[Samba] Call for Paper SambaXP
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! Just a short reminder: The call for papers for SambaXP 2003 has a deadline in seven days, on February 14. I would like to ask all of you to submit your proposal to http://sambaxp.org/call_for_papers/paper_registration.html if you have not done it yet. With some people (you know who you are ;-)) I've already had personal contact via email or irc. Could you please also find some minutes and upload your proposal there? I know only too well how these things tend to fill the inbox, and how much better you feel after you have done it :-) Have a nice weekend! Thanks, Volker -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: Key-ID D32186CF, Fingerprint available: phone +49 551 370 iD8DBQE+Q71WOmSXH9Mhhs8RAtpkAKCQ4Y+yd1UlaYjlgP0lzhxaO8CVeQCeOvIX fmvmbqpgikbqT0w+jeMSAfE= =syB6 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 3.0alpha22 does not execute add user script ?
On Fri, Mar 21, 2003 at 02:21:28PM +, John H Terpstra wrote: The 3.0alpha22 does not seem to execute the add user script when running as security = domain. The same configuration used to work fine with samba 2.2.7 Correct. When you configure samba with security = domain you re telling it to be a domain member server. Domain members do NOT provide the netlogon service nor do they partake in domain user management services. Both these services belong to the domain control arhitecture. To do what you want you will need PAM and Winbind support. Hmm. Just checked. This is definitely a change in behaviour. If you do not want the full winbind functionality, a simple 'add user script' is quite handy. Is there a reason why this does not work anymore as in 2.2? 2.2 added a user if the PDC gave its ok. If you ask me, I'd like the old behaviour back :-) Volker pgp0.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SambaXP 2003
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, all! we would like to invite you to the 2nd samba eXPerience! Again one and a half day of talks, breaks and party will tell you almost everything about SAMBA in development and usage. We would appreciate to see you again in Göttingen! samba eXPerience 2003 * At April 14th and 15th 2003 developers and users will meet again in Göttingen, Germany at the second international SAMBA conference, the samba eXPerience 2003. The first conference in April 2002 has been a very successfull event with more than 160 participants from all over the world. To repeat this item in 2003 was an obligation for the organizers. The meeting will again take place in the awarded best german conference hotel Freizeit In. (And do not miss the party at monday night!) The call for papers is open until February 14th 2003. Please find all neccessary information at the conference homepage: http://sambaXP.org. CU in April! Volker -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: Key-ID D32186CF, Fingerprint available: phone +49 551 370 iD8DBQE+G/rxOmSXH9Mhhs8RAtOWAKCWJNBz64vp2RBN3W3ziwz1afNfEgCff5kH o3HVGxMOhrQYOiOFVblq9BM= =nVOV -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SuSE RPMs
Hi! I've uploaded Samba 3.0.1 RPMs for SLES 8, SuSE 8.2 and SuSE 9 including some CVS fixes to ftp://ftp.sernet.de/pub/samba http://ftp.sernet.de/pub/samba Merry Christmas from Göttingen, Volker pgp0.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba 3.0.2pre1 Available for Download
On Tue, Jan 06, 2004 at 11:07:13PM -0600, Gerald (Jerry) Carter wrote: Binary packages are available at http://download.samba.org/samba/ftp/Binary_Packages/ Please note that SuSE binaries for 3.0.2pre1 are available on ftp.sernet.de. Volker -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba 3.0.2rc1 Available for Download
On Fri, Jan 16, 2004 at 08:12:38PM -0600, Gerald (Jerry) Carter wrote: Binary packages are available at http://download.samba.org/samba/ftp/Binary_Packages/ As usual SuSE RPMs are available from ftp.sernet.de/pub/samba. Volker -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Participation on Samba lists
On Thu, Dec 16, 2004 at 08:45:21AM +1100, Steve Simeonidis wrote: Regardless of what is going on this is not right in my opinion. So we're going to ban Luke from posting to the Samba Lists for three months There must be another way to work things out. As a quite long-term member of the Samba Team I've seen many discussions along these lines before. It was a decision not taken lightly, but from my point of view it had to be done. If you have other suggestions, please let us know. Regards, Volker Lendecke Samba Team pgpnDnpeN21Qm.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba authentication slow against PDC
On Mon, Jan 17, 2005 at 04:22:09PM -0600, Chris Snider wrote: We are currently running three Samba 3.0.x file servers which authenticate The x in 3.0.x is interesting. There has been a serious optimization in 3.0.10, significant more work there is to come in 3.0.11 Volker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [samba] ldapsam:trusted = yes kills smbd
On Thu, Sep 29, 2005 at 05:39:03PM -0500, Gerald (Jerry) Carter wrote: the trusted=yes is not a complete replacement for nss_ldap IIRC. I would need to check to be sure. but what I remember is that this allows for certain group membership optimizations. Volker, can you confirm or correct me? You're correct. You still need ldap in /etc/nsswitch.conf, be it only for the other unix programs running. The major optimizations come from the assumption that all accounts relevant to Samba are in LDAP and both the posix and samba object classes are on the same LDAP entry. Volker pgpRFknvaVsVh.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: SAMBA ISAM Databases
On Tue, Sep 14, 2004 at 10:23:09AM +0200, Pepe Guimarães wrote: I have mounted the Samba share on the Linux server so that Linux applications are pathed to the share and accessing the data there. I'd suspect the problem in smbfs, not samba. What happens if you use the application directly on the samba server without smbfs in between? Volker -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba as gateway MIT kerberos
On Tue, Oct 12, 2004 at 02:47:57PM -0500, Gerald (Jerry) Carter wrote: | --with-afs | --with-fake-kaserver | --with-krb5=base-directory Yes, but Volker is better suited to explain how it works. Or point you towards some documentation. It's irrelevant whether you have kerberos enabled or not. The only thing to make Samba a gateway to AFS is the option --with-fake-kaserver=yes. Setting that enables Samba to act as a kaserver. Three things to be done for configuration: * You have to give Samba access to the AFS KeyFile. This might be a blocker for you security-wise, but being a kaserver depends on being able to create kerberos tickets. This is done via the command 'net afskey keyfile afs-cellname' * Set 'afs username map'. It is typically 'afs username map = [EMAIL PROTECTED]'. %u represents the windows username, the appropriate pts user has to exist after being mapped. * Set the parameter 'afs share = yes' for all samba shares handing out AFS filespace. Hope that helps, Volker -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: How to migrate a complex NT4 network
On Thu, Nov 27, 2003 at 08:11:05PM +0100, Raphaël Berghmans wrote: Indeed the SAM migration is very simple with vampire. But Samba cannot made realtime synchronization with a NT4 PDC and how to manage the modifications. Made a vampire each time a modification has been done on the PDC is a little bit tricky (with 1600 users, 500 groups and 1700 machines). My general strategy with this is always: First leave the NT4 domain in place and get *everything* else off the NT machines. This leaves them as DC's and netlogon-providers only. If you are confident enough with Samba, install the basic infrastructure to openldap-replicate, test that. And then, as the very last step, the vampire-migration is probably the easiest part. With a proper WINS setup for the then very short migration period you can safely simply switch off the BDCs without disrupting your domain. Just my 2 cents. Volker -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.12pre1 Available for Download
On Mon, Feb 28, 2005 at 08:11:44AM -0600, Gerald (Jerry) Carter wrote: Volker still owes some docs on it as far as I know. By default, Samba as a Domain Controller with an LDAP backend needs to use the Unix-style NSS subsystem to access user and group information. Due to the way Unix stores user information in /etc/passwd and /etc/group this inevitably leads to inefficiencies. One important question a user needs to know is the list of groups he is member of. The plain Unix model involves a complete enumeration of the file /etc/group and its NSS counterparts in LDAP. In this particular case there often optimized functions are available in Unix, but for other queries there is no optimized function available. To make Samba scale well in large environments, the ldapsam:trusted=yes option assumes that the complete user and group database that is relevant to Samba is stored in LDAP with the standard posixAccount/posixGroup model, and that the Samba auxiliary object classes are stored together with the the posix data in the same LDAP object. If these assumptions are met, ldapsam:trusted=yes can be activated and Samba can completely bypass the NSS system to query user information. Optimized LDAP queries can speed up domain logon and administration tasks a lot. Depending on the size of the LDAP database a factor of 100 or more for common queries is easily achieved. Volker pgpndmAGjsToN.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.12pre1 Available for Download
On Fri, Mar 04, 2005 at 10:26:12AM -0700, John H Terpstra wrote: Should I add this to the HOWTO at this time? If so, should it go under the chapter on group handling? No idea, it probably belongs into an LDAP chapter. Jerry, are you intent on expanding this in any way? The docs or the feature as such? The work on the feature will continue (probably until passdb.h fully meets samr.idl...), but the docs are vague enough that they will stay correct even with future work. And I think more detail is not necessary, except maybe a bit more emphasis on the requirements would be in order. The ldap database needs to be really correct and fully consistent. Volker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.12pre1 Available for Download
On Fri, Mar 04, 2005 at 11:54:15PM +0100, Farkas Levente wrote: is this means samba with ldap can work without nss_ldap? if it's true it can be a very important new features and can made 'samba with ldap' configuration much easier! imho in this case it should have to documented and highlighted in the release notes! No, we're not yet that far. Maybe eventually we will come there, although I doubt it will happen with Samba 3. But many really huge inefficiencies that come from the strict binding to nss_ldap are removed by that. Hmmm. Maybe in half a year from now when we have 3.0.15 or so, I might talk differently. Lets see what the future brings :-) Volker pgpjbT7NatZcW.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Review Request: Samba-3 by Example Update
On Thu, Apr 14, 2005 at 02:41:49AM -0600, John H Terpstra wrote: 2) Do the new Update and Migration chapters satisfy the demand for better documentation of the migration and update process? If not, what must be added to make this documentation complete? The major obstacle I see with customers upgrading from 2 is missing at least in http://us2.samba.org/samba/docs/man/Samba-Guide/upgrades.html: The change to unicode in file names. When you upgrade naively, you get garbled umlauts, as the files are encoded in some codepage. People then store new files with UTF-8 encoding as they don't have 'unix charset' set correctly. The end result is a mix of both encodings that is *very* hairy to split again. You could mention Björn Jacke's convmv. http://j3e.de/linux/convmv/. Volker pgpejmtWaYOs3.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] kernel oops generated by smbfs module
On Tue, Apr 26, 2005 at 02:37:04PM -0500, Gerald (Jerry) Carter wrote: Just to give credit here, the smbfs code was originally written by Volker Lendecke (of the Samba Team) a *long* time ago. I remember read his description about it in a Dr. Dobb's Journal back in either '97. But the code has a different maintainer these days. Hey Volker, how's this for nostalgia? :-) http://www.ddj.com/documents/s=944/ddj9702g/ Thanks for that reference! I think this was my very first article I wrote for a magazine. I *think* I still have that issue still somewhere in a box! I haven't looked at kernel code for *ages*... Volker pgpiJIehjp5kX.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Urgent : Connection problem to a Samba PDC
On Thu, Jun 26, 2003 at 10:16:20AM +0200, [EMAIL PROTECTED] wrote: [2003/06/25 11:40:43, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605) process_request_pdu: failed to do schannel processing. [2003/06/25 11:41:13, 0] passdb/pdb_ldap.c:ldapsam_open(418) ldapsam_open: cannot access LDAP when not root.. [2003/06/25 11:41:13, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(3240) LDAP search failed: Insufficient access [2003/06/25 11:41:13, 0] passdb/pdb_ldap.c:ldapsam_enum_group_mapping(3310) Unable to open passdb Could you please help me ? A quick fix might be: 'server schannel = no'. Volker pgp0.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] hide files
On Fri, Aug 01, 2003 at 02:55:41PM +0200, Marcus Schopen wrote: No, WindowsXP and Windows2000 can't access too. My conclusion: it's not possible with Samba. Right? What we would like to see is a network trace where you have the configuration you wish to have when you have your files on a native Windows server. Volker pgp0.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Can I kill... 'add user script' behaviour in adding users during logon?
On Fri, May 17, 2002 at 05:22:06PM +0200, Volker Lendecke wrote: Not sure. Optionitis striking again. But I think that the dynamic user adding upon session setup is a bad hack anyway. Or another idea: Add a %-Macro to tell the script which subsystem did it? Volker msg02482/pgp0.pgp Description: PGP signature
[Samba] Re: Samba as BDC in windows domain?
On Tue, Jun 11, 2002 at 04:00:08PM +0100, Paul Reilly wrote: I've been reading about setting up Samba as a PDC with LDAP storage. However if I am to do this it needs to co-exist with the exisitng windows NT domain using windows NT PDC's. Everything I've read so far says you can't have a Samba BDC unless it's in a Samba PDC controlled domain. Is this correct? Is there *any_possible_way* of having a Samba BDC get SAM updates from a windows NT PDC ? If not, is there any other way to sync an OpenLDAP server against a NT PDC ? As far as I know, no. Volker msg03980/pgp0.pgp Description: PGP signature
Re: [Samba] samba internal error ... panic ...
On Mon, Sep 23, 2002 at 05:09:36PM +0200, Martin Müßler wrote: Hi, i have a big problem with my samba installation. After a few days of work the samba crashed and it won't be able to login into the console. The only way is to reboot the machine. My Samba logfile prints out the following messages. You could not log into the local Unix console? This sounds like a problem not related to Samba, though it could mean that you have problems with your hardware. My Configuration: Server: SuSE Linux 8.0 Samba-2.2.3a Can you reproduce this with samba 2.2.6pre2? And if you can, we need a lot more info on that. debug level 10 logs of smbd for example. Volker msg04776/pgp0.pgp Description: PGP signature
Re: [Samba] Domain login - XP 64 - Samba
On Fri, Jun 17, 2005 at 04:49:18PM -0700, Jeremy Allison wrote: So far I've discovered that an XP-64 box seems to do an schannel RPC NETLOGON bind with packet integrety selected (5), but an XP-32 box does the same call with packet privacy (6) selected. This may just be a difference between the registry settings on the 64-bit client test machine (I don't have one here) and my 32-bit vmware XP test machine. Yep, might be. We've modified the registry of that box to have the netlogon in plain text. Volker pgpNjjn2IEGB6.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Proposal to allow owning group to edit ACLs.
On Mon, Jul 18, 2005 at 03:47:31PM -0700, Jeremy Allison wrote: Please let me know what you think - it's easy to add to the current code but I'd like to get some user feedback before I do so. Yes, great idea I think. Do you remember when we talked about that at a conference about two years ago? We could not figure out a good way to control this. Having the group owner the ability to change acls is just a great idea. Thanks! Volker pgpce0u0mHLox.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Tracking file activity
On Mon, Jul 30, 2007 at 01:00:18PM -0400, Ryan Steele wrote: I appreciate your advice. I am experimenting with an implementation of the extd_audit module now on a test cluster - thanks for pointing me in the direction of the HOWTO, I should have looked there before bumping the list. Thanks again. Just FYI: audit and ext_audit have been superseded by full_audit lately. Volker pgpyZmQWtm5xo.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Performance problem with utime() on Solaris 8
On Mon, Jul 30, 2007 at 03:34:54PM -0700, Scott Cokely wrote: I ran truss on smbd while the file copy was taking place, and found that the utime() call was taking up most of the system time. I then ran truss on the 2.2.5 smbd, and found that there were no utime() calls at all. I went to the archives, downloaded and built version 2.2.12, and found that the performance was the same as 2.2.5. Same with version 3.0.0, and version 3.0.10. It might be possible that since then we implement some SMB call differently from what we did before. We'd need a debug level 10 log or a network trace to see what the client does. Volker pgpADhdtlAsOG.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbd panic
On Wed, Aug 01, 2007 at 10:47:35AM -0300, Walmiro Muzzi wrote: Can somebody explain to me what's goin on with samba??? What's your Unix, what's your Samba version etc. Can you also please provide your smb.conf and a debug level 10 log of smbd up to this fault? Please open a bug at bugzilla.samba.org with that info. Volker pgpMMIOoVrH1Z.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbd panic
On Wed, Aug 01, 2007 at 02:35:12PM -0300, Walmiro Muzzi wrote: Hi Volker. Red Hat Enterprise Linux 4 Samba version 3.0.10-1.4E.12.2 Can you reproduce this with 3.0.25b? Volker pgpSiMX1xMKVa.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] sam-fs and samba (copy while staging / timeout)
On Sun, Aug 05, 2007 at 08:10:50PM +0200, Flanders, Dean wrote: So my questions are: - Can I prevent this timeout error (without modifying users registry settings)? You might want to try 'aio read size = 1', given that you have compiled Samba with aio support. Volker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] logon requests on the BDC
On Mon, Aug 06, 2007 at 10:39:14AM +1000, Andrew Bartlett wrote: Are there special things to do to make the BDC bias work? How can I troubleshoot the reason why it does not work? It has more to do with the order that the WINS server returns the addresses. There were some plans to have this randomised at one point. That's false as well. Metze knows more, but iirc it's the one who answers the getdc port 138 request first. Volker pgp1ZSi32oBVs.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] full_audit on Samba 3.0.20 vs 3.0.25
On Fri, Aug 03, 2007 at 04:20:20PM -0400, Ryan Steele wrote: Just a quick question for you: Does Samba 3.0.20 support the full_audit module? I've got the module operating on two boxes, one with Samba The full audit module was added around 3.0.4. 3.0.25 and the other with 3.0.20, and only the former seems to interpret VFS directives, such as: full_audit:prefix = %u full_audit:failure = none full_audit:success = open write close On the 3.0.20 box, they seem to be ignored, which causes the logs to fill up very quickly. I appreciate any light that can be shed on this situation. Thanks in advance! Not sure what this is, I think the full smb.conf would be necessary here. Volker pgpOvkrWRjcYs.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Request for explanation on NFS re-export issue
On Mon, Aug 06, 2007 at 03:03:09PM -0700, Ray Van Dolson wrote: In any case, setting strict locking = no on my Samba server makes things work, so this at least is getting me by. posix locking = no is more appropriate here. But however: DONT re-export nfs-imported shares with Samba. Install Samba on the NFS server. Volker pgpqTmozZBpld.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Request for explanation on NFS re-export issue
On Tue, Aug 07, 2007 at 04:56:10AM -0400, John Drescher wrote: But however: DONT re-export nfs-imported shares with Samba. Install Samba on the NFS server. Just wondering as I have seen this advice a few times in the past. Would it be possible to use msdfs to make it look to the users that the files are still on one server as I have been exporting NFS links like that for many years and my users would be very upset if they had to go to 1/2 dozen servers instead of the one they have been using for years? Sure, but to switch from non-dfs to dfs be aware that you have to boot all clients. It may also be possible that you're right now sitting on a version that has the msdfs options set to yes. Check your testparm output. Volker pgpU9M1q3kwNa.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] FW: Slow opening files on Samba Version 3.0.22 (UPDATED)
On Tue, Aug 07, 2007 at 08:42:35AM -0400, Will Holmes wrote: I noticed that when I opened the file on the server the smbd process takes 80% of the CPU until the file is opened. What is smbd doing at this point? strace -p pid might shed some light on that. Volker pgpx4WuXBVDh3.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] full_audit on Samba 3.0.20 vs 3.0.25
On Thu, Aug 09, 2007 at 11:34:29AM -0400, Ryan Steele wrote: On the 3.0.20 box, they seem to be ignored, which causes the logs to fill up very quickly. I appreciate any light that can be shed on this situation. Thanks in advance! The all/none flags were added with r13028, tags/release-3.0.20 was created with r9403. So none was added after 3.0.20. I think you have to upgrade. Volker pgp66HhsErHk5.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba winbind and nsswith.conf
On Fri, Aug 10, 2007 at 02:23:37PM -0400, Mark Campbell wrote: When I do a getent passwd I get the results for /etc/passwd and nothing from AD. That's planned. See winbind enum users / winbind enum groups. When I auth to the samba server the permissions set based on groups do not work. How do you exactly test? Really logging in as the user or via su - username? Volker pgpxwPW2pamPK.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Issue with Samba version 3.0.25b on Debian
On Sat, Aug 11, 2007 at 10:24:07PM +0100, Dan Peachey wrote: I have an issue with Samba version 3.0.25b on Debian. I am receiving a number of mails from my server with the following: The Samba 'panic action' script, /usr/share/samba/panic-action, was called for PID 18483 (). We need a backtrace from that. The log file should have it. Also, when running 'smbstatus' I get the following at the bottom of the output: -- tdb(/var/run/samba/locking.tdb): tdb_rec_read bad magic 0xd9fee666 at offset=678200 locked file list truncated That's not desirable, but normal. smbstatus opens the tdbs readonly, which means no locking. When there's heavy activity on a larger file server, these messages are possible. It should not happen in quiet periods. Volker pgpE6wTDeWihv.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Issue with Samba version 3.0.25b on Debian
On Sun, Aug 12, 2007 at 09:12:58AM +0100, Dan Peachey wrote: Thanks for the reply. Here is the backtrace info from the log file: -- [2007/08/08 08:49:54, 1] smbd/service.c:make_connection_snum(1033) ian (192.168.1.35) connect to service shared initially as user ianlang (uid=1005, gid=106) (pid 18483) [2007/08/08 09:00:43, 0] lib/util.c:smb_panic(1632) PANIC (pid 18483): Could not store share mode entry Is it possible that the file system where you store the locking.tdb is full? Volker pgpdWNBYAfw1T.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Issue with Samba version 3.0.25b on Debian
On Sun, Aug 12, 2007 at 10:31:47AM +0100, Dan Peachey wrote: It is OK, there is a lot of space left on the disk. The next most likely reason is that you locking.tdb is indeed corrupt. reiserfs? Does it become better if you shut down smbd, delete it and restart smbd? Voler pgp1zPKVo8eOf.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind enum = yes ... oreilly samba books says turn off ... but things break. confused :-(
On Fri, Aug 17, 2007 at 03:39:33AM +0200, Timur I. Bakeyev wrote: BUGS The getgrouplist() function uses the routines based on getgrent(3). If the invoking program uses any of these routines, the group structure will be overwritten in the call to getgrouplist(). If getgrouplist really finds group members by doing the setgrent/getgrent/endgrent thing, then you're screwed. You just can't use FreeBSD as a member of large domains. I've seen a domain where domain users has more than 100.000 users, and doing getgrent on that one takes ages. This domain has other huge groups. Another function, getgroups(2), seems, doesn't have such a comment in the man page, but I can't really imagine, where else it can get user group list information. getgroups(2) at least under Linux that fetches the group list from the kernel. Someone must have put them there with setgroups(2) first, so this is no help. I thought, that Linux has similar approach, but from your question it seems it's not. Can you give more details, please? Linux has an nss extension called initgroups that exactly asks the right question: What are the groups for this user?. It does not delegate this to the login application which just would have to fall back to getgrent. Volker pgpQbHGM9A9m4.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Truncate with libsmbclient
On Sun, Aug 19, 2007 at 07:43:26PM -0400, Francis Giraldeau wrote: So, I implemented a truncate function with libsmbclient. I would like to know if someone can give me some feedback about the patch, principaly about the usage of the smbclient API, to know if the patch is right. You copy stuff around??? There is a truncate operation in smb, it's trans2 setfileinfo level 1020 (SMB_FILE_END_OF_FILE_INFORMATION) Volker pgpwKFKoJW5Qq.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Memory usage
On Tue, Aug 21, 2007 at 10:59:01AM +0400, Rajeev R Veedu wrote: Could someone from the list help me to understand the memory usage by SMB process?. I have a samba production server with about 50-70 SMB process. Initially we had 2gb of RAM and the top command showed almost all memory had been used. There were delays in the file access and listing directories from user side. Yesterday evening we had increased the memory to 4 GB and it showed around 3GB free. But this morning when all users started accessing the files it went back to almost near to old figure. (about 1mb free space). Before we upgrade to further (say 8gb) I would like to know how much memory each SMB process will take. ' The thumb rule for smbd is 2-3MB of real memory per connected client. So with 2GB of RAM you definitely have enough RAM. The slowdown you see is almost 100% due to other things. The fact that you only see very little memory free is a good thing and it won't change if you put 16gig into your box: All non-used memory is used as cache. Volker pgphcrKR5SW0q.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Segment violation during the list of directory with smbc_readdir
On Tue, Aug 21, 2007 at 01:30:27PM +0400, Stanislav Tihohod wrote: Dear samba, I have a small piece of code that crashes on Samba 3.0.5: Can you please retry this against 3.0.25c? Thanks, Volker pgptSbQUYiayn.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Segment violation during the list of directory with smbc_readdir
On Tue, Aug 21, 2007 at 02:43:06PM +0400, Stanislav Tihohod wrote: As I said in the previous letter, no crash occurs against 3.0.25b. The problem is that Samba 3.0.5 is used in a product that is currently in production. So I need to have a proof that this bug is in Samba and is fixed in a newer version. Could anybody help, please? Well, it will be difficult to get support for such an old version for free on the mailing lists. See http://samba.org/samba/support for companies doing commercial support for Samba. And if you have 3.0.5 in a product, just look at the source code and see where it crashes. Standard debugging, compile with -g and run it under valgrind to get a backtrace with line number information. You should be able to quickly nail and fix it. Volker pgpU3Vjb8S1x0.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba on Debian with shares on nfs-filesystem
On Tue, Aug 21, 2007 at 05:25:21PM +0200, Thomas Flaig wrote: I would like to have some samba-shares on a nfs-filesystem. This is not supported. You should install Samba on the NFS server, and possibly redirect your users using MS-DFS. One potential workaround (no guarantees!) is to say posix locking = no on the relevant shares. Volker pgpC3YwzH2iNU.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba on Debian with shares on nfs-filesystem
On Tue, Aug 21, 2007 at 06:31:52PM +0200, Bernd Schubert wrote: On debian Sarge samba-3.0.22 worked fine, also with posix locking = no, on Etch windows has problems to store cached data on the end of the session unless posix locking = no is set. So far we never understood what makes the difference. Samba is still the same version, and kernel is also still the same customized 2.6.20. Only the libc and other libraries did change. Essentially it is the fact that we have seen too many problems with broken NFS locking implementations. If you can make it work, fine, but Windows and thus Samba use byte range locking a lot more than a typical Unix app does. So you will hit potential problems with NFS locking much quicker. Volker pgpRk5qpna6oY.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba on Debian with shares on nfs-filesystem
On Wed, Aug 22, 2007 at 11:43:47AM +0200, Thomas Flaig wrote: Is this documented? Or better: Where is this documented? I don't know if this is documented, sorry. Where would you expect it to be documented? It's the same with reiserfs: Where would you document that reiserfs eats tdb files for breakfast? Volker pgpn1kHxqRfJB.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba on Debian with shares on nfs-filesystem
On Wed, Aug 22, 2007 at 01:15:18PM +0200, Thomas Flaig wrote: Somwhere in a section or file with a title such as limitations or known bugs[0] or just don't do it!. Can you send in a patch to the docs? This way you make sure that it gets in the place where you would expect it. Thanks, Volker pgpJ3IQ372kNX.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: read_data: read failure for 4 bytes
On Thu, Aug 23, 2007 at 11:49:00AM +0200, Helmut Hullen wrote: Doesn't help always. I allow only smb ports = 137 138 139 137 and 138 are not used for smb, so smb ports = 139 would be more appropriate here. 137 and 138 are used for UDP in nmbd. Volker pgpmK2HI8y28p.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Build error on 3.0.25c using Tru64
On Wed, Aug 22, 2007 at 07:23:36PM -0500, Doesnt Compute wrote: Has anyone built this on Tru64 Unix? I downloaded and attempted to build today and received this, Try the attached patch, checked in with revision 24634. Thanks, Volker pgpT9mWnJTZOV.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SAMBA Team - Still no SiSE rpms for 3.0.25c
On Fri, Aug 24, 2007 at 08:40:33AM -0500, John H Terpstra wrote: Is anyone still building rpms for SuSE? They used to be built the same day of the release, now they are trailing far behind. Is Lars still with opensuse and still building?? I run OpenSUSE 10.2 x86_64 - you can download the RPMS from: ftp://ftp.primastasys.com/pub/ Note: To build x86 (32-bit) binaries, just fetch the SRPM file, then built on your own system by running: Alternatively, try ftp.sernet.de. Volker pgpoAPod6yLAA.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] RE: migrating samba to new hardware and different OS
On Sun, Aug 26, 2007 at 03:12:30PM +0200, Andrew Jeremy Gargan wrote: write list = @agroup, auser, another user Fedora bug. Change the @ to +. Volker pgpGdoXspB1fN.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbd and pdbedit segfault
On Sun, Aug 26, 2007 at 09:36:54PM -0800, Marc Casillo wrote: Whenever a particular user is referenced, either in in smbd or pdbedit, a segfault or security context stack overflow is generated. You did not specify the Samba version. But this rings a bell that it might have been a problem with 3.0.23. Can you reproduce this with 3.0.25c? Volker pgpdFcdqQpbxo.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: Any filesystem for Samba shares? (Was: Re: [Samba] How to use ZFS volume)
On Thu, Aug 30, 2007 at 09:05:02AM +0200, Thomas Flaig wrote: Samba generally will work with any filesystem, the only condition is that it has to be posix compatible. Do you really mean any filesystem or only any local filesystem? Any file system that is posix compatible and *works*. I thought that nfs-filsystems should be a posix compatible filesystem. Or is nfs not posix compatible? I can't really speculate about Posix compatibility of NFS, this probably very much depends on the specific implementation. The problem with NFS is that the implementations just suck. For example yesterday I heard a specific implementation pretty quickly locks up hard when you run Tridge's pingpong test (a test doing nothing but fcntl locks with intermixed reads and writes), even as a normal user. Samba has no way to deal with this kind of deficiency. Yes, in theory it should work, but there are so many problems that at least I just refuse to look into them. Others from the Samba Team I talked to feel very similar. And for me, that's a pretty good definition of not supported. Volker pgpoSqpUgSmCP.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NT MD4 password check bug??
On Thu, Aug 30, 2007 at 11:51:35AM -0500, Gerald (Jerry) Carter wrote: Yup Solaris10, using Samba 3.0.25c. Was that bug fixed in 25c? Nope. Will be fixed in the next one though. FYI: Just compiled current 3_2 on Solaris 10 with cc, and could not reproduce it. asdfasdfa and asdfasdfasdf as passwords work fine for me, at least coming from smbclient. I don't really have a Windows set up at the right place, so I can't test it right now. Volker pgpnzapNKnmeZ.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Removing mangle map parameter.
On Tue, Sep 04, 2007 at 12:48:20PM -0700, Jeremy Allison wrote: I'm planning to remove the mangled map parameter as part of the removal of pstrings/fstrings from the 3.2 codebase. Hey, I was in the middle of sanitizing that code :-) Volker P.S: I gave up, this is just too ugly... pgpUgbcfyDWPc.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Removing mangle map parameter.
On Tue, Sep 04, 2007 at 12:59:31PM -0700, Jeremy Allison wrote: Hey, I was in the middle of sanitizing that code :-) Please don't - I'm in the middle of a big patch :-). What about pre-versions of that? Volker pgpzfbkSzk0AT.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] limit login
Hi! On Wed, Sep 05, 2007 at 11:08:31AM +0200, Pascal Legrand wrote: i'm looking for a solution to limit the login of a user . i mean when a user is already loged on one machine, it's not possible for him to log twice on an other machine at the same time. is there a way to do that ?? As discussed on irc: I've once written these logon_once patches which don't apply cleanly anymore. There hasn't been much interest at that time, so it has not been applied upstream. You are one now, anybody else? Volker pgpaLhfOCgqPX.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: Re-2: [Samba] limit login
On Wed, Sep 05, 2007 at 12:14:25PM +, [EMAIL PROTECTED] wrote: yes please this would fix problems with have with user loggin on at one end of the site then at the other later. Just to make sure: You are aware that once someone has logged in an administrator has to reset that account. This is *NOT* automatic if the user logs out from his first workstation. That functionality is impossible to achieve for us, Windows does not tell us when the user logs out. Volker pgpWy6qrFJgqu.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: Re-2: [Samba] limit login
On Wed, Sep 05, 2007 at 02:38:00PM +0200, Helmut Hullen wrote: You are aware that once someone has logged in an administrator has to reset that account. This is *NOT* automatic if the user logs out from his first workstation. That functionality is impossible to achieve for us, Windows does not tell us when the user logs out. Can a postexec line help? No. Volker pgp50z3m9eLVM.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Invalid hash for xattr (system.posix_acl_access) associated with [NULL]
On Wed, Sep 19, 2007 at 03:58:47PM +0200, Brad C wrote: Version 3.0.23c-SerNet-SuSE Symtoms: extremely extremely slow, high processor usage, in the dmesg, hundreds of these entries... which direction should I go... Get the data off reiserfs on a real file system like ext3. QUICK. Volker pgpoiAkBwdQbb.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] thread removal
On Mon, Sep 24, 2007 at 11:16:28AM +0200, Gianluca Culot wrote: Unfortunately I did not changed all assigned usernames with anonymous ones. No a user in my net discoverd her name in the archive of this list, and is asking to remove the thread with her name. Sorry, no way to do this. The lists are archived at several places, and we (Samba Team) don't control all of them. Volker pgpJeXBxrbvLi.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba vs Microsoft Logon Protocols
On Wed, Sep 26, 2007 at 10:01:40AM -0400, Server Gremlin wrote: If my mapping of the notes in the smb.conf man page to the Microsoft jargon is incorrect, then could someone please provide me with a correct one? In particular, I am most curious to know if I am right about NT1 being the same thing as NTLMv1. If it is, then what is NTLMv2? The full story can be found on http://davenport.sourceforge.net/ntlm.html. But beware, this is not a particularly easy read :-) Volker pgpspbx0nRKhX.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba with NFS
On Wed, Sep 26, 2007 at 09:14:21AM -0500, David Harfst wrote: We've been doing this for years using a different NFS server. We've recently upgrade to new hardware and OS on this NFS server, and this has been a problem ever since. Any thoughts? Just DON'T re-export NFS imports with Samba. See a thread a couple of weeks ago. If you are really desperate, try posix locking = no and kernel oplocks = no. Volker pgpiwjhIYdQ0F.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3,0,10 - critical error, large site
On Wed, Oct 03, 2007 at 02:36:14PM +1000, adrian sender wrote: I am getting this error in the smbd.log file very often. Configuration is as follows. Sorry, too little info. What calls ist it failing on? Volker pgpeO8YNPxLwl.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Linux in a Windows 2k3 domain - odd lockout issue
On Tue, Oct 02, 2007 at 08:46:24AM -0700, Christopher Dick wrote: I don't have to wait any time at all to re-enable my user ID in the AD. I just walk around the cube farm to the Windows admin and have him clear the checkbox on my user ID. Walk back to my cube and everything is back to working again. Are you logged into your local workstation as a user with the same name as your domain account, but with a different password? Volker pgprrhBptKv9u.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] security = domain -- samba adds its netbios name as samba domain to LDAP
On Fri, Oct 05, 2007 at 02:11:23PM +0200, Christian Brandes wrote: The samba domain should be mycompany as stated in workgroup and not USER as stated in netbios name! Works as designed. Every box has a SAM of its own. Volker pgpt4CM52sw11.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] security = domain -- samba adds its netbios name as samba domain to LDAP
On Fri, Oct 05, 2007 at 07:15:44PM +0200, Michal Dobroczynski wrote: I experienced exactly the same behaviour. I expected my BDC stations to reuse the 'workgroup' attribute, but the effect was exactly like Christian wrote. What do you mean by works as designed? Can we just use it that way, where each BDC has a domain on its own? Ok. I think I understood something wrong. I thought the logfile was from a member server, not from a BDC. If a BDC creates its own name as a sambaDomain object in LDAP, then there's a misconfiguration or a bug. A BDC does not have a local SAM, only member servers do. Sorry for the confusion, Volker pgpYZUSwZxY1b.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] security = domain -- samba adds its netbios name as samba domain to LDAP
On Fri, Oct 05, 2007 at 10:15:02PM +0200, Michal Dobroczynski wrote: Well - what I have discovered is that setting domain logons = Yes domain master = No seems to solve the problem. ... because this *is* the only way to tell Samba to be a BDC. This must be somewhere in the docs. Volker pgp9Xw9SOOOuy.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Unusable performance over WAN (part 2)
On Sun, Oct 07, 2007 at 09:31:23AM -0700, James Lamanna wrote: Server sends 1500 byte packet Client sends 52 bye ACK Server sends 1500 byte packet Client sends 52 byte ACK etc.. Can anyone think of a reason for this? I did not find a link spontaneously, but Windows sometimes falls back to something that we call rabbit pellet mode. Maybe google shows up something for you. Volker pgpx5Au2b06uJ.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] slow opening of files / make_connection: connection to IPC$ denied due to security descriptor.
On Tue, Oct 09, 2007 at 05:31:33PM +0200, Andre Berloth wrote: Also, in my logs I see a lot of these 'connection to IPC$ denied due to security descriptor' errors, and searching google didn't hint me what the source of the problem was. Any idea's what the origin of this error is? You have a security descriptor for IPC$ in your share_info.tdb. If you do not rely on share security descriptors being set via mmc or the srvmgr, simply delete share_info.tdb and restart smbd. If you do have settings there, fix the secdesc for IPC$. Volker pgpUaQExAZxNr.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Winbindd on a PDC
On Wed, Oct 10, 2007 at 07:52:43AM +0200, Marc Muehlfeld wrote: is it possible to run winbindd on a Samba PDC? I allready asked this a longer time before, but there it couldn't. Sure you can. With trusts you even have to. But make sure that it's joined to its own domain. Volker pgpDBxxQjW9iS.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can't see or change ACLs on Windows
On Wed, Oct 17, 2007 at 06:25:06PM -0400, Eric Diven wrote: I added nt acl support = yes to the config file and restarted with no effect. The manpage for smb.conf said yes is the default, so I had been omitting it, but I suppose it can't hurt. The share is on a UFS volume on Solaris, I couldn't find a documented acl option, so I tried doing a remount with it anyway, but mount just issued a warning saying it was ignoring it. On the Linux box, I remounted with acl, and it also didn't have any effect. I still can't see or set acls on either from windows. I can set the acls from the command line in either with setfacl, and see them with getfacl. What does smbd -b | grep ACL say? Volker pgpkmBdcS3pDV.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can't see or change ACLs on Windows
On Thu, Oct 18, 2007 at 09:11:59AM -0400, Eric Diven wrote: Here you go: bash-3.00# /usr/local/samba/sbin/smbd -b | grep ACL HAVE_SYS_ACL_H HAVE_SOLARIS_ACLS HAVE__ACL HAVE__FACL It looks plausible to me, but I'm assuming you know better than I what That indeed looks right. No idea then, sorry. Maybe you want to look in a debug level 10 log of smbd, search for call_nt_transact_query_security_desc, maybe you find something obvious. Volker pgpFXilmHSpUl.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: folder contents on Win2k SP4 clients become outdated
On Mon, Oct 22, 2007 at 06:24:57AM +, Brolin Empey wrote: For example, see this article in Microsoft's Support Knowledge Base: http://support.microsoft.com/kb/928571/en-us Proper change notify support came only in with 3.0.25. It uses inotify now which (I believe) was added to the kernel with 2.6.13. If inotify is not available, Samba broadcasts all events generated by other Samba clients properly, so in that case you miss all events generated by unix processes. We have never had Windows Explorer show duplicate data. The duplicate folders problem is definitely real. I do not know whether it is caused by the client or server, though. We'd need sniffs and logfiles of that. Volker pgpmkX6kZGRqd.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can't see or change ACLs on Windows
On Tue, Oct 30, 2007 at 10:59:41AM -0400, Eric Diven wrote: Okay, here's what I've figured out from trying to do what you suggested: Well, so far we haven't seen any debug logs. Volker pgps7PLCZnOTc.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: tdb search optimization
On Fri, Nov 09, 2007 at 03:56:48PM +, Bruno Gomes Pessanha wrote: Is it possible to split the ntprinters.tdb in many parts as print queues quantity? Sorry if I asked something too far from reality but I was wondering if could make things work faster. You might try to do a tdbbackup -n 1 ntprinters.tdb and replace the ntprinters.tdb by its backup file. The -n 1 sets the new hash table size to 1, much more than the default 131. Volker pgp6fecSit1SH.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: tdb search optimization
On Fri, Nov 09, 2007 at 09:07:26PM +, Bruno Gomes Pessanha wrote: You might try to do a tdbbackup -n 1 ntprinters.tdb But, this makes tdb bigger, right? Sorry, but I didn't understand why increasing the hash would make search operations faster. Well, then you have to find other solutions. Sorry for the noise then. Volker pgpTSEI5343b0.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Explorer window does not update
On Wed, Nov 14, 2007 at 11:06:54AM +0100, [EMAIL PROTECTED] wrote: I am running samba-3.0.10-1.4E.12.2 on centos 4.5. Lately I am experiencing problems with explorere windows. If you eg. make a new folder by right-click in the window it is created, but the users cannot see it until they have refreshed by hitting F5. The same occurs if you delete a file or a folder. The file is deleted but it does not disappear from the windw until you hit F5. I have tried adding refresh = 1 in smb.con but this has no effect. Can anyone help? Proper notify support was added with Samba 3.0.25. Please upgrade to 3.0.26a, or ask your distribution provider to backport that feature if you can not upgrade. Thanks, Volker pgpxFuKTGVEJU.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] What is the maximum size for a Samba share?
On Fri, Nov 23, 2007 at 01:28:05PM +, Paul Hobbs wrote: Is there a maximum size for a Samba share? No. Volker pgpabGFAhraYO.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Question on number of winbindd demons
On Fri, Nov 23, 2007 at 02:56:40PM +0100, Jens Nissen wrote: I forgot to mention: Samba Version is 3.026a! Original-Nachricht Datum: Fri, 23 Nov 2007 14:28:41 +0100 Von: Jens Nissen [EMAIL PROTECTED] An: samba@lists.samba.org Betreff: [Samba] Question on number of winbindd demons Winbindd is supposed to have 2 processes running according to the documentation. When I start my samba server (security=ADS), I can see at least 4 Winbindd demons? (A) Is this intended? Yes. (B) How can I limit the number of winbindd processes? You can't but they also will not grow except if you add trusted domains to your domain. Volker pgprIA5WhAFRU.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] INTERNAL ERROR: Signal 11 in pid xxxx (3.0.26a)
On Sun, Nov 25, 2007 at 05:29:52AM -0800, Doug VanLeuven wrote: Marcin Kucharczyk wrote: DV You should be able to delete /var/db/samba (plus maybe the pid file) and DV restart samba. Samba will create any tdb files it needs like the DV initial startup. Tried ... reinstall was required Some mor information: It looks like the same or similar problem: http://lists.samba.org/archive/samba/2007-August/134620.html This particular bug report is highly unlikely to be a Samba problem. Also, I have a hard time to believe that you have to really deinstall Samba after a system crash. It *is* definitely possible to restart Samba from whatever state the system is in, possibly by removing tdb files. Removing and recompiling the daemons is definitely unnecessary. You might want to see what this removing/reinstalling really does. Volker pgpUHOVqv12lL.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Change in smbclient between 3.0.24 and 3.0.25c breaks third party app
On Wed, Nov 28, 2007 at 09:32:45AM +0100, Felix Leimbach wrote: A change in smbclient between 3.0.24 and 3.0.25c breaks [1] the gollem filemanager [2] and maybe others. In particular folder creation is broken unless the folder is a top level folder on the share. To create a subfolder level2 in the folder /level1 of a share gollem executes this command: /usr/bin/smbclient //1.2.3.4/sharename -p139 -Uusername -D /level1 -I 1.2.3.4 -c mkdir \level2\; With samba-3.0.24 and lower this creates the folder /level1/level2 as expected. With samba-3.0.25c and higher it instead creates the folder /levevl1level2 Changing the smbclient command to: /usr/bin/smbclient //1.2.3.4/sharename -p139 -Uusername -D /level1/ -I 1.2.3.4 -c mkdir \level2\; makes smbclient behave as expected. Deletion of folders is also broken in gollem starting with samba-3.0.25c but has not yet been tracked down to the exact smbclient command line. This smbclient change requires adjusting client applications and the gollem developers already indicated they are not eager doing that. Can anyone confirm whether this change in smbclient was intended or whether it is a bug? The samba changelog for 3.0.25 [3] mentions Add smbclient implementations of POSIX open/mkdir/unlink/rmdir, which I guess Can you track this down to a particular checkin? Now that we have everything in git, git bisect might tremendously help with it. Volker pgpvZvd3EFnts.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] DFS enumeration on a Samba hosted DFS tree.
On Mon, Nov 26, 2007 at 11:04:59AM -0600, Sean wrote: So it looks like the Samba NetDfsEnum handler doesn't recurse into directories (understandable though annoying for me) nor results in any usable enumeration of a hosted dfs tree. Looking at the code of enum_msdfs_links it does indeed not recurse. Given that Windows would do it (which I don't know), we certainly have to recurse here as well. This will potentially be a very expensive operation. Can you please file a bug report at https://bugzilla.samba.org and append a sniff against W2k3 that proves that Windows does indeed recurse when doing a dfscmd /view. No promise it gets fixed soon, but at least it does not get lost. Thanks, Volker pgpY8qBkyyjMJ.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] DFS, WAN links and file syncing
On Thu, Nov 29, 2007 at 10:58:24AM -0800, Michael St. Laurent wrote: Any advice? ;) First: Forget it. Second: Get a WAN accellerator box. But watch out for correct CIFS semantics, they are really tricky to get right. Volker pgp5vbxEPSVeU.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbd problem with inotify
On Mon, Dec 03, 2007 at 09:05:21PM +0100, Witold Tosta wrote: 2. I've moved the share from one reiserfs partition to another formatted under reiser4 filesystem. The problem occurs less than on reiserfs, but still happens. reiserfs is known to play badly with Samba, so unless you can reproduce the problem with ext3 I doubt anybody will seriously look at it. Volker pgpHhNknPZcDq.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbd problem with inotify
On Tue, Dec 04, 2007 at 07:48:44AM +0100, Witold Tosta wrote: I've created ext3 partition and moved kirchner share into that ext3 partition. The issue (error) that I wrote in my main post still appears. Moving share into ext3 filesystem didn't change anything. I assume it is not filesystem matter. I am starting to believe that it is the case of badly working gis software, not Samba server. But I still don't know what does my samba error mean and what does this concern. Then please file a bug report at https://bugzilla.samba.org, upload your smb.conf and a full debug level 10 log leading to that error. Posting that logfile is too much for the list, thus the bug report. Volker pgp3KGtSJBfDU.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Is there any API in the samba suite for the program?
On Tue, Dec 04, 2007 at 05:47:47PM +0800, chenyun_zhou wrote: Hello, I'm busy with the development with samba.I search on thewww.samba.org to find any API for my work, but failed. So I just wondering is there any API for the programer? Thanks!Yourstrendy There is not really a public API for Samba internals. There are efforts going on to improve that, but so far only the source code is your reference. What do you want to achieve? Volker pgpfpg2bXFX9N.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How to repair corrupt ntprinters.tdb?
On Thu, Dec 06, 2007 at 11:17:09AM +0100, Christoph Peus wrote: Hi, we are using samba 3.0.24 as a printspooler for 80 network printers with a 500kB ntprinters.tdb for some years now. When we recently restarted samba we noticed that the ntprinters.tdb automatically shrinked to 24kB and printing was no longer possible. tdbdump of the original tdb-file is impossible too: Failed to open ntprinters.tdb The strange thing about this: we can solve the problem temporarily if we copy the original 500kB tdb over the shrinked version while samba is already running! So samba seems to accept the tdb-files contents if it has been started with a clean tdb-file. Is there something like a tdb repair-tool? I would be lucky to find a way of getting all the settings out of this somehow corrupt tdb instead of rebuilding it from scratch... Any ideas? tdbbackup? Volker pgpstBoDUSn0a.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: How to repair corrupt ntprinters.tdb?
On Thu, Dec 06, 2007 at 12:52:15PM +0100, Christoph Peus wrote: lunkwill tmp # tdbbackup -v ntprinters.tdb restoring ntprinters.tdb ntprinters.tdb.bak: No such file or directory lunkwill tmp # tdbbackup ntprinters.tdb Failed to open ntprinters.tdb Ok, then you're basically screwed. You might want to look at it with tdbtool, but to get the data out of the tdb file and/or repair it you need to be quite familiar with the tdb format. Sorry, Volker -- SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen phone: +49-551-37-0, fax: +49-551-37-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen pgpiQFQXX48tK.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] scannedonly samba anti-virus vfs module
On Mon, Dec 10, 2007 at 06:54:46PM +0100, Olivier Sessink wrote: What is the best way to keep you informed as we modify the VFS layer ? I was hoping that somewhere in the future the vfs module part of the code could be included in the samba source. I'm not sure what the requirements are for that. But it would make things very easy for end-users (end-administrators). Compiling the vfs module is right now a bit of a hassle for users that don't compile samba from source themselves. Can you post a patch against the git repo v3-2-test branch that adds your module? Thanks, Volker pgpdJkV1wdCXC.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] scannedonly samba anti-virus vfs module
On Mon, Dec 10, 2007 at 08:53:47PM +0100, Olivier Sessink wrote: I'll have to dive into GIT then first (I've never left good old cvs up til now), but I'll see what I can do. If you're uncomfortable with git, you might look at rsync samba.org::ftp/pub/unpacked/samba_3_2_test But git is really worth it :-) is it a good idea if somebody would first give a review of the code before merging it? Changing code after the merge is probably more difficult (sending a patch to a maintainer, the maintainer merging the code, etc.). Sure. A plain patch is also fine. But it will be up to you to make it work with 3.2 anyway at some point :-) Volker pgpXEmTF0ZOnr.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NetUserGetGroups query
On Thu, Dec 13, 2007 at 04:25:16PM +0800, Xu Qiang wrote: Recently I have been involved in a task to use LANMAN protocol to determine whether a user belongs to a certain group. Do you really need the LANMAN protocols? This would only make sense if your target servers are OS/2. Windows these days uses DCE/RPC, and here in particular the SAMR pipe. You would find the appropriate functions in rpc_client/cli_samr.c. Volker pgp3TyApidr0D.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NetUserGetGroups query
On Thu, Dec 13, 2007 at 06:32:13PM +0800, Xu Qiang wrote: Btw, if I were to use the function is cli_samr.c to get the group users belonging to, which options and parameters shall I pass to the binary smbclient_x? You might better go with the net binary. See the manpage and source code for it for further information. Volker pgpW07ubjB6eH.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 3.2 Compile Error.
On Mon, Dec 17, 2007 at 10:26:36AM -0500, Linux Addict wrote: I copied the library from another host and ran install -m 755... and it worked. But when makerpms.sh runs it doesn't seem to find the library. Help me resolve this.. makerpms is wrong. That lib doesn't exist anymore. Volker pgpi0IP3oPjyY.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 3.2 Compile Error.
On Mon, Dec 17, 2007 at 04:17:00PM -0500, Linux Addict wrote: Thanks volker...If that lib not required, then can we comment those lines in spec file? or any other workaround? Have you(sernet) RPMed it? If you send a patch with the lines removed, I'll apply it certainly. And no, we (SerNet) haven't made 3.2 RPMs yet. Volker pgp5WjZAoLIEr.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Invalid request size nsswitch/winbindd
On Wed, Dec 19, 2007 at 02:24:37PM +0100, Gianluca Culot wrote: Hello list I've seen there is a discussion about this error Dec 19 10:30:00 antares winbindd[90393]: [2007/12/19 10:30:00, 0] nsswitch/winbindd.c:request_len_recv(544) Dec 19 10:30:00 antares winbindd[90393]: request_len_recv: Invalid request size received: 2084 (expected 2088) but the suggested remedy of sttoping and starting samba granting all winbindd processes died doesn't work for me I'm running e freebsd 6 box with samba-3.0.28,1 I ALWAYS portupgraded, never built custom packages or from sources. a completely similar box (portupgraded in the same way and running the SAME samba version) doesn't report this error both samba are attached and referring to the same domain. actually this error doesn't seem to bring any problem to the user and server operations... but it is reported VERY frequently ! any suggestion ? Reboot your box. It's not only smbd, all processes in the system potentially can trigger this error. Volker pgpSWz67diuJD.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Invalid request size nsswitch/winbindd
On Wed, Dec 19, 2007 at 11:37:36AM -0500, Charles Marcus wrote: On 12/19/2007, Volker Lendecke ([EMAIL PROTECTED]) wrote: Reboot your box. It's not only smbd, all processes in the system potentially can trigger this error. Just to be clear - you're saying that anytime Samba is upgraded, I should REBOOT?? Well, I think almost everything uses nss. So it's not a Samba thing, it's a problem that the nss subsystem does not reload the shared libraries when they change. For example if you install a new libnss_ldap.so, you have exactly the same problem. Volker pgpJ2X66wV11z.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] problem with samba 3.0.28/Solaris 8/smbclient
On Wed, Dec 19, 2007 at 09:35:15AM -0600, Kenneth Marshall wrote: Is there anything else I can do to help track this problem down? Is anyone else running Samba 3.0.28 on Solaris 8? With Heimdal Kerberos or with MIT Kerberos? I would appreciate any feedback. I'd be surprised if this is kerberos specific. Can we see a tcpdump of smbclient doing its job up to the crash? Volker pgpmBHEuxB9q8.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] optimizing samba for 2000 users
On Thu, Dec 27, 2007 at 04:28:55PM +0530, Ankush Grover wrote: Dec 27 15:28:49 fs1-3 smbd[17377]: tdb_chainlock_with_timeout_internal: alarm (10) timed out for key DC in tdb /etc/samba/secrets.tdb Does it help if you start winbindd? Volker pgprfgemsoPCr.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
