I compiled and installed samba 3.5.2 on centos 5.4. Everything installed
successfully but starting smbd shows following error
./sbin/smbd: error while loading shared libraries: libwbclient.so.0: cannot
open shared object file: No such file or directory
Do you have some particular
May be this question asked earlier in list but i didn't able to search
exact . I have samba+ldap domain setup on RHEL 5.1 and samba version is
3.0.28. Today i got a windows 7 system , but i am not able to join that
system in our samba+ldap domain. Do i need to do any registry tweaking. I
On 2010-04-16 12:20, Miguel Medalha wrote:
May be this question asked earlier in list but i didn't able to search
exact . I have samba+ldap domain setup on RHEL 5.1 and samba version is
3.0.28. Today i got a windows 7 system , but i am not able to join that
system in our samba+ldap domain
I know it works because I just tested it and it survived the server's
reboot. I ran ulimit -a and the new value was there.
...from a login shell. If you don't have a login shell /etc/profile
isn't read on bash startup.
In my case, I am doing the change because of Samba. When you
I need to to change the ulimit to 16384(ulimit -n 16384) on boot on
Centos 5.4 64 bit. How do I do that? Been searching and have yet to
find a good answer. Tried to do it in rc.local but it appears to
happen to late there
In order to make the change permanent, add the following line to
I need to to change the ulimit to 16384(ulimit -n 16384) on boot on
Centos 5.4 64 bit. How do I do that?
After replying to you, I tested the solution I gave you and it didn't
work.
I found a working solution. I added the following line to /etc/profile:
ulimit -n 16384
This works as the
From some time I am testing extended ACLs (acl_xattr and acl_tdb).
Could someone tell me why when I am syncing files over rsync the extended acls
are not moved
Are you using the appropriate rsync switch to copy Extended Attributes?
From rsync man page:
-X, --xattrs
This option causes rsync
A small test gives me total other numbers :-( .
xfs can store 21 to 26 ACEs. It depends on the size of gidnumber.
ext3 may store 503 to 513 ACEs, also depending on the size of gidnumber.
The test bed:
fresh created /home partitions with:
mkfs.xfs -f /dev/hda6
for xfs, and
mkfs.ext3
i am adding routr options with
route add -net xxx dev eth0
but when i reset computer it is not in netstat table anymore
In about five (5) seconds I found this on Google:
Adding Persistent Routes
http://www.centos.org/modules/newbb/viewtopic.php?viewmode=flattopic_id=1927forum=30
I suppose
Shall I call you god now? :-)
No me. Err, wikipedia:
Why invoke wikipedia when man attr is at hand?
Quote:
This document describes the attr command, which is mostly compatible
with the IRIX command of the same name. It is thus aimed
Does anyone know how many ACLs can be stored on file system (xfs) using
acl_xattr module and in file file_ntacls.tdb?
There's something I would really like to know! But somehow it seems to
be a secret of the gods that us mere mortals are not allowed to penetrate...
--
To unsubscribe
If I remember correctly XFS used to have a size limit of 64KiB per
xattr.
What about ext3 ext4?
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
I read, Howard Chu 2003, that a SLAPI plug-in was available for syncing LDAP
passwords to the equivalent Samba NT/LM. Would anybody know whether this is
still available ? or is there another solution now ?
Maybe what's on this page will be of interest:
Maybe this will help:
http://www.ibm.com/developerworks/lotus/library/ls-Certification_Authority/index.html
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
LDAP Account Manager (LAM) 3.0.0 - March 24th, 2010
===
LAM is a web frontend for managing accounts stored in an LDAP directory.
I just installed this new version on a CentOS machine and I immediately
got the following error:
Your PCRE
we have just upgraded one of our very old Linux/Samba servers to version
3.4.2. After the upgrade, the Windows 95/98 clients cannot login to the
server anymore. In the log I see 'NT_STATUS_ACCESS_DENIED' messages for
these clients.
The key word here is very old. Meanwhile, some Samba
I am not at all familiar with the use of Windows 9x clients, but I
suppose that you also need to include the following:
lanman auth = Yes
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Please search the list archives. I am sure that your question has
already been addressed here.
It is possible to make it work.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Does anyone know where I could get source
for version 1.8.06?
Version 1.8.05 is here ( the most obvious place :-) ):
http://samba.org/samba/ftp/old-versions/
--
To unsubscribe from this list go to the following URL and read the
instructions:
socket options = SO_BROADCAST SO_KEEPALIVE SO_RCVBUF=8192 SO_SNDBUF=8192
TCP_NODELAY IPTOS_LOWDELAY
It has been repeated ad nauseam that with modern kernels you shouldn't
use socket options unless you know very well what you are doing and
you have a very good reason for doing so.
/|use sendfile|/ = yes
Ooops! Something went wrong with copy/paste. Of course the option should be:
use sendfile = yes
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
The book Samba 3 By Example, under section 5.4.5 LDAP Initialization
and Creation of User and Group Accounts, contains the following statement:
«
The configuration file for the |nss_ldap| library is the file
|/etc/ldap.conf| that provides only one possible LDAP search command
that is
I use socket options because 99% places in Internet recommends this, and
no one say about modern kernels - really. You are first :) And of course,
this options not give me any visible effect.
The problem with the information on the Internet is that it persists,
even if it is no longer
Can you show me, how yours SAMBA work in Gigabit LAN ? What speeds ?
I can't measure them right now but I can tell you that I have 2 networks
consisting of Samba Domain Controllers serving only Windows clients and
the network speeds are very high. One of the networks is dedicated to
I`m about google search. Most results is about samba performance tuning
and contain socket options improvements.
I just did a search in Google and I also found the warnings about the
use of sockect options with Linux kernel 2.6. So, I suppose that one
finds what one is looking for...
From John H Terpstra, one of the Samba developers:
This parameter is counter-productive since the 2.6 kernel auto-tunes
the socket send and receive buffer sizes. Suggest you delete it.
--
To unsubscribe from this list go to the following URL and read the
instructions:
I have been using Samba+Linux+openLDAP. The password synchronization
between the Samba and Unix accounts works well with the use of the ldap
passwd sync parameter in smb.conf.
Now I am in the process of installing my first server using CentOS/Red
Hat/389 Directory Server and this does not
I suppose that this is not possible due to differences in hashing methods.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
(...) When trying to run
any net command, I get the following message:
net: symbol lookup
error: /usr/lib/libreadline.so.x: undefined
symbol: PC
As far as I know, the problem arises as a consequence of a bug in
RHEL/CentOS 5.x. The Samba team is already aware of the problem and a
fix will
The Official Samba 3 HOWTO and Reference Guide
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/
Samba-3 by Example
http://www.samba.org/samba/docs/man/Samba-Guide/
Both contain very useful information about what you need. PDF versions
are also available.
These books come with the
Rather, thanks to you and the rest of the Samba
team for enduring!
+1
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Running Samba 3.4.5 on Solaris 10 Sparc platform. I can't seem to get rid
of the following errors:
log.b104d1:rlimit_max: rlimit_max (10020) below minimum Windows limit
(16384)
I've tried adding ulimit -n 16384 to the samba start scripts, but still
getting these errors. Anyone know what I
You can also specify the LDAPI socket path if your OpenLDAP server is
listening in a 'non-standard' location, like:
passdb backend = ldapsam:ldapi://%2fvar%2frun%2fldap2.4%2fldapi
You have to escape the / elements of the path.
Thank you for helping me search in the right direction.
By
PS - For now, I don't know if I will adopt this connection over Unix
sockets, since there appears to be a bug in the cuurent implementation:
LDAPI: activation of LDAPI UNIX socket causes serious performance
issues in TCP/IP searches
https://bugzilla.redhat.com/show_bug.cgi?id=497556
The
Does Samba support this type of connection to the LDAP server?
Yes.
I am more than willing to do my homework on this matter, but I need some
kind of clue.
Should I simply point samba to a ldapi URI?
I couldn't find any significant answer by googling this.
Thank you.
--
To
I couldn't find any significant answer by googling this.
Oh well, I had just posted that when I found this :
Samba connect ldap via socket
http://lists.samba.org/archive/samba/2008-May/140869.html
«
The following setting works fine for me on a Debian testing system
and with openLDAP:
After acquiring some experience with the use of Samba+OpenLDAP, I am now
in the process of creating my first PDC based on Samba+CentOS (Red Hat,
Fedora, 389) Directory Server. While reading the DS documentation,
something caught my attention.
The Administration Guide for Red Hat Directory
I just installed samba on a new server, 3.4.5-42, 64 bit version from
Sernet, over CentOS 5.4.
When running testparm, I get the following warning:
rlimit_max: rlimit_max (8192) below minimum Windows limit (16384)
I searched Google for some answer but I couldn't find a satisfactory
one.
I just installed samba on a new server, 3.4.5-42, 64 bit version from
Sernet, over CentOS 5.4.
When running testparm, I get the following warning:
rlimit_max: rlimit_max (8192) below minimum Windows limit (16384)
In order to make the necessary change permanent, I entered the following
Overall using CAT5 is a lot easier, just don't make the mistake of
thinking that it's ethernet. CAT5 just provides the wires, the
signaling is proprietary and would probably fry an ethernet port if
you plugged one in. I suggest using different color cables
specifically for the KVM
What you're referring to is accessing the KVM box itself via IP, which
the Aten does allow. What Aten *also* does is use CAT5 cable to link
the KVM switch to various adapters which plug into the server(s). It's
the signalling on those lines that Brian was referring to, not
remotely accessing
Sernet has excelent Samba binary packages. You might be interested in
using them:
http://ftp.sernet.de/pub/samba/
or
ftp://ftp.sernet.de/pub/samba/
Look for the specific packages for your distro.
--
To unsubscribe from this list go to the following URL and read the
instructions:
I just made a new CentOS 5.4 installation. The machine has an Intel
10/100 and an Intel GB on board, and a Broadcom GB card on a PCI-X (64
bit) slot. After the install finished, I noticed that the order and
naming of the Ethernet interfaces is totally screwed up. Under Network
Manager, the
As I recall my solution was to comment out the modprobe alias created
for the network cards (/etc/modprobe.conf) and then in
network-scripts, use the HWADDR in each config script. Make sure the
device=ethX matches the name of the file, if nothing else, for your
own sanity - since the OS
XFS is not stable on 32-bit systems. You should not use it there. You
need a 64-bit kernel.
Default for servers should be 64-bit now anyway. Not many reasons left
for a 32-bit system, and more and more 3. party applications have less
and less support for 32-bit platforms in general.
If they do what you want without making you wait, why even consider changing
the
filesystem that has been working for years on these machines?
Adding new, bigger disks and new filesystems? Wanting these to be the
fastest that is reasonably possible?
As for the system that arose the
I am about to install a new server running CentOS 5.4. The server will
contain pretty critical data that we can't afford to corrupt.
I would like to benefit from the extra speed and features of a ext4
filesystem but I don't have any experience with it.
Is there some member of the list who can
For enterprise environments my favorite FS is XFS, YMMV, though.
I also thought about using xfs, but I don't like the idea of it being
dependent of an external kernel module that is always lagging behind the
current kernel version.
RedHat made the very questionable decision of NOT
(...) The xfs kernel module offered by CentOS
became kABI-compatible sometime ago -- meaning it survives kernel
updates.
That is a clear improvement over the previous situation. I did suspect
it but was not sure about it. Thank you for the information. I will do
some tests with xfs, then.
the desktop.ini issue can't be solved by samba. That's because the contents of the Start Menu are located in different places, like within your Windows profile (roaming) and the All Users profile (local). Because the latter is located on your PC, there's no way for samba to interfere.
If
Roaming Profiles are working, but I always have the desktop.ini
visible in some folders of the Windows-Startmenue.
I found several hints for the dos-attributes in smb.conf, buit
notthing seems to work.
You have hide files = /Desktop.ini/
In any Windows computer, you will find both
I think that you will find this very helpful:
http://www.samba.org/samba/docs/man/Samba-Guide/happy.html
It deals with the configuration of Samba with a LDAP backend.
--
To unsubscribe from this list go to the following URL and read the
instructions:
Actually never mind. Just found it at
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html
in table Table 11.3.
I would suggest starting there with figuring out LDAP and Samba.
Yes. Over the years, I also discovered that searching for information
and collecting useful
Wow. Your an ass. Thanks for your lack of usefulness.
Ok. Then, excuse me for having pointed to the document you now quoted.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
How does one switch ssh ports? What is a good port to use? What
ramifications does it have when I need to ssh in? Is it as simple as
ssh u...@hots:port?
In /etc/ssh/sshd_config replace port 22 with port whatever high port
( 1024) you like
Then configure your ssh clients accordingly.
How does one best turn of X-Windows? I dont need it, ssh works just
fine for me.
Just boot the computer into runlevel 3.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
Quoting from the Samba 3.3.0 release notes:
«
Winbind idmap backend changes
=
The idmap configuration has changed with version 3.3 to something that
allows a smoother upgrade path from pre-3.0.25 configurations that use
idmap backend. The reason for this change is
I am burning the DVD ISO image to disk right now. It is available from
some mirrors.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
The checksum files are also there. SHA and MD5.
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
I would strongly suggest that you wait for the actual announcements, but ymmv.
I noticed that the mirrors that don't have the images complete don't
even allow you to enter the 5.4 directory.
This particular one does and the checksum files check OK.
I can see that you are using LDAP.
Do you have the mandatory groups on your LDAP database?
Domain Users
Domain Guests
Domain Admins
Did you set up the appropriate rights with the net rights grant command?
Take a look at the smbldap-tools scripts:
https://gna.org/projects/smbldap-tools/
If I were you, I would look at this problem first:
[2009/10/14 18:38:11, 0] param/loadparm.c:set_server_role(4293)
Server's Role (logon server) conflicts with share-level security
You have told your server to behave as a Domain Controller and yet at
the same time you tell it to use
Can you shows us the contents of your smb.conf file?
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
I've followed the instructions at
http://wiki.samba.org/index.php/Ldapsam_Editposix
What version of Samba are you using?
The wiki page you quote is now in need of urgent update. Quoting from
the Samba 3.3.0 release notes:
«
Winbind idmap backend changes =
in /etc/ldap.conf:
bind_policy soft
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
Robert Steinmetz wrote:
I have a small Samba installation, two servers and about 10
workstations. The hard drive on one of the Windows XP workstations
failed. I cloned a drive a from an identical machine and replaced the
defective drive. When it came up it had the name of the original
Please pardon me if I insist, but I am doing it with the interest of the
community in mind, not just bitching about it.
I understand that if you address the problem of full compatibility with
Windows ACLs you risk to break compatibility with other clients, such as
NFS clients. Yet, in
Dear Jeremy
Since I once thought about doing the same, I would like to know your
views on the method that Wes describes.
I quote:
»
What I've been doing, which is dangerous but effective, is setting
file creation mode to 666 and letting the Samba VFS ACL layer take care of
everything.
All files/dirs are 666 or 777. According to my reading, since there are
no POSIX extended ACLs, if the VFS layer passes an access, then it only
should be compared against the standard UGO permissions.
That's correct - but the problem isn't access, it's when the
incoming ACL is set onto
IF a samba server is setup to be a domain controller, should
it's local SID = the domain SID?
The SID of the Primary Domain Controler (PDC) is also the Domain's SID.
Also, what are the requirements of a SID?
Security Identifier
http://en.wikipedia.org/wiki/Security_Identifier
I
Yeah, and I've never seen a pig fly before either. But that's the
last time I take something like that for granted.
You came here asking for help and then you address one of the Samba
developers like that?
You could show some respect and kindness to others, particularly when
you need
Charles and Miguel: I appreciate your efforts to rid the world of
ungrateful trolls. However, I am not one of them.
:-) I am glad you aren't!
I learned at my own cost that written irony is somewhat dangerous
because it lacks the accompanying body language that conveys the
meaning. It
Is it possible to have a password-less share available to only
certain users?
From the smb.conf man page:
guest ok (S)
If this parameter is yes for a service, then no password is required to
connect to the service. Privileges will be those of the guest account.
This parameter nullifies
Is it possible to have a password-less share available to only
certain users?
Ooops! I suppose the key expression for you here is only certain users.
Perhaps a combination of the guest account and guest ok parameters
in the share definition?
Make those users part of the group defined
guest account defines the unix account that is used to access the
file system when a guest connection is used. It doesn't determine who
can use the guest account.
Huuummm
From the smb.conf man page:
guest account (G)
This is a username which will be used for access to services which
That is not the only problem you have. Your original post is dated 31
December 2009...
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
what is your purpose with this Level? I'm asking because I had done some
raid level tests some time ago with hardware raid controllers/systems
from 3ware, sun and iscsi-raidsystems and some softwareraid setups.
The purpose of using RAID 10 is, of course, performance coupled with
full
Although they work, and do the same, the installer CD mdadm needs to
support it. The specific appliance that I want to install, doesn't
support RAID 10, so I need to install RAID 1 + RAID 0, i.e. setting 2x
RAID 1 mirrors, and then stripe then in RAID0 - but once the first 1
mirrors are
This page from openfiler.com clearly states the following:
Openfiler supports RAID 0, RAID 1, RAID 5, RAID 6 and RAID 10.
http://www.openfiler.com/products/openfiler-architecture
___
CentOS mailing list
CentOS@centos.org
Then maybe there is something wrong with your partitioning scheme or
even physical layout. What drives do you have and how are they
partitioned? How are they physically connected?
I beg your pardon, I didn't see your previous post with the above
information.
At this point, I think you
I don't know if this makes sense, but to get their RAID10, I first
need to install it, then use the web interface to setup RAID 10.
Instead I would like to have openfiler running on the RAID 10 setup as
well.
I don't think that you have a significant gain by doing so. Aren't you
being a
There is no option to setup RAID 10.
But, let's get back to my previous request,
How would one setup RAID 1+0 (i.e. 2x mirror'ed RAID1's and then a
RAID 0 on top of it) on say CentOS 4.6 ?
There is no option to setup RAID 10 because you are trying to create an
unsupported
I have had been working in my first PDC with samba+ldap, is working
in Centos 5.3.
Now I have been searching about how to backup this installation, for
samba, looks like I need to backup:
/etc/samba
Exist some else that I need to backup for samba?
Now, I had not been able to find
Do you need winbind? Without any Windows server (PDC) you don't
need the winbind crap
winbind crap?
Beg your pardon - in a LAN without any Windows PDC or BDC I don't need
it.
Do you usually call crap to everything you don't need? That's
interesting...
--
To unsubscribe from
Is there anything Samba can contribute to an all-Linux environment
with no
Windows or Mac computers?
no.
Yes.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Is there an equivalent of a useradd for systems that are using LDAP user
management? I know I can build an LDIF file and import it, but it is a bit
of a pain to do it manually all the time.
Is there not an easier / faster way
Smbldap-tools
https://gna.org/projects/smbldap-tools/
Is there an equivalent of a useradd for systems that are using LDAP user
management? I know I can build an LDIF file and import it, but it is a bit
of a pain to do it manually all the time.
Is there not an easier / faster way
Smbldap-tools
https://gna.org/projects/smbldap-tools
I
Isn't that only for samba-ldap? Can I still use them if I am not running
samba? I don't want to install and run Samba for no particular reason..
It can be used to create Posix accounts only.
The documentation resides here:
http://download.gna.org/smbldap-tools/docs/
You can try libuser, it's available in CentOS 5 (yum install
libuser) and apparently has support for LDAP.
libuser is an attempt to generalize the useradd/mod/del,
groupadd/mod/del commands to work with generic backends. The
implementation includes a module to work with an LDAP backend, I
I have a server acting as a PDC, and another server acting as a BDC.
When I run 'net getlocalsid'
on each, they return different numbers. If I run 'net getlocalsid
domain_name' on the BDC, it returns the PDC's sid.
Is it import for each machine to have the same SID?
The local SIDS must be
You can force it without restarting with the following commands:
For smbd
smbcontrol smbd reload-config
For nmbd:
smbcontrol nmbd reload-config
For winbind:
smbcontrol winbindd reload-config
The process number can also be used instead of the daemon's name.
For samba version 3.3 you can
And if he uses PCI network cards then there's a PCI bus limit to about
33 MByte/s. Even with Gigabit cards.
What leads you to say that? All the documentation I know gives 32 bit
PCI a theoretical bandwidth of *133.33* MByte/s, sometimes a 127.2
practical one. You can Google PCI
The approximate average numbers I am getting over LAN are:
Write: around 23Mbits/sec
Read: around 33Mbits/sec
Do you really mean Megabits? Or MegaBytes? 33 Megabits (about 4 MB/sec)
would be VERY abnormal!
Do you have use sendfile = yes in your smb.conf? It can be a global
option or
How can I go about configuring my LAN hardware to use Jumbo Frames?
That would be a too long conversation and now I don't have the necessary
energy.
You can Google for Linux Jumbo Frames. You must identify your LAN card
and see its specifications. Also, you need to be sure that your
This is a very minor error, but if someone wants to correct it...
On Samba Wiki page Release Planning for Samba 3.4
http://wiki.samba.org/index.php/Release_Planning_for_Samba_3.4
The release date of Samba 3.4.0, July 3, was a Friday, not a Wednesday
as it appears on the page.
Thank you
--
How do you enable local profile creation on machines connected to a samba PDC?
In smb.conf:
logon path = [meaning nothing after the = sign]
Samba HOWTO Collection
Desktop Profile Management
http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/ProfileMgmt.html
Samba 3 by Example:
Ah. I thought that the stanza would just disable roaming profiles.
logon path =
I misunderstood your question because your subject line says How to use
local profiles in samba PDC.
Well, you must have a netlogon share containing a Default User
profile. The process is described in the
Do I take it that there is no good way to have a mix of local
roaming profiles?
IE: where if the user has a profile on the server they get it,
otherwise they use a local?
You will benefit a lot by reading the section about redirected profile
folders. I suppose it will do what you want.
One of our winXP users intermittently can't process the login script.
sometimes it works and maps his drives, sometimes it doesn't. I have
the netlogon share configured correctly.
Looking at the logs for the user in question, I see this when the user
logs in:
couldn't find service netlogo
I should have said that I am referring to Samba 3.2.10 over CentOS 5.3.
Sorry!
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
201 - 300 of 461 matches
Mail list logo
