[Samba] Very high cpu due to cups. Samba 3.5.2 ok though.
Hi, We're seeing this at the moment. It's quite a beefy box and we can't see any reason why cups is running so high: 4 x Intel(R) Xeon(R) CPU E5345 @ 2.33GHz rpm -q cups cups-1.3.7-11.el5_4.6 rpm -q samba3 samba3-3.5.2-43.el5 Samba is from sernet and is running with an OpenLDAP backend in full domain mode with about 100 users and about 12 printers. top - 14:28:21 up 21:07, 5 users, load average: 1.35, 1.07, 1.13 Tasks: 274 total, 2 running, 272 sleeping, 0 stopped, 0 zombie Cpu(s): 22.4%us, 1.6%sy, 0.0%ni, 75.8%id, 0.0%wa, 0.0%hi, 0.2%si, 0.0%st Mem: 3753984k total, 2629912k used, 1124072k free, 338668k buffers Swap: 2031608k total, 184k used, 2031424k free, 1624844k cached PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND 17025 root 18 0 12052 5020 2480 R 83.4 0.1 19:59.94 cupsd free -m total used free sharedbuffers cached Mem: 3666 2567 1098 0331 1586 -/+ buffers/cache:649 3016 Swap: 1983 0 1983 We've switch off logging in cupsd.conf which has helped bring it down from 99% CPU. Anyone seen this before? Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Extended ACL stealing ownership on 3.2.7
> >> How do I keep rwx on all the additional users, as they all aren't part >> of the "testgroup" group. > > Can you try 3.2.8, I think I finally nailed this *evil* bug > (number #4308) with this release :-). > > Thanks, > > Jeremy. > I think this may be just: http://us6.samba.org/samba/docs/man/Samba-HOWTO-Collection/AccessControls.html#id2608351 Or am I wrong here? Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Extended ACL stealing ownership on 3.2.7
Hi all, After setting permissions on a file. If anyone authorised to open the file writes to it, the ACL gets deleted and that person becomes the owner of the file and the group is reset to the default. For example, whenever a certain user opens and changes a file in the problem folder he becomes the owner and another gets kicked of the list: More clearly, lee was the last one to write to this spreadsheet: getfac example.xls # file: example.xls # owner: joe # group: testgroup user::rwx user:graham:r-x user:julia:r-x user:lee:rwx user:paul:r-x group::r-- mask::rwx other::r-- How do I keep rwx on all the additional users, as they all aren't part of the "testgroup" group. Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Re: Samba 3.0.28a on Ubuntu LTS 8.01 and Vista sp1 offline files (now testing with Samba 3.2.7).
No, 3.2.7 didn't help. Still creating these .tmp files We're testing with a cloned VM and a new Vista SP1 VM to see if it's the PC. It worked fine, but when the suspect PC goes back tp syncing against a Vista PC with Shares no .tmp files are created. So this must be something the Samba is/isn't doing. On 16/01/2009, Jeremy Allison wrote: > On Fri, Jan 16, 2009 at 08:28:36PM +, Gavin Henry wrote: >> Hi All, >> >> We're really having problems with Offline Files/Folders and Vista sp1 >> laptops/desktops. >> >> We working with Microsoft just now to debug this as we're registered >> partners (for testing Samba/LDAP etc.). We now have a massive thread >> going in the private Vista 4-hr response support forums and we're on >> to log files debugging Vista side. We've cleared CSC etc. applied the >> following: >> >> http://blogs.technet.com/filecab/archive/2007/03/16/using-offline-files-with-samba-emc-servers-nas-devices.aspx >> >> We applied the registry patch and oplocks settings (even though most >> are on by default). The map settings olny allowed directories to be >> shown for some reason though, so we disabled. For now the customer has >> switched back to doing offline files against a Vista Desktop that is >> sharing out folders and there are no .tmp files being created anymore, >> so must be something Samba side. >> >> We also compiled up 3.2.7 and are now running it in the hope 3.0.28a >> is somehow missing the patch that Jeremy did in 2007 to fix this >> previously. > > Did this help ? > > Jeremy. > -- Sent from my mobile device http://www.suretecsystems.com/services/openldap/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.28a on Ubuntu LTS 8.01 and Vista sp1 offline files (now testing with Samba 3.2.7).
>> We also compiled up 3.2.7 and are now running it in the hope 3.0.28a >> is somehow missing the patch that Jeremy did in 2007 to fix this >> previously. > > Did this help ? Nope, the customer has tested and .tmp files are still created. They have switched back to syncing to another Vista PC and there are now no .tmp files. So this definitely points to something not being set right on the Samba side or something extra a Vista Business PC is providing. Can anyone confirm they have Vista PC/Laptop <-> Samba and offline files/folders working perfectly? What debug information can I provide to help to get this to work? Thanks, Gavin. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.28a on Ubuntu LTS 8.01 and Vista sp1 offline files (now testing with Samba 3.2.7).
2009/1/16 Jeremy Allison : > On Fri, Jan 16, 2009 at 08:28:36PM +0000, Gavin Henry wrote: >> Hi All, >> >> We're really having problems with Offline Files/Folders and Vista sp1 >> laptops/desktops. >> >> We working with Microsoft just now to debug this as we're registered >> partners (for testing Samba/LDAP etc.). We now have a massive thread >> going in the private Vista 4-hr response support forums and we're on >> to log files debugging Vista side. We've cleared CSC etc. applied the >> following: >> >> http://blogs.technet.com/filecab/archive/2007/03/16/using-offline-files-with-samba-emc-servers-nas-devices.aspx >> >> We applied the registry patch and oplocks settings (even though most >> are on by default). The map settings olny allowed directories to be >> shown for some reason though, so we disabled. For now the customer has >> switched back to doing offline files against a Vista Desktop that is >> sharing out folders and there are no .tmp files being created anymore, >> so must be something Samba side. >> >> We also compiled up 3.2.7 and are now running it in the hope 3.0.28a >> is somehow missing the patch that Jeremy did in 2007 to fix this >> previously. > > Did this help ? > > Jeremy. > We're waiting for the customer to test, sorry forgot to mention that bit ;-) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Sorry for double post
Sorry about that, I got a NDN from another gateway and I thought it was a typo from the Samba list so sent it again. Cheers. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.28a on Ubuntu LTS 8.01 and Vista sp1 offline files (now testing with Samba 3.2.7).
Hi All, We're really having problems with Offline Files/Folders and Vista sp1 laptops/desktops. We working with Microsoft just now to debug this as we're registered partners (for testing Samba/LDAP etc.). We now have a massive thread going in the private Vista 4-hr response support forums and we're on to log files debugging Vista side. We've cleared CSC etc. applied the following: http://blogs.technet.com/filecab/archive/2007/03/16/using-offline-files-with-samba-emc-servers-nas-devices.aspx We applied the registry patch and oplocks settings (even though most are on by default). The map settings olny allowed directories to be shown for some reason though, so we disabled. For now the customer has switched back to doing offline files against a Vista Desktop that is sharing out folders and there are no .tmp files being created anymore, so must be something Samba side. We also compiled up 3.2.7 and are now running it in the hope 3.0.28a is somehow missing the patch that Jeremy did in 2007 to fix this previously. Anyone come across this before? We'll keep you updated when we here more back from Microsoft Technical support and hopefully get this resolved for others. Thanks, Gavin. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.28a on Ubuntu LTS 8.01 and Vista sp1 offline files (now testing with Samba 3.2.7).
Hi All, We're really having problems with Offline Files/Folders and Vista sp1 laptops/desktops. We working with Microsoft just now to debug this as we're registered partners (for testing Samba/LDAP etc.). We now have a massive thread going in the private Vista 4-hr response support forums and we're on to log files debugging Vista side. We've cleared CSC etc. applied the following: http://blogs.technet.com/filecab/archive/2007/03/16/using-offline-files-with-samba-emc-servers-nas-devices.aspx We applied the registry patch and oplocks settings (even though most are on by default). The map settings olny allowed directories to be shown for some reason though, so we disabled. For now the customer has switched back to doing offline files against a Vista Desktop that is sharing out folders and there are no .tmp files being created anymore, so must be something Samba side. We also compiled up 3.2.7 and are now running it in the hope 3.0.28a is somehow missing the patch that Jeremy did in 2007 to fix this previously. Anyone come across this before? We'll keep you updated when we here more back from Microsoft Technical support and hopefully get this resolved for others. Thanks, Gavin. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] sharing samba smbpasswd
You don't have to use slapd.d (I'm working on more and better documentation) and can just stick to slapd.conf. Only use that if you want to make changes on the fly that stick around at restart. On 29/12/2008, Scott Grizzard wrote: > I agree completely. LDAP is the "right" way to go. However, openldap > is a bit daunting for first time users, and the slapd.d way of > configuring openldap is not well documented for beginners. > > If the samba servers can go down for a few hours without causing too > big of a headache, and you are not doing domain authentications for > workstations, I wouldn't bother with ldap. It will take you a month > to get LDAP working the first time out, and if anything breaks, it is > much groping in the dark to get it working again. > > Bottom line: LDAP is the "right" way to do it, but the learning curve > is pretty steep. If you can live with the single point of failure, > live with it. If you can't, hire a consultant to walk you through it > the first time or buy a Mac X-Server, or invest in several bottles of > Malox and kiss a month of weekends goodbye. (On the plus side, doing > it yourself will teach you a lot about linux, ldap, and samba: > knowledge which you can lord over Microsoft techs that don't know the > first thing about the protocols and logic underlying Active Directory,) > > - Scott Grizzard > > On Dec 29, 2008, at 10:56 AM, John Drescher wrote: > >>> 1) LDAP where one server runs ldap and all servers authenticate >>> against it. >>> Advantages: easy to replicate and easily extendable for other uses. >>> Disadvantages: difficult to set up if you don't know what you are >>> doing. >>> >> With syncrepl pretty easy to add more ldap servers. I generally use 1 >> master and several read only replicas. I would never run a network (of >> more than 3 machines) with only 1 ldap server. >> >> http://www.zytrax.com/books/ldap/ch7/#ol-syncrepl-ro >> >> On the subject of domain controllers using LDAP. Since I have been >> doing this for > 5 years, I have a few comments. The ldap servers do >> not have to be on the same machine as the PDC or BDC. At work I have 3 >> LDAP servers. All 3 of them are on VIRTUAL machines. I have 1 my PDC >> on xen and my BDC on openvz. And the PDC and BDC do not have any samba >> file shares on them. One nice thing about this is moving the LDAP >> servers or domain controllers in this case becomes trivial. And also I >> do have backup servers on other virtual machines that are offline and >> can be turned on as needed and in less than 5 minutes any of these >> virtual machines can be the PDC and/or be the master ldap server. >> >> John >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/listinfo/samba > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba > -- Sent from my mobile device http://www.suretecsystems.com/services/openldap/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Automatically running a script on Samba PDC when Windows user changes his password
On 23/08/07, Felip Manyé <[EMAIL PROTECTED]> wrote: > Hello, > > I've installed a Samba 3 PDC using LDAP authentication, along with the > smbldap tools, on Ubuntu GNU/Linux. Everything works fine and (XP Pro) > Windows clients can join my domain. > I would like Samba to automatically run a (home made) script on the PDC > server when the user changes his password on his machine in order to update > it on other servers (for instance our mail server uses another LDAP for > authentication, but there are still many accounts of this kind), so that the > user has to remember only one password for all these applications. Maybe you should be tackling this on the Directory server side. -- http://www.suretecsystems.com/services/openldap/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba + LDAP + displayName attribute
On 23/08/07, Didster <[EMAIL PROTECTED]> wrote: > Thanks, > > I haven't had any other responses to this :o( So I will try and a read > though the archives [i did this before posting, but again wont hurt] > > Its driving me mad! Have you got nscd on? > > On 8/21/07, John Drescher <[EMAIL PROTECTED]> wrote: > > > When signing into Window XP, everything works fine. Clicking on the > > > start menu shows whatever is set in displayName at the top as the > > > persons name. > > > > > > However, after an as yet undetermined amount of time [about 20 mins], > > > it switches to displaying the UID. So at the top of the start menu it > > > will say "Joe Bloggs" for 20 minutes [ish], then switch to showing > > > "bloggsjoe" > > > > > > Just wondering if anyone knows what is causing this? I know it's not > > > critical, XP is still enable to authenticate after this amount of > > > time, but there could be other things going on that are not so > > > visible. > > > > > I don't know but I do remember seeing this on the samba-users list a > > few months back. Not sure when as I read a lot of posts on this > > list... > > > > John > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] [Docs] Alternative LDAP Database Initialization Script Error
On 03/07/07, John H Terpstra <[EMAIL PROTECTED]> wrote: On Tuesday 03 July 2007 04:48, Gavin Henry wrote: > Dear all, > > Should be cat <>EOL at: > > http://us1.samba.org/samba/docs/man/Samba-Guide/appendix.html#sbehap-ldapre >confc > > Thanks, > > Gavin. Yes indeed. Thanks. Fixed. Hi John, I've got a few OpenLDAP things for you too. e.g. attrs, not attr for the ACLs etc. I'll get a list/patch together soon. Thanks, Gavin ([EMAIL PROTECTED]) - John T. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] [Docs] Alternative LDAP Database Initialization Script Error
Dear all, Should be cat <>EOL at: http://us1.samba.org/samba/docs/man/Samba-Guide/appendix.html#sbehap-ldapreconfc Thanks, Gavin. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem compiling Samba 3.0.24 with OpenLDAP 2.3.35
On 11/05/07, Allysson Steve Mota Lacerda <[EMAIL PROTECTED]> wrote: I'm trying to install Samba with LDAP support but there are some errors during the compilation. I've used the same script a few weaks ago. The only differences are the versions of Samba and OpenLDAP. That's my error message: checking for LDAP support... yes checking ldap.h usability... yes checking ldap.h presence... yes checking for ldap.h... yes checking lber.h usability... yes checking lber.h presence... yes checking for lber.h... yes checking for ber_scanf in -llber... yes checking for ldap_init in -lldap... no checking for ldap_set_rebind_proc... no checking whether ldap_set_rebind_proc takes 3 arguments... 3 checking for ldap_dn2ad_canonical... no configure: error: libldap is needed for LDAP support Check your config.log It might be something else. Also, please don't install OpenLDAP without running "make test". That's just stupid. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem compiling Samba 3.0.24 with OpenLDAP 2.3.35
Check your config.log It might be something else. Forget that, it is something else, as configure has foudn libldap. Check your config.log ;-) Also, please don't install OpenLDAP without running "make test". That's just stupid. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: FUTEX_WAIT 3.0.23a [Fwd: Re: amanda-2.5.0p2 hanging on smbclient with configure]
> Would anyone have any ideas with smbclient sits at FUTEX_WAIT in below > message? Will try again with the just released 3.0.23b SUSE RPMS released today. > > Typing: > > strace smbclient -d 5 > > shows it sitting at: > > futex(0x2bdf2dc0, FUTEX_WAIT, 2, NU. > > SUSE 9.3 x86_64, Samba RPMS from main Samba site > > rpm -q samba-client > samba-client-3.0.23a-0.1.34 > > -- > Kind Regards, > > Gavin Henry. > Managing Director. > > T +44 (0) 1224 279484 > M +44 (0) 7930 323266 > F +44 (0) 1224 824887 > E [EMAIL PROTECTED] > > Open Source. Open Solutions(tm). > > http://www.suretecsystems.com/ > > > Original Message ---- > Subject: Re: amanda-2.5.0p2 hanging on smbclient with configure > From:"Gavin Henry" <[EMAIL PROTECTED]> > Date:Tue, August 8, 2006 4:44 pm > To: "Paul Bijnens" <[EMAIL PROTECTED]> > Cc: amanda-users@amanda.org > -- > > >> >>> >>>> On 2006-08-08 16:17, Gavin Henry wrote: >>>>> >>>>> Currently trying to compile 2.5.0p2 with: >>>>> >>>>> ./configure --with-user=amanda --with-group=disk --with-ssh-security >>>>> --with-config=Suretec --with-changer-device=/dev/sg2 >>>>> --with-tape-device=/dev/nst0 >>>>> >>>>> But configure just sits there at: >>>>> >>>>> checking for smbclient... /usr/bin/smbclient >>>>> >>>>> Same when adding --with-smbclient=/usr/bin/smbclient >>>> >>>> >>>> If you do not need smbclient support, then you can configure >>>> with "--without-smbclient" and work around this problem. >>> >>> I have tried that, and with --with-smbclient=no. >>> >>> I've been going through configure.in to see what the probs are. >>> >>>> >>>> If you do need it... then try to investigate what is blocking. >>>> It seems like "configure" is hanging in one of the next steps. >>>> >>>> Configure tries to find out what version of smbclient you have >>>> by running the command: >>>> >>>> smbclient '\\not.a.host.name\notashare' -U nosuchuser -N -Tx /dev/null >>> >>> Looks like it's this. It just hangs. >>> >> >> Must be smbclient, as it is taking forever, even when I jsut run: >> >> smblcient >> >> with no options. >> >> Forget it, will debug smbclient. Nothing wrong with Amanda. >> >> Thanks all. > > strace smbclient -d 5 > > show it sitting at: > > futex(0x2bdf2dc0, FUTEX_WAIT, 2, NULL > > Hmm. > >>> I just setup 2 clients on Fedora Core 5 with 2.5.0p2, and they both are >>> fine. >>> >>> The server is on a SUSE 9.3 x86_64 box, that has (Is a Samba PDC too): >>> >>> free -m >>> total used free sharedbuffers >>> cached >>> Mem: 3961296 3665 0 48 >>> 154 >>> -/+ buffers/cache: 93 3868 >>> Swap: 2070 0 2070 >>> >>> uname -a >>> Linux nas1 2.6.14.2-smp #2 SMP Thu Nov 17 15:31:40 GMT 2005 x86_64 >>> x86_64 >>> x86_64 GNU/Linux >>> >>> df -h >>> FilesystemSize Used Avail Use% Mounted on >>> /dev/sda1 73G 6.0G 67G 9% / >>> tmpfs 2.0G 0 2.0G 0% /dev/shm >>> /dev/sdb 6.9T 263G 6.6T 4% /storage >>> >>> lsscsi >>> [0:0:0:0]diskATA HTS541080G9SA00 MB4O /dev/sda >>> [4:0:1:0]tapeCERTANCE ULTRIUM 21775 /dev/st0 >>> [4:0:1:1]mediumx QUANTUM UHDL 000E - >>> [6:0:0:0]diskArecaARC-1160-VOL#00 R001 /dev/sdb >>> >>>> >>>> What happens if you run that manually? >>> >>> Hangs >>> >>>> The output of that step does not appear on screen however, so it could >>>> be that configure is actually hanging on the step after that. >>> >>> I think it's smbclient that is the problem. >>> >>>> >>>> The next step is finding out where the "gzip" program lives. >>>> Is does that by looking in several directories. >>>> If one of
Re: [Samba] FUTEX_WAIT 3.0.23a [Fwd: Re: amanda-2.5.0p2 hanging on smbclient with configure]
> On Tue, Aug 08, 2006 at 04:52:36PM +0100, Gavin Henry wrote: >> Would anyone have any ideas with smbclient sits at FUTEX_WAIT in below >> message? >> >> Typing: >> >> strace smbclient -d 5 >> >> shows it sitting at: >> >> futex(0x2bdf2dc0, FUTEX_WAIT, 2, NU. > > We'd need a more complete strace and a sniff of smbclient. 3.0.23b fixed it. Not sure was it was. Thanks. > Volker > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] FUTEX_WAIT 3.0.23a [Fwd: Re: amanda-2.5.0p2 hanging on smbclient with configure]
> On Tue, Aug 08, 2006 at 04:52:36PM +0100, Gavin Henry wrote: >> Would anyone have any ideas with smbclient sits at FUTEX_WAIT in below >> message? >> >> Typing: >> >> strace smbclient -d 5 >> >> shows it sitting at: >> >> futex(0x2bdf2dc0, FUTEX_WAIT, 2, NU. > > We'd need a more complete strace and a sniff of smbclient. Understood. Will report back once Samba has been upgraded. > > Volker > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] FUTEX_WAIT 3.0.23a [Fwd: Re: amanda-2.5.0p2 hanging on smbclient with configure]
Would anyone have any ideas with smbclient sits at FUTEX_WAIT in below message? Typing: strace smbclient -d 5 shows it sitting at: futex(0x2bdf2dc0, FUTEX_WAIT, 2, NU. SUSE 9.3 x86_64, Samba RPMS from main Samba site rpm -q samba-client samba-client-3.0.23a-0.1.34 -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Original Message Subject: Re: amanda-2.5.0p2 hanging on smbclient with configure From:"Gavin Henry" <[EMAIL PROTECTED]> Date:Tue, August 8, 2006 4:44 pm To: "Paul Bijnens" <[EMAIL PROTECTED]> Cc: amanda-users@amanda.org -- > >> >>> On 2006-08-08 16:17, Gavin Henry wrote: >>>> >>>> Currently trying to compile 2.5.0p2 with: >>>> >>>> ./configure --with-user=amanda --with-group=disk --with-ssh-security >>>> --with-config=Suretec --with-changer-device=/dev/sg2 >>>> --with-tape-device=/dev/nst0 >>>> >>>> But configure just sits there at: >>>> >>>> checking for smbclient... /usr/bin/smbclient >>>> >>>> Same when adding --with-smbclient=/usr/bin/smbclient >>> >>> >>> If you do not need smbclient support, then you can configure >>> with "--without-smbclient" and work around this problem. >> >> I have tried that, and with --with-smbclient=no. >> >> I've been going through configure.in to see what the probs are. >> >>> >>> If you do need it... then try to investigate what is blocking. >>> It seems like "configure" is hanging in one of the next steps. >>> >>> Configure tries to find out what version of smbclient you have >>> by running the command: >>> >>> smbclient '\\not.a.host.name\notashare' -U nosuchuser -N -Tx /dev/null >> >> Looks like it's this. It just hangs. >> > > Must be smbclient, as it is taking forever, even when I jsut run: > > smblcient > > with no options. > > Forget it, will debug smbclient. Nothing wrong with Amanda. > > Thanks all. strace smbclient -d 5 show it sitting at: futex(0x2bdf2dc0, FUTEX_WAIT, 2, NULL Hmm. >> I just setup 2 clients on Fedora Core 5 with 2.5.0p2, and they both are >> fine. >> >> The server is on a SUSE 9.3 x86_64 box, that has (Is a Samba PDC too): >> >> free -m >> total used free sharedbuffers >> cached >> Mem: 3961296 3665 0 48 >> 154 >> -/+ buffers/cache: 93 3868 >> Swap: 2070 0 2070 >> >> uname -a >> Linux nas1 2.6.14.2-smp #2 SMP Thu Nov 17 15:31:40 GMT 2005 x86_64 >> x86_64 >> x86_64 GNU/Linux >> >> df -h >> FilesystemSize Used Avail Use% Mounted on >> /dev/sda1 73G 6.0G 67G 9% / >> tmpfs 2.0G 0 2.0G 0% /dev/shm >> /dev/sdb 6.9T 263G 6.6T 4% /storage >> >> lsscsi >> [0:0:0:0]diskATA HTS541080G9SA00 MB4O /dev/sda >> [4:0:1:0]tapeCERTANCE ULTRIUM 21775 /dev/st0 >> [4:0:1:1]mediumx QUANTUM UHDL 000E - >> [6:0:0:0]diskArecaARC-1160-VOL#00 R001 /dev/sdb >> >>> >>> What happens if you run that manually? >> >> Hangs >> >>> The output of that step does not appear on screen however, so it could >>> be that configure is actually hanging on the step after that. >> >> I think it's smbclient that is the problem. >> >>> >>> The next step is finding out where the "gzip" program lives. >>> Is does that by looking in several directories. >>> If one of those directories happens to be mounted on a non-responsive >>> NFS-server, you hang here too. >>> >>> The list of directories is: >>> /bin:/usr/bin:/sbin:/usr/sbin:/usr/ucb:/usr/bsd:/etc:/usr/etc >>> /usr/local/sbin:/usr/local/bin:/usr/ccs/bin >>> and the value of $PATH from the user that runs configure. >>> >>> Anything strange when trying "test -e /bin/gzip"? (Try that for >>> all the above dirs) >> >> Nope, looks fine. >> >>> >>> >>> -- >>> Paul Bijnens, xplanation Technology ServicesTel +32 16 3
[Samba] Typo in DNS and DHCP Configuration of Howto book
Small one: "The /var/named/quenya.org.host file:" Should say: "The /var/named/quenya.org.hosts file:" Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] New Samba wiki on-line
> On Thu, 2006-03-02 at 16:59 +0000, Gavin Henry wrote: >> >> > -BEGIN PGP SIGNED MESSAGE- >> > Hash: SHA1 >> > >> > Gavin Henry wrote: >> >> http://fedoraproject.org/wiki/Legal/Licenses/OPL >> > >> > Thanks Gavin, >> > >> > Craig, Deryck, myself and the other core developers >> > are discussing this. I'm not sure that the OPL is right >> > for us given licensing of existing documentation. >> > But it is good that you bring it up early in the process >> > for us. >> > >> > >> >> Appreciated. It is a hard process to re-work existing docs, but >> we have done it and we are very willing to help if you ever >> reach that day ;-) > > We may also consider dual licensing for the sambaWiki stuff, > is there any reason to do so ? IMHO, I wouldn't. It's a lot easier to push one and one only. But it's really at the discretion of the author what they release it on and just up to you if you except it. Can't really offer more advice than that, sorry. > > Better to set up things early, changing licenses later is a pain. Agreed. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] New Samba wiki on-line
> -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Gavin Henry wrote: >> http://fedoraproject.org/wiki/Legal/Licenses/OPL > > Thanks Gavin, > > Craig, Deryck, myself and the other core developers > are discussing this. I'm not sure that the OPL is right > for us given licensing of existing documentation. > But it is good that you bring it up early in the process > for us. > > Appreciated. It is a hard process to re-work existing docs, but we have done it and we are very willing to help if you ever reach that day ;-) Anyway, lets all get back to work! Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] New Samba wiki on-line
> On Thu, 2006-03-02 at 14:52 +0000, Gavin Henry wrote: >> http://fedoraproject.org/wiki/Legal/Licenses/OPL > > >> Dear Wiki Team, >> >> I am on the Fedora Docs Steering Committee >> (http://fedoraproject.org/wiki/DocsProject/SteeringCommittee) and I >> notice >> you don't have a license up for content yet? >> >> You might be interested in our decision to use the OPL for the Fedora >> Documentation, and the progress we have made. >> >> Here are some links of our adventures along the way, if you have not >> already picked a license: >> >> http://fedoraproject.org/wiki/DocsProject/Licensing/Schedule >> http://www.fedoraproject.org/wiki/DocsProject/Licensing/StepsToOPL >> http://fedoraproject.org/wiki/Legal/Licenses/OPL >> http://fedoraproject.org/wiki/DocsProject/Licensing/FAQ > > > Hi Gavin, > thanks for issuing the problem. > > I have nothing against the OPL, but as our documentation is released > under the GNU GPL, I would propose to keep our wiki stuff under the GPL > so that later integration in our documentation will be possible. > Hi Simo, I thought you did, but thought I'd mention that one was missing and the alternatives. Thanks, Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] New Samba wiki on-line
http://fedoraproject.org/wiki/Legal/Licenses/OPL > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Dracula wrote: > >>> We've brought a new wiki online at http://wiki.samba.org/ for >>> Samba users and developers alike. The intent is to allow >>> the community to fill the gap in dynamic or temporary >>> documentation and other relevant information. Our thanks >>> to Craig White who has volunteered to act as standing editor >>> (at least at first). But in general, the wiki will only >>> be as good or useful as you, the community, make it. >> >> >> Great work Jerry! > > I can't take credit on this one. Deryck Hodge (our webmaster) > did all the initial mediawiki setup and theming and Craig White > put in the initial content so the site wasn't totally blank. :-) > > Dear Wiki Team, I am on the Fedora Docs Steering Committee (http://fedoraproject.org/wiki/DocsProject/SteeringCommittee) and I notice you don't have a license up for content yet? You might be interested in our decision to use the OPL for the Fedora Documentation, and the progress we have made. Here are some links of our adventures along the way, if you have not already picked a license: http://fedoraproject.org/wiki/DocsProject/Licensing/Schedule http://www.fedoraproject.org/wiki/DocsProject/Licensing/StepsToOPL http://fedoraproject.org/wiki/Legal/Licenses/OPL http://fedoraproject.org/wiki/DocsProject/Licensing/FAQ Thanks, Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba-EventLog-HOWTO
> -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > For those interested in some more detail of the EventLog > features in the upcoming Samba 3.0.21 release, see: > > http://www.samba.org/~jerry/Samba-EventLog-HOWTO.txt > > Thanks to Brian Mroan and Marcin Porwit at Centeris > for all their hard work. > Perfect. Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Question about SSL/TLS for ldap and samba
On Monday 08 Aug 2005 10:25, [EMAIL PROTECTED] wrote: > [EMAIL PROTECTED] a écrit sur > > 08/08/2005 11:17:59 : > > > What is the difference between LDAPs and ldapv3 start-tls ? > > > > ldaps listens on port 636 and start-tls is used on the standard 389 ldap > > port. > > I know that, but I ask because I read in samba-howto-collection that samba > prefer to use ldapv3 start-tls that the protocol ldaps. And I want to know > why > > > > I select the ldaps protocol in my smb.conf because I don't kown how > > > samba manage certificate. > > > > I would use: > > > > ldap ssl = start_tls > > > > > If samba can use a certficate, it's not a problem. But I think that > > > samba use the certificate used with openLDAP client. > > > > Samba looks at the standard system ldap.conf, which is in > > /etc/openldap/ldap.conf > > yes, but I don't like this because I cannot specify a certificate for samba > only, is the certificate specify in /etc/openldap/ldap.conf which is used. Why do you want a different one? > > > You can tell OpenLDAP to only allow TLS connections via the "security" > > setting. > > > > See man slapd.conf > > > > Gavin. > > > > -- > > Kind Regards, > > > > Gavin Henry. > > Managing Director. > > > > T +44 (0) 1224 279484 > > M +44 (0) 7930 323266 > > F +44 (0) 1224 742001 > > E [EMAIL PROTECTED] > > > > Open Source. Open Solutions(tm). > > > > http://www.suretecsystems.com/ > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/listinfo/samba > > --- > Stéphane PURNELLE [EMAIL PROTECTED] > Service Informatique Corman S.A. Tel : 00 32 087/342467 -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Question about SSL/TLS for ldap and samba
> What is the difference between LDAPs and ldapv3 start-tls ? ldaps listens on port 636 and start-tls is used on the standard 389 ldap port. > I select the ldaps protocol in my smb.conf because I don't kown how > samba manage certificate. I would use: ldap ssl = start_tls > If samba can use a certficate, it's not a problem. But I think that > samba use the certificate used with openLDAP client. Samba looks at the standard system ldap.conf, which is in /etc/openldap/ldap.conf You can tell OpenLDAP to only allow TLS connections via the "security" setting. See man slapd.conf Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Sessions migration
On Friday 29 Jul 2005 18:48, Bahya NASSR EDDINE wrote: > Hello there, > > Is there a way I can use my local windows session even > if I log on to a samba domain? How is Samba setup? Roaming profiles? > > I maen that after joining the samba domain, I would > like to logg on to the same session I used to before > joining the domain. You can do all sorts with yout profile, see: http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection/ProfileMgmt.html > > Thanks > > > > > > > ___ > Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger > Téléchargez cette version sur http://fr.messenger.yahoo.com -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Logon Script not executing upon login
> chris rothgeb schrieb am 19.07.2005 19:31: >> Hi, >> >> I am trying to execute a logon script when a user access the domain. >> For some reason the following is not executing. I don't want to enable >> roaming profiles so I have set 'logon home' and logon path' to null - >> I thought perhaps that this was causing a problem; but it hasn't made >> a difference. I also verified that my logon.bat is a DOS formatted >> file. > > I'm experiencing the same phenomen: Try: chmod 744 logon.bat and: perl -pi -e 's/\r\n/\n/g' logon.bat just to confirm it's on dos format. The permissions setting doesn't appear to be listed in the Samba Guide. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Logon Script not executing upon login
On Wednesday 20 Jul 2005 16:25, Gerald (Jerry) Carter wrote: > chris rothgeb wrote: > | logon script = scripts\logon.bat > > Probably should make this: > > logon script = "scripts\logon.bat" > I think: http://us2.samba.org/samba/docs/man/Samba-Guide/happy.html#sbehap-massive-smbconfb Needs to reflect this change then ;-) > > > cheers, jerry -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba-Guide Typo
http://us1.samba.org/samba/docs/man/Samba-Guide/happy.html#id2562622 Should be: chown -R bobj:PIOps /data/piops Not: chown -R bobj:PIOps /data/pidata Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba3-ByExample
On Thursday 30 Jun 2005 00:05, Jason Greene wrote: > I have been working through the processes of getting my server up...( > thanks to the help of John T. !!! > > I am now on page 167/168. It states... > > > "Install the file shown in Example 5.4.1 in the directory /data/ > ldap." > > The example states the following > > Example 5.4.1. LDAP DB_CONFIG File > set_cachesize 0 15000 1 > set_lg_regionmax 262144 > set_lg_bsize 2097152 > #set_lg_dir /var/log/bdb > set_flags DB_LOG_AUTOREMOVE > > > What is the name I should call this file? DB_CONFIG? > Yes: http://www.sleepycat.com/docs/ref/env/db_config.html -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbldap-tools Perl error (FreeBSD)
> Gavin Henry wrote:
>>
>>
>>>Gavin Henry wrote:
>>>
>>>>
>>>>
>>>>>smbldap-tools 0.8.7
>>>>>FreeBSD 5.4-RC2
>>>>>Samba 3.1.14
>>>>>Perl 5.8.2
>>>>>
>>>>>When I try to use any of the tools, the following message appears. Any
>>>>>hints on how to fix it are welcome.
>>>>>
>>>>>Bareword "print_banner" not allowed while "strict subs" in use at
>>>>>/usr/local/sbin/smbldap-useradd line 43.
>>>>>Execution of /usr/local/sbin/smbldap-useradd aborted due to
>>>>> compilation
>>>>>errors.
>>>>>
>>>>
>>>>They've probably missed a $ off of print_banner. Have you looked at
>>>> line
>>>>43?
>>>>
>>>
>>>Hi Gavin,
>>>
>>>42 if ( (!$ok) || (@ARGV < 1) || ($Options{'?'}) ) {
>>>43 print_banner;
>>>44 print "Usage: $0 [-awmugdsckABCDEFGHMNPST?] username\n";
>>>
>>>Adding a "$" does not change much, however, if I comment out
>>>"use strict;" it works. Now, what would be the problem with commenting
>>>that out? I suspect this could be FBSD-specific.
>>
>>
>> Ah, I've just looked at the code in smbldap_tools.pm. It's a call to the
>> print_banner subroutine
>> (http://cvs.idealx.org/cgi-bin/cvsweb/samba/smbldap-tools/smbldap_tools.pm?rev=1.54&content-type=text/x-cvsweb-markup&only_with_tag=v0-8-7)
>>
>>
>> Add a & on the front of it:
>>
>> 42 if ( (!$ok) || (@ARGV < 1) || ($Options{'?'}) ) {
>> 43 &print_banner;
>> 44 print "Usage: $0 [-awmugdsckABCDEFGHMNPST?] username\n";
>>
>>
>> This doesn't appear to be fixed in version 0.8.8, so it might be
>> something
>> else.
>>
> Then it is something else.
Do any other commands work? I think the command can't find smbldap_tools.pm
How is it installed?
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbldap-tools Perl error (FreeBSD)
> Gavin Henry wrote:
>>
>>
>>>smbldap-tools 0.8.7
>>>FreeBSD 5.4-RC2
>>>Samba 3.1.14
>>>Perl 5.8.2
>>>
>>>When I try to use any of the tools, the following message appears. Any
>>>hints on how to fix it are welcome.
>>>
>>>Bareword "print_banner" not allowed while "strict subs" in use at
>>>/usr/local/sbin/smbldap-useradd line 43.
>>>Execution of /usr/local/sbin/smbldap-useradd aborted due to compilation
>>>errors.
>>>
>>
>> They've probably missed a $ off of print_banner. Have you looked at line
>> 43?
>>
>
> Hi Gavin,
>
> 42 if ( (!$ok) || (@ARGV < 1) || ($Options{'?'}) ) {
> 43 print_banner;
> 44 print "Usage: $0 [-awmugdsckABCDEFGHMNPST?] username\n";
>
> Adding a "$" does not change much, however, if I comment out
> "use strict;" it works. Now, what would be the problem with commenting
> that out? I suspect this could be FBSD-specific.
Ah, I've just looked at the code in smbldap_tools.pm. It's a call to the
print_banner subroutine
(http://cvs.idealx.org/cgi-bin/cvsweb/samba/smbldap-tools/smbldap_tools.pm?rev=1.54&content-type=text/x-cvsweb-markup&only_with_tag=v0-8-7)
Add a & on the front of it:
42 if ( (!$ok) || (@ARGV < 1) || ($Options{'?'}) ) {
43 &print_banner;
44 print "Usage: $0 [-awmugdsckABCDEFGHMNPST?] username\n";
This doesn't appear to be fixed in version 0.8.8, so it might be something
else.
HTH.
--
Kind Regards,
Gavin Henry.
Managing Director.
T +44 (0) 1224 279484
M +44 (0) 7930 323266
F +44 (0) 1224 742001
E [EMAIL PROTECTED]
Open Source. Open Solutions(tm).
http://www.suretecsystems.com/
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbldap-tools Perl error (FreeBSD)
> smbldap-tools 0.8.7 > FreeBSD 5.4-RC2 > Samba 3.1.14 > Perl 5.8.2 > > When I try to use any of the tools, the following message appears. Any > hints on how to fix it are welcome. > > Bareword "print_banner" not allowed while "strict subs" in use at > /usr/local/sbin/smbldap-useradd line 43. > Execution of /usr/local/sbin/smbldap-useradd aborted due to compilation > errors. > They've probably missed a $ off of print_banner. Have you looked at line 43? Gavin. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Building latest svn Samba Docs PDF
Dear all, Does anyone else get these errors: /usr/bin/xsltproc --xinclude -o Samba-Developers-Guide-attributions.xml xslt/gen erate-attributions.xsl Samba-Developers-Guide/index.xml warning: failed to load external entity "Samba-Developers-Guide-attributions.xml " mkdir -p tmp /usr/bin/xsltproc --stringparam latex.imagebasedir "Samba-Developers-Guide/" --s tringparam noreference 1 --xinclude --output tmp/Samba-Developers-Guide.xml xslt /expand-sambadoc.xsl Samba-Developers-Guide/index.xml mkdir -p . /usr/bin/xsltproc --output Samba-Developers-Guide.tex xslt/latex.xsl tmp/Samba-D evelopers-Guide.xml compilation error: file http://db2latex.sourceforge.net/xsl/qandaset.mod.xsl lin e 366 element template xsl:template: error duplicate name 'question.answer.label' make: *** [Samba-Developers-Guide.tex] Error 5 This is on Fedora Core 3 and Debian Sarge. Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba PDC- Administrator translated to root
> I assume this is because the PDC Administrator user is > assigned uidnumber=0 which is also the UNIX root > user's UID. Yes, therefore, did you run these commands: http://us2.samba.org/samba/docs/man/Samba-Guide/happy.html#id2557728 No. 12 In the above listing, you can see that the user root has been given UID=998. This means that operations conducted from a Windows client using tools such as the Domain User Manager fails under UNIX because the management of user and group accounts requires that the UID=0. You decide to rectify this immediately as demonstrated here: root# cd /opt/IDEALX/sbin root# ./smbldap-usermod -u 0 -d /root -s /bin/bash root Verify that the changes just made to the root account were accepted by executing: root# getent passwd | grep root root:x:0:0:root:/root:/bin/bash root:x:0:512:Netbios Domain Administrator:/root:/bin/bash Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] LDAP items that might help for How-to
> Might want to include the following command in LDAP config incase LDAP > doesn't start. > > slapd -u ldap -g ldap -d -1 > > This command pointed out that I hadn't copied my samba.schema to the > /etc/openldap/schema directory. Might want to put that in the doc before > you > start LDAP. A newbie like me might pass over that little detail while > following the instructions... > Hi, I think this is taken care of with syslog, we added loglevel 256 to slapd.conf, so a simple tail -f logfile.log will show the problems. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Chapter 6: Making Users Happy...
On Wednesday 09 Mar 2005 19:53, Mccrory, Kevin B wrote: > Not sure if this is the place to post this butI'm just going through > the process of installing Samba and LDAP using the current version of > Chapter 6: Making Users Happy > (http://us4.samba.org/samba/docs/man/Samba-Guide/happy.html#id2557011 > <http://us4.samba.org/samba/docs/man/Samba-Guide/happy.html#id2557011> ) > > I found one error in the Install and Configure Idealx smbldap-tools > Scripts...Item 4. Should read "Change to the /etc/smbldap-tools/ directory, > then edit the /etc/smbldap-tools/smbldap_conf.pm" instead of "CHange to the > /opt/IDEALX/sbin/ directory then edit the /opt/IDEALX/sbin/smbldap_conf.pm" > . > That's one for John ;-) > > > > Kevin B. McCrory > Network Engineer - COPS > US Government Solutions > 13600 EDS Drive > Mail stop: A4S-B21 > Herndon, VA 20171 > * phone: +01-703-733-3255 > * mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> > * AKO mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Multiple samba servers with LDAP
On Monday 07 Mar 2005 14:10, Mark Sarria wrote: > Hello List > > I to need the same information, but I also need the tutorials on setting up > a slave LDAP server, you wouldn't happen to have the link to a good one > would you? > See: http://linsec.ca/bin/view/Main/LdapAdvanced and: http://linsec.ca/bin/view/Main/LdapAdvanced#Setting_up_the_Slave_LDAP_Server -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] TLSVerifyClient demand or try
> Hi all! > I'm very close to have a fully functional samba and openldap. Thanks to > idealx.org. I just need to understand how it works. Everything works > accept one > thing. When I change TLSVerifyClient allow to TLSVerifyClient demand in > slapd.conf and do: > ldapsearch -x -ZZ -b 'dc=yourdomain,dc=com' '(objectclass=*)' -d 127 Hi, ldapsearch, using -ZZ, requires -h ldap.yourhost.com, hence: > ldap_bind: Can't contact LDAP server (81) -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Request to update slapd.conf and OpenLDAP info for Samba-Guide/happy.html
On Wednesday 02 Mar 2005 13:44, Tony Earnshaw wrote: > Gavin Henry: > > The OpenLDAP stuff on this page: > > > > > > http://us4.samba.org/samba/docs/man/Samba-Guide/happy.html > > > > > > is not the preferred backend, i.e. ldbm, it really, really needs to be > > bdb. > > > > See: > > > > > > http://www.openldap.org/faq/index.cgi?_highlightWords=bdb%20ldbm&file=108 > > 5 > > Pointing LDAP users toward OpenLDAP.org will hopefully get them to see > that not only ldbm as backend is considered obsolete and is deprecated, > but also that OL 2.0 is considered obsolete, 2.1 is obsolescent and > deprecated and the latest stable version is 2.2.23. Which uses Sleepycat > BDB 4.2.52 mandatorily. Agreed, but the pace at which the OpenLDAP team pump out updates etc., it will be hard to keep any form of documentation up to date. Especially a book. > > [...] > > > I feel we are not doing the Samba community justice, if we are telling > > them to use lbdm. > > ldbm as backend will ultimately seize up on production rigs, for a number > of reasons. So will BDB 4.1, though for different reasons (I've been > through it all myself). OpenLDAP 2.2.13 and higher with (patched) BDB > 4.2.52 will keep on running for months without attention, even after > forced power-downs or -outages, with all of the advantages that you cite. > However, use of BDB 4.2.52 requires specialist configuration (DB_CONFIG) > for it to work at all satisfactorily. > > Which brings me back to my own bugbear: Samba 3 people who want to use the > ldapsam DB backend should first and foremost be LDAP specialists, only > subsequently adapt their Samba installation to their already successful > LDAP implementation. I don't see how the Samba people can write all this > up in the standard docs and there is no single HOWTO on the subject. I totally agree with this. LDAP directories are a completely specialised area. But again, there has to be a trade off between complexity and creating a Windows Domain for <100 with a LDAP backend. > > --Tonni > > -- > mail: [EMAIL PROTECTED] > http://www.billy.demon.nl -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] development mailing list?
Dear all, Is there a devel type list, as I can't see one in the mailing list section? I am trying to gather the CVS checkout info for the Samba docs to update the Samba-Guide/Happy.html section and also discuss the doc build-tree etc. Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ pgpvd2FkrIwqW.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Request to update slapd.conf and OpenLDAP info forSamba-Guide/happy.html
> Gavin, > > The book "Samba-3 by Example" was written at the time Samba-3.0.2 was just > released. At that time (February 2004) the version of OpenLDAP that were > shipping on SuSE Linux Enterprise Server and on Red Hat Enterprise Linux > used > ldbm. > > I agree entirely that this needs to be updated, in fact, it is necessary > also > to update all references to the smbldap-tools as well as many other subtle > factors that have changed in Samba between Samba-3.0.2 and 3.0.12 (the > soon > to be released version). > > I will update the entire book at the first opportunity I get. If you wish > to > submit patches I would be most appreciative. Understood. I'll hopefully get something to you. Via bugzilla etc? > > Cheers, > John T. > > On Wednesday 02 March 2005 03:24, Gavin Henry wrote: >> Dear Team, >> >> The OpenLDAP stuff on this page: >> >> http://us4.samba.org/samba/docs/man/Samba-Guide/happy.html >> >> is not the preferred backend, i.e. ldbm, it really, really needs to be >> bdb. >> >> See: >> >> http://www.openldap.org/faq/index.cgi?_highlightWords=bdb%20ldbm&file=1085 >> >> "ldbm uses a neutral storage interface which in principle could wrap >> dbm, >> ndbm, gdbm or sleepycat as underlying storage; however, only Sleepycat >> is >> considered a reliable choice, so bdb offers more interesting features >> (ACID). Eventually it will disappear." >> >> And: >> >> http://www.openldap.org/faq/data/cache/756.html >> >> "With back-ldbm, there is no fine-grain database locking. This means >> write >> operations are serialized. And while multiple read operations may be >> performed concurrently, they cannot be performed concurrently with any >> write operation. Additionally, LDBM databases cannot be accessed by only >> one program at a time (generally at the file level). (While one may be >> able to bypass the locking mechanism, you will likely corrupt the >> database >> (and/or obtain bogus information).) >> >> With back-bdb, databases are locked on a page level, which means that >> multiple threads (and processes) can operate on the databases >> concurrently. In OpenLDAP 2.1.4 we lifted the restriction against using >> the slap tools while slapd is running on back-bdb. You can perform >> online >> backups using slapcat or BDB's db_dumputility without interrupting your >> LDAP service. You still must not use slapadd or slapindex while slapd is >> running (due to application-level caching in slapd(8))." >> >> >> Point to highlight for disaster recovery: >> >> "You can perform online backups using slapcat or BDB's db_dumputility >> without interrupting your LDAP service." >> >> Therefore, >> can we update it for this and all the configuration that goes with using >> a >> bdb backend? >> >> I feel we are not doing the Samba community justice, if we are telling >> them to use lbdm. >> >> Thanks. >> >> -- >> Kind Regards, >> >> Gavin Henry. >> Managing Director. >> >> T +44 (0) 1224 279484 >> M +44 (0) 7930 323266 >> F +44 (0) 1224 742001 >> E [EMAIL PROTECTED] >> >> Open Source. Open Solutions(tm). >> >> http://www.suretecsystems.com/ > > -- > John H Terpstra > Samba-Team Member > Phone: +1 (650) 580-8668 > > Author: > The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556 > Samba-3 by Example, ISBN: 0131472216 > Hardening Linux, ISBN: 0072254971 > Other books in production. > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Request to update slapd.conf and OpenLDAP info for Samba-Guide/happy.html
Dear Team, The OpenLDAP stuff on this page: http://us4.samba.org/samba/docs/man/Samba-Guide/happy.html is not the preferred backend, i.e. ldbm, it really, really needs to be bdb. See: http://www.openldap.org/faq/index.cgi?_highlightWords=bdb%20ldbm&file=1085 "ldbm uses a neutral storage interface which in principle could wrap dbm, ndbm, gdbm or sleepycat as underlying storage; however, only Sleepycat is considered a reliable choice, so bdb offers more interesting features (ACID). Eventually it will disappear." And: http://www.openldap.org/faq/data/cache/756.html "With back-ldbm, there is no fine-grain database locking. This means write operations are serialized. And while multiple read operations may be performed concurrently, they cannot be performed concurrently with any write operation. Additionally, LDBM databases cannot be accessed by only one program at a time (generally at the file level). (While one may be able to bypass the locking mechanism, you will likely corrupt the database (and/or obtain bogus information).) With back-bdb, databases are locked on a page level, which means that multiple threads (and processes) can operate on the databases concurrently. In OpenLDAP 2.1.4 we lifted the restriction against using the slap tools while slapd is running on back-bdb. You can perform online backups using slapcat or BDB's db_dumputility without interrupting your LDAP service. You still must not use slapadd or slapindex while slapd is running (due to application-level caching in slapd(8))." Point to highlight for disaster recovery: "You can perform online backups using slapcat or BDB's db_dumputility without interrupting your LDAP service." Therefore, can we update it for this and all the configuration that goes with using a bdb backend? I feel we are not doing the Samba community justice, if we are telling them to use lbdm. Thanks. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] extract SID from v2 domain
Per olof Ljungmark said: > Hi all, > > How can I, in preparation for an upgrade to Samba3, extract the domain > SID from a network of w2k workstations and Samba2.2 servers? Sorry if > this is crystal clear but I just can't figure it out. > I think if you use the newsid utility from http://www.sysinternals.com you will be able to extract the sid from the windows workstations. And use smbpasswd -W to extract the SID. This is on Samba version 2.2.8 HTH. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1467 624141 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions(tm). http://www.suretecsystems.com/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Need to mass update pasword expiration - which ldap attributes?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wednesday 06 Oct 2004 22:50, Andrew Bartlett wrote: > On Thu, 2004-10-07 at 06:06, Jeff Davis wrote: > > Hi, > > > > I need to mass-update my users in openldap so that their passwords don't > > expire (school teachers). Anyone have any ideas about what the best > > process would be for accomplishing this? > > A Net::LDAP script is what I use for all of this type of admin task. That means a Perl script. See here for examples from the LDAP O'reilly book: http://examples.oreilly.com/ldapsa/ > > Andrew Bartlett - -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1467 624141 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions. http://www.suretecsystems.com/ -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQFBZGkBeWseh9tzvqgRAltLAKCR3NAKqkx10OHrN5277VRWDxRBmwCeNGrF aCwF7WPgP4wtRutECVc2T7E= =phI6 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Base ldap access file.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sorry, where are your patches? - -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 587369 M +44 (0) 7930 323266 F +44 (0) 1224 742001 E [EMAIL PROTECTED] Open Source. Open Solutions. http://www.suretecsystems.com/ -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFBAOAseWseh9tzvqgRAmTDAJ0SThc3rQ4B1GF4M7dqUQqXdOvQCQCeOJI3 L9TfjBWkIjFsnTH8HNZq8y0= =L6VP -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
