Re: [Samba] users map with ADS not working

2012-10-12 Thread Nitin Thakur

Hi 

Found something more which is interesing: -

nbtstat -A on ip TST-SMB-UAT works fine, but fails for TST-SMB-DEV. Is there 
any specific samba option which I am missing or something on wins servers which 
is giving me grief?

thanks

Nitin

> From: nitintha...@hotmail.com
> To: samba@lists.samba.org
> Date: Thu, 11 Oct 2012 21:52:48 -0400
> Subject: Re: [Samba] users map with ADS not working
> 
> 
> Hi All,
> 
> I have an update. I did snoop the network and found, when I use IP to connect 
> to the share, samba server sends packets to Windows AD. If I try to connect 
> using hostname, samba server does not make any attempts to connect to Windows 
> AD. 
> 
> It looks more like problem on the smb.conf side. If somebody has experienced 
> this problem in past then please help.
> 
> (PS: I am using MIT Kerberos + Open LDAP and Samba - all current versions.)
> 
> Thanks
> 
> Nitin
> 
> > From: nitintha...@hotmail.com
> > To: samba@lists.samba.org
> > Date: Wed, 10 Oct 2012 23:14:47 -0400
> > Subject: [Samba] users map with ADS not working
> > 
> > 
> > Hi All
> > 
> > I am running two instances of samba on same box. One instance of samba has 
> > joined AD domain ABC and the other 123. My workstation is on ABC domain and 
> > when I try to connect to samba server on ABC domain, it asks me for user 
> > name and password and then fails. If I put IP address instead it works. At 
> > the same time, when I try to connect to 123 domain, it asks me for user 
> > name and password and authenticates me without any problem. I set the debug 
> > level to 9 on both the instances. I am not running winbind - please dont 
> > ask me why. The strange problem is when a user who has same unix and 
> > windows account in ABC domain, when he tries to log into the samba server 
> > which is on ABC domain, it works with hostname where as folks who has 
> > different accounts on windows and unix, it dosent work for them with 
> > hostname but with IP.
> > 
> > The Global section of both the instances is similar, here is the global 
> > section of samba server which is binding to ABC domain: -
> > 
> > #=== Global Settings 
> > =
> > [global]
> > 
> > socket options = TCP_NODELAY IPTOS_LOWDELAY
> > netbios name = TST-SMB-DEV
> > workgroup = ABC
> > server string = tst-smb-dev Server ver %v
> > security = ADS
> > log file = /opt/local/samba-3.6.7/dev/logs/log.%m
> > max log size = 50
> > password server =  AD1.ABC.com AD2.ABC.com
> > encrypt passwords = yes
> > realm = ABC.COM
> > local master = no
> > domain master = no
> > domain logons = no
> > dns proxy = no
> > smb passwd file = /opt/local/samba-3.6.7/dev/private
> > private dir = /opt/local/samba-3.6.7/dev/private
> > username map = /opt/local/samba-3.6.7/dev/users.map
> > pid directory = /opt/local/samba-3.6.7/dev
> > bind interfaces only = yes
> > wins support = no
> > domain master = no
> > locking = yes
> > lock directory = /opt/local/samba-3.6.7/dev/var/locks
> > preserve case = yes
> > short preserve case = yes
> > load printers = no
> > printcap name = /dev/null
> > deadtime = 15
> > preferred master = no
> > guest account = nobody
> > guest ok = no
> > syslog = 0
> > interfaces = 10.20.20.3
> > socket address = 10.20.20.3
> > kerberos method = system keytab
> > log level = 9
> > 
> > 
> > Here are the logs when user whose mapping is defined in users.map tries to 
> > log into samba instance which is binding to ABC domain
> > 
> > [2012/10/10 15:07:11.896408,  3] libads/authdata.c:332(decode_pac_data)
> >   Found account name from PAC: foo [Foo Bar]
> > [2012/10/10 15:07:11.896530,  3] 
> > auth/user_krb5.c:50(get_user_from_kerberos_info)
> >   Kerberos ticket principal name is [f...@abc.com]
> > [2012/10/10 15:07:11.896611,  4] auth/user_util.c:361(map_username)
> >   Scanning username map /opt/local/samba-3.6.7/dev/users.map
> > [2012/10/10 15:07:11.896665,  3] auth/user_util.c:402(map_username)
> >   Mapped user ABC\foo to bar
> > [2012/10/10 15:07:11.896725,  5] lib/username.c:171(Get_Pwnam_alloc)
> >   Finding user bar
> > [2012/10/10 15:07:11.896758,  5] lib/username.c:116(Get_Pwnam_internals)
> >   Trying _Get_Pwnam(), username as lowercase is bar
> > [2012/10/10 15:07:11.897025,  5] lib/username.c:149(Get_Pwnam_internals)
> >   Get_Pwnam_internals did find user [bar]!
> > [2012/10/10 15:07:11.897418,  6] param/loadparm.c:7490(lp_file_list_changed)
> >   lp_file_list_changed()
> >   file /opt/local/Samba/lib/smb.conf.dev -> 
> > /opt/local/Samba/lib/smb.conf.dev  last mod_time: Wed Oct 10 15:06:58 2012
> > 
> > [2012/10/10 15:07:11.897530,  5] lib/username.c:171(Get_Pwnam_alloc)
> >   Finding user ABC\foo
> > [2012/10/10 15:07:11.897562,  5] lib/username.c:116(Get_Pwnam_internals)
> >   Trying _Get_Pwnam(), username as lowercase is ABC\foo
> > [2012/10/10 15:07:11.897648,  5] lib/us

Re: [Samba] users map with ADS not working

2012-10-11 Thread Nitin Thakur

Hi All,

I have an update. I did snoop the network and found, when I use IP to connect 
to the share, samba server sends packets to Windows AD. If I try to connect 
using hostname, samba server does not make any attempts to connect to Windows 
AD. 

It looks more like problem on the smb.conf side. If somebody has experienced 
this problem in past then please help.

(PS: I am using MIT Kerberos + Open LDAP and Samba - all current versions.)

Thanks

Nitin

> From: nitintha...@hotmail.com
> To: samba@lists.samba.org
> Date: Wed, 10 Oct 2012 23:14:47 -0400
> Subject: [Samba] users map with ADS not working
> 
> 
> Hi All
> 
> I am running two instances of samba on same box. One instance of samba has 
> joined AD domain ABC and the other 123. My workstation is on ABC domain and 
> when I try to connect to samba server on ABC domain, it asks me for user name 
> and password and then fails. If I put IP address instead it works. At the 
> same time, when I try to connect to 123 domain, it asks me for user name and 
> password and authenticates me without any problem. I set the debug level to 9 
> on both the instances. I am not running winbind - please dont ask me why. The 
> strange problem is when a user who has same unix and windows account in ABC 
> domain, when he tries to log into the samba server which is on ABC domain, it 
> works with hostname where as folks who has different accounts on windows and 
> unix, it dosent work for them with hostname but with IP.
> 
> The Global section of both the instances is similar, here is the global 
> section of samba server which is binding to ABC domain: -
> 
> #=== Global Settings =
> [global]
> 
> socket options = TCP_NODELAY IPTOS_LOWDELAY
> netbios name = TST-SMB-DEV
> workgroup = ABC
> server string = tst-smb-dev Server ver %v
> security = ADS
> log file = /opt/local/samba-3.6.7/dev/logs/log.%m
> max log size = 50
> password server =  AD1.ABC.com AD2.ABC.com
> encrypt passwords = yes
> realm = ABC.COM
> local master = no
> domain master = no
> domain logons = no
> dns proxy = no
> smb passwd file = /opt/local/samba-3.6.7/dev/private
> private dir = /opt/local/samba-3.6.7/dev/private
> username map = /opt/local/samba-3.6.7/dev/users.map
> pid directory = /opt/local/samba-3.6.7/dev
> bind interfaces only = yes
> wins support = no
> domain master = no
> locking = yes
> lock directory = /opt/local/samba-3.6.7/dev/var/locks
> preserve case = yes
> short preserve case = yes
> load printers = no
> printcap name = /dev/null
> deadtime = 15
> preferred master = no
> guest account = nobody
> guest ok = no
> syslog = 0
> interfaces = 10.20.20.3
> socket address = 10.20.20.3
> kerberos method = system keytab
> log level = 9
> 
> 
> Here are the logs when user whose mapping is defined in users.map tries to 
> log into samba instance which is binding to ABC domain
> 
> [2012/10/10 15:07:11.896408,  3] libads/authdata.c:332(decode_pac_data)
>   Found account name from PAC: foo [Foo Bar]
> [2012/10/10 15:07:11.896530,  3] 
> auth/user_krb5.c:50(get_user_from_kerberos_info)
>   Kerberos ticket principal name is [f...@abc.com]
> [2012/10/10 15:07:11.896611,  4] auth/user_util.c:361(map_username)
>   Scanning username map /opt/local/samba-3.6.7/dev/users.map
> [2012/10/10 15:07:11.896665,  3] auth/user_util.c:402(map_username)
>   Mapped user ABC\foo to bar
> [2012/10/10 15:07:11.896725,  5] lib/username.c:171(Get_Pwnam_alloc)
>   Finding user bar
> [2012/10/10 15:07:11.896758,  5] lib/username.c:116(Get_Pwnam_internals)
>   Trying _Get_Pwnam(), username as lowercase is bar
> [2012/10/10 15:07:11.897025,  5] lib/username.c:149(Get_Pwnam_internals)
>   Get_Pwnam_internals did find user [bar]!
> [2012/10/10 15:07:11.897418,  6] param/loadparm.c:7490(lp_file_list_changed)
>   lp_file_list_changed()
>   file /opt/local/Samba/lib/smb.conf.dev -> /opt/local/Samba/lib/smb.conf.dev 
>  last mod_time: Wed Oct 10 15:06:58 2012
> 
> [2012/10/10 15:07:11.897530,  5] lib/username.c:171(Get_Pwnam_alloc)
>   Finding user ABC\foo
> [2012/10/10 15:07:11.897562,  5] lib/username.c:116(Get_Pwnam_internals)
>   Trying _Get_Pwnam(), username as lowercase is ABC\foo
> [2012/10/10 15:07:11.897648,  5] lib/username.c:124(Get_Pwnam_internals)
>   Trying _Get_Pwnam(), username as given is ABC\foo
> [2012/10/10 15:07:11.897725,  5] lib/username.c:134(Get_Pwnam_internals)
>   Trying _Get_Pwnam(), username as uppercase is ABC\foo
> [2012/10/10 15:07:11.897798,  5] lib/username.c:143(Get_Pwnam_internals)
>   Checking combinations of 0 uppercase letters in ABC\foo
> [2012/10/10 15:07:11.897832,  5] lib/username.c:149(Get_Pwnam_internals)
>   Get_Pwnam_internals didn't find user [ABC\foo]!
> [2012/10/10 15:07:11.897861,  5] lib/username.c:171(Get_Pwnam_alloc)
>   Finding user foo
> [2012/10/10 15:07:11.897896,  5] lib/username.c:116(Ge

[Samba] users map with ADS not working

2012-10-10 Thread Nitin Thakur

Hi All

I am running two instances of samba on same box. One instance of samba has 
joined AD domain ABC and the other 123. My workstation is on ABC domain and 
when I try to connect to samba server on ABC domain, it asks me for user name 
and password and then fails. If I put IP address instead it works. At the same 
time, when I try to connect to 123 domain, it asks me for user name and 
password and authenticates me without any problem. I set the debug level to 9 
on both the instances. I am not running winbind - please dont ask me why. The 
strange problem is when a user who has same unix and windows account in ABC 
domain, when he tries to log into the samba server which is on ABC domain, it 
works with hostname where as folks who has different accounts on windows and 
unix, it dosent work for them with hostname but with IP.

The Global section of both the instances is similar, here is the global section 
of samba server which is binding to ABC domain: -

#=== Global Settings =
[global]

socket options = TCP_NODELAY IPTOS_LOWDELAY
netbios name = TST-SMB-DEV
workgroup = ABC
server string = tst-smb-dev Server ver %v
security = ADS
log file = /opt/local/samba-3.6.7/dev/logs/log.%m
max log size = 50
password server =  AD1.ABC.com AD2.ABC.com
encrypt passwords = yes
realm = ABC.COM
local master = no
domain master = no
domain logons = no
dns proxy = no
smb passwd file = /opt/local/samba-3.6.7/dev/private
private dir = /opt/local/samba-3.6.7/dev/private
username map = /opt/local/samba-3.6.7/dev/users.map
pid directory = /opt/local/samba-3.6.7/dev
bind interfaces only = yes
wins support = no
domain master = no
locking = yes
lock directory = /opt/local/samba-3.6.7/dev/var/locks
preserve case = yes
short preserve case = yes
load printers = no
printcap name = /dev/null
deadtime = 15
preferred master = no
guest account = nobody
guest ok = no
syslog = 0
interfaces = 10.20.20.3
socket address = 10.20.20.3
kerberos method = system keytab
log level = 9


Here are the logs when user whose mapping is defined in users.map tries to log 
into samba instance which is binding to ABC domain

[2012/10/10 15:07:11.896408,  3] libads/authdata.c:332(decode_pac_data)
  Found account name from PAC: foo [Foo Bar]
[2012/10/10 15:07:11.896530,  3] 
auth/user_krb5.c:50(get_user_from_kerberos_info)
  Kerberos ticket principal name is [f...@abc.com]
[2012/10/10 15:07:11.896611,  4] auth/user_util.c:361(map_username)
  Scanning username map /opt/local/samba-3.6.7/dev/users.map
[2012/10/10 15:07:11.896665,  3] auth/user_util.c:402(map_username)
  Mapped user ABC\foo to bar
[2012/10/10 15:07:11.896725,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user bar
[2012/10/10 15:07:11.896758,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is bar
[2012/10/10 15:07:11.897025,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals did find user [bar]!
[2012/10/10 15:07:11.897418,  6] param/loadparm.c:7490(lp_file_list_changed)
  lp_file_list_changed()
  file /opt/local/Samba/lib/smb.conf.dev -> /opt/local/Samba/lib/smb.conf.dev  
last mod_time: Wed Oct 10 15:06:58 2012

[2012/10/10 15:07:11.897530,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user ABC\foo
[2012/10/10 15:07:11.897562,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is ABC\foo
[2012/10/10 15:07:11.897648,  5] lib/username.c:124(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as given is ABC\foo
[2012/10/10 15:07:11.897725,  5] lib/username.c:134(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as uppercase is ABC\foo
[2012/10/10 15:07:11.897798,  5] lib/username.c:143(Get_Pwnam_internals)
  Checking combinations of 0 uppercase letters in ABC\foo
[2012/10/10 15:07:11.897832,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals didn't find user [ABC\foo]!
[2012/10/10 15:07:11.897861,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user foo
[2012/10/10 15:07:11.897896,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is foo
[2012/10/10 15:07:11.897973,  5] lib/username.c:134(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as uppercase is foo
[2012/10/10 15:07:11.898045,  5] lib/username.c:143(Get_Pwnam_internals)
  Checking combinations of 0 uppercase letters in foo
[2012/10/10 15:07:11.898077,  5] lib/username.c:149(Get_Pwnam_internals)
  Get_Pwnam_internals didn't find user [foo]!
[2012/10/10 15:07:11.898222,  5] lib/username.c:171(Get_Pwnam_alloc)
  Finding user foo
[2012/10/10 15:07:11.898256,  5] lib/username.c:116(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as lowercase is foo
[2012/10/10 15:07:11.898332,  5] lib/username.c:134(Get_Pwnam_internals)
  Trying _Get_Pwnam(), username as uppercase is foo
[2012/10/10 15:07:11.898403,

[Samba] Share working with IP not with hostname

2012-09-10 Thread Nitin Thakur

hi guys

I managed to setup the share. I am able to access the share with IP address, 
but as soon as I try to do it via hostname, I get a user name and password pop 
up, which always fail to authenticate. Any setting I am missing?

Thanks

nitin
  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba upgrade problem with ADS

2012-09-06 Thread Nitin Thakur
is it possible to  run samba with ad  without winbind?

Nitin Thakur


---Original Message---
From: "Andrew Bartlett" 
Sent: 6/9/2012 20:42
To: nitintha...@hotmail.com
Cc: samba@lists.samba.org
Subject: Re: [Samba] Samba upgrade problem with ADS

On Wed, 2012-09-05 at 12:07 +0000, Nitin Thakur wrote:
> how about i get rid of secrets file all together?

You can delete secrets.tdb and secrets.ldb if either exists. 

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] NT_STATUS_LOGON_FAILURE configuring samba with ads and no winbind

2012-09-05 Thread Nitin Thakur

I cant figure this out reached to the end of internet.

i want to configure samba to work with ADS  but no winbind. I am able to do 
kinit and then net ads join. But every time I try to access the share i get 
prompted for uid and passwd and then authentication failure. when i look at the 
logs, server is able to find password server but cant find my ID in AD which 
exists... I always end up with this error.


Get_Pwnam_internals didn't find user [xxx]!
[2012/09/05 14:32:59.750611,  1] 
auth/user_krb5.c:162(get_user_from_kerberos_info)
  Username XXX\xxx is invalid on this system
[2012/09/05 14:32:59.750782,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/sesssetup.c(359) cmd=115 (SMBsesssetupX) 
NT_STATUS_LOGON_FAILURE


any pointers?

thanks

Nitin
  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba upgrade problem with ADS

2012-09-05 Thread Nitin Thakur
how about i get rid of secrets file all together?

Nitin Thakur


---Original Message---
From: "Andrew Bartlett" 
Sent: 5/9/2012 0:26
To: nitintha...@hotmail.com
Cc: samba@lists.samba.org
Subject: Re: [Samba] Samba upgrade problem with ADS

On Tue, 2012-09-04 at 22:10 -0400, Nitin Thakur wrote:
> hi gurus
> 
> My samba upgrade woes: -
> 
> I have to run 2 instances of samba one for dev and one for UAT. both the 
> instances are giving me hard time after the upgrade.
> 
> One instance keeps giving me following error: -
> 
>   connect_to_domain_password_server: unable to open the domain client session 
> to machine x.x.x.xxx.COM. Error was : 
> NT_STATUS_CANT_ACCESS_DOMAIN_INFO.
> [2012/09/04 16:19:36.993000,  0] 
> auth/auth_domain.c:292(domain_client_validate)

that means it could not find the domain password in secrets.tdb.  When
you upgraded, did you either copy the secrets.tdb to the new prefix, or
use the same prefix?

This doesn't explain the re-join issues, unless you are mixing up a
'net' binary from one release (and prefix) with smbd/winbindd from the
other however.

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba upgrade problem with ADS

2012-09-04 Thread Nitin Thakur

hi gurus

My samba upgrade woes: -

I have to run 2 instances of samba one for dev and one for UAT. both the 
instances are giving me hard time after the upgrade.

One instance keeps giving me following error: -

  connect_to_domain_password_server: unable to open the domain client session 
to machine x.x.x.xxx.COM. Error was : 
NT_STATUS_CANT_ACCESS_DOMAIN_INFO.
[2012/09/04 16:19:36.993000,  0] auth/auth_domain.c:292(domain_client_validate)

It returns this error for all the password servers. I deleted the server from 
ad and tried to rejoin the domain. it did join the domain but returned the 
error: -


# /opt/local/samba/bin/net -s /opt/local/samba/lib/smb.conf.dev ads join -U 
admin
Enter admin's password:
Using short domain name -- 
Joined '' to realm '...com'
DNS Update for x..xx.xxx.com failed: ERROR_DNS_UPDATE_FAILED
DNS update failed!

since then it keeps giving me error: -
[2012/09/04 21:43:10.299657,  0] smbd/server.c:1109(main)
  standard input is not a socket, assuming -D option
[2012/09/04 21:43:10.606915,  0] libads/kerberos_util.c:101(ads_kinit_password)
  kerberos_kinit_password X$@XXX.XX.XX.COM failed: Preauthentication 
failed
[2012/09/04 21:43:10.608476,  0] printing/nt_printing.c:102(nt_printing_init)
  nt_printing_init: error checking published printers: WERR_ACCESS_DENIED


moving on to other instance: -

[2012/09/04 15:51:47.207600,  5] rpc_client/cli_pipe.c:738(rpc_api_pipe_send)   
 
  rpc_api_pipe: host XX.X.X.XX.COM
[2012/09/04 15:51:47.209191,  5] rpc_client/cli_pipe.c:97(rpc_read_send)
  rpc_read_send: data_to_read: 52
[2012/09/04 15:51:47.209422,  5] rpc_client/cli_pipe.c:1521(check_bind_response)
  check_bind_response: accepted!
[2012/09/04 15:51:47.209687,  5] passdb/passdb.c:2365(get_trust_pw_clear)
  get_trust_pw_clear: could not fetch clear text trust account password for 
domain XX
[2012/09/04 15:51:47.209844,  5] 
passdb/machine_account_secrets.c:267(secrets_fetch_trust_account_password_legacy)
  secrets_fetch failed!
[2012/09/04 15:51:47.209998,  5] passdb/passdb.c:2403(get_trust_pw_hash)
  get_trust_pw_hash: could not fetch trust account password for domain XXX
[2012/09/04 15:51:47.210109,  0] 
rpc_client/cli_pipe_schannel.c:54(get_schannel_session_key_common)
  get_schannel_session_key: could not fetch trust account password for domain 
'X'
[2012/09/04 15:51:47.211665,  0] 
rpc_client/cli_pipe_schannel.c:184(cli_rpc_pipe_open_schannel)
  cli_rpc_pipe_open_schannel: failed to get schannel session key from server 
XXX.X.XXX.XX.COM for domain XX.
[2012/09/04 15:51:47.211845,  0] 
auth/auth_domain.c:193(connect_to_domain_password_server)
  connect_to_domain_password_server: unable to open the domain client session 
to machine ....COM. Error was : 
NT_STATUS_CANT_ACCESS_DOMAIN_INFO.
[2012/09/04 15:51:47.213484,  0] auth/auth_domain.c:292(domain_client_validate)
  domain_client_validate: Domain password server not available.
[2012/09/04 15:51:47.213654,  5] auth/auth.c:271(check_ntlm_password)
  check_ntlm_password: winbind authentication for user [] FAILED with error 
NT_STATUS_CANT_ACCESS_DOMAIN_INFO
[2012/09/04 15:51:47.213779,  2] auth/auth.c:319(check_ntlm_password)
  check_ntlm_password:  Authentication for user [X] -> [XX] FAILED with 
error NT_STATUS_CANT_ACCESS_DOMAIN_INFO
[2012/09/04 15:51:47.213950,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/sesssetup.c(124) cmd=115 (SMBsesssetupX) 
NT_STATUS_CANT_ACCESS_DOMAIN_INFO

Here is the smbd.conf for 1st instance
#=== Global Settings =
[global]

socket options = TCP_NODELAY IPTOS_LOWDELAY
netbios name = X
workgroup = X
server string =  Samba Server ver %v
security = ADS
log file = /opt/local/samba/dev/logs/log.%m
max log size = 50
password server =  xx...xxx.com, ...xxx.com
encrypt passwords = yes
realm = XXX..X.COM
local master = no
domain master = no
domain logons = no
dns proxy = no
smb passwd file = /opt/local/samba/dev/private
private dir = /opt/local/samba/dev/private
username map = /opt/local/samba/dev/users.map
pid directory = /opt/local/samba/dev
bind interfaces only = yes
wins support = no
domain master = no
allow trusted domains = yes
locking = yes
lock directory = /opt/local/samba/var/dev/locks
preserve case = yes
short preserve case = yes
name resolve order = host bcast
load printers = no
printcap name = /dev/null
deadtime = 15
preferred master = no
guest account = nobody
guest ok = yes
syslog = 0
interfaces = xxx.xxx.xxx.xxx
socket address = xxx.xxx.xxx.xxx

[share]
   comment  =  share
   path = /share
   read only = No
   create mask = 0774
   browseable = yes
   preserve case = yes


and smb.conf.uat for second instance 
[global]

socket options = TCP_NODELAY IPTOS_LOWDELAY
netbios name = X-UAT
workgroup = XX

Re: [Samba] Samba complie problem

2012-08-31 Thread Nitin Thakur

Well managed to fix it, it was openladap. Now I have problem with make: -

  SONAMEFLAG = -Wl,-soname=
Linking shared library bin/libtalloc.so.2
/usr/local/lib/gcc/sparc-sun-solaris2.10/3.4.6/../../../../sparc-sun-solaris2.10/bin/ld:
 anonymous version tag cannot be combined with other version tags
collect2: ld returned 1 exit status
*** Error code 1
The following command caused the error:
gcc -I/opt/local/samba/include -I/opt/local/samba/include -I.  
-I/opt/local/samba-3.6.7/source3  
-I/opt/local/samba-3.6.7/source3/../lib/iniparser/src  -Iinclude -I./include  
-I. -I. -I./../lib/replace -I./../lib/tevent -I./librpc -I./.. 
-I./../lib/talloc -I../lib/tdb/include  -DHAVE_CONFIG_H  
-I/opt/local/samba/include -I/opt/local/samba/include -I/usr/local/inclue 
-I/usr/sfw/include -D_REENTRANT -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 
-DLDAP_DEPRECATED -DSUNOS5-I/opt/local/samba-3.6.7/source3/lib  -I..  
-D_SAMBA_BUILD_=3 -D_SAMBA_BUILD_=3 -fPIC -shared -Wl,-z,relro 
-L/opt/local/samba/lib -R/opt/local/samba/lib -L/opt/local/samba/lib 
-R/opt/local/samba/lib -L/usr/local/lib -L/usr/sfw/lib -R/usr/local/lib 
-R/usr/sfw/lib -R/usr/lib -lthread -L./bin -lc -Wl,-z,defs 
-Wl,--version-script,/opt/local/samba-3.6.7/source3/exports/`basename 
bin/libtalloc.so.2 | sed 's:\.so[\.0-9]*$:.syms:'` -o bin/libtalloc.so.2 
../lib/talloc/talloc.o ./../lib/replace/replace.o ./../lib/replace
 /snprintf.o ./../lib/replace/getpass.o ./../lib/replace/strptime.o 
./../lib/replace/timegm.o  ./../lib/replace/getifaddrs.o -lnsl -lsocket 
-Wl,-soname=`basename bin/libtalloc.so.2`
make: Fatal error: Command failed for target `bin/libtalloc.so.2'

Any idea?

Thanks

Nitin

> From: nitintha...@hotmail.com
> To: samba@lists.samba.org
> Date: Thu, 30 Aug 2012 18:49:50 +
> Subject: Samba complie problem
> 
> hi  all
> 
> Samba build problem when compiling with --with-ads
> 
> I have complid, kerberos and openldap in /opt/local/samba and I am using gcc 
> with gnu binutils. Its a solaris 10 sparc.
> 
> Configure gives me following error: -
> 
> checking for LDAP support... yes
> checking ldap.h usability... yes
> checking ldap.h presence... yes
> checking for ldap.h... yes
> checking lber.h usability... yes
> checking lber.h presence... yes
> checking for lber.h... yes
> checking for ber_tag_t... yes
> checking for ber_scanf in -llber... yes
> checking for ber_sockbuf_add_io... yes
> checking for LDAP_OPT_SOCKBUF... yes
> checking for LBER_OPT_LOG_PRINT_FN... yes
> checking for ldap_init in -lldap... no
> checking for ldap_set_rebind_proc... no
> checking whether ldap_set_rebind_proc takes 3 arguments... 3
> checking for ldap_initialize... no
> configure: error: libldap is needed for LDAP support
> 
> Config.log output: -
> 
> configure:25335: gcc -o conftest -I/opt/local/samba/include 
> -I/opt/local/samba/include -D_REENTRANT -D_LARGEFILE_SOURCE 
> -D_FILE_OFFSET_BITS=64 -I/usr/include -L/opt/local/samba/lib 
> -R/opt/local/samba/lib -lthread -L./bin -L/usr/lib conftest.c -lldap -llber   
> -lresolv -lrt-lnsl -lsocket  -lmd5 -lrt  -liconv >&5
> /usr/local/lib/gcc/sparc-sun-solaris2.10/3.4.6/../../../../sparc-sun-solaris2.10/bin/ld:
>  /opt/local/samba/lib/libldap.so: dladdr: invalid version 12 (max 0)
> /opt/local/samba/lib/libldap.so: could not read symbols: Bad value
> 
> I installed openldap in /opt/local/samba.
> 
> # find /opt/local/samba -name libldap\*
> /opt/local/samba/lib/libldap_r.a
> /opt/local/samba/lib/libldap.so
> /opt/local/samba/lib/libldap.la
> /opt/local/samba/lib/libldap-2.4.so.2
> /opt/local/samba/lib/libldap.a
> /opt/local/samba/lib/libldap_r.so
> /opt/local/samba/lib/libldap_r-2.4.so.2
> /opt/local/samba/lib/libldap-2.4.so.2.8.4
> /opt/local/samba/lib/libldap_r-2.4.so.2.8.4
> /opt/local/samba/lib/libldap_r.la
> 
> Thanks
> 
> Nitin
  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba complie problem

2012-08-30 Thread Nitin Thakur
hi  all

Samba build problem when compiling with --with-ads

I have complid, kerberos and openldap in /opt/local/samba and I am using gcc 
with gnu binutils. Its a solaris 10 sparc.

Configure gives me following error: -

checking for LDAP support... yes
checking ldap.h usability... yes
checking ldap.h presence... yes
checking for ldap.h... yes
checking lber.h usability... yes
checking lber.h presence... yes
checking for lber.h... yes
checking for ber_tag_t... yes
checking for ber_scanf in -llber... yes
checking for ber_sockbuf_add_io... yes
checking for LDAP_OPT_SOCKBUF... yes
checking for LBER_OPT_LOG_PRINT_FN... yes
checking for ldap_init in -lldap... no
checking for ldap_set_rebind_proc... no
checking whether ldap_set_rebind_proc takes 3 arguments... 3
checking for ldap_initialize... no
configure: error: libldap is needed for LDAP support

Config.log output: -

configure:25335: gcc -o conftest -I/opt/local/samba/include 
-I/opt/local/samba/include -D_REENTRANT -D_LARGEFILE_SOURCE 
-D_FILE_OFFSET_BITS=64 -I/usr/include -L/opt/local/samba/lib 
-R/opt/local/samba/lib -lthread -L./bin -L/usr/lib conftest.c -lldap -llber   
-lresolv -lrt-lnsl -lsocket  -lmd5 -lrt  -liconv >&5
/usr/local/lib/gcc/sparc-sun-solaris2.10/3.4.6/../../../../sparc-sun-solaris2.10/bin/ld:
 /opt/local/samba/lib/libldap.so: dladdr: invalid version 12 (max 0)
/opt/local/samba/lib/libldap.so: could not read symbols: Bad value

I installed openldap in /opt/local/samba.

# find /opt/local/samba -name libldap\*
/opt/local/samba/lib/libldap_r.a
/opt/local/samba/lib/libldap.so
/opt/local/samba/lib/libldap.la
/opt/local/samba/lib/libldap-2.4.so.2
/opt/local/samba/lib/libldap.a
/opt/local/samba/lib/libldap_r.so
/opt/local/samba/lib/libldap_r-2.4.so.2
/opt/local/samba/lib/libldap-2.4.so.2.8.4
/opt/local/samba/lib/libldap_r-2.4.so.2.8.4
/opt/local/samba/lib/libldap_r.la

Thanks

Nitin
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba