Re: [Samba] Failed to setup guest info

2006-09-06 Thread Dean Crawford

Thanks for the quick response.

After pdbedit -x nobody
pdbedit -Lv nobody reports

The LDAP server is succesfully connected
pdb backend ldapsam:ldap://127.0.0.1 has a valid init
smbldap_search_ext: base = [dc=CRAWFORD_HOUSE,dc=NET], filter = 
[((uid=nobody)(objectclass=sambaSamAccount))], scope = [2]

ldapsam_getsampwnam: Unable to locate user [nobody] count=0
Username not found!

I still end up with the same error in log.smdb
[2006/09/06 06:43:13, 6] passdb/pdb_interface.c:pdb_getsampwsid(320)
 pdb_getsampwsid: Building guest account
[2006/09/06 06:43:13, 5] lib/smbldap.c:smbldap_search_ext(1179)
 smbldap_search_ext: base = [ou=Group,dc=CRAWFORD_HOUSE,dc=NET], 
filter = [((objectClass=sambaGroupMapping)(gidNumber=65534))], scope 
= [2]

[2006/09/06 06:43:13, 3] passdb/lookup_sid.c:store_gid_sid_cache(1038)
 store_gid_sid_cache: gid 65534 in cache - S-1-22-2-65534
[2006/09/06 06:43:13, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999)
 fetch gid from cache 65534 - S-1-22-2-65534
[2006/09/06 06:43:13, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
 pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/09/06 06:43:13, 3] smbd/sec_ctx.c:push_sec_ctx(208)
 push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2006/09/06 06:43:13, 3] smbd/uid.c:push_conn_ctx(345)
 push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2006/09/06 06:43:13, 3] smbd/sec_ctx.c:set_sec_ctx(241)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/09/06 06:43:13, 5] auth/auth_util.c:debug_nt_user_token(449)
 NT user token: (NULL)
[2006/09/06 06:43:13, 5] auth/auth_util.c:debug_unix_user_token(475)
 UNIX token of user 0
 Primary group is 0 and contains 0 supplementary groups
[2006/09/06 06:43:13, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
 pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/09/06 06:43:13, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(979)
 fetch sid from gid cache 65534 - S-1-22-2-65534
[2006/09/06 06:43:13, 5] auth/auth_util.c:make_server_info_sam(603)
 make_server_info_sam: made server info for user nobody - nobody
[2006/09/06 06:43:13, 5] lib/smbldap.c:smbldap_search_ext(1179)
 smbldap_search_ext: base = [ou=Group,dc=CRAWFORD_HOUSE,dc=NET], 
filter = [((objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))], 
scope = [2]

[2006/09/06 06:43:13, 5] lib/smbldap.c:smbldap_search_ext(1179)
 smbldap_search_ext: base = [ou=Group,dc=CRAWFORD_HOUSE,dc=NET], 
filter = [((objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))], 
scope = [2]

[2006/09/06 06:43:13, 5] lib/smbldap.c:smbldap_search_ext(1179)
 smbldap_search_ext: base = [ou=Group,dc=CRAWFORD_HOUSE,dc=NET], 
filter = 
[((|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-5-21-3036719436-1097781103-347993853-501)(sambaSIDList=S-1-22-2-65534)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-32-546)))], 
scope = [2]

[2006/09/06 06:43:13, 0] smbd/server.c:main(960)
 ERROR: failed to setup guest info.

Dumping pbdedit I see a group nobody still listed
# nobody, Groups, CRAWFORD_HOUSE.NET
dn: cn=nobody,ou=Groups,dc=CRAWFORD_HOUSE,dc=NET
objectClass: posixGroup
cn: nobody
gidNumber: 1000

trying to remove this gave a cannot remove user's primary group error.  
No users are mapped to this group.


Also in the dump I notice that none of the SID's on the line that fails 
are listed.


Thanks

Dean


Gerald (Jerry) Carter wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Dean Crawford wrote:

  
Reading some of the other threads I've also pulled 
this further information in a hope someone can

point me in the right direction to get this
working.

Extract from pdbedit -Lv nobody

Opening cache file at /var/cache/samba/login_cache.tdb
Looking up login cache for user nobody
No cache entry found
No cache entry, bad count = 0, bad time = 0
Unix username:nobody
NT username:  nobody
Account Flags:[NDU]
User SID: S-1-5-21-3036719436-1097781103-347993853-2998



You've got the wrong SID for the guest account.

pdbedit -x nobody

Samba will handle managing the guest user for you.





cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFE/sWFIR7qMdg1EfYRAsK5AKDHh8zqDknFQrWHgyDeMk4Tpr0YDgCgrFBB
ifR/wOp3VJ+J5E9iC2aCmOk=
=7nTZ
-END PGP SIGNATURE-

  

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Failed to setup guest info

2006-09-05 Thread Dean Crawford
Reading some of the other threads I've also pulled this further 
information in a hope someone can point me in the right direction to get 
this working.


Extract from pdbedit -Lv nobody

Opening cache file at /var/cache/samba/login_cache.tdb
Looking up login cache for user nobody
No cache entry found
No cache entry, bad count = 0, bad time = 0
Unix username:nobody
NT username:  nobody
Account Flags:[NDU]
User SID: S-1-5-21-3036719436-1097781103-347993853-2998
smbldap_search_ext: base = [ou=Group,dc=CRAWFORD_HOUSE,dc=NET], filter 
= [((objectClass=sambaGroupMapping)(gidNumber=65534))], scope = [2]

Primary Group SID:S-1-5-21-3036719436-1097781103-347993853-513
Full Name:nobody
Home Directory:   \\PDC-SRV\nobody
HomeDir Drive:H:
Logon Script:
Profile Path: \\PDC-SRV\profiles\nobody
Domain:   CRAWFORD_HOUSE

/var/log/samba/log.smbd with  log level = 9
[2006/09/05 22:24:13, 6] passdb/pdb_interface.c:pdb_getsampwsid(320)
pdb_getsampwsid: Building guest account
[2006/09/05 22:24:13, 5] lib/smbldap.c:smbldap_search_ext(1179)
smbldap_search_ext: base = [ou=Group,dc=CRAWFORD_HOUSE,dc=NET], filter 
= [((objectClass=sambaGroupMapping)(gidNumber=65534))], scope = [2]

[2006/09/05 22:24:13, 3] passdb/lookup_sid.c:store_gid_sid_cache(1038)
store_gid_sid_cache: gid 65534 in cache - S-1-22-2-65534
[2006/09/05 22:24:13, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999)
fetch gid from cache 65534 - S-1-22-2-65534
[2006/09/05 22:24:13, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/09/05 22:24:13, 3] smbd/sec_ctx.c:push_sec_ctx(208)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2006/09/05 22:24:13, 3] smbd/uid.c:push_conn_ctx(345)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2006/09/05 22:24:13, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/09/05 22:24:13, 5] auth/auth_util.c:debug_nt_user_token(449)
NT user token: (NULL)
[2006/09/05 22:24:13, 5] auth/auth_util.c:debug_unix_user_token(475)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2006/09/05 22:24:13, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/09/05 22:24:13, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(979)
fetch sid from gid cache 65534 - S-1-22-2-65534
[2006/09/05 22:24:13, 5] auth/auth_util.c:make_server_info_sam(603)
make_server_info_sam: made server info for user nobody - nobody
[2006/09/05 22:24:13, 5] lib/smbldap.c:smbldap_search_ext(1179)
smbldap_search_ext: base = [ou=Group,dc=CRAWFORD_HOUSE,dc=NET], filter 
= [((objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))], scope = 
[2]

[2006/09/05 22:24:13, 5] lib/smbldap.c:smbldap_search_ext(1179)
smbldap_search_ext: base = [ou=Group,dc=CRAWFORD_HOUSE,dc=NET], filter 
= [((objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))], scope = 
[2]

[2006/09/05 22:24:13, 5] lib/smbldap.c:smbldap_search_ext(1179)
 smbldap_search_ext: base = [ou=Group,dc=CRAWFORD_HOUSE,dc=NET], 
filter = 
[((|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-5-21-3036719436-1097781103-347993853-501)(sambaSIDList=S-1-22-2-65534)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-32-546)))], 
scope = [2]

[2006/09/05 22:24:13, 0] smbd/server.c:main(960)
ERROR: failed to setup guest info.

Thanks

Dean Crawford



Dean Crawford wrote:
I've been trying for the past week to get Samba and LDAP to work 
together as a PDC on my Gentoo box and allow some XP boxes to get in.


I've read and followed the how-to's (emerged and unmergred more then a 
few times)


My LDAP accounts all seem to work when I do the ssh test into them.

Changing the domain in XP fails with the network path not found 
error even after all the registry tweaks. While tring to work through 
this issue I discoved that smbd is not starting correctly.


Code:
thebird # tail /var/log/samba/log.smbd
[2006/08/24 20:28:01, 3] smbd/uid.c:push_conn_ctx(345)
 push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2006/08/24 20:28:01, 3] smbd/sec_ctx.c:set_sec_ctx(241)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/08/24 20:28:01, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
 pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/08/24 20:28:01, 3] 
passdb/lookup_sid.c:fetch_sid_from_gid_cache(979)

 fetch sid from gid cache 65534 - S-1-22-2-65534
[2006/08/24 20:28:01, 0] smbd/server.c:main(960)
 ERROR: failed to setup guest info.


I'm thinking that the failed to setup guest info needs to be the first 
thing fixed. I thought I had disabled guest accounts in my smb.conf so 
don't understand why it fails.


I have samba-3.0.23a installed. Here is my smb.conf. I don't have 
networked printers so I commented out all the printer calls.


Code:
#=== Global Settings 
=

[global]

# 1. Server Naming Options:
  workgroup = CRAWFORD_HOUSE
  netbios name = TheBird
  server string = LDAP PDC

[Samba] Failed to setup guest info

2006-09-04 Thread Dean Crawford
/samba/netlogon
#  guest ok = no
  path = /var/lib/samba/netlogon
  browseable = no
  write list = root

# Un-comment the following to provide a specific roving profile share
# the default is to use the user's home directory
[profiles]
  path = /var/lib/samba/profiles
  writable = yes
  browsable = no
  create mode = 0644
  directory mode = 0755
  guest ok = no

;[printers]
;   comment = All Printers
;   path = /var/spool/samba
;   browseable = no
# to allow user 'guest account' to print.
#   guest ok = yes
;   writable = no
;   printable = yes
   create mode = 0700
# =
# print command: see above for details.
# =
;   print command = lpr-cups -P %p -o raw %s -r   # using client side 
printer drivers.
;   print command = lpr-cups -P %p %s # using cups own drivers (use 
generic PostScript on clients).

# The following two commands are the samba defaults for printing=cups
# change them only if you need different options:
;   lpq command = lpq -P %p
;   lprm command = cancel %p-%j

;[print$]
;   path = /var/lib/samba/printers
;   browseable = yes
;   read only = yes
;   write list = @adm root
#   guest ok = yes

# A publicly accessible directory, but read only, except for people in
# the staff group
[public]
   comment = Public Stuff
   path = /public
   public = yes
   browseable = yes
   write list = @users

testparm seems to indicate no error

Code:
thebird # testparm -v
Load smb config files from /etc/samba/smb.conf
Processing section [homes]
Processing section [netlogon]
Processing section [profiles]
Processing section [public]
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC

Both getent passwd and getent group show nobody listed.


When I stop samba smbd comes up with [!!]

My wife would really appreciate any help in pointing me in the correct 
direction so I can again spend time with her again.


Thanks

Dean Crawford
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba