[Samba] net join: Failed to parse NTLMSSP packet

[杭军]

Hi,
 
I am using samba+freeRADIUS talk to AD server on win2003 server. Everything is 
OK when I use samba-3.0.8.  
 
Now I want to updated to samba-3.3.3.  But failed at join to domain controler. 
(net ads join -U user%pwd).
 
debug:
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
SPNEGO login failed: Invalid parameter
failed session setup with NT_STATUS_INVALID_PARAMETER
Failed to join domain: failed to lookup DC info for domain 'xxx.COM' over rpc: 
Invalid parameter
 
My smb.conf:
AH-02fa83:~$ cat /usr/local/lib/smb.conf 
[global]
    workgroup = xxx
    netbios name = AH-02fa83
    server string = Samba Server
    log file = /var/log/samba/%m.log
    max log size = 500
    security = ads
    password server = 10.155.20.81
    #Enable support for only NTLMv2 on the server
    encrypt passwords = yes
    lanman auth = no
    ntlm auth = no
    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
    dns proxy = no
    idmap uid = 16777216-33554431
    idmap gid = 16777216-33554431
    template shell = /bin/bash
    winbind use default domain = no
    realm = xxx.COM
 
 Thanks.
John


  ___ 
  好玩贺卡等你发，邮箱贺卡全新上线！ 
http://card.mail.cn.yahoo.com/
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Fwd: Re: [Samba] linux -> windows special characters in filenames problems]

[John Drescher]

> Tried John's bash script, but it doesn't work when you have a file with ":"
> inside a folder also with ":", because it renames the folder first and then
> can't find the file.

I see, nesting will not work. Sorry.


BTW Haro, Thanks for the perl script. If I get time I will pay around
with that..

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] select network interface

[Petteri Larjos]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi,

I have two interfaces (eth1 and eth1:1) on my computer. I would like to
change password on remote server with swat but it fails because swat is
using interface eth1:1 to connect remote host and remote host does not
allow connections from that interface (or ip-address). How I can force swat
to use certain interface (eth1)? I tried 'interfaces' and 'bind interfaces
only' parameters in smb.conf without any luck.


Best regards,
Petteri Larjos

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkn2/+oACgkQ3dz7EBdslBL0FgCfTZwT1K9wWfnM9M4zHqlEKqyE
htUAn3WV8kgxGUpT9wsO9259cAfcg4E8
=0Lkc
-END PGP SIGNATURE-

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] linux -> windows special characters in filenames problems

[Haro de Grauw]

#!/usr/bin/perl

# Haro de Grauw (m...@harodegrauw.net), 28-04-1988
# 
# Windows illegal characters for file names are: < > : " / \ | ? *
# Of these, two are usable in Linux: : ?
# 
# This script renames all files and (sub)folders from current directory to 
replace
# : and ? with underscore _, in order to enable samba sharing or copy to FAT 
drive.
# 
# Based on a script by iman_saleh retrieved from 
http://www.perlmonks.org/?node_id=658908
# With thanks (iman_saleh really did most of the work on this).

# WARNING: filenames will be overwritten without warning. So, if you already 
have a file
# named "my_file" and a file named "my:file", the second one will be renamed to 
"my_file"
# due to character substitution, and will overwrite the original "my_file"!!!

# WARNING: this script will run in the CURRENT directory and all 
subdirectories. God help
# you if you run this script from the wrong place.



use Cwd; # module for finding the current working directory
$|=1;# turn off I/O buffering


# This subroutine takes the name of a directory and recursively scans down
# the filesystem from that point looking for files with : or ? in their name

sub ScanDirectory{
my ($workdir) = shift;
my ($startdir) = &cwd; # keep track of where we began
print "\nScanning folder $workdir\n";

chdir($workdir) or die "Unable to enter dir $workdir:$!\n";
opendir(DIR, ".") or die "Unable to open $workdir:$!\n";
my @names = readdir(DIR) or die "Unable to read $workdir:$!\n";
closedir(DIR);

foreach my $name (@names){
next if ($name eq ".");  # ignore files "." and "..", which are just 
pointers to current and parent directories, resp.
next if ($name eq ".."); #

$newName = $name;
$newName =~ s/\?/\_/g;
$newName =~ s/:/\_/g;
unless ($newName eq $name) {print "  Renaming $name to $newName\n";}
$result = rename($name, $newName) or die "cannot rename $name to 
$newName:$!\n"; # note that this will rename directories as well as files

if (-d $newName){ # is this a directory?
&ScanDirectory($newName); # if yes, then scan it!
}

}
chdir($startdir) or die "Unable to change to dir $startdir:$!\n";
}

&ScanDirectory(&cwd);
print "\nDone.\n\n";

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] linux -> windows special characters AND charset problem

[Miguel Medalha]

Furthermore, when I access a samba share from any XP machine,
file/directory names on the Linux machine with non-ASCII characters e.g.
"Gé Reinders" will display wrongly, with box replacing 'é'. 

  


I solved my problems with accented characters by using:

dos charset = CP850
unix charset = UTF-8
display charset = UTF-8
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] linux -> windows special characters in filenames problems

[John Drescher]

On Tue, Apr 28, 2009 at 1:17 PM, Kaleb Harper  wrote:
> I just tried 'mangled names = No', it made the directory names appear
> properly, but when I try to open the directory, I get an error message that
> it can't access the folder. So I assume the only other way is going to be to
> somehow remove/change the ' : '. Any suggestions on how to do this would be
> helpful. If it's doable inside of Samba, that's great, if not, I'm not
> opposed to putting some kind of shell script on a cron to just go thru and
> rename everything with bad characters, but I'm afraid I don't know how to do
> that either :)
>
>
>
> On Tue, Apr 28, 2009 at 12:08 PM, Evans, Bill  wrote:
>
>> Try setting this in the share section in smb.conf
>>
>> mangled names = No
>>
>>
>>
>> Bill Evans
>>
>>
>> -Original Message-
>> From: samba-bounces+bevans=fhcrc@lists.samba.org
>> [mailto:samba-bounces+bevans =fhcrc.org@
>> lists.samba.org] On Behalf Of
>> Kaleb Harper
>> Sent: Tuesday, April 28, 2009 10:03 AM
>> To: samba@lists.samba.org
>> Subject: [Samba] linux -> windows special characters in filenames
>> problems
>>
>> I'm running Samba 3.32 on my linux server to share files with the
>> windows
>> computers on the network. My problem is that windows doesn't support
>> some
>> special characters in filenames, like ' : ', that linux has no problem
>> with.
>> So something (not sure if it's Samba or windows) is mangling
>> directory/file
>> names containing that character into 8.3 names, which makes it very
>> difficult to know from windows what's in the directories; I'm having to
>> open
>> each directory to see the contents, which is quite an annoyance. Here's
>> a
>> couple of examples of how it's mangling directory names:
>>
>>
>> 'this: is a test'    is getting turned into        'THUKO5~M'
>> 'this: is another test'        is getting turned into        'TPYQ1X~Y'
>>
>>
>> Since I suspect there's not an easy way to get windows to understand the
>> ' :
>> ' and various other characters that it probably doesn't understand
>> properly,
>> I was hoping there was a way to change the mangling to something more
>> readable. I don't care if it removes the ' : ' completely, or changes it
>> into some other character, I just want to be rid of the 8.3 names. I'm
>> hoping that it's something that can be done from Samba so I don't have
>> to
>> reconfigure several windows computers, but I'll do whatever it takes if
>> I
>> have to :)
>>
>> I appreciate any help you all can give me.
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>


This should remove the : out of your filenames. Try it on a test folder first:

find . -name '*:*' | while read file;
do
target=`echo "$file" | sed 's/://g'`;
echo "Renaming '$file' to '$target'";
mv "$file" "$target";
done;


BTW, I modified this from the following example

http://design.liberta.co.za/articles/how-to-remove-spaces-from-filenames-in-linuxunix/

-- 
John M. Drescher
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] 4TB samba display 140GB in Windows

[Michal Dobroczynski]

Hello,
Have you tried this in smb.conf:
 dfree command = /path/to/your/tool/saying/magic ?

It might be a b0rken Windows control or b0rken anything else, but try
to experiment with dfree to see where's the problem. Please post back
results as I'm also about to enter TB world with Samba in the coming
days...

Regards,
Michal

2009/4/28 Vnpenguin :
> On Wed, Apr 22, 2009 at 15:00, zong yongchun  wrote:
>> Hello All,
>> I do a 4TB filesystem for samba,but in Windows it only display 140GB,How to
>> fix it?
>
> It's easy! Replace your Windows by a Linux desktop :-)
>
> Sorry, can't help
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] ldapsam + IE7 = Broken MS Office 2003/2007

[Koji Yanagisawa]

Dear Samba people,

I'm pretty stumped troubleshooting this odd behavior by Microsoft Office 
2003/2007 where if I allow the machine to upgrade from Internet Explorer 
6 to 7, Office breaks.  Users usually get either "Word could not create 
the work file. Check the temp environment variable" or simply not able 
to save.


The same machine with IE7 works fine for local users, or when Samba uses 
tdbsam.  Normal Office troubleshooting has yielded nothing.


Freshly configuring Samba with LDAP results in the same problem.  I've 
tried 2 different servers (RHEL3 and CentOS5) and 2 clients to the same 
end.  Local administrative rights have no effect.


I understand the question might sound kind of vague, but has anybody run 
into this before?  Am I missing something?


Thank you,
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] 4TB samba display 140GB in Windows

[Vnpenguin]

On Wed, Apr 22, 2009 at 15:00, zong yongchun  wrote:
> Hello All,
> I do a 4TB filesystem for samba,but in Windows it only display 140GB,How to
> fix it?

It's easy! Replace your Windows by a Linux desktop :-)

Sorry, can't help
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

RE: [Samba] attempted upgrade this weekend

[Johan Hendriks]

>Morning,

>This weekend I attempted an upgrade of my primary samba server from 3.0.24
>to 3.3.3. When testing this primary server after the upgrade I had a
>few issues, so rolled back the upgrade until I can find solutions. This
>server also has the OpenLDAP server local to and co-located with samba.

>The two things that initially didn't seem right are that each time I
>logged into a windows XP box I was told my password had exprired and
>must be changed, and my roaming profile could not be accessed. Even
>after changing my password, when I logged out and back in I got the same
>password expired message.

>I had another event scheduled and couldn't diagnose the issue. I
>hope the issue is simply a difference in the configuration (smb.conf)
>between 3.0.24 and 3.3.3. I've attached a sanitized version of my config
>below. Does anyone see any issues?

>Samba is the first of a series of upgrades. After samba is Cyrus then
>OpenLDAP.

>Samba is compiled locally on this box, so it pulls in the current library
>versions, etc.

>The output of the smbd-3.0.24 and smbd-3.3.3 (both -b) seem the same
>to me.

>Thanks for having a look at this. I'll try another upgrade this coming
>weekend.

>Mike

Did you copy the samba schema file from samba 3.3.3 to the schema dir of 
openldap, replacing the old one from samba 3.0.24
I once had the same issue after a upgrade from 3.0.x to 3.3.x, i did not have 
the password issue but the roaming profile issue i remember quite well ;-)
After the copy (which is a pretty normal thing, but easy to forget) things 
where running as before.

Regards,
Johan Hendriks
Double L Automatisering


No virus found in this outgoing message.
Checked by AVG - www.avg.com 
Version: 8.5.287 / Virus Database: 270.12.5/2083 - Release Date: 04/27/09 
18:00:00
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] linux -> windows special characters AND charset problem

[Haro de Grauw]

Extension of this problem - I am experiencing the same as Kaleb, all
file names that include Windows-unfriendly characters are displayed as
apparently random eight-character names like "THUK05-M". But there's
more - charsets don't seem to match.

My setup:
Samba 3.2.7 running on openSUSE 11.1 / KDE 4.1 / latest x86_64 XEN kernel.
Home network with three WinXP boxes (sp3) - workgroup, so no PDC.
Supposedly, all should talk UTF-8 over the network.

Accessing shared directories works well in both directions (win <->
linux), although with the same problem as Kaleb.

Furthermore, when I access a samba share from any XP machine,
file/directory names on the Linux machine with non-ASCII characters e.g.
"Gé Reinders" will display wrongly, with box replacing 'é'. I can copy
the folder to the XP machine (this can be done from either end) and no
error is given, and I can open the folder on the windows machine locally
even though the name still "looks wrong" i.e. has that box character in
it (of course, I can fix it manually from there, but that's not the
point). When I then access the XP machine from the Linux machine,
Konqueror gives an error message:

File does not exist
smb://winxp2/My%20Documents/G%EF%BF%BD%20Reinders

It then displays the My Documents folder, showing "G� Reinders" with an
icon indicating a protected file. If I click on it, I get the error:
this file doesn't exist, and I can't open it. Now here's the funny
thing: if I just type the path smb://winxp2/My Documents/Gé Reinders
into the Konqueror prompt, it opens flawlessly!

testparm -v | grep "charset" on Linux machine returns:

dos charset = CP850
unix charset = UTF-8
display charset = LOCALE

Windows XP should talk UTF-8 over the network by default, right? Is
there a way to check this?

All help welcome and appreciated.
Cheers,
Haro


Kaleb Harper schreef:
> I'm running Samba 3.32 on my linux server to share files with the windows
> computers on the network. My problem is that windows doesn't support some
> special characters in filenames, like ' : ', that linux has no problem with.
> So something (not sure if it's Samba or windows) is mangling directory/file
> names containing that character into 8.3 names, which makes it very
> difficult to know from windows what's in the directories; I'm having to open
> each directory to see the contents, which is quite an annoyance. Here's a
> couple of examples of how it's mangling directory names:
>
>
> 'this: is a test'is getting turned into'THUKO5~M'
> 'this: is another test'is getting turned into'TPYQ1X~Y'
>
>
> Since I suspect there's not an easy way to get windows to understand the ' :
> ' and various other characters that it probably doesn't understand properly,
> I was hoping there was a way to change the mangling to something more
> readable. I don't care if it removes the ' : ' completely, or changes it
> into some other character, I just want to be rid of the 8.3 names. I'm
> hoping that it's something that can be done from Samba so I don't have to
> reconfigure several windows computers, but I'll do whatever it takes if I
> have to :)
>
> I appreciate any help you all can give me.
>   
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] linux -> windows special characters in filenames problems

[Jeremy Allison]

On Tue, Apr 28, 2009 at 12:03:00PM -0500, Kaleb Harper wrote:
> I'm running Samba 3.32 on my linux server to share files with the windows
> computers on the network. My problem is that windows doesn't support some
> special characters in filenames, like ' : ', that linux has no problem with.
> So something (not sure if it's Samba or windows) is mangling directory/file
> names containing that character into 8.3 names, which makes it very
> difficult to know from windows what's in the directories; I'm having to open
> each directory to see the contents, which is quite an annoyance. Here's a
> couple of examples of how it's mangling directory names:
> 
> 
> 'this: is a test'is getting turned into'THUKO5~M'
> 'this: is another test'is getting turned into'TPYQ1X~Y'
> 
> 
> Since I suspect there's not an easy way to get windows to understand the ' :
> ' and various other characters that it probably doesn't understand properly,
> I was hoping there was a way to change the mangling to something more
> readable. I don't care if it removes the ' : ' completely, or changes it
> into some other character, I just want to be rid of the 8.3 names. I'm
> hoping that it's something that can be done from Samba so I don't have to
> reconfigure several windows computers, but I'll do whatever it takes if I
> have to :)

There's no way to fix this within Samba. Names containing ":" are
illegal on Windows machines, we have to mangle them. You'll have
to change these names if you want the names to be seen correctly
from Windows.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

RE: [Samba] linux -> windows special characters in filenames problems

[Evans, Bill]

Try setting this in the share section in smb.conf

mangled names = No



Bill Evans


-Original Message-
From: samba-bounces+bevans=fhcrc@lists.samba.org
[mailto:samba-bounces+bevans=fhcrc@lists.samba.org] On Behalf Of
Kaleb Harper
Sent: Tuesday, April 28, 2009 10:03 AM
To: samba@lists.samba.org
Subject: [Samba] linux -> windows special characters in filenames
problems

I'm running Samba 3.32 on my linux server to share files with the
windows
computers on the network. My problem is that windows doesn't support
some
special characters in filenames, like ' : ', that linux has no problem
with.
So something (not sure if it's Samba or windows) is mangling
directory/file
names containing that character into 8.3 names, which makes it very
difficult to know from windows what's in the directories; I'm having to
open
each directory to see the contents, which is quite an annoyance. Here's
a
couple of examples of how it's mangling directory names:


'this: is a test'is getting turned into'THUKO5~M'
'this: is another test'is getting turned into'TPYQ1X~Y'


Since I suspect there's not an easy way to get windows to understand the
' :
' and various other characters that it probably doesn't understand
properly,
I was hoping there was a way to change the mangling to something more
readable. I don't care if it removes the ' : ' completely, or changes it
into some other character, I just want to be rid of the 8.3 names. I'm
hoping that it's something that can be done from Samba so I don't have
to
reconfigure several windows computers, but I'll do whatever it takes if
I
have to :)

I appreciate any help you all can give me.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] linux -> windows special characters in filenames problems

[Kaleb Harper]

I just tried 'mangled names = No', it made the directory names appear
properly, but when I try to open the directory, I get an error message that
it can't access the folder. So I assume the only other way is going to be to
somehow remove/change the ' : '. Any suggestions on how to do this would be
helpful. If it's doable inside of Samba, that's great, if not, I'm not
opposed to putting some kind of shell script on a cron to just go thru and
rename everything with bad characters, but I'm afraid I don't know how to do
that either :)



On Tue, Apr 28, 2009 at 12:08 PM, Evans, Bill  wrote:

> Try setting this in the share section in smb.conf
>
> mangled names = No
>
>
>
> Bill Evans
>
>
> -Original Message-
> From: samba-bounces+bevans=fhcrc@lists.samba.org
> [mailto:samba-bounces+bevans =fhcrc.org@
> lists.samba.org] On Behalf Of
> Kaleb Harper
> Sent: Tuesday, April 28, 2009 10:03 AM
> To: samba@lists.samba.org
> Subject: [Samba] linux -> windows special characters in filenames
> problems
>
> I'm running Samba 3.32 on my linux server to share files with the
> windows
> computers on the network. My problem is that windows doesn't support
> some
> special characters in filenames, like ' : ', that linux has no problem
> with.
> So something (not sure if it's Samba or windows) is mangling
> directory/file
> names containing that character into 8.3 names, which makes it very
> difficult to know from windows what's in the directories; I'm having to
> open
> each directory to see the contents, which is quite an annoyance. Here's
> a
> couple of examples of how it's mangling directory names:
>
>
> 'this: is a test'is getting turned into'THUKO5~M'
> 'this: is another test'is getting turned into'TPYQ1X~Y'
>
>
> Since I suspect there's not an easy way to get windows to understand the
> ' :
> ' and various other characters that it probably doesn't understand
> properly,
> I was hoping there was a way to change the mangling to something more
> readable. I don't care if it removes the ' : ' completely, or changes it
> into some other character, I just want to be rid of the 8.3 names. I'm
> hoping that it's something that can be done from Samba so I don't have
> to
> reconfigure several windows computers, but I'll do whatever it takes if
> I
> have to :)
>
> I appreciate any help you all can give me.
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] linux -> windows special characters in filenames problems

[John Drescher]

On Tue, Apr 28, 2009 at 1:03 PM, Kaleb Harper  wrote:
> I'm running Samba 3.32 on my linux server to share files with the windows
> computers on the network. My problem is that windows doesn't support some
> special characters in filenames, like ' : ', that linux has no problem with.
> So something (not sure if it's Samba or windows) is mangling directory/file
> names containing that character into 8.3 names, which makes it very
> difficult to know from windows what's in the directories; I'm having to open
> each directory to see the contents, which is quite an annoyance. Here's a
> couple of examples of how it's mangling directory names:
>
>
> 'this: is a test'    is getting turned into        'THUKO5~M'
> 'this: is another test'        is getting turned into        'TPYQ1X~Y'
>
>
> Since I suspect there's not an easy way to get windows to understand the ' :
> ' and various other characters that it probably doesn't understand properly,
> I was hoping there was a way to change the mangling to something more
> readable. I don't care if it removes the ' : '

It would have to

: is an illegal character as a file or folder name in windows.

This was a result of drive letters being c: d: ...


John
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] linux -> windows special characters in filenames problems

[Kaleb Harper]

I'm running Samba 3.32 on my linux server to share files with the windows
computers on the network. My problem is that windows doesn't support some
special characters in filenames, like ' : ', that linux has no problem with.
So something (not sure if it's Samba or windows) is mangling directory/file
names containing that character into 8.3 names, which makes it very
difficult to know from windows what's in the directories; I'm having to open
each directory to see the contents, which is quite an annoyance. Here's a
couple of examples of how it's mangling directory names:


'this: is a test'is getting turned into'THUKO5~M'
'this: is another test'is getting turned into'TPYQ1X~Y'


Since I suspect there's not an easy way to get windows to understand the ' :
' and various other characters that it probably doesn't understand properly,
I was hoping there was a way to change the mangling to something more
readable. I don't care if it removes the ' : ' completely, or changes it
into some other character, I just want to be rid of the 8.3 names. I'm
hoping that it's something that can be done from Samba so I don't have to
reconfigure several windows computers, but I'll do whatever it takes if I
have to :)

I appreciate any help you all can give me.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba and Solidworks (cat and dog)?

[Stephen Hultquist]

Were you able to resolve your issue?

We are having a very strange issue with SolidWorks on our network,  
with disappearing assemblies, menu reconfiguration, and other "behind  
the scenes" strangeness from SolidWorks even when testing on models  
that are all local to the machine. So far, we have not been able to  
figure out which aspects of the network are causing the issue (server  
is an Apple X serve running Leopard with the standard (Version 3.0.25b- 
apple) Samba distribution; we have been told not to try to upgrade it  
until Apple does due to the Apple hooks in it).


Any additional insights are not only welcome, but solicited!

Thank you in advance,
ssh
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Bug in sernet RPM's postun?

[Adam Williams]

there were various rpm build problems in samba 3.2.0 - 3.2.10 that have 
been fixed in 3.2.11.  I would grab the source, untar it, and run 
./packaging/RHEL/makerpms.sh


Richard Foltyn wrote:

Hi,

I was just wondering whether this possible bug with the Sernet Samba3
RPMs for CentOS 5 is known, since it has not yet been fixed.

When uninstalling the Sernet RPMs for Samba3 (in this case Samba 3.2.x)
the %postun scriptlet fails every time with:

# rpm -e samba3-3.2.0-36
/var/tmp/rpm-tmp.56356: line 2: fg: no job control
error: %postun(samba3-3.2.0-36.x86_64) scriptlet failed, exit status 1

Consequently, yum reports an constantly increasing number of unfinished
transactions and cannot uninstall outdated versions of Samba:

# rpm -q samba3
samba3-3.2.1-37
samba3-3.2.3-37
samba3-3.2.5-37
samba3-3.2.6-37
samba3-3.2.7-37
samba3-3.2.7-38
samba3-3.2.8-38
samba3-3.2.10-38.el5
samba3-3.2.11-38.el5

Google finds several other people having the same problem for some
months now.

The solution is not to run %postun

# rpm -e --nopostun samba3-3.2.1-37

but this does not work with yum and has to be done manually every time,
so it would be great if this was fixed in some future release.

Also, many thanks to the Sernet team for providing these RPMs.

Richard

  


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Low cost additional storage on a Samba server

[Michal Dobroczynski]

Hello John,
Thanks for answer. I did not expect that you will mention a board that
I have in my home computer :)

Regards,
Michal

2009/4/28 John Drescher :
> On Tue, Apr 28, 2009 at 11:20 AM, Michal Dobroczynski
>  wrote:
>> Hello,
>> I can only confirm - yes - _use_ linux soft raid... do not believe all
>> these "smart RAID5 hw cards" :)
>>
>> Regarding the machines "bought in 2008" - can you please tell me if
>> you have a separate controller (I am interested in brand/model) for
>> the drives or you are using onboard chip?
>>
> I am using ASUS M2N (AMD systems) and ASUS P5Q Pro (Intel systems)
> desktop boards with the onboard 6 to 8 SATA ports. To achieve good
> write performance I keep the default 64K chunks and tune the stripe
> cache size
>
> echo 2048 > /sys/block/md1/md/stripe_cache_size
> echo 2048 > /sys/block/md3/md/stripe_cache_size
>
> John
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Low cost additional storage on a Samba server

[John Drescher]

On Tue, Apr 28, 2009 at 11:20 AM, Michal Dobroczynski
 wrote:
> Hello,
> I can only confirm - yes - _use_ linux soft raid... do not believe all
> these "smart RAID5 hw cards" :)
>
> Regarding the machines "bought in 2008" - can you please tell me if
> you have a separate controller (I am interested in brand/model) for
> the drives or you are using onboard chip?
>
I am using ASUS M2N (AMD systems) and ASUS P5Q Pro (Intel systems)
desktop boards with the onboard 6 to 8 SATA ports. To achieve good
write performance I keep the default 64K chunks and tune the stripe
cache size

echo 2048 > /sys/block/md1/md/stripe_cache_size
echo 2048 > /sys/block/md3/md/stripe_cache_size

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Low cost additional storage on a Samba server

[Michal Dobroczynski]

Hello,
I can only confirm - yes - _use_ linux soft raid... do not believe all
these "smart RAID5 hw cards" :)

Regarding the machines "bought in 2008" - can you please tell me if
you have a separate controller (I am interested in brand/model) for
the drives or you are using onboard chip?

Regards,
Michal

2009/4/28 John Drescher :
> On Tue, Apr 28, 2009 at 8:19 AM, Gary Dale  wrote:
>> Easiest way is to implement software RAID on your current server.
>> - add 2 (or more) new drives partitioned identically to your current drive
>> (unless you want to replace your existing drive)
>>  - partition type is fd (RAID)
>> - create RAID 5 arrays using the new drives & partitions (except for /boot
>> which should be on a RAID 1 array)
>>  - common setup is (but use whatever partition setup you currently have):
>>    - /boot --> RAID 1
>>   - / --> 20G RAID 5
>>   - /home --> rest of space
>>  - tell mdadm that 1 drive is missing from each array
>> - copy the files from each partition on your current drive to the RAID
>> partitions on the new array
>> - update grub to use the new RAID arrays
>> - reboot into new array
>> - if it works, add your original drive (or its replacement) into the RAID
>> array(s)
>>
>> Needless to say, back up everything before starting. Creating a RAID array
>> is safe but mistakes happen and hardware fails.
>>
>> Benefit of RAID over NAS is
>> - don't need to change client setups
>> - can be expanded by adding new drives into array
>> - speed on reads
>> - protection against hard drive failure
>>
>> Google Linux RAID setup for detailed howtos.
>>
>
> That is pretty much what I do. In the spring of 2008 I was adding 4
> TB+ raid 5 dual core servers (using 750GB drives) with 4 or 8GB of RAM
> for under $2000 US. Now you can easily get a quad core with 7 or 8TB
> for the same price..
>
> I highly recommend linux software raid (unlike windows software raid
> which is horribly broken performance wise) linux software raid
> performs well. These 4.X TB raid 5 machines I bought in 2008 write at
> over 200 MB/s and read at 300MB/s and they do this at less than 8 %
> CPU usage on a single core.
>
> John
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba with AD/winbind - recurring message

[Adam Cohen]

we've got a Samba 3 server up and running with AD integration via 
winbind.  Everything is working nicely but there is this persistent 
message on my console that pops up at least 1x per hour, sometimes more 
frequently.  

Apr 27 23:01:02 ebi-prod01 winbindd[5456]: [2009/04/27 23:01:02, 0] 
libads/sasl.c:ads_sasl_spnego_bind(330)
Apr 27 23:01:02 ebi-prod01 winbindd[5456]:   kinit succeeded but 
ads_sasl_spnego_krb5_bind failed: Strong(er) authentication required


winbind is definitely talking to the domain controller and is able to 
retrieve user/group info so I can't tell what is causing the message or 
what the impact might be.  plus, it's cluttering up my log.  the 
messages are found in /var/log/samba/wb-UC.log where "UC" is the name of 
our forest.


this is Samba/Winbind 3.0.33-3.7-el5 as shipped with RHEL5.

has anyone else see this?  


thanks
Adam

--
Adam Cohen / IT Manager
Energy Biosciences Institute / UC Berkeley
109 Calvin Lab / 510-642-7709

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Re: select network interface

[Richard Foltyn]

Petteri Larjos wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Hi,
> 
> I have two interfaces (eth1 and eth1:1) on my computer. I would like
> to change password on remote server with swat but it fails because
> swat is using interface eth1:1 to connect remote host and remote host
> does not allow connections from that interface (or ip-address). How I
> can force swat to use certain interface (eth1)? I tried 'interfaces'
> and 'bind interfaces only' parameters in smb.conf without any luck.

Last time I checked, swat had to be started via xinetd.
You therefore have to change this in the corresponding file, e.g.
/etc/xinetd.d/swat, not in smb.conf.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Bad performance when accessing Linux from Windows XP because of too many QUERY_FILE_INFO requests

[Volker Lendecke]

On Mon, Apr 27, 2009 at 02:54:20PM +0800, Xia, Arandar wrote:
> If I use a Linux client, this does not happen.
> 
> This problem makes the access to my samba server be very slow.
> Could anyone help me to find the reason and give a solution?

Dump your Windows clients and just use Linux.

What part of "This is normal Windows behaviour" did you not get?

Volker


pgpBze6THdNaT.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] 3.3.3 blocks writing of files ~1.55GB or greater from Windows XP

[Volker Lendecke]

On Tue, Apr 21, 2009 at 09:40:17AM -0500, Nikkos Svoboda wrote:
>The logfiles on the Samba server are split by username/hostname. Here is
> a client logfile of an attempt to copy a 2GB file to an empty folder the
> share ( "\\shareserver\Sambatest\2GBtestfile.largetest" ). There is also an
> "smbd" logfile, which contains only the statement "getpeername failed. Error
> was Transport endpoint is not connected" repeated. The series of events for
> this copy compared to a successful copy seem quite different.

I'm afraid that part of the log file is not sufficient, to
me it shows no error.

Volker


pgprzSQvYSWLb.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Low cost additional storage on a Samba server

[John Drescher]

On Tue, Apr 28, 2009 at 8:19 AM, Gary Dale  wrote:
> Easiest way is to implement software RAID on your current server.
> - add 2 (or more) new drives partitioned identically to your current drive
> (unless you want to replace your existing drive)
>  - partition type is fd (RAID)
> - create RAID 5 arrays using the new drives & partitions (except for /boot
> which should be on a RAID 1 array)
>  - common setup is (but use whatever partition setup you currently have):
>    - /boot --> RAID 1
>   - / --> 20G RAID 5
>   - /home --> rest of space
>  - tell mdadm that 1 drive is missing from each array
> - copy the files from each partition on your current drive to the RAID
> partitions on the new array
> - update grub to use the new RAID arrays
> - reboot into new array
> - if it works, add your original drive (or its replacement) into the RAID
> array(s)
>
> Needless to say, back up everything before starting. Creating a RAID array
> is safe but mistakes happen and hardware fails.
>
> Benefit of RAID over NAS is
> - don't need to change client setups
> - can be expanded by adding new drives into array
> - speed on reads
> - protection against hard drive failure
>
> Google Linux RAID setup for detailed howtos.
>

That is pretty much what I do. In the spring of 2008 I was adding 4
TB+ raid 5 dual core servers (using 750GB drives) with 4 or 8GB of RAM
for under $2000 US. Now you can easily get a quad core with 7 or 8TB
for the same price..

I highly recommend linux software raid (unlike windows software raid
which is horribly broken performance wise) linux software raid
performs well. These 4.X TB raid 5 machines I bought in 2008 write at
over 200 MB/s and read at 300MB/s and they do this at less than 8 %
CPU usage on a single core.

John
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] User friendly URLs to shares

[Gerald Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Jorgen,

> \\host\share and file://host/share don't seem to work, and has nowhere
> for the username part to be included.

You can encode the username as an arg in the
"net use * \\host\share /user:DOMAIN\username"



cheers, jerry
- --
=
http://git.plainjoe.org/ CODE
"What man is a man who does not make the world better?"  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkn26yQACgkQIR7qMdg1EfYmvwCgyTf1PVeE82+6Jiwmi3dAB2Zc
nCMAoMZFBjTDo1RbbsHtGYOlFle3BIJ9
=zSC7
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] problem with groups when adding windows workstation to domain

[Ivo Karabojkov]

Hi, all!

I am trying to implement Samba 3.3.3 running on FreeBSD 7.1 as a PDC.
Since I am new to Samba I am using some "adopted" sample configurations and
my is similar to shown here: http://www.mrp3.com/windows-to-unix-samba.html

I have two problems and hope to get some help from all of you:

When I add a Windows XP workstation to the domain the group Domain admins is
not automatically added in local Administrators group. I have to log in as
local administrator, add the global group to local one and everything works
fine. I noticed that a group with (?) and SID almost like the Domain admins
(mapped to Wheel) has actually been added. The SID differs in its last
numbers - I have SID ending in "1000", added to local Administrators ends in
"512". Where should I look more carefully?

My other problem is with managing users with SRVTools - usermgr. When I add
a new user I get the following message:
This security ID may not be assigned as the primary group of an object
Managing users (setting passwords, profile location, etc.) works fine,
as works adding new machines to the domain.

Thanks in advance,

Ivo Karabojkov

-- 
View this message in context: 
http://www.nabble.com/problem-with-groups-when-adding-windows-workstation-to-domain-tp23273052p23273052.html
Sent from the Samba - General mailing list archive at Nabble.com.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] attempted upgrade this weekend

[Mike Eggleston]

Morning,

This weekend I attempted an upgrade of my primary samba server from 3.0.24
to 3.3.3. When testing this primary server after the upgrade I had a
few issues, so rolled back the upgrade until I can find solutions. This
server also has the OpenLDAP server local to and co-located with samba.

The two things that initially didn't seem right are that each time I
logged into a windows XP box I was told my password had exprired and
must be changed, and my roaming profile could not be accessed. Even
after changing my password, when I logged out and back in I got the same
password expired message.

I had another event scheduled and couldn't diagnose the issue. I
hope the issue is simply a difference in the configuration (smb.conf)
between 3.0.24 and 3.3.3. I've attached a sanitized version of my config
below. Does anyone see any issues?

Samba is the first of a series of upgrades. After samba is Cyrus then
OpenLDAP.

Samba is compiled locally on this box, so it pulls in the current library
versions, etc.

The output of the smbd-3.0.24 and smbd-3.3.3 (both -b) seem the same
to me.

Thanks for having a look at this. I'll try another upgrade this coming
weekend.

Mike

Fedora Core 5
Samba upgrade from 3.0.24 to 3.3.3
OpenLDAP 2.3.30


---
# Samba config file created using SWAT
# from 10.1.2.43 (10.1.2.43)
# Date: 2006/08/03 15:11:35

[global]
security = USER
client plaintext auth = Yes
client lanman auth = Yes
lanman auth = No
ntlm auth = Yes
guest account = nobody
#admin users = manager, root
admin users = 
hosts allow = .domain.com, 10.1.2., 10.1.3., 192.168.100.
cups options = raw
wins support = yes
name resolve order = wins lmhosts host bcast
dns proxy = no
usershare allow guests = yes
time server = yes

workgroup = PWI
netbios name = elo
netbios aliases = loghost, mailhost, backuphost, ldaphost
server string = Samba Server (%h)
logon drive = H:
logon home = \\%h\%U
logon path = \\%h\profiles\%U
logon script = logon.bat
ldap delete dn = Yes
ldap suffix = dc=domain,dc=com
ldap admin dn = cn=manager,dc=domain,dc=com
ldap user suffix = ou=people
ldap group suffix = ou=groups
ldap machine suffix = ou=machines
ldap ssl = off
ldapsam:trusted = Yes
ldap timeout = 15
utmp directory = /var/run
wtmp directory = /var/log
utmp = Yes

encrypt passwords = Yes
password level = 0
password server = ldaphost.domain.com
passdb backend = ldapsam:ldap://ldaphost.domain.com
ldap passwd sync = Yes
unix password sync = No
passwd program = /usr/sbin/smbldap-passwd %u
#pam password change = Yes
passwd chat = "Changing * password*for*\nNew password*" %n\n "*Retype 
new password*" %n\n
passwd chat debug = Yes
#client use spnego = No
#use spnego = No

os level = 66
preferred master = Yes
local master = Yes
domain master = Yes
domain logons = Yes
allow trusted domains = Yes

#   log level = 255
#   log level = 100
#   log level = 4
#   log level = 3 ldap:10 passdb:10 auth:10 winbind:10
#   log level = 3
#   log level = 2
log level = 1
log file = /var/log/samba/%m.log
max log size = 1

#socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=65536 
SO_SNDBUF=65536
#socket options = TCP_NODELAY SO_RCVBUF=16384 SO_SNDBUF=16384
#socket options = TCP_NODELAY
# trying to make things faster
#socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=1500

#add user script = /usr/sbin/smbldap-useradd -m "%u"
add user script = /usr/sbin/smbldap-useradd -a -A 1 -B 1 -s /bin/bash 
-c "%u" -d /home/%u -C "%h\\%u" -D "H:" -M "%...@domain.com" %u
delete user script = /usr/sbin/smbldap-userdel "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/sbin/smbldap-groupdel "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%g" "%u"
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
#add machine script = /usr/sbin/smbldap-useradd -w "%u"
#add machine script = /usr/sbin/smbldap-useradd -w -A 0 -B 0 -s 
/bin/false -c "%u machine account" -d /dev/null %u
#add machine script = /usr/sbin/smbldap-useradd -w -i "%u" -t 5
#add machine script = /usr/sbin/smbldap-useradd -w -A 0 -B 0 -t 5 "%u"
#add machine script = /usr/sbin/smbldap-useradd -w -i -A 0 -B 0 -t 5 
"%u"

#max smbd processes = 200
deadtime = 60

# trying to get rid of an error in the smb logs by not listening to 
port 445

[Samba] Bad performance when accessing Linux from Windows XP because of too many QUERY_FILE_INFO requests

[Xia, Arandar]

Dear all,
My question is described as follows.

Server: Linux
  Samba-3.3.1
Client: Windows XP with SP3

Step1: connect to the samba server.
Step2: select a directory name “test”. (The directory is created before 
testing.)

The client will send a lot of QUERY_FILE_INFO requests. According to data 
captured by Wireshark, I find the following phenomenon:
The client repeats exactly the same queries many times before giving up. The 
whole network log repeats exactly the same sequence, only the FID is different 
every time. In my test FID changes from 0x3002 to 0x306a.
If I use a Linux client, this does not happen.

This problem makes the access to my samba server be very slow.
Could anyone help me to find the reason and give a solution?

The following data is only a part of community data.
No.  Source   Destination   ProtocolInfo
26   clientserverSMB  Trans2 Request, QUERY_PATH_INFO, 
Query File Basic Info, Path: 
27   serverclientSMB  Trans2 Response, QUERY_PATH_INFO
28   clientserverSMB  Trans2 Request, FIND_FIRST2, Pattern: 
\test
29   serverclientSMB  Trans2 Response, FIND_FIRST2, Files: 
test
30   clientserverSMB  NT Create AndX Request, Path: \test
31   serverclientSMB  NT Create AndX Response, FID: 0x3002
32   clientserverSMB  Trans2 Request, QUERY_FILE_INFO, FID: 
0x3002, Query File Internal Info
33   serverclientSMB  Trans2 Response, QUERY_FILE_INFO
34   clientserverSMB  Trans2 Request, QUERY_FILE_INFO, FID: 
0x3002, Query File Basic Info
35   serverclientSMB  Trans2 Response, QUERY_FILE_INFO
36   clientserverSMB  Trans2 Request, QUERY_FILE_INFO, FID: 
0x3002, Query File Standard Info
37   serverclientSMB  Trans2 Response, QUERY_FILE_INFO
38   clientserverSMB  Trans2 Request, QUERY_FS_INFO, Query 
FS Volume Info
39   serverclientSMB  Trans2 Response, QUERY_FS_INFO
40   clientserverSMB  Trans2 Request, QUERY_FILE_INFO, FID: 
0x3002, Query File Basic Info
41   serverclientSMB  Trans2 Response, QUERY_FILE_INFO
42   clientserverSMB  Trans2 Request, QUERY_FILE_INFO, FID: 
0x3002, Query File Standard Info
43   serverclientSMB  Trans2 Response, QUERY_FILE_INFO
44   clientserverSMB  Trans2 Request, QUERY_FILE_INFO, FID: 
0x3002, Query File EA Info
45   serverclientSMB  Trans2 Response, QUERY_FILE_INFO
46   clientserverSMB  NT Create AndX Request, Path: 
\test:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}:$DATA
47   serverclientSMB  NT Create AndX Response, Error: 
STATUS_OBJECT_PATH_NOT_FOUND
48   clientserverSMB  Close Request, FID: 0x3002
49   serverclientSMB  Close Response
50   clientserverSMB  NT Create AndX Request, Path: \test
51   serverclientSMB  NT Create AndX Response, FID: 0x3004
52   clientserverSMB  Trans2 Request, QUERY_FILE_INFO, FID: 
0x3004, Query File Internal Info
53   serverclientSMB  Trans2 Response, QUERY_FILE_INFO
54   clientserverSMB  Trans2 Request, QUERY_FILE_INFO, FID: 
0x3004, Query File Basic Info
55   serverclientSMB  Trans2 Response, QUERY_FILE_INFO
56   clientserverSMB  Trans2 Request, QUERY_FILE_INFO, FID: 
0x3004, Query File Standard Info
57   serverclientSMB  Trans2 Response, QUERY_FILE_INFO
58   clientserverSMB  Trans2 Request, QUERY_FILE_INFO, FID: 
0x3004, Query File Basic Info
59   serverclientSMB  Trans2 Response, QUERY_FILE_INFO
60   clientserverSMB  Trans2 Request, QUERY_FILE_INFO, FID: 
0x3004, Query File Standard Info
61   serverclientSMB  Trans2 Response, QUERY_FILE_INFO
62   clientserverSMB  Trans2 Request, QUERY_FILE_INFO, FID: 
0x3004, Query File EA Info
63   serverclientSMB  Trans2 Response, QUERY_FILE_INFO
64   clientserverSMB  NT Create AndX Request, Path: 
\test:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}:$DATA
65   serverclientSMB  NT Create AndX Response, Error: 
STATUS_OBJECT_PATH_NOT_FOUND
66   clientserverSMB  Close Request, FID: 0x3004
67   serverclientSMB  Close Response

Best Regards!
--
Xia Zeyi
arandar@chn.fujixerox.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Re: Samba configuration options when using with FUSE file system

[Jim Casey]

Jeremy,

Thank you very much for the back reference.  Your solution works like a
charm.

-- James Casey

On Fri, 2009-04-24 at 00:12 -0700, Jeremy Allison wrote:
> On Thu, Apr 23, 2009 at 11:44:00AM -0500, Jim Casey wrote:
> > It seems that metadata operations involved in writing new files into the
> > same directory become increasingly expensive as the number of files
> > grows larger.  Determining whether a file exists in a directory (in our
> > case this will never be true since we are always writing new files)
> > seems like it should be a simple operation, but in fact seems to involve
> > a huge number of opendir->readdir->closedir calls.  I am using Samba to
> > share a FUSE filesystem for which these directory operations are very
> > expensive compared to file systems like ext3.
> > 
> > Are there configuration options in Samba that would help us out in this
> > case, perhaps by caching directory information or some such?
> > 
> > Thank you for any assistance you are able to provide.
> 
> See my post on large numbers of files in a directory:
> 
> http://lists.samba.org/archive/samba-technical/2005-February/039409.html
> 
> Jeremy.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Query configuration parameters

[Mike Eggleston]

On Fri, 24 Apr 2009, Bertram Scharpf might have said:

> Hi,
> 
> PostgreSQL has a tool pg_config that returns the parameters the
> ./configure script was called with.
> 
>   $ pg_config --libdir
>   /usr/local/lib
>   $ pg_config --includedir
>   /usr/local/include
> 
> Does Samba have a similar feature and how do I call it?
> 
> Sorry, but this is impossible to google for.
> 
> Bertram

The only thing I've found so far is 'smbd -b'.

Mike
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] some question about BDCs

[samba]

> Hi,
>
> I want to set up SaMBa PDC and BDC with LDAP. I read the TOSHARG2, but
> don't
> understand something:
>
>>Samba-3 cannot participate in true SAM replication and is therefore not
> able to employ
>>precisely the same protocols used by MS Windows NT4. A Samba-3 BDC will
>> not
> create
>>SAM update delta files.
>
> Ok, I understand until that, but:
>
>>It will not interoperate with a PDC (NT4 or Samba) to synchronize
>>the SAM from delta files that are held by BDCs.

Samba3 BDCs can not do SAM sync with a Windows NT4 PDC.  Samba3 BDCs passe
update requests to the Samba3 PDC - and the PDC will then apply the update
to the LDAP directory.  It is possible to configure a Samba3 BDC to update
LDAP directly - the choice is yours.

>>The BDC is said to hold a read-only of the SAM from which it is able to
> process network
>>logon requests and authenticate users. The BDC can continue to provide
>> this
> service,
>>particularly while, for example, the wide-area network link to the PDC is
> down.
>
> So, when I have SaMBa PDC (with master LDAP) and BDC (with slave LDAP),
> can
> BDC update machine and/or user information or not?

Yes, when a BDC receives an update request it will pass it to the PDC.

> As I understood, only
> the
> LDAP solution is suitable for a PDC-BDC setup, because "domain member
> servers and workstations periodically change the Machine Trust Account
> password", so BDC has to update some data.
> As I understood, BDC can change at least Machine Trust Account passwords.
> Additional question: can a user change his/her login password, when he/she
> connected to the BDC (in case PDC is available and in case PDC is
> temporarily unavailable)?

It depends on how the BDC is configured to integrate with LDAP.  It is
possible to configure a Samba3 BDC to directly write to the LDAP master. 
This may not be an optimum solution, but it does work.

> I read in TOSHARG2 too that in the BDC's smb.conf,
> I don't need user/group modification scripts, so I guess, I cannot
> add/modify them from the BDC.

You can - IF the BDC is given direct write access to the LDAP directory.

- John T.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] stop winbind writes to disk

[Greg]

I'm trying to eliminate disk read/writes (as much as possible). Winbind is
one of the last problems for me. I was hoping that the -n switch would
disable caching and thus eliminate the writes to
/var/cache/samba/winbindd_cache.tdb. But I haven't had much luck.

To debug, I use the command string winbindd -i -d10 -n -s
/etc/samba/smb.conf and I get the following output:
[ 6796]: list trusted domains
secrets_get_trusted_domains: got 0 domains
Storing response for pid 6797, len 3240
fork_domain_child: domain PICTURE-FRAME no longer in 'startup' mode.
Destroying timed event 82e24d8 "async_request_timeout"
Retrieving response for pid 6797
Added timed event "async_request_timeout": 82e24d8
timed_events_timeout: 299/38
child daemon request 19
process_request: request fn LIST_TRUSTDOM
[ 6796]: list trusted domains
secrets_get_trusted_domains: got 0 domains
Storing response for pid 6797, len 3240
Destroying timed event 82e24d8 "async_request_timeout"
Retrieving response for pid 6797
Added timed event "async_request_timeout": 82e24d8
timed_events_timeout: 299/37
child daemon request 19
process_request: request fn LIST_TRUSTDOM

This repeats indefinitely as far as I can tell. Each of these sections
corresponds to a write action to the winbindd_cache.tdb file. Should I be
able to stop writes to winbindd_cache.tdb? Am I missing something?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba configuration options when using with FUSE file system

[Jim Casey]

It seems that metadata operations involved in writing new files into the
same directory become increasingly expensive as the number of files
grows larger.  Determining whether a file exists in a directory (in our
case this will never be true since we are always writing new files)
seems like it should be a simple operation, but in fact seems to involve
a huge number of opendir->readdir->closedir calls.  I am using Samba to
share a FUSE filesystem for which these directory operations are very
expensive compared to file systems like ext3.

Are there configuration options in Samba that would help us out in this
case, perhaps by caching directory information or some such?

Thank you for any assistance you are able to provide.

James Casey


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] smbclient fails when LDAP server is down

[Anderson Stano]

Hi all,

 

I´m having some trouble setting up a samba failover scenario.

This is what I’ve done:

 

Subnet 192.168.1.0 -> Samba PDC e Samba BDC

Subnet 192.168.20.0 -> LDAP Master e LDAP Slave

 

If all servers are up I can login to domain. If I put the LDAP Master
service down I am still able to login from the Slave LDAP. But if the server
where the master LDAP is installed is down (unreachable) I can´t login. The
logs show me the following info after I try the command:

 

smbclient -U adurelli -L dme1372

Password:

session setup failed: NT_STATUS_LOGON_FAILURE

 

[2009/04/22 10:49:55, 10] lib/smbldap.c:smb_ldap_setup_conn(566)

  smb_ldap_setup_connection: ldap://ldap1.dmepc.com.br
ldap://ldap2.dmepc.com.br

[2009/04/22 10:49:55, 2] lib/smbldap.c:smbldap_open_connection(722)

  smbldap_open_connection: connection opened

[2009/04/22 10:49:55, 10] lib/smbldap.c:smbldap_connect_system(862)

  ldap_connect_system: Binding to ldap server ldap://ldap1.dmepc.com.br
ldap://ldap2.dmepc.com.br

[2009/04/22 10:49:58, 3] lib/smbldap.c:smbldap_connect_system(905)

  ldap_connect_system: succesful connection to the LDAP server

  ldap_connect_system: LDAP server does support paged results

[2009/04/22 10:49:58, 4] lib/smbldap.c:smbldap_open(969)

  The LDAP server is succesfully connected

[2009/04/22 10:49:58, 0] lib/smbldap.c:smbldap_search_suffix(1346)

  smbldap_search_suffix: Problem during the LDAP search:  (Time limit
exceeded)

[2009/04/22 10:49:58, 3] smbd/sec_ctx.c:pop_sec_ctx(386)

  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0

[2009/04/22 10:49:58, 3] auth/auth_sam.c:check_sam_security(264)

  check_sam_security: Couldn't find user 'adurelli' in passdb.

 

Can anyone help??

 

Anderson Stano Durelli
Engenheiro da Computação
  adure...@dmepc.com.br

  _  

Departamento Municipal de Eletricidade de Poços de Caldas
Gerência de Tecnologia da Informação
Poços de Caldas - MG
Cel.: (35)9822-8045
Tel.: (35)3697-3002 

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] 4TB samba display 140GB in Windows

[zong yongchun]

Hello All,
I do a 4TB filesystem for samba,but in Windows it only display 140GB,How to
fix it?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Created/modified times updated as well as accessed time

[DarrenKinley]

Hi,

I recently upgraded from an earlier version of SaMBa to 3.3.0 under Solaris
and
simply copied over the config files.

Two problems have been identified.

1. The created/modifed times reported in Windows is updated with the
Accessed time.
This happens with both files and directories and only happens for the
first access of
the day and not subsequent accesses.

2. Group members can no longer rename/delete each other's files, only the
owner can.
Modes are correct within Unix for group member changes.

Any insight or pointers will be greatly appreciated.

Darren

-- 
View this message in context: 
http://www.nabble.com/Created-modified-times-updated-as-well-as-accessed-time-tp23166206p23166206.html
Sent from the Samba - General mailing list archive at Nabble.com.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] broken link on http://us1.samba.org/samba/docs/SambaIntro.html

[angelica]

Hi there,

My name is Angelica and I was just checking out your page at  
http://us1.samba.org/samba/docs/SambaIntro.html  and noticed that the the link 
to the Dilbert site on http://www.unitedmedia.com/comics/dilbert/ isn't 
working.  I'm a Dilbert fan myself :)  so I thought I'd mention a page I have 
bookmarked:  http://www.answerconnect.com/articles/dilbert-fans  It has a bunch 
of neat fan sites and quizzes and whatnot.  I figured it might be a good 
addition to your page, if you were going to replace that dead link.

Hope I could be of some help.  Have a good day!
-Angelica
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Low cost additional storage on a Samba server

[Gary Dale]

Easiest way is to implement software RAID on your current server.
- add 2 (or more) new drives partitioned identically to your current 
drive (unless you want to replace your existing drive)

 - partition type is fd (RAID)
- create RAID 5 arrays using the new drives & partitions (except for 
/boot which should be on a RAID 1 array)

 - common setup is (but use whatever partition setup you currently have):
- /boot --> RAID 1
   - / --> 20G RAID 5
   - /home --> rest of space
 - tell mdadm that 1 drive is missing from each array
- copy the files from each partition on your current drive to the RAID 
partitions on the new array

- update grub to use the new RAID arrays
- reboot into new array
- if it works, add your original drive (or its replacement) into the 
RAID array(s)


Needless to say, back up everything before starting. Creating a RAID 
array is safe but mistakes happen and hardware fails.


Benefit of RAID over NAS is
- don't need to change client setups
- can be expanded by adding new drives into array
- speed on reads
- protection against hard drive failure

Google Linux RAID setup for detailed howtos.



Jean-Francois Leblond wrote:

Hi,
 
At my client, I installed  Samba v3 
on a Linux box (Centos 4) with a NT style domain to act as a file server (about 50 Windows clients).

It's been running fine for a few years now.

It's about to run out of disk space.

I was looking for a low cost solution and came across the low-cost NAS that are 
available now for the soho market.

The problem is that some support only smb file access for Linux clients which for my case would be out of the question. 

Some support NFS mounts from Linux host. 


I wanted to have some of your comments on presenting a NFS mounted filesystem 
on my Samba server to Windows clients. Do you think, I would be looking for 
trouble ? I'm in a french speaking region so we're using accent. My experience 
with NFS is a little bit old and I want to make sure I wouldn't loose the 
french accent or spaces in filenames along the way.

Of course a direct-attached storage would be a sure thing but I was looking for 
a lower cost solution.

Thanks in advance

JF Leblond

_
Réinventez comment vous restez en contact avec le nouveau Windows Live 
Messenger.
http://go.microsoft.com/?linkid=9650737-- 
To unsubscribe from this list go to the following URL and read the

instructions:  https://lists.samba.org/mailman/options/samba

  


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Low cost additional storage on a Samba server

[Michal Dobroczynski]

Hello,
Some of our shares available via Samba come "via NFS" and so far we
had no problems at all, thus I can recommend you that solution (people
have no problems with ØÆÅ characters here). If you are unsure - run
little tests, play with different character supports and then roll the
real solution. You can even use your laptop for that.

On top of that please consider another option - you can just buy a
SATA controller and put inside two 1TB disks (if you wish to have a
nicely working RAID1 for example). A long lasting setup with
redundancy - and with current prices I would consider that affordable,
close to low-cost. The best plus is that you get 1TB of space and you
don't need a drive bay for n-disks in order to have similar capacity.
About TB disks - we have been careful in the beginning, because some
time ago TB disks "were a bit too new" to be used in production
(slight paranoids here). But right now I'm about to install Linux on a
new server with 4x1TB drives.

Regards,
Michal

2009/4/28 Jean-Francois Leblond :
>
> Hi,
>
> At my client, I installed  Samba v3
> on a Linux box (Centos 4) with a NT style domain to act as a file server 
> (about 50 Windows clients).
> It's been running fine for a few years now.
>
> It's about to run out of disk space.
>
> I was looking for a low cost solution and came across the low-cost NAS that 
> are available now for the soho market.
>
> The problem is that some support only smb file access for Linux clients which 
> for my case would be out of the question.
>
> Some support NFS mounts from Linux host.
>
> I wanted to have some of your comments on presenting a NFS mounted filesystem 
> on my Samba server to Windows clients. Do you think, I would be looking for 
> trouble ? I'm in a french speaking region so we're using accent. My 
> experience with NFS is a little bit old and I want to make sure I wouldn't 
> loose the french accent or spaces in filenames along the way.
>
> Of course a direct-attached storage would be a sure thing but I was looking 
> for a lower cost solution.
>
> Thanks in advance
>
> JF Leblond
>
> _
> Réinventez comment vous restez en contact avec le nouveau Windows Live 
> Messenger.
> http://go.microsoft.com/?linkid=9650737--
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] low memory!

[Adam Tauno Williams]

On Tue, 2009-04-28 at 15:00 +0430, Mohammad Reza Hosseini wrote:
> hello
> using samba server on CentOS 5.02  after some hours the system memory
> becomes quite full! 

What do you mean by full?  What does 'free -t' say?

> and the top command shows 5 or 7 or even more smbd
> processes! any help?

That isn't a problem.  You get an smbd or so per connection.  A hundred
or more smbd processes isn't a problem.  The majority of the memory is
shared between the processes.  You have to be very careful how you
interpret the (arguably bogus) memory numbers provided by top/ps.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] low memory!

[Mohammad Reza Hosseini]

hello
using samba server on CentOS 5.02  after some hours the system memory
becomes quite full! and the top command shows 5 or 7 or even more smbd
processes! any help?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba + LDAP

[Volker Lendecke]

On Tue, Apr 28, 2009 at 11:39:48AM +0200, Vladimir Psenicka wrote:
> I have questions about Samba and LDAP.
> 
> I have samba configured as PDC with ldap, users and groups are in ldap,
> functional. I want to add another server as member server, I configured
> samba on that server with users/groups authentication against ldap on
> PDC, functional.
> 
> But I see this in ldap root:
> sambaDomainname=DOMAIN
> *sambaDomainname=HOSTNAME_OF_MEMBER_SERVER*
> 
> Why is member server creating sambaDomainname=HOSTNAME_OF_MEMBER_SERVER
> entry in ldap root? Is this needed for servers trusts?

Every machine with "passdb backend = ldapsam" creates its
own entry, as every machine has its own user database. This
is very much like the local SAM on Windows workstations
where you can log in as local administrator. This won't
happen if you don't set "passdb backend = ldapsam" and join
the servers into the domain.

Volker


pgp2en8gKwPVM.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba + LDAP

[Vladimir Psenicka]

Hi

I have questions about Samba and LDAP.

I have samba configured as PDC with ldap, users and groups are in ldap,
functional. I want to add another server as member server, I configured
samba on that server with users/groups authentication against ldap on
PDC, functional.

But I see this in ldap root:
sambaDomainname=DOMAIN
*sambaDomainname=HOSTNAME_OF_MEMBER_SERVER*

Why is member server creating sambaDomainname=HOSTNAME_OF_MEMBER_SERVER
entry in ldap root? Is this needed for servers trusts?

Thanks

-- 
Vladimir Psenicka
IT system engineer
Prodeco a.s.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Re: Bug in sernet RPM's postun?

[Karolin Seeger]

> BTW, another thing I noticed is that this only happens on updates, not
> when just uninstalling the Sernet packages.
> 
> For example:
> 
> 1. Install the Sernet "tested" RPMs (samba3, samba3-client,
> samba3-winbind; 3.2.8.x at this time)
> 2. Update to Sernet "recent" RPMs (3.2.11.x)
> 
> ... and you get the %postun error message.

Ah, thanks for the hint!

Cheers,
Karolin

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.SerNet.DE, mailto: Info @ SerNet.DE



pgpB3Huyet96p.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Re: Bug in sernet RPM's postun?

[Richard Foltyn]

Karolin Seeger wrote:

> Hi Richard,
> Please report everything concerning the SerNet packages directly to
> sa...@sernet.de. But I think in this case, the samba.org packages are
> affected as well. Currently, I couldn't reproduce that on a RHEL 5.2
> server. I have to setup a CentOS box to track that one down.
> We will fix that as soon as possible and get back to you then.
> 
> Sorry for the inconveniences!
> 
> Cheers,
> Karolin
> 

BTW, another thing I noticed is that this only happens on updates, not
when just uninstalling the Sernet packages.

For example:

1. Install the Sernet "tested" RPMs (samba3, samba3-client,
samba3-winbind; 3.2.8.x at this time)
2. Update to Sernet "recent" RPMs (3.2.11.x)

... and you get the %postun error message.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] delay to login to the domain

[Frédéric SOSSON]

Hello,

I'm running Ubuntu 8.04 with samba 3.2.5 and winbind PAM modules for GDM.

My computer joined the domain with success but I have to wait about 15
to 20 minutes before logging using my AD user account.

Do have any idea?



-- 
Frédéric SOSSON
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba ACL and Office 2007

[David Vaz]

Harry Jede wrote:
> Am Montag, 27. April 2009 15:33 schrieb David Vaz:
>   
>> I am using samba 3.3.2-1 in a debian squeze installation, using ext3
>> with acl support.
>>
>> The problem I am experiencing is easy to replicate as I have tried it
>> in different machines.
>>
>> In a given share, user "A" is the owner of the folder "test", inside
>> this folder there is a office file "test.doc" for example. User "B"
>> has write privileges over file "test.doc" but not over "test". When
>> user "B" tries to save the office document (using office 2007) an
>> error appears "Access Denied. Contact your administrator".
>>
>> # file: test
>> # owner: A
>> # group: G
>> user::rwx
>> group::r-x
>> other::---
>>
>> # file: test.doc
>> # owner: A
>> # group: G
>> user::rwx
>> user:B:rwx
>> group::r-x
>> mask::rwx
>> other::---
>>
>> Notice that if the user copy the file to his desktop, modifies it and
>> later overwrites the original there is no problem.
>> 
> That's normal with Office 2007. Thanks to M$.
>
> They create a NEW file, when the user saves the old one, delete the old 
> one, then rename the new file to the old name.
>
> So, your users are able to update files with office 2007, only when they 
> have write permissons on the directory.
>
> Search this list archive for a more detailed explanation.
>   
Is there any workaround to this?

>   
>> This error is similar in some ways to this
>> https://bugzilla.samba.org/show_bug.cgi?id=6160, but i suppose now
>> the lock over the folder.
>> 
>
>   

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] User friendly URLs to shares

[Jorgen Lundman]

I can only imagine this is an FAQ, but it is not in wiki, wiki's faq or 
general samba documentation (the paragraph I read anyway!).


I am looking for a way to make it easy for users to connect to their WWW 
storage SMB shares. I can create a "smb://u...@host/share" style URI in 
a WWW page or email for OsX and Linux users. It will ask for password, 
and just work.


But with Windows, I can not get smb:// to work. Is there a good way to 
include the username, hostname and share name for Windows users so it 
will just ask for their password, then open their shared area? Even if I 
have to create a .BAT file I guess.


\\host\share and file://host/share don't seem to work, and has nowhere 
for the username part to be included.


There is no Windows Login going on.

Lund

--
Jorgen Lundman   | 
Unix Administrator   | +81 (0)3 -5456-2687 ext 1017 (work)
Shibuya-ku, Tokyo| +81 (0)90-5578-8500  (cell)
Japan| +81 (0)3 -3375-1767  (home)
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] ACL problem under FC9

[Christos Karaviotis]

On Fri, March 13, 2009 11:07, Christos Karaviotis wrote:
> On Wed, March 11, 2009 14:26, Adam Tauno Williams wrote:
>>> I am running Samba for some years now (3 years) and had absolutely no
>>> problems.  For the last month on one of the machines the NT ACL stopped
>>> working and everyone have full access everywhere even if they are not
>>> in
>>> the acl.
>>> If I try to add them and restrict them only to read and execute the acl
>>> will show that this is the case but it will have no effect.
>>> I am running Fedora 9 and Samba-3.2.4.  I have done the installation
>>> many
>>> times and this particular one used to work but now it fails.
>>> I have tried to upgrade to 3.2.8 but still the same problem.  I have
>>> remounted the FS with the option (acl) it did it but that did not solve
>>> the problem.
>>
>> If you do a getfacl on the object do you see the ACLs you think you set?
>> --
>> OpenGroupware developer: awill...@whitemice.org
>> 
>> OpenGroupare & Cyrus IMAPd documenation @
>> 
>>
>>
>>
> Well I did that.  Even users that do not exist in that folder's ACL have
> rwx effective permissions.  I am going crazy.  The same exact setup with
> the same permissions on another machine is still working fine.
>
>
> Chris
>
Sorry for the delay

This is my smb.conf

===
[global]
acl map full control = yes
admin users = user1,@Directors
socket options = SO_KEEPALIVE TCP_NODELAY SO_SNDBUF=8192
SO_RCVBUF=8192
force group = Directors
encrypt passwords = yes
passdb backend = tdbsam
nt acl support = yes
netbios name = Atlas
server string = Public Folders
default = Public Folders
unix password sync = yes
local master = yes
workgroup = mydomain
acl group control = Yes
os level = 33
debug level = 10
security = user
username map = /etc/samba/smbusers
winbind enum users = yes
winbind enum groups = yes
#  Server configuration parameters
[homes]
browsable = no
hide dot files = yes
hide files = /.*
writable = yes
create mask = 765


[Public Folders]
nt acl support = yes
acl map full control = yes
writeable = yes
inherit acls = yes
inherit permissions = Yes
directory mode = 0770
security mask = 0770
force security mode = 0770
path = /usr/local/SHARES
write list = @Directors,@Administrator
valid users = user1,user2,user3,@staff,@Directors,@Accounting
create mode = 770
user = user1,user2,user3,@staff,@Directors,@Administrator
===

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba