[Samba] Samba 3.0.20 acls not working anymore and problem with winbindd_idmap.tdb
Hi Folks,
I am experiencing some problems with samba 3.0.20 which I can not solve
on my own. We have updated from samba 3.0.10 to samba 3.0.20, but I am
not sure when the problems started.
We had a problem with idmap - I had hoped to solve - before. Whenever
we rebooted the server, all of the ACLs got jumbled up. I thought that
our winbindd_idmap.tdb somehow got broken. I re-created it, but still
the problem persists. We use winbindd to get all the Groups and Users
from Active Directory, and we have 2 samba-servers joined to the same
domain. Now I have found out that this could be the cause of the
problem I have with my idmap. Is it a good idea to change winbindd
configuration to windbindd with an NSS/LDAP backend-based idmap
facility? How can I change form local tdb to ldap-tbs without using my
user and group assignsments? I can not afford to loose all or mess up
all the ALCs on the first server. I think this is a bigger issue and
needs to be thought over carefully.
But now to the other problem I have on the second and smaller
samba-server. I have had some trouble concerning access rights where
users were trying to save a file on a share getting "File exits" error
messages. (But the file did not exist before!) After another attempt to
save the same file the operation was successfull. I could not trace the
problem after examining the acls with getfacl on the server. Everything
seemed to be alright.
Here's the global-section of my smb.conf:
# Global parameters
[global]
workgroup = DTMS
netbios name = MAX
security = domain
password server = skynet, orion, *
server string = MAX rate one Fileserver
domain master = no
os level = 2
unix extensions = Yes
encrypt passwords = yes
interfaces = eth0
log level = 2
log file = /var/log/samba/%m
max log size = 2048
syslog = 0
acl check permissions = yes
#seems to change nothing...
name resolve order = lmhosts hosts bcast
wins support = no
wins server = 192.168.9.4
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
#
# winbind section
#
winbind uid = 1-2
winbind gid = 1-2
template shell = /bin/bash
template homedir = /distributed/samba-freigaben/user/%U
template shell = /bin/false
nt acl support = yes
winbind separator = +
veto files = /*.eml/*.nws/riched20.dll/*.{*}/
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
obey pam restrictions = yes
Removing and resetting the acls with setfacl as well as rebooting the
machine did not help either. I have tried to view the ACLS via mapped
Share through windows, but I don't even see the ACLs there. I only see
the local unix-rights (user and owner-group)
I have tried to view and change ACLS for a file named glossar.htm with
the following rights:
max:~ # ls -la /distributed/samba-freigaben/marketing/glossar.htm
-rwxrwxrwx+ 1 jordans Marketing_ges 26190 Apr 11 2001
/distributed/samba-freigaben/marketing/glossar.htm
max:~ # getfacl /distributed/samba-freigaben/marketing/glossar.htm
# file: distributed/samba-freigaben/marketing/glossar.htm
# owner: jordans
# group: Marketing_ges
user::rwx
group::rw-
group:RO_Management:rwx
group:RO_Technik:rwx
group:RO_marketing_intern:rwx
group:RO_marketing_extern:rwx
mask::rwx
other::rwx
Here's the configuration for the share marketing where the file
glossar.htm can be found:
[marketing]
comment = Marketing
path = /distributed/samba-freigaben/marketing
nt acl support = no
writeable = yes
browsable = yes
valid users = @ntadmins @RO_Technik @RO_Management
@RO_marketing_intern @marketing_extern
admin users = @ntadmins
[marketing_a]
comment = Adminshare marketing
copy = marketing
nt acl support = yes
browsable = no
admin users = @DTMS+Domänen-Admins DTMS+WenkP DTMS+JordanS
valid users = @DTMS+Domänen-Admins DTMS+WenkP DTMS+JordanS
I have mapped the Adminshare, that I can see nt acls... But I don't see
the ACLs, I just see the owner (JordanS) and group (Marketing_ges), as
well as root/Max.
Here are the IDs for this user and group:
max:~ # getent passwd |grep 10002
jordans:x:10002:1:Jordan,
Sabine:/distributed/samba-freigaben/user/jordans:/bin/false
max:~ # getent group |grep
10044
Marketing_ges:x:10044:HeideE,EhrlicC,GibmeiA,KrieseB,partnership,HoefliO,KoriteS,VorbecM,BarossM,ReiterB,DildeiF,LindemY,ConzenN,WirtzP,BockmaA,ZechliT,BuchD,JoergeM,PelkmaR,KottbusM,KartziO,LehmanM
When I try to change permissions via file properties/security tab I get
an Windows "Access Denied" - message... I have turned on Samba log
(loglevel10) and here are some
Re: [Samba] Strange automount problem with samba & LDAP
Hi all,
Finally I've found that in auth/auth.c, 'check_ntlm_password' function
stat works as expected, and I added some code to get user's home
directory from LDAP and do a stat to that directory. Now everything
works as expected. Is it possible that samba changes system's default
encoding in somewhere, because system call 'system("ls -l
/home/stf4/yusuf")' also did not worked.
-regards
Yusuf TAMBAG wrote:
Following code segment pasted from vfstest works when I connect
anonymously (or root) does the automount, but when I connect as a user
it does not work.
It wold be nice if someone could explain the difference between
anonymous login or root login and normal login, where they don't share
the same code. It seems to me that automount can not get right
information when loging as a user to samba (may be a extra null
character appended). any help will be appreciated.
-regards.
vfs.conn = conn_new();
string_set(&vfs.conn->user,"vfstest");
for (i=0; i < 1024; i++)
vfs.files[i] = NULL;
smbd_vfs_init(vfs.conn);
test=SMB_VFS_STAT(vfs.conn, "/home/stf4/yusuf", &mystatus);
if (test == -1) {
DEBUG(0,("make_connection_snum: stat unsuccessfull!\n"));
}
else {
DEBUG(0,("make_connection_snum: stat successfull.\n"));
if (S_ISDIR(st.st_mode))
DEBUG(0,("make_connection_snum: Directory!!\n"));
else
DEBUG(0,("make_connection_snum: Not
Directory!!\n"));
}
free(vfs.conn);
Yusuf TAMBAG wrote:
Hi all,
I've installed samba-3.0.21rc2 on a solaris 10 machine (latest
patches applied) by compiling from source:
#uname -a
SunOS newton 5.10 Generic_118844-20 i86pc i386 i86pc
User's home is mounted using automount without any problem. But when
I try to mount using samba, it can not access the users home
directory when it 's share is not mounted and gives following error:
[2005/12/05 15:49:30, 0] smbd/service.c:(690)
'/home/stf4/yusuf' does not exist or permission denied when
connecting to [yusuf] Error was No such file or directory
I also get following message in "/var/adm/messages" when I try to
mount a user's samba share.
Dec 5 15:49:30 newton automountd[18951]: [ID 293258 daemon.warning]
libsldap: Status: 7 Mesg: Session error no available conn.
Dec 5 15:49:30 newton last message repeated 11 times
Also following code segment I added to smbd/service.c does not work
and prints failure for both cases:
code=stat(conn->connectpath,mystatus);
if(code)
DEBUG(0,("stat to (%s) failed!\n",conn->connectpath));
else
DEBUG(0,("stat to (%s) suceeded.\n",conn->connectpath));
code=S_ISDIR(mystatus->st_mode);
if(!code)
DEBUG(0,("S_ISDIR to (%s) failed!\n",conn->connectpath));
else
DEBUG(0,("S_ISDIR to (%s)
suceeded.\n",conn->connectpath));
The same code runs without any problem alone (mounts the user's share
if not mounted and returns success) and users can login and see their
home directories without any problem.
Is samba using something else to access the filesystem other than the
system calls ? How can I make it to access using system calls or how
can I resolv the problem ?
-regards.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba and sendmail
hi all i have 2 servers , one is having sendmail + i would like to install samba pdc with LDAP on other server. can i integrate sendmail with samba, ie , i want mail users to be authenticated with samba LDAP server. Regards Niranjan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] nisplussam support
On Mon, 2005-12-12 at 16:42 -0600, Arkadiy Chapkis - Arc wrote: > Hello everyone, > > As I've read Release Notes, the nisplussam plug-in was removed from Samba > 3.0.x > Can someone help me with short instruction on how to make nisplussam back > into samba 3.0.x, please? > Thank you very much, Do you actually have smbpasswd in a NISplus table? As a stopgap, you may be able to export it out to a file. I strongly suggest you move to LDAP as a shared, supported backend. (This isn't a magic way to have Samba read normal NISplus, just another way to share that particular file). Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
Dear List- This error is appearing in my log.winbindd log file. The full error is as follows: nsswitch/winbindd_user.c:winbindd_getpwnam(161) user 'RAID' does not exist nsswitch/winbindd_user.c:winbindd_getpwnam(161) user 'BAMBOO_LEAVES_SINGLE.TIF' does not exist To clarify, there is no user by those names (i.e. raid, BAMBOO_LEAVES_SINGLE.TIF) on our DC, but there are share names/filenames; the full name/s of the shares in question being Raid1 and Raid2, with the UNC path looking something like this: //myserver/raid1 //myserver/raid2 This error or some variation of it is appearing in the log file every 1 - 4 seconds, corresponding presumably with some sort of read/write I/O operation. The box is currently serving as a NAS in our production environment, and this box does undergoes very heavy IO. Previously, kerberos had failed due to a time drift on the NAS. That problem has since been corrected and Kerberos reports back as functioning correctly. Samba version: samba-3.0.14 Linux Kernel: kernel-2.4.27-2.0.00 OS: REdhat 9.0 Has anyone on this list ever experience an occurrence like this? Thanks in advance. Jeff Yana -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Printers recommended for Samba network Shares
I am looking for printers to replace HP Deskjets and Inkjets. My inital cost limit is roughly $200 and can probably go higher for network enabled printers. But basically I am looking for printers which I can configure to be shared via linux to windows computers? I have tried setting up some HP Deskjet 960 and HP Deskjet 990 , but have never been able to get windows clients to connect to them via a linux samba share. The current recommendation I have is to get a Canon, but this is based on future cost ( printer cartridges ) and has nothing to do with technical merits of getting it connected via a samba share. I would really like to get these new printers connected via samba share because it would greatly reduce my administrative and network management overhead (time). Thanks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Would BDC Sync with Local Passwd?
Hi All, I have a Samba PDC on my Suse 9.3 machine serving up to 25 clients with a OpenLdap backend.The samba user password also *sync's with the LDAP Password and the Local User password*. All Samba users also have a local user account which is used by IMAP Server Accounts & Cyrus Authentication on the same machine. (So, One Password to email and samba for all users, if the user changes his password from the client machine all the passwords are synchronized). Recently I have setup a BDC as well which is working fine with the OpenLdap Replica. I would like to know whether the Samba BDC will also synchronizes with the local user password on the BDC machine. My Replica LDAP is updated on the BDC but am not sure whether the local user password is updated by the BDC in the same way as the PDC does. (all user accounts are also created on the BDC machine.). Thank's in advance. cheers, Pavan. -- Pavan Krishna L Systems Administrator Diversity Arrays Technology Pty Ltd Ph: +61 2 6281 8512 Fax: +61 2 6281 8533 Mob: +61 423 411 281 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba DMB "loses" machines in the Network Neighborhood
All the other machines on our network are XP Home or Professional; there aren't any other "server" class machines. My understanding is that with the 'os level' set so high, there should be any way for another machine to gain master and cause Samba to overwrite its list. The logs show the Samba DMB gaining master for the workgroup in question - it seems to be working - but then, nothing. On 12/11/05, Adam Nielsen <[EMAIL PROTECTED] > wrote: > Do you have any other NMB servers on your network? I have two Windows > 2000 servers, and they somehow manage to 'overwrite' Samba's browse > list shortly after startup. > > When I first installed Samba I put some text into the 'server comment' > field, but I removed it almost a month ago - yet it would seem > that because at any given moment at least one of the Win2k machines has > been available, this outdated data is still being cached and the wrong > server comment is still showing up. I think it will take a power > outage or some other method of switching off all Windows PCs and > servers at the same time in order to 'flush' this outdated data away. > > Cheers, > Adam. > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] what version of Linux
Hello, After a lot of resource, I am finding that there are as many versions of Linux as there are versions of Samba. I know that each have there good and bad aspects. But what I am looking for version of Linux that is widely used and that will run a version of Samba that will allow me to integrate into a Win2K AD network. So I thought I would pose this question. What version of Linux have you chosen and for what reason? What version of Samba are you running on your copy of Linux? I this is not the place for this question, please let me know. John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
Dear List- This error is appearing in my log.winbindd log file. The full error is as follows: nsswitch/winbindd_user.c:winbindd_getpwnam(161) user 'RAID' does not exist nsswitch/winbindd_user.c:winbindd_getpwnam(161) user 'BAMBOO_LEAVES_SINGLE.TIF' does not exist To clarify, there is no user by those names (i.e. raid, BAMBOO_LEAVES_SINGLE.TIF) on our DC, but there are share names/filenames; the full name/s of the shares in question being Raid1 and Raid2, with the UNC path looking something like this: //myserver/raid1 //myserver/raid2 This error or some variation of it is appearing in the log file every 1 - 4 seconds, corresponding presumably with some sort of read/write I/O operation. The box is currently serving as a NAS in our production environment, and this box does undergoes very heavy IO. Previously, kerberos had failed due to a time drift on the NAS. That problem has since been corrected and Kerberos reports back as functioning correctly. Samba version: samba-3.0.14 Linux Kernel: kernel-2.4.27-2.0.00 OS: REdhat 9.0 Has anyone on this list ever experience an occurrence like this? Thanks in advance. Jeff Yana -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.14 PANIC posix_acls.c
On Mon, Dec 12, 2005 at 10:35:57AM +0100, Ronan LANORE wrote: > Hi > > How correct this panic.And does it correct in Samba 3.0.20b last stable > version Yes, this was fixed for 3.0.20. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] [more info] getpwnam fails on ldap
El Viernes, 9 de Diciembre de 2005 00:46, tom burkart escribió: > On Dec 8, Craig White wrote: > > if you can 'getent passwd|grep USER_NAME' then it works, if you can't, > > I can do that, yet it doesn't work on one of the servers. > > tom. Hi, are you using person or account as objectclass? Could it be the problem? PPablo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Windows admin user different?
Is there anything different about connecting a Windows XP admin user to a Samba server? By this I mean the actual administrator/admin user account, not simply a user in the admin group. I have two different Samba servers where I have created an administrator unix account and an admin Samba user account. I also tried using Administrator and administrator for the account name. No matter what I do I can't get the admin user to successfully connect. It works fine with all of my other Windows XP users. Thanks, -Mont -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Question - Does Samba Recognize non-Primary Group Memberships?
> On other interesting thing about this, IF I set one of my secondary > groups as an admin user on the share, I have can create folders and > files! So, in that portion of code, smbd is honouring my secondary > group. But without the admin users option, it does not. Any thoughts? Ah yes, there was some discussion along these lines a while back. It seems that Samba doesn't always honour secondary groups, depending on where they're entered. What happens if you list the secondary group in the "valid users" option? Presumably that does the same as "admin users" minus the extra access. Cheers, Adam. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] nisplussam support
Hello everyone, As I've read Release Notes, the nisplussam plug-in was removed from Samba 3.0.x However I cannot compile 2.2.12 on my Solaris 10 machine (gives me undefined symbol probably due to gcc v. 3.4.3). Is there a way to include nisplussam support manually? I downloaded pdb_nisplus.c and tried to change configure.in and configure, but as I'm not a programmer, I couldn't get it to be included in Makefile. And as I tried to manually add passdb/pdb_nisplus.o in Makefile, the make process failed right at the beginning. Can someone help me with short instruction on how to make nisplussam back into samba 3.0.x, please? Thank you very much, Arc C. [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Temporary Profiles
On Sex Dez 02 05 13:48, Oliver Schneider wrote: >If you are sure there is a solution in your book, I am going to buy it. That >shouldn't be a problem. > >I don't want roaming profiles. It would be enough, if i get a local NOT >temporary profile. if you clear the global "logon path = " the profile should be local. It's enough to do it. > >I have tried to get roaming profiles to work as a part of the solution for >the local profiles but that didn't helped neither. All I get then was a >temporary serverside profile. > >All I want is a not temporary profile, where my changes are saved... > >Oliver Schneider > >2005/12/1, John H Terpstra <[EMAIL PROTECTED]>: >> >> On Thursday 01 December 2005 03:01, Oliver Schneider wrote: >> > Hi, >> > >> > I have got a problem with samba for days now and I don't know how to >> solve >> > it. >> > >> > My problem is, that it doesn't matter if I enable or disable Roaming >> > Profiles, all I get is a temporary profile. >> > >> > If i enable Roaming Profiles, than i get a temporary serverside Profile. >> If >> > I disable Roaming Profiles, than i get a temporary local Profile. >> > >> > Can somebody please help me? >> > >> > With Roaming Profiles I think it is a problem with Filepermissions. Root >> > get's a full Serverside Profile (not the smb.conf below), but only root. >> > I just want a local Profile for the users, so it is not so relevant. >> >> Please follow the examples in my book "Samba-3 by Example". This book is >> the >> official Samba deployment guide. If you experince any problems with the >> examples in this book I will help you to find the cause by which the book >> mis-directed you. After all, I want the documentation to be correct and of >> true value. >> >> Samba-3 by Example provides fully documented, step-by-step, installation >> and >> depoyment instructions for complete networking solutions. It coveres >> simple >> networks and progressively introduces complex networking examples. Every >> necessary configuration file is provided. >> >> Every time I have helped people on this list who have reported problems >> with >> Samba deployment - issues such as logon scripts that will not run, roaming >> profiles that fail to work correctly, not being able to join a domain, and >> so >> on, the solutions in this book solved the users' problem. >> >> If you do not follow the documentation provided, you will possibly go >> through >> a more painful learning process. The choice is yours. >> >> - John T. >> >> > >> > Oliver >> > >> > Samba is PDC >> > >> > >> > [global] >> > include = /etc/samba/dhcp.conf >> > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 >> > logon drive = H: >> > hide dot files = yes >> > domain master = Yes >> > username map = /etc/samba/smbusers >> > map to guest = Bad User >> > printer admin = @ntadmin, root, administrator >> > logon home = \\%L\%U\.9xprofile >> > passwd program = /usr/bin/passwd %u >> > wins support = true >> > printcap cache time = 750 >> > netbios name = fileserver >> > cups options = raw >> > printing = cups >> > unix password sync = yes >> > local master = Yes >> > logon path = >> > logon script = logon.bat >> > workgroup = SJ >> > os level = 65 >> > printcap name = cups >> > security = user >> > add machine script = /usr/sbin/useradd -c Machine -d >> > /var/lib/nobody -s /bin/false %m$ >> > domain logons = Yes >> > preferred master = Yes >> > load printers = yes >> > passdb backend = smbpasswd >> > >> > [homes] >> > comment = Home Directories >> > valid users = %S >> > browseable = No >> > read only = No >> > inherit acls = Yes >> > >> > [profiles] >> > comment = Network Profiles Service >> > path = %H >> > read only = No >> > # store dos attributes = Yes >> > create mask = 0600 >> > directory mask = 0700 >> > >> > [users] >> > comment = All users >> > path = /home >> > read only = No >> > inherit acls = Yes >> > veto files = /aquota.user/groups/shares/ >> > >> > [groups] >> > comment = All groups >> > path = /home/groups >> > read only = No >> > inherit acls = Yes >> > >> > [printers] >> > comment = All Printers >> > path = /var/tmp >> > printable = Yes >> > create mask = 0600 >> > browseable = No >> > >> > [print$] >> > comment = Printer Drivers >> > path = /var/lib/samba/drivers >> > write list = @ntadmin root >> > force group = ntadmin >> > create mask = 0664 >> > directory mask = 0775 >> > >> > [netlogon] >> > comment = Network Logon Service >> > path = /var/lib/samba/netlogon >> > write list = @user, root >> > g
Re: [Samba] password for swat
I don't use OS X x or pam, so I have to bow out at this point. (Although the fact that I don't use pam, and I have no problems operating swat may contain a hint.) Eric Hines Roman Budzianowski wrote: Thanks. On OS X 10.4 swat is run from launchd and the equivalent of conf file is swat.plist. This file seems to control only the start up. smbpasswd refuses to change any passwords (though it asks for it first!). The messages in the log file indicate that the authentication is done through pam. I am not familiar with pam, but the file /etc/pam.d/chkpasswd contains the following: # chkpasswd: auth account auth required pam_unix.so accountrequired pam_unix.so which I guess means that unix password should be enough (but is not). Below is swat.log. I don't like the rhost 0.0.0.0, but don't know how to fix it. Is swat.plist the right place? pass_check: Checking (PAM) password for user root (l=9) [2005/12/10 22:56:36, 4] /SourceCache/samba/samba-92.13/samba/source/ auth/pampass.c:smb_pam_start(463) smb_pam_start: PAM: Init user: root [2005/12/10 22:56:36, 4] /SourceCache/samba/samba-92.13/samba/source/ auth/pampass.c:smb_pam_start(480) smb_pam_start: PAM: setting rhost to: 0.0.0.0 [2005/12/10 22:56:36, 4] /SourceCache/samba/samba-92.13/samba/source/ auth/pampass.c:smb_pam_start(489) smb_pam_start: PAM: setting tty [2005/12/10 22:56:36, 4] /SourceCache/samba/samba-92.13/samba/source/ auth/pampass.c:smb_pam_start(497) smb_pam_start: PAM: Init passed for user: root [2005/12/10 22:56:36, 4] /SourceCache/samba/samba-92.13/samba/source/ auth/pampass.c:smb_pam_auth(514) smb_pam_auth: PAM: Authenticate User: root [2005/12/10 22:56:36, 2] /SourceCache/samba/samba-92.13/samba/source/ auth/pampass.c:smb_pam_auth(518) smb_pam_auth: PAM: Athentication Error for user root [2005/12/10 22:56:36, 2] /SourceCache/samba/samba-92.13/samba/source/ auth/pampass.c:smb_pam_error_handler(77) smb_pam_error_handler: PAM: Authentication Failure : Authentication failure [2005/12/10 22:56:36, 0] /SourceCache/samba/samba-92.13/samba/source/ auth/pampass.c:smb_pam_passcheck(814) smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User root ! [2005/12/10 22:56:36, 4] /SourceCache/samba/samba-92.13/samba/source/ auth/pampass.c:smb_pam_end(444) smb_pam_end: PAM: PAM_END OK. Roman Budzianowski [EMAIL PROTECTED] On Dec 11, 2005, at 8:21 AM, Eric Hines wrote: There are a couple of things you may need to do. One is to write a swat configuration file. There's a good example on page 53 of Ts, Eckstein, and Collier-Brown's _Using Samba_ (O'Reilly pub) that works well for Fedora Core and SUSE. You may need to tailor it some for your OS, but I think most of the tailoring will be in where you have to put the file. Also, the example includes the line "only-from = localhost." You may need to change that to "only- from = 127.0.0.1." Localhost almost always works, but sometimes it's necessary to use the IP address instead. Also, after having installed the file, don't forget to restart (or start in the first place) your inetd or xinetd--whichever daemon your OS uses. You also may need to add root's password to smbpasswd. Hope this helps. Eric Hines At 12/10/05 03:36, Roman Budzianowski wrote: I got SWAT running on OS X 10.4 and when I go to localhost:901 I am asked for password. However neither root nor admin work (I enabled root). I get: The name or password entered for area "SWAT" on localhost:901 was incorrect. Please try again. Thanks for help, Roman Budzianowski [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba There is no nonsense so errant that it cannot be made the creed of the vast majority by adequate governmental action. --Bertrand Russell -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem running .avi file over samba share
> The file has the same md5 sum locally and on the file server so it > would appear that something is changing in the file when it is cached > and played. Can you copy the file normally without problems? It could be a permissions issue. How large is the AVI? Less than 2GB? Cheers, Adam. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbclient lookup fails when querying local machine
> wins.dat should list the IP address for this host as 172.21.23.1. In this case using -L 172.21... instead of -L BH1230 should work. There was a post earlier with the subject "Changed IP address" that recommended editing wins.dat to fix the IP problem. Cheers, Adam. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbclient lookup fails when querying local machine
>> I've got a really odd issue -- a Samba server that can "smbclient -L" >> everyone but itself. >> session setup failed: Call timed out: server did not respond after >> 2 milliseconds > This looks a lot like a firewall issue - are you sure your machine can > connect to itself on that interface on the SMB port? It is possible to > get this behaviour by blocking the wrong thing at least with the Linux > firewall, so that would be the first place I'd check. Port 139 is specifically set to "accept" for both TCP and UDP in my iptables config, and nmap yields the following with the firewall running: PORT STATE SERVICE 139/tcp open netbios-ssn Is there another port I need to open? 139 is the only one of which I'm aware. >> my_name_register_failed: Failed to register my name BOOTHOST-1230<20> >> on subnet UNICAST_SUBNET. [2005/12/05 15:23:21, 0] >> nmbd/nmbd_namelistdb.c:standard_fail_register(290) >> standard_fail_register: Failed to register/refresh name > Out of curiosity, does it still do this if the name is <= 8 chars? No, it does not; it's able to register a new NetBIOS name ok. Changing the NetBIOS name to BH1230 still yields a smbclient timeout though: boothost:/opt/samba/var# smbclient -L BH1230 -Uvalidusr added interface ip=172.21.23.1 bcast=172.21.23.255 nmask=255.255.255.0 Got a positive name query response from 172.16.102.41 ( 172.21.23.1 ) Password: session setup failed: Call timed out: server did not respond after 2 milliseconds Something else I found over the weekend: my original NetBIOS name has the wrong IP address listed in the PDC's wins.dat: "BOOTHOST-1230#00" 1134682795 172.16.104.136 44R "BOOTHOST-1230#03" 1134682795 172.16.104.136 44R "BOOTHOST-1230#20" 1134682795 172.16.104.136 44R wins.dat should list the IP address for this host as 172.21.23.1. I've changed the NetBIOS name of the machine at the incorrect address and rejoined the domain, and then rejoined the domain with the machine at the appropriate IP address; unfortunately, wins.dat on the PDC still lists the wrong IP address for all three "BOOTHOST-1230" entries. Is there any way I can force these incorrect entries out of wins.dat WITHOUT restarting samba on the PDC? Thanks! Ryan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] newbie help with remote access
andy flatt schrieb: I have a kurobox that I can access with my in-house network (dynamic external ip). I would love to be able to access from my work network (dynamic external ip) as well as allow my brother a few states away access it (dynamic external ip). Where do I start? Console level control only, no GUI on the kuro. For those who are kuro savvy, I am running Alan's Mac Friendly version 2. use openvpn? -- Tomek http://wpkg.org WPKG - software management with Samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Intergration with LDAP
В сообщении от Понедельник, 12-Дек-2005 23:15 Mike van Lokven написал(a): > I am a bit weary to do a special compile of samba as this would possibly > get broken when the system next updates the samba server via yum. > I understood that samba v3 did support LDAP as standard out of the box. > I may guess that there is no way round this at the moment for us. oh well, as you can use ldap backend: "passdb backend = ldapsam:ldap://ldap.example.com";, i think it is possible to specify port jist in URI: "passdb backend = ldapsam:ldap://ldap.example.com:1031"; -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] newbie help with remote access
I have a kurobox that I can access with my in-house network (dynamic external ip). I would love to be able to access from my work network (dynamic external ip) as well as allow my brother a few states away access it (dynamic external ip). Where do I start? Console level control only, no GUI on the kuro. For those who are kuro savvy, I am running Alan's Mac Friendly version 2. Thank you. Andy -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Intergration with LDAP
Thanks Stephanie I am a bit weary to do a special compile of samba as this would possibly get broken when the system next updates the samba server via yum. I understood that samba v3 did support LDAP as standard out of the box. I may guess that there is no way round this at the moment for us. Many thanks Mike Stéphane Purnelle wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mike van Lokven a écrit : Hi I have samba-3.0.10-1.4E.2 running on Redhat EL4 which I am trying to integrate with Redhat directory. I have had to shift the LDAP port from 389 to another location When I run testparm I get the following error [EMAIL PROTECTED] ~]# testparm Load smb config files from /etc/samba/smb.conf Unknown parameter encountered: "ldap port" Ignoring unknown parameter "ldap port" Processing section "[netlogon]" Processing section "[profiles]" Processing section "[homes]" What can I do to fix this? Many thanks Mike Please read doc and howto available on samba website. ldap port is a parameter for samba 2.2.x, if the package from redhat is not compiled with --ldapsam option, you have not this parameter. You must use ldap backend parameter for setting up connection to ldap backend. - -- Stéphane Purnelle <[EMAIL PROTECTED]> Site Web : http://www.linuxplusvalue.be -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDneTM8tswkE3d0ecRAr9tAJ91rT5XqOkwkppAJbHnZwJb7Nnb1gCffkkM XdxgypEMPLbv6hPpDMOMIQo= =L7oX -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Intergration with LDAP
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mike van Lokven a écrit : > Hi > > I have samba-3.0.10-1.4E.2 running on Redhat EL4 which I am trying > to integrate with Redhat directory. I have had to shift the LDAP > port from 389 to another location > > When I run testparm I get the following error > > [EMAIL PROTECTED] ~]# testparm Load smb config files from > /etc/samba/smb.conf Unknown parameter encountered: "ldap port" > Ignoring unknown parameter "ldap port" Processing section > "[netlogon]" Processing section "[profiles]" Processing section > "[homes]" > > What can I do to fix this? > > Many thanks > > Mike > Please read doc and howto available on samba website. ldap port is a parameter for samba 2.2.x, if the package from redhat is not compiled with --ldapsam option, you have not this parameter. You must use ldap backend parameter for setting up connection to ldap backend. - -- Stéphane Purnelle <[EMAIL PROTECTED]> Site Web : http://www.linuxplusvalue.be -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDneTM8tswkE3d0ecRAr9tAJ91rT5XqOkwkppAJbHnZwJb7Nnb1gCffkkM XdxgypEMPLbv6hPpDMOMIQo= =L7oX -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Intergration with LDAP
Hi I have samba-3.0.10-1.4E.2 running on Redhat EL4 which I am trying to integrate with Redhat directory. I have had to shift the LDAP port from 389 to another location When I run testparm I get the following error [EMAIL PROTECTED] ~]# testparm Load smb config files from /etc/samba/smb.conf Unknown parameter encountered: "ldap port" Ignoring unknown parameter "ldap port" Processing section "[netlogon]" Processing section "[profiles]" Processing section "[homes]" What can I do to fix this? Many thanks Mike -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Check permissions on share
Hi! I wonder if there is som easy way to determine the permissions for a specific user on a share? Parsing smbcacls is the only solutions I can come up with right now but its not pretty! Thanks Henrik -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] displaying software version number.
smbcontrol --version cheers Henrik 12 dec 2005 kl. 14:41 skrev john steele: Hello. I am looking for some help to display the version of the software running on my installation. I am running Linux Red Hat 7.3 and have installed Samba 3.0.20. But when I look at the STATUS on SWAT it tells me I am running 2.2.x. If there a command that I can run to get the version of the currently running package?Thanks. John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Why not using the windows configuration wizard (joining a domain) with Samba-3?
On Monday 12 December 2005 02:22, Michael Billerbeck wrote: > Hi, > > On Monday 12 Decemver 2005 09:46, John H Terpstra wrote: > > On Sunday 11 December 2005 15:51, Michael Billerbeck wrote: > > > Hello, > > > > > > in the Samba How-to I've read not to use the configuration wizard with > > > samba-3 when joining a domain. > > > Why that? Is there a problem? > > > > > > Thanks, > > > Michael > > > > Please point me at the specific reference in the HOWTO. I need to > > understand what causes you concern. > > > > Please help me to understand your concern. If the documentation is >> inadequate > > > I must correct of extend it. > > > > Thanks. > > In chapter 8.2.2 Joining a domain: Windows 2000/XP Professional (on page > 131) point 4 says: > "Click the computer name tab. [...] Clicking the Network ID button will > launch the configuration wizard. Do not use this with Samba-3." > I was asking this because I used it also with Samba-3 and I would like to > know if there are some side effects when using it or why it is explicitly > mentioned. Joining through use of this tool did not work with early releases of Samba-3. Try it. Let me know if it works now. PS: If you try the NetworkID Wizard, and it fails, reboot the Windows PC before attempting to use the "Change" button. In the past, a failure when usign the NetworkID wizard would hose up the Windows client so that it then count not resolve the netbios name of the domain controller. - John T. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Winbind & adding users... is `useradd` being called? %u parameter?
On Dec 12, 2005, at 1:06 pm, Fabian Arrotin wrote: Stroller wrote: Hi there, This is probably a dumb question, so my apologies, but I've set up WinBind on my my Samba box & it seems to be authenticating against the domain, however new user accounts do not seem to be added. They will never be added : you're using winbind to avoid that ! Don't forget that add user script is used when samba is acting as a domain controller, but that's not the case here. Winbind is used to simulate local unix users instead of create them locally. Ah, I see. Looks like I hadn't been "getting it". If you want your Windows users to log on your Samba server for IMAP, create first a home directory with correct permissions ... (i know it exists pam_mkhomedir.so, but i've never played with it ) Anyway : why do you want Windows users to log on your imap server ? Have you already configured your sendmail (or postfix) MTA server to work with Windows users ? Your MTA server will have to know where to look for virtual users and where to drop mails Question is : what's the context of the whole thing ? I have users added on the Windows domain (Windows Server SBS 2003) and want to use IMAP on Linux for the mailserver. The most important thing is that if the user changes their Windows domain password then their password for mail should also be changed, but also it would be nice if I could just add users to the Windows domain & not concern myself with adding them on the Linux server. I have used Samba on the mailserver only because winbind seemed to be an appropriate way of handling this. I have installed courier-imap on the mailserver, and as you can see from the logs it seems to be authenticating the users ok. But I'm not clear on how to tell Courier (or any other IMAP server) where to store messages for the Windows domain users - I had understood (mistakenly, I now see) that winbind would create home directories for the Windows domain users the first time they log on to email (Courier expects to deliver mail to ~/Maildir). Apologies for my confusion on this subject - how have others managed this problem? Stroller. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Domain Logins and PDC local logins
1) Is there a way to restrict Domain users in a Samba-3 domain logging into a Samba PDC? 2) Along the same lines, for SuSE 9.2 is there away to hid the user list on the log-in screen? 3) Per question 1 and another thread I started (which has disappeared cause I cannot find it now), For my domain I can use either PDC\username with PDC being the name of my server and Domain\username. Also running Ethereal I can see that I get PDC<1C> and Domain<1C>. Not sure why I am getting the computer name boardcasted as a domain name. This is an on going annoyance. Heh. Currently not running winbindd, LDAP, or DNS on the server -- plan to at least get DNS up to further stop netbios broadcasting. thanks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] "passwd program" directive and windows
On 12/9/05, Jerome Tournier <[EMAIL PROTECTED]> wrote: > I'd like to know: if the passord is not conformed with the policy, is there > a way to return to the windows's user a popup to tell him that there's one > upper case missing, or ... > If this is not possible, is there a way to just tell him that security > policy is not reached ? You can use the "check password script" smb.conf option to define a password policy. Users with too-simple passwords will get an error message, however, it's not particularly helpful: "Your password must be at least 8 characters, cannot repeat any of your previous 0 passwords and must be at least 0 days old. Please type a different password. Type a password which meets these requirements in both text boxes." I unfortunately don't know a way around that. Josh Kelley -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] The single WINS problem: question
hello I've been reading the thread (http://marc.theaimsgroup.com/?t=11328637691&r=1&w=2) and I have the same limitation with WINS in a PDC/BDC. That's why I have the following (experimental) setup: PDC ==> wins support = yes, passdb backend: master ldap BDC ==> wins support = yes, passdb backend: slave ldap I configured some of my XP clients to use both WINS servers and it seems to work. but in the manual of smb.conf I read: wins support (G) Note that you should NEVER set this to yes on more than one machine in your network. What could happen if you use more than one WINS server on your network? thanks werner maes Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Extremely slow Samba3 performance with ArcView/WinXP
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! I have a user who is running a Samba server to store data files for his ArcView 3.3 application. Client operating system is Windows XP professional. With Samba2 (2.2.8a) this was working quite fine, it usually took less than a few seconds to load and render one of the GIS presentations with ArcView. We then did an upgrade to Samba3 (3.0.20b) and suddenly the same operation now takes more than 20 seconds or even minutes in some cases. You can even see the picture forming slowly on the screen. Other applications do not suffer from performance problems (The new Samba3 server is a really fast Dual Opteron server with 4GB of RAM and a fast external U320 RAID running under Linux-2.4.31) I took a IP traffic dump with tcpdump and also samba logs with loglevel 10 and found that there are a _lot_ of small packets going between the WinXP client and the Samba3 server. Example: No. TimeSourceDestination Protocol Info [...] 75260 81.686777 aaa.bb.ccc.110aaa.bb.ccc.1 SMB Read AndX Request, FID: 0x272f, 512 bytes at offset 720896 75261 81.687706 aaa.bb.ccc.1 aaa.bb.ccc.110SMB Read AndX Response, FID: 0x272f, 512 bytes 75262 81.687873 aaa.bb.ccc.110aaa.bb.ccc.1 SMB Read AndX Request, FID: 0x2738, 512 bytes at offset 116736 75264 81.688963 aaa.bb.ccc.110aaa.bb.ccc.1 SMB Read AndX Request, FID: 0x272f, 512 bytes at offset 708608 75265 81.689893 aaa.bb.ccc.1 aaa.bb.ccc.110SMB Read AndX Response, FID: 0x272f, 512 bytes 75266 81.690100 aaa.bb.ccc.110aaa.bb.ccc.1 SMB Read AndX Request, FID: 0x2738, 512 bytes at offset 119296 75267 81.691250 aaa.bb.ccc.1 aaa.bb.ccc.110SMB Read AndX Response, FID: 0x2738, 512 bytes 75268 81.691412 aaa.bb.ccc.110aaa.bb.ccc.1 SMB Read AndX Request, FID: 0x272f, 512 bytes at offset 721408 75269 81.692343 aaa.bb.ccc.1 aaa.bb.ccc.110SMB Read AndX Response, FID: 0x272f, 512 bytes 75270 81.692509 aaa.bb.ccc.110aaa.bb.ccc.1 SMB Read AndX Request, FID: 0x272f, 512 bytes at offset 720896 75271 81.693436 aaa.bb.ccc.1 aaa.bb.ccc.110SMB Read AndX Response, FID: 0x272f, 512 bytes 75272 81.693587 aaa.bb.ccc.110aaa.bb.ccc.1 SMB Read AndX Request, FID: 0x272f, 512 bytes at offset 721408 75273 81.694495 aaa.bb.ccc.1 aaa.bb.ccc.110SMB Read AndX Response, FID: 0x272f, 512 bytes 75274 81.694687 aaa.bb.ccc.110aaa.bb.ccc.1 SMB Read AndX Request, FID: 0x2738, 512 bytes at offset 116736 75275 81.695598 aaa.bb.ccc.1 aaa.bb.ccc.110SMB Read AndX Response, FID: 0x2738, 512 bytes 75276 81.695752 aaa.bb.ccc.110aaa.bb.ccc.1 SMB Read AndX Request, FID: 0x2738, 512 bytes at offset 117248 75277 81.696663 aaa.bb.ccc.1 aaa.bb.ccc.110SMB Read AndX Response, FID: 0x2738, 512 bytes 75278 81.696822 aaa.bb.ccc.110aaa.bb.ccc.1 SMB Read AndX Request, FID: 0x272f, 512 bytes at offset 708608 75279 81.697732 aaa.bb.ccc.1 aaa.bb.ccc.110SMB Read AndX Response, FID: 0x272f, 512 bytes 75280 81.697941 aaa.bb.ccc.110aaa.bb.ccc.1 SMB Read AndX Request, FID: 0x2738, 512 bytes at offset 119296 75281 81.698858 aaa.bb.ccc.1 aaa.bb.ccc.110SMB Read AndX Response, FID: 0x2738, 512 bytes 75282 81.699024 aaa.bb.ccc.110aaa.bb.ccc.1 SMB Read AndX Request, FID: 0x272f, 512 bytes at offset 721408 75283 81.699949 aaa.bb.ccc.1 aaa.bb.ccc.110SMB Read AndX Response, FID: 0x272f, 512 bytes 75284 81.700116 aaa.bb.ccc.110aaa.bb.ccc.1 SMB Read AndX Request, FID: 0x2738, 512 bytes at offset 117248 75285 81.701031 aaa.bb.ccc.1 aaa.bb.ccc.110SMB Read AndX Response, FID: 0x2738, 512 bytes [...] (aaa.bb.ccc.1 is the Samba3 server, aaa.bb.ccc.110 is the WinXP client) In one test I had more than 28 such lines, the whole data transfer took about 3 minutes(!). In the Samba3 logfile I see lots of the following lines: [...] [2005/12/12 14:37:16, 3] smbd/process.c:switch_message(900) switch message SMBreadX (pid 16879) conn 0x84431d0 [2005/12/12 14:37:16, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/12/12 14:37:16, 10] smbd/fileio.c:read_file(105) read_file (daten/covers/dhm_offset/o1000c/arc.adf): pos = 831488, size = 512, returned 512 [2005/12/12 14:37:16, 3] smbd/reply.c:send_file_readX(2585) send_file_readX fnum=10031 max=512 nread=512 [2005/12/12 14:37:16, 5] lib/util.c:show_msg(454) [2005/12/12 14:37:16, 5] lib/util.c:show_msg(464) size=571 smb_com=0x2e
[Samba] samba - cups rights problem
Hi, i have a small problem, i use CUPS - Raw printing, which works perfectly .. i thought.. When i , as Administrator ( or domain Admins ) print and want 5 copies there will be 5 copies. But when i do this as a Domain User, i get only 1 copy. Where am i missing something. Here's my printer config. ## PRINTING Section 1 !! Global Settings !! printing = cups load printers = Yes show add printer wizard = Yes max print jobs = 100 printcap name = cups printer admin = @"Printer Operators",@"Domain Admins",Administrator,root lpq cache time = 20 use client driver = No disable spoolss = No max reported print jobs = 1000 # PRINTING Section 2 !! [printers] comment = All Network Printers printable = yes path = /home/samba/spool browseable = No guest ok = yes public = yes read only = yes writable = no create mode = 0777 lpq command = /usr/bin/lpq -P'%p' lprm command = /usr/bin/lprm -P'%p' %j lppause command = /usr/sbin/lpc hold '%p' %j lpresume command = /usr/sbin/lpc release '%p' %j queueresume command = /usr/sbin/lpc start '%p' queuepause command = /usr/sbin/lpc stop '%p' ### Printing Section 3 "The Windows Printer drivers" [print$] comment = Printer Drivers Download Area path = /home/samba/printers browseable = no guest ok = no read only = yes write list = @"Print Operators",@"Domain Admins",Administrator,root create mask = 0664 directory mask = 0775 valid users = @"Domain Users",@"Print Operators",@"Domain Admins",Administrator,root -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Migrating W2K Workstation to Samba Domain
I had similar problems just a short time ago. IIRC, the two big areas were the paths and the permissions. Be sure your paths to the profile storage folder are correct, and be sure the users can write to them. I was confused by the fact that Unix permissions and Samba permissions seem to be different animals. I ended up setting most of the stuff to 777 to get it to work. Since no one logs into the shell except administrators, you shouldn't have too much problem. Using controls like "valid users" "browseable" etc. in the share definitions in your smb.conf will keep your network users in and out as needed. After all that and re-reading your post, you have one client in a public area. Do you need roaming profiles? Do you really need to join the domain? Can you have just local profiles and have the client on the same workgroup as the Samba server, treat the share as public, and have the profile map the share when the user logs in? Might be easier. HTH, Michael Michael Urban told me on 12/12/2005 09:16: I am replacing a W2K AD server with a Samba server. The server has a single W2K Workstation client, in a public area and used by a dozen or so different users. When I join the workstation to the Samba domain, it complains that it cannot load a roaming profile (in the W2K AD domain, it used local profiles), and it does not create a new local profile, instead using a temporary profile. Obviously a permission problem somewhere. What is the exact problem, and what is the solution? Mike -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Migrating W2K Workstation to Samba Domain
I am replacing a W2K AD server with a Samba server. The server has a single W2K Workstation client, in a public area and used by a dozen or so different users. When I join the workstation to the Samba domain, it complains that it cannot load a roaming profile (in the W2K AD domain, it used local profiles), and it does not create a new local profile, instead using a temporary profile. Obviously a permission problem somewhere. What is the exact problem, and what is the solution? Mike -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Question - Does Samba Recognize non-Primary Group Memberships?
> Is there a way to get Samba to honour my secondary groups? On other interesting thing about this, IF I set one of my secondary groups as an admin user on the share, I have can create folders and files! So, in that portion of code, smbd is honouring my secondary group. But without the admin users option, it does not. Any thoughts? Errol -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Question - Does Samba Recognize non-Primary Group Memberships?
>> Is there a way to get Samba to honour my secondary groups? > I think this has something to do with the "nested groups = yes" option. > Cheers, > Adam. Nope. That didn't do it. Are there conflicting options in my smb.conf file? From what I read, there was a bug with secondary groups that was fixed in 3.0.3, but that was a long time ago? Anyone else have any comments? I would sure like some assistance with this.. Thanks Adam for your reply. Errol -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: sambaNTPassword does NOT write to master LDAP when machines auto change the values
Paul Hanson wrote: We have SuSE SLES9 servers with LDAP master/slave replication (24 replications/BDC's) All working fine -joining domain etc. The problem I am having is PC's at remote sites (BDC) with a local replica (OpenLDAP) periodically change the sambaNTPassword/sambaLMPassword on there own and write to the local LDAP server and do NOT follow the referral to the master. Can you help on this subject - this is causing major issues with machines moving sites!!! I'd suggest filing a formal bug report/enhancement request: http://bugzilla.samba.org/ -- Rex -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] displaying software version number.
Hello. I am looking for some help to display the version of the software running on my installation. I am running Linux Red Hat 7.3 and have installed Samba 3.0.20. But when I look at the STATUS on SWAT it tells me I am running 2.2.x. If there a command that I can run to get the version of the currently running package?Thanks. John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Winbind & adding users... is `useradd` being called? %u parameter?
Stroller wrote: Hi there, This is probably a dumb question, so my apologies, but I've set up WinBind on my my Samba box & it seems to be authenticating against the domain, however new user accounts do not seem to be added. They will never be added : you're using winbind to avoid that ! Don't forget that add user script is used when samba is acting as a domain controller, but that's not the case here. Winbind is used to simulate local unix users instead of create them locally. `wbinfo -u` returns a list of the users on the domain and I seem to have setup my IMAP server correctly to authenticate against that (using PAM), as I see the following in /var/log/messages when I try to log in to my IMAP server: Dec 12 11:33:37 baby imapd: Connection, ip=[127.0.0.1] Dec 12 11:33:37 baby pam_winbind[32640]: user 'ned' granted access Dec 12 11:33:37 baby pam_winbind[32640]: user 'ned' granted access Dec 12 11:33:37 baby imapd: networkned: chdir(/home/DOMAIN/ned) failed!! Dec 12 11:33:37 baby imapd: error: No such file or directory Dec 12 11:33:37 baby imapd: LOGIN FAILED, user=networkned, ip=[127.0.0.1] Dec 12 11:33:37 baby imapd: authentication error: No such file or directory Initially in smb.conf I had simply uncommented the line which says: add user script = /usr/sbin/useradd -s /bin/false '%u' but of course(as pointed out on the IRC channel) `useradd requires the -m flag in order to create a home directory for the user, so I set it like this: add user script = /usr/sbin/useradd -m -s /bin/false '%u' but that gives me the same error. The log shows that the IMAP server is trying to chdir into the home directory "/home/DOMAIN/ned", so I'm unclear on how `useradd` is being called - is it being called as `/usr/sbin/useradd -m -s /bin/false 'DOMAIN/ned'` or as something else? See my previous answer ... If you want your Windows users to log on your Samba server for IMAP, create first a home directory with correct permissions ... (i know it exists pam_mkhomedir.so, but i've never played with it ) Anyway : why do you want Windows users to log on your imap server ? Have you already configured your sendmail (or postfix) MTA server to work with Windows users ? Your MTA server will have to know where to look for virtual users and where to drop mails Question is : what's the context of the whole thing ? Obviously I would try adding the user manually in order to troubleshoot this, but I'd like to establish what '%u' Samba is passing to `useradd` first. Consequently I edited the "add user script" as below, but nothing is written to /tmp/foo. add user script = /root/foo.sh '%u' # ls -l /root/foo.sh -rwxrwxrwx 1 root root 54 Dec 12 11:31 /root/foo.sh # ls -l /tmp/foo -rw-rw-rw- 1 root root 15 Dec 12 11:31 /tmp/foo # cat /tmp/foo gjitijt jgitjt # cat /root/foo.sh #!/bin/bash echo "$@" >> /tmp/foo exit 0 # /root/foo.sh howdy doody # cat /tmp/foo gjitijt jgitjt howdy doody # I've added a subdirectory of /home for the DOMAIN, but that makes no difference: # ls -ld /home/ drwxr-xr-x 4 root root 120 Dec 12 11:17 /home/ baby ~ # ls -l /home/ total 0 drwxr-xr-x 2 root root 48 Dec 12 11:17 DOMAIN drwxr-xr-x 3 stroller users 192 Dec 7 12:32 stroller I'm not an expert at PAM, so maybe that's what I'm doing wrong? # cat /etc/pam.d/imap auth required pam_nologin.so auth required pam_winbind.so accountsufficient pam_winbind.so accountrequired pam_stack.so service=system-auth sessionrequired pam_stack.so service=system-auth I don't see what I'm doing wrong here, so I'd be extremely grateful for any suggestions, Stroller. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] sambaNTPassword does NOT write to master LDAP when machines auto change the values
We have SuSE SLES9 servers with LDAP master/slave replication (24
replications/BDC's)
All working fine -joining domain etc.
The problem I am having is PC's at remote sites (BDC) with a local
replica (OpenLDAP) periodically change the
sambaNTPassword/sambaLMPassword on there own and write to the local LDAP
server and do NOT follow the referral to the master.
I have written scripts to force the sambaNTPassword attribute to be
re-synchronised but the attribute becomes a different value - at a
variable timeframe.
Further investigation suggests that NT/W2K/W2K3/XP have different times
when they auto change the sambaNTPassword vaue - (avoid replay
attacks??). However 3.0.14a that is distributed/updated on SLES9 only
writes this info to the local BDC and not the centre/MASTER.
7 days for NT 4, 30 days for W2K/XP is the default policy for the
machines to auto change the sambaNTPassword/sambaLMPassword.
I have also noticed that using pdbedit to change a value will change the
local OpenLDAP server and not follow the referral to the master. So that
changes at the BDC's are out of sync with respect to the master.
Joining the domain works great and replicates ALL attributes correctly
(inc sambaNTPassword) FYI - This is the fix by local admins to allow
machines to connect to the domain again.
Can you help on this subject - this is causing major issues with
machines moving sites!!!
Best Regards Paul Hanson try { document.title =
document.getElementById("subject").innerHTML; } catch (e) { }
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: 3.0.20b and Nonalphabetical File Lists on Windows Boxes
Jonathon Schrader wrote: I'm running 3.0.20b on a Fedora Core 4 box (although I've seen the same results with a FC4 stock 3.0.14a release) and my Windows XP boxes (service pack 2) that are on my LAN. What I'm seeing is an inability for the machines to read a list of files in alphabetical order, with the folders at the top, and the files at the bottom. Possibly it is related to Bug 3269 which I opened. This bug is related to wild cards showing more files than it should as the wild card spec does not match a file returned. I would have thought alpha order sort, like "DIR /O", would be a client side thing, but I really don't know for sure. With the wild card bug it makes me wonder if the sort is maybe done by the server over the CIFS protocol. Currently there has been no comment on the bug report, thus no clue if this type of issue is on the developer's radar map already and they are just choosing not to take the time to "mark as dupe" or what actually might be the status of this. So, join the ??? club. ;-) -- Michael Lueck Lueck Data Systems http://www.lueckdatasystems.com/ Remove the upper case letters NOSPAM to contact me directly. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Winbind & adding users... is `useradd` being called? %u parameter?
Hi there, This is probably a dumb question, so my apologies, but I've set up WinBind on my my Samba box & it seems to be authenticating against the domain, however new user accounts do not seem to be added. `wbinfo -u` returns a list of the users on the domain and I seem to have setup my IMAP server correctly to authenticate against that (using PAM), as I see the following in /var/log/messages when I try to log in to my IMAP server: Dec 12 11:33:37 baby imapd: Connection, ip=[127.0.0.1] Dec 12 11:33:37 baby pam_winbind[32640]: user 'ned' granted access Dec 12 11:33:37 baby pam_winbind[32640]: user 'ned' granted access Dec 12 11:33:37 baby imapd: networkned: chdir(/home/DOMAIN/ned) failed!! Dec 12 11:33:37 baby imapd: error: No such file or directory Dec 12 11:33:37 baby imapd: LOGIN FAILED, user=networkned, ip=[127.0.0.1] Dec 12 11:33:37 baby imapd: authentication error: No such file or directory Initially in smb.conf I had simply uncommented the line which says: add user script = /usr/sbin/useradd -s /bin/false '%u' but of course(as pointed out on the IRC channel) `useradd requires the -m flag in order to create a home directory for the user, so I set it like this: add user script = /usr/sbin/useradd -m -s /bin/false '%u' but that gives me the same error. The log shows that the IMAP server is trying to chdir into the home directory "/home/DOMAIN/ned", so I'm unclear on how `useradd` is being called - is it being called as `/usr/sbin/useradd -m -s /bin/false 'DOMAIN/ned'` or as something else? Obviously I would try adding the user manually in order to troubleshoot this, but I'd like to establish what '%u' Samba is passing to `useradd` first. Consequently I edited the "add user script" as below, but nothing is written to /tmp/foo. add user script = /root/foo.sh '%u' # ls -l /root/foo.sh -rwxrwxrwx 1 root root 54 Dec 12 11:31 /root/foo.sh # ls -l /tmp/foo -rw-rw-rw- 1 root root 15 Dec 12 11:31 /tmp/foo # cat /tmp/foo gjitijt jgitjt # cat /root/foo.sh #!/bin/bash echo "$@" >> /tmp/foo exit 0 # /root/foo.sh howdy doody # cat /tmp/foo gjitijt jgitjt howdy doody # I've added a subdirectory of /home for the DOMAIN, but that makes no difference: # ls -ld /home/ drwxr-xr-x 4 root root 120 Dec 12 11:17 /home/ baby ~ # ls -l /home/ total 0 drwxr-xr-x 2 root root 48 Dec 12 11:17 DOMAIN drwxr-xr-x 3 stroller users 192 Dec 7 12:32 stroller I'm not an expert at PAM, so maybe that's what I'm doing wrong? # cat /etc/pam.d/imap auth required pam_nologin.so auth required pam_winbind.so accountsufficient pam_winbind.so accountrequired pam_stack.so service=system-auth sessionrequired pam_stack.so service=system-auth I don't see what I'm doing wrong here, so I'd be extremely grateful for any suggestions, Stroller. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Migrating files with ACLS and Share properties
Usually i use robocopy from the Microsoft Resource Kit. robocopy.exe can save ntfs security permissions and applied them to Samba (if you use acls on Linux of course ...) example : robocopy \\source\share \\samba\share /MIR /SEC Marc Dubrowski wrote: Hi list, I could'nt find specific info ion the subject on google, and I'm not sure if the list is appropriated, but, I need to migrate a complete directory-tree from one w2k server to 1st another w2kserver, an then, to a Samba Server (still to be installed). The biggest problem is, if I just copy the directory, I will loose all info over users and permissions. I will also loose the shared directories inside the top directory. (In fact, the shares have been made in with no common sense, but I temporarily have to keep this so for 1 or 2 months). Is there a tootl that will allow me to copy all the filesystem and keep the acls on the files. We are using AD for authentication in mixed mode. Could you give me some clues or pointers please ? THanks in advance Marc -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Migrating files with ACLS and Share properties
Marc Dubrowski schrieb: Hi list, I could'nt find specific info ion the subject on google, and I'm not sure if the list is appropriated, but, I need to migrate a complete directory-tree from one w2k server to 1st another w2kserver, an then, to a Samba Server (still to be installed). The biggest problem is, if I just copy the directory, I will loose all info over users and permissions. I will also loose the shared directories inside the top directory. (In fact, the shares have been made in with no common sense, but I temporarily have to keep this so for 1 or 2 months). Is there a tootl that will allow me to copy all the filesystem and keep the acls on the files. We are using AD for authentication in mixed mode. Could you give me some clues or pointers please ? perhaps tar or rsync? -- Tomek http://wpkg.org WPKG - software management with Samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Migrating files with ACLS and Share properties
Hi list, I could'nt find specific info ion the subject on google, and I'm not sure if the list is appropriated, but, I need to migrate a complete directory-tree from one w2k server to 1st another w2kserver, an then, to a Samba Server (still to be installed). The biggest problem is, if I just copy the directory, I will loose all info over users and permissions. I will also loose the shared directories inside the top directory. (In fact, the shares have been made in with no common sense, but I temporarily have to keep this so for 1 or 2 months). Is there a tootl that will allow me to copy all the filesystem and keep the acls on the files. We are using AD for authentication in mixed mode. Could you give me some clues or pointers please ? THanks in advance Marc -- Marc Dubrowski Administrateur systèmes/réseaux C.I.R.B. Administration communale de Schaerbeek -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.14 PANIC posix_acls.c
Hi How correct this panic.And does it correct in Samba 3.0.20b last stable version [2005/12/12 10:02:29, 2] smbd/dosmode.c:unix_mode(60) unix_mode(Partages/Xtraconnect/Xtraconnect 2/ACA 2005/2005/ACA 12.05/TMP565.tmp) inheriting from Partages/Xtraconnect/Xtraconnect 2/ACA 2005/2005/ACA 12.05 [2005/12/12 10:02:29, 2] smbd/dosmode.c:unix_mode(68) unix_mode(Partages/Xtraconnect/Xtraconnect 2/ACA 2005/2005/ACA 12.05/TMP565.tmp) inherit mode 40770 [2005/12/12 10:02:29, 2] smbd/open.c:open_file(245) ndheillysaintrapt opened file Partages/Xtraconnect/Xtraconnect 2/ACA 2005/2005/ACA 12.05/TMP565.tmp read=Yes write=No (numopen=1) [2005/12/12 10:02:40, 2] smbd/close.c:close_normal_file(272) ndheillysaintrapt closed file Partages/Xtraconnect/Xtraconnect 2/ACA 2005/2005/ACA 12.05/TMP565.tmp (numopen=0) [2005/12/12 10:02:40, 0] smbd/posix_acls.c:check_posix_acl_group_write(3893) PANIC: assert failed at smbd/posix_acls.c(3893) [2005/12/12 10:02:40, 0] lib/util.c:smb_panic2(1495) PANIC: assert failed [2005/12/12 10:02:40, 0] lib/util.c:smb_panic2(1503) BACKTRACE: 13 stack frames: #0 /usr/local/samba-3.0.14/sbin/smbd(smb_panic2+0x194) [0x81b23a6] #1 /usr/local/samba-3.0.14/sbin/smbd(smb_panic+0x10) [0x81b2210] #2 /usr/local/samba-3.0.14/sbin/smbd [0x80c9acd] #3 /usr/local/samba-3.0.14/sbin/smbd(can_delete_file_in_directory+0x10a) [0x80c9d56] #4 /usr/local/samba-3.0.14/sbin/smbd(can_delete+0x13d) [0x809fc1b] #5 /usr/local/samba-3.0.14/sbin/smbd(reply_ntcreate_and_X+0x623) [0x809700e] #6 /usr/local/samba-3.0.14/sbin/smbd [0x80cb79f] #7 /usr/local/samba-3.0.14/sbin/smbd [0x80cb829] #8 /usr/local/samba-3.0.14/sbin/smbd(process_smb+0x1b7) [0x80cbb25] #9 /usr/local/samba-3.0.14/sbin/smbd(smbd_process+0x158) [0x80cc650] #10 /usr/local/samba-3.0.14/sbin/smbd(main+0x76c) [0x821b082] #11 /lib/tls/libc.so.6(__libc_start_main+0xe3) [0xb33e33] #12 /usr/local/samba-3.0.14/sbin/smbd [0x80796a1] Thanks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Why not using the windows configuration wizard (joining a domain) with Samba-3?
Hi, On Monday 12 Decemver 2005 09:46, John H Terpstra wrote: > On Sunday 11 December 2005 15:51, Michael Billerbeck wrote: > > Hello, > > > > in the Samba How-to I've read not to use the configuration wizard with > > samba-3 when joining a domain. > > Why that? Is there a problem? > > > > Thanks, > > Michael > > Please point me at the specific reference in the HOWTO. I need to understand > what causes you concern. > > Please help me to understand your concern. If the documentation is inadequate > I must correct of extend it. > > Thanks. > In chapter 8.2.2 Joining a domain: Windows 2000/XP Professional (on page 131) point 4 says: "Click the computer name tab. [...] Clicking the Network ID button will launch the configuration wizard. Do not use this with Samba-3." I was asking this because I used it also with Samba-3 and I would like to know if there are some side effects when using it or why it is explicitly mentioned. Thanks. Michael -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
