[Samba] How many files can samba display in one folder?
We are using samba 2.2.6 (compiled) on RH 7.2. When samba share has 450 - 500 in single linux folder, Windows clients only display approximately 400. All files have same chmod rights. Are there any values, which could limit the amount of files being displayed? -MiikaT -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Using Dat drive on another LM9 machine
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Message: 16 From: Ken Walker [EMAIL PROTECTED] To: '[EMAIL PROTECTED]' [EMAIL PROTECTED] Date: Tue, 19 Nov 2002 19:48:26 - Subject: [Samba] Using Dat drive on another LM9 machine How can i use a dat tape on another remote LM9 machine. This question really doesn't have much to do with samba, you may want to post to a more Mandrake-centric list (assuming LM9 means Linux-Mandrake 9.0 ...) such as the expert list. You can subscribe to these lists from the Mandrake web sites. Using tar and keeping the original ownership/permissions. Assuming your accounts are identical on both machines, you could NFS mount the machine you want to restore on. However, you will have to create the NFS share without root-squashing, see 'man exports'. You may also be able to have success with rmt, but probably only using dump/restore. Amanda may be a better backup system to use, as it is network capable and pretty efficient. All of these packages are in Mandrake 9.0 or the contribs. or smbmount to the machine with the files on and again keeping the original ownership/permissions. smbmount will not really work too well, as it only connects as a single user, and mappings of permissions aren't that great, but if you connect as root or an admin user, you may have success. I would probably go with NFS at the moment, and in future plan to use amanda. Regards, Buchan - -- |Registered Linux User #182071-| Buchan MilneMechanical Engineer, Network Manager Cellphone * Work+27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE920XirJK6UGDSBKcRAjvFAKCnJOcJZNfIVQe45xQEb4p48SO1NACgoQYL FHLW9h+IOBn7p2JcWEWLoow= =9Hpf -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] FYI : oplock problems
FYI, I'm setting up a file server for 1000 users based on mdk 8.0, self-compiled 2.4.19 + acl patches, self compiled samba 2.2.6, 100 Mbps NIC this server is right now in a pre-prod status and is currently used only by very few users while loading several +100 MB files on a share from a NT 4 wks 100 Mbps, we got several session cancelled messages, and un-killable D-state smbd processes on the server. setting oplocks = no on the share and rebooting (the only way to remove D-state processes in this case) solved the problem oplocks are definitively a nightmire for us here... - * - * - * - * - * - * - Bien sûr que je suis perfectionniste ! Mais ne pourrais-je pas l'être mieux ? Thierry ITTY eMail : [EMAIL PROTECTED] FRANCE -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How many files can samba display in one folder?
On Wed, 20 Nov 2002, MiikaT wrote: We are using samba 2.2.6 (compiled) on RH 7.2. When samba share has 450 - 500 in single linux folder, Windows clients only display approximately 400. All files have same chmod rights. Are there any values, which could limit the amount of files being displayed? Interesting, I just check a folder with 583 files and all listed just fine. What version of MS Windows? What service packs and updates? - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: [Samba]
I have an RH 7.3 box running SAMBA for my local network. I have three shares that actually live on VFAT partitions. I have gone through everything over and over again and cannot seem to write to the shares on the VFAT partition. I believe I did read in one post within the past month that you can only read from VFAT and cannot write to VFAT shares - is this, in fact, true, or have I mucked up my perms somewhere somehow - or am I too tired and should I go to bed? Being that I have to run both linux and XP on the same computer (sad, but true), it would be nice to be able to write to the VFAT whilst running SAMBA...but if not, well, all the more reason to dump M$... TIA! Cheers! -- Wed Nov 20 19:55:00 EST 2002 |____ | | / \ /| |'-. | | .\__/ || | | | | _ / `._ \|_|_.-' | | | / \__.`=._) (_ |kuhn media australia | |/ ._/ || |http://kma.0catch.com | |'. `\ | | |stephen kuhn | ;/ / | | |email: [EMAIL PROTECTED] | smk ) /_/| |.---.| |mobile: 0410-728-389 | ' `-`' |linux user:267497 There is a multi-legged creature crawling on your shoulder. -- Spock, A Taste of Armageddon, stardate 3193.9 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Domain / Server disappear from network neighbourhood
Hello I attached my smb.conf as a reference but the problem is quite simple: 1) my server didn't show in the network neighbourhood 2) often the whole domain didn't show at all in the n.b. and if I try to access it directly (i.e. typing the domain name) I got a strange error (cannot find the network path) P.S. Every single machine (server included) is viewable if referenced directly (i.e. by typing \\machinename) bye by(t)e[S]...TuX! --- Questo messaggio è certificato Virus Free - AVG 6 Free Edition Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.419 / Virus Database: 235 - Release Date: 13/11/2002 # Samba config file created using SWAT # from 0.0.0.0 (0.0.0.0) # Date: 2002/11/19 12:56:50 # Global parameters [global] workgroup = CCGM netbios name = CCGM-SERVER netbios aliases = server-ccgm server string = Samba Server %v encrypt passwords = Yes update encrypted = Yes null passwords = Yes pam password change = Yes username map = /etc/samba/smbusers unix password sync = Yes admin log = Yes log file = /var/log/samba/log.%m max log size = 50 time server = Yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 printcap name = lpstat domain admin group = @smb-admin domain guest group = @users add user script = /usr/sbin/useradd -d /dev/null -g machines -c 'Machine Account' -s /bin/false -M %u domain logons = Yes os level = 64 preferred master = Yes domain master = Yes dns proxy = No wins support = Yes guest account = guest valid users = @smb-admin @ccgm @satyagra admin users = @smb-admin read list = @ccgm @satyagra write list = @smb-admin printer admin = @smb-admin printing = cups [homes] comment = Home Directories read only = No browseable = No [printers] comment = All Printers path = /var/spool/samba create mask = 0700 guest ok = Yes printable = Yes print command = lpr-cups -P %p -o raw %s -r # using client side printer drivers. browseable = No [print$] path = /var/lib/samba/printers write list = @adm root [pdf-generator] comment = PDF Generator (only valid users) path = /var/tmp printable = Yes print command = /usr/share/samba/scripts/print-pdf %s ~%u %L%u %m %I [ccgm-folder] comment = CCGM Folder path = /var/lib/samba/shares/ccgm-folder valid users = @smb-admin @ccgm admin users = @smb-admin @ccgm read list = write list = @smb-admin @ccgm read only = No [satyagra-folder] comment = Satya Gra Folder path = /var/lib/samba/shares/satyagra-folder valid users = @smb-admin @satyagra admin users = @smb-admin @satyagra read list = write list = @smb-admin @satyagra read only = No [public] comment = Public Folder path = /var/lib/samba/shares/public valid users = @smb-admin @ccgm @satyagra @users read list = @smb-admin @ccgm @satyagra @users write list = @smb-admin @ccgm @satyagra @users read only = No create mask = 0777 [netlogon] comment = Net Logon share path = /var/lib/samba/netlogon guest ok = Yes
[Samba] Add user script option never running?
Hi all, I'm using the latest alpha version (the one that comes with Debian unstable) in domain mode, setting up a member file server, with domain clients authenticating to a W2k machine. I'm trying to use the add user script option to create new users automagically, but it never seems to run. The script in this case is a handwritten perl script, and I've added a touch call at the top, so I can tell whether it's really running or not. Here's the [global] part of smb.conf: [global] encrypt passwords=yes workgroup=BEDROCK security=domain password server=* netbios name=newbambam add user script = /usr/local/bin/adduser.pl %u delete user script=/usr/sbin/userdel -r add user to group script=/usr/sbin/adduser %u %g username map=/etc/samba/user.map logon path=%LUser Profiles%U load printers=no I don't know about the other script options, but the add user one never runs. If I turn on log level=2, I get the following (relevant) lines in log.smbd: [no entry for this user on the local system at all] check_password: Authentication for user [Andrew Furey] - [Andrew Furey] FAILED with error NT_STATUS_NO_SUCH_USER [an entry in user.map, mapping to a not-yet-existent system user] check_password: Authentication for user [Andrew Furey] - [andrewfu] FAILED with error NT_STATUS_NO_SUCH_USER [a system user also created] check_password: authentication for user [Andrew Furey] - [andrewfu] - [andrewfu] suceeded As you can see, it all seems to work when the user is actually there, but if they're not present, it simply gives up rather than running the script. Any ideas? TIA Andrew -- ANDREW FUREY [EMAIL PROTECTED] - Sysadmin/developer for Terminus. Providing online networks of Australian lawyers (http://www.ilaw.com.au) and Linux experts (http://www.linuxconsultants.com.au) for instant help! Disclaimer: http://www.terminus.net.au/disclaimer.html. GCS L+++ P++ t++ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain / Server disappear from network neighbourhood
On Wed, Nov 20, 2002 at 10:02:14AM +0100, Michele Santucci wrote: Hello I attached my smb.conf as a reference but the problem is quite simple: 1) my server didn't show in the network neighbourhood 2) often the whole domain didn't show at all in the n.b. and if I try to access it directly (i.e. typing the domain name) I got a strange error (cannot find the network path) Does your client configured to use the samba server as wins server? Your smb.conf is configured to do the wins service(wins support = Yes), so the client has to use this service to get expectable results in n.b. -- Frank Matthieß[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE[samba] - servers keeps disapearing
Title: RE[samba] - servers keeps disapearing Hi, Is there a known problem with samba servers that keeps disappearing from network neighborhood? Had this problem with 2.2.3, have to restart nmbd to get them back on, but nmbd never stops. Yes - there _was_ a known problem with nmbd not reregistering names. Has disappeared since 2.2.5. I have upgraded to 2.2.6, still have the problem, but it helped to upgrade all servers. Doesn't happened a lot anymore. Got a log entry: register_name_response: malformed response (question_name is NULL). [2002/11/14 00:49:37, 0] nmbd/nmbd_nameregister.c:register_name_response(57) register_name_response: malformed response (question_name is NULL). [2002/11/14 00:49:37, 0] nmbd/nmbd_nameregister.c:register_name_response(57) register_name_response: malformed response (question_name is NULL). [2002/11/14 00:49:37, 0] nmbd/nmbd_nameregister.c:register_name_response(57) register_name_response: malformed response (question_name is NULL). [2002/11/14 00:53:28, 0] nmbd/nmbd_namelistdb.c:standard_fail_register(290) standard_fail_register: Failed to register/refresh name NET200 on subnet UNICAST_SUBNET [2002/11/14 00:53:28, 0] nmbd/nmbd_namelistdb.c:standard_fail_register(290) standard_fail_register: Failed to register/refresh name NET21e on subnet UNICAST_SUBNET [2002/11/14 00:53:28, 0] nmbd/nmbd_namelistdb.c:standard_fail_register(290) standard_fail_register: Failed to register/refresh name HEADNODE00 on subnet UNICAST_SUBNET [2002/11/14 00:53:28, 0] nmbd/nmbd_namelistdb.c:standard_fail_register(290) standard_fail_register: Failed to register/refresh name HEADNODE03 on subnet UNICAST_SUBNET [2002/11/14 00:53:28, 0] nmbd/nmbd_namelistdb.c:standard_fail_register(290) standard_fail_register: Failed to register/refresh name HEADNODE20 on subnet UNICAST_SUBNET [2002/11/16 05:04:22, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(235) find_response_record: response packet id 32643 received with no matching record. [2002/11/18 05:04:19, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(235) find_response_record: response packet id 21451 received with no matching record. [2002/11/18 05:04:19, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(235) find_response_record: response packet id 21452 received with no matching record. [2002/11/19 05:03:40, 0] nmbd/nmbd_namequery.c:query_name_response(104) [2002/11/19 05:03:40, 0] lib/fault.c:fault_report(38) === [2002/11/19 05:03:40, 0] lib/fault.c:fault_report(39) INTERNAL ERROR: Signal 11 in pid 19074 (2.2.6) Please read the file BUGS.txt in the distribution [2002/11/19 05:03:40, 0] lib/fault.c:fault_report(41) === [2002/11/19 05:03:40, 0] lib/util.c:smb_panic(1094) PANIC: internal error [2002/11/20 10:24:44, 0] nmbd/nmbd.c:main(794) Netbios nameserver version 2.2.6 started. Copyright Andrew Tridgell and the Samba Team 1994-2002 Greetings, Christopher -- == Dipl.-Ing. Christopher Odenbach HNI Rechnerbetrieb [EMAIL PROTECTED] Tel.: +49 5251 60 6215 == ~ Tommy Fallsen System Administrator Kongsberg Defence Aerospace Email: [EMAIL PROTECTED] TEL: +47 32287783 MOB +47 93057326 WEB: http://www.kongsberg.com/eng/kog/ The information in this e-mail and in any attachments is confidential and intended solely for the attention and use of the named addressee(s). This information may be subject to legal, professional or other privilege and further distribution of it is strictly prohibited without our authority. If you are not the intended recipient, you are not authorised to and must not disclose, copy, distribute, or retain this message or any part of it, and should notify us immediately.
[Samba] Hi!
A brief introduction on me before I start on the problem! I am a sys admin working in the UK, I have administrated and set-up windows networks, Novell networks and administrated Linux Networks before. I have used Samba on a 9x network before very successfully, I now work for a 'proper' company and they use 2k Pro and XP Pro on the network as well as 9x. I am trying to use Samba as a PDC, there are no Windows Servers on the network so it should be ok, I have follows the Samba Project Documentation to the letter (at least once), my 9x clients can log in with encrypted passwords so everything is fine. However I cannot 'promote' an NTx box (i.e Win 2k Pro, XP Pro) in the domain, I get the following error: The remote procedure call failed. I am using version 2.2.6. Any ideas??? :o? Thanks Michael Sage --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.419 / Virus Database: 235 - Release Date: 13/11/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3 as BDC
Hi, I was wondering what is the current state of play with samba 3 being a BDC?? Is there any documentation anywhere? Cheers - Kristyan Osborne IT Technician Longhill High School 01273 391672 -- Computers are like airconditioners: They stop working properly if you open windows. Win95: A 32-bit patch for a 16-bit GUI shell running on top of an 8-bit operating system written for a 4-bit processor by a 2-bit company who cannot stand 1 bit of competition. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NT4 machine trust breaks on a Samba-BDC
I checked with tdbtool that the domain SIDs are the same on all of the domain controllers. Also the machine trust account passwords are the same, and they don't change. It is enough that I change a user's password with smbpasswd user, and afterwards I won't be able to log in to the domain with an NT 4 machine. (The problem was that an NT4 host in the subnet of a samba backup domain controller complains that either the machine trust account is missing from the domain or the trust account password is wrong, after there is a change in smbpasswd. The PDC is in a different subnet, and there's no such problem there.) I ran a level 10 debug when the machine was starting up. Right after I had joined the domain I found that lines saying challenge: XYZ and calculated: XYZ had the same value. It was also possible to log in to the domain. But after a simple password change with smbpasswd username and copying smbpasswd to the BDC with rsync, the same lines in the log file had different values, and after them there was a line saying status: NT_STATUS_ACCESS_DENIED. Logging in to the domain was not possible. Earlier in the log there were complaints about null passwords not being valid, I don't know if that has anything to do with this. Is there something I should check in the log file, something that should be the same in both situations? Would somebody look at my log files if I post them here? (And is there some information in the log files that would be insecure to post here?) -Mikko- Gerald (Jerry) Carter wrote: We have Samba (2.2.5) running on three servers, each in a different subnet. One of them is a PDC (domain master = yes). The Samba PDC is also the NIS master. The smbpasswd is replicated using rsync to the other machines that act as Samba BDCs (domain master = no). They are also NIS slave servers. The smbpasswd synchronization takes place automatically every time smbpasswd is updated, and the NIS maps are updated and pushed automatically to the slaves whenever a machine joins the domain. Anybody have any ideas or suggestions? Where should I start debugging? Check that the domain SID is the same. Sync secrets.tdb, or use the new smbpasswd option (2.2.6) to 'suck' the SID from PDC to each BDC. I understood that you can't just copy the secrets.tdb to the BDCs, because it contains some host specific information. I've ran smbpasswd -S domain on both BDCs before starting smbd on them (It seems that if you start smbd on the local host with option workgroup = the domain, the sid of which you're trying to retrieve in smb.conf, and run smbpasswd -S after that, it will retrieve the sid from the local smbd. At least in my configuration where the PDC is in a different subnet...?) certainly in HEAD's varient of this command, you can specify the host - try the -r option. Anyhow, I checked the secrets.tdb databases, and the 48 bytes following the string SECRETS/SID/domain match on every host (and more, there's a lot of zeroes). I'm not sure it that's the right place to look? Is there a way of printing out the domain SID in cleartext? tdbtool can help there. Plus, shouldn't the other OSes complain also, if my domain SIDs were wrong? But it's just the NT4. What does it do differently than W2k and WXP...? Hmm, that's werid - it should affect any host that contacts the 'wrong' DC. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Hi!
On Wed, Nov 20, 2002 at 10:06:13AM -, Michael Sage wrote: A brief introduction on me before I start on the problem! I am a sys admin working in the UK, I have administrated and set-up windows networks, Novell networks and administrated Linux Networks before. I have used Samba on a 9x network before very successfully, I now work for a 'proper' company and they use 2k Pro and XP Pro on the network as well as 9x. I am trying to use Samba as a PDC, there are no Windows Servers on the network so it should be ok, I have follows the Samba Project Documentation to the letter (at least once), my 9x clients can log in with encrypted passwords so everything is fine. However I cannot 'promote' an NTx box (i.e Win 2k Pro, XP Pro) in the domain, I get the following error: The remote procedure call failed. I am using version 2.2.6. Any ideas??? :o? Have you setup the corresponding machine accounts? If you don't what machine accounts are, please read http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf and/or take a look at http://www.samba.org/samba/docs/ -- Frank Matthieß[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Hi!
However I cannot 'promote' an NTx box (i.e Win 2k Pro, XP Pro) in the domain, I get the following error: The remote procedure call failed. I am using version 2.2.6. Have you setup the corresponding machine accounts? Yes, this is part of the process in the Samba Project Documentation, I am using the Samba HOWTO Collection for this solution / problem. I have tried both manual creation of the machine accounts and the on-the-fly methods. Regards, Michael --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.419 / Virus Database: 235 - Release Date: 13/11/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Yenilenen noseks ymebq
FULL 2002 YAPIMI PORNO VIDEOLAR Sitemize yeni filmler eklendi. Tam metraj, full kalite Yenilenen Kategoriler: AMATEUR ANAL ASIAN LESBIAN Ýyi eðlenceler, http://www.noseks.com id: samba - uyuokxjdllwefnhtwgibjbjvjqnepnxmpscctnifyhlfuvbscmvongmxwbcoq- N§²æìr¸yúèØb²X¬¶ -¢Ø^~e£§DKjwky§m 觲ÚîrبÈm¶ÿ+-²Æ¦mª+ùYùb²Ø§~ìjfÚ
Re: [Samba] Samba 3 as BDC
On Wed, 2002-11-20 at 21:14, Kristyan Osborne wrote: Hi, I was wondering what is the current state of play with samba 3 being a BDC?? Is there any documentation anywhere? It should work, once you get the SIDs right, for users at least (assuming ldap or rsynced smbpasswd). Other things are harder to get synced across correctly. There is some (slightly out date) documentation in the source disto. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
Re: [Samba] Hi!
On Wed, Nov 20, 2002 at 11:03:09AM -, Michael Sage wrote: However I cannot 'promote' an NTx box (i.e Win 2k Pro, XP Pro) in the domain, I get the following error: The remote procedure call failed. I am using version 2.2.6. Have you setup the corresponding machine accounts? Yes, this is part of the process in the Samba Project Documentation, I am using the Samba HOWTO Collection for this solution / problem. I have tried both manual creation of the machine accounts and the on-the-fly methods. Ok. Next step is to get more info about this part. Run your samba server with higher debug level and take a look in the smbd.log of the samba maschine. -- Frank Matthieß[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Shared profiles under XP?
Hiya. Is it possible to share profiles between different users with Samba 3.0CVS acting as a PDC, and XP Workstations? All users are using the same profile share; the concept is that there's an Admin user which can read/write to this, so I can setup things such as Internet Explorer settings / Desktop/Start Menu items / color scheme, etc..., and all other users only have read only access to this share, yet use the same profile. At the moment each user's trying to create its own profile, which isn't what I want (and isn't possible, considering the fact its a read only share). If it makes any difference, I'm using jelmer's mysql module, and all users are in the same unix group. Cheers. R -- - Ryan Verner [EMAIL PROTECTED] PGP: 5819 DE5D B5AE 9381 7E60 5B4C 45CC 64DF D3CC EB07 ICQ: 76626240 IRC: xf / irc.oublinet.net PH: +61 415 297 303 EQ: Mummer (Bard), Tholuxe In the beginning the Universe was created. This has made a lot of people very angry and has been widely regarded as a bad move. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 as BDC
On November 20, [EMAIL PROTECTED] said: It should work, once you get the SIDs right, for users at least (assuming ldap or rsynced smbpasswd). Other things are harder to get synced across correctly. There is some (slightly out date) documentation in the source disto. I'm fighting with this at the moment. net rpc vampire isn't documented in the source distro (that I can find, anyway) but for anyone else playing with it, it does take a bit of fiddling to make it work. I presume there's a way to make all this work without creating Unix accounts (LDAP or winbindd) but since I'm trying not to go too far out on a limb, I will note that the use-unix-accounts option requires you to have working add machine, add user, and add group scripts. It will fail non-obviously if you don't have these (for example, it claims to be creating the groups, but doesn't do so, because you've not defined the script - this had me stumped for a while). The question I'd have, since it's pertinent to what I'm trying to do: Is it possible to net rpc vampire a PDC, then promote Samba to the PDC and demote the Windows box to the BDC? I don't care if syncing doesn't work after I've done that, I just need to be able to force every machine in the domain to recognise that the PDC is, er, not the PDC any more, but I can't take the PDC out of the domain entirely because there are other things running on it. Cheers, Waider. -- [EMAIL PROTECTED] / Yes, it /is/ very personal of me. A one question geek test. If you think it's funny, you're a geek. Seen on a California license plate on a VW Beetle: Feature - Joshua D. Wachs -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbpasswd error
when i type smbpasswd -r pdc -j domain it says: fetch_domain_sid: machine pmf rejected the tconX on the IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. Failed to get domain SID. Unable to join domain CENTROADM. what is it??? thanks wilson -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 as BDC
On Wed, 2002-11-20 at 22:53, Ronan Waide wrote: On November 20, [EMAIL PROTECTED] said: It should work, once you get the SIDs right, for users at least (assuming ldap or rsynced smbpasswd). Other things are harder to get synced across correctly. There is some (slightly out date) documentation in the source disto. I'm fighting with this at the moment. net rpc vampire isn't documented in the source distro (that I can find, anyway) but for anyone else playing with it, it does take a bit of fiddling to make it work. I presume there's a way to make all this work without creating Unix accounts (LDAP or winbindd) but since I'm trying not to go too far out on a limb, I will note that the use-unix-accounts option requires you to have working add machine, add user, and add group scripts. It will fail non-obviously if you don't have these (for example, it claims to be creating the groups, but doesn't do so, because you've not defined the script - this had me stumped for a while). If you want to contribute some doco or simply a discussion of what you did and how you did it, it would be most appreciated. You must use the 'add user' scripts etc - because we don't automatically create these users, and we don't allow users without a unix id to be represented. I might add some more LDAP magic toward this, but that's how it is for now. The question I'd have, since it's pertinent to what I'm trying to do: Is it possible to net rpc vampire a PDC, then promote Samba to the PDC and demote the Windows box to the BDC? I don't care if syncing doesn't work after I've done that, I just need to be able to force every machine in the domain to recognise that the PDC is, er, not the PDC any more, but I can't take the PDC out of the domain entirely because there are other things running on it. You can't demote to BDC - it will try and sync the passwords, and that will fail badly. However, if demoted all the way to domain member, it should work. -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
Re: [Samba] Samba 3 as BDC
On November 20, [EMAIL PROTECTED] said: If you want to contribute some doco or simply a discussion of what you did and how you did it, it would be most appreciated. Certainly will do. Once I get it working and all :) You must use the 'add user' scripts etc - because we don't automatically create these users, and we don't allow users without a unix id to be represented. I might add some more LDAP magic toward this, but that's how it is for now. So basically there is currently no way around the requirement for a Unix ID and/or group? You can't demote to BDC - it will try and sync the passwords, and that will fail badly. However, if demoted all the way to domain member, it should work. Okay. Demonstrating my ignorance, how the hell do I demote it all the way to a domain member without reinstalling NT? Cheers, Waider. -- We are experiencing MVS processor spin loops, the programs are running while holding a disabled CPU. This is causing XCF communication delays to the point where we are losing VTAM RTP routing, are suffering OSPF adjacency failures on TCP/IP dynamic routing and MIM VCF failures. - Reported via Slashdot -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Win XP + Samba PDC ( problem )
Hello i instaled samba 2.2.5 as PDC i have network with 40 computers ( Win XP ) everythings works ok but sometimas i have problems ... from time to time one of the windows says that can't log into domain ... it is seldom problem ( only 3 computers has problem with it ) others works fine if i reinstall XP or change to windows works in workgroup and then again change to work in domain ( log as root in the beginning ) everything is ok have someone this problem ? why sometimes Winxp can't log into domain ? best regards daniel -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbpasswd and passwd passwords
I am sorry, but I don't think that you understood my question. I have user accounts on a Debian Linux system, where I would like to use those same passwords to access shared files on the linux system with the use of Samba. Currently we have to give each person an account on the linux system, then repeat the process with the samba software. What would like to do would be to give the person access to the linux system, then have a script take the same password and username and apply that to samba. Thankssm -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Not able to see public shares on W2k from Linux
Hi all, I work with linux and SUSE 8.1 in a W2K PDC environment. I successfully configured Samba to be able to connect from the Wk2 computers to linux and vice versa with one exception: I'm not able to see the public shares of the window computers from linux (NetShareEnum failed, NT_STATUS_ACCESS_DENIED) unless I provide a username and password. From Windows to Windows it's no problem to see the public shares without a password. Since I thought that it is the special thing about a public share that you do not need a password I guess something is wrong... Information on the PDC: - Guest account disabled (this might be the answer to the problem) - It seems that is doesn't make a difference weather the linux computer is configured at the PDC as a Domain-Member or not (or do we have to reboot the PDC) Here is an excerpt of the smbclient printout: smbclient -L NetBiosName -d 4 Got a positive name query response from Ip Of NetBiosName Connecting to Ip Of NetBiosName at port 139 session request ok Password: Anonymous login successful Domain=[NetBiosDomainName] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] session setup ok tconx ok Sharename Type Comment - --- NetShareEnum failed Error returning browse list: NT_STATUS_ACCESS_DENIED Server Comment - --- Workgroup Master - --- Thank you for your help Jan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] NT_STATUS_LOGON_FAILURE
Hi, I have installed samba 2.2.6. I've tried to connect from the Linux PC with samba to a PC with Window XP with smbclient -L //workgroup_name/PC_Window_XP_name It asks me the password, and then I receive the error as the subject. What to do ? The FAQ and the doc do not report this situation perhaps quite common. Please help ! Thank you, -- Giuseppe Torelli LCDN - Il portale al servizio del tuo PC http://www.lcdn.it -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba as BDC in NT domain
I have this problem: there is a subnet 192.168.6.0/24 and the gateway is 192.168.6.1 which has also another nic 172.21.13.123 which belongs to subnet 172.21.13.0 where the PDC of NT-domain is. GW does NAT and it causes that computers/users in subnet 192.168.6.0 cant logon to NT-domain. Is it possible to put Samba in GW machine so that it can be a backup domain controller in NT-domain and it uses username:passwd combinations from PDC and login becames possible? If so, how can it be done? pasi h -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] PDC Problems
I got the problem clear: when i try to join the domain (as root) smb reports in the machine log that guest is trying to do something and it fails authentication... I partially fixed it mapping the guest user on root but this's not what security manuals suggest ;-) Hope someone can clarify me now... bye by(t)e[s]TuX! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Not able to see public shares on W2k from Linux
On Wed, Nov 20, 2002 at 02:05:16PM +0100, Jan Hohe wrote: Hi all, I work with linux and SUSE 8.1 in a W2K PDC environment. I successfully configured Samba to be able to connect from the Wk2 computers to linux and vice versa with one exception: I'm not able to see the public shares of the window computers from linux (NetShareEnum failed, NT_STATUS_ACCESS_DENIED) unless I provide a username and password. From Windows to Windows it's no problem For windows there is no problem, because you are already authenicated against the pdc. And for this call the windows maschine use the actual user and passwd. At linux command line you have to setup this explicit. [...] Anonymous login successful Domain=[NetBiosDomainName] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] session setup ok tconx ok Sharename Type Comment - --- NetShareEnum failed Error returning browse list: NT_STATUS_ACCESS_DENIED The actual user/password pair isn't autheticatable against the pdc. -- Frank Matthieß[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Hi!
To All, Just to let you know the solution to the problem I was having! I feel very silly now, looks like it was a problem with my smb.conf domain admin group. I have just added root to it and promoted a machine using root instead of my super user and it works. Oh well, you live you learn. Frank et al thanks for your help. :o) Michael --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.419 / Virus Database: 235 - Release Date: 13/11/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NT_STATUS_LOGON_FAILURE
On Wed, Nov 20, 2002 at 02:07:52PM +, Giuseppe Torelli wrote: Hi, I have installed samba 2.2.6. I've tried to connect from the Linux PC with samba to a PC with Window XP with smbclient -L //workgroup_name/PC_Window_XP_name It asks me the password, and then I receive the error as the subject. You must use a Window XP local username and password, or if it is a running XP Prof inside a windows domain a domain username and password. The Window XP must authenticat the remote access against local userdatabase or a domain database. -- Frank Matthieß[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win XP + Samba PDC ( problem )
Daniel, I am having the same problem as you, my XP machine will promote into the domain every time, but I cannot get it to log into the domain. The error I get is: Windows cannot connect to the domain, either because the domain controller is down or is unavailable or because the computer account was not found. Please try again later, if this message continues to appear contact your systems administrator for assistance Any ideas? I assume because the computer was promoted into the domain the computer account must exist and work properly. Michael - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Wednesday, November 20, 2002 12:42 PM Subject: [Samba] Win XP + Samba PDC ( problem ) Hello i instaled samba 2.2.5 as PDC i have network with 40 computers ( Win XP ) everythings works ok but sometimas i have problems ... from time to time one of the windows says that can't log into domain ... it is seldom problem ( only 3 computers has problem with it ) others works fine if i reinstall XP or change to windows works in workgroup and then again change to work in domain ( log as root in the beginning ) everything is ok have someone this problem ? why sometimes Winxp can't log into domain ? best regards daniel -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.419 / Virus Database: 235 - Release Date: 13/11/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] PDC Problems
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michele Santucci wrote: I got the problem clear: when i try to join the domain (as root) smb reports in the machine log that guest is trying to do something and it fails authentication... You never mentioned that you couldn't join the domain. You should get a Welcome to the Domain Domain message if it worked. I now assume you didn't get one. Please remember, the more information you give about your problem, the easier it is for other people to help you. I partially fixed it mapping the guest user on root but this's not what security manuals suggest ;-) Hope someone can clarify me now... bye by(t)e[s]TuX! Can you connect normally to the server as root? $ smbclient -L server_name -U root (you can try this on the server itself). If not, you need to add an smbpasswd for root. As root, do: # smbpasswd -a Then try it again. If it works, you should now be able to join the domain. This is all covered in the documetation that ships with samba, and the webpage I sent a link to you about: http://ranger.dnsalias.com/mandrake/muo/connect/csamba6.html Regards, Buchan - -- |Registered Linux User #182071-| Buchan MilneMechanical Engineer, Network Manager Cellphone * Work+27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE925tFrJK6UGDSBKcRAiWMAJ446EqOEN4pMQA5MgsJ5PF6ZGom+QCghDCu IYZuihUfFVckmxIymvjSdiQ= =PVY5 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NT_STATUS_LOGON_FAILURE
Mittwoch den 20.11.2002 um 16:14 CET +0100, schrieb Giuseppe Torelli: Alle 13:46, mercoledì 20 novembre 2002, Frank Matthieß ha scritto: You must use a Window XP local username and password, or if it is a running XP Prof inside a windows domain a domain username and password. Could you please write me the syntax of the smbclient command ? man smbclient? Is it easier to ask than to read? Should i say rtfm? ok: smbclient -L hostname -U username -W DomainNameOrWorkgroupName to list the shares of the smb server smbclient //hostname/sharename -U username -W DomainNameOrWorkgroupName -- Frank Matthieß[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RE: License Metering Software to work with SAMBA
Dear Tom, The express product makes standard windows api calls to the machine where it is installed to open, read, write to, and close files on the network. It does not, in any way tell samba how to react, it is simply telling Windows to open, read and write to the files on the network leaving how it is done to the underlying network protocols. Based on what I have seen it appears that Windows XP workstations are intermittently writing invalid data to the log files. The log files containing invalid data are deleted by express when a repair is run, at the beginning of any update of the database, which is done to prevent corrupt data from being written to the database. We believe that there is a conflict between Windows XP and samba which results in the intermittent writing of invalid data. The applib.loc file is a text file which simply indicates what machine last had the library open in the Express Administrative Console. Sincerely, Chris Lindberg Express Metrix Technical Support -Original Message-From: Thomas G. Tri, P.E. [mailto:[EMAIL PROTECTED]]Sent: Wednesday, November 20, 2002 5:40 AMTo: [EMAIL PROTECTED]Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED]Subject: License Metering Software to work with SAMBADear List:We have a 25+ node mixed networked of NT4SP5, Win2K, WinXP. We are currently using Express Meter to control our software licensing and capture data to analyze software license utilization to justify additional licenses, etc. We are running SAMBA v 2.0.7 on a Sun Ultra 2 running Solaris 7. We have been unable to get the reporting functions to work (the Express Meter log files get purged when the data merging / reporting process is performed). A SAMBA debug log shows the following strange sequence of locks / unlocks. The applib.loc file is opened with read=No, write=Yes and then followed by opening another handle on the same file with read=Yes and write=No. This seems a little strange to me and may not be the problem at all. Their tech support is apparently not willing to invest any more time to investigate this problem as it appears to function correctly when the files are stored on an NT workstation. We are not willing to [2002/11/05 15:17:33, 2] smbd/open.c:(602) bburnett opened file em/fromtaurus/applib.loc read=No write=Yes (numopen=3)[2002/11/05 15:17:33, 2] smbd/open.c:(602) bburnett opened file em/fromtaurus/applib.lib read=Yes write=No (numopen=4)[2002/11/05 15:17:33, 2] smbd/open.c:(602) bburnett opened file em/fromtaurus/applib.loc read=Yes write=No (numopen=5)We would like to continue to use Express Meter because of the time we have invested in setup and configuration. However, the reporting capability is a requirement for our firm. Therefore, we are considering switching to another software metering application. We are currently reviewing the following:Keyserver from Sassafras SoftwareApplication Metering from Codework If anyone has a suggestion to correct / workaround the above file locking sequence or has experience with these or other software metering applications, I would greatly appreciate your comments (good bad).Thanks,Tom
[Samba] Samba PDC windoze BDC
Hi, During my migration to samba, I had kind of assumed that I could run Samba as a PDC and my windoze server as a BDC to ease the migration path a little and still keep the same domain. I was going to use samba 2.2.5 on the PDC and NT4 sp6 on the BDC. After reading quite a bit, it looks as though this doesn't work? Is there a way to make it work? Does Samba 3 handle this? Is Samba 3 stable for production? Thanks Bill -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Linux workstation can't print to Samba printserver
I'm trying to configure a Linux workstation to print to my Samba printserver and can't figure out what I'm missing. Both are running CUPS. Windows clients print fine to the Samba box. Any ideas? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Winbind failed to create socket
Hi all, using samba 2.2.5 I get the following output: # /opt/samba/sbin/winbindd -i INFO: Debug class all level = 1 (pid 1028 from pid 1028) Added domain CRCSN (S-1-5-21-17...) getting trusted domain list Added domain ZFZW (S-1-5-21-20...) Added domain KYMATA (S-1-5-21-18...) timeout connecting to 172.20.119.221:445 Added domain RCS (S-1-5-21-14...) invalid permissions on socket directory /tmp/.winbindd failed to create socket Starting winbind with # /opt/samba/sbin/winbindd -d 90 the end of the logfile log.winbindd shows the following: [2002/11/20 13:59:25, 5] rpc_parse/parse_prs.c:prs_uint8(500) 0049 id_auth[3] : 00 [2002/11/20 13:59:25, 5] rpc_parse/parse_prs.c:prs_uint8(500) 004a id_auth[4] : 00 [2002/11/20 13:59:25, 5] rpc_parse/parse_prs.c:prs_uint8(500) 004b id_auth[5] : 05 [2002/11/20 13:59:25, 5] rpc_parse/parse_prs.c:prs_uint32s(785) 004c sub_auths : 0015 5475b975 567be81a 28a68b82 [2002/11/20 13:59:25, 5] rpc_parse/parse_prs.c:prs_ntstatus(588) 005c status: NT_STATUS_OK [2002/11/20 13:59:25, 5] tdb/tdbutil.c:tdb_log(492) tdb(unknown): tdb_brlock failed (fd=15) at offset 4 rw_type=2 lck_type=34 [2002/11/20 13:59:25, 0] lib/util_sock.c:create_pipe_sock(1073) invalid permissions on socket directory /tmp/.winbindd [2002/11/20 13:59:25, 0] nsswitch/winbindd.c:main(861) failed to create socket I can't see any invalid permissions as # ls -la /tmp/.winbindd total 32 drwxr-x--- 2 root other178 Nov 19 10:53 . drwxrwxrwt 7 root sys 510 Nov 20 11:09 .. srwxrwxrwx 1 root other 0 Nov 19 10:53 pipe Can somebody help Hans Graudenz -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Linux workstation can't print to Samba printserver
On Wed, Nov 20, 2002 at 07:02:50AM -0800, Baxter Shepperson wrote: I'm trying to configure a Linux workstation to print to my Samba printserver and can't figure out what I'm missing. Both are running CUPS. Windows clients print fine to the Samba box. Any ideas? Use the cups bsd wrapper tools from cups package. On a debian box(woody, sid) you install cupsys-bsd: apt-cache show cupsys-bsd [...] Conflicts: lpr, lprng Description: Common UNIX Printing System(tm) - BSD commands The Common UNIX Printing System (or CUPS(tm)) is a printing system and general replacement for lpd and the like. It supports the Internet Printing Protocol (IPP), and has its own filtering driver model for handling various document types. . This package provides the BSD commands for interacting with CUPS. It is provides separately to allow CUPS to coexist with other printing systems (to a small degree). . [...] -- Frank Matthieß[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Printer settings could not be saved. Access is denied problem
Hi Samba gurus, I need your help for the problem of denying the change of the print driver settings on samba. I have no any clue of this problem. Thanks for any comments and tips. Our institution has a windows 2000 active directory domain; I joined my test samba 2.2.6 on a Linux box into domain as the file/print member server. All the file sharing worked fine, but when I tried to upload printer drivers from a Windows 2000 box into samba, and applied the change to the printer. I got following message: Printer settings could not be saved. Access is denied. As matter of fact, I could see the printer drivers were uploaded into the W32X86 directory. I used atdadmin account on a Win2k client to do the printer driver uploading. Under /etc/samba/smb.conf, I had following settings: load printers = yes auto services = lp1 lp2 lp3 lp6 single1 hp8550 hpplot lanier \ esig esig4050 esig5m esig8150 esigcolor dircolor printer admin = @rdp,help,atdadmin [print$] path = /etc/samba/pdrivers guest ok = yes browseable = yes read only = yes write list = @rdp,help,atdadmin [lp1] comment = HP8100 in RDP Users Room printer = lp1 printable = yes browseable = yes path = /tmp print command = /usr/bin/lp -d%p %s preexec = csh -c 'echo \Your job destined for printer %S has been received by %L \ | /usr/local/samba/bin/smbclient -M %m -I %I' public = no writable = no create mode = 0700 etc . Following are the files under /etc/samba/: [root@rerun samba]# ls -al total 80 drwxr-xr-x3 root root 4096 Nov 19 14:22 . drwxr-xr-x 72 root root 8192 Nov 19 14:39 .. -rw-r--r--1 root root 20 Oct 16 13:02 lmhosts drwxr-xr-x3 atdadmin root 4096 Nov 15 14:24 pdrivers -rw-r--r--1 root root 776 Oct 16 13:01 recycle.conf -rw---1 root root 8192 Nov 19 14:14 secrets.tdb -rw-r--r--1 root root10667 Oct 29 11:53 smb10-29-02.conf -rw-r--r--1 root root15582 Nov 15 13:55 smb.conf -rw-r--r--1 root root10731 Oct 16 13:02 smb.conf.rpmnew -rw---1 root root 452 Nov 15 14:57 smbpasswd -rw-r--r--1 root root 97 Oct 16 13:02 smbusers [root@rerun samba]# cd pdrivers [root@rerun pdrivers]# ls -al total 12 drwxr-xr-x3 atdadmin root 4096 Nov 15 14:24 . drwxr-xr-x3 root root 4096 Nov 19 14:22 .. drwxr-xr-x4 atdadmin root 4096 Nov 19 14:21 W32X86 [root@rerun pdrivers]# cd W32X86 [root@rerun W32X86]# ls -al total 16 drwxr-xr-x4 atdadmin root 4096 Nov 19 14:21 . drwxr-xr-x3 atdadmin root 4096 Nov 15 14:24 .. drwxr-xr-x2 atdadmin rdp 4096 Nov 15 14:21 2 drwxr-xr-x2 atdadmin rdp 4096 Nov 15 14:07 3 [root@rerun W32X86]# cd 2 [root@rerun 2]# ls -al total 4272 drwxr-xr-x2 atdadmin rdp 4096 Nov 15 14:21 . drwxr-xr-x4 atdadmin root 4096 Nov 19 14:21 .. -rwxrw-r--1 atdadmin rdp118180 Jan 31 2000 hp8550_6.ppd -rwxrw-r--1 atdadmin rdp119718 Nov 17 2000 hpbafd32.dll -rwxrw-r--1 atdadmin rdp 11536 Nov 20 2000 hpbf4020.dll -rwxrw-r--1 atdadmin rdp101136 Nov 20 2000 hpbf4021.dll -rwxrw-r--1 atdadmin rdp 1293584 Nov 20 2000 hpbf4022.dll -rwxrw-r--1 atdadmin rdp 1073424 Nov 20 2000 hpbf4023.dll -rwxrw-r--1 atdadmin rdp403216 Nov 20 2000 hpbf4024.dll -rwxrw-r--1 atdadmin rdp 57439 Nov 20 2000 hpbf4024.hlp -rwxrw-r--1 atdadmin rdp 70298 Nov 20 2000 hpbf4024.pmd -rwxrw-r--1 atdadmin rdp421648 Nov 20 2000 hpbf4025.dll -rwxrw-r--1 atdadmin rdp459264 Nov 20 2000 hpbf4026.dll -rwxrw-r--1 atdadmin rdp 99840 Nov 17 2000 hpbftm32.dll -rwxrw-r--1 atdadmin rdp 58368 Nov 17 2000 hpdcmon.dll [root@rerun 2]# - Frank Ling System Administrator UCAR/NCAR/ATD email: [EMAIL PROTECTED] office: 303-497-8799 - -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] error: prs_mem_get: reading data of size 60 would overrun buffer.
Hello everyone, we try to use a server running linux in an NT-domain and get the error message given in the subject-line. More details from the logfile and smb.conf are given below. Can anyone give us a hint what the problem is? (Of course...) The problem is very urgent for us. Thanks a lot in advance. Helmut Rickel = smb.conf [global] ;;workgroup = BVA guest account = nobody domain master = no preferred master = no local master = no os level = 0 ;; security = server netbios name = favlinux workgroup = geibn password server = geiserver, geibackup security = domain encrypt passwords = yes socket options = TCP_NODELAY map to guest = Bad User ; Uncomment this, if you want to integrate your server ; into an existing net e.g. with NT-WS to prevent nettraffic ; local master = no ; Please uncomment the following entry and replace the ; ip number and netmask with the correct numbers for ; your ethernet interface. ; interfaces = 192.168.1.1/255.255.255.0 wins support = yes [homes] comment = Heimatverzeichnis browseable = no read only = no create mode = 0750 oplocks = no [public] comment = Datenaustausch Favlinux path = /home/BFLOW/public read only = no create mask = 0664 directory mask = 0775 oplocks = no == log.smb === [2002/11/18 15:06:36, 0] rpc_parse/parse_prs.c:prs_mem_get(317) prs_mem_get: reading data of size 60 would overrun buffer. [2002/11/18 15:06:36, 0] smbd/password.c:domain_client_validate(1369) domain_client_validate: unable to validate password for user hsielsch in domain GEIBN to Domain controller GEISERVER. Error was code 0. [2002/11/18 15:06:36, 1] smbd/password.c:pass_check_smb(504) Couldn't find user 'hsielsch' in smb_passwd file. [2002/11/18 15:06:36, 1] smbd/password.c:pass_check_smb(504) Couldn't find user 'hsielsch' in smb_passwd file. [2002/11/18 15:06:36, 0] rpc_parse/parse_prs.c:prs_mem_get(317) prs_mem_get: reading data of size 60 would overrun buffer. [2002/11/18 15:06:36, 0] smbd/password.c:domain_client_validate(1369) domain_client_validate: unable to validate password for user hsielsch in domain GEIBN to Domain controller GEISERVER. Error was code 0. [2002/11/18 15:06:36, 1] smbd/password.c:pass_check_smb(504) Couldn't find user 'hsielsch' in smb_passwd file. [2002/11/18 15:06:36, 1] smbd/password.c:pass_check_smb(504) Couldn't find user 'hsielsch' in smb_passwd file. [2002/11/18 15:06:36, 0] rpc_parse/parse_prs.c:prs_mem_get(317) prs_mem_get: reading data of size 60 would overrun buffer. [2002/11/18 15:06:36, 0] smbd/password.c:domain_client_validate(1369) domain_client_validate: unable to validate password for user hsielsch in domain GEIBN to Domain controller GEISERVER. Error was code 0. [2002/11/18 15:06:36, 1] smbd/password.c:pass_check_smb(504) Couldn't find user 'hsielsch' in smb_passwd file. [2002/11/18 15:06:36, 1] smbd/password.c:pass_check_smb(504) Couldn't find user 'hsielsch' in smb_passwd file. [2002/11/18 15:06:36, 0] rpc_parse/parse_prs.c:prs_mem_get(317) prs_mem_get: reading data of size 60 would overrun buffer. [2002/11/18 15:06:36, 0] smbd/password.c:domain_client_validate(1369) domain_client_validate: unable to validate password for user hsielsch in domain GEIBN to Domain controller GEISERVER. Error was code 0. [2002/11/18 15:06:36, 1] smbd/password.c:pass_check_smb(504) Couldn't find user 'hsielsch' in smb_passwd file. [2002/11/18 15:06:36, 1] smbd/password.c:pass_check_smb(504) Couldn't find user 'hsielsch' in smb_passwd file. [2002/11/18 15:08:50, 0] rpc_parse/parse_prs.c:prs_mem_get(317) prs_mem_get: reading data of size 60 would overrun buffer. [2002/11/18 15:08:50, 0] smbd/password.c:domain_client_validate(1369) domain_client_validate: unable to validate password for user hsielsch in domain GEIBN to Domain controller GEISERVER. Error was code 0. __ E-Mails sehen immer gleich aus? Aber nicht bei WEB.DE FreeMail! http://freemail.web.de/features?mc=021138 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] The Samba Team announces Samba 2.2.7 - security release
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The Samba Team is proud to announce the release of Samba 2.2.7. A security hole has been discovered in versions 2.2.2 through 2.2.6 of Samba that could potentially allow an attacker to gain root access on the target machine. The word potentially is used because there is no known exploit of this bug, and the Samba Team has not been able to craft one ourselves. However, the seriousness of the problem warrants this immediate 2.2.7 release. In addition to addressing this security issue, Samba 2.2.7 also includes thirteen unrelated improvements. These improvements result from our process of continuous quality assurance and code review, and are part of the Samba team's commitment to excellence. The source code can be downloaded from : http://download.samba.org/samba/ftp/ All current source releases have been signed as well using the Samba Distribution Key (http://web/samba/ftp/samba-pubkey.asc) Binary packages for major platforms can be found at http://download.samba.org/samba/ftp/Binary_Packages/ The release notes follow. As always, all bugs are our responsibility. --Enjoy The Samba Team WHAT'S NEW IN Samba 2.2.7 - 20th November 2002 == This is the latest stable release of Samba. This is the version that all production Samba servers should be running for all current bug-fixes. IMPORTANT: Security bugfix for Samba - Summary - --- A security hole has been discovered in versions 2.2.2 through 2.2.6 of Samba that could potentially allow an attacker to gain root access on the target machine. The word potentially is used because there is no known exploit of this bug, and the Samba Team has not been able to craft one ourselves. However, the seriousness of the problem warrants this immediate 2.2.7 release. In addition to addressing this security issue, Samba 2.2.7 also includes thirteen unrelated improvements. These improvements result from our process of continuous quality assurance and code review, and are part of the Samba team's commitment to excellence. Details - --- There was a bug in the length checking for encrypted password change requests from clients. A client could potentially send an encrypted password, which, when decrypted with the old hashed password could be used as a buffer overrun attack on the stack of smbd. The attach would have to be crafted such that converting a DOS codepage string to little endian UCS2 unicode would translate into an executable block of code. All versions of Samba between 2.2.2 to 2.2.6 inclusive are vulnerable to this problem. This version of Samba 2.2.7 contains a fix for this problem. Earlier versions of Samba are not vulnerable. There is no known exploit or exploit code for this vulnerability, it was discovered by a code audit by Debian Samba maintainers. Credit - -- Thanks to Steve Langasek and Eloy Paris for bringing this vulnerability to our notice. Patch for Samba versions 2.2.2 to 2.2.6 - --- The following patch applies cleanly to the above Samba versions and will fix the vulnerability for sites that do not wish to upgrade to 2.2.7 at this time. - ---cut here- - --- libsmb/smbencrypt.c.origTue Nov 19 17:21:57 2002 +++ libsmb/smbencrypt.c Tue Nov 19 17:22:12 2002 @@ -63,7 +63,7 @@ if(len 128) len = 128; /* Password must be converted to NT unicode - null terminated. */ - - dos_struni2((char *)wpwd, (const char *)passwd, 256); + dos_struni2((char *)wpwd, (const char *)passwd, len); /* Calculate length in bytes */ len = strlen_w((const smb_ucs2_t *)wpwd) * sizeof(int16); - ---cut here- Changes since 2.2.6 - See the cvs log for SAMBA_2_2 for more details 1) ensure we send the notify message in the same way it is expected to be received by srv_spoolss_receive_message(). 2) attribute matching on truncate only matters when opening truncate with current SYSTEM|HIDDEN - NONE. It's fine to truncate on open with current NONE - SYSTEM | HIDDEN. 3) Fix bug in rpcclient's deldriver command 4) Don't set global_machine_password_needs_changing if lp_machine_password_timeout() is set to zero 5) don't parse the BUFFER5 if the buffer length is zero 6) fix core dump if pdbedit is run as non-root or smbpasswd file does not exist 7) Ensure can_delete() returns correct error code 8) correctly return NT_STATUS_DELETE_PENDING from open code 9) fix bug that assumed dos_unistr2 length was in ucs2 units, not bytes 10) check the long_archi name is not null when deleting a printer driver. fixes core dump in smbd when using rpcclient's deldriver 11) fix fd
[Samba] WINBIND cache and security
Two logistic questions regarding winbind: 1. I am not clear based on the description as to the winbind cache. I am wondering if the PDC of the network goes down, if the WINBIND cache maintain the passwords as well as the user/group information...ORif with each request the server actually polls the PDC to get the password? 2. Currently, since I am using full NT user/group authentication without any local users, I have the directory permissions set to 777..is this the correct way to do it, it was the only way I could ifnd to let read/write access? In addition, if there is a sub-directory that needs different access rights, can that not be achieved because I am using the NT authentication? Thanks Chris McKeever -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NT_STATUS_LOGON_FAILURE
Alle 14:23, mercoledì 20 novembre 2002, hai scritto: ok: smbclient -L hostname -U username -W DomainNameOrWorkgroupName to list the shares of the smb server smbclient //hostname/sharename -U username -W DomainNameOrWorkgroupName Thank you so much for the disturb ! [root@Nancy gt]# smbclient -L rxzsue -U giuseppe -W IRT added interface ip=xxx.xxx.xxx.xxx bcast=xxx.xxx.xxx.xxx nmask=255.255.255.0 Got a positive name query response from xxx.xxx.xxx.xxx ( xxx.xxx.xxx.xxx ) Password: session setup failed: NT_STATUS_LOGON_FAILURE giuseppe is the account on the windows XP, right ? Please help Frank, thank you Giuseppe Torelli LCDN - Il portale al servizio del tuo PC http://www.lcdn.it -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Filesystem and file number limitations
Hello everyone, I am planning to use SAMBA for the following: OS: AIX 5.1 or 5.2 Filesystem Size: 1 Terabyte JFS2. Number of files: 20 million small files (30k - 100k). File distribution: 16000 files per directory. Directory structure: 1300 directories. File access: By an application only, not Explorer. Clients: 300 total, 100 concurrent users. Environment: WAN over TCP/IP. Clients are all flavors of Windows from 95 to XP. Is there any benchmarks for such setups or any known limitations for SAMBA or it only depends on the number of clients? thank you in advance Theo -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SWAT, where ? Got it, not working :-(
Thanks Mike, it wasn't included with the Samba I had so I downloaded the latest. SWAT is not working though... it's there but I can't get to it from the browser on my PC. I've done the modification to /etc/services and created a file named swat in the xinet.d directory as shown in http://samba.linuxbe.org/en/samba/learn/swat.html Using RedHat 7.2 and now Samba 2.2.6 and rebooted several times. Thanks Mike G'day... You may have already checked this, but open up a web browser on the server and point it to http://localhost:901/ - just in case your distro has automatically included it... `rpm -qa | grep swat` may also indicate if it's installed already or not... Mike --- Michael S. E. Kraus Administration Capital Holdings Group (NSW) Pty Ltd [EMAIL PROTECTED] phone (02) 9955 8000 fax (02) 9955 8144 Mike Stewart [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 20/11/2002 02:39 AM Please respond to Mike Stewart To: [EMAIL PROTECTED] cc: Subject:[Samba] SWAT, where ? Hi there... first I apologise for being dim... Where can I download SWAT from ? I've looked on the Samba.org site but it only tells me that the demo page is off-line and no more info. Idiot proof instructions for installing it on RH 7.2 would be handy too :-) Thanks Mike -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Modifying file permissions from Windows
I have configured Mandrake Linux 9.0 as a member of a Win2K domain in an effort to integrate a Linux file server in an existing Windows domain. I have configured Samba with all the default setting. In Windows I can see the server and the share properly. The problem is that I cannot modify any file and directory permissions from the PDC. Allglobal and share settings for Samba are as recommended by the Samba documentation and still when I try to modify any file permission from WindowsI get "Access denied" error. I tried on the Linux box to give all possible privileges to the user that I am logged on as in Windows, but this does not help. Strangely I can take ownership of a file or directory, but even then I cannot modify permissions. Can anyone give any direction where should I be looking for the problem. The ultimate goal is to replace a Novell file server with Linux I am not surehow to manage the complex group and user file permissions thatare currently on the Novell server with Linux. Julian Kolarov
[Samba] cupsaddsmb failure
When running the cupsaddsmb command, I get the following: Since I am running as root, what do I not have access to and why? Any help would be appreciated. Glen Crowley ...OLE_Obj... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Updating Samba
Does anyone know how to update a remote samba server right from webmin? Amy AndersonI.T. ManagerFirst Michigan Title Inc.Phone 734-462-0002[EMAIL PROTECTED]
Re: [Samba] here's a fix for Goldmine (and other ISAM database basedprograms) on Windows NT/2000/XP clients talking to samba
We have experienced the same sort of problems on an older DOS shared database system that functions similarly to Goldmine. Instead of disabling oplocks on the clients, we disable oplocks on the specific share for that application: example (note last line): [tracker] path = /usr/shares/tracker read only = No create mask = 0777 directory mask = 0777 force group = tracker oplocks = no After running testparm it looks like this share should also have: level2 oplocks = no This effectively fixes the problems for our application without having to disable anything on the desktop or affect oplocks on the other shares on the server (AFAIK). Did you try disabling oplocks on the server and have it not work and thus have to disable them on the desktop? Regards, Cymen Vig Jeff Davies wrote: However, opportunistic locking corrupts ISAM and ISAM like databases. Here is how to turn off opportunistic locking. (NOTE: It has to be turned off at a system wide level, there is no provision in windows to enable this for some file services and not for others.) --- Opportunistic locking turned off on the Windows XP client in this way: Start-Run-(type in) RegEdt32 navigate to \Hkey_Local_Machine\System\CurrentControlSet\Services\LanManServer\Parameters new Key or type DWORD name EnableOplocks leave value at default 0. navigate to \Hkey_Local_Machine\System\CurrentControlSet\Services\LanManWorkstation\Parameters new Key or type DWORD name EnableOplocks leave value at default 0. Close rededt32 and reboot. - --- This has solved our Goldmine database corruption problems (started when the first Windows XP client was connected (all other machines were Windows 98). Wizard Systems, makers of Goldmine has been notified, and the above information will be on their support database. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] How to configure Samba to use multiples ldap servers
Hi all, I have two Samba+LDAP (PDC and BDC) that works fine, but I have the following situation: I have a LDAP Master and two LDAP slave's servers (OpenLDAP2). When the Master is down, the Samba cannot authenticate the users (its logic). My question is: how to configure the Samba to use more than one LDAP server ??? Samba can use the ldap srv DDNS registers ??? Someone can help me ??? With best regards, Fabiano Felix -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win XP + Samba PDC ( problem )
On Wed, 2002-11-20 at 08:49, Michael Sage wrote: Daniel, I am having the same problem as you, my XP machine will promote into the domain every time, but I cannot get it to log into the domain. The error I get is: Windows cannot connect to the domain, either because the domain controller is down or is unavailable or because the computer account was not found. Please try again later, if this message continues to appear contact your systems administrator for assistance This is the exact symptom of not having applied the signorseal reg fix. not for michael since his setup seems to work most of the time. Any ideas? I assume because the computer was promoted into the domain the computer account must exist and work properly. just look to be sure... brad -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba PDC windoze BDC
On Wed, 2002-11-20 at 09:41, Bill Dossett wrote: Hi, During my migration to samba, I had kind of assumed that I could run Samba as a PDC and my windoze server as a BDC to ease the migration path a little and still keep the same domain. I was going to use samba 2.2.5 on the PDC and NT4 sp6 on the BDC. After reading quite a bit, it looks as though this doesn't work? Is there a way to make it work? not with samba 2 Does Samba 3 handle this? maybe soon Is Samba 3 stable for production? depends on your environment - probably no it is alpha software -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SWAT, where ? Got it, not working :-(
On Wed, 2002-11-20 at 11:30, Mike Stewart wrote: Thanks Mike, it wasn't included with the Samba I had so I downloaded the latest. SWAT is not working though... it's there but I can't get to it from the browser on my PC. what happens? can you not log in? do you see nothing? connection refused? does swat appear in the process list when you try to connect? are you using http://localhost:901/? I've done the modification to /etc/services and created a file named swat in the xinet.d directory as shown in http://samba.linuxbe.org/en/samba/learn/swat.html try posting your xinetd file file I'm not using xinetd but i assume it logs problems just like inetd does have a look through /var/log/* for what happens when you try to log in Using RedHat 7.2 and now Samba 2.2.6 and rebooted several times. why? - rebooting does nothing but waste your time. just restart the xinetd and samba services /etc/init.d/xinetd restart (or similar) brad -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Delay on first Attempt to resolve PDC host name
I am using samba 2.2.1a , in an NT-4 domain. security = DOMAIN on the first logon to the samba server, I can see a message: Attempting host lookup for name MYPDCNAME0x20 the next message appears after 10 seconds (that is the delay). samba tries to resolve MYPDCNAME with the wins server, and succeeds. Higher debug level (debug level = 10) does not produce more debug messages. Any ideas why I have this delay ? Thanks, Nir [2002/11/20 15:28:52, 3, pid=1293] smbd/process.c:process_smb(841) Transaction 2 of length 214 [2002/11/20 15:28:52, 3, pid=1293] smbd/process.c:switch_message(654) switch message SMBsesssetupX (pid 1293) [2002/11/20 15:28:52, 3, pid=1293] smbd/sec_ctx.c:set_sec_ctx(316) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2002/11/20 15:28:52, 3, pid=1293] smbd/reply.c:reply_sesssetup_and_X(865) Domain=[CYBERARK_DOM] NativeOS=[Windows 2002 2600 Service Pack 1] NativeLanMan=[Windows 2002 5.1] [2002/11/20 15:28:52, 3, pid=1293] smbd/reply.c:reply_sesssetup_and_X(876) sesssetupX:name=[Weiss] [2002/11/20 15:28:52, 4, pid=1293] smbd/server.c:reload_services(357) RELOAD 1 [2002/11/20 15:28:52, 1, pid=1293] /home/devyaron/import/PASmb/paops.c:pa_map_username(6856) user=Weiss [2002/11/20 15:28:52, 1, pid=1293] /home/devyaron/import/PASmb/pasmbusers.c:pa_add_local_user(74) Local user already exists (weiss) [2002/11/20 15:28:52, 3, pid=1293] lib/util_sock.c:open_socket_in(832) bind succeeded on port 0 [2002/11/20 15:28:52, 4, pid=1293] libsmb/nmblib.c:debug_nmb_packet(109) nmb packet from 192.168.41.203(137) header: id=8110 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=*00 rr_type=33 rr_class=1 ttl=0 answers blah blah blah answers blah blah blah answers blah blah blah answers e0 char ... hex 00 [2002/11/20 15:28:52, 3, pid=1293] libsmb/namequery.c:resolve_lmhosts(733) resolve_lmhosts: Attempting lmhosts lookup for name ORCA0x20 [2002/11/20 15:28:52, 4, pid=1293] libsmb/namequery.c:startlmhosts(448) startlmhosts: Can't open lmhosts file /usr/local/samba/lib/lmhosts. Error was No such file or directory [2002/11/20 15:28:52, 3, pid=1293] libsmb/namequery.c:resolve_hosts(773) resolve_hosts: Attempting host lookup for name ORCA0x20 10 SECONDS DELAY *** [2002/11/20 15:29:02, 3, pid=1293] libsmb/namequery.c:resolve_wins(675) resolve_wins: Attempting wins lookup for name ORCA0x20 [2002/11/20 15:29:02, 3, pid=1293] libsmb/namequery.c:resolve_wins(693) resolve_wins: WINS server == 192.168.41.254 [2002/11/20 15:29:02, 3, pid=1293] lib/util_sock.c:open_socket_in(832) bind succeeded on port 0 [2002/11/20 15:29:02, 4, pid=1293] libsmb/nmblib.c:debug_nmb_packet(109) nmb packet from 192.168.41.254(137) header: id=19439 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=ORCA20 rr_type=32 rr_class=1 ttl=0 answers 0 char ). hex C0A829CB [2002/11/20 15:29:02, 2, pid=1293] libsmb/namequery.c:name_query(407) Got a positive name query response from 192.168.41.254 ( 192.168.41.203 ) [2002/11/20 15:29:02, 3, pid=1293] lib/util_sock.c:open_socket_out(864) Connecting to 192.168.41.203 at port 139 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Controlling smbclient from python weirdness
I've written a python wrapper around the smbclient program, so that I can list/upload/download from Windows shares. Using smbclient 2.0.9 or Version 2.2.5-2 for Debian, my wrapper works well and is able to control the smbclient process via pipes well. With both smbclient 2.999+3.0cvs20020723-1 and 2.999+3.0.alpha20-3 (on a Debian box) the smbclient responses appear to be not always BEFORE the new smbclient command prompt. I expect this kind of behaviour: smb: \ ls Ranger D0 Tue Nov 20 12:45:40 2001 telix D0 Tue Nov 20 14:56:28 2001 DOS D0 Tue Nov 20 14:57:32 2001 65526 blocks of size 32768. 65526 blocks available smb: \ But with the more recent smbclient versions I get this: smb: \ ls smb: \ Ranger D0 Tue Nov 20 12:45:40 2001 telix D0 Tue Nov 20 14:56:28 2001 DOS D0 Tue Nov 20 14:57:32 2001 65526 blocks of size 32768. 65526 blocks available And once I saw this: smb: \ ls Ranger D0 Tue Nov 20 12:45:40 2001 telix D0 Tue Nov 20 14:56:28 2001 smb: \ DOS D0 Tue Nov 20 14:57:32 2001 65526 blocks of size 32768. 65526 blocks available As I look for the command prompt to know smbclient has finished giving me the reply, this messes things up. I control smbclient via popen4() in python2.1. I've found this strange placement in the prompt to be the reason my code isn't working, via running smbclient like this: c = popen2.Popen4(smbclient //machine/c -N | tee /tmp/smb_out.txt) And watching smb_out.txt (Popen3() acts the same way). Is this likely to be an issue with how python talks to the process ? I have not included a test case in this mail because it would make it longer than it already is, but can provide one. Note that when I talk to the smbclient myself (via starting one from a shell) it appears to act normally. Is there anymore information I could provide to help find out why this occurs ? Thanks, Nick -- Part 3 MEng Cybernetics; Reading, UK http://www.nickpiper.co.uk/ GPG Encrypted mail welcome! 1024D/3ED8B27F Choose life. Be Vegan :-) Please reduce needless cruelty + suffering ! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba and Windows XP
Unfortunately that was not the solution. I followed the recipe and still encountered the error. Here's a more detailed description of the environment: A linux server running samba-2.2.6 (compiled with --with-ssl --with-pam) and openssl-0.9.6g (compiled with shared libraries). It is configured for security=user, domain master=yes, preferred master=yes, os level=34, domain logins = yes. I have no other Windows servers on the network so Samba is the only DC (primary or otherwise). I have 5 workstations all running WinXP SP1. I set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\req uiresignorseal=0 on each workstation. I get the message when I attempt to add Domain Users to the local machine group Administrators. I've tried using the local machine user Administrator or the domain admin user root but am still unsuccessful. I haven't found where to configure the equivelent of active directory or group policies on this release of samba so if anything like that needs to be configured, it'll have to be on the workstation. As an aside, I have roaming profiles and they work just peachy. Other than this issue samba works great! Thanks in advance for your help. Patrick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of John Russell Sent: Tuesday, 19 November 2002 1:32 AM To: [EMAIL PROTECTED] Subject: Re: [Samba] Samba and Windows XP this is a security check new to Windows XP (or maybe only Windows XP service pack 1). It can be disabled via a group policy in Active Directory. The policy is: Computer Configuration\Administrative Templates\System\User Profiles\Do not check for user ownership of Roaming Profile Folders ...and it should be set to Enabled. Does the new version of samba have an Active Directory analogue? If so, then you may be able to set the policy through this. If you cannot set group policies in samba, then you may be able to set the policy locally on each machine. If you want to try this, then do the following (N.B. I don't know for sure that this will work in the same way as a domain group policy): On the XP workstation log in with an Administrator account. Click: Start, Run Type: mmc Click: OK A Microsoft Management Console should appear. Click: File, Add/Remove Snap-in..., Add Double-Click: Group Policy Click: Finish, Close Click: OK In the Console Root window: Expand: Local Computer Policy, Computer Configuration, Administrative Templates, System, User Profiles Double-Click: Do not check for user ownership of Roaming Profile Folders Select: Enabled Click: OK Close the whole console. You do not need to save the settings (this refers to the console settings rather than the policies you have changed). Reboot. - Original Message - From: Patrick Bennett Hagen [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, November 19, 2002 5:32 AM Subject: [Samba] Samba and Windows XP I have a domain user that lacks rights to the local machine to run RPC. Under a real Win2k domain, I'd assign the Domain Users group to the local machine Administrators group so I could avoid any registry, file system or services rights (I don't care if they have full access to the local machine). When I do that I get an error: Information returned from the object picker for object Domain Admins was incomplete. The object will not be processed I cranked up the verbosity in the log files and I get nothing. Has anyone had and resolved the same problem? Any help or suggestions are appreciated. I've search hi and lo on Google (I found one posting last year but he never got a reply and he hasn't replied to an email I sent him). Also, the Samba lists don't have anything as far as I can tell... Thanks, Patrick -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] FYI : oplock problems
On Wed, Nov 20, 2002 at 09:36:18AM +, Thierry ITTY wrote: FYI, I'm setting up a file server for 1000 users based on mdk 8.0, self-compiled 2.4.19 + acl patches, self compiled samba 2.2.6, 100 Mbps NIC this server is right now in a pre-prod status and is currently used only by very few users while loading several +100 MB files on a share from a NT 4 wks 100 Mbps, we got several session cancelled messages, and un-killable D-state smbd processes on the server. This is a kernel bug. 'D' states are *always* kernel bugs. setting oplocks = no on the share and rebooting (the only way to remove D-state processes in this case) solved the problem oplocks are definitively a nightmire for us here... You could have turned off kernel oplocks - looks like you have a problem with this kernel. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] SWAT, where ? Got it, not working :-(
Make sure that /etc/services has port 901 assigned to swat, or else you get an error message in Mozilla... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Bradley W. Langhorst Sent: Wednesday, November 20, 2002 9:16 AM To: Mike Stewart Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Samba] SWAT, where ? Got it, not working :-( On Wed, 2002-11-20 at 11:30, Mike Stewart wrote: Thanks Mike, it wasn't included with the Samba I had so I downloaded the latest. SWAT is not working though... it's there but I can't get to it from the browser on my PC. what happens? can you not log in? do you see nothing? connection refused? does swat appear in the process list when you try to connect? are you using http://localhost:901/? I've done the modification to /etc/services and created a file named swat in the xinet.d directory as shown in http://samba.linuxbe.org/en/samba/learn/swat.html try posting your xinetd file file I'm not using xinetd but i assume it logs problems just like inetd does have a look through /var/log/* for what happens when you try to log in Using RedHat 7.2 and now Samba 2.2.6 and rebooted several times. why? - rebooting does nothing but waste your time. just restart the xinetd and samba services /etc/init.d/xinetd restart (or similar) brad -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] winbindd again!!!
hello !!! when i type smbpasswd -j centroadm the command says: Connecting to 10.1.1.1 at port 445 fetch_domain_sid: machine pmf rejected the tconX on the IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. Failed to get domain SID. Unable to join domain CENTROADM. i use samba 2.2.6 and windows 2000 with active directory. any help me?? thanks wilson -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] windows connection problem
I have installed a samba server which is visible through 2 win 95 clients in the network. From two other computers, a win 95 and a win 98, the server is not att all visible when browsing. As i see it the prbolem must be in the client but I can not see what, as they are pretty much the same all of them. I've looked through the archive of this list and a common problem seems to be, that the server is visible but not accessible. /Mats GustafssonMats Gustafsson [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba 2.2.x
hello.! the samba 2.2.X joins correctly on a windows 2000 server pdc? thanks wilson -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] PDC Problems
Michele Santucci wrote: I got the problem clear: when i try to join the domain (as root) smb reports in the machine log that guest is trying to do something and it fails authentication... You never mentioned that you couldn't join the domain. You should get a Welcome to the Domain Domain message if it worked. I now assume you didn't get one. Not at all I got the Welcome to the domain CCGM but in the logs I got this: [2002/11/20 19:57:44, 0] smbd/service.c:make_connection(381) make_connection: root logged in as admin user (root privileges) [2002/11/20 19:57:44, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2050) Returning domain sid for domain CCGM - S-1-5-21-739079523-194949929-328313008 3 [2002/11/20 19:57:46, 0] smbd/password.c:authorise_login(863) authorise_login: rejected invalid user guest [2002/11/20 19:57:47, 2] smbd/service.c:make_connection(331) Invalid username/password for ipc$ [guest] [2002/11/20 19:58:45, 0] smbd/password.c:authorise_login(863) authorise_login: rejected invalid user guest [2002/11/20 19:58:45, 2] smbd/service.c:make_connection(331) Invalid username/password for ipc$ [guest] [2002/11/20 19:59:46, 2] smbd/server.c:exit_server(461) Closing connections All these lines comes during the domain joining of the workstation.. Please remember, the more information you give about your problem, the easier it is for other people to help you. Of course... that's the way I 'd attached the smb.conf file :-) (this time I wrote it by hand with pico) $ smbclient -L server_name -U root yep and I got this: Domain=[CCGM] OS=[Unix] Server=[Samba 2.2.6] Sharename Type Comment - --- public Disk Public Folder ccgm Disk CCGM Folder satyagra Disk Satya Gra Folder IPC$ IPC IPC Service (Samba Server 2.2.6) ADMIN$ Disk IPC Service (Samba Server 2.2.6) root Disk Home Directories Server Comment ---- ARCHIVIO CCGMSERVER Samba Server 2.2.6 GFX RECEPTION SERVER-CCGM Samba Server 2.2.6 VIDEO WorkgroupMaster ---- CCGM CCGMSERVER WORKGROUPGFX smb.conf Description: Binary data
Re: [Samba] Problems with Word 200 and Samba 2.2.6
Microsoft Word 2000 with Service Pack 2 for Office. Client OS is Windows 2000 Service Pack 2 I've attached my smb.conf Actually, the problem was fixed by restarting the samba service. I feel stupid that I didn't try it earlier. I didn't think it would make any difference (samba is emulating windows behavior a little better than I'd like :-). I can see the call to set_nt_acl in the debug logs now has the correct permissions. I'm a little confused as to why restarting samba would have this kind of strange effect. If you have any ideas on why I'd love to hear them. On Wed, 20 Nov 2002, John H Terpstra wrote: On Wed, 6 Nov 2002, Ed Stoner wrote: I'm hoping someone has some insight into a problem I'm currenty having, which is: No one is able to edit (in place) documents with Word 2000 on a samba (2.2.6) disk share. A user can open word and save a document to the share, but when they go to edit the document Word says Word cannot complete the save due to a file permission error. From Microsoft KB Q211632 it appears that Word 2000 performs the following steps to Save an Edited File: 1.) Create a temp file (Create ~wrd.tmp) 2.) Write temp file (Save example data to ~wrd.tmp) 3.) Delete original file (Delete EXAMPLE.DOC) 4.) Move temp to target name (Move ~wrd.tmp to EXAMPLE.DOC) From examining the samba debug log (attached) it does appear that this happens. It also appears that somewhere in steps 1 and 2 above Word sends a request to turn off the read,write,and execute bits for the owner of the file. When you look at this filesystem after the attempted save the original file does indeed have these bits cleared (i.e. the user has no read,write,or execute permissions on the file), and that I think is why the error is being generated. What update level (service pack) have you installed on your Word 2000 system? Please tell us what is the exact version information from clicking on Help/About in Word. Please check that your Word is up to date with all service updates from the MS Web site. Also, what is the client OS and it's update level? Also, please send your smb.conf to [EMAIL PROTECTED] and I'll check it over. - John T. I've tried setting the 'create mask', 'security mask', 'force create mode', and 'force security mode' parameters to no avail (I assumed that setting 'force security mode' to 0700 would prevent a file from getting rwx removed from the owner). I've also tried turning 'nt acl support' on and off. I've attached my config file also. My questions are: 1.) has anyone else seen this error? 2.) if so is there a fix? 3.) why does smbd/posix_acls.c:set_nt_acl allow chmod to 000? P.S. This does not happen with the same client config connecting to either an NT Share or a 2000 Share, in case anyone is curious (i.e. I don't think it is a client thing) thanks - Ed Stoner Network Administrator Woodland Hills School District (412) 731-1300 x0109 # This is the main Samba configuration file. You should read the # smb.conf(5) manual page in order to understand the options listed # here. Samba has a huge number of configurable options (perhaps too # many!) most of which are not shown in this example # # Any line which starts with a ; (semi-colon) or a # (hash) # is a comment and is ignored. In this example we will use a # # for commentry and a ; for parts of the config file that you # may wish to enable # # NOTE: Whenever you modify this file you should run the command testparm # to check that you have not made any basic syntactic errors. # #=== Global Settings = [global] # workgroup = NT-Domain-Name or Workgroup-Name workgroup = WHSD # server string is the equivalent of the NT Description field server string = Zeus Samba Server # This option is important for security. It allows you to restrict # connections to machines which are on your local network. The # following example restricts access to two C class networks and # the loopback interface. For more examples of the syntax see # the smb.conf man page ; hosts allow = 192.168.1. 192.168.2. 127. # if you want to automatically load your printer list rather # than setting them up individually then you'll need this printcap name = /etc/printcap ; load printers = yes # It should not be necessary to spell out the print system type unless # yours is non-standard. Currently supported print systems include: # bsd, sysv, plp, lprng, aix, hpux, qnx ; printing = bsd # Uncomment this if you want a guest account, you must add this to /etc/passwd # otherwise the user nobody is used ; guest account = pcguest # this tells Samba to use a separate log file for each machine # that connects log file = /var/log/samba/log.%m log level = 1 # Put a capping on the size of the log files (in Kb). max
[Samba] Limiting User Space on Samba Share
Hi, Can someone tell me if Samba can limit users to certain amounts of space on specified shares? If so, where would I go to find out how to implement it? I have the following setup: RHL 7.2, Samba 2.2.3a using a Windows 2000 PDC with Winbind. I want to be able to set a limit for each user on certain folders/shares on the Linux box that they are accessing from Windows systems. Thanks, Kevin Bramblett -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Does anyone have winbind working on Freebsd?
I have been trying to setup a Samba 2.2.6 server on FreeBSD 4.7. I want to use my NT4 domain for authentication of users. It looks like everything is setup properly as far as winbind is concerned, see below for results using wbinfo. I am still prompted for a password when trying to connect to the samba share. I cannot list the shares using smbclient -L servername -Udomain+username either, I get a server timeout error and the following error in my log.smbd: error connecting to 10.110.22.7:445 (Invalid argument) Using getent passwd only returns the unix users, not any domain users. I configured samba using --with-winbind and --with-winbind-auth-challenge, and followed Unified logons between NT and Unix using winbind. Joined the samba server to my NT domain successfully. Freebsd 4.7 does not have a /lib folder so at the step for copying libnss_winbind.so to the /lib folder, I am copying to /usr/local/lib. I have also tried using the following folders: /usr/lib /usr/compat/linux/usr/lib /usr/compat/linux/lib but it still doesn't work. Does anyone have any idea why I am receiving the above error? I'm sure if I could correct the error this would all work, and if I could get getent passwd to show my domain users as well as just the local unix users, again this would be working. TIA for any help. wbinfo -t returns Secret is good wbinfo -u returns a list of all my domain users wbinfo -g returns a list of all domain groups wbinfo -a mydomain+myuser%mypassword returns success for both plaintext and challenge/response Here's my smb.conf: # Samba config file created using SWAT # from 10.110.22.40 (10.110.22.40) # Date: 2002/11/16 15:19:26 # Global parameters [global] workgroup = MYDOMAIN security = DOMAIN encrypt passwords = Yes password server = * winbind uid = 1-2 winbind gid = 1-2 winbind separator = + winbind enum users = yes winbind enum groups = yes log level = 2 wins server = 192.168.0.7 [work] path = /usr/work valid users = Domain Users read only = No Here's my log.smbd: [2002/11/16 15:59:13, 2] param/loadparm.c:do_section(3055) Processing section [work] [2002/11/16 15:59:13, 2] lib/interface.c:add_interface(81) added interface ip=10.110.22.78 bcast=10.110.23.255 nmask=255.255.254.0 [2002/11/16 15:59:48, 2] smbd/reply.c:reply_special(92) netbios connect: name1=EDM-GEO name2=EDM-02 [2002/11/16 15:59:48, 2] smbd/reply.c:reply_special(111) netbios connect: local=edm-geo remote=edm-02 [2002/11/16 15:59:48, 2] libsmb/namequery.c:name_query(421) Got a positive name query response from 10.110.22.7 ( 10.110.22.7 ) [2002/11/16 15:59:48, 2] lib/util_sock.c:open_socket_out(874) error connecting to 10.110.22.7:445 (Invalid argument) [2002/11/16 15:59:54, 2] smbd/service.c:make_connection(331) Invalid username/password for work [nobody] [2002/11/16 15:59:56, 2] smbd/service.c:make_connection(331) Invalid username/password for work [nobody] [2002/11/16 16:00:47, 2] smbd/server.c:exit_server(461) Closing connections -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] PDC Problems 2
BTW if I try to login after having 'sucessfully' joined the domain and rebooted the system I got this: Cannot login! The remote user doesn't exist and/or the password is invalid (with every user registered onto the pdc) P.S. I patched the workstation (W2K SP3) with the plainpassword.reg fix... C.ya -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] pam authentication failing...
Hi All, Brand new box, running FreeBSD 4.7 and 2.2.6 of SAMBA. I keep getting the following when a legit user attempts to login: [2002/11/20 11:15:46, 0] passdb/pampass.c:smb_pam_passcheck(827) smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User steve ! [2002/11/20 11:15:46, 0] passdb/pampass.c:smb_pam_passcheck(827) smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User steve ! The machine is 98 (with the registry mod for plain text), and smb.conf has: encrypt passwords = no I know I must have missed something, just can't find it, too little sleep probably :( TIA Steve -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problems with Word 200 and Samba 2.2.6
On Wed, 20 Nov 2002, Ed Stoner wrote: Microsoft Word 2000 with Service Pack 2 for Office. Client OS is Windows 2000 Service Pack 2 I've attached my smb.conf Actually, the problem was fixed by restarting the samba service. I feel stupid that I didn't try it earlier. I didn't think it would make any difference (samba is emulating windows behavior a little better than I'd like :-). I can see the call to set_nt_acl in the debug logs now has the correct permissions. I'm a little confused as to why restarting samba would have this kind of strange effect. If you have any ideas on why I'd love to hear them. Good to see another happy customer. I will not speculate as to the cause. If it happens again then you will want to isolate the cause. Cheers, John T. On Wed, 20 Nov 2002, John H Terpstra wrote: On Wed, 6 Nov 2002, Ed Stoner wrote: I'm hoping someone has some insight into a problem I'm currenty having, which is: No one is able to edit (in place) documents with Word 2000 on a samba (2.2.6) disk share. A user can open word and save a document to the share, but when they go to edit the document Word says Word cannot complete the save due to a file permission error. From Microsoft KB Q211632 it appears that Word 2000 performs the following steps to Save an Edited File: 1.) Create a temp file (Create ~wrd.tmp) 2.) Write temp file (Save example data to ~wrd.tmp) 3.) Delete original file (Delete EXAMPLE.DOC) 4.) Move temp to target name (Move ~wrd.tmp to EXAMPLE.DOC) From examining the samba debug log (attached) it does appear that this happens. It also appears that somewhere in steps 1 and 2 above Word sends a request to turn off the read,write,and execute bits for the owner of the file. When you look at this filesystem after the attempted save the original file does indeed have these bits cleared (i.e. the user has no read,write,or execute permissions on the file), and that I think is why the error is being generated. What update level (service pack) have you installed on your Word 2000 system? Please tell us what is the exact version information from clicking on Help/About in Word. Please check that your Word is up to date with all service updates from the MS Web site. Also, what is the client OS and it's update level? Also, please send your smb.conf to [EMAIL PROTECTED] and I'll check it over. - John T. I've tried setting the 'create mask', 'security mask', 'force create mode', and 'force security mode' parameters to no avail (I assumed that setting 'force security mode' to 0700 would prevent a file from getting rwx removed from the owner). I've also tried turning 'nt acl support' on and off. I've attached my config file also. My questions are: 1.) has anyone else seen this error? 2.) if so is there a fix? 3.) why does smbd/posix_acls.c:set_nt_acl allow chmod to 000? P.S. This does not happen with the same client config connecting to either an NT Share or a 2000 Share, in case anyone is curious (i.e. I don't think it is a client thing) thanks - Ed Stoner Network Administrator Woodland Hills School District (412) 731-1300 x0109 -- John H Terpstra Email: [EMAIL PROTECTED] # This is the main Samba configuration file. You should read the # smb.conf(5) manual page in order to understand the options listed # here. Samba has a huge number of configurable options (perhaps too # many!) most of which are not shown in this example # # Any line which starts with a ; (semi-colon) or a # (hash) # is a comment and is ignored. In this example we will use a # # for commentry and a ; for parts of the config file that you # may wish to enable # # NOTE: Whenever you modify this file you should run the command testparm # to check that you have not made any basic syntactic errors. # #=== Global Settings = [global] # workgroup = NT-Domain-Name or Workgroup-Name workgroup = WHSD # server string is the equivalent of the NT Description field server string = Zeus Samba Server # This option is important for security. It allows you to restrict # connections to machines which are on your local network. The # following example restricts access to two C class networks and # the loopback interface. For more examples of the syntax see # the smb.conf man page ; hosts allow = 192.168.1. 192.168.2. 127. # if you want to automatically load your printer list rather # than setting them up individually then you'll need this printcap name = /etc/printcap ; load printers = yes # It should not be necessary to spell out the print system type unless # yours is non-standard. Currently supported print systems include: # bsd, sysv, plp, lprng, aix, hpux, qnx ; printing = bsd # Uncomment this if you want a guest
Re: [Samba] Please no HTML email.
RE: HTML mail, choice descriptions of problems the like... It has been so long since I subscribed to the list I don't know, has any of this type of information trickled its way into the welcome message sent out when you first subscribe? I would in particular like to see a link to the Eric Raymond FAQ on how to ask questions! - john -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] opening excel sheets slow, copying fast ?
Hello all, what is Excel doing while opening a file? There is no delay when opening the same file localy or on a windows 2000 server. But on the samba server it needs 10 seconds. But copying the same file (32K) has no delay at all. (With larger files things get worse, while coping a 60 MB file takes 8 seconds) Other mails mentioned recommended to disable oplocks, but this didn't change anything. Any hint available where to look at? Bye Holger My smb.conf looks like [global] workgroup = HERMOS netbios name = HERMOS2 server string = Hermos comment = Domain encrypt passwords = Yes map to guest = Never socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY # SO_SNDBUF=8760 SO_RCVBUF=8760 character set = ISO8859-15 add user script = /usr/sbin/useradd -d /dev/null -g machines -c 'Machine Account' -s /bin/false -M %u logon script = %G.cmd logon path = \\hermos2\profiles\%u logon drive = H: logon home = \\hermos2\homes\%u domain logons = Yes os level = 66 preferred master = True domain master = True wins support = Yes time server = yes printing = cups printcap name = cups printer admin = @users, root, netzadmin interfaces = eth0:0 bind interfaces only = yes domain admin group = netzadmin #oplocks=no #kernel oplocks = no #level2 oplocks = no #max xmit=32767 [Programme] path = /samba/programme delete readonly = yes create mode = 0770 writeable = yes directory mode = 0770 hide unreadable = yes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] The Samba Team announces Samba 2.2.7 - security release
Gerald (Jerry) Carter wrote: The source code can be downloaded from : http://download.samba.org/samba/ftp/ Is there a permissions problem on the samba-2.2.7.tar.gz.asc file? I don't seem to be able to download it, although I can download the samba-2.2.7.tar.bz2.asc file. In view of trojans that have been installed in sendmail, tcpdump and OpenSSH recently I think it is very important to check the signature. It would be good to include the signatures in the announcement e-mail. Thanks Nick Brealey -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Limiting User Space on Samba Share
On Wed, Nov 20, 2002 at 01:20:27PM -0600, Kevin Bramblett wrote: Can someone tell me if Samba can limit users to certain amounts of space on specified shares? If so, where would I go to find out how to implement it? Samba can't do it, but you can use filesystem quotas in the underlying OS to limit users' disk usage. The one shortcoming is that it's not done by share, it's done by filesystem. So if you want to control (for example) people's user directory sizes on a /home filesystem, it's easy, but if you have one big /export filesystem with a dozen different shares all accessible by the same users quotas can't do what you want. As I recall, Samba has a quota compile-time option that will check the filesystem quotas and use that for the free-space display when users check the properties. Not necessary, but useful. I have the following setup: RHL 7.2, Samba 2.2.3a using a Windows 2000 PDC with Winbind. I want to be able to set a limit for each user on certain folders/shares on the Linux box that they are accessing from Windows systems. I think RH's stock kernels have quota support enabled. If you're using Red Hat's bundled Samba packages, I think those have the quota support I mentioned above compiled in too. You will need the RPMs for the quota tools installed, I think the RPM is just quota or quotas. -- Michael Heironimus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0 Alpha20 PDC: can't create local profile
I am slowly getting this ldap pdc to work... just a few more bullets to extract from my foot... (Warning: I am new to ldap!) I can add win2k (sp2) machines to my domain, but when I attempt to logon to the workstation, I am getting error messages that a temporary profile will be created, followed by a failure to create to create the temporary profile. The administrator account and a test user account both exhibit this behavior. I have been using the smbldap-useradd.pl script to create my user accounts. What have I missed? TIA! BTW: Any idea when Alpha 21 will be posted? __ Do you Yahoo!? Yahoo! Web Hosting - Let the expert host your site http://webhosting.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Help
[EMAIL PROTECTED] writes: Are you using WINS? If your samba server is dependant on broadcast and DNS lookups (since DNS lookups are blocking calls!) you will have a problem. But with WINS this is avoided. Configure your Samba servers as a WINS server: in smb.conf [globals] set wins support = yes, and set your Windows clients tcp/ip config for WINS server to the internal IP address of your samba server, and this problem should go away. Hi John, That was it! I've reconfigured the smb.conf and the Windows 98 machines as your suggestion and everything work out perfectly without depending on the DNS. Once again thank you very much for your help. David N. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] XP and samba accounts
On my XP machine, I go to Control Panel-- User Accounts. It gives a list of Username with Domain/Group associated. Is this only a list of the local XP accounts? I can add samba (acting as PDC) user accounts on there. What would be the purpose of that? Judy -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SAMBA working with MS project
Hello, I am having problems having samba and MS project work together. When I save a project file from my PC to a samba mapped drive on a UNIX box, I get an error and the file is not the correct size. It appears to be truncated. Have you seen this type of error? Machines Information SERVER UNIX SUN E4000 Runing Solaria 8.0 PC Running windows 98 and 2000 using MS project. Thank you for your help Chris Wharton -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] License Metering Software to work with SAMBA
Dear List: We have a 25+ node mixed networked of NT4SP5, Win2K, WinXP. We are currently using Express Meter to control our software licensing and capture data to analyze software license utilization to justify additional licenses, etc. We are running SAMBA v 2.0.7 on a Sun Ultra 2 running Solaris 7. We have been unable to get the reporting functions to work (the Express Meter log files get purged when the data merging / reporting process is performed). A SAMBA debug log shows the following strange sequence of locks / unlocks. The applib.loc file is opened with read=No, write=Yes and then followed by opening another handle on the same file with read=Yes and write=No. This seems a little strange to me and may not be the problem at all. Their tech support is apparently not willing to invest any more time to investigate this problem as it appears to function correctly when the files are stored on an NT workstation. We are not willing to [2002/11/05 15:17:33, 2] smbd/open.c:(602) bburnett opened file em/fromtaurus/applib.loc read=No write=Yes (numopen=3) [2002/11/05 15:17:33, 2] smbd/open.c:(602) bburnett opened file em/fromtaurus/applib.lib read=Yes write=No (numopen=4) [2002/11/05 15:17:33, 2] smbd/open.c:(602) bburnett opened file em/fromtaurus/applib.loc read=Yes write=No (numopen=5) We would like to continue to use Express Meter because of the time we have invested in setup and configuration. However, the reporting capability is a requirement for our firm. Therefore, we are considering switching to another software metering application. We are currently reviewing the following: Keyserver from Sassafras Software Application Metering from Codework If anyone has a suggestion to correct / workaround the above file locking sequence or has experience with these or other software metering applications, I would greatly appreciate your comments (good bad). Thanks, Tom -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbindd again!!!
On 20 Nov 2002, Wilson A. Galafassi Jr. wrote: hello !!! when i type smbpasswd -j centroadm the command says: Connecting to 10.1.1.1 at port 445 fetch_domain_sid: machine pmf rejected the tconX on the IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. Failed to get domain SID. Unable to join domain CENTROADM. You do have a guest account on your system? Check: testparm | grep guest Then verify that the account in guest account = X is in your /etc/passwd file. - John T. i use samba 2.2.6 and windows 2000 with active directory. any help me?? thanks wilson -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] PDC Problems 2
On Wed, 20 Nov 2002, Michele Santucci wrote: BTW if I try to login after having 'sucessfully' joined the domain and rebooted the system I got this: Cannot login! The remote user doesn't exist and/or the password is invalid (with every user registered onto the pdc) P.S. I patched the workstation (W2K SP3) with the plainpassword.reg fix... Sorry. Domain security is NOT compatible with plain-text password only servers. You need to enable encrypted passwords and enter each machine and user into your smbpasswd database. Follow the directions in the Entire-HOWTO-Collection on the samba home page. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] here's a fix for Goldmine (and other ISAM database basedprograms) on Windows NT/2000/XP clients talking to samba
Why not disable oplocks in Samba for the share where the database is stored? Seems simpler than reg hacks on every client. Nov 20 5:42pm They hang the man and flog the woman That steal the goose from off the common, But let the greater villain loose That steals the common from the goose. --English folk poem, circa 1764 On Wed, 20 Nov 2002, Jeff Davies wrote: Goldmine seems to a compiled database application compiled in something likeClipper. Clipper applications record lock through ISAM like files (DBF). However, in Windows NT/2000/XP, Opportunistic locking is turned on by default in order to accelerate file transfer from file services. [Windows 95/98 did not Opportunisticly lock] However, opportunistic locking corrupts ISAM and ISAM like databases. Here is how to turn off opportunistic locking. (NOTE: It has to be turned off at a system wide level, there is no provision in windows to enable this for some file services and not for others.) --- Opportunistic locking turned off on the Windows XP client in this way: Start-Run-(type in) RegEdt32 navigate to \Hkey_Local_Machine\System\CurrentControlSet\Services\LanManServer\Parameters new Key or type DWORD name EnableOplocks leave value at default 0. navigate to \Hkey_Local_Machine\System\CurrentControlSet\Services\LanManWorkstation\Parameters new Key or type DWORD name EnableOplocks leave value at default 0. Close rededt32 and reboot. - --- This has solved our Goldmine database corruption problems (started when the first Windows XP client was connected (all other machines were Windows 98). Wizard Systems, makers of Goldmine has been notified, and the above information will be on their support database. This also should solve similar problems (if any are found) with similar MS Access systems using shared database files (as opposed to passthru SQL to backend ODBC connectors to SQL Servers of one sort or another). There was a post by a user saying Goldmine is a horrible system we moved to MS Access which was rather unhelpful. Our sales people think Goldmine is excellent, and having written many a customised CRM system in Lotus Notes (Dow Jones (London), Ryder UK etc), I also think Goldmine is a good program. (could perhaps do with the option of putting data into a back end SQL server eg MySQL etc). And I've seen an awful lot of CRM systems. Jeff Davies Electronics Engineer Aber Instruments Ltd -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Does anyone have winbind working on Freebsd?
I went through this whole thing a couple of months ago. The problem is that you don't have a good nsswitch working on FreeBSD. The nsswitch on FreeBSD does not do dynamic loadable modules, as the way Linux do. The manual you followed is for Linux users. Richard Sharpe gave me a hint to fix this. Basically you need to change source code, so that smbd knows to check with winbind for the domain user. However, no other daemons on your FreeBSD box will be able to use the domain user, as if you have a good nsswitch. Last time I checked, there is nobody in the FreeBSD community working on improving nsswitch. Let me know if you need further help. Chere From: Brent Ross (Edm) [EMAIL PROTECTED] To: '[EMAIL PROTECTED]' [EMAIL PROTECTED] Date: Wed, 20 Nov 2002 12:29:13 -0700 Subject: [Samba] Does anyone have winbind working on Freebsd? I have been trying to setup a Samba 2.2.6 server on FreeBSD 4.7. I want to use my NT4 domain for authentication of users. It looks like everything is setup properly as far as winbind is concerned, see below for results using wbinfo. I am still prompted for a password when trying to connect to the samba share. I cannot list the shares using smbclient -L servername -Udomain+username either, I get a server timeout error and the following error in my log.smbd: error connecting to 10.110.22.7:445 (Invalid argument) Using getent passwd only returns the unix users, not any domain users. I configured samba using --with-winbind and --with-winbind-auth-challenge, and followed Unified logons between NT and Unix using winbind. Joined the samba server to my NT domain successfully. Freebsd 4.7 does not have a /lib folder so at the step for copying libnss_winbind.so to the /lib folder, I am copying to /usr/local/lib. I have also tried using the following folders: /usr/lib /usr/compat/linux/usr/lib /usr/compat/linux/lib but it still doesn't work. Does anyone have any idea why I am receiving the above error? I'm sure if I could correct the error this would all work, and if I could get getent passwd to show my domain users as well as just the local unix users, again this would be working. TIA for any help. wbinfo -t returns Secret is good wbinfo -u returns a list of all my domain users wbinfo -g returns a list of all domain groups wbinfo -a mydomain+myuser%mypassword returns success for both plaintext and challenge/response Here's my smb.conf: # Samba config file created using SWAT # from 10.110.22.40 (10.110.22.40) # Date: 2002/11/16 15:19:26 # Global parameters [global] workgroup = MYDOMAIN security = DOMAIN encrypt passwords = Yes password server = * winbind uid = 1-2 winbind gid = 1-2 winbind separator = + winbind enum users = yes winbind enum groups = yes log level = 2 wins server = 192.168.0.7 [work] path = /usr/work valid users = Domain Users read only = No Here's my log.smbd: [2002/11/16 15:59:13, 2] param/loadparm.c:do_section(3055) Processing section [work] [2002/11/16 15:59:13, 2] lib/interface.c:add_interface(81) added interface ip=10.110.22.78 bcast=10.110.23.255 nmask=255.255.254.0 [2002/11/16 15:59:48, 2] smbd/reply.c:reply_special(92) netbios connect: name1=EDM-GEO name2=EDM-02 [2002/11/16 15:59:48, 2] smbd/reply.c:reply_special(111) netbios connect: local=edm-geo remote=edm-02 [2002/11/16 15:59:48, 2] libsmb/namequery.c:name_query(421) Got a positive name query response from 10.110.22.7 ( 10.110.22.7 ) [2002/11/16 15:59:48, 2] lib/util_sock.c:open_socket_out(874) error connecting to 10.110.22.7:445 (Invalid argument) [2002/11/16 15:59:54, 2] smbd/service.c:make_connection(331) Invalid username/password for work [nobody] [2002/11/16 15:59:56, 2] smbd/service.c:make_connection(331) Invalid username/password for work [nobody] [2002/11/16 16:00:47, 2] smbd/server.c:exit_server(461) Closing connections -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] reload smb.conf terminate connections
Hi. I'm developing a command line tool (a GUI is following) for easily sharing local directories as an unprivileged user. After adding shares smbd reloads its config file (via SIGHUP). Under Windows new shares appear immediately. If removing a share, samba reloads the smb.conf but it has no effect on established connections. I can still access the share even though it has been removed. Does anyone know how to fix this (hopefully) last problem? Martin -- http://www.linux-fuer-alle.de/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] (no subject)
Hello All, I am trying to locate a web based statistics app for Samba. Something similar to AWStats for apache would be great. If anyone can help, please contact me at: [EMAIL PROTECTED] Thanks in advance for your assistance. Regards, Paul Pluckhahn, Melbourne City Toyota Daihatsu Parts Dept. ** This e-mail message has been scanned for Viruses and Content * This email is confidential,if you are not the intended recipient, you must not disclose or use the information contained in it. If you have received this email in error, please notify us immediately by return email and delete the document. This email has been scanned for viruses and content.HOWEVER:It is the recipient's duty to virus scan or otherwise test this email before loading it onto any computer. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Shared profiles under XP?
Hi... Isn't this possible? I've gotten no replies... R On Wednesday, November 20, 2002, at 10:54 PM, xfesty wrote: Hiya. Is it possible to share profiles between different users with Samba 3.0CVS acting as a PDC, and XP Workstations? All users are using the same profile share; the concept is that there's an Admin user which can read/write to this, so I can setup things such as Internet Explorer settings / Desktop/Start Menu items / color scheme, etc..., and all other users only have read only access to this share, yet use the same profile. At the moment each user's trying to create its own profile, which isn't what I want (and isn't possible, considering the fact its a read only share). If it makes any difference, I'm using jelmer's mysql module, and all users are in the same unix group. Cheers. R -- - Ryan Verner [EMAIL PROTECTED] PGP: 5819 DE5D B5AE 9381 7E60 5B4C 45CC 64DF D3CC EB07 ICQ: 76626240 IRC: xf / irc.oublinet.net PH: +61 415 297 303 EQ: Mummer (Bard), Tholuxe In the beginning the Universe was created. This has made a lot of people very angry and has been widely regarded as a bad move. -- - Ryan Verner [EMAIL PROTECTED] PGP: 5819 DE5D B5AE 9381 7E60 5B4C 45CC 64DF D3CC EB07 ICQ: 76626240 IRC: xf / irc.oublinet.net PH: +61 415 297 303 EQ: Mummer (Bard), Tholuxe In the beginning the Universe was created. This has made a lot of people very angry and has been widely regarded as a bad move. -- - Ryan Verner [EMAIL PROTECTED] PGP: 5819 DE5D B5AE 9381 7E60 5B4C 45CC 64DF D3CC EB07 ICQ: 76626240 IRC: xf / irc.oublinet.net PH: +61 415 297 303 EQ: Mummer (Bard), Tholuxe In the beginning the Universe was created. This has made a lot of people very angry and has been widely regarded as a bad move. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] pam authentication failing...
Hi Again, Dunno what all I did now, but I turned back on encrypted passwords as stated as being needed in Samba-HOWTO-Collection.html from the docs section of the SAMBA site. (primarily the Configuring the Samba Domain Controller sub-section) Now I'm getting: [2002/11/20 15:41:10, 2] smbd/reply.c:reply_sesssetup_and_X(982) Defaulting to Lanman password for steve [2002/11/20 15:41:10, 1] smbd/password.c:pass_check_smb(552) Account for user 'steve' was disabled. [2002/11/20 15:41:10, 1] smbd/reply.c:reply_sesssetup_and_X(998) Rejecting user 'steve': authentication failed [2002/11/20 15:41:10, 2] smbd/server.c:exit_server(461) Closing connections All I want is for SAMBA to use the user's password from the main FreeBSD passwd file... After it actually works, I'd like the users to either change their UNIX password, or via windows, the two need to be in sync. Here's my smb.conf (be gentle): [global] netbios name = fileserver workgroup = STAFF server string = fileserver hosts allow = 192.168.2. 127. load printers = yes log level = 2 log file = /var/log/log.%m max log size = 500 security = user socket options = TCP_NODELAY interfaces = 192.168.2.200/24 domain master = yes preferred master = yes local master = yes domain logons = yes logon script = staffconnect.bat dns proxy = no time server = yes os level = 64 encrypt passwords = yes logon drive = H: logon home = \\fileserver\%u [homes] comment = Home Directory of %u guest ok = no read only = no browseable = no writeable = yes [netlogon] comment = Network Logon Service path = /home/logon guest ok = yes writeable = no share modes = no [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = no writeable = no printable = yes [public] comment = Public Share path = /home/public read only = yes printable = no TIA Steve -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] opening excel sheets slow, copying fast ?
Just guessing, but think about security. Have you looked at tcpdump to see where your client and server machines are looking during the delay? Maybe they are waiting trying to authenticate the request. Joel On Wed, Nov 20, 2002 at 09:14:31PM +0100, Holger Krull wrote: Hello all, what is Excel doing while opening a file? There is no delay when opening the same file localy or on a windows 2000 server. But on the samba server it needs 10 seconds. But copying the same file (32K) has no delay at all. (With larger files things get worse, while coping a 60 MB file takes 8 seconds) Other mails mentioned recommended to disable oplocks, but this didn't change anything. Any hint available where to look at? Bye Holger My smb.conf looks like [global] workgroup = HERMOS netbios name = HERMOS2 server string = Hermos comment = Domain encrypt passwords = Yes map to guest = Never socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY # SO_SNDBUF=8760 SO_RCVBUF=8760 character set = ISO8859-15 add user script = /usr/sbin/useradd -d /dev/null -g machines -c 'Machine Account' -s /bin/false -M %u logon script = %G.cmd logon path = \\hermos2\profiles\%u logon drive = H: logon home = \\hermos2\homes\%u domain logons = Yes os level = 66 preferred master = True domain master = True wins support = Yes time server = yes printing = cups printcap name = cups printer admin = @users, root, netzadmin interfaces = eth0:0 bind interfaces only = yes domain admin group = netzadmin #oplocks=no #kernel oplocks = no #level2 oplocks = no #max xmit=32767 [Programme] path = /samba/programme delete readonly = yes create mode = 0770 writeable = yes directory mode = 0770 hide unreadable = yes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problems with Word 200 and Samba 2.2.6
On Wed, 6 Nov 2002, Ed Stoner wrote: I'm hoping someone has some insight into a problem I'm currenty having, which is: No one is able to edit (in place) documents with Word 2000 on a samba (2.2.6) disk share. A user can open word and save a document to the share, but when they go to edit the document Word says Word cannot complete the save due to a file permission error. From Microsoft KB Q211632 it appears that Word 2000 performs the following steps to Save an Edited File: 1.) Create a temp file (Create ~wrd.tmp) 2.) Write temp file (Save example data to ~wrd.tmp) 3.) Delete original file (Delete EXAMPLE.DOC) 4.) Move temp to target name (Move ~wrd.tmp to EXAMPLE.DOC) From examining the samba debug log (attached) it does appear that this happens. It also appears that somewhere in steps 1 and 2 above Word sends a request to turn off the read,write,and execute bits for the owner of the file. When you look at this filesystem after the attempted save the original file does indeed have these bits cleared (i.e. the user has no read,write,or execute permissions on the file), and that I think is why the error is being generated. What update level (service pack) have you installed on your Word 2000 system? Please tell us what is the exact version information from clicking on Help/About in Word. Please check that your Word is up to date with all service updates from the MS Web site. Also, what is the client OS and it's update level? Also, please send your smb.conf to [EMAIL PROTECTED] and I'll check it over. - John T. I've tried setting the 'create mask', 'security mask', 'force create mode', and 'force security mode' parameters to no avail (I assumed that setting 'force security mode' to 0700 would prevent a file from getting rwx removed from the owner). I've also tried turning 'nt acl support' on and off. I've attached my config file also. My questions are: 1.) has anyone else seen this error? 2.) if so is there a fix? 3.) why does smbd/posix_acls.c:set_nt_acl allow chmod to 000? P.S. This does not happen with the same client config connecting to either an NT Share or a 2000 Share, in case anyone is curious (i.e. I don't think it is a client thing) thanks - Ed Stoner Network Administrator Woodland Hills School District (412) 731-1300 x0109 -- John H Terpstra Email: [EMAIL PROTECTED] [2002/11/06 12:17:14, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (500, 500) - sec_ctx_stack_ndx = 0 [2002/11/06 12:17:14, 3] smbd/sec_ctx.c:set_sec_ctx(334) 2 user groups: 500 300 [2002/11/06 12:17:14, 3] smbd/oplock.c:initial_break_processing(526) initial_break_processing: called for dev = 3a00, inode = 69795960 file_id = 1557 Current oplocks_open (exclusive = 1, levelII = 0) [2002/11/06 12:17:14, 3] smbd/oplock.c:initial_break_processing(563) initial_break_processing: file blah/test.doc (dev = 3a00, inode = 69795960, file_id = 1557) has no oplock. Allowing break to succeed regardless. [2002/11/06 12:17:14, 3] smbd/oplock.c:oplock_break(890) oplock_break: returning success for dev = 3a00, inode = 69795960, file_id = 1557 Current exclusive_oplocks_open = 1 [2002/11/06 12:17:14, 2] smbd/open.c:open_file(242) Ed opened file blah/test.doc read=Yes write=No (numopen=4) [2002/11/06 12:17:14, 3] smbd/process.c:process_smb(878) Transaction 14678 of length 88 [2002/11/06 12:17:14, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 29782) [2002/11/06 12:17:14, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1660) call_nt_transact_query_security_desc: file = blah/test.doc [2002/11/06 12:17:14, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1687) call_nt_transact_query_security_desc: sd_size = 176. [2002/11/06 12:17:14, 3] smbd/error.c:error_packet(91) error string = Function not implemented [2002/11/06 12:17:14, 3] smbd/error.c:error_packet(106) error packet at smbd/nttrans.c(86) cmd=160 (SMBnttrans) NT_STATUS_BUFFER_TOO_SMALL [2002/11/06 12:17:14, 3] smbd/process.c:process_smb(878) Transaction 14679 of length 88 [2002/11/06 12:17:14, 3] smbd/process.c:switch_message(685) switch message SMBnttrans (pid 29782) [2002/11/06 12:17:14, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1660) call_nt_transact_query_security_desc: file = blah/test.doc [2002/11/06 12:17:14, 3] smbd/nttrans.c:call_nt_transact_query_security_desc(1687) call_nt_transact_query_security_desc: sd_size = 176. [2002/11/06 12:17:14, 3] smbd/process.c:process_smb(878) Transaction 14680 of length 93 [2002/11/06 12:17:14, 3] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 29782) [2002/11/06 12:17:14, 3] smbd/sec_ctx.c:set_sec_ctx(328) setting sec ctx (500, 500) - sec_ctx_stack_ndx = 0 [2002/11/06 12:17:14, 3] smbd/sec_ctx.c:set_sec_ctx(334) 2 user groups: 500 300 [2002/11/06 12:17:14, 3] lib/util.c:unix_clean_name(387)
[Samba] samba as a BDC
Hi all, does anyone have a document about moving from a windows based Domain controller to a samba. Then running a samba BDC to a samba PDC Thanks, Pete -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] DTDNS Updater
We have been made aware of a date resolution issue on some systems, usually resulting from Windows passing incorrect Regional Settings data. As a result, we have had to make some changes to the way the DTDNS utilities work. We have also taken the opportunity to update them with a new Windows XP dialogue look and feel. To download the updated utilities, click the following URL : http://www.gkconsulting.co.uk/DTDNS/GKCDTDNSSetup.EXE The version on the downloads section is the same, so you can download as normal and have the latest version at all times. To keep your existing settings, install to the same folder as your previous versions. This will keep your HOSTS.DAT and LOG.DAT files these are your host entries and log file respectively. If you want to be doubly sure, back these files up first. Similarly, if you install to a new folder, simply copy these files across. If you receive any further errors with our utilities, please email [EMAIL PROTECTED] and I will do my best to resolve the errors. Regards, George Kirkwood
[Samba] accessing Windows 2000 from unix
I am trying to access an NT location from my Solaris 2.8 unix server and cannot seem to succeed even thogh the userid/passwords are in sync: this is what I get session setup failed: NT_STATUS_LOGON_FAILURE any suggestions? thank youProtect your PC - Click here for McAfee.com VirusScan Online -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Rediscover Your COBOL Assets with Acucorp
Title: Rediscover Your COBOL Assets with Acucorp Introducing Acucorp's Innovative extend5 Software Solutions For the last 14 years, Acucorp has provided Fortune-class corporations, government end users and independent software vendors (ISVs) with unparalleled support for the maintenance and modernization of COBOL applications. While other software manufacturers have created solutions that solve specific technical problems, Acucorp has developed solutions that solve today's business problems. The extend5 Advantage As the premier COBOL modernization solution, Acucorp's extend5 product line features a number of technologies not offered by the competition. These include: The world's only COBOL-based GUI design tools. These easy-to-use tools allow you to perform all major graphical development tasks in a single, integrated environment--significantly lowering your company's total cost of ownership by permitting you to leverage the existing COBOL code, staff and knowledgebase. "Write-once-run-anywhere" capabilities. After Acucorp's ACUCOBOL-GT objects have been compiled, they can be deployed and executed, without recompilation, to any of the more than 600 computing platforms extend5 supports. In addition to portability, Acucorp's solutions provide unequaled interoperability and connectivity options using techniques such as COM/OLE, DLL, ODBC and shared UNIX objects. extend5 can also interoperate with emerging technologies like .NET, enabling you to enhance your existing business assets while still retaining your core technology investments. State-of-the-art Thin Client technology. Acucorp is one of the only legacy software providers to offer this native COBOL distributed processing model. Using our Thin Client solution, you can display the user interface portion of your server-based application on a Windows client. This not only maximizes the application's functionality but it also minimizes its maintenance and deployment costs. Access to the most popular relational database management systems (RDBMSs). With our Acu4GL solution, you can access the most popular RDBMSs, such as: Oracle®, Microsoft SQL Server, Sybase®, Informix® and IBM DB2®. And, you can do so without having to rewrite your applications or learn structured query language (SQL). Migration Made Easy Acucorp has years of experience successfully migrating applications from proprietary systems to open systems like UNIX and Linux. In addition, with extend5, you can easily move your RM and Micro Focus COBOL applications to ACUCOBOL. The Choice is Yours To find out more about Acucorp and extend5, or to evaluate the extend5 with ACUCOBOL-GT Development Suite, please contact a Sales Professional at (800) 262-6585 (in the U.S. and Canada) or (858) 689-4500. Or, for more information, visit our website. If you would like to be removed from this list, please reply with "remove" in the subject line. © 2002 Acucorp, Inc. All rights reserved. Acucorp, extend and ACUCOBOL are trademarks or registered trademarks of Acucorp, Inc. All other brands or products named are trademarks or registered trademarks of their respective holders.
Re: [Samba] The Samba Team announces Samba 2.2.7 - security release
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 20 Nov 2002, Nicholas Brealey wrote: Gerald (Jerry) Carter wrote: The source code can be downloaded from : http://download.samba.org/samba/ftp/ Is there a permissions problem on the samba-2.2.7.tar.gz.asc file? I don't seem to be able to download it, although I can download the samba-2.2.7.tar.bz2.asc file. It's fine. Probably just hadn't gotten to the mirrors yet. cheers, jerry - Hewlett-Packard - http://www.hp.com SAMBA Team-- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ISBN 0-672-32269-2SAMS Teach Yourself Samba in 24 Hours 2ed I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE93A/xIR7qMdg1EfYRAnGaAKClI40rPUPqC3h5SHzr2kLvCtAInQCfcpHh RHh5EwrMATYGTnpVn1MhkBc= =X8aV -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] The Samba Team announces Samba 2.2.7 - security release
Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 20 Nov 2002, Nicholas Brealey wrote: Gerald (Jerry) Carter wrote: The source code can be downloaded from : http://download.samba.org/samba/ftp/ Is there a permissions problem on the samba-2.2.7.tar.gz.asc file? I don't seem to be able to download it, although I can download the samba-2.2.7.tar.bz2.asc file. It's fine. Probably just hadn't gotten to the mirrors yet. I just tried it again. I still have a problem downloading it with netscape 4.79 but I can get it with wget. Looking at the output of tcpdump for attempts to downlaod samba-2.2.7.tar.gz.asc I see: Content-Encoding:.gzip. It looks like netscape is trying to gunzip the file and failing because the file is not actually gz encoded. Regards Nick -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba trust
Newbie Can samba trust other domains? I am very interested implementing a samba server but need to trust other w2k domains. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] The Samba Team announces Samba 2.2.7 - security release
It is definitely a problem when there exists a .gz in the name I ran a quick test and changed the name to samba-2.2.7.targz.asc and it worked fine. It is not only a problem on displaying in netscape but also if you try to save the file. BTW IE has the same problem. :-) The .bz2.asc files work fine Nicholas Brealey wrote: Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 20 Nov 2002, Nicholas Brealey wrote: Gerald (Jerry) Carter wrote: The source code can be downloaded from : http://download.samba.org/samba/ftp/ Is there a permissions problem on the samba-2.2.7.tar.gz.asc file? I don't seem to be able to download it, although I can download the samba-2.2.7.tar.bz2.asc file. It's fine. Probably just hadn't gotten to the mirrors yet. I just tried it again. I still have a problem downloading it with netscape 4.79 but I can get it with wget. Looking at the output of tcpdump for attempts to downlaod samba-2.2.7.tar.gz.asc I see: Content-Encoding:.gzip. It looks like netscape is trying to gunzip the file and failing because the file is not actually gz encoded. Regards Nick -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] nmblookup not honoring smb.conf?
$ nmblookup ohwow
querying ohwow on 129.22.171.31
name_query failed to find name ohwow
$ nmblookup -s /etc/samba/smb.conf ohwow
querying ohwow on 129.22.171.31
name_query failed to find name ohwow
$ cat /etc/samba/smb.conf
[global]
workgroup = scholars
netbios name = fedora
security = user
wins server = 129.22.4.11
wins support = no
name resolve order = wins lmhosts dns
my problem is that while nmblookup is reading smb.conf (see attached strace) its not
honoring the name resolve order line and checking with the wins server. am i missing
something obvious?
thanks.
--
adam
To be the responsible big kid on the block is not to steal the little guys lunch
money, but to ensure that people don't want to steal each others lunch money.
execve(/usr/bin/nmblookup, [nmblookup, bastion], [/* 37 vars */]) = 0
brk(0) = 0x8107e88
open(/etc/ld.so.preload, O_RDONLY)= 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=2, ...}) = 0
old_mmap(NULL, 2, PROT_READ|PROT_WRITE, MAP_PRIVATE, 3, 0) = 0x126000
close(3)= 0
munmap(0x126000, 2) = 0
open(/etc/ld.so.cache, O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=69627, ...}) = 0
old_mmap(NULL, 69627, PROT_READ, MAP_PRIVATE, 3, 0) = 0x126000
close(3)= 0
open(/usr/lib/libssl.so.0.9.6, O_RDONLY) = 3
read(3, \177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0P\201\0..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0555, st_size=218338, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x137000
old_mmap(NULL, 195492, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x138000
mprotect(0x165000, 11172, PROT_NONE)= 0
old_mmap(0x165000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x2c000) =
0x165000
close(3)= 0
open(/usr/lib/libcrypto.so.0.9.6, O_RDONLY) = 3
read(3, \177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0p\336\1..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0555, st_size=920484, ...}) = 0
old_mmap(NULL, 830500, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x168000
mprotect(0x226000, 52260, PROT_NONE)= 0
old_mmap(0x226000, 40960, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xbe000) =
0x226000
old_mmap(0x23, 11300, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS,
-1, 0) = 0x23
close(3)= 0
open(/usr/lib/libcups.so.2, O_RDONLY) = 3
read(3, \177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0:\0\000..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=116778, ...}) = 0
old_mmap(NULL, 108640, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x233000
mprotect(0x24b000, 10336, PROT_NONE)= 0
old_mmap(0x24b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x18000) =
0x24b000
old_mmap(0x24d000, 2144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS,
-1, 0) = 0x24d000
close(3)= 0
open(/lib/libnsl.so.1, O_RDONLY) = 3
read(3, \177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\:\0\000..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=92622, ...}) = 0
old_mmap(NULL, 89600, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x24e000
mprotect(0x261000, 11776, PROT_NONE)= 0
old_mmap(0x261000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x12000) =
0x261000
old_mmap(0x262000, 7680, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS,
-1, 0) = 0x262000
close(3)= 0
open(/lib/libpam.so.0, O_RDONLY) = 3
read(3, \177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340\24..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=35867, ...}) = 0
old_mmap(NULL, 29332, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x264000
mprotect(0x26b000, 660, PROT_NONE) = 0
old_mmap(0x26b000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x7000) =
0x26b000
close(3)= 0
open(/usr/lib/libpopt.so.0, O_RDONLY) = 3
read(3, \177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\240\21..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=32523, ...}) = 0
old_mmap(NULL, 30200, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x26c000
mprotect(0x273000, 1528, PROT_NONE) = 0
old_mmap(0x273000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x6000) =
0x273000
close(3)= 0
open(/lib/libc.so.6, O_RDONLY)= 3
read(3, \177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`\202\1..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=1369635, ...}) = 0
old_mmap(NULL, 1225056, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x274000
mprotect(0x396000, 37216, PROT_NONE)= 0
old_mmap(0x396000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x121000) =
0x396000
old_mmap(0x39c000, 12640, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS,
-1, 0) = 0x39c000
close(3)= 0
open(/lib/libdl.so.2, O_RDONLY) = 3
read(3,
[Samba] Configure Sambe 2.2.6 - installing on HPUX 11.11
hi! i've got a problem with installing samba 2.2.6 on a HPUX 11.11 - machine: when i unzip and install the samba 2.2.6 and then start configuring ist with ./configure --prefix=/usr/local/samba i get the following error: checking configure summary... WARNING: No automated network interface determination ERROR: no seteuid method available configure: error: summary failure. Aborting config can anyone help?? thanks in advance! TB -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: vampire a win2k-dc
hi volker, On Wed, Nov 13, 2002 at 09:53:06AM +0100, Volker Lendecke wrote: On Tue, Nov 12, 2002 at 03:41:47PM +0100, Guenther Deschner wrote: is it true, that a win2k dc will insist on setting up a secure channel before ever transmitting password-hashes (with net rpc vampire)? Obviously yes. I had to notice that lately. That's where the latest patches from tridge are aimed at. You could try pwdump for the passwords though. ok. i see. but isn't there some sort of support for secure channel in tng ? thanks, guenther -- Guenther Deschner [EMAIL PROTECTED] SuSE Linux AGGnuPG: 8EE11688 Berliner Str. 27 phone: +49 (0) 30 / 430944778 D-13507 Berlin fax: +49 (0) 30 / 43732804 msg04508/pgp0.pgp Description: PGP signature
Re: vampire a win2k-dc
On Wed, 2002-11-20 at 20:44, Guenther Deschner wrote: hi volker, On Wed, Nov 13, 2002 at 09:53:06AM +0100, Volker Lendecke wrote: On Tue, Nov 12, 2002 at 03:41:47PM +0100, Guenther Deschner wrote: is it true, that a win2k dc will insist on setting up a secure channel before ever transmitting password-hashes (with net rpc vampire)? Obviously yes. I had to notice that lately. That's where the latest patches from tridge are aimed at. You could try pwdump for the passwords though. ok. i see. but isn't there some sort of support for secure channel in tng ? Not sufficient for this purpose. Win2k still doesn't disclose the passwords, and it appears NT and Win2k use a different algorithm between them. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
