[Samba] smbldap-groupmod problem
Hi, i'm having a problem with the smbldap-groupmod. I tried to change the users of some groups, i get an error message. The action indeed execute, as the users was removed or added from the group, but an error is throwed in the output: server:~# smbldap-groupmod -x user1 -m user2 testgroup Can't call method "get_value" on an undefined value at /usr/sbin/smbldap-groupmod line 146. The line in question is: if ($group_entry->get_value('sambaSID') eq $user_entry->get_value('sambaPrimaryGroupSID')) { What this means? Tks in advance. -- Leonardo Carneiro -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] samba entry in ldap
Hello everyone, I have a object in the first level of my LDAP database. It's name is sambaDomainName=MyDomain. It's a sambaDomain class object. When i installed LAM this week, it complained that there is no "ou=Domains" entry in my base, and offered to create it. All blue until here. Now, when i try to access the samba3 configs of some user, it says that i do not have a samba3 domain, but i do have. I think that LAM only check the existance of a sambaDomain object inside the ou=Domains entry. My question is: there is any problem in having the sambaDomainName object in the first level of the ldap tree instead of having it inside of the ou=Domains? Is this an LAM issue or something that can affect the operation of my domain in someway? Tks in advance. -- Leonardo Carneiro -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] sambaLogonScript [another] problem
Hi there, i'm having another problem with the samba logon scripts. Like i said in the previous thread, in my smb.conf is defined to users use group defined logon scripts: logon script = %G.bat In the previous thread we also reached the conclusion that when the desired logon script of the users matches the logon script defined in the smb.conf, i can't have it defined in the ldap database, otherwise the script would not load. But it happens that when i create a new user, the sambaLogonScript entry in the ldap database is set to %G.bat, exactly the entry i MUST NOT have to load the script. Since i'm expanding my network and tons of new users are coming, i trying to keep things very organized. I'll need to change this entry for every new user or there is a smarter way to do this? I'm using Samba 3.4.7. Tks in advance and sorry for my poor english. -- Leonardo Carneiro -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] samba group members
Hi everyone, When i add someone to a group using smbldap-usermod -G +(groupname) (username) it does not add the user to the group in the ldap backend: smbldap-groupshow (groupname) | grep memberUid The new member is not there! I have to mannualy add it to the user to the groups again. This is the expected behavior or i'm missing something? -- Leonardo Carneiro -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] sambaLogonScript problem [SOLVED]
On 07/05/2010 08:21 AM, Leonardo Carneiro - Veltrac wrote: On 07/03/2010 12:38 PM, Steve Thompson wrote: On Sat, 3 Jul 2010, Miguel Medalha wrote: One thing I once noticed was that the Samba account attribute "sambaLogonScript" must ONLY be set for a user if it DIFFERS from what is specified in "smb.conf". Otherwise, the script wouldn't run. I found this with the Samba 3.1x family, I don't know if that still applies. I am using both Samba 3.0.33 and 3.5.1, and this does not apply to me for both versions. Every user has sambaLogonScript set to the same value as that which appears in smb.conf, and it does get run (using ldapsam). Steve Hi Steve and Miguel, This is something that i haven't tried yet, and definitely worths a shot. I'll try and comment the results here. Hello everyone, Miguel tip worked for me. In my smb.conf i't specified that users should run "%G.bat", so i removed this attribute ( "smbldap-usermod -E "" user" ) and WORKED. This is something that is documented somewhere and i missed? It's interesting that this works for me in the 3.4.7 version and does not work for Steve in 3.0.33 and 3.5.1 versions. Anyway, tks to everyone who help me to solve this riddle, specially to Miguel Medalha who gave me the killing tip. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] sambaLogonScript problem
On 07/05/2010 08:28 AM, Miguel Medalha wrote: Did you verify that end lines of the scripts are in DOS format (CR+LF)? You can use unix2dos to convert them from Unix format (LF) to DOS format (CR+LF). %G.bat is working correctly for me. Samba PDC over CentOS 5.5 with LDAP back end. Pardon me for being so obvious, but of course your scripts have the exact same name as the groups, don't they? Regards Miguel Hi Miguel, i doubt that this could be the problem, since when i specify the name of the script, it runs OK. And yes, the names of the scripts are ok. Tks again. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] sambaLogonScript problem
On 07/03/2010 12:38 PM, Steve Thompson wrote: On Sat, 3 Jul 2010, Miguel Medalha wrote: One thing I once noticed was that the Samba account attribute "sambaLogonScript" must ONLY be set for a user if it DIFFERS from what is specified in "smb.conf". Otherwise, the script wouldn't run. I found this with the Samba 3.1x family, I don't know if that still applies. I am using both Samba 3.0.33 and 3.5.1, and this does not apply to me for both versions. Every user has sambaLogonScript set to the same value as that which appears in smb.conf, and it does get run (using ldapsam). Steve Hi Steve and Miguel, This is something that i haven't tried yet, and definitely worths a shot. I'll try and comment the results here. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] sambaLogonScript problem
On 07/03/2010 12:22 PM, Chris Smith wrote: On Sat, Jul 3, 2010 at 10:10 AM, Leonardo Carneiro - Veltrac wrote: I'm having trouble in deploying by group sambaLogonScript. My scripts consist only im mapping network folders. I'm using Samba 3.4.7. Is there a way to debug this? The logs does not show anything about the logon scripts. All my users are set with "%G.bat" in the ldap backend, but the vast majority of the users are not running the scripts, or running partially. First debugging step, if you haven't done this already, would be to verify a specifically named logon script, that is one that doesn't use a variable, such as "testlogon.cmd" runs properly. Chris Hi Chris, tks for your answer. I've already done that, and it works. In fact, that's the way is used to work, but i want to keep the things a little more organized, so i'm trying to setup by groups. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] sambaLogonScript problem
On 07/03/2010 11:42 AM, Leonardo Carneiro - Veltrac wrote: On 07/03/2010 11:23 AM, Leonardo Carneiro - Veltrac wrote: On 07/03/2010 11:13 AM, John Drescher wrote: On Sat, Jul 3, 2010 at 10:10 AM, Leonardo Carneiro - Veltrac wrote: Hi everyone, I'm having trouble in deploying by group sambaLogonScript. My scripts consist only im mapping network folders. I'm using Samba 3.4.7. Is there a way to debug this? The logs does not show anything about the logon scripts. All my users are set with "%G.bat" in the ldap backend, but the vast majority of the users are not running the scripts, or running partially. Put a pause command at the end of the login script. That way the window will not close. John Hi John, tks for the idea. Is actually pretty useful. But for the users who are not running the script at all, i wish i could see in the log files what script they are loading, or at least what they are trying to load. Leonardo Carneiro Hmm, it looks like that there are no users running the scripts partially. What happens is some users that have manually mapped their drives. None of the users are really running the scripts. Tried with "%g.bat" instead of "%G.bat", but not worked. Using the name of the group does works like a charm (like "dev.bat"). -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] sambaLogonScript problem
On 07/03/2010 11:23 AM, Leonardo Carneiro - Veltrac wrote: On 07/03/2010 11:13 AM, John Drescher wrote: On Sat, Jul 3, 2010 at 10:10 AM, Leonardo Carneiro - Veltrac wrote: Hi everyone, I'm having trouble in deploying by group sambaLogonScript. My scripts consist only im mapping network folders. I'm using Samba 3.4.7. Is there a way to debug this? The logs does not show anything about the logon scripts. All my users are set with "%G.bat" in the ldap backend, but the vast majority of the users are not running the scripts, or running partially. Put a pause command at the end of the login script. That way the window will not close. John Hi John, tks for the idea. Is actually pretty useful. But for the users who are not running the script at all, i wish i could see in the log files what script they are loading, or at least what they are trying to load. Leonardo Carneiro Hmm, it looks like that there are no users running the scripts partially. What happens is some users that have manually mapped their drives. None of the users are really running the scripts. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] sambaLogonScript problem
On 07/03/2010 11:27 AM, John H Terpstra wrote: On 07/03/2010 09:10 AM, Leonardo Carneiro - Veltrac wrote: Hi everyone, I'm having trouble in deploying by group sambaLogonScript. My scripts consist only im mapping network folders. I'm using Samba 3.4.7. Is there a way to debug this? The logs does not show anything about the logon scripts. All my users are set with "%G.bat" in the ldap backend, but the vast majority of the users are not running the scripts, or running partially. Tks in advance. Leonardo, How are you using a local account on the MS Windows client, or are your users logging into the MS Windows client using the Samba user account? - John T. Hello Another John, The accounts that i'm using are all Samba users accounts. I don't use roaming profiles, but i don't think this matters anything in this scenario, right? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] sambaLogonScript problem
On 07/03/2010 11:13 AM, John Drescher wrote: On Sat, Jul 3, 2010 at 10:10 AM, Leonardo Carneiro - Veltrac wrote: Hi everyone, I'm having trouble in deploying by group sambaLogonScript. My scripts consist only im mapping network folders. I'm using Samba 3.4.7. Is there a way to debug this? The logs does not show anything about the logon scripts. All my users are set with "%G.bat" in the ldap backend, but the vast majority of the users are not running the scripts, or running partially. Put a pause command at the end of the login script. That way the window will not close. John Hi John, tks for the idea. Is actually pretty useful. But for the users who are not running the script at all, i wish i could see in the log files what script they are loading, or at least what they are trying to load. Leonardo Carneiro -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] sambaLogonScript problem
Hi everyone, I'm having trouble in deploying by group sambaLogonScript. My scripts consist only im mapping network folders. I'm using Samba 3.4.7. Is there a way to debug this? The logs does not show anything about the logon scripts. All my users are set with "%G.bat" in the ldap backend, but the vast majority of the users are not running the scripts, or running partially. Tks in advance. -- Leonardo Carneiro -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] file "time-to-live"
Hi Brian, tks for your answer. I'm confident that my goal could be achieved through the use of some third-party tool, like a script or something like it, like you sugested. But what i really need to know is if there is some feature in samba that would allow me to do just that. But tks anyway for your answer. On 06/29/2010 11:49 AM, Brian Cuttler wrote: You could write something to check file create times and delete files older than 36 hours, and run if from cron several times per day. I'd suggest # find, but it doesn't have the granularity you are looking for, you could run it at 00:01 and remove files there where 2 days old. I did somethign similar on a VMS system I was managing, worked well until some enterprising student found (I don't believe they wrote it themselves) a program to reset the time stamp on their files (which your users may start doing as well, perhaps using # touch). At which point I started looking for files with creation dates in the future... many users of the date reset program wheren't quite as smart as they thought they where. On Tue, Jun 29, 2010 at 11:32:52AM -0300, Leonardo Carneiro - Veltrac wrote: Hi everyone, There is a way to make files being automatically deleted some time after they have been created? I know that, with some scripting wizardry i could achieve this, but i wanna know if samba has this kind of feature. I have a temp folder that users insist in use like a backup folder, so i want to files to be deleted 24 hours after they have been created. I cannot just delete everything at midnight because this folder is used in full time, so if a user create a file at 23h59, it would be deleted a minute later. Sorry for my poor english and tks in advance. -- Leonardo Carneiro -- --- Brian R Cuttler brian.cutt...@wadsworth.org Computer Systems Support(v) 518 486-1697 Wadsworth Center(f) 518 473-6384 NYS Department of HealthHelp Desk 518 473-077 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] file "time-to-live"
Hi everyone, There is a way to make files being automatically deleted some time after they have been created? I know that, with some scripting wizardry i could achieve this, but i wanna know if samba has this kind of feature. I have a temp folder that users insist in use like a backup folder, so i want to files to be deleted 24 hours after they have been created. I cannot just delete everything at midnight because this folder is used in full time, so if a user create a file at 23h59, it would be deleted a minute later. Sorry for my poor english and tks in advance. -- Leonardo Carneiro -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] new users, new group, can't access share
Leonardo Carneiro - Veltrac wrote: Leonardo Carneiro - Veltrac wrote: Hi everyone. I have a Samba 3.4.7 (bpo) on a debian box running as PDC with a LDAP backend. i have added a new group, 2 new users and created a new group share for them, but by some unknown reason they cannon access the share. the client is running windows vista. here's what i did: smbldap-groupadd -a office smbldap-useradd -a -m user1 smbldap-useradd -a -m user2 smbldap-passwd user1 smbldap-passwd user2 smbldap-usermod -G +office user1 smbldap-usermod -G +office user2 and added the following entry to my smb.conf: [office] writeable = yes map acl inherit = yes inherit permissions = yes path = /home/grupos/office force directory mode = 02777 force create mode = 0777 create mask = 0777 directory mask = 02777 valid users = @office here is the folder permissions: fileserver:~# ls -ld /home/grupos/office/ drwxrwx--- 2 root office 4096 2010-05-12 09:30 /home/grupos/office/ did i missed something? Tks in advance. I forgot to tell, this particular machine has not joined the domain, but this never has been a problem with other machines so far. Giving full permission to the folder (chmod -R +rwx /home/grupos/office) permit the user to access, but i rather not use like this. There is another way out? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] new users, new group, can't access share
Leonardo Carneiro - Veltrac wrote: Hi everyone. I have a Samba 3.4.7 (bpo) on a debian box running as PDC with a LDAP backend. i have added a new group, 2 new users and created a new group share for them, but by some unknown reason they cannon access the share. the client is running windows vista. here's what i did: smbldap-groupadd -a office smbldap-useradd -a -m user1 smbldap-useradd -a -m user2 smbldap-passwd user1 smbldap-passwd user2 smbldap-usermod -G +office user1 smbldap-usermod -G +office user2 and added the following entry to my smb.conf: [office] writeable = yes map acl inherit = yes inherit permissions = yes path = /home/grupos/office force directory mode = 02777 force create mode = 0777 create mask = 0777 directory mask = 02777 valid users = @office here is the folder permissions: fileserver:~# ls -ld /home/grupos/office/ drwxrwx--- 2 root office 4096 2010-05-12 09:30 /home/grupos/office/ did i missed something? Tks in advance. I forgot to tell, this particular machine has not joined the domain, but this never has been a problem with other machines so far. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] new users, new group, can't access share
Hi everyone. I have a Samba 3.4.7 (bpo) on a debian box running as PDC with a LDAP backend. i have added a new group, 2 new users and created a new group share for them, but by some unknown reason they cannon access the share. the client is running windows vista. here's what i did: smbldap-groupadd -a office smbldap-useradd -a -m user1 smbldap-useradd -a -m user2 smbldap-passwd user1 smbldap-passwd user2 smbldap-usermod -G +office user1 smbldap-usermod -G +office user2 and added the following entry to my smb.conf: [office] writeable = yes map acl inherit = yes inherit permissions = yes path = /home/grupos/office force directory mode = 02777 force create mode = 0777 create mask = 0777 directory mask = 02777 valid users = @office here is the folder permissions: fileserver:~# ls -ld /home/grupos/office/ drwxrwx--- 2 root office 4096 2010-05-12 09:30 /home/grupos/office/ did i missed something? Tks in advance. -- Leonardo Carneiro -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Upgrade from Vista to 7 + samba = error [SOLVED]
Sorry from my lack of reading. The problem got solved by ensuring that the "requirestrongkey" was set to '1'. Tks Leonardo Carneiro - Veltrac wrote: Hello everyone, I'm using Ldap + Samba PDC 3.4.7 in a Debian Lenny machine (backported). I've been able add successfully 3 hosts with windows 7 on my domain. Now i upgraded a notebook from windows vista to windows 7. I could not log on the domain (the trust relationship was broken), So i tried to remove and re-add (after applying the registry patch file) the machine in the domain (several times), but i still cannot log in the domain. Here's the some log: [2010/04/26 17:12:03, 2] passdb/pdb_ldap.c:571(init_sam_from_ldap) init_sam_from_ldap: Entry found for user: tecnologia001$ [2010/04/26 17:12:03, 2] passdb/pdb_ldap.c:2434(init_group_from_ldap) init_group_from_ldap: Entry found for group: 515 [2010/04/26 17:12:03, 2] libsmb/credentials.c:223(netlogon_creds_server_check) netlogon_creds_server_check: credentials check failed. [2010/04/26 17:12:03, 0] rpc_server/srv_netlog_nt.c:603(_netr_ServerAuthenticate3) _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client TECNOLOGIA001 machine account TECNOLOGIA001$ What can i do to solve this? Tks in advance. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Upgrade from Vista to 7 + samba = error
Hello everyone, I'm using Ldap + Samba PDC 3.4.7 in a Debian Lenny machine (backported). I've been able add successfully 3 hosts with windows 7 on my domain. Now i upgraded a notebook from windows vista to windows 7. I could not log on the domain (the trust relationship was broken), So i tried to remove and re-add (after applying the registry patch file) the machine in the domain (several times), but i still cannot log in the domain. Here's the some log: [2010/04/26 17:12:03, 2] passdb/pdb_ldap.c:571(init_sam_from_ldap) init_sam_from_ldap: Entry found for user: tecnologia001$ [2010/04/26 17:12:03, 2] passdb/pdb_ldap.c:2434(init_group_from_ldap) init_group_from_ldap: Entry found for group: 515 [2010/04/26 17:12:03, 2] libsmb/credentials.c:223(netlogon_creds_server_check) netlogon_creds_server_check: credentials check failed. [2010/04/26 17:12:03, 0] rpc_server/srv_netlog_nt.c:603(_netr_ServerAuthenticate3) _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client TECNOLOGIA001 machine account TECNOLOGIA001$ What can i do to solve this? Tks in advance. -- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba over VPN
The W2K3 server is the VPN client or is a host behind a vpn client that have a route to the remote network? Is the server IS the vpn client, does the connection is being made by a service (prior to the user login) or you just connect to the VPN after login? Gaiseric Vandal wrote: How do the clients get IP addresses? You could try adding the WINS server value to the client ip address (either statically or via DHCP.) Then they should be able to get the necessary netbios name info even tho they are on a separate subnet. Why do you have the DC "distant" from the clients that it supports? On 04/22/2010 09:41 AM, Mike A. Leonetti wrote: Yeah. I don't think it's the VPN blocking traffic. I think my WINS server is not functioning properly. I'll keep working at it. Daniel Müller wrote: Are you sure, I thought with ipsec there could be netbios bypassing the tunnel. Shares and dns are always working. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: Mike A. Leonetti [mailto:mleone...@evolutionce.com] Gesendet: Mittwoch, 14. April 2010 16:47 An: muel...@tropenklinik.de Cc: samba Mailing Betreff: Re: AW: [Samba] Samba over VPN Daniel, I'm using ipsec for a VPN. Since all shares are working and name resolution all netbios packets seem to be traversing the VPN no problem. Thanks. Daniel Müller wrote: Hello, as far I know you need a vpn with netbios enabled. This can be done witch openvpn in briding mode. Or with a router having this option. Greetings Daniel --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von Mike A. Leonetti Gesendet: Dienstag, 13. April 2010 22:27 An: Samba Mailing Betreff: [Samba] Samba over VPN Have a 2003 server located outside of the Domain network over a VPN. The server originally existed inside the network (10.1.1.0/24) but now exists on 10.10.12.0/24. I can access shares over the VPN to the domain controller, but when I try to log in as a domain user it says the domain is unavailable. I added the domain controller as a WINS server on the 2003 server. nbtstat -c on the 2003 does list the domain controller and the domain. Microsoft Windows [Version 5.2.3790] (C) Copyright 1985-2003 Microsoft Corp. C:\Documents and Settings\Administrator>nbtstat -c Local Area Connection 2: Node IpAddress: [10.10.12.244] Scope Id: [] NetBIOS Remote Cache Name Table Name Type Host AddressLife [sec] CRCOMPUTER<1C> GROUP 10.1.1.1390 CRCOMPUTER<1B> UNIQUE 10.1.1.1387 FORTISSIMO<20> UNIQUE 10.1.1.1430 C:\Documents and Settings\Administrator> Is there a way I can test the WINS server to definitely make sure it's working? Is it that SAMBA isn't broadcasting itself over the 10.10.12.0 (VPN) network? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Windows 7 and samba 3.0.28
No, you didn't searched. Go to google and try "samba windows7" vishesh kumar wrote: Dear all May be this question asked earlier in list but i didn't able to search exact . I have samba+ldap domain setup on RHEL 5.1 and samba version is 3.0.28. Today i got a windows 7 system , but i am not able to join that system in our samba+ldap domain. Do i need to do any registry tweaking. I can't upgrade own samba version beyond 3.0.33 because this maximum version i get if i update my system to RHEL 5.5. Thanks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Compile Samba 3.5 for lenny
You can use the backports repo to install samba 3.4 and add Windows 7 machines, also windows Vista machines. Also: *http://tinyurl.com/y9cbaxc* Eliano Leão wrote: Hi. I need adding machines with Windows Vista in my domain. My system:Debian Lenny ,Samba 3.2.15 and LDAP. How to compiler Samba 3.5 for Lenny? how to start samba after compiled? Thanks. Eliano -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Migration from 3.0.23d to 3.4.5 failed
After a migration from 3.2.5 to 3.4.7 i'm still having issues. My windows XP users randomly loses their access to the server and cannot open the share list. =S Volker Lendecke wrote: On Wed, Mar 24, 2010 at 05:39:15PM +0100, Bastien Semene wrote: Yes I'm using this one. Actually the module has been upgraded for 3.4 (and 3.5) in February 2010 : http://sourceforge.net/projects/pdbsql/files/ I plan to switch to another backend at short term, but I can't do it now as all my services uses this backend currently, and I need to upgrade Samba service to integrate Windows 7 workstations. Anyway I don't think that it is the source of the problem according to the tests I made with pdbedit in my previous mail (but I'm a newbie in Samba services). If you can point me a test to confirm (or unconfirm) that this module is the problem, I'll be glad. Ok, what we need then is a debug level 10 log of smbd that you can't connect to. Volker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] ham,Re: samba PDC upgrade from 3.2.5 to 3.4.7
Hi John. It worked well just before the upgrade. I'm not saying that this is correct, but is the reason why users aren't accessing? Also, should'n this give some specific error in the logs? Tks in advance. John H Terpstra wrote: On 03/23/2010 02:35 PM, Leonardo Carneiro - Veltrac wrote: Hi Dale and others. I had already checked the release notes. Only users in eth0 (192.168.0.x) are having trouble. Here is some info and some logs: smb.conf: [global] workgroup = DOMINIO netbios name = DOMINIO It is not at all surprizing that users are having difficulty accessing this server! It's workgroup name and hostname are the SAME! Please read the Samba-HOWTO. These two names MUST differ. What you have is broken. - John T. server string = Samba Server hosts allow = 192.168.1. 192.168.0. 127. smb ports = 139 load printers = no log file = /var/log/samba/%m.log max log size = 50 log level = 2 winbind:3 security = user encrypt passwords = true username map = /etc/samba/smbusers socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 interfaces = eth0 eth1 local master = yes os level = 90 domain master = yes preferred master = yes domain logons = yes logon script = %G.bat logon path = name resolve order = wins bcast lmhosts wins support = yes dns proxy = no ldap passwd sync = yes ldap ssl = off ldap delete dn = yes passdb backend = ldapsam:ldap://127.0.0.1/ ldap admin dn = cn=root,dc=dominio,dc=com,dc=br ldap suffix = dc=dominio,dc=com,dc=br ldap group suffix = ou=Grupos ldap user suffix = ou=Usuarios ldap machine suffix = ou=Computadores ldap idmap suffix = ou=ldapidmapsuffix idmap backend = ldap://127.0.0.1 idmap alloc backend = ldap idmap alloc config : ldap_user_dn = cn=root,dc=dominio,dc=com,dc=br idmap alloc config : ldap_base_dn = ou=Usuarios,dc=dominio,dc=com,dc=br idmap alloc config : ldap_url = ldap://127.0.0.1 idmap uid = 1-2 idmap gid = 1-2 enable privileges = yes nt acl support = yes add machine script = /usr/sbin/smbldap-useradd -w "%u" add user script = /usr/sbin/smbldap-useradd -m "%u" delete user script = /usr/sbin/smbldap-userdel "%u" add group script = /usr/sbin/smbldap-groupadd -p "%g" delete group script = /usr/sbin/smbldap-groupdel "%g" add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g" delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g" set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u" dos charset = CP850 Unix charset = ISO8859-1 admin users = root time server = yes template shell = /bin/false winbind use default domain = no map acl inherit = Yes Dale Schroeder wrote: On 03/23/2010 1:48 PM, Leonardo Carneiro - Veltrac wrote: Also, i found out that only users running windows xp in one of the two interfaces that samba is being accessed are having this trouble. Leonardo Carneiro - Veltrac wrote: Hello everyone. Yesterday i did an almost painless upgrade from samba pdc from 3.2.5 to 3.4.7. I'm running in a Debian Lenny (upgraded from the original package to the backported one). After a few tweaks i found on the web my users, including those who run win7, where able to log in the domain. But now the cannot access the shared folders on the server. Some users can't even open the server share list. There is any major change that prevent users to access the shares that i'm skipping it? Tks in advance and sorry for my poor english. You could check the release notes for changes: http://www.samba.org/samba/history/ , or consider posting your smb.conf. Dale -- *Leonardo de Souza Carneiro* *Veltrac - Tecnologia em Logística.* lscarne...@veltrac.com.br <mailto:lscarne...@veltrac.com.br> http://www.veltrac.com.br <http://www.veltrac.com.br/> /Fone Com.: (43)2105-5011/ /R. Pará 162 - CENTRO/ /Londrina- PR/ /Cep: 86010-450/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] usuários não consegues acessar pastar compartilhadas após upgrade do samba
sorry, wrong list Leonardo Carneiro - Veltrac wrote: Oi Fábio. Pelo IP também não acessa. A minha suspeita de que era um problema ligado a interface está errada. Aleatóriamente usuários nas duas interfaces perdem o acesso. Ainda assim, somente usuários com Windows XP tem esse problema. Vou testar suas indicações. Fábio Rabelo wrote: 2010/3/23 Leonardo Carneiro - Veltrac <mailto:lscarne...@veltrac.com.br>> Não existem regras de firewall para nenhuma interface. Tenho as seguinte regra sobre interfaces e redes: hosts allow = 192.168.0. 192.168.1. 127. interfaces = eth0 eth1 E estas linhas acima estão no smb.conf ?!? Se sim, o Sr. tem que acrescentar o loopback interfaces = lo eth1 eth2 e a linha bind interfaces only = yes TEM que existir Uma pergunta, se o Sr. tentar acessar o compartilhamento usando o ip ele coneta ? Se a resposta for sim, o Sr. pode estar com problemas de resolução de nomes, já tentou colocar esta linha no smb.conf : wins support = yes Fábio Rabelo Não localizei nenhum erro nos logs. Os usuários não conseguem nem acessar a lista de shares. Ao tentar acessar \\[ip_do_server], já recebo a mensagem de caminho de rede não encontrado. Fábio Rabelo wrote: Existem várias possíveis causas, vamos tentar duas delas : O Sr. verificou as regras do firewall, se são idênticas para ambas as placas ?? E se o Sr. tem alguma coisa assim no seu smb.conf : interfaces = eth1, lo bind interfaces only = yes Se sim, amas as placas de rede TEM que estar presentes na primeira linha . E a "dica" básica de todos os dias, o Sr. já verificou se existe alguma msg de erro no log ?!? Fábio Rabelo 2010/3/23 Leonardo Carneiro - Veltrac mailto:lscarne...@veltrac.com.br>> Olá pessoALL, Fiz um upgrade quase 'painless' do samba 3.2.5 para a versão 3.4.7 do backports, para permitir máquinas com windows 7 no domínio. Após algumas pequenas mudanças, todos estavam logando normalmente no domínio. Porém, vários usuários não conseguem acessar as pastas compartilhadas. Este samba atende em duas interfaces (eth0 e eth1) com duas subredes diferentes. Em uma interface, todos estão acessando normal. Na outra, os clientes com windows xp não conseguem nem abrir a lista de shares do servidor. O que pode estar errado? -- To UNSUBSCRIBE, email to debian-user-portuguese-requ...@lists.debian.org <mailto:debian-user-portuguese-requ...@lists.debian.org> with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org <mailto:listmas...@lists.debian.org> Archive: http://lists.debian.org/4ba90c70.2020...@veltrac.com.br -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] usuários não consegues acessar pastar compartilhadas após upgrade do samba
Oi Fábio. Pelo IP também não acessa. A minha suspeita de que era um problema ligado a interface está errada. Aleatóriamente usuários nas duas interfaces perdem o acesso. Ainda assim, somente usuários com Windows XP tem esse problema. Vou testar suas indicações. Fábio Rabelo wrote: 2010/3/23 Leonardo Carneiro - Veltrac <mailto:lscarne...@veltrac.com.br>> Não existem regras de firewall para nenhuma interface. Tenho as seguinte regra sobre interfaces e redes: hosts allow = 192.168.0. 192.168.1. 127. interfaces = eth0 eth1 E estas linhas acima estão no smb.conf ?!? Se sim, o Sr. tem que acrescentar o loopback interfaces = lo eth1 eth2 e a linha bind interfaces only = yes TEM que existir Uma pergunta, se o Sr. tentar acessar o compartilhamento usando o ip ele coneta ? Se a resposta for sim, o Sr. pode estar com problemas de resolução de nomes, já tentou colocar esta linha no smb.conf : wins support = yes Fábio Rabelo Não localizei nenhum erro nos logs. Os usuários não conseguem nem acessar a lista de shares. Ao tentar acessar \\[ip_do_server], já recebo a mensagem de caminho de rede não encontrado. Fábio Rabelo wrote: Existem várias possíveis causas, vamos tentar duas delas : O Sr. verificou as regras do firewall, se são idênticas para ambas as placas ?? E se o Sr. tem alguma coisa assim no seu smb.conf : interfaces = eth1, lo bind interfaces only = yes Se sim, amas as placas de rede TEM que estar presentes na primeira linha . E a "dica" básica de todos os dias, o Sr. já verificou se existe alguma msg de erro no log ?!? Fábio Rabelo 2010/3/23 Leonardo Carneiro - Veltrac mailto:lscarne...@veltrac.com.br>> Olá pessoALL, Fiz um upgrade quase 'painless' do samba 3.2.5 para a versão 3.4.7 do backports, para permitir máquinas com windows 7 no domínio. Após algumas pequenas mudanças, todos estavam logando normalmente no domínio. Porém, vários usuários não conseguem acessar as pastas compartilhadas. Este samba atende em duas interfaces (eth0 e eth1) com duas subredes diferentes. Em uma interface, todos estão acessando normal. Na outra, os clientes com windows xp não conseguem nem abrir a lista de shares do servidor. O que pode estar errado? -- To UNSUBSCRIBE, email to debian-user-portuguese-requ...@lists.debian.org <mailto:debian-user-portuguese-requ...@lists.debian.org> with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org <mailto:listmas...@lists.debian.org> Archive: http://lists.debian.org/4ba90c70.2020...@veltrac.com.br -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] ham,Re: samba PDC upgrade from 3.2.5 to 3.4.7
Hi Dale and others. I had already checked the release notes. Only users in eth0 (192.168.0.x) are having trouble. Here is some info and some logs: smb.conf: [global] workgroup = DOMINIO netbios name = DOMINIO server string = Samba Server hosts allow = 192.168.1. 192.168.0. 127. smb ports = 139 load printers = no log file = /var/log/samba/%m.log max log size = 50 log level = 2 winbind:3 security = user encrypt passwords = true username map = /etc/samba/smbusers socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 interfaces = eth0 eth1 local master = yes os level = 90 domain master = yes preferred master = yes domain logons = yes logon script = %G.bat logon path = name resolve order = wins bcast lmhosts wins support = yes dns proxy = no ldap passwd sync = yes ldap ssl = off ldap delete dn = yes passdb backend = ldapsam:ldap://127.0.0.1/ ldap admin dn = cn=root,dc=dominio,dc=com,dc=br ldap suffix = dc=dominio,dc=com,dc=br ldap group suffix = ou=Grupos ldap user suffix = ou=Usuarios ldap machine suffix = ou=Computadores ldap idmap suffix = ou=ldapidmapsuffix idmap backend = ldap://127.0.0.1 idmap alloc backend = ldap idmap alloc config : ldap_user_dn = cn=root,dc=dominio,dc=com,dc=br idmap alloc config : ldap_base_dn = ou=Usuarios,dc=dominio,dc=com,dc=br idmap alloc config : ldap_url = ldap://127.0.0.1 idmap uid = 1-2 idmap gid = 1-2 enable privileges = yes nt acl support = yes add machine script = /usr/sbin/smbldap-useradd -w "%u" add user script = /usr/sbin/smbldap-useradd -m "%u" delete user script = /usr/sbin/smbldap-userdel "%u" add group script = /usr/sbin/smbldap-groupadd -p "%g" delete group script = /usr/sbin/smbldap-groupdel "%g" add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g" delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g" set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u" dos charset = CP850 Unix charset = ISO8859-1 admin users = root time server = yes template shell = /bin/false winbind use default domain = no map acl inherit = Yes Dale Schroeder wrote: On 03/23/2010 1:48 PM, Leonardo Carneiro - Veltrac wrote: Also, i found out that only users running windows xp in one of the two interfaces that samba is being accessed are having this trouble. Leonardo Carneiro - Veltrac wrote: Hello everyone. Yesterday i did an almost painless upgrade from samba pdc from 3.2.5 to 3.4.7. I'm running in a Debian Lenny (upgraded from the original package to the backported one). After a few tweaks i found on the web my users, including those who run win7, where able to log in the domain. But now the cannot access the shared folders on the server. Some users can't even open the server share list. There is any major change that prevent users to access the shares that i'm skipping it? Tks in advance and sorry for my poor english. You could check the release notes for changes: http://www.samba.org/samba/history/ , or consider posting your smb.conf. Dale -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] samba PDC upgrade from 3.2.5 to 3.4.7
Also, i found out that only users running windows xp in one of the two interfaces that samba is being accessed are having this trouble. Leonardo Carneiro - Veltrac wrote: Hello everyone. Yesterday i did an almost painless upgrade from samba pdc from 3.2.5 to 3.4.7. I'm running in a Debian Lenny (upgraded from the original package to the backported one). After a few tweaks i found on the web my users, including those who run win7, where able to log in the domain. But now the cannot access the shared folders on the server. Some users can't even open the server share list. There is any major change that prevent users to access the shares that i'm skipping it? Tks in advance and sorry for my poor english. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] samba PDC upgrade from 3.2.5 to 3.4.7
Hello everyone. Yesterday i did an almost painless upgrade from samba pdc from 3.2.5 to 3.4.7. I'm running in a Debian Lenny (upgraded from the original package to the backported one). After a few tweaks i found on the web my users, including those who run win7, where able to log in the domain. But now the cannot access the shared folders on the server. Some users can't even open the server share list. There is any major change that prevent users to access the shares that i'm skipping it? Tks in advance and sorry for my poor english. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba