to  add  utmp  or  utmpx records
| (depending on the UNIX system) whenever a connection is made to
| a Samba server. Sites may use this to record the user connect-
| ing to a Samba share.


|  utmp directory (G)
| This parameter is only available if Samba has  been configured
| and  compiled  with  the  option   --with-utmp.  It specifies a
| directory pathname that is used to  store  the  utmp  or utmpx
| files  (depending  on the UNIX system) that record user connec-
| tions to a Samba server. By default this is  not  set, meaning
| the system will use whatever utmp file the native system is set
| to use (usually/var/run/utmp on Linux).


> Thanks,


Stappers

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: Re-2: [Samba] rid_idmap problem

[Mike Partyka]

That's good, but i believe that the "allow trusted domains" must be  
set to "No" when using idmap_rid backend.

See:
http://us5.samba.org/samba/docs/man/Samba-HOWTO-Collection/ 
idmapper.html#id2587685




On Sep 19, 2005, at 10:41 AM, [EMAIL PROTECTED] wrote:

I have fixed my problem. I do not have configured a range for the  
BUILTIN domain! So the following lines in the smb.conf fixed my  
problems


idmap backend = idmap_rid:yourdomain=a-b,builtin=c-d
allow trusted domains = yes



thnx for your reply
cheers
Stefan



 Original Message 
Subject: Re: [Samba] rid_idmap problem (19-Sep-2005 15:38)
From:[EMAIL PROTECTED]
To:  [EMAIL PROTECTED]



I believe i can help, what do you have set in your smb.conf for:

idmap backend
idmap uid
idmap gid


On Sep 19, 2005, at 4:04 AM, [EMAIL PROTECTED] wrote:



Hi all,

in my winbind logfile I get the following errors:

 rid_idmap_get_id_from_sid: no suitable range available for sid:
S-1-5-32-551
[2005/09/19 10:32:20, 0] sam/idmap_rid.c:rid_idmap_get_id_from_sid
(478)
  rid_idmap_get_id_from_sid: no suitable range available for sid:
S-1-5-32-545
[2005/09/19 10:32:20, 0] sam/idmap_rid.c:rid_idmap_get_id_from_sid
(478)
  rid_idmap_get_id_from_sid: no suitable range available for sid:
S-1-5-32-545
[2005/09/19 10:32:20, 0] sam/idmap_rid.c:rid_idmap_get_id_from_sid
(478)
  rid_idmap_get_id_from_sid: no suitable range available for sid:
S-1-5-32-544
[2005/09/19 10:32:20, 0] sam/idmap_rid.c:rid_idmap_get_id_from_sid
(478)
  rid_idmap_get_id_from_sid: no suitable range available for sid:
S-1-5-32-544

What`s going wrong?


bye
Stefan


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba




Mike Partyka
Jumpnode Systems, LLC
Systems Administrator
(612)605-5056 Desk
(612)605-5099 Fax











Mike Partyka
Jumpnode Systems, LLC
Systems Administrator
(612)605-5056 Desk
(612)605-5099 Fax


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] SMB User connection Log

[Talwar, Puneet (NIH/NIAID)]

Is there anyway I can check if any users are connected to the server via SMB
connection and how long have they been connected for?

Thanks,

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] smbd errors from "getpeername"

[Kevin Duckett]

I receive the following errors/warnings in this scenario.

- From my Windows XP client, I open Network Places. I then click View
workgroup computers. When the list of computers is displayed into the
window I receive the following messages in /var/log/messages.

Sep 19 09:48:53 lnx04 smbd[3101]: [2005/09/19 09:48:53, 0]
lib/util_sock.c:get_peer_addr(1222)
Sep 19 09:48:53 lnx04 smbd[3101]:   getpeername failed. Error was
Transport endpoint is not connected
Sep 19 09:48:53 lnx04 smbd[4314]: [2005/09/19 09:48:53, 0]
lib/util_sock.c:get_peer_addr(1222)
Sep 19 09:48:53 lnx04 smbd[4314]:   getpeername failed. Error was
Transport endpoint is not connected
Sep 19 09:48:53 lnx04 smbd[4314]: [2005/09/19 09:48:53, 0]
lib/util_sock.c:get_peer_addr(1222)
Sep 19 09:48:53 lnx04 smbd[4314]:   getpeername failed. Error was
Transport endpoint is not connected
Sep 19 09:48:53 lnx04 smbd[4314]: [2005/09/19 09:48:53, 0]
lib/access.c:check_access(328)
Sep 19 09:48:53 lnx04 smbd[4314]: [2005/09/19 09:48:53, 0]
lib/util_sock.c:get_peer_addr(1222)
Sep 19 09:48:53 lnx04 smbd[4314]:   getpeername failed. Error was
Transport endpoint is not connected
Sep 19 09:48:53 lnx04 smbd[4314]:   Denied connection from  (0.0.0.0)
Sep 19 09:48:53 lnx04 smbd[4314]: [2005/09/19 09:48:53, 0]
lib/util_sock.c:get_peer_addr(1222)
Sep 19 09:48:53 lnx04 smbd[4314]:   getpeername failed. Error was
Transport endpoint is not connected
Sep 19 09:48:53 lnx04 smbd[4314]:   Connection denied from 0.0.0.0
Sep 19 09:48:53 lnx04 smbd[4314]: [2005/09/19 09:48:53, 0]
lib/util_sock.c:write_data(554)
Sep 19 09:48:53 lnx04 smbd[4314]:   write_data: write failure in writing
to client 0.0.0.0. Error Connection reset by peer
Sep 19 09:48:53 lnx04 smbd[4314]: [2005/09/19 09:48:53, 0]
lib/util_sock.c:send_smb(762)
Sep 19 09:48:53 lnx04 smbd[4314]:   Error writing 5 bytes to client. -1.
(Connection reset by peer)

Next, I close the Network Places window and execute the same steps to
see if the messages come back the second time around.  They do not.
However, if I restart the smbd services and do it all over again, they
do.


-- 
<[EMAIL PROTECTED]>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Windows cache session used while PDC reachable

[Jerome Tournier]

Hello,
i'm using samba3.0.7 (RedHat AS3U4) and get the following behavior:
i have a workstation on my samba server with an account user1 created. I
can log on the workstation. Windows cache session is not disabled.
If i change the account password of user1 on the server (with
smbldap-passwd for example) and whant to log on with the old password, it
succeeded because of the cache session on Windows.
I thought that the cache session was used by Windows only when the domain
controller can't be reached, am i wrong ?
Is they a way to resolve this ?
Thanks a lot.
-- 
Jerome
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] File access rights on a NFS share: please help !

[Sabrina Lautier]

Hello,

As I didn't get any answer, I'm posting my question again.
Sorry to insist but I'm very embarrassed...

I'm having troubles with access rights on files located on a NFS server
(Solaris 8).
The client  machine is a Linux SuSe E9.0 and the samba suite version is
samba-3.0.20, directly installed from a Linux package.

The users connect to the Linux server without any Pb using their MS Windows
account through Winbind+Kerberos.
They belong to the right Windows groups but the file/dir access rights only
work on local/SAN volumes.

Ex:
[EMAIL PROTECTED] id -a
uid=16783675(NCEDOM\toto) gid=16777217(NCEDOM\domain users)
groups=16777217(NCEDOM\domain users),16777328(NCEDOM\dev-iis)

[EMAIL PROTECTED] cd /nfs_share
[EMAIL PROTECTED] ls -ls
0 drwxrwx---  2 root NCEDOM\dev-iis   80 2005-09-07 14:16 iis
[EMAIL PROTECTED] cd iis
-bash: cd: iis: Permission denied

As you can see toto's primary group is NCEDOM\domain users but he also
belongs to group NCEDOM\dev-iis.
Yet directory iis belongs to group NCEDOM\dev-iis.
But this work fine on a local FS.

Any idea about how to solve this Pb: compilation option or winbind
configuration maybe ?
Any help would be greatly appreciated.

Rgds,
Sabrina

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] XP Profile write ok, no read.

[Geert Stappers]

 reading a four mega byte profile takes a long time 
> >
> > When you analyze the network traffic, are packets retransmitted over
> > and over  or is there a delay between each packet?
> >
> > Tcpdump and Ethereal are our friends.
> >
>
> Geert,
> 
> very cool your trying to help me,

I think we own you that, we see you contributing often on this ML

> but this is nog a performance issue.
> 
> The problem is rights, i know this for sure.
> the problem is reading the profile of u user.
> Writing the profile is ok, users are just not able to read the
> profile. ( and user is in this case of course the xp computer )
> when this happens, a default profile is used and they have a temperary
> profile.

Getting a temporary profile is new information in this thread.

> i just want to know why im able to WRITE to the profile directories
> without problems, and im unable to READ ( copy profile, at logon ) to the
> pc.

I have reread the original posting: there are two PCs involved.


What is the difference between the two (client) computers?
Use they both the same Domain Name Server?
   WINS?  Master browser?

Check also the IP configuration, especial netmask and broadcast address.
I lost once much time on a subnetmask issue.
The client couldn't find the server due different broadcast addresses.
That could explain

 Error code 1332 :
   No mapping between account names and security IDs was done. 
 Error code 1355 :
   The specified domain either does not exist or could not be contacted.

from the original posting.


I hope that helps, because the next step would scare me:

Verifying that the XP computer _is_ part the domain.


> 
> Louis


Cheers
Geert Stappers
-- 
http://www.catb.org/~esr/jargon/html/B/bottom-post.html
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Rsync & cifs or smbfs - cannot update modification date with cifs

[Rich Stanton]

I use rsync to update files to a samba shared folder on another 
machine.  If the remote drive is mounted as smbfs in fstab:

//xx.xx.xx.35/YellowDog /mnt/mic smbfs username=xxx,password=xxx

Then everything works fine.  However if I mount it as cifs & run rsync, 
the date/time on the remote files is that of the transfer, not of the 
original file creation/modification date.  Therefore rsync transfers are 
messed up because it uses the date to work out if a file should be 
copied or not.  Local machine is debian sarge, remote system is OSX 
10.3.  Using smbfs works fine & the dates are correctly preserved across 
to the remote machine, but I understand that cifs is the way forward, so 
I'd like to get it working with cifs.  What am I doing wrong?  The 
remote directory & files are owned by the username specified in fstab, 
and are permission 755 (directories) or 644 (files).


The rsync command line I'm using is rsync -rt --delete --modify-window=1 
/source /mnt/mic.


Thanks!


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] new samba install

[Modus Operandi]

we have been trying to move our samba box to a faster server, with better
NICs, faster processor and more memory.

both the old and new server are using samba 3.0.14A
both on debian based distributions (old was sarge, new is breezy)

here are the steps we followed:
install samba from the apt archives.
confermed that they were the same version.
copied smb.conf from old server to new server.
changed domain name, or work group = domain2
as well as netbios name
changed the paths to shares because the disk partitioning is slightly
different.
added a machine account to use as a testing machine, added a user name to
the smbpasswd file, we know how to do this because we did it all the time
on the other server.

logged in, fixed some minor issues with home directories not mounting
properly. profiles saved properly, the performance was good.
our only problem was that windows explorer was crashing like mad every
time we browsed a smb share, no where else, we could browse directories on
the hd and cds just fine no crashes, as soon as we went off to smb share,
boom, crash.  The testing machine had been mucked about with for a while 
so we decided to do a fresh windows install on it.

we restarted the machine thinking that might make a difference and we
started to see a duplicate name exists on the network, this was a windows
system error.

ignoring this, we went on with a fresh windows install, join the system to
the domain just fine, but each time we tried to restart we get the same
problem: a duplicate name exists on the network according to windows.
once this happens, we can not logon to the new domain.  even if we create 
a machine account on the samba box which is totally silly like schmoo, 
and make sure that the windows box has that same name, we still have 
this problem. 

this morning i am back up just fine on my old samba server which is identical
accept for a different workgroup, netbiosname, and processor.

meanwhile, we set an test environment isolated from
the other network -- just the server, the testing
windows box and a switch -- and we still see the same
symptoms. nbtstat -n shows duplicate records in the
netbois, which we can't figure out how to remove. we
did nbtstat -R and nbtstat -RR to no avail.

any ideas? I also still am going to have the windows explorer crash, i did try 
use sendfile = no before all the rest.

thanks

-- 
/home/modus/.signature
Mon Sep 19 10:19:06 EDT 2005
The Moon is Waning Gibbous (97% of Full)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Auth problem

[Sérgio A P Ferreira]

Hi All,


I am experiencing a strange problem with authentication process. Everything
was going very fine until today, my users account stop to login on domain,
but the administrator account is the only one that can do it without
problems. I get this error log.  

Sep 19 11:04:32 zeus smbd[3227]: [2005/09/19 11:04:32, 2]
smbd/sesssetup.c:setup_new_vc_session(608)
Sep 19 11:04:32 zeus smbd[3227]:   setup_new_vc_session: New VC == 0, if
NT4.x compatible we would close all old resources.
Sep 19 11:04:32 zeus smbd[3227]: [2005/09/19 11:04:32, 2]
smbd/sesssetup.c:setup_new_vc_session(608)
Sep 19 11:04:32 zeus smbd[3227]:   setup_new_vc_session: New VC == 0, if
NT4.x compatible we would close all old resources.
Sep 19 11:04:32 zeus smbd[3227]: [2005/09/19 11:04:32, 2]
lib/smbldap.c:smbldap_open_connection(692)
Sep 19 11:04:32 zeus smbd[3227]:   smbldap_open_connection: connection
opened
Sep 19 11:04:32 zeus slapd[2123]: conn=29 fd=20 ACCEPT from
IP=127.0.0.1:32806 (IP=0.0.0.0:389)
Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=0 BIND
dn="cn=admin,dc=cultura,dc=gov,dc=br" method=128
Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=0 BIND
dn="cn=admin,dc=cultura,dc=gov,dc=br" mech=SIMPLE ssf=0
Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=0 RESULT tag=97 err=0 text=
Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=1 SRCH base="" scope=0 deref=0
filter="(objectClass=*)"
Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=1 SRCH attr=supportedControl
Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=1 SEARCH RESULT tag=101 err=0
nentries=1 text=
Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=2 SRCH
base="dc=cultura,dc=gov,dc=br" scope=2 deref=0
filter="(&(uid=testuser)(objectClass=sambaSamAccount))"
Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=2 SRCH attr=uid uidNumber
gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange
sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName
sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description
sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword
sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial
sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory
modifyTimestamp sambaLogonHours modifyTimestamp
Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=2 SEARCH RESULT tag=101 err=0
nentries=0 text=
Sep 19 11:04:32 zeus smbd[3227]: [2005/09/19 11:04:32, 2]
auth/auth.c:check_ntlm_password(312)
Sep 19 11:04:32 zeus smbd[3227]:   check_ntlm_password:  Authentication for
user [testuser] -> [testuser] FAILED with error NT_STATUS_NO_SUCH_USER
Sep 19 11:04:32 zeus smbd[3227]: [2005/09/19 11:04:32, 2]
smbd/server.c:exit_server(609)
Sep 19 11:04:32 zeus smbd[3227]:   Closing connections
Sep 19 11:04:32 zeus slapd[2123]: conn=29 fd=20 closed


Anyone have an idea to fix it?

Thanks,


Sergio
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Delete one or both of two identical printers

[Paul Gienger]

I normally have two print spools that are named differently but pointing to
the same printer with different options flags set.  While doing some
maintenance on the spools (setting the driver mainly) the printers became
named the same, the name of the printer driver.  Now I have two printers
that are identical so that I no longer have separate spools.  I would like
to know how I can clear these two spools off without losing the rest of the
printer data held on the server.  I'm fine losing the settings on these two
printers, but I don't want to have to set the rest back up.

I see that there is an addprinter command in rpcclient, but no delprinter.

--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Logon and logoff time for samba

[Joe Culler]

On 9/19/05, Tomasz Chmielewski wrote:
> 
> Joe Culler schrieb:
> > Hi,
> >
> > I setup a samba pdc, it works great. I have one question, how can I 
> change
> > logon and logoff time for users when she/he log on and logoff? Thanks.
> > For example, logon and logoff time didn't change for that user "david".
> 
> if you have your user database in LDAP, you can use LAM - LDAP Account
> Manager - for configuring users, logon hours etc.


I'm sorry for misunderstanding. What I want to do is to record 
logon(log into the system) and logout(log out the system) time for each 
user, like unix command
"last". Is it the same meaning for "logon time and login time" for pdbedit 
output? 
Thank you very much.

--
> Tomek
> http://wpkg.org
> 

Regards,
Joe.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Logon and logoff time for samba

[Tomasz Chmielewski]

Joe Culler schrieb:

Hi,

I setup a samba pdc, it works great. I have one question, how can I change
logon and logoff time for users when she/he log on and logoff? Thanks.
For example, logon and logoff time didn't change for that user "david".


if you have your user database in LDAP, you can use LAM - LDAP Account 
Manager - for configuring users, logon hours etc.


--
Tomek
http://wpkg.org
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 3.014a2 with AD auth

[Edward Brookhouse]

Hi all,





I have gotten this working; However, I am just curious about a few
things and wanted to see if anyone on this list might know.



My setup is Fedora/Linux based - but I believe these comments to be
valid for any OS.







When joining the computer to the domain using net join I am unable to do
a:



# net ads join -U  Administrator



Gives me



ads_join_realm: Insufficient access





so we try



net rpc join -U Administrator



Which works fine -



Any thoughts why???







Question #2



Joining a computer to an AD domain like this works - but we see a great
deal of pre-authentication errors in our Domain logs -



I have seen the MS KB articles that talk about not requiring preauth to
get rid of this message - but the problem is that the option to Not
require pre-auth is valid for a user object not a computer object -so
setting this option still does not get rid of the errors claiming the
machine object is failing pre-auth.



MSWinEventLog 2 Security 12270 Mon Sep 19 09:10:21 2005 675 Security
SYSTEM User Failure Audit EARTH Account Logon Pre-authentication failed:
User Name: goethe$ User ID:
%{S-1-5-21-934913212-3928056223-3945149382-9156} Service Name:
krbtgt/CORP.PHILLIPS.COM Pre-Authentication Type: 0x0 Failure Code: 0x19
Client Address: 172.17.81.164 12090



(where Goethe is the machine name)



Any thoughts appreciated!









Edward B.

Ebrooathealthydirectionsdotcom







--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] USRMGR group problems

[Michael Gasch]

do the groups have correct mappings to local ones?
i've had the same error "The group name could not be found" and had some 
errors in my mappings


greez

Eric A. Hall wrote:

I'm having some odd problems with USRMGR and Samba group accounts.

USRMGR seems to work fine for user accounts, and it also correctly
displays the list of group objects (these are all stored in LDAP btw).
This can be seen in http://www.ehsco.com/misc/samba/umgr-main.gif

Two of the groups can be managed while the other two cannot. For example,
http://www.ehsco.com/misc/samba/umgr-admins.gif shows that the "Admins"
group can be opened but http://www.ehsco.com/misc/samba/umgr-users.gif
shows that the "Users" group cannot ("The group name could not be found").
Similarly, the "LM Hosts" group can be opened but the "Nobody" group
cannot. All of these groups DO show up in various places (like security
dialogs, and in the USRMGR list obviously) but they can't be viewed for
editing in USRMGR.

Separately, some groups don't show up in the user settings. For example,
http://www.ehsco.com/misc/samba/umgr-root.gif shows the group options for
the "root" account. Note that the "LM Hosts" and "Nobody" groups show in
the candidate groups, but the "Admins" and "Users" groups do not (despite
the fact that "Admins" is one of the groups that can be opened for editing
as described above).

The groups appear to be properly defined in LDAP. I've recreated them just
to be sure ("LM Hosts" is a new group I created for initial testing and it
shows up fine so I thought I'd recreate the others but that didn't help),
and have also manually rebuilt my LDAP indexes. "net groupmap list" shows
all of them and their correct mappings.

This really has me flummoxed. Any ideas? What am I missing?




--
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT)
Deutscher Platz 6
D-04103 Leipzig
Germany

Phone: 49 (0)341 - 3550 137
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Logon and logoff time for samba

[Joe Culler]

Hi,

I setup a samba pdc, it works great. I have one question, how can I change
logon and logoff time for users when she/he log on and logoff? Thanks.
For example, logon and logoff time didn't change for that user "david".

Unix username: david
NT username: david
Account Flags: [U ]
User SID: S-1-5-21-3527602477-2845166309-2807882297-3000
Primary Group SID: S-1-5-21-3527602477-2845166309-2807882297-513
Full Name: System User
Home Directory: \\MASSIVE\david
HomeDir Drive: X:
Logon Script: scripts\logon.bat
Profile Path: \\massive\profiles\david
Domain: MEGANET2
Account desc: System User
Workstations:
Munged dial:
Logon time: 0
Logoff time: Sat, 14 Dec 1901 04:45:51 GMT
Kickoff time: Sat, 14 Dec 1901 04:45:51 GMT
Password last set: Mon, 19 Sep 2005 19:02:37 GMT
Password can change: Mon, 19 Sep 2005 19:02:37 GMT
Password must change: Sat, 14 Dec 1901 04:45:51 GMT
Last bad password : 0
Bad password count : 0
Logon hours : FF

Regards,
Joe.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] rid_idmap problem

[Guenther Deschner]

Hi,

On Mon, Sep 19, 2005 at 09:04:28AM +, [EMAIL PROTECTED] wrote:
> Hi all,
> 
> in my winbind logfile I get the following errors:
> 
>  rid_idmap_get_id_from_sid: no suitable range available for sid: S-1-5-32-551
> [2005/09/19 10:32:20, 0] sam/idmap_rid.c:rid_idmap_get_id_from_sid(478)
>   rid_idmap_get_id_from_sid: no suitable range available for sid: S-1-5-32-545
> [2005/09/19 10:32:20, 0] sam/idmap_rid.c:rid_idmap_get_id_from_sid(478)
>   rid_idmap_get_id_from_sid: no suitable range available for sid: S-1-5-32-545
> [2005/09/19 10:32:20, 0] sam/idmap_rid.c:rid_idmap_get_id_from_sid(478)
>   rid_idmap_get_id_from_sid: no suitable range available for sid: S-1-5-32-544
> [2005/09/19 10:32:20, 0] sam/idmap_rid.c:rid_idmap_get_id_from_sid(478)
>   rid_idmap_get_id_from_sid: no suitable range available for sid: S-1-5-32-544
> 
> What`s going wrong?

You do not have configured a range for the BUILTIN domain. you can do so
by setting:

idmap backend = idmap_rid:yourdomain=a-b,builtin=c-d
*and*
allow trusted domains = yes

Guenther

PS: With Samba you can set 3.0.21 back to allow trusted domains = no (as
encouraged when using the idmap-rid plugin).

-- 
Günther DeschnerGPG-ID: 8EE11688
Novell / SUSE LINUX   [EMAIL PROTECTED]
Samba Team  [EMAIL PROTECTED]


pgpu7RJyyOKh9.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] any known issue with printing from MS Access ?

[Paul Griffith]

On Sun, Sep 18, 2005 at 04:20:07PM -0500, Gerald (Jerry) Carter wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Ilia Chipitsine wrote:
> 
> |> MS Access is known to have issues with certain drivers
> |> if they have not been initialized on the server properly.
> |>
> |
> | so, MS Access wants something from samba which it
> | cannot do at all ?
> 
> No. But I think you both need to re-read the documentation
> on printing in the Samba-HOWTO0-Collection to really understand
> what a non-initialized driver is.  If you have read that and
> it still doesn't make sense, then I will try to clarify.
> 
> 
> 
> 
> 
> cheers, jerry

Sounds like a problem I am having with Adobe Reader v7. Every other program
can print to our Ricoh printer, but the way AcroReader calls
spoolsv.exe results in a ACCESS DENIED error code on
\\pcserver\printer_name

So I will re-read the documentation on printing in the
Samba-HOWTO0-Collection.

Thanks
Paul


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] smbd panic

[Martin Philipp]

Hello,

 

we installed samba on SUSE SLE9. (Samba version 3.0.9-2.1.5-SUSE)

The log level in smb.conf must be 1 or 255. With other values the smbd crash
with panic. Can you help me?

 

Here the fragment of /var/log/messages with the error:

 

Sep 16 08:52:05 speyer sudo: mphilipp : TTY=pts/0 ; PWD=/home/mphilipp ;
USER=root ; COMMAND=/usr/sbin/rcsmb start

Sep 16 08:52:05 speyer smbd[19437]: [2005/09/16 08:52:05, 0]
lib/fault.c:fault_report(36) 

Sep 16 08:52:05 speyer smbd[19437]:
=== 

Sep 16 08:52:05 speyer smbd[19437]: [2005/09/16 08:52:05, 0]
lib/fault.c:fault_report(37) 

Sep 16 08:52:05 speyer smbd[19437]:   INTERNAL ERROR: Signal 11 in pid 19437
(3.0.9-2.1.5-SUSE) 

Sep 16 08:52:05 speyer smbd[19437]:   Please read the appendix Bugs of the
Samba HOWTO collection 

Sep 16 08:52:05 speyer smbd[19437]: [2005/09/16 08:52:05, 0]
lib/fault.c:fault_report(39) 

Sep 16 08:52:05 speyer smbd[19437]:
=== 

Sep 16 08:52:05 speyer smbd[19437]: [2005/09/16 08:52:05, 0]
lib/util.c:smb_panic2(1488) 

Sep 16 08:52:05 speyer smbd[19437]:   PANIC: internal error 

Sep 16 08:52:05 speyer smbd[19437]: [2005/09/16 08:52:05, 0]
lib/util.c:smb_panic2(1496) 

Sep 16 08:52:05 speyer smbd[19437]:   BACKTRACE: 12 stack frames: 

Sep 16 08:52:05 speyer smbd[19437]:#0 /usr/sbin/smbd(smb_panic2+0x1ec)
[0x81f7065] 

Sep 16 08:52:05 speyer smbd[19437]:#1 /usr/sbin/smbd(smb_panic+0x25)
[0x81f6e73] 

Sep 16 08:52:05 speyer smbd[19437]:#2 /usr/sbin/smbd [0x81e24d7] 

Sep 16 08:52:05 speyer smbd[19437]:#3 /usr/sbin/smbd [0x81e254d] 

Sep 16 08:52:05 speyer smbd[19437]:#4 [0xe420] 

Sep 16 08:52:05 speyer smbd[19437]:#5 /lib/tls/libc.so.6(malloc+0x94)
[0x402f9f84] 

Sep 16 08:52:05 speyer smbd[19437]:#6
/usr/sbin/smbd(bitmap_allocate+0x29) [0x81eb329] 

Sep 16 08:52:05 speyer smbd[19437]:#7
/usr/sbin/smbd(init_rpc_pipe_hnd+0x1e) [0x815f9f7] 

Sep 16 08:52:05 speyer smbd[19437]:#8 /usr/sbin/smbd [0x8276735] 

Sep 16 08:52:05 speyer smbd[19437]:#9 /usr/sbin/smbd(main+0x38e)
[0x8276ada] 

Sep 16 08:52:05 speyer smbd[19437]:#10
/lib/tls/libc.so.6(__libc_start_main+0xe0) [0x402ab260] 

Sep 16 08:52:05 speyer smbd[19437]:#11 /usr/sbin/smbd [0x80796d1] 

Sep 16 08:52:05 speyer smbd[19437]:

 

The smb.conf

 

# Martin Philipp

# Global parameters

 

[global]

 workgroup = CBB

 netbios name = orleons

 server string = Samba orleons

 interfaces =  172.21.211.119/255.255.255.0

 bind interfaces only = yes

 guest account = mfax

 #log level = 255

 log level = 1

 log file = /var/log/samba/log_cbb.%m

 max log size = 50

 max open files = 400

 wins server = 172.16.44.183

 name resolve order = host wins dns

 #dns proxy = No

 #mangled names = No

 security = share

 local master = no

 hosts allow = localhost 172.

 socket options = TCP_NODELAY

 deadtime = 30

 keepalive = 200

 kernel oplocks = no

 #message command = /bin/csh -c 'mailx -s %f root < %s; rm %s' &

 #max xmit = 32768

#

[Massenfax]

   comment = MASSENFAX Austauschverzeichnis

   path = /app/mfax/Massenfax

   public = yes

   case sensitive = no

   writable = yes

   printable = no

   create mode = 755

   guest only = yes

   Max connections = 400

   oplocks = no

   level 2 oplocks = no

##

 

With kind regards

 

Martin Philipp

 

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] can't access shared folder from windows machine

[Voloshin Alexander]

Our domain controller is samba on FreeBSD server. I administer internal Linux 
server with samba installed on it too. When I share folder on my internal 
server, it's visible and mountable by server itself, but can't be accessed from 
windows machines in the same subnet. I get error: "Failed to get configuration 
information from domain controller. It's not accessible." May be that there's 
some kind of conflict between my samba and FreeBSD' s samba? Here's my 
configuration file:

# Samba config file created using SWAT
# from 10.100.1.101 (10.100.1.101)
# Date: 2005/07/27 12:16:22

# Global parameters
[global]
domain master = no
local master = no
preferred master = no
os level = 0
workgroup = MEDIA
server string = %h server (Samba %v)
security = DOMAIN
obey pam restrictions = Yes
passdb backend = tdbsam, guest
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n 
*Retype\snew\sUNIX\spassword:* %n\n .
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
dns proxy = No
wins support = Yes
panic action = /usr/share/samba/panic-action %d
invalid users = root
include = /etc/samba/dhcp.conf

[homes]
comment = Home Directories
read only = No
create mask = 0700
directory mask = 0700
guest ok = no

[netbox]
comment = netbox on debian
path = /home/netbox
guest ok = yes
read only = no
browseable = yes

Thanks.
Alex.


  maito: [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Persistent SPOOLSS_ADDPRINTEREX commands from Windows NT4.0 computers

[Buozis, Martynas]

Hello

Just few days ago I posted this email and here want ask just at least
clarify action SPOOLSS_ADDPRINTEREX.

If anybody still would have comments to my original post, so I would
highly appreciate these. Thanks in advance.




I need some advice from gurus. I identified several Windows NT
computers, that are persistently trying to access my samba server. They
are connecting to IPC$ with NULL information both in password and
username fields. Below you will find excerpt from samba log file.

My questions would be following. What is SPOOLSS_ADDPRINTEREX ? Can it
be some kind of worm ? If yes, how I can catch it (enable write to spool
dir, add printer wizard, etc.) ? Can somebody let me know anything about
persistently coming connections from same hosts and doing below posted
actions ? 

Thank you in advance !

[2005/09/15 22:34:44, 3] smbd/service.c:(642)
  granite (xxx.xxx.xxx.xxx) connect to service IPC$ initially as user
noaccess (uid=60002, gid=60002) (pid 29735)
[2005/09/15 22:34:44, 3] smbd/sec_ctx.c:(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/09/15 22:34:44, 3] smbd/reply.c:(455)
  tconX service=IPC$
[2005/09/15 22:34:44, 3] smbd/process.c:(1091)
  Transaction 3 of length 106
[2005/09/15 22:34:44, 3] smbd/process.c:(886)
  switch message SMBntcreateX (pid 29735) conn 0x3bf330
[2005/09/15 22:34:44, 3] smbd/sec_ctx.c:(288)
  setting sec ctx (60002, 60002) - sec_ctx_stack_ndx = 0
[2005/09/15 22:34:44, 3] smbd/nttrans.c:(514)
  nt_open_pipe: Known pipe spoolss opening.
[2005/09/15 22:34:44, 3] smbd/process.c:(1091)
  Transaction 4 of length 160
[2005/09/15 22:34:44, 3] smbd/process.c:(886)
  switch message SMBtrans (pid 29735) conn 0x3bf330
[2005/09/15 22:34:44, 3] smbd/ipc.c:(539)
  trans <\PIPE\> data=72 params=0 setup=2
[2005/09/15 22:34:44, 3] smbd/ipc.c:(334)
  named pipe command on <> name
[2005/09/15 22:34:44, 3] smbd/ipc.c:(294)
  Got API command 0x26 on pipe "spoolss" (pnum 76c3)
[2005/09/15 22:34:44, 3] rpc_server/srv_pipe.c:(887)
  api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss
[2005/09/15 22:34:44, 3] rpc_server/srv_pipe.c:(762)
  check_bind_req for \PIPE\spoolss
[2005/09/15 22:34:44, 3] smbd/process.c:(1091)
  Transaction 5 of length 530
[2005/09/15 22:34:44, 3] smbd/process.c:(886)
  switch message SMBtrans (pid 29735) conn 0x3bf330
[2005/09/15 22:34:44, 3] smbd/ipc.c:(539)
  trans <\PIPE\> data=442 params=0 setup=2
[2005/09/15 22:34:44, 3] smbd/ipc.c:(334)
  named pipe command on <> name
[2005/09/15 22:34:44, 3] smbd/ipc.c:(294)
  Got API command 0x26 on pipe "spoolss" (pnum 76c3)
[2005/09/15 22:34:44, 3] rpc_server/srv_pipe_hnd.c:(542)
  free_pipe_context: destroying talloc pool of size 0
[2005/09/15 22:34:44, 3] rpc_server/srv_pipe.c:(1538)
  api_rpcTNP: rpc command: SPOOLSS_ADDPRINTEREX
[2005/09/15 22:34:44, 3] rpc_server/srv_pipe_hnd.c:(542)
  free_pipe_context: destroying talloc pool of size 318 



With best regards
Martynas 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] XP Profile write ok, no read.

[Louis van Belle]

Geert,

very cool your trying to help me, but this is nog a performanc issue.

The problem is rights, i know this for sure.
the problem is reading the profile of u user.
Writing the profile is ok, users are just not able to read the
profile. ( and user is in this case of course the xp computer )
when this happens, a default profile is used and they have a temperary
profile.

i just want to know why im able to WRITE to the profile directories
without problems, and im unable to READ ( copy profile, at logon ) to the
pc.

Louis

> On Thu, Sep 15, 2005 at 03:45:58PM +0200, Louis van Belle wrote:
>> >[mailto:[EMAIL PROTECTED]
>> >Namens Geert Stappers
>> >Verzonden: donderdag 15 september 2005 15:24
>> >Aan: samba@lists.samba.org
>> >
>> >On Wed, Sep 14, 2005 at 05:08:21PM +0200, Louis van Belle wrote:
>> >> Hi,
>> >>
>> >> I still have a problem with samba and profiles.
>> >> The profile is correctly written to the profile share.
>> >> but when i logon a other computer, logon takes ages..
>> >
>> >And when you express ages in secondes,
>> >how many seconds are we talking about?
>> about 5 minutes
>> >
>> >> and im unable to do anything registry is locked for example.
>> >> ( see logs below )
>> >> when i copy the network profile to the local computer there
>> >> is no problem. ( because the local profile is used )
>> >
>> >How large is profile?
>> 4 Mb on a 100 or 1000 Mbit netwerk kaart.
>>
>> ( for example i can copy a DVD iso in 4-5 minutes to my server )
>
>
> When analyze the network traffic, are packets retransmitted over and
> over  or is there a delay between each packet?
>
> Tcpdump and Ethereal are our friends.
>
>
> HTH
> St
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 3 performance issue

[Felix Chu]

Hi all,

I have a Samba 3 Linux server in a data centre where has 100M bandwidth to
Internet.

My Samba clients are all in remote office, each office has 40M bandwidth to
Internet. The ping time from office to data centre is about 10ms to 15ms. 

Some of the samba clients try to play some mpeg 4 movies directly from samba
server, but the movie can not be played smooth. The mpeg 4 movie is about 2
to 4M bit rate. 

Then I tested the transfer rate from data centre to office by using samba,
it is about 6Mbps only. But if I use FTP, it can up to 40M. That means the
samba protocol cannot utilize the available bandwidth. 

Samba clients are Windows XP, Linux Fedora 3, ucLinux, etc. 

I have already tuned the Samba with following parameters, but no improvement
at all. Anyone know any issue about samba over Internet. 

max xmit = 65535
read raw = yes
write raw = yes
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=8192

Regards,
Felix

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] rid_idmap problem

[stefanke]

Hi all,

in my winbind logfile I get the following errors:

 rid_idmap_get_id_from_sid: no suitable range available for sid: S-1-5-32-551
[2005/09/19 10:32:20, 0] sam/idmap_rid.c:rid_idmap_get_id_from_sid(478)
  rid_idmap_get_id_from_sid: no suitable range available for sid: S-1-5-32-545
[2005/09/19 10:32:20, 0] sam/idmap_rid.c:rid_idmap_get_id_from_sid(478)
  rid_idmap_get_id_from_sid: no suitable range available for sid: S-1-5-32-545
[2005/09/19 10:32:20, 0] sam/idmap_rid.c:rid_idmap_get_id_from_sid(478)
  rid_idmap_get_id_from_sid: no suitable range available for sid: S-1-5-32-544
[2005/09/19 10:32:20, 0] sam/idmap_rid.c:rid_idmap_get_id_from_sid(478)
  rid_idmap_get_id_from_sid: no suitable range available for sid: S-1-5-32-544

What`s going wrong?


bye
Stefan


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] error installing the samba

[André S. Almeida]

I am having problem installing the samba-3.0.20 in an OpenBSD 3.7..
down follows the error


Compiling dynconfig.c
In file included from dynconfig.c:21:
include/includes.h:799: error: redefinition of `struct timespec'
*** Error code 1

Stop in /home/andre/samba-3.0.20/source (line 781 of Makefile).



Someone ja installed the samba in an OpenBSD 3.7 ?



- André
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba