Re: [Samba] Re: WINS over subnets
Hoggins! escreveu: Edmundo Valle Neto a écrit : Hoggins! escreveu: Take a look at the chapter of the samba book about cross-subnet browsing, who maintains the browse list is the domain master browser, each subnet must have a local master browser to maintain the browse list for its own network segment and it will sync the list with the domain master browser of the network. In browse.dat only should appear machines that have some service to offer to the network. Almost all the machines of my network offer services (shares), so it's not the problem. Since then, the server should maintain a more complete list : the clients successfully register to it. I must not have understood the behavior of Samba, because I believed you just had to have one WINS server to which all the clients register, so it would maintain a browse list of these clients. I cannot have "slave" servers on the other subnets, that's why I planned on using one single master server for all the subnets. Yes, in that case it should maintain a more complete list. And yes you just must have ONE WINS server. I think you didnt got the point, domain master, local master, domain controllers, wins server, etc are just roles of the same server, enabling some options in smb.conf the same server can be all of them at the same time. BUT, other subnets need local master browsers too, they can be any Windows workstation (normally you should not worry about that), this is one of the reasons that all of them must use the same single WINS server (I am not saying that yours are not), the LMB can be any available workstation (the machines in the subnet should elect one automatically), so any machine ending up beeing a LMB will use the same WINS server to find the DMB and sync. It works that way without you needing to care about it. What is the behavior of your network? Each network only shows its own machines? i.e. Wireless clients only sees each others and samba only sees one XP machine? Wireless clients cannot see the samba server at all? I did not check all the behaviors, but according to what I saw, the wireless clients can see each other (thanks to broadcast), but cannot see the XP box. I must make more checks, since I don't even know if they can see the server. I must admit that I was more preoccupied by the browse.dat list, and my own XP box. Ok, if the wireless clients can see each others probably that segment has an LMB with the browse list of that segment but just isnt passing it to the samba server. About the LMBs I just said that to make it clear, that the other networks dont register themselves directly with samba to be included in the browse.dat file, who does that is the LMB of that segment (as explained before). Wins not only holds the IP address but the roles that these addresses have in the network. Like: "WORKGROUP#1b" ... 1b = Domain Master Browser, and WINS clients access this information to know where they shoul authenticate, sync their browse lists, etc. The WINS file looks fine to me, and all these infos appear, and all the machines and their services also appear. ok. Theres some options to force syncs and announces to other networks too, but I never needed to use them, even in that type of situation with cross-subnets. Yes, maybe because you have several local master browsers that sync to the domain master browser, so these options would be redundant. Anyway, these syncs won't even work, since they rely on broadcast transmissions. Look at was explained above, and about these options I just cited them to say that them exists. Thanks for the help, I'm getting desperate, though I thought it was possible to maintain such a list with only ONE server if the routes and the server's configuration files were correctly set. Yes, it is possible and most of the times the recommended way. Theres some tools and comands to see problems with name resolution on the XP clients, like nbtstat or the netbios browsing console. Putting a log level of 2 in smb.conf, is there any interesting information about elections in the nmbd log? Whould help if you include your smb.conf here too. Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: INTERNAL ERROR: Signal 11 in pid 8928 (3.0.23c)
On Fri, Sep 29, 2006 at 01:37:27PM -0700, Nolan Garrett wrote:
> I've finally found time to recompile and get a backtrace. Here is the
> gdb backtrace:
>
> (gdb) backtrace
> #0 0x00110402 in ?? ()
> #1 0x0071a4a3 in __waitpid_nocancel () from /lib/libc.so.6
> #2 0x006c293f in do_system () from /lib/libc.so.6
> #3 0x0024a03d in system () from /lib/libpthread.so.0
> #4 0x00e42d5d in smb_panic (why=0xf4c037 "internal error") at
> lib/util.c:1601
> #5 0x00e2e67a in sig_fault (sig=11) at lib/fault.c:47
> #6
> #7 0x00e8bcd4 in create_token_from_username (mem_ctx=0x825f268,
> username=0x825f2e8 "MASSIVEGEEK+ngarrett", is_guest=0, uid=0x825f274,
> gid=0x825f278, found_username=0x825f2b0, token=0x825f284)
> at auth/auth_util.c:1222
> #8 0x00e8cce1 in create_local_token (server_info=0x825f268)
> at auth/auth_util.c:987
> #9 0x00e8ead5 in auth_ntlmssp_check_password (ntlmssp_state=0x82265e0,
> user_session_key=0xbff0e0e8, lm_session_key=0xbff0e0dc)
> at auth/auth_ntlmssp.c:124
> #10 0x00d19778 in ntlmssp_server_auth (ntlmssp_state=0x82265e0, request=
> {data = 0x81df898 "NTLMSSP", length = 182, free = 0xe40110
> },
> reply=0xbff0e43c) at libsmb/ntlmssp.c:723
> #11 0x00d17c62 in ntlmssp_update (ntlmssp_state=0x82265e0, in=
> {data = 0x81df898 "NTLMSSP", length = 182, free = 0xe40110
> },
> out=0xbff0e43c) at libsmb/ntlmssp.c:274
> #12 0x00e8e76b in auth_ntlmssp_update (auth_ntlmssp_state=0x8232198,
> request=
> ---Type to continue, or q to quit---
> {data = 0x81df898 "NTLMSSP", length = 182, free = 0xe40110
> }, reply=0xbff0e43c) at auth/auth_ntlmssp.c:204
> #13 0x00ca86b9 in reply_sesssetup_and_X (conn=0x0, inbuf=0x826bf68 "",
> outbuf=0x828c3b0 "", length=280, bufsize=131072) at smbd/sesssetup.c:625
> #14 0x00cd62b0 in switch_message (type=115, inbuf=0x826bf68 "",
> outbuf=0x828c3b0 "", size=280, bufsize=131072) at smbd/process.c:991
> #15 0x00cd73eb in smbd_process () at smbd/process.c:1018
> #16 0x00ef20f0 in main (argc=16777216, argv=0xbff0f5c4) at
> smbd/server.c:1024
>
>
> This means very little to me, hopefully it means more to the developers?
> Is there anything else I can do to get more information for you?
Thanks very much - I really appreciate that info. I think Volker
just fixed it - but we couldn't have found that bug without this
info.
You;ve really helped make Samba a better product and I want to say
thanks !
Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Conclusion - Re: [Samba] Transfer rates faster than 23MBps?
In the interest of closing this loop for the sake of the archives... :) My company has officially thrown in the towel on this issue. Everything we're seeing is suggesting that 22MBps is about as fast as we're going to get with SMB. RedHat, our parent company's IT department (much bigger than ours), the (read: this) Samba Mailing List, and all my techie friends, all agree that we're at a limit. For the parts of our process where higher speed is critical, we'll look into replacing SMB with a more appropriate protocol (eg: FTP or SCP hacked to allow a cipher of "none"). I want to thank everyone who tried to help with suggestions of things to try, areas to look, and what-not. Every time, I'd see something and say "Huh. Haven't tried that!" and got hopeful. Alas, none of it ended up helping, but that's not y'all's fault. :) Again, thanks everyone for your help. Cheers. -Mark Mark Smith wrote: We use SMB to transfer large files (between 1GB and 5GB) from RedHat AS4 Content Storage servers to Windows clients with 6 DVD burners and robotic arms and other cool gadgets. The servers used to be Windows based, but we're migrating to RedHat for a host of reasons. Unfortunately, the RedHat Samba servers are about 2.5 times slower than the Windows servers. Windows will copy a 1GB file in about 30 seconds, where as it takes about 70 to 75 seconds to copy the same file from a RedHat Samba server. I've asked Dr. Google and gotten all kinds of suggestions, most of which have already been applied by RedHat to the stock Samba config. I've opened a ticket with RedHat. They pointed out a couple errors in my config, but fixing those didn't have any effect. Some tweaking, however, has gotten the transfer speed to about 50 seconds for that 1GB file. But I seem to have hit a brick wall; my fastest time ever was 44 seconds, but typically it's around 50. I know it's not a problem with network or disk; if I use Apache and HTTP to transfer the same file from the same server, it transfers in about 15 to 20 seconds. Unfortunately, HTTP doesn't meet our other requirements for random access to the file. Do you folks use Samba for large file transfers at all? Have you had any luck speeding it up past about 23MBps (the 44 second transfer speed)? Any help you may have would be fantastic. Thanks. -Mark -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: WINS over subnets
Edmundo Valle Neto a écrit : Hoggins! escreveu: Take a look at the chapter of the samba book about cross-subnet browsing, who maintains the browse list is the domain master browser, each subnet must have a local master browser to maintain the browse list for its own network segment and it will sync the list with the domain master browser of the network. In browse.dat only should appear machines that have some service to offer to the network. Almost all the machines of my network offer services (shares), so it's not the problem. Since then, the server should maintain a more complete list : the clients successfully register to it. I must not have understood the behavior of Samba, because I believed you just had to have one WINS server to which all the clients register, so it would maintain a browse list of these clients. I cannot have "slave" servers on the other subnets, that's why I planned on using one single master server for all the subnets. What is the behavior of your network? Each network only shows its own machines? i.e. Wireless clients only sees each others and samba only sees one XP machine? Wireless clients cannot see the samba server at all? I did not check all the behaviors, but according to what I saw, the wireless clients can see each other (thanks to broadcast), but cannot see the XP box. I must make more checks, since I don't even know if they can see the server. I must admit that I was more preoccupied by the browse.dat list, and my own XP box. Wins not only holds the IP address but the roles that these addresses have in the network. Like: "WORKGROUP#1b" ... 1b = Domain Master Browser, and WINS clients access this information to know where they shoul authenticate, sync their browse lists, etc. The WINS file looks fine to me, and all these infos appear, and all the machines and their services also appear. Theres some options to force syncs and announces to other networks too, but I never needed to use them, even in that type of situation with cross-subnets. Yes, maybe because you have several local master browsers that sync to the domain master browser, so these options would be redundant. Anyway, these syncs won't even work, since they rely on broadcast transmissions. Thanks for the help, I'm getting desperate, though I thought it was possible to maintain such a list with only ONE server if the routes and the server's configuration files were correctly set. Hoggins! Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: INTERNAL ERROR: Signal 11 in pid 8928 (3.0.23c)
On Fri, Sep 29, 2006 at 01:37:27PM -0700, Nolan Garrett wrote: > I've finally found time to recompile and get a backtrace. Here is the > gdb backtrace: Could you try the attached patch? Thanks for persisting! Volker Index: auth/auth_util.c === --- auth/auth_util.c(Revision 17489) +++ auth/auth_util.c(Arbeitskopie) @@ -1177,6 +1177,7 @@ num_group_sids = 1; group_sids = &primary_group_sid; + gids = gid; *found_username = talloc_strdup(mem_ctx, username); } pgpCA6EZRjPgH.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Sync unix and samba passwords
Hi, We have an Exchange server (server 2003) that is a domain controller and a few Samba file servers that are not part of the Windows domain. The Samba servers use their own LDAP directory ( ldapsam backend with pam_ldap ) that is synchronized to one openldap directory server but is not synchronized to the Windows domain AD. The workstations are all local accounts and not members of any domain either. I am happy with this arrangement despite having to enter user information twice and would rather not change it. Goal: I would like to use Services for Unix on the Windows AD controller to synchronize linux passwords so that the end user has to change password once for email/Samba and once for local computer. Problem: When Linux administrator issues the passwd command as in # passwd the ldap userPassword attribute is changed correctly but the Samba NT/LM passwords are not also changed. What I have already done: Googled the issue and found that unix passwd sync in smb.conf is not what I need. Ldap passwd sync = yes is in smb.conf. I have found some info on pam_smbpass.so but do not have enough information to know if this is what I need and how to use it. Or can someone tell me if this will not work at all. Better ideas? Thanks! Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.23c panic
Hi Volker, I've reinstalled samba from scratch (by issuing rpm -e --nodeps samba-..., then just yum install samba*) and that seems to have cleared up the issue. Not sure if it was a basic package update issue, but all is sorted now. The nmbd daemon was reporting as starting up but not actually starting and I believe this may have been the cause of the problems ( as starting it manually via command line nmbd -D) would then result in samba working fine. Regards, Bevan On Wed, Sep 27, 2006 at 01:56:45PM +1200, Bevan Weiss wrote: I've just updated (using yum under fedora 5) to the latest version of samba and am now encountering a major problem with samba. Whenever I attempt to access shares (don't have printers or other such non disk shares) the access fails (after prompting for password, and performing some level of authentication, it notes if no password is entered that Anonymous login successful). Same question as just sent to another segfault reporter: Can you recompile smbd with -g and for the test run it under valgrind? Thanks, Volker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] permissions behave differently from different programs
Hi all, I connect to a remote server using samba, and then try to modify a basic text file. Oddly, I can only when using certain programs. The file server is a Mac machine on which I have enabled "Windows sharing", Mac's way of saying turn on Samba. Here are a few cases to explain the problem: 1) I connect from my Mac laptop by going to finder and connecting to smb://myserver/my_shared_folder. I then try to modify a text file using TextEdit (a text editing program on Macs). When I try to save, I get an error saying "Couldn't save document 'file.txt' in folder 'my_remote_folder'." 2) I connect as above, but modify the file using emacs. It works fine; I can save the changes. 3) I connect to the server from a Windows machine by typing \\myserver\my_shared_folder in Explorer. Everything seems to work fine. I can modify the file using a standard program such as Notepad. Any suggestions would be greatly appreciated. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] How can i handle LOGOUT event?
How to set a server-side handler (BASH script) for domain user logout event? Now i have to use special cron script, which permanently scanning an ouput of [b]smbstatus -b[/b] command, but i think, that it is not good/optimal solution... Please, sorry for my ugly english :( -- View this message in context: http://www.nabble.com/How-can-i-handle-LOGOUT-event--tf2356970.html#a6565220 Sent from the Samba - General mailing list archive at Nabble.com. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] smbd/service.c:make_connection_snum - Access denied
Hi, Two days ago, I tried to turned my samba server, which worked perfectly into a PDC but despite of all my efforts, skimming thru the docs, mailing lists, hanging on #samba, I've never been able to logon to the new domain from the WinXP clients. Authentication is OK, but then access to the share is denied. Here's part of the log: [2006/09/28 19:03:36, 2] auth/auth.c:check_ntlm_password(305) check_ntlm_password: authentication for user [root] -> [root] -> [root] suc ceeded [2006/09/28 19:03:36, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319) NTLMSSP Sign/Seal - Initialising with flags: [2006/09/28 19:03:36, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0x60088215 [2006/09/28 19:03:36, 3] smbd/password.c:register_vuid(222) User name: root Real name: root [2006/09/28 19:03:36, 3] smbd/password.c:register_vuid(241) UNIX uid 0 is UNIX user root, and will be vuid 100 [2006/09/28 19:03:36, 3] smbd/password.c:register_vuid(270) Adding homes service for user 'root' using home directory: '/root' [2006/09/28 19:03:36, 3] param/loadparm.c:lp_add_home(2368) adding home's share [root] for user 'root' at '/root' [2006/09/28 19:03:36, 3] smbd/process.c:process_smb(1091) Transaction 4 of length 80 [2006/09/28 19:03:36, 3] smbd/process.c:switch_message(886) switch message SMBtconX (pid 23977) conn 0x0 [2006/09/28 19:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/09/28 19:03:36, 2] smbd/service.c:make_connection_snum(321) user 'root' (from session setup) not permitted to access this share (IPC$) [2006/09/28 19:03:36, 3] smbd/error.c:error_packet(129) error packet at smbd/reply.c(415) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED Anyone, please give me a hint, I'm totally puzzled. Attached is our smb.conf # This is the main Samba configuration file. You should read the # smb.conf(5) manual page in order to understand the options listed # here. Samba has a huge number of configurable options most of which # are not shown in this example # # Any line which starts with a ; (semi-colon) or a # (hash) # is a comment and is ignored. In this example we will use a # # for commentary and a ; for parts of the config file that you # may wish to enable # # NOTE: Whenever you modify this file you should run the command # "testparm" to check that you have not many any basic syntactic # errors. # #=== Global Settings === [global] log file = /var/log/samba/log.%m log level = 3 max log size = 100 load printers = yes socket options = TCP_NODELAY obey pam restrictions = yes domain master = yes preferred master = yes local master = yes domain logons = yes #domain admin users = root eric lmozo admin users = @admins #domain admin group = root eric lmozo passdb backend = tdbsam guest passwd program = /usr/bin/passwd %u encrypt passwords = true #valid users = %S security = user passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n # Automatedly add a Linux / Unix and Samba machine account when joining a machine to the domain add user script = /usr/sbin/useradd -m %u delete user script = /usr/sbin/userdel -r %u add group script = /usr/sbin/groupadd %g delete group script = /usr/sbin/groupdel %g add user to group script = /usr/sbin/groupmod -A %u %g delete user from group script = /usr/sbin/groupmod -R %u %g add machine script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false %u wins support = true dns proxy = no netbios name = mekas server string = %h (Samba %v) #Parece que necesitamos el usuario root para poder loguearse a un dominio desde WinXP (Eric-28/9/06) #invalid users = root unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n *passwd:*all*authentication*tokens*updated*successfully* #PAM password change = yes username map = /etc/samba/smbusers workgroup = MADRID os level = 65 printing = cups printcap name = cups syslog = 0 panic action = /usr/share/samba/panic-action %d max log size = 1000 unix charset = ISO8859-15 interfaces = eth0 lo time server = yes #Parece que el siguiente parametro no existe (Eric-28/9/06) lo comentamos #domain admin group = @admins # User profiles and home directory. # the local path to which the home ([HOMES]) directory will be connected logon drive = H: # Where 'profiles' = [profiles] further on logon path = \\%L\profiles\%U logon script = netlogon.bat # Keep the case in file/directory names; when lookin
Re: [Samba] Re: INTERNAL ERROR: Signal 11 in pid 8928 (3.0.23c)
On Fri, Sep 29, 2006 at 01:37:27PM -0700, Nolan Garrett wrote: > I've finally found time to recompile and get a backtrace. Here is the > gdb backtrace: Thanks a lot! Give me a bit, if what I just saw is true then I'm feeling very embarrassed Volker pgpHZYXJhBDd8.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: INTERNAL ERROR: Signal 11 in pid 8928 (3.0.23c)
Jeremy Allison wrote:
> On Wed, Sep 20, 2006 at 09:49:48AM -0700, Nolan Garrett wrote:
>>> #0 0x00203402 in __kernel_vsyscall ()
>>> No symbol table info available.
>>> #1 0x0049a4a3 in __waitpid_nocancel () from /lib/libc.so.6
>>> No symbol table info available.
>>> #2 0x0044293f in do_system () from /lib/libc.so.6
>>> No symbol table info available.
>>> #3 0x0060203d in system () from /lib/libpthread.so.0
>>> No symbol table info available.
>>> #4 0x00af7b7d in smb_panic () from /usr/sbin/smbd
>>> No symbol table info available.
>>> #5 0x00ae349a in dump_core_setup () from /usr/sbin/smbd
>>> No symbol table info available.
>>> #6
>>> No symbol table info available.
>>> #7 0x00b3fd54 in create_token_from_username () from /usr/sbin/smbd
>>> No symbol table info available.
>>> #8 0x00b40d61 in create_local_token () from /usr/sbin/smbd
>>> No symbol table info available.
>>> #9 0x00b42b55 in auth_ntlmssp_start () from /usr/sbin/smbd
>>> No symbol table info available.
>>> #10 0x009ce5b8 in ntlmssp_set_username () from /usr/sbin/smbd
>>> No symbol table info available.
>>> #11 0x009ccaa2 in ntlmssp_update () from /usr/sbin/smbd
>>> No symbol table info available.
>>> #12 0x00b427eb in auth_ntlmssp_update () from /usr/sbin/smbd
>>> No symbol table info available.
>>> #13 0x0095d4a9 in reply_sesssetup_and_X () from /usr/sbin/smbd
>>> No symbol table info available.
>>> #14 0x0098b0d0 in open_was_deferred () from /usr/sbin/smbd
>>> No symbol table info available.
>>> #15 0x0098c20b in smbd_process () from /usr/sbin/smbd
>>> No symbol table info available.
>>> #16 0x00ba6110 in main () from /usr/sbin/smbd
>>> No symbol table info available.
>>>
>>> Clearly I don't have a package that was compiled with symbols. Is it
>>> easy to rebuild the FC5 rpms from samba.org with debug symbols?
>
> Not helpful without debug info I'm afraid. You can rebuild
> from samba.org source in the packaging/RedHat directory.
> This will build a package with debug.
>
> Jeremy.
I've finally found time to recompile and get a backtrace. Here is the
gdb backtrace:
(gdb) backtrace
#0 0x00110402 in ?? ()
#1 0x0071a4a3 in __waitpid_nocancel () from /lib/libc.so.6
#2 0x006c293f in do_system () from /lib/libc.so.6
#3 0x0024a03d in system () from /lib/libpthread.so.0
#4 0x00e42d5d in smb_panic (why=0xf4c037 "internal error") at
lib/util.c:1601
#5 0x00e2e67a in sig_fault (sig=11) at lib/fault.c:47
#6
#7 0x00e8bcd4 in create_token_from_username (mem_ctx=0x825f268,
username=0x825f2e8 "MASSIVEGEEK+ngarrett", is_guest=0, uid=0x825f274,
gid=0x825f278, found_username=0x825f2b0, token=0x825f284)
at auth/auth_util.c:1222
#8 0x00e8cce1 in create_local_token (server_info=0x825f268)
at auth/auth_util.c:987
#9 0x00e8ead5 in auth_ntlmssp_check_password (ntlmssp_state=0x82265e0,
user_session_key=0xbff0e0e8, lm_session_key=0xbff0e0dc)
at auth/auth_ntlmssp.c:124
#10 0x00d19778 in ntlmssp_server_auth (ntlmssp_state=0x82265e0, request=
{data = 0x81df898 "NTLMSSP", length = 182, free = 0xe40110
},
reply=0xbff0e43c) at libsmb/ntlmssp.c:723
#11 0x00d17c62 in ntlmssp_update (ntlmssp_state=0x82265e0, in=
{data = 0x81df898 "NTLMSSP", length = 182, free = 0xe40110
},
out=0xbff0e43c) at libsmb/ntlmssp.c:274
#12 0x00e8e76b in auth_ntlmssp_update (auth_ntlmssp_state=0x8232198,
request=
---Type to continue, or q to quit---
{data = 0x81df898 "NTLMSSP", length = 182, free = 0xe40110
}, reply=0xbff0e43c) at auth/auth_ntlmssp.c:204
#13 0x00ca86b9 in reply_sesssetup_and_X (conn=0x0, inbuf=0x826bf68 "",
outbuf=0x828c3b0 "", length=280, bufsize=131072) at smbd/sesssetup.c:625
#14 0x00cd62b0 in switch_message (type=115, inbuf=0x826bf68 "",
outbuf=0x828c3b0 "", size=280, bufsize=131072) at smbd/process.c:991
#15 0x00cd73eb in smbd_process () at smbd/process.c:1018
#16 0x00ef20f0 in main (argc=16777216, argv=0xbff0f5c4) at
smbd/server.c:1024
This means very little to me, hopefully it means more to the developers?
Is there anything else I can do to get more information for you?
Thanks!
Nolan
signature.asc
Description: OpenPGP digital signature
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Cannot access public share w/3.0.23c on gentoo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/18/2006 02:49 PM, Guillermo Gutierrez escreveu: > Hello, > I have upgraded my gentoo samba server to version 3.0.23c using the > ebuild script on bugs.gentoo.org that was suggested top me on this list. > I am having some trouble accessing my "public" folder and I have a > "valid users = +users" for that share. I have tried using "valid users= > +Solidus\users" as well and that does not work. The first way seems to > work just fine on my Freebsd system. Are you aware of the changes of GroupMapping affecting 3.0.23c? http://us1.samba.org/samba/history/samba-3.0.23c.html > Is it just a misconfiguration of mine? I don't think so, looks like you just forgot to make the GroupMaps. > Here is my smb.conf: > > # Global Settings > [global] > # Netbios Identification > netbios name = Solidus > workgroup = marketscan > server string = %h, Gentoo Samba Server %v > > # Logging Options > log file = /var/log/samba/log.%m > max log size = 50 > log level = 5 > > # smb password backend > passdb backend = tdbsam > > # Network Settings > socket options = TCP_NODELAY > interfaces = eth0 lo > bind interfaces only = yes > socket address = 10.11.3.210 > > # Master Browser options > local master = no > os level = 2 > > # WINS and DNS Options > wins server = 10.11.3.177 > dns proxy = yes > > # Public share > [public] > comment = Public Volume on %h > path = /home/samba/public > valid users = +users > writeable = yes > public = yes > force create mode = 0766 > force directory mode = 0766 > guest ok = no > > > # Home directory for valid users. > [homes] > comment = Home Folder for %u > valid users = %S > browseable = no > writeable = yes > force create mode = 0700 > force directory mode = 0700 > > I greatly appreciate any help with this. > > Guillermo Gutierrez > Network Administrator > Market Scan Information Systems, Inc > (818) 575-2000 x2017 > [EMAIL PROTECTED] Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHW7tCj65ZxU4gPQRAq7WAJ95A9YHUyEo0V4UhtRoAVMdyA27oACfQhmB nF2m0OdsCc0IDTBiHeodEAY= =UEAz -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] need %u parameter for lpq command
Hi, I'm developing a script for "lpq command". It would need a %U option so that the script can know which user asked for the job list. Currently, lpq command seem to only serve %p. Is there any hope to get %U ? I see that my script run as root, so I assume the calling user info is lost ? TIA, Charles -- Charles Bueche <[EMAIL PROTECTED]> sand, snow, wave, wind and net -surfer -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] unable to create symlinks on PDC Samba/Ubuntu
Hello, I have a CentOS 4 PDC running Samba 3 with 2 file shares and some Ubuntu 6.06 Samba 3 clients. All is working fine, except when I try to create symlinks: I always get "Operation not permitted". Is there any way to permit users to create local/remote symlinks on files stored on samba mounts ? Thanks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] What controls the Read AndX Request byte size?
On 9/29/06, Jeremy Allison <[EMAIL PROTECTED]> wrote: On Fri, Sep 29, 2006 at 08:45:08AM -0400, Steven Cardinal wrote: > In trying to track down some performance issues, I'm finding with Ethereal > that, when I launch an application from my Windows server, the SMB Read AndX > Request packets have Min Count, Max Count Low, and Remaining all at 512 > bytes. When launching the same application on the same client from a Win2000 > share, these requests are coming in much larger sizes (4096 and 32768 were > both observed). This is making a huge difference in the launch speed of the > application (an in-house VB app). > > My question is, what smb.conf or kernel parameters could be influencing the > 512 byte read request? I tried setting various socket options in > smb.confand haven't seen a change. I am running Suse > 10.0 with their 3.0.20b samba packages (except we recompiled to include > idmap_rid). Looks like Windows has decided you're on a WAN link, not a LAN link. I'd check MSDN on the web for registry settings affecting this. (Can't remember them offhand). Jeremy. Problem solved. It was, in fact, the kernel oplocks. I didn't realize that Samba needed to be fully restarted (and not just HUPped) for this param to take effect. Disabling kernel oplocks on my test box and restarting removed the issue. I will implement the change this weekend on my production box. Thanks for your attention. And especially thanks to the guy who posted about ARCView a few weeks back! Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: WINS over subnets
Hoggins! escreveu: chris barry a écrit : On Thu, 2006-09-28 at 19:00 +0200, Hoggins! wrote: does the WINS server have a route to this wireless net, or is it responding out the default gateway? have you tcpdumped the interfaces on anything yet? All the routes are static, and the two hosts can ping each other without problems. The routing works perfectly fine. Having tcpdumped a bit what was going on, I could only figure that the machines are correctly registering to the server, and the servers responds that it's okay. The real problem is that it simply does not fill the browse.dat file with other entries than itself and the WinXP box that is on the same subnet. Take a look at the chapter of the samba book about cross-subnet browsing, who maintains the browse list is the domain master browser, each subnet must have a local master browser to maintain the browse list for its own network segment and it will sync the list with the domain master browser of the network. In browse.dat only should appear machines that have some service to offer to the network. What is the behavior of your network? Each network only shows its own machines? i.e. Wireless clients only sees each others and samba only sees one XP machine? Wireless clients cannot see the samba server at all? With a closer look to wins.dat, I can see that all the machines are present, and have the correct IP addresses. Wins not only holds the IP address but the roles that these addresses have in the network. Like: "WORKGROUP#1b" ... 1b = Domain Master Browser, and WINS clients access this information to know where they shoul authenticate, sync their browse lists, etc. Theres some options to force syncs and announces to other networks too, but I never needed to use them, even in that type of situation with cross-subnets. So my personal conclusion is that there is a misconfiguration of samba somewhere, that makes it generate a browse list only for it's own subnet. I think it's weird. Thanks for helping Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.23c panic
On Sat, Sep 30, 2006 at 02:46:02AM +1200, Bevan Weiss wrote: > I've reinstalled samba from scratch (by issuing rpm -e --nodeps > samba-..., then just yum install samba*) and that seems to have cleared > up the issue. Not sure if it was a basic package update issue, but all > is sorted now. Thanks for the update. Volker pgpylEvHyDi33.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] What controls the Read AndX Request byte size?
On 9/29/06, Jeremy Allison <[EMAIL PROTECTED]> wrote: On Fri, Sep 29, 2006 at 08:45:08AM -0400, Steven Cardinal wrote: > In trying to track down some performance issues, I'm finding with Ethereal > that, when I launch an application from my Windows server, the SMB Read AndX > Request packets have Min Count, Max Count Low, and Remaining all at 512 > bytes. When launching the same application on the same client from a Win2000 > share, these requests are coming in much larger sizes (4096 and 32768 were > both observed). This is making a huge difference in the launch speed of the > application (an in-house VB app). > > My question is, what smb.conf or kernel parameters could be influencing the > 512 byte read request? I tried setting various socket options in > smb.confand haven't seen a change. I am running Suse > 10.0 with their 3.0.20b samba packages (except we recompiled to include > idmap_rid). Looks like Windows has decided you're on a WAN link, not a LAN link. I'd check MSDN on the web for registry settings affecting this. (Can't remember them offhand). Jeremy. Thanks Jeremy. Since posting, I've continued to run some more network traces and have found some odd results. If I run another program, for instance the VNC viewer or a compiled perl program we have, request sizes vary but are typically high (4096, 32968, etc). Thus performance is high. If I run any of our VB apps (VB 6) it uses 512 bytes. If I run one of our VB.Net (2.0) apps, it starts with varying and large byte sizes, but once it starts reading dlls from the drive, it reverts to 512! So, it appears that if I use an app written in a Microsoft language it intentionally goes slower? That seems too 'conspiracy theory' for me, but it's all I can see right now. As I type this I tried using Word (installed locally) to open a 1.5 Mb document on the samba server. Once I get a FID (I'm assuming that's kind of a file handle), all of the read requests are 512 until maybe the last couple of packets (I'm not a pro at debugging SMB packets) which jump to 4096. Could some MS library be using server info (announce version, perhaps) to determine if this is a true Windows system or not? I could certainly try changing the announce version, but would that break anything? This is a production box, so i'm loathe to make too crazy of a change without knowing the ramifications. I did see a posting recently about a similar problem with ARCView that related to kernel oplocks and level2 oplocks. Since this is Linux, I tried disabling the kernel oplocks and have tried oplocks on the share both on and off with no change. Thanks Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Foreign SID's and winbind use default domain
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/21/2006 08:17 AM, Mikael M. Hansen escreveu: > Hi > > In the Samba HOWTO (ch. 24 section 24.3.2) is written > > "When winbind is used, the default condition is > that the local user george will be treated as the account DOMAIN\george > and the foreign (non-member of the domain) account will be treated as > MACHINE\george because each has a different SID." > > I have enable 'winbind use default domain' in smb.conf in the hope that > it changes the above stated behaviour to treat local user george as > DOMAIN\george > > Is this correct to hope for (it seems to work in some cases)? Looks like there are a bug related with this. http://lists.samba.org/archive/samba/2006-July/122957.html http://lists.samba.org/archive/samba/2004-March/083283.html > -- > MVH / Best regards > > Mikael M. Hansen > IT-administrator > Computer Science Dept.Email: [EMAIL PROTECTED] > Aalborg UniversityPhone: +45 9635 8905 > Fredrik Bajers Vej 7E Room: E2-121 > DK-9220 Aalborg, Denmark Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHUM8Cj65ZxU4gPQRAmrQAKCn3/n+QcSHMgqTK57fepO5228mRwCfYzxA B0LGtLu/hHVqczg7uF1eRAk= =XOrM -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] net command and modifying groups in AD
On Fri, Sep 29, 2006 at 12:40:31PM -0300, Felipe Augusto van de Wiel wrote: > > If anyone has any other ideas on how to manipulate group memberships > > from Linux on an AD server, that would be also greatly appreciated. > > I don't think it is possible in Samba3 (but I think it is > possible in Samba4). The main point is that usually you are just a > member server in AD, which means read-only (and access to change > pre-defined options). net rpc group addmem should work, likewise with delmem. You certainly have to authenticate on every call. Volker pgpmrUTaSzlr4.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] net command and modifying groups in AD
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/21/2006 06:02 AM, Norbert Furlani escreveu: > Hi, > > On my SuSE 10.1 linux server, I have successfully joined an AD server > (which I setup) and am able to create users and groups etc.. on the ADS > using the net command. My problem is I cannot (or at least I don't know > how) to add/remove users to groups on the AD from my linux box. Is it > possible to do this as I can't seem to find any literature on this? I am > running samba (and client) version 3.0.22. > > If anyone has any other ideas on how to manipulate group memberships > from Linux on an AD server, that would be also greatly appreciated. I don't think it is possible in Samba3 (but I think it is possible in Samba4). The main point is that usually you are just a member server in AD, which means read-only (and access to change pre-defined options). AD is a LDAP Server, so, you could use some binding and commands to change it directly, but I don't think you could use regular samba commands to change group membership. > Thanks, > //Norbert Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHT5vCj65ZxU4gPQRAkRZAJ9COgcGqwKv+VoXB+OPOPU03pdkBgCfbKgt bic/4WKuG2/nwVlcrtUzPGw= =qT1Y -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 PDC - trouble renaming domain member computer
When the passdb is set to "tdbsam" or "smbpasswd", inserting "rename user script = /usr/sbin/usermod -l '%unew' '%uold'" and restarting/SIGHUP Samba erradicates the problem. I think you must find out how to rename a LDAP user from the console, and then set the parameter above according (I don't have any experience with LDAP, sorry). []s > > De: "ryan punt" <[EMAIL PROTECTED]> > Assunto: Re: [Samba] Samba 3 PDC - trouble renaming > domain member > computer > Data: Thu, 28 Sep 2006 08:38:30 -0500 > Para: > > As it turns out, I've got the same problem with the > 3.0.23c .debs (I was using 3.0.14a debian stock). > Again, to summarize: > > Samba 3 PDC, using LDAPSAM. > > Group mappings are correct, my domain admins group > has privileges: > SeMachineAccountPrivilege > SeRemoteShutdownPrivilege > SePrintOperatorPrivilege > SeAddUsersPrivilege > SeDiskOperatorPrivilege > > Members of the domain admins group can join machines > to the domain, but can't rename domain computers > (either via netdom or the GUI). XP throws error, > "access is denied." Everything else work perfectly. > > I've filed a bug report, #4116. > > Does anyone have any ideas? > > Thanks, > Ryan "Tudo o que sei é que não sei de nada" (Sócrates) ___ Novidade no Yahoo! Mail: receba alertas de novas mensagens no seu celular. Registre seu aparelho agora! http://br.mobile.yahoo.com/mailalertas/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[BUG?][REGRESSION?] Re: [Samba] No group in usermanager for NT (usrmgr.ese)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/21/2006 03:18 AM, emmanuel musso escreveu: > hello > I'm running debian testing, winth samba as P.D.C, with passdb backend = > ldapsam > > ii samba 3.0.23c-1 a LanManager-like file and printer server fo > ii slapd 2.3.25-1 OpenLDAP server (slapd) > ii smbldap-tools 0.9.2-3Scripts to manage Unix and Samba accounts st > ii libnss-ldap251-5 NSS module for using LDAP as a naming servic > no libpam_ldap > > Since I updated from samba 3.022 to 3.023c, i can't see any group with > usrmgr.exe (User manager for windows NT). I see all users, but zero group. > linux command like net groupmap list, smbldap-groupshow, getent group, or net > rpc user info give me good informations > > net groupmap list > . > Backup Operators (S-1-5-32-551) -> Backup Operators > Replicators (S-1-5-32-552) -> Replicators > 1a (S-1-5-21-1013494363-2106538438-1688464621-5003) -> 1a > etu (S-1-5-21-1013494363-2106538438-1688464621-5005) -> etu > . > > smbldap-groupshow 1a > dn: cn=1a,ou=Groups,dc=ge2i,dc=iut-tlse3,dc=fr > objectClass: top,posixGroup,sambaGroupMapping > cn: 1a > gidNumber: 2001 > sambaSID: S-1-5-21-1013494363-2106538438-1688464621-5003 > sambaGroupType: 2 > displayName: 1a > memberUid: g9_abel,g9_art,g9_aude, > > > getent group > > Backup Operators:*:551: > Replicators:*:552: > 1a:*:2001:g9_abel,g9_ar > > net -U admin rpc user info g1_aude > Password: > Domain Users > 1a > etu > > only usrmgr have problems. > > I know there is a patch, but i think it's integrated in samba 3.0.23 c > > Any ideas ? It could be a regression, because of that I changed the subject line to include two tags, are you aware of the changes of groupmapping in 3.0.23c? http://us1.samba.org/samba/history/samba-3.0.23c.html Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHT3uCj65ZxU4gPQRAml4AJsEd982Zd8MIyXbC6wGHun31HoJvACfSxCg fyXfEjvGLDoHPdcCjzs3ONE= =t87r -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] LDAP/Samba issues when replacing server
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/20/2006 11:48 PM, [EMAIL PROTECTED] escreveu: > I hope that someone can let me know what I have done wrong. > > I need to replace and existing server (server1) with a new > server (server2). Server1 is currently running LDAP/Samba > (3.0.14). Profiles stored in /opt/samba/profiles > > I installed all of the pieces, and LDAP works (mostly, I > have an issue, see below) > > I ran net getlocalsid DOMAINNAME on server1 > used the SID value in net setlocalsid command on the new > server. > > I then tried to import the old ldif but got errors about > existing keys, so deleted the ldap database, and then > imported the ldif obtained from server1 without errors. > > Checked with net getlocalsid DOMAINNAME that the SID > returned was correct. Tried net getlocalsid which > returned the same SID but for the local machine name > (server2). Finally, net rpc getsid also reports the > correct SID as being placed in the secrets.tbd file > on server2. (The above is slightly different than on > server1 for which net getlocalsid just returned an > error about not being able to get the name). The two > servers are at different versions of samba though. > Old is at 3.0.14, while new is 3.0.23a, so perhaps this > is to be expected. > > I can log on with any of the Linux LDAP accounts. BUT > still have issue with Samba. In particular, none of > the old profiles are recognized. I tried both nfs > mounting /opt/samba to server1:/opt/samba as well as > copying all of /opt/samba to the new server. When I > log onto a Windows TS new profiles are created which > is an issue since there are a couple of packages that > have to be customized. In particular, every student > has a TTL3.ini file in their WINDOWS directory (e.g. > /home/student01/WINDOWS/TTL3.ini) With the old > server, this file directory is recognized and the > ini settings are applied. With the new server they > are not. Did you copy the relevant tdb files? > Additionally, on the Linux system, su - student01 > just hangs. Same with any account. > > Similarly, running > > passwd dahopkins returns > > Changing password for user dahopkins. > passwd: Authentication token manipulation error Did you run 'smbpasswd -w' to store LDAP password? > I guess things just aren't quite right yet. :0 > > So, can someone point me direction or offer a reason > why the new server does not look the same to the Windows > Terminal Server as far as account profiles are concerned? Looks like that not evertyhing was backedup and restored in the new server, and there are a few missing points. > Thanks, > Dave Hopkins > Newark Charter School > Newark Delaware Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHT0jCj65ZxU4gPQRAvIAAJ9lnyRhWpTWYxrLKGmKeTZ8cUO5rwCfWU1w ICkj42X4O/nGWnzsqTcAeKM= =LwOp -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] What controls the Read AndX Request byte size?
On Fri, Sep 29, 2006 at 08:45:08AM -0400, Steven Cardinal wrote: > In trying to track down some performance issues, I'm finding with Ethereal > that, when I launch an application from my Windows server, the SMB Read AndX > Request packets have Min Count, Max Count Low, and Remaining all at 512 > bytes. When launching the same application on the same client from a Win2000 > share, these requests are coming in much larger sizes (4096 and 32768 were > both observed). This is making a huge difference in the launch speed of the > application (an in-house VB app). > > My question is, what smb.conf or kernel parameters could be influencing the > 512 byte read request? I tried setting various socket options in > smb.confand haven't seen a change. I am running Suse > 10.0 with their 3.0.20b samba packages (except we recompiled to include > idmap_rid). Looks like Windows has decided you're on a WAN link, not a LAN link. I'd check MSDN on the web for registry settings affecting this. (Can't remember them offhand). Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Fwd: [Samba] Re: Samba print problem (everything looks right)]
This problem has been driving me crazy for a week.
Fedora Core 4, Cups 1.2.1 Samba 3.0.23a Thanks in advance.
--
Curtis Maurand
Senior Network & Systems Engineer
BlueTarp Financial, Inc.
443 Congress St. 6th Floor
Portland, ME 04101
207.797.5900 x233 (office)
207.797.3833 (fax)
mailto:[EMAIL PROTECTED]
http://www.bluetarp.com
-- To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
If you used cupsaddsmb to export your printer, CUPS 1.2.1 had a bug,
that caused problems with Samba. (See below)
1.2.2 had a different bug with advanced features. Try 1.2.3 or 1.2.4.
Dale
Original Message
Subject:[Samba] Re: Samba print problem (everything looks right)
Date: Fri, 09 Jun 2006 09:34:55 -0400
From: Brian White <[EMAIL PROTECTED]>
Organization: Precidia Technologies http://www.precidia.com/
To: Alessandro Morgantini <[EMAIL PROTECTED]>
CC: samba@lists.samba.org
References: <[EMAIL PROTECTED]>
I read your posts on samba mailing list.
I have the same problem:
I can print, but I can't open the printer properties page ("no driver"
message...).
For me also, the drivers are read from samba server e written on
C:\WinNT\System32\spool\drivers\... (I have removed him in advance to
test this).
There was a bug in the cupssmbadd program that stripped all end-of-line
characters during the conversion. (Many thanks to Vincent Nicolas for
catching this!) See http://www.cups.org/str.php?L1750
Brian
( [EMAIL PROTECTED] )
---
BREAKFAST.COM Halted... Cereal Port Not Responding
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] doubt : Samba error mensage (samba version 2.2)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Any special reason for using Samba 2.2? You should migrate as soon as possible to 3.0.X. On 09/25/2006 11:40 AM, Paulo Nakaoka escreveu: > Hi, > Please, I need you a help. > > My server has performance problems and lockeds. > I try encounter explains about above error message, but I coudn´t success ! > Where may I encounter explains about them ? : Source Code. And Samba Devel Information. http://us1.samba.org/samba/devel/ > Error writing 4 bytes to client. -1 (Broke pipe) > > Write_socket.data : write failure > Error : Broke pipe > > util_sock.c : write-socket > > util_sock.c : send_smb > > lib/util_sock.c : set_socket options > > failed : so set socket option > > TCP_NODELAY/Error connect reset by peer > > util_sock.c : get_socket_addi > > > getpeername failed . Errow was Socket is not connected. > > > Thanks, Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHSvuCj65ZxU4gPQRAiAKAJ9wxJywPqv/cvWZ6Kc/0f3o2xvvEgCguU/b 3eP3J2PTm4ZCuwI7V8HakZM= =oILY -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Access to admin shares on clients
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I thought I had answer this mail... sorry if it is duplicated. On 09/25/2006 02:43 PM, Mike escreveu: > Hello. With my installation of Samba I am thinking to use > remote client software installation. For this I need to > have access to admin shares on clients: such as C$, D$, > ADMIN$, etc This is where I have a problem. > I can't access those shares using Domain Admin credentials > and I can't find any info on this anywhere in docs. Perhaps > this task is not as common. Would anyone provide me with > pointers on which setting do I need to tweek. You should use the Local Administrator for that type of access, I have seen a lot of variations on that subject, but usually, the Administrator of the workstation always work. You can find more information at Microsoft website and MSDN, not that you are going to find lots of infinite information, but at least a few tips. ;) And you don't need special setup, just point to the workstation and share and give the right credentials. \\workstation\C$ > I am using: > OS: Suse Linux Ent. Server 10. > Samba: 3.# with LDAP Back End. > Clients: Win 2000/XP > Thanks in advance. Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHStCCj65ZxU4gPQRAskHAJ4rFBYkPtE7z18mGegFh2B0oNA5ewCfd1hC /7HKD9N8lJ7GiuZL7JQFXFo= =IvDl -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ypbind
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/27/2006 05:38 AM, [EMAIL PROTECTED] escreveu: > can any boby help me in ypbind. > I have made NIS server "test.com" > Now i want ypbind search test.com and add to nis client. > I am trying at client is > # ypbind -c -broadcast > No entry found. > Config file /etc/yp.conf is not ok. > I have added test.com in /etc/hosts. Sorry, this is totally off-topic for a samba mail list. You should try the support list of your operational system or some linux user group mail list. > further what i do help > Kuldeep Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHSmHCj65ZxU4gPQRAuS6AKC92u1CFkt8/crlYE8ktfK5QYNgEgCeNOOd iT4aPBvZV+3cCRvydEg/AAM= =BuWV -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba for VMS 5.5
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/27/2006 12:18 PM, Robertson, Bruce H escreveu: > Hello, > > Is anyone aware of a stable version of Samba for VAX/VMS 5.5-2? I will > use 2.0.3 if that's the only version available, but I've read that there > are several known problems with this particular version. I found 2.2.8 in the Samba Ports. http://us1.samba.org/samba/download/ http://www.pi-net.dyndns.org/anonymous/jyc/ > Thanks Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHSk7Cj65ZxU4gPQRAgTZAKChgvh2vkNT7Z2C/OC54+tfEU2cHwCgkewi 8z0QSmP4Ov8hSIvK4W3bT1g= =+tQ6 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] About access controlling of sub directories of a shared directory
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/26/2006 04:14 AM, Maidul islam escreveu: > Dear All, > > I am using samba server for file sharing. I gave a lot > file to be shared by users. But i want to control the > access of sub folders of a shared folder.How can i do > it?I am trying for last few days but i have failed. > Please help me if posible. It is to mention that my > server is at Red Hat Linux 9.0 and users are at > Windows. FileSystem ACLs (POSIX ACLs). > Hope to hear from you soon. > Best Regards > > Md. Maidul Islam > Junior Engineering Executive > Systems & Services Limited > House 39, Road 14/A > Dhanmondi, Dhaka, Bangladesh > Phone:+88 02 8151162-4 Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHSfLCj65ZxU4gPQRAgZCAJ9xW/NIHG8ac3LvUQqn2bGZTUsbTQCfZC1W eSnfXE3rc25bAkGdhp/6FVI= =0rHa -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Password protecting sharing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ok, that's a hard one. :) On 09/26/2006 02:12 PM, Puneit Singh escreveu: > On large networks, like the one I have in campus, (around 400 > computers) how do I set up a password with which I can restrict > access to those with whom I have shared the sharing password > and not others. Each user has its own password right? Or are you using some sort of public share layout and want to restrict only a few shares? Without some more background and your smb.conf it will be a little bit hard to help you. ;) > My network uses dynamic ip address so, it is not possible to > deny access to specific ipaddress Ok. That's good, since IP address are easily spoofed. Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHSeeCj65ZxU4gPQRAjk/AJwP3GfpjTBn6Ejouy6fJTKbAeeWNQCfWgN4 SV6lF7Q8hUEoKRRk7a3H/ZY= =GFN1 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] cannot get samba 3.0 to work
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/26/2006 01:48 PM, Mountz, Charles escreveu: > I just upgraded from samba 2.2.8 to Samba 3.0. The upgrade coincided with > upgrading from UnixWare 7.1.1 to 7.1.4. I can map a network drive just > fine with 2.2.8 but cannot with 3.0. I try to enter the user1 id and > password and it just rejects it each time. We need some background here. Which are the reject message/errors? A log of the reject part with increased debuglevel would be great. Which version of Samba 3.0 are you using? How did you migrate your user accounts? > Here is my smb.conf file: > #Global Settings = > [global] >workgroup = MYGROUP >local master = no >browseable = yes >printcap name = lpstat >load printers = yes >printing = sysv >deadtime = 5 >guest account = user1 >log file = /usr/lib/samba/var/log.%m >max log size = 10 >security = user >encrypt passwords = yes >smb passwd file = /etc/smbpasswd >socket options = TCP_NODELAY IPTOS_LOWDELAY > > # Share Definitions == > [pp_forms] >comment = Maestro Docs >path = /state >read only = no >guest = yes >guest only = yes > > [printers] >path = /var/spool/samba >browseable = no >writable = no >printable = yes >print command = /usr/bin/lp -c -d%p %s; rm %s > > [user1] >comment = USER1 Share >path = /ws/wp5_10_root/usr/users/pplus >browsable = no >writable = yes >force user = user1 >public = yes > > [ws_dir] >comment = WSDIR Share >path = /ws/wp5_10_root >browsable = no >writable = yes >force user = user1 >public = yes > Chuck Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHScRCj65ZxU4gPQRAjS3AJ4r4+pfrfCEZw3/3Ns7KUq9jPzs7gCfQew4 xfeC3tC26Kq6rKbl5jC1B5Q= =nL01 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Autentication against BDC first
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/28/2006 11:56 AM, Diego Martin Fernandez Fazio escreveu: > Hi all, I have this question, I ve got a master LDAP server > on a remote place and i want to install a PDC and a BDC and > a slave ldap server in other place. > Mi question is... may I force de WorkStations logging (read > the information )against the BDC first than PDC, so the READ > trafic goes to the Slave Ldap??? The problem is the network > avoid READ traffic. You can have a local network using your BDC if it is the Master server of the network, yes it is possible, just follow the Samba Official HOWTO recommendation. > In the Samba FAQ recomends that the: > PDC--->use de Master Ldap and > the BDC --->use a Slave Ldap You can also have all the servers using the same LDAP backend, but that's a different story, the above model is the recommended one. > this is a network map for the idea: > > MASTER LDAP on Remote Site > | > | > Wan > | > | > SMB PDC SMB BDC Slave Ldap on LAN > | > | > | > WS > > So when I log into the WS the BDC ask to the local Slave LDAP trough the > LAN network. > > And if i need to change a password of the user on PDC goes trough WAN > and modify the master LDAP and this then modify the Slave LDAP trough > the WAN. > > So... my question is can I configure my BDC with the priority. > Maybe... on the PDC set: > > domainsmaster=yes > domainlogons=no You need "domain logons = yes" to be the PDC. http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-pdc.html > and on the BDC > domainmaster=no > domainlogons=yes. > > Many many thanks and scuse my poor english. The PDC needs to update the LDAP Master always, there are lots of things going on, computers change their passwords, people changes their passwords... You could use some strategy of data replication between the LDAPs to try to reduce the traffic, but it is also a different story. Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHSXrCj65ZxU4gPQRAhLiAJ4zDHYJaFA2oRJ651LwEn8NTk4asgCdEKFs 9ye+Nj47ZPGYK3iWFKEW3kk= =LL5M -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.23c panic
On Wed, Sep 27, 2006 at 01:56:45PM +1200, Bevan Weiss wrote: > I've just updated (using yum under fedora 5) to the latest version of > samba and am now encountering a major problem with samba. Whenever I > attempt to access shares (don't have printers or other such non disk > shares) the access fails (after prompting for password, and performing > some level of authentication, it notes if no password is entered that > Anonymous login successful). Same question as just sent to another segfault reporter: Can you recompile smbd with -g and for the test run it under valgrind? Thanks, Volker pgpZ5dvMaieoC.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba ignores groups for ACL !
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/26/2006 09:25 AM, Neuwald escreveu: > Hello, i hope u guys can help me. Let's try. :) > This is the first time I write to the list. Sorry about my > english... No problem. > i got a solaris 10 machine and installed "samba 3.0.2.3c" with > "openldap 2.3.2.1" , "openssl 0.9.8" and "gcc 3.4.6". Just for the sake of logs, it is 3.0.23c and 2.3.21. > i configured kerberos and all the other things. all good. The all other things include the groupmaps? > i added the samba-server (solaris10) to a active directory domain. > with "kinit " and then "net ads join" and so on. > all worked good. Ok, so you samba server is a Member Server of an AD. > then i configured my smb.conf via swat-websoncole. > i created a share that was named "all". > i added in swat to the "valid users"-option the AD-Group > "MyDomain\group_alpha". > After this i mounted the share on my Windows-Xp machine. > The user on the WindowsXP MAchine is in the Group "MyDomain\group_alpha". > all good. > > i can access an create folders . > > Now i created on my solaris-machine in my Samba-Share-folder "all" > 2 Folders. > Folders:Permissions OwnerAcl > 1. "folderA" with rwxrwx--- root rootgroup: group_beta:rwx > 2. "folderB" with rwxrwx--- root rootgroup: group_gama:rwx > > after this i added via "setfacl -m g:MyDomain\\group_beta:rwx folder_a" > the group "group_beta" to the first folder. > The Same i did with the folder "folderB", i added the group "group_gama" > (rwx). I hope that the above commands are really right, because you said folder_a but the name of the folder is "folderA". > Now, i am at the windows machine, my user "winuser" mountet the Samba > Share. > So, "winuser" is a member of the valid share user group "group_alpha", > all AD-users are members of this group. > On the two other folders in the share i added permissions for two > other groups. > So, i as "winuser" should have rights to read,write,execute the > "folderA", because "winuser" is a also a member of "group_beta" > but i dont have permissions for "folderB". > my Problem is now that i can not enter and "folderA" and "folderB"! > (windows-prompt : i dont have permissions for this..) Ok, we will need the smb.conf and a log when you are trying to access the share (increase the loglevel/debuglevel, please). > The same scenario with adding "users" directly without "group" is > working. Sounds like an ACL problem with regards to groups from AD. > So i think that samba ignores my supplementary groups for acl!!! Maybe... > i googel'ed a lot for this problem, but no solution. > Help me ;) > Ciao, Björn Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHR6sCj65ZxU4gPQRApJTAJ9Gff10PCewAgb0Sj1NBfqga2vmdACfeb8A GN3eJRmcWXcdgn3jMhKD8Cw= =xxbW -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Internal error-Panic
On Fri, Sep 22, 2006 at 06:08:12PM +0200, Jonathan DEL CAMPO /jdc/ .Y wrote: > We are running a samba server ( Version 3.0.10-1.4E.6.2 ) on a redHat RHEL > release 4 (Nahant Update 3). > We have a lot of errors that occurs when windowsXP clients hosts try to > read from a Samba Export. If this is reproducable, can you recompile smbd with -g and for the test run it under valgrind (which slows it down a LOT, but it give very valuable info)? Volker pgptxH9vBVTCC.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.23c Upgrade Errors
On Fri, Sep 15, 2006 at 04:49:16PM -0500, Dale Schroeder wrote: > On my 3rd and final Debian server (upgraded in reverse order of > importance), the upgrade from 3.0.22 to 3.0.23c is producing segfault > errors ( Security is ADS). The log from the system attempting to To really track this down, could you recompile with -g to enable the debug symbols, and run smbd under valgrind? Volker pgpDn2W2e02MI.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How do I force other domains to work?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/28/2006 12:27 PM, Trimble, Ronald D escreveu: > I am trying to get the other domains in my tree to work with my samba > implementation. I have copied all the necessary config files from > another samba server that does work. On this server however, I get > strange results from the wbinfo -sequence command. > > linux:/ # wbinfo --sequence > > LAC : DISCONNECTED > > EU : DISCONNECTED > > AP : DISCONNECTED > > UIS : DISCONNECTED > > M1016 : 1 > > BUILTIN : 1 > > NA : 51137274 > > > > All the other domains are Disconnected (-1) if you look in the logs. I > desperately need these to get connected so I can authenticate their > users. What could be wrong? Did you change the Samba Version? Are you using different Operational Systems? We need your smb.conf and winbind related information to try to help you. Some logs with increased loglevel would help too. > Thanks, > Ron Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHSQCCj65ZxU4gPQRAifWAJ97tXAUqkwv7fIOJJPmIgMweLC9NwCfYI1q rzM3/9R+ogk0LOFL2iCMfmI= =l4mA -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba in centos 4.4: samba-3.0.10-1.4E.9 versus the latest from sernet samba3-3.0.23c-30
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/29/2006 06:34 AM, [EMAIL PROTECTED] escreveu: > Hi people. > > I use centos on many my servers and they are running samba which comes > with centos: samba-3.0.10-1.4E.9 > > From samba-3.0.10 to 3.0.23c many thnigs in code had change. Many bug > fixes etc., code rewrote (for example oplock in later version of samba > than 3.0.10). RedHat people don't have made a full of backports to their > samba, only security things. > > So I have question, what do you think samba people, should i switch to > the latest samba from sernet (for example) or still use samba, wchich > comes with my centos. What are + and - ? It is a very personal decision. Running the last version has advantages and disandvantages and it is not only about Samba, in any software. You will have features and the support of the upstream developers on the last changes, but you will also face the "fresh shiny bugs". AFAIK, Samba provides rpm binary packages that you could use, there is also Fedora packages. Depending on the size of your network and time to take care of that, compiling each new version of Samba could become a pain. If 3.0.10 is working for you and you have the security updates and you don't need the new features, I would say that you should stay with it (be aware that the upgrade path will be harder and harded as your actual running versions is getting too far from upstream). > Best regards, > Irens Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHSLdCj65ZxU4gPQRArxSAKCLjeZhnCVRYFc2Tid3SKM0QzwcHQCeJc/3 wub4z/BE7Up9DHUh/ICXjeA= =qYAP -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Automatic Group Shares
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/26/2006 12:32 AM, Murray Trainer escreveu: > Hi All, > > We use an automatic home share of the form below. > > [homes] > comment = User Home Dirs > path = /home/%U > valid users = %S > read only = No > create mask = 0777 > directory mask = 0777 > browseable = yes > guest ok = no > > Is it possible to do group shares a similar way? I don't think so. The [homes] is possible because we know that we need to map a directory to only one user. The group share would create the same share for lots of people, the problem comes on how do you tell samba which is the name of the share? First idea is to use [%g] or something like that, but it is per user, it could work, but I'm not quite sure that it will work, because shares are read on Samba start and re-read from time to time... so... it is a little bit difficult to tell what the name of the share. And [homes] has special code inside Samba. > We want to have an > automatic group share for any secondary groups with a name > like share_* and only allow the members of share_* access > to it. We want to avoid having to manually add each share > group to smb.conf and restart the smb daemon each time we > add a group of the form share_*. What about a common [groups] share, with subdirectories with each group and some FileSystem ACLs? It could work almost in the way you want, but it is only one share. > Thanks > Murray Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHSHaCj65ZxU4gPQRAkBTAJ9w7gAsoJKpdxHW1tiufDCLdJx44ACeO602 pwcsL9az6G2EoNBsot2ZQbY= =asrL -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbindd cause system hang
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/26/2006 08:53 AM, Superbiji escreveu: > Hi All, > > my os (Centos 4.3) connects to Windows directory using winbind > everything works fine: > > ls -alh shows remote username and group > getent passwd shows remote usernames > > until I run : > getfacl -R /home/samba > to backup whole acl > > after 1 minutes the system hang (typing w, ls, top with no response) > but I can kill winbind and start it again, evrything back to normal > > Please help Looks like you winbind it not properly configured. Can you please attach your smb.conf and also information about how did you setup your nsswitch (libnss)? Some log with increased loglevel would be very good. Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHR8mCj65ZxU4gPQRAhIyAJ9QIF88KEHnv0LscgtBOzoBF6xjwgCg0GJT O9p7XyrbaplsAKTrzASQahU= =owBx -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Bad magic on Winbind authentication
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/26/2006 09:56 AM, [EMAIL PROTECTED] escreveu: > I am running Ubuntu with LTSP authenticating to ADS on a Windows 2003 server > SP1. My windows side of the network is running fine. The Linux terminals are > not > able to login all users... weirdly, some can, some can't. In my > log.winbindd-idmap file, I get a slew of entries similar to this: > > [2006/09/25 22:54:21, 0] tdb/tdbutil.c:tdb_log(772) > tdb(/var/lib/samba/winbindd_idmap.tdb): rec_free_read bad magic 0x42424242 > at > offset=17476 > > I have tried to add a user to the Linux machine and the new Linux users can't > login either. I'm not sure if they should-- maybe Linux can only see its > admin > and ADS users. > > wbinfo -u gives me a list of all of my users, including those who can and > can't > login. > > Solutions I've seen around are deleting files in /var/lib/samba and > restarting > Winbind. Tried that, still not working. Any suggestions? Yes. Send you smb.conf and some information (uid, gid, home, shell) about a user that can login and a user that can't login. We also need the configuration of nsswitch (libnss). 'getent passwd' is working as expected? And I find hard to understand the exact problem. a) New users created in Win can't login in Linux? b) New users created in Linux can't login in Win? c) New users created in Win can't login in Win? d) New users created in Linux can't login in Linux? Kind regards, > Thanks! > Sonja Gonzalez > Tech Coord > Ellis School > Fremont, NH Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHRzZCj65ZxU4gPQRArReAJwLSvOuefOVUEpRQy8zS1jj2DPRsgCgtSFV d5zCs4rPKOq4wbdO1c9KQDo= =QNLx -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] extended ACLs and Samba
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 09/26/2006 08:55 AM, Otmar Spoettel escreveu:
> Hi,
Hey Otmar,
> i've a Project share with many subfolders. In this subfolder many user
> have dedicated access rights to single files.
>
> Sometimes a project member change and the new one should get the same
> rights as the old one.
>
> But here is my problem. With the following line i can easy change the
> owner of files:
>
> find /samba/project -user oldid -exec chown newid {} ";"
>
> But i don't know how i can do this with users, they not owner of the
> file, but they have in the extended ACL a user:john:rwx entry
>
> How can i search the complete tree, find all files with a user entry and
> change this from oldid to new id?
Hmmm... this is not exactly a Samba doubt, then it is a
little bit off-topic on this mail list. For this kind of setup
it's always advised to know in deep your scenario, my wild guess
is that you should use a role model.
Instead of adding/removing your users you should define
some groups that you can add and remove people, it would make
your life easier and you don't need to scan the entire tree, and
you can set your ACLs per group.
> I tried somthing with getfacl and setfacl, but i'am to stupid to get it
> to run...
That's another alternative, some C code or some scripting
could make it happen, but I think is a little bit of overengineer.
> Thanx
> Otmar
Kind regards,
- --
Felipe Augusto van de Wiel <[EMAIL PROTECTED]>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org
iD8DBQFFHRpoCj65ZxU4gPQRAk60AKC3jfsY6DfxEosylBZ248d3zSkwfgCffybh
LFmp/CWWDCqkpvR51hGB8Vk=
=UsWB
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Migrating users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/26/2006 03:10 PM, Diego Martin Fernandez Fazio escreveu: > Hello, I need some ideas about one problem. I have 500 users > with md5 password on a MSsql server that I need to migrate to > a Samba server with ldap. > Is there any way to migrate or use those usernames and the md5 > hashes? i mean... may I use those hash for SMB? Short answer: yes for usernames, no for passwords. Samba (SMB/CIFS/NTLM) uses a complete different structure to set and encrypt the passwords. Since you can't recover the information hashed with MD5 you have to do some workaround. You can try to capture your users password on the server side during some time, or you can set your users password to a default value and ask them to change on the first login. > I know that openldap could use md5 but i m not sure if the > samba+ldap can use those hashes to autenticate the users. You will have multiple objects in the LDAP database, and certainly you can use MD5 to some passwords and objects, but not for samba, it has two fields sambaNTPassword and sambaLMPassword and both of them uses a special routine (it uses MD4 in the process, but it certainly can use the MD5 per se). ;) > Many many thanks and exscuse my bad english. > Diego.- Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHRf8Cj65ZxU4gPQRAoqMAKCeHoNdF93ieyBnzUwFSkNUlFizcwCfZHLq 1vmqLQ1E55xs05ymjayVK3A= =Gwb5 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.23c panic
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/26/2006 10:56 PM, Bevan Weiss escreveu: > Hi, Hello Bevan, > I've just updated (using yum under fedora 5) to the latest version of > samba and am now encountering a major problem with samba. Whenever I > attempt to access shares (don't have printers or other such non disk > shares) the access fails (after prompting for password, and performing > some level of authentication, it notes if no password is entered that > Anonymous login successful). If you could send your smb.conf it will certainly help a lot. > The error from the command line appears as this (using blank password): > [EMAIL PROTECTED] ~]# smbclient //linuxserver/tmp > Password: > Anonymous login successful > Domain=[BESHPA] OS=[Unix] Server=[Samba 3.0.23c-1.fc5] > tree connect failed: Call returned zero bytes (EOF) > > If I enter in the correct password (regardless of which user it is for) > the error is the same: > bash-3.1$ smbclient //linuxserver/tmp > Password: %% > Domain=[BESHPA] OS=[Unix] Server=[Samba 3.0.23c-1.fc5] > tree connect failed: Call returned zero bytes (EOF) > > Shown below is a snippet from the log file for this access. > Samba is running on linuxserver, and access from both linuxserver and > windows pc on the same network fail. > Nothing else has changed since previous version. > > [2006/09/27 13:25:26, 0] lib/fault.c:fault_report(42) > INTERNAL ERROR: Signal 11 in pid 3138 (3.0.23c-1.fc5) > Please read the Trouble-Shooting section of the Samba3-HOWTO > [2006/09/27 13:25:26, 0] lib/fault.c:fault_report(44) > > From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf > [2006/09/27 13:25:26, 0] lib/fault.c:fault_report(45) > === > [2006/09/27 13:25:26, 0] lib/util.c:smb_panic(1614) > PANIC (pid 3138): internal error > [2006/09/27 13:25:26, 0] lib/util.c:log_stack_trace(1721) > BACKTRACE: 19 stack frames: > #0 smbd(log_stack_trace+0x2d) [0xe288ad] > #1 smbd(smb_panic+0x5d) [0xe289dd] > #2 smbd [0xe1451a] > #3 [0x360420] > #4 /lib/libc.so.6(__strdup+0x1f) [0x3e5893] > #5 /lib/libnsl.so.1(nis_list+0x5d2) [0x9c8b5f] > #6 /lib/libnss_nisplus.so.2(_nss_nisplus_setnetgrent+0x8f) [0x34762e] > #7 /lib/libc.so.6(innetgr+0xb2) [0x460d05] > #8 smbd(user_in_netgroup+0x65) [0xc5f1e5] > #9 smbd(token_contains_name_in_list+0x23d) [0xc61bdd] > #10 smbd(change_to_user+0x4d2) [0xca0642] > #11 smbd [0xcbfb38] > #12 smbd(make_connection+0x194) [0xcc0fa4] > #13 smbd(reply_tcon_and_X+0x21d) [0xc848ed] > #14 smbd [0xcbc0e0] > #15 smbd(smbd_process+0x7ab) [0xcbd21b] > #16 smbd(main+0xbd0) [0xed6f90] > #17 /lib/libc.so.6(__libc_start_main+0xdc) [0x3914e4] > #18 smbd [0xc47701] > > > > Any help you could provide on this would be appreciated, > It's only a personal server, but still causes an inconvenience. My best guess is that you were hit by the Group Mapping changes, but without the smb.conf it is a little bit hard to be sure on that one. > Regards, > Bevan Weiss Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFHRbKCj65ZxU4gPQRAunhAJ0YDC6JRXCQnRRDEwyJv1WdowqcngCghtXb yU0l22i1Kkg1T4EA4OMd3WM= =dKwR -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] What controls the Read AndX Request byte size?
In trying to track down some performance issues, I'm finding with Ethereal that, when I launch an application from my Windows server, the SMB Read AndX Request packets have Min Count, Max Count Low, and Remaining all at 512 bytes. When launching the same application on the same client from a Win2000 share, these requests are coming in much larger sizes (4096 and 32768 were both observed). This is making a huge difference in the launch speed of the application (an in-house VB app). My question is, what smb.conf or kernel parameters could be influencing the 512 byte read request? I tried setting various socket options in smb.confand haven't seen a change. I am running Suse 10.0 with their 3.0.20b samba packages (except we recompiled to include idmap_rid). My global settings are: [global] unix charset = LOCALE workgroup = MYDOMAIN realm = MYDOMAIN.INT server string = Production File Server 03 security = ADS allow trusted domains = No enable privileges = Yes username map = /etc/samba/smbusers log level = 10 log file = /var/log/samba/%m max log size = 50 socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 printcap name = cups wins server = 10.0.0.10 ldap ssl = no idmap backend = idmap_rid:MYDOMAIN=1-5 idmap uid = 1-5 idmap gid = 1-5 template shell = /bin/bash winbind separator = + cups options = raw Thanks Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Transfer rates faster than 23MBps?
Thought you might find this worth reading since it is on topic to this thread: http://techreport.com/reviews/2006q3/maxtor-diamondmax-11/index.x?pg=6 Mark Smith wrote: Mark Smith wrote: Actually, setting SNDBUF and RCVBUF to 65536 from the default of 8192 is what got me _TO_ 22MBps... ...Ya know, I once tried increasing SNDBUF and RCVBUF to 256k but didn't see any difference. I've also tried setting the kernel parameters to 256k, but never both at the same time. Let me try that and see if it helps. Nope. Just tried. Same as always, about 22MBps. -Mark -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Change system/samba password via webmin
I think Usermin is what you need, rather than webmin. You can limit the modules available to the user- probably Change Password is all that you would want. This will change the Unix and Samba passwords. At 11:07 PM 9/28/2006, Ivan Arteaga wrote: Hi, Basically what I need is the windows users be able to change the unix/linux password because when I installed the server I defined the same username as pass. I am running sendmail and samba(PDC) in the same box, so the system password is the same mail and windows domain pass. And I want to find an easy way for the users change the initial password for their own. I defined the users in the webmin as webmin users and gived them access to the /change system pass/ option in the Samba module 'Configure automatic Unix and Samba user synchronization' But it only changes the system pass, not the samba pass. Do you have any ideas? Thanks in advance ^^ --Ivan. -Original Message- From: Gary Dale [mailto:[EMAIL PROTECTED] Sent: Thursday, September 28, 2006 10:11 PM To: Ivan Arteaga; samba@lists.samba.org Subject: Re: [Samba] Change system/samba password via webmin Ivan Arteaga wrote: > Hi List, > > I need my users to change their passwords, so I defined them as webmin users > and gived them access only to the system/change password option to do so. So > far so good... they changed their system passwords (in order to access > email) but the change it's not reflected in samba passwords. I defined the > option change password in other modules in webmin but it doesn't works, I > also have in the smb.conf "unix password sync = yes" but the same. > I will appreciate if somebody can give me an idea about how to ride this, or > maybe using another app? o_0 > > Thanks in advance. > > --Ivan. > I'm not quite sure what you are asking. Assuming that when you say system password, you are referring to the Windows domain password, and when you say Samba password, you are referring to the Unix/Linux password, then one obvious place to check is password change dialog in smb.conf. It has to match what your Unix/Linux password program is doing (it use "expect" to get the passwd prompts and feed it the passwords). Otherwise, check the list archives. There have been a couple other similar problems recently that had different solutions. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: WINS over subnets
chris barry a écrit : On Thu, 2006-09-28 at 19:00 +0200, Hoggins! wrote: does the WINS server have a route to this wireless net, or is it responding out the default gateway? have you tcpdumped the interfaces on anything yet? All the routes are static, and the two hosts can ping each other without problems. The routing works perfectly fine. Having tcpdumped a bit what was going on, I could only figure that the machines are correctly registering to the server, and the servers responds that it's okay. The real problem is that it simply does not fill the browse.dat file with other entries than itself and the WinXP box that is on the same subnet. With a closer look to wins.dat, I can see that all the machines are present, and have the correct IP addresses. So my personal conclusion is that there is a misconfiguration of samba somewhere, that makes it generate a browse list only for it's own subnet. I think it's weird. Thanks for helping -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Change system/samba password via webmin
You don't have do any of that. Just enable unix password synchronisation in smb.conf. The normal Windows password change dialogue works with Samba. And please, stop using terms like system pass and Samba pass. You have the Windows/Domain password and the Unix password. :) Ivan Arteaga wrote: Hi, Basically what I need is the windows users be able to change the unix/linux password because when I installed the server I defined the same username as pass. I am running sendmail and samba(PDC) in the same box, so the system password is the same mail and windows domain pass. And I want to find an easy way for the users change the initial password for their own. I defined the users in the webmin as webmin users and gived them access to the /change system pass/ option in the Samba module 'Configure automatic Unix and Samba user synchronization' But it only changes the system pass, not the samba pass. Do you have any ideas? Thanks in advance ^^ --Ivan. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba in centos 4.4: samba-3.0.10-1.4E.9 versus the latest from sernet samba3-3.0.23c-30
Hi people. I use centos on many my servers and they are running samba which comes with centos: samba-3.0.10-1.4E.9 From samba-3.0.10 to 3.0.23c many thnigs in code had change. Many bug fixes etc., code rewrote (for example oplock in later version of samba than 3.0.10). RedHat people don't have made a full of backports to their samba, only security things. So I have question, what do you think samba people, should i switch to the latest samba from sernet (for example) or still use samba, wchich comes with my centos. What are + and - ? Best regards, Irens -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
