[Samba] aio for FreeBSD ?
when installing samba from FreeBSD ports collection, I can choose AIO support, which leads to ... checking whether to support asynchronous io... yes checking for aio_read in -lrt... no checking for asynchronous io support... no checking for 64-bit asynchronous io support... no does it mean aio was not enabled ? Cheers, Ilia Chipitsine -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] desktop file keeps coming up during logon
Gary Dale wrote: Alright so I have samba running as a PDC and have roaming profiles, however when I Logon it does everything successfully but then it shows a desktop file in notepad with some info on it. Has anyone seen this before? The desktop.ini file is normally in the startup group for each user. It is a hidden file. I don't know why it sometimes pops up on the desktop, but I've seen it happen often. I'm using Samba 3.0.14a-Debian. If you're running the same, it may peculiar to that version. Otherwise, I can confirm that it does happen. This is a FAQ, answered very often here (see http://marc.theaimsgroup.com/?l=sambar=1w=2) Add in [global]: hide files = /desktop.ini/ der tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba extremely slow on XP
malcolm wrote: On Monday 17 October 2005 15:16, Felipe Augusto van de Wiel wrote: malcolm escreveu: I have a linux machine (1.4GHz) which shares filesystems to two Windows machines, (a) Windows 2000 (300MHz) and (b) Windows XP (2.4GHz). The XP machine, which should be faster, is about 10 times slower than the 2000 machine. Hmmm... I know that the processor speed is really different (eight times faster), but there are other things that you should consider on this, NIC, RAM memory, network infra structure and specially configuration. =) Yes but it's the machine which has a processor eight times faster that is six times slower, i.e. 48 times slower than expected. Anybody any ideas. [...] Also came to my mind things like DNS and WINS, which should affect w2k and xp in different ways. Kind regards, [...] What about Anti-Virus Software? From some I know, that they examine every file mounted on a network drive. This can slow down the performance significantly. If there's a difference between your systems, you might verify this by tracing the network traffic and looking, if the opened files are scanned backwards and forwards. Bye, Martin -- Martin Zielinski [EMAIL PROTECTED] Software Development SEH Computertechnik GmbH www.seh.de -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba extremely slow on XP
Hi, there is a problem with some version of norton antivirus that do a dns lookup. So if your net is outside the internet or your dns does't resolve norton request the machine goes slow. Regards MIchael Quoting Martin Zielinski [EMAIL PROTECTED]: malcolm wrote: On Monday 17 October 2005 15:16, Felipe Augusto van de Wiel wrote: malcolm escreveu: I have a linux machine (1.4GHz) which shares filesystems to two Windows machines, (a) Windows 2000 (300MHz) and (b) Windows XP (2.4GHz). The XP machine, which should be faster, is about 10 times slower than the 2000 machine. Hmmm... I know that the processor speed is really different (eight times faster), but there are other things that you should consider on this, NIC, RAM memory, network infra structure and specially configuration. =) Yes but it's the machine which has a processor eight times faster that is six times slower, i.e. 48 times slower than expected. Anybody any ideas. [...] Also came to my mind things like DNS and WINS, which should affect w2k and xp in different ways. Kind regards, [...] What about Anti-Virus Software? From some I know, that they examine every file mounted on a network drive. This can slow down the performance significantly. If there's a difference between your systems, you might verify this by tracing the network traffic and looking, if the opened files are scanned backwards and forwards. Bye, Martin -- Martin Zielinski [EMAIL PROTECTED] Software Development SEH Computertechnik GmbH www.seh.de -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba This message was sent using IMP, the Internet Messaging Program. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba extremely slow on XP
[EMAIL PROTECTED] escreveu: Hi, there is a problem with some version of norton antivirus that do a dns lookup. So if your net is outside the internet or your dns does't resolve norton request the machine goes slow. Which the version of norton makes this? -- .''`. Márcio Dantas - SP : :' : [EMAIL PROTECTED] `. `'` http://java.sun.com `- Java is rules: write once and run anywhere! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] group permissions
I´m having problems to access a group permissions resource, i´m a member of that group, perms are ok, but i get this one error; UNIX uid 14027 is UNIX user 00514000, and will be vuid 102 [2005/10/18 10:43:49, 3] smbd/password.c:register_vuid(305) Adding homes service for user '00514000' using home directory: '/usr/local/etc3/./disco13/00514000' [2005/10/18 10:43:49, 3] smbd/process.c:chain_reply(1254) Chained message [2005/10/18 10:43:49, 3] smbd/process.c:switch_message(900) switch message SMBtconX (pid 5115) conn 0x0 [2005/10/18 10:43:49, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/10/18 10:43:49, 2] smbd/service.c:make_connection_snum(318) user '00514000' (from session setup) not permitted to access this share (MYSHARE) [2005/10/18 10:43:49, 3] smbd/error.c:error_packet(147) error packet at smbd/reply.c(626) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED [2005/10/18 10:43:49, 3] smbd/process.c:process_smb(1114) I´m working in a samba environment with a mixture of windows-mapped groups and groups that aren´t windows-mapped. I can see samba loads all sids for the groups i belong to, but the ones that aren´t mapped don´t have sambaSID, so it calculates it. Can this lead to a conflict so i can´t access a resource i should access? Samba version is samba-3.0.20. TIA Emilio C. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] compile samba as a static binary
Hi everybody! I want to compile samba 3.0.20b for an embedded system with minimal features. It should only work as a simple fileserver. For my first attempts, i tried to compile a static smbd binary with following steps: ./configure --enable-static=yes --enable-shared=no --disable-cups -without-sys-quotas --without-ads make after thad i did a ldd smbd linux-gate.so.1 = (0x00111000) libldap-2.2.so.7 = /usr/lib/libldap-2.2.so.7 (0x008cf000) liblber-2.2.so.7 = /usr/lib/liblber-2.2.so.7 (0x007cc000) libcrypt.so.1 = /lib/libcrypt.so.1 (0x00785000) libresolv.so.2 = /lib/libresolv.so.2 (0x00b34000) libnsl.so.1 = /lib/libnsl.so.1 (0x00c0e000) libdl.so.2 = /lib/libdl.so.2 (0x00112000) libpopt.so.0 = /usr/lib/libpopt.so.0 (0x005ab000) libc.so.6 = /lib/tls/libc.so.6 (0x00116000) libsasl2.so.2 = /usr/lib/libsasl2.so.2 (0x0024) libssl.so.4 = /lib/libssl.so.4 (0x00a19000) libcrypto.so.4 = /lib/libcrypto.so.4 (0x005b2000) /lib/ld-linux.so.2 (0x00ce8000) libgssapi_krb5.so.2 = /usr/lib/libgssapi_krb5.so.2 (0x004f5000) libkrb5.so.3 = /usr/lib/libkrb5.so.3 (0x00509000) libcom_err.so.2 = /lib/libcom_err.so.2 (0x00254000) libk5crypto.so.3 = /usr/lib/libk5crypto.so.3 (0x0056e000) libz.so.1 = /usr/lib/libz.so.1 (0x0098) What do I have to do to get a smbd binary that doesnt need above libs anymore? Regards from Germany Christian Volk -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] compile samba as a static binary
Hello Christian! I'm about to do the same but for a FreeBSD system. I'll gladly post any progress to you. If you get it to work please let me know! Good luck! //Henrik 18 okt 2005 kl. 13.06 skrev Christian Volk: Hi everybody! I want to compile samba 3.0.20b for an embedded system with minimal features. It should only work as a simple fileserver. For my first attempts, i tried to compile a static smbd binary with following steps: ./configure --enable-static=yes --enable-shared=no --disable-cups -without-sys-quotas --without-ads make after thad i did a ldd smbd linux-gate.so.1 = (0x00111000) libldap-2.2.so.7 = /usr/lib/libldap-2.2.so.7 (0x008cf000) liblber-2.2.so.7 = /usr/lib/liblber-2.2.so.7 (0x007cc000) libcrypt.so.1 = /lib/libcrypt.so.1 (0x00785000) libresolv.so.2 = /lib/libresolv.so.2 (0x00b34000) libnsl.so.1 = /lib/libnsl.so.1 (0x00c0e000) libdl.so.2 = /lib/libdl.so.2 (0x00112000) libpopt.so.0 = /usr/lib/libpopt.so.0 (0x005ab000) libc.so.6 = /lib/tls/libc.so.6 (0x00116000) libsasl2.so.2 = /usr/lib/libsasl2.so.2 (0x0024) libssl.so.4 = /lib/libssl.so.4 (0x00a19000) libcrypto.so.4 = /lib/libcrypto.so.4 (0x005b2000) /lib/ld-linux.so.2 (0x00ce8000) libgssapi_krb5.so.2 = /usr/lib/libgssapi_krb5.so.2 (0x004f5000) libkrb5.so.3 = /usr/lib/libkrb5.so.3 (0x00509000) libcom_err.so.2 = /lib/libcom_err.so.2 (0x00254000) libk5crypto.so.3 = /usr/lib/libk5crypto.so.3 (0x0056e000) libz.so.1 = /usr/lib/libz.so.1 (0x0098) What do I have to do to get a smbd binary that doesnt need above libs anymore? Regards from Germany Christian Volk -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] NTFS Filetimes - always using Modified Time?
Hello all.. Short description of my problem: When I copy a file from Windows XP to a Samba share, always the Modified Time of the original file will be the Creation, Modified and Accessed Time on the server. I don't care which time the Created and Modified time is, but what i want, is to have the Accessed Time set to current time (doesn't matter if its the current time of the client, or the server)! Is there any setting for that? (already tried the dos filetime parameter) If there is no setting for it, what would be a workaround? I don't want the user always to touch all the files, after copying them to the server.. TIA, Maniac -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] aio for FreeBSD ?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ilia Chipitsine wrote: | when installing samba from FreeBSD ports collection, I | can choose AIO support, which leads to ... | | checking whether to support asynchronous io... yes | checking for aio_read in -lrt... no | checking for asynchronous io support... no | checking for 64-bit asynchronous io support... no | | does it mean aio was not enabled ? There's a patch for FreeBSD AIO support at https://bugzilla.samba.org/show_bug.cgi?id=2922 But the whole AIO thing is extremely experimental. You've been warned. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDVOOLIR7qMdg1EfYRAgrrAKCUHMejHY0krkXNk4r6ffXQA44cbACg8jQh 9sPcD4+8zpjXgTS5QSLOWxw= =gzqK -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] username maps and security=ads
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Billinghurst, David (CALCRTS) wrote: | I have been having problems with username maps and security=ads. | | I now have a solution (or at least a work around) that is working | for me. I sort of stumbled across it, as I don't recall reading | any samba docs that mentions the need to have the realm name | in the smbuser file. | | Samba server is RHEL3 with samba-3.0.20 compiled from source | authenticating against a windows ADS. This is described in the smb.conf man page and in the release notes for Samba 3.0.8 ... | I found that the smb user map file had to look like | | # Unix_name = SMB_name1 SMB_name2 ... | unixuser = smbname GROUP.COMPANY.ORG\smbname cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc There's an anonymous coward in all of us. --anonymous -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDVOQpIR7qMdg1EfYRApuHAJ9bvC1tuK2z4RaBfeqYhN5jdEmY2gCfcz2g h0fdcvD8QotQBzNnOJuzP7A= =cCTh -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] get error
I have smbpasswd ... but nothing in smbusers ... is this ok ? Alan Glait wrote: I get : smbd[XX]: [2005/10/17 13:34:14, 0] lib/username.c:map_username(168) smbd[XX]: Unable to build user list in messages and in /var/log/samba/* what is this ??... how I stop it to log to /var/log/messages ?? thanx for any help ! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba 3.0.20b - still getting Winbind Dead but subsys locked
Sanjay Upadhyay wrote: Hi PC, I am encountering the same problem, with 3.0.14a, 3.0.20a and 3.0.20b in RH ES 4.0 32 bit. All the samba RPMS were downloaded fro enterprisesamba.org. Guys is it a bug or there is some changes required ? I'd suspect a problem with the builds from enterprisesamba.org. I'd report the problem to them. I've been running samba on RHEL4, ran a long time at 3.0.14a... currently at 3.0.20b, based on the original rh packaging. It's been just fine. -- Rex -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Can't delete users which have the displayName attribute in ldapsam
Hi, i just migrated my NT Domain to samba (3.0.20) with ldapsam. Now, when i try to delete a user via usrmgr, i get an 'access denied' error. The log says: Object class violation (attribute 'displayName' not allowed) And thats true. I have 'ldap delete dn = no' in the configfile, and hence only some attributes are deleted. The list of these attributes is in lib/smbldap.c, array attrib_map_to_delete_v30[]. The attribute displayName isn't mentioned in this array. On the other side, displayName is only valid in objectclass sambaSamAccount, according to the ldap schema files and this objectclass is to be removed from the ldap entry. Is it a bug in samba or maybe i have outdated or wrong schema files for ldap? Günter Gersdorf -- Guenter Gersdorf Phone: +49/(0)531/391-7634 Inst. f. Werkzeugmaschinen Fax: -5842 und Fertigungstechnik, TU Braunschweig E-Mail: [EMAIL PROTECTED] Langer Kamp 19b, D-38106 Braunschweighttp://www.iwf.ing.tu-bs.de/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] sambaLogonTime?
It seems, that the attribute sambaLogonTime isn't updated when users logon!? Günter Gersdorf -- Guenter Gersdorf Phone: +49/(0)531/391-7634 Inst. f. Werkzeugmaschinen Fax: -5842 und Fertigungstechnik, TU Braunschweig E-Mail: [EMAIL PROTECTED] Langer Kamp 19b, D-38106 Braunschweighttp://www.iwf.ing.tu-bs.de/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Domain Admins can't modify ldapsam entries
Domain Admins are not allowed to modify the ldapsam database via usrmgr. lib/smbldap.c: smbldap_open: cannot access LDAP when not root.. Is this by design? Günter Gersdorf -- Guenter Gersdorf Phone: +49/(0)531/391-7634 Inst. f. Werkzeugmaschinen Fax: -5842 und Fertigungstechnik, TU Braunschweig E-Mail: [EMAIL PROTECTED] Langer Kamp 19b, D-38106 Braunschweighttp://www.iwf.ing.tu-bs.de/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: WINBIND idmap and tdbfiles while upgrading to 3.0.20a
Hi, is there any solution available? Mit freundlichem Gruß, Dirk Laurenz Systems Engineer Fujitsu Siemens Computers S CE DE SE PS N/O Sales Central Europe Deutschland Professional Service Nord / Ost Hildesheimer Strasse 25 30880 Laatzen Germany Telephone: +49 (511) 84 89 - 18 08 Telefax:+49 (511) 84 89 - 25 18 08 Mobile: +49 (170) 22 10 781 Email: mailto:[EMAIL PROTECTED] Internet: http://www.fujitsu-siemens.com http://www.fujitsu-siemens.de/services/index.html *** -| -Original Message- -| From: -| [EMAIL PROTECTED] -| rg -| [mailto:[EMAIL PROTECTED] -| .samba.org] On Behalf Of Gerald (Jerry) Carter -| Sent: Thursday, October 13, 2005 5:21 PM -| To: Joshua Weage -| Cc: samba@lists.samba.org -| Subject: Re: [Samba] Re: WINBIND idmap and tdbfiles while -| upgrading to 3.0.20a -| -| -BEGIN PGP SIGNED MESSAGE- -| Hash: SHA1 -| -| Joshua Weage wrote: -| -| | Yes. Same problem here. I sent a post to the list -| | last week and didn't see any responses. With -| | Samba 3.0.20a, Samba doesn't add any entries into -| | winbind_idmap.tdb. 3.0.14a works correctly. -| | -| | I've tried various options on the idmap backend -| | option and can't get it to work as it did in 3.0.14a. -| -| Can you send me a URL to your original post ? -| -| | -| | -| | Josh -| -| -| - -- -| -| = -| Alleviating the pain of Windows(tm) --- -| http://www.samba.org -| GnuPG Key- -| http://www.plainjoe.org/gpg_public.asc -| There's an anonymous coward in all of us. -| --anonymous -| -BEGIN PGP SIGNATURE- -| Version: GnuPG v1.4.0 (GNU/Linux) -| Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org -| -| iD8DBQFDTntwIR7qMdg1EfYRAqQiAJ49xNVRS4bHCog8d+C9Z1Dis6vfEQCggZmt -| r3YcTgBNNDEZIrkxfO0OBuo= -| =4Z8z -| -END PGP SIGNATURE- -| -- -| To unsubscribe from this list go to the following URL and read the -| instructions: https://lists.samba.org/mailman/listinfo/samba -| -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] smbpasswd -r .. doesn t work
Hey there I got a little problem with the remote changing of smb-passwords. The problem: I created a smbpasswd file with mksmbpasswd and so all the passwords are blank now. Because only root can log on to the server eyerybody has to change his/her password remote. Trying this gets me this error Retype new SMB password: machine 192.168.41.8 rejected the (anonymous) password change: Error was : Wrong Password. Failed to change password for *** everybody trying to give me the Don´t use the wrong password answer, believe me, it is the right password, I changed it locally on the server. I don´t know what to change next, so please help me. The samba client is running on a SuSe Linux 8.1. samba-client-2.2.5-178 samba-2.2.5-178 thx for the help kispel -- ohne Titel oder schlauen Spruch Raum 2005 Tel: 7379i -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] groups perms
Hi people, im using samba 3.0.14a with tdbsam and i have the following doubt... I create unix groups to allow or deny access to shares like valid users = @unixgroup. Now, this samba is a PDC, and i have a few Terminal Servers with shared printers. I want to define permissions in this printers for groups. But i can't see the unix groups from the Terminal Server windows 2003, how can i see this unix groups on windows machines that are joined in the domain? Tnxs in advance, sorry for my english, i never study! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] cancelling print jobs in windows
Greetings admins, We use cups samba-3.0.7 to serve printing to WinXP clients. I've listed the contents of our smb.conf below. Does anyone know how to prevent users from cancelling their own print jobs from windows? regards, Ryan [global] workgroup = snip netbios name = snip server string = Admin Printing log file = /usr/local/samba/logs/%m.log max log size = 5 debug level = 1 name resolve order = host wins bcast wins server = snip wins proxy = no wins support = no dns proxy = yes local master = no preferred master = no domain master = no os level = 0 security = ADS encrypt passwords = yes password server = * realm = snip interfaces = snip allow hosts = snip printing = cups cups options = job-originating-host-name=%m printcap name = cups load printers = yes socket options = TCP_NODELAY [printers] comment = All Printers path = /SC/ss/cupspykota/spool/samba browseable = no guest ok = yes public = yes writeable = no printable = yes printer admin = snip create mode = 0700 valid users = snip [print$] comment = Printer Drivers path = /usr/local/samba/drivers browseable = yes guest ok = no read only = yes write list = snip -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Error joining Win Xp to Samba PDC
Iv'e set up samba as PDC with LDAP and trying to connect a Windows XP Pro machine to the domain. When i'm trying to join the domain XP popups a logon-windows, but no one of the accounts i have add will work to login, XP say something like Cannot find the selected domain or cannot connect. I've also detected an error in /var/log/samba/log.nmbd which i dont understand: [2005/10/18 14:45:51, 0] nmbd/nmbd_browsesync.c:collect_all_workgroup_names_from_wins_server(588) collect_all_workgroup_names_from_wins_server: Cannot find my workgroup FASITET on subnet UNICAST_SUBNET. Here is my smb.conf fileserver log/samba# testparm Load smb config files from /etc/samba/smb.conf params.c:Parameter() - Ignoring badly formed line in configuration file: log file /var/log/samba/log.%m Processing section [homes] Processing section [netlogon] Processing section [profiles] Processing section [printers] Processing section [print$] Processing section [pub] Processing section [backup] Loaded services file OK. Server role: ROLE_DOMAIN_PDC Press enter to see a dump of your service definitions # Global parameters [global] dos charset = 850 unix charset = ISO8859-1 workgroup = FASITET realm = FASITET.SE http://FASITET.SE server string = Samba Server %v interfaces = eth1, lo passdb backend = ldapsam:ldap://127.0.0.1 passwd program = /usr/sbin/smbldap-passwd -u %u username map = /etc/samba/smbusers unix password sync = Yes syslog = 0 max log size = 10 time server = Yes socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 add user script = /usr/sbin/smbldap-useradd -m %u add group script = /usr/sbin/smbldap-groupadd -p %g add user to group script = /usr/sbin/smbldap-groupmod -m %u %g delete user from group script = /usr/sbin/smbldap-groupmod -x %u %g set primary group script = /usr/sbin/smbldap-usermod -g %g %u add machine script = /usr/sbin/smbldap-useradd -w %u logon script = startup.bat logon path = logon drive = F: logon home = domain logons = Yes os level = 65 preferred master = Yes domain master = Yes wins support = Yes ldap admin dn = cn=Manager,dc=fasitet,dc=se ldap delete dn = Yes ldap filter = ((objectclass=sambaSamAccount)(uid=%u)) ldap group suffix = ou=Groups ldap idmap suffix = ou=Users ldap machine suffix = ou=Computers ldap passwd sync = Yes ldap suffix = dc=fasitet,dc=se ldap user suffix = ou=Users idmap uid = 500-1000 idmap gid = 500-1000 winbind separator = . winbind use default domain = Yes admin users = @Domain Admins [homes] comment = Home Directories valid users = %S read only = No create mask = 0664 directory mask = 0775 [netlogon] comment = Network Logon Service path = /home/samba/netlogon [profiles] comment = Network Profiles Service path = /var/lib/samba/profiles/ read only = No create mask = 0644 [printers] comment = All Printers path = /var/tmp create mask = 0600 printable = Yes browseable = No [print$] comment = Printer Drivers path = /var/lib/samba/drivers write list = @ntadmin, root force group = ntadmin create mask = 0664 directory mask = 0775 [pub] comment = Public Directory path = /pub username = senate force user = senate read only = No create mask = 0664 directory mask = 0775 guest ok = Yes [backup] comment = Backup Directory path = /backup valid users = @users read only = No create mask = 0664 directory mask = 0775 Configfile /etc/openldap/sldap.conf # # See slapd.conf(5) for details on configuration options. # This file should NOT be world readable. # include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/rfc2307bis.schema include /etc/openldap/schema/samba.schema #include /etc/openldap/schema/nis.schema pidfile /var/run/slapd/slapd.pid argsfile /var/run/slapd/slapd.args # Load dynamic backend modules: modulepath /usr/lib/openldap/modules # moduleload back_ldap.la # moduleload back_meta.la # moduleload back_monitor.la # moduleload back_perl.la access to attrs=userPassword,sambaLMPassword,sambaNTPassword by self write by anonymous auth by * none access to * by * read # if no access controls are present, the default policy # allows anyone and everyone to read anything but restricts # updates to rootdn. (e.g., access to * by * read) # # rootdn can always read and write EVERYTHING! ### # BDB database definitions ### database bdb checkpoint 1024 5 cachesize 4 suffix dc=FASITET,dc=SE rootdn cn=Manager,dc=FASITET,dc=SE rootpw secret directory /var/lib/ldap # Indices to maintain index objectClass eq index cn pres,sub,eq index sn pres,sub,eq index uid pres,sub,eq index displayName pres,sub,eq index uidNumber eq index gidNumber eq index memberUID eq index sambaSID eq index sambaPrimaryGroupSID eq index sambaDomainName eq index default sub Configfile /etc/openldap/ldap.conf HOST 127.0.0.1 http://127.0.0.1 BASE
Re: [Samba] Re: Samba/Firewall issues?
The setting are local master = yes domain master = yes perferred master = yes One side affect I am seeing in users are getting xxx domain not available error messages. I am also going to try to pull smbd/nmbd out of xinetd and run them in standalone mode. We are also running a very old dist. of Linux (Redhat v7.3 with a newer kernel) Still debugging this problem! Thanks Paul On Wed, Oct 12, 2005 at 04:46:25PM +0100, Mark Waterhouse - Mailing Lists wrote: Paul Can you confirm what your settings for local master, domain master and preferred master are? You should find these in /etc/smb.conf Mark - Original Message - Greetings, I am running into *possible* Samba/Firewall issues. Our Samba v3.0.11 server is also running iptables. In our log.nmbd file we have noticed the following: [2005/09/27 15:43:41, 1] libsmb/cliconnect.c:cli_connect(1313) Error connecting to 130.xx.xx.xx (Connection refused) [2005/09/27 15:50:21, 0] libsmb/nmblib.c:send_udp(790) Packet send failed to 130.xx.xx.xx(138) ERRNO=Operation not permitted [2005/09/27 14:07:57, 1] libsmb/cliconnect.c:cli_connect(1313) Error connecting to 130.xx.xx.xx (No route to host) [2005/09/27 14:12:51, 1] libsmb/cliconnect.c:cli_connect(1313) Error connecting to 130.xx.xx.xx (Connection refused) [2005/09/27 14:23:04, 1] libsmb/cliconnect.c:cli_connect(1313) A search turned up the following: http://seclists.org/lists/bugtraq/2001/Mar/0285.html Obviously, the netfilter nat code breaks nmap while using the -O flag or using decoy options. The (sendto in send_tcp_raw: sendto) error is a symptom of this. It also breaks other packet shaping utilities such as hping, etc., so this does not appear to be an nmap problem. I don't believe the connection tracking portion of netfilter is to blame in this case. In my tests the connection tracking code, whether it was loaded as a module or built statically into the kernel, didn't seem to get in the way. The cause of the 'sendto..' errors seems to be caused solely by the iptable_nat.o module(which is huge, of course). Once you load that one, or build it into the kernel, nmap -O no worky. Without it, nmap/hping/everything works just peachy. Best Regards, Steve - Now I have removed iptable_nat with rmmod but I am still seeing errors. For our end users the error shows up as Domain not found. Anyone see these errors before ?? Thanks Paul -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain Admins can't modify ldapsam entries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Günter Gersdorf wrote: | Domain Admins are not allowed to modify the ldapsam | database via usrmgr. | lib/smbldap.c: smbldap_open: cannot access LDAP when not root.. | | Is this by design? Yes. It is by design. You have to assign the SeAddUsersPrivilege to the Domain Admins group. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDVPgRIR7qMdg1EfYRAtCyAJ9Ja8CU4/clwoiemo0SShaHBMCKWQCg08wb zKcxIVuCeDyPfC4vbKM/QuM= =y+Jz -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Permission denied with hide dot files
Hi, I've just upgraded to Debian samba 3.0.14a-3 (the latest Debian stable version) from Debian samba 2.23a-15 (the previous Debian stable version). I now get a Permission denied error when attempt to write to a file hidden with the hide dot files option, which I didn't get before. Turning off the hide dot files option fixes this. I've reproduced this with a Perl script running on a Windows 2000+SP4 terminal server, like this: open FOO, servername\\homeshare\$/.foo or die $!; close FOO or die; If .foo didn't exist, the script works the first time but fails the second. Otherwise, it fails on the first attempt. If I turn off the hide dot files option, the problem is fixed. This may be related to the following, but I can find no other references to the issue. http://lists.samba.org/archive/samba/2005-March/101200.html Has this already been reported and/or fixed? Would anybody be able to try to reproduce this on 3.0.20b please? If this has already been fixed, I'd appreciate a pointer to a patch so that I can patch the Debian package. Cheers, Robie. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] desktop file keeps coming up during logon
hide files = /desktop.ini/ntuser.ini/NTUSER.*/ Is what I have in smb.conf and still nothing. Anyway, with Gary's advise I've resolved the issue. Thanks guys On Tue, 18 Oct 2005 08:34:05 +0200 Thomas Bork [EMAIL PROTECTED] wrote: Gary Dale wrote: Alright so I have samba running as a PDC and have roaming profiles, however when I Logon it does everything successfully but then it shows a desktop file in notepad with some info on it. Has anyone seen this before? The desktop.ini file is normally in the startup group for each user. It is a hidden file. I don't know why it sometimes pops up on the desktop, but I've seen it happen often. I'm using Samba 3.0.14a-Debian. If you're running the same, it may peculiar to that version. Otherwise, I can confirm that it does happen. This is a FAQ, answered very often here (see http://marc.theaimsgroup.com/?l=sambar=1w=2) Add in [global]: hide files = /desktop.ini/ der tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Preserving XP look and feel while on DOMAIN
Greetings guys, I have samba on a domain with the configuration listed above. I've created a Default profile under the netlogon root and chmod'ed it 755. I'm trying to maintain XP's look when you log in because at this point, when I input my username and password and logon to the domain it goes back to the classic win2k skin. Any ideas would be welcome. Thanks [global] workgroup = INSOMNIAC netbios name = SERVER server string = insomniac interfaces = interfaces, =, 10.0.0.1/8 passdb backend = tdbsam passwd program = /usr/bin/passwd -l %u username map = /usr/local/etc/samba/smbusers unix password sync = Yes log level = 1 log file = /var/log/samba/%m.log max log size = 50 time server = Yes socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=16384 printcap name = cups add user script = /usr/sbin/useradd -m '%u' delete user script = /usr/sbin/userdel -r '%u' add group script = /usr/sbin/groupadd '%g' delete group script = /usr/sbin/groupdel '%g' add user to group script = /usr/sbin/usermod -G '%g' '%u' add machine script = /usr/sbin/useradd -s /bin/false -d /var/lib/nobody '%u' logon script = login.bat logon path = \\%L\profiles\%U logon drive = Z: logon home = \\%L\%U domain logons = Yes os level = 34 preferred master = Yes domain master = Yes wins support = Yes remote announce = 10.0.0.255 admin users = root, eddie create mask = 0644 hosts allow = 10.0.0., localhost hide unreadable = Yes [profiles] path = /storage/samba/profiles read only = No create mask = 0600 directory mask = 0700 profile acls = Yes case sensitive = No preserve case = No short preserve case = No hide files = /desktop.ini/ntuser.ini/NTUSER.*/ browseable = No [netlogon] path = /storage/samba/netlogon browseable = No [homes] comment = Home Directories read only = No create mask = 0600 browseable = No [BackUP] comment = BackUp Share path = /storage/backup write list = @members [storage] comment = Network Share path = /storage/share write list = @members read only = No create mask = 0664 directory mask = 0775 inherit permissions = Yes [printers] comment = All Printers path = /var/spool/samba printer admin = root guest ok = Yes printable = Yes use client driver = Yes browseable = No [print$] comment = Printer Driver Download Area path = /usr/local/share/cups/drivers write list = root guest ok = Yes browseable = No -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Domain Admins can't modify ldapsam entries
Gerald (Jerry) Carter schrieb: Günter Gersdorf wrote: | Domain Admins are not allowed to modify the ldapsam | database via usrmgr. | lib/smbldap.c: smbldap_open: cannot access LDAP when not root.. | | Is this by design? Yes. It is by design. You have to assign the SeAddUsersPrivilege to the Domain Admins group. Sorry, should have read the manual! Günter Gersdorf -- Guenter Gersdorf Phone: +49/(0)531/391-7634 Inst. f. Werkzeugmaschinen Fax: -5842 und Fertigungstechnik, TU Braunschweig E-Mail: [EMAIL PROTECTED] Langer Kamp 19b, D-38106 Braunschweighttp://www.iwf.ing.tu-bs.de/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] winbind errors
I am getting this error in reference to winbindd: Failed to parse NTLMSSP packet, could not extract NTLMSSP command Here is my current smb.conf [global] # # Network configuration # server string = doc-odin.domain.com workgroup = DOMAIN netbios name = DOC-ODIN realm = DOMAIN security = ADS password server = server.domain.com server2.domain.com # # Domain configuation options # prefered master = no local master = no domain master = no prefered master = no domain logons = no # # Security options # encrypt passwords = yes update encrypted = yes password level = 20 # # Winbind options # # winbind use default domain = no winbind cache time = 5 winbind separator = / winbind enum users = no winbind enum groups = no winbind nested groups = yes # # User/Group mapping options # idmap uid = 500-50 idmap gid = 500-50 add user script = /usr/sbin/useradd -d /var/lib/nobody -g 100 -s /bin/false -M %u add machine script = /usr/sbin/useradd -c Machine -d /var/lib/nobody -s /bin/false %m$ # # LDAP/AD configuration options # passdb backend = ldapsam:LDAP://server2.domain.com ldap admin dn = cn=readonly,cn=users,dc=domain,dc=com ldap user suffix = cn=users ldap group suffix = ou=groups ldap suffix = dc=domain,dc=com ldap delete dn = no use spnego = yes # # Networking options # hide unreadable = no wins support = no dns proxy = no interfaces = eth* lo bind interfaces only = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 hosts deny = 0.0.0.0/0 # # Miscellaneous options # os level = 20 template shell = /bin/false template homedir = /odin/%D/%U load printers = no # # Logging options # log level = 1 ads:5 auth:5 sam:5 rpc:5 Any help is appreciated. i was able to successfully join the domain using security = ads, if I run wbinfo -u I can see the users, if I run getent passwd I do not see the users and I am hoping that resolving that error with winbind will solve this. -- Jason Gerfen My girlfriend threated to leave me if I went boarding... I will miss her. ~ DIATRIBE aka FBITKK -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem with groups NT4 PDC - Samba Member Server
Philip Washington wrote: I have 2 different shares one with [Share1] valid users = @DOMAINA+Domain Users [Share2] valid users = @DOMAINA+SpecialGroup Members of the latter group cannot access Share2. No one can. #getent group |grep Special DOMAINA+SpecialGroup:x:10001:DOMAINA+User1,DOMAINA+User2,DOMAINA+User3 #wbinfo -g |grep Special DOMAINA+SpecialGroup I changed the shares properties after testing this a couple of times back to having each user in the group [Share2] valid user = DOMAINA+User1 DOMAINA+User2 this works and everything else seems to be working. Shouldn't the test with @DOMAINA+SpecialGroup have worked? I was a little concerned because whenever I do testparm I get 'winbind separator = +' might cause problems with group membership and was wondering if this might be the problem. Should I use a different seperator. Yes this does work, I had a typo in the group name. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba creating multiple isntances of the deamon
(2005.10.18, 10:48) Never kill smbd with -9. It can leave important tdb files in a corrupt state. So, what is the right way to kill smbd altogether? Until a solution is found to the current problem, I need to start it afresh so that my back-ups will take place. Thanks in advance. Benoît -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Error in message logs with samba-3.0.14a-2
Okay, here's the background. Fedora Core 4, all recent updates. Using samba-3.0.14a-2. Trying to mount a remote shared folder, and sharing it for local users in my office. Using /etc/fstab to auto-mount it on bootup. Here is the /etc/fstab line that I use to do this: //share/ccc /gobo smbfs username=X,password=XX,uid=10395,gid=30038,fmask=770,dmask=770 0 0 I use winbind to sync with our windows domain (nt, not kerberos yet). Here is a quick dirty copy of my /etc/samba/smb.conf file. [global] log file = /var/log/samba/log.%m load printers = No ldap ssl = no idmap gid = 3-4 admin users = CT01\gabriel wins server = 172.16.64.4 domain master = No show add printer wizard = No dns proxy = No password server = ANAKIN idmap uid = 1-2 workgroup = CT01 os level = 20 security = domain max log size = 50 log level = 1 logon path = /home/$U template shell = /bin/bash [CCC$] path = /gobo read only = no The error I'm concerned about in the logs is this: Oct 18 09:36:50 mithrandir smbd[8168]: [2005/10/18 09:36:50, 0] lib/util_sock.c:write_socket_data(430) Oct 18 09:36:50 mithrandir smbd[8168]: write_socket_data: write failure. Error = Connection reset by peer Oct 18 09:36:50 mithrandir smbd[8168]: [2005/10/18 09:36:50, 0] lib/util_sock.c:write_socket(455) Oct 18 09:36:50 mithrandir smbd[8168]: write_socket: Error writing 4 bytes to socket 5: ERRNO = Connection reset by peer Oct 18 09:36:50 mithrandir smbd[8168]: [2005/10/18 09:36:50, 0] lib/util_sock.c:send_smb(647) Oct 18 09:36:50 mithrandir smbd[8168]: Error writing 4 bytes to client. -1. (Connection reset by peer) I see that when I just browse to the linux server, and not even open up a share. Just typing \\mithrandir in my explorer window causes that error to appear. The mounted shared folder works okay, except for the fact that it loses its connection every now and then and I have to remount it. Not sure if that problem is related to this error or not. I've checked a bit online, and I have seen plenty of questions posted in various places about people asking what that error means, but I haven't ever found an answer or explanation. Could someone please shed some light on this for me? Thanks! -- † Gabriel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Error in message logs with samba-3.0.14a-2
On Tue, 2005-10-18 at 10:07 -0500, Gabriel Matthews wrote: Okay, here's the background. Fedora Core 4, all recent updates. Using samba-3.0.14a-2. Trying to mount a remote shared folder, and sharing it for local users in my office. Using /etc/fstab to auto-mount it on bootup. Here is the /etc/fstab line that I use to do this: //share/ccc /gobo smbfs username=X,password=XX,uid=10395,gid=30038,fmask=770,dmask=770 0 0 I use winbind to sync with our windows domain (nt, not kerberos yet). Here is a quick dirty copy of my /etc/samba/smb.conf file. [global] log file = /var/log/samba/log.%m load printers = No ldap ssl = no idmap gid = 3-4 admin users = CT01\gabriel wins server = 172.16.64.4 domain master = No show add printer wizard = No dns proxy = No password server = ANAKIN idmap uid = 1-2 workgroup = CT01 os level = 20 security = domain max log size = 50 log level = 1 logon path = /home/$U template shell = /bin/bash [CCC$] path = /gobo read only = no The error I'm concerned about in the logs is this: Oct 18 09:36:50 mithrandir smbd[8168]: [2005/10/18 09:36:50, 0] lib/util_sock.c:write_socket_data(430) Oct 18 09:36:50 mithrandir smbd[8168]: write_socket_data: write failure. Error = Connection reset by peer Oct 18 09:36:50 mithrandir smbd[8168]: [2005/10/18 09:36:50, 0] lib/util_sock.c:write_socket(455) Oct 18 09:36:50 mithrandir smbd[8168]: write_socket: Error writing 4 bytes to socket 5: ERRNO = Connection reset by peer Oct 18 09:36:50 mithrandir smbd[8168]: [2005/10/18 09:36:50, 0] lib/util_sock.c:send_smb(647) Oct 18 09:36:50 mithrandir smbd[8168]: Error writing 4 bytes to client. -1. (Connection reset by peer) I see that when I just browse to the linux server, and not even open up a share. Just typing \\mithrandir in my explorer window causes that error to appear. The mounted shared folder works okay, except for the fact that it loses its connection every now and then and I have to remount it. Not sure if that problem is related to this error or not. I've checked a bit online, and I have seen plenty of questions posted in various places about people asking what that error means, but I haven't ever found an answer or explanation. Could someone please shed some light on this for me? Thanks! try adding to smb.conf [General] smb ports = 139 or if you have only Win2K WinXP clients smb ports = 445 This should stop it from dropping one or the other ports and creating the log error. This probably isn't why you are 'losing' connection. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba creating multiple isntances of the deamon
On Tue, Oct 18, 2005 at 10:49:41AM -0400, Benoit Gauthier wrote: (2005.10.18, 10:48) Never kill smbd with -9. It can leave important tdb files in a corrupt state. So, what is the right way to kill smbd altogether? Just use killall smbd. If it doesn't terminate that's a bug and we need to investigate why it's hanging/looping. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba creating multiple isntances of the deamon
(2005.10.18, 12:30) So, what is the right way to kill smbd altogether? Just use killall smbd. If it doesn't terminate that's a bug and we need to investigate why it's hanging/looping. Well, it doesn't do any good here. All processes are still active. What next? Benoît -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain cannot be contacted
Did you ever resolved your problem? On Mon, Oct 17, 2005 at 06:45:39PM +, Matt Pruett wrote: I have setup two samba domain controllers, both have basicly the same configs and use the same ldap database backend. Often however when logging in users will get a domain cannot be contacted error, attempting to login multiple times will eventually get them in and it will work fine from then on. The question is, is there anything else I really need to do to make this work correctly? Why would this error be occuring only some of the time? I can generally join the domain fine, and browse / access the shares on both servers. So I am wondering if I missed something, like something I need to add to the config so the two servers know they are both DC's? The goal is to be able to at least log in with only one of the two up. And suggested reading on this subject? any ideas? Thanks :) -- Matt Pruett [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Old Dos program
Hello all. I am running Samba 3.0.7 MDK rpm install. I am migrating this server from a Novell system. I am having programs with Windows 98 clients connecting to Accpac (Old dos version). When going into Recievable it comes up with Insufficient disk space. The Windows 2000/XP clients have no problems. I have change the max disk size option to 500mb which made no change. Any help would be appreciated. Mike - This email was sent using CleanMailOnline.com. Your Spam and Virus Solution http://www.cleanmailonline.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba creating multiple isntances of the deamon
On Tue, Oct 18, 2005 at 12:31:23PM -0400, Benoit Gauthier wrote: (2005.10.18, 12:30) So, what is the right way to kill smbd altogether? Just use killall smbd. If it doesn't terminate that's a bug and we need to investigate why it's hanging/looping. Well, it doesn't do any good here. All processes are still active. What next? That's what we're talking about. Ensure you've compiled with -g, then after hitting a smbd with a kill signal attach to it using gdb - then issue the commant bt (backtrace) so we can see what it's doing. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Old Dos program
On Tue, Oct 18, 2005 at 12:44:02PM -0400, Mike wrote: Hello all. I am running Samba 3.0.7 MDK rpm install. I am migrating this server from a Novell system. I am having programs with Windows 98 clients connecting to Accpac (Old dos version). When going into Recievable it comes up with Insufficient disk space. The Windows 2000/XP clients have no problems. I have change the max disk size option to 500mb which made no change. Any help would be appreciated. Please try 3.0.20b, there has been some work in this area. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] makepkg.sh for samba 3.0.20
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 xuan van wrote: | Hi, | | I downloaded 3.0.20 from samba.org, ran makepkg.sh to create | samba pkg for Solaris. The install base for the new version | locates in /opt/samba and the smbd locates in /etc/samba. | I tried to modify the makepkg.sh to put everything under | /usr/local/samba as follow: | | Delete: | |--localstatedir=/var/lib/samba \ |--with-piddir=/var/run \ |--with-logfilebase=/var/log/samba \ |--with-privatedir=/etc/samba/private \ |--with-configdir=/etc/samba \ | | Add: | |--localstatedir=/usr/local/samba/lib \ |--with-piddir=/var/run \ |--with-logfilebase=/usr/local/samba/var/log \ |--with-privatedir=/usr/local/samba/private \ |--with-configdir=/usr/local/samba/lib \ | | Replaced INSTALL_BASE=/opt/samba with INSTALL_BASE=/usr/local/samba | | makepkg.sh completed with no error. However pkgadd gives me the | following errors: | # pkgadd -d . samba | | Processing package instance samba from /tmp | | CIFS File and Print server | (sparc) 3.0.20 | Copyright (C) 2001 Samba Team | Using /usr/local/samba as the package base directory. | ## Processing package information. | pkgadd: ERROR: duplicate pathname /usr/local/samba/lib | pkgadd: ERROR: unable to process pkgmap It's probably because the configdir and libdir overlap. Just remove your --with-logbase and --with-configdir lines since those are the default values anyways. Although it could just be a bug in the generated prototype file now that I think of it since we would be defining /usr/local/samba/lib/twice. try setting --with-configdir=/usr/local/samba/etc just as a test cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc There's an anonymous coward in all of us. --anonymous -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDVSYcIR7qMdg1EfYRAuDLAKC4nu7DBXa2qiKmKfnQ6u/p6xnzpgCg1R48 VpbimmV5yWW6wigq9j1/L9U= =SSDl -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Winbind error Failed to parse NTLMSSP packet
I am getting this error in reference to winbindd: Failed to parse NTLMSSP packet, could not extract NTLMSSP command Here is my current smb.conf [global] # # Network configuration # server string = doc-odin.domain.com workgroup = DOMAIN netbios name = DOC-ODIN realm = DOMAIN security = ADS password server = server.domain.com server2.domain.com # # Domain configuation options # prefered master = no local master = no domain master = no prefered master = no domain logons = no # # Security options # encrypt passwords = yes update encrypted = yes password level = 20 # # Winbind options # # winbind use default domain = no winbind cache time = 5 winbind separator = / winbind enum users = no winbind enum groups = no winbind nested groups = yes # # User/Group mapping options # idmap uid = 500-50 idmap gid = 500-50 add user script = /usr/sbin/useradd -d /var/lib/nobody -g 100 -s /bin/false -M %u add machine script = /usr/sbin/useradd -c Machine -d /var/lib/nobody -s /bin/false %m$ # # LDAP/AD configuration options # passdb backend = ldapsam:LDAP://server2.domain.com ldap admin dn = cn=readonly,cn=users,dc=domain,dc=com ldap user suffix = cn=users ldap group suffix = ou=groups ldap suffix = dc=domain,dc=com ldap delete dn = no use spnego = yes # # Networking options # hide unreadable = no wins support = no dns proxy = no interfaces = eth* lo bind interfaces only = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 hosts deny = 0.0.0.0/0 # # Miscellaneous options # os level = 20 template shell = /bin/false template homedir = /odin/%D/%U load printers = no # # Logging options # log level = 1 ads:5 auth:5 sam:5 rpc:5 Any help is appreciated. i was able to successfully join the domain using security = ads, if I run wbinfo -u I can see the users, if I run getent passwd I do not see the users and I am hoping that resolving that error with winbind will solve this. -- Jason Gerfen My girlfriend threated to leave me if I went boarding... I will miss her. ~ DIATRIBE aka FBITKK -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Finishing Touches
Good Morning, Does anyone have a simple method to force a log off of a user after being idle for n minutes. I am using the deadtime parameter, but from reading the description it just refreshs the connection which is OK, but I would rather that the user is logged off and not refreshed (security reasons). I am not using LDAP. Is there also possibly a method, without LDAP, that I can shut everyone off from say 22:00 to 23:59 so that backups can be done with no open files? I am considering cron jobs to run at 22:00 to stop the servers (smb/nmb) and then another one to run at 23:59 to start the servers. Thanks in advance, Frank -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Need help with username map
We have setup a Samba member server using Winbind (3.0.14a and NT4). I am trying to map the NT Domain ids to root (root = admin administrator rdehn) but this seems to be ignored when I try and connect to a share. The username map = /etc/samba/smbusers line is in the Global section of smb.conf and testparm is OK. What am I missing? Is this not possible? Thanks in advance for any help / suggestions! Bob Dehn -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbcacls add fails 3.0.20a Anyone??
Hi again! Does someone have any suggestions on my problem?? Regards Henrik 17 okt 2005 kl. 22.07 skrev Henrik Zagerholm: Yes it is! And the user is the owener of the file in question also. I've tried with the built in Administrator and get the same problem . Regards Henrik 17 okt 2005 kl. 21.13 skrev Stéphane Purnelle: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Henrik Zagerholm a écrit : Hi all! I have a problem setting ACLs on a remote file on a Windows XP Pro SP2 box. I issue the following command: smbcacls -a 'ACL:BBI-DEV\beakid:ALLOWED/0/0x00100116' -U 'BBI-DEV \Admin' //BBI-DEV/Data /Niva.txt BBI-DEV\Admin is it a administrators users ? And I get this response from debug level 3. Password: Connecting to host=BBI-DEV Connecting to 192.168.1.124 at port 445 Doing spnego session setup (blob length=16) server didn't supply a full spnego negprot Got challenge flags: Got NTLMSSP neg_flags=0x628a0215 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60080215 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60080215 Connecting to host=BBI-DEV Connecting to 192.168.1.124 at port 445 Doing spnego session setup (blob length=16) server didn't supply a full spnego negprot Got challenge flags: Got NTLMSSP neg_flags=0x628a0215 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60080215 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60080215 lsa_io_sec_qos: length c does not match size 8 NT_TRANSACT_SET_SECURITY_DESC failed ERROR: secdesc set failed: NT_STATUS_ACCESS_DENIED Any help will be appreciated! PS I can easily retrieve ACLs so it works one way :D //Henrik - -- Stéphane Purnelle [EMAIL PROTECTED] Site Web : http://www.linuxplusvalue.be -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDU/f08tswkE3d0ecRAoWpAJoDqlRRcg9J41aN8VQ1IEpXf1yu1wCffqw9 fAnpWF1etOUv3FsAwfNi138= =dhjJ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Need help with username map
[EMAIL PROTECTED] wrote: We have setup a Samba member server using Winbind (3.0.14a and NT4). I am trying to map the NT Domain ids to root (root = admin administrator rdehn) but this seems to be ignored when I try and connect to a share. The username map = /etc/samba/smbusers line is in the Global section of smb.conf and testparm is OK. What am I missing? Is this not possible? Recent versions of samba (from 3.0.14a?), requires one to include the domain, so you'd want in smbusers: root = my_domain\Administrator -- Rex -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Need help with username map
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rex Dieter wrote: | [EMAIL PROTECTED] wrote: | We have setup a Samba member server using Winbind (3.0.14a and NT4). I | am trying to map the NT Domain ids to root (root = admin | administrator rdehn) but this seems to be ignored when I try and | connect to a share. The username map = /etc/samba/smbusers line is | in the Global section of smb.conf and testparm is OK. What am I | missing? Is this not possible? | | Recent versions of samba (from 3.0.14a?), requires one to | include the domain, so you'd want in smbusers: | root = my_domain\Administrator The change was introduced in 3.0.8 actually. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDVTvfIR7qMdg1EfYRAvIHAJ9oC6z/QIbGhDyIW/FYc6VfuBustACeI3ou 4eJOo2GpnQt+t/rbFCbfIZ4= =+ihN -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] smbd looping and consuming 100% CPU
Hi All, I have a samba 3.0.4 installation on AIX 5.2 ML05. The problem I am facing is that sometimes one smbd is looping and consuming up to 100% CPU time. In the log I see the following entry: === [2005/10/18 11:35:34, 0] lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 39316 (3.0.4) Please read the appendix Bugs of the Samba HOWTO collection [2005/10/18 11:35:34, 0] lib/fault.c:fault_report(39) === Did anybody face the same issue? Any help appreciated Regards Carli *** PLEASE NOTE *** This message, along with any attachments, may be confidential or legally privileged. It is intended only for the named person(s), who is/are the only authorized recipients. If this message has reached you in error, kindly destroy it without review and notify the sender immediately. Thank you for your help. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbd looping and consuming 100% CPU
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Carli Cathomen wrote: | Hi All, | | I have a samba 3.0.4 installation on AIX 5.2 ML05. The problem I am facing | is that sometimes one smbd is looping and consuming up to 100% CPU time. | In the log I see the following entry: | | === | [2005/10/18 11:35:34, 0] lib/fault.c:fault_report(37) | INTERNAL ERROR: Signal 11 in pid 39316 (3.0.4) | Please read the appendix Bugs of the Samba HOWTO collection | [2005/10/18 11:35:34, 0] lib/fault.c:fault_report(39) | === | | Did anybody face the same issue? Any help appreciated You're probably going to have to upgrade. No one is going to spend a lot of time tracking down issues in code that old. Sorry. Wish I had better news for you. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDVUAIIR7qMdg1EfYRAlZ6AKCrllwLpFBy+SP0bJ42JoZI7DEu1QCg4tpK BrGxYia0FvLMR5seXyS0G5c= =vj7u -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba3.0.4: Troubles with charset
Hi all, I have a samba 3.0.4 installation on AIX 5.2 ML05. Trying to establish Samba with special character support for Italian language I have some troubles in displaying them in smb.conf I was not able to put CP850, so I put in # Global parameters [global] dos charset = UTF8 display charset = UTF8 checking with testparm -sv it looks fine # testparm -sv |grep charset Load smb config files from /usr/local/samba/lib/smb.conf Loaded services file OK. dos charset = UTF8 unix charset = UTF8 display charset = UTF8 the charset directory # ls -l /usr/local/samba/lib/charset total 944 -rwxr-xr-x 1 root system 241137 Jun 03 2004 CP437.so -rwxr-xr-x 1 root system 241017 Jun 03 2004 CP850.so In the logfile I see the following error log.smbd: Locale charset 'ISO8859-1' unsupported, using ASCII instead log.smbd: Probing module 'ISO8859-1' log.smbd: Probing module 'ISO8859-1': Trying to load from /usr/local/samba/lib/charset/ISO8859-1.so log.smbd: Error loading module '/usr/local/samba/lib/charset/ISO8859-1.so': A file or directory in the path name does not exist. log.smbd: Locale charset 'ISO8859-1' unsupported, using ASCII instead What am I missing here? Regards Carli *** PLEASE NOTE *** This message, along with any attachments, may be confidential or legally privileged. It is intended only for the named person(s), who is/are the only authorized recipients. If this message has reached you in error, kindly destroy it without review and notify the sender immediately. Thank you for your help. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbd looping and consuming 100% CPU
Carli Cathomen schrieb: Hi All, I have a samba 3.0.4 installation on AIX 5.2 ML05. The problem I am facing is that sometimes one smbd is looping and consuming up to 100% CPU time. In the log I see the following entry: === [2005/10/18 11:35:34, 0] lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 39316 (3.0.4) Please read the appendix Bugs of the Samba HOWTO collection [2005/10/18 11:35:34, 0] lib/fault.c:fault_report(39) === Did anybody face the same issue? Any help appreciated Recently I has a similar issue with smbd (Samba 3.0.10) consuming 100% CPU, although I didn't have such nice logs. Upgrading to a newer Samba version solved it. -- Tomek http://wpkg.org WPKG - software deployment and upgrades with Samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.14a AFS funkyness
I've been using Samba as an AFS gateway since December 04 and it's been working great but I recently deployed a 3.0.14a server and now samba isn't honoring AFS acls. It is enforcing unix mode permissions which is completely the wrong behavior in this case. For example I have a directory with the following unix permissions and AFS acl rwxrwxr--dharknesuserstestfolder Access list for testfolder is Normal rights: itsdept rlidwk system:administrtors rlidwka With that setup I will not be able to write to the directory through samba even though I'm in the itsdept AFS group. Samba is generating the proper AFS tokens since I can get access to the folder, it just wants to enforce file and directory permissions. Thanks, Derek -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba 3.0.20b - still getting
Gerald (Jerry) Carter jerry at samba.org writes:
You don't give enough information. Can you start
winbindd by hand? WHat does a level 10 debug log show
you of the failure?
cheers, jerry
jerry,
I am getting the following message in the system log:
Oct 18 14:53:51 ht-server kernel: audit(1129661631.256:3):
avc: denied { write } for pid=15497 comm=winbindd
name=secrets.tdb dev=dm-0 ino=6915619
scontext=root:system_r:winbind_t
tcontext=root:object_r:samba_etc_t
tclass=file
Oct 18 14:53:51 ht-server winbindd[15497]:
passdb/secrets.c:secrets_init(64)
Oct 18 14:53:51 ht-server winbindd[15497]:
Failed to open /etc/samba/secrets.tdb
Oct 18 14:53:51 ht-server winbindd[15497]:
nsswitch/winbindd.c:main(952)
Oct 18 14:53:51 ht-server winbindd[15497]:
Could not initialize domain trust account secrets. Giving up
Oct 18 14:53:51 ht-server winbind: winbindd startup succeeded
I'll start the service manually to see what additional information
I find.
Thank
PC
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba 3.0.20b - still getting
PC wrote:
I am getting the following message in the system log:
Oct 18 14:53:51 ht-server kernel: audit(1129661631.256:3):
avc: denied { write } for pid=15497 comm=winbindd
name=secrets.tdb dev=dm-0 ino=6915619
scontext=root:system_r:winbind_t
tcontext=root:object_r:samba_etc_t
tclass=file
Looks like selinux is getting in the way.
-- Rex
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] idealx dual head patch?
i have two domain controllers, both have openldap, server1 can write to the ldap database and pushes that to server2 which can only read. In the smbldap.conf file it reads... # Notes: to use to dual ldap servers backend for Samba, you must patch # Samba with the dual-head patch from IDEALX. If not using this patch # just use the same server for slaveLDAP and masterLDAP. # Those two servers declarations can also be used when you have # . one master LDAP server where all writing operations must be done # . one slave LDAP server where all reading operations must be done # (typically a replication directory) # Ex: slaveLDAP=127.0.0.1 slaveLDAP=127.0.0.1 slavePort=389 # Master LDAP : needed for write operations # Ex: masterLDAP=127.0.0.1 masterLDAP=172.16.0.1 masterPort=389 So my question is, in the newest versions of samba has this patch that they talk about already been added? or not? I cant find this dual head patch anywhere on idealx's site either. -- Matt Pruett [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba 3.0.20b - still getting
Rex Dieter rdieter at math.unl.edu writes:
PC wrote:
I am getting the following message in the system log:
Oct 18 14:53:51 ht-server kernel: audit(1129661631.256:3):
avc: denied { write } for pid=15497 comm=winbindd
name=secrets.tdb dev=dm-0 ino=6915619
scontext=root:system_r:winbind_t
tcontext=root:object_r:samba_etc_t
tclass=file
Looks like selinux is getting in the way.
Rex, this seemed to fix the issue un RH 3.0.20-22, but nogo for 3.0.20b
I changed my selinux setting via system-config-securitylevel
and set winbind_disable_trans and use_samba_home_dirs to active.
getsebool -a | grep win
winbind_disable_trans -- active
getsebool -a | grep sam
use_samba_home_dirs -- active
I get the following syslog error when starting winbind under Samba3-3.0.20b
Oct 18 17:20:27 ht-server winbind: winbindd shutdown succeeded
Oct 18 17:20:27 ht-server winbindd[21841]: [2005/10/18 17:20:27, 0]
lib/util.c:smb_panic2(1548)
Oct 18 17:20:27 ht-server winbindd[21841]:
PANIC: Could not fetch our SID - did we join?
Oct 18 17:20:27 ht-server winbindd[21841]:
Oct 18 17:20:27 ht-server winbind: winbindd startup succeeded
Oct 18 17:20:27 ht-server winbindd[21841]:
[2005/10/18 17:20:27, 0] lib/util.c:smb_panic2(1556)
Oct 18 17:20:27 ht-server winbindd[21841]: BACKTRACE: 6 stack frames:
Oct 18 17:20:27 ht-server winbindd[21841]:
#0 winbindd(smb_panic2+0x1c5) [0x552ab621e0]
Oct 18 17:20:27 ht-server winbindd[21841]:
#1 winbindd(smb_panic+0xe) [0x552ab62016]
Oct 18 17:20:27 ht-server winbindd[21841]:
#2 winbindd(init_domain_list+0x6b) [0x552ab04849]
Oct 18 17:20:27 ht-server winbindd[21841]:
#3 winbindd(main+0x530) [0x552aafeb13]
Oct 18 17:20:27 ht-server winbindd[21841]:
#4 /lib64/tls/libc.so.6(__libc_start_main+0xdb) [0x2a962854bb]
Oct 18 17:20:27 ht-server winbindd[21841]:
#5 winbindd [0x552aafcf2a]
Oct 18 17:20:27 ht-server winbindd[21841]:
The rpm used are:
libsmbclient-3.0.20b-24.x86_64.rpm
libsmbclient-devel-3.0.20b-24.x86_64.rpm
samba3-doc-3.0.20b-24.x86_64.rpm
samba3-utils-3.0.20b-24.x86_64.rpm
samba3-3.0.20b-24.x86_64.rpm
samba3-cifsmount-3.0.20b-24.x86_64.rpm
samba3-winbind-3.0.20b-24.x86_64.rpm
samba3-winbind-32bit-3.0.20b-24.i386.rpm
samba3-client-3.0.20b-24.x86_64.rpm
Any inputs?
Pc
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba daemons won't run on Solaris 5.5.1
Dear all, I've downloaded the samba packages from sunfreeware.com Installation was a success on Solaris 5.9 But not on Solaris 5.5.1 The 3 samba daemons won't run. I'm configuring samba through its web interface (port 901) Any suggestions Gents Regards Rami -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] roll-yer-own ldapadd operations for scipt options?
I'm currently using the suse ldapsmb utility for all the script operations, but I want to do some custom script work for creating user and machine accounts. For example, I want to manipulate the default object classes and directory placement for new machines--putting them into ou=Devices instead of ou=Users, and giving them the parent objectClasses of account and ipHost [for NIS and DHCP work]. I want to do similar kinds of stuff to new user accounts--giving them objectClass of person and inetOrgPerson and posixAccount all at once. So I need to have a script that will fill in some blanks in a template file and then call ldapadd (or something) that will import the completed template. Technically I could probably do all of that with the variables available in the smb.conf, except that ldapdd needs multi-line input when it is reading from stdin. Is that possible? If not, I'll have to create a template file, store it in a temp file, and do it that way. Anybody got anything done here that I can copy? Thanks -- Eric A. Hallhttp://www.ehsco.com/ Internet Core Protocols http://www.oreilly.com/catalog/coreprot/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba PDC on NT4 Domain
On 10/17/2005 9:51 AM, Kyle Lemons wrote: computers. The problem here is that XP joins a domain specifically, here called DOMAIN, and has a dropdown list on the login screen instead of an editable text box. Is there any way to join the linux server, currently a PDC for WEBTEAM and net bios name LINSERVER, to the NT domain such that it will appear in the drop down menu on Windows XP? If you establish a trust relationship between the two domains, you can login to domain B from workstations in domain A, via the drop-down box. -- Eric A. Hallhttp://www.ehsco.com/ Internet Core Protocols http://www.oreilly.com/catalog/coreprot/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] roll-yer-own ldapadd operations for scipt options?
On Tue, 2005-10-18 at 19:05 -0400, Eric A. Hall wrote: I'm currently using the suse ldapsmb utility for all the script operations, but I want to do some custom script work for creating user and machine accounts. For example, I want to manipulate the default object classes and directory placement for new machines--putting them into ou=Devices instead of ou=Users, and giving them the parent objectClasses of account and ipHost [for NIS and DHCP work]. I want to do similar kinds of stuff to new user accounts--giving them objectClass of person and inetOrgPerson and posixAccount all at once. So I need to have a script that will fill in some blanks in a template file and then call ldapadd (or something) that will import the completed template. Technically I could probably do all of that with the variables available in the smb.conf, except that ldapdd needs multi-line input when it is reading from stdin. Is that possible? If not, I'll have to create a template file, store it in a temp file, and do it that way. Anybody got anything done here that I can copy? I personally use webmin to create/edit accounts (LDAP Users Groups module + a few shell scripts) but I'm sure that LAM (LDAP Account Manager) can do what you want to do and of course. Included with most samba packaging is smbldap which will give you the framework where you can sort of do what you want. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] I cannot making logon by the domain in windows xp professional
Hi friends, This is my first contact to you. I have a problem because I can´t to make my users windows xp professional to enter in my domain called CCA-INTRANET. first I made: # adduser joao # smbpasswd -a joao # useradd -d /dev/null -s /bin/false joao$ # passwd -l joao$ # smbpasswd -a -m joao I read that i needed to perform a part of key from de regedit in the directory /usr/share/doc/samba-doc/registry/WinXP_SignOrSeal.reg after I ´ve needed to change in My Computer the domain to CCA-INTRANET and the machine name to joao I ´ve also needed to change in control panel- administrative tools and to disable 3 options in security options But I cannot entering into domain yet. somebody here can help-me? ___ Promoção Yahoo! Acesso Grátis: a cada hora navegada você acumula cupons e concorre a mais de 500 prêmios! Participe! http://yahoo.fbiz.com.br/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Error join samba PDC from XP
Hi.
Iv'e set up samba as PDC with LDAP and trying to connect a Windows XP Pro
machine to the domain.
When i'm trying to join the domain XP popups a logon-windows, but no one of
the accounts i have added will work to login,
XP say something like Cannot find the selected domain or cannot connect.
I've also detected an error in /var/log/samba/log.nmbd which i dont
understand:
[2005/10/18 14:45:51, 0]
nmbd/nmbd_browsesync.c:collect_all_workgroup_names_from_wins_server(588)
collect_all_workgroup_names_from_wins_server:
Cannot find my workgroup FASITET on subnet UNICAST_SUBNET.
Here is my smb.conf
fileserver log/samba# testparm
Load smb config files from /etc/samba/smb.conf
params.c:Parameter() - Ignoring badly formed line in configuration file: log
file /var/log/samba/log.%m
Processing section [homes]
Processing section [netlogon]
Processing section [profiles]
Processing section [printers]
Processing section [print$]
Processing section [pub]
Processing section [backup]
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions
# Global parameters
[global]
dos charset = 850
unix charset = ISO8859-1
workgroup = FASITET
realm = FASITET.SE http://FASITET.SE
server string = Samba Server %v
interfaces = eth1, lo
passdb backend = ldapsam:ldap://127.0.0.1
passwd program = /usr/sbin/smbldap-passwd -u %u
username map = /etc/samba/smbusers
unix password sync = Yes
syslog = 0
max log size = 10
time server = Yes
socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192
add user script = /usr/sbin/smbldap-useradd -m %u
add group script = /usr/sbin/smbldap-groupadd -p %g
add user to group script = /usr/sbin/smbldap-groupmod -m %u %g
delete user from group script = /usr/sbin/smbldap-groupmod -x %u %g
set primary group script = /usr/sbin/smbldap-usermod -g %g %u
add machine script = /usr/sbin/smbldap-useradd -w %u
logon script = startup.bat
logon path =
logon drive = F:
logon home =
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
wins support = Yes
ldap admin dn = cn=Manager,dc=fasitet,dc=se
ldap delete dn = Yes
ldap filter = ((objectclass=sambaSamAccount)(uid=%u))
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Users
ldap machine suffix = ou=Computers
ldap passwd sync = Yes
ldap suffix = dc=fasitet,dc=se
ldap user suffix = ou=Users
idmap uid = 500-1000
idmap gid = 500-1000
winbind separator = .
winbind use default domain = Yes
admin users = @Domain Admins
[homes]
comment = Home Directories
valid users = %S
read only = No
create mask = 0664
directory mask = 0775
[netlogon]
comment = Network Logon Service
path = /home/samba/netlogon
[profiles]
comment = Network Profiles Service
path = /var/lib/samba/profiles/
read only = No
create mask = 0644
[printers]
comment = All Printers
path = /var/tmp
create mask = 0600
printable = Yes
browseable = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
write list = @ntadmin, root
force group = ntadmin
create mask = 0664
directory mask = 0775
[pub]
comment = Public Directory
path = /pub
username = senate
force user = senate
read only = No
create mask = 0664
directory mask = 0775
guest ok = Yes
[backup]
comment = Backup Directory
path = /backup
valid users = @users
read only = No
create mask = 0664
directory mask = 0775
Configfile /etc/openldap/sldap.conf
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/rfc2307bis.schema
include /etc/openldap/schema/samba.schema
#include /etc/openldap/schema/nis.schema
pidfile /var/run/slapd/slapd.pid
argsfile /var/run/slapd/slapd.args
# Load dynamic backend modules:
modulepath /usr/lib/openldap/modules
# moduleload back_ldap.la
# moduleload back_meta.la
# moduleload back_monitor.la
# moduleload back_perl.la
access to attrs=userPassword,sambaLMPassword,sambaNTPassword
by self write
by anonymous auth
by * none
access to *
by * read
# if no access controls are present, the default policy
# allows anyone and everyone to read anything but restricts
# updates to rootdn. (e.g., access to * by * read)
#
# rootdn can always read and write EVERYTHING!
###
# BDB database definitions
###
database bdb
checkpoint 1024 5
cachesize 4
suffix dc=FASITET,dc=SE
rootdn cn=Manager,dc=FASITET,dc=SE
rootpw {SSHA}secret
directory /var/lib/ldap
# Indices to maintain
index objectClass eq
index cn pres,sub,eq
index sn pres,sub,eq
index uid pres,sub,eq
index displayName pres,sub,eq
index uidNumber eq
index gidNumber eq
index memberUID eq
index sambaSID eq
index sambaPrimaryGroupSID eq
index sambaDomainName eq
index default sub
Configfile /etc/openldap/ldap.conf
HOST 127.0.0.1 http://127.0.0.1
[Samba] samba-3.0.10-1.4E (RHEL4): logon failures with 2003 server pdc
I recently set up a new RHEL4 server with samba-3.0.10 in a Windows 2003 server PDC domain. I can log on as one user from different workstations on to the new samba server. With several other users, I get this error: Oct 18 16:41:34 samba-server smbd[2502]: krb5_rd_req(CIFS/[EMAIL PROTECTED]) failed: Wrong principal in request Oct 18 16:41:34 samba-server smbd[2502]: [2005/10/18 16:41:34, 0] libads/kerberos_verify.c:ads_keytab_verify_ticket(113) [2005/10/18 16:41:42, 0] libads/kerberos_verify.c:ads_keytab_verify_ticket(113) krb5_rd_req(CIFS/[EMAIL PROTECTED]) failed: Wrong principal in request The users are able to log on to other servers just fine and should have all the needed permissions to log on to the share. Can anyone give me some clue what that error means? Some relevant lines from smb.conf: workgroup = MY password server = pdc-server.my.dom realm = MY.DOM security = ADS client schannel = no use spnego = Yes client use spnego = Yes use kerberos keytab = Yes encrypt passwords = yes wins server = pdc-server.my.dom ip -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba on NCR Unix
Hello, I would like install samba on NCR unix. Is there anyone who help me to find binaries. Thanks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: samba-3.0.10-1.4E (RHEL4): logon failures with 2003 server pdc
On Tue, Oct 18, 2005 at 04:43:12PM +0300, you [Ville Herva] wrote: I recently set up a new RHEL4 server with samba-3.0.10 in a Windows 2003 server PDC domain. I can log on as one user from different workstations on to the new samba server. With several other users, I get this error: Oct 18 16:41:34 samba-server smbd[2502]: krb5_rd_req(CIFS/[EMAIL PROTECTED]) failed: Wrong principal in request Oct 18 16:41:34 samba-server smbd[2502]: [2005/10/18 16:41:34, 0] libads/kerberos_verify.c:ads_keytab_verify_ticket(113) [2005/10/18 16:41:42, 0] libads/kerberos_verify.c:ads_keytab_verify_ticket(113) krb5_rd_req(CIFS/[EMAIL PROTECTED]) failed: Wrong principal in request The users are able to log on to other servers just fine and should have all the needed permissions to log on to the share. Can anyone give me some clue what that error means? Some relevant lines from smb.conf: workgroup = MY password server = pdc-server.my.dom realm = MY.DOM security = ADS client schannel = no use spnego = Yes client use spnego = Yes use kerberos keytab = Yes encrypt passwords = yes wins server = pdc-server.my.dom ip I appears that it's the workstation I try to connect from that is significant, not the username. Some workstations work, some don't - with the same username. The ones that work are not members of the domain, the ones that don't are. I also have netbios name = SAMBASERVER netbios aliases = OTHERNAME in smb.conf. What's even more curious is that on I can log on from the workstations that don't work with \\SAMBASERVER\SHARE using \\OTHERNAME\SHARE. Even browsing \\SAMBASERVER doesn't work, but \\OTHERNAME does. And on certain, non-domain, workstations both work. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] PDC for Multiple Domains from a Single Samba Box
I've struggled with this for a couple of weeks, and have looked at countless posts and at the Samba documentation collection with no real solution. I'm setting up a lab that needs to have multiple domains (for machine / user segregation politics) for around 40 windows XP professional machines. I have a single Linux server running Suse 9.2. I would like for this server to be able to act as the PDC for N domains. I am using ldap as the password/ account back end running on the same box. I'm also running dhcpd and DNS on this box. I followed the Samba-How-To to setup 'MEGANET2' and have several of the windows boxes participating in that domain with what appears to be success (thanks to the writer). I then, based on what I could find doing google searches, created an additional ip address (alias) and an additional smb.conf file specifying to bind to the aliased ip address. I modified the samba3.schema file to remove the single-value flag from the sambaSID attribute and added additional sambaSIDs for the new domain for all of the accounts housed in the ldap tree. I also added an additional sambaDomain entry for the new domain. I started another smbd and nmbd process using the new smb.conf file. My server now has two each smbd and nmbd processes (each using the different smb.conf files). I can join the new domain from an XP box (using the same administrator account as with the other domain), however, when I reboot (as required when a domain is joined), none of my user names or passwords work at the logon window (even though I pick the new domain from the drop down box). I get various messages ranging from domain not found to user name or password is incorrect. I've see a couple of posts that say this topic was discussed in detail on the list during 2001, but I cannot find the posts. 1. Am I trying something that just won't work? 2. Does a PDC have to belong to the domain? ( I cannot get net -w 'newdomain' rpc join -U Administrator%passwd to work for the new domain) 3. Has anyone got a configuration like this working? 4. Do I need to be running two nmbds? 5 What about winbindd? Any help would be greatly appreciated. Thanks, Brian Palmer e-mail: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] smbd processes 99% cpu and end-user locks up
Still having a situation, in particular with Microsoft Office products (Excel, MS Word, etc), wherein a user locks up while saving a file. The scenario goes as follows: user opens up a file (excel document, word document, etc), user changes file, user hits save, user hangs... `top` reports an smbd belonging to user locked in some sort of loop causing 99% cpu utilization. net status sessions | grep 'usermachinename' reports two smbd processes belonging to the end user, the first (99% cpu), and the second. kill looped process does nothing, kill -9 takes it out and the user's machine returns to normal, they save their file and we save the day until ten minutes later when someone else calls us with the same problem. This is happening a few time per hour, usually with a handfull of the same users (about 6-7 users have issues). We've updated/re-installed the O/S (FreeBSD 6.0-RC1, after same problem persisted with 5.3-RELEASE and 5.4-RELEASE on amd64 hardware), re-compiled/installed nss_ldap, pam_ldap, and openldap_2.2.27 from their respective source-code using the FreeBSD ports collection. Re-poplated the ldap tree using our slap-cat'd export/backup, and re-compiled a fresh copy of samba-3.0.20b into prefix of /usr/samba (to isolate it from the O/S lib/etc/share directories). After spending the weekend updating the smbd.conf file to match our shares and previous configuration, smbpasswd -w 'ing, and a 'net set localsid' all seemed well. Then monday came by, and the end-users started calling again... frustrated and at a loss, I'm not sure what to do or try next? For clarity and in the hope that it may help, I'm attaching a copy of our smb.conf file, and I've also got log files (gzip'd/attached one) from the user's machine which have been having/reporting this problem as well as a copy of our smb.conf file attached. In addition, here's an excerpt from ldapsearch containing a user and a machine account: (Machine account) # wmpest01$, Machines, wmptl.net dn: uid=wmpest01$,ou=Machines,dc=wmptl,dc=net objectClass: top objectClass: inetOrgPerson objectClass: posixAccount objectClass: sambaSamAccount cn: wmpest01$ sn: wmpest01$ uid: wmpest01$ uidNumber: 3054 gidNumber: 553 homeDirectory: /dev/null loginShell: /bin/false description: Computer sambaSID: S-1-5-21-2818898263-1345796712-1011627658-7108 sambaPrimaryGroupSID: S-1-5-21-2818898263-1345796712-1011627658-553 displayName: wmpest01$ sambaPwdCanChange: 1128448805 sambaPwdMustChange: 9223372036854775807 sambaNTPassword: F1EF8A35766B9AC4B3FCEB608FD22106 sambaPwdLastSet: 1128448805 sambaAcctFlags: [W ] (user account) # dristovs, People, wmptl.net dn: uid=dristovs,ou=People,dc=wmptl,dc=net objectClass: posixAccount objectClass: shadowAccount objectClass: inetOrgPerson objectClass: sambaSamAccount cn: dristovs uid: dristovs uidNumber: 1039 gidNumber: 570 homeDirectory: /server/users/dristovs givenName: Drage sn: Ristovski shadowExpire: 22279 loginShell: /usr/local/bin/usershell gecos: Drage Ristovski description: Drage Ristovski shadowLastChange: 12755 userPassword:: e0NSWVBUfXprdXVuSmZLMEtYS3c= sambaNTPassword: D4B0C8B97E5EE236B8B15720A0EDE30E sambaLMPassword: B74D2C919D0D1441AAD3B435B51404EE sambaPwdLastSet: 1102110964 sambaSID: S-1-5-21-2818898263-1345796712-1011627658-3078 sambaPrimaryGroupSID: S-1-5-21-2818898263-1345796712-1011627658-2141 sambaAcctFlags: [UX ] displayName: drage sambaHomeDrive: U: sambaDomainName: WMP mail: [EMAIL PROTECTED] sambaPwdCanChange: 1072846819 sambaPwdMustChange: 1924923619 sambaHomePath: \\WMPTWO\dristovs sambaProfilePath: \\WMPTWO\PROFILES\dristovs Not sure what else to try, is it a FreeBSD, an OpenLDAP, or just a samba issue? I know it's not the hardware, we can sustain constant transfers via ftp without any packet loss or data degredation from the same machines having the problem. The problem apparently lies only in transfers made via smbd that are locking up and I can't understand nor figure out why. I've tried just about anything I could think of inside the smb.conf file, some of which you'll see in the attached config file. Any ideas, suggestions, comments, concerns, or requests for more info are most welcomed. -- Nathan Vidican [EMAIL PROTECTED] Windsor Match Plate Tool Ltd. http://www.wmptl.com/ # /usr/samba/lib/an end user.conf [global] log level = 10 # /usr/samba/lib/shares.conf [netlogon] comment = Network Logon Service path = /server/netlogon guest ok = yes read only = yes share modes = no write list = @wheel @Domain Admins [Profiles] path = /server/profiles read only = no create mask = 0600 directory mask = 0700 browseable = no guest ok = Yes profile acls = Yes csc policy = disable force user = %U valid users = %U @Domain Admins [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = yes printable = yes valid users = @wheel @Domain Admins @everyone write list = @everyone create mask = 0770 [public] comment =
Re: [Samba] roll-yer-own ldapadd operations for scipt options?
Greeting Craig, If you can (want) use Windows client for administration, Softerra ldapadministrator can do what you want, like customizing the creation of an object. This software are not free but not very expensive (Try the demo first). Otherwise phpLDAPAdmin are a great tool (but secure this php tools and don't put it public) . Robert On Tue, 2005-10-18 at 19:05 -0400, Eric A. Hall wrote: I'm currently using the suse ldapsmb utility for all the script operations, but I want to do some custom script work for creating user and machine accounts. For example, I want to manipulate the default object classes and directory placement for new machines--putting them into ou=Devices instead of ou=Users, and giving them the parent objectClasses of account and ipHost [for NIS and DHCP work]. I want to do similar kinds of stuff to new user accounts--giving them objectClass of person and inetOrgPerson and posixAccount all at once. So I need to have a script that will fill in some blanks in a template file and then call ldapadd (or something) that will import the completed template. Technically I could probably do all of that with the variables available in the smb.conf, except that ldapdd needs multi-line input when it is reading from stdin. Is that possible? If not, I'll have to create a template file, store it in a temp file, and do it that way. Anybody got anything done here that I can copy? I personally use webmin to create/edit accounts (LDAP Users Groups module + a few shell scripts) but I'm sure that LAM (LDAP Account Manager) can do what you want to do and of course. Included with most samba packaging is smbldap which will give you the framework where you can sort of do what you want. Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] High CPU load on smiod
Hi all, I'm running Samba 3.0.13 on Mandrake 10.2 (LE2005) and have mounted the shares on an NT4 server to rsync the files over to the Samba box. The only thing is that Linux sees the dual Xeons in the server as four CPUs and the first core on CPU1 hits 100% while the files are copying over. Every so often, CPU1, core 2 takes over (at 100%) for a short period and then core 1 goes back to 100%. Is this normal? When the CPU load hits 100% the mouse and keyboard become unresponsive and the whole plot turns clunky. I've also had to turn apic off with linux apic=off in Lilo. Cheers all, Jools -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] roll-yer-own ldapadd operations for scipt options?
On 10/18/2005 7:15 PM, Craig White wrote: On Tue, 2005-10-18 at 19:05 -0400, Eric A. Hall wrote: So I need to have a script that will fill in some blanks in a template samba packaging is smbldap which will give you the framework where you can sort of do what you want. I was hoping to avoid perl scripting, but it might make sense to just add the additional options to the existing ldapsmb tool. Maybe add options for something like --oc for parent objectClass hierarchy, and so forth. -- Eric A. Hallhttp://www.ehsco.com/ Internet Core Protocols http://www.oreilly.com/catalog/coreprot/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] hostname.mac file and some .tdb files not getting created
Hello All, I have a problem with my newly installed Samba server. (3.0.14a) Whenever a Windows client reboots and tries to connect to the printer (hosted on the Samba server), it hangs for a while and then responds after few minutes. After this it works fine throughout until the next reboot. Any clues as to why this problem occurs? It could be something with the fine tuning of the samba server. Can anyone help me with some inputs on this and also another issue which I had posted few days back that the files sessionid.tdb and connections.tdb are not getting created. My connection to the samba server gets through without any problem. I also dont have the hostname.mac file created too in the samba private folder. I am not sure if this is a real issue, or this feature is removed from 3.0.14a The SECURITY is set to server in the smb.conf and the password server is a NT Domain Controller. Thanks in advance!! Sapna -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] WINS 1c query, many responses: who is chosen?
Scenario (everything samba-3): - many subnets, each with a BDC - one PDC somewhere else - one WINS at that PDC server - windows using wins first, bcast next (node-type 8) When one workstation asks the wins server about the 1c netbios name type, the server will answer with the PDC and BDCs IP. What prevents the workstation from using a controller outside its subnet? Is this intelligence part of the windows workstation DC selection algorithm? To choose the closest one? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbd processes 99% cpu and end-user locks up
On Tue, Oct 18, 2005 at 04:28:44PM -0400, Nathan Vidican wrote: Still having a situation, in particular with Microsoft Office products (Excel, MS Word, etc), wherein a user locks up while saving a file. The scenario goes as follows: user opens up a file (excel document, word document, etc), user changes file, user hits save, user hangs... `top` reports an smbd belonging to user locked in some sort of loop causing 99% cpu utilization. net status sessions | grep 'usermachinename' reports two smbd processes belonging to the end user, the first (99% cpu), and the second. kill looped process does nothing, kill -9 takes it out and the user's machine returns to normal, they save their file and we save the day until ten minutes later when someone else calls us with the same problem. This is happening a few time per hour, usually with a handfull of the same users (about 6-7 users have issues). Ensure that smbd is compiled with -g, and when the smbd is in this state attach to it with gdb and type bt to get a backtrace. Please post the results of this to the list. Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.21pre1 Available for Download
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 == I feel like I'm waiting on some event before I grow up. Please wake me up so I don't miss it. -- anonymous == Release Announcements = This is a preview release of the Samba 3.0.21 code base and is provided for testing only. This release is *not* intended for production servers. There has been a substantial amount of development since the 3.0.20 stable release series. We would like to ask the Samba community for help in testing these changes as we work towards the next official, production Samba 3.0 release. Common bugs fixed in 3.0.21pre1 include: o Missing groups in a user's token when logging in via kerberos o Incompatibilities with newer MS Windows hotfixes and embedded OS platforms New features introduced in Samba 3.0.21pre1 include: o Complete NTLMv2 support by consolidating authentication mechanism used at the CIFS and RPC layers. o The capability to manage Unix services using the Win32 Service Control API. o The capability to view external Unix log files via the Microsoft Event Viewer. o New libmsrpc share library for application developers. o Rewrite of CIFS oplock implementation. smb.conf changes Parameter Name Action -- -- eventlog list New iprint server New map read only New rename user script New svcctl listRenamed from 'enable svcctl' Download Details The uncompressed tarball and patch files have been signed using GnuPG (ID F17F9772). The source code can be downloaded from: http://download.samba.org/samba/ftp/ The release notes are available online at: http://www.samba.org/samba/ftp/pre/WHATSNEW-3-0-20pre1.txt Binary packages are available at http://download.samba.org/samba/ftp/Binary_Packages/ Our Code, Our Bugs, Our Responsibility. (https://bugzilla.samba.org/) --Enjoy The Samba Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDVWM0IR7qMdg1EfYRAnhoAKCuWtnHAu7NKTB9n+KImSMVFPuNGwCfc957 xfM/EFxVmrp4yW/o08BHCxk= =6K+p -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] lots of temp files in /tmp directory
I am running samba 3.0.20a in my FC4 linux machine, its running for two days. In /tmp direcotry I see lots of temporary files. Is it safe to remove these files? also I would like to why its creating these many files? SMBclose.8.req SMBreadX.58.resp SMBsesssetupX.61.req SMBtrans2.3.resp SMBwriteX.60.req SMBclose.8.resp SMBreadX.59.req SMBsesssetupX.61.resp SMBtrans.24.req SMBwriteX.60.resp SMBclose.9.req SMBreadX.59.resp SMBsesssetupX.62.req SMBtrans2.4.req SMBwriteX.61.req SMBclose.9.resp SMBreadX.5.reqSMBsesssetupX.62.resp SMBtrans.24.resp SMBwriteX.61.resp SMBnegprot.10.req SMBreadX.5.resp SMBsesssetupX.63.req SMBtrans2.4.resp SMBwriteX.62.req SMBnegprot.10.resp SMBreadX.60.req SMBsesssetupX.63.resp SMBtrans2.5.req SMBwriteX.62.resp SMBnegprot.11.req SMBreadX.60.resp SMBsesssetupX.64.req SMBtrans2.5.resp SMBwriteX.63.req SMBnegprot.11.resp SMBreadX.61.req SMBsesssetupX.64.resp SMBtrans2.6.req SMBwriteX.63.resp SMBnegprot.1.reqSMBreadX.61.resp SMBsesssetupX.65.req SMBtrans2.6.resp SMBwriteX.64.req SMBnegprot.1.resp SMBreadX.62.req SMBsesssetupX.65.resp SMBtrans2.7.req SMBwriteX.64.resp Thanks -- Software Groups (SFG) http://www.sfgroups.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain Admins can't modify ldapsam entries
On 10/18/2005 9:26 AM, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Günter Gersdorf wrote: | Domain Admins are not allowed to modify the ldapsam | database via usrmgr. | lib/smbldap.c: smbldap_open: cannot access LDAP when not root.. | | Is this by design? Yes. It is by design. You have to assign the SeAddUsersPrivilege to the Domain Admins group. Where are the privs stored nowadays? I found lots of references to privilege[s].tdb but nothing like that seems to exist anywhere. -- Eric A. Hallhttp://www.ehsco.com/ Internet Core Protocols http://www.oreilly.com/catalog/coreprot/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] smbd/oplock_linux - Failed to setup RT_SIGNAL_LEASE
Getting this all over my logs for all my client PCs. All on Windows XP Pro Clients running on samba 3.0.20a PDC.Kernel 2.4.22. [2005/10/19 00:03:48, 0] smbd/oplock_linux.c:linux_init_kernel_oplocks(295) Failed to setup RT_SIGNAL_LEASE handler Not sure if this is a kernel or samba issue? Also clients are complaining about random drops of there word documents etcI'm not sure but may be attributed to this? [2005/10/18 09:03:56, 0] lib/util_sock.c:read_data(526) read_data: read failure for 4 bytes to client 192.168.2.22. Error = Connection timed out Anyone know what this one means? Thanks so much in advance!! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: samba-3.0.10-1.4E (RHEL4): logon failures with 2003 server pdc
Check the DNS entries.. in case the AD is configured with the DNS, enter the correct entries for the linux boxes and check... regards On 10/18/05, Ville Herva [EMAIL PROTECTED] wrote: On Tue, Oct 18, 2005 at 04:43:12PM +0300, you [Ville Herva] wrote: I recently set up a new RHEL4 server with samba-3.0.10 in a Windows 2003 server PDC domain. I can log on as one user from different workstations on to the new samba server. With several other users, I get this error: Oct 18 16:41:34 samba-server smbd[2502]: krb5_rd_req(CIFS/[EMAIL PROTECTED]) failed: Wrong principal in request Oct 18 16:41:34 samba-server smbd[2502]: [2005/10/18 16:41:34, 0] libads/kerberos_verify.c:ads_keytab_verify_ticket(113) [2005/10/18 16:41:42, 0] libads/kerberos_verify.c:ads_keytab_verify_ticket(113) krb5_rd_req(CIFS/[EMAIL PROTECTED]) failed: Wrong principal in request The users are able to log on to other servers just fine and should have all the needed permissions to log on to the share. Can anyone give me some clue what that error means? Some relevant lines from smb.conf: workgroup = MY password server = pdc-server.my.dom realm = MY.DOM security = ADS client schannel = no use spnego = Yes client use spnego = Yes use kerberos keytab = Yes encrypt passwords = yes wins server = pdc-server.my.dom ip I appears that it's the workstation I try to connect from that is significant, not the username. Some workstations work, some don't - with the same username. The ones that work are not members of the domain, the ones that don't are. I also have netbios name = SAMBASERVER netbios aliases = OTHERNAME in smb.conf. What's even more curious is that on I can log on from the workstations that don't work with \\SAMBASERVER\SHARE using \\OTHERNAME\SHARE. Even browsing \\SAMBASERVER doesn't work, but \\OTHERNAME does. And on certain, non-domain, workstations both work. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain Admins can't modify ldapsam entries
On Wed, 2005-10-19 at 00:05 -0400, Eric A. Hall wrote: On 10/18/2005 9:26 AM, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Günter Gersdorf wrote: | Domain Admins are not allowed to modify the ldapsam | database via usrmgr. | lib/smbldap.c: smbldap_open: cannot access LDAP when not root.. | | Is this by design? Yes. It is by design. You have to assign the SeAddUsersPrivilege to the Domain Admins group. Where are the privs stored nowadays? I found lots of references to privilege[s].tdb but nothing like that seems to exist anywhere. on my systems, tdb's are stored in /var/cache/samba (RHEL) if slocate is current, you should be able to find it easily enough... locate account_policy.tdb if slocate is not current, execute 'updatedb' first The SeAddUsersPrivilege was added somewhere around 3.0.14 - depends upon which version of samba you are using as to whether command is available. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain Admins can't modify ldapsam entries
On Tuesday 18 October 2005 22:05, Eric A. Hall wrote: On 10/18/2005 9:26 AM, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Günter Gersdorf wrote: | Domain Admins are not allowed to modify the ldapsam | database via usrmgr. | lib/smbldap.c: smbldap_open: cannot access LDAP when not root.. | | Is this by design? Yes. It is by design. You have to assign the SeAddUsersPrivilege to the Domain Admins group. Where are the privs stored nowadays? I found lots of references to privilege[s].tdb but nothing like that seems to exist anywhere. account_policy.tdb - John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO Reference Guide, 2 Ed., ISBN: 0131882228 Samba-3 by Example, 2 Ed., ISBN: 0131882221X Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Phantom competing domain master browser
Snip Joe Cipale wrote: Did you check your /etc/network/interfaces file? ALso, do a /sbin/ifconfig -a. Look for the 'phantom IP address'. My guess is one of those two places will find it. Once you do, as su, execute an ifdown ethx. From the services app, you should be able to list what ethernet ports are 'active' and disable as needed. Good luck! Joe I checked both. I deleted the old interface file, and the ifconfig only reports eth0, lo and sit0, and the IP addresses are all correct. The nmbd.log file shows that it's trying to become domain master browser on workgroup BARDACIOUS, subnet UNICAST_SUBNET. And that's where it's finding the old IP address and existing master browser. It repeats the process every two or three minutes. I'm not sure where to find the unicast subnet. I've been all over dhcpd.conf to see if there's something there but I haven't found it. Dave -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Phantom competing domain master browser
On Tue, 2005-10-18 at 22:15 -0700, David Maier wrote: Snip Joe Cipale wrote: Did you check your /etc/network/interfaces file? ALso, do a /sbin/ifconfig -a. Look for the 'phantom IP address'. My guess is one of those two places will find it. Once you do, as su, execute an ifdown ethx. From the services app, you should be able to list what ethernet ports are 'active' and disable as needed. Good luck! Joe I checked both. I deleted the old interface file, and the ifconfig only reports eth0, lo and sit0, and the IP addresses are all correct. The nmbd.log file shows that it's trying to become domain master browser on workgroup BARDACIOUS, subnet UNICAST_SUBNET. And that's where it's finding the old IP address and existing master browser. It repeats the process every two or three minutes. I'm not sure where to find the unicast subnet. I've been all over dhcpd.conf to see if there's something there but I haven't found it. try shutting down samba and deleting wins.dat file and then start samba again and see if that helps Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Repost: ads_connect: No such file or directory
Hi all,
this seem to bee a kerberos problem. Keep in mind, that the realm at ADS
isn't the server but the Domain. Use kapital letters for the name. Don't use
WebMin for configuration it's adding characters to the config file. Try this
example krb5.conf:
---
[libdefaults]
default_realm = MOUSE.LOCAL
[realms]
MOUSE.LOCAL = {
default_domain = MOUSE.LOCAL
kdc = 192.168.1.1
}
[domain_realm]
MOUSE.LOCAL = MOUSE.LOCAL
-
then give the command:
~# kinit Administrator
Password
You should get a correct ticket for 1 day
If not, then varey:
~# kinit Administrator@realm of your site
In smb.conf you've to set i.e:
workgroup = MOUSE
realm = MOUSE.LOCAL
When you got the ticket you can try to join the ADS:
net ADS join -I server ip -U Administrator%passwd
This should do it so far.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Re: svn commit: samba r11105 - in branches/SAMBA_4_0/source: librpc/idl librpc/ndr pidl/lib/Parse/Pidl pidl/lib/Parse/Pidl/Samba/NDR
Jelmer, The problem is not so much in that pidl can't support simple null-terminated utf8 strings, but more in the fact that it is not possible to use it in other IDL compilers (such as MIDL or WIDL). Please let me know which of the two you prefer, and I'll fix it. I'd prefer to keep the old format. We have to support strings like that anyway for things like nbt.idl where the on-wire string format is dictated by an external standard. I put xattr.idl in the same category - its written as IDL to allow us to reuse the nice IDL infrastructure we have, not because we want it to work with other IDL compilers. I suspect if/when wine supports our xattr format they will use a hand-marshaller not widl, as their IDL/NDR infrastructure is at the wrong level to use it for filesystem extensions (or at least thats the impression I got at the wine conference earlier this year). Cheers, Tridge
Re: svn commit: samba r11105 - in branches/SAMBA_4_0/source: librpc/idl librpc/ndr pidl/lib/Parse/Pidl pidl/lib/Parse/Pidl/Samba/NDR
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Tridge, [EMAIL PROTECTED] wrote: The problem is not so much in that pidl can't support simple null-terminated utf8 strings, but more in the fact that it is not possible to use it in other IDL compilers (such as MIDL or WIDL). Please let me know which of the two you prefer, and I'll fix it. I'd prefer to keep the old format. We have to support strings like that anyway for things like nbt.idl where the on-wire string format is dictated by an external standard. I put xattr.idl in the same category - its written as IDL to allow us to reuse the nice IDL infrastructure we have, not because we want it to work with other IDL compilers. Ok - I'll change it back. I suspect if/when wine supports our xattr format they will use a hand-marshaller not widl, as their IDL/NDR infrastructure is at the wrong level to use it for filesystem extensions (or at least thats the impression I got at the wine conference earlier this year). Makes sense. Cheers, Jelmer -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (GNU/Linux) iD8DBQFDVMePPa9Uoh7vUnYRAtIbAJ9F1nbCG40FqR/m4Df45SkOEmRImwCff9Gu e/11VRyiTMzo+SO6T23u8cU= =EpL7 -END PGP SIGNATURE-
svn commit: samba r11140 - in branches/SAMBA_3_0_RELEASE: .
Author: jerry Date: 2005-10-18 13:52:46 + (Tue, 18 Oct 2005) New Revision: 11140 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11140 Log: adding notes about some parameter changes Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt Changeset: Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt === --- branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2005-10-18 05:25:27 UTC (rev 11139) +++ branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2005-10-18 13:52:46 UTC (rev 11140) @@ -1,4 +1,3 @@ - == Release Notes for Samba 3.0.21pre1 Oct 18, 2005 @@ -39,7 +38,11 @@ Parameter Name Action -- -- -map readonly New +eventlog list New +iprint server New +map read only New +rename user script New +svcctl listRenamed from 'enable svcctl' Changes since 3.0.20[a-b]
svn commit: samba-docs r839 - in trunk/smbdotconf/protocol: .
Author: jerry Date: 2005-10-18 14:12:58 + (Tue, 18 Oct 2005) New Revision: 839 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=839 Log: adding dpcs for 'eventlog list' and 'svcctl list' Added: trunk/smbdotconf/protocol/eventloglist.xml trunk/smbdotconf/protocol/svcctllist.xml Changeset: Added: trunk/smbdotconf/protocol/eventloglist.xml === --- trunk/smbdotconf/protocol/eventloglist.xml 2005-10-18 03:43:37 UTC (rev 838) +++ trunk/smbdotconf/protocol/eventloglist.xml 2005-10-18 14:12:58 UTC (rev 839) @@ -0,0 +1,22 @@ +samba:parameter name=eventlog list +type=string + context=G + xmlns:samba=http://www.samba.org/samba/DTD/samba-doc; +description +paraThis option defines a list of log names that Samba will +report to the Microsoft EventViewer utility. The listed +eventlogs will be associated with tdb file on disk in the +filenamevariable$(libdir)/variable/eventlog/filename. +/para + +para +The administrator must use an external process to parse the normal +Unix logs such as filename/var/log/messages/filename +and write then entries to the eventlog tdb files. Refer to the +eventlogadm(8) utility for how to write eventlog entries. +/para +/description + +value type=default/ +value type=exampleSecurity Application Syslog Apache/value +/samba:parameter Added: trunk/smbdotconf/protocol/svcctllist.xml === --- trunk/smbdotconf/protocol/svcctllist.xml2005-10-18 03:43:37 UTC (rev 838) +++ trunk/smbdotconf/protocol/svcctllist.xml2005-10-18 14:12:58 UTC (rev 839) @@ -0,0 +1,22 @@ +samba:parameter name=svcctl list +type=string + context=G + xmlns:samba=http://www.samba.org/samba/DTD/samba-doc; +description +paraThis option defines a list of init scripts that smbd +will use for starting and stopping Unix services via the Win32 +ServiceControl API. This allows Windows administrators to +utilize the MS Management Console plug-ins to manage a +Unix server running Samba./para + +paraThe administrator must create a directory +name filenamesvcctl/filename in Samba's $(libdir) +and create symbolic links to the init scripts in +filename/etc/init.d//filename. The name of the links +must match the names given as part of the parametersvcctl list/parameter. +/para +/description + +value type=default/ +value type=examplecups postfix portmap httpd/value +/samba:parameter
svn commit: samba r11143 - in branches/SAMBA_3_0_RELEASE/examples/libsmbclient: .
Author: jerry Date: 2005-10-18 14:42:38 + (Tue, 18 Oct 2005) New Revision: 11143 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11143 Log: addnig derrell's test code changes Added: branches/SAMBA_3_0_RELEASE/examples/libsmbclient/testread.c Modified: branches/SAMBA_3_0_RELEASE/examples/libsmbclient/Makefile Changeset: Modified: branches/SAMBA_3_0_RELEASE/examples/libsmbclient/Makefile === --- branches/SAMBA_3_0_RELEASE/examples/libsmbclient/Makefile 2005-10-18 14:18:58 UTC (rev 11142) +++ branches/SAMBA_3_0_RELEASE/examples/libsmbclient/Makefile 2005-10-18 14:42:38 UTC (rev 11143) @@ -17,7 +17,8 @@ testbrowse \ teststat \ testchmod \ - testutime + testutime \ + testread all: $(TESTS) smbsh @@ -49,6 +50,10 @@ @echo Linking testutime @$(CC) $(CFLAGS) $(LDFLAGS) -o $@ /usr/local/samba/lib/libsmbclient.so -lpopt $ +testread: testread.o + @echo Linking testread + @$(CC) $(CFLAGS) $(LDFLAGS) -o $@ /usr/local/samba/lib/libsmbclient.so -lpopt $ + smbsh: make -C smbwrapper Copied: branches/SAMBA_3_0_RELEASE/examples/libsmbclient/testread.c (from rev 11142, branches/SAMBA_3_0/examples/libsmbclient/testread.c)
svn commit: samba r11144 - in branches/SAMBA_4_0/source/torture/nbt: .
Author: metze
Date: 2005-10-18 14:48:12 + (Tue, 18 Oct 2005)
New Revision: 11144
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11144
Log:
- add special group vs. normal group section
metze
Modified:
branches/SAMBA_4_0/source/torture/nbt/winsreplication.c
Changeset:
Modified: branches/SAMBA_4_0/source/torture/nbt/winsreplication.c
===
--- branches/SAMBA_4_0/source/torture/nbt/winsreplication.c 2005-10-18
14:42:38 UTC (rev 11143)
+++ branches/SAMBA_4_0/source/torture/nbt/winsreplication.c 2005-10-18
14:48:12 UTC (rev 11144)
@@ -2569,7 +2569,184 @@
}
},
+/*
+ * special groups vs normal group section,
+ */
/*
+* sgroup,active vs. group,active
+* = should NOT be replaced
+*/
+ {
+ .line = __location__,
+ .name = _NBT_NAME(_DIFF_OWNER, 0x00, NULL),
+ .r1 = {
+ .owner = ctx-a,
+ .type = WREPL_TYPE_SGROUP,
+ .state = WREPL_STATE_ACTIVE,
+ .node = WREPL_NODE_B,
+ .is_static = False,
+ .num_ips= ARRAY_SIZE(addresses_A_1),
+ .ips= addresses_A_1,
+ .apply_expected = True
+ },
+ .r2 = {
+ .owner = ctx-b,
+ .type = WREPL_TYPE_GROUP,
+ .state = WREPL_STATE_ACTIVE,
+ .node = WREPL_NODE_B,
+ .is_static = False,
+ .num_ips= ARRAY_SIZE(addresses_A_1),
+ .ips= addresses_A_1,
+ .apply_expected = False
+ }
+ },
+
+ /*
+* sgroup,active vs. group,tombstone
+* = should NOT be replaced
+*/
+ {
+ .line = __location__,
+ .name = _NBT_NAME(_DIFF_OWNER, 0x00, NULL),
+ .r1 = {
+ .owner = ctx-a,
+ .type = WREPL_TYPE_SGROUP,
+ .state = WREPL_STATE_ACTIVE,
+ .node = WREPL_NODE_B,
+ .is_static = False,
+ .num_ips= ARRAY_SIZE(addresses_A_1),
+ .ips= addresses_A_1,
+ .apply_expected = True
+ },
+ .r2 = {
+ .owner = ctx-b,
+ .type = WREPL_TYPE_GROUP,
+ .state = WREPL_STATE_TOMBSTONE,
+ .node = WREPL_NODE_B,
+ .is_static = False,
+ .num_ips= ARRAY_SIZE(addresses_A_1),
+ .ips= addresses_A_1,
+ .apply_expected = False
+ }
+ },
+
+ /*
+* sgroup,released vs. group,active
+* = should be replaced
+*/
+ {
+ .line = __location__,
+ .name = _NBT_NAME(_DIFF_OWNER, 0x00, NULL),
+ .r1 = {
+ .owner = ctx-a,
+ .type = WREPL_TYPE_SGROUP,
+ .state = WREPL_STATE_RELEASED,
+ .node = WREPL_NODE_B,
+ .is_static = False,
+ .num_ips= ARRAY_SIZE(addresses_A_1),
+ .ips= addresses_A_1,
+ .apply_expected = False
+ },
+ .r2 = {
+ .owner = ctx-b,
+ .type = WREPL_TYPE_GROUP,
+ .state = WREPL_STATE_ACTIVE,
+ .node = WREPL_NODE_B,
+ .is_static = False,
+ .num_ips= ARRAY_SIZE(addresses_B_1),
+ .ips= addresses_B_1,
+ .apply_expected = True
+ }
+ },
+
+ /*
+* sgroup,released vs. group,tombstone
+* = should be replaced
+*/
+ {
+ .line = __location__,
+ .name = _NBT_NAME(_DIFF_OWNER, 0x00, NULL),
+ .r1 = {
+ .owner = ctx-b,
+ .type = WREPL_TYPE_SGROUP,
+ .state = WREPL_STATE_RELEASED,
+ .node = WREPL_NODE_B,
+ .is_static = False,
+ .num_ips=
svn commit: samba r11145 - in branches/SAMBA_3_0_RELEASE: .
Author: jerry
Date: 2005-10-18 14:54:56 + (Tue, 18 Oct 2005)
New Revision: 11145
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11145
Log:
updating MAINTAINERS file
Modified:
branches/SAMBA_3_0_RELEASE/MAINTAINERS
Changeset:
Modified: branches/SAMBA_3_0_RELEASE/MAINTAINERS
===
--- branches/SAMBA_3_0_RELEASE/MAINTAINERS 2005-10-18 14:48:12 UTC (rev
11144)
+++ branches/SAMBA_3_0_RELEASE/MAINTAINERS 2005-10-18 14:54:56 UTC (rev
11145)
@@ -21,10 +21,19 @@
-
documentation John Terpstra [EMAIL PROTECTED]
+
libmsrpc Chris Nichols [EMAIL PROTECTED]
+
libsmbclient Derrell Lipman [EMAIL PROTECTED]
-pdb_mysql Jelmer Vernooij [EMAIL PROTECTED]
+
+pdb_*sql [EMAIL PROTECTED]
+ Peter Rindfuss: pdb_mysql
+ Darrell McGuire: pdb_mysql
+ Ulrich Meis: pdb_pgsql
+ Filip Jirsák: pdb_pgsql
+
printing Gerald (Jerry) Carter [EMAIL PROTECTED]
+
samba-vscanRainer Link [EMAIL PROTECTED]
svn commit: samba r11146 - in branches/SAMBA_4_0/source/torture/nbt: .
Author: metze
Date: 2005-10-18 14:58:51 + (Tue, 18 Oct 2005)
New Revision: 11146
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11146
Log:
make sure we get the expected amount of addresses
metze
Modified:
branches/SAMBA_4_0/source/torture/nbt/winsreplication.c
Changeset:
Modified: branches/SAMBA_4_0/source/torture/nbt/winsreplication.c
===
--- branches/SAMBA_4_0/source/torture/nbt/winsreplication.c 2005-10-18
14:54:56 UTC (rev 11145)
+++ branches/SAMBA_4_0/source/torture/nbt/winsreplication.c 2005-10-18
14:58:51 UTC (rev 11146)
@@ -529,6 +529,15 @@
CHECK_VALUE_STRING(names[0].name.scope, name-name-scope);
CHECK_VALUE(flags, name-flags);
CHECK_VALUE_UINT64(names[0].version_id, name-id);
+
+ if (flags 2) {
+ CHECK_VALUE(names[0].num_addresses,
+ name-addresses.addresses.num_ips);
+ } else {
+ CHECK_VALUE(names[0].num_addresses, 1);
+ CHECK_VALUE_STRING(names[0].addresses[0].address,
+ name-addresses.ip);
+ }
}
done:
talloc_free(pull_names.out.names);
svn commit: samba r11147 - in branches/SAMBA_3_0/packaging/Fedora: .
Author: jerry
Date: 2005-10-18 15:50:33 + (Tue, 18 Oct 2005)
New Revision: 11147
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11147
Log:
Fedora packaging fixes for libmsrpc
Modified:
branches/SAMBA_3_0/packaging/Fedora/samba.spec.tmpl
Changeset:
Modified: branches/SAMBA_3_0/packaging/Fedora/samba.spec.tmpl
===
--- branches/SAMBA_3_0/packaging/Fedora/samba.spec.tmpl 2005-10-18 14:58:51 UTC
(rev 11146)
+++ branches/SAMBA_3_0/packaging/Fedora/samba.spec.tmpl 2005-10-18 15:50:33 UTC
(rev 11147)
@@ -366,11 +366,15 @@
/%{_lib}/libnss_wins.so*
/%{_lib}/libnss_winbind.so*
/%{_lib}/security/pam_winbind.so
+%{_includedir}/libsmbclient.h
%{_libdir}/libsmbclient.a
%{_libdir}/libsmbclient.so
+%{_includedir}/libmsrpc.h
+%{_libdir}/libmsrpc.a
+%{_libdir}/libmsrpc.so
%{_libdir}/samba/charset/CP*.so
%{_libdir}/samba/idmap/idmap*.so
-%{_includedir}/libsmbclient.h
+%{_libdir}/samba/auth/script.so
%{_bindir}/testparm
%{_bindir}/smbpasswd
# %{_bindir}/make_printerdef
svn commit: samba r11148 - branches/SAMBA_3_0_RELEASE/packaging/Fedora trunk/packaging/Fedora
Author: jerry
Date: 2005-10-18 15:54:40 + (Tue, 18 Oct 2005)
New Revision: 11148
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11148
Log:
update from 3.0.21pre1 Fedora packaging fixes
Modified:
branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl
trunk/packaging/Fedora/samba.spec.tmpl
Changeset:
Modified: branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl
===
--- branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl 2005-10-18
15:50:33 UTC (rev 11147)
+++ branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl 2005-10-18
15:54:40 UTC (rev 11148)
@@ -366,11 +366,15 @@
/%{_lib}/libnss_wins.so*
/%{_lib}/libnss_winbind.so*
/%{_lib}/security/pam_winbind.so
+%{_includedir}/libsmbclient.h
%{_libdir}/libsmbclient.a
%{_libdir}/libsmbclient.so
+%{_includedir}/libmsrpc.h
+%{_libdir}/libmsrpc.a
+%{_libdir}/libmsrpc.so
%{_libdir}/samba/charset/CP*.so
%{_libdir}/samba/idmap/idmap*.so
-%{_includedir}/libsmbclient.h
+%{_libdir}/samba/auth/script.so
%{_bindir}/testparm
%{_bindir}/smbpasswd
# %{_bindir}/make_printerdef
Modified: trunk/packaging/Fedora/samba.spec.tmpl
===
--- trunk/packaging/Fedora/samba.spec.tmpl 2005-10-18 15:50:33 UTC (rev
11147)
+++ trunk/packaging/Fedora/samba.spec.tmpl 2005-10-18 15:54:40 UTC (rev
11148)
@@ -366,11 +366,15 @@
/%{_lib}/libnss_wins.so*
/%{_lib}/libnss_winbind.so*
/%{_lib}/security/pam_winbind.so
+%{_includedir}/libsmbclient.h
%{_libdir}/libsmbclient.a
%{_libdir}/libsmbclient.so
+%{_includedir}/libmsrpc.h
+%{_libdir}/libmsrpc.a
+%{_libdir}/libmsrpc.so
%{_libdir}/samba/charset/CP*.so
%{_libdir}/samba/idmap/idmap*.so
-%{_includedir}/libsmbclient.h
+%{_libdir}/samba/auth/script.so
%{_bindir}/testparm
%{_bindir}/smbpasswd
# %{_bindir}/make_printerdef
svn commit: samba r11149 - in branches/SAMBA_3_0_RELEASE: . source
Author: jerry Date: 2005-10-18 16:01:28 + (Tue, 18 Oct 2005) New Revision: 11149 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11149 Log: fix typo in release notes Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt branches/SAMBA_3_0_RELEASE/source/configure.in Changeset: Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt === --- branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2005-10-18 15:54:40 UTC (rev 11148) +++ branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2005-10-18 16:01:28 UTC (rev 11149) @@ -24,7 +24,7 @@ o The capability to manage Unix services using the Win32 Service Control API. o The capability to view external Unix log files via the - Microsoft Event Viewer. +Microsoft Event Viewer. o New libmsrpc share library for application developers. o Rewrite of CIFS oplock implementation. Modified: branches/SAMBA_3_0_RELEASE/source/configure.in === --- branches/SAMBA_3_0_RELEASE/source/configure.in 2005-10-18 15:54:40 UTC (rev 11148) +++ branches/SAMBA_3_0_RELEASE/source/configure.in 2005-10-18 16:01:28 UTC (rev 11149) @@ -4311,6 +4311,7 @@ *solaris*) AC_MSG_RESULT(Using solaris ACLs) AC_DEFINE(HAVE_SOLARIS_ACLS,1,[Whether solaris ACLs are available]) + LIBS=$LIBS -lsec ;; *hpux*) AC_MSG_RESULT(Using HPUX ACLs)
svn commit: samba r11150 - branches/SAMBA_3_0/source trunk/source
Author: jerry Date: 2005-10-18 16:05:34 + (Tue, 18 Oct 2005) New Revision: 11150 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11150 Log: fix solaris acl linking problem on sunos5.9; not quite sure how this got broken Modified: branches/SAMBA_3_0/source/configure.in trunk/source/configure.in Changeset: Modified: branches/SAMBA_3_0/source/configure.in === --- branches/SAMBA_3_0/source/configure.in 2005-10-18 16:01:28 UTC (rev 11149) +++ branches/SAMBA_3_0/source/configure.in 2005-10-18 16:05:34 UTC (rev 11150) @@ -4311,6 +4311,7 @@ *solaris*) AC_MSG_RESULT(Using solaris ACLs) AC_DEFINE(HAVE_SOLARIS_ACLS,1,[Whether solaris ACLs are available]) + LIBS=$LIBS -lsec ;; *hpux*) AC_MSG_RESULT(Using HPUX ACLs) Modified: trunk/source/configure.in === --- trunk/source/configure.in 2005-10-18 16:01:28 UTC (rev 11149) +++ trunk/source/configure.in 2005-10-18 16:05:34 UTC (rev 11150) @@ -4311,6 +4311,7 @@ *solaris*) AC_MSG_RESULT(Using solaris ACLs) AC_DEFINE(HAVE_SOLARIS_ACLS,1,[Whether solaris ACLs are available]) + LIBS=$LIBS -lsec ;; *hpux*) AC_MSG_RESULT(Using HPUX ACLs)
svn commit: samba r11151 - in tags: .
Author: jerry Date: 2005-10-18 16:06:44 + (Tue, 18 Oct 2005) New Revision: 11151 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11151 Log: tagging 3.0.21pre1 Added: tags/release-3-0-21pre1/ Changeset: Copied: tags/release-3-0-21pre1 (from rev 11150, branches/SAMBA_3_0_RELEASE)
svn commit: samba-docs r840 - in tags: .
Author: jerry Date: 2005-10-18 16:06:46 + (Tue, 18 Oct 2005) New Revision: 840 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=840 Log: tagging 3.0.21pre1 Added: tags/release-3-0-21pre1/ Changeset: Copied: tags/release-3-0-21pre1 (from rev 839, trunk)
svn commit: samba r11152 - branches/SAMBA_3_0/packaging/RedHat branches/SAMBA_3_0/source/script branches/SAMBA_3_0_RELEASE/packaging/RedHat branches/SAMBA_3_0_RELEASE/source/script trunk/packaging/Red
Author: jerry
Date: 2005-10-18 17:20:50 + (Tue, 18 Oct 2005)
New Revision: 11152
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11152
Log:
fix some regressions caused by the trunk-3.0 merge when install docs with SWAT
Modified:
branches/SAMBA_3_0/packaging/RedHat/samba.spec.tmpl
branches/SAMBA_3_0/source/script/installswat.sh
branches/SAMBA_3_0_RELEASE/packaging/RedHat/samba.spec.tmpl
branches/SAMBA_3_0_RELEASE/source/script/installswat.sh
trunk/packaging/RedHat/samba.spec.tmpl
trunk/source/script/installswat.sh
Changeset:
Modified: branches/SAMBA_3_0/packaging/RedHat/samba.spec.tmpl
===
--- branches/SAMBA_3_0/packaging/RedHat/samba.spec.tmpl 2005-10-18 16:06:44 UTC
(rev 11151)
+++ branches/SAMBA_3_0/packaging/RedHat/samba.spec.tmpl 2005-10-18 17:20:50 UTC
(rev 11152)
@@ -114,7 +114,7 @@
mkdir -p $RPM_BUILD_ROOT/etc/{logrotate.d,pam.d,samba}
mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d
mkdir -p $RPM_BUILD_ROOT%{prefix}/{bin,sbin}
-mkdir -p $RPM_BUILD_ROOT%{prefix}/share/swat/{images,help,include,using_samba}
+mkdir -p $RPM_BUILD_ROOT%{prefix}/share/swat/{help,include,using_samba}
mkdir -p $RPM_BUILD_ROOT%{prefix}/share/swat/using_samba/{figs,gifs}
mkdir -p $RPM_BUILD_ROOTMANDIR_MACRO
mkdir -p $RPM_BUILD_ROOT/var/lib/samba
@@ -445,10 +445,8 @@
%{prefix}/lib/libsmbclient.a
%{prefix}/lib/libsmbclient.so
%{prefix}/share/swat/help/*
-%{prefix}/share/swat/images/*
%{prefix}/share/swat/include/*.html
%{prefix}/share/swat/lang/*/help/*
-%{prefix}/share/swat/lang/*/images/*
%{prefix}/share/swat/using_samba/*
%config(noreplace) /etc/samba/lmhosts
%config(noreplace) /etc/samba/smb.conf
Modified: branches/SAMBA_3_0/source/script/installswat.sh
===
--- branches/SAMBA_3_0/source/script/installswat.sh 2005-10-18 16:06:44 UTC
(rev 11151)
+++ branches/SAMBA_3_0/source/script/installswat.sh 2005-10-18 17:20:50 UTC
(rev 11152)
@@ -87,7 +87,7 @@
if [ -d $SRCDIR../docs/htmldocs/ ]; then
-for dir in htmldocs/ htmldocs/Samba-HOWTO-Collection htmldocs/Samba-Guide
htmldocs/Samba-Developers-Guide
+for dir in htmldocs/manpages htmldocs/Samba3-ByExample
htmldocs/Samba3-Developers-Guide htmldocs/Samba3-HOWTO
do
if [ ! -d $SRCDIR../docs/$dir ]; then
Modified: branches/SAMBA_3_0_RELEASE/packaging/RedHat/samba.spec.tmpl
===
--- branches/SAMBA_3_0_RELEASE/packaging/RedHat/samba.spec.tmpl 2005-10-18
16:06:44 UTC (rev 11151)
+++ branches/SAMBA_3_0_RELEASE/packaging/RedHat/samba.spec.tmpl 2005-10-18
17:20:50 UTC (rev 11152)
@@ -114,7 +114,7 @@
mkdir -p $RPM_BUILD_ROOT/etc/{logrotate.d,pam.d,samba}
mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d
mkdir -p $RPM_BUILD_ROOT%{prefix}/{bin,sbin}
-mkdir -p $RPM_BUILD_ROOT%{prefix}/share/swat/{images,help,include,using_samba}
+mkdir -p $RPM_BUILD_ROOT%{prefix}/share/swat/{help,include,using_samba}
mkdir -p $RPM_BUILD_ROOT%{prefix}/share/swat/using_samba/{figs,gifs}
mkdir -p $RPM_BUILD_ROOTMANDIR_MACRO
mkdir -p $RPM_BUILD_ROOT/var/lib/samba
@@ -445,10 +445,8 @@
%{prefix}/lib/libsmbclient.a
%{prefix}/lib/libsmbclient.so
%{prefix}/share/swat/help/*
-%{prefix}/share/swat/images/*
%{prefix}/share/swat/include/*.html
%{prefix}/share/swat/lang/*/help/*
-%{prefix}/share/swat/lang/*/images/*
%{prefix}/share/swat/using_samba/*
%config(noreplace) /etc/samba/lmhosts
%config(noreplace) /etc/samba/smb.conf
Modified: branches/SAMBA_3_0_RELEASE/source/script/installswat.sh
===
--- branches/SAMBA_3_0_RELEASE/source/script/installswat.sh 2005-10-18
16:06:44 UTC (rev 11151)
+++ branches/SAMBA_3_0_RELEASE/source/script/installswat.sh 2005-10-18
17:20:50 UTC (rev 11152)
@@ -87,7 +87,7 @@
if [ -d $SRCDIR../docs/htmldocs/ ]; then
-for dir in htmldocs/ htmldocs/Samba-HOWTO-Collection htmldocs/Samba-Guide
htmldocs/Samba-Developers-Guide
+for dir in htmldocs/manpages htmldocs/Samba3-ByExample
htmldocs/Samba3-Developers-Guide htmldocs/Samba3-HOWTO
do
if [ ! -d $SRCDIR../docs/$dir ]; then
Modified: trunk/packaging/RedHat/samba.spec.tmpl
===
--- trunk/packaging/RedHat/samba.spec.tmpl 2005-10-18 16:06:44 UTC (rev
11151)
+++ trunk/packaging/RedHat/samba.spec.tmpl 2005-10-18 17:20:50 UTC (rev
11152)
@@ -114,7 +114,7 @@
mkdir -p $RPM_BUILD_ROOT/etc/{logrotate.d,pam.d,samba}
mkdir -p $RPM_BUILD_ROOT/etc/rc.d/init.d
mkdir -p $RPM_BUILD_ROOT%{prefix}/{bin,sbin}
-mkdir -p $RPM_BUILD_ROOT%{prefix}/share/swat/{images,help,include,using_samba}
+mkdir -p $RPM_BUILD_ROOT%{prefix}/share/swat/{help,include,using_samba}
mkdir -p $RPM_BUILD_ROOT%{prefix}/share/swat/using_samba/{figs,gifs}
mkdir -p $RPM_BUILD_ROOTMANDIR_MACRO
mkdir -p
svn commit: samba r11153 - in tags: .
Author: jerry Date: 2005-10-18 17:21:43 + (Tue, 18 Oct 2005) New Revision: 11153 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11153 Log: bad tag Removed: tags/release-3-0-21pre1/ Changeset:
svn commit: samba r11154 - in trunk/source/utils: .
Author: jra
Date: 2005-10-18 18:02:05 + (Tue, 18 Oct 2005)
New Revision: 11154
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11154
Log:
Remove warning in torturous logic.
Jeremy.
Modified:
trunk/source/utils/net_idmap.c
Changeset:
Modified: trunk/source/utils/net_idmap.c
===
--- trunk/source/utils/net_idmap.c 2005-10-18 17:21:43 UTC (rev 11153)
+++ trunk/source/utils/net_idmap.c 2005-10-18 18:02:05 UTC (rev 11154)
@@ -84,18 +84,21 @@
void *handle)
{
struct hwms *hwms = (struct hwms *)handle;
- int *idptr = NULL;
+ void *idptr = NULL;
+ BOOL isgid = False;
int id;
if (strncmp(key.dptr, S-, 2) != 0)
return 0;
if (sscanf(data.dptr, GID %d, id) == 1) {
- idptr = hwms-group_hwm;
+ idptr = (void *)hwms-group_hwm;
+ isgid = True;
}
if (sscanf(data.dptr, UID %d, id) == 1) {
- idptr = hwms-user_hwm;
+ idptr = (void *)hwms-user_hwm;
+ isgid = False;
}
if (idptr == NULL) {
@@ -105,8 +108,15 @@
return -1;
}
- if (*idptr = id)
- *idptr = id+1;
+ if (isgid) {
+ if (hwms-group_hwm = (gid_t)id) {
+ hwms-group_hwm = (gid_t)(id+1);
+ }
+ } else {
+ if (hwms-user_hwm = (uid_t)id) {
+ hwms-user_hwm = (uid_t)(id+1);
+ }
+ }
return 0;
}
svn commit: samba r11155 - in branches/SAMBA_3_0/source/utils: .
Author: jra
Date: 2005-10-18 18:02:37 + (Tue, 18 Oct 2005)
New Revision: 11155
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11155
Log:
Remove warning in torturous logic.
Jeremy.
Modified:
branches/SAMBA_3_0/source/utils/net_idmap.c
Changeset:
Modified: branches/SAMBA_3_0/source/utils/net_idmap.c
===
--- branches/SAMBA_3_0/source/utils/net_idmap.c 2005-10-18 18:02:05 UTC (rev
11154)
+++ branches/SAMBA_3_0/source/utils/net_idmap.c 2005-10-18 18:02:37 UTC (rev
11155)
@@ -84,18 +84,21 @@
void *handle)
{
struct hwms *hwms = (struct hwms *)handle;
- int *idptr = NULL;
+ void *idptr = NULL;
+ BOOL isgid = False;
int id;
if (strncmp(key.dptr, S-, 2) != 0)
return 0;
if (sscanf(data.dptr, GID %d, id) == 1) {
- idptr = hwms-group_hwm;
+ idptr = (void *)hwms-group_hwm;
+ isgid = True;
}
if (sscanf(data.dptr, UID %d, id) == 1) {
- idptr = hwms-user_hwm;
+ idptr = (void *)hwms-user_hwm;
+ isgid = False;
}
if (idptr == NULL) {
@@ -105,8 +108,15 @@
return -1;
}
- if (*idptr = id)
- *idptr = id+1;
+ if (isgid) {
+ if (hwms-group_hwm = (gid_t)id) {
+ hwms-group_hwm = (gid_t)(id+1);
+ }
+ } else {
+ if (hwms-user_hwm = (uid_t)id) {
+ hwms-user_hwm = (uid_t)(id+1);
+ }
+ }
return 0;
}
svn commit: samba r11156 - in branches/SAMBA_3_0/source/lib: .
Author: jra Date: 2005-10-18 18:08:23 + (Tue, 18 Oct 2005) New Revision: 11156 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11156 Log: Remove valgrind disabling ifdef that got added by mistake. Jeremy. Modified: branches/SAMBA_3_0/source/lib/clobber.c Changeset: Modified: branches/SAMBA_3_0/source/lib/clobber.c === --- branches/SAMBA_3_0/source/lib/clobber.c 2005-10-18 18:02:37 UTC (rev 11155) +++ branches/SAMBA_3_0/source/lib/clobber.c 2005-10-18 18:08:23 UTC (rev 11156) @@ -54,9 +54,7 @@ * (This is not redundant with the clobbering above. The * marking might not actually take effect if we're not running * under valgrind.) */ -#if 0 VALGRIND_MAKE_WRITABLE(dest, len); -#endif #endif /* VALGRIND */ #endif /* DEVELOPER */ }
