Re: [Samba] Samba Configuration
Ankit Sahai wrote: Hello, How to configure samba on debian m/c having kernel 2.6.22 as I want to share a folder on my PC with other linux and windows machines on my network. Also tell the packages need to be installed. man apt-cache - documentation for apt-get (how to search package names, try something like samba) http://www.samba.org/samba/docs/man/Samba-Guide/ - documentation for basic configuration of samba. -- Eero -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba Configuration
Hello, How to configure samba on debian m/c having kernel 2.6.22 as I want to share a folder on my PC with other linux and windows machines on my network. Also tell the packages need to be installed. -- Thanks & Regards Ankit Sahai -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] NT_STATUS_PIPE_DISCONNECTED error
Running 3.2.15 on RHEL 5.4 64-bit. Joined the domain with no issues, able to look up id's with no problem. Windows clients within the domain are able to use defined shares. However, when trying to look up trusted domains, or when trying to access shares from clients not in the domain (for example, using smbclient), the following errors show up: rpc_api_pipe: Remote machine pipe \NETLOGON fnum 0x8 returned critical error. Error was NT_STATUS_PIPE_DISCONNECTED winbindd_dual_list_trusted_domains: trusted_domains returned NT_STATUS_PIPE_DISCONNECTED rpc_api_pipe: Remote machine pipe \NETLOGON fnum 0x8 returned critical error. Error was NT_STATUS_PIPE_DISCONNECTED NTLM CRAP authentication for user [DOMAIN]\[username] returned NT_STATUS_PIPE_DISCONNECTED (PAM: 4) I'm at a loss here. Googling didn't help, neither did the #samba channel on freenode. Looking for help from the community at large. Thank you! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] smbpasswd: where's the file of password?
Hi all :-) I compiled samba on my debian stable (all bin are in /usr/local/samba/bin/), smbpasswd too. I use it but I don't see the smbpasswd password file. Where smbpasswd update own file of passwords? thanks Pol -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] problem, and resolution, with 3.4.3 and active directory
A little bit of Q & A, for anyone else who may run into this mess. I had a previously working 3.2.4 install, and was looking to upgrade to 3.4.3, in a new location. My machine is configured to be a member of an Active Directory domain, and be a basic file sharing server. I had copied over and adjusted smb.conf, and secrets.tdb But it just wasnt working. smbd was dying, with no useful error. Trying to start it with smbd -F or smbd -d 1 was no help. It died with a plain, "Abort" Trying "net ads testjoin" was working with the old binaries, but failing for the "new" ones. The resolution, was to fix my kerberos libs. Turned out that the "old" version of samba, was compiled against newer kerb libs. Whereas the "new" binaries, had gotten compiled with kerb 5-1.4.3. This apparently makes those things crash badly. I installed a fresh set of kerb 5-1.7 libs, recompiled, and things are happy now :-) BTW: a debug output of "net ads testjoin" in the bad crashing situation, looks like this: [2009/11/16 18:44:59, 3] libsmb/clikrb5.c:687(ads_krb5_mk_req) ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found) [2009/11/16 18:44:59, 10] libads/sasl.c:809(ads_sasl_spnego_bind) ads_sasl_spnego_krb5_bind failed with: No credentials cache found, calling kinit [2009/11/16 18:44:59, 10] libads/kerberos.c:184(kerberos_kinit_password_ext) kerberos_kinit_password: as hamac...@xxx.usc.edu using [MEMORY:net_ads] as ccache and config [/var/local/var/locks/smb_krb5/krb5.conf.XXX (Segfault) -- Binary packages for Solaris, via pkg-get, at http://www.opencsw.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba trusts, mapping issue, and pam crap domain
I am running Samba ver 3.0.37 on Solaris 10 (sparc) as a PDC with LDAP for the backend for both samba and unix accounts. Assume the samba SMBPDC is called "PDC." I have also set up a trust with an Windows domain- lets call it WINDOMAIN- (the PDC for the Windows domain is Win 2003 but is in mixed mode for backwards compat.) The SAMBA domain trusts the WINDOWS domain, not not vice versa. Assume the Windows PDC is called "WINPDC." I have winbind enabled. Idmap entries are stored in the backend. On the Windows domain, I have a login script which maps R: to \\PDC\dept\common. The "dept" share does not explicitly set or deny any users. The "common" directory has unix perms of "rwxrwxr-t." On the SMBPDC smbpdc# getent passwd | grep linus WINDOMAIN\linus:*:30197:30037:Linus Van Pelt:/home/ WINDOMAIN /linus:/bin/false smbpdc# smbpdc -3.00# id " WINDOMAIN \linus" uid=30197(ADMINISTRATION\linus) gid=30037(WINDOMAIN \domain users) bash-3.00# id linus id: invalid user name: "linus" smbpdc -3.00# Smb.conf includes - ntlm auth = Yes passdb backend = ldapsam:ldap://ldap1.mydomain.com ldap suffix=o=mydomain.com ldap user suffix=ou=people ldap group suffix=ou=smb_groups ldap machine suffix=ou=machines ldap admin dn="cn=Directory Manager" ldap ssl = no ldap passwd sync = no ldap idmap suffix=ou=idmap winbind enum users = Yes winbind enum groups = no winbind use default domain = no winbind trusted domains only = no #ldap time out default is 15 sec ldap timeout=30 # idmap domains = WINDOMAIN, TESTDOMAIN idmap domains = WINDOMAIN idmap config WINDOMAIN:backend = ldap idmap config WINDOMAIN:readonly = no idmap config WINDOMAIN:default=no idmap config WINDOMAIN:ldap_base_dn = ou=windomain,ou=idmap,o=mydomain.com idmap config WINDOMAIN:ldap_user_dn = cn=Directory Manager idmap config WINDOMAIN:ldap_url =ldap1.mydomain.com idmap config WINDOMAIN:range = 3-3 #idmap config TESTDOMAIN:backend = ldap #idmap config TESTDOMAIN:readonly = no #idmap config TESTDOMAIN:default=no #idmap config TESTDOMAIN:ldap_base_dn =ou=testdomain,ou=idmap,o=mydomain.com #idmap config TESTDOMAIN:ldap_user_dn = cn=Directory Manager #idmap config TESTDOMAIN:ldap_url =ldap1.mydomain.com #idmap config TESTDOMAIN:range = 4-4 idmap alloc backend = ldap idmap alloc config:ldap_base_dn = ou=alloc,ou=idmap,o=mydomain.com idmap alloc config:ldap_user_dn = cn=Directory Manager idmap alloc config:ldap_url = ldap1.mydomain.com idmap alloc config:range = 7 - 7 [dept] path = /zexport/Dept read only = No create mask = 0770 force create mode = 0600 directory mask = 0775 force directory mode = 0600 inherit permissions = Yes inherit acls = Yes hide special files = Yes vfs objects = zfsacl zfsacl:acesort = dontcare nfs4:mode = special nfs4:chown = yes nfs4:acedup = merge I have a test user "linus" on the WINDOMAIN domain. If I log into a WINDOMAIN account on WINPDC, I am prompted for credentials on the SAMBA/SMBPDC share and am denied. This used to work (sort of) - I recently added the Solaris patch to update from 3.0.35 to 3.0.37. The /var/log/samba/WINPDC.log file shows ... check_ntlm_password: Checking password for unmapped user [windomain]\[lin...@[winpdc] with the new password interface [2009/11/17 11:54:25, 3] auth/auth.c:(224) check_ntlm_password: mapped user is: [windomain]\[lin...@[ WINPDC] [2009/11/17 11:54:25, 3] smbd/sec_ctx.c:(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2009/11/17 11:54:25, 3] smbd/uid.c:(408) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2009/11/17 11:54:25, 3] smbd/sec_ctx.c:(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2009/11/17 11:54:25, 3] smbd/sec_ctx.c:(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2009/11/17 11:54:25, 2] auth/auth.c:(319) check_ntlm_password: Authentication for user [linus] -> [linus] FAILED with error NT_STATUS_NO_SUCH_USER [2009/11/17 11:54:25, 3] smbd/error.c:(106) error packet at smbd/sesssetup.c(107) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2009/11/17 11:54:35, 3] smbd/process.c:(1083) ... The /var/samba/log/log.wb-WINDOMAIN shows ... [2009/11/17 08:14:48, 3] nsswitch/winbindd_pam.c:(1755) [13932]: pam auth crap domain: WINDOMAIN user: lucy ... [13932]: pam auth crap domain: WINDOMAIN user: charlie [2009/11/17 10:59:54, 3] nsswitch/winbindd_pam.c:(1755) [13932]: pam auth crap domain: WINDOMAIN user: Administrator [2009/11/17 10:59:54, 3] nsswitch/winbindd_async.c:(754) [13932]: lookupsid S-1-5-21- [2009/11/17 10:59:54, 3] nsswitch/winbindd_ads.c:(1062) ads: fetch sequence_number for WINDOMAIN [2009/11/17 10:59:54, 3] libsmb/namequery.c:(1557) get_dc_list: preferred server list: ", *" [2009/11/17 10:59:54, 3] libads/ldap.c:(443) Connected to LDAP server 192.168.0.71 [2009/11/17 10:59:54, 3] libsmb/na
[Samba] Broken pipe in Samba logs when using Samba with Windows 7 x64?
Hello, After upgrading a host from XP/32 to Windows 7/64, I see the following entries in the logs, what is the root cause of this issue? Nov 14 10:10:18 l1 smbd[6174]: getpeername failed. Error was Transport endpoint is not connected Nov 14 10:10:18 l1 smbd[6174]: write_data: write failure in writing to client 0.0.0.0. Error Broken pipe Nov 14 10:10:18 l1 smbd[6174]: [2009/11/14 10:10:18, 0] smbd/process.c:62(srv_send_smb) Nov 14 10:10:18 l1 smbd[6174]: Error writing 75 bytes to client. -1. (Transport endpoint is not connected) Nov 14 10:10:18 l1 smbd[6174]: [2009/11/14 10:10:18, 0] lib/util_sock.c:738(write_data) Nov 14 10:10:18 l1 smbd[6174]: [2009/11/14 10:10:18, 0] lib/util_sock.c:1491(get_peer_addr_internal) Nov 14 10:10:18 l1 smbd[6174]: getpeername failed. Error was Transport endpoint is not connected Nov 14 10:10:18 l1 smbd[6174]: write_data: write failure in writing to client 0.0.0.0. Error Broken pipe Nov 14 10:10:18 l1 smbd[6174]: [2009/11/14 10:10:18, 0] smbd/process.c:62(srv_send_smb) Nov 14 10:10:18 l1 smbd[6174]: Error writing 75 bytes to client. -1. (Transport endpoint is not connected) Nov 14 10:10:18 l1 smbd[6174]: [2009/11/14 10:10:18, 0] lib/util_sock.c:738(write_data) Nov 14 10:10:18 l1 smbd[6174]: [2009/11/14 10:10:18, 0] lib/util_sock.c:1491(get_peer_addr_internal) Nov 17 13:26:23 l1 smbd[19701]: [2009/11/17 13:26:23, 0] lib/util_sock.c:539(read_fd_with_timeout) Nov 17 13:26:23 l1 smbd[19701]: [2009/11/17 13:26:23, 0] lib/util_sock.c:1491(get_peer_addr_internal) Nov 17 13:26:23 l1 smbd[19701]: getpeername failed. Error was Transport endpoint is not connected Nov 17 13:26:23 l1 smbd[19701]: read_fd_with_timeout: client 0.0.0.0 read error = Connection reset by peer. Justin. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] samba 3.4.2-1: ERROR! Out of file structures
Hello, When performing a lot of file I/O on a samba share, I see the following: Nov 15 16:01:47 l1 smbd[31472]: ERROR! Out of file structures Nov 15 16:01:49 l1 smbd[31472]: [2009/11/15 16:01:49, 0] smbd/files.c:61(file_new) Nov 15 16:01:49 l1 smbd[31472]: ERROR! Out of file structures Nov 15 16:01:49 l1 smbd[31472]: [2009/11/15 16:01:49, 0] smbd/files.c:61(file_new) Nov 15 16:01:49 l1 smbd[31472]: ERROR! Out of file structures Nov 15 16:01:49 l1 smbd[31472]: [2009/11/15 16:01:49, 0] smbd/files.c:61(file_new) Nov 15 16:01:49 l1 smbd[31472]: ERROR! Out of file structures Nov 15 16:01:49 l1 smbd[31472]: [2009/11/15 16:01:49, 0] smbd/files.c:61(file_new) Nov 15 16:01:49 l1 smbd[31472]: ERROR! Out of file structures Nov 15 16:01:49 l1 smbd[31472]: [2009/11/15 16:01:49, 0] smbd/files.c:61(file_new) Nov 15 16:01:49 l1 smbd[31472]: ERROR! Out of file structures Is the proper fix to, e.g.: ulimit -n 32768 before starting samba? Or is there a samba-specific option that should be used instead? Justin. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Problem to map uidNumber and getting authentication to work
Timo Aaltonen wrote:
On Mon, 21 Sep 2009, Timo Aaltonen wrote:
Hi!
I'm trying to set up a samba client to authenticate from AD
(Win2k8), by using rfc2307 schema mode to map uidNumber, gidNumber
and unixHomeDirectory. The latter two seem to work, while uidNumber
doesn't, at least according to 'wbinfo -i $uid', which shows the uid
as the default starting point '1'.
Another problem is that getent passwd/group doesn't work at all, and
because of that neither does authentication ('wbinfo -a/-K' works). I
_do_ have winbind on /etc/nsswitch.conf though, so I'm pretty much
out of ideas about what's missing..
my smb.conf:
[global]
workgroup = SHORTREALM
realm = REALM
security = ads
use kerberos keytab = true
idmap config SHORTREALM:schema_mode = rfc2307
idmap config SHORTREALM:backend = ad
idmap config SHORTREAlM:readonly = yes
winbind nss info = rfc2307
winbind use default domain = yes
I'm using Ubuntu 9.04 with samba 3.3.2, but I tried a backported
3.4.0 and it had the same problem.
Anyone? Apparently this works on RHEL5 with samba 3.0.x, so it's a
regression if it doesn't work with anything newer..
Have you tried to look up the users SID to UID mapping?
%> wbinfo -n USER
S-1-5-21-2868754479-89028146-2101856903-111873 User (1)
%> wbinfo -S S-1-5-21-2868754479-89028146-2101856903-111873
Could not convert sid S-1-5-21-2868754479-89028146-2101856903-111873 to uid
In the logs you would see things like this:
[2008/05/28 09:50:04, 10]
nsswitch/winbindd_cache.c:cache_retrieve_response(2300)
Retrieving response for pid 24973
[2008/05/28 09:50:04, 5]
nsswitch/winbindd_async.c:winbindd_sid2uid_recv(347)
sid2uid returned an error
Or in log.winbindd-idmap
[2008/05/28 09:50:51, 10] nsswitch/winbindd_dual.c:child_process_request(479)
process_request: request fn DUAL_SID2UID
[2008/05/28 09:50:51, 3] nsswitch/winbindd_async.c:winbindd_dual_sid2uid(374)
[24634]: sid to uid S-1-5-21-2868754479-89028146-2101856903-111473
[2008/05/28 09:50:51, 10] nsswitch/idmap_util.c:idmap_sid_to_uid(105)
idmap_sid_to_uid: sid = [S-1-5-21-2868754479-89028146-2101856903-111473]
[2008/05/28 09:50:51, 10] nsswitch/idmap_util.c:idmap_sid_to_uid(125)
sid [S-1-5-21-2868754479-89028146-2101856903-111473] not mapped to an uid
[2,1,2213796440]
If this is the case you would want to add the POSIX compliant attributes for
each user. Here is the process in case this is the problem
1. Create a ldiff for each user similar to the following:
dn: CN=User name,OU=container,DC=server,DC=com
changetype: modify
replace: msSFUName
msSFUName: user **(this must be something without spaces)
--
modify: unixHomeDirectory
unixHomeDirectory: /path/to/home
--
modify: msSFUHomeDirectory
msSFUHomeDirectory: /path/to/home
--
modify: uidNumber
uidNumber: 888
--
modify: gidNumber
gidNumber: 500
--
modify: loginShell
loginShell: /bin/bash
2. Create another ldiff to modify the DN schema object attribute like the
following:
dn: CN=User name,OU=container,DC=server,DC=comchangetype: modrdn
newrdn: CN=user **(this must also be something without spaces)
deleteoldrdn: 1
3. Then use the ldapmodify tool on the ldif files like so:
%> ldapmodify -x -D "CN=Administrator,CN=Users,DC=server,DC=com" -w "password"
-h server.com -p 389 -f filename.ldif
If you need a script to automatically process any account which gives an
error with the wbinfo commands let me know. It is perl and requires the
wbinfo, ldapsearch and ldapmodify tools.
--
Jas
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Editing Word documents in a share from windows and Linux
Eduardo Sotomayor wrote: I have a problem editing files in a samba share, this share is accessed from a Windows xp and a Linux client, when I open a Word Document from windows there is no problem, but when I try to edit the same file from the linux pc with writer, it opens a new file, not the file I want to edit, I have checked the file permissions from the linux client and all the fields are blank, but if I copy the file to the local drive I can edit it, this is a openSUSE 11.2 box. This is how I created the folder containing the files in the Linux server (openSUSE 11.2), this server is setup as a PDC using LDAP as backend Are you using samba files via cifs mount ? It requires some parameters to map rights correctly. -- Eero -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Editing Word documents in a share from windows and Linux
I have a problem editing files in a samba share, this share is accessed from a Windows xp and a Linux client, when I open a Word Document from windows there is no problem, but when I try to edit the same file from the linux pc with writer, it opens a new file, not the file I want to edit, I have checked the file permissions from the linux client and all the fields are blank, but if I copy the file to the local drive I can edit it, this is a openSUSE 11.2 box. This is how I created the folder containing the files in the Linux server (openSUSE 11.2), this server is setup as a PDC using LDAP as backend mkdir /datos chmod 2775 /datos This is the share in the smb.conf [archivos1] path = /home/easgs/archivos comment = datos varios guest ok = No inherit acls = Yes valid users = @ntusers write list = @ntusers force create mode = 0660 force directory mode = 0770 force group = ntusers _ Invite your mail contacts to join your friends list with Windows Live Spaces. It's easy! http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mkt=en-us -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] IP issues with my samba server
Put an entry in your hosts file. That's /etc/hosts Chris Baker -- cba...@intera.com systems administrator INTERA -- 512-425-2006 -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Gaiseric Vandal Sent: Tuesday, November 17, 2009 9:58 AM To: Subject: Re: [Samba] IP issues with my samba server On 11/17/09 08:05, Dominic Iadicicco wrote: > One of my samba Domain controlers is trying to reach two IP addresses > of > 192.168.221.1 and 192.168.91.1. The samba server is not even on a > 192.168 subnet. It is currnetly on a 172.16.12.x subnet. I have > never seen a problem like this before. Please someone point me in the right direction. > I discovered this problem by looking at my firewall logs, then I > looked in the /var/log/samba/nmbd.log and can see when it tried to > access these two ip's I just don't know where to look now. > > Thanks for any info. > > > -- > Do you have any VPN users? Do you have any other subnets that are in the 192.168.x.x range? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] IP issues with my samba server
On 11/17/09 08:05, Dominic Iadicicco wrote: One of my samba Domain controlers is trying to reach two IP addresses of 192.168.221.1 and 192.168.91.1. The samba server is not even on a 192.168 subnet. It is currnetly on a 172.16.12.x subnet. I have never seen a problem like this before. Please someone point me in the right direction. I discovered this problem by looking at my firewall logs, then I looked in the /var/log/samba/nmbd.log and can see when it tried to access these two ip's I just don't know where to look now. Thanks for any info. -- Do you have any VPN users? Do you have any other subnets that are in the 192.168.x.x range? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Problem to map uidNumber and getting authentication to work
On Mon, 21 Sep 2009, Timo Aaltonen wrote:
Hi!
I'm trying to set up a samba client to authenticate from AD (Win2k8), by
using rfc2307 schema mode to map uidNumber, gidNumber and unixHomeDirectory.
The latter two seem to work, while uidNumber doesn't, at least according to
'wbinfo -i $uid', which shows the uid as the default starting point '1'.
Another problem is that getent passwd/group doesn't work at all, and because
of that neither does authentication ('wbinfo -a/-K' works). I _do_ have
winbind on /etc/nsswitch.conf though, so I'm pretty much out of ideas about
what's missing..
my smb.conf:
[global]
workgroup = SHORTREALM
realm = REALM
security = ads
use kerberos keytab = true
idmap config SHORTREALM:schema_mode = rfc2307
idmap config SHORTREALM:backend = ad
idmap config SHORTREAlM:readonly = yes
winbind nss info = rfc2307
winbind use default domain = yes
I'm using Ubuntu 9.04 with samba 3.3.2, but I tried a backported 3.4.0 and it
had the same problem.
Anyone? Apparently this works on RHEL5 with samba 3.0.x, so it's a
regression if it doesn't work with anything newer..
--
Timo Aaltonen
Systems Specialist
IT Services, Helsinki University of Technology
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
[Samba] [Fwd: Re: Need help in samba configuration]
Original Message Subject:Re: [Samba] Need help in samba configuration Date: Tue, 17 Nov 2009 10:42:42 -0500 From: Brian Cowan To: pankaj.c.pim...@relianceada.com References: If your Samba server is a fully operational domain member server, then the behavior you are experiencing should not be occurring. Period. Take a close look at your samba server logs. My bet is that the domain join failed or stopped working. Even if you were using "security = server" (which isn't supported for ClearCase, but some people have a managed to get it working for a while) you shouldn't see this behavior since it is the Domain/server password that should be used. Small question: Why aren't you using "password server = *"? pankaj.c.pim...@relianceada.com wrote: We have ClearCase database on unix and users on windows. We are creating Unix users locally on that Clearcase server. Samba is also installed on that server. User windows machines are part of domain. Groups,usres are created on domain and same users,groups are created on unix server. Now problem is occuring when a windows user is changing the password for his domain login. as soon as user is changing the password user will be unable to access the samba share i.e clearcase vobs. So when user changes the domain login password we have to manully change samba password for that user by running smbpasswd . Could you please guide me on how to achieve or any configuration need to done on samba and on unix server so that I need not have to change password manully for every user when user changes his/her windows domian login password. My samba config fiel is as below # Samba config file created using SWAT # Global parameters [global] workgroup = RIC_F2K netbios name = DEVVM interfaces = devvm security = DOMAIN encrypt passwords = Yes password server = 10.8.54.120 username map = /usr/local/samba/private/username.map #username map = /usr/local/samba/lib/username.map log file = /var/opt/samba/logs/log.%m os level = 0 kernel oplocks = No create mask = 0775 directory mask = 0775 oplocks = No time offset = 30 # time offset = 630 # time server = yes #[smbshare] # comment = Share Folder of devvm Server # path = /var/smbshare The information contained in this e-mail message is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you should return it to the sender immediately. Please note that while we scan all e-mails for viruses we cannot guarantee that any e-mail is virus-free and accept no liability for any damage caused by any virus transmitted by this email. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Need help in samba configuration
We have ClearCase database on unix and users on windows. We are creating Unix users locally on that Clearcase server. Samba is also installed on that server. User windows machines are part of domain. Groups,usres are created on domain and same users,groups are created on unix server. Now problem is occuring when a windows user is changing the password for his domain login. as soon as user is changing the password user will be unable to access the samba share i.e clearcase vobs. So when user changes the domain login password we have to manully change samba password for that user by running smbpasswd . Could you please guide me on how to achieve or any configuration need to done on samba and on unix server so that I need not have to change password manully for every user when user changes his/her windows domian login password. My samba config fiel is as below # Samba config file created using SWAT # Global parameters [global] workgroup = RIC_F2K netbios name = DEVVM interfaces = devvm security = DOMAIN encrypt passwords = Yes password server = 10.8.54.120 username map = /usr/local/samba/private/username.map #username map = /usr/local/samba/lib/username.map log file = /var/opt/samba/logs/log.%m os level = 0 kernel oplocks = No create mask = 0775 directory mask = 0775 oplocks = No time offset = 30 # time offset = 630 # time server = yes #[smbshare] # comment = Share Folder of devvm Server # path = /var/smbshare The information contained in this e-mail message is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you should return it to the sender immediately. Please note that while we scan all e-mails for viruses we cannot guarantee that any e-mail is virus-free and accept no liability for any damage caused by any virus transmitted by this email. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.4.3: Acces problem with EA attributes
On Tue, Nov 17, 2009 at 01:42:23PM +0100, Arendt, Volker wrote: > where shall i upload the debug log? I do not have an > account on bugzilla. Do i need to create one? Probably you need to create one. Volker signature.asc Description: Digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] IP issues with my samba server
One of my samba Domain controlers is trying to reach two IP addresses of 192.168.221.1 and 192.168.91.1. The samba server is not even on a 192.168 subnet. It is currnetly on a 172.16.12.x subnet. I have never seen a problem like this before. Please someone point me in the right direction. I discovered this problem by looking at my firewall logs, then I looked in the /var/log/samba/nmbd.log and can see when it tried to access these two ip's I just don't know where to look now. Thanks for any info. -- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.4.3: Acces problem with EA attributes
Hello Volker, where shall i upload the debug log? I do not have an account on bugzilla. Do i need to create one? Volker -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von Volker Lendecke Gesendet: Dienstag, 17. November 2009 13:17 An: Arendt, Volker Cc: samba@lists.samba.org; Jeremy Allison Betreff: Re: [Samba] Samba 3.4.3: Acces problem with EA attributes On Tue, Nov 17, 2009 at 01:06:51PM +0100, Arendt, Volker wrote: > Hi all, > > we still have an access problem with samba 3.4.3 on AIX 5300-10-01-0921, > mounting a GPFS filesystem. The error started to appear a few weeks ago when > we were still on 3.4.1. We do not have this problem on 3.0.26a, but we need > to go to 3.4.3 due to Windows Vista and Windows 7 requirements. > > The upgrade to 3.4.3 did not solve our problem. > > Here is a sample error: > > [2009/11/17 10:55:54, 1] smbd/service.c:1047(make_connection_snum) > 132.195.121.79 (132.195.121.79) connect to service temme$ initially as user > temme (uid=15213, gid=10513) (pid 217140) > [2009/11/17 11:22:51, 1] smbd/dosmode.c:213(get_ea_dos_attribute) > get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = > Function not implemented Please upload a full debug level 10 log. Volker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.4.3: Acces problem with EA attributes
On Tue, Nov 17, 2009 at 01:06:51PM +0100, Arendt, Volker wrote: > Hi all, > > we still have an access problem with samba 3.4.3 on AIX 5300-10-01-0921, > mounting a GPFS filesystem. The error started to appear a few weeks ago when > we were still on 3.4.1. We do not have this problem on 3.0.26a, but we need > to go to 3.4.3 due to Windows Vista and Windows 7 requirements. > > The upgrade to 3.4.3 did not solve our problem. > > Here is a sample error: > > [2009/11/17 10:55:54, 1] smbd/service.c:1047(make_connection_snum) > 132.195.121.79 (132.195.121.79) connect to service temme$ initially as user > temme (uid=15213, gid=10513) (pid 217140) > [2009/11/17 11:22:51, 1] smbd/dosmode.c:213(get_ea_dos_attribute) > get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = > Function not implemented Please upload a full debug level 10 log. Volker signature.asc Description: Digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba 3.4.3: Acces problem with EA attributes
Hi all, we still have an access problem with samba 3.4.3 on AIX 5300-10-01-0921, mounting a GPFS filesystem. The error started to appear a few weeks ago when we were still on 3.4.1. We do not have this problem on 3.0.26a, but we need to go to 3.4.3 due to Windows Vista and Windows 7 requirements. The upgrade to 3.4.3 did not solve our problem. Here is a sample error: [2009/11/17 10:55:54, 1] smbd/service.c:1047(make_connection_snum) 132.195.121.79 (132.195.121.79) connect to service temme$ initially as user temme (uid=15213, gid=10513) (pid 217140) [2009/11/17 11:22:51, 1] smbd/dosmode.c:213(get_ea_dos_attribute) get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented There is a bug open (#6775) that looks somewhat like our problem. In our smb.conf we set the following parameter, but this did not help: #--- # problem with DOS attributes and UNIX permissions # 20091105, VA #--- ea support = yes store dos attributes = Yes map archive = No map hidden = No map system = No map readonly = No Please let me know if you need more information. Do we need to open a new bu report? Shall we add a debug level 10 log and our smb.conf tot he bug ticket? Regards Volker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.4.2: Acces problem with EA attributes
Hallo, Arendt,, Du meintest am 10.11.09: > Hello all, > we have a problem with our samba 3.4.2. We get the following messages > in out logs for some user, but not all. Users can access their > personal share, can create a directory or a file, but cannot change > the directory or the file. The permissions are full access on the top > level folder and permissions are inherited correctly. Message-ID: or http://groups.google.de/group/linux.samba/msg/cc8a5ce9439c31f3 Günter Kukkukk recommends some modifications in "/etc/fstab" and "smb.conf". On my test machine (Slackware-current, Samba 3.4.2): most "get_ea_dos_attributes" error messages have disappeared, but not all: 2 directories are empty -> error message 1 directory is not allowed for this user -> error message Viele Gruesse! Helmut -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] delay on directory browse
On 11/17/2009, Brian (bbayorg...@charter.net) wrote: > Good question, I'm not sure where it originates, but I recall seeing > the recommendation someplace (some faq, howto, etc) to set SO_RCVBUF > and SO_SNDBUF to just those values to IMPROVE performance. Blindly following 'some [vague] faq, howto, etc'. is unwise. Following the official documentation is the preferred method. > Based on your comments Volker I'm guessing that recommendation is > either invalid or outdated. Outdated for many years (since the 2.6 kernel, if not earlier)... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.4.2: Acces problem with EA attributes
Hi Jeremy, bug #6775 is still open. Is this the bug that was supposed to be fixed? Regards Volker -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von Jeremy Allison Gesendet: Dienstag, 10. November 2009 20:23 An: Arendt, Volker Cc: samba@lists.samba.org Betreff: Re: [Samba] Samba 3.4.2: Acces problem with EA attributes On Tue, Nov 10, 2009 at 11:32:42AM +0100, Arendt, Volker wrote: > Hello all, > > some additional information: a new directoriy cannot be renamed. It remains > at "Neuer Ordner". A new file can be created inside the new folder. > > Neither directories nor files can be renamed, moved or deleted. Bug that was fixed with 3.4.3. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Question regarding FreeBSD and Samba
Now i have Samba samba-3.3.9. Problems with refreshing remains. When i connect from one machine with speciffic user - everything seems to be OK. When i connect from other machine with same user - refresh doesn't work. I observed same behaviour when i reconnected from same machine. Reconnection was done after execution of: net use /delete * /y in cmd on windows. My configuration is simple: [desire] writeable = yes path = /home/desire force directory mode = 770 force group = desire force create mode = 770 comment = desire valid users = @desire @design create mode = 770 directory mode = 770 ls -ali /home | grep desire 49718272 drwxrwx--- 5 desire desire 512 Nov 17 11:31 desire id user1 uid=1022(user1) gid=1014(design) groups=1014(design),1035(desire),1062(fff) Can someone tell me what am i doing wrong?! And i don't understand real purpose of force group paramater. When i, for example put in above configuration: force group = fff when i connect with user1, that group(fff) doesn't appear in file permissions of just created folder. Instead the permissions are: drwxrwx--- 2 user1 desire 512 Nov 17 12:33 New Folder (7) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Roaming Profiles and Samba 3.4.x
Very strange- we do use Samba 3.4.3 and still have the force user =%U option in the [Profiles] section in combination with 700 rights on the users folder ... and this is working regards I solved it... in smb.conf following parameter was configured: force user = %U when removing "force user" everything works fine. i don't know why it works w/ 3.0.x but not w/ 3.4.x but it's nice to have satisfied users again :) best -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.4.2: Acces problem with EA attributes
Hi Jeremy, this is not correct. Out problem is not solved in 3.4.3. Her is a current excerpt from a logfile showing that the error persists: [2009/11/17 10:55:54, 1] smbd/service.c:1047(make_connection_snum) 132.195.121.79 (132.195.121.79) connect to service temme$ initially as user temme (uid=15213, gid=10513) (pid 217140) [2009/11/17 11:22:51, 1] smbd/dosmode.c:213(get_ea_dos_attribute) get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented Please let me know if you need more information. Regards Volker -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von Jeremy Allison Gesendet: Dienstag, 10. November 2009 20:23 An: Arendt, Volker Cc: samba@lists.samba.org Betreff: Re: [Samba] Samba 3.4.2: Acces problem with EA attributes On Tue, Nov 10, 2009 at 11:32:42AM +0100, Arendt, Volker wrote: > Hello all, > > some additional information: a new directoriy cannot be renamed. It remains > at "Neuer Ordner". A new file can be created inside the new folder. > > Neither directories nor files can be renamed, moved or deleted. Bug that was fixed with 3.4.3. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Roaming Profiles and Samba 3.4.x
I solved it... in smb.conf following parameter was configured: force user = %U when removing "force user" everything works fine. i don't know why it works w/ 3.0.x but not w/ 3.4.x but it's nice to have satisfied users again :) best Alexander Födisch schrieb: we still do not have a solution. are there are any changes from samba 3.0.x to 3.4.x??? since upgrade to 3.4.3 it does not work anymore with permissions 0777. we need roaming profiles! but we can not roll back to version 3.0.x since we also need Windows 7 support. thanks for any help! Alex Adam Williams schrieb: not a fix, but permissions of 1777 would be slightly better. -- Mit besten Grüßen / Best Regards Alexander Födisch Max Planck Institute for Evolutionary Anthropology -Central IT Department- Deutscher Platz 6 D-04103 Leipzig Phone: +49 (0)341 3550-168 +49 (0)341 3550-154 Fax:+49 (0)341 3550-119 Email: foedi...@eva.mpg.de smime.p7s Description: S/MIME Cryptographic Signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] DC priority, BDC prob with domain groups
Dear vandal By setting *os level* higher i think we can give preference to one server. Thanks On Tue, Nov 17, 2009 at 4:18 AM, Gaiseric Vandal wrote: > There was an incorrect entry in smb.conf on BDC1 which mean it was not > registering in WINS as a bdc. According to the Samba How To documentation, > all other things being equal, Windows clients will use a bdc rather than a > pdc. > > Now when I logon, I may get any of the three domain controllers. When I > get BDC1 (Samba 3.0.37) I don't seem have problems. > > > > > So my following problems remain: > Can I adjust some variable so that one DC is more likely to be used by > windows clients than another? > Why does Samba 3.4.3 not seem to handle domain groups as members of > local groups? > > > If I connect from XP Pro client GATES > > [2009/11/16 17:34:46, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: Checking password for unmapped user []...@[gates] > with t > he new password interface > [2009/11/16 17:34:46, 3] auth/auth.c:225(check_ntlm_password) > check_ntlm_password: mapped user is: [domain]...@[gates] > ... > > > It also looks like I may not get the same logon server each time I logon- > so I guess my PC could have authenticated against one DC, and I could > authenticate against another. > > > Thanks > > > > > On 11/13/09 19:04, Gaiseric Vandal wrote: > >> Setting "announce version = 4.5" in smb.conf on BDC2 did not change >> anything. (The other samba domain still use 4.9 as the default version.) >> Windows clients will still connect to BDC2 (if it is running.) On each >> DC, net getdomainsid and getlocalsid show that the local sid on each >> machine is the domain sid. >> >> >> BDC2# net getdomainsid >> SID for local machine BDC2 is: S-1-5-21-xxx-xxx-x99 >> SID for domain DOMAIN is: S-1-5-21-xxx-xxx-x99 >> >> BDC2# net getlocalsid >> SID for domain BDC is-xxx-xxx-x99 >> BDC2# >> >> >> Pdbedit -Lv, wbinfo -u and wbinfo -g all seem to give the same results >> >> Also >> >> BDC# wbinfo -t >> checking the trust secret via RPC calls succeeded >> >> >> Thanks >> >> -Original Message- >> From: Gaiseric Vandal [mailto:gaiseric.van...@gmail.com] >> Sent: Friday, November 13, 2009 12:48 PM >> To: samba@lists.samba.org >> Subject: DC priority, BDC prob with domain groups >> >> I have the following setup: >> PDC: Samba 3.0.37 on Solaris 10 >> BDC1: Samba 3.0.37 on Solaris 10 >> BDC2: Samba 3.4.3 on Solaris 10 >> >> >> Samba 3.0.37 is the bundled version of Samba. >> Samba 3.4.3 is compiled from source. >> >> BDC2 is a recent addition to the network. >> All machine use LDAP as the backend for everything. They use winbind to >> handle a domain trust with another domain, but otherwise isn't needed. >> >> If I start samba on BDC2 and logon to an XP (or Win 2003) Machine, the >> logon will be to BDC2.This can be verified with echo >> %logonserver%.Rebooting the XP machine is probably not necessary to >> see this. >> >> If I login as the domain administrator, I am effectively not considered >> a member of the local administrator group. If I look at the local >> Administrator group I will see the DOMAIN/Administrators as members. >> But I am unable to install software, see all local files, add users to >> local groups etc. >> >> >> "OS level" on all three DC's was not explictly set, so was 20 by >> default. I changed BDC2 to "os level=0" and set the PDC to "os >> level=33." I did not restart samba on PDC. It seems to be a browsing >> issue. >> >> I still logon to BDC2. >> >> So I have two issues: >> >> 1- How to make sure that the PDC (or PDC and BDC1) use used in >> preference to BDC2. I assume that something about BDC2 having a newer >> ver of samba is getting it priority. >> >> >> 2. What is wrong with the domain members in local users group. This >> may be a BDC config in general issue (and I just never found it because >> BDC1 never took precendence over PDC) or it may be something to do with >> Samba 3.4.x vs 3.0.x. >> >> >> >> >> Thanks >> >> >> >> >> >> > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > -- http://linuxinterviews.blogspot.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Roaming Profiles and Samba 3.4.x
we still do not have a solution. are there are any changes from samba 3.0.x to 3.4.x??? since upgrade to 3.4.3 it does not work anymore with permissions 0777. we need roaming profiles! but we can not roll back to version 3.0.x since we also need Windows 7 support. thanks for any help! Alex Adam Williams schrieb: not a fix, but permissions of 1777 would be slightly better. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba + LDAP error in windows xp while ACL
Dear rajan Did you set ldap admin password for samba by using following command. root#smbpasswd -w By the way you can also use *pdbedit -Lv* command to ensure samba is communicating to ldap properly. Thanks On Tue, Nov 17, 2009 at 10:55 AM, D.Rajan wrote: > Dear All, > >What the files i need to be check to solve the problem. i am having > PDC & BDC > > r...@sangam:/var/log/samba# net getlocalsid > SID for domain SANGAM is: S-1-5-21-4020846335-601350461-1468625926 > > r...@vaigai:~# net getlocalsid > SID for domain VAIGAI is: S-1-5-21-4020846335-601350461-1468625926 > > Error while ACL from windows XP: > > > ys...@sangam:/var/log/samba$ tailf log.kh-sys-02635 > [2009/11/16 19:12:43, 0] printing/print_cups.c:cups_connect(69) > Unable to connect to CUPS server localhost:631 - Connection refused > [2009/11/17 09:32:28, 0] auth/auth_util.c:create_builtin_users(758) > create_builtin_users: Failed to create Users > [2009/11/17 09:32:32, 0] auth/auth_util.c:create_builtin_users(758) > create_builtin_users: Failed to create Users > [2009/11/17 09:32:49, 0] auth/auth_util.c:create_builtin_users(758) > create_builtin_users: Failed to create Users > [2009/11/17 09:32:49, 0] auth/auth_util.c:create_builtin_users(758) > create_builtin_users: Failed to create Users > [2009/11/17 10:26:38, 0] auth/auth_util.c:create_builtin_users(758) > create_builtin_users: Failed to create Users > [2009/11/17 10:27:03, 0] auth/auth_util.c:create_builtin_users(758) > create_builtin_users: Failed to create Users > [2009/11/17 10:27:29, 0] smbd/posix_acls.c:create_canon_ace_lists(1438) > create_canon_ace_lists: unable to map SID > S-1-5-21-4020846335-601350461-1468625926-3174 to uid or gid. > > As per your instruction i convert one systems from our domain to workgroup > and restart the system and once again i convert to my domain, eventhough i > am not able to give permission from my system. > > 1. In My client Xp system what i want to check regarding SID infomation ? > 2. How to solve the "unable to map SID" error in server. > > I am having more than 2500 client system. > > C U Next Mail > Raj > > Take Care > HAVE A NICE DAY > > > --- On Sun, 8/11/09, D.Rajan wrote: > > > From: D.Rajan > Subject: Samba + LDAP error in windows xp while ACL > To: samba@lists.samba.org > Date: Sunday, 8 November, 2009, 6:08 PM > > > > > > > > Dear all, > > I am using Samba + PDC LDAP in a single server. From last month onward i > am facing problem > When I set manualy the acl (setfacl -m g:group:rwx the_file) > It's ok, the other domain member see the ACL > > But when I set the acl with a Windows Workstation, that's don't work it > gives the furnished error : > > sys...@sangam:/var/log/samba$ tailf log.r-sys-03703 > > [2009/11/08 17:54:05, 0] auth/auth_util.c:create_builtin_users(758) > create_builtin_users: Failed to create Users > [2009/11/08 17:54:09, 0] passdb/pdb_ldap.c:ldapuser2displayentry(4211) > sid S-1-5-21-3986255151-1643105893-2919334401-3002 does not belong to our > domain > . > . > . > [2009/11/08 17:54:15, 0] auth/auth_util.c:create_builtin_users(758) > create_builtin_users: Failed to create Users > [2009/11/08 17:54:17, 0] smbd/posix_acls.c:create_canon_ace_lists(1438) > create_canon_ace_lists: unable to map SID > S-1-5-21-4020846335-601350461-1468625926-27594 to uid or gid. > > > > > > > > C U Next Mail > Raj > > Take Care > HAVE A NICE DAY > > > > The INTERNET now has a personality. YOURS! See your Yahoo! Homepage. > > > The INTERNET now has a personality. YOURS! See your Yahoo! Homepage. > http://in.yahoo.com/ > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > -- http://linuxinterviews.blogspot.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
