[Samba] WBINFO_GROUP.PL versus WINBIND_GROUP

[André Marques]

Hello everybody!

Does anybody knows and can tell me which are the main
differences between these two authentication
files/methods?

We use now the first one, but we're thinking about
changing it for the second one.


Thanks in advance for the help!


André




___ 
O Yahoo! está de cara nova. Venha conferir! 
http://br.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Problem with ntlm authentication - Please help!!

[André Marques]

Hi!!
 
We have two squid proxies running at our site, both of
them with the same versions and configurations (Fedora
Core 5, Samba 3.0.22-1.fc5, installed through rpm, and
Squid 2.5.STABLE13. Both are running on Dell servers
with the same configuration. 
 
Samba on both machines is configured with "security =
ads", and the testes "wbinfo -t", "wbinfo -u" and
"wbinfo -g" all runs ok.
 
One of them is running just fine, but the other is
crashing every day, due to ntlm authentication
problems.
 
The only difference is that the proxy that is running
ok is installed with 64 bits version of Fedora, and
the other one is running with the 32 bits version.
 
Squid´s compile options are the following:
 
configure options:  --enable-auth=ntlm,basic
--enable-delay-pools --enable-snmp
--enable-useragent-log --prefix=/usr/local/squid
--enable-ssl --enable-underscores
--enable-storeio=ufs,aufs,diskd
--enable-external-acl-helpers=wbinfo_group 
 
The problem we are facing is that ntlm helpers begin
to enter in "R" and "B" states, until every one of
them stops authenticating, and then Squid dies. The
error message associated to the crash is this: " Too
many queued ntlmauthenticator requests (301 on 60)". 
 
During all day, we get the following message as well:
" string_to_sid: Sid S-0-0 is not in a valid format."
 
Does anybody know what could be the problem, or how
could we trace it? Wich one should be the best squid´s
debug_level for this problem?
 
Thanks in Advance,

André

PS: By the way, not related to this question, how do
you users of Gmail can send messages to the list? I
always try, but even with the option for sending
messages not in HTML format chosen, i can't send
messages to the list. If anyone has a hint about this
also, it would be very appreciated. Thanks!



___ 
Novidade no Yahoo! Mail: receba alertas de novas mensagens no seu celular. 
Registre seu aparelho agora! 
http://br.mobile.yahoo.com/mailalertas/ 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Problem looking up SIDs after Windows Rollup 5 on DCs

[André Marques]

Hello to everyone!

Recently we updated one of our DCs with the MS Windows
Rollup 5. After this, watching our logs, we noticed
that many problems are happening when wbinfo tries to
lookup SIDs, for the script wbinfo_group.pl (that
verifies user on certain groups).

Well, after  many researches about this, we discovered
also that we should include our proxies that
authenticate on the DCs, on a group called
"pre-win2000 machines" (or something like that).

But the problem now is: it works on one proxy, but not
on other one.

So, i would like to know if anyone of you know if the
fact of different versions being used, can affect this
feature (lookup SIDs), cause the versions for them are
different.

The proxy that find success on looking up SIDs is with
samba-3.0.22-1.fc5 and the other is with version
samba-3.0.8-0.pre1.3. This old version is working good
on the DC tha was not updated, but not on the updated
DC, even being put on the correct group, that has
permission to lookup on the DCs.

Any advise? Any help is appreciated! :)
Thanks a lot!


André



___ 
Yahoo! Acesso Grátis - Internet rápida e grátis. Instale 
o discador agora! 
http://br.acesso.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba