[Samba] win2k wont join domain; tried everything
I have a fresh installation of Windows 2000. I added the machine account to the samba server but no matter what I do, I can't get it to join the domain. I believe the problem lies with my samba server. The new net commandis very confusing to me and I believe I messed something up.I am now unable to login with the root user no matter what; which is required for loggin Win2K into a domain. I have done all of the obvious things such as smbpasswd -a root, etc. What i really want to know is where all the setting are stored for the net command and just clear it all out and start over. And maybe the list of steps required to get this working (domain logon) as i can not find any recent info thats very comprehendable. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] pam_winbind for mail server
I'm using pam_winbind to authenticate users on my mailserver. The problem I'm having is that it authenticates ANY user who has an account on the NT server. I don't want every single user to have a mail account, and it would appear very simple to just put all mail users into a new group on the NT Server if they require a mail account (say Mail Users for example). This would work if Winbind filtered based on NT group membership. Does such a function exist anywhere in winbind? Can it be set though that 'getent passwd' only returns the user info of all local users on the Linux machine and those who are in a particular group on the NT server? Regards Richard This message was sent using InSPire Net Webmail. http://www.inspire.net.nz -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Who know?
Who know how to retrive full user name from W2k domain controller? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Bug#219197: PANIC: internal error
On Fri, Jan 16, 2004 at 04:54:12PM -0800, Mike Fedyk wrote: On Wed, Nov 05, 2003 at 06:15:47PM -0600, Steve Langasek wrote: Ok, then, you *must* build debugging-enabled packages by running... :) The binaries are compiled with debugging turned on -- the debugging symbols are stripped out for packaging. Package: samba Version: 3.0.1-2-debug1 OK, I have built debugging patches from samba 3.0.1-2, in a debian sarge environment. The library dependancies are below. s/patches/packages/ ii samba 3.0.1-2-debug1a LanManager-like file and printer server for Unix Is samba dropping core files somewhere so that I can get better traces or something? What else can I do to help find this bug? And here's some output from my logs: [1] [2004/01/17 12:59:08, 1] smbd/service.c:make_connection_snum(705) exec-danny-v (10.0.0.41) connect to service Production initially as user dvalencia (uid=1014, gid=500) (pid 27097) [2004/01/17 13:00:47, 1] smbd/service.c:close_cnum(887) exec-danny-v (10.0.0.41) closed connection to service Production [2004/01/17 13:04:33, 0] lib/fault.c:fault_report(36) === [2004/01/17 13:04:33, 0] lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 27097 (3.0.1-Debian) Please read the appendix Bugs of the Samba HOWTO collection [2004/01/17 13:04:33, 0] lib/fault.c:fault_report(39) === [2004/01/17 13:04:33, 0] lib/util.c:smb_panic(1400) PANIC: internal error [2004/01/17 13:04:33, 0] lib/util.c:smb_panic(1408) BACKTRACE: 3 stack frames: #0 /usr/sbin/smbd(smb_panic+0x101) [0x81bdcb1] #1 /usr/sbin/smbd [0x81ac097] #2 [0xe420] [2] [2004/01/16 17:30:09, 0] lib/fault.c:fault_report(36) === [2004/01/16 17:30:09, 0] lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 21507 (3.0.1-Debian) Please read the appendix Bugs of the Samba HOWTO collection [2004/01/16 17:30:09, 0] lib/fault.c:fault_report(39) === [2004/01/16 17:30:09, 0] lib/util.c:smb_panic(1400) PANIC: internal error [2004/01/16 17:30:09, 0] lib/util.c:smb_panic(1408) BACKTRACE: 23 stack frames: #0 /usr/sbin/smbd(smb_panic+0x101) [0x81bdcb1] #1 /usr/sbin/smbd [0x81ac097] #2 /lib/libc.so.6 [0x401da498] #3 /lib/libc.so.6 [0x40222b48] #4 /lib/libc.so.6(malloc+0x93) [0x40221d33] #5 /usr/sbin/smbd(Realloc+0x88) [0x81bce68] #6 /usr/sbin/smbd(convert_string_allocate+0x433) [0x81a9e63] #7 /usr/sbin/smbd(push_ucs2_allocate+0x48) [0x81aa708] #8 /usr/sbin/smbd(unix_strupper+0x24) [0x81a9fa4] #9 /usr/sbin/smbd(strupper_m+0x46) [0x81b6de6] #10 /usr/sbin/smbd [0x80cef8a] #11 /usr/sbin/smbd [0x80cfa1e] #12 /usr/sbin/smbd(mangle_map+0x82) [0x80cd8f2] #13 /usr/sbin/smbd [0x80abaed] #14 /usr/sbin/smbd [0x80ad481] #15 /usr/sbin/smbd(reply_trans2+0x6c6) [0x80b4386] #16 /usr/sbin/smbd [0x80c7dca] #17 /usr/sbin/smbd [0x80c8030] #18 /usr/sbin/smbd(process_smb+0x8c) [0x80c823c] #19 /usr/sbin/smbd(smbd_process+0x168) [0x80c8eb8] #20 /usr/sbin/smbd(main+0x4bc) [0x8228d4c] #21 /lib/libc.so.6(__libc_start_main+0xc6) [0x401c6da6] #22 /usr/sbin/smbd(chroot+0x35) [0x8077121] [2004/01/16 17:30:10, 0] lib/fault.c:fault_report(36) === [2004/01/16 17:30:10, 0] lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 25103 (3.0.1-Debian) Please read the appendix Bugs of the Samba HOWTO collection [2004/01/16 17:30:10, 0] lib/fault.c:fault_report(39) === [2004/01/16 17:30:10, 0] lib/util.c:smb_panic(1400) PANIC: internal error [2004/01/16 17:30:10, 0] lib/util.c:smb_panic(1408) BACKTRACE: 15 stack frames: #0 /usr/sbin/smbd(smb_panic+0x101) [0x81bdcb1] #1 /usr/sbin/smbd [0x81ac097] #2 /lib/libc.so.6 [0x401da498] #3 /lib/libc.so.6 [0x40222b48] #4 /lib/libc.so.6(malloc+0x93) [0x40221d33] #5 /usr/sbin/smbd(Realloc+0x88) [0x81bce68] #6 /usr/sbin/smbd [0x80ac4ea] #7 /usr/sbin/smbd(reply_trans2+0x684) [0x80b4344] #8 /usr/sbin/smbd [0x80c7dca] #9 /usr/sbin/smbd [0x80c8030] #10 /usr/sbin/smbd(process_smb+0x8c) [0x80c823c] #11 /usr/sbin/smbd(smbd_process+0x168) [0x80c8eb8] #12 /usr/sbin/smbd(main+0x4bc) [0x8228d4c] #13 /lib/libc.so.6(__libc_start_main+0xc6) [0x401c6da6] #14 /usr/sbin/smbd(chroot+0x35) [0x8077121] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Group Mapping in MySQL backend
Hi, are there any plans to add some support for storing not only user information, but also group mappings in the MySQL passdb backend? Or are there problems I'm not aware of why this cannot be done? And - by the way - is there any reason why pdb_mysql should not (yet) be used in larger installations (several hundert clients), or why several servers shouldn't share one common database? Are there any experiences regarding such installations, or are any problems already known? Thanks a lot, Bjoern -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbldap-tools 8.3 populate errors
Am Sonntag, 18. Januar 2004 10:55 schrieb Jérôme Tournier: My system is now runnung, but I think there are some bugs in the populate script, e.g. the SID of the Administrator account should end with -500 as I know, because it's predefinded. Any comment from the author ??? 500 is the well-known RID for the domain administrator, not for the administrator account, am i wrong ? AFAIK, if you operate as a PDC it have to be 500, because a NT PDC hasn't its own user-database, it uses the domain-database, so the administrator is the same as the Domain Adminstrator, maybe I'm wrong, but ... I've also changed the gidNumber and uidNumber of the guest account and Domain Guest group to the default values of my system (SuSE9) after this all worked correctly except some log-entries . Failed to open group mapping database and failed to decode PDU Do you always have this error messages ? With every scripts ? Thanks for your report ! -- Jérôme I've not tested this with other scripts (e.g. 0.8.2), because til I've tried 0.8.3 I didn't noticed that if I want to add a user, the given script at add user script isn't called with smbpasswd -a, if I added a user with net user add, the given script was called (I've written a dummy script with syslog output), and the I've tried 0.8.3 and it worked. but I will give 0.8.2 a try if you want odi -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] network browserlist error(S)..
G'day.. just haveing the straingest problem.. I'd upgraded to the 302rc1 version. i configed it to be an pdc controller, with wins to manage our local domain.. only when browsing the domain list. it gives error(s) once in a while.. An extended error has occured the system cannot find massage text for message number 0x in the message file for \\hostname this is when you try to acces a computer or share for a win2k box, it happens 10 out of 100 times.. on a linux box, log.smb reports: lib/util_sock.c:matchname(941) sys_gethostname(host.domain): lookup failure lib/util_sock.c:get_socket_name(1008) matchname failed os host.domain 192.168.x.x the pdc is the master browser with smb.conf os level = 66 preferred master = yes domain master = yes domain logons = yes local master = yes wins support = yes with 300 version i have no problems, from 301rc1 the error starts.. sugestions ?? solutions ..?? l8r Collen Blijenberg MLHJ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem with Samba
Hey all, I have got a problem with getting samba to work right for me. I am not a complete newbie, however files concerning security (like the pam files and nsswitch.conf) is not my strongest point What i done so far is edit the smb.conf to my likings and i added the linux server to my PDC. That part went fine, however i wanted to use the group names from the NT domain for secutiry within the smb.conf (Valid used @groupname). So i read in some documents i found on the internet that i had to use winbind. I followed all steps according to document : de.samba.org/samba/docs/man/winbindd.8.html I edited the /etc/nsswitch.conf file and the /etc/pam.d/samba file with the changes mentioned in the document mentioned above. When i start the winbindd (from /etc/rc.d/init.d/winbindd start) i see in the /etc/log/samba/log.winbindd the following : [2004/01/19 10:23:14, 0] param/loadparm.c:map_parameter(2065) Unknown parameter encountered: idmap uid [2004/01/19 10:23:14, 0] param/loadparm.c:lp_do_parameter(2740) Ignoring unknown parameter idmap uid [2004/01/19 10:23:14, 0] param/loadparm.c:map_parameter(2065) Unknown parameter encountered: idmap gid [2004/01/19 10:23:14, 0] param/loadparm.c:lp_do_parameter(2740) Ignoring unknown parameter idmap gid [2004/01/19 10:23:15, 0] nsswitch/winbindd_util.c:winbindd_param_init(326) winbind uid range missing or invalid When i try the wbinfo -u command i get : Error looking up domain users. My /etc/pam.d/samba looks like this atm : #%PAM-1.0 #auth required pam_nologin.so #auth required pam_stack.so service=system-auth auth required /lib/security/pam_securetty.so auth required /lib/security/pam_nologin.so auth sufficient /lib/security/pam_winbind.so auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok #account required pam_stack.so service=system-auth account required /lib/security/pam_winbind.so session required pam_stack.so service=system-auth password required pam_stack.so service=system-auth My /etc/nsswitch.conf looks like this atm : passwd: files winbind shadow: files group: files winbind hosts: files nisplus dns bootparams: nisplus [NOTFOUND=return] files ethers: files netmasks: files networks: files protocols: files nisplus rpc: files services: files nisplus netgroup: files nisplus publickey: nisplus automount: files nisplus aliases: files nisplus Anymore info i got has to do with the winbindd .. it doesnt seem to start oke, i can constandly start it and start it ..when i try to stop the service i get an error .. so there is something wrong in there .. i just cant fingure out what it is. The erros i mentioned above from the log.winbindd with the unknown parameter he probably gets from my smb.conf file. According to the document i mentioned above you had to add a few lines to the smb.conf : idmap uid = 1-2 idmap gid = 1-2 winbind seperator = + winbind enum users = yes winbind enum groups = yes Thats all the info i can think off right now to give you all .. i really would appriciate some help since im stuck atm. Thanx in advance for replying, If the smb.conf file is needed in this thread then pls let me know. With best regards, rizza -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] terrible host\5Cusername ldap issue
Hi all.
I'm setting up a samba 2.2.8 with ldap auth.
On the same machine i use pam_ldap to auth unix users.
my current smb.conf is
--- begin ---
[global]
netbios name = LDAP-TEST
workgroup = LDAP-NET
os level = 255
time server = NO
unix extensions = Yes
encrypt passwords = Yes
map to guest = Bad User
printing = CUPS
printcap name = CUPS
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
wins support = No
veto files = /*.eml/*.nws/riched20.dll/*.{*}/
obey pam restrictions = No
# inizio configurazione ldap
ldap server = 127.0.0.1
ldap port = 389
ldap suffix = ou=People,dc=mydomain,dc=com
ldap filter = ((uid=%u)) (objectclass=sambaAccount))
ldap ssl = off
[homes]
comment = Home Directories
valid users = %S
browseable = No
read only = No
create mask = 0640
directory mask = 0750
[printers]
comment = All Printers
path = /var/tmp
printable = Yes
create mask = 0600
browseable = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
write list = @ntadmin root
force group = ntadmin
create mask = 0664
directory mask = 0775
I have unix account and samba account correctly inserted in ldap server.
When i try to login on samba from MACHINENAME as USERNAME i see in
ldap's log and messages log
-
slapd[1179]: conn=124 op=1 SRCH base=ou=People,dc=modiano,dc=com
scope=1 filter=((objectClass=posixAccount)(uid=MACHINENAME\5CUSERNAME))
slapd[1179]: conn=114 op=1 SRCH base=ou=People,dc=modiano,dc=com
scope=1 filter=((objectClass=posixAccount)(uid=COMPU\5CP_NEGRI))
slapd[1179]: conn=114 op=1 SRCH attr=uid userPassword uidNumber
gidNumber cn homeDirectory loginShell gecos description objectClass
slapd[1179]: conn=114 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
smbd[2077]: [2004/01/19 11:30:28, 0] passdb/secrets.c:fetch_ldap_pw(264)
smbd[2077]: fetch_ldap_pw: no ldap secret retrieved!
smbd[2077]: [2004/01/19 11:30:28, 0]
passdb/pdb_ldap.c:ldap_connect_system(308)
smbd[2077]: ldap_connect_system: Failed to retrieve password for from
secrets.tdb
smbd[2077]: [2004/01/19 11:30:28, 0] passdb/secrets.c:fetch_ldap_pw(264)
smbd[2077]: fetch_ldap_pw: no ldap secret retrieved!
smbd[2077]: [2004/01/19 11:30:28, 0]
passdb/pdb_ldap.c:ldap_connect_system(308)
smbd[2077]: ldap_connect_system: Failed to retrieve password for from
secrets.tdb
smbd[2077]: [2004/01/19 11:30:28, 0] passdb/secrets.c:fetch_ldap_pw(264)
smbd[2077]: fetch_ldap_pw: no ldap secret retrieved!
smbd[2077]: [2004/01/19 11:30:28, 0]
passdb/pdb_ldap.c:ldap_connect_system(308)
smbd[2077]: ldap_connect_system: Failed to retrieve password for from
secrets.tdb
I think the issue is due to the fact that pam try to check if
MACHINENAME\5CUSERNAME is an existing unix account; but the uid USERNAME
exists, MACHINENAME\5CUSERNAME doesn't.
I'm sure it's a misconfiguration error, i've googled so much but without
success.
Thanks in advance for any help.
--
blank: Caught deadly signal TERM
blank: Finished.
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] shared folders ownership
If everyone should have access to the directory, the best way is to put everyone into a group (if they're not already - eg if you're running RedHat), say for example 'users', then set the directory's group ownership to users, the permissions of the directory to something like 775 (or 770), and then in the share definition something like: force group = users create directory mode = 770 create mode = 660 which will make sure all files and directories created inside that directory have group read/write permissions and belong to the correct group. You may also need to set up a group mapping (net groupmap unixgroup=users ntgroup=Users) If it's a subdirectory of a share, in which only the subdirectory needs write permissions for everybody, then you'll need to mess about with permissions - I *think* setting something like 2770 on the directory makes all files created in that directory belong to the same group as the directory, but I'm not an expert when it comes to that. HTH edd On Sunday 18 Jan 2004 1:07 pm, Wes Wilcox wrote: what/who is the owner of a shared directory in Samba, on a network that requires every one to access the directory, when created as root with 0777 it seems to revert back to root ownership and you can't write or delete from it. Relativily new at this, so would appreciate any help. Thanks Wes -- Edd Payne IT Co-ordinator University of London Union Malet Street, London WC1E 7HY tel: 020 7664 2060 fax: 020 7436 4604 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba3 Ldap on Suse 8.2
Hi I can't get a Windows 2000 SP4 client login on my PDC (SAMBA SERVER). Here are some infos about the server Samba version 3.0.2pre1 running Suse 8.2 with a OpenLDAP server version 2.1.12, nss_ldap and pam_ldap. I constantly get the message : User / Password is wrong from the client. The root is created.Here are the debug messages I get, starting by the LDAP and SMBD logs: ###log.ldap### Jan 16 16:01:05 tiger4 slapd[2813]: conn=37 fd=15 ACCEPT from IP=10.100.1.4:32863 (IP=:: 389) Jan 16 16:01:05 tiger4 slapd[2894]: conn=37 op=0 BIND dn=cn=Manager,dc=samba,dc=local method=128 Jan 16 16:01:05 tiger4 slapd[2894]: conn=37 op=0 AUTHZ dn=cn=Manager,dc=samba,dc=local mech=simple ssf=0 Jan 16 16:01:05 tiger4 slapd[2894]: conn=37 op=0 RESULT tag=97 err=0 text= Jan 16 16:01:05 tiger4 slapd[2875]: conn=37 op=1 SRCH base=dc=samba,dc=local scope=2 filter=((objectClass=sambaDomain)(sambaDomainName=SAMBA)) Jan 16 16:01:05 tiger4 slapd[2875]: conn=37 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Jan 16 16:01:05 tiger4 slapd[2851]: conn=37 op=2 SRCH base=dc=samba,dc=local scope=2 filter=(((uid=root)(objectClass=sambaSamAccount))(objectClass=sambaSamAccount)) Jan 16 16:01:05 tiger4 slapd[2851]: conn=37 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= Jan 16 16:01:05 tiger4 slapd[2813]: conn=37 fd=15 closed ###lo.ldap end### ###log.machine### [2004/01/16 16:01:05, 6] param/loadparm.c:lp_file_list_changed(2670) lp_file_list_changed() file /etc/samba/smb.conf - /etc/samba/smb.conf last mod_time: Fri Jan 16 16:00:33 2004 [2004/01/16 16:01:05, 5] smbd/connection.c:claim_connection(170) claiming 0 [2004/01/16 16:01:05, 5] smbd/reply.c:reply_special(154) init msg_type=0x81 msg_flags=0x0 [2004/01/16 16:01:05, 6] lib/util_sock.c:write_socket(407) write_socket(5,4) [2004/01/16 16:01:05, 6] lib/util_sock.c:write_socket(410) write_socket(5,4) wrote 4 [2004/01/16 16:01:05, 10] lib/util_sock.c:read_smb_length_return_keepalive(463) got smb length of 133 [2004/01/16 16:01:05, 6] smbd/process.c:process_smb(889) got message type 0x0 of len 0x85 [2004/01/16 16:01:05, 3] smbd/process.c:process_smb(890) Transaction 1 of length 137 [2004/01/16 16:01:05, 5] lib/util.c:show_msg(456) [2004/01/16 16:01:05, 5] lib/util.c:show_msg(466) size=133 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=98 [2004/01/16 16:01:05, 10] lib/util.c:dump_data(1830) [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 [020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for [030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. [040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM [050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 [060] 32 00 2. [2004/01/16 16:01:05, 3] smbd/process.c:switch_message(685) switch message SMBnegprot (pid 2980) [2004/01/16 16:01:05, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/01/16 16:01:05, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/01/16 16:01:05, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/01/16 16:01:05, 5] smbd/uid.c:change_to_root_user(218) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/01/16 16:01:05, 3] smbd/negprot.c:reply_negprot(455) Requested protocol [PC NETWORK PROGRAM 1.0] [2004/01/16 16:01:05, 3] smbd/negprot.c:reply_negprot(455) Requested protocol [LANMAN1.0] [2004/01/16 16:01:05, 3] smbd/negprot.c:reply_negprot(455) Requested protocol [Windows for Workgroups 3.1a] [2004/01/16 16:01:05, 3] smbd/negprot.c:reply_negprot(455) Requested protocol [LM1.2X002] [2004/01/16 16:01:05, 3] smbd/negprot.c:reply_negprot(455) Requested protocol [LANMAN2.1] [2004/01/16 16:01:05, 3] smbd/negprot.c:reply_negprot(455) Requested protocol [NT LM 0.12] [2004/01/16 16:01:05, 10] lib/util.c:set_remote_arch(1805) set_remote_arch: Client arch is 'Win2K' [2004/01/16 16:01:05, 6] param/loadparm.c:lp_file_list_changed(2670) lp_file_list_changed() file /etc/samba/smb.conf - /etc/samba/smb.conf last mod_time: Fri Jan 16 16:00:33 2004 [2004/01/16 16:01:05, 6] param/loadparm.c:lp_file_list_changed(2670) lp_file_list_changed() file /etc/samba/smb.conf - /etc/samba/smb.conf last mod_time: Fri Jan 16 16:00:33 2004 [2004/01/16 16:01:05, 3] smbd/negprot.c:reply_nt1(329) using SPNEGO [2004/01/16 16:01:05, 3] smbd/negprot.c:reply_negprot(532) Selected protocol NT LM 0.12 [2004/01/16 16:01:05, 5] smbd/negprot.c:reply_negprot(538) negprot index=5 [2004/01/16 16:01:05, 5] lib/util.c:show_msg(456) [2004/01/16 16:01:05, 5] lib/util.c:show_msg(466) size=127 smb_com=0x72 smb_rcls=0
[Samba] cifs-vfs connecting to Netware 6 running cifs.nlm
Hi All, I've got some problems accessing data on a netware server 6.0 running cifs.nlm from a Suse9 linux box. I was origanally trying to access it via smbfs however there were problems with files being truncated when writing and not being read properly. After reading through the archives to this list/newsgroup, I figured I might have better luck with the cifs-vfs module. However it isn't even mounting the filesystem, and is causing bad password attempts to be registered on the netware server. I've taken a trace of the network communication and a couple of things stand out. The trace for the SMB mount has a field in the session setup ANDX request packet called ANSI Password and Unicode Password. The trace for the CIFS mount only has a Unicode Password field, and the strings are different. Is this the cause of my problem, or am I barking up the wrong tree ? And even if it is (or isn't) where do I go from here ? Thanks for any help. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] winbind and Solaris 9 with AD
Hi have been trying to get winbind working on Solaris 9 but to no effect. version info: samba: 3.0.0 openldap: 2.1.23 kerberos: MIT 1.3.1 Have followed the instructions in every howto, usenet posting I could find: nscd not running created relevant links in /lib and /lib/security/sparcv9 applied patch for nsswitch as recommended kinit -e works net ads join works wbinfo -t works wbinfo -u gives list of all users in all trusted domains getent doesn't work samba authentication doesn't work - get the following in winbindd.log: [2004/01/19 10:59:27, 5] nsswitch/winbindd_pam.c:(379) NTLM CRAP authentication for user [DEV]\[test7] returned NT_STATUS_OK (PAM: 0) [2004/01/19 10:59:27, 3] nsswitch/winbindd_acct.c:(875) [ 3551]: create_user: user=(test7), group=() [2004/01/19 10:59:27, 5] nsswitch/winbindd_acct.c:(521) wb_getgrnam: Did not find group (nobody) my smb.conf is: workgroup = DEV #workgroup = DEV.ANTS.AD.ANPLC.CO.UK realm = DEV.ANTS.AD.ANPLC.CO.UK security = ADS password server = lonsd010.dev.ants.ad.anplc.co.uk dns proxy = no idmap gid = 7-8 idmap uid = 80-90 winbind cache time = 15 winbind use default domain = yes winbind enum users = yes winbind enum groups = yes encrypt passwords = yes log level = 9 [temp] path = /tmp read list = @users [docs] path = /var/tmp/samba-3.0.0 read list = @users I would appreciate any pointers as to further debugging I could do or possible problems as being able to use winbind to deal with samba authentication would make life a great deal easier. *** This communication (including any attachments) contains confidential information. If you are not the intended recipient and you have received this communication in error, you should destroy it without copying, disclosing or otherwise using its contents. Please notify the sender immediately of the error. Internet communications are not necessarily secure and may be intercepted or changed after they are sent. Abbey National Treasury Services plc does not accept liability for any loss you may suffer as a result of interception or any liability for such changes. If you wish to confirm the origin or content of this communication, please contact the sender by using an alternative means of communication. This communication does not create or modify any contract and, unless otherwise stated, is not intended to be contractually binding. Abbey National Treasury Services plc. Registered Office: Abbey National House, 2 Triton Square, Regents Place, London NW1 3AN. Registered in England under Company Registration Number: 2338548. Regulated by the Financial Services Authority (FSA). *** -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba3.0.1 bug?
Hi Somebody knows about the samba3.0.1 bugs? 'cause I try to map unix group, same after run the net groupmap command, but don't work... When I try the same think with samba3.0.0, this mapping work properly. Somebody explain this to me, please! -- Gilberto Nunes Suporte Rede Bonja - Bom Jesus/Ielusc Fone: 433-0155 - ramal 235 www.ielusc.br - [EMAIL PROTECTED] Linux User nº 199930 ICQ #136176504 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] patching 3.0.0 to 3.0.1
On Mon, Jan 19, 2004 at 04:14:42AM +, Gerald Carter wrote: On Sun, 18 Jan 2004, Greg Chavez wrote: Okay, I realize at this point that's it's certainly easier for me to just compile 3.0.1 from scratch, but I'm irritated that I can't get patch to work right. Maybe somebody will lead me in the right direction. I've scoured the archives and Google for answers to this, to no avail so far. I'm running Samba 3.0 on Solaris 9. I'm hoping that the new release will help me with some problems I've been having with character conversions using smbprint.sysv (you will hear more form me if it doesn't). I do this: # cd samba-3.0.0/source # make distclean # ls patch* patch-3.0.0-3.0.1.gz cd .. # gzcat patch* | patch -p0## GNU patch 2.5.4 gzcat source/patch* | patch -p1 Also make sure you're using GNU patch not the Solaris patch. Steve -- home steve at gbnet.org NetTek Ltdtel/fax +44-(0)207 483 2455 Email to SMS steve - epage (at) gbnet dot net -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] winbindd and macs
Hi, I'm running a Samba server with authentication being made through a w2000 server with winbind. Well, with Windows everything is ok. But with Macs is not. It seems that Macs are expecting a local account in the Samba server. They appear not to retrive the information from the w2000 server. Is there a wat to Macs get the info from the w2000 server ? I didn't want to setup local accounts for Macs' users. Any help would be appreciated. Warm Regards, Mário Gamito -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] winbind and Solaris 9 with AD
I'm having trouble with this too but getent works for me, I'm not using AD though. Have you edited nsswitch.conf? Passwd: files winbind Group: files winbind I'm stuck on getting logging in working...Sun seems to think there may be some bug with PAM. -Original Message- From: Unix Service (ANTS) [mailto:[EMAIL PROTECTED] Sent: 19 January 2004 12:13 To: '[EMAIL PROTECTED]' Subject: [Samba] winbind and Solaris 9 with AD Hi have been trying to get winbind working on Solaris 9 but to no effect. version info: samba: 3.0.0 openldap: 2.1.23 kerberos: MIT 1.3.1 Have followed the instructions in every howto, usenet posting I could find: nscd not running created relevant links in /lib and /lib/security/sparcv9 applied patch for nsswitch as recommended kinit -e works net ads join works wbinfo -t works wbinfo -u gives list of all users in all trusted domains getent doesn't work samba authentication doesn't work - get the following in winbindd.log: [2004/01/19 10:59:27, 5] nsswitch/winbindd_pam.c:(379) NTLM CRAP authentication for user [DEV]\[test7] returned NT_STATUS_OK (PAM: 0) [2004/01/19 10:59:27, 3] nsswitch/winbindd_acct.c:(875) [ 3551]: create_user: user=(test7), group=() [2004/01/19 10:59:27, 5] nsswitch/winbindd_acct.c:(521) wb_getgrnam: Did not find group (nobody) my smb.conf is: workgroup = DEV #workgroup = DEV.ANTS.AD.ANPLC.CO.UK realm = DEV.ANTS.AD.ANPLC.CO.UK security = ADS password server = lonsd010.dev.ants.ad.anplc.co.uk dns proxy = no idmap gid = 7-8 idmap uid = 80-90 winbind cache time = 15 winbind use default domain = yes winbind enum users = yes winbind enum groups = yes encrypt passwords = yes log level = 9 [temp] path = /tmp read list = @users [docs] path = /var/tmp/samba-3.0.0 read list = @users I would appreciate any pointers as to further debugging I could do or possible problems as being able to use winbind to deal with samba authentication would make life a great deal easier. *** This communication (including any attachments) contains confidential information. If you are not the intended recipient and you have received this communication in error, you should destroy it without copying, disclosing or otherwise using its contents. Please notify the sender immediately of the error. Internet communications are not necessarily secure and may be intercepted or changed after they are sent. Abbey National Treasury Services plc does not accept liability for any loss you may suffer as a result of interception or any liability for such changes. If you wish to confirm the origin or content of this communication, please contact the sender by using an alternative means of communication. This communication does not create or modify any contract and, unless otherwise stated, is not intended to be contractually binding. Abbey National Treasury Services plc. Registered Office: Abbey National House, 2 Triton Square, Regents Place, London NW1 3AN. Registered in England under Company Registration Number: 2338548. Regulated by the Financial Services Authority (FSA). *** -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Strange behavior WinXP and 2.2.8a and inherit permissions
I have a quite strange problem. I have updated my Server with Suse 9.0 to Samba 2.2.8a. From that moment on I couln'd run programms directly from the share anymore. The WinXP Client says: you dont have the permission for this file. But I have all permissions for it. This only occurs in that shares where I have set inherit permissions to yes. When I set it to No it works again. I can run programms from the share. I tried it on two XP Clients with same results. When I used a WinMe Client it worked all the time. It looks for me a bit like a bug. For I have not changed anything except updating samba to 2.2.8a Perhaps the group execute bit is interpreted as system attribute. Try map system = No and leave inheritance on. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: loading print driver question
I am trying to add print drivers for a samba shared printer to a Windows 2000 group - Everything up to this step works - I am using Samba 3.0.1 rpcclient -d 100 -Uroot -c 'adddriver Windows NT x86 \ E323:LMAAE1DD.dll:\ LMAAE1P1.PPD:LMAAE1DA.DLL:LMAAE1DA.HLP:NULL:RAW:\ LMAA1B1.DLL,LMAAE1BJ.DLL,LMAAE1BT.DLL,LMAAE1DA.ALL,\ LMAAE1ED.DLL,LMAAE1PI.EXE,LMAAE1TD.DLL,LMAAE1TE.DLL,\ LMAAE1DA.CNT,LMAAE1DF.DLL,LMAAE1DL.DLL,LMAAE1PU.DLL,\ LMAAE1SE.DLL,LMAAE1TF.DLL,LMAAE1TH.HLP,LMAAE1UZ.ZIP' SambaEnt The result I get is: result was WERR_ACCESS_DENIED In the log.smbd I get the following error: [2004/01/18 17:29:22, 0] printing/pcap.c:pcap_printer_fn(361) Unable to open printcap file cups for read! I'm not sure whats causing this error. I have changed the permissions on the /etc/printcap file to be wide open, and that doesn't seem to work either. Can anyone shed some light on where I might have messed up? There are too many single points of failure - correct spelling and ordering of parameters, existence of driver files at the right location, perms on the target model subdir etc. But all these can usually be precisely detected by using a proper debug level - of smbd, NOT of rpcclient. Jump the debug level with smbcontrol and then look in the client log file after the failure. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Can only login from Windows, when not a domain member
Hi, I have set up Samba 3.0.1 to work as a Domain Member. Security is ADS. wbinfo -a User%Pass works for the ADS users, winbind works as well. wbinfo -t is ok as well. When I try to connect to the computer from windows, it is only successful, when I am not logged in as a member of the domain like domain\user but logged in as a local user on the windows box (Administrator). I can also mount shares from another linux box via smbmount, ads authentification works here as well. It only doesn't work from windows machines, when the user logged in is a domain member. Anyone has any clues? Here are my settings. Have a nice day, Rainer LINUX-PRINT:/var/log/samba# testparm Load smb config files from /etc/samba/smb.conf Processing section [homes] Processing section [test] Processing section [printers] Loaded services file OK. 'winbind separator = +' might cause problems with group membership. Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions # Global parameters [global] workgroup = DOMAIN realm = REALM.DE server string = %h server (Linux/Samba %v) security = ADS password server = server.domain.de passdb backend = tdbsam, guest passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n . log level = 4 syslog = 0 log file = /var/log/samba/log.%m max log size = 1000 name resolve order = wins lmhosts host bcast printcap name = cups wins server = server panic action = /usr/share/samba/panic-action %d idmap uid = 1-2 idmap gid = 1-2 template homedir = /home/ads/%U template shell = /bin/bash winbind separator = + invalid users = root printing = cups [homes] comment = Home Directories read only = No create mask = 0700 directory mask = 0700 browseable = No [test] comment = test path = /tmp read only = No [printers] comment = All Printers path = /tmp create mask = 0700 guest ok = Yes printable = Yes browseable = No -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] terrible host\5Cusername ldap issue
Solved. Missing ldap admin credential. Tnx -- blank: Caught deadly signal TERM blank: Finished. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Could not fetch trust account password for domain ...
Heya , I just read this post on lists.samba.org about getting the error Error looking up domain users. When i read your post i realise i got exacly the same problem atm. With me also the smbpasswd command to let the linux server join the NT network works fine, and also the wbinfo -p and -t work fine. the -A login%password goes fine. However, when i try -u or -g commands i get the same error as mentioned above. Is there someone who could give me some helpfull tips ? Thanx in advance. With best regards, Peter Jensen -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] creating users from w2k with usrmgr and samba 3.0.1: Happy End!!
Am Freitag, 16. Januar 2004 18:12 schrieb John H Terpstra: Not really. If your scripts (add user, add group, etc.) are correctly set up then you can use this tool to manage users and groups without problem. That is true! It works! You observation is the result of configuration problems. ... You must be logged in a the Domain Administrator, and unfortunately I have discovered that there is no way around it, you must be logged on a the user called root. For me it also works when the Domain Admin is administrator! ... Unfortunately, this breaks. You have to use root. Duplicate accounts that share a UID break things badly. For example, having an account called root and one called Administrator, both with UID=0, break winbind operation. ... NT Domain Admins group needs to have GID=0. ... - John T. My Samba-errors all came from messed up user to program rights. Just a short description how my final config looks like: Groupmapping: Domain Admins - root Domain Users - domuser (ad libitum) Domain Guests - nogroup Administrative Samba-Users: root, primary Linux-Group: root administrator, primary Linux-Group: root Valid Samba-Users: +root, +domuser, +nogroup Samba Admin-Group: +root Machines are added to the group nogroup by default. When I first had them added to a machines-group an account for each computer could be created (Welcome to the Domain X), but later logon was denied with errors refering to missing computer-accounts. Obviously nobody has to be among the Valid Users because he/she/it does something during the logon process. The result is, that I can logon at the Domain as administrator, start the NT4 tool usrmgr.exe and can create, delete and change users and groups within the domain. Even my former complaint about the Debian tool adduser was wrong: with this config it works perfectly. Just one litte thing about strange error messages: if I set a password less than 5 characters, the usrmrg error is not password invalid.. too short or something along these lines, but it's: Access denied!. This is somewhat misleading. But the future users of this PDC will have to learn to use passwords longer than 4 characters, that can't be helped and won't harm them.. I'd be extremly glad if those people here who see some traps (resulting from such a config) lying ahead of me could inform me of them. But I'll see them, when I'm there.. But the future is bright and interesting and absolutely not harmful :-) Thank's for the help and hints.. Greetings, Alexander -- --- agoeres _at_ lieblinx.net tel.: +49 (0)30 / 61 20 26 87 fax: +49 (0)30 / 61 20 26 89 --- lieblinxNET we do software a Marwood Thiele GbR --- reichenberger straße 125 10999 Berlin http://lieblinx.net --- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Winbind Problems
Hello I hope someone can help me out. I have setup samba Version 3.0.0 to work with LDAP and winbind. I can join the domain with a Win2k client but if I try to login it fails. When I try to view the users of the domain I can't but I can see the groups from the Win2k client. The problem is that wbinfo -g reports correctly [EMAIL PROTECTED] samba]# wbinfo -g Domain Admins Domain Users Domain Guests Domain Computers But wbinfo -u has errors [EMAIL PROTECTED] samba]# wbinfo -u Error looking up domain users Any ideas? nsswitch.conf passwd: files winbind shadow: files group: files winbind smb.conf winbind use default domain = Yes winbind separator = + winbind enum users = yes winbind enum groups = yes idmap gid = 1-2 idmap uid = 1-2 #use nss_winbind = yes template homedir = /home/samba/%D/%U template shell = /bin/false ldap.conf #nss_base_passwdou=People,dc=example,dc=com?one nss_base_passwd dc=example,dc=com #nss_base_shadowou=People,dc=example,dc=com?one nss_base_shadow dc=example,dc=com __ This email transmission and any documents, files or previous email messages attached to it may contain information that is confidential or legally privileged. If you are not the intended recipient or a person responsible for delivering this transmission to the intended recipient, you are hereby notified that you must not read this transmission and that any disclosure, copying, printing, distribution or use of this transmission is strictly prohibited. If you have received this transmission in error, please immediately notify the sender by telephone or return email and delete the original transmission and its attachments without reading or saving in any manner. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind and Solaris 9 with AD
Hi, I have the following libraries and links in /usr/lib and it works: libnss_winbind.so libnss_winbind.so.1 - libnss_winbind.so nss_winbind.so.1 - libnss_winbind.so /Patrik On Mon, 2004-01-19 at 13:13, Unix Service (ANTS) wrote: Hi have been trying to get winbind working on Solaris 9 but to no effect. version info: samba: 3.0.0 openldap: 2.1.23 kerberos: MIT 1.3.1 Have followed the instructions in every howto, usenet posting I could find: nscd not running created relevant links in /lib and /lib/security/sparcv9 applied patch for nsswitch as recommended kinit -e works net ads join works wbinfo -t works wbinfo -u gives list of all users in all trusted domains getent doesn't work samba authentication doesn't work - get the following in winbindd.log: [2004/01/19 10:59:27, 5] nsswitch/winbindd_pam.c:(379) NTLM CRAP authentication for user [DEV]\[test7] returned NT_STATUS_OK (PAM: 0) [2004/01/19 10:59:27, 3] nsswitch/winbindd_acct.c:(875) [ 3551]: create_user: user=(test7), group=() [2004/01/19 10:59:27, 5] nsswitch/winbindd_acct.c:(521) wb_getgrnam: Did not find group (nobody) my smb.conf is: workgroup = DEV #workgroup = DEV.ANTS.AD.ANPLC.CO.UK realm = DEV.ANTS.AD.ANPLC.CO.UK security = ADS password server = lonsd010.dev.ants.ad.anplc.co.uk dns proxy = no idmap gid = 7-8 idmap uid = 80-90 winbind cache time = 15 winbind use default domain = yes winbind enum users = yes winbind enum groups = yes encrypt passwords = yes log level = 9 [temp] path = /tmp read list = @users [docs] path = /var/tmp/samba-3.0.0 read list = @users I would appreciate any pointers as to further debugging I could do or possible problems as being able to use winbind to deal with samba authentication would make life a great deal easier. *** This communication (including any attachments) contains confidential information. If you are not the intended recipient and you have received this communication in error, you should destroy it without copying, disclosing or otherwise using its contents. Please notify the sender immediately of the error. Internet communications are not necessarily secure and may be intercepted or changed after they are sent. Abbey National Treasury Services plc does not accept liability for any loss you may suffer as a result of interception or any liability for such changes. If you wish to confirm the origin or content of this communication, please contact the sender by using an alternative means of communication. This communication does not create or modify any contract and, unless otherwise stated, is not intended to be contractually binding. Abbey National Treasury Services plc. Registered Office: Abbey National House, 2 Triton Square, Regents Place, London NW1 3AN. Registered in England under Company Registration Number: 2338548. Regulated by the Financial Services Authority (FSA). *** -- In a world without fences who needs Gates Patrik Gustavsson, Senior Technical Consultant [EMAIL PROTECTED] Telephone: +46 60 671540 http://glen.swedenMobile: +46 70 3551040 SUN MICROSYSTEMS Fax: +46 60 671550 -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba Digest, Vol 13, Issue 30
I will be out of the office starting from Dec 02 till Jan. 12th, 2004. If it is urgent please send e-mail to [EMAIL PROTECTED] and someone will assist you. Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba don't use this for mailinglists! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] mounting smbfs from a Solaris 7 box
You can't, Solaris don't have the smbfs kernel driver. /Patrik On Wed, 2004-01-14 at 21:18, Knoll, Steve wrote: Has any Sun Solaris samba admin ever attempted to mount to a WindowsNT server? Unfortunately after several attempts and some elaborate syntax I can not get this to work. I do not see that Sun supports smbfs as Linux does. If anyone has any ideas or tricks please drop me a line. Thanks, Steve Knoll Intersil Corporation PAT Systems Group * (email) mailto:[EMAIL PROTECTED] * (voice) 1(321)729-5871 * (fax) 1(321)729-1194 -- In a world without fences who needs Gates Patrik Gustavsson, Senior Technical Consultant [EMAIL PROTECTED] Telephone: +46 60 671540 http://glen.swedenMobile: +46 70 3551040 SUN MICROSYSTEMS Fax: +46 60 671550 -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Capital Letters - Charset problem
Hello, I have a strange problem with samba 3.0.1 on suse 8.1, when I mount an NT shared directory the accented capitals letters are not recognised. Everything works fine except for files having accented *capitals*. My smb.conf has: unix charset = ISO-8859-15 display charset = ISO-8859-15 dos charset = CP850 unicode = No I tried compiling libiconv and recompiling samba with it, but with no result. Anyone can give me a hint? Thanks a lot! -- Alvaro Aguilera [EMAIL PROTECTED] CONATEL S.A. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] winbind and Solaris 9 with AD
Patrik, Hello! I have been waiting for you to get back, you may be able to help me. I am having trouble making winbind work with Solaris 9. I was wondering if you could post a copy of your pam.conf again so that I can double check that I have a correct copy of it? The problem I am having is that when I try to log in with an NT username and password the login process hangs after I put the password in. I don't know why this happens because getent works. I decided to log what is going on in PAM, here is what I got - Jan 14 13:29:55 sun001 pam_winbind[15352]: [ID 571141 auth.debug] libpam_winbind:pam_sm_close_sessio n handler Jan 14 13:29:59 sun001 login: [ID 634615 auth.debug] pam_authtok_get:pam_sm_authenticate: flags = 0 Jan 14 13:30:05 sun001 login: [ID 378613 auth.debug] pam_dhkeys: user ganguly not found Jan 14 13:30:05 sun001 login: [ID 896952 auth.debug] pam_unix_auth: entering pam_sm_authenticate() Jan 14 13:30:05 sun001 login: [ID 219349 auth.debug] pam_unix_auth: user ganguly not found Jan 14 13:30:05 sun001 pam_winbind[15369]: [ID 572310 auth.info] Verify user `ganguly' Jan 14 13:30:05 sun001 pam_winbind[15369]: [ID 614614 auth.notice] user 'ganguly' granted acces Jan 14 13:30:05 sun001 login[15369]: [ID 509786 auth.debug] roles pam_sm_authenticate, service = tel net user = ganguly ruser = not set rhost = 192.168.224.90 Thanks for any help you can offer! Sapan -Original Message- From: Patrik Gustavsson [mailto:[EMAIL PROTECTED] Sent: 19 January 2004 14:39 To: Unix Service (ANTS) Cc: '[EMAIL PROTECTED]' Subject: Re: [Samba] winbind and Solaris 9 with AD Hi, I have the following libraries and links in /usr/lib and it works: libnss_winbind.so libnss_winbind.so.1 - libnss_winbind.so nss_winbind.so.1 - libnss_winbind.so /Patrik On Mon, 2004-01-19 at 13:13, Unix Service (ANTS) wrote: Hi have been trying to get winbind working on Solaris 9 but to no effect. version info: samba: 3.0.0 openldap: 2.1.23 kerberos: MIT 1.3.1 Have followed the instructions in every howto, usenet posting I could find: nscd not running created relevant links in /lib and /lib/security/sparcv9 applied patch for nsswitch as recommended kinit -e works net ads join works wbinfo -t works wbinfo -u gives list of all users in all trusted domains getent doesn't work samba authentication doesn't work - get the following in winbindd.log: [2004/01/19 10:59:27, 5] nsswitch/winbindd_pam.c:(379) NTLM CRAP authentication for user [DEV]\[test7] returned NT_STATUS_OK (PAM: 0) [2004/01/19 10:59:27, 3] nsswitch/winbindd_acct.c:(875) [ 3551]: create_user: user=(test7), group=() [2004/01/19 10:59:27, 5] nsswitch/winbindd_acct.c:(521) wb_getgrnam: Did not find group (nobody) my smb.conf is: workgroup = DEV #workgroup = DEV.ANTS.AD.ANPLC.CO.UK realm = DEV.ANTS.AD.ANPLC.CO.UK security = ADS password server = lonsd010.dev.ants.ad.anplc.co.uk dns proxy = no idmap gid = 7-8 idmap uid = 80-90 winbind cache time = 15 winbind use default domain = yes winbind enum users = yes winbind enum groups = yes encrypt passwords = yes log level = 9 [temp] path = /tmp read list = @users [docs] path = /var/tmp/samba-3.0.0 read list = @users I would appreciate any pointers as to further debugging I could do or possible problems as being able to use winbind to deal with samba authentication would make life a great deal easier. ** * This communication (including any attachments) contains confidential information. If you are not the intended recipient and you have received this communication in error, you should destroy it without copying, disclosing or otherwise using its contents. Please notify the sender immediately of the error. Internet communications are not necessarily secure and may be intercepted or changed after they are sent. Abbey National Treasury Services plc does not accept liability for any loss you may suffer as a result of interception or any liability for such changes. If you wish to confirm the origin or content of this communication, please contact the sender by using an alternative means of communication. This communication does not create or modify any contract and, unless otherwise stated, is not intended to be contractually binding. Abbey National Treasury Services plc. Registered Office: Abbey National House, 2 Triton Square, Regents Place, London NW1 3AN. Registered in England under Company Registration Number: 2338548. Regulated by the Financial Services Authority (FSA). *** -- In a world without fences who needs Gates Patrik Gustavsson, Senior Technical Consultant [EMAIL PROTECTED] Telephone: +46 60 671540 http://glen.swedenMobile: +46 70 3551040 SUN MICROSYSTEMS Fax: +46 60 671550
[Samba] w2k/XP won't join samba pdc
Hi I'm sure this must have come up before - if so I apologise. I have googled, read HOWTOs FAQ and numerous personal accounts on how to configure samba as a PDC but to no avail - neither w2k nor XP will join the domain. NT4 Workstation and Win9x I have working fine - where have I gone wrong ? Linux SETUP: RedHat 7.3, samba-2.2.7-3.7.3 (upgraded from 2.2.3a) Win2k SETUP: Win 2000 Pro, Service pack 4 Win XP SETUP Win XP Pro I have used the Samba-HOWTO-Collection to configure the server os level = 64 preferred master = yes domain master = yes local master = yes security = user domain logons = yes logon path = \\%L\Profiles\%u [netlogon] comment = Network Logon Service path = /usr/share/samba/netlogon guest ok = yes writable = no share modes = no [Profiles] path = /export/smb/ntprofiles browseable = no guest ok = yes /usr/share/samba/netlogon is drwxr-xr-x2 root root /export/smb/ntprofilesis drwxr-xr-x2 root root I have also added to the global section in smb.conf, admin users = jim domain admin group = root jim @wheel which found referenced in a news article jim is a user on the linux box, exists in the smbpasswd file and is an administrator W2k system I have also manually created the two machine accounts admin1$ (w2k) and admin2$ (XP). and added them to the smbpasswd file as described in the Samba-HOWTO-Collection In | Advanced | Network identification | properties I change the workgroup to domain NEWDOM win prompts me for a username (jim) and password (XXX) and I get the following... Windows error The following error occurred attempting to join the domain NEWDOM Logon failure: unknown user name or bad password Samba error (#tail -f admin1.log) ... [2004/01/19 16:26:24, 0] smbd/service.c:make_connection(381) make_connection: jim logged in as admin user (root privileges) [2004/01/19 16:26:25, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(670) api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO. [2004/01/19 16:26:25, 0] rpc_server/srv_samr_nt.c:_samr_set_userinfo(2480) _samr_set_userinfo: Unable to get smbpasswd entry for uid 0 [2004/01/19 16:26:25, 0] smbd/service.c:make_connection(381) make_connection: jim logged in as admin user (root privileges) ... :-( on XP the samba log is the same initially I thought it was a permissions error on the smbpasswd file which is 0600, I changed it to 0640 but once I try and connect samba changes it back to 0600 any ideas, suggestions would be greatly appreciated James -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Printer problem, does somebody could help me please?
Hi! I got a Linux server (slack 8.1) running samba (2.2.4) to share home directories, printers and stuff like that. Recently, I got a problem with my printer. On Windows 2000, when I'm trying to print on my print server (samba), i get the following status on windows in the printer status: supressing. I don't understand why. I removed all the job in my printer queue, I restarted lpd, smbd and nmbd and I reinstalled the printer on my Win 2000. But I always got the same message. Does somebody have never seen something like that? That is wrong? here is my printer share definition on smb.conf: [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = yes printable = yes print command = lpr -r -Znoff -P%p %s And the definition in /etc/printcap: dfax_ps|Envoi massif postscript:\ :lp=/dev/null:\ :sd=/u/spool/lpd/dfax_ps:\ :sh:\ :mx#0:\ :if=/util/Filters/nocover_ps: Thanks a lot, Sam -- Samuel Jobin [EMAIL PROTECTED] Software Development _ --== GNI inc.==-- 5075 Wilfrid-Hamel O. Suite 220 Québec (QC), G2E 5G3 Phone: (418) 864-7721 Fax: (418) 263-3150 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] win2k wont join domain; tried everything
I have tried that. That was one of the first preliminary things I did. That isnt the problem. Its with windows 2000, where you have to type in a username and password to join a domain, and its not accepting root, and my password. On Jan 19, 2004, at 2:57 AM, [EMAIL PROTECTED] wrote: OK. Why don't you try to just 'useradd PC1$' and 'smbpasswd -a -m PC1' if the machine's name is PC1. It still works in samba 3.0.0.1final... Cheers, Juanjo - Mensaje Original - Remitente: Nathan Brown [EMAIL PROTECTED] Fecha: Lunes, Enero 19, 2004 8:01 am Asunto: [Samba] win2k wont join domain; tried everything I have a fresh installation of Windows 2000. I added the machine accountto the samba server but no matter what I do, I can't get it to join the domain. I believe the problem lies with my samba server. The new net commandisvery confusing to me and I believe I messed something up.I am now unable to login with the root user no matter what; which is required for logginWin2K into a domain. I have done all of the obvious things such as smbpasswd -a root, etc. What i really want to know is where all the setting are stored for the net command and just clear it all out and start over. And maybe the list of steps required to get this working (domain logon) as i can not find any recent info thats very comprehendable. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba PDC and Automatic Printer Install
The below mentioned have all been fixed. I can see the printer 'HP2300' from
my XP Pro machine (in 'Ready' status), but I cannot print to it.
In my /var/log/cups/error_log, I see:
E [19/Jan/2004:10:22:23 -0500] get_jobs: resource name '/printers/HP2300' no
good!
E [19/Jan/2004:10:22:23 -0500] get_printer_attrs: resource name
'/printers/::{2227a280-3aea-1069-a2de-08002b30309d}' no good!
E [19/Jan/2004:10:22:32 -0500] print_job: resource name '/printers/HP2300'
no good!
Thanks
Mike
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf
Of Kurt Pfeifle
Sent: Saturday, January 17, 2004 8:12 AM
To: [EMAIL PROTECTED]
Subject: [Samba] Samba PDC and Automatic Printer Install
Michael Aldrich maldrich at i-centrix.com
Wed Jan 14 15:35:11 GMT 2004
Hello,
I am trying to install automatic printer driver download and install.
I am running Samba 3, as a PDC, on RedHat 7.3.
Sorry, Mike,
I'm currently not able to follow the mails on this list one by one. Just
an occasional glance. So I haven't looked deeply into your problem either...
It seems everything is setup correctly,
No. Not completely. You are trying to use a driver downloaded from the
Samba server, yet you still have set smb.comf to use client driver = Yes.
Delete this line. Restart smbd. Then try again.
[...]
rpcclient $ setdriver lp HP LaserJet 2300 Series PCL 6
SetPrinter call failed!
[]
Snip from my smb.conf:
[printers]
[]
printing = cups
use client driver = Yes
^^^
[]
[lp]
[]
use client driver = Yes
^^^
oplocks = No
[]
Why do I get WERR_ACCESS_DENIED from SetPrinter?
What you try to do is not compatible with use client driver = Yes
Thanks
Mike
And thanks to Kurt for getting me this far
;-)
Cheers,
Kurt
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] winbind and Solaris 9 with AD
Hi Thanks to everyone for their intial replies. I have edited nsswitch.conf and I have the links that Patrik mentioned. I'm not really too fussed about getent working ( only in so far as getent not working maybe indicates a more general problem ) or allowing users to log on - I just want users without unix accounts to be able to access samba shares without having to use username.map or leaving shares wide open. So all I'm looking at is using winbind for samba authentication only - has anybody got this working on Solaris 9 with 3.0.0 and security=ADS? tim *** This communication (including any attachments) contains confidential information. If you are not the intended recipient and you have received this communication in error, you should destroy it without copying, disclosing or otherwise using its contents. Please notify the sender immediately of the error. Internet communications are not necessarily secure and may be intercepted or changed after they are sent. Abbey National Treasury Services plc does not accept liability for any loss you may suffer as a result of interception or any liability for such changes. If you wish to confirm the origin or content of this communication, please contact the sender by using an alternative means of communication. This communication does not create or modify any contract and, unless otherwise stated, is not intended to be contractually binding. Abbey National Treasury Services plc. Registered Office: Abbey National House, 2 Triton Square, Regents Place, London NW1 3AN. Registered in England under Company Registration Number: 2338548. Regulated by the Financial Services Authority (FSA). *** -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] w2k/XP won't join samba pdc
Am Montag, 19. Januar 2004 15:56 schrieb Lists: /usr/share/samba/netlogon is drwxr-xr-x2 root root /export/smb/ntprofilesis drwxr-xr-x2 root root Accoring to all I've learned during the past 2 weeks, the profile-directory should be writable to everyone that wants to write in it .. Windows error The following error occurred attempting to join the domain NEWDOM Logon failure: unknown user name or bad password Samba error (#tail -f admin1.log) ... [2004/01/19 16:26:24, 0] smbd/service.c:make_connection(381) make_connection: jim logged in as admin user (root privileges) [2004/01/19 16:26:25, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(670) api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO. [2004/01/19 16:26:25, 0] rpc_server/srv_samr_nt.c:_samr_set_userinfo(2480) _samr_set_userinfo: Unable to get smbpasswd entry for uid 0 That bit with unable to get smbpasswd entry for uid 0 looks as if samba is looking for a samba-user with the uid 0, i.e. root as a samba user. Is root already a valid samba user? Alexander -- --- agoeres _at_ lieblinx.net tel.: +49 (0)30 / 61 20 26 87 fax: +49 (0)30 / 61 20 26 89 --- lieblinxNET we do software a Marwood Thiele GbR --- reichenberger straße 125 10999 Berlin http://lieblinx.net --- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] patching 3.0.0 to 3.0.1
On Mon, 19 Jan 2004, Gerald Carter wrote: On Sun, 18 Jan 2004, Greg Chavez wrote: I'm running Samba 3.0 on Solaris 9. I'm hoping that the new release will help me with some problems I've been having with character conversions using smbprint.sysv (you will hear more form me if it doesn't). I do this: # cd samba-3.0.0/source # make distclean # ls patch* patch-3.0.0-3.0.1.gz cd .. # gzcat patch* | patch -p0## GNU patch 2.5.4 gzcat source/patch* | patch -p1 That was the magic pill. I grep'd source/ from the patchfile and noticed that many of the file paths begin with samba/source. So you need run patch from the samba/ directory, not samba/source, and strip off samba/ with -p1. Weird. Thanks to jerry for a speedy response. --Greg -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] network browserlist error(S)..
Collen wrote: G'day.. just haveing the straingest problem.. I'd upgraded to the 302rc1 version. i configed it to be an pdc controller, with wins to manage our local domain.. only when browsing the domain list. it gives error(s) once in a while.. An extended error has occured the system cannot find massage text for message number 0x in the message file for \\hostname I get this same error running 3.01 I have a PDC and multiple BDC's. The PDC has os level = 33 preferred master = yes domain master = yes domain logons = yes local master = yes wins support = yes My BDC's have os level = 32 preferred master = no domain master = no domain logons = yes local master = no wins server = ip.address.of.bdc This is a problem because I have shares on some Windows 2000 SP4 servers that my users cannot get to, I have to reboot the server for it to work. Is there someone who knows what is going on here or a suggestion to fix it? this is when you try to acces a computer or share for a win2k box, it happens 10 out of 100 times.. on a linux box, log.smb reports: lib/util_sock.c:matchname(941) sys_gethostname(host.domain): lookup failure lib/util_sock.c:get_socket_name(1008) matchname failed os host.domain 192.168.x.x the pdc is the master browser with smb.conf os level = 66 preferred master = yes domain master = yes domain logons = yes local master = yes wins support = yes with 300 version i have no problems, from 301rc1 the error starts.. sugestions ?? solutions ..?? l8r Collen Blijenberg MLHJ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba with Linux and Windows clients
I don't autenticate linux in the samba server. The usernames are known but the passwd are invalid. It happend when try install the pamsmb and NIS. What I do? In the documentation, is necessary modify the autentication for no use MD5 ou Shadow passord when there are systems operations diferents. Is correct ? Configuration: Server - Freebsd - Samba 3 Client - Linux Mandrake 9.1 / Kurumim 2.12 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] New install version question
I am planning on a mid-sized migration from Novell Netware to Samba. The server will eventually have about 400 concurrent logins with mainly shared home directories and printers. I am setting up a test server now, and was wondering what version of Samba I should start with. I see that a lot of linux distros still have 2.2.8 as the stable version to use [2.2.3 for Debian]. Is it safe to try a 3.x version, or should I stick with 2.2.8? Are there any specifics that 3.x will give me over 2.2.8? Thanks in advance. -- :wq! Matthew Daubenspeck http://www.oddprocess.org -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] winbind + trusted domain
hello I have a linux samba file server, 2.2.7a I have a win nt4 pdc for domain HOME, which the above server is a member of winbind is installed on samba, it works fine I recently set up a trusted relationship between domain HOME and another domain FOREIGN, which pdc is a w2k ad server from windows point of view (I mean windows clients), everything is fine from samba point of view, I can get access to FOREIGN resources, but FOREIGN users can't get access to samba. wbinfo -m shows FOREIGN as trusted domain wbinfo -a FOREIGN\\user2%password2 works wbinfo -n HOME\\user1 works wbinfo -n FOREIGN\\user2 doesn't work (could not lookup name) I googled around for some hours but didn't find anything is it (really) a samba problem ? what's the solution ? tia -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] w2k/XP won't join samba pdc
sorry, answer was mislead.. Am Montag, 19. Januar 2004 17:40 schrieb Lists: looking for a samba-user with the uid 0, i.e. root as a samba user. Is root already a valid samba user? I thought root was prohibited from being a root user - will try though might be an unnessesary hint, but give the samba root a different pw than the real root -- --- agoeres _at_ lieblinx.net tel.: +49 (0)30 / 61 20 26 87 fax: +49 (0)30 / 61 20 26 89 --- lieblinxNET we do software a Marwood Thiele GbR --- reichenberger straße 125 10999 Berlin http://lieblinx.net --- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] netatalk Sambas' winbind
Hi, I've got a SuSE 9.0 running Samba 3.0.1 and Netatalk 1.6.3 Samba is a member server of a win2k domain, I'm using winbind to authnticate my users. Well, with the Windows users, everything is ok. But not with the Mac users I'd like to setup Netatalk to authenticate my Macs against the win2k domain as with Windows. Is this possible? I've sarched the web all around and couldn't find any info on the subject. Warm regards, Mário Gamito -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: smbldap-tools 8.3 populate errors
On Sun, 18 Jan 2004 10:55:15 +0100, Jérôme Tournier wrote: Le Sat, Jan 17, 2004 at 04:00:23PM +0100, Manfred Odenstein a ecrit: The tgz file is incomplete, I've notced this too. The rpm is complete, so I've downloaded the rpm file instead, unpacked it, and copied the scripts to their respective location. Yes, you are write. The archive now include the file. Thanks for the fix. I downloaded it today and it works. I noticed however, that it creates an 'Administrator' account with a uidNumber of 0. In a reply to a post of mine on 2004-01-13 John Terpstra instructed me to avoid assigning a UID of 0 to 'Administrator' because it would break winbind. Instead he recommended using a 'root' account. Are you aware of this? John also mentioned that the root account should have an rid (sambaSID?) of 500. There still seems to be a lot of confusion as to the required sambaSID of the root, administrator, and nobody accounts. Is any progress being made in solidifying the rquirements? My system is now runnung, but I think there are some bugs in the populate script, e.g. the SID of the Administrator account should end with -500 as I know, because it's predefinded. Any comment from the author ??? 500 is the well-known RID for the domain administrator, not for the administrator account, am i wrong ? and please take care of the default groups in the smbldap.conf file, default machine account points to Print Operators (550) should be Domain Computers (553). Yes, fixed. I've also changed the gidNumber and uidNumber of the guest account and Domain Guest group to the default values of my system (SuSE9) after this all worked correctly except some log-entries . Failed to open group mapping database and failed to decode PDU Do you always have this error messages ? With every scripts ? Thanks for your report ! Curtis Grote Memorial Hospital -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Solaris 9 + Samba 3.0.2rc1 problem
I thought I got them working and it turned out I still have the same problem. This is a domain member server, joined to NT PDC. These commands are all working Ok: wbinfo -u, wbinfo -g, getent passwd, except getent group. It always stops at some point, I noticed these log messages: [2004/01/19 13:09:56, 10] nsswitch/winbindd.c:winbind_client_read(458) client_read: read 0 bytes. Need 1568 more for a full request. [2004/01/19 13:09:56, 5] nsswitch/winbindd.c:winbind_client_read(465) read failed on sock 22, pid 23630: EOF Some configuration entries in smb.conf: encrypt passwords = yes idmap uid = 1-8 winbind gid = 1-8 winbind enum users = yes winbind enum groups = yes winbind separator = + winbind use default domain = yes Here's how I compile Cyrus+SASL 2.1.17: ../configure --enable-shared --enable-gssapi=/usr/local/lib --with-openssl=/u sr/local/ssl I noticed in config.log, it says NTLM: disabled. Not sure if it matters here. Here's how I compile Samba 3.0.2rc1: ./configure --with-krb5=/usr --with-pam --with-libsmbclient --with-manpages- langs=en --with-winbind --with-ads --with-ldap --with-acl-support --with-libicon v=/usr/local I tried the above in Samba 3.0.1, Samba 3.0.2pre1, and Samba 3.0.2rc1 in Solaris 9, they all have the same getent group problem. But I noticed the winbindd in Samba 3.0.2rc1 handles ls -l request much faster than before. Thanks, Hai -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Fw: [Samba] w2k/XP won't join samba pdc
sorry, answer was mislead.. Am Montag, 19. Januar 2004 17:40 schrieb Lists: looking for a samba-user with the uid 0, i.e. root as a samba user. Is root already a valid samba user? I thought root was prohibited from being a root user - will try though might be an unnessesary hint, but give the samba root a different pw than the real root -- you're correct :-) now works fine except I get an error on creating the user's profile just when I though I'd conquered all - I'll play around with the permissions on the profiles share and see what works thanks again for the help regards James -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Filename for printing?
Hi, all. I'm trying to create a PDF queue... or, rather, I already have a homebrew solution I hacked together with an lprng filter, and it doesn't work too well. The solution at www.linuxgazette.com/issue72/bright.html, which uses the smb.conf and print command paramaters, appears to be much more elegant, but has one major shortfall: I don't see any way to get the filename of the file I'm printing. The jobname gives me: For websites: the URL (which is great) For apps (eg. Word): Microsoft (which is less great) Many of the documents my users will be printing have detailed part descriptions and partnumbers; it'd be a drag to not be able to have those automatically associated with the PDFs being generated. Does anyone see an elegant way to make this work? Or is it back to my inelegant, but functional, lprng solution? Thanks! Ken D'Ambrosio Sr. SysAdmin, Xanoptix, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Need Samba printing help
I am posting again - Please help. I am trying to add print drivers for a samba shared printer to a Windows2000 group - Everything up to this step works - I am using Samba 3.0.1 rpcclient -d 100 -Uroot -c 'adddriver Windows NT x86 \ E323:LMAAE1DD.dll:\ LMAAE1P1.PPD:LMAAE1DA.DLL:LMAAE1DA.HLP:\ NULL:RAW:LMAA1B1.DLL,LMAAE1BJ.DLL,LMAAE1BT.DLL,LMAAE1DA.ALL,LMAAE1ED.DLL,LMAAE1PI.EXE,\ LMAAE1TD.DLL,LMAAE1TE.DLL,LMAAE1DA.CNT,LMAAE1DF.DLL,LMAAE1DL.DLL,LMAAE1PU.DLL,\ LMAAE1SE.DLL,LMAAE1TF.DLL,LMAAE1TH.HLP,LMAAE1UZ.ZIP' SambaEnt The result I get is: result was WERR_ACCESS_DENIED In the log.smbd I get the following error: [2004/01/18 17:29:22, 0] printing/pcap.c:pcap_printer_fn(361) Unable to open printcap file cups for read! I'm not sure whats causing this error. I have changed the permissions onthe /etc/printcap file to be wide open, and that doesn't seem to workeither. Can anyone shed some light on where I might have messed up? Thanks,Mark -- Mark Fowle [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Serious bug in Samba 3.0.2pre1 !!!
Summarization of the bug in Samba 3.0.2pre1: It seems that an ADS group is not valid or detected anymore to access a samba share, in case only an ADS group is used a valid user on a Samba share, because Kerberos is reporting: Username (null) is invalid on this system. Besides that, connecting to a share (service) reports with Samba 3.0.0-2 REALM\username (NH-TEST.NL\fo6), but with Samba 3.0.2pre1 connecting to a share (service) reports only username (fo6) Downgrading to Samba 3.0.0-2 solves this problem! Subjoined the steps to reproduce the bug: Windows 2003 native mode Realm: NH-TEST.NL Red Hat Linux release 9 (Shrike) Kernel 2.4.20-8 on an i686 Linux (server) newly installed on clean system. Directly after Linux installation: rpmbuild --rebuild krb5-1.3.1-7.src.rpm Installed the resulting Kerberos packages. (rpm -Uhv -- force -- nodeps krb5*) rpmbuild -- rebuild samba-3.0.1-2.src.rpm Installed the resulting Samba package Samba configured for the use of winbind. Joined NH-TEST.NL realm. wbinfo -u, wbinfo -g, getent passwd, getent group, wbinfo -I ip_address, wbinfo -N netbios_name is working. Samba share grp # Group Directory [grp] writeable = yes inherit permissions = yes path = /data/grp comment = Group Directory valid users = @NH-TEST.NL\FO_GRP browsable = yes getent group FO_GRP:x:10014:fo7,fo6 chown root:FO_GRP /data/grp/fog [EMAIL PROTECTED] data]# ls -l grp drwxrws---5 root FO_GRP 4096 Jan 16 17:34 fog Output log.smbd [2004/01/15 11:58:27, 0] smbd/server.c:main(747) smbd version 3.0.1 started. Copyright Andrew Tridgell and the Samba Team 1992-2003 On a Win2k workstation logged in on the domain as user fo6 accessing the grp results in 10.15.69.101.log: [2004/01/15 12:06:33, 1] smbd/sesssetup.c:reply_spnego_kerberos(172) Failed to verify incoming ticket! Left the NH-TEST.NL realm rpmbuild -- rebuild samba-3.0.2pre1-1.src.rpm rpmbuild -- rebuild samba-3.0.0-2.src.rpm Installed the resulting Samba package: samba-3.0.2pre1-1.i386.rpm Joined NH-TEST.NL realm. wbinfo -u, wbinfo -g, getent passwd, getent group, wbinfo -I ip_address, wbinfo -N netbios_name is working. Output log.smbd [2004/01/16 14:50:24, 0] smbd/server.c:main(747) smbd version 3.0.2pre1 started. On a Win2k workstation logged in on the domain as user fo6 accessing the grp share results in 10.15.69.101.log: [2004/01/16 15:02:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(248) Username (null) is invalid on this system And NO access to the grp share!!! Changed on the grp share in smb.conf valid users = fo6 (user fo6 is only available as ADS user and not as local Linux user!) On a Win2k workstation logged in on the domain as user fo6 accessing the grp share results in 10.15.69.101.log: [2004/01/16 15:13:15, 1] smbd/service.c:make_connection_snum(705) 10.15.69.101 (10.15.69.101) connect to service public initially as user fo6 (uid=10004, gid=1) (pid 1161) (getent group: Domain Users:x:1:) (getent passwd: fo6:x:10004:1:fo6:/data/hom/fo6:/bin/bash) and access to the grp share!!! However no access to the fog directory!!! [EMAIL PROTECTED] data]# ls -l grp drwxrws---5 root FO_GRP 4096 Jan 16 17:34 fog chown fo6:FO_GRP /data/grp/fog [EMAIL PROTECTED] data]# ls -l grp drwxrws---5 fo6 FO_GRP 4096 Jan 16 17:34 fog Now access to the fog directory! Left the NH-TEST.NL realm Installed the Samba package: samba-3.0.0-2.i386.rpm Joined NH-TEST.NL realm. wbinfo -u, wbinfo -g, getent passwd, getent group, wbinfo -I ip_address, wbinfo -N netbios_name is working. Output log.smbd [2004/01/16 16:08:49, 0] smbd/server.c:main(747) smbd version 3.0.0 started. Copyright Andrew Tridgell and the Samba Team 1992-2003 Changed on the grp share in smb.conf valid users = @NH-TEST.NL\FO_GRP chown root:FO_GRP /data/grp/fog [EMAIL PROTECTED] data]# ls -l grp drwxrws---5 root FO_GRP 4096 Jan 16 17:34 fog On a Win2k workstation logged in on the domain as user fo6 accessing the grp share results in 10.15.69.101.log: [2004/01/16 16:11:22, 1] smbd/service.c:make_connection_snum(698) 10.15.69.101 (10.15.69.101) connect to service grp initially as user NH-TEST.NL\fo6 (uid=10004, gid=1) (pid 1102) Now I can access as fo6 user the grp share and I can access the fog directory and this is possible when the user fo6 is given access to the grp share only as group membership of the ADS group FO_GRP! Summarization of the bug in Samba 3.0.2pre1: It seems that an ADS group is not valid or detected anymore to access a samba share, in case only an ADS group is used a valid user on a Samba share, because Kerberos is reporting: Username (null) is invalid on this system. Besides that, connecting to a share (service) reports with Samba 3.0.0-2 REALM\username (NH-TEST.NL\fo6), but with Samba 3.0.2pre1 connecting to a share (service) reports only username (fo6) Downgrading to Samba 3.0.0-2 solves this problem!
[Samba] SQL 2000 Failed Authentication
I am runnign a Samba 3.0.1 PDC, serving a domain named FEEDBACK. Joined to this domain we have about 30 workstations and 2 Windows 2000 Servers. These servers run MS SQL Server 2000. SQL Server is using Windows authentication. This allows users/applications on our LAN to connect to the server using Windows authentication. This process has been flakey for the last month, with authentication failing (SQL applications say: username (null) not associated with a trusted connection). Since upgrading to Samba 3.0.1 about 2 days ago, it has barely worked. It does work, if you try to connect enough times. Perhaps 1/10 times. I am unable to put a finger on what is causing the problem. We are not having other problems with other computers or services on our network. People can log in and access their shares just fine. Both SQL servers show hte same problems, with no helpful messages in the event log: SubSystem Message - Job 'DOTTIE-Clients-GREG-13' (0x7FAE23BF34367744869B36C09E3B81D2), step 2 - Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection. The process could not connect to Subscriber 'GREG'. We have tried rebooting both servers, as well as disjoining and rejoining one to the domain. The disjoining and rejoining is flawless, but it doesn't fix the problem. We are unable to determine what to try next. Can anybody help us out? Thanks. Please include me in the reply. Jerry Haltom Feedback Plus, Inc. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] winbind and Solaris 9 with AD
Looked through source and noticed there were some debug entries at level 10 for winbind - so upped log level and this time I get this: [2004/01/19 18:18:47, 10] nsswitch/winbindd.c:(305) process_request: request fn CREATE_USER [2004/01/19 18:18:48, 3] nsswitch/winbindd_acct.c:(875) [17805]: create_user: user=(test7), group=() [2004/01/19 18:18:48, 5] libads/ldap_utils.c:(52) Search for (objectCategory=user) gave 18764 replies [2004/01/19 18:18:48, 5] nsswitch/winbindd_acct.c:(521) wb_getgrnam: Did not find group (nobody) -Original Message- From: Patrik Gustavsson [mailto:[EMAIL PROTECTED] Sent: 19 January 2004 14:39 To: Unix Service (ANTS) Cc: '[EMAIL PROTECTED]' Subject: Re: [Samba] winbind and Solaris 9 with AD Hi, I have the following libraries and links in /usr/lib and it works: libnss_winbind.so libnss_winbind.so.1 - libnss_winbind.so nss_winbind.so.1 - libnss_winbind.so /Patrik On Mon, 2004-01-19 at 13:13, Unix Service (ANTS) wrote: Hi have been trying to get winbind working on Solaris 9 but to no effect. version info: samba: 3.0.0 openldap: 2.1.23 kerberos: MIT 1.3.1 Have followed the instructions in every howto, usenet posting I could find: nscd not running created relevant links in /lib and /lib/security/sparcv9 applied patch for nsswitch as recommended kinit -e works net ads join works wbinfo -t works wbinfo -u gives list of all users in all trusted domains getent doesn't work samba authentication doesn't work - get the following in winbindd.log: [2004/01/19 10:59:27, 5] nsswitch/winbindd_pam.c:(379) NTLM CRAP authentication for user [DEV]\[test7] returned NT_STATUS_OK (PAM: 0) [2004/01/19 10:59:27, 3] nsswitch/winbindd_acct.c:(875) [ 3551]: create_user: user=(test7), group=() [2004/01/19 10:59:27, 5] nsswitch/winbindd_acct.c:(521) wb_getgrnam: Did not find group (nobody) my smb.conf is: workgroup = DEV #workgroup = DEV.ANTS.AD.ANPLC.CO.UK realm = DEV.ANTS.AD.ANPLC.CO.UK security = ADS password server = lonsd010.dev.ants.ad.anplc.co.uk dns proxy = no idmap gid = 7-8 idmap uid = 80-90 winbind cache time = 15 winbind use default domain = yes winbind enum users = yes winbind enum groups = yes encrypt passwords = yes log level = 9 [temp] path = /tmp read list = @users [docs] path = /var/tmp/samba-3.0.0 read list = @users I would appreciate any pointers as to further debugging I could do or possible problems as being able to use winbind to deal with samba authentication would make life a great deal easier. ** * This communication (including any attachments) contains confidential information. If you are not the intended recipient and you have received this communication in error, you should destroy it without copying, disclosing or otherwise using its contents. Please notify the sender immediately of the error. Internet communications are not necessarily secure and may be intercepted or changed after they are sent. Abbey National Treasury Services plc does not accept liability for any loss you may suffer as a result of interception or any liability for such changes. If you wish to confirm the origin or content of this communication, please contact the sender by using an alternative means of communication. This communication does not create or modify any contract and, unless otherwise stated, is not intended to be contractually binding. Abbey National Treasury Services plc. Registered Office: Abbey National House, 2 Triton Square, Regents Place, London NW1 3AN. Registered in England under Company Registration Number: 2338548. Regulated by the Financial Services Authority (FSA). *** -- In a world without fences who needs Gates Patrik Gustavsson, Senior Technical Consultant [EMAIL PROTECTED] Telephone: +46 60 671540 http://glen.swedenMobile: +46 70 3551040 SUN MICROSYSTEMS Fax: +46 60 671550 -- *** This communication (including any attachments) contains confidential information. If you are not the intended recipient and you have received this communication in error, you should destroy it without copying, disclosing or otherwise using its contents. Please notify the sender immediately of the error. Internet communications are not necessarily secure and may be intercepted or changed after they are sent. Abbey National Treasury Services plc does not accept liability for any loss you may suffer as a result of interception or any liability for such changes. If you wish to confirm the origin or content of this communication, please contact the sender by using an alternative means of communication. This communication does not
Re: [Samba] W2k/SQL Authentication problems 3.0.1, help please
Have you resolved this? I am having the same problem.
On Mon, 2004-01-12 at 13:02, Jason Jeremias wrote:
I upgraded from Samba 2.2.8a to Samba 3.0.1, since doing I'm having
problems with my SQL Server and applications running on Windows 2000.
When a users (running a windows 98 client) attempts to query the SQL
Server, either using ODBC (even the Test Sources) or an application that
uses the db. I get a login failed from the sql app, and from the ODBC I
get:
Login failed for user '(null)', Reason: Not associated with a trusted
SQL Server connection.
That error shows up in the SQL Server Logs, and its displayed at the client.
On the Samba side I see some NT user token: (NULL), in the logs but I'm
not sure what else to look for..
I'm not sure what is going on but it seems like the W2k/SQL Server is
not doing the Windows Authentication properly.
I've attached a testparm -vs and my smb.conf, I can provide logs or
whatever is needed to help me solve the problem.
__
# Global parameters
[global]
dos charset = CP850
unix charset = UTF-8
display charset = LOCALE
workgroup = UNICOM
afs username map =
netbios name = CARTMAN
netbios aliases =
netbios scope =
server string = Cartman Anchorage Samba Server %v
interfaces =
bind interfaces only = No
security = USER
auth methods =
encrypt passwords = Yes
update encrypted = No
client schannel = Auto
server schannel = Auto
allow trusted domains = Yes
hosts equiv =
min passwd length = 5
map to guest = Never
null passwords = No
obey pam restrictions = No
password server = *
smb passwd file = /etc/samba/private/smbpasswd
private dir = /etc/samba/private
passdb backend = smbpasswd
algorithmic rid base = 1000
root directory =
guest account = nobody
pam password change = No
passwd program =
passwd chat = *new*password* %n\n *new*password* %n\n *changed*
passwd chat debug = No
passwd chat timeout = 2
username map =
password level = 0
username level = 0
unix password sync = No
restrict anonymous = 0
lanman auth = Yes
ntlm auth = Yes
client NTLMv2 auth = No
client lanman auth = Yes
client plaintext auth = Yes
preload modules =
log level = 3
syslog = 1
syslog only = No
log file = /var/log/samba3/log.%m
max log size = 850
timestamp logs = Yes
debug hires timestamp = No
debug pid = No
debug uid = No
smb ports = 445 139
protocol = NT1
large readwrite = Yes
max protocol = NT1
min protocol = CORE
unicode = Yes
read bmpx = No
read raw = Yes
write raw = Yes
disable netbios = No
acl compatibility =
nt pipe support = Yes
nt status support = Yes
announce version = 4.9
announce as = NT
max mux = 50
max xmit = 16644
name resolve order = lmhosts wins host bcast
max ttl = 259200
max wins ttl = 518400
min wins ttl = 21600
time server = No
unix extensions = Yes
use spnego = Yes
client signing = auto
server signing = No
client use spnego = Yes
change notify timeout = 60
deadtime = 0
getwd cache = Yes
keepalive = 300
kernel change notify = Yes
lpq cache time = 10
max smbd processes = 0
paranoid server security = Yes
max disk size = 0
max open files = 1
read size = 16384
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
use mmap = Yes
hostname lookups = No
name cache timeout = 660
load printers = Yes
printcap name = cups
disable spoolss = No
enumports command =
addprinter command =
deleteprinter command =
show add printer wizard = Yes
os2 driver map =
mangling method = hash2
mangle prefix = 1
stat cache = Yes
machine password timeout = 604800
add user script = /usr/sbin/useradd -s /bin/false '%u'
delete user script = /usr/sbin/userdel '%s'
add group script = /usr/sbin/groupadd %g getent group '%g'|awk -F: '{print
$3}'
delete group script = /usr/sbin/groupdel '%g'
add user to group script = /usr/bin/gpasswd -a '%u' '%g'
delete user from group script = /usr/bin/gpasswd -d '%u' '%g'
set primary group script = /usr/sbin/usermod -g '%g' '%u'
add machine script = /usr/sbin/useradd -d /dev/null -g machines -c 'Machine
Account' -s /bin/false -M %u
shutdown script =
abort shutdown script =
logon script = %U.bat
logon path =
Re: [Samba] Need Samba printing help
Post the printer - related parts of your smb.conf file. There are some options like: printcap = cups printing = cups ...that may be necessary to allow cups to edit your printcap file. Additionally, you cannot add print drivers in samba if you have: use client driver = yes Alex Laslavic Havertys Tech Services [EMAIL PROTECTED] wrote on 01/19/2004 03:16:52 PM: I am posting again - Please help. I am trying to add print drivers for a samba shared printer to a Windows2000 group - Everything up to this step works - I am using Samba 3.0.1 rpcclient -d 100 -Uroot -c 'adddriver Windows NT x86 \ E323:LMAAE1DD.dll:\ LMAAE1P1.PPD:LMAAE1DA.DLL:LMAAE1DA.HLP:\ NULL:RAW:LMAA1B1.DLL,LMAAE1BJ.DLL,LMAAE1BT.DLL,LMAAE1DA.ALL, LMAAE1ED.DLL,LMAAE1PI.EXE,\ LMAAE1TD.DLL,LMAAE1TE.DLL,LMAAE1DA.CNT,LMAAE1DF.DLL,LMAAE1DL.DLL, LMAAE1PU.DLL,\ LMAAE1SE.DLL,LMAAE1TF.DLL,LMAAE1TH.HLP,LMAAE1UZ.ZIP' SambaEnt The result I get is: result was WERR_ACCESS_DENIED In the log.smbd I get the following error: [2004/01/18 17:29:22, 0] printing/pcap.c:pcap_printer_fn(361) Unable to open printcap file cups for read! I'm not sure whats causing this error. I have changed the permissions onthe /etc/printcap file to be wide open, and that doesn't seem to workeither. Can anyone shed some light on where I might have messed up? Thanks,Mark -- Mark Fowle [EMAIL PROTECTED] [attachment signature.asc deleted by Alex Laslavic/MIS/Havertys] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba3.0.1 bug?
Gilberto, the latest and most stable version of Samba is 3.0.1, and you should not de-grade to 3.0.0 because it has some bugs that are obvious right out of the box, Try monitoring your Samba log files. First, kill all samba processes: ps ax | grep smbd kill ... (might need to su or sudo this) Now start Samba with a higher debug level: smbd -D -d 2 (call this from root) And now monitor the logfiles: tail -f /var/log/samba.log While you have `tail' running, try doing the same operation that you were having problems on and see if the log files report anything usefull. If there is too mutch information coming from them, then try setting the debug level to 1. Post any usefull information that you find. On Mon, Jan 19, 2004 at 10:25:52AM -0200, Gilberto Nunes wrote: Hi Somebody knows about the samba3.0.1 bugs? 'cause I try to map unix group, same after run the net groupmap command, but don't work... When I try the same think with samba3.0.0, this mapping work properly. Somebody explain this to me, please! -- Gilberto Nunes Suporte Rede Bonja - Bom Jesus/Ielusc Fone: 433-0155 - ramal 235 www.ielusc.br - [EMAIL PROTECTED] Linux User n? 199930 ICQ #136176504 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- andrei bazhgin | aftermath programmer http://nan2d.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] AW: Strange behavior WinXP and 2.2.8a and inherit permissions
This only occurs in that shares where I have set inherit permissions to yes. When I set it to No it works again. I can run programms from the share. Perhaps the group execute bit is interpreted as system attribute. Try map system = No and leave inheritance on. I tried it but with no success. The map system is by default no and I have quiet simple shares. Perhaps you have a look at my smb.conf # Samba config file created using SWAT # from 192.168.123.102 (192.168.123.102) # Date: 2004/01/19 22:24:21 # Global parameters [global] coding system = client code page = 850 code page directory = /usr/share/samba/codepages workgroup = ARBEITSGRUPPE netbios name = netbios aliases = netbios scope = server string = Samba Server interfaces = bind interfaces only = No security = USER encrypt passwords = Yes update encrypted = No allow trusted domains = Yes hosts equiv = min passwd length = 5 map to guest = Bad User null passwords = No obey pam restrictions = No password server = smb passwd file = /etc/samba/smbpasswd root directory = pam password change = No passwd program = /usr/bin/passwd passwd chat = *new*password* %n\n *new*password* %n\n *changed* passwd chat debug = No username map = password level = 0 username level = 0 unix password sync = No restrict anonymous = No lanman auth = Yes use rhosts = No admin log = No log level = 0 syslog = 1 syslog only = No log file = max log size = 5000 timestamp logs = Yes debug hires timestamp = No debug pid = No debug uid = No protocol = NT1 large readwrite = Yes max protocol = NT1 min protocol = CORE read bmpx = No read raw = Yes write raw = Yes acl compatibility = nt smb support = Yes nt pipe support = Yes nt status support = Yes server schannel = Auto announce version = 4.9 announce as = NT max mux = 50 max xmit = 16644 name resolve order = lmhosts host wins bcast max ttl = 259200 max wins ttl = 518400 min wins ttl = 21600 time server = Yes unix extensions = Yes change notify timeout = 60 deadtime = 0 getwd cache = Yes keepalive = 300 lpq cache time = 10 max smbd processes = 0 max disk size = 0 max open files = 1 name cache timeout = 660 read size = 16384 socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY stat cache size = 50 use mmap = Yes total print jobs = 0 load printers = Yes printcap name = CUPS disable spoolss = No enumports command = addprinter command = deleteprinter command = show add printer wizard = Yes os2 driver map = strip dot = No mangling method = hash character set = mangled stack = 50 stat cache = Yes domain admin group = domain guest group = machine password timeout = 604800 add user script = delete user script = logon script = logon path = \\%N\%U\profile logon drive = logon home = \\%N\%U domain logons = No os level = 2 lm announce = Auto lm interval = 60 preferred master = Auto local master = No domain master = No browse list = Yes enhanced browsing = Yes dns proxy = Yes wins proxy = No wins server = wins support = No wins hook = kernel oplocks = Yes lock spin count = 3 lock spin time = 10 oplock break wait time = 0 add share command = change share command = delete share command = config file = preload = lock dir = /var/lib/samba pid directory = /var/run/samba utmp directory = wtmp directory = utmp = No default service = message command = dfree command = valid chars = remote announce = remote browse sync = socket address = 0.0.0.0 homedir map = auto.home time offset = 0 NIS homedir = No source environment = panic action = hide local users = No host msdfs = No winbind uid = winbind gid = template homedir = /home/%D/%U template shell = /bin/false winbind separator = \ winbind cache time = 15 winbind enum users = Yes winbind enum groups = Yes winbind use default domain = No
Re: [Samba] Need Samba printing help
The printer is a Lexmark E323 network laser printer - In the smb.conf file I have: [global] . . . printcap name = cups load printers = yes use client driver = no disable spoolss = no printing = cups printer admin = @printadmin show add printer wizard = yes . . . ### Shared Section ### . . [printers] comment = All Printers path = /var/spool/cups browseable = no guest ok = yes writable = no printable = yes public = yes read only = no [print$] path = /etc/samba/drivers browseable = yes guest ok = yes read only = yes write list = root, @printadmin [E323] comment = E323 Test laser printer path = /var/spool/samba/E323 printer name = E323 writable = yes public = yes printable = yes print command = lpr-cups -P %p -o raw %s -r printer admin = root, @printadmin # A useful application of samba is to make a PDF-generation service # To streamline this, install windows postscript drivers (preferably colour) # on the samba server, so that clients can automatically install them. [pdf-generator] path = /var/tmp guest ok = No printable = Yes comment = PDF Generator (only valid users) #print command = /usr/share/samba/scripts/print-pdf file path win_path recipient IP print command = /usr/share/samba/scripts/print-pdf %s ~%u %L%u %m %I On Mon, 2004-01-19 at 15:59, [EMAIL PROTECTED] wrote: Post the printer - related parts of your smb.conf file. There are some options like: printcap = cups printing = cups ...that may be necessary to allow cups to edit your printcap file. Additionally, you cannot add print drivers in samba if you have: use client driver = yes Alex Laslavic Havertys Tech Services [EMAIL PROTECTED] wrote on 01/19/2004 03:16:52 PM: I am posting again - Please help. I am trying to add print drivers for a samba shared printer to a Windows2000 group - Everything up to this step works - I am using Samba 3.0.1 rpcclient -d 100 -Uroot -c 'adddriver Windows NT x86 \ E323:LMAAE1DD.dll:\ LMAAE1P1.PPD:LMAAE1DA.DLL:LMAAE1DA.HLP:\ NULL:RAW:LMAA1B1.DLL,LMAAE1BJ.DLL,LMAAE1BT.DLL,LMAAE1DA.ALL, LMAAE1ED.DLL,LMAAE1PI.EXE,\ LMAAE1TD.DLL,LMAAE1TE.DLL,LMAAE1DA.CNT,LMAAE1DF.DLL,LMAAE1DL.DLL, LMAAE1PU.DLL,\ LMAAE1SE.DLL,LMAAE1TF.DLL,LMAAE1TH.HLP,LMAAE1UZ.ZIP' SambaEnt The result I get is: result was WERR_ACCESS_DENIED In the log.smbd I get the following error: [2004/01/18 17:29:22, 0] printing/pcap.c:pcap_printer_fn(361) Unable to open printcap file cups for read! I'm not sure whats causing this error. I have changed the permissions onthe /etc/printcap file to be wide open, and that doesn't seem to workeither. Can anyone shed some light on where I might have messed up? Thanks,Mark -- Mark Fowle [EMAIL PROTECTED] [attachment signature.asc deleted by Alex Laslavic/MIS/Havertys] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- Mark Fowle [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] winbind and Solaris 9 with AD
Have done some more digging through the log files and found the following ( see extracts at bottom ): 21.22.05 smbd asks winbind to create user 21.22.05 winbindd appears to do this successfully ( wb_storepwnam: Success ) 21.22.13 smbd never seems to receive notification of this and times out. I don't know enough about the smbd/winbindd interaction to work out what's happening ( will look at a working linux box to try and get an idea ) - has anyone seen this before or know what could possibly cause this behaviour? thanks tim Log.smbd: [2004/01/19 21:22:05, 3] auth/auth_util.c:(1009) User test7 does not exist, trying to add it [2004/01/19 21:22:05, 10] auth/auth_util.c:(74) auth_add_user_script: no 'add user script'. Asking winbindd [2004/01/19 21:22:05, 10] nsswitch/wb_client.c:(390) winbind_create_user: test7 [2004/01/19 21:22:05, 5] lib/username.c:(288) Finding user DEV\test7 [2004/01/19 21:22:05, 5] lib/username.c:(223) Trying _Get_Pwnam(), username as lowercase is dev\test7 [2004/01/19 21:22:05, 5] lib/username.c:(230) Trying _Get_Pwnam(), username as given is DEV\test7 [2004/01/19 21:22:05, 5] lib/username.c:(239) Trying _Get_Pwnam(), username as uppercase is DEV\TEST7 [2004/01/19 21:22:05, 5] lib/username.c:(247) Checking combinations of 0 uppercase letters in dev\test7 [2004/01/19 21:22:05, 5] lib/username.c:(251) Get_Pwnam_internals didn't find user [DEV\test7]! [2004/01/19 21:22:05, 5] lib/username.c:(288) Finding user test7 [2004/01/19 21:22:05, 5] lib/username.c:(223) Trying _Get_Pwnam(), username as lowercase is test7 ^C[2004/01/19 21:22:05, 5] lib/username.c:(239) Trying _Get_Pwnam(), username as uppercase is TEST7 [2004/01/19 21:22:05, 5] lib/username.c:(247) Checking combinations of 0 uppercase letters in test7 [2004/01/19 21:22:05, 5] lib/username.c:(251) Get_Pwnam_internals didn't find user [test7]! [2004/01/19 21:22:05, 0] auth/auth_util.c:(1017) make_server_info_info3: pdb_init_sam failed! [2004/01/19 21:22:05, 5] auth/auth.c:(268) check_ntlm_password: winbind authentication for user [test7] FAILED with error NT_STATUS_NO_SUCH_USER [2004/01/19 21:22:05, 2] auth/auth.c:(309) check_ntlm_password: Authentication for user [test7] - [test7] FAILED with e rror NT_STATUS_NO_SUCH_USER [2004/01/19 21:22:05, 5] auth/auth_util.c:(1185) attempting to free (and zero) a user_info structure [2004/01/19 21:22:05, 10] auth/auth_util.c:(1188) structure was created for test7 [2004/01/19 21:22:06, 6] lib/util_sock.c:(407) write_socket(16,98) [2004/01/19 21:22:06, 6] lib/util_sock.c:(410) write_socket(16,98) wrote 98 [2004/01/19 21:22:13, 10] lib/util_sock.c:(336) read_socket_data: recv of 4 returned 0. Error = Error 0 [2004/01/19 21:22:13, 10] lib/util_sock.c:(512) receive_smb: length 0! [2004/01/19 21:22:13, 3] smbd/process.c:(1099) timeout_processing: End of file from client (client has disconnected). [2004/01/19 21:22:13, 5] lib/gencache.c:(88) Closing cache file [2004/01/19 21:22:13, 5] libsmb/namecache.c:(79) Log.winbind: [2004/01/19 21:22:05, 10] nsswitch/winbindd.c:(305) process_request: request fn CREATE_USER [2004/01/19 21:22:05, 3] nsswitch/winbindd_acct.c:(875) [27622]: create_user: user=(test7), group=() [2004/01/19 21:22:05, 5] nsswitch/winbindd_acct.c:(521) wb_getgrnam: Did not find group (nobody) [2004/01/19 21:22:05, 10] sam/idmap_tdb.c:(125) db_allocate_id: ID_USERID (*id).uid = 80 [2004/01/19 21:22:05, 10] nsswitch/winbindd_acct.c:(157) passwd2string: converting passwd struct for test7 [2004/01/19 21:22:05, 10] nsswitch/winbindd_acct.c:(486) wb_storepwnam: Success - test7:x:80:60001:test7:/home/ANTS431/test7:/bin /false [2004/01/19 21:22:05, 10] nsswitch/winbindd.c:(502) client_write: wrote 1304 bytes. [2004/01/19 21:22:13, 10] nsswitch/winbindd.c:(455) client_read: read 0 bytes. Need 1568 more for a full request. *** This communication (including any attachments) contains confidential information. If you are not the intended recipient and you have received this communication in error, you should destroy it without copying, disclosing or otherwise using its contents. Please notify the sender immediately of the error. Internet communications are not necessarily secure and may be intercepted or changed after they are sent. Abbey National Treasury Services plc does not accept liability for any loss you may suffer as a result of interception or any liability for such changes. If you wish to confirm the origin or content of this communication, please contact the sender by using an alternative means of communication. This communication does not create or modify any contract and, unless otherwise stated, is not intended to be contractually binding. Abbey National Treasury Services plc. Registered Office: Abbey National House, 2 Triton Square, Regents Place, London NW1 3AN. Registered in England under Company Registration
[Samba] smb3 + ldap howto?
Hello. Is there somewhere a smb3+ldap howto? I'm trying to use one found here [*] but it is currently under total re-construcction in order to support smb3. I will appreciate *any* guide or document that cans help me! Thanks. [*] http://www.unav.es/cti/ldap-smb-howto.html -- Oscar Retana M. GridShield S.A. Protección y Monitoreo de Redes Tel: +(506) 258-5757 ext 112 Cel: +(506) 830-1631 Email: [EMAIL PROTECTED] Web: www.gridshield.net -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Career Site Linking
Hello, Does your organization link to sites focusing on career advancement for women? http://www.advancingwomen.net is specifically for women seeking career advancement and those organizations building a diverse workforce. Please reply with the subject Add my link too if you wish to have your link added to AdvancingWomen.net. Included your site's title, url, and discription. Exchanging links will help build search engine placement for both sites. Thank you in advance for your prompt response. Please forward this message to the appropriate parties if you are unable to make decisions about your organization's website. Below is our link information. Link: http://www.advancingwomen.net Link Title: Job Search Engine for Women Discription: Career advancement for professional women with free job search and anonymous resume posting. Regards, James A Kirk Links Manager http://www.AdvancingWomen.net -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smb3 + ldap howto?
Oscar Retana M. wrote: Hello. Is there somewhere a smb3+ldap howto? I'm trying to use one found here [*] but it is currently under total re-construcction in order to support smb3. I will appreciate *any* guide or document that cans help me! Please try the one at http://samba.org/samba/docs/Samba-HOWTO-Collection.pdf or http://samba.org/samba/docs/man/ (HTML version) Jelmer -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
FW: [Samba] Problem updating/creating files with winbind and a wi n2k box
It appears that whenever the winbind process is running on my Solaris 8 machine, I can't perform a long listing of the test share that I created (that is local on the Solaris machine). However, if I turn the winbind process off, then I can get the results of a long listing (ls -l). Also, when winbindd is running, it is eating up about 45% of the CPU. I have double checked the linking of the winbind libraries, my nsswitch.conf file, and made sure that nscd is not running. I can successfully run wbinfo -t, wbinfo -u, wbinfo -g, getent passwd, and getent group. I do not have a ld.config file if that is a problem. It would seem that winbind checks the local winbind_idmap database and then returns the correct UID information associated with a file almost instantly. Nsswitch.conf passwd: files winbind shadow: files group: files winbind Any help would be greatly appreciated!!! -Original Message- From: Harmon, Leigh [mailto:[EMAIL PROTECTED] Sent: Friday, January 16, 2004 3:48 PM To: '[EMAIL PROTECTED]' Subject: [Samba] Problem updating/creating files with winbind and a win2k box Hi, I'm having a strange issue with Samba 3.0.1 running on Solaris 8, and updating/creating files on a Win2k machine. I have a test share created on the Solaris machine (path=/export) with initially no files in it. I have no problem accessing the test share from the Win2k machine. I can successfully create/update a file in the test share from the Win2k machine. The problem occurs when I get on the Solaris machine and try to do a long listing of all of the files in the test directory (/export) to look at the permission. I can perfrom a normal ls command and cat command, but a ls -l never returns an answer: # pwd /export # ls win2000.txt # cat win2000.txt This is a win 2000 test # ls -al ^C If I reboot my Solaris box, and perform the same ls -l command, then I can see all of the information that I am supposed to see. However, If I attempt to update the file again, then the same issue occurs when doing a long listing. It appears that after an update occurs, the Solaris machine cannot return the information from winbind to display the owner and group of the win2000.txt file. Has anyone else ever experience this issue? Thanks!!! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Filename for printing?
Check your quoting. You could end up with the whole filename which I assume is what you want. Try putting single quotes around it wherever you are using it. _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin |$| |__| | | |__/ | \| _| | [EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630 On Mon, 19 Jan 2004 [EMAIL PROTECTED] wrote: Hi, all. I'm trying to create a PDF queue... or, rather, I already have a homebrew solution I hacked together with an lprng filter, and it doesn't work too well. The solution at www.linuxgazette.com/issue72/bright.html, which uses the smb.conf and print command paramaters, appears to be much more elegant, but has one major shortfall: I don't see any way to get the filename of the file I'm printing. The jobname gives me: For websites: the URL (which is great) For apps (eg. Word): Microsoft (which is less great) Many of the documents my users will be printing have detailed part descriptions and partnumbers; it'd be a drag to not be able to have those automatically associated with the PDFs being generated. Does anyone see an elegant way to make this work? Or is it back to my inelegant, but functional, lprng solution? Thanks! Ken D'Ambrosio Sr. SysAdmin, Xanoptix, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.2rc1 / LDAP login fails, pdbedit shows user
I'm running 3.0.2rc1. User authentication was working, until I got the bright idea to change ntgroup _users_ to users Now no one can login, any ideas how to fix? I've tried deleting the tree starting over from scratch, no joy: [EMAIL PROTECTED] root]# smbclient //chs/tmp -U doj Password: tree connect failed: Call returned zero bytes (EOF) [EMAIL PROTECTED] root]# When I run pdbedit -v, the use is listed I can browse the LDAP tree with Jarek Gawor's LDAP Browser\Editor smb.conf is as follows: [global] force user = root hosts allow = 192.168.10. 192.168.20. hosts deny = all interfaces = eth0 eth1 passdb backend = ldapsam ldap suffix = dc=hbclp,dc=com #ldap machine suffix = ou=_COMPUTERS_ #ldap user suffix = ou=_USERS_ #ldap group suffix = ou=_GROUPS_ ldap machine suffix = ou=computers ldap group suffix = ou=groups ldap user suffix = ou=users ldap admin dn = cn=root,dc=hbclp,dc=com #not using ssl because this is all happening on the localhost ldap ssl = no #ldap ssl = Yes #ldap ssl = start tls idmap backend = ldap:ldap://127.0.0.1 winbind separator = + winbind enum users = yes winbind enum groups = yes wins support = yes idmap gid = 1-2 idmap uid = 1-2 passwd chat debug = Yes passwd program =/usr/bin/smbldap-passwd.pl -o %u passwd chat = *new*password* %n\n *new*password:* %n\ *successfully* #mentioned that these options improve performance socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 add machine script = /usr/bin/smbldap-useradd.pl -w %ms add user script = /usr/bin/smbldap-useradd.pl -a %u delete user script = /usr/bin/smbldap-userdel.pl %u add group script = /usr/bin/smbldap-groupadd.pl %g delete group script = /usr/bin/smbldap-groupdel.pl %g add user to group script = /usr/bin/smbldap-groupmod.pl -m %u %g delete user from group script = /usr/bin/smbldap-groupmod.pl -x %u %g set primary group script = /usr/bin/smbldap-usermod.pl -G %g %u workgroup = workgroup netbios name = chs comment = Chesterfield Server server string = Chesterfield Server security = user null passwords = yes encrypt passwords = yes logon script=logon.bat ### These left Blank will force local profiles but will not override LDAP config ##if set LDAP takes precedence. logon drive = logon path = domain master = yes domain logons = yes preferred master = yes os level = 33 wins support = no wins proxy = no log file = /var/log/samba/%m.log public = No browseable = yes writable = No ; necessary share for domain controller [netlogon] path = /netlogon locking = no read only = yes write list = ntadmin ;test share [tmp] writeable = yes public = yes path = /tmp [profiles] path = /profiles read only = no writeable = yes create mask = 0600 directory mask = 0700 [sys] public=yes path = /home/sys read only = No [vol1] public=yes path = /home/vol1 read only = No [cdroms] public=yes path = /home/cdroms read only = No -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Help! Samba 3.0 can't use null password with OS X
When I made the move to 3.0, I noticed that smbclient no longer works with null passwords. Am I missing something? I read the FAQ, which suggests that the server is rejecting the null password. But I know that null passwords work fine for the 2.2.8a client, so the server is not the issue. The FAQ recommends smbclient -L host -U%, but I don't want to set the username to null. I want a non-null username with a null password. I traced the packets on the two smbclients, and I see several differences. The command I ran was: smbclient //g4-box-1/dood -I 192.168.5.90 -U dood I used the same command on both 2.2.8a and 3.0 systems. Here are the differences I saw in the packets: 1. client sends Extended Security Negotiation: Extended security negotiation is supported on 3.0, but not on 2.2.8a 2. 2.2.8a client sends ANSI Password, Unicode Password, and uppercased-account name. Meanwhile, 3.0 client doesn't send either passwords, and sends a lowercased-account name. I think this is actually the key here. 3. the primary domain sent by 2.2.8a is the client's default domain, while the primary domain sent by 3.0 is the domain of the share being accessed 4. 2.2.8a sends SMB Command: Session Setup AndX (0x73) and gets response NT Status: STATUS_SUCCESS (0x) 3.0 sends same command and gets response NT Status: STATUS_LOGON_FAILURE (0xc06d) Any suggestions how to get 3.0 to work with null passwords? Thanks, Dave -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Help! Samba 3.0 can't use null password with OS X
The latest release (stable) of Samba is 3.0.1, get that - I am sure the bug is resolved in 3.0.1 On Mon, Jan 19, 2004 at 05:53:10PM -0800, David Wuertele wrote: When I made the move to 3.0, I noticed that smbclient no longer works with null passwords. Am I missing something? I read the FAQ, which suggests that the server is rejecting the null password. But I know that null passwords work fine for the 2.2.8a client, so the server is not the issue. The FAQ recommends smbclient -L host -U%, but I don't want to set the username to null. I want a non-null username with a null password. I traced the packets on the two smbclients, and I see several differences. The command I ran was: smbclient //g4-box-1/dood -I 192.168.5.90 -U dood I used the same command on both 2.2.8a and 3.0 systems. Here are the differences I saw in the packets: 1. client sends Extended Security Negotiation: Extended security negotiation is supported on 3.0, but not on 2.2.8a 2. 2.2.8a client sends ANSI Password, Unicode Password, and uppercased-account name. Meanwhile, 3.0 client doesn't send either passwords, and sends a lowercased-account name. I think this is actually the key here. 3. the primary domain sent by 2.2.8a is the client's default domain, while the primary domain sent by 3.0 is the domain of the share being accessed 4. 2.2.8a sends SMB Command: Session Setup AndX (0x73) and gets response NT Status: STATUS_SUCCESS (0x) 3.0 sends same command and gets response NT Status: STATUS_LOGON_FAILURE (0xc06d) Any suggestions how to get 3.0 to work with null passwords? Thanks, Dave -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- andrei bazhgin | aftermath programmer http://nan2d.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbldap-tools 8.3 populate errors
On Sun, 18 Jan 2004 10:55:15 +0100 Jérôme Tournier [EMAIL PROTECTED] wrote: know, because it's predefinded. Any comment from the author ??? 500 is the well-known RID for the domain administrator, not for the administrator account, am i wrong ? Domain admin should have rid 512, admin account should have rid 500 and group rid 512. --beast -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbclient connect problem
I've tried everything I can think of, but still cannot connect to a Windows 2000 share using smbclient. I know the shared directory is set up OK because I can get to it with another Windows box. My smbclient command line should be OK because the same syntax works on another Linux box at work (running a slightly older version of smbclient) to a similarly setup Windows box. This is what I get with d3 debug: smbclient //guelyb-2k-2/pool mypassword -N -U GUELYB -d3 [2004/01/19 17:59:08, 3] param/loadparm.c:lp_load(3926) lp_load: refreshing parameters [2004/01/19 17:59:08, 3] param/loadparm.c:init_globals(1303) Initialising global parameters [2004/01/19 17:59:08, 3] param/params.c:pm_process(566) params.c:pm_process() - Processing configuration file /etc/samba/smb.conf [2004/01/19 17:59:08, 3] param/loadparm.c:do_section(3429) Processing section [global] [2004/01/19 17:59:08, 2] lib/interface.c:add_interface(79) added interface ip=192.168.1.102 bcast=192.168.1.255 nmask=255.255.255.0 [2004/01/19 17:59:08, 3] client/client.c:main(2954) Client started (version 3.0.0-15). [2004/01/19 17:59:08, 3] libsmb/namequery.c:resolve_lmhosts(850) resolve_lmhosts: Attempting lmhosts lookup for name guelyb-2k-20x20 [2004/01/19 17:59:08, 3] lib/util_sock.c:open_socket_out(690) Connecting to 192.168.1.101 at port 445 [2004/01/19 17:59:08, 2] libsmb/cliconnect.c:cli_session_setup_spnego(635) Doing spnego session setup (blob length=16) [2004/01/19 17:59:08, 3] libsmb/cliconnect.c:cli_session_setup_spnego(639) server didn't supply a full spnego negprot [2004/01/19 17:59:08, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(469) Got challenge flags: [2004/01/19 17:59:08, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(33) Got NTLMSSP neg_flags=0x60890215 [2004/01/19 17:59:08, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(518) NTLMSSP: Set final flags: [2004/01/19 17:59:08, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(33) Got NTLMSSP neg_flags=0x60080215 Anonymous login successful [2004/01/19 17:59:10, 1] client/client.c:do_connect(2598) Domain=[MERRIT] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] tree connect failed: NT_STATUS_ACCESS_DENIED This is what I get without the -N OPTION: smbclient //guelyb-2k-2/pool mypassword -U GUELYB -d3 [2004/01/19 18:14:23, 3] param/loadparm.c:lp_load(3926) lp_load: refreshing parameters [2004/01/19 18:14:23, 3] param/loadparm.c:init_globals(1303) Initialising global parameters [2004/01/19 18:14:23, 3] param/params.c:pm_process(566) params.c:pm_process() - Processing configuration file /etc/samba/smb.conf [2004/01/19 18:14:23, 3] param/loadparm.c:do_section(3429) Processing section [global] [2004/01/19 18:14:23, 2] lib/interface.c:add_interface(79) added interface ip=192.168.1.102 bcast=192.168.1.255 nmask=255.255.255.0 [2004/01/19 18:14:23, 3] client/client.c:main(2954) Client started (version 3.0.0-15). [2004/01/19 18:14:23, 3] libsmb/namequery.c:resolve_lmhosts(850) resolve_lmhosts: Attempting lmhosts lookup for name guelyb-2k-20x20 [2004/01/19 18:14:23, 3] lib/util_sock.c:open_socket_out(690) Connecting to 192.168.1.101 at port 445 [2004/01/19 18:14:23, 2] libsmb/cliconnect.c:cli_session_setup_spnego(635) Doing spnego session setup (blob length=16) [2004/01/19 18:14:23, 3] libsmb/cliconnect.c:cli_session_setup_spnego(639) server didn't supply a full spnego negprot [2004/01/19 18:14:24, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(469) Got challenge flags: [2004/01/19 18:14:24, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(33) Got NTLMSSP neg_flags=0x60890215 [2004/01/19 18:14:24, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(518) NTLMSSP: Set final flags: [2004/01/19 18:14:24, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(33) Got NTLMSSP neg_flags=0x60080215 session setup failed: NT_STATUS_LOGON_FAILURE Any help you can offer will be GREATLY appreciated. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
CVS update: samba/source/passdb
Date: Mon Jan 19 08:52:53 2004 Author: idra Update of /data/cvs/samba/source/passdb In directory dp.samba.org:/tmp/cvs-serv26621/source/passdb Modified Files: passdb.c pdb_get_set.c pdb_gums.c pdb_ldap.c pdb_mysql.c pdb_pgsql.c pdb_sql.c pdb_xml.c Log Message: 1. The most part of this patch changed the unknown_3 flag to the now known meaning of fields_present bit mask. Also avoid it being saved in backends (0 is saved where removing the unit32 would have produced a format change). Also add support in samr functions to correctly interpret the flags. Flags still not set properly (eg. still set all flags 0xff as previous code), need a tool to test this properly (I',ve done preliminary tests with samba4 rpc torture and it seem to work properly against w2k). 2. Patch for handlig the flag user must change password at next logon in usrmgr based on Jianliang Lu [EMAIL PROTECTED] patch Revisions: passdb.c1.216 = 1.217 http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/passdb.c.diff?r1=1.216r2=1.217 pdb_get_set.c 1.31 = 1.32 http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_get_set.c.diff?r1=1.31r2=1.32 pdb_gums.c 1.4 = 1.5 http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_gums.c.diff?r1=1.4r2=1.5 pdb_ldap.c 1.130 = 1.131 http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_ldap.c.diff?r1=1.130r2=1.131 pdb_mysql.c 1.16 = 1.17 http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_mysql.c.diff?r1=1.16r2=1.17 pdb_pgsql.c 1.2 = 1.3 http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_pgsql.c.diff?r1=1.2r2=1.3 pdb_sql.c 1.2 = 1.3 http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_sql.c.diff?r1=1.2r2=1.3 pdb_xml.c 1.12 = 1.13 http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_xml.c.diff?r1=1.12r2=1.13
CVS update: samba/source/rpcclient
Date: Mon Jan 19 08:52:53 2004 Author: idra Update of /data/cvs/samba/source/rpcclient In directory dp.samba.org:/tmp/cvs-serv26621/source/rpcclient Modified Files: cmd_samr.c Log Message: 1. The most part of this patch changed the unknown_3 flag to the now known meaning of fields_present bit mask. Also avoid it being saved in backends (0 is saved where removing the unit32 would have produced a format change). Also add support in samr functions to correctly interpret the flags. Flags still not set properly (eg. still set all flags 0xff as previous code), need a tool to test this properly (I',ve done preliminary tests with samba4 rpc torture and it seem to work properly against w2k). 2. Patch for handlig the flag user must change password at next logon in usrmgr based on Jianliang Lu [EMAIL PROTECTED] patch Revisions: cmd_samr.c 1.163 = 1.164 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpcclient/cmd_samr.c.diff?r1=1.163r2=1.164
CVS update: samba/source/sam
Date: Mon Jan 19 08:52:54 2004 Author: idra Update of /data/cvs/samba/source/sam In directory dp.samba.org:/tmp/cvs-serv26621/source/sam Modified Files: gums_api.c gums_helper.c gums_tdbsam2.c Log Message: 1. The most part of this patch changed the unknown_3 flag to the now known meaning of fields_present bit mask. Also avoid it being saved in backends (0 is saved where removing the unit32 would have produced a format change). Also add support in samr functions to correctly interpret the flags. Flags still not set properly (eg. still set all flags 0xff as previous code), need a tool to test this properly (I',ve done preliminary tests with samba4 rpc torture and it seem to work properly against w2k). 2. Patch for handlig the flag user must change password at next logon in usrmgr based on Jianliang Lu [EMAIL PROTECTED] patch Revisions: gums_api.c 1.7 = 1.8 http://www.samba.org/cgi-bin/cvsweb/samba/source/sam/gums_api.c.diff?r1=1.7r2=1.8 gums_helper.c 1.5 = 1.6 http://www.samba.org/cgi-bin/cvsweb/samba/source/sam/gums_helper.c.diff?r1=1.5r2=1.6 gums_tdbsam2.c 1.2 = 1.3 http://www.samba.org/cgi-bin/cvsweb/samba/source/sam/gums_tdbsam2.c.diff?r1=1.2r2=1.3
CVS update: samba4/source/torture/rpc
Date: Mon Jan 19 08:59:14 2004 Author: idra Update of /data/cvs/samba4/source/torture/rpc In directory dp.samba.org:/tmp/cvs-serv29453/source/torture/rpc Modified Files: samr.c Log Message: Add test to set single fields in fields_present with info21. Revisions: samr.c 1.38 = 1.39 http://www.samba.org/cgi-bin/cvsweb/samba4/source/torture/rpc/samr.c.diff?r1=1.38r2=1.39
CVS update: samba4/source
Date: Mon Jan 19 14:22:32 2004 Author: metze Update of /home/cvs/samba4/source In directory dp.samba.org:/tmp/cvs-serv31622 Modified Files: Makefile.in configure.in dynconfig.c Log Message: remove all unused stuff from Makefile.in and some stuff from configure.in and dynconfig.[ch] make all makes bin/gentest bin/masktest bin/smbd bin/locktest bin/smbclient bin/smbtorture bin/ndrdump now metze Revisions: Makefile.in 1.67 = 1.68 http://www.samba.org/cgi-bin/cvsweb/samba4/source/Makefile.in.diff?r1=1.67r2=1.68 configure.in1.11 = 1.12 http://www.samba.org/cgi-bin/cvsweb/samba4/source/configure.in.diff?r1=1.11r2=1.12 dynconfig.c 1.1.1.1 = 1.2 http://www.samba.org/cgi-bin/cvsweb/samba4/source/dynconfig.c.diff?r1=1.1.1.1r2=1.2
CVS update: samba4/source/include
Date: Mon Jan 19 14:22:32 2004 Author: metze Update of /home/cvs/samba4/source/include In directory dp.samba.org:/tmp/cvs-serv31622/include Modified Files: dynconfig.h Log Message: remove all unused stuff from Makefile.in and some stuff from configure.in and dynconfig.[ch] make all makes bin/gentest bin/masktest bin/smbd bin/locktest bin/smbclient bin/smbtorture bin/ndrdump now metze Revisions: dynconfig.h 1.1.1.1 = 1.2 http://www.samba.org/cgi-bin/cvsweb/samba4/source/include/dynconfig.h.diff?r1=1.1.1.1r2=1.2
CVS update: samba4/source
Date: Mon Jan 19 14:57:56 2004 Author: metze Update of /home/cvs/samba4/source In directory dp.samba.org:/tmp/cvs-serv8089 Modified Files: Makefile.in Log Message: add make [un]installtorture and let this be called by make [un]install we can later change this and the make all to not do the torture stuff, but for know only developers will use samba4... metze Revisions: Makefile.in 1.68 = 1.69 http://www.samba.org/cgi-bin/cvsweb/samba4/source/Makefile.in.diff?r1=1.68r2=1.69
CVS update: samba4/source/rpc_server
Date: Tue Jan 20 04:32:17 2004 Author: tridge Update of /home/cvs/samba4/source/rpc_server In directory dp.samba.org:/tmp/cvs-serv22990 Modified Files: dcerpc_server.c Log Message: avoid a copy of the data being input to the dcerpc server in the most common case of there being no pending partial data and a full dcerpc packet being received. We should use this same model for the smb server. It gives us efficient memory usage while allowing for completely async socket operations. Revisions: dcerpc_server.c 1.22 = 1.23 http://www.samba.org/cgi-bin/cvsweb/samba4/source/rpc_server/dcerpc_server.c.diff?r1=1.22r2=1.23
CVS update: samba4/source/ntvfs/ipc
Date: Tue Jan 20 05:54:12 2004 Author: tridge Update of /home/cvs/samba4/source/ntvfs/ipc In directory dp.samba.org:/tmp/cvs-serv8192 Modified Files: vfs_ipc.c Log Message: dcerpc server output now copes with the client blocking part way through a read. This happens to also avoid a memcpy on output for dcerpc over tcp. Revisions: vfs_ipc.c 1.11 = 1.12 http://www.samba.org/cgi-bin/cvsweb/samba4/source/ntvfs/ipc/vfs_ipc.c.diff?r1=1.11r2=1.12
CVS update: samba4/source/rpc_server
Date: Tue Jan 20 05:54:17 2004 Author: tridge Update of /home/cvs/samba4/source/rpc_server In directory dp.samba.org:/tmp/cvs-serv8207 Modified Files: dcerpc_server.c dcerpc_tcp.c Log Message: dcerpc server output now copes with the client blocking part way through a read. This happens to also avoid a memcpy on output for dcerpc over tcp. Revisions: dcerpc_server.c 1.23 = 1.24 http://www.samba.org/cgi-bin/cvsweb/samba4/source/rpc_server/dcerpc_server.c.diff?r1=1.23r2=1.24 dcerpc_tcp.c1.6 = 1.7 http://www.samba.org/cgi-bin/cvsweb/samba4/source/rpc_server/dcerpc_tcp.c.diff?r1=1.6r2=1.7
CVS update: samba4/source/librpc/rpc
Date: Tue Jan 20 06:07:04 2004 Author: tridge Update of /home/cvs/samba4/source/librpc/rpc In directory dp.samba.org:/tmp/cvs-serv10795 Modified Files: dcerpc.h dcerpc_smb.c dcerpc_tcp.c dcerpc_util.c Log Message: added code to the RPC-SPOOLSS test that demonstrates that policy handles are not shared between open dcerpc connections, even when those connections are on the same SMB socket. I have tested this with w2k3, w2k and NT4. It seems that policy handles have a strict scope of the dcerpc connection on which they were opened. I realise that this goes against existing folk-law in the team, but it seems that the previous testing (I'm not sure who did this?) was wrong. Perhaps clients do send us policy handles from other connections, but if they do then the correct thing to do is to fail the operation with a dcerpc fault. I suspect that failing it with exactly the right dcerpc fault code is important. Revisions: dcerpc.h1.16 = 1.17 http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/rpc/dcerpc.h.diff?r1=1.16r2=1.17 dcerpc_smb.c1.8 = 1.9 http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/rpc/dcerpc_smb.c.diff?r1=1.8r2=1.9 dcerpc_tcp.c1.6 = 1.7 http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/rpc/dcerpc_tcp.c.diff?r1=1.6r2=1.7 dcerpc_util.c 1.18 = 1.19 http://www.samba.org/cgi-bin/cvsweb/samba4/source/librpc/rpc/dcerpc_util.c.diff?r1=1.18r2=1.19
CVS update: samba4/source/torture/rpc
Date: Tue Jan 20 06:07:09 2004 Author: tridge Update of /home/cvs/samba4/source/torture/rpc In directory dp.samba.org:/tmp/cvs-serv10826 Modified Files: spoolss.c Log Message: added code to the RPC-SPOOLSS test that demonstrates that policy handles are not shared between open dcerpc connections, even when those connections are on the same SMB socket. I have tested this with w2k3, w2k and NT4. It seems that policy handles have a strict scope of the dcerpc connection on which they were opened. I realise that this goes against existing folk-law in the team, but it seems that the previous testing (I'm not sure who did this?) was wrong. Perhaps clients do send us policy handles from other connections, but if they do then the correct thing to do is to fail the operation with a dcerpc fault. I suspect that failing it with exactly the right dcerpc fault code is important. Revisions: spoolss.c 1.30 = 1.31 http://www.samba.org/cgi-bin/cvsweb/samba4/source/torture/rpc/spoolss.c.diff?r1=1.30r2=1.31
