Re: [Samba] Re: WINS over subnets

2006-10-02 Thread John H Terpstra
On Thursday 28 September 2006 12:00, Hoggins! wrote:
> Barry, Christopher a écrit :
> > On Thu, 2006-09-28 at 04:14 +0200, Hoggins! wrote:
> > SNIP...
> >
> > For each host on 192.168.3.0/24, manually add in the WINS address of
> > hgsserver in the wireless NIC configuration. Because WINS does not jump
> > routers, you'll need to tell the client where to find this information.
>
> Well, I already did that. It's not manually added, but it's sent through
> DHCP. I checked that every machine on 192.168.3.0/24 had the correct info.
> So I don't really think the problem comes from the clients, but from the
> server instead. My firewall is apparently not the problem, because it
> blocks nothing on this side.

Ah! Does your DHCP settings include "option netbios-node-type 8"?

- John T.

> My opinion is that my server configuration is faulty. Did you have a
> look at it, and did you find errors ? I'm actually thinking of starting
> from scratch, but I'm not even sure this will solve my problems
>
> Thanks anyway.
>
> If anyone can help me on this, it would be wonderful.
>
>   Hoggins!

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] WINS over subnets

2006-10-02 Thread John H Terpstra
On Thursday 28 September 2006 11:23, Barry, Christopher wrote:
> On Thu, 2006-09-28 at 04:14 +0200, Hoggins! wrote:
> > Hello,
> >
> > I'm trying to make browsing work over several routed subnets, but
> > obviously, something goes wrong. Here's the situation :
> >
> >
> >
> > !---!
> > ! hgsserver ! (SAMBA HOST)
> > !---!
> >
> >   |192.168.2.0/24   !--!  192.168.3.0/24
> >   |-! wifigate !- - - -
> >   |!--!  (several wireless WinXP boxes)
> >
> > !--!
> > ! WinXP box!
> > ! "hoggins"!
> > !--!
>
> SNIP...
>
> > My browse.dat does not contain all I need, it just contains my machine
> > ("hoggins") and the server. I would like to have all the other hosts
> > that are on subnet 192.168.3.0/24. These hosts have received the
> > server's IP address as the WINS server in their DHCP transaction, and I
> > can see they communicate with it when doing an ethereal analysis.
> > But the browse list remains desperately empty from these hosts.
> >
> > Any ideas on how to solve this really annoying problem ?
> >
> > Thanks in advance,
> >
> > Hoggins!
>
> For each host on 192.168.3.0/24, manually add in the WINS address of
> hgsserver in the wireless NIC configuration. Because WINS does not jump
> routers, you'll need to tell the client where to find this information.

Wrong! WINS uses directed UDP. Directed UDP is routable. Does your router pass 
directed UDP packets?

Check your wins.dat file on hgsserver to see if all clients have registered 
with the WINS server.

- John T.

>
>
> --
> Regards,
> Christopher Barry
> Manager of Information Systems
> SilverStorm Technologies, Inc.
> O: 610-233-4870
> F: 610-233-4777
> C: 267-242-9306
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Some help needed in Romania with some settings

2006-10-02 Thread tehno

Hi,
My name is Monenci Nicolae. I'm from Romania, an i have a problem that i 
could not find any answer on net.


I have an "Samba version 3.013" instaled.
I have atach-ed the smb.conf that i have configured my self.


So my problem is:

  I have a network of 10 PC. (5 windows XP, 2 windows 2000, 
3 windows NT)

I have installed 1 new PC with windows XP.

After i installed all, i connect it to the Domain JDDWORKGROUP. After 
that when im editing any image file (in photoshop /  CorelDraw) from the 
shares i recieve an  error that sound's like this:


"Could not save "W:\alfaa2.tif" because the file it is locked"
The same file opened on other PC works just fine.


*Please help i have tried anything (changed network card, changed 
motherboard, reistalled windows XP several times) but with no result.*


Thanks for your time,
Nicu Monenci
# Samba config file created using SWAT
# from 0.0.0.0 (0.0.0.0)
# Date: 2005/06/22 13:50:21

# Global parameters
[global]
ldap ssl = no
name resolve order = wins bcast host lmhosts
passwd chat debug = Yes
passwd chat = *New*Password* %n\n*Re-enter*new*password* %n\n 
*Password*changed*
time server = Yes
dns proxy = No
netbios name = JDD_SERVER
logon script = logon.bat
workgroup = JDDWORKGROUP
os level = 64
add machine script = /usr/sbin/useradd -s /bin/false -d /var/lib/nobody 
'%u'
delete user script = /usr/sbin/userdel -r '%u'
max log size = 50
log file = /var/log/samba/log.%m
load printers = no
add group script = /usr/sbin/groupadd '%g'
#   socket options = TCP_NODELAY SO_RCVBUF=14600 SO_SNDBUF=14600
delete group script = /usr/sbin/groupdel '%g'
add user to group script = /usr/sbin/usermod -G '%g' '%u'
username map = /etc/samba/smbusers
map to guest = Bad User
logon home = \\%N\%U\.win_profiles\%m
#   printer admin = @adm
wins support = Yes
#   printcap cache time = 60
server string = Samba Server %v
logon path = \\%N\profiles\%U\%m
add user script = /usr/sbin/useradd -m '%u'
syslog = 0
domain master = Yes
preferred master = Yes
domain logons = Yes
local master = Yes
include = /etc/samba/incl/smb.conf.global.%a
include = /etc/samba/incl/smb.conf.global.%M
include = /etc/samba/incl/smb.conf.global.%a.%M

[homes]
comment = Home Directories
#   vfs objects = vscan-clamav
#   vscan-clamav:config-file = /etc/samba/vscan-clamav.conf
valid users = %S
read only = No
browseable = No

#[printers]
#   comment = All Printers
#   path = /var/spool/samba
#   create mask = 0700
#   guest ok = Yes
#   printable = Yes
#   use client driver = Yes
#   browseable = No

#[print$]
#   path = /var/lib/samba/printers
#   write list = @adm, root
#   inherit permissions = Yes
#   guest ok = Yes

#[pdf-gen]
#   comment = PDF Generator (only valid users)
#   path = /var/tmp
#   valid users = elena
#   read only = No
#   hosts allow = 192.168.0.0/255.255.255.0
#   printable = Yes
#   printing = bsd
#   print command = /usr/share/samba/scripts/print-pdf
#   lpq command = lpq -P'%p'
#   lprm command = lprm -P'%p' %j

[netlogon]
comment = Network Logon Service
path = /data/netlogon/%U
browseable = No

[profiles]
#   vfs objects = vscan-clamav
#   vscan-clamav: config-file = /etc/samba/vscan-clamav.conf
browseable = no
writable = yes
path = /backup/samba_profiles
#   /home/samba-ntprof
#   force group = roaming
#   force user = root
valid users = @roaming
create mode = 0770
directory mode = 0770

[tehnoreda]
vfs objects = recycle
recycle:keeptree = Yes
recycle:versions = Yes
recycle:touch = Yes
comment = Tehnoredactare
path = /data/tehnoredactare
valid users = @tehnoredactare
force user = root
force group = tehnoredactare
read only = No
create mask = 0770
force create mode = 0770
directory mask = 0770
veto files = 
/*.php/*.xml/*.css/.htaccess/*.com/*.bat/*.exe/*.scr/*.pif/*.dll/*.mp3//*.lnk/*.{*}/

[publicitate]
vfs objects = recycle
recycle:keeptree = Yes
recycle:versions = Yes
recycle:touch = Yes
path = /data/publicitate
valid users = @publicitate
write list = @tehnoredactare
force user = root
force group = publicitate
create mask = 0770
force create mode = 0770
directory mask = 0770
#   veto files = 
/*.php/*.xml/*.css/.htaccess/*.com/*.bat/*.exe/*.scr/*.pif/*.dll//*.lnk/*.{*}/

[export reclame]
mangled names = No
write list = @publicitate
default case = upper
   

[Samba] problem accessing Windows XP computer

2006-10-02 Thread Norman S. Clerman
Samba friends,

I have a computer running SUSE Linux 10.1. At work all the computers on
the network, except this one, are running either Windows 2000 Pro or
Windows 2000 Server. The computers are physically connected through a
router. I am an administrator on all the Windows computers and have no
problem whatsoever mounting administrative shares such as C$ using smbmnt.

Using the same Linux computer at home, I try to access a computer
running Windows XP Pro, on which I'm also an administrator. I have
turned off simple file sharing on the Windows XP computer. The computers
are also connected through a router. I can't access using smbclient, and
I can't mount using smbmnt. The Windows XP computer has the name of
APPLE, and when I try

smbclient -L APPLE

or

smbclient -L apple

I get a message

connection to apple failed.

Any suggestions?

Norm Clerman

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.23c-1.fc5 problem - groups

2006-10-02 Thread Luis Felipe Marzagao/RBSM
Hi there,
 
I use FC5.
 
I discovered, for an exemple, if you have a user group with 3 members (Alan,
Baker, Clive), before 3.0.23c this line at smb.conf worked fine:
 
valid users = @user
 
But with 3.0.23c update it doesn't work anymore.
 
You have to replace the line like this:
 
valid users = Alan, Baker, Clive
 
I mean, replace the "@groupname" with the complete userlist of the group
separated by commas.
 
It´s a quick solution, but some groups are big and it´s kind of hard to do
that with all of them.
 
Apparently, other people are experiencing the same problem, as related at
fedora forum (http://www.fedoraforum.org/forum/showthread.php?t=125460

&highlight=samba).
 
 
I´d appreciate any help or comments.
 
Attached my smb.conf and logs.
 
The workstation I´m trying to access the shares from is a Windows XP one,
and it´s name is "rbsm204".
 
The user is "felipe" and he belongs to "admin" group.
 
I found this at my workstation log (attached):
 
[2006/09/30 14:58:35, 3] lib/util_sid.c:string_to_sid(223)

string_to_sid: Sid @admin does not start with 'S-'.

[2006/09/30 14:58:35, 5] smbd/password.c:user_in_netgroup(423)

Unable to get default yp domain, let's try without specifying it [2006/09/30
14:58:35, 5] smbd/password.c:user_in_netgroup(427)

looking for user felipe of domain (ANY) in netgroup admin [2006/09/30
14:58:35, 0] lib/fault.c:fault_report(41)

===

[2006/09/30 14:58:35, 0] lib/fault.c:fault_report(42)

INTERNAL ERROR: Signal 11 in pid 13861 (3.0.23c-1.fc5)

Please read the Trouble-Shooting section of the Samba3-HOWTO [2006/09/30
14:58:35, 0] lib/fault.c:fault_report(44)

From:  
http://www.samba.org/samba/docs/Samba3-HOWTO.pdf

[2006/09/30 14:58:35, 0] lib/fault.c:fault_report(45)

===

[2006/09/30 14:58:35, 0] lib/util.c:smb_panic(1614)

PANIC (pid 13861): internal error

[2006/09/30 14:58:35, 0] lib/util.c:log_stack_trace(1721)

BACKTRACE: 19 stack frames:

#0 smbd(log_stack_trace+0x2d) [0x8a78ad]

#1 smbd(smb_panic+0x5d) [0x8a79dd]

#2 smbd [0x89351a]

#3 [0xa5f420]

#4 /lib/libc.so.6(__strdup+0x1f) [0x346893]

#5 /lib/libnsl.so.1(nis_list+0x5d2) [0xc64b5f]

#6 /lib/libnss_nisplus.so.2(_nss_nisplus_setnetgrent+0x8f) [0x51262e]

#7 /lib/libc.so.6(innetgr+0xb2) [0x3c1d05]

#8 smbd(user_in_netgroup+0x65) [0x6de1e5]

#9 smbd(token_contains_name_in_list+0x23d) [0x6e0bdd]

#10 smbd(change_to_user+0x4d2) [0x71f642]

#11 smbd [0x73eb38]

#12 smbd(make_connection+0x194) [0x73ffa4]

#13 smbd(reply_tcon_and_X+0x21d) [0x7038ed]

#14 smbd [0x73b0e0]

#15 smbd(smbd_process+0x7ab) [0x73c21b]

#16 smbd(main+0xbd0) [0x955f90]

#17 /lib/libc.so.6(__libc_start_main+0xdc) [0x2f24e4]

#18 smbd [0x6c6701]

[2006/09/30 14:58:35, 0] lib/fault.c:dump_core(173)

dumping core in /var/log/samba/cores/smbd

 
Thanks again!
 
Cheers.
Luis Felipe
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Problem with groups - Samba panic - update 3.0.23c-1.fc5

2006-10-02 Thread Luis Felipe Marzagao/RBSM
Hi there,
 
I´m using FC5 and since I updated to Samba 3.0.23c-1.fc5 I´m not able to
access some shares from the workstations.
 
Lookin at the log, i found this error:
 
 
[2006/09/29 19:34:27, 0] lib/fault.c:fault_report(41)
  ===
[2006/09/29 19:34:27, 0] lib/fault.c:fault_report(42)
  INTERNAL ERROR: Signal 11 in pid 3646 (3.0.23c-1.fc5)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2006/09/29 19:34:27, 0] lib/fault.c:fault_report(44)
  
  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2006/09/29 19:34:27, 0] lib/fault.c:fault_report(45)
  ===
[2006/09/29 19:34:27, 0] lib/util.c:smb_panic(1614)
  PANIC (pid 3646): internal error
[2006/09/29 19:34:27, 0] lib/util.c:log_stack_trace(1721)
  BACKTRACE: 19 stack frames:
   #0 smbd(log_stack_trace+0x2d) [0xb238ad]
   #1 smbd(smb_panic+0x5d) [0xb239dd]
   #2 smbd [0xb0f51a]
   #3 [0xe5f420]
   #4 /lib/libc.so.6(__strdup+0x1f) [0x685893]
   #5 /lib/libnsl.so.1(nis_list+0x5d2) [0x191b5f]
   #6 /lib/libnss_nisplus.so.2(_nss_nisplus_setnetgrent+0x8f) [0x48462e]
   #7 /lib/libc.so.6(innetgr+0xb2) [0x700d05]
   #8 smbd(user_in_netgroup+0x65) [0x95a1e5]
   #9 smbd(token_contains_name_in_list+0x23d) [0x95cbdd]
   #10 smbd(change_to_user+0x4d2) [0x99b642]
   #11 smbd [0x9bab38]
   #12 smbd(make_connection+0x194) [0x9bbfa4]
   #13 smbd(reply_tcon_and_X+0x21d) [0x97f8ed]
   #14 smbd [0x9b70e0]
   #15 smbd(smbd_process+0x7ab) [0x9b821b]
   #16 smbd(main+0xbd0) [0xbd1f90]
   #17 /lib/libc.so.6(__libc_start_main+0xdc) [0x6314e4]
   #18 smbd [0x942701]
[2006/09/29 19:34:28, 0] lib/fault.c:dump_core(173)
  dumping core in /var/log/samba/cores/smbd
[2006/09/29 19:34:28, 0] lib/fault.c:fault_report(41)
  ===

 
I discovered, for an exemple, if you have a user group with 3 members (Alan,
Baker, Clive), before 3.0.23c this line worked fine:
 
valid users = @user
 
But with 3.0.23c it doesn't work anymore. You have to replace the line like
this:
 
valid users = Alan, Baker, Clive
 
I mean, replace the @groupname with the complet userlist of the group
separated by commas.
 
It´s a quick solution, but some groups are large and it´s kind a hard to do
that with all of them.
 
Anyway, I found this other discussion
(http://www.mail-archive.com/samba@lists.samba.org/msg78460.html), where
people say something about a patch (which, unfortunatelly, I have no idea
how to use or apply)...
 
 
I ´d appreciate any help or comments.
 
Thanks!
 
Luis Felipe
 
 
 
 
 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: WINS over subnets - something strange in the HOWTO

2006-10-02 Thread Edmundo Valle Neto

John H Terpstra escreveu:

On Sunday 01 October 2006 18:45, Hoggins! wrote:
  

Edmundo Valle Neto a écrit :


Hoggins! escreveu:

Yes, in that case it should maintain a more complete list. And yes you
just must have ONE WINS server.
I think you didnt got the point, domain master, local master, domain
controllers, wins server, etc are just roles of the same server,
enabling some options in smb.conf the same server can be all of them at
the same time.
BUT, other subnets need local master browsers too, they can be any
Windows workstation (normally you should not worry about that), this is
one of the reasons that all of them must use the same single WINS server
(I am not saying that yours are not), the LMB can be any available
workstation (the machines in the subnet should elect one automatically),
so any machine ending up beeing a LMB will use the  same WINS server to
find the DMB and sync. It works that way without you needing to care
about it.


Ok, if the wireless clients can see each others probably that segment
has an LMB with the browse list of that segment but just isnt passing it
to the samba server.
About the LMBs I just said that to make it clear, that the other
networks dont register themselves directly with samba to be included in
the browse.dat file, who does that is the LMB of that segment (as
explained before).
  

Thanks, I understand better now how it works.
So the LMB (any Win machine, elected) of the 192.168.3.0/24 segment must
send its browse list to the server, right ? I must check this traffic
with ethereal and/or with debug level 2. Sorry I didn't yet.



Not quite! 

The LMB does nothing to contact the DMB. The responsibility for browse list 
synchronization belongs to the DMB.


The DMB looks for the LMB registrations in the WINS (wins.dat) database. It 
then contacts each LMB to synchronise the browse list.


Ergo, if the WINS database does not contain all machines that are LMBs - 
browse list synchronization will not happen.


- John T.
  


John.

   Look at this at: 
http://samba.org/samba/docs/man/Samba-HOWTO-Collection/NetworkBrowsing.html



How Browsing Functions

...
Instead, the DMB serves the role of contacting each LMB (found by asking 
WINS or from LMHOSTS) and exchanging browse list contents.

...

This is what you said.

But.


Cross-Subnet Browsing

...
As soon as N2_B has become the LMB, it looks for a DMB with which to 
synchronize its browse list. It does this by querying the WINS server 
(N2_D) for the IP address associated with the NetBIOS name 
WORKGROUP<1B>. This name was registered by the DMB (N1_C) with the WINS 
server as soon as it was started.


Once N2_B knows the address of the DMB, it tells it that is the LMB for 
subnet 2 by sending a MasterAnnouncement packet as a UDP port 138 
packet. It then synchronizes with it by doing a NetServerEnum2 call. 
This tells the DMB to send it all the server names it knows about. Once 
the DMB receives the MasterAnnouncement packet, it schedules a 
synchronization request to the sender of that packet. After both 
synchronizations are complete, the browse lists look like those in 
Browse Subnet Example 2

...

And thats the another explanation that I said.

Shouldnt that last explanation be different?

Regards.

Edmundo Valle Neto

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] WINS over subnets

2006-10-02 Thread John H Terpstra
On Thursday 28 September 2006 16:13, Aaron Kincer wrote:
> Barry, Christopher wrote:
> > For each host on 192.168.3.0/24, manually add in the WINS address of
> > hgsserver in the wireless NIC configuration. Because WINS does not jump
> > routers, you'll need to tell the client where to find this information.
>
> This is not entirely correct. Many routers can be configured to forward
> NetBIOS and WINS frames. Firewalls that split subnets off different
> interfaces can do it too. However, it can be messy to forward broadcast
> frames.

WINS uses UDP unicast (directed UDP) which is routable. What you have referred 
to is known as "NetBIOS helper agent" - a router configuration option that 
can perform forwarding of NetBIOS UDP broadcasts. This option is a VERY bad 
thing and is totally unecessary if WINS is correctly configured and if 
clients are working as they should.

- John T.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: WINS over subnets

2006-10-02 Thread Craig White
On Mon, 2006-10-02 at 19:55 -0700, Craig White wrote:
> On Tue, 2006-10-03 at 04:41 +0200, Hoggins! wrote:
> > Okay, I checked on my clients, and what I see is for the most 
> > surprising: they only display hosts within the samba server's 
> > browse.dat, not even the other hosts on the same subnet (usually, I 
> > believe they would have been discovered through broadcast). So the only 
> > machines that appear on ALL the machines of all the subnets are :
> > - the server
> > - the XP box, located on the same subnet as the server
> > 
> > The other hosts' names can be successfully resolved by the server 
> > (checked with Ethereal) when explicitly typed in the explorer bar. But 
> > they are not "discovered" by the network browsing.
> > 
> > Any idea of the problem ?
> > 
> > The local masters don't seem to be doing their job, do they ?
> 
> Official Samba HowTo suggests that you would need a WINS server on each
> subnet
> 
> http://samba.org/samba/docs/man/Samba-HOWTO-Collection/NetworkBrowsing.html#id2588936
> 
> You might want to review the documentation - there is a possibility
> that 
> 'remote browse sync = broadcast_address_of_remote_subnet'
> might work for you.

OK correction...I have it on good authority that I have given bad advice
above...

1 - only 1 WINS server
2 - remote browse sync is not what you want
3 - clients need to have proper configuration of WINS server address -
if by DHCP, then you probably need to set the node type (option 44/46)
correctly
4 - OP should check contents of wins.dat (on my RH systems, they are
located in /var/cache/samba but on others, they are in /var/lib/samba
YMMV)

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: WINS over subnets

2006-10-02 Thread John H Terpstra
On Sunday 01 October 2006 18:45, Hoggins! wrote:
> Edmundo Valle Neto a écrit :
> > Hoggins! escreveu:
> >
> > Yes, in that case it should maintain a more complete list. And yes you
> > just must have ONE WINS server.
> > I think you didnt got the point, domain master, local master, domain
> > controllers, wins server, etc are just roles of the same server,
> > enabling some options in smb.conf the same server can be all of them at
> > the same time.
> > BUT, other subnets need local master browsers too, they can be any
> > Windows workstation (normally you should not worry about that), this is
> > one of the reasons that all of them must use the same single WINS server
> > (I am not saying that yours are not), the LMB can be any available
> > workstation (the machines in the subnet should elect one automatically),
> > so any machine ending up beeing a LMB will use the  same WINS server to
> > find the DMB and sync. It works that way without you needing to care
> > about it.
> >
> >
> > Ok, if the wireless clients can see each others probably that segment
> > has an LMB with the browse list of that segment but just isnt passing it
> > to the samba server.
> > About the LMBs I just said that to make it clear, that the other
> > networks dont register themselves directly with samba to be included in
> > the browse.dat file, who does that is the LMB of that segment (as
> > explained before).
>
> Thanks, I understand better now how it works.
> So the LMB (any Win machine, elected) of the 192.168.3.0/24 segment must
> send its browse list to the server, right ? I must check this traffic
> with ethereal and/or with debug level 2. Sorry I didn't yet.

Not quite! 

The LMB does nothing to contact the DMB. The responsibility for browse list 
synchronization belongs to the DMB.

The DMB looks for the LMB registrations in the WINS (wins.dat) database. It 
then contacts each LMB to synchronise the browse list.

Ergo, if the WINS database does not contain all machines that are LMBs - 
browse list synchronization will not happen.

- John T.

>
> > Yes, it is possible and most of the times the recommended way.
> >
> >
> > Theres some tools and comands to see problems with name resolution on
> > the XP clients, like nbtstat or the netbios browsing console.
> >
> > Putting a log level of 2 in smb.conf, is there any interesting
> > information about elections in the nmbd log? Whould help if you include
> > your smb.conf here too.
>
> Yes, I put debug level to 2, and I saw that the server was always
> elected as the master. And also that the machines successfully
> registered to the server.
> My smb.conf (a bit modified since my first post, but the symptoms are
> the same though) :
>
> [global]
>   display charset = ASCII
>   workgroup = BOUFFARD
>   netbios aliases = hgsserver
>   server string = PARTAGES
>   interfaces = eth0
>   security = SHARE
>   map to guest = Bad User
>   root directory = /
>   pam password change = Yes
>   passwd program = /usr/bin/passwd %u
>   passwd chat debug = Yes
>   username map = /etc/samba/smbusers
>   unix password sync = Yes
> # log level = 2
> # syslog = 3
> # syslog only = Yes
>   log file = /var/log/samba/%m.log
>   max log size = 50
>   debug timestamp = No
>   time server = Yes
>   server signing = auto
>   socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192
>   printcap name = /etc/printcap
>   os level = 32
>   lm announce = Yes
>   preferred master = Yes
>   domain master = Yes
>   local master = no
>   dns proxy = No
>   wins support = Yes
>   ldap ssl = no
>   remote announce = 192.168.3.255/BOUFFARD
>   remote browse sync = 192.168.3.255 224.0.0.1
>   usershare path =
>   winbind enum users = Yes
>   winbind enum groups = Yes
>   winbind use default domain = Yes
>   guest ok = Yes
>   hosts allow = 192.168.2.0/24, 192.168.3.0/24
>   cups options = raw
>
> [...] (some shares declarations)
>
> I'll come with more results on benchmarks ASAP. Thanks for your help and
> patience.
>
> Regards,
>
>   Hoggins!
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] WINS over subnets

2006-10-02 Thread John H Terpstra
On Thursday 28 September 2006 11:23, Barry, Christopher wrote:
> On Thu, 2006-09-28 at 04:14 +0200, Hoggins! wrote:
> > Hello,
> >
> > I'm trying to make browsing work over several routed subnets, but
> > obviously, something goes wrong. Here's the situation :
> >
> >
> >
> > !---!
> > ! hgsserver ! (SAMBA HOST)
> > !---!
> >
> >   |192.168.2.0/24   !--!  192.168.3.0/24
> >   |-! wifigate !- - - -
> >   |!--!  (several wireless WinXP boxes)
> >
> > !--!
> > ! WinXP box!
> > ! "hoggins"!
> > !--!
>
> SNIP...
>
> > My browse.dat does not contain all I need, it just contains my machine
> > ("hoggins") and the server. I would like to have all the other hosts
> > that are on subnet 192.168.3.0/24. These hosts have received the
> > server's IP address as the WINS server in their DHCP transaction, and I
> > can see they communicate with it when doing an ethereal analysis.
> > But the browse list remains desperately empty from these hosts.
> >
> > Any ideas on how to solve this really annoying problem ?
> >
> > Thanks in advance,
> >
> > Hoggins!
>
> For each host on 192.168.3.0/24, manually add in the WINS address of
> hgsserver in the wireless NIC configuration. Because WINS does not jump
> routers, you'll need to tell the client where to find this information.

Wrong! WINS uses directed UDP. Directed UDP is routable. Does your router pass 
directed UDP packets?

Check your wins.dat file on hgsserver to see if all clients have registered 
with the WINS server.

- John T.

>
>
> --
> Regards,
> Christopher Barry
> Manager of Information Systems
> SilverStorm Technologies, Inc.
> O: 610-233-4870
> F: 610-233-4777
> C: 267-242-9306

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: WINS over subnets

2006-10-02 Thread Craig White
On Tue, 2006-10-03 at 04:41 +0200, Hoggins! wrote:
> Okay, I checked on my clients, and what I see is for the most 
> surprising: they only display hosts within the samba server's 
> browse.dat, not even the other hosts on the same subnet (usually, I 
> believe they would have been discovered through broadcast). So the only 
> machines that appear on ALL the machines of all the subnets are :
>   - the server
>   - the XP box, located on the same subnet as the server
> 
> The other hosts' names can be successfully resolved by the server 
> (checked with Ethereal) when explicitly typed in the explorer bar. But 
> they are not "discovered" by the network browsing.
> 
> Any idea of the problem ?
> 
> The local masters don't seem to be doing their job, do they ?

Official Samba HowTo suggests that you would need a WINS server on each
subnet

http://samba.org/samba/docs/man/Samba-HOWTO-Collection/NetworkBrowsing.html#id2588936

You might want to review the documentation - there is a possibility
that 
'remote browse sync = broadcast_address_of_remote_subnet'
might work for you.

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: WINS over subnets

2006-10-02 Thread Hoggins!
Okay, I checked on my clients, and what I see is for the most 
surprising: they only display hosts within the samba server's 
browse.dat, not even the other hosts on the same subnet (usually, I 
believe they would have been discovered through broadcast). So the only 
machines that appear on ALL the machines of all the subnets are :

- the server
- the XP box, located on the same subnet as the server

The other hosts' names can be successfully resolved by the server 
(checked with Ethereal) when explicitly typed in the explorer bar. But 
they are not "discovered" by the network browsing.


Any idea of the problem ?

The local masters don't seem to be doing their job, do they ?

Hoggins!

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Fwd: [Samba] Re: Samba print problem (everything looks right)]

2006-10-02 Thread Cybionet

Greeting Curtis,

 For my knowledge, can you explain how (with rpc)...and please don't 
refer me to the documentation on the site. I have use 1 day to try to 
make it work and the documentation is not very clear.


Actually, my windows and linux client use cups as print server very 
well, but I never success to add driver in samba.


Robert

I never used cupsaddsmb.  It did it manually with rpcclient.

Curtis

Dale Schroeder wrote:
  

This problem has been driving me crazy for a week.

Fedora Core 4, Cups 1.2.1 Samba 3.0.23a Thanks in advance.

 --
Curtis Maurand
Senior Network & Systems Engineer
BlueTarp Financial, Inc.
443 Congress St. 6th Floor
Portland, ME 04101
207.797.5900 x233 (office)
207.797.3833 (fax)
mailto:[EMAIL PROTECTED]
http://www.bluetarp.com
-- To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba


If you used cupsaddsmb to export your printer, CUPS 1.2.1 had a bug,
that caused problems with Samba.  (See below)
1.2.2 had a different bug with advanced features.  Try 1.2.3 or 1.2.4.

Dale

 Original Message 
Subject:[Samba] Re: Samba print problem (everything looks right)
Date:   Fri, 09 Jun 2006 09:34:55 -0400
From:   Brian White <[EMAIL PROTECTED]>
Organization:   Precidia Technologies http://www.precidia.com/
To: Alessandro Morgantini <[EMAIL PROTECTED]>
CC: samba@lists.samba.org
References: <[EMAIL PROTECTED]>





I read your posts on samba mailing list.
I have the same problem:
I can print, but I can't open the printer properties page ("no driver" 
message...).
For me also, the drivers are read from samba server e written on 
C:\WinNT\System32\spool\drivers\... (I have removed him in advance to 
test this).
  
There was a bug in the cupssmbadd program that stripped all end-of-line 
characters during the conversion.  (Many thanks to Vincent Nicolas for 
catching this!)  See http://www.cups.org/str.php?L1750


  Brian
 ( [EMAIL PROTECTED] )

---
  BREAKFAST.COM Halted...  Cereal Port Not Responding
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba





  


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] problem accessing Windows XP as a client

2006-10-02 Thread Norman S . Clerman
Samba friends,

I have a computer running SUSE Linux 10.1. At work all the computers on
the network, except this one, are running either Windows 2000 Pro or
Windows 2000 Server. The computers are physically connected through a
router. I am an administrator on all the Windows computers and have no
problem whatsoever mounting administrative shares such as C$ using smbmnt.

Using the same Linux computer at home, I try to access a computer
running Windows XP Pro, on which I'm also an administrator. I have
turned off simple file sharing on the Windows XP computer. The computers
are also connected through a router. I can't access using smbclient, and
I can't mount using smbmnt. The Windows XP computer has the name of
APPLE, and when I try

smbclient -L APPLE

or

smbclient -L apple

I get a message

connection to apple failed.

Any suggestions?

Norm Clerman


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] change passwd from windows--more grief

2006-10-02 Thread Steve Glasser
Hi group,

I can't seem to get passwd change from windows to work.  I am running
samba 3.0.20-3.1.20060mdk installed from rpms on Mandriva 2006; the
clients are windows XP sp2.  When I try to change passwd from windows I
get "You do not have permission to change your password".

What am I doing wrong? 

My global smb.conf is below.  
>From log.smbd I think this error pertains to the windows error: 

[2006/10/02 15:25:00, 3] smbd/chgpasswd.c:chgpasswd(457)
  chgpasswd: Password change (as_root=Yes) for user: foo
  PAM: unable to obtain the new authentication token - is password to
weak?

This is while using a new passwd of 9 random letters/numbers.

Any suggestions welcome, thanks in advance



dos charset = 850
unix charset = ISO8859-1
workgroup = DELTAGRADING
server string = %h server (Samba, Mandrake)
passdb backend = tdbsam
pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew
\sUNIX\spassword:* %n\n .
passwd chat debug = Yes
username map = /etc/samba/smbusers
unix password sync = Yes
log level = 3
name resolve order = wins bcast hosts
time server = Yes
printcap name = CUPS
add user script = /usr/sbin/useradd -m %u
delete user script = /usr/sbin/userdel -r %u
add group script = /usr/sbin/groupadd %g
delete group script = /usr/sbin/groupdel %g
add user to group script = /usr/sbin/usermod -G %g %u
add machine script = /usr/sbin/useradd -s /bin/false
-d /dev/null %u
logon script = scripts\%U.bat
logon path =
logon drive = H:
domain logons = Yes
os level = 128
preferred master = Yes
domain master = Yes
wins support = Yes
ldap passwd sync = Yes
idmap uid = 15000-2
idmap gid = 15000-2


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] ridmap info has changed

2006-10-02 Thread Graham Dunn
After a restart, I'm seeing all the userid's change. Which I thought
idmap_rid was supposed to prevent.

I see this in log.winbind from an ls -l.

[2006/10/02 17:20:52, 1] nsswitch/winbindd_group.c:winbindd_getgrgid(340)
  Can't find domain from sid

Any ideas what's happened?

wbinfo -u and -g seem to work

# wbinfo -u | wc -l
   28724
# wbinfo -g | wc -l
   13270

Thanks,
Graham


samba-3.0.20b on FreeBSD 5.3-RELEASE-p9

# Global parameters
[global]

workgroup = HARRIS
security = ADS
netbios name = ATARASHII
encrypt passwords = yes
realm = CS.MYHARRIS.NET
password server = wtldc1vm.cs.myharris.net
wins server = 137.237.104.156
client schannel = no

allow trusted domains = No
idmap backend = idmap_rid:HARRIS=1-30
idmap uid = 1-30
idmap gid = 1-30
winbind separator = .
template homedir = /home/%U
template shell = /bin/sh
winbind cache time = 3600
winbind nested groups = Yes
winbind use default domain = Yes
winbind enum users = No
winbind enum groups = No


force create mode = 0666
force directory mode = 0777
dos filemode = Yes

server string = Samba File Server %v

map to guest = Bad User

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Fwd: [Samba] Re: Samba print problem (everything looks right)]

2006-10-02 Thread cmaurand

I never used cupsaddsmb.  It did it manually with rpcclient.

Curtis

Dale Schroeder wrote:
> This problem has been driving me crazy for a week.
> 
> Fedora Core 4, Cups 1.2.1 Samba 3.0.23a Thanks in advance.
> 
>  --
> Curtis Maurand
> Senior Network & Systems Engineer
> BlueTarp Financial, Inc.
> 443 Congress St. 6th Floor
> Portland, ME 04101
> 207.797.5900 x233 (office)
> 207.797.3833 (fax)
> mailto:[EMAIL PROTECTED]
> http://www.bluetarp.com
> -- To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/listinfo/samba
> 
> 
> If you used cupsaddsmb to export your printer, CUPS 1.2.1 had a bug,
> that caused problems with Samba.  (See below)
> 1.2.2 had a different bug with advanced features.  Try 1.2.3 or 1.2.4.
> 
> Dale
> 
>  Original Message 
> Subject:  [Samba] Re: Samba print problem (everything looks right)
> Date: Fri, 09 Jun 2006 09:34:55 -0400
> From: Brian White <[EMAIL PROTECTED]>
> Organization: Precidia Technologies http://www.precidia.com/
> To:   Alessandro Morgantini <[EMAIL PROTECTED]>
> CC:   samba@lists.samba.org
> References:   <[EMAIL PROTECTED]>
> 
> 
> 
>> I read your posts on samba mailing list.
>> I have the same problem:
>> I can print, but I can't open the printer properties page ("no driver" 
>> message...).
>> For me also, the drivers are read from samba server e written on 
>> C:\WinNT\System32\spool\drivers\... (I have removed him in advance to 
>> test this).
> 
> There was a bug in the cupssmbadd program that stripped all end-of-line 
> characters during the conversion.  (Many thanks to Vincent Nicolas for 
> catching this!)  See http://www.cups.org/str.php?L1750
> 
>   Brian
>  ( [EMAIL PROTECTED] )
> 
> ---
>   BREAKFAST.COM Halted...  Cereal Port Not Responding
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 


-- 
Curtis Maurand
Senior Network & Systems Engineer
BlueTarp Financial, Inc.
443 Congress St.
6th Floor
Portland, ME 04101
207.797.5900 x233 (office)
207.797.3833  (fax)
mailto:[EMAIL PROTECTED]
http://www.bluetarp.com

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Sync unix and samba passwords

2006-10-02 Thread Craig Jackson
 

Hello. It's me again. Downloaded Samba source and compiled it with LDAP
and pam_smbpass options. Of course it didn't work. The Changelog and the
INSTALL clearly point to this only working with smbpasswd. The LDAP code
has not been incorporated. Wouldn't call this a bug but more like a
feature request.

Anyone have a patch or maybe want to write one?

Humbly.

Craig
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Kinit failed: Clients credentials have been revoked

2006-10-02 Thread Norbert Wegener

I have joined an AD domain the usual way
kinit [EMAIL PROTECTED]

and
net ads join -U [EMAIL PROTECTED]

wbinfo -m lists the trusted domains. So far so good.
Unfortunately every few minutes I get error messages in the logfile:

Oct  2 19:52:53 (none) winbindd[31193]:   Kinit failed: Clients 
credentials have been revoked
Oct  2 19:56:34 (none) winbindd[31193]: [2006/10/02 19:56:34, 0] 
libsmb/cliconnect.c:cli_session_setup_spnego(759)
Oct  2 19:56:34 (none) winbindd[31193]:   Kinit failed: Clients 
credentials have been revoked
Oct  2 19:56:34 (none) winbindd[31193]: [2006/10/02 19:56:34, 0] 
libads/kerberos.c:ads_kinit_password(146)
Oct  2 19:56:34 (none) winbindd[31193]:   kerberos_kinit_password 
host/[EMAIL PROTECTED] failed: Clients credentials have been 
revoked
Oct  2 19:56:37 (none) winbindd[31193]: [2006/10/02 19:56:37, 0] 
libsmb/cliconnect.c:cli_session_setup_spnego(759)
Oct  2 19:56:37 (none) winbindd[31193]:   Kinit failed: Clients 
credentials have been revoked
Oct  2 19:56:40 (none) winbindd[31193]: [2006/10/02 19:56:40, 0] 
libsmb/cliconnect.c:cli_session_setup_spnego(759)
Oct  2 19:56:40 (none) winbindd[31193]:   Kinit failed: Clients 
credentials have been revoked


What causes this messages and is it to ignore or important?
I am using samba-3.0.12-5 on a Suse Linux 9.3 system.

This is my smb.conf:

[global]
   security = ads
   use kerberos keytab
   realm = ORG1.MYDOMAIN.NET
   netbios name = de70176c
   workgroup = MYDOMAIN.NET
   winbind separator = !
   idmap uid = 1-2
   idmap gid = 1-2
   winbind enum users = yes
   winbind enum groups = yes
   template homedir = /home/%D/%U
   template shell = /bin/bash
   client use spnego = yes
   client ntlmv2 auth = yes
   encrypt passwords = yes
   #winbind use default domain = yes
   preferred master = no
   restrict anonymous = 2


Thanks
Norbert Wegener

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] vfs object recycle: could two shares use the same repository?

2006-10-02 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 10/01/2006 04:28 PM, M. Mueller escreveu:
> Hi,
> i use the vfs-object "recycle" on the [homes] share and defined
> recycle:repository = /backup/recycle/%G/%U/.recycle.
> What happens, when using the same repository path for another share,
> e.g. [data]. Could this lead to data loss in the waste bin?

I never did that, and should be easy to test it out, but
I don't know what would happen if two filenames has the same name
and were deleted from different shares.


> I could of course branch into "/backup/recycle/%G/%U/.recycle/homes" and
> "/backup/recycle/%G/%U/.recycle/data" but i would like to avoid that.

Maybe you can use another variable on the path, to make
it more "automagic". :-)


> Thanks for any comments,
> Malte Müller

Kind regards,

- --
Felipe Augusto van de Wiel <[EMAIL PROTECTED]>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFITjgCj65ZxU4gPQRAuSyAKCdNo6KvV4YM6sQ9UQjvFvPAAgr5ACcCfBE
g2H6ux9y0as9pXFAzLl1bMQ=
=/d/r
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] mssql, problem authenticating from stored procedure...

2006-10-02 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 09/30/2006 03:33 PM, Kristoffer Egefelt escreveu:
> Hello,
> 
> running plain samba 3.023c on debian,  I'm trying to connect 
> to a samba share from within a stored procedure.
> 
> This works as long as samba is in "share" mode:
> [2006/09/29 14:53:01, 5] auth/auth.c:check_ntlm_password(309)
>  check_ntlm_password:  guest authentication for user [] -> [] -> [nobody]
> succeeded
> 
> 
> When I try to attach samba share manually when logged in as 
> the user running the sqlserver agent, it also works:
> 
> [2006/09/30 17:58:43, 2] auth/auth.c:check_ntlm_password(309)
>  check_ntlm_password:  authentication for user [sqlserver] -> [sqlserver]
> -> [sqlserver] succeeded
> 
> But when running the stored procedure, which causes the 
> sqlserver user to login to the samba server I get this:
> 
> [2006/09/30 17:59:28, 2] auth/auth.c:check_ntlm_password(319)
>  check_ntlm_password:  Authentication for user [sqlserver] -> [sqlserver]
> FAILED with error NT_STATUS_WRONG_PASSWORD
> 
> This is extremely strange to me... :(
> Any ideas is greatly appreciated... :)

Any chances that your password contains special characters
that are not properly quoted inside SQL?

This is what I can think about, it does not looks like a
Samba problem, not even something related to NTLM/SMB/CIFS, more
likely that it is just the STORED PROCEDURE code.


> /Kristoffer
> but when user authentication is needed


Kind regards,

- --
Felipe Augusto van de Wiel <[EMAIL PROTECTED]>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFITbiCj65ZxU4gPQRAv6aAJ9Z11yX6dCon8BD620FjfvE29fNCQCgjOiF
oJlzHVw3PInggjXItx5zlW4=
=C9Ya
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba not expanding AD groups

2006-10-02 Thread Jim Millard
I have noticed a problem with Samba not appearing to expand an AD group
name to allow access to a share. We have had to shut down samba
completely, manualy kill all smbd, and winbind apps (nmbd seems to go
away properly). Then restart samba to get access for our users to work.

Sample smb.conf entry:
[global]
  winbind separator = +
  ...

[test]
   path = /test
   public = no
   writable = yes
   printable = no
   valid users = @"CC+Domain Users"

We currently have Samba versions 3.0.22 and 3.0.23a running on Gentoo
and 3,0,23c running on FC5.

I see this problem on all of these systems.

I have inherited these from another admin and I am not sure the configs
are all that complete or good.

I would appreciate any pointers to information that would help me clean
up this mess. I have already got the servers running faster by changing
the log level down to reduce disk activity. We have also set the
renew_lifetime = 36000 in krb5.conf thinking the old value of 0 was
causing performance issues due to authenticating every access.

Thank you all for any help you might have.

-- 
Regards,
Jim Millard
Linux System Administrator
Canyon County Idaho


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Invalid Pipe Handle

2006-10-02 Thread chrissie

Hi,

i am using samba 3 on OpenSUSE10 with about 30 Windows-XP-Client. Aparently,
i find the following in the smb.log-file:

[2006/10/02 14:09:45, 1] smbd/service.c:make_connection_snum(662)
  aaabbb (192.168.0.23) connect to service images initially as user aaabbb
(uid=1020, gid=100) (pid 26187)
[2006/10/02 14:09:56, 1] smbd/ipc.c:api_fd_reply(290)
  api_fd_reply: INVALID PIPE HANDLE: 7799
[2006/10/02 14:11:43, 1] smbd/service.c:make_connection_snum(662)

Is this something critical i should take care of?

TIA,
chrissie.
-- 
ROOT LOGIN REFUSED
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] winbindd cause system hang

2006-10-02 Thread Superbiji

The workaround is by deleting those problematic users in windows directory
and then add them again

setfacl again to her home


my smb.conf:
password server = 10.x.x.x


On 9/29/06, Felipe Augusto van de Wiel <[EMAIL PROTECTED]> wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 09/26/2006 08:53 AM, Superbiji escreveu:
> Hi All,
>
> my os (Centos 4.3) connects to Windows directory using winbind
> everything works fine:
>
> ls -alh shows remote username and group
> getent passwd shows remote usernames
>
> until I run :
> getfacl -R /home/samba
> to backup whole acl
>
> after 1 minutes the system hang (typing w, ls, top with no response)
> but I can kill winbind and start it again, evrything back to normal
>
> Please help

Looks like you winbind it not properly configured. Can you
please attach your smb.conf and also information about how did you
setup your nsswitch (libnss)?  Some log with increased loglevel
would be very good.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] How to copy a file from linux to window pc

2006-10-02 Thread Gary Dale

Indunil Jayasooriya wrote:

Hi,

I have file at /opt/mailbackup/mailbackup.tar.gz (this is a Linux 
Machine)


I want to put this file to a windows pc.

What is the command to do it.

can I use something like the following.

mount -t smbfs

Then How to use this ?



There are two basic options: either you can share a folder in Windows 
and copy the file from the Linux machine, or you can share your 
/opt/mailbackup folder in Linux and copy the file from the Windows 
machine. I don't recommend the first option because of security issues 
with Windows.


To do the second, you need to be running Samba on your Linux box.

First create an entry in /etc/samba/smb.conf (do this as root) for the 
folder you want to share. Then restart the smbd and nmbd daemons. On the 
Windows machine, mount the share then copy the file to where you want it.


Another option is to e-mail the file as an attachment to the Windows user.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] fully qualified usernames ??

2006-10-02 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Robert Gehr wrote:

> So winbindd identifies joe all right even 
> without the DOMAIN prefix. Why does this
> no longer work for shares on the member server that have
>
> 
> valid users = joe
> 
> defined??

please read the WHATSNEW.txt.






cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
"What man is a man who does not make the world better?"  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFIQWvIR7qMdg1EfYRApMyAKCi+DjZOUlZYE1RBP3OnpRfkZgjzACgh2Cl
qdAHPLbAOCbWEhxfNwCB+Kk=
=Mb+X
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] fully qualified usernames ??

2006-10-02 Thread Peter Trifonov
Dear Robert,
> So far so good I know what I have to do still I don't quite 
> understand why the member server is no longer able to 
> identify the user connecting.

> So winbindd identifies joe all right even without the DOMAIN 
> prefix. Why does this no longer work for shares on the member 
> server that have
> The member server gets its local users and groups via ldap.

Do you use groups to identify users which are allowed to read from 
the ***directory*** corresponding to the share in problem?

In other words, what are the permissions for that directory?
I ask this because there is a bug in Samba which causes incorrect handling
of domain groups.


With best regards,
P. Trifonov  


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: How to copy a file from linux to window pc

2006-10-02 Thread Gerard Seibert
"Indunil Jayasooriya" <[EMAIL PROTECTED]>

> Hi,
> 
> I have file at /opt/mailbackup/mailbackup.tar.gz (this is a Linux Machine)
> 
> I want to put this file to a windows pc.
> 
> What is the command to do it.
> 
> can I use something like the following.
> 
> mount -t smbfs
> 
> Then How to use this ?

I use this method on my FreeBSD 6.1 system.


1) Create a directory: '/c'

2) Create an alias:

 alias c:='mount /c'

3) Place this in my /etc/fstab file:

 //[EMAIL PROTECTED]/directory/c   smbfs rw,noauto 00

Obviously you will need to make sure that the drive or directory you
want to access are configured correctly on the Windows machine.

Now all I have to do is type: c: at the command line and the Win share
is mounted. I can then do a simple cp  .

Ciao!

-- 
Gerard

 Terrorist memo: Bush is listening. Use big words.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Auth Problem

2006-10-02 Thread Marian Neagul
Hello,

 

I have a problem related to user authentication: Users can not login from
Windows workstations.

I get the following error:

"The system could not log you in. Make sure your User Name and domain are
correct then type your password again."

 

Users can access shares, they are prompted for a user and password and it is
ok. The same user and password does not work for login.

What could be the problem? I've posted the logs and smb.conf  at
http://www.info.uvt.ro/~neagul/samba/

I want to mention that the server is a production server and was hit by a
hardware failure. :-( I restored everything but it doesn't work.

 

 

Thank you!

 

Marian Neagul

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] fully qualified usernames ??

2006-10-02 Thread Robert Gehr

Hi there

Just a couple of questions to help me understand.

When I upgrade from 3.0.22 to 3.0.23c the access restrictions on my
shares on the member server no longer work. I read in the Changes file

"Since Samba 3.0.8, it has been recommended that all domain accounts
listed in smb.conf on a member server be fully qualified with the"

So far so good I know what I have to do still I don't quite understand
why the member server is no longer able to identify the user connecting.

When, on the member server, I do a "wbinfo -U ID" I get the correct SID
When I do "wbinfo -a joe%passwd" it succeeds as well as a
"wbinfo -a DOMAIN\\joe%passwd"

So winbindd identifies joe all right even without the DOMAIN prefix. Why
does this no longer work for shares on the member server that have

valid users = joe

defined??

The member server gets its local users and groups via ldap.

I also have in my smb.conf:
winbind trusted domains only = Yes


What am I missing??

Thanks


--
Best Regards
Robert Gehr


"Technological progress has merely provided us
 with more efficient means for going backwards"

~ Aldous Huxley



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: WINS over subnets

2006-10-02 Thread Hoggins!

Edmundo Valle Neto a écrit :

...

Theres some options that I think are not needed in your config, but 
probably doesnt cause that problem that you have, in exeption of this one:


local master = no

Try to set it to yes, I never tried to set it to no and let it be only 
the DMB to see what happens but the samba docs have something to say 
about that, "If you want Samba to be a DMB, then it is recommended that 
you also set preferred master to yes, because Samba will not become a 
DMB for the whole of your LAN or WAN IF IT IS NOT ALSO A LMB ON ITS OWN 
BROADCAST ISOLATED SUBNET". Anyway its at least recommended to samba be 
the LMB too.


Well, this option was previously set to yes, and it did not work either. 
Changing this, I thought it would make difficult the election of a LMB 
on other nets, but you say it won't, so I put it back, and maybe the 
other things I changed will cause it to work at last !


Do you have any other ideas about this config ?

Thanks,

Hoggins!

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Horrible write performance from XP to Samba

2006-10-02 Thread Peter Daum
I noted an extremely poor performance when copying big files from
a windows xp client to a samba share. The exact version of samba
does not seem to matter: I tried several different samba servers
with versions between 3.014 and 3.0.23b running on Linux 2.4.32
and 2.6.17 (machines and network otherwise idle, clients connected
via fast ethernet, servers via Gbit; network performance in both
directions around 95 Mbit/s). I made several tests copying a 1GB
file with Windows 98 and Windows XP clients. Reading the file from
the server takes predictably around 105 seconds (~9.75 MB/s).

Writing to the server takes only slightly longer on Win98 (130
seconds, ~8 MB/s) while the same takes approximately 45 minutes
from a XP client (I don't know whether this matters, I noted that
on the XP write test, the directory listing on the server
immediately shows a file with the final size - obviously a sparse
file, repeatedly invoking du shows the gradually increasing actual
size).

I wrote a little test program that just writes data to a file and
shows the throughput; the transfer rates I get that way are pretty
reasonable, so it is not a general problem but something that only
occurs on specific operations like copying.

Tracing the network traffic also didn't tell me what the problem
might be: XP uses for copying as well as for other write
operations WriteAndXRequest, the only peculiarity I noticed is the
slightly exotic block size of 61440 bytes per request when copying
(which also doesn't seem to be the problem - Win98 uses the same
block size with WriteRaw)

Has anybody else made similar experiences? (Since I could see this
issue with differently configured servers/clients, it should not
be just my personal problem. Of course in most settings where the
data usually goes mostly from the server to the client it is not
obvious)

Any ideas what's going on and what to do about it?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] How to copy a file from linux to window pc

2006-10-02 Thread odi
The simliest way is to do this with smbclient, which is like a simple ftp 
client, type smbclient --help for command line options.

regards odi
Am Montag, 2. Oktober 2006 08:56 schrieb Indunil Jayasooriya:
> Hi,
>
> I have file at /opt/mailbackup/mailbackup.tar.gz (this is a Linux Machine)
>
> I want to put this file to a windows pc.
>
> What is the command to do it.
>
> can I use something like the following.
>
> mount -t smbfs
>
> Then How to use this ?
>
> --
> Thank you
> Indunil Jayasooriya
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba