[Samba] smbclient -L shows only a part of the shares

2004-02-18 Thread Arnst, Rainer
Hi,

I am using Samba 3.0.1 under Debian Unstable (Kernel 2.4.22). (But also
tried this with 2.2.8 with the same results)

I use the command "smbclient -L netbios_name -Uname%pw" to list the
shares of one of the servers of an ADS Domain.

Unfortunately only about 30% of the shares of this particular server
appear in the list.

In windows all shares are visible. I used the same account in Linux and
Windows, to browse the shares.

Any Hints?

Regards,
Rainer Arnst
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Can only login from Windows, when not a domain member

2004-01-19 Thread Arnst, Rainer
Hi,

I have set up Samba 3.0.1 to work as a Domain Member. Security is ADS.

"wbinfo -a User%Pass" works for the ADS users, winbind works as well.
"wbinfo -t" is ok as well.

When I try to connect to the computer from windows, it is only
successful, when I am not logged in as a member of the domain like
"domain\user" but logged in as a local user on the windows box
(Administrator).

I can also mount shares from another linux box via smbmount, ads
authentification works here as well. It only doesn't work from windows
machines, when the user logged in is a domain member. Anyone has any
clues?

Here are my settings.

Have a nice day,
Rainer

LINUX-PRINT:/var/log/samba# testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[test]"
Processing section "[printers]"
Loaded services file OK.
'winbind separator = +' might cause problems with group membership.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

# Global parameters
[global]
workgroup = DOMAIN
realm = REALM.DE
server string = %h server (Linux/Samba %v)
security = ADS
password server = server.domain.de
passdb backend = tdbsam, guest
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n .
log level = 4
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
name resolve order = wins lmhosts host bcast
printcap name = cups
wins server = server
panic action = /usr/share/samba/panic-action %d
idmap uid = 1-2
idmap gid = 1-2
template homedir = /home/ads/%U
template shell = /bin/bash
winbind separator = +
invalid users = root
printing = cups

[homes]
comment = Home Directories
read only = No
create mask = 0700
directory mask = 0700
browseable = No

[test]
comment = test
path = /tmp
read only = No

[printers]
comment = All Printers
path = /tmp
create mask = 0700
guest ok = Yes
printable = Yes
browseable = No

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Winbind Problem ("Authentication service cannot retrieve authentication info.")

2004-01-14 Thread Arnst, Rainer
Hi,

I am using Samba 3.0.1 / Debian Sid. I got winbind to work (Win2k3 ADS
environment) up to a point. I can list users and groups with "wbinfo -u"
and "getent passwd" works as well. I added "auth sufficient
pam_winbind.so" to /etc/pam.d/login. When I try to login into an ADS
account, access is denied with this message

"Authentication service cannot retrieve authentication info."

Any comments would be very welcome. I followed the instructions of the
samba documentation, but found nothing which would help me in this case.

Thanks in advance.

Regards,
Rainer

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Can't get "getent passwd" to display winbind users

2004-01-13 Thread Arnst, Rainer
Hi,

I am running Samba 3.0.1 on a Debian/Sid machine. I have installed
winbind to access the AD of the local network, which I want to use for
UNIX logons.

wbinfo -u shows all the users of the AD, but "getent passwd" only shows
the contents of the file /etc/passwd.

I have been following the instruction for winbind (Chapter 21) in the
Samba-HOWTO-Collection.

Any comments would be greatly appreciated.

Regards,
Rainer


Here's some data about my configuration.

PCA-ARNSTR:/lib# ls /lib/*winbind* -l
-rw-r--r--1 root root15024 Dec 31 06:06
/lib/libnss_winbind.so.2


Here is my /etc/nsswitch.conf
--
# /etc/nsswitch.conf
passwd: files winbind compat
group:  files winbind compat
shadow: files compat
hosts:  files dns
networks:   files
protocols:  db files
services:   db files
ethers: db files
rpc:db files
netgroup:   nis

And my smb.conf:
# Sample configuration file for the Samba suite for Debian GNU/Linux.
[global]

## Browsing/Identification ###
   workgroup = NTDOM
   server string = %h server (Linux/Samba %v)
   netbios name = PCA-ARNSTR
   wins server = svr_gamma
   dns proxy = no

 Debugging/Accounting 
   log file = /var/log/samba/log.%m
   max log size = 1000
   syslog = 0
   panic action = /usr/share/samba/panic-action %d

### Authentication ###
   security = ADS
   realm = "EE-CONSULTANTS.DE"
   encrypt passwords = yes
   passdb backend = tdbsam guest
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n .
   password server = svr_gamma.ee-consultants.de
   obey pam restrictions = no
#  guest account = nobody
   invalid users = root
   client use spnego = yes
   idmap uid = 1-2
   idmap gid = 1-2
   winbind enum users = yes
   winbind enum groups = yes
   template shell = /bin/bash
   winbind separator = +
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n .
   printing = cups
   printcap name = cups

   socket options = TCP_NODELAY


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Configuring Samba/Winbind 3.0 as a Domain Member in a 2003 - AD Domain

2004-01-08 Thread Arnst, Rainer
Hi,

I have to set up several linux boxes, which should be able to
authenticate smb and unix logins against the Windows 2003 AD. When a
user logs in the first time the home directory should automatically be
created (possible?).

I read some online documents which (to my understanding :) ) stated that
for every samba domain member a user in the AD must be created whose
names matches the samba host name and that these users must have
permission to add hosts to the windows domain. With ktpass a keytab is
then created for every Samba Host. Is this true? Or is it not possible
to use only one user for all samba hosts and add the hosts manually to
the domain via "net ads join -UAdministrator ..."?

Any comments are appreciated.

Greetings,
Rainer

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Printing SAMBA/CUPS

2003-12-19 Thread Arnst, Rainer
Hi,

I installed a cups printer and exported it via samba (Debian SID, Samba
3.0.0).

I can print using cups locally, but when I try to print from a
W2k-client, I get the error message "RPC Server not available"
(translated from german, so the individual words may differ). Does
anyone have any hints?

Thank you very much.

...
printing = cups
load printers = yes
printer admin = root,arnstr
printcap name = cups

[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
public = yes
guest ok = yes
writable = no
printable = yes


[print$]
comment = Printer Drivers
path = /etc/samba/drivers
browseable = yes
guest ok = yes
read only = yes
write list = root

   printing = cups
...

Regards,
Rainer
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] rpcclient / adddriver returns WERR_ACCESS_DENIED

2003-12-09 Thread Arnst, Rainer
Am Die, den 09.12.2003 schrieb Kurt Pfeifle um 14:10:
> Arnst, Rainer wrote:
> > I already moved the files into the subdirs 2 and 3 myself... oops. Thank
> > you.
> I guessed so.

You're good! :)

 
> Did you also change the "writeable = yes" setting in the [printers]
> section, as I adviced in my previous posting?

Well not yet... but I am going to. I set it to yes in my despair over
the error this thread is about.

Regards,
Rainer

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] rpcclient / adddriver returns WERR_ACCESS_DENIED

2003-12-09 Thread Arnst, Rainer
Am Die, den 09.12.2003 schrieb Kurt Pfeifle um 14:10:
> > I had tried the APW-Approach first of all, following the step-by-step
> > guide from the howto, but could not get windows to behave like described
> > in the How-To.

Just out of curiosity, I tried the APW-Approach again, with no success.
When I select the Properties of a Printer on a Samba Host, a message
saying "The Process could not be finished etc." and there's only an
OK Button. I am using W2k Prof. Do I need a Service Pack installed or
anything like that?!

Thanks...

Best Regards,
Rainer
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] rpcclient / adddriver returns WERR_ACCESS_DENIED

2003-12-09 Thread Arnst, Rainer
Am Die, den 09.12.2003 schrieb Kurt Pfeifle um 12:58:
> This error typically occurs, if you haven't any driver files waiting
> to be "adddriver-ed", laying in "[print$]/W32/X86/"
> 
> Once you run "rpcclientadddriver", and it fails, you will have to
> re-assure that *all* the original files are still in place. (A partially
> succeeding "adddriver" may have moved the files already to the "2" or
> "3" subdirectories!

I already moved the files into the subdirs 2 and 3 myself... oops. Thank
you.


> But your description is not clear at all. On the one hand you say you
> had used the "APW", on the other you are quoting the "rpcclient...
> ...adddriver" command in isolation.

I had tried the APW-Approach first of all, following the step-by-step
guide from the howto, but could not get windows to behave like described
in the How-To. Then I tried the other approach given. The rpcclient
command was not an isolated action.

Thank you very much again. I hope I can get it to work now.

Greetings,
Rainer

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] rpcclient / adddriver returns WERR_ACCESS_DENIED

2003-12-09 Thread Arnst, Rainer
Hi,

I am trying to prepare downloadable printer drivers for Windows-Clients
with Samba 3.0.0-final. Everything worked fine so far. But I found no
way to add the printer driver files to the samba database. The method
using the Add Printer Wizard in W2k did not work for me.

This is what I tried:

linux4:/# rpcclient -U'root%secret' -c 'adddriver "Windows NT x86"
"LJ6:HPBLEF2.DLL:HPBLEF49.PMD:HPBLEF0.DLL:HPBLEFJE.HLP:NULL:RAW:HPBLEF1.DLL,HPBLEF3.DLL,HPBLEF7.DLL,hpbafd32.dll,hpbftm32.dll,HPBLEF41.DLL,HPBLEF42.DLL,HPDCMON.DLL"
 ' localhost
result was WERR_ACCESS_DENIED


Any "hints" are very welcome!!

Have a nice day!

This is my smb.conf:
# Samba config file created using SWAT
[global]
workgroup = ENTWICKLUNG
netbios name = LINUX4
server string = %h server (Samba %v)
encrypt passwords = true
passdb backend = tdbsam guest
obey pam restrictions = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n .
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
dns proxy = No
panic action = /usr/share/samba/panic-action %d
#   invalid users = root
hosts allow = all
printing = cups
load printers = yes
printer admin = root,arnstr,guest
printcap name = cups

[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
public = yes
guest ok = yes
writable = yes
printable = yes
printer admin = root,arnstr,guest


[print$]
comment = Printer Drivers
path = /etc/samba/drivers
browseable = yes
guest ok = yes
read only = yes
write list = root


[homes]
   comment = Home Directories
   browseable = no

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3 as Domain Member / W2k ADS

2003-11-14 Thread Arnst, Rainer
Hi,

I set up Samba to be a Domain Member in W2k ADS Domain. The
authentication basically works, the only problem is, that a unix account
with the same name is needed on the samba machine for it to work. (The
pw though checked against the ad.)

How do I get rid of the neccessity to have corresponding unix accounts
for the ads users?

Thanks in Advance,
Rainer

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.0-final crashing

2003-10-14 Thread Arnst, Rainer
Hi,

 

I am running Debian/unstable with Samba-3.0.0-final and a few problems
to do with Samba, some minor, some severe. On the system affected these
applications are in use:

 

Samba, tomcats, java sdk, several apache 1.3.26, typo3, php 4.3.3

 

There is a variety of symptoms connected with Samba. Sometimes typo3/php
freezes when accessing a samba share. A "find . -name "s/thing"" on a
samba fs often crashes in a way that samba cannot be restarted without
rebooting the entire system. If other applications are involved in this
type of crash, they also cannot be removed from the system by
kill-signals, which is extremely annoying. I am not sure if this is a
bug in Samba-3.0.0-final or a misconfiguration on the linux server or
somewhere in the network.

 

Where do I find documentation, that will help me to precisely interpret
samba log entries?

 

Any comments are very appreciated.

 

Thanks & have a nice day,

Rainer

 

Some relevant parts of syslog and log.smbmount:

 

syslog:

Oct 13 15:20:20 linux1 kernel: smb_trans2_request: result=-104, setting
invalid

Oct 13 15:20:20 linux1 kernel: smb_retry: successful, new pid=132,
generation=13

Oct 13 15:20:20 linux1 kernel: smb_trans2_request: result=-104, setting
invalid

Oct 13 15:20:20 linux1 kernel: smb_retry: successful, new pid=135,
generation=11

Oct 13 15:20:20 linux1 kernel: smb_trans2_request: result=-104, setting
invalid

Oct 13 15:20:20 linux1 kernel: smb_retry: successful, new pid=141,
generation=11

Oct 13 15:20:20 linux1 kernel: smb_trans2_request: result=-104, setting
invalid

Oct 13 15:20:20 linux1 kernel: smb_retry: successful, new pid=138,
generation=9

 

...

 

Oct 13 15:39:12 linux1 kernel: smb_proc_readdir_long: name=\Abrechnung
und Planung\*, result=-13, rcls=1, err=5

Oct 13 15:39:12 linux1 kernel: smb_proc_readdir_long: name=\Arbeiten
ausgeschiedener Mitarbeiter\*, result=-13, rcls=1, err=5

Oct 13 15:39:12 linux1 kernel: smb_proc_readdir_long:
name=\Beschaffung\*, result=-13, rcls=1, err=5

Oct 13 15:39:12 linux1 kernel: smb_proc_readdir_long:
name=\EE_Anzeigen\*, result=-13, rcls=1, err=5

Oct 13 15:39:13 linux1 kernel: smb_proc_readdir_long:
name=\EE_Personalmanagement\*, result=-13, rcls=1, err=5

Oct 13 15:39:13 linux1 kernel: smb_proc_readdir_long:
name=\Investitions- und Betriebsmittel\*, result=-13, rcls=1, err=5

Oct 13 15:39:13 linux1 kernel: smb_proc_readdir_long:
name=\KASSENBUCH\*, result=-13, rcls=1, err=5

Oct 13 15:39:13 linux1 kernel: smb_proc_readdir_long:
name=\Schriftverkehr\*, result=-13, rcls=1, err=5

Oct 13 15:39:13 linux1 kernel: smb_proc_readdir_long:
name=\URLAUBSKARTEI\*, result=-13, rcls=1, err=5

Oct 13 15:39:26 linux1 kernel: Unable to handle kernel paging request at
virtual address f800

Oct 13 15:39:26 linux1 kernel:  printing eip:

Oct 13 15:39:26 linux1 kernel: f89818f7

Oct 13 15:39:26 linux1 kernel: *pde = 

Oct 13 15:39:26 linux1 kernel: Oops: 

Oct 13 15:39:26 linux1 kernel: CPU:0

Oct 13 15:39:26 linux1 kernel: EIP:
0010:[nls_iso8859-15:__insmod_nls_iso8859-15_O/lib/modules/2.4.18-686/ke
rnel/fs/+-38665/96]Not tai$

Oct 13 15:39:26 linux1 kernel: EFLAGS: 00010282

Oct 13 15:39:26 linux1 kernel: eax: 9abe55b6   ebx: f800   ecx:
ff3773fd   edx: ebbfaabe

Oct 13 15:39:26 linux1 kernel: esi: 213c562a   edi: c42e5e34   ebp:
c42e5ecc   esp: c42e5de4

Oct 13 15:39:26 linux1 kernel: ds: 0018   es: 0018   ss: 0018

Oct 13 15:39:26 linux1 kernel: Process apache (pid: 2048,
stackpage=c42e5000)

Oct 13 15:39:26 linux1 kernel: Stack: c013bdc0 c42e5e9c f8990284
    cfb45620

Oct 13 15:39:26 linux1 kernel:e632b7c0 0004 0190ac5d
0002   cf489000 00b2

Oct 13 15:39:26 linux1 kernel: ffea 0001
00b4 f8980215 e3667ca0 c42e5fb0 c013bdc0

Oct 13 15:39:26 linux1 kernel: Call Trace: [filldir64+0/276]
[nls_iso8859-15:__insmod_nls_iso8859-15_O/lib/modules/2.4.18-686/kernel/
fs/+-445$

Oct 13 15:39:26 linux1 kernel:[filldir64+0/276]
[nls_iso8859-15:__insmod_nls_iso8859-15_O/lib/modules/2.4.18-686/kernel/
fs/+-40613/96] [f$

Oct 13 15:39:26 linux1 kernel:[filldir64+0/276]
[sys_fcntl64+127/136] [system_call+51/56]

Oct 13 15:39:26 linux1 kernel:

Oct 13 15:39:26 linux1 kernel: Code: 0f b6 03 43 89 c2 c1 e2 04 01 f2 c1
e8 04 01 c2 8d 04 92 8d

 

log.smbmount:

[2003/10/14 09:42:47, 0] tdb/tdbutil.c:tdb_log(724)

  tdb(/var/run/samba/gencache.tdb): tdb_lock failed on list 48 ltype=0
(Bad file descriptor)

[2003/10/14 09:42:47, 0] tdb/tdbutil.c:tdb_log(724)

  tdb(/var/run/samba/gencache.tdb): tdb_lock failed on list 34 ltype=1
(Bad file descriptor)

[2003/10/14 10:15:29, 0] tdb/tdbutil.c:tdb_log(724)

  tdb(/var/run/samba/gencache.tdb): tdb_lock failed on list 34 ltype=0
(Bad file descriptor)

[2003/10/14 10:15:29, 0] tdb/tdbutil.c:tdb_log(724)

  tdb(/var/run/samba/gencache.tdb): tdb_lock failed on list 34 ltype=1
(Bad file descriptor)

[2003/10/14 10:15:29, 0] tdb/tdbutil.c:tdb_log(724)