[Samba] Printing problem! CUPS, XP-pro
Hi, I'we tried posting this before without any luck! I share a printer and some shares on my samba 3.0.2a-debian server. No fancy domain-logon, just plain workgroup connect (smb.conf below). The problem is, sometimes when i choose to print from my XP-pro machine, the printer don't react... The shares work fine, and i read/write from them, but i can't print. Neither cups, samba or syslog throws any error in the log, and the printjob just halts in the XP-printqueue in the systray. The printer shows itself as ready, but if I try to change any options in the printer preferences, I get a CAN'T SAVE CONFIGURATION error! The problem is solved only upon a samba-restart, and then I print and change options without any problems... until next time I can't print (The log below is from samba after a restart) From XP-home, where i type passwd on each connection to the shares, I print everytime without any problems. Please help Thanks Torben --- smb.conf --- [global] netbios name = SERVER workgroup = NR4 server string = server security = user encrypt passwords = true passdb backend = smbpasswd socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=4096 SO_SNDBUF=4096 dns proxy = no load printers = yes printing = cups printcap name = cups log file = /var/log/samba/samba.log log level = 2 [printers] comment = Printere path = /tmp browseable = yes public = yes guest ok = yes writable = yes printable = yes printer admin = @lpadmin SAMBA LOG [2004/04/26 16:05:54, 2] smbd/reply.c:reply_special(105) netbios connect: name1=NR4 name2=XPPRO [2004/04/26 16:05:54, 2] smbd/reply.c:reply_special(112) netbios connect: local=server remote=xppro, name type = 0 [2004/04/26 16:05:54, 2] smbd/sesssetup.c:setup_new_vc_session(591) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2004/04/26 16:05:54, 2] smbd/sesssetup.c:setup_new_vc_session(591) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2004/04/26 16:05:54, 2] auth/auth.c:check_ntlm_password(305) check_ntlm_password: authentication for user [torben] - [torben] - [torben] succeeded -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Printing problem, only XP-PRO
Hi, I share a printer and some shares on my samba 3.0.2a-debian server. No fancy domain-logon, just plain workgroup connect (smb.conf below). The problem is, sometimes when i choose to print from my XP-pro machine, the printer don't react... The shares work fine, and i read/write from them, but i can't print. Neither cups, samba or syslog throws any error in the log, and the printjob just halts in the systray. The printer shows itself as ready, but if I try to change any options in the printer preferences, I get a CAN'T SAVE CONFIGURATION error! The problem is solved only upon a samba-restart, and then I print and change options without any problems... until next time I can't print (The log below is from samba after a restart) From XP-home, where i type passwd on each connection to the shares, I print everytime without any problems. Please help Thanks Torben --- smb.conf --- [global] netbios name = SERVER workgroup = NR4 server string = server security = user encrypt passwords = true passdb backend = smbpasswd socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=4096 SO_SNDBUF=4096 dns proxy = no load printers = yes printing = cups printcap name = cups log file = /var/log/samba/samba.log log level = 2 [printers] comment = Printere path = /tmp browseable = yes public = yes guest ok = yes writable = yes printable = yes printer admin = @lpadmin SAMBA LOG [2004/04/26 16:05:54, 2] smbd/reply.c:reply_special(105) netbios connect: name1=NR4 name2=XPPRO [2004/04/26 16:05:54, 2] smbd/reply.c:reply_special(112) netbios connect: local=server remote=xppro, name type = 0 [2004/04/26 16:05:54, 2] smbd/sesssetup.c:setup_new_vc_session(591) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2004/04/26 16:05:54, 2] smbd/sesssetup.c:setup_new_vc_session(591) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2004/04/26 16:05:54, 2] auth/auth.c:check_ntlm_password(305) check_ntlm_password: authentication for user [torben] - [torben] - [torben] succeeded -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] netlogon, logonscript halts on error
Hi, I have a setup of samba 3.0.2a-Debian and validate domainusers on a LDAP server. Right now I have a major hack to dynamicly mount the appropriate shares for each user. I have a root preexec perlfile that uses a database with info about the shares, to creates a username.bat file, which mounts all the drives, that users is alowed to write or read. My problem is that the winlogon script does not excecute properbly on a domain logon. This is a typical logonscript: NET USE * /DELETE /YES NET USE H: \\SERVER\username /YES NET USE Q: \\SERVER\a_share /YES NET USE J: \\SERVER\another /YES The bat-file excecutes all lines if I call it directly on //SERVER/netlogon/username.bat. It DOES throw a error sometimes, either because no drives are mounted, or because they are already mounted, I'm not realy sure, but it unmounts and mounts the drives. But on the domain-netlogon it halts on the first error, and never executes the rest of the script. Is there a way to create the script so no errors can occour, or force windows to continue executing the script on errors ? Or could my script be constructed smarter? (eg. without the * /DELETE) Thanks... /torben -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Printing problem, CUPS
Hi, I have a wierd problem regarding printing. I use the CUPS-backend on a debian-box to share printers with samba. Sometimes for no apperently reason, a win-box (XP-home) just can't print after a reboot... and no matter how many reboots the win-box makes it just stops working, and dosen't work until samba is restartet and its not a samba crash, because other win-boxes prints perfectly, and the machine that can't print, has home and shares mounted. And I checked the cups-log, and the printjobs never gets in the cups queue, so I assume I is a samba issue. Any help would be appreciated! Thanks Torben I attached: smb.conf cupsd.conf log.smbd log.nmbd smb.conf--- [global] workgroup = AKC netbios name = SERVER1 server string = AKCServer interfaces = eth1 passdb backend = tdbsam socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 os level = 64 preferred master = Yes domain master = No wins support = Yes load printers = Yes printing = cups printcap name = cups [printers] comment = All Printers path = /tmp browseable = no public = yes guest ok = yes writable = no printable = yes printer admin = @lpadmin [homes] comment = HomeDirs read only = No create mask = 0600 directory mask = 0700 browseable = No [share] comment = Share path = /share/ valid users = @lpadmin write list = @lpadmin read only = No create mask = 0775 directory mask = 0775 guest ok = Yes + some more just like share ---/etc/cups/cupsd.conf- DefaultCharset notused LogLevel info PageLog /var/log/cups/page_log PreserveJobHistory Yes PreserveJobFiles No AutoPurgeJobs No MaxCopies 100 MaxJobs 50 MaxJobsPerUser 20 Printcap /var/run/cups/printcap User lp Group lpadmin RIPCache 50m TempDir /tmp Port 631 Browsing On BrowseProtocols cups BrowseAddress 10.10.10.* BrowseAllow 10.10.10.* BrowseDeny All BrowseOrder deny,allow BrowsePort 631 SystemGroup lpadmin Location / Order Deny,Allow Deny From All Allow From 10.10.10.* /Location Location /admin Order Deny,Allow Deny From All Allow From 10.10.10.* /Location -log.smbd- [2004/04/04 06:28:01, 0] printing/print_cups.c:cups_printer_fn(108) Unable to connect to CUPS server localhost - Connection refused [2004/04/04 16:49:58, 1] smbd/service.c:make_connection_snum(705) akc-toshiba (192.168.0.7) connect to service billeder initially as user thorkild (uid=1021, gid=103) (pid 22768) [2004/04/04 16:49:58, 1] smbd/service.c:make_connection_snum(705) akc-toshiba (192.168.0.7) connect to service share initially as user thorkild (uid=1021, gid=103) (pid 22768) [2004/04/04 16:49:59, 1] smbd/service.c:make_connection_snum(705) akc-toshiba (192.168.0.7) connect to service thorkild initially as user thorkild (uid=1021, gid=103) (pid 22768) [2004/04/04 20:15:56, 1] smbd/service.c:make_connection_snum(705) akc-toshiba (192.168.0.7) connect to service farve initially as user thorkild (uid=1021, gid=103) (pid 22768) [2004/04/04 20:17:12, 1] smbd/service.c:close_cnum(887) akc-toshiba (192.168.0.7) closed connection to service farve [2004/04/04 20:17:22, 1] smbd/service.c:make_connection_snum(705) akc-toshiba (192.168.0.7) connect to service farve initially as user thorkild (uid=1021, gid=103) (pid 22768) [2004/04/04 20:18:18, 1] smbd/service.c:close_cnum(887) akc-toshiba (192.168.0.7) closed connection to service farve [2004/04/04 20:20:11, 1] smbd/service.c:make_connection_snum(705) akc-toshiba (192.168.0.7) connect to service farve initially as user thorkild (uid=1021, gid=103) (pid 22768) [2004/04/04 20:21:35, 1] smbd/service.c:close_cnum(887) akc-toshiba (192.168.0.7) closed connection to service farve [2004/04/04 20:23:35, 1] smbd/service.c:make_connection_snum(705) akc-toshiba (192.168.0.7) connect to service farve initially as user thorkild (uid=1021, gid=103) (pid 22768) [2004/04/04 20:24:52, 1] smbd/service.c:close_cnum(887) akc-toshiba (192.168.0.7) closed connection to service farve [2004/04/04 20:26:36, 1] smbd/service.c:make_connection_snum(705) akc-toshiba (192.168.0.7) connect to service farve initially as user thorkild (uid=1021, gid=103) (pid 22768) [2004/04/04 20:27:36, 1] smbd/service.c:close_cnum(887) akc-toshiba (192.168.0.7) closed connection to service farve [2004/04/04 20:40:03, 1] smbd/service.c:make_connection_snum(705) akc-toshiba (192.168.0.7) connect to service farve initially as user thorkild (uid=1021, gid=103) (pid 22768) [2004/04/04 20:41:16, 1] smbd/service.c:close_cnum(887) akc-toshiba (192.168.0.7) closed connection to service farve [2004/04/04 20:47:34, 1] smbd/service.c:make_connection_snum(705) akc-toshiba (192.168.0.7) connect to service farve initially as
[Samba] Resolving computername from ip
Hi, Is there, on a intranet, any way to resolve the computername from its ip ? I have a setup where I know which users are on which ip, and I wan't to notify some events to some users with a smbclient -M. But since I don't know the computername, I don't know any way to send the popups... thanks /torben t -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] LDAP issue, access denied adding machine to domain, and LDAP user can't make unix-login on the box.
Hi,
I have a LDAP backend for my Samba 3.0.2, and everything seems to work
except adding XP machines to the domain, and unix logins with a ldap client.
Since this mail is very long, I have created a small index, so you don't
get exhaustet in the middle of all the logs... ;)
1. LDAP user-creation
2. Group info
3. pam/nss info
4. smb.conf [global]
5. Log from trying to add machine to domain
6. Log fror trying to unix-login the user
7. conclution
1)
I create new users through a webinterface where i have created test3 as
a domain admin and a ldap search returns the following attributes on test3:
uidnumber: 10009
sambasid: S-1-5-21-2409322033-11024189-1315579533-21018
cn: test3
displayname: test3
sn: test3
uid: test3
loginshell: /bin/bash
homedirectory: /samba/home/test3
gidnumber: 512
objectclass: inetOrgPerson
objectclass: sambaSAMAccount
objectclass: posixAccount
sambahomepath: \\LOGIN\homes
sambahomedrive: H:
sambaacctflags: [U ]
sambadomainname: SKOLE1
sambalogonscript: \\LOGIN\logonScript\test3.bat
sambaprofilepath: \\LOGIN\test3\.profile
sambaprimarygroupsid: S-1-5-21-2409322033-11024189-1315579533-512
sambalmpassword: 07E9BB454DCA7EBCAAD3B435B51404EE
sambantpassword: C3F7CE8E37AB104169F3313FF2C6AC6A
userpassword: {MD5}WnsFSpsqzAhNDorh9YhDpA==
I can validate the user with smbclient -L localhost -U test3 but NOT
login the user in linux!
2)
A net groupmap list return the interesting parts like:
Domain Admins (S-1-5-21-2409322033-11024189-1315579533-512) - admin
Domain Computers (S-1-5-21-2409322033-11024189-1315579533-553) - Domain
Computers
And all the admin tools seems to work as well, smbpasswd, and the
smbldat tools in /usr/local/sbin seems to work (I can create new users
with smbldap-useradd.pl)!
and ls -l /usr/local/sbin returns:
-rwxr-xr-x1 root staff 2 Feb 12 16:22 mkntpwd
-rwxr-xr-x1 root staff4367 Feb 10 21:05 smbldap-groupadd.pl
-rwxr-xr-x1 root staff2324 Feb 10 21:05 smbldap-groupdel.pl
-rwxr-xr-x1 root staff7869 Feb 10 21:05 smbldap-groupmod.pl
-rwxr-xr-x1 root staff1884 Feb 10 21:05 smbldap-groupshow.pl
-rwxr-xr-x1 root staff7158 Feb 10 21:05
smbldap-migrate-accounts.pl
-rwxr-xr-x1 root staff4974 Feb 10 21:05
smbldap-migrate-groups.pl
-rwxr-xr-x1 root staff5599 Feb 10 21:05 smbldap-passwd.pl
-rwxr-xr-x1 root staff8995 Feb 10 21:05 smbldap-populate.pl
-rw-r--r--1 root staff5521 Feb 10 21:05 smbldap-tools.spec
-rwxr-x--x1 root admin 16100 Mar 2 18:45 smbldap-useradd.pl
-rwxr-x--x1 root staff 16162 Mar 2 18:37 smbldap-useradd.pl~
-rwxr-xr-x1 root staff2950 Feb 10 21:05 smbldap-userdel.pl
-rwxr-xr-x1 root staff 15085 Feb 10 21:05 smbldap-usermod.pl
-rwxr-xr-x1 root staff1826 Feb 10 21:05 smbldap-usershow.pl
-rwxr-x-wx1 root admin3842 Mar 4 20:21 smbldap_conf.pm
-rwxr-x-wx1 root admin3844 Mar 4 20:17 smbldap_conf.pm~
-rw-r--r--1 root staff 18882 Feb 10 21:05 smbldap_tools.pm
3)
I suspect nss/pam as the problem, but I don't know how to solve it...
My /etc/nsswitch.conf :
passwd: files ldap
group: files ldap
shadow: files ldap
hosts: files dns
networks: files
protocols: db files
services: db files
ethers: db files
rpc:db files
netgroup: nis
4)
- SMB.CONF -
[global]
workgroup = SKOLE1
passdb backend = ldapsam:ldap://127.0.0.1/
ldap suffix = dc=login
ldap machine suffix = ou=machines
ldap user suffix = ou=people
ldap group suffix = ou=groups
ldap admin dn = cn=admin,dc=login
ldap passwd sync = yes
ldap delete dn = yes
ldap filter = ((uid=%u)(objectclass=sambaSamAccount))
ldap ssl = no
passwd chat debug = Yes
passwd program =/usr/local/bin/smbldap-passwd.pl -o %u
passwd chat = *new*password* %n\n *new*password:* %n\ *successfully*
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
add machine script = /usr/local/sbin/smbldap-useradd.pl -a -w %m
add user script = /usr/local/sbin/smbldap-useradd.pl -a %u
delete user script = /usr/local/sbin/smbldap-useradd.pl -d %u
add group script = /usr/local/sbin/smbldap-useradd.pl -a -g %g
delete group script = /usr/local/sbin/smbldap-useradd.pl -d -g %g
add user to group script = /usr/local/sbin/smbldap-useradd.pl -j -u
%u -g %g
delete user from group script = /usr/local/sbin/smbldap-useradd.pl
-j -u %u -g %g
set primary group script = /usr/local/sbin/smbldap-useradd.pl -m -u
%u -gid %g
server string = thePri Samba Server
netbios name = THEPRI
#printcap name = cups
load printers = no
#printing = cups
log file = /var/log/samba/%m.log
log level = 3
max log size = 5000
security = user
encrypt passwords = true
socket options = TCP_NODELAY
[Samba] calculating uidnumber
Hi, I'm building my system on a LDAP backend, but I wan't to have full control over the user creation-process. I have developed a backend in php, to handle most of my needs. Except for calculating the uidnumber, from where i calculate sambaSID... My question is, can I call a function somewhere that returns the next uidnumber/gidnumber? or do I have to look at idmap? Thanks Torben -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] calculating passwords, and what to do with sambaLMPassword
Hi,
I'm trying to calculate the passwords so i can change them from a
php-gui, an as i see it, userPassword can have any form if the
cryptation algorithm is stated before the hash, like {md5}blahblah32bit.
In the docs, it states that sambaNTPassword is a md4 hash, wich should
be calculatable (haven't done it yet though).
And last for the sambaLMPassword:
I can't find any documentation about how it's caclulated, In some
testcases i found online, it just have the same value as
sambaNTPassword, but for some reason they differ in my configuration...
I'm wondering in general about the sambaLMPassword attribute, is it only
for OS/2 issues? or does it have some usable features as well ? (this IS
a linux channel right ;) ..
Cheers
/torben
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] ldap, quickie...
Hi, I'm a bit confused over the whole dn concept various documentation states that I should create new samba-entries with dn: uid=user,ou=user-org,dc=domain and other states that i should do it with dn: cn=user,ou=user-org,dc=domain Right now i have a few entries, created both ways... and since i'm not quite home in ldap, I haven't yet testet how each dn works... or if there is a difference at all... Perhaps it's a stupid question, but it just confuses me Cheers /torben -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem validating with LDAP and Samba3.0.1debian
Hi, I'm running openldap and samba3.0.1 from my debian system, but I have used many many hours trying to get samba to validate users on the ldap... And is now turning to the last resort ... This is my configuration __ the important lines in smb.conf looks like this... -- [global] workgroup = SKOLE passdb backend = ldapsam:ldap://127.0.0.1/ ldap suffix = dc=login ldap machine suffix = ou=machines ldap user suffix = ou=people ldap group suffix = ou=groups ldap admin dn = cn=admin,dc=login netbios name = thePri load printers = no security = user encrypt passwords = true socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local master = yes os level = 40 domain master = yes preferred master = yes domain logons = yes wins support = yes dns proxy = no ___ slapd.conf look like this: --- allow bind_v2 include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema include /etc/ldap/schema/inetorgperson.schema include /etc/ldap/schema/nis.schema include /etc/ldap/schema/samba.schema schemacheck on pidfile /var/run/slapd/slapd.pid argsfile/var/run/slapd.args loglevel256 modulepath /usr/lib/ldap moduleload back_ldbm databaseldbm suffix dc=login rootdn cn=admin,dc=login rootpw MyPaSsWoRd directory /var/lib/ldap index objectClass,uid,uidNumber,gidNumber,memberUid eq lastmod on access to attribute=userPassword by dn=cn=admin,dc=login write by anonymous auth by self write by * none access to dn.base= by * read access to * by dn=cn=admin,dc=login write by * read _ /etc/ldap.conf - HOST127.0.0.1 BASEdc=login _ the samba.schema is copyed from the samba 3.0.1 source (/examples/LDAP/samba.schema) and the ldap is populated with the polulate tool from smb-tools, and i can see the ldap tree is working with lam(lam.sf.net), and create new users from here... a pdbedit -L revels the users as well the populate tool creates an Administrator, and when I do smbpasswd Administrator it looks like it succeed, the values in sambaNTPassword changes anyway... THE PROBLEM: I use the two cases to show my problem, one case with correct passw, and one with wrong passwd. [EMAIL PROTECTED]:~$ smbclient -L localhost -U Administrator Password: (CORRECT PASSWORD) session setup failed: NT_STATUS_LOGON_FAILURE The log for the above looks like this - Feb 14 21:04:54 compaq slapd[3739]: conn=8 op=2 SRCH base=dc=login scope=2 filter=((uid=Administrator)(objectClass=sambaSamAccount)) Feb 14 21:04:54 compaq slapd[3739]: conn=8 op=2 SRCH attr=uid uidNumber gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial Feb 14 21:04:54 compaq slapd[3739]: conn=8 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Feb 14 21:04:54 compaq smbd[3754]: [2004/02/14 21:04:54, 0] auth/auth_sam.c:check_sam_security(221) Feb 14 21:04:54 compaq smbd[3754]: check_sam_security: make_server_info_sam() failed with 'NT_STATUS_NO_SUCH_USER' Feb 14 21:04:54 compaq slapd[3737]: conn=8 fd=9 closed - [EMAIL PROTECTED]:~$ smbclient -L localhost -U Administrator Password: (WRONG PASSWORD) session setup failed: NT_STATUS_LOGON_FAILURE ___ The log for the above looks like this --- Feb 14 21:20:56 compaq slapd[3739]: conn=9 op=2 SRCH base=dc=login scope=2 filter=((uid=Administrator)(objectClass=sambaSamAccount)) Feb 14 21:20:56 compaq slapd[3739]: conn=9 op=2 SRCH attr=uid uidNumber gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial Feb 14 21:20:56 compaq slapd[3739]: conn=9 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Feb 14 21:20:56 compaq slapd[3737]: conn=9 fd=9 closed - So, it seems that the samba-backend recognizes the
Re: [Samba] Problem validating with LDAP and Samba3.0.1debian
boka wrote: Torben Thomsen wrote: I'm running openldap and samba3.0.1 ... forget about 3.0.1 ! better use 3.0.0 or 3.0.2a Oooops typo ... I ment using 3.0.2debian, and my problem is still real :) cheers /torben -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
