[Samba] Does someone know about the mean of this log ?
[2004/05/03 08:42:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! [2004/05/03 08:42:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! [2004/05/03 08:42:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! [2004/05/03 08:43:09, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! [2004/05/03 08:43:09, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! What kind of mistake does it mean ? For information, I've done a Samba 3 member of a 2k domain, and with a kinit and a net ads join, i have successfully joined it. Now, I just can't authenticate from a windows client to the samba server. Do I use the a bad backend ? Thanks for reading ! _ Bloquez les fenêtres pop-up, c'est gratuit ! http://toolbar.msn.fr -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Esta es una alerta del antivirus Pisuke
*** NOTA: Se ha detectado contenido hostil en este mensaje y ha sido borrado. *** Time: 09:14:32 5/3/2004 Scan result: Mail modified to remove malicious content Protocol: SMTP in File Name / Mail Subject: /opt/eSafe/eSafeCR/SPOOL/1083604543 Source: [EMAIL PROTECTED] Destination: [EMAIL PROTECTED] Details: readme.txt .pif Msg #705 - The file type pif,APPLICATION/OCTET-STREAM is on the Restricted List. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Minor Bug Report ?
Hi everyone ! I just wanna say that I can't configure Samba 3.0.3 to compile with LDAP Support ( --with-ldap ) Here's the log : checking for LDAP support... yes checking ldap.h usability... no checking ldap.h presence... no checking for ldap.h... no checking lber.h usability... no checking lber.h presence... no checking for lber.h... no configure: error: ldap.h is needed for LDAP support Thanks for reading ! _ Dialoguez en direct et gratuitement avec vos amis sur http://g.msn.fr/FR1001/866 MSN Messenger ! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] cannot change user password with CTRL-ALT-DEL
On Mon, Apr 19, 2004 at 10:13:39PM +0200, Angel Chiou wrote: I've been running samba (currently 2.2.3a-13 for Debian) as a PDC with W2k clients for over two years. The system was up and running quite well for a long time. A couple of days ago, I installed the following MS-patches: MS04-011 MS04-012 MS04-013 MS04-014 MS02-011 Now when users try to change their password from the w2k clients using CTRL-ALT-DEL, a popup window appears saying: password change failed, the domain xxx is not available. But the fact is that the password has been succesfully changed (i.e. the popup should state: password succesfully changed.). When users log out and login again, the login obviusly fails, since users use their old passwords instead of the new ones... I wonder whether I am the only one who is experiencing this problem and whether somebody knows how to solve this problem. I can send the logs (nmbd.log, smbd.log and log.machinename) if somebody needs them. Let me try and reproduce this first, thanks for the heads-up. I'll be in touch if we can't reproduce it. I've had exactly the same problem with XP Pro WS after the latest patches from Redmond it's just that samba was 2.2.8a. I've upgraded to 3.0.2 (as distributed by RedHAt Enterprise)... No luck. Finally I've downloaded and compiled 3.0.3; same. On 2.2.8a I was using smbpasswd, in the 3.0.x attempts I've used LDAP. Same symptoms, one blindly changes the password while getting an error message. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem with net rpc vampire - Samba 3.0.2a
Hello i have a running Samba 3.0.2a Server on a SuSE Linux 9.0 dist. i have configure my samba 3.0.2a for a BDC and i log in to the domain i want migrate. first i did this for joining the domain : linux:~ # net rpc join -S DEMONT01 -w DOMNT -U Administrator%Server Joined domain DOMNT. then i did this for migrate the user and groups linux:~ # net rpc vampire -S DEMONT01 -U administrator%Server then i get this output : linux:~ # net rpc vampire -S DEMONT01 -U administrator%Server Fetching DOMAIN database SAM_DELTA_DOMAIN_INFO not handled Creating unix group: 'Dom?nen-Admins' Creating unix group: 'Dom?nen-Benutzer' Creating unix group: 'Dom?nen-G?ste' Creating unix group: 'Marketing' Creating unix group: 'Service' Creating unix group: 'Auftragsabwicklung' Creating account: Administrator [2004/04/30 05:51:44, 0] passdb/pdb_smbpasswd.c:add_smbfilepwd_entry(595) add_smbfilepwd_entry: entry with name administrator already exists Creating account: Gast Could not create posix account info for 'Gast' Creating account: DEMONT01$ Could not create posix account info for 'DEMONT01$' Creating account: mstrohm Could not create posix account info for 'mstrohm' Creating account: fklinzer Could not create posix account info for 'fklinzer' Creating account: kforgo Could not create posix account info for 'kforgo' Creating account: DEMOSMB01$ Could not create posix account info for 'DEMOSMB01$' [2004/04/30 05:51:44, 0] utils/net_rpc_samsync.c:fetch_group_mem_info(594) Could not find global group 512 [2004/04/30 05:51:44, 0] utils/net_rpc_samsync.c:fetch_group_mem_info(594) Could not find global group 513 [2004/04/30 05:51:44, 0] utils/net_rpc_samsync.c:fetch_group_mem_info(594) Could not find global group 514 [2004/04/30 05:51:44, 0] utils/net_rpc_samsync.c:fetch_group_mem_info(594) Could not find global group 1002 [2004/04/30 05:51:44, 0] utils/net_rpc_samsync.c:fetch_group_mem_info(594) Could not find global group 1003 [2004/04/30 05:51:44, 0] utils/net_rpc_samsync.c:fetch_group_mem_info(594) Could not find global group 1004 Creating unix group: 'MTS Impersonators' Fetching BUILTIN database SAM_DELTA_DOMAIN_INFO not handled Creating unix group: 'Administratoren' Creating unix group: 'Benutzer' Creating unix group: 'Druck-Operatoren' Creating unix group: 'G?ste' Creating unix group: 'Konten-Operatoren' Creating unix group: 'Replikations-Operator' Creating unix group: 'Server-Operatoren' Creating unix group: 'Sicherungs-Operatoren' linux:~ # linux:~ # pdbedit -L testuser:502: administrator:501: root:0:root winxp1$:505: win_two_k$:506: linux:~ # now i saw my groups and users are not migratet so what can i do Please help me :=) M.f.G Ferdinand -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Unique Logo demonstrates Personality of Your Business
Are you starting a new business, launching a new service or want to change your corporate image? Then you need a top quality logo that will complete business identity and will help you attract more customers. To create a powerful logo you need a skilled design and marketing team that will put all its experience, knowledge, and talent into your project. Review some of our works to make sure that we can give you that professional and trustworthy image at a reasonable price and within your time frame. We love what we do, we are very good at it, and we are completely focused on your goals. If you need design service other than logo or corporate identity design, we are here to help. Whether you need a new package, a brochure, a website, a magazine ad or any other design or marketing service, we have a professional vendor on our list of recommended design companies that specializes in this. Please visit us at: http://yol3.us/6467.asp Our goal is to help you increase your revenues! Sincerely, Clemencia Garcia _ Press here to remove your address from this list: http://www.yol3.us/out.php?email=[TO] _ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE : [Samba] Minor Bug Report ?
Yes, I've installed openLDAP-server and client. I'm under Mandrake 9.2, maybe I need the SRPM. I'll try this ... Thanks Bertram _ MSN Messenger http://g.msn.fr/FR1001/866 : dialoguez en direct et gratuitement avec vos amis ! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Cannot sync browser list
Hello I made exactly the same things and got the same messages on Friday but they totally disappeared today (all the clients were turned off this week-end) The old server's IP adress may have stayed active on a client (a mistery of NetBIOS ?) Maybe the solution is to turn off all the clients during a certain amount of time Cheers Norbert Frode Lillerud a écrit : Hi, Samba 3.0.2a, Debian linux, 2.6.x kernel, PDC server, WinXP clients I'm setting up a PDC server, and it's also acting as a browse master. A few days ago the computer was given the IP adress 10.0.0.6 by our DHCP server. Since then I've changed the network to use 192.168.1.x IP's instead, and the server has now got 192.168.1.3 as it's IP. But, even though I've restarted the server several times I get the following in my log.nmbd. Note that there is NO 10.0.0.6 computer anywhere on the net. [2004/04/29 15:34:05, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(327) become_domain_master_browser_wins: Attempting to become domain master browser on workgroup LILLESTROM, subnet UNICAST_SUBNET. [2004/04/29 15:34:05, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(341) become_domain_master_browser_wins: querying WINS server from IP 192.168.1.3 for domain master browser name LILLESTROM1b $ [2004/04/29 15:34:06, 0] nmbd/nmbd_become_dmb.c:become_domain_master_query_success(225) become_domain_master_query_success: There is already a domain master browser at IP 10.0.0.6 for workgroup LILLESTROM registered on subnet UNICAST_SUBNET. How can I get this to work properly?? Thanks Frode -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Changed UIDs from winbind after server reboot!
I set up a samba 3.0.2 server as member server in a NT4 Domain. Winbind works great and I can use the NT Domain users for all I need. At the moment I'm testing different shares with their permissions. The Samba will also be our printserver, so I set up also cups and added the printers to samba with cupsaddsmb - Great tool! . Users could connect and all worked fine. After a reboot I had to do after adding a kernel option (RTC), suddenly the test user told me that they could no longer connect to the shares and the printers. When looking I found out, that all permissions where changed. The first time I thought I did a big mistake because working too long in the night. :-) 2 Days later I rebooted the server again - and had the same thing. Alls permissions where changed. I tested stopping samba and winbind - nothing strage happened. Then I rebooted the server again - and a lot of UID changed again. Did I missunderstood completely the function of winbind or is there something wrong here? Here a little more infos to the system Let me know if other infos are needed. Tia Angela woody 3 with actual sec. patches samba 3.0.2 from backports here's the smb.conf [global] workgroup = AAG netbios name = S10amba security = domain encrypt passwords = yes password server = 192.168.100.31 wins server = 192.168.100.30 host msdfs = yes # #template shell = /bin/false #template homedir = /work/home/%u max mux = 200 max open files = 8000 ### # Umgang mit Daten ### display charset = ISO8859-1 unix charset = ISO8859-1 dos charset = CP850 #username level = 5 case sensitive = no Preserve case = yes log file = /var/log/samba/log.smbd.%m log level = 1 follow symlinks = yes #Diverse Einstellungen für DOS und Win ### map archive = yes map system = no map hidden = no ### # Globale Druckeinstellungen ### load printers = yes printing = cups printcap name = cups #schreibgeschützte Dateien dürfen gelöscht werden delete readonly = yes #Samba als Zeitserver; hauptsache es sind mal alle Uhren gleich time server = yes dos filetimes = yes fake directory create times = yes dos filetime resolution = yes # sichert die Integrität der Dateien gegen Verlust von Performance ; Am heikelsten sind Datenbankdateien also nur diese ohne oplocks ; und zwar für alle Verzeichnisse veto oplock files = /*.mdb/*.dbf/ deadtime = 5 # Die folgenden Punkte müssen auf yes gestellt werden, wenn Samba ; als PDC fungieren soll. os level = 20 local master = yes preferred master = no domain master = no wins support = no domain logons = no winbind separator = + # Benutze uids von 1-2 für Domänenbenutzer winbind uid = 1-2 # Benutze gids von 1-2 für Domänengruppen winbind gid = 1-2 # Erlaube enumeration von winbind user und gruppen winbind enum users = yes winbind enum groups = yes name resolve order = wins hosts lmhosts bcast # Sicherheitseinstellungen hosts allow = 127.0.0.1 192.168.100.0/24 hosts deny = 0.0.0.0/0 [IPC$] path = /tmp hosts allow = 127.0.0.1 192.168.100.0/24 hosts deny = 0.0.0.0/0 # #Drucker # [print$] comment = Download Drucker Treiber path = /work/printerdrivers browseable = yes guest ok = no public = yes read only = yes write list = AAG+Domänen-Admins, root, AAG+Administrator [printers] path = /var/spool/samba browseable = yes public = yes guest ok = no writable = no printable = yes printer admin = AAG+Domänen-Admins, root, AAG+Administrator write list = AAG+Domänen-Admins, root, AAG+Administrator [AAG-Daten] path = /work/dfs msdfs root = yes browseable = yes writeable = yes valid users [EMAIL PROTECTED] [AV] path=/work/aag/edv/AV Valid users = AAG+HHA @AAG+Domänen-Admins write list = AAG+ HHA @AAG+Domänen-Admins [EDV] path = /work/aag/edv browseable = yes valid users = AAG+Domänen-Admins write list = AAG+Domänen-Admins admin users = AAG+Domänen-Admins # ACL Einstellungen nt acl support = yes inherit acl = yes create mask = 770 directory mask = 770 Security mask = 770 directory security mask = 0777 force security mode = force directory security mode = force group = AAG+Domänen-Admins force create mode = 0770 force directory mode = 770
[Samba] logon scripts doen't run
Hi all, I have problem with my logon scripts. drwxrwxrwx5 root root 4096 May 2 20:26 . drwxr-xr-x 25 root root 4096 May 3 09:36 .. drwxrwxrwx2 root root 4096 May 2 20:11 netlogon drwxr-xrwt4 root root 4096 May 2 22:14 profiles drwxrwxrwx6 root root 4096 May 2 20:11 shares I store them in netlogon folder. In smb.conf [global] logon script= %G.cmd [netlogon] comment = logon scriptek path= samba/netlogon guest ok= yes writable= no share modes = no browseable = no I have IT, HR, etc group, and of course I have IT.cmd, HR.cmd, etc. They are all r--r--r-- root root. Idea? regards, Roland -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 3.0.3 Pure Samba Domain. Servers can't list and don't recognize d omain users.
We have a Samba PDC (Mandrake 9) a BDC (RH 7.3) and a Memberserver (Solaris 2.8). A configuration which is working OK in 3.0.1 seems to be broken in 3.0.3. Everything (except NTLM authentication) has been working fine. After installing 3.0.3 you cannot list domain users and the member server doesn't recoginize users as domain members. wbinfo gives the following results On PDC, BDC and Member server: wbinfo -u Error looking up domain users On PDC and BDC: wbinfo -m BUILTIN On memberserver: wbinfo -m MIAMI BUILTIN loglevel 10 winbindd logfiles extract: PDC: [2004/05/03 10:12:06, 10] nsswitch/winbindd.c:process_request(308) process_request: request fn LIST_USERS [2004/05/03 10:12:06, 3] nsswitch/winbindd_user.c:winbindd_list_users(590) [18196]: list users [2004/05/03 10:12:06, 10] nsswitch/winbindd.c:client_write(512) client_write: wrote 1300 bytes. [2004/05/03 10:12:06, 10] nsswitch/winbindd.c:winbind_client_read(458) client_read: read 0 bytes. Need 1824 more for a full request. [2004/05/03 10:12:06, 5] nsswitch/winbindd.c:winbind_client_read(465) read failed on sock 18, pid 18196: EOF BDC: [2004/05/03 10:17:00, 10] nsswitch/winbindd.c:process_request(308) process_request: request fn LIST_USERS [2004/05/03 10:17:00, 3] nsswitch/winbindd_user.c:winbindd_list_users(590) [30956]: list users [2004/05/03 10:17:00, 10] nsswitch/winbindd.c:client_write(512) client_write: wrote 1300 bytes. [2004/05/03 10:17:00, 10] nsswitch/winbindd.c:winbind_client_read(458) client_read: read 0 bytes. Need 1824 more for a full request. [2004/05/03 10:17:00, 5] nsswitch/winbindd.c:winbind_client_read(463) read failed on sock 17, pid 30956: EOF [2004/05/03 10:17:26, 6] nsswitch/winbindd.c:new_connection(343) accepted socket 16 [2004/05/03 10:17:26, 10] nsswitch/winbindd.c:winbind_client_read(458) Member server [2004/05/03 11:18:46, 10] nsswitch/winbindd.c:winbind_client_read(458) client_read: read 0 bytes. Need 1824 more for a full request. [2004/05/03 11:18:46, 5] nsswitch/winbindd.c:winbind_client_read(465) read failed on sock 19, pid 5631: EOF [2004/05/03 11:19:00, 6] nsswitch/winbindd.c:new_connection(343) accepted socket 19 [2004/05/03 11:19:00, 10] nsswitch/winbindd.c:winbind_client_read(458) client_read: read 1568 bytes. Need 256 more for a full request. [2004/05/03 11:19:00, 0] nsswitch/winbindd.c:process_loop(726) process_loop: Invalid request size from pid 5633: 1568 bytes sent, should be 1824 This usually means that you are running old wbinfo, pam_winbind or libnss_winbind clients [2004/05/03 11:19:00, 6] nsswitch/winbindd.c:new_connection(343) accepted socket 19 [2004/05/03 11:19:00, 10] nsswitch/winbindd.c:winbind_client_read(458) client_read: read 1568 bytes. Need 256 more for a full request. [2004/05/03 11:19:00, 0] nsswitch/winbindd.c:process_loop(726) process_loop: Invalid request size from pid 5633: 1568 bytes sent, should be 1824 This usually means that you are running old wbinfo, pam_winbind or libns Any help would be appriciated Best regards Ole B. Larsen ** This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to which they are addressed. If you have received this e-mail in error please notify the system manager at [EMAIL PROTECTED] This e-mail and its contents do not constitute and shall not be considered as a financial commitment of Maersk Olie og Gas AS and its affiliates. Maersk Olie og Gas AS expressly disclaims any responsibility as to the accuracy and use of this e-mail and its contents. ** -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: SOME Suggestions on [Samba] Can't the very basic stuff to work
Thanks, but I am still having the same problem -- I made sure to reference the correct passwd file, but WinXP is still forcing me to logon as AGAMEMNON\Guest. Tim -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, May 03, 2004 6:11 AM To: [EMAIL PROTECTED] Subject: SOME Suggestions on [Samba] Can't the very basic stuff to work Hello Tim, I have read your posting on the samba mailing list. I suggest that you put following lines in your smb.conf encrypt password = yes smb passwd file = /etc/samba/smbpasswd passwd program = /bin/passwd %u CAUTION: The above paths to the smbpasswd and passwd file are related to my system. They differ from distribution to distribution. So on your Linux system the paths may be different. you may determine the path to those files by find / -name smbpasswd and find / -name passwd Now make sure that you have on your Linux system the users who shall have access to teh SAMBA Shares. I think in your case they are: tim AND chrissy Now, since you are using security=share, so no LDAP server, you need to add these users to your smbpasswd, due it is used for authentification. This shall be done by calling smbpasswd -a user_name so smbpasswd -a tim and smbpasswd -a chrissy you will be promted for a password when adding the user. Give the same password as the unix password for those users. BTW: You shall be the root-user to perform the above said. Now RESTART your smbd and nmbd deamons and verify that they are running: ps -ef|grep smbd and ps -ef|grep nmbd Well, then try to access the FIRST your home directories, from Windows. You may also shall consider to set security=user. In this case you do not need to specify valid users for shares. Hope this helps. Regards, Vlad -- NEU : GMX Internet.FreeDSL Ab sofort DSL-Tarif ohne Grundgebühr: http://www.gmx.net/dsl -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.3 bugs
I have encountered some bunch of bugs in Samba 3.0.3 (downloaded today). 1. passdb.tdb doesn't creating automatically, creating zero-length file and constantly reported Failed to open TDB file passdb.tdb. I make to create it manually through tdbtool (autoconvert when smbpasswd adding user). 3.0.2 has similar bug, but in 3.0.2 this bug was eliminated, when I erase smbpasswd from passdb backend line. 2. When personal configs (smb.conf.%U) didn't used and hide unreadble = yes, I can see directories with only rights to user (like mail) only when user included in admin users=... list. Ordinary user didn't see it, even it is owner. 3. Mostly ugly bug - user home directory disappearing, when smb.conf.username exists and included in smb.conf! So, when file (i.e shelton is username) smb.conf.shelton exists and has any content (even zero size) I cannot see share 'shelton' in shares list. Using per-user configuration file is valuable part of configuration and cannot be replaced (for me). And when I try to see shares list from administrator user (users.map contains root = administrator) I see Network path doesn't exist. So, I can give access to homedir only: - smb.conf.username didn't included in config or not exist - hide unreadable = no (for ordinary user) FreeBSD 4.10, Samba 3.0.3. I have tried default config with minimal adaption - no effect. -- With Best Regards. Rashid N. Achilov (RNA1-RIPE), Web: http://granch.ru/~shelton Granch Ltd. system administrator, e-mail: achilov [at] granch [dot] ru PGP: 83 CD E2 A7 37 4A D5 81 D6 D6 52 BF C9 2F 85 AF 97 BE CB 0A -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Automount SMB share on MAC OSX box
Hi all,
I'm trying to automount a smb share (samba 3.0.2a) on a linux box on an
osx (10..3x) client.
The LoginHook-Script using mount_smbfs works perfectly with cleartext
passwords
comming from LDAP (Linux).
The authentication works well with CRYPT{pw}. Is there any chance to
get the automount-process
running with an encrypted password in LDAP?.
Thanks,
Berthold Boesing
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Minor Bug Report ?
Yohann, You need to install the ldap developer package rpm before compiling samba. If you compiled ldap from source then you need to copy your ldap includes and libs to /usr/include and /usr/lib respectively. The easiest way is the definitely the rpm install. Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Yohann Ferreira Sent: Monday, May 03, 2004 3:18 AM To: [EMAIL PROTECTED] Subject: [Samba] Minor Bug Report ? Hi everyone ! I just wanna say that I can't configure Samba 3.0.3 to compile with LDAP Support ( --with-ldap ) Here's the log : checking for LDAP support... yes checking ldap.h usability... no checking ldap.h presence... no checking for ldap.h... no checking lber.h usability... no checking lber.h presence... no checking for lber.h... no configure: error: ldap.h is needed for LDAP support Thanks for reading ! _ Dialoguez en direct et gratuitement avec vos amis sur http://g.msn.fr/FR1001/866 MSN Messenger ! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbd eating 99% CPU what to do?
Do you know what can cause the smbd process to steal out the cpu usage (99%) and keep running like that for days? I have a Samba PDC 3.0.1pre3 running on top of RH9 2.4.20 kernel. Below is the current top report. Strangely, the PDC still responds in reasonable good response times to heavy network duty.traced the log.%machine name% and didn't find anything . I haven't tried to restart smb service yet. How can I debug and possibly prevent such stuff? 09:15:51 up 7 days, 5:04, 1 user, load average: 1.04, 1.03, 1.00 63 processes: 61 sleeping, 2 running, 0 zombie, 0 stopped CPU states: 19.1% user 0.9% system 0.0% nice 0.0% iowait 79.8% idle Mem: 513096k av, 506636k used,6460k free, 0k shrd, 112504k buff 327016k actv,1064k in_d, 127456k in_c Swap: 1052248k av, 28808k used, 1023440k free 339800k cached PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND 3474 root 16 0 1008 272 192 S 99.9 0.0 1989m 0 smbd 1 root 15 0 104 7656 S 0.0 0.0 0:04 0 init 2 root 15 0 00 0 SW0.0 0.0 0:00 0 keventd 3 root 34 19 00 0 SWN 0.0 0.0 0:02 0 ksoftirqd_CPU0 8 root 25 0 00 0 SW0.0 0.0 0:00 0 bdflush 4 root 15 0 00 0 SW0.0 0.0 0:04 0 kswapd 5 root 15 0 00 0 SW0.0 0.0 0:00 0 kscand/DMA 6 root 15 0 00 0 SW0.0 0.0 3:57 0 kscand/Normal 7 root 15 0 00 0 SW0.0 0.0 0:00 0 kscand/HighMem 9 root 15 0 00 0 SW0.0 0.0 0:00 0 kupdated 10 root 24 0 00 0 SW0.0 0.0 0:00 0 mdrecoveryd 16 root 21 0 00 0 SW0.0 0.0 0:00 0 scsi_eh_0 19 root 15 0 00 0 SW0.0 0.0 0:00 0 kjournald 77 root 25 0 00 0 SW0.0 0.0 0:00 0 khubd 2962 root 15 0 00 0 SW0.0 0.0 0:00 0 kjournald 2963 root 15 0 00 0 SW0.0 0.0 0:00 0 kjournald 2964 root 15 0 00 0 SW0.0 0.0 0:05 0 kjournald 2965 root 15 0 00 0 SW0.0 0.0 0:07 0 kjournald 3283 root 15 0 184 152 112 S 0.0 0.0 0:00 0 syslogd 3287 root 15 0524 0 S 0.0 0.0 0:00 0 klogd 3305 rpc 24 0764 0 S 0.0 0.0 0:00 0 portmap 3324 rpcuser 25 0804 0 S 0.0 0.0 0:00 0 rpc.statd 3420 root 15 0 380 232 136 S 0.0 0.0 0:00 0 sshd 3434 root 24 0 1164 0 S 0.0 0.0 0:00 0 xinetd 3455 root 15 0 984 468 328 S 0.0 0.0 0:00 0 sendmail 3464 smmsp 15 0 776 328 244 S 0.0 0.0 0:00 0 sendmail 3478 root 15 0 1396 804 608 S 0.0 0.1 0:08 0 nmbd 3487 root 15 060 2812 S 0.0 0.0 0:01 0 gpm 3497 root 15 0 148 13288 S 0.0 0.0 0:00 0 crond 3567 xfs 15 0 2456 12064 S 0.0 0.0 0:00 0 xfs 3597 daemon15 0 180 168 120 S 0.0 0.0 0:00 0 atd 3602 root 15 0 248 8864 S 0.0 0.0 0:00 0 atalkd 3606 root 23 0484 0 S 0.0 0.0 0:00 0 mingetty 3607 root 23 0484 0 S 0.0 0.0 0:00 0 mingetty 3608 root 23 0484 0 S 0.0 0.0 0:00 0 mingetty 3609 root 23 0484 0 S 0.0 0.0 0:00 0 mingetty 3610 root 23 0484 0 S 0.0 0.0 0:00 0 mingetty 3611 root 23 0484 0 S 0.0 0.0 0:00 0 mingetty 3612 root 15 0 6324 0 S 0.0 0.0 0:00 0 gdm-binary 3656 root 15 0 65360 784 216 S 0.0 0.1 0:01 0 X 3674 gdm 15 0 13424 2564 1364 S 0.0 0.4 0:00 0 gdmgreeter 3678 root 23 0 1844 0 S 0.0 0.0 0:00 0 papd 3682 root 15 0 476 288 208 S 0.0 0.0 0:00 0 afpd [EMAIL PROTECTED] root]# -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Permissions Problem using ADS
I am running Samba 3.0.3 on a Red Hat Linux 9 server (Intel based). I am using the procedures outlined in a document found at http://de.samba.org/samba/docs/man/unixclients.html. My Samba server is to be a Member Server in a W2K Active Directory (AD) domain. The procedures for this begin on page 13. I perform all steps outlined and get similar results. On the Samba server, I created a folder called /shares/test and, using SWAT, shared it with the share name of admin. Below is a copy of my smb.conf file: # Samba config file created using SWAT # from 192.168.2.201 (192.168.2.201) # Date: 2004/05/03 10:26:12 # Global parameters [global] unix charset = LOCALE workgroup = CALRCO realm = LRCO.LRC netbios name = SAMBA security = ADS password server = 192.168.2.190 username map = /etc/samba/smbusers log level = 1 syslog = 0 log file = /var/log/samba/%m max log size = 50 wins server = 192.168.2.247, 192.168.2.240 ldap ssl = no idmap uid = 1-2 idmap gid = 1-2 template primary group = template shell = /bin/bash path = /shares/admin [printers] comment = SMB Print Spool path = /var/spool/samba guest ok = Yes printable = Yes browseable = No [print$] comment = Printer Drivers path = /var/lib/samba/drivers admin users = root, Administrator write list = root [admin] comment = Lyman Richey Corporation path = /shares/test valid users = '@CALRCO\Domain Admins', @admin write list = '@CALRCO\Domain Admins', @admin read only = No create mask = 0777 directory mask = 0777 map acl inherit = Yes follow symlinks = No I run Active Directory Users and Computers and can see the Samba server. I can right-click on it and click Manage. When I go to manage the shares, I get the following error: Microsoft Management Console The system encountered the following errors while reading the list of shares: Error 5: Access is Denied. When I browse for the share as admin from the domain controller or any other domain member, I am prompted to login. What am I doing wrong? Regards, Allen Miller Network Administrator Lyman-Richey Corporation 402-558-2727 mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Changed UIDs from winbind after server reboot!
Sounds like your idmap file is being removed on reboot. run testparm -sv | grep directory and see where the lock directory is located. Make sure the file winbindd_idmap.tdb in this directory is not getting removed somehow on reboot. Check your winbindd log file to see if there are errors there. [EMAIL PROTECTED] wrote: I set up a samba 3.0.2 server as member server in a NT4 Domain. Winbind works great and I can use the NT Domain users for all I need. At the moment I'm testing different shares with their permissions. The Samba will also be our printserver, so I set up also cups and added the printers to samba with cupsaddsmb - Great tool! . Users could connect and all worked fine. After a reboot I had to do after adding a kernel option (RTC), suddenly the test user told me that they could no longer connect to the shares and the printers. When looking I found out, that all permissions where changed. The first time I thought I did a big mistake because working too long in the night. :-) 2 Days later I rebooted the server again - and had the same thing. Alls permissions where changed. I tested stopping samba and winbind - nothing strage happened. Then I rebooted the server again - and a lot of UID changed again. Did I missunderstood completely the function of winbind or is there something wrong here? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Logging domain Logon/Logoff
Has anyone run accross a way to log domain logon/logoffs? Thanks, Mike -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] performance problem with samba in any version and small files
Hallo Pascal Hahn, I got big performance roblems in here with our big file server. We got a 2.4 ghz Intel xeon in there, 1 gb ram and 2 scsi hds in softraid 1 on an adaptec Adaptec ASC-29320 U320. The array is set up with standard ext3 system. We are running samba on it with our business softwares data on it. Its a program which uses lots of small and some bigger text files to store info in. When we work on the server with 4 persons we got about 1200 files locked abd being read. it isnt that much of data(per client about 50 mb transferred) but the speed is veery slow. I get about 10 mb/s from the raid in all which is nothing. I also got the samba process eating all 100 % of my cpu. I tried to move the files outside the raid but that didnt have any effect on the performance. Does anyone have an idea how i can speed up the performance? Is it possible that the locking slows down the performance so much? Have you the Chance to change the Filesystem (to reiser or xfs) ? These FS _should_ be better on a lot of Files in a Directory and Handling of that. Or play with the Options -R stripe=stripe_size and -J device=other_journal_device of mkfs.ext3. Hope it helps Thomas -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Roaming Profiles
I read the documents on disabling roaming profiles for my Samba PDC (they really don't work in my environment). It says this: There are three ways of doing this: In smb.conf Affect the following settings and ALL clients will be forced to use a local profile: logon home and logon path Now I do want to do it to all clients. I have a LOT of them... But this sentence makes no sense. What exactly is it trying to tell me to do?? I feel stupid every time I read it because I don't get it... Help! :) JMS -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Solution For MS ACCESS on Samba Share
I am using Samba 2.2.8 and this fixed my problem with MS ACCESS. Make sure your ms access has the following options set. Click Tools Click Options Click General Tab and make sure the Default Database folder points to your Samba share Click Advanced Tab and make sure Default Open Mode = shared Default record locking = Edited Record Open databases using record-level locking is checked In your Samba shared set the option force create mode = 777 My MS ACCESS database runs like a charm now. Hope this helps you. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: cannot change user password with CTRL-ALT-DEL
Hi, please, look to my mail Re: probleb with 'passwd chat' and 'passwd program' (Apr. 24) where I described my observations about the same (similar) problem with my server. Jeremy Allison [EMAIL PROTECTED] wrote: Let me try and reproduce this first, thanks for the heads-up. I'll be in touch if we can't reproduce it. M. Vancl -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: specified network name no more available
I was stung by this bug yesterday myself and although there are numerous references to this error message I haven't seen any qualified resolution of the problem. .. ... Because I think someone from the Samba team should shed some light on the topic and explain under what circumstances this pathological behavious can be expected. I think Volker fixed this post 3.0.3 (see the latest SVN SAMBA_3_0 tree). Thanks Jerry. Awfully nice of you to let me know that it was fixed in 303. There was no response to my posting but I didn't want to pester you on this assuming it is not a very popular problem. Nice that it has been resolved. Volker normally informs us when a package is ready. I look up his site from time to time but his mail is always first post so to say. I'll install it on my SuSE 9.1/64-bit as soon as he can bake it or else grab it myself. Cheers Dragan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] My PDC Conversion Project
It did work with 2.2.8a, but that was apparently before the release of this hotfix. I verified that my problem is infact the same hotfix issue. Machines I have that don't have this hotfix work fine even on the new setup. The ones that do have it get the domain not avalible error. JMS -Original Message- From: Andrew Bartlett [mailto:[EMAIL PROTECTED] Sent: Friday, April 30, 2004 7:10 PM To: Josh Skains Cc: [EMAIL PROTECTED] Subject: Re: [Samba] My PDC Conversion Project On Sat, 2004-05-01 at 09:22, Josh Skains wrote: I have 3.0.2a (with about 75 machines/users) installed as a PDC for my Win2k users and found an oddity. (waiting for a bin version of 3.0.3 for RH8.0) All was fine before I left 2.2.8 But now when users hit CTL-ALT-DEL and change the password, they get domain not available. When they log in, they get the logon scripts to execute, and anything else I do to list users from the domain controller, they come up. Everything else is just working fine, so I am at a loss on why this one specific thing is broke. What is odd is the password DOES change. But a user wouldn't know because of that message. I tried a lot of things. I disabled Unix sync, I migrated to tdbsam backend (migration went find). I am literally banging my head against the wall. Known issue with MS04-11/KB828241. (see many other posts on this list). The fact that it works with Samba 2.2.8 is interesting. I have reproduced it locally, but it not clear if there are easy solutions. Can you please confirm that it did work with 2.2.8a? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba printers
I have a domain - a samba server as a PDC (3.0.0-15 version) and a few computers running WinXP, WIN 2000 and WIN98. I try to make a script to automatically install the printers I have on the server to windows machine. The script has to be run when users log in. I read the samba HOWTO manual but I didn't find anything there. Does anybody have any idea about this? Thanks __ Do you Yahoo!? Win a $20,000 Career Makeover at Yahoo! HotJobs http://hotjobs.sweepstakes.yahoo.com/careermakeover -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3 ldap password sync
Well, I seem to have gotten past the most difficult parts as far as Samba and LDAP are concerned. I'm able to have a user log in to the domain, and get authenticated via LDAP. The user can also change the LDAP password from the Windows screen (control-alt-delete-change password). So most stuff as far as the windows domain login appears. My problem is this. Linux and other users need to be able to change their ldap password. If they log into the box, or change it via a web interface it changes their ldap password, but samba doesn't seem to recognize it. For example as root I changed a users password via the command line and it said it was changing the LDAP password. I confirmed the password was changed by accessing a web page that authenticates using ldap and the new password worked. I then tried to access via samba and the new password did no work. Am I doing something wrong or missing something obvious? Does samba cache passwords somewhere? I've got ldap sync set to on but that doesn't appear to be working. Any help would be greatly appreciated Kevin [EMAIL PROTECTED] __ Do you Yahoo!? Win a $20,000 Career Makeover at Yahoo! HotJobs http://hotjobs.sweepstakes.yahoo.com/careermakeover -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 ldap password sync
Well, I seem to have gotten past the most difficult parts as far as Samba and LDAP are concerned. I'm able to have a user log in to the domain, and get authenticated via LDAP. The user can also change the LDAP password from the Windows screen (control-alt-delete-change password). So most stuff as far as the windows domain login appears. My problem is this. Linux and other users need to be able to change their ldap password. If they log into the box, or change it via a web interface it changes their ldap password, but samba doesn't seem to recognize it. For example as root I changed a users password via the command line and it said it was changing the LDAP password. I confirmed the password was changed by accessing a web page that authenticates using ldap and the new password worked. I then tried to access via samba and the new password did no work. Am I doing something wrong or missing something obvious? Does samba cache passwords somewhere? I've got ldap sync set to on but that doesn't appear to be working. Are you using smbpasswd to change the users password? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 ldap password sync
Kevin Metz wrote: Well, I seem to have gotten past the most difficult parts as far as Samba and LDAP are concerned. I'm able to have a user log in to the domain, and get authenticated via LDAP. The user can also change the LDAP password from the Windows screen (control-alt-delete-change password). So most stuff as far as the windows domain login appears. My problem is this. Linux and other users need to be able to change their ldap password. If they log into the box, or change it via a web interface it changes their ldap password, but samba doesn't seem to recognize it. For example as root I changed a users password via the command line and it said it was changing the LDAP password. I confirmed the password was changed by accessing a web page that authenticates using ldap and the new password worked. I then tried to access via samba and the new password did no work. Am I doing something wrong or missing something obvious? Does samba cache passwords somewhere? I've got ldap sync set to on but that doesn't appear to be working. Windows encodes the password differently to the unix side, and as a result, the password is stored in the ldap database twice. When you change the password from Samba, it updates the two encoded password versions both for windows and for unix. When you change the password for unix, it only changes the unix password and not the windows encoded version - thus your problem. There is an extention available for the newer versions of openldap (not sure if it is openldap specific) that will allow openldap to handle the encoding of passwords for you in the various formats - this means that it will just work no matter what software changed the password, even if the software had no idea about windows. I haven't used it before though - try and read up on openldap for more details. Regards, Graham -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem with net rpc vampire - Samba 3.0.2a
Le lun 03/05/2004 à 11:01, Ferdinand Klinzer a écrit : Hello i have a running Samba 3.0.2a Server on a SuSE Linux 9.0 dist. Creating account: Gast Could not create posix account info for 'Gast' Creating account: DEMONT01$ Could not create posix account info for 'DEMONT01$' Creating account: mstrohm Could not create posix account info for 'mstrohm' Creating account: fklinzer Could not create posix account info for 'fklinzer' Creating account: kforgo Could not create posix account info for 'kforgo' Creating account: DEMOSMB01$ Could not create posix account info for 'DEMOSMB01$' Hi wild guess: you are using a ldap backend, smbldap-tools and you forgot to configure nss-ldap. Cheers -- Marcel de Riedmatten signature.asc Description: Ceci est une partie de message =?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e=2E?= -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Windows XP client - intermittent 'network name cannot befound' loading profile
Hello Tim, I have verified and recreated your problem. As soon as I switch SAMBA option security=share , I have exactly the same problems like you, when trying to access a SAMBA share via Windows Add Network Places The only option I have to logon is DOOMIT\Guets (DOOMIT is the NetBIOS Name of my samba server). HOWEVER: There *aren't any* problems, if I try to map the share as network drive (via Win explorer) when SAMBA option security=share. In Windows Explorer Menu: Tools-Map Network Drive Click on the Connect using different user name and enter a valid SAMBA user name and password. Then enter the network path to the share in the Folder Field of the Map Network Drive Dialog click finish and that's it. BUT: Things are different when SAMBA option security=user. Then I do *not* have any problems to access the share via add network places. Here a login-dialog is displayed where you can enter a user name and password. Mapping network drive via Windows Explorer also works w/o any problem. BTW: I think that in your smb.conf there might by a error: from your posting of smb.conf you have valid users = tim chrissy however, according to the on-line documentation, names in the valid user parameter have to be separated by comma (,) So it should be valid users = tim, chrissy I hope this helps! Regards, Vlad! P.S. Perhaps a developer should take a look on this!! -- Original Message --- Fedora Core 1:Samba 3.0.0-15 trying to connect with Windows XP Pro and Home Hello All, I am really hoping for some help on this one. I am going through the very basic process of trying to learn Samba and get my home network up -- followed the HowTo verbatim. I have several problems that are show-stoppers. (1) I can#65533;ft print. I have a hp Photosmart 7150 installed locally on the linux box and it works perfectly when printing from linux. I can see the printer from the samba share in windows and can install and #65533;esuccessfully#65533;f print (the job reads #65533;gremote downlevel document#65533;h Status: spooling User:nobody) but nothing prints. Lpq says: Photosmart7150 is ready No entries Zero activity on the printers part. (2) I can#65533;ft access my share. If I try to go to start#65533;¨run and type \\agamemnon\data the only option for a username is AGAMEMNON\Guest and its disabled. I could really use some help on this. Thanks for any pointers. I know this is not secure -- just want to prove the concept first. Tim #My smb.conf [global] workgroup = archenland netbios name = agamemnon security = share printcap name = cups disable spoolss = Yes show add printer wizard = No printing = cups [homes] comment = Tim and Chrissy's Home Directories # we set the valid users = to the current share's name valid users = %S read only = No # we might want to set this to No after troubleshooting browseable = Yes [data] # this is the main share we run all our files from comment=Tim and Chrissy's data store path = /home/data guest ok = No valid users = tim chrissy read only = No writeable = Yes [printers] path = /var/spool/samba guest ok = Yes printable = Yes use client driver = Yes browseable = No -- Sie haben neue Mails! - Die GMX Toolbar informiert Sie beim Surfen! Jetzt aktivieren unter http://www.gmx.net/info -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Xerox 555
The network/proint controller keeps rebooting. Is this user fixable or do I have to call call service. -- Stephen Carville UNIX and Network Administrator DPSI 310-342-3602 [EMAIL PROTECTED] -- If you have been voting for politicians who promise to give you goodies at someone else's expense, then you have no right to complain when they take your money and give it to someone else, including themselves. --Thomas Sowell (1992) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] [MailServer Notification] To External Sender: a virus was found a nd action taken.
ScanMail for Microsoft Exchange took action on the message. The message details were: Sender = [EMAIL PROTECTED] Recipient(s) = [EMAIL PROTECTED]; Subject = You cannot do that! Scanning time = 05/03/2004 17:00:32 Engine/Pattern = 7.000-1004/1.883.00 Action taken on message: The attachment document05.zip contained WORM_NETSKY.P virus. ScanMail took the action: Deleted. NWIU#5 Email Scan - A virus was detected in the email you sent. To: [EMAIL PROTECTED]; From [EMAIL PROTECTED] Date: 05/03/2004 05:00 PM Subject: You cannot do that!. Action: document05.zip/Deleted -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Printing with and without cups on the same machine
Hi all! We have a samba 3.0.2a-Debian running in combination with cups. I want to use cups to print to all normal printers (e.g. HP Laserjet), which seems to run. But I want also use a printer-script to genereate pdf Files using gs (no, I don't want to use the pdf backend providet on the cups web site, for several reasons...) On a machine running samba 2.2.3a-13 without cups, the printer works wunderful with the following settings: [pdf-writer] path = /var/spool/pdf/ valid users = marco printable = Yes print command = /usr/local/bin/pdf-script %s %U %H What settings should I use to get the same script running on the machine described above? The current config looks like this: [global] printing = cups printcap name = cups load printers = yes [printers] path = /var/spool/samba write list = @root printer admin = @lpadmin create mask = 0700 guest ok = Yes printable = Yes printing = cups browseable = No [pdf-writer] path = /var/spool/samba printing = bsd printable = Yes guest ok = Yes print command = /usr/local/bin/pdf-script %s %U %H In the logfile i found: [2004/05/03 23:18:55, 0] printing/print_cups.c:cups_queue_get(899) Unable to get jobs for ipp://localhost/printers/pdf-writer - client-error-not-found How can I tell samba to prints directly to the pdf-writer, without trying to use cups? Any hint would be highly appreciated! Thanks in Advance, Marco. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Printing with and without cups on the same machine
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marco Zimmermann wrote: | Hi all! | | We have a samba 3.0.2a-Debian running in combination with cups. | | I want to use cups to print to all normal printers (e.g. HP | Laserjet), which seems to run. | | But I want also use a printer-script to genereate pdf Files using | gs (no, I don't want to use the pdf backend providet on the cups | web site, for several reasons...) This was fixed in 3.0.3. The 'printing' parameter is now usuable as documented in smb.conf(5). cheers, jerry - -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFAlsCgIR7qMdg1EfYRAuvwAKDTyJV0r631JOFLl/4xupbrCwLDRACgondb EFNOekPWGhpSayr38pzQGBk= =rKoE -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba PDC
Does Samba3 require windows machine accounts? I need to have users authenticate to a Samba PDC and be able to run logon scripts when authenticated, BUT NOT have to have machine accounts for every user be setup. In other words, can the user authenticate without his/her machine being part of the Domain? Thanks, Rich -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Renamed PDC, now user profiles don't work
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I just changed the NetBIOS name of my PDC (*not* the name of the domain) and now the security properties of the domain user profile on my Win2kSP4 workstation shows S-1-5-21-... as the user rather than the username. Also, System Properties|User Profiles shows that the account has been switched to a local profile and has been *deleted.* Worse yet, I've tried disjoining and re-joining the domian repeatedly, with and without NetBIOS aliases, to no avail. Help? - -- Anthony Chavez http://www.anthonychavez.org/ mailto:[EMAIL PROTECTED]jabber:[EMAIL PROTECTED] -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) iD8DBQFAlu+ybZTbIaRBRXERAtWRAJ4oV5UHl8aWtl72XEp3bpHhJIhmcACfTloZ Us6eZUyajOad5Z2iR/OUPT4= =9KUL -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Renamed PDC, now user profiles don't work
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 03 May 2004 19:19:41 -0600 Anthony Chavez [EMAIL PROTECTED] wrote: I just changed the NetBIOS name of my PDC (*not* the name of the domain) and now the security properties of the domain user profile on my Win2kSP4 workstation shows S-1-5-21-... as the user rather than the username. It turned out that this particular machine had a very shaky network connection. Please disregard my post. ;-) - -- Anthony Chavez http://www.anthonychavez.org/ mailto:[EMAIL PROTECTED]jabber:[EMAIL PROTECTED] -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) iD8DBQFAlvYObZTbIaRBRXERAh0SAJ4rTe7+kLCS9WudItD93WipbtXmqQCeKJwA 9qZg+T4Y+4ZiIA30y5ciQaI= =3VD0 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: SOME Suggestions on [Samba] Can't the very basic stuff to work
Simple File Sharing - My Computer window, Tools menu, Folders Options, View tab, Advanced settings, then check box at bottom of the list (usually). As for the constant username and password prompts, that's something different. You have to get into the Security Settings, Password Policy. The Local Security Policy shortcut, in the Administrative Tools is the way you would get at that. It took me a while to find that one. I believe the policy that you are looking for is the Minimum password length. Set it to 0, according to the Help info, that is supposed to allow blank passwords. Hope that helps... Eric -Original Message- From: Tim Booher [mailto:[EMAIL PROTECTED] Sent: May 3, 2004 7:49 PM To: 'Eric Johnson'; [EMAIL PROTECTED] Subject:RE: SOME Suggestions on [Samba] Can't the very basic stuff to work No -- not that I know -- how do I check that? I have been sharing lots of files with other windows computers and have several drives mapped. When I don't have windows passwords, it always prompts me for my password and username. Thanks, Tim My smb.conf # ** [global] workgroup = archenland netbios name = agamemnon security = share printcap name = cups disable spoolss = Yes show add printer wizard = No printing = cups encrypt password = yes smb passwd file = /etc/samba/smbpasswd passwd program = /usr/bin/passwd %u [homes] comment = Tim and Chrissy's Home Directories # we set the valid users = to the current share's name valid users = %S read only = No # we might want to set this to No after troubleshooting browseable = Yes [data] # this is the main share we run all our files from comment=Tim and Chrissy's data store path = /home/data valid users = tim chrissy read only = No writeable = Yes [printers] path = /var/spool/samba guest ok = Yes printable = Yes use client driver = Yes browseable = No -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric Johnson Sent: Monday, May 03, 2004 6:50 PM To: [EMAIL PROTECTED] Subject: RE: SOME Suggestions on [Samba] Can't the very basic stuff to work A beginner just listening in... On Windows XP Pro, are you using Simple File Sharing? I know that on a Windows network it forces all network connections to be Guests. Eric -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: May 3, 2004 3:12 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject:SOME Suggestions on [Samba] Can't the very basic stuff to work Hello Tim, I have verified and recreated your problem. As soon as I switch SAMBA option security=share , I have exactly the same problems like you, when trying to access a SAMBA share via Windows Add Network Places The only option I have to logon is DOOMIT\Guets (DOOMIT is the NetBIOS Name of my samba server). HOWEVER: There *aren't any* problems, if I try to map the share as network drive (via Win explorer) when SAMBA option security=share. In Windows Explorer Menu: Tools-Map Network Drive Click on the Connect using different user name and enter a valid SAMBA user name and password. Then enter the network path to the share in the Folder Field of the Map Network Drive Dialog click finish and that's it. BUT: Things are different when SAMBA option security=user. Then I do *not* have any problems to access the share via add network places. Here a login-dialog is displayed where you can enter a user name and password. Mapping network drive via Windows Explorer also works w/o any problem. BTW: I think that in your smb.conf there might by a error: from your posting of smb.conf you have valid users = tim chrissy however, according to the on-line documentation, names in the valid user parameter have to be separated by comma (,) So it should be valid users = tim, chrissy I hope this helps! Regards, Vlad! P.S. Perhaps a developer should take a look on this!! Thanks, but I am still having the same problem -- I made sure to reference the correct passwd file, but WinXP is still forcing me to logon as AGAMEMNON\Guest. Tim Subject: SOME Suggestions on [Samba] Can't the very basic stuff to work Hello Tim, I have read your posting on the samba mailing list. I suggest that you put following lines in your smb.conf encrypt password = yes smb passwd file = /etc/samba/smbpasswd passwd program = /bin/passwd %u CAUTION: The above paths to the smbpasswd and passwd file are related to my system. They differ from distribution to distribution. So on your Linux system the paths may be different. you may determine the path to those files by find / -name smbpasswd and find / -name passwd Now make sure that you have on your Linux system the users who shall have access to teh SAMBA Shares. Regards, Vlad -- NEU : GMX Internet.FreeDSL Ab sofort DSL-Tarif ohne Grundgeb|hr: http://www.gmx.net/dsl -- To unsubscribe from this list go to the following
[Samba] smbpasswd - root can change, but no-one else
At http://www.faqchest.com/linux/samba-l/smb-03/smb-0301/smb-030119/smb03011617_26135.html Judy Lin describes a problem whereby an smbpasswd could be changed by root but not by a user, also well documented by Dan Kirkpatrick at http://www.faqchest.com/linux/samba-l/smb-03/smb-0301/smb-030104/smb03010612_20748.html - but Judy reckons she found out what was wrong and fixed it before anyone responded, and Dan didn't. I have exactly the same problem and can't find a fix anywhere else. Has this been resolved anywhere? Thanks. I'm running samba 2.2.8a-107. -- - This email was prepared and sent on a PC running Linux. It hasn't been checked for viruses because there's no such thing as a Linux virus... :-) This communication is intended for the addressee only. Please let the sender know by e-mail if you receive this in error. Thank-you for your co-operation. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: SOME Suggestions on [Samba] Can't the very basic stuff to work
No -- not that I know -- how do I check that? I have been sharing lots of files with other windows computers and have several drives mapped. When I don't have windows passwords, it always prompts me for my password and username. Thanks, Tim My smb.conf # ** [global] workgroup = archenland netbios name = agamemnon security = share printcap name = cups disable spoolss = Yes show add printer wizard = No printing = cups encrypt password = yes smb passwd file = /etc/samba/smbpasswd passwd program = /usr/bin/passwd %u [homes] comment = Tim and Chrissy's Home Directories # we set the valid users = to the current share's name valid users = %S read only = No # we might want to set this to No after troubleshooting browseable = Yes [data] # this is the main share we run all our files from comment=Tim and Chrissy's data store path = /home/data valid users = tim chrissy read only = No writeable = Yes [printers] path = /var/spool/samba guest ok = Yes printable = Yes use client driver = Yes browseable = No -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric Johnson Sent: Monday, May 03, 2004 6:50 PM To: [EMAIL PROTECTED] Subject: RE: SOME Suggestions on [Samba] Can't the very basic stuff to work A beginner just listening in... On Windows XP Pro, are you using Simple File Sharing? I know that on a Windows network it forces all network connections to be Guests. Eric -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: May 3, 2004 3:12 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject:SOME Suggestions on [Samba] Can't the very basic stuff to work Hello Tim, I have verified and recreated your problem. As soon as I switch SAMBA option security=share , I have exactly the same problems like you, when trying to access a SAMBA share via Windows Add Network Places The only option I have to logon is DOOMIT\Guets (DOOMIT is the NetBIOS Name of my samba server). HOWEVER: There *aren't any* problems, if I try to map the share as network drive (via Win explorer) when SAMBA option security=share. In Windows Explorer Menu: Tools-Map Network Drive Click on the Connect using different user name and enter a valid SAMBA user name and password. Then enter the network path to the share in the Folder Field of the Map Network Drive Dialog click finish and that's it. BUT: Things are different when SAMBA option security=user. Then I do *not* have any problems to access the share via add network places. Here a login-dialog is displayed where you can enter a user name and password. Mapping network drive via Windows Explorer also works w/o any problem. BTW: I think that in your smb.conf there might by a error: from your posting of smb.conf you have valid users = tim chrissy however, according to the on-line documentation, names in the valid user parameter have to be separated by comma (,) So it should be valid users = tim, chrissy I hope this helps! Regards, Vlad! P.S. Perhaps a developer should take a look on this!! Thanks, but I am still having the same problem -- I made sure to reference the correct passwd file, but WinXP is still forcing me to logon as AGAMEMNON\Guest. Tim Subject: SOME Suggestions on [Samba] Can't the very basic stuff to work Hello Tim, I have read your posting on the samba mailing list. I suggest that you put following lines in your smb.conf encrypt password = yes smb passwd file = /etc/samba/smbpasswd passwd program = /bin/passwd %u CAUTION: The above paths to the smbpasswd and passwd file are related to my system. They differ from distribution to distribution. So on your Linux system the paths may be different. you may determine the path to those files by find / -name smbpasswd and find / -name passwd Now make sure that you have on your Linux system the users who shall have access to teh SAMBA Shares. Regards, Vlad -- NEU : GMX Internet.FreeDSL Ab sofort DSL-Tarif ohne Grundgeb|hr: http://www.gmx.net/dsl -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Message quarantined
Scanner: MailMonitor for SMTP v1.2.0 Problem description: Email data: MessageID: [EMAIL PROTECTED] From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: Subject: Mail Delivery (failure [EMAIL PROTECTED]) Scanning part [] Scanning part [] Scanning part [message.scr] Attachment validity check: executable found. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 ldap password sync
On Tue, 2004-05-04 at 05:32, Graham Leggett wrote: There is an extention available for the newer versions of openldap (not sure if it is openldap specific) that will allow openldap to handle the encoding of passwords for you in the various formats - this means that it will just work no matter what software changed the password, even if the software had no idea about windows. I haven't used it before though - try and read up on openldap for more details. In OpenLDAP CVS, there is a contributed password set module called smbk5pwd. The purpose of this module is to do exactly this. Now, I was meant to be testing it out, and checking it worked - I've not done that, but if somebody wants to beat me to it, I'll be most pleased :-) Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: SOME Suggestions on [Samba] Can't the very basic stuff to work
A beginner just listening in... On Windows XP Pro, are you using Simple File Sharing? I know that on a Windows network it forces all network connections to be Guests. Eric -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: May 3, 2004 3:12 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject:SOME Suggestions on [Samba] Can't the very basic stuff to work Hello Tim, I have verified and recreated your problem. As soon as I switch SAMBA option security=share , I have exactly the same problems like you, when trying to access a SAMBA share via Windows Add Network Places The only option I have to logon is DOOMIT\Guets (DOOMIT is the NetBIOS Name of my samba server). HOWEVER: There *aren't any* problems, if I try to map the share as network drive (via Win explorer) when SAMBA option security=share. In Windows Explorer Menu: Tools-Map Network Drive Click on the Connect using different user name and enter a valid SAMBA user name and password. Then enter the network path to the share in the Folder Field of the Map Network Drive Dialog click finish and that's it. BUT: Things are different when SAMBA option security=user. Then I do *not* have any problems to access the share via add network places. Here a login-dialog is displayed where you can enter a user name and password. Mapping network drive via Windows Explorer also works w/o any problem. BTW: I think that in your smb.conf there might by a error: from your posting of smb.conf you have valid users = tim chrissy however, according to the on-line documentation, names in the valid user parameter have to be separated by comma (,) So it should be valid users = tim, chrissy I hope this helps! Regards, Vlad! P.S. Perhaps a developer should take a look on this!! Thanks, but I am still having the same problem -- I made sure to reference the correct passwd file, but WinXP is still forcing me to logon as AGAMEMNON\Guest. Tim Subject: SOME Suggestions on [Samba] Can't the very basic stuff to work Hello Tim, I have read your posting on the samba mailing list. I suggest that you put following lines in your smb.conf encrypt password = yes smb passwd file = /etc/samba/smbpasswd passwd program = /bin/passwd %u CAUTION: The above paths to the smbpasswd and passwd file are related to my system. They differ from distribution to distribution. So on your Linux system the paths may be different. you may determine the path to those files by find / -name smbpasswd and find / -name passwd Now make sure that you have on your Linux system the users who shall have access to teh SAMBA Shares. Regards, Vlad -- NEU : GMX Internet.FreeDSL Ab sofort DSL-Tarif ohne Grundgeb|hr: http://www.gmx.net/dsl -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Mapping a Drive to a folder under a share from Linux to Windows 2003
Hi, I have a Linux Workstation and a Windows 2003 Server that I have setup to have a top level share called \\servername\homes$ with user folders under this share name. I have patched the kernel for cifs and also compiled the mount.cifs utility from Samba 3.0.3 source because windows 2003 would accept a standard mount -t smbfs command. From my windows clients I map H: directly to \\servername\homes$\username folder. However it appears that I can't map to a subfolder on a share from linux, is this correct? The command mount -t cifs //servername/homes$/username /mnt/h -o username=myusername,password=mypassword fails with mount error 22 = Invalid argument Refer to the mount.cifs(8) manual page (e.g.man mount.cifs) Anyone else encountered this ? Cheers james -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 3.0.3 upgrade comments
Hello Samba gurus. I've just finished an upgrade from 2.2.8a to 3.0.3 on my old pc file server. Many years ago it used to be a RH 6.2 machine but most packages (including Samba) have now been built from source. I have a couple of observations that might be worth including in the documentation/man pages to help other users: The swat man page instructions for editing /etc/inetd.conf refer to: swat stream tcp nowait.400 root /usr/local/samba/bin/swat swat but this should now be: swat stream tcp nowait.400 root /usr/local/samba/sbin/swat swat ^ as the swat is now installed to sbin by default. The default install now places smbd and nmbd in the sbin directory as well where previously they were in bin. The /etc/rc.d/init.d/smb script I have on my machine was pointing to the bin directory so I just restarted the old binaries until I noticed that a small edit was required to point to the new location. It was only chasing down the reason for swat still showing the old version number and the absence of the shares/connections on the swat status page that gave me hint that something was wrong. It would be useful if samba told a log file what version it was when it starts - certainly would have saved me a lot time. Keep up the good work. Regards, Graham -- Graham Vincent GPV Enterprises Limited PO Box 5001, New Plymouth, New Zealand Ph +64 21 046 8910 Fax +64 6 753 6970 [EMAIL PROTECTED] http://www.gpv.co.nz -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbd eating 99% CPU what to do?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Vladuta Cristian wrote: | | Do you know what can cause the smbd process to steal out | the cpu usage (99%) and keep running like that for days? run strace and see what it is doing. Also look at the logs and see if anything suspcious shows up. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFAlsJ6IR7qMdg1EfYRAicXAJ90TySl2wGtZOcPOzQY3NaSk0h8CQCeLCXr w2nUmnvv9lsuTGh5gHsKFRg= =o0Ls -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 ldap password sync
Thanks for the feedback! This is exactly what I needed! This totally explains what I was trying to figure out and I can move on from here. Thank you again for the feedback Kevin Well, I seem to have gotten past the most difficult parts as far as Samba and LDAP are concerned. I'm able to have a user log in to the domain, and get authenticated via LDAP. The user can also change the LDAP password from the Windows screen (control-alt-delete-change password). So most stuff as far as the windows domain login appears. My problem is this. Linux and other users need to be able to change their ldap password. If they log into the box, or change it via a web interface it changes their ldap password, but samba doesn't seem to recognize it. For example as root I changed a users password via the command line and it said it was changing the LDAP password. I confirmed the password was changed by accessing a web page that authenticates using ldap and the new password worked. I then tried to access via samba and the new password did no work. Am I doing something wrong or missing something obvious? Does samba cache passwords somewhere? I've got ldap sync set to on but that doesn't appear to be working. Windows encodes the password differently to the unix side, and as a result, the password is stored in the ldap database twice. When you change the password from Samba, it updates the two encoded password versions both for windows and for unix. When you change the password for unix, it only changes the unix password and not the windows encoded version - thus your problem. There is an extention available for the newer versions of openldap (not sure if it is openldap specific) that will allow openldap to handle the encoding of passwords for you in the various formats - this means that it will just work no matter what software changed the password, even if the software had no idea about windows. I haven't used it before though - try and read up on openldap for more details. __ Do you Yahoo!? Win a $20,000 Career Makeover at Yahoo! HotJobs http://hotjobs.sweepstakes.yahoo.com/careermakeover -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
SOME Suggestions on [Samba] Can't the very basic stuff to work
Hello Tim, I have verified and recreated your problem. As soon as I switch SAMBA option security=share , I have exactly the same problems like you, when trying to access a SAMBA share via Windows Add Network Places The only option I have to logon is DOOMIT\Guets (DOOMIT is the NetBIOS Name of my samba server). HOWEVER: There *aren't any* problems, if I try to map the share as network drive (via Win explorer) when SAMBA option security=share. In Windows Explorer Menu: Tools-Map Network Drive Click on the Connect using different user name and enter a valid SAMBA user name and password. Then enter the network path to the share in the Folder Field of the Map Network Drive Dialog click finish and that's it. BUT: Things are different when SAMBA option security=user. Then I do *not* have any problems to access the share via add network places. Here a login-dialog is displayed where you can enter a user name and password. Mapping network drive via Windows Explorer also works w/o any problem. BTW: I think that in your smb.conf there might by a error: from your posting of smb.conf you have valid users = tim chrissy however, according to the on-line documentation, names in the valid user parameter have to be separated by comma (,) So it should be valid users = tim, chrissy I hope this helps! Regards, Vlad! P.S. Perhaps a developer should take a look on this!! Thanks, but I am still having the same problem -- I made sure to reference the correct passwd file, but WinXP is still forcing me to logon as AGAMEMNON\Guest. Tim Subject: SOME Suggestions on [Samba] Can't the very basic stuff to work Hello Tim, I have read your posting on the samba mailing list. I suggest that you put following lines in your smb.conf encrypt password = yes smb passwd file = /etc/samba/smbpasswd passwd program = /bin/passwd %u CAUTION: The above paths to the smbpasswd and passwd file are related to my system. They differ from distribution to distribution. So on your Linux system the paths may be different. you may determine the path to those files by find / -name smbpasswd and find / -name passwd Now make sure that you have on your Linux system the users who shall have access to teh SAMBA Shares. Regards, Vlad -- NEU : GMX Internet.FreeDSL Ab sofort DSL-Tarif ohne Grundgebühr: http://www.gmx.net/dsl -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Renamed PDC, now user profiles don't work
On Tue, 2004-05-04 at 11:46, Anthony Chavez wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 03 May 2004 19:19:41 -0600 Anthony Chavez [EMAIL PROTECTED] wrote: I just changed the NetBIOS name of my PDC (*not* the name of the domain) and now the security properties of the domain user profile on my Win2kSP4 workstation shows S-1-5-21-... as the user rather than the username. It turned out that this particular machine had a very shaky network connection. Please disregard my post. ;-) However, as a warning to others - this can happen. There was an issue (and it still happens for domain members, for their 'local' users) where if you rename a Samba machine, it can regenerate the local SAM sid. On a PDC, this is also the domain SID. In current versions of Samba (3.0.1 or 3.0.2 I think) we make sure that the 'domain' sid takes precedence, otherwise this really can happen, and you need to get/set the domain sid. net getlocalsid OLDNETBIOSNAME net setlocalsid S-. should do the job, for 3.0. It also happens in Samba 2.2, but we don't have 'net' there, and it's harder to fix. I think there are details in the archives. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] %S not resolving in smb.conf file
Hey all, Everyone (esp. Vladimir Atanaskovik, Joe Cipale, and Eric Johnson) has been most helpful, but I am still struggling with an annoying issue. I have the following smb.conf file: [global] workgroup = archenland netbios name = agamemnon security = share printcap name = cups disable spoolss = Yes show add printer wizard = No printing = cups encrypt password = Yes smb passwd file = /etc/samba/smbpasswd passwd program = /usr/bin/passwd %u [homes] valid users = %S read only = No browseable = No [test] path = /home/test valid users = tim read only = No writeable = Yes Now I can't get to the \\agamemnon\tim directory when I am logged in as user 'tim', I can get to the test share. If I swap out the %S for a hard-coded 'tim' like [homes] valid users = tim read only = No browseable = No Then I can access the directory easily. Any thoughts why %S is not resolving? is there anyway to echo these variables (other than putting them in a comment = %S in a share) Thanks, Tim -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] XP profiles problem - Samba 3.0.3 LDAP
[EMAIL PROTECTED] profiles]# ls -la total 16 drwxr-xrwt4 root Domain Admins 4096 May 4 13:03 . drwxr-xr-x4 root Domain Admins 4096 May 4 10:05 .. drwx-- 13 debraDomain Users 4096 May 4 12:52 debra drwx-- 14 root Domain Users 4096 May 4 13:14 john As you can see Debra's profile is created with the correct ownership(?) but John's is created as owner Administrator/root. Now the only difference is that John is a Member of Domain Admins although both john debra's primary group is 513 Domain Users [profiles] # chmod 1757 /domain/profiles path = /domain/profiles csc policy = disable profile acls = yes writeable = yes browseable = no create mask = 0600 directory mask = 0700 The next issue is unless I set the policy Do not check check for user ownership of Roaming profile folders to 'enabled' ie no checking. Debra can not access her remote profile (even though she is the owner) while john can access his. Can anybody shed some light on this issue. Regards John -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] How to Cross compile Samba Source
Hi, I am using samba-2.2.8a.tar.gz source and complied for regular linux. Now I am trying to cross compile it, but do not have any guidelines on how to do it? Anyone can help me on, making cross compilation work for arm-linux host. Any help is appreciated. Regards Pritesh As a well spent day brings happy sleep, so life well used brings happy death. - Leonardo da Vinci TATA ELXSI DISCLAIMER: The information contained in this message may be CONFIDENTIAL and is for the intended addressee only. Any unauthorized use, dissemination of the information, or copying of this message is prohibited. If you are not the intended addressed, please notify the sender immediately and delete this message. Tata Elxsi Ltd, Bangalore, India -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
SOME Suggestions on [Samba] Can't the very basic stuff to work
Hello Eric, can you pls. help me understand follwoing: You wrote that: Simple File Sharing forces all shares to be accessed as Guest. But, isn't that valid only for the paricular Win-XP computer ? So, if you set Simple File Sharing on a particular Win-XP computer, then all accesses to shares located on and exported by that particular computer will be mapped to Guest user. But is this also valid, if that particular Win-XP computer wants to access exported shares by and located on another system, e.g. SAMBA server ? I mean does the Simple File Sharing, setting on a client has any influence on how accesses are mapped to user on the server ? I tested with Simple File Sharing, on and off but no changes. Regards, Vlad -Original Message- Simple File Sharing - My Computer window, Tools menu, Folders Options, View tab, Advanced settings, then check box at bottom of the list (usually). As for the constant username and password prompts, that's something different. You have to get into the Security Settings, Password Policy. The Local Security Policy shortcut, in the Administrative Tools is the way you would get at that. It took me a while to find that one. I believe the policy that you are looking for is the Minimum password length. Set it to 0, according to the Help info, that is supposed to allow blank passwords. Hope that helps... Eric -Original Message- From: Tim Booher [mailto:tbbooher at cox.net] Sent: May 3, 2004 7:49 PM To: 'Eric Johnson'; samba at lists.samba.org Subject:RE: SOME Suggestions on [Samba] Can't the very basic stuff to work No -- not that I know -- how do I check that? I have been sharing lots of files with other windows computers and have several drives mapped. When I don't have windows passwords, it always prompts me for my password and username. Thanks, Tim My smb.conf # ** [global] workgroup = archenland netbios name = agamemnon security = share printcap name = cups disable spoolss = Yes show add printer wizard = No printing = cups encrypt password = yes smb passwd file = /etc/samba/smbpasswd passwd program = /usr/bin/passwd %u [homes] comment = Tim and Chrissy's Home Directories # we set the valid users = to the current share's name valid users = %S read only = No # we might want to set this to No after troubleshooting browseable = Yes [data] # this is the main share we run all our files from comment=Tim and Chrissy's data store path = /home/data valid users = tim chrissy read only = No writeable = Yes [printers] path = /var/spool/samba guest ok = Yes printable = Yes use client driver = Yes browseable = No -Original Message- From: samba-bounces+samba=theboohers.org at lists.samba.org [mailto:samba-bounces+samba=theboohers.org at lists.samba.org] On Behalf Of Eric Johnson Sent: Monday, May 03, 2004 6:50 PM To: samba at lists.samba.org Subject: RE: SOME Suggestions on [Samba] Can't the very basic stuff to work A beginner just listening in... On Windows XP Pro, are you using Simple File Sharing? I know that on a Windows network it forces all network connections to be Guests. Eric -Original Message- From: samba-bounces+ejohnson=imagewireless.ca at lists.samba.org [mailto:samba-bounces+ejohnson=imagewireless.ca at lists.samba.org] On Behalf Of miles123 at gmx.de Sent: May 3, 2004 3:12 PM To: tbbooher at cox.net Cc: samba at lists.samba.org Subject:SOME Suggestions on [Samba] Can't the very basic stuff to work Hello Tim, I have verified and recreated your problem. As soon as I switch SAMBA option security=share , I have exactly the same problems like you, when trying to access a SAMBA share via Windows Add Network Places The only option I have to logon is DOOMIT\Guets (DOOMIT is the NetBIOS Name of my samba server). HOWEVER: There *aren't any* problems, if I try to map the share as network drive (via Win explorer) when SAMBA option security=share. In Windows Explorer Menu: Tools-Map Network Drive Click on the Connect using different user name and enter a valid SAMBA user name and password. Then enter the network path to the share in the Folder Field of the Map Network Drive Dialog click finish and that's it. BUT: Things are different when SAMBA option security=user. Then I do *not* have any problems to access the share via add network places. Here a login-dialog is displayed where you can enter a user name and password. Mapping network drive via Windows Explorer also works w/o any problem. BTW: I think that in your smb.conf there might by a error: from your posting of smb.conf you have valid users = tim chrissy however, according to the on-line documentation, names in the valid user parameter have to be separated by comma (,) So it should be valid users = tim, chrissy I hope this helps! Regards, Vlad! P.S. Perhaps a developer should take a look on this!! -- Sie haben neue Mails! - Die GMX Toolbar
Re: [Samba] windows password longer than 8 chars will not work
--- Andrew Bartlett [EMAIL PROTECTED] wrote: On Sun, 2004-05-02 at 09:09, Tony Wallace wrote: Hello,, Is there anything I can do to our Samba servers to make Windows passwords longer than 8 characters work? Thanks. Our Samba servers use SERVER security, and authenticate against the same Windows 2K logon server (PDC) that serves all our Windows 2K XP desktops. Any of us with a Windows network password less than or equal to 8 characters long can mount the Samba shares seamlessly, just like any Windows file server. However, if you set your Windows password longer than 8 characters, Samba authentication always fails. In general, we know that both Windows and Samba can use longer passwords- the problem occurs when the Windows desktop client tries to initiate a connection to the Samba server. Passwords longer than 8 just don't get transferred correctly from client to server, or so it seems. While probably unreated to your issue, you should move to 'security=domain', due to the numerous other known issues with 'security=server'. Have you tried connecting directly to the 'password server'? Samba simply passes on the 24 byte authentication response on to that server, and doesn't care too much what is inside it. As the password is hashed first with MD4 (normally) there is nothing special about longer/shorter passwords. Even the DES hash has it's internal breakup at 7 and a limit 14, so that's not the issue. So, it's an issues with the 'password server': What is the password server running? What did you use to set the password on that server? If the password server is Samba, are you sure you have not used a buggy 'getpass()' function when reading passwords in on that system (well known to cut passwords off at 8 chars). Samba will attempt to replace this function, but I suppose it's possible that the configure magic might not have fired correctly. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net ATTACHMENT part 2 application/pgp-signature name=signature.asc - Andrew, thank you for replying. Have you tried connecting directly to the 'password server'? Yes, the password server is also a Windows file server, and we connect to it frequently- that is, we mount shares on our Windows desktops. Never had any problem w/ long passwords in that context. What is the password server running? What did you use to set the password on that server? The password server is Windows NT. It is the PDC of the domain that holds all our personal Windows network logins. Each individual user sets/resets their own Windows password via their Windows desktop, in the usual Windows way. One of our Samba systems was run with SECURITY=user instead of SECURITY=server for several months. No Windows passwd server. Smbpasswd would accept a longer-than-8 pw when run from the Unix cmdline- but you still could not get a Windows client connection authenticated until you changed your Samba pw (using smbpasswd) to 8 chars or less. The longer-than-8 Windows pw fails only when Win 2K or XP desktops try to connect to the Samba servers. The longer pw works fine in every other respect- on the Windows network, on Solaris, and in smbpasswd. Thanks again- Tony __ Do you Yahoo!? Win a $20,000 Career Makeover at Yahoo! HotJobs http://hotjobs.sweepstakes.yahoo.com/careermakeover -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
svn commit: samba r454 - in branches/SAMBA_4_0/source/lib/ldb: common ldb_tdb
Author: tridge Date: 2004-05-03 09:34:18 + (Mon, 03 May 2004) New Revision: 454 Modified: branches/SAMBA_4_0/source/lib/ldb/common/ldb.c branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_tdb.c Log: allow a non-URL form of a filename to be used in ldb_connect(). This makes it a little easier to work with the ldb tools WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/source/lib/ldbrev=454nolog=1
svn commit: samba r455 - branches/SAMBA_3_0/packaging/Fedora
Author: jerry Date: 2004-05-03 14:40:35 + (Mon, 03 May 2004) New Revision: 455 Modified: branches/SAMBA_3_0/packaging/Fedora/samba.spec.tmpl Log: fixing a couple of bugs inthe specfile; (a) merge tpot's libsmbclienbt permissions fix from trunk, (b) fix typo when installing smbusers file WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=455nolog=1
svn commit: samba r457 - branches/SAMBA_4_0/source/torture/rpc
Author: tridge Date: 2004-05-03 14:54:47 + (Mon, 03 May 2004) New Revision: 457 Modified: branches/SAMBA_4_0/source/torture/rpc/samr.c Log: added some more samr tests to help me work out the right error codes in our new samr server WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=457nolog=1
svn commit: samba r458 - in branches/SAMBA_4_0/source: param rpc_server rpc_server/samr script
Author: tridge Date: 2004-05-03 14:58:08 + (Mon, 03 May 2004) New Revision: 458 Added: branches/SAMBA_4_0/source/rpc_server/samr/ branches/SAMBA_4_0/source/rpc_server/samr/dcesrv_samr.c branches/SAMBA_4_0/source/rpc_server/samr/samdb.c branches/SAMBA_4_0/source/script/provision.pl Modified: branches/SAMBA_4_0/source/param/loadparm.c branches/SAMBA_4_0/source/rpc_server/config.m4 Log: this is the (very primitive) beginnings of a SAMR server for Samba4. I'm committing this now so I can get comments on the approach. Note that you need to do something like this to initialise the SAM db: edit script/provision.pl script/provision.pl provision.ldif.out bin/ldbadd /path/to/private/sam.ldb provision.ldif.out WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=458nolog=1
svn commit: samba r460 - branches/SAMBA_3_0/source/printing
Author: jra Date: 2004-05-03 16:38:37 + (Mon, 03 May 2004) New Revision: 460 Modified: branches/SAMBA_3_0/source/printing/nt_printing.c Log: Fix for broken driver upload/delete path processing. Jeremy. WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=460nolog=1
svn commit: samba r461 - trunk/source/printing
Author: jra Date: 2004-05-03 16:38:40 + (Mon, 03 May 2004) New Revision: 461 Modified: trunk/source/printing/nt_printing.c Log: Fix for broken driver upload/delete path processing. Jeremy. WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=461nolog=1
svn commit: samba-web r37 - trunk/devel
Author: deryck Date: 2004-05-04 03:40:30 + (Tue, 04 May 2004) New Revision: 37 Modified: trunk/devel/TODO.html trunk/devel/index.html Log: Reorganized pages to remove outdated info and to clarify branch structure, the move toward Samba4, svn not cvs, etc. Also, tried to avoid over-lap of info across pages. WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=samba-webpath=/rev=37nolog=1
svn commit: samba r462 - branches/SAMBA_4_0/source/lib/ldb/ldb_tdb
Author: tridge Date: 2004-05-04 05:58:22 + (Tue, 04 May 2004) New Revision: 462 Modified: branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_tdb.c Log: added an explanation about the rather complex ltdb_key() function WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=462nolog=1
