Everyone,
We are currently seeing a very strange problem on our server.
Everything will be running along smoothly and then all of a sudden, nobody will
be able to login. Looking through the logs reveals the following messages...
Apr 24 10:55:15 LINUX-1 httpd2-prefork: pam_winbi
My apologies for sending this again, but I sent it late last night and was
hoping someone from the morning crowd may be able to help.
I am seeing a strange problem with my domain controllers as they relate to
winbind. From time to time, I lose my connection to the alternate domains. I
really
I am seeing a strange problem with my domain controllers as they relate to
winbind. From time to time, I lose my connection to the alternate domains. I
really need some help figuring this out as I have gone as far as I can. I
would be very appreciative of any ideas anyone may have.
Our prima
Do you have any suggestions on how I may track this down. Obviously, the logs
are sparse. Has anyone else reported a similar problem?
-Original Message-
From: Volker Lendecke [mailto:[EMAIL PROTECTED]
Sent: Friday, October 10, 2008 3:19 PM
To: Trimble, Ronald D
Cc: samba
Yesterday I had an unexpected server crash. Here is what appeared in the logs:
Oct 9 20:16:21 USTR-LINUX-1 [powersaved][11654]: resmgr: server response code
200
Oct 9 20:16:53 USTR-LINUX-1 last message repeated 19 times
Oct 9 20:17:26 USTR-LINUX-1 last message repeated 13 times
Oct 9 20:17:2
, 2008 2:26 PM
To: Trimble, Ronald D; Herb Lewis
Cc: samba@lists.samba.org
Subject: RE: [Samba] Winbind problem with more details.
Trimble, Ronald D wrote:
>
> Ross, do you have any links to document what you are saying
> about the "password server" being set to a domain? I h
: Trimble, Ronald D; Herb Lewis
Cc: samba@lists.samba.org
Subject: RE: [Samba] Winbind problem with more details.
Trimble, Ronald D wrote:
>
> You are 100% correct. I did have a situation several weeks
> ago where I was forced to delete the cache and as a result I
> had to go through the
ebruary 15, 2008 12:06 PM
To: Trimble, Ronald D; Herb Lewis
Cc: samba@lists.samba.org
Subject: RE: [Samba] Winbind problem with more details.
Trimble, Ronald D wrote:
>
> Here you go...
I forgot to ask which version of samba your now running, but
assuming it is something around '3.0
Just an FYI, we are currently on 3.0.28. This server was built when 3.0 was
just coming around.
-Original Message-
From: Ross S. W. Walker [mailto:[EMAIL PROTECTED]
Sent: Friday, February 15, 2008 12:30 PM
To: Ross S. W. Walker; Trimble, Ronald D; Herb Lewis
Cc: samba@lists.samba.org
That is a lot of good information... let me give it a shot on a test system to
see what happens.
-Original Message-
From: Ross S. W. Walker [mailto:[EMAIL PROTECTED]
Sent: Friday, February 15, 2008 12:06 PM
To: Trimble, Ronald D; Herb Lewis
Cc: samba@lists.samba.org
Subject: RE: [Samba
S. W. Walker [mailto:[EMAIL PROTECTED]
Sent: Friday, February 15, 2008 12:30 PM
To: Ross S. W. Walker; Trimble, Ronald D; Herb Lewis
Cc: samba@lists.samba.org
Subject: RE: [Samba] Winbind problem with more details.
Ross S. W. Walker wrote:
>
> Trimble, Ronald D wrote:
> >
> > He
cl inherit = yes
-Original Message-
From: Ross S. W. Walker [mailto:[EMAIL PROTECTED]
Sent: Friday, February 15, 2008 11:09 AM
To: Trimble, Ronald D; Herb Lewis
Cc: samba@lists.samba.org
Subject: RE: [Samba] Winbind problem with more details.
Trimble, Ronald D wrote:
>
> The users who
-Original Message-
From: Ross S. W. Walker [mailto:[EMAIL PROTECTED]
Sent: Thursday, February 14, 2008 4:37 PM
To: Ross S. W. Walker; Trimble, Ronald D; Herb Lewis
Cc: samba@lists.samba.org
Subject: RE: [Samba] Winbind problem with more details.
Ross S. W. Walker wrote:
> Trim
The users who are failing are all in the same domain. What are you referring
to in terms of the idmap?
-Original Message-
From: Ross S. W. Walker [mailto:[EMAIL PROTECTED]
Sent: Thursday, February 14, 2008 4:26 PM
To: Trimble, Ronald D; Herb Lewis
Cc: samba@lists.samba.org
Subject: RE
Just an FYI... this is not a local group but an AD Domain Local group. We are
using Domain Local groups since they can contain users from other domains.
-Original Message-
From: Herb Lewis [mailto:[EMAIL PROTECTED]
Sent: Thursday, February 14, 2008 3:08 PM
To: Trimble, Ronald D
Cc
So what does that tell me?
-Original Message-
From: Herb Lewis [mailto:[EMAIL PROTECTED]
Sent: Thursday, February 14, 2008 3:08 PM
To: Trimble, Ronald D
Cc: samba@lists.samba.org
Subject: Re: [Samba] Winbind problem with more details.
you will notice that the SID type for the requested
Everyone,
One of our developers was kind enough to insert some bug
checking into the mod_auth_pam and mod_auth_sys_group so that we could see a
little more of what was going on with our authentication failures. Here is
what we just saw. Two of our users NA\connelmp and NA\gumin
That may be possible, but like I said, sometimes it works and sometimes it
doesn't. Sometimes the span between the two is only a few seconds.
From: Scott Lovenberg [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 12, 2008 10:05 PM
To: Trimble, Ronald D
Cc: samba@lists.samba.org
Subjec
AuthPAM_Enabled on
AuthPAM_FallThrough off
AuthType Basic
AuthName "SPAR Trac"
require group "NA\USTR-LINUX-1-SPAR"
From: Scott Lovenberg [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 12, 2008 9:27 PM
To:
each session. Why do some
work and others don't? Could it be that winbind is overwhelmed and thus
doesn't return anything?
-Original Message-
From: Scott Lovenberg [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 12, 2008 9:09 PM
To: Trimble, Ronald D
Cc: samba@lists.samba.org
Subj
Everyone,
Here is a challenge for all of you samba experts! Lately I
have been seeing a problem where winbind is not correctly identifying a user as
a member of a group he most certainly belong to. This is with a Domain Local
group so I know samba should support it.
Can someone help me figure out what is going on here? For quite some time now,
our implementation of Samba has been humming along without problems. Now all
of a sudden I am unable to get valid sequence numbers for one of our domains.
Here are the details...
>From /var/log/samba/log.wb-EU
[2
Hello,
I have the following Samba RPMs installed...
samba-client-3.0.26a-0.5
samba-3.0.26a-0.5
samba-pdb-3.0.26a-0.5
yast2-samba-server-2.9.33-0.3
kdebase3-samba-3.2.1-68.62
samba-winbind-3.0.26a-0.5
yast2-samba-client-2.9.18-0.3
samba-python-3.0.26a-0.5
I used to b
I am trying to get the other domains in my tree to work with my samba
implementation. I have copied all the necessary config files from
another samba server that does work. On this server however, I get
strange results from the wbinfo -sequence command.
linux:/ # wbinfo --sequence
LAC : DI
Everyone,
I am trying to connect my server to another AD domain, but
it will not make the connection. I have successfully joined it to one
domain in AD and I want it to authenticate users from another domain in
the same tree. When I run the command wbinfo -sequence, I get
d
I posted this yesterday, but didn't get any responses. Can anyone help
me out?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Trimble, Ronald D
Sent: Thursday, September 21, 2006 9:39 AM
To: samba@lists.samba.org
Subject: [Samba] Other domain seq
Everyone,
I have configured a new SLES 10 server exactly the same as I
had previously configured a SLES 9 server. The only difference is the
version of samba. On the SLES 10 server, I am running the 3.0.23c
level, the SLES 9 server is behind a little. My problem is with
connecting t
I get the same error either way.
-Original Message-
From: Howard Wilkinson [mailto:[EMAIL PROTECTED]
Sent: Friday, July 14, 2006 11:16 AM
To: Trimble, Ronald D; samba@lists.samba.org
Subject: RE: [Samba] NET ADS JOIN error
Check that the backslashes are not being interpolated by the
Can anyone shed some light on this error? I can't seem to find any
information as to why it is failing. Thanks.
USTR-MINT-A-1:~ # net ads join "United
States\Tredyffrin\Resources\Servers" -U trimblrd
trimblrd's password:
Failed to pre-create the machine object in OU United
States\Tredyffrin
It looks like the latest release does work. Thanks for the help guys!
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Trimble, Ronald D
Sent: Tuesday, July 11, 2006 3:49 PM
To: Gerald (Jerry) Carter
Cc: samba@lists.samba.org; [EMAIL PROTECTED]
Subject
We most certainly have users with more than 20 to 25 AD groups. I will
give the latest release a try.
-Original Message-
From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 11, 2006 3:49 PM
To: Trimble, Ronald D
Cc: [EMAIL PROTECTED]; samba@lists.samba.org
Subject
Lendecke
Sent: Friday, July 07, 2006 10:22 AM
To: Trimble, Ronald D
Cc: Gerald (Jerry) Carter; samba@lists.samba.org
Subject: Re: [Samba] How do I troubleshoot this panic?
On Fri, Jul 07, 2006 at 10:17:13AM -0400, Trimble, Ronald D wrote:
> ReiserFS is a problem? It's the default. I would ima
Sure. I will download it and give it a try. I will let you know what I
find out.
-Original Message-
From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED]
Sent: Friday, July 07, 2006 10:27 AM
To: Trimble, Ronald D
Cc: [EMAIL PROTECTED]; samba@lists.samba.org
Subject: Re: [Samba] How do
o: Trimble, Ronald D
Cc: Gerald (Jerry) Carter; samba@lists.samba.org
Subject: Re: [Samba] How do I troubleshoot this panic?
On Fri, Jul 07, 2006 at 10:08:24AM -0400, Trimble, Ronald D wrote:
> Maybe I jumped the gun a little too soon Jerry. After successfully
> logging into the server a f
:[EMAIL PROTECTED] On
Behalf Of Trimble, Ronald D
Sent: Friday, July 07, 2006 9:58 AM
To: Gerald (Jerry) Carter
Cc: samba@lists.samba.org
Subject: RE: [Samba] How do I troubleshoot this panic?
Deleting that file seemed to have done the trick. What does that file
do? What made you suspect this
Deleting that file seemed to have done the trick. What does that file
do? What made you suspect this?
-Original Message-
From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED]
Sent: Friday, July 07, 2006 7:47 AM
To: Trimble, Ronald D
Cc: samba@lists.samba.org
Subject: Re: [Samba] How do
I have a server that has a smb_panic every time I start/restart the
winbind service. How do I go about fixing this? Here is the output
from the winbind log file.
===
[2006/07/06 14:04:26, 0] lib/fault.c:fault_report(37)
INTERNA
Lendecke [mailto:[EMAIL PROTECTED] On Behalf Of Volker
Lendecke
Sent: Wednesday, May 10, 2006 11:17 AM
To: Trimble, Ronald D
Cc: samba@lists.samba.org
Subject: Re: [Samba] AD users from different AD domains - update
On Wed, May 10, 2006 at 11:00:44AM -0400, Trimble, Ronald D wrote:
> In other wo
I am also waiting for this to be "fixed."
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lionel Déruaz
Sent: Wednesday, May 10, 2006 9:16 AM
To: samba@lists.samba.org
Subject: [Samba] AD users from different AD domains - update
hello
in a previous post,
In any event thanks for your help!
-Original Message-
From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED]
Sent: Friday, May 05, 2006 10:54 AM
To: Trimble, Ronald D
Cc: samba@lists.samba.org
Subject: Re: [Samba] Excessive traffic causing slow logons
-BEGIN PGP SIGNED MESSAGE
EMAIL PROTECTED]
Sent: Thursday, May 04, 2006 2:05 PM
To: Trimble, Ronald D
Cc: samba@lists.samba.org
Subject: Re: [Samba] Excessive traffic causing slow logons
-BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Trimble, Ronald D wrote:
> I am seeing some extremely slow logons to my SUSE servers. Al
12:53 PM
To: Trimble, Ronald D
Cc: samba@lists.samba.org
Subject: Re: [Samba] Excessive traffic causing slow logons
Trimble, Ronald D wrote:
> I am seeing some extremely slow logons to my SUSE servers. All are
> configured exactly the same. When I attempt to log on, I can enter my
> domai
they will just point me back to samba. How would you suggest I
proceed?
-Original Message-
From: Jeremy Allison [mailto:[EMAIL PROTECTED]
Sent: Thursday, May 04, 2006 10:28 AM
To: Trimble, Ronald D
Cc: samba@lists.samba.org
Subject: Re: [Samba] Excessive traffic causing slow logons
On Thu
I am seeing some extremely slow logons to my SUSE servers. All are
configured exactly the same. When I attempt to log on, I can enter my
domain (AD) account without any problems. I then enter my password and
sit and wait for several minutes until it eventually takes me to my
desktop. In attempt
I have several servers that take an exceptionally long time to sign onto
our Windows domain. It is not unheard of for it to take upwards of 3 or
4 minutes. The server is a member of the domain and the users are using
an AD account to sign onto the server locally. Were could I being to
look to re
Everyone,
I am going nuts trying to figure this problem out. I have
successfully joined a SUSE 10 server to our domain and configured samba
for ADS authentication. This exact setup works on all my other servers.
On this one, I keep getting access denied when entering my domain
passwo
Everyone,
I am going nuts trying to figure this problem out. I have
successfully joined a SUSE 10 server to our domain and configured samba
for ADS authentication. This exact setup works on all my other servers.
On this one, I keep getting access denied when entering my domain
passwo
Everyone,
I have several servers set up, all running the same levels
of samba and winbind. I am able to see the domain and authenticate
users without any trouble. I am attempting to get integrated logins to
work with SSH. I have it working on one server, but two others (with
the exa
work.
-Original Message-
From: marcos rocha [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 30, 2006 5:18 PM
To: Trimble, Ronald D; Ivan Tadic; samba@lists.samba.org
Subject: RE: [Samba] Owner changes when modifying Excel & Word files
what about the following settings:
- force
There is not solution and it is by design. You can read all about it on
the samba.org page. They have covered it extensively.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Ivan Tadic
Sent: Tuesday, March 28, 2006 1:46 PM
To: samba@lists.samba.org
Subje
Is this an AD group? If so, what type?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Tjaco Mast
Sent: Tuesday, March 28, 2006 10:57 AM
To: samba@lists.samba.org
Subject: [Samba] ACL on groups working half
Hi all Samba users,
For some I've got a Samba
So that every person who uses the server can have a home directory
without me having to create it by hand.
-Original Message-
From: Craig White [mailto:[EMAIL PROTECTED]
Sent: Monday, March 27, 2006 12:54 PM
To: Trimble, Ronald D
Cc: Guillermo Gutierrez; Daniel Northam; samba
Domain member.
-Original Message-
From: Guillermo Gutierrez [mailto:[EMAIL PROTECTED]
Sent: Monday, March 27, 2006 12:44 PM
To: Trimble, Ronald D; Daniel Northam; Craig White;
samba@lists.samba.org
Subject: RE: [Samba] Trouble with Homes
do you have this samba server as a domain member
On Mon, 2006-03-27 at 11:23 -0500, Trimble, Ronald D wrote:
> I am having trouble with getting my Homes section to work properly.
> When I browse to the server from a Windows client, I can see my home
> directory. However, when I try to access it, it challenges me for a
> userID an
g the valid users line like this: "valid users =
%D\%S"
that was my problem until I did that.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Craig White
Sent: Monday, March 27, 2006 8:34 AM
To: samba@lists.samba.org
Subject: Re: [Samba] Trou
I am having trouble with getting my Homes section to work properly.
When I browse to the server from a Windows client, I can see my home
directory. However, when I try to access it, it challenges me for a
userID and password. No matter what I enter, I will not allow me
access. Can someone point
Thanks. I did find a solution.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of [EMAIL PROTECTED]
Sent: Thursday, March 16, 2006 12:04 PM
To: samba@lists.samba.org
Subject: RE: [Samba] Domain Authentication Problem
Have a look at this, hopefully will expl
I second what Don is saying, you most certainly are seeing the same thing we
are. I am in the process of building a new test server to try out a patched
version of samba to see if it fixes the problem. Stay tuned to the bug Don
mentioned.
-Original Message-
From: [EMAIL PROTECTED] [ma
No problem. Glad I could point you in the tight direction.
-Original Message-
From: Guillermo Gutierrez [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 08, 2006 10:08 PM
To: Trimble, Ronald D
Cc: samba@lists.samba.org
Subject: RE: [Samba] getting samba to authenticate with kerberos/PAM
. Domain Local
doesn't work at all unless the user is in the same domain as the group.
How do we get this escalated?
-Original Message-
From: Don Meyer [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 02, 2006 6:06 PM
To: Trimble, Ronald D; samba@lists.samba.org
Subject: Re: [Samba] Pr
When I set it up, if you don't use the winbind separator line, it should
work with the \. My smb.conf does not have a winbind separator
declaration and it works just fine.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Guillermo Gutierrez
Sent: Friday, M
Everyone,
With many thank to Jerry, my cross domain authentication is now
working. This leads to a new problem. I cannot get samba to
authenticate a remote domain user in a Universal group to authenticate
properly.
Here are the details:
USTR-LINUX-1:~ # wbinfo --name-to-sid=NA\\U
I am having issues getting my other domains working on our samba server.
They always show up as disconnected when doing a wbinfo -sequence
command. If I set up the default realm in krb5.conf to be NA (short for
North America), I can authenticate users in NA. If I set is to be EU
(Europe) I can au
I am struggling to get my samba server in ADS mode to authenticate users
from other domains in our forest. Is any currently doing this and
willing to help me out or perhaps share your config so that I can figure
out what I am doing wrong?
Thanks,
Ron
--
To unsubscribe from this list go t
I am trying to authenticate a user in a domain (EU) other than my
default domain (NA). I am at a loss as to what may be wrong at this
point. When I run a wbinfo -sequence, I see the following:
linux:~ # wbinfo --sequence
LAC : DISCONNECTED
EU : DISCONNECTED
AP : DISCONNECTED
UIS : 1989575
: Trimble, Ronald D
Cc: samba@lists.samba.org
Subject: Re: [Samba] Authenticating another domain
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Trimble, Ronald D wrote:
> Username EU\inblr-auth1 is invalid on this system
figure this out. That is the key. Does
"getent passwd 'E
ISCONNECTED
UIS : DISCONNECTED
USTR-LINUX-1 : 1
BUILTIN : 1
NA : 14462477
How can I get it to connect?
-Original Message-
From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED]
Sent: Thursday, February 16, 2006 11:05 AM
To: Trimble, Ronald D
Cc: samba@lists.samba.org
Subject: Re: [Samba]
When I attempt to authenticate a user from another domain, I am seeing
some strange issues. My winbindd.log shows that I am indeed already
trusting the other domain. (I am a member of the na.uis.unisys.com
domain.) However, when I try to gain access to a share where the
username EU\INBLR-AUTH1
I don't understand why you would want to have the user authenticate
again. If they are already signed into your domain and they try to
access a resource they have permission to, it should just let them in.
If they don't have access, it should prompt them for a valid username
and password.
This is from Using Samba...
http://www.oreilly.com/catalog/samba/chapter/book/ch06_03.html
You can configure Samba to use a separate password server under
server-level security with the use of the password server global
configuration option, as follows:
[global]
security = server
I have the same exact problem as Mike, so if anyone has a solution, I
too could use the help.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Collins, Mike
Sent: Wednesday, February 15, 2006 12:31 PM
To: samba@lists.samba.org
Subject: [Samba] ADS and RPC
I am trying to set up our samba server to automatically create a users
home directory when they browse to it from a Windows computer. Is there
a way to do this? I was looking at the root preexec option to try and
do this, but I am not sure how to go about it. Has anybody done this?
Can someone p
Address is in a Virtual Pool on the Firewall I am using. I am
able
to connect to any other server other than a Samba server. If it was a
network related issue would it not be having a problem on all the
servers?
James
-Original Message-
From: Trimble, Ronald D [mailto:[EMAIL PROTECTED
I am desperate here guys... can anyone offer me any advice?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Trimble, Ronald D
Sent: Friday, February 03, 2006 10:01 AM
To: samba@lists.samba.org
Subject: [Samba] Cross domain and user home questions.
Thank
Thank you in advance for any help anyone may be able to provide with the
following issues I am experiencing.
The first is authenticating users across domains. I have successfully
configured Samba to use an AD domain, but when I try to authenticate
another user form another domain in the same t
75 matches
Mail list logo