Re: [Samba] bug - 3.0.14, 3.0.21 intractable browsing problems - help needed

[Stephen Bosch]

Gordon Messmer wrote:
> Stephen Bosch wrote:
>>
>> If the Samba server is the domain browser, the Network Neighborhood (or
>> My Network Places) for the domain is empty. As soon we reset the server
>> to not be a browser of any sort, another machine on the network takes
>> over, and we see all the hosts. This is even though we can connect to
>> the Samba PDC and view shares, and even though the Samba PDC knows it's
>> the browser.
> 
> If you use "smbclient -L " on the PDC's command line, does it
> list the hosts in the local network?

'smbclient -L PDC' on the PDC gives:

> added interface ip=10.130.1.202 bcast=10.130.1.255 nmask=255.255.255.0
> Password:
> Domain=[HEDL] OS=[Unix] Server=[Samba 3.0.14a]
> 
> Sharename   Type  Comment
> -     ---
> print$  Disk
> psqlfiles   Disk  PSQL Files on Linux for Workgroup Engines
> public  Disk  Common Hedlin Lauder shares
> accounting  Disk  accounting files
> IPC$IPC   IPC Service (Samba Server 3.0.14a)
> ADMIN$  IPC   IPC Service (Samba Server 3.0.14a)
> laserjetPrinter   HP Laserjet 1300 series
> rootDisk  Home Directories
> Domain=[HEDL] OS=[Unix] Server=[Samba 3.0.14a]
> 
> Server   Comment
> ----
> PDC  Samba Server 3.0.14a
> VMWAREXP
> VODACOMM
> 
> WorkgroupMaster
> ----
> HEDL PDC
> OFFICE   ACCOUNTS
> WORKGROUPWOPR

... so it's building a proper browse list.

This is what 'nbtstat -a PDC' from an XP machine (VODACOMM) in the
domain shows:

> 
> Local Area Connection:
> Node IpAddress: [10.130.1.10] Scope Id: []
> 
>NetBIOS Remote Machine Name Table
> 
>Name   Type Status
> -
> PDC<00>  UNIQUE  Registered 
> PDC<03>  UNIQUE  Registered 
> PDC<20>  UNIQUE  Registered 
> ..__MSBROWSE__.<01>  GROUP   Registered 
> HEDL   <00>  GROUP   Registered 
> HEDL   <1B>  UNIQUE  Registered 
> HEDL   <1C>  UNIQUE  Registered 
> HEDL   <1D>  UNIQUE  Registered 
> HEDL   <1E>  GROUP   Registered 
> 
> MAC Address = 00-00-00-00-00-00
> 

I understand the empty MAC address is not supposed to be a concern, but
I have no idea why.

Here is 'net view' from the same XP machine, captured from a Cygwin window:

> [EMAIL PROTECTED] ~
> $ net view
> System error 64 has occurred.
> 
> The specified network name is no longer available.
> 
> 
> [EMAIL PROTECTED] ~
> $ net view
> There are no entries in the list.
> 
> 
> [EMAIL PROTECTED] ~
> $ net view /DOMAIN:HEDL
> There are no entries in the list.
> 
> 
> [EMAIL PROTECTED] ~
> $

Believe me, this reflects exactly what I see in the "My Network Places"
browse window, which is nothing whatsoever.

-Stephen-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] bug - 3.0.14, 3.0.21 intractable browsing problems - help needed

[Stephen Bosch]

Gordon Messmer wrote:
> Stephen Bosch wrote:
> 
>>
>> If the Samba server is the domain browser, the Network Neighborhood (or
>> My Network Places) for the domain is empty. As soon we reset the server
>> to not be a browser of any sort, another machine on the network takes
>> over, and we see all the hosts. This is even though we can connect to
>> the Samba PDC and view shares, and even though the Samba PDC knows it's
>> the browser.
> 
> 
> If you use "smbclient -L " on the PDC's command line, does it
> list the hosts in the local network?

By , do you mean the Samba PDC?

-Stephen-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] bug - 3.0.14, 3.0.21 intractable browsing problems - help needed

[Stephen Bosch]

Hi, Anthony:

Thanks for your reply. My comments are below.

Anthony Messina wrote:
> stephen, in your earlier posts, you mentioned that these are windows
> 2000 clients; is that correct?

Yes, that is true, however -- in our laboratory environment, the clients
are XP clients, and we observe the same problem.

> perhaps, just perhaps, it has something to do with windows 2000.  the
> "known good" setup i sent you only has winxp and linux/samba clients on
> it and i do not have a way to test windows 2000 clients.
> 
> are there any registry-related keys or security settings for windows
> 2000 computers that my affect their ability to receive browse lists from
> a non-windows domain browser?

Nothing that has been deliberately added. The machines at the production
site were part of a Windows NT 4.0 domain prior to the introduction of
Samba.

> on any one of the windows 2000 computers, what is the output of the
> nbtstat command line program with/without the linux computer as the pdc?

I'll have to post it -- I need to get onto an XP machine to do that. In
the meantime, I can tell you that I am able to use nbtstat to examine
machines, and the PDC reports itself as the master browser, but nbtstat
doesn't provide me any information about the contents of the master
browse list.

When I do "net view", I get the text equivalent of the empty My Network
Places.

> does anything show up in the windows 2000 logs about browsing control?

No, much to my surprise. I've looked through the event viewer and don't
see any browse errors (but I also don't see any information regarding
browser elections).

I think it's important to make a distinction here between being unable
to browse the network, and being able to browse the network but not
seeing any objects in the browse list. As far as the client is
concerned, it has a valid browse list -- the trouble is that it contains
0 objects. I am not seeing an error such as "Unable to browse the network."

> i have been researching this problem, to no avail for you.  is your
> samba computer also the pdc (sorry i can't recall for the moment)?

Yes, the Samba computer is the PDC. (Thanks for all your effort, by the
way).

> i would like to keep plugging away at this and i think we maybe should
> look at things from the windows side for a bit to see if something may
> be done there.
> 
> check out these microsoft support articles (they may or may not solve
> the problem instantly, but they may give some clues as to where to go).
> 
> http://support.microsoft.com/kb/168821/en-us

This one is quite vague...

> http://support.microsoft.com/kb/135404/en-us

This seems only to apply when browsing across network segments. The
problem we are experiencing is happening with clients on the same
network segment.

> these two links apply to windows 2000 and not windows xp so i'm thinking
> that some browsing differences on the windows side may exist between the
> two.
> 
> also, i can give you the option of posting this problem in my own
> support forum at http://messinet.com/modules.php?name=Forums if you feel
> like no one else on this list is working on this with you.

Thanks. It's not that I don't think people on this list are working with
me; this is just a stumper, and I don't think the answer is obvious.

-Stephen-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba PDC with Slave LDAP server

[Anthony Messina]

ashok cvs wrote:

Hi all

Thanks for Replying , i have another query.

In BDC , according the samba3-by example PDF,
IDMAP is said to be pointed to Master LDAP Server.
But in Master LDAP server i have samba 3.0.21, which is configured as PDC,
i have created users and all windows users are able to login to PDC.

but i have only these entries in ou=Idmap, in Master LDAP server
dn:ou=Idmap,dc=mydomain,dc=com
objectClass: Organizational Unit
objectClass: SambaunixIdpool
ou: idmap
uidnumber: 1
gidnumber: 1

Apart from these entries in ou=Idmap, i donot have any other entries,

i home some how feel, there should be more entires, ie when ever a user is
created
there should some entry.

what is wrong,

now since i have already created users, and all my windows clients are
already joined,
without disturibing the current environment, is it possible to correct the
Idmap problem.

please guide  me

Regards
ashok

On 1/27/06, *Anthony Messina* <[EMAIL PROTECTED] 
> wrote:


ashok cvs wrote:
 > Hi all
 >
 > I have a samba PDC with LDAP with samba version
3.0.21,(domain=mydomain.com 
 > ).
 >  the samba and openldap are configured on a single system.
 >  i would like to setup samba BDC with slave LDAP server for domain
 > mydomain.com 
 > and samba BDC is also having DNS server for domain .
 >
 > my query is, the nsswitch.conf and ldap.con of BDC should point
to it's own
 > LDAP server
 > or Master LDAPserver
 >
 > and in smb.conf file of BDC, the passdb backed should point to
master or
 > slave.
 >
 > and smbpasswd -w , (which password should i enter , the
master
 > LDAP server rootdn password or slave LDAP server rootdn passowrd)
 >
 > please guide me
 >
 > Regards
 > ashok

the bdc should point to its local ldap (slave) server.  this is what
gives you the ability to run as a *backup*.  if you had both pdc and bdc
pointing to the master ldap server and that server went down, your bdc
is worthless.

read the "official how-to" at samba.org .  it
describes the various
options for setting up a pdc and bdc with ldap.

http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-bdc.html

by far, the best is pointing the pdc at the master ldap server
(read/write) and pointing the bdc at the slave server (read only).

you will also need to point your nsswitch.conf and your ldap.conf on the
  bdc to the slave server (assuming your samba bdc is on the same host
as your slave ldap server.

-anthony



i'll need some additional help from some experts on this one...  afaik, 
idmap is not used when winbind isn't used and if your users share both 
posix and samba info together in ldap.  if you have a samba pdc and bdc, 
with a properly set up ldap that has all posix/samba infor for each user 
combined, then you don't need winbind (because you're not pulling 
usernames from windows) and you don't need idmap.


please correct me if i am wrong because this is how i understood the 
samba howto.


though i can say, i don't use idmap anywhere and i have no problems 
mapping users effectively.


-anthony

--
My Website: http://messinet.com
My Online Gallery: 
http://messinet.com/modules.php?name=Web_Links&l_op=visit&lid=3

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba PDC with Slave LDAP server

[ashok cvs]

Hi all

Thanks for Replying , i have another query.

In BDC , according the samba3-by example PDF,
IDMAP is said to be pointed to Master LDAP Server.
But in Master LDAP server i have samba 3.0.21, which is configured as PDC,
i have created users and all windows users are able to login to PDC.

but i have only these entries in ou=Idmap, in Master LDAP server
dn:ou=Idmap,dc=mydomain,dc=com
objectClass: Organizational Unit
objectClass: SambaunixIdpool
ou: idmap
uidnumber: 1
gidnumber: 1

Apart from these entries in ou=Idmap, i donot have any other entries,

i home some how feel, there should be more entires, ie when ever a user is
created
there should some entry.

what is wrong,

now since i have already created users, and all my windows clients are
already joined,
without disturibing the current environment, is it possible to correct the
Idmap problem.

please guide  me

Regards
ashok

On 1/27/06, Anthony Messina <[EMAIL PROTECTED]> wrote:
>
> ashok cvs wrote:
> > Hi all
> >
> > I have a samba PDC with LDAP with samba version 3.0.21,(domain=
> mydomain.com
> > ).
> >  the samba and openldap are configured on a single system.
> >  i would like to setup samba BDC with slave LDAP server for domain
> > mydomain.com
> > and samba BDC is also having DNS server for domain .
> >
> > my query is, the nsswitch.conf and ldap.con of BDC should point to it's
> own
> > LDAP server
> > or Master LDAPserver
> >
> > and in smb.conf file of BDC, the passdb backed should point to master or
> > slave.
> >
> > and smbpasswd -w , (which password should i enter , the master
> > LDAP server rootdn password or slave LDAP server rootdn passowrd)
> >
> > please guide me
> >
> > Regards
> > ashok
>
> the bdc should point to its local ldap (slave) server.  this is what
> gives you the ability to run as a *backup*.  if you had both pdc and bdc
> pointing to the master ldap server and that server went down, your bdc
> is worthless.
>
> read the "official how-to" at samba.org.  it describes the various
> options for setting up a pdc and bdc with ldap.
>
> http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-bdc.html
>
> by far, the best is pointing the pdc at the master ldap server
> (read/write) and pointing the bdc at the slave server (read only).
>
> you will also need to point your nsswitch.conf and your ldap.conf on the
>   bdc to the slave server (assuming your samba bdc is on the same host
> as your slave ldap server.
>
> -anthony
>
> --
> My Website: http://messinet.com
> My Online Gallery:
> http://messinet.com/modules.php?name=Web_Links&l_op=visit&lid=3
>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] bug - 3.0.14, 3.0.21 intractable browsing problems - help needed

[Gordon Messmer]

Stephen Bosch wrote:


If the Samba server is the domain browser, the Network Neighborhood (or
My Network Places) for the domain is empty. As soon we reset the server
to not be a browser of any sort, another machine on the network takes
over, and we see all the hosts. This is even though we can connect to
the Samba PDC and view shares, and even though the Samba PDC knows it's
the browser.


If you use "smbclient -L " on the PDC's command line, does it 
list the hosts in the local network?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] bug - 3.0.14, 3.0.21 intractable browsing problems - help needed

[Anthony Messina]

Stephen Bosch wrote:

Hello:

This browsing problem is not going away. We have followed the how-to,
used someone else's "known good" config, perused packet dumps until we
were blue, and tried replicating the setup in a laboratory environment
to see if it was site-specific.

The problem is still there:

If the Samba server is the domain browser, the Network Neighborhood (or
My Network Places) for the domain is empty. As soon we reset the server
to not be a browser of any sort, another machine on the network takes
over, and we see all the hosts. This is even though we can connect to
the Samba PDC and view shares, and even though the Samba PDC knows it's
the browser.

I am at a loss as to how to troubleshoot this. Samba makes wonderful,
wordy logs, but I don't see anything wrong. I've looked through packet
captures, and I have no idea what a "normal" capture is supposed to look
like. We can see all the broadcasts. As I've said, we've tried this in a
lab, and we get the same result. It also happens with 3.0.21.

I'm prepared to go through a step-by-step process in order to track this
down. I'm on a mission. I want to know what's going here, and I think
finding out would benefit the Samba community. But I need assistance
from people who can interpret the log information and understand
SMB/CIFS better than I do.

Perhaps we've missed something really obvious, but I doubt it. At any
rate, I would be happy to be proved wrong.

Asking most sincerely for help,

-Stephen-


stephen, in your earlier posts, you mentioned that these are windows 
2000 clients; is that correct?


perhaps, just perhaps, it has something to do with windows 2000.  the 
"known good" setup i sent you only has winxp and linux/samba clients on 
it and i do not have a way to test windows 2000 clients.


are there any registry-related keys or security settings for windows 
2000 computers that my affect their ability to receive browse lists from 
a non-windows domain browser?


on any one of the windows 2000 computers, what is the output of the 
nbtstat command line program with/without the linux computer as the pdc?


does anything show up in the windows 2000 logs about browsing control?

i have been researching this problem, to no avail for you.  is your 
samba computer also the pdc (sorry i can't recall for the moment)?


i would like to keep plugging away at this and i think we maybe should 
look at things from the windows side for a bit to see if something may 
be done there.


check out these microsoft support articles (they may or may not solve 
the problem instantly, but they may give some clues as to where to go).


http://support.microsoft.com/kb/168821/en-us
http://support.microsoft.com/kb/135404/en-us

these two links apply to windows 2000 and not windows xp so i'm thinking 
that some browsing differences on the windows side may exist between the 
two.


also, i can give you the option of posting this problem in my own 
support forum at http://messinet.com/modules.php?name=Forums if you feel 
like no one else on this list is working on this with you.


i'll keep searching.  for the first time in a long time, i'm wishing i 
had a w2k computer, but only to test...


-anthony

--
My Website: http://messinet.com
My Online Gallery: 
http://messinet.com/modules.php?name=Web_Links&l_op=visit&lid=3

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] bug - 3.0.14, 3.0.21 intractable browsing problems - help needed

[Stephen Bosch]

Hello:

This browsing problem is not going away. We have followed the how-to,
used someone else's "known good" config, perused packet dumps until we
were blue, and tried replicating the setup in a laboratory environment
to see if it was site-specific.

The problem is still there:

If the Samba server is the domain browser, the Network Neighborhood (or
My Network Places) for the domain is empty. As soon we reset the server
to not be a browser of any sort, another machine on the network takes
over, and we see all the hosts. This is even though we can connect to
the Samba PDC and view shares, and even though the Samba PDC knows it's
the browser.

I am at a loss as to how to troubleshoot this. Samba makes wonderful,
wordy logs, but I don't see anything wrong. I've looked through packet
captures, and I have no idea what a "normal" capture is supposed to look
like. We can see all the broadcasts. As I've said, we've tried this in a
lab, and we get the same result. It also happens with 3.0.21.

I'm prepared to go through a step-by-step process in order to track this
down. I'm on a mission. I want to know what's going here, and I think
finding out would benefit the Samba community. But I need assistance
from people who can interpret the log information and understand
SMB/CIFS better than I do.

Perhaps we've missed something really obvious, but I doubt it. At any
rate, I would be happy to be proved wrong.

Asking most sincerely for help,

-Stephen-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba authectication mechanism

[Gordon Messmer]

[EMAIL PROTECTED] wrote:


We referred to some documentation that said that even after importing the
NIS users from NIS server, we need to change the password using the
smbpasswd command for a NIS user before Samba recognises this user as a
valid one. Is this conversion from the NIS server database to the Samba
password database a mandatory one?


Yes, but the same should have been true of your users with data in the 
password file.  Samba can only authenticate against the unix password 
database if you set "encrypt passwords = no", and reconfigure all of 
your clients so that they send plain-text passwords across the network.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] userPassword in a LDAP database of a Samba3 domain

[Gordon Messmer]

fabricio bianco abreu wrote:


Now I am trying to use the same ldap server to support authentication to
unix/linux services. 
Users that have userPassword attribute in the MD5 form can be authentication by

unix/linux services. The other users cannot.

My question is: Is there a way to populate userPassword attribute in the MD5
format so that users are not required to have their password changed? I believe
a good opportunity to do so occurs whenever a user logs to the domain.


Well, you can't convert a crypt hash to an MD5 hash, so probalby not. 
Where did the value of that attribute come from, to begin with?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] macosx (mount_smbfs ok - macosx GUI not working)

[David Rio Deiros]

Hi there,

I have machine running:

Linux 2.2.20
Samba version 3.0.14a (debian package)
Check the end of the email for the samba config file

The samba machine is sharing a directory and it is validating users
through a windows 2k PDC.

Everything works if I use windows/linux clients, but when I try to
use a share directory from a macosx client (10.4.4) using the
finder (GUI), it doesn't work. I can mount the resource, and I can
create directories, but when I try to copy stuff on those directories
it complains telling me that I don't have enough permissions.

The weird thing is that, if I try to mount the share from the console
using mount_smbfs(8), then it works perfectly. I have even try it to
mount the share in this way and then to launch the finder in the
directory where I mounted the share, but if I use the guy to copy
stuff I get errors, if I use the command line, it works.

I checked the logs but I haven't found anything interesting, plus
the debug level is pretty low and I can not change it because there
is people using the system.

In addition to that, I have tried exactly the same config file in
another machine which is running:

Linux milhouse 2.6.13
samba 3.0.14a (compiled from source)

and it works fine, using linux windows or macosx as clients. 
   
The next thing I am going to try is to compile samba 3.0.14a on
devlinux (production samba machine) using exactly the same compilation
directives and see if it works.
  
I would appreciate any help you can give me.

Thanks,


[global]
   panic action = /usr/share/samba/panic-action %d
   workgroup = DIRIA
   server string = DEVLINUX
   printcap name = /etc/printcap
   load printers = yes
   invalid users = root
   log file = /var/log/samba/log.%m
   max log size = 50
   syslog = 0

   security = domain
   password server = DIGPDC
   domain logins = no
   encrypt passwords = true
   passdb backend = tdbsam guest
   socket options = TCP_NODELAY

   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n 
*Retype\snew\sUNIX\spassword:* %n\n .

   obey pam restrictions = yes

[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   create mask = 0700


[printers]
   comment = All Printers
   browseable = no
   path = /tmp
   printable = yes
   public = no
   writable = no
   create mode = 0700

[devlinux]
comment = XXX
path = /home/httpd
public = yes
writable = yes
printable = no
write list = @web
force group = +web
create mode = 0774
directory mode = 0775

[tmp]
comment = For testing only, please
path = /tmp
read only = no
public = yes

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] oplocks general question

[GBanschbach]

Hi all,

  When oplocks = no, I still see the entries below in log.smbd.
Clients are XP Pro SP2.  Is this a harmless entry?  I had another site with
the same config, but was previously getting corruption.  On some other
sites with non SP2 machines I do not see any oplock entries in the
log.smbd.

[2006/01/25 18:30:11, 3] smbd/oplock.c:init_oplocks(1211)
  open_oplock_ipc: opening loopback UDP socket.
[2006/01/25 18:30:11, 3] smbd/oplock.c:init_oplocks(1242)
  open_oplock ipc: pid = 8570, global_oplock_port = 2144

Thanks very much guys


Greg

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] help me understand ldapsam:trusted

[Tomasz Chmielewski]

According to smb.conf manual:

"the ldapsam:trusted=yes option assumes that the complete user and group 
database that is relevant to Samba is stored in LDAP"


and also:

"ldapsam:trusted=yes can be activated and Samba can completely bypass 
the NSS system to query user information".



If I understand it well, enabling this option would make possible to 
authenticate Samba users against LDAP on systems without NSS support.


However, this is not the case: no matter if this option is enabled or 
not, Samba won't authenticate the user if he's only in LDAP (and the 
operating system doesn't see that user in /etc/passwd, and can't verify 
in LDAP via NSS).


So do I understand this option wrongly?

I'm using Samba 3.0.21a on a Linux distro that doesn't support NSS.


--
Tomasz Chmielewski
http://wpkg.org
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Any ESRI users? Upgrade 3.0.14 to 3.0.21a broke Arcmap layer loading?

[Elizabeth Schwartz]

We just upgraded our samba server from 3.0.14 to 3.0.21a and have discovered
a subtle but very painful problem.
Users of ESRI ArcMap (on fully patched Windows XP clients) are unable to
read complex layered file data.

Arcmap works fine with 3.0.14, it works fine with the data on a windows
share, and it works fine when I set up a server to run the version of samba
shipping with Solaris 9 (3.0.2! ). But, I really don't want to downgrade the
primary file server to one of these old versions. The data also works fine
if it is copied back from the Samba server to a local disk.

The problem as I understand it is that ArcMap loads ".lyr" and ".mxd" files
which in turn contain metadata that references multiple other files. When
these secondary files are loaded from the Samba 3.0.21a server, they are
opened but not fully read - the database files show empty fields, the maps
show partial images, etc. To quote our GIS guy: "arcmap documents that have
nested layer references to data on SAMBA, and also compressed shape (.sdc)
files such as are included on the esri maps and data cds (if they happen to
be on aSAMBA share, either cause arcmap to crash, or appear in the table of
contents as layers that have no records."

The windows XP event viewer shows an error when this happens:
MRxSmb  Description: The redirector failed to determine the connection type
http://support.microsoft.com/kb/315244/

 I'm not seeing any particular errors on the server side  (although I am
getting some of these: https://bugzilla.samba.org/show_bug.cgi?id=3346
i'll be glad to see
3.0.21b)

ESRI claims to have no knowledge of the problem, and since their software
works OK with other Samba versions they feel it isn't at their end.

Are there other ArcMap users here? Any thoughts on what to pursue next?
(other than installing 3.0.21b at the first opportunity)

thanks Betsy
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba and add printer drivers from xp

[support_mail]

Hi
i use samba server with winxp box on our lan from 3 years and before i can 
"upload" the xp drivers from a xp machine to samba server without any 
problem's but recently after un hard disk crash, i upgrade my mandriva 
server to the last release mdv (2006.0)  and now i wasn t able to upload the 
drivers again, directly from the server if i do, loged in root the cmd 
addsmb -a -v evry thing go fine, from xp clients i can see the new name of 
the drivers but in the samba share of drivers there is no file in the x86 
directory ..

so i don t hunderstant and find why the upload can t work any way
these the error message of xp client (sorry i m french and so i put the 
message in french and try to translate it the better i can):

french :
"Assistant ajout de pilote d'imprimante : Impossible d'installer le pilote 
HP OfficeJet R80, windows 2000 ou XP,Intel. Impossible de terminer cette 
opération"

English :
"Assistant addition of pilot of printer: Impossible to install the pilot HP 
OfficeJet R80, Windows 2000 or XP, INTEL. Impossible to finish this 
operation"


Perhaps if you autoriz me i can put snapshot in another mail to explain wath 
i do :
from the xp client i logon to the samba pdc with the root account, i browse 
our networ, server, printer i do a right clic and choise "propriety of 
server" i go to the driver tab and clic the add buton after i make the 
correct choise of printer model, os and so on and finaly have the error 
message
I try to have a simultany look of samba, cups and syslog message but nothing 
else bad juste when i open the printer wizard share a error in sylog who say 
: Jan 27 18:07:30 alpha smbd[4797]:   supervision (192.168.0.10) couldn't 
find service ::{2227a280-3aea-1069-a2de-08002b30309d}
i know this is the printer in windows registry but i don 't understand realy 
the problem my var/cache/samba/printers seems to be ok and on window i haven 
t another printers than printer server (one hp an one pdf).

thank


-
Aucune touche n'a été blessée au cours de la rédaction de ce message

- 



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Saving MS Word Documents

[Jeffrey M. Johnson]

Okay,

I know this has come up before and before being chastised I spent a couple
hours reviewing the archives and could find the messages on it.

I have a user who when he attempts to save a MS Word Document (test
file.doc) to a samba share gets the following error:
Word cannot complete the save due to file permission error. 
(I:\samba\directory\test file. Doc)

The user is the owner of the directory in question
drwxrwxr-x   2 user group  512 Jan 27 10:53 . 

and when the save fails a number of temporary files are created:
-rwxrw-r--   1 user group0 Jan 27 10:52 ~WRL0607.tmp
-rwxrw-r--   1 user group0 Jan 27 10:51 ~WRL1263.tmp
-rwxrw-r--   1 user group0 Jan 27 10:41 ~WRL2046.tmp
-rwxrw-r--   1 user group0 Jan 27 10:53 ~WRL2572.tmp


I have recently upgraded to samba 3.0.21a and the user is using MS Word
2003.  

As a side note this problem only effects MS Word, other applications are not
affected.

Any help will be greatly appreciated.

Jeff Johnson

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] smldap-passwd issue with ldap

[Felipe Piccirilo]

I am trying to change a password from user at my linux box and I am getting
the following error:

-
 [EMAIL PROTECTED] /]# /opt/IDEALX/sbin/smbldap-passwd myuser
Changing password for myuser
New password :
Retype new password :
failed to modify entry: context csn exists before context prefix does at
/opt/IDEALX/sbin/smbldap-passwd line 212,  line 2.
Unable to change password : context csn exists before context prefix does at
/opt/IDEALX/sbin/smbldap-passwd line 245,  line 2.
-

Do anybody have any ideia about what could possible be?

regards,

Felipe.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] smbldap-tools equivalent (which doesn't need perl)?

[Tomasz Chmielewski]

Is there any smbldap-tools equivalent, which doesn't need perl (or 
python, or similar)?


I installed Samba on an embedded system, which doesn't have perl 
installed, and I wonder how can I add users now? :)



--
Tomasz Chmielewski
http://wpkg.org
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] ldap not using kerberos (winbind rid idmap)

[Roman Sommer]

thanks for your reply.
I was more thinking in terms of "how to kerberize ldap queries" rather
than how to enable SSL/TLS :) Or is this setting supposed to enable
spnego encrypted queries?

regards, Roman


Gerald (Jerry) Carter wrote:
> Roman Sommer wrote:
> 
>>> too. In fact ldap even asks for available SASL mechanisms. 
>>> After some negotiation it _successfully_ binds using GSS SPNEGO.
>>> But.. even after this successfully established encrypted bind it
>>> keeps querying in plain text. Is there anything I can do about it?
> 
> Try using the StartTLS support for Windows 2003 in Samba 3.0.21
> and later.
> 
> 
> 
> 
> 
> cheers, jerry
> =
> I live in a Reply-to-All world.   ---
> Samba--- http://www.samba.org
> Centeris ---  http://www.centeris.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 3.0.21 +solaris 8 +xdm +pam +2003 AD

[Batty, Richard]

We have recently upgraded to :

samba-3.0.21
openssl-0.9.7g
krb5-1.4.3
openldap-2.3.11
db-4.4.16
cyrus-sasl-2.1.21
m4-1.4.4flex-2.5.31
autoconf-2.59
libiconv-1.9.1
gcc-3.4.2
bison-2.1
automake-1.9
libtool-1.5.22

and have got samba authenticating against our 2003 AD servers, however we now 
discovered that someone has setup xdm to use pam authentication to the old NT4 
domain using xdm.pam and pam_smb_auth.so.1

weve tried repointing the pam_smb.conf file to the new domain controllers and 
it still wont authenticate is pam_smb still in use or is there a better way to 
do this?

Thanks

Rich


This e-mail and any attachment is for authorised use by the intended 
recipient(s) only. It may contain proprietary material, confidential 
information and/or be subject to legal privilege. It should not be copied, 
disclosed to, retained or used by, any other party. If you are not an intended 
recipient then please promptly delete this e-mail and any attachment and all 
copies and inform the sender. Thank you.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] bug in 3.0.21a?

[James Kosin]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Gerald (Jerry) Carter wrote:
<<-- snip -->>
> 
> Fixed for 3.0.21b.  If you could test the SAMBA_3_0_RELEASE branch
> and verify, that would be great.  The other bug reporters have also
> confirmed the fix.
> 
> 
> 
> 
> 
> cheers, jerry
Jerry,

Is it possible to get the patches page updated with these patches as
they happen?
Or is the patches page for just critical fixes?

Thanks,
James Kosin

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD2ilqjNkgON6wBZARAkSOAJ9cS4m4fu4nsriK0sLm/JplICg1qACghp+h
yHeVqZVj57BIw4LumxGUXWU=
=Ec5Z
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] performance problem. big amount of net traffic for file properties

[Marc Cousin]

Hi, 

I'm working with Jean-Philippe, and the problem doesn't seem to be a buggy net 
driver, as all the packets received by the server seem valid (no checksum 
error). But of course, we're no windows experts, so maybe in windows the 
low-level drivers can have an influence with the upper IP stack...

Most (if not all) of the traffic from the XP workstation seems OK, except for 
this crazy retransmission of the same request (not a tcp retransmission, the 
paquets have different tcp sequence numbers).





Le Vendredi 27 Janvier 2006 12:06, FARCY Jean-Philippe a écrit :
> Hi,
>
> We're having performance problems with some workstations (XP workstations).
>
> The problem we diagnosed occurs when a user right clicks on a UNC link (on
> his desktop). The popup window only appears after 80 seconds. On another XP
> workstation (in the same room, same switch ...), it works OK.
>
> We have dumped the network traffic from both these workstations, and the
> result is that from the buggy workstation, the amount of traffic is around
> 30Mb,  with the same QUERY_FILE_INFO sent thousands of times (subcommand
> 0x0007).
>
> This problem is having a big impact on our performance. Is it a known issue
> ? (We can provide the dumps)
>
>  Thanks a lot.
>
>
>
> Jean-Philippe FARCY, Administrateur Système
> SIGMA Informatique http://www.sigma.fr

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Cannot map guest shares in 'security = SERVER' mode o nsamba-3.0.9

[Rex Dieter]

Rene Kapeller wrote:


I did read the man pages all through, but I'm lost! After struggling for 
4 days, I decided to step back to samba-2.2.9, where everything works fine!


Did you try the other options for 'map to guest'?

For example, "Bad User" implies that if connecting as an *existing* 
user, that maptoguest will never apply.


said manpage says "Bad Uid" was the default behavior of Samba 2.x 
releases. but you already knew that, right?  (-:  Did you you try

map to guest = Bad Uid

Now what does the samba logs say when trying to connect (and it fails)? 
 I see no reference to any "public" share in the previous logs you posted.


-- Rex


Rene Kapeller wrote:

== problem =
'net use n: \\smbs1\public' on Windows XP, always asks for a password.
'smbmount //smbs1/public /mnt/public -o password=' does not.
This all used to work fine under Redhat-9 and Samba-2.2

...

   map to guest = Bad User



man smb.conf, read up on the options available for 'map to guest'.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba PDC with Slave LDAP server

[Anthony Messina]

ashok cvs wrote:

Hi all

I have a samba PDC with LDAP with samba version 3.0.21,(domain=mydomain.com
).
 the samba and openldap are configured on a single system.
 i would like to setup samba BDC with slave LDAP server for domain
mydomain.com
and samba BDC is also having DNS server for domain .

my query is, the nsswitch.conf and ldap.con of BDC should point to it's own
LDAP server
or Master LDAPserver

and in smb.conf file of BDC, the passdb backed should point to master or
slave.

and smbpasswd -w , (which password should i enter , the master
LDAP server rootdn password or slave LDAP server rootdn passowrd)

please guide me

Regards
ashok


the bdc should point to its local ldap (slave) server.  this is what 
gives you the ability to run as a *backup*.  if you had both pdc and bdc 
pointing to the master ldap server and that server went down, your bdc 
is worthless.


read the "official how-to" at samba.org.  it describes the various 
options for setting up a pdc and bdc with ldap.


http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-bdc.html

by far, the best is pointing the pdc at the master ldap server 
(read/write) and pointing the bdc at the slave server (read only).


you will also need to point your nsswitch.conf and your ldap.conf on the 
 bdc to the slave server (assuming your samba bdc is on the same host 
as your slave ldap server.


-anthony

--
My Website: http://messinet.com
My Online Gallery: 
http://messinet.com/modules.php?name=Web_Links&l_op=visit&lid=3

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Win2K3 Server, in Terminal Session,

[Peter Helander]

Hello Steven 

I read about your problem I am sorry I can't help you.

Because have the same problem. And have looked everywhere to 

find a solution so I wonder if you have fixed it

 

Best regards

 

/Peter

 

I have looked for several days and can not find the answer to my problem,
but
I'm sure it has to be a simple issue. I'm trying to map drives inside
Windows
Server 2003 Terminal Session from a local Samba server but can't get
connected.
I figure the problem is in Windows Registry but can't find web page on what
needs to be changed to get this working. 
 
I built a new Windows 2003 server. Logon to the new server through Terminal
Services (Remote Desktop Connection). Once connected I open Windows Explorer
and
try to browse over to my SAMBA server. My problem is that I get a Windows
Error
box saying I "\\FOO_SAMBA is not accessible." Then goes on saying I might
not
have permission. The last line says "The request is not supported."
 
Tried mapping a known share from the FOO_SAMBA server (\\FOO_SAMBA\test) and
I
get a different windows error message saying "The drive could not be mapped
because no network was found."
 
The domain this server is in is an is older NT4 style domain. (Not Active
Directory.) The Windows 2003 Server is a member of the ADOMAIN Domain. 
 
The FOO_SAMBA server in running on Solaris 8 sparc server. I do NOT have any
domain machine names configured in /etc/passwd file. Only users I want to
allow
to connect are in the /etc/passwd file and also part of the 'adomain' group
in
/etc/group file. 
 
I do not have any problem connecting to the FOO_SAMBA server from Win2K or
WinXP
workstations. Can even connect to shares from other Win2k Terminal Server,
inside a Remote Desktop Session. 
 

 

 

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] 3.0.10 not joined NT4 domain

[Melnikov Denis]

Hi, all!

I want to make Squid authorize users via NT4 domain.
I have Samba 3.0.10 (further named PROXY) and NT4SP3 PDC
(named CONTROL).

First, I try to join domain:

# net rpc join -U admin
Password: (I enter)
Joined domain: REGENT.CENTER.

It seems to be OK, but the following record appears in PDC's
system log:

Event ID: 5723
Source:   NETLOGON
Type: Error
Description:
The session setup from the computer PROXY failed because there
is no trust account in the security database for this computer.
The name of the account referenced in the security database is PROXY$.

Then,

# wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc0ac)
Could not check secret

I have catched network packets for both `net rpc join` and
`wbinfo`. So I may expose the dump if it will be useful.

My smb.conf:

[global]
workgroup = REGENT.CENTER
netbios name = proxy
server string = Samba Server
security = domain
password server = *
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
interfaces = eth1
dns proxy = no
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
template shell = /bin/false
winbind use default domain = no   # tried 'yes' as well


Regards,
Denis

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] ldap not using kerberos (winbind rid idmap)

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Roman Sommer wrote:

> too. In fact ldap even asks for available SASL mechanisms. 
> After some negotiation it _successfully_ binds using GSS SPNEGO.
> But.. even after this successfully established encrypted bind it
> keeps querying in plain text. Is there anything I can do about it?

Try using the StartTLS support for Windows 2003 in Samba 3.0.21
and later.





cheers, jerry
=
I live in a Reply-to-All world.   ---
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD2hVAIR7qMdg1EfYRAp2PAJ4ht+L8n0HEgwJeV7cuv7zDpyizQQCfTutD
MKVr6Z4kOU2glk7SKyM0808=
=k0gW
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] performance problem. big amount of net traffic for file properties

[Charles Marcus]

I have noticed the same on my XP comps, but not all. Currently I'm 
investigating the problem (maybe some NICs are not samba-friendly ;-)? 
The problematic machine uses Asus mainborad A8Vdeluxe (with marvel yukon 
ethernet card)


Well, I can share an experience I had with this MB...

I allowed WindowsUpdate to update the driver, and WHAM!  All Kinds of 
problems - locking up, poor performance...


I reinstalled the original driver from the CD that came with the MB, and 
problem solved.


You can tell which is installed by looking at the Properties of the 
Driver (Device Manager). If it says 'PCI' in the driver description, 
then it is the one from Windows Update. I know that the one offered by 
WU has changed at least two or three times since I saw this problem, so 
maybe the newer version(s) are fixed, but the original works fine, so I 
set that driver to never install.


Charles
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] bug in 3.0.21a?

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

werner maes wrote:
> hello
> 
> when  I try to connect to a share from my windows xp client, it does not
> work. In linux via smbclient, there's no problem.
> see below for the error log
> 
> version = 3.0.21a
> security = server (the problem only seems to occur on servers that rely
> on another samba server for authentication).

Fixed for 3.0.21b.  If you could test the SAMBA_3_0_RELEASE branch
and verify, that would be great.  The other bug reporters have also
confirmed the fix.





cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD2hCIIR7qMdg1EfYRAj89AJ43EPIp6+vT4v4/X2rQ7kq6/2jhngCfc5BG
fn3rvRfuA0zJkyT23jfVrYo=
=YPbl
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba daemons hang trying to lock locking.tdb

[Fermin Molina]

On Fri, 2006-01-27 at 07:52 +0100, Masopust, Christian wrote:
> Hi,
> 
> I had a similar behaviour on my RHEL 4 system (with the only difference
> that smbds did the fcntl64 to secrets.tdb).
> 
> I changed "machine password timeout = 0" in my smb.conf and the problem
> had gone away (do you have any messages in your logs pointing out that
> server password could not be changed?) 


With this option set to 0, I think the password is never updated, then,
secrets.tdb file is never used (I read in man.conf(5) that this is only
needed when using security=domain, not my case because I use
security=user).

But in my case, locking.tdb is used a lot (using strace, when the system
works well, I see a lot of fcntl64 calls using the locking.tdb file
descriptor).

Thanx for the answer!

/Fermin



> > -Original Message-
> > From: 
> > [EMAIL PROTECTED] 
> > [mailto:[EMAIL PROTECTED]
> > ba.org] On Behalf Of Fermin Molina
> > Sent: Thursday, January 26, 2006 11:58 PM
> > To: Jeremy Allison
> > Cc: samba@lists.samba.org
> > Subject: Re: [Samba] Samba daemons hang trying to lock locking.tdb
> > 
> > On Thu, 2006-01-26 at 12:23 -0800, Jeremy Allison wrote:
> > > On Wed, Jan 25, 2006 at 04:11:33PM +0100, Fermin Molina wrote:
> > > > Hi,
> > > > 
> > > > A day or so after starting samba, some daemons (diferent 
> > forks) begin to
> > > > hang. Then, the WinXP clients hang too completely.
> > > > 
> > > > When I try to figure out what is happen, I see that smbd 
> > daemons hangs
> > > > always in a fcntl64() call:
> > > > 
> > > > # strace -p 6414
> > > > Process 6414 attached - interrupt to quit
> > > > fcntl64(14, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, 
> > start=3684, len=1}  
> > > > Process 6414 detached
> > > > # 
> > > > 
> > > > The file descriptor 14 corresponds to 
> > /var/lib/samba/locking.tdb file.
> > > > A backtrace using gdb from one stalled daemon:
> > > 
> > > Known bug we fixed with 3.0.21a (in fact this was the *reason*
> > > for 3.0.21a... :-).
> > 
> > 
> > Errr... well, please, read at end of my email :-)
> > 
> > ---
> > The number of smbd daemons stalled increases in time.
> > I'm using FC4 with last updates installed and samba 3.0.21a.
> > 
> > Maybe is a kernel related problem with file locking?
> > 
> > Thanx in advance!
> > ---
> > 
> > The fact is that I have installed 3.0.21a samba version. 
> > FC4's RPMs from
> > samba.org web, and I get the same behaviour.
> > 
> > Thanx in advance!
> > 
> > -- 
> > Fermin Molina Ibarz
> > Tècnic sistemes - ASIC
> > Universitat de Lleida
> > Tel: +34 973 702151
> > GPG: 0x060F857A
> > 
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/listinfo/samba
> > 
-- 
Fermin Molina Ibarz
Tècnic sistemes - ASIC
Universitat de Lleida
Tel: +34 973 702151
GPG: 0x060F857A


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] performance problem. big amount of net traffic for file properties

[Piotr Legiecki]

Jean-Philippe FARCY wrote:

Hi,

We're having performance problems with some workstations (XP workstations).

The problem we diagnosed occurs when a user right clicks on a UNC link (on his 
desktop). The popup window only appears after 80 seconds. On another XP 
workstation (in the same room, same switch ...), it works OK.


I have noticed the same on my XP comps, but not all. Currently I'm 
investigating the problem (maybe some NICs are not samba-friendly ;-)? 
The problematic machine uses Asus mainborad A8Vdeluxe (with marvel yukon 
ethernet card)


Samba 3.0.14a/Debian stable.

Regards
Piotr L.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] performance problem. big amount of net traffic for file properties

[Jean-Philippe FARCY]

Hi,

We're having performance problems with some workstations (XP workstations).

The problem we diagnosed occurs when a user right clicks on a UNC link (on his 
desktop). The popup window only appears after 80 seconds. On another XP 
workstation (in the same room, same switch ...), it works OK.

We have dumped the network traffic from both these workstations, and the 
result is that from the buggy workstation, the amount of traffic is around 
30Mb,  with the same QUERY_FILE_INFO sent thousands of times (subcommand 
0x0007).

This problem is having a big impact on our performance. Is it a known issue ? 
(We can provide the dumps)

 Thanks a lot.



Jean-Philippe FARCY, Administrateur Système 
SIGMA Informatique http://www.sigma.fr
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Creating a machine account manually (EMC, Samba PDC)

[taso]

Bryan Ragon wrote:

Greetings,
I am trying to join a EMC Celerra NS502 CIFS server to our Samba
3.0.21a domain controller.  According to EMC, I was told that we need to
manually create the machine account first.  How is the best way to do this?


How about

<...>/smbldap-useradd -w NS502



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] bug in 3.0.21a?

[werner maes]

hello

when  I try to connect to a share from my windows xp client, it does 
not work. In linux via smbclient, there's no problem.

see below for the error log

version = 3.0.21a
security = server (the problem only seems to occur on servers that 
rely on another samba server for authentication).


any ideas?

werner

[2006/01/27 09:30:32, 2] auth/auth.c:check_ntlm_password(307)
  check_ntlm_password:  authentication for user [werner] -> [werner] 
-> [werner] succeeded

[2006/01/27 09:30:32, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(332)
  NTLMSSP Sign/Seal - Initialising with flags:
[2006/01/27 09:30:32, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
  Got NTLMSSP neg_flags=0x600082b5
[2006/01/27 09:30:32, 0] lib/fault.c:fault_report(36)
  ===
[2006/01/27 09:30:32, 0] lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 11 in pid 3023 (3.0.21a)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2006/01/27 09:30:32, 0] lib/fault.c:fault_report(39)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2006/01/27 09:30:32, 0] lib/fault.c:fault_report(40)
  ===
[2006/01/27 09:30:32, 0] lib/util.c:smb_panic2(1554)
  PANIC: internal error
[2006/01/27 09:30:32, 0] lib/util.c:smb_panic2(1562)
  BACKTRACE: 15 stack frames:
   #0 smbd(smb_panic2+0x8c) [0xea6d7c]
   #1 smbd(smb_panic+0x1a) [0xea6faa]
   #2 smbd [0xe91167]
   #3 /lib/tls/libc.so.6 [0x2488c8]
   #4 smbd(ntlmssp_sign_init+0xe5) [0xda7ca5]
   #5 smbd [0xda5080]
   #6 smbd(ntlmssp_update+0x296) [0xda40f6]
   #7 smbd(auth_ntlmssp_update+0x48) [0xeebc78]
   #8 smbd(reply_sesssetup_and_X+0x777) [0xd3d5d7]
   #9 smbd [0xd6b6b7]
   #10 smbd(process_smb+0x19e) [0xd6baee]
   #11 smbd(smbd_process+0x159) [0xd6cae9]
   #12 smbd(main+0x945) [0xf2b845]
   #13 /lib/tls/libc.so.6(__libc_start_main+0xd3) [0x235e23]
   #14 smbd [0xd00cf1]


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba PDC with Slave LDAP server

[ashok cvs]

Hi all

I have a samba PDC with LDAP with samba version 3.0.21,(domain=mydomain.com
).
 the samba and openldap are configured on a single system.
 i would like to setup samba BDC with slave LDAP server for domain
mydomain.com
and samba BDC is also having DNS server for domain .

my query is, the nsswitch.conf and ldap.con of BDC should point to it's own
LDAP server
or Master LDAPserver

and in smb.conf file of BDC, the passdb backed should point to master or
slave.

and smbpasswd -w , (which password should i enter , the master
LDAP server rootdn password or slave LDAP server rootdn passowrd)

please guide me

Regards
ashok
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Cannot map guest shares in 'security = SERVER' mode o nsamba-3.0.9

[Rene Kapeller]

I did read the man pages all through, but I'm lost! After struggling for 
4 days, I decided to step back to samba-2.2.9, where everything works fine!


Rex Dieter wrote:

Rene Kapeller wrote:


== problem =

'net use n: \\smbs1\public' on Windows XP, always asks for a password.

'smbmount //smbs1/public /mnt/public -o password=' does not.

This all used to work fine under Redhat-9 and Samba-2.2


...


   map to guest = Bad User



man smb.conf, read up on the options available for 'map to guest'.


-- Rex



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] "LDAP only" authentication without NSS/PAM - possible?

[Tomasz Chmielewski]

Is it possible to configure Samba so that it could authenticate users 
from the LDAP server *only* (i.e., operating system doesn't see the 
users from LDAP).


I'm working on an embedded Samba domain controller, it is based on Linux 
/ busybox / uClibc (and Samba with OpenLDAP).


The system doesn't use glibc, but it's smaller brother uClibc, and it 
doesn't have anything like PAM or NSS.


Because of this, Samba can fetch the users from LDAP, but can't verify 
that these users exist as system users - and refuses to logon with 
NO_SUCH_USER.



Is there a way I can use Samba + LDAP without seeing LDAP users as 
system users?



--
Tomasz Chmielewski
http://wpkg.org
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba