[Samba] Samba doesn't work after upgrading

2007-08-03 Thread Bill Baker
I just upgraded my system to Fedora Core 7 from Core 6 and I find that
now Samba doesn't seem to be working for me anymore.  If I try to
connect from my laptop computer running Windows XP I just get one shared
folder that has only a few subfolders (probably because offline files is
turned on).  If I try to connect by using the IP address (\\192.168.0.5)
it tells me that it's not accessible and that the network path was not
found.  Additionally, I can't even browse the workgroup from this
computer.  I get "The server is not configured for transactions."

Next I tried connecting from my other computer, also running Windows XP,
that doesn't have offline files turned on.  The error that comes back
says "The Server service is not started."  If I try to connect by IP
address, it asks for a username and password then says "A device
attached to the system is not functioning."  I can browse the workgroup
from this computer.

I tried connecting to the Samba server from the computer it's installed
on.  When I type \\honestabe into Konqueror it gives me a list of shared
folders, but when I click on one it gives me "The file or folder
smb://honestabe/pub does not exist.

I have tried downgrading to the last version of Samba I was using and
even tried upgrading to the newest version on the samba.org website
(3.0.25b-3).  Nothing seems to work, and my smb.conf file hasn't changed
at all.  Both computers were able to connect before the upgrade.

My conf file: http://home.earthlink.net/~bill_chris/smb.conf.txt

The log file from my Linux computer seems to indicate my credentials are
bad, but I'm using the correct credentials:

[2007/08/03 15:22:45, 0] smbd/service.c:make_connection_snum(928)
  Can't become connected user!
[2007/08/03 15:23:07, 0] smbd/service.c:make_connection_snum(1003)
  '/home/bill' does not exist or permission denied when connecting to
[bill] Error was Permission denied
[2007/08/03 15:23:53, 0] smbd/service.c:make_connection_snum(1003)
  '/cifs/pub' does not exist or permission denied when connecting to
[pub] Error was Permission denied

Here's the last few lines from the log.nmbd file:

  Samba name server HONESTABE is now a local master browser for
workgroup BAKER on subnet 192.168.0.5
*
[2007/08/03 20:26:12, 0]
nmbd/nmbd_browsesync.c:find_domain_master_name_query_fail(351)
find_domain_master_name_query_fail:
Unable to find the Domain Master Browser name BAKER<1b> for the
workgroup BAKER.
Unable to sync browse lists in this workgroup.
[2007/08/03 20:41:15, 0]
nmbd/nmbd_browsesync.c:find_domain_master_name_query_fail(351)
  find_domain_master_name_query_fail:
  Unable to find the Domain Master Browser name BAKER<1b> for the
workgroup BAKER.
  Unable to sync browse lists in this workgroup.
[2007/08/03 20:56:23, 0]
nmbd/nmbd_browsesync.c:find_domain_master_name_query_fail(351)
  find_domain_master_name_query_fail:
  Unable to find the Domain Master Browser name BAKER<1b> for the
workgroup BAKER.
  Unable to sync browse lists in this workgroup.

If anyone can provide any help or insight into this, I'd really
appreciate it.  Google searches have proved fruitless and I've found out
nothing useful by running smbclient and nmblookup commands.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] my next question: no accesss

2007-08-03 Thread John Drescher
On 8/3/07, joop gerritse <[EMAIL PROTECTED]> wrote:
> Even if I can find back a share, (which I sometimes can, for no clear reason)
> then the next message I get is "no access". I suspect this may be a Linux
> config thing, but I am still unable to figure what ownership rights I should
> give to the shares: root:root or someuser:users or samba:samba (this
> user:group does not exist as yet). What is meant by no access: is it a
> Windows or a Unix message (well, I suspect that this question is not unusual
> in a mixed environment).
>
I can tell you one thing it should never be root:root. And probably
not samba:samba. It usually is username:users or something like that.

Please post your smb.conf file as it should give us some information
to start. The information you post gives us no clue what your problem
is so it is impossible to give you any good advice.

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] try to bind samba traffic to specific interface - without success

2007-08-03 Thread Jan

Yes - but the same error as before ...
Anyone else have another idea?

best regards
Jan

cuicui schrieb:

Jan a écrit :

Hello,

tonight my home samba server attracted my attention because i had 
seen that the complete
traffic (copy user->server / server->user)  goes via eth0 and not how 
specified in smb.con

via the eth2 interface.

i tried to bind it like this:

   *interfaces = lo eth2


   *

in smb.conf ... any idea?


Did you try to add:

"bind interfaces only = Yes" ?

Regards,

Nicolas


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] try to bind samba traffic to specific interface - without success

2007-08-03 Thread Jan

Yes - but the same error as before ...
Anyone else have another idea?

best regards
Jan

Jan schrieb:

Hello,

tonight my home samba server attracted my attention because i had seen 
that the complete
traffic (copy user->server / server->user)  goes via eth0 and not how 
specified in smb.con

via the eth2 interface.

i tried to bind it like this:

   *interfaces = lo eth2


   *

in smb.conf ... any idea?


best regards
Jan

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] maybe I should explain what i am after!

2007-08-03 Thread Carlos Rivera-Jones
Translation: If you need help, sweat a little, and show us why we should. 
Otherwise, RTFM.
 
Carlos



From:  Felipe Augusto van de Wiel




This is not exactly a RTFM, but you will need to give
us more information if you really want help, smb.conf, logs
and better subject lines would be a great improvement.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] my next question: no accesss

2007-08-03 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

joop gerritse wrote, On 03-08-2007 15:40:
> Even if I can find back a share, (which I sometimes can, for 
> no clear reason) then the next message I get is "no access".
> I suspect this may be a Linux config thing, but I am still
> unable to figure what ownership rights I should give to the
> shares: root:root or someuser:users or samba:samba (this
> user:group does not exist as yet). What is meant by no access: 
> is it a Windows or a Unix message (well, I suspect that this
> question is not unusual in a mixed environment).

What message? In which context? From which log file?

Please, try to give us more information and details about
what's going on, "USB crystal balls" are quite expensive. :)

Kind regards,
- --
Felipe Augusto van de Wiel <[EMAIL PROTECTED]>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGs7xSCj65ZxU4gPQRCPT6AJ9n664nklmqyyY1L3w5OvkdQnmHWwCfaqL5
sXP0YwmMbWF8rb72Oz2oSqI=
=a/8T
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] maybe I should explain what i am after!

2007-08-03 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

joop gerritse wrote, On 03-08-2007 16:07:
> I started just copying the smb.conf from the primary 
> controller, and setting the priority somewhat lower.
> I assumed that it would just lose the election from
> the PDC, and still stay present, and available.

No, that's not //just// like that. You need to
change a few options in order to get the PDC/BDC expected
behaviour.


> I am aware of the difficulties of keeping the user 
> directories in sync; this would, in due course, require
> LDAP, but for the moment I decided that the user
> population is quite stable, so I just copy /etc/passwd
> and /etc/shadow and smbpasswd over in the --rare-- event
> that a user is added or removed.

In fact, filesystem sync and account sync are two
different problems, they are related but not dependent.
You could use vampire or tdbsam or winbind or LDAP to keep
accounts in sync.


> 1. It is quite hard to even make the second controller 
> visible. In fact, I had to include a remote announce =
> / line before it even
> showed up in Network Environment. And I am quite unsure
> whether this is the right way, it just worked, to some 
> extent.

No, it is not. You should use a WINS server,
probably on the PDC, and properly use other paramenters
in smb.conf like 'local master' and 'preferred master'.


> 2. I am not sure whether the backup domain controller 
> will function as such. How could I be?

Did you check the Official Samba HOWTO? Specially
the Domain Control chapter?

http://samba.org/samba/docs/man/Samba-HOWTO-Collection/ServerType.html#id327269
http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-pdc.html


> If I take down the primary I might find out, but the 
> server is too critical for the whole organization to
> just try. How can I make sure that a BDC will work
> without taking down the PDC?

First of all, you should use the right commands
and configuration options (man smb.conf) and you can
use a small network for the BDC, change a workstation
from PDC network to BDC one and see if it works.


> 3. And then there is the irregular behavior which I 
> mentioned before. Sometimes the host is visible, but
> the shares are inaccessible; sometimes I can even get
> a view of the shares, but I cannot access them. In
> addition, i have a far simpler configuration at home,
> where I can just read and write to the shares. So I
> know it can be done, but what are the rules?

Samba needs some care and attention, specially
on special cases like PDC/BDC, the Samba By Example is
also a good read to understad real case scenarios.

http://samba.org/samba/docs/man/Samba-Guide/


> And I am no Windows expert. I know quite a lot about 
> Linux, but the apparent (lack of) logic in Windows
> baffles me.
> 
> That is the background. Maybe it helps to get the 
> right answers. thanks in advance for any attempts.
> 
> BTW I am quite happy with an RTFM answer, as long as 
> it's accompanied with a URL. I have read quite a few
> FMs, but so far without real enlightenment...

This is not exactly a RTFM, but you will need to give
us more information if you really want help, smb.conf, logs
and better subject lines would be a great improvement.

Kind regards,
- --
Felipe Augusto van de Wiel <[EMAIL PROTECTED]>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGs7voCj65ZxU4gPQRCKGZAJ9WTXlq4h3te/i6GQcmtXrpDEhwiwCfaeGQ
+AChFqanodOyAjCBYF6uZL8=
=Y8nE
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] try to bind samba traffic to specific interface - without success

2007-08-03 Thread cuicui

Jan a écrit :

Hello,

tonight my home samba server attracted my attention because i had seen 
that the complete
traffic (copy user->server / server->user)  goes via eth0 and not how 
specified in smb.con

via the eth2 interface.

i tried to bind it like this:

   *interfaces = lo eth2


   *

in smb.conf ... any idea?


Did you try to add:

"bind interfaces only = Yes" ?

Regards,

Nicolas

--
Ce message a ete verifie par MailScanner
pour des virus ou des polluriels et rien de
suspect n'a ete trouve.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Argument createcomputer does not work in net rpc join

2007-08-03 Thread Raj Pagaku
Hello,

We are using samba-3.0.25a and we want to join our system onto the
Active Directory server in a specific location.  The argument
'createcomputer' is exactly what we want and it works perfectly when we
do a 'net ads join' but fails when we do a 'net rpc join'.  The computer
object always gets created in the 'Computers' folder.

Looking at the code it appears that the 'net rpc join' doesn't support
the 'createcomputer' argument.  Is there a specific reason why it isn't
supported?  Are there plans to support the 'createcomputer' argument in
the 'net rpc join' command in any future releases?

Thanks
Raj Pagaku
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Missing Heimdal, Kerberos, Samba and OpenLdap how-to

2007-08-03 Thread Turbo Fredriksson
> "Marcello" == Marcello De Geronimo <[EMAIL PROTECTED]> writes:

Marcello> Hi, i'm looking for this how-to, often referenced but no
Marcello> more available:

Marcello> 
https://sec.miljovern.no/bin/view/Info/HeimdalKerberosSambaAndOpenLdap

Marcello> Is there anywhere an how-to about integrating Heimdal,
Marcello> Kerberos, Samba and OpenLdap?

Well, I got 'MIT Kerberos V' and OpenLDAP if that helps.

http://bayour.com/LDAPv3-HOWTO.html



-- 
Why can't programmers tell the difference between
halloween and christmas day? Because 25 DEC = 31 OCT.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] try to bind samba traffic to specific interface - without success

2007-08-03 Thread Jan

Hello,

tonight my home samba server attracted my attention because i had seen 
that the complete
traffic (copy user->server / server->user)  goes via eth0 and not how 
specified in smb.con

via the eth2 interface.

i tried to bind it like this:

   *interfaces = lo eth2


   *

in smb.conf ... any idea?


best regards
Jan
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Missing Heimdal, Kerberos, Samba and OpenLdap how-to

2007-08-03 Thread Marcello De Geronimo

Hi,
i'm looking for this how-to, often referenced but no more available:

https://sec.miljovern.no/bin/view/Info/HeimdalKerberosSambaAndOpenLdap

Is there anywhere an how-to about integrating Heimdal, Kerberos, Samba 
and OpenLdap?


Thank you in advance
Marcello
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] full_audit on Samba 3.0.20 vs 3.0.25

2007-08-03 Thread Ryan Steele
Hi List,

Just a quick question for you: Does Samba 3.0.20 support the full_audit
module? I've got the module operating on two boxes, one with Samba
3.0.25 and the other with 3.0.20, and only the former seems to interpret
VFS directives, such as:

full_audit:prefix = %u
full_audit:failure = none
full_audit:success = open write close

On the 3.0.20 box, they seem to be ignored, which causes the logs to
fill up very quickly.  I appreciate any light that can be shed on this
situation.  Thanks in advance!

Ryan

-- 
Ryan Steele
Systems Administrator
Greater Philadelphia Area

GPG Signature:http://www.agora-net.com/~steele/signature.asc

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] and yet another one

2007-08-03 Thread joop gerritse
And then, all of a sudden, i could access my home directory on the additional 
server, but no other shares! That means, I could click on my home directory, 
and see its contents, but I could not see any other shares.

But note: I was logged in on the primary server, not on this one!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] yet another (perceived) inconsistency

2007-08-03 Thread joop gerritse
Just to continue: it is also possible that you can see a server, then you 
click on it, and you see its shares (note that I still do not know why it 
sometimes succeeds, and sometimes not...), and then I want to attach a drive 
letter to a share which I see...
It doesn't work, neither in the GUI, nor in the CLi with NET USE. I forgot the 
exact message, it was in Dutch, but anyway it was quite MS-like, something 
informative like "impossible to assign"
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] maybe I should explain what i am after!

2007-08-03 Thread joop gerritse
I have sent a few messages already, but perhaps I should start from the other 
side, and give a clear indication of what I want to achieve. Well, here 
goes...

I am working for a volunteer organization. They have quite a few Windows 
workstations, most W98, and a few XPs (and, currently, one Vista). There is 
one Linux server, running Samba, and holding all shares. It also acts as the 
PDC, and all users can log in to it.

Now this server begins to be somewhat flaky, and I should like to add a second 
server, initially to act as a BDC, then to take over the operation so I can 
take down the current server and find out what' s wrong with it. Copying the 
data is no problem (it is some 300G, so it took some time), but then?

I started just copying the smb.conf from the primary controller, and setting 
the priority somewhat lower. I assumed that it would just lose the election 
from the PDC, and still stay present, and available.

I am aware of the difficulties of keeping the user directories in sync; this 
would, in due course, require LDAP, but for the moment I decided that the 
user population is quite stable, so I just copy /etc/passwd and /etc/shadow 
and smbpasswd over in the --rare-- event that a user is added or removed.

1. It is quite hard to even make the second controller visible. In fact, I had 
to include a remote announce = / line 
before it even showed up in Network Environment. And I am quite unsure 
whether this is the right way, it just worked, to some extent.

2. I am not sure whether the backup domain controller will function as such. 
How could I be? If I take down the primary I might find out, but the server 
is too critical for the whole organization to just try. How can I make sure 
that a BDC will work without taking down the PDC?

3. And then there is the irregular behavior which I mentioned before. 
Sometimes the host is visible, but the shares are inaccessible; sometimes I 
can even get a view of the shares, but I cannot access them. In addition, i 
have a far simpler configuration at home, where I can just read and write to 
the shares. So I know it can be done, but what are the rules?

And I am no Windows expert. I know quite a lot about Linux, but the apparent 
(lack of) logic in Windows baffles me.

That is the background. Maybe it helps to get the right answers. thanks in 
advance for any attempts.

BTW I am quite happy with an RTFM answer, as long as it's accompanied with a 
URL. I have read quite a few FMs, but so far without real enlightenment...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] my next question: no accesss

2007-08-03 Thread joop gerritse
Even if I can find back a share, (which I sometimes can, for no clear reason) 
then the next message I get is "no access". I suspect this may be a Linux 
config thing, but I am still unable to figure what ownership rights I should 
give to the shares: root:root or someuser:users or samba:samba (this 
user:group does not exist as yet). What is meant by no access: is it a 
Windows or a Unix message (well, I suspect that this question is not unusual 
in a mixed environment).
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] NT_STATUS_NO_SUCH_GROUP when attempting to connect

2007-08-03 Thread Jason M. Kusar

Hi,

I'm attempting to get my server set up to share out files using Active 
Directory authentication.  I also have winbind set up for shell logins 
to the server.  That part works fine, but when I attempt to connect to a 
samba share with smbclient, I get rejected with "session setup failed: 
NT_STATUS_LOGON_FAILURE".


I did some searching and found others with similar issues, and I "think" 
it may have something to do with the net groupmap stuff, but I can't 
figure out what the correct thing to do is.  I tried mapping 
BUILTIN\Users to the local users group since that pops up in the log 
files, but the message is still there.


I'm using samba 3.0.25b (x86_64) on Centos 5.  Any help would be greatly 
appreciated.


Thanks!
--Jason

Here's my current config:

[global]
workgroup = SOTS
netbios name = media
server string = Media Server
log file = /var/log/samba/%m.log
log level = 5
max log size = 50
security = ADS
realm = SWORDOFTHESPIRIT.ORG
encrypt passwords = yes
server signing = yes
smb passwd file = /etc/samba/smbpasswd
allow trusted domains = no
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* 
%n\n*passwd:*all*authentication*tokens*updated*successfully*

pam password change = yes
obey pam restrictions = yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = no
idmap uid = 1-100
idmap gid = 1-100
idmap backend = rid:SOTS=1-100
winbind use default domain = yes
winbind separator = +
winbind enum users = yes
winbind enum groups = yes
template shell = /bin/bash
template homedir = /home/SOTS/%U

[audio]
   comment = Audio Files
   valid users = @"SOTS+Domain Users"
   path = /tank/media/teachings/Audio
   write list = SOTS+sound,SOTS+jmiller,@"SOTS+Domain 
Admins",@"SOTS+Associate Admins"

   force user = data
   force group = users

And here is the log file:

[2007/08/03 12:55:07, 5] auth/auth_util.c:make_user_info_map(161)
 make_user_info_map: Mapping user [SOTS]\[jmiller] from workstation [MEDIA]
[2007/08/03 12:55:07, 5] auth/auth_util.c:make_user_info(75)
 attempting to make a user_info for jmiller (jmiller)
[2007/08/03 12:55:07, 5] auth/auth_util.c:make_user_info(85)
 making strings for jmiller's user_info struct
[2007/08/03 12:55:07, 5] auth/auth_util.c:make_user_info(117)
 making blobs for jmiller's user_info struct
[2007/08/03 12:55:07, 3] auth/auth.c:check_ntlm_password(221)
 check_ntlm_password:  Checking password for unmapped user 
[EMAIL PROTECTED] with the new password interface

[2007/08/03 12:55:07, 3] auth/auth.c:check_ntlm_password(224)
 check_ntlm_password:  mapped user is: [EMAIL PROTECTED]
[2007/08/03 12:55:07, 5] lib/util.c:dump_data(2261)
 [000] 14 FC C4 FD 91 F5 B9 5D   ...]
[2007/08/03 12:55:07, 3] smbd/sec_ctx.c:push_sec_ctx(208)
 push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2007/08/03 12:55:07, 3] smbd/uid.c:push_conn_ctx(358)
 push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2007/08/03 12:55:07, 3] smbd/sec_ctx.c:set_sec_ctx(241)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2007/08/03 12:55:07, 5] auth/auth_util.c:debug_nt_user_token(448)
 NT user token: (NULL)
[2007/08/03 12:55:07, 5] auth/auth_util.c:debug_unix_user_token(474)
 UNIX token of user 0
 Primary group is 0 and contains 0 supplementary groups
[2007/08/03 12:55:07, 3] smbd/sec_ctx.c:pop_sec_ctx(356)
 pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
  ptr_user_info : 001440a0
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
 0004 low : fc62151e
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
 0008 high: 01c7d5e6
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
 000c low : 
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
 0010 high: 7fff
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
 0014 low : 
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
 0018 high: 7fff
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
 001c low : dda707a0
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
 0020 high: 01c47501
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
 0024 low : dda707a0
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
 0028 high: 01c47501
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
 002c low : 
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
 0030 high: 7fff
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint16(681)
 0034 uni_str_len: 000e
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint16(681)
 0036 uni_max_len: 0010
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
 0038 buffer 

[Samba] Default User in netlogon share won't work

2007-08-03 Thread Server Gremlin

Hi Samba List Users,

   I have a "Default User" folder directly in the [netlogon] share, and 
for some reason new users who don't already have a profile (such as when 
they logon for the first time) refuse to download it and use it as their 
baseline profile.  Instead, they fall back on the "Default User" folder 
on the local machine, or they just can't log on and receive an error 
message if the "Default User" folder doesn't exist on the local machine.


   If I login as root, he DOES download and use the profile, even 
though he receives a Windows error message right after giving his 
credentials that says something about "DETAIL - Access is denied."  This 
has lead me to believe that the problem is permissions based, but I have 
done everything I can think of.  I've done a "chmod -R 777" on the 
entire netlogon share, which naturally includes the "Default User" 
folder.  I've also used the parameter "guest ok = yes" in the [netlogon] 
share config in smb.conf and even set "writable = yes" just for 
giggles.  When I created the profile on my XP machine, I remembered to 
pick my domain name and allow "Everyone" to use the profile.


   I've read every bit of documentation I can find on this subject, and 
I feel like I have a solid understanding of how I'm supposed to set it 
up and how it's supposed to work.  Somehow it just...  won't.  Any 
suggestions?


Thanks everyone,
- SG
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] inconsistency?

2007-08-03 Thread Carlos Rivera-Jones

I get similar errors when I have dummy shares (ie shares in smb.conf that point 
to non-existent directories), check that too.

However if using as PDC, the most common situation is when the samba server is 
not in the DNS/WINS for given machine. 

If it is standalone, then make sure there is no AD server in the same 
workgroup: it can kick out the samba server as not trusted for the 
domain/workgroup. You can join it into the AD as member server to fix this, and 
if the AD server is also dns server, it will take care of that too.

All said and done, read the docs. It seems like you are missing a part of the 
network planning.

Carlos

-Original Message-
From: [EMAIL PROTECTED] on behalf of John Drescher
Sent: Fri 8/3/2007 12:49 PM
To: joop gerritse
Cc: samba@lists.samba.org
Subject: Re: [Samba] inconsistency?
 
On 8/3/07, joop gerritse <[EMAIL PROTECTED]> wrote:
> I am less than familiar with Microsoft, so I guess it might be an FAQ...
>
> if I click on "network neighborhood" which reveals a Samba server, it shows a
> list of all shares. If I click on a share, I get a message "cannot find share
> name". Somehow this does not sound logical to me... what is wrong?
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>
This is not normal with samba. Perhaps something is wrong with either
your permissions on the share or your network browsing (WINS, DNS or
lmhosts).

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: PDC: Windows xp sp2 reboots when login onto domain

2007-08-03 Thread C.Scheeder

Hi,
if i recall it correct, there was someone a few month?/years? ago (don't know 
how long exactly),
having a similar problem with a rebooting client on logon.
I think it turned out to be a problem of the windows-machine, some very crude 
combination
of bugs.
Search the mailinglist-archives for it, perhaps you'll find the solution there.
Good Luck
Christoph

Jose Manuel D. Mendinueta schrieb:

I am completely desperate.

I purged the packages, and installed las Etch version, and the same thing: 
when the user name and pass is introduced on any Windows machine, it suddenly 
reboots.


There were some messages in the Event Log, relating to msgina.dll crahs. I 
have tried with MS Knowledge base, but is useless.


Finally, I installed the pdc on a laptop with Debian Sid, samba 3.0.25a, and 
the same thing...


After googling to find out information, I don not understand how this happens 
only to me.


Solution: create local accounts, and map the network drives data and homes, so 
users can access their shares, but not roaming profile.


Cheers,

Jose Manuel Delgado Mendinueta

El Monday 30 July 2007 04:39:45 Michael Lueck escribió:

Jose Manuel D. Mendinueta wrote:

Dear all,

I have installed Debian Etch (Samba 3.0.24) in PDC role, with 2 Windows
XP SP2 clients. When I try to join the domain in any of the clients, the
machine suddenly reboots (both).

Bazaar indeed!

Debian Etch gave me much grief a few months back, so "at the last minute" I
reloaded the demo server with Ununtu Server 7.04 and THANKFULLY Samba
behaved much better on that.

I had been using Debian Sarge since before Sarge went stable.

Upon returning from the presentation, the Debian Etch version released to
Stable was 3.0.24-6etch4_i386 and those packages worked fine. Previously I
had been fighting with -6etch1 and -6etch2 versions without success. As I
reloaded the demo server, of course success finally was on "another load".
(shrug) Maybe if you ever had -6etch1 and/or -6etch2 versions on the server
in question, you best *PURGE* them and install -6etch4 (at least, I do not
know if newer is now available) versions.

--
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] inconsistency?

2007-08-03 Thread John Drescher
>
> You did not answer either of my questions on trying to track that down.
> What you describe is not normal or expected samba behavior.


I am sorry, I guess I did not  ask you any specific questions on that.

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Cannot connect to shares (groupmap problem?)

2007-08-03 Thread Jason M. Kusar

Hi,

First off, I apologize if this email goes through twice.  I sent it 
about an hour ago, but it appears to have never made it to the list, so 
I'm sending again.


I'm attempting to get my server set up to share out files using Active 
Directory authentication.  I also have winbind set up for shell logins 
to the server.  That part works fine, but when I attempt to connect to a 
samba share with smbclient, I get rejected with "session setup failed: 
NT_STATUS_LOGON_FAILURE".


I did some searching and found others with similar issues, and I "think" 
it may have something to do with the net groupmap stuff, but I can't 
figure out what the correct thing to do is.  I tried mapping 
BUILTIN\Users to the local users group since that pops up in the log 
files, but the message is still there.


I'm using samba 3.0.25b (x86_64) on Centos 5.  Any help would be greatly 
appreciated.


Thanks!
--Jason

Here's my current config:

[global]
workgroup = SOTS
netbios name = media
server string = Media Server
log file = /var/log/samba/%m.log
log level = 5
max log size = 50
security = ADS
realm = SWORDOFTHESPIRIT.ORG
encrypt passwords = yes
server signing = yes
smb passwd file = /etc/samba/smbpasswd
allow trusted domains = no
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* 
%n\n*passwd:*all*authentication*tokens*updated*successfully*

pam password change = yes
obey pam restrictions = yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = no
idmap uid = 1-100
idmap gid = 1-100
idmap backend = rid:SOTS=1-100
winbind use default domain = yes
winbind separator = +
winbind enum users = yes
winbind enum groups = yes
template shell = /bin/bash
template homedir = /home/SOTS/%U

[audio]
  comment = Audio Files
  valid users = @"SOTS+Domain Users"
  path = /tank/media/teachings/Audio
  write list = SOTS+sound,SOTS+jmiller,@"SOTS+Domain 
Admins",@"SOTS+Associate Admins"

  force user = data
  force group = users

And here is the log file:

[2007/08/03 12:55:07, 5] auth/auth_util.c:make_user_info_map(161)
make_user_info_map: Mapping user [SOTS]\[jmiller] from workstation [MEDIA]
[2007/08/03 12:55:07, 5] auth/auth_util.c:make_user_info(75)
attempting to make a user_info for jmiller (jmiller)
[2007/08/03 12:55:07, 5] auth/auth_util.c:make_user_info(85)
making strings for jmiller's user_info struct
[2007/08/03 12:55:07, 5] auth/auth_util.c:make_user_info(117)
making blobs for jmiller's user_info struct
[2007/08/03 12:55:07, 3] auth/auth.c:check_ntlm_password(221)
check_ntlm_password:  Checking password for unmapped user 
[EMAIL PROTECTED] with the new password interface

[2007/08/03 12:55:07, 3] auth/auth.c:check_ntlm_password(224)
check_ntlm_password:  mapped user is: [EMAIL PROTECTED]
[2007/08/03 12:55:07, 5] lib/util.c:dump_data(2261)
[000] 14 FC C4 FD 91 F5 B9 5D   ...]
[2007/08/03 12:55:07, 3] smbd/sec_ctx.c:push_sec_ctx(208)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2007/08/03 12:55:07, 3] smbd/uid.c:push_conn_ctx(358)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2007/08/03 12:55:07, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2007/08/03 12:55:07, 5] auth/auth_util.c:debug_nt_user_token(448)
NT user token: (NULL)
[2007/08/03 12:55:07, 5] auth/auth_util.c:debug_unix_user_token(474)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2007/08/03 12:55:07, 3] smbd/sec_ctx.c:pop_sec_ctx(356)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
 ptr_user_info : 001440a0
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
0004 low : fc62151e
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
0008 high: 01c7d5e6
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
000c low : 
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
0010 high: 7fff
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
0014 low : 
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
0018 high: 7fff
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
001c low : dda707a0
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
0020 high: 01c47501
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
0024 low : dda707a0
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
0028 high: 01c47501
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
002c low : 
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint32(710)
0030 high: 7fff
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint16(681)
0034 uni_str_len: 000e
[2007/08/03 12:55:07, 5] rpc_parse/parse_prs.c:prs_uint16(681)

Re: [Samba] inconsistency?

2007-08-03 Thread John Drescher
> 1. How do I get regular access to the list? I have subscribed, but I
cannot
> find a menu entry to access it, only to subscribe again...
>
Menu entry? I have no idea what you are talking about. I just email to
samba@lists.samba.org and my email gets to the list. If you reply to a
message you received from some one in the list just make sure you email to
the list as well and do not change the subject and ask a completely
different question as this will mess up email the threading.

> 2. How do I find out what is behind the --apparently-- inconsistent
behaviour
> of Samba together with Windows?
>
You did not answer either of my questions on trying to track that down. What
you describe is not normal or expected samba behavior.
John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] inconsistency?

2007-08-03 Thread mikee
On Fri, 03 Aug 2007, John Drescher might have said:

> On 8/3/07, joop gerritse <[EMAIL PROTECTED]> wrote:
> > I am less than familiar with Microsoft, so I guess it might be an FAQ...
> >
> > if I click on "network neighborhood" which reveals a Samba server, it shows 
> > a
> > list of all shares. If I click on a share, I get a message "cannot find 
> > share
> > name". Somehow this does not sound logical to me... what is wrong?
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/listinfo/samba
> >
> This is not normal with samba. Perhaps something is wrong with either
> your permissions on the share or your network browsing (WINS, DNS or
> lmhosts).
> 
> John

Today I have a user that gets a 'Permission Denied' when trying to reach
her home directory (\\$host\$user). At the DOS command line I did a
'net use h:\ /d' then a 'net use h: \\$host\$user' and the user now has
full access. I did have the user logoff proir to the 'net' commands to see
if things would reset.

Mike
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] inconsistency?

2007-08-03 Thread John Drescher
On 8/3/07, joop gerritse <[EMAIL PROTECTED]> wrote:
> I am less than familiar with Microsoft, so I guess it might be an FAQ...
>
> if I click on "network neighborhood" which reveals a Samba server, it shows a
> list of all shares. If I click on a share, I get a message "cannot find share
> name". Somehow this does not sound logical to me... what is wrong?
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>
This is not normal with samba. Perhaps something is wrong with either
your permissions on the share or your network browsing (WINS, DNS or
lmhosts).

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] inconsistency?

2007-08-03 Thread joop gerritse
I am less than familiar with Microsoft, so I guess it might be an FAQ...

if I click on "network neighborhood" which reveals a Samba server, it shows a 
list of all shares. If I click on a share, I get a message "cannot find share 
name". Somehow this does not sound logical to me... what is wrong?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Printer publishing

2007-08-03 Thread Guido Lorenzutti
If someone tells you to restart samba or the system im going to cry.

  printcap cache time (G)
 This option specifies the number of seconds before the
printing subsystem is again asked for the known printers. If the value
is greater than 60 the initial waiting
 time is set to 60 seconds to allow an earlier first rescan
of the printing subsystem.

 Setting this parameter to 0 disables any rescanning for new
or removed printers after the initial startup.

 Default: printcap cache time = 750

 Example: printcap cache time = 600


Bye.


Stephane ARMANET wrote:
> Martin Zielinski a écrit :
>> Hello,
>>
>> Please make sure, you have
>>
>> printing = cups
>> printcap name = cups
>>
>> also in your smb.conf.
>>
>> When you have added a printer with cups, you could either restart
>> your samba processes (/etc/init.d/samba restart - or something like
>> that) or send them a signal to re-read the configuration.
>>
>> killall -1 smbd
>>
>> should do that.
>>
>> Bye,
>>
>> Martin
>>
>>
>>>
>>
> Well I make a /etc/init.d/samba reload  wich only restart the smbd
> deamon  with the HUP signal and it doesn't change anything.
>
> In my smb.conf i've got:
>
> printing = cups
> printcap name = cups
>
>
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problems with oplocks (samba 3.0.24, Kernel 2.6.17) now solved!

2007-08-03 Thread samba news
Hi list!

kernel oplocks = no did the trick!

Thanx alot!

Regards,

Oliver

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: PDC: Windows xp sp2 reboots when login onto domain

2007-08-03 Thread Jose Manuel D. Mendinueta
I am completely desperate.

I purged the packages, and installed las Etch version, and the same thing: 
when the user name and pass is introduced on any Windows machine, it suddenly 
reboots.

There were some messages in the Event Log, relating to msgina.dll crahs. I 
have tried with MS Knowledge base, but is useless.

Finally, I installed the pdc on a laptop with Debian Sid, samba 3.0.25a, and 
the same thing...

After googling to find out information, I don not understand how this happens 
only to me.

Solution: create local accounts, and map the network drives data and homes, so 
users can access their shares, but not roaming profile.

Cheers,

Jose Manuel Delgado Mendinueta

El Monday 30 July 2007 04:39:45 Michael Lueck escribió:
> Jose Manuel D. Mendinueta wrote:
> > Dear all,
> >
> > I have installed Debian Etch (Samba 3.0.24) in PDC role, with 2 Windows
> > XP SP2 clients. When I try to join the domain in any of the clients, the
> > machine suddenly reboots (both).
>
> Bazaar indeed!
>
> Debian Etch gave me much grief a few months back, so "at the last minute" I
> reloaded the demo server with Ununtu Server 7.04 and THANKFULLY Samba
> behaved much better on that.
>
> I had been using Debian Sarge since before Sarge went stable.
>
> Upon returning from the presentation, the Debian Etch version released to
> Stable was 3.0.24-6etch4_i386 and those packages worked fine. Previously I
> had been fighting with -6etch1 and -6etch2 versions without success. As I
> reloaded the demo server, of course success finally was on "another load".
> (shrug) Maybe if you ever had -6etch1 and/or -6etch2 versions on the server
> in question, you best *PURGE* them and install -6etch4 (at least, I do not
> know if newer is now available) versions.
>
> --
> Michael Lueck
> Lueck Data Systems
> http://www.lueckdatasystems.com/




signature.asc
Description: This is a digitally signed message part.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba