Re: [Samba] Re: Looping auth problem

2004-06-26 Thread Tomás Polák
Just points to think about:

 - do you are sure, that Samba win the fight to be a domain master browser?
I am using OS level = 255 to be sure. You can take a look into
/var/log/samba/log.nmbd to see the fight results.
>From your answer I assume, that you have more Samba servers in
different roles on your network, so PDC must have highest OS level set
from all to win.

- you have commented out every passdb backed directives, this is confusing
for me, but I am using smbpasswd, not LDAP as you.

- I am using socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

- Do you are sure, that this is not LDAP-related problem?

- If  you know, which station if causing these repeating authorisations
attempts, do you can set log level to max
and make separate log files per station, to see exactly whats wrong for this
one.

Rest of your smb.conf seems same as my.
TP


-- 
Tato sprava bola prehladana na vyskyt virusov a nebezpecneho obsahu antivirovym 
systemom na serveri spolocnosti Jaga Group s.r.o. a zda sa byt cista. Info: [EMAIL 
PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Looping auth problem

2004-06-25 Thread John Goerzen
On 2004-06-25, Tomá¹ Polák <[EMAIL PROTECTED]> wrote:
>>From my point of view you must provide more informations about you
> environment.
> Acts your Samba as PDC?

Yes, the Samba server in question is the PDC.  Most, but not all, client
PCs are logging in to the domain.

> Which OS have your PCs?

Mostly XP, but as low as Windows 98.  All of the effected PCs are
running XP.

> Do you have Wins servers?

No.

> Which kind of authorisation you are using between Samba and PCs?

Not sure what you mean here.

> Also your smb.conf will be helpfull when seen...

Included below.


#
# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
# $Id: smb.conf,v 1.9 2002/11/11 04:20:37 vorlon Exp $
#
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options most of which 
# are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash) 
# is a comment and is ignored. In this example we will use a #
# for commentary and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command
# "testparm" to check that you have not many any basic syntactic 
# errors. 
#

#=== Global Settings ===

[global]
kernel oplocks = no
# This needed for vserver ctx13 patch with 2.4.19
log level = 2
# admin users = root
printer admin = root
time server = yes
domain logons = yes
domain admin group = root kweaver jgoerzen djschmidt @tempadmins
logon script = GENERIC.BAT
# Change this for the workgroup/NT-domain name your Samba server will part of
   workgroup = LINUX

# server string is the equivalent of the NT Description field
   server string = %h server (Samba %v)

# If you want to automatically load your printer list rather
# than setting them up individually then you'll need this
   load printers = yes

# lpr(ng) printing. You may wish to override the location of the
# printcap file
;   printing = bsd
;   printcap name = /etc/printcap

# cups printing.  See also the cupsaddsmb(8) manpage
   printing = cups
   printcap name = cups

;   guest account = nobody
;   invalid users = root

# This tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba/log.%m

# Put a capping on the size of the log files (in Kb).
   max log size = 1000

# If you want Samba to log though syslog only then set the following
# parameter to 'yes'. Please note that logging through syslog in
# Samba is still experimental.
;   syslog only = no

# We want Samba to log a minimum amount of information to syslog. Everything
# should go to /var/log/samba/log.{smb,nmb} instead. If you want to log
# through syslog you should set the following parameter to something higher.
   syslog = 0

# "security = user" is always a good idea. This will require a Unix account
# in this server for every user accessing the server. See
# security_level.txt for details.
;   security = user

# You may wish to use password encryption. Please read ENCRYPTION.html,
# Win95.txt and WinNT.txt in the Samba documentation. Do not enable this
# option unless you have read those documents
   encrypt passwords = true
#   passdb backend = smbpasswd unixsam

# If you are using encrypted passwords, Samba will need to know what
# password database type you are using.  
#   passdb backend = ldapsam:ldap://ldap unixsam

ldap admin dn = "cn=admin,dc=excelhustler,dc=com"
ldap server = ldap.internal.excelhustler.com
ldap ssl = off
ldap port = 389
ldap suffix = "ou=People,dc=excelhustler,dc=com"
# ldap passwd sync = yes


# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting
;   include = /home/samba/etc/smb.conf.%m

# Most people will find that this option gives better performance.
# See speed.txt and the manual pages for details
# You may want to add the following on a Linux system:
# SO_RCVBUF=8192 SO_SNDBUF=8192
   socket options = TCP_NODELAY

# --- Browser Control Options ---

# Please _read_ BROWSING.txt and set the next four parameters according
# to your network setup. The defaults are specified below (commented
# out.) It's important that you read BROWSING.txt so you don't break
# browsing in your network!

# set local master to no if you don't want Samba to become a master
# browser on your network. Otherwise the normal election rules apply
   local master = yes

# OS Level determines the precedence of this server in master browser
# elections. The default value should be reasonable
;   os level = 20

# Domain Master specifies Samba to be the Domain Master Browser. This
# allows Samba to collate browse lists between subnets. Don't use this
# if you already have a Windows NT domain controller doing this job
   domain master = yes

# Preferred Master causes Sa