RE: [Samba] cannot see the samba server when browsing

[Robert Mortimer]

> Samba is on the same server that is attached to the router and it
> was hacked before.
>
Options:

Get a better router/firewall

Get a firewall dedicated (Smoothwall pfSense IPCop)

Put two NICs in the samba machine (one to the router one to the internal
network) Firewall the one to the router

>
> >>> "Robert Mortimer" <[EMAIL PROTECTED]>
> 11:03:45 pm 27/03/2006 >>>
> Name resolution for windows machines is by WINS or Broadcast. Broadcast is
> not going to like the firewall. Wins could be configured if you
> look up the
> ports to allow and run the SAMBA wins server on the linux machine. My only
> question is what do you not trust on your local network (why the
> firewall?)
>
> Robert
>
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]
> > ]On Behalf Of Jon Miller
> > Sent: 27 March 2006 14:09
> > To: samba@lists.samba.org
> > Subject: [Samba] cannot see the samba server when browsing
> >
> >
> > I would like to know if there is a rule that can be created in
> > iptables that would allow a samba server shares to be seen on the
> > internal LAN.  The interface is on eth0 the ip address of eth0 is
> > 192.168.0.1.  It seems that when I applied a firewall I have
> > blocked smb from showing up.  Now the users cannot see any shares
> > via Network Neighborhood , but I can map a drive via
> > Start->Run->\\192.168.0.1\sharename.
> > This is on a Debian 3.1 server.
> >
> > Thanks
> >
> > Jon
> >
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] smbclient -p

[Jayant kumar]

I m running smbd on a port... different from the default onesay in
smb.conf i hav put
smb ports = 2000 3000
I also checked in the log file(smbd)..smbd is listening to  those ports

Now when I connect to server using smbclient -p option... its trying to
connect to the default ports 139 445.

plz tell me how to use smbclient to connect to different ports.ofcourse
the final solution will be changing the source code and compilingbut i
dont want that..

jayant
[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Authentication via Domain Trusts

[Daniel Draper]

Hi List,

I have a linux proxy server authenticating via PAM winbind to an Active 
Directory server. The linux server is a member of the domain - lets call 
it APPLES. This works fine but the APPLES server has a trust 
relationship with another server that hosts the domain ORANGES. Now, if 
I want to authenticate to an account on the ORANGES domain but the linux 
box is a member of the APPLES domain I would want to do something like 
username: ORANGES\daniel with my password. This, however, does not work.


Any ideas?

Daniel
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Virtual Servers Workaround?

[Tomasz Chmielewski]

Andrew Galdes wrote:

Craig,


try this...samba Wiki

http://wiki.samba.org/index.php/Multiple_Server_Instances

Craig


That configuration appears to work at a lower level - rather than a
single Samba server providing the (multiple DC's) services, samba is
actually running multiple times. The documentation 'doesn't' say it's
'not' possible. I will do some testing. 


As an alternative, you can run several Samba instances from within Xen.
It was easier for me to set it up this way (on Xen), than to configure 
several Samba + OpenLDAP servers running on the same box.
Furthermore, if you have "unified" directory setup (i.e., software in 
the same directories etc.) on your Samba servers, this can be an 
additional pro.



--
Tomasz Chmielewski
http://wpkg.org
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Virtual Servers Workaround?

[Andrew Galdes]

Craig,

> try this...samba Wiki
> 
> http://wiki.samba.org/index.php/Multiple_Server_Instances
> 
> Craig

That configuration appears to work at a lower level - rather than a
single Samba server providing the (multiple DC's) services, samba is
actually running multiple times. The documentation 'doesn't' say it's
'not' possible. I will do some testing. 

Cheers,
-Andrew
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Virtual Servers Workaround?

[Craig White]

On Tue, 2006-03-28 at 14:52 +1030, Andrew Galdes wrote:
> Hello all,
> 
> I am in a situation where I need Samba to be a DC server (logons and
> file/printer services) for multiple domains - from a single machine.
> 
> The documentation states that "Only the primary server can be a domain
> member or a domain controller."
> 
> Are there any work arounds for this?
> 
> Research at:
> http://us1.samba.org/samba/docs/man/Samba3-HOWTO/cfgsmarts.html#id263984
> 5
> 

try this...samba Wiki

http://wiki.samba.org/index.php/Multiple_Server_Instances

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Virtual Servers Workaround?

[Andrew Galdes]

Hello all,

I am in a situation where I need Samba to be a DC server (logons and
file/printer services) for multiple domains - from a single machine.

The documentation states that "Only the primary server can be a domain
member or a domain controller."

Are there any work arounds for this?

Research at:
http://us1.samba.org/samba/docs/man/Samba3-HOWTO/cfgsmarts.html#id263984
5

Cheers,
-Andrew

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] strange: wbinfo -a works, but smbclient doesn't?

[Tim]

Hi guys,

I have a strange problem.  I can authenticate a user with wbinfo from
my domain controller (security = ads), however when I try and map a
share, the authentication fails.   i.e.

# wbinfo -a 'COAL+bcanglo%bcpass'
plaintext password authentication succeeded
challenge/response password authentication succeeded

# smbclient '\\xxx\timtest' -U 'COAL\bcanglo' bcpass
added interface ip=10.xxx.xxx.101 bcast=10.xxx.xxx.255 nmask=255.255.255.0
Client started (version 3.0.14a based HP CIFS Server A.02.02).
Connecting to 10.xxx.xxx.101 at port 445
session setup failed: NT_STATUS_LOGON_FAILURE

Note:  That share definately exists.

I'm running winbindd in debug mode and I can see both commands talk to
winbind and both attempt to talk to the domain controller.   Yet
wbinfo works fine, and smbclient fails with this:

add_trusted_domain: COAL is an ADS native mode domain
[ 2547]: request interface version
[ 2547]: request location of privileged pipe
[ 2547]: getpwnam coal+bcanglo
ads: fetch sequence_number for COAL
sys_gethostbyname: Unknown host. \\10.xx.xx.101
ads_connect for domain COAL failed: No such file or directory
user 'bcanglo' does not exist
[ 2547]: getpwnam COAL+bcanglo
user 'bcanglo' does not exist
[ 2547]: getpwnam COAL+BCANGLO
user 'BCANGLO' does not exist

..and smbd debug says:

  check_ntlm_password:  Authentication for user [bcanglo] -> [bcanglo]
FAILED with error NT_STATUS_NO_SUCH_USER

which makes no sense, because the user DEFINATELY exists, and the
winbindd/krb/ldap stuff is DEFINATELY set up and working:

# wbinfo -n 'COAL+bcanglo'
S-1-5-21-1955927045-6-239210854-5002 User (1)
# wbinfo -n 'COAL+BCANGLO'
S-1-5-21-1955927045-6-239210854-5002 User (1)

Now, interestingly if I use smbclient and intentionally get the
password wrong, smbd says this:

check_ntlm_password:  Authentication for user [bcanglo] -> [bcanglo]
FAILED with error NT_STATUS_WRONG_PASSWORD

Busted!  So I know its talking to the domain controller, and I know
that it knows the user exists.

Note:  The COAL domain is a trusted domain:

# wbinfo -m
XX
BUILTIN
COAL

I'm running the latest HP-UX packages and recommended libraries, so
this version of Samba is:

# smbd -V
Version 3.0.14a based HP CIFS Server A.02.02

So why can I test out a username/password with wbinfo, but get "User
does not exist" when I try and map a share with smbclient?

If you need more verbose debug output from smbd or winbindd, I'll be
happy to put some in.

Thanks,

Tim.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba-LDAP not quite working still

[Gary Dale]

Further to below: I noticed that some of the various documents show 
smbldap-populate adding the root account. The one on my system didn't. 
However, I'm still not sure why smbpasswd -a root doesn't add it.


I tried using the samba and admin accounts to set the various privileges 
but that doesn't seem to work either. I get the following:
semper:/etc/ldap# net -S Localhost -U admin rpc rights grant 
"rahim-dale\Domain Admins" SeMachineAccountPrivilege 
SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege 
SeRemoteShutdownPrivilege

Password:
Failed to grant privileges for rahim-dale\Domain Admins 
(NT_STATUS_ACCESS_DENIED)


I can't see any way in phpldapadmin to add the privileges and I can't 
get smbldap-usermod to let me do anything either.


I've also been playing around with pdbedit without any luck.

Any help will be greatly appreciated.





The first step in 5.4 is smbpasswd -w . I've done that and it
succeeded. It currently reports that it set the password for "samba",
which is the user defined in smb.conf. phpldapadmin shows samba as being
a "gecos: System User" in objectClasses top, inetOrgPerson,
posixAccount, shadowAccount.

The slapd.conf file includes samba-access.conf, which gives admin and
samba extensive write privileges. The admin privileges are taken from
the howto below, while the ones for samba are from the idealx.org
manual. They also give others the right to modify some of their own
information.




Stéphane Purnelle wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

This howto contain some error I think, before truy a smbpasswd, Samba
must have the information
what user must I use to connect to LDAP, this question is answered
with the ldap admin dn parameter in smb.conf.  If there a user, there
a password.  For specifye the password, you must you the commande
smbpasswd -w  ( = the passwd of the user)

ATTENTION : in your slapd.conf, only admin can write.  If you want to
use other ldap user, you must modify you slapd.conf

Gary Dale a écrit :
 


I was trying to follow the howto below to get Samba-LDAP working on
my Debian/Sarge server. I'm stuck in section 5.4:

When I try the "smbpasswd -a root" I get:
semper:/etc/phpldapadmin/templates# smbpasswd -a root
New SMB password:
Retype new SMB password:
ldapsam_modify_entry: Failed to add user dn=
uid=root,ou=Users,dc=rahim-dale,dc=org with: Insufficient access
   no write access to parent
ldapsam_add_sam_account: failed to modify/add user with uid = root
(dn = uid=root,ou=Users,dc=rahim-dale,dc=org)
Failed to add entry for user root.
Failed to modify password entry for user root


The next two steps are:
smbldap-passwd Administrator   -- this works
smbldap-usermod -J Administrator  -- this fails

And after that nothing works.

I've managed to get phpldapadmin working (finally) but that doesn't
seem to help. I can add accounts, etc., but they don't seem to help.
When I try to get a Windows XP computer to join the domain, I get
"logon failure: unknown user name or bad password".

I can browse the network from a Windows XP machine as well, but
can't connect to any network shares that have any security on them.

I've gone through the idealx.org smb-ldap documentation and can't
see anything obvious that I'm doing wrong. Nor have I found anything
in searches that tells me any more than what the immediate error
message says (basically they seem to say it's a rights issue so fix
it without specifying how to do it).

Please help!



Louis van Belle wrote:

   


Hi everybody,
I made a pretty complete howto for samba on debian servers.

This howto covers samba + ldap + cups + recycle bin + samba-vscan
+ phpldapadmin + ACL + Extended Attributes.

this howto is also based on the idealx howto

If you do this setup, you should be able to use the NT4 Usermanager,
setup Point en Print Printing. set rights from explorer etc.
other nice tools is ldapadmin ( ldapadmin.sf.net ) a must check it
out.

We will use a Debian Sarge as setup.  If you never used Debian
before, you can follow this how-to
(http://www.howtoforge.com/perfect_setup_debian_sarge ) , please
read the comment below the pages first, this can save you time and
problems or install Debian without any software packaged, we will
install them later when needed.
Checking the kernel of compile your own kernel if needed.

I try to give a complete solution for this how-to, this is because
lots of people where asking the same things on the samba list and
lots of people make the same mistakes.

This is my company's running setup.

I run this on a P866, 512 Ram, Scsi Raid 1 ( 15rpms 73 Gb ) , with
50 users 25 printers which do about 150.000 prints a month.

I thank my company to let me make this document.


Please if you have improvements, comments, send them to me.

Louis van Belle





INDEX
Page nr.
 
1 Checking the kernel or compile your own kernel3

1.1  Preparing apt configuration3
1.2 Preparing the kernel  

[Samba] samba does not lock files

[Douglas D . Germann , Sr .]

Adam--

You are a wonder worker!

I entered your command and the response I got was--

libgnomevfs-2.so.0 => /usr/lib/libgnomevfs-2.so.0 (0xb7b53000)

which I suspect is pretty much what you expected. Right?

In any case, after reading HOWTOs and man files and README files I edited
/etc/fstab and changed the instances of smbfs to cifs. It mounted right away,
and the files now lock linux to linux and linux to winXP Pro.

(At least for OOo. KWord does not respect the locks, nor does gedit. I suspect
that will not be a problem, but I wonder why not?)

Thank you, thank you, thank you! Adam you have rescued me from having spent 2
1/2 weeks of work till midnight trying to get some file locking going! You are a
wonder, Adam!

:- Doug.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Having problems adding a print driver via rpcclient

[Rob Tanner]

Hi,

I have an old printer server running Samba v2.2.7.  It's due to be 
phased out this summer, but in the mean time I need to add a new print 
driver.  In order to capture the list of files, I ran the command:


make_printerdef hp4100p6.inf "HP LaserJet 4100 PCL 6" > files.def

Only 6 of the required files were not already installed in the driver 
directory, and so I added just those 6 files.


I then tried the command "rpcclient  socrates -U % -c 
"adddriver  '`cat files.def`'".  The response is:


Usage: adddriver \
   :::\
   :::\
   :

I'm assuming that the problem is the "", but I have no idea 
what I need to put there.


Can anybody help me out here?

Thanks,
Rob


--

Rob Tanner
UNIX Services Manager
Linfield College, McMinnville OR
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba-LDAP not quite working - help!

[Gary Dale]

The first step in 5.4 is smbpasswd -w . I've done that and it
succeeded. It currently reports that it set the password for "samba",
which is the user defined in smb.conf. phpldapadmin shows samba as being
a "gecos: System User" in objectClasses top, inetOrgPerson,
posixAccount, shadowAccount.

The slapd.conf file includes samba-access.conf, which gives admin and
samba extensive write privileges. The admin privileges are taken from
the howto below, while the ones for samba are from the idealx.org
manual. They also give others the right to modify some of their own
information.




Stéphane Purnelle wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

This howto contain some error I think, before truy a smbpasswd, Samba
must have the information
what user must I use to connect to LDAP, this question is answered
with the ldap admin dn parameter in smb.conf.  If there a user, there
a password.  For specifye the password, you must you the commande
smbpasswd -w  ( = the passwd of the user)

ATTENTION : in your slapd.conf, only admin can write.  If you want to
use other ldap user, you must modify you slapd.conf

Gary Dale a écrit :
 


I was trying to follow the howto below to get Samba-LDAP working on
my Debian/Sarge server. I'm stuck in section 5.4:

When I try the "smbpasswd -a root" I get:
semper:/etc/phpldapadmin/templates# smbpasswd -a root
New SMB password:
Retype new SMB password:
ldapsam_modify_entry: Failed to add user dn=
uid=root,ou=Users,dc=rahim-dale,dc=org with: Insufficient access
   no write access to parent
ldapsam_add_sam_account: failed to modify/add user with uid = root
(dn = uid=root,ou=Users,dc=rahim-dale,dc=org)
Failed to add entry for user root.
Failed to modify password entry for user root


The next two steps are:
smbldap-passwd Administrator   -- this works
smbldap-usermod -J Administrator  -- this fails

And after that nothing works.

I've managed to get phpldapadmin working (finally) but that doesn't
seem to help. I can add accounts, etc., but they don't seem to help.
When I try to get a Windows XP computer to join the domain, I get
"logon failure: unknown user name or bad password".

I can browse the network from a Windows XP machine as well, but
can't connect to any network shares that have any security on them.

I've gone through the idealx.org smb-ldap documentation and can't
see anything obvious that I'm doing wrong. Nor have I found anything
in searches that tells me any more than what the immediate error
message says (basically they seem to say it's a rights issue so fix
it without specifying how to do it).

Please help!



Louis van Belle wrote:

   


Hi everybody,
I made a pretty complete howto for samba on debian servers.

This howto covers samba + ldap + cups + recycle bin + samba-vscan
+ phpldapadmin + ACL + Extended Attributes.

this howto is also based on the idealx howto

If you do this setup, you should be able to use the NT4 Usermanager,
setup Point en Print Printing. set rights from explorer etc.
other nice tools is ldapadmin ( ldapadmin.sf.net ) a must check it
out.

We will use a Debian Sarge as setup.  If you never used Debian
before, you can follow this how-to
(http://www.howtoforge.com/perfect_setup_debian_sarge ) , please
read the comment below the pages first, this can save you time and
problems or install Debian without any software packaged, we will
install them later when needed.
Checking the kernel of compile your own kernel if needed.

I try to give a complete solution for this how-to, this is because
lots of people where asking the same things on the samba list and
lots of people make the same mistakes.

This is my company's running setup.

I run this on a P866, 512 Ram, Scsi Raid 1 ( 15rpms 73 Gb ) , with
50 users 25 printers which do about 150.000 prints a month.

I thank my company to let me make this document.


Please if you have improvements, comments, send them to me.

Louis van Belle





INDEX
Page nr.
 
1 Checking the kernel or compile your own kernel3

1.1  Preparing apt configuration3
1.2 Preparing the kernel3
1.3 setup the /etc/fstab3
1.4 final touch, lilo (or grub)3
2 Pre-installation of the debian packages4
2.1  Samba and Ldap4
2.2 basic rights setup for samba4
2.3 why this rights setup.4
3 LDAP Server configuration5
4 installation/configuration libnss, libpam (-ldap)7
5 Samba and smbldap-tools Configuration8
5.1 smbldap-tools installation/configuration8
5.2 setting up samba base config8
5.3 Configuring smbldap.conf9
5.4 set the samba ldap admin password9
5.5 Samba PRIVILEGES Setup10
6 CUPS - Printer software11
6.1 Setup Cups11
6.2 Setup Cups PDF Printer. - Creating a PDF Printer11
7 Configuring phpldapadmin12
7.1 installation of phpldapadmin ( and apache )12
8.0 On-Access virus scanning on samba (samba-clamav)13
8.1 Installing ClamAV13
8.2 get the sources ( samba & samba-vscan )13
9.0 Recycle bin on samba14
9.1 

[Samba] sudden intermittent (but predictable) logon & connection failures

[Ben Walton]

Hi List,

This one has me completely stumped.  I hope that someone out there can
help.

Setup: 1 PDC (Samba 3.0.10-1.4E.2 from redhat as 4) also doing WINS. [I
know there's an update, but it doesn't help.  I'm trying to keep as many
variables static for troubleshooting as possible.]

On March 8, my server rebooted mysteriously overnight (the only info I
have is from the BMC, which indicates cpu shutdowns and then later power
loss in both power supplies).  Up until this point, samba was working
flawlessly as a PDC (non-production at this point).  I'm running Redhat
AS 4 with mostly current patches.  I run an unattended
(unattended.sourceforge.net) install from this machine (initiated via
PXE, hosted on the same machine) to image workstations.

Since this reboot, the server has performed perfectly except that samba
now 'fails' intermittently.  The failures that I see manifest 2 ways:
1.  During the unattended install, I get 'File or resource not found'
errors from my XPsp2 clients.  Using unattended's "retry" feature allows
a reconnection that then works until the end of install.  This process
was completely hands free and working without error before the server
reboot.

When a connection 'dies', the smbd is still running on the server, but
falls back to root credentials.  Subsequent connections spawn a new pid.
I can see in the logs that credentials are supplied automatically from
the clients cached values.

2.  After a fresh imaging, I cannot perform a domain logon until I've
logged in locally.  (I do nothing more than log in and then back out.)
Subsequent reboots of the machine will allow a working domain logon if I
wait for ~30 seconds before attempting.  If I try before that, I either
get a  not found message (first logon for this user) or a cached
session/profile if the user had logged in previously.  (My policies
trigger messages about \Desktop being unavailable, etc.).  When working
with a cached logon, I can simply hit F5 to get my desktop icons back
from the samba server (logs show cached credentials being supplied)...

The event logs on the XP box show a NETLOGON:5719 error that indicates
the RPC server cannot be found when logons fail (or allow a cached
session).

Google hasn't turned up anything helpful (lots of interesting things) so
far.  All of the RPC Server searches I've done lead me down roads that
haven't helped at all.  I don't think it's a WINS/DNS issue as the setup
does still (mostly) work.

I thought I had a bad NIC in my box, so I switched to the alternate
(moved all IP settings, etc) and things seemed to work well for the
better part of a week.  After the weekend (this is now the 20th), the
problem reoccured.  Logons fail after a boot, imaging fails sometimes.
I still feel like I'm fighting bad hardware, but can find no indication
of this.  All other services on the box are fine, the machine itself has
run properly since the incident, etc.

Since then I've been poring through logs, sniffing packets (I even have
the machines on a hub right now for easier sniffing), poking various
settings, etc.  Nothing seems to resolve this.  I've now wiped out
(after grabbing a backup) my passdb.tdb, secrets.tdb and all files
under /var/cache/samba.  No luck.

I can post smb.conf if anyone thinks it might help, but it hasn't
changed (with the exception of logging values).  I can post any other
info that may help too (sniffing logs?)...Anything that might help
eliminate samba from the problem scenario and point me in a better
(hardware?) direction would be of benefit too. 

Thanks
-Ben
-- 
Ben Walton
Systems Programmer
Office of Planning & IT
Faculty of Arts & Science
University of Toronto
Cell: 416.407.5610
PGP Key Id: 8E89F6D2


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] samba - vmware - strange access problem

[Ruben Jenster]

Hi, 
 

I run samba, version 3.0.21b   for data exchange between windows in vmware and
the linux host (gentoo).

Notice: 
>  Samba was compiled without: -acl -async -automount -cups -doc -examples
> -kerberos -ldap -ldapsam -libclamav -mysql -oav -pam -postgres -python
> -quotas -readline (-selinux) -swat -syslog -winbind -xml -xml2

From time to I can't access my local samba share in 
the virtual machine anymore, usually this happends after having 
suspended/hibernated the system.

I noticed when browsing the samba share from within linux with th konqueror 
there is a strange file (only visibible within samba), with the name: 

 _JWYWA~R 
   
It seems to be binary, don't know whether it contains sensible information so 
here is some readable text from the file
 
Code:
  local/thinkpad:/tmp/.ICE-unix/dcop[...]
   
 
 When I delete this file and restart vmware player I can access my share
again.  Where does this file come from? Is this a lock file from samba? 

Any help appreciated.
 
 Regards, 
 Ruben
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Running SQL over SAMBA?

[Jeremy Allison]

On Mon, Mar 27, 2006 at 09:50:31AM -0800, Ephi Dror wrote:
> Hi All,
>  
> Does anyone run SQL and/or exchange on SAMBA server share?
>  
> Are there any special considerations to take? would you be kind enough
> to share your experience doing it?
>  
> Any special smb.conf configuration is required?
> is there any performance issue  or functional limitations supporting it?
>  
> I am just wondering since Microsoft encourages block level access over
> share/file level access. 
>  
> http://support.microsoft.com/default.aspx?scid=kb;en-us;304261  
> Microsoft generally recommends that you use a Storage Area Network (SAN)
> or locally attached disk for the storage of your Microsoft SQL Server
> database files because this configuration optimizes SQL Server
> performance and reliability. By default, use of network database files
> (stored on a networked server or Network Attached Storage [NAS]) is not
> enabled for SQL Server.
> 
> However, you can configure SQL Server to store a database on a networked
> server or NAS storage server. Servers used for this purpose must meet
> SQL Server requirements for data write ordering and write-through
> guarantees detailed in the "More Information" section of this article.
> . 
> http://support.microsoft.com/kb/234656/ 
> All versions of SQL Server open the log and data files using the Win32
> CreateFile function. The dwFlagsAndAttributes member includes the
> FILE_FLAG_WRITE_THROUGH option when opened by SQL Server. 
>  
> All comments are welcome and highly appreciated.

Should work. If you have problems let us know and we'll fix 'em.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba-LDAP not quite working - help!

[Stéphane Purnelle]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

This howto contain some error I think, before truy a smbpasswd, Samba
must have the information
what user must I use to connect to LDAP, this question is answered
with the ldap admin dn parameter in smb.conf.  If there a user, there
a password.  For specifye the password, you must you the commande
smbpasswd -w  ( = the passwd of the user)

ATTENTION : in your slapd.conf, only admin can write.  If you want to
use other ldap user, you must modify you slapd.conf

Gary Dale a écrit :
> I was trying to follow the howto below to get Samba-LDAP working on
> my Debian/Sarge server. I'm stuck in section 5.4:
>
> When I try the "smbpasswd -a root" I get:
> semper:/etc/phpldapadmin/templates# smbpasswd -a root
> New SMB password:
> Retype new SMB password:
> ldapsam_modify_entry: Failed to add user dn=
> uid=root,ou=Users,dc=rahim-dale,dc=org with: Insufficient access
> no write access to parent
> ldapsam_add_sam_account: failed to modify/add user with uid = root
> (dn = uid=root,ou=Users,dc=rahim-dale,dc=org)
> Failed to add entry for user root.
> Failed to modify password entry for user root
>
>
> The next two steps are:
> smbldap-passwd Administrator   -- this works
> smbldap-usermod -J Administrator  -- this fails
>
> And after that nothing works.
>
> I've managed to get phpldapadmin working (finally) but that doesn't
> seem to help. I can add accounts, etc., but they don't seem to help.
> When I try to get a Windows XP computer to join the domain, I get
> "logon failure: unknown user name or bad password".
>
> I can browse the network from a Windows XP machine as well, but
> can't connect to any network shares that have any security on them.
>
> I've gone through the idealx.org smb-ldap documentation and can't
> see anything obvious that I'm doing wrong. Nor have I found anything
> in searches that tells me any more than what the immediate error
> message says (basically they seem to say it's a rights issue so fix
> it without specifying how to do it).
>
> Please help!
>
>
>
> Louis van Belle wrote:
>
>> Hi everybody,
>> I made a pretty complete howto for samba on debian servers.
>>
>> This howto covers samba + ldap + cups + recycle bin + samba-vscan
>> + phpldapadmin + ACL + Extended Attributes.
>>
>> this howto is also based on the idealx howto
>>
>> If you do this setup, you should be able to use the NT4 Usermanager,
>> setup Point en Print Printing. set rights from explorer etc.
>> other nice tools is ldapadmin ( ldapadmin.sf.net ) a must check it
>> out.
>>
>> We will use a Debian Sarge as setup.  If you never used Debian
>> before, you can follow this how-to
>> (http://www.howtoforge.com/perfect_setup_debian_sarge ) , please
>> read the comment below the pages first, this can save you time and
>> problems or install Debian without any software packaged, we will
>> install them later when needed.
>> Checking the kernel of compile your own kernel if needed.
>>
>> I try to give a complete solution for this how-to, this is because
>> lots of people where asking the same things on the samba list and
>> lots of people make the same mistakes.
>>
>> This is my company's running setup.
>>
>> I run this on a P866, 512 Ram, Scsi Raid 1 ( 15rpms 73 Gb ) , with
>> 50 users 25 printers which do about 150.000 prints a month.
>>
>> I thank my company to let me make this document.
>>
>>
>> Please if you have improvements, comments, send them to me.
>>
>> Louis van Belle
>>
>>
>>
>>
>>
>> INDEX
>> Page nr.
>>   
>> 1 Checking the kernel or compile your own kernel3
>> 1.1  Preparing apt configuration3
>> 1.2 Preparing the kernel3
>> 1.3 setup the /etc/fstab3
>> 1.4 final touch, lilo (or grub)3
>> 2 Pre-installation of the debian packages4
>> 2.1  Samba and Ldap4
>> 2.2 basic rights setup for samba4
>> 2.3 why this rights setup.4
>> 3 LDAP Server configuration5
>> 4 installation/configuration libnss, libpam (-ldap)7
>> 5 Samba and smbldap-tools Configuration8
>> 5.1 smbldap-tools installation/configuration8
>> 5.2 setting up samba base config8
>> 5.3 Configuring smbldap.conf9
>> 5.4 set the samba ldap admin password9
>> 5.5 Samba PRIVILEGES Setup10
>> 6 CUPS - Printer software11
>> 6.1 Setup Cups11
>> 6.2 Setup Cups PDF Printer. - Creating a PDF Printer11
>> 7 Configuring phpldapadmin12
>> 7.1 installation of phpldapadmin ( and apache )12
>> 8.0 On-Access virus scanning on samba (samba-clamav)13
>> 8.1 Installing ClamAV13
>> 8.2 get the sources ( samba & samba-vscan )13
>> 9.0 Recycle bin on samba14
>> 9.1 Recycle bin configuration14
>> Appendix 1 (complex samba-access.conf ) SETUP WITH DSA USERS15
>> Appendix 2 APT16
>> 2.1 APT HOWTO16
>> 2.2 Files from /etc/apt17
>> 2.2.1 /etc/apt/apt.conf17
>> 2.2.2 /etc/apt/preferences17
>>
>>
>>
>>
>> 1 Checking the kernel or compile your own kernel
>> 1.1  Preparing apt configuration
>> 

[Samba] Samba-LDAP not quite working - help!

[Gary Dale]

I was trying to follow the howto below to get Samba-LDAP working on my 
Debian/Sarge server. I'm stuck in section 5.4:


When I try the "smbpasswd -a root" I get:
semper:/etc/phpldapadmin/templates# smbpasswd -a root
New SMB password:
Retype new SMB password:
ldapsam_modify_entry: Failed to add user dn= 
uid=root,ou=Users,dc=rahim-dale,dc=org with: Insufficient access

no write access to parent
ldapsam_add_sam_account: failed to modify/add user with uid = root (dn = 
uid=root,ou=Users,dc=rahim-dale,dc=org)

Failed to add entry for user root.
Failed to modify password entry for user root


The next two steps are:
smbldap-passwd Administrator   -- this works
smbldap-usermod -J Administrator  -- this fails

And after that nothing works.

I've managed to get phpldapadmin working (finally) but that doesn't seem 
to help. I can add accounts, etc., but they don't seem to help. When I 
try to get a Windows XP computer to join the domain, I get "logon 
failure: unknown user name or bad password".


I can browse the network from a Windows XP machine as well, but can't 
connect to any network shares that have any security on them.


I've gone through the idealx.org smb-ldap documentation and can't see 
anything obvious that I'm doing wrong. Nor have I found anything in 
searches that tells me any more than what the immediate error message 
says (basically they seem to say it's a rights issue so fix it without 
specifying how to do it).


Please help!



Louis van Belle wrote:

Hi everybody, 


I made a pretty complete howto for samba on debian servers.

This howto covers samba + ldap + cups + recycle bin + samba-vscan
+ phpldapadmin + ACL + Extended Attributes.

this howto is also based on the idealx howto

If you do this setup, you should be able to use the NT4 Usermanager,
setup Point en Print Printing. set rights from explorer etc.
other nice tools is ldapadmin ( ldapadmin.sf.net ) a must check it out.

We will use a Debian Sarge as setup.  
If you never used Debian before, you can follow this how-to 
(http://www.howtoforge.com/perfect_setup_debian_sarge ) , 
please read the comment below the pages first, 
this can save you time and problems or install Debian without 
any software packaged, we will install them later when needed.

Checking the kernel of compile your own kernel if needed.

I try to give a complete solution for this how-to, 
this is because lots of people where asking the same things on 
the samba list and lots of people make the same mistakes.


This is my company's running setup.

I run this on a P866, 512 Ram, Scsi Raid 1 ( 15rpms 73 Gb ) , with 50 users 
25 printers which do about 150.000 prints a month.


I thank my company to let me make this document.


Please if you have improvements, comments, send them to me.

Louis van Belle





INDEX
Page nr.

1 Checking the kernel or compile your own kernel3
1.1  Preparing apt configuration3
1.2 Preparing the kernel3
1.3 setup the /etc/fstab3
1.4 final touch, lilo (or grub) 3
2 Pre-installation of the debian packages   4
2.1  Samba and Ldap 4
2.2 basic rights setup for samba4
2.3 why this rights setup.  4
3 LDAP Server configuration 5
4 installation/configuration libnss, libpam (-ldap) 7
5 Samba and smbldap-tools Configuration 8
5.1 smbldap-tools installation/configuration8
5.2 setting up samba base config8
5.3 Configuring smbldap.conf9
5.4 set the samba ldap admin password   9
5.5 Samba PRIVILEGES Setup  10
6 CUPS - Printer software   11
6.1 Setup Cups  11
6.2 Setup Cups PDF Printer. - Creating a PDF Printer11
7 Configuring phpldapadmin  12
7.1 installation of phpldapadmin ( and apache ) 12
8.0 On-Access virus scanning on samba (samba-clamav)13
8.1 Installing ClamAV   13
8.2 get the sources ( samba & samba-vscan ) 13
9.0 Recycle bin on samba14
9.1 Recycle bin configuration   14
Appendix 1 (complex samba-access.conf ) SETUP WITH DSA USERS15
Appendix 2 APT  16
2.1 APT HOWTO   16
2.2 Files from /etc/apt 17
2.2.1 /etc/apt/apt.conf 17
2.2.2 /etc/apt/preferences  17




1 Checking the kernel or compile your own kernel
1.1  Preparing apt configuration

for this go check out my apt howto.

if you apt config is setup rights, follow the steps below.  

	ncurses interface for compiling the kernel  
	apt-get install libncurses5-dev


	get the kernel source 
	apt-get install kernel-source-2.6.8 kernel-package


	installer right kernel and activate EXT2/3 + Extended attributes 
	and setup CIFS kernel support to in kernel.


1.2 Preparing the kernel
apt-get install kernel-source-2.6.8 kernel-package fakeroot
libc6-dev libncurses5-dev

	cd /usr/src  
	tar -jxf kernel-source-2.6.8.tar.bz2

ln -s /usr/src/linux /usr/src/kernel-source-2.6.8
cp /boot/config-2.6.8-2-* /usr/src/linux/.config
cd linux
make menuconfig - File systems - Ext2/3 + extended options
  

Re: [Samba] Authentication failing

[Andrew Morgan]

On Mon, 27 Mar 2006, Matt Smith wrote:


ACK! Ok this morning for some strange reason when trying to resolve my
samba server authentication fails ... it can ping the host name and it
tries to connect but authentication fails, if I connect to the IP all
works fine, this only started happening this AM any ideas?


My enviro is a win2k3 AD domain and a samba file server ...

everything seems to run fine except for when users try to map to
machinename\share it fails, but works with ip_address\share


Sounds like a WINS name resolution problem.  We had an issue like this 
recently and found out that the WINS server listed in smb.conf was not 
running (service did not start after a power outage).  Now, we list both 
our WINS servers in case one fails.  :)


You may need to restart Samba (or at least nmbd) if you change WINS 
settings, in order for Samba to register its name with the new server(s).


Andy
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Running SQL over SAMBA?

[Ephi Dror]

Hi All,
 
Does anyone run SQL and/or exchange on SAMBA server share?
 
Are there any special considerations to take? would you be kind enough
to share your experience doing it?
 
Any special smb.conf configuration is required?
is there any performance issue  or functional limitations supporting it?
 
I am just wondering since Microsoft encourages block level access over
share/file level access. 
 
http://support.microsoft.com/default.aspx?scid=kb;en-us;304261  
Microsoft generally recommends that you use a Storage Area Network (SAN)
or locally attached disk for the storage of your Microsoft SQL Server
database files because this configuration optimizes SQL Server
performance and reliability. By default, use of network database files
(stored on a networked server or Network Attached Storage [NAS]) is not
enabled for SQL Server.

However, you can configure SQL Server to store a database on a networked
server or NAS storage server. Servers used for this purpose must meet
SQL Server requirements for data write ordering and write-through
guarantees detailed in the "More Information" section of this article.
. 
http://support.microsoft.com/kb/234656/ 
All versions of SQL Server open the log and data files using the Win32
CreateFile function. The dwFlagsAndAttributes member includes the
FILE_FLAG_WRITE_THROUGH option when opened by SQL Server. 
 
All comments are welcome and highly appreciated.
Cheers,
Ephi
 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Trouble with Homes

[Trimble, Ronald D]

So that every person who uses the server can have a home directory
without me having to create it by hand.

-Original Message-
From: Craig White [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 27, 2006 12:54 PM
To: Trimble, Ronald D
Cc: Guillermo Gutierrez; Daniel Northam; samba@lists.samba.org
Subject: RE: [Samba] Trouble with Homes

get rid of the homes definition...why do you need it on a member server?

Craig

On Mon, 2006-03-27 at 12:44 -0500, Trimble, Ronald D wrote:
> Domain member.
> 
> -Original Message-
> From: Guillermo Gutierrez [mailto:[EMAIL PROTECTED] 
> Sent: Monday, March 27, 2006 12:44 PM
> To: Trimble, Ronald D; Daniel Northam; Craig White;
> samba@lists.samba.org
> Subject: RE: [Samba] Trouble with Homes
> 
> do you have this samba server as a domain member or is it a
standalone?
> 
> -Original Message-
> From: Trimble, Ronald D [mailto:[EMAIL PROTECTED]
> Sent: Monday, March 27, 2006 9:39 AM
> To: Daniel Northam; Guillermo Gutierrez; Craig White;
> samba@lists.samba.org
> Subject: RE: [Samba] Trouble with Homes
> 
> 
> I am not using LDAP, so the SIDs shouldn't be an issue.
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Daniel Northam
> Sent: Monday, March 27, 2006 11:49 AM
> To: Guillermo Gutierrez; Craig White; samba@lists.samba.org
> Subject: RE: [Samba] Trouble with Homes
> 
> Check your SID's I had that same problem and samba was advising Auth
> succeeded but it still wouldn't let me in. Checked my SID's and
> somewhere down the line I had changed one of my SID's. I corrected
that
> in LDAP and then I was able to login.
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
Behalf
> Of Guillermo Gutierrez
> Sent: Monday, March 27, 2006 8:45 AM
> To: Craig White; samba@lists.samba.org
> Subject: RE: [Samba] Trouble with Homes
> 
> If you are integrating the samba server into a windows domain, you
might
> want to try setting the valid users line like this: "valid users =
> %D\%S"
> 
> that was my problem until I did that.
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
> Behalf Of Craig White
> Sent: Monday, March 27, 2006 8:34 AM
> To: samba@lists.samba.org
> Subject: Re: [Samba] Trouble with Homes
> 
> 
> On Mon, 2006-03-27 at 11:23 -0500, Trimble, Ronald D wrote:
> > I am having trouble with getting my Homes section to work properly.
> > When I browse to the server from a Windows client, I can see my home
> > directory.  However, when I try to access it, it challenges me for a
> > userID and password.  No matter what I enter, I will not allow me
> > access.  Can someone point me in the right direction to solve this?
> > 
> >  
> > 
> > Here are the errors...
> > 
> >  
> > 
> > [2006/03/27 11:19:22, 0] smbd/service.c:make_connection(798)
> > 
> >   192.63.212.176 (192.63.212.176) couldn't find service .
> > 
> > [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> > 
> >   user 'NA\trimblrd' (from session setup) not permitted to access
this
> > share (trimblrd)
> > 
> > [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> > 
> >   user 'NA\trimblrd' (from session setup) not permitted to access
this
> > share (trimblrd)
> > 
> > [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> > 
> >   user 'NA\trimblrd' (from session setup) not permitted to access
this
> > share (trimblrd)
> > 
> > [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> > 
> >   user 'NA\trimblrd' (from session setup) not permitted to access
this
> > share (trimblrd)
> > 
> > [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> > 
> >   user 'NA\trimblrd' (from session setup) not permitted to access
this
> > share (trimblrd)
> > 
> > [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> > 
> >   user 'NA\trimblrd' (from session setup) not permitted to access
this
> > share (trimblrd)
> > 
> > [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> > 
> >   user 'NA\trimblrd' (from session setup) not permitted to access
this
> > share (trimblrd)
> > 
> > [2006/03/27 11:19:32, 2] smbd/service.c:make_connection_snum(318)
> > 
> >   user 'NA\trimblrd' (from session setup) not permitted to access
this
> > share (trimblrd)
> > 
> >  
> > 
> > And here is the relevant section of the smb.conf...
> > 
> >  
> > 
> > [homes]
> > 
> > comment = Home Directories
> > 
> > valid users = %S
> > 
> > browseable = No
> > 
> > read only = No
> > 
> > create mask = 0660
> > 
> > directory mask = 0770
> 
> try putting a valid path that the users have write access to their
> home...
> 
> [homes]
> comment = Home Directories
> path = /home/samba/homes
> browseable = no
> writable = yes
> valid users = %S
> create mask = 600
> directory mask = 700
> 
> # ls -ld /home/samba/homes
> dr

RE: [Samba] Trouble with Homes

[Craig White]

get rid of the homes definition...why do you need it on a member server?

Craig

On Mon, 2006-03-27 at 12:44 -0500, Trimble, Ronald D wrote:
> Domain member.
> 
> -Original Message-
> From: Guillermo Gutierrez [mailto:[EMAIL PROTECTED] 
> Sent: Monday, March 27, 2006 12:44 PM
> To: Trimble, Ronald D; Daniel Northam; Craig White;
> samba@lists.samba.org
> Subject: RE: [Samba] Trouble with Homes
> 
> do you have this samba server as a domain member or is it a standalone?
> 
> -Original Message-
> From: Trimble, Ronald D [mailto:[EMAIL PROTECTED]
> Sent: Monday, March 27, 2006 9:39 AM
> To: Daniel Northam; Guillermo Gutierrez; Craig White;
> samba@lists.samba.org
> Subject: RE: [Samba] Trouble with Homes
> 
> 
> I am not using LDAP, so the SIDs shouldn't be an issue.
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Daniel Northam
> Sent: Monday, March 27, 2006 11:49 AM
> To: Guillermo Gutierrez; Craig White; samba@lists.samba.org
> Subject: RE: [Samba] Trouble with Homes
> 
> Check your SID's I had that same problem and samba was advising Auth
> succeeded but it still wouldn't let me in. Checked my SID's and
> somewhere down the line I had changed one of my SID's. I corrected that
> in LDAP and then I was able to login.
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf
> Of Guillermo Gutierrez
> Sent: Monday, March 27, 2006 8:45 AM
> To: Craig White; samba@lists.samba.org
> Subject: RE: [Samba] Trouble with Homes
> 
> If you are integrating the samba server into a windows domain, you might
> want to try setting the valid users line like this: "valid users =
> %D\%S"
> 
> that was my problem until I did that.
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
> Behalf Of Craig White
> Sent: Monday, March 27, 2006 8:34 AM
> To: samba@lists.samba.org
> Subject: Re: [Samba] Trouble with Homes
> 
> 
> On Mon, 2006-03-27 at 11:23 -0500, Trimble, Ronald D wrote:
> > I am having trouble with getting my Homes section to work properly.
> > When I browse to the server from a Windows client, I can see my home
> > directory.  However, when I try to access it, it challenges me for a
> > userID and password.  No matter what I enter, I will not allow me
> > access.  Can someone point me in the right direction to solve this?
> > 
> >  
> > 
> > Here are the errors...
> > 
> >  
> > 
> > [2006/03/27 11:19:22, 0] smbd/service.c:make_connection(798)
> > 
> >   192.63.212.176 (192.63.212.176) couldn't find service .
> > 
> > [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> > 
> >   user 'NA\trimblrd' (from session setup) not permitted to access this
> > share (trimblrd)
> > 
> > [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> > 
> >   user 'NA\trimblrd' (from session setup) not permitted to access this
> > share (trimblrd)
> > 
> > [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> > 
> >   user 'NA\trimblrd' (from session setup) not permitted to access this
> > share (trimblrd)
> > 
> > [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> > 
> >   user 'NA\trimblrd' (from session setup) not permitted to access this
> > share (trimblrd)
> > 
> > [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> > 
> >   user 'NA\trimblrd' (from session setup) not permitted to access this
> > share (trimblrd)
> > 
> > [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> > 
> >   user 'NA\trimblrd' (from session setup) not permitted to access this
> > share (trimblrd)
> > 
> > [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> > 
> >   user 'NA\trimblrd' (from session setup) not permitted to access this
> > share (trimblrd)
> > 
> > [2006/03/27 11:19:32, 2] smbd/service.c:make_connection_snum(318)
> > 
> >   user 'NA\trimblrd' (from session setup) not permitted to access this
> > share (trimblrd)
> > 
> >  
> > 
> > And here is the relevant section of the smb.conf...
> > 
> >  
> > 
> > [homes]
> > 
> > comment = Home Directories
> > 
> > valid users = %S
> > 
> > browseable = No
> > 
> > read only = No
> > 
> > create mask = 0660
> > 
> > directory mask = 0770
> 
> try putting a valid path that the users have write access to their
> home...
> 
> [homes]
> comment = Home Directories
> path = /home/samba/homes
> browseable = no
> writable = yes
> valid users = %S
> create mask = 600
> directory mask = 700
> 
> # ls -ld /home/samba/homes
> drwxrwx---  2 root dom_users 4096 Jun 23  2003 /home/samba/homes
> 
> maybe even get crazy enough to create directories in /home/samba/homes
> for each user...
> 
> Craig
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> -- 
> To unsubscribe from this 

RE: [Samba] Trouble with Homes

[Trimble, Ronald D]

Domain member.

-Original Message-
From: Guillermo Gutierrez [mailto:[EMAIL PROTECTED] 
Sent: Monday, March 27, 2006 12:44 PM
To: Trimble, Ronald D; Daniel Northam; Craig White;
samba@lists.samba.org
Subject: RE: [Samba] Trouble with Homes

do you have this samba server as a domain member or is it a standalone?

-Original Message-
From: Trimble, Ronald D [mailto:[EMAIL PROTECTED]
Sent: Monday, March 27, 2006 9:39 AM
To: Daniel Northam; Guillermo Gutierrez; Craig White;
samba@lists.samba.org
Subject: RE: [Samba] Trouble with Homes


I am not using LDAP, so the SIDs shouldn't be an issue.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Daniel Northam
Sent: Monday, March 27, 2006 11:49 AM
To: Guillermo Gutierrez; Craig White; samba@lists.samba.org
Subject: RE: [Samba] Trouble with Homes

Check your SID's I had that same problem and samba was advising Auth
succeeded but it still wouldn't let me in. Checked my SID's and
somewhere down the line I had changed one of my SID's. I corrected that
in LDAP and then I was able to login.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
Of Guillermo Gutierrez
Sent: Monday, March 27, 2006 8:45 AM
To: Craig White; samba@lists.samba.org
Subject: RE: [Samba] Trouble with Homes

If you are integrating the samba server into a windows domain, you might
want to try setting the valid users line like this: "valid users =
%D\%S"

that was my problem until I did that.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Craig White
Sent: Monday, March 27, 2006 8:34 AM
To: samba@lists.samba.org
Subject: Re: [Samba] Trouble with Homes


On Mon, 2006-03-27 at 11:23 -0500, Trimble, Ronald D wrote:
> I am having trouble with getting my Homes section to work properly.
> When I browse to the server from a Windows client, I can see my home
> directory.  However, when I try to access it, it challenges me for a
> userID and password.  No matter what I enter, I will not allow me
> access.  Can someone point me in the right direction to solve this?
> 
>  
> 
> Here are the errors...
> 
>  
> 
> [2006/03/27 11:19:22, 0] smbd/service.c:make_connection(798)
> 
>   192.63.212.176 (192.63.212.176) couldn't find service .
> 
> [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:32, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
>  
> 
> And here is the relevant section of the smb.conf...
> 
>  
> 
> [homes]
> 
> comment = Home Directories
> 
> valid users = %S
> 
> browseable = No
> 
> read only = No
> 
> create mask = 0660
> 
> directory mask = 0770

try putting a valid path that the users have write access to their
home...

[homes]
comment = Home Directories
path = /home/samba/homes
browseable = no
writable = yes
valid users = %S
create mask = 600
directory mask = 700

# ls -ld /home/samba/homes
drwxrwx---  2 root dom_users 4096 Jun 23  2003 /home/samba/homes

maybe even get crazy enough to create directories in /home/samba/homes
for each user...

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Trouble with Homes

[Guillermo Gutierrez]

do you have this samba server as a domain member or is it a standalone?

-Original Message-
From: Trimble, Ronald D [mailto:[EMAIL PROTECTED]
Sent: Monday, March 27, 2006 9:39 AM
To: Daniel Northam; Guillermo Gutierrez; Craig White;
samba@lists.samba.org
Subject: RE: [Samba] Trouble with Homes


I am not using LDAP, so the SIDs shouldn't be an issue.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Daniel Northam
Sent: Monday, March 27, 2006 11:49 AM
To: Guillermo Gutierrez; Craig White; samba@lists.samba.org
Subject: RE: [Samba] Trouble with Homes

Check your SID's I had that same problem and samba was advising Auth
succeeded but it still wouldn't let me in. Checked my SID's and
somewhere down the line I had changed one of my SID's. I corrected that
in LDAP and then I was able to login.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
Of Guillermo Gutierrez
Sent: Monday, March 27, 2006 8:45 AM
To: Craig White; samba@lists.samba.org
Subject: RE: [Samba] Trouble with Homes

If you are integrating the samba server into a windows domain, you might
want to try setting the valid users line like this: "valid users =
%D\%S"

that was my problem until I did that.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Craig White
Sent: Monday, March 27, 2006 8:34 AM
To: samba@lists.samba.org
Subject: Re: [Samba] Trouble with Homes


On Mon, 2006-03-27 at 11:23 -0500, Trimble, Ronald D wrote:
> I am having trouble with getting my Homes section to work properly.
> When I browse to the server from a Windows client, I can see my home
> directory.  However, when I try to access it, it challenges me for a
> userID and password.  No matter what I enter, I will not allow me
> access.  Can someone point me in the right direction to solve this?
> 
>  
> 
> Here are the errors...
> 
>  
> 
> [2006/03/27 11:19:22, 0] smbd/service.c:make_connection(798)
> 
>   192.63.212.176 (192.63.212.176) couldn't find service .
> 
> [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:32, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
>  
> 
> And here is the relevant section of the smb.conf...
> 
>  
> 
> [homes]
> 
> comment = Home Directories
> 
> valid users = %S
> 
> browseable = No
> 
> read only = No
> 
> create mask = 0660
> 
> directory mask = 0770

try putting a valid path that the users have write access to their
home...

[homes]
comment = Home Directories
path = /home/samba/homes
browseable = no
writable = yes
valid users = %S
create mask = 600
directory mask = 700

# ls -ld /home/samba/homes
drwxrwx---  2 root dom_users 4096 Jun 23  2003 /home/samba/homes

maybe even get crazy enough to create directories in /home/samba/homes
for each user...

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Trouble with Homes

[Trimble, Ronald D]

I am not using LDAP, so the SIDs shouldn't be an issue.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Daniel Northam
Sent: Monday, March 27, 2006 11:49 AM
To: Guillermo Gutierrez; Craig White; samba@lists.samba.org
Subject: RE: [Samba] Trouble with Homes

Check your SID's I had that same problem and samba was advising Auth
succeeded but it still wouldn't let me in. Checked my SID's and
somewhere down the line I had changed one of my SID's. I corrected that
in LDAP and then I was able to login.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
Of Guillermo Gutierrez
Sent: Monday, March 27, 2006 8:45 AM
To: Craig White; samba@lists.samba.org
Subject: RE: [Samba] Trouble with Homes

If you are integrating the samba server into a windows domain, you might
want to try setting the valid users line like this: "valid users =
%D\%S"

that was my problem until I did that.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Craig White
Sent: Monday, March 27, 2006 8:34 AM
To: samba@lists.samba.org
Subject: Re: [Samba] Trouble with Homes


On Mon, 2006-03-27 at 11:23 -0500, Trimble, Ronald D wrote:
> I am having trouble with getting my Homes section to work properly.
> When I browse to the server from a Windows client, I can see my home
> directory.  However, when I try to access it, it challenges me for a
> userID and password.  No matter what I enter, I will not allow me
> access.  Can someone point me in the right direction to solve this?
> 
>  
> 
> Here are the errors...
> 
>  
> 
> [2006/03/27 11:19:22, 0] smbd/service.c:make_connection(798)
> 
>   192.63.212.176 (192.63.212.176) couldn't find service .
> 
> [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:32, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
>  
> 
> And here is the relevant section of the smb.conf...
> 
>  
> 
> [homes]
> 
> comment = Home Directories
> 
> valid users = %S
> 
> browseable = No
> 
> read only = No
> 
> create mask = 0660
> 
> directory mask = 0770

try putting a valid path that the users have write access to their
home...

[homes]
comment = Home Directories
path = /home/samba/homes
browseable = no
writable = yes
valid users = %S
create mask = 600
directory mask = 700

# ls -ld /home/samba/homes
drwxrwx---  2 root dom_users 4096 Jun 23  2003 /home/samba/homes

maybe even get crazy enough to create directories in /home/samba/homes
for each user...

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Trouble with Homes

[Daniel Northam]

Check your SID's I had that same problem and samba was advising Auth
succeeded but it still wouldn't let me in. Checked my SID's and
somewhere down the line I had changed one of my SID's. I corrected that
in LDAP and then I was able to login.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
Of Guillermo Gutierrez
Sent: Monday, March 27, 2006 8:45 AM
To: Craig White; samba@lists.samba.org
Subject: RE: [Samba] Trouble with Homes

If you are integrating the samba server into a windows domain, you might
want to try setting the valid users line like this: "valid users =
%D\%S"

that was my problem until I did that.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Craig White
Sent: Monday, March 27, 2006 8:34 AM
To: samba@lists.samba.org
Subject: Re: [Samba] Trouble with Homes


On Mon, 2006-03-27 at 11:23 -0500, Trimble, Ronald D wrote:
> I am having trouble with getting my Homes section to work properly.
> When I browse to the server from a Windows client, I can see my home
> directory.  However, when I try to access it, it challenges me for a
> userID and password.  No matter what I enter, I will not allow me
> access.  Can someone point me in the right direction to solve this?
> 
>  
> 
> Here are the errors...
> 
>  
> 
> [2006/03/27 11:19:22, 0] smbd/service.c:make_connection(798)
> 
>   192.63.212.176 (192.63.212.176) couldn't find service .
> 
> [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:32, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
>  
> 
> And here is the relevant section of the smb.conf...
> 
>  
> 
> [homes]
> 
> comment = Home Directories
> 
> valid users = %S
> 
> browseable = No
> 
> read only = No
> 
> create mask = 0660
> 
> directory mask = 0770

try putting a valid path that the users have write access to their
home...

[homes]
comment = Home Directories
path = /home/samba/homes
browseable = no
writable = yes
valid users = %S
create mask = 600
directory mask = 700

# ls -ld /home/samba/homes
drwxrwx---  2 root dom_users 4096 Jun 23  2003 /home/samba/homes

maybe even get crazy enough to create directories in /home/samba/homes
for each user...

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Trouble with Homes

[Trimble, Ronald D]

I made the changes to my configuration so that it is now

[homes]
comment = Home Directories
valid users = %D\%S
browseable = No
read only = No
create mask = 0660
directory mask = 0770

However, after a forced reload of smb, I still get the same errors.

[2006/03/27 11:52:32, 2] param/loadparm.c:do_section(3681)
  Processing section "[homes]"
[2006/03/27 11:52:32, 2] param/loadparm.c:do_section(3681)
  Processing section "[samba]"
[2006/03/27 11:52:32, 2] param/loadparm.c:do_section(3681)
  Processing section "[ISOs]"
[2006/03/27 11:52:32, 2] param/loadparm.c:do_section(3681)
  Processing section "[shared]"
[2006/03/27 11:52:32, 2] param/loadparm.c:do_section(3681)
  Processing section "[images]"
[2006/03/27 11:52:32, 2] lib/interface.c:add_interface(81)
  added interface ip=192.63.225.216 bcast=192.63.225.223
nmask=255.255.255.224
[2006/03/27 11:53:07, 0] smbd/service.c:make_connection(798)
  192.63.212.176 (192.63.212.176) couldn't find service .
[2006/03/27 11:53:09, 2] smbd/service.c:make_connection_snum(318)
  user 'NA\trimblrd' (from session setup) not permitted to access this
share (trimblrd)
[2006/03/27 11:53:09, 2] smbd/service.c:make_connection_snum(318)
  user 'NA\trimblrd' (from session setup) not permitted to access this
share (trimblrd)
[2006/03/27 11:53:10, 2] smbd/service.c:make_connection_snum(318)
  user 'NA\trimblrd' (from session setup) not permitted to access this
share (trimblrd)
[2006/03/27 11:53:10, 2] smbd/service.c:make_connection_snum(318)
  user 'NA\trimblrd' (from session setup) not permitted to access this
share (trimblrd)
[2006/03/27 11:53:10, 2] smbd/service.c:make_connection_snum(318)
  user 'NA\trimblrd' (from session setup) not permitted to access this
share (trimblrd)
[2006/03/27 11:53:10, 2] smbd/service.c:make_connection_snum(318)
  user 'NA\trimblrd' (from session setup) not permitted to access this
share (trimblrd)
[2006/03/27 11:53:10, 2] smbd/service.c:make_connection_snum(318)
  user 'NA\trimblrd' (from session setup) not permitted to access this
share (trimblrd)
[2006/03/27 11:53:14, 2] smbd/service.c:make_connection_snum(318)
  user 'NA\trimblrd' (from session setup) not permitted to access this
share (trimblrd)

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Guillermo Gutierrez
Sent: Monday, March 27, 2006 11:45 AM
To: Craig White; samba@lists.samba.org
Subject: RE: [Samba] Trouble with Homes

If you are integrating the samba server into a windows domain, you might
want to try setting the valid users line like this: "valid users =
%D\%S"

that was my problem until I did that.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Craig White
Sent: Monday, March 27, 2006 8:34 AM
To: samba@lists.samba.org
Subject: Re: [Samba] Trouble with Homes


On Mon, 2006-03-27 at 11:23 -0500, Trimble, Ronald D wrote:
> I am having trouble with getting my Homes section to work properly.
> When I browse to the server from a Windows client, I can see my home
> directory.  However, when I try to access it, it challenges me for a
> userID and password.  No matter what I enter, I will not allow me
> access.  Can someone point me in the right direction to solve this?
> 
>  
> 
> Here are the errors...
> 
>  
> 
> [2006/03/27 11:19:22, 0] smbd/service.c:make_connection(798)
> 
>   192.63.212.176 (192.63.212.176) couldn't find service .
> 
> [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:32, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
>  
> 
> And here is the relevant section of the smb.conf...
> 
>  
> 
> [homes]
> 
> comment = Home Directories
> 
> valid users = %S
> 
> browseable = No
> 
> read only = No
> 
> cre

RE: [Samba] Trouble with Homes

[Guillermo Gutierrez]

If you are integrating the samba server into a windows domain, you might want 
to try setting the valid users line like this: "valid users = %D\%S"

that was my problem until I did that.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Craig White
Sent: Monday, March 27, 2006 8:34 AM
To: samba@lists.samba.org
Subject: Re: [Samba] Trouble with Homes


On Mon, 2006-03-27 at 11:23 -0500, Trimble, Ronald D wrote:
> I am having trouble with getting my Homes section to work properly.
> When I browse to the server from a Windows client, I can see my home
> directory.  However, when I try to access it, it challenges me for a
> userID and password.  No matter what I enter, I will not allow me
> access.  Can someone point me in the right direction to solve this?
> 
>  
> 
> Here are the errors...
> 
>  
> 
> [2006/03/27 11:19:22, 0] smbd/service.c:make_connection(798)
> 
>   192.63.212.176 (192.63.212.176) couldn't find service .
> 
> [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:32, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
>  
> 
> And here is the relevant section of the smb.conf...
> 
>  
> 
> [homes]
> 
> comment = Home Directories
> 
> valid users = %S
> 
> browseable = No
> 
> read only = No
> 
> create mask = 0660
> 
> directory mask = 0770

try putting a valid path that the users have write access to their
home...

[homes]
comment = Home Directories
path = /home/samba/homes
browseable = no
writable = yes
valid users = %S
create mask = 600
directory mask = 700

# ls -ld /home/samba/homes
drwxrwx---  2 root dom_users 4096 Jun 23  2003 /home/samba/homes

maybe even get crazy enough to create directories in /home/samba/homes
for each user...

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Trouble with Homes

[Craig White]

On Mon, 2006-03-27 at 11:23 -0500, Trimble, Ronald D wrote:
> I am having trouble with getting my Homes section to work properly.
> When I browse to the server from a Windows client, I can see my home
> directory.  However, when I try to access it, it challenges me for a
> userID and password.  No matter what I enter, I will not allow me
> access.  Can someone point me in the right direction to solve this?
> 
>  
> 
> Here are the errors...
> 
>  
> 
> [2006/03/27 11:19:22, 0] smbd/service.c:make_connection(798)
> 
>   192.63.212.176 (192.63.212.176) couldn't find service .
> 
> [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
> [2006/03/27 11:19:32, 2] smbd/service.c:make_connection_snum(318)
> 
>   user 'NA\trimblrd' (from session setup) not permitted to access this
> share (trimblrd)
> 
>  
> 
> And here is the relevant section of the smb.conf...
> 
>  
> 
> [homes]
> 
> comment = Home Directories
> 
> valid users = %S
> 
> browseable = No
> 
> read only = No
> 
> create mask = 0660
> 
> directory mask = 0770

try putting a valid path that the users have write access to their
home...

[homes]
comment = Home Directories
path = /home/samba/homes
browseable = no
writable = yes
valid users = %S
create mask = 600
directory mask = 700

# ls -ld /home/samba/homes
drwxrwx---  2 root dom_users 4096 Jun 23  2003 /home/samba/homes

maybe even get crazy enough to create directories in /home/samba/homes
for each user...

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Trouble with Homes

[Trimble, Ronald D]

I am having trouble with getting my Homes section to work properly.
When I browse to the server from a Windows client, I can see my home
directory.  However, when I try to access it, it challenges me for a
userID and password.  No matter what I enter, I will not allow me
access.  Can someone point me in the right direction to solve this?

 

Here are the errors...

 

[2006/03/27 11:19:22, 0] smbd/service.c:make_connection(798)

  192.63.212.176 (192.63.212.176) couldn't find service .

[2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)

  user 'NA\trimblrd' (from session setup) not permitted to access this
share (trimblrd)

[2006/03/27 11:19:23, 2] smbd/service.c:make_connection_snum(318)

  user 'NA\trimblrd' (from session setup) not permitted to access this
share (trimblrd)

[2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)

  user 'NA\trimblrd' (from session setup) not permitted to access this
share (trimblrd)

[2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)

  user 'NA\trimblrd' (from session setup) not permitted to access this
share (trimblrd)

[2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)

  user 'NA\trimblrd' (from session setup) not permitted to access this
share (trimblrd)

[2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)

  user 'NA\trimblrd' (from session setup) not permitted to access this
share (trimblrd)

[2006/03/27 11:19:24, 2] smbd/service.c:make_connection_snum(318)

  user 'NA\trimblrd' (from session setup) not permitted to access this
share (trimblrd)

[2006/03/27 11:19:32, 2] smbd/service.c:make_connection_snum(318)

  user 'NA\trimblrd' (from session setup) not permitted to access this
share (trimblrd)

 

And here is the relevant section of the smb.conf...

 

[homes]

comment = Home Directories

valid users = %S

browseable = No

read only = No

create mask = 0660

directory mask = 0770

 

Thanks for the help!!!

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Authentication failing

[Matt Smith]

ACK! Ok this morning for some strange reason when trying to resolve my
samba server authentication fails ... it can ping the host name and it
tries to connect but authentication fails, if I connect to the IP all
works fine, this only started happening this AM any ideas?


My enviro is a win2k3 AD domain and a samba file server ...

everything seems to run fine except for when users try to map to
machinename\share it fails, but works with ip_address\share


Thanks a bunch
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] cannot see the samba server when browsing

[Robert Mortimer]

Name resolution for windows machines is by WINS or Broadcast. Broadcast is
not going to like the firewall. Wins could be configured if you look up the
ports to allow and run the SAMBA wins server on the linux machine. My only
question is what do you not trust on your local network (why the firewall?)

Robert

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
> ]On Behalf Of Jon Miller
> Sent: 27 March 2006 14:09
> To: samba@lists.samba.org
> Subject: [Samba] cannot see the samba server when browsing
>
>
> I would like to know if there is a rule that can be created in
> iptables that would allow a samba server shares to be seen on the
> internal LAN.  The interface is on eth0 the ip address of eth0 is
> 192.168.0.1.  It seems that when I applied a firewall I have
> blocked smb from showing up.  Now the users cannot see any shares
> via Network Neighborhood , but I can map a drive via
> Start->Run->\\192.168.0.1\sharename.
> This is on a Debian 3.1 server.
>
> Thanks
>
> Jon
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] cannot see the samba server when browsing

[Jon Miller]

I would like to know if there is a rule that can be created in iptables that 
would allow a samba server shares to be seen on the internal LAN.  The 
interface is on eth0 the ip address of eth0 is 192.168.0.1.  It seems that when 
I applied a firewall I have blocked smb from showing up.  Now the users cannot 
see any shares via Network Neighborhood , but I can map a drive via 
Start->Run->\\192.168.0.1\sharename.
This is on a Debian 3.1 server.

Thanks

Jon





I would like to know if there is a rule that can be created in iptables 
that would allow a samba server shares to be seen on the internal LAN.  
The 
interface is on eth0 the ip address of eth0 is 192.168.0.1.  It seems that 
when I applied a firewall I have blocked smb from showing up.  Now the 
users cannot see any shares via Network Neighborhood , but I can map a drive 
via 
Start->Run->\\192.168.0.1\sharename.
This is on a Debian 3.1 server.
 
Thanks
 
Jon
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] access share on machine running server again

[Dave S]

Hi all,

A while ago I posted about needing to access samba shares on the same machine 
that the samba server was running on.

Someone posted a script to mount the shares and all was well till I upgraded 
my PC hadware and had a small accident :(

I have tried modifing /etc/init.d/samba adding ...

  mount -t smbfs //127.0.0.1/common /mnt/samba/common -o 
credentials=/home/dave/.smbpw,uid=dave,gid=dave,fmask=660,dmask=770 
> /dev/null
mount -t smbfs //127.0.0.1/windows /mnt/samba/windows -o 
credentials=/home/dave/.smbpw,uid=dave,gid=dave,fmask=660,dmask=770 
> /dev/null
mount -t smbfs //127.0.0.1/archive /mnt/samba/archive -o 
credentials=/home/dave/.smbpw,uid=dave,gid=dave,fmask=660,dmask=770 
> /dev/null

and 

 umount //127.0.0.1/common
 umount //127.0.0.1/windows
 umount //127.0.0.1/archive

To the appropriate bits, this works most of the time but fails to mount 1 or 
more shares randomly. Thinking this was because the samba demons had not had 
time to startup properly I added a 10s delay, still random fail to mounts.

Does anyone have any ideas ?

Oh yes, if I open an xterm and '/etc/init.d/samba restart' it always mounts 
the shares AOK

Dave


#!/bin/sh
#
# Start/stops the Samba daemons (nmbd and smbd).
#
#

# Defaults
RUN_MODE="daemons"

# Reads config file (will override defaults above)
[ -r /etc/default/samba ] && . /etc/default/samba

NMBDPID=/var/run/samba/nmbd.pid
SMBDPID=/var/run/samba/smbd.pid

# clear conflicting settings from the environment
unset TMPDIR

# See if the daemons are there
test -x /usr/sbin/nmbd -a -x /usr/sbin/smbd || exit 0

. /lib/lsb/init-functions

case "$1" in
start)
log_begin_msg "Starting Samba daemons.."

if ! start-stop-daemon --start --quiet --oknodo 
--exec /usr/sbin/nmbd -- -D; then
log_end_msg 1
exit 1
fi

if [ "$RUN_MODE" != "inetd" ]; then
if ! start-stop-daemon --start --quiet --oknodo 
--exec /usr/sbin/smbd -- -D; then
log_end_msg 1
exit 1
fi
fi


mount -t smbfs //127.0.0.1/common /mnt/samba/common -o 
credentials=/home/dave/.smbpw,uid=dave,gid=dave,fmask=660,dmask=770 
> /dev/null
mount -t smbfs //127.0.0.1/windows /mnt/samba/windows -o 
credentials=/home/dave/.smbpw,uid=dave,gid=dave,fmask=660,dmask=770 
> /dev/null
mount -t smbfs //127.0.0.1/archive /mnt/samba/archive -o 
credentials=/home/dave/.smbpw,uid=dave,gid=dave,fmask=660,dmask=770 
> /dev/null


log_end_msg 0
;;
stop)
log_begin_msg "Stopping Samba daemons..."

start-stop-daemon --stop --quiet --pidfile $NMBDPID
# Wait a little and remove stale PID file
sleep 1
if [ -f $NMBDPID ] && ! ps h `cat $NMBDPID` > /dev/null
then
# Stale PID file (nmbd was succesfully stopped),
# remove it (should be removed by nmbd itself IMHO.)
rm -f $NMBDPID
fi

if [ "$RUN_MODE" != "inetd" ]; then
start-stop-daemon --stop --quiet --pidfile $SMBDPID
# Wait a little and remove stale PID file
sleep 1
if [ -f $SMBDPID ] && ! ps h `cat $SMBDPID` 
> /dev/null
then
# Stale PID file (nmbd was succesfully 
stopped),
# remove it (should be removed by smbd itself 
IMHO.)
rm -f $SMBDPID
fi
fi


umount //127.0.0.1/common
umount //127.0.0.1/windows
umount //127.0.0.1/archive


log_end_msg 0

;;
reload)
log_begin_msg "Reloading /etc/samba/smb.conf (smbd only)..."

start-stop-daemon --stop --signal HUP --pidfile $SMBDPID

log_end_msg 0
;;
restart|force-reload)
$0 stop
sleep 1
$0 start
;;
*)
log_success_msg "Usage: /etc/init.d/samba {start|stop|reload|
restart|force-reload}"
exit 1
;;
esac

exit 0
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba Processes Not Getting Killed

[mallapadi niranjan]

Hi all

We have Samba PDC with OpenLDAP (samba 3.0.21c openldap 2.3.19) . we have
another linux system which is
acting as Domain member server( samba 3.0.21c) . On the domain member server
we
have declared some  shares  which get mapped to my win2k clients as drives.
when client access the share declared in Domain Member Server, the samba
creates smbd process by the user id
After client closes the shares and logs off , the smbd process created by
that users still exists and never gets killed
and about 100 smbd process are getting created there by samba getting hanged
and unable to process the client requests.

The following is the ps -aux | grep smbd | grep testuser

output of smbd process by a user named "testuser"
###
testuser   12844  0.0  0.4 14804 4696 ?S13:33   0:00
/usr/local/samba3c2/sbin/smbd -D
testuser   12845  0.0  0.4 14760 4828 ?S13:34   0:00
/usr/local/samba3c2/sbin/smbd -D
testuser   12998  0.0  0.4 14808 4652 ?R13:42   0:00
/usr/local/samba3c2/sbin/smbd -D
testuser   13009  0.0  0.4 14772 4452 ?S13:44   0:00
/usr/local/samba3c2/sbin/smbd -D
testuser   13348  0.0  0.4 14784 4292 ?S14:55   0:00
/usr/local/samba3c2/sbin/smbd -D
testuser   13392  0.0  0.4 14792 4604 ?S14:57   0:00
/usr/local/samba3c2/sbin/smbd -D
testuser   13418  0.0  0.4 14792 4508 ?S14:59   0:00
/usr/local/samba3c2/sbin/smbd -D
testuser   13454  0.0  0.4 14832 4428 ?S15:05   0:00
/usr/local/samba3c2/sbin/smbd -D
testuser   13854  0.0  0.4 14888 4492 ?S15:57   0:00
/usr/local/samba3c2/sbin/smbd -D
###

The above output is of the smbd process of the  user "testuser" which got
created when the user first accessed the
shares . but when the user logged off and did not login in any system nor
anybody has accessed the share.
but still the above process still remains and never gets killed.

The following is the output of the ps -aux | grep smbd
#
root  2324  0.0  0.3 14108 3656 ?Ss   Mar25   0:00
/usr/local/samba3c2/sbin/smbd -D
root  2348  0.0  0.3 14476 4036 ?SMar25   0:00
/usr/local/samba3c2/sbin/smbd -D
kk5535   11581  0.0  0.4 14576 4632 ?S09:04   0:00
/usr/local/samba3c2/sbin/smbd -D
mp1414   11604  0.0  0.4 14876 4944 ?S09:11   0:02
/usr/local/samba3c2/sbin/smbd -D
root 11616  0.0  0.4 14896 4880 ?S09:17   0:02
/usr/local/samba3c2/sbin/smbd -D
root 11657  0.0  0.4 14788 4660 ?S09:31   0:01
/usr/local/samba3c2/sbin/smbd -D
pk38311835  0.0  0.4 14708 4612 ?S10:09   0:00
/usr/local/samba3c2/sbin/smbd -D
sv23411847  0.0  0.4 14576 4492 ?S10:14   0:00
/usr/local/samba3c2/sbin/smbd -D
sv23411978  0.0  0.4 14912 4808 ?S10:34   0:00
/usr/local/samba3c2/sbin/smbd -D
sv23411981  0.0  0.4 14576 4360 ?S10:35   0:00
/usr/local/samba3c2/sbin/smbd -D
root 11987  0.0  0.4 14736 4544 ?S10:42   0:00
/usr/local/samba3c2/sbin/smbd -D
pk38311989  0.0  0.4 14576 4412 ?S10:46   0:00
/usr/local/samba3c2/sbin/smbd -D
root 12008  0.0  0.4 14732 4896 ?S11:00   0:01
/usr/local/samba3c2/sbin/smbd -D
root 12061  0.0  0.4 14652 4492 ?S11:23   0:00
/usr/local/samba3c2/sbin/smbd -D
root 12065  0.0  0.4 14844 4880 ?S11:28   0:04
/usr/local/samba3c2/sbin/smbd -D
root 12548  0.0  0.4 14920 4680 ?S13:13   0:00
/usr/local/samba3c2/sbin/smbd -D
yc1426   12651  0.0  0.4 14776 4640 ?S13:20   0:00
/usr/local/samba3c2/sbin/smbd -D
root 12652  0.0  0.4 14996 4860 ?S13:20   0:01
/usr/local/samba3c2/sbin/smbd -D
kr1233   12844  0.0  0.4 14804 4696 ?S13:33   0:00
/usr/local/samba3c2/sbin/smbd -D
kr1233   12845  0.0  0.4 14760 4828 ?S13:34   0:00
/usr/local/samba3c2/sbin/smbd -D
kr1233   12998  0.0  0.4 14808 4652 ?S13:42   0:00
/usr/local/samba3c2/sbin/smbd -D
1144 13001  0.0  0.4 14788 4776 ?S13:43   0:00
/usr/local/samba3c2/sbin/smbd -D
kr1233   13009  0.0  0.4 14772 4452 ?S13:44   0:00
/usr/local/samba3c2/sbin/smbd -D
root 13012  0.0  0.4 15012 4756 ?S13:45   0:00
/usr/local/samba3c2/sbin/smbd -D
root 13015  0.0  0.4 14640 4412 ?S13:45   0:00
/usr/local/samba3c2/sbin/smbd -D
gr24913059  0.0  0.4 14800 4624 ?S14:09   0:00
/usr/local/samba3c2/sbin/smbd -D
gr24913066  0.0  0.4 14868 4628 ?S14:12   0:00
/usr/local/samba3c2/sbin/smbd -D
gr24913069  0.0  0.4 14840 4568 ?S14:13   0:00
/usr/local/samba3c2/sbin/smbd -D
sf1537   13070  0.0  0.4 14748 4700 ?S14:13   0:00
/usr/local/

Re: [Samba] Smbd hanging

[Matt Lung]

mallapadi niranjan wrote:

Hi matt

Did you get any success.
  


No luck yet.  I've tried to get help with this before but all I've ever 
gotten are replies from other people having the same problem with the 
SMBD's growing until the service is unreachable.  I've tried to set a 
few parameters different like 'machine password timeout' and turned 
kernel oplocks off, but none of which helped.  It always seems like it 
does at first because it doesn't happen for a while, but then eventually 
it does reoccur.  It doesn't really happen in any sort of set period.  
It could crash one day, and then not crash for 3 months.  On the other 
hand I've seen it crash one day and then crash right away the next day.  
I wish I could explain it, but I'm really at a loss and thats why I'm on 
here asking for help.  I have other domain member servers with exactly 
the same samba version and config parameters that never exhibit this 
behavior. 




one more query , do you have logon scripts in place. ?
  


Yes we do and they work fine (not on the server with our problems 
however).  I didn't see a netlogon share or parameters in your smb.conf 
file to specify your logon scripts.  You may try adding that and see if 
that helps.


logon script = %U.bat

[netlogon]
   comment = Network Logon Service
   path = /home/netlogon
   invalid users = bin adm daemon lp sync shutdown halt mail news 
uucp operator games gopher ftp gdm postgres vacation named rebound

   guest ok = Yes
   browseable = No


at my server. i have place logon scripts but are not working correctly
some time logon scripts run when user logons. some times it doesn't run,

when runs gives semaphore error
below is my configuration, can you help me out.

I have a samba 3.0.21c with ldap backend , i have about 100 users connecting
to my domain.
i have a linux system which acts as a file server (prjsrv01) where i have
declared 2 shares.
projects and datalib. The users get drives mapped with the help of logon
script. so i map
projects share as P: drive
net use p: //prjsrv01/projects.
but whent the logon script runs the command. it says
semaphore error.

At the prjsrv01. i increased the log level and the following is the output
of the file . when user locuz logged in.

[2006/03/25 12:43:17, 4] lib/username.c:map_username(143)
  Scanning username map /usr/local/samba3c2/lib/smbusers
[2006/03/25 12:43:17, 3] auth/auth.c:check_ntlm_password(219)
 check_ntlm_password:  Checking password for unmapped user
[MSDPL.COM[EMAIL PROTECTED]
with the new password interface
[2006/03/25 12:43:17, 3] auth/auth.c:check_ntlm_password(222)
  check_ntlm_password:  mapped user is: [MSDPL.COM 
[EMAIL PROTECTED]
[2006/03/25 12:43:17, 3] smbd/sec_ctx.c:push_sec_ctx(256)
 push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2006/03/25 12:43:17, 3] smbd/uid.c:push_conn_ctx(393)
 push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2006/03/25 12:43:17, 3] smbd/sec_ctx.c:set_sec_ctx(288)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/03/25 12:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/03/25 12:43:27, 2] auth/auth.c:check_ntlm_password(317)
  check_ntlm_password:  Authentication for user [locuz] -> [locuz] FAILED
with error NT_STATUS_IO_TIMEOUT
[2006/03/25 12:43:31, 3] smbd/process.c:process_smb(1194)
  Transaction 9 of length 43
[2006/03/25 12:43:31, 3] smbd/process.c:switch_message(993)
  switch message SMBulogoffX (pid 3596) conn 0x0
[2006/03/25 12:43:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/03/25 12:43:31, 3] smbd/reply.c:reply_ulogoffX(1595)
  ulogoff, vuser id 102 does not map to user.
[2006/03/25 12:43:31, 3] smbd/reply.c:reply_ulogoffX(1606)
  ulogoffX vuid=102
[2006/03/25 12:43:31, 3] smbd/process.c:timeout_processing(1447)
  timeout_processing: End of file from client (client has disconnected).
[2006/03/25 12:43:31, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/03/25 12:43:31, 2] smbd/server.c:exit_server(614)
  Closing connections
[2006/03/25 12:43:31, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to
[2006/03/25 12:43:31, 3] smbd/server.c:exit_server(655)
  Server exit (normal exit)
[2006/03/25 12:43:31, 4] lib/username.c:map_username(143)
  Scanning username map /usr/local/samba3c2/lib/smbusers
[2006/03/25 12:43:31, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  Checking password for unmapped user
[MSDPL.COM[EMAIL PROTECTED]
with the new password interface
[2006/03/25 12:43:31, 3] auth/auth.c:check_ntlm_password(222)
  check_ntlm_password:  mapped user is: [MSDPL.COM 
[EMAIL PROTECTED]
[2006/03/25 12:43:31, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2006/03/25 12:43:3

RE: [Samba] SFU Permission Denied

[Bradford, Matthew]

Jeremy,

We have found a solution to our problem, although it is not ideal. We
have used the "force unknown acl user" flag in the smb.conf file,
setting it to "yes". We have used this at the moment as a quick fix to
get around the problem, as we have not set up any authentication
mechanism (winbind) within Samba.

I'll send you the log file when I get a change to copy it over.

Cheers,

Mat 

-Original Message-
From: Jeremy Allison [mailto:[EMAIL PROTECTED] 
Sent: 24 March 2006 17:12
To: Bradford, Matthew
Cc: samba@lists.samba.org
Subject: Re: [Samba] SFU Permission Denied

On Fri, Mar 24, 2006 at 01:00:18PM -, Bradford, Matthew wrote:
> This appears to be an old problem, but is a complete show stopper for 
> us at the moment.
> 
> We are trying to access an NFS file system, via Samba, from a WinXP 
> client. Within Windows itself everything is fine, but when accessing 
> the shares from within an SFU cshell, an error is returned when a file

> is created. The file is successfully created, but a "Permission
Denied"
> error is returned.
> 
> We receive the "Unable to validate owner sid" message in the log file.
> 
> Has any found a solution to this problem yet?
> 
> We are using Samba 3.0.21c and SFU 3.5.

Debug level 10 log please ? I'm guessing that the problem might be the
uid/gid's on the file can't be looked up in the LSA. What
authentication/domain system are you using ?

Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Why does Samba need a password and Windows doesn't

[Robert Mortimer]

A windows machine will try the current logged on user's credentials against
any share thrown at it (often with-out domain or workgroup checks). It can
do this because only one active logged on user is permitted at any one time
and the SMB protocol is it's native protocol. Linux can have multiple active
users on different screens (virtual or real). You can overcome this by
mounting the Windows share automatically in your user's home directory using
SMB mount. Unix to Unix you can use NFS and this allows you the integration
of permissions enjoyed by windows/SMB. Alternatively if you are running a
small private network you can look at allowing guest accounts to remove
logon requirements.

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
> ]On Behalf Of Vayu
> Sent: 27 March 2006 00:13
> To: samba@lists.samba.org
> Subject: [Samba] Why does Samba need a password and Windows doesn't
>
>
> For both my FreeBSD and my Linux machine to access my WinXP
> machine I need to
> supply the username and password.   From the WinXP machine I can
> access both
> the FreeBSD machine and the Linux machine directly, there is no pause for
> username and password.
>
> I would like to not use a password in both directions. If windows
> doesn't need
> it why should Samba?
>
> To make it easy on my pathetic networking skills I've set up the
> exact same
> username and password on all three machines. All three machine
> have the same
> workgroup.  Once I give the password I have successful read/write on all
> machines in both directions.
>
> If the answer is that I need to setup a domain, then I don't
> understand why
> doesn't the WinXP box think that?
>
> Here's my smb.conf for the FreeBSD machine after testparm -s:
> [global]
> workgroup = VAYU
> server string = Akasha
> log file = /var/log/samba/log.%m
> max log size = 50
> dns proxy = No
>
> [satyam]
> comment = Akasha/usr/home/satyam
> path = /usr/home/satyam
> valid users = satyam
> read only = No
>
> [printers]
> comment = All Printers
> path = /var/spool/samba
> printable = Yes
> browseable = No
>
>
> Here's smb.conf for the Linux machine:
> [global]
>   workgroup = VAYU
>   server string = %h server (Samba, Ubuntu)
>   obey pam restrictions = Yes
>   passdb backend = tdbsam, guest
>   passwd program = /usr/bin/passwd %u
>   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
> *Retype\snew\sUNIX\spassword:* %n\n .
>   syslog = 0
>   log file = /var/log/samba/log.%m
>   max log size = 1000
>   max protocol = LANMAN2
>   dns proxy = No
>   panic action = /usr/share/samba/panic-action %d
>   invalid users = root
>
> [Satyam]
>   comment = Santosha-Ubuntu/home/satyam
>   path = /home/satyam
>   valid users = satyam
>   read only = No
>   create mask = 0700
>   directory mask = 0700
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] XP client doesn't log in

[Louis van Belle]

Hi, 

Im running the same configuration, 
>server:~# smbd -V
>Version 3.0.14a-Debian
>serverl:~# slapd -V
>@(#) $OpenLDAP: slapd 2.2.23

i know this problem, i have this every 3 months.
the only solution i found was a server reboot.

restarting samba and/or the slapd ( ldap ) somethimes 
also works. 

Louis

 

>-Oorspronkelijk bericht-
>Van: [EMAIL PROTECTED] 
>[mailto:[EMAIL PROTECTED] 
>Namens Pedro Drimel Neto
>Verzonden: woensdag 22 maart 2006 15:18
>Aan: samba@lists.samba.org
>Onderwerp: [Samba] XP client doesn't log in
>
>Hi all, I'm usigin Samba version 3.0 with OpenLDAP 2.2.23
>
>server:~# smbd -V
>Version 3.0.14a-Debian
>serverl:~# slapd -V
>@(#) $OpenLDAP: slapd 2.2.23
>
>I was using the Windows XP client loggin on Samba PDC but 
>after some days it 
>didn't log in anymore
>
>The client: client$ id added on LDAP and the configurations 
>above are on 
>Windows XP:
>
>Domain member: Digitally encrypt or sign secure channel 
>(always) - disabled
>Domain member: Disable machine account password changes - disabled
>Domain member: Require strong (Windows 2000 or later) session 
>key - disabled
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netlogon\p
>arameters
> "RequireSignOrSeal"=dword:
>
>XP was succesfully put on domain NB
>
>Above are the log files log.10.0.0.2 and log.client of samba server:
>
>log.10.0.0.2
>
>[2006/03/20 11:36:22, 2] lib/access.c:check_access(324)
>Allowed connection from (10.0.0.2)
>[2006/03/20 11:36:22, 2] smbd/sesssetup.c:setup_new_vc_session(608)
>setup_new_vc_session: New VC == 0, if NT4.x compatible we 
>would close all 
>old resources.
>[2006/03/20 11:36:22, 2] smbd/sesssetup.c:setup_new_vc_session(608)
>setup_new_vc_session: New VC == 0, if NT4.x compatible we 
>would close all 
>old resources.
>
>log.client (client = hostname of windows xp)
>
>[2006/03/20 11:35:26, 2] lib/access.c:check_access(324)
>Allowed connection from (10.0.0.2)
>[2006/03/20 11:35:26, 2] lib/smbldap.c:smbldap_open_connection(692)
>smbldap_open_connection: connection opened
>[2006/03/20 11:35:26, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
>init_sam_from_ldap: Entry found for user: client$
>[2006/03/20 11:35:26, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
>init_sam_from_ldap: Entry found for user: client$
>[2006/03/20 11:35:37, 2] smbd/server.c:exit_server(609)
>Closing connections
>[2006/03/20 11:36:22, 2] lib/access.c:check_access(324)
>Allowed connection from (10.0.0.2)
>[2006/03/20 11:36:22, 2] lib/smbldap.c:smbldap_open_connection(692)
>smbldap_open_connection: connection opened
>[2006/03/20 11:36:22, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
>init_sam_from_ldap: Entry found for user: client$
>[2006/03/20 11:36:22, 2] passdb/pdb_ldap.c:init_sam_from_ldap(499)
>init_sam_from_ldap: Entry found for user: client$
>[2006/03/20 11:36:33, 2] smbd/server.c:exit_server(609)
>Closing connections
>
>Someone has any suggestions ?
>
>Regards. 
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/listinfo/samba
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba