[Samba] Windows 2000 (some sp2 / sp3) + Roaming Profiles + Samba PDC 2.2.3a (Redhat 7.3)
Hi, This is my first post to the list, so iam hoping luck is with me :) Ive run samba as a simple smb fileserver for over a year, but never needed to do any more than provide shares to users (who always use the same machines). However Iam not in need of running samba as a PDC for some windows 2000 machines, and need to use roaming profiles. This is where the problem sets in. Ive set up a nice smb.conf for mounting there home drive, setting up other stuff etc. Ive also put in a [netlogon] and a [profiles] Iam in another part of the office atm, and cant get back to / access the server with the smb.conf on it, however I will get that within a few hours and post it as a reply to this post. The problem iam getting is when the windows 2000 machine logs onto the domain (not joins it, that works fine) the user gets in ok, but then gets a messages saying its profile cannot be created or found on the server, and a local copy will be used instead. It then also mentions 'DETAIL - The Network Password is incorrect' at the bottom The user then gets logged in, but with a local profile, and when they log off none of the profile gets sent back to the server. Any ideas ? Obviously not helpfull me not providing my smb.conf atm, but I will asap Thanks in advance -James
[Samba] High Load on Reliant Unix 5.45A20
Hello there! We have a Performance-Problem on our Fileserver! Hardware: RM600 E70 12x R1 CPU 8 GB RAM OS: Reliant Unix 5.45A20 Samba-Version: 1.9.18p10 Number of Samba-Processes: ca. 2800 By Time the Number of blocked Processes is more than 600 but our CPU-Idle is higher than 50%. Siemens tells us that in this Situation the Value pswitch/s (checked withsar -w) is at 9000 an this is definitly too much for the System (Normalvalue 1000). This may me the Reason for the high Load and Number of blocked Processes. Does anyone know this problem and is there a solution for it ( eg. in smb.conf tuning or source-code) Sascha Laatsch -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] PB samba 2.5 and clients W2K SP2-SP3
English version : Hi i've some problems with samba 2.5 and MDK 8.2 each time I log on a WIN2K SP2 or SP3 client I get the message : your password expires today would you like to change it ? yes no Even if I change it , I get the message one more time when I log on the client the next time.. I read the o'reilly and the how to and I didn't see any param for password expiration in smb.conf. If someone could help me thanks French version : bonjour j'ai actuellement un gros PB et malgré la lecture de l'O'reilly et du HOW-TO collection je n'ai toujours pas trouvé de réponse: Chaque fois que je me logue en security user ou domain j'obtiens sur les postes clients windows (uniquement) le message : Votre mot de passe expire aujourd'hui , souhaitez vous le changer ? oui, non. que je le change ou pas il me réaffiche le message à la prochaine ouverture de session. pourtant les comptes unix ne periment pas ni les comptes samba a priori. Si quelqu'un avait la réponse à ce problème ennuyeux merci -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Warning when updating Samba via mandrake update
I've just done a update of Samba from 2.2.4 to 2.2.6. After installing everything it says some files were modified, ie smb.conf, and gives you the option to view the changes. It removed all my shared folders, removed settings from 'global' and changed lines for cups and other bits and pieces. Some changes are highlighted in green and the ones it removes are in red with '-' stuck in front of them. I'm not sure if anything happens if you just click on ok after the update and don't see what's been changed. So be warned, if everything stops working after an update then check your smb.conf file Mr Smiley ( not smiling ) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
nss_wins (was [Samba] winbind)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Message: 19 Date: Mon, 04 Nov 2002 19:19:15 -0800 From: Joseph Loo [EMAIL PROTECTED] To: samba [EMAIL PROTECTED] Subject: [Samba] winbind I have been looking a t winbind recently. Is it possible to configure winbind and not join the microsoft network and use nss_wins to retrieve the window host address? So far the It organization has not responded to a request to allow the machine to join the microsoft network. I need to get the window machines host ip address for the Linux system. AFAIK, nss_wins is useable without any other parts of samba. All you need is an smb.conf file listing your wins server. In fact, in Mandrake (since 8.1 or 8.2 I think) nss_wins has been a seperate package, relying only on samba-common (which provides the smb.conf). Regards, Buchan - -- |Registered Linux User #182071-| Buchan MilneMechanical Engineer, Network Manager Cellphone * Work+27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE9x6xQrJK6UGDSBKcRAuf5AKCVHRxOtUdemky4wJQ1srWbarO1xACgsZfe S4bQaEuZ2ORhiK/YfI8FquQ= =L1WN -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Performance Problem
Ferdi: I have the same problem. My solution was change the server NIC card. I put a 3Com one and all works fine. I suggest you upgrade samba software too. [EMAIL PROTECTED], ha escrito: Hello, I have a severe performance problem when connecting a M$-Client PC with a Bootdisk and TCP/IP-Stack to my Samba server. Both machines are linked via a 100Mbit crosslink connection. The server is running a SuSE Linux 7.2 with Kernel 2.4.19, the smb-fs and the NIC is compiled into the kernel. The Client uses a DOS 6.2 bootdisk with the M$ TCPIP-stack version 1.02. All M$ drivers load fine, the 'net use' command works too. Then I start Symantecs 'ghost' to create an image from the clients HD and put it to the used Samba share on the server. The Performance is pr (1Mbyte/min), tests with a W2K server on the same hardware showed better values (200Mbyte/min) :-( . What can I do to improve this poor samba throughput??? Regards Ferdi -- Gustavo Courault e-mail: [EMAIL PROTECTED] http://network-online.com.ar ICQ: 15828353 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[SAMBA] Retaining ownership of files
Title: [SAMBA] Retaining ownership of files Hi I want users to edit each other files, but not having the ownership changed at all I.e. user1 create a word doc, user2 can edit it, but the ownership is not changed to user2. force create mode force directory mode force user force group I know of these , but our share have tons of dirs with files that have different users and groups, 60+ developers working together. Are there any new options in 2.2.6 that can fix this? thanks ~ Tommy Fallsen System Administrator Kongsberg Defence Aerospace Email: [EMAIL PROTECTED] TEL: +47 32287783 MOB +47 93057326 WEB: http://www.kongsberg.com/eng/kog/ The information in this e-mail and in any attachments is confidential and intended solely for the attention and use of the named addressee(s). This information may be subject to legal, professional or other privilege and further distribution of it is strictly prohibited without our authority. If you are not the intended recipient, you are not authorised to and must not disclose, copy, distribute, or retain this message or any part of it, and should notify us immediately.
[Samba] Warning for updating samba from 'Mandrake Update'
I've just done a update of Samba from 2.2.4 to 2.2.6. After installing everything it says some files were modified, ie smb.conf, and gives you the option to view the changes. It removed all my shared folders, removed settings from 'global' and changed lines for cups and other bits and pieces. Some changes are highlighted in green and the ones it removes are in red with '-' stuck in front of them. I'm not sure if anything happens if you just click on ok after the update and don't see what's been changed. So be warned, if everything stops working after an update then check your smb.conf file Mr Smiley ( not smiling )
[Samba] Make Uninstall
I am currently running 2.0.x built from source. I am trying to upgrade to 2.2.6 via rpms, but I keep getting error messages about failed dependencies. I downloaded every available rpm. Most of the dependency errors begin with lib... Do I have to uninstall the old version first? How do I uninstall the old version? Is there a make uninstall command? Where is it, if there is? Is there a more graceful way than this to upgrade via the rpms? Thanks, Anna -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Valid characters in NT user/pass, wbinfo -a
Samba 2.2.6. I've been looking for (without success) a doc that specifies what characters are valid in an NT login/password. A script will popen '/usr/bin/wbinfo -a MY_DOMAIN+'+user+'%'+passw+'' where user and passw are untrusted submitted values, so you can understand my concern. I want to keep things tight but not reject valid user/pass combinations. Thanks for any help, ~ Daniel p.s. i've google'd and searched the archives at marc.theaimsgroup, but turning up a LOT of false positives. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] bizarre issue with opening Quicktime files from a share (problem persists after all)
On Thu, Oct 31, 2002 at 05:48:06PM +, [EMAIL PROTECTED] wrote: [ . . . ] Can you test on 2.2.6 please ? I fixed a long standing bug with name mangling for folders for 2.2.6. A problem remains: If the folder with the name 12 characters is not at the base of the share, but inside another folder with a name 12 characters, it still does not work. Regards, Frank -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] PB samba 2.5 and clients W2K SP2-SP3
Possibly the password expiry time is set by Win2k and not Samba I have this problem too but not yet got around to investigating. Mike - Original Message - From: GAUCHON Bertrand [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, November 06, 2001 11:19 AM Subject: [Samba] PB samba 2.5 and clients W2K SP2-SP3 English version : Hi i've some problems with samba 2.5 and MDK 8.2 each time I log on a WIN2K SP2 or SP3 client I get the message : your password expires today would you like to change it ? yes no Even if I change it , I get the message one more time when I log on the client the next time.. I read the o'reilly and the how to and I didn't see any param for password expiration in smb.conf. If someone could help me thanks French version : bonjour j'ai actuellement un gros PB et malgré la lecture de l'O'reilly et du HOW-TO collection je n'ai toujours pas trouvé de réponse: Chaque fois que je me logue en security user ou domain j'obtiens sur les postes clients windows (uniquement) le message : Votre mot de passe expire aujourd'hui , souhaitez vous le changer ? oui, non. que je le change ou pas il me réaffiche le message à la prochaine ouverture de session. pourtant les comptes unix ne periment pas ni les comptes samba a priori. Si quelqu'un avait la réponse à ce problème ennuyeux merci -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] pid file is not removed wher exiting with SIGTERM
Hi all! I'm having some troubles exiting smbd (nmbd also). I have the following option in smb.conf pid directory = /var/run/ Samba is also compiled --with-piddir=/var/run to use /var/run as the pid directory! To quit daemons i use kill -SIGTERM nmbd_pid The process exits, but..., when i look in /var/run/ , nmbd.pid is still there. as the result, my scripts, that starts/stops samba daemons, complains that the daemon is already running!
[Samba] Password Expire - in Samba 3.0 using pdbedit
Hello All! How can I change the Password must change: in pdbedit. We have a user whose password has expired and not letting him back in the system. I'm using tdbsam as the default backend. I've man'd pdbedit with no success. Any help would be highly appreciated. Thanks! Samba version 2.999+3.0.alpha20-3 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Adding Printer
By the sequence to add printer, do you mean http://us1.samba.org/samba/docs/Samba-HOWTO-Collection.html#PRINTING ? What do you mean by can't print? Access denied? Gobbeldy-gook? Nothing happens? Is there anything of interest in samba's logs? In RH installed from RPM they should be in /var/log/samba. What version of samba are you running? 2.2.6 has fixed a lot of print bugs. ~ Daniel [EMAIL PROTECTED] wrote: We are a very small company and moved from WinTel environment to Linux. Killed the WinTel file/print server and implemented SAMBA om Red Hat 7.2. I have some users that need to print to a RICOH Aficio 4106 printer. When I go through the sequence to add printer .. it appears to install, but the people cannot print. Can anyone walk me through steps as I am novice.. and I do not want to go back to windows file/print share. Nicholas E. Mennell, CCNA Manager, Operations IntelliNet Corporation Room 302 26380 Curtiss Wright Parkway [EMAIL PROTECTED] ph: (216) 289-4100 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Roaming profiles problem - loading failure
I have been having this same problem. There is nothing in 2.2.6 that fixes it. I still have no idea what's causing it. Peter Polkinghorne wrote: I have a samba 2.2.4 PDC which acts as the repository of roaming profiles. Just recently some of our users have experienced failure to load roaming profiles. The clients are on a pair of Windows 2000 terminal servers. The failure does not seem to be confined to one server and only affects some people. The error given takes place during the loading profile stage: Windows can not copy: \\Samba server\profiles\aaa\Application Data\Microsoft\Outlook\FAVF.tmp to C:\Documents and Settings\aaa.KINGSFORDS\Application Data\Microsoft\Outlook\FAVF.tmp DETAIL - Access is denied Then it says: Windows could not load the profile and is logging you on with a temporary profile. My profiles part of smb.conf is: # Profiles [profiles] path = /home/ntprofile writeable = yes create mask = 0600 directory mask = 0700 nt acl support = no csc policy = disable ... the last 2 lines being added during the day, but with no effect. I have checked the source file and apart from being 0 length it looks perfectly accessible. Anyone else seen this? Or any hints as to what to do? I am contemplating upgrading to 2.2.6 - but the WHATSNEW gives no hint that this might be a fixed problem. Of course it might be a problem with the Windows 2000 servers - not sure what SP level we are at - Windows manager away. -- Um, can you repeat the part of the stuff where you said all about the things? - Homer Simpson -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [SAMBA] Retaining ownership of files
chown -R group /path/to/the/share chmod -R g+w /path/to/the/share group find /path/to/the/share -type d -exec chmod g+s {} \; In smb.conf you will need only 2 options: create mode = 0664 directory mode = 0775 But all those 60+ developers should be in that group if they also have direct (shell) access to the files. You also should change umask to 002 for their shells. If you want to maintain different groups within the same share/directory you can run the same 3 commands I mentioned but replace share with particular sub-directory name and group with particular group. This setup will allow to maintain proper group ownership on OS level (which takes precedence over Samba setup), so on the Samba level you will only have to take care of the proper modes on the files/directories. I hope this helps. [EMAIL PROTECTED] wrote: Hi I want users to edit each other files, but not having the ownership changed at all I.e. user1 create a word doc, user2 can edit it, but the ownership is not changed to user2. force create mode force directory mode force user force group I know of these , but our share have tons of dirs with files that have different users and groups, 60+ developers working together. Are there any new options in 2.2.6 that can fix this? thanks ~ Tommy Fallsen System Administrator Kongsberg Defence Aerospace Email: [EMAIL PROTECTED] TEL: +47 32287783 MOB +47 93057326 WEB: http://www.kongsberg.com/eng/kog/ The information in this e-mail and in any attachments is confidential and intended solely for the attention and use of the named addressee(s). This information may be subject to legal, professional or other privilege and further distribution of it is strictly prohibited without our authority. If you are not the intended recipient, you are not authorised to and must not disclose, copy, distribute, or retain this message or any part of it, and should notify us immediately. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] SCO Unix - Unixware
Samba works fine under SCO Unixware. There is a precompiled package at ftp://ftp2.caldera.com/pub/skunkware/uw7/Packages/samba-2.2.5.pkg Download and install with # cd 'download directory' # pkgadd -d `pwd`/samba-2.2.5.pkg I don't remember offhand where it puts the files, watch as the package gets installed. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]Sent: Monday, September 30, 2002 2:14 PMTo: [EMAIL PROTECTED]Subject: [Samba] SCO Unix - Unixware Hi, Does Samba supports SCO Unix (Unixware)? From the FTP sites looks like it doesn't. Regards, Mahesh
Re: [Samba] Force User -
info wrote: Thanks. But I already have NT ACL support set to 'yes'. It won't help if your filesystem does not support ACL and your Samba is not build with them. First make sure it does - ldd smbd should list libacl among others. How does the ACL allow me to set the default owner without giving them the rights of the owner? Please explain if you can. THanks You can apply ACLs using W2K or NT workstation. ACL can be changed through Security Tab on File/Directory properties. Keep in mind that to be able to do that you must be either root or the owner of the files. - Original Message - From: Yura Pismerov [EMAIL PROTECTED] To: info [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Tuesday, November 05, 2002 8:20 AM Subject: Re: [Samba] Force User - You will need ACL support. info wrote: Hello, I am using Samba shares as a way for my users to publish files from their Windows XP PC's to my Apache Web Server on Red Hat Linux. The username I use for Apache is apache and it has full read,write and execute access on all the files within my webserver root directory. In the Samba Shares I use force user = apache so this means that any files created using the share actually get apache as the owner. However, this actually gives the person who connects using the samba share the power of the user apache which means they can change anything. I dont want this. I just want to set it so that the owner of any files created by using the samba share is set as apache. I do not want people to have the power of apache! Is this possible? Or does anyone know a better way of publishing to the apache webserver? PLease help, thanks Mr. Gerard O'Reilly Intranet Manager Siam Stars Ltd/ Thai-Belgium Industrial Co. Ltd 21/6 Moo 3, Soi Kayha Bangbua, Viphavadee Rangsit Road, 60 Talad Bangkhen, Laksi Bangkok 10210 Tel: 02-561-4649 or 02-940-8750 Fax: (66-2) 5611486 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RE: firewall (solution)
I just wanted to post the ipchains rules that allowed nmblookup to work, as well as findsmb. The security ramifications of opening the netbios ports are something I will look into next. But, these rules will allow not only seeing shares from NT clients but samba to act as PDC also. -A input -p tcp -s 192.168.0.0/24 -d 0/0 137:139 -j ACCEPT -A input -p udp -s 192.168.0.0/24 -d 0/0 137:139 -j ACCEPT -A input -p udp -s 192.168.0.0/24 137:139 -d 0/0 1024: -j ACCEPT resulting in (ipchains -L): ACCEPT tcp -- 192.168.0.0/24 anywhere any - netbios-ns:netbios-ssn ACCEPT udp -- 192.168.0.0/24 anywhere any - netbios-ns:netbios-ssn ACCEPT udp -- 192.168.0.0/24 anywhere netbios-ns:netbios-ssn - 1024:65535 Rich -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] sorta-newbie: installing 2.2.6 rpm with --nodeps on RedHat 7.2 ?
I have samba (server-only) running on a server with a stock RedHat 7.2 'server' install and am trying to upgrade Samba to 2.2.6-1.i386. I get the following dependency failures when trying to rpm -ivh samba-2.2.6-1.i386.rpm: libncurses.so.4 is needed by samba-2.2.6-1 libreadline.so.3 is needed by samba-2.2.6-1 ncurses4-5.0-4.i386.rpm and ncurses-5.2-12.i386.rpm is already installed and /usr/lib/libreadline.so.4 exists on the system. Can someone tell me if it safe to install 2.2.6 with '--nodeps' or, if that is not the best way out, point me to the correct solution? Thanks, Tarvin Rhodes Network Admin Sysco/Charlotte 704.723.6062 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Warning when updating Samba via mandrake update
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Message: 19 From: Ken Walker [EMAIL PROTECTED] To: '[EMAIL PROTECTED]' [EMAIL PROTECTED] Date: Tue, 5 Nov 2002 11:16:53 - Subject: [Samba] Warning when updating Samba via mandrake update I've just done a update of Samba from 2.2.4 to 2.2.6. Not with MandrakeUpdate, unless you have screwed up your update configuration. There is only an update to 2.2.6 that went out late yesterday, and only applies to 9.0, which originally shipped with 2.2.6pre2. There should be no update for 2.2.5 or earlier, since you would be running on something earlier than Mandrake 9.0, in which case you should be using the RPMs for Mandrake 8.x which are available from two sites: http://ranger.dnsalias.com/mandrake/samba http://people.mandrakesoft.com/~staburet/samba These RPMs have been submitted to the samba team, and should have been available on the samba ftp mirrors, but I think Gerry ran out of time ... After installing everything it says some files were modified, ie smb.conf, and gives you the option to view the changes. No, it warns you that yuo have changed the supplied default config, and should show you what has changed in the default config, and the option to update your config to take these changes into account. Unfortunately these updates haven't arrived on our mirror yet, so I can't test it right now. It removed all my shared folders, removed settings from 'global' and changed lines for cups and other bits and pieces. Did it actually remove things without input from you, or did it just show you what differed between yours and the supplied default? Some changes are highlighted in green and the ones it removes are in red with '-' stuck in front of them. Standard diff-type output. I'm not sure if anything happens if you just click on ok after the update and don't see what's been changed. If you just click ok, it *should not* change anything, assuming then that you don't want any of the added features added to your smb.conf. So be warned, if everything stops working after an update then check your smb.conf file Maybe it would be better to back up your configs, specifically when doing updates. We commit our configs to cvs whenever we change them, so we can't lose them. Mr Smiley ( not smiling ) Did something break? FYI, the fact that you see a dialog is a feature, otherwise you would have the old config as you had set it up kept in place, and a /etc/samba/smb.conf.rpmnew added, which has the new default config. You would then manually have to use etc-update to get any new entries in your smb.conf. In fact, you don't get the dialog if you update via urpmi (which is what we do here): # urpmi.update updates # urpmi --auto-select --auto --update Regards, Buchan - -- |Registered Linux User #182071-| Buchan MilneMechanical Engineer, Network Manager Cellphone * Work+27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE9x+fWrJK6UGDSBKcRArmpAKC5vzVeQ8PqwBoKP9u8NxGtztpjdwCffXBu OaBUN1BGLzrLRHG08RSuMr0= =qbyp -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Roaming profiles problem - loading failure
I've been seeing this too. They seem to be getting around it by deleting the current profile and letting Windows re-save it, but we've held off migrating any more users with roaming profiles till we figure out exactly what's going on. If anyone finds out anything about this, I'd be very interested. -Original Message- From: Andrew Gaffney [mailto:agaffney;locutus2.yi.org] Sent: Tuesday, November 05, 2002 9:49 AM To: Peter Polkinghorne Cc: Samba Subject: Re: [Samba] Roaming profiles problem - loading failure I have been having this same problem. There is nothing in 2.2.6 that fixes it. I still have no idea what's causing it. Peter Polkinghorne wrote: I have a samba 2.2.4 PDC which acts as the repository of roaming profiles. Just recently some of our users have experienced failure to load roaming profiles. The clients are on a pair of Windows 2000 terminal servers. The failure does not seem to be confined to one server and only affects some people. The error given takes place during the loading profile stage: Windows can not copy: \\Samba server\profiles\aaa\Application Data\Microsoft\Outlook\FAVF.tmp to C:\Documents and Settings\aaa.KINGSFORDS\Application Data\Microsoft\Outlook\FAVF.tmp DETAIL - Access is denied Then it says: Windows could not load the profile and is logging you on with a temporary profile. My profiles part of smb.conf is: # Profiles [profiles] path = /home/ntprofile writeable = yes create mask = 0600 directory mask = 0700 nt acl support = no csc policy = disable ... the last 2 lines being added during the day, but with no effect. I have checked the source file and apart from being 0 length it looks perfectly accessible. Anyone else seen this? Or any hints as to what to do? I am contemplating upgrading to 2.2.6 - but the WHATSNEW gives no hint that this might be a fixed problem. Of course it might be a problem with the Windows 2000 servers - not sure what SP level we are at - Windows manager away. -- Um, can you repeat the part of the stuff where you said all about the things? - Homer Simpson -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Encryption
On Tue, 5 Nov 2002, Howard Huntley Jr. wrote: I compiled the source, My understand is that the encryption support has to be compiled into the binary. If not the encrypt passwords = Yes function in smb.conf. is meaning less, No. Encryption support is native to Samba since version 2.0.x. You need to add your root account to smbpasswd: smbpasswd -a root then do the same for every user who needs to use samba. - John T. - Original Message - From: John H Terpstra [EMAIL PROTECTED] To: Howard Huntley Jr [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Monday, November 04, 2002 11:27 PM Subject: Re: [Samba] Encryption On Tue, 5 Nov 2002, Howard Huntley Jr wrote: I got my Samba compiled and I am seeing the Sun v9 shears in win2k. I basically have an open samba system. I do not have encryption support compiled into the binaries. I have looked high and low for the instructions, Will any one tell me which changes to make in the make file in order to get the encryption support compiled into the binary? When and how or do I need to get the Smbpassword going?? Why is there so much of the old documentation included with the samba files and so little regarding getting the encryption going? The encryption config should be the default. Please check the man page for smb.conf - it is up to date. You want to check for encrypt passwords = Yes function in smb.conf. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Security Question: passwordless machine accounts
Hi folks, Finally got Samba up and running after many oplock issues and I'm very pleased. One detail left that bothers me. I'm running FreeBSD 4.7-STABLE on our PDC and every night I'm (root) is emailed a security report. Among the items reported is: Checking for passwordless accounts: . . CLIENT01$::1134:1134::0:0:Machine CLIENT01:/dev/null:/sbin/nologin . Should I be telling myself this is okay, since it's mitigated by using the /sbin/nologin shell? Since the machine has already successfully joined the domain can I now just assign the machine a password? Won't that break the trust relationship already setup? Can anything be done, or should I just shrug this one off? Thanks in advance, Sean -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] sorta-newbie: installing 2.2.6 rpm with --nodeps on RedHat 7.2 ?
Hi Tarvin, I performed this upgrade recently. I played it safe by downloading and installing the appropriate libraries. I performed a search for the dependent files on www.rpmfind.net and installing the associated rpm packages. Hope this helps, Carl. - Original Message - From: Rhodes, Tarvin [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, November 05, 2002 3:39 PM Subject: [Samba] sorta-newbie: installing 2.2.6 rpm with --nodeps on RedHat 7.2 ? I have samba (server-only) running on a server with a stock RedHat 7.2 'server' install and am trying to upgrade Samba to 2.2.6-1.i386. I get the following dependency failures when trying to rpm -ivh samba-2.2.6-1.i386.rpm: libncurses.so.4 is needed by samba-2.2.6-1 libreadline.so.3 is needed by samba-2.2.6-1 ncurses4-5.0-4.i386.rpm and ncurses-5.2-12.i386.rpm is already installed and /usr/lib/libreadline.so.4 exists on the system. Can someone tell me if it safe to install 2.2.6 with '--nodeps' or, if that is not the best way out, point me to the correct solution? Thanks, Tarvin Rhodes Network Admin Sysco/Charlotte 704.723.6062 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Adding Printer
Everyone, Thanks for the response. I am using RedHat 7.2, SAMBA 2.2.5 Here is what we are trying to do and the situation that results: I have two (2) endusers with HP laptop PC that spend 3 days out of 5 in the office. They have to connect over our internal network to a Ricoh Aficio printer. The endusers were added to the appropriate directories and we had tested thoroughly with users the ones in office. We are also using a LEXMARK printer without any problems. As a matter of fact, the 2 that cannot print to the Ricoh, can print to the Lexmark. When I choose from the Windows Desktop, start, settings, printers, I follow the path to add printer, select Ricoh, Aficio 401 Everything works without incident so far. It appears all is set up correctly. When I send a test print to the printer, I get nothing. I delete the printer and proceed another route to install printer. I go to start, run, \\n.n.n.n/ricoh I get a message that says: Before you can use printer \\n.n.n.n/ricoh it must be set up on your computer. Do you want Windows to set up the printer and continue this operation? yes The server on which the printer resides does not have the exact printer driver installed. If you want to install the driver on your computer click OK. OK Connecting to ricoh on \\n.n.n.n { swishing flashlight } Complete operation through the Printer Wizard. at completion, I get Access denied, unable to connect I have checked various log files and I do not see anything that jumps out as an error? Any assistance is greatly appreciated. Nicholas E. Mennell, CCNA Manager, Operations IntelliNet Corporation Room 302 26380 Curtiss Wright Parkway [EMAIL PROTECTED] ph: (216) 289-4100 daniel.jarboe@cus tserv.comTo: [EMAIL PROTECTED] cc: [EMAIL PROTECTED] 11/05/2002 09:47 Subject: Re: [Samba] Adding Printer AM By the sequence to add printer, do you mean http://us1.samba.org/samba/docs/Samba-HOWTO-Collection.html#PRINTING ? What do you mean by can't print? Access denied? Gobbeldy-gook? Nothing happens? Is there anything of interest in samba's logs? In RH installed from RPM they should be in /var/log/samba. What version of samba are you running? 2.2.6 has fixed a lot of print bugs. ~ Daniel [EMAIL PROTECTED] wrote: We are a very small company and moved from WinTel environment to Linux. Killed the WinTel file/print server and implemented SAMBA om Red Hat 7.2. I have some users that need to print to a RICOH Aficio 4106 printer. When I go through the sequence to add printer .. it appears to install, but the people cannot print. Can anyone walk me through steps as I am novice.. and I do not want to go back to windows file/print share. Nicholas E. Mennell, CCNA Manager, Operations IntelliNet Corporation Room 302 26380 Curtiss Wright Parkway [EMAIL PROTECTED] ph: (216) 289-4100 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Cannot access the COMMIT CHANGES tab in SWAT
Dear Linux guru's I am a starter in redhat,i have a problem while configring SAMBA using SWAT.I'm not able to access the COMMIT CHANGES tab in swat which should be close to RESET VALUES and ADVANCED VIEW,to add further i dont even see the COMMIT CHNAGES tab on the screen anywhere,how am i supposed configure samba using swat.I would accept any recommendations.Pls do email me at [EMAIL PROTECTED] regarding your troubleshooting suggestions. Thanks, Sincerely Sanoj George
[Samba] Synchronising NT, unix and Samba passwords
Our Samba is working perfect except that when a users NT password expires and the user changes it they can't access the share anymore from Windows NT explorer. At the moment i have to log on to our unix system and change the unix and samba passwords manually to match the new NT password. I've been looking through all the websites on Samba but nothing has helped. I've done all sorts of amendments to the smb.conf file (including setting encrypt passwords = yes, security = user and update encryted = yes). Should the unix and samba passwords be automatically updated or i'm i trying to do something that you can't do. We're using NT4 and Unix (Sun Solaris 8). The Samba version is 2.0.5a. I'm implementing a way around this by allowing the users to log into the unix system to change their Unix/Samba passwords. I've amended their .profile to include commands passwd and /usr/local/samba/bin/smbpasswd (and exit to log them out after). James Briar Technical Support Chief Exec Dept - Infrastructure - 6th floor Ext 3807 **^ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. [EMAIL PROTECTED] http://www.merton.gov.uk ** -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] getent not working / winbindd issues
I first start smbd -D and nmbd -D Then I start winbindd Then I join the domain (smbpasswd -j DOMAIN -r DOMAINCONTROLLER -U Administrator) It works Then I check my Secret (wbinfo -t) and it's good Then I list users and groups (wbinfo -u and wbinfo -g) and it works fine However I still cannot get getent passwd and getent group working, it just lists the local users or groups and hangs... I verified that the libraries were in the /lib folder and symlinked, and here is the output from ldconfig: [root@tux samba]# ldconfig -v | grep winbind libnss_winbind.so - libnss_winbind.so I restarted winbindd and typed getent passwd and it just lists my local passwords and hangs. Nothing is generated in my log.winbindd when I do this either. I am also noticing that _occasionally_ the box will not allow anyone to login until after I kill winbindd and sometimes winbindd locks up most of the processor until I KILL -9 it. uname -a: Linux tux.#.net 2.4.19 #1 Fri Oct 25 15:39:52 EDT 2002 i686 unknown Here is my /etc/nsswitch.conf (abbreviated): passwd: files winbind shadow: files winbind group: files winbind Here is my smb.conf: [global] workgroup = vsionline server string = Samba %v -- TEST -- security = domain password server = vsi-vsi-albany winbind uid = 1-2 winbind gid = 1-2 winbind separator = + winbind cache time = 10 winbind enum users = Yes winbind enum groups = Yes For reference, here is my /etc/pam.d/login: [root@tux pam.d]# cat login #%PAM-1.0 auth required /lib/security/pam_securetty.so auth sufficient /lib/security/pam_winbind.so auth sufficient /lib/security/pam_unix.so use_first_pass auth required /lib/security/pam_stack.so service=system-auth auth required /lib/security/pam_nologin.so accountsufficient /lib/security/pam_winbind.so accountrequired /lib/security/pam_stack.so service=system-auth password required /lib/security/pam_stack.so service=system-auth sessionrequired /lib/security/pam_stack.so service=system-auth sessionoptional /lib/security/pam_console.so [root@tux pam.d]# Any assistance anyone can provide will be much appreciated! -SP === \/ // Sean Patrick Ingles \ / // Jr. Network Engineer \/ ___ // \ / // Vision Systems, Inc. __/ / _/ 142 State Street Albany, NY 12207 www.visionsys.com Landline: +1 518.434.4300 x1406 [EMAIL PROTECTED] Fax: +1 518.434.4304 == -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Ports Recommended?
Hi All, I finally got a completely new box (Multiple Domains Thread from last month) and have just done a fresh FreeBSD 4.7 install. I used to use a source tarball, but am wondering if there's any reason to not use the ports tree. TIA Steve -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Nothing work : Win2k Nethwork path not found
Is there any explanation for the number of e-mails (dozens) that I've seen in the past few weeks that seem to be over a month old (see example below)? Bill Knox Senior Operating Systems Programmer/Analyst The MITRE Corporation On Tue, 3 Sep 2002 [EMAIL PROTECTED] wrote: Return-Path: [EMAIL PROTECTED] Received: from smtpsrv2.mitre.org ([128.29.154.2]) by mailsrv1.mitre.org (Netscape Messaging Server 4.15) with ESMTP id H530DO00.D41 for [EMAIL PROTECTED]; Mon, 4 Nov 2002 21:32:12 -0500 Received: from avsrv2.mitre.org (avsrv2.mitre.org [128.29.154.4]) by smtpsrv2.mitre.org (8.11.3/8.11.3) with ESMTP id gA52V6t11064 for [EMAIL PROTECTED]; Mon, 4 Nov 2002 21:31:06 -0500 (EST) Received: from lists.samba.org (dp.samba.org [66.70.73.150]) by smtpproxy2.mitre.org (8.11.3/8.11.3) with ESMTP id gA52V4V11133 for [EMAIL PROTECTED]; Mon, 4 Nov 2002 21:31:04 -0500 (EST) Received: from dp.samba.org (localhost [127.0.0.1]) by lists.samba.org (Postfix) with ESMTP id CB5F92C0FC; Mon, 4 Nov 2002 21:30:27 -0500 (EST) Delivered-To: [EMAIL PROTECTED] Received: by lists.samba.org (Postfix, from userid 568) id 8C0192C11F; Mon, 4 Nov 2002 21:27:54 -0500 (EST) Delivered-To: [EMAIL PROTECTED] Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by lists.samba.org (Postfix) with SMTP id 7D71C2C054 for [EMAIL PROTECTED]; Tue, 3 Sep 2002 16:51:21 -0400 (EDT) Received: (qmail 27238 invoked by uid 0); 3 Sep 2002 20:51:20 - Received: from p3e9ed082.dip.t-dialin.net (HELO linux) (62.158.208.130) by mail.gmx.net (mp004-rz3) with SMTP; 3 Sep 2002 20:51:20 - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] MIME-Version: 1.0 Message-ID: 3D753BD1.23602.32AE135@localhost Priority: normal X-mailer: Pegasus Mail for Windows (v4.02) Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Content-description: Mail message body X-Keywords: X-UID: 82 Resent-From: [EMAIL PROTECTED] Resent-Date: Tue, 5 Nov 2002 13:27:54 +1100 Resent-To: [EMAIL PROTECTED] Resent-Message-Id: [EMAIL PROTECTED] Subject: [Samba] Nothing work : Win2k Nethwork path not found Sender: [EMAIL PROTECTED] Errors-To: [EMAIL PROTECTED] X-BeenThere: [EMAIL PROTECTED] X-Mailman-Version: 2.0.13 Precedence: bulk List-Help: mailto:samba-request;lists.samba.org?subject=help List-Post: mailto:samba;lists.samba.org List-Subscribe: http://lists.samba.org/mailman/listinfo/samba, mailto:samba-request;lists.samba.org?subject=subscribe List-Id: General questions regarding Samba samba.lists.samba.org List-Unsubscribe: http://lists.samba.org/mailman/listinfo/samba, mailto:samba-request;lists.samba.org?subject=unsubscribe List-Archive: http://lists.samba.org/pipermail/samba/ X-Original-Date: Tue, 03 Sep 2002 22:46:41 +0200 Date: Tue, 03 Sep 2002 22:46:41 +0200 HI all, ok. I read all the entries of this mailinglist with the subject nethwork path. I try everything but nothing happens. I have no more ideas what i can do. Pleaaa hellp. (I also tried to walk throught document.txt) The problem: -Client Win2k -Server Suse Linux 8.0 with Samba -I completely installed and configured Samba. I walk throught the document of Samba. I tried all steps of the issue to solve problems with samba. But in step, I think 7 the failure appears. I tried to enter net view \\server , but the answer is Network path not found System error 53 -the ping is allright and everything works fine I can see the server in the network neigbourhood but I can't see any folders. -I can log in by the server itself with smbclient. -All deamons work and listen to the right ports. -lmhosts on both machines are right configured. ( The ping : ping server and ping linux worked, but ping linux only send to the client. It looses 100%. -The users are already set. Also the password (both Win2k and Samba without password encrypt). -All rights to access the folders are all rights In the log.nmbd (loglevel 10) I found 2 things: First: master browser not found Second: subnet 192.168.123.157 (--- that should be wrong because the broadcast is 255.255.255.0), but in other steps in the logfile it seems samba has no problem with this So i hope you can understand my problem and perhaps solve it. Please don't say walk thropugh this or this doc. I walk through ALL docs in the net and on the machine. If you need a ogfile of nmbd or smbd I can send it to you. [EMAIL PROTECTED] Thnaks a lot, Carl Here my smb.conf: # Samba config file created using SWAT # from linux (192.168.123.179) # Date: 2002/09/03 22:49:37 # Global parameters [global] workgroup = FIREMUN netbios name = SERVER map to guest = Bad User null passwords = Yes username map = /etc/samba/user.map log
Re: [Samba] Garbage
On Tue, Nov 05, 2002 at 01:59:09PM -0500, William R. Knox wrote: Is Sun really working on a patch for that? The workaround that was on their web site was to use spin locks, but perhaps you have better contacts than I. ;-) Bill Knox Senior Operating Systems Programmer/Analyst The MITRE Corporation They have a patch for it already. Not sure how far into the Solaris past they ported it, or what the patch number is I'm afraid. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] obey pam restrictions and encrypted passwords
Hello everybody, I´m using Red Hat 7.3 with Samba setup as a PDC, and I´m having a doubt. I am studying the directive obey pam restrictions because I would like to limit the number of logins with the same id. The documentation provided by SWAT tells me that encrypted passwords (like used by Windows98SE) will NOT follow these restrictions. Anybody could tell me if this information is really valid? If yes, there is any other way for me to setup Samba PDC server to do not allow more than one login with the same ID? Thanks, = Alceu Rodrigues de Freitas Junior -- [EMAIL PROTECTED] http://www.imortais.cjb.net -- Hell is empty and all the devils are here. -- Wm. Shakespeare, The Tempest ___ Yahoo! GeoCities Tudo para criar o seu site: ferramentas fáceis de usar, espaço de sobra e acessórios. http://br.geocities.yahoo.com/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: samba -- confirmation of subscription -- request 894317
On Tue, 05 Nov 2002 21:02:41 + [EMAIL PROTECTED] wrote: samba -- confirmation of subscription -- request 894317 We have received a request from 213.166.48.35 for subscription of your email address, [EMAIL PROTECTED], to the [EMAIL PROTECTED] mailing list. To confirm the request, please send a message to [EMAIL PROTECTED], and either: - maintain the subject line as is (the reply's additional Re: is ok), - or include the following line - and only the following line - in the message body: confirm 894317 (Simply sending a 'reply' to this message should work from most email interfaces, since that usually leaves the subject line in the right form.) If you do not wish to subscribe to this list, please simply disregard this message. Send questions to [EMAIL PROTECTED] -- Stefaan -- One man alone can be pretty dumb sometimes, but for real bona fide stupidity there ain't nothing can beat teamwork. -- Mark Twain -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba limitations
My company is seriously considering moving our existing NetWare 4.11 file servers to Samba Linux servers (Red Hat 8). Our current servers hold (on average) 400GB of data each (some much more) on various volumes (our largest volume at this time is 400GB). Most of this space is used by multimedia files which are 1GB up to 4GB (yes, for a single file). We have about 200 users who have access to various directories across all of the servers, although we hope to consolidate that by making a separate server(s) for each major department. 1) What kind of limitation (if any) does Samba have in being a file server? By that I mean are there limitations on file sizes, volume sizes, number of files, number of users connected, performance issues, etc. 2) Has anyone found a good way to add space to an existing volume (something easy to do in NetWare) via RAID, stripping or whatever? In other words, I will need to add space in the future by adding a hard drive and spanning an existing volume across that new hard drive. I know I can do it via mount points, but that gets messy, and only adds space to the directory structure in which you mount the new drive, rather than to the entire volume. We will be using RAID 5 (hardware based), but even after adding a drive to the array, you somehow have to expand the volume across the new space. 3) What are the gotchas on file system rights? We do not have a PDC at this time, but when Samba 3.0 is final, would like to use our existing Windows 2000 AD domain (which is not actually used as a domain right now, but only for Exchange/Outlook functionality) to help manage those rights. I would appreciate your feedback. Samba is my file server at home, but that doesn't even compare to what we're looking at here. Any advice, what not to do, etc. is welcome. - Rick. * This email may contain privileged or confidential material intended for the named recipient only. If you are not the named recipient, delete this message and all attachments. Any review, copying, printing, disclosure or other use is prohibited. We reserve the right to monitor email sent through our network. * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Adding user permissions
What exactly are you trying to do? If you change the Unix file permissions this will change immediately without touching Samba. If you are changing the permissions given through smb.conf then a simple 'killall -1 smbd' will force all the running smbds to reread smb.conf without actually interrupting the clients. If you are adding users to global groups then Windoze actually requires that the user logs out and in again to get these new group permissions. HTH Noel -Original Message- From: Mark Matrafajlo [mailto:mark.matrafajlo;diogenesinc.com] Sent: 05 November 2002 20:16 To: [EMAIL PROTECTED] Subject: [Samba] Adding user permissions Is there a way to grant a user rights to a directory without restarting samba ? thx, Mark -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
FW: [Samba] getent not working / winbindd issues
I was looking through all my SaMBa documentation with a fine-tooth comb, and I noticed there is a line in the HOWTO, Section 12.4.3 Pluggable Authentication Modules in the last paragraph it states: PAM is configured by providing control files in the directory /etc/pam.d/ for each of the services that require authentication. When an authentication request is made by an application the PAM code in the C library looks up this control file to determine what modules to load to do the authentication check and in what order. This interface makes adding a new authentication service for Winbind very easy, all that needs to be done is that the pam_winbind.so module is copied to /lib/security/ and the PAM control files for relevant services are updated to allow authentication via winbind. See the PAM documentation for more details. What exactly are the relevant services for SaMBa? I've only been updating the /etc/pam.d/login file. Below is my original question, which remains un-answered and I can't seem to find any solution to it :( Looks like I'll just have to deploy this fileserver with 2 logins, 1 to the domain and 1 to the fileserver :( -SP -Original Message- From: Sean Patrick Ingles Sent: Tuesday, November 05, 2002 10:55 AM To: [EMAIL PROTECTED] Subject: [Samba] getent not working / winbindd issues I first start smbd -D and nmbd -D Then I start winbindd Then I join the domain (smbpasswd -j DOMAIN -r DOMAINCONTROLLER -U Administrator) It works Then I check my Secret (wbinfo -t) and it's good Then I list users and groups (wbinfo -u and wbinfo -g) and it works fine However I still cannot get getent passwd and getent group working, it just lists the local users or groups and hangs... I verified that the libraries were in the /lib folder and symlinked, and here is the output from ldconfig: [root@tux samba]# ldconfig -v | grep winbind libnss_winbind.so - libnss_winbind.so I restarted winbindd and typed getent passwd and it just lists my local passwords and hangs. Nothing is generated in my log.winbindd when I do this either. I am also noticing that _occasionally_ the box will not allow anyone to login until after I kill winbindd and sometimes winbindd locks up most of the processor until I KILL -9 it. uname -a: Linux tux.#.net 2.4.19 #1 Fri Oct 25 15:39:52 EDT 2002 i686 unknown Here is my /etc/nsswitch.conf (abbreviated): passwd: files winbind shadow: files winbind group: files winbind Here is my smb.conf: [global] workgroup = vsionline server string = Samba %v -- TEST -- security = domain password server = vsi-vsi-albany winbind uid = 1-2 winbind gid = 1-2 winbind separator = + winbind cache time = 10 winbind enum users = Yes winbind enum groups = Yes For reference, here is my /etc/pam.d/login: [root@tux pam.d]# cat login #%PAM-1.0 auth required /lib/security/pam_securetty.so auth sufficient /lib/security/pam_winbind.so auth sufficient /lib/security/pam_unix.so use_first_pass auth required /lib/security/pam_stack.so service=system-auth auth required /lib/security/pam_nologin.so accountsufficient /lib/security/pam_winbind.so accountrequired /lib/security/pam_stack.so service=system-auth password required /lib/security/pam_stack.so service=system-auth sessionrequired /lib/security/pam_stack.so service=system-auth sessionoptional /lib/security/pam_console.so [root@tux pam.d]# Any assistance anyone can provide will be much appreciated! -SP === \/ // Sean Patrick Ingles \ / // Jr. Network Engineer \/ ___ // \ / // Vision Systems, Inc. __/ / _/ 142 State Street Albany, NY 12207 www.visionsys.com Landline: +1 518.434.4300 x1406 [EMAIL PROTECTED] Fax: +1 518.434.4304 == -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Swat NOT Working Yet!
On Wed, 2002-11-06 at 03:51, Danny Bradley wrote: I am running RedHat 8.0 and Samba 2.2.6. I already provided a proper xinetd file and appointed port 901 in /etc/services. What am I still missing? For whatever reason, I wasn't able to get to SWAT until I installed Webmin...also, prior to running Webmin and rebooting, I ran /usr/sbin/swat just for giggles and grins - after the reboot, and after getting into Webmin, I was able to get into SWAT via the SERVERS\SAMBA SERVER icon in Webmin... ...same thing happened on my last 7.2 box, and this is a 7.3 box...like I said - for whatever reason...dunno... -- Wed Nov 6 08:50:00 EST 2002 |____ | | / \ /| |'-. | | .\__/ || | | | | _ / `._ \|_|_.-' | | | / \__.`=._) (_ |kuhn media australia | |/ ._/ || |http://kma.0catch.com | |'. `\ | | |stephen kuhn | ;/ / | | |email: [EMAIL PROTECTED] | smk ) /_/| |.---.| |mobile: 0410-728-389 | ' `-`' | If you are not for yourself, who will be for you? If you are for yourself, then what are you? If not now, when? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SWAT is not starting. Please help?
On Wed, 2002-11-06 at 06:07, Danny Bradley wrote: I am running RedHat 8.0 and Samba 2.2.6. I already provided a proper xinetd file and appointed port 901 in /etc/services. What am I still missing? Also, does a log exist which gets updated when swat is attempted? If so, I can look there and see if any error messages are recorded with each SWAT attempt. Try this: From a term, run /usr/sbin/swat (watch what happens) - then attempt to access SWAT via your browser. Otherwise, use Webmin to get to it. -- Wed Nov 6 08:55:01 EST 2002 |____ | | / \ /| |'-. | | .\__/ || | | | | _ / `._ \|_|_.-' | | | / \__.`=._) (_ |kuhn media australia | |/ ._/ || |http://kma.0catch.com | |'. `\ | | |stephen kuhn | ;/ / | | |email: [EMAIL PROTECTED] | smk ) /_/| |.---.| |mobile: 0410-728-389 | ' `-`' | I remember Ulysses well... Left one day for the post office to mail a letter, met a blonde named Circe on the streetcar, and didn't come back for 20 years. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] group privileges on newly created files?
Just curious, I know you can force a creation mask using create mode, but is there any way to enforce under what group ownership a file/directory is created? My users belong to several groups, and I want new files created as owned by a specific group... Thanks in advance, -Rob -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Pour le temps des fêtes, doublez vos ventes !
Cher ami, Ce courriel va changer votre existence. Vous allez être en mesure d'augmenter considérablement vos ventes pour la période des fêtes. Nous vous offrons une solution de marketing direct qui vous permet de rejoindre plus de 200 000 consommateurs québécois ! Cette solution c'est la publicité par courriel l'outil numéro de marketing direct, son prix et son efficacité dépassent toute autre solution publicitaire ! Même si vous n'avez pas de site Internet, la publicité par courriel peut être très efficace pour vous ! Nous avons développé plusieurs campagnes promotionnelles pour des commerçants sans site Internet et les résultats ont été incroyables. Nous offrons des solutions pour aussi peu que 295 $, donc peu importe votre budget vous êtes en mesure de faire de la publicité par courriel pour votre compagnie et d'augmenter considérablement vos ventes ! Nous sommes tellement convaincus que notre solution promotionnelle est rentable, que si vous ne réussissait pas à faire des ventes au moins 3 fois supérieures du montant de la solution que vous choisis, nous vous rembourseront.* Ne perdez plus une seconde contacter nous aujourd'hui pour accroite votre chiffre d'affaire. Cette offre n'est valide que si vous répondez avant vendredi le 8 novembre 2002. Demander Mathieu Tech-Domaine Inc. 514-244-6747 *Certaines conditions s'appliquent pour cette offre de satisfaction, contactez-nous pour tous les détails. ** Ce courriel promotionnel n'est pas du spam. Ci par contre vous pensez que vous avez reçu ce courriel par erreur ou que vous ne désirez plus obtenir de courriel de la liste de diffusion : td-promo_des_fêtes_001 veuillez écrire à [EMAIL PROTECTED] en indiquant clairement dans le sujet remove, tout email ne comportant la mention remove dans le sujet ne seront pas effacé de la liste * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Trouble with groups
This sounds awfully messy Bert. All those mappings might not be necessary. I setup a Samba PDC the other week for a customer and we simply used the 'domain admin group =' parameter like this: domain admin group = admin nkelly root and other samba users This means when I (nkelly) log in on a workstation I have complete control over it. HTH Noel -Original Message- From: Bert Rapp [mailto:bert;rappsonline.com] Sent: 05 November 2002 19:13 To: Samba List Subject: Re: [Samba] Trouble with groups Have I wandered into uncharted territory? They has to be someone out there that can point me in the right direction. Please help me. :) Bert Rapp wrote: I'm having trouble getting myself in to the administrators group. I'm using samba as a domain controller. I have a samba account called administrator. I have these settings in my smb.conf:: domain group map = /etc/samba/groups.mapping domain user map = /etc/samba/domainuser.mapping local group map = /etc/samba/localgroup.mapping This is in my domainuser.mapping to alias the administrator samba account to the linux root account: root = \\NORTHTRAILRV\\Administrator This is in my groups.mapping to alias admins to the Administrators groups admins = Administrators This is the group listing in /etc/group: admins:x:200:root And for fun I have a local group mapping like this: admins = BUILTIN\Administrators For some reason though, when I log on to the domain as administrator, I still do not have permission to change the time or anything else. Does anyone have any suggestions? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] group privileges on newly created files?
Use the sticky bit: chown .omnigroup shareddir chmod g+s shareddir this will make everything created in the shareddir have the group 'omnigroup'. HTH -Original Message- From: Rob Thomas [mailto:rob;electricmail.com] Sent: 05 November 2002 22:52 To: [EMAIL PROTECTED] Subject: [Samba] group privileges on newly created files? Just curious, I know you can force a creation mask using create mode, but is there any way to enforce under what group ownership a file/directory is created? My users belong to several groups, and I want new files created as owned by a specific group... Thanks in advance, -Rob -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ms dfs? What is it?
On Tue, Nov 05, 2002 at 03:09:45PM -0500, David Shapiro wrote: What is msdfs? What can you do with it that you could not do without it? It's a distributed filesystem for Windows, allowing you to split the logical view of shares from the physical locations. You have one top-level DFS share that can be mounted by 95 and newer clients (as far as I know smbclient is not DFS-aware). Within that mounted drive you have folders representing shares on any number of machines. When you open one the appropriate share on the appropriate machine is transparently accessed. It's sort of like mounting shares from several servers at once, but only having one mounted drive to deal with. I think MS-DFS also allows for failover and load balancing, one DFS link can actually point to multiple servers. I think DFS is mentioned in the Samba documentation, and I know MS has it described on their web site. Both of those are probably better than my bird's-eye description. -- Michael Heironimus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 2.2.6 and Winbind
On Samba 2.2.6 and Winbind I used the following command and all are working:/usr/local/samba/bin/wbinfo -u (it did list all win 2000 users)/usr/local/samba/bin/wbinfo -g (it did list all win 2000 groups) root# getent passwd(it list all Linux users)root# getent group (it list all Linux groups)== The problem is. When I am at a Linux command line and I tryto logonto Windows 2000 Server it won 't work. DOMAIN+usernameIn my case it is user logon:WEBOFFICE+biguserpassword: (password entered) It prompt for a password, I enter the password, and it said "invaliduser account." I then log on using just a username and leave out WEBOFFICE user logon: biguser password: (password entered) It still gives me the same errorWhat do I need to do to be able to log onto a Win 2000 server from a Linux computer ?Do you Yahoo!? HotJobs - Search new jobs daily now
Re: [Samba] obey pam restrictions and encrypted passwords
On Wed, 2002-11-06 at 07:52, Alceu Rodrigues de Freitas Jr. wrote: Hello everybody, I´m using Red Hat 7.3 with Samba setup as a PDC, and I´m having a doubt. I am studying the directive obey pam restrictions because I would like to limit the number of logins with the same id. The documentation provided by SWAT tells me that encrypted passwords (like used by Windows98SE) will NOT follow these restrictions. Anybody could tell me if this information is really valid? If yes, there is any other way for me to setup Samba PDC server to do not allow more than one login with the same ID? Encrypted passwords will not obey any restrictions that are set for the 'auth' part of PAM. I just can't work. (What would you send as the password?) However, it can obey restrictions set under account or session, and that is what this option enables. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
RE: [Samba] getent not working / winbindd issues
Sean, You don't actually need PAM for Samba to act as a Windows file server dipping into the NT domain lists with winbindd for authentication. I would remove your PAM configuration stuff and see if that cures it. I run several large Samba servers here which do file/print to domain users. There is no adjusted PAM config. HTH Noel -Original Message- From: Sean Patrick Ingles [mailto:ingless;visionsys.com] Sent: 05 November 2002 20:42 To: [EMAIL PROTECTED] Subject: FW: [Samba] getent not working / winbindd issues I was looking through all my SaMBa documentation with a fine-tooth comb, and I noticed there is a line in the HOWTO, Section 12.4.3 Pluggable Authentication Modules in the last paragraph it states: PAM is configured by providing control files in the directory /etc/pam.d/ for each of the services that require authentication. When an authentication request is made by an application the PAM code in the C library looks up this control file to determine what modules to load to do the authentication check and in what order. This interface makes adding a new authentication service for Winbind very easy, all that needs to be done is that the pam_winbind.so module is copied to /lib/security/ and the PAM control files for relevant services are updated to allow authentication via winbind. See the PAM documentation for more details. What exactly are the relevant services for SaMBa? I've only been updating the /etc/pam.d/login file. Below is my original question, which remains un-answered and I can't seem to find any solution to it :( Looks like I'll just have to deploy this fileserver with 2 logins, 1 to the domain and 1 to the fileserver :( -SP -Original Message- From: Sean Patrick Ingles Sent: Tuesday, November 05, 2002 10:55 AM To: [EMAIL PROTECTED] Subject: [Samba] getent not working / winbindd issues I first start smbd -D and nmbd -D Then I start winbindd Then I join the domain (smbpasswd -j DOMAIN -r DOMAINCONTROLLER -U Administrator) It works Then I check my Secret (wbinfo -t) and it's good Then I list users and groups (wbinfo -u and wbinfo -g) and it works fine However I still cannot get getent passwd and getent group working, it just lists the local users or groups and hangs... I verified that the libraries were in the /lib folder and symlinked, and here is the output from ldconfig: [root@tux samba]# ldconfig -v | grep winbind libnss_winbind.so - libnss_winbind.so I restarted winbindd and typed getent passwd and it just lists my local passwords and hangs. Nothing is generated in my log.winbindd when I do this either. I am also noticing that _occasionally_ the box will not allow anyone to login until after I kill winbindd and sometimes winbindd locks up most of the processor until I KILL -9 it. uname -a: Linux tux.#.net 2.4.19 #1 Fri Oct 25 15:39:52 EDT 2002 i686 unknown Here is my /etc/nsswitch.conf (abbreviated): passwd: files winbind shadow: files winbind group: files winbind Here is my smb.conf: [global] workgroup = vsionline server string = Samba %v -- TEST -- security = domain password server = vsi-vsi-albany winbind uid = 1-2 winbind gid = 1-2 winbind separator = + winbind cache time = 10 winbind enum users = Yes winbind enum groups = Yes For reference, here is my /etc/pam.d/login: [root@tux pam.d]# cat login #%PAM-1.0 auth required /lib/security/pam_securetty.so auth sufficient /lib/security/pam_winbind.so auth sufficient /lib/security/pam_unix.so use_first_pass auth required /lib/security/pam_stack.so service=system-auth auth required /lib/security/pam_nologin.so accountsufficient /lib/security/pam_winbind.so accountrequired /lib/security/pam_stack.so service=system-auth password required /lib/security/pam_stack.so service=system-auth sessionrequired /lib/security/pam_stack.so service=system-auth sessionoptional /lib/security/pam_console.so [root@tux pam.d]# Any assistance anyone can provide will be much appreciated! -SP === \/ // Sean Patrick Ingles \ / // Jr. Network Engineer \/ ___ // \ / // Vision Systems, Inc. __/ / _/ 142 State Street Albany, NY 12207 www.visionsys.com Landline: +1 518.434.4300 x1406 [EMAIL PROTECTED] Fax: +1 518.434.4304 == -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system
Re: [Samba] Samba limitations
On Wed, 2002-11-06 at 08:40, Rick Segeberg wrote: My company is seriously considering moving our existing NetWare 4.11 file servers to Samba Linux servers (Red Hat 8). Our current servers hold (on average) 400GB of data each (some much more) on various volumes (our largest volume at this time is 400GB). Most of this space is used by multimedia files which are 1GB up to 4GB (yes, for a single file). We have about 200 users who have access to various directories across all of the servers, although we hope to consolidate that by making a separate server(s) for each major department. 1) What kind of limitation (if any) does Samba have in being a file server? By that I mean are there limitations on file sizes, volume sizes, number of files, number of users connected, performance issues, etc. Many of these are issues with the filesystem and Linux itself, rather than Samba. As such, using RedHat 8.0 is a good start - it gets you the large file support etc. (So 4GB should not be an issue). Volume sizes depend on the filesystem - I would suggest you get SGI's XFS enabled kernel. 200 users isn't an issue, but you will want to use Samba 2.2.6 for sendfile support. (Increases performance, enable --with-sendfile. Enabled by default in 3.0). If you have a lot of similarly names files, look into the 'mangling method' smb.conf parameter - set to hash2 for better performance, (the new default in 3.0). 2) Has anyone found a good way to add space to an existing volume (something easy to do in NetWare) via RAID, stripping or whatever? In other words, I will need to add space in the future by adding a hard drive and spanning an existing volume across that new hard drive. I know I can do it via mount points, but that gets messy, and only adds space to the directory structure in which you mount the new drive, rather than to the entire volume. We will be using RAID 5 (hardware based), but even after adding a drive to the array, you somehow have to expand the volume across the new space. You will want to look into things like LVM, but I've not used this myself. 3) What are the gotchas on file system rights? We do not have a PDC at this time, but when Samba 3.0 is final, would like to use our existing Windows 2000 AD domain (which is not actually used as a domain right now, but only for Exchange/Outlook functionality) to help manage those rights. Samba 2.2 also supports integration into a Win2k domain, if you need it. The changes with 3.0 just make it use the native Win2k protocols (with subsequent gains in efficiency, kerberos support etc). The XFS kernel from SGI has ACL support, which can mirror most of the NT ACL functionality. There is a patch around for real NT ACLs if you really want them. I would appreciate your feedback. Samba is my file server at home, but that doesn't even compare to what we're looking at here. Any advice, what not to do, etc. is welcome. The big advise is to use the latest release, test, and find the areas where it hurts. Then come back and see what can be done about them. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
Re: [Samba] Cannot access the COMMIT CHANGES tab in SWAT
On Mon, 16 Sep 2002, Mr.George wrote: Dear Linux guru's I am a starter in redhat,i have a problem while configring SAMBA using SWAT.I'm not able to access the COMMIT CHANGES tab in swat which should be close to RESET VALUES and ADVANCED VIEW,to add further i dont even see the COMMIT CHNAGES tab on the screen anywhere,how am i supposed configure samba using swat.I would accept any recommendations.Pls do email me at [EMAIL PROTECTED] regarding your troubleshooting suggestions. Might work better if you log on as root. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] INTERNAL ERROR in nmbd
part of log.nmbd -- standard_fail_register: Failed to register/refresh name GROVE1d on subnet 10.103.102.1 [2002/11/06 00:01:17, 0] lib/fault.c:fault_report(38) === [2002/11/06 00:01:17, 0]lib/fault.c:fault_report(39)INTERNAL ERROR: Signal 11 in pid 912 (2.2.6)Please read the file BUGS.txt in the distribution [2002/11/06 00:01:17, 0] lib/fault.c:fault_report(41) === [2002/11/06 00:01:17, 0] lib/util.c:smb_panic(1094) PANIC: internal error -- this occure after some random time after start, one day... one week... samba configured as wins server and domain controller. if you wish - i can attach config files. __Ury -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Software Development $20-$25 USD per hour!
Dear IT Manager, Have you ever thought of redesigning your website or creating an on-line database, in short anything that has to do with software development; this offer is right for you. Our highly skilled offshore programmers are capable and ready to develop any of your e-commerce software dreams and needs. We develop for ALL WINDOWS AND UNIX PLATFORMS Auctions, Hosting Solutions, Shopping Carts, databases, networks, plus Perl, PHP, C++, ASP, Cold Fusion, Java, Wap, XML, MS Access, SQL, etc. From business analysis and consulting to web design, from coding to testing we provide a full cycle of IT services. Typical rates are $20-$25 per hour. For more complete information about our company and services we provide please visit http://www.smtprogramming.com I will be very glad to answer any of your questions ([EMAIL PROTECTED]). Feel free to contact us any time and all the estimates will be done for you FREE of charge. Thanks! Paul Smirnov -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] problem reading and creating unicode filenames with Samba 3.0alpha20
hey all, i'm having a problem creating foreign-language filenames under Samba 3.0 alpha 20 (on stock redhat 7.3). i would like to be able to open up the share under win2k pro (english version), switch my language to Hebrew, and type in a Hebrew filename. when i do this, the file shows up as the hebrew name until i refresh it, at which point the characters are replaced by question marks. (a ls in the directory on the linux box shows the same thing - all 's) this seems like a unicode issue -- it works fine with another win2k smb server. i thought samba 3.0 sent unicode over the wire by default? anyways, here is the global section of my smb.conf: [global] security = share encrypt passwords = yes server string = samba3 (%v,%h) load printers = no log level = 5 log file = /usr/local/samba/var/log.%m guest account = pcguest hosts allow = 10.0.0 192.168 localhost password level = 2 socket options = TCP_NODELAY share modes = yes locking = yes strict locking = yes keepalive = 30 unicode = yes unix charset = UTF8 dos charset = UCS-2LE i have also tried dos charset = UTF-8 and it did the same thing.. any ideas? thanks, -drew -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ms dfs? What is it?
On Tue, Nov 05, 2002 at 04:39:59PM -0600, Michael Heironimus wrote: It's a distributed filesystem for Windows, allowing you to split the logical view of shares from the physical locations. You have one top-level DFS share that can be mounted by 95 and newer clients (as far [ ... ] But I guess it uses the SMB protocol for the basics? Matt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] cross subnet browsing (win Xp problem)
Hi Daniel Browsing on mixed subnets network cross routers is problem. I dont undestand how is configured your leased line and routers but if your Win98 clients on second network ok see first segment PCs then problem is exatly in XP . You must set only tcpip protocol on XP and workgroup must be some. And wins on XP must be set to samba IP. - Original Message - From: Daniellek [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, November 05, 2002 8:31 PM Subject: [Samba] cross subnet browsing (win Xp problem) I've got to networks connected through leased line, routing set between networks, WINS server running on Samba. There's one primary samba server, and Win98/WinXP clients connected to it. First network with samba server works great with win98 and winxp. Second network also works ok with win98 clients, but when I connect Winxp it can't even open my network places and show all computers on the workgroup. (it dosen't show _any_ computers, just message to contact with administrator of WORKGROUP :-) The same WinXP when connected directly to network with samba server works OK. How can I make this WinXP in other office to see samba server/all computers? -- Daniel Fenert --== [EMAIL PROTECTED] ==-- ==-P o w e r e d--b y--S l a c k w a r e-=-ICQ #37739641-== If you ask the wrong questions you get answers like '42' or 'God'. ===- http://daniel.fenert.net/ -=== +48604628083 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] How to start samba with linux 8.0
Dear sirs, How can I start automaticaly Samba with linux 8.0 not with rcsmb. So it starts automatically on booting I read it on the internet pages some weeks ago but now I can't find it any more. Thank you in advance. Kind regards SW Kisters [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [SAMBA] Retaining ownership of files
Title: RE: [SAMBA] Retaining ownership of files -Original Message- From: Yura Pismerov [mailto:[EMAIL PROTECTED]] Sent: 5. november 2002 15:59 To: Fallsen, Tommy Cc: [EMAIL PROTECTED] Subject: Re: [SAMBA] Retaining ownership of files chown -R group /path/to/the/share chmod -R g+w /path/to/the/share group find /path/to/the/share -type d -exec chmod g+s {} \; In smb.conf you will need only 2 options: create mode = 0664 directory mode = 0775 But all those 60+ developers should be in that group if they also have direct (shell) access to the files. You also should change umask to 002 for their shells. If you want to maintain different groups within the same share/directory you can run the same 3 commands I mentioned but replace share with particular sub-directory name and group with particular group. This setup will allow to maintain proper group ownership on OS level (which takes precedence over Samba setup), so on the Samba level you will only have to take care of the proper modes on the files/directories. I hope this helps. I didn't notice this before, but I found a option inherit permissions, I assume this allows developers to create new dirs without worry about setting setgid on them? Using the settings you provided MS Word docs still would change owner, but not group. I don't see this as a problem, but I have to Make sure the developers know this is how samba behave. Tommy Fallsen [EMAIL PROTECTED] wrote: Hi I want users to edit each other files, but not having the ownership changed at all I.e. user1 create a word doc, user2 can edit it, but the ownership is not changed to user2. force create mode force directory mode force user force group I know of these , but our share have tons of dirs with files that have different users and groups, 60+ developers working together. Are there any new options in 2.2.6 that can fix this? thanks ~ Tommy Fallsen System Administrator Kongsberg Defence Aerospace Email: [EMAIL PROTECTED] TEL: +47 32287783 MOB +47 93057326 WEB: http://www.kongsberg.com/eng/kog/ The information in this e-mail and in any attachments is confidential and intended solely for the attention and use of the named addressee(s). This information may be subject to legal, professional or other privilege and further distribution of it is strictly prohibited without our authority. If you are not the intended recipient, you are not authorised to and must not disclose, copy, distribute, or retain this message or any part of it, and should notify us immediately.
RE: [samba] - servers keeps disapearing
Title: RE: [samba] - servers keeps disapearing -Original Message- From: Christopher Odenbach [mailto:[EMAIL PROTECTED]] Sent: 4. november 2002 09:29 To: Fallsen, Tommy Cc: [EMAIL PROTECTED] Subject: Re: [samba] - servers keeps disapearing Hi, Is there a known problem with samba servers that keeps disappearing from network neighborhood? Had this problem with 2.2.3, have to restart nmbd to get them back on, but nmbd never stops. Yes - there _was_ a known problem with nmbd not reregistering names. Has disappeared since 2.2.5. Greetings, Christopher -- == Dipl.-Ing. Christopher Odenbach HNI Rechnerbetrieb [EMAIL PROTECTED] Tel.: +49 5251 60 6215 == I run 2.2.5 on a server and nmbd shuts down after a few days. Happends on earlier versions too. Anyone else have this problem or does it only occur on Solaris? Tommy Fallsen
Re: Fallout from the MS Anti-Trust decision.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Monday 04 Nov 2002 6:49 pm, Richard Sharpe wrote: I suspect that MS has lots of problems on their hands. There is a steam roller of open source coming at them all over the world, and they have grown big and bloated and unable to move swiftly. Not just open source, but reluctance from business to buy the latest Windows and Office products, reluctance from customers to upgrade constantly, complete failure of the XBox, losing out in the set-top-box market, not making any inroads into mobile phones. I am sure I could go on. It's not just Open Source either. Don't forget that there are other technologies out there that can help in the fight against the Borg.. J2EE for instance is way better than .NOT. I say, lets just continue to make it easier for people to get off NT and onto Samba on UNIX :-) I could not agree more. Active Directory is the biggest enemy here. As long as a site feels the need to base itself around AD, Windows desktops, Servers and closed proprietry software solutions will follow. This closes and bolts the door to better solutions. - -- Barry Dean Senior Computing Officer Computing Service, University of Kent -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE9x5aX63PGDezn6TQRAs6IAJ9HKL2wzHmwYLJ+vu9gbb/Ev43C6ACg0uDE 1kIOdRf9HwjDB/pIgDqB2gM= =Ramc -END PGP SIGNATURE-
net rpc vampire migration
I've just downloaded HEAD from cvs and code is currently under compilation on my personal testing box (no hardware at work, it s a pity ...) Just one question while my P200 is under heavy load : does the vampire code allow a migration of computer accounts ? this is the last missing feature for a complete -needed- migration of our LAN. We wan't to 1. 'clone' the NT-PDC info a Samba [3.0] PDC 2. shutdown the NT-PDC without any modification (if possible) on domain members workstation Does the vampire code (will) allow this ? We can do testing / report and contribute to the release of 3.0 ! thx G. [EMAIL PROTECTED] wrote on [EMAIL PROTECTED] : In the Roadmap to 3.0, we can see that this script need some testing before release. As this kind of migration is the last issue with to cope with before migration of our complete lan, I can contribute to testing ! But I can't find this script in 3.0a20 nor via cvsweb (just a *quick* look sorry) Is there anyone who * has tested the script * know where I can find it ? Volker Lendecke is responsible for this and it is known as net rpc vampire in the HEAD branch. Please coordinate testing, reports, etc... on the samba-technical list (since the feature is still under development). Thanks.
PLEASE HELP! samba2.2.6rc2cvs - solaris winbind pam - using user nobody instead of domain user
Hello, Used /usr/ccs/bin ld, as, make (solaris 8) and 2.95.3 20010315 (release) I installed samba 2.2.6rc2cvs with cd /usr/local/samba/source env CFLAGS=-Wall -m32 -g ./configure \ --with-winbind \ --with-winbind-auth-challenge \ --with-acl-support \ --with-ssl \ --without-sendfile-support \ --with-included-popt \ --with-pam \ --with-smbwrapper make make install ln -s /usr/local/samba/source/nsswitch/libnss_winbind.so /usr/lib/libnss_winbind.so.1 ln -s /usr/local/samba/source/nsswitch/libnss_winbind.so /usr/lib/libnss_winbind.so.2 ln -s /usr/local/samba/source/nsswitch/libnss_winbind.so /usr/lib/nss_winbind.so.1 ln -s /usr/local/samba/source/nsswitch/libnss_winbind.so /usr/lib/nss_winbind.so.2 ln -s /usr/local/samba/source/nsswitch/pam_winbind.so /usr/lib/security/pam_winbind.so crle -l /usr/j2se/jre/lib/sparc -i /usr/j2se/lib/sparc -l /usr/lib -i /usr/lib -l /usr/local/lib -i /usr/local/lib -l /usr/local/ssl/lib -i /usr/local/ssl/lib -i /usr/lib/security -s /usr/lib/security -i /usr/lib/secure -s /usr/lib/security crle -64 -l /usr/lib/64 -i /usr/lib/64 -s /usr/lib/64/secure pam.conf: login auth sufficient /usr/lib/security/$ISA/pam_winbind.so login auth required /usr/lib/security/$ISA/pam_unix.so.1 login auth required /usr/lib/security/$ISA/pam_dial_auth.so.1 # rlogin auth sufficient /usr/lib/security/$ISA/pam_rhosts_auth.so.1 rlogin auth required /usr/lib/security/$ISA/pam_unix.so.1 # dtlogin auth required /usr/lib/security/$ISA/pam_unix.so.1 # rsh auth required /usr/lib/security/$ISA/pam_rhosts_auth.so.1 other auth required /usr/lib/security/$ISA/pam_unix.so.1 # # Account management # login account sufficient /usr/lib/security/$ISA/pam_winbind.so login account requisite /usr/lib/security/$ISA/pam_roles.so.1 login account required/usr/lib/security/$ISA/pam_projects.so.1 login account required/usr/lib/security/$ISA/pam_unix.so.1 # dtlogin account requisite /usr/lib/security/$ISA/pam_roles.so.1 dtlogin account required/usr/lib/security/$ISA/pam_projects.so.1 dtlogin account required/usr/lib/security/$ISA/pam_unix.so.1 # other account sufficient /usr/lib/security/$ISA/pam_winbind.so other account requisite /usr/lib/security/$ISA/pam_roles.so.1 other account required/usr/lib/security/$ISA/pam_projects.so.1 wbinfo -a INS+DavidSha%password (password was my password) returns: plaintext password authentication succeeded However, smbclient //optimus/samba-lib -UINS+DavidSha%password fails: added interface ip=10.1.1.234 bcast=10.1.1.255 nmask=255.255.255.0 added interface ip=127.0.0.1 bcast=127.0.0.255 nmask=255.255.255.0 Got a positive name query response from 10.1.4.11 ( 10.1.1.234 ) Domain=[INS] OS=[Unix] Server=[Samba 2.2.6rc2cvs] tree connect failed: NT_STATUS_WRONG_PASSWORD log.optimus shows it tryint to log in with the user nobody: er_in_list: checking user nobody in list INS+JamesF INS+DavidSha nobody [2002/11/05 09:39:24, 10] lib/username.c:user_in_list(460) user_in_list: checking user |nobody| against |INS+JamesF| [2002/11/05 09:39:24, 10] lib/username.c:user_in_list(460) user_in_list: checking user |nobody| against |INS+DavidSha| [2002/11/05 09:39:24, 10] lib/username.c:user_in_list(460) user_in_list: checking user |nobody| against |nobody| [2002/11/05 09:39:24, 10] lib/username.c:user_in_list(466) user_in_list: user |nobody| matches |nobody| [2002/11/05 09:39:24, 2] smbd/service.c:make_connection(331) Invalid username/password for samba-lib [nobody] [2002/11/05 09:39:24, 3] smbd/error.c:error_packet(110) error packet at smbd/reply.c(166) cmd=117 (SMBtconX) NT_STATUS_WRONG_PASSWORD The smb.conf: Global parameters [global] coding system = client code page = 850 code page directory = /usr/local/samba/lib/codepages workgroup = INS netbios name = OPTIMUS netbios aliases = netbios scope = server string = Samba %v on (%L) interfaces = 10.1.1.234/24 127.0.0.1/24 bind interfaces only = Yes security = DOMAIN encrypt passwords = Yes update encrypted = No allow trusted domains = Yes hosts equiv = min passwd length = 5 map to guest = Never null passwords = No obey pam restrictions = Yes password server = PDC,EXCHANGE_CORP smb passwd file = /usr/local/samba/private/smbpasswd root directory = pam password change = No passwd program = /usr/bin/passwd passwd chat = *new*password* %n\n *new*password* %n\n *changed* passwd chat debug = No username map = password level = 0 username level = 0 unix password sync = No restrict anonymous = No lanman auth = Yes use rhosts = No admin log = No log level = 10 syslog = 1 syslog only = No log file = /usr/local/samba/var/log.%m max
Re: net rpc vampire migration
On Tue, Nov 05, 2002 at 03:08:42PM +0100, Guillaume LACHENAL wrote: does the vampire code allow a migration of computer accounts ? Yes, that is exactly the idea. To use it, make sure that all your scripts like add machine script add user script add group script etc are all set correct and working. Hmmm. I need to write a HOWTO on this :-) Volker msg04272/pgp0.pgp Description: PGP signature
PLEASE HELP! samba2.2.6rc2cvs - solaris winbind pam - using user nobody instead of domain user (additional info at top of this message)
Sorry, I forgot to mention that getent passwd and getent group do work (i.e., winbind answers). Of course, the problem where large groups like Domain Users do not return users or even mention of the existence of the group still exists. -Original Message- From: David Shapiro Sent: Tuesday, November 05, 2002 9:45 AM To: '[EMAIL PROTECTED]' Subject: PLEASE HELP! samba2.2.6rc2cvs - solaris winbind pam - using user nobody instead of domain user Hello, Used /usr/ccs/bin ld, as, make (solaris 8) and 2.95.3 20010315 (release) I installed samba 2.2.6rc2cvs with cd /usr/local/samba/source env CFLAGS=-Wall -m32 -g ./configure \ --with-winbind \ --with-winbind-auth-challenge \ --with-acl-support \ --with-ssl \ --without-sendfile-support \ --with-included-popt \ --with-pam \ --with-smbwrapper make make install ln -s /usr/local/samba/source/nsswitch/libnss_winbind.so /usr/lib/libnss_winbind.so.1 ln -s /usr/local/samba/source/nsswitch/libnss_winbind.so /usr/lib/libnss_winbind.so.2 ln -s /usr/local/samba/source/nsswitch/libnss_winbind.so /usr/lib/nss_winbind.so.1 ln -s /usr/local/samba/source/nsswitch/libnss_winbind.so /usr/lib/nss_winbind.so.2 ln -s /usr/local/samba/source/nsswitch/pam_winbind.so /usr/lib/security/pam_winbind.so crle -l /usr/j2se/jre/lib/sparc -i /usr/j2se/lib/sparc -l /usr/lib -i /usr/lib -l /usr/local/lib -i /usr/local/lib -l /usr/local/ssl/lib -i /usr/local/ssl/lib -i /usr/lib/security -s /usr/lib/security -i /usr/lib/secure -s /usr/lib/security crle -64 -l /usr/lib/64 -i /usr/lib/64 -s /usr/lib/64/secure pam.conf: login auth sufficient /usr/lib/security/$ISA/pam_winbind.so login auth required /usr/lib/security/$ISA/pam_unix.so.1 login auth required /usr/lib/security/$ISA/pam_dial_auth.so.1 # rlogin auth sufficient /usr/lib/security/$ISA/pam_rhosts_auth.so.1 rlogin auth required /usr/lib/security/$ISA/pam_unix.so.1 # dtlogin auth required /usr/lib/security/$ISA/pam_unix.so.1 # rsh auth required /usr/lib/security/$ISA/pam_rhosts_auth.so.1 other auth required /usr/lib/security/$ISA/pam_unix.so.1 # # Account management # login account sufficient /usr/lib/security/$ISA/pam_winbind.so login account requisite /usr/lib/security/$ISA/pam_roles.so.1 login account required/usr/lib/security/$ISA/pam_projects.so.1 login account required/usr/lib/security/$ISA/pam_unix.so.1 # dtlogin account requisite /usr/lib/security/$ISA/pam_roles.so.1 dtlogin account required/usr/lib/security/$ISA/pam_projects.so.1 dtlogin account required/usr/lib/security/$ISA/pam_unix.so.1 # other account sufficient /usr/lib/security/$ISA/pam_winbind.so other account requisite /usr/lib/security/$ISA/pam_roles.so.1 other account required/usr/lib/security/$ISA/pam_projects.so.1 wbinfo -a INS+DavidSha%password (password was my password) returns: plaintext password authentication succeeded However, smbclient //optimus/samba-lib -UINS+DavidSha%password fails: added interface ip=10.1.1.234 bcast=10.1.1.255 nmask=255.255.255.0 added interface ip=127.0.0.1 bcast=127.0.0.255 nmask=255.255.255.0 Got a positive name query response from 10.1.4.11 ( 10.1.1.234 ) Domain=[INS] OS=[Unix] Server=[Samba 2.2.6rc2cvs] tree connect failed: NT_STATUS_WRONG_PASSWORD log.optimus shows it tryint to log in with the user nobody: er_in_list: checking user nobody in list INS+JamesF INS+DavidSha nobody [2002/11/05 09:39:24, 10] lib/username.c:user_in_list(460) user_in_list: checking user |nobody| against |INS+JamesF| [2002/11/05 09:39:24, 10] lib/username.c:user_in_list(460) user_in_list: checking user |nobody| against |INS+DavidSha| [2002/11/05 09:39:24, 10] lib/username.c:user_in_list(460) user_in_list: checking user |nobody| against |nobody| [2002/11/05 09:39:24, 10] lib/username.c:user_in_list(466) user_in_list: user |nobody| matches |nobody| [2002/11/05 09:39:24, 2] smbd/service.c:make_connection(331) Invalid username/password for samba-lib [nobody] [2002/11/05 09:39:24, 3] smbd/error.c:error_packet(110) error packet at smbd/reply.c(166) cmd=117 (SMBtconX) NT_STATUS_WRONG_PASSWORD The smb.conf: Global parameters [global] coding system = client code page = 850 code page directory = /usr/local/samba/lib/codepages workgroup = INS netbios name = OPTIMUS netbios aliases = netbios scope = server string = Samba %v on (%L) interfaces = 10.1.1.234/24 127.0.0.1/24 bind interfaces only = Yes security = DOMAIN encrypt passwords = Yes update encrypted = No allow trusted domains = Yes hosts equiv = min passwd length = 5 map to guest = Never null passwords = No obey pam restrictions = Yes password server = PDC,EXCHANGE_CORP smb passwd file = /usr/local/samba/private/smbpasswd root directory = pam password change = No passwd program =
Re: net rpc vampire migration
as 3.0 is still in alpha state, do you think is there a way to use 'net rpc vampire' from 3.0 on samba 2.2.6 ? thanks Volker Lendecke [EMAIL PROTECTED] 11/05/02 15:53 Please respond to Volker.Lendecke To: Guillaume LACHENAL [EMAIL PROTECTED] cc: [EMAIL PROTECTED] Subject:Re: net rpc vampire migration On Tue, Nov 05, 2002 at 03:08:42PM +0100, Guillaume LACHENAL wrote: does the vampire code allow a migration of computer accounts ? Yes, that is exactly the idea. To use it, make sure that all your scripts like add machine script add user script add group script etc are all set correct and working. Hmmm. I need to write a HOWTO on this :-) Volker atte2x0n.dat Description: Binary data
Re: net rpc vampire migration
On Tue, Nov 05, 2002 at 04:58:36PM +0100, Guillaume LACHENAL wrote: as 3.0 is still in alpha state, do you think is there a way to use 'net rpc vampire' from 3.0 on samba 2.2.6 ? No, not possible. That's really a 3.0 only feature. Volker msg04276/pgp0.pgp Description: PGP signature
net rpc getsid
In case of a PDC migration, when doing 'net rpc getsid', what's about users/computers authentication if two DC with the same SID are up on the network ?
smbfs missing files
I try to get a list of all of about 19,000 directories, and then in each of these, a few hundred files. It seems to just not see some of the directories and some of the files when it goes through. Have you tried one of the other clients (jcifs or smbclient or the Linux cifs vfs) to see if it can display those files? Do any of the filenames/patch components (that do not display) contain international characters above 128 decimal? Can the missing directory/file be displayed individually (e.g. by stat filename or ls filename)? Steve French Senior Software Engineer Linux Technology Center - IBM Austin phone: 512-838-2294 email: [EMAIL PROTECTED]
Re: net rpc vampire migration
On Tue, 5 Nov 2002, Guillaume LACHENAL wrote: I've just downloaded HEAD from cvs and code is currently under compilation on my personal testing box (no hardware at work, it s a pity ...) Just one question while my P200 is under heavy load : does the vampire code allow a migration of computer accounts ? That is what it is for. You might also be interested in the profiles tool I put up recently which seems to allow you to fix NTUSER.DAT so that it has the correct SIDs. Regards - Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], http://www.richardsharpe.com
Re: smbfs missing files
On Tue, 5 Nov 2002, Jeff Ames wrote: This sounds like the same problem as the bug reports 21471, 21407, 21561, and 21694 discuss, but I couldn't find a solution anywhere. I'm just I guess I should update those... writing to add a data point, and also to ask whether there is any known fix or workaround for this at the time. If this would be better submitted as a bug report instead of this list, please let me know. There is a known problem with win2k listings. It doesn't like us using the continue bit at all. You should be able to trigger this with smbclient too. Try this patch for 2.4.19 http://www.hojdpunkten.ac.se/054/samba/smbfs-2.4.19-rc1-ALL.patch.gz It changes smbfs to use the same method as win2k does when listing files on another win2k machine (there is a lot of other stuff in there too, including 2G files and unicode). Note that there is a known report of this breaking listings vs NT4, which is why the change hasn't been made in the official kernel yet. I have been meaning to compare what win2k sends to and NT4 when listing and see if it does anything differently from win2k-win2k. I guess it could be a NT4/non-unicode-client issue. /Urban
Re: net rpc vampire migration
On Tue, Nov 05, 2002 at 08:36:44AM -0800, Tim Potter wrote: If you can get net rpc vampire to spit out a smbpasswd file then that could be used with a Samba 2.2 environment. For that pwdump is easier. The problem is 2.2 will kill your RID's. That's the hole point of vampire in 3.0 Volker msg04282/pgp0.pgp Description: PGP signature
Re: net rpc vampire migration
Richard, do you confirm NTUSER.DAT files works ok after that change? Simo. On Tue, 2002-11-05 at 18:56, Richard Sharpe wrote: On Tue, 5 Nov 2002, Guillaume LACHENAL wrote: I've just downloaded HEAD from cvs and code is currently under compilation on my personal testing box (no hardware at work, it s a pity ...) Just one question while my P200 is under heavy load : does the vampire code allow a migration of computer accounts ? That is what it is for. You might also be interested in the profiles tool I put up recently which seems to allow you to fix NTUSER.DAT so that it has the correct SIDs. Regards - Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], http://www.richardsharpe.com -- Simo Sorce - [EMAIL PROTECTED] Xsec s.r.l. via Durando 10 Ed. G - 20158 - Milano tel. +39 02 2399 7130 - fax: +39 02 700 442 399 signature.asc Description: This is a digitally signed message part
Re: net rpc vampire migration
On Tue, 5 Nov 2002, Simo Sorce wrote: Richard, do you confirm NTUSER.DAT files works ok after that change? Seems to work for me. I changed my Server's name, rejoined, ran the program and changed both the OWNER and GROUP SID, and it seemed to work. I want to try it again, but you could try it as well. Simo. On Tue, 2002-11-05 at 18:56, Richard Sharpe wrote: On Tue, 5 Nov 2002, Guillaume LACHENAL wrote: I've just downloaded HEAD from cvs and code is currently under compilation on my personal testing box (no hardware at work, it s a pity ...) Just one question while my P200 is under heavy load : does the vampire code allow a migration of computer accounts ? That is what it is for. You might also be interested in the profiles tool I put up recently which seems to allow you to fix NTUSER.DAT so that it has the correct SIDs. Regards - Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], http://www.richardsharpe.com -- Regards - Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], http://www.richardsharpe.com
Re: smbfs missing files
Have you tried one of the other clients (jcifs or smbclient or the Linux cifs vfs) to see if it can display those files? Not yet. Is there any way to do scripting in smbclient? Something along the lines of (in bash): (for ((i=0;i1000;++i)); do /bin/ls|wc -l;done)|sort -n|uniq -c Do any of the filenames/patch components (that do not display) contain international characters above 128 decimal? No. I've had problems with, for example, directories of the form archN, N=some number between 1 and 60, and with files of the form runN.ns, N=number between 1 and 600. Can the missing directory/file be displayed individually (e.g. by stat filename or ls filename)? No It doesn't consistently miss a certain file. It just seems to randomly skip a few here and there. If I just 'ls' a directory once, everything has shown up so far. If I run 'ls' 1000 times, I usually get all the files. But if I keep running 'ls' 1000 times, I eventually get something like 910 listings with everything, and 90 listings missing 6 files. It seems that when doing this 'ls' loop, the ones that miss files occur together. In a recent test, I got iterations 83 through 269 counting 4 fewer files than they should've, but all the rest were fine. I got one such segment that lasted about four seconds (123 iterations miscounted). It seems that it doesn't last much longer than that, when it does occur. It also seems highly likely that they're missing the same files, within one of the segments, since they all show the same (wrong) number of files. Jeff
Re: net rpc vampire migration
On Tue, 5 Nov 2002, Volker Lendecke wrote: On Tue, Nov 05, 2002 at 08:36:44AM -0800, Tim Potter wrote: If you can get net rpc vampire to spit out a smbpasswd file then that could be used with a Samba 2.2 environment. For that pwdump is easier. The problem is 2.2 will kill your RID's. That's the hole point of vampire in 3.0 Hmmm, so what backend do you need to be using to preserve the RIDs? Regards - Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], http://www.richardsharpe.com
Re: net rpc vampire migration
On Wed, Nov 06, 2002 at 05:18:55AM +1030, Richard Sharpe wrote: Hmmm, so what backend do you need to be using to preserve the RIDs? A 'rich' one, ie currently tdb or ldap, probably mysql as well. Volker msg04287/pgp0.pgp Description: PGP signature
Samba Help !!!
Hi, I am trying to use samba 2.2.6 (Under RedHat 7.3) to replace a NT file server. But I would like to have the folder and file security as offered by NT. I also like to validate the domain users via NT 4.0 SP6a domain. I am having hard time making it work. Please help. My smb.conf file looks like this. [global] workgroup = AMSIDOMN netbios name = ISLINUX ; allow trusted domains = yes ; nt acl support = yes server string = Test Server %v log file = /var/log/samba/log.%m max log size = 50 security = domain password server = * encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy = no large readwrite = Yes # Share Definitions == [data] comment = Data Folder path = /usr/data read only = no create mask = 0765 directory mask = 0777 delete readonly = yes writable = yes Samba server joined the NT domain successfully. I can view the samba server and the data folder but it still asks me for user name and password when I am trying to access the data folder. I would like to maintain the user name and password only on NT domain controller. Also I would like to optimize this samba server for Microsoft network. I am not sure what I am doing wrong. Forgive me, I am a new user as far as samba and Linux goes. Thanks in advance, Rana Huq
Re: samba-technical -- confirmation of subscription -- request 315311
On Tue, 05 Nov 2002 21:03:12 + [EMAIL PROTECTED] wrote: samba-technical -- confirmation of subscription -- request 315311 We have received a request from 213.166.48.35 for subscription of your email address, [EMAIL PROTECTED], to the [EMAIL PROTECTED] mailing list. To confirm the request, please send a message to [EMAIL PROTECTED], and either: - maintain the subject line as is (the reply's additional Re: is ok), - or include the following line - and only the following line - in the message body: confirm 315311 (Simply sending a 'reply' to this message should work from most email interfaces, since that usually leaves the subject line in the right form.) If you do not wish to subscribe to this list, please simply disregard this message. Send questions to [EMAIL PROTECTED] -- Stefaan -- One man alone can be pretty dumb sometimes, but for real bona fide stupidity there ain't nothing can beat teamwork. -- Mark Twain
recent python changes
hi, a very small fix for the Makefile... bye, guenther -- Guenther Deschner [EMAIL PROTECTED] SuSE Linux AGGnuPG: 8EE11688 Berliner Str. 27 phone: +49 (0) 30 / 430944778 D-13507 Berlin fax: +49 (0) 30 / 43732804 --- Makefile.in 2002-11-05 22:28:04.0 +0100 +++ Makefile.in 2002-11-05 22:28:08.0 +0100 @@ -917,7 +917,7 @@ echo Use the option --with-python to configure python; \ exit 1; fi PYTHON_OBJS=$(PYTHON_OBJS) PYTHON_CFLAGS=$(CFLAGS) $(CPPFLAGS) $(FLAGS) \ -x1 LIBS=$(LIBS) \ + LIBS=$(LIBS) \ $(PYTHON) python/setup.py build python_install: $(PYTHON_OBJS) msg04293/pgp0.pgp Description: PGP signature
Re: recent python changes
On Tue, Nov 05, 2002 at 10:31:51PM +0100, Guenther Deschner wrote: a very small fix for the Makefile... -x1 LIBS=$(LIBS) \ + LIBS=$(LIBS) \ Thanks - you can tell I'm an emacs user and that my control key doesn't work very well. (-: Tim.
Problems with map hidden (and possibly map system)
Hi all, I encountered a problem with map hidden a week or two ago and posted a patch to fix the problem. However, it appears that it slipped under radar as I didn't receive any comments (either positive or negative). So I'm reposting the information, hopefully with a clearer explanation. Summary: The problem arrises on shares with map hidden enabled when an NTCreate message is sent and the file already exists, but the NTCreate specifies the opposite value for hidden as the current file. Detailed description: = I came across this problem when I enabled map hidden on a profiles share. When copying hidden files to the profiles share, XP does the following: 1. An NTCreate message is sent to the server with the hidden bit NOT set, with the file name set to a temporary file. 2. The NTCreate succeeds, and the appropriate message is returned to the client. 3. The client sends a close message to the server, and the file is closed. 4. The client then sends another NTCreate message to the server, passing in the same file name, but with the the hidden bit SET. (The server is instructed to truncate the file if it already exists). Step 4 fails on the samba server because the existing file has a different set of attributes to that requested. In open_file_shared1 in smbd/open.c, there is a check performed when the file already exists to compare the attributes, and this test is failing. I've attached a patch that attempts to change the attributes on an NTCreate when the TRUNCate flag is set, and only if the attribute change fails does the NTCreate fail. I'm using the patch in a 2.2.6 system without any problems. I haven't tested this in 3, but the code is identical in smbd/open.c in the relevant section. Can someone have a look at the attached patch (against 2.2.6) to check if it is the correct solution. If there are any problems please let me know. BTW, if anyone would like a look, I can send a packet dump that shows XP doing the above sequence of steps. Looking forward to receiving feedback. Thanks Glen Gibb Ridley College PS. Is there an ideal format for sending in bug reports/patches? --- open.c.orig Sat Oct 26 21:14:11 2002 +++ open.c Sat Oct 26 21:14:21 2002 -822,11 +822,13 /* We only care about matching attributes on file exists and truncate. */ if (file_existed (GET_FILE_OPEN_DISPOSITION(ofun) == FILE_EXISTS_TRUNCATE)) { if (!open_match_attributes(conn, fname, psbuf-st_mode, mode)) { - DEBUG(5,(open_file_shared: attributes missmatch for file %s (0%o, 0%o)\n, - fname, psbuf-st_mode, mode )); - file_free(fsp); - errno = EACCES; - return NULL; + if (vfs_chmod(conn,fname,mode) != 0) { + DEBUG(5,(open_file_shared: attributes missmatch for +file %s (0%o, 0%o)\n, + fname, psbuf-st_mode, mode +)); + file_free(fsp); + errno = EACCES; + return NULL; + } } }
Re: Problems with map hidden (and possibly map system)
On Wed, Nov 06, 2002 at 10:25:50AM +1100, Glen Gibb wrote: Hi all, I encountered a problem with map hidden a week or two ago and posted a patch to fix the problem. However, it appears that it slipped under radar as I didn't receive any comments (either positive or negative). So I'm reposting the information, hopefully with a clearer explanation. Summary: The problem arrises on shares with map hidden enabled when an NTCreate message is sent and the file already exists, but the NTCreate specifies the opposite value for hidden as the current file. Detailed description: = I came across this problem when I enabled map hidden on a profiles share. When copying hidden files to the profiles share, XP does the following: 1. An NTCreate message is sent to the server with the hidden bit NOT set, with the file name set to a temporary file. 2. The NTCreate succeeds, and the appropriate message is returned to the client. 3. The client sends a close message to the server, and the file is closed. 4. The client then sends another NTCreate message to the server, passing in the same file name, but with the the hidden bit SET. (The server is instructed to truncate the file if it already exists). Step 4 fails on the samba server because the existing file has a different set of attributes to that requested. In open_file_shared1 in smbd/open.c, there is a check performed when the file already exists to compare the attributes, and this test is failing. Have you tested this against a Windows 2000 or XP server ? What is the behavior there ? Jeremy.
Re: Problems with map hidden (and possibly map system)
Have you tested this against a Windows 2000 or XP server ? What is the behavior there ? No, sorry. I don't have access to a 2k/XP server (at least not for at a month or so). Glen
Re: Problems with map hidden (and possibly map system)
On Wed, 6 Nov 2002, Glen Gibb wrote: Have you tested this against a Windows 2000 or XP server ? What is the behavior there ? No, sorry. I don't have access to a 2k/XP server (at least not for at a month or so). I've done a little more testing (between a Win2K and an NT4 server at a site that I don't manage), and I can cofirm that this is a Samba only problem. New Test Case: == 1. Create a file on a local drive 2. Copy the file to the server (eg. by dragging). 3. Change the hidden attribute of the local file 4. Copy file to server 5. A message will appear asking if you want to replace the file. Say yes Copying from 2k to NT works fine. Copying from 2k to Samba with map hidden = no works fine Copying from 2k to Samba with map hidden = yes FAILS (ps. make sure the create mask doesn't clear the world execute bit). Hope this helps. Glen
Issue with Samba CVS HEAD configure on Solaris
I ran into an issue running the configure script on a Solaris box with the Sun C compiler (Sun WorkShop 6 update 2 C 5.3 Patch 111679-08 2002/05/09). Here is what happens (when trying to get a shared library): The problem is apparantly that the SUNWspro C compiler does not allow the output file of a compilation to have an arbitrary extension (.po in this case). With GCC it works perfectly. During the configure execution, the following message is displayed: --- START checking ability to build shared libraries... true checking linker flags for shared libraries... -G ${CFLAGS} checking compiler flags for position-independent code... checking whether building shared libraries actually works... cc: illegal suffix of output filename no --- END The commands that are executed during the test whether building shared libraries actually works are: --- START install location/SUNWspro/bin/cc -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -O -g -KPIC -c -o shlib.po ./tests/shlib.c install location/SUNWspro/6.2.0p7/exec/SUNWspro/bin/cc -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -O -g -G -O -g -o shlib.so shlib.po --- END Has anyone else ran into this problem, and is this just an option I overlooked or is the indeed an issue where configuring and compiling Samba CVS HEAD is not at all possible with the Sun Workshop C compiler because of the above problem? I guess it would be possible to simply rewrite the logic for handling shared libraries to work around this silly issue? Kris
Re: WindowsXP Pro. can't acccess to SAMBA act as PDC!!
On Tue, 2002-11-05 at 22:09, werachat sittiparsong wrote: this is not samba support this is samba-technical (for technical discussion about samba internals) this message belongs on [EMAIL PROTECTED] Dear Samba support so i've provided Samba act as PDC for Domain logon from Windows98SE clients for logon to that domian,itz work ass well but for my problem with WindowXP Pro. can't logon through SAMBA act as PDC. this is probably the signorseal problem you need to apply the reg file to your xp clients. google for signorseal for more info brad
samba-head bug relating to windows special chars (1/2)
Hi, I have been tracking down a problem with profiles that was reported last year to do with names like '31/2 Floppy (A).lnk' where 1/2 is the special character that shows up as 1/2 under Windows. This problem does not occur with Linux and Samba 2.0.7, and does not occur with Samba-head and Slowaris or FreeBSD, however, it does it occur with Linux (RedHat 7.2) and samba-head. The problem occurs when server_push is called to transfer the name to the response as a UNICODE string. However, while the string is fully in the buffer, for some reason, there is a 0x00 0x00 right after the 0x33 0x00 inserted for the 3. Now investigating why server_push is screwing the string up. Regards - Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], http://www.richardsharpe.com
»ý»ýÇÑ ÈÁú·Î Æ÷¸£³ë»çÀÌÆ®¸¦ ¼Ò°³Çص帳´Ï´Ù
°íÇ°°Ý Æ÷¸£³ë»çÀÌÆ® ¶±°ÉÀ» ¼Ò°³ÇÕ´Ï´Ù. »ý»ýÇÑ ÈÁú·Î ¼ºÀλçÀÌÆ®¸¦ ¿©·¯ºÐ¿¡°Ô ¼Ò°³Çص帳´Ï´Ù. º» ¸ÞÀÏÀº Á¤º¸Åë½ÅºÎ ±Ç°í »çÇ׿¡ ÀÇ°Å Á¦¸ñ¿¡ [±¤°í]¶ó Ç¥½ÃµÈ ±¤°í ¸ÞÀÏÀÔ´Ï´Ù. ¼ö½Å°ÅºÎ ¹öÆ°À» Ŭ¸¯ÇÏ½Ã¸é ¼ö½Å°ÅºÎ󸮰¡ ÀÌ·ç¾î Áý´Ï´Ù.
Re: samba-head bug relating to windows special chars (1/2)
On Wed, Nov 06, 2002 at 04:34:28PM +1030, Richard Sharpe wrote: Hi, I have been tracking down a problem with profiles that was reported last year to do with names like '31/2 Floppy (A).lnk' where 1/2 is the special character that shows up as 1/2 under Windows. This problem does not occur with Linux and Samba 2.0.7, and does not occur with Samba-head and Slowaris or FreeBSD, however, it does it occur with Linux (RedHat 7.2) and samba-head. The problem occurs when server_push is called to transfer the name to the response as a UNICODE string. However, while the string is fully in the buffer, for some reason, there is a 0x00 0x00 right after the 0x33 0x00 inserted for the 3. Now investigating why server_push is screwing the string up. Oh. Do you have the unix character set set to iso8859-1 ? I don't think that character set has a 1/2 character. Try setting it to utf8 and see if this fixes it. Jeremy.
Re: samba-head bug relating to windows special chars (1/2)
On Wed, 6 Nov 2002 [EMAIL PROTECTED] wrote: On Wed, Nov 06, 2002 at 04:34:28PM +1030, Richard Sharpe wrote: Hi, I have been tracking down a problem with profiles that was reported last year to do with names like '31/2 Floppy (A).lnk' where 1/2 is the special character that shows up as 1/2 under Windows. This problem does not occur with Linux and Samba 2.0.7, and does not occur with Samba-head and Slowaris or FreeBSD, however, it does it occur with Linux (RedHat 7.2) and samba-head. The problem occurs when server_push is called to transfer the name to the response as a UNICODE string. However, while the string is fully in the buffer, for some reason, there is a 0x00 0x00 right after the 0x33 0x00 inserted for the 3. Now investigating why server_push is screwing the string up. Oh. Do you have the unix character set set to iso8859-1 ? I don't think that character set has a 1/2 character. Try setting it to utf8 and see if this fixes it. I probably do. What is the default? I have not explicitely set it either under FreeBSD, Slowaris, nor Linux. Regards - Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], http://www.richardsharpe.com
Re: samba-head bug relating to windows special chars (1/2)
On Wed, 6 Nov 2002 [EMAIL PROTECTED] wrote: On Wed, Nov 06, 2002 at 04:34:28PM +1030, Richard Sharpe wrote: Hi, I have been tracking down a problem with profiles that was reported last year to do with names like '31/2 Floppy (A).lnk' where 1/2 is the special character that shows up as 1/2 under Windows. This problem does not occur with Linux and Samba 2.0.7, and does not occur with Samba-head and Slowaris or FreeBSD, however, it does it occur with Linux (RedHat 7.2) and samba-head. The problem occurs when server_push is called to transfer the name to the response as a UNICODE string. However, while the string is fully in the buffer, for some reason, there is a 0x00 0x00 right after the 0x33 0x00 inserted for the 3. Now investigating why server_push is screwing the string up. Oh. Do you have the unix character set set to iso8859-1 ? I don't think that character set has a 1/2 character. Try setting it to utf8 and see if this fixes it. Actually, when I display the file name under FreeBSD or Linux, it shows up as the chevron ligature thingy. Regards - Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], http://www.richardsharpe.com
Re: samba-head bug relating to windows special chars (1/2)
On Wed, 6 Nov 2002, Richard Sharpe wrote: On Wed, 6 Nov 2002 [EMAIL PROTECTED] wrote: I probably do. What is the default? I have not explicitely set it either under FreeBSD, Slowaris, nor Linux. OK, the char in question is showing up as 0xAB, and is being converted to 0x00 0x00 by smb_iconv! This is only happening under Linux. Now investigating why. Regards - Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], http://www.richardsharpe.com
Re: samba-head bug relating to windows special chars (1/2)
On Wed, 6 Nov 2002 [EMAIL PROTECTED] wrote: Oh. Do you have the unix character set set to iso8859-1 ? I don't think that character set has a 1/2 character. Try setting it to utf8 and see if this fixes it. Hmmm, Under FreeBSD, that character is encoded as 0xC2 0xBD while under Linux it is encoded as 0xAB ... So, I think it might be a failure to do with the creation of the file in the first place ... Regards - Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], http://www.richardsharpe.com
Re: samba-head bug relating to windows special chars (1/2)
On Wed, 6 Nov 2002, Richard Sharpe wrote: On Wed, 6 Nov 2002 [EMAIL PROTECTED] wrote: Oh. Do you have the unix character set set to iso8859-1 ? I don't think that character set has a 1/2 character. Try setting it to utf8 and see if this fixes it. Hmmm, Under FreeBSD, that character is encoded as 0xC2 0xBD while under Linux it is encoded as 0xAB ... So, I think it might be a failure to do with the creation of the file in the first place ... OK, I have confirmed that. I copied the file from FreeBSD to Linux, and Samba displayed it correctly under Win2K. This looks more like a file creation problem. Regards - Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], http://www.richardsharpe.com
CVS update: samba/docs/htmldocs
Date: Tue Nov 5 16:22:34 2002 Author: jelmer Update of /home/cvs/samba/docs/htmldocs In directory dp.samba.org:/tmp/cvs-serv28058/htmldocs Modified Files: Tag: SAMBA_2_2 smb.conf.5.html Log Message: The default of 'announce version' is 4.9, not 4.5 Revisions: smb.conf.5.html 1.15.2.80 = 1.15.2.81 http://www.samba.org/cgi-bin/cvsweb/samba/docs/htmldocs/smb.conf.5.html?r1=1.15.2.80r2=1.15.2.81
CVS update: samba/docs/docbook/manpages
Date: Tue Nov 5 16:26:19 2002 Author: jelmer Update of /home/cvs/samba/docs/docbook/manpages In directory dp.samba.org:/tmp/cvs-serv28923/docs/docbook/manpages Modified Files: smb.conf.5.sgml Log Message: The default for 'announce version' is 4.9, not 4.5 or 4.2 Revisions: smb.conf.5.sgml 1.61 = 1.62 http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/manpages/smb.conf.5.sgml?r1=1.61r2=1.62
CVS update: samba/source
Date: Tue Nov 5 16:36:38 2002 Author: jelmer Update of /home/cvs/samba/source In directory dp.samba.org:/tmp/cvs-serv32080 Modified Files: configure Log Message: Rerun autoconf Revisions: configure 1.340 = 1.341 http://www.samba.org/cgi-bin/cvsweb/samba/source/configure?r1=1.340r2=1.341
CVS update: sambaweb
Date: Wed Nov 6 03:46:56 2002 Author: mbp Update of /data/cvs/sambaweb In directory dp.samba.org:/tmp/cvs-serv1466 Modified Files: download.html Log Message: Patch from Noel Koethe: 2 link corrections and made the source html a bit more readable. Revisions: download.html 1.11 = 1.12 http://www.samba.org/cgi-bin/cvsweb/sambaweb/download.html?r1=1.11r2=1.12
CVS update: sambaweb
Date: Wed Nov 6 03:47:42 2002 Author: mbp Update of /data/cvs/sambaweb In directory dp.samba.org:/tmp/cvs-serv1629 Modified Files: contacts.html Log Message: Patch from Noel Koethe: a small fix and the Openproject IRC network has renamed itself to freenode Revisions: contacts.html 1.1 = 1.2 http://www.samba.org/cgi-bin/cvsweb/sambaweb/contacts.html?r1=1.1r2=1.2
CVS update: samba/examples/pdb/mysql
Date: Tue Nov 5 16:48:15 2002 Author: jelmer Update of /home/cvs/samba/examples/pdb/mysql In directory dp.samba.org:/tmp/cvs-serv1533 Removed Files: ChangeLog Makefile.in pdb_mysql.c Log Message: Move pdb_mysql to source/passdb Revisions: ChangeLog 1.1 = NONE http://www.samba.org/cgi-bin/cvsweb/samba/examples/pdb/mysql/ChangeLog?rev=1.1 Makefile.in 1.2 = NONE http://www.samba.org/cgi-bin/cvsweb/samba/examples/pdb/mysql/Makefile.in?rev=1.2 pdb_mysql.c 1.5 = NONE http://www.samba.org/cgi-bin/cvsweb/samba/examples/pdb/mysql/pdb_mysql.c?rev=1.5
CVS update: sambaweb/vendors
Date: Wed Nov 6 03:58:31 2002 Author: mbp Update of /data/cvs/sambaweb/vendors In directory dp.samba.org:/tmp/cvs-serv4120 Modified Files: index.html Log Message: Suggestion from Noel Koethe: Fix link to tridge's homepage Revisions: index.html 1.30 = 1.31 http://www.samba.org/cgi-bin/cvsweb/sambaweb/vendors/index.html?r1=1.30r2=1.31