Re: [Samba] "Failed to create Users" problem. PLUS further evidence
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Daryl wrote, On 01-08-2007 18:05: > Hi Felipe (and others), >Thanks very much for your help so far. You are welcome. :-) > Felipe Augusto van de Wiel wrote: >>>Assuming that's true, how would I change things >>> to get this problem to go away? Add some kind of group >>> mapping or something? How does one go about doing that? >>> >> Did you checked the Release Notes? And the Samba >> Official HOWTO about Group Mapping? > > I did check out the Release Notes, but I'm no samba > expert so I didn't fully understand them. I will > check out the HOWTO on Group Mapping later. Before 3.0.23, Samba automagically create some groupmaps when you use tdbsam, after that, you need to create them by yourself. The HOWTO has the specific commands, it is not a big chapter and it is really relevant to read and understand. > I was hoping you (or anybody, really) had a quick way > to get this done that didn't require me to do lots of > research beforehand. Maybe somebody has come across > and solved this problem before, and knew exactly what > to do with say 1 simple command or something. Anyway, > I'll look into it myself later. Unfortunately, Samba requires some understanding of what's going on, in this specific case it is not one line that will solve your problem, but a few of them and there is not much point in repeating the docs here, this part of the HOWTO is good and clear on what to do. You will use 'net groupmap'. And of course, you need to have *nix accounts on the server that are mapped by Samba to convert users from "Windows world" in real users and permissions. >> Probably because you are not login anonymously from >> Windows. Anonymous logins are different from WinXP >> logins, AFAICT. > > Okay, I didn't know that. When I try as a > specific user, I get the following: > > $ smbclient -L //www -U daryl > Password: > session setup failed: NT_STATUS_LOGON_FAILURE Ok, this is a user/password error. So, you are really missing the user or something else related to permissions on the server. >When I check the log for that machine on the > samba server, the log is filled with the same sorts > of messages as the generic log.smbd (but what you see > below is from "log.[worstation-name]"): > > [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_administrators(792) > create_builtin_administrators: Failed to create Administrators > [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_users(758) > create_builtin_users: Failed to create Users > [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_administrators(792) > create_builtin_administrators: Failed to create Administrators > [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_users(758) > create_builtin_users: Failed to create Users > >I also saw this at the top of that log file, which seems strange > to me since I'm using tdbsam: > > [2007/08/01 10:06:10, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(241) > startsmbfilepwent_internal: file /var/lib/samba/private/smbpasswd did > not exist. File successfully created. I will keep my hint, try to create the groups, users and groupmaps and make sure that everything is consistent (SIDs, permissions, shares, usernames, uids, gids). > I tried increasing the log level to 10 before, and didn't see > anything unusual beyond the errors reported already. I will try that > again though, and get back to you. It is not just the error, but also when the error happens and what happened before it. > Thanks again for the help. > Sincerely, >Daryl. Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGsdEICj65ZxU4gPQRCIwgAKCa4AFEmHT4nCa6m0qJwNVB4AJA1ACdGUGm ava9r1ZQTQL2kZse1W9b61s= =l0Yo -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] "Failed to create Users" problem. PLUS further evidence
Hi Felipe (and others), Thanks very much for your help so far. Felipe Augusto van de Wiel wrote: Assuming that's true, how would I change things to get this problem to go away? Add some kind of group mapping or something? How does one go about doing that? Did you checked the Release Notes? And the Samba Official HOWTO about Group Mapping? I did check out the Release Notes, but I'm no samba expert so I didn't fully understand them. I will check out the HOWTO on Group Mapping later. I was hoping you (or anybody, really) had a quick way to get this done that didn't require me to do lots of research beforehand. Maybe somebody has come across and solved this problem before, and knew exactly what to do with say 1 simple command or something. Anyway, I'll look into it myself later. Probably because you are not login anonymously from Windows. Anonymous logins are different from WinXP logins, AFAICT. Okay, I didn't know that. When I try as a specific user, I get the following: $ smbclient -L //www -U daryl Password: session setup failed: NT_STATUS_LOGON_FAILURE When I check the log for that machine on the samba server, the log is filled with the same sorts of messages as the generic log.smbd (but what you see below is from "log.[worstation-name]"): [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_administrators(792) create_builtin_administrators: Failed to create Administrators [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_users(758) create_builtin_users: Failed to create Users [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_administrators(792) create_builtin_administrators: Failed to create Administrators [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_users(758) create_builtin_users: Failed to create Users I also saw this at the top of that log file, which seems strange to me since I'm using tdbsam: [2007/08/01 10:06:10, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(241) startsmbfilepwent_internal: file /var/lib/samba/private/smbpasswd did not exist. File successfully created. I am going to hook up wireshark and watch what's going on at the network level when I get a free moment. In the meantime, any suggestions whatsoever are welcome. If everything is ok with you user and group account, group mappings and SID, everything should be ok, getting the error about builtin accounts with the fact of the migration hint me to the BUILTIN Group problems. It could be something else, increased log levels (10) can help a lot in this context, you can also test simples shares decreasing the security level just to figure out what's going on I tried increasing the log level to 10 before, and didn't see anything unusual beyond the errors reported already. I will try that again though, and get back to you. Thanks again for the help. Sincerely, Daryl. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] "Failed to create Users" problem. PLUS further evidence
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Daryl wrote, On 01-08-2007 11:48: > Hi, > > Felipe Augusto van de Wiel wrote: >> Hmmm... the builtin groups changed a little bit in the >> course of Samba releases, did you check Release Notes or your >> FC packages about that? If I'm not wrong this happened on 3.0.23 >> > >Assuming that's true, how would I change things > to get this problem to go away? Add some kind of group > mapping or something? How does one go about doing that? Did you checked the Release Notes? And the Samba Official HOWTO about Group Mapping? >I may try verifying that 3.0.23 introduced this > issue by rolling back samba to its previous version > (whatever it was). We'll see. Ok. >ALSO > >My Windows XP client also dual-boots into Fedora > 7 as well, and from Fedora 7 on the workstation I can > access the samba shares: > > $ smbclient -L //www > Password: > Anonymous login successful > Domain=[HOME] OS=[Unix] Server=[Samba 3.0.25b-2.fc7] > > Sharename Type Comment > - --- > homes Disk Home Directories > files Disk > IPC$IPC IPC Service (Samba Server Version > 3.0.25b-2.fc7) > Anonymous login successful > Domain=[HOME] OS=[Unix] Server=[Samba 3.0.25b-2.fc7] > > Server Comment > ---- > WWW Samba Server Version 3.0.25b-2.fc7 > > WorkgroupMaster > ---- > HOME WWW This is an anonymous login. >But for some strange reason, the same machine in > Windows cannot see the "www" machine at all. Probably because you are not login anonymously from Windows. >My question is now: What reason would there be for > the client to be able to connect to samba from Linux but > not from Windows? Anonymous logins are different from WinXP logins, AFAICT. >I am going to hook up wireshark and watch what's going > on at the network level when I get a free moment. In the > meantime, any suggestions whatsoever are welcome. If everything is ok with you user and group account, group mappings and SID, everything should be ok, getting the error about builtin accounts with the fact of the migration hint me to the BUILTIN Group problems. It could be something else, increased log levels (10) can help a lot in this context, you can also test simples shares decreasing the security level just to figure out what's going on. Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGsMekCj65ZxU4gPQRCMp+AKDQ5VAoy0xYnBlAuQTAiGyQoJ7b9ACgyI8z oro+1m1yc6sv5sG7F+0FhC4= =e0w7 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] "Failed to create Users" problem. PLUS further evidence
Hi, Felipe Augusto van de Wiel wrote: Hmmm... the builtin groups changed a little bit in the course of Samba releases, did you check Release Notes or your FC packages about that? If I'm not wrong this happened on 3.0.23 Assuming that's true, how would I change things to get this problem to go away? Add some kind of group mapping or something? How does one go about doing that? I may try verifying that 3.0.23 introduced this issue by rolling back samba to its previous version (whatever it was). We'll see. ALSO My Windows XP client also dual-boots into Fedora 7 as well, and from Fedora 7 on the workstation I can access the samba shares: $ smbclient -L //www Password: Anonymous login successful Domain=[HOME] OS=[Unix] Server=[Samba 3.0.25b-2.fc7] Sharename Type Comment - --- homes Disk Home Directories files Disk IPC$IPC IPC Service (Samba Server Version 3.0.25b-2.fc7) Anonymous login successful Domain=[HOME] OS=[Unix] Server=[Samba 3.0.25b-2.fc7] Server Comment ---- WWW Samba Server Version 3.0.25b-2.fc7 WorkgroupMaster ---- HOME WWW But for some strange reason, the same machine in Windows cannot see the "www" machine at all. My question is now: What reason would there be for the client to be able to connect to samba from Linux but not from Windows? I am going to hook up wireshark and watch what's going on at the network level when I get a free moment. In the meantime, any suggestions whatsoever are welcome. Sincerely, Daryl. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
