RE: [Samba] UTMP duplicated entries
On Fri, 2005-09-23 at 12:10 -0300, Fabiano Caixeta Duarte wrote: > On Fri, 23 Sep 2005, Andrew Bartlett wrote: > > >> Yeah! Sorry! I am talking about login sessions. Does samba logs on utmp > >> all kind of sessions or just login sessions? > > > > It logs file-share connections, as it doesn't really have the info for > > client-side login sessions. > > > > Andrew Bartlett > > But I still think that we have a problem. > > When a domain user logs on my domain, the workstation makes a connection > to the logon path / logon drive. As you said, this connection is logged on > utmp. > > When the user logs out, the connection to that share is closed. Shouldn't > it have been logged as well on utmp? It depends if the windows client chose to close the session. Sometimes, for some reason, it doesn't do that correctly. (And we must allow multiple users on one connection for terminal server and 'run as' clients). Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Samba Developer, SuSE Labs, Novell Inc.http://suse.de Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] UTMP duplicated entries
On Fri, 23 Sep 2005, Andrew Bartlett wrote: Yeah! Sorry! I am talking about login sessions. Does samba logs on utmp all kind of sessions or just login sessions? It logs file-share connections, as it doesn't really have the info for client-side login sessions. Andrew Bartlett But I still think that we have a problem. When a domain user logs on my domain, the workstation makes a connection to the logon path / logon drive. As you said, this connection is logged on utmp. When the user logs out, the connection to that share is closed. Shouldn't it have been logged as well on utmp? Sometimes it logs... but sometimes don't. Take a look: liana smb/2192.168.0.207 Fri Sep 2 18:43 - 00:52 (06:08) rodrigobaso smb/25 192.168.0.207 Fri Sep 2 17:11 - 18:11 (00:59) josianealomino smb/28 192.168.0.207 Fri Sep 2 15:54 - 16:58 (01:03) liana smb/73 192.168.0.207 Fri Sep 2 14:56 - 15:54 (00:58) rodrigobaso smb/57 192.168.0.207 Fri Sep 2 14:09 - 01:00 (10:50) rodrigobaso smb/57 192.168.0.207 Fri Sep 2 14:09 - 14:09 (00:00) mcicognasmb/29 192.168.0.207 Fri Sep 2 13:05 - 13:56 (00:51) andersongalismb/29 192.168.0.207 Fri Sep 2 09:12 - 13:04 (03:51) cunha smb/2192.168.0.207 Fri Sep 2 08:53 - 08:55 (00:02) marcelomb smb/15 192.168.0.207 Fri Sep 2 08:14 - 08:21 (00:07) tesia smb/8192.168.0.207 Fri Sep 2 07:48 - 01:00 (17:11) tesia smb/8192.168.0.207 Fri Sep 2 07:48 - 07:48 (00:00) tesia logs on (access to her homedir) at 07:48 from 192.168.0.207 and before she ends the share-session (Sep 3, 01:00) marcelomb, from the same machine (locally) logs on. What can I do to have this working everytime? Some smb.conf option? Thanks a lot! Fabiano -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] UTMP duplicated entries
On Wed, 2005-09-21 at 16:38 -0300, Fabiano Caixeta Duarte wrote: > On Wed, 21 Sep 2005, Kaplan, Marc wrote: > > > Windows does allow duplicate sessions actually. If you net use * > > \\hostname\share and then net use \\ipaddress\share for the same server > > you will get two connections to the same server on your client (you can > > even use different users). Is it possible that this is what some users > > are doing? > > Yeah! Sorry! I am talking about login sessions. Does samba logs on utmp > all kind of sessions or just login sessions? It logs file-share connections, as it doesn't really have the info for client-side login sessions. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Samba Developer, SuSE Labs, Novell Inc.http://suse.de Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] UTMP duplicated entries
I would like if UTMP would be installed with the samba RPM package that comes with the Red Hat system? -Original Message- From: Talwar, Puneet (NIH/NIAID) Sent: Wednesday, September 21, 2005 4:19 PM To: 'Fabiano Caixeta Duarte' Cc: SAMBA Maillist Subject: RE: [Samba] UTMP duplicated entries You mean utmp=yes Yes I have put this line in the smb.conf and when I run the last command I don't see myself connected to the server via smb connection. But I do see myself when I telnet or ssh into the box. Do I need to be doing anything else. -Original Message- From: Fabiano Caixeta Duarte [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 21, 2005 3:56 PM To: SAMBA Maillist Subject: RE: [Samba] UTMP duplicated entries On Wed, 21 Sep 2005, Talwar, Puneet (NIH/NIAID) wrote: > I know this might be a stupid question but how can I view my utmp file to > see who is connected to the server via smb connection? I think I didn't understand your question. Is that it? Use the 'last' command :) And you must have umtp=yes in your smb.conf! Fabiano. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] UTMP duplicated entries
You mean utmp=yes Yes I have put this line in the smb.conf and when I run the last command I don't see myself connected to the server via smb connection. But I do see myself when I telnet or ssh into the box. Do I need to be doing anything else. -Original Message- From: Fabiano Caixeta Duarte [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 21, 2005 3:56 PM To: SAMBA Maillist Subject: RE: [Samba] UTMP duplicated entries On Wed, 21 Sep 2005, Talwar, Puneet (NIH/NIAID) wrote: > I know this might be a stupid question but how can I view my utmp file to > see who is connected to the server via smb connection? I think I didn't understand your question. Is that it? Use the 'last' command :) And you must have umtp=yes in your smb.conf! Fabiano. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] UTMP duplicated entries
On Wed, 21 Sep 2005, Talwar, Puneet (NIH/NIAID) wrote: I know this might be a stupid question but how can I view my utmp file to see who is connected to the server via smb connection? I think I didn't understand your question. Is that it? Use the 'last' command :) And you must have umtp=yes in your smb.conf! Fabiano. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] UTMP duplicated entries
On Wed, 21 Sep 2005, Kaplan, Marc wrote: Windows does allow duplicate sessions actually. If you net use * \\hostname\share and then net use \\ipaddress\share for the same server you will get two connections to the same server on your client (you can even use different users). Is it possible that this is what some users are doing? Yeah! Sorry! I am talking about login sessions. Does samba logs on utmp all kind of sessions or just login sessions? Also machines configured as terminal servers allow multiple concurrent logins from the same client. You're right. But I don't have WTS here... There are some XP and some W2K workstations. Still waiting. Fabiano -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] UTMP duplicated entries
I know this might be a stupid question but how can I view my utmp file to see who is connected to the server via smb connection? -Original Message- From: Kaplan, Marc [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 21, 2005 1:56 PM To: Fabiano Caixeta Duarte; SAMBA Maillist Subject: RE: [Samba] UTMP duplicated entries Windows does allow duplicate sessions actually. If you net use * \\hostname\share and then net use \\ipaddress\share for the same server you will get two connections to the same server on your client (you can even use different users). Is it possible that this is what some users are doing? Also machines configured as terminal servers allow multiple concurrent logins from the same client. -Marc > -Original Message- > From: [EMAIL PROTECTED] [mailto:samba- > [EMAIL PROTECTED] On Behalf Of Fabiano > Caixeta Duarte > Sent: Wednesday, September 21, 2005 10:40 AM > To: SAMBA Maillist > Subject: [Samba] UTMP duplicated entries > > Hi everybody! > > I've been noticing some strange entries in samba/utmp. I have a lot of > 00:00 timed sessions. > > But the worst problem is that i found some conflicting information. Since > windows doesn't allow concurrent login sessions, I think utmp should not > have generated the following entries. > > liana smb/2192.168.0.207 Fri Sep 2 18:43 - 00:52 (06:08) > rodrigobaso smb/25 192.168.0.207 Fri Sep 2 17:11 - 18:11 (00:59) > josianealomino smb/28 192.168.0.207 Fri Sep 2 15:54 - 16:58 (01:03) > liana smb/73 192.168.0.207 Fri Sep 2 14:56 - 15:54 (00:58) > rodrigobaso smb/57 192.168.0.207 Fri Sep 2 14:09 - 01:00 (10:50) > rodrigobaso smb/57 192.168.0.207 Fri Sep 2 14:09 - 14:09 (00:00) > mcicognasmb/29 192.168.0.207 Fri Sep 2 13:05 - 13:56 (00:51) > andersongalismb/29 192.168.0.207 Fri Sep 2 09:12 - 13:04 (03:51) > cunha smb/2192.168.0.207 Fri Sep 2 08:53 - 08:55 (00:02) > marcelomb smb/15 192.168.0.207 Fri Sep 2 08:14 - 08:21 (00:07) > tesia smb/8192.168.0.207 Fri Sep 2 07:48 - 01:00 (17:11) > tesia smb/8192.168.0.207 Fri Sep 2 07:48 - 07:48 (00:00) > > The server is a FreeBSD 5.3 with Samba 3.0.14a with 'utmp=yes'. > > Thanks in advance! > > Fabiano > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] UTMP duplicated entries
Windows does allow duplicate sessions actually. If you net use * \\hostname\share and then net use \\ipaddress\share for the same server you will get two connections to the same server on your client (you can even use different users). Is it possible that this is what some users are doing? Also machines configured as terminal servers allow multiple concurrent logins from the same client. -Marc > -Original Message- > From: [EMAIL PROTECTED] [mailto:samba- > [EMAIL PROTECTED] On Behalf Of Fabiano > Caixeta Duarte > Sent: Wednesday, September 21, 2005 10:40 AM > To: SAMBA Maillist > Subject: [Samba] UTMP duplicated entries > > Hi everybody! > > I've been noticing some strange entries in samba/utmp. I have a lot of > 00:00 timed sessions. > > But the worst problem is that i found some conflicting information. Since > windows doesn't allow concurrent login sessions, I think utmp should not > have generated the following entries. > > liana smb/2192.168.0.207 Fri Sep 2 18:43 - 00:52 (06:08) > rodrigobaso smb/25 192.168.0.207 Fri Sep 2 17:11 - 18:11 (00:59) > josianealomino smb/28 192.168.0.207 Fri Sep 2 15:54 - 16:58 (01:03) > liana smb/73 192.168.0.207 Fri Sep 2 14:56 - 15:54 (00:58) > rodrigobaso smb/57 192.168.0.207 Fri Sep 2 14:09 - 01:00 (10:50) > rodrigobaso smb/57 192.168.0.207 Fri Sep 2 14:09 - 14:09 (00:00) > mcicognasmb/29 192.168.0.207 Fri Sep 2 13:05 - 13:56 (00:51) > andersongalismb/29 192.168.0.207 Fri Sep 2 09:12 - 13:04 (03:51) > cunha smb/2192.168.0.207 Fri Sep 2 08:53 - 08:55 (00:02) > marcelomb smb/15 192.168.0.207 Fri Sep 2 08:14 - 08:21 (00:07) > tesia smb/8192.168.0.207 Fri Sep 2 07:48 - 01:00 (17:11) > tesia smb/8192.168.0.207 Fri Sep 2 07:48 - 07:48 (00:00) > > The server is a FreeBSD 5.3 with Samba 3.0.14a with 'utmp=yes'. > > Thanks in advance! > > Fabiano > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
