Re: [Samba] samba 3.4.7 as NT4 domain member and win9x

2010-10-06 Thread Volker Lendecke
On Tue, Oct 05, 2010 at 03:44:16PM -0500, Chris Weiss wrote:
 I think i'll rephrase my question.
 
 Are the Samba developers and community willing to support using Win9x
 client to a Samba 3.4+ server using winbind to be an NT4 domain member
 server?

Certainly we do. It's just that it is increasingly difficult
to run these systems on modern hardware, even inside a
virtualization scheme. Not many people have those CD's and
floppy disks readily around anymore.

 I can connect win9x using local accounts, just not domain accounts.
 the same domain accounts work from all other OS's, and on older Samba
 versions.

You did try lanman auth = yes?

Volker
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba 3.4.7 as NT4 domain member and win9x

2010-10-06 Thread Neil Price

 On 2010/10/05 10:44 PM, Chris Weiss wrote:

I can connect win9x using local accounts, just not domain accounts.
the same domain accounts work from all other OS's, and on older Samba
versions.
I had a problem with a dos login to a domain account that worked with 
3.2.x but not with 3.4.x and 3.5.x


I worked out it was trying trying to connect to a local account and 
ignoring the workgroup/domain.


I simply created a local account since that worked for me.  I forced the 
group bit on the directory so the files were readable by others.


But this may well be a bug.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba 3.4.7 as NT4 domain member and win9x

2010-10-06 Thread Chris Weiss
On Wed, Oct 6, 2010 at 2:18 AM, Volker Lendecke
volker.lende...@sernet.de wrote:
 You did try lanman auth = yes?

yes, that was required in 3.3 as well, which does work.  3.4 doesn't.


I'm aware the the age of the OS's makes it hard to setup a new test
env, which is why I posed the question.  I would understand and accept
not supported as an official answer, but currently all i see is
hints that it should work yet many people are experiencing that it
doens't.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba 3.4.7 as NT4 domain member and win9x

2010-10-06 Thread Volker Lendecke
On Wed, Oct 06, 2010 at 08:18:04AM -0500, Chris Weiss wrote:
 yes, that was required in 3.3 as well, which does work.  3.4 doesn't.
 
 
 I'm aware the the age of the OS's makes it hard to setup a new test
 env, which is why I posed the question.  I would understand and accept
 not supported as an official answer, but currently all i see is
 hints that it should work yet many people are experiencing that it
 doens't.

Well, I'm sure we could somehow make it work if we had the
environment available. You might also try to get us the full
debug info: smb.conf, network traces, a debug level 10 log
of smbd and if you run it all log files with debug level 10
from winbind.

Volker
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba 3.4.7 as NT4 domain member and win9x

2010-10-06 Thread Chris Weiss
On Wed, Oct 6, 2010 at 9:41 AM, Volker Lendecke
volker.lende...@sernet.de wrote:
 Well, I'm sure we could somehow make it work if we had the
 environment available. You might also try to get us the full
 debug info: smb.conf, network traces, a debug level 10 log
 of smbd and if you run it all log files with debug level 10
 from winbind.


if only I had that kind of time.  I've already spent more time than
expected on this update so my workaround of going back to 3.3 is going
to have to suffice for a while.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba 3.4.7 as NT4 domain member and win9x

2010-10-05 Thread Chris Weiss
I think i'll rephrase my question.

Are the Samba developers and community willing to support using Win9x
client to a Samba 3.4+ server using winbind to be an NT4 domain member
server?

And if so, does anyone actually have that working?

I can connect win9x using local accounts, just not domain accounts.
the same domain accounts work from all other OS's, and on older Samba
versions.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba 3.4.7 as NT4 domain member and win9x

2010-10-04 Thread Dale Schroeder

 Chris,

Since Win 95/98 cannot be true domain member, perhaps try adding to [global]
map untrusted to domain = Yes

Dale

On 10/04/2010 10:52 AM, Chris Weiss wrote:

I'm certain i'm just missing something and haven't hit the right
search terms yet, however, the terms I've been trying all lead to
others with the same problems and no solutions at all.

My network is quite legacy, but has been working:
nt4 PDC and BDC
several samba file servers, various revisions
DOS, Win95, Win98, NT4, 2k, xp clients

I have an ubuntu 9.04 32bit samba 3.3.2 server that works fine but i
wanted to have more ram
installed to newer hardware, ubuntu 10.04 x64 samba 3.4.7, copied my
smb.conf, sync'd data, shut off old server, renamed new to the name of
the old, rebooted, stopped smbd and winbind, deleted secrets.tdb,
joined domain, started samba and winbind, restarted nmbd.  Same as
I've done a couple times before when migrating to bigger storage and
hardware.

Everything seemed to work, XP client, nt4 clients, all the wbinfo
command (user lookup, etc).  All Win98 clients prompt for IPC$ passwd,
no matter what user.  Same users on any other OS works.  I do have
lanman auth = yes, as it was required on samba 3.3 as well.

log.lathe1 shows
check_ntlm_password: winbind authentication for user [LATHE1] FAILED
with error NT_STATUS_LOGON_FAILURE

and a bit before that:

[2010/10/04 10:20:53,  6] auth/auth_sam.c:416(check_samstrict_security)
   check_samstrict_security: WILSON is not one of my local names
(ROLE_DOMAIN_MEMBER)

this last one seems to be key to me, I don't think i should get this
message, and I didn't used to.
I only get the message when connecting from win9x clients.

If I could upgrade the OS's I would.  Needs to be win9x for the
software for the old CNC stuff.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba 3.4.7 as NT4 domain member and win9x

2010-10-04 Thread Chris Weiss
On Mon, Oct 4, 2010 at 1:32 PM, Dale Schroeder
d...@briannassaladdressing.com wrote:
  Chris,

 Since Win 95/98 cannot be true domain member

well not directly, but setting user-level access control and providing
the domain does allow it to provide the domain with the username when
accessing other systems.
win98 is providing the the domain and username, as I see it my logs:
check_ntlm_password:  Checking password for unmapped user
[wilson]\[lath...@[lathe1] with the new password interface

, perhaps try adding to [global]
    map untrusted to domain = Yes

sounds desirable, and will probably fix a separate issue where I just
had to fully qualify domain\user in a script, so i added and restarted
all services, however for this win98 issue I don't see any difference,
and still have these 2 in the logs
check_samstrict_security: WILSON is not one of my local names
(ROLE_DOMAIN_MEMBER)
check_ntlm_password: winbind authentication for user [LATHE1] FAILED
with error NT_STATUS_LOGON_FAILURE
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba