[Samba] Compiling 3.0.2
I'm not quite sure yet what the problem is, but unknowingly I set two FreeBSD 4.5-RELEASE servers of mine compiling Samba then went away from my desk. Both boxes, within 20 minutes of starting running 'make', rebooted without any seeming warning. I will try and investigate this further, but it happened on both systems which to me seems kind of strange. Has anyone else had this happen to them? (please reply to list and CC to me) Thanks, David -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Charset module could not load
Hello, Everything I've tested so far regarding my Samba 3.0.0 beta 1 installation works great, despite the following error: Error loading module '/usr/local/samba/lib/charset/CP850.so': Cannot open "/usr/local/samba/lib/charset/CP850.so" This error comes up when I run any of the Samba binaries, such as smbpasswd, pdbedit, etc... also it shows up in log.smbd, log.nmbd when either of those are run. I can't find this module anywhere in the source directories or on my system anywhere. Is this supposed to be something that Samba compiles and installs, or am I missing something? This Samba server is running on a FreeBSD 4.5 system. I also have another FreeBSD 4.5 system that does the exact same thing. Has anyone else had this problem? Thanks, David van Geyn -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] After Upgrading to rc4 (and still with 3.0.0) having Groupmap problems.
Hi, Before Samba 3.0.0 RC4 I was running Samba 3.0.0 beta3, and when I upgraded to RC4, I began having problems with group mappings. I didn't notice at first, because on my laptop I don't normally log on to the domain. I just noticed when I tried to use my desktop and log on to the domain... I don't have Domain Admin privileges. So, I look at 'net groupmap list' ... and it shows the Domain Admins group as mapped to the unix group domadm. Looks good, right? Domain Admins (S-1-5-21-3475858016-1413099138-3485012925-512) -> domadm Next I tried deleting that groupmap by using 'net groupmap delete sid=S-1-5-21-347...' Now the groupmap was deleted and now shows this: Domain Admins (S-1-5-21-3475858016-1413099138-3485012925-512) -> -1 So now I try to re-add it: 'net groupmap add ntgroup="Domain Admins" unixgroup=domadm' and list it again. Domain Admins (S-1-5-21-3475858016-1413099138-3485012925-512) -> -1 Domain Admins (S-1-5-21-3475858016-1413099138-3485012925-2161) -> domadm Now there are two Domain Admin mappings, one null (-1) and the new one I just created. As far as I know, that new one should have gone to the one with RID of 512. I checked to be sure, but NT/2000 is definitely looking for the old Domain Admins group with RID of 512, and the Samba PDF doc says Domain Admins should have an RID of 512. So, I tried to add a groupmap with that SID specifically. net groupmap add sid=S-1-5-21-3475858016-1413099138-3485012925-512 unixgroup=domadm And I get this response: adding entry for group domadm failed! So then I try: net groupmap add sid=S-1-5-21-3475858016-1413099138-3485012925-512 ntgroup="Domain Admins" unixgroup=domadm And get the same: adding entry for group Domain Admins failed! I have run out of ideas for getting my groupmap working, but it is becoming very strange to log on to PC's and not have Domain Admin privileges. Hopefully there is an easy fix for this. Anyone have any ideas? If you need any more information, please ask. Thanks in advance, David van Geyn -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] After Upgrading to rc4 (and still with 3.0.0) havingGroupmap problems.
Never would have guessed I needed to "modify" those entries to update them. Anyway, that does work and they are now listed properly: Domain Users (S-1-5-21-3475858016-1413099138-3485012925-513) -> domusr Domain Admins (S-1-5-21-3475858016-1413099138-3485012925-512) -> domadm Domain Guests (S-1-5-21-3475858016-1413099138-3485012925-514) -> domgst My user, 'dvg' is a member of the UNIX group domadm, from /etc/group: domadm:*:580:dvg Now the group Domain Admins, Users & Guests groups are listed in the User Manager tool on Windows, and Domain Admins is (and already was) listed under the local Administrators group. So everything seems like it should work. But I still don't have Domain Admin access on the workstations. Any further ideas? Thanks, David John H Terpstra said: > > To change an existing entry: > > net groupmap modify ntgroup="Domain Admins" unixgroup=root > > To delete the spurious entry: > > net groupmap delete ntgroup="Domain Admins" unixgroup=domadm > > - John T. > > -- > John H Terpstra > Email: [EMAIL PROTECTED] > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba and win95
Which version of Samba are you running? I believe that userlists for Win9x systems were not implemented until Samba 2.2.0. HTH, David van Geyn - Original Message - From: "Cristian Mijea" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, May 10, 2002 7:52 AM Subject: [Samba] samba and win95 > > I'm running a smb server on a redhat 7.2 system. everything works just fine except when I try to share something on a win95 machine (user level). The win95 machine can't access the list of users provided by samba. ("You can not view a list of users at this time.") > Anyone know why? > > Tks.! > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Trouble browsing on different nets.
I believe your broadcast addresses on the linux box are set wrong. If you are using 192.168.111.0/24 and 192.168.222.0/24 as your IP networks, you should be using 192.168.111.255 and 192.168.222.255 as your broadcast addresses respectively. This may be why the Windows machines aren't picking up NetBios broadcasts from the Samba server. HTH, David van Geyn - Original Message - From: Anders Norrbring To: [EMAIL PROTECTED] Sent: Saturday, May 25, 2002 7:05 AM Subject: [Samba] Trouble browsing on different nets. Im not sure if this even SHOULD work I cant find anything really useful in the documentation. I have a RedHat 7.3 system in the DMZ of our network, its address is 192.168.222.10, broadcast address is 192.168.222.254 I firewall, linux based with 3 ports, the 192.168.222.0 net (DMZ), the outside world on one port and the internal network is 192.168.111.0, broadcasting on 192.168.111.254. So, on the internal network are Windows XP workstations, these can search computers and find the linux on the DMZ by name, they can connect to it if given the network address or name (the name network address translation is done in the Windows hosts files) and also browse the samba shares. BUT Heres the problem The linux (Samba) server never shows up in the Windows Network neighbourhood, which would be very good for those who arent too familiar with networking. Can anyone please help me out here? Thank you, Anders.
Re: [Samba] MSDOS on my network
The Microsoft Network Client v3.0 supports TCP/IP. I use it for installing Windows OS's on my workstations, instead of carrying around a whole bunch of CD's. Of course, my systems all have the same network card or I would have to carry around a bunch of bootdisks too. I have some bootdisks that are pre-made for several different network cards at http://www.vangeyn.net/netdisks/ , just incase you have the same NIC and don't want to make a bootdisk yourself. HTH, David van Geyn - Original Message - From: "Alex" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, September 22, 2002 4:14 PM Subject: [Samba] MSDOS on my network > Hello, > I am looking for the first time at setting up Linux with Samba as a primary > server on our network. I would like to replace my SCO Unix system and a > Windows box I use to serve MSDOS machines. The MSDOS server seems to be the > stumbling block at this point in my research. I can only run netbEUI on > them as far as I know and Samba seems to only talk on TCP/IP. Do you know > of a solution? > Thanks for any help, > Alex Janssen > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 2.2.6 and RAS
You can always make a local group on the server that the RAS users will be dialing in to and add the users from the Samba domain to that local group, then set the local group to be allowed RAS logins. I believe I did this a while back and it worked alright. It's a bit of a pain if you have multiple RAS servers, but if you've only got one it's pretty easy. David. - Original Message - From: "Andrew Bartlett" <[EMAIL PROTECTED]> To: "Andreas Lindenbauer" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Thursday, October 24, 2002 10:27 AM Subject: Re: [Samba] Samba 2.2.6 and RAS > Andreas Lindenbauer wrote: > > > > Hi ! > > > > Does anyone know a possibility to allow RAS-Dialin for users in a fully > > Samba-controlled Domain ? > > Tried usrmgr in Windows, but got only errors. (Should this work ?) > > Is there a possibility to make it on the command-line ? (Need not store the > > callback-number) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Samba 3.0alpha24 available
How soon are we looking at a beta release of Samba 3.0? I really don't want to try it on a production server at least until there's a beta release. I've been testing the alpha versions in another domain, but since it's not production it doesn't really get much testing at all. Thx David van Geyn -remove NOSPAM from e-mail to reply > Gerald (Jerry) Carter wrote: >> Heads up, >> >> Samba 3.0alpha24 is available for download. >> See http://samba.org/ for details. Enjoy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.0beta1, NT4 Joining a Domain Problems
Hi, I'm trying to test Samba 3.0.0 beta 1, and so far, one problem I have spent the last couple hours trying to solve, is a problem I am having joining the domain with an NT4 workstation. The samba server is a PDC, and when I try to join the workstation to the samba controlled domain using the root account (which worked on Samba 2.2.8 just fine), I get a message on the NT workstation that it was not able to contact the domain controller - check the username and password. The NT workstation's name is CMBN-B03, and CMBN-B03$ is in my unix password file just as I did with Samba 2.2.8. If I fire up 2.2.8 instead of 3.0.0, it can join the domain fine. I have attached a log of level = 4 to this e-mail, but it doesn't seem to yield much information. It gives the code NT_STATUS_UNSUCCESSFUL - Maybe i'm missing something simple, but I've spent the last couple hours trying to figure this out. Any help would be appreciated! Regards, -David van Geyn -remove NOSPAM from e-mail to reply[2003/06/08 20:49:35, 3] smbd/process.c:process_smb(882) Transaction 1 of length 174 [2003/06/08 20:49:35, 3] smbd/process.c:switch_message(676) switch message SMBnegprot (pid 93994) [2003/06/08 20:49:35, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/06/08 20:49:35, 3] smbd/negprot.c:reply_negprot(439) Requested protocol [PC NETWORK PROGRAM 1.0] [2003/06/08 20:49:35, 3] smbd/negprot.c:reply_negprot(439) Requested protocol [XENIX CORE] [2003/06/08 20:49:35, 3] smbd/negprot.c:reply_negprot(439) Requested protocol [MICROSOFT NETWORKS 1.03] [2003/06/08 20:49:35, 3] smbd/negprot.c:reply_negprot(439) Requested protocol [LANMAN1.0] [2003/06/08 20:49:35, 3] smbd/negprot.c:reply_negprot(439) Requested protocol [Windows for Workgroups 3.1a] [2003/06/08 20:49:35, 3] smbd/negprot.c:reply_negprot(439) Requested protocol [LM1.2X002] [2003/06/08 20:49:35, 3] smbd/negprot.c:reply_negprot(439) Requested protocol [LANMAN2.1] [2003/06/08 20:49:35, 3] smbd/negprot.c:reply_negprot(439) Requested protocol [NT LM 0.12] [2003/06/08 20:49:35, 3] smbd/negprot.c:reply_nt1(307) not using SPNEGO [2003/06/08 20:49:35, 3] smbd/negprot.c:reply_negprot(516) Selected protocol NT LM 0.12 [2003/06/08 20:49:35, 3] smbd/process.c:process_smb(882) Transaction 2 of length 270 [2003/06/08 20:49:35, 3] smbd/process.c:switch_message(676) switch message SMBsesssetupX (pid 93994) [2003/06/08 20:49:35, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/06/08 20:49:35, 3] smbd/sesssetup.c:reply_sesssetup_and_X(547) wct=13 flg2=0x8003 [2003/06/08 20:49:35, 3] smbd/sesssetup.c:reply_sesssetup_and_X(654) Domain=[CMBN-B03] NativeOS=[Windows NT 1381] NativeLanMan=[] [2003/06/08 20:49:35, 3] smbd/sesssetup.c:reply_sesssetup_and_X(665) sesssetupX:[EMAIL PROTECTED] [2003/06/08 20:49:35, 4] lib/username.c:map_username(132) Scanning username map /usr/local/samba3/lib/users.map [2003/06/08 20:49:35, 3] lib/username.c:map_username(173) Mapped user administrator to root [2003/06/08 20:49:35, 3] auth/auth.c:check_ntlm_password(216) check_ntlm_password: Checking password for unmapped user [EMAIL PROTECTED] with the new password interface [2003/06/08 20:49:35, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: mapped user is: [EMAIL PROTECTED] [2003/06/08 20:49:35, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2003/06/08 20:49:35, 3] smbd/uid.c:push_conn_ctx(287) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2003/06/08 20:49:35, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/06/08 20:49:35, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/06/08 20:49:35, 4] auth/auth_sam.c:sam_password_ok(217) sam_password_ok: Checking NT MD4 password [2003/06/08 20:49:35, 4] auth/auth_sam.c:sam_account_ok(323) sam_account_ok: Checking SMB password for user root [2003/06/08 20:49:35, 0] auth/auth_sam.c:check_sam_security(458) check_sam_security: make_server_info_sam() failed with 'NT_STATUS_UNSUCCESSFUL' [2003/06/08 20:49:35, 2] auth/auth.c:check_ntlm_password(295) check_ntlm_password: Authentication for user [administrator] -> [root] FAILED with error NT_STATUS_UNSUCCESSFUL [2003/06/08 20:49:35, 3] smbd/error.c:error_packet(94) error string = Invalid argument [2003/06/08 20:49:35, 3] smbd/error.c:error_packet(113) error packet at smbd/sesssetup.c(749) cmd=115 (SMBsesssetupX) NT_STATUS_UNSUCCESSFUL [2003/06/08 20:49:35, 3] smbd/process.c:timeout_processing(1095) end of file from client [2003/06/08 20:49:35, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/06/08 20:49:35, 2] smbd/server.c:exit_server(558) Closing connections [2003/06/08 20:49:35, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2003/06/08 20:49:35, 3] smbd/server.c:exit_server(
[Samba] Root user problems with Samba 3.0.0beta1
Hello Anytime I try to do anything with the root user (like join the domain) or run 'net user' or 'net group' with root, when I enter the correct password, I get NT_STATUS_UNSUCCESSFUL I've been trying more commands, and if I run tdbedit -e=tdbsam (to export the smbpasswd to tdbsam style), I get this error : tdb_update_sam: Failing to store a SAM_ACCOUNT for [root] without a primary group RID What does it mean Root does not have a primary group RID? I suspect this may be the cause of the NT_STATUS_UNSUCCESSFUL messages. Any ideas? Thanks, -David van Geyn -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Root user problems with Samba 3.0.0beta1
Attached is smb.conf - I tried also setting passdb backend = tdbsam, guest, but it won't let me add the root user to the pass database. eg, using smbpasswd radium# ./smbpasswd -a root New SMB password: Retype new SMB password: tdb_update_sam: Failing to store a SAM_ACCOUNT for [root] without a primary group RID Failed to add entry for user root. Failed to modify password entry for user root Thanks , David > David, > > Please email me your smb.conf file, I'll take a look. > > - John T. > > On Wed, 11 Jun 2003, David van Geyn wrote: > >> Hello >> >> Anytime I try to do anything with the root user (like join the domain) >> or >> run 'net user' or 'net group' with root, when I enter the correct >> password, I get NT_STATUS_UNSUCCESSFUL >> >> I've been trying more commands, and if I run tdbedit -e=tdbsam (to >> export >> the smbpasswd to tdbsam style), I get this error : >> >> tdb_update_sam: Failing to store a SAM_ACCOUNT for [root] without a >> primary group RID >> >> What does it mean Root does not have a primary group RID? I suspect this >> may be the cause of the NT_STATUS_UNSUCCESSFUL messages. >> >> Any ideas? >> >> Thanks, >> >> -David van Geyn >> > > -- > John H Terpstra > Email: [EMAIL PROTECTED] > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -David van Geyn# Samba config file created using SWAT # from 127.0.0.1 (127.0.0.1) # Date: 2003/06/11 14:56:03 # Global parameters [global] workgroup = SAMBA3 netbios name = TEST server string = CMBN Local Samba Server v%v interfaces = 172.20.1.8/26 passdb backend = tdbsam, guest guest account = guest username map = /usr/local/samba3/lib/users.map log level = 1 log file = /usr/local/samba3/var/log.%m max log size = 50 time server = Yes socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 load printers = No logon script = %U.bat logon path = logon drive = H: logon home = admin users = dataiv domain logons = Yes os level = 65 preferred master = Yes domain master = Yes dns proxy = No wins server = 172.20.1.1 oplock break wait time = 10 socket address = 172.20.1.8 printer admin = dataiv hosts allow = 172.20., 127., 209.162.252.83 print command = /usr/bin/lpr -r -P%p %s lpq command = /usr/bin/lpq -P%p lprm command = /usr/bin/lprm -P%p %j [apps] comment = Tools and Drivers path = /usr/home/apps admin users = dataiv read only = No [avg] path = /store2/avg valid users = avg, dataiv force user = avg read only = No create mask = 0700 directory mask = 0700 [dvg] path = /home/dvg valid users = dataiv force user = dvg read only = No create mask = 0755 [epson] path = /tmp guest ok = Yes min print space = 2500 max print jobs = 50 printable = Yes [home] comment = Home Directory path = /home/%u read only = No create mask = 0755 directory mask = 0700 [netlogon] comment = Network Logon Service path = /usr/local/samba/lib/netlogon admin users = dataiv read only = No [print$] path = /usr/local/samba/lib/printers admin users = dataiv read only = No guest ok = Yes [storage] comment = Storage Repository path = /store/storage admin users = dataiv read only = No [svg] path = /store2/svg valid users = svg, dataiv force user = svg read only = No create mask = 0700 directory mask = 0700 [temp] comment = Temporary File Storage path = /tmp admin users = dataiv read only = No guest ok = Yes [virtcd] comment = Virtual CDs - ISOs path = /store2/virtcd read only = No [webhost] comment = Web Hosting Directories path = /usr/home/vhost valid users = dataiv, atc747 admin users = dataiv read only = No-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Root user problems with Samba 3.0.0beta1
Here's what I tested... rm -rf /usr/local/samba3 to delete the new samba installation cd /tmp/samba-3.0.0beta1 make install cp /tmp/smb.conf /usr/local/samba3/lib cd /usr/local/samba3/bin ./smbpasswd -a root New SMB password: Retype new SMB password: pdb_getsampwnam: Unable to open TDB passwd (/usr/local/samba3/private/passdb.tdb)! Added user root. The user root is now added... what I had done before was that I had copied my samba 2.2.8 folder to samba3, and then run make install so it would 'upgrade'. I guess that didn't work out properly. Now my only question that remains, how do I get the old machine trust accounts from samba 2.2.8 over to the new tdbsam database correctly, and also, how do I keep the old domain's SID (or whatever it is) - So that all the machines don't need to be re-joined to a new domain. Is it possible? Thanks, David > On Wed, 11 Jun 2003, David van Geyn wrote: > >> Attached is smb.conf - I tried also setting passdb backend = tdbsam, >> guest, but it won't let me add the root user to the pass database. > > 1. Suggest you remove: > interfaces > socket address > > 2. Stop samba > > 3. Delete all *.tdb files > > 4. Add to your smb.conf file the interface scripts needed to add user and > machine accounts as well as groups, etc. > > 5. Restart samba > > 6. Run: > smbpasswd -a root > as the first thing you do. > > Please let me know how this goes. Attached is my working smb.conf file > FYI. > > - John T. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Root user problems with Samba 3.0.0beta1
Hi, I have now successfully got Samba 3.0.0 authenticating my users and the old machine trust accounts are working fine. Two more questions for you though! :-) 1) How do I make a user other than root have the ability to modify parameters in Windows NT User Manager for Domains - If I log in to the workstation as root, then I can modify the users, etc... but not as my other administrative user. Is there a way to get around this? 2) These errors come up with any Samba binary when I run them. They are all looking for some charset thing called CP850.so which I cannot find anywhere on my system or in the samba tree. Am I missing something obvious here? Error loading module '/usr/local/samba/lib/charset/CP850.so': Cannot open "/usr/local/samba/lib/charset/CP850.so" Conversion from UCS-2LE to CP850 not supported Error loading module '/usr/local/samba/lib/charset/CP850.so': Cannot open "/usr/local/samba/lib/charset/CP850.so" Conversion from UTF8 to CP850 not supported Error loading module '/usr/local/samba/lib/charset/CP850.so': Cannot open "/usr/local/samba/lib/charset/CP850.so" Conversion from ASCII to CP850 not supported Error loading module '/usr/local/samba/lib/charset/CP850.so': Cannot open "/usr/local/samba/lib/charset/CP850.so" Conversion from CP850 to UCS-2LE not supported Error loading module '/usr/local/samba/lib/charset/CP850.so': Cannot open "/usr/local/samba/lib/charset/CP850.so" Conversion from CP850 to UTF8 not supported Error loading module '/usr/local/samba/lib/charset/CP850.so': Cannot open "/usr/local/samba/lib/charset/CP850.so" Conversion from CP850 to ASCII not supported Error loading module '/usr/local/samba/lib/charset/CP850.so': Cannot open "/usr/local/samba/lib/charset/CP850.so" Conversion from CP850 to UTF8 not supported Error loading module '/usr/local/samba/lib/charset/CP850.so': Cannot open "/usr/local/samba/lib/charset/CP850.so" Conversion from UTF8 to CP850 not supported Thanks, David -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba