Re: [Samba] "Failed to create Users" problem. PLUS further evidence
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Daryl wrote, On 01-08-2007 18:05: > Hi Felipe (and others), >Thanks very much for your help so far. You are welcome. :-) > Felipe Augusto van de Wiel wrote: >>>Assuming that's true, how would I change things >>> to get this problem to go away? Add some kind of group >>> mapping or something? How does one go about doing that? >>> >> Did you checked the Release Notes? And the Samba >> Official HOWTO about Group Mapping? > > I did check out the Release Notes, but I'm no samba > expert so I didn't fully understand them. I will > check out the HOWTO on Group Mapping later. Before 3.0.23, Samba automagically create some groupmaps when you use tdbsam, after that, you need to create them by yourself. The HOWTO has the specific commands, it is not a big chapter and it is really relevant to read and understand. > I was hoping you (or anybody, really) had a quick way > to get this done that didn't require me to do lots of > research beforehand. Maybe somebody has come across > and solved this problem before, and knew exactly what > to do with say 1 simple command or something. Anyway, > I'll look into it myself later. Unfortunately, Samba requires some understanding of what's going on, in this specific case it is not one line that will solve your problem, but a few of them and there is not much point in repeating the docs here, this part of the HOWTO is good and clear on what to do. You will use 'net groupmap'. And of course, you need to have *nix accounts on the server that are mapped by Samba to convert users from "Windows world" in real users and permissions. >> Probably because you are not login anonymously from >> Windows. Anonymous logins are different from WinXP >> logins, AFAICT. > > Okay, I didn't know that. When I try as a > specific user, I get the following: > > $ smbclient -L //www -U daryl > Password: > session setup failed: NT_STATUS_LOGON_FAILURE Ok, this is a user/password error. So, you are really missing the user or something else related to permissions on the server. >When I check the log for that machine on the > samba server, the log is filled with the same sorts > of messages as the generic log.smbd (but what you see > below is from "log.[worstation-name]"): > > [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_administrators(792) > create_builtin_administrators: Failed to create Administrators > [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_users(758) > create_builtin_users: Failed to create Users > [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_administrators(792) > create_builtin_administrators: Failed to create Administrators > [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_users(758) > create_builtin_users: Failed to create Users > >I also saw this at the top of that log file, which seems strange > to me since I'm using tdbsam: > > [2007/08/01 10:06:10, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(241) > startsmbfilepwent_internal: file /var/lib/samba/private/smbpasswd did > not exist. File successfully created. I will keep my hint, try to create the groups, users and groupmaps and make sure that everything is consistent (SIDs, permissions, shares, usernames, uids, gids). > I tried increasing the log level to 10 before, and didn't see > anything unusual beyond the errors reported already. I will try that > again though, and get back to you. It is not just the error, but also when the error happens and what happened before it. > Thanks again for the help. > Sincerely, >Daryl. Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGsdEICj65ZxU4gPQRCIwgAKCa4AFEmHT4nCa6m0qJwNVB4AJA1ACdGUGm ava9r1ZQTQL2kZse1W9b61s= =l0Yo -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] "Failed to create Users" problem. PLUS further evidence
Hi Felipe (and others), Thanks very much for your help so far. Felipe Augusto van de Wiel wrote: Assuming that's true, how would I change things to get this problem to go away? Add some kind of group mapping or something? How does one go about doing that? Did you checked the Release Notes? And the Samba Official HOWTO about Group Mapping? I did check out the Release Notes, but I'm no samba expert so I didn't fully understand them. I will check out the HOWTO on Group Mapping later. I was hoping you (or anybody, really) had a quick way to get this done that didn't require me to do lots of research beforehand. Maybe somebody has come across and solved this problem before, and knew exactly what to do with say 1 simple command or something. Anyway, I'll look into it myself later. Probably because you are not login anonymously from Windows. Anonymous logins are different from WinXP logins, AFAICT. Okay, I didn't know that. When I try as a specific user, I get the following: $ smbclient -L //www -U daryl Password: session setup failed: NT_STATUS_LOGON_FAILURE When I check the log for that machine on the samba server, the log is filled with the same sorts of messages as the generic log.smbd (but what you see below is from "log.[worstation-name]"): [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_administrators(792) create_builtin_administrators: Failed to create Administrators [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_users(758) create_builtin_users: Failed to create Users [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_administrators(792) create_builtin_administrators: Failed to create Administrators [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_users(758) create_builtin_users: Failed to create Users I also saw this at the top of that log file, which seems strange to me since I'm using tdbsam: [2007/08/01 10:06:10, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(241) startsmbfilepwent_internal: file /var/lib/samba/private/smbpasswd did not exist. File successfully created. I am going to hook up wireshark and watch what's going on at the network level when I get a free moment. In the meantime, any suggestions whatsoever are welcome. If everything is ok with you user and group account, group mappings and SID, everything should be ok, getting the error about builtin accounts with the fact of the migration hint me to the BUILTIN Group problems. It could be something else, increased log levels (10) can help a lot in this context, you can also test simples shares decreasing the security level just to figure out what's going on I tried increasing the log level to 10 before, and didn't see anything unusual beyond the errors reported already. I will try that again though, and get back to you. Thanks again for the help. Sincerely, Daryl. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] "Failed to create Users" problem. PLUS further evidence
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Daryl wrote, On 01-08-2007 11:48: > Hi, > > Felipe Augusto van de Wiel wrote: >> Hmmm... the builtin groups changed a little bit in the >> course of Samba releases, did you check Release Notes or your >> FC packages about that? If I'm not wrong this happened on 3.0.23 >> > >Assuming that's true, how would I change things > to get this problem to go away? Add some kind of group > mapping or something? How does one go about doing that? Did you checked the Release Notes? And the Samba Official HOWTO about Group Mapping? >I may try verifying that 3.0.23 introduced this > issue by rolling back samba to its previous version > (whatever it was). We'll see. Ok. >ALSO > >My Windows XP client also dual-boots into Fedora > 7 as well, and from Fedora 7 on the workstation I can > access the samba shares: > > $ smbclient -L //www > Password: > Anonymous login successful > Domain=[HOME] OS=[Unix] Server=[Samba 3.0.25b-2.fc7] > > Sharename Type Comment > - --- > homes Disk Home Directories > files Disk > IPC$IPC IPC Service (Samba Server Version > 3.0.25b-2.fc7) > Anonymous login successful > Domain=[HOME] OS=[Unix] Server=[Samba 3.0.25b-2.fc7] > > Server Comment > ---- > WWW Samba Server Version 3.0.25b-2.fc7 > > WorkgroupMaster > ---- > HOME WWW This is an anonymous login. >But for some strange reason, the same machine in > Windows cannot see the "www" machine at all. Probably because you are not login anonymously from Windows. >My question is now: What reason would there be for > the client to be able to connect to samba from Linux but > not from Windows? Anonymous logins are different from WinXP logins, AFAICT. >I am going to hook up wireshark and watch what's going > on at the network level when I get a free moment. In the > meantime, any suggestions whatsoever are welcome. If everything is ok with you user and group account, group mappings and SID, everything should be ok, getting the error about builtin accounts with the fact of the migration hint me to the BUILTIN Group problems. It could be something else, increased log levels (10) can help a lot in this context, you can also test simples shares decreasing the security level just to figure out what's going on. Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGsMekCj65ZxU4gPQRCMp+AKDQ5VAoy0xYnBlAuQTAiGyQoJ7b9ACgyI8z oro+1m1yc6sv5sG7F+0FhC4= =e0w7 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] "Failed to create Users" problem. PLUS further evidence
Hi, Felipe Augusto van de Wiel wrote: Hmmm... the builtin groups changed a little bit in the course of Samba releases, did you check Release Notes or your FC packages about that? If I'm not wrong this happened on 3.0.23 Assuming that's true, how would I change things to get this problem to go away? Add some kind of group mapping or something? How does one go about doing that? I may try verifying that 3.0.23 introduced this issue by rolling back samba to its previous version (whatever it was). We'll see. ALSO My Windows XP client also dual-boots into Fedora 7 as well, and from Fedora 7 on the workstation I can access the samba shares: $ smbclient -L //www Password: Anonymous login successful Domain=[HOME] OS=[Unix] Server=[Samba 3.0.25b-2.fc7] Sharename Type Comment - --- homes Disk Home Directories files Disk IPC$IPC IPC Service (Samba Server Version 3.0.25b-2.fc7) Anonymous login successful Domain=[HOME] OS=[Unix] Server=[Samba 3.0.25b-2.fc7] Server Comment ---- WWW Samba Server Version 3.0.25b-2.fc7 WorkgroupMaster ---- HOME WWW But for some strange reason, the same machine in Windows cannot see the "www" machine at all. My question is now: What reason would there be for the client to be able to connect to samba from Linux but not from Windows? I am going to hook up wireshark and watch what's going on at the network level when I get a free moment. In the meantime, any suggestions whatsoever are welcome. Sincerely, Daryl. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] "Failed to create Users" problem.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Daryl wrote, On 31-07-2007 22:57: >This problem has been driving me nuts for a while, because > everything /used to/ work fine with an almost identical setup on my old > Fedora Core 5 machine (same filesystem directories, same users, etc; > they were moved from one machine to the other). But looking at the logs > on that machine, I never had a "Failed to create Users" error message. >I'd greatly appreciate any help anybody could give me. Hmmm... the builtin groups changed a little bit in the course of Samba releases, did you check Release Notes or your FC packages about that? If I'm not wrong this happened on 3.0.23: http://samba.org/samba/history/samba-3.0.23.html Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGsH2ICj65ZxU4gPQRCBBQAKC/zc3d3fjmU8H1udUH7p908euujgCbBOIY YP+FZlx1+A+FQT9PgKDVI1Y= =EoGR -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] "Failed to create Users" problem.
Hi everybody, I have been struggling to get my Windows XP box to be able to access my samba server. When samba starts, I see the following my my /var/log/samba/log.smb file: smbd version 3.0.25b-2.fc7 started. Copyright Andrew Tridgell and the Samba Team 1992-2007 [2007/07/31 20:22:43, 0] auth/auth_util.c:create_builtin_administrators(792) create_builtin_administrators: Failed to create Administrators [2007/07/31 20:22:43, 0] auth/auth_util.c:create_builtin_users(758) create_builtin_users: Failed to create Users [2007/07/31 20:22:43, 0] auth/auth_util.c:create_builtin_administrators(792) create_builtin_administrators: Failed to create Administrators [2007/07/31 20:22:43, 0] auth/auth_util.c:create_builtin_users(758) create_builtin_users: Failed to create Users Through various Google searches, I have found that when people say they get this error, it means samba will not work at all. Though samba does stay running: # ps aux | grep mbd root 4428 0.0 0.1 8996 1288 ?Ss 20:22 0:00 nmbd -D root 4679 0.0 0.2 13704 2236 ?Ss 21:09 0:00 smbd -D root 4681 0.0 0.0 13704 924 ?S21:09 0:00 smbd -D When I try to access \\www in Explorer from my XP box, I get an alert that says, "Windows cannot find '\\www'. Check the spelling and try again, [etc...]" (same when I try by IP). When I access "smb:/" and navigate through the tree in Konqueror on the samba server itself, everything works fine. I can ping back-and-forth between the two machines by name and IP just fine. My passwords seem in order: # pdbedit -L daryl:500:Daryl Beattie tv:522:Television My workgroup is named "home" on both client and server, my hostname matches my netbios name (as defined in smb.conf, it is "www")... The only thing slightly abnormal that I have is that my /files share has a different group than its owner --but I've fiddled with the group permissions (i.e. setting them back to same owner/group) and that doesn't seem to help. Here is my testparm output: # testparm Load smb config files from /etc/samba/smb.conf Processing section "[homes]" Processing section "[files]" Processing section "[downloads]" Loaded services file OK. Server role: ROLE_STANDALONE Press enter to see a dump of your service definitions [global] workgroup = HOME server string = Samba Server Version %v passdb backend = tdbsam username map = /etc/samba/smbusers log file = /var/log/samba/log.%m max log size = 50 socket options = TCP_NODELAY SO_KEEPALIVE SO_RCVBUF=8192 SO_SNDBUF=8192 IPTOS_LOWDELAY idmap uid = 1-2 idmap gid = 1-2 hosts allow = 192.168.0. [homes] comment = Home Directories read only = No [files] path = /files read only = No guest ok = Yes [downloads] path = /home/daryl/documents/downloads valid users = daryl, tv read only = No browseable = No This problem has been driving me nuts for a while, because everything /used to/ work fine with an almost identical setup on my old Fedora Core 5 machine (same filesystem directories, same users, etc; they were moved from one machine to the other). But looking at the logs on that machine, I never had a "Failed to create Users" error message. I'd greatly appreciate any help anybody could give me. Sincerely, Daryl. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
