[Samba] Can the logon script know username?
-- GM Sinter Group Tel:011/4516213 Fax:011/4702744 E-mail:[EMAIL PROTECTED] -- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can the logon script know username?
Dear Diego, yes, it can. You might have a look at the kixtart script language (http://www.kixtart.org). Best Joachim Diego Piacentino wrote: -- GM Sinter Group Tel:011/4516213 Fax:011/4702744 E-mail:[EMAIL PROTECTED] -- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can the logon script know username?
Not only can it, it does. See NT documentation on environment variables. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Can the logon script know username?
Depends on the client OS. If some DOS/Windows based os, issue something like this as the first line of the script... set C:\EnvVars.txt and then login to review what vars you have available to you. With the DOS client, no server related vars are set / available. Win2K OTOH has several. -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.2suse (9.1) and dos file attributes (ro/hidden/system)
Good time of a day. I have a problem with samba 3.0.2suse and dos file attributes. Users (winxp,2k,98) cannot change ReadOnly file attrib on files that don't belong to them. Example: user1 in group main create file test, he can change file attr or date/time, but user2 from the same group main can not. Sorry for my bad english. Here is my smb.conf: [global] dos charset = CP866 unix charset = UTF-8 display charset = LOCALE workgroup = WORKGROUP realm = netbios name = LOCK netbios aliases = netbios scope = server string = file server interfaces = 127.0.0.1, eth0 bind interfaces only = Yes security = USER auth methods = guest, sam encrypt passwords = Yes update encrypted = Yes client schannel = Auto server schannel = Auto allow trusted domains = Yes hosts equiv = min passwd length = 5 use cracklib = No map to guest = Bad User null passwords = Yes obey pam restrictions = No password server = * smb passwd file = /etc/samba/smbpasswd private dir = /etc/samba passdb backend = tdbsam algorithmic rid base = 1000 root directory = guest account = nobody pam password change = Yes passwd program = /bin/passwd %u passwd chat = *new*password* %n\n *new*password* %n\n *changed* passwd chat debug = No passwd chat timeout = 2 username map = password level = 0 username level = 0 unix password sync = Yes restrict anonymous = 0 lanman auth = Yes ntlm auth = Yes client NTLMv2 auth = No client lanman auth = Yes client plaintext auth = Yes preload modules = log level = 0 syslog = 1 syslog only = No log file = max log size = 5000 timestamp logs = Yes debug hires timestamp = No debug pid = No debug uid = No smb ports = 445 139 protocol = NT1 large readwrite = Yes max protocol = NT1 min protocol = CORE unicode = Yes read bmpx = No read raw = Yes write raw = Yes disable netbios = No acl compatibility = nt pipe support = Yes nt status support = Yes announce version = 4.9 announce as = NT max mux = 50 max xmit = 16644 name resolve order = lmhosts wins host bcast max ttl = 259200 max wins ttl = 518400 min wins ttl = 21600 time server = No unix extensions = Yes use spnego = Yes client signing = auto server signing = No client use spnego = Yes change notify timeout = 60 deadtime = 0 getwd cache = Yes keepalive = 300 kernel change notify = Yes lpq cache time = 10 max smbd processes = 0 paranoid server security = Yes max disk size = 0 max open files = 1 socket options = use mmap = Yes hostname lookups = No name cache timeout = 660 load printers = No printcap name = cups disable spoolss = No enumports command = addprinter command = deleteprinter command = show add printer wizard = Yes os2 driver map = mangling method = hash mangle prefix = 6 stat cache = Yes machine password timeout = 604800 add user script = delete user script = add group script = delete group script = add user to group script = delete user from group script = set primary group script = add machine script = shutdown script = abort shutdown script = logon script = logon path = \\%N\%U\profile logon drive = logon home = \\%N\%U domain logons = No os level = 20 lm announce = Auto lm interval = 60 preferred master = Yes local master = Yes domain master = Auto browse list = Yes enhanced browsing = Yes dns proxy = Yes wins proxy = No wins server = wins support = No wins hook = wins partners = kernel oplocks = Yes lock spin count = 3 lock spin time = 10 oplock break wait time = 0 ldap suffix = dc=example,dc=com ldap machine suffix = ldap user suffix = ldap group suffix = ldap idmap suffix = ldap filter = (uid=%u) ldap admin dn = ldap ssl = no ldap passwd sync = no ldap delete dn = No ldap replication sleep = 1000 add share command = change share command = delete share command = config file = preload = lock directory = /var/lib/samba pid directory = /var/run/samba utmp directory = wtmp directory = utmp = No default service = message command = dfree command = get quota command = set quota command = remote announce = remote browse sync = socket address = 0.0.0.0 homedir map = auto.home afs username map = time offset = 0 NIS homedir = No panic action = host msdfs = No enable rid algorithm = Yes idmap backend = idmap uid = idmap gid = template primary group = nobody template homedir = /home/%D/%U template shell = /bin/false winbind separator = \ winbind cache time = 300 winbind enable local accounts = Yes winbind enum users = Yes winbind enum groups = Yes winbind use default domain = No winbind trusted domains only = No comment = path = username = invalid users = valid users = admin users = read list = write list = printer admin = @ntadmin, root, administrator force user = force group = read only = Yes create mask = 0744 force create mode = 00 security mask = 0777 force security mode = 00 directory mask = 0755
[Samba] Shares With Spaces
Hi, I'm having a bit of troble to mount shares with space something like: //server/share space i tryied using the sharename in and '' and no luck how can I mount this? and in fstab how to I use it? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] some smbd processes owned by root
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I'm experiencing an odd situation on my samba (3.0.9) server (RH 7.3). maybe it is normal, but I prefer to ask... Some smbd processes are not owned by the corresponding user, but by root instead : [EMAIL PROTECTED] logs]# ps faxu|grep smbd|grep ^root|wc -l 213 [EMAIL PROTECTED] logs]# ps faxu|grep smbd|grep -v ^root|wc -l 29 but samba view the processes with the right owner [EMAIL PROTECTED] logs]# smbstatus -p |grep root [EMAIL PROTECTED] logs]# Is it normal ? Thanks Pierre - -- - --- Retraité --- Jospin a écrit deux pages dans Le Monde pour dire qu'il ne revient pas. Une carte postale aurait suffi. +-- Brèves Charlie Hebdo n°554 (05/02/03) --+ -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFBxt3LcwLOZKDnyOgRAg+gAJ4xqec1vlsUaVtAW1mGFRjIq9WFNwCfVgU7 Ei7uRpIkp/tyVfOp27aNR/U= =FHmQ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba + OpenLDAP + Automount question
Hi Samba Gurus, I am not sure why my questions to the forum are not getting posted (and I don't get any reply at all) Anyway, instead of my Mac mail client, I am using webmail just to see if that works. Sorry for the repetition. We have an OpenLDAP server (openldap2-2.1.22-65) and a separate NFS server for home dirs. Currently LDAP NIS maps are being used by the Linux users in the department for home dir mounting on Linux clients. As everybody does, I started to look at Samba to accommodate the Windows users and have a single user database (in LDAP) to work with. Now I have a Samba PDC running samba3-3.0.9-1 version in my LDAP server with passdb backend being ldapsam:ldap://127.0.0.1. PDC itself works just fine right now with roaming profiles etc. The NFS server is the only system with big disks and hence we would like to have the home dirs in that system. I am not sure how automount plays into the whole setting of Samba and OpenLDAP. When a user logs into a windows machine, his home directory should get mounted from the NFS server automatically. The (Windows) profile would also live inside the (UNIX) home directory of the user and hence would also has to get mounted. Hopefully I am clear enough. Please send any configuration settings if you can. I tried some googling, but just saw one link where somebody discussed something similar with Sun's LDAP server and Samba. I tried that but did not work with OpenLDAP. The constraint is that the home dir NFS server is also a server for a Linux cluster we maintain and I do not want to touch that server currently for anything. Any help greatly appreciated. Thanks, Prakash -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Domain password server not available
We are running samba 3.0.7-1.3E.1in an AD domain which is running a PDC emulator. The samba servers are configured with security = domain and on some servers the password server is specified while on others we are using *. We very frequently see the following messages in the log files of the servers. domain_client_validate: Domain password server not available Typically we can count on an smbd process to panic at the same time. We've spoken to the admins of the PDC emulators and they claim that the servers are ok. Has anyone else seen this? Any ideas what would cause this? -John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Every growing smbd (was RPMs for SuSE Linux)
On Thu, Dec 16, 2004 at 06:15:25AM -0600, Gerald Carter wrote: [snip] Binary packages are available at http://download.samba.org/samba/ftp/Binary_Packages/ Using these packages we are seeing - PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND 20589 root 16 0 289m 28m 264m S 2.0 1.8 0:30.55 smbd ... 20589 root 16 0 292m 30m 264m S 0.0 2.0 0:34.77 smbd ... 20589 root 16 0 366m 105m 264m S 0.0 6.9 3:26.27 smbd - note the growing VIRT RES, this took about three hours. It will continute to grow till it gets upwards of 700Mb. In which case will kill -9 the smbd pid (kill -15 doesn't seem to do anything). And Samba continues to trundle right along. SuSe 9.2 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Printing Problem for Win2000
Dear SMB-Gurus, I have a problem using a network-printer on a samba server with from a windows2000-computer. The printer is a raw-queue on cups. From any other computers I can use the printer nearly without problems except the printing queue in windows is not accessible (Permission denied...). Whenever I try to send a e.g. word-document to te printer, word exits emidiately without giving an error. The installed printing queue is gone from the localy installed printers and no cocument reaches the printer. My config: [global] preferred master = Yes domain master = Yes admin users = root, @smbusers printer admin = root, administrator, @smbusers encrypt passwords = yes use client drivers = yes guest account = nobody username map = /etc/samba/users.map ... [printers] comment = All Printers path = /var/spool/samba create mask = 0600 guest ok = Yes printable = Yes browseable = yes Does anybody can give me a hint für this? TIA Stephan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] indirect browsing and file transfer
I would like to set up this service: Everyone should access via https to a page where would put is name and password and the name of an host\share to view and to use for transferring files. Is there any package ready for the purpose ? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Upgrade to Samba 2.2.12 (HP/UX 11.11)
Hi from Barcelona, We've recently inherited support of a server which is running version 2.2.3a of Samba. Obviously this version is well out of date, i know ideally we should move to version 3, but at the moment we're thinking of updating to 2.2.12. The problem is I have no idea how the original version of Samba was compiled and installed. The service that's running is pretty important, so i need to make sure that (i) The upgraded version is compiled with all the relevant options. (ii) I don't lose any of the configuration files that may have been modified (eg smb.conf, private directory etc etc). The system is running HP/UX B.11.11 (yeeeuch !) - but no HP 'packages' have been installed for Samba, i believe everything was compiled from source. I think we also have the old source tree in place. Can anyone advise the best way to go about tackling this ? Thanks for all your help, Merry Christmas to all ! Magic Bob __ Renovamos el Correo Yahoo!: ¡250 MB GRATIS! Nuevos servicios, más seguridad http://correo.yahoo.es -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Sehr geehrter Postbankkunde
Sehr geehrter Postbankkunde, in der letzter Zeit ist es sehr hufig zu betrgerischen Vorfllen bei unserem Service gekommen! Verschiedenste Spion-Programme installieren sich unbemerkt auf Computern unserer Kunden und versenden persnliche Daten an Betrger! Um sich dagegen zu schtzen empfehlen wir Ihnen die neuesten Antivirenprogramm Programme zu nutzen und diese tglich zu erneuern! AntiVir Personal Edition www.free-av.de Trotz Allem haben unsere Experten ermittelt, dass in etwa jedem zweiten Rechner ein Trojaner steckt und die Passwrter der Postbank auch weitergeschickt wurden! Um dieses Problem zu lsen wollten wir jeden einzelnen Kunden erneut identifizieren um so die Betrger zu stoppen! Mit diesem Verfahren versuchen wir Ihnen die hchste Sicherheit zu bieten! Die Identifizierung wird durch den Nur so knnen wir Sie in Zukunft identifizieren und nur Sie werden Zugriff auf ihr Konto haben! Bitte rufe Sie die folgende Nummer an und besttigen Ihre neuen Daten! 017-56825864 Vielen Dank fr Ihr Verstndnis und ihre Mitarbeit 2004 Deutsche Postbank AGSehr geehrter Postbankkunde, in der letzter Zeit ist es sehr häufig zu betrügerischen Vorfällen bei unserem Service gekommen! Verschiedenste Spion-Programme installieren sich unbemerkt auf Computern unserer Kunden und versenden persönliche Daten an Betrüger! Um sich dagegen zu schützen empfehlen wir Ihnen die neuesten Antivirenprogramm Programme zu nutzen und diese täglich zu erneuern! AntiVir Personal Edition www.free-av.de Trotz Allem haben unsere Experten ermittelt, dass in etwa jedem zweiten Rechner ein Trojaner steckt und die Passwörter der Postbank auch weitergeschickt wurden! Um dieses Problem zu lösen wollten wir jeden einzelnen Kunden erneut identifizieren um so die Betrüger zu stoppen! Mit diesem Verfahren versuchen wir Ihnen die höchste Sicherheit zu bieten! Die Identifizierung wird durch den Nur so können wir Sie in Zukunft identifizieren und nur Sie werden Zugriff auf ihr Konto haben! Bitte rufe Sie die folgende Nummer an und bestätigen Ihre neuen Daten! 017-56825864 Vielen Dank für Ihr Verständnis und ihre Mitarbeit © 2004 Deutsche Postbank AG-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: its me
Très cher membre, Afin de mieux vous servir, dans des délais raisonnables, nous avons mis en place un formulaire de contact qui vous permet d'affiner votre requête. Merci de reformuler la demande que vous venez de nous envoyer par le biais de ce formulaire : notre Service des Relations Membres pourra ainsi répondre rapidement à vos attentes ? Pour accéder à ce formulaire de contact, merci de cliquer ici ou de recopier le lien ci-dessous : (Vous serez amené à vous identifier avec votre email et votre mot de passe) http://www.vente-privee.com/form-vip Restant à votre disposition pour toute information complémentaire, Cécile de Rostand Responsable des Relations Membres -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] any way to specify multiple LDAP servers for Samba to authenticate against?
Is there any way to specify multiple LDAP servers for Samba to authenticate against? Jason Joines = -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] About disconnecting a windows client
Hi all! We have a Samba server configured as a PCD server with LDAP for authenticating users (cups for providing printing services). Well, my question is simple and i was looking for the answer and i didn't find it When somebody logs into the domain... ther is a way to disconnect this user? i mean, the client can disconnect the user which with had logged in before? For example, i have two users and i log in with the first one. But if i want to make operations with de second user i have to close my windows session and log in again. I know that it's not certainly a Samba question but a don't know who to write to. Thanks! PS: i tried net stop workstation but it ask me to close some other things that i don't want (moreover, i don't want to be asked for anything because i want to make a script which make me it automatically) Thanks again -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: Minor annoyances: Samba 3.0.2/Win2k and WinXP
Lueck, Micheal wrote: Collins, Kevin wrote: My network is controlled by a Red Hat ES 3 server running Samba 3.0.2... Samba 3.0.2 IS pretty old these days... I'd suggest taking the time to get up to 3.0.9 and then seeing where you stand. Remember to test on non production servers when at all possible, or stock up on pizza and H2O! ;-) -- Michael Lueck Lueck Data Systems Ok, after some testing, this weekend we upgraded our Samba servers to 3.0.9. In our lab, the symptoms described in the Laptop section of the original posting went away. We did duplicate this with 3.0.2 in our lab, and an upgrade to 3.0.7 is where the problem actually stopped. We went ahead and tested 3.0.9 as well, as this is the version that Red Hat is pushing with up2date. Again, the problem did not manifest itself. The upgrade came off without a hitch. All of my machines were working as normal this morning. Until about 3 minutes ago. One of our Laptop Users were forced offline again. This time, he actually lost work because of the syncing process. So needless to say, it's back on top of my 'Giant List O'things to Fix'. So, besides the information contained in the original post (http://lists.samba.org/archive/samba/2004-December/096759.html), what more is needed to continue down the path to fix this problem? Thanks in advance, Kevin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] any way to specify multiple LDAP servers for Samba to authenticate against?
Is there any way to specify multiple LDAP servers for Samba to authenticate against? List multiple LDAP passdb backends. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Shares With Spaces
James Coggan wrote: Hi, I'm having a bit of troble to mount shares with space something like: //server/share space i tryied using the sharename in and '' and no luck I have no problems using - mount -t smbfs //share/with spaces /path/to/mount -o username. and in fstab how to I use it? Uou, a great question... i didn't find how to... :( sorry -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.10 Available for Download
Gerald (Jerry) Carter schrieb: | A question to the thread 3.0.9 and macro %f | | http://marc.theaimsgroup.com/?l=sambam=110260704009010w=2 | | Do you have a patch for that? Not fixed yet. Is tehre a bugzilla number for it ? Just so I don't forget. no. You wrote on 2004-12-09: ok. reproduced it. The problem is that the string handling in smbd/message.c assumes unicode strings rather than checking the negotiated capability bits. The message command you list works fine for messages from Windows 2000 client (which support unicode). While smbclient is sending the strings as ASCII. I'll try to fix this later today. Shouldn't take long. ### And I lost my bugzilla-account :( der tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Seeing odd error's on my new Firewall
Hi, I could use some pointers on this, I have just installed a Sonicwall Firewall and It is sending these errors to the Log on a regular basis. Malformed IP packet dropped. - 192.168.22.100, 137, LAN - 192.168.22.255, 137 - IP Protocol 17 Are there any known issues that could be causing this? It does not appear to be affecting the function of the SAMBA server but it is cluttering my Log file on my Firewall. Thanks for any assistance you can provide. Kevin M. Barrett KMB IT Consulting, Inc 508-450-7717 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Printing Problem for Win2000
A few things... use client drivers = yes This will probably turn out to be part of it. Go all the way and set up the print$ share, upload the drivers, etc.. Having this set to yes was one of a few things which changed between consistantly getting access denied and finally getting success... so I'm not going back to see which of those few settings were not critical. What Samba version are you on? Distro of Linux (or other OS) and version? You might check out my presentation on a Samba 3 PDC to Win2K Client presentation. The printing section ties together various findings and suggested docs to read all into a bundle that should have you printing soon. ftp://ftp.lueckdatasystems.com/pub/presentations/klugsamba3pdc-bookreview.pdf -- Michael Lueck Lueck Data Systems Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Some thins stopped working since 3.0.5
Hi, Can anybody tell me if there are problems or there have been configuration changes in recent versions of samba. We use Debian Sarge workstations as domain members (with samba, winbind, pam_mount, pam_mkhomedir, you know...) and recently the server part does not authenticate users. If you do smbclient -L localhost... you get: session setup failed: Call returned zero bytes (EOF) With more debbugging info somewhat about spnego failed and then I disable it in smb.conf. I'm afraid that those are Kerberos related problems becaus at home anything has stopped working... Thanks. If anyone can respond with this information thanks. If anyone needs desperately the debug output and other traces I'll send it but I don't want to bother you since that limits. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Some thins stopped working since 3.0.5
sorry for the spelling error...a last-minute subject change :( I hope your eyes don't hurt and I receive some kind of response. Thanks, On Mon, 20 Dec 2004 19:45:38 +0100, Pau Capdevila [EMAIL PROTECTED] wrote: Hi, Can anybody tell me if there are problems or there have been configuration changes in recent versions of samba. We use Debian Sarge workstations as domain members (with samba, winbind, pam_mount, pam_mkhomedir, you know...) and recently the server part does not authenticate users. If you do smbclient -L localhost... you get: session setup failed: Call returned zero bytes (EOF) With more debbugging info somewhat about spnego failed and then I disable it in smb.conf. I'm afraid that those are Kerberos related problems becaus at home anything has stopped working... Thanks. If anyone can respond with this information thanks. If anyone needs desperately the debug output and other traces I'll send it but I don't want to bother you since that limits. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Listing Shares / Making Available for diferent Users
Hello, I just whant to know if it's possible for a user level configuration to let them list only certain shares/foldres. At the moment they log into the server just let them see the shares that they have access to, intead of seeing all the shares. I just need an answer that said YES or NO and I will keep looking for information on how to do it. If you need any other information please feel free to ask Thanks in advance -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Auth via ADS: using userPrincipalName as username
Hi, When using winbind, is there a way I could use a user's UPN (userPrincipalName) as their login username instead of DOMAIN (winbind separator) sAMAccountName ? Marc -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba ldap?
Samba Ldap experts, I am trying to recompile samba to support ldap. After compiling samba with --with-ldapsam, I had no errors with configure or compilation. However, after starting up smbd and nmbd, I get these errors in the log.smbd file when I try to connect to the server: [2004/12/20 13:57:02, 0] lib/debug.c:reopen_logs(590) Unable to open new log file /var/log/samba/smbd.log: No such file or directory [2004/12/20 13:57:02, 0] passdb/pdb_interface.c:make_pdb_methods_name(664) No builtin nor plugin backend for ldapsam found [2004/12/20 13:57:02, 1] passdb/pdb_interface.c:make_pdb_context_list(765) Loading ldapsam:ldap://lincon.beloit.edu failed! [2004/12/20 13:57:05, 0] passdb/pdb_interface.c:make_pdb_methods_name(664) No builtin nor plugin backend for ldapsam found [2004/12/20 13:57:05, 1] passdb/pdb_interface.c:make_pdb_context_list(765) Loading ldapsam:ldap://lincon.beloit.edu failed! Is this a problem on the samba side or the ldap server side which is on another server? Any hints about resolving it? I am just not sure where to begin to look. Tim Tyler Network Engineer - Beloit College [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] funny stuff in autostart and password change
hi list, when i log in the first time to my samba pdc everything is nice. when i logout and relogion i got i file called desktop in the autostart of the windows xp clients. does somebody knows why? i got this in my smb.conf to change the password: character set = ISO8859-15 add user script = useradd -d /tmp -s /dev/false %u passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Reenter*new*password* %n\n *Password*changed* unix password sync = Yes but when i want to change my password in windows xp he tells me the i ve not the rights to change my password. my hole smb.conf is this: [global] # Identifikation des Servers und der Arbeitsgruppe workgroup = injoloba netbiosname = SAMBA_PDC server string = Samba %v (PDC) @ injoloba # Grundeinstellungen für die einzelnen Shares. Um eine höhere Sicherheit zu gewähren, wird global erst einmal alles verboten und in den jeweiligen Shares die Rechte dann vergeben browseable = no public = no writeable = no guest ok = no # Die Log-Files für Samba log file = /var/log.%m # Die Definition des PDCacute;s domain master = yes prefered domain = yes domain logons = yes os level = 65 security = user # LogON Einstellungen für Windows XP logon drive = z: logon script = %U.bat # Passwort Einstellungen encrypt passwords = yes update encrypted = yes password level = 4 # Die Administratoren des PDC domain admin users = root # Performance Einstellungen short preserve case = yes max log size = 5000 case sensitive = no default case = lower mangle case = no dead time = 15 read raw = yes write raw = yes socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY oplocks = yes fake oplocks = no debug level = 2 preserve case = yes getwd cache = yes character set = ISO8859-15 add user script = useradd -d /tmp -s /dev/false %u passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Reenter*new*password* %n\n *Password*changed* unix password sync = Yes [homes] path = /home/%u comment = Benutzer-Verzeichnisse browseable = yes writeable = yes [netlogon] path = /home/netlogon browseable = no writeable = no comment = NetLogON [public]path = /home/publicbrowseable = yeswriteable = yesguest ok = yespublic = yescomment = Öffentlicher Ordner -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: any way to specify multiple LDAP servers for Samba to authenticate against?
Adam Tauno Williams wrote: Is there any way to specify multiple LDAP servers for Samba to authenticate against? List multiple LDAP passdb backends. I had been using ldap server = myldapserver instead of passdb backend and didn't see anything about specifying multiple servers. Didn't know about passdb backend = ldapsam:ldap://ldap-1.example.com ldap://ldap-2.example.com; Thanks for the info. Jason === -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba ldap?
Tim Tyler írta: Samba Ldap experts, I am trying to recompile samba to support ldap. After compiling samba with --with-ldapsam, I had no errors with configure or compilation. However, after starting up smbd and nmbd, I get these errors in the log.smbd file when I try to connect to the server: [2004/12/20 13:57:02, 0] lib/debug.c:reopen_logs(590) Unable to open new log file /var/log/samba/smbd.log: No such file or directory [2004/12/20 13:57:02, 0] passdb/pdb_interface.c:make_pdb_methods_name(664) No builtin nor plugin backend for ldapsam found [2004/12/20 13:57:02, 1] passdb/pdb_interface.c:make_pdb_context_list(765) Loading ldapsam:ldap://lincon.beloit.edu failed! [2004/12/20 13:57:05, 0] passdb/pdb_interface.c:make_pdb_methods_name(664) No builtin nor plugin backend for ldapsam found [2004/12/20 13:57:05, 1] passdb/pdb_interface.c:make_pdb_context_list(765) Loading ldapsam:ldap://lincon.beloit.edu failed! Is this a problem on the samba side or the ldap server side which is on another server? Any hints about resolving it? I am just not sure where to begin to look. Tim Tyler Network Engineer - Beloit College [EMAIL PROTECTED] If you are trying to compile samba3.0.x, then you don't need to pass any special configure option for ldapsam support. The --with-ldapsam configure option is for enabling the ldapsam_compat passdb backend, whith which you could use your old (samba2) ldap user database, until you convert it for using the newer (samba3) schema. I would recommend against using the ldapsam_compat passdb backend, as it there only for compatibility, and is not well tested. Cheers, Geza -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba ldap?
Tim, It would help if you could include the smb.conf file! spike Tim Tyler wrote: Samba Ldap experts, I am trying to recompile samba to support ldap. After compiling samba with --with-ldapsam, I had no errors with configure or compilation. However, after starting up smbd and nmbd, I get these errors in the log.smbd file when I try to connect to the server: [2004/12/20 13:57:02, 0] lib/debug.c:reopen_logs(590) Unable to open new log file /var/log/samba/smbd.log: No such file or directory [2004/12/20 13:57:02, 0] passdb/pdb_interface.c:make_pdb_methods_name(664) No builtin nor plugin backend for ldapsam found [2004/12/20 13:57:02, 1] passdb/pdb_interface.c:make_pdb_context_list(765) Loading ldapsam:ldap://lincon.beloit.edu failed! [2004/12/20 13:57:05, 0] passdb/pdb_interface.c:make_pdb_methods_name(664) No builtin nor plugin backend for ldapsam found [2004/12/20 13:57:05, 1] passdb/pdb_interface.c:make_pdb_context_list(765) Loading ldapsam:ldap://lincon.beloit.edu failed! Is this a problem on the samba side or the ldap server side which is on another server? Any hints about resolving it? I am just not sure where to begin to look. Tim Tyler Network Engineer - Beloit College [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: any way to specify multiple LDAP servers for Samba to authenticate against?
I had been using ldap server = myldapserver instead of passdb backend and didn't see anything about specifying multiple servers. Didn't know about passdb backend = ldapsam:ldap://ldap-1.example.com ldap://ldap-2.example.com; This gives you redundancy, you will search the second DSA only if the first is non-responsive. If you want to actually check two seperate DSA's (if an account doesn't exist on the first one) you need to do - passdb backend = ldapsam:ldap://ldap-1.example.com; ldapsam:ldap://ldap-2.example.com; -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] HP-UX/AIX sendfile patches.
I have a fix for the sendfile.c code for HP-UX - length not properly specified prior to call. I've also added code to support the AIX send_file() function and configure.in code to check for AIX specific send_file API and sets AIX_SENDFILE_API if successful. Could you consider this patch for 3.0.11? I also sent a web/cgi.c patch for struct var last week with respect to compile problems on AIX 5.3. My performance was amazing the goodtime.avi file passed from share to local win-XP-sp1 noticably faster than without sendfile. I had oplocks and level II oplocks, write cache size set to 2MB and had to forcible set max xmit to 65535, which apparently default to 16K even though the docs say 64K. Writes back to the server seemed faster with max xmit larger and with the 2MB write cache size. Also a few of the return value tests look suspicious about sendfile returning 0 and sys_sendfile returns -1. It's possible that, if I'm reading one man page correctly, that a 0 means a possible EWOULDBLOCK and another offers an EAGAIN on -1 instead of EINTR. I'd be very interested in researching these further, but I have no access to updated man pages for FreeBSD, HP-UX or Solaris (googled docs are rather aged). Bill *** configure.orig.in Mon Dec 20 11:00:03 2004 --- configure.aix.inMon Dec 20 10:38:36 2004 *** *** 4242,4247 --- 4242,4277 fi ;; + *aix*) + AC_CACHE_CHECK([for AIX send_file support],samba_cv_HAVE_SENDFILE,[ + AC_TRY_LINK([\ + #include sys/socket.h], + [\ + int fromfd, tofd; + size_t total=0; + struct sf_parms hdtrl; + ssize_t nwritten; + off64_t offset; + + hdtrl.header_data = 0; + hdtrl.header_length = 0; + hdtrl.file_descriptor = fromfd; + hdtrl.file_offset = 0; + hdtrl.file_bytes = 0; + hdtrl.trailer_data = 0; + hdtrl.trailer_length = 0; + + nwritten = send_file(tofd, hdtrl, 0); + ], + samba_cv_HAVE_SENDFILE=yes,samba_cv_HAVE_SENDFILE=no)]) + if test x$samba_cv_HAVE_SENDFILE = xyes; then + AC_DEFINE(HAVE_SENDFILE,1,[Whether sendfile() is available]) + AC_DEFINE(AIX_SENDFILE_API,1,[Whether the AIX send_file() API is available]) + AC_DEFINE(WITH_SENDFILE,1,[Whether to include sendfile() support]) + else + AC_MSG_RESULT(no); + fi + ;; *) ;; esac *** sendfile.orig.c Mon Dec 20 10:39:09 2004 --- sendfile.aix.c Mon Dec 20 15:38:19 2004 *** *** 371,376 --- 371,434 return count + hdr_len; } + #elif defined(AIX_SENDFILE_API) + + /* BEGIN AIX SEND_FILE */ + + #include sys/socket.h + + ssize_t sys_sendfile(int tofd, int fromfd, const DATA_BLOB *header, SMB_OFF_T offset, size_t count) + { + + size_t total=0; + struct sf_parms hdtrl; + + /* Set up the header/trailer struct params. */ + if (header) { + hdtrl.header_data = header-data; + hdtrl.header_length = header-length; + } else { + hdtrl.header_data = NULL; + hdtrl.header_length = 0; + } + hdtrl.trailer_data = NULL; + hdtrl.trailer_length = 0; + + hdtrl.file_descriptor = fromfd; + hdtrl.file_offset = offset; + hdtrl.file_bytes = count; + + while ( hdtrl.file_bytes + hdtrl.header_length ) { + ssize_t ret; + + + /* + Return Value + + There are three possible return values from send_file: + + Value Description + + -1 an error has occurred, errno contains the error code. + + 0 the command has completed successfully. + + 1 the command was completed partially, some data has been + transmitted but the command has to return for some reason, + for example, the command was interrupted by signals. + */ + do { + ret = send_file(tofd, hdtrl, 0); + } while ( (ret == 1) || (ret == -1 errno == EINTR) ); + if ( ret == -1 ) + return -1; + } + + return count + header-length; + + } + /* END AIX SEND_FILE */ + #else /* No sendfile implementation. Return error. */ ssize_t sys_sendfile(int tofd, int fromfd, const DATA_BLOB *header, SMB_OFF_T offset, size_t count) *** sendfile.orig.c Thu Dec 16 12:57:28 2004 --- sendfile.hpux.c Thu Dec 16 15:47:15 2004 *** *** 250,256 hdtrl[0].iov_len = hdr_len = 0; } hdtrl[1].iov_base = NULL; ! hdtrl[1].iov_base = 0; total = count; while (total + hdtrl[0].iov_len) { --- 250,256 hdtrl[0].iov_len = hdr_len = 0; } hdtrl[1].iov_base = NULL; ! hdtrl[1].iov_len = 0; total = count; while (total +
[Samba] samba-ldap-pdc, pam question
Hello, I am trying to follow IDEALx's Samba3-LDAP PDC Howto and am having difficulty with the PAM configuration portion of this because i am trying to install on SuSE Linux Enterprise Server 9 and SuSE does not use the pam_stack.so module so there is no catchall system-auth file to edit as the guide decribes. Since there is not a system-auth file, i wonder would it be sufficient to do the necessary edit's to the /etc/pam.d/samba file? I know in some cases the /etc/pam.d/other file is used, when a specific config file for a service is not found in the /etc/pam.d directory. Can someone with a better understanding of the Samba3-LDAP PDC configuration, give me a few pointers about which config files (lacking the system-auth file) in the /etc/pam.d directory are needed to make the overall setup work? And are the changes to these files the same as would have occured in the system-auth file? Thanks so much! Mike Partyka Stonepath Logistics Systems Administrator (651)405-4300 Desk (651)208-5734 Cell (651)405-4342 Fax -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Cannot share MSAccess DB after upgrade 3.0.5 to 3.0.8
I posted the originating message for the thread. My focus has been redirected for a couple of days, so I missed the question below. -Original Message- From: David Brodbeck DavidB at mail.interclean.com What are the details on this? I thought I'd been carefully watching the release announcements for anything ACL-related, but I apparently missed this one. In short, an upgrade from 3.0.5 to 3.0.8 (now 3.0.9) broke Access database sharing. The cause is unknown but the second and subsequent Access clients to attempt an open of the database complain that the file doesn't exist. My apologies for the length of this post. Here's the log (log level 10) from a client being refused access to the file... [2004/12/17 12:21:08, 5] lib/util.c:show_msg(474) size=124 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=1268 smb_uid=100 smb_mid=2048 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 9728 (0x2600) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]=0 (0x0) smb_vwv[ 5]=0 (0x0) smb_vwv[ 6]=0 (0x0) smb_vwv[ 7]=35072 (0x8900) smb_vwv[ 8]= 512 (0x200) smb_vwv[ 9]=0 (0x0) smb_vwv[10]=0 (0x0) smb_vwv[11]=0 (0x0) smb_vwv[12]=0 (0x0) smb_vwv[13]=0 (0x0) smb_vwv[14]=0 (0x0) smb_vwv[15]=0 (0x0) smb_vwv[16]=0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]=0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]=0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]=0 (0x0) smb_vwv[23]= 768 (0x300) smb_bcc=41 [2004/12/17 12:21:08, 10] lib/util.c:dump_data(1977) [000] 00 5C 00 46 00 6F 00 72 00 6D 00 73 00 5C 00 44 .\.F.o.r .m.s.\.D [010] 00 61 00 74 00 61 00 5C 00 73 00 6D 00 63 00 2E .a.t.a.\ .s.m.c.. [020] 00 6D 00 64 00 62 00 00 00 .m.d.b.. . [2004/12/17 12:21:08, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 2218) conn 0x8389de8 [2004/12/17 12:21:08, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (1081, 100) - sec_ctx_stack_ndx = 0 [2004/12/17 12:21:08, 5] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-1901413937-2006929789-925700815-1233 contains 6 SIDs SID[ 0]: S-1-5-21-1901413937-2006929789-925700815-1233 SID[ 1]: S-1-5-21-1901413937-2006929789-925700815-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2802411879-2074512950-1258234877-1201 [2004/12/17 12:21:08, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 1081 Primary group is 100 and contains 1 supplementary groups Group[ 0]: 100 [2004/12/17 12:21:08, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(1081,1081) gid=(0,100) [2004/12/17 12:21:08, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x20089 file_attributes = 0x0, share_access = 0x0, create_disposition = 0x1 create_options = 0x40 root_dir _fid = 0x0 [2004/12/17 12:21:08, 10] smbd/nttrans.c:map_create_disposition(341) map_create_disposition: Mapped create_disposition 0x1 to 0x1 [2004/12/17 12:21:08, 10] smbd/nttrans.c:map_share_mode(480) map_share_mode: Mapped desired access 0x20089, share access 0x0, file attributes 0x0 to open_mode 0x10 [2004/12/17 12:21:08, 5] smbd/filename.c:unix_convert(108) unix_convert called on file Forms/Data/smc.mdb [2004/12/17 12:21:08, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [FORMS/DATA/SMC.MDB] - [Forms/Data/smc.mdb] [2004/12/17 12:21:08, 3] smbd/dosmode.c:unix_mode(111) unix_mode(Forms/Data/smc.mdb) returning 0766 [2004/12/17 12:21:08, 10] smbd/process.c:remove_sharing_violation_open_smb_message(160) remove_sharing_violation_open_smb_message: deleting mid 2048 len 128 [2004/12/17 12:21:08, 10] locking/locking.c:get_deferred_opens(992) get_deferred_opens: deferred_open_entry[0]: pid = 2218, mid = 2048, dev = 0x901, inode = 386338064, port = 32788, time = [1103304067.249679] [2004/12/17 12:21:08, 10] locking/locking.c:delete_deferred_open_entry(1084) delete_deferred_open_entry: num_deferred_open_entries = 1 [2004/12/17 12:21:08, 10] locking/locking.c:delete_deferred_open_entry(1089) delete_deferred_open_entry: deleted deferred_open_entry[0]: pid = 2218, mid = 2048, dev = 0x901, inode = 386338064, port = 32788, time = [1103304067.24967 9] [2004/12/17 12:21:08, 10] locking/locking.c:delete_deferred_open_entry(1098) delete_deferred_open_entry: deleting entry 0 [2004/12/17 12:21:08, 10] locking/locking.c:delete_deferred_open_entry(1120) delete_deferred_open_entry: Remaining table. [2004/12/17 12:21:08, 10] smbd/trans2.c:set_bad_path_error(2234) set_bad_path_error: err = 2 bad_path = 0 [2004/12/17 12:21:08, 3] smbd/error.c:error_packet(105) error string = No such file or directory [2004/12/17 12:21:08, 3] smbd/error.c:error_packet(129) error packet at smbd/trans2.c(2240) cmd=162 (SMBntcreateX)
[Samba] Every day software for different low prices
Well well! Ever heard of this site selling soft ? well i found there all own i needed and even more and already use it - it taked me couple of minutes to get it and indstall .. The future is made of the same stuff as the present. http://www.geocities.com/irene_potts_50/ Why order soft in boxes packages and so on ..more..it's time and money ... just download it - it;s simple like 123 A wise system of education will at last teach us how little man yet knows, how much he has still to learn. Why you just seat here and do nothing ? can Hurry up we selling our best software for 40% of actual price visit us today and get a peace of it for you !! told A baby is God's opinion that life should go on. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] maintaining samba uid and gid in nt to ad migration
we used tdbedit and perl to script our domain consolidation sid to uid mappings. The other possibility is to use getfacl and setfacl to store your file rights to a text file and replay them once you are migrated. since getfacl and setfacl use names and not uid's the moved system should resolve the username to the new correct uid/sid. Chuck -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] HP-UX/AIX sendfile patches.
On Mon, Dec 20, 2004 at 03:57:54PM -0500, William Jojo wrote: I have a fix for the sendfile.c code for HP-UX - length not properly specified prior to call. I've also added code to support the AIX send_file() function and configure.in code to check for AIX specific send_file API and sets AIX_SENDFILE_API if successful. Could you consider this patch for 3.0.11? Got both patches - included in SVN thanks ! Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.x in ADS mode in a Windows Krb AD forest domain, does it work?
I have just put in service our first AD member samba server and am replacing, like many of us, samba 2 servers. Our setup is HHS AD tree, with NIH users in ou's under NIH domain and servers in attached division domain (NIA in our case). Our NIH users have no problems so far other than the usual of sites this size. This sounds somewhat similar to what you are asking. I have not tried to connect from another connected AD domain so that I would traverse 2 trusts. That seems to be your situation as I understand it. Chuck -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] winbind problems
Hello, I am running a Samba server (3.0.7) on a Suse 9.2 box. I have connected this server successfully to a Windows 2000 Active Directory (mixed mode). I have nsswitch.conf, krb5.conf configured and winbind seems to be running properly for the most part. With wbinfo I can get all of my user and group information. Problem is, it seems that at random times, the samba server just stops authenticating the windows user names and accounts. If I restart the winbind or smb service, then all seems to be well again for a while. Right now the only way I can keep this running is to run a cron job that restartes the samba and winbind services every hour. This is really bugging me as I cannot figure out what is going on. Can anyone help me? I have included some of my configuration and log files below. Thanks in advance. -/etc/samba/smb.conf-- # Samba Configuration File [global] workgroup = WAYNE realm = WAYNE.LOCAL server string = Samba Server security = ADS password server = adserver.wayne.local encrypt passwords = yes idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind use default domain = no winbind separator = / [users] comment = Users on Linux path = /home/WAYNE read only = No browseable = Yes -/etc/nsswitch.conf--- passwd: files winbind group: files winbind hosts:files dns wins winbind networks: files dns -/etc/krb5.conf--- [libdefaults] default_realm = WAYNE.LOCAL clockskew = 300 [realms] WAYNE.LOCAL = { kdc = police.wayne.local default_domain = WAYNE.LOCAL kpasswd_server = adserver.wayne.local } [domain_realm] .WAYNE.LOCAL = WAYNE.LOCAL [appdefaults] pam = { ticket_lifetime = 365d renew_lifetime = 365d forwardable = true proxiable = false retain_after_close = true minimum_uid = 0 } --/var/log/samba/log.smbd [2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system . . . [2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system --/var/log/samba/log.winbindd--- [2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) [2004/12/20 16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:00:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:01:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:06:24, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:11:40, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind problems
Brian Kesting wrote: Hello, I am running a Samba server (3.0.7) on a Suse 9.2 box. I have connected this server successfully to a Windows 2000 Active Directory (mixed mode). I have nsswitch.conf, krb5.conf configured and winbind seems to be running properly for the most part. With wbinfo I can get all of my user and group information. Problem is, it seems that at random times, the samba server just stops authenticating the windows user names and accounts. If I restart the winbind or smb service, then all seems to be well again for a while. Right now the only way I can keep this running is to run a cron job that restartes the samba and winbind services every hour. This is really bugging me as I cannot figure out what is going on. Can anyone help me? I have included some of my configuration and log files below. Thanks in advance. -/etc/samba/smb.conf-- # Samba Configuration File [global] workgroup = WAYNE realm = WAYNE.LOCAL server string = Samba Server security = ADS password server = adserver.wayne.local encrypt passwords = yes idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind use default domain = no winbind separator = / The separator might be a problem. [users] comment = Users on Linux path = /home/WAYNE read only = No browseable = Yes -/etc/nsswitch.conf--- passwd: files winbind group: files winbind hosts:files dns wins winbind networks: files dns -/etc/krb5.conf--- [libdefaults] default_realm = WAYNE.LOCAL clockskew = 300 [realms] WAYNE.LOCAL = { kdc = police.wayne.local default_domain = WAYNE.LOCAL kpasswd_server = adserver.wayne.local } [domain_realm] .WAYNE.LOCAL = WAYNE.LOCAL [appdefaults] pam = { ticket_lifetime = 365d renew_lifetime = 365d forwardable = true proxiable = false retain_after_close = true minimum_uid = 0 } --/var/log/samba/log.smbd [2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system . . . [2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system --/var/log/samba/log.winbindd--- [2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) [2004/12/20 16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:00:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:01:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:06:24, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:11:40, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind problems
I have tried using a + separator with no success. -- Original Message -- From: Tom Skeren [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 15:25:54 -0800 Brian Kesting wrote: Hello, I am running a Samba server (3.0.7) on a Suse 9.2 box. I have connected this server successfully to a Windows 2000 Active Directory (mixed mode). I have nsswitch.conf, krb5.conf configured and winbind seems to be running properly for the most part. With wbinfo I can get all of my user and group information. Problem is, it seems that at random times, the samba server just stops authenticating the windows user names and accounts. If I restart the winbind or smb service, then all seems to be well again for a while. Right now the only way I can keep this running is to run a cron job that restartes the samba and winbind services every hour. This is really bugging me as I cannot figure out what is going on. Can anyone help me? I have included some of my configuration and log files below. Thanks in advance. -/etc/samba/smb.conf-- # Samba Configuration File [global] workgroup = WAYNE realm = WAYNE.LOCAL server string = Samba Server security = ADS password server = adserver.wayne.local encrypt passwords = yes idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind use default domain = no winbind separator = / The separator might be a problem. [users] comment = Users on Linux path = /home/WAYNE read only = No browseable = Yes -/etc/nsswitch.conf--- passwd: files winbind group: files winbind hosts:files dns wins winbind networks: files dns -/etc/krb5.conf--- [libdefaults] default_realm = WAYNE.LOCAL clockskew = 300 [realms] WAYNE.LOCAL = { kdc = police.wayne.local default_domain = WAYNE.LOCAL kpasswd_server = adserver.wayne.local } [domain_realm] .WAYNE.LOCAL = WAYNE.LOCAL [appdefaults] pam = { ticket_lifetime = 365d renew_lifetime = 365d forwardable = true proxiable = false retain_after_close = true minimum_uid = 0 } --/var/log/samba/log.smbd [2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system . . . [2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system --/var/log/samba/log.winbindd--- [2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) [2004/12/20 16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:00:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:01:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:06:24, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:11:40, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind problems
I have tried using a + separator with no success. I also get this in my log.winbindd file as soon as I restart winbind: [2004/12/20 17:33:27, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) -- Original Message -- From: Tom Skeren [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 15:25:54 -0800 Brian Kesting wrote: Hello, I am running a Samba server (3.0.7) on a Suse 9.2 box. I have connected this server successfully to a Windows 2000 Active Directory (mixed mode). I have nsswitch.conf, krb5.conf configured and winbind seems to be running properly for the most part. With wbinfo I can get all of my user and group information. Problem is, it seems that at random times, the samba server just stops authenticating the windows user names and accounts. If I restart the winbind or smb service, then all seems to be well again for a while. Right now the only way I can keep this running is to run a cron job that restartes the samba and winbind services every hour. This is really bugging me as I cannot figure out what is going on. Can anyone help me? I have included some of my configuration and log files below. Thanks in advance. -/etc/samba/smb.conf-- # Samba Configuration File [global] workgroup = WAYNE realm = WAYNE.LOCAL server string = Samba Server security = ADS password server = adserver.wayne.local encrypt passwords = yes idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind use default domain = no winbind separator = / The separator might be a problem. [users] comment = Users on Linux path = /home/WAYNE read only = No browseable = Yes -/etc/nsswitch.conf--- passwd: files winbind group: files winbind hosts:files dns wins winbind networks: files dns -/etc/krb5.conf--- [libdefaults] default_realm = WAYNE.LOCAL clockskew = 300 [realms] WAYNE.LOCAL = { kdc = police.wayne.local default_domain = WAYNE.LOCAL kpasswd_server = adserver.wayne.local } [domain_realm] .WAYNE.LOCAL = WAYNE.LOCAL [appdefaults] pam = { ticket_lifetime = 365d renew_lifetime = 365d forwardable = true proxiable = false retain_after_close = true minimum_uid = 0 } --/var/log/samba/log.smbd [2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system . . . [2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system --/var/log/samba/log.winbindd--- [2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) [2004/12/20 16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:00:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:01:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:06:24, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:11:40, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] winbind problems
I read something about nscd causing problems before I even installed the system, so I never even installed that service. Here is an updated /var/log/samba/log.winbindd file.btw, thanks for the quick help and tips so far, I appreciate it. [2004/12/20 17:33:27, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) [2004/12/20 17:38:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:43:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:45:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:49:01, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:52:26, 1] libads/ldap_utils.c:ads_do_search_retry(77) ads_search_retry: failed to reconnect (Invalid credentials) -- Original Message -- From: Brett Stevens [EMAIL PROTECTED] Date: Tue, 21 Dec 2004 10:33:30 +1100 One thing I moticed when having simmilar problems is that for some reason nscd seems to be a problem stop this service and restart all samba services including smbd nmbd and winbind Let us know how it goes. Brett Stevens -Original Message- From: Brian Kesting [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 21, 2004 10:29 AM To: [EMAIL PROTECTED] Subject: [Samba] winbind problems Hello, I am running a Samba server (3.0.7) on a Suse 9.2 box. I have connected this server successfully to a Windows 2000 Active Directory (mixed mode). I have nsswitch.conf, krb5.conf configured and winbind seems to be running properly for the most part. With wbinfo I can get all of my user and group information. Problem is, it seems that at random times, the samba server just stops authenticating the windows user names and accounts. If I restart the winbind or smb service, then all seems to be well again for a while. Right now the only way I can keep this running is to run a cron job that restartes the samba and winbind services every hour. This is really bugging me as I cannot figure out what is going on. Can anyone help me? I have included some of my configuration and log files below. Thanks in advance. -/etc/samba/smb.conf-- # Samba Configuration File [global] workgroup = WAYNE realm = WAYNE.LOCAL server string = Samba Server security = ADS password server = adserver.wayne.local encrypt passwords = yes idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind use default domain = no winbind separator = / [users] comment = Users on Linux path = /home/WAYNE read only = No browseable = Yes -/etc/nsswitch.conf--- passwd: files winbind group: files winbind hosts:files dns wins winbind networks: files dns -/etc/krb5.conf--- [libdefaults] default_realm = WAYNE.LOCAL clockskew = 300 [realms] WAYNE.LOCAL = { kdc = police.wayne.local default_domain = WAYNE.LOCAL kpasswd_server = adserver.wayne.local } [domain_realm] .WAYNE.LOCAL = WAYNE.LOCAL [appdefaults] pam = { ticket_lifetime = 365d renew_lifetime = 365d forwardable = true proxiable = false retain_after_close = true minimum_uid = 0 } --/var/log/samba/log.smbd [2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system . . . [2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system --/var/log/samba/log.winbindd--- [2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) [2004/12/20 16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059)
RE: [Samba] winbind problems
Someone told me once to try to remove the Samba server from the domain, rename it, and rejoin the domain..would that solve any problems in your opinion? -- Original Message -- From: Brian Kesting [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 18:05:47 -0600 I read something about nscd causing problems before I even installed the system, so I never even installed that service. Here is an updated /var/log/samba/log.winbindd file.btw, thanks for the quick help and tips so far, I appreciate it. [2004/12/20 17:33:27, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) [2004/12/20 17:38:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:43:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:45:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:49:01, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:52:26, 1] libads/ldap_utils.c:ads_do_search_retry(77) ads_search_retry: failed to reconnect (Invalid credentials) -- Original Message -- From: Brett Stevens [EMAIL PROTECTED] Date: Tue, 21 Dec 2004 10:33:30 +1100 One thing I moticed when having simmilar problems is that for some reason nscd seems to be a problem stop this service and restart all samba services including smbd nmbd and winbind Let us know how it goes. Brett Stevens -Original Message- From: Brian Kesting [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 21, 2004 10:29 AM To: [EMAIL PROTECTED] Subject: [Samba] winbind problems Hello, I am running a Samba server (3.0.7) on a Suse 9.2 box. I have connected this server successfully to a Windows 2000 Active Directory (mixed mode). I have nsswitch.conf, krb5.conf configured and winbind seems to be running properly for the most part. With wbinfo I can get all of my user and group information. Problem is, it seems that at random times, the samba server just stops authenticating the windows user names and accounts. If I restart the winbind or smb service, then all seems to be well again for a while. Right now the only way I can keep this running is to run a cron job that restartes the samba and winbind services every hour. This is really bugging me as I cannot figure out what is going on. Can anyone help me? I have included some of my configuration and log files below. Thanks in advance. -/etc/samba/smb.conf-- # Samba Configuration File [global] workgroup = WAYNE realm = WAYNE.LOCAL server string = Samba Server security = ADS password server = adserver.wayne.local encrypt passwords = yes idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind use default domain = no winbind separator = / [users] comment = Users on Linux path = /home/WAYNE read only = No browseable = Yes -/etc/nsswitch.conf--- passwd: files winbind group: files winbind hosts:files dns wins winbind networks: files dns -/etc/krb5.conf--- [libdefaults] default_realm = WAYNE.LOCAL clockskew = 300 [realms] WAYNE.LOCAL = { kdc = police.wayne.local default_domain = WAYNE.LOCAL kpasswd_server = adserver.wayne.local } [domain_realm] .WAYNE.LOCAL = WAYNE.LOCAL [appdefaults] pam = { ticket_lifetime = 365d renew_lifetime = 365d forwardable = true proxiable = false retain_after_close = true minimum_uid = 0 } --/var/log/samba/log.smbd [2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system . . . [2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system --/var/log/samba/log.winbindd--- [2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command
Re: [Samba] winbind problems
Brian Kesting wrote: I have tried using a + separator with no success. I use _ which works well. I'm just guessing here, but *nix's use / as a very significant charactrer. -- Original Message -- From: Tom Skeren [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 15:25:54 -0800 Brian Kesting wrote: Hello, I am running a Samba server (3.0.7) on a Suse 9.2 box. I have connected this server successfully to a Windows 2000 Active Directory (mixed mode). I have nsswitch.conf, krb5.conf configured and winbind seems to be running properly for the most part. With wbinfo I can get all of my user and group information. Problem is, it seems that at random times, the samba server just stops authenticating the windows user names and accounts. If I restart the winbind or smb service, then all seems to be well again for a while. Right now the only way I can keep this running is to run a cron job that restartes the samba and winbind services every hour. This is really bugging me as I cannot figure out what is going on. Can anyone help me? I have included some of my configuration and log files below. Thanks in advance. -/etc/samba/smb.conf-- # Samba Configuration File [global] workgroup = WAYNE realm = WAYNE.LOCAL server string = Samba Server security = ADS password server = adserver.wayne.local encrypt passwords = yes idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind use default domain = no winbind separator = / The separator might be a problem. [users] comment = Users on Linux path = /home/WAYNE read only = No browseable = Yes -/etc/nsswitch.conf--- passwd: files winbind group: files winbind hosts:files dns wins winbind networks: files dns -/etc/krb5.conf--- [libdefaults] default_realm = WAYNE.LOCAL clockskew = 300 [realms] WAYNE.LOCAL = { kdc = police.wayne.local default_domain = WAYNE.LOCAL kpasswd_server = adserver.wayne.local } [domain_realm] .WAYNE.LOCAL = WAYNE.LOCAL [appdefaults] pam = { ticket_lifetime = 365d renew_lifetime = 365d forwardable = true proxiable = false retain_after_close = true minimum_uid = 0 } --/var/log/samba/log.smbd [2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system . . . [2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system --/var/log/samba/log.winbindd--- [2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) [2004/12/20 16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:00:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:01:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:06:24, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:11:40, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind problems
Brian Kesting wrote: I have tried using a + separator with no success. I also get this in my log.winbindd file as soon as I restart winbind: [2004/12/20 17:33:27, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) I've seen that one. Do a kinit, and see if you get a kerberos ticket. -- Original Message -- From: Tom Skeren [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 15:25:54 -0800 Brian Kesting wrote: Hello, I am running a Samba server (3.0.7) on a Suse 9.2 box. I have connected this server successfully to a Windows 2000 Active Directory (mixed mode). I have nsswitch.conf, krb5.conf configured and winbind seems to be running properly for the most part. With wbinfo I can get all of my user and group information. Problem is, it seems that at random times, the samba server just stops authenticating the windows user names and accounts. If I restart the winbind or smb service, then all seems to be well again for a while. Right now the only way I can keep this running is to run a cron job that restartes the samba and winbind services every hour. This is really bugging me as I cannot figure out what is going on. Can anyone help me? I have included some of my configuration and log files below. Thanks in advance. -/etc/samba/smb.conf-- # Samba Configuration File [global] workgroup = WAYNE realm = WAYNE.LOCAL server string = Samba Server security = ADS password server = adserver.wayne.local encrypt passwords = yes idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind use default domain = no winbind separator = / The separator might be a problem. [users] comment = Users on Linux path = /home/WAYNE read only = No browseable = Yes -/etc/nsswitch.conf--- passwd: files winbind group: files winbind hosts:files dns wins winbind networks: files dns -/etc/krb5.conf--- [libdefaults] default_realm = WAYNE.LOCAL clockskew = 300 [realms] WAYNE.LOCAL = { kdc = police.wayne.local default_domain = WAYNE.LOCAL kpasswd_server = adserver.wayne.local } [domain_realm] .WAYNE.LOCAL = WAYNE.LOCAL [appdefaults] pam = { ticket_lifetime = 365d renew_lifetime = 365d forwardable = true proxiable = false retain_after_close = true minimum_uid = 0 } --/var/log/samba/log.smbd [2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system . . . [2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system --/var/log/samba/log.winbindd--- [2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) [2004/12/20 16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:00:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:01:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:06:24, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:11:40, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind problems
Brian Kesting wrote: Someone told me once to try to remove the Samba server from the domain, rename it, and rejoin the domain..would that solve any problems in your opinion? That is an odd solution, unless AD is mangled with respect to the samba server name. Methinks you have a kerberos problem. My servers are FreeBSD, but I do have a bare bones guide for setting up samba as an AD member server in FreeBSD. If you use Linux it can only be a reference, but it's an easy read. http://www.fsklaw.com/fbsdconfig.html -- Original Message -- From: Brian Kesting [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 18:05:47 -0600 I read something about nscd causing problems before I even installed the system, so I never even installed that service. Here is an updated /var/log/samba/log.winbindd file.btw, thanks for the quick help and tips so far, I appreciate it. [2004/12/20 17:33:27, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) [2004/12/20 17:38:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:43:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:45:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:49:01, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:52:26, 1] libads/ldap_utils.c:ads_do_search_retry(77) ads_search_retry: failed to reconnect (Invalid credentials) -- Original Message -- From: Brett Stevens [EMAIL PROTECTED] Date: Tue, 21 Dec 2004 10:33:30 +1100 One thing I moticed when having simmilar problems is that for some reason nscd seems to be a problem stop this service and restart all samba services including smbd nmbd and winbind Let us know how it goes. Brett Stevens -Original Message- From: Brian Kesting [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 21, 2004 10:29 AM To: [EMAIL PROTECTED] Subject: [Samba] winbind problems Hello, I am running a Samba server (3.0.7) on a Suse 9.2 box. I have connected this server successfully to a Windows 2000 Active Directory (mixed mode). I have nsswitch.conf, krb5.conf configured and winbind seems to be running properly for the most part. With wbinfo I can get all of my user and group information. Problem is, it seems that at random times, the samba server just stops authenticating the windows user names and accounts. If I restart the winbind or smb service, then all seems to be well again for a while. Right now the only way I can keep this running is to run a cron job that restartes the samba and winbind services every hour. This is really bugging me as I cannot figure out what is going on. Can anyone help me? I have included some of my configuration and log files below. Thanks in advance. -/etc/samba/smb.conf-- # Samba Configuration File [global] workgroup = WAYNE realm = WAYNE.LOCAL server string = Samba Server security = ADS password server = adserver.wayne.local encrypt passwords = yes idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind use default domain = no winbind separator = / [users] comment = Users on Linux path = /home/WAYNE read only = No browseable = Yes -/etc/nsswitch.conf--- passwd: files winbind group: files winbind hosts:files dns wins winbind networks: files dns -/etc/krb5.conf--- [libdefaults] default_realm = WAYNE.LOCAL clockskew = 300 [realms] WAYNE.LOCAL = { kdc = police.wayne.local default_domain = WAYNE.LOCAL kpasswd_server = adserver.wayne.local } [domain_realm] .WAYNE.LOCAL = WAYNE.LOCAL [appdefaults] pam = { ticket_lifetime = 365d renew_lifetime = 365d forwardable = true proxiable = false retain_after_close = true minimum_uid = 0 } --/var/log/samba/log.smbd [2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system . . . [2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system
Re: [Samba] winbind problems
My setup looks about identical to the setup you have listed in the link you provided. Since this line: libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) keeps appearing in my winbind log file, I am thinking it is a kerberos problem too. Do you see anything wrong with my /etc/krb5.conf file? [libdefaults] default_realm = WAYNE.LOCAL clockskew = 300 [realms] WAYNE.LOCAL = { kdc = police.wayne.local default_domain = WAYNE.LOCAL kpasswd_server = police.wayne.local } [domain_realm] .WAYNE.LOCAL = WAYNE.LOCAL [appdefaults] pam = { ticket_lifetime = 365d renew_lifetime = 365d forwardable = true proxiable = false retain_after_close = true minimum_uid = 0 -- Original Message -- From: Thomas M. Skeren III [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 17:16:38 -0800 Brian Kesting wrote: Someone told me once to try to remove the Samba server from the domain, rename it, and rejoin the domain..would that solve any problems in your opinion? That is an odd solution, unless AD is mangled with respect to the samba server name. Methinks you have a kerberos problem. My servers are FreeBSD, but I do have a bare bones guide for setting up samba as an AD member server in FreeBSD. If you use Linux it can only be a reference, but it's an easy read. http://www.fsklaw.com/fbsdconfig.html -- Original Message -- From: Brian Kesting [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 18:05:47 -0600 I read something about nscd causing problems before I even installed the system, so I never even installed that service. Here is an updated /var/log/samba/log.winbindd file.btw, thanks for the quick help and tips so far, I appreciate it. [2004/12/20 17:33:27, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) [2004/12/20 17:38:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:43:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:45:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:49:01, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:52:26, 1] libads/ldap_utils.c:ads_do_search_retry(77) ads_search_retry: failed to reconnect (Invalid credentials) -- Original Message -- From: Brett Stevens [EMAIL PROTECTED] Date: Tue, 21 Dec 2004 10:33:30 +1100 One thing I moticed when having simmilar problems is that for some reason nscd seems to be a problem stop this service and restart all samba services including smbd nmbd and winbind Let us know how it goes. Brett Stevens -Original Message- From: Brian Kesting [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 21, 2004 10:29 AM To: [EMAIL PROTECTED] Subject: [Samba] winbind problems Hello, I am running a Samba server (3.0.7) on a Suse 9.2 box. I have connected this server successfully to a Windows 2000 Active Directory (mixed mode). I have nsswitch.conf, krb5.conf configured and winbind seems to be running properly for the most part. With wbinfo I can get all of my user and group information. Problem is, it seems that at random times, the samba server just stops authenticating the windows user names and accounts. If I restart the winbind or smb service, then all seems to be well again for a while. Right now the only way I can keep this running is to run a cron job that restartes the samba and winbind services every hour. This is really bugging me as I cannot figure out what is going on. Can anyone help me? I have included some of my configuration and log files below. Thanks in advance. -/etc/samba/smb.conf-- # Samba Configuration File [global] workgroup = WAYNE realm = WAYNE.LOCAL server string = Samba Server security = ADS password server = adserver.wayne.local encrypt passwords = yes idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind use default domain = no winbind separator = / [users] comment = Users on Linux path = /home/WAYNE read only = No browseable = Yes -/etc/nsswitch.conf--- passwd: files winbind group: files winbind hosts:files dns wins winbind networks: files dns -/etc/krb5.conf--- [libdefaults] default_realm = WAYNE.LOCAL clockskew = 300 [realms] WAYNE.LOCAL = { kdc = police.wayne.local default_domain = WAYNE.LOCAL kpasswd_server = adserver.wayne.local } [domain_realm]
Re: [Samba] winbind problems
So the kticket needs to be valid for any samba/winbind services to work properly? It appears that when I issued the kinit command, my ticket will expire in about 10 hours with a ticket renewable lifetime of 1 week..how do I change that? I am still getting the odd messages in my winbind log file thoughI am really perplexed. -- Original Message -- From: Thomas M. Skeren III [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 17:19:22 -0800 Brian Kesting wrote: I have changed the separator to '+' Also, my kerberos ticket was expired.i re-issued a kinit [EMAIL PROTECTED] command to renew it. Could that be the source of my problems? Yes. -- Original Message -- From: Thomas M. Skeren III [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 17:09:33 -0800 Brian Kesting wrote: I have tried using a + separator with no success. I use _ which works well. I'm just guessing here, but *nix's use / as a very significant charactrer. -- Original Message -- From: Tom Skeren [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 15:25:54 -0800 Brian Kesting wrote: Hello, I am running a Samba server (3.0.7) on a Suse 9.2 box. I have connected this server successfully to a Windows 2000 Active Directory (mixed mode). I have nsswitch.conf, krb5.conf configured and winbind seems to be running properly for the most part. With wbinfo I can get all of my user and group information. Problem is, it seems that at random times, the samba server just stops authenticating the windows user names and accounts. If I restart the winbind or smb service, then all seems to be well again for a while. Right now the only way I can keep this running is to run a cron job that restartes the samba and winbind services every hour. This is really bugging me as I cannot figure out what is going on. Can anyone help me? I have included some of my configuration and log files below. Thanks in advance. -/etc/samba/smb.conf-- # Samba Configuration File [global] workgroup = WAYNE realm = WAYNE.LOCAL server string = Samba Server security = ADS password server = adserver.wayne.local encrypt passwords = yes idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind use default domain = no winbind separator = / The separator might be a problem. [users] comment = Users on Linux path = /home/WAYNE read only = No browseable = Yes -/etc/nsswitch.conf--- passwd: files winbind group: files winbind hosts:files dns wins winbind networks: files dns -/etc/krb5.conf--- [libdefaults] default_realm = WAYNE.LOCAL clockskew = 300 [realms] WAYNE.LOCAL = { kdc = police.wayne.local default_domain = WAYNE.LOCAL kpasswd_server = adserver.wayne.local } [domain_realm] .WAYNE.LOCAL = WAYNE.LOCAL [appdefaults] pam = { ticket_lifetime = 365d renew_lifetime = 365d forwardable = true proxiable = false retain_after_close = true minimum_uid = 0 } --/var/log/samba/log.smbd [2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system . . . [2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system --/var/log/samba/log.winbindd--- [2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) [2004/12/20 16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:00:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:01:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:06:24, 1]
Re: [Samba] winbind problems
I am using Suse 9.2 and heimdal 0.6.2 -- Original Message -- From: Thomas M. Skeren III [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 17:43:07 -0800 Brian Kesting wrote: My setup looks about identical to the setup you have listed in the link you provided. Since this line: libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) keeps appearing in my winbind log file, I am thinking it is a kerberos problem too. Do you see anything wrong with my /etc/krb5.conf file? [libdefaults] default_realm = WAYNE.LOCAL clockskew = 300 Try adding : dns_lookup_realm = false dns_lookup_kdc = false Also which OS are you using? What Kerberos? The default etypes lines are necessary for Heimdal, but I don't think they are necessary for MIT. [realms] WAYNE.LOCAL = { kdc = police.wayne.local default_domain = WAYNE.LOCAL kpasswd_server = police.wayne.local } Try: kdc = KERBEROS.WAYNE.LOCAL admin_server = police.wayne.local default_domain = wayne.local [domain_realm] .WAYNE.LOCAL = WAYNE.LOCAL Probably not enough info here. Try: (Remember caps must be in caps). .wayne.local = WAYNE.LOCAL wayne.local = WAYNE.LOCAL .WAYNE.LOCAL = WAYNE.LOCAL kerberos.server = KERBEROS.WAYNE.LOCAL [appdefaults] pam = { ticket_lifetime = 365d renew_lifetime = 365d forwardable = true proxiable = false retain_after_close = true minimum_uid = 0 Pam stuff is more OS dependent, so I have no suggestions here. MAKE SURE THAT YOU SAMBA SERVER IS USING THE W2K ADS SERVER AS DNSTHIS IS ABSOLUTELY CRITICAL. -- Original Message -- From: Thomas M. Skeren III [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 17:16:38 -0800 Brian Kesting wrote: Someone told me once to try to remove the Samba server from the domain, rename it, and rejoin the domain..would that solve any problems in your opinion? That is an odd solution, unless AD is mangled with respect to the samba server name. Methinks you have a kerberos problem. My servers are FreeBSD, but I do have a bare bones guide for setting up samba as an AD member server in FreeBSD. If you use Linux it can only be a reference, but it's an easy read. http://www.fsklaw.com/fbsdconfig.html -- Original Message -- From: Brian Kesting [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 18:05:47 -0600 I read something about nscd causing problems before I even installed the system, so I never even installed that service. Here is an updated /var/log/samba/log.winbindd file.btw, thanks for the quick help and tips so far, I appreciate it. [2004/12/20 17:33:27, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) [2004/12/20 17:38:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:43:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:45:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:49:01, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:52:26, 1] libads/ldap_utils.c:ads_do_search_retry(77) ads_search_retry: failed to reconnect (Invalid credentials) -- Original Message -- From: Brett Stevens [EMAIL PROTECTED] Date: Tue, 21 Dec 2004 10:33:30 +1100 One thing I moticed when having simmilar problems is that for some reason nscd seems to be a problem stop this service and restart all samba services including smbd nmbd and winbind Let us know how it goes. Brett Stevens -Original Message- From: Brian Kesting [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 21, 2004 10:29 AM To: [EMAIL PROTECTED] Subject: [Samba] winbind problems Hello, I am running a Samba server (3.0.7) on a Suse 9.2 box. I have connected this server successfully to a Windows 2000 Active Directory (mixed mode). I have nsswitch.conf, krb5.conf configured and winbind seems to be running properly for the most part. With wbinfo I can get all of my user and group information. Problem is, it seems that at random times, the samba server just stops authenticating the windows user names and accounts. If I restart the winbind or smb service, then all seems to be well again for a while. Right now the only way I can keep this running is to run a cron job that restartes the samba and winbind services every hour. This is really bugging me as I cannot figure out what is going on. Can anyone help me? I have included some of my configuration and log files below. Thanks in advance. -/etc/samba/smb.conf-- # Samba Configuration File
[Samba] removing unused machine account
Is there anyway to find out which machine account is currently not being used anymore? half of my clients are already migrate to linux and some machine are already join using different name. -- --beast -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind problems
Even if I do not have users logging into this samba box locally, i still need to edit /etc/pam.d/login? -- Original Message -- From: Thomas M. Skeren III [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 18:31:53 -0800 Brian Kesting wrote: When I made those changes to krb5.conf I got the following in my smb log and I could not access my samba share... [2004/12/20 20:13:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! [2004/12/20 20:13:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! [2004/12/20 20:14:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! [2004/12/20 20:14:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! Not sure what I am missing, I may just start this whole project over from scratch and see if I have better luck. As I stated in my guide, Note: If you have a server and it isn't a production server, has nothing of value on it, and you have been stuffing programs on it to get Samba to work with ADS , but failed, put that 5.3 Release install cd into the cdrom drive, and reinstall FBSD 5.3 formatting the drives along the way. Don't bug me if you didn't start with a nice clean install. Make sure you have the pam.d/login stuff done. Without it pam can't authenticate non local users. -- Original Message -- From: Thomas M. Skeren III [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 17:50:47 -0800 Brian Kesting wrote: I am using Suse 9.2 and heimdal 0.6.2 In that case you need: default_etypes = des-cbc-crc des-cbc-md5 default_etypes_des = des-cbc-crc des-cbc-md5 In libdefaults. Read my whole response as I made changes throughout your krb5.conf file. You may also need a keytab file, but I doubt it. -- Original Message -- From: Thomas M. Skeren III [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 17:43:07 -0800 Brian Kesting wrote: My setup looks about identical to the setup you have listed in the link you provided. Since this line: libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) keeps appearing in my winbind log file, I am thinking it is a kerberos problem too. Do you see anything wrong with my /etc/krb5.conf file? [libdefaults] default_realm = WAYNE.LOCAL clockskew = 300 Try adding : dns_lookup_realm = false dns_lookup_kdc = false Also which OS are you using? What Kerberos? The default etypes lines are necessary for Heimdal, but I don't think they are necessary for MIT. [realms] WAYNE.LOCAL = { kdc = police.wayne.local default_domain = WAYNE.LOCAL kpasswd_server = police.wayne.local } Try: kdc = KERBEROS.WAYNE.LOCAL admin_server = police.wayne.local default_domain = wayne.local [domain_realm] .WAYNE.LOCAL = WAYNE.LOCAL Probably not enough info here. Try: (Remember caps must be in caps). .wayne.local = WAYNE.LOCAL wayne.local = WAYNE.LOCAL .WAYNE.LOCAL = WAYNE.LOCAL kerberos.server = KERBEROS.WAYNE.LOCAL [appdefaults] pam = { ticket_lifetime = 365d renew_lifetime = 365d forwardable = true proxiable = false retain_after_close = true minimum_uid = 0 Pam stuff is more OS dependent, so I have no suggestions here. MAKE SURE THAT YOU SAMBA SERVER IS USING THE W2K ADS SERVER AS DNSTHIS IS ABSOLUTELY CRITICAL. -- Original Message -- From: Thomas M. Skeren III [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 17:16:38 -0800 Brian Kesting wrote: Someone told me once to try to remove the Samba server from the domain, rename it, and rejoin the domain..would that solve any problems in your opinion? That is an odd solution, unless AD is mangled with respect to the samba server name. Methinks you have a kerberos problem. My servers are FreeBSD, but I do have a bare bones guide for setting up samba as an AD member server in FreeBSD. If you use Linux it can only be a reference, but it's an easy read. http://www.fsklaw.com/fbsdconfig.html -- Original Message -- From: Brian Kesting [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 18:05:47 -0600 I read something about nscd causing problems before I even installed the system, so I never even installed that service. Here is an updated /var/log/samba/log.winbindd file.btw, thanks for the quick help and tips so far, I appreciate it. [2004/12/20 17:33:27, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) [2004/12/20 17:38:44, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could
RE: [Samba] winbind problems
I do have both servers pointed to the same ntp serverthe time issue should be negligent here.i hope (lol) -- Original Message -- From: Brett Stevens [EMAIL PROTECTED] Date: Tue, 21 Dec 2004 14:21:10 +1100 One other problem that I experenced was time. Make sure that your servers are synced closely, preferbaly with the same server. Brett Stevens -Original Message- From: Brian Kesting [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 21, 2004 10:29 AM To: [EMAIL PROTECTED] Subject: [Samba] winbind problems Hello, I am running a Samba server (3.0.7) on a Suse 9.2 box. I have connected this server successfully to a Windows 2000 Active Directory (mixed mode). I have nsswitch.conf, krb5.conf configured and winbind seems to be running properly for the most part. With wbinfo I can get all of my user and group information. Problem is, it seems that at random times, the samba server just stops authenticating the windows user names and accounts. If I restart the winbind or smb service, then all seems to be well again for a while. Right now the only way I can keep this running is to run a cron job that restartes the samba and winbind services every hour. This is really bugging me as I cannot figure out what is going on. Can anyone help me? I have included some of my configuration and log files below. Thanks in advance. -/etc/samba/smb.conf-- # Samba Configuration File [global] workgroup = WAYNE realm = WAYNE.LOCAL server string = Samba Server security = ADS password server = adserver.wayne.local encrypt passwords = yes idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind use default domain = no winbind separator = / [users] comment = Users on Linux path = /home/WAYNE read only = No browseable = Yes -/etc/nsswitch.conf--- passwd: files winbind group: files winbind hosts:files dns wins winbind networks: files dns -/etc/krb5.conf--- [libdefaults] default_realm = WAYNE.LOCAL clockskew = 300 [realms] WAYNE.LOCAL = { kdc = police.wayne.local default_domain = WAYNE.LOCAL kpasswd_server = adserver.wayne.local } [domain_realm] .WAYNE.LOCAL = WAYNE.LOCAL [appdefaults] pam = { ticket_lifetime = 365d renew_lifetime = 365d forwardable = true proxiable = false retain_after_close = true minimum_uid = 0 } --/var/log/samba/log.smbd [2004/12/20 15:25:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:44, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system [2004/12/20 15:25:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/LIEUTENANT1$ is invalid on this system . . . [2004/12/20 16:04:34, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system [2004/12/20 16:05:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250) Username WAYNE/DISPATCH_GW1$ is invalid on this system --/var/log/samba/log.winbindd--- [2004/12/20 16:51:07, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:54:52, 1] libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) [2004/12/20 16:56:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 16:59:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:00:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) user 'root' does not exist [2004/12/20 17:01:18, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:06:24, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:11:40, 1] libsmb/ntlmssp.c:ntlmssp_update(245) Failed to parse NTLMSSP packet, could not extract NTLMSSP command [2004/12/20 17:15:01, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1059) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind problems
Ok, I will set that up tomorrow. I had it setup at one time, but thought that if I didn't have local users logging into the local system I didn't need it. I really appreciate your quick and informative responses to my questions Thomas and everyone elseI really appreciate it. -- Original Message -- From: Thomas M. Skeren III [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 20:12:05 -0800 Brian Kesting wrote: Even if I do not have users logging into this samba box locally, i still need to edit /etc/pam.d/login? Yes -- Original Message -- From: Thomas M. Skeren III [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 18:31:53 -0800 Brian Kesting wrote: When I made those changes to krb5.conf I got the following in my smb log and I could not access my samba share... [2004/12/20 20:13:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! [2004/12/20 20:13:56, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! [2004/12/20 20:14:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! [2004/12/20 20:14:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! Not sure what I am missing, I may just start this whole project over from scratch and see if I have better luck. As I stated in my guide, Note: If you have a server and it isn't a production server, has nothing of value on it, and you have been stuffing programs on it to get Samba to work with ADS , but failed, put that 5.3 Release install cd into the cdrom drive, and reinstall FBSD 5.3 formatting the drives along the way. Don't bug me if you didn't start with a nice clean install. Make sure you have the pam.d/login stuff done. Without it pam can't authenticate non local users. -- Original Message -- From: Thomas M. Skeren III [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 17:50:47 -0800 Brian Kesting wrote: I am using Suse 9.2 and heimdal 0.6.2 In that case you need: default_etypes = des-cbc-crc des-cbc-md5 default_etypes_des = des-cbc-crc des-cbc-md5 In libdefaults. Read my whole response as I made changes throughout your krb5.conf file. You may also need a keytab file, but I doubt it. -- Original Message -- From: Thomas M. Skeren III [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 17:43:07 -0800 Brian Kesting wrote: My setup looks about identical to the setup you have listed in the link you provided. Since this line: libsmb/clikrb5.c:ads_krb5_mk_req(313) krb5_cc_get_principal failed (No such file or directory) keeps appearing in my winbind log file, I am thinking it is a kerberos problem too. Do you see anything wrong with my /etc/krb5.conf file? [libdefaults] default_realm = WAYNE.LOCAL clockskew = 300 Try adding : dns_lookup_realm = false dns_lookup_kdc = false Also which OS are you using? What Kerberos? The default etypes lines are necessary for Heimdal, but I don't think they are necessary for MIT. [realms] WAYNE.LOCAL = { kdc = police.wayne.local default_domain = WAYNE.LOCAL kpasswd_server = police.wayne.local } Try: kdc = KERBEROS.WAYNE.LOCAL admin_server = police.wayne.local default_domain = wayne.local [domain_realm] .WAYNE.LOCAL = WAYNE.LOCAL Probably not enough info here. Try: (Remember caps must be in caps). .wayne.local = WAYNE.LOCAL wayne.local = WAYNE.LOCAL .WAYNE.LOCAL = WAYNE.LOCAL kerberos.server = KERBEROS.WAYNE.LOCAL [appdefaults] pam = { ticket_lifetime = 365d renew_lifetime = 365d forwardable = true proxiable = false retain_after_close = true minimum_uid = 0 Pam stuff is more OS dependent, so I have no suggestions here. MAKE SURE THAT YOU SAMBA SERVER IS USING THE W2K ADS SERVER AS DNSTHIS IS ABSOLUTELY CRITICAL. -- Original Message -- From: Thomas M. Skeren III [EMAIL PROTECTED] Date: Mon, 20 Dec 2004 17:16:38 -0800 Brian Kesting wrote: Someone told me once to try to remove the Samba server from the domain, rename it, and rejoin the domain..would that solve any problems in your opinion? That is an odd solution, unless AD is mangled with respect to the samba server name. Methinks you have a kerberos problem. My servers are FreeBSD, but I do have a bare bones guide for setting up samba as an AD member server in FreeBSD. If you use Linux it can only be a reference, but it's an easy read. http://www.fsklaw.com/fbsdconfig.html -- Original Message -- From:
[Samba] Re: Shares With Spaces
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 | I'm having a bit of troble to mount shares with space | something like: | //server/share space | i tryied using the sharename in and '' | and no luck | I have no problems using - mount -t smbfs //share/with spaces | /path/to/mount -o username. | and in fstab how to I use it? | Uou, a great question... i didn't find how to... :( sorry You've probably tried this but what about: //share/with\ spaces Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBx67H57L0B7uXm9oRAntiAJ49xdI1vxilwRNLaX/hmtUde/jShgCcCUNq pd89gv54huINsemApobObpA= =4LRq -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Can the logon script know username?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Type 'set' in any dos window to see the list of environment variables for a windows user. Pay particular attention to %USERNAME%. Jim C. - -- - - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| - - -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBx69b57L0B7uXm9oRAlDAAJ9at2dEUxjspe6fy8f+87V/Unj7CACeI4Gm /KZxs5ScUT7HHljEJAx4rzc= =BX3v -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] write performance of Win xpp sp2
Gentlemen, I have noticed (!) an unbelievable drop in performance with Windows xp pro sp2 systems, compared to sp1. The performance I have noticed is 122 seconds to write 65,000 indexed records to a dBase type file under sp2 and the same job in sp1 is 7 seconds!! I can't believe that this is a 'normal' feature of Windows sp2 software when working with Samba. Is it possible that Microsoft has made changes that make Samba under Linux totaly uncompetitive. ps. the performance drop is still there using the 'copy' command from the command prompt. The file in question is 8.1 Meg, large but not unreasonable. ANY help would be appreciated. [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Unix password synch
Hi all, Is there any way to automatically update the samba password when a user changes his unix account password using the passwd command. I want samba to look in passwd file for authentication. I dont want to create two accounts one for local unix and then for the samba. I am not planning to deploy ldap as a solution. Is there any workaround. Anish ___ ALL-NEW Yahoo! Messenger - all new features - even more fun! http://uk.messenger.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Unix password synch
On Tue, 2004-12-21 at 13:45, Anish Mathew wrote: Hi all, Is there any way to automatically update the samba password when a user changes his unix account password using the passwd command. Short Answer - Yes. I want samba to look in passwd file for authentication. I dont want to create two accounts one for local unix and then for the samba. How to get passwd to sync both Linux and smbpasswd Update : Ow Mun Heng Date: Long Time Ago The pam_smbpass PAM module can be used to sync users' Samba passwords with their system passwords when the passwd command is used. If a user invokes the passwd command, the password he uses to log in to the Red Hat Linux system as well as the password he must provide to connect to a Samba share are changed. To enable this feature, add the following line to /etc/pam.d/system-auth below the pam_cracklib.so invocation: password required /lib/security/pam_smbpass.so nullok use_authtok try_first_pass This module is incorporated into the samba source/rpm package #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is run. authrequired /lib/security/pam_env.so authsufficient/lib/security/pam_unix.so likeauth nullok authrequired /lib/security/pam_deny.so account required /lib/security/pam_unix.so passwordrequired /lib/security/pam_cracklib.so retry=3 type= passwordrequired /lib/security/pam_smbpass.so nullok use_authtok try_first_pass passwordsufficient/lib/security/pam_unix.so nullok use_authtok md5 shadow passwordrequired /lib/security/pam_deny.so session required /lib/security/pam_limits.so session required /lib/security/pam_unix.so # less /usr/share/doc/samba-2.2.7/docs/pam_smbpass/README -- Ow Mun Heng Gentoo/Linux on D600 1.4Ghz 98% Microsoft(tm) Free!! Neuromancer 14:06:56 up 4:56, 6 users, 0.47, 0.55, 0.25 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
SAMBA startup + shutdown
Hi, here are some minor problems I found with Samba startup and shutdown, using Samba 2.2.8, release 2004-1021 with SAMBA_SHUTDOWN.COM by R. Regier 15-Sep-04: (1) The shutdown procedure disables the services SMBD and SWAT. This is useful (only) if you want to (temporary) disable the service(s) on a running system and start them later again. The unmodified procedure SAMBA_STARTUP.COM does not enable the service, because they should be enabled by the TCPIP startup procedure. However, this is not true, if you run SAMBA_SHUTDOWN.COM for any reason and want to start the service again with SAMBA_STARTUP.COM. I'm not sure what would be the best solution, but for now I decided to uncomment the enable service commands in the startup procedure. Maybe it would be a good idea to add SAMBA_STOP.COM and SAMBA_START.COM (or similar) to stop and start Samba temporarily ... (2) One bigger problem with this release (and previous 2.2.8 releases) is the fact that the NMBD process creates the file samba_root:[var.locks]nmbd.pid and checks this file when started. NMBD exits with the following error message in the file SAMBA_ROOT:[VAR]LOG.NMBD: [2004/12/20 11:07:17, 0] DISK$SWAP:[JYC.SAMBA.SAMBA-2_2_8-VMS73-SRC.SOURCE.LIB]PIDFILE.C;10:(87) ERROR: nmbd is already running. File /samba_root/var/locks/nmbd.pid exists and process id 543 is running. It happened to me that the process was running indeed, but it was another server process. Therefore NMBD exited whenever it was started :-( My solution is to add these lines to SAMBA_SHUTDOWN.COM: $ SECTION3: $! $! delete obsolete .PID file ... $! $if f$search(samba_root:[var.locks]nmbd.pid).nes. then - delete/log/noconf samba_root:[var.locks]nmbd.pid;* $! $ ECHO [ Finished NMBD process termination ] (the first and last lines are from the original procedure). Is there a way to stop NMBD in a safe way that it can delete the .PID file? If not, then I think that the check should not be done (under VMS). Setting the process name to NMBD is safe enough if the UIC group of the NMBD process is known. Regards Albrecht PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING: http://www.catb.org/~esr/faqs/smart-questions.html
svn commit: samba r4286 - branches/SAMBA_3_0/source/auth branches/SAMBA_3_0/source/include branches/SAMBA_3_0/source/nsswitch branches/SAMBA_3_0/source/rpc_client branches/SAMBA_3_0/source/rpc_parse trunk/source/auth trunk/source/include trunk/source/nsswitch trunk/source/rpc_client trunk/source/rpc_parse
Author: gd Date: 2004-12-20 11:36:39 + (Mon, 20 Dec 2004) New Revision: 4286 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4286 Log: Give back 8 byte lm_session_key in Netrsamlogon-reply. The old #ifdef JRATEST-block was copying 16 bytes and thus overwriting acct_flags with bizarre values, breaking a lot of things. This patch is successfully running in a production environment for quite some time now and is required to finally allow Exchange 5.5 to access another Exchange Server when both are running on NT4 in a samba-controlled domain. This also allows Exchange Replication to take place, Exchange Administrator to access other Servers in the network, etc. Fixes Bugzilla #1136. Thanks abartlet for helping me with that one. Guenther Modified: branches/SAMBA_3_0/source/auth/auth_util.c branches/SAMBA_3_0/source/include/rpc_netlogon.h branches/SAMBA_3_0/source/nsswitch/winbindd_pam.c branches/SAMBA_3_0/source/rpc_client/cli_netlogon.c branches/SAMBA_3_0/source/rpc_parse/parse_net.c trunk/source/auth/auth_util.c trunk/source/include/rpc_netlogon.h trunk/source/nsswitch/winbindd_pam.c trunk/source/rpc_client/cli_netlogon.c trunk/source/rpc_parse/parse_net.c Changeset: Sorry, the patch is too large (267 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4286
svn commit: samba-docs r307 - in trunk/manpages: .
Author: gd Date: 2004-12-20 12:30:14 + (Mon, 20 Dec 2004) New Revision: 307 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=307 Log: Fix from Bjoern Jacke. add description of %i variable and unify lower case usage of starting letter in variable section. Guenther Modified: trunk/manpages/smb.conf.5.xml Changeset: Modified: trunk/manpages/smb.conf.5.xml === --- trunk/manpages/smb.conf.5.xml 2004-12-19 16:26:02 UTC (rev 306) +++ trunk/manpages/smb.conf.5.xml 2004-12-20 12:30:14 UTC (rev 307) @@ -372,7 +372,7 @@ varlistentry term%d/term - listitemparaThe process id of the current server + listitemparathe process id of the current server process./para/listitem /varlistentry @@ -389,23 +389,29 @@ varlistentry term%I/term - listitemparaThe IP address of the client machine./para + listitemparathe IP address of the client machine./para /listitem /varlistentry varlistentry + term%i/term + listitemparathe local IP address to which a client connected./para + /listitem + /varlistentry + + varlistentry term%T/term listitemparathe current date and time./para/listitem /varlistentry varlistentry term%D/term - listitemparaName of the domain or workgroup of the current user./para/listitem + listitemparaname of the domain or workgroup of the current user./para/listitem /varlistentry varlistentry term%$(replaceableenvvar/replaceable)/term - listitemparaThe value of the environment variable + listitemparathe value of the environment variable replaceableenvar/replaceable./para/listitem /varlistentry /variablelist
svn commit: samba r4287 - branches/SAMBA_3_0/source/include branches/SAMBA_3_0/source/rpc_parse branches/SAMBA_3_0/source/utils trunk/source/include trunk/source/rpc_parse trunk/source/utils
Author: gd Date: 2004-12-20 12:52:33 + (Mon, 20 Dec 2004) New Revision: 4287 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4287 Log: Vampire SAM_DELTA_DOMAIN_INFO. Based on samba4-idl. The decoding of account-lockout-string is somewhat experimental though. Guenther Modified: branches/SAMBA_3_0/source/include/rpc_misc.h branches/SAMBA_3_0/source/include/rpc_netlogon.h branches/SAMBA_3_0/source/rpc_parse/parse_misc.c branches/SAMBA_3_0/source/rpc_parse/parse_net.c branches/SAMBA_3_0/source/utils/net_rpc_samsync.c trunk/source/include/rpc_misc.h trunk/source/include/rpc_netlogon.h trunk/source/rpc_parse/parse_misc.c trunk/source/rpc_parse/parse_net.c trunk/source/utils/net_rpc_samsync.c Changeset: Sorry, the patch is too large (781 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4287
svn commit: samba-docs r308 - in trunk/manpages: .
Author: gd Date: 2004-12-20 14:03:32 + (Mon, 20 Dec 2004) New Revision: 308 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=308 Log: Fix whitespace. Guenther Modified: trunk/manpages/smbstatus.1.xml Changeset: Modified: trunk/manpages/smbstatus.1.xml === --- trunk/manpages/smbstatus.1.xml 2004-12-20 12:30:14 UTC (rev 307) +++ trunk/manpages/smbstatus.1.xml 2004-12-20 14:03:32 UTC (rev 308) @@ -98,8 +98,7 @@ varlistentry term-u|--user=lt;usernamegt;/term - listitemparaselects information relevant to - parameterusername/parameter only./para + listitemparaselects information relevant to parameterusername/parameter only./para /listitem /varlistentry
svn commit: samba r4288 - in branches/SAMBA_4_0/source: build/pidl rpc_server rpc_server/epmapper rpc_server/remote
Author: metze Date: 2004-12-20 14:37:54 + (Mon, 20 Dec 2004) New Revision: 4288 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4288 Log: don't use struct dcerpc_interface_table anymore in the main rpc server code. let the backends specify a ndr_push/ndr_pull function like we already do with the dispatch() function. this allows an interface implmentation to work as real proxy without needing to know the idl for an interface that means just the plain decrypted payload can be forwarded If someone want to write such a backend, patches are wellcome metze Modified: branches/SAMBA_4_0/source/build/pidl/server.pm branches/SAMBA_4_0/source/build/pidl/stub.pm branches/SAMBA_4_0/source/rpc_server/dcerpc_server.c branches/SAMBA_4_0/source/rpc_server/dcerpc_server.h branches/SAMBA_4_0/source/rpc_server/epmapper/rpc_epmapper.c branches/SAMBA_4_0/source/rpc_server/remote/dcesrv_remote.c Changeset: Sorry, the patch is too large (730 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4288
svn commit: samba r4289 - branches/SAMBA_3_0/source/lib trunk/source/lib
Author: gd Date: 2004-12-20 18:42:58 + (Mon, 20 Dec 2004) New Revision: 4289 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4289 Log: Close LDAP-Connection before retrying to open a new connection in the retry-loop. This fixes a deadlock-situation when ldapsam is used with the ldapi interface: getpeername won't fail while trying to detect dead connections on unix domain sockets. When the ldapi-connection was closed server-side (due to OpenLDAP's idletimeout) we *never* got a new LDAP connection. Guenther Modified: branches/SAMBA_3_0/source/lib/smbldap.c trunk/source/lib/smbldap.c Changeset: Modified: branches/SAMBA_3_0/source/lib/smbldap.c === --- branches/SAMBA_3_0/source/lib/smbldap.c 2004-12-20 14:37:54 UTC (rev 4288) +++ branches/SAMBA_3_0/source/lib/smbldap.c 2004-12-20 18:42:58 UTC (rev 4289) @@ -977,6 +977,7 @@ *attempts += 1; + smbldap_close(ldap_state); open_rc = smbldap_open(ldap_state); if (open_rc == LDAP_SUCCESS) { Modified: trunk/source/lib/smbldap.c === --- trunk/source/lib/smbldap.c 2004-12-20 14:37:54 UTC (rev 4288) +++ trunk/source/lib/smbldap.c 2004-12-20 18:42:58 UTC (rev 4289) @@ -999,6 +999,7 @@ *attempts += 1; + smbldap_close(ldap_state); open_rc = smbldap_open(ldap_state); if (open_rc == LDAP_SUCCESS) {
svn commit: samba-web r480 - in trunk/news/users: .
Author: deryck Date: 2004-12-20 19:38:22 + (Mon, 20 Dec 2004) New Revision: 480 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=480 Log: This is a change requested by the author, Alan Horkin. Modified: trunk/news/users/babelmedia_converts.html Changeset: Modified: trunk/news/users/babelmedia_converts.html === --- trunk/news/users/babelmedia_converts.html 2004-12-19 14:28:17 UTC (rev 479) +++ trunk/news/users/babelmedia_converts.html 2004-12-20 19:38:22 UTC (rev 480) @@ -10,13 +10,11 @@ PC, mobile, TV games developers. We specialise in QA and localisation and have test facilities in UK, US and India./p -pI recently have taken on a mission to migrate as many services away -from Microsoft technology after realising that the word dependency is -too vital to operating a successful Microsoft environment. We have -now been using SAMBA on one of our file servers in AD mode -for three months with no regrets. Its faster and more reliable than its -Windows counterparts. I have no hesitation now to use SAMBA for file -serving to any platform./p +pI recently have taken on a mission to migrate some services away +from Microsoft technology. We have now been using SAMBA on a couple +of our file servers in AD mode for three months with no regrets. +It's as fast and reliable as its Windows counterparts. I have +no hesitation now to use SAMBA for file serving to any platform./p /blockquote p class=creditIf you have a testimonial about your experience with
svn commit: samba r4291 - in branches/SAMBA_3_0/source: client lib libsmb modules utils
Author: jra Date: 2004-12-20 21:14:28 + (Mon, 20 Dec 2004) New Revision: 4291 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4291 Log: More *alloc fixes inspired by Albert Chin ([EMAIL PROTECTED]). Jeremy Modified: branches/SAMBA_3_0/source/client/tree.c branches/SAMBA_3_0/source/lib/afs_settoken.c branches/SAMBA_3_0/source/lib/sysacls.c branches/SAMBA_3_0/source/lib/util_smbd.c branches/SAMBA_3_0/source/libsmb/clikrb5.c branches/SAMBA_3_0/source/modules/vfs_afsacl.c branches/SAMBA_3_0/source/utils/editreg.c branches/SAMBA_3_0/source/utils/net_rpc_samsync.c Changeset: Sorry, the patch is too large (438 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4291
svn commit: samba r4292 - in trunk/source/smbd: .
Author: jra Date: 2004-12-20 22:01:18 + (Mon, 20 Dec 2004) New Revision: 4292 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4292 Log: Fix inspired by debug trace from Rob Foehl [EMAIL PROTECTED] - catch sendfile errors correctly and return the correct values we want the caller to return (-1 meaning none in correct cases). Jeremy. Modified: trunk/source/smbd/reply.c Changeset: Modified: trunk/source/smbd/reply.c === --- trunk/source/smbd/reply.c 2004-12-20 21:14:28 UTC (rev 4291) +++ trunk/source/smbd/reply.c 2004-12-20 22:01:18 UTC (rev 4292) @@ -1783,6 +1783,11 @@ header.free = NULL; if ( SMB_VFS_SENDFILE( smbd_server_fd(), fsp, fsp-fd, header, startpos, nread) == -1) { + /* Returning ENOSYS means no data at all was sent. Do this as a normal read. */ + if (errno == ENOSYS) { + goto normal_readbraw; + } + /* * Special hack for broken Linux with no working sendfile. If we * return EINTR we sent the header but not the rest of the data. @@ -1808,6 +1813,8 @@ } + normal_readbraw: + #endif if (nread 0) { @@ -2157,12 +2164,18 @@ header.length = data - outbuf; header.free = NULL; - if ( SMB_VFS_SENDFILE( smbd_server_fd(), fsp, fsp-fd, header, startpos, smb_maxcnt) == -1) { + if ((nread = SMB_VFS_SENDFILE( smbd_server_fd(), fsp, fsp-fd, header, startpos, smb_maxcnt)) == -1) { + /* Returning ENOSYS means no data at all was sent. Do this as a normal read. */ + if (errno == ENOSYS) { + goto normal_read; + } + /* * Special hack for broken Linux with no working sendfile. If we * return EINTR we sent the header but not the rest of the data. * Fake this up by doing read/write calls. */ + if (errno == EINTR) { /* Ensure we don't do this again. */ set_use_sendfile(SNUM(conn), False); @@ -2174,7 +2187,10 @@ fsp-fsp_name, strerror(errno) )); exit_server(send_file_readX: fake_sendfile failed); } - return nread; + DEBUG( 3, ( send_file_readX: fake_sendfile fnum=%d max=%d nread=%d\n, + fsp-fnum, (int)smb_maxcnt, (int)(nread + (data - outbuf)) ) ); + /* Returning -1 here means successful sendfile. */ + return -1; } DEBUG(0,(send_file_readX: sendfile failed for file %s (%s). Terminating\n, @@ -2184,6 +2200,7 @@ DEBUG( 3, ( send_file_readX: sendfile fnum=%d max=%d nread=%d\n, fsp-fnum, (int)smb_maxcnt, (int)nread ) ); + /* Returning -1 here means successful sendfile. */ return -1; } @@ -2208,6 +2225,7 @@ DEBUG( 3, ( send_file_readX fnum=%d max=%d nread=%d\n, fsp-fnum, (int)smb_maxcnt, (int)nread ) ); + /* Returning the number of bytes we want to send back - including header. */ return outsize; }
svn commit: samba r4293 - in branches/SAMBA_3_0/source/smbd: .
Author: jra Date: 2004-12-20 22:01:42 + (Mon, 20 Dec 2004) New Revision: 4293 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4293 Log: Fix inspired by debug trace from Rob Foehl [EMAIL PROTECTED] - catch sendfile errors correctly and return the correct values we want the caller to return (-1 meaning none in correct cases). Jeremy. Modified: branches/SAMBA_3_0/source/smbd/reply.c Changeset: Modified: branches/SAMBA_3_0/source/smbd/reply.c === --- branches/SAMBA_3_0/source/smbd/reply.c 2004-12-20 22:01:18 UTC (rev 4292) +++ branches/SAMBA_3_0/source/smbd/reply.c 2004-12-20 22:01:42 UTC (rev 4293) @@ -1783,6 +1783,11 @@ header.free = NULL; if ( SMB_VFS_SENDFILE( smbd_server_fd(), fsp, fsp-fd, header, startpos, nread) == -1) { + /* Returning ENOSYS means no data at all was sent. Do this as a normal read. */ + if (errno == ENOSYS) { + goto normal_readbraw; + } + /* * Special hack for broken Linux with no working sendfile. If we * return EINTR we sent the header but not the rest of the data. @@ -1808,6 +1813,8 @@ } + normal_readbraw: + #endif if (nread 0) { @@ -2157,12 +2164,18 @@ header.length = data - outbuf; header.free = NULL; - if ( SMB_VFS_SENDFILE( smbd_server_fd(), fsp, fsp-fd, header, startpos, smb_maxcnt) == -1) { + if ((nread = SMB_VFS_SENDFILE( smbd_server_fd(), fsp, fsp-fd, header, startpos, smb_maxcnt)) == -1) { + /* Returning ENOSYS means no data at all was sent. Do this as a normal read. */ + if (errno == ENOSYS) { + goto normal_read; + } + /* * Special hack for broken Linux with no working sendfile. If we * return EINTR we sent the header but not the rest of the data. * Fake this up by doing read/write calls. */ + if (errno == EINTR) { /* Ensure we don't do this again. */ set_use_sendfile(SNUM(conn), False); @@ -2174,7 +2187,10 @@ fsp-fsp_name, strerror(errno) )); exit_server(send_file_readX: fake_sendfile failed); } - return nread; + DEBUG( 3, ( send_file_readX: fake_sendfile fnum=%d max=%d nread=%d\n, + fsp-fnum, (int)smb_maxcnt, (int)(nread + (data - outbuf)) ) ); + /* Returning -1 here means successful sendfile. */ + return -1; } DEBUG(0,(send_file_readX: sendfile failed for file %s (%s). Terminating\n, @@ -2184,6 +2200,7 @@ DEBUG( 3, ( send_file_readX: sendfile fnum=%d max=%d nread=%d\n, fsp-fnum, (int)smb_maxcnt, (int)nread ) ); + /* Returning -1 here means successful sendfile. */ return -1; } @@ -2208,6 +2225,7 @@ DEBUG( 3, ( send_file_readX fnum=%d max=%d nread=%d\n, fsp-fnum, (int)smb_maxcnt, (int)nread ) ); + /* Returning the number of bytes we want to send back - including header. */ return outsize; }
svn commit: samba-docs r309 - in trunk/Samba-HOWTO-Collection: .
Author: mimir Date: 2004-12-20 22:03:51 + (Mon, 20 Dec 2004) New Revision: 309 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=309 Log: Typo fix. rafal Modified: trunk/Samba-HOWTO-Collection/PolicyMgmt.xml Changeset: Modified: trunk/Samba-HOWTO-Collection/PolicyMgmt.xml === --- trunk/Samba-HOWTO-Collection/PolicyMgmt.xml 2004-12-20 14:03:32 UTC (rev 308) +++ trunk/Samba-HOWTO-Collection/PolicyMgmt.xml 2004-12-20 22:03:51 UTC (rev 309) @@ -214,7 +214,7 @@ para indextermprimaryGPOs/primary/indexterm The older NT4-style registry-based policies are known as emphasisAdministrative Templates/emphasis - in MS Windows 2000/XP Group Policy Objects (GPOs). The later includes the ability to set various security + in MS Windows 2000/XP Group Policy Objects (GPOs). The latter includes the ability to set various security configurations, enforce Internet Explorer browser settings, change and redirect aspects of the users desktop (including the location of filenameMy Documents/filename files (directory), as well as intrinsics of where menu items will appear in the Start menu). An additional new
svn commit: samba r4294 - in trunk/source/smbd: .
Author: jra Date: 2004-12-20 22:04:44 + (Mon, 20 Dec 2004) New Revision: 4294 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4294 Log: Don't include header len in data write debug. Jeremy. Modified: trunk/source/smbd/reply.c Changeset: Modified: trunk/source/smbd/reply.c === --- trunk/source/smbd/reply.c 2004-12-20 22:01:42 UTC (rev 4293) +++ trunk/source/smbd/reply.c 2004-12-20 22:04:44 UTC (rev 4294) @@ -2188,7 +2188,7 @@ exit_server(send_file_readX: fake_sendfile failed); } DEBUG( 3, ( send_file_readX: fake_sendfile fnum=%d max=%d nread=%d\n, - fsp-fnum, (int)smb_maxcnt, (int)(nread + (data - outbuf)) ) ); + fsp-fnum, (int)smb_maxcnt, (int)nread ) ); /* Returning -1 here means successful sendfile. */ return -1; }
svn commit: samba r4295 - in branches/SAMBA_3_0/source/smbd: .
Author: jra Date: 2004-12-20 22:04:53 + (Mon, 20 Dec 2004) New Revision: 4295 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4295 Log: Don't include header len in data write debug. Jeremy. Modified: branches/SAMBA_3_0/source/smbd/reply.c Changeset: Modified: branches/SAMBA_3_0/source/smbd/reply.c === --- branches/SAMBA_3_0/source/smbd/reply.c 2004-12-20 22:04:44 UTC (rev 4294) +++ branches/SAMBA_3_0/source/smbd/reply.c 2004-12-20 22:04:53 UTC (rev 4295) @@ -2188,7 +2188,7 @@ exit_server(send_file_readX: fake_sendfile failed); } DEBUG( 3, ( send_file_readX: fake_sendfile fnum=%d max=%d nread=%d\n, - fsp-fnum, (int)smb_maxcnt, (int)(nread + (data - outbuf)) ) ); + fsp-fnum, (int)smb_maxcnt, (int)nread ) ); /* Returning -1 here means successful sendfile. */ return -1; }
svn commit: samba r4297 - in trunk/source: . lib
Author: jra Date: 2004-12-20 22:33:43 + (Mon, 20 Dec 2004) New Revision: 4297 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4297 Log: Patch from William Jojo [EMAIL PROTECTED] to fix HPUX sendfile and add configure.in tests and code for sendfile on AIX. Jeremy. Modified: trunk/source/configure.in trunk/source/lib/sendfile.c Changeset: Modified: trunk/source/configure.in === --- trunk/source/configure.in 2004-12-20 22:33:37 UTC (rev 4296) +++ trunk/source/configure.in 2004-12-20 22:33:43 UTC (rev 4297) @@ -4224,7 +4224,36 @@ AC_MSG_RESULT(no); fi ;; + *aix*) + AC_CACHE_CHECK([for AIX send_file support],samba_cv_HAVE_SENDFILE,[ + AC_TRY_LINK([\ +#include sys/socket.h], +[\ + int fromfd, tofd; + size_t total=0; + struct sf_parms hdtrl; + ssize_t nwritten; + off64_t offset; + hdtrl.header_data = 0; + hdtrl.header_length = 0; + hdtrl.file_descriptor = fromfd; + hdtrl.file_offset = 0; + hdtrl.file_bytes = 0; + hdtrl.trailer_data = 0; + hdtrl.trailer_length = 0; + + nwritten = send_file(tofd, hdtrl, 0); +], +samba_cv_HAVE_SENDFILE=yes,samba_cv_HAVE_SENDFILE=no)]) + if test x$samba_cv_HAVE_SENDFILE = xyes; then + AC_DEFINE(HAVE_SENDFILE,1,[Whether sendfile() is available]) + AC_DEFINE(AIX_SENDFILE_API,1,[Whether the AIX send_file() API is available]) + AC_DEFINE(WITH_SENDFILE,1,[Whether to include sendfile() support]) + else + AC_MSG_RESULT(no); + fi + ;; *) ;; esac Modified: trunk/source/lib/sendfile.c === --- trunk/source/lib/sendfile.c 2004-12-20 22:33:37 UTC (rev 4296) +++ trunk/source/lib/sendfile.c 2004-12-20 22:33:43 UTC (rev 4297) @@ -274,7 +274,7 @@ hdtrl[0].iov_len = hdr_len = 0; } hdtrl[1].iov_base = NULL; - hdtrl[1].iov_base = 0; + hdtrl[1].iov_len = 0; total = count; while (total + hdtrl[0].iov_len) { @@ -395,6 +395,62 @@ return count + hdr_len; } +#elif defined(AIX_SENDFILE_API) + +/* BEGIN AIX SEND_FILE */ + +/* Contributed by William Jojo [EMAIL PROTECTED] */ +#include sys/socket.h + +ssize_t sys_sendfile(int tofd, int fromfd, const DATA_BLOB *header, SMB_OFF_T offset, size_t count) +{ + size_t total=0; + struct sf_parms hdtrl; + + /* Set up the header/trailer struct params. */ + if (header) { + hdtrl.header_data = header-data; + hdtrl.header_length = header-length; + } else { + hdtrl.header_data = NULL; + hdtrl.header_length = 0; + } + hdtrl.trailer_data = NULL; + hdtrl.trailer_length = 0; + + hdtrl.file_descriptor = fromfd; + hdtrl.file_offset = offset; + hdtrl.file_bytes = count; + + while ( hdtrl.file_bytes + hdtrl.header_length ) { + ssize_t ret; + + /* +Return Value + +There are three possible return values from send_file: + +Value Description + +-1 an error has occurred, errno contains the error code. + +0 the command has completed successfully. + +1 the command was completed partially, some data has been +transmitted but the command has to return for some reason, +for example, the command was interrupted by signals. + */ + do { + ret = send_file(tofd, hdtrl, 0); + } while ( (ret == 1) || (ret == -1 errno == EINTR) ); + if ( ret == -1 ) + return -1; + } + + return count + header-length; +} +/* END AIX SEND_FILE */ + #else /* No sendfile implementation. Return error. */ ssize_t sys_sendfile(int tofd, int fromfd, const DATA_BLOB *header, SMB_OFF_T offset, size_t count)
svn commit: samba r4298 - in branches/SAMBA_4_0/source: include lib/registry
Author: jelmer Date: 2004-12-21 00:01:02 + (Tue, 21 Dec 2004) New Revision: 4298 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4298 Log: Update to credentials.h after feedback from Andrew Bartlett Move pack/unpack of values in ldb registry backend to seperate functions Modified: branches/SAMBA_4_0/source/include/credentials.h branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c Changeset: Modified: branches/SAMBA_4_0/source/include/credentials.h === --- branches/SAMBA_4_0/source/include/credentials.h 2004-12-20 22:33:43 UTC (rev 4297) +++ branches/SAMBA_4_0/source/include/credentials.h 2004-12-21 00:01:02 UTC (rev 4298) @@ -29,8 +29,10 @@ const char *domain; const char *realm; - const char *(*username_cb) (void); - const char *(*password_cb) (void); - const char *(*domain_cb) (void); - const char *(*realm_cb) (void); + const char *(*username_cb) (struct cli_credentials *); + const char *(*password_cb) (struct cli_credentials *); + const char *(*domain_cb) (struct cli_credentials *); + const char *(*realm_cb) (struct cli_credentials *); + + void *priv_data; }; Modified: branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c === --- branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c2004-12-20 22:33:43 UTC (rev 4297) +++ branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c2004-12-21 00:01:02 UTC (rev 4298) @@ -36,8 +36,34 @@ return 0; } +static void reg_ldb_unpack_value(TALLOC_CTX *mem_ctx, struct ldb_message *msg, char **name, uint32 *type, void **data, int *len) +{ + const struct ldb_val *val; + *name = talloc_strdup(mem_ctx, ldb_msg_find_string(msg, value, NULL)); + *type = ldb_msg_find_uint(msg, type, 0); + val = ldb_msg_find_ldb_val(msg, data); + *data = talloc_memdup(mem_ctx, val-data, val-length); + *len = val-length; +} +static struct ldb_message *reg_ldb_pack_value(struct ldb_context *ctx, TALLOC_CTX *mem_ctx, const char *name, uint32 type, void *data, int len) +{ + struct ldb_val val; + struct ldb_message *msg = talloc_zero_p(mem_ctx, struct ldb_message); + char *type_s; + ldb_msg_add_string(ctx, msg, value, talloc_strdup(mem_ctx, name)); + val.length = len; + val.data = data; + ldb_msg_add_value(ctx, msg, data, val); + + type_s = talloc_asprintf(mem_ctx, %u, type); + ldb_msg_add_string(ctx, msg, type, type_s); + + return msg; +} + + static int reg_close_ldb_key (void *data) { struct registry_key *key = data; @@ -121,9 +147,7 @@ static WERROR ldb_get_value_by_id(TALLOC_CTX *mem_ctx, struct registry_key *k, int idx, struct registry_value **value) { struct ldb_context *c = k-hive-backend_data; - struct ldb_message_element *el; struct ldb_key_data *kd = k-backend_data; - const struct ldb_val *val; /* Do the search if necessary */ if (kd-values == NULL) { @@ -136,16 +160,11 @@ } if(idx = kd-value_count) return WERR_NO_MORE_ITEMS; - - el = ldb_msg_find_element(kd-values[idx], value); - + *value = talloc_p(mem_ctx, struct registry_value); - (*value)-name = talloc_strdup(mem_ctx, el-values[0].data); - (*value)-data_type = ldb_msg_find_uint(kd-values[idx], type, 0); - val = ldb_msg_find_ldb_val(kd-values[idx], data); - (*value)-data_blk = talloc_memdup(mem_ctx, val-data, val-length); - (*value)-data_len = val-length; + reg_ldb_unpack_value(mem_ctx, kd-values[idx], (*value)-name, (*value)-data_type, (*value)-data_blk, (*value)-data_len); + return WERR_OK; } @@ -275,28 +294,18 @@ static WERROR ldb_set_value (struct registry_key *parent, const char *name, uint32 type, void *data, int len) { struct ldb_context *ctx = parent-hive-backend_data; - struct ldb_message msg; - struct ldb_val val; + struct ldb_message *msg; struct ldb_key_data *kd = parent-backend_data; int ret; - char *type_s; TALLOC_CTX *mem_ctx = talloc_init(ldb_set_value); - ZERO_STRUCT(msg); + msg = reg_ldb_pack_value(ctx, mem_ctx, name, type, data, len); - msg.dn = talloc_asprintf(mem_ctx, value=%s,%s, name, kd-dn); + msg-dn = talloc_asprintf(mem_ctx, value=%s,%s, name, kd-dn); - ldb_msg_add_string(ctx, msg, value, talloc_strdup(mem_ctx, name)); - val.length = len; - val.data = data; - ldb_msg_add_value(ctx, msg, data, val); - - type_s = talloc_asprintf(mem_ctx, %u, type); - ldb_msg_add_string(ctx, msg, type, type_s); - - ret = ldb_add(ctx, msg); + ret = ldb_add(ctx, msg); if (ret 0) { - ret = ldb_modify(ctx, msg); + ret =
svn commit: samba r4299 - in branches/SAMBA_4_0/source: . lib/registry lib/registry/common
Author: jelmer Date: 2004-12-21 00:31:18 + (Tue, 21 Dec 2004) New Revision: 4299 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4299 Log: Store REG_SZ, REG_EXPAND_SZ and REG_DWORD values in human-readable (and human-editable) format in the ldb registry backend. Modified: branches/SAMBA_4_0/source/lib/registry/common/reg_util.c branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c branches/SAMBA_4_0/source/registry.ldif Changeset: Modified: branches/SAMBA_4_0/source/lib/registry/common/reg_util.c === --- branches/SAMBA_4_0/source/lib/registry/common/reg_util.c2004-12-21 00:01:02 UTC (rev 4298) +++ branches/SAMBA_4_0/source/lib/registry/common/reg_util.c2004-12-21 00:31:18 UTC (rev 4299) @@ -124,7 +124,7 @@ case REG_DWORD: (*value)-data_len = sizeof(uint32); (*value)-data_blk = talloc_p(mem_ctx, uint32); - *((uint32 *)(*value)-data_blk) = atol(data_str); + *((uint32 *)(*value)-data_blk) = strtol(data_str, NULL, 0); break; case REG_NONE: Modified: branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c === --- branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c2004-12-21 00:01:02 UTC (rev 4298) +++ branches/SAMBA_4_0/source/lib/registry/reg_backend_ldb.c2004-12-21 00:31:18 UTC (rev 4299) @@ -42,8 +42,25 @@ *name = talloc_strdup(mem_ctx, ldb_msg_find_string(msg, value, NULL)); *type = ldb_msg_find_uint(msg, type, 0); val = ldb_msg_find_ldb_val(msg, data); - *data = talloc_memdup(mem_ctx, val-data, val-length); - *len = val-length; + + switch (*type) + { + case REG_SZ: + case REG_EXPAND_SZ: + *len = convert_string_talloc(mem_ctx, CH_UTF8, CH_UTF16, val-data, val-length, data); + break; + + case REG_DWORD_LE: + *len = 4; + *data = talloc_p(mem_ctx, uint32); + SIVAL(*data, 0, strtol(val-data, NULL, 0)); + break; + + default: + *data = talloc_memdup(mem_ctx, val-data, val-length); + *len = val-length; + break; + } } static struct ldb_message *reg_ldb_pack_value(struct ldb_context *ctx, TALLOC_CTX *mem_ctx, const char *name, uint32 type, void *data, int len) @@ -53,10 +70,23 @@ char *type_s; ldb_msg_add_string(ctx, msg, value, talloc_strdup(mem_ctx, name)); - val.length = len; - val.data = data; - ldb_msg_add_value(ctx, msg, data, val); + switch (type) { + case REG_SZ: + case REG_EXPAND_SZ: + val.length = convert_string_talloc(mem_ctx, CH_UTF16, CH_UTF8, data, len, val.data); + ldb_msg_add_value(ctx, msg, data, val); + break; + case REG_DWORD_LE: + ldb_msg_add_string(ctx, msg, data, talloc_asprintf(mem_ctx, 0x%x, IVAL(data, 0))); + break; + default: + val.length = len; + val.data = data; + ldb_msg_add_value(ctx, msg, data, val); + } + + type_s = talloc_asprintf(mem_ctx, %u, type); ldb_msg_add_string(ctx, msg, type, type_s); Modified: branches/SAMBA_4_0/source/registry.ldif === --- branches/SAMBA_4_0/source/registry.ldif 2004-12-21 00:01:02 UTC (rev 4298) +++ branches/SAMBA_4_0/source/registry.ldif 2004-12-21 00:31:18 UTC (rev 4299) @@ -6,7 +6,7 @@ dn: value=ProductType,key=productoptions,key=control,key=currentcontrolset,key=system,hive= value: ProductType -data:: VwBpAG4ATgBUAA= +data: WinNT type: 1 dn: key=productoptions,key=control,key=currentcontrolset,key=system,hive=
svn commit: samba r4300 - in trunk/source/smbd: .
Author: jra Date: 2004-12-21 01:04:04 + (Tue, 21 Dec 2004) New Revision: 4300 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4300 Log: One more *alloc - SMB_MALLOC (not compiled by default). Jeremy. Modified: trunk/source/smbd/quotas.c Changeset: Modified: trunk/source/smbd/quotas.c === --- trunk/source/smbd/quotas.c 2004-12-21 00:31:18 UTC (rev 4299) +++ trunk/source/smbd/quotas.c 2004-12-21 01:04:04 UTC (rev 4300) @@ -471,7 +471,7 @@ len=strcspn(mnttype, :); pathname=strstr(mnttype, :); - cutstr = (char *) malloc(len+1); + cutstr = (char *) SMB_MALLOC(len+1); if (!cutstr) return False; @@ -1000,7 +1000,7 @@ len=strcspn(mnttype, :); pathname=strstr(mnttype, :); - cutstr = (char *) malloc(len+1); + cutstr = (char *) SMB_MALLOC(len+1); if (!cutstr) return False;
svn commit: samba r4301 - in branches/SAMBA_3_0/source/smbd: .
Author: jra Date: 2004-12-21 01:04:11 + (Tue, 21 Dec 2004) New Revision: 4301 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4301 Log: One more *alloc - SMB_MALLOC (not compiled by default). Jeremy. Modified: branches/SAMBA_3_0/source/smbd/quotas.c Changeset: Modified: branches/SAMBA_3_0/source/smbd/quotas.c === --- branches/SAMBA_3_0/source/smbd/quotas.c 2004-12-21 01:04:04 UTC (rev 4300) +++ branches/SAMBA_3_0/source/smbd/quotas.c 2004-12-21 01:04:11 UTC (rev 4301) @@ -471,7 +471,7 @@ len=strcspn(mnttype, :); pathname=strstr(mnttype, :); - cutstr = (char *) malloc(len+1); + cutstr = (char *) SMB_MALLOC(len+1); if (!cutstr) return False; @@ -1000,7 +1000,7 @@ len=strcspn(mnttype, :); pathname=strstr(mnttype, :); - cutstr = (char *) malloc(len+1); + cutstr = (char *) SMB_MALLOC(len+1); if (!cutstr) return False;
Re: svn commit: samba r4289 - branches/SAMBA_3_0/source/lib trunk/source/lib
On Mon, Dec 20, 2004 at 06:42:59PM +, [EMAIL PROTECTED] wrote: This fixes a deadlock-situation when ldapsam is used with the ldapi interface: getpeername won't fail while trying to detect dead I think a failing getpeername just *will* fail as an indication of a unix domain socket whose other end has disconnected. Anybody out here who knows the standard way to detect a socket who is not connected anymore just because the other end has closed the connection? Volker
svn commit: samba r4302 - in branches/SAMBA_4_0/source/gtk: common tools
Author: tridge Date: 2004-12-21 03:28:26 + (Tue, 21 Dec 2004) New Revision: 4302 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4302 Log: fixed all of the annoying gtk warnings. The code all seems to still work, but given my lack of gtk experience, there are no guarantees. Modified: branches/SAMBA_4_0/source/gtk/common/gtk-smb.c branches/SAMBA_4_0/source/gtk/common/select.c branches/SAMBA_4_0/source/gtk/common/select.h branches/SAMBA_4_0/source/gtk/tools/gepdump.c branches/SAMBA_4_0/source/gtk/tools/gregedit.c branches/SAMBA_4_0/source/gtk/tools/gwcrontab.c branches/SAMBA_4_0/source/gtk/tools/gwsam_user.c Changeset: Modified: branches/SAMBA_4_0/source/gtk/common/gtk-smb.c === --- branches/SAMBA_4_0/source/gtk/common/gtk-smb.c 2004-12-21 01:04:11 UTC (rev 4301) +++ branches/SAMBA_4_0/source/gtk/common/gtk-smb.c 2004-12-21 03:28:26 UTC (rev 4302) @@ -289,7 +289,7 @@ GtkWidget *gtk_rpc_binding_dialog_new (BOOL nocredentials, struct sam_pipe *sam_pipe) { - GtkRpcBindingDialog *d = GTK_RPC_BINDING_DIALOG ( gtk_type_new (gtk_rpc_binding_dialog_get_type ())); + GtkRpcBindingDialog *d = GTK_RPC_BINDING_DIALOG ( g_object_new (gtk_rpc_binding_dialog_get_type (), NULL)); if (nocredentials) { gtk_widget_hide_all(d-frame_credentials); } Modified: branches/SAMBA_4_0/source/gtk/common/select.c === --- branches/SAMBA_4_0/source/gtk/common/select.c 2004-12-21 01:04:11 UTC (rev 4301) +++ branches/SAMBA_4_0/source/gtk/common/select.c 2004-12-21 03:28:26 UTC (rev 4302) @@ -123,7 +123,7 @@ GtkWidget *gtk_select_domain_dialog_new (struct dcerpc_pipe *sam_pipe) { - GtkSelectDomainDialog *d = gtk_type_new (gtk_select_domain_dialog_get_type ()); + GtkSelectDomainDialog *d = g_object_new(gtk_select_domain_dialog_get_type (), NULL); NTSTATUS status; struct samr_EnumDomains r; struct samr_Connect cr; @@ -258,5 +258,5 @@ GtkWidget *gtk_select_host_dialog_new (struct sam_pipe *sam_pipe, BOOL nocredentials) { -return GTK_WIDGET ( gtk_type_new (gtk_select_host_dialog_get_type ())); +return GTK_WIDGET ( g_object_new (gtk_select_host_dialog_get_type (), NULL )); } Modified: branches/SAMBA_4_0/source/gtk/common/select.h === --- branches/SAMBA_4_0/source/gtk/common/select.h 2004-12-21 01:04:11 UTC (rev 4301) +++ branches/SAMBA_4_0/source/gtk/common/select.h 2004-12-21 03:28:26 UTC (rev 4302) @@ -24,6 +24,8 @@ #ifdef HAVE_GTK +#define GTK_DISABLE_DEPRECATED + #include gtk/gtk.h typedef struct _GtkSelectDomainDialog GtkSelectDomainDialog; Modified: branches/SAMBA_4_0/source/gtk/tools/gepdump.c === --- branches/SAMBA_4_0/source/gtk/tools/gepdump.c 2004-12-21 01:04:11 UTC (rev 4301) +++ branches/SAMBA_4_0/source/gtk/tools/gepdump.c 2004-12-21 03:28:26 UTC (rev 4302) @@ -359,7 +359,7 @@ gtk_tree_view_append_column(GTK_TREE_VIEW(tree_eps), curcol); - store_eps = gtk_tree_store_new(3, GTK_TYPE_STRING, GTK_TYPE_STRING, GTK_TYPE_POINTER); + store_eps = gtk_tree_store_new(3, G_TYPE_STRING, G_TYPE_STRING, G_TYPE_POINTER); gtk_tree_view_set_model(GTK_TREE_VIEW(tree_eps), GTK_TREE_MODEL(store_eps)); g_object_unref(store_eps); Modified: branches/SAMBA_4_0/source/gtk/tools/gregedit.c === --- branches/SAMBA_4_0/source/gtk/tools/gregedit.c 2004-12-21 01:04:11 UTC (rev 4301) +++ branches/SAMBA_4_0/source/gtk/tools/gregedit.c 2004-12-21 03:28:26 UTC (rev 4302) @@ -580,18 +580,18 @@ open_nt4 = gtk_image_menu_item_new_with_mnemonic(Open _NT4 file); gtk_container_add (GTK_CONTAINER (menu_file_menu), open_nt4); - g_signal_connect ((gpointer) open_nt4, activate, - G_CALLBACK (on_open_file_activate), - (gpointer)nt4); + g_signal_connect(open_nt4, activate, +G_CALLBACK (on_open_file_activate), +discard_const_p(char, nt4)); } if(reg_has_backend(w95)) { open_w95 = gtk_image_menu_item_new_with_mnemonic(Open Win_9x file); gtk_container_add (GTK_CONTAINER (menu_file_menu), open_w95); - g_signal_connect ((gpointer) open_w95,
svn commit: samba r4303 - in branches/SAMBA_4_0/source/client: .
Author: tridge Date: 2004-12-21 03:29:09 + (Tue, 21 Dec 2004) New Revision: 4303 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4303 Log: a bit more consistent help on privileges commands in smbclient Modified: branches/SAMBA_4_0/source/client/client.c Changeset: Modified: branches/SAMBA_4_0/source/client/client.c === --- branches/SAMBA_4_0/source/client/client.c 2004-12-21 03:28:26 UTC (rev 4302) +++ branches/SAMBA_4_0/source/client/client.c 2004-12-21 03:29:09 UTC (rev 4303) @@ -1847,7 +1847,7 @@ struct dom_sid *sid; if (!next_token(cmd_ptr,buf,NULL,sizeof(buf))) { - d_printf(lookup name|sid\n); + d_printf(lookup sid|name\n); talloc_free(mem_ctx); return 1; } @@ -1939,7 +1939,7 @@ struct lsa_RightSet rights; if (!next_token(cmd_ptr,buf,NULL,sizeof(buf))) { - d_printf(addprivileges sid privilege...\n); + d_printf(addprivileges sid|name privilege...\n); talloc_free(mem_ctx); return 1; } @@ -1989,7 +1989,7 @@ struct lsa_RightSet rights; if (!next_token(cmd_ptr,buf,NULL,sizeof(buf))) { - d_printf(delprivileges sid privilege...\n); + d_printf(delprivileges sid|name privilege...\n); talloc_free(mem_ctx); return 1; } @@ -2577,7 +2577,7 @@ } commands[] = { {?,cmd_help,[command] give help on a command,{COMPL_NONE,COMPL_NONE}}, - {addprivileges,cmd_addprivileges,sid|user privilege... add privileges for a user,{COMPL_NONE,COMPL_NONE}}, + {addprivileges,cmd_addprivileges,sid|name privilege... add privileges for a user,{COMPL_NONE,COMPL_NONE}}, {altname,cmd_altname,file show alt name,{COMPL_NONE,COMPL_NONE}}, {acl,cmd_acl,file show file ACL,{COMPL_NONE,COMPL_NONE}}, {allinfo,cmd_allinfo,file show all possible info about a file,{COMPL_NONE,COMPL_NONE}}, @@ -2587,7 +2587,7 @@ {chmod,cmd_chmod,src mode chmod a file using UNIX permission,{COMPL_REMOTE,COMPL_REMOTE}}, {chown,cmd_chown,src uid gid chown a file using UNIX uids and gids,{COMPL_REMOTE,COMPL_REMOTE}}, {del,cmd_del,mask delete all matching files,{COMPL_REMOTE,COMPL_NONE}}, - {delprivileges,cmd_delprivileges,sid|user privilege... remove privileges for a user,{COMPL_NONE,COMPL_NONE}}, + {delprivileges,cmd_delprivileges,sid|name privilege... remove privileges for a user,{COMPL_NONE,COMPL_NONE}}, {deltree,cmd_deltree,dir delete a whole directory tree,{COMPL_REMOTE,COMPL_NONE}}, {dir,cmd_dir,mask list the contents of the current directory,{COMPL_REMOTE,COMPL_NONE}}, {du,cmd_du,mask computes the total size of the current directory,{COMPL_REMOTE,COMPL_NONE}}, @@ -2597,7 +2597,7 @@ {history,cmd_history,displays the command history,{COMPL_NONE,COMPL_NONE}}, {lcd,cmd_lcd,[directory] change/report the local current working directory,{COMPL_LOCAL,COMPL_NONE}}, {link,cmd_link,src dest create a UNIX hard link,{COMPL_REMOTE,COMPL_REMOTE}}, - {lookup,cmd_lookup,name|sid show SID for name or name for SID,{COMPL_NONE,COMPL_NONE}}, + {lookup,cmd_lookup,sid|name show SID for name or name for SID,{COMPL_NONE,COMPL_NONE}}, {lowercase,cmd_lowercase,toggle lowercasing of filenames for get,{COMPL_NONE,COMPL_NONE}}, {ls,cmd_dir,mask list the contents of the current directory,{COMPL_REMOTE,COMPL_NONE}}, {mask,cmd_select,mask mask all filenames against this,{COMPL_REMOTE,COMPL_NONE}},
svn commit: samba r4305 - in branches/SAMBA_3_0/source/lib: .
Author: jra Date: 2004-12-21 04:34:14 + (Tue, 21 Dec 2004) New Revision: 4305 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4305 Log: Fix from Albert Chin ([EMAIL PROTECTED]) to fix the earlier malloc changes. Jeremy. Modified: branches/SAMBA_3_0/source/lib/sysacls.c branches/SAMBA_3_0/source/lib/util_smbd.c Changeset: Modified: branches/SAMBA_3_0/source/lib/sysacls.c === --- branches/SAMBA_3_0/source/lib/sysacls.c 2004-12-21 04:34:07 UTC (rev 4304) +++ branches/SAMBA_3_0/source/lib/sysacls.c 2004-12-21 04:34:14 UTC (rev 4305) @@ -722,7 +722,7 @@ * acl[] array, this actually allocates an ACL with room * for (count+1) entries */ - if ((a = SMB_MALLOC(sizeof(*a) + count * sizeof(struct acl))) == NULL) { + if ((a = SMB_MALLOC(sizeof(struct SMB_ACL_T) + count * sizeof(struct acl))) == NULL) { errno = ENOMEM; return NULL; } @@ -1353,7 +1353,7 @@ * acl[] array, this actually allocates an ACL with room * for (count+1) entries */ - if ((a = SMB_MALLOC(sizeof(*a) + count * sizeof(struct acl))) == NULL) { + if ((a = SMB_MALLOC(sizeof(struct SMB_ACL_T) + count * sizeof(struct acl))) == NULL) { errno = ENOMEM; return NULL; } @@ -1982,7 +1982,7 @@ { SMB_ACL_T a; - if ((a = SMB_MALLOC_P(SMB_ACL_T)) == NULL) { + if ((a = SMB_MALLOC_P(struct SMB_ACL_T)) == NULL) { errno = ENOMEM; return NULL; } @@ -1999,7 +1999,7 @@ { SMB_ACL_T a; - if ((a = SMB_MALLOC_P(SMB_ACL_T)) == NULL) { + if ((a = SMB_MALLOC_P(struct SMB_ACL_T)) == NULL) { errno = ENOMEM; return NULL; } @@ -2056,7 +2056,7 @@ return NULL; } - if ((a = SMB_MALLOC_P(struct acl)) == NULL) { + if ((a = SMB_MALLOC(sizeof(struct SMB_ACL_T) + sizeof(struct acl))) == NULL) { errno = ENOMEM; return NULL; } Modified: branches/SAMBA_3_0/source/lib/util_smbd.c === --- branches/SAMBA_3_0/source/lib/util_smbd.c 2004-12-21 04:34:07 UTC (rev 4304) +++ branches/SAMBA_3_0/source/lib/util_smbd.c 2004-12-21 04:34:14 UTC (rev 4305) @@ -54,7 +54,7 @@ gid_t *groups_tmp; - groups_tmp = SMB_REALLOC(temp_groups, gid_t, max_grp); + groups_tmp = SMB_REALLOC_ARRAY(temp_groups, gid_t, max_grp); if (!groups_tmp) { SAFE_FREE(temp_groups);
svn commit: samba r4306 - in branches/SAMBA_3_0/source: lib printing
Author: jra Date: 2004-12-21 07:08:11 + (Tue, 21 Dec 2004) New Revision: 4306 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4306 Log: Couple more MALLOC fixes from albert chin ([EMAIL PROTECTED]). Jeremy. Modified: branches/SAMBA_3_0/source/lib/util_smbd.c branches/SAMBA_3_0/source/printing/print_svid.c Changeset: Modified: branches/SAMBA_3_0/source/lib/util_smbd.c === --- branches/SAMBA_3_0/source/lib/util_smbd.c 2004-12-21 04:34:14 UTC (rev 4305) +++ branches/SAMBA_3_0/source/lib/util_smbd.c 2004-12-21 07:08:11 UTC (rev 4306) @@ -45,7 +45,7 @@ int i; max_grp = groups_max(); - temp_groups = SMB_MALLOC_P(gid_t, max_grp); + temp_groups = SMB_MALLOC_ARRAY(gid_t, max_grp); if (! temp_groups) { return False; } Modified: branches/SAMBA_3_0/source/printing/print_svid.c === --- branches/SAMBA_3_0/source/printing/print_svid.c 2004-12-21 04:34:14 UTC (rev 4305) +++ branches/SAMBA_3_0/source/printing/print_svid.c 2004-12-21 07:08:11 UTC (rev 4306) @@ -88,7 +88,7 @@ *tmp = '\0'; /* add it to the cache */ - if ((ptmp = malloc(sizeof (*ptmp))) != NULL) { + if ((ptmp = SMB_MALLOC_P(printer_t)) != NULL) { ZERO_STRUCTP(ptmp); if((ptmp-name = SMB_STRDUP(name)) == NULL) DEBUG(0,(populate_printers: malloc fail in strdup !\n));
svn commit: samba r4307 - in trunk/source: lib printing
Author: jra Date: 2004-12-21 07:08:16 + (Tue, 21 Dec 2004) New Revision: 4307 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4307 Log: Couple more MALLOC fixes from albert chin ([EMAIL PROTECTED]). Jeremy. Modified: trunk/source/lib/util_smbd.c trunk/source/printing/print_svid.c Changeset: Modified: trunk/source/lib/util_smbd.c === --- trunk/source/lib/util_smbd.c2004-12-21 07:08:11 UTC (rev 4306) +++ trunk/source/lib/util_smbd.c2004-12-21 07:08:16 UTC (rev 4307) @@ -45,7 +45,7 @@ int i; max_grp = groups_max(); - temp_groups = SMB_MALLOC_P(gid_t, max_grp); + temp_groups = SMB_MALLOC_ARRAY(gid_t, max_grp); if (! temp_groups) { return False; } Modified: trunk/source/printing/print_svid.c === --- trunk/source/printing/print_svid.c 2004-12-21 07:08:11 UTC (rev 4306) +++ trunk/source/printing/print_svid.c 2004-12-21 07:08:16 UTC (rev 4307) @@ -88,7 +88,7 @@ *tmp = '\0'; /* add it to the cache */ - if ((ptmp = malloc(sizeof (*ptmp))) != NULL) { + if ((ptmp = SMB_MALLOC_P(printer_t)) != NULL) { ZERO_STRUCTP(ptmp); if((ptmp-name = SMB_STRDUP(name)) == NULL) DEBUG(0,(populate_printers: malloc fail in strdup !\n));