Re: [Samba] Out of Memory error
Le 24/09/2012 19:58, Helmut Hullen a écrit : Hallo, Phibee, Du meintest am 24.09.12: In my config, i have: socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 "TCP_NODELAY" is the pre-installed option, and the *BUF options are really bad, since many years. Viele Gruesse! Helmut Ok i can delete it, but it's the reason of "Out of memory" ? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Out of Memory error
In my config, i have: socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 it's possible that the Out of Memory problems is because the SND/RCVBUF is too small ? thanks jerome Le 24/09/2012 17:21, Phibee Network Operation Center a écrit : Hi we have a Samba-Winbind 3.5.10 and i have a big quantity of errors in logs : [2012/09/24 16:01:29.248286, 1] winbindd/winbindd_ads.c:728(lookup_usergroups_memberof) lookup_usergroups_memberof ads_search member=CN=TESTDD,OU=Villeurbanne,OU=ExEA,DC=ELIOTT,DC=fr: Out of memory [2012/09/24 16:03:38.498533, 1] libads/ldap_utils.c:323(ads_ranged_search_internal) could not pull first usnChanged! [2012/09/24 16:03:38.498615, 1] winbindd/winbindd_ads.c:728(lookup_usergroups_memberof) lookup_usergroups_memberof ads_search member=CN=Victor,OU=utilisateurs,OU=Siege,OU=ExEA,DC=ELIOTT=fr: Out of memory [2012/09/24 17:01:12.869837, 1] winbindd/winbindd_ads.c:214(query_user_list) Not a user account? atype=0x3000 Exemple: That's work very good from 8:00 to 12:34am and after all squid connexion are slow and i have a big quantity of this errors. Anyone know this problems ? "Out of Memory", it's the Active Directory that sent this information or it's Winbind ? Thanks Jerome -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] "Out of Memory error
Hi we have a Samba-Winbind 3.5.10 and i have a big quantity of errors in logs : [2012/09/24 16:01:29.248286, 1] winbindd/winbindd_ads.c:728(lookup_usergroups_memberof) lookup_usergroups_memberof ads_search member=CN=TESTDD,OU=Villeurbanne,OU=ExEA,DC=ELIOTT,DC=fr: Out of memory [2012/09/24 16:03:38.498533, 1] libads/ldap_utils.c:323(ads_ranged_search_internal) could not pull first usnChanged! [2012/09/24 16:03:38.498615, 1] winbindd/winbindd_ads.c:728(lookup_usergroups_memberof) lookup_usergroups_memberof ads_search member=CN=Victor,OU=utilisateurs,OU=Siege,OU=ExEA,DC=ELIOTT=fr: Out of memory [2012/09/24 17:01:12.869837, 1] winbindd/winbindd_ads.c:214(query_user_list) Not a user account? atype=0x3000 Exemple: That's work very good from 8:00 to 12:34am and after all squid connexion are slow and i have a big quantity of this errors. Anyone know this problems ? "Out of Memory", it's the Active Directory that sent this information or it's Winbind ? Thanks Jerome -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Winbind => Add a local user/pass cache ?
Hi Anyone know if we can add a local user/pass cache directly to Winbind for increase the performence ? (for limit winbind <=> AD query) thanks J. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Probleme Winbind:
anyone have this error ? Phibee Network Operation Center a écrit : Hi i have a problems with winbind, all hours of the days, we have : Mar 23 08:02:45 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 08:02:46 gw (ntlm_auth): [2009/03/23 08:02:46, 0] utils/ntlm_auth.c:get_winbind_netbios_name(166) Mar 23 08:02:46 gw (ntlm_auth): could not obtain winbind netbios name! Mar 23 08:02:46 gw (ntlm_auth): [2009/03/23 08:02:46, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 08:02:46 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 09:01:53 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 09:01:53 gw (ntlm_auth): [2009/03/23 09:01:53, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 09:01:53 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 09:01:53 gw (ntlm_auth): [2009/03/23 09:01:53, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 09:01:53 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 09:01:53 gw (ntlm_auth): [2009/03/23 09:01:53, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 09:01:53 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 09:01:53 gw (ntlm_auth): [2009/03/23 09:01:53, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 09:01:53 gw (ntlm_auth): [2009/03/23 09:01:53, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 10:01:51 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:51 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:51 gw (ntlm_auth): [2009/03/23 10:01:51, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 10:01:51 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:52 gw (ntlm_auth): [2009/03/23 10:01:52, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 10:01:52 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:52 gw (ntlm_auth): [2009/03/23 10:01:52, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 10:01:52 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:52 gw (ntlm_auth): [2009/03/23 10:01:52, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 10:01:52 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:52 gw (ntlm_auth): [2009/03/23 10:01:52, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 10:01:52 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:52 gw (ntlm_auth): [2009/03/23 10:01:52, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 10:01:52 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:52 gw (ntlm_auth): [2009/03/23 10:01:52, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 10:01:52 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:53 gw (ntlm_auth): [2009/03/23 10:01:53, 0] utils/ntlm_auth.c:get_winbind_domain(140) <..> Mar 23 13:02:35 gw (ntlm_auth): [2009/03/23 13:02:35, 0] utils/ntlm_auth.c:get_winbind_netbios_name(166) Mar 23 13:02:35 gw (ntlm_auth): could not obtain winbind netbios name! Mar 23 13:02:35 gw (ntlm_auth): could not obtain winbind netbios name! Mar 23 13:02:35 gw (ntlm_auth): [2009/03/23 13:02:35, 0] utils/ntlm_auth.c:get_winbind_netbios_name(166) Mar 23 13:02:35 gw (ntlm_auth): [2009/03/23 13:02:35, 0] utils/ntlm_auth.c:get_winbind_netbios_name(166) Mar 23 13:02:35 gw (ntlm_auth): could not obtain winbind netbios name! Mar 23 13:02:35 gw (ntlm_auth): could not obtain winbind netbios name! anyone know why ? i don't see on me server a app started by cron -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Probleme Winbind:
Hi i have a problems with winbind, all hours of the days, we have : Mar 23 08:02:45 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 08:02:46 gw (ntlm_auth): [2009/03/23 08:02:46, 0] utils/ntlm_auth.c:get_winbind_netbios_name(166) Mar 23 08:02:46 gw (ntlm_auth): could not obtain winbind netbios name! Mar 23 08:02:46 gw (ntlm_auth): [2009/03/23 08:02:46, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 08:02:46 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 09:01:53 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 09:01:53 gw (ntlm_auth): [2009/03/23 09:01:53, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 09:01:53 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 09:01:53 gw (ntlm_auth): [2009/03/23 09:01:53, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 09:01:53 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 09:01:53 gw (ntlm_auth): [2009/03/23 09:01:53, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 09:01:53 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 09:01:53 gw (ntlm_auth): [2009/03/23 09:01:53, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 09:01:53 gw (ntlm_auth): [2009/03/23 09:01:53, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 10:01:51 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:51 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:51 gw (ntlm_auth): [2009/03/23 10:01:51, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 10:01:51 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:52 gw (ntlm_auth): [2009/03/23 10:01:52, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 10:01:52 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:52 gw (ntlm_auth): [2009/03/23 10:01:52, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 10:01:52 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:52 gw (ntlm_auth): [2009/03/23 10:01:52, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 10:01:52 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:52 gw (ntlm_auth): [2009/03/23 10:01:52, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 10:01:52 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:52 gw (ntlm_auth): [2009/03/23 10:01:52, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 10:01:52 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:52 gw (ntlm_auth): [2009/03/23 10:01:52, 0] utils/ntlm_auth.c:get_winbind_domain(140) Mar 23 10:01:52 gw (ntlm_auth): could not obtain winbind domain name! Mar 23 10:01:53 gw (ntlm_auth): [2009/03/23 10:01:53, 0] utils/ntlm_auth.c:get_winbind_domain(140) <..> Mar 23 13:02:35 gw (ntlm_auth): [2009/03/23 13:02:35, 0] utils/ntlm_auth.c:get_winbind_netbios_name(166) Mar 23 13:02:35 gw (ntlm_auth): could not obtain winbind netbios name! Mar 23 13:02:35 gw (ntlm_auth): could not obtain winbind netbios name! Mar 23 13:02:35 gw (ntlm_auth): [2009/03/23 13:02:35, 0] utils/ntlm_auth.c:get_winbind_netbios_name(166) Mar 23 13:02:35 gw (ntlm_auth): [2009/03/23 13:02:35, 0] utils/ntlm_auth.c:get_winbind_netbios_name(166) Mar 23 13:02:35 gw (ntlm_auth): could not obtain winbind netbios name! Mar 23 13:02:35 gw (ntlm_auth): could not obtain winbind netbios name! anyone know why ? i don't see on me server a app started by cron -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Winbind error ? idmap Fatal Error: UID range full!
Hi anyone know this error: Mar 20 12:01:06 gw winbindd[14756]: [2009/03/20 12:01:06, 0] sam/idmap_tdb.c:db_allocate_id(106) Mar 20 12:01:06 gw winbindd[14756]: idmap Fatal Error: UID range full!! (max: 2) Mar 20 12:01:06 gw winbindd[14756]: [2009/03/20 12:01:06, 0] sam/idmap_tdb.c:db_allocate_id(106) Mar 20 12:01:06 gw winbindd[14756]: idmap Fatal Error: UID range full!! (max: 2) Mar 20 12:01:06 gw winbindd[14756]: [2009/03/20 12:01:06, 0] sam/idmap_tdb.c:db_allocate_id(106) and what is the process for resolv it ? Thanks jerome -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Winbindd problems ... nevers answered ?
Hi i have 3 PDC on my network, and after reboot the first PDC, my winbindd can't call with it : [EMAIL PROTECTED] squid]# wbinfo -t checking the trust secret via RPC calls failed error code was NT_STATUS_INVALID_COMPUTER_NAME (0xc122) Could not check secret [2005/06/07 10:20:30, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(261) [22308]: request interface version [2005/06/07 10:20:30, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297) [22308]: request location of privileged pipe [2005/06/07 10:20:30, 3] nsswitch/winbindd_misc.c:winbindd_check_machine_acct(41) [22308]: check machine account [2005/06/07 10:20:30, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(109) cm_get_ipc_userpass: No auth-user defined [2005/06/07 10:20:31, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(256) cli_nt_setup_creds: request challenge failed [2005/06/07 10:20:31, 3] nsswitch/winbindd_cm.c:cm_prepare_connection(387) schannel refused - continuing without schannel (NT_STATUS_INVALID_COMPUTER_NAME) [2005/06/07 10:20:31, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(256) cli_nt_setup_creds: request challenge failed [2005/06/07 10:20:31, 3] nsswitch/winbindd_misc.c:winbindd_check_machine_acct(68) could not open handle to NETLOGON pipe [2005/06/07 10:20:31, 2] nsswitch/winbindd_misc.c:winbindd_check_machine_acct(98) Checking the trust account password returned NT_STATUS_INVALID_COMPUTER_NAME i restart winbindd and now i have [EMAIL PROTECTED] samba]# wbinfo -t checking the trust secret via RPC calls succeeded [EMAIL PROTECTED] samba]# only whith a stop/start 1- Why Winbindd don't "reconnect" to the PDC when he lose the connection ? 2- Why he don't sent the request to the second PDC when the first are died ? 3- Can i put a script for auto detection if the connexion are good ? 4- Into my smb.conf, i have : security = domain password server = * i can specify a list of IP/PDC for he sent the request ? Please help me to understand this problems. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] command for ?
Hi what is the command into winbindd for get all login and all password of a Active Directory groups ? i know: getent group NAMEOFGROUP, i get all login but after i want save login/pass into a file ? thanks for your help -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problems Winbindd/Squid ?
Hi i have a big quantity of problems with Winbindd/squid ... it's very unstable on my proxy server and don't know why ... first problems: 1- I have restart my PDC and after restart, my winbindd denied all access and put a INVALID_COMPUTER_NAME ... i restart winbind and that's work now ... winbindd can't contact another PDC ? he can't recontact automatiquely the PDC without a manual restart ? 2- In the log, i have a big quantity of (into logh.nmbd): [2005/06/06 12:27:18, 2] nmbd/nmbd_nameregister.c:wins_registration_timeout(184) wins_registration_timeout: WINS server 172.16.1.15 timed out registering IP 10.206.1.251 into squid, i have a lot of "TCP DENIED" and one line after a acceptation .. i don't understand why this is very unstable My config: smb.conf [global] workgroup = SODIAAL netbios name = OPHELYSSRV1 server string = Ophelys Server Srv1 printcap name = cups load printers = yes printer admin = @adm log file = /var/log/samba/log.%m max log size = 1500 log level = 3 map to guest = bad user security = domain password server = * encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd idmap uid = 1-2 idmap gid = 1-2 winbind separator = / winbind use default domain = yes template homedir = /home/%D/%U socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 interfaces = 10.206.1.251/24 local master = no name resolve order = wins lmhosts bcast host wins server = 172.16.1.15,172.16.1.27,172.17.1.14 dns proxy = no i use Winbind only for proxy auth ntlm with wbinfo_group.pl ... no for file server -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Please, Help on Winbind/Squid
Hi i have a big problems with WInbind and Squid ... i have join the domain without problems and : [EMAIL PROTECTED] squid]# wbinfo -t checking the trust secret via RPC calls succeeded [EMAIL PROTECTED] squid]# [EMAIL PROTECTED] squid]# wbinfo -p Ping to winbindd succeeded on fd 4 [EMAIL PROTECTED] squid]# [EMAIL PROTECTED] squid]# wbinfo -u|more ARN BOULO <...> all work's but when i put : [EMAIL PROTECTED] squid]# ./wb_group -d /wb_group[28942](wb_check_group.c:344): External ACL winbindd group helper build Apr 25 2005, 17:11:22 starting up... /wb_group[28942](wb_check_group.c:308): Can't contact winbindd. Dying [EMAIL PROTECTED] squid]# ./wb_auth -d /wb_auth[28952](wb_basic_auth.c:183): basic winbindd auth helper build Apr 25 2005, 17:11:16 starting up... /wb_auth[28952](wb_basic_auth.c:160): Can't contact winbindd. Dying [EMAIL PROTECTED] squid]# Anyone know why wb_auth and wb_group can't contact winbindd ?? Thanks for your help I use: samba-winbind-3.0.10-0.1.101mdk.rpm squid-2.5.STABLE9-1.1.101mdk.rpm -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Winbindd and squid ... help please
Hi i use WInbind with Squid and SquidGuard ... but it's not stable ... squid don't sent all time the Auth at squidguard and i have a "Access Denied" ... anyone have a answer to this problems ? I use ntlm_auth ... can i use other software for put the authentification and delete squidguard for put a group based access ? (wb_group ??) thanks for your help -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] A problems wiuth https ?
Hi into my logs, i see : 1115139337.500 5264 192.168.37.140 TCP_MISS/200 12633 CONNECT www.creditmutuel.fr:443 MIRAN DIRECT/193.57.116.139 - 1115139337.852 5634 192.168.37.140 TCP_MISS/200 495 CONNECT www.creditmutuel.fr:443 MIRAN DIRECT/193.57.116.139 - 1115139338.059 5 192.168.37.140 TCP_DENIED/407 1751 CONNECT www.creditmutuel.fr:443 - NONE/- text/html 1115139338.427 5 192.168.37.140 TCP_DENIED/407 1751 CONNECT www.creditmutuel.fr:443 - NONE/- text/html 1115139338.464 5 192.168.37.140 TCP_DENIED/407 1751 CONNECT www.creditmutuel.fr:443 - NONE/- text/html 1115139338.471 5 192.168.37.140 TCP_DENIED/407 1751 CONNECT www.creditmutuel.fr:443 - NONE/- text/html I use winbind ntlm auth and i have two questions for know : 1- Why this TCP_DENIED ? 2- Why i lose the username "MIRAN" ? Thanks bye -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Help on Winbind/Squid => Authentification work's at 75% .. cache possible ?
Hi i have a big problems on Winbind/squid ... I use it for the authentification of my user but i don't know why, that's don't work all time ... On one web site, i can have the authentification on the page but after 2 or 3 pictures are in "not authentified" He have a cache for the login/pass ? He have a special config for squid ? thanks for your help -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba