Re: [Samba] Samba PDC change password issue

2004-05-11 Thread Jonathan Johnson
On Tue, 11 May 2004, Ron Liu wrote:

 Hi there
 
 I had samba PDC (Version 2.2.7a) running on RH 9.0 ( 2.4.20-8 #1). There are
 about 50+ win2k PCs and member servers. Everything has been working nicely
 for almost 6 month untill recently. I noticed that recently when users try
 to change domain password by Ctrl-Alt-Del from win2k wkstation, the windows
 will give an error message saying The system cannot change your password
 now because the domain mydomain is not available, However, the password
 actually does changed regardless the error message. It seems, there is no
 problem in login, accessing network resources etc. However, the error
 message is irritating, and I do see some error messages on the samba server
 log. It happens to all the users as far as I know.
 

If you had read the discussions here in recent days, you would have
known that:

* After applying the recent Microsoft patches, you can no longer change
your password using CTRL-ALT-DEL

and that:

* Samba 2.2.9 and 3.0.4 were just released to resolve this issue.

I suggest going to www.samba.org and reading the mailing list archives,
then downloading and installing these latest versions.

And please, before posting, search thru the archives to see if your
question has been asked -- and answered -- first. I don't mean to flame
you, I want you to understand that failure to do your homework will
make everyone ignore you. If you don't have time to search the
archives, I'm sorry, but people won't be very willing to help.

Hope this helps.

--Jonathan Johnson
Sutinen Consulting, Inc.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba PDC change password issue

2004-05-11 Thread RRuegner
Ron Liu schrieb:

Hi there

I had samba PDC (Version 2.2.7a) running on RH 9.0 ( 2.4.20-8 #1). There are
about 50+ win2k PCs and member servers. Everything has been working nicely
for almost 6 month untill recently. I noticed that recently when users try
to change domain password by Ctrl-Alt-Del from win2k wkstation, the windows
will give an error message saying The system cannot change your password
now because the domain mydomain is not available, However, the password
actually does changed regardless the error message. It seems, there is no
problem in login, accessing network resources etc. However, the error
message is irritating, and I do see some error messages on the samba server
log. It happens to all the users as far as I know.
var/log/samba/bio-fs89.log
***
[2004/05/11 09:40:08, 0] lib/util_sec.c:assert_gid(114)
  Failed to set gid privileges to (0,99) now set to (0,-1) uid=(0,99)
[2004/05/11 09:40:08, 0] lib/util.c:smb_panic(1094)
  PANIC: failed to set gid
[2004/05/11 09:40:08, 0] lib/util_sec.c:assert_gid(114)
  Failed to set gid privileges to (0,99) now set to (0,-1) uid=(0,99)
[2004/05/11 09:40:08, 0] lib/util.c:smb_panic(1094)
  PANIC: failed to set gid
Any suggestions/solutions??

Thank you for your help!

-Ron



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
Scott Moseman
Sent: Friday, March 26, 2004 8:40 AM
To: [EMAIL PROTECTED]
Subject: RE: [Samba] Samba 3.0  2003 Active Directory Native Mode


Exactly the question that I am trying to get answered, too.

What I was able to accomplish:  I setup Samba 3.0.2a and it
was able to see the AD (users/groups) and join into the AD.
BUT... I was not able to get people to authenticate against
Samba.  I kept getting a Kerberos ticket error, and I tried
several configs that I found through Google, none worked.
I am in the process of re-installing my AD (lab setup) into
Mixed Mode to see if Native Mode was my problem.  It seems
as though finding a straight answer to this ? is not easy!
Thanks,
Scott Moseman


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
Of David Morse
Sent: Friday, March 26, 2004 10:22 AM
To: [EMAIL PROTECTED]
Subject: [Samba] Samba 3.0  2003 Active Directory Native Mode
Does Samba 3.0.2a release integrate with Windows Active Directory
running in 2003 Native Mode?
The situation is that two corporate departments are joining their
network infrastructure.  One department runs several Samba 2.2
servers and the other is a 2003 Native Mode Active Directory.  I
understand that if you upgrade to Samba 3.0 this supports Windows
2000 AD, but it is unclear to me if Samba will integrate seamlessly
with 2003 Native Mode AD environment.  I'm looking for a straight
forward non biased, no BS answer.  If it works cool, I'm not afraid
of the overall work involved.  Any help would be greatly appreciated.
David Morse

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.642 / Virus Database: 410 - Release Date: 3/24/2004
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
hi , this bug ( password issue ctrl-alt-del)was implemted by a patch of 
ms latest to secure against sasser worm you have to upgrade your samba 
version 2.2.9 Branch or 3.04
Regards

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba PDC change password issue

2004-05-11 Thread Jose Martinez
Is patch KB828741 installed.. remove it from a test system and try again

Jose

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
RRuegner
Sent: Tuesday, May 11, 2004 8:16 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] Samba PDC change password issue

Ron Liu schrieb:

 Hi there
 
 I had samba PDC (Version 2.2.7a) running on RH 9.0 ( 2.4.20-8 #1). There
are
 about 50+ win2k PCs and member servers. Everything has been working nicely
 for almost 6 month untill recently. I noticed that recently when users try
 to change domain password by Ctrl-Alt-Del from win2k wkstation, the
windows
 will give an error message saying The system cannot change your password
 now because the domain mydomain is not available, However, the password
 actually does changed regardless the error message. It seems, there is no
 problem in login, accessing network resources etc. However, the error
 message is irritating, and I do see some error messages on the samba
server
 log. It happens to all the users as far as I know.
 
 var/log/samba/bio-fs89.log
 ***
 [2004/05/11 09:40:08, 0] lib/util_sec.c:assert_gid(114)
   Failed to set gid privileges to (0,99) now set to (0,-1) uid=(0,99)
 [2004/05/11 09:40:08, 0] lib/util.c:smb_panic(1094)
   PANIC: failed to set gid
 
 [2004/05/11 09:40:08, 0] lib/util_sec.c:assert_gid(114)
   Failed to set gid privileges to (0,99) now set to (0,-1) uid=(0,99)
 [2004/05/11 09:40:08, 0] lib/util.c:smb_panic(1094)
   PANIC: failed to set gid
 
 Any suggestions/solutions??
 
 Thank you for your help!
 
 -Ron
 
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of
 Scott Moseman
 Sent: Friday, March 26, 2004 8:40 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Samba] Samba 3.0  2003 Active Directory Native Mode
 
 
 
 Exactly the question that I am trying to get answered, too.
 
 What I was able to accomplish:  I setup Samba 3.0.2a and it
 was able to see the AD (users/groups) and join into the AD.
 
 BUT... I was not able to get people to authenticate against
 Samba.  I kept getting a Kerberos ticket error, and I tried
 several configs that I found through Google, none worked.
 
 I am in the process of re-installing my AD (lab setup) into
 Mixed Mode to see if Native Mode was my problem.  It seems
 as though finding a straight answer to this ? is not easy!
 
 Thanks,
 Scott Moseman
 
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf
 Of David Morse
 Sent: Friday, March 26, 2004 10:22 AM
 To: [EMAIL PROTECTED]
 Subject: [Samba] Samba 3.0  2003 Active Directory Native Mode
 
 Does Samba 3.0.2a release integrate with Windows Active Directory
 running in 2003 Native Mode?
 
 The situation is that two corporate departments are joining their
 network infrastructure.  One department runs several Samba 2.2
 servers and the other is a 2003 Native Mode Active Directory.  I
 understand that if you upgrade to Samba 3.0 this supports Windows
 2000 AD, but it is unclear to me if Samba will integrate seamlessly
 with 2003 Native Mode AD environment.  I'm looking for a straight
 forward non biased, no BS answer.  If it works cool, I'm not afraid
 of the overall work involved.  Any help would be greatly appreciated.
 
 David Morse
 
 ---
 Outgoing mail is certified Virus Free.
 Checked by AVG anti-virus system (http://www.grisoft.com).
 Version: 6.0.642 / Virus Database: 410 - Release Date: 3/24/2004
 
 
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 
hi , this bug ( password issue ctrl-alt-del)was implemted by a patch of 
ms latest to secure against sasser worm you have to upgrade your samba 
version 2.2.9 Branch or 3.04
Regards

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba PDC change password issue

2004-05-11 Thread Ron Liu
Hi there

I had samba PDC (Version 2.2.7a) running on RH 9.0 ( 2.4.20-8 #1). There are
about 50+ win2k PCs and member servers. Everything has been working nicely
for almost 6 month untill recently. I noticed that recently when users try
to change domain password by Ctrl-Alt-Del from win2k wkstation, the windows
will give an error message saying The system cannot change your password
now because the domain mydomain is not available, However, the password
actually does changed regardless the error message. It seems, there is no
problem in login, accessing network resources etc. However, the error
message is irritating, and I do see some error messages on the samba server
log. It happens to all the users as far as I know.

var/log/samba/bio-fs89.log
***
[2004/05/11 09:40:08, 0] lib/util_sec.c:assert_gid(114)
  Failed to set gid privileges to (0,99) now set to (0,-1) uid=(0,99)
[2004/05/11 09:40:08, 0] lib/util.c:smb_panic(1094)
  PANIC: failed to set gid

[2004/05/11 09:40:08, 0] lib/util_sec.c:assert_gid(114)
  Failed to set gid privileges to (0,99) now set to (0,-1) uid=(0,99)
[2004/05/11 09:40:08, 0] lib/util.c:smb_panic(1094)
  PANIC: failed to set gid

Any suggestions/solutions??

Thank you for your help!

-Ron



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
Scott Moseman
Sent: Friday, March 26, 2004 8:40 AM
To: [EMAIL PROTECTED]
Subject: RE: [Samba] Samba 3.0  2003 Active Directory Native Mode



Exactly the question that I am trying to get answered, too.

What I was able to accomplish:  I setup Samba 3.0.2a and it
was able to see the AD (users/groups) and join into the AD.

BUT... I was not able to get people to authenticate against
Samba.  I kept getting a Kerberos ticket error, and I tried
several configs that I found through Google, none worked.

I am in the process of re-installing my AD (lab setup) into
Mixed Mode to see if Native Mode was my problem.  It seems
as though finding a straight answer to this ? is not easy!

Thanks,
Scott Moseman



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
Of David Morse
Sent: Friday, March 26, 2004 10:22 AM
To: [EMAIL PROTECTED]
Subject: [Samba] Samba 3.0  2003 Active Directory Native Mode

Does Samba 3.0.2a release integrate with Windows Active Directory
running in 2003 Native Mode?

The situation is that two corporate departments are joining their
network infrastructure.  One department runs several Samba 2.2
servers and the other is a 2003 Native Mode Active Directory.  I
understand that if you upgrade to Samba 3.0 this supports Windows
2000 AD, but it is unclear to me if Samba will integrate seamlessly
with 2003 Native Mode AD environment.  I'm looking for a straight
forward non biased, no BS answer.  If it works cool, I'm not afraid
of the overall work involved.  Any help would be greatly appreciated.

David Morse

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.642 / Virus Database: 410 - Release Date: 3/24/2004


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba