Re: [Samba] Still mandatory profiles, every user same profile
Hi Ulrich, I have a similar problem like you described: I want several users to authenticate in your windows machine with your specific login/pass, but all of them use the same mandatory fixed roaming profile. Have you succeeded your setup with the Barlett sugestions? In that case, can you post your solution? Regards, -- Joel Franco Guzmán -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] upgrading samba
Hummm. Build from scratch.. I understand that the data files live in /var/lib (except the bind, where it lives in /var/cache/bind). But if your files are there... You should pay attention in the *tdb files yes. This are the data files, and the files that live in /etc. 2009/9/22 Bill Szkotnicki b...@uoguelph.ca: Thanks. In my case the .tdb files are in /var/cache/samba Is there a possibility that there are other files anywhere else? 1) /etc/samba 2) /var/cache/samba I was thinking of building from sources and then just trying the new daemon. That way I could go back to the old one easily if necessary. Joel Franco Guzmán wrote: Hi, I use debian but this should be similar. To backup your important files, backup the /etc/samba and /var/lib/samba directories doing like this, after stop the samba daemon: # cp -a /var/lib/samba /var/lib/samba.bak # cp -a /etc/samba /etc/samba.bak Then you could do the upgrade. If something goes wrong, reinstall the old version and restore the copied directories. Regards, # cp -a /var/lib/samba /var/lib/samba.bak # cp -a /etc/samba /etc/samba.bak Then you could do the upgrade. If something goes wrong, reinstall 2009/9/21 Bill Szkotnicki b...@uoguelph.ca: Hi, I would like to appempt a SAFE upgrade on my samba server. ( Centos 5.2 ) Currently the version is: # /usr/sbin/smbd -V Version 3.0.28-1.el5_2.1 There are many users logging on to it and accessing the shares. The last time I tried this ( quite a while ago ) something broke and we had to re-join many windows machines. It would be nice to have a strategy for rolling back if something does not work. Where are all of the important files? Would anyone have any advice, suggestions, indications of what to read, etc...? Thanks, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] samba slave with winbind fails to communicate with the PDC
Hi all, After the net rpc join successfuly established to the Samba PDC (net rpc testjoin ok), the following commands fail: # wbinfo -u Error looking up domain users # wbinfo -g Error looking up domain groups #wbinfo -t checking the trust secret via RPC calls failed Could not check secret # net rpc testjoin Join to 'RSP' is OK It appears that, still under valid relationship with the PDC Samba server, the winbind does not get the list from the PDC. I have zeroed this server /var/lib/samba and started samba and winbind again, rejoined the domain successfuly, but i can't get wbinfo work. My /etc/nsswitch.conf: passwd: compat winbind group: compat winbind shadow: compat #hosts: files dns wins hosts: files dns networks: files protocols: db files services: db files ethers: db files rpc: db files netgroup: nis and my /etc/samba/smb.conf: [global] workgroup = RSP server string = Ultra server wins server = 172.17.1.9 dns proxy = yes log file = /var/log/samba/log.%m max log size = 1000 syslog = 0 panic action = /usr/share/samba/panic-action %d encrypt passwords = true passdb backend = tdbsam load printers = no socket options = TCP_NODELAY security = domain password server = MYPDCSERVER idmap uid = 1-3 idmap gid = 1-3 The samba version in the PDC Server is exactly the samba that of this server. Please, what should i do? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] upgrading samba
Hi, I use debian but this should be similar. To backup your important files, backup the /etc/samba and /var/lib/samba directories doing like this, after stop the samba daemon: # cp -a /var/lib/samba /var/lib/samba.bak # cp -a /etc/samba /etc/samba.bak Then you could do the upgrade. If something goes wrong, reinstall the old version and restore the copied directories. Regards, # cp -a /var/lib/samba /var/lib/samba.bak # cp -a /etc/samba /etc/samba.bak Then you could do the upgrade. If something goes wrong, reinstall 2009/9/21 Bill Szkotnicki b...@uoguelph.ca: Hi, I would like to appempt a SAFE upgrade on my samba server. ( Centos 5.2 ) Currently the version is: # /usr/sbin/smbd -V Version 3.0.28-1.el5_2.1 There are many users logging on to it and accessing the shares. The last time I tried this ( quite a while ago ) something broke and we had to re-join many windows machines. It would be nice to have a strategy for rolling back if something does not work. Where are all of the important files? Would anyone have any advice, suggestions, indications of what to read, etc...? Thanks, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] samba 3.0.23a = 3.0.26a - simple config, working fine
Hello Diego, I effectively encountered problems with shares mappings. Disconnecting and reconnecting the drives resolved it in all cases. Max Le jeudi 27 septembre 2007 à 07:32 -0400, Diego Julian Remolina a écrit : Mostly a suggestion to a problem you may find to a change performed in 3.0.25 and above. From: http://us1.samba.org/samba/history/samba-3.0.25a.html Changes to MS-DFS Root Share Behavior = Please be aware that the initial value for the msdfs root share parameter was changed in the 3.0.25 release series and that this option is now disabled by default. Windows clients frequently require a reboot in order to clear any cached information about MS-DFS root shares on a server and you may experience failures accessing file services on Samba 3.0.25 servers until the client reboot is performed. Alternately, you may explicitly re-enable the parameter in smb.conf. Please refer to the smb.conf(5) man page for more details. The sympton you will see is that some of the previously mapped network drives will give you a permission denied on certain machines. Sometimes even a reboot will not fix it and basically you need to un-mount then re-mount the share on the same drive letter and things will start working. HTH and saves you some time... ;) Diego Massimiliano Franco wrote: Hello Samba list, I upgraded last week from 3.0.23a to 3.0.26a without any problem. I use samba as Domain controller, shares, and printer server through Cups. No Active directory or LDAP. Upgrade went smoothly. Thanks to all developers for their jobs. Very much appreciated here ! Max -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba 3.0.23a = 3.0.26a - simple config, working fine
Hello Samba list, I upgraded last week from 3.0.23a to 3.0.26a without any problem. I use samba as Domain controller, shares, and printer server through Cups. No Active directory or LDAP. Upgrade went smoothly. Thanks to all developers for their jobs. Very much appreciated here ! Max -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Logging AD domain name in access.log
Hi to all. Using Samba 3.0.22 on 2 identical systems (SLES 10). On the first system, Samba logs correctly AD domain name and user in the form DOMAIN+username in access.log. On the second one, it logs only the username, stripping away the domain name. The only difference is that the first system is part of a network with a w2003 server acting as a domain controller, while the second machine talks to a w2000 server. I don't think that could be the reason, but... Anyone has had the same behavior? Thanks -- Gian Franco Baroni Technical Manager First Solution Srl Questa e-mail può contenere informazioni confidenziali. Se non siete il destinatario oppure avete ricevuto questa e-mail per errore, vi preghiamo di segnalare l'accaduto al mittente. Inoltre siete invitati a cancellare questa e-mail immediatamente. Qualsiasi uso non autorizzato (copia, diffusione, etc.) del materiale presente in questa e-mail è severamente vietato. === This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and then destroy this e-mail. Any unauthorized copying, disclosure or distribution of the contents in this e-mail is strictly forbidden. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
R: Re: [Samba] Logging AD domain name in access.log
Il Venerdì 3 Novembre 2006 alle 13.09, Cleber P. de Souza [EMAIL PROTECTED] ha scritto: Check this values on your settings. Checked. But settings are identical in both smb.conf, including use deafult domain... I wrote access.log in subject, because I'm using ntlm_auth with squid and I'm reading that file. But I know that squid takes what's coming from Samba. Thanks -- Gian Franco Baroni Technical Manager First Solution Srl Questa e-mail può contenere informazioni confidenziali. Se non siete il destinatario oppure avete ricevuto questa e-mail per errore, vi preghiamo di segnalare l'accaduto al mittente. Inoltre siete invitati a cancellare questa e-mail immediatamente. Qualsiasi uso non autorizzato (copia, diffusione, etc.) del materiale presente in questa e-mail è severamente vietato. === This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and then destroy this e-mail. Any unauthorized copying, disclosure or distribution of the contents in this e-mail is strictly forbidden. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
R: Re: [Samba] Logging AD domain name in access.log - SOLVED
Ok, I simply put a # at the beginning of the line: winbind use default domain Restarted all the services and now I got the full log (domain name + username) Thank you -- Gian Franco Baroni Technical Manager First Solution Srl Questa e-mail può contenere informazioni confidenziali. Se non siete il destinatario oppure avete ricevuto questa e-mail per errore, vi preghiamo di segnalare l'accaduto al mittente. Inoltre siete invitati a cancellare questa e-mail immediatamente. Qualsiasi uso non autorizzato (copia, diffusione, etc.) del materiale presente in questa e-mail è severamente vietato. === This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and then destroy this e-mail. Any unauthorized copying, disclosure or distribution of the contents in this e-mail is strictly forbidden. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem with 3.0.23 upgrade from 3.0.22 with rfc2307 patch
I think the release notes for the 3.0.23b has the response:
Member servers, domain accounts, and smb.conf
=
Since Samba 3.0.8, it has been recommended that all domain accounts
listed in smb.conf on a member server be fully qualified with the
domain name. This is now a requirement. All unqualified names are
assumed to be local to the Unix host, either as part of the server's
local passdb or in the local system list of accounts (e.g. /etc/passwd
or /etc/group).
The reason for this change is that smbd has transitioned from
access checks based on string comparisons to token based
authorization. All names are resolved to a SID and they verified
against the logged on user's NT user token. Local names will
resolve to a local SID, while qualified domain names will resolve
to the appropriate domain SID.
If the member server is not running winbindd at all, domain
accounts will be implicitly mapped to local accounts and their
tokens will be modified appropriately to reflect the local
SID and group membership.
For example, the following share will restrict access to the
domain group Linux Admins and the local group srvadmin.
[restricted]
path = /data
valid users = +DOMAIN\Linux Admins +srvadmin
Note that to restrict the [homes] share on a member
server to the
owner of that directory, it is necessary to prefix the
%S value
to valid users.
[global]
security = {domain,ads}
workgroup = DOM
winbind separator = +
[homes]
valid users = DOM+%S
--
|
| Joel Franco Guzmán .''`.
| self-powered by : :' :
| Debian Linux `. `'
| `-
On Ter Jul 18 06 18:03, Howard Wilkinson wrote:
Don,
you are a genius, this fixed it! Anybody know why?
Howard.
Don Meyer wrote:
Well, I didn't see the last bit you describe, but I don't run RFC2307
(yet). We we bit by very similar behavior when moving from 3.0.22 to
the 3.0.23 RC's. Turns out that the use-default-domain option is not
being universally applied to groups in 3.0.23. As soon as I changed
my valid users = +group statements to the format = +domain\group,
then this problem was fixed for us. Maybe it will do the trick for
you...
Cheers,
-D
At 07:41 AM 7/18/2006, Howard Wilkinson wrote:
I have managed to isolate where the problem is, now I need to work
out what the problem is?
I have a group
cohtech:*:16777225:lesley,howard,ecbull
in which I am a member - howard.
I have a
valid users = +cohtech
entry in smb.conf for the share I am trying to connect to, I get the
following reported in the machine.log file -
zebra.log: string_to_sid: Sid +cohtech does not start with 'S-'.
and the users get rejected. If I declare the user directly then
access is allowed.
This server gets its group database from the AD controllers via RFC2307.
Anybody know why group expansion may be broken in 3.0.23?
Don Meyer [EMAIL PROTECTED]
Network Manager, ACES Academic Computing Facility
Technical System Manager, ACES TeleNet System
UIUC College of ACES, Information Technology and Communication Services
They that can give up essential liberty to obtain a little
temporary safety,
deserve neither liberty or safety. -- Benjamin Franklin,
1759
--
Howard Wilkinson
Phone:
+44(20)76907075
Coherent Technology Limited
Fax:
23 Northampton Square,
Mobile:
+44(7980)639379
London, United Kingdom, EC1V 0HL
Email:
[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] login to ms access db very slow on samba 3.x
Hi, try the ethereal sniffer, now at www.wireshark.org in the linux machine and observe the differences in traffic between the 2 and 3 releases of samba. I have the same problems with db databases files in samba server while at windows 2000 and windows 2003 it runs better. I'll soon make the sniff to see the differences. -- | | Joel Franco Guzmán .''`. | self-powered by : :' : | Debian Linux `. `' | `- On Ter Jul 25 06 17:00, [EMAIL PROTECTED] wrote: Hi Brian Thanks for the hint. Unfortunately I am not at all familiar with doing this. Would that involve strace? I took a glimpse at the man pages of strace, but I don't know if I could produce some useful output with it. But maybe I got you wrong and there's an easier way? I must admit that although I'm not totally samba-illiterate, I'm no pro either (obviously :) cheers Oli Brian Cowan [EMAIL PROTECTED] wrote on 25.07.2006 16:32:06: Have you tried running network traces with Samba 2.x and 3.x and comparing the results. I suspect that at least one newer smb feature is killing you... [EMAIL PROTECTED] wrote: hi everybody we have been reading through the archives for quite some time now, and could not find a solution to our problem. please excuse if we overlooked something and our question was already answered elsewhere... we have Samba version 3.0.14a-Debian running on (you guessed it) debian with kernel 2.6.8-2-386. ever since our migration from samba 2.x we have speed issues with an ms access database which gets accessed by multiple users through an access2000 runtime application running on windows clients (2000 and XP). when users log in to the database, it takes 3min until the login-window pops up and users can enter their credentials. since things are not slow for the first user, but for every user that tries to login afterwards, we are suspecting some problems with the lock file of the db or with file ownership... also, transactions seem to be going on at normal speed once after users are logged in (also for users who encounter the slow login problem). after reading through old postings, we have disabled oplocks and level2 oplocks, also Kernel oplocks, with no success. we made a new share containing only the database file (which is about 410MB in size), with no success. after comparing the old 2.x setup with the new one, we noticed that on 2.x (where everything ran smooth) guest access was enabled and everybody was accessing the DB as user nobody of group nogroup, so we tried the same setup on our 3.x server, forcing user nobody and group nogroup on our new 3.x server, hoping that would solve the problem. nada. we have tried changing the tcp send/receive buffer size after reading through tcpdump logs, but that was probably too far off. it seemed to us that we were not the only ones with this specific problem, but every hint we found was pointing to disabling oplocks - which we did. maybe one of you guys can help us out? any hint or help will, of course, be highly appreciated. maybe we have misconfigured something? oli relevant sections of /etc/samba/smb.conf: # Global parameters [global] [...] veto oplock files = /*.doc/*.xls/*.pdf/*.mdb/*.bsd/*.MDB/*.BSD/*.bsa/*.BSA/*.lbd/*. LBD/*.ldb/*.LDB/ veto files = /lost*found/.bash_profile/.bashrc/aquota.*/.ARK_NOBACKUP/ lock spin time = 15 lock spin count = 100 socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=2920 sync always = no strict sync = no kernel oplocks = No [...] [dbs] path = /var/samba/dbs read only = no guest ok = yes oplocks = no level2 oplocks = no strict locking = no fake oplocks = no create mask = 0777 directory mask = 0770 force create mode = 0777 force user = nobody force group = nogroup veto oplock files = /*.MDB/*.mdb/*.bsd/*.BSD/*.bsa/*.BSA/*.lbd/*.LBD/*.ldb/*.LDB/ [...] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] strangely lingering lock, samba 3.0.22
Me too. Same bug and exactly the same problema. As Debian user, i will install the 3.0.23 from debian repository when ready. -- | | Joel Franco Guzmán .''`. | self-powered by : :' : | Debian Linux `. `' | `- On Ter Ago 01 06 15:35, Logan Shaw wrote: Hello everyone, Today a user (call them 'abc') came to me and described the following sequence of events: 1. They opened an Excel file, made some changes, saved it, and closed it. 2. They tried to open it again and got an error dialog within Excel that says this: File in Use FooBar.xls is locked for editing by 'abc'. Open 'Read-Only' or, click 'Notify' to open read-only and receive notication when the document is no longer in use. 3. They rebooted their desktop machine and tried again, and got the same dialog again. No matter what they do, the file remains locked. The same file is locked for other Windows users and on other Windows computers as well, so obviously there is some sort of state on the Samba server that is telling the clients that the file is locked. So, I logged into the Samba server (3.0.22 running on Slackware 10.2, with kernel 2.4.31), and tried to see if I could see any evidence of a lock. The file did not show up in the output of smbstatus --locks. Running fuser on the file didn't show that any process had it open. So apparently no process has it open on the Linux machine. Also, I noticed that if I make a copy of the file on the Linux machine (cp FooBar.xls FooBar-new.xls), the copy does not retain the lock. So, it would appear that this is not related to the actual contents of the file. I also tracked down the individual smbd that user abc's machine is connected to and killed it. Another one restarted, but the lock was still not released. For what it's worth, I have oplocks = no and level2 oplocks = no in my smb.conf, so presumably this isn't an oplock issue. Anyone have any ideas what's going on? As far as I can tell, this must be a server-related issue since all clients see the file as locked, and it's apparently not an issue with the contents of the file (like Excel writing some flag into the actual file contents itself), but I can't find any indication on the server that the file is locked. - Logan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba as non-root?
I have a two-part question. Is it possible to run Samba as a non-root user? What we want to do, ideally, is to create a user account such as samba, and let our applications people log in as the samba user, and do all the setup and ongoing maintenance. I looked through the stuff on samba.org but the answer isn't readily apparent to me. This is so they can allow a few users the ability to view some files on a Solaris 8 server. All the users who need read access via Samba are already in the passwd file. We would prefer not to use any external servers for authentication if we can avoid it. Can we do that? We're trying to keep this as simple as possible. Thanks, Dan P.S. Sorry for the disclaimer message below but I can't do anything to stop it. The contents of this email are the property of PNC. If it was not addressed to you, you have no legal right to read it. If you think you received it in error, please notify the sender. Do not forward or copy without permission of the sender. This message may contain an advertisement of a product or service and thus may constitute a commercial electronic mail message under US Law. PNCs postal address is 249 Fifth Avenue, Pittsburgh, PA 15222. If you do not wish to receive any additional advertising or promotional messages from PNC at this e-mail address, click here to Unsubscribe. https://pnc.p.delivery.net/m/u/pnc/uni/p.asp By unsubscribing to this message, you will be unsubscribed from all advertising or promotional messages from PNC. Removing your e-mail address from this mailing list will not affect your subscription to alerts, e-newsletters or account servicing e-mails.. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Temporary Profiles
On Sex Dez 02 05 13:48, Oliver Schneider wrote: If you are sure there is a solution in your book, I am going to buy it. That shouldn't be a problem. I don't want roaming profiles. It would be enough, if i get a local NOT temporary profile. if you clear the global logon path = the profile should be local. It's enough to do it. I have tried to get roaming profiles to work as a part of the solution for the local profiles but that didn't helped neither. All I get then was a temporary serverside profile. All I want is a not temporary profile, where my changes are saved... Oliver Schneider 2005/12/1, John H Terpstra [EMAIL PROTECTED]: On Thursday 01 December 2005 03:01, Oliver Schneider wrote: Hi, I have got a problem with samba for days now and I don't know how to solve it. My problem is, that it doesn't matter if I enable or disable Roaming Profiles, all I get is a temporary profile. If i enable Roaming Profiles, than i get a temporary serverside Profile. If I disable Roaming Profiles, than i get a temporary local Profile. Can somebody please help me? With Roaming Profiles I think it is a problem with Filepermissions. Root get's a full Serverside Profile (not the smb.conf below), but only root. I just want a local Profile for the users, so it is not so relevant. Please follow the examples in my book Samba-3 by Example. This book is the official Samba deployment guide. If you experince any problems with the examples in this book I will help you to find the cause by which the book mis-directed you. After all, I want the documentation to be correct and of true value. Samba-3 by Example provides fully documented, step-by-step, installation and depoyment instructions for complete networking solutions. It coveres simple networks and progressively introduces complex networking examples. Every necessary configuration file is provided. Every time I have helped people on this list who have reported problems with Samba deployment - issues such as logon scripts that will not run, roaming profiles that fail to work correctly, not being able to join a domain, and so on, the solutions in this book solved the users' problem. If you do not follow the documentation provided, you will possibly go through a more painful learning process. The choice is yours. - John T. Oliver Samba is PDC [global] include = /etc/samba/dhcp.conf socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 logon drive = H: hide dot files = yes domain master = Yes username map = /etc/samba/smbusers map to guest = Bad User printer admin = @ntadmin, root, administrator logon home = \\%L\%U\.9xprofile passwd program = /usr/bin/passwd %u wins support = true printcap cache time = 750 netbios name = fileserver cups options = raw printing = cups unix password sync = yes local master = Yes logon path = logon script = logon.bat workgroup = SJ os level = 65 printcap name = cups security = user add machine script = /usr/sbin/useradd -c Machine -d /var/lib/nobody -s /bin/false %m$ domain logons = Yes preferred master = Yes load printers = yes passdb backend = smbpasswd [homes] comment = Home Directories valid users = %S browseable = No read only = No inherit acls = Yes [profiles] comment = Network Profiles Service path = %H read only = No # store dos attributes = Yes create mask = 0600 directory mask = 0700 [users] comment = All users path = /home read only = No inherit acls = Yes veto files = /aquota.user/groups/shares/ [groups] comment = All groups path = /home/groups read only = No inherit acls = Yes [printers] comment = All Printers path = /var/tmp printable = Yes create mask = 0600 browseable = No [print$] comment = Printer Drivers path = /var/lib/samba/drivers write list = @ntadmin root force group = ntadmin create mask = 0664 directory mask = 0775 [netlogon] comment = Network Logon Service path = /var/lib/samba/netlogon write list = @user, root guest ok = yes locking = No -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO Reference Guide, 2 Ed., ISBN: 0131882228 Samba-3 by Example, 2 Ed., ISBN: 0131882221X Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions:
Re: [Samba] (no subject)
-- Joel Franco | | self-powered by | Debian Linux | | .''`. | : :' : | `. `' | `- | On Seg Nov 28 05 12:26, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Joel, Joel Franco wrote: | Empirically, when a NT based is added to the | existing network, the database application runs | slowly (access data) in this client machine | and in others NT machines that are added to the LAN. | | If i substitute this samba server with a Win2k3 | Standard Server, the application latency backs | to the original (or close), before the NT clients. | This was a big deception to me and since then, i'm | trying to find why this happens but i'm specialist. What version of Samba are you running? Samba 3.0.20b-2. But this problem exists since old samba versions. | I have observed in the ethereal sniffer that exists a | lot of Locking AndX Request and Locking AndX Response | that is highly ping pong communication between | the server and the client, that certainly don't | permit a good brute transfer. I understand that must | exist a lock mechanism to not corrupt the file | database shared between others stations. Most people running pc based database apps disable oplocks on the server. Can you run a quick test with and without oplocks in the Samba share. The oplocks warn that could be problem on this enabled. If a client machine crash, the database could be corrupted, correct? Should I understand the oplocks is a tradeoff and have to be choosed between speed and corrupt probability? Thank You, cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc There's an anonymous coward in all of us. --anonymous -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDi0vaIR7qMdg1EfYRAgIUAJ9jkPtfLkm+enDbZNH8nVFFx6I9WwCfQWfm h3PNQINCD70+Tu6/atQdPeA= =2Gjd -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NT clients syncronyzing in a Samba PDC Domain
On Ter Nov 29 05 13:56, Doug Campbell wrote: I understand that i'm not using roaming profile, because the logon path is empty. The only difference in this domain is that i'm using winbind to the remote domain users (that is a trusted domain) be able to print in my domain. The message is something like: syncronizing \\server\username in SERVER. This happens just after logoff. Open Windows Explorer. Click on your C: drive Click Tools-Folder Options Click the Offline Files tab Uncheck Enable Offline Files and all the other boxes for that matter I think that should take care of the problem. Cool. It really disabled it. My question, however, is can it could be get activated if a made a classical samba and Windows instalation. Thank You, -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] file mode creation at a directory level
On Ter Nov 29 05 13:55, Taolizhong wrote: Josh Kelley [EMAIL PROTECTED] wrote: On 11/29/05, Taolizhong wrote: The above requirements seem simple, however, my problem is, because the share directory is neither under any of the members' home directory nor a seperate partition, and the system umask is set to 022, which is not supposed to be changed, whenever a new file is created, it automatically has permission as -rwxr--r--, not -rwxrwx--- that I desire. I guess my problem is related to how to file mode creation at a directory level. force create mode = 0770 Thanks a lot, Josh. The force create mode solves the problem partially --- now the group members have full access to the files. However, for some unknow reason, the permission for other doesn't work. They still have read access. In addition, it doesn't work on subfolders either. Please see the following: try valid users = @group1 bash-2.05# ls -ld share/ drwsrws--x 3 tech group1 512 Nov 29 13:50 share/ bash-2.05# cd share/ bash-2.05# ls -l total 2 drwxr-sr-x 2 guest01 group1 512 Nov 29 13:51 a -rwxrwxr-- 1 guest01 group1 0 Nov 29 13:49 test.txt Any further sugestions? Thanks, --Lingtao - Yahoo! Music Unlimited - Access over 1 million songs. Try it free. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Permission denied
I have used mount.cifs because i was having troubles with smbmount. On Ter Nov 29 05 08:34, malcolm wrote: I have a Windows 2003 server with a share I try and mount a drive as follows : cd ~ mkdir testsmb smbmount //servername/sharename /home/myname/testsmb -o credentials=/home/myname/smbpassword and everything seems OK but a ls of testsmb gives ?- ? ? ? ? smbtest you can cd to the directory but ls gives permission denied If I use the Gnome GUI it works OK This is RH FC4 thanks mal -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] NT clients syncronyzing in a Samba PDC Domain
Hi, Plz, i have installed a Samba NT PDC Domain with XP Prof. and strangelly the machines are syncronizing with the Samba Server when the user Logoff of the domain. I've used the smb.conf below in others domains and XP clients have never synchronized before. I understand that i'm not using roaming profile, because the logon path is empty. The only difference in this domain is that i'm using winbind to the remote domain users (that is a trusted domain) be able to print in my domain. The message is something like: syncronizing \\server\username in SERVER. This happens just after logoff. Someone plz can say me what is this and how i disable it? My configurations... :~# net rpc trustdom list Password: Trusted domains list: REMDOMAINS-1-5-21-1370651826-174269758-184960113 Trusting domains list: none :~# The smb.conf is: [global] netbios name = SERVER workgroup = DOMAIN wins support = yes dns proxy = yes log file = /var/log/samba/log.%m max log size = 1000 syslog = 0 panic action = /usr/share/samba/panic-action %d security = user encrypt passwords = true passdb backend = tdbsam guest obey pam restrictions = yes passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n . load printers = no socket options = TCP_NODELAY domain master = yes local master = yes preferred master = yes os level = 65 unix charset = iso8859-1 add user script = /usr/sbin/useradd -m -g users %u add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null -g ntmachines %u add group script = /usr/local/bin/smb-addgroupscript %g add user to group script = /usr/sbin/adduser %u %g delete user script = /usr/sbin/userdel %u delete group script = /usr/sbin/groupdel %g delete user from group script = /usr/sbin/deluser %u %g set primary group script = /usr/sbin/usermod -g %g %u logon script = logon.%U.bat logon home = \\%N\%U logon path = logon drive = U: domain logons = yes idmap uid = 1-2 idmap gid = 1-2 winbind enum users = yes winbind enum groups = yes template homedir = template shell = /bin/false username map = /etc/samba/smbusers [homes] comment = Home Directories browseable = no writeable = yes create mask = 0644 directory mask = 0755 [netlogon] comment = Network Logon Service path = /home/samba/netlogon guest ok = yes writable = no browseable = no root preexec = /home/samba/netlogon/gen_logon.sh %u root postexec = /home/samba/netlogon/del_logon.sh %u [printers] comment = All Printers browseable = no path = /tmp printable = yes public = no writable = no create mode = 0700 [print$] comment = Printer Drivers path = /var/lib/samba/printers browseable = yes read only = yes guest ok = no [geral] comment = Arquivos Publicos path = /home/geral writeable = yes create mask = 666 directory mask = 777 -- Joel Franco | | self-powered by | Debian Linux | | .''`. | : :' : | `. `' | `- | -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NT clients syncronyzing in a Samba PDC Domain
No, i think... The instalation is standard with classic components like Office, Outlook +Express, etc.. The synchronizing window (at logoff) appears strongly be of Windows environment. Thank You, -- Joel Franco | | self-powered by | Debian Linux | | .''`. | : :' : | `. `' | `- | On Seg Nov 28 05 15:57, Tomasz Chmielewski wrote: Joel Franco schrieb: Hi, Plz, i have installed a Samba NT PDC Domain with XP Prof. and strangelly the machines are syncronizing with the Samba Server when the user Logoff of the domain. I've used the smb.conf below in others domains and XP clients have never synchronized before. I understand that i'm not using roaming profile, because the logon path is empty. The only difference in this domain is that i'm using winbind to the remote domain users (that is a trusted domain) be able to print in my domain. The message is something like: syncronizing \\server\username in SERVER. This happens just after logoff. isn't it some 3rd party program that does it? -- Tomek http://wpkg.org WPKG - software deployment and upgrades with Samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How to synchronise multiple samba server ?
-- Joel Franco | | self-powered by | Debian Linux | | .''`. | : :' : | `. `' | `- | On Sex Nov 25 05 11:24, Aurelien Vf wrote: Hi ! I got a new problem, the company I work for had just open a new office with a network ADSL link to the old one. We have one domain controler (samba on linux) and 50 workstations in windows XP. I need to put a second domain controler at the new office, but I don't know how to link the both and then to synchronise them ? (account and passwd) Do you want to have 2 separate domains (domain A and domain B) or do you want to have the same domain with the same users in both offices? In first case, you have to look at interdomain trusts and in case B i think (fixme) that you could be a PDC and a BDC to synchorinise it. Look at the official howto in this 2 topics. And finaly, if I reach this point, how can I do to know which one will validate my users ? Is there specials parameters I do write into smb.conf file ? Any help would be really apreciate... thx Au.Vf -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NT clients syncronyzing in a Samba PDC Domain
No, i think... The instalation is standard with classic components like Office, Outlook Express, etc.. The synchronizing window (at logoff) appears strongly be of Windows environment. Thank You, -- Joel Franco Guzmán On Seg Nov 28 05 15:57, Tomasz Chmielewski wrote: Joel Franco schrieb: Hi, Plz, i have installed a Samba NT PDC Domain with XP Prof. and strangelly the machines are syncronizing with the Samba Server when the user Logoff of the domain. I've used the smb.conf below in others domains and XP clients have never synchronized before. I understand that i'm not using roaming profile, because the logon path is empty. The only difference in this domain is that i'm using winbind to the remote domain users (that is a trusted domain) be able to print in my domain. The message is something like: syncronizing \\server\username in SERVER. This happens just after logoff. isn't it some 3rd party program that does it? -- Tomek http://wpkg.org WPKG - software deployment and upgrades with Samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Red X and guest user message in logs
-- Joel Franco | | self-powered by | Debian Linux | | .''`. | : :' : | `. `' | `- | On Sex Nov 25 05 19:00, Marco De Vitis wrote: Hello, I have a Debian Sarge machine running Samba 3.0.14a as PDC and file server. Everything runs smoothly, except for a random problem: users (on Win2000Pro clients) are often seeing a red cross on the main network share, as if it was disconnected. This red X seems to come and go at random. I had that problem of a radom red X in the mapped drive too when the server was a Win98 machine. The problem was hardware on this server. The red cross would not be a big issue itself, but it has an annoying consequence: when it appears, Windows thinks the connection is down, so if you save a file on the share while the red X is there you get an error dialog telling something like The connection to the server has been reset. The file cannot be saved. (recalling from memory and translating from Italian, so the actual English message might be very different). The file is saved anyway, but users are obviously alarmed by the message. I had a look at my Samba logs (level 2) around the time when an user told me he noticed the red cross, but didn't find anything special, exception made for the following message: [2005/11/25 17:14:51, 2] smbd/service.c:make_connection_snum(314) guest user (from session setup) not permitted to access this share (COMMESSE) The user was already authenticated on the domain, and didn't logoff, so I can't understand where does this guest access come from. Can this message be related to my problem? Here follows an excerpt from my smb.conf, as returned by testparm, with some more or less sensible data omitted. BTW, the log file where I found that message was named client_name..log, which is correct (see log file setting below). I really hope someone can give me some clues, as this has been going on for months now. Thanks in advance. - [global] unix charset = UTF8 workgroup = domain name server string = Server Linux, Samba %v passdb backend = tdbsam log level = 2 vfs:2 syslog = 0 log file = /var/log/samba/%m.%U.log max log size = 0 logon script = netlogon.bat logon path = \\%L\profiles\%U logon drive = Z: domain logons = Yes os level = 64 preferred master = Yes domain master = Yes enhanced browsing = No create mask = 0664 directory mask = 0775 hosts allow = 127.0.0.1, 192.168.1.0/255.255.255.0 ea support = Yes hide files = /desktop.ini/.DS_Store/ veto oplock files = /NTUSER.DAT/ map archive = No store dos attributes = Yes dos filemode = Yes [netlogon] path = /home/netlogon browseable = No [profiles] path = /home/samba/profiles read only = No create mask = 0600 directory mask = 0700 browseable = No [COMMESSE] path = a valid path invalid users = one username force user = another username read only = No vfs objects = recycle recycle:exclude = ~$* ~*.doc *~*.tmp *.bak recycle:touch = yes recycle:versions = yes recycle:keeptree = yes recycle:repository = .cestino - -- Ciao, Marco. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Red X and guest user message in logs
Suggestions.. Try sniff the ethernet communication with ethereal in the server (within a VNC server is cool), or try to increase the log level (3 gives you a lot information). -- Joel Franco | | self-powered by | Debian Linux | | .''`. | : :' : | `. `' | `- | On Sáb Nov 26 05 01:19, Marco De Vitis wrote: Joel Franco wrote: I had that problem of a radom red X in the mapped drive too when the server was a Win98 machine. The problem was hardware on this server. I already thought about a hardware problem, but one thing mostly keeps me away from this idea: supposing there was some hardware network fault, I'd expect to find traces of communication errors in Samba logs (and maybe syslog). Instead, I see no errors in there, apart from the guest user message I reported. -- Ciao, Marco. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] (no subject)
Hi All, I'm really sad that Win2k3 server runs a lot better in a shared folder that keep a file based database that Windows 9x and WinNT clients. Explaining it better... Here in Brazil, unfortunaly we still have a lot business that is based in the old file shared database, like Dataflex, Clipper and like. Then, they need a robust and fast server to centralize that files. With Windows98 clients and Samba 3 server, the performance of the access to this shared database file is good and because the ultra robust samba server (based in Linux), this configuration scenario was a excelent solution. However, the Windows 98 is stopping be supported by Microsoft and this is forcing the client machines of this business to migrate to NT based workstations (win2k and winXP usually). Here starts the problem... Empirically, when a NT based is added to the existing network, the database application runs slowly (access data) in this client machine and in others NT machines that are added to the LAN. If i substitute this samba server with a Win2k3 Standard Server, the application latency backs to the original (or close), before the NT clients. This was a big deception to me and since then, i'm trying to find why this happens but i'm specialist. I have observed in the ethereal sniffer that exists a lot of Locking AndX Request and Locking AndX Response that is highly ping pong communication between the server and the client, that certainly don't permit a good brute transfer. I understand that must exist a lock mechanism to not corrupt the file database shared between others stations. A quick observation in the ethereal with the 98 clients, show that the protocol is different and the sniffer have not a good knowledge of it (it appears like a raw traffic). I have not still observed the Win2k3 protocol with the NT stations. This maybe is my next step. My fundamental question is, why the different protocol is so slow and, supposing that the 98 protocol with the server is better (fast and safe - at least in this files database in my experience), how i can configure the samba server to just accept this old protocol or how to configure the NT stations to runs faster. Regards All, -- Joel Franco | | self-powered by | Debian Linux | | .''`. | : :' : | `. `' | `- | -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba as a PDC with LDAP and Kerberos
Ti Leggett wrote: I've been searching and researching this and I can't seem to find the answers I'm looking for. I'd like to setup a Samba PDC that Windows clients will join. The PDC will use an LDAP backend to get authorization information (username, home directory, etc). The authentication portion is handled by an MIT Kerberos KDC. I think I'm real close to having it all together but I'm not sure. I have the Windows client setup to point at my KDC so authentication *should* be coming from there once the authorization portion is going. Hehehe, it's been a year trying to do that... but no way! I'm sorry to tell you, but what you want is a replacement of AD... in no way windows will know about ldap and mit, without an AD domain. So first question is, are sambaLMPassword and sambaNTPassword still needed in LDAP for each user? Here's the output from ksetup /dumpstate: Machine is not configured to log on to an external KDC. Probably a workgroup member EXAMPLE.COM: kdc = kdc1 server kdc = kdc2 server kpasswd = kpasswd server Realm Flags = 0x0 none No user mappings defined. Users must be somewhere to get HKEY_LOCAL* work... and they should be local users (the MIT-KDC authentication works this way). Second, here's what I have in LDAP so far: [...] I've done a smbpasswd -w hidden samba_server password I can do a net getlocalsid and it will get the correct SID out of LDAP. Correct. However, when I try to join my Windows client to the EXAMPLE.COM domain, I can see the ldap queries happening, but the Windows client reports an invalid username. Yes. Active Directory is not there... and it wants AD. In no way you can fake AD, even though it's kerberos, ldap and smb + natural-flavours... -- Sensei mailto:[EMAIL PROTECTED] pgp:8998A2DB The difference between stupidity and genius is that genius has its limits. Albert Einstein signature.asc Description: OpenPGP digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Custom Hidden Files?
Tony Earnshaw wrote: hide dot files ... but some of those files will probably be directories which your users might want.. My purpose is giving on every platform the same home direcory. Relying on afs, kerberos and ldap every os other than windows can have the same things. Now I'm finding a way to have the same things on ms products (2000 and later). -- Sensei mailto:[EMAIL PROTECTED] pgp:8998A2DB icqnum:241572242 yahoo!:sensei_sen msn-id:[EMAIL PROTECTED] signature.asc Description: OpenPGP digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Custom Hidden Files?
Tony Earnshaw wrote: This will probably get you into all kinds of shit (learn Windows and NTFS to find out why). However, if that's what you want, you go ahead, find out for yourself ;) My advice is to keep Unix and Windows (Samba) home and other directories completely apart from each other. I can also set different shares. One is ~/windows/ for the profile, and one is the unix home directory along with another one which is afs... Would you do that? -- Sensei mailto:[EMAIL PROTECTED] pgp:8998A2DB icqnum:241572242 yahoo!:sensei_sen msn-id:[EMAIL PROTECTED] signature.asc Description: OpenPGP digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Custom Hidden Files?
Hi. A question on a feature that interests me... Can I specify samba to handle the dot files in our linux samba server as hidden files in windows? It's quite ugly seeing all the hidden unix files .* visible on windows... -- Sensei mailto:[EMAIL PROTECTED] pgp:8998A2DB icqnum:241572242 yahoo!:sensei_sen msn-id:[EMAIL PROTECTED] signature.asc Description: OpenPGP digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Is possible? --- reposting + new
Hi. I'm trying to find a solution for our windows clients. I will explain my situation. We have kerberos 5 (mit) kdc, openafs without kaserver (authentication using kerberos), openldap, everything on debian stable servers. What do our unix/linux clients do? They authenticate over kerberos (pam), gain tickets and consequently gain the afs token (krb5afs or openafs_session), call ldap and find their home under /afs/cell/usr/username (posixAccount, posixGroup). Nothing is local. Every file, desktop and stuff, is stored under afs (no matter what, a user sees just a directory /afs... nothing different from any other directory they will see). I'd like to do the same thing on windows using samba, but I need some advices because I'm not sure. Just two points before asking. These things apply clearly for windows only, since linux, unix (aix, irix, and solaris), and macosx do what I've said before (all remotely). - Kerberos for Windows: KFW after a successful windows login, if the username and password match the kerberos principal and password, automatically gains all kerberos tickets. - OpenAFS for Windows: AFS after a successful windows login, if the username and password match the kaserver principal and password, automatically gains the AFS token. --- If OpenAFS is installed under a kerberos environment, so with KFW present on the system, will convert the previously obtained kerberos ticket into an AFS token. --- OpenAFS uses a UNC name \\AFS in windows, so no letter Z: Y: or whatever is needed anymore, anyway, they can be present. Now, I'd like to have the same thing without a windows server, doing the same thing with samba, having remote profiles and all the user's stuff on afs, and authenticating users NOT locally... is that possible? I'd like to know some things. My user authentication and authorization data is created on kerberos, afs and ldap servers. I'd like to create users just on samba, not modifying users locally on each machine... would be quite crazy (and not feasable... ~500 users...). Can samba help me? In what way? I know I can create an NT4 domain with samba alone. Good. Can samba tell the windows client to use \\AFS or have I to export a drive for afs? Are there issues in doing that? If I specify ``\\AFS\cellname\users\username'' as the profile storing directory, will windows go on afs or will samba screw it up all since samba do not understand \\AFS since it is working on linux? I mean, windows understands \\AFS\blah\blah but I don't know if it's a I know the answer is no, but I will ask it anyway :) Can samba have no password and get authentication/authorization from a kerberos kdc? How can I sinchronize passwords? I mean, if samba can't use kerberos, the user will change just the samba password... I need to modify also kerberos passwords since they should be able to use the same username and password on every pc in the department. In particular... I was discouraged to use samba, because all windows clients would be using plain text passowrds, sending them clear-text on the network. Is it true? Is there a way of avoiding this? Any help, even if little, is really appreciated!!! -- Sensei mailto:[EMAIL PROTECTED] pgp:8998A2DB icqnum:241572242 yahoo!:sensei_sen msn-id:[EMAIL PROTECTED] signature.asc Description: OpenPGP digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Is it feasable?
Am I asking something OT? If there's a more appropriate Samba ML, let me know... -- Sensei mailto:[EMAIL PROTECTED] pgp:8998A2DB icqnum:241572242 yahoo!:sensei_sen msn-id:[EMAIL PROTECTED] signature.asc Description: OpenPGP digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Is it feasable?
Hi. I'm trying to find a solution for our windows clients. I will explain my situation. We have kerberos 5 (mit) kdc, openafs without kaserver (authentication using kerberos), openldap, everything on debian stable servers. What do our unix/linux clients do? They authenticate over kerberos (pam), gain tickets and consequently gain the afs token (krb5afs or openafs_session), call ldap and find their home under /afs/cell/usr/username (posixAccount, posixGroup). Nothing is local. Every file, desktop and stuff, is stored under afs (no matter what, a user sees just a directory /afs... nothing different from any other directory they will see). I'd like to do the same thing on windows using samba, but I need some advices because I'm not sure. Just two points before asking. These things apply clearly for windows only, since linux, unix (aix, irix, and solaris), and macosx do what I've said before (all remotely). - Kerberos for Windows: KFW after a successful windows login, if the username and password match the kerberos principal and password, automatically gains all kerberos tickets. - OpenAFS for Windows: AFS after a successful windows login, if the username and password match the kaserver principal and password, automatically gains the AFS token. --- If OpenAFS is installed under a kerberos environment, so with KFW present on the system, will convert the previously obtained kerberos ticket into an AFS token. --- OpenAFS uses a UNC name \\AFS in windows, so no letter Z: Y: or whatever is needed anymore, anyway, they can be present. Now, I'd like to have the same thing without a windows server, doing the same thing with samba, having remote profiles and all the user's stuff on afs, and authenticating users NOT locally... is that possible? I'd like to know some things. My user authentication and authorization data is created on kerberos, afs and ldap servers. I'd like to create users just on samba, not modifying users locally on each machine... would be quite crazy (and not feasable... ~500 users...). Can samba help me? In what way? I know I can create an NT4 domain with samba alone. Good. Can samba tell the windows client to use \\AFS or have I to export a drive for afs? Are there issues in doing that? If I specify ``\\AFS\cellname\users\username'' as the profile storing directory, will windows go on afs or will samba screw it up all since samba do not understand \\AFS since it is working on linux? I mean, windows understands \\AFS\blah\blah but I don't know if it's a I know the answer is no, but I will ask it anyway :) Can samba have no password and get authentication/authorization from a kerberos kdc? How can I sinchronize passwords? I mean, if samba can't use kerberos, the user will change just the samba password... I need to modify also kerberos passwords since they should be able to use the same username and password on every pc in the department. Any help, even if little, is really appreciated!!! -- Sensei mailto:[EMAIL PROTECTED] pgp:8998A2DB icqnum:241572242 yahoo!:sensei_sen msn-id:[EMAIL PROTECTED] signature.asc Description: OpenPGP digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: LBQ, the listener accompanied
actuarial sigh bellini boatload beautiful yoke sublimate biochemic chocolate eardrum descant alpenstock offensive davidson photography petunia subpoena fingertip didn't chaw bury greyhound solicitor foldout anthropomorphic -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] no Profiles created at logon
Hi I'm using a linux 8.2 box with samba 2.2.5 as PDC with only one client pc (win xp) with 2 accounts. Logon, logon script, homedrive and browse shares are working, but when I logon windows show a message which tells that to profile of the server has not the correct permissions.., but there is no profile is just the emty directory. And then a second error that no profile was found local machine (that one I think is correct because there's really no profile local) then I get a temp profile. My question is why the server don't create a profile for the new user in the profile directory. And then I have a second question; how can I move a local profile to a server profile, can I just copy the folders? For testing if set all the folders used to 777 Smb.conf # Global parameters [global] workgroup = FALLICA.NET netbios name = SERVER server string = Samba %v interfaces = 192.168.0.1/24 encrypt passwords = Yes log level = 2 log file = /profiles/%m.log add user script = /usr/dbin/useradd -d /dev/null -g 100 -s /bin/false -M %u logon script = logon.bat logon path = \\%L\profiles\%u logon drive = H: logon home = \\%L\homes\%u domain logons = Yes os level = 64 preferred master = True domain master = True wins support = Yes nt acl support = No strict locking = Yes [netlogon] path = /netlogon read only = No create mask = 0777 directory mask = 0777 [profiles] path = /profiles read only = No create mask = 0777 directory mask = 0700 [homes] path = /homes/%u read only = No browseable = No nice day franco -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RES: Winbind broken after 2.2.8 upgrade
hello, thank you very much for the answer. I should say that my version is to 2.3a that it comes with the distribution CONECTIVA. Before posting the messages I make several tests and I place the maximum of information that I possess. If my messages not answered they leave the frustrated people it is because many of them pass for the same as me. So that you answered me I had to take advantage of SUBJECT of a message. Excuse for that. I hve 3 installations with problems... I never saw this I think that Im not a god SAMBA Administrator but I did read all the doc I dont have any troubles with other soft, but with samba ehehehehehe Samba is a complex peice of software. It's interactions with (often separately maintained) Windows DCs is particularly complex. If it doesn't occur on all your DCs, then you should look at what is different. This information should be present when you contact the list. My intranets are composed by PDCs, the only thing that can be different it is that plan them linux he/she has firewall installed in them. I/you had been that everything it is inside of the pattern of installation of MICROSOFT. I also ordered already the configurations of my firewall for you with the messages. and I already made COUNTLESS TEST WITH AND WITHOUT FIREWALL. I wait to be being very clear on this subject. I wait that my translator (portugues/ingles) it is not causing confusion. ;-) === FIRST INSTALATION: Can yoiu help m? [EMAIL PROTECTED] /etc]# smbpasswd -j surson -r cleo -U Administrator Password: Joined domain SURSON. [EMAIL PROTECTED] /etc]# [EMAIL PROTECTED] /etc]# smbclient //firewall/PUBLICO -UAdministrator added interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0 Got a positive name query response from 192.168.1.2 ( 192.168.1.1 ) Password: session setup failed: NT_STATUS_LOGON_FAILURE When I try \\firewall\PUBLICO in the NT I receive a BOX to type USER and PASSWD Joe log.cleo [2003/03/25 04:38:27, 0] smbd/password.c:connect_to_domain_password_server(1307) connect_to_domain_password_server: machine CLEO rejected the tconX on the IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. [2003/03/25 04:38:27, 0] smbd/password.c:domain_client_validate(1554) domain_client_validate: Domain password server not available. [2003/03/25 This looks like an issue with your PDC, not with Samba. Your PDC is has 'restrict anonymous = 2' set. The two options are to set a username for Samba to use (wbinfo -Auser%pass), or to disable it. == The webinfo -u works. The one that doesn't work is SMBCLIENT for the SAMBA from within of LINUX and the connections comings of the NT. That that left me was perplexed. He/she/you seems that PAM not this allowing the auth or thing of the type. The smb_auth that I use in my SQUID makes everything right. == If you already have a username/pw set (by wbinfo -A), then I would suspect that you have SMB signing required, on a 'fixed' DC (MS did not used to enforce this). == I don't know more than to do, therefore I already read countless documents to I respect. If you want I give him/her the password of the ssh for that you among in the system and verify. I am very depressed, because they are 2 facilities with the same problem. []s --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.465 / Virus Database: 263 - Release Date: 25/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] A WIN95 machine list the shares but 98/win2k not
Why this conf dont work? A WIN95 machine list the shares but 98/win2k not [EMAIL PROTECTED] init.d]# smbclient -L //linus U% added interface ip=200.168.58.231 bcast=200.168.58.255 nmask=255.255.255.192 added interface ip=192.168.4.1 bcast=192.168.4.255 nmask=255.255.255.0 wins_srv_died(): Could not mark WINS server 127.0.0.1 down. Address not found in server list. session request to LINUS failed (Not listening for calling name) wins_srv_died(): Could not mark WINS server 127.0.0.1 down. Address not found in server list. session request to *SMBSERVER failed (Not listening for calling name) [EMAIL PROTECTED] init.d]# # Global parameters [global] workgroup = ADVOCACIA netbios name = LINUS server string = Samba Server security = share encrypt passwords = yes log file = /var/log/samba/log.%m max log size = 50 name resolve order = wins hosts socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 logon path = \\%N\profiles\%u logon home = \\LINUS\%u os level = 64 preferred master = yes local master = No domain master = no dns proxy = No wins support = yes printing = lprng unix password sync = no map to guest = never password level = 0 null passwords = no dead time = 0 debug level = 0 load printers = yes domain logons = no allow hosts = 192.168.4.0/ 255.255.255.0, 127.0.0.1 [netlogon] path = /usr/local/samba/lib/netlogon browseable = No available = yes [homes] comment = Home Directories read only = No browseable = no available = yes public = no writable = no only user = no [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 -BEGIN PGP PUBLIC KEY BLOCK- Version: GnuPG v1.0.6 (MingW32) Comment: For info see http://www.gnupg.org mQGiBD5fPr8RBAC4GydYCddbpvUo2g8xInqq8mJf4wIx0a1rX1cgNVX4Mx62kMXR fKDB9wjCUrj73xdJDtwTD778LABwuF9hTK0WjrxGCFhZ1Vk1nwM8wrNAO6m98HVF /gsb2ZrWp2LFsxUQsV2RfZXYax6xCI1czx5i+oPIz8z0eqSr5cpwwgGGAwCggeyg IhuYbgFxKZYpONfIus3c6j8EAI3JIz026gcbMRyD7jeAAi8e+Brh1rifrtXmXbxr /TQh1+biwIpA/HEPzgRZGkGzjhZdVd9Oxkgp6Zq3XKV9XpHnoucq/dvWTYaMm0pi pD85VNkROD2F/9owcFWKPWDYem/ipmyfhKgQ2nnUIrD9eHGxrxGBYW76Xx1htIoF 8GqlA/0XAXR0hopoVxgTEuLPOWT7MktY2f6vtvNG7pp1b0HzbLU7PRWNgCv8DRdG E7o1ewuT7KjiLbsTlmtI2Tw+BIWd8dWdcGkHl75DCdr/jyONkJvD6vPga98P36Nn H9/LJpf3kpaHud9K27ThpTWVCMuVyWXwK77RdNM56wHBJpMFurQhZmFjYXRlbmEg PGZhY2F0ZW5hQHN1cnNvbi5jb20uYnI+iF0EExECAB0FAj5fPr8FCQGUvIAFCwcK AwQDFQMCAxYCAQIXgAAKCRAH3evru7lBCyw4AJ9YMfqtOt26h9h/7W1Mm9Ga9/d3 oQCeKXBdahSPvEv+egRCYbcx5hLqAYi5AY0EPl8+3hAGAJu+Ezr636haP3Vjfgsh EnYX7s/yNSyNUkdcGjEC6dNKmlAZ8U5Tc3DD1vnkBEcSVjg2lrMSVADGZBCXuIEC keI/wbQWFQIKfPIZx0kJnW+np+tmTxZ/LoKV7gVqNW9hIKE5UWC8bzoH3EvtBRR8 LVLNADZUuhn17Wta0wJ+L+vB3Qa6DzwdSE98qCrsUWyCbC9JUdWjxKNH9X5H8Jl/ mXZOFprSeEs7k9P5XeNyv0lVVqVtDBA004KVAXHRvNSPvwADBQX/YMbUCZ8fVc6F xPKyBnBYNvRNlxbL+NyFzUGvTO/u+CTeJrvE/3O1Ax9AfXRjXdWgZ7mqhJAEAqWN ACE3g0Y4gFfMhSfgMYt9lmcNBUrk58h1kW2kYakEpOZlk3klO9HvKTmIYYyyu3vc Da0q+ALmATihlY8duAKUw/U1HV8P5JZ8LAjiaKpJQAj2XrH+WZ5YDi22zJ7M94zi CRBci5YCnAHmdfbKIyDXdCtLK2D0ouFt9+ahoxdioSrIBr34WauliEwEGBECAAwF Aj5fPt4FCQGUvIAACgkQB93r67u5QQvImQCfdARi8DpWjBCcZW9E6rfA8wTWK/gA n3kZ/R2hS/Kk7KLtvIOQ8Cd5y2UD =ry0w -END PGP PUBLIC KEY BLOCK- -Mensagem original- De: Amir Mostafa Saleh [mailto:[EMAIL PROTECTED] Enviada em: quinta-feira, 27 de março de 2003 09:00 Para: FRANCO Assunto: Testes com o Winbind Caro Franco, Ontem à noite eu fiz os testes com o Winbind, conforme tinha dito. Usei um servidor Windows 2000 SP2 e um Red Hat 8. Funcionou muito bem. Eu integrei os usuários do Active Directory no Linux, e fiz testes de logon no console do Linux e de logon via telnet utilizando os usuários e senhas do AD. Que tipo de problema você enfrentou exatamente? []'s Amir Mostafa Saleh Vento Solar Sistemas de Informação [EMAIL PROTECTED] --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.465 / Virus Database: 263 - Release Date: 25/3/2003 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.465 / Virus Database: 263 - Release Date: 25/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RES: RES: [Samba] Re: Winbind broken after 2.2.8 upgrade
] comment = Home Directories valid users = %S admin users = root,Administrator,catena read only = No create mask = 0664 directory mask = 0775 strict allocate = Yes strict locking = Yes [printers] comment = All Printers path = /var/spool/samba guest ok = Yes printable = Yes browseable = No [netlogon] comment = Network Logon Service path = /var/spool/samba/netlogon write list = root [Profiles] path = /var/spool/samba/profiles read only = No [PUBLICO] comment = Diretorio Publico path = /home/samba guest ok = Yes [pchome] comment = PC Directories path = /usr/pc/%u read only = No SECOND Instalation: Why this conf dont work? A WIN95 machine list the shares but 98/win2k not [EMAIL PROTECTED] init.d]# smbclient -L //linus U% added interface ip=200.168.58.231 bcast=200.168.58.255 nmask=255.255.255.192 added interface ip=192.168.4.1 bcast=192.168.4.255 nmask=255.255.255.0 wins_srv_died(): Could not mark WINS server 127.0.0.1 down. Address not found in server list. session request to LINUS failed (Not listening for calling name) wins_srv_died(): Could not mark WINS server 127.0.0.1 down. Address not found in server list. session request to *SMBSERVER failed (Not listening for calling name) [EMAIL PROTECTED] init.d]# # Global parameters [global] workgroup = ADVOCACIA netbios name = LINUS server string = Samba Server security = share encrypt passwords = yes log file = /var/log/samba/log.%m max log size = 50 name resolve order = wins hosts socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 logon path = \\%N\profiles\%u logon home = \\LINUS\%u os level = 64 preferred master = yes local master = No domain master = no dns proxy = No wins support = yes printing = lprng unix password sync = no map to guest = never password level = 0 null passwords = no dead time = 0 debug level = 0 load printers = yes domain logons = no allow hosts = 192.168.4.0/ 255.255.255.0, 127.0.0.1 [netlogon] path = /usr/local/samba/lib/netlogon browseable = No available = yes [homes] comment = Home Directories read only = No browseable = no available = yes public = no writable = no only user = no [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.465 / Virus Database: 263 - Release Date: 25/3/2003 Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 -Mensagem original- De: Andrew Bartlett [mailto:[EMAIL PROTECTED] Enviada em: quinta-feira, 27 de março de 2003 18:37 Para: FRANCO Cc: 'Andrew Bartlett' Assunto: Re: RES: [Samba] Re: Winbind broken after 2.2.8 upgrade On Thu, 2003-03-27 at 22:21, FRANCO wrote: Hi, I did send to you many e-mails where a show you manuy problems without any response from you WHY? You should send such e-mails to the list. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.465 / Virus Database: 263 - Release Date: 25/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Unable to join Win2k to Samba Domain
Hi, I dojnt read nothing about to create a machine name into smbpasswd Where did you found this Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 -BEGIN PGP PUBLIC KEY BLOCK- Version: GnuPG v1.0.6 (MingW32) Comment: For info see http://www.gnupg.org mQGiBD5fPr8RBAC4GydYCddbpvUo2g8xInqq8mJf4wIx0a1rX1cgNVX4Mx62kMXR fKDB9wjCUrj73xdJDtwTD778LABwuF9hTK0WjrxGCFhZ1Vk1nwM8wrNAO6m98HVF /gsb2ZrWp2LFsxUQsV2RfZXYax6xCI1czx5i+oPIz8z0eqSr5cpwwgGGAwCggeyg IhuYbgFxKZYpONfIus3c6j8EAI3JIz026gcbMRyD7jeAAi8e+Brh1rifrtXmXbxr /TQh1+biwIpA/HEPzgRZGkGzjhZdVd9Oxkgp6Zq3XKV9XpHnoucq/dvWTYaMm0pi pD85VNkROD2F/9owcFWKPWDYem/ipmyfhKgQ2nnUIrD9eHGxrxGBYW76Xx1htIoF 8GqlA/0XAXR0hopoVxgTEuLPOWT7MktY2f6vtvNG7pp1b0HzbLU7PRWNgCv8DRdG E7o1ewuT7KjiLbsTlmtI2Tw+BIWd8dWdcGkHl75DCdr/jyONkJvD6vPga98P36Nn H9/LJpf3kpaHud9K27ThpTWVCMuVyWXwK77RdNM56wHBJpMFurQhZmFjYXRlbmEg PGZhY2F0ZW5hQHN1cnNvbi5jb20uYnI+iF0EExECAB0FAj5fPr8FCQGUvIAFCwcK AwQDFQMCAxYCAQIXgAAKCRAH3evru7lBCyw4AJ9YMfqtOt26h9h/7W1Mm9Ga9/d3 oQCeKXBdahSPvEv+egRCYbcx5hLqAYi5AY0EPl8+3hAGAJu+Ezr636haP3Vjfgsh EnYX7s/yNSyNUkdcGjEC6dNKmlAZ8U5Tc3DD1vnkBEcSVjg2lrMSVADGZBCXuIEC keI/wbQWFQIKfPIZx0kJnW+np+tmTxZ/LoKV7gVqNW9hIKE5UWC8bzoH3EvtBRR8 LVLNADZUuhn17Wta0wJ+L+vB3Qa6DzwdSE98qCrsUWyCbC9JUdWjxKNH9X5H8Jl/ mXZOFprSeEs7k9P5XeNyv0lVVqVtDBA004KVAXHRvNSPvwADBQX/YMbUCZ8fVc6F xPKyBnBYNvRNlxbL+NyFzUGvTO/u+CTeJrvE/3O1Ax9AfXRjXdWgZ7mqhJAEAqWN ACE3g0Y4gFfMhSfgMYt9lmcNBUrk58h1kW2kYakEpOZlk3klO9HvKTmIYYyyu3vc Da0q+ALmATihlY8duAKUw/U1HV8P5JZ8LAjiaKpJQAj2XrH+WZ5YDi22zJ7M94zi CRBci5YCnAHmdfbKIyDXdCtLK2D0ouFt9+ahoxdioSrIBr34WauliEwEGBECAAwF Aj5fPt4FCQGUvIAACgkQB93r67u5QQvImQCfdARi8DpWjBCcZW9E6rfA8wTWK/gA n3kZ/R2hS/Kk7KLtvIOQ8Cd5y2UD =ry0w -END PGP PUBLIC KEY BLOCK- -Mensagem original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Em nome de Jean-Eric Cuendet Enviada em: quarta-feira, 26 de março de 2003 07:04 Para: [EMAIL PROTECTED] Assunto: [Samba] Unable to join Win2k to Samba Domain Hi, We have a network of about 20-30 win2k machines in a Samba 2.2.7 (RH7.3) domain. All are joined OK. From yesterday (no idea what changed...), I'm unable to join new machines in the domain... The message from win2k is The specified user doesn't exist. I join using the root user which is valid (able to connect to shares with this user). If I type a wrong password, I have a messsage Wrong user or password, so I think that the error message The specified user doesn't exist is not related to the root user used to join but to the machine name. But the machine name exists (I used WKS21) , was added to the smbpasswd file (with smbpasswd -a -m WKS21). su - WKS21$ works as expected. I don't understand what could happen And in the mean time, all the other workstation works like a charm! They are all in the domain and works well! Any idea? Thanks. -jec -- Jean-Eric Cuendet Riskpro Technologies SA Av du 14 avril 1b, 1020 Renens Switzerland Principal: +41 21 637 0110 Fax: +41 21 637 01 11 Direct: +41 21 637 0123 E-mail: [EMAIL PROTECTED] http://www.rptec.ch -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.465 / Virus Database: 263 - Release Date: 25/3/2003 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.465 / Virus Database: 263 - Release Date: 25/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Can't reach Samba shares from Win2k
/profiles read only = No [PUBLICO] comment = Diretorio Publico path = /home/samba guest ok = Yes [pchome] comment = PC Directories path = /usr/pc/%u read only = No Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 -BEGIN PGP PUBLIC KEY BLOCK- Version: GnuPG v1.0.6 (MingW32) Comment: For info see http://www.gnupg.org mQGiBD5fPr8RBAC4GydYCddbpvUo2g8xInqq8mJf4wIx0a1rX1cgNVX4Mx62kMXR fKDB9wjCUrj73xdJDtwTD778LABwuF9hTK0WjrxGCFhZ1Vk1nwM8wrNAO6m98HVF /gsb2ZrWp2LFsxUQsV2RfZXYax6xCI1czx5i+oPIz8z0eqSr5cpwwgGGAwCggeyg IhuYbgFxKZYpONfIus3c6j8EAI3JIz026gcbMRyD7jeAAi8e+Brh1rifrtXmXbxr /TQh1+biwIpA/HEPzgRZGkGzjhZdVd9Oxkgp6Zq3XKV9XpHnoucq/dvWTYaMm0pi pD85VNkROD2F/9owcFWKPWDYem/ipmyfhKgQ2nnUIrD9eHGxrxGBYW76Xx1htIoF 8GqlA/0XAXR0hopoVxgTEuLPOWT7MktY2f6vtvNG7pp1b0HzbLU7PRWNgCv8DRdG E7o1ewuT7KjiLbsTlmtI2Tw+BIWd8dWdcGkHl75DCdr/jyONkJvD6vPga98P36Nn H9/LJpf3kpaHud9K27ThpTWVCMuVyWXwK77RdNM56wHBJpMFurQhZmFjYXRlbmEg PGZhY2F0ZW5hQHN1cnNvbi5jb20uYnI+iF0EExECAB0FAj5fPr8FCQGUvIAFCwcK AwQDFQMCAxYCAQIXgAAKCRAH3evru7lBCyw4AJ9YMfqtOt26h9h/7W1Mm9Ga9/d3 oQCeKXBdahSPvEv+egRCYbcx5hLqAYi5AY0EPl8+3hAGAJu+Ezr636haP3Vjfgsh EnYX7s/yNSyNUkdcGjEC6dNKmlAZ8U5Tc3DD1vnkBEcSVjg2lrMSVADGZBCXuIEC keI/wbQWFQIKfPIZx0kJnW+np+tmTxZ/LoKV7gVqNW9hIKE5UWC8bzoH3EvtBRR8 LVLNADZUuhn17Wta0wJ+L+vB3Qa6DzwdSE98qCrsUWyCbC9JUdWjxKNH9X5H8Jl/ mXZOFprSeEs7k9P5XeNyv0lVVqVtDBA004KVAXHRvNSPvwADBQX/YMbUCZ8fVc6F xPKyBnBYNvRNlxbL+NyFzUGvTO/u+CTeJrvE/3O1Ax9AfXRjXdWgZ7mqhJAEAqWN ACE3g0Y4gFfMhSfgMYt9lmcNBUrk58h1kW2kYakEpOZlk3klO9HvKTmIYYyyu3vc Da0q+ALmATihlY8duAKUw/U1HV8P5JZ8LAjiaKpJQAj2XrH+WZ5YDi22zJ7M94zi CRBci5YCnAHmdfbKIyDXdCtLK2D0ouFt9+ahoxdioSrIBr34WauliEwEGBECAAwF Aj5fPt4FCQGUvIAACgkQB93r67u5QQvImQCfdARi8DpWjBCcZW9E6rfA8wTWK/gA n3kZ/R2hS/Kk7KLtvIOQ8Cd5y2UD =ry0w -END PGP PUBLIC KEY BLOCK- --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.463 / Virus Database: 262 - Release Date: 17/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] NT rejected the tconX on the IPC
Why and when this occour? thanks [2003/03/19 14:27:44, 0] smbd/password.c:connect_to_domain_password_server(1307 connect_to_domain_password_server: machine CLEO rejected the tconX on the IPC Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.463 / Virus Database: 262 - Release Date: 17/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Couldn't find user 'surson+eder' in passdb
We are using WINBIND that seem to get users from the domain correctly.Every time that I create a password through the smbpasswd for an user using smbpasswd -a USER, the password is created in the file but when I give smbclient / /linux/share USE%Pass I receive msg saying that there was logon mistake in the NT. If I try to use an user of the domain that I don't still include below in the smbpasswd the mistake it is what happens. Can anybody help? [2003/03/19 14:27:43, 0] smbd/password.c:domain_client_validate(1554) domain_client_validate: Domain password server not available. [2003/03/19 14:27:43, 1] smbd/password.c:pass_check_smb(555) Couldn't find user 'surson+eder' in passdb. [2003/03/19 14:27:43, 1] smbd/reply.c:reply_sesssetup_and_X(988) Rejecting user 'surson+eder': authentication failed [2003/03/19 14:27:44, 0] smbd/password.c:connect_to_domain_password_server(1307 connect_to_domain_password_server: machine CLEO rejected the tconX on the IPC Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.463 / Virus Database: 262 - Release Date: 17/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] WINBIND RUNS BUT DONT AUTH THE NT USERS
Good morning, I am posting msgs on the NON OPERATION of WINBIND. GOOD I should say that without I had made any change in the system it started to work in an of my facilities. INCREDIBLE but it worked. The problem now is that I tried log in the samba not previously using an user servant in the smbpasswd and him of autentication mistake. But should not WINBIND facilitate that? Do I need to have user and password in the smbpasswd??? I lower the log of the mistake. The machines name is SUPPORT Log.support [2003/03/18 06:53:30, 0] smbd/password.c:domain_client_validate(1554) domain_client_validate: Domain password server not available. [2003/03/18 06:53:30, 1] smbd/password.c:pass_check_smb(555) Couldn't find user 'surson+danilo' in passdb. [2003/03/18 06:53:30, 1] smbd/password.c:pass_check_smb(555) Couldn't find user 'surson+danilo' in passdb. [2003/03/18 06:53:30, 1] smbd/reply.c:reply_sesssetup_and_X(988) Rejecting user 'surson+danilo': authentication failed [2003/03/18 06:53:30, 0] smbd/password.c:connect_to_domain_password_server(1307 connect_to_domain_password_server: machine CLEO rejected the tconX on the IPC [2003/03/18 06:53:30, 0] smbd/password.c:domain_client_validate(1554) domain_client_validate: Domain password server not available. [2003/03/18 06:54:24, 0] smbd/password.c:connect_to_domain_password_server(1307 connect_to_domain_password_server: machine CLEO rejected the tconX on the IPC [2003/03/18 06:54:24, 0] smbd/password.c:domain_client_validate(1554) domain_client_validate: Domain password server not available. [2003/03/18 06:54:24, 1] smbd/password.c:pass_check_smb(555) Couldn't find user 'surson+danilo' in passdb. [2003/03/18 06:54:24, 1] smbd/password.c:pass_check_smb(555) Couldn't find user 'surson+danilo' in passdb. [2003/03/18 06:54:24, 1] smbd/reply.c:reply_sesssetup_and_X(988) Rejecting user 'surson+danilo': authentication failed Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.463 / Virus Database: 262 - Release Date: 17/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] WINBIND LOGS
Domain=[SURSON] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] [2003/03/18 06:48:52, 1] nsswitch/winbindd_group.c:winbindd_getgrnam_from_gid(3 Could not convert gid 10032 to rid [2003/03/18 06:48:52, 1] nsswitch/winbindd_user.c:winbindd_getpwnam_from_uid(22 Could not convert uid 10032 to rid Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 -Mensagem original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Em nome de FRANCO Enviada em: quarta-feira, 19 de março de 2003 07:35 Para: [EMAIL PROTECTED] Assunto: [Samba] WINBIND RUNS BUT DONT AUTH THE NT USERS Good morning, I am posting msgs on the NON OPERATION of WINBIND. GOOD I should say that without I had made any change in the system it started to work in an of my facilities. INCREDIBLE but it worked. The problem now is that I tried log in the samba not previously using an user servant in the smbpasswd and him of autentication mistake. But should not WINBIND facilitate that? Do I need to have user and password in the smbpasswd??? I lower the log of the mistake. The machines name is SUPPORT Log.support [2003/03/18 06:53:30, 0] smbd/password.c:domain_client_validate(1554) domain_client_validate: Domain password server not available. [2003/03/18 06:53:30, 1] smbd/password.c:pass_check_smb(555) Couldn't find user 'surson+danilo' in passdb. [2003/03/18 06:53:30, 1] smbd/password.c:pass_check_smb(555) Couldn't find user 'surson+danilo' in passdb. [2003/03/18 06:53:30, 1] smbd/reply.c:reply_sesssetup_and_X(988) Rejecting user 'surson+danilo': authentication failed [2003/03/18 06:53:30, 0] smbd/password.c:connect_to_domain_password_server(1307 connect_to_domain_password_server: machine CLEO rejected the tconX on the IPC [2003/03/18 06:53:30, 0] smbd/password.c:domain_client_validate(1554) domain_client_validate: Domain password server not available. [2003/03/18 06:54:24, 0] smbd/password.c:connect_to_domain_password_server(1307 connect_to_domain_password_server: machine CLEO rejected the tconX on the IPC [2003/03/18 06:54:24, 0] smbd/password.c:domain_client_validate(1554) domain_client_validate: Domain password server not available. [2003/03/18 06:54:24, 1] smbd/password.c:pass_check_smb(555) Couldn't find user 'surson+danilo' in passdb. [2003/03/18 06:54:24, 1] smbd/password.c:pass_check_smb(555) Couldn't find user 'surson+danilo' in passdb. [2003/03/18 06:54:24, 1] smbd/reply.c:reply_sesssetup_and_X(988) Rejecting user 'surson+danilo': authentication failed Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.463 / Virus Database: 262 - Release Date: 17/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.463 / Virus Database: 262 - Release Date: 17/3/2003 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.463 / Virus Database: 262 - Release Date: 17/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RES: [Samba] WINBIND with usernames with
Good night, I am inexperienced but I am facing countless problems with WINBIND + it DANCES THE SAMBA + NT2k. WINBIND began to work alone after countless attempts. The times I turn off the file smbpasswd and give in before I don't get more to enter in the directories of the SAMBA. Even with the wbinfo -g coming back the users' groups, do I only get to do to enter (the times) done users create by the smbpasswd when it works. did That happen with you? -Mensagem original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Em nome de Tom Dickson Enviada em: quarta-feira, 19 de março de 2003 17:06 Para: samba mailing list Assunto: [Samba] WINBIND with usernames with Samba doesn't allow connections from usernames that have in them. For example, using 2.2.5 and winbind with security = DOMAIN password server = win2kmixed workgroup = MIXEDDOMAIN all my users can login, (for example MIXEDDOMAIN+aho, MIXEDDOMAIN+tdickson), but my users named and bobalso (which should be MIXEDDOMAIN+ and MIXEDDOMAIN+bobalso) don't work. The log.win2kclient file indicates MIXEDDOMAIN+that samba has changed to _. (I.E, unable to connect for user _ or user bobalso_, which won't work because it can't validate those users with the domain controller (windows 2000), because they don't exist. Is there anyway to work around this? If this sounds too convoluted, let me know. I can add smb.conf files and log files, but I think the problem is samba changing to _ before processing the login request. Thank you, Tom Dickson -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.463 / Virus Database: 262 - Release Date: 17/3/2003 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.463 / Virus Database: 262 - Release Date: 17/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SAMBA WILL JOIN IN A DOMAIN IN WIN2k Small bissinessserver???
Hi, Its possible to join SAMBA in a SMALL BUSSINESS WIN2k? []s --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.463 / Virus Database: 262 - Release Date: 17/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] I feel abandoned
Hello friends, I am Brazilian and I don't know how to write as well as I speak in English. I am using a translator. Good, I find strange this list.. It is the first list in the last 12 years in that I write but NOBODY ANSWERS ME. I try to always order examples than this happening me but NOBODY answers me. I don't believe that the desenvolvedores is not interested in the problems caused by the software, and so a little that my problems are so ONLY since I installed LINUX+SAMBA + WINBIN in 15 places and in the 15it gave problem. The errors are always the same ones. Impossible that nobody has had problems with the autentication and winbind. The MOST INCREDIBLE is that in the google don't appear clear answers although they exist more than 15 cases same to mine. What to do? To who to SCREAM? To have a list for solving SIMPLE problems I don't think the case. Hugs and excuse for the relief, but I feel abandoned. Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.462 / Virus Database: 261 - Release Date: 13/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RES: [Samba] I feel abandoned
FROM NT \\firewall.surson runs perfectly WHY??? [EMAIL PROTECTED] init.d]# ./smb status smbd (pid 12183) está rodando... nmbd (pid 1397) está rodando... [EMAIL PROTECTED] init.d]# smbclient //firewall.surson/profile -Ucatena%motpock added interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0 Domain=[SURSON] OS=[Unix] Server=[Samba 2.2.3a] tree connect failed: NT_STATUS_BAD_NETWORK_NAME [EMAIL PROTECTED] init.d]# smbclient //firewall.surson/profile -UAdministrator%paocomo added interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0 Domain=[SURSON] OS=[Unix] Server=[Samba 2.2.3a] tree connect failed: NT_STATUS_BAD_NETWORK_NAME [EMAIL PROTECTED] init.d]# Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 -Mensagem original- De: Trey Nolen [mailto:[EMAIL PROTECTED] Enviada em: domingo, 16 de março de 2003 13:54 Para: FRANCO Assunto: Re: [Samba] I feel abandoned Winbind is fairly new. The majority of people are not using it yet. Google doesn't show results because people are not yet having the problems, and are not asking about them. If someone knows how to fix it, they will answer. When noone answers, noone knows. See if you can do your installation without winbind. Trey Nolen - Original Message - From: FRANCO [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: 'Gerald (Jerry) Carter' [EMAIL PROTECTED] Sent: Sunday, March 16, 2003 10:45 AM Subject: [Samba] I feel abandoned Hello friends, I am Brazilian and I don't know how to write as well as I speak in English. I am using a translator. Good, I find strange this list.. It is the first list in the last 12 years in that I write but NOBODY ANSWERS ME. I try to always order examples than this happening me but NOBODY answers me. I don't believe that the desenvolvedores is not interested in the problems caused by the software, and so a little that my problems are so ONLY since I installed LINUX+SAMBA + WINBIN in 15 places and in the 15it gave problem. The errors are always the same ones. Impossible that nobody has had problems with the autentication and winbind. The MOST INCREDIBLE is that in the google don't appear clear answers although they exist more than 15 cases same to mine. What to do? To who to SCREAM? To have a list for solving SIMPLE problems I don't think the case. Hugs and excuse for the relief, but I feel abandoned. Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.462 / Virus Database: 261 - Release Date: 13/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.462 / Virus Database: 261 - Release Date: 13/3/2003 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.462 / Virus Database: 261 - Release Date: 13/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Why winbindd dont run?
Can you help me please? [EMAIL PROTECTED] init.d]# smbpasswd -r cleo.surson -j surson -UAdministrator%camais Joined domain SURSON. [EMAIL PROTECTED] init.d]# ./smb start Iniciando os serviços SMB: [ OK ] Iniciando os serviços NMB: [ OK ] Iniciando os serviços Winbind: [ OK ] [EMAIL PROTECTED] init.d]# ./smb status smbd (pid 2325) está rodando... nmbd (pid 2039) está rodando... winbind está parado ( stoped) Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.461 / Virus Database: 260 - Release Date: 10/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] WINBIND
Hellow I m tryng to run winbind with the msg: Could not connect to a dc for domain SURSON , when I did winbindd -i -d 100 More than this when: smbclient //firewall/homes + password I receive: session setup failed: NT_STATUS_LOGON_FAILURE smbclient //firewall/homes -U Administrador and password [EMAIL PROTECTED] init.d]# smbclient //firewall/homes -U Administrator added interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0 Got a positive name query response from 192.168.1.2 ( 192.168.1.1 ) Password: Domain=[SURSON] OS=[Unix] Server=[Samba 2.2.3a] tree connect failed: NT_STATUS_WRONG_PASSWORD Why I receive this if \\firewall is the linux box, not the NT2k smbclient //cleo/downloads -U Administrator more password I receive the correct response Got a positive name query response from 192.168.1.2 ( 192.168.1.2 ) Password: Domain=[SURSON] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] smb: \ WITH EXPLORER form de WIN2kr \\firewall logado with Administrator everything goes OK and I receive the tree. I dont understand... Please help I've stopped 83 spam messages. You can too! Get your free, safe spam protection at http://www.cloudmark.com/spamnetsig/ -Mensagem original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Em nome de News Enviada em: terça-feira, 11 de março de 2003 01:56 Para: News; Christopher Odenbach; [EMAIL PROTECTED] Assunto: Re: [Samba] Samba and Active Diectory I have samba 2.2.7 installed on a Sol8 unix box I have also config'ed Winbind. My aim is to map my samba share to my win2k Active Directory server - and apply folder lever permision ie.. \\samba-server\home-share%username%\ however I am seeing only SIDs Everyone and Administrator in the security tab of my share [sub]folders. It there a way to implement folder level security on Active Directory server of samba mounted shares? I can see my users from wbinfo -u - Original Message - From: News [EMAIL PROTECTED] To: Christopher Odenbach [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Saturday, March 08, 2003 12:06 AM Subject: Re: [Samba] Samba and Active Diectory any idea: bash-2.03# /usr/local/samba/bin/smbpasswd -j JAMDUNG -r PDC -U Administrator Password: Error connecting to PDC Unable to join domain JAMDUNG. bash-2.03# ./wbinfo -m bash-2.03# ./wbinfo -u 0xc022 bash-2.03# ./wbinfo -u Administartor 0xc022 bash-2.03# - Original Message - From: Christopher Odenbach [EMAIL PROTECTED] To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Tuesday, March 04, 2003 2:25 AM Subject: Re: [Samba] Samba and Active Diectory Hi, problem: I wish to implement samba on a solaris 8 with authentication from a win2k active directory server. I wish to have user dorectories mounted to AD server via samba and authenticated via AD. Anyone knows an easy/doable way to do this? If you have all the windows users also defined on the solaris box (locally in /etc/passwd, via nis or ldap), then just - set security = domain - join the samba server to the AD domain If you don't want to define the users on solaris, use winbind. Christopher -- == Dipl.-Ing. Christopher Odenbach HNI Rechnerbetrieb [EMAIL PROTECTED] Tel.: +49 5251 60 6215 == -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.459 / Virus Database: 258 - Release Date: 25/2/2003 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.459 / Virus Database: 258 - Release Date: 25/2/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Winbind more infos
[EMAIL PROTECTED] /sbin]# cd /etc/rc.d/init.d [EMAIL PROTECTED] init.d]# ./smb stop Interrompendo os serviços SMB: [ OK ] Interrompendo os serviços NMB: [ OK ] [EMAIL PROTECTED] init.d]# ./smb start Iniciando os serviços SMB: [ OK ] Iniciando os serviços NMB: [ OK ] [EMAIL PROTECTED] init.d]# killall winbindd winbindd: no process killed [EMAIL PROTECTED] init.d]# smbpasswd -r cleo -j SURSON fetch_domain_sid: machine cleo rejected the tconX on the IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. Failed to get domain SID. Unable to join domain SURSON. [EMAIL PROTECTED] init.d]# --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.459 / Virus Database: 258 - Release Date: 25/2/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Errors LOG from winbind
Log.winbindd -d 100 [2003/03/11 04:49:13, 1] lib/debug.c:debug_message(250) INFO: Debug class all level = 1 (pid 8383 from pid 8383) [2003/03/11 04:49:13, 1] nsswitch/winbindd_util.c:get_domain_info(137) getting trusted domain list [2003/03/11 04:49:14, 1] libsmb/cliconnect.c:cli_establish_connection(867) failed tcon_X [2003/03/11 04:52:10, 1] lib/debug.c:debug_message(250) INFO: Debug class all level = 1 (pid 8459 from pid 8459) [2003/03/11 04:52:10, 1] nsswitch/winbindd_util.c:get_domain_info(137) getting trusted domain list [2003/03/11 04:52:11, 1] libsmb/cliconnect.c:cli_establish_connection(867) failed tcon_X [2003/03/11 04:54:19, 1] lib/debug.c:debug_message(250) INFO: Debug class all level = 100 (pid 8508 from pid 8508) doing parameter log file = /var/log/samba/log.%m doing parameter max log size = 50 doing parameter name resolve order = hosts wins lmhosts bcast doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 doing parameter os level = 0 doing parameter preferred master = False doing parameter local master = No doing parameter domain master = False doing parameter dns proxy = No doing parameter wins server = 192.168.1.2 [2003/03/11 04:54:20, 4] lib/wins_srv.c:wins_srv_load_list(139) wins_srv_load_list(): Building WINS server list: 192.168.1.2, 1 WINS server listed. doing parameter winbind uid = 1-2 doing parameter winbind gid = 1-2 doing parameter winbind cache time = 10 doing parameter template homedir = /home/winnt/%D/%U doing parameter template shell = /bin/bash doing parameter winbind separator = + doing parameter hosts allow = 192.168.1. 192.168.2. 127. doing parameter printing = lprng [2003/03/11 04:54:20, 2] param/loadparm.c:do_section(2962) Processing section [homes] doing parameter comment = Home Directories doing parameter read only = No [2003/03/11 04:54:20, 2] param/loadparm.c:do_section(2962) Processing section [printers] doing parameter comment = All Printers doing parameter path = /var/spool/samba doing parameter guest ok = Yes doing parameter printable = Yes doing parameter browseable = No [2003/03/11 04:54:20, 4] param/loadparm.c:lp_load(3400) pm_process() returned Yes [2003/03/11 04:54:20, 3] param/loadparm.c:lp_add_ipc(1942) adding IPC service IPC$ [2003/03/11 04:54:20, 3] param/loadparm.c:lp_add_ipc(1942) adding IPC service ADMIN$ [2003/03/11 04:54:20, 2] lib/interface.c:add_interface(81) added interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0 [2003/03/11 04:54:20, 6] lib/charset.c:codepage_initialise(336) codepage_initialise: client code page = 850 [2003/03/11 04:54:20, 5] lib/charset.c:load_client_codepage(194) load_client_codepage: loading codepage 850. Adding chars 0x85 0xb7 (l-u = True) (u-l = True) Adding chars 0xa0 0xb5 (l-u = True) (u-l = True) Adding chars 0x83 0xb6 (l-u = True) (u-l = True) Adding chars 0xc6 0xc7 (l-u = True) (u-l = True) Adding chars 0x84 0x8e (l-u = True) (u-l = True) Adding chars 0x86 0x8f (l-u = True) (u-l = True) Adding chars 0x91 0x92 (l-u = True) (u-l = True) Adding chars 0x87 0x80 (l-u = True) (u-l = True) Adding chars 0x8a 0xd4 (l-u = True) (u-l = True) Adding chars 0x82 0x90 (l-u = True) (u-l = True) Adding chars 0x88 0xd2 (l-u = True) (u-l = True) Adding chars 0x89 0xd3 (l-u = True) (u-l = True) Adding chars 0x8d 0xde (l-u = True) (u-l = True) Adding chars 0xa1 0xd6 (l-u = True) (u-l = True) Adding chars 0x8c 0xd7 (l-u = True) (u-l = True) Adding chars 0x8b 0xd8 (l-u = True) (u-l = True) Adding chars 0xd0 0xd1 (l-u = True) (u-l = True) Adding chars 0xa4 0xa5 (l-u = True) (u-l = True) Adding chars 0x95 0xe3 (l-u = True) (u-l = True) Adding chars 0xa2 0xe0 (l-u = True) (u-l = True) Adding chars 0x93 0xe2 (l-u = True) (u-l = True) Adding chars 0xe4 0xe5 (l-u = True) (u-l = True) Adding chars 0x94 0x99 (l-u = True) (u-l = True) Adding chars 0x9b 0x9d (l-u = True) (u-l = True) Adding chars 0x97 0xeb (l-u = True) (u-l = True) Adding chars 0xa3 0xe9 (l-u = True) (u-l = True) Adding chars 0x96 0xea (l-u = True) (u-l = True) Adding chars 0x81 0x9a (l-u = True) (u-l = True) Adding chars 0xec 0xed (l-u = True) (u-l = True) Adding chars 0xe7 0xe8 (l-u = True) (u-l = True) Adding chars 0x9c 0x0 (l-u = False) (u-l = False) [2003/03/11 04:54:20, 10] lib/util_unistr.c:load_dos_unicode_map(706) load_dos_unicode_map: 850 [2003/03/11 04:54:20, 5] lib/util_unistr.c:load_unicode_map(567) load_unicode_map: loading unicode map for codepage 850. [2003/03/11 04:54:20, 10] lib/util_unistr.c:load_unix_unicode_map(723) load_unix_unicode_map: ISO8859-1 (init_done=0, override=0) [2003/03/11 04:54:20, 5] lib/util_unistr.c:load_unicode_map(567) load_unicode_map: loading unicode map for codepage ISO8859-1. [2003/03/11 04:54:20, 2] lib/interface.c:add_interface(81) added interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0 [2003/03/11 04:54:20,
[Samba] WINBIND
Ola a todos da LISTA Estou tentando connectar o meu winbind e recebo Could not connect to a dc for domain SURSON , qdo dou winbindd -i -d 100 O mais gozado é que qdo dou smbclient //firewall/homes e a senha ele devolve: session setup failed: NT_STATUS_LOGON_FAILURE qdo dou smbclient //firewall/homes -U Administrador e depois a senha ele devolve [EMAIL PROTECTED] init.d]# smbclient //firewall/homes -U Administrator added interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0 Got a positive name query response from 192.168.1.2 ( 192.168.1.1 ) Password: Domain=[SURSON] OS=[Unix] Server=[Samba 2.2.3a] tree connect failed: NT_STATUS_WRONG_PASSWORD O problema é que //firewall é o BOX LINUX.. se eu der :smbclient //cleo/downloads -U Administrator e a senha eu recebo a resposta correta Got a positive name query response from 192.168.1.2 ( 192.168.1.2 ) Password: Domain=[SURSON] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] smb: \ O mais gozado é que se eu for via EXPLORER DO WIN2K e der \\firewall logado como Administrator tudo ROLA NORMAL e ele entra e lista as diretorios. O QUE SERA QUE TA ROLANDO??? --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.459 / Virus Database: 258 - Release Date: 25/2/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Samba 2.2.4 Binary Package
Title: RE: Samba 2.2.4 Binary Package Hi Jean, in order to perform a "clean" attempt, I erased completely the directory of my samba installation, removed the samba_startup.com file, removed the tcpip$configuration.dat and did the following: - reconfigured the tcpip - re-linked your distribution - re-installed the distribution No luck, identical result. Here in attachment the output of the commands you suggested me to issue. Pls. let me know. Noone else succeded in installing samba on a microvax 3100 ? - Original Message - From: COLLOT Jean-Yves To: 'Franco Tassone' Sent: Tuesday, November 19, 2002 9:46 AM Subject: RE: Samba 2.2.4 Binary Package Hi. All this is very surprising to me, especially the VMS crash/reboot, because if the SMBD service is not enabled (as it seems, according to your error message at startup), accessing your VMS machine from a PC does not do anything at all, from the Samba point of vue... Anyway, the point is that the SMBD service does not start, and that this failure can not be caused by anything in your smb.conf file, because this file is not accessed or used in any way at that time. I have the feeling that your SMBD service is not correctly defined, may be because it was defined by a previous SAMBA installation. I suggest to remove it, and redefine it correctly, as follows : $ TCPIP SET NOSERV SMBD $ @SAMBA_ROOT:[BIN]SMBD_SETUP_TCPIP If it fails again, could you send me the results of the following commands : $ TCPIP SHOW DEV $ TCPIP SHOW SERVICE/FULL Regards, J.Y. Collot ---Message d'origine- De: Franco Tassone [SMTP:[EMAIL PROTECTED]] Date: lundi 18 novembre 2002 23:09 À: Josef Rattner Cc: Samba VMS; [EMAIL PROTECTED]; Wolter.Günter Objet: Re: Samba 2.2.4 Binary Package Hi all I've checked the system logicals, and I can assure that SAMBA_ROOT is defined ok, tried also Wolter advice in using VMS filenaming in smb.conf. No changes, same error during startup, I can't browse the network although I "see" the workgroup defined. If for chance I try to access the VMS samba server for my pc, VMS itself dumps and the system restarts ! BTW, I've not been able to run any samba on this machine (2.0.3 and 2.0.6 ko), though I have samba running on a separate volume in which I've installed netbsd. Any more hints ? Hi, I've downloaded the installation kit for Samba/VMS 2.2.4 and installed it on a mVax3100, running ovms7.2 with compaq tcpip from the same distribution. Obviously I used the precompiled modules for the vax atchitecture, so I had no problems in building and installing the the kit. I've added the SAMBA_STARTUP.COM in my startup command file, unfortunatelly I receive the following error at startup: %TCPIP-E-STARTERROR, error starting SMBD service -RMS-F-DEV, error in device name or inappropriate device type for operation %TCPIP-E-STARTERROR, error starting SMBD service -RMS-F-DEV, error in device name or inappropriate device type for operation The following is my smb.conf [global] workgroup = WORKGROUP dead time = 10 map archive = no printing = bsd printcap name = /sys$manager/tcpip$printcap.dat load printers = yes status = yes security = user default service = default create mode = 0777 interfaces = SE0 guest account = SAMBA_GUEST log file = /samba_log/log.%m socket options = TCP_NODELAY share modes = no [homes] comment = Home Directories browseable = no read only = no create mode = 0750 I receive the error at startup either I specify "interfaces = SE0" or not, btw SE0 is the ethernet interface as seen by tcpip. Could you help me please ? Cheers - Original Message - From: [EMAIL PROTECTED] To: "Samba VMS" [EMAIL PROTECTED] Sent: Tuesday, November 12, 2002 9:44 AM Subject: RE: Samba 2.2.4 Binary Package An installation kit for Samba/VMS 2.2.4 is available athttp://www.pi-net.dyndns.org/anonymous/jyc/ checks.log Description: Binary data
Re: Samba 2.2.4 Binary Package
Hi, I've downloaded the installation kit for Samba/VMS 2.2.4 and installed it on a mVax3100, running ovms7.2 with compaq tcpip from the same distribution. Obviously I used the precompiled modules for the vax atchitecture, so I had no problems in building and installing the the kit. I've added the SAMBA_STARTUP.COM in my startup command file, unfortunatelly I receive the following error at startup: %TCPIP-E-STARTERROR, error starting SMBD service -RMS-F-DEV, error in device name or inappropriate device type for operation %TCPIP-E-STARTERROR, error starting SMBD service -RMS-F-DEV, error in device name or inappropriate device type for operation The following is my smb.conf [global] workgroup = WORKGROUP dead time = 10 map archive = no printing = bsd printcap name = /sys$manager/tcpip$printcap.dat load printers = yes status = yes security = user default service = default create mode = 0777 interfaces = SE0 guest account = SAMBA_GUEST log file = /samba_log/log.%m socket options = TCP_NODELAY share modes = no [homes] comment = Home Directories browseable = no read only = no create mode = 0750 I receive the error at startup either I specify interfaces = SE0 or not, btw SE0 is the ethernet interface as seen by tcpip. Could you help me please ? Cheers - Original Message - From: [EMAIL PROTECTED] To: Samba VMS [EMAIL PROTECTED] Sent: Tuesday, November 12, 2002 9:44 AM Subject: RE: Samba 2.2.4 Binary Package An installation kit for Samba/VMS 2.2.4 is available at http://www.pi-net.dyndns.org/anonymous/jyc/
