[Samba] No Mapping between account names and security IDs was done

2004-01-28 Thread Kristis Makris
I had inquired about this in that past and was not given a direct
answer. For whatever it is worth, here are my findings, also in response
to this thread

http://lists.samba.org/archive/samba-ntdom/2001-January/017142.html

I just discovered that you should make sure that samba has not generated
a new sambaDomainName= entry in LDAP that contains a SID
that's different than the one used in your machine and user accounts. 

Cheers
Kristis

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba-3.0.0 release won't authenticate

2003-10-31 Thread Kristis Makris
Hello,

This is the 3rd time I'm sending the message.

I've just upgraded from samba3-alpha23 to samba3.0.0 release. I'm
running samba with an LDAP backend and I used the convertSambaAccount
conversion script, and now the latest 3.0.0 ldap schema. The problem I
have is that no Windows user can authenticate against their home
directory, or any other machine. Authentication against the login screen
works, but not to any shares.

I don't understand how this happens all of the sudden, given that
alpha23 had no problems with authentication. Is there anything else I
need to know about rids, SIDS, UID/GID mappings?

Also, when I try to join a Win2k machine to the domain I get the error:

"No mapping between account names and security IDs was done".

Do I need to use an "idmap backend" entry in smb.conf ? I tried that and
still have the same problem. Authentication just doesn't work. Why ? The
smb.conf did not change.

Anybody that had similar problems ? Anybody that has a clue why this
might be happening?



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Upgrading to samba3.0.0 from samba3-alpha23 --> can no longer authenticate

2003-10-17 Thread Kristis Makris
Hello,

I've just upgraded from samba3-alpha23 to samba3.0.0 release. I'm
running samba with an LDAP backend and I used the convertSambaAccount
conversion script, and now the latest 3.0.0 ldap schema. The problem I
have is that no Windows user can authenticate against their home
directory, or any other machine.

I don't understand how this happens all of the sudden, given that
alpha23 had no problems with authentication. Is there anything else I
need to know about rids, SIDS, UID/GID mappings?

When I try to join a Win2k machine to the domain I get the error:

"No mapping between account names and security IDs was done".

Do I need to use an "idmap backend" entry in smb.conf ? I tried that and
still have the same problem. Authentication just doesn't work. Why ? The
smb.conf did not change.

Anybody that had similar problems ?



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] write_socket: Error writing 4 bytes to socket 5: ERRNO=Connection reset by peer

2003-07-17 Thread Kristis Makris
Hi Paul,

This is another report I came across that indicates this may be a naming
service problem, as you mentioned in your bug description:

http://www.geocrawler.com/archives/3/151/2002/11/150/10253550/

Perhaps we can compare configs. I'm running bind for DNS and have "wins
support = yes" on the samba3 pdc to run a WINS server. I was not pushing
down through dhcp a WINS server IP or node type (nor was one hard coded
in each client), but I just set that and I'll let you know if that makes
a difference.

Are you setting a WINS server on each client machine or through dhcp ?

On Thu, 2003-07-17 at 14:42, Paul Eggleton wrote:
> Hi Kristis,
> 
> Kristis Makris wrote on Friday, 18 July 2003 9:19 a.m.:
> > [2003/07/17 12:16:06, 0] lib/util_sock.c:get_socket_addr(900)
> >   getpeername failed. Error was Transport endpoint is not connected
> >   [2003/07/17 12:16:06, 0] lib/util_sock.c:write_socket_data(388)
> >   write_socket_data: write failure. Error = Connection reset by peer
> >   [2003/07/17 12:16:06, 0] lib/util_sock.c:write_socket(412)
> > write_socket: Error writing 4 bytes to socket 16: ERRNO = Connection
> > reset by peer [2003/07/17 12:16:06, 0] lib/util_sock.c:send_smb(573)
> > Error writing 4 bytes to client. -1. (Connection reset by peer)   


> https://bugzilla.samba.org/show_bug.cgi?id=232


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] write_socket: Error writing 4 bytes to socket 5: ERRNO =Connection reset by peer

2003-07-17 Thread Kristis Makris
Hello,

I originally posted this on samba-technical 
(http://lists.samba.org/pipermail/samba-technical/2003-July/046076.html), but I just 
verified that I'm also seeing the same error message with samba-3.0.0beta3. I have not 
tested if I'm also getting disconnects and Word saving problems that way. But, people 
using 2.2.7 must have also seen this.

Here are some messages I've seen in the logs using samba-3.0.0beta3.

[2003/07/17 12:16:06, 0] lib/util_sock.c:get_socket_addr(900)
  getpeername failed. Error was Transport endpoint is not connected
[2003/07/17 12:16:06, 0] lib/util_sock.c:write_socket_data(388)
  write_socket_data: write failure. Error = Connection reset by peer
[2003/07/17 12:16:06, 0] lib/util_sock.c:write_socket(412)
  write_socket: Error writing 4 bytes to socket 16: ERRNO = Connection
reset by peer
[2003/07/17 12:16:06, 0] lib/util_sock.c:send_smb(573)
  Error writing 4 bytes to client. -1. (Connection reset by peer)

Anybody else experiencing something similar to this (see original
posting) ?

Thanks,
Kristis

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] smbgroupedit does not honor ldap parameters from smb.conf

2003-03-11 Thread Kristis Makris
Hello,

I've been using samba-3alpha22 as a PDC authenticating against LDAP. I
am trying to add NT Groups using the smbgroupedit utility.

It seems to me that smbgroupedit always looks in /etc/group and does not
take into account the ldap configuration options specified in smb.conf.
The relevant ldap entries are:

passdb backend = ldapsam:ldap://ebola/
ldap suffix="dc=datasoft, dc=com"
ldap admin dn = "cn=root, dc=datasoft, dc=com"
ldap ssl = off
ldap passwd sync = yes
ldap trust ids = yes

Regardless of whether I have an entry in LDAP that belongs in the
posixGroup and/or posixAccount ObjectClasses, it looks like smbgroupedit
only consults /etc/group

# ./smbgroupedit  -a nyNewGroup -t d
unix group nyNewGroup doesn't exist!

I would also expect that smbgroupedit would try to add new groups in
LDAP, if entries for them where not already there.

Does anybody know what the status of this utility is ? 

I have noticed the "add group script", "add user to group script", and
"add user script" configuration parameters, and in the examples of those
the /usr/local/samba/bin/add_user script is listed, while no such
utility is shipped with the samba3-alpha22 source. What is the samba
designated utility (if there is one) for adding groups to the
*authentication database* that is independent of what that database is
(pwdb/LDAP) ?

Thanks,
Kristis


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba