[Samba] Empty secrets.tdb.
Hi all: I have a FTP server combined with samba server. Pam_smbpass.so is used to provide authentication. Everything works fine in the beginning. But after a period of heavy access from FTP, the login will fail. I found the problem is resulted from secrets.tdb. It became an empty file (I use tdbdump to check the content). Pam_smbpass.so rejected the authentication when it can’t check the SID in the secrets.tdb. My samba version is 3.0.25c. Previous version is 3.0.21c, and it did not have the problem. Thanks for all advice, Latrell. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] RE: Failed to join win2000 domain in 3.0.25b
Hi all: I found that if I use “net rpc join” instead of “net ads join” to join a win2000 ad domain, it will succeed in the same setting. I don’t know why this can work. Could somebody explain it? Are there any changes for joining win2000 ad domain? Thanks, Latrell. From: Latrell Wang 王獻綱 Sent: Thursday, August 02, 2007 4:27 PM To: samba@lists.samba.org Subject: RE: Failed to join win2000 domain in 3.0.25b I wonder if my kerberos version could cause problems. My version is 1.6.2. Please give me some help. Thanks, Latrell. Hi all: I’m trying to join a win2000 ad domain but failed. I can see my samba server in computer list of domain controller, but the icon of the samba server is disabled. I also got error message from my samba server: Failed to set password for machine account (NT_STATUS_WRONG_PASSWORD) Failed to join domain: Wrong Password The password should be correct because I can get krb ticket successfully. My samba version is 3.0.25b. Joining win2003 domain is successfully without a problem. I wonder why it makes difference between 2000 and 2003. Previously I used version 3.0.23d, and both 2000 and 2003 can be joined domain successfully. My global session is as the following: [global] dos charset = UTF8 display charset = UTF8 unix charset = UTF8 server string = %h netbios name = smbserver write ok = yes guest account = smbguest map to guest = bad user encrypt passwords = yes map archive = no max log size= 50 dfree command= /usr/local/bin/dfree client use spnego = yes auth methods = guest sam_ignoredomain winbind:ntdomain host msdfs = yes winbind use default domain = yes workgroup = PASW security = ads password server = PASW.COM * realm = PASW.COM winbind enum users = yes winbind enum groups = yes idmap uid = 10-50 idmap gid = 10-50 winbind cache time = 15 template homedir = /tmp/users/home/%D/%U template shell = /bin/bash Please help me out. Thanks in advance, Latrell -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] RE: Failed to join win2000 domain in 3.0.25b
I'm using montavista linux instead of Solaris. I also encountered Logon failure if I turn off the client use spengo. Turn on client use spnego and use net rpc join seems to work perfectly. Latrell -Original Message- From: Alexandr Miasnikov [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 21, 2007 5:18 PM To: Latrell Wang 王獻綱; samba@lists.samba.org Subject: Re: [Samba] RE: Failed to join win2000 domain in 3.0.25b Latrell Wang 王獻綱 пишет: Hi all: I found that if I use “net rpc join” instead of “net ads join” to join a win2000 ad domain, it will succeed in the same setting. I don’t know why this can work. Could somebody explain it? Are there any changes for joining win2000 ad domain? This is a bug https://bugzilla.samba.org/show_bug.cgi?id=4863 if You are using Solaris. -- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
FW: [Samba] Can't browse shares after shutdown domain controller.
From: Latrell Wang 王獻綱 Sent: Tuesday, August 07, 2007 12:34 PM To: 'John Drescher' Subject: RE: [Samba] Can't browse shares after shutdown domain controller. I use security = ads because win2000 is an ad domain. Does it make difference? Thanks, Latrell. From: John Drescher [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 07, 2007 12:11 PM To: Latrell Wang 王獻綱 Cc: samba@lists.samba.org Subject: Re: [Samba] Can't browse shares after shutdown domain controller. On 8/6/07, Latrell Wang 王獻綱 [EMAIL PROTECTED] wrote: Hi all: I joined my samba server to a win2000 domain controller. I found something interesting, if I shutdown the domain controller, I can't connect to my samba server through windows CIFS (\\IP file:///\\IP ). However, using smbclient can still browsing shares without a problem. Is it a normal situation?? Do you have security = domain in your samba.conf? John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Can't browse shares after shutdown domain controller.
Hi all: I joined my samba server to a win2000 domain controller. I found something interesting, if I shutdown the domain controller, I can’t connect to my samba server through windows CIFS (\\IP file:///\\IP ). However, using smbclient can still browsing shares without a problem. Is it a normal situation?? Thanks in advance, Latrell. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] vista: error accessing profile, xp works (solved)
Hi, I have some problems with DFS, too. I create a share (say, VistaShare) on Vista client, and have a DFS root share (say, SambaShare) with the VistaShare. I also set appropriate permission for the share. From windows XP, 2003 server, I can access the share without a problem. But when I use the Vista client, I get permission deny message. I set host msdfs = yes in global session, and msdfs root = yes in SambaShare. Are the two problems related? Thanks, Latrell. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rainer Traut Sent: Wednesday, February 28, 2007 6:39 PM To: [EMAIL PROTECTED] Cc: samba@lists.samba.org Subject: Re: [Samba] vista: error accessing profile, xp works (solved) Hi, as I said I'm using your sernet vista version. msdfs root = no on the profile share is not enough, profile cannot be accessed. host msdfs = no in the global section and everything works again. Rainer Volker Lendecke schrieb: On Tue, Feb 27, 2007 at 03:23:48PM +0100, Rainer Traut wrote: Solved: host msdfs = no is needed. Really? msdfs root = no on the profile share is not enough? I'm asking because I've changed the msdfs root default to no, and if Vista really barfs at host msdfs = yes then we might have to reconsider Volker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] DFS in Vista
Yes, I applied the patch for BUG 4356. It still not worked. The DFS tab of the properties from Vista client is correct (\\ip\share). Thanks, Latrell. -Original Message- From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] Sent: Monday, February 12, 2007 9:06 PM To: Latrell Wang 王獻綱 Cc: samba@lists.samba.org Subject: Re: [Samba] DFS in Vista -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Latrell Wang 王獻綱 wrote: Can anyone duplicate my problem? Have you applied DFS patch for 3.0.24 listed at http://www.samba.org/samba/patches/? cheers, jerry = Samba--- http://www.samba.org Centeris --- http://www.centeris.com What man is a man who does not make the world better? --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFF0GY8IR7qMdg1EfYRAtdQAJ9IMKmlR2skx1skMG6iR3uO/FAErwCfW+Yy Y+qk3OrxA+Afy3cMKgeClBo= =zVKn -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] DFS in Vista
Can anyone duplicate my problem? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Latrell Wang 王獻綱 Sent: Thursday, February 08, 2007 10:57 AM To: samba@lists.samba.org Subject: [Samba] DFS in Vista Hi all: I shared a folder in vista. In my samba (3.0.24), I create a DFS link to the vista shared folder. However, I can’t access the share from vista. Other OS such as XP, 2003 can access without a problem. I use two way to connect the share in vista: 1. map network drive: I got “network access is denied” 2. directly type \\ip\share file:\\ip\share in explorer, I got \\IP\share\DFS is not accessible. You might not have the permission to use the network resource. Network access is denied. Is there anything wrong compatible with vista? Thanks, Latrell. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Unicode support--case sensitive in share name
It seems to be the problem with upper.dat and lower.dat. I used strace and found I missed the two files. After copy the two files, the transformation is OK. Thanks, Latrell. -Original Message- From: Don McCall [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 06, 2007 9:25 PM To: Latrell Wang 王獻綱 Subject: Re: [Samba] Unicode support--case sensitive in share name Hi, The only time I have seen this is on filenames with german (or portugese, actually) characters. And it only happened if the client and server were sending ascii, instead of unicode, like the older win95/98 clients will do. Check the version of you samba server, and what client you are using to access the share - unless they negotiate unicode over the wire, I would expect this problem. - Original Message From: Latrell Wang 王獻綱 [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Tuesday, February 6, 2007 6:04:48 AM Subject: [Samba] Unicode support--case sensitive in share name Hi all: I create one share named grôzer but the share can’t be accessed.I looked into the log, and find the share name will be transformed to upper case and then lower case. The ASCII can be transformed in between successfully, but German can’t. It leaded to access failed. I also tried the upper case share grÔzer, and it works successfully. It seems the lower case can’t be transformed back from upper case. The log is as follows: [2007/02/06 18:59:46, 5] lib/username.c:Get_Pwnam_internals(234) Trying _Get_Pwnam(), username as lowercase is grÔzer [2007/02/06 18:59:46, 5] lib/username.c:Get_Pwnam_internals(252) Trying _Get_Pwnam(), username as uppercase is GRÔZER [2007/02/06 18:59:46, 5] lib/username.c:Get_Pwnam_internals(261) Checking combinations of 0 uppercase letters in grÔzer [2007/02/06 18:59:46, 5] lib/username.c:Get_Pwnam_internals(267) Get_Pwnam_internals didn't find user [grÔzer]! [2007/02/06 18:59:46, 3] smbd/service.c:find_service(151) checking for home directory grÔzer gave (NULL) [2007/02/06 18:59:46, 3] smbd/service.c:find_service(208) find_service() failed to find service grÔzer [2007/02/06 18:59:46, 0] smbd/service.c:make_connection(851) latrellpc (172.23.26.17) couldn't find service grÔzer [2007/02/06 18:59:46, 3] smbd/error.c:error_packet(146) error packet at smbd/reply.c(672) cmd=117 (SMBtconX) NT_STATUS_BAD_NETWORK_NAME Thanks, Latrell. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba It's here! Your new message! Get new email alerts with the free Yahoo! Toolbar. http://tools.search.yahoo.com/toolbar/features/mail/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] DFS in Vista
Hi all: I shared a folder in vista. In my samba (3.0.24), I create a DFS link to the vista shared folder. However, I can’t access the share from vista. Other OS such as XP, 2003 can access without a problem. I use two way to connect the share: 1. map network drive: I got “network access is denied” 2. directly type \\ip\share file:///\\ip\share in explorer, I got \\IP\share\DFS is not accessible. You might not have the permission to use the network resource. Network access is denied. file:///\\IP\share\DFS%20is%20not%20accessible.%20You%20might%20not%20have%20the%20permission%20to%20use%20the%20network%20resource.%20Network%20access%20is%20denied. Is there anything wrong compatible with vista? Thanks, Latrell. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Unicode support--case sensitive in share name
Hi all: I create one share named grôzer but the share can’t be accessed.I looked into the log, and find the share name will be transformed to upper case and then lower case. The ASCII can be transformed in between successfully, but German can’t. It leaded to access failed. I also tried the upper case share grÔzer, and it works successfully. It seems the lower case can’t be transformed back from upper case. The log is as follows: [2007/02/06 18:59:46, 5] lib/username.c:Get_Pwnam_internals(234) Trying _Get_Pwnam(), username as lowercase is grÔzer [2007/02/06 18:59:46, 5] lib/username.c:Get_Pwnam_internals(252) Trying _Get_Pwnam(), username as uppercase is GRÔZER [2007/02/06 18:59:46, 5] lib/username.c:Get_Pwnam_internals(261) Checking combinations of 0 uppercase letters in grÔzer [2007/02/06 18:59:46, 5] lib/username.c:Get_Pwnam_internals(267) Get_Pwnam_internals didn't find user [grÔzer]! [2007/02/06 18:59:46, 3] smbd/service.c:find_service(151) checking for home directory grÔzer gave (NULL) [2007/02/06 18:59:46, 3] smbd/service.c:find_service(208) find_service() failed to find service grÔzer [2007/02/06 18:59:46, 0] smbd/service.c:make_connection(851) latrellpc (172.23.26.17) couldn't find service grÔzer [2007/02/06 18:59:46, 3] smbd/error.c:error_packet(146) error packet at smbd/reply.c(672) cmd=117 (SMBtconX) NT_STATUS_BAD_NETWORK_NAME Thanks, Latrell. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] net ads info can't find the ldap server.
I looked into the source code, and have some observations: 1. I don't wrote the realm in my smb.conf, because I get the realm form net ads info. Once I set realm in the smb.conf, net ads info worked. Does it mean the realm is needed in smb.conf? In libads\Ldap.c, the ads_try connect() do not have the realm value (ads-server.realm). Is there anything wrong in my environment? Or the realm must be in smb.conf? 2. When I try to join domain, using net ads join -Uadministrator%password, I got the following message: Using short domain name -- NAS Failed to set servicePrincipalNames. Please ensure that the DNS domain of this server matches the AD domain, Or rejoin with using Domain Admin credentials. Disabled account for 'NSAF933' in realm 'NAS.LOCAL' I found the problem is in util\net_ads.c. The function net_set_machine_spn() do Line:1001 status = ads_gen_mod(ads_s, new_dn, mods). It returns 20 and let the ADS_ERROR_OK() check fail. Mark the line join domain will be successfully. Please give me some advise. Thanks, Latrell -Original Message- From: Latrell Wang 王獻綱 Sent: Wednesday, January 24, 2007 9:26 AM To: 'Gerald (Jerry) Carter' Cc: samba@lists.samba.org Subject: RE: [Samba] net ads info can't find the ldap server. Hi Jerry: I've sent you yesterday, but it seems something wrong. I send it again. Thanks, Latrell. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gerald (Jerry) Carter Sent: Monday, January 22, 2007 10:08 PM To: Latrell Wang 王獻綱 Cc: samba@lists.samba.org Subject: Re: [Samba] net ads info can't find the ldap server. -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Latrell Wang 王獻綱 wrote: Failed to parse cldap reply Can you send me a raw sniff from Wireshark? And a level 10 debug log from 'net ads info'? cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFtMUtIR7qMdg1EfYRAuqlAKCrMRHnPTF0lkJWzFqV7ASApjMyNgCeP4A+ dsmGJx76nEC30nf7qX64tko= =BHrj -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] net ads info can't find the ldap server.
Hi Jerry: I've sent you yesterday, but it seems something wrong. I send it again. Thanks, Latrell. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gerald (Jerry) Carter Sent: Monday, January 22, 2007 10:08 PM To: Latrell Wang 王獻綱 Cc: samba@lists.samba.org Subject: Re: [Samba] net ads info can't find the ldap server. -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Latrell Wang 王獻綱 wrote: Failed to parse cldap reply Can you send me a raw sniff from Wireshark? And a level 10 debug log from 'net ads info'? cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFtMUtIR7qMdg1EfYRAuqlAKCrMRHnPTF0lkJWzFqV7ASApjMyNgCeP4A+ dsmGJx76nEC30nf7qX64tko= =BHrj -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] net ads info can't find the ldap server.
Hi all: After I upgraded to samba 3.0.23d, I can’t use net ads info to retrieve DC information. In my previous version (3.0.21c), I can use net ads info and get the information: LDAP server: 172.23.26.204 LDAP server name: nas-2003 Realm: NAS.LOCAL Bind Path: dc=NAS,dc=LOCAL LDAP port: 389 Server time: Mon, 22 Jan 2007 09:51:02 GMT KDC server: 172.23.26.204 Server time offset: -60 After upgrade to 3.0.23d: Didn't find the ldap server! The detailed information is as follows: It seem there’s some problem with protocol negotiation. My openldap version is 2.1.22. I also tried 2.3.32, but also fail. Could someone help me out? Thanks, Latrell. [2007/01/22 18:00:24, 3] param/loadparm.c:lp_load(4945) lp_load: refreshing parameters [2007/01/22 18:00:24, 3] param/loadparm.c:init_globals(1410) Initialising global parameters [2007/01/22 18:00:24, 3] param/params.c:pm_process(572) params.c:pm_process() - Processing configuration file /etc/samba/smb.conf [2007/01/22 18:00:24, 3] param/loadparm.c:do_section(3687) Processing section [global] [2007/01/22 18:00:24, 3] lib/module.c:do_smb_load_module(49) Error loading module '/usr/lib/charset/ANSI_X3.4-1968.so': /usr/lib/charset/ANSI_X3.4-1968.so: cannot open shared object file: No such file or directory [2007/01/22 18:00:24, 2] lib/interface.c:add_interface(81) added interface ip=172.23.26.152 bcast=172.23.26.255 nmask=255.255.255.0 [2007/01/22 18:00:24, 3] libsmb/namequery.c:get_dc_list(1426) get_dc_list: preferred server list: 172.23.26.204, NAS.LOCAL * [2007/01/22 18:00:24, 1] libads/cldap.c:recv_cldap_netlogon(240) Failed to parse cldap reply [2007/01/22 18:00:24, 3] libads/ldap.c:ads_try_connect(136) ads_try_connect: CLDAP request 172.23.26.204 failed. Didn't find the ldap server! [2007/01/22 18:00:24, 2] utils/net.c:main(988) return code = -1 [smb.conf] [global] dos charset = UTF8 display charset = UTF8 unix charset = UTF8 server string = %h netbios name = NSAF933 write ok = yes guest account = smbguest map to guest = bad user encrypt passwords = yes map archive = no client use spnego = no auth methods = guest sam_ignoredomain winbind:ntdomain host msdfs = yes winbind use default domain = yes workgroup = NAS security = ads password server = NAS.LOCAL * idmap uid = 10-50 idmap gid = 10-50 winbind cache time = 15 template homedir = /tmp/users/home/%D/%U template shell = /bin/bash -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Null session problem when mounting share using domainuseraccount
My global session of smb.conf is as follows: [global] dos charset = UTF8 display charset = UTF8 unix charset = UTF8 server schannel=auto netbios name = NSA1129 write ok = yes guest account = smbguest map to guest = bad user encrypt passwords = yes map archive = no client use spnego = no auth methods = guest sam_ignoredomain winbind:ntdomain host msdfs = yes winbind use default domain = yes workgroup = NAS security = ads password server = 172.23.26.204 * realm = NAS.LOCAL idmap uid = 10-50 idmap gid = 10-50 winbind cache time = 15 template homedir = /tmp/users/home/%D/%U template shell = /bin/bash -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Latrell Wang 王獻綱 Sent: Wednesday, December 13, 2006 1:56 PM To: samba@lists.samba.org Subject: RE: [Samba] Null session problem when mounting share using domainuseraccount In samba 3.0.14a, I noticed one item: * Disable schannel on the LSA and SAMR pipes in winbindd client 1190 code to deal with Windows 2003 SP1 and Windows 2000 SP4 SR1. Does the fix related directly to my problem. The detailed debug message of smbmount is as follows: [EMAIL PROTECTED]:~# smbmount //localhost/dd /mnt -o username=latrell1,password=1234qwer,debug=9 mount.smbfs started (version 3.0.21c) added interface ip=172.23.26.67 bcast=172.23.26.255 nmask=255.255.255.0 Opening cache file at /etc/zyxel/samba/gencache.tdb name localhost#20 found. Connecting to 127.0.0.1 at port 445 socket option SO_KEEPALIVE = 0 socket option SO_REUSEADDR = 0 socket option SO_BROADCAST = 0 socket option TCP_NODELAY = 1 socket option TCP_KEEPCNT = 9 socket option TCP_KEEPIDLE = 7200 socket option TCP_KEEPINTVL = 75 socket option IPTOS_LOWDELAY = 0 socket option IPTOS_THROUGHPUT = 0 socket option SO_SNDBUF = 50160 socket option SO_RCVBUF = 87378 socket option SO_SNDLOWAT = 1 socket option SO_RCVLOWAT = 1 socket option SO_SNDTIMEO = 0 socket option SO_RCVTIMEO = 0 24240: session request ok write_socket(4,183) write_socket(4,183) wrote 183 size=85 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=0 smb_pid=24240 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]=7 (0x7) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]=0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=45312 (0xB100) smb_vwv[ 8]= 94 (0x5E) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32768 (0x8000) smb_vwv[12]=17990 (0x4646) smb_vwv[13]=31267 (0x7A23) smb_vwv[14]=50974 (0xC71E) smb_vwv[15]=1 (0x1) smb_vwv[16]= 2048 (0x800) smb_bcc=16 size=85 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=0 smb_pid=24240 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]=7 (0x7) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]=0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=45312 (0xB100) smb_vwv[ 8]= 94 (0x5E) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32768 (0x8000) smb_vwv[12]=17990 (0x4646) smb_vwv[13]=31267 (0x7A23) smb_vwv[14]=50974 (0xC71E) smb_vwv[15]=1 (0x1) smb_vwv[16]= 2048 (0x800) smb_bcc=16 write_socket(4,137) write_socket(4,137) wrote 137 size=64 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=16385 smb_tid=0 smb_pid=24240 smb_uid=100 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=0 (0x0) smb_vwv[ 2]=1 (0x1) smb_bcc=23 24240: session setup ok write_socket(4,69) write_socket(4,69) wrote 69 size=35 smb_com=0x75 smb_rcls=1 smb_reh=0 smb_err=5 smb_flg=136 smb_flg2=1 smb_tid=0 smb_pid=24240 smb_uid=100 smb_mid=3 smt_wct=0 smb_bcc=0 24240: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection failed Latrell. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Latrell Wang 王獻綱 Sent: Tuesday, December 12, 2006 7:12 PM To: samba@lists.samba.org Subject: [Samba] Null session problem when mounting share using domain useraccount Hi all: As far as I know, windows 2003 sp1 restricts anonymous access to samr and lsarpc. On windows 2003, everyone group does not include anonymous logon, thus anonymous enumeration can’t be achieved unless anonymous logon is a member of pre-windows 2000 compatible group. I think this is the reason why smbmount using domain user account failed. The error message is as follows: 26520: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection failed The packets showed that “STATUS_ACCESS_DENIED” in SamrConnect2 request and reply. If anonymous logon belongs to pre-windows 2000 compatible group, smbmount ran successfully. Will samba work around this issue? Thanks for the replies. Latrell. -- To unsubscribe from this list
[Samba] Null session problem when mounting share using domain user account
Hi all: As far as I know, windows 2003 sp1 restricts anonymous access to samr and lsarpc. On windows 2003, everyone group does not include anonymous logon, thus anonymous enumeration can’t be achieved unless anonymous logon is a member of pre-windows 2000 compatible group. I think this is the reason why smbmount using domain user account failed. The error message is as follows: 26520: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection failed The packets showed that “STATUS_ACCESS_DENIED” in SamrConnect2 request and reply. If anonymous logon belongs to pre-windows 2000 compatible group, smbmount ran successfully. Will samba work around this issue? Thanks for the replies. Latrell. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Null session problem when mounting share using domain useraccount
In samba 3.0.14a, I noticed one item: * Disable schannel on the LSA and SAMR pipes in winbindd client 1190 code to deal with Windows 2003 SP1 and Windows 2000 SP4 SR1. Does the fix related directly to my problem. The detailed debug message of smbmount is as follows: [EMAIL PROTECTED]:~# smbmount //localhost/dd /mnt -o username=latrell1,password=1234qwer,debug=9 mount.smbfs started (version 3.0.21c) added interface ip=172.23.26.67 bcast=172.23.26.255 nmask=255.255.255.0 Opening cache file at /etc/zyxel/samba/gencache.tdb name localhost#20 found. Connecting to 127.0.0.1 at port 445 socket option SO_KEEPALIVE = 0 socket option SO_REUSEADDR = 0 socket option SO_BROADCAST = 0 socket option TCP_NODELAY = 1 socket option TCP_KEEPCNT = 9 socket option TCP_KEEPIDLE = 7200 socket option TCP_KEEPINTVL = 75 socket option IPTOS_LOWDELAY = 0 socket option IPTOS_THROUGHPUT = 0 socket option SO_SNDBUF = 50160 socket option SO_RCVBUF = 87378 socket option SO_SNDLOWAT = 1 socket option SO_RCVLOWAT = 1 socket option SO_SNDTIMEO = 0 socket option SO_RCVTIMEO = 0 24240: session request ok write_socket(4,183) write_socket(4,183) wrote 183 size=85 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=0 smb_pid=24240 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]=7 (0x7) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]=0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=45312 (0xB100) smb_vwv[ 8]= 94 (0x5E) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32768 (0x8000) smb_vwv[12]=17990 (0x4646) smb_vwv[13]=31267 (0x7A23) smb_vwv[14]=50974 (0xC71E) smb_vwv[15]=1 (0x1) smb_vwv[16]= 2048 (0x800) smb_bcc=16 size=85 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=0 smb_pid=24240 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]=7 (0x7) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]=0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=45312 (0xB100) smb_vwv[ 8]= 94 (0x5E) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32768 (0x8000) smb_vwv[12]=17990 (0x4646) smb_vwv[13]=31267 (0x7A23) smb_vwv[14]=50974 (0xC71E) smb_vwv[15]=1 (0x1) smb_vwv[16]= 2048 (0x800) smb_bcc=16 write_socket(4,137) write_socket(4,137) wrote 137 size=64 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=16385 smb_tid=0 smb_pid=24240 smb_uid=100 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=0 (0x0) smb_vwv[ 2]=1 (0x1) smb_bcc=23 24240: session setup ok write_socket(4,69) write_socket(4,69) wrote 69 size=35 smb_com=0x75 smb_rcls=1 smb_reh=0 smb_err=5 smb_flg=136 smb_flg2=1 smb_tid=0 smb_pid=24240 smb_uid=100 smb_mid=3 smt_wct=0 smb_bcc=0 24240: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection failed Latrell. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Latrell Wang 王獻綱 Sent: Tuesday, December 12, 2006 7:12 PM To: samba@lists.samba.org Subject: [Samba] Null session problem when mounting share using domain useraccount Hi all: As far as I know, windows 2003 sp1 restricts anonymous access to samr and lsarpc. On windows 2003, everyone group does not include anonymous logon, thus anonymous enumeration can’t be achieved unless anonymous logon is a member of pre-windows 2000 compatible group. I think this is the reason why smbmount using domain user account failed. The error message is as follows: 26520: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection failed The packets showed that “STATUS_ACCESS_DENIED” in SamrConnect2 request and reply. If anonymous logon belongs to pre-windows 2000 compatible group, smbmount ran successfully. Will samba work around this issue? Thanks for the replies. Latrell. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Anonymous access in windows 2003 sp1
Hi all After I joined domain, I want to mount a share using domain account, the following is my command: smbmount //172.23.26.83/share1 /tmp/sp1/ -o username=administrator,password=password What I got was : 3231: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection failed The detail debug messages are as follows: mount.smbfs started (version 3.0.23d) added interface ip=172.23.26.83 bcast=172.23.26.255 nmask=255.255.255.0 Connecting to 172.23.26.83 at port 445 socket option SO_KEEPALIVE = 0 socket option SO_REUSEADDR = 0 socket option SO_BROADCAST = 0 socket option TCP_NODELAY = 1 socket option TCP_KEEPCNT = 9 socket option TCP_KEEPIDLE = 7200 socket option TCP_KEEPINTVL = 75 socket option IPTOS_LOWDELAY = 0 socket option IPTOS_THROUGHPUT = 0 socket option SO_SNDBUF = 50160 socket option SO_RCVBUF = 87378 socket option SO_SNDLOWAT = 1 socket option SO_RCVLOWAT = 1 socket option SO_SNDTIMEO = 0 socket option SO_RCVTIMEO = 0 3231: session request ok write_socket(3,183) write_socket(3,183) wrote 183 got smb length of 85 size=85 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=0 smb_pid=3231 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]=7 (0x7) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]=0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=40960 (0xA000) smb_vwv[ 8]= 12 (0xC) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=0 (0x0) smb_vwv[12]=53722 (0xD1DA) smb_vwv[13]=42882 (0xA782) smb_vwv[14]=50970 (0xC71A) smb_vwv[15]= 8193 (0x2001) smb_vwv[16]= 2302 (0x8FE) smb_bcc=16 [000] 69 A0 DB 89 48 E0 65 C6 4E 00 41 00 53 00 00 00 i...H.e. N.A.S... size=85 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=0 smb_pid=3231 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]=7 (0x7) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]=0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=40960 (0xA000) smb_vwv[ 8]= 12 (0xC) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=0 (0x0) smb_vwv[12]=53722 (0xD1DA) smb_vwv[13]=42882 (0xA782) smb_vwv[14]=50970 (0xC71A) smb_vwv[15]= 8193 (0x2001) smb_vwv[16]= 2302 (0x8FE) smb_bcc=16 [000] 69 A0 DB 89 48 E0 65 C6 4E 00 41 00 53 00 00 00 i...H.e. N.A.S... write_socket(3,142) write_socket(3,142) wrote 142 got smb length of 64 size=64 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=16385 smb_tid=0 smb_pid=3231 smb_uid=100 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=0 (0x0) smb_vwv[ 2]=1 (0x1) smb_bcc=23 [000] 55 6E 69 78 00 53 61 6D 62 61 20 33 2E 30 2E 32 Unix.Sam ba 3.0.2 [010] 31 63 00 4E 41 53 00 1c.NAS. 3231: session setup ok write_socket(3,76) write_socket(3,76) wrote 76 got smb length of 35 size=35 smb_com=0x75 smb_rcls=1 smb_reh=0 smb_err=5 smb_flg=136 smb_flg2=1 smb_tid=0 smb_pid=3231 smb_uid=100 smb_mid=3 smt_wct=0 smb_bcc=0 3231: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection failed The cifs mount also can't work: mount error 13 = Permission denied Refer to the mount.cifs(8) manual page (e.g.man mount.cifs) Could someone help me? Is there's a solution other than add anonymous logon to per-window2 2000 security group (because security issue.)? Thanks a lot, Latrell. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Latrell Wang 王獻綱 Sent: Wednesday, December 06, 2006 2:51 PM To: samba@lists.samba.org Subject: [Samba] Anonymous access in windows 2003 sp1 Hi all: As far as I know, win2k3 sp1 disable anonymous access by default. It will remove user “anonymous logon” from pre-windows 2000 compatible access group. Under such circumstance, smbmount will not success because anonymous access will be blocked. One way to solve the problem is to re-add anonymous logon to pre-windows 2000 compatible access group. However, it seems to be a security hole. Does anyone encounter the same problem? How do you get around the problem? My samba version is 3.0.21c. Thanks for any replies, Latrell -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] libdm.so.0 needed by smbd
Hi all: I upgraded samba to 3.0.23d, and the compilation was successfully. However, when I want to start samba, it shows it can’t find libdm.so.6. Is it related to openldap? How can I get the library? Thanks, Latrell -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Can connect to shares via IP but not hostname
I've ever encountered the same problem but in domain mode. My domain is win2k3 SBS, after sp1, the anonymous access will be closed. At this time, using hostname can't map the network drive, but IP can. I open the anonymous on domain side, and everything works fine. I also have a post on the mailing list as follows: Hi all: As far as I know, win2k3 sp1 disable anonymous access by default. It will remove user “anonymous logon” from pre-windows 2000 compatible access group. Under such circumstance, smbmount will not success because anonymous access will be blocked. One way to solve the problem is to re-add anonymous logon to pre-windows 2000 compatible access group. However, it seems to be a security hole. Does anyone encounter the same problem? How do you get around the problem? My samba version is 3.0.21c. = Can someone give me some suggestions? Thanks in advance, Latrell. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Sent: Friday, December 08, 2006 2:11 AM To: John Drescher Cc: samba@lists.samba.org Subject: Re: [Samba] Can connect to shares via IP but not hostname John Drescher wrote: On 12/7/06, Scott [EMAIL PROTECTED] wrote: Last night I upgraded my FC5 to samba-3.0.23c from 3.0.21b. As a result I can no longer browse shares on the samba server via \\hostname\share\. I can, however, access everything as usual via \\10.0.0.2\share\. Nothing else in my config has changed. The hostname resolves from all machines on the domain correctly so it's doesn't appear to be a name resolution issue. I can see the root shares on the samba server, but when I try to browse them I get the error: \\hostname\share refers to a location that is unavailable. It could be on a hard drive... I reverted back to 3.0.21b and the error persists. All clients are having the same identical problem. TIA. Is nmbd running on the server? Yes. There are no unusual errors in smbd.log or nmbd.log, either. I can see all the network shares, including those on the samba server, via smbtree. -Scott -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Anonymous access in windows 2003 sp1
Hi all: As far as I know, win2k3 sp1 disable anonymous access by default. It will remove user “anonymous logon” from pre-windows 2000 compatible access group. Under such circumstance, smbmount will not success because anonymous access will be blocked. One way to solve the problem is to re-add anonymous logon to pre-windows 2000 compatible access group. However, it seems to be a security hole. Does anyone encounter the same problem? How do you get around the problem? My samba version is 3.0.21c. Thanks for any replies, Latrell -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problem with tdb files.
Hi All: I have problems with maintain tdb files. From samba doc, these files are classified into persistent and temporary. From the man page of smbd, these file are classified into persistent and not. However, there are some files no need to backup but need to be persistent (netsamlogon_cache.tdb), and some files need to backup but not need to be persisten (registry.tdb). There are also some .dat files also mentioned in samba FAQ that need to be deleted under particular case (change ip address). How can I maintain these tdb/dat files? Which file needed to be deleted when samba restarts? Which files should be ket and backup regularly?I believe some tdb files can't be kept because of size problem. I also noticed join domain would have problem if browse.dat and gencache.tdb keep wrong data. Please give me some advice. Thanks in advance, Latrell. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Nmblookup problem.
Hi All: When I usign nmblookup to query my domain controller, I got different results: [EMAIL PROTECTED]:# nmblookup -A ADDomain.com Looking up status of 169.254.211.91 No reply from 169.254.211.91 [EMAIL PROTECTED]:# nmblookup -A ADDomain.com Looking up status of 172.23.26.204 WIN-2003 00 - M ACTIVE WIN 00 - GROUP M ACTIVE WIN 1c - GROUP M ACTIVE WIN-2003 20 - M ACTIVE WIN 1b - M ACTIVE WIN 1e - GROUP M ACTIVE WIN 1d - M ACTIVE ..__MSBROWSE__. 01 - GROUP M ACTIVE MAC Address = 00-0A-E4-09-D9-34 The seond output is what I need. The condition is consistent: one correct, one incorrect, etc. The problem happened when my samba server and DC are in different subnet. My samba version is 3.0.21c with kernel 2.4.31. Ad domain is win2003 with sp1. My global settings are as follows: dos charset = UTF8 display charset = UTF8 unix charset = UTF8 server string = %h netbios name = Latrell wins server = 172.23.26.209 write ok = yes guest account = smbguest map to guest = bad user encrypt passwords = yes map archive = no client use spnego = no auth methods = guest sam_ignoredomain winbind:ntdomain host msdfs = yes winbind use default domain = yes workgroup = ADDomain security = ads password server = ADDomain.com * idmap uid = 10-50 idmap gid = 10-50 winbind cache time = 15 template homedir = /tmp/users/home/%D/%U template shell = /bin/bash create mask = 777 directory mask = 777 force create mode = 777 force directory mode = 777 Thanks, Latrell -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problem with tdb files.
Hi All: I have problems with maintain tdb files. From samba doc, these files are classified into persistent and temporary. From the man page of smbd, these file are classified into persistent and not. However, there are some files no need to backup but need to be persistent (netsamlogon_cache.tdb), and some files need to backup but not need to be persisten (registry.tdb). There are also some .dat files also mentioned in samba FAQ that need to be deleted under particular case (change ip address). How can I maintain these tdb/dat files? Which file needed to be deleted when samba restarts? Which files should be ket and backup regularly?I believe some tdb files can't be kept because of size problem. I also noticed join domain would have problem if browse.dat and gencache.tdb keep wrong data. Please give me some advice. Thanks in advance, Latrell. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbmount and win2003 sp1
It is very likely that smbfs does not do some of the advanced authentication options that W2k3 SP1 now requires. Please test the cifs filesystem, smbfs is unsupported for a while now. Volker I tried mount.cifs, and get the following message: [EMAIL PROTECTED]:# mount -t cifs //localhost/share1 /tmp/testmount/ -o username=u1,password=u11 mount error 22 = Invalid argument Refer to the mount.cifs(8) manual page (e.g.man mount.cifs) Anything wrong with my option? Thanks, Latrell - Original Message - From: Volker Lendecke [EMAIL PROTECTED] To: Latrell [EMAIL PROTECTED] Cc: samba@lists.samba.org Sent: Monday, June 05, 2006 8:25 PM Subject: Re: [Samba] smbmount and win2003 sp1 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbmount and win2003 sp1
I did some more tests. Local user can cifsmount correctly, but when I joined domain (2003 ad domain with sp1), cifsmount will fail. Then same condition also happened on smbmount. Why does sp1 cause smbmount and cifsmount fail? [EMAIL PROTECTED]:~# mount.cifs //localhost/share1 /tmp/testmount/ -o username=NAS\adu1,password=adu1 mount error 22 = Invalid argument Refer to the mount.cifs(8) manual page (e.g.man mount.cifs) I also tried username=adu1, NAS\adu1, still not worked. Latrell - Original Message - From: Latrell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: samba@lists.samba.org Sent: Tuesday, June 06, 2006 7:35 PM Subject: Re: [Samba] smbmount and win2003 sp1 It is very likely that smbfs does not do some of the advanced authentication options that W2k3 SP1 now requires. Please test the cifs filesystem, smbfs is unsupported for a while now. Volker I tried mount.cifs, and get the following message: [EMAIL PROTECTED]:# mount -t cifs //localhost/share1 /tmp/testmount/ -o username=u1,password=u11 mount error 22 = Invalid argument Refer to the mount.cifs(8) manual page (e.g.man mount.cifs) Anything wrong with my option? Thanks, Latrell - Original Message - From: Volker Lendecke [EMAIL PROTECTED] To: Latrell [EMAIL PROTECTED] Cc: samba@lists.samba.org Sent: Monday, June 05, 2006 8:25 PM Subject: Re: [Samba] smbmount and win2003 sp1 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] smbmount and win2003 sp1
Hi All: I encountered a problem with smbmount and win2003 sp1. Before I upgrade sp1, everything works fine. But after sp1, smbmount can't work. The command and error message are as follows: smbmount //localhost/share1 /tmp/mountest -o username=domainu1,password=password ERRDOS - ERRnoaccess (Access Denied.) SMB connection failed I also checked the release note about the issue, and found a fix on 3.0.14a about: Compatibility issues between Winbind and Windows 2003 SP1 domain controllers (*2k3sp1*). Does it fix my bug? My version is 3.0.21c. Why did I have the problem? Thanks, Latrell -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] smbmount and win2003 sp1
Hi All: I encountered a problem with smbmount and win2003 sp1. Before I upgrade sp1, everything works fine. But after sp1, smbmount can't work. The command and error message are as follows: smbmount //localhost/share1 /tmp/mountest -o username=domainu1,password=password ERRDOS - ERRnoaccess (Access Denied.) SMB connection failed I also checked the release note about the issue, and found a fix on 3.0.14a about: Compatibility issues between Winbind and Windows 2003 SP1 domain controllers (*2k3sp1*). Does it fix my bug? My version is 3.0.21c. Why did I have the problem? Thanks, Latrell -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] retrieve domain group member
Hi All: After joining domain, how can I get the group members of cretain domain group? can wbinfo or getent achieve this? thanks, Latrell -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] About join domain in different subnet.
Hi all: I have a question about join domain. If my samba server and domain controller are in different subnet (such as 192.168.1.x and 192.168.2.x), two conditions happened: ADS domain 1. if I use domain name, then join fail. 2. if I use IP address of domain controller, join success. However, in both cases I can't retrieve domain users/groups. Is it necessary for samba sever and domain controller in the same subnet in order to get domain users/list list? Can NT domain in different subnet? Thanks in advance. Latrell. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] About getent passwd.
Hi! All: After joining domain, I can use getent passwd to retrieve domain users information. My problem is how can we edit the output of getent passwd? For example, I want to change uid of ntu3 from 16 to 17 after getent passwd. (ntu3:x:16:10:ntu3:/tmp/users/home/WIN2KNT/ntu3:/bin/bash) In /etc/passwd, I can edit information of local users, what if domain users? Is there a passwd file in existence? Thanks for any reply. Best, Latrell -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Domain group membership.
Hi! All: How can i get domain members of a domain group? I tried getent group, but only get the gid infomation. There isn't member infomation at the last field as local group is. Thanks for your help. Best, Latrell -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain group membership.
Is it possible domain users is the only group that needless to disply since all users belong to it? I test another group and can get group membership by getent: [EMAIL PROTECTED]:~# getent group domain admins domain admins:x:16:testu6,testu5,administrator Latrell - Original Message - From: Dennis B. Hopp [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Friday, December 09, 2005 9:47 AM Subject: Re: [Samba] Domain group membership. Hmm..this is interesting. It seems that getent may fail if there are a large number of users in a domain group. [EMAIL PROTECTED] ~]# getent group Domain Users domain users:x:15000: All of my domain users are in the Domain Users group...but if I do: Actually, I just did the same thing on a smaller domain that only had 4 total users and I didn't get anything back for the Domain Users group...hrmph --Dennis -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] unicode support in samba
Hi! All: I'm working on add unicode support in samba. However, I meet a question as the following description, please advise me. My smb.conf sets: dos charset = UTF8 display charset = UTF8 unix charset = UTF8 I use smbmount //share /path -o username=user,passwd=1234 to mount a directory to a user's home dir. Original I use ASCII charset, and find traditional chinese not supported, thus I change to UTF8, and I can see traditional chinese. However, when I use CIFS to access the same share, I saw the chinese file name can't be decoded. After search the website, I've tried using with options codepage=cp950/utf8,iocharset=cp950/utf8, but nothing changed. Thanks in advance. Best, Latrell -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba