[Samba] Samba 34 + LDAP = hang?

2010-04-12 Thread Daniel O'Connor
Hi,
I tried updating Samba to 3.4 (from 3.3) as libsmbclient uses it and 
that pulls in talloc which conflicts with 3.3..

Unfortunately when I tried it, it hung when I tried to use the ldap 
passdb backend. I could not really get any useful debugging out of it
:(

The stack trace is junk (even after enabling max debug) and running 
with..
sudo /usr/local/sbin/smbd -d 10 -F -S

Showed stuff but nothing related to LDAP (except mentioning the line in 
the config) and it still hung after saying it was going to daemonise 
itself.

It hung not using any CPU but it hadn't yet opened any TCP listen 
sockets - however it did have a socket to the LDAP server open.

Does anyone actually use this combination on FreeBSD?

I have had various annoying issues with LDAP (eg slapd crashing when 
it's not shut down cleanly, various frustrations getting it setup etc) 
but I haven't come across this bug before.

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


signature.asc
Description: This is a digitally signed message part.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] FreeBSD 7.2 domain member problem - partially SOLVED

2009-11-23 Thread Daniel O'Connor
On Mon, 23 Nov 2009, Diego Zuccato wrote:
  The problem with not working pw user / group show -a or getent
  passwd / group was that nss_winbind.so was not where it supposed
  to. To correct this I used:
  ln -s /usr/local/lib/nss_winbind.so.1 /usr/lib/
  ln -s /usr/local/lib/nss_winbind.so.1 /usr/lib/nss_winbind.so.2

 That's really ugly and shouldn't be needed on ANY distro. And it
 seems you're looking for troubles (.1 and .2 IIRC have different
 ABI).

Indeed, that certainly shouldn't be necessary..

I use nss/pam_ldap (on FreeBSD) and it works just fine living 
in /usr/local/lib as you'd expect.

I don't know why you'd need nss_winbind.so.2 either.

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


signature.asc
Description: This is a digitally signed message part.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] FreeBSD 7.2 domain member problem - partially SOLVED

2009-11-23 Thread Daniel O'Connor
On Mon, 23 Nov 2009, Ivo Karabojkov wrote:
 I am sure it should work without these strange links I've made.
 I don't know what is the problem. I use ports, just to keep my
 installations more standard.

 May you point me a good manual how to set up nss/ldap with Samba?

I used the samba how to guide and googled, the net/smbldap-tools is 
pretty helpful.

That said it wasn't especially simple to setup :(

However I don't use winbind on my FreeBSD machine, I use nss/pam_ldap 
and Samba talks to the LDAP server as well.

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


signature.asc
Description: This is a digitally signed message part.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] FreeBSD 7.2 domain member problem

2009-11-05 Thread Daniel O'Connor
On Thu, 5 Nov 2009, Ivo Karabojkov wrote:
 group: files winbind
 group_compat: nis
 hosts: files dns
 networks: files
 passwd: files winbind
 passwd_compat: nis
 shells: files
 services: compat
 services_compat: nis
 protocols: files

Can you try commenting out group_compat and passwd_compat?

The other thing to try would be running ktrace on getent and see what 
it's doing.

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


signature.asc
Description: This is a digitally signed message part.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Windows 7 Support

2009-09-29 Thread Daniel O'Connor
On Tue, 29 Sep 2009, sambalist wrote:
 Hello Samba,

 I hope to know if the latest Samba release could provide file or
 print service to Windows 7 or Vista. Thanks! :)

3.3 works with Windows 7.

(For files anyway, I didn't test printing)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


signature.asc
Description: This is a digitally signed message part.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba and LDAP install on FreeBSD

2008-07-22 Thread Daniel O'Connor
On Tue, 22 Jul 2008, [EMAIL PROTECTED] wrote:
 Here is my problem.  I installed the OpenLdap 2.4.10 server and SASL
 client.  I then went to install the Samba 3.0.30 Port and it tells me
 that it needs to install OpenLDAP client 2.3.42, but the 2.4.10 is in
 the same place and I need to deinstall it.  I deinstall 2.4.10 and
 samba will install, but now openldap will not run because it has
 missing files.  I went to reinstall the 2.4.10 SASL client, but it
 tells me that the openldap 2.3.42 needs to be removed.

 If I go to remove the 2.3.42 openldap client, it tells me that samba
 3.0.30 relies on it.  I am kind of stuck here.  Does samba 3.0.30 not
 work with openldap 2.4?  Do I have to have openldap 2.3?

Put this in /etc/make.conf
WANT_OPENLDAP_VER=24

It tells the ports tree that you want OpenLDAP 2.4 if a port doesn't 
specify a particular version.

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


signature.asc
Description: This is a digitally signed message part.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba and LDAP install on FreeBSD

2008-07-22 Thread Daniel O'Connor
On Wed, 23 Jul 2008, [EMAIL PROTECTED] wrote:
  It tells the ports tree that you want OpenLDAP 2.4 if a port
  doesn't specify a particular version.

 Thank you.  That took care of the problem.  I thought something could
 be added somewhere to make it use 2.4, but I was looking in the
 actual Makefile in the port and I did not see anything there.

Yes, unfortunately I am not really sure if it documented anywhere other 
than the source :(

ports(7) doesn't appear to cover it. ISTR last time I grovelled 
through /usr/ports/Mk/* for it..

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


signature.asc
Description: This is a digitally signed message part.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] VFAT filesystem and large files

2007-09-22 Thread Daniel O'Connor
On Sun, 23 Sep 2007, [EMAIL PROTECTED] wrote:
 I was trying to keep the USB drive as FAT so that I could easily move
 it a Windows machine if necessary.

 anyway, i found the reference (i don't know why i was having trouble
 last night) -

You could put ext2/3 on it and use this in Windows -
http://www.fs-driver.org/

I've never tested it though.

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


signature.asc
Description: This is a digitally signed message part.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] VFAT filesystem and large files

2007-09-22 Thread Daniel O'Connor
On Sun, 23 Sep 2007, [EMAIL PROTECTED] wrote:
 At one point a year or so ago, i mounted a ext2 filesystem on a win2K
 machine. It did work. However, the reason I asked about VFAT is I
 wanted to have a USB drive that could be removed from the samba
 server and used on (pretty much) any windows/linux computer
 (without installing/modify the recipient computer).  VFAT gives me
 that (unfortunately).

Partition it in 2, put the driver on a small FAT partition and make the 
rest ext2 :)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


signature.asc
Description: This is a digitally signed message part.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] gencache.tdb going missing

2007-08-22 Thread Daniel O'Connor
Hi everyone,
I'm having an odd issue with a Samba install - it starts SIGABORTing 
complaining that gencache.tdb has gone missing.. ie

[2007/08/09 12:52:50, 0] lib/util_tdb.c:tdb_log(662)
  tdb(/var/db/samba/gencache.tdb): tdb_reopen: open failed (No such file or 
directory)
[2007/08/09 12:52:50, 0] smbd/server.c:open_sockets_smbd(572)
  tdb_reopen_all failed.

If I recreate it and restart Samba it is happy (until it goes missing 
again..)

This is on FreeBSD 6.2 with the latest Samba port (samba-3.0.25a_1,1). I 
have a FreeBSD 6.2 box running samba-3.0.24,1 without issue.

I have the CUPS, Windbind, popt  utmp options set in the port.

I'm trying to catch it in the act but I wasn't working yesterday when it
happened and the log rolled over (argh.. )

Does anyone else see this?

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: OT: ECC Memory

2007-06-27 Thread Daniel O'Connor
On Wednesday 27 June 2007 21:58, Charles Marcus wrote:
   While slower, it has benefits for something like a database
   server. For a home machine, the added expense and slower speed are
   not worth it. Not exactly a definitive answer as there is gray
   area but for a production server, I'd throw in ecc

 Well, this contradicts what John just said, which is why I asked for
 an AUTHORITATIVE source.

 John? Anyone? White paper? Unbiased tests/comparison?

ECC has no effect on performance.
Buffered memory has a higher latency.

In the old days you usually needed ECC/buffered memory for servers, 
and unfortunately they have become almost synonymous (well, in some 
circles).

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgpWV5lM86jC2.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Desktops with Linux Clients

2007-04-11 Thread Daniel O'Connor
On Wednesday 11 April 2007 19:40, Dave Ewart wrote:
  That combined with pam_winbind and nss_winbind should get you what you
  want.

 Seconded.

 We use direct LDAP authentication for the Linux workstations (Windows
 PCs use LDAP via Samba) and pam_mount - works very nicely.

If I was using LDAP directly then I would just mount /home on each of the 
Linux machines.

IMO pam_mount is only useful if you don't trust root on the Linux boxes, or 
the master repository for files doesn't do NFS, or the home directories 
aren't available in a single directory.

(pam_mount seems more evil than using NFS like that IMO :)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgpk2rgRkMbtW.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Desktops with Linux Clients

2007-04-11 Thread Daniel O'Connor
On Wednesday 11 April 2007 20:44, Dave Ewart wrote:
 Well, we clearly have different opinions here.  I don't fancy mounting
 /home (via NFS) on every Linux box.  That just strikes me as the wrong
 way to do it: a local machine root compromise puts the entirety of /home
 at risk.  pam_mount at least ensures that you only get the home
 directory for the current logged-in user remotely-mounted.

I wasn't thinking straight and was under the impression that local root would 
need special access to the LDAP server but that isn't necessary with the 
correct ACLs.

Yes, you're right :)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgp5iWGWEpqGX.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Desktops with Linux Clients

2007-04-10 Thread Daniel O'Connor
On Wednesday 11 April 2007 06:55, Jimmy Perkins wrote:
 I have Samba setup on a Debian server and have implemented roaming desktops
 for the windows clients.  In this network, there
 are also LINUX clients that i would like to use roaming desktops and the
 users be able to access their home directory on the server
 when they login to one of these linux clients.

 Is this possible using Samba?  And can anyone point me to a
 website/tutorial or any information regarding this?  I have searched a lot
 and have not found much related to my problem.

You could try pam_mount - http://pam-mount.sourceforge.net/

That combined with pam_winbind and nss_winbind should get you what you want.

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgpmRG8FBef6w.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows 98 caching too much

2007-02-26 Thread Daniel O'Connor
On Saturday 24 February 2007 10:18, Rashkae wrote:
  One work around is to open a DOS box and 'type' the file - this seems to
  force it to re-get the file.

 You didn't specify what kind of Unix your Unix Side is.  There's some
 special kernel magic required for Unix Kernel and Oplocks to co-exist
 peacefully.  I would guess this is what your missing.

It is FreeBSD 6.2. I don't have this problem with Windows XP machines, only 
this Win98 system.

 Asside from trying to get that special magic sauce working, your best
 bet will be to either disable oplocks entirely (not a bad idea overall)
 *or* mount the smb/cifs file system on the unix side and modify through
 Samba.

Not possible because all of the files are on a FreeBSD UFS2 partition :)

 Oplocks  (Opportunistic Locks) means that if the client is the only one
 accessing a file, it caches the data locally and re-uploads the file at
 a later time.  If a second client needs to access the same file, the
 server will send a request to the first client demanding that it flushes
 the file and relinquishes the exclusive lock... By modifying the file
 directly, you are by-passing that mechanism.

I don't believe the person is modifying the file behind Samba's back. They're 
using Windows to edit the file so it should work fine.

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgpEDYzVrUFBE.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows 98 caching too much

2007-02-26 Thread Daniel O'Connor
On Tuesday 27 February 2007 00:58, Rashkae wrote:
 Daniel O'Connor wrote:
  I don't believe the person is modifying the file behind Samba's back.
  They're using Windows to edit the file so it should work fine.

 Then you'll have to explain this in more detail:
   however we find that if the file is modified on the Unix side the

 Win98 box doesn't notice.

 How exactly is it the file is being modified on the unix side?

I have just found that my understanding of the problem was in error.

They were modifying the file on the unix side behind Samba's back so of 
course the caching was a problem. I'm not sure why it didn't show up in XP 
systems though.

I have since enabled fam and the problem appears solved.

Sorry for the noise, and thanks for the help!

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgpLkj9O5tlze.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows 98 caching too much

2007-02-26 Thread Daniel O'Connor
On Tuesday 27 February 2007 15:53, Rashkae wrote:
  course the caching was a problem. I'm not sure why it didn't show up in
  XP systems though.

 Since your hosting this on BSD, which, to the best of my knowledge,
 doesn't support kernel oplocks, you probably *really* want to disable
 those if files are being modified in such a way.  There's much potential
 for all kinds of things to go horribly wrong otherwise.

Those sort of modifications are very rare.
I believe running FAM should allow it to work properly.

Seems to work OK so far anyway :)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgpkdaEz9CSlz.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows 98 caching too much

2007-02-23 Thread Daniel O'Connor
On Saturday 24 February 2007 09:34, Sherwood Botsford wrote:
 May be silly, but does the window 98 box have the same idea of time that
 the samba
 server does?  I've often seen 'make' issues with this over nfs, and I've
 seen the reverse where windows fusses when it thinks that some other
 program has modified the file,
 when it's time is behind the server time.

I'll double check - I am pretty sure it's running D4Time which uses SNTP to 
sync the clock.

It's free too :)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgpfMMLPxEwMM.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Windows 98 caching too much

2007-02-22 Thread Daniel O'Connor
Hi,
We have an old Win98 box at work that is used for programming GALs and 
EEPROMs, however we find that if the file is modified on the Unix side the 
Win98 box doesn't notice. This is rather annoying when you are iterating a 
design as you can imagine!

One work around is to open a DOS box and 'type' the file - this seems to force 
it to re-get the file.

Does anyone have any suggestions for how I could force it to not cache? File 
performance is not an issue on the Win98 box as all it is used for is 
GAL/EEPROM programming.

Thanks.

smb.conf is as follows..
[global]
workgroup = GENESIS
server string = Cain
hostname lookups = yes
security = user
encrypt passwords = yes
null passwords = yes
csc policy = documents
log file = /var/log/samba/log.%m
log level = 2
max log size = 50
wins support = Yes
load printers = Yes
use client driver = Yes
os level = 65
socket options = TCP_NODELAY
dns proxy = yes
dos filemode = yes
nt acl support = no
time server = yes
dos filetimes = yes
dos filetime resolution = yes
fstype = FAT
fam change notify = no

[projects]
comment = Project source code
path = /usr/local/Genesis/work
writeable = Yes
guest ok = Yes
force create mode = 0775
force directory mode = 0775

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgpDTj9ozBcWn.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] FreeBSD and Winbind

2007-02-10 Thread Daniel O'Connor
On Saturday 10 February 2007 13:40, Don McCall wrote:
 Ok, Jay,
 This is a real long shot, but I did run into a similar problem on SLE9 Suse
 Linux system.  Same sort of symptoms, wbinfo would work but getent, etc
 would not. Finally determined that  the ncsd service was interfering with
 the operation of winbind - so it had to be turned off:

   /etc/rc.d/nscd stop
   chkconfig nscd off

 After that, it all worked.
 I'm not familar with FreeBSD, don't even know if there IS an nscd service
 on it, but it's the last thing I can think of. Don

By default it's off, unless you have cached_enable=YES in rc.conf it won't 
run.

You also need to put cache in the nsswitch.conf file, although I've never used 
it :)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgp6jcLzQokZr.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] FreeBSD and Winbind

2007-02-09 Thread Daniel O'Connor
On Saturday 10 February 2007 12:06, [EMAIL PROTECTED] wrote:
[snip]

I've only used smb/nss_ldap and I didn't need to copy it into /usr/lib.

Can you try recompiling nss_winbind with -DDEBUG_NSS? It should print stuff to 
stderr (of the calling application).

Note that this can produce interesting results in some programs because 
there is extra stuff coming out of stderr :)

If you run winbindd with debugging do you see it print debugging messages when 
you run getent/id/etc..?

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgpMXpDy9Y2vM.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] FreeBSD and Winbind

2007-02-08 Thread Daniel O'Connor
On Thursday 08 February 2007 19:15, Rashid N. Achilov wrote:
 Why do you stuck with getent? For getting user and group information you
 can use wbinfo -u and wbinfo -g respectively. For getting group list, which
 belonged some user for, use wbinfo -r username. Or wbinfo
 --user-domgroups SID to getting list, filled with SID's. For getting user
 information use wbinfo -i

wbinfo talks to winbindd, getent uses the same calls as a normal program to 
fetch the DB so you can isolate where the problem lies.

(ie both are useful)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgpBTK1oxj48b.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] FreeBSD and Winbind

2007-02-07 Thread Daniel O'Connor
On Thursday 08 February 2007 10:44, [EMAIL PROTECTED] wrote:
 To be more specific I think I have made a mistake copying the libraries to
 the proper location.  I was not able to find libnss_winbind.so in
 /usr/samba/source/nsswitch.  Instead, I found nss_winbind.so.  Is this the
 correct file to copy?  And, where should these files be copied to on
 FreeBSD?  From what I have read so far, I am guessing these should be
 copied to /usr/lib.

Why aren't you using the port? It should Just Work(tm).

You can keep the nss shared object in /usr/local/lib because FreeBSD will 
mount the disks very early on.

 My nsswitch has the following configuration
 passwd: files winbind
 group: files winbind
 group_compat: nis
 hosts: files dns
 networks: files
 passwd_compat: nis
 shells: files

Try removing the _compat entries.
For LDAP I have this..
group: files ldap
hosts: files dns
networks: files
passwd: files ldap
shells: files

And getent works fine. You could try cranking up debugging in Winbindd too 
(not that I've ever used it)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgpgbTRELUUEI.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] FreeBSD and Winbind

2007-02-07 Thread Daniel O'Connor
On Thursday 08 February 2007 12:00, [EMAIL PROTECTED] wrote:
 Unfortunately, some things came up and I going to be here for a while.
 So, I changed the debug level on winbindd to 5.  Wow, there is a lot
 logged!

 When I use wbinfo -u or wbinfo -g, I can see a request to the DC and
 information being retrieved.  However, when I use getent passwd or getent
 group, nothing is logged by winbindd.  Does this mean the request is not
 getting to winbindd?

Sure looks that way.

Try runnniing winbindd with -i -n 

Try enabling debug logging in syslog (ie touch /var/log/debug.log and 
uncomment the debug line in syslog.conf and restart it)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgpRt3UoteN1N.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] FreeBSD and Winbind

2007-02-07 Thread Daniel O'Connor
On Thursday 08 February 2007 12:26, Alex Wang wrote:
 Where did you find the genent? I installed from the port but I didn't
 find the genent in my FreeBSD system.

It's in 6.2 (and -current)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgp34LEEtzfEn.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profiles won't save

2007-02-03 Thread Daniel O'Connor
On Saturday 13 January 2007 02:20, Jason Martin wrote:
 Hello! I am migrating an old Red Hat Samba 3.0.9 server to a new Debian
 Etch Samba 3.0.23d with an OpenLDAP backend. I've got almost everything
 working with the new server except the roaming profiles. When a user logs
 off, Windows complains that the permissions are not correct and the profile
 can't be saved.

Do you have profile acls = yes in your conf?

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgpZmIpVcsh1k.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Samba PDC roaming profiles problem

2007-01-21 Thread Daniel O'Connor
On Friday 19 January 2007 23:49, Daniel O'Connor wrote:
   Windows cannot copy the file \\midget\profiles\darius\Application
   Data\Ventrilo to location C:\Documents and Settings\darius\Application
   Data\Ventrilo. Possible causes include network problems or insufficient
   security rights. If this problem persists, contact your network
   administrator.

   DETAIL - Configuration information could not be read from the domain
   controller, either because the machine is unavailable, or access has been
   denied.

I just got this one again and had another look through the log file and
found this.
[2007/01/21 21:42:31, 0] lib/util_sock.c:read_data(534)
  read_data: read failure for 4 bytes to client 10.0.2.88. Error = Operation 
timed out

A quick search shows it happens a number of times and always for 4 bytes.

I am guessing this corresponds with the failures to log in and out.. Now to
 work out what the cause is :)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgpHz0JF4g64h.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba PDC roaming profiles problem

2007-01-19 Thread Daniel O'Connor
I am having issues with my roaming profiles setup (small home network)
On login I get errors like..

  Windows cannot copy the file \\midget\profiles\darius\Application 
  Data\Ventrilo to location C:\Documents and Settings\darius\Application 
  Data\Ventrilo. Possible causes include network problems or insufficient 
  security rights. If this problem persists, contact your network 
  administrator.

  DETAIL - Configuration information could not be read from the domain 
  controller, either because the machine is unavailable, or access has been 
  denied.

On logout I have seen errors like the following..
  Windows cannot copy file C:\Documents and Settings\darius\Recent\Temp 
  (2).lnk to location \\midget\profiles\darius\Recent\Temp (2).lnk. Possible 
  cases of this error include network problems or insufficient access rights.  
  If this problem persists, contact your network administrator.

  DETAIL - Cannot create a file when that file already exists.

Although I suspect that is from when I rsync'd my profile to save me losing 
some data. (I didn't specify --delete)

If I login as the machine admin I can remove the profile from it and then 
login to the domain successfully. This is a bit of a drag (I have to reboot 
before Windows will try re-reading the profile from the network, plus the 
time taken to delete and re-copy the profile)

I believe this corresponds with a Samba upgrade (to 3.0.23d) , however I did 
also change my main workstation at around the same time so isolating the 
source of the problem is difficult :(

I've attached my smb.conf and I would attach a log file but I am not sure what 
a good debug level to use to get enough but not too much information.

Note that originally profiles were stored in home directories but I read on 
the Samba Wiki this is not a good idea, however moving them to a separate 
share had no effect on the problem.

Authentication is done via OpenLDAP and the whole lot runs on a FreeBSD 6.x 
system. (All built from ports).

Any input gratefully received.

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C
# Global parameters
[global]
workgroup = LABF
server string = Midget
encrypt passwords = Yes
log file = /var/log/samba/log.%m
max log size = 1024
log level = 1
wins support = Yes
guest account = ftp
level2 oplocks = Yes
printing = CUPS
#logon script = scripts\logon.bat
logon path = \\%L\profiles\%U
logon home = \\%L\%U
logon drive = H:
domain logons = Yes
os level = 35
preferred master = Yes
domain master = Yes
passdb backend = ldapsam:ldap:///var/run/openldap/ldapi;
add user script = /usr/local/sbin/smbldap-useradd -m %u
delete user script = /usr/local/sbin/smbldap-userdel %u
add group script = /usr/local/sbin/smbldap-groupadd -p %g
delete group script = /usr/local/sbin/smbldap-groupdel %g
add user to group script = /usr/local/sbin/smbldap-groupmod -m %u %g
delete user from group script = /usr/local/sbin/smbldap-groupmod -x 
%u %g
set primary group script = /usr/local/sbin/smbldap-usermod -g %g %u
add machine script = /usr/local/sbin/smbldap-useradd -i -w %u
ldap suffix = dc=dons,dc=net,dc=au
ldap admin dn = cn=Manager,dc=dons,dc=net,dc=au
ldap machine suffix = ou=Computers
ldap user suffix = ou=People
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmap
idmap backend = ldap:ldap:///var/run/openldap/ldapi
idmap uid = 1-2
idmap gid = 1-2

[homes]
comment = Home Directories
read only = No
valid users = %S
browseable = No

[netlogon]
comment = Network Logon Service
path = /var/db/samba/netlogon
admin users = root
guest ok = Yes
browseable = No

[profiles]
comment = Roaming Profile Share
path = /data/samba-profiles
read only = No
profile acls = Yes
create mask = 0600
directory mask = 0700
hide files = /desktop.ini/outlook*.lnk/*Briefcase*/

[tmp]
comment = Temp
path = /tmp
read only = No
guest ok = Yes

[cdrom]
comment = CD-Rom
path = /cdrom
read only = Yes

[storage]
comment = Archives
path = /data/storage
read only = No
guest ok = Yes

[images]
comment = Images
path = /data/images/
read only = No
browseable = No

[mods]
comment = Mod Archive
path = /usr/local/mods/
read only = No

[printers]
comment = All Printers
path = /var/spool/samba
print ok

Re: [Samba] Windows XP cannot load roaming profile

2007-01-14 Thread Daniel O'Connor
On Sunday 14 January 2007 18:39, Reza Naima wrote:
 that fixed it, but I dont know why - what's access control lists have to
 do with the problem I was seeing?

Read the manual entry for profile acls - it explains it I believe (basically, 
some versions of windows are more fussy about the profile permissions than 
others).

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgp30nmYB6knb.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows XP cannot load roaming profile

2007-01-13 Thread Daniel O'Connor
On Sunday 14 January 2007 07:24, Gary Dale wrote:
 Try adding set acls = yes to smb.conf and restarting Samba.

Are you sure this is correct? I can't find that option in the man page. There 
is, however, a profile acls option.

(In v 3.0.23 anyway)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C


pgpwHeyNPvtku.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Can't use offline files in Windows 2000 properly

2003-11-27 Thread Daniel O'Connor
On Thursday 27 November 2003 03:40, Nick Gale wrote:
 I was having problems with Offline folders and Samba 2.2.7 (running on RH8)
 and upgraded to 3.0.1Pre and the problem appears to have gone away. I'm not
 using ACL's either. My problem with offline folders was  not on writing
 them to the local machine but on writing them back when it went back on the
 network.

Hmm OK.. I tried a quick test with a crash box and Samba 3.0.0 and it seemed 
to work fine. I used XP Pro for the test as the person with Win2K pro is only 
in the office once a week (hence the need for offline stuff :). Hopefully I 
can upgrade our main file server without too much wailing and gnashing of 
teeth.

 Note that 3.0.0 has a bug that allows certain Office docs - Word and Excel
 to write over a file that is already open on another  machine, hence why I
 went for 3.0.1Pre. I also found that the default settings on 3.0.1 are nt
 acl support = yes, you would need to change that to no.

Hmm OK.
That isn't a huge issue for me, so maybe I'll just take my chances 8-)

 Hope this helps

Yes, thank you for the help!

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 9A8C 569F 685A D928 5140  AE4B 319B 41F4 5D17 FDD5

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Can't use offline files in Windows 2000 properly

2003-11-25 Thread Daniel O'Connor
Hi,
I have Samba 2.2.3a running on a FreeBSD 4.8-STABLE system and a Windows 2000 
Pro laptop.

I am trying to use the offline files feature in windows to keep offline copies 
of some documents but it doesn't appear to play nicely with Samba :(

I setup some documents to sync and it appears to copy them over, and says it 
was successful, but after I go offline they are 0 bytes long and in the magic 
offline folder they are shown as local copy incomplete.

I read http://lists.samba.org/archive/samba/msg75181.html but unfortunately I 
can't use an ACL file system (I don't really want to upgrade to FreeBSD 5.x 
for our main file server at this point :) Updating Samba 3 is probably an 
option if it will work.

I can provide debugging logs, and test patches etc if anyone is interested in 
helping.

FWIW the sync works fine against Win98SE machines so hopefully it will not be 
necessary to implement ACL stuff (pie in the sky dream? :)

Thanks in advance (and for a most useful piece of software)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
The nice thing about standards is that there
are so many of them to choose from.
  -- Andrew Tanenbaum
GPG Fingerprint - 9A8C 569F 685A D928 5140  AE4B 319B 41F4 5D17 FDD5

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba