[Samba] Questions about nsswitch/winbindd_dual.c behavior
I'm using samba-3.0.34, and I have two questions: (1) I'm not exactly sure how the asyncronous behavior of winbindd_dual works. Does it fork a child for each domain? each domain controller? Or does it fork a child ad hoc whenever it needs to handle a request? (2) I'm joining to an active directory domain using net rpc join fine, but wireshark shows winbindd doing a search to find all domain controllers. Since I explicitly gave a primary domain controller in smb.conf and when I joined, why is it looking up the other domain controllers? Thanks, - Jeremiah -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] How to turn off PDC lookup
I noticed that I can have my computer ads join a domain even when I give a bad PDC. It seems to catch the bad pdc and find the correct PDC. Is there a way to turn this off? Not that I don't like the feature, but I would like to say use this pdc I give you, if you can't, then fail. Is this possible? Thanks, -- - Jeremiah Martell -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Fwd: Samba-3.0.34 can ADS join but not non-ADS join.
I haven't had any responses to this yet. Is there any other information that would help diagnose the problem? To recap: Using the same network, the same computer, and the same smb.conf (with the exception of an added interefaces line for Samba-3.0.34) I am able to non-ADS join with Samba-3.0.14a but not Samba-3.0.34. Samba-3.0.34 first complained about an interfaces line in my smb.conf. But after adding the interfaces line joining still fails with cannot join as standalone machine. Any suggestions? Any other information I need to provide? Thanks, - Jeremiah -- Forwarded message -- From: Jeremiah Martell inlovewith...@gmail.com Date: Mon, Jul 27, 2009 at 9:04 AM Subject: Samba-3.0.34 can ADS join but not non-ADS join. To: samba@lists.samba.org I was using Samba-3.0.14a perfectly fine. Now, I'm trying to use Samba-3.0.34. I can do an ADS join fine with Samba-3.0.34, but I cannot do my old non-ADS join anymore. Winbindd starts and stays running fine, but when I run net to do the non-ADS join I'm running into a strange interfaces issue. It now wants an interfaces line in the smb.conf file when I attempt to join a domain (using all the same old smb.conf settings I was with Samba-3.0.14a). So I give an interfaces = eth0 in my smb.conf file, but it does not join. It fails with a cannot join as standalone machine. Running net with debug level 3 during this gives two interesting things: It cannot load ANSI_X3.4-1968.so And this... [2009/07/24 14:27:57, 3] source/lib/util.c:interpret_addr(1310) sys_gethostbyname: Unknown host. eth0 [2009/07/24 14:27:57, 2] source/lib/interface.c:interpret_interface(130) can't determine netmask for eth0 [2009/07/24 14:27:57, 0] source/lib/interface.c:load_interfaces(229) WARNING: no network interfaces found [2009/07/24 14:27:57, 3] source/libsmb/namequery.c:get_dc_list(1557) get_dc_list: preferred server list: , abc.example.com [2009/07/24 14:27:57, 1] source/libads/cldap.c:recv_cldap_netlogon(247) Failed to parse cldap reply [2009/07/24 14:27:57, 3] source/libads/ldap.c:ads_try_connect(194) ads_try_connect: CLDAP request 123.456.789.0 failed. cannot join as standalone machine [2009/07/24 14:27:57, 2] source/utils/net.c:main(1088) return code = -1 Using Wireshark shows multiple DNS lookups for eth0.example.com, and a single CLDAP search, (((DnsDomain=06:00:00:00)(Host=ABCABC))(NtVer=06:00:00:00)), that was successful but with no results. I ruled out any network issues because I can still non-ADS join on the same machine on the same network with my old Samba-3.0.14a code. I looked at the latest Samba-3.4.0 and noticed that the interface.c and interfaces.c are pretty different from Samba-3.0.34. Is this a known bug that was fixed in revisions post-Samba-3.0.34? Am I not understanding the interfaces line in my smb.conf file correctly? I'm not sure what the CLDAP request failed and cannot join as standalone machine would suggest. Any other questions/suggestions? Thanks, -- - Jeremiah Martell http://inlovewithGod.com -- - Jeremiah Martell http://inlovewithGod.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba-3.0.34 can ADS join but not non-ADS join.
I was using Samba-3.0.14a perfectly fine. Now, I'm trying to use Samba-3.0.34. I can do an ADS join fine with Samba-3.0.34, but I cannot do my old non-ADS join anymore. Winbindd starts and stays running fine, but when I run net to do the non-ADS join I'm running into a strange interfaces issue. It now wants an interfaces line in the smb.conf file when I attempt to join a domain (using all the same old smb.conf settings I was with Samba-3.0.14a). So I give an interfaces = eth0 in my smb.conf file, but it does not join. It fails with a cannot join as standalone machine. Running net with debug level 3 during this gives two interesting things: It cannot load ANSI_X3.4-1968.so And this... [2009/07/24 14:27:57, 3] source/lib/util.c:interpret_addr(1310) sys_gethostbyname: Unknown host. eth0 [2009/07/24 14:27:57, 2] source/lib/interface.c:interpret_interface(130) can't determine netmask for eth0 [2009/07/24 14:27:57, 0] source/lib/interface.c:load_interfaces(229) WARNING: no network interfaces found [2009/07/24 14:27:57, 3] source/libsmb/namequery.c:get_dc_list(1557) get_dc_list: preferred server list: , abc.example.com [2009/07/24 14:27:57, 1] source/libads/cldap.c:recv_cldap_netlogon(247) Failed to parse cldap reply [2009/07/24 14:27:57, 3] source/libads/ldap.c:ads_try_connect(194) ads_try_connect: CLDAP request 123.456.789.0 failed. cannot join as standalone machine [2009/07/24 14:27:57, 2] source/utils/net.c:main(1088) return code = -1 Using Wireshark shows multiple DNS lookups for eth0.example.com, and a single CLDAP search, (((DnsDomain=06:00:00:00)(Host=ABCABC))(NtVer=06:00:00:00)), that was successful but with no results. I ruled out any network issues because I can still non-ADS join on the same machine on the same network with my old Samba-3.0.14a code. I looked at the latest Samba-3.4.0 and noticed that the interface.c and interfaces.c are pretty different from Samba-3.0.34. Is this a known bug that was fixed in revisions post-Samba-3.0.34? Am I not understanding the interfaces line in my smb.conf file correctly? I'm not sure what the CLDAP request failed and cannot join as standalone machine would suggest. Any other questions/suggestions? Thanks, -- - Jeremiah Martell http://inlovewithGod.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba-3.0.22 ... winbindd crashes with SIGABRT
I'm using samba-3.0.22 When I start up winbindd, it crashes with a SIGABRT. In source/lib/util.c, in function become_daemon(BOOL Fork), it calls _exit(0); which causes the crash. Is this expected? Thanks, - Jeremiah [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] make is trying to mkdir private dir?
I've gotten further on getting samba-3.0.22 to compile. But for some reason it's trying to mkdir DIR, where DIR is what I put in for my --with-privatedir directory. samba-3.0.14a didnt try to do this. Why the change? And how can I get it to stop? Thanks! - Jeremiah [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] auth_script_init
Trying to build samba-3.0.22. When compiling auth/auth.c, I get no warnings or errors. When linking bin/smbd, I get an undefined reference to auth_script_init. The configure output said it would build auth_script as static. I'm not really sure how to get around this. Any ideas? Thanks, - Jeremiah [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: auth_script_init: SOLVED
Solved. In auth/auth_script.c, remove the last #if, #else, #endif on lines 143, 148, and 153. On 6/8/06, Jeremiah Martell [EMAIL PROTECTED] wrote: Trying to build samba-3.0.22. When compiling auth/auth.c, I get no warnings or errors. When linking bin/smbd, I get an undefined reference to auth_script_init. The configure output said it would build auth_script as static. I'm not really sure how to get around this. Any ideas? Thanks, - Jeremiah [EMAIL PROTECTED] -- - Jeremiah [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: Fwd: [Samba] Re: Getting NTLM group info about user
How do you map these unix group ids to the active directory group names? Like the group's DN, or CN, or ? Thanks! - Jeremiah (still working on getting samba-3.0.22 to compile for me...) On 6/6/06, Volker Lendecke [EMAIL PROTECTED] wrote: On Tue, Jun 06, 2006 at 02:47:30PM -0400, Jeremiah Martell wrote: Just out of curiousity, what should the output look like when I do a wbinfo -r user? Do I get the LDAP DN's of the groups? Just the CN attribute of the group? You should get a list of unix group ids. Volker -- - Jeremiah [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] See if authenticated user is in group XYZ
I have winbindd running. I run wbinfo -a userXYZ%pass and it succeeds Now I want to know if userXYZ is in group monkeys, but I dont want to have to have to map anything. Is this possible? Is there a way to just say give me the windows group names that userXYZ is in? or is userXYZ in windows group name 'monkeys'? Thanks! - Jeremiah -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Getting NTLM group info about user
Anybody have any ideas on this? I would reallly appreciate some help. Thanks, - Jeremiah On 6/2/06, Jeremiah Martell [EMAIL PROTECTED] wrote: I use samba on my linux box to register to a remote windows domain. I start up winbindd. Then I use net join -S PDC -U user%pass to join to the domain. I can test it out by authenticating myself with wbinfo -a user%pass which works fine. Id like to get back what groups I'm in. I tried wbinfo -r ME but it doesn't work: Could not get groups for user ME. I've verified that I am actually in some groups in the windows box (active directory). What am I doing wrong? Thanks, -- - Jeremiah [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Fwd: [Samba] Re: Getting NTLM group info about user
-- Forwarded message -- From: Jeremiah Martell [EMAIL PROTECTED] Date: Jun 6, 2006 12:02 PM Subject: Re: [Samba] Re: Getting NTLM group info about user To: [EMAIL PROTECTED] wbinfo -t checking the trust secret via RPC calls succeeded wbinfo -r test Could not get groups for user test wbinfo -a test%test challenge/response password authentication succeeded wbinfo -r test Could not get groups for user test I searched samba lists and found that I may need to try putting client schannel = no in my smb.conf file. I did that, and I get the same response. I'm currently use samba 3.0.14a. I'll try downloading the latest 3.0.22 and see how that goes. Thanks for the reply! It let me know I was at least doing everything correctly. :) - Jeremiah On 6/6/06, Volker Lendecke [EMAIL PROTECTED] wrote: On Tue, Jun 06, 2006 at 09:44:24AM -0400, Jeremiah Martell wrote: I use samba on my linux box to register to a remote windows domain. I start up winbindd. Then I use net join -S PDC -U user%pass to join to the domain. I can test it out by authenticating myself with wbinfo -a user%pass which works fine. Id like to get back what groups I'm in. I tried wbinfo -r ME but it doesn't work: Could not get groups for user ME. I've verified that I am actually in some groups in the windows box (active directory). Did you log in using wbinfo -a before issuing the wbinfo -r? If not, then there is not much hope. If you did, we have a bug. We have made a lot of changes here for 3.0.23, so it would be great if you could test 3.0.23rc1 or even better current 3_0 SVN. Volker -- - Jeremiah [EMAIL PROTECTED] -- - Jeremiah [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: Fwd: [Samba] Re: Getting NTLM group info about user
Just out of curiousity, what should the output look like when I do a wbinfo -r user? Do I get the LDAP DN's of the groups? Just the CN attribute of the group? Thanks, - Jeremiah On 6/6/06, Volker Lendecke [EMAIL PROTECTED] wrote: On Tue, Jun 06, 2006 at 10:24:30AM -0700, Doug VanLeuven wrote: Hi Volker, I don't have 3.0.23rc1, but svn from just a few days ago. [EMAIL PROTECTED] ~]# smbd -V Version 3.0.23pre2-SVN-build-15985 [EMAIL PROTECTED] ~]# wbinfo -a doug% plaintext password authentication succeeded challenge/response password authentication succeeded [EMAIL PROTECTED] ~]# wbinfo -r doug Could not get groups for user doug Please file a bug report at https://bugzilla.samba.org/ with your smb.conf and all winbind logfiles at debug level 10. Thanks, Volker -- - Jeremiah [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Getting NTLM group info about user
I use samba on my linux box to register to a remote windows domain. I start up winbindd. Then I use net join -S PDC -U user%pass to join to the domain. I can test it out by authenticating myself with wbinfo -a user%pass which works fine. Id like to get back what groups I'm in. I tried wbinfo -r ME but it doesn't work: Could not get groups for user ME. I've verified that I am actually in some groups in the windows box (active directory). What am I doing wrong? Thanks, -- - Jeremiah [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
