Re: [Samba] '/tmp' does not exist or permission denied ...: /tmp has 777 permission SOLVED

2010-01-20 Thread Koen Linders
> I have no idea, but could it be that 'tmp' is not the directory /tmp,
> but one of your samba shares, called 'tmp'?
> 
> MJ

Nope, but thx anyway.

I changed the permission in the /root dir yesterday with chmod 700 .* 
I only wanted to change the hidden files that started with . (like .ssh)
This caused .. to have wrong permissions. It should have 755 so anything can
cd out of the directory. 

How something small like this, can cause so many problems. Lesson learned
here!

Koen Linders

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] '/tmp' does not exist or permission denied ...: /tmp has 777 permission

2010-01-20 Thread Koen Linders
Not sure what caused it. It must be some change to permissions. I know
I changed the root password with passwd and changed it back afterwards
when problems started. I know for sure I didn't change a thing to the
samba config. No firewall running atm.

This morning I did smbpasswd as root and set it (to be sure) to same
passwd as the original one. But I don't think this matters anymore. I
did hope so when I went to sleep :)

Debian Etch
Samba 3.0.24
All worked well as PDC
 
Exact message:
SMBD/SERVICE.C:MAKE_CONNECTION_SNUM(920) 'tmp' does not exist or
permission denied when connecting to [IPC$]. Error was permission
denied.
 
Permission on /tmp
Ls -al /
/tmp drwxrwxrwt

The weird thing is. I can access 2 out 3 shares even after restarting
server and workstation. Netlogon is not accessible and I can't browse
the server. The 2 shares are in the same directory as the main share
which is inaccessible atm.

When I try to login as different user (koenl) on the server (not via
workstation), I get can't cd to /data/home/koenl

Permissions
/data: 775 root.root
/data/home 775 root.root
/data/home/koenl 755 koenl.ICT

/data/shares 755 root.root
/data/shares/newton 775 root.root (main directory of share is meant to
be readable by world)
(This is the inaccessible share)
/data/shares/ict770 g+s
(accessible share)

(Any application to change ALL permissions to default on debian? I can
umount the data partition before)


Any idea?

Koen


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] NAS on 2 sites connected via slow link

2009-11-26 Thread Koen Linders
 
> Oh, I thought the NAS was in the 192.168.5 network. If it is on the
> same network as the clients, that would be fast.
> 
> In that case, do NOT try to mount the NAS on the PDC. What you'd
> actually accomplish is this:
> 
> Client --SLOW-> PDC SLOW---> NAS
> 
> Instead, do this:
> 
> Client -FAST--> NAS
> 
> In other words, have the NAS appear as just another Samba server on the
> same network.
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

Is there no other way to mount the drive somehow and still have the clients
access it over the fast link instead of going over the slow link main site?
I hoped not having to install another server :)

Maybe other solutions. It would be great if users authenticated at the main
site over the slow link, but still be able to access resources local over
the fast link.  

Thanks for the fast replies so far!
Koen Linders

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] NAS on 2 sites connected via slow link

2009-11-26 Thread Koen Linders
> -Oorspronkelijk bericht-
> Van: samba-boun...@lists.samba.org [mailto:samba-
> boun...@lists.samba.org] Namens Kevin Keane
> Verzonden: donderdag 26 november 2009 9:20
> Aan: samba@lists.samba.org
> Onderwerp: Re: [Samba] NAS on 2 sites connected via slow link
> 
> I take it that the slow link is between the 192.168.1 and the 192.168.5
> subnets?
> 
> So you currently have:
> 
> Client --SLOW> NAS
> 
> If you mount the NAS directory on your PDC, the data doesn't magically
> travel to the other end of your slow link.
> 
> You are, of course, right that the clients would have a fast connection
> - but the PDC still has a slow connection.
> 
> Client -FAST-> PDC -SLOW---> NAS
> 
> Installing a second server on site B also wouldn't solve the problem.
> You would then have:
> 
> Client -SLOW-> new server ---FAST---> NAS
> 
> Basically, you need to focus on the slow link instead of on clients
> connect.
> 
> What I was thinking:
> 
> Client -FAST-> cache
> Cache --SLOW-> NAS
> 
> This would decouple the client's data transfer from the NAS device.
> 

The slow link is between 192.168.1. & 192.168.5. indeed.
But the clients will be accessing the data

Client -FAST-> NAS -SLOW---> PDC


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] NAS on 2 sites connected via slow link

2009-11-26 Thread Koen Linders
When I say: Accessing the data would be from Explorer in Windows XP SP3
I mean: They should access it like a normal data share (not IE)

> -Oorspronkelijk bericht-
> Van: samba-boun...@lists.samba.org [mailto:samba-
> boun...@lists.samba.org] Namens Koen Linders
> Verzonden: donderdag 26 november 2009 8:56
> Aan: samba@lists.samba.org
> Onderwerp: Re: [Samba] NAS on 2 sites connected via slow link
> 
> I hope I'm clear about what I try to do and what I hope would happen :)
> I thought the data didn't had to be transferred over the link.
> 
> Lets say
> Site A: PDC 192.168.1.2/24
> Site B: NAS 192.168.5.2/24
> 
> I thought I could mount the NAS on a directory defined as share on the
> PDC.
> And when mounted that when they log on to the PDC and copy/access the
> data
> on the share (NAS) traffic stays local because it happens all in the
> same
> subnet?
> Accessing the data would be from Explorer in Windows XP SP3.
> 
> I'm probably wrong reading your reaction. So maybe I'm better off
> installing
> a 2d server on site B?
> 
> > -Oorspronkelijk bericht-
> > Van: samba-boun...@lists.samba.org [mailto:samba-
> > boun...@lists.samba.org] Namens Kevin Keane
> > Verzonden: donderdag 26 november 2009 8:41
> > Aan: samba@lists.samba.org
> > Onderwerp: Re: [Samba] NAS on 2 sites connected via slow link
> >
> > Seems like a nightmare in the making... Basically, no matter what you
> > do, the data has to be transferred.
> >
> > How are users going to access the files on site B? If it is through a
> > Web browser, then a caching proxy in Site A might be your best
> answer.
> >
> > Your best option might be to cache the files on Site A, and use rsync
> > to copy them to/from site B. If the NAS doesn't support rsync, look
> > into FTP - it's probably the fastest data transfer protocol around.
> >
> > Don't use NFS over slow links. It's one of the weaknesses of NFS.
> >
> > > -Original Message-
> > > From: samba-boun...@lists.samba.org [mailto:samba-
> > > boun...@lists.samba.org] On Behalf Of Koen Linders
> > > Sent: Wednesday, November 25, 2009 10:38 PM
> > > To: samba@lists.samba.org
> > > Subject: [Samba] NAS on 2 sites connected via slow link
> > >
> > > Lets say: 2 sites: 2 subnets connected via slow link (1M)
> > > Site A: Samba 3 PDC
> > > Site B: NAS for large videofiles
> > >
> > > People will work with/view the files on site B. Data will grow in
> > time.
> > > I want to mount the NAS on the PDC so I can integrate it in a share
> > on
> > > site
> > > A.
> > >
> > > Anyone has good/bad experience with this kind of situation? Maybe a
> > NAS
> > > system which works without a problem?
> > > Anything I should check for (NFS support I guess)?
> > >
> > > Greeting,
> > > Koen Linders
> > >
> > >
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions:  https://lists.samba.org/mailman/options/samba
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] NAS on 2 sites connected via slow link

2009-11-25 Thread Koen Linders
I hope I'm clear about what I try to do and what I hope would happen :)
I thought the data didn't had to be transferred over the link.

Lets say
Site A: PDC 192.168.1.2/24
Site B: NAS 192.168.5.2/24

I thought I could mount the NAS on a directory defined as share on the PDC.
And when mounted that when they log on to the PDC and copy/access the data
on the share (NAS) traffic stays local because it happens all in the same
subnet? 
Accessing the data would be from Explorer in Windows XP SP3.

I'm probably wrong reading your reaction. So maybe I'm better off installing
a 2d server on site B?

> -Oorspronkelijk bericht-
> Van: samba-boun...@lists.samba.org [mailto:samba-
> boun...@lists.samba.org] Namens Kevin Keane
> Verzonden: donderdag 26 november 2009 8:41
> Aan: samba@lists.samba.org
> Onderwerp: Re: [Samba] NAS on 2 sites connected via slow link
> 
> Seems like a nightmare in the making... Basically, no matter what you
> do, the data has to be transferred.
> 
> How are users going to access the files on site B? If it is through a
> Web browser, then a caching proxy in Site A might be your best answer.
> 
> Your best option might be to cache the files on Site A, and use rsync
> to copy them to/from site B. If the NAS doesn't support rsync, look
> into FTP - it's probably the fastest data transfer protocol around.
> 
> Don't use NFS over slow links. It's one of the weaknesses of NFS.
> 
> > -Original Message-
> > From: samba-boun...@lists.samba.org [mailto:samba-
> > boun...@lists.samba.org] On Behalf Of Koen Linders
> > Sent: Wednesday, November 25, 2009 10:38 PM
> > To: samba@lists.samba.org
> > Subject: [Samba] NAS on 2 sites connected via slow link
> >
> > Lets say: 2 sites: 2 subnets connected via slow link (1M)
> > Site A: Samba 3 PDC
> > Site B: NAS for large videofiles
> >
> > People will work with/view the files on site B. Data will grow in
> time.
> > I want to mount the NAS on the PDC so I can integrate it in a share
> on
> > site
> > A.
> >
> > Anyone has good/bad experience with this kind of situation? Maybe a
> NAS
> > system which works without a problem?
> > Anything I should check for (NFS support I guess)?
> >
> > Greeting,
> > Koen Linders
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] NAS on 2 sites connected via slow link

2009-11-25 Thread Koen Linders
Lets say: 2 sites: 2 subnets connected via slow link (1M)
Site A: Samba 3 PDC 
Site B: NAS for large videofiles

People will work with/view the files on site B. Data will grow in time.
I want to mount the NAS on the PDC so I can integrate it in a share on site
A.

Anyone has good/bad experience with this kind of situation? Maybe a NAS
system which works without a problem?
Anything I should check for (NFS support I guess)? 

Greeting,
Koen Linders


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


RE: [Samba] Samba-Cups: all works except browsing when printer is not defined in smb.conf

2009-07-02 Thread Koen Linders
Noone has an idea why normal share browsing works, connecting to printers
via "\\servername\printername" works, but not browsing for the shared CUPS
printers (Win2K, XP or Vista)? They also don't show up for smbclient -L
localhost -N (of smbclient -L servername -U root). I've been searching
through the MARC.info and someone suggests the length of the name, but the
printer names are short like 2420N-240.

When I add this printer to smb.conf, browsing works. And it shows up with
smbclient -L servername -N.
[KonicaMinolta]
comment = LM 1ste
path = /data/spool
guest ok = Yes
printable = Yes

More info lower.


When changing log lvl to 3 and per machine I get these to parts when
clicking the Printers and Faxes section from the server.
* Vista browsing on log lvl. 3

[2009/07/02 10:42:30, 1] rpc_client/cli_pipe.c:cli_rpc_pipe_open()
  cli_rpc_pipe_open: cli_nt_create failed on pipe \spoolss to machine
MPI1337.  Error was NT_STATUS_ACCESS_DENIED
[2009/07/02 10:42:30, 2]
rpc_server/srv_spoolss_nt.c:spoolss_connect_to_client(2568)
  spoolss_connect_to_client: unable to open the spoolss pipe on machine
MPI1337. Error was : NT_STATUS_ACCESS_DENIED.
[2009/07/02 10:42:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 120
[2009/07/02 10:42:30, 3] smbd/process.c:process_smb()
  Transaction 4064 of length 156
[2009/07/02 10:42:30, 3] smbd/process.c:switch_message(915)
  switch message SMBtrans (pid 22610) conn 0x84186b8
[2009/07/02 10:42:30, 3] smbd/ipc.c:handle_trans(373)
  trans <\PIPE\> data=68 params=0 setup=2
[2009/07/02 10:42:30, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2009/07/02 10:42:30, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "spoolss" (pnum 713e)
[2009/07/02 10:42:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 0
[2009/07/02 10:42:30, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: SPOOLSS_RFNPCNEX
[2009/07/02 10:42:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 24


* WinXP browsing on log lvl. 3
[2009/07/02 10:43:43, 3] smbd/ipc.c:named_pipe(340)
  named pipe command on <> name
[2009/07/02 10:43:43, 3] smbd/ipc.c:api_fd_reply(300)
  Got API command 0x26 on pipe "spoolss" (pnum 709a)
[2009/07/02 10:43:43, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 0
[2009/07/02 10:43:43, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
  api_rpcTNP: rpc command: SPOOLSS_RFNPCNEX
[2009/07/02 10:43:43, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 24




-Oorspronkelijk bericht-
Van: samba-bounces+koen.linders=koca...@lists.samba.org
[mailto:samba-bounces+koen.linders=koca...@lists.samba.org] Namens Koen
Linders
Verzonden: dinsdag 30 juni 2009 12:10
Aan: samba@lists.samba.org
Onderwerp: [Samba] Samba-Cups: all works except browsing when printer is not
defined in smb.conf

Cups 1.2.7 
Debian Etch with Samba 3.0.24
Clients: WinXP SP3 (with Firewall completely off for testing)

When I define a printer specifically in smb.conf, they show up as shared
printers in WinXP. But when I follow the normal way (see below) to load all
from cups they don't.

I followed mainly the latest SAMBA-HOWTO (chapter 21-22)

The only error I see in log.smbd when accessing the Printers&Faxes where
they should be, is:
[2009/06/30 11:13:50, 0] smbd/service.c:make_connection()
  mpi025 (192.168.1.106) couldn't find service
::{2227a280-3aea-1069-a2de-08002b30309d}

When I add them by name instead of via browsing all works, but I wish to
understand what goes wrong and where. 
This works: 
runas /netonly /user:root "rundll32 printui.dll,PrintUIEntry /p /t3 /n
"\\newton\2420N-240"
rundll32 printui.dll,PrintUIEntry /in /n "\\newton\2420N-240"

Any suggestions would be very welcome.

Koen Linders




Extra relevant stuff.

*Checking cups support for samba: ldd `which smbd`
-snip-
libcups.so.2 => /usr/lib/libcups.so.2 (0xb7d9b000)
-snip-

*relevant samba sections
smb.conf
printing = cups
printcap name = cups
load printers = yes

[printers]
comment = Samba Printers Spool
path = /data/spool
printable  = yes
guest ok = yes
browseable = no
writable = no

[print$]
comment = Printer Drivers
path = /data/printers
browseable = yes
guest ok = yes
read only = yes
write list = root +domadmins

*permissions on maps
drwxrwsrwx 3 root  domadmins  4096 2009-06-29 13:25 printers
drwxrwxrwt 2 root  root   4096 2009-06-29 13:50 spool

*driver installation from cups to samba
I did put following items in /usr/share/cups/drivers
cups6.inf (from www.cups.org)
cups6.ini (from www.cups.org)

[Samba] Samba-Cups: all works except browsing when printer is not defined in smb.conf

2009-06-30 Thread Koen Linders
Cups 1.2.7 
Debian Etch with Samba 3.0.24
Clients: WinXP SP3 (with Firewall completely off for testing)

When I define a printer specifically in smb.conf, they show up as shared
printers in WinXP. But when I follow the normal way (see below) to load all
from cups they don't.

I followed mainly the latest SAMBA-HOWTO (chapter 21-22)

The only error I see in log.smbd when accessing the Printers&Faxes where
they should be, is:
[2009/06/30 11:13:50, 0] smbd/service.c:make_connection()
  mpi025 (192.168.1.106) couldn't find service
::{2227a280-3aea-1069-a2de-08002b30309d}

When I add them by name instead of via browsing all works, but I wish to
understand what goes wrong and where. 
This works: 
runas /netonly /user:root "rundll32 printui.dll,PrintUIEntry /p /t3 /n
"\\newton\2420N-240"
rundll32 printui.dll,PrintUIEntry /in /n "\\newton\2420N-240"

Any suggestions would be very welcome.

Koen Linders




Extra relevant stuff.

*Checking cups support for samba: ldd `which smbd`
-snip-
libcups.so.2 => /usr/lib/libcups.so.2 (0xb7d9b000)
-snip-

*relevant samba sections
smb.conf
printing = cups
printcap name = cups
load printers = yes

[printers]
comment = Samba Printers Spool
path = /data/spool
printable  = yes
guest ok = yes
browseable = no
writable = no

[print$]
comment = Printer Drivers
path = /data/printers
browseable = yes
guest ok = yes
read only = yes
write list = root +domadmins

*permissions on maps
drwxrwsrwx 3 root  domadmins  4096 2009-06-29 13:25 printers
drwxrwxrwt 2 root  root   4096 2009-06-29 13:50 spool

*driver installation from cups to samba
I did put following items in /usr/share/cups/drivers
cups6.inf (from www.cups.org)
cups6.ini (from www.cups.org)
cupsps6.dll (from www.cups.org)
cupsui6.dll (from www.cups.org)
ps5ui.dll (from your Windows system)
pscript.hlp (from your Windows system)
pscript.ntf (from your Windows system)
pscript5.dll (from your Windows system)

And to confirm to add drivers to [print$]
cupsaddsmb -U root -v -a -H newton

-snipped all extra info showing only one printer-
Printer Driver 2420N-240 successfully installed.
Succesfully set 2420N-240 to driver 2420N-240.







-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Lots of "smbd/vfs.c:reduce_name(985)" in log.smbd

2009-06-29 Thread Koen Linders
Hi. 
I subscripted just now to the mailing list, but I've been using a Samba file
server (PDC) on Debian for about 2.5 years now. Users are almost all WinXP
SP3. 

No users are complaining but since I changed everything to one share with
group permission on underlying directories I see a lot of errors in
log.smbd. Anyone knows what the log message exactly means? 

I guess it has something to do with permissions. Maybe WinXP trying to
access subdirectories it can't? 

It's all about this folder:
drwxrwxr-x 14 root root 4096 2009-06-26 13:36 newton_share

Subdirectories are restricted to specific groups. Some people are part of
one or more groups.

drwxrws---  8 root aankoopdienst  4096 2009-02-05 13:23 aankoopdienst
drwxrws--- 10 root boekhouding4096 2009-06-09 12:00 boekhouding
drwxrws---  5 root directie   4096 2009-06-16 10:58 directie
drwxrws---  9 root kindadministratie  4096 2009-06-09 08:31
kindadministratie
drwxrws---  2 root ortho_sociale  4096 2009-06-25 17:21 ortho_en_sociale
drwxrws---  2 root orthopedagogen 4096 2009-06-18 16:18 orthopedagogen
drwxrws--- 30 root personeelsdienst   4096 2009-06-26 12:52 personeelsdienst
drwxr-s---  4 root plannen_koca   4096 2009-06-09 08:35 plannen_koca
drwxrws---  5 root sociale_dienst 4096 2009-02-03 16:05 sociale_dienst
drwxrws---  8 root technische_dienst  4096 2009-03-13 09:17
technische_dienst
drwxrws---  5 root uurrooster 4096 2009-06-09 08:33 uurrooster
drwxrws--- 16 root veiligheid16384 2009-06-09 08:33 veiligheid


[Newton]
comment = Gedeelde map op server Newton
browseable  = yes
writeable   = yes
wide links  = no
write list  = +domusers +domadmins
path= /data/shares/newton_share
force directory mode = 770
force create mode = 770
valid users = +domusers +domadmins
create mode = 770
directory mode  = 770

A sample of last hour:

[2009/06/29 08:37:40, 1] smbd/vfs.c:reduce_name(985)
  reduce_name: couldn't get realpath for veiligheid/*
[2009/06/29 09:02:17, 1] smbd/vfs.c:reduce_name(985)
  reduce_name: couldn't get realpath for orthopedagogen/*
[2009/06/29 09:09:19, 1] smbd/vfs.c:reduce_name(985)
  reduce_name: couldn't get realpath for sociale_dienst/*
[2009/06/29 09:11:18, 1] smbd/vfs.c:reduce_name(985)
  reduce_name: couldn't get realpath for personeelsdienst/*
[2009/06/29 09:11:19, 1] smbd/vfs.c:reduce_name(985)
  reduce_name: couldn't get realpath for orthopedagogen/*
[2009/06/29 09:11:22, 1] smbd/vfs.c:reduce_name(985)
  reduce_name: couldn't get realpath for personeelsdienst/*
[2009/06/29 09:12:34, 1] smbd/vfs.c:reduce_name(985)
  reduce_name: couldn't get realpath for personeelsdienst/*
[2009/06/29 09:12:58, 1] smbd/vfs.c:reduce_name(985)
  reduce_name: couldn't get realpath for sociale_dienst/*
[2009/06/29 09:23:30, 1] smbd/vfs.c:reduce_name(985)
  reduce_name: couldn't get realpath for technische_dienst/*
[2009/06/29 09:23:30, 1] smbd/vfs.c:reduce_name(985)
  reduce_name: couldn't get realpath for sociale_dienst/*
[2009/06/29 09:30:31, 1] smbd/vfs.c:reduce_name(985)
  reduce_name: couldn't get realpath for technische_dienst/*
[2009/06/29 09:30:31, 1] smbd/vfs.c:reduce_name(985)
  reduce_name: couldn't get realpath for sociale_dienst/*

Greetings,
Koen Linders

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Which antivirus for a Samba (Debian) fileserver?

2008-02-05 Thread Koen Linders

I'm looking for an antivirus program for a Samba fileserver (PDC).

Is ClamAV good enough? It seems to be mainly used for mail servers...
Any other suggestion, free or non-free?

I tried F-secure antivirus for linux servers but it keeps giving problems.
All clients use F-secure which i centrally manage from another linux  
server which is pretty good imo.


I read other people suggesting to use a different one for the server to  
have a different "angle" for catching stuff instead of just one program.


Any suggestions?

Koen Linders

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] PDC: random problems, especially NETLOGON script not always loading

2008-02-01 Thread Koen Linders

Debian Latest stable.
Linux newton 2.6.18-4-686
Samba 3.0.24
PDC

3Com 3812 Gigabit switch (connection between WinXP client & server)
Others connect through 3Com 3225 100 Mbit -> 3Com 3812 -> Server

Windows XP SP2 fully updated.
F-Secure client security (look down for firewall settings)

In advance, thanks for reading this. Any suggestions are welcome!

I'm having a hard time here. I read a whole lot, browses, searched. I try  
to provide as much info as possible but if you need more, Let me know.

The main problem is the "randomness". Or atleast it looks random for me.

People with mapped shares working for +1 year don't have connection  
problems. So most of the time it seems to work fine.

But i really want to troubleshoot & get all errors out.

I guess the problem i describe next also is the cause of random Roaming  
profile problems, but lets not focus on that part, too many random factors  
in my opinion. And they were only a part of the test. It might work if i  
get this problem solved.


I got a script in the netlogon mapping drives dynamically depending on  
groups.

I don't want them permanent. I don't want a workaround!

Everything works fine, most of the time...
Sometimes it seems the test pc doesn't see the netlogon during boot.
But it's still accesible when browsing to the share and is executable.

Through policy i tried setting:
1)I tried setting detecting slow network (1Gbit though) on.
or
2) Also run script synchronously
No changes.

Firewall:
Even when i change allow all trafic to Samba server in both directions.

Firewall has all necessary port open in both directions:
SMB (TCP)   445 SMB over TCP/IP (TCP)   
SMB (UDP)   445 SMB over TCP/IP (UDP)
Windows Networking (1)	137-138	Both broadcast and multicast	Windows  
network browsing	

Windows Networking (2)  139 Windows file sharing and network printers   
WINS(1)			42	Both broadcast and multicast	WINS / Windows Internet Name  
Service (UDP)	

WINS(2) 42  WINS / Windows Internet Name Service (TCP)  

Windows doesn't show an error in the log, except the autoenrollment one,  
which is normal (no AD).

Samba log file when it goes wrong (a bit lower).

The error when it goes wrong:

1) Error writing 5 bytes to client. -1. (Connection reset by peer):
=> has to do with client going over NETBIOS (139) & 445 and closing one of  
2 connections

Nothing wrong here.
The weird part: For test: i blocked 137-138-139 on firewall and i couldn't  
connect to samba share...


Server is listening on both 139 & 445:

netstat -an | egrep '(137|138|139|445)'
tcp0  0 0.0.0.0:139 0.0.0.0:*   LISTEN
tcp0  0 0.0.0.0:445 0.0.0.0:*   LISTEN
tcp0  0 192.168.1.2:139 192.168.1.59:1075
ESTABLISHED
tcp0  0 192.168.1.2:445 192.168.1.82:4409
ESTABLISHED
tcp0  0 192.168.1.2:445 192.168.1.4:40578
ESTABLISHED
tcp0  0 192.168.1.2:445 192.168.1.44:3465
ESTABLISHED
tcp0  0 192.168.1.2:139 192.168.1.109:1209   
ESTABLISHED

udp0  0 192.168.1.2:137 0.0.0.0:*
udp0  0 0.0.0.0:137 0.0.0.0:*
udp0  0 192.168.1.2:138 0.0.0.0:*
udp0  0 0.0.0.0:138 0.0.0.0:*


2) lib/util_sock.c:write_data(562)
  write_data: write failure in writing to client 192.168.1.98. Error  
Connection reset by peer

=> Could this error point somewhere?

Samba log:

[2008/01/29 13:13:27, 0] lib/util_sock.c:get_peer_addr(1229)
  getpeername failed. Error was Transport endpoint is not connected
[2008/01/29 13:13:27, 0] lib/access.c:check_access(327)
[2008/01/29 13:13:27, 0] lib/util_sock.c:get_peer_addr(1229)
  getpeername failed. Error was Transport endpoint is not connected
  Denied connection from  (0.0.0.0)
[2008/01/29 13:13:27, 1] smbd/process.c:process_smb(1103)
[2008/01/29 13:13:27, 0] lib/util_sock.c:get_peer_addr(1229)
  getpeername failed. Error was Transport endpoint is not connected
  Connection denied from 0.0.0.0
[2008/01/29 13:13:27, 0] lib/util_sock.c:write_data(562)
  write_data: write failure in writing to client 192.168.1.98. Error  
Connection reset by peer

[2008/01/29 13:13:27, 0] lib/util_sock.c:send_smb(769)
  Error writing 5 bytes to client. -1. (Connection reset by peer)
[2008/01/29 13:13:27, 1] smbd/service.c:make_connection_snum(950)
  mpi057 (192.168.1.98) connect to service profiles initially as user  
verah (uid=1003, gid=1001) (pid 12835)

[2008/01/29 13:13:27, 1] smbd/service.c:close_cnum(1150)
  mpi057 (192.168.1.98) closed connection to service profiles
[2008/01/29 13:13:30, 1] smbd/service.c:make_connection_snum(950)


Smb.conf:

#=== Global Settings ===

[global]
netbios name = NEWTON
workgroup = KOCALM
domain master = yes
domain logons = yes
loca

[Samba] Samba PDC windows XP logon scripts

2007-11-22 Thread Koen Linders

Server: Debian etch (kernel 2.6.18-4-686)
Samba 3.0.24 (PDC)

Workstations: Windows XP Pro SP2 fully updated

I want to have my windows xp users to login locally to their machine, but  
still have them automaticly check the netlogon share or something like  
that to apply network mappings and policies per group or user.


I have this working when the user logs onto the domain. He gets a profile  
(which i keep local through gpedit.msc). I also know of a way to apply all  
those things locally to every machine, but obviously i want to have this  
another way.


Domain login could be ok if it's a new user, but i'm talking about +- 50  
workstations with local profiles already in use. And it would be the best  
to manage them centrally via the server.


Anyway to apply this some way?

I've been searching a lot, and it seems to me at the moment i have to  
change everything to every workstations (policy and network drive mapping)  
without having to do a lot of jiggling locally with their profiles.


I rather don't.

I guess i'm not the only one who encountered this problem.
Any suggestions would be very welcome.

Thx for reading,
Koen Linders

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Weird disconnection problems

2007-10-19 Thread Koen Linders

i'm seeing same problems here.

A very specific problem is clients sometimes can't get their roaming  
profile.
Error message is the same so i guess the problem may be somewhat the same.  
Sometimes it happens with shares too.



System Debian etch
Samba 3.024

smbd log: Around 9:14 i'm seeing the same errors.

2007/10/19 09:03:56, 0] lib/util_sock.c:get_peer_addr(1229)
  getpeername failed. Error was Transport endpoint is not connected
[2007/10/19 09:03:56, 0] lib/util_sock.c:get_peer_addr(1229)
  getpeername failed. Error was Transport endpoint is not connected
[2007/10/19 09:03:56, 0] lib/access.c:check_access(327)
[2007/10/19 09:03:56, 0] lib/util_sock.c:get_peer_addr(1229)
  getpeername failed. Error was Transport endpoint is not connected
  Denied connection from  (0.0.0.0)
[2007/10/19 09:03:56, 1] smbd/process.c:process_smb(1103)
[2007/10/19 09:03:56, 0] lib/util_sock.c:get_peer_addr(1229)
  getpeername failed. Error was Transport endpoint is not connected
  Connection denied from 0.0.0.0
[2007/10/19 09:03:56, 0] lib/util_sock.c:write_data(562)
  write_data: write failure in writing to client 192.168.1.98. Error  
Connection reset by peer

[2007/10/19 09:03:56, 0] lib/util_sock.c:send_smb(769)
  Error writing 5 bytes to client. -1. (Connection reset by peer)
[2007/10/19 09:04:28, 0] lib/util_sock.c:get_peer_addr(1229)
  getpeername failed. Error was Transport endpoint is not connected
[2007/10/19 09:04:28, 0] lib/util_sock.c:get_peer_addr(1229)
  getpeername failed. Error was Transport endpoint is not connected
[2007/10/19 09:04:28, 0] lib/util_sock.c:read_data(534)
  read_data: read failure for 4 bytes to client 0.0.0.0. Error =  
Connection reset by peer

[2007/10/19 09:04:28, 0] smbd/service.c:make_connection()
  mpi057 (192.168.1.98) couldn't find service verah
[2007/10/19 09:04:28, 0] smbd/service.c:make_connection()
  mpi057 (192.168.1.98) couldn't find service verah
[2007/10/19 09:04:30, 1] smbd/service.c:make_connection_snum(950)
  mpi057 (192.168.1.98) connect to service netlogon initially as user  
verah (uid=1003, gid=1001) (pid 10356)

[2007/10/19 09:04:30, 0] smbd/service.c:set_current_service(150)
  chdir (/data/netlogon) failed
[2007/10/19 09:04:30, 0] smbd/service.c:set_current_service(150)
  chdir (/data/netlogon) failed
[2007/10/19 09:04:38, 1] smbd/service.c:close_cnum(1150)
  mpi057 (192.168.1.98) closed connection to service netlogon
[2007/10/19 09:04:39, 1] smbd/service.c:make_connection_snum(950)
  mpi057 (192.168.1.98) connect to service profiles initially as user  
verah (uid=1003, gid=1001) (pid 10360)

[2007/10/19 09:04:39, 1] smbd/service.c:close_cnum(1150)
  mpi057 (192.168.1.98) closed connection to service profiles
[2007/10/19 09:04:41, 1] smbd/service.c:make_connection_snum(950)
  mpi057 (192.168.1.98) connect to service ICT initially as user verah  
(uid=1003, gid=1004) (pid 10361)

[2007/10/19 09:04:50, 1] smbd/service.c:close_cnum(1150)
  mpi057 (192.168.1.98) closed connection to service ICT
[2007/10/19 09:06:10, 1] smbd/service.c:make_connection_snum(950)
  mpi057 (192.168.1.98) connect to service ICT initially as user verah  
(uid=1003, gid=1004) (pid 10371)

[2007/10/19 09:06:10, 1] smbd/service.c:make_connection_snum(950)
  mpi057 (192.168.1.98) connect to service Backup initially as user verah  
(uid=1003, gid=1004) (pid 10371)

[2007/10/19 09:14:26, 1] smbd/service.c:make_connection_snum(950)
  mpi057 (192.168.1.98) connect to service profiles initially as user  
verah (uid=1003, gid=1001) (pid 10371)

[2007/10/19 09:14:30, 1] smbd/service.c:close_cnum(1150)
  mpi057 (192.168.1.98) closed connection to service profiles
[2007/10/19 09:14:30, 1] smbd/service.c:close_cnum(1150)
  mpi057 (192.168.1.98) closed connection to service Backup
[2007/10/19 09:14:30, 1] smbd/service.c:close_cnum(1150)
  mpi057 (192.168.1.98) closed connection to service ICT
[2007/10/19 09:14:43, 1] smbd/service.c:make_connection_snum(950)
  mpi057 (192.168.1.98) connect to service profiles initially as user  
verah (uid=1003, gid=1001) (pid 10405)

[2007/10/19 09:14:47, 1] smbd/service.c:close_cnum(1150)
  mpi057 (192.168.1.98) closed connection to service profiles
[2007/10/19 09:14:47, 0] lib/util_sock.c:get_peer_addr(1229)
  getpeername failed. Error was Transport endpoint is not connected
[2007/10/19 09:14:47, 0] lib/access.c:check_access(327)
[2007/10/19 09:14:47, 0] lib/util_sock.c:get_peer_addr(1229)
  getpeername failed. Error was Transport endpoint is not connected
  Denied connection from  (0.0.0.0)
[2007/10/19 09:14:47, 1] smbd/process.c:process_smb(1103)
[2007/10/19 09:14:47, 0] lib/util_sock.c:get_peer_addr(1229)
  getpeername failed. Error was Transport endpoint is not connected
  Connection denied from 0.0.0.0
[2007/10/19 09:14:47, 0] lib/util_sock.c:write_data(562)
  write_data: write failure in writing to client 192.168.1.98. Error  
Connection reset by peer

[2007/10/19 09:14:47, 0] lib/util_sock.c:send_smb(769)
  Error writing 5 bytes to client. -1. (Connectio

[Samba] Re: read_data: read failure for 4 bytes

2007-08-23 Thread Koen Linders
I've been looking around for the same problem for some time. I'm quite  
sure, but anyone correct me if I'm wrong.


It has something to do with windows clients (win2K, XP) trying to get a  
connection on port 139 and 445. If windows gets a connection on port 445,  
port 139 is dropped and the error appears in the log. Microsoft OS prefer  
445 over 139 (bypassing NetBIOS overhead).


You could avoid this by putting smb ports = 139 in the [global], it forces  
clients to use NetBIOS services. However smbd and nmbd daemon failed to  
start for me that way, but it should really work. I didn't gave it a lot  
time testing, since the error is more of a notification.


I hope this helps.
Koen Linders





On Wed, 22 Aug 2007 15:11:33 +0200, Alexandre Domont - AUF  
<[EMAIL PROTECTED]> wrote:



Hello,

I 've messages in my log...it's regular...but I don’t know if this is a  
serious problem !


My conf : Samba 3.0.24 and Debian Etch


Security Events
=-=-=-=-=-=-=-=
Aug 20 17:17:08 dios smbd[9051]: read_data: read failure for 4 bytes to  
client 10.x.x.x. Error = Aucun chemin d'accès pour atteindre l'hôte cible


System Events
=-=-=-=-=-=-=
Aug 20 17:17:08 dios smbd[9051]: [2007/08/20 17:17:08, 0]  
lib/util_sock.c:read_data(534)



Extract smb.conf :

[global]
security = ads
realm = BUREAUTIQUE.FR.AUF
password server = 10.x.x.x
workgroup = BUREAUTIQUE
idmap uid = 1-2
idmap gid = 1-2
winbind enum users = yes
winbind enum groups = yes
template homedir = /home/%D/%U
template shell = /bin/bash
client use spnego = yes
client ntlmv2 auth = yes
encrypt passwords = yes
winbind use default domain = yes
restrict anonymous = 2
domain master = no
local master = no
preferred master = no
os level = 0
smb ports = 445

#msdfs racine DFS Microsoft
host msdfs = No
msdfs root = No

# Gestion des logs. Attention à partir de level 3 : ralentissement de  
perf

log file = /var/log/samba/%m.log
log level = 3
max log size = 1000

#Permission
inherit acls = Yes
map acl inherit = Yes

#Print Cups
printing = cups
printcap name = cups
load printers = yes
printer admin = root, @"admins du domaine"
cups options = "raw"

#Optimisation
socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192


[Intranet_Save$]
path = /srv/public/intranet
browseable=yes
writeable=yes


Thank you,

---
Alexander






--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba