Re: [Samba] (Urgent) Re: Your password expires today problem

[Richard Lamboj]

Am Monday 29 March 2010 14:56:13 schrieb John H Terpstra:
> Richi,
>
> Please file a detailed bug report on https://bugzilla.samba.org with
> clear steps so that one of the developers can reproduce your problem.
>
> Is your installation new, or was is migrated from an earlier version of
> Samba?
>
> - John T.
>
> On 03/29/2010 01:45 AM, Richard Lamboj wrote:
> > Good morning John,
> >
> > here is the Output:
> > server-b10:/# ls -al /lib*/libc-*so
> > -rwxr-xr-x 1 root root 1375536 14. Jän 07:51 /lib64/libc-2.7.so
> > -rwxr-xr-x 1 root root 1375536 14. Jän 07:51 /lib/libc-2.7.so
> > server-b10:/# uname -a
> > Linux server-b10.intern.bilcom.at 2.6.32-vs2.3.0.36.26 #1 SMP Thu Dec 10
> > 16:36:45 CET 2009 x86_64 GNU/Linux
> >
> > Some System informations:
> > OS: Debian Lenny
> > Arch: x86_64
> > Others: Linux VServer Guest
> >
> > Kind Regards
> >
> > Richi
> >
> > Am Sunday 28 March 2010 15:39:54 schrieb John H Terpstra:
> >> Please will all who have this problem respond with the output of
> >> executing the following:
> >>
> >> 1) smbd -V
> >> 2) ls -al /lib*/libc-*so
> >> 3) uname -a
> >>
> >> Thanks.
> >>
> >> - John T.
> >>
> >> On 03/28/2010 07:33 AM, Denis BUCHER wrote:
> >>> Hello everyone,
> >>>
> >>> I have the exact same problem, but without any solution :
> >>>
> >>> Le 12.03.2010 08:03, Richard Lamboj a écrit :
> >>>> Its definitly a signed 32 bit int:
> >>>> net sam policy set "maximum password age" 4294967291
> >>>> Account policy "maximum password age" value was: -1
> >>>> Account policy "maximum password age" value is now: -5
> >>>>
> >>>> Does not work:
> >>>> net sam policy set "maximum password age" never
> >>>> Account policy "maximum password age" value was: 2147483647
> >>>> Account policy "maximum password age" value is now: -1
> >>>>
> >>>> Does also not work:
> >>>> net sam policy set "maximum password age" 2147483647
> >>>> Account policy "maximum password age" value was: -5
> >>>> Account policy "maximum password age" value is now: 2147483647
> >>>>
> >>>> So when i'am using "never" it will be set to -1, so it must be a
> >>>> signed integer and this has a maximal value of 2147483647.
> >>>>
> >>>> Napalm and a new Job on the Beach could be the Solution...
> >>>>
> >>>> Am Friday 12 March 2010 02:14:10 schrieb Michael B. Trausch:
> >>>>> On 03/11/2010 03:52 PM, Richard Lamboj wrote:
> >>>>>> Hello,
> >>>>>>
> >>>>>> server-p:/# net sam policy set "maximum password age" 4294967294
> >>>>>> Account policy "maximum password age" value was: -2
> >>>>>> Account policy "maximum password age" value is now: -2
> >>>>>>
> >>>>>> Is that Output Normal?
> >>>>>
> >>>>> Looks like there is some wrapping going on there.  Try:
> >>>>>
> >>>>> # net sam policy set "maximum password age" 4294967291
> >>>>>
> >>>>> That said, I don't know why there would be wrapping.  An unsigned
> >>>>> 32-bit integer's maximum value is 4294967295, so 4294967294 (the
> >>>>> value that you used) should be something that would fit.  I don't
> >>>>> know what would cause that to happen that way.
> >>>
> >>> I tried all points and IT DOES NOT WORK, always the message "Your
> >>> password expires today, please change your password yes/no" :
> >>>
> >>> -> My users are all "UX" (I also tried without X, it's even worse)
> >>> -> I tried pdbedit
> >>> -> I tried net sam
> >>> -> removed "passdb backend = smbpasswd" from config
> >>>
> >>> # net sam policy set "maximum password age" 4294967295
> >>> Account policy "maximum password age" value was: 0
> >>> Account policy "maximum password age" value is now: -1
> >>>
> >>> pdbedit -u mbucher -v
> >>> gives either
&

Re: [Samba] (Urgent) Re: Your password expires today problem

[Richard Lamboj]

Am Monday 29 March 2010 11:12:02 schrieb Michael Wood:
> On 29 March 2010 08:45, Richard Lamboj  wrote:
> > Good morning John,
> >
> > here is the Output:
> > server-b10:/# ls -al /lib*/libc-*so
> > -rwxr-xr-x 1 root root 1375536 14. Jän 07:51 /lib64/libc-2.7.so
> > -rwxr-xr-x 1 root root 1375536 14. Jän 07:51 /lib/libc-2.7.so
> > server-b10:/# uname -a
> > Linux server-b10.intern.bilcom.at 2.6.32-vs2.3.0.36.26 #1 SMP Thu Dec 10
> > 16:36:45 CET 2009 x86_64 GNU/Linux
> >
> > Some System informations:
> > OS: Debian Lenny
> > Arch: x86_64
> > Others: Linux VServer Guest
> >
> > Kind Regards
> >
> > Richi
> >
> > Am Sunday 28 March 2010 15:39:54 schrieb John H Terpstra:
> >> Please will all who have this problem respond with the output of
> >> executing the following:
> >>
> >> 1) smbd -V
>
> You seem to have left out "smbd -V".

Sorry, i have forgotten to copy this part. So here is it:
server-b10:/# smbd -V
Version 3.5.1
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] (Urgent) Re: Your password expires today problem

[Richard Lamboj]

Good morning John,

here is the Output:
server-b10:/# ls -al /lib*/libc-*so
-rwxr-xr-x 1 root root 1375536 14. Jän 07:51 /lib64/libc-2.7.so
-rwxr-xr-x 1 root root 1375536 14. Jän 07:51 /lib/libc-2.7.so
server-b10:/# uname -a
Linux server-b10.intern.bilcom.at 2.6.32-vs2.3.0.36.26 #1 SMP Thu Dec 10 
16:36:45 CET 2009 x86_64 GNU/Linux

Some System informations:
OS: Debian Lenny
Arch: x86_64
Others: Linux VServer Guest

Kind Regards

Richi

Am Sunday 28 March 2010 15:39:54 schrieb John H Terpstra:
> Please will all who have this problem respond with the output of
> executing the following:
>
> 1) smbd -V
> 2) ls -al /lib*/libc-*so
> 3) uname -a
>
> Thanks.
>
> - John T.
>
> On 03/28/2010 07:33 AM, Denis BUCHER wrote:
> > Hello everyone,
> >
> > I have the exact same problem, but without any solution :
> >
> > Le 12.03.2010 08:03, Richard Lamboj a écrit :
> >> Its definitly a signed 32 bit int:
> >> net sam policy set "maximum password age" 4294967291
> >> Account policy "maximum password age" value was: -1
> >> Account policy "maximum password age" value is now: -5
> >>
> >> Does not work:
> >> net sam policy set "maximum password age" never
> >> Account policy "maximum password age" value was: 2147483647
> >> Account policy "maximum password age" value is now: -1
> >>
> >> Does also not work:
> >> net sam policy set "maximum password age" 2147483647
> >> Account policy "maximum password age" value was: -5
> >> Account policy "maximum password age" value is now: 2147483647
> >>
> >> So when i'am using "never" it will be set to -1, so it must be a signed
> >> integer and this has a maximal value of 2147483647.
> >>
> >> Napalm and a new Job on the Beach could be the Solution...
> >>
> >> Am Friday 12 March 2010 02:14:10 schrieb Michael B. Trausch:
> >>> On 03/11/2010 03:52 PM, Richard Lamboj wrote:
> >>>> Hello,
> >>>>
> >>>> server-p:/# net sam policy set "maximum password age" 4294967294
> >>>> Account policy "maximum password age" value was: -2
> >>>> Account policy "maximum password age" value is now: -2
> >>>>
> >>>> Is that Output Normal?
> >>>
> >>> Looks like there is some wrapping going on there.  Try:
> >>>
> >>> # net sam policy set "maximum password age" 4294967291
> >>>
> >>> That said, I don't know why there would be wrapping.  An unsigned
> >>> 32-bit integer's maximum value is 4294967295, so 4294967294 (the value
> >>> that you used) should be something that would fit.  I don't know what
> >>> would cause that to happen that way.
> >
> > I tried all points and IT DOES NOT WORK, always the message "Your
> > password expires today, please change your password yes/no" :
> >
> > -> My users are all "UX" (I also tried without X, it's even worse)
> > -> I tried pdbedit
> > -> I tried net sam
> > -> removed "passdb backend = smbpasswd" from config
> >
> > # net sam policy set "maximum password age" 4294967295
> > Account policy "maximum password age" value was: 0
> > Account policy "maximum password age" value is now: -1
> >
> > pdbedit -u mbucher -v
> > gives either
> >
> >> Password last set:0
> >> Password can change:  0
> >> Password must change: 0
> >> Last bad password   : 0
> >> Bad password count  : 0
> >
> > either
> >
> >> Password last set:Thu, 25 Feb 2010 15:17:18 CET
> >> Password can change:  Thu, 25 Feb 2010 15:17:18 CET
> >> Password must change: never
> >> Last bad password   : 0
> >> Bad password count  : 0
> >
> > Any help would be greatly appreciated we have 90 people here and I
> > really becoming mad about this, I don't know where to search for ?
> >
> > Denis

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] how to synch multiple servers?

[Richard Lamboj]

Hello,

try DRBD with OCFS2. I have tried this, but when the traffic was to high and 
DRBD has two Masters(Both can write), than one Server will crash - from my 
experience. Maybe a FUSE Cluster Filesystem can help you? I have written one, 
but never finished it, or tested it in a Productiv Environment. There are 
some others Cluster Filesystems in High Level Programming Languages, but i 
don't know how fast this would be.

Kind Regards

Richi
Am Thursday 25 March 2010 16:48:35 schrieb PTaco:
> I mean, if a file is updated, added, or changed on 1 server, it will
> perform the same changes to the others automatically.
>
> John M. Drescher wrote:
> > On Thu, Mar 25, 2010 at 10:49 AM, John Drescher 
> >
> > wrote:
> >>> Is there a way to synch multiple servers at once so when one is
> >>> changed, samba updates all the other servers at the same time
> >>> automatically?
> >>
> >> What are you  talking about? Permissions or files or both?
> >>
> >> If just permissions use ldap.
> >
> > By permissions I mean user and machine accounts and the like not ACLs
> >
> > John
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
>
> --
> View this message in context:
> http://old.nabble.com/how-to-synch-multiple-servers--tp28019825p28030799.ht
>ml Sent from the Samba - General mailing list archive at Nabble.com.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] cupsaddsmb error: cli_pipe_validate_cur rent_pdu: RPC fault code DCERPC_FAULT_OP_RNG _ERROR received

[Richard Lamboj]

Am Monday 22 March 2010 09:59:15 schrieb Richard Lamboj:
> Am Friday 19 March 2010 15:39:58 schrieb Richard Lamboj:
> > Hello,
> >
> > when i send the SIGHUP signal to Samba, then Samba won't load the
> > printers from CUPS. I need to shutdown Samba and start it again.
> >
> > Now when i'am running cupsaddsmb i got the following errors(this error
> > occours in 3.5.x but not in 3.2.x):
> >
> > server-p:/# cupsaddsmb -H server-p -v edv01 edv02 edv03
> > Kennwort für root erforderlich, um über SAMBA auf server-p zugreifen zu
> > können:
> > Befehl ausführen: smbclient //server-p/print$ -N -A /tmp/4ba38b6546c6f -c
> > „mkdir W32X86;put /tmp/4ba38b6126eb3
> > W32X86/edv01.ppd;put /usr/share/cups/drivers/ps5ui.dll
> > W32X86/ps5ui.dll;put /usr/share/cups/drivers/pscript.hlp
> > W32X86/pscript.hlp;put /usr/share/cups/drivers/pscript.ntf
> > W32X86/pscript.ntf;put /usr/share/cups/drivers/pscript5.dll
> > W32X86/pscript5.dll“
> > Domain=[PRUEFUNG] OS=[Unix] Server=[Samba 3.5.1]
> > NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
> > putting file /tmp/4ba38b6126eb3 as \W32X86/edv01.ppd (2216,4 kb/s)
> > (average 2216,4 kb/s)
> > putting file /usr/share/cups/drivers/ps5ui.dll as \W32X86/ps5ui.dll
> > (136486,7 kb/s) (average 12545,9 kb/s)
> > putting file /usr/share/cups/drivers/pscript.hlp as \W32X86/pscript.hlp
> > (510,9 kb/s) (average 3075,8 kb/s)
> > putting file /usr/share/cups/drivers/pscript.ntf as \W32X86/pscript.ntf
> > (41426,1 kb/s) (average 14224,2 kb/s)
> > putting file /usr/share/cups/drivers/pscript5.dll as \W32X86/pscript5.dll
> > (234488,6 kb/s) (average 19230,4 kb/s)
> >
> > Befehl ausführen: rpcclient server-p -N -A /tmp/4ba38b6546c6f -c
> > „adddriver "Windows NT
> > x86"
> > "edv01:pscript5.dll:edv01.ppd:ps5ui.dll:pscript.hlp:NULL:RAW:pscript5.dll
> >,e dv01.ppd,ps5ui.dll,pscript.hlp,pscript.ntf"“ Printer Driver edv01
> > successfully installed.
> >
> > Befehl ausführen: rpcclient server-p -N -A /tmp/4ba38b6546c6f -c
> > „setdriver edv01 edv01“
> > cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_OP_RNG_ERROR
> > received from host server-p!
> > Successfully set edv01 to driver edv01.
> > cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_OP_RNG_ERROR
> > received from host server-p!
> >
> > Befehl ausführen: smbclient //server-p/print$ -N -A /tmp/4ba38b6611474 -c
> > „mkdir W32X86;put /tmp/4ba38b6611328
> > W32X86/edv02.ppd;put /usr/share/cups/drivers/ps5ui.dll
> > W32X86/ps5ui.dll;put /usr/share/cups/drivers/pscript.hlp
> > W32X86/pscript.hlp;put /usr/share/cups/drivers/pscript.ntf
> > W32X86/pscript.ntf;put /usr/share/cups/drivers/pscript5.dll
> > W32X86/pscript5.dll“
> > Domain=[PRUEFUNG] OS=[Unix] Server=[Samba 3.5.1]
> > NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
> > putting file /tmp/4ba38b6611328 as \W32X86/edv02.ppd (27235,0 kb/s)
> > (average inf kb/s)
> > putting file /usr/share/cups/drivers/ps5ui.dll as \W32X86/ps5ui.dll
> > (136486,7 kb/s) (average 163096,7 kb/s)
> > putting file /usr/share/cups/drivers/pscript.hlp as \W32X86/pscript.hlp
> > (437,9 kb/s) (average 3291,6 kb/s)
> > putting file /usr/share/cups/drivers/pscript.ntf as \W32X86/pscript.ntf
> > (30460,4 kb/s) (average 13442,6 kb/s)
> > putting file /usr/share/cups/drivers/pscript5.dll as \W32X86/pscript5.dll
> > (234488,6 kb/s) (average 18196,5 kb/s)
> >
> > Befehl ausführen: rpcclient server-p -N -A /tmp/4ba38b6611474 -c
> > „adddriver "Windows NT
> > x86"
> > "edv02:pscript5.dll:edv02.ppd:ps5ui.dll:pscript.hlp:NULL:RAW:pscript5.dll
> >,e dv02.ppd,ps5ui.dll,pscript.hlp,pscript.ntf"“ Printer Driver edv02
> > successfully installed.
> >
> > Befehl ausführen: rpcclient server-p -N -A /tmp/4ba38b6611474 -c
> > „setdriver edv02 edv02“
> > cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_OP_RNG_ERROR
> > received from host server-p!
> > Successfully set edv02 to driver edv02.
> > cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_OP_RNG_ERROR
> > received from host server-p!
> >
> > Befehl ausführen: smbclient //server-p/print$ -N -A /tmp/4ba38b66759ee -c
> > „mkdir W32X86;put /tmp/4ba38b667589a
> > W32X86/edv03.ppd;put /usr/share/cups/drivers/ps5ui.dll
> > W32X86/ps5ui.dll;put /usr/share/cups/drivers/pscript.hlp
> > W32X86/pscript.hlp;put /usr/share/cups/drivers/pscript.ntf
> > W32X86/pscript.ntf;put /usr/share/cups/drivers/pscript5.dll
> > W32X86/pscript5.dll“
> > Doma

Re: [Samba] cupsaddsmb error: cli_pipe_validate_cur rent_pdu: RPC fault code DCERPC_FAULT_OP_RNG _ERROR received

[Richard Lamboj]

Am Friday 19 March 2010 15:39:58 schrieb Richard Lamboj:
> Hello,
>
> when i send the SIGHUP signal to Samba, then Samba won't load the printers
> from CUPS. I need to shutdown Samba and start it again.
>
> Now when i'am running cupsaddsmb i got the following errors(this error
> occours in 3.5.x but not in 3.2.x):
>
> server-p:/# cupsaddsmb -H server-p -v edv01 edv02 edv03
> Kennwort für root erforderlich, um über SAMBA auf server-p zugreifen zu
> können:
> Befehl ausführen: smbclient //server-p/print$ -N -A /tmp/4ba38b6546c6f -c
> „mkdir W32X86;put /tmp/4ba38b6126eb3
> W32X86/edv01.ppd;put /usr/share/cups/drivers/ps5ui.dll
> W32X86/ps5ui.dll;put /usr/share/cups/drivers/pscript.hlp
> W32X86/pscript.hlp;put /usr/share/cups/drivers/pscript.ntf
> W32X86/pscript.ntf;put /usr/share/cups/drivers/pscript5.dll
> W32X86/pscript5.dll“
> Domain=[PRUEFUNG] OS=[Unix] Server=[Samba 3.5.1]
> NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
> putting file /tmp/4ba38b6126eb3 as \W32X86/edv01.ppd (2216,4 kb/s) (average
> 2216,4 kb/s)
> putting file /usr/share/cups/drivers/ps5ui.dll as \W32X86/ps5ui.dll
> (136486,7 kb/s) (average 12545,9 kb/s)
> putting file /usr/share/cups/drivers/pscript.hlp as \W32X86/pscript.hlp
> (510,9 kb/s) (average 3075,8 kb/s)
> putting file /usr/share/cups/drivers/pscript.ntf as \W32X86/pscript.ntf
> (41426,1 kb/s) (average 14224,2 kb/s)
> putting file /usr/share/cups/drivers/pscript5.dll as \W32X86/pscript5.dll
> (234488,6 kb/s) (average 19230,4 kb/s)
>
> Befehl ausführen: rpcclient server-p -N -A /tmp/4ba38b6546c6f -c
> „adddriver "Windows NT
> x86"
> "edv01:pscript5.dll:edv01.ppd:ps5ui.dll:pscript.hlp:NULL:RAW:pscript5.dll,e
>dv01.ppd,ps5ui.dll,pscript.hlp,pscript.ntf"“ Printer Driver edv01
> successfully installed.
>
> Befehl ausführen: rpcclient server-p -N -A /tmp/4ba38b6546c6f -c „setdriver
> edv01 edv01“
> cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_OP_RNG_ERROR
> received from host server-p!
> Successfully set edv01 to driver edv01.
> cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_OP_RNG_ERROR
> received from host server-p!
>
> Befehl ausführen: smbclient //server-p/print$ -N -A /tmp/4ba38b6611474 -c
> „mkdir W32X86;put /tmp/4ba38b6611328
> W32X86/edv02.ppd;put /usr/share/cups/drivers/ps5ui.dll
> W32X86/ps5ui.dll;put /usr/share/cups/drivers/pscript.hlp
> W32X86/pscript.hlp;put /usr/share/cups/drivers/pscript.ntf
> W32X86/pscript.ntf;put /usr/share/cups/drivers/pscript5.dll
> W32X86/pscript5.dll“
> Domain=[PRUEFUNG] OS=[Unix] Server=[Samba 3.5.1]
> NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
> putting file /tmp/4ba38b6611328 as \W32X86/edv02.ppd (27235,0 kb/s)
> (average inf kb/s)
> putting file /usr/share/cups/drivers/ps5ui.dll as \W32X86/ps5ui.dll
> (136486,7 kb/s) (average 163096,7 kb/s)
> putting file /usr/share/cups/drivers/pscript.hlp as \W32X86/pscript.hlp
> (437,9 kb/s) (average 3291,6 kb/s)
> putting file /usr/share/cups/drivers/pscript.ntf as \W32X86/pscript.ntf
> (30460,4 kb/s) (average 13442,6 kb/s)
> putting file /usr/share/cups/drivers/pscript5.dll as \W32X86/pscript5.dll
> (234488,6 kb/s) (average 18196,5 kb/s)
>
> Befehl ausführen: rpcclient server-p -N -A /tmp/4ba38b6611474 -c
> „adddriver "Windows NT
> x86"
> "edv02:pscript5.dll:edv02.ppd:ps5ui.dll:pscript.hlp:NULL:RAW:pscript5.dll,e
>dv02.ppd,ps5ui.dll,pscript.hlp,pscript.ntf"“ Printer Driver edv02
> successfully installed.
>
> Befehl ausführen: rpcclient server-p -N -A /tmp/4ba38b6611474 -c „setdriver
> edv02 edv02“
> cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_OP_RNG_ERROR
> received from host server-p!
> Successfully set edv02 to driver edv02.
> cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_OP_RNG_ERROR
> received from host server-p!
>
> Befehl ausführen: smbclient //server-p/print$ -N -A /tmp/4ba38b66759ee -c
> „mkdir W32X86;put /tmp/4ba38b667589a
> W32X86/edv03.ppd;put /usr/share/cups/drivers/ps5ui.dll
> W32X86/ps5ui.dll;put /usr/share/cups/drivers/pscript.hlp
> W32X86/pscript.hlp;put /usr/share/cups/drivers/pscript.ntf
> W32X86/pscript.ntf;put /usr/share/cups/drivers/pscript5.dll
> W32X86/pscript5.dll“
> Domain=[PRUEFUNG] OS=[Unix] Server=[Samba 3.5.1]
> NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
> putting file /tmp/4ba38b667589a as \W32X86/edv03.ppd (27235,0 kb/s)
> (average inf kb/s)
> putting file /usr/share/cups/drivers/ps5ui.dll as \W32X86/ps5ui.dll
> (136486,7 kb/s) (average 163096,7 kb/s)
> putting file /usr/share/cups/drivers/pscript.hlp as \W32X86/pscript.hlp
> (252,8 kb/s) (average 1914,5 kb/s)
> putting file /u

[Samba] cupsaddsmb error: cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_OP_RNG_ERROR received

[Richard Lamboj]

Hello,

when i send the SIGHUP signal to Samba, then Samba won't load the printers 
from CUPS. I need to shutdown Samba and start it again.

Now when i'am running cupsaddsmb i got the following errors(this error occours 
in 3.5.x but not in 3.2.x):

server-p:/# cupsaddsmb -H server-p -v edv01 edv02 edv03
Kennwort für root erforderlich, um über SAMBA auf server-p zugreifen zu 
können:
Befehl ausführen: smbclient //server-p/print$ -N -A /tmp/4ba38b6546c6f -c 
„mkdir W32X86;put /tmp/4ba38b6126eb3 
W32X86/edv01.ppd;put /usr/share/cups/drivers/ps5ui.dll 
W32X86/ps5ui.dll;put /usr/share/cups/drivers/pscript.hlp 
W32X86/pscript.hlp;put /usr/share/cups/drivers/pscript.ntf 
W32X86/pscript.ntf;put /usr/share/cups/drivers/pscript5.dll 
W32X86/pscript5.dll“
Domain=[PRUEFUNG] OS=[Unix] Server=[Samba 3.5.1]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
putting file /tmp/4ba38b6126eb3 as \W32X86/edv01.ppd (2216,4 kb/s) (average 
2216,4 kb/s)
putting file /usr/share/cups/drivers/ps5ui.dll as \W32X86/ps5ui.dll (136486,7 
kb/s) (average 12545,9 kb/s)
putting file /usr/share/cups/drivers/pscript.hlp as \W32X86/pscript.hlp (510,9 
kb/s) (average 3075,8 kb/s)
putting file /usr/share/cups/drivers/pscript.ntf as \W32X86/pscript.ntf 
(41426,1 kb/s) (average 14224,2 kb/s)
putting file /usr/share/cups/drivers/pscript5.dll as \W32X86/pscript5.dll 
(234488,6 kb/s) (average 19230,4 kb/s)

Befehl ausführen: rpcclient server-p -N -A /tmp/4ba38b6546c6f -c 
„adddriver "Windows NT 
x86" 
"edv01:pscript5.dll:edv01.ppd:ps5ui.dll:pscript.hlp:NULL:RAW:pscript5.dll,edv01.ppd,ps5ui.dll,pscript.hlp,pscript.ntf"“
Printer Driver edv01 successfully installed.

Befehl ausführen: rpcclient server-p -N -A /tmp/4ba38b6546c6f -c „setdriver 
edv01 edv01“
cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_OP_RNG_ERROR 
received from host server-p!
Successfully set edv01 to driver edv01.
cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_OP_RNG_ERROR 
received from host server-p!

Befehl ausführen: smbclient //server-p/print$ -N -A /tmp/4ba38b6611474 -c 
„mkdir W32X86;put /tmp/4ba38b6611328 
W32X86/edv02.ppd;put /usr/share/cups/drivers/ps5ui.dll 
W32X86/ps5ui.dll;put /usr/share/cups/drivers/pscript.hlp 
W32X86/pscript.hlp;put /usr/share/cups/drivers/pscript.ntf 
W32X86/pscript.ntf;put /usr/share/cups/drivers/pscript5.dll 
W32X86/pscript5.dll“
Domain=[PRUEFUNG] OS=[Unix] Server=[Samba 3.5.1]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
putting file /tmp/4ba38b6611328 as \W32X86/edv02.ppd (27235,0 kb/s) 
(average inf kb/s)
putting file /usr/share/cups/drivers/ps5ui.dll as \W32X86/ps5ui.dll (136486,7 
kb/s) (average 163096,7 kb/s)
putting file /usr/share/cups/drivers/pscript.hlp as \W32X86/pscript.hlp (437,9 
kb/s) (average 3291,6 kb/s)
putting file /usr/share/cups/drivers/pscript.ntf as \W32X86/pscript.ntf 
(30460,4 kb/s) (average 13442,6 kb/s)
putting file /usr/share/cups/drivers/pscript5.dll as \W32X86/pscript5.dll 
(234488,6 kb/s) (average 18196,5 kb/s)

Befehl ausführen: rpcclient server-p -N -A /tmp/4ba38b6611474 -c 
„adddriver "Windows NT 
x86" 
"edv02:pscript5.dll:edv02.ppd:ps5ui.dll:pscript.hlp:NULL:RAW:pscript5.dll,edv02.ppd,ps5ui.dll,pscript.hlp,pscript.ntf"“
Printer Driver edv02 successfully installed.

Befehl ausführen: rpcclient server-p -N -A /tmp/4ba38b6611474 -c „setdriver 
edv02 edv02“
cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_OP_RNG_ERROR 
received from host server-p!
Successfully set edv02 to driver edv02.
cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_OP_RNG_ERROR 
received from host server-p!

Befehl ausführen: smbclient //server-p/print$ -N -A /tmp/4ba38b66759ee -c 
„mkdir W32X86;put /tmp/4ba38b667589a 
W32X86/edv03.ppd;put /usr/share/cups/drivers/ps5ui.dll 
W32X86/ps5ui.dll;put /usr/share/cups/drivers/pscript.hlp 
W32X86/pscript.hlp;put /usr/share/cups/drivers/pscript.ntf 
W32X86/pscript.ntf;put /usr/share/cups/drivers/pscript5.dll 
W32X86/pscript5.dll“
Domain=[PRUEFUNG] OS=[Unix] Server=[Samba 3.5.1]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
putting file /tmp/4ba38b667589a as \W32X86/edv03.ppd (27235,0 kb/s) 
(average inf kb/s)
putting file /usr/share/cups/drivers/ps5ui.dll as \W32X86/ps5ui.dll (136486,7 
kb/s) (average 163096,7 kb/s)
putting file /usr/share/cups/drivers/pscript.hlp as \W32X86/pscript.hlp (252,8 
kb/s) (average 1914,5 kb/s)
putting file /usr/share/cups/drivers/pscript.ntf as \W32X86/pscript.ntf 
(30460,4 kb/s) (average 9267,3 kb/s)
putting file /usr/share/cups/drivers/pscript5.dll as \W32X86/pscript5.dll 
(234488,6 kb/s) (average 12628,9 kb/s)

Befehl ausführen: rpcclient server-p -N -A /tmp/4ba38b66759ee -c 
„adddriver "Windows NT 
x86" 
"edv03:pscript5.dll:edv03.ppd:ps5ui.dll:pscript.hlp:NULL:RAW:pscript5.dll,edv03.ppd,ps5ui.dll,pscript.hlp,pscript.ntf"“
Printer Driver edv03 successfully installed.

Befehl ausführen: rpcclient server-p -N -A /tmp/4ba38b66759ee -c „setdriver 
edv03 edv03“
cli_pipe_validate_

Re: [Samba] Your password expires today problem

[Richard Lamboj]

Good Morning,

Its definitly a signed 32 bit int:
net sam policy set "maximum password age" 4294967291
Account policy "maximum password age" value was: -1
Account policy "maximum password age" value is now: -5

Does not work:
net sam policy set "maximum password age" never
Account policy "maximum password age" value was: 2147483647
Account policy "maximum password age" value is now: -1

Does also not work:
net sam policy set "maximum password age" 2147483647
Account policy "maximum password age" value was: -5
Account policy "maximum password age" value is now: 2147483647

So when i'am using "never" it will be set to -1, so it must be a signed 
integer and this has a maximal value of 2147483647.

Napalm and a new Job on the Beach could be the Solution...

King Regards

Richi

Am Friday 12 March 2010 02:14:10 schrieb Michael B. Trausch:
> On 03/11/2010 03:52 PM, Richard Lamboj wrote:
> > Hello,
> >
> > server-p:/# net sam policy set "maximum password age" 4294967294
> > Account policy "maximum password age" value was: -2
> > Account policy "maximum password age" value is now: -2
> >
> > Is that Output Normal?
>
> Looks like there is some wrapping going on there.  Try:
>
> # net sam policy set "maximum password age" 4294967291
>
> That said, I don't know why there would be wrapping.  An unsigned 32-bit
> integer's maximum value is 4294967295, so 4294967294 (the value that you
> used) should be something that would fit.  I don't know what would cause
> that to happen that way.
>
>   --- Mike

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Your password expires today problem

[Richard Lamboj]

Hello,

okay i have something forgotten. Its a 64 Bit System. So well i only could use 
a signed 32 bit int?

Kind Regards

Richi

 Original-Nachricht 
> Datum: Thu, 11 Mar 2010 21:52:53 +0100
> Von: "Richard Lamboj" 
> An: samba@lists.samba.org
> Betreff: Re: [Samba] Your password expires today problem

> Hello,
> 
> server-p:/# net sam policy set "maximum password age" 4294967294
> Account policy "maximum password age" value was: -2 
> Account policy "maximum password age" value is now: -2
> 
> Is that Output Normal?
> 
> Kind Regards
> 
>  Original-Nachricht 
> > Datum: Thu, 11 Mar 2010 12:58:44 -0500
> > Von: "Michael B. Trausch" 
> > An: samba@lists.samba.org
> > Betreff: Re: [Samba] Your password expires today problem
> 
> > On 03/11/2010 02:04 AM, Richard Lamboj wrote:
> > > i got this Problem with Samba 3.4.6 and 3.5.1 and yes i know there is
> > > already a bug report.
> > >
> > > Your workaround doesn't work for me. Is there another solution?
> > >
> > > This don't work: pdbedit -P "maximum password age" -C 4294967294
> > >
> > > I'am using LDAP. We have Upgraded from 3.2.14. The LDAP Schema Files
> > > don't have changed, or?
> > 
> > I was told on IRC not to use pdbedit for changing the password aging 
> > information in Samba, but to instead use "net sam" to set policy.
> > 
> > You should be able to set the maximum password age using the following 
> > command:
> > 
> > # net sam policy set "maximum password age" 4294967294
> > 
> > You can set the following policy attributes this way (this is output 
> > from "net sam policy list"):
> > 
> > min password length
> > password history
> > user must logon to change password
> > maximum password age
> > minimum password age
> > lockout duration
> > reset count minutes
> > bad lockout attempt
> > disconnect time
> > refuse machine password change
> > 
> > HTH,
> > Mike
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> 
> -- 
> GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
> Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01
> 
> -- 
> GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
> Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

-- 
GMX DSL: Internet, Telefon und Entertainment für nur 19,99 EUR/mtl.!
http://portal.gmx.net/de/go/dsl02
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Your password expires today problem

[Richard Lamboj]

Hello,

server-p:/# net sam policy set "maximum password age" 4294967294
Account policy "maximum password age" value was: -2 
Account policy "maximum password age" value is now: -2

Is that Output Normal?

Kind Regards

 Original-Nachricht 
> Datum: Thu, 11 Mar 2010 12:58:44 -0500
> Von: "Michael B. Trausch" 
> An: samba@lists.samba.org
> Betreff: Re: [Samba] Your password expires today problem

> On 03/11/2010 02:04 AM, Richard Lamboj wrote:
> > i got this Problem with Samba 3.4.6 and 3.5.1 and yes i know there is
> > already a bug report.
> >
> > Your workaround doesn't work for me. Is there another solution?
> >
> > This don't work: pdbedit -P "maximum password age" -C 4294967294
> >
> > I'am using LDAP. We have Upgraded from 3.2.14. The LDAP Schema Files
> > don't have changed, or?
> 
> I was told on IRC not to use pdbedit for changing the password aging 
> information in Samba, but to instead use "net sam" to set policy.
> 
> You should be able to set the maximum password age using the following 
> command:
> 
> # net sam policy set "maximum password age" 4294967294
> 
> You can set the following policy attributes this way (this is output 
> from "net sam policy list"):
> 
> min password length
> password history
> user must logon to change password
> maximum password age
> minimum password age
> lockout duration
> reset count minutes
> bad lockout attempt
> disconnect time
> refuse machine password change
> 
>   HTH,
>   Mike
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

-- 
GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01

-- 
GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] User Permissions on Trusted Domains

[Richard Lamboj]

Hello,

i have two Questions about Permissions in Trusted Domain.

1.) When User1 from the Domain1 creates a File in a share from antoher 
Domain(Trusted Domain) - lets call it Domain2 - than the File has the 
following Owner: "DOMAIN2\root" and not "DOMAIN1\user1". So "force user = %U" 
does not work and removing this Option won't work too. But the Group settings 
are correct, so the permissions for the Group are "DOMAIN1\Domain Users".

2.) How can i permit a User from a Trusted Domain to be Admin in the Local 
Domain? The User "DOMAIN2\hans" should be Admin in the Domain "DOMAIN1".

Kind Regards

Richi
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Your password expires today problem

[Richard Lamboj]

Hello,

i got this Problem with Samba 3.4.6 and 3.5.1 and yes i know there is already a 
bug report.

Your workaround doesn't work for me. Is there another solution?

This don't work: pdbedit -P "maximum password age" -C 4294967294

I'am using LDAP. We have Upgraded from 3.2.14. The LDAP Schema Files don't have 
changed, or?

Kind Regards

Richi

 Original-Nachricht 
> Datum: Mon, 01 Mar 2010 12:49:28 +0100
> Von: Martin Schmidt 
> An: Marcelo Terres 
> CC: samba@lists.samba.org
> Betreff: Re: [Samba] Your password expires today problem

> Am 26.02.2010 14:51, schrieb Marcelo Terres:
> > Let me understand.
> >
> >
> >
> > On Fri, Feb 26, 2010 at 6:52 AM, Martin Schmidt 
> >  > > wrote:
> >
> > hi again,
> >
> > in my case it works now after setting the "maximum password age"
> > to a point far in future, but not to "never".
> > So this works:
> > pdbedit -P "maximum password age" -C 4294967294
> >
> >
> > This way, the message stops ?
> see below.
> >
> > but this not:
> >
> > pdbedit -P "maximum password age" -C -1
> >
> > I have also re-disabled the users account control property
> > "Password does not expire" using
> > pdbedit -r -c "[]" test
> >
> > Unix username:test
> > NT username: Account Flags:[U  ]
> >
> > User SID: S-1-5-21-1200361472-1041780773-253280391-2648
> > Primary Group SID:S-1-5-21-1200361472-1041780773-253280391-513
> > Full Name:   Home Directory:   \\fecenter\test
> > HomeDir Drive:Q:
> > Logon Script:Profile Path: \\fecenter\profiles\test
> > Domain:   LSFE
> > Account desc:Workstations:Munged dial:
> > Logon time:   0
> > Logoff time:  never
> > Kickoff time: never
> > Password last set:Thu, 25 Feb 2010 10:35:29 CET
> > Password can change:  Thu, 25 Feb 2010 10:35:29 CET
> > Password must change: Sun, 03 Apr 2146 18:03:43 CEST
> >
> > Last bad password   : 0
> > Bad password count  : 0
> > Logon hours : FF
> >
> > I could have hit on it in a moment!
> >
> >
> > Disabling this policy the message stop too ?
> I'm not sure what stoped the message eventually. But I think the first 
> one, the second procedure was only to undo my changes I have done while 
> testing.
> 
> Regards,
> Martin
> 
> >
> > Regards ,
> >
> >
> > regards,
> > Martin
> >
> >
> >
> >
> > Martin Schmidt schrieb:
> >
> > hi,
> > I tried pdbedit -P "maximum password age" -C -1, but with no
> > effect.
> > pdbedit -r -c "[X]" test and retyping the password via
> > "smbpasswd test" had also no effect, curiously "pdbedit -v
> > test" gives following:
> >
> > Unix username:test
> > NT username: Account Flags:[UX ]
> > User SID:
> > S-1-5-21-1200361472-1041780773-253280391-2648
> > Primary Group SID:   
> S-1-5-21-1200361472-1041780773-253280391-513
> > Full Name:   Home Directory:   \\fecenter\test
> > HomeDir Drive:Q:
> > Logon Script:Profile Path:
> > \\fecenter\profiles\test
> > Domain:   LSFE
> > Account desc:Workstations:Munged dial:
> > Logon time:   0
> > Logoff time:  never
> > Kickoff time: never
> > Password last set:Thu, 25 Feb 2010 09:47:06 CET
> > Password can change:  Thu, 25 Feb 2010 09:47:06 CET
> > Password must change: never
> > Last bad password   : 0
> > Bad password count  : 0
> > Logon hours : FF
> >
> >
> > regards,
> > Martin
> >
> >
> >
> > Gaiseric Vandal schrieb:
> >
> > We had a few users with the same problem when we moved the
> > password backend from tdb to ldap.The following
> > command seem to fix it.
> >
> >  pdbedit -P "maximum password age" -C -1
> >
> >
> >
> >
> > On 02/24/2010 04:25 PM, Marcelo Terres wrote:
> >
> > Samba 3.0.24 doesn't have the problem, maybe because
> > it doesn't support the
> > policies domain account (configured with pdbedit).
> >
> > This feature starts in 3.0.25 and the problems with
> > password expiration
> > starts in the version either.
> >
> > Regards,
> >
> > Marcelo H. Terres
> > mhter...@gmail.com 
> > 
> > ICQ: 6649932
> > MSN: mhter...@hot

[Samba] Slow Domain/Workgroup Browsing

[Richard Lamboj]

Hello,

what could be wrong, when Domain/Workgroup Browsing needs ~30 Seconds? When i 
click on a Samba PDC, or a Domain Member Server it appears in one Second, 
without any waiting time. If i take the IP, or Name of the Server it will 
also take only one Second and i can browse the shares.  Just Browsing in an 
Workgroup/Domain needs long. The automatic search for network printers, and 
shares is deactivated. There are no links in the Network Place to shares.

So Browsing Network Neighbourhood is slow...

We have many Computers in an NT4 Domain, but one doesn't appears in the 
Workgroup/Domain View from the Explorer. This Computer is Member in the 
Domain and has an Domain Account. A Login works also without Problem. Its 
just a little bit Strange.

nmblookup shows the Client on Broadcast and from the WINS.

Kind Regards
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] explorer.exe 80-100%

[Richard Lamboj]

Hello,

well this is no Samba issue, but maybe someone know a solution?

The explorer.exe needs more than 80% if i click on "My Computer/Arbeitsplatz" 
and when i click on a network drive from a trusted domain with folders from 
550 to 600 users, the CPU runs from 80% to 100%! This is not on all 
Computers. Some have 0,5% CPU usage from the explorer.exe and others 60% to 
100%. All PCs have the same Configuration and a Anti Virus Protection.

Maybe the Antivirus is running Amok? Its from Kaspersky.

Does someone have the same Problem, or can help me?

Kind Regards Richard
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] drive mapping for one user

[Richard Lamboj]

Am Friday 04 December 2009 12:18:14 schrieb Hubert Choma:
> I would like to map a drive letter  for one user via netlogon script.
> How can I do it ?
> The user is in geo group and I would like to map only for one user not
> group.
> echo off
> C:
> CD \
> NET TIME \\SERWER /SET /YES
> NET USE * /D /YES
> REM NET USE H: /HOME
> NET USE R: \\SERWER\RASTRY$
> NET USE S: \\SERWER\EVID$
> NET USE T: \\SERWER\OSRODEK$
> NET USE U: \\SERWER\TMP$
> NET USE X: \\SERWER\OSNOWA$
> NET USE Y: \\SERWER\GEO1$
> NET USE Z: \\SERWER\GEO$
> NET USE W: \\SERWER\SKANY
> regedit /s \\serwer\netlogon\placesbargeo.reg
>
> 
> Triumf polskich bokserów w Ełku
> Zobacz zdjęcia z walk:
> http://klik.wp.pl/?adr=http%3A%2F%2Fcorto.www.wp.pl%2Fas%2Fwojak.html&sid=9
>26

Hello,

you can specify a logon script for this user:

If you use the smbldap-tools:
smbldap-usermod my_username --sambaLogonScript my_logon_script.bat

or with pdbedit:
pdbedit -u my_username -S my_logon_script.bat

Kind Regards

Richard Lamboj
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba 3/4 - Franky - AD

[Richard Lamboj]

Hello,

is there somewhere a howto? I have compiled Samba 3.4.3 as merged build on 
Debian, but i could not remember which developer packages Samba needs(i have 
tried to compile 3.4.0 without problems - some times ago) and the 
error "configure: error: Merged build required but not possible" is not very 
useful.

So Samba needs a Unix Account - is there a LDAP Server included in Samba, when 
yes - does it support pam, or does i need to store the Unix Users in the 
passwd or could i use a third part LDAP Server like openLDAP?

What is the Problem: "build/smb_build/main.pl: can't 
open '../lib/tevent/python.mk' at build/smb_build/config_mk.pm line 173."?

The errors from 3.4.x are not very clear for me. Okay this file is missing, 
but why?

So Please! Can someone tell me how to use Samba 3.4.x as merged build and as 
AD? 

Kind Regards,
Richard
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] error packet at smbd/sesssetup.c(122 ) cmd=115 (SMBsesssetupX) NT code 0x1c010 002

[Richard Lamboj]

k_ndx = 0
[2009/11/09 13:09:18,  3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
  wct=12 flg2=0xc807
[2009/11/09 13:09:18,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all 
old resources.
[2009/11/09 13:09:18,  3] smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
  Doing spnego session setup
[2009/11/09 13:09:18,  3] smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] 
PrimaryDomain=[]
[2009/11/09 13:09:18,  3] smbd/sesssetup.c:786(reply_spnego_negotiate)
  reply_spnego_negotiate: Got secblob of size 40
[2009/11/09 13:09:18,  3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags)
[2009/11/09 13:09:18,  3] smbd/process.c:1459(process_smb)
  Transaction 2 of length 342 (0 toread)
[2009/11/09 13:09:18,  3] smbd/process.c:1273(switch_message)
  switch message SMBsesssetupX (pid 31190) conn 0x0
[2009/11/09 13:09:18,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/11/09 13:09:18,  3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
  wct=12 flg2=0xc807
[2009/11/09 13:09:18,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all 
old resources.
[2009/11/09 13:09:18,  3] smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
  Doing spnego session setup
[2009/11/09 13:09:18,  3] smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] 
PrimaryDomain=[]
[2009/11/09 13:09:18,  3] libsmb/ntlmssp.c:745(ntlmssp_server_auth)
  Got user=[r.lamboj] domain=[MITARBEITER] workstation=[HP1] len1=24 len2=24
[2009/11/09 13:09:18,  3] auth/auth.c:222(check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user 
[mitarbeiter]\[r.lamb...@[hp1] with the new password interface
[2009/11/09 13:09:18,  3] auth/auth.c:225(check_ntlm_password)
  check_ntlm_password:  mapped user is: [mitarbeiter]\[r.lamb...@[hp1]
[2009/11/09 13:09:18,  3] smbd/sec_ctx.c:210(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/11/09 13:09:18,  3] smbd/uid.c:428(push_conn_ctx)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/11/09 13:09:18,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/11/09 13:09:18,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/11/09 13:09:18,  2] auth/auth.c:320(check_ntlm_password)
  check_ntlm_password:  Authentication for user [r.lamboj] -> [r.lamboj] 
FAILED with error NT code 0x1c010002
[2009/11/09 13:09:18,  3] smbd/error.c:60(error_packet_set)
  error packet at smbd/sesssetup.c(122) cmd=115 (SMBsesssetupX) NT code 
0x1c010002
[2009/11/09 13:09:18,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/11/09 13:09:18,  3] smbd/connection.c:31(yield_connection)
  Yielding connection to
[2009/11/09 13:09:18,  3] smbd/server.c:845(exit_server_common)
  Server exit (failed to receive smb request)

Am Friday 06 November 2009 14:42:36 schrieb Richard Lamboj:
> Hello,
>
> so for the first time: i have forgotten the log rotation(self compiled
> system services), so i will send a detailed log output again when the error
> occurs the next time.
>
> The error occurs on a Domain Member Server. I have used the Winbind Sample
> from the Samba Homepage(later i will switch to the ldap sample). It works
> for some Time and then no one can login to the Server. The Commands "wbinfo
> -u" and "geten passwd" works and shows all the users - but a login is not
> possible.
>
> Information about the Samba Versions:
>  - Samba PDC(3.2.15)
>  - Samba Domain Member(3.4.3) <- upgrade from 3.2.15 to 3.4.3(both versions
> have the same problem)
>
> After a Samba Restart everything works(anyone can login to the server) -
> for a Time.
>
> The Errors(I know some importants parts are missing - logrotation forgotten
> - shame on me):
>
> ...
>
> NTLM CRAP authentication for user [MITARBEITER]\[r.lamboj] returned NT code
> 0x1c010002 (PAM: 4)
>
> ...ser [r.lamboj] -> [r.lamboj] FAILED with error NT code 0x1c010002
>
> error packet at smbd/sesssetup.c(122) cmd=115 (SMBsesssetupX) NT code
> 0x1c010002
>
> ...
>
> Can someone tell me what this means: "pam auth crap domain"? Why crap?
>
> Configuration:
>
> ...
>
>   allow trusted domains = yes
>
>#idmap cache time = 3600
>#winbind cache time = 3600
>winbind cache time = 86400
>idmap cache time = 86400
>
>winbind separator = +
>idmap uid = 1-2
>idmap gid = 1-2
>winbind enum users = yes
>winbind enum groups = yes
>winbind offline logon = No
>winbind trusted domains only = Yes
>idmap backend = tdb
>
> ...
>
> best wishes

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba Upgrade: 3.2.14 -> 3.4.1

[Richard Lamboj]

Hello,

i have made a upgrade from Samba 3.2.14 to Samba 3.4.1. The first time 
everything looks nice. I can login to the Domain Controller without any 
Problem. But when i login to a trusted domain i got "password expired" - a 
windows xp dialog.

pdbedit -r -u [username]

...

Password last set:Son, 04 Jän 2009 15:36:57 UTC
Password can change:  Son, 04 Jän 2009 15:36:57 UTC
Password must change: never

...

best regards
-- 
GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba profile/profdata and Windows XP/Vista/7

[Richard Lamboj]

Hello,

at the moment we have only windows xp clients, but we got some windows vista 
clients and in the future windows 7.

So i think i need to make for every Windows Version a 
profile(\\server\profiles), or? We use for Desktop, My Documents and other 
Directorys Profile Redirections, for a fast logon.

I know(or i think to know) that there is a Variable in Samba for the Windows 
Version, but which Directories need to be seperated?

Is there a Solution to create more Profile Redirections than the Default one in 
the Registry(I mean those default Variables for profiles)?

Have a nice day :-)


-- 
Jetzt kostenlos herunterladen: Internet Explorer 8 und Mozilla Firefox 3 -
sicherer, schneller und einfacher! http://portal.gmx.net/de/go/chbrowser
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Change the OS Level of Windows

[Richard Lamboj]

Hello,

is there a way of changing the OS Level of Windows XP? Some time ago i have 
seen a strange thing. We have running 70 Windows XP Clients and we have three 
trusted domains with Samba. Sometimes logons on trusted domains are very slow 
or doesnt work. So i have searched and searched. I have turned one windows xp 
client after one off. I have found three Windows XP Computer that makes 
troubles. If this three Windows XP Clients are online, than trusted domain 
logins doesnt work! I have formated those Computers and reinstalled Windows XP, 
now it works. So is there a way to manipulate the "OS Level" of Windows? And 
why got a Windows XP Pro client Domain Logon Requests? Strange...

Is there a way to tell the WINS Server wich PDC is responsible for a Domain?

I also have switched the OS Level to 254 to got no troubles(on Samba).
-- 
Jetzt kostenlos herunterladen: Internet Explorer 8 und Mozilla Firefox 3 -
sicherer, schneller und einfacher! http://portal.gmx.net/de/go/chbrowser
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Deploying apps via policy

[Richard Lamboj]

Thats not via policy, but maybe it does what you want: http://wpkg.org/
You can execute commands on the client, or do a silent install.

nice greets from vienna.
-- 
Neu: GMX Doppel-FLAT mit Internet-Flatrate + Telefon-Flatrate
für nur 19,99 Euro/mtl.!* http://portal.gmx.net/de/go/dsl02
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba 3.2.12 - troubels with winbind

[Richard Lamboj]

 Original-Nachricht 
> Datum: Thu, 16 Jul 2009 10:20:26 -0700
> Von: Jeremy Allison 
> An: Richard Lamboj 
> CC: samba@lists.samba.org
> Betreff: Re: [Samba] Samba 3.2.12 - troubels with winbind

> On Thu, Jul 16, 2009 at 11:06:30AM +0200, Richard Lamboj wrote:
> > Hi,
> > 
> > i'am fighting against winbind since Samba 3.2.5
> > 
> > 1.) Sometimes all Windows Maschines hangs couse winbind hangs.
> > 2.) getent passwd is sometimes damned slow
> > 
> > Is that normal? Sometimes it needs 10 to 30 seconds to respond! Should i
> set winbind cache time higher than 300?
> 
> No this isn't normal.Is your DNS set up correctly ?
> These sound like DNS timeouts to me.
> 
> Jeremy.

Good morning,

i have one WINS Server running. The other PDC from the trusted Domains are 
using this WINS Server. Needs it more like a BIND9 DNS? If yes what for entrys 
does it need? The Bind9 has just entrys for the Servers like 
"server-pdc.domain.tld". The same is in the Hosts File. The Windows XP Clients 
are using the WINS Server and got them over DHCP.

This are three trusted domains. On some Maschines all trusted domains need to 
be accessable, without a "winbind hang". The Servers are Samba 3.2.12 only. 
Some Users have mounted the shares of trusted domains, so a "winbind hang" is 
fatal for work!

So pls tell me what i can do. Its clear if winbind hangs the full maschine 
hangs couse it uses libnss_winbind and pam_winbind.

It is hard to find something about trusted domains and Samba. I'am using this 
since over 6 months and got always in troubles :(

have a nice day :)
-- 
GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba 3.2.12 - troubels with winbind

[Richard Lamboj]

Well,

if i open the windows explorer and go to the network and klick on a trusted 
domain, it goes 5 times fast and than it needs 20 seconds to show the server 
and computers. Strange?


-- 
Jetzt kostenlos herunterladen: Internet Explorer 8 und Mozilla Firefox 3 -
sicherer, schneller und einfacher! http://portal.gmx.net/de/go/chbrowser
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba 3.2.12 - troubels with winbind

[Richard Lamboj]

Hi,

i'am fighting against winbind since Samba 3.2.5

1.) Sometimes all Windows Maschines hangs couse winbind hangs.
2.) getent passwd is sometimes damned slow

Is that normal? Sometimes it needs 10 to 30 seconds to respond! Should i set 
winbind cache time higher than 300?

mitarbeiter:/# wbinfo -a PRUEFUNG+u.can%the_top_secret_password
plaintext password authentication succeeded
challenge/response password authentication succeeded

So now:
-> user logins for the first time: winbind hangs and saves it to the cache: the 
logon will take long.
-> the next login will go fast and winbind loads it from the cache
-> after 300 seconds, winbind fetches it again and refresh the cache: the login 
will takes long.

so why is winbind not refreshing the cache in the background and loads allways 
the cache? Would makes things faster.

Well how can i fix it, that winbind will not take so long? When i could not fix 
this issue, i can dig my own grave. Company Leaders does not make jokes :/

Would be nice if someone can help me :)

have a nice - not so hot - day :-)
-- 
Neu: GMX Doppel-FLAT mit Internet-Flatrate + Telefon-Flatrate
für nur 19,99 Euro/mtl.!* http://portal.gmx.net/de/go/dsl02
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba 3.4.0 - session setup failed

[Richard Lamboj]

Hello,

i'am now using Samba 3.4.0 with ldap and tdb as idmap backend. Here you can see 
the DC server-m and server-p. This two Servers are in a trusted relation ship.

the first Time i run this command: "smbclient -U "MITARBEITER+r.lamboj" 
//server-p/all-home" it works fine, but the second time it comes up with 
errors. the same is on the Windows side. I can Access the Shares from the 
Trusted Domain. When i logout and login and try to access the share a second 
time it wont work! I got Errors.

So for a small Time everything works fine, but than i got this errors:

Commands:
pruefung:/#  smbclient -U "MITARBEITER+r.lamboj" //server-p/all-homes
Enter MITARBEITER+r.lamboj's password:
session setup failed: NT_STATUS_INVALID_NETWORK_RESPONSE
pruefung:/#  smbclient -U "MITARBEITER+r.lamboj" //server-p/all-homes
Enter MITARBEITER+r.lamboj's password:
session setup failed: NT code 0x1c010002
pruefung:/#  smbclient -U "MITARBEITER+r.lamboj" //server-p/all-homes
Enter MITARBEITER+r.lamboj's password:
session setup failed: NT code 0x1c010002
pruefung:/#  smbclient -U "MITARBEITER+m.kusel" //server-p/all-homes
Enter MITARBEITER+m.kusel's password:
session setup failed: NT code 0x1c010002

The Error Log:

[2009/07/11 20:30:04,  5] libsmb/cliconnect.c:1753(cli_session_request)
  Sent session request
  user 'MITARBEITER r.lamboj' (from session setup) not permitted to access this 
share (all-homes)
  user 'MITARBEITER r.lamboj' (from session setup) not permitted to access this 
share (all-homes)
  user 'MITARBEITER r.lamboj' (from session setup) not permitted to access this 
share (all-homes)
[2009/07/11 20:33:15,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
  make_connection: refusing to connect with no session setup
[2009/07/11 20:33:15,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
[2009/07/11 20:38:53,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
  Doing spnego session setup
[2009/07/11 20:38:53,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
  Doing spnego session setup
[2009/07/11 20:38:59,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
  Doing spnego session setup
[2009/07/11 20:38:59,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
  Doing spnego session setup
[2009/07/11 20:39:26,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
  Doing spnego session setup
[2009/07/11 20:39:26,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
  Doing spnego session setup
  Doing spnego session setup
  Doing spnego session setup
[2009/07/11 20:39:44,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
  Doing spnego session setup
[2009/07/11 20:39:44,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
  Doing spnego session setup
[2009/07/11 20:40:17,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
  Doing spnego session setup
[2009/07/11 20:40:17,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
  Doing spnego session setup
[2009/07/11 20:40:31,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
  Doing spnego session setup
[2009/07/11 20:40:31,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
  Doing spnego session setup
[2009/07/11 20:41:00,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
  Doing spnego session setup
[2009/07/11 20:41:00,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
  Doing spnego session setup
[2009/07/11 20:41:09,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
  Doing spnego session setup
[2009/07/11 20:41:09,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
  setup_new_v

Re: [Samba] Samba(3.2.12 and 3.4.0) - Winbind - trusted domains - Problem!

[Richard Lamboj]

Ok Here is a Logfile with some nice Errors:

[2009/07/10 11:51:19,  3] winbindd/idmap.c:359(idmap_init_default_domain)
  idmap_init: using 'tdb' as remote backend
[2009/07/10 11:51:19,  3] winbindd/idmap_tdb.c:616(idmap_tdb_db_init)
  Warning: 'idmap uid' not set!
[2009/07/10 11:51:19,  3] winbindd/idmap_tdb.c:630(idmap_tdb_db_init)
  Warning: 'idmap gid' not set!
[2009/07/10 11:51:19,  1] winbindd/idmap_tdb.c:214(idmap_tdb_load_ranges)
  idmap uid missing
[2009/07/10 11:51:19,  0] winbindd/idmap_tdb.c:287(idmap_tdb_open_db)
  Upgrade of IDMAP_VERSION from -1 to 2 is not possible with incomplete 
configuration
[2009/07/10 11:51:19,  1] winbindd/idmap.c:321(idmap_init_domain)
  idmap initialization returned NT_STATUS_UNSUCCESSFUL
[2009/07/10 11:51:19,  1] winbindd/winbindd_user.c:97(winbindd_fill_pwent)
  error getting user id for sid S-1-5-21-1801630100-1912888146-724944298-3714
[2009/07/10 11:51:19,  1] winbindd/winbindd_user.c:856(winbindd_getpwent)
  could not lookup domain user testuser1806200902
[2009/07/10 11:51:19,  0] winbindd/idmap.c:201(smb_register_idmap_alloc)
  idmap_alloc module ldap already registered!
[2009/07/10 11:51:19,  0] winbindd/idmap.c:201(smb_register_idmap_alloc)
  idmap_alloc module tdb already registered!
[2009/07/10 11:56:17,  5] 
winbindd/winbindd_async.c:386(winbindd_lookupname_async)
  Could not find domain for name 'DOMAIN2'
[2009/07/10 11:56:17,  5] winbindd/winbindd_sid.c:116(lookupname_recv)
  lookupname returned an error
[2009/07/10 11:56:17,  5] winbindd/winbindd_util.c:672(init_child_recv)
  Received child initialization response for domain DOMAIN3
[2009/07/10 11:56:17,  5] libsmb/namequery.c:200(saf_fetch)
  saf_fetch: Returning "SERVER-DOM3" for "DOMAIN3" domain

This Errors are coming up 10 Times and winbind needs without cache 1,5 GB 
RAM and 100% CPU Time!

Well i'am using LDAP as idmap Backend...

   idmap uid = 1-2
   idmap gid = 1-2
   idmap backend = ldap:ldap://127.0.0.1/
   ldap idmap suffix = ou=Idmap

I hope someone can help me... :-)

-- 
Neu: GMX Doppel-FLAT mit Internet-Flatrate + Telefon-Flatrate
für nur 19,99 Euro/mtl.!* http://portal.gmx.net/de/go/dsl02
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba(3.2.12 and 3.4.0) - Winbind - trusted domains - Problem!

[Richard Lamboj]

  path = /var/spool/samba
   guest ok = Yes
   printable = Yes
   browseable = Yes

[print$]
   comment = Printer Drivers
   #path = /etc/samba/drivers
   path = /var/lib/samba/printers
   browseable = yes
   guest ok = no
   read only = yes
   write list = "@Domain Admins"

Maybe you can tell me what i can make better in my Samba Configuration.

Every Samba Server here is a Full PDC and have a trusted relationship to one of 
the other Domain.

The Domain Controllers for DOMAIN2 and DOMAIN3 uses the WINS Server from the 
PDC from DOMAIN1.

"net rpc trustdom list" shows all trusted domains.

DOMAIN2:/# net rpc trustdom establish DOMAIN1
Enter DOMAIN2$'s password:
Could not connect to server SERVER-DOM1
Trust to domain DOMAIN1 established

Why is "Could not connect to server SERVER-DOM1" popup? I Have a working WINS, 
LMHOSTS and HOSTS File.

The trusted domain accounts are createt with this command: "smbldap-useradd -a 
-i -P domain1"

NSCD is NOT running on any Server!

Thx for your help :)

MfG Richard Lamboj
-- 
GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba