Re: [Samba] Help: smbd & nmbd normal states

2006-08-12 Thread LouArnold

This problem has been documented and solved. See "Fedora core 5 and Samba"
dated July 27, 2006.
In essence the problem is an incompatibility between "cups" and samba
versions.
Apparently the following versions work:
samba-client-3.0.23a-1.fc5.1
samba-3.0.23a-1.fc5.1
samba-common-3.0.23a-1.fc5.1

cups-1.2.2-1.1
cups-libs-1.2.2-1.1
Many thanks,
Lou Arnold


LouArnold wrote:
> 
> I have just installed Fedora Core 5 with the Samba server. However only
> the nmbd daemon is running. I thought both smbd and nmbd should be
> running. 
> On trying to start smbd with:
>>/sbin/service smb start
> the result is "starting smbd [FAILED]"
> Stopping smbd of course has no effect, and starting or restarting nmbd
> works just fine.
> 
> I'm stumped! I turned SELinux and the firewall off. I stopped sendmail. I
> configured a share, and set up a user for it. I can't think of what else
> might be a problem. This worked before on a previous life of the system
> under FC4.
> 

-- 
View this message in context: 
http://www.nabble.com/Help%3A-smbd---nmbd-normal-states-tf2082053.html#a5782040
Sent from the Samba - General forum at Nabble.com.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba

2006-08-12 Thread shear khan

I would like to get some help with Windbind please

--
Kind Regards,

Shear Khan

Mana Island Resort Fiji

Ph: 6796661455

Fax:6796640021
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] XP clients disconnected during trasnfer of larger files tothe samba server

2006-08-12 Thread Derrick MacPherson
>   wins support = true
>name resolve order = bcast hosts
> which says run support for wins, but don't use it to resolve netbios
names.  Good > to use it and point the secondary server at it plus all
your windows machines.  
> Right now, you only resolve netbios on the local subnet plus DNS the
same 
> as netbios.

Most of the non-default settings come from extended googling and come
back with possible suggestions to other issues I've seen, such as:

> You also have this
>use spnego = no
>  From the doco:
> Unless further issues are discovered with our SPNEGO implementation,
there is 
> no reason this should ever be disabled. Have you had an issue?  If
not, 
> delete it.

Ya we were. We were getting about 10-15 seconds of 'delay' when clicking
on a share, and this seem to fix it. Is this a smoking gun of some
problem? I had googled some errors in the logs we were seeing and this
was suggested to fix that problem and it did.

> Another override:
>oplocks = no
> Use this to avoid specific issues with specific shares or filetypes.

Again from trying to see what could help our problem

> Last, socket endpoint not connected is frequently a hardware issue. I
don't know > the protocol inside out, but it seems the smb protocol is
less forgiving 
> than ftp.  Switch and interface card issues during saturation become
an 
> issue with smb.

Hmm. OK. Well these machines have onboard nics (Tigon3
[partno(BCM95721)), and a quad port Intel nic, though they were not
detected on a duplicate machine by freebsd so we were using the onboard
nics, I'll get that switched to the quad intels, see if that helps.

Thanks Doug, much appreciated.


Regards, Doug


> 
> -Original Message-
> From: Derrick MacPherson
> Sent: Friday, August 11, 2006 1:23 AM
> To: Derrick MacPherson; samba@lists.samba.org
> Subject: RE: [Samba] XP clients disconnected during trasnfer of larger
> files tothe samba server
> 
> 
> Any suggestions to look into, or more debug info required?
> 
> The box is running centos 4.3 final, up to date with the latest 
> versions of CentOS updates,, it's running something like 3.0.10 or .11

> - can't recall. 1:22 am. Off to bed...
> 
> Thanks.
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On 
> Behalf Of Derrick MacPherson
> Sent: Thursday, August 10, 2006 5:47 PM
> To: samba@lists.samba.org
> Subject: [Samba] XP clients disconnected during trasnfer of larger 
> files tothe samba server
> 
> 
> i'm having an issue when transferring large files to the samba servers

> from an xp client - files about 1GB or larger. about 70% into the 
> transfer i get a network share no longer exists error and the transfer

> fails. I can pull down from the server fine with no issues. The XP 
> machines are authenticating from a different Samba server though the 
> problem is with that machine as well. Error and config posted below: 
> (FYI - transfering same files and such work fine via FTP)
> 
> My secondary server config:
>  netbios name = 3Dsrv
>  workgroup = VFX
>  security = user
>  server string = %h server (3D FileServer)
>  password server = 192.168.0.210
>  username map = /etc/samba/smbusers
>  idmap uid = 15000-2
>  idmap gid = 15000-2
> name resolve order =  bcast hosts
> template primary group = "Domain Users"
> template shell = /bin/bash
> winbind separator = +
> socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=16384 \
> SO_RCVBUF=16384
> oplocks = no
> 
> smb log - i think this is relevant, though not sure:
> 
> 2006/08/10 11:53:56, 0] lib/util_sock.c:get_peer_addr(1000) 
> getpeername failed. Error was Transport endpoint is not
> connected 
> [2006/08/10 11:53:56, 0] lib/util_sock.c:get_peer_addr(1000) 
> getpeername failed. Error was Transport endpoint is not
> connected 
> [2006/08/10 11:53:56, 0]
lib/:util_sock.c:write_socket_data(430) 
> write_socket_data: write failure. Error = Connection reset by
> peer 
> [2006/08/10 11:53:56, 0] lib/util_sock.c:write_socket(455) 
> write_socket: Error writing 4 bytes to socket 24: ERRNO =
> Connection
> reset by peer
> 
> Primary server config:
> 
> [global]
> name resolve order = bcast hosts
> passwd chat debug = yes
> idmap gid = 15000-2
> passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew
> \sUNIX\spassword:* %n\n
> passwd program = /usr/bin/passwd %u
> netbios name = 2DSRV
> printing = CUPS
> idmap uid = 15000-2
> logon script = logon.bat
> workgroup = VFX
> os level = 128
> printcap name = CUPS
> security = user
> add machine script = /usr/sbin/useradd -s /bin/false/ -d 
> /var/lib/nobody %u
>

[Samba] Re: Samba log hell

2006-08-12 Thread reader
Tom Diehl <[EMAIL PROTECTED]> writes:

>> So is the only file I need to download samba-3.0.23b.tar.gz?
>
> I am pretty sure he was talking about the patches that were created after
> 23b was released. Therefore you need both. It is easy enough to tell though.
> If a patch is already installed when you try to apply it patch will complain.

Hey Tom, long time no talkee.  Thanks.  Afer all these years back at
redhat 3X and 4X circa 1996-7 you're still giving me guidance.  Says
alot for your patience but not much for my learning skills.

Once again it was a dopey question. Gerald was very clear.  When I
looked back I saw it was totally clear what to do.

And for the record the patch applied painlessly.  Don't have results
of the install to post yet but will soon.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] XP clients disconnected during trasnfer of larger files tothe samba server

2006-08-12 Thread Doug VanLeuven

Derrick MacPherson wrote:

What am I missing? Is ther esome more info I can add to get someone to
respond? Is there a better place to be getting help?


No better place.
Mostly people only respond when your problem is similar to
a problem they themselves have had.  I regularly transfer
2 Gig files around and have since forever it seems.
But I'll try and give some pointers based on my experience.

Firstoff, try and use the defaults unless there is a strong
motivating reason to override it.  I review the config and
periodically experiment with going back to the defaults on
the few items I override.  The samba team are the experts and
they make the defaults work the best overall.

You have these two items:
  wins support = true
  name resolve order = bcast hosts
which says run support for wins, but don't use it to resolve
netbios names.  Good to use it and point the secondary server at it
plus all your windows machines.  Right now, you only
resolve netbios on the local subnet plus DNS the same as
netbios.

You also have this
  use spnego = no
From the doco:
Unless further issues are discovered with our SPNEGO implementation,
there is no reason this should ever be disabled.
Have you had an issue?  If not, delete it.

Another override:
  oplocks = no
Use this to avoid specific issues with specific shares or filetypes.

Last, socket endpoint not connected is frequently a hardware issue.
I don't know the protocol inside out, but it seems the
smb protocol is less forgiving than ftp.  Switch and interface
card issues during saturation become an issue with smb.

Regards, Doug




-Original Message-
From: Derrick MacPherson 
Sent: Friday, August 11, 2006 1:23 AM

To: Derrick MacPherson; samba@lists.samba.org
Subject: RE: [Samba] XP clients disconnected during trasnfer of larger
files tothe samba server


Any suggestions to look into, or more debug info required?

The box is running centos 4.3 final, up to date with the latest versions
of CentOS updates,, it's running something like 3.0.10 or .11 - can't
recall. 1:22 am. Off to bed... 


Thanks.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Derrick MacPherson
Sent: Thursday, August 10, 2006 5:47 PM
To: samba@lists.samba.org
Subject: [Samba] XP clients disconnected during trasnfer of larger files
tothe samba server


i'm having an issue when transferring large files to the samba servers
from an xp client - files about 1GB or larger. about 70% into the
transfer i get a network share no longer exists error and the transfer
fails. I can pull down from the server fine with no issues. The XP
machines are authenticating from a different Samba server though the
problem is with that machine as well. Error and config posted below:
(FYI - transfering same files and such work fine via FTP) 

My secondary server config:

 netbios name = 3Dsrv
 workgroup = VFX
 security = user
 server string = %h server (3D FileServer)
 password server = 192.168.0.210
 username map = /etc/samba/smbusers
 idmap uid = 15000-2
 idmap gid = 15000-2
name resolve order =  bcast hosts
template primary group = "Domain Users"
template shell = /bin/bash
winbind separator = +
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=16384 \
SO_RCVBUF=16384
oplocks = no

smb log - i think this is relevant, though not sure:

2006/08/10 11:53:56, 0] lib/util_sock.c:get_peer_addr(1000) 
getpeername failed. Error was Transport endpoint is not
connected 
[2006/08/10 11:53:56, 0] lib/util_sock.c:get_peer_addr(1000) 
getpeername failed. Error was Transport endpoint is not
connected 
[2006/08/10 11:53:56, 0] lib/:util_sock.c:write_socket_data(430) 
write_socket_data: write failure. Error = Connection reset by
peer 
[2006/08/10 11:53:56, 0] lib/util_sock.c:write_socket(455) 
write_socket: Error writing 4 bytes to socket 24: ERRNO =

Connection
reset by peer 

Primary server config:


[global]
name resolve order = bcast hosts
passwd chat debug = yes
idmap gid = 15000-2
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew
\sUNIX\spassword:* %n\n
passwd program = /usr/bin/passwd %u
netbios name = 2DSRV
printing = CUPS
idmap uid = 15000-2
logon script = logon.bat
workgroup = VFX
os level = 128
printcap name = CUPS
security = user
add machine script = /usr/sbin/useradd -s /bin/false/ -d
/var/lib/nobody %u
delete user script = /usr/sbin/userdel -r %u
log level = 4
add group script = /usr/sbin/groupadd %g
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192
SO_RCVBUF=8192
delete group script = /usr/sbin/groupdel %g
   

Re: [Samba] 3.0.20 -> 3.0.23 SID/group error?? Won't connect.

2006-08-12 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Franz Sirl wrote:

> v2 of the patch still works fine, but the list 
> of working syntaxes changed. These work:
> 
> valid users = +users
> valid users = +"Unix Group\users"
> valid users = S-1-22-2-100
> 
> These didn't work:
> 
> valid users = +HOSTNAME\users
> valid users = +BUILTIN\users
> valid users = S-1-5-21-1540046517-542637695-1028676802-1201

This is to be expected.  All unmapped users will
possess a SID in the S-1-22-1 domain and all unmapped
groups will be in the S-1-22-2 domain.

HOSTNAME\users would work for a mapped group.
BUILTIN\users would work if you have local builtin group
  called users (e.g. "net sam createbuiltin Users")

> And it's not that I expect all of these to work, it's 
> more that I tried about any combo that I saw in the
> logs :-). Though I believe that the +"Unix Group\users"
> is nice to have in case I switch to PDC, cause
> personally I like to be explicit in configuration files.

There problem is that if you create a group map entry
for HOSTNAME\users, "unix Group\users" will resolve to
a different SID and hence anyone actually in the users
group from /etc/group will have the HOSTNAME\users SID in
their token.

At this time we are *not* recommending that anyone qualify
names with HOSTNAME or "Unix XXX".  Samba will handle
the steps necessary to resolve the name, giving precedence
to mapped users and groups over unmapped ones.  You only
have to qualify domain names and groups in the BUILTIN domain.

I've got a long mail that explains we made this change
and we had a hard time with 3.0.23.  I'll try to send
it out next week.







cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
"What man is a man who does not make the world better?"  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFE3iKpIR7qMdg1EfYRAtvGAKCCdblzwxS5qv2iL4Dplt9HTEwq6QCgsm6l
jVl0lWeAB0JQtsUreRW0xzs=
=63O3
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Install Applications via Logon Scripts?

2006-08-12 Thread Asier Baranguan
El Miércoles, 9 de Agosto de 2006 02:55, Aaron Souza escribió:

> Is there a way to install a windows (XP) application via a logon script?
> I'm not sure how to do it because most applications will require

Perhaps this would help:

http://wpkg.org/

Installs applications and lots of things with the cscript engine :)
-- 
Asier.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Documentation for Idmap backend?

2006-08-12 Thread Chun Kit Hui

Dear all,

I want to ask if there are any documentation on the behavior of

idmap backend = ad
and
winbind nss info = template | sfu | rfc2307

I cannot find much information on samba HOWTO/Book/etc.
I want to know if these options is useful in solving the
SID maps to existing UID problem I posted earlier.

Cheers,
Jacky Hui
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Install Applications via Logon Scripts?

2006-08-12 Thread Chun Kit Hui

Dear,

IMHO, this is not really related to samba. Some applications comes with a
silent mode for installation, you may try to figure it out whether the
applications
you want to install support the use of silent mode.

Under Windows 2k/2003 domain, GPO does help to install software but the
real work is largely being down on the client side by the MSI service
component.

Just my 2 cents.

Cheers,
Jacky Hui


On 8/9/06, Aaron Souza <[EMAIL PROTECTED]> wrote:


Is there a way to install a windows (XP) application via a logon script?
I'm not sure how to do it because most applications will require
interaction (next,next,next and etc). Has anyone figured out a way to
'push out' programs via logon script or something else relating to a Samba
domain?

Thanks,

Aaron


-
Disclaimer

If you have received this email in error, please delete it and do not
divulge this information in any way.

Troy C.C.S.D. 30-C cannot accept responsibility for any loss or
damage arising from the transmission to the recipient or from
the recipient's use of this email or its attachments.

Any opinions presented in this email are solely those of the author
and do not necessarily represent those of Troy.  The person who sent
this email is personally responsible for any damages or other liability
arising from its contents and the distribution of that content to others.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Install Applications via Logon Scripts?

2006-08-12 Thread Aaron Souza
Is there a way to install a windows (XP) application via a logon script?
I'm not sure how to do it because most applications will require
interaction (next,next,next and etc). Has anyone figured out a way to
'push out' programs via logon script or something else relating to a Samba
domain?

Thanks,

Aaron


-
Disclaimer

If you have received this email in error, please delete it and do not  
divulge this information in any way.

Troy C.C.S.D. 30-C cannot accept responsibility for any loss or 
damage arising from the transmission to the recipient or from 
the recipient's use of this email or its attachments.

Any opinions presented in this email are solely those of the author
and do not necessarily represent those of Troy.  The person who sent
this email is personally responsible for any damages or other liability 
arising from its contents and the distribution of that content to others.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Samba log hell

2006-08-12 Thread Tom Diehl

On Sat, 12 Aug 2006, [EMAIL PROTECTED] wrote:


"Gerald (Jerry) Carter" <[EMAIL PROTECTED]> writes:


[EMAIL PROTECTED] wrote:

"Gerald (Jerry) Carter" <[EMAIL PROTECTED]> writes:


It seems something has suddenly chagned whereby I
cannot access any linux shares from windows.

Yup.  You need 3.0.23b plus the patch I posted today.
You're using an smbpasswd file right ?


Yes,  Ok, working on it, but I don't understand why
this quit working suddenly.


I would suggest reviewing the archive for the list
over the past two weeks.


Changes in Sid behaviour recently introduced ... I guess.
Sorry to have bugged you when I could have just looked around a bit.


What do you think is going to change by doing this?


We fixed bugs that are probably affecting your installation.
If you don't want to to go the trouble of getting the
latest code, that's up to you.


It wasn't meant retorically.  It was a genuine question.
But I'll find out soon enough with my own build as suggested.

I'm still a little confused about something.  You said to install the
newest release and patches, but somewhere else it was said that the
patches are inside samba-3.0.23b.tar.gz.

So is the only file I need to download samba-3.0.23b.tar.gz?


I am pretty sure he was talking about the patches that were created after
23b was released. Therefore you need both. It is easy enough to tell though.
If a patch is already installed when you try to apply it patch will complain.

Hope this helps,

Tom
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Samba log hell

2006-08-12 Thread reader
"Gerald (Jerry) Carter" <[EMAIL PROTECTED]> writes:

> [EMAIL PROTECTED] wrote:
>> "Gerald (Jerry) Carter" <[EMAIL PROTECTED]> writes:
>> 
 It seems something has suddenly chagned whereby I 
 cannot access any linux shares from windows.
>>> Yup.  You need 3.0.23b plus the patch I posted today.
>>> You're using an smbpasswd file right ?
>> 
>> Yes,  Ok, working on it, but I don't understand why 
>> this quit working suddenly.
>
> I would suggest reviewing the archive for the list
> over the past two weeks.

Changes in Sid behaviour recently introduced ... I guess.
Sorry to have bugged you when I could have just looked around a bit.

>> What do you think is going to change by doing this?
>
> We fixed bugs that are probably affecting your installation.
> If you don't want to to go the trouble of getting the
> latest code, that's up to you.

It wasn't meant retorically.  It was a genuine question.
But I'll find out soon enough with my own build as suggested.

I'm still a little confused about something.  You said to install the
newest release and patches, but somewhere else it was said that the
patches are inside samba-3.0.23b.tar.gz. 

So is the only file I need to download samba-3.0.23b.tar.gz?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: LDAP+Samba only posixaccount possible?

2006-08-12 Thread Jamrock
"Juha-Matti Ung" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> Hi!Is it possible to get the samba authenticate a user and map to his
homedirectory only using posixaccount or are there some attributes that
windows absolutely require like in the samba-objectclasses?Any configuration
examples if this is possible.I have been experimenting with pam.d/samba
using pam_ldap.so module, but no success so far.Currently I have setup the
server so it can authenticate a ssh user from ldap, using posixaccount
attributes. and that works great.Thanks
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba


Not as far as I know.  Windows networking needs Windows specific
authentication information.  At the same time any user on a Linux box needs
Linux specific authentication (posix).

Samba essentially creates a Windows user and  a Linux user with the same
user ID.  The accounts are mapped to each other.

Some will argue that it is one account, but for all intents and purposes it
is two accounts.  The process is more obvious when you look at the creation
of Windows groups.  The Windows group maps to a Linux group.

When I set up my first domain controller, I did not use the smbldap add user
script.  I used standard Linux useradd commands.

When I added a user via User Manager for Domains, it created the Windows
information in the ldap directory and the Linux information in the
/etc/passwd file.  User authentication worked quite well.

When I started using the smbldap scripts, both the Windows info. and the
Linux info were stored in ldap.

Since the Windows user account is mapped to the Linux user account, any
security/access restrictions you place on the Linux account will apply to
the Windows account.  In other words, you can set user access to shares
using Linux and the Windows account will be restricted.

So to answer your question, if you only use posix values, you are missing
half of the equation.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Out Of office

2006-08-12 Thread eric . vannerum

Ik ben afwezig vanaf  29/07/2006 en ik ben niet eerder terug dan
23/08/2006.

Ik ben met verlof van 31 juli tot en met 22 augustus.
Voor dringende zaken kan je mailen naar [EMAIL PROTECTED]


-
DISCLAIMER :
De personeelsleden van het agentschap doen hun best om in e-mails
betrouwbare informatie te geven. Toch kan niemand rechten doen gelden op
basis van deze inhoud. Als in de e-mail een stellingname voorkomt, is
dat niet noodzakelijk het standpunt van het agentschap. Rechtsgeldige
beslissingen of officiele standpunten worden alleen per brief toegestuurd.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] 3.0.20 -> 3.0.23 SID/group error?? Won't connect.

2006-08-12 Thread Franz Sirl

Gerald (Jerry) Carter schrieb:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Franz Sirl wrote:

the patch fixes the valid users problem for me. Or, 
to come back to the list of different syntaxes,

these work:

   valid users = +users
   valid users = S-1-5-21-1540046517-542637695-1028676802-1201

These didn't work:

   valid users = +"Unix Group\users"
   valid users = +HOSTNAME\users
   valid users = +BUILTIN\users
   valid users = S-1-22-2-100


Please test the patch.  Supersedes the previous one.
Also available from http://www.samba.org/~jerry/patches/
It's semi-ok that syntax you list doesn't work.  You
should really only worry about +users for local group names.


Hi Jerry,

v2 of the patch still works fine, but the list of working syntaxes 
changed. These work:


valid users = +users
valid users = +"Unix Group\users"
valid users = S-1-22-2-100

These didn't work:

valid users = +HOSTNAME\users
valid users = +BUILTIN\users
valid users = S-1-5-21-1540046517-542637695-1028676802-1201

And it's not that I expect all of these to work, it's more that I tried 
about any combo that I saw in the logs :-). Though I believe that the 
+"Unix Group\users" is nice to have in case I switch to PDC, cause 
personally I like to be explicit in configuration files.


Thanks,
Franz.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Idmap: How to Map SID to existing UIDs?

2006-08-12 Thread Chun Kit Hui

Dear all,


I've got a question concerning winbind and idmap. I've been googling for
days and read through the official HOWTO but yet cannot find the answer.

My situation is as follow:

I have a UNIX infrastructure (including NFS) with all user information
stored in LDAP for distributed passwd/group/shadow using nsswitch. I also
have Windows 2003 AD (MYREALM) set up. I want to setup a samba DMS under the
realm MYREALM. Everything works fine.
However, I also want to allow the windows users to manipulate the ACLs of
the files on the samba share. This creates a problem. If I don't use
winbind, the ACEs on the files cannot contains any SIDs from the AD domain
(MYREALM). If I use winbind with tdb or LDAP backend, winbind will map the
SID to a new UID different from the existing UIDs for the UNIX user
accounts.

I want to ask how can I map SID to existing UIDs if the username is
identical between the Unix world and the AD world?

Any suggestions?? or Any pointers to documentation/HOWTO ?
Thanks x 10


Cheers,

Jacky Hui
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] XP clients disconnected during trasnfer of larger files tothe samba server

2006-08-12 Thread Henrik Zagerholm

Have you tried this with resent versions of samba?

I'm not an expert but I can't recall that I have had any problems  
with large files.


You could see if there is a bug filed on bugzilla.samba.org regarding  
this, ranging from the version of samba you are using to current and  
see if its fixed.


Otherwise file a new bug report.

Cheers, henrik

12 aug 2006 kl. 06:23 skrev Derrick MacPherson:


What am I missing? Is ther esome more info I can add to get someone to
respond? Is there a better place to be getting help?

-Original Message-
From: Derrick MacPherson
Sent: Friday, August 11, 2006 1:23 AM
To: Derrick MacPherson; samba@lists.samba.org
Subject: RE: [Samba] XP clients disconnected during trasnfer of larger
files tothe samba server


Any suggestions to look into, or more debug info required?

The box is running centos 4.3 final, up to date with the latest  
versions

of CentOS updates,, it's running something like 3.0.10 or .11 - can't
recall. 1:22 am. Off to bed...

Thanks.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Derrick MacPherson
Sent: Thursday, August 10, 2006 5:47 PM
To: samba@lists.samba.org
Subject: [Samba] XP clients disconnected during trasnfer of larger  
files

tothe samba server


i'm having an issue when transferring large files to the samba servers
from an xp client - files about 1GB or larger. about 70% into the
transfer i get a network share no longer exists error and the transfer
fails. I can pull down from the server fine with no issues. The XP
machines are authenticating from a different Samba server though the
problem is with that machine as well. Error and config posted below:
(FYI - transfering same files and such work fine via FTP)

My secondary server config:
 netbios name = 3Dsrv
 workgroup = VFX
 security = user
 server string = %h server (3D FileServer)
 password server = 192.168.0.210
 username map = /etc/samba/smbusers
 idmap uid = 15000-2
 idmap gid = 15000-2
name resolve order =  bcast hosts
template primary group = "Domain Users"
template shell = /bin/bash
winbind separator = +
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=16384 \
SO_RCVBUF=16384
oplocks = no

smb log - i think this is relevant, though not sure:

2006/08/10 11:53:56, 0] lib/util_sock.c:get_peer_addr(1000)
getpeername failed. Error was Transport endpoint is not
connected
[2006/08/10 11:53:56, 0] lib/util_sock.c:get_peer_addr(1000)
getpeername failed. Error was Transport endpoint is not
connected
[2006/08/10 11:53:56, 0] lib/util_sock.c:write_socket_data 
(430)

write_socket_data: write failure. Error = Connection reset by
peer
[2006/08/10 11:53:56, 0] lib/util_sock.c:write_socket(455)
write_socket: Error writing 4 bytes to socket 24: ERRNO =
Connection
reset by peer

Primary server config:

[global]
name resolve order = bcast hosts
passwd chat debug = yes
idmap gid = 15000-2
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew
\sUNIX\spassword:* %n\n
passwd program = /usr/bin/passwd %u
netbios name = 2DSRV
printing = CUPS
idmap uid = 15000-2
logon script = logon.bat
workgroup = VFX
os level = 128
printcap name = CUPS
security = user
add machine script = /usr/sbin/useradd -s /bin/false/ -d
/var/lib/nobody %u
delete user script = /usr/sbin/userdel -r %u
log level = 4
add group script = /usr/sbin/groupadd %g
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192
SO_RCVBUF=8192
delete group script = /usr/sbin/groupdel %g
add user to group script = /usr/sbin/usermod -G %g %u
logon drive =
domain master = yes
username map = /etc/samba/smbusers
use spnego = no
encrypt passwords = yes
passdb backend = tdbsam
logon home =
wins support = true
server string = %h server (Domain Controller)
unix password sync = yes
logon path =
add user script = /usr/sbin/useradd -m %u
domain logons = yes

--
Derrick MacPherson <[EMAIL PROTECTED]>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba