Re: [Samba] safe_strcpy errors from winbindd (Samba 3.0.25b)

2007-07-19 Thread Volker Lendecke
On Fri, Jul 20, 2007 at 08:17:15AM +0200, Bartschies, Thomas wrote:
> 
> Hi,
> 
> we've upgraded recently from samba 3.0.23 to 3.0.25b. Since then, we've 
> getting these error 
> messages from winbindd: 
> 
> Jul 17 12:00:23 cvk027 winbindd[20772]: [2007/07/17 12:00:23, 0] 
> lib/util_str.c:safe_strcpy_fn(659) 
> 
> The volume of these messages is very high, many times together with 
> unreadable character garbage.
> 
> Is there any way to correct or suppress these messages?

Can we get a debug level 10 log of winbind leading to this
message?

Volker


pgpgBy1WOmqFm.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] safe_strcpy errors from winbindd (Samba 3.0.25b)

2007-07-19 Thread Bartschies, Thomas

Hi,

we've upgraded recently from samba 3.0.23 to 3.0.25b. Since then, we've getting 
these error 
messages from winbindd: 

Jul 17 12:00:23 cvk027 winbindd[20772]: [2007/07/17 12:00:23, 0] 
lib/util_str.c:safe_strcpy_fn(659) 

The volume of these messages is very high, many times together with unreadable 
character garbage.

Is there any way to correct or suppress these messages?

Our environment is Fedora Core 4 (32-Bit). Kernel 2.6.12.2. Samba is a member 
Server in a
W2K+3 AD Forest. Multiple Domains with Trust Relationsships exist. "wbinfo -t" 
and "wbinfo -m"
work properly. "wbinfo -u" works also. The member domain is in Windows 2003 
native mode.

Here's the first part of our smb.conf:

[global]
workgroup = xx
netbios name = cvkxxx
server string = Internet Server
log file = /var/log/samba/access.log
log level = 1
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = No
printing = lprng
guest account = nobody
encrypt passwords = yes
ldap timeout = 60

winbind separator = +
idmap uid = 1-2
idmap gid = 1-2
winbind enum users = yes
winbind enum groups = yes
template homedir = /home/%U
template shell = /bin/bash
host msdfs = no
winbind use default domain = yes
security = ADS
password server = *
realm = intra.cvk.de

[homes]
comment = Home Directories
browseable = no
writable = yes
...

Regards,
--
i. A. Thomas Bartschies 
IT Systeme

Cornelsen Verlagskontor GmbH & Co. KG
Kammerratsheide 66, 33609 Bielefeld
Telefon 0521.9719-310
Telefax 0521.9719-93310
http://www.cvk.de
AG Bielefeld HRA 10578 - Geschäftsführer: Horst Keplinger
Geschäftsführende Komplementärin: AG Bielefeld HRB 7107 - Cornelsen 
Verlagskontor Verwaltungs-GmbH
Weitere Komplementärin: AG Charlottenburg HRA 20764 - Cornelsen Verlagsholding 
GmbH & Co., Berlin

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Very slow access to large files

2007-07-19 Thread Christian Perrier
Quoting Eric Shuman ([EMAIL PROTECTED]):
> 
> Hi all,
> 
> I am having a problem accessing very large files through my samba shares
> after upgrading my file server to Debian Etch (Samba 3.0.24) from Debian
> Sarge (Samba ???). 

Debian sarge has 3.0.14a


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 4 TP5 support group policy

2007-07-19 Thread KS Tan
Seems the Group Policy features will release on TP6. Anybody know the
exactly date?


在 2007-07-19四的 11:32 -0300,Felipe Augusto van de Wiel写道:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
> 
> Kim Sim Tan wrote, On 19-07-2007 10:26:
> > Hi all,
> > Recently I'd install samba 4 TP5 in my computer for testing 
> > purpose. Everything is done and my Windows XP pro computer
> > able to join my samba4 domain.
> 
>   Nice.
> 
> 
> > So the next step I want to do is test the Group Policy (I 
> > know samba 4 support this), but I can't get any documentation.
> > Any help is appreciated.
> 
>   Did you already took at look at the wiki?
> 
>   http://wiki.samba.org/index.php/Samba4
> 
> 
>   There are some links for papers and other references, and
> in the Samba Wiki you can find more info and FAQs about Samba4 in
> the Developer area, in the first page:
> 
>   http://wiki.samba.org
> 
> 
>   Hope this helps.
>   Kind regards,
> - --
> Felipe Augusto van de Wiel <[EMAIL PROTECTED]>
> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
> http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.4.6 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQFGn3YWCj65ZxU4gPQRCO07AJ9PqHftfV9EcS4ZLyhBpEmAE60sxACgywqi
> ziO90hnEFlBwYF3o3ooZD2o=
> =wNlQ
> -END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] RE: Getting owner of files on Mounted Windows Share (3rdattempt)

2007-07-19 Thread Mickey Smith

Hi Adam,

at first:
I think you're not able to write any files or create a new directory in the 
mentioned share through smbfs-mount.

To correct this you have to use the following mount-command:
mount -t smbfs -o 
username=,workgroup=//winserver/winpath /mnt/win
For further information of the commands "fmask" and "dmask" take a look at 
the manpages (man mount.smbfs).


2nd:
It is normal that you can't see the original windows owner/group of the 
files/directories like you would by mount a windows share on a windows 
client.
I have'nt setup a Linux-client in the past to that way to see the full 
permission list of a remote-windows-share, but I think you have to do this 
with CIFS (see man pages "man mount.cifs") and CIFS POSIX extensions 
compiled into the Linux-kernel.

But this would not be everything.
The next step would be to resolve SID's to Usernames, eg.
To do this you have to setup the linux-client with the winbind service, 
configuring nsswitch.conf, eg.

This task is'nt easy, I think.
Perhaps you will find a solution by searching the net.

By the way you should take a look into the basics how share- and NTFS/ACL 
permissions interact:

http://www.mcmcse.com/microsoft/guides/ntfs_and_share_permissions.shtml
So it is a little bit easier to derive how that windows-permission-stuff in 
comparsion with linux access permissions work.


Regards,
Michael


From: "Terlson, Adam (STP)" <[EMAIL PROTECTED]>
To: 
Subject: [Samba] RE: Getting owner of files on Mounted Windows Share 
(3rdattempt)

Date: Thu, 19 Jul 2007 10:19:11 -0500

Are people just ignoring my question because I messed something up, not
getting it, or does no one know anything?



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Terlson, Adam (STP)
Sent: Tuesday, July 17, 2007 8:28 AM
To: samba@lists.samba.org
Subject: [Samba] Getting Owner of Files on Mounted Windows Share

Hello everyone,
I have an obscure issue that I have been so far unable to find the
answer to.  I have successfully mounted a windows NTFS file share using
samba via the following command:

mount -t smbfs -o username=,workgroup=
//winserver/winpath /mnt/win

It mounts just fine but performing an ls -al command shows my user (or
"root") as the owner of all files, when this isn't the case.  Is it
possible to get the proper Windows owner of files through a
samba-mounted windows file share?

Thanks in advance.

Adam



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


_
Sie suchen E-Mails, Dokumente oder Fotos? Die neue MSN Suche Toolbar mit 
Windows-Desktopsuche liefert in sekundenschnelle Ergebnisse. Jetzt neu! 
http://desktop.msn.de/ Jetzt gratis downloaden!


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Very slow access to large files

2007-07-19 Thread Eric Shuman

Hi all,

I am having a problem accessing very large files through my samba shares
after upgrading my file server to Debian Etch (Samba 3.0.24) from Debian
Sarge (Samba ???). 

When trying to open a very large (> 2G) MrSid image in ArcGIS what use to
take about 10 seconds now takes over 30 minutes.  Smaller files (< 2G) still
seem to open fairly quickly.   I can also copy the large file back and forth
from the server relatively quickly and I can open the file from a local
drive with out a problem.  I have tried various files of different sizes and
the problem only arises when opening > 2 Gig files.

Anyone have any ideas about what might be causing this behavior?  


Thanks for the help!


~Eric 
 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ridiculous slow gigabit transfer, faster with VNC

2007-07-19 Thread Mark Baily

I have checked the duplex setting in opensolaris and it has
autonegotiated with the switch at 1000Mbps (gigabit) and also
full-duplex. The switch itself has no means to query, it is an
unmanaged consumer switch.

On 7/20/07, Andrew Morgan <[EMAIL PROTECTED]> wrote:

On Thu, 19 Jul 2007, Mark Baily wrote:

> Hi,
> I have a problem with file transfers between a windows systems and unix
> systems.
> I have one win32 desktop (intel e6400 2Gb Ram), one win32 laptop (p-m 2Ghz).
> Also one linux laptop (p-m 1.4GHz) and one opensolaris desktop (intel
> e4400 1GB Ram).
>
> The two laptops have built-in 100Mbit ethernet and desktops have 1Gbit
> ethernet on the motherboard. Both desktops use a Marvell Yukon.
>
> The file transfer rate between two systems using FTP between the two
> desktops (win32 to opensolaris) is consistently 50Mb/sec which is as
> expected.
>
> Using scp I only get 5Mb/sec between from any win32 system to any unix
> system, much slower than expected.
>
> Using scp from the linux lapotp to solaris desktop is 10Mb/sec as
> expected (laptop has 100mbit only).
>
> Using samba to copy a 1GB file I get about 7 minutes from win32 to
> opensolaris. From opensolaris to win32 the windows dialog says
> estiamted time 142 mins. Using plain FTP it takes 25sec. This is very
> consistent.
>
> A twist is that if a VNC client is open from the win32 desktop to the
> opensolaris box the estimated transfer time via samba from opensolaris
> to win32 drops right down to about 4 min. Much better, but still
> nowhere near the FTP.
>
> I have also tried swapping between a D-Link DGS-1008D switch and a
> Netgear GS105 switch with no difference.
>
> Since the FTP is very consistently acheiving 50megabytes/sec, I don't
> think it can be blamed on a hardware fault.
>
> However the problem doesn't appear to be just samba either, as the
> slowness also occurs with scp, albiet scp is much more consistent at
> 5mb/sec than samba varying at 1GB/142min to 1GB/3min with VNC open.
>
> Is this problem something to do with TCP stacks playing up? What else
> might it be?

Have you confirmed that you do not have a duplex mismatch?  I don't know
if D-Link or Netgear (consumer grade?) switches can be queried for the
duplex setting or forced to full duplex.  Usually this stuff "just works",
but the behavior you describe sounds very much like the switch is half
duplex and the server is full duplex.

Andy


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ridiculous slow gigabit transfer, faster with VNC

2007-07-19 Thread Mike

On 7/19/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:


  I ran into this when trying to rsync backups on a brand new gig-eth
  card on a 2.6.x kernel machine. Funny thing was, not only was the
  slow down machine specific, it was service specific as well. The
  following MAY work for you ...

#!/bin/sh

/sbin/sysctl -w net.core.rmem_max=107374182
/sbin/sysctl -w net.core.wmem_max=107374182
/sbin/sysctl -w net.core.rmem_default=107374182
/sbin/sysctl -w net.core.wmem_default=107374182
/sbin/sysctl -w net.core.optmem_max=107374182
/sbin/sysctl -w net.ipv4.tcp_rmem="107374182 107374182 107374182"
/sbin/sysctl -w net.ipv4.tcp_wmem="107374182 107374182 107374182"
/sbin/sysctl -w net.ipv4.tcp_mem="107374182 107374182 107374182"
/sbin/sysctl -w net.core.netdev_max_backlog=1000
/sbin/ifconfig eth0 txqueuelen 1000
/sbin/sysctl -w net.ipv4.route.flush=1
/sbin/sysctl -w net.ipv4.tcp_no_metrics_save=1
/usr/sbin/ethtool -K eth0 tso off
# For  Intel e1000 NIC Users: Add "options e1000 RxDescriptors=4096" into
/etc/modules.conf



hmm, i've never played with anything like this before.
Thanks!
I'll do some reading on sysctl and give a try.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ridiculous slow gigabit transfer, faster with VNC

2007-07-19 Thread samba
> Mark,
> I have noted the same behavior many times.
> I have an old server box that has not been upgraded since ver. 2.2.8.
> Whenever I connect from a linux box using sftp in a terminal, I get
> top speed 10/100 ethernet transfer rates over the LAN -- 10 Megs/sec.
> - 12 Megs/sec.
> When I use WinSCP (from a win client box), I get no more than 2
> Megs/sec. transfer rate.

  I ran into this when trying to rsync backups on a brand new gig-eth
  card on a 2.6.x kernel machine. Funny thing was, not only was the
  slow down machine specific, it was service specific as well. The
  following MAY work for you ...

#!/bin/sh

/sbin/sysctl -w net.core.rmem_max=107374182
/sbin/sysctl -w net.core.wmem_max=107374182
/sbin/sysctl -w net.core.rmem_default=107374182
/sbin/sysctl -w net.core.wmem_default=107374182
/sbin/sysctl -w net.core.optmem_max=107374182
/sbin/sysctl -w net.ipv4.tcp_rmem="107374182 107374182 107374182"
/sbin/sysctl -w net.ipv4.tcp_wmem="107374182 107374182 107374182"
/sbin/sysctl -w net.ipv4.tcp_mem="107374182 107374182 107374182"
/sbin/sysctl -w net.core.netdev_max_backlog=1000
/sbin/ifconfig eth0 txqueuelen 1000
/sbin/sysctl -w net.ipv4.route.flush=1
/sbin/sysctl -w net.ipv4.tcp_no_metrics_save=1
/usr/sbin/ethtool -K eth0 tso off
# For  Intel e1000 NIC Users: Add "options e1000 RxDescriptors=4096" into
/etc/modules.conf



This message is confidential, intended only for the named recipient(s) and
may contain information that is privileged or exempt from disclosure under
applicable law.  If you are not the intended recipient(s), you are
notified that the dissemination, distribution or copying of this message
is strictly prohibited.  If you receive this message in error, or are not
the named recipient(s), please notify the sender at the e-mail address
above and delete this e-mail from your computer.  Thank you.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba roaming profile

2007-07-19 Thread John Drescher

Second. Is there a reason I can't delete Icons on the desktop on
windows xp. It tells me access denied.


If you created icons as an admin and it put them in the Default User
or All Users desktop a regular user will get Access Denied trying to
delete these.

John
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba roaming profile

2007-07-19 Thread Lukasz Szybalski

On 7/19/07, Felipe Augusto van de Wiel <[EMAIL PROTECTED]> wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Lukasz Szybalski wrote, On 18-07-2007 13:13:
[...]

Profiles are sort of ninja magic, sometimes it works,
sometimes it doesn't and as the documentation says, it can be
the heaven for some people and the hell for others. BTW, did
you check the "Desktop Profile Management" in Samba HOWTO?

http://samba.org/samba/docs/man/Samba-HOWTO-Collection/ProfileMgmt.html


> [profiles]
> comment = Network PRofiles Share
> path = /home/samba/profiles
> #read only = No
> #store dos attributes = Yes
> #create mask = 0600
> #directory  mask = 0700
> #browseable = no
> #guest ok = no
> #printable = no
> writable = yes

Here is an example of profiles that we used for
quite some time on our company:

[Profiles]
path = /srv/samba/profiles
browseable = yes
guest ok = yes
writeable = yes
read only = no
profile acls = yes
csc policy = disable
create mode = 0600
directory mode = 0700


I am used your settings.




> [profiles]
> admin users = newuser2
>
> This means that newuser2 can act root.
> In my profile I get another folder created automatically only for newuser2
> 1. Why is the folder created only for newuser2 and not newuser?
>
> drwxr-xr-x  2 root   newuser2 4096 2007-07-18 09:20 newuser2

Sounds related to the permissions.

Or not since admin users = newuser2, which lets the account work as
root. Is that normal behavior?





> 2. Why is the /home/samba/profiles/newuser2 empty? It is not filled
> with roaming profile after I logging  out of windows XP?

That can be a WinXP problem. If for some reason, your
user and/or workstation has any setup to act as a local profile,
then it wouldn't upload anything to the server.

Local policies can be modified to force only local
profiles, you can also change some settings on how your roaming
profile works.


> I log in to newuser:
> cannot load a  roaming profile, loading your local profile
> cannot locate local profile
>
> I log in to newuser2:
> cannot locate roaming profile on server
>
> 3. How do I make the roaming profile working. It is the case that
> setting up the users and adding logon path, logon home, profiles to
> smb.conf is not enough?
> What else needs to be done?

'logon path' and 'logon home' are used by different
clients, sometimes (and specially for XP) you need the
'csc policy' option.



What bothers me the most is the fact that out of 5 newusers I have created, on
2 of them the roaming profiles has created properly but it won't for
the rest. With no special order.

Second. Is there a reason I can't delete Icons on the desktop on
windows xp. It tells me access denied.

Are there any manual tests i can do to check on the profile status?

Is there a domain users group that i maybe should create in samba or anywhere?
Lucas
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ridiculous slow gigabit transfer, faster with VNC

2007-07-19 Thread Andrew Morgan

On Thu, 19 Jul 2007, Mark Baily wrote:


Hi,
I have a problem with file transfers between a windows systems and unix 
systems.

I have one win32 desktop (intel e6400 2Gb Ram), one win32 laptop (p-m 2Ghz).
Also one linux laptop (p-m 1.4GHz) and one opensolaris desktop (intel
e4400 1GB Ram).

The two laptops have built-in 100Mbit ethernet and desktops have 1Gbit
ethernet on the motherboard. Both desktops use a Marvell Yukon.

The file transfer rate between two systems using FTP between the two
desktops (win32 to opensolaris) is consistently 50Mb/sec which is as
expected.

Using scp I only get 5Mb/sec between from any win32 system to any unix
system, much slower than expected.

Using scp from the linux lapotp to solaris desktop is 10Mb/sec as
expected (laptop has 100mbit only).

Using samba to copy a 1GB file I get about 7 minutes from win32 to
opensolaris. From opensolaris to win32 the windows dialog says
estiamted time 142 mins. Using plain FTP it takes 25sec. This is very
consistent.

A twist is that if a VNC client is open from the win32 desktop to the
opensolaris box the estimated transfer time via samba from opensolaris
to win32 drops right down to about 4 min. Much better, but still
nowhere near the FTP.

I have also tried swapping between a D-Link DGS-1008D switch and a
Netgear GS105 switch with no difference.

Since the FTP is very consistently acheiving 50megabytes/sec, I don't
think it can be blamed on a hardware fault.

However the problem doesn't appear to be just samba either, as the
slowness also occurs with scp, albiet scp is much more consistent at
5mb/sec than samba varying at 1GB/142min to 1GB/3min with VNC open.

Is this problem something to do with TCP stacks playing up? What else
might it be?


Have you confirmed that you do not have a duplex mismatch?  I don't know 
if D-Link or Netgear (consumer grade?) switches can be queried for the 
duplex setting or forced to full duplex.  Usually this stuff "just works", 
but the behavior you describe sounds very much like the switch is half 
duplex and the server is full duplex.


Andy
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Changing domain name

2007-07-19 Thread Didster

Hi,

Thanks for the response.

I did think that about getlocalsid - the clues in the name and all -
but what got me is this from one of the offical howto's

"Good, there is now a safe copy of the local machine SID. On a PDC/BDC
this is the domain SID also."

Which implies on a PDC getlocalsid will return the SID of the domain
the PDC is PDC for?  Maybe I'm miss reading it!

On 7/19/07, Dragan Krnic <[EMAIL PROTECTED]> wrote:

Sorry, it was meant to be copied to you but something went
wrong and from the subject line on the samba forum you
wouldn't know.

On 7/18/07, Dragan Krnic <[EMAIL PROTECTED]> wrote:
> What's wrong with WARLOCK?
> Just kidding. If you don't like it, change it, but do expect problems.
> It's not something you will find a recipee for in a How-to book.
>
> The SETLOCALSID changes only the LOCAL SID, not the
> GLOBAL SID, for which we would probably need SETGLOBALSID.
>
> When I faced the same problem, I did something really wrong
> but it worked. I copy-pasted the LOCAL SID to the GLOBAL SID
> in "secrets.tdb".
>
> Now in your case, it would probably be even easier to just think up
> a new 7-letter word to overwrite the current name in both "smb.conf"
> and "secrets.tdb".
>
> Unfortunately WARLOCK is also tatooed in several places in each
> client's registry. Hopefully, pasting over the new name with a .reg script
> will obviate the need to re-join the domain. Try it out, when there is no
> one to disturb. Back up "/etc/samba" and "/var/lock/samba" with smb
> and nmb stopped so that you can back out of it if necessary.
>
> > From: Didster <[EMAIL PROTECTED]>
> > To: samba@lists.samba.org
> > Date: Tue, 17 Jul 2007 12:31:52 +0100
> > Subject: [Samba] Changing domain name
> > Hi,
> >
> > For reasons best known to the IT admin before myself, we currently
> > have a domain name of WARLOCK.  I want to change this.  We have about
> > 15 WinXP Pro client machines on the domain as well as a few linux
> > domain clients.
> >
> > A bit of reading shows that it should be as simple as doing a net
> > getlocalsid, making the change, followed by a net setlocalsid.
> >
> > I started doing this when I noticed something [The PDC machine name is 
North]:
> >
> > north:~# net getlocalsid
> >
> > SID for domain NORTH is: S-1-5-21-2864586203-3687421127-69847892
> >
> > north:~# net getlocalsid WARLOCK
> >
> > SID for domain WARLOCK is: S-1-5-21-403220451-921850273-241492889
> >
> > According to this in the how to: Chapter 13. Remote and Local
> > Management: The Net Command
> >
> > "First, do not forget to store the local SID in a file. It is a good
> > idea to put this in the directory in which the smb.conf file is also
> > stored. Here is a simple action to achieve this:
> >
> > root#  net getlocalsid > /etc/samba/my-sid
> >
> > Good, there is now a safe copy of the local machine SID. On a PDC/BDC
> > this is the domain SID also."
> >
> > It says that on a PDC, it should give the domain SID.  So, why on my
> > PDC do I get different results for getlocalsid and getlocalsid
> > ?
> >
> > I'm probably being stupid, but worried if I change the domain name,
> > and do a "setlocalsid S-1-5-21-403220451-921850273-241492889" it will
> > just change the SID of the machine, and I wont be able to restore the
> > domain SID.
>


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: [3.0.25] "net ads join" problems

2007-07-19 Thread Jeremy Allison
On Thu, Jul 19, 2007 at 12:22:03PM +0200, Bernd Schubert wrote:
> On Thursday 19 July 2007 08:31:32 Warren Beldad wrote:
> > its because you did not provide the username thats why it connects using
> > root..
> > you can specify the username using the -U option and add the password
> > directly using..
> >
> > net ads join -Uusername%password
> 
> No, it doesn't try to connect as root, but as host-ha-test-1, I still do not 
> understand whats the magic behind that, but I guess it gets this name from 
> the ads server.
> 
> See the patch in the other mail which gets its working, or here is the link
> 
> 
> http://www.pci.uni-heidelberg.de/tc/usr/bernd/downloads/samba/net.patch

This has already been fixed differently in the SAMBA_3_2_0 tree - look
at the const char *net_prompt_pass(const char *user) function.

Can you try a back-port of this for 3.0.25 ? Jerry needs to make
the final decision on whether this should be done for 3.0.25c I
think.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] 3.0.25b-1.1.72-1411 - copy from and to the same samba share

2007-07-19 Thread Jeremy Allison
On Thu, Jul 19, 2007 at 11:41:29AM +0200, Franz Sirl wrote:
> Jeremy Allison wrote:
> >On Wed, Jul 18, 2007 at 04:01:45PM +0200, Franz Sirl wrote:
> >>Hi,
> >>
> >>I can confirm that a re-build of the current SUSE 3.0.25b RPMs plus 
> >>today's diff between SAMBA_3_0_RELEASE and SAMBA_3_0_25 fixes the 
> >>strange file corruption problem I was seeing with LIB.EXE from 
> >>VisualStudio6 working on a Samba share. Though this was already true 
> >>with yesterdays diff, but didn't work with a diff from last week.
> >
> >Great - thanks for the update. I'm hoping I've now got this
> >right for 3.0.25c.
> 
> Ok, since it seems you are heading for a 3.0.25c release soon, I'd 
> better report this little build failure with the python stuff:

Separate bugzilla bug please. Also - who uses the python bindings ?
I know Jerry was wanting to remove them as they're not currently
used/properly maintained.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Getting Owner of Files on Mounted Windows Share

2007-07-19 Thread Akemi Yagi
On Tue, 17 Jul 2007 08:27:32 -0500, Terlson, Adam (STP) wrote:

> Hello everyone,
> I have an obscure issue that I have been so far unable to find the answer
> to.  I have successfully mounted a windows NTFS file share using samba via
> the following command:
> 
> mount -t smbfs -o username=,workgroup=
> //winserver/winpath /mnt/win
> 
> It mounts just fine but performing an ls -al command shows my user (or
> "root") as the owner of all files, when this isn't the case.  Is it
> possible to get the proper owner of files through a samba-mounted windows
> file share?
> 
> Thanks in advance.
> 
> Adam

First of all, smbfs has been deprecated.  Use cifs instead.  For mounting
remote Windows shares, refer to this wiki article:

http://wiki.centos.org/TipsAndTricks/WindowsShares

You answer is also there (see the uid= comment).

Akemi

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] RE: Getting owner of files on Mounted Windows Share (3rd attempt)

2007-07-19 Thread Randall Svancara
Ben hit the nail on the head here.  There is really no way for smbmount
to know about file permissions on remote shares due to the fact that the
system you are running smbmount from is not aware of the SIDs associated
with the users and groups on the windows share.  Furthermore, this is
compounded by the fact that Unix uses UID and GID values for users and
groups.  The SIDs need to be translated to UID and GID values.  

The only thing smbmount can do is generically assign uid and gid values
to the smbmount share.  So this may not be a good solution for you.  

Perhaps some other, more brilliant folks, may have better suggestions.

Randall  





Yeah, but unfortunately the owners already exist.  I am trying to
generate some reports relating to the documents that exist on the share,
and as such want to show the current owner/creator rather than set.
Would this also be possible with the smbmount?


On Thu, 2007-07-19 at 16:53 +0100, Ben Tisdall wrote:
> Terlson, Adam (STP) wrote:
> > Are people just ignoring my question because I messed something up, not
> > getting it, or does no one know anything?
> > 
> Adam,
> 
> I have several replies to your question from the list in my inbox, so
> try checking the archives if they didn't reach you for some reason.
> 
> In summary, Windows ownerships don't pass through with smbfs, the
> ownerships will be those specified as options to the mount command, or
> if none are specified they will default to root:root. Check the manpage
> for smbmount for more details.
> 
> --
> Ben Tisdall
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] RE: Getting owner of files on Mounted Windows Share (3rd attempt)

2007-07-19 Thread Ben Tisdall
Terlson, Adam (STP) wrote:
> Are people just ignoring my question because I messed something up, not
> getting it, or does no one know anything?
> 
Adam,

I have several replies to your question from the list in my inbox, so
try checking the archives if they didn't reach you for some reason.

In summary, Windows ownerships don't pass through with smbfs, the
ownerships will be those specified as options to the mount command, or
if none are specified they will default to root:root. Check the manpage
for smbmount for more details.

--
Ben Tisdall
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] RE: Getting owner of files on Mounted Windows Share (3rd attempt)

2007-07-19 Thread Randall Svancara
Adam

See the man page form smbmount.  There are options to set ownership of
files when mounting windows shares. 

 man smbmount


Randall




On Thu, 2007-07-19 at 10:19 -0500, Terlson, Adam (STP) wrote:
> Are people just ignoring my question because I messed something up, not
> getting it, or does no one know anything?
> 
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Terlson, Adam (STP)
> Sent: Tuesday, July 17, 2007 8:28 AM
> To: samba@lists.samba.org
> Subject: [Samba] Getting Owner of Files on Mounted Windows Share
> 
> Hello everyone,
> I have an obscure issue that I have been so far unable to find the
> answer to.  I have successfully mounted a windows NTFS file share using
> samba via the following command:
> 
> mount -t smbfs -o username=,workgroup=
> //winserver/winpath /mnt/win
> 
> It mounts just fine but performing an ls -al command shows my user (or
> "root") as the owner of all files, when this isn't the case.  Is it
> possible to get the proper Windows owner of files through a
> samba-mounted windows file share?
> 
> Thanks in advance.
> 
> Adam
> 
> 
> 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] odd "Not listening on called name behavior"

2007-07-19 Thread Matthew Easton

After migrating from RHEL 3 to Fedora Core 6

I get the following error message repeatedly

 libsmb/cliconnect.c:cli_start_connection(1445)  session request to  
*SMBSERVER failed (Not listening on called name) : 15 Time(s)


What is *SMBSERVER?  I don't have anything with that name on the  
network.


 libsmb/cliconnect.c:cli_start_connection(1445)  session request to  
DSARABIA-WKS failed (Not listening on called name) : 2 Time(s)
 libsmb/cliconnect.c:cli_start_connection(1445)  session request to  
WKS-035 failed (Not listening on called name) : 13 Time(s)


In smb.conf I have

   hosts allow = 127.0.0.1 192.168.192.0/24
   hosts deny = 0.0.0.0/0
   interfaces = eth0 lo
   bind interfaces only = yes


The two workstations DSARABIA-WKS and WKS-035 are both members of the  
domain and have valid IP addresses on the subnet.  They have  
statically defined leases in DHCP. The only thing I can figure is  
that they lose their IP address on every reboot, and then try to  
connect to the server by broadcast before they get an address.


Is that even possible?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] smbpasswd truncates password to 8 chars on Solaris sparc?

2007-07-19 Thread Schaefer Jr, Thomas R.
On Wed, 18 Jul 2007 20:35:30 -0600
Zube <[EMAIL PROTECTED]> wrote:

> 
> Following up to my own query, it appears that bugs 4782 and 4677 in
> bugzilla.samba.org also mention this issue.  Using the smbpasswd from
> 3.0.24 seems to work around the problem.
> 

Yep, I'm the reporter of bug 4677, hadn't seen 4782 but it does look
like the same thing.  A third similiar bug I have entered is 4674 where
I eventually discovered I can't connect with smbclient when the users
password is greater than 8 characters.  4674 is also on Sparc Solaris.
I haven't tried any of it on x86 Solaris, my hunch would be the same
problem exists there too.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] RE: Getting owner of files on Mounted Windows Share (3rd attempt)

2007-07-19 Thread Francis Galiegue
Le jeudi 19 juillet 2007, Terlson, Adam (STP) a écrit :
> Are people just ignoring my question because I messed something up, not
> getting it, or does no one know anything?
> 

You had two answers already.

-- 
Francis Galiegue, One2team - [EMAIL PROTECTED]
[ATTENTION : CHANGEMENT DE COORDONNÉES !]
+33178945570, +33683877875, http://www.one2team.com
40 avenue Raymond Poincaré - 75116 PARIS
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] RE: Getting owner of files on Mounted Windows Share (3rd attempt)

2007-07-19 Thread Terlson, Adam (STP)
Are people just ignoring my question because I messed something up, not
getting it, or does no one know anything?



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Terlson, Adam (STP)
Sent: Tuesday, July 17, 2007 8:28 AM
To: samba@lists.samba.org
Subject: [Samba] Getting Owner of Files on Mounted Windows Share

Hello everyone,
I have an obscure issue that I have been so far unable to find the
answer to.  I have successfully mounted a windows NTFS file share using
samba via the following command:

mount -t smbfs -o username=,workgroup=
//winserver/winpath /mnt/win

It mounts just fine but performing an ls -al command shows my user (or
"root") as the owner of all files, when this isn't the case.  Is it
possible to get the proper Windows owner of files through a
samba-mounted windows file share?

Thanks in advance.

Adam



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] AD integration: "getent passwd" can't see *new* users,but "wbinfo -u" can

2007-07-19 Thread Fernando Ruza
Did you solve it ?? I have a similar problem. wbinfo -u give me a user,
however when a look for it with getent passwd it doesn't appear. With
other users everything is correct.

Thanks,

Fernando.


El lun, 12-02-2007 a las 01:17 -0500, Noah Dain escribió:
> I have two different systems (on different networks) showing this
> behavior.  Both are running Ubuntu Dapper/606.1 LTS with samba version
> 3.0.22 and windows 2003 sp1 servers (not R2).  AD integration is done
> via winbind, with nss using winbind.  At some point in time (which is
> unknown to me), the samba server stopped seeing new users, groups,
> machines which are added to AD.
> 
> scenario:
> I add a new user to AD, say "smbtest".  I then look for the user with
> "wbinfo -u", and it shows up.  However, it does not show up with
> "getent passwd" (same for groups, "getent group").  If I try to map a
> share to a drive letter, it goes something like this:
> 
> C:\WINDOWS>net use h: \\SAMBASRV\smbtest /user:DOMAIN\smbtest password
> 
> System error 1326 has occurred.
> 
> 
> Logon failure: unknown user name or bad password.
> 
> (The same results occur for existing shares, so it's not from lack of
> a home directory)
> 
> Of particular interest is log.winbindd-idmap.  Whenever I try to
> connect as the user smbtest to their home directory or another share,
> this is logged here several times:
> 
> [2007/02/11 20:45:40, 0] sam/idmap_rid.c:rid_idmap_get_id_from_sid(485)
>   rid_idmap_get_id_from_sid: no suitable range available for sid:
> S-1-5-21-4050315045-3251428658-993335031-3123
> 
> "wbinfo -s S-1-5-21-4050315045-3251428658-993335031-3123" returns
> "smbtest" as expected.
> "wbinfo -n smbtest" returns that sid.
> Other users/sids work.
> 
> other stuff I've tried / observed:
> 
> "net ads testjoin" looks good.
> kerberos looks good.
> There are no local accounts within the idmap uid/gid range.
> "/var/lib/samba/winbindd_idmap.tdb" shows no new entries.
> I've restarted samba and winbindd, and the whole machine went down for
> a reboot, but I'm still getting the same behavior.
> 
> -- only config files below --
> smb.conf:
> 
> [global]
> workgroup = DOMAIN
> realm = DOMAIN
> server string = samba server
> interfaces = eth0
> bind interfaces only = Yes
> security = ADS
> allow trusted domains = No
> obey pam restrictions = Yes
> pam password change = Yes
> log level = 2 winbind:3 passdb:2 auth:2
> log file = /var/log/samba/%m.log
> socket options = TCP_noDELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> load printers = No
> dns proxy = No
> wins server = DC1
> idmap backend = rid:BUILTIN=1000-, DOMAIN=1-6
> idmap uid = 1000-6
> idmap gid = 1000-6
> template homedir = /home/%U
> template shell = /bin/bash
> winbind separator = /
> winbind use default domain = Yes
> winbind nested groups = Yes
> hosts allow = 192.168.1.0/255.255.255.0, 127.
> hosts deny = 0.0.0.0/0.0.0.0
> 
> [homes]
> comment = Home Directory
> path = /home/%U
> read only = No
> create mask = 0640
> directory mask = 0750
> browseable = No
> 
> /end smb.conf
> 
> /etc/nsswitch.conf:
> 
> passwd: compat winbind
> group:  compat winbind
> shadow: compat winbind
> hosts:  files dns mdns
> networks:   files
> protocols:  db files
> services:   db files
> ethers: db files
> rpc:db files
> netgroup:   nis
> 
> /end nsswitch.conf
> 
> -- 
> Noah Dain
> "The beatings will continue, until moral improves" - the Management
-- 
Fernando Ruza ([EMAIL PROTECTED])
Dto. Informatica
Hospital Univesitario de Guadalajara
Tfl: 949 209 215
 661 123 845
Linux user: #273644 (http://counter.li.org)
Debian Sid (Kernel 2.6.14.3 & ext3)
---
Por favor, NO utilice formatos de archivo propietarios para el
intercambio de documentos, como DOC y XLS, sino HTML, RTF, TXT, CSV o
cualquier otro que no obligue a utilizar un programa de un fabricante
concreto. Gracias.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba roaming profile

2007-07-19 Thread John Drescher

[Profiles]
path = /srv/samba/profiles
browseable = yes
guest ok = yes
writeable = yes
read only = no
profile acls = yes
csc policy = disable
create mode = 0600
directory mode = 0700


profile acls = yes

This is very important with XP.

John
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba roaming profile

2007-07-19 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Lukasz Szybalski wrote, On 18-07-2007 13:13:
[...]

Profiles are sort of ninja magic, sometimes it works,
sometimes it doesn't and as the documentation says, it can be
the heaven for some people and the hell for others. BTW, did
you check the "Desktop Profile Management" in Samba HOWTO?

http://samba.org/samba/docs/man/Samba-HOWTO-Collection/ProfileMgmt.html


> [profiles]
> comment = Network PRofiles Share
> path = /home/samba/profiles
> #read only = No
> #store dos attributes = Yes
> #create mask = 0600
> #directory  mask = 0700
> #browseable = no
> #guest ok = no
> #printable = no
> writable = yes

Here is an example of profiles that we used for
quite some time on our company:

[Profiles]
path = /srv/samba/profiles
browseable = yes
guest ok = yes
writeable = yes
read only = no
profile acls = yes
csc policy = disable
create mode = 0600
directory mode = 0700


> [profiles]
> admin users = newuser2
>
> This means that newuser2 can act root.
> In my profile I get another folder created automatically only for newuser2
> 1. Why is the folder created only for newuser2 and not newuser?
> 
> drwxr-xr-x  2 root   newuser2 4096 2007-07-18 09:20 newuser2

Sounds related to the permissions.


> 2. Why is the /home/samba/profiles/newuser2 empty? It is not filled
> with roaming profile after I logging  out of windows XP?

That can be a WinXP problem. If for some reason, your
user and/or workstation has any setup to act as a local profile,
then it wouldn't upload anything to the server.

Local policies can be modified to force only local
profiles, you can also change some settings on how your roaming
profile works.


> I log in to newuser:
> cannot load a  roaming profile, loading your local profile
> cannot locate local profile
> 
> I log in to newuser2:
> cannot locate roaming profile on server
> 
> 3. How do I make the roaming profile working. It is the case that
> setting up the users and adding logon path, logon home, profiles to
> smb.conf is not enough?
> What else needs to be done?

'logon path' and 'logon home' are used by different
clients, sometimes (and specially for XP) you need the
'csc policy' option.

Hope this helps.
Kind regards,
- --
Felipe Augusto van de Wiel <[EMAIL PROTECTED]>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGn3kYCj65ZxU4gPQRCAoQAJ9cq8st/g3fmVCpVEQf6pOz07CmdACfaJCa
pOayniJjTwdvWn7lwsfqVb4=
=php4
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 4 TP5 support group policy

2007-07-19 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Kim Sim Tan wrote, On 19-07-2007 10:26:
> Hi all,
> Recently I'd install samba 4 TP5 in my computer for testing 
> purpose. Everything is done and my Windows XP pro computer
> able to join my samba4 domain.

Nice.


> So the next step I want to do is test the Group Policy (I 
> know samba 4 support this), but I can't get any documentation.
> Any help is appreciated.

Did you already took at look at the wiki?

http://wiki.samba.org/index.php/Samba4


There are some links for papers and other references, and
in the Samba Wiki you can find more info and FAQs about Samba4 in
the Developer area, in the first page:

http://wiki.samba.org


Hope this helps.
Kind regards,
- --
Felipe Augusto van de Wiel <[EMAIL PROTECTED]>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGn3YWCj65ZxU4gPQRCO07AJ9PqHftfV9EcS4ZLyhBpEmAE60sxACgywqi
ziO90hnEFlBwYF3o3ooZD2o=
=wNlQ
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: ridiculous slow gigabit transfer, faster with VNC

2007-07-19 Thread Mark Baily

Correction, the win32 Desktop has a Marvell Yukon 88E8056 PCI-E
Gigabit Ethernet Controller (PCI 11ab 4364)

The opensolaris desktop has a Realtek RTL8168/8111 PCI-E Gigabit
Ethernet NIC. (PCI 8168 1458).


On 7/19/07, Mark Baily <[EMAIL PROTECTED]> wrote:

Hi,
I have a problem with file transfers between a windows systems and unix systems.
I have one win32 desktop (intel e6400 2Gb Ram), one win32 laptop (p-m 2Ghz).
Also one linux laptop (p-m 1.4GHz) and one opensolaris desktop (intel
e4400 1GB Ram).

The two laptops have built-in 100Mbit ethernet and desktops have 1Gbit
ethernet on the motherboard. Both desktops use a Marvell Yukon.

The file transfer rate between two systems using FTP between the two
desktops (win32 to opensolaris) is consistently 50Mb/sec which is as
expected.

Using scp I only get 5Mb/sec between from any win32 system to any unix
system, much slower than expected.

Using scp from the linux lapotp to solaris desktop is 10Mb/sec as
expected (laptop has 100mbit only).

Using samba to copy a 1GB file I get about 7 minutes from win32 to
opensolaris. From opensolaris to win32 the windows dialog says
estiamted time 142 mins. Using plain FTP it takes 25sec. This is very
consistent.

A twist is that if a VNC client is open from the win32 desktop to the
opensolaris box the estimated transfer time via samba from opensolaris
to win32 drops right down to about 4 min. Much better, but still
nowhere near the FTP.

I have also tried swapping between a D-Link DGS-1008D switch and a
Netgear GS105 switch with no difference.

Since the FTP is very consistently acheiving 50megabytes/sec, I don't
think it can be blamed on a hardware fault.

However the problem doesn't appear to be just samba either, as the
slowness also occurs with scp, albiet scp is much more consistent at
5mb/sec than samba varying at 1GB/142min to 1GB/3min with VNC open.

Is this problem something to do with TCP stacks playing up? What else
might it be?

Thanks


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 4 TP5 support group policy

2007-07-19 Thread Kim Sim Tan

Hi all,
Recently I'd install samba 4 TP5 in my computer for testing purpose.
Everything is done and my Windows XP pro computer able to join my samba4
domain.

So the next step I want to do is test the Group Policy (I know samba 4
support this), but I can't get any documentation. Any help is appreciated.

Regards,
Ks
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ridiculous slow gigabit transfer, faster with VNC

2007-07-19 Thread Mike

Mark,
I have noted the same behavior many times.
I have an old server box that has not been upgraded since ver. 2.2.8.
Whenever I connect from a linux box using sftp in a terminal, I get
top speed 10/100 ethernet transfer rates over the LAN -- 10 Megs/sec.
- 12 Megs/sec.
When I use WinSCP (from a win client box), I get no more than 2
Megs/sec. transfer rate.

I wish I could articulate the why, but I cannot.
But it doesn't appear to be a Samba issue, it seems to me that the
software applications we are using handle TCP data transfer very
differently and are optimized to do things very differently.

I can add some anecdotal evidence regarding VNC ---
I use RealVNC between my work winbox and a Win Server 2003 and
sometimes transfer 1 Gig. .iso files between them.  I never measured
exactly, but from memory I know it always takes at least 5 minutes
over my 10/100 LAN.  Optimally, it should require no more than 2
minutes to complete such a transfer.  I don't mean to compare apples
vs. oranges (win/linux transfers vs. win/win transfers) but I think it
helps to show it's the transfer software and probably not win, or
linux, or samba.

I hope someone else on the list with more empirical knowledge can
confirm and provide the "why".

HTH,

Mike




On 7/19/07, Mark Baily <[EMAIL PROTECTED]> wrote:

Hi,
I have a problem with file transfers between a windows systems and unix systems.
I have one win32 desktop (intel e6400 2Gb Ram), one win32 laptop (p-m 2Ghz).
Also one linux laptop (p-m 1.4GHz) and one opensolaris desktop (intel
e4400 1GB Ram).

The two laptops have built-in 100Mbit ethernet and desktops have 1Gbit
ethernet on the motherboard. Both desktops use a Marvell Yukon.

The file transfer rate between two systems using FTP between the two
desktops (win32 to opensolaris) is consistently 50Mb/sec which is as
expected.

Using scp I only get 5Mb/sec between from any win32 system to any unix
system, much slower than expected.

Using scp from the linux lapotp to solaris desktop is 10Mb/sec as
expected (laptop has 100mbit only).

Using samba to copy a 1GB file I get about 7 minutes from win32 to
opensolaris. From opensolaris to win32 the windows dialog says
estiamted time 142 mins. Using plain FTP it takes 25sec. This is very
consistent.

A twist is that if a VNC client is open from the win32 desktop to the
opensolaris box the estimated transfer time via samba from opensolaris
to win32 drops right down to about 4 min. Much better, but still
nowhere near the FTP.

I have also tried swapping between a D-Link DGS-1008D switch and a
Netgear GS105 switch with no difference.

Since the FTP is very consistently acheiving 50megabytes/sec, I don't
think it can be blamed on a hardware fault.

However the problem doesn't appear to be just samba either, as the
slowness also occurs with scp, albiet scp is much more consistent at
5mb/sec than samba varying at 1GB/142min to 1GB/3min with VNC open.

Is this problem something to do with TCP stacks playing up? What else
might it be?

Thanks
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] ridiculous slow gigabit transfer, faster with VNC

2007-07-19 Thread Mark Baily

Hi,
I have a problem with file transfers between a windows systems and unix systems.
I have one win32 desktop (intel e6400 2Gb Ram), one win32 laptop (p-m 2Ghz).
Also one linux laptop (p-m 1.4GHz) and one opensolaris desktop (intel
e4400 1GB Ram).

The two laptops have built-in 100Mbit ethernet and desktops have 1Gbit
ethernet on the motherboard. Both desktops use a Marvell Yukon.

The file transfer rate between two systems using FTP between the two
desktops (win32 to opensolaris) is consistently 50Mb/sec which is as
expected.

Using scp I only get 5Mb/sec between from any win32 system to any unix
system, much slower than expected.

Using scp from the linux lapotp to solaris desktop is 10Mb/sec as
expected (laptop has 100mbit only).

Using samba to copy a 1GB file I get about 7 minutes from win32 to
opensolaris. From opensolaris to win32 the windows dialog says
estiamted time 142 mins. Using plain FTP it takes 25sec. This is very
consistent.

A twist is that if a VNC client is open from the win32 desktop to the
opensolaris box the estimated transfer time via samba from opensolaris
to win32 drops right down to about 4 min. Much better, but still
nowhere near the FTP.

I have also tried swapping between a D-Link DGS-1008D switch and a
Netgear GS105 switch with no difference.

Since the FTP is very consistently acheiving 50megabytes/sec, I don't
think it can be blamed on a hardware fault.

However the problem doesn't appear to be just samba either, as the
slowness also occurs with scp, albiet scp is much more consistent at
5mb/sec than samba varying at 1GB/142min to 1GB/3min with VNC open.

Is this problem something to do with TCP stacks playing up? What else
might it be?

Thanks
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba and proftpd authentication

2007-07-19 Thread Henrik Hudson
Hey List-

Since samba is in the middle..trying here first. 

I have a samba FreeBSD box as just a member server which was authenticating 
against a samba PDC. For other reasons we migrated that to a Win2003 ADS box.

I got the member server to join the ADS domain and users who are logged in can 
browse the shares, etc... without issue. The problem I have is that proftpd 
(via PAM) is no longer authenticating domain users. 

Here is my smb.conf: 
[global]
workgroup = DOMAIN
realm = int.DOMAIN.com
netbios name = DOMAINTEST
#server string = Samba %v on %L
server string =
security = ADS
password server = DOMAINSERVER
wins server = 10.0.0.3
encrypt passwords = yes 
idmap uid = 15000-2
idmap gid = 15000-2
#winbind use default domain = yes
#winbind separator = \
#winbind nss info = sfu
guest ok = yes
follow symlinks = no
case sensitive = no
os level = 33


I was getting the following error:
[2007/07/19 05:46:21, 0] nsswitch/winbindd.c:request_len_recv(544)
  request_len_recv: Invalid request size received: 1848

but a reboot and a library reload has cleared that up.

My proftpd pam file (hasn't changed) looks like:
#PAM config file for ProFTPD
authrequired/usr/local/lib/pam_winbind.so
account required/usr/local/lib/pam_winbind.so


I changed the debug lvl to 10 and I can see the server doing a request for the 
FTP user and it doesn't throw any obvious errors.

I am logging into proftpd using DOMAIN\ftpuser


Thoughts?

Henrik
-- 
Henrik Hudson
[EMAIL PROTECTED]
--
"God, root, what is difference?" Pitr; UF (http://www.userfriendly.org/)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] 3.0.25b-1.1.72-1411 - copy from and to the same samba share

2007-07-19 Thread Franz Sirl

Jeremy Allison wrote:

On Wed, Jul 18, 2007 at 04:01:45PM +0200, Franz Sirl wrote:

Hi,

I can confirm that a re-build of the current SUSE 3.0.25b RPMs plus 
today's diff between SAMBA_3_0_RELEASE and SAMBA_3_0_25 fixes the 
strange file corruption problem I was seeing with LIB.EXE from 
VisualStudio6 working on a Samba share. Though this was already true 
with yesterdays diff, but didn't work with a diff from last week.


Great - thanks for the update. I'm hoping I've now got this
right for 3.0.25c.


Sorry, but I have to take back my words, partly at least :-( .

Today the corruption problem was back when I compiled our SW on a samba 
share. Now this got me really confused, because yesterday I did the 
"gmake clean all" procedure for our SW at least a dozen times, and 
everytime it was OK. But today already on the first try linking would 
bail out because LIB.EXE generated a corrupted library.
What the heck I thought, why does it fail again. As a first measure I 
rebuilt samba with todays additional fix to locking.c, but this didn't 
change anything. Then, as a preparation to run a tcpdump, I looked at 
the smbd process responsible for my share with lsof. Hmm, I wondered, 
why does it use "netbios-ssn" as a local port, my PC is running uptodate 
WXPSP2 (german, without IE7), shouldn't it use "microsoft-ds" then?


Ok, disconnected and reconnected the share, and sure enough the 
connection to the share would use "microsoft-ds" now. Restarted the 
build of our SW, and voila! everything is fine now and the SW builds 
until the end.


So this corruption only happens for "netbios-ssn"/port 139 connections 
now (? not sure about this, but I can try with original 3.0.25b too if 
you want), but with "microsoft-ds"/port 445 connections all works like a 
charm.
Is this enough information for you or do you want me to do some smbd 
debug and/or tcpdump debugging?


Franz.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Prewin2kname with samba

2007-07-19 Thread Kaustubh Chaudhari

Hi All,

I create a user in windows2k3 AD server whose Name is "test" Logon name 
is "win2k3test"  and Pre-win2k name is "testprewin2k" (You get all this 
options when you create user in AD)


My samba is connected with this AD every thing works fine but when i Do 
wbinfo -u i can see the prewin2kname of the user ie: "testprewin2k" and 
not the "win2k3test" not sure what is the reason for this.
Even i can access the share with this prewin2k name and not with 
"win2k3test" user.


wbinfo -a win2k3test%testpasswd-fails

wbinfo -a testprewin2k%testpasswdworks fine

May be there is some concept behind this but i was not able to find the 
same can any one of you re-direct me to the same or explain it.


Thanks for you all help.

Kind Regards,
Kaustubh.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: [3.0.25] "net ads join" problems

2007-07-19 Thread Bernd Schubert
On Thursday 19 July 2007 08:31:32 Warren Beldad wrote:
> its because you did not provide the username thats why it connects using
> root..
> you can specify the username using the -U option and add the password
> directly using..
>
> net ads join -Uusername%password

No, it doesn't try to connect as root, but as host-ha-test-1, I still do not 
understand whats the magic behind that, but I guess it gets this name from 
the ads server.

See the patch in the other mail which gets its working, or here is the link


http://www.pci.uni-heidelberg.de/tc/usr/bernd/downloads/samba/net.patch


Cheers,
Bernd

-- 
Bernd Schubert
Q-Leap Networks GmbH
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: [3.0.25] bug: net ignors kerberos tickets

2007-07-19 Thread Bernd Schubert
On Thursday 19 July 2007 08:21:48 Volker Lendecke wrote:
> On Thu, Jul 19, 2007 at 01:50:50AM +0200, Bernd Schubert wrote:
> > > Seems to be a bug in samba, I think it always asks for a password
> > > ignoring already available kerberos tickets.
> >
> > Attached is a first patch.
>
> No patch attached.
>
> Volker

Nice, something is eating patches here. The mail in my sent-mail folder 
definitely has the patch.

Hope it doesn't eat links too.

http://www.pci.uni-heidelberg.de/tc/usr/bernd/downloads/samba/net.patch


Bernd

-- 
Bernd Schubert
Q-Leap Networks GmbH
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Help with restrict anonymous = 2

2007-07-19 Thread Plant, Dean
I am trying to lock down Samba's null session accessibility by using the
"restrict anonymous = 2" setting but when I configure this option it
stops the test XP client from being able to logon in to the domain.
"restrict anonymous = 1" allows logins to work correctly but Samba still
shows some account information when checking with the GetAcct tool. I am
using a Samba 3.0.25b domain configured as a PDC with a test WinXP
client.

Is anyone using "restrict anonymous = 2" while still being able to login
to the Samba domain or I have I gone wrong somewhere?

Thanks

Dean

smb.conf

[global]
   workgroup = DOMTEST
netbios name = MYMACHINE
   security = user
enable privileges = yes
server string = Samba Server
encrypt passwords = Yes
#pam password change = no
#obey pam restrictions = No
#ldap passwd sync = Yes
debug level = 103
log level = 0
syslog = 0
# TEST SETTINGS
restrict anonymous = 2
ntlm auth = no
lanman auth = no
client ntlmv2 auth = yes
client lanman auth = no
#
log file = /var/log/samba/%m.log
max log size = 10
time server = Yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
mangling method = hash2
Dos charset = 850
Unix charset = ISO8859-1
#   logon script = logon.bat
#   logon drive = H:
logon home = ""
logon path = ""
domain logons = Yes
domain master = Yes
os level = 65
preferred master = Yes
wins support = yes
passdb backend = ldapsam:"ldap://localhost";
ldap admin dn = cn=Manager,dc=testdomain,dc=com
ldap suffix = dc=testdomain,dc=com
ldap group suffix = ou=Groups
ldap user suffix = ou=Users
ldap machine suffix = ou=Computers
ldap idmap suffix = ou=Idmap
idmap backend = "ldap:ldap://localhost";

add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"
#ldap delete dn = Yes
delete user script = /opt/IDEALX/sbin/smbldap-userdel "%u"
add machine script = /opt/IDEALX/sbin/smbldap-useradd -t 5 -w
"%m"
add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g"
#delete group script = /opt/IDEALX/sbin/smbldap-groupdel "%g"
add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m
"%u" "%g"
delete user from group script =
/opt/IDEALX/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g
'%g' '%u'
   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
   template shell = /bin/false
   winbind use default domain = no
load printers = No
printcap cache time = 750
cups server =
iprint server =
addprinter command =
deleteprinter command =
show add printer wizard = No
printer admin =
min print space = 0
max reported print jobs = 0
max print jobs = 0
printable = No
printing =
cups options =
print command =
printer name =
force printername = No
printcap name = /dev/null
disable spoolss = yes
 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] 3.0.25b-1.1.72-1411 - copy from and to the same samba share

2007-07-19 Thread Franz Sirl

Jeremy Allison wrote:

On Wed, Jul 18, 2007 at 04:01:45PM +0200, Franz Sirl wrote:

Hi,

I can confirm that a re-build of the current SUSE 3.0.25b RPMs plus 
today's diff between SAMBA_3_0_RELEASE and SAMBA_3_0_25 fixes the 
strange file corruption problem I was seeing with LIB.EXE from 
VisualStudio6 working on a Samba share. Though this was already true 
with yesterdays diff, but didn't work with a diff from last week.


Great - thanks for the update. I'm hoping I've now got this
right for 3.0.25c.


Ok, since it seems you are heading for a 3.0.25c release soon, I'd 
better report this little build failure with the python stuff:


building 'smb' extension
gcc -pthread -fno-strict-aliasing -DNDEBUG -O2 -march=i586 -mtune=i686 
-fmessage-length=0 -Wall -D_FORTIFY_SOURCE=2 -g -O2 -g -m32 -march=i586 
-mtune=i686 -fmessage-length=0 -D_FORTIFY_SOURCE=2 -D_GNU_SOURCE 
-D_LARGEFILE64_SOURCE -DIDMAP_RID_SUPPORT_TRUSTED_DOMAINS 
-D_SAMBA_BUILD_=3 -fPIC -I/usr/include/python2.4 -c python/py_smb.c -o 
build/temp.linux-i686-2.4/python/py_smb.o -O2 -g -m32 -march=i586 
-mtune=i686 -fmessage-length=0 -D_FORTIFY_SOURCE=2 -D_GNU_SOURCE 
-D_LARGEFILE64_SOURCE -DIDMAP_RID_SUPPORT_TRUSTED_DOMAINS 
-D_SAMBA_BUILD_=3 -DHAVE_CONFIG_H -D_LARGEFILE64_SOURCE 
-D_FILE_OFFSET_BITS=64 -D_GNU_SOURCE -DLDAP_DEPRECATED -O2 -g -m32 
-march=i586 -mtune=i686 -fmessage-length=0 -D_FORTIFY_SOURCE=2 
-D_GNU_SOURCE -D_LARGEFILE64_SOURCE -DIDMAP_RID_SUPPORT_TRUSTED_DOMAINS 
-D_SAMBA_BUILD_=3 -Iinclude -I./include -I. -I. -I./lib/replace 
-I./lib/talloc -I./tdb/include -I./libaddns -I./librpc -DHAVE_CONFIG_H 
-D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -D_GNU_SOURCE 
-DLDAP_DEPRECATED -I/home/fsirl/BUILD/samba-3.0.25b/source/lib 
-D_SAMBA_BUILD_=3

In file included from /usr/include/python2.4/Python.h:8,
 from ./python/py_common.h:33,
 from ./python/py_smb.h:24,
 from python/py_smb.c:21:
/usr/include/python2.4/pyconfig.h:838:1: warning: "_POSIX_C_SOURCE" 
redefined

In file included from /usr/include/stdio.h:28,
 from ./lib/replace/replace.h:39,
 from include/includes.h:29,
 from ./python/py_common.h:24,
 from ./python/py_smb.h:24,
 from python/py_smb.c:21:
/usr/include/features.h:154:1: warning: this is the location of the 
previous definition

python/py_smb.c: In function ‘py_smb_connect’:
python/py_smb.c:51: error: wrong type argument to unary exclamation mark
python/py_smb.c: In function ‘py_smb_session_request’:
python/py_smb.c:71: warning: assignment discards qualifiers from pointer 
target type

error: command 'gcc' failed with exit status 1
make: *** [python_ext] Error 1
error: Bad exit status from /var/tmp/rpm-tmp.90950 (%build)

This is on SLES10SP1 with gcc-4.1.2 and python-2.4.2.

Franz
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba