Re: [Samba] call for a forum to replace the mailing list?
On 2/18/2011 3:20 PM, Chris Weiss wrote: Interestingly, I am only subscribed to the daily digest, yet I got an individual email from you personally to my address rather than waiting to see it in the digest. that's because of how "reply all" defaults. If anything were to be changed, I'd petition to default the reply back to the list. I understand this is against some RFC's, but when conversations are expected to stay on-list it really helps. Using reply all with a mailing list really isn't a good idea. I signed up for digest only so that I could control it and keep a relatively clean inbox. Good etiquette would suggest only replying to the list address. But that's just me. Regards, (2 + 2 + 2, it adds up in a hurry :chuckle) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] call for a forum to replace the mailing list?
On 2/18/2011 2:44 PM, Chris Weiss wrote: On Fri, Feb 18, 2011 at 2:26 PM, Mac wrote: I may have to unsubscribe from this list. Not because you responded twice, accidentally, while trying to help. That was fine and of little consequence. However, I got an automated "out of office" response from someone else and that got me thinking "what if I get hit with that during a peak vacation time for somewhere?" Eek, my poor, filled up mail server! If you view the email headers you'll see a "Precedence: list". Any vacation responder that replies to an email with this in the headers is mis-configured. I'm not aware of any popular ones that are mis-configured by default. May be a forum would be better? If the regulars think the upside of a forum outweighs the downside (not my call, just my 2 cents). in other groups I'm in that do have forums, the regulars are only regulars because of the mailing list, as forums require forethought to go read and reply instead of it being dumped in your face as posted like email does. Forums that have list integration, like FUDForum, are a decent compromise, but are far from perfect. If this were a forum and not a list, I'd almost certainly have not read or replied to your message. Interestingly, I am only subscribed to the daily digest, yet I got an individual email from you personally to my address rather than waiting to see it in the digest. As I read this via NNTP when I have a special interest, I can reply to the list to make my point early. Doing email list interaction seems to be a lost art! That makes my 4 cents (2 + 2) :) Please, this is not an attempt at a flame war or trolling. I am just pointing out that this may be a relic of the past. Best regards, Mac -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] call for a forum to replace the mailing list?
On 2/18/2011 8:40 AM, Geoff Winkless wrote: Apologies to Mac, who will have this twice - I didn't realise the list doesn't include a "reply-to list" header. :( ' I may have to unsubscribe from this list. Not because you responded twice, accidentally, while trying to help. That was fine and of little consequence. However, I got an automated "out of office" response from someone else and that got me thinking "what if I get hit with that during a peak vacation time for somewhere?" Eek, my poor, filled up mail server! May be a forum would be better? If the regulars think the upside of a forum outweighs the downside (not my call, just my 2 cents). Mac -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Fedora 14 and Samba 3.4.11 compile/install blues
On 2/18/2011 9:37 AM, Geoff Winkless wrote: On 18 February 2011 15:16, Mac wrote: It's been a while since I've done a compile. Didn't the make install do that for you in the past? As well as creating a first time /etc/samba/smb.conf? And setting up the script for getting the daemons in the services list as stopped items? And everything else that is supposed to get you started on a vanilla set up? Seems like the make install didn't finish for some reason. Umph. I don't think it's ever done any of that, although I can't answer definitively. Things like startup scripts are pretty much the realm of the disty; given that it could be in a completely different place and use completely different conventions depending on whether it's BSD or SVR4 style, it would be tricky to do it in the make install stage. Normally you'd be installing over the top of an existing install, so if you configured the install to be in the same place as the existing samba you wouldn't have to change much. Because you've configured it to /usr/local/samba/... it's a bit more difficult. Geoff You may be right. I haven't done a compile of Samba for a while and, as I have such a mixed background, I tend to forget more than I remember any more. Plus the http://www.internetslang.com/CRS.asp is a problem). Although I will say that basics of automating the set up of library linkages and executables have been done via common/standard symbolics for a long time so that Samba (and other packages) could be run on other distros. The manual methods of set up that I've seen don't mention ldconfig. They just plow from make install to checking ports 137-139 and running the daemons. Thanks for getting me started though! I appreciate it. Mac -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Fedora 14 and Samba 3.4.11 compile/install blues
> On 2/18/2011 8:40 AM, Geoff Winkless wrote: Apologies to Mac, who will have this twice - I didn't realise the list doesn't include a "reply-to list" header. :( No worries, I can deal :) On 18 February 2011 13:56, Mac wrote: from the install). Then tried to run the daemons manually. Both get the same error "/usr/local/samba/sbin/smbd: error while loading shared libraries: libtalloc.so.1: cannot open shared object file: No such file or directory". The configure output suggests it's going to build it checking whether to build the libtalloc shared library... yes and the make suggests it built it: Linking shared library bin/libtalloc.so.1 and make install suggests it installed it: /usr/bin/install -c bin/libtalloc.so.1 //usr/local/samba/lib So that just leaves ldconfig. Have you added /usr/local/samba/lib to /etc/ld.so.conf? Geoff OK, I did that, which allowed me to run smbd manually (actually, after looking at the include line in the LD.so.conf, I added a new ldconfig conf file for samba to the /etc/ld.so.conf.d/ folder as that made more sense to this ldconfig newbie, but the result is the same). It's been a while since I've done a compile. Didn't the make install do that for you in the past? As well as creating a first time /etc/samba/smb.conf? And setting up the script for getting the daemons in the services list as stopped items? And everything else that is supposed to get you started on a vanilla set up? Seems like the make install didn't finish for some reason. If so, what might have stopped it from finishing? Is it the fact that I'm using a version of Samba not compatible with Fedora 14 (I could back up to any version or other Linux flavor if that might help). If this is expected behavior from the install (or there is no way to get it to finish), I will have a bunch of work to get it running and I'll always be waiting for it to fall apart cause there is a step in the install that I missed. Any thoughts? Thanks, Mac -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] password sync
>From: Adam Tauno Williams >To: samba@lists.samba.org >Date: Wed, 28 Oct 2009 16:16:16 -0400 >Subject: Re: [Samba] password sync > >On Wed, 2009-10-28 at 13:36 -0500, Paras pradhan wrote: >> Is it possible to use the /etc/passwd for the samba users? > >No. Really ? It always used to be. You'd have to turn off 'encrypt passwords', which is (nowadays) on by default. There are lots of good reasons for _not_ doing this, but it is possible and can be done. Then /etc/passwd will be used automatically, IIRC. Mac Assistant Systems Adminstrator @nibsc.ac.uk m...@nibsc.hpa.org.uk+44 1707 641565 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] unix password sync not working
Howdy, > >I am having problems with synchronisation of samba passwords with unix >passwords. I have set the following in my smb.conf: > >unix password sync = Yes >pam password change = yes >passwd program = /usr/bin/passwd %u >passwd chat = *New*UNIX*password* %n\n *Re*ype*new*UNIX*password* %n\n \ >passwd:*all*authentication*tokens*updated*successfully* >passwd chat debug = yes > > >When trying to change the unix password i have the following: > >samba # smbpasswd bill >New SMB password: >Retype new SMB password: > > >The samba password is changed, however, the unix password in /etc/shadow >is not altered. Even though I have set the passwd chat debug option to >Yes, I do not see any entries in the log file when I run smbpasswd. The >log level is set to 10. Password chat debug only appears at log level 100, as it has the clear-text of passwords in it. Be very careful who can access those log files. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba write performance in kernel
hi, Just do some debugging, and found something. I hope this do help. Correct me if anything wrong. I'm using samba-3.2.2. For some reason, Linux can not splice a socket and a filefd directly, which samba does so. In linux, sys_splice calls do_splice, which would require either in or out fd to be a PIPE(FIFO). Both parameter (fromfd, tofd) that samba sent with splice failed the test S_ISFIFO() in linux. Maybe it would work to add an addition FIFO? splice(fromfd, FIFO) and splice(FIFO, tofd)? Best Regards, Mac Lin > Date: Thu, 18 Sep 2008 16:01:29 +0200 > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > CC: [EMAIL PROTECTED]; samba@lists.samba.org > Subject: Re: [Samba] Samba write performance in kernel > > On Thu, Sep 18, 2008 at 09:45:43PM +0800, Lin Mac wrote: > > > On Mon, Sep 15, 2008 at 02:44:32PM +0800, Lin Mac wrote: > > > This is a kernel implementation detail. Remember Samba > > > runs on many other kernels, not just Linux. Linux has > > > splice, *BSD has receivefile, Solaris probably has > > > something different. > > > Samba using splice on Linux doesn't work, that is for sure. > > And there's no way that this can be fixed? > > Volker _ 用部落格分享照片、影音、趣味小工具和最愛清單，盡情秀出你自己 — Windows Live Spaces http://spaces.live.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba write performance in kernel
hi, > On Mon, Sep 15, 2008 at 02:44:32PM +0800, Lin Mac wrote: > This is a kernel implementation detail. Remember Samba > runs on many other kernels, not just Linux. Linux has > splice, *BSD has receivefile, Solaris probably has > something different. Samba using splice on Linux doesn't work, that is for sure. Is there any OS that such mechanism (splice, receivefile,...,etc) would work on? Thanks anyway... Best Regards, Mac Lin _ 聰明搜尋和瀏覽網路的免費工具列 — MSN 搜尋工具列 http://toolbar.live.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba write performance in kernel
hi, > Ok, this is different. I had missed that you are talking > about a small device with slow memory bandwith. In that > case, you might certainly gain something by avoiding the > copies. If you are really memcpy-bound, you should > definitely make splice work. yes, but the question is by how much can it improve. We would like to see it reach 7Mbps in 2 or 3 months, can't just waiting for linux kernel fix the problem. Is there any individuals/company capable of doing such performance improvement for charge? > At the high end, latencies is mostly what kills your > performance. Mostly you have enough bandwidth, but if you > just do a simple request->response scheme, you can't get > beyond a certain overall bandwith that is way below the > theoretical network bandwith. To fill that, you need to make > the client issue parallel requests. Multi-threaded windows > client apps can do it, smbclient from 3.2 does it. I have tried multiple threads but it doesn't help the performance in my case. The delay caused by memory copy seems dominate. Best Regards, Mac Lin> Date: Fri, 12 Sep 2008 09:45:32 +0200 > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > CC: [EMAIL PROTECTED]; samba@lists.samba.org > Subject: Re: [Samba] Samba write performance in kernel > > On Fri, Sep 12, 2008 at 02:43:25PM +0800, Lin Mac wrote: > > well, in my condition, it might be 30% instead of 5%, IF > > splice can cover advantage 1 and 2. > > 1. I'm using a slow CPU (FA526) , and the memory copy is even slower. > > 2. The reading performance is over 7 MB/s, with mmap and > > sendfile enabled, while writing is only 4-5 MB/s. Without > > mmap and sendfile, reading from samba is also about 4-5 > > MB/s. > > 3. I used Oprofile to profile writing file to samba and > > found that CPU takes over 30% CPU time on > > copy_from/to_user, so I think going to user space and back > > again is the bottleneck. > > 4. My device is only 100Mbps Ethernet > > 5. I uses Windows client to measure throughput > > Ok, this is different. I had missed that you are talking > about a small device with slow memory bandwith. In that > case, you might certainly gain something by avoiding the > copies. If you are really memcpy-bound, you should > definitely make splice work. > > > > here, but the network latencies together with non-optimally > > > queued requests by the client have a MUCH greater influence. > > 1. If splice works, can memory copy be avoided? > > 2. Sorry I don't really get what the "non-optimally queued > > requests" means. And what could I do to make it optimized? > > At the high end, latencies is mostly what kills your > performance. Mostly you have enough bandwidth, but if you > just do a simple request->response scheme, you can't get > beyond a certain overall bandwith that is way below the > theoretical network bandwith. To fill that, you need to make > the client issue parallel requests. Multi-threaded windows > client apps can do it, smbclient from 3.2 does it. > > Volker _ 聰明搜尋和瀏覽網路的免費工具列 — MSN 搜尋工具列 http://toolbar.live.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba write performance in kernel
hi, > > Does using splice would really do help in performance much? > > Since the performance improvement might comes from two advantage: > > 1. no going to user space. > > 2. no memory copy > > splice surely have advantage 1, but doest it have the > > second? Can we avoid memory copy with splice, while > > writing files to samba? (scatter-gather in block write?) > > Just to get things straight: Recently I've seen a Xeon box > ship almost 500 megabytes (!) per second to smbclient using > a single SMB connection via > RAMdisk->smbd->10GigE->smbclient->/dev/null. This was > without sendfile. So unless you want to squeeze the last 5% > out of a heavily loaded server, I'd say the advantages of > sendfile/recvfile are close to negligible. I might be wrong well, in my condition, it might be 30% instead of 5%, IF splice can cover advantage 1 and 2. 1. I'm using a slow CPU (FA526) , and the memory copy is even slower. 2. The reading performance is over 7 MB/s, with mmap and sendfile enabled, while writing is only 4-5 MB/s. Without mmap and sendfile, reading from samba is also about 4-5 MB/s. 3. I used Oprofile to profile writing file to samba and found that CPU takes over 30% CPU time on copy_from/to_user, so I think going to user space and back again is the bottleneck. 4. My device is only 100Mbps Ethernet 5. I uses Windows client to measure throughput > here, but the network latencies together with non-optimally > queued requests by the client have a MUCH greater influence. 1. If splice works, can memory copy be avoided? 2. Sorry I don't really get what the "non-optimally queued requests" means. And what could I do to make it optimized? Thanks. Best Regards, Mac Lin _ 5 GB 超大容量 、創新便捷、安全防護垃圾郵件和病毒 — 立即升級 Windows Live Hotmail http://mail.live.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba write performance in kernel
Hi, > > Is there any kernel patch to fix this issue? or any discussion, clues? > Not that I know of at the moment. I'm waiting for the Linux > kernel to support splice from socket -> file. Code's all > there in Samba. Does using splice would really do help in performance much? Since the performance improvement might comes from two advantage: 1. no going to user space. 2. no memory copy splice surely have advantage 1, but doest it have the second? Can we avoid memory copy with splice, while writing files to samba? (scatter-gather in block write?) > > > BTW, although the splice is not used, some access from window client seems strange: writing files has no status bar but finished siliently, and can't delete file. (I've checked the permission of the file to ensure they are writable.) > > Writing and deleting files from linux have no such problem. Reading file > > from both clients have no problem too. > Doesn't sound like a splice problem to me. Is this > reproducible ? Not really, the situation seems different every time I tested it. Last try I have seen the status bar, but all actions seems "delayed" for 5-10 seconds. Today, it just become VERY SLOWIt take me 5 min to see the file list, then click on a file takes me another 5 minutes, and I'm still waiting to try to delete a file.. But everything comes back to normal when I set the "min receivefile size" to 0... Best Regards, Mac Lin _ 隨身的 Windows Live Messenger 和 Hotmail，不限時地掌握資訊盡在指間 — Windows Live for Mobile http://www.msn.com.tw/msnmobile/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba write performance in kernel
hi, Yes, it works. Now the splice would failed first, then runs default_sys_recvfile. Is there any kernel patch to fix this issue? or any discussion, clues? BTW, although the splice is not used, some access from window client seems strange: writing files has no status bar but finished siliently, and can't delete file. (I've checked the permission of the file to ensure they are writable.) Writing and deleting files from linux have no such problem. Reading file from both clients have no problem too. Tested with Ubuntu 8.04, linux-2.6.24-19-generic, samba-3.2.2. Best Regards, Mac Lin > Date: Wed, 3 Sep 2008 10:04:01 -0700 > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > CC: [EMAIL PROTECTED]; samba@lists.samba.org > Subject: Re: [Samba] Samba write performance in kernel > > On Wed, Sep 03, 2008 at 02:04:53PM +0800, Lin Mac wrote: > > > > hi, > > > > I would like to know how should I test the RECVFILE functionality? I've > > been trying to test the splice and expect to see that smbd would at least > > try splice and fails maybe? But I found that my data path isn't going > > through the vfswrap_recvfile, which calls sys_recvfile and splice. > > > > I have enabled HAVE_LINUX_SPLICE (by ac_cv_have_splice_decl=yes and > > samba_cv_HAVE_LINUX_SPLICE=yes while running configure), so I think I have > > splice enabled. But I think that's not the reason, the data just don't go > > through vfswrap_recvfile. > > > > I test by download data from linux and windows, drag and drop on explorer, > > and both show message alike. > > Have you set the "min receivefile size" parameter to non-zero ? > > Jeremy. _ 聰明搜尋和瀏覽網路的免費工具列 — MSN 搜尋工具列 http://toolbar.live.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba write performance in kernel
hi, I would like to know how should I test the RECVFILE functionality? I've been trying to test the splice and expect to see that smbd would at least try splice and fails maybe? But I found that my data path isn't going through the vfswrap_recvfile, which calls sys_recvfile and splice. I have enabled HAVE_LINUX_SPLICE (by ac_cv_have_splice_decl=yes and samba_cv_HAVE_LINUX_SPLICE=yes while running configure), so I think I have splice enabled. But I think that's not the reason, the data just don't go through vfswrap_recvfile. I test by download data from linux and windows, drag and drop on explorer, and both show message alike. Any help would be appreciated. linux-2.6.23.9 samba-3.2.2 the writing part message of my log.smb: [1970/01/01 00:07:13, 11] lib/events.c:run_events(257) run_events: Nothing to do [1970/01/01 00:07:13, 10] smbd/process.c:async_processing(649) async_processing: Doing async processing. [1970/01/01 00:07:13, 11] lib/events.c:run_events(257) run_events: Nothing to do [1970/01/01 00:07:13, 10] lib/util_sock.c:read_smb_length_return_keepalive(1118) got smb length of 61504 [1970/01/01 00:07:14, 6] smbd/process.c:process_smb(1546) got message type 0x0 of len 0xf040 [1970/01/01 00:07:14, 3] smbd/process.c:process_smb(1549) Transaction 120 of length 61508 (0 toread) [1970/01/01 00:07:14, 5] lib/util.c:show_msg(642) [1970/01/01 00:07:14, 5] lib/util.c:show_msg(652) size=61504 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=3 smb_pid=65279 smb_uid=0 smb_mid=9027 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4948 (0x1354) smb_vwv[ 3]=0 (0x0) smb_vwv[ 4]=0 (0x0) smb_vwv[ 5]=65535 (0x) smb_vwv[ 6]=65535 (0x) smb_vwv[ 7]=0 (0x0) smb_vwv[ 8]=0 (0x0) smb_vwv[ 9]=0 (0x0) smb_vwv[10]=61440 (0xF000) smb_vwv[11]= 64 (0x40) smb_vwv[12]=0 (0x0) smb_vwv[13]=0 (0x0) smb_bcc=61441 [1970/01/01 00:07:14, 10] lib/util.c:dump_data(2223) [000] EE 25 50 44 46 2D 31 2E 34 0D 25 E2 E3 CF D3 0D .%PDF-1. 4.%. (...) [EFF0] E0 01 61 75 65 BD A2 46 45 D4 00 1E 11 01 13 0D ..aue..F E... [F000] A2. [1970/01/01 00:07:19, 3] smbd/process.c:switch_message(1361) switch message SMBwriteX (pid 760) conn 0xaae620 [1970/01/01 00:07:19, 0] smbd/process.c:smb_dump(1309) created /tmp/SMBwriteX.4.req len 61508 [1970/01/01 00:07:19, 4] smbd/uid.c:change_to_user(176) change_to_user: Skipping user change - already user [1970/01/01 00:07:19, 10] locking/locking.c:is_locked(98) is_locked: optimisation - exclusive oplock on file EDIOL_2008JUL25_DSP_TA_01.pdf [1970/01/01 00:07:19, 10] locking/locking.c:is_locked(136) is_locked: flavour = WINDOWS_LOCK brl start=0 len=61440 unlocked for fnum 4948 file EDIOL_2008JUL25_DSP_TA_01.pdf [1970/01/01 00:07:19, 8] smbd/dosmode.c:dos_mode(354) dos_mode: EDIOL_2008JUL25_DSP_TA_01.pdf [1970/01/01 00:07:19, 8] smbd/dosmode.c:dos_mode_from_sbuf(170) dos_mode_from_sbuf returning a [1970/01/01 00:07:19, 8] smbd/dosmode.c:dos_mode(394) dos_mode returning a[sparse] [1970/01/01 00:07:19, 10] smbd/fileio.c:real_write_file(140) real_write_file (EDIOL_2008JUL25_DSP_TA_01.pdf): pos = 0, size = 61440, returned 61440 [1970/01/01 00:07:19, 3] smbd/reply.c:reply_write_and_X(4052) writeX fnum=4948 num=61440 wrote=61440 [1970/01/01 00:07:19, 5] lib/util.c:show_msg(642) [1970/01/01 00:07:19, 5] lib/util.c:show_msg(652) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=49153 smb_tid=3 smb_pid=65279 smb_uid=0 smb_mid=9027 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=0 (0x0) smb_vwv[ 2]=61440 (0xF000) smb_vwv[ 3]=0 (0x0) smb_vwv[ 4]=0 (0x0) smb_vwv[ 5]=0 (0x0) smb_bcc=0 Best Regards, Mac Lin > Date: Tue, 26 Aug 2008 10:41:24 -0700 > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > CC: [EMAIL PROTECTED]; samba@lists.samba.org > Subject: Re: [Samba] Samba write performance in kernel > > On Wed, Aug 27, 2008 at 01:12:13AM +0800, Lin Mac wrote: > > > > hi Jeremy, > > splice is support after linux 2.6.17. Does it means that > > splice+RECEIVEFILEI would work on samba 3.2.x on linux 2.6.17 or later > > version? > > I would try it tomorrow, but it seems that it won't work right now, right? > > splice isn't a fully functional system call unfortunately. It works > for file -> socket, or pipe -> pipe, but when I tested it it didn't > work with socket -> file. > > Your Millage May Vary (depending on Linux kernel release) unfortunately. > > Jeremy. ___
RE: [Samba] Samba write performance in kernel
hi Jeremy, splice is support after linux 2.6.17. Does it means that splice+RECEIVEFILEI would work on samba 3.2.x on linux 2.6.17 or later version? I would try it tomorrow, but it seems that it won't work right now, right? Best Regards, Mac Lin > Date: Tue, 26 Aug 2008 08:38:49 -0700 > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > CC: samba@lists.samba.org > Subject: Re: [Samba] Samba write performance in kernel > > On Tue, Aug 26, 2008 at 05:41:51PM +0800, Lin Mac wrote: >> >> hi, >> >> I would like to know is it possible to make writing file to samba completely >> in kernel? > > Yes. > >> I'm using a slow CPU (FA526) , and the memory copy is even slower. The >> reading performance is over 7 MB/s, with mmap and sendfile enabled, while >> writing is only 4-5 MB/s. Without mmap and sendfile, reading from samba is >> also about 4-5 MB/s. I use Oprofile to profile writing file to samba and >> found that CPU takes over 30% CPU time on copy_from/to_user, so I think >> going to user space and back again is the bottleneck. >> >> Since there is sendfile, why is'nt there counterpart on write path? Is there >> some difficalties or what? Is it implementable? > > There is a counterpart on the write path, called RECEIVEFILE > in the Samba 3.2.x code. It's already coded up in userspace, > just waiting the kernel counterpart :-). If there's no kernel > receivefile() call then it emulates this in userspace. > > Try plumbing in the Linux splice() system call (this is > already coded up in Samba, awaiting working kernel support). > > Jeremy. _ 聰明搜尋和瀏覽網路的免費工具列 — MSN 搜尋工具列 http://toolbar.live.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba write performance in kernel
hi, I would like to know is it possible to make writing file to samba completely in kernel? I'm using a slow CPU (FA526) , and the memory copy is even slower. The reading performance is over 7 MB/s, with mmap and sendfile enabled, while writing is only 4-5 MB/s. Without mmap and sendfile, reading from samba is also about 4-5 MB/s. I use Oprofile to profile writing file to samba and found that CPU takes over 30% CPU time on copy_from/to_user, so I think going to user space and back again is the bottleneck. Since there is sendfile, why is'nt there counterpart on write path? Is there some difficalties or what? Is it implementable? Please give me some advice. Best Regards, Mac Lin _ 聰明搜尋和瀏覽網路的免費工具列 — MSN 搜尋工具列 http://toolbar.live.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] msdfs root / directory structure.
>From: "John Drescher" <[EMAIL PROTECTED]> >To: "Samba Maillist" >Subject: [Samba] msdfs root / directory structure. > >>From the docs I do not see a mention of this and in the past it did >not work for me however with samba-3.0.28 it appears to be working. I've done this for a few years with various versions of Samba 3, never noticed it it not working. >Is this guaranteed to work? Known limitations? I am interested in XP, >win2k3 and possibly linux cifs clients in the future. We're mostly an XP shop (for desktop) and it seems to behave itself. The usual DFS problems can occur, but the extra levels of sub-directories don't cause extra problems. The other thing that Samba can do that I've not seen Windows Server do is allow you to have multiple shares, each set up as a DFS root. So we have (something like) :- \\net \user \homes \mydocs \shares \finance \budgets \admin \meetings \it \devel-team \support-desk \software \microsoft \office \visio \adobe \reader8 \illustrator where 'net' is in fact a NetBios alias. 'user', 'shares', and 'software' are three different Samba shares, each with DFS turned on. (i.e. DFS roots) 'homes','mydocs','finance' etc. are all normal subdirectories. 'budgets','meetings','office' etc are the DFS (sym-)links. Works nicely for us. (and somewhere we have a script to build the whole 'shares' tree by parsing smb.conf files from across the whole site) Mac Assistant Systems Administrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Trailing backslash issue with Windows Shares
Hi there, >> I have Samba 3.0.25b running as a PDC. When opening a share on a >> Windows member server from an XP/Vista client, if I add a trailing >> backslash after a share name (e.g. \\WIN-SERVER\C$\) then an explorer >> windows appears immediately and correctly contains the share. Without >> the backslash (e.g. \\WIN-SERVER\C$) I have observed delays of up to >> 20 seconds. I have msdfs root = yes in my smb.conf. Is this a known >> problem ? > >Yeah, known bug someone reported - will be fixed for 3.0.25c. Whilst looking at other things, we've seen Wireshark traces where the client appears to ask for:- \\server\shar before actually asking for \\server\share Could this be the same issue ? Mac Assistant Systems Administrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: What are my smbd's doing ? (was Re: [Samba] secrets.tdb locking
>On Mon, Jul 23, 2007 at 06:01:06PM +0100, Mac wrote: >> >On one previous occasion, the whole thing seemed to grind to a virtual >> >halt, and we suspected (but couldn't prove) that a locking battle over >> >(something like) secrets.tdb was to blame. > >Can you just start winbind on that box? No libnss_winbind or >winbind entries in /etc/nsswitch.conf necessary. Just start >it, winbind then should proxy access to the DC's and give >some relief on the mutex for the DC. We already do. (it's in the init.d script, so it's automatic as well) # ps -ef | grep winbind root 24365 24364 1 09:11:55 ?1:46 /usr/local/samba/sbin/winbindd -D root 24366 24364 1 09:11:56 ?0:56 /usr/local/samba/sbin/winbindd -D root 2963 24364 0 09:58:14 ?0:00 /usr/local/samba/sbin/winbindd -D root 24364 1 3 09:11:55 ?6:38 /usr/local/samba/sbin/winbindd -D root 4233 28012 0 10:10:13 pts/20:00 grep winbind I've just briefly upped the debug level to '3' (smbcontrol winbindd debug 3). and there's nothing unusual looking there. e.g.:- [2007/07/24 10:15:25, 3, pid=24364] nsswitch/winbindd_sid.c:winbindd_gid_to_sid(477) [ 4346]: gid to sid 130 [2007/07/24 10:15:25, 3, pid=24364] nsswitch/winbindd_sid.c:winbindd_lookupname(103) [24366]: lookupname AD\Bacteriology [2007/07/24 10:15:25, 3, pid=24364] nsswitch/winbindd_sid.c:winbindd_gid_to_sid(477) [ 4346]: gid to sid 130 [2007/07/24 10:15:25, 3, pid=24364] nsswitch/winbindd_sid.c:winbindd_lookupname(103) [24366]: lookupname AD\Bacteriology I'm now confused. I thought 'smbd' did all its own lookups withthe DCs. Should they in fact not be? Should winbindd be doing it ? How do we tell 'smbd' to use 'winbindd' ? Mac Assistant Systems Administrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: What are my smbd's doing ? (was Re: [Samba] secrets.tdb locking fun!)
Greetings once again, > We're still suffering here with odd performance issues on our >Samba 3.0.24 install here on our big chunky Solaris 9 box. Still suffering, although we're now running 3.0.25b (krb5 v1.6) >The user perceived issue is slow performance (whilst browsing in Windows >Explorer, or opening files from within applications etc.etc.) Where slow = (apparently) stopped. Things do complete, but only if huge patience is applied. >The obvious symptom on the server is a collection of smbd's at the top >of the 'top' listing. 4 or 5 or so taking 25% or so of CPU each. One less obvious symptom is that the number of smbd processes is way in excess of the number of smb sessions. ps -ef | grep smbd | wc -l 1440 smbstatus -p | wc -l 101 This is not normal on our system. Also, at least one client started accumulating TCP connections in the FIN_WAIT_2 state. (The connection were to port 445 on the Samba server in question) >On one previous occasion, the whole thing seemed to grind to a virtual >halt, and we suspected (but couldn't prove) that a locking battle over >(something like) secrets.tdb was to blame. This still seems to be in there somewhere. I'm coding tonight an automated 'gdb bt' of all smbd processes. We'll run it next time it happens. Mac Assistant Systems Administrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: What are my smbd's doing ? (was Re: [Samba] secrets.tdb locking fun!)
James R Grinter wrote:- > >On Fri, Jul 13, 2007 at 09:39:37AM +0100, Mac wrote: >> On one previous occasion, the whole thing seemed to grind to a virtual >> halt, and we suspected (but couldn't prove) that a locking battle over >> (something like) secrets.tdb was to blame. > >(I recognise that symptom, see below) > >> Something that stands out is a huge ammount of time (1.9 - 2.0 seconds) >> spent reading a file in /var/tmp (/var/tmp/firesun1_044_0). This seems >> to happen quite often (maybe every few seconds). This file isn't terribly >> (human) readable, and I don't recall Samba ever having needed >> a temp file outside of 'var/locks'. > >that's not one I recognise. Closer inspection of the 'truss' output reveals that each process, having 'read' its way through the entire file, then writes 81 (ish) bytes out to the end of the file. These bytes look a bit like a machine trust account name. Here's an extract from the 'truss' output. write(29, "\0\0\018 g k m t x 2 j $".., 81) = 81 fdsync(29, O_RDONLY|O_SYNC) = 0 Repeated 'ls -l' of the file in /var/tmp reveals that it both shrinks and grows over time. >Try running 'smbd -b' to look at the build paths in your binary (I'm >assuming it's one you've built in-house, but it may be worthwhile >checking anyway, to see if anything with /var/tmp shows up, or even to >make sure that you're running the build of the binary that you think >you should be running. There's nothing like that path on my >3.0.25-running or earlier systems.) Me either. No sign of 'var' or 'var/tmp' anywhere (except '/var/adm/utmp') in any of the binaries we compiled. I'm guessing it is picking up an Environment variable? Or there's some kernel system call that made this file (a bit like 'mktemp'). >We had problems with large amounts of fcntl locking on Solaris 8, which >create exactly the sort of 'virtual halt' that you describe and >undoubtedly that bug is in earlier Solaris 9 kernels too (bug 4735093 >and 2057706. A quick check on Sunsolve suggests it was fixed in >112233-04 for SunOS 5.9/sparc.) We're currently running 112233-12, so I don't think that's likely to be our issue. Mac Assistant Systems Administrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
What are my smbd's doing ? (was Re: [Samba] secrets.tdb locking fun!)
Hi all, We're still suffering here with odd performance issues on our Samba 3.0.24 install here on our big chunky Solaris 9 box. The user perceived issue is slow performance (whilst browsing in Windows Explorer, or opening files from within applications etc.etc.) The obvious symptom on the server is a collection of smbd's at the top of the 'top' listing. 4 or 5 or so taking 25% or so of CPU each. On one previous occasion, the whole thing seemed to grind to a virtual halt, and we suspected (but couldn't prove) that a locking battle over (something like) secrets.tdb was to blame. gdb backtraces of the processes at the top of 'top' all show the processes are in a 'select' call looking for all the world as if they're just idly waiting for the next SMB event to occur. (given the the gdb backtrace is snapshot, I'm not too surprised by this) Possibly more useful is the 'truss' output we can obtain from these running processes. (a log of every system call, in effect) Something that stands out is a huge ammount of time (1.9 - 2.0 seconds) spent reading a file in /var/tmp (/var/tmp/firesun1_044_0). This seems to happen quite often (maybe every few seconds). This file isn't terribly (human) readable, and I don't recall Samba ever having needed a temp file outside of 'var/locks'. The file looks like this:- -rw--- 1 root root 165125 Jul 13 09:33 firesun1-044_0 (firesun1 is the name of the server) It seems to contain a whole load of odd-looking machine trust account names (in amongst less readable stuff). Does anyone know what this file is supposed to be doing? Could this be the cause of our trouble ? Why does it take _so_ long to read this file? Why is it being read so often? Mac Assistant Systems Administrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] secrets.tdb locking fun!
Hi all, It seems to have happened again. Here's some sample log entries:- [2007/07/06 14:24:33, 1, pid=6128] smbd/service.c:make_connection_snum(950) 212.219.219.243 (212.219.219.243) connect to service favorites initially as user tjowett (uid=1860, gid=270) (pid 6128) [2007/07/06 14:24:33, 0, pid=3074] tdb/tdbutil.c:tdb_log(783) tdb(/usr/local/samba/private/secrets.tdb): tdb_lock failed on list 2 ltype=2 (Interrupted system call) [2007/07/06 14:24:33, 0, pid=3074] tdb/tdbutil.c:tdb_chainlock_with_timeout_internal(82) tdb_chainlock_with_timeout_internal: alarm (10) timed out for key replay cache mutex in tdb /usr/local/samba/private/secrets.tdb [2007/07/06 14:24:33, 1, pid=3074] libads/kerberos_verify.c:ads_verify_ticket(357) ads_verify_ticket: unable to protect replay cache with mutex. [2007/07/06 14:24:33, 1, pid=3074] smbd/sesssetup.c:reply_spnego_kerberos(202) Failed to verify incoming ticket! >I mean the one in the non-TERM'able state. That's the one that's >blocking the others. We've used a 'pkill -TERM' to try and track down the "wedged" process. Last time this occured two processes did not die after a SIGTERM. We suspected one of them of being the culprit. Not entirely sure that we've succeeded this time. The process that (appeared) not to have died with '-TERM' had a stack backtrace of :- (gdb) bt #0 0x00078760 in get_valid_user_struct () #1 0x00078c0c in invalidate_vuid () #2 0x00078f34 in invalidate_all_vuids () #3 0x004a1868 in exit_server_common () #4 0x004a1dc0 in exit_server_cleanly () #5 0x00123c2c in async_processing () #6 0x001244ec in receive_message_or_smb () #7 0x00127d04 in smbd_process () #8 0x004a306c in main () (gdb) detach Detaching from program: /usr/local/samba/3.0.24/sbin/smbd process 17813 (gdb) quit But by the time we'd exited gdb and had a further look around, the process (17813) appeared to have exited cleanly (with no need for a '-KILL'). This was not the observed behaviour last time. We're working on scripting the 'gdb bt' so that we can run it across all the smbd processes, when this next happens. We're also trying to work out if we can (sanely) use truss (or similar) to track what on earth is going on. Mac Assistant Systems Administrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] secrets.tdb locking fun!
Hi there, >Date: Fri, 15 Jun 2007 10:32:50 -0700 >From: Jeremy Allison <[EMAIL PROTECTED]> >To: Mac <[EMAIL PROTECTED]> >Cc: [EMAIL PROTECTED] >Subject: Re: [Samba] secrets.tdb locking fun! >> >> [2007/06/15 13:02:20, 0, pid=5430] tdb/tdbutil.c:tdb_log(783) >> tdb(/usr/local/samba/private/secrets.tdb): tdb_lock failed on list 2 >> ltype=2 (Interrupted system call) >> [2007/06/15 13:02:20, 0, pid=5430] >> tdb/tdbutil.c:tdb_chainlock_with_timeout_internal(82) >> tdb_chainlock_with_timeout_internal: alarm (10) timed out for key replay >> cache mutex in tdb /usr/local/samba/private/secrets.tdb >> >If you get an smbd in that state, can you attach to it with gdb and >get a stack backtrace so we can see where it was ? We'll certainly have a go for you. I assume you mean the 'smbd' that has got wedged (non "TERM"-able). Or do you mean the still running ones (i.e the ones that are getting the 'tdb' errors.) (and yes, the very astute of you will have noticed that the code fragment I mentioned came from 3.0.25, but the log file entries are 3.0.24... We'll move to 3.0.25 when 'b' comes out). Mac Assistant Systems Administrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] secrets.tdb locking fun!
Hi all, After much grief today, we'd like to support the 'TODO' note in source/lib/util_tdb.c :- /* TODO: If we time out waiting for a lock, it might * be nice to use F_GETLK to get the pid of the * process currently holding the lock and print that * as part of the debugging message. -- mbp */ It could have saved us a whole-sale restart of Samba if we could have more easily identified the process that was causing us to get loads and loads of:- [2007/06/15 13:02:20, 0, pid=5430] tdb/tdbutil.c:tdb_log(783) tdb(/usr/local/samba/private/secrets.tdb): tdb_lock failed on list 2 ltype=2 (Interrupted system call) [2007/06/15 13:02:20, 0, pid=5430] tdb/tdbutil.c:tdb_chainlock_with_timeout_internal(82) tdb_chainlock_with_timeout_internal: alarm (10) timed out for key replay cache mutex in tdb /usr/local/samba/private/secrets.tdb We believe we did find it, but only by sending a SIGTERM to all 'smbd' processes and being left with 'smbd' proceses that didn't die. (SIGKILL did remove them). Mac Assistant Systems Administrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] No 'user' in authentication process. only guest access
Hi all, We've recently upgraded our main production Samba server (Solaris 9) to 3.0.24 (compiled from source) We're now getting a spate of problesm which look like:- [2007/03/19 12:02:11, 3, pid=436] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(691) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2007/03/19 12:02:11, 3, pid=436] libsmb/ntlmssp.c:ntlmssp_server_auth(672) Got user=[] domain=[] workstation=[68S7C1J] len1=1 len2=0 the transaction then goes onwards to contact the DC (seemingly OKay) and produces [2007/03/19 12:02:16, 3, pid=436] auth/auth.c:check_ntlm_password(270) check_ntlm_password: guest authentication for user [] succeeded Not really surprising that it's authenticated user '' as guest. but not helpful either. I don't know for certain that this is the first event in the chain, I only turned debugging up on one smbd process after the problem became apparent. It's not happening on all connections, nor to all users. We're looking at generating a level 10 log of the issue, but it's time for lunch just now and I'm starving. I couldn't find anything like this elsewhere. Mac Assistant Systems Administrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] CUPS errors when not using CUPS - Breaks printing
>Any attempt to connect to a printer (e.g. Start|Run|\\server\printer ) >results in an XP error message 'Incorrect Function'. > We believe (as best as we can tell) that this _has_ worked on 3.0.24 (since we upgraded from 3.0.22) Can anyoune suggest what we need to do to make this work? We think it would involve telling Samba not to even bother looking for CUPS like services in the first place. Mac Assistant Systems Administrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] CUPS errors when not using CUPS - Breaks printing
Hi All, We appear to have a CUPS problem that is breaking our (LPRng) based printing. We now have loads of errors of the form:_ [2007/03/08 12:21:36, 0, pid=23877] printing/print_cups.c:cups_cache_reload(85) Unable to connect to CUPS server localhost - Connection refused filling up the log.smbd file We using printing=lprng in smb.conf, and there isn't (nor has there ever been) any CUPS on the server. Any attempt to connect to a printer (e.g. Start|Run|\\server\printer ) results in an XP error message 'Incorrect Function'. This is Samba 3.0.24 compiled from source on Solaris 9. Mac Assistant Systems Administrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] password alignment with /etc/passwd
>Subject: Re: [Samba] password alignment with /etc/passwd >From: simo <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Date: Wed, 28 Feb 2007 14:26:25 -0500 >> >> HmmmI can't believe this. Let's consider the case that you have a >> network with NFS/NIS Installation and Linux only clients and about 100 >> users. Now I want to add just one...only one windows box...and it should And another possible way to populate the smbpasdswd(5) file is by using:- update encrypted = yes option in smb.conf(5). You would still need to do the (previously mentioned) enabling of plain-text passwords on the Windows PC (and also use 'encrypted passwords=no', naturally). The advantage of this approach is that you will, after a time, have captured the SMB version of your users' passwords, and you can then remove the 'plain-text enable' from the Windows box, turn off 'update encrypted' and and turn 'encrypt passwords' back on. Think of it as a migration strategy. Mac Assistant Systems Administrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Cannot change case of existing file names
>Date: Tue, 06 Feb 2007 12:15:49 -0600 >From: Jordan Russell <[EMAIL PROTECTED]> >To: Michael Gasch <[EMAIL PROTECTED]> > >Note that I am able to create new files with all-lowercase letters. I >just can't rename an existing "FILE.txt" to "file.txt". >From what client? MS Windows doesn't distinguish between those two names, so it won't let you perform the re-name as it thinks you're not changing the name. You can do it in Windows as a two-step process:- Rename FILE.txt to anything.txt Rename anything.txt to file.txt Oh the joys of Windows. Mac Assistant Systems Administrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Joining XP SP2 to a Samba PDC
Dont know if the typo was only in your email but you have [global] workgroup = ETNET in your smb.conf and then tried to join I change from workgroup: workgroup to Domain:ETINET Good luck Manannan From: DSanchez <[EMAIL PROTECTED]> To: samba@lists.samba.org Subject: [Samba] Joining XP SP2 to a Samba PDC Date: Wed, 10 Aug 2005 09:51:28 -0700 Hello and Thanks in advance. I have a CentOS 4.1 Server and i have samba Version 3.0.10-1.4E I have 2 users on this server right now: Root, Dsanchez. I have also issued this command to set up these 2 users on the Samba Server as well. smbpasswd -a root smbpasswd -a dsanchez and i set up the password to match the linux account. Here is my SMB.conf file: # Global parameters [global] workgroup = ETNET server string = Samba PDC Server passwd program = /usr/bin/passwd %u passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* unix password sync = Yes log file = /var/log/samba/%m.log max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 printcap name = /etc/printcap add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u add machine script = /usr/sbin/useradd -c Machine -d /dev/null -s /bin/false machine_name$ domain logons = Yes os level = 65 preferred master = Yes domain master = Yes dns proxy = No idmap uid = 16777216-33554431 idmap gid = 16777216-33554431 hosts allow = 10.78., 127. cups options = raw [homes] comment = Home Directories read only = No browseable = No [netlogon] comment = Network Logon Service path = /home/netlogon guest ok = Yes share modes = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No I have also made the following changes to the XP box. Registry changes: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters\Requiresignorseal Which i set to '0' from '1' I have made sure the following in Local Security Policy is set: I edited or checked the following entries: "Domain member: Digitally encrypt or sign secure channel(Disabled)" "Domain member: Disable machine account password changes(Disabled)." "Domain member: Require strong (Windows 2000 or later) session key(Disabled)" Then i go to the Systems Properties/computer name change/ I change from workgroup: workgroup to Domain:ETINET Then i click the 'ok' button, and a login window pops up. I then use the following usernames to 'Join' root admin administrator dsanchez etinet\root etinet\admin etinet\administrator etinet\dsanchez I get the following error when i try to join as: administrator admin etinet\admin etinet\administrator The following error occurred attempting to join the domain "ETINET": Logon Failure: Unknown Username or bad password. When i try using the following this is what i get: root etinet\root The following error occurred attempting to join the domain "ETINET": The username could not be found. Then, if i try and use my account, whcih i added to the root group. Dsanchez etinet\Dsanchez The following error occurred attempting to join the domain "ETINET": Access is Denied. Note, this is an XP SP2 Machine and i only have 1 user on this machine (Dsanchez) Also, I did find that this script add machine script = /usr/sbin/useradd -d /dev/null -g 102 -s /bin/false has a group of 102 and the machine log file that was in /var/log/samba/.log had this error in it. useradd: unknown group 102 however i do have this script in the smb.conf file. add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u So do i need both of these lines? do i need to make a group with the Gid of 102? Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba _ It's fast, it's easy and it's free. Get MSN Messenger 7.0 today! http://messenger.msn.co.uk -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] File locks db (manually removing locks)
>Is there any utility to manually manipulate the db file these locks are >stored in; or will simply deleting the db file after stopping all samba >processes, allow the new instance to create a fresh (empty) database? - How >do we remove the locks marked as present which really aren't? Why would you want to? What problems do they cause (other than making 'smbstatus' output look untidy? Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] last file missing from wildcard searches (3.0.13)
>Hi all, > > We're at the preliminary stages of investigating this, but I >can't find any references to it on a Google etc. Of course I should have checked bugzilla too! :-) This looks exactly like bug 2452. We can only add that the problem isn't in 3.0.6 and we'd very much like it fixed. We're currently creating testcases all over the place, and we have level 10 debug logs of failure. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] last file missing from wildcard searches (3.0.13)
Hi all, We're at the preliminary stages of investigating this, but I can't find any references to it on a Google etc. Anyway. We've just moved from 3.0.6 to 3.0.13 and users report a file being missing. On investigation it turns out that (as far as we could tell in a 5 minute minor panic) the last file in a directory is not included in a wildcard search. (last file is defined by 'ls -f'). Naming the file explicitly is not affected, but any wildcard (such as 'ls' or 'ls *B' fails to find the file. This behaviour is consistent with both Win XP SP1 and smbclient We're continuing to investigate, and when we've got the minimal reproducible test cvase, we'll file a bugzilla report, but I just wanted to flag this up here and now. We've rolled back to 3.0.6 for now. IRIX 6.5.5, Samba 3.0.6 with quotas support compiled in. All compiled from source. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Samba as PDC - Can't get user profiles to save properly
>Date: Tue, 19 Oct 2004 08:21:36 +0200
>From: Felix Knoblach <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: [Samba] Re: Samba as PDC - Can't get user profiles to save properly
>
>Hi,
>
>I'm still sitting fighting with this problem here I mentioned a little
>while ago.
>
>>
>> I'm running desperate on a problem with my windows user profiles here,
>> searched the net and read the docus alot but still no luck.
>>
>> I've got an running Samba domain, an existing windows 2000 machine can
>> log into the domain properly. Furthermore, a test account is made
>> aswell, and the 2k machine is able to log in with that account. Now, my
>> problem is: When I try to change windows settings (like switch active
>> desktop to "on") or delete/rename icons from my desktop, log out and in
>> again, all changes are undone like they've been not saved on the server.
>> But if I create new icons on the desktop and relog, those are still there.
>>
This doesn't sound quite like the problem I had, but it's work checking.
This all starts here:-
http://lists.samba.org/archive/samba/2004-April/084023.html
and ends here:-
http://lists.samba.org/archive/samba/2004-September/092379.html
and basically it's to do with a bug in the Nvidia Display Driver
Service. You can either disable the service ('startup - Manual') or
upgrade the drivers to a version with the fix in them.
If this issue doesn't affect you, then I'm sorry.
Mac
Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] change password AS_ROOT=FALSE
>rick talbot wrote: > >| passwd program = passwd %u >| passwd chat = *old*password*%o\n *new*password*%n\n *new*password*%n\n * >| passwd chat debug = true >| unix password sync = yes >| >| >| Doing it this way forces samba to change it as root, and >| this is giving me another problem. > >The old password is not available (i don't know why we even have >the %o variable there). So root pw change sis really the >only viaable option I can think of. > %o works fine when you're not using encrypted passwords. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Fwd: Re: [Samba] Intermittent "Network name cannot be found" error
> >Hi guys, > >Unfortunately I've still made no progress on this. >Is disabling the roaming profile permission checking in XP the only way >to fix this ? >Will any future versions of Samba have something that we can do in Samba >on the server side to work around this ? > Have you tried the setting called:- profile acls Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Timestamp problem
>
>Hi
>
>When new files or copied files are putted in a Samba share (3.0.2
>Solaris) from Win clients, it has no time stamp, only date stamp,
>example:
>
>-rwxr--r-- 1 me me 740762 Oct 11 2004 test.jpg
This looks like an 'ls' command.
Also, you have a slight misunderstanding of UNIX timestamps.
Every file has a full time stamp with time and date. However,
the 'ls' command shows the time stamp in one of two different ways:-
either 'Mon DD ' or 'Mon DD HH:MM'
It chooses the second form if the file has been modified within
the last three months. It chooses the first form (with the year)
if the file's modification time is not within the last three months.
The important thing here is that when the time stamp on a file is _ahead_
of the current time, then the 'within the last three months' test fails.
I'll bet that you file has a timestamp that's further ahead in time than
the system clock of the server you ran the 'ls' command on.
Here's a rough timeline ('the past' on the left, 'the future' on the right)
<+++N->
321o
w
|--|
The number represent months. The lower line is the period for which
'ls' will display the 'Mon DD HH:MM' format. I think the timestamp
on your file is to the right of 'Now'.
There's various things you can do to check this. If your OS has
a command 'stat' then that will show you all the timestamps in full detail.
Or you can use the 'stat' function in perl maybe, or the stat(2) system call.
Or, you can wait for a few hours, until the time on your server "catches up"
with the timestamp on the file and then 'ls' will display what you're
looking for.
Remember all of this does not in any way affect the actual timestamp,
just the way 'ls' presents it to you.
The underlying problme is almost certainly one of time-syncing. Or TimeZone
differences. Have a look at all of them. And have a look at the timestamp
from a client machine too.
Mac
Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] XP + SP2 + DFS + netbios alias = not working
Hi all, I'm using Samba 3.0.6 (on IRIX 6.5). This is just a 'let you know what I've discovered' message really. I've just installed upgrade a laptop here to SP2 of Windows XP. It then started failing to make network connections. After much fiddling about, I tracked it down to DFS shares. This PC can now connect to the DFS root OKay, but doesn't recognise the entries in it as DFS 'pointers'. (Right-click, Properties on a DFS link would normally show the Target in a 'DFS' tab on the Properties dialog). Even more fiddling about proved that it was only when I accessed the Samba server by using a 'netbios alias' (as configured in the smb.conf) i.e. \\net\user\filesdidn't work (not recognised as DFS) but \\oxysig\user\files works fine (server's netbios name is 'oxysig', and 'net' is one (of several) netbios aliases) This laptop connected very happily to the DFS shares before SP2, and my dekstop machine (still SP1) connects happily too. As a workaround I've set 'smb ports = 139' which seems to solve the problem. I've found very few references to post-SP2 problems with DFS. The one I did find (MS article KB884020) isn't relevant as the shares aren't on the client. Another article [1] mentioned setting "EnableDfsLoopbackTargets"=dword:0001 in the registry. This seemed to make no difference to my situation, but again I think that's because the shares aren't on the client. I'm not really looking for a solution here. And I've no idea whether this is a Samba-specific problem. If anyone has any insights, or would like more info, I can generate log files and packet captures if that would help. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Using parameters in lpq command conflicts with background
Hi Jerry, (and rest of list) > >I have an application than makes use of the "lpq command" and uses the >%U parameter in the command string. The application returns a >personalized queue list based on the value of %U. This technique worked >well in older versions of Samba (circa RedHat 8), but I have run into >some trouble with Samba 3. The issue appears to be twofold. > >1) The lpq command is now run from the background lpq monitoring >process, which does not have a "user" (%U) per-se associated with it. > >2) The background lpq process maintains its cache(s) based on the >service name. IIRC, the older caching system maintained a cache for >each unique "lpq command" line. Indeed it did. In fact the whole (tdb-based) lpq monitoring system has a whole heap of changes from previous Samba versions (we jumped from 1.9.18p8 to 3.0.6) and all sorts of strange things happen now. > >I've temporarily solved the problem by running smbd from inetd - this >prevents the background lpq process from running and causes each user's >process to invoke their own lpq command (complete with %U substitution). Fab! Thanks for finding this workaround. I'll give it a shot. > >Would it be possible to update the background lpq code to use the (fully >substituted) lpq command as the cache identifier instead of (or in >addition to) the service name? My application aside, I think it would >be best if Samba's behavior was consistent in both daemon and non-daemon >modes. I'd be willing to lend my mediocre programming skills to the >task if it would help. I agree about the damon vs. non-daemon mode, very odd that the behaviour is inconsistent. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Printing woes (Driver uploading, and .tdb annoyances)
Hi all, I'm running 3.0.6 on IRIX 6.5 (compiled from sources) Runs fine for almost all purposes. But I thought I'd have a look at the extra Samba-3 printing facilites today, and they've thrown up some real issues. 1st point. I still haven't managed to get to the bottom of this one, but I can't always add a printer drive to a Samba-served printer. I've been following Chapter 17 of the HOW-TO-Collection [1] and made some progress. However it looks like there's an issue with installing drivers on a printer that is't explicitly listed in smb.conf. The symptom I get is that some printers can have drivers added to them, and some can't. And some of those that can it doesn't "stick". It _looks_ like it's worked, and then when you go onto the next step (First client connection) the driver's not there! The uploading seems OKay, files appear in the [print$] share and ntdrivers.tdb gets changed. ntprinters.tdb doesn't though. 2nd point. Hmmm. All those TDB files in var/locks/printing. Seem like a pile of uselessness to me. What is the way to get them to _accurately- reflect the state of the underlying UNIX printer queue? They only seem to be interested in jobs that have passed through Samba, what about all the others? Even stopping smbd, deleting the printing/*.tdb files and restarting smbd doesn't do it. Help! (and why???) I'm sorry if this seems like of a rant than a proper mail. I can only say in my defence that I've been at this desk for 12 hours so far today. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) [1] http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/printing.html -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can't delete smbpasswd user if not in /etc/passwd
>On Thursday 23 September 2004 03:25, Alex Forrow wrote:
>> Seems shody but cant you just add the user again to /etc/passwd. Then
>> delete both.
>
>Or manually remove a line from smbpasswd file...
This is an automated system. Doing it manually would completely defeat
the whole point.
And more-over this is a change from the way Samba has previously worked.
I'm about to file a bug.
Mac
Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can't delete smbpasswd user if not in /etc/passwd
>On Thursday 23 September 2004 03:25, Alex Forrow wrote: > Seems shody but cant you just add the user again to /etc/passwd. Then > delete both. Nope. The account management is driven by the NIS side of things. Any changes that happen to NIS are then copied into smbpasswd. The whole system is automated. By the time it gets to the 'deleting SMB user' phase the NIS account is already long gone. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can't delete smbpasswd user if not in /etc/passwd
> > Looking for a solution to the following:- > ># smbpasswd -x jh--- >build_sam_account: smbpasswd database is corrupt! username jh--- with uid 1774 is >not in unix passwd database! >Failed to initialise SAM_ACCOUNT for user jh---. Does this user exist in the UNIX >password database ? >Failed to modify password entry for user jh--- ># > > >Ths user has already been deleted from the /etc/passwd (in fact NIS >passwd), so all we're trying to do is to remove them from smbpasswd too. > >Seems an odd requirement that a user one is trying to delete has to >exist in UNIX passwd! > Sorry, should have said. Samba 3.0.6 on IRIX 6.5. Compiled from sources. I didn't see anything about this is the 3.0.7 'What's New'. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Can't delete smbpasswd user if not in /etc/passwd
Hi all,
Looking for a solution to the following:-
# smbpasswd -x jh---
build_sam_account: smbpasswd database is corrupt! username jh--- with uid 1774 is not
in unix passwd database!
Failed to initialise SAM_ACCOUNT for user jh---. Does this user exist in the UNIX
password database ?
Failed to modify password entry for user jh---
#
Ths user has already been deleted from the /etc/passwd (in fact NIS
passwd), so all we're trying to do is to remove them from smbpasswd too.
Seems an odd requirement that a user one is trying to delete has to
exist in UNIX passwd!
Any ideas?
Mac
Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] force user problem
> >I have samba 3.0.4 set up as a PDC and have a problem with using "force user" > with thie following share: > >[shared] > path = /usr/local/samba/shared > write list = usera, userb, userc > force user = usera > guest ok = true > >If I try to write a file from an XP system as usera I get an "Access is denied" >failure. If I take out the "force user" line there is no problem! There's a known bug in Samba using 'write list' and 'force user'. See :- http://us4.samba.org/samba/ftp/WHATSNEW-3-0-7.txt (the section for 3.0.6) So you need to upgrade. And you should jump directly to 3.0.7 to get rid of the vulnerability recently fixed. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SOLVED: Roaming profiles not updating XP
Hi all, I originally sent this message about a month ago, but it never made it to the mailing list, so here it is again. There's an update at the end too! [I've removed the typos from the August version] Subject: Re: [Samba] SOLVED: Roaming profiles not updating XP Date: Wed, 11 Aug 2004 17:09:22 +0100 (BST) From: Mac <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Cc: <[EMAIL PROTECTED]> (Jon Noren) [EMAIL PROTECTED] (Campbell March) [EMAIL PROTECTED] (Brandon Franzke) <[EMAIL PROTECTED]> (Caitiff) <[EMAIL PROTECTED]> (Poulet Fabrice) <[EMAIL PROTECTED]> (Cory Verellen) <[EMAIL PROTECTED]> (Matt Wilson) <[EMAIL PROTECTED]> (Campbell March) Hi all, They say it's bad form to follow up to one's own post, but I don't care. I've had a rather odd email today. It's private correspondence, so I'm not able to post it here yet, but it looks to me like Nvidia think they've solved the problem. To recap: (for those of you to whom this new) Back in April (2004) there was this post:- http://lists.samba.org/archive/samba/2004-April/084023.html by Brandon Franzke about Windows XP profiles not saving. It turned out that the saving of Roaming Profiles to a server (_any_ server) was silently stopped by the Nvidida Display Manager service, that was part of the drivers around version 5.3.0.3 upwards. If this sounds odd to you, then you'd be right. It's very odd. We here at NIBSC also hit that problem, as did everyone else in the Cc: list of this message. My original post is here:- http://lists.samba.org/archive/samba/2004-April/085183.html The e-mail I received this morning had that URL as its subject. Its body was only two lines long and indicates that, subsequent to version 5.6.7.2 of the Nvidia drivers, the problem was fixed. In particular, the 61 versions do not have the problem. I've looked at the Nvidia web site, and there is indeed a new version of the drivers available (http://www.nvidia.com/object/winxp_2k_61.77). The release notes do not make any mention (that I can see) of this bug being present or having been fixed. Anyway, I suspect that this really has been fixed. I don't have the time right now to sit down and properly test this, but I don't think anyone else received this mail. The final line of the email apologised for the inconvenience. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) September Update! I've received (from Matt Wilson) confirmation that this update _does_ solve the Roaming Profiles problem. So my odd email appears to have been genuine. Anyway, this whole matter can now be laid to rest. Hurrah! Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] open_sockets_smbd: accept: Software caused connection abort
Hi Steve,
>
>Sorry if this is an FAQ...I have seen reports of this problem on several
>mailing lists, but never a solution.
>
>I have used Samba on Solaris for years, currently 2.2.1 on Solaris
>9. Trying to upgrade to 3.0.6, with no luck on 2 different Solaris 9
>systems. It compiles and installs OK, but clients can't connect. Not only
>Win2k and XP PC's, but smbclient -L on the same machine can't connect. For
>each failed attempt, log.smbd says:
Have you read all the release notes for all the intervening versions?
>
>[2004/08/25 02:51:48, 0] smbd/server.c:open_sockets_smbd(383)
> open_sockets_smbd: accept: Software caused connection abort
Oh dear.
>
>One more weirdness: each time a client fails to connect (as above), samba
>X's out the encrypted password for that user in my smbpasswd file.
>
Ah ha!
Somewhere in the 3.x release series security was tightened up. I'll bet
that the LCT for each of your users is 00. When Samba 3.0.6 finds
such an entry, it disables the user and wipes both their passwords.
I wrote the following one-liner:-
awk -F: '$3 !~ /XX/ && $6=="LCT-" {print $1 ":" $2 ":" $3 ":" $4 ":" $5
":LCT-0010:"; next } {print }' smbpasswd.back | wc -l > smbpasswd.LCT
which searched through my backup copy of the smbpasswd file and changed
the LCT.
The samba doco is at :-
http://us4.samba.org/samba/ftp/WHATSNEW-3-0-6.txt
under "3.0.2" and "3.0.2a".
As I read it, the 3.0.2 release notes didn't make it anything like clear
enough how the security fix was implemented, and it was brutal. The
3.0.2a release notes are not much better. (They say that authentication
will fail, they don't say that the password will be wiped by smbd)
How did you get a load of LCT's that were 0?
Mac
Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] VSS and Samba on Tru64 Unix
Hi there, > All users >in a defined unix group should be able to copy, edit, and delete any >file created by any other user in that group. > >As most of you probably already know, this works fine if the user >checking the file out is the same as the user checking it in. But if >the user trying to check out a file is not the original user (ie. the >unix user-owner) of the file, VSS dies, since it can't remove the >windows READ attribute from the file in question. > I don't know which version it was introduced in, ut have a look at the option 'dos filemode'. I think it will do what you want. http://www.samba.org/samba/docs/man/smb.conf.5.html#DOSFILEMODE Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Getting netbios alias to work
Hi all, >To: [EMAIL PROTECTED] >From: Michael Lueck <[EMAIL PROTECTED]> >Date: Tue, 24 Aug 2004 08:42:33 -0400 > >Windows Clients / Servers do not allow you to NET USE to an alias, only the >real computer name or IP address. I mentioned that a while ago on this > list... don't remember ever seeing a response to >clarify that is also the expected behavior. This is simply not true. I can use:- NET USE * \\origin\sites or NET USE * \\origine\sites to connect from my Windows XP (SP1) computer to my Samba server. The first is the real name (DNS name, and NetBIOS name). The second is a NetBIOS alias. No DNS. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba unix password sync
Hi there, >I know I had posted this question a while ago, but I have just not been >able to get it to work. I am trying to sync samba passwords with unix >passwords and it is just not working. I have attached the >results of > >If anyone can provide any suggestions that would help me solve my >problem I would highly appreciative. If I run smbpasswd through ssh or >even at a local terminal, I get the error "RAP86" saying that the >password is invalid. RAP86 is the general purpose 'it didn't work' error message. It doesn't necessarily mean that any particluar password is invalid. It's just that you're dealing with account-names and passwords, so the system doesn't give useful messages like 'account doesn't exist' or 'old passowrd was mis-typed' because that sort of info is useful to people trying to break in to your system. I notice you have 'passwd chat debug' turned off. I suggest that you turn it on, and see what's happening when the password sync happens. Don't forget that you'll need to raise the debug level to something like '100' to see the chat debug. And also be aware that the passwords you type will be visible in the log file. I recommend you don't do this on a production server. Do it on a test one if you possibly can. I've worked through this sort of mess before, so if you get utterly stuck then please mail me off-list with the details. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Preexec on Profiles
Hi there, >#!/bin/sh ># ># ># Logon script > >echo "$*" > /tmp/log >/usr/local/samba/KEELE/mozilla-profile-setup >> /tmp/log 2>&1 > This looks odd to me. The file /tmp/log is almost certainyl owned by someone, and doesn'thave world writeable on it, so both lines in that script will fail before they can exec get executed. Unless, of course, you've already thought of that! If this _is_ your porblem, try using /tmp/log.$$ to generate a unique file name each time. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbpasswd error
> >smbd/chgpasswd.c:check_oem_password(832) > check_oem_password: incorrect password length (1292521526). >[2004/08/03 10:12:51, 0] passdb/passdb.c:pdb_free_sam(210) > pdb_free_sam: SAM_ACCOUNT was NULL > Hi there, I had this problem too when trying to setup password syncing. I can't for the life of me remember what the solution was. Although I'm pretty darn certain that it _isn't_ password length. I did however write up my solution:- http://gensig.nibsc.ac.uk/~dmccann/ (there's something odd with out web servers at the moment, so if that linkt doesn't work for you, please let me know and I'll get it fixed.) Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Auto-Create Directory
Hi there,
>
>I have a samba server set so that each user in a windows 2003
>active directory can have their own personal, private share. I
>would like to know how to set up Samba so that their directory
>is created automatically, rather than me creating 1300
>directories on the linux server.
>
We use:-
[mydocs]
root preexec = if [ ! -d "/n17/profiles/%u/My Documents" ] ;\
then { mkdir -p "/n17/profiles/%u/My Documents" ;\
chown -R %u "/n17/profiles/%u" ; \
chmod -R 0700 "/n17/profiles/%u" ;} ; \
fi
path = /n17/profiles/%u/My Documents
readonly = no
;profile acls = yes
;oplocks = no
To create a (sort of) profile share for our users, but only as needed.
We've not noticed any performance problems. There's not even a noticable
difference between the first time you connect and any subsequent time.
Mac
Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can I disable offline folders?
>
> our NT server guy has just asked me if I can disable/prevent offline =
>folder support on a Samba share. This
>is something which is configurable on a Windows 2000/2003 server share. =
>Any help much appreciated,
Have you tried 'csc policy' ? (See the man page for smb.conf(5) )
Mac
Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Fwd: Re: [Samba] clock skew again
Hi there, And thank you for your info. Most useful. The problem is that the time is WRONG on one of your machines. Let me explain how. > > C:\Documents and Settings\rr> echo. |time > > The current time is: 16:14:53.89 > Enter the new time: Your PC thinks it is 16:14 this is fine. > > ok TIMEZONE = (GMT +5.00) iSLAMABAD KARACHI, TASKHENT So your PC is in a TimeZone 5 hours ahead of GMT. This too is fine (assuming you're somewhere in Pakistan) Note that this means that the GMT time (according to your PC) is:- 16:14 - 5 = 11:14 GMT > >[EMAIL PROTECTED] root]# date >Thu May 27 16:22:21 PKST 2004 So your Linux box thinks it's 16:22 and it is in timezone PKST (Pakistan Summer Time) >[EMAIL PROTECTED] root]# date -u >Thu May 27 10:22:23 UTC 2004 And your Linux box can also give you the time in GMT directly. (I had to calulate it for your PC) It thinks it is 10:22 UTC whihc is 10:22 GMT (UTC is just the new and official name for GMT) Now you can see the problem. Kerberos (because it has to work across the whole world) always uses GMT for its time. GMT is the same across the whole world and does not have any 'Summer Time' variations. In fact, all decent computer systems use only GMT for talking to _each_ _other_. They still tell _you_ the local time, taking into account what time zone you're in, but they all talk to each other with GMT. I can tell from the time you sent the messages, that the Linux box's time is wrong. It should have been 11:22 UTC. You can set this by using 'date -u 1122' (or whatever the correct GMT time is) What this means is that the Linux box's timezone setting is wrong too, because when you set the GMT time on the Linux box to the right time, the Time Zone of PKST would show 17:22. Anyway. To get your Kerberos to work, you need to set both clocks to the same GMT time. I think your PC is right 16:22 +5hrs is equivalent to 11:22 GMT I think your Linux box is wrong because it says 10:22 UTC which is 10:22 GMT. Set the time forward by an hour on your Linux box and I'll bet the 'clock-skew' error message will go away. You'll then have to figure out the correct TimeZone setting for your Linux box but you need to get the GMT (UTC) time right first. There's loads of places you check current GMT (UTC) time here's one:- http://www.time.gov/timezone.cgi?UTC/s/0 Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: FW: [Samba] Trouble with ACLs
> >This is a giveaway. Looks like your kernel doesn't support POSIX acls, >or Samba isn't compiled correctly with ACL support. > Can someone tell me which bit of 'smbd -b' indicate whether Samba was compiled correctly with ACL support? Is System Headers: HAVE_SYS_ACL_H good enough? Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.4 fails to compile on Solaris 9
> >I have been trying to compile Samba 3.0.4 on a SunFire v880 running Solaris >9 but "make" generates a fatal error. My goal is to get Samba compiled >with the "--with-ldapsam" option so that I can use SunOne Directory Server >5.2 as the back-end repository for user authentication. I have gcc version >3.3.2 installed in /usr/local/bin/gcc which I have used to successfully >compile other applications. > I tripped over something similar to this on the same hardware and O/S (although it's nothig to do with the hardware, Ibelieve). THe problem is proably that "./configure" has found the Solaris supplied LDAP which simply isn't good enough for Samba. Here's my notes on how I solved it:- 26-Apr-2004 Compiling OpenLDAP-2.1.30 from www.openldap.org needed:- setenv CC gcc ./configure --prefix=/usr/local/openldap/2.1.30 --disable-slapd make depend make set path = ( $path /usr/local/gcc/bin ) setenv LDFLAGS '-L /usr/local/openldap/2.1.30/lib' setenv CFLAGS '-I /usr/local/openldap/2.1.30/include' ./configure --exec-prefix=/usr/local/samba/3.0.2a \ --mandir=/usr/local/samba/3.0.2a/man \ --with-configdir=/usr/local/samba/etc \ --with-codepagedir=/usr/local/samba/share \ --with-ads I was trying to get AD support to work, but I think your problem and mine are both LDAP based. One thing I did then note, was that I had to set:- LD_LIBRARY_PATH to have "/usr/local/openldap/2.1.30/lib" in it, or all the Samba programs fell over with an 'ld.so' error on startup. I stuck this in the init.d/samba script for autostart and in my .cshrc and/or .profile to get it to work interactively. Hope this helps, Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: Re: [Samba] Windows XP slow access to network places shortcut?
>Clint,
>
>I did disable the folders view and it was still extremely slow. However, when I
>mapped it, the speed was amazing! It was as if I was browsing through my local c:
>drive. Arrrgggh. Now, my question is, What does mapping do that is so different
>from a shortcut in My Network Places? Any thoughts? Thanks to all for your time!
>
Hmmm.
Do you remember how long the actual mapping process took?
My guess is that it also took a while and then it was quick after that.
This suggests to me that what you have is an authentication delay.
Mapped drives authenticate once (when you map them).
Other things (like browsing and using UNC paths) tend to re-authenticate
every time you look at them.
Note, that once you've authenticated to a server with a mapped drive,
everything to do with that server will most likely get quicker too. Until
you un-mapp the drive.
So look over the autehntication (LDAP, smbpasswd, Domain Member etc, etc) in
your setup.
Just a hunch,
Mac
Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Profiles and Service Packs]
Hi all, >>> No. storing profiles in separate shares for NT4+ clients is >>> the recommended method. >>> >> this is good news, but how do i get it work?? I always get the wrong >Permission Error! >> >> Thanks, >> Daniel. > >Try changing the profile directory to the following. This is from an IBM >Samba as a PDC tutorial. It works for my installation. > >chmod 1757 profiles > This looks good to me too. For the benfit of the archives and any one out there who's not totally familiar with UNIX directory permissions I'll explain what that does. In an 'ls' of the profiles directory it'll look like this:- drwxr-xrwt which means that this directory can be written to by its owner, not by members of its group, but can be written by anyone else in the world. Since this is a directory (and not a file) this 'writeable' permission actually means "anyone can create or delete anything in this directory" That last bit is important, as it allows new users to create a new profile directory as needed. But, you may notice, it also means it's possible for anyone to delete anything in this directory too. This is where the final 't' comes in. This is the so called 'sticky' bit. When 't' is turned on (on a directory) it changes the meaning of the world-writeable permission to this:- "anyone can create in this directory and anyone may delete things they own in this directory" which stops people being able to delete or damage other people's profiles. It's often a good idea to use the 'sticky' bit on all world writeable directories unless you've got good reason not too. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Help Samba Virtual Servers (Host aliases)
> >> WHAT I AM TRYING TO ACCOMPLISH: I want this one server to present >> itself to Windows Networking as both "ctstools" and "ftp" such that >> when clients browse to \\ctstools all they see is the [tools] share >> and that when they browse to \\ftp they see whatever shares I place >> there. >> >> I'm missing something simple. I know it. > Right. It's not actually that simple, and it's only sort of to do with ports. You're trying to use the %L to select an 'include' file (Note that it could select a 'config file' instead). Samba gets %L from the client (Windows 98, XP, OS/2 or whatever) when the client talks to it using using SMB over NBT (NetBIOS over TCP). The standard port for NBT is 139. Modern clients can use also SMB directly over TCP. (i.e. there's no NetBIOS used). The standard port for this 'direct' SMB is port 445. Remember that %L is the NetBIOS name of the server. When using port 445 there is no NetBIOS being used, so the client doesn't supply the server name and Samba can't get %L for you. (See http://us4.samba.org/samba/docs/man/smb.conf.5.html#id2429318 ) So, in order for %L to work you need to to force your clients to talk to you with NBT. I'd say your Samba should listen only on port 139 and not on any other port. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] wrong file size
> > File: `priv.edb' > Size: 5393883136 Blocks: 8388728IO Block: 4096 regular file >Device: 308h/776d Inode: 9 Links: 1 =20 >Access: (0744/-rwxr--r--) Uid: (1/DOMAIN\!schedule) Gid: = >(1/DOMAIN\Domain Users) >Access: 2004-05-17 10:07:22.0 +0200 >Modify: 2004-05-14 23:30:27.0 +0200 >Change: 2004-05-15 00:35:53.0 +0200 > >Size field shows the correct size, but blocks aren't >correct. Have you checked the file's contents? In many modern UNIX filesystems the file is only allocated blocks where it needs them. If there's a large chunk of the file that's empty then the system doesn't bother using up disk blocks for it. You need to do a check on the whole contents of the file. I think you'll find it's all there. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] question NIS password authenication
> > I am trying to setup Samba version 2.2.8a. I would like to >authenticate the users with their NIS password and not use a smbpasswd file >on the Samba Server. I also want to use the encrypt password feature. The >clients will be using XP or Win2K os. Is this possible or do I have to find >a Windows Domain Server. Thanks > Not directly possible. The NIS system simply doesn't understand the concept of SMB-stlye encrypted passwords, and there's no easy way to wrok from one type to the other. We use NIS and SMBpasswords side by side here, and once, set up, the system pretty neatly keeps them in step. Have a look at:- http://www.nibsc.ac.uk/~dmccann/smb/ which is my (rough) write up of how we keep NIS passwords and SMB-encrypted passwords in sync. I can explain more if needed, but basically all users passwords are initalised in NIS and SMB when the account is created. After that, all password changing is done through Samba which triggers off the sync. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SOLVED: Roaming profiles not updating XP
Hi all, This is (nearly) a follow-up to Brandon Franzke's posting about XP profiles not saving. The original post is at http://lists.samba.org/archive/samba/2004-April/084023.html and http://www.spinics.net/lists/samba/msg19018.html We've just hit this exact same problem and confirm Brandon's findings. We're using Brand New (unpacked from the box on Monday) Dell Optiplex GX270 computers with Win PX Pro Version 2002 SP 1 factory installed. They work perfectly, including Roaming Profiles saving back and forth. If we upgrade the drivers for the NVIDIA GeForce FX 5200 to the latest current dirvers (5.6.7.2) then a Roaming Profile is not saved back to the profile server. This occured with a Windows 2003 server as well as Samba 3.0.2a and 3.0.3rc1. When we roll the driver back (to 4.5.0.2) the problem disappears, and the profile is then written back perfectly (including any changes that have been made whilst the drivers were at 5.6.7.2) We're currently trying to interest Dell, NVIDIA and Microsoft in this problem, but Dell simply say "we've not tested anything about 4.5.0.2" and NVIDIA's website says "we don't do support". So, we can confirm Brandon Franzke's findings, and we came to this conclusion independently. We can also confirm that a re-boot is needed for changes to take effect (specifically, installing the 5.6.7.2 driver, but _not_ rebooting does _not_ cause the profile saving failure). Also since we've used exclusively XP SP1 we believe it's unlikely to be a Microsoft problem (Brandon's testing was all pre-SP1). I hope we've added a bit to the pool of knwoledge here. If anyone has any suggestions on how we can contact NVIDIA to ask them to fix a netwokring bug, we'd very much like to hear them. Also if you have hit this problem, then please let me know. Maybe we can get them to listen to weight of numbers? Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Error: Called name not present ?????
> >Yesterday it was working very good, but today: > ># /usr/local/samba/bin/smbclient -L 192.168.0.11 >added interface ip=192.168.0.100 bcast=192.168.0.255 nmask=255.255.255.0 >session request to 192.168.0.11 failed (Called name not present) >session request to 192 failed (Called name not present) >session request to *SMBSERVER failed (Called name not present) > >192.168.0.11 - PC with Win98; all pc's with Win98 returns this error. >PC's with WinXP work OK. On Windows 95/98 you _must_ supply the name of the PC as part of the connect, and it must be right, i.e. smbclient -L NetBIOS-name-of-PC -I 192.168.0.11 for some reason the PC requires the name to be supplied by the client. You can use 'nmblookup -A 192.168.0.11' to get the NetBIOS name you need. If you don't supply one, then 'smbclient' uses '*SMBSERVER' which simply won't work on Windows 95/98 Hope this helps, Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Time server
Hi all,
>
>Thanks. I've set that up but it doesn't seem to be doing anything :-(
>
>I found other, very similar instructions on the 'net...
>
>Under "my computer", "manage", "services & applications", "services" made
>sure that Windows Time was set to start automatically. Then in a DOS box
>ran the following commands
>
>net stop "Windows Time"
>net time /setsntp:172.16.15.4 (my samba server)
>net start "Windows Time"
>
>
>I *can* use the DOS command:net time \\172.16.15.4 /SET /y and the
>clock
>does sync to the server.
>
I've just been fighting with this myself, and I _think_ I've got a firm
understanding.
There are _two_ ways that a modern (W2K, XP) box can talk to time servers,
NetBIOS and SNTP.
_Both_ are accessed with the 'net time' command, but unconnected to each other.
So, if you use `net time \\someserver /set /yes' then that will use the NetBIOS
style of getting the time (i.e from an SMB server).
But, if you use `net time /setsntp:some-other-server'. then that will
configure which SNTP server(s) the "Windows Time" (w32time) service will talk
to.
Obviously 'some-other-server' must speak NTP (which Samba, naturally) doesn't
do. You need (something like) xntpd instead. (You can of course rrun Samba
and an NTP serer on the same server.
In XP the 'w32tm' command is expanded to allow you to update the config of the
"Windows Time" service on the fly ('w32tm /config /update'). Note that you
_must_ either use this command or stop and start the w32time service for any
changes to take effect (that includes changes made by 'net time /setsntp:')!
Also, some useful info is available from (XP's) 'w32tm /monitor' and
'w32tm /dumpreg /subkey:parameters'
Right, enough of this off-topic nonsense..
Mac
Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] create_canon_ace_lists: unable to map SID
Jerry wrote:- > >Mac wrote: > >| [2004/04/23 10:22:32, 0] smbd/posix_acls.c:create_canon_ace_lists(1380) >| create_canon_ace_lists: unable to map SID >| S-1-5-21-973294077-3660535-3933214913-1177 to uid or gid. > >Sounds like bug 1139 which was fixed in 3.0.3rc1. > Err. nope. Have just downloaded 3.0.3rc1 and compiled. Same problem. Could some kind soul please explain just what _should_ happen here and how. I'm guessing that the XP Pro client has supplied a SID for some purpose and Samba is trying to match that to UNIX credentials. Clearly this can't work, _ever_, because the Samba server doesn't know anything about SIDs, especially not this one as it was generated by the AD domain controller when the user (jsmith) was created. How do I tell Samba what the SID is for any particular username? Should I use 'idmap'? (and pre-populate it from the AD?) Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Making shares invisible to unauthorized users
> >Is there a simple way to set up Samba so that users ONLY see the shares that >belong to them? > >I'm not talking about the user's HOME directory. But lets say I have 60 >shares in my smb.conf file. To make it less confusing for users when they access >the Samba server from Windows, I want the users to ONLY see the shares that >belong to them. > >So, I want to set up each share so that it is only readable and writeable by >a single user. And so that only that user can see the share. What are the key >settings to achieve this kind of "visibility and access control"? > >I have figured out most of my Samba issues on my own, but I have a deadline >today to get this issue resolved and I would appreciate hearing from someone >who knows the solution. > Haven't had a chnace to test this out, but it sounds like you might want to look at the 'include' option in smb.conf. Simply put each user's share in a separate file named smb.USERNAME.conf (with USERNAME changed for each user) and then remove the share from the main smb.conf, Then put a line like:- include = smb.%U.conf and that will (I think) give you different shares listed per user. More info on the smb.conf(5) man page. I know this works for %L (meaning that users see a different list of shares depending on which NetBIOS name they use to connect to the server. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Yet Another LDAP Question
> >It relates to my last question: is there any way to for unix->NT >password conversion ? > >I need to create ntAccounts from my shadow passwords (crypt-ed) in the >Ldap server. It seems there's no supported way but two problems emerge >in here: > >1) you have to ask lots of people to type their passwords again >2) you have no control maintain same password policy > Have a look at 'update encrypted' option http://samba.mirror.ac.uk/samba/docs/man/smb.conf.5.html#UPDATEENCRYPTED so long as your users are connecting to an existing samba server using plain-text passwords, then you can turn this option on and capture their passwords into a local SMB-style password file. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Is it possible to store XP Profiles on Samba 3.0.2 ?
>>Can you use Samba to store an XP Pro profile? >> >> >Yep. Take a look at this: > >http://samba.idealx.org/samba-ldap-howto.pdf Thanks for the pointers. However, as far as I can see that info is for situations where the XP Pro clients are using the Samba box as the PDC. I'm not. The XP Pro client PC is a member of an AD domain. It's just the profiles that are being stored on Samba. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Is it possible to store XP Profiles on Samba 3.0.2 ?
>>
>> Can you use Samba to store an XP Pro profile?
>
>Yes, you can. Your error message suggests that the profile you are trying to
>overwrite does not belong to the current domain. ie: The user SID inside the
>NTUser.DAT file for the current user does not match the current SID.
>
This sounds highly likely.
The question in my mind though is where the Samba server gets a SID
from?
The XP Pro client is authenticating into a AD domain, which is telling
it to store its profile on the Samba server. I have joined the Samba
server to the AD domain in an attempt to coax this into working. But to
no avail. (i.e. the join worked and Samba is now authenticating from
the Windows server ('security=domain') but the SID error still occurs)
Do I need to set some sort of SID on the Samba server to match the
domain portion of the SID in the error message? (which I'm assuming is
the domain SID for the AD domain?)
Can I use 'net getsid' (or somesuch)?
(side question: when using tdbtool's "dump" command, how can I convert the
SIDs from secrets.tdb into SID-1-. format?)
Mac
Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Is it possible to store XP Profiles on Samba 3.0.2 ?
Hi all,
Can you use Samba to store an XP Pro profile?
I'm running Samba 3.0.2a (compiled from source) on Solaris 9.
Compiled it against OpenLDAP 2.1.30 and MIT Kerberos 1.3.3 (both
compiled from source from fresh downloads today).
Am now trying to get Windows XP Pro to store profiles on to this box.
The smbd and nmbd seem to run fine.
Every time XP Pro goes to create a user's profile it connects
(correctly) to:-
\\firesun1\profiles\jsmith
but then we get:-
[2004/04/26 14:54:11, 1] smbd/service.c:make_connection_snum(705)
dltest2 (212.219.217.98) connect to service profiles initially as user jsmith
(uid=1935, gid=100) (pid 16145)
[2004/04/26 14:54:11, 0] smbd/posix_acls.c:create_canon_ace_lists(1380)
create_canon_ace_lists: unable to map SID S-1-5-21-973294077-3660535-3933214913-4632
to uid or gid.
and an ugly "the security's wrong on the profile" sort of message on the XP Pro
client.
So, simple question.
Can you use Samba to store an XP Pro profile?
Mac
Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Sync UNIX and SMB users
>Hi, > >I'm new to Samba so I apologize if this topic has been covered in the past. > >I want to sync my UNIX users from /etc/shadow to my Samba users in >/etc/samba/smbpasswd > >How can I do this automatically? The basic answer is to use the 'unix password sync' option. See the man page for smb.conf(5). Two further bits of info. Make sure that your 'passwd chat' consumes all of the output of your 'passwd program', otherwise the whole thing will just hang. Also, if you're not using the system password file (/etc/passwd) for holding the NIS passwords then you may need a slightly more clever version that allows you to reset the NIS password. See my webpage on this subject:- http://www.nibsc.ac.uk/~dmccann/smb/ (There is another approach to this, if you can recompile the normal 'passwd' binary to use a path other than '/etc/passwd') Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] create_canon_ace_lists: unable to map SID
> >> >>The searching I've done so far suggests that I might be able to workaround this >>with:- >> >> nt acl support = no >> That hasn't helped. So I'm still getting:- [2004/04/23 12:42:13, 1] smbd/service.c:make_connection_snum(705) dltest2 (212.219.217.98) connect to service profiles initially as user jsmith (uid=1935, gid=100) (pid 12038) [2004/04/23 12:42:13, 0] smbd/posix_acls.c:create_canon_ace_lists(1380) create_canon_ace_lists: unable to map SID S-1-5-21-973294077-3660535-3933214913-4632 to uid or gid. accompanied by :- Windows did not load your roaming profile and is attempting to log you on with your local profile. Changes to the profile will not be copied to the server when you logoff. Windows did not load your profile because a server copy of the profile folder already exists that does not have the correct security. Either the current user or the Administrator's group must be the owner of the folder. Contact your network administrator. on the Windows XP Pro client. Any suggestions? Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] create_canon_ace_lists: unable to map SID
> >The searching I've done so far suggests that I might be able to workaround this with:- > > nt acl support = no > >but I can't find that in Samba 3.x doco? Has it been retired? > Whoops. It is still in there, but the Samba web pages are currently experiencing difficulties so my search failed to find it. I'm going to turn it on and see what happens. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] create_canon_ace_lists: unable to map SID
Hi all, I'm trying to get a Samba server (which is a member of a Samba controlled domain) to store WinXP Pro user's profiles. The XP user is authenticating against a 2003 Active Directory server, which then tells it to store it's profile on my Samba server. The 'profiles' share exists and is writeable and under some circumstances we can get profiles to be stored there, however, most times we get:- [2004/04/23 10:22:32, 0] smbd/posix_acls.c:create_canon_ace_lists(1380) create_canon_ace_lists: unable to map SID S-1-5-21-973294077-3660535-3933214913-1177 to uid or gid. in the samba log files accompanied by an error message on the client. This is with Samba 3.0.2a on Solaris 9 (the Samba DC is 2.2.8a on IRIX) The searching I've done so far suggests that I might be able to workaround this with:- nt acl support = no but I can't find that in Samba 3.x doco? Has it been retired? My gut feeling is that the Samba server (or possibly the DC) needs to know what the user's SID is. But (since it's not joined to the AD) it doesn't, and attempts at autogenerating one will fail to match. Is this close? Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641565 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] MSDFS...
>Subject: Re: [Samba] MSDFS... >From: Andrew Bartlett <[EMAIL PROTECTED]> >To: Fabrizio Morbini <[EMAIL PROTECTED]> > >On Mon, 2002-11-11 at 18:52, Fabrizio Morbini wrote: >> Hi, After some experiment with MSDFS on Samba I have seen this problems >> and I don't know if this are caused by my possible wrong configuration or >> if are "feature" of MSDFS: >> >> So my question is: How can I use the replication feature (if exists) of >> MSDFS? > >MSDFS is distributed, but not replicated. For more information, I can recommend the Samba DFS chapter of the HOW-TO Collection:- http://dp.samba.org/samba/docs/Samba-HOWTO-Collection.html#MSDFS In there, there is a link to dome Microsoft Documentation which even includes a section headed 'Volumes that Include Alternate Paths', which exactly covers your original problem. You might want to look at rsync (http://rsync.samba.org) if read-only replicated shares are what you're after. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641000 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ms dfs? What is it?
Hi all, >From: David Shapiro <[EMAIL PROTECTED]> >To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> >Subject: [Samba] ms dfs? What is it? >Date: Tue, 5 Nov 2002 15:09:45 -0500 > >What is msdfs? What can you do with it that you could not do without it? > Your first question has been well answered already on this list. To answer your second, we use paths of the form:- \\net\software\antivirus \\net\software\msoffice \\net\users\homes as permanent pathsnames in our setup and configuration of PCs. Because these are all DFS shae, each can point to a different (real) Samba server share, and we can move and change those servers and shares without having to reconfigure all our site's PCs. Another good thing is that the (real) Samba servers don't even know they're the target of the DFS link, because each client (having been redirected to them by \\net) makes a direct connection in the normal way. One problem we have found, is that WinXP (and maybe others) only use the original users's logon name when contacting the (real) Samba servers, so 'Connect As' is not an option. The other problem is the Win95 only sees the DFS tree as an ordinary share, unless you install the DFS client upgrade on to it. Not difficult at all, but an annoyance. Win98 and later have it built in. One huge advantage of Samba over NT/2000 server is (AFAIK) that only Samba can host multiple DFS trees (e.g. 'software', 'users') on a single machine. Windows is limited to one DFS tree per server (or domain). Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641000 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] oplocks and share modes
>From: [EMAIL PROTECTED] >To: =?iso-8859-1?Q?Frank_K=FCster_geb=2E_F=FCrst?= <[EMAIL PROTECTED]> >Subject: Re: [Samba] oplocks and share modes >Date: Sun, 27 Oct 2002 17:49:50 + > >On Fri, Oct 25, 2002 at 07:51:13PM +0200, Frank Küster geb. Fürst wrote: >> >> Yes, thanks. Just one more question: For which versions does this apply? >> All IRIX 6.5.x versions I assume? And as for Linux, any 2.4.x kernel, or >> does it depend on the configuration? > >I think it's IRIX 6.5.2f - Herb can you confirm ? For Linux, it's the >2.4.x kernels - but many of the earlier kernels had bugs. Ensure you're >at 2.4.18 or above I think. The copy of the 'Samba for IRIX' sales sheet that I have from SGI (dated 12/98) agrees with you. IRIX 6.5.2f or later for kernel oplock support. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641000 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] MSDFS info...
>From: Fabrizio Morbini <[EMAIL PROTECTED]>
>To: Mac <[EMAIL PROTECTED]>
>Cc: [EMAIL PROTECTED]
>Subject: Re: [Samba] MSDFS info...
>Date: Thu, 24 Oct 2002 13:13:56 +0200 (CEST)
>
>On Thu, 24 Oct 2002, Mac wrote:
>
>> Nothing special needs to be done on the other three server (A, B and
>> C).
>>
>> You just set up a share called 'shareA' on server storageA, and a share
>> called 'share' on both servers storageB and storageC. They're
>> completely normal shares. (You can even map directly too them from you
>> client machines to test)
>>
>But what about authentication? How the server storageA... can allow the
>connection to the share if the autentication is made on the MSDFS server
>with an user maybe not present into storageA... (maybe I miss
>some some step...)
>
The client authenticates twice. First time it authenticates with the DFS
server. This server redirects it to (say) server storageA. The client
then makes a new connection to storageA and authenticates again.
This is what I meant by 'nothing special' needs to be done on the
servers. They need the normal server stuff, including authentication,
as well as the shares themselves ('shareA') being set up.
MS-DFS isn't going to allow you to do authentication just once on a
server, and then not have to authenticate on another server. MS-DFS is
just a 'redirection' service.
Does that help?
Mac
Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
Work: +44 1707 641000 x285 Everything else: +44 7956 237670 (anytime)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] MSDFS info...
>Hi, I'm new on Samba... > >I'm trying to set a samba server with a DFS share. I have found this >example: [smb.conf removed for brevity] > >root# ln -s msdfs:storageA\\shareA linka > >root# ln -s msdfs:serverB\\share,serverC\\share linkb > >but what are the setting of the samba server storageA, storageB and >storageC for the shareA and share? Nothing special needs to be done on the other three server (A, B and C). You just set up a share called 'shareA' on server storageA, and a share called 'share' on both servers storageB and storageC. They're completely normal shares. (You can even map directly too them from you client machines to test) (Note, life will get very confusing if the share called 'share' doesn't contain exactly the same things on both server B and C) [Side note. Make sure your 'smbd' binary ws compiled with 'msdfs' enabled for your MSDFS server to work. The other servers (A, B and C) don't need MSDFS support] Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641000 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 2.2.5 and NIS question
>From: Andrew Bartlett <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Cc: [EMAIL PROTECTED], [EMAIL PROTECTED] >Subject: Re: [Samba] 2.2.5 and NIS question >Date: Mon, 07 Oct 2002 22:32:08 +1000 > >[EMAIL PROTECTED] wrote: >> >> Each user has a login/password on the AIX (NIS-based) >> I just want to use this (very fine working) system to authenticate the >> users of the samba on the linux box > >The problem is, we can't do this with encypted passwords. Not entirely true. You can't do it with encrypted passwords easily. We currently run an encrypted password Samba server on our conventional NIS master machine. A little bit of scripting keeps the passwords in sync, and a bit more keeps account creations and deletions in sync too. So, the users have one password, which is stored in both NIS and SMB password files. We also run at least one Samba server with 'update encrypted = yes'. This requires plain-text capable clients, but allows us to capture the user's (NIS) password into SMB encrypted format. I've (roughly) written this up at:- http://www.nibsc.ac.uk/~dmccann/smb/ (The write-up doesn't mention the 'update encrypted' server, but that's only relevant to people migrating from NIS only to NIS and SMB. If you're starting NIS and SMB from scratch, it doesn't matter). Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641000 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] really tough question about wins database
>From: jason <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Subject: [Samba] really tough question about wins database >Date: Wed, 2 Oct 2002 10:01:55 -0400 (EDT) > >I sent this twice, but since nobody answered, I guess its not a "quick >question" anymore. ;) > >Version 2.2.5 on 2.4.18-6mdk > [smb.conf looks OKay] > >my question is, ive got wins turned on, smbd and nmbd are running, but >there is no wins.dat in /usr/local/samba/var/locks >actually there is nothing in that directory. > >why isnt it there? what am I missing? 2 reasons spring to my mind. Firstly, is that definately where the file is supposed to be? If you didn't compile Samba from source (or even if you did), you might not have noticed where the default 'locks' directory is. I suspect (but can't check right now) that it's a location that could be controlled by a compile-time option. Try 'find / -name wins.dat -print' and see if the file's been put somewhere else. Second option (which I don't think is likely). Is anyone actually using your UNIX box as their WINS server? You've obviously got another significant box around (your password server), are client PCs sending their WINS registration to it instead? Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641000 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] default for 'writeable ='
Hi all, 'Using Samba' (and it's companion 'Pocket Reference') both say that the default for the 'writable' option in smb.conf is 'YES'. But, http://ie.samba.org/samba/docs/man/smb.conf.5.html says the default is 'no'. Which is right? Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641000 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [SAMBA] spool dir
>From: "Gerald (Jerry) Carter" <[EMAIL PROTECTED]> >To: Matt Lung <[EMAIL PROTECTED]> >Cc: [EMAIL PROTECTED] >Subject: Re: [SAMBA] spool dir >> >> I'm having a problem with print files not being deleted out of >> /var/spool/samba directory after a print job completes. >> >> Right now I am running RedHat 7.3, Samba 2.2.5 with CUPS 1.1.14 as my >> printing system. I was under the impression that after the job >> completed Samba was suppose to remove the job from that spool directory. > >If you are using anything but CUPS, you have to delete this manually. For non-CUPS, this is often achieved by using the following (or something similar) in smb.conf print command = lpr -r -P%p %s print command = lpr -P%p %s ; rm %s ; Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641000 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba latest release
>To: anton <[EMAIL PROTECTED]> >Cc: [EMAIL PROTECTED] >Subject: Re: [Samba] samba latest release > >> because i wanna upgrade my current samba server 2.2.3a >> >The latest stable release is samba 2.2.5 (2.2.6 will be coming out >in a few days jerry said iirc) If you choose 2.2.5, then make sure you also add the patches at:- http://download.samba.org/samba/ftp/patches/jerry/post-2.2.5/ Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 641000 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Act! database on a Samba server
>Subject: RE: [Samba] Act! database on a Samba server >From: "C. Linus Hicks" <[EMAIL PROTECTED]> >To: Yannick Tousignant <[EMAIL PROTECTED]> >Date: 05 Jun 2002 13:37:04 -0400 > >On Wed, 2002-06-05 at 13:13, Yannick Tousignant wrote: >> >> We are running act! databases on a samba share since the beginning >> of the year and we had no problem since then. >> >> As long as the database files are owned by the user who open them. > >Your message suggests by virture of your ownership constraint that your >Act! databases are single-user. I have multiple users in a single >database all at the same time. Do you have experience with multiple >users in one database? > I don't use Act!, but we do make use of quite a bit of Access databases. I use 'force user' all over the place in my smb.conf and that seems to solve quite a few problems. What I generally do is to invent a UNIX user specifically for the purpose of owning files in Samba shares and set 'force user' to that. It does mean that users can't (easily) get access to the files directly on the UNIX box (when telneting in for example), but with Access databases, this usually isn't a problem. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 654753 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] !!! HELP !!! samba and win95
>From: "Gerald (Jerry) Carter" <[EMAIL PROTECTED]> >To: "Cates, Brett" <[EMAIL PROTECTED]> >Cc: "'Cristian Mijea'" <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]> >Subject: RE: [Samba] !!! HELP !!! samba and win95 > >On Wed, 22 May 2002, Cates, Brett wrote: > >> It probably has something to do with the fact Win 95 doesn't support >> encrypted passwords... > >Sorry Brett, but this is wrong. All version of MS os's support >password encryption. See the mainling archives for long >drawn out explanations. We've ben here before :-) > Indeed. The DOS Client (MS Client 3.0) when loaded in Basic Redirector mode, seems to support _only_ encrypted passwords! You have to load the Full Redirector to get clear-text password support. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 654753 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win98 join a PDC
>From: Dirk Allaert <[EMAIL PROTECTED]> >To: Alex Moen <[EMAIL PROTECTED]> >Cc: [EMAIL PROTECTED] >Subject: Re: [Samba] Win98 join a PDC >Date: Fri, 10 May 2002 10:46:32 +0200 > > > >Alex Moen wrote: >> Wierd thing #1: Windows 98 client will NOT connect on first attempt: >> type in username and password, hit enter, wait 2 minutes, failure >> message. Click OK on the failure popup, hit enter again on the login >> dialogue, wait another 2 minutes and client logs in almost perfectly (by >> almost: trouble with home directory %u thingie). Any ideas? >> >I am not sure this is a samba issue. I have also seen this once a >Windows NT 4 PDC and a somebody reported me this on a Windows 2000 ADC >(always with windows 98). Seemed to have to do with networking stuff. > > >I the Windows 2000 case, the guy that told me had contacted CISCO (they >were using a CISCO layer 3 switch) and CISCO changed some stuff on the >switch (don't know what). Same scenario for NT 4 case: Baystack switch, >PC's with Accton network card. Changed speed on switches (half duplex). >Problem did not completely disappear but sure improved. This sounds highly likely. The Cisco 'stuff' they changed was probably 'portfast'. See:- http://www.cisco.com/warp/public/473/12.html for an explnation of why it can tkae upto a minute for a switch to start passing packets after the PC has come up. Also some (Cisco specific) steps you can take (with detailed instructions) to reduce the problem. [One of the steps is to twiddle duplex settings, but it's the very last thing to try]. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 654753 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Multiple Samba's on same machine
>From: "Jon Gerdes" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Subject: [Samba] Multiple Samba's on same machine >Date: Tue, 30 Apr 2002 12:57:35 +0100 > >So: Can I run multiple s/nmbd's on the same machine? Yes. There's two basic ways of doing it (AFAIK). One) have multiple smb.conf's each with:- interfaces = and bind interfaces only = true in each, and star them all with 'smbd -s ..' THe oterh technique relies on your clients using different names to connect to the server, and then you use a single smb.conf (and start smbd only once) like ths:- netbios aliases = name1 name2 include = %L.conf and then you have a series of config files (called name1.conf, name2.conf) with different settings in each. In all of this, watch that your log (and locks) directories don't trip over each other in unexpected ways. Also be aware that nmbd doesn't cope with being a MB for multiple workgroups, you will need multiple nmbds for that (AFAIK). [I've never used either of these techniques, but they've both been mentioned in the past by happy users] Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 654753 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Group policy for Win2K/XP
>From: "Russell McGregor" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Subject: [Samba] Group policy for Win2K/XP
>Date: Fri, 26 Apr 2002 14:32:11 +1000
>
>Has anyone looked in to domain policy for Win2K/XP machines from a SAMBA co=
>ntrolled domain?
>
>I have played around with these policies from within a Win2K AD-domain, and=
> wondered if I can carry my policies over to a SAMBA domain.
>
>Any info, or reference to relevent documentation is appreciated.
Ditto. I'd very much like to see this if possible.
Other thought:-
The 3.0 version is moving towards this. See
http://ie.samba.org/samba/development.html
(or your local mirror)
Also, are you aware of Samba TNG
http://www.samba-tng.org/
Mac
Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
Work: +44 1707 654753 x285 Everything else: +44 7956 237670 (anytime)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 2.2.3a dies when saving file (locking trouble?)
>From: Gerald Carter <[EMAIL PROTECTED]> >To: Mac <[EMAIL PROTECTED]> >Cc: [EMAIL PROTECTED] >Subject: Re: [Samba] Samba 2.2.3a dies when saving file (locking trouble?) >Date: Wed, 24 Apr 2002 17:20:03 -0500 (CDT) > >Mac, > >On Wed, 10 Apr 2002, Mac wrote: > >> Samba 2.2.3a on IRIX 6.5.5f >> >> Certain operations (so far it seems to be saving an Excel file (brand >> new 'Book1.xls')) cause smbd to die, closing all connections to the PC. >> >> [2002/04/10 14:32:22, 3] smbd/process.c:(667) >> switch message SMBlockingX (pid 3215422) >> [2002/04/10 14:32:22, 2] smbd/uid.c:(137) >> change_to_user: Invalid vuid used 65370 >^^^ > >what client OS is this? It was Win 98 (probably Second Edition). I can't check for certain as the PC in question has been re-installed since, and we've reverted to Samba 1.9.18p8. But I've still got the logs (somewhere) Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 654753 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem with "passd chat/passwd program"
>From: Harry =?iso-8859-1?Q?R=FCter?= <[EMAIL PROTECTED]> >To: Samba List <[EMAIL PROTECTED]> >Subject: Re: [Samba] Problem with "passd chat/passwd program" >Date: Wed, 10 Apr 2002 14:48:46 +0200 > >So do i have to activate "unix password sync" ? >I think no, as my script will do the synchronization. I'm assuming that your script is in the 'passwd program' setting. If so, then I think you'll have to turn 'unix passwd sync' on otherwise the script won't run at all. The UNIX password won't be sync-ed of course (unless your script does that as well). [The 'unix password sync' option is proably badly named. It should be something like 'external password sync'] Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 654753 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 2.2.3a dies when saving file (locking trouble?)
Hi all, Something odd is going on. Samba 2.2.3a on IRIX 6.5.5f Certain operations (so far it seems to be saving an Excel file (brand new 'Book1.xls')) cause smbd to die, closing all connections to the PC. Here's (what I'm hoping is) the relevant log extract. [2002/04/10 14:32:22, 3] smbd/process.c:(860) Transaction 6298 of length 94 [2002/04/10 14:32:22, 3] smbd/process.c:(667) switch message SMBlockingX (pid 3215422) [2002/04/10 14:32:22, 4] smbd/uid.c:(118) change_to_user: Skipping user change - already user [2002/04/10 14:32:22, 3] smbd/reply.c:(4521) lockingX fnum=13655 type=0 num_locks=0 num_ulocks=1 [2002/04/10 14:32:22, 3] smbd/process.c:(1005) Chained message [2002/04/10 14:32:22, 3] smbd/process.c:(667) switch message SMBlockingX (pid 3215422) [2002/04/10 14:32:22, 2] smbd/uid.c:(137) change_to_user: Invalid vuid used 65370 [2002/04/10 14:32:22, 3] smbd/error.c:(115) error packet at smbd/process.c(724) cmd=36 (SMBlockingX) eclass=2 ecode=4 [2002/04/10 14:32:22, 3] smbd/process.c:(1091) receive_smb error (Error 0) exiting [2002/04/10 14:32:22, 3] smbd/sec_ctx.c:(313) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2002/04/10 14:32:22, 2] smbd/server.c:(458) Closing connections and from there on smbd just closes all it's connections and does a 'Server Exit' I'm guesssing it hinges on the 'receive_smb error' line. Is that client generated? The symptom for the user is (something like) "Excel can't save the file, insufficient memory or disk space". Could it just be a locking problem? The directory the file is being saved into is on a local (i.e. non-NFS) filesystem (IRIX XFS) Any more info I can give? Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 654753 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem with "passd chat/passwd program"
>From: Harry =?iso-8859-1?Q?R=FCter?= <[EMAIL PROTECTED]> >To: Samba List <[EMAIL PROTECTED]> >Subject: [Samba] Problem with "passd chat/passwd program" >Date: Tue, 09 Apr 2002 16:42:51 +0200 > >Hi all, > >i'm a newbie on this list. >Greetings to all "old" members. > >My problem is, that i can't activate the passwd things >anyway. > >unix password sync = Yes >passwd program = /usr/local/bin/smbpasswd %u >passwd chat = >*password:*%n\n*password:*%n\n*changed* > passwd chat= debug Right. 'unix password sync' is for changing the non-SMB password (i.e. the one in /etc/passwd (or its equivalent). This means that you should _not_ be using /usr/local/bin/smbpasswd as your password program since it only changes the SMB password (in the smbpasswd file or wherever else) and not the normal (non UNIX) password. Further, you've set 'passwd chat' twice. What you meant the second time was 'passwd chat debug = true'. Run 'testparm' and look at the output, and you'll see you've not got the 'passwd chat' you want. When you request a password change of Samba, and you have 'unix passwd sync' turned on, then it will do the UNIX bit first and then it will update the SMBpassword directly itself. (no need to run smbpasswd yourself, smbd will do that bit for you), but only if the passwd sync was 100% succesful. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 654753 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] kernel oplocks fail (unprettily) on IRIX (with efs)
>From: "Bob Crandell" <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: Re: [Samba] kernel oplocks fail (unprettily) on IRIX (with efs)
>Date: Tue, 09 Apr 2002 15:28:49 +
>
>I've seen this on some reiserfs systems. Are kernel oplocks *only* supported with
>XFS?
>From the IRIX 6.5.5f fcntl(2) man page:-
[EINVAL] cmd is F_OPLKREG and fildes is a file in a filesystem
other than XFS. Kernel level oplocks are only supported
for XFS.
Mac
Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
Work: +44 1707 654753 x285 Everything else: +44 7956 237670 (anytime)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] kernel oplocks fail (unprettily) on IRIX (with efs)
Hi all,
Using Samba 2.2.3a on IRIX 6.5.5f we've hit an awkward problem.
Kernel oplocks are supported (yay!), but, it turns out, not on IRIX efs
filesystems, only XFS.
We've had to discover this the hard way; within minutes of upgrading to
2.2.3a we had users coming to us reporting inability to open certain
(Lotus Approach) database files.
The error message:-
[2002/04/09 13:11:33, 0] smbd/oplock_irix.c:(170)
set_file_oplock: Unable to get kernel oplock on file LOGIN.APR, dev = cc, inode =
48354, file_id = 4l. Error was Invalid argument
lead us to the 'fcntl' call on line 168 of smbd/oplock_irix.c and a
"quick" trip through fcntl(2) reveals that EINVAL is returned if the
oplock is being requested on a file that's on a non-XFS filesystem.
Anyone else seen this? Is there any chance of 'kernel oplocks' being a
share level (as opposed to global) paramter? Or could the oplock_irix
code handle EINVAL as a special case?
Thanks,
Mac
Assistant Systems Adminstrator @nibsc.ac.uk
[EMAIL PROTECTED]
Work: +44 1707 654753 x285 Everything else: +44 7956 237670 (anytime)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Synching Samba and user passwords
>From: "Angel Gabriel" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Subject: [Samba] Synching Samba and user passwords >Date: Fri, 5 Apr 2002 14:54:28 +0100 > >Is it possible to sync the passwords that samba uses, with the usual >user passwords? If you're not using encrypted passwords, then Samba is using the usual user password already. (Unless you've done something wierd, like PAM or LDAP) If you're using 'encrypted password = yes' then have a look at 'password sync' in smb.conf(5). Note that your chat script will be critical to the whole thing and they can be awkward to debug. Mac Assistant Systems Adminstrator @nibsc.ac.uk [EMAIL PROTECTED] Work: +44 1707 654753 x285 Everything else: +44 7956 237670 (anytime) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
