Re: [Samba] Re: v3.0.4-5 (Debian Sid) not Samba 3.0.5 - Can't change password
On Mon, 2004-06-14 at 16:51, Laurent CARON wrote: > Greg Folkert wrote: > > > > > > >I had a very similar problem. My only fix I could actually find was to > >completely remove all of the "generated" samba files (the .tbd files and > >such) with samba and winbind not running. Then removing all the machine > >accounts out of /etc/passwd, basically cleaning up to look just like > >"just installed and never run yet" > > > >Then starting joining the machines again, then using a script to > >generate the samba users from /etc/passwd... setting policies proper and > >since then (two weeks ago) haven't had any problems. > > > > > > > > > Unfortunately it is a live environment > > I can't remove the accounts :( Same deal here, neither could *I*. But twas the only solution. As 3.0.4 somehow didn't SIGHUP and rotatelogs on Sunday morning about a month ago. Painful, Painful... I had to keep restarting SAMBA every 4-6 hours. Actually stop and start it. > I'll try on a test environment I did too. Came to the same conclusion. Major bigtime suxxorz. -- [EMAIL PROTECTED] REMEMBER ED CURRY! http://www.iwethey.org/ed_curry Novell's Directory Services is a competitive product to Microsoft's Active Directory in much the same way that the Saturn V is a competitive product to those dinky little model rockets that kids light off down at the playfield. -- Thane Walkup signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: v3.0.4-5 (Debian Sid) not Samba 3.0.5 - Can't change password
On Mon, 14 Jun 2004, Laurent CARON wrote: > Greg Folkert wrote: > > > >I had a very similar problem. My only fix I could actually find was to > >completely remove all of the "generated" samba files (the .tbd files and > >such) with samba and winbind not running. Then removing all the machine > >accounts out of /etc/passwd, basically cleaning up to look just like > >"just installed and never run yet" > > > >Then starting joining the machines again, then using a script to > >generate the samba users from /etc/passwd... setting policies proper and > >since then (two weeks ago) haven't had any problems. > > > > Unfortunately it is a live environment > > I can't remove the accounts :( > > I'll try on a test environment > There's a possibility that your password database (or another .tdb database) may be corrupt. Not saying it is, just saying it could be. Cleaning up the database is *very* easy: 1. Shut down smbd and nmbd (very important! see not below) 2. Go to each of the directories containing samba-related .tdb files (i.e., /etc/samba ; /var/cache/samba or /var/lib/samba ; etc.) and issue 'tdbbackup *' 3. This will create backup copies of your .tdb databases. Part of the backup process is that it creates "clean" backups -- any entries that are not quite right will be cleaned up or removed. 4. Restart Samba. As part of the startup process, Samba will detect the clean .tdb files and use them if it detects that the "real" .tdb are corrupt. 5. Check to make sure that all users are where they should be (hint: 'pdbedit -Lw' -or- 'pdbedit -Lv'). Recreate any users that have been blown away; they've been removed because of corruption. It's very important that Samba NOT be running when you back up your tdb .files. Otherwise, you can not guarantee clean backups. Even if you've done 'service samba stop' or 'rcsamba stop'; do a 'ps -ax' to MAKE SURE smbd and nmbd are not running. As per a tip I received from John Terpstra, it's a good idea to backup these files (using tdbbackup) before starting Samba, every time. --Jon Johnson Sutinen Consulting, Inc. [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: v3.0.4-5 (Debian Sid) not Samba 3.0.5 - Can't change password
Greg Folkert wrote: I had a very similar problem. My only fix I could actually find was to completely remove all of the "generated" samba files (the .tbd files and such) with samba and winbind not running. Then removing all the machine accounts out of /etc/passwd, basically cleaning up to look just like "just installed and never run yet" Then starting joining the machines again, then using a script to generate the samba users from /etc/passwd... setting policies proper and since then (two weeks ago) haven't had any problems. Unfortunately it is a live environment I can't remove the accounts :( I'll try on a test environment -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: v3.0.4-5 (Debian Sid) not Samba 3.0.5 - Can't change password
On Mon, 2004-06-14 at 09:53, Laurent CARON wrote: > Greg Folkert wrote: > >On Mon, 2004-06-14 at 03:21, Laurent CARON wrote: > >>Hello, > >>I upgraded samba to 3.0.5 (debian sid) in the hope of getting windows > >>password change to work, but had no success. > > > >[EMAIL PROTECTED]:greg]$ apt-show-versions -a samba-common > >samba-common3.0.4-5 install ok installed > >samba-common3.0.2a-1testing > >samba-common3.0.4-5 unstable > >samba-common/unstable uptodate 3.0.4-5 > > > >I am sorry, but you have 3.0.4-5 installed. > > > >>The password is changed (fortunately), but the computer still displays a > >>message saying the old password is incorrect. > >> > >>Do you know how to fix it? > > > >Do you have a proper password chat setup? Are you using PAM to change > >the passwords? > > > >You really need to give us more info. > > > I'm using 3.0.4-5 (sorry for the mistake), password chat is correct, but > since microsoft patch, the problem didn't disappear. I had a very similar problem. My only fix I could actually find was to completely remove all of the "generated" samba files (the .tbd files and such) with samba and winbind not running. Then removing all the machine accounts out of /etc/passwd, basically cleaning up to look just like "just installed and never run yet" Then starting joining the machines again, then using a script to generate the samba users from /etc/passwd... setting policies proper and since then (two weeks ago) haven't had any problems. -- [EMAIL PROTECTED] REMEMBER ED CURRY! http://www.iwethey.org/ed_curry Novell's Directory Services is a competitive product to Microsoft's Active Directory in much the same way that the Saturn V is a competitive product to those dinky little model rockets that kids light off down at the playfield. -- Thane Walkup signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: v3.0.4-5 (Debian Sid) not Samba 3.0.5 - Can't change password
Greg Folkert wrote: On Mon, 2004-06-14 at 03:21, Laurent CARON wrote: Hello, I upgraded samba to 3.0.5 (debian sid) in the hope of getting windows password change to work, but had no success. [EMAIL PROTECTED]:greg]$ apt-show-versions -a samba-common samba-common3.0.4-5 install ok installed samba-common3.0.2a-1testing samba-common3.0.4-5 unstable samba-common/unstable uptodate 3.0.4-5 I am sorry, but you have 3.0.4-5 installed. The password is changed (fortunately), but the computer still displays a message saying the old password is incorrect. Do you know how to fix it? Do you have a proper password chat setup? Are you using PAM to change the passwords? You really need to give us more info. Here are the parts of smb.conf - passwd program = /usr/local/sbin/smbldap-passwd.pl %u add machine script = /usr/local/sbin/smbldap-useradd.pl -w -d /dev/null -s /bin/false %u add user script = /usr/local/sbin/smbldap-useradd.pl -a -s /bin/false -m %u add group script = /usr/local/sbin/smbldap-groupadd.pl %g add user to group script = /usr/local/sbin/smbldap-usermod.pl -G %g %u passdb backend = ldapsam:"ldap://127.0.0.1"; unix password sync = yes security = user domain master = yes domain logons = yes preferred master = yes os level = 65 - Laurent -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: v3.0.4-5 (Debian Sid) not Samba 3.0.5 - Can't change password
Greg Folkert wrote: On Mon, 2004-06-14 at 03:21, Laurent CARON wrote: Hello, I upgraded samba to 3.0.5 (debian sid) in the hope of getting windows password change to work, but had no success. [EMAIL PROTECTED]:greg]$ apt-show-versions -a samba-common samba-common3.0.4-5 install ok installed samba-common3.0.2a-1testing samba-common3.0.4-5 unstable samba-common/unstable uptodate 3.0.4-5 I am sorry, but you have 3.0.4-5 installed. The password is changed (fortunately), but the computer still displays a message saying the old password is incorrect. Do you know how to fix it? Do you have a proper password chat setup? Are you using PAM to change the passwords? You really need to give us more info. I'm using 3.0.4-5 (sorry for the mistake), password chat is correct, but since microsoft patch, the problem didn't disappear. Laurent -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: v3.0.4-5 (Debian Sid) not Samba 3.0.5 - Can't change password
On Mon, 2004-06-14 at 03:21, Laurent CARON wrote: > Hello, > > I upgraded samba to 3.0.5 (debian sid) in the hope of getting windows > password change to work, but had no success. [EMAIL PROTECTED]:greg]$ apt-show-versions -a samba-common samba-common3.0.4-5 install ok installed samba-common3.0.2a-1testing samba-common3.0.4-5 unstable samba-common/unstable uptodate 3.0.4-5 I am sorry, but you have 3.0.4-5 installed. > The password is changed (fortunately), but the computer still displays a > message saying the old password is incorrect. > > Do you know how to fix it? Do you have a proper password chat setup? Are you using PAM to change the passwords? You really need to give us more info. -- [EMAIL PROTECTED] REMEMBER ED CURRY! http://www.iwethey.org/ed_curry Novell's Directory Services is a competitive product to Microsoft's Active Directory in much the same way that the Saturn V is a competitive product to those dinky little model rockets that kids light off down at the playfield. -- Thane Walkup signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
