Re: [Samba] ridiculous slow gigabit transfer, faster with VNC
On 7/20/2007 Mark Baily wrote: With the inbuilt Marvel Yukon in the win32 and the DGE-530T in opensolaris large pings did not work but samba did work (25 sec). I had lots of problems with the Marvel drivers that came through Windows Update... did you at least try uninstalling the driver and reinstalling the latest version downloaded directly from your MB driver site? The MArvels work great - again, as long as you don't let Windows Update update the driver. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ridiculous slow gigabit transfer, faster with VNC
I've now put a D-LINK DGE-530T in both the win32 desktop and the opensolaris desktop. Both large pings and samba are working. With the DGE-530T in the win32 and the realtek in the opensolaris, large pings worked but samba was still 63mins estimated to transfer a 1G file. With the inbuilt Marvel Yukon in the win32 and the DGE-530T in opensolaris large pings did not work but samba did work (25 sec). With the DGE-530T in both, both large pings and samba work fine. My lesson in this is to avoid any NIC built-in to the motherboard and use a seperate high-quality NIC card. On 7/21/07, Mark Baily <[EMAIL PROTECTED]> wrote: Problem partially solved.. Using a D-LINK DGE-530T with the syskonnect skge 64-bit driver, instead of using the inbuilt realtek NIC in the opensolaris box and now samba works great, 25 sec to copy a 1GB file. I've heard some other posts where realtek network chips were causing probs, think I'll stay away from them in the future. Re ping exchanges, this does indeed show up the differences. Pinging from the opensolaris to the linux laptop works perfectly with ping data sizes up to the IPV4 limit (65507). This works with both the realtek NIC and the dlink NIC. Pinging from the opensolaris to the win32 desktop the maximum ping size I can get to work is 1472. As greater size results in 100% packet loss. This is also with both NIC's. Anyway I at least have the samba functionality I need. Would be nice to sort out why the unix machines are fine with each other but unix<->win32 seems to have much more problems at a basic networking level. It could indeed be bad drivers etc. Mark On 7/20/07, Steve Platt <[EMAIL PROTECTED]> wrote: > > Mark, > > > It might be worth checking that you can do large ping exchanges between the > affected systems ... eg in solaris try > > /usr/sbin/ping -s clientpcname 64000 > > This sends several ethernet frames almost "back to back" and can show up > duplex problems as well as driver/buffering problems (common in PCs). > > Steve > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ridiculous slow gigabit transfer, faster with VNC
Problem partially solved.. Using a D-LINK DGE-530T with the syskonnect skge 64-bit driver, instead of using the inbuilt realtek NIC in the opensolaris box and now samba works great, 25 sec to copy a 1GB file. I've heard some other posts where realtek network chips were causing probs, think I'll stay away from them in the future. Re ping exchanges, this does indeed show up the differences. Pinging from the opensolaris to the linux laptop works perfectly with ping data sizes up to the IPV4 limit (65507). This works with both the realtek NIC and the dlink NIC. Pinging from the opensolaris to the win32 desktop the maximum ping size I can get to work is 1472. As greater size results in 100% packet loss. This is also with both NIC's. Anyway I at least have the samba functionality I need. Would be nice to sort out why the unix machines are fine with each other but unix<->win32 seems to have much more problems at a basic networking level. It could indeed be bad drivers etc. Mark On 7/20/07, Steve Platt <[EMAIL PROTECTED]> wrote: Mark, It might be worth checking that you can do large ping exchanges between the affected systems ... eg in solaris try /usr/sbin/ping -s clientpcname 64000 This sends several ethernet frames almost "back to back" and can show up duplex problems as well as driver/buffering problems (common in PCs). Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Sharing Accounts between Servers and SIDs
I maintain a heterogenous network with a shared LDAP account database. The user accounts have globally unique user names, UIDs and RIDs. Some, but not all accounts are valid on all machines, but there is no need for samba to care about this, because there simply won't be a unix account for invalid users. There are no MS servers involved, and because every samba server has the same user account base and does its own authentification, there is no need for winbind. The samba servers currently still use the old samba2-compatible ldapsam_compat passdb backend which I eventually want to migrate to the current sambaSamAccount. While most attributes just changed their names, which shouldn't make much any difference, I am a little uncertain, how to handle the new sambaSID attribute without breaking my setup: Would it work to just put a dummy domain with SID "S-1-0-0" in the directory and use this as a prefix for all the user SIDs? Currently, every server has its own SID (which is created by Samba, so far there was no reason to worry about this), but with the new LDAP schema, I am afraid that Samba might not accept such an account as a valid local account ... Any recommendations? Regards, Peter Daum -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Prewin2kname with samba
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Kaustubh Chaudhari wrote, On 19-07-2007 08:24: > Hi All, > > I create a user in windows2k3 AD server whose Name is "test" Logon name > is "win2k3test" and Pre-win2k name is "testprewin2k" (You get all this > options when you create user in AD) > > My samba is connected with this AD every thing works fine but when i Do > wbinfo -u i can see the prewin2kname of the user ie: "testprewin2k" and > not the "win2k3test" not sure what is the reason for this. > Even i can access the share with this prewin2k name and not with > "win2k3test" user. > > wbinfo -a win2k3test%testpasswd-fails > > wbinfo -a testprewin2k%testpasswdworks fine > > May be there is some concept behind this but i was not able to find the > same can any one of you re-direct me to the same or explain it. Imagining that Samba3 is not as good as Samba4 with AD and that Samba3 gives preference to NT4-style domains, probably it is using the pre-win2k names. If you create a user without "all the options that AD gives" what happens? > Thanks for you all help. > Kind Regards, > Kaustubh. Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGoN9GCj65ZxU4gPQRCOTPAJ9l1IwqoN+Brl1nO5GqCiITvZLwIgCfUG4A 8qBwnyf/AJ4idewQpoHeK+w= =P7e9 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] odd "Not listening on called name behavior"
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Matthew Easton wrote, On 19-07-2007 12:33: > After migrating from RHEL 3 to Fedora Core 6 > > I get the following error message repeatedly > > libsmb/cliconnect.c:cli_start_connection(1445) session request to > *SMBSERVER failed (Not listening on called name) : 15 Time(s) > > What is *SMBSERVER? I don't have anything with that name on the > network. > > libsmb/cliconnect.c:cli_start_connection(1445) session request to > DSARABIA-WKS failed (Not listening on called name) : 2 Time(s) > libsmb/cliconnect.c:cli_start_connection(1445) session request to > WKS-035 failed (Not listening on called name) : 13 Time(s) > > In smb.conf I have > > hosts allow = 127.0.0.1 192.168.192.0/24 > hosts deny = 0.0.0.0/0 > interfaces = eth0 lo > bind interfaces only = yes > > > The two workstations DSARABIA-WKS and WKS-035 are both members of the > domain and have valid IP addresses on the subnet. They have > statically defined leases in DHCP. The only thing I can figure is > that they lose their IP address on every reboot, and then try to > connect to the server by broadcast before they get an address. > > Is that even possible? Hmmm, not sure but the smb.conf man pages says that the 'hosts allow' parameter is a comma separated list, *maybe* that could be the cause of your problem. And I don't think that your workstations are trying to access the server without an IP address, if you set the IP address without the DHCP, does the error still appears? Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGoN56Cj65ZxU4gPQRCJiTAJ9E7d85IhP+AE8aKz9U6+OwiA/VYQCcCV+c LaPCg/4ZvuuJqCs1j5hQ+BU= =sOnP -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Changing domain name
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Didster wrote, On 19-07-2007 15:33: > Hi, > > Thanks for the response. > > I did think that about getlocalsid - the clues in the name and all - > but what got me is this from one of the offical howto's > > "Good, there is now a safe copy of the local machine SID. On a PDC/BDC > this is the domain SID also." > > Which implies on a PDC getlocalsid will return the SID of the domain > the PDC is PDC for? Maybe I'm miss reading it! Which means that the DOMAIN SID and PDC SID are the same if everything is correctly configured. SID is part of the process to have the machine as a PDC for a given domain, but it is not the only thing, you still need smb.conf parameters to tell which one is the PDC and which ones are BDCs. Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGoNuRCj65ZxU4gPQRCBcsAKCCOfqUTlaWTQhWJDWGBBnzLkF+SACgjndw R+5IvrepJ2l4GfJ1wCHGOPQ= =C8I7 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 4 TP5 support group policy
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 KS Tan wrote, On 19-07-2007 23:59: > Seems the Group Policy features will release on TP6. Anybody know the > exactly date? Sorry, I don't think there is a pre-defined release schedule with an exact date, sometimes TP releases happen in 2 months, sometimes it needs more time like 6 months. TP5 happened on 20070608, so I would imagine that the next release would happen after August, 2007. Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGoNpqCj65ZxU4gPQRCOMwAJ9biX2HAUUcc1oEYDn6nuS+f9dcEwCeO6NZ 5LzKd3/pntHJygZxsv+nytM= =rI5N -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Latest update gives me problems.
Hiya.. I got a new Samba for my SUSE 10.1 x86_64 by automatic update last night, and now all of a sudden my Vista workstation won't connect to the shares automatically. I have the machine as a domain controller with LDAP backend, and it's been working flawless until the new update to samba-3.0.22-13.32. My log.smbd shows this as the workstation logs in, and asks for username/password, which it has NEVER done before: [2007/07/20 10:31:25, 0] smbd/server.c:main(805) smbd version 3.0.22-13.32-1354-SUSE-CODE10 started. Copyright Andrew Tridgell and the Samba Team 1992-2006 [2007/07/20 10:34:48, 0] lib/util_sock.c:get_peer_addr(1225) getpeername failed. Error was Transport endpoint is not connected [2007/07/20 10:34:48, 0] lib/util_sock.c:write_data(557) write_data: write failure in writing to client 192.168.111.30. Error Connection reset by peer [2007/07/20 10:34:48, 0] lib/util_sock.c:send_smb(765) Error writing 4 bytes to client. -1. (Connection reset by peer) [2007/07/20 10:35:22, 1] smbd/service.c:make_connection_snum(700) hilda (192.168.111.30) connect to service profiles initially as user anders (uid=1002, gid=1001) (pid 5548) [2007/07/20 10:35:25, 1] smbd/service.c:make_connection_snum(700) hilda (192.168.111.30) connect to service anders initially as user anders (uid=1002, gid=1001) (pid 5548) [2007/07/20 10:35:27, 1] smbd/service.c:make_connection_snum(700) hilda (192.168.111.30) connect to service netlogon initially as user anders (uid=1002, gid=1001) (pid 5548) [2007/07/20 10:35:32, 1] smbd/service.c:close_cnum(897) hilda (192.168.111.30) closed connection to service profiles [2007/07/20 10:35:38, 1] smbd/service.c:close_cnum(897) hilda (192.168.111.30) closed connection to service anders [2007/07/20 10:36:00, 1] smbd/service.c:close_cnum(897) hilda (192.168.111.30) closed connection to service netlogon Then I enter username/pass for the share, and log shows: [2007/07/20 10:41:23, 1] smbd/service.c:make_connection_snum(700) hilda (192.168.111.30) connect to service anders initially as user anders (uid=1002, gid=1001) (pid 5648) [2007/07/20 10:41:23, 1] smbd/service.c:make_connection_snum(700) hilda (192.168.111.30) connect to service netlogon initially as user anders (uid=1002, gid=1001) (pid 5648) Then the login script tries to connect to the second share, asks for username and password again, I enter it, and the Vista net utility replies with system error 1219. Then I tried to use the "expanded" net use format, like this: net use * \\beata\firman /U:NORRBRING\anders "the_password" and that worked fine. Next attempt was: net use * \\beata\firman /U:NORRBRING\anders Then it asked for password, and I hit and got connected to the share. Maybe I should also mention that the profile is updated correctly on the server, so all changes are updated in the .msprofile.V2 directory. Any ideas on all of this? Anders. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Sharing AD domain info with 2 SBS2003 servers
When I took over as the IT guy in September, there were 2 separate locations with different domains each managed by a SBS 2003 machine. The connection between them was an OpenVPN tunnel. The network was fine and one could see 2 domains in the network. Local and Local2 are working names. From a workstation on Local one could see Local2 in the Microsoft Windows Network, and vice versa from Local2 one could see Local. Additionally, one could easily browse through the remote network as long as the user permissions were correct. With the same user name and password for the two domains there was no issue with authentication. Teh configuration was this: Local ==> IpTables firewall, FC4, with Samba, OpenVpn, Freshclam, Apache and Sendmail Local2 ==>IpTables firewal, FC4, with Samba, OpenVpn, Freshclam Then we had the firewall hacked on Local. The server was compromised and a NEW drive was put in place and reinstalled with Etch (Debian 4.0) The firewall was restored, different but similar function. The OpenVPN tunnel was restored with the same configuration. All is fine except for the lack of name based browsing. The second domain no longer shows. From local, there is no Local2. From Local2, there is no Local. From Local2 server one can find Local by name, but only because of an entry in the hosts file. Samba was running on the firewall, and is now, but I don't know how to configure it to help with the domains. SBS is, I believe, dumbed down and cannot manage to read another SBS server's information. After a couple more months passed the firewall on Local2 was hacked and the drive replaced and reinstalled, also with Etch. I do have the old drives intact (never throw things away) and accessible. Any thoughts, suggestions, links to solutions and requests for clarification are appreciated.. Regards, Bill -- -- Bill Ries-Knight Stockton, CA Respect the process, Vote. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] createlocalgroup: could not allocate a RID
Hello everybody. I have configured a linux box with samba 3.0.25b It's joined to a windows nt4 domain. It's running winbindd. Now I would like to create a local group with 'net sam createlocalgroup group_name' and adding members from the windows nt4 domain. I need this local group so I can assign permission to file/directories. This is my smb.conf: [global] workgroup = nt4domain server string = Samba on Slackware Linux idmap uid = 1-1 idmap gid = 1-1 idmap alloc backend = tdb idmap config:range = 1 - 1 security = domain and when I issue 'net sam createlocalgroup group_name' I get this error message: Attempting to register passdb backend tdbsam [2007/07/20 16:29:40, 5] passdb/pdb_interface.c:smb_register_passdb(81) Successfully added passdb backend 'tdbsam' [2007/07/20 16:29:40, 5] passdb/pdb_interface.c:make_pdb_method_name(121) Attempting to find an passdb backend to match smbpasswd (smbpasswd) [2007/07/20 16:29:40, 5] passdb/pdb_interface.c:make_pdb_method_name(142) Found pdb backend smbpasswd [2007/07/20 16:29:40, 5] passdb/pdb_interface.c:make_pdb_method_name(153) pdb backend smbpasswd has a valid init [2007/07/20 16:29:40, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(585) getsmbfilepwent: end of file reached. [2007/07/20 16:29:40, 0] passdb/pdb_interface.c:pdb_new_rid(1066) Trying to allocate a RID when algorithmic RIDs are active [2007/07/20 16:29:40, 0] groupdb/mapping.c:pdb_default_create_alias(468) Could not allocate a RID -- wasted a gid :-( Creating group_name failed with NT_STATUS_ACCESS_DENIED [2007/07/20 16:29:40, 2] utils/net.c:main(1032) return code = -1 Am I missing anything? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] wbinfo -u failing
Have joined 1st Samba Server (AIX 5.3, samba 3.0.25) in W2003 AD, wbinfo -u -g resolving ok Joined another 2nd Samba Server (AIX 5.3, samba 3.0.25) to W2003 AD, wbinfo -u and -g is not resolving on 2nd Samba Server ? Do I use the same idmap uid and idmap gid settings in my smb.conf's ? Is there anything else I need to do ? Selwyn -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] 3.0.25b problem joining 3.0.23d domain..
Hi, My PDC is running on 3.0.23d. I have more than 50+ users (Win XP , Linux) connected to it. Today I've downloaded 3.0.25b and wanted to add to domain new server. For a while I was wondering if 3.0.25b can join to elder 3.0.23d but gave it goal. This message I got during joining: /opt/samba-3.0.25b/bin/net rpc join -U user1%pass1 Starting service: samba [2007/07/20 13:02:35, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(304) error setting trust account password: NT code 0x1c010002 Unable to join domain PDC. My smb.conf for this new test server is as follows: [global] netbios name = test workgroup = PDC server string = TEST Samba Server security = domain hosts allow = 192.168.89. 127. 10.9. load printers = no log file = /opt/samba-3.0.25b/var/log.%m max log size = 1 log level = 5 interfaces = 192.168.89.0/24 wins server = 192.168.89.3 Has it changed something related to joining process since 3.0.23d? Should I keep 3.0.23d on all servers including a new one or should I upgrade my PDC to 3.0.25b - if this is the case - should I expect any problems with changing PDC. As a backend for PDC I use LDAPv3 - 2.3.35. Best regards, Marcin -- ARISE M.Giedz, T.Żebruń sp.j. http: www.arise.pl mail: [EMAIL PROTECTED] tel: +48 502 537 157 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] safe_strcpy errors from winbindd (Samba 3.0.25b)
On Fri, Jul 20, 2007 at 12:44:49PM +0200, Bartschies, Thomas wrote: > checked. /lib/libnss_winbind.so is part of the 3.0.25b rpm. > We haven't rebooted yet. It's difficult. The System runs many > other applications, that almost cannot go down at the same > time. > > Any clues to reload the lib without reboot? Restart all processes individually. The problem is that libc only loads libnss_winbind.so at process startup. Volker pgpyJzQrvARjD.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
AW: [Samba] safe_strcpy errors from winbindd (Samba 3.0.25b)
On Fri, Jul 20, 2007 at 10:45:07AM +0200, Bartschies, Thomas wrote: > > > > Hi, > > > > we've raised the winbind error level to 10. Hope it helps. >[2007/07/20 10:00:21, 3] >nsswitch/winbindd_async.c:winbindd_dual_lookupname(931) > [27298]: lookupname ^Q+ÐÜB¦ÿêÓ<87>z^\]^^sì2,¿^<9C>Ôgµ=·pE>X^A<90>ÏU lr5ÑTm19E ><93>Á^ZñÔß ^_^SÒ"xÙ·âþ_÷ª^S]<82>^Dyhÿa7IßÛf<82>ù<92> > That's definitely garbage, I have no real idea where this > might come from. What applications are running on your box? > Only Samba? Did you also replace /lib/libnss_winbind.so, and > did you reboot? > Volker Hi, checked. /lib/libnss_winbind.so is part of the 3.0.25b rpm. We haven't rebooted yet. It's difficult. The System runs many other applications, that almost cannot go down at the same time. Any clues to reload the lib without reboot? Thomas -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] safe_strcpy errors from winbindd (Samba 3.0.25b)
On Fri, Jul 20, 2007 at 10:45:07AM +0200, Bartschies, Thomas wrote: > > Hi, > > we've raised the winbind error level to 10. Hope it helps. [2007/07/20 10:00:21, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupname(931) [27298]: lookupname ^Q+ÐÜB¦ÿêÓ<87>z^\]^^sì2,¿^<9C>Ôgµ=·pE>X^A<90>ÏU lr5ÑTm19E <93>Á^ZñÔß ^_^SÒ"xÙ·âþ_÷ª^S]<82>^Dyhÿa7IßÛf<82>ù<92> That's definitely garbage, I have no real idea where this might come from. What applications are running on your box? Only Samba? Did you also replace /lib/libnss_winbind.so, and did you reboot? Volker pgpRKIlU26LLv.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
