[Samba] Empty secrets.tdb.

2007-10-04 Thread Latrell Wang 王獻綱
Hi all:

 

I have a FTP server combined with samba server. Pam_smbpass.so is used to 
provide authentication. Everything works fine in the beginning. But after a 
period of heavy access from FTP, the login will fail. I found the problem is 
resulted from secrets.tdb. It became an empty file (I use tdbdump to check the 
content). Pam_smbpass.so rejected the authentication when it can’t check the 
SID in the secrets.tdb. My samba version is 3.0.25c. Previous version is 
3.0.21c, and it did not have the problem.

 

Thanks for all advice,

Latrell.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] RE: Failed to join win2000 domain in 3.0.25b

2007-08-21 Thread Latrell Wang 王獻綱
Hi all:

 

I found that if I use “net rpc join” instead of “net ads join” to join a 
win2000 ad domain, it will succeed in the same setting.

I don’t know why this can work. Could somebody explain it? Are there any 
changes for joining win2000 ad domain?

 

Thanks,

Latrell.



From: Latrell Wang 王獻綱 
Sent: Thursday, August 02, 2007 4:27 PM
To: samba@lists.samba.org
Subject: RE: Failed to join win2000 domain in 3.0.25b

 

I wonder if my kerberos version could cause problems. My version is 1.6.2. 
Please give me some help.

 

Thanks,

Latrell.

 



Hi all:

 

I’m trying to join a win2000 ad domain but failed. I can see my samba server in 
computer list of domain controller, but the icon of the samba server is 
disabled. I also got error message from my samba server:

 

Failed to set password for machine account (NT_STATUS_WRONG_PASSWORD) Failed to 
join domain: Wrong Password

 

The password should be correct because I can get krb ticket successfully. My 
samba version is 3.0.25b. Joining win2003 domain is successfully without a 
problem. I wonder why it makes difference between 2000 and 2003. Previously I 
used version 3.0.23d, and both 2000 and 2003 can be joined domain successfully. 
My global session is as the following:

 

[global]

dos charset = UTF8

display charset = UTF8

unix charset = UTF8

server string = %h

netbios name = smbserver

write ok = yes

guest account = smbguest

map to guest = bad user

encrypt passwords = yes

map archive = no

max log size= 50

dfree command= /usr/local/bin/dfree

client use spnego = yes

auth methods = guest sam_ignoredomain winbind:ntdomain

host msdfs = yes

winbind use default domain = yes

workgroup = PASW

security = ads

password server = PASW.COM *

realm = PASW.COM

winbind enum users = yes

winbind enum groups = yes

idmap uid = 10-50

idmap gid = 10-50

winbind cache time = 15

template homedir = /tmp/users/home/%D/%U

template shell = /bin/bash

 

Please help me out.

Thanks in advance,

Latrell

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] RE: Failed to join win2000 domain in 3.0.25b

2007-08-21 Thread Latrell Wang 王獻綱
I'm using montavista linux instead of Solaris. I also encountered Logon 
failure if I turn off the client use spengo. Turn on client use spnego and use 
net rpc join seems to work perfectly.

Latrell 

-Original Message-
From: Alexandr Miasnikov [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, August 21, 2007 5:18 PM
To: Latrell Wang 王獻綱; samba@lists.samba.org
Subject: Re: [Samba] RE: Failed to join win2000 domain in 3.0.25b

Latrell Wang 王獻綱 пишет:
 Hi all:
 
  
 
 I found that if I use “net rpc join” instead of “net ads join” to join a 
 win2000 ad domain, it will succeed in the same setting.
 
 I don’t know why this can work. Could somebody explain it? Are there any 
 changes for joining win2000 ad domain?
 


This is a bug https://bugzilla.samba.org/show_bug.cgi?id=4863
if You are using Solaris.


-- 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


FW: [Samba] Can't browse shares after shutdown domain controller.

2007-08-07 Thread Latrell Wang 王獻綱
 

 



From: Latrell Wang 王獻綱 
Sent: Tuesday, August 07, 2007 12:34 PM
To: 'John Drescher'
Subject: RE: [Samba] Can't browse shares after shutdown domain controller.

 

I use security = ads because win2000 is an ad domain. Does it make difference?

 

Thanks,

Latrell.

 



From: John Drescher [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, August 07, 2007 12:11 PM
To: Latrell Wang 王獻綱
Cc: samba@lists.samba.org
Subject: Re: [Samba] Can't browse shares after shutdown domain controller.

 

 

On 8/6/07, Latrell Wang 王獻綱 [EMAIL PROTECTED] wrote:

Hi all:



I joined my samba server to a win2000 domain controller. I found something 
interesting, if I shutdown the domain controller, I can't connect to my samba 
server through windows CIFS (\\IP file:///\\IP ). However, using smbclient 
can still browsing shares without a problem. Is it a normal situation?? 

Do you have security = domain in your samba.conf?

John

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Can't browse shares after shutdown domain controller.

2007-08-06 Thread Latrell Wang 王獻綱
Hi all:

 

I joined my samba server to a win2000 domain controller. I found something 
interesting, if I shutdown the domain controller, I can’t connect to my samba 
server through windows CIFS (\\IP file:///\\IP ). However, using smbclient 
can still browsing shares without a problem. Is it a normal situation??

 

Thanks in advance,

Latrell.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] vista: error accessing profile, xp works (solved)

2007-02-28 Thread Latrell Wang 王獻綱
Hi,
I have some problems with DFS, too.
I create a share (say, VistaShare) on Vista client, and have a DFS root share 
(say, SambaShare) with the VistaShare. I also set appropriate permission for 
the share. From windows XP, 2003 server, I can access the share without a 
problem.
But when I use the Vista client, I get permission deny message. 
I set host msdfs = yes in global session, and msdfs root = yes in 
SambaShare.
Are the two problems related?

Thanks,
Latrell.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rainer Traut
Sent: Wednesday, February 28, 2007 6:39 PM
To: [EMAIL PROTECTED]
Cc: samba@lists.samba.org
Subject: Re: [Samba] vista: error accessing profile, xp works (solved)

Hi,

as I said I'm using your sernet vista version.

msdfs root = no on the profile share is not enough, profile cannot be 
accessed.

host msdfs = no in the global section and everything works again.

Rainer

Volker Lendecke schrieb:
 On Tue, Feb 27, 2007 at 03:23:48PM +0100, Rainer Traut wrote:
 Solved:
 host msdfs = no
 is needed.
 
 Really? msdfs root = no on the profile share is not
 enough? I'm asking because I've changed the msdfs root
 default to no, and if Vista really barfs at host msdfs = yes 
 then we might have to reconsider
 
 Volker

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] DFS in Vista

2007-02-13 Thread Latrell Wang 王獻綱
Yes, I applied the patch for BUG 4356. It still not worked.
The DFS tab of the properties from Vista client is correct (\\ip\share).

Thanks,
Latrell.

-Original Message-
From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] 
Sent: Monday, February 12, 2007 9:06 PM
To: Latrell Wang 王獻綱
Cc: samba@lists.samba.org
Subject: Re: [Samba] DFS in Vista

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Latrell Wang 王獻綱 wrote:
 Can anyone duplicate my problem?

Have you applied DFS patch for 3.0.24 listed at
http://www.samba.org/samba/patches/?





cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF0GY8IR7qMdg1EfYRAtdQAJ9IMKmlR2skx1skMG6iR3uO/FAErwCfW+Yy
Y+qk3OrxA+Afy3cMKgeClBo=
=zVKn
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] DFS in Vista

2007-02-11 Thread Latrell Wang 王獻綱
Can anyone duplicate my problem?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Latrell Wang 王獻綱
Sent: Thursday, February 08, 2007 10:57 AM
To: samba@lists.samba.org
Subject: [Samba] DFS in Vista

Hi all:

 

I shared a folder in vista. In my samba (3.0.24), I create a DFS link to the 
vista shared folder. However, I can’t access the share from vista.

Other OS such as XP, 2003 can access without a problem. I use two way to 
connect the share in vista:

1.  map network drive: I got “network access is denied”

2.  directly type \\ip\share file:\\ip\share  in explorer, I got 
\\IP\share\DFS is not accessible. You might not have the permission to use the 
network resource. Network access is denied. 

 

Is there anything wrong compatible with vista? 

 

Thanks,

Latrell.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Unicode support--case sensitive in share name

2007-02-07 Thread Latrell Wang 王獻綱
It seems to be the problem with upper.dat and lower.dat. I used strace and 
found I missed the two files. After copy the two files, the transformation is 
OK.

Thanks,
Latrell.

-Original Message-
From: Don McCall [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 06, 2007 9:25 PM
To: Latrell Wang 王獻綱
Subject: Re: [Samba] Unicode support--case sensitive in share name

Hi,
The only time I have seen this is on filenames with german (or portugese, 
actually) characters.  And it only happened if the client and server were 
sending ascii, instead of unicode, like the older win95/98 clients will do.  
Check the version of you samba server, and what client you are using to access 
the share - unless they negotiate unicode over the wire, I would expect this 
problem.


- Original Message 
From: Latrell Wang 王獻綱 [EMAIL PROTECTED]
To: samba@lists.samba.org
Sent: Tuesday, February 6, 2007 6:04:48 AM
Subject: [Samba] Unicode support--case sensitive in share name


Hi all:



I create one share named grôzer but the share can’t be accessed.I looked into 
the log, and find the share name will be transformed to upper case and then 
lower case. The ASCII can be transformed in between successfully, but German 
can’t. It leaded to access failed. I also tried the upper case share grÔzer, 
and it works successfully. It seems the lower case can’t be transformed back 
from upper case.

The log is as follows:



[2007/02/06 18:59:46, 5] lib/username.c:Get_Pwnam_internals(234)

  Trying _Get_Pwnam(), username as lowercase is grÔzer

[2007/02/06 18:59:46, 5] lib/username.c:Get_Pwnam_internals(252)

  Trying _Get_Pwnam(), username as uppercase is GRÔZER

[2007/02/06 18:59:46, 5] lib/username.c:Get_Pwnam_internals(261)

  Checking combinations of 0 uppercase letters in grÔzer

[2007/02/06 18:59:46, 5] lib/username.c:Get_Pwnam_internals(267)

  Get_Pwnam_internals didn't find user [grÔzer]!

[2007/02/06 18:59:46, 3] smbd/service.c:find_service(151)

  checking for home directory grÔzer gave (NULL)

[2007/02/06 18:59:46, 3] smbd/service.c:find_service(208)

  find_service() failed to find service grÔzer

[2007/02/06 18:59:46, 0] smbd/service.c:make_connection(851)

  latrellpc (172.23.26.17) couldn't find service grÔzer

[2007/02/06 18:59:46, 3] smbd/error.c:error_packet(146)

  error packet at smbd/reply.c(672) cmd=117 (SMBtconX) 
NT_STATUS_BAD_NETWORK_NAME 



Thanks,

Latrell.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


 

It's here! Your new message!  
Get new email alerts with the free Yahoo! Toolbar.
http://tools.search.yahoo.com/toolbar/features/mail/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] DFS in Vista

2007-02-07 Thread Latrell Wang 王獻綱
Hi all:

 

I shared a folder in vista. In my samba (3.0.24), I create a DFS link to the 
vista shared folder. However, I can’t access the share from vista.

Other OS such as XP, 2003 can access without a problem. I use two way to 
connect the share:

1.  map network drive: I got “network access is denied”

2.  directly type \\ip\share file:///\\ip\share  in explorer, I got 
\\IP\share\DFS is not accessible. You might not have the permission to use the 
network resource. Network access is denied. 
file:///\\IP\share\DFS%20is%20not%20accessible.%20You%20might%20not%20have%20the%20permission%20to%20use%20the%20network%20resource.%20Network%20access%20is%20denied.
 

 

Is there anything wrong compatible with vista? 

 

Thanks,

Latrell.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Unicode support--case sensitive in share name

2007-02-06 Thread Latrell Wang 王獻綱
Hi all:

 

I create one share named grôzer but the share can’t be accessed.I looked into 
the log, and find the share name will be transformed to upper case and then 
lower case. The ASCII can be transformed in between successfully, but German 
can’t. It leaded to access failed. I also tried the upper case share grÔzer, 
and it works successfully. It seems the lower case can’t be transformed back 
from upper case.

The log is as follows:

 

[2007/02/06 18:59:46, 5] lib/username.c:Get_Pwnam_internals(234)

  Trying _Get_Pwnam(), username as lowercase is grÔzer

[2007/02/06 18:59:46, 5] lib/username.c:Get_Pwnam_internals(252)

  Trying _Get_Pwnam(), username as uppercase is GRÔZER

 [2007/02/06 18:59:46, 5] lib/username.c:Get_Pwnam_internals(261)

  Checking combinations of 0 uppercase letters in grÔzer

[2007/02/06 18:59:46, 5] lib/username.c:Get_Pwnam_internals(267)

  Get_Pwnam_internals didn't find user [grÔzer]!

[2007/02/06 18:59:46, 3] smbd/service.c:find_service(151)

  checking for home directory grÔzer gave (NULL)

[2007/02/06 18:59:46, 3] smbd/service.c:find_service(208)

  find_service() failed to find service grÔzer

 [2007/02/06 18:59:46, 0] smbd/service.c:make_connection(851)

  latrellpc (172.23.26.17) couldn't find service grÔzer

[2007/02/06 18:59:46, 3] smbd/error.c:error_packet(146)

  error packet at smbd/reply.c(672) cmd=117 (SMBtconX) 
NT_STATUS_BAD_NETWORK_NAME 

 

Thanks,

Latrell.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] net ads info can't find the ldap server.

2007-01-26 Thread Latrell Wang 王獻綱
I looked into the source code, and have some observations:
1.
I don't wrote the realm in my smb.conf, because I get the realm form net ads 
info.
Once I set realm in the smb.conf, net ads info worked.
Does it mean the realm is needed in smb.conf?
In libads\Ldap.c, the ads_try connect() do not have the realm value 
(ads-server.realm). Is there anything wrong in my environment?
Or the realm must be in smb.conf?

2. When I try to join domain, using net ads join -Uadministrator%password, I 
got the following message:

Using short domain name -- NAS
Failed to set servicePrincipalNames. Please ensure that
the DNS domain of this server matches the AD domain,
Or rejoin with using Domain Admin credentials.
Disabled account for 'NSAF933' in realm 'NAS.LOCAL'

I found the problem is in util\net_ads.c. The function net_set_machine_spn() do 
Line:1001 status = ads_gen_mod(ads_s, new_dn, mods). It returns 20 and let the 
ADS_ERROR_OK() check fail. Mark the line join domain will be successfully.

Please give me some advise.

Thanks,
Latrell


-Original Message-
From: Latrell Wang 王獻綱 
Sent: Wednesday, January 24, 2007 9:26 AM
To: 'Gerald (Jerry) Carter'
Cc: samba@lists.samba.org
Subject: RE: [Samba] net ads info can't find the ldap server.

Hi Jerry:
I've sent you yesterday, but it seems something wrong. I send it again.

Thanks,
Latrell.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gerald (Jerry) 
Carter
Sent: Monday, January 22, 2007 10:08 PM
To: Latrell Wang 王獻綱
Cc: samba@lists.samba.org
Subject: Re: [Samba] net ads info can't find the ldap server.

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Latrell Wang 王獻綱 wrote:

   Failed to parse cldap reply


Can you send me a raw sniff from Wireshark?  And a level 10
debug log from 'net ads info'?





cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFtMUtIR7qMdg1EfYRAuqlAKCrMRHnPTF0lkJWzFqV7ASApjMyNgCeP4A+
dsmGJx76nEC30nf7qX64tko=
=BHrj
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] net ads info can't find the ldap server.

2007-01-23 Thread Latrell Wang 王獻綱
Hi Jerry:
I've sent you yesterday, but it seems something wrong. I send it again.

Thanks,
Latrell.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gerald (Jerry) 
Carter
Sent: Monday, January 22, 2007 10:08 PM
To: Latrell Wang 王獻綱
Cc: samba@lists.samba.org
Subject: Re: [Samba] net ads info can't find the ldap server.

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Latrell Wang 王獻綱 wrote:

   Failed to parse cldap reply


Can you send me a raw sniff from Wireshark?  And a level 10
debug log from 'net ads info'?





cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFtMUtIR7qMdg1EfYRAuqlAKCrMRHnPTF0lkJWzFqV7ASApjMyNgCeP4A+
dsmGJx76nEC30nf7qX64tko=
=BHrj
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] net ads info can't find the ldap server.

2007-01-22 Thread Latrell Wang 王獻綱
Hi all:

 

After I upgraded to samba 3.0.23d, I can’t use net ads info to retrieve DC 
information.

 

In my previous version (3.0.21c), I can use net ads info and get the 
information:

LDAP server: 172.23.26.204

LDAP server name: nas-2003

Realm: NAS.LOCAL

Bind Path: dc=NAS,dc=LOCAL

LDAP port: 389

Server time: Mon, 22 Jan 2007 09:51:02 GMT

KDC server: 172.23.26.204

Server time offset: -60

 

After upgrade to 3.0.23d:

Didn't find the ldap server!

 

The detailed information is as follows:

It seem there’s some problem with protocol negotiation. My openldap version is 
2.1.22. I also tried 2.3.32, but also fail. 

Could someone help me out?

 

Thanks,

Latrell.

 

 

[2007/01/22 18:00:24, 3] param/loadparm.c:lp_load(4945)

  lp_load: refreshing parameters

[2007/01/22 18:00:24, 3] param/loadparm.c:init_globals(1410)

  Initialising global parameters

[2007/01/22 18:00:24, 3] param/params.c:pm_process(572)

  params.c:pm_process() - Processing configuration file /etc/samba/smb.conf

[2007/01/22 18:00:24, 3] param/loadparm.c:do_section(3687)

  Processing section [global]

[2007/01/22 18:00:24, 3] lib/module.c:do_smb_load_module(49)

  Error loading module '/usr/lib/charset/ANSI_X3.4-1968.so': 
/usr/lib/charset/ANSI_X3.4-1968.so: cannot open shared object file: No such 
file or directory

[2007/01/22 18:00:24, 2] lib/interface.c:add_interface(81)

  added interface ip=172.23.26.152 bcast=172.23.26.255 nmask=255.255.255.0

[2007/01/22 18:00:24, 3] libsmb/namequery.c:get_dc_list(1426)

  get_dc_list: preferred server list: 172.23.26.204, NAS.LOCAL *

[2007/01/22 18:00:24, 1] libads/cldap.c:recv_cldap_netlogon(240)

  Failed to parse cldap reply

[2007/01/22 18:00:24, 3] libads/ldap.c:ads_try_connect(136)

  ads_try_connect: CLDAP request 172.23.26.204 failed.

Didn't find the ldap server!

[2007/01/22 18:00:24, 2] utils/net.c:main(988)

  return code = -1

 

[smb.conf]

[global]

dos charset = UTF8

display charset = UTF8

unix charset = UTF8

server string = %h

netbios name = NSAF933

write ok = yes

guest account = smbguest

map to guest = bad user

encrypt passwords = yes

map archive = no

client use spnego = no

auth methods = guest sam_ignoredomain winbind:ntdomain

host msdfs = yes

winbind use default domain = yes

 

workgroup = NAS

security = ads

password server = NAS.LOCAL *

idmap uid = 10-50

idmap gid = 10-50

winbind cache time = 15

template homedir = /tmp/users/home/%D/%U

template shell = /bin/bash

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Null session problem when mounting share using domainuseraccount

2006-12-13 Thread Latrell Wang 王獻綱
My global session of smb.conf is as follows:
[global]
dos charset = UTF8
display charset = UTF8
unix charset = UTF8
server schannel=auto
netbios name = NSA1129
write ok = yes
guest account = smbguest
map to guest = bad user
encrypt passwords = yes
map archive = no
client use spnego = no
auth methods = guest sam_ignoredomain winbind:ntdomain
host msdfs = yes
winbind use default domain = yes

workgroup = NAS
security = ads
password server = 172.23.26.204 *
realm = NAS.LOCAL
idmap uid = 10-50
idmap gid = 10-50
winbind cache time = 15
template homedir = /tmp/users/home/%D/%U
template shell = /bin/bash

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Latrell Wang 王獻綱
Sent: Wednesday, December 13, 2006 1:56 PM
To: samba@lists.samba.org
Subject: RE: [Samba] Null session problem when mounting share using 
domainuseraccount

In samba 3.0.14a, I noticed one item:
* Disable schannel on the LSA and SAMR pipes in winbindd client 1190 code to 
deal with Windows 2003 SP1 and Windows 2000 SP4 SR1.

Does the fix related directly to my problem. The detailed debug message of 
smbmount is as follows:
[EMAIL PROTECTED]:~# smbmount //localhost/dd /mnt -o 
username=latrell1,password=1234qwer,debug=9
mount.smbfs started (version 3.0.21c)
added interface ip=172.23.26.67 bcast=172.23.26.255 nmask=255.255.255.0
Opening cache file at /etc/zyxel/samba/gencache.tdb
name localhost#20 found.
Connecting to 127.0.0.1 at port 445
socket option SO_KEEPALIVE = 0
socket option SO_REUSEADDR = 0
socket option SO_BROADCAST = 0
socket option TCP_NODELAY = 1
socket option TCP_KEEPCNT = 9
socket option TCP_KEEPIDLE = 7200
socket option TCP_KEEPINTVL = 75
socket option IPTOS_LOWDELAY = 0
socket option IPTOS_THROUGHPUT = 0
socket option SO_SNDBUF = 50160
socket option SO_RCVBUF = 87378
socket option SO_SNDLOWAT = 1
socket option SO_RCVLOWAT = 1
socket option SO_SNDTIMEO = 0
socket option SO_RCVTIMEO = 0
24240: session request ok
write_socket(4,183)
write_socket(4,183) wrote 183
size=85
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=49153
smb_tid=0
smb_pid=24240
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[ 0]=7 (0x7)
smb_vwv[ 1]=12803 (0x3203)
smb_vwv[ 2]=  256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]=   65 (0x41)
smb_vwv[ 5]=0 (0x0)
smb_vwv[ 6]=  256 (0x100)
smb_vwv[ 7]=45312 (0xB100)
smb_vwv[ 8]=   94 (0x5E)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]=33011 (0x80F3)
smb_vwv[11]=32768 (0x8000)
smb_vwv[12]=17990 (0x4646)
smb_vwv[13]=31267 (0x7A23)
smb_vwv[14]=50974 (0xC71E)
smb_vwv[15]=1 (0x1)
smb_vwv[16]= 2048 (0x800)
smb_bcc=16
size=85
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=49153
smb_tid=0
smb_pid=24240
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[ 0]=7 (0x7)
smb_vwv[ 1]=12803 (0x3203)
smb_vwv[ 2]=  256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]=   65 (0x41)
smb_vwv[ 5]=0 (0x0)
smb_vwv[ 6]=  256 (0x100)
smb_vwv[ 7]=45312 (0xB100)
smb_vwv[ 8]=   94 (0x5E)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]=33011 (0x80F3)
smb_vwv[11]=32768 (0x8000)
smb_vwv[12]=17990 (0x4646)
smb_vwv[13]=31267 (0x7A23)
smb_vwv[14]=50974 (0xC71E)
smb_vwv[15]=1 (0x1)
smb_vwv[16]= 2048 (0x800)
smb_bcc=16
write_socket(4,137)
write_socket(4,137) wrote 137
size=64
smb_com=0x73
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=16385
smb_tid=0
smb_pid=24240
smb_uid=100
smb_mid=2
smt_wct=3
smb_vwv[ 0]=  255 (0xFF)
smb_vwv[ 1]=0 (0x0)
smb_vwv[ 2]=1 (0x1)
smb_bcc=23
24240: session setup ok
write_socket(4,69)
write_socket(4,69) wrote 69
size=35
smb_com=0x75
smb_rcls=1
smb_reh=0
smb_err=5
smb_flg=136
smb_flg2=1
smb_tid=0
smb_pid=24240
smb_uid=100
smb_mid=3
smt_wct=0
smb_bcc=0
24240: tree connect failed: ERRDOS - ERRnoaccess (Access denied.)
SMB connection failed

Latrell.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Latrell Wang 王獻綱
Sent: Tuesday, December 12, 2006 7:12 PM
To: samba@lists.samba.org
Subject: [Samba] Null session problem when mounting share using domain 
useraccount

Hi all:

 

As far as I know, windows 2003 sp1 restricts anonymous access to samr and 
lsarpc. On windows 2003, everyone group does not include anonymous logon, thus 
anonymous enumeration can’t be achieved unless anonymous logon is a member of 
pre-windows 2000 compatible group. I think this is the reason why smbmount 
using domain user account failed. The error message is as follows:

 

26520: tree connect failed: ERRDOS - ERRnoaccess (Access denied.)

SMB connection failed

 

The packets showed that “STATUS_ACCESS_DENIED” in SamrConnect2 request and 
reply. If anonymous logon belongs to pre-windows 2000 compatible group, 
smbmount ran successfully.

 

Will samba work around this issue?

 

Thanks for the replies.

 

Latrell.

-- 
To unsubscribe from this list

[Samba] Null session problem when mounting share using domain user account

2006-12-12 Thread Latrell Wang 王獻綱
Hi all:

 

As far as I know, windows 2003 sp1 restricts anonymous access to samr and 
lsarpc. On windows 2003, everyone group does not include anonymous logon, thus 
anonymous enumeration can’t be achieved unless anonymous logon is a member of 
pre-windows 2000 compatible group. I think this is the reason why smbmount 
using domain user account failed. The error message is as follows:

 

26520: tree connect failed: ERRDOS - ERRnoaccess (Access denied.)

SMB connection failed

 

The packets showed that “STATUS_ACCESS_DENIED” in SamrConnect2 request and 
reply. If anonymous logon belongs to pre-windows 2000 compatible group, 
smbmount ran successfully.

 

Will samba work around this issue?

 

Thanks for the replies.

 

Latrell.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Null session problem when mounting share using domain useraccount

2006-12-12 Thread Latrell Wang 王獻綱
In samba 3.0.14a, I noticed one item:
* Disable schannel on the LSA and SAMR pipes in winbindd client 1190 code to 
deal with Windows 2003 SP1 and Windows 2000 SP4 SR1.

Does the fix related directly to my problem. The detailed debug message of 
smbmount is as follows:
[EMAIL PROTECTED]:~# smbmount //localhost/dd /mnt -o 
username=latrell1,password=1234qwer,debug=9
mount.smbfs started (version 3.0.21c)
added interface ip=172.23.26.67 bcast=172.23.26.255 nmask=255.255.255.0
Opening cache file at /etc/zyxel/samba/gencache.tdb
name localhost#20 found.
Connecting to 127.0.0.1 at port 445
socket option SO_KEEPALIVE = 0
socket option SO_REUSEADDR = 0
socket option SO_BROADCAST = 0
socket option TCP_NODELAY = 1
socket option TCP_KEEPCNT = 9
socket option TCP_KEEPIDLE = 7200
socket option TCP_KEEPINTVL = 75
socket option IPTOS_LOWDELAY = 0
socket option IPTOS_THROUGHPUT = 0
socket option SO_SNDBUF = 50160
socket option SO_RCVBUF = 87378
socket option SO_SNDLOWAT = 1
socket option SO_RCVLOWAT = 1
socket option SO_SNDTIMEO = 0
socket option SO_RCVTIMEO = 0
24240: session request ok
write_socket(4,183)
write_socket(4,183) wrote 183
size=85
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=49153
smb_tid=0
smb_pid=24240
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[ 0]=7 (0x7)
smb_vwv[ 1]=12803 (0x3203)
smb_vwv[ 2]=  256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]=   65 (0x41)
smb_vwv[ 5]=0 (0x0)
smb_vwv[ 6]=  256 (0x100)
smb_vwv[ 7]=45312 (0xB100)
smb_vwv[ 8]=   94 (0x5E)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]=33011 (0x80F3)
smb_vwv[11]=32768 (0x8000)
smb_vwv[12]=17990 (0x4646)
smb_vwv[13]=31267 (0x7A23)
smb_vwv[14]=50974 (0xC71E)
smb_vwv[15]=1 (0x1)
smb_vwv[16]= 2048 (0x800)
smb_bcc=16
size=85
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=49153
smb_tid=0
smb_pid=24240
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[ 0]=7 (0x7)
smb_vwv[ 1]=12803 (0x3203)
smb_vwv[ 2]=  256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]=   65 (0x41)
smb_vwv[ 5]=0 (0x0)
smb_vwv[ 6]=  256 (0x100)
smb_vwv[ 7]=45312 (0xB100)
smb_vwv[ 8]=   94 (0x5E)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]=33011 (0x80F3)
smb_vwv[11]=32768 (0x8000)
smb_vwv[12]=17990 (0x4646)
smb_vwv[13]=31267 (0x7A23)
smb_vwv[14]=50974 (0xC71E)
smb_vwv[15]=1 (0x1)
smb_vwv[16]= 2048 (0x800)
smb_bcc=16
write_socket(4,137)
write_socket(4,137) wrote 137
size=64
smb_com=0x73
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=16385
smb_tid=0
smb_pid=24240
smb_uid=100
smb_mid=2
smt_wct=3
smb_vwv[ 0]=  255 (0xFF)
smb_vwv[ 1]=0 (0x0)
smb_vwv[ 2]=1 (0x1)
smb_bcc=23
24240: session setup ok
write_socket(4,69)
write_socket(4,69) wrote 69
size=35
smb_com=0x75
smb_rcls=1
smb_reh=0
smb_err=5
smb_flg=136
smb_flg2=1
smb_tid=0
smb_pid=24240
smb_uid=100
smb_mid=3
smt_wct=0
smb_bcc=0
24240: tree connect failed: ERRDOS - ERRnoaccess (Access denied.)
SMB connection failed

Latrell.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Latrell Wang 王獻綱
Sent: Tuesday, December 12, 2006 7:12 PM
To: samba@lists.samba.org
Subject: [Samba] Null session problem when mounting share using domain 
useraccount

Hi all:

 

As far as I know, windows 2003 sp1 restricts anonymous access to samr and 
lsarpc. On windows 2003, everyone group does not include anonymous logon, thus 
anonymous enumeration can’t be achieved unless anonymous logon is a member of 
pre-windows 2000 compatible group. I think this is the reason why smbmount 
using domain user account failed. The error message is as follows:

 

26520: tree connect failed: ERRDOS - ERRnoaccess (Access denied.)

SMB connection failed

 

The packets showed that “STATUS_ACCESS_DENIED” in SamrConnect2 request and 
reply. If anonymous logon belongs to pre-windows 2000 compatible group, 
smbmount ran successfully.

 

Will samba work around this issue?

 

Thanks for the replies.

 

Latrell.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Anonymous access in windows 2003 sp1

2006-12-08 Thread Latrell Wang 王獻綱
Hi all

After I joined domain, I want to mount a share using domain account, the 
following is my command:
smbmount //172.23.26.83/share1 /tmp/sp1/ -o 
username=administrator,password=password
What I got was :
3231: tree connect failed: ERRDOS - ERRnoaccess (Access denied.)
SMB connection failed

The detail debug messages are as follows:
mount.smbfs started (version 3.0.23d)
added interface ip=172.23.26.83 bcast=172.23.26.255 nmask=255.255.255.0
Connecting to 172.23.26.83 at port 445
socket option SO_KEEPALIVE = 0
socket option SO_REUSEADDR = 0
socket option SO_BROADCAST = 0
socket option TCP_NODELAY = 1
socket option TCP_KEEPCNT = 9
socket option TCP_KEEPIDLE = 7200
socket option TCP_KEEPINTVL = 75
socket option IPTOS_LOWDELAY = 0
socket option IPTOS_THROUGHPUT = 0
socket option SO_SNDBUF = 50160
socket option SO_RCVBUF = 87378
socket option SO_SNDLOWAT = 1
socket option SO_RCVLOWAT = 1
socket option SO_SNDTIMEO = 0
socket option SO_RCVTIMEO = 0
3231: session request ok
write_socket(3,183)
write_socket(3,183) wrote 183
got smb length of 85
size=85
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=49153
smb_tid=0
smb_pid=3231
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[ 0]=7 (0x7)
smb_vwv[ 1]=12803 (0x3203)
smb_vwv[ 2]=  256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]=   65 (0x41)
smb_vwv[ 5]=0 (0x0)
smb_vwv[ 6]=  256 (0x100)
smb_vwv[ 7]=40960 (0xA000)
smb_vwv[ 8]=   12 (0xC)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]=33011 (0x80F3)
smb_vwv[11]=0 (0x0)
smb_vwv[12]=53722 (0xD1DA)
smb_vwv[13]=42882 (0xA782)
smb_vwv[14]=50970 (0xC71A)
smb_vwv[15]= 8193 (0x2001)
smb_vwv[16]= 2302 (0x8FE)
smb_bcc=16
[000] 69 A0 DB 89 48 E0 65 C6  4E 00 41 00 53 00 00 00  i...H.e. N.A.S...
size=85
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=49153
smb_tid=0
smb_pid=3231
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[ 0]=7 (0x7)
smb_vwv[ 1]=12803 (0x3203)
smb_vwv[ 2]=  256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]=   65 (0x41)
smb_vwv[ 5]=0 (0x0)
smb_vwv[ 6]=  256 (0x100)
smb_vwv[ 7]=40960 (0xA000)
smb_vwv[ 8]=   12 (0xC)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]=33011 (0x80F3)
smb_vwv[11]=0 (0x0)
smb_vwv[12]=53722 (0xD1DA)
smb_vwv[13]=42882 (0xA782)
smb_vwv[14]=50970 (0xC71A)
smb_vwv[15]= 8193 (0x2001)
smb_vwv[16]= 2302 (0x8FE)
smb_bcc=16
[000] 69 A0 DB 89 48 E0 65 C6  4E 00 41 00 53 00 00 00  i...H.e. N.A.S...
write_socket(3,142)
write_socket(3,142) wrote 142
got smb length of 64
size=64
smb_com=0x73
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=16385
smb_tid=0
smb_pid=3231
smb_uid=100
smb_mid=2
smt_wct=3
smb_vwv[ 0]=  255 (0xFF)
smb_vwv[ 1]=0 (0x0)
smb_vwv[ 2]=1 (0x1)
smb_bcc=23
[000] 55 6E 69 78 00 53 61 6D  62 61 20 33 2E 30 2E 32  Unix.Sam ba 3.0.2
[010] 31 63 00 4E 41 53 00  1c.NAS.
3231: session setup ok
write_socket(3,76)
write_socket(3,76) wrote 76
got smb length of 35
size=35
smb_com=0x75
smb_rcls=1
smb_reh=0
smb_err=5
smb_flg=136
smb_flg2=1
smb_tid=0
smb_pid=3231
smb_uid=100
smb_mid=3
smt_wct=0
smb_bcc=0
3231: tree connect failed: ERRDOS - ERRnoaccess (Access denied.)
SMB connection failed

The cifs mount also can't work:
mount error 13 = Permission denied
Refer to the mount.cifs(8) manual page (e.g.man mount.cifs)

Could someone help me? Is there's a solution other than add anonymous logon to 
per-window2 2000 security group (because security issue.)?
Thanks a lot,

Latrell.



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Latrell Wang 王獻綱
Sent: Wednesday, December 06, 2006 2:51 PM
To: samba@lists.samba.org
Subject: [Samba] Anonymous access in windows 2003 sp1

Hi all:

 

As far as I know, win2k3 sp1 disable anonymous access by default. It will 
remove user “anonymous logon” from pre-windows 2000 compatible access group.

Under such circumstance, smbmount will not success because anonymous access 
will be blocked. One way to solve the problem is to re-add anonymous logon to 
pre-windows 2000 compatible access group. However, it seems to be a security 
hole. Does anyone encounter the same problem? How do you get around the problem?

My samba version is 3.0.21c. 

 

Thanks for any replies,

Latrell

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] libdm.so.0 needed by smbd

2006-12-07 Thread Latrell Wang 王獻綱
Hi all:

 

I upgraded samba to 3.0.23d, and the compilation was successfully. However, 
when I want to start samba, it shows it can’t find libdm.so.6.

Is it related to openldap? How can I get the library? 

 

Thanks,

Latrell

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Can connect to shares via IP but not hostname

2006-12-07 Thread Latrell Wang 王獻綱
I've ever encountered the same problem but in domain mode.
My domain is win2k3 SBS, after sp1, the anonymous access will be closed.
At this time, using hostname can't map the network drive, but IP can.
I open the anonymous on domain side, and everything works fine.

I also have a post on the mailing list as follows:

Hi all:

 As far as I know, win2k3 sp1 disable anonymous access by default. It will 
remove user “anonymous logon” from pre-windows 2000 compatible access group.

Under such circumstance, smbmount will not success because anonymous access 
will be blocked. One way to solve the problem is to re-add anonymous logon to 
pre-windows 2000 compatible access group. However, it seems to be a security 
hole. Does anyone encounter the same problem? How do you get around the problem?

My samba version is 3.0.21c. 
=
 
Can someone give me some suggestions?
Thanks in advance,

Latrell.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
Sent: Friday, December 08, 2006 2:11 AM
To: John Drescher
Cc: samba@lists.samba.org
Subject: Re: [Samba] Can connect to shares via IP but not hostname

John Drescher wrote:
 On 12/7/06, Scott [EMAIL PROTECTED] wrote:
 Last night I upgraded my FC5 to samba-3.0.23c from 3.0.21b.  As a result I
 can no longer browse shares on the samba server via \\hostname\share\.  I 
 can, however, access everything as usual via \\10.0.0.2\share\.
 
 Nothing else in my config has changed.  The hostname resolves from all 
 machines on the domain correctly so it's doesn't appear to be a name
 resolution issue.  I can see the root shares on the samba server, but when
 I try to browse them I get the error:
 
 \\hostname\share refers to a location that is unavailable.  It could be on
 a hard drive...
 
 I reverted back to 3.0.21b and the error persists.  All clients are having
 the same identical problem.  TIA.
 
 Is nmbd running on the server?

Yes.  There are no unusual errors in smbd.log or nmbd.log, either.  I can see 
all the network shares, including those on the samba server, via smbtree.

-Scott
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Anonymous access in windows 2003 sp1

2006-12-05 Thread Latrell Wang 王獻綱
Hi all:

 

As far as I know, win2k3 sp1 disable anonymous access by default. It will 
remove user “anonymous logon” from pre-windows 2000 compatible access group.

Under such circumstance, smbmount will not success because anonymous access 
will be blocked. One way to solve the problem is to re-add anonymous logon to 
pre-windows 2000 compatible access group. However, it seems to be a security 
hole. Does anyone encounter the same problem? How do you get around the problem?

My samba version is 3.0.21c. 

 

Thanks for any replies,

Latrell

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problem with tdb files.

2006-07-20 Thread Latrell

Hi All:

I have problems with maintain tdb files. From samba doc, these files are 
classified into persistent and temporary. From the man page of smbd, these 
file are classified into persistent and not. However, there are some files 
no need to backup but need to be persistent (netsamlogon_cache.tdb), and 
some files need to backup but not need to be persisten (registry.tdb). There 
are also some .dat files also mentioned in samba FAQ that need to be deleted 
under particular case (change ip address).


How can I maintain these tdb/dat files? Which file needed to be deleted 
when samba restarts? Which files should be ket and backup regularly?I 
believe some tdb files can't be kept because of size problem. I also noticed 
join domain would have problem if browse.dat and gencache.tdb keep wrong 
data. Please give me some advice.


Thanks in advance,
Latrell.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Nmblookup problem.

2006-07-07 Thread Latrell
Hi All:

When I usign nmblookup to query my domain controller, I got different results:

[EMAIL PROTECTED]:# nmblookup -A ADDomain.com
Looking up status of 169.254.211.91
No reply from 169.254.211.91

[EMAIL PROTECTED]:# nmblookup -A ADDomain.com
Looking up status of 172.23.26.204
WIN-2003  00 - M ACTIVE
WIN   00 - GROUP M ACTIVE
WIN   1c - GROUP M ACTIVE
WIN-2003  20 - M ACTIVE
WIN   1b - M ACTIVE
WIN   1e - GROUP M ACTIVE
WIN   1d - M ACTIVE
..__MSBROWSE__. 01 - GROUP M ACTIVE

MAC Address = 00-0A-E4-09-D9-34

The seond output is what I need. The condition is consistent: one correct, one 
incorrect, etc. The problem happened when my samba server and DC are in 
different subnet.
My samba version is 3.0.21c with kernel 2.4.31. Ad domain is win2003 with sp1.

My global settings are as follows:
dos charset = UTF8
display charset = UTF8
unix charset = UTF8
server string = %h
netbios name = Latrell
wins server = 172.23.26.209
write ok = yes
guest account = smbguest
map to guest = bad user
encrypt passwords = yes
map archive = no
client use spnego = no
auth methods = guest sam_ignoredomain winbind:ntdomain
host msdfs = yes
winbind use default domain = yes

workgroup = ADDomain
security = ads
password server = ADDomain.com *
idmap uid = 10-50
idmap gid = 10-50
winbind cache time = 15
template homedir = /tmp/users/home/%D/%U
template shell = /bin/bash

create mask = 777
directory mask = 777
force create mode = 777
force directory mode = 777

Thanks,
Latrell

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problem with tdb files.

2006-07-06 Thread Latrell
Hi All:

I have problems with maintain tdb files. From samba doc, these files are 
classified into persistent and temporary. From the man page of smbd, these file 
are classified into persistent and not. However, there are some files no need 
to backup but need to be persistent (netsamlogon_cache.tdb), and some files 
need to backup but not need to be persisten (registry.tdb). There are also some 
.dat files also mentioned in samba FAQ that need to be deleted under particular 
case (change ip address).

How can I maintain these tdb/dat files? Which file needed to be deleted when 
samba restarts? Which files should be ket and backup regularly?I believe some 
tdb files can't be kept because of size problem. I also noticed join domain 
would have problem if browse.dat and gencache.tdb keep wrong data. Please give 
me some advice.

Thanks in advance,
Latrell.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbmount and win2003 sp1

2006-06-06 Thread Latrell
It is very likely that smbfs does not do some of the
advanced authentication options that W2k3 SP1 now requires.
Please test the cifs filesystem, smbfs is unsupported for a
while now.

Volker


I tried mount.cifs, and get the following message:

[EMAIL PROTECTED]:# mount -t cifs //localhost/share1 /tmp/testmount/ -o
username=u1,password=u11
mount error 22 = Invalid argument
Refer to the mount.cifs(8) manual page (e.g.man mount.cifs)
Anything wrong with my option?

Thanks,
Latrell

- Original Message - 
From: Volker Lendecke [EMAIL PROTECTED]
To: Latrell [EMAIL PROTECTED]
Cc: samba@lists.samba.org
Sent: Monday, June 05, 2006 8:25 PM
Subject: Re: [Samba] smbmount and win2003 sp1


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbmount and win2003 sp1

2006-06-06 Thread Latrell
I did some more tests.
Local user can cifsmount correctly, but when I joined domain (2003 ad domain
with sp1),  cifsmount will fail.
Then same condition also happened on smbmount.
Why does sp1 cause smbmount and cifsmount fail?

[EMAIL PROTECTED]:~# mount.cifs //localhost/share1 /tmp/testmount/ -o
username=NAS\adu1,password=adu1
mount error 22 = Invalid argument
Refer to the mount.cifs(8) manual page (e.g.man mount.cifs)

I also tried username=adu1, NAS\adu1, still not worked.

Latrell
- Original Message - 
From: Latrell [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: samba@lists.samba.org
Sent: Tuesday, June 06, 2006 7:35 PM
Subject: Re: [Samba] smbmount and win2003 sp1


 It is very likely that smbfs does not do some of the
 advanced authentication options that W2k3 SP1 now requires.
 Please test the cifs filesystem, smbfs is unsupported for a
 while now.

 Volker


 I tried mount.cifs, and get the following message:

 [EMAIL PROTECTED]:# mount -t cifs //localhost/share1 /tmp/testmount/ -o
 username=u1,password=u11
 mount error 22 = Invalid argument
 Refer to the mount.cifs(8) manual page (e.g.man mount.cifs)
 Anything wrong with my option?

 Thanks,
 Latrell

 - Original Message - 
 From: Volker Lendecke [EMAIL PROTECTED]
 To: Latrell [EMAIL PROTECTED]
 Cc: samba@lists.samba.org
 Sent: Monday, June 05, 2006 8:25 PM
 Subject: Re: [Samba] smbmount and win2003 sp1


 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] smbmount and win2003 sp1

2006-06-05 Thread Latrell

Hi All:

I encountered a problem with smbmount and win2003 sp1.
Before I upgrade sp1, everything works fine. But after sp1, smbmount can't work.
The command and error message are as follows:
smbmount //localhost/share1 /tmp/mountest -o username=domainu1,password=password

ERRDOS - ERRnoaccess (Access Denied.)
SMB connection failed

I also checked the release note about the issue, and found a fix on 3.0.14a 
about:
Compatibility issues between Winbind and Windows 2003 SP1 domain controllers 
(*2k3sp1*).

Does it fix my bug? My version is 3.0.21c. Why did I have the problem?

Thanks,
Latrell
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] smbmount and win2003 sp1

2006-06-02 Thread Latrell
Hi All:

I encountered a problem with smbmount and win2003 sp1.
Before I upgrade sp1, everything works fine. But after sp1, smbmount can't work.
The command and error message are as follows:
smbmount //localhost/share1 /tmp/mountest -o username=domainu1,password=password

ERRDOS - ERRnoaccess (Access Denied.)
SMB connection failed

I also checked the release note about the issue, and found a fix on 3.0.14a 
about:
Compatibility issues between Winbind and Windows 2003 SP1 domain controllers 
(*2k3sp1*).

Does it fix my bug? My version is 3.0.21c. Why did I have the problem?

Thanks,
Latrell
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] retrieve domain group member

2006-04-03 Thread Latrell
Hi All:

After joining domain, how can I get the group members of cretain domain group?
can wbinfo or getent achieve this?

thanks,
Latrell
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] About join domain in different subnet.

2006-02-08 Thread Latrell
Hi all:

I have a question about join domain.
If my samba server and domain controller are in different subnet (such as 
192.168.1.x and 192.168.2.x), two conditions happened:
ADS domain
1. if I use domain name, then join fail.
2. if I use IP address of domain controller, join success.
However, in both cases I can't retrieve domain users/groups.
Is it necessary for samba sever and domain controller in the same subnet in 
order to get domain users/list list?
Can NT domain in different subnet?

Thanks in advance.

Latrell.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] About getent passwd.

2005-12-19 Thread Latrell
Hi! All:

After joining domain, I can use getent passwd to retrieve domain users 
information.
My problem is how can we edit the output of getent passwd?
For example, I want to change uid of ntu3 from 16 to 17 after getent 
passwd.
(ntu3:x:16:10:ntu3:/tmp/users/home/WIN2KNT/ntu3:/bin/bash)
In /etc/passwd, I can edit information of local users, what if domain users?
Is there a passwd file in existence?
Thanks for any reply.

Best,
Latrell

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Domain group membership.

2005-12-08 Thread Latrell
Hi! All:

How can i get domain members of a domain group?
I tried getent group, but only get the gid infomation.
There isn't member infomation at the last field as local group is.
Thanks for your help.

Best,
Latrell
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Domain group membership.

2005-12-08 Thread Latrell
Is it possible domain users is the only group that needless to disply since
all users belong to it?
I test another group and can get group membership by getent:

[EMAIL PROTECTED]:~# getent group domain admins
domain admins:x:16:testu6,testu5,administrator

Latrell
- Original Message - 
From: Dennis B. Hopp [EMAIL PROTECTED]
To: samba@lists.samba.org
Sent: Friday, December 09, 2005 9:47 AM
Subject: Re: [Samba] Domain group membership.


 
  Hmm..this is interesting.  It seems that getent may fail if there are
  a large number of users in a domain group.
 
  [EMAIL PROTECTED] ~]# getent group Domain Users
  domain users:x:15000:
 
  All of my domain users are in the Domain Users group...but if I do:
 

 Actually, I just did the same thing on a smaller domain that only had 4
 total users and I didn't get anything back for the Domain Users
 group...hrmph

 --Dennis

 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] unicode support in samba

2005-12-01 Thread Latrell
Hi! All:

I'm working on add unicode support in samba. However, I meet a question as the 
following description, please advise me.
My smb.conf sets:
dos charset = UTF8
display charset = UTF8
unix charset = UTF8

I use smbmount //share /path -o username=user,passwd=1234 to mount a directory 
to a user's home dir.
Original I use ASCII charset, and find traditional chinese not supported, thus 
I change to UTF8, and I can see traditional chinese.
However, when I use CIFS to access the same share, I saw the chinese file name 
can't be decoded.
After search the website, I've tried using with options 
codepage=cp950/utf8,iocharset=cp950/utf8, but nothing changed.
Thanks in advance.

Best,
Latrell
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba