[Samba] Samba 3.0.0beta1 problems when using 'unix password sync'
Hi, I've been playing with the above release package, and everything works great. Domain logons with WinXP / Win95, file shares between WinXP / Win95 / Linux. That said, I cannot seem to get the above version of the software to play nice with the 'unix password sync' directive. Trying to modify the Windows Networking password would usually return 'Incorrect password'. I get the same failure with WinXP, except the error is slightly different, but same result. I have narrowed down the problem to the above directive, by commenting and uncommenting other things in my 'smb.conf'. But, when I use the exact same configuration file with Samba v2.2.8a, everything works dandy like. Changing passwords is good, and it syncs properly with '/etc/shadow'. My 'smb.conf' is attached to the email. Samba was built from the relevant sources, my ./configure line was : ./configure --prefix=/usr/local/opt/samba --with-pam --with-pam_smbpass --with-syslog --with-quotas --with-acl-support --with-sendfile support That was the generic one used with both Samba builds, the 3.0.0beta1 configure line was slightly longer, I also included winbind and a number of other things for kicks. Platform is RedHat v9, all errate packages applied. I've gone through Aimsgroup's archives, but cannot see anything which is related :-\ Nothing noted via a cursory look through Bugzilla either. Insight would be much appreciated, thanks! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba intergrated with Active directory, is it possible??
Hello Samba Team I´m querious how to integrate samba with an Active directory domain. Im for the moment have about 10 linux servers that are using samba against a NT-domain and are joined with it. With the command... smbpasswd -r DOMAINSERVER -j DOMAINNAME Is it possible to do the same on a Ad-domain?? and if so, how do i do that or where can i find that documentation. Best Regards Andutt _ Hitta rätt på nätet med MSN Sök http://search.msn.se/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba 3.0.0beta1 problems when using 'unix passwordsync'
On Fri, Jun 13, 2003 at 11:45:10PM +0800, Julian Gomez @Work spoke thusly: That said, I cannot seem to get the above version of the software to play nice with the 'unix password sync' directive. Trying to modify the Windows Networking password would usually return 'Incorrect password'. I get the same failure with WinXP, except the error is slightly different, but same result. I have narrowed down the problem to the above directive, by commenting and uncommenting other things in my 'smb.conf'. I'm such a nitwit, here's the logged entry in '/var/log/messages' btw : Jun 12 15:33:30 cookie smbd[5679]: smb_pass_passchange: PAM: Password Change Failed for user tester! I did run across another post by someone which said they used /usr/bin/passwd %U instead of /usr/bin/passwd %u, and it worked for them (problem with the sync directive also); but I've tried that, and the result is negative. My smb.conf is listed below. I've wrapped the 'passwd chat' line. [global] workgroup = SCSILOVER netbios name = OSS-SAMBA server string = PIII 2.4Ghz Samba Trial Run interfaces = 132.147.160.125 encrypt passwords = Yes log level = 5 log file = /usr/local/opt/samba/var/log/log.%m max log size = 500 load printers = no domain logons = yes os level = 100 preferred master = True domain master = True wins support = Yes name resolve order = wins lmhosts hosts bcast local master = Yes dns proxy = Yes hosts allow = 132.147.160. 127. security = user adduser script = /usr/sbin/useradd -s /bin/false -M %u unix password sync = yes passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated* successfully* passwd chat debug = no passwd program = /usr/bin/passwd %u #passwd program = /usr/bin/passwd %U pam password change = yes obey pam restrictions = yes smb passwd file = /usr/local/opt/samba/private/smbpasswd [homes] comment = user home directories -- test read only = No [netlogon] comment = network logon services path = /usr/local/opt/samba/lib/netlogon read only = No guest ok = Yes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Accessing remote samba server
Hi, I have a setup where my samba server is located at my main office and I need to provide remote access to a branch office. I already have the conection part operational and the branch office (remote) uses a frame-relay connection to my office (local). I have linux machine with multiple ethernets serving as a firewall at each point (remote and local). The clients will be windows. What do I need to change in my samba conf in order to allow the remote clients to mount the shares ? Which traffic (protocol/port) should I allow to pass ? If assume you want the traffic to be encrypted. So if you're into browsing the net IMHO VPN is the only way. OTOH if all you want is to mount a share on THE remote samba server there is a simple and elegant trick you can perform: ignore name resolution and forward only 139 via ssh! E.g. all the remote windows clients will run ssh 139:IP.Of.Remote:139 [EMAIL PROTECTED] Then on the remote Windows WS define in lmhosts 127.0.0.1 remotesambaname ... Do a nbtstat -R and that's it. Windows WS will be able to do in explorer \\remotesambaname\share. After a initial short delay you'll be prompted for a name and passwd. Openssh for windows is free. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Do we need WINS Replication?
Just a silly idea don't know even if it works: If you are in control of the link how about messing with the wins.dat file? When the link gets up you exchange/merge wins.dat files from both servers and restart nmbds... For example all machines in one net are called with a distinctive a_ in name so you grep in b network in the wins.dat file and replace all a_ entries with the new ones. Same for the other wins.dat for hosts named b_whatever. wins.dat has simple format, so it's possible to detect fi any machines are registered on a secondary WINS server, replace/add this data to the primary WINS server's wins.dat, The idea is not to add to the primary but also to bring back the data FROM the primary to the secondary. A more elegant approach will be to detect the link is down and DELETE from secondary the missing primary machines! There seems to be one aspect you're missing: the damn browse list! IMO You'll have to change that too. and killstart nmbd (because I don't know how to make it reread wins.dat). Oh, that was a problem for me too. Will this work? Exactly my point Michael: why don't you try and tell us? ;-) Long ago I had problems with a stupid NT server refusing to register himself at the wins... Without being rebooted; So all I did was to alter the wins.dat file by hand... It worked back then it was samba 2.2.0 or smth. I think it *should* work but someone has to try and bring back the knowledge... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Share modes
Hi I have a problem with catia users, they all can open each other catia files(they work as a team anyone can work on any file), but catia never notifies anyone that the file is already open, so they overwrite each others work. In Windows this is'nt a problem since they get notified if a file is already open. I assume veto oplock files on those catia files would solve this. The problem with users never get notified if a file is already open, does samba have that function? thanks ~ Tommy Fallsen System Administrator Kongsberg Defence Aerospace Email: [EMAIL PROTECTED] TEL: +47 32287783 WEB: http://www.kongsberg.com/eng/kog/ UNIX is an operating system, OS/2 is half an operating system, Windows is a shell, and DOS is a boot partition virus. - Peter H. Coffin . ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MAILsweeper for the presence of computer viruses. Best regards, Kongsberg Gruppen ** -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Groupmapping question
Hi! A posix group can be mapped into more than one NT group ? Example : Posix groups : operator NT groups : Print Operator and Backup operator Thank you Stéphane Purnelle --- Stéphane PURNELLE [EMAIL PROTECTED] Service Informatique Corman S.A. Tel : 00 32 087/342467 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba with SSL Support - how to know?
On Thu, Jun 12, 2003 at 04:39:07PM +0800, Ow Mun Heng wrote: Hi Guys, How can I know if my version of samba was compiled with SSL support? I'm using Redhat 8's rpm version 2.2.7a security fixed. Unlikaly, as there is no good reason to enable SSL support. Furthermore, RedHat got 'told' back in 7.0 days about how bad an idea this is... Samba 3.0 has had this code removed. Andrew Bartlett -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.0Beta1 - perl(Net::LDAP::LDIF)
Chee Wai Yeung wrote: Hi, Greetings ... try to look for an RPM for perl_ldap. Downloaded three differant srpms and tried to compile them myself before asking on the list if I need this to run. I still have this problem on test box. I think this might be a problem with RedHat 9, seeing that they have made a few small changes to the rpm build system which gives me similar problems on other perl rpms modules. So, now for two questions, one, do I need the perl_ldap rpm to test Samba 3.0.0beta1, and the second, does anybody have the needed srpms to build the perl_ldap rpm module? Thanks Mailed Lee P.S. Great work guys on Samba 3, I am ever impressed, as usual! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba with SSL Support - how to know?
Can you explain why it's Bad? Due to Excessive Overhead I presume.. Cheers, Mun Heng, Ow H/M Engineering Western Digital M'sia DID : 03-7870 5168 -Original Message- From: Andrew Bartlett [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2003 4:49 PM To: Ow Mun Heng Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Samba with SSL Support - how to know? On Thu, Jun 12, 2003 at 04:39:07PM +0800, Ow Mun Heng wrote: Hi Guys, How can I know if my version of samba was compiled with SSL support? I'm using Redhat 8's rpm version 2.2.7a security fixed. Unlikaly, as there is no good reason to enable SSL support. Furthermore, RedHat got 'told' back in 7.0 days about how bad an idea this is... Samba 3.0 has had this code removed. Andrew Bartlett -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] OpenLDAP Administration for Samba3
On Wed, 2003-06-11 at 23:22, Brandon Lederer wrote: I am looking for an LDAP client to manage the LDAP server that we are going to use when we switch to samba3. A Windows variety would be OK, a web interface would be even better. Just looking for suggestions to try. java based and quite good: http://www.iit.edu/~gawojar/ldap/ cya Holger -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] OpenLDAP Administration for Samba3
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Holger Brückner wrote: | On Wed, 2003-06-11 at 23:22, Brandon Lederer wrote: | |I am looking for an LDAP client to manage the LDAP server that we are going |to use when we switch to samba3. A Windows variety would be OK, a web |interface would be even better. Just looking for suggestions to try. | | | java based and quite good: | | http://www.iit.edu/~gawojar/ldap/ | | cya | | Holger | gq is nice too http://biot.com/gq/ - -- *** [EMAIL PROTECTED] OpenPGP public key: http://www.amakuru.net/dmorel.asc 28192ef126bc871757cb7d97f4a44536 -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE+6Ftuqr7QF98duCMRAodTAKCJ9NP9Zns7XoUbE2efk4nZnrvCzgCgiHAb SzumtYPa69zsBHz5sOWY/ZY= =qBJH -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] windows unicode clients
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all can anybody tell me which MS Oses/versions use unicode, for i must mount their shares and back them up on a samba server (2.2.8a +patches / 2.4.21 kernel + a.widmark's patches) using smbclient (to check availability) + smbfs mounts (to find/cp/gzip). I was told w2k uses unicode, are there others? David - -- *** [EMAIL PROTECTED] OpenPGP public key: http://www.amakuru.net/dmorel.asc 28192ef126bc871757cb7d97f4a44536 -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE+6F1rqr7QF98duCMRAvPgAJ4xiMZnty5bFf3Xzv8Vt6bY4eqOagCcDWES ypU4EsRsDt6PLVtWcG7/Ou8= =xJSH -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba XP
Hi, I am a newbie when it comes to XP and samba. I am planning to install samba domain controller for XP, 2000 machines. I read a bit about the registry hacking and some documents on the internet. But I need the following details to set up the server:- 1. Samba version 2. Linux kernel version (preferably what distribution and what version) THe lesser the bugs the better. 3. What patch level should I have for the samba 4. Any more sites that tells me how to setup the XP Pro Clients with the samba server? Thanks. adrian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba + CUPS = Two printers instead of one?
Vizitiu, Ciprian CVizitiu at gbif.org wrote on Samba-Digest:
Tue Jun 10 22:51:10 GMT 2003
Samba 2.2.8 + cups-1.1.17.
load printers = yes
show add printer wizard = yes
printcap name = cups
printer admin = root
printing = cups
[print$]
path = /home/printers
guest ok = yes
browseable = yes
write list = root
[printers]
comment = All Printers
printable = yes
path = /var/spool/samba
browseable = no
guest ok = yes
public = yes
read only = yes
writable = no
[2 floor IBM BW]
comment = IBM Infoprint 1222
path = /var/spool/lpd/samba/2ndflbw
printable = yes
browseable = yes
writable = no
public = yes
printer admin = root
Everything all right added drivers, set default all works like a charm just
it's just that... Why do I have two printers instead of one listed on the
server?
Short answer: because you setup the smb.conf the way you did.
Long answer:
* the load printers = yes directive tells Samba to look for
a printcap file and auto-create and use [printername] sections
for each printername found in the printcap. These auto-created
shares are not actually written to disk, but are visible
in the Network neighbourhood and/or the server's Printers and
Faxes folder. They use settings cloned from the [printers]
section, (similar to how the [homes] section works...)
* the manually created share [2 floor IBM BW] duplicates your
other effort. (BTW, don't forget to have the same printername
with spaces {2 floor IBM BW} on the UNIX side, and don't
forget to escape those spaces, should you want to use that
printer in UNIX
Cheers,
Kurt
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba XP
But I need the following details to set up the server:- 1. Samba version 2. Linux kernel version (preferably what distribution and what version) THe lesser the bugs the better. 3. What patch level should I have for the samba 4. Any more sites that tells me how to setup the XP Pro Clients with the samba server? RH 8; Samba 2.2.8 from samba org rebuilt as rpm. after reading this http://hr.uoregon.edu/davidrl/samba/samba-pdc.html and this http://us1.samba.org/samba/ftp/docs/htmldocs/Samba-PDC-HOWTO.html and eventually this http://www.math.temple.edu/computing/samba.html I was able to do a samba PDC and join the XP Pro clients to it. Beware it's a long and painfully frustrating journey. ;-) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba Docs
John, you have done a fantastic job with the docs. I download it every few days. How close is it to release status? (I don't really see any show stoppers but I haven't looked at everything.) Is it supposed to coincide with the actual Samba 3.0 release? If so I'll wait to send it up for printing (as it is HUGE) :) Great Job. Jim Wharton Network Administrator Alachua County Property Appraiser [EMAIL PROTECTED] OutBound Mail Scanned by Mcafee Web Appliance. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba XP
Hi, (Please reply to this address rather than the one posted previously) I am a newbie when it comes to XP and samba. I am planning to install samba domain controller for XP, 2000 machines. I read a bit about the registry hacking and some documents on the internet. But I need the following details to set up the server:- 1. Samba version 2. Linux kernel version (preferably what distribution and what version) THe lesser the bugs the better. 3. What patch level should I have for the samba 4. Any more sites that tells me how to setup the XP Pro Clients with the samba server? Thanks. adrian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba XP
Hi, But I need the following details to set up the server:- 1. Samba version When you're a newbe start with the latest stable version, 2.2.8a, you should have searched for that on samba.org, you need nothing else from samba.org 2. Linux kernel version (preferably what distribution and what version) Hmm I am not going to start here. Distro doesn't make a lot of a difference, I prefer Debian, but I could live with any distro. 4. Any more sites that tells me how to setup the XP Pro Clients with the samba server? I used four howto's: This one is the best for XP hassles: http://www.math.temple.edu/computing/samba.html#optimize Search on: samba.idealx.org for their samba-ldap-pdc howto if you're planning on using ldap (if you're planning a domain woth lots of users it might be a good idea) and use this one: http://www.unav.es/cti/ldap-smb/ldap-smb-howto.html And the last thing I used for simple questions was the howto collection and faq's that come with the samba package. Hope to be of help. Regards Bas PS: Most answers are pretty easy to find with google, the documentation on samba.org or the mailinglist archives -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] I would like a concise doccument on how to setup samba3.0.0b2 using ldapsam_nua
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 12 Jun 2003, John H Terpstra wrote: On Wed, 11 Jun 2003, Jeffrey D. Means wrote: Is there any doccumentation on using the ldapsam_nua backend?? I would like to setup my server in that fashion, and have looked all through the docs tree I downloaded with the cvs sources without sucess. The LDAP howto in the docs tree is completly useless as it was written for 2.2.3 Are you serious? Are you saying that the Samba-HOWTO-Collection.pdf in the samba-3.0.0beta1 code taball is written for 2.2.3? Is it only 88 pages or is it 400 pages in length? Seriously, your comment about the documentation has me boogled out over the fence - I have spent the last 3 months writing completely useless stuff for 2.2.3 - well, I'll be! No John. What Jeffery is saying is that we have not finished updating the LDAP docs for the new schema, etc... Which is true. Please make sure that you check the SAMBA_3_RELEASE branch docs directory. If you wish just check my work in progress version: http://samba.org/~jht/NT4migration/Samba-HOWTO-Collection.pdf ldapsam_nua was withdrawn from the 3.0.0 release plans, It did not work. There is NO support for the Non-Unix Account facility that people requested. It may come back later in the 3.x series when we have been able to iron the bugs out. No really true. It's just been replaced by idmap stuff. Jeffery, if you define the idmap uid/gid parameters in smb.conf, you should get non-unix account support by default. However, this code is very new and should be taken with a grain of salt initially. Please provide feedback via the mailing list or by filing bugs @ https://bugzilla.samba.org/. Thanks. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+6HkUIR7qMdg1EfYRAqRWAKDoxqAVrf3WmiWtJVLEnOqYWaw+xACfZUua L3Ay6GZ4m3OpCNPkiS8Fsps= =04f4 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] win bind authentication
I set the logging for auth and winbind to 10 and this is what I am seeing. Could this possibly be a problem with the Win2K server looking for an SRV record or somesuch? It seems like just after it tries to connect to the dc I get these lines [2003/06/12 09:29:17, 0] rpc_parse/parse_prs.c:prs_mem_get(528) prs_mem_get: reading data of size 2 would overrun buffer. [2003/06/12 09:29:17, 0] rpc_client/cli_pipe.c:rpc_pipe_bind(1484) rpc_pipe_bind: Failed to unmarshall RPC_HDR_BA. Thanks for any help with this -Tod Schmidt The rest of the log... [2003/06/12 09:29:16, 10] nsswitch/winbindd.c:client_write(514) client_write: need to write 37 extra data bytes. [2003/06/12 09:29:16, 10] nsswitch/winbindd.c:client_write(469) client_write: wrote 37 bytes. [2003/06/12 09:29:16, 10] nsswitch/winbindd.c:client_write(503) client_write: client_write: complete response written. [2003/06/12 09:29:16, 6] nsswitch/winbindd.c:new_connection(307) accepted socket 16 [2003/06/12 09:29:16, 10] nsswitch/winbindd.c:winbind_client_read(422) client_read: read 0 bytes. Need 1312 more for a full request. [2003/06/12 09:29:16, 5] nsswitch/winbindd.c:winbind_client_read(427) read failed on sock 15, pid 10953: EOF [2003/06/12 09:29:16, 10] nsswitch/winbindd.c:winbind_client_read(422) client_read: read 1312 bytes. Need 0 more for a full request. [2003/06/12 09:29:16, 10] nsswitch/winbindd.c:process_request(272) process_request: request fn PAM_AUTH [2003/06/12 09:29:16, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth(80) [10953]: pam auth tschmidt+xxx [2003/06/12 09:29:16, 10] nsswitch/winbindd_cm.c:cm_get_dc_name(178) Creating get_dc_name_cache entry for TNCTEST [2003/06/12 09:29:16, 4] nsswitch/winbindd_cm.c:cm_ads_find_dc(112) cm_ads_find_dc: domain=TNCTEST [2003/06/12 09:29:16, 4] nsswitch/winbindd_cm.c:cm_ads_find_dc(129) cm_ads_find_dc: using server='DCTEST' IP=10.1.15.80 [2003/06/12 09:29:16, 3] nsswitch/winbindd_cm.c:cm_get_dc_name(208) cm_get_dc_name: Returning DC DCTEST (10.1.15.80) for domain TNCTEST [2003/06/12 09:29:16, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(238) IPC$ connections done by user TSCHMIDT\xxx [2003/06/12 09:29:16, 5] nsswitch/winbindd_cm.c:cm_open_connection(364) connecting to DCTEST from MAILDEV with username [TSCHMIDT]\[xxx] [2003/06/12 09:29:17, 0] rpc_parse/parse_prs.c:prs_mem_get(528) prs_mem_get: reading data of size 2 would overrun buffer. [2003/06/12 09:29:17, 0] rpc_client/cli_pipe.c:rpc_pipe_bind(1484) rpc_pipe_bind: Failed to unmarshall RPC_HDR_BA. [2003/06/12 09:29:17, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth(133) could not open handle to NETLOGON pipe [2003/06/12 09:29:17, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth(167) Plain-text authentication for user tschmidt+xxx returned NT_STATUS_NO_LOGON_SERVERS (PAM: 4) [2003/06/12 09:29:17, 10] nsswitch/winbindd.c:client_write(469) client_write: wrote 1300 bytes. [2003/06/12 09:29:17, 10] nsswitch/winbindd.c:winbind_client_read(422) client_read: read 1312 bytes. Need 0 more for a full request. [2003/06/12 09:29:17, 10] nsswitch/winbindd.c:process_request(272) process_request: request fn INFO [2003/06/12 09:29:17, 3] nsswitch/winbindd_misc.c:winbindd_info(196) [10953]: request misc info [2003/06/12 09:29:17, 10] nsswitch/winbindd.c:client_write(469) client_write: wrote 1300 bytes. [2003/06/12 09:29:17, 10] nsswitch/winbindd.c:winbind_client_read(422) client_read: read 1312 bytes. Need 0 more for a full request. [2003/06/12 09:29:17, 10] nsswitch/winbindd.c:process_request(272) process_request: request fn AUTH_CRAP [2003/06/12 09:29:17, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(237) [10953]: pam auth crap domain: TSCHMIDT user: xxx [2003/06/12 09:29:17, 10] nsswitch/winbindd_cm.c:cm_get_dc_name(167) returning positive get_dc_name_cache entry for TNCTEST [2003/06/12 09:29:17, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(238) IPC$ connections done by user TSCHMIDT\xxx [2003/06/12 09:29:17, 5] nsswitch/winbindd_cm.c:cm_open_connection(364) connecting to DCTEST from MAILDEV with username [TSCHMIDT]\[xxx] [2003/06/12 09:29:17, 0] rpc_parse/parse_prs.c:prs_mem_get(528) prs_mem_get: reading data of size 2 would overrun buffer. [2003/06/12 09:29:17, 0] rpc_client/cli_pipe.c:rpc_pipe_bind(1484) rpc_pipe_bind: Failed to unmarshall RPC_HDR_BA. [2003/06/12 09:29:17, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(292) could not open handle to NETLOGON pipe (error: NT_STATUS_UNSUCCESSFUL) [2003/06/12 09:29:17, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(342) NTLM CRAP authentication for user [TSCHMIDT]\[xxx] returned NT_STATUS_NO_LOGON_SERVERS (PAM: 4) [2003/06/12 09:29:17, 10] nsswitch/winbindd.c:client_write(469) client_write: wrote 1300 bytes. [2003/06/12 09:29:17, 10] nsswitch/winbindd.c:winbind_client_read(422) client_read: read 0 bytes. Need 1312 more for a full request. [2003/06/12 09:29:17, 5]
Re: [Samba] Permissions and long filenames
On Thu, 2003-06-12 at 05:21, Rohan Parkes wrote: All of the shares are working correctly except for the My Documents folder, which only has read permissions. All the shares are on a FAT 32 partition, and all have the same security settings (the Everyone account has full control). The only difference I can see is that My Documents has a long file name. It appears that Samba has a problem if the My Documents folder is a Windows Special Folder. Once I stopped pointing the My Documents desktop icon to it, making it just a normal folder called My Documents, the problem disappeared. -- Rohan Parkes Melbourne Australia -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba with SSL Support - how to know?
On Thu, 12 Jun 2003, Ow Mun Heng wrote: Can you explain why it's Bad? Due to Excessive Overhead I presume.. Yep. MS Windows clients do NOT support it. SSL support in Samba always was experimental and was not maintained so the code fell into bit rot really quickly. - John T. Cheers, Mun Heng, Ow H/M Engineering Western Digital M'sia DID : 03-7870 5168 -Original Message- From: Andrew Bartlett [mailto:[EMAIL PROTECTED] Sent: Thursday, June 12, 2003 4:49 PM To: Ow Mun Heng Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Samba with SSL Support - how to know? On Thu, Jun 12, 2003 at 04:39:07PM +0800, Ow Mun Heng wrote: Hi Guys, How can I know if my version of samba was compiled with SSL support? I'm using Redhat 8's rpm version 2.2.7a security fixed. Unlikaly, as there is no good reason to enable SSL support. Furthermore, RedHat got 'told' back in 7.0 days about how bad an idea this is... Samba 3.0 has had this code removed. Andrew Bartlett -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba member server not seen in network neighborhood
Hello All, Samba 2.2.5 / AIX 5.1 - NO ERRORS in any logs Can map shares and even correct authentication / user ID mappings work from all WIN2K domain clients using a URL or share mapping utilities. Samba member is not populated / seen in Network Neighborhood but nmblookup -M - ,querying MSBROWSE fails with failed to find name __MSBROWSE__#01 and if I try to query with nmblookup the Samba server Name / IP address it also fails to find either. Any suggestions on what further steps will point to a problem and ultimately a solution. The only thing I can think of is to disjoin the domain and rejoin with smbpasswd -j DOMAIN . . . Please help and Thank You for any help given. Kirk Shimek Information Systems Systems Engineer - UNIX Administrator TRW Automotive 507-457-3750 ext.8241 [EMAIL PROTECTED] WINONA MN !DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.0 Transitional//EN HTMLHEAD META http-equiv=Content-Type content=text/html; charset=iso-8859-1 META content=MSHTML 6.00.2800.1170 name=GENERATOR/HEAD BODY style=MARGIN-TOP: 2px; FONT: 10pt Arial; MARGIN-LEFT: 2px bgColor=#ff DIVHello All,/DIV DIVnbsp;/DIV DIVSamba 2.2.5 / AIX 5.1nbsp; -nbsp; NO ERRORS in any logs/DIV DIVCan map shares and even correct authentication / user ID mappings work from all WIN2K domain clients using a URL or share mapping utilities./DIV DIVnbsp;/DIV DIVSamba member is not populated / seen in Network Neighborhood/DIV DIVnbsp;/DIV DIVbut nmblookup -M - ,querying MSBROWSE fails with failed to find name __MSBROWSE__#01/DIV DIVand if I try to query with nmblookup the Samba server Name / IP address it also fails to find either./DIV DIVnbsp;/DIV DIVAny suggestions on what furthernbsp;steps will point to a problem and ultimately a solution.nbsp; The only thing I can think of is to disjoin the domain and rejoin with smbpasswd -j DOMAIN . . ./DIV DIVnbsp;/DIV DIVPlease helpnbsp;and Thank You for any help given./DIV DIVnbsp;/DIV DIVBRKirk Shimek Information SystemsBRSystems Engineer - UNIX AdministratorBRTRW AutomotiveBR507-457-3750 ext.8241BRA href=mailto:[EMAIL PROTECTED][EMAIL PROTECTED]/ABRWINONA MN/DIV/BODY/HTML -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] problem after upgrading redhat 9
Got exactly the same problem now.can mount once, but not umount (smbumount not working -- says device is busy?). Using the same system :) (redhat 9). If someone knows the solution (something very easy I`m sure ;)) please send me as well! To my problem yesterday: I could not use smbmount smbclient because I did not specify the correct workgroup -- samba is logged into the right domain but to login I have to use another domainname and specify it as workgroup (-W). Got it today (luckily). Thanks, Diana -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: 11 June 2003 20:21 To: [EMAIL PROTECTED] Subject: [Samba] Fw: problem after upgrading redhat 9 an update. it now seems that using mount -t smbfs -o username=X,password=XX //hyacinth/mp3s /pub/mp3 only works once when i umount the share or try and mount any other drive from that pc it just hangs. i can mount most drives once but after that cannot mount them again until the machine is rebooted. any ideas, anyone?? - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 10, 2003 7:20 PM Subject: problem after upgrading redhat 9 so i just upgraded an ftp server to redhat 9 with several of my win2k drives mounted in fstab. all worked fine before but now when it comes on smb starting it just hangs. some directories i can mount via mount -t smbfs -o username=X,password=XX //hyacinth/mp3s /pub/mp3 but some it jsut hangs. i have taken the entries out of fstab that will not mount via command line but it still hangs. why should these directories not mount anyways? the only thing i can think of is that the directory has 37.7 gigs. is there a limit on how much space can be mounted? i have included my fstab below. the only way i can get the machine to boot is by unplugging the network cable, else i get: Jun 10 10:42:56 amnesiac mount: 602: session request to 192.168.1.201 failed (Called name not present) Jun 10 10:42:56 amnesiac mount: 602: session request to 192 failed (Called name not present) a bunch of times in my boot.log and it jsut hangs as i said. someone said i should change the ip addresses in fstab to the hostname (hyacinth) and add a line to /etc/hosts defining hyacinth so i did this but it did not help. any help apreciated. i had other entries in there as well (ie the big drive is not in there right now). fstab with user/pass = XXX to protect the innocent LABEL=/ / ext3 defaults 1 1 LABEL=/boot /boot ext3 defaults 1 2 none/dev/ptsdevpts gid=5,mode=620 0 0 none/proc proc defaults 0 0 none/dev/shmtmpfs defaults 0 0 /dev/hdb3 swapswap defaults 0 0 \\hyacinth\mp3s /pub/mp3 smbfs username=xxx,password=xxx00 \\hyacinth\archive /pub/archive smbfs username=xxx,password=xxx00 \\hyacinth\archivegames /pub/archivegames smbfs username=xxx,password=xxx00 \\hyacinth\familyguy/pub/familyguy smbfs username=xxx,password=xxx00 \\hyacinth\upload/pub/upload smbfs username=xxx,password=xxx,rw,dmask=07700 /dev/cdrom /mnt/cdrom iso9660 noauto,owner,kudzu,ro 0 0 /dev/fd0 /mnt/floppy auto noauto,owner,kudzu 0 0 __ Gesendet von Yahoo! Mail - http://mail.yahoo.de Logos und Klingeltöne fürs Handy bei http://sms.yahoo.de -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Docs
Jim, It is still a work in progress. The final version will not be complete until samba-3.0.0 ships as it has to be accurate for the product that goes gold. Also, around the time that Samba-3.0.0 ships we are hoping to have this document in print. The details of this can not be announced until we gain the publishers' approval. The final book will be around 700 pages. Thanks for the compliment. :) - John T. On Thu, 12 Jun 2003, Jim Wharton wrote: John, you have done a fantastic job with the docs. I download it every few days. How close is it to release status? (I don't really see any show stoppers but I haven't looked at everything.) Is it supposed to coincide with the actual Samba 3.0 release? If so I'll wait to send it up for printing (as it is HUGE) :) Great Job. Jim Wharton Network Administrator Alachua County Property Appraiser [EMAIL PROTECTED] OutBound Mail Scanned by Mcafee Web Appliance. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Authentication
I'm not sure if I'm clear. I have a win2k native domain. I want to add a samba file server so users can access it through network neighborhood. I set up the Kerberos stuff, I can do that from the linux box fine. Do I STILL need to do the winbind stuff in order for users to not have to authenticate to the samba box? Thanks for your help. Newbie here... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba member server not seen in network neighborhood
Samba 2.2.5 / AIX 5.1 - NO ERRORS in any logs Can map shares and even correct authentication / user ID mappings work from all WIN2K domain clients using a URL or share mapping utilities. Samba member is not populated / seen in Network Neighborhood but nmblookup -M - ,querying MSBROWSE fails with failed to find name __MSBROWSE__#01 and if I try to query with nmblookup the Samba server Name / IP address it also fails to find either. Any suggestions on what further steps will point to a problem and ultimately a solution. The only thing I can think of is to disjoin the domain and rejoin with smbpasswd -j DOMAIN . . . Which machine is the PDC? Samba or a W2K? Are you using WINS? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbpasswd not attempting to use LDAP
I've only got LDAP configured as a passdb type in my smb.conf, but samba appears to be completely ignoring that and creating an /etc/samba/smbpass file (full output of that at the bottom) my smb.conf has: ldap admin dn = cn=Admin,dc=byramhealthcare,dc=com ldap ssl = off passdb backend ldapsam:ldap://ldapmaster.byramhealthcare.com ldap delete dn = no ldap user suffix = ou=People,dc=byramhealthcare,dc=com ldap machine suffix = ou=Systems,dc=byramhealthcare,dc=com ldap suffix = ou=People,dc=byramhealthcare,dc=com ... and here's what I get when I try to add a user, presumably to the LDAP pdb.. it finds the ldapsam pdf, but then never talks to it... # smbpasswd -D 99 -a testuser Netbios name list:- my_netbios_names[0]=TESTBOX New SMB password: Retype new SMB password: Trying to load: smbpasswd Attempting to register passdb backend ldapsam Successfully added passdb backend 'ldapsam' Attempting to register passdb backend ldapsam_compat Successfully added passdb backend 'ldapsam_compat' Attempting to register passdb backend smbpasswd Successfully added passdb backend 'smbpasswd' Attempting to register passdb backend tdbsam Successfully added passdb backend 'tdbsam' Attempting to register passdb backend guest Successfully added passdb backend 'guest' Attempting to find an passdb backend to match smbpasswd (smbpasswd) Found pdb backend smbpasswd pdb backend smbpasswd has a valid init Trying to load: guest Attempting to find an passdb backend to match guest (guest) Found pdb backend guest pdb backend guest has a valid init getsampwnam (smbpasswd): search by name: testuser startsmbfilepwent_internal: opening file /etc/samba/smbpasswd startsmbfilepwent_internal: unable to open file /etc/samba/smbpasswd. Error wasNo such file or directory unable to open passdb database. Finding user testuser Trying _Get_Pwnam(), username as lowercase is testuser Get_Pwnam_internals did find user [testuser]! pdb_set_username: setting username testuser, was element 11 - now SET pdb_set_full_name: setting full name Dereks Test User was element 12 - now SET pdb_set_unix_homedir: setting home dir /home/testuser, was NULL element 21 - now SET pdb_set_domain: setting domain TESTBOX, was element 13 - now DEFAULT pdb_set_user_sid: setting user sid S-1-5-21-2358132418-1227356351-887936944-3002 element 17 - now SET pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2358132418-1227356351-887936944-3002 from rid3002 tdb_pack(ddffd, 1024) - 28 tdb_pack(d, 996) - 4 tdb_pack(ddd, 992) - 12 tdb_pack(ddd, 980) - 12 tdb_pack(ddd, 968) - 12 tdb_pack(ddffd, 1024) - 19 tdb_pack(d, 1005) - 4 tdb_pack(ddffd, 1024) - 20 tdb_pack(d, 1004) - 4 tdb_pack(ddffd, 1024) - 25 tdb_pack(d, 999) - 4 tdb_pack(ddffd, 1024) - 31 tdb_pack(d, 993) - 4 tdb_pack(ddffd, 1024) - 30 tdb_pack(d, 994) - 4 tdb_pack(ddffd, 1024) - 29 tdb_pack(d, 995) - 4 tdb_pack(ddd, 991) - 12 tdb_pack(ddffd, 1024) - 30 tdb_pack(d, 994) - 4 tdb_pack(ddffd, 1024) - 25 tdb_pack(d, 999) - 4 tdb_pack(ddffd, 1024) - 27 tdb_pack(d, 997) - 4 tdb_pack(ddd, 993) - 12 tdb_pack(ddd, 981) - 12 tdb_pack(ddd, 969) - 12 tdb_pack(ddffd, 1024) - 26 tdb_pack(d, 998) - 4 tdb_pack(ddffd, 1024) - 27 tdb_pack(d, 997) - 4 tdb_unpack(ddffd, 34) - 30 tdb_unpack(d, 4) - 4 tdb_unpack(ddffd, 67) - 27 tdb_unpack(d, 40) - 4 tdb_unpack(ddd, 36) - 12 tdb_unpack(ddd, 24) - 12 tdb_unpack(ddd, 12) - 12 tdb_unpack(ddffd, 31) - 27 tdb_unpack(d, 4) - 4 tdb_unpack(ddffd, 29) - 25 tdb_unpack(d, 4) - 4 tdb_unpack(ddffd, 24) - 20 tdb_unpack(d, 4) - 4 tdb_unpack(ddffd, 30) - 26 tdb_unpack(d, 4) - 4 tdb_unpack(ddffd, 29) - 25 tdb_unpack(d, 4) - 4 tdb_unpack(ddffd, 45) - 29 tdb_unpack(d, 16) - 4 tdb_unpack(ddd, 12) - 12 tdb_unpack(ddffd, 68) - 28 tdb_unpack(d, 40) - 4 tdb_unpack(ddd, 36) - 12 tdb_unpack(ddd, 24) - 12 tdb_unpack(ddd, 12) - 12 tdb_unpack(ddffd, 35) - 31 tdb_unpack(d, 4) - 4 tdb_unpack(ddffd, 34) - 30 tdb_unpack(d, 4) - 4 tdb_unpack(ddffd, 23) - 19 tdb_unpack(d, 4) - 4 pdb_set_group_sid: setting group sid S-1-5-21-2358132418-1227356351-887936944-1201 element 18 - now SET pdb_set_group_sid_from_rid: setting group sid S-1-5-21-2358132418-1227356351-887936944-1201 from rid 1201 Home server: testbox pdb_set_profile_path: setting profile path \\testbox\testuser\profile, was element 2 - now DEFAULT Home server: testbox pdb_set_homedir: setting home dir \\testbox\testuser, was element 1 - now DEFAULT pdb_set_dir_drive: setting dir drive , was NULL element 3 - now DEFAULT pdb_set_logon_script: setting logon script , was element 4 - now DEFAULT element 19 - now DEFAULT element 19 - now CHANGED element 19 - now CHANGED element 31 - now CHANGED element 30 - now CHANGED element 10 - now CHANGED element 20 - now CHANGED account_policy_get: maximum password age:1814400 element 9 - now CHANGED account_policy_get: minimum password age:0 element 8 - now CHANGED element 17: SET startsmbfilepwent_internal: opening file /etc/samba/smbpasswd startsmbfilepwent_internal: unable to open file /etc/samba/smbpasswd. Error
[Samba] Dead simple question
Hello Team samba, We have a XEROX workcentre 480 CX and no drivers for LINUX. The printer works very well under our NT server. Is it possible to hook up a LINUX workstation to print from Open Office to this printer running under NT?? (In the documentation you make it very clear that the opposite way is possible) With friendly greeting from holland... Jeroen Kleef SS Systems www.s-s-systems.com [EMAIL PROTECTED] Tel: + 31 (0) 50 549 49 49 Fax:+ 31 (0) 50 549 93 09 Postbus 9450 9703 LR Groningen The Netherlands. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Can't access to a file from a win2k client
Hello, When I try to access a file from a win2k client, win2k prof shows me a message saying Access denied. After this, I try to change file rights, but again a Access denied message it's showed me. Does anyone the reason? version: Version 2.2.3a -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] net usermap? or something like that?
Before I upgraded Samba, things worked :) My samba box is a member of the domain, and my NT and Unix username are the same, so it was allowing my samba session to modify my files as if I were that Unix user. Now, with the idmap stuff, my NT userid is mapped to uid 1, which is not my unix UID, so I do not have permissiosn to delete files, etc... net has the groupmap which lets you say that this NT group should be treated as this Unix group. Is there a way to do this with users? I tried using the old username map, but I am guessing that doesn't work anymore (hard to find docs for 3 - my smb.conf is missing all the parameters in the man page - ouch). Thanks for any more tips. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Dead simple question
- Define a raw printer in printcap as described in: http://www.tldp.org/HOWTO/SMB-HOWTO-9.html - Install the printer in Windows (as network printer of course) using the working Windows drivers Works like a charm for me :) SS Systems Jeroen kleef [EMAIL PROTECTED] wrote: Hello Team samba, We have a XEROX workcentre 480 CX and no drivers for LINUX. The printer works very well under our NT server. Is it possible to hook up a LINUX workstation to print from Open Office to this printer running under NT?? (In the documentation you make it very clear that the opposite way is possible) With friendly greeting from holland... Jeroen Kleef SS Systems www.s-s-systems.com [EMAIL PROTECTED] Tel: + 31 (0) 50 549 49 49 Fax:+ 31 (0) 50 549 93 09 Postbus 9450 9703 LR Groningen The Netherlands. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SMB Authentication
Hi, I'm not sure if this is the right place to ask this, please point me somewhere more appropriate if this is the case! I am trying to authenticate users against an NT domain controller. I am using the perl Authen::Smb module. Unfortunately it doesn't seem to work! Digging a bit deeper, I find that 1) If I use Samba as a PDC, it works fine 2) I can log on to shares on the NT machine This suggests that there is some setting on the NT controller that is preventing me from using SMB authentication, but allowing me to log on to NT shares. I don't know anything at all about NT administration; could anybody tell me where the problem could be? Thanks, Saajan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba 2.2.8a SWAT enhanced
Hallo ! If You are using SWAT and you using the Advanced View mode the list of parameters is very long and it's not handy to find anything. Also You can't do everything on the Password page-Seite nicht, what You would do with the console command smbpasswd. And a nice list of all smbpasswd accounts is not available on SWAT. So, I've tried to enhance this. See details, download files and screen shots here: http://demus.de/download/samba-patch/v228a/ 2 C files are changed. You have to re-compile the smb 2.2.8a packages with make install ! Tested on 4 different Linux (rh 7.3 suse 7.0 suse 7.3 suse 8.1) hosts. smbpasswd list is NOT working with LDAP by now ! Please send any comments ciao peter -- +++ GMX - Mail, Messaging more http://www.gmx.net +++ Bitte lächeln! Fotogalerie online mit GMX ohne eigene Homepage! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] win bind authentication
I am out of wits here with RPC and winbindd_pam stuff. What version of samba are you using? Upgrade to 3.0beta1 if that's not the one you are using. If it is, you probably want to file a bug. On Thursday 12 June 2003 06:37 am, Tod B. Schmidt wrote: I set the logging for auth and winbind to 10 and this is what I am seeing. Could this possibly be a problem with the Win2K server looking for an SRV record or somesuch? It seems like just after it tries to connect to the dc I get these lines [2003/06/12 09:29:17, 0] rpc_parse/parse_prs.c:prs_mem_get(528) prs_mem_get: reading data of size 2 would overrun buffer. [2003/06/12 09:29:17, 0] rpc_client/cli_pipe.c:rpc_pipe_bind(1484) rpc_pipe_bind: Failed to unmarshall RPC_HDR_BA. Thanks for any help with this -Tod Schmidt The rest of the log... [2003/06/12 09:29:16, 10] nsswitch/winbindd.c:client_write(514) client_write: need to write 37 extra data bytes. [2003/06/12 09:29:16, 10] nsswitch/winbindd.c:client_write(469) client_write: wrote 37 bytes. [2003/06/12 09:29:16, 10] nsswitch/winbindd.c:client_write(503) client_write: client_write: complete response written. [2003/06/12 09:29:16, 6] nsswitch/winbindd.c:new_connection(307) accepted socket 16 [2003/06/12 09:29:16, 10] nsswitch/winbindd.c:winbind_client_read(422) client_read: read 0 bytes. Need 1312 more for a full request. [2003/06/12 09:29:16, 5] nsswitch/winbindd.c:winbind_client_read(427) read failed on sock 15, pid 10953: EOF [2003/06/12 09:29:16, 10] nsswitch/winbindd.c:winbind_client_read(422) client_read: read 1312 bytes. Need 0 more for a full request. [2003/06/12 09:29:16, 10] nsswitch/winbindd.c:process_request(272) process_request: request fn PAM_AUTH [2003/06/12 09:29:16, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth(80) [10953]: pam auth tschmidt+xxx [2003/06/12 09:29:16, 10] nsswitch/winbindd_cm.c:cm_get_dc_name(178) Creating get_dc_name_cache entry for TNCTEST [2003/06/12 09:29:16, 4] nsswitch/winbindd_cm.c:cm_ads_find_dc(112) cm_ads_find_dc: domain=TNCTEST [2003/06/12 09:29:16, 4] nsswitch/winbindd_cm.c:cm_ads_find_dc(129) cm_ads_find_dc: using server='DCTEST' IP=10.1.15.80 [2003/06/12 09:29:16, 3] nsswitch/winbindd_cm.c:cm_get_dc_name(208) cm_get_dc_name: Returning DC DCTEST (10.1.15.80) for domain TNCTEST [2003/06/12 09:29:16, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(238) IPC$ connections done by user TSCHMIDT\xxx [2003/06/12 09:29:16, 5] nsswitch/winbindd_cm.c:cm_open_connection(364) connecting to DCTEST from MAILDEV with username [TSCHMIDT]\[xxx] [2003/06/12 09:29:17, 0] rpc_parse/parse_prs.c:prs_mem_get(528) prs_mem_get: reading data of size 2 would overrun buffer. [2003/06/12 09:29:17, 0] rpc_client/cli_pipe.c:rpc_pipe_bind(1484) rpc_pipe_bind: Failed to unmarshall RPC_HDR_BA. [2003/06/12 09:29:17, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth(133) could not open handle to NETLOGON pipe [2003/06/12 09:29:17, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth(167) Plain-text authentication for user tschmidt+xxx returned NT_STATUS_NO_LOGON_SERVERS (PAM: 4) [2003/06/12 09:29:17, 10] nsswitch/winbindd.c:client_write(469) client_write: wrote 1300 bytes. [2003/06/12 09:29:17, 10] nsswitch/winbindd.c:winbind_client_read(422) client_read: read 1312 bytes. Need 0 more for a full request. [2003/06/12 09:29:17, 10] nsswitch/winbindd.c:process_request(272) process_request: request fn INFO [2003/06/12 09:29:17, 3] nsswitch/winbindd_misc.c:winbindd_info(196) [10953]: request misc info [2003/06/12 09:29:17, 10] nsswitch/winbindd.c:client_write(469) client_write: wrote 1300 bytes. [2003/06/12 09:29:17, 10] nsswitch/winbindd.c:winbind_client_read(422) client_read: read 1312 bytes. Need 0 more for a full request. [2003/06/12 09:29:17, 10] nsswitch/winbindd.c:process_request(272) process_request: request fn AUTH_CRAP [2003/06/12 09:29:17, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(237) [10953]: pam auth crap domain: TSCHMIDT user: xxx [2003/06/12 09:29:17, 10] nsswitch/winbindd_cm.c:cm_get_dc_name(167) returning positive get_dc_name_cache entry for TNCTEST [2003/06/12 09:29:17, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(238) IPC$ connections done by user TSCHMIDT\xxx [2003/06/12 09:29:17, 5] nsswitch/winbindd_cm.c:cm_open_connection(364) connecting to DCTEST from MAILDEV with username [TSCHMIDT]\[xxx] [2003/06/12 09:29:17, 0] rpc_parse/parse_prs.c:prs_mem_get(528) prs_mem_get: reading data of size 2 would overrun buffer. [2003/06/12 09:29:17, 0] rpc_client/cli_pipe.c:rpc_pipe_bind(1484) rpc_pipe_bind: Failed to unmarshall RPC_HDR_BA. [2003/06/12 09:29:17, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(292) could not open handle to NETLOGON pipe (error: NT_STATUS_UNSUCCESSFUL) [2003/06/12 09:29:17, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(342) NTLM CRAP authentication for user [TSCHMIDT]\[xxx] returned
Re: [Samba] Authentication
Yes, you still need winbindd. Better yet, you need to configure nsswitch and pam. On Thursday 12 June 2003 07:24 am, Chip Bell wrote: I'm not sure if I'm clear. I have a win2k native domain. I want to add a samba file server so users can access it through network neighborhood. I set up the Kerberos stuff, I can do that from the linux box fine. Do I STILL need to do the winbind stuff in order for users to not have to authenticate to the samba box? Thanks for your help. Newbie here... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] LDAP problem
Hi all, I have compiled samba3.0.0beta1 with the options: ./configure --enable-static=yes --with-smbmount --with-ldapsam I'm using passdb backend = ldapsam:ldap://localhost; and when I try to add a user using smbpasswd I got the message: Error loading module '/usr/local/samba/lib/pdb/ldapsam.so': /usr/local/samba/lib/pdb/ldapsam.so: cannot open shared object file: No such file or directory No builtin nor plugin backend for ldapsam found Loading ldapsam:ldap://localhost failed What else do I have to do? Please, sombebody help me. Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] How to authenticate a user as printer admin
Hi, I have defined a few printer shares on Samba. I allow all guests to use my printers. My security is 'share'. This means everybody is authenticated as guest when trying to use the printer. Is there a way to send a different username and password to Samba from windows, so that user is authenticated as printer admin, like in case of file share, when mapping the share, we can choose to use a different username and password for connection. I am using RedHat 7.2, Samba 2.2.8a. Thanks, Rohit. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] root rq'd to join domain
I tried this and it did not work. I verified that the /etc/passwd and /products/samba/private/smbpasswd files contained the right user accounts (the latter having a W). I am in the domain admin group= portion of the smb.conf. However, it tells me on the windows end that my password is bad -- it is not, as I set it right before the second time I tried to make absolutely certain. The syslog errors I received were along the lines of: Unable to unmarshall SAMR_Q_SET_USERINFO ...seeming to relate to the permissions on the smbpasswd file (it also claimed it could not read the passdb database). I have seen John say that it was not possible to join the domain without root access, but then others have said that it is possible. Is it or is it not possible to give users merely domain admin group= status, in Samba 2.2.8a, and still allow users to join the domain? The admin users= setting might also help, but again, I open myself up to having users browse shares as root in this case (unless I use A.J. Dawson's solution, which I have not yet had the opportunity to try). Can a developer please set me straight here? _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Tue, 20 May 2003, Thierry Terrier wrote: Hi, I'm using this script to create a machine account. But you *have to* known the machine names and create them before as root by #addsmbpdcmachine MACHINE_NAME. Then no admin. rights are required to join the domain (do not use create a machine account.on windoze). Note: If a machine quit the domain you have to recreate it (just overwrite) before joining domain. I hope this help Best regards Here is my script: #!/bin/bash # Add a new machine in Primary Domain Controller Samba # T.TERRIER 15 feb 2002 # Note: Replace staffgroup by your group domain name useradd -d /dev/null -g staffgroup -c $1.staffgroup -s /bin/false -M $1$ smbpasswd -a -m $1$ #!end of addsmbpdcmachine Ryan Novosielski a écrit: I believe it was expected that Samba would allow domain joins by people in the admin group= parameter -- I seem to remember reading that somewhere... I also seem to remember (and have discovered) that, no, it is in fact root, or UID 0 only, who can accomplish this task. My question is, what are the ways around this? There are people in my organization who will be joining machines to the domain (so I don't have to travel over there to do something so trivial), but they are not part of my department and can't officially be trusted with root privileges, beyond domain joins. I know that the creation of additional UID 0 accounts is possible, but most UNIX admins frown upon that sort of thing. However, I don't believe it would be as big of a deal if there were some other way to restrict this user so that it was only good for domain joins, not root access on shares, etc. Another idea -- don't know how feasible this is -- can the add user script= and delete user script= commands simply be changed to sudo useradd or sudo userdel instead of just useradd or userdel, or does some other part of the process other than these two commands require root access. There may be something else I'm overlooking... maybe manual machine account creation? Does this not require root access (I know the creation would, but then does the subsequent domain join only require domain admin group access)? This is another one of those things that I bet someone has run into before me, and I'd appreciate hearing about any experience anyone has gained on the subject. _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] convertSambaAccount Problem
Hello,
I try to convert a LDIF contain some users to a LDIF with samba3 shéma.
But, the convertion on my computers don't work !
Attached files : a ldif with one user (users.ldif) and a LDIF file after
convertion (users3.ldif)
Can anyone help me ?
RedHat 8
Samba 3.1 beta1
dn: ou=users, dc=toto,dc=be
ou:: dXNlcnMN
description:: dXRpbGlzYXRldXJzIGNvcm1hbg0=
description:: U3lzdGVtIFVzZXIN
objectclass:: dG9wDQ==
objectclass:: b3JnYW5pemF0aW9uYWxVbml0DQ==
objectclass:: aW5ldE9yZ1BlcnNvbg0=
objectclass:: cG9zaXhBY2NvdW50DQ==
objectclass:: c2FtYmFBY2NvdW50DQ==
dn:: dWlkPXNwdSwgb3U9dXNlcnMsIGRjPXRvdG8sZGM9YmUN
logontime:: MA0=
displayname:: U3lzdGVtIFVzZXIN
lmpassword:: MzBDMDQyOTRCNkM3RDk1MjFBQTgxODM4MUU0RTI4MUIN
primarygroupid:: MTIwMQ0=
smbhome:: XFxBRE1JTjAxXGhvbWVzDQ==
acctflags:: W1VYXQ0=
scriptpath:: YWRtLmJhdA0=
userpassword: {SSHA}oqF7dWp5XJPUA2ki5zauyCJ2O/UDmcyC
mail:: c3RlcGhhbmUucHVybmVsbGVAdGlzY2FsaS5iZQ0=
uid:: c3B1DQ==
uidnumber:: MTAwMQ0=
cn:: c3B1DQ==
loginshell:: L2Jpbi9iYXNoDQ==
homedrive:: SDoN
logofftime:: MjE0NzQ4MzY0Nw0=
gidnumber:: MTAwDQ==
kickofftime:: MjE0NzQ4MzY0Nw0=
pwdlastset:: MA0=
rid:: MzAwMg0=
gecos:: U3lzdGVtIFVzZXIN
homedirectory:: L3JzcnYvZGF0YTEvaG9tZS9zcHUN
pwdcanchange:: MjE0NzQ4MzY0Nw0=
profilepath:: XFxBRE1JTjAxXHByb2ZpbGVzXHNwdQ0=
sn:: c3B1DQ==
pwdmustchange:: MjE0NzQ4MzY0Nw0=
ntpassword:: QzEwQ0Q1NDBGMjc2MUFGQzExRkFERjdEQUVERUQ0MjEN
dn: ou=users, dc=toto,dc=be
ou: users
description: utilisateurs corman
objectClass: top
objectClass: organizationalUnit
dn: uid=spu, ou=users, dc=toto,dc=be
logonTime: 0
displayName: System User
lmPassword: 30C04294B6C7D9521AA818381E4E281B
primaryGroupID: 1201
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: sambaAccount
smbHome: \\ADMIN01\homes
acctFlags: [UX]
scriptPath: adm.bat
userPassword:: e1NTSEF9b3FGN2RXcDVYSlBVQTJraTV6YXV5Q0oyTy9VRG1jeUM=
mail: [EMAIL PROTECTED]
uid: spu
uidNumber: 1001
cn: spu
loginShell: /bin/bash
homeDrive: H:
logoffTime: 2147483647
gidNumber: 100
kickoffTime: 2147483647
pwdLastSet: 0
rid: 3002
gecos: System User
description: System User
homeDirectory: /rsrv/data1/home/spu
pwdCanChange: 2147483647
profilePath: \\ADMIN01\profiles\spu
sn: spu
pwdMustChange: 2147483647
ntPassword: C10CD540F2761AFC11FADF7DAEDED421
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Usage of 'idmap' and group maps
Greetings all .. I'm trying to understand the usage of things like 'idmap' and group maps in Samba. If there's someone out there patient enough to explain it .. it'll be great. Is it possible to use 'idmap' alone without winbind/pam/nsswitch? When would someone do that? What use are gourp maps for? Is it only used if Samba is the domain controller? If yes, how can it be usefull if shares can't be specified by the NT group membership not unix's? If Samba is't acting as a domain controller can group maps still be usefull? how? Last, and probably a silly one, why is winbind a daeomon? Isn't a PAM library engough to do the job? I mean, if no authentication requests are being served, what does winbind set there and do all the time? Many thanks .. __ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] restarting
Is there a way to have samba re-read its configuration files without restarting it and bumping everyone? As it is now, if somebody is transfering a file and I issue: #service smb restart it drops the file transfer. How do I get around that? TIA Rick -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] convertSambaAccount Problem
-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] wibind and windows 2003
I am wondering if winbind works with win 2003. I can get winbind working just fine with 2k servers, but when I run wbinfo -t, all I get is can not check secret. it joined the domain fine, but can not get it any info using wbinfo. __ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] question about refreshes
Hello, I just installed 2.2.8a on a Solaris 2.6 machine. I used the Sun package from www.sunfreeware.com http://www.sunfreeware.com/ and installed all the needed libraries and such. I have got Samba running, but when I copy something to the share my window does not get refreshed with the new data. I have to manually do a refresh and then it shows up. Is there some configuration parameter that I should tune? Thanks Jeremy -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] why printer strike!
hi, I'm trying to print with Samba in Network. I installed Printer driver at Client(win2000) and at Linux Server 8.2 and i can print with both of them. Now i try to print via samba from the client. There is no Error message on my Client computer. It seems all run ok at Client side but samba won't print! There is a bit of my smb.conf: [printers] comment = All Printers path = /var/spool/samba browseable = yes public = use this Printer guest ok = yes writable = no printable = yes . and a list of all my Samba directories /etc/samba /opt/kde3/share/doc/HTML/de/kinfocenter/samba /opt/kde3/share/doc/HTML/en/kinfocenter/samba /var/lib/samba /var/log/samba /var/run/samba /var/spool/samba /usr/lib/samba /usr/local/samba /usr/share/doc/packages/samba /usr/share/samba I 'm grateful for your help thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] tdbsam backend
I just compiled some RPMS for Mandrake 9.0. I would like to try the TDB bAckend before I do the LDAP stuff. (It took me awhile to get that set up in 2.2) Everything installed ok but it seems that the pbedit3 tool can't find a library. The error message I get is: [EMAIL PROTECTED] root]# pdbedit3 idmap uid range missing or invalid idmap will be unable to map foreign SIDs idmap gid range missing or invalid idmap will be unable to map foreign SIDs Error loading module '/usr/lib/samba3/pdb/tdbsam_nua.so': /usr/lib/samba3/pdb/tdbsam_nua.so: cannot open shared object file: No such file or directory No builtin nor plugin backend for tdbsam_nua found Loading tdbsam_nua failed! Error loading module '/usr/lib/samba3/pdb/tdbsam_nua.so': /usr/lib/samba3/pdb/tdbsam_nua.so: cannot open shared object file: No such file or directory No builtin nor plugin backend for tdbsam_nua found Loading tdbsam_nua failed! Can't initialize passdb backend. Sure enough, that library is not there... Should I have compiled with different options? I'm about to hit the docs but I thought I would ask here first. Jim -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] tdbsam backend
On Thu, 12 Jun 2003, Jim Wharton wrote: I just compiled some RPMS for Mandrake 9.0. I would like to try the TDB bAckend before I do the LDAP stuff. (It took me awhile to get that set up in 2.2) Everything installed ok but it seems that the pbedit3 tool can't find a library. The error message I get is: [EMAIL PROTECTED] root]# pdbedit3 idmap uid range missing or invalid In smb.conf [globals] add: idmap uid = 1-15000 idmap gid = 1-15000 passdb backend = tdbsam, guest That should get the gasses roaring. idmap will be unable to map foreign SIDs idmap gid range missing or invalid idmap will be unable to map foreign SIDs Fixed above. Error loading module '/usr/lib/samba3/pdb/tdbsam_nua.so': /usr/lib/samba3/pdb/tdbsam_nua.so: cannot open shared object file: No such file or directory No builtin nor plugin backend for tdbsam_nua found Loading tdbsam_nua failed! Error loading module '/usr/lib/samba3/pdb/tdbsam_nua.so': /usr/lib/samba3/pdb/tdbsam_nua.so: cannot open shared object file: No such file or directory No builtin nor plugin backend for tdbsam_nua found Loading tdbsam_nua failed! Can't initialize passdb backend. Yep! the NUA stuff got dropped, unless you run ldapsam. In the case of ldapsam the meaning of NUA is a little warped! :) Better ask an IDMAP guru what is warped! :) Sure enough, that library is not there... Should I have compiled with different options? I'm about to hit the docs but I thought I would ask here first. Just try the above. IF it works let me know where to send the invoice - price today is a smile. If not paid on time, the price goes up to two smiles. :-)) - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] restarting
Yes. kill -1 pid of original samba process. Maybe service smb reload might do what you want. Joel nOn Thu, Jun 12, 2003 at 01:02:05PM -0700, D. Rick Anderson wrote: Is there a way to have samba re-read its configuration files without restarting it and bumping everyone? As it is now, if somebody is transfering a file and I issue: #service smb restart it drops the file transfer. How do I get around that? TIA Rick -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] need help to check samba conf
any body knwo what is this error for?? cpcpfrp:root$ ./smbclient -L cpcpfrp ld.so.1: ./smbclient: fatal: libreadline.so.4: open failed: No such file or directory Killed cpcpfrp:root$ ./smbclient -L cpcpfrp -N ld.so.1: ./smbclient: fatal: libreadline.so.4: open failed: No such file or directory Killed Thanks Vinay -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SMB hogs cpu - printing freezes server
We have 2.2.7a running on redhat 9.0 with 256 MB ram. Dual cpus - but only PII 300's. Its not running as a PDC - the PDC is an nt box. The system is set up as our main print server with 60 odd print queues that service a wide variety of printers. Approx 200 odd windows pc's as clients. The print files themselves can be largish with multi-page docs with lots of graphics. What we are finding is that under certain circumstances (which appears to be a number of big print jobs hitting the server and or users browsing their printers) the smbd processes clog up the cpu - we were running top and vmstat to try to get a handle on what happens when it freezes. These processes start to take an increasing percentage of both cpu and memory with the root owned smbd process topping out at a reported 99% the last time the system froze. These processes hang about in top - they don't drop out as is the case when the system is running correctly We are runing individual logs for each machine and get various error messages in them with the main appearing to be /var/cache/samba/printing.tdb): rec_read bad magic . The main log consistently reports the following error message: smbd/oplock_linux.c:linux_init_kernel_oplocks(287) Failed to setup RT_SIGNAL_LEASE handler We are using lprng as we thought it was CUPS creating the problem and since using lprng we are also getting a symptom that on the windows 2000 client, when looking at the print queue, the last job printed remains in the window until aother job pushes it out. The questions I have are whether the system is not sufficient to handle this task. Do we need to split the number of printers over a couple of machines, is there a memory leak. I sthere a way that we can throttle smbd so that it can cope with peaky printing demand. Final question - should I stick with samba mailing list or run this in samba-technical? of course thanks for any help in advance. - Craig Silva, IT Infrastructure Coordinator Moreland City Council, 90 Bell St. Coburg. Melbourne. Victoria. 3058. Australia. email: [EMAIL PROTECTED] http://www.moreland.vic.gov.au Tel: +61 3 9 240 2355, fax: + 61 3 9 240 1212 - For Fun: - http://www.sysadminday.com/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SMBFS, automounting and NFS
Hi all, I have a question which we think has probably been asked before, but I can't find any solutions. Bofore I get to the details, I'll give some background. I work at a university and we have a bundle of undergraduate and postgraduate students. Our computer system is currently divided roughly into a windows (XP) system and a linux (Redhat 8.0) system. The linux servers have samba installed on them so if students need to access their linux home area they can mount it up as a windows share. That works well. Or at least it did. Now more students are coming in with laptops, the postgraduate research is moving off in different directions and more and more people are having root access on their own machines. We use to NFS share the top level home directories to IP ranges. ie) /home/students could be mountable by any 192.168.100.0/255.255.255.0 machine. Not good, but a lot easier to maintain in an environment where any student can use any machine. Like I said, this wasn't a problem while we could guarentee the security of a machine, but now students are bringing machines in and other people are getting root access, so there is nothing stopping someone from logging in as root on their machine, typing su - fred and having access to all of the files in fred's home directory. So we're looking at ways to stop this from happening. NFSv4 with kerboros authentication sounds good, but its still in development. Some people have said they have done it with iptables, NAT, redirection and other things, but details are sketchy at best and it appears to be really complicated. I've been looking at smbfs to try and solve it. I've got a server which is set up to export out the home areas of users. That works well, I've got it so the user provides a username and password and if valid, it mounts. However, I would like this to happen automatically. The user provides a username and password, that gets validated, their home directory is mounted and they log in, so all their . files are parsed correctly. Does anyone know if this can be done with samba or have any pointers for things to try? Alternatively, feel free to suggest other things for us to try. Cheers, Ryan. -- Ryan McConigley - Systems Administrator _.-, Computer Science University of Western Australia.--' '-._ Tel: (+61 8) 9380 7082 - Fax: (+61 8) 9380 1089 _/`- _ '. Email: [EMAIL PROTECTED] - http://www.cs.uwa.edu.au/~ryan ''._`.. \ ` \; You're just jealous because the voices are talking to me;_\ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Workgroup/Domain Browsing
I am currently running samba on a Redhat 8.0 server, and it is working great. Keep up the good work guys! My question involves a VPN connection to the server on a different network segment. I have the following setup: Internal Network - 192.168.13.0/24 | | Red Hat Samba Server - 192.168.13.3 - aip-ky | VPN | Windows XP Client - 192.168.10.2 On the XP client, I am able to manually specify shares on the samba server using the IP addres: \\192.168.13.3\data If I add an entry to my hosts file, I can do the following: \\aip-ky\data (lmhosts.sam would not work for some reason though.) However, browsing does not work. The workgroup aip-ky does not show up, and neither does the server aip-ky. I guess that I have two problems/questions: 1) How can I have the machine names resolve automatically (ala wins) across the different network segments? 2) How can I enable browsing of the remote network resources from the Windows client so that I don't have to manually specify the resource address? Any help would be appreciated! Louis [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba configuration question.
I have installed RH9 and Samba on two PCs. One is working fine but other (Bhas some problem with Samba. Could somebody help ? I am new to Linux and (Bdon't know what is going on. (B (BHere is the symptom.I have three PCs on a same workgroup.A (win2k), (BB(RH9) and C(RH9). Samba service is installed on both B and C. I shared (B"home/share" directory on both B and C. (B (BFrom A(win2k), I can see all A(self), B(RH9) and C(RH9) in a same workgroup (Bwhen I select "Computer Near by Me". I can open B(RH9) and browse the (Bshared directory, but when I try to open C(RH9), I always get an error "\\C (Bis not accessible. The network path was not found." (B (BFrom B(RH9), I can see all A(win2k), B(self) and C(RH9) from "Network (BServers". I can browse A(win2k), but not C(RH9).When I execute a (Bcommand "smbclient -U% -L localhost", I see all three machines, A, B, C (Bin the Server list and usually C as Master. (B (BFrom C(RH9), I see all A(win2k), B(RH9) and C(self) and browse all machines. (BHowever, (Bwhen I execute a command "smbclient -U% -L localhost", I see only "C" in (Bthe server list and C as Master. I don't see A, B in the Server list. (B (BI compared the /etc/samba/smb.conf files on B and C, but I didn't see any (Bdifference. (BAs far as I know, I configured both machines in the same way. (Bsmbd and nmbd running on both B and C. (BLogin name and password are the same on all three machines. (BI can ping all machines from any machine without problem. (B (BOnly difference I noticed is that Samba on B is 2.2.7a and Samba on C is (B2.2.7a-security-rollup-fix. (BOn C, the smbd.log file at /var/log/sama has many errors(? ) (B"Failed to setup RT_SIGNAL_LEASE handler" (BI don't know what this means. (BBut I don't see this error in B's smbd.log file. (B (BCan somebody tell what is going on ?Any idea how to fix the problem with (BC ? (B (BTIA (B-- (BTo unsubscribe from this list go to the following URL and read the (Binstructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] idmap mapping questions
Do you have nsswitch and pam working correctly with winbind? You need to configure nsswitch and pam for that. On Thursday 12 June 2003 04:04 am, Raphaël Berghmans wrote: Hi, I've setup a samba 3 server. The mapping between SID and uid is done by idmap. When a user create a file on the server, the owner of this file cannot be resolved by Linux (the uid cannot be resolved to the human name). Then in smb.conf list (for example : printer admin) I've to setup the uid of a user and not his real name otherwise the user is considered as unknown ! How to deal with the access permission to the files and directories if the mapping (SID - uid) change or if the idmap.tdb is corrupted ? Thank you for your help. Regards, -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] idmap mapping questions
Hi, I've setup a samba 3 server. The mapping between SID and uid is done by idmap. When a user create a file on the server, the owner of this file cannot be resolved by Linux (the uid cannot be resolved to the human name). Then in smb.conf list (for example : printer admin) I've to setup the uid of a user and not his real name otherwise the user is considered as unknown ! How to deal with the access permission to the files and directories if the mapping (SID - uid) change or if the idmap.tdb is corrupted ? Thank you for your help. Regards, -- Raphaël Berghmans [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: CVS update: samba/source/sam
Good catch, cutpaste error. (Btw, basic tests does not always catch all errors) On Wed, 2003-06-11 at 22:06, [EMAIL PROTECTED] wrote: Date: Wed Jun 11 20:06:11 2003 Author: vlendec Update of /data/cvs/samba/source/sam In directory dp.samba.org:/tmp/cvs-serv10290 Modified Files: Tag: SAMBA_3_0 idmap_tdb.c Log Message: Sorry idra for messing around with your stuff, but this was obviously not tested. Incrementing HWW_USER while allocating a GROUPID looked somewhat wrong. Volker Revisions: idmap_tdb.c 1.12.2.6 = 1.12.2.7 http://www.samba.org/cgi-bin/cvsweb/samba/source/sam/idmap_tdb.c.diff?r1=1.12.2.6r2=1.12.2.7 -- Simo Sorce- [EMAIL PROTECTED] Samba Team- http://www.samba.org Italian Site - http://samba.xsec.it
CVS update: samba/source/auth
Date: Thu Jun 12 07:21:26 2003 Author: vlendec Update of /data/cvs/samba/source/auth In directory dp.samba.org:/tmp/cvs-serv8305 Modified Files: Tag: SAMBA_3_0 auth_util.c Log Message: Andrew is right, this is probably the wrong approach. Take away the automatic mapping of users and groups again. Volker Revisions: auth_util.c 1.39.2.16 = 1.39.2.17 http://www.samba.org/cgi-bin/cvsweb/samba/source/auth/auth_util.c.diff?r1=1.39.2.16r2=1.39.2.17
CVS update: samba/source/tdb
Date: Thu Jun 12 07:32:44 2003 Author: vlendec Update of /data/cvs/samba/source/tdb In directory dp.samba.org:/tmp/cvs-serv9122 Modified Files: Tag: SAMBA_3_0 tdbbackup.c Log Message: Fix typo found by Vance Revisions: tdbbackup.c 1.6.2.4 = 1.6.2.5 http://www.samba.org/cgi-bin/cvsweb/samba/source/tdb/tdbbackup.c.diff?r1=1.6.2.4r2=1.6.2.5
CVS update: samba/source/tdb
Date: Thu Jun 12 07:54:13 2003 Author: vlendec Update of /data/cvs/samba/source/tdb In directory dp.samba.org:/tmp/cvs-serv11159 Modified Files: Tag: SAMBA_3_0 tdbbackup.c Log Message: Get rid of a const warning. Volker Revisions: tdbbackup.c 1.6.2.5 = 1.6.2.6 http://www.samba.org/cgi-bin/cvsweb/samba/source/tdb/tdbbackup.c.diff?r1=1.6.2.5r2=1.6.2.6
CVS update: samba/source/auth
Date: Thu Jun 12 08:22:55 2003 Author: vlendec Update of /data/cvs/samba/source/auth In directory dp.samba.org:/tmp/cvs-serv14023 Modified Files: Tag: SAMBA_3_0 auth_util.c Log Message: Fix some misleading debug messages. Revisions: auth_util.c 1.39.2.17 = 1.39.2.18 http://www.samba.org/cgi-bin/cvsweb/samba/source/auth/auth_util.c.diff?r1=1.39.2.17r2=1.39.2.18
CVS update: samba
Date: Thu Jun 12 13:10:47 2003 Author: jerry Update of /data/cvs/samba In directory dp.samba.org:/tmp/cvs-serv9974 Modified Files: Tag: SAMBA_3_0 README Log Message: fix broken link Revisions: README 1.21.2.2 = 1.21.2.3 http://www.samba.org/cgi-bin/cvsweb/samba/README.diff?r1=1.21.2.2r2=1.21.2.3
CVS update: samba/examples/LDAP
Date: Thu Jun 12 13:41:13 2003 Author: jerry Update of /data/cvs/samba/examples/LDAP In directory dp.samba.org:/tmp/cvs-serv12469 Modified Files: Tag: SAMBA_3_0 convertSambaAccount Log Message: check that an attribute is defined and not just non-zero Revisions: convertSambaAccount 1.1.2.2 = 1.1.2.3 http://www.samba.org/cgi-bin/cvsweb/samba/examples/LDAP/convertSambaAccount.diff?r1=1.1.2.2r2=1.1.2.3
CVS update: samba/source/auth
Date: Thu Jun 12 14:24:15 2003 Author: vlendec Update of /data/cvs/samba/source/auth In directory dp.samba.org:/tmp/cvs-serv16862 Modified Files: Tag: SAMBA_3_0 auth_util.c Log Message: Andrew's change to make 'security = domain' work again. Leave the user and group that has been authenticated unmapped. We need to make sure that every caller of idmap handles failure gracefully. Volker Revisions: auth_util.c 1.39.2.18 = 1.39.2.19 http://www.samba.org/cgi-bin/cvsweb/samba/source/auth/auth_util.c.diff?r1=1.39.2.18r2=1.39.2.19
CVS update: samba/source/utils
Date: Thu Jun 12 15:37:06 2003 Author: vlendec Update of /data/cvs/samba/source/utils In directory dp.samba.org:/tmp/cvs-serv23792 Modified Files: Tag: SAMBA_3_0 net_rpc.c Log Message: Working on bug#3. We want all of the aliases, so start with 0. Volker Revisions: net_rpc.c 1.14.2.25 = 1.14.2.26 http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/net_rpc.c.diff?r1=1.14.2.25r2=1.14.2.26
CVS update: samba/source/utils
Date: Thu Jun 12 16:21:22 2003 Author: vlendec Update of /data/cvs/samba/source/utils In directory dp.samba.org:/tmp/cvs-serv27836/utils Modified Files: Tag: SAMBA_3_0 net_rpc.c Log Message: Fix for bug#3. Show comments when doing 'net group -l'. Volker Revisions: net_rpc.c 1.14.2.26 = 1.14.2.27 http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/net_rpc.c.diff?r1=1.14.2.26r2=1.14.2.27
CVS update: samba/source/libsmb
Date: Thu Jun 12 18:15:35 2003 Author: jra Update of /data/cvs/samba/source/libsmb In directory dp.samba.org:/tmp/cvs-serv5071/libsmb Modified Files: Tag: APPLIANCE_HEAD namecache.c namequery.c namequery_dc.c Log Message: Large raft of fixes to make winbindd scale a lot better in large environments. No CR#. Jeremy. Revisions: namecache.c 1.1.2.10 = 1.1.2.11 http://www.samba.org/cgi-bin/cvsweb/samba/source/libsmb/namecache.c.diff?r1=1.1.2.10r2=1.1.2.11 namequery.c 1.48.2.41 = 1.48.2.42 http://www.samba.org/cgi-bin/cvsweb/samba/source/libsmb/namequery.c.diff?r1=1.48.2.41r2=1.48.2.42 namequery_dc.c 1.1.2.4 = 1.1.2.5 http://www.samba.org/cgi-bin/cvsweb/samba/source/libsmb/namequery_dc.c.diff?r1=1.1.2.4r2=1.1.2.5
CVS update: samba/source/nsswitch
Date: Thu Jun 12 18:15:35 2003 Author: jra Update of /data/cvs/samba/source/nsswitch In directory dp.samba.org:/tmp/cvs-serv5071/nsswitch Modified Files: Tag: APPLIANCE_HEAD winbindd.c winbindd_cache.c winbindd_cm.c winbindd_rpc.c winbindd_util.c Log Message: Large raft of fixes to make winbindd scale a lot better in large environments. No CR#. Jeremy. Revisions: winbindd.c 1.2.2.25 = 1.2.2.26 http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd.c.diff?r1=1.2.2.25r2=1.2.2.26 winbindd_cache.c1.5.2.21 = 1.5.2.22 http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_cache.c.diff?r1=1.5.2.21r2=1.5.2.22 winbindd_cm.c 1.33.2.24 = 1.33.2.25 http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_cm.c.diff?r1=1.33.2.24r2=1.33.2.25 winbindd_rpc.c 1.28.2.24 = 1.28.2.25 http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_rpc.c.diff?r1=1.28.2.24r2=1.28.2.25 winbindd_util.c 1.7.2.15 = 1.7.2.16 http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_util.c.diff?r1=1.7.2.15r2=1.7.2.16
CVS update: samba/source/python
Date: Fri Jun 13 00:07:59 2003 Author: tpot Update of /data/cvs/samba/source/python In directory dp.samba.org:/tmp/cvs-serv2494 Removed Files: Tag: SAMBA_3_0 mkpatch Log Message: Delete outdated file. Revisions: mkpatch 1.1.2.1 = NONE http://www.samba.org/cgi-bin/cvsweb/samba/source/python/mkpatch?rev=1.1.2.1
CVS update: samba/examples/LDAP
Date: Fri Jun 13 02:53:03 2003 Author: jerry Update of /data/cvs/samba/examples/LDAP In directory dp.samba.org:/tmp/cvs-serv15286 Modified Files: Tag: SAMBA_3_0 samba.schema Log Message: fix typo in description Revisions: samba.schema1.7.2.11 = 1.7.2.12 http://www.samba.org/cgi-bin/cvsweb/samba/examples/LDAP/samba.schema.diff?r1=1.7.2.11r2=1.7.2.12
CVS update: samba/source/libads
Date: Fri Jun 13 04:29:20 2003 Author: tpot Update of /data/cvs/samba/source/libads In directory dp.samba.org:/tmp/cvs-serv22837 Modified Files: Tag: SAMBA_3_0 ldap_printer.c Log Message: Fix shadow variable warning. Revisions: ldap_printer.c 1.7.2.9 = 1.7.2.10 http://www.samba.org/cgi-bin/cvsweb/samba/source/libads/ldap_printer.c.diff?r1=1.7.2.9r2=1.7.2.10
CVS update: samba/source/passdb
Date: Fri Jun 13 04:35:52 2003 Author: tpot Update of /data/cvs/samba/source/passdb In directory dp.samba.org:/tmp/cvs-serv23589/passdb Modified Files: Tag: SAMBA_3_0 secrets.c Log Message: Rename some uuid functions so as not to conflict with system versions. Fixes bug #154. Revisions: secrets.c 1.32.2.14 = 1.32.2.15 http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/secrets.c.diff?r1=1.32.2.14r2=1.32.2.15
CVS update: samba/source/rpc_server
Date: Fri Jun 13 04:35:52 2003 Author: tpot Update of /data/cvs/samba/source/rpc_server In directory dp.samba.org:/tmp/cvs-serv23589/rpc_server Modified Files: Tag: SAMBA_3_0 srv_spoolss_nt.c Log Message: Rename some uuid functions so as not to conflict with system versions. Fixes bug #154. Revisions: srv_spoolss_nt.c1.277.2.62 = 1.277.2.63 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_spoolss_nt.c.diff?r1=1.277.2.62r2=1.277.2.63
CVS update: samba/source/lib
Date: Fri Jun 13 04:35:53 2003 Author: tpot Update of /data/cvs/samba/source/lib In directory dp.samba.org:/tmp/cvs-serv23589/lib Modified Files: Tag: SAMBA_3_0 util_uuid.c Log Message: Rename some uuid functions so as not to conflict with system versions. Fixes bug #154. Revisions: util_uuid.c 1.2.2.3 = 1.2.2.4 http://www.samba.org/cgi-bin/cvsweb/samba/source/lib/util_uuid.c.diff?r1=1.2.2.3r2=1.2.2.4
CVS update: samba/source/libads
Date: Fri Jun 13 04:35:53 2003 Author: tpot Update of /data/cvs/samba/source/libads In directory dp.samba.org:/tmp/cvs-serv23589/libads Modified Files: Tag: SAMBA_3_0 ldap.c Log Message: Rename some uuid functions so as not to conflict with system versions. Fixes bug #154. Revisions: ldap.c 1.55.2.25 = 1.55.2.26 http://www.samba.org/cgi-bin/cvsweb/samba/source/libads/ldap.c.diff?r1=1.55.2.25r2=1.55.2.26
