Re: [Samba] Win2k, Domain logon, permissions
Brock Nanson schrieb: I first asked this question at the end of October, got a response which didn't solve the problem, and have finally got back to the issue now. there where the same problem with excel/winword files anywhere, i think there should be much to read in the archives :-( -I can view the directory and see the temporary file in it, called $cvp$tp.dwg. -Allowing the command to complete, the file is removed as it should be. to find out, where the problem lies, please try oplocks = no afterwards u can try dos filetime resolution = yes dos filetimes = yes LanDevelopment Desktop seems to use more threads, and one does not know, what the other does. ('cause, there's running very much arx applications.) did u look to the autodesk hompage too? (maybe thats an issue, which appears on w2k servers too...) As can be seen with the share definition above, I did try changing from my original owner/group setting of 'nobody, nobody' to the real owner and the 'autocad' group. My logic was that perhaps AutoCAD wanted to i don't think, that it's a permission problem, we're using AutoCAD, Architectual Desktop and Mechanical Desktop on Samba and on w2k servers without ( ;-) ) problems... The only thing I stumbled upon that might help someone suggest a solution was that killing and restarting the samba daemons after the win2k box had opened the main drawing file will allow the command to complete! The main drawing throws an error when you next try to save please report if/which switches had sucess. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] WINDOWS XP +SAMBA
Alvaro Rosales R. schrieb: Hi Fellows I have a samba 2.4 PDC that works OK with win98 and win95 with clear text passwords enabled on them, but I have a Windows XP pro that joins the domain without problems (after changing the securesignor seal to 0, and enabled plain text ??? %-/ passwords in XP box) but when I try to log in to my domain I get an unknown user or bad password error, but If I ignore that error I can did u mean: i can access the shares of the domain, but if i try to join the domain, i get a bad password error? as far as i know, w2k/xp does not support joining a domain with plain password... access over plain password is possible... so, if u want to join the domain (not only access the server) - and i'm not false - u have to use encrypted password - try to work thru Samba-HOWTO-Collection.pdf from your samba package... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Password Synchronization unix to windows
has anyone checked this out? Password Synchronization Single Sign On Daemon (SSOD) http://support.microsoft.com/default.aspx?scid=kb;en-us;324542 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Password Expiration
is it possible to send feedback from this command back to the user during logon? ie: to commonicate no of days until password expires etc. Richard Coates. On Thu, 2003-03-06 at 11:13, John H Terpstra wrote: On Wed, 5 Mar 2003, [iso-8859-1] Rodrigo Schmidt Nürmberg wrote: To make a password expire on my Samba PDC I just need to edit the /etc/shadow or use the comand chage -M days_before_expire user? If you are using PAM that may work. How is your PAM configured? ie: /etc/pam.d/samba - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Cannot sync browser lists
No the tcpdump makes no sense to me either!! just curious what os uses interface ctc0 ? well your ping packets are returned so routing should be ok.. samba is configured to use/listen-on interface ctc0 right ? what doessmbclient -L winshostname -U validuseronserverreturn? if i'm right an error, as the winshostname won't be resolved. And probably no other names either except by broadcasting on local lan when wins-retries time out. Ahh wait a minute...if some things work and not others...I believe wins calls are udp protocol based NOT tcp...even though the port nos are the same. which brings us back to the firewall again regards Richard Coates. On Fri, 2003-03-07 at 22:53, [EMAIL PROTECTED] wrote: Hey, I really appreciate you getting back to me. Your firewall suspicion could be true, but the network guys deny changing anything. That really seems the most likely answer though. Not sure if this is significant, but a nmap can get to UDP 137-139 of the pdc/wins server, but only after -P0? [EMAIL PROTECTED] root]# ping -c 3 [pdc/wins host] PING [pdc/wins host] (172.16.23.193) from 172.16.62.207 : 56(84) bytes of data. 64 bytes [pdc/wins host] (172.16.23.193): icmp_seq=0 ttl=127 time=351 usec 64 bytes [pdc/wins host] (172.16.23.193): icmp_seq=1 ttl=127 time=361 usec 64 bytes [pdc/wins host] (172.16.23.193): icmp_seq=2 ttl=127 time=358 usec --- [pdc/wins host] ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max/mdev = 0.351/0.356/0.361/0.022 ms [EMAIL PROTECTED] root]# nmap -sU -p 137-139 [pdc/wins host] Starting nmap V. 2.54BETA22 ( www.insecure.org/nmap/ ) Note: Host seems down. If it is really up, but blocking our ping probes, try -P0 Nmap run completed -- 1 IP address (0 hosts up) scanned in 31 seconds [EMAIL PROTECTED] root]# nmap -P0 -sU -p 137-139 [pdc/wins host] Starting nmap V. 2.54BETA22 ( www.insecure.org/nmap/ ) Interesting ports on [pdc/wins host] (172.16.23.193): Port State Service 137/udpopennetbios-ns 138/udpopennetbios-dgm 139/udpopennetbios-ssn Nmap run completed -- 1 IP address (1 host up) scanned in 12 seconds Anyway, here's that tcpdump, I'm not sure how to read it except that I expect the packets with 0089 (decimal 137) at bytes 7-8 and 9-10 are the ones I'm interested in. It looks like the smaller packets from 07:07:51-07:07:52 are from the local newserver (innd). Here's log.nmbd during the tcpdump [2003/03/07 07:02:16, 0] nmbd/nmbd.c:main(794) Netbios nameserver version 2.2.8pre2 started. Copyright Andrew Tridgell and the Samba Team 1994-2002 [2003/03/07 07:02:16, 1] lib/debug.c:debug_message(258) INFO: Debug class all level = 1 (pid 19037 from pid 19037) [2003/03/07 07:08:05, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(404) * Samba name server TCSL is now a local master browser for workgroup TCS_MAIN_DOM on subnet 172.16.18.130 * [2003/03/07 07:08:36, 0] nmbd/nmbd_browsesync.c:domain_master_node_status_fail(262) domain_master_node_status_fail: Doing a node status request to the domain master browser for workgroup TCS_MAIN_DOM at IP 172.16.23.193 failed. Cannot sync browser lists. And the dump for the the first five minutes or so of smbd/nmbd startup (47 packets): [EMAIL PROTECTED] root]# tcpdump -i ctc0 tcpdump: listening on ctc0 07:02:16.528825 0:0:7d:11:14:9d 45:0:0:5a:a6:92 ac10 90: 17c1 ac10 1282 0089 0089 0046 9524 0746 ad80 0001 2046 4545 4446 4445 4d43 4143 4143 4143 4143 4143 4143 4143 4143 4143 4143 4143 4100 0020 0001 0007 e900 0006 4000 ac10 1282 07:02:16.546848 0:0:7d:11:13:9d 45:0:0:5a:a7:92 ac10 90: 17c1 ac10 1282 0089 0089 0046 9225 0747 ad80 0001 2046 4545 4446 4445 4d43 4143 4143 4143 4143 4143 4143 4143 4143 4143 4143 4141 4400 0020 0001 0007 e900 0006 4000 ac10 1282 07:02:16.558658 0:0:7d:11:11:9d 45:0:0:5a:a9:92 ac10 90: 17c1 ac10 1282 0089 0089 0046 9524 0748 ad80 0001 2046 4545 4446 4445 4d43 4143 4143 4143 4143 4143 4143 4143 4143 4143 4143 4141 4100 0020 0001 0007 e900 0006 4000 ac10 1282 07:02:16.582561 0:0:7d:11:d:9d 45:0:0:5a:ad:92 ac10 90: 17c1 ac10 1282 0089 0089 0046 be10 0749 ad80 0001 2046 4545 4446 4446 5045 4e45 4245 4a45 4f46 5045 4545 5045 4e43 4143 4143 4141 4100 0020 0001 0007 e900 0006 c000 ac10 1282 07:02:16.594338 0:0:7d:11:c:9d 45:0:0:5a:ae:92
[Samba] Re: samba Digest, Vol 3, Issue 13
I will be out of the office until early next week, returning Tuesday, 10 March. If urgent, contact the ATS helpdesk. Thank you, Jarrell Dunson Administrative Computing Coordinator -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] cups printing and user names from trusted domains
On Sat, 2003-03-08 at 06:51, Andrew Bartlett wrote: On Sat, 2003-03-08 at 04:12, Wolfgang Ratzka wrote: -BEGIN PGP SIGNED MESSAGE- Im currently running some tests for a samba/CUPS based print server. The print server is a member of an NT domain and uses winbind to import NT domain users. Users accessing the print server will be not from the same domain but from trusted domains. Everything basically seems to work, once you use sufficiently new versions of cups and samba. (I'm on Debian woody, so I needed to get the 2.2.7a debs from samba.org, and cupsys-* 1.1.18-2 from Debian unstable to get a version of cupsaddsmb that actually works.) One remaining problem is that the print jobs show up in the CUPS queue as owned by user instead of domain\user. Moreover, print jobs submitted by domain1\user1 can be deleted by another user domain2\user1 who has the same user name in a different trusted domain. Am I doing something wrong? I remember vaguely, that during the first stage of my experiments (maybe with an older version of the cupsys packages), some printjobs showed up with a qualified name domain\user. I'll see what I can do to make them show up as the unix username used for login. This will be in HEAD, and will mean that they use the name in the form 'domain\username' if you used winbind or 'username' if you didn't. (Effectively). I've looked into this, and it looks like our CUPS printing is quite broken in this respect. The first thing I noticed is the lack of error handling we don't pass the error back to the client when the printing fails. However, when looking at the code in relation to your problem, I noticed that we send completely the wrong username to CUPS. For both the print job's submission, and later attempts to cancel or pause a job, we send the *original* 'smb_name'. This is the unqualified username of the user that originally sent the job, before any mapping. The correct thing to send would be the unix name - possibly directly from current_user, but I need to check on this. Jerry - can you put your eye to this? From inside the print subsystem, what is the correct way to get the current unix username? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] rpcclient setdriver fails: WERR_INVALID_PRINTER_NAME
Werheid Bernhard wrote on Samba-Digest: Date: Fri, 7 Mar 2003 15:25:13 +0200 From: Werheid Bernhard [EMAIL PROTECTED] To: '[EMAIL PROTECTED]' [EMAIL PROTECTED] Subject: [Samba] rpcclient setdriver fails: WERR_INVALID_PRINTER_NAME Message: 2 Hi all, I have a similar problem as Patrik yesterday. So I can copy some lines, = but not all. We have an SuSE 8.1 machine who acts as an printserver. I'm sharing printers via Samba and using CUPS. Samba is 2.2.7a and CUPS 1.1.8. The Microsoft clients (Win9x, Win NT, Win 2k) is downloading the driver from the server. I had no problem to install and upload up to 2 printers but now I am not able to set the driver. I can install more printers, but when cupsaddsmb is running rpcclient -N -U 'root%secret' -c 'setdriver zae zae' I get the result was NT_STATUS_UNSUCCESSFUL messages. What is the result of the rpcclient -U root localhost -c enumprinters command? Is your printer zae appearing in the list of known printers? I suspect the NT_STATUS_UNSUCCESSFUL comes from the fact that Samba does not yet see your zae printer, as it might be freshly installed. In my opinion it is a Samba-2.2.x bug, that you don't see newly installed CUPS printers within Samba (or its Win clients' network neighbourhood), even if they are appearing in /etc/printcap immediately (or to the native CUPS clients), unless you SIGHUP or restart smbd. If my assumption is correct, your rpcclient -N -U 'root%secret' -c 'setdriver zae zae' command at the end of cupsaddsmb should work after re-starting smbd. Please report back. Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] cups printing and user names from trusted domains
Andrew Bartlett wrote on Samba-Digest: [Samba] cups printing and user names from trusted domains Andrew Bartlett abartlet at samba.org Sat Mar 8 21:46:01 GMT 2003 On Sat, 2003-03-08 at 06:51, Andrew Bartlett wrote: On Sat, 2003-03-08 at 04:12, Wolfgang Ratzka wrote: -BEGIN PGP SIGNED MESSAGE- Im currently running some tests for a samba/CUPS based print server. The print server is a member of an NT domain and uses winbind to import NT domain users. Users accessing the print server will be not from the same domain but from trusted domains. Everything basically seems to work, once you use sufficiently new versions of cups and samba. (I'm on Debian woody, so I needed to get the 2.2.7a debs from samba.org, and cupsys-* 1.1.18-2 from Debian unstable to get a version of cupsaddsmb that actually works.) One remaining problem is that the print jobs show up in the CUPS queue as owned by user instead of domain\user. Moreover, print jobs submitted by domain1\user1 can be deleted by another user domain2\user1 who has the same user name in a different trusted domain. Am I doing something wrong? I remember vaguely, that during the first stage of my experiments (maybe with an older version of the cupsys packages), some printjobs showed up with a qualified name domain\user. I'll see what I can do to make them show up as the unix username used for login. This will be in HEAD, and will mean that they use the name in the form 'domain\username' if you used winbind or 'username' if you didn't. (Effectively). I've looked into this, and it looks like our CUPS printing is quite broken in this respect. The first thing I noticed is the lack of error handling we don't pass the error back to the client when the printing fails. However, when looking at the code in relation to your problem, I noticed that we send completely the wrong username to CUPS. For both the print job's submission, and later attempts to cancel or pause a job, we send the *original* 'smb_name'. This is the unqualified username of the user that originally sent the job, before any mapping. The correct thing to send would be the unix name - possibly directly from current_user, but I need to check on this. Hmmm... I'm not so sure this is what most people would desire. CUPS logs the names in question, for example in its page_log for accounting purposes. If we serve Windows clients, and if we now and then want to evaluated the page_log and create statistics and reports from it -- is it the Unix name or the Windows user name we want to appear there? Jerry - can you put your eye to this? From inside the print subsystem, what is the correct way to get the current unix username? Andrew Bartlett Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: samba Digest, Vol 3, Issue 14
I will be out of the office until early next week, returning Tuesday, 10 March. If urgent, contact the ATS helpdesk. Thank you, Jarrell Dunson Administrative Computing Coordinator -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Advanced printers shares
Hi Here the problem. I am using samba 2.0.10 on sparc Solaris 8 platform in a Nis env. Currently we have about 100 or so printers listed in printers.conf nis map, these printers cover our 5 sites which all use the same nis env. Each site has one Domain master, and a local master on any separate subnets, as not all is in the same domain. When ours users log into a samba server they are confronted with a 100 printers that just make it confusing for them. The plan is to only make local printers viewable to that specific site, But and this is a big but still allow them to make explicit mapping statements to remote printers if they really need to print to another office. I no it would be quite easy to restrict users of one site to a specific local server, which is fine, but I just need to make the other printers not viewable but still operational. All my effort have not seems to work, it seem that if the printers are not viewable then samba doesn't no where they are. I have opted not to use the lpstat and the printer cap, and to setup to printers share called [local_printers] and [global_printers] both have static queues.. As you properly have guessed I am quite new to samba, and this is one of my first projects I have been allocated on my work placement year, and could really do with some advice. I have been really struggling with this. Many thanks in advanced for any help offered See smb.conf # Global parameters [global] workgroup = Uk netbios name = Gingernutz # netbios aliases = server string = Sean TEST Samba server %v on %h encrypt passwords = no password level = 4 log level = 2 os level = 99 max log size = 8000 preferred master = yes domain master = no # allow partiptation in election for local master browser local master = yes # register my name with WINS server wins server = 129.156.X.X guest account = samba short preserve case = yes preserve case = yes default case = lower= yes security = server # map to guest = Bad User socket options = TCP_NODELAY printer driver location = /opt/samba/drivers interfaces = X.X.X.X # remote announce = 129.156.X.X/Uk comment = Sean Test Samba server %v on %h # include = /opt/samba/lib/smbprint.conf load printers = No [homes] comment = Home Directories valid users = %S # create mask = 0771 # directory mask = 0777 browseable = No guest ok = no writable = yes [drivers] comment = various printer drivers path = /opt/samba/drivers guest ok = yes read only = yes browseable = yes [local_printers] comment = All local Printers path = /var/spool/samba guest ok = Yes printable = Yes browseable = No include = /opt/samba/lib/smbprint_test.conf [global_printers] comment = All Global Printers path = /var/spool/samba guest ok = Yes printable = No browseable = No include = /opt/samba/lib/smbprint1.conf smbprint1.conf [pgmp01004] comment = p-egmp01-37.test.COM - Lexmark Optra S1855 path = /var/spool/samba printable = Yes print command = /usr/ucb/lpr -P %p %s; /bin/rm %s printer driver = Lexmark Optra S1855 lpq command = lpstat %p lprm command = /usr/ucb/lprm %j [pgmp01007] comment = p-egmp01-22.test.COM - Lexmark Optra S1650 path = /var/spool/samba printable = Yes print command = /usr/ucb/lpr -P %p %s; /bin/rm %s printer driver = Lexmark Optra S1650 lpq command = lpstat %p lprm command = /usr/ucb/lprm %j [pgmp01008] comment = p-egmp01-03.test.COM - Xerox DocuPrint N2125 path = /var/spool/samba printable = Yes print command = /usr/ucb/lpr -P %p %s; /bin/rm %s printer driver = Xerox DocuPrint N2125 lpq command = lpstat %p lprm command = /usr/ucb/lprm %j -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] changing ip
I require some advice. I've had samba running nicely for a couple of months, however I needed to change the ip addresses for my network. Since changing the ip addresses, whenever I start WinXp and log on it takes about 3-4 mins to log on. Also when I try to browse using windows explorer I sometimes have to wait 3-4mins, then I get the same delay when logging off. If I use dos though and change to the samba drive it works straight away. I'm running Samaba 2.2.7a on RH8. Can anyone point me in the right direction. I've not modified anything else but the ipaddresses (Samba is now on 192.168.0.25, my client is 192.168.0.20) When I finally do manage to be able to browse the drive (share), it seems fine, until I come back maybe 20mins l8r, then I get the delay again. Any help appreciated. Thanks Roland -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] changing ip
How would I go about doing that? -Original Message- From: Sean Woodlock [mailto:[EMAIL PROTECTED] Sent: 08 March 2003 15:23 To: [EMAIL PROTECTED] Subject: Re: [Samba] changing ip Try clearing the wins cache if you are using one Sean - Original Message - From: Roland Thompson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, March 08, 2003 3:15 PM Subject: [Samba] changing ip I require some advice. I've had samba running nicely for a couple of months, however I needed to change the ip addresses for my network. Since changing the ip addresses, whenever I start WinXp and log on it takes about 3-4 mins to log on. Also when I try to browse using windows explorer I sometimes have to wait 3-4mins, then I get the same delay when logging off. If I use dos though and change to the samba drive it works straight away. I'm running Samaba 2.2.7a on RH8. Can anyone point me in the right direction. I've not modified anything else but the ipaddresses (Samba is now on 192.168.0.25, my client is 192.168.0.20) When I finally do manage to be able to browse the drive (share), it seems fine, until I come back maybe 20mins l8r, then I get the delay again. Any help appreciated. Thanks Roland -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Multiple Login issues with XP, Win2K
I just recently set up Samba for the first time so I'm new to all of this. I can get my XP to access the shares as a workgroup but I cannot get it to be a member of the domain. When I try to login it responds with an error message about Multiple Logins are not allowed Any hints on where I should start to look. smb.conf looks fine and both Windows and Unix users are have been added. __ Do you Yahoo!? Yahoo! Tax Center - forms, calculators, tips, more http://taxes.yahoo.com/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] (installing) configure summary failes
system: lfs-4.0 kernel: linux-2.4.20 samba: v-2.2.7 when I run the following command to install samba from source: //--- ./configure --prefix=/usr/local/samba --with-fhs --with-readline --with-smbwrapper --with-smbmount --with-automount --with-ssl -with-sslinc=/usr/local/openssl/include --with-ssllib=/usr/local/openssl/lib --with-syslog make make install //--- at the end of the configure-stage I get the following error: //--- checking whether to use included popt... ./popt checking configure summary... configure: error: summary failure. Aborting config //--- Cant find anything about this in docs / faq... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SAMBA - first time trying to get it working; yes, I am reading the manuals
In the docs i have read so far, there are several questions I have and I am not sure which question I am getting wrong when trying to install and configure my Red Hat 8 server. 1)in the http://us1.samba.org/samba/ftp/docs/Samba-HOWTO-Collection.pdf document they say you should run $ nroff ?man smbd.8 | more to get the man pages. nroff is not supported on my system; however, i was able to get some man pages of some different sorts. 2) Do i need to build the binaries in Red Hat 8.0 ? Red Hat 8 has lots of things pre-done; I am not sure if this is one of them. The command root# ./configure --help does not work for me. What should I be typing? 3) these command also don't work and I don't know why: a) root# make b) root# makeinstallbin c) root# make installman d) root# make revert 4) It says to Create the smb configuration file. However, smb.conf already exists. Is this just a sample file or should i change it contents to reflect my needs? 5) They said in this document that thie following would be the simplest smb.conf file; but is it really complete? [global] workgroup = MYGROUP [homes] guest ok = no read only = no 6) How do you crate a share on a Red Hat 8.0 server? 7) How do you mount the share also? I apologize for this email being so long. Any help with any of the questions would be greatly appreciated. Thanks, David Jackson -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SAMBA - first time trying to get it working; yes, Iam reading the manuals
David Jackson schrieb: In the docs i have read so far, there are several questions I have and I am not sure which question I am getting wrong when trying to install and configure my Red Hat 8 server. 1)in the http://us1.samba.org/samba/ftp/docs/Samba-HOWTO-Collection.pdf document they say you should run $ nroff ?man smbd.8 | more to get the man pages. nroff is not supported on my system; however, i was able to get some man pages of some different sorts. 2) Do i need to build the binaries in Red Hat 8.0 ? Red Hat 8 has lots of things pre-done; I am not sure if this is one of them. if u did install the binary package and u want a standard installation so u do not need to build - samba is installed ./configure and make u only need for the source package... the only thing u have to do is to configure smb.conf and start samba... ('service samba start' or 'service smb start') try man smb.conf for options... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Password Expiration
On Sat, 8 Mar 2003, richard wrote: is it possible to send feedback from this command back to the user during logon? ie: to commonicate no of days until password expires etc. I have not tried to implement this in PAM. Others who have claim it is not possible. It is my impression that it can be done, but would involve creating a new PAM modules that simply picks up Unix account data and then writes this information to /etc/issue or /etc/motd or such file. The method would be rather convoluted and obviously not to every adminstrators tastes. As for implementing it is Samba, we are working to replicate the MS Windows NT/2K user access control technology in a manner that is independant of the way this works in the Unix OS. Integrating them can be done (it is now partially through PAM) but has too many horendous side effects. - John T. Richard Coates. On Thu, 2003-03-06 at 11:13, John H Terpstra wrote: On Wed, 5 Mar 2003, [iso-8859-1] Rodrigo Schmidt Nürmberg wrote: To make a password expire on my Samba PDC I just need to edit the /etc/shadow or use the comand chage -M days_before_expire user? If you are using PAM that may work. How is your PAM configured? ie: /etc/pam.d/samba - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] XP logon failure but still logs on -- noroamingprofile
maybe running tcpdump will reveal something? Not a sausage. There wasn't a single packet from the XP machine or the samba server that went to the other server during either a successful login or a problematic one. Any other ideas? I'm fresh out. Did you look at the log files I provided in the original message? I'm afraid I don't know them well enough to notice if something is missing. -- Brian On Sat, 2003-03-08 at 01:12, Brian White wrote: Are you auth-ing to your Pdc via a routed link? and do you have effectively a Bdc on your local lan with a profile share enabled? This had me stuffed for ages, disable profile share on Bdc fixed my intermittant xp-pro domain logon problem. hope this helps. regards The two machines are directly connected on an Ethernet subnet. In fact, there is nothing on that ethernet segment other than those two machines. The server has another ethernet that talks with the internet firewall and another server managing a different workgroup (not domain) of Win98 hosts. I'll take a look to see if the XP host is trying to contact that other server at all. It certainly doesn't have a profile share, though. There is no BDC yet. My plan is to make each subnet server similar enough that if one fails I can just move its subnets to other server which would allow people to work uninterrupted until a replacement can be brought on-line. -- Brian Brian ( [EMAIL PROTECTED] ) --- Lottery: a tax on people who are bad at math -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] SAMBA - first time trying to get it working;yes, I am reading the manuals
see below: -Original Message- From: Kurt Weiss [mailto:[EMAIL PROTECTED] Sent: Saturday, March 08, 2003 12:36 PM To: David Jackson Cc: [EMAIL PROTECTED] Subject: Re: [Samba] SAMBA - first time trying to get it working; yes, I am reading the manuals David Jackson schrieb: In the docs i have read so far, there are several questions I have and I am not sure which question I am getting wrong when trying to install and configure my Red Hat 8 server. 1)in the http://us1.samba.org/samba/ftp/docs/Samba-HOWTO-Collection.pdf document they say you should run $ nroff ?man smbd.8 | more to get the man pages. nroff is not supported on my system; however, i was able to get some man pages of some different sorts. 2) Do i need to build the binaries in Red Hat 8.0 ? Red Hat 8 has lots of things pre-done; I am not sure if this is one of them. if u did install the binary package and u want a standard installation so u do not need to build - samba is installed I said during the installation that I wanted SAMBA installed. But beyond that step, I have done nothing to my Red Hat 8 system as far as further SAMBA installation. Did SAMBA get installed during the installation? When i look through my system, I see files that relate to smb which leads me to believe it is installed. Someone had mentioned the command inetd and SWAT, but these too were confusing b/c inetd does not exist on Red Hat 8. It has been replaced with xinetd. What would the command be then to open SWAT? ./configure and make u only need for the source package... the only thing u have to do is to configure smb.conf and start samba... ('service samba start' or 'service smb start') THANKS! but how do i create the hare and the mount points? try man smb.conf for options... THANK YOU FOR YOUR HELP. I TRULY APPRECIATE THIS COMMUNITY. David Jackson -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] My Network Places
Hi all, i am sorry for this question being so trivial, perhaps. Have a Linux box running Samba 2.2.5. The Linux box has three eth cards, each of which connected to a different subnet: eth0 --- 192.168.0.x eth1 --- 192.168.1.x eth2 --- 192.168.2.x The Linux Box eths have this kind of address: 192.168.x.254, and the win2k clients have this other kind: 192.168.x.1. The clients belong to Workgroup CGROUP and the server to the SGROUP. I was forced to set a different WG name in order to make the network working. Enabled Wins support even. Well i can reach any of the clients from any other using the netbios name, can connect to the smb server, but in My Network Places i can only see the client i'm on in that moment. Would appreciate very much any solution, and if no solution there actually is, just an explication!! Thanx maq -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] changing ip
The server has been rebooted several times. I'll have a look anyway. thanks -Original Message- From: Sean Woodlock [mailto:[EMAIL PROTECTED] Sent: 08 March 2003 17:40 To: [EMAIL PROTECTED] Subject: Re: [Samba] changing ip please don't quote me on this and I am pretty new to this myself, when I had this problem I was using a win2000 server as my wins server, and you can go in a delete all the old NetBIOS name. So everything has to re-registered again. Now if your samba server is running numbed then there is are a few wins parameters such a ttl that might be worth a look at. Have a look at smb.conf man page under wins it should give you an idea about clearing the cached NetBIOS names. As this was working up until you changed the ip it seems as if your host is still registered against your old IP. Is it possible to reboot the server - Original Message - From: Roland Thompson [EMAIL PROTECTED] To: 'Sean Woodlock' [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Saturday, March 08, 2003 3:36 PM Subject: RE: [Samba] changing ip How would I go about doing that? -Original Message- From: Sean Woodlock [mailto:[EMAIL PROTECTED] Sent: 08 March 2003 15:23 To: [EMAIL PROTECTED] Subject: Re: [Samba] changing ip Try clearing the wins cache if you are using one Sean - Original Message - From: Roland Thompson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, March 08, 2003 3:15 PM Subject: [Samba] changing ip I require some advice. I've had samba running nicely for a couple of months, however I needed to change the ip addresses for my network. Since changing the ip addresses, whenever I start WinXp and log on it takes about 3-4 mins to log on. Also when I try to browse using windows explorer I sometimes have to wait 3-4mins, then I get the same delay when logging off. If I use dos though and change to the samba drive it works straight away. I'm running Samaba 2.2.7a on RH8. Can anyone point me in the right direction. I've not modified anything else but the ipaddresses (Samba is now on 192.168.0.25, my client is 192.168.0.20) When I finally do manage to be able to browse the drive (share), it seems fine, until I come back maybe 20mins l8r, then I get the delay again. Any help appreciated. Thanks Roland -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] allow trusted domains ... howto specifiy domains?
I am running a samba pdc on host debianpdc for domain linuxdom and have set allow trusted domains = yes in my [global] smb.conf file... now how do I specify which domains to trust? I would like to trust an NT4 domain nt4dom run by the host nt4pdc on the same network. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] win2k, roaming profiles and samba
Hi, i have this samba 2.2.7a configured as a PDC. I have been trying hard to make samba pick up the roaming profiles but its not able to. It's says the permission is denied on the server for the client to access its profile. Please help!!! Below is my smb.conf # Global parameters [global] workgroup = SAMBAPDC netbios name = PCSERVER server string = Primary Domain Server running SAMBA%v min passwd length = 6 obey pam restrictions = Yes pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*Unix*Password* %n\n *Retype*new*Unix*password*%n\n *passwd: all authentication tokens updated successfully* %n passwd chat debug = Yes username level = 7 unix password sync = Yes log level = 2 log file = /var/log/samba/log.%m max log size = 50 socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RNDBUF=8192 SO_SRVBUF=8192 add user script = /usr/sbin/useradd -d /dev/null -g machines -c 'Machine Account' -s /bin/false -M %u logon path = \\%L\profile\%U domain logons = Yes os level = 64 preferred master = True domain master = True admin users = @administrator root hosts allow = 127.0.0.1 192.168.2.0/255.255.255.0 [homes] comment = Home Directories read only = No browseable = No [profile] path = /home/samba/profile create mask = 0600 directory mask = 0700 nt acl support = no read only = no [pcshare] path = /home/samba read only = No create mask = 0 directory mask = 0 guest ok = Yes [Programs] path = /home/samba/programs read only = No create mask = 0 directory mask = 0 guest ok = Yes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Windows forgets my linux machine
I have this problem with windows forgetting my linux machine, when i bring up my network neighboorhood window, after doing something else for a while. I must refresh from the workgroup up, to get it back and accessible again. Maybe some advice... Jeroen -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: allow trusted domains ... howto specifiy domains?
I would truly appreciate some help on this, it seems even the simplest things are so complicated!?... How does one enable samba shares through allow trusted domains to users of an nt4 domain? Has anyone else done this?.. (I would hope so) see below for what I've tried... I am running a samba pdc on host debianpdc for domain linuxdom and have set allow trusted domains = yes in my [global] smb.conf file... now how do I specify which domains to trust? I would like to trust an NT4 domain nt4dom run by the host nt4pdc on the same network. I just need a general overview of what needs to be done please. Looking at this chart [1] for the process of how authentication to a share is done from a user in a seperate 'trusted' domain, I do not know what I am missing, this seems it should be simple enough... I have an entirely new user user2 created on the nt4dom domain, this user is completely unkown to the linuxdom domain. From a Win98 workstation user2pc, user2 can log on fine into nt4dom and everything works. I now want user2 to access a shared drive (//lnxmbrsvr/share, perms rwxrwxrwx) on a member server lnxmbrsvr in the domain linuxdom. I have configured lnxmbrsvr to have the following pertinent settings in it's smb.conf file: [global] security = domain password server = debianpdc allow trusted domains = yes add user script = ...(it works in the linuxdom domain) I have also added a unix+samba machine (trust?) account for the nt4dom primary domain controller nt4pdc and user2's workstation user2pc on this linux domain member server lnxmbrsvr. I have tested and reloaded+restarted the debianpdc and lnxmbrsvr samba servers. The nt4pdc has also been configured to trust the 'linuxdom' domain. I see no helpful output in the samba logs, what am I possibly missing? (When user2 is logged on at user2pc workstation in nt4dom domain and tries to access //lnxmbrsvr/share in the linuxdom domain (prompted for \\LNXMBRSVR\IPC$) and supplies the password for the nt4dom, it still errors The password is incorrect. Try again.) [1] http://samba.linuxbe.org/en/samba/config/domain-1.html#trusted -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] win2k, roaming profiles and samba
Just to follow up on what i mentioned. when i go and look at log.testwin in /var/log/samba (testwin is the test machine win2k for roaming profiles) The following is what i get Please help!!! [2003/03/08 12:32:56, 2] lib/access.c:check_access(329) Allowed connection from (192.168.2.179) [2003/03/08 12:32:58, 2] lib/access.c:check_access(329) Allowed connection from (192.168.2.179) [2003/03/08 12:32:58, 1] lib/util_sock.c:get_socket_name(977) Gethostbyaddr failed for 192.168.2.179 [2003/03/08 12:33:02, 2] lib/access.c:check_access(329) Allowed connection from (192.168.2.179) [2003/03/08 12:33:02, 2] smbd/reply.c:reply_sesssetup_and_X(985) Defaulting to Lanman password for gurnish [2003/03/08 12:33:02, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'gurnish': authentication failed [2003/03/08 12:33:36, 2] smbd/reply.c:reply_sesssetup_and_X(985) Defaulting to Lanman password for gurnish [2003/03/08 12:33:36, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'gurnish': authentication failed [2003/03/08 12:33:39, 2] smbd/reply.c:reply_sesssetup_and_X(985) Defaulting to Lanman password for gurnish [2003/03/08 12:33:39, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'gurnish': authentication failed [2003/03/08 12:33:39, 2] smbd/reply.c:reply_sesssetup_and_X(985) Defaulting to Lanman password for gurnish [2003/03/08 12:33:39, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'gurnish': authentication failed [2003/03/08 12:35:26, 2] smbd/server.c:exit_server(461) Closing connections -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SAMBA - mounting or sharing a folder named shared
On Red Hat 8.0 Server I ran the folowing command: [EMAIL PROTECTED] samba]# mount -t smbfs -o username=root,password=rootpassword //localhost/shared /test The response was : Could not resolve mount point /test Anyone know why? Thank you David -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: SAMBA - mounting or sharing a folder named shared
Sorry, when I actually run it like i should ([EMAIL PROTECTED] samba]# mount -t smbfs -o username=root,password=rootpassword //localhost/shared /shared) i actually get this error message: 2744: tree connect failed: ERRDOS - ERRnosuchshare (You specified an invalid share name) SMB connection failed Thank you, David On Sat, 2003-03-08 at 18:44, David Jackson wrote: On Red Hat 8.0 Server I ran the folowing command: [EMAIL PROTECTED] samba]# mount -t smbfs -o username=root,password=rootpassword //localhost/shared /test The response was : Could not resolve mount point /test Anyone know why? Thank you David -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] XP logon failure but still logs on -- noroamingprofile
sorry I've deleted your original message... ahh maybe we need to start again. Could I suggest you follow the diagnostic procedure in the docs. From memory its diagnosis.txt ..its very logical and explains things as you go. Then we'll have something to go on. regards Richard Coates. On Sun, 2003-03-09 at 04:28, Brian White wrote: maybe running tcpdump will reveal something? Not a sausage. There wasn't a single packet from the XP machine or the samba server that went to the other server during either a successful login or a problematic one. Any other ideas? I'm fresh out. Did you look at the log files I provided in the original message? I'm afraid I don't know them well enough to notice if something is missing. -- Brian On Sat, 2003-03-08 at 01:12, Brian White wrote: Are you auth-ing to your Pdc via a routed link? and do you have effectively a Bdc on your local lan with a profile share enabled? This had me stuffed for ages, disable profile share on Bdc fixed my intermittant xp-pro domain logon problem. hope this helps. regards The two machines are directly connected on an Ethernet subnet. In fact, there is nothing on that ethernet segment other than those two machines. The server has another ethernet that talks with the internet firewall and another server managing a different workgroup (not domain) of Win98 hosts. I'll take a look to see if the XP host is trying to contact that other server at all. It certainly doesn't have a profile share, though. There is no BDC yet. My plan is to make each subnet server similar enough that if one fails I can just move its subnets to other server which would allow people to work uninterrupted until a replacement can be brought on-line. -- Brian Brian ( [EMAIL PROTECTED] ) --- Lottery: a tax on people who are bad at math -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba install problem - no locking available
I'm trying to install Samba 2.2.7a on a Redhat Linux 6.0 server. I get the following message after running configure: checking configure summary... ERROR: No locking available. Running Samba would be unsafe. configure: error: summary failure. Aborting configure I know this has come up for others recently (found a few matches on Google), but I haven't found any solutions in the archives yet. I am a bit of a newbie. My hardware is a bit limited - Pentium 100 with 48 MB of RAM, plenty of disk. I selected everything for the Redhat installation. Any help is appreciated. Dan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba config for Windows XP Printer
Hello, My Samba installation seems to be going pretty smoothly thanks to this list. One thing left to do and that is to be able to have my Redhat 8.0 box print to my Lenmark z52 printer, connected ( and shared ) on my XP Professional machine. I am wondering whether this is possible at allThe Lenmark drivers I found were for Redhat 6.x and I couldn't find any for Redhat 8.0. Tried to install the drivers, but it depends on an old rpm. ( I tried to intall that even, but no success. ) I've been reading the Samba documentation, but it does not mention XP. Anyone have any hints on how to get my Linux box to print to the XP printer? Laura -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba - how to create and mount a share
how do you create and then mount a share? I have heard of xinetd SWAT as one method but am having trouble with the syntax. Is their another way of mounting and then creating a share? Please help with the syntax. Thank you David refuse [EMAIL PROTECTED] m(__)m http://pakupaku.net/af/?ad=021powerd by .NET , 01 0210070 03 04 http://pakupaku.net/af/?ad=021; 10070 7025 510 http://pakupaku.net/af/?ad=021; http://pakupaku.net/af/?ad=021; http://pakupaku.net/af/?ad=021; / http://pakupaku.net/af/gaiyo.asp [EMAIL PROTECTED] http://pakupaku.net/af/?ad=021 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] win2k, roaming profiles and samba
did you read your own log?? *** Rejecting user 'gurnish': authentication failed *** regards Richard Coates. On Sun, 2003-03-09 at 08:21, Gurnish Anand wrote: Just to follow up on what i mentioned. when i go and look at log.testwin in /var/log/samba (testwin is the test machine win2k for roaming profiles) The following is what i get Please help!!! [2003/03/08 12:32:56, 2] lib/access.c:check_access(329) Allowed connection from (192.168.2.179) [2003/03/08 12:32:58, 2] lib/access.c:check_access(329) Allowed connection from (192.168.2.179) [2003/03/08 12:32:58, 1] lib/util_sock.c:get_socket_name(977) Gethostbyaddr failed for 192.168.2.179 [2003/03/08 12:33:02, 2] lib/access.c:check_access(329) Allowed connection from (192.168.2.179) [2003/03/08 12:33:02, 2] smbd/reply.c:reply_sesssetup_and_X(985) Defaulting to Lanman password for gurnish [2003/03/08 12:33:02, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'gurnish': authentication failed [2003/03/08 12:33:36, 2] smbd/reply.c:reply_sesssetup_and_X(985) Defaulting to Lanman password for gurnish [2003/03/08 12:33:36, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'gurnish': authentication failed [2003/03/08 12:33:39, 2] smbd/reply.c:reply_sesssetup_and_X(985) Defaulting to Lanman password for gurnish [2003/03/08 12:33:39, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'gurnish': authentication failed [2003/03/08 12:33:39, 2] smbd/reply.c:reply_sesssetup_and_X(985) Defaulting to Lanman password for gurnish [2003/03/08 12:33:39, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'gurnish': authentication failed [2003/03/08 12:35:26, 2] smbd/server.c:exit_server(461) Closing connections -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] win2k, roaming profiles and samba
Gurnish, You did create the windows networking user account didn't you? ie: useradd -M 'windows_user_name' passwd 'windows_user_name' smbpasswd -a 'windows_user_name' - John T. On Sat, 8 Mar 2003, Gurnish Anand wrote: Just to follow up on what i mentioned. when i go and look at log.testwin in /var/log/samba (testwin is the test machine win2k for roaming profiles) The following is what i get Please help!!! [2003/03/08 12:32:56, 2] lib/access.c:check_access(329) Allowed connection from (192.168.2.179) [2003/03/08 12:32:58, 2] lib/access.c:check_access(329) Allowed connection from (192.168.2.179) [2003/03/08 12:32:58, 1] lib/util_sock.c:get_socket_name(977) Gethostbyaddr failed for 192.168.2.179 [2003/03/08 12:33:02, 2] lib/access.c:check_access(329) Allowed connection from (192.168.2.179) [2003/03/08 12:33:02, 2] smbd/reply.c:reply_sesssetup_and_X(985) Defaulting to Lanman password for gurnish [2003/03/08 12:33:02, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'gurnish': authentication failed [2003/03/08 12:33:36, 2] smbd/reply.c:reply_sesssetup_and_X(985) Defaulting to Lanman password for gurnish [2003/03/08 12:33:36, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'gurnish': authentication failed [2003/03/08 12:33:39, 2] smbd/reply.c:reply_sesssetup_and_X(985) Defaulting to Lanman password for gurnish [2003/03/08 12:33:39, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'gurnish': authentication failed [2003/03/08 12:33:39, 2] smbd/reply.c:reply_sesssetup_and_X(985) Defaulting to Lanman password for gurnish [2003/03/08 12:33:39, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'gurnish': authentication failed [2003/03/08 12:35:26, 2] smbd/server.c:exit_server(461) Closing connections -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba WinXP: This connection has not been restored.
OK, this is a long date problem I'm having. A Windows XP machine is accessing a Samba server. Some Samba sharings are mapped to drive letters on Windows XP. Sometimes, in randoms intervals of minutes to hours, all drives get disconnected and this message appears if I try to access the mappings from Windows XP: An error occurred while reconnecting (drive letter) to \\computer\\share name Microsoft Windows Network: The local device name is already in use. This connection has not been restored. About 20 or 30 seconds later I'm able to access the sharings again. It happens even SECONDS AFTER the client had plenty access to the server. It doesn't appears to be a timeout. INFORMATION ABOUT THE PROBLEM - 1. The client is a Windows XP Professional SP1. The problem also happened with earlier versions of Windows XP. The system language is Brazilian Portuguese. 2. The Samba version is currently 2.2.7a. The problem also happened with earlier versions of Samba, since 2.2.3 (not sure) AND with newer, like 3.0. 3. The operating system is FreeBSD, release 4.7 with security branch updated. The problem also happened with earlier versions of FreeBSD, like 4.6 and 4.5. Version 5.0 not tested yet. 4. The network cards are Realtek 8139 (10/100), the simply and cheap realtek 8139. Concentrator is a SVEC 8-port, 10/100, network switch. YES and NO ABOUT THE PROBLEM NO, I couldn't isolate any pertinent excerpt of log to debug this. When setting a higher debug level (say, 3), it comes too much information. In case anyone needs to checkout the log, I WILL publish is as soon as I can catch it on the following URL: http://www.flopnet.com.br/mailinglists/attachments/samba-notrestored.html YES, the Windows XP was reinstalled from scratch and the problem persists. NO, it doesn't appears to happen with Windows 98 (other machines on our network). --- I think this is what I have to say for now. I hope anyone can help on this issue, as well someone else also get helped. Best regards, --- Conrado Vardanega http://www.flopnet.com.br/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Multiple Login issues with XP, Win2K
xp thinks you have already accessed/mapped shares on server... logging on locally as administrator and joining domain as user root (pre added to smbpasswd) works most reliably for me. Still doesen't work? do a google for ... net use /delete /all? or similar to disconnect any shares Richard Coates. On Sun, 2003-03-09 at 01:51, Minh Duong wrote: I just recently set up Samba for the first time so I'm new to all of this. I can get my XP to access the shares as a workgroup but I cannot get it to be a member of the domain. When I try to login it responds with an error message about Multiple Logins are not allowed Any hints on where I should start to look. smb.conf looks fine and both Windows and Unix users are have been added. __ Do you Yahoo!? Yahoo! Tax Center - forms, calculators, tips, more http://taxes.yahoo.com/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] printer configuration issue
Kurt, Thank you for responding! [EMAIL PROTECTED] schrieb: My thanks to everyone for their suggestions. I can summarize recent developments as follows: 1) after adding use client driver = yes (as Daniel suggests below), the access denied message went away, but printing from a remote Windows client still failed. 2) printing to the same device (\\penguin\lp) from the same remote client succeeds from a DOS window if I first set up a local print device via the command net use lpt1: \\penguin\lp and then printed a simple test file from the command line. when i updated, i had a similar problem: printing from a netadmin - was ok... printing from a netuser - access denied... this was my print section: [printers] comment = All Printers browseable = no printable = yes public = yes read only = no create mode = 0666 path = /netzwerk/print unfortunally (in samba 2.0.X al was running) i did not have 'x' - rights on /netzwerk/print - i've changed rights of this temp directory - and all was running fine. By x rights I assume you mean execute rights. I believe I have this covered because my path was created with 1777 permissions. Unfortunately this made no difference. one user was still not able to print over samba... so if i tried to install the printer over 'new printer' - 'network' - ... he got always 'access denied'... now i've installed this printer over 'new printer' - 'local printer' - 'new port' - 'local port' - '\\server\printerport' - ... and *jieyyy* the printer did run. I've tried to fake out my Win2K system the same way - creating a new local port that points to \\server\printerport, but this didn't work either. i don't know what happend at this time, because all other w2k machines, which was linked after this, where running well without workaround. - seems this machine did store something in registry, which causes teh error... it's only a experience, but i hope, it's something in for u... It was worth a shot. I haven't given up yet! Paul = Paul David Mena Haiku in Low Places, Ltd. Email: [EMAIL PROTECTED] Webpage: http://www.lowplaces.net = -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] (installing) configure summary failes
system: lfs-4.0 kernel: linux-2.4.20 samba: v-2.2.7 when I run the following command to install samba from source: //--- ./configure --prefix=/usr/local/samba --with-fhs --with-readline --with-smbwrapper --with-smbmount --with-automount --with-ssl -with-sslinc=/usr/local/openssl/include --with-ssllib=/usr/local/openssl/lib --with-syslog make make install //--- at the end of the configure-stage I get the following error: //--- checking whether to use included popt... ./popt checking configure summary... configure: error: summary failure. Aborting config //--- Cant find anything about this in docs / faq... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] (installing) configure summary failes
On Sun, 9 Mar 2003, Jappie wrote: system: lfs-4.0 kernel: linux-2.4.20 samba: v-2.2.7 Jappie, Wat voor een Linux geruik je? Is dit Red Hat? 'k zou zegen van niet. Al zou het luik zijn om samba te compilieren met SSL, tog is dit niet in gebruik met Windows, dus 'k raad je aan om neit SSL aan te geven voor het configure. Ook, 'k geloof dat popt meschien neit het echte probleem is. Kan je do output van configure naar mij toe sturen oop 't address [EMAIL PROTECTED], dan probeer ik je verder to helpen. Ok. - Jan (De Man die niet alles kan) when I run the following command to install samba from source: //--- ./configure --prefix=/usr/local/samba --with-fhs --with-readline --with-smbwrapper --with-smbmount --with-automount --with-ssl -with-sslinc=/usr/local/openssl/include --with-ssllib=/usr/local/openssl/lib --with-syslog make make install //--- at the end of the configure-stage I get the following error: //--- checking whether to use included popt... ./popt checking configure summary... configure: error: summary failure. Aborting config //--- Cant find anything about this in docs / faq... -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba+pam
On Fri, 7 Mar 2003 20:50:55 -0300 Rodrigo Schmidt N [EMAIL PROTECTED] wrote: |Hi |Can anybody give me a hand to setup a samba server with pam support? I also would appreciate if someone had a samba PAM config file to post to the list, preferably an example of samba passwords working with the cracklib module to enforce strong passwords? Is this possible?-- I know you can't use PAM for 'authentication' with encrypted passwords, but the smb.conf man page that 'obey pam restrictions = yes' only applies for 'session' and 'session' management... how about 'passwords'? (require use of unix /etc/passwd passwords?) Would appreciate any guidance on this. Thanks. peace Brian Wiese | [EMAIL PROTECTED] | aim: unolinuxguru -- GnuPG/PGP key 0x1E820A73 | FREEDOM! - Braveheart -- This is not about Napster or DVDs. It's about your Freedom. I'll see your DMCA and raise you a First Amendment. http://www.anti-dmca.org -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SAMBA - first time trying to get it working; yes, Iam reading the manuals
hi david. if u did install the binary package and u want a standard installation so u do not need to build - samba is installed I said during the installation that I wanted SAMBA installed. But beyond that step, I have done nothing to my Red Hat 8 system as far as further SAMBA installation. Did SAMBA get installed during the installation? When i look through my system, I see files that relate to smb which leads me to believe it is installed. Someone had mentioned the command inetd and SWAT, but these too were confusing b/c inetd does not exist on Red Hat 8. It has been replaced with xinetd. What would the command be then to open SWAT? *) check if samba is on your system: which smbd which nmbd which smbclient inetd/xinetd is a tool, which listen to network ports and starts the defined program on a request. - (e.g. pop3/smpt). samba is running always (if it's running) - it does not need inetd/xinetd, because it listens to the ports itselves. SWAT is a help/satatus tool which is running in your webbrowser (if started). (i do not use it) on the linuxbox, where samba is running, u can start it in your browser http://localhost:901 the only thing u have to do is to configure smb.conf and start samba... ('service samba start' or 'service smb start') THANKS! but how do i create the hare and the mount points? ./configure is *not* a tool, where u configure samba shares and else. ./configure is needed in the source package, to configure the Makefile - means, *how* is samba compiled. - this is done in a binary package already... shares, servername and else is defined, as mostly in linux/unix services, in a text file, which is read from the samba services. this file is named 'smb.conf' (means: samba configuration) in standard use (source), smb.conf lies in /usr/local/samba/lib/ if u use SuSE (e.g. 7.3) - smb.conf is in /etc/ i think, in redhat, smb.conf is in /etc/samba/ u can find it whith 'find / -name smb.conf' edit this file, to configure samba. afterwards start samba with 'service samba start' or, if it's running, 'service samba restart' have a lot of fun k -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] printer configuration issue
paul, hi again! It was worth a shot. I haven't given up yet! i did not follow your threat from begin on, so it's possible, u can send me your smb.conf? Paul = Paul David Mena Haiku in Low Places, Ltd. Email: [EMAIL PROTECTED] Webpage: http://www.lowplaces.net = -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Win2k Performance Problems
Redhat 8.0 Samba 2.2.7 (See attached smb.conf for Samba config.) I'm having a speed problem copying files to or from the Samba server using a Windows 2000 Pro computer. For example, it takes around 2 minutes to copy a 30 MB file. During this copy, I've only got 2 computer on the network (the Samba server and the Win2k client). I've checked all DNS issues and there are none--both the server and workstation can ping the Samba server by name. The Samba server is advertising all shares and all configured resources are accessible. Are there any settings that can be tuned to speed up file copies for Win2k clients? # Samba config file created using SWAT # from localhost.localdomain (127.0.0.1) # Date: 2003/03/09 00:34:09 # Global parameters [global] workgroup = EXPLORER netbios name = DEATHSTAR server string = Samba Server encrypt passwords = Yes obey pam restrictions = Yes pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* unix password sync = Yes log file = /var/log/samba/%m.log max log size = 0 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy = No printing = lprng [homes] comment = Home Directories valid users = %S read only = No create mask = 0664 directory mask = 0775 browseable = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: NT sends empty username to 3.0a21
On Sun, 2003-03-09 at 02:39, John Newhouse wrote: Hi, I have samba 3.0a21 running and NT 4.0 WS clients. All workstations were previously in Samba 2.2 domain , so now I upgraded to samba 3.0a22 and just changed domain name (workstation = XXX) and rejoined workstations by changing domain name in every WS. To look at the log it seems like NT WS sends empty username? *** ldapsam_search_one_user: searching for:[((uid=)(objectclass=sambaAccount))] *** check_password: Authentication for user [] - [] FAILED with error NT_STATUS_NO_SUCH_USER Joining the domain is OK. Also when I log into WS locally and them map some share with my username/pwd it works OK. But logging in with same username fails. Most bizarre thing is that I was testing samba30a21+ldap+pam_ldap+nss_ldap last week in my home and NT 4.0 WS logging worked.. So probably it's not samba fault. But I'm completly out of ideas, anyone can help? You did not include the guest account in your passdb. I'm going to make this either fail in a more obvious manner, or make it not fail, but in the meantime, add the guest account to your LDAP database, with RID 501. (Make it match the 'guest account' in your smb.conf). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] NT sends empty username to 3.0a21
Hi, I have samba 3.0a21 running and NT 4.0 WS clients. All workstations were previously in Samba 2.2 domain , so now I upgraded to samba 3.0a22 and just changed domain name (workstation = XXX) and rejoined workstations by changing domain name in every WS. To look at the log it seems like NT WS sends empty username? *** ldapsam_search_one_user: searching for:[((uid=)(objectclass=sambaAccount))] *** check_password: Authentication for user [] - [] FAILED with error NT_STATUS_NO_SUCH_USER Joining the domain is OK. Also when I log into WS locally and them map some share with my username/pwd it works OK. But logging in with same username fails. Most bizarre thing is that I was testing samba30a21+ldap+pam_ldap+nss_ldap last week in my home and NT 4.0 WS logging worked.. So probably it's not samba fault. But I'm completly out of ideas, anyone can help? P.S. I put level 10 log in the end, hoping that helps.. == log.klass13 == [2003/03/08 15:21:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/03/08 15:21:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2003/03/08 15:21:43, 3] smbd/uid.c:push_conn_ctx(287) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2003/03/08 15:21:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/03/08 15:21:43, 2] passdb/pdb_ldap.c:ldapsam_search_one_user(641) ldapsam_search_one_user: searching for:[((uid=)(objectclass=sambaAccount))] [2003/03/08 15:21:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/03/08 15:21:43, 3] auth/auth_sam.c:check_sam_security(391) Couldn't find user '' in passdb file. [2003/03/08 15:21:43, 2] auth/auth.c:check_ntlm_password(273) check_password: Authentication for user [] - [] FAILED with error NT_STATUS_NO_SUCH_USER [2003/03/08 15:21:43, 3] smbd/error.c:error_packet(113) error packet at smbd/sesssetup.c(829) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2003/03/08 15:21:43, 3] smbd/process.c:timeout_processing(1073) end of file from client [2003/03/08 15:21:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/03/08 15:21:43, 2] smbd/server.c:exit_server(534) Closing connections [2003/03/08 15:21:43, 3] smbd/connection.c:yield_connection(61) Yielding connection to [2003/03/08 15:21:43, 3] smbd/server.c:exit_server(574) Server exit (normal exit) LEVEL 10 LOG: [2003/03/08 15:34:43, 10] lib/util.c:dump_data(1761) [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [010] 52 41 4D 20 31 2E 30 00 02 58 45 4E 49 58 20 43 RAM 1.0. .XENIX C [020] 4F 52 45 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E ORE..MIC ROSOFT N [030] 45 54 57 4F 52 4B 53 20 31 2E 30 33 00 02 4C 41 ETWORKS 1.03..LA [040] 4E 4D 41 4E 31 2E 30 00 02 57 69 6E 64 6F 77 73 NMAN1.0. .Windows [050] 20 66 6F 72 20 57 6F 72 6B 67 72 6F 75 70 73 20 for Wor kgroups [060] 33 2E 31 61 00 02 4C 4D 31 2E 32 58 30 30 32 00 3.1a..LM 1.2X002. [070] 02 4C 41 4E 4D 41 4E 32 2E 31 00 02 4E 54 20 4C .LANMAN2 .1..NT L [080] 4D 20 30 2E 31 32 00 M 0.12. [2003/03/08 15:34:43, 3] smbd/process.c:switch_message(676) switch message SMBnegprot (pid 5262) [2003/03/08 15:34:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/03/08 15:34:43, 5] auth/auth_util.c:debug_nt_user_token(481) NT user token: (NULL) [2003/03/08 15:34:43, 5] auth/auth_util.c:debug_unix_user_token(500) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2003/03/08 15:34:43, 5] smbd/uid.c:change_to_root_user(218) change_to_root_user: now uid=(0,0) gid=(0,0) [2003/03/08 15:34:43, 3] smbd/negprot.c:reply_negprot(427) Requested protocol [PC NETWORK PROGRAM 1.0] [2003/03/08 15:34:43, 3] smbd/negprot.c:reply_negprot(427) Requested protocol [XENIX CORE] [2003/03/08 15:34:43, 3] smbd/negprot.c:reply_negprot(427) Requested protocol [MICROSOFT NETWORKS 1.03] [2003/03/08 15:34:43, 3] smbd/negprot.c:reply_negprot(427) Requested protocol [LANMAN1.0] [2003/03/08 15:34:43, 3] smbd/negprot.c:reply_negprot(427) Requested protocol [Windows for Workgroups 3.1a] [2003/03/08 15:34:43, 3] smbd/negprot.c:reply_negprot(427) Requested protocol [LM1.2X002] [2003/03/08 15:34:43, 3] smbd/negprot.c:reply_negprot(427) Requested protocol [LANMAN2.1] [2003/03/08 15:34:43, 3] smbd/negprot.c:reply_negprot(427) Requested protocol [NT LM 0.12] [2003/03/08 15:34:43, 6] param/loadparm.c:lp_file_list_changed(2318) lp_file_list_changed() file /etc/samba/smb.conf - /etc/samba/smb.conf last mod_time: Sat Mar 8 15:34:20 2003 [2003/03/08 15:34:43, 6] param/loadparm.c:lp_file_list_changed(2318) lp_file_list_changed() file /etc/samba/smb.conf - /etc/samba/smb.conf last mod_time: Sat Mar 8 15:34:20 2003 [2003/03/08 15:34:43, 10] smbd/negprot.c:get_challenge(40) get challenge: creating
Clean up winbindd locking
Is there any reason I should not apply this patch to Samba HEAD? The current locking scheme in winbind is a complete mess - indeed, the next step should be to push the locking into cli_full_connection(), but I'll leave it for now. This patch works on the noted behaviour that 2 parts of the connection process need protection - and independent protection. Tim Potter did some work on this a little while back, verifying the second case. The two cases are: - between connect() and first session setup - during the auth2 phase of the netlogon pipe setup. I've removed the counter on the lock, as I fail to see what it gains us. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
Re: Clean up winbindd locking
On Sat, Mar 08, 2003 at 09:10:23PM +1100, Andrew Bartlett wrote: Is there any reason I should not apply this patch to Samba HEAD? I think the patch was eaten by Mailman. Please re-send as text/plain. Without even seeing the patch (-: it's definitely a good idea. Tim.
Re: Clean up winbindd locking
On Sat, 2003-03-08 at 21:20, Tim Potter wrote: On Sat, Mar 08, 2003 at 09:10:23PM +1100, Andrew Bartlett wrote: Is there any reason I should not apply this patch to Samba HEAD? I think the patch was eaten by Mailman. Please re-send as text/plain. Without even seeing the patch (-: it's definitely a good idea. Actually, I think it was human error this time, but I'll blame mailman if you like :-) Andrew, -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net ? Makefile.in- ? config.abartlet ? print_err.patch ? sess_key ? to-3.0.diff ? user_ok.patch ? bin/st1q6nNC ? groupdb/mapping.po ? include/nmbd_dhcp_for_wins.h ? include/smb_interactive.h ? intl/Makefile ? intl/po ? intl/po2tbl.sed ? lib/get_password.c ? lib/rfc1738.c ? libads/libads_proto.h ? libsmb/cliconnect. ? nmbd/nmbd_dhcp_for_wins.c ? nsswitch/.libs ? nsswitch/ntlmauth.c ? pam_smbpass/pam_smb_acct.po ? pam_smbpass/pam_smb_auth.po ? pam_smbpass/pam_smb_passwd.po ? pam_smbpass/support.po ? po/Makefile ? po/POTFILES ? torture/map_extract.c Index: lib/server_mutex.c === RCS file: /data/cvs/samba/source/lib/server_mutex.c,v retrieving revision 1.3 diff -u -r1.3 server_mutex.c --- lib/server_mutex.c 16 Jan 2003 20:08:33 - 1.3 +++ lib/server_mutex.c 8 Mar 2003 09:56:44 - @@ -30,8 +30,6 @@ like the single-connection that NT makes. */ static char *mutex_server_name; -/* FIXME. ref_count should be allocated per name... JRA. */ -size_t ref_count; BOOL grab_server_mutex(const char *name) { @@ -40,7 +38,7 @@ DEBUG(0,(grab_server_mutex: malloc failed for %s\n, name)); return False; } - if (!secrets_named_mutex(mutex_server_name, 10, ref_count)) { + if (!secrets_named_mutex(mutex_server_name, 10)) { DEBUG(10,(grab_server_mutex: failed for %s\n, name)); SAFE_FREE(mutex_server_name); return False; @@ -52,7 +50,7 @@ void release_server_mutex(void) { if (mutex_server_name) { - secrets_named_mutex_release(mutex_server_name, ref_count); + secrets_named_mutex_release(mutex_server_name); SAFE_FREE(mutex_server_name); } } Index: nsswitch/winbindd_cm.c === RCS file: /data/cvs/samba/source/nsswitch/winbindd_cm.c,v retrieving revision 1.61 diff -u -r1.61 winbindd_cm.c --- nsswitch/winbindd_cm.c 16 Jan 2003 20:08:33 - 1.61 +++ nsswitch/winbindd_cm.c 8 Mar 2003 09:56:46 - @@ -302,7 +302,7 @@ /* Open a connction to the remote server, cache failures for 30 seconds */ static NTSTATUS cm_open_connection(const char *domain, const int pipe_index, - struct winbindd_cm_conn *new_conn, BOOL keep_mutex) + struct winbindd_cm_conn *new_conn) { struct failed_connection_cache *fcc; NTSTATUS result; @@ -310,7 +310,6 @@ struct in_addr dc_ip; int i; BOOL retry = True; - BOOL got_mutex = False; ZERO_STRUCT(dc_ip); @@ -366,24 +365,21 @@ new_conn-controller, global_myname(), ipc_domain, ipc_username)); for (i = 0; retry (i 3); i++) { - - if (!secrets_named_mutex(new_conn-controller, WINBIND_SERVER_MUTEX_WAIT_TIME, new_conn-mutex_ref_count)) { + BOOL got_mutex; + if (!(got_mutex = secrets_named_mutex(new_conn-controller, WINBIND_SERVER_MUTEX_WAIT_TIME))) { DEBUG(0,(cm_open_connection: mutex grab failed for %s\n, new_conn-controller)); result = NT_STATUS_POSSIBLE_DEADLOCK; continue; } - - got_mutex = True; - + result = cli_full_connection(new_conn-cli, global_myname(), new_conn-controller, - dc_ip, 0, IPC$, IPC, ipc_username, ipc_domain, - ipc_password, 0, retry); +dc_ip, CLI_FULL_CONNECTION_ANNONYMOUS_FALLBACK, IPC$, IPC, ipc_username, ipc_domain, +ipc_password, 0, retry); + + secrets_named_mutex_release(new_conn-controller); if (NT_STATUS_IS_OK(result)) break; - - secrets_named_mutex_release(new_conn-controller, new_conn-mutex_ref_count); - got_mutex = False; } SAFE_FREE(ipc_username); @@ -391,8 +387,6 @@ SAFE_FREE(ipc_password); if (!NT_STATUS_IS_OK(result)) { - if (got_mutex) -
Re: [Samba] cups printing and user names from trusted domains
On Sat, 2003-03-08 at 06:51, Andrew Bartlett wrote: On Sat, 2003-03-08 at 04:12, Wolfgang Ratzka wrote: -BEGIN PGP SIGNED MESSAGE- Im currently running some tests for a samba/CUPS based print server. The print server is a member of an NT domain and uses winbind to import NT domain users. Users accessing the print server will be not from the same domain but from trusted domains. Everything basically seems to work, once you use sufficiently new versions of cups and samba. (I'm on Debian woody, so I needed to get the 2.2.7a debs from samba.org, and cupsys-* 1.1.18-2 from Debian unstable to get a version of cupsaddsmb that actually works.) One remaining problem is that the print jobs show up in the CUPS queue as owned by user instead of domain\user. Moreover, print jobs submitted by domain1\user1 can be deleted by another user domain2\user1 who has the same user name in a different trusted domain. Am I doing something wrong? I remember vaguely, that during the first stage of my experiments (maybe with an older version of the cupsys packages), some printjobs showed up with a qualified name domain\user. I'll see what I can do to make them show up as the unix username used for login. This will be in HEAD, and will mean that they use the name in the form 'domain\username' if you used winbind or 'username' if you didn't. (Effectively). I've looked into this, and it looks like our CUPS printing is quite broken in this respect. The first thing I noticed is the lack of error handling we don't pass the error back to the client when the printing fails. However, when looking at the code in relation to your problem, I noticed that we send completely the wrong username to CUPS. For both the print job's submission, and later attempts to cancel or pause a job, we send the *original* 'smb_name'. This is the unqualified username of the user that originally sent the job, before any mapping. The correct thing to send would be the unix name - possibly directly from current_user, but I need to check on this. Jerry - can you put your eye to this? From inside the print subsystem, what is the correct way to get the current unix username? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
RE: Problem with preexec ?
Hi there, I regret putting the wrong smb.conf in my mail. It is a UNIX path (path = /home/%u/profile.%m). However, it does not matter, it doesn't work. It would be nice to create batch files at logon time. Perhaps it is related to the location of the user's profile. Whether roaming profile is disabled or not to the client has no relevance. For a better understanding, let me restate my problem: Say we create a batch file called %m.%u.bat and it looks something like this: net time \\linux /set /yes net use n: \\linux\netlogon net use h: \\linux\homes net use p: \\linux\public net use t: \\linux\tmp net use w: \\linux\Work net use n: /d /y It'll be executed using logon script = %m.%u.bat in a flash. If we create the same batch file using preexec (placed on netlogon share, or user's home, makes no difference), the followings can happen: 1). Setting time and connecting netlogon without a hitch. 2). Windows 9x - all subsequent connections give this error: Error 55: The specified resource is not available. The computer that shared the resource might have been turned off, or the permissions might have been changed. For more information, contact your network administrator. 3). Windows NT, 2K, XP - all subsequent connections get established but in very painful minute or so per share. Thanks. Andras -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] rg]On Behalf Of Lars O. Grobe Sent: Friday, March 07, 2003 8:10 AM To: [EMAIL PROTECTED] Subject: Re: Problem with preexec ? [profiles] path = \\%L\%H\profile.%m Hi! Once there have been problems if profiles were stored in home directories, there were issues with connections being kept open. Is this still the case with current Samba version, or has there been a solution I didn't hear about? CU, Lars.
Re: NT sends empty username to 3.0a21
On Sun, 2003-03-09 at 02:39, John Newhouse wrote: Hi, I have samba 3.0a21 running and NT 4.0 WS clients. All workstations were previously in Samba 2.2 domain , so now I upgraded to samba 3.0a22 and just changed domain name (workstation = XXX) and rejoined workstations by changing domain name in every WS. To look at the log it seems like NT WS sends empty username? *** ldapsam_search_one_user: searching for:[((uid=)(objectclass=sambaAccount))] *** check_password: Authentication for user [] - [] FAILED with error NT_STATUS_NO_SUCH_USER Joining the domain is OK. Also when I log into WS locally and them map some share with my username/pwd it works OK. But logging in with same username fails. Most bizarre thing is that I was testing samba30a21+ldap+pam_ldap+nss_ldap last week in my home and NT 4.0 WS logging worked.. So probably it's not samba fault. But I'm completly out of ideas, anyone can help? You did not include the guest account in your passdb. I'm going to make this either fail in a more obvious manner, or make it not fail, but in the meantime, add the guest account to your LDAP database, with RID 501. (Make it match the 'guest account' in your smb.conf). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
NT sends empty username to 3.0a21
Hi, I have samba 3.0a21 running and NT 4.0 WS clients. All workstations were previously in Samba 2.2 domain , so now I upgraded to samba 3.0a22 and just changed domain name (workstation = XXX) and rejoined workstations by changing domain name in every WS. To look at the log it seems like NT WS sends empty username? *** ldapsam_search_one_user: searching for:[((uid=)(objectclass=sambaAccount))] *** check_password: Authentication for user [] - [] FAILED with error NT_STATUS_NO_SUCH_USER Joining the domain is OK. Also when I log into WS locally and them map some share with my username/pwd it works OK. But logging in with same username fails. Most bizarre thing is that I was testing samba30a21+ldap+pam_ldap+nss_ldap last week in my home and NT 4.0 WS logging worked.. So probably it's not samba fault. But I'm completly out of ideas, anyone can help? P.S. I put level 10 log in the end, hoping that helps.. == log.klass13 == [2003/03/08 15:21:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/03/08 15:21:43, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2003/03/08 15:21:43, 3] smbd/uid.c:push_conn_ctx(287) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2003/03/08 15:21:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/03/08 15:21:43, 2] passdb/pdb_ldap.c:ldapsam_search_one_user(641) ldapsam_search_one_user: searching for:[((uid=)(objectclass=sambaAccount))] [2003/03/08 15:21:43, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/03/08 15:21:43, 3] auth/auth_sam.c:check_sam_security(391) Couldn't find user '' in passdb file. [2003/03/08 15:21:43, 2] auth/auth.c:check_ntlm_password(273) check_password: Authentication for user [] - [] FAILED with error NT_STATUS_NO_SUCH_USER [2003/03/08 15:21:43, 3] smbd/error.c:error_packet(113) error packet at smbd/sesssetup.c(829) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2003/03/08 15:21:43, 3] smbd/process.c:timeout_processing(1073) end of file from client [2003/03/08 15:21:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/03/08 15:21:43, 2] smbd/server.c:exit_server(534) Closing connections [2003/03/08 15:21:43, 3] smbd/connection.c:yield_connection(61) Yielding connection to [2003/03/08 15:21:43, 3] smbd/server.c:exit_server(574) Server exit (normal exit) LEVEL 10 LOG: [2003/03/08 15:34:43, 10] lib/util.c:dump_data(1761) [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [010] 52 41 4D 20 31 2E 30 00 02 58 45 4E 49 58 20 43 RAM 1.0. .XENIX C [020] 4F 52 45 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E ORE..MIC ROSOFT N [030] 45 54 57 4F 52 4B 53 20 31 2E 30 33 00 02 4C 41 ETWORKS 1.03..LA [040] 4E 4D 41 4E 31 2E 30 00 02 57 69 6E 64 6F 77 73 NMAN1.0. .Windows [050] 20 66 6F 72 20 57 6F 72 6B 67 72 6F 75 70 73 20 for Wor kgroups [060] 33 2E 31 61 00 02 4C 4D 31 2E 32 58 30 30 32 00 3.1a..LM 1.2X002. [070] 02 4C 41 4E 4D 41 4E 32 2E 31 00 02 4E 54 20 4C .LANMAN2 .1..NT L [080] 4D 20 30 2E 31 32 00 M 0.12. [2003/03/08 15:34:43, 3] smbd/process.c:switch_message(676) switch message SMBnegprot (pid 5262) [2003/03/08 15:34:43, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/03/08 15:34:43, 5] auth/auth_util.c:debug_nt_user_token(481) NT user token: (NULL) [2003/03/08 15:34:43, 5] auth/auth_util.c:debug_unix_user_token(500) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2003/03/08 15:34:43, 5] smbd/uid.c:change_to_root_user(218) change_to_root_user: now uid=(0,0) gid=(0,0) [2003/03/08 15:34:43, 3] smbd/negprot.c:reply_negprot(427) Requested protocol [PC NETWORK PROGRAM 1.0] [2003/03/08 15:34:43, 3] smbd/negprot.c:reply_negprot(427) Requested protocol [XENIX CORE] [2003/03/08 15:34:43, 3] smbd/negprot.c:reply_negprot(427) Requested protocol [MICROSOFT NETWORKS 1.03] [2003/03/08 15:34:43, 3] smbd/negprot.c:reply_negprot(427) Requested protocol [LANMAN1.0] [2003/03/08 15:34:43, 3] smbd/negprot.c:reply_negprot(427) Requested protocol [Windows for Workgroups 3.1a] [2003/03/08 15:34:43, 3] smbd/negprot.c:reply_negprot(427) Requested protocol [LM1.2X002] [2003/03/08 15:34:43, 3] smbd/negprot.c:reply_negprot(427) Requested protocol [LANMAN2.1] [2003/03/08 15:34:43, 3] smbd/negprot.c:reply_negprot(427) Requested protocol [NT LM 0.12] [2003/03/08 15:34:43, 6] param/loadparm.c:lp_file_list_changed(2318) lp_file_list_changed() file /etc/samba/smb.conf - /etc/samba/smb.conf last mod_time: Sat Mar 8 15:34:20 2003 [2003/03/08 15:34:43, 6] param/loadparm.c:lp_file_list_changed(2318) lp_file_list_changed() file /etc/samba/smb.conf - /etc/samba/smb.conf last mod_time: Sat Mar 8 15:34:20 2003 [2003/03/08 15:34:43, 10] smbd/negprot.c:get_challenge(40) get challenge: creating
CVS update: samba/source/auth
Date: Sat Mar 8 10:22:50 2003 Author: abartlet Update of /data/cvs/samba/source/auth In directory dp.samba.org:/tmp/cvs-serv10797/auth Modified Files: auth_ntlmssp.c Log Message: Make sure that the 'remote' machine name can only be set once. For some weird reason, during a Win2003 installation, when you select 'domain join' it sends one machine name in the name exchange, and litraly 'machinename' during the NTLMSSP login. Also fix up winbindd's logfile handling, so that it matches smbd and nmbd. (This helps me, by seperating the logs by pid). Andrew Bartlett Revisions: auth_ntlmssp.c 1.6 = 1.7 http://www.samba.org/cgi-bin/cvsweb/samba/source/auth/auth_ntlmssp.c?r1=1.6r2=1.7
CVS update: samba/source/lib
Date: Sat Mar 8 10:22:50 2003 Author: abartlet Update of /data/cvs/samba/source/lib In directory dp.samba.org:/tmp/cvs-serv10797/lib Modified Files: substitute.c Log Message: Make sure that the 'remote' machine name can only be set once. For some weird reason, during a Win2003 installation, when you select 'domain join' it sends one machine name in the name exchange, and litraly 'machinename' during the NTLMSSP login. Also fix up winbindd's logfile handling, so that it matches smbd and nmbd. (This helps me, by seperating the logs by pid). Andrew Bartlett Revisions: substitute.c1.39 = 1.40 http://www.samba.org/cgi-bin/cvsweb/samba/source/lib/substitute.c?r1=1.39r2=1.40
CVS update: samba/source/client
Date: Sat Mar 8 10:22:50 2003 Author: abartlet Update of /data/cvs/samba/source/client In directory dp.samba.org:/tmp/cvs-serv10797/client Modified Files: smbmount.c Log Message: Make sure that the 'remote' machine name can only be set once. For some weird reason, during a Win2003 installation, when you select 'domain join' it sends one machine name in the name exchange, and litraly 'machinename' during the NTLMSSP login. Also fix up winbindd's logfile handling, so that it matches smbd and nmbd. (This helps me, by seperating the logs by pid). Andrew Bartlett Revisions: smbmount.c 1.65 = 1.66 http://www.samba.org/cgi-bin/cvsweb/samba/source/client/smbmount.c?r1=1.65r2=1.66
CVS update: samba/source/nmbd
Date: Sat Mar 8 10:22:50 2003 Author: abartlet Update of /data/cvs/samba/source/nmbd In directory dp.samba.org:/tmp/cvs-serv10797/nmbd Modified Files: nmbd.c Log Message: Make sure that the 'remote' machine name can only be set once. For some weird reason, during a Win2003 installation, when you select 'domain join' it sends one machine name in the name exchange, and litraly 'machinename' during the NTLMSSP login. Also fix up winbindd's logfile handling, so that it matches smbd and nmbd. (This helps me, by seperating the logs by pid). Andrew Bartlett Revisions: nmbd.c 1.146 = 1.147 http://www.samba.org/cgi-bin/cvsweb/samba/source/nmbd/nmbd.c?r1=1.146r2=1.147
CVS update: samba/source/wrepld
Date: Sat Mar 8 10:22:50 2003 Author: abartlet Update of /data/cvs/samba/source/wrepld In directory dp.samba.org:/tmp/cvs-serv10797/wrepld Modified Files: server.c Log Message: Make sure that the 'remote' machine name can only be set once. For some weird reason, during a Win2003 installation, when you select 'domain join' it sends one machine name in the name exchange, and litraly 'machinename' during the NTLMSSP login. Also fix up winbindd's logfile handling, so that it matches smbd and nmbd. (This helps me, by seperating the logs by pid). Andrew Bartlett Revisions: server.c1.11 = 1.12 http://www.samba.org/cgi-bin/cvsweb/samba/source/wrepld/server.c?r1=1.11r2=1.12
CVS update: samba/source/utils
Date: Sat Mar 8 10:24:48 2003 Author: abartlet Update of /data/cvs/samba/source/utils In directory dp.samba.org:/tmp/cvs-serv11697/utils Modified Files: testparm.c Log Message: Testparm needs the extra arg to set_local_machine_name() too. Revisions: testparm.c 1.62 = 1.63 http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/testparm.c?r1=1.62r2=1.63
CVS update: samba/docs/docbook/projdoc
Date: Sat Mar 8 15:27:54 2003 Author: jelmer Update of /home/cvs/samba/docs/docbook/projdoc In directory dp.samba.org:/tmp/cvs-serv26200 Modified Files: Portability.sgml Log Message: Add notes on increasing performance on AIX, based on an email from William Jojo Revisions: Portability.sgml1.4 = 1.5 http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/projdoc/Portability.sgml?r1=1.4r2=1.5
CVS update: samba/docs/docbook/faq
Date: Sat Mar 8 17:29:00 2003 Author: jelmer Update of /home/cvs/samba/docs/docbook/faq In directory dp.samba.org:/tmp/cvs-serv26332 Modified Files: config.sgml Log Message: Add QA for people having trouble trying to log in without a proper samba user database. Revisions: config.sgml 1.2 = 1.3 http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/faq/config.sgml?r1=1.2r2=1.3
CVS update: samba/source/sam
Date: Sat Mar 8 17:29:40 2003 Author: idra Update of /data/cvs/samba/source/sam In directory dp.samba.org:/tmp/cvs-serv26296/sam Modified Files: idmap.c idmap_tdb.c Log Message: more on idmap two layers structure with - local tdb cache - remote idmap repository compiles Revisions: idmap.c 1.2 = 1.3 http://www.samba.org/cgi-bin/cvsweb/samba/source/sam/idmap.c?r1=1.2r2=1.3 idmap_tdb.c 1.1 = 1.2 http://www.samba.org/cgi-bin/cvsweb/samba/source/sam/idmap_tdb.c?r1=1.1r2=1.2
CVS update: samba/source/include
Date: Sat Mar 8 17:29:40 2003 Author: idra Update of /data/cvs/samba/source/include In directory dp.samba.org:/tmp/cvs-serv26296/include Modified Files: idmap.h Log Message: more on idmap two layers structure with - local tdb cache - remote idmap repository compiles Revisions: idmap.h 1.2 = 1.3 http://www.samba.org/cgi-bin/cvsweb/samba/source/include/idmap.h?r1=1.2r2=1.3
CVS update: samba/source/rpc_parse
Date: Sun Mar 9 01:13:42 2003 Author: abartlet Update of /data/cvs/samba/source/rpc_parse In directory dp.samba.org:/tmp/cvs-serv12862/rpc_parse Modified Files: parse_lsa.c Log Message: Don't fault on error returns (ptr == 0) for this LSA query. (for example, query to non-dc) Andrew Bartlett Revisions: parse_lsa.c 1.90 = 1.91 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_parse/parse_lsa.c?r1=1.90r2=1.91