[Samba] samba says domain not available in debian squeeze

2013-06-10 Thread deconya
Hi

I continue with problems using my samba +openldap. At now I was
discovering one problem more, because I separated samba and ldap in two
separated servers and not was SRV registers in my bind.

Now I continue with domain not available, using wizard in windows XP
platform, I can register correctly my client in ldap but not connects to
current profiles and I can't generate new profiles.

I was checking bind, openldap and samba config, but I don't know where
can be the problem and I'm starts to be critical.
*
*[global]
   workgroup = DOM
   netbios name = DOM-PDC
   security = user
   interfaces = eth0 127.0.0.0/8 10.0.0.0/24 10.0.1.0/24 10.0.4.0/24
10.0.8.0/22
   server string = DOM Primary Domain Controller
   encrypt passwords = true

   unix password sync = no
   ldap passwd sync = yes
   passwd program = /usr/bin/smbldap-passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .

   log level = 2
   syslog = 0
   log file = /var/log/samba/log.%m
   max log size = 1000
   time server = yes
   mangling method = hash2
   Dos charset = 850
   Unix charset = UTF-8

   domain logons = yes
   domain master = yes


   logon path =
   logon drive =
   logon home =
   logon script = logon.bat

   local master = yes
   preferred master = yes
   os level = 65
   wins support = yes
   dns proxy = yes
   panic action = /usr/share/samba/panic-action %d
   server signing = auto
   server schannel = auto
   winbind trusted domains only = yes
   winbind use default domain = yes

   passdb backend = ldapsam:ldap://10.0.0.11/;
   idmap config * : backend = ldap://10.0.0.11/
   ldap admin dn = cn=admin,dc=DOM,dc=es
   ldap suffix = dc=DOM,dc=es
   ldap group suffix = ou=Groups
   ldap user suffix = ou=Users
   ldap machine suffix = ou=Computers
   ldap idmap suffix = ou=Idmap
   ldap ssl = no
   ldap delete dn = yes
   add user script = /usr/sbin/smbldap-useradd -m %u
   delete user script = /usr/sbin/smbldap-userdel %u
   add machine script = /usr/sbin/smbldap-useradd -w %u
   add group script = /usr/sbin/smbldap-groupadd -p %g
   delete group script = /usr/sbin/smbldap-groupdel %g
   add user to group script = /usr/sbin/smbldap-groupmod -m %u %g
   delete user from group script = /usr/sbin/smbldap-groupmod -x %u %g
   set primary group script = /usr/sbin/smbldap-usermod -g %g %u

#   smb ports = 139
   load printers = yes
   create mask = 0774
   directory mask = 0775
   nt acl support = no
   printing = cups
   printcap name = cups
   deadtime = 60
   keepalive = 300
   guest account = nobody
   map to guest = bad user
   dont descend = /proc,/dev,/etc,/lib,/lost+found
   show add printer wizard = yes
   preserve case = yes
   short preserve case = yes
   case sensitive = no
   usershare allow guests = yes

debug timestamp = Yes
debug prefix timestamp = Yes
debug hires timestamp = Yes
debug pid = Yes
debug uid = Yes
debug class = Yes
ldap debug level = 5
ldap debug threshold = 10
[netlogon]

#   comment = Network Logon Service
   path = /var/lib/samba/netlogon
#   admin users = root
#   guest ok = yes
   read only = yes
   browseable = no

Any test to do or idea why the message is RPC not responding?

Thanks
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] domain not available

2013-06-06 Thread deconya
Hi

continue with my problem. In this moment Im with all errors solved but I
continue with same problem.

The error Error was Transport endpoint is not connected was solved with

smb ports =139

in smb.conf

Im looking why windows seems to not check really if domain exists, goes
too fast. I was checking ldap profiles and apparently all is right.
Using windows XP wizard to add domain when I go to add network user
appears the Trust relationship error, but is Windows XP and there is no
support in docs.

Any idea?

thanks
El 05/06/13 13:20, deconya escribió:
 Hi

 in log.smbd appears the error

 [2013/06/05 13:13:43.397318,  2, pid=5831, effective(0, 0), real(0,
 0)]   getpeername failed. Error was Transport endpoint is not connected
 [2013/06/05 13:13:43.397427,  2, pid=5831, effective(0, 0), real(0,
 0)]   getpeername failed. Error was Transport endpoint is not connected
 [2013/06/05 13:13:43.399714,  2, pid=5992, effective(0, 0), real(0,
 0)]   getpeername() failed - Transport endpoint is not connected
 [2013/06/05 13:14:27.190705,  2, pid=6004, effective(0, 0), real(0,
 0)]   getpeername() failed - Transport endpoint is not connected

 I don't know where can be the problem. Any idea?

 Thanks
 El 05/06/13 13:12, deconya escribió:
 More info

 doing netstat:
 tcp0  0 0.0.0.0:139 0.0.0.0:*  
 LISTEN  5831/smbd  

 but nmbd daemon not appear. log says:

 [2013/06/05 13:07:14,  2]
 nmbd/nmbd_become_lmb.c:538(become_local_master_browser)
   become_local_master_browser: Starting to become a master browser for
 workgroup MYDOMAIN on subnet 10.0.0.2
 [2013/06/05 13:07:22,  0]
 nmbd/nmbd_become_lmb.c:397(become_local_master_stage2)
   *
  
   Samba name server MYDOMAIN-PDC is now a local master browser for
 workgroup MYDOMAIN on subnet 10.0.0.2
  
   *
 [2013/06/05 13:07:22,  2]
 nmbd/nmbd_browsesync.c:108(announce_local_master_browser_to_domain_master_browser)
   announce_local_master_browser_to_domain_master_browser:
   We are both a domain and a local master browser for workgroup
 MYDOMAIN.  Do not announce to ourselves.
 [2013/06/05 13:07:22,  2] nmbd/nmbd_browsesync.c:152(sync_with_dmb)
   sync_with_dmb:
   Initiating sync with domain master browser MYDOMAIN-PDC20 at IP
 10.0.0.2 for workgroup MYDOMAIN

 but not appears listening nmbd. Is normal?

 Thanks
 El 05/06/13 12:15, deconya escribió:
 Hi list

 Im using samba 3.5.6 with openldap in a debian squeeze using a domain,
 and now Im with a problem inside the LAN using roaming profiles, only I
 can't join in the domain. Appears domain not available message.

 My smb.conf

  [profiles]
comment = Users profiles
path = /var/lib/samba/profiles
browseable = no
writable = yes
read only = no
create mask = 0700
directory mask = 0700
csc policy = disable
force user = %U
map system = no
map hidden = no
map archive = no
map readonly = no
ea support = yes
store dos attributes = yes

 And log error is:

 [2013/06/05 12:13:27.683220,  1, pid=4095, effective(0, 0), real(0, 0)]
 [2013/06/05 12:13:27.683266,  2, pid=4095, effective(0, 0), real(0,
 0)]   getpeername failed. Error was Transport endpoint is not connected
   pid[4095] Error writing 4 bytes to client 0.0.0.0. -1. (Connection
 reset by peer)

 Where can be the problem?

 Thanks

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] domain not available

2013-06-05 Thread deconya
Hi list

Im using samba 3.5.6 with openldap in a debian squeeze using a domain,
and now Im with a problem inside the LAN using roaming profiles, only I
can't join in the domain. Appears domain not available message.

My smb.conf

 [profiles]
   comment = Users profiles
   path = /var/lib/samba/profiles
   browseable = no
   writable = yes
   read only = no
   create mask = 0700
   directory mask = 0700
   csc policy = disable
   force user = %U
   map system = no
   map hidden = no
   map archive = no
   map readonly = no
   ea support = yes
   store dos attributes = yes

And log error is:

[2013/06/05 12:13:27.683220,  1, pid=4095, effective(0, 0), real(0, 0)]
[2013/06/05 12:13:27.683266,  2, pid=4095, effective(0, 0), real(0,
0)]   getpeername failed. Error was Transport endpoint is not connected
  pid[4095] Error writing 4 bytes to client 0.0.0.0. -1. (Connection
reset by peer)

Where can be the problem?

Thanks
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] domain not available

2013-06-05 Thread deconya
More info

doing netstat:
tcp0  0 0.0.0.0:139 0.0.0.0:*  
LISTEN  5831/smbd  

but nmbd daemon not appear. log says:

[2013/06/05 13:07:14,  2]
nmbd/nmbd_become_lmb.c:538(become_local_master_browser)
  become_local_master_browser: Starting to become a master browser for
workgroup MYDOMAIN on subnet 10.0.0.2
[2013/06/05 13:07:22,  0]
nmbd/nmbd_become_lmb.c:397(become_local_master_stage2)
  *
 
  Samba name server MYDOMAIN-PDC is now a local master browser for
workgroup MYDOMAIN on subnet 10.0.0.2
 
  *
[2013/06/05 13:07:22,  2]
nmbd/nmbd_browsesync.c:108(announce_local_master_browser_to_domain_master_browser)
  announce_local_master_browser_to_domain_master_browser:
  We are both a domain and a local master browser for workgroup
MYDOMAIN.  Do not announce to ourselves.
[2013/06/05 13:07:22,  2] nmbd/nmbd_browsesync.c:152(sync_with_dmb)
  sync_with_dmb:
  Initiating sync with domain master browser MYDOMAIN-PDC20 at IP
10.0.0.2 for workgroup MYDOMAIN

but not appears listening nmbd. Is normal?

Thanks
El 05/06/13 12:15, deconya escribió:
 Hi list

 Im using samba 3.5.6 with openldap in a debian squeeze using a domain,
 and now Im with a problem inside the LAN using roaming profiles, only I
 can't join in the domain. Appears domain not available message.

 My smb.conf

  [profiles]
comment = Users profiles
path = /var/lib/samba/profiles
browseable = no
writable = yes
read only = no
create mask = 0700
directory mask = 0700
csc policy = disable
force user = %U
map system = no
map hidden = no
map archive = no
map readonly = no
ea support = yes
store dos attributes = yes

 And log error is:

 [2013/06/05 12:13:27.683220,  1, pid=4095, effective(0, 0), real(0, 0)]
 [2013/06/05 12:13:27.683266,  2, pid=4095, effective(0, 0), real(0,
 0)]   getpeername failed. Error was Transport endpoint is not connected
   pid[4095] Error writing 4 bytes to client 0.0.0.0. -1. (Connection
 reset by peer)

 Where can be the problem?

 Thanks

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] domain not available

2013-06-05 Thread deconya
Hi

in log.smbd appears the error

[2013/06/05 13:13:43.397318,  2, pid=5831, effective(0, 0), real(0,
0)]   getpeername failed. Error was Transport endpoint is not connected
[2013/06/05 13:13:43.397427,  2, pid=5831, effective(0, 0), real(0,
0)]   getpeername failed. Error was Transport endpoint is not connected
[2013/06/05 13:13:43.399714,  2, pid=5992, effective(0, 0), real(0,
0)]   getpeername() failed - Transport endpoint is not connected
[2013/06/05 13:14:27.190705,  2, pid=6004, effective(0, 0), real(0,
0)]   getpeername() failed - Transport endpoint is not connected

I don't know where can be the problem. Any idea?

Thanks
El 05/06/13 13:12, deconya escribió:
 More info

 doing netstat:
 tcp0  0 0.0.0.0:139 0.0.0.0:*  
 LISTEN  5831/smbd  

 but nmbd daemon not appear. log says:

 [2013/06/05 13:07:14,  2]
 nmbd/nmbd_become_lmb.c:538(become_local_master_browser)
   become_local_master_browser: Starting to become a master browser for
 workgroup MYDOMAIN on subnet 10.0.0.2
 [2013/06/05 13:07:22,  0]
 nmbd/nmbd_become_lmb.c:397(become_local_master_stage2)
   *
  
   Samba name server MYDOMAIN-PDC is now a local master browser for
 workgroup MYDOMAIN on subnet 10.0.0.2
  
   *
 [2013/06/05 13:07:22,  2]
 nmbd/nmbd_browsesync.c:108(announce_local_master_browser_to_domain_master_browser)
   announce_local_master_browser_to_domain_master_browser:
   We are both a domain and a local master browser for workgroup
 MYDOMAIN.  Do not announce to ourselves.
 [2013/06/05 13:07:22,  2] nmbd/nmbd_browsesync.c:152(sync_with_dmb)
   sync_with_dmb:
   Initiating sync with domain master browser MYDOMAIN-PDC20 at IP
 10.0.0.2 for workgroup MYDOMAIN

 but not appears listening nmbd. Is normal?

 Thanks
 El 05/06/13 12:15, deconya escribió:
 Hi list

 Im using samba 3.5.6 with openldap in a debian squeeze using a domain,
 and now Im with a problem inside the LAN using roaming profiles, only I
 can't join in the domain. Appears domain not available message.

 My smb.conf

  [profiles]
comment = Users profiles
path = /var/lib/samba/profiles
browseable = no
writable = yes
read only = no
create mask = 0700
directory mask = 0700
csc policy = disable
force user = %U
map system = no
map hidden = no
map archive = no
map readonly = no
ea support = yes
store dos attributes = yes

 And log error is:

 [2013/06/05 12:13:27.683220,  1, pid=4095, effective(0, 0), real(0, 0)]
 [2013/06/05 12:13:27.683266,  2, pid=4095, effective(0, 0), real(0,
 0)]   getpeername failed. Error was Transport endpoint is not connected
   pid[4095] Error writing 4 bytes to client 0.0.0.0. -1. (Connection
 reset by peer)

 Where can be the problem?

 Thanks

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] unknown files of samba server

2012-05-07 Thread deconya
Hi

Im maintaining a samba server and Im with an unknown files inside
/var/spool/samba. It seems to refer users but I don't know If I can delete
something or not. files are type

-rw--- 1 usuari Domain Users0 2012-03-07 17:05
smbprn.4993.KyICia

Someone knows what is it?

Thanks
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] configuring a backup domain server

2012-05-04 Thread deconya
Hi

Im looking to config a BDC with ldap. It seems the connection with ldap
primary server works, but Im confused with the shared folders. I understood
when you creates a BDC needs to put the same global information:

[global]
   workgroup = DOMAIN
   netbios name = DOMAIN-PDC
   security = user
   enable privileges = yes
   interfaces = 127.0.0.0/8 eth0 10.0.1.0/24 10.0.0.0/24
   server string = DOMAIN Primary Domain Controller
   encrypt passwords = true

   unix password sync = no
   ldap passwd sync = yes
   passwd program = /usr/bin/smbldap-passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .

   log level = 1
   syslog = 0
   log file = /var/log/samba/log.%m
   max log size = 1000
   time server = yes
   #socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   mangling method = hash2
   Dos charset = 850
   Unix charset = UTF-8

   domain logons = yes
   domain master = yes

   logon path =
   logon drive =
   logon home =
   logon script = logon.bat

   local master = yes
   preferred master = yes
   os level = 65
   wins support = yes
   dns proxy = yes
   panic action = /usr/share/samba/panic-action %d
   server signing = auto
   server schannel = auto
   winbind trusted domains only = yes
   winbind use default domain = yes

   passdb backend = ldapsam:ldap://127.0.0.1;
   ldap admin dn = cn=admin,dc=domain,dc=es
   ldap suffix = dc=domain,dc=es
   ldap group suffix = ou=Groups
   ldap user suffix = ou=Users
   ldap machine suffix = ou=Computers
   ldap idmap suffix = ou=Idmap
   ldap ssl = no
   ldap delete dn = yes
   add user script = /usr/sbin/smbldap-useradd -m %u
   delete user script = /usr/sbin/smbldap-userdel %u
   add machine script = /usr/sbin/smbldap-useradd -w %u
   add group script = /usr/sbin/smbldap-groupadd -p %g
   delete group script = /usr/sbin/smbldap-groupdel %g
   add user to group script = /usr/sbin/smbldap-groupmod -m %u %g
   delete user from group script = /usr/sbin/smbldap-groupmod -x %u %g
   set primary group script = /usr/sbin/smbldap-usermod -g %g %u

   load printers = yes
   create mask = 0774
   directory mask = 0775
   nt acl support = no
   printing = cups
   printcap name = cups
   deadtime = 60
   keepalive = 60
   guest account = nobody
   map to guest = bad user
   dont descend = /proc,/dev,/etc,/lib,/lost+found
   show add printer wizard = yes
   preserve case = yes
   short preserve case = yes
   case sensitive = no
   usershare allow guests = yes

And I understand the BDC is the same but changing connection.

[global]

   workgroup = DOMAIN
   netbios name = DOMAIN-PDC

   security = user
   enable privileges = yes
   interfaces = 127.0.0.0/8 eth0 10.0.1.0/24 10.0.0.0/24
#   bind interfaces only = yes
   server string = DOMAIN Primary Domain Controller
   encrypt passwords = true
#   obey pam restrictions = no
#   pam password change = yes

   unix password sync = no
   ldap passwd sync = yes
   passwd program = /usr/bin/smbldap-passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .

   log level = 1
   syslog = 0
   log file = /var/log/samba/log.%m
   max log size = 1000
   time server = yes
   #socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   mangling method = hash2
   Dos charset = 850
   Unix charset = UTF-8

   domain logons = yes
   domain master = no

   logon path =
   logon drive =
   logon home =
   logon script = logon.bat

   local master = yes
   preferred master = yes
   os level = 65
   wins support = no
   wins server = 10.0.0.2
   dns proxy = yes
   panic action = /usr/share/samba/panic-action %d
   server signing = auto
   server schannel = auto
   winbind trusted domains only = yes
   winbind use default domain = yes

   passdb backend = ldapsam:ldap://ldap.domain.es;
   ldap admin dn = cn=admin,dc=domain,dc=es
   ldap suffix = dc=domain,dc=es
   ldap group suffix = ou=Groups
   ldap user suffix = ou=Users
   ldap machine suffix = ou=Computers
   ldap idmap suffix = ou=Idmap
   ldap ssl = no
   ldap delete dn = yes
   add user script = /usr/sbin/smbldap-useradd -m %u
   delete user script = /usr/sbin/smbldap-userdel %u
   add machine script = /usr/sbin/smbldap-useradd -w %u
   add group script = /usr/sbin/smbldap-groupadd -p %g
   delete group script = /usr/sbin/smbldap-groupdel %g
   add user to group script = /usr/sbin/smbldap-groupmod -m %u %g
   delete user from group script = /usr/sbin/smbldap-groupmod -x %u %g
   set primary group script = /usr/sbin/smbldap-usermod -g %g %u

   load printers = yes
   create mask = 0774
   directory mask = 0775
   nt acl support = no
   printing = cups
   printcap name = cups
   deadtime = 60
   keepalive = 60
   guest account = nobody
   map to guest = bad user
   dont descend = /proc,/dev,/etc,/lib,/lost+found
   show add printer wizard = yes
   preserve case = yes
   short preserve case = yes
   case sensitive = no
   usershare 

Re: [Samba] configuring a backup domain server

2012-05-04 Thread deconya
OK, but If I do this the file when I need to put a new shared folder where
will be? Understanding how a BDC all the information must be vinculated no?

Its recommended to use NFS to connect the servers?

Thanks

2012/5/4 TAKAHASHI Motonobu mo...@monyo.com

 From: deconya elmailperso...@gmail.com
 Date: Fri, 4 May 2012 13:46:23 +0200

  Im looking to config a BDC with ldap. It seems the connection with
  ldap primary server works, but Im confused with the shared
  folders. I understood when you creates a BDC needs to put the same
  global information:

  [global]
 workgroup = DOMAIN
 netbios name = DOMAIN-PDC
 (snip)

 You have to set a different netbios name to your BDC, for example
 netbios name = DOMAIN-BDC.

  And I don't know the shared folders how goes. I understand If I use BDC
 how
  other file server to access to new folders putted inside BDC servers the
  steps are:
 
  include folders in BDC smb.conf.
  windows XP clients will use the path \\domain-pdc\sharedfolder
 
  is correct?

 So you can access to shared folders on BDC like
  \\domain-bdc\sharedfolder.

 ---
 TAKAHASHI Motonobu mo...@samba.gr.jp


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba