RE: [Samba] Really bad Read performance
Hi Thomas, Your is a common complaint on this list and typically it always seems to come back to network hardware problems rather than software. Run ifconfig on your interface and see if there are any errors listed. If you see none then i strongly recommend you swap the cable, NIC, switch/hub - very good chance this will take you closer to a solution than fiddling with Samba parameters which are best left on their defaults! It has happened to me a couple of times. When the network hardware is working properly you see great performance from a default Samba install. Good luck, Noel -Original Message- From: news.broadpark.no [mailto:[EMAIL PROTECTED]] Sent: 23 January 2003 07:57 To: [EMAIL PROTECTED] Subject: [Samba] Really bad Read performance Running Samba 2.2.7, compiled with LDAP support. I'm suffering from really poor read performance problems on the server. Write speed is fine (after adding "interface = /24"), giving about 4.4 MB/s. However, reading files from the samba shares is just not usable. Reading a large (34 MB) file from the server takes more than 3 minutes on a W2K Pro client. NIC on both server and client is set to 100/FD. I've tried changing "socket options = ...", but no settings I've come accoss makes any difference. Does anyone have any good ideas as to what I can do to fix this? Regards, Thomas -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Really bad Read performance
That is the insidious nature of network hardware I'm afraid - horrible errors can easily go unreported and undetected. Well done for detecting it and pursuing it rather than ignoring it! - Original Message - From: "Thomas Nilsen" <[EMAIL PROTECTED]> To: "Noel Kelly" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; "Bradley W. Langhorst" <[EMAIL PROTECTED]> Sent: Monday, January 27, 2003 7:01 AM Subject: RE: [Samba] Really bad Read performance > Turned out to be a hardware issue. The server NIC was forced 100/DF, but setting this back to auto-negotiate solved the issue. But for some reason, copy and read from a SMB share mounted under linux gave flawless performance. ifconfig didn't show any errors either. > > Thomas > > >-Original Message- > >From: Noel Kelly [mailto:[EMAIL PROTECTED]] > >Sent: Saturday, January 25, 2003 6:21 PM > >To: Thomas Nilsen; [EMAIL PROTECTED] > >Subject: RE: [Samba] Really bad Read performance > > > > > >Hi Thomas, > > > >Your is a common complaint on this list and typically it > >always seems to > >come back to network hardware problems rather than software. > > > >Run ifconfig on your interface and see if there are any errors > >listed. If > >you see none then i strongly recommend you swap the cable, > >NIC, switch/hub - > >very good chance this will take you closer to a solution than > >fiddling with > >Samba parameters which are best left on their defaults! > > > >It has happened to me a couple of times. When the network hardware is > >working properly you see great performance from a default > >Samba install. > > > >Good luck, > >Noel > > > >-Original Message- > >From: news.broadpark.no [mailto:[EMAIL PROTECTED]] > >Sent: 23 January 2003 07:57 > >To: [EMAIL PROTECTED] > >Subject: [Samba] Really bad Read performance > > > > > >Running Samba 2.2.7, compiled with LDAP support. I'm suffering > >from really > >poor read performance problems on the server. Write speed is > >fine (after > >adding "interface = /24"), giving about 4.4 MB/s. However, > >reading files from the samba shares is just not usable. > >Reading a large (34 > >MB) file from the server takes more than 3 minutes on a W2K Pro client. > > > >NIC on both server and client is set to 100/FD. > > > >I've tried changing "socket options = ...", but no settings > >I've come accoss > >makes any difference. > > > >Does anyone have any good ideas as to what I can do to fix this? > > > >Regards, Thomas > > > > > > > > > > > > > > > >-- > >To unsubscribe from this list go to the following URL and read the > >instructions: http://lists.samba.org/mailman/listinfo/samba > > > > > DISCLAIMER: > This message contains information that may be privileged or confidential and is the property of the Roxar Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorised to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Automounting
Your automount setup looks fine to me. I was comparing it to my working one here and cannot see any difference except I use IP addresses in my target share names: [root@medulla /root]# cat /etc/auto.master # $Id: auto.master,v 1.2 1997/10/06 21:52:03 hpa Exp $ # Sample auto.master file # Format of this file: # mountpoint map options # For details of the format look at autofs(8). /ukfax /etc/auto.ukfax --timeout=60 /cortex /etc/auto.cortex--timeout=60 [root@medulla /root]# cat /etc/auto.cortex # $Id: auto.misc,v 1.2 1997/10/06 21:52:04 hpa Exp $ # This is an automounter map and it has the following format # key [ -mount-options-separated-by-comma ] location # Details may be found in the autofs(5) manpage backups -fstype=smbfs,username=medulla,password=medulla ://192.168.5.16/backups docs-fstype=smbfs,username=medulla,password=medulla ://192.168.5.16/docs If I then do an 'ls /cortex/docs' the share is automounted and I see the dir-isting from the NT server. You are triggering the automount by attempting access on the mount point? Cheers, Noel -Original Message- From: Johan Svedberg [mailto:[EMAIL PROTECTED]] Sent: 28 January 2003 18:03 To: [EMAIL PROTECTED] Subject: [Samba] Automounting Hi, all! I'm having some problems automounting Windows shares from my Debian GNU/Linux system. However, doing it manually with mount -t smbfs -o username=Johan,password=foobar //nisse/C /var/autofs/nisse/ works flawless. I'm totaly new with autofs so I don't know if I'm my setup is right, but this is what I've done; /etc/auto.master: /var/autofs/nisse /etc/auto.nisse /etc/auto.nisse: nisse -fstype=smbfs,username=Johan,password=foobar://nisse/C I don't know if it's useful but this is what I see in syslog: Jan 28 18:17:30 bettan automount[218]: starting automounter version 4.0.0, path = /var/autofs/nisse, maptype = file, mapname = /etc/auto.nisse Jan 28 18:17:30 bettan automount[218]: Map argc = 1 Jan 28 18:17:30 bettan automount[218]: Map argv[0] = /etc/auto.nisse Jan 28 18:17:30 bettan automount[218]: mount(bind): bind_works = 1 What am I missing here? :) PS. Please Cc me since I'm not subscribed. Thanks. Regards, -- Johan Svedberg, [EMAIL PROTECTED], http://www.acc.umu.se/~winkle -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Automounting
Hi, 'autofs status' gives me: [root@medulla /root]# /etc/init.d/autofs status Configured Mount Points: /usr/sbin/automount --timeout 60 /misc file /etc/auto.misc /usr/sbin/automount --timeout 60 /ukfax file /etc/auto.ukfax /usr/sbin/automount --timeout 60 /cortex file /etc/auto.cortex Active Mount Points: /usr/sbin/automount --timeout 60 /misc file /etc/auto.misc /usr/sbin/automount --timeout 60 /ukfax file /etc/auto.ukfax /usr/sbin/automount --timeout 60 /cortex file /etc/auto.cortex [root@medulla /root]# and 'df' gives me: [root@medulla /root]# df Filesystem 1k-blocks Used Available Use% Mounted on /dev/sda6 3937220 2395084 1342132 65% / /dev/sda154416 3853 47754 8% /boot /dev/sdb1 35515412 8040072 25671244 24% /novanet [root@medulla /root]# The automount points are not listed. HTH, Noel -Original Message- From: 'Johan Svedberg' [mailto:[EMAIL PROTECTED]] Sent: 28 January 2003 19:56 To: Noel Kelly Subject: Re: [Samba] Automounting * 030128 20:04 Noel Kelly <[EMAIL PROTECTED]>: >> -Original Message- >> From: Johan Svedberg [mailto:[EMAIL PROTECTED]] >> Sent: 28 January 2003 18:03 >> To: [EMAIL PROTECTED] >> Subject: [Samba] Automounting >> >> >> Hi, all! >> >> I'm having some problems automounting Windows shares from my Debian >> GNU/Linux system. However, doing it manually with >> >> mount -t smbfs -o username=Johan,password=foobar //nisse/C >> /var/autofs/nisse/ >> >> works flawless. >> >> I'm totaly new with autofs so I don't know if I'm my setup is right, but >> this is what I've done; >> >> /etc/auto.master: >> >> /var/autofs/nisse /etc/auto.nisse >> >> /etc/auto.nisse: >> >> nisse -fstype=smbfs,username=Johan,password=foobar://nisse/C >> >> I don't know if it's useful but this is what I see in syslog: >> >> Jan 28 18:17:30 bettan automount[218]: starting automounter version >> 4.0.0, path = /var/autofs/nisse, maptype = file, mapname = >> /etc/auto.nisse >> Jan 28 18:17:30 bettan automount[218]: Map argc = 1 >> Jan 28 18:17:30 bettan automount[218]: Map argv[0] = /etc/auto.nisse >> Jan 28 18:17:30 bettan automount[218]: mount(bind): bind_works = 1 >> >> What am I missing here? :) > Your automount setup looks fine to me. I was comparing it to my working one > here and cannot see any difference except I use IP addresses in my target > share names: Another difference is that you are using a lower timeout. > [root@medulla /root]# cat /etc/auto.master > # $Id: auto.master,v 1.2 1997/10/06 21:52:03 hpa Exp $ > # Sample auto.master file > # Format of this file: > # mountpoint map options > # For details of the format look at autofs(8). > /ukfax /etc/auto.ukfax --timeout=60 > /cortex /etc/auto.cortex--timeout=60 [...] > If I then do an 'ls /cortex/docs' the share is automounted and I see the > dir-isting from the NT server. You are triggering the automount by > attempting access on the mount point? Yes, but df shows that it doesn't even get mounted (when I use autofs). I'm suspecting that it might have something to do with that the PCMCIA gets reset:ed by cardctl (and then goes active again) after the autofs has been run:ed. But issueing /etc/init.d/autofs stop and then start wont work either. Tell me, what output does '/etc/init.d/autofs status' give you? Mine shows: Configured Mount Points: /usr/sbin/automount --timeout=300 /var/autofs/nisse file /etc/auto.nisse Active Mount Points: /usr/sbin/automount --pid-file=/var/run/autofs/_:var_:autofs_:nisse.pid --timeout=300 /var/autofs/nisse file /etc/auto.nisse Gah, this is driving me nuts since it works so nice doing it from the commandline... PS. Don't forget to Cc me since I'm not subscribed. Regards, -- Johan Svedberg, [EMAIL PROTECTED], http://www.acc.umu.se/~winkle -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba/Windows XP and SSH tunnelling
You cannot forward UDP using SSH. This is why the hack to set the remote server's Netbios name to 127.0.0.1 using lmhosts is used. I tried this before and it seems that Windows 2000/XP refuse to load the loopback address as a valid netbios destination IP. Can the original poster tell me what happens when he tries to ping the remote hostname? Does he get replies from 127.0.0.1? Or does it just not resolve and using 'nbtstat -c' shows no evidence of it being loaded from the lmhosts? I suspect the latter - try changing the entry in lmhosts to something other than the loopback and then do a 'nbtstat -R' to flush the cache. An 'nbtstat -c' will then show it listed in the cache. HTH Noel > The firewall on my workstation (inside our otherwise > firewalled network) has UDP 137+8 and TCP 139 open, > so > you should probably forward those UDP ports, too. I > don't know if PuTTY will let you forward UDP though. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba/Windows XP and SSH tunnelling
François I am afraid you have reached the exact same conclusions that i did and from what i could figure there was no way it would work becasue of the refusal of 2000/XP to load the loopback from lmhosts. If you do figure it out then let me know! It would certainly be very useful but for the moment i am using Freeswan, Cheers, Noel -Original Message- From: François Mayrand [mailto:[EMAIL PROTECTED]] Sent: 10 February 2003 20:30 To: Noel Kelly Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Samba/Windows XP and SSH tunnelling Hi Noel, Great! I'm glad to see you had the same problem caching the loopback on Windows XP. How did you solve this? Here is my setup info and the answers to your questions. My samba server's IP is 192.168.0.2 I have a firewall on the samba server blocking port 139. I want to block this port and force my file transfers to go through the SSH tunnel. I'm forwarding the local 139 port on the Windows box to the samba server's port 139 with PuTTY: plink 192.168.0.2 -l username -L 139:192.168.0.2:139 -v My lmhosts file contains: 127.0.0.1 SAMBASERVER #PRE I flushed the cache and preloaded it with 'nbtstat -R' I checked the cache with 'nbtstat -c' and the binding between 127.0.0.1 and SAMBASERVER doesn't appear. > Can the original poster tell me what happens when he tries to ping the > remote hostname? ping 192.168.0.2 --> It works Does he get replies from 127.0.0.1? net view 127.0.0.1 --> This shows my shares on my Windows XP box instead of my shares on SAMBASERVER If I change my lmhosts file to: 192.168.0.2 SAMBASERVER #PRE I can load it into the NetBIOS cache without any problems but... this doesn't solve the problem because when I run 'net view \\SAMBASERVER' I get an error 1234 (No service at port 139). This is because of my firewall on the server that blocks connections to port 139. In this configuration the Windows box is trying to connect directly to port 139 on the Samba box. That's the whole point of this exercise. I don't want to connect directly to port 139 on the server, I want it to go through the SSH tunnel. Thanks, François - Original Message - From: "Noel Kelly" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; "Jon Niehof" <[EMAIL PROTECTED]>; "'François Mayrand'" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, February 10, 2003 2:24 PM Subject: RE: [Samba] Samba/Windows XP and SSH tunnelling > You cannot forward UDP using SSH. This is why the hack to set the remote > server's Netbios name to 127.0.0.1 using lmhosts is used. > > I tried this before and it seems that Windows 2000/XP refuse to load the > loopback address as a valid netbios destination IP. > > Can the original poster tell me what happens when he tries to ping the > remote hostname? Does he get replies from 127.0.0.1? Or does it just not > resolve and using 'nbtstat -c' shows no evidence of it being loaded from the > lmhosts? I suspect the latter - try changing the entry in lmhosts to > something other than the loopback and then do a 'nbtstat -R' to flush the > cache. An 'nbtstat -c' will then show it listed in the cache. > > HTH > Noel -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.449 / Virus Database: 251 - Release Date: 27/01/2003 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.449 / Virus Database: 251 - Release Date: 27/01/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] nmbd in redhat 8.0
I think you are seeing a problem with the Redhat /etc/rc.d/init.d/smb script. When you set Samba to be a WINS server it starts two nmbd processes rather than just one. Redhat's smb script only stops one of these leaving the other one chugging away. Try running 'service smb stop' or '/etc/rc.d/init.d/smb stop' twice and you will see they are both killed off. HTH -Original Message- From: Jason Norred [mailto:[EMAIL PROTECTED] Sent: 26 February 2003 04:50 To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: [Samba] nmbd in redhat 8.0 I have the same problem with my RH8 server... I have no clue... Anyone have any ideas On Tue, 2003-02-25 at 16:17, [EMAIL PROTECTED] wrote: > If I enable wins support = yes & I start smbd it starts smb & nmb. When I > restart the service it says that there is no nmb service at 10045 running. > When I do a ps -aux, you can still see the service running. They will > keep building up until I manually delete them. Does anyone know how to > fix this? -- Jason Norred <[EMAIL PROTECTED]> Norred Technical Services -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] PDF Printer issue
Might not be much help but you could try and use 'use client driver = yes'. Also very nice PDF/Samba Howto here: http://www.linuxgazette.com/issue72/bright.html -Original Message- From: Robert Adkins II [mailto:[EMAIL PROTECTED] Sent: 24 February 2003 22:09 To: [EMAIL PROTECTED] Subject: [Samba] PDF Printer issue Hello Everyone, I have a slight issue with configuring a PDF printer on my Samba servers. I have input the following into my smb.conf file and it does create the printer as well as work to create PDF files, except that it only functions when "printing" to that printer via Excel 2002. If I attempt it with anything else, even the Windows Test print, it fails. Now, in the Windows Printers folder, if I select the PDF printer the status box states that the printer is inactive and not ready. However, if I browse to the printer through the Windows Explorer Network Neighborhood, the printer shows up as active and ready. I am unsure quite what the problem is, which means it is likely something very easy. There is one thing to note, I have not a single Linux Printing Subsystem running on the machine as this server is not being used for regular printing of any sort. Here is my smb.conf section: [purchpdf] comment = PDF Generator for Purchasing path = /var/spool/samba valid users = *UserNames Removed* write list = *UserNames Removed* printable = yes print command = gs -dNOPAUSE -dbatch -q -sDEVICE=pdfwrite -sOutputFile=/share/purchasing/pdf/%J.pdf <%J 1>/dev/null 2>&1; rm -f %J Thanks for any assistance that can be rendered. Regards, Robert Adkins II IT Manager/Buyer Impel Industries, Inc. 586-254-5800 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] XP needs ~30seconds to open network share
Make sure you have not inadvertently enabled the XP firewall on your network interface - if you can see a small padlock on the icon in Network COnncections, check the Security tab in Properties. Alos, check your IP Security Policies inside Security Policy in Control Panel/Admin Tools - look for XP defaulting to using encryption etc. Set it to open. Might help? -Original Message- From: Patrick Gunerud [mailto:[EMAIL PROTECTED] Sent: 21 February 2003 19:13 To: Toni Guedes Cc: Samba List Subject: Re: [Samba] XP needs ~30seconds to open network share There could be some dns problems, or nmbd might not be running, but it should not take that long unless the server is really loaded. Patrick Toni Guedes wrote: >>>Try disabling the WebClient under services of the XP clients. XP >>>first >>>tries to use webdav to connect to the share when that times >>> >>> >>out it will >> >> >>>then use smb. >>> >>> >>If that really improves the reconnection speeds when using >>deadtime for example, please include this tip in the samba >>documentation. Near the sign or seal registry tips would be a >>good place imo. >> >>Did anyone test the difference in connection times? At my >>location we use kixart scripts to connect to 10+ shares when >>logging on to the smb PDC, any tips? >> >>Regards, >> >>| >>| Leroy(dot)vanLogchem (at) wldelft(dot)nl >>| Systems Group >>| WL | Delft Hydraulics - http://www.wldelft.nl >>| >> >> >> > >Hi, > >WebClient is disabled but XP takes more than 10 seconds to open a share. >Is it normal? > >Toni Guedes - Informática/CPD >Max Love Cosméticos Ltda. > > > > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Backup - suggestions needed....
Are you using the 64bit Alpha version? As the author says, 4Gb backups are any good to anyone... -Original Message- From: TJ Davis [mailto:[EMAIL PROTECTED] Sent: 12 March 2003 20:31 To: 'Chris McKeever'; [EMAIL PROTECTED] Subject: RE: [Samba] Backup - suggestions needed I use taper as my backup software and it works VERY well. Free is good too. :-) http://taper.sourceforge.net/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Outlook .pst files on Samba PDC
I agree - keeping any valuable data in a profile is asking for trouble - especially as profiles get overwritten so you have no chance of recovering a lost one. PST files also grow exponetially so you will soon be looking at huge login/logoff times as huge PST files are copied up and down to the server. Why not position the PSTs in the user's home drive? We have done this before and it works OK. We also have the Desktop folder in their home drive as well so people can save stuff there and not worry about it being lost through over write next time the client/server disagree about the profile sync. The only thing you want in the profile are those program settings which can be recreated - keep any real data well away. Noel -Original Message- From: Tarjei Huse [mailto:[EMAIL PROTECTED] Sent: 17 March 2003 20:15 To: Alex Cc: SambaList; Kurt Weiss Subject: Re: [Samba] Outlook .pst files on Samba PDC Hi, I think there's only one solution in the end: store your users mails on an imapserver. As profiles grow, they sometimes get corrupted, also, if you just keep pstfiles on the server (possible w/outlook) you end up getting trouble anyway (in my experience). > > > Solutions that have worked have ranged from complete loss of the .pst you got some fine solutins :P Also, while you're at it; consider moving to mandatory profiles. They save you a _lot_ of work. Just my .02 cent. tarjei > file > > > to restarting users profile from scratch. thanks > > > > > > Alex Genna > > > > > > > > > -- Tarjei Huse <[EMAIL PROTECTED]> NU -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Performance Increase Suggestions
Just a thought, but I would check for errors on your NIC with ifconfig. Read times might still be quite good whilst write times are shot if there are network errors I have found. Noel Without spending money, are there any other methods through which I can dramatically increase the network write performance? Regards, Robert Adkins II IT Manager/Buyer Impel Industries, Inc. 586-254-5800 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Performance Increase Suggestions
Or you could just switch the filesystems to ext2? I believe this is just a case of changing your mount options in fstab and I think this is what John was alluding to earlier - ext3 adds a lot of baggage to the ext2 structure which slows it down quite considerably. Reiser and XFS were designed from the bottom up so make the journalling less of a performance issue. I guess it depends if you want to lose the journalling to gain performance? HTH Cheers, Noel -Original Message- From: Robert Adkins II [mailto:[EMAIL PROTECTED] Sent: 18 March 2003 15:15 To: Noel Kelly; [EMAIL PROTECTED] Subject: RE: [Samba] Performance Increase Suggestions Noel, I had already checked the NIC and found VERY acceptable errors. In over 2GBs of data transferred since my last scheduled maintenance reboot, there has only been 3 errors and 1 overrun. Which to me, is negligible as far as errors go. I have a sinking suspicion, that I am none to happy about, that I will need to compile a kernel with ReiserFS support, move ALL the data off of the Samba share, rebuild that partition with ReiserFS, recreate all the file permissions and then copy all of the data back over. This will of course take a few weeks, as I will need to run plenty of tests on the "spare" server and I only have a few hours available each week to work up such changes. Well, so much for the "quick" and simple fix. Regards, Robert Adkins II IT Manager/Buyer Impel Industries, Inc. 586-254-5800 -Original Message----- From: Noel Kelly [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 18, 2003 9:41 AM To: 'Robert Adkins II'; [EMAIL PROTECTED] Subject: RE: [Samba] Performance Increase Suggestions Just a thought, but I would check for errors on your NIC with ifconfig. Read times might still be quite good whilst write times are shot if there are network errors I have found. Noel Without spending money, are there any other methods through which I can dramatically increase the network write performance? Regards, Robert Adkins II IT Manager/Buyer Impel Industries, Inc. 586-254-5800 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Cannot login from XP pro to PDC
You need to tweak the registry key [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] "requiresignorseal"=0 All found here in the HOWTO: http://hr.uoregon.edu/davidrl/samba/samba-pdc.html#joining Make sure also that your XP machine does not have any firewalling enabled on the LAN interface - if it has been near an open internet connection this can trigger a wizard to enable this. Noel -Original Message- From: loren.erwin [mailto:[EMAIL PROTECTED] Sent: 18 March 2003 16:26 To: [EMAIL PROTECTED] Subject: [Samba] Cannot login from XP pro to PDC I have looked for this specific error and cannot find it. Net setup: Redhat 7.2 w/ Samba 2.2.7 as PDC XP Pro SP1 laptop and desktop I can join the domain, but after rebooting I cannot login to the domain. Error is that I cannot connect to domain. This pops up immediately. If I logon to the local machine, I see everything in the domain. I have played with this for about two days. Loren [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] even worse after another upgrade to 2.2.8!
If your log files is anything to go by it looks like you already have a Samba process running - it cannot bind to the port as something has already nabbed it. Did you kill off all the old smbd processes? Assume when you upgraded to XP you made the 'requiresignorseal' changes to the registry? And make sure that XP firewalling is not enabled on your LAN interface - XP requires a response from the server when printing which the firewall blocks and XP locks up for 5mins. HTH Noel -Original Message- From: Jeff D. Hamann [mailto:[EMAIL PROTECTED] Sent: 18 March 2003 19:21 To: [EMAIL PROTECTED] Subject: [Samba] even worse after another upgrade to 2.2.8! I haven't had any luck printing to printer attached to my FreeBSD machine using samba (local printing works fine) after upgrading to 2.2.7a and using XP. I could see my shared home directory from both XP and 2K and can still see my home dir from the w2k machine. Now, when I try to map to my home dir from XP, the printer status window appears (this time without the "access denied" message), I cannot map to my home directory. On the windows 2k machine, I don't get the "access denied" but can't print either. So, in frustration, I went into the XP registry and tried to delete every reference to the samba resources (printers, shared drives already mapped, etc) and I still get the same responses. Here's a list of the actions: 1) When I attempt to map my user shared drive (in xp), the printer status window for the only printer on the unix machine appears without error messages. 2) When I attempt to map to the only printer on the unix machine (in xp), the printer status window apprears briefly, then goes away. 3) If I select the user dir to "map to a network drive" I get the printer pull-down menu "open, connect, etc, etc". again xp 4) Same with the real printer. When I try to connect, a windows flashes and I get nothing. again xp machine. 5) On the win2k machine, I can see the share drive, map, etc. everything is okay for the shared drive. 6) on the 2k machine, the printer window comes up without error messages, but I still cannot print. Here's the log file from the activity so far... ack! I cannot get to my shared drive so I'll have to get the files by floppy or something... There must be a version that works (I've updated from 2.0.10 and it worked fine with all my win2k machines). Please help. Jeff. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] XP clients & inexplicable pauses
Jeremy, Just finished an install at a customer's site with XP clients and 2.2.6 PDC. One client was really troublesome and kept freezing, especially when we went anywhere near the network printer - perhaps two mins of dead time then. After much knashing of teeth, eventually realised from the logs that Samba was tryng to talk back ot the client spooler. Then noticed a tiny little padlock on the network interface on the client and sure enough the XP firewall had been enabled before our arrival on site. Killed the firewall off and it fell into line. HTH Noel -Original Message- From: Jeremy Wohl [mailto:jeremyw-ml@;igmus.org] Sent: 23 October 2002 05:27 To: [EMAIL PROTECTED] Subject: [Samba] XP clients & inexplicable pauses Hi folks, I recently upgraded two client/server pairs to WinXP and Samba 2.2.6 (on Linux). Browsing mounted shares causes hangs when right-clicking or double-clicking/ launching files -- about 15 seconds. During this, precious little network activity is occuring. Something is hanging, locking, sleeping. Appreciate any advice. Hope it's a simple fix. If not, I'd appreciate advice on where in the code I might start instrumenting/debugging. thanks, -jeremy _ jeremy wohl ..: http://igmus.org -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: Fwd: [Samba] XP-Problem - suddenly XP canot connect to samba
That might of been me. I have been playing around with XP and Samba. The problem I had was that I changed the signorseal reg key and then successfully joined the domain. However on rebooting, the XP client simply did not want to even entertain the idea of logging onto the domain it just joined! Eventually, I changed the Local Security Policy under the Control Panel. In there are three policies which seem to control talking to domain controllers etc (Sorry I don't have an XP machine in front of me so exact terminology M$ use might be wrong). Basically these policies say that when talking to DCs etc to use Kerberos. As soon as I changed these to simply 'Permit' eveything cam good and I have had no further problems. This is NOT the XP firewall - that is changed elsewhere. This is Security Policies. I would be interested to know if this fixes this scenario. I have not had the inclination to investigate it in more depth, but 2000Pro seems to have similar policies but they do not interfere... HTH Noel -Original Message- From: linux power [mailto:linuxpower2002@;yahoo.no] Sent: 11 October 2002 19:23 To: [EMAIL PROTECTED] Subject: Re: Fwd: [Samba] XP-Problem - suddenly XP canot connect to samba I still claim to the firewall theory. Another reader had the same problem a week ago. And he find out it was not enough to change the firewall policy. M$ had made it difficult to connect to other systems. You must quit the XP firewall completely. Unfortunely I cant remember how he did it, but he said it was not enogh to change the policity. --- "Dr. Bernd Zimmermann" <[EMAIL PROTECTED]> skrev: > No I dont think so. > > I looked at the box and could not see something like > that, > but I also did not know who to activate bridging > under XP. > Never saw that. > > Regards, > Bernd > > Chris Berry wrote: > > > Did he activate the network bridging feature? > > > > > >> From: "Dr. Bernd Zimmermann" > <[EMAIL PROTECTED]> > >> To: [EMAIL PROTECTED] > >> Subject: Re: Fwd: [Samba] XP-Problem - suddenly > XP canot connect to > >> samba > >> Date: Fri, 11 Oct 2002 19:18:13 +0200 > >> > >> Hi, > >> > >>> Message: 5 > >>> Date: Fri, 11 Oct 2002 16:46:35 +0200 (CEST) > >>> From: =?iso-8859-1?q?linux=20power?= > <[EMAIL PROTECTED]> > >>> Subject: Fwd: [Samba] XP-Problem - suddenly XP > canot connect to samba > >>> To: [EMAIL PROTECTED] > >>> > >>> He could have changed the firewall setting in > XP. > >>> > >>> > >>> > >> No thats not the problem. I checked it, and the > security settings are > >> not activated. > >> All ports and all protocols are open. All other > NT and Win98 Bixes > >> can connect. > >> > >> As I written below, I started a tcpdump on the > linux box an I saw > >> that when > >> bowsing the network on the XP box, I can see > packets going from the > >> XP box to 224.0.1.22 (srvloc.mcast.net), but no > packets to the > >> usual port 137-139. > >> In the XP network neighborhood I also can see > other Workgroups and > >> other Windows-PC but not the samba server. > >> > >> I also remeber a case, where somebody told me, > that he was playing with > >> a new XP installation - at the beginning > everything worked fine an he > >> also > >> could connect to his samba server, but then he > klicked the option to > >> install the xp home network in the network > assistant. From that point on > >> he also had the problem that the samba server > disappeared and he wasnt > >> able to get it back to work. So he decided to > swaitch back to Win98 ... > >> > >> Isnt there anybody out there having the same > problems ? > >> If its so easy to destroy the working samba > connection with XP pressing > >> the worng button, the must be hundreds of people > havin the sam problem. > >> > >> As I told below, I alreday tried all registry > hacks, disabling > >> certificates, signing > >> and so on, but nothing worked. > >> > >> Please help. > >> > >> Regards, > >> Bernd > >> > >>> --- "Dr. Bernd Zimmermann" > >>> <[EMAIL PROTECTED]> skrev: > Fra: > "Dr. > >>> Bernd Zimmermann" > >>> > >>> > <[EMAIL PROTECTED]> > Til: [EMAIL PROTECTED] > Tema: [Samba] XP-Problem - suddenly XP canot > connect > to samba > Dato: Fri, 11 Oct 2002 14:48:11 +0200 > > Hi, > > we had an XP computer running and connection to > our > Samba -Server (Debian Version, 2.2.3 ) was > working > very fine. > > Suddenly - the person who is working on that > computer > changed something, but could not remember what > - > the XP computer cannot see the samba server > anymore. > > In the windows network there is no samba server > visible > Also "searching for the computer" does not work > either > via netbios name and ip adress > The samba computer is still invisible > > Tcpdumping on the samba computer shows no port > 137,138,139 > connections. Only connection from the xp > computer to > 224.0.1.22 >
RE: [Samba] Problems logging onto Samba from Winxp
Check the XP firewall is not enabled - joining the domain probably requires the server to contact the client and a firewall would block this type of traffic. HTH -Original Message- From: Josh Hiner [mailto:jdhiner@;hline.org] Sent: 21 October 2002 15:18 To: [EMAIL PROTECTED] Subject: [Samba] Problems logging onto Samba from Winxp Hello. I have a network with a server running Samba 2.2.5. I just recieved a laptop from Compaq with winxp on it. I already have a few winxp boxes on my network connecting to the Samba server just fine so I though setting up this laptop should be a breeze but after I change the required registry entries on this laptop (the "requires sign or seal registry entry to 0") It gives me the error "No mapping between account names and security IDs was done" When I try and get it to join the domain. The laptop is on the network/can browse the network and reach the internet. All other boxes including my other winxp boxes are logging into the samba server correctly. --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Problem with Samba 2.2.6 as PDC
Check you have not got theXP firewall enabled (small padlock on the network interface icon but check the actual settings anyway) and try enabling Permit on the Local Security Policy in Control Panel/Admin Tools. I assuming you have the signorseal reg key set? HTH Noel -Original Message- From: Joshua Ecklund [mailto:jecklund@;ispaceonline.com] Sent: 27 October 2002 17:53 To: [EMAIL PROTECTED] Subject: [Samba] Problem with Samba 2.2.6 as PDC Hi All, I recently set up Samba as the PDC of my domain, which consists of 3 boxes, two running Windows XP Pro and one running RedHat Linux 8.0. Everything works fine with one of the XP boxes, and I can logon to the domain with it. However, on the other XP box, it joins the domain fine, then, after it restarts, when I go to logon to the domain I get: "Could not connect to the domain, either because the domain controller is down, or because the computer account does not exist." I have created the unix computer account by hand. Here is what shows up in the logfile for the machine: [2002/10/25 20:25:35, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(670)· api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.· This gets written to the log when I join the domain with the computer. Does anyone know what might cause this to happen? Any help would be appreciated! Thanks, Joshua Ecklund [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] MS Access and RAID
I'll let someone with more knowledge than I get into the RAID buffer discussions but just wanted to make sure you had the same smb.conf on the two machines? And therefore had oplocks turned off? A recent posting which you might have already seen: 1. Always run the Access database application, (Forms, code, queries, ...) on a client workstation and have the back-end data on the server. The application container links to the shared tables on the server. 2. Oplocks = no 3. Kernel Oplocks = no 4. Level2 Oplocks = no 5. Blocking Locks = yes 6. Locking = yes 7. Strict Locking = no 8. Share Modes = yes Success will be improved if you follow the pessimistic locking model for most of your data access. This means that the edited record is always locked. You should do this regardless of whether you use Windows or Samba on your back end server. This also applies to point number 1. HTH Noel -Original Message- From: Harry Mills [mailto:harry@;navaho.co.uk] Sent: 28 October 2002 08:57 To: [EMAIL PROTECTED] Subject: [Samba] MS Access and RAID Hi, We have been having a few problems with a M$ Access DB held on a Samba server Samba version: samba-2.2.4-2N1 We have rebuilt a new server, and transferred the database over to the new box, along with word/excel docs etc. Everything is working fine, except the access database, which is running very very slowly (can be over a minute to open a record). Details are a little sketchy, but it would seem that when the new server is being used, one workstation has reasonable access speeds, but subsequent workstations are slow - although this could be a 'user diagnosis syndrome' ;) The access binary is held locally on the workstations. If you transfer the database back to the old samba server, it runs fine. The two servers are running the same version of samba, same Kernel (2.4.18). The workstations are Windows98, doing domain logons to the Samba server. The only difference I can see between the old and new servers, is the new server has two raided (mirror) IDE drives, the old server is a single drive box. There are no errors on the NICS, oplocks are off for *.mdb and *.ldb and tcpdump shosw data flowing consistently between the server and the workstation. The Load Ave on the box is near enough 0.0. For the moment, I have put them back on the old server. Any help would be gratefully received - bit stumped on this one! -- Harry MillsDDI:01749 812100 Educational Development ManagerFax:01749 812749 Navaho TechnologiesMain Office: 0870 7034015 http://www.navaho.co.uk/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba Performance
Try an ifconfig and see if you are getting errors on the NIC first. Noel -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]Sent: 28 October 2002 12:38To: [EMAIL PROTECTED]Subject: [Samba] Samba PerformanceAny ideas where i can get a "things to check" list for performace tuning of Samba Currently copying 300mb of data since 09:00am this morning and still going ...now 12:20! 100mb full duplex nic on a IBM x232 series dual proc Piii-1.2ghz, 512mb ram, raid 5 - 18.2gb drives samba -- mandrake 8.2 with 2.2.5pre1 according to smbstatus - locks are exclusive+batch Locked files: Pid DenyMode Access R/W Oplock Name -- 2276 DENY_ALL 0x30196 WRONLY EXCLUSIVE+BATCH /var/apps/opera/data/s_aentry.cdx Mon Oct 28 12:28:27 2000 any tips would be appreciated kind regards rod ---Incoming mail is certified Virus Free.Checked by AVG anti-virus system (http://www.grisoft.com).Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
RE: [Samba] samba and oplocks and office applications
General consensus is to disable oplocks for a hassle free existence especially with Office apps: Oplocks = no Kernel Oplocks = no Level2 Oplocks = no HTH Noel Also, something Jeremy posted to the list a few days ago: Ok, as promised, a brief explaination of oplocks, share modes and locking. When a client opens a file it can request an "oplock" or file lease. This is (to simplify a bit) a guarentee that no one else has the file open simultaneously. It allows the client to not send any updates on the file to the server, thus reducing a network file access to local access (once the file is in client cache). An "oplock break" is when the server sends a request to the client to flush all its changes back to the server, so the file is in a consistent state for other opens to succeed. If a client fails to respond to this asynchronous request then the file can be corrupted. Hence the "turn off oplocks" answer if people are having multi-user file access problems. Unless the kernel is "oplock aware" (SGI IRIX and Linux are the only two UNIXes that are at the moment) then if a local UNIX process accesses the file simultaneously then Samba has no way of telling this is occuring, so the guarentee to the client is broken. This can corrupt the file. Short answer - it you have UNIX clients accessing the same file as smbd locally or via NFS and you're not running Linux or IRIX then turn off oplocks for that file or share. "Share modes". These are modes of opening a file, that guarentee an invarient - such as DENY_WRITE - which means that if any other opens are requested with write access after this current open has succeeded then they should be denied with a "sharing violation" error message. Samba handles these internally inside smbd. UNIX clients accessing the same file ignore these invarients. Just proving that if you need simultaneous file access from a Windows and UNIX client you *must* have an application that is written to lock records correctly on both sides. Few applications are written like this, and even fewer are cross platform (UNIX and Windows) so in practice this isn't much of a problem. "Locking". This really means "byte range locking" - such as lock 10 bytes at file offset 24 for write access. This is the area in which well written UNIX and Windows apps will cooperate. Windows locks (at least from NT or above) are 64-bit unsigned offsets. UNIX locks are either 31 bit or 63 bit and are signed (the top bit is used for the sign). Samba handles these by first ensuring that all the Windows locks don't conflict (ie. if other Windows clients have competing locks then just reject immediately) - this allows us to support 64-bit Windows locks on 32-bit filesystems. Secondly any locks that are valid are then mapped onto UNIX fcntl byte range locks. These are the locks that will be seen by UNIX processes. If there is a conflict here the lock is rejected. Note that if a client has an oplock then it "knows" that no other client can have the file open so usually doesn't bother to send to lock request to the server - this means once again if you need to share files between UNIX and Windows processes either use IRIX or Linux, or turn off oplocks for these files/shares. Hope this is clear :-). Jeremy. -Original Message- From: Nir Livni [mailto:nirl@;cyber-ark.com] Sent: 28 October 2002 14:13 To: '[EMAIL PROTECTED]' Subject: [Samba] samba and oplocks and office applications I'm using samba version 2.2.1a on a linux RH7.2 kernel 2.4.7-10. I'm having a lot of oplock problems, specially when using office applications like word. I would like to know: 1. what is the recommended configuration in version 2.2.1a (oplocks = yes/no , level2 oplocks = yes/no , kernel oplocks = yes/no) 2. what is considered to be a stable version for oplocks usage Thanks, Nir -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 2.2.6 leaks file descriptions!
Is this a necessary update to all 2.2.6 installations with 2.4.x kernels? I
am assuming that ./configure picks up the 'kernel change notify' code
automatically and compiles support for it in?
Thanks,
Noel
-Original Message-
From: [EMAIL PROTECTED] [mailto:jra@;dp.samba.org]
Sent: 28 October 2002 22:04
To: Joakim Tjernlund
Cc: Gerald (Jerry) Carter; [EMAIL PROTECTED]
Subject: Re: [Samba] Samba 2.2.6 leaks file descriptions!
On Sun, Oct 27, 2002 at 06:47:33PM +0100, Joakim Tjernlund wrote:
> > > Been running with this change since friday and it looks good. I can
not
> > > find any leaking FDs anymore. The usage of the server has been very
low
> > > so I won't know for sure until Monday afternoon.
> > >
> > > Does this mean it's a RH kernel bug?
> >
> > It could either (a) be a bug in the linux kernel, necessarily specific
to
> > RedHat, or (b) a bug in the way we use the kernel change notify
mechanism
> > on linux. Will take some more investigation to find out which.
> >
>
> Found one more, this file(MTP_UP_PA12.doc) has been open for 6 hours:
Ok, I've found and fixed the problems with 2.2.6 leaking file descriptors
when kernel change notify is turned on. Unfortunately (or fortunately as
we can fix this :-) it's a Samba bug, not a Linux kernel bug.
I've committed this to all CVS branches.
Jeremy.
Here is the patch :
Index: smbd/notify_kernel.c
===
RCS file: /data/cvs/samba/source/smbd/notify_kernel.c,v
retrieving revision 1.6.4.15
diff -u -r1.6.4.15 notify_kernel.c
--- smbd/notify_kernel.c11 Jun 2002 03:25:50 - 1.6.4.15
+++ smbd/notify_kernel.c28 Oct 2002 22:01:19 -
@@ -127,7 +127,6 @@
BlockSignals(True, RT_SIGNAL_NOTIFY);
for (i = 0; i < signals_received; i++) {
if (fd == (int)fd_pending_array[i]) {
- close(fd);
fd_pending_array[i] = (SIG_ATOMIC_T)-1;
if (signals_received - i - 1) {
memmove((void
*)&fd_pending_array[i], (void *)&fd_pending_array[i+1],
@@ -138,6 +137,7 @@
break;
}
}
+ close(fd);
BlockSignals(False, RT_SIGNAL_NOTIFY);
}
SAFE_FREE(data);
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] MS Access and RAID
Harry, I can't see it being the RAID either. Have you checked the network basics? I had a problem just the other week with very slow transfers and eventually discovered lots of carrier errors on the NIC and traced it back to a dodgy switch port in our Cisco 2940. Just do an 'ifconfig' and make sure you have a decent network connection. I notice that you describe a slowness in your original posting so even if ifconfig is not showing errors I would try a new cable and switch port and also maybe try some simple large file tranfers and see if there is noticeable difference between the two servers. Could also be the NIC itself of course. If the networking checks out fully and the Samba configs and versions are identical then I would try enabling the oplocks anyway and see if that helps. Hopefully :() you will discover it is a networking issue HTH Cheers, Noel -Original Message- From: Harry Mills [mailto:harry@;navaho.co.uk] Sent: 29 October 2002 10:48 To: Noel Kelly Subject: RE: [Samba] MS Access and RAID Just a quick note to say thanks for your prompt response to my posting yesterday. So far, you are the only respondant ;) I am in a bit of a pickle, because the Access DB is live, and people are kicking up a fuss ;( I have read through the posting(s) you mentioned. Thing that is worrying me, is the fact that the old and new boxes are identical - Kernel, Samba version, smb.conf, and Hardware (Cobalt Qube) - the only difference is the twin HD doing Raid. I suppose the best bet it to rebuild the new box as a single drive machine, and start again! TBH, though, I just cannot see it being RAID, the load average is virutally 0.0. I have one question for you.. I know access is a broken database, when shared across a network. Is it better to simply say - put the DB back on a Win98 Workstation, and share it from there? The problem is, their 'Database experts' simply say - its not us, its Navaho. Thanks again Regards Harry On Mon, 28 Oct, Noel Kelly wrote: > I'll let someone with more knowledge than I get into the RAID buffer > discussions but just wanted to make sure you had the same smb.conf on the > two machines? And therefore had oplocks turned off? > > A recent posting which you might have already seen: > > 1. Always run the Access database application, (Forms, code, > queries, ...) on a client workstation and have the back-end data on the > server. The application container links to the shared tables on the server. > > 2. Oplocks = no > 3. Kernel Oplocks = no > 4. Level2 Oplocks = no > 5. Blocking Locks = yes > 6. Locking = yes > 7. Strict Locking = no > 8. Share Modes = yes > > Success will be improved if you follow the pessimistic locking model for > most of your data access. This means that the edited record is always > locked. You should do this regardless of whether you use Windows or Samba > on your back end server. This also applies to point number 1. > > HTH > Noel > -Original Message- > From: Harry Mills [mailto:harry@;navaho.co.uk] > Sent: 28 October 2002 08:57 > To: [EMAIL PROTECTED] > Subject: [Samba] MS Access and RAID > > > Hi, > > We have been having a few problems with a M$ Access DB held on a Samba > server > > Samba version: samba-2.2.4-2N1 > > We have rebuilt a new server, and transferred the database over to the new > box, along with word/excel docs etc. Everything is working fine, except the > access database, which is running very very slowly (can be over a minute to > open a record). > Details are a little sketchy, but it would seem that when the new server is > being used, one workstation has reasonable access speeds, but subsequent > workstations are slow - although this could be a 'user diagnosis syndrome' > ;) > > The access binary is held locally on the workstations. > If you transfer the database back to the old samba server, it runs fine. > The two servers are running the same version of samba, same Kernel (2.4.18). > The workstations are Windows98, doing domain logons to the Samba server. > > The only difference I can see between the old and new servers, is the new > server has two raided (mirror) IDE drives, the old server is a single drive > box. There are no errors on the NICS, oplocks are off for *.mdb and *.ldb > and > tcpdump shosw data flowing consistently between the server and the > workstation. The Load Ave on the box is near enough 0.0. > > For the moment, I have put them back on the old server. > > Any help would be gratefully received - bit stumped on this one! > --- > Incoming mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.404 / Virus Dat
RE: [Samba] Cannot see the samba server in Network Neighbourhood
It would be helpful if you could post you smb.conf and let us know what role the Samba machine is taking in the network. Sounds like the Samba machine could be set to be a wins server but is being usurped by another server? Also check your nmbd log file and check nmbd is actually running. Noel -Original Message- From: Mark Frayling [mailto:mark.frayling@;asa.co.uk] Sent: 29 October 2002 12:56 To: [EMAIL PROTECTED] Subject: [Samba] Cannot see the samba server in Network Neighbourhood Hi I am a newbie to samba after taking over from a previous administrator. I have upgraded to the version that ships with SuSE linux 8.0 and copied over the old smb.config and smbpasswd files. I can see the shares from a remote SWAT connection and also using the interactive method via a DOS window, but cannot get the shares to be seen via Network Neighbourhood. I am thinking that this may be a NetBios problem, but cannot pinpoint it. Any help would be muchly appreciated. -- Mark Frayling -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.408 / Virus Database: 230 - Release Date: 24/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Cannot see the samba server in Network Neighbourhood
Mark, Yes clearly your Samba machine is becoming the master browser from the log but I am suspicious of the 'os level' parameter being set to 2 (see below). You can search the archives at http://marc.theaimsgroup.com (see http://samba.mirror.ac.uk/samba/archives.html) HTH Noel os level (G) This integer value controls what level Samba advertises itself as for browse elections. The value of this parameter determines whether nmbd(8) has a chance of becoming a local master browser for the WORKGROUP in the local broadcast area. Note :By default, Samba will win a local master browsing election over all Microsoft operating systems except a Windows NT 4.0/2000 Domain Controller. This means that a misconfigured Samba host can effectively isolate a subnet for browsing purposes. See BROWS- ING.txt in the Samba docs/ directory for details. Default: os level = 20 Example: os level = 65 -Original Message- From: Mark Frayling [mailto:mark.frayling@;asa.co.uk] Sent: 29 October 2002 13:51 To: Noel Kelly Subject: Re: [Samba] Cannot see the samba server in Network Neighbourhood Noel Thx for the quick reply. I have attached my smb.conf file along with the relevant log files. This setup, using the attached smb.conf file has been working ok with an older version of samba, how do i tell what version i am running? I installed SuSE version 8.0 which ships with a newer version and once installed i thought it would be a simple job of copying over my smb.conf and smbpasswd files. nmbd -D and smbd -D are running ok. I am not sure what you mean about the WINS server being used by another? I thought it had to run as a WINS server to handle the NetBIOS traffic to it? Thanks again --Mark PS I have been trying to search for past postings, is there such a place? Noel Kelly wrote: >** >This Message Was Virus Checked With : SAVI 3.61 September 2002 >Last Updated 11th October 2002 >** > >It would be helpful if you could post you smb.conf and let us know what role >the Samba machine is taking in the network. Sounds like the Samba machine >could be set to be a wins server but is being usurped by another server? > >Also check your nmbd log file and check nmbd is actually running. > >Noel > >-Original Message- >From: Mark Frayling [mailto:mark.frayling@;asa.co.uk] >Sent: 29 October 2002 12:56 >To: [EMAIL PROTECTED] >Subject: [Samba] Cannot see the samba server in Network Neighbourhood > > >Hi >I am a newbie to samba after taking over from a previous administrator. > >I have upgraded to the version that ships with SuSE linux 8.0 and copied >over the old smb.config and smbpasswd files. > >I can see the shares from a remote SWAT connection and also using the >interactive method via a DOS window, but cannot get the shares to be >seen via Network Neighbourhood. I am thinking that this may be a >NetBios problem, but cannot pinpoint it. >Any help would be muchly appreciated. > > > -- Mark Frayling IT Systems Administrator Advanced System Architectures Ltd --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] oplock problems
A full explanation of oplocks from Jeremy below. The basic rule seems to be if a file is static data being shared to many people then oplocks will increase performace. If you are dishing out Office documents you had best turn oplocks off totally. Oplocks = no Kernel Oplocks = no Level2 Oplocks = no hth Noel Ok, as promised, a brief explaination of oplocks, share modes and locking. When a client opens a file it can request an "oplock" or file lease. This is (to simplify a bit) a guarentee that no one else has the file open simultaneously. It allows the client to not send any updates on the file to the server, thus reducing a network file access to local access (once the file is in client cache). An "oplock break" is when the server sends a request to the client to flush all its changes back to the server, so the file is in a consistent state for other opens to succeed. If a client fails to respond to this asynchronous request then the file can be corrupted. Hence the "turn off oplocks" answer if people are having multi-user file access problems. Unless the kernel is "oplock aware" (SGI IRIX and Linux are the only two UNIXes that are at the moment) then if a local UNIX process accesses the file simultaneously then Samba has no way of telling this is occuring, so the guarentee to the client is broken. This can corrupt the file. Short answer - it you have UNIX clients accessing the same file as smbd locally or via NFS and you're not running Linux or IRIX then turn off oplocks for that file or share. "Share modes". These are modes of opening a file, that guarentee an invarient - such as DENY_WRITE - which means that if any other opens are requested with write access after this current open has succeeded then they should be denied with a "sharing violation" error message. Samba handles these internally inside smbd. UNIX clients accessing the same file ignore these invarients. Just proving that if you need simultaneous file access from a Windows and UNIX client you *must* have an application that is written to lock records correctly on both sides. Few applications are written like this, and even fewer are cross platform (UNIX and Windows) so in practice this isn't much of a problem. "Locking". This really means "byte range locking" - such as lock 10 bytes at file offset 24 for write access. This is the area in which well written UNIX and Windows apps will cooperate. Windows locks (at least from NT or above) are 64-bit unsigned offsets. UNIX locks are either 31 bit or 63 bit and are signed (the top bit is used for the sign). Samba handles these by first ensuring that all the Windows locks don't conflict (ie. if other Windows clients have competing locks then just reject immediately) - this allows us to support 64-bit Windows locks on 32-bit filesystems. Secondly any locks that are valid are then mapped onto UNIX fcntl byte range locks. These are the locks that will be seen by UNIX processes. If there is a conflict here the lock is rejected. Note that if a client has an oplock then it "knows" that no other client can have the file open so usually doesn't bother to send to lock request to the server - this means once again if you need to share files between UNIX and Windows processes either use IRIX or Linux, or turn off oplocks for these files/shares. Hope this is clear :-). Jeremy. -Original Message- From: [EMAIL PROTECTED] [mailto:c.m.e.reniers@;philips.com] Sent: 29 October 2002 15:35 To: [EMAIL PROTECTED] Subject: [Samba] oplock problems We are running samba 2.2.3a ( for about 3000 users ) on HP/UX 11.11 fileservers. Our customers are complaining about slow response on the opening/closing of files in office/excel etc. In the samba log file we see the following messages : [2002/10/29 09:03:27, 0] ../source/smbd/oplock.c:(761) oplock_break: receive_smb timed out after 30 seconds. oplock_break failed for file My Documents/servers.doc (dev = 40220001, inode = 229991, file_id = 240). [2002/10/29 09:03:27, 0] ../source/smbd/oplock.c:(833) oplock_break: client failure in oplock break in file My Documents/servers.doc [2002/10/29 09:03:27, 0] ../source/smbd/reply.c:(4387) reply_lockingX: Error : oplock break from client for fnum = 14026 and no oploc k granted on this file (My Documents/servers.doc). We found out that these messages correspond with the slow response that our users are seeing. I've searched the samba archive and there are more people having these messages. The solutions I found were : - You may have a netwerk problem ( which is NOT the case in our situation ) - Turn oplocks off ( But this may introduce a performance problem ) Can somebody please explain : - What this message really means. - Can it be related to the slow response that our customers are complaining about - Is there a solution to this probem ( our network is ok, turning oplocks off is not a solution .. ) Regards, Eddy Reniers, Philips Research Laboratories Department Compute
RE: [Samba] Printing only as admin?
Have you checked the permissions on the spool directory? -Original Message- From: Rob Thomas [mailto:rob@;electricmail.com] Sent: 30 October 2002 00:18 To: [EMAIL PROTECTED] Subject: [Samba] Printing only as admin? I'm having a problem with a Samba PDC box that only lets users who are defined by "admin users =" to print to any of the printers. As an interim solution I just threw my @staff group in there, but of course this lets everyone access everyone elses files :) Here is one of my printer configs: As you can see, I tried to set every flag I could think of to let anyone write to this. [optra] comment = Tech Area path = /var/spool/lpd/optra printer name = optra writable = yes browseable = yes public = yes printable = yes guest ok = yes valid users = @staff write list = @staff print command = lpr -P %p %s; rm %s Is there something I'm missing here? If a user isn't defined as an admin, they cannot access this printer. I've searched extensively, and haven't been able to find anything online. Thanks in advance! -rob -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] acl resource
Norman, I find it is easiest to set them up using setfacl initially. Then, assuming you have compiled Samba with the --with-acl-support flag, you should be able to manipulate them using the Windows/Properties/Permissions dialogue IF (here is a gotcha) you are the owner of the file/directory or root. If you are not the owner (and not root) then you will not be able to change them. Also, you cannot remove the three basic Unix perms of user:group:owner from Windows. Try it. I found it is best to use setfacl to set the default ACLs on directories to ensure they are properly propagated below. As an administrator you might also appreciate a special admin only top-level share which uses the 'force user=root' parameter. Dangerous as it sounds, it will allow you to do what you like to ACLs from within Windoze. If you use the 'valid users=' parameter and other such Samba security parameters then you are effectively introducing a second tier of security which might be unnecessary and cause administrative overhead. Personally, I have stopped using ACLs as the Samba security gives a simpler and cleaner way to set people's access and their is no equivalent in Windoze to NDS' excellent overview windows of all the ACLs acting on a particular file/dir. But circumstances dictate such things... HTH Noel -Original Message- From: Norman Zhang [mailto:nzhang@;arkon-group.com] Sent: 30 October 2002 18:16 To: [EMAIL PROTECTED] Subject: [Samba] acl resource Hi, I'm confused of where to set ACL? Do I set them in SWAT under Security Options (using Valid Users, Force Group, ..., etc.)? Or do I need to hardcoded them with setfacl? Or set them in NT client? Please direct me to the references? I already have xfs, acl, attr, compiled in. Regards, Norman -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Which tree should I be barking up?
You are being treated as a guest user because "map to guest = Bad User" Bad User - Means user logins with an invalid password are rejected, unless the username does not exist, in which case it is treated as a guest login and mapped into the guest account. This means that your login name or password is not being recognised and you are being treated as the guest user - default is 'nobody'. If nobody does not exist in your domain then you need to create a user called this. However, that will only get you as far as guest shares - and I suppose you need to address the actual matter of not being recognised yourself. Are the permissions on directory /home/apps 770 with group GPSC+"domain users" or something similar? If so then see what you get if you do a 'getent passwd' or 'getent group'. HTH a bit, Noel looks like I am being recognized as a 'guest user' which is a problem but for testing purposes I have changed smb.conf for this share to allow guest access, which it does not seem to. I am also attempting to achieve a successful integration with winbind as I don't want to manage users on two platforms. wbinfo -u gives a list of domain users wbinfo -g gives a list of domain groups wbinfo -t gives 'secret is good' Here is my smb.conf: # Samba config file created using SWAT # from UNKNOWN (127.0.0.1) # Date: 2002/10/23 15:08:25 # Global parameters [global] workgroup = GPSC netbios name = WILLIAM server string = GPSC Application Samba Server interfaces = lo eth0 bind interfaces only = Yes security = DOMAIN encrypt passwords = Yes map to guest = Bad User password server = * log level = 3 log file = /var/log/samba.%m max log size = 50 keepalive = 30 os level = 2 local master = No dns proxy = No wins server = 192.168.1.2 kernel oplocks = No winbind uid = 1-2 winbind gid = 1-2 template homedir = /home/win/%D/%U winbind separator = + invalid users = root printer admin = @DOM+PRINTADMIN hosts allow = 127. 192.168. print command = lpq command = lprm command = [homes] comment = Home Directories read only = No create mask = 0750 browseable = No [Apps] comment = Where network apps are loaded path = /home/apps guest ok = Yes Kind regards, Steven S. Macfarlane tel 712.204.8875 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Getting msg acces denied while adding a new printer
Try adding the 'use client driver = yes' parameter. Noel -Original Message- From: Ernst Cozijnsen [mailto:ernst.cozijnsen@;cgey.nl] Sent: 01 November 2002 08:52 To: [EMAIL PROTECTED] Subject: [Samba] Getting msg acces denied while adding a new printer I'm using cups for printing and when i try to share a printer with samba i get the msg on my win2000 wks that "access is denied, unable to connect" my smb.conf looks like this: [global] workgroup = kerkenkruis netbios name= kruimel server string = Samba server running on Redhat %L:%h interfaces = eth0 dns proxy = yes domain master = yes preferred master= yes socket options = IPTOS_LOWDELAY TCP_NODELAY os level= 65 update encrypted= yes unix password sync = yes encrypt passwords = yes printcap name = cups [public] hide dot files = yes path= /tmp [printers] browseable = yes printing= cups lpq command = /usr/bin/lpstat -o%p lprm command= /usr/bin/cancel %p-%j print command = /usr/bin/lp -d%p -orwa %s; rm %s queuepause command = /usr/bin/disable %p queueresume command = /usr/bin/enable %p public = yes printable = yes # valid users = printer name= test What could be the problem??? -- This message contains information that may be privileged or confidential and is the property of the Cap Gemini Ernst & Young Group. It is only intended for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message. --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] getent not working correctly
You need getent to work. This is really how Unix actually does the authenticating - winbind is just the conduit to the M$ database. Have you edited your /etc/nsswitch.conf correctly? You need: passwd: files winbind nisplus shadow: files winbind nisplus group: files winbind nisplus This will make Unix call winbind when looking for users/groups (this the mechanism that getent passwd/group runs). HTH, Noel -Original Message- From: Sean Patrick Ingles [mailto:ingless@;visionsys.com] Sent: 01 November 2002 15:41 To: [EMAIL PROTECTED] Subject: [Samba] getent not working correctly Hello again! Ok, I've gotten wbinfo -u and wbinfo -g working great Now I try to run getent passwd and getent group I get my local users/groups but not the ones on the Windows 2k Server Domain Controller and it just hangs after listing the local ones. I also tried authenticating a user and it worked I'm assuming wbinfo -a DOMAIN+ingless@DOMAIN%"password" (The usernames here have user@domain due to some M$ Active-Directory thing...) plaintext password authentication succeeded challenge/response password authentication failed Could not authenticate user DOMAIN+ingless@DOMAIN%"password" with challenge/response Do I need getent working, or is it safe to assume everything is functioning normally now? Thanks! -SP === \ / / / Sean Patrick Ingles \ / / / Jr. Network Engineer \ / ___ / / \ / / / Vision Systems, Inc. __/ / _/ 142 State Street Albany, NY 12207 www.visionsys.com Landline: +1 518.434.4300 x1406 [EMAIL PROTECTED] Fax: +1 518.434.4304 == -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.408 / Virus Database: 230 - Release Date: 24/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Which tree should I be barking up?
Steve, Have you tried authenticating using winbind? winbind -a user%password This should tell you if the actual authentication is working. If it is then I would check your directory permissions. Noel -Original Message- From: Steven S. Macfarlane [mailto:aussm@;cableone.net] Sent: 01 November 2002 15:30 To: [EMAIL PROTECTED] Subject: RE: [Samba] Which tree should I be barking up? getent passwd give list of user e.g. GPSC+__:x:10011:10001:_:/home/win/GPSC/:/bin/false getent group lists all groups on RH box and all domain groups w/members e.g. sshd:x:74: GPSC+Administrative:x:10007:GPSC+_a,GPSC+___t__,GPSC+t_,GPSC+l_, GPSC+__y,GPSC+___n__ NOW, I am guessing that "map to guest = Bad User" is a good thing to use with my final setup but for now I've #ed it out. So the stuff in my log about not being able to has disappeared but I think I need to figure out why my userid is not being recognized. How do I troubleshoot this? -Original Message----- From: Noel Kelly [mailto:nkelly@;citrusnetworks.net] Sent: Thursday, October 31, 2002 2:55 PM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: RE: [Samba] Which tree should I be barking up? You are being treated as a guest user because "map to guest = Bad User" Bad User - Means user logins with an invalid password are rejected, unless the username does not exist, in which case it is treated as a guest login and mapped into the guest account. This means that your login name or password is not being recognised and you are being treated as the guest user - default is 'nobody'. If nobody does not exist in your domain then you need to create a user called this. However, that will only get you as far as guest shares - and I suppose you need to address the actual matter of not being recognised yourself. Are the permissions on directory /home/apps 770 with group GPSC+"domain users" or something similar? If so then see what you get if you do a 'getent passwd' or 'getent group'. HTH a bit, Noel looks like I am being recognized as a 'guest user' which is a problem but for testing purposes I have changed smb.conf for this share to allow guest access, which it does not seem to. I am also attempting to achieve a successful integration with winbind as I don't want to manage users on two platforms. wbinfo -u gives a list of domain users wbinfo -g gives a list of domain groups wbinfo -t gives 'secret is good' Here is my smb.conf: # Samba config file created using SWAT # from UNKNOWN (127.0.0.1) # Date: 2002/10/23 15:08:25 # Global parameters [global] workgroup = GPSC netbios name = WILLIAM server string = GPSC Application Samba Server interfaces = lo eth0 bind interfaces only = Yes security = DOMAIN encrypt passwords = Yes map to guest = Bad User password server = * log level = 3 log file = /var/log/samba.%m max log size = 50 keepalive = 30 os level = 2 local master = No dns proxy = No wins server = 192.168.1.2 kernel oplocks = No winbind uid = 1-2 winbind gid = 1-2 template homedir = /home/win/%D/%U winbind separator = + invalid users = root printer admin = @DOM+PRINTADMIN hosts allow = 127. 192.168. print command = lpq command = lprm command = [homes] comment = Home Directories read only = No create mask = 0750 browseable = No [Apps] comment = Where network apps are loaded path = /home/apps guest ok = Yes Kind regards, Steven S. Macfarlane tel 712.204.8875 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Which tree should I be barking up?
Oopps - that should have been wbinfo: wbinfo -a user%password Noel -Original Message- From: Noel Kelly Sent: 01 November 2002 19:53 To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: RE: [Samba] Which tree should I be barking up? Steve, Have you tried authenticating using winbind? winbind -a user%password This should tell you if the actual authentication is working. If it is then I would check your directory permissions. Noel -Original Message- From: Steven S. Macfarlane [mailto:aussm@;cableone.net] Sent: 01 November 2002 15:30 To: [EMAIL PROTECTED] Subject: RE: [Samba] Which tree should I be barking up? getent passwd give list of user e.g. GPSC+__:x:10011:10001:_:/home/win/GPSC/:/bin/false getent group lists all groups on RH box and all domain groups w/members e.g. sshd:x:74: GPSC+Administrative:x:10007:GPSC+_a,GPSC+___t__,GPSC+t_,GPSC+l_, GPSC+__y,GPSC+___n__ NOW, I am guessing that "map to guest = Bad User" is a good thing to use with my final setup but for now I've #ed it out. So the stuff in my log about not being able to has disappeared but I think I need to figure out why my userid is not being recognized. How do I troubleshoot this? -Original Message- From: Noel Kelly [mailto:nkelly@;citrusnetworks.net] Sent: Thursday, October 31, 2002 2:55 PM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: RE: [Samba] Which tree should I be barking up? You are being treated as a guest user because "map to guest = Bad User" Bad User - Means user logins with an invalid password are rejected, unless the username does not exist, in which case it is treated as a guest login and mapped into the guest account. This means that your login name or password is not being recognised and you are being treated as the guest user - default is 'nobody'. If nobody does not exist in your domain then you need to create a user called this. However, that will only get you as far as guest shares - and I suppose you need to address the actual matter of not being recognised yourself. Are the permissions on directory /home/apps 770 with group GPSC+"domain users" or something similar? If so then see what you get if you do a 'getent passwd' or 'getent group'. HTH a bit, Noel looks like I am being recognized as a 'guest user' which is a problem but for testing purposes I have changed smb.conf for this share to allow guest access, which it does not seem to. I am also attempting to achieve a successful integration with winbind as I don't want to manage users on two platforms. wbinfo -u gives a list of domain users wbinfo -g gives a list of domain groups wbinfo -t gives 'secret is good' Here is my smb.conf: # Samba config file created using SWAT # from UNKNOWN (127.0.0.1) # Date: 2002/10/23 15:08:25 # Global parameters [global] workgroup = GPSC netbios name = WILLIAM server string = GPSC Application Samba Server interfaces = lo eth0 bind interfaces only = Yes security = DOMAIN encrypt passwords = Yes map to guest = Bad User password server = * log level = 3 log file = /var/log/samba.%m max log size = 50 keepalive = 30 os level = 2 local master = No dns proxy = No wins server = 192.168.1.2 kernel oplocks = No winbind uid = 1-2 winbind gid = 1-2 template homedir = /home/win/%D/%U winbind separator = + invalid users = root printer admin = @DOM+PRINTADMIN hosts allow = 127. 192.168. print command = lpq command = lprm command = [homes] comment = Home Directories read only = No create mask = 0750 browseable = No [Apps] comment = Where network apps are loaded path = /home/apps guest ok = Yes Kind regards, Steven S. Macfarlane tel 712.204.8875 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http:/
RE: [Samba] where is smbmount??
You need to add the --with-smbmount directive to your ./configure command. Noel -Original Message- From: Josh Hiner [mailto:jdhiner@;hline.org] Sent: 01 November 2002 20:27 To: [EMAIL PROTECTED] Subject: [Samba] where is smbmount?? Hello. I recently downloaded samba 2.2.6 compiled and installed (on Linux). All is going great except that I cannot find smbmount. I see it in the source dir (samba-2.2.6/source/client) but there is no Makefile and it is not compiled. If somebody could tell me what happened or where to find it I would be very grateful!!! Thanks!! -Josh -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.408 / Virus Database: 230 - Release Date: 24/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba wins
>From my understanding Samba WINS can only be a standalone server - there is no code to communicate with other WINS servers. Noel -Original Message- From: [EMAIL PROTECTED] [mailto:francesco.romano@;andersenitalia.it] Sent: 08 October 2002 15:14 To: [EMAIL PROTECTED] Subject: [Samba] Samba wins Can I configure Samba Wins (ver. 2.2.2), installed on Sun Solaris 5.8, as a partner push-pull of Microsoft Windows WINS service installed on Windows 2000 server ? Thanks Francesco romano --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.408 / Virus Database: 230 - Release Date: 24/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Unable to open passdb???
Scott, You hopefully just need to manually create the smbpasswd file in /usr/local/samba/private/. Just do a 'touch /usr/local/samba/private/smbpasswd' and retry. Noel -Original Message- From: smw [mailto:kc8lir@;yahoo.com] Sent: 02 November 2002 17:13 To: [EMAIL PROTECTED] Subject: [Samba] Unable to open passdb??? Hello, Getting this error: [2002/11/02 12:55:16, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1367) unable to open passdb database. [2002/11/02 12:55:16, 0] smbd/chgpasswd.c:check_oem_password(761) check_oem_password: getsmbpwnam returned NULL [2002/11/02 12:55:16, 0] passdb/passdb.c:pdb_free_sam(210) pdb_free_sam: SAM_ACCOUNT was NULL[2002/11/02 12:55:16, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1367) unable to open passdb database. [2002/11/02 12:55:16, 0] smbd/chgpasswd.c:check_oem_password(761) check_oem_password: getsmbpwnam returned NULL [2002/11/02 12:55:16, 0] passdb/passdb.c:pdb_free_sam(210) pdb_free_sam: SAM_ACCOUNT was NULL Now, I've tried changing passwords via smbpasswd for a couple of different accounts, and for whatever reason it can't change them. I'm trying to set up my Samba box as a PDC. So far I haven't even been able to join the domain. Here's my smb.conf file: [global] netbios name = roswell workgroup = AREA51 os level = 64 preferred master = yes domain master = yes local master = yes security = user encrypt passwords = yes domain logons = yes domain admin group = root swrosch inferno add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u allow hosts = 192.168.0. 127. # SHARE DEFINITIONS [netlogon] path = /home/netlogon read only = yes guest ok = no write list = root swrosch inferno I'm running Samba 2.2.6, and trying to join with my Win2k box. But, every time I try to change passwords or anything, I get unable to open passdb errors. Any assistance would be much appreciated. I've been trying to follow the directions in the Samba howto (http://us6.samba.org/samba/docs/Samba-HOWTO-Collection.html), and I'm getting completely confused. Thanks, Scott -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] samba not showing all files.
Are you sure you have the executable bit set on the directory? If you only have rw on the directory rather than r-x or rwx then you will not see a directory listing. Noel -Original Message- From: [EMAIL PROTECTED] [mailto:awesome-dave1@;juno.com] Sent: 04 November 2002 04:39 To: [EMAIL PROTECTED] Subject: [Samba] samba not showing all files. Hello, I've got a web server with samba running on it. The idea is i have a samba web share to which users can put web pages. My problem is none of the files are being shown, i have 5 folders and 24 files, only the five folders show up in a network neighborhood view. I've checked permissions, all the users can place content in that location, but the files are not visible. samba 2.2.6, any ideas? Thanks. Dave. Sign Up for Juno Platinum Internet Access Today Only $9.95 per month! Visit www.juno.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba wins
Correct - but you can always use lmhosts/hosts if the number of hosts is manageable? or perhaps DDNS? -Original Message- From: Alexander Kuznetsov [mailto:iam@;alz27.nnov.ru] Sent: 04 November 2002 09:35 To: Gerald (Jerry) Carter Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Samba wins >> >From my understanding Samba WINS can only be a standalone server - there is >> no code to communicate with other WINS servers. G(C> Correct. There is some experimental WINS replication code in HEAD. G(C> Feel free to play around with it. In another words, if I won't use two workgroups with different names with samba-wins-server in each group, clients in different group can't access client in another group, because samba-wins-server can't exchange wins-reconds between himself ? This future in TODO ? :) Thanks Alexander Kuznetsov -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Problems in logging on to a samba 2.2.4 domain from Windows XP
Also check you do not have any ip policies enabled under Local Security Policy in Control Panel. -Original Message- From: [EMAIL PROTECTED] [mailto:scussel@;sslmit.univ.trieste.it] Sent: 04 November 2002 11:54 To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Problems in logging on to a samba 2.2.4 domain from Windows XP Hi try to disinstall every protocol from network properties except for client for microsoft networks and TCP/IP. Bye. Giorgio Scussel > Message: 4 > Date: Fri, 01 Nov 2002 17:06:54 +0100 > From: Claus Svarer <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subject: [Samba] Problems in logging on to a samba 2.2.4 domain from > Windows XP > > Hi > > We have just received our first Windows XP machine and have joined it > to > a Samba domain (vers 2.2.4). Before doing this we were setting the > "requiresignorseal" to "disabled" (running the .reg file). Joining it > to > the domain was done without any problems (we did create a machine > account before doing this) and the first domain logon was also done > without any problems. After having done a logout from the domain, > rebooting the machine and then trying to login to the domain again an > error message is received. The error message is "Windows cannot > connect > to the domain either because the domain controller is down or > otherwise > unavailable or because your computer account was not found". > > An error message is written into the samba log file for the machine. > It > looks like: > > [2002/11/01 15:36:17, 1] smbd/password.c:(545) > Couldn't find user 'administrator' in passdb. > [2002/11/01 15:36:17, 1] smbd/password.c:(545) > Couldn't find user 'administrator' in passdb. > [2002/11/01 15:36:17, 1] smbd/reply.c:(989) > Rejecting user 'administrator': authentication failed > [2002/11/01 15:36:28, 1] smbd/password.c:(545) > > We don't have an administrator account defined in the smbpasswd file, > but we have a local machine account in the Windows XP machine with > that > name. > > Has anyone seen the same problem and found a solution for this > problem? > > Best regards > Claus Svarer > > PS We have many Windows2000 machines that uses the same Samba domain. > They are used without any problems > > --__--__-- > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] getent not working correctly
Have you copied libnss_winbind.so from the nsswitch directory to /lib ? Also make a soft link to /lib/libnss_winbind.so.2 and then run 'ldconfig -v | grep winbind' to make sure the libraries are picked up. Restart winbind and watch your log.winbindd for messages as you run getent. HTH Noel -Original Message- From: Sean Patrick Ingles [mailto:ingless@;visionsys.com] Sent: 04 November 2002 15:19 To: Hall, Ken (ECSS); [EMAIL PROTECTED] Subject: RE: [Samba] getent not working correctly Here is my /etc/nsswitch.conf (abbreviated): passwd: files winbind shadow: files winbind group: files winbind I first start smbd -D and nmbd -D Then I start winbindd Then I join the domain (smbpasswd -j DOMAIN -r DOMAINCONTROLLER -U Administrator) It works Then I check my Secret (wbinfo -t) and it's good Then I list users and groups (wbinfo -u and wbinfo -g) and it works fine However I still cannot get "getent passwd" and "getent group" working. I am 100% stumped -SP -Original Message- From: Hall, Ken (ECSS) [mailto:KeHall@;exchange.ml.com] Sent: Friday, November 01, 2002 12:55 PM To: [EMAIL PROTECTED] Subject: RE: [Samba] getent not working correctly Did you reboot after starting winbindd? Either do that, or try looking for the nameserver cache daemons (nscd), and kill them all. (Don't worry, they'll restart.) I had the same problem with nss_ldap, and it drove me NUTS till I found out about the cache mechanism. > -Original Message- > From: Noel Kelly [mailto:nkelly@;citrusnetworks.net] > Sent: Friday, November 01, 2002 12:46 PM > To: 'Sean Patrick Ingles'; [EMAIL PROTECTED] > Subject: RE: [Samba] getent not working correctly > > > You need getent to work. This is really how Unix actually does the > authenticating - winbind is just the conduit to the M$ database. > > Have you edited your /etc/nsswitch.conf correctly? You need: > > passwd: files winbind nisplus > shadow: files winbind nisplus > group: files winbind nisplus > > This will make Unix call winbind when looking for > users/groups (this the > mechanism that getent passwd/group runs). > > HTH, > Noel > > > -Original Message- > From: Sean Patrick Ingles [mailto:ingless@;visionsys.com] > Sent: 01 November 2002 15:41 > To: [EMAIL PROTECTED] > Subject: [Samba] getent not working correctly > > > Hello again! > > Ok, I've gotten wbinfo -u and wbinfo -g working great > > Now I try to run getent passwd and getent group I get my > local users/groups > but not the ones on the Windows 2k Server Domain Controller > and it just > hangs after listing the local ones. > > I also tried authenticating a user and it worked I'm assuming > > wbinfo -a DOMAIN+ingless@DOMAIN%"password" (The usernames here have > user@domain due to some M$ Active-Directory thing...) plaintext > password authentication succeeded challenge/response password > authentication failed > Could not authenticate user DOMAIN+ingless@DOMAIN%"password" with > challenge/response > > Do I need getent working, or is it safe to assume everything > is functioning > normally now? > > Thanks! > > -SP > > === > > \ / / / Sean Patrick Ingles > \ / / / Jr. Network Engineer > \ / ___ / / > \ / / / Vision Systems, Inc. > __/ / _/ 142 State Street > Albany, NY 12207 > www.visionsys.com Landline: +1 518.434.4300 x1406 > [EMAIL PROTECTED] Fax: +1 518.434.4304 > > == > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > > --- > Incoming mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 > > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.408 / Virus Database: 230 - Release Date: 24/10/2002 > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructi
RE: [Samba] getent not working correctly
Ah - just noticed you say that 'getent passwd' doesn't terminate but hangs. So clearly the trigger is working but the mechanism is failing somewhere. How long do you leave it for? If you have a very large NT user base it could take a while to list it. Have a look at 'top' when it hangs and see if winbind is gobbling up some processor time. Otherwise, I would recompile new binaries and libraries afresh - I'm out of ideas, sorry. Maybe someone else has a suggestion? Noel -Original Message- From: Sean Patrick Ingles [mailto:ingless@;visionsys.com] Sent: 04 November 2002 15:57 To: Noel Kelly; Hall, Ken (ECSS); [EMAIL PROTECTED] Subject: RE: [Samba] getent not working correctly I verified that the libraries were in the /lib folder and symlinked, and here is the output from ldconfig: [root@tux samba]# ldconfig -v | grep winbind libnss_winbind.so -> libnss_winbind.so I restarted winbindd and typed "getent passwd" and it just lists my local passwords and hangs. Nothing is generated in my log.winbindd when I do this either. I am also noticing that _occasionally_ the box will not allow anyone to login until after I kill winbindd... For reference, here is my /etc/pam.d/login: [root@tux pam.d]# cat login #%PAM-1.0 auth required /lib/security/pam_securetty.so auth sufficient /lib/security/pam_winbind.so auth sufficient /lib/security/pam_unix.so use_first_pass auth required /lib/security/pam_stack.so service=system-auth auth required /lib/security/pam_nologin.so accountsufficient /lib/security/pam_winbind.so accountrequired /lib/security/pam_stack.so service=system-auth password required /lib/security/pam_stack.so service=system-auth sessionrequired /lib/security/pam_stack.so service=system-auth sessionoptional /lib/security/pam_console.so [root@tux pam.d]# Here is what I have for my smb.conf as well: [root@tux pam.d]# cat /usr/local/samba/lib/smb.conf [global] workgroup = VSIONLINE server string = Samba %v -- TEST -- security = domain password server = vsi-vsi-albany winbind uid = 1-2 winbind gid = 1-2 winbind separator = + winbind cache time = 10 winbind enum users = Yes winbind enum groups = Yes [root@tux pam.d]# -SP -Original Message- From: Noel Kelly [mailto:nkelly@;citrusnetworks.net] Sent: Monday, November 04, 2002 10:39 AM To: Sean Patrick Ingles; Hall, Ken (ECSS); [EMAIL PROTECTED] Subject: RE: [Samba] getent not working correctly Have you copied libnss_winbind.so from the nsswitch directory to /lib ? Also make a soft link to /lib/libnss_winbind.so.2 and then run 'ldconfig -v | grep winbind' to make sure the libraries are picked up. Restart winbind and watch your log.winbindd for messages as you run getent. HTH Noel -Original Message- From: Sean Patrick Ingles [mailto:ingless@;visionsys.com] Sent: 04 November 2002 15:19 To: Hall, Ken (ECSS); [EMAIL PROTECTED] Subject: RE: [Samba] getent not working correctly Here is my /etc/nsswitch.conf (abbreviated): passwd: files winbind shadow: files winbind group: files winbind I first start smbd -D and nmbd -D Then I start winbindd Then I join the domain (smbpasswd -j DOMAIN -r DOMAINCONTROLLER -U Administrator) It works Then I check my Secret (wbinfo -t) and it's good Then I list users and groups (wbinfo -u and wbinfo -g) and it works fine However I still cannot get "getent passwd" and "getent group" working. I am 100% stumped -SP -Original Message- From: Hall, Ken (ECSS) [mailto:KeHall@;exchange.ml.com] Sent: Friday, November 01, 2002 12:55 PM To: [EMAIL PROTECTED] Subject: RE: [Samba] getent not working correctly Did you reboot after starting winbindd? Either do that, or try looking for the nameserver cache daemons (nscd), and kill them all. (Don't worry, they'll restart.) I had the same problem with nss_ldap, and it drove me NUTS till I found out about the cache mechanism. > -Original Message- > From: Noel Kelly [mailto:nkelly@;citrusnetworks.net] > Sent: Friday, November 01, 2002 12:46 PM > To: 'Sean Patrick Ingles'; [EMAIL PROTECTED] > Subject: RE: [Samba] getent not working correctly > > > You need getent to work. This is really how Unix actually does the > authenticating - winbind is just the conduit to the M$ database. > > Have you edited your /etc/nsswitch.conf correctly? You need: > > passwd: files winbind nisplus > shadow: files winbind nisplus > group: files winbind nisplus > > This will make Unix call winbind when looking for users/groups (this > the mechanism that getent passwd/group runs). > > HTH, > Noel > > > -Original Message- > From: Sean Patrick Ing
RE: [Samba] Adding user permissions
What exactly are you trying to do? If you change the Unix file permissions this will change immediately without touching Samba. If you are changing the permissions given through smb.conf then a simple 'killall -1 smbd' will force all the running smbds to reread smb.conf without actually interrupting the clients. If you are adding users to global groups then Windoze actually requires that the user logs out and in again to get these new group permissions. HTH Noel -Original Message- From: Mark Matrafajlo [mailto:mark.matrafajlo@;diogenesinc.com] Sent: 05 November 2002 20:16 To: [EMAIL PROTECTED] Subject: [Samba] Adding user permissions Is there a way to grant a user rights to a directory without restarting samba ? thx, Mark -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Trouble with groups
This sounds awfully messy Bert. All those mappings might not be necessary. I setup a Samba PDC the other week for a customer and we simply used the 'domain admin group =' parameter like this: domain admin group = admin nkelly root and other samba users This means when I (nkelly) log in on a workstation I have complete control over it. HTH Noel -Original Message- From: Bert Rapp [mailto:bert@;rappsonline.com] Sent: 05 November 2002 19:13 To: Samba List Subject: Re: [Samba] Trouble with groups Have I wandered into uncharted territory? They has to be someone out there that can point me in the right direction. Please help me. :) Bert Rapp wrote: > I'm having trouble getting myself in to the administrators group. I'm > using samba as a domain controller. I have a samba account called > administrator. I have these settings in my smb.conf:: > > domain group map = /etc/samba/groups.mapping > domain user map = /etc/samba/domainuser.mapping > local group map = /etc/samba/localgroup.mapping > > > This is in my domainuser.mapping to alias the administrator samba > account to the linux root account: > root = \\NORTHTRAILRV\\Administrator > > This is in my groups.mapping to alias admins to the Administrators groups > admins = Administrators > > This is the group listing in /etc/group: > admins:x:200:root > > And for fun I have a local group mapping like this: > admins = BUILTIN\Administrators > > For some reason though, when I log on to the domain as administrator, > I still do not have permission to change the time or anything else. > > Does anyone have any suggestions? > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] group privileges on newly created files?
Use the sticky bit: chown .omnigroup shareddir chmod g+s shareddir this will make everything created in the shareddir have the group 'omnigroup'. HTH -Original Message- From: Rob Thomas [mailto:rob@;electricmail.com] Sent: 05 November 2002 22:52 To: [EMAIL PROTECTED] Subject: [Samba] group privileges on newly created files? Just curious, I know you can force a creation mask using "create mode", but is there any way to enforce under what group ownership a file/directory is created? My users belong to several groups, and I want new files created as owned by a specific group... Thanks in advance, -Rob -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] getent not working / winbindd issues
Sean, You don't actually need PAM for Samba to act as a Windows file server dipping into the NT domain lists with winbindd for authentication. I would remove your PAM configuration stuff and see if that cures it. I run several large Samba servers here which do file/print to domain users. There is no adjusted PAM config. HTH Noel -Original Message- From: Sean Patrick Ingles [mailto:ingless@;visionsys.com] Sent: 05 November 2002 20:42 To: [EMAIL PROTECTED] Subject: FW: [Samba] getent not working / winbindd issues I was looking through all my SaMBa documentation with a fine-tooth comb, and I noticed there is a line in the HOWTO, Section 12.4.3 "Pluggable Authentication Modules" in the last paragraph it states: "PAM is configured by providing control files in the directory /etc/pam.d/ for each of the services that require authentication. When an authentication request is made by an application the PAM code in the C library looks up this control file to determine what modules to load to do the authentication check and in what order. This interface makes adding a new authentication service for Winbind very easy, all that needs to be done is that the pam_winbind.so module is copied to /lib/security/ and the PAM control files for relevant services are updated to allow authentication via winbind. See the PAM documentation for more details." What exactly are the "relevant services" for SaMBa? I've only been updating the "/etc/pam.d/login" file. Below is my original question, which remains un-answered and I can't seem to find any solution to it :( Looks like I'll just have to deploy this fileserver with 2 logins, 1 to the domain and 1 to the fileserver :( -SP -Original Message- From: Sean Patrick Ingles Sent: Tuesday, November 05, 2002 10:55 AM To: [EMAIL PROTECTED] Subject: [Samba] getent not working / winbindd issues I first start smbd -D and nmbd -D Then I start winbindd Then I join the domain (smbpasswd -j DOMAIN -r DOMAINCONTROLLER -U Administrator) It works Then I check my Secret (wbinfo -t) and it's good Then I list users and groups (wbinfo -u and wbinfo -g) and it works fine However I still cannot get "getent passwd" and "getent group" working, it just lists the local users or groups and hangs... I verified that the libraries were in the /lib folder and symlinked, and here is the output from ldconfig: [root@tux samba]# ldconfig -v | grep winbind libnss_winbind.so -> libnss_winbind.so I restarted winbindd and typed "getent passwd" and it just lists my local passwords and hangs. Nothing is generated in my log.winbindd when I do this either. I am also noticing that _occasionally_ the box will not allow anyone to login until after I kill winbindd and sometimes winbindd locks up most of the processor until I KILL -9 it. uname -a: Linux tux.#.net 2.4.19 #1 Fri Oct 25 15:39:52 EDT 2002 i686 unknown Here is my /etc/nsswitch.conf (abbreviated): passwd: files winbind shadow: files winbind group: files winbind Here is my smb.conf: [global] workgroup = vsionline server string = Samba %v -- TEST -- security = domain password server = vsi-vsi-albany winbind uid = 1-2 winbind gid = 1-2 winbind separator = + winbind cache time = 10 winbind enum users = Yes winbind enum groups = Yes For reference, here is my /etc/pam.d/login: [root@tux pam.d]# cat login #%PAM-1.0 auth required /lib/security/pam_securetty.so auth sufficient /lib/security/pam_winbind.so auth sufficient /lib/security/pam_unix.so use_first_pass auth required /lib/security/pam_stack.so service=system-auth auth required /lib/security/pam_nologin.so accountsufficient /lib/security/pam_winbind.so accountrequired /lib/security/pam_stack.so service=system-auth password required /lib/security/pam_stack.so service=system-auth sessionrequired /lib/security/pam_stack.so service=system-auth sessionoptional /lib/security/pam_console.so [root@tux pam.d]# Any assistance anyone can provide will be much appreciated! -SP === \/ // Sean Patrick Ingles \ / // Jr. Network Engineer \/ ___ // \ / // Vision Systems, Inc. __/ / _/ 142 State Street Albany, NY 12207 www.visionsys.com Landline: +1 518.434.4300 x1406 [EMAIL PROTECTED] Fax: +1 518.434.4304 == -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus s
RE: [Samba] Samba 2.2.6 and Winbind
You need to look at the documentation for changes to your PAM configuration. Be careful to leave some logged in sessions as fiddling with your PAM setup can lock you out of the machine. HTH -Original Message-From: Lynn [mailto:[EMAIL PROTECTED]]Sent: 05 November 2002 22:25To: [EMAIL PROTECTED]Subject: [Samba] Samba 2.2.6 and Winbind On Samba 2.2.6 and Winbind I used the following command and all are working:/usr/local/samba/bin/wbinfo -u (it did list all win 2000 users)/usr/local/samba/bin/wbinfo -g (it did list all win 2000 groups) root# getent passwd (it list all Linux users)root# getent group (it list all Linux groups)== The problem is. When I am at a Linux command line and I tryto logon to Windows 2000 Server it won 't work. DOMAIN+usernameIn my case it is user logon:WEBOFFICE+biguserpassword: (password entered) It prompt for a password, I enter the password, and it said "invaliduser account." I then log on using just a username and leave out WEBOFFICE user logon: biguser password: (password entered) It still gives me the same errorWhat do I need to do to be able to log onto a Win 2000 server from a Linux computer ? Do you Yahoo!?HotJobs - Search new jobs daily now ---Incoming mail is certified Virus Free.Checked by AVG anti-virus system (http://www.grisoft.com).Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
RE: [Samba] Samba 2.5 PDC + WinXP problem
Did you use the reqsignorseal reg patch as well? Noel -Original Message-From: Amaury DAILLIEZ [mailto:[EMAIL PROTECTED]]Sent: 06 November 2002 09:52To: [EMAIL PROTECTED]Subject: [Samba] Samba 2.5 PDC + WinXP problem Hey ppl ! My WinXP workstations are not able to join my domain. I tried to apply the registry fix for plain-text passwords but it has no effects :( My PDC seems to work fine cause i've got no problems with Win2K Workstations... Is there anything i've omitted ? Regards, Amaury ---Incoming mail is certified Virus Free.Checked by AVG anti-virus system (http://www.grisoft.com).Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
RE: [Samba] Samba 2.5 PDC + WinXP problem
Look under http://samba.mirror.ac.uk/samba/docs/ for this one: The Unoffical Samba HOWTO, by David Lechnyr http://hr.uoregon.edu/davidrl/samba.html search for 'requiresignorseal' Noel -Original Message-From: Amaury DAILLIEZ [mailto:[EMAIL PROTECTED]]Sent: 06 November 2002 11:42To: Noel KellySubject: Re: [Samba] Samba 2.5 PDC + WinXP problem i didn't heard about that reg patch :( where can i find it ? Regards, Amaury - Original Message - From: Noel Kelly To: 'Amaury DAILLIEZ' ; [EMAIL PROTECTED] Sent: Wednesday, November 06, 2002 11:07 AM Subject: RE: [Samba] Samba 2.5 PDC + WinXP problem Did you use the reqsignorseal reg patch as well? Noel -Original Message-From: Amaury DAILLIEZ [mailto:[EMAIL PROTECTED]]Sent: 06 November 2002 09:52To: [EMAIL PROTECTED]Subject: [Samba] Samba 2.5 PDC + WinXP problem Hey ppl ! My WinXP workstations are not able to join my domain. I tried to apply the registry fix for plain-text passwords but it has no effects :( My PDC seems to work fine cause i've got no problems with Win2K Workstations... Is there anything i've omitted ? ---Incoming mail is certified Virus Free.Checked by AVG anti-virus system (http://www.grisoft.com).Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
RE: [Samba] Multiple Groups Assigned to a File
Check out the smb.conf parameters 'read list=' & 'write list=' with which you can assign users and groups these permissions to shares. HTH Noel -Original Message- From: Jess Cannata [mailto:doubtful500@;hotmail.com] Sent: 06 November 2002 14:28 To: [EMAIL PROTECTED] Subject: [Samba] Multiple Groups Assigned to a File I'm new to this group so I hope that this is the right place to ask this question (if not, let me know): We are setting up several Samba servers and we've run into a problem with file permissions. We've have a few shared folders that we'd like for some GROUPS to have read/write access and other GROUPS to have only read access. I cannot figure out how to do this because Linux/Unix seems to have the limitation that a file can only be owned by one user and one group, and the permissions are only applicable to the owner (user and group). Is there a way to assign more than one group to a file, and make it so the different groups have different permissions (Like NDS and Microsoft do)? If not, how do people get around this? Thanks for any help. Jess Cannata Systems Administrator Advanced Research Computing Georgetown University _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Multiple Groups Assigned to a File
Should have added that if you want more sophisticated (and therefore more complex administration) permissions then you can use ACLs. However at the moment this requires that you compile your kernel with ACL support using patches or grab an ACL enabled kernel/filesystem like XFS from SGI. Noel -Original Message- From: Jess Cannata [mailto:doubtful500@;hotmail.com] Sent: 06 November 2002 14:28 To: [EMAIL PROTECTED] Subject: [Samba] Multiple Groups Assigned to a File I'm new to this group so I hope that this is the right place to ask this question (if not, let me know): We are setting up several Samba servers and we've run into a problem with file permissions. We've have a few shared folders that we'd like for some GROUPS to have read/write access and other GROUPS to have only read access. I cannot figure out how to do this because Linux/Unix seems to have the limitation that a file can only be owned by one user and one group, and the permissions are only applicable to the owner (user and group). Is there a way to assign more than one group to a file, and make it so the different groups have different permissions (Like NDS and Microsoft do)? If not, how do people get around this? Thanks for any help. Jess Cannata Systems Administrator Advanced Research Computing Georgetown University _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] PDC and logon script - try 2
What permissions do you have on your netlogon directory? Should be r-x for everyone. Noel -Original Message- From: Darin Bawden [mailto:dbawden@;teamdme.com] Sent: 06 November 2002 14:22 To: Samba List Subject: [Samba] PDC and logon script - try 2 Hi everyone, I have a question about the logon script command. I've read and read and read the man page for smb.conf. In essence, I've duplicated the settings on the PDC how-to document to create a PDC with a logon script. However, when I log in, the scrips doesn't run. The only thing I don't have enabled, like the how-to, is roaming profiles. I'll include my smb.conf for review. I'm running 2.2.5 at work. I have a second Samba at home, with roaming profiles, but it doesn't work there, either (it's running 2.2.6). A second issue I am having is, after upgrading from 2.2.5 to 2.2.6, all my CUPS printers are not visible over the netowrk. Cups seems them as installed, but I can't see them over the netowrk. I stopped samba before doing the update. I did the update, in which I recieved an error (which I think I've posted to the list), then I started the samba service. since then, I've had nothing but trouble. I can't see any printers and I can't get connected to the network (although I don't believe this is due to the update...I think). Any help would be appreciated as I'm about to update the production server to CUPS. I was also wanting to update the samba server to 2.2.6 smb.conf: [global] coding system = client code page = 850 code page directory = /usr/share/samba/codepages workgroup = TE* netbios name = LINUX1 netbios aliases = netbios scope = server string = Linux Server interfaces = bind interfaces only = No security = USER encrypt passwords = Yes update encrypted = No allow trusted domains = Yes hosts equiv = min passwd length = 5 map to guest = Never null passwords = No obey pam restrictions = Yes password server = smb passwd file = /etc/samba/smbpasswd root directory = pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* passwd chat debug = No username map = password level = 0 username level = 0 unix password sync = Yes restrict anonymous = No lanman auth = Yes use rhosts = No log level = 2 syslog = 1 syslog only = No log file = /var/log/samba/%m.log max log size = 0 timestamp logs = Yes debug hires timestamp = No debug pid = No debug uid = No protocol = NT1 large readwrite = No max protocol = NT1 min protocol = CORE read bmpx = No read raw = Yes write raw = Yes nt smb support = Yes nt pipe support = Yes announce version = 4.5 announce as = NT max mux = 50 max xmit = 65535 name resolve order = lmhosts host wins bcast max packet = 65535 max ttl = 259200 max wins ttl = 518400 min wins ttl = 21600 time server = Yes unix extensions = No change notify timeout = 60 deadtime = 0 getwd cache = Yes keepalive = 300 lpq cache time = 10 max smbd processes = 0 max disk size = 0 max open files = 1 read size = 16384 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 stat cache size = 50 use mmap = Yes total print jobs = 0 load printers = Yes printcap name = /etc/printcap disable spoolss = No enumports command = addprinter command = deleteprinter command = show add printer wizard = Yes os2 driver map = strip dot = No character set = mangled stack = 50 stat cache = Yes domain admin group = @root domain guest group = machine password timeout = 604800 add user script = /usr/sbin/adduser -d /dev/null -g 100 -s /bin/false -M %m$ delete user script = logon script = logon.cmd logon path = \\%N\%U\profile logon drive = logon home = \\%N\%U domain logons = Yes os level = 99 lm announce = Auto lm interval = 60 preferred master = True local master = Yes domain master = True browse list = Yes enhanced browsing = Yes dns proxy = No wins proxy = No wins server = wins support = No wins hook = kernel oplocks = Yes oplock break wait time = 0 add share command = change share command = delete share command =
RE: [Samba] Printing: Access denied, unable to connect
I'm no expert with printer problems but have you tried setting the perms on your /var/spool/lpd/spit directory to 777? Just a thought, Noel -Original Message- From: Steve Carter [mailto:scarter@;pobox.com] Sent: 07 November 2002 00:54 To: [EMAIL PROTECTED] Subject: Re: [Samba] Printing: Access denied, unable to connect Further to this, I ran the following putting smbd into interactive mode anc capturing the output: # script -t 1 logger /usr/local/sbin/smbd -i -d 4 -l /tmp There is a whole section in the debug output that ends with an access denied message. There are two messages; "access check was FAILURE" and "access DENIED for printer open". I haven't a clue what the debug leading up to that means. Any pointers? -Steve --- vfs_ChDir to /tmp trans <\PIPE\> data=2316 params=0 setup=2 named pipe command on <> name search for pipe pnum=744b Got API command 0x26 on pipe "spoolss" (pnum 744b)free_pipe_context: destroying talloc pool of size 0 Doing \PIPE\spoolss api_rpcTNP: api_spoolss_rpc op 0x45 - api_rpcTNP: pipe 29771 rpc command: SPOOLS S_OPENPRINTEREX checking name: \\good\printer Opened policy hnd[2] [000] 00 00 00 00 02 00 00 00 00 00 00 00 00 B6 C9 3D ... . ...= [010] B8 81 00 00 Setting printer type=\\good\printer Printer is a printer Setting printer name=\\good\printer (len=14) set_printer_hnd_name: Printer found: printer -> printer Found policy hnd[0] [000] 00 00 00 00 02 00 00 00 00 00 00 00 00 B6 C9 3D ...= [010] B8 81 00 00 Found policy hnd[0] [000] 00 00 00 00 02 00 00 00 00 00 00 00 00 B6 C9 3D ...= [010] B8 81 00 00 short name:printer se_access_check: user sid is S-1-5-21-1188926781-616364094-2007133261-3002 se_access_check: also S-1-5-21-1188926781-616364094-2007133261-1001 se_access_check: also S-1-5-21-1188926781-616364094-2007133261-1107 se_access_check: also S-1-5-21-1188926781-616364094-2007133261-2801 se_access_check: also S-1-5-21-1188926781-616364094-2007133261-21001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 access check was FAILURE access DENIED for printer open Found policy hnd[0] [000] 00 00 00 00 02 00 00 00 00 00 00 00 00 B6 C9 3D ...= [010] B8 81 00 00 Found policy hnd[0] [000] 00 00 00 00 02 00 00 00 00 00 00 00 00 B6 C9 3D ...= [010] B8 81 00 00 Closed policy * Steve Carter <[EMAIL PROTECTED]> [021106 16:53]: > I have been having a printing problem recently on a setup that has worked > for quite some time. Configs below. The symtoms are slightly different > on a W2K and a WinME workstation, but the result is the same; no printed > output. However, when I print from the local Unix server or from any > other Unix server in the network the output is as expected. > > The W2K machine reports 'Access denied, unable to connect' when the > printer is selected via the Printers window. > > When I add in the 'use client driver = yes' directive the symptoms are > masked in that the printer shows as 'Ready' in the Printers window but, > still, no printed output and the printing process hangs. > > I've tried all kinds of things to fix this, I've looked thru mail archives > and I've run smbd interactively with debugging turned on to no avail. I > have seen this same question asked by others in the archives but no > resolution. > > Any further pointers for troubleshooting would be much appreciated. > > -Steve > > > > smb.conf: > > [global] > log file = /var/log/samba/log.%m > > printing = BSD > printcap name = /etc/printcap > print command = /usr/bin/lpr -P%p -r %s > [printer] > # use client driver = yes > path = /var/spool/lpd/spit > printable = yes > printer name = lp > read only = yes > guest ok = yes > > printcap: > > dj932c|color|HP DeskJet 932c:\ > :sh:mx#0:\ > :lp=/dev/lpt0:sd=/var/spool/lpd/spit:\ > :if=/usr/local/libexec/magicfilter/dj550c-filter:\ > :lf=/var/log/lpd-errors: -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Trouble with groups
Yes Using Samba is pretty out of date now with the recent advances. I would take a look at the some of the howtos on the Samba site (http://samba.mirror.ac.uk/samba/docs/), in particular these two are very good: http://hr.uoregon.edu/davidrl/samba.html http://samba.mirror.ac.uk/samba/docs/Samba-HOWTO-Collection.html Also I would print out the smb.conf man page and browse it as a reference. The SWAT tool does a nice job of categorising the smb.conf commands under headings which are also excellent for try it and see stuff. HTH Noel -Original Message- From: Robert Rapp [mailto:bert@;rappsonline.com] Sent: 07 November 2002 02:33 To: Noel Kelly Cc: Samba List Subject: Re: [Samba] Trouble with groups I agree, it felt messy. By the time I got here I was just trying to pile more junk on top to reach the sky. :) Just to be clear, the "domain admin group" directive expects samba users, not unix users and not unix groups correct? I've found that the "Using Samba" book published by O'Reilly seems to be a bit light in documentation when it comes to using Samba as a PDC. http://www.oreilly.com/catalog/samba/chapter/book/ Do you have a book you recommend or another source? I've also found the samba.org docs a little light when looking for PDC issues. Noel Kelly wrote: >This sounds awfully messy Bert. All those mappings might not be necessary. > >I setup a Samba PDC the other week for a customer and we simply used the >'domain admin group =' parameter like this: > >domain admin group = admin nkelly root and other samba users > >This means when I (nkelly) log in on a workstation I have complete control >over it. > >HTH >Noel > > > > >-Original Message- >From: Bert Rapp [mailto:bert@;rappsonline.com] >Sent: 05 November 2002 19:13 >To: Samba List >Subject: Re: [Samba] Trouble with groups > > >Have I wandered into uncharted territory? They has to be someone out >there that can point me in the right direction. Please help me. :) > >Bert Rapp wrote: > > > >>I'm having trouble getting myself in to the administrators group. I'm >>using samba as a domain controller. I have a samba account called >>administrator. I have these settings in my smb.conf:: >> >>domain group map = /etc/samba/groups.mapping >>domain user map = /etc/samba/domainuser.mapping >>local group map = /etc/samba/localgroup.mapping >> >> >>This is in my domainuser.mapping to alias the administrator samba >>account to the linux root account: >>root = \\NORTHTRAILRV\\Administrator >> >>This is in my groups.mapping to alias admins to the Administrators groups >>admins = Administrators >> >>This is the group listing in /etc/group: >>admins:x:200:root >> >>And for fun I have a local group mapping like this: >>admins = BUILTIN\Administrators >> >>For some reason though, when I log on to the domain as administrator, >>I still do not have permission to change the time or anything else. >> >>Does anyone have any suggestions? >> >> >> > > > --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Looking for help with PDC implementation problem
Hi Chris, Can't you add the domain user to the Power Users group on the local machine? Assuming the machine is part of the domain, log in as local Administrator and under Users/Groups add the domain users to the Power Users group. HTH -Original Message- From: Chris Mason [mailto:masonc@;masonc.com] Sent: 07 November 2002 10:34 To: [EMAIL PROTECTED] Subject: [Samba] Looking for help with PDC implementation problem In an small business network I have built for a hospitality client, I have several Win2K workstations and a Redhat 7.3 server using Samba for PDC and file sharing, user's home directories, etc. Users can float as there are not enough machines and some workers are not deskbound. Everything works great at this stage. No I have to integrate a Point of Sale system. The POS system runs on Win98 keyboard-less terminals and a Win2K workstation server, which shares the data and runs a service to synchronize the data (otherwise I would have used a samba share) Since the Win98 terminals cannot login, I cannot run this system under the domain. However, users on the domain workstations need to be able to run the POS applications to do inventory control etc. I tried to give them access by creating accounts on the POS server, and they got access, but when they run the inventory application, I get -2147220499: An Error occurred in clsRegistry.key[PropertyLet],rsNewValue=Software\FastechSoftware\Databas e. Message: Can't write I suspect the problem is that the domain users do not have the privileges required to write to the registry, when I create the user locally on the machine everything is fine, and the inventory program works. How can I give the domain user the same privileges as a power user on the local machine? Chris Mason [EMAIL PROTECTED] Box 340, The Valley, Anguilla, British West Indies Tel: 264 497 5670 Fax: 264 497 8463 Cell: 264 235 5670 http://www.anguillaguide.com/ The Anguilla Guide Talk to me in real time: Yahoo:netconcepts_anguilla US Fax and Voicemail: (815)301-9759 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] RE: SWAT not working, can't authenticate
I have had this problem before. Never really got to the bottom of it but if you want to get on then just add '-a' to your swat command to disable authentication. -Original Message- From: Jim Myers [mailto:myersjj@;us.ibm.com] Sent: 07 November 2002 21:08 To: [EMAIL PROTECTED] Subject: RE: [Samba] RE: SWAT not working, can't authenticate I had already done that, so it must be something more subtle... Jim Myers IBM Almaden Research Center B3-239, 408-927-2013 "Irving Carrion" <[EMAIL PROTECTED]> 11/07/2002 12:16 PM To: Jim Myers/Almaden/IBM@IBMUS, <[EMAIL PROTECTED]> cc: Subject:RE: [Samba] RE: SWAT not working, can't authenticate Not to sure, but I think you may need to add the root account to Samba. smbpasswd -a root -Original Message- From: [EMAIL PROTECTED] [mailto:samba-admin@;lists.samba.org] On Behalf Of Jim Myers Sent: Thursday, November 07, 2002 3:08 PM To: [EMAIL PROTECTED] Subject: [Samba] RE: SWAT not working, can't authenticate I have Samba 3.0 alpha20 installed on Linux RedHat 7.3 and all works fine except for SWAT. I have /etc/xinetd.d/swat defined properly (I think) and port 901 is active and starts SWAT OK. When I try to log in to SWAT either locally or from remote browser, the authentication fails. I'm logging in as user=root with the correct password, but the authentication still fails. Is there some special password file that SWAT uses? Jim Myers IBM Almaden Research Center B3-239, 408-927-2013 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] samba PDC
You missed a crucial piece of information - what client are you using? If it is XP then you will need to apply a registry change - read http://hr.uoregon.edu/davidrl/samba.html "Use the Group Policy editor (gpedit.msc) and disable the "Domain Member: Digitally encrypt or sign secure channel data". Alternately, you can make the following change to the registry: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]"requiresignorseal"=dword: " Noel -Original Message-From: Liviu Balan [mailto:[EMAIL PROTECTED]]Sent: 11 November 2002 08:47To: [EMAIL PROTECTED]Subject: [Samba] samba PDC Hello I'm trying to replace the windows PDC of my company with a linux one. I've tried doing this with samba...It allows me to join a computer to the specific domain, but it won't allow me to log in, although i've created the users and passwords (useradd and smbpasswd) Can anyone please email me a smb.conf example that works for him/her? Thank you ---Incoming mail is certified Virus Free.Checked by AVG anti-virus system (http://www.grisoft.com).Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002
RE: [Samba] server manager on samba pdc
Webmin has a decent Samba interface - http://www.webmin.com/ -Original Message- From: giballa [mailto:giballa@;yahoo.it] Sent: 12 November 2002 10:42 To: [EMAIL PROTECTED] Subject: [Samba] server manager on samba pdc I've a linux samba pdc. Anyone who tell me if exist a software like "server manager" that work in winNT server? The smbstatus command is not accurate and dont allow admin to manage connections Thx Giballa __ Per te Blu American Express è gratis! http://it.yahoo.com/mail_it/foot/?http://www.americanexpress.it/land_yahoo -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Slow network to samba machine
Danny, The nmbd error is because you have Samba enabled as a Wins server so two nmbd processes are started and your script is having trouble finding the second one to kill. If you execute the shutdown command again you will see the second process killed. Your network problems sound like line errors. Try doing an 'ifconfig' and see if you are getting any errors on that network card. HTH Noel -Original Message- From: Danny Regan [mailto:dregan@;midfield.com.au] Sent: 12 November 2002 20:58 To: [EMAIL PROTECTED] Subject: [Samba] Slow network to samba machine Sirs, Thank you for any time that you take to read about my problem. I have a Linux (redhat) 8.0 mail server set up with; qmail dhcp / dns transparent proxy to internet - adsl HTML & our web pages (nothing special) SAMBA This problem has been with me since RedHat 7.3 and thir packaged samba. If I transfer a file from the mail (linux box) box to a win98se box it takes a minimum amount of time. If I transfer a file to the mail box from a win98se box it takes enormous amounts of time for example a file of 100k from mail to win98 - 10 secs a file 0f 100k from win98 to mail - 10 mins (if it makes it and the process doesn't fail.) error messages usually like : "The device does not exist on the network" Smaller files of say 1-3k transfer without problems in reasonable amounts of time. The same problems occur when I map a drive from win98 to mail - except that I can transfer slightly larger files (up to 75k) without the error/failure messages. It still takes about 5mins to transfer the file. Same goes when I use /usr/bin/smbclient win98name\c password - although I can 'get' a file up to about 140k without any error messages. I have tried the smb.conf with SO_RCVBUF to 32768, security user and share - There have been no problems establishing network connections. Everything appears to work just fine. When I perform a /etc/rd.c/init.d/smb restart I do get a message for NBM that is a little disturbing; Shutting down SMB services [ OK ] Shutting down NMB services /etc/rd.c/init.d/smb line 201:kill: (11313) - no such process Starting is all OK & OK /etc/services (as advised in the Unofficial Samba HOTTO) has netbios-ns137/tcp netbios-ns137/udp netbios-dgm 137/tcp netbios-dgm 137/udp netbios-ssn 137/tcp netbios-ssn 137/udp microsoft-ds 445/tcp microsoft-ds 445/udp As a matter of interest - qmail has the same problem. This may not be a samba problem - but any suggestions that you may be able to offer will be very well received (even rude ones) Thank you again for reading through my dilemma Danny Regan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] nmbd memory leak in 2.2.x CVS
I am running 2.2.6 on a customer's site and everything has been perfect. However I noticed the other day that one of the two nmbd processes (it is a wins server) had grown to 13Mb over a two week period. I needed to update to the latest CVS version anyway and had hoped that something in that might fix things. Five days later and things are looking the same: nmbd started on Nov 9th: root 1271 0.0 0.2 3684 1456 ?SNov09 0:10 /usr/local/samba/bin/nmbd -o root 1272 0.0 0.8 7100 4428 ?SNov09 0:02 /usr/local/samba/bin/nmbd -o Today Nov 14th: root 1271 0.0 0.2 3688 1460 ?SNov09 0:21 /usr/local/samba/bin/nmbd -o root 1272 0.0 1.8 12376 9704 ?SNov09 0:07 /usr/local/samba/bin/nmbd -o As you can see nmbd process 1271 has slowly gets larger. I have tried restarting after removing wins.dat but to no avail. This is a PDC and the only server on a network with about ten XP clients. 'os level' is 65. The log looks perfectly normal. Anyone aware of the cause/solution or any suggestions to troubleshoot? Stumped, Noel Kelly --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Help on ACLs and samba
To use ACLs you will need an ACL-enabled kernel/filesystem and build Samba on top of this. Some distros like Mandrake now come with ACLs built in. Otherwise you will need to patch your kernel. However, if your current shares are done with whole groups then you probably don't need ACLs and can simply use the security in Samba using parameters like 'valid users=', 'write list=', 'read list=', 'force group=' etc. Much simpler from both an administration and setup point of view. There is no way to transfer your NT ACLs to Samba automatically (same as if you transferred stuff between any two volumes - you will always lose the ACLs). I don't think there is a way of grabbing the whole SAM database automatically from an existing NT domain in Samba 2.2.6 (there is something like this in 3.0 i believe?). You will need to create each user in your Samba PDC manually but if you have a large number then you could use winbindd to get a text listing of the users on the current domain and then use a script to create each of them on the Samba PDC. HTH, Noel -Original Message- From: Adrian Chow Seng Yien [mailto:chowadrian@;icr.a-star.edu.sg] Sent: 15 November 2002 02:16 To: [EMAIL PROTECTED] Subject: [Samba] Help on ACLs and samba Hi, Firstly I want to declare I am a newbie to Samba. I am installing samba over Redhat 8.0 I need to know whether Samba can replace my NT4 PDC in the following aspects and how to do it:- 1. ACLs. Must i create the every user name in Samba as in the NT4 PDC? How do I create groups like "Protocol Stack" with space in between the groupname? (Making sure that the ACls are mapped properly when transfering files over to Linux Samba) 2. If I were to transfer files from the NT4 PDC to Linux Samba, can I retains the ACLs being set on NT4? How must I do to ensure the ACls are retained? (Similar to question 1) 3. Is there any method to transfer the SAM over without creating every user and group all over again? FYi, my PDC is doing file sharing only with permissions set for different groups in different levels of the directories. I am going to remove the NT4 server and use Samba ultimately. If cannot answer in 1 email, please refer me to the right documentation to do so. Thanks. newbie adrian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Help on ACLs and samba
> So I can create the same user id. How about the groups? Eg groupname with 2 or more words? How can I create them in Samba? You can have groups with more than one word but you will need to enclose them in " ". I would recommend you use a '_' though or something similar rather than a space. > Is there a possibility that I can map like abc group in Samba with abc group in NT4 PDC? Are you wanting to keep the existing PDC and use Samba as a member server? If so then all you need to do is investigate using winbindd which will give you access to the NT SAM database and allow you to treat them as local users/groups on the Samba server. > Are you saying that if you copy files from the NT4 PDC to Samba Linux, the ACLs will be lost? No way to preserve them? > Correct. Even if you copied files from one NT server to another you will lose the ACLs. The only way to document your ACLs in NT is using the command line utility 'cacls'. Noel --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 05/11/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] ACL problem
Redhat 8 does not have ACL support in the kernel - they pulled it at the last minute. The user tools are there but not the actual kernel support for them. Read the release notes - last paragraph - for an explanation. -Original Message- From: Adrian Chow Seng Yien [mailto:chowadrian@;icr.a-star.edu.sg] Sent: 15 November 2002 09:50 To: [EMAIL PROTECTED] Subject: [Samba] ACL problem Hi, I am running Redhat linux 8.0. "rpm -qa | grep acl" gives the following result libacl-2.0.11-2 acl-2.0.11-2 libacl-devel-2.0.11-2 How can I know whether I got acl support install on my NT machine? Do I need to specify acl support in the smb.conf file? I got problem giving permission to another person for rwx to a file. Thanks. adrian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] nmbd memory leak in 2.2.x CVS
Jeremy, It is indeed a WINS server. I have a second test server running the same CVS and it does not appear to have the same problem (PII uniprocessor). This makes me wonder about the fancy Hyperthreading on the new Intel chips which fools Linux into believing it is dealing with a dual processor machine. I had not seen any problems with the HT during testing but have since seen a Redhat errata which says the SMP kernel supplied with 7.3 can have problems though. I am visiting the customer's site in a few days time and intend to turn off Hyperthreading on the processor, run the newer Redhat kernel and see if that clears it up. If it doesn't then I'll fire up Valgrind as you suggest. Cheers, Noel - Original Message - From: <[EMAIL PROTECTED]> To: "Noel Kelly" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Sunday, November 17, 2002 7:25 PM Subject: Re: [Samba] nmbd memory leak in 2.2.x CVS > On Thu, Nov 14, 2002 at 07:58:07PM -, Noel Kelly wrote: > > I am running 2.2.6 on a customer's site and everything has been perfect. > > However I noticed the other day that one of the two nmbd processes (it is a > > wins server) had grown to 13Mb over a two week period. > > > > I needed to update to the latest CVS version anyway and had hoped that > > something in that might fix things. Five days later and things are looking > > the same: > > > > nmbd started on Nov 9th: > > root 1271 0.0 0.2 3684 1456 ?SNov09 0:10 > > /usr/local/samba/bin/nmbd -o > > root 1272 0.0 0.8 7100 4428 ?SNov09 0:02 > > /usr/local/samba/bin/nmbd -o > > > > Today Nov 14th: > > root 1271 0.0 0.2 3688 1460 ?SNov09 0:21 > > /usr/local/samba/bin/nmbd -o > > root 1272 0.0 1.8 12376 9704 ?SNov09 0:07 > > /usr/local/samba/bin/nmbd -o > > > > > > As you can see nmbd process 1271 has slowly gets larger. I have tried > > restarting after removing wins.dat but to no avail. > > > > This is a PDC and the only server on a network with about ten XP clients. > > 'os level' is 65. The log looks perfectly normal. > > > > Anyone aware of the cause/solution or any suggestions to troubleshoot? > > Are you running it as a WINS server ? Can you try it with valgrind > and see if it catches any leaks ? > > Jeremy. > --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 02/11/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] webmin
Not much to do with Samba but did you start the Webmin service? 'service webmin start' -Original Message- From: Jean-Jacques Antille [mailto:[EMAIL PROTECTED]] Sent: 21 November 2002 15:37 To: [EMAIL PROTECTED] Subject: [Samba] webmin Hello! Sorry for my English! I should like use Webmin to admin my server Samba by Internet. Mais I didn't find the port for this. I tried http://localhost:1 but... I use samba on Mandrake 9.0. Thank you for yours answers. Cordiales salutations. Jean-Jacques http://www.webmister.ch/school/accueil.asp 078 665 75 74 027 458 40 61 --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.417 / Virus Database: 233 - Release Date: 08/11/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.417 / Virus Database: 233 - Release Date: 08/11/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] smb restart??????
this is because you are using Samba as your wins server and two instances of nmbd are started. when you run the shutdown script it doesn't find the second one cleanly - perhaps because another one is respawned as the first is killed? if you run the shutdown a second time it kills the final nmbd. write you own shutdown script is the answer using something like killall. Noel -Original Message- From: Samba [mailto:[EMAIL PROTECTED]] Sent: 21 November 2002 15:40 To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: RE: [Samba] smb restart?? You said ANY help so here's my 2 cents worth. After starting the services to a : ps -ae | grep nmbd and verify that nmb is running, I'm guessing that's why it's giving you errors. Josh -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 21, 2002 7:45 AM To: [EMAIL PROTECTED] Subject: [Samba] smb restart?? when i restart smb service smb restart shutting down smb services..ok shutting down nmb services./etc/init.d/smb: line 201: kill: (1016) - no such process /etc/init.d/smb line201: kill: (999) - no such process starting smb servicesok starting nmb servicesok samba works fine but would like to get rid of this error, this only happens with redhat 8 and samba 2.5.5-10 I think have checked smb line 201...dont have 201 lines any help would be greatif more info is needed let me know Richard [EMAIL PROTECTED] [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.417 / Virus Database: 233 - Release Date: 08/11/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.417 / Virus Database: 233 - Release Date: 08/11/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] samba 2.2.2 versus windows2000 service pack 3
Title: samba 2.2.2 versus windows2000 service pack 3 I would use 2.2.7 - much more stable than 2.2.2. I have SP3 Win 2000 running with no problems. However I have stayed away from any M$ auto updates so have to take your chances with that. Noel -Original Message-From: SALOME Alexandre [mailto:[EMAIL PROTECTED]]Sent: 21 November 2002 17:17To: Samba@Lists. Samba. Org (E-mail)Subject: [Samba] samba 2.2.2 versus windows2000 service pack 3 Hi, I would like know if Windows 2000 professional with service pack 3 and the last updade of windowsupdate.microsoft.com work (and work very well !!!) with samba 2.2.2. I would like know , too, if exist a new version of samba more estable and recommended <<...OLE_Obj...>> , Atenciosamente Alexandre Salomé Comau System _ Sistemas Engenharia tel: 0055 031 9944 8646 fax:0055 031 3529 6533 ---Incoming mail is certified Virus Free.Checked by AVG anti-virus system (http://www.grisoft.com).Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.417 / Virus Database: 233 - Release Date: 08/11/2002
RE: [Samba] Problems with samba pdc and windows 2000 client
Check to make sure you don't have any existing shares mapped. Login as locally and do a 'net use * /d'. Noel -Original Message- From: kyle netix [mailto:[EMAIL PROTECTED]] Sent: 21 November 2002 15:55 To: [EMAIL PROTECTED] Subject: [Samba] Problems with samba pdc and windows 2000 client Hi all! I've got a Linux samba server and win 95/98 clients without problems. I've just installed 2 windows 2000 clients and I have a problem with one of them. One of w2000 works fine, and it logs on samba domain, but the other it doesn't log on. The account of this machine was created , but when I attemp to log on, windows 2000 says to me "Cannot join domain, the credentials supplied conflict with an existing set.." I have tried to do: "net use * /d " from windows 2000 and when I try to join domain .. I receive a message like " The supplied account is an account from machine.. Use your global user account or your local user account to have access to this server" Anybody has any idea? Thanks in advance! _ MSN Fotos: la forma más fácil de compartir e imprimir fotos. http://photos.msn.es/support/worldwide.aspx -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.417 / Virus Database: 233 - Release Date: 08/11/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] ACLs with samba
Only the owner of a file/directory can alter the permissions through the Windoze client. If you want to be able to change everyone's ACLs then create a special admin share with 'force user = root' and this will ensure that, as root, you can do anything to anything (dangerous so make sure you don't let anyone else near the share!). Noel -Original Message- From: Mikko Rautiainen [mailto:[EMAIL PROTECTED]] Sent: 22 November 2002 08:58 To: [EMAIL PROTECTED] Cc: Samba ML Subject: Re: [Samba] ACLs with samba Hi, What filesystem are you using? Like ReiserFS doesn't support ACL's but ext3 and XFS does. And is your PDC a win??? or is it a samba PDC? I have a win2k PDC and samba fileserver and I use Winbind to authenticate. I can change the permissions for files and folders in the PDC or on my desktop. I didn't use any force create modes. Mikko Rautiainen Tom Hallewell wrote: >Hi- >I am experiencing some odd behavior with ACLs with winbindd using Samba 2.6 >on Debian Woody (kernel version 2.4.18). >1. I am unable to alter permissions from Win2K clients using the >Properties->Security interface. Is this normal? I get the "Unable to save >Permission Changes on new Folder. Access is denied." message. This occurs >with all accounts, both privileged and unprivileged. > > >2. Permissions set using >setfacl -m u:DOMAIN\USER:rwx >alter the permissions just fine, but do not show up in the >Properties->Security interface. >If I run >chmod DOMAIN\USER.DOMAIN\USER >it shows up. > >The permissions show up correctly if a file or directory is created on the >share from a Win client, but cannot be modified once created, and the ACL >info is not seen. > >Is this behavior normal, or am I doing something wrong? > >Here is the relevant section of smb.conf: >[SHARE] > comment = Blah blah > path = /usr/tmp/share > valid users = @DOMAIN\Group1 @DOMAIN\Group2 > public = no > writable = yes > printable = no > create mask = 0770 > directory mode = 0770 > force create mode = 0770 > force directory mode = 0770 > >Here is the output from >getfacl /usr/tmp/share >getfacl: Removing leading '/' from absolute path names ># file: usr/tmp/BUR ># owner: mpgmover ># group: mpgmover >user::rwx >group::rwx >group:DOMAIN\Group1:rwx >group:DOMAIN\Group2:rwx >mask::rwx >other::--- > >Any input would be appreciated. >Thanks >Tom Hallewell >Radio Free Asia >Washington DC > > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Slow and bad performance on large dirs.
I believe this is more a filesystem issue than a Samba one. Using ext2/ext3 browsing directories with many files will be slow as it constructs lists for the entries to display. Filesystems like XFS and ReiserFS use binary trees which skip this step, so you might want to find a distribution or kernel to support filesystems like these. I wonder if your copy would go faster if you did not use Windows Exlporer to do the copying, bearing in mind it tries to continually refresh the directory contents. Maybe try using xcopy and see if that is an improvement. Purely my own experience but I have found copying files using the Windows Java version of Midnight Commander is very, very fast. HTH Noel -Original Message- From: Harrison Xing [mailto:[EMAIL PROTECTED]] Sent: 23 November 2002 07:05 To: [EMAIL PROTECTED] Subject: [Samba] Slow and bad performance on large dirs. Hi, We had a severe problem with samba with very large directories, e.g. 100,000 files. The file copy speed is becoming slower and slower, and it is a few times slower compared with the data when the files to be copied are already on the server. Anyone has good ideas about how to solve this? By simply checking the code, I found at smbd/filename.c, if the files are not found on the server, it will do a "scan_directory" which might be very slow if the directory is large. Are there anyway to avoid this searching? Thanks. -- Best Regards, Harrison -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.410 / Virus Database: 231 - Release Date: 31/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] nmbd memory leak in 2.2.x CVS
Hi Jeremy, I disabled Hyperthreading on the customer's CPU and have updated their kernel to the latest Redhat Official one. There still seems to be a leak in one of the nmbd processes though. I have run it through Valgrind for a couple of days (see below) and although there are errors on one of the processes, the memory leak summary does not seem to show anything untoward (the 30 bytes lost seems to happen wherever I test it). The server is running as a WINS server (2.2.6 from mid-Nov CVS), but it is only a small network of ten machines. On my test network of about the same size the nmbd processes stay static sized. Can anyone think of an other reason why a nmbd process would grow continuously from its starting size of 1704 to 13Mb after two weeks? Thanks, Noel [root@roar bin]# killall nmbd ==28849== ==28849== ERROR SUMMARY: 70 errors from 1 contexts (suppressed: 0 from 0) ==28849== malloc/free: in use at exit: 301653 bytes in 217 blocks. ==28849== malloc/free: 17416 allocs, 17199 frees, 6698849 bytes allocated. ==28849== For counts of detected errors, rerun with: -v ==28849== searching for pointers to 217 not-freed blocks. [root@roar bin]# ==28849== checked 5976468 bytes. ==28849== ==28849== definitely lost: 30 bytes in 1 blocks. ==28849== possibly lost: 0 bytes in 0 blocks. ==28849== still reachable: 301623 bytes in 216 blocks. ==28849== ==28849== 30 bytes in 1 blocks are definitely lost in loss record 9 of 31 ==28849==at 0x40044624: malloc (vg_clientfuncs.c:100) ==28849==by 0x8089CEA: string_init (in /usr/local/samba/bin/nmbd) ==28849==by 0x8064ED5: lp_set_logfile (in /usr/local/samba/bin/nmbd) ==28849==by 0x804C0E6: main (in /usr/local/samba/bin/nmbd) ==28849== ==28849== LEAK SUMMARY: ==28849==definitely lost: 30 bytes in 1 blocks. ==28849==possibly lost: 0 bytes in 0 blocks. ==28849==still reachable: 301623 bytes in 216 blocks. ==28849== Reachable blocks (those to which a pointer was found) are not shown. ==28849== To see them, rerun with: --show-reachable=yes ==28849== ==28850== discard 142 (1928 -> 26071) translations in range 0x40269000 .. 0x40272FFF ==28850== discard syms in /lib/libnss_files-2.2.5.so due to munmap() ==28850== ==28850== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 15 from 1) ==28850== malloc/free: in use at exit: 1173586 bytes in 9408 blocks. ==28850== malloc/free: 24593 allocs, 15185 frees, 19931893 bytes allocated. ==28850== For counts of detected errors, rerun with: -v ==28850== searching for pointers to 9408 not-freed blocks. ==28850== checked 7120108 bytes. ==28850== ==28850== definitely lost: 30 bytes in 1 blocks. ==28850== possibly lost: 0 bytes in 0 blocks. ==28850== still reachable: 1173556 bytes in 9407 blocks. ==28850== ==28850== 30 bytes in 1 blocks are definitely lost in loss record 16 of 38 ==28850==at 0x40044624: malloc (vg_clientfuncs.c:100) ==28850==by 0x8089CEA: string_init (in /usr/local/samba/bin/nmbd) ==28850==by 0x8064ED5: lp_set_logfile (in /usr/local/samba/bin/nmbd) ==28850==by 0x804C0E6: main (in /usr/local/samba/bin/nmbd) ==28850== ==28850== LEAK SUMMARY: ==28850==definitely lost: 30 bytes in 1 blocks. ==28850==possibly lost: 0 bytes in 0 blocks. ==28850==still reachable: 1173556 bytes in 9407 blocks. ==28850== Reachable blocks (those to which a pointer was found) are not shown. ==28850== To see them, rerun with: --show-reachable=yes ==28850== -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 17 November 2002 19:25 To: Noel Kelly Cc: [EMAIL PROTECTED] Subject: Re: [Samba] nmbd memory leak in 2.2.x CVS On Thu, Nov 14, 2002 at 07:58:07PM -0000, Noel Kelly wrote: > I am running 2.2.6 on a customer's site and everything has been perfect. > However I noticed the other day that one of the two nmbd processes (it is a > wins server) had grown to 13Mb over a two week period. > > I needed to update to the latest CVS version anyway and had hoped that > something in that might fix things. Five days later and things are looking > the same: > > nmbd started on Nov 9th: > root 1271 0.0 0.2 3684 1456 ?SNov09 0:10 > /usr/local/samba/bin/nmbd -o > root 1272 0.0 0.8 7100 4428 ?SNov09 0:02 > /usr/local/samba/bin/nmbd -o > > Today Nov 14th: > root 1271 0.0 0.2 3688 1460 ?SNov09 0:21 > /usr/local/samba/bin/nmbd -o > root 1272 0.0 1.8 12376 9704 ?SNov09 0:07 > /usr/local/samba/bin/nmbd -o > > > As you can see nmbd process 1271 has slowly gets larger. I have tried > restarting after removing wins.dat but to no avail. > > This is a PDC and the only server on a network with about ten XP clients. > 'os level' is 65. The log looks perfectly normal. > > Anyone aware of the cause/solution or any suggestions to troubleshoot? Are you running it as a WINS serve
RE: [Samba] help me
http://samba.mirror.ac.uk/samba/docs/ -Original Message- From: saranath srinath [mailto:[EMAIL PROTECTED]] Sent: 25 November 2002 11:18 To: [EMAIL PROTECTED] Subject: [Samba] help me hai , iam a new user of linux, i have installed Mandrake linux 8.2, please help in configuring samba. please note , no previous skills in linux. Missed your favourite TV serial last night? Try the new, Yahoo! TV. visit http://in.tv.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.422 / Virus Database: 237 - Release Date: 20/11/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.422 / Virus Database: 237 - Release Date: 20/11/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba Performance question
Someone else might well know better but I believe this is a file system issue. ext2/ext3 manipulate the directory entries using lists so if you have a great many files in one directory you will see performance issues as you describe. The answer to this is to change filesystem - no mean feat with your data sizes. Filesystems like XFS and ReiserFS use binary trees to manipulate the directory entries and it is a far faster way of doing things with crowded directories so you should see an improvemnet. I suppose an alternative short term solution is to get the users to break large directories up into small ones if the data lends itself to it. HTH Noel -Original Message-From: Belgardt, Wolfgang [mailto:[EMAIL PROTECTED]]Sent: 05 December 2002 20:45To: [EMAIL PROTECTED]Subject: [Samba] Samba Performance question Dear all, I have a difficult Problem with samba 2.2.5, I hope everyone can help me. My customer has samba 2.2.5 running on a HP Alpha Server ES40 Cluster with Tru64 V5.1. The share on this Server has 3.1 million files in 16000 directories. Some one this directories have 45000 files on it. The problem is: if we try a search a file from this big directory via an NT Client the response time is to large for the the customer. He has run an similar application on a NT File server. NT responded after 1 sec and samba need 6 sec. Can someone explain me what I can do to increase the performance, please? Kind Regards / Mit freundlichen Grüssen Wolfgang Belgardt Customer Support Consultant Hewlett-Packard GmbH Customer Support Bonsiepen 5 D-45136 Essen Phone: ++49 (0) 201 2663 258 Fax: ++49 (0) 201 2663 200 mobil: +49 (0171 3357 256) E-mail: [EMAIL PROTECTED] http://www.hp.com/de __ Hewlett-Packard GmbH Geschäftsführer: Jörg Menno Harms (Vorsitzender), Jürgen Banhardt, Wolfram Fischer, Rainer Kaczmarczyk, Bärbel Schmidt, Fritz Schuller, Regine Stachelhaus Vorsitzender des Aufsichtsrats: Heribert Schmitz Sitz der Gesellschaft: Böblingen, Amtsgericht Böblingen HRB 4081
RE: [Samba] printer queue is not visible on Win2K-client (Access denied)
add the following to your global section: use client driver = yes Noel -Original Message- From: Marc Schwarzwälder [mailto:[EMAIL PROTECTED]] Sent: 05 April 2002 19:04 To: [EMAIL PROTECTED] Subject: [Samba] printer queue is not visible on Win2K-client (Access denied) Hello, I have a quite annoying problem with my samba print server. Printing files on the samba-printer from my Win2K-Client is working without any problems, but I cannot see the printer queue (access denied when double-clicking the printer in Windows). The problem was discussed here before, but I couldn't find a solution that fits to my problem. "disable spoolss" didn't change anything. Does anybody have a suggestion? Please help... :-[ -> Here's my smb.conf-file: [global] netbios name = linux workgroup = BLACKFORESTER server string = Samba keep alive = 100 os level = 64 kernel oplocks = false log file = /share/log ;log level = 3 security = user encrypt passwords = yes username map = /usr/local/samba/lib/smbusers printing = lprng printcap name = /etc/printcap load printers = Yes socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY interfaces = 192.168.0.20/255.255.255.0 wins support = yes character set = ISO8859-15 client code page = 850 [printers] comment = Alle Drucker path = /var/spool/lpd browseable = yes printable = yes public = yes print command = lpr -P %p -J '%j' %s lpq command = lpq -P %p lprm command = lprm -P %p %j lppause command = lpc hold -P %p %j lpresume command = lpc release -P %p %j -> the printcap-file: Epson-ascii|lp1|y2prn_Epson.upp--ascii-Epson|y2prn_Epson.upp ascii:\ :lp=/dev/lp0:\ :sd=/var/spool/lpd/y2prn_Epson.upp--ascii-Epson:\ :lf=/var/spool/lpd/y2prn_Epson.upp--ascii-Epson/log:\ :af=/var/spool/lpd/y2prn_Epson.upp--ascii-Epson/acct:\ :if=/var/lib/apsfilter/bin/y2prn_Epson.upp--ascii-Epson:\ :la@:mx#0:\ :tr=:cl:sh: # Epson|lp2|y2prn_Epson.upp--auto-Epson|y2prn_Epson.upp auto:\ :lp=/dev/lp0:\ :sd=/var/spool/lpd/y2prn_Epson.upp--auto-Epson:\ :lf=/var/spool/lpd/y2prn_Epson.upp--auto-Epson/log:\ :af=/var/spool/lpd/y2prn_Epson.upp--auto-Epson/acct:\ :if=/var/lib/apsfilter/bin/y2prn_Epson.upp--auto-Epson:\ :la@:mx#0:\ :tr=:cl:sh: # Epson-raw|lp3|y2prn_Epson.upp--raw-Epson|y2prn_Epson.upp raw:\ :lp=/dev/lp0:\ :sd=/var/spool/lpd/y2prn_Epson.upp--raw-Epson:\ :lf=/var/spool/lpd/y2prn_Epson.upp--raw-Epson/log:\ :af=/var/spool/lpd/y2prn_Epson.upp--raw-Epson/acct:\ :if=/var/lib/apsfilter/bin/y2prn_Epson.upp--raw-Epson:\ :la@:mx#0:\ :tr=:cl:sh: -> the lpd.conf-file: check_for_nonprintable@ force_localhost client_config_file=/etc/lpd.conf filter_ld_path=/lib:/usr/lib:/usr/X11R6/lib:/usr/local/lib filter_path=/bin:/usr/bin:/usr/local/bin:/usr/sbin:/usr/local/sbin:/usr/lib/ filters:/usr/X11R6/bin mail_operator_on_error=root pr=/usr/bin/pr printcap_path=/etc/printcap printer_perms_path=/etc/lpd.perms server_config_file=/etc/lpd.conf server_user=lp user=lp group=lp send_data_first@ -> the lpd.perms-file: DEFAULT ACCEPT -> my log-file (created when attempting to open the printer queue from my Windows-client) [2001/06/08 07:19:04, 3] smbd/sec_ctx.c:get_current_groups(162) get_current_groups: user is in 6 groups: 100, 17, 33, 102, 103, 104 [2001/06/08 07:19:04, 3] smbd/sec_ctx.c:pop_sec_ctx(421) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2001/06/08 07:19:04, 3] smbd/sec_ctx.c:get_current_groups(162) get_current_groups: user is in 6 groups: 100, 17, 33, 102, 103, 104 [2001/06/08 07:19:04, 3] smbd/password.c:register_vuid(328) uid 500 registered to name fsmarc [2001/06/08 07:19:04, 3] smbd/password.c:register_vuid(330) Clearing default real name [2001/06/08 07:19:04, 3] smbd/password.c:register_vuid(332) User name: fsmarcReal name: Fileserv Marc [2001/06/08 07:19:04, 3] smbd/process.c:chain_reply(1005) Chained message [2001/06/08 07:19:04, 3] smbd/process.c:switch_message(667) switch message SMBtconX (pid 1087) [2001/06/08 07:19:04, 3] smbd/sec_ctx.c:set_sec_ctx(314) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2001/06/08 07:19:04, 3] smbd/password.c:authorise_login(745) authorise_login: ACCEPTED: validated uid ok as non-guest (user=fsmarc) [2001/06/08 07:19:04, 3] smbd/service.c:make_connection(488) Connect path is /tmp [2001/06/08 07:19:04, 3] smbd/sec_ctx.c:push_sec_ctx(282) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2001/06/08 07:19:04, 3] smbd/uid.c:push_conn_ctx(285) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2001/06/08 07:19:04, 3] smbd/sec_ctx.c:set_sec_ctx(314) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2001/06/08 07:19:04, 3] smbd/sec_ctx.c:get_current_groups(162) get_current_groups: user is in 6 groups: 100, 17, 33, 102, 103, 104 [2001/06/08 07:19:04, 3] smbd/sec_ctx.c:pop_sec_ct
RE: [Samba] winbind stops ? hangs ?
This winbind dying thing has been fixed in 2.2.4 but you'll have to use the CVS until it is offically released (next week ?). As far as I know there is a still a moderate memory leak in it so I just stop and start it each morning. I have a second server which is running 2.2.3a and use a cron script which does a 'getent passwd' every minute and reloads winbind if it has failed. Reloads about six times a day typically. Noel -Original Message- From: Grietens, Marc [mailto:[EMAIL PROTECTED]] Sent: 12 April 2002 13:21 To: '[EMAIL PROTECTED]' Subject: [Samba] winbind stops ? hangs ? Hello, I'm currently installing a samba server in an existing WIN2K domain. (no active dir ... YET !) to get the user names, i use the winbind deamon. It seems the deamon hangs or stops working after some time. anyone got an idea on how to trace what is happening ? this really is a *huge* domain over here, so that might be a problem as well. also when i've configured the winbind setting in /etc/nsswitch.conf a login to the linux takes for ages or not able to login at all. the 'for ages' i can live with ... with the 'no login at all' i can't. the machine is only supposed to be samba server (ie users should not login to linux) i'm using samba 2.2.3a - SuSE Linux 7.0 on a s390 any help is appreciated. Thanx guys, Marc ** The information contained in this message or any of its attachments may be confidential and is intended for the exclusive use of the addressee(s). Any disclosure, reproduction, distribution or other dissemination or use of this communication is strictly prohibited without the express permission of the sender. The views expressed in this email are those of the individual and not necessarily those of Sony or Sony affiliated companies. Sony email is for business use only. This email and any response may be monitored by Sony United Kingdom Limited. (05) ** -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] winbind stops ? hangs ?
Jeremy, My CVS is from April 1st and there is definitely a slow leak there. Over a five day period the size progresses from 2000K to 6000K. I'll get the latest CVS and try it again to be sure it is still an issue. Noel -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 12 April 2002 18:10 To: Noel Kelly Cc: 'Grietens, Marc'; '[EMAIL PROTECTED]' Subject: Re: [Samba] winbind stops ? hangs ? On Fri, Apr 12, 2002 at 05:49:26PM +0100, Noel Kelly wrote: > This winbind dying thing has been fixed in 2.2.4 but you'll have to use the > CVS until it is offically released (next week ?). As far as I know there is > a still a moderate memory leak in it so I just stop and start it each > morning. Are you saying there's a moderate mem leak in the CVS version ? If so I need to track this down... How are you reproducing it ? Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] tdbtool - cleaning up winbind idmap
I am having trouble upgrading my 2.2.3a samba/winbindd install because the
remnants of an old, defunct test domain are still hanging around in the
winbindd_idmap.tdb.
Using tdbtool I can see the offending records and want to delete them. They
seem to exist as a pairing like this:
{
key = "NTMIXED/517\00"
data = "GID 10026\00"
}
{
key = "GID 10026\00"
data = "NTMIXED/517\00"
}
Now I can look up (and therefore delete) the first record using its key like
this:
tdb> show NTMIXED/517
key 12 bytes
NTMIXED/517
data 10 bytes
[000] 47 49 44 20 31 30 30 32 36 00GID 1002 6
But I simply cannot hit on a way to reference the second record by its key
and therefore am unable to delete it. Any ideas ?
Is there any tidying up carried out by winbindd on the idmap file ? Perhaps
a small utility to clear out defunct domains might be an idea if it is going
to hamper upgrades ?
Cheers,
Noel
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RE: tdbtool - cleaning up winbind idmap
'show GID\ 10026' is the answer - need to escape the space (of course).
-Original Message-----
From: Noel Kelly
Sent: 13 April 2002 08:30
To: [EMAIL PROTECTED]
Subject: tdbtool - cleaning up winbind idmap
I am having trouble upgrading my 2.2.3a samba/winbindd install because the
remnants of an old, defunct test domain are still hanging around in the
winbindd_idmap.tdb.
Using tdbtool I can see the offending records and want to delete them. They
seem to exist as a pairing like this:
{
key = "NTMIXED/517\00"
data = "GID 10026\00"
}
{
key = "GID 10026\00"
data = "NTMIXED/517\00"
}
Now I can look up (and therefore delete) the first record using its key like
this:
tdb> show NTMIXED/517
key 12 bytes
NTMIXED/517
data 10 bytes
[000] 47 49 44 20 31 30 30 32 36 00GID 1002 6
But I simply cannot hit on a way to reference the second record by its key
and therefore am unable to delete it. Any ideas ?
Is there any tidying up carried out by winbindd on the idmap file ? Perhaps
a small utility to clear out defunct domains might be an idea if it is going
to hamper upgrades ?
Cheers,
Noel
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] winbind stops ? hangs ? & tdbdump problem
Jeremy,
Great work - no sign of the winbind memory leak now in the latest CVS. I
have been pounding it since Friday and despite a thrashing today from the
users it looks solid and hasn't blinked.
I think you have been doing some work on the problem with the
winbindd_idmap.tdb file and an old domain ? When I just upgraded my 2.2.3a
server to the latest CVS it had this in the logs:
[2002/04/15 21:07:29, 1] nsswitch/winbindd_util.c:init_domain_list(152)
getting trusted domain list
[2002/04/15 21:07:29, 0] nsswitch/winbindd_idmap.c:convert_fn(265)
winbindd: convert_fn : Unable to find domain NTMIXED
[2002/04/15 21:07:29, 0] nsswitch/winbindd_idmap.c:convert_fn(266)
winbindd: convert_fn : deleting record NTMIXED/512
[2002/04/15 21:07:29, 0] nsswitch/winbindd_idmap.c:convert_fn(265)
winbindd: convert_fn : Unable to find domain NTMIXED
[2002/04/15 21:07:29, 0] nsswitch/winbindd_idmap.c:convert_fn(266)
winbindd: convert_fn : deleting record NTMIXED/513
...ETC
Nice one - although I am a little confused as I thought I was being devious
by manually deleting the NTMIXED stuff (pairs) out of my idmap file this
morning. Obviously I didn't write it back or something ? Not sure where
they all came from ?
The other thing I find a little odd is that now 'tdbdump winbindd_idmap.tdb'
just gives me this but there are over 100 users in the system:
[root@belly tdb]# ./tdbdump /samba/var/locks/winbindd_idmap.tdb
{
key = "GID 10048\00"
data = "S-1-5-21-2025429265-764733703-725345543-1643\00"
}
{
key = "UID 10027\00"
data = "S-1-5-21-2025429265-764733703-725345543-1165\00"
}
[root@belly tdb]#
A little disconcerting but winbindd seems to work OK. Doing the same on my
other server ('liver') it gives me 2000+ lines of output - all the pairings
you would expect.
If I do a 'dump' from inside tdbtool then I get all the expected pairs on
both servers. Is this a problem with tdbdump ? Can't see why it chooses to
dump these two records alone on 'belly'.
The idmap file size has also changed a lot. Despite the erasure of the
NTMIXED records it has more than doubled in size:
-rw---1 root root65536 Apr 15 21:41 winbindd_idmap.tdb
-rw---1 root root24576 Apr 15 17:37
winbindd_idmap.tdb.orig
Let me know if you want anything from me,
Cheers,
Noel
-Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: 12 April 2002 18:10
To: Noel Kelly
Cc: 'Grietens, Marc'; '[EMAIL PROTECTED]'
Subject: Re: [Samba] winbind stops ? hangs ?
On Fri, Apr 12, 2002 at 05:49:26PM +0100, Noel Kelly wrote:
> This winbind dying thing has been fixed in 2.2.4 but you'll have to use
the
> CVS until it is offically released (next week ?). As far as I know there
is
> a still a moderate memory leak in it so I just stop and start it each
> morning.
Are you saying there's a moderate mem leak in the CVS version ?
If so I need to track this down...
How are you reproducing it ?
Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Part of a Domain
Nice work Tim. I have seen a number of these excellent user docs - shouldn't there be a links area on www.samab.org for things like this to make it easier for people to find in the future ? Noel -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 18 April 2002 09:46 To: Angel F. Rosa Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Part of a Domain On Wed, 17 Apr 2002, Angel F. Rosa wrote: > I would like to add my Samba server to an NT Domain how? I've written a howto you might find helpfull. It is at : http://www.sin.khk.be/~dj/ Regards, Tim -- == Tim Verhoeven Music Services - Michel Stoffels GSM : 0496 / 693 453 + Deejayteam Email : [EMAIL PROTECTED] + Sound & Light rentals URL : www.sin.khk.be/~dj/ + P.A. services =Public PGP-Key at : http://www.sin.khk.be/~dj/publickey.txt== Member of Student Information Networking (www.sin.khk.be) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] problem with setfacl
http://acl.bestbits.at/ -Original Message-From: Vijendra Agarwal [mailto:[EMAIL PROTECTED]]Sent: 19 April 2002 05:43To: Thomas KlettkeCc: [EMAIL PROTECTED]Subject: Re: [Samba] problem with setfacl i neither rebuild the kernel nor did i apply the acl-kernel patch I was wondering whether is it compulsory to recompile the kernel or is there any other way to do the same. since i am doing this programmatically. if any one has any idea about this pls mail me. Thanks Thomas Klettke <[EMAIL PROTECTED]> wrote: On Thu, 2002-04-18 at 07:28, Vijendra Agarwal wrote:> > Hi > > I tried to run the command setfacl like this> > setfacl -m u:d:rw /root/test> > where 'd' is the user and this command is run by the owner of the test file.But it gives me error> > "setfacl:/root/test:function not implemented"> > When i try getfacl it works properly.> > I installed the following rpms> > acl-2.0.5c-0.i386.rpm> > acl-devel-2.0.5c-0.i386.rpm> > libacl-2.0.5c-0.i386.rpm> > acl-2.0.5c-0.src.rpm> > fileutils-4.1.8acl-65.5.i386.rpm> > attr-2.0.5-0.i386.rpm> > attr-devel-2.0.5-0.i386.rpm> > e2fsprogs-1.27ea-26.4.i386.rpm> > e2fsprogs-devel-1.27ea-26.4.i386.rpm> > libattr-2.0.5-0.i386.rpm> > If any one knows why this error is coming and what is to be done to overcome pls let me know> > ByeYou didn't state whether you applied the acl-kernel patch and rebuildthe kernel.Thomas> > > > Vijendra> > > > > > > > > > -> Do You Yahoo!?> Yahoo! Tax Center - online filing with TurboTax-- To unsubscribe from this list go to the following URL and read theinstructions: http://lists.samba.org/mailman/listinfo/samba Do You Yahoo!?Yahoo! Tax Center - online filing with TurboTax
RE: [Samba] problem with setfacl
You are looking for the SGI XFS filesystem - this has built in support for ACLs. It requires you to either download their SGI kernel or patch your own. You might be more comfortable patching your existing kernel with the patches from http://acl.bestbits.at/ Whichever one you go for, you will need to recompile a kernel and some tools before you can use ACLs with Samba, Noel -Original Message- From: Vijendra Agarwal [mailto:[EMAIL PROTECTED]] Sent: 22 April 2002 11:13 To: Wade Winright Cc: [EMAIL PROTECTED] Subject: RE: [Samba] problem with setfacl hi thanks for ur co-operation. I went to the site 'oss.sgi.com' but couldn't find anything related to acl. Can you give me in brief where to search in that site? thanks vijendra Wade Winright <[EMAIL PROTECTED]> wrote: Quickest way to get it (if running Redhat) oss.sgi.com Hope that helps... -Original Message- From: Vijendra Agarwal [mailto:[EMAIL PROTECTED]] Sent: Thursday, April 18, 2002 9:43 PM To: Thomas Klettke Cc: [EMAIL PROTECTED] Subject: Re: [Samba] problem with setfacl i neither rebuild the kernel nor did i apply the acl-kernel patch I was wondering whether is it compulsory to recompile the kernel or is there any other way to do the same. since i am doing this programmatically. if any one has any idea about this pls mail me. Thanks Thomas Klettke <[EMAIL PROTECTED]> wrote: On Thu, 2002-04-18 at 07:28, Vijendra Agarwal wrote: > > Hi > > I tried to run the command setfacl like this > > setfacl -m u:d:rw /root/test > > where 'd' is the user and this command is run by the owner of the test file.But it gives me error > > "setfacl:/root/test:function not implemented" > > When i try getfacl it works properly. > > I installed the following rpms > > acl-2.0.5c-0.i386.rpm > > acl-devel-2.0.5c-0.i386.rpm > > libacl-2.0.5c-0.i386.rpm > > acl-2.0.5c-0.src.rpm > > fileutils-4.1.8acl-65.5.i386.rpm > > attr-2.0.5-0.i386.rpm > > attr-devel-2.0.5-0.i386.rpm > > e2fsprogs-1.27ea-26.4.i386.rpm > > e2fsprogs-devel-1.27ea-26.4.i386.rpm > > libattr-2.0.5-0.i386.rpm > > If any one knows why this error is coming and what is to be done to overcome pls let me know > > Bye You didn't state whether you applied the acl-kernel patch and rebuild the kernel. Thomas > > > > Vijendra > > > > > > > > > > - > Do You Yahoo!? > Yahoo! Tax Center - online filing with TurboTax -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax Do You Yahoo!? Yahoo! Games - play chess, backgammon, pool and more -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] problem with setfacl
This is the XFS info link: http://oss.sgi.com/projects/xfs/ -Original Message- From: Vijendra Agarwal [mailto:[EMAIL PROTECTED]] Sent: 22 April 2002 11:13 To: Wade Winright Cc: [EMAIL PROTECTED] Subject: RE: [Samba] problem with setfacl hi thanks for ur co-operation. I went to the site 'oss.sgi.com' but couldn't find anything related to acl. Can you give me in brief where to search in that site? thanks vijendra Wade Winright <[EMAIL PROTECTED]> wrote: Quickest way to get it (if running Redhat) oss.sgi.com Hope that helps... -Original Message- From: Vijendra Agarwal [mailto:[EMAIL PROTECTED]] Sent: Thursday, April 18, 2002 9:43 PM To: Thomas Klettke Cc: [EMAIL PROTECTED] Subject: Re: [Samba] problem with setfacl i neither rebuild the kernel nor did i apply the acl-kernel patch I was wondering whether is it compulsory to recompile the kernel or is there any other way to do the same. since i am doing this programmatically. if any one has any idea about this pls mail me. Thanks Thomas Klettke <[EMAIL PROTECTED]> wrote: On Thu, 2002-04-18 at 07:28, Vijendra Agarwal wrote: > > Hi > > I tried to run the command setfacl like this > > setfacl -m u:d:rw /root/test > > where 'd' is the user and this command is run by the owner of the test file.But it gives me error > > "setfacl:/root/test:function not implemented" > > When i try getfacl it works properly. > > I installed the following rpms > > acl-2.0.5c-0.i386.rpm > > acl-devel-2.0.5c-0.i386.rpm > > libacl-2.0.5c-0.i386.rpm > > acl-2.0.5c-0.src.rpm > > fileutils-4.1.8acl-65.5.i386.rpm > > attr-2.0.5-0.i386.rpm > > attr-devel-2.0.5-0.i386.rpm > > e2fsprogs-1.27ea-26.4.i386.rpm > > e2fsprogs-devel-1.27ea-26.4.i386.rpm > > libattr-2.0.5-0.i386.rpm > > If any one knows why this error is coming and what is to be done to overcome pls let me know > > Bye You didn't state whether you applied the acl-kernel patch and rebuild the kernel. Thomas > > > > Vijendra > > > > > > > > > > - > Do You Yahoo!? > Yahoo! Tax Center - online filing with TurboTax -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax Do You Yahoo!? Yahoo! Games - play chess, backgammon, pool and more -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] MS Office XP - Word files oplock errors
Turn off oplocks. The performance hit you take editing Word docs etc is irrelevant. As far as I know oplocks are most useful for shared static files like binaries. There has been some long discussions about oplocks previously - have a search through the archives. Here is one I have on file from Martyn: -Original Message- From: Martyn Ranyard [mailto:[EMAIL PROTECTED]] Sent: 06 February 2002 16:37 To: Noel Kelly; Russell Senior; [EMAIL PROTECTED] Cc: Samba Maillist (E-mail) Subject: RE: [Samba] Re: Samba 2.2.3 Oplock problem... Remember that this is from memory of a user-group meeting about 3-4 months ago, but anyway... At 04:14 PM 2/6/02 +, Noel Kelly wrote: >So, Martyn would it be true to say this: > >Oplocks should only really be used in situations where a server is sharing >program files or other relatively static data ? The reason M$ created oplocks was to give an overall impression of more speed. This works quite well when there is a nice tight network with no delay points or when it is likely that only one user is accessing the file at once. >Home drives and other files which are primarily only opened by one user at a >time would see no value in oplocks ? No - they would see the most value, as the file is cached at the client and any writes remain on the client until flushed back to the server, thus making write access much quicker. >Databases and other dynamic data shares which can be altered by many users >should certainly have oplocks disabled ? Whilst I cannot say one way or another on a tight network, because in theory it can slightly speed things up if say the program locks a record, and unlocks it, that kind of thing is never passed to the server if no changes are actually made. On a leaky network you are definitely right and when especially when M$ Access is used, because M$ wrote it so that it would use oplocks heavily and that just shows up the bad behavior of such predictive coding. >Thanks for your insight. >Noel > >-Original Message- >From: Martyn Ranyard [mailto:[EMAIL PROTECTED]] >Sent: 06 February 2002 13:02 >To: Russell Senior; [EMAIL PROTECTED] >Cc: Samba Maillist (E-mail) >Subject: Re: [Samba] Re: Samba 2.2.3 Oplock problem... > > > >I remember a talk at our lug about oplocks, If I remember correctly then >the following is true : > >A client takes the file, caches it at client side, and oplocks it. >The server then gets a different request to read the file, asks the client >to send it's latest version. >Here, two things can happen, 1. the client responds with changes, which the >server reflects or 2. the client doesn't respond in time, in which case the >server breaks the oplock and reverts the file to it's unchanged >state. This is the way SMB oplocks work AFAIK > >Network problems can cause delays and therefore timeouts will timeout (it >is their job, afterall). This is why leaky networks cause oplock problems. > >I contribute this hazy knowledge to the public domain, mainly to save >Jeremy some time! > >At 08:59 AM 2/5/02 -0800, Russell Senior wrote: > > >>>>> "Jeremy" == Jeremy Allison <[EMAIL PROTECTED]> writes: > > > >Jeremy> Most oplock problems are due to bad network setups (client > >Jeremy> drivers, hubs etc). I haven't seen any evidence other than one > >Jeremy> person having oplock problems (which is not unusual given the > >Jeremy> state of many networks) that this is anything other than the > >Jeremy> usual network related oplock woes. > > > >Can you elaborate on this? As I understand it, the oplock break > >messages are getting lost, but aren't they sent over the TCP socket? > >Won't the regular TCP reliability guarantees ensure it gets resent if > >not ACK'd? How can network problems interfere? > > > > > >-- > >Russell Senior ``The two chiefs turned to each other. > >[EMAIL PROTECTED] Bellison uncorked a flood of horrible > > profanity, which, translated meant, `This is > > extremely unusual.' '' > > > >-- > >To unsubscribe from this list go to the following URL and read the > >instructions: http://lists.samba.org/mailman/listinfo/samba > >== >Martyn Ranyard > > >-- >To unsubscribe from this list go to the following URL and read the >instructions: http://lists.samba.org/mailman/listinfo/samba > >-- >To unsubscribe from this list go to the following URL and read the >instructions: http://lists.samba.org/mailman/listinfo/samba Martyn Life's a bitch, but so am I. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 25 Ap
[Samba] Problems - 2.2.4
Hi, Just got my 2.2.3a system upgraded to 2.2.4 on 2.2.20 kernel with ACL patches. Users are getting bombed when accessing their shares and in the logs I am getting this: [2002/05/07 08:48:22, 0] locking/locking.c:share_modes_identical(560) PANIC: share_modes_identical: share_mode missmatch (e1 = 34, e2 = 64). Logic error. [2002/05/07 08:48:22, 0] lib/util.c:smb_panic(1092) PANIC: PANIC: share_modes_identical logic error. I have tried searching for this and can only find Jeremy's original source code. Anyone have any ideas what is going on here ? Thanks Noel Kelly -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Problems - 2.2.4
Found the source in locking.c - no idea why it is finding returning this as
true. The log entries I am getting don't seem to be the same - eg:
PANIC: share_modes_identical: share_mode missmatch (e1 = 18, e2 = 32832).
Logic error.
PANIC: PANIC: share_modes_identical logic error.
PANIC: share_modes_identical: share_mode missmatch (e1 = 34, e2 = 64). Logic
error.
PANIC: PANIC: share_modes_identical logic error.
But they are consistently these values. I have backed out to 2.2.3a to get
the users on line for the moment.
Noel
/***
Check if two share mode entries are identical, ignoring oplock
and port info and desired_access.
/
BOOL share_modes_identical( share_mode_entry *e1, share_mode_entry *e2)
{
#if 1 /* JRA PARANOIA TEST - REMOVE LATER */
if (e1->pid == e2->pid &&
e1->share_file_id == e2->share_file_id &&
e1->dev == e2->dev &&
e1->inode == e2->inode &&
(e1->share_mode & ~DELETE_ON_CLOSE_FLAG) != (e2->share_mode
& ~DELETE_ON_CLOSE_FLAG)) {
DEBUG(0,("PANIC: share_modes_identical: share_mode
missmatch (e1 = %u, e2 = %u). Logic error.\n",
(unsigned int)(e1->share_mode &
~DELETE_ON_CLOSE_FLAG),
(unsigned int)(e2->share_mode &
~DELETE_ON_CLOSE_FLAG) ));
smb_panic("PANIC: share_modes_identical logic error.\n");
}
#endif
-Original Message-
From: Noel Kelly
Sent: 07 May 2002 08:55
To: '[EMAIL PROTECTED]'
Cc: [EMAIL PROTECTED]
Subject: [Samba] Problems - 2.2.4
Hi,
Just got my 2.2.3a system upgraded to 2.2.4 on 2.2.20 kernel with ACL
patches. Users are getting bombed when accessing their shares and in the
logs I am getting this:
[2002/05/07 08:48:22, 0] locking/locking.c:share_modes_identical(560)
PANIC: share_modes_identical: share_mode missmatch (e1 = 34, e2 = 64).
Logic error.
[2002/05/07 08:48:22, 0] lib/util.c:smb_panic(1092)
PANIC: PANIC: share_modes_identical logic error.
I have tried searching for this and can only find Jeremy's original source
code. Anyone have any ideas what is going on here ?
Thanks
Noel Kelly
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Out of memory need to restart system - Probably OT
Please specify the Samba version you are running - winbindd in 2.2.2 had a *big* memory leak which would certainly eat all your memory over three days on a moderately busy server. The more work winbindd does the more memory it chews - which might explain the end of day incidents. Try using 'M' in Top to get an idea of who is eating the memory. Noel There is no indication in TOP as to what can be eating memory. Perhaps, I'm using wrong flags. SAR shows dramatic increase in CPU utilization at start of the out of memory messages. portion of log file reads as follows: May 23 07:10:07 stl1 kernel: Out of Memory: Killed process 5404 (dnscache). May 23 07:10:46 stl1 kernel: Out of Memory: Killed process 5407 (dnscache). May 23 07:11:34 stl1 kernel: Out of Memory: Killed process 5409 (multilog). It seems like the problem occurs at end of day or during evening. --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.363 / Virus Database: 201 - Release Date: 21/05/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Really high load average. Config problem?
How many files have you got in the destination directory ? Are you browsing this directory using explorer as you copy ? We have experienced similar load averages with people using Sage accounting and leaving thousands of spool files in directories. Also might be worth looking at the message posted yesterday entitled 'Poor Performance', Cheers Noel -Original Message- From: Nick Vahalik [mailto:[EMAIL PROTECTED]] Sent: 25 May 2002 06:24 To: [EMAIL PROTECTED] Subject: [Samba] Really high load average. Config problem? helo I am running samba on an 800 Duron / 640MB PC2100 DDR Ram / 40 GB IBM Deskstar with slackware 8 / 2.2.17 Optimized for Duron. Whenever I copy files to the server, my load average gets to be about 6.0-8.0! On the 700 Duron we have at the office where I work, (same specs except it has 768MB of SDRAM and a RAID Array). Would the reason my box runs so slow be because its swap drive and the main drive are on the same drive? I've tried tweaking the config, but nothing seems to make my load average drop to an acceptable level. Nick --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.363 / Virus Database: 201 - Release Date: 21/05/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.363 / Virus Database: 201 - Release Date: 21/05/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Poor Performance
if you get an answer to this Jeff I would love to hear it so please post back to the list if it is of the list. We have similar experiences with thousands of Sage Accounting's spool files littering the place. As soon as these directories are browsed ( as they are by the program itself to present the user with a history view) the load average goes through the roof (8-10). The previous Novell server did not even blink. Luckily we can clear out these spool files to alleviate the problem but it is a manual process we would rather schedule monthly. Cheers, Noel -Original Message- From: Jeff Elsloo [mailto:[EMAIL PROTECTED]] Sent: 24 May 2002 17:28 To: [EMAIL PROTECTED] Subject: [Samba] Poor Performance I have a big problem. I've looked at a bunch of documentation, both for Windows 2000/NT4, and Samba, and I have yet to find a solution. Anyway, here's the problem. We have a Unix File Server with ~2.6tb of online storage, performance is great over NFS to other Unix machines. However, using Samba, I get terrible performance. Samba ends up eating almost an entire processor by itself when doing certain operations. What's causing this is the number of files we have in a single directory, anywhere from 50,000 to 200,000 documents in one directory. I've truss'ed smbd on the file server, and it appears that after every write operation the client performs, it asks for a directory listing, which, as you can imagine, takes some time with the amount of documents in the single directory. I've also tried using an NFS client on the Windows side, and it did the same thing, and was actually *slower*. In Unix, I don't have this problem, but moving this particular application to Unix is impossible. I also can't break the files down into different directories. While reading documentation on both M$'s site, and samba.org, I found that this may be a read ahead caching issue with Windows, and that it may be possible to control that via the file server. I've tried all different things with oplocks on Samba, and nothing seems to speed it up, the client is causing smbd to either do a stat64 or a getdents64, or both, no matter what I do. The problem isn't the load on the CPU (though that would be nice to remedy), it's the fact that it is taking around a minute to copy a file that is under 100k from Windows to the file server via Samba. The thing that is slowing everything down is the directory scanning. So, the question is. is there any way to control this via Samba, if so how, or (and I know this isn't an NT mailing list, but I may as well ask) is there any way to control this on the Windows side? Any help would be GREATLY appreciated, replies on or off the list are fine.. Thanks, Jeff -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.362 / Virus Database: 199 - Release Date: 07/05/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.363 / Virus Database: 201 - Release Date: 21/05/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] problem about windows2000
I think you forgot the comma between the options; smbmount //remote-host/share /mnt/remote -o username=administrator,password= -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 07 June 2002 14:59 To: [EMAIL PROTECTED] Subject: [Samba] problem about windows2000 I want to use samba to access shared files on remote windows2000, the 'guest' account on windows2000 is disabled, I know the password of administrator on windows2000. This doesn't work: smbmount //remote-host/share /mnt/remote -o username=administrator password= Please tell me how to access shared files on remote windows 2000 professional. Thank you. = ?,?VIP??! ?? ?? ! ?VIP??,??5! --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.368 / Virus Database: 204 - Release Date: 29/05/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.368 / Virus Database: 204 - Release Date: 29/05/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] consultation
http://it.samba.org/samba/docs/Samba-HOWTO-Collection.pdf -Original Message- From: samer al_jaber [mailto:[EMAIL PROTECTED]] Sent: 10 June 2002 08:36 To: [EMAIL PROTECTED] Subject: [Samba] consultation Dear Sir, My name is Samer Abdel_Jaber, Im working as programmer. Just i want know " What is the best method to install Samba and make configration to it " . __ Do You Yahoo!? Yahoo! - Official partner of 2002 FIFA World Cup http://fifaworldcup.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.370 / Virus Database: 205 - Release Date: 05/06/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.370 / Virus Database: 205 - Release Date: 05/06/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] altering the "create mode" for samba shares
Easiest way to get XFS ? Find a copy of Mandrake 8.2 (lots of cover disks have been featuring it in the UK) and select XFS as the filesystem. Compile Samba and you are up and running. Probably want to grab the ACL utils from acl.bestbits.at as well. -Original Message- From: Jason Stewart [mailto:[EMAIL PROTECTED]] Sent: 13 June 2002 13:17 To: Rob Buhler; [EMAIL PROTECTED] Subject: Re: [Samba] altering the "create mode" for samba shares Hi Rob, Maybe you would like to try out a Filesystem and Samba with ACL support. XFS will work, as well as EXT2 on linux with ACL patches applied. Cheers, Jason At 02:41 PM 6/12/2002 -0600, Rob Buhler wrote: >Hi, I'm Samba is a new thing for me and I hope my question will make some >sense! > >I have created several samba shares listed in my smb.conf file and have >the option "create mode = 0660" set. >This is fine most of the time, however sometimes certain users create >files (for web pages) that they want to be >world-readable. How can I keep my default setting at 660, but have some >files set to >world-readable when they are created? Is there an option that could >override the default for certain users is >they entered it in when they saved the file? Should I be trying something >else? >I would appreciate any suggestions that anyone had. > >thank you, >Rob > > > >-- >To unsubscribe from this list go to the following URL and read the >instructions: http://lists.samba.org/mailman/listinfo/samba Jason Stewart Systems Administrator/Programmer Right to Life of Michigan Tel: (616)532-2300 Fax: (616)532-3461 To find out where Michigan Gubernatorial Candidate Jennifer Granholm really stands, please visit http://www.granholmgarble.com/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.370 / Virus Database: 205 - Release Date: 05/06/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.370 / Virus Database: 205 - Release Date: 05/06/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Anyone using antivirus software?
Trend ServerProtect does this - realtime scanning. You buy the product once and can then install on all your servers - Windows/Linux/Netware. Only caveat is that you need a recent kernel which is why we have not actually put it onto our Samba servers and are using RAV (which is not real-time but incredibly cheap) for the time being. You can download a 30 day trial I believe: http://www.antivirus.com/products/splinux/ -Original Message- From: Andres Olarte [mailto:[EMAIL PROTECTED]] Sent: 13 June 2002 18:57 To: Brian McGraw; [EMAIL PROTECTED] Subject: Re: [Samba] Anyone using antivirus software? F-Prot has a product like that, although I haven't tried it since you have to pay for it. But it might be what you are looking for Andres - Original Message - From: Brian McGraw To: [EMAIL PROTECTED] Sent: Thursday, June 13, 2002 11:20 AM Subject: [Samba] Anyone using antivirus software? Hello list, I was just wondering if anyone is using anti-virus software on their Samba server. I have protection on my clients, but I want to run software on the server too. I've looked at McAfee's Virus Scan, but as far as I can tell, it only uses "on-demand" scanning, meaning I have to trigger it from the command line, or run a cron job. I would like to have something that is real-time, and detects an infected immediately, without my interaction. This is how the McAfee AV software works on the client PC's running Windows. Anyone know of a similar product? Thanks, Brian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.370 / Virus Database: 205 - Release Date: 05/06/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.370 / Virus Database: 205 - Release Date: 05/06/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] What FS type for ACL support ?
You have a choice of two, Sabrina: Either: EXT2 with the patches from acl.bestbits.ac - requires kernel rebuild and may not work with RedHat's patched kernel releases. Or: XFS from SGI - also requires SGI kernel source. There is also an adapted Redhat installer ISO which allows you to specify XFS as the filesystem during install. One of the easiest ways to get XFS is to find a copy of Mandrake 8.2 - it allows XFS as the filesystem of choice during installation. You then just need the ACL utils from bestbits and away you go! Cheers, Noel -Original Message- From: LAUTIER Sabrina [mailto:[EMAIL PROTECTED]] Sent: 14 June 2002 16:46 To: [EMAIL PROTECTED] Subject: [Samba] What FS type for ACL support ? Hi ! I would like to setup ACL on my RH7.2 box to be able to set/check permissions on SMB shares (linux-samba and win2k). Which file system type to use: XFS, DFS ? Which one is the best recommanded for my configuration ? Regards. Sabrina - Powered by Alinto (http://www.alinto.net) for lavache.com (http://www.lavacheautomatique.com) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.370 / Virus Database: 205 - Release Date: 05/06/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.370 / Virus Database: 205 - Release Date: 05/06/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] [swat] won't run
If you are having trouble getting swat to authenticate then use the -a
switch to turn off all authentication ('server_args = -a' in
/etc/xinetd.d/swat). Once you are happy it works then fix the
authentication.
-Original Message-
From: Brian Rose [mailto:[EMAIL PROTECTED]]
Sent: 14 June 2002 22:18
To: [EMAIL PROTECTED]
Subject: RE: [Samba] [swat] won't run
>
> If it will fit the bill, I would recommend webmin. It does a good job on
> samba administration.
Yes, I like the webmin samba module except that I wish there were
documentation links for each option as there is with swat.
Brian
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.370 / Virus Database: 205 - Release Date: 05/06/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.370 / Virus Database: 205 - Release Date: 05/06/2002
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] rights to change ACL's
I think you will find that currently only the owner of a file/directory can chnage the ACLs. This becomes a problem of course because anyone that creates a new file/dir is the owner and you cannot change the ACLs. A workaround for this to act as root, who can of course do anything to a file/dir. Create an a new share which is only accessible by your Domain Admins group (valid users = ) and use 'force user = root'. This will mean any operations will be done as root. Dangerous but effective. Noel -Original Message- From: Egidijus Antanaitis [mailto:[EMAIL PROTECTED]] Sent: 14 June 2002 10:45 To: [EMAIL PROTECTED] Subject: [Samba] rights to change ACL's Hi all, Installation: RH7.2, 2.4.18 kernel, XFS patch, samba-2.2.4 in windows 2000 domain environment. Authentification is done through winbind daemon. I want only particular users (say, group "Domain Admins") have the ability to change permissions (ACL's), not the owners of file/directory. Is it possible to implement this? Egidijus Antanaitis System Engineer -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.371 / Virus Database: 206 - Release Date: 13/06/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.371 / Virus Database: 206 - Release Date: 13/06/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: winbindd error
Might be more productive to outline your current setup/problem. -Original Message- From: leo emesue [mailto:[EMAIL PROTECTED]] Sent: 17 June 2002 21:09 To: [EMAIL PROTECTED] Subject: [Samba] Re: winbindd error Hi Guys: How can i get the older version of samba, specifically the latest samba 2.2.2. I have tried setting up winbindd on the newer version 2.2.4 but it's not working. Thanks. Leo _ Chat with friends online, try MSN Messenger: http://messenger.msn.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.370 / Virus Database: 205 - Release Date: 05/06/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.371 / Virus Database: 206 - Release Date: 13/06/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] XP Logon and Samba PDC - another part of the puzzle
Hi,
It seems a common problem that after successfully joining a domain (Samba
2.2.5/6pre PDC), the XP Pro client has a bizarre time trying to logon. The
XP clients flatly refuse to even try and talk to the same PDC they just
negotiated the domain membership with!
I have read many postings (the signorseal registry hack is a must) but no
solid answer as to how to get the client and PDC to talk. Here is something
I have found which might help complete the puzzle:
It seems that one of the 'exciting new features' M$ have given us in XP is
the default IP Security Policies (Control Panel/Admin Tools/Local Security
Policy). These by default have a filter for all IP traffic which 'Require
Security' ("Accepts unsecured communications, but always requires clients to
establish trust and security methods.")
This, I think, means that all XP clients will only allow traffic if they are
talking to an AD server. A Samba PDC (and NT PDC?) is not good enough
(Kerberos required) so no traffic will be allowed to pass between the client
and the PDC - hence the flat refusal to even attempt a login.
Edit these policies and set them to Permit. Now traffic can flow freely and
a sense of normality will return to your network.
Hope this helps get some people up and running.
Whilst I am here, I'll relay the results of a discussion I was having
yesterday about Samba and ADS. Soon (next year?) M$ will be discontinuing
support of NT4. Windows 2000 cannot act as a simple NT domain controller -
it can emulate an NT domain controller but you are obliged to use ADS -
ouch.
Now ADS is way behind NDS as we all know for true enterprise operations. It
is also complete overkill and unnecessarily complex for small to medium
businesses. If it corrupts you are in trouble and you had better have more
than one AD server, etc
So what is a small business to do in 18 months time? All they need is a
small domain model (which might not be the greatest design but it is
definitely documented and proven). ADS is way too complex and NT
unsupported/sold. Surely Samba is their only solution with Windoze clients?
Cheers,
Noel
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.384 / Virus Database: 216 - Release Date: 21/08/2002
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] "@" doesn't work in the NT domain name
>From M$ Technet:
During your planning and migration, DNS character set limitations require
special attention. NetBIOS names used in previous versions of Windows may
contain additional characters that are illegal in DNS (namely,
~!@#$%^&'.(){}, and not supported by any DNS server implementation) or
characters (e.g. Unicode characters) that are supported by only a few DNS
server implementations (e.g. Windows 2000 DNS servers). When a Windows NT
4.0 computer is upgraded to Windows 2000, its NetBIOS name is preserved and
is used as the Computer Name (i.e. the first label in the computer full DNS
name). If before an upgrade a computer NetBIOS name contained Unicode
characters, then its A (host) record can be added to a DNS database if a DNS
server supports Unicode characters (e.g. Windows 2000 DNS servers). If in
your organization a large number of the computers have NetBIOS names
containing Unicode characters, then you may want to make a DNS server
supporting Unicode characters be authoritative for the A records of the
computers, since it may not be very practical to rename a large number of
computers. If before an upgrade a computer NetBIOS name contained illegal
characters (from DNS perspective), then computer's A (host) record cannot be
added to a DNS database. In this case you will have to rename the computers
to register the A records corresponding to these computers.
-Original Message-
From: Harry Rüter [mailto:[EMAIL PROTECTED]]
Sent: 20 September 2002 15:23
To: [EMAIL PROTECTED]
Subject: Re: [Samba] "@" doesn't work in the NT domain name
Hi,
[ ...]
> > it breaks compatibility in a major way. Ampersands are VALID in a
netbios
> > domain name, just not in a machine name (AFAIK), but samba doesn't
> > complyin this regard.
AFAIK an ampersand is the char "&" , is it just the wrong word for the
char or is the "@" not allowed in netbios domain names ?
Greets Harry
--
Werden Sie mit uns zum "OnlineStar 2002"! Jetzt GMX wählen -
und tolle Preise absahnen! http://www.onlinestar.de
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.385 / Virus Database: 217 - Release Date: 04/09/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.384 / Virus Database: 216 - Release Date: 21/08/2002
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] How best to get ACL support?
The Official RedHat Kernel might also balk at the ACL patches during compilation so you might be better getting a newer kernel from www.kernel.org. Then you need to ask yourself what those patches that Redhat used were for ;) Noel -Original Message- From: Kai Blin [mailto:[EMAIL PROTECTED]] Sent: 24 September 2002 13:36 To: Sytsma, Richard; [EMAIL PROTECTED] Subject: Re: [Samba] How best to get ACL support? On Monday 23 September 2002 19:31, Sytsma, Richard wrote: > My Dell server was preloaded with Redhat 7.2 , Linux 2.4.7-10, gccv2.96 > with Ext3 file system. I want to install the machine into my company W2k > domain using winbind but my Linux kernel does not support the needed ACls. I think ext3 has no acls out of the box. > Does the latest Linux kernel come with ACL support and if so should I just > update the kernel to 2.4.19 which I think is the latest production quality > kernel? The ACL patches at www.bestbits.at list patches for kernels 2.4.19, > 2.4.18, 2.4.17, 2.2.20 but not my 2.4.7-10. Does that mean the patches for > 2.4.7-10 are not available or just should not be attempted? I'd get a newer kernel, if I were you. :) And then apply the patch. HTH, Kai -- Kai BlinLinux system administrator Tel: Ring-86592 Allgemeine ChirurgieUniversitaetsklinikum Tuebingen Give a small boy a hammer and he will find that everything he encounters needs pounding. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.384 / Virus Database: 216 - Release Date: 21/08/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.391 / Virus Database: 222 - Release Date: 19/09/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
