Re: [Samba] Multiple IP addresses in DNS record
On Wed, 2008-10-22 at 07:58 -0400, Jarrod Hyder wrote: On Tue, Oct 21, 2008 at 8:17 PM, Frank Gruman [EMAIL PROTECTED] wrote: On Tue, 2008-10-21 at 13:34 -0400, Jarrod Hyder wrote: I have a samba server running on Linux that has two ethernet cards (eth0 eth1) that are bonded into a single virtual interface (bond0). This virtual interface is connected to the corporate LAN and I have another ethernet card (eth2) that is connected to another server that is used for making incremental backups. The problem that I am having is that no matter what I do, the command net ads dns register -P' causes both the bond0 and eth2 IP addresses to show up in the DNS record on the corporate domain controller. I have tried to force samba and winbind to use interface = bond0 and bind interfaces only = yes and it doesn't seem to help this situation. If anyone can shed some light on what I am doing wrong, I would really appreciate it. BTW, I am using samba 3.0.28a -- Jarrod Hyder [EMAIL PROTECTED] Jarrod, Not sure how much help I can be, but give this a try - add the -d # flag to your 'net ads dns ...' command where # can be something up to 10 (more debug output). This can at the very least confirm the smb.conf file being read as well as perhaps point you in a better direction. If nothing else, posted the somewhat cleansed output here; it may help others here to see where your problem lies. Regards, Frank Frank, Here is the debug output of net ads dns register -P -d 10. I can't really make heads or tails of it, but I also don't see either of the IP addresses that are getting registered on the domain. If you could take a look at it I would really appreciate it. Thanks, -- Jarrod Hyder [EMAIL PROTECTED] Jerry, If you could create a patch for 3.0.28a that would be great. Our server is running an older distro and I'm not sure when I would have time to try to compile 3.2. I think if I could patch the source for the version we are currently using and recompile it, I would be better off. Thanks! -- Jarrod Hyder [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Multiple IP addresses in DNS record
On Tue, Oct 21, 2008 at 8:17 PM, Frank Gruman [EMAIL PROTECTED] wrote: On Tue, 2008-10-21 at 13:34 -0400, Jarrod Hyder wrote: I have a samba server running on Linux that has two ethernet cards (eth0 eth1) that are bonded into a single virtual interface (bond0). This virtual interface is connected to the corporate LAN and I have another ethernet card (eth2) that is connected to another server that is used for making incremental backups. The problem that I am having is that no matter what I do, the command net ads dns register -P' causes both the bond0 and eth2 IP addresses to show up in the DNS record on the corporate domain controller. I have tried to force samba and winbind to use interface = bond0 and bind interfaces only = yes and it doesn't seem to help this situation. If anyone can shed some light on what I am doing wrong, I would really appreciate it. BTW, I am using samba 3.0.28a -- Jarrod [EMAIL PROTECTED] Jarrod, Not sure how much help I can be, but give this a try - add the -d # flag to your 'net ads dns ...' command where # can be something up to 10 (more debug output). This can at the very least confirm the smb.conf file being read as well as perhaps point you in a better direction. If nothing else, posted the somewhat cleansed output here; it may help others here to see where your problem lies. Regards, Frank Frank, Here is the debug output of net ads dns register -P -d 10. I can't really make heads or tails of it, but I also don't see either of the IP addresses that are getting registered on the domain. If you could take a look at it I would really appreciate it. Thanks, -- Jarrod Hyder [EMAIL PROTECTED] [2008/10/22 07:46:06, 5] lib/debug.c:debug_dump_status(391) INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 locking: False/0 msdfs: False/0 dmapi: False/0 [2008/10/22 07:46:06, 3] param/loadparm.c:lp_load(5064) lp_load: refreshing parameters [2008/10/22 07:46:06, 3] param/loadparm.c:init_globals(1440) Initialising global parameters [2008/10/22 07:46:06, 3] param/params.c:pm_process(572) params.c:pm_process() - Processing configuration file /etc/samba/smb.conf [2008/10/22 07:46:06, 3] param/loadparm.c:do_section(3803) Processing section [global] doing parameter winbind offline logon = yes doing parameter interfaces = bond0 doing parameter bind interfaces only = yes doing parameter idmap gid = 1-50 doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 IPT OS_LOWDELAY SO_KEEPALIVE doing parameter wins server = XXX.XXX.XXX.XXX doing parameter domain master = No doing parameter realm = DOMAIN.COM doing parameter veto files = /.undelete/.*/ doing parameter template shell = /bin/bash doing parameter unix extensions = No doing parameter unix password sync = Yes doing parameter server string = Engineering file server doing parameter idmap uid = 1-50 doing parameter password server = XXX.XXX.XXX.XXX doing parameter local master = No doing parameter template homedir = /home/shares/cal_homes/%U doing parameter workgroup = DOMAIN1 doing parameter valid users = @DOMAIN1+Domain Users, @DOMAIN2+Domain Users doing parameter security = ADS doing parameter preferred master = No doing parameter winbind separator = + doing parameter winbind cache time = 21600 doing parameter winbind refresh tickets = Yes doing parameter idmap cache time = 21600 doing parameter log level = 1 doing parameter keepalive = 60 [2008/10/22 07:46:06, 4] param/loadparm.c:lp_load(5095) pm_process() returned Yes [2008/10/22 07:46:06, 7] param/loadparm.c:lp_servicenumber(5233) lp_servicenumber: couldn't find homes [2008/10/22 07:46:06, 10] param/loadparm.c:set_server_role(4339) set_server_role: role = ROLE_DOMAIN_MEMBER [2008/10/22 07:46:06, 5] lib/iconv.c:smb_register_charset(105) Attempting to register new charset UCS-2LE [2008/10/22 07:46:06, 5] lib/iconv.c:smb_register_charset(113) Registered charset UCS-2LE [2008/10/22 07:46:06, 5] lib/iconv.c:smb_register_charset(105) Attempting to register new charset UTF-16LE [2008/10/22 07:46:06, 5] lib/iconv.c:smb_register_charset(113) Registered charset UTF-16LE [2008/10/22 07:46:06, 5] lib/iconv.c:smb_register_charset(105) Attempting to register new charset UCS-2BE [2008/10/22 07:46:06, 5] lib/iconv.c:smb_register_charset(113) Registered charset UCS-2BE [2008/10/22 07:46:06, 5] lib/iconv.c:smb_register_charset(105) Attempting to register new charset UTF-16BE [2008/10/22 07:46:06, 5] lib/iconv.c:smb_register_charset(113) Registered charset UTF-16BE [2008/10/22 07:46:06, 5] lib/iconv.c:smb_register_charset(105) Attempting to register
Re: [Samba] Multiple IP addresses in DNS record
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jarrod Hyder wrote: Here is the debug output of net ads dns register -P -d 10. I can't really make heads or tails of it, but I also don't see either of the IP addresses that are getting registered on the domain. If you could take a look at it I would really appreciate it. I fixed a bug recently that prevently :net ads dns register from honoring the interfaces line in smb.conf. The fixed only went in to the v3.2 and later branches. If you need a backport to the 3.0 tree, let me know. cheer,s jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFI/yaUIR7qMdg1EfYRArWFAKDUbRvPLVz7e70/S9HRcz/1f1wJsgCgp3Qf ZZ/rUYun154UpKG6uCTKL30= =aK5G -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Multiple IP addresses in DNS record
On Wed, 2008-10-22 at 07:58 -0400, Jarrod Hyder wrote: On Tue, Oct 21, 2008 at 8:17 PM, Frank Gruman [EMAIL PROTECTED] wrote: On Tue, 2008-10-21 at 13:34 -0400, Jarrod Hyder wrote: I have a samba server running on Linux that has two ethernet cards (eth0 eth1) that are bonded into a single virtual interface (bond0). This virtual interface is connected to the corporate LAN and I have another ethernet card (eth2) that is connected to another server that is used for making incremental backups. The problem that I am having is that no matter what I do, the command net ads dns register -P' causes both the bond0 and eth2 IP addresses to show up in the DNS record on the corporate domain controller. I have tried to force samba and winbind to use interface = bond0 and bind interfaces only = yes and it doesn't seem to help this situation. If anyone can shed some light on what I am doing wrong, I would really appreciate it. BTW, I am using samba 3.0.28a -- Jarrod Hyder [EMAIL PROTECTED] Jarrod, Not sure how much help I can be, but give this a try - add the -d # flag to your 'net ads dns ...' command where # can be something up to 10 (more debug output). This can at the very least confirm the smb.conf file being read as well as perhaps point you in a better direction. If nothing else, posted the somewhat cleansed output here; it may help others here to see where your problem lies. Regards, Frank Frank, Here is the debug output of net ads dns register -P -d 10. I can't really make heads or tails of it, but I also don't see either of the IP addresses that are getting registered on the domain. If you could take a look at it I would really appreciate it. Thanks, -- Jarrod Hyder [EMAIL PROTECTED] snip [2008/10/22 07:46:06, 5] lib/util.c:init_names(309) Netbios name list:- my_netbios_names[0]=SERVER [2008/10/22 07:46:06, 2] lib/interface.c:add_interface(81) added interface ip=xxx.yyy.xxx.yyy bcast=xxx.yyy.xxx.255 nmask=255.255.255.0 [2008/10/22 07:46:06, 5] lib/gencache.c:gencache_init(61) Opening cache file at /var/lib/samba/gencache.tdb /snip Jarrod, The above snip was the line I was looking for, and had been hoping to see more than one line added. Meanwhile, back at the ranch, I see that Jerry has already responded that this was a bug that was fixed. Regards, Frank -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Multiple IP addresses in DNS record
I have a samba server running on Linux that has two ethernet cards (eth0 eth1) that are bonded into a single virtual interface (bond0). This virtual interface is connected to the corporate LAN and I have another ethernet card (eth2) that is connected to another server that is used for making incremental backups. The problem that I am having is that no matter what I do, the command net ads dns register -P' causes both the bond0 and eth2 IP addresses to show up in the DNS record on the corporate domain controller. I have tried to force samba and winbind to use interface = bond0 and bind interfaces only = yes and it doesn't seem to help this situation. If anyone can shed some light on what I am doing wrong, I would really appreciate it. BTW, I am using samba 3.0.28a -- Jarrod Hyder [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Multiple IP addresses in DNS record
On Tue, 2008-10-21 at 13:34 -0400, Jarrod Hyder wrote: I have a samba server running on Linux that has two ethernet cards (eth0 eth1) that are bonded into a single virtual interface (bond0). This virtual interface is connected to the corporate LAN and I have another ethernet card (eth2) that is connected to another server that is used for making incremental backups. The problem that I am having is that no matter what I do, the command net ads dns register -P' causes both the bond0 and eth2 IP addresses to show up in the DNS record on the corporate domain controller. I have tried to force samba and winbind to use interface = bond0 and bind interfaces only = yes and it doesn't seem to help this situation. If anyone can shed some light on what I am doing wrong, I would really appreciate it. BTW, I am using samba 3.0.28a -- Jarrod Hyder [EMAIL PROTECTED] Jarrod, Not sure how much help I can be, but give this a try - add the -d # flag to your 'net ads dns ...' command where # can be something up to 10 (more debug output). This can at the very least confirm the smb.conf file being read as well as perhaps point you in a better direction. If nothing else, posted the somewhat cleansed output here; it may help others here to see where your problem lies. Regards, Frank -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Multiple IP addresses
Hey Greg, I don't have a firewall in between the server and the Internet. I was trying to do some benchmarks on file transfers and then I would disconnect it after getting the benchmarks. I believe I know why I couldn't reach the Samba shares though -- the Sun X4200 M2 has been having configuration problems with the 4 ethernet ports. I can get the nge0 (the first port) working fine which has our production system on it. But, I can't get any other port to come up along with the primary port. Suggestion #2 seems like a possibility. So, the class A address I'm using will need to be entered into the Hosts allow field? For production, there will be a firewall and VPN access only. I have been looking for a stable VPN router/client that works solid on all recent Windows releases and haven't found one yet. I started using PPTP and it seems to be the most stable of all, believe it or not. Thanks for the help! - Original Message - From: Greg J. Zartman, P.E. [EMAIL PROTECTED] To: Robert Pollard [EMAIL PROTECTED] Cc: samba@lists.samba.org Sent: Thursday, April 03, 2008 5:32 PM Subject: Re: [Samba] Multiple IP addresses I have been trying to connect to Samba over the Internet as I have static IP that is publicly available for connection. I can use this IP to connect to our Intranet web site but Samba doesn't work correctly when trying to connect to it from outside. Our internal network addresses work fine. Even a VPN connection, which gets our internal address scheme works. But, when trying to use the publicly available IP address to connect to Samba it can't find it. There are likely a couple things preventing access: 1. Did you open the Samba ports on your firewall? Most firewalls have these ports closed by default. 2. Hosts allow/Hosts deny parameter. Is this set so that Samba will actually respond to the subnet that you are trying to access Samba from? IMO, opening Samba up to the internet is an inherently bad thing to do and something that very rarely really needs to be done. Instead, you should look at an ssh tunnel or an IPSec VPN. I use IPsec VPN routers to connect my two offices, which are both on different subnets and in different Citys. The routers I used are fairly inexpensive, but work wonderfully and are very easy to setup: http://www.netgear.com/Products/VPNandSSL/WiredVPNFirewallRouters/FVS114.aspx Greg --- Greg J. Zartman, P.E. President, Principal Engineer LEI Engineering Surveying 2468 West 11th Avenue Eugene, Oregon 97402 Voice 541-683-8383Fax 541-683-8144 www.leiinc.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Multiple IP addresses
Robert Pollard wrote: Hi, I have been trying to connect to Samba over the Internet as I have static IP that is publicly available for connection. I can use this IP to connect to our Intranet web site but Samba doesn't work correctly when trying to connect to it from outside. Our internal network addresses work fine. Even a VPN connection, which gets our internal address scheme works. But, when trying to use the publicly available IP address to connect to Samba it can't find it. Is there something I have to do other than tell it to use an alternate interface to make the Samba services available over the Internet with a different IP? Thanks! Do you have a wireshark sniff? It could be a number of things. Are your firewalls configured properly with your routing table? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Multiple IP addresses
Hi, I have been trying to connect to Samba over the Internet as I have static IP that is publicly available for connection. I can use this IP to connect to our Intranet web site but Samba doesn't work correctly when trying to connect to it from outside. Our internal network addresses work fine. Even a VPN connection, which gets our internal address scheme works. But, when trying to use the publicly available IP address to connect to Samba it can't find it. Is there something I have to do other than tell it to use an alternate interface to make the Samba services available over the Internet with a different IP? Thanks! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Multiple IP addresses
I have been trying to connect to Samba over the Internet as I have static IP that is publicly available for connection. I can use this IP to connect to our Intranet web site but Samba doesn't work correctly when trying to connect to it from outside. Our internal network addresses work fine. Even a VPN connection, which gets our internal address scheme works. But, when trying to use the publicly available IP address to connect to Samba it can't find it. There are likely a couple things preventing access: 1. Did you open the Samba ports on your firewall? Most firewalls have these ports closed by default. 2. Hosts allow/Hosts deny parameter. Is this set so that Samba will actually respond to the subnet that you are trying to access Samba from? IMO, opening Samba up to the internet is an inherently bad thing to do and something that very rarely really needs to be done. Instead, you should look at an ssh tunnel or an IPSec VPN. I use IPsec VPN routers to connect my two offices, which are both on different subnets and in different Citys. The routers I used are fairly inexpensive, but work wonderfully and are very easy to setup: http://www.netgear.com/Products/VPNandSSL/WiredVPNFirewallRouters/FVS114.aspx Greg --- Greg J. Zartman, P.E. President, Principal Engineer LEI Engineering Surveying 2468 West 11th Avenue Eugene, Oregon 97402 Voice 541-683-8383Fax 541-683-8144 www.leiinc.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
