[Samba] samba does not display all directories

2013-03-29 Thread Combernous, Fabien

Hello all,

A solaris server named bellow solarisserver share via samba (Samba 3.0.13) with 
network.

Bellow an extract from the smb.conf file.

[global]
workgroup = WORKGROUP
server string = solarisserver
security = SERVER
password server = passwordserver
username map = /C/netlocal/samba/lib/users.map
log level = 1
log file = /var/log/samba/byHost/log.%I
deadtime = 15
load printers = No
preferred master = No
local master = No
domain master = No
ldap ssl = no
default service = cmn$
NIS homedir = Yes
follow symlinks = No

[cmn$]
path = /topsys/cmn/%S
read only = No

Directly on the solarisserver with the smbclient tool , or on the windows 
desktop same result :

In the directory CLST.WRH, the existing directory CGND.WRH is not displayed.

[root] solarisserver # smbclient -U myuser //solarisserver/mfd
Password:

Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.0.13]
smb: \> cd TREATMENT.WRH
smb: \TREATMENT.WRH\> cd CLST.WRH
smb: \TREATMENT.WRH\CLST.WRH\> ls
  .   D   0  Thu Apr 18 11:46:38 2002
  ..  D   0  Mon Jun  4 16:36:46 2012
  CFLT.WRHD   0  Thu Apr 25 11:20:56 2002

33649 blocks of size 131072. 4148 blocks available

With tcpdump i can see that the solarisserver does not give information to the 
smbclient about  the directory CGND.WRH. So the client can't display it. And 
the issue should be on the server.

But it is possible to access to this "hiddend" directory :

smb: \TREATMENT.WRH\CLST.WRH\> cd CGND.WRH
smb: \TREATMENT.WRH\CLST.WRH\CGND.WRH\> ls
  .   D   0  Mon Sep 15 10:16:13 2003
  ..  D   0  Thu Apr 18 11:46:38 2002
  TOO81.WRH   D   0  Tue Oct 21 17:55:42 2008
  PRE81.WRH   D   0  Tue Jun  3 17:38:34 2003
  POST81.WRH  D   0  Wed Jan 16 14:54:28 2013
  8199100_002   384  Mon Sep 22 09:57:20 2003
  8199100_001   470  Mon Jul 22 09:35:03 2002

33649 blocks of size 131072. 4148 blocks available
smb: \TREATMENT.WRH\CLST.WRH\CGND.WRH\>

If i create the directory \TREATMENT.WRH\CLST.WRH\CGND.WRH.foo, then the 
directory \TREATMENT.WRH\CLST.WRH\CGND.WRH is displayed by the smb client.

No special options like in [1] are used .
[1] http://oreilly.com/openbook/samba/book/ch05_02.html

The charset are the same for the two directories :
/mnt/TREATMENT.WRH/CLST.WRH$ file -i CGND.WRH/
CGND.WRH/: inode/directory; charset=binary
/mnt/TREATMENT.WRH/CLST.WRH$ file -i CFLT.WRH/
CFLT.WRH/: inode/directory; charset=binary
/mnt/TREATMENT.WRH/CLST.WRH$ file -i CFLT.WRH/*
CFLT.WRH/8299100_001: text/plain; charset=us-ascii
CFLT.WRH/FLT82.WRH:   inode/directory; charset=binary
/mnt/TREATMENT.WRH/CLST.WRH$ file -i CGND.WRH/*
CGND.WRH/8199100_001: text/plain; charset=us-ascii
CGND.WRH/8199100_002: text/plain; charset=us-ascii
CGND.WRH/POST81.WRH:  inode/directory; charset=binary
CGND.WRH/PRE81.WRH:   inode/directory; charset=binary
CGND.WRH/TOO81.WRH:   inode/directory; charset=binary

I'm stuck. Help is greatly appreciated.

Regards,

--
Fabien COMBERNOUS
Expert OpenSource
APX Intégration
Tel : 06.50.38.55.42

Avant d'imprimer ce message, pensez à la protection de notre environnement.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba performance issue

2009-01-10 Thread Fabien

Hello,

as you say, I also think it would be nice to mention the issue in the 
documentation to avoid people turning crazy !


If you need the filesystem to be mounted, did you try the fuse 
implementations ?


I found two : "SMB for Fuse" and "usmb". I haven't had time to try this 
out yet.


Regards,


Fabien


ales...@seznam.cz a écrit :

Hello,

I can confirm that. I've tried smbclient from Samba 3.3.0rc2. It is 
considerably faster than cifs kernel module (version 1.52 from Linux 2.6.25). 
The file system is exported via Samba 3.0.33. Reading 700MB file (residing in 
the buffer cache) from the server I get:

cifs.ko ~ 30MB/s
smbclient ~ 74MB/s

I needed to remove the NIC IRQ affinity to only one CPU as it got completely 
saturated at about 66MB/s (1GHz Pentium III). Still think that the machine 
would do more than 74MB/s, but it is much better than 30MB/s anyway. 
Unfortunately I need the share mounted as a regular file system, so I'm gonna 
stick with the kernel implementation. One day I will try using jumbo frames, 
but for the moment I'm stuck with 1500b frames. In regards to the question 
Fabien has raised - I think Steven French has the performance optimization in 
TODO section for the cifs module, but he only knows when he gets there. Haven't 
asked him though. Anyway thanks for the help.

Regards

Aleš 


P.S.: The performance problems of various SMB/CIFS clients should probably be 
mentioned in Samba docs, that would prevent people from asking the same 
questions over and over again. Might even force Steven to fix the cifs kernel 
module ;-)


 Původní zpráva 
Od: Volker Lendecke 
Předmět: Re: [Samba] Samba performance issue
Datum: 05.1.2009 21:42:42
----
On Mon, Jan 05, 2009 at 08:25:34PM +0100, Fabien wrote:
I've seen I'm not the only one impacted with this issue these times on 
the mailing list :)


I did the following test (Debian packages) :

Server & Client : samba 3.2.5
mount -t smbfs : ~35Mo/s
mount -t cifs : ~35Mo/s
smbclient : ~80Mo/s

Server & Client : samba 3.0.24
mount -t smbfs : ~35Mo/s
mount -t cifs : ~35Mo/s
smbclient : ~60Mo/s

This is the first time I try smbclient.

There is a real big difference between mount and smbclient !

And it seems to be better to use the 3.2.5 version which is ~ 20Mo/s 
better than the 3.0.24 version.


Again, all of this was tested without using the disks (buffer cache).

Do you know where does this difference comes from ?

It's the latencies that kill performance. Given the
request->response nature of the protocol with a limited
request size (no matter how large you make them), you can
only get a certain number of round trips per second.
smbclient 3.2 and even more in upcoming 3.3 hides those
latencies by issuing more than one request at the same time
using the "Multiplex ID" field in the SMB header properly.
Neither cifs nor smbfs do this.

Volker




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba performance issue

2009-01-08 Thread Fabien

Thanks for the information.

Do you know why the smbclient, although faster, is not fast enough to go 
over 80Mo/s ?


Is there any plan to do the fiddly work on the smbfs implementation to 
make it as fast as smbclient ? :)


I didn't try the fuse implemtations yet. I found two : "SMB for Fuse" 
and "usmb". I going to try them when possible.


Has anyone already tried them ?

Thanks !


Fabien

Volker Lendecke a écrit :

I did the following test (Debian packages) :

Server & Client : samba 3.2.5
mount -t smbfs : ~35Mo/s
mount -t cifs : ~35Mo/s
smbclient : ~80Mo/s

Server & Client : samba 3.0.24
mount -t smbfs : ~35Mo/s
mount -t cifs : ~35Mo/s
smbclient : ~60Mo/s


It's the latencies that kill performance. Given the
request->response nature of the protocol with a limited
request size (no matter how large you make them), you can
only get a certain number of round trips per second.
smbclient 3.2 and even more in upcoming 3.3 hides those
latencies by issuing more than one request at the same time
using the "Multiplex ID" field in the SMB header properly.
Neither cifs nor smbfs do this.

Volker

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba performance issue

2009-01-05 Thread Fabien

Hello,

smbclient seems to be really better than mount (cifs & smbfs).

Have a look on my thread :)


Fabien

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba performance issue

2009-01-05 Thread Fabien

Hello,

I've seen I'm not the only one impacted with this issue these times on 
the mailing list :)


I did the following test (Debian packages) :

Server & Client : samba 3.2.5
mount -t smbfs : ~35Mo/s
mount -t cifs : ~35Mo/s
smbclient : ~80Mo/s

Server & Client : samba 3.0.24
mount -t smbfs : ~35Mo/s
mount -t cifs : ~35Mo/s
smbclient : ~60Mo/s

This is the first time I try smbclient.

There is a real big difference between mount and smbclient !

And it seems to be better to use the 3.2.5 version which is ~ 20Mo/s 
better than the 3.0.24 version.


Again, all of this was tested without using the disks (buffer cache).

Do you know where does this difference comes from ?

Fabien


Volker Lendecke a écrit :

On Sat, Jan 03, 2009 at 02:26:01AM +0100, Fabien wrote:

I'm gonna try that and post the results here as soon as possible.

Do you think it could really make a difference knowing that I also tried 
the WindowsXP native client without being able to notice any difference ?


Not sure, but for me it makes a difference.

Volker

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba performance issue

2009-01-03 Thread Fabien

I'm gonna try that and post the results here as soon as possible.

Do you think it could really make a difference knowing that I also tried
the WindowsXP native client without being able to notice any difference ?

I must also say that I used cifs for my tests (mount -t cifs).

Thanks again,


Fabien


Volker Lendecke a écrit :

On Thu, Jan 01, 2009 at 07:35:06PM +0100, Fabien wrote:

* My server config :
   - AMD X2 4200+
   - 2 Go RAM
   - 4 x 500 Go --> RAID5
   - Gigabyte connection
   - Debian ETCH
   - debian package : Samba 3.0.24 (I also tried to backport the testing
version => 3.2.5 but the results were exactly the same)


Can you try the smbclient from 3.2.5 to get a large file and
see if that performs better?

Thanks,

Volker


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba performance issue

2009-01-01 Thread Fabien

Hello, I sent the following message to the Debian folks.

They don't think that the Debian packaging could be responsible for the
issue described there.

 > Well, I'm not completely convinced that we will have very useful input
 > for you. I don't really see any reason for this to be caused by the
 > Debian packaging. To check this, why not compile samba from sources,
 > install it in /usr/local and run the same tests?
 >
 > I also recommend you bring this problem in the samba users mailing
 > lists (samba@lists.samba.org seems appropriate).

I must say I didn't try to compile it from the upstream sources for many
reasons.

Anyway, I think that there is poor chances for the issue to be related
with the Debian package.

Thank you in advance for your advices ;)

Happy new year ! (yeah, it depends on where you are in the world !!)


Fabien

--

Hello,

sorry to write directly to you, but after long hours spent trying to
solve this strange problem, I thought it could be handled better by
speaking directly with you. I hope I'm not wrong...

While testing samba speed on my file server, using a fully tested
gigabyte ethernet connexion, I encontered some very strange performance
problems.

I had big speed differences when using samba locally, or via the network
(gigabyte).

"Mb" stands for Mbytes.

* My server config :
   - AMD X2 4200+
   - 2 Go RAM
   - 4 x 500 Go --> RAID5
   - Gigabyte connection
   - Debian ETCH
   - debian package : Samba 3.0.24 (I also tried to backport the testing
version => 3.2.5 but the results were exactly the same)


* My samba share folder is a partition of my RAID 5 (reading : 170 Mb/s
& writing : 90 Mb/s).

* Here are my benchmarks (nearly the same from Linux or Windows) :

- Reading via ftp on the server (no samba) from a Gigabyte client :
   => 120Mb/s
- Reading on the samba server from a Gigabyte client
   => 35Mb/s

- Writting via ftp on the server (no samba) from a Gigabyte client :
   => 90Mb/s
- Writing on the samba server from a Gigabyte client :
   => 40Mb/s

I also noticed that if I try to read/write on the samba server from more
than just one client, the results is exactly the same : the server
bandwith limit is 35(up)/40(down) Mb/s.

/!\ When I mount the samba partition localy (on the server) I can read
at 115 Mb/s or write at 90 Mb/s, which is the good behavior.

I tried MS Windows and Linux (etch) smbfs clients.

I did a lot of testing, using a 1Go RAM disk on both sides to avoid
disks problems, and got the same test results.

Do you think that the problem could come from the Debian package ?

I investigated google a lot and found very few people reporting this
strange behavior (mainly from ubuntu forums). I am pretty sure that
several (every ?) people, at least from debian, are concerned. I think
that they just didn't notice the speed problem (35Mo/s is still quite
nice to be noticeable).

I found some people trying to tweak the samba buffers : they only got a
little better speed (+ 5Mo/s).

My smb.conf file is attached.


Thanks for your help.

Cheers,

Fabien


[global]
workgroup = MSHOME
server string = zeus
interfaces = eth1
bind interfaces only = Yes
security = SHARE
guest account = sambauser
name resolve order = host wins bcast
load printers = No
os level = 0
preferred master = No
local master = No
domain master = No
invalid users = root
force group = sambashare

[private_data]
comment = private_data
path = /data1
read only = No
create mask = 0770
directory mask = 0770

[common_data]
comment = common_data
path = /data2
read only = No
create mask = 0775
directory mask = 0775
guest ok = Yes

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] failde to get server's time

2008-01-22 Thread Renaux, Fabien
Hi all,

 

Since I have rebooted  all my servers (Samba, Windows Dc etc.), I get
this message "Failed to get server's current time!

"  when trying to use Samba :

 

bash-2.03$ ./net ads info

Failed to get server's current time!

LDAP server: 10.164.61.231

LDAP server name: lxbqarun.luxuat.com

Realm: LUXUAT.COM

Bind Path: dc=LUXUAT,dc=COM

LDAP port: 389

Server time: Thu, 01 Jan 1970 01:00:00 MET

KDC server: 10.164.61.231

Server time offset: 0

 

When trying to access shares, I get an access denied.

 

When trying to get passwd (getent passwd), the result is null.

 

Thanks for your help !

 

Fabien

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] smbd crash

2006-09-18 Thread Fabien GALACTEROS

Hello,

I can't have my smbd started as it crashes all the time.
Here's the log file :

[2006/09/17 12:53:55, 0] smbd/server.c:main(847)
 smbd version 3.0.23c started.
 Copyright Andrew Tridgell and the Samba Team 1992-2006
[2006/09/17 12:53:55, 0] passdb/pdb_interface.c:make_pdb_method_name(174)
 No builtin nor plugin backend for tdbsam, found
[2006/09/17 12:53:55, 0] lib/util.c:smb_panic(1592)
 PANIC (pid 6061): pdb_get_methods_reload: failed to get pdb methods 
for backend tdbsam,


[2006/09/17 12:53:55, 0] lib/util.c:log_stack_trace(1699)
 BACKTRACE: 7 stack frames:
  #0 /usr/sbin/smbd(log_stack_trace+0x23) [0x822b763]
  #1 /usr/sbin/smbd(smb_panic+0x46) [0x822b856]
  #2 /usr/sbin/smbd [0x81ea941]
  #3 /usr/sbin/smbd(initialize_password_db+0xe) [0x81ea98e]
  #4 /usr/sbin/smbd(main+0x591) [0x82c1cd1]
  #5 /lib/tls/libc.so.6(__libc_start_main+0xc8) [0xb7bccea8]
  #6 /usr/sbin/smbd [0x8082a31]
[2006/09/17 12:53:55, 0] lib/util.c:smb_panic(1600)
 smb_panic(): calling panic action [/usr/share/samba/panic-action 6061]
[2006/09/17 12:53:55, 0] lib/util.c:smb_panic(1608)
 smb_panic(): action returned status 0
[2006/09/17 12:53:55, 0] lib/fault.c:dump_core(173)
 dumping core in /var/log/samba/cores/smbd

Seems to panic with the tdbsam backend

If someone has an idea ?

Fab


--
www.phrawup.net

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] share with no authentication

2006-05-22 Thread Fabien . LIOU
Hi,

I tested it this morning. It works for me with security=domain.


I think "map to guest" is not valid outside [global] section.


Best Regards

-Message d'origine-
De : Adam Williams [mailto:[EMAIL PROTECTED]
Envoyé : dimanche 21 mai 2006 16:38
À : samba@lists.samba.org
Objet : Re: [Samba] share with no authentication


In my [global] I have guest account = nobody and security = user, and in
my share [wpkg] I have:

[wpkg]
comment = Windows Packager
path = /samba/wpkg
read only = yes
browseable = no
guest ok = Yes
guest only = no
# valid users = guest nobody
map to guest = Bad User

still asks me for a username and password.  if i set security = share it
works, but then I have other problems with my windows xp computers
authenticating.

Michael Gasch wrote:
> you could play with "map to guest = bad xxx"
> that´s how i did it in security=domain (i think it works with user, 
> too) and one share. all other shares have "guest ok = no"
>
> greez
>
>



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] share with no authentication

2006-05-18 Thread Fabien . LIOU

Hello,


I got this problem:

I want to mount a directory without providing a login/password  [indicaf$].

I thought that "guest ok = yes" would be sufficient. 
But it not works.

What option is the right one to open a share to everyone without a login box in 
windows ?


Thanks.



This is my smb.conf (samab v3.0.7):

tccwebcom# more smb.conf
# Samba config file created using SWAT
# from 146.11.3.28 (146.11.3.28)
# Date: 2006/05/15 18:36:54

# Global parameters
[global]
workgroup = FLEUVE
server string = Samba %v on host %h
interfaces = 2.210.11.1/8
security = DOMAIN
password server = madeira ienissei orenoque
guest account = www
username map = /usr/local/samba/private/usersmap
log file = /usr/local/samba/var/log.%m
max log size = 50
announce version = 3.0
dns proxy = No
wins server = 146.17.1.1, 146.14.1.1

[indicaf$]
comment = Fichier template XLA
path = 
/data01/www/websphere/5.0/webapps/IndicAffaire.ear/IndicAffaire.war/excel
guest only = Yes
guest ok = Yes
follow symlinks = No















Fabien LIOU (THALES SERVICES)
THALES COMMUNICATIONS (LAND & JOINT SYSTEMS)
TS/IOS/IMS/HO
160 Boulevard de Valmy
92700 COLOMBES
*Tél.:01 41 30 41 65
*  email:[EMAIL PROTECTED]


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Multiple DB / fragmented information

2004-03-03 Thread Fabien Chevalier
Le Lundi 1 Mars 2004 14:13, Lapin(c) a écrit :
> I was exploring a local LDAP solution, as it's for a very
> large network (1000 sites / 10 users) we want a
> disjunction between local administration for machines and
> global administration for users.

Wow...that's a huge project... :-)
Last time i spoke to a people from Linagora (was ~ 2 months ago), i've been told
Samba 3 was not mature enough, and that you prefered not to use it yet.

Would it be a crime to ask the question of who will be the lucky company switching 
it's NT4 domain to Samba?

Bye,

Fabien


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: Re[2]: [Samba] 100% CPU eaten -- tdb_fetch failed

2004-03-03 Thread Fabien Chevalier

> The problem is that not all tdbs need to be backed up -
> indeed, the tdbs described as the problem here
> (connections/messages/sessionid in particular) should in fact
> be deleted at startup.

Happy to hear that! :-)
I found really odd that after a tdb issue, restarting Samba wasn't
repairing the issue... :-(


But for me it still doesn't work, after deleting all tdb's except:
account_policy.db
secrets.tdb
passdb.tdb
group_mapping.tdb

I still have the same thousands of the same error message and poor performance. :-(
How can i know which tdb is faulty?

Even more strange, tdbbackup doesn't seem to complain about corrupted
tdbs

>
> The tdb that *must* be backed up is probably
> winbindd_idmap.tdb, given the drastic consequences of loosing
> that file.
>
> tdbbackup is reasonably new tool, and I'm sure patches to the
> init scripts will be gratefully accepted.

Well, if you tell me what needs to be back'ed up and what needs not, i may
be able to write them...at least for Debian. :-)

Bye,

Fabien


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] 100% CPU eaten -- tdb_fetch failed

2004-02-26 Thread Fabien Chevalier
Le Jeudi 26 Février 2004 03:30, John H Terpstra a écrit :
> Fabien,
>
> You should run the tdbbackup tool every time Samba (smbd) is
> shut down. Please refer to the man page for further
> information. The use of tdbbackup is a very important step to
> prevention of catastrophic problems with tdbs.
>
> Cheers,
> John T.

Ok, thanks for the tip...:-)
I'll try to play with tdbbackup and give back the results to the list.

Bye,

Fabien.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] 100% CPU eaten -- tdb_fetch failed

2004-02-25 Thread Fabien Chevalier
> [2004/02/25 17:59:18, 0]
> smbd/connection.c:register_message_flags(220)
> register_message_flags: tdb_fetch failed

Little addition : i got 6385 of these in ~ 17 minutes.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] 100% CPU eaten -- tdb_fetch failed

2004-02-25 Thread Fabien Chevalier

Hello,

From time to time Samba 3.0.2 performance suddenly fails bellow
what is acceptable.
One smbd process eats between 30% and 100% of CPU usage, and
for the machine associated with the smbd process i got
dozens of (debug level 2):

[2004/02/25 17:59:18, 0] smbd/connection.c:register_message_flags(220)
  register_message_flags: tdb_fetch failed
[2004/02/25 17:59:19, 0] smbd/connection.c:register_message_flags(220)
  register_message_flags: tdb_fetch failed
[2004/02/25 17:59:19, 0] smbd/connection.c:register_message_flags(220)
  register_message_flags: tdb_fetch failed
[2004/02/25 17:59:19, 0] smbd/connection.c:register_message_flags(220)
  register_message_flags: tdb_fetch failed
[2004/02/25 17:59:19, 0] smbd/connection.c:register_message_flags(220)
  register_message_flags: tdb_fetch failed
[2004/02/25 17:59:19, 0] smbd/connection.c:register_message_flags(220)
  register_message_flags: tdb_fetch failed
[2004/02/25 17:59:19, 0] smbd/connection.c:register_message_flags(220)
  register_message_flags: tdb_fetch failed
[2004/02/25 17:59:20, 0] smbd/connection.c:register_message_flags(220)
  register_message_flags: tdb_fetch failed
[2004/02/25 17:59:20, 0] smbd/connection.c:register_message_flags(220)
  register_message_flags: tdb_fetch failed
[2004/02/25 17:59:20, 0] smbd/connection.c:register_message_flags(220)
  register_message_flags: tdb_fetch failed
[2004/02/25 17:59:20, 0] smbd/connection.c:register_message_flags(220)

I tried to stop and restart Samba without success.
The client machine recreates the connection, Samba forks a new smbd,
which sill eats too much CPU.

I looked at previous posts, but didn't found any explanation regarding
tdb_fetch failed issues.

How can i know which tdb is faulty?
Is there another way to solve this issue than removing the tdb ?
(...but for now i don't know which one it is...)

Bye,

Fabien

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] pdbedit -P 'maximum password age' -C 0 should == never expire?

2004-02-25 Thread Fabien Chevalier

> Thanks for the bug-report, this is now Fixed in 3.0 CVS.
>

Damned, this is a bug?
I though it was logical that it was running that way... 

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] pdbedit -P 'maximum password age' -C 0 should == never expire?

2004-02-23 Thread Fabien Chevalier
Le Lundi 23 Février 2004 17:31, JustFillBug a écrit :
> When I set the 'maximum password age' to 0, my password
> expired immediately after I did a smbpasswd. Shouldn't setting
> it to 0 mean the password will never expire? Or are there any
> other way to set password to never expire?
>
> Here is the microsoft's interpretation on 'maximum password
> age':
>
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003
>/proddocs/entserver/501.asp
>
> It said 0 = 'never expire'.

Hello,

In fact i think this doesn't work like that with Samba.
the field name is the same, but in Samba case, it contains
a number of seconds. Each time you change your password, the 'password must
change' field in your account is incremented by this number.

So in your case it's incremented of 0, so your password expires immediately..

Bye,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Suddenly one printer stops to print

2004-02-18 Thread Fabien Chevalier

Hi all,

I'm still a young man having trouble with his fresh new Samba 3 setup.

I've got another small issue with Samba.

Our Samba 3.0.2-2 (Debian Sarge) is acting as a PDC, but also hosts a few
printers shares, with cups.

Suddenly today only ONE of our printers stopped to work.
From an XP Pro SP1 Client, we cannot print anymore.
An attempt to print a test page fails, and here is what the logs at debug 10 gives
to us. 


[2004/02/18 18:25:01, 10] printing/nt_printing.c:nt_printing_getsec(4796)
  secdesc_ctr for ISTR0017 has 3 aces:
[2004/02/18 18:25:01, 10] printing/nt_printing.c:nt_printing_getsec(4805)
  S-1-1-0 0 2 0xe000
[2004/02/18 18:25:01, 10] printing/nt_printing.c:nt_printing_getsec(4805)
  S-1-5-21-50507076-2264231353-679752913-500 0 9 0x1000
[2004/02/18 18:25:01, 10] printing/nt_printing.c:nt_printing_getsec(4805)
  S-1-5-21-50507076-2264231353-679752913-500 0 2 0x1000
[2004/02/18 18:25:01, 9] printing/nt_printing.c:get_a_printer_2(3340)
  Unpacked printer [ISTR0017] name [\\str-don-01\ISTR0017] running driver [ISTR0017]
[2004/02/18 18:25:01, 10] printing/nt_printing.c:get_a_printer(4023)
  get_a_printer: [ISTR0017] level 2 returning WERR_OK
[2004/02/18 18:25:01, 5] printing/print_cups.c:cups_printername_ok(322)
  cups_printername_ok("ISTR0017")
[2004/02/18 18:25:01, 10] printing/printing.c:print_job_start(1946)
  print_job_start: Queue ISTR0017 number of jobs (0), max printjobs = 1000
[2004/02/18 18:25:01, 0] printing/printing.c:allocate_print_jobid(1843)
  allocate_print_jobid: failed to allocate a print job for queue ISTR0017
[2004/02/18 18:25:01, 3] printing/printing.c:print_job_start(2011)
  print_job_start: returning fail. Error = No space left on device
[2004/02/18 18:25:01, 5] rpc_parse/parse_prs.c:prs_debug(82)
  00 spoolss_io_r_startdocprinter
[2004/02/18 18:25:01, 5] rpc_parse/parse_prs.c:prs_uint32(635)


The failing function is allocate_print_jobid, with the following code

if (i > 2) {
DEBUG(0, ("allocate_print_jobid: failed to allocate a print job for 
queue %s\n",
printername ));
/* Probably full... */
errno = ENOSPC;
return False;
}

But i can say that my disk is NOT full.

Any clue?

Regards,

Fabien Chevalier

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ???

2004-02-17 Thread Fabien Chevalier
Le Mardi 17 Février 2004 17:01, zynkx a écrit :
> why did my email show up all this times?
>
> :(
>
> sorry all...

Haven't you caught some kind of new virus?

:-)

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Bad performance with samba3

2004-02-17 Thread Fabien Chevalier
 > What is the memory usage of your system?
>
> free output :
>  total   used   free sharedbuffers
> cached
> Mem:   10196681009168  10500  0   7140
> 337080
> -/+ buffers/cache: 664948 354720
> Swap:  2024112 9472961076816
> Total: 304378019564641087316

It seems that your hardware configuration is badly broken...
You have far too much CPU power and really not enough RAM.

Maybe somebody else could confirm this?

By the way, what are the memory requirements for Samba 3.0?
I remember having read somewhere it was something like 3-4 Mb per
connexion, but this was with 2.2...My personnal opinion is that it seems
that 3.0 requires more.

bye,

Fabien

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Bad performance with samba3

2004-02-17 Thread Fabien Chevalier
Le Mardi 17 Février 2004 16:01, Raphael Berghmans a écrit :
> On Tue, 2004-02-17 at 16:00, Fabien Chevalier wrote:
> > Le Mardi 17 Février 2004 15:46, Raphael Berghmans a écrit :
> > > Hi,
> > >
> > >
> > > Since our files server has been migrated from NT4 to Samba
> > > 3, several users complains that the time to open a Word or
> > > xls file is very long (about 30 seconds).
> > >
> > > Which could be the reasons of this bad performance ?
> > >
> > > Which parameters have to be modified ?
>
> Samba-3.0.0 - with 600 silmuntaneous smbd process
> IBM xseries 4-processor 2.8 Ghz, 1Gb RAM + 2Gb Swap, 1
> Gigabit-Ethernet + SAN 400 Gb (fiber Channel 2Gbits/s)
>
> And most of the smb.conf options keep the default value.

Are you using LDAP?
What is the memory usage of your system?

Bye,

Fabien

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Setting "password must change" for more than one user

2004-02-17 Thread Fabien Chevalier
>
> Administrators with large LDAP sites soon become very familiar
> with Net::LDAP and perl scripting :-)
>
> It's really not that hard... ;-)
>
> (and yes, I know ldap can be a real pain - the benefit is that
> you *can* do this kind of manipulation, directly on the
> backend)

Ok, thanks for the reply
I'll go back and learn a bit more about perl. :-(

Bye the way, wouldn't it be something pdbedit could do?
Maybe in a near future?

Bye,

Fabien

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Setting "password must change" for more than one user

2004-02-16 Thread Fabien Chevalier

Hello all,

I'm using Samba 3 with ldapsam_compat and i have a bunch of users (~ 150).
I'm trying to find a way to set 'password must change' attribute to a given value to 
all users of my domain, so
that all be forced to reset their passwords at the same time.

Is there an "easy" way to do that, better than editing ldap database "by hand" or 
writing a custom script?
I looked at pdbedit, smbpasswd, smbldap-tools, and no...nothing seems to cope with 
it...

Any idea?

Cheers,

Fabien Chevalier


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba printing - help!

2004-02-15 Thread Fabien Chevalier

Hello,

I don't know if it might help, but do you still have the '/var/spool/samba' directory
in place? I had the same issues recently, when i reinstalled a system which was
missing Samba spool dir.

bye,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Suse 9 Konqueror/Samba problem

2004-02-07 Thread Fabien Chevalier
> I can access Samba and Windows share on my newtork (I have
> Samba on linux server) and some  W2K Server.
> From my SUSE 9 Professional client within Konqueror I can
> create, delete file, rename and even overwrite files on the
> share of my server (Samba or Windows).
> But When I open the file (file.txt or any other type) within
> Konqueror on a Samba
> share (by example right clicking and choosing open with..) I
> got the error
>
> 1) Access denied to smb://server/share/file.txt" if I try to
> open file.txt resident on a W2K server
> or
> 2) File or Directory smb://server/share/filextxt" do not exist
> if I try to open file.txt resident on Linux (Samba) server.
>
> I notice that when I choose open (with Kedit by example) the
> file, a windows appear that seems to download the file to
> /tmp/kde-myuser and create the file with a temporary name.
> After that I get the error, but If I browse this directory I
> can find the temp file, open and edit it.
>

Hello,

This is not the right place to report issues. You should check with
KDE guys.
As far as i know, the feature you're using has very few developers
working on it, as it was initially developed by Caldera.
By the way, i suppose you're using Samba 2.2.
I know this is really buggy.
To solve your issues:
  - Upgrade de Samba 3 (Or at least libsmbclient from Samba 3)
  - Upgrade to KDE >= 3.1.4, compiled with kio_smb libsmbclient support.

This is my setup and it works rather fine.

Regards,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] upgrade 2.2.8 - 3.0.1

2004-02-03 Thread Fabien . LIOU

Hello,

I upgraded samba from 2.2.8 to 3.0.1

1- In swat i can't see "unix charset" option. Why ?
2- In log.nmbd, i see this message: process_nmb_request: Multihomed
registration request must be directed at a WINS server
what is the meaning and how can i resolve it ?

Thanks.
Fabien 



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] upgrade 2.2.8 - 3.0.1

2004-02-03 Thread Fabien . LIOU

Hello,

I upgraded samba from 2.2.8 to 3.0.1

1- In swat i can't see "unix charset" option. Why ?
2- In log.nmbd, i see this message: process_nmb_request: Multihomed
registration request must be directed at a WINS server
what is the meaning and how can i resolve it ?

Thanks.
Fabien 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Solaris 8 & Samba 3: "address already in use"

2004-02-02 Thread Fabien Chevalier
Le Lundi 2 Février 2004 17:37, William Enestvedt a écrit :
> I am getting errors when I try to start smbd which say that
> port 445 is already in use, but nothing else is using it. In
> the log, the full error is:

Don't you have a stale smbd process, preventing a new smbd from binding
to port 445?

cheers,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Execute .exe files from a Samba share

2004-01-25 Thread Fabien Chevalier
Le Dimanche 25 Janvier 2004 17:35, Anders Norrbring a écrit :
> Hi!
>
> I'm experimenting with SuSE Linux and Samba 2.2.5 as a PDC, so
> far, everything works perfectly well, aside from that if I
> store an .exe file on a network mapped drive (from the Samba
> server) it can't be run?
>
> The workstation is a Windows XP Pro SP1, connecting to the
> Samba running as a PDC with LDAP backend.  The machine and
> user logon works perfectly, but I can't execute .exe files
> residing on the Samba server's shares.
>
> Anders Norrbring

What's you're smb.conf ?
Is there anything in the logs?
What are the permissions of the exe file seen from the Windows box?

Regards,

Fabien Chevalier


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] weird NT error codes

2004-01-23 Thread Fabien Chevalier
Le Friday 23 January 2004 07:58, Andrew Bartlett a écrit :
> On Thu, 2004-01-22 at 16:28, Andrew Gaffney wrote:
> > This isn't necessarily a samba problem, but its happening on
> > my domain with a Samba PDC.
>
> Which version?  3.0.1?
>
> Thy 3.0.0 or 3.0.2 (in rc at the moment) as there were some
> issues that apparently causes these kind of errors in 3.0.1.
>
> Andrew Bartlett

Hello,

I have sometimes issues wich seem to be related to these with
a Samba 3.0.1 PDC, and a Windows 2000 server as client.

smbclient -L sometimes returns completely mad errors code when trying
to list shares on the Windows 2000 server (exactly like Andrew has seen).

Bye,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] unicode conversion

2004-01-21 Thread Fabien . LIOU
Hi, 


We have windows XP and NT workstations. They are configured to support
french language.

Also we export samba 2.2.8 shares through a solaris 8 machine.
But these samba shares are NFS mounted file systems that come from a NAS
(Celerra's EMC)

In smb.conf:
- Character set parameter is not set.
- Codepage is 850 

In the NAS file server the parameter is set to unicode.


In windows machines filenames look good.
In Solaris for example eacute are replaced with something like \202 or
spaces are replaced with \200.
In NAS, is worst.
All natives unix filenames are good.

So do we have to upgrade samba to samba3.0 ?
What parameters do we have to set in smb.conf (2.2.8 and 3.0) ?



Thanks a lot.

Fabien



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SAMBA 3.0.1 for Debian

2003-12-17 Thread Fabien Chevalier
Le Tuesday 16 December 2003 10:26, Michael Knigge a écrit :
> All,
>
> does someone has 3.0.1 Debian Packages ready?
>
> Thank you,
>   Michael

I got some home built for Sarge, 
I you're interested...

Regards,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A domain controller for the domain could not be contacted (2.2.3a-12.3 for Debian)

2003-12-17 Thread Fabien Chevalier
Le Wednesday 17 December 2003 13:20, Eduard Witteveen a écrit :
> Fabien Chevalier wrote:
> >Please send your ipconfig /all.
>
> I attached the output
>
> >I suppose something's wrong in your network settings.
> >Are you using Dhcp or static Ip?
>
> Dhcp. (look in the output)
>
> The linux server (nemo) has ip-number  10.0.0.152
>
>
> Eduard Witteveen

Ok, thanks.

I think your Samba server hasn't been registered to your wins server,
thus when trying to join the domain, your workstation falls back to dns...which 
obviously fails.

Try to add "wins server = 10.0.0.10" to your smb.conf,
and let us know if it works...

Good luck,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A domain controller for the domain could not be contacted (2.2.3a-12.3 for Debian)

2003-12-17 Thread Fabien Chevalier
Le Wednesday 17 December 2003 12:39, Eduard Witteveen a écrit :
> Fabien Chevalier wrote:
> >It seems your workstation tries to locate the DC by doing a
> > dns query, what is not currently supported by Samba. What is
> > your workstation node type set to?
>
> Could you rephrase your question?  I dont know how i found out
> what the node type of my workstations is.

Please send your ipconfig /all.
I suppose something's wrong in your network settings.
Are you using Dhcp or static Ip?

Regards,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A domain controller for the domain could not be contacted (2.2.3a-12.3 for Debian)

2003-12-17 Thread Fabien Chevalier

> The error was: "DNS name does not exist."
> (error code 0x232B RCODE_NAME_ERROR)
> The query was for the SRV record for
> _ldap._tcp.dc._msdcs.HAWAR3 Common causes of this error
> include the following: - The DNS SRV record is not registered
> in DNS.

It seems your workstation tries to locate the DC by doing a dns query, what is not 
currently supported by Samba.
What is your workstation node type set to?

Regards,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A domain controller for the domain could not by contacted (2.2.3a-12.3 for Debian)

2003-12-16 Thread Fabien Chevalier
Le Tuesday 16 December 2003 17:12, Eduard Witteveen a écrit :
> Hello,
>
> I'm having problems using Samba as an primary domain
> controller. I am using debian woody as our platform.
>
> The version of samba is "2.2.3a-12.3 for Debian" and i
> followed the instructions which can be found on the following
> url:
> http://www-106.ibm.com/developerworks/eserver/tutorials/samba/



> Could someone please help me here?

Sure we can. :-)
For now you just missed something.
Relevant information is generally in /var/log/samba/log.NETBIOSNAME.
Have a look at it, and if you still cannot find, send relevant part back to the list.

Good luck,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba3/ldap/net groupmap fails

2003-12-12 Thread Fabien Chevalier

> We use samba3+openldap 2.1 correctly.
> net groupmapping also works correctly.
>
> Are your samba.schema is up to date?
> What is the ldap version?
>

In my case i use OpenLDAP 2.1.23, with Samba 3.0.0 schemas.
'net groupmapping' works fine except you don't have default mappings when
using an ldap backend as first backend,

i.e.:

with "passwd backend = tdbsam ldapsam_compat://..."

dc-sorral-05:~# net groupmap list
System Operators (S-1-5-32-549) -> -1
Replicators (S-1-5-32-552) -> -1
Guests (S-1-5-32-546) -> -1
Domain Users (S-1-5-21-50507076-2264231353-679752913-513) -> -1
Power Users (S-1-5-32-547) -> -1
Print Operators (S-1-5-32-550) -> -1
Administrators (S-1-5-32-544) -> -1
Account Operators (S-1-5-32-548) -> -1
Domain Guests (S-1-5-21-50507076-2264231353-679752913-514) -> -1
Backup Operators (S-1-5-32-551) -> -1
Users (S-1-5-32-545) -> -1
Domain Admins (S-1-5-21-50507076-2264231353-679752913-512) -> -1
dc-sorral-05:~#

with "passwd backend = ldapsam_compat:// tdbsam ..."

dc-sorral-05:~# net groupmap list
Domain Users (S-1-5-21-50507076-2264231353-679752913-513) -> utilisateurs
Domain Admins (S-1-5-21-50507076-2264231353-679752913-512) -> sambaadmin
Domain Guests (S-1-5-21-50507076-2264231353-679752913-514) -> guests
dc-sorral-05:~#

But you can still create mappings if you want (provided the unix group is stored in 
ldap and not int /etc/groups)

Regards,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba3/ldap/net groupmap fails

2003-12-11 Thread Fabien Chevalier

> > I suppose it must work the same way ...
> >
> > Would you mind trying to add
> > passwd backend = tdbsam ldapsam:ldap://server
> > and try a net groupmap list?
>
> i just tried it, and now get the list of domain groups i would
> expect. now the trouble is the profiles don't load properly on
> the clients. they got logged in with a temp profile. the samba
> logs for my test system show:
>
> [2003/12/11 15:17:41, 0]
> passdb/pdb_tdb.c:tdbsam_getsampwrid(255) pdb_getsampwrid:
> Unable to open TDB rid database!
> [2003/12/11 15:17:57, 1] smbd/service.c:close_cnum(885)
>   eric (192.168.1.118) closed connection to service msmith
> [2003/12/11 15:18:20, 0]
> passdb/pdb_tdb.c:tdbsam_getsampwrid(255) pdb_getsampwrid:
> Unable to open TDB rid database!
>
> i suppose i'm getting this because we're using ldap
> exclusively and don't use tdbsam. any ideas?

It is what i thought of...
When using ldapsam or ldapsam_compat as first backend, you don't have access to domain
default group mappings anymore.
You can still create mappings for your 'classic' nt groups, but only if you know the 
SID of the group you
want to map.

I don't understand why it is like this...

Fabien


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba3/ldap/net groupmap fails

2003-12-11 Thread Fabien Chevalier
Le Thursday 11 December 2003 20:41, John Campbell a écrit :
> > > first symptom is that net groupmap list returns nothing.
> > >
> > > [EMAIL PROTECTED] root]# net groupmap list
> > > [EMAIL PROTECTED] root]#
> >
> > hmmm...i'm sorry i cannot help you with this issue, but i
> > can give some more precisions about this strange effect.
> >
> > I suppose you're using ldapsam_compat as ldap backend?
>
> actually, no. we're using passdb backend =
> ldapsam:ldap://
>

I suppose it must work the same way ...

Would you mind trying to add 
passwd backend = tdbsam ldapsam:ldap://server
and try a net groupmap list?

Regards,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba3/ldap/net groupmap fails

2003-12-11 Thread Fabien Chevalier
Le Thursday 11 December 2003 19:58, John Campbell a écrit :
> hi,
>
> we recently upgraded from samba 2.2.8a w/ldap to samba3 w/ldap
> and having troubles with domain group mappings.
>
> first symptom is that net groupmap list returns nothing.
>
> [EMAIL PROTECTED] root]# net groupmap list
> [EMAIL PROTECTED] root]#

hmmm...i'm sorry i cannot help you with this issue, but i can give some more 
precisions about this
strange effect.

I suppose you're using ldapsam_compat as ldap backend?

I used to use in my smb.conf the following:
passwd backend = tdbsam ldapsam_compat:ldap://127.0.0.1
and had no issue with it.

As soon as i inverted sam backends:
passwd backend = ldapsam_compat:ldap://127.0.0.1 tdbsam

net groupmap list didn't list any default or non default mapping.

Anybody has an explanation about this fact?

regards,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ACL/Files permissions with Win access control list

2003-11-27 Thread Fabien Chevalier

>Hi,
> 
> I trying installing a Samba 3.0.1pre domain controller with ACL support. 
> It works fine but i've got strange behaviour managing the file permissions access 
> control list on Windows machines.
> When I add a domain group or a domain user to the user list of a local file, it is 
> correctly shown. 
> But, when I close and reopen the window, the username (SERVER\username) is no longer 
> shown, but its SID.
> I don't understand why.
> 
> Somebody have a clue ?
> 
> Aurélien Degrémont
 
Could you give a bit more information about your setup?
I've tested your case...and for me it works just fine. [Samba 3.0.1pre3 + Windows XP 
Pro SP1]

Regards,

Fabien Chevalier
 
 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ldapsam_compat & machine accounts

2003-11-27 Thread Fabien Chevalier
at # password database type you are using.
> >passdb backend = tdbsam ldapsam_compat:ldap://localhost
>
> Samba is doing exactly what it was told to do - use tdbsam!
>
> If you don't want to use tdbsam, remove it :-)
>

Yeahi'm sometimes a bit stupid. :-)

But what made me wrong is that i use both tdbsam and ldapsam_compat
for user accounts.

What i didn't noticed till now is that when samba uses passwd backend to
add an account, it uses the mechanism given by the first field.

So setting:

passdb backend = ldapsam_compat:ldap://localhost tdbsam 

does what i want.

Well, when thinking a bit more to it, it seems really obvious. 

Thanks again for your help,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ldapsam_compat & machine accounts

2003-11-26 Thread Fabien Chevalier

> It should all be in ldap - what is your smb.conf?

Good news!!

But in this case i may have missed something :-(

Attached is my smb.conf

Fabien.

#
# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
#
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options most of which 
# are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash) 
# is a comment and is ignored. In this example we will use a #
# for commentary and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command
# "testparm" to check that you have not many any basic syntactic 
# errors. 
#

#=== Global Settings ===

[global]

  unix charset = ISO8859-1
  nt acl support = yes

  client ntlmv2 auth = yes
  client lanman auth = no

## Browsing/Identification ###

   workgroup = DC-SORRAL
   netbios name = STR-DON-01
   domain master = yes
   domain logons = yes

# server string is the equivalent of the NT Description field
   server string = Serveur de Fichiers micro-informatique Sorral

# LDAP support
   ldap admin dn = cn=admin,dc=sorral,dc=duferco-coating,dc=com
   ldap ssl = off
   # start_tls should run on 389, but samba defaults incorrectly to 636
   ldap suffix = dc=sorral,dc=duferco-coating,dc=com
   ldap user suffix = ou=People
   ldap group suffix = ou=Group
   ldap machine suffix = ou=Computers
   ldap passwd sync = yes

# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable its WINS Server
   wins support = yes

# WINS Server - Tells the NMBD components of Samba to be a WINS Client
# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
#  wins server = 172.16.0.3

# Whether to be a time server for Windows Clients

   time server = yes
# This will prevent nmbd to search for NetBIOS names through DNS.
   dns proxy = no

# What naming service and in what order should we use to resolve host names
# to IP addresses
;   name resolve order = lmhosts host wins bcast

# Needed by NT PDC support
#add machine script = /usr/sbin/useradd -d /dev/null -g nogroup -c 'Machine account' 
-s /bin/false %u
add machine script = /etc/samba/smbldap-tools/smbldap-useradd.pl -w -d /dev/null -g 
nogroup -c 'Machine Account' -s /bin/false %u

#Logon settings
logon home = \\%L\%U
logon drive = P:
logon path = \\%L\Profiles

 Debugging/Accounting 

# This tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba/log.%m
   log level = 2

# Put a capping on the size of the log files (in Kb).
   max log size = 5000

# If you want Samba to only log through syslog then set the following
# parameter to 'yes'.
;   syslog only = no

# We want Samba to log a minimum amount of information to syslog. Everything
# should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log
# through syslog you should set the following parameter to something higher.
   syslog = 0

# Do something sensible when Samba crashes: mail the admin a backtrace
   panic action = /usr/share/samba/panic-action %d


### Authentication ###

# "security = user" is always a good idea. This will require a Unix account
# in this server for every user accessing the server. See
# /usr/share/doc/samba-doc/htmldocs/ServerType.html in the samba-doc
# package for details.
   security = user 

# You may wish to use password encryption.  See the section on
# 'encrypt passwords' in the smb.conf(5) manpage before enabling.
   encrypt passwords = true

# If you are using encrypted passwords, Samba will need to know what
# password database type you are using.  
   passdb backend = tdbsam ldapsam_compat:ldap://localhost
   ;passdb backend = tdbsam
   obey pam restrictions = no

;   guest account = nobody
;   invalid users = root

# This boolean parameter controls whether Samba attempts to sync the Unix
# password with the SMB password when the encrypted SMB password in the
# passdb is changed.
;   unix password sync = no

# For Unix password sync to work on a Debian GNU/Linux system, the following
# parameters must be set (thanks to Augustin Luton <[EMAIL PROTECTED]> for
# sending the correct chat script for the passwd program in Debian Potato).
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* 
%n\n .

# This boolean controls whether PAM will be used for password changes
# when requested by an SMB client instead of the program listed in
# 'passwd program'. The default is 'no'.
;   pam password change = no


## Printing ##

# If you want to automatically load your printer list rather
# than setting them up ind

[Samba] ldapsam_compat & machine accounts

2003-11-26 Thread Fabien Chevalier

Hello everybody,
I'm asking myself a rather simple issue (i hope it hasn't already be explained 
somewhere).

I'm using ldapsam_compat on 3.0.1pre3(+Debian patches & smbldap-tools 0.8.1) to store 
both user accounts and machine accounts.
It works just fine, but there still is something that i find quite odd.

My smb.conf contains:

add machine script = /etc/samba/smbldap-tools/smbldap-useradd.pl -w -d /dev/null -g 
nogroup -c 'Machine Account' -s /bin/false %u

which works great.

However, the objets created in LDAP database for machines account are of objectType 
inetOrgPerson and posixAccount,
and not of type sambaAccount.
pdbedit shows that some bits of information are still stored in tdbsam...

Is there any way to have all in LDAP?

Regards,

Fabien Chevalier


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] login troubles , samba-3.01-pre3 RedHat 9

2003-11-17 Thread Fabien VALLON
Hi,

I have some troubles to log in from a W2k station to a samba configure as
PDC with LDAP as backend.
Join the domain is OK 
browse from explorer and auth is ok 

I attached the end of  log.0i427 (machine) and the smb.conf file 


Thanks
Fabien

-- 
Fabien VALLON - [EMAIL PROTECTED]

GNUstep - http://www.gnustep.org - 

[2003/11/17 18:49:09, 3] smbd/process.c:process_smb(890)
  Transaction 31 of length 388
[2003/11/17 18:49:09, 3] smbd/process.c:switch_message(685)
  switch message SMBwriteX (pid 1247)
[2003/11/17 18:49:09, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
  free_pipe_context: destroying talloc pool of size 0
[2003/11/17 18:49:09, 3] rpc_server/srv_pipe.c:api_rpcTNP(1503)
  api_rpcTNP: rpc command: NET_SAMLOGON
[2003/11/17 18:49:09, 3] rpc_server/srv_netlog_nt.c:_net_sam_logon(570)
  SAM Logon (Interactive). Domain:[TV5PARIS].  User:[EMAIL PROTECTED] Requested 
Domain:[TV5PARIS]
[2003/11/17 18:49:09, 5] auth/auth.c:make_auth_context_subsystem(463)
  Making default auth method list for DC, security=user, encrypt passwords = yes
[2003/11/17 18:49:09, 5] auth/auth.c:load_auth_module(370)
  load_auth_module: Attempting to find an auth method to match guest
[2003/11/17 18:49:09, 5] auth/auth.c:load_auth_module(395)
  load_auth_module: auth method guest has a valid init
[2003/11/17 18:49:09, 5] auth/auth.c:load_auth_module(370)
  load_auth_module: Attempting to find an auth method to match sam
[2003/11/17 18:49:09, 5] auth/auth.c:load_auth_module(395)
  load_auth_module: auth method sam has a valid init
[2003/11/17 18:49:09, 5] auth/auth.c:load_auth_module(370)
  load_auth_module: Attempting to find an auth method to match winbind:trustdomain
[2003/11/17 18:49:09, 5] auth/auth.c:load_auth_module(370)
  load_auth_module: Attempting to find an auth method to match trustdomain
[2003/11/17 18:49:09, 5] auth/auth.c:load_auth_module(395)
  load_auth_module: auth method trustdomain has a valid init
[2003/11/17 18:49:09, 5] auth/auth.c:load_auth_module(395)
  load_auth_module: auth method winbind has a valid init
[2003/11/17 18:49:09, 5] auth/auth.c:get_ntlm_challenge(93)
  auth_get_challenge: module guest did not want to specify a challenge
[2003/11/17 18:49:09, 5] auth/auth.c:get_ntlm_challenge(93)
  auth_get_challenge: module sam did not want to specify a challenge
[2003/11/17 18:49:09, 5] auth/auth.c:get_ntlm_challenge(93)
  auth_get_challenge: module winbind did not want to specify a challenge
[2003/11/17 18:49:09, 5] auth/auth.c:get_ntlm_challenge(132)
  auth_context challenge created by random
[2003/11/17 18:49:09, 5] auth/auth.c:get_ntlm_challenge(133)
  challenge is: 
[2003/11/17 18:49:09, 5] auth/auth_util.c:make_user_info_map(216)
  make_user_info_map: Mapping user [TV5PARIS]\[winadm] from workstation [I0427]
[2003/11/17 18:49:09, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
[2003/11/17 18:49:09, 3] smbd/uid.c:push_conn_ctx(287)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2003/11/17 18:49:09, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/11/17 18:49:09, 5] passdb/secrets.c:secrets_fetch_trusted_domain_password(299)
  secrets_fetch failed!
[2003/11/17 18:49:09, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
[2003/11/17 18:49:09, 5] auth/auth_util.c:make_user_info(132)
  attempting to make a user_info for winadm (winadm)
[2003/11/17 18:49:09, 5] auth/auth_util.c:make_user_info(142)
  making strings for winadm's user_info struct
[2003/11/17 18:49:09, 5] auth/auth_util.c:make_user_info(184)
  making blobs for winadm's user_info struct
[2003/11/17 18:49:09, 10] auth/auth_util.c:make_user_info(193)
  made an encrypted user_info for winadm (winadm)
[2003/11/17 18:49:09, 3] auth/auth.c:check_ntlm_password(216)
  check_ntlm_password:  Checking password for unmapped user [EMAIL PROTECTED] with the 
new password interface
[2003/11/17 18:49:09, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  mapped user is: [EMAIL PROTECTED]
[2003/11/17 18:49:09, 10] auth/auth.c:check_ntlm_password(228)
  check_ntlm_password: auth_context challenge created by random
[2003/11/17 18:49:09, 10] auth/auth.c:check_ntlm_password(230)
  challenge is: 
[2003/11/17 18:49:09, 10] auth/auth.c:check_ntlm_password(256)
  check_ntlm_password: guest had nothing to say
[2003/11/17 18:49:09, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
[2003/11/17 18:49:09, 3] smbd/uid.c:push_conn_ctx(287)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2003/11/17 18:49:09, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/11/17 18:49:09, 2] lib/smbldap.c:smbldap_search_suffix(1067)
  smbldap_search_suffix: searching for:[(&(uid=winadm)(objectclass=sambaSamAccount))]
[2003/11/17 18:49:09, 2] passdb/pdb_ldap.c:init_sam_from_ldap(462)
  init_sam_from_ldap: Entry found for user: winadm
[2003/11/17 18:49:09, 3] smbd/sec_ctx.c:p

[Samba] problem with WINS

2003-10-29 Thread Fabien . LIOU

Hello,


When i do a "nbtstat -a , i get a "Host not found" message.

WINS seems to be correct on the NT4 PDC.
ping is ok
DNS is ok


smb.conf points to the IP address of the WINS server.


When i do the same command to a second samba server which has the same
smb.conf parameters and also is on the same subnet than samba_server1, i get
a correct answer.


What's wrong ?

Do i need to register again ?

Samba version is 2.2.7


Thanks.

Fabien 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] NET_SAMLOGON issue

2003-10-16 Thread Fabien Chevalier
0:37, 100] lib/util.c:dump_data(1825)
  [000] 35 00 35 00 6E 00 6D 00  30 00 38 00 64 00 6B 00  5.5.n.m. 0.8.d.k.
  Given challenge was |
[2003/10/14 16:40:37, 100] lib/util.c:dump_data(1825)
  [000] 00 00 00 00 00 00 00 00   
  Value from encryption was |
[2003/10/14 16:40:37, 100] lib/util.c:dump_data(1825)
  [000] 29 B5 0F 96 7B 27 70 12  A4 11 76 7C 22 0B 9E 50  )...{'p. ..v|"..P
[2003/10/14 16:40:37, 4] auth/auth_sam.c:sam_password_ok(200)
  sam_password_ok: Checking NTLMv2 password without a domain
[2003/10/14 16:40:37, 100] auth/auth_sam.c:smb_pwd_check_ntlmv2(131)
  Part password (P16) was |
[2003/10/14 16:40:37, 100] lib/util.c:dump_data(1825)
  [000] 83 0D 28 64 3B F5 66 10  23 F9 14 15 80 08 95 40  ..(d;.f. #..@
  Password from client was |
[2003/10/14 16:40:37, 100] lib/util.c:dump_data(1825)
  [000] 35 00 35 00 6E 00 6D 00  30 00 38 00 64 00 6B 00  5.5.n.m. 0.8.d.k.
  [010] 35 00 35 00 6E 00 6D 00  30 00 38 00 64 00 6B 00  5.5.n.m. 0.8.d.k.
  Variable data from client was |
[2003/10/14 16:40:37, 100] lib/util.c:dump_data(1825)
  [000] 35 00 35 00 6E 00 6D 00  30 00 38 00 64 00 6B 00  5.5.n.m. 0.8.d.k.
  Given challenge was |
[2003/10/14 16:40:37, 100] lib/util.c:dump_data(1825)
  [000] 00 00 00 00 00 00 00 00   
  Value from encryption was |
[2003/10/14 16:40:37, 100] lib/util.c:dump_data(1825)
  [000] E3 2F 84 BF D8 C3 34 49  AE B0 17 89 84 5F EF BD  ./4I ._..
[2003/10/14 16:40:37, 3] auth/auth_sam.c:sam_password_ok(210)
  sam_password_ok: NTLMv2 password check failed
--SNIP--

So this is what i thought of.
Samba treats the cleartext string an NTLMv2 challenge response...which makes
HummingBird fail to authenticate.

It took me a few days to find the issue, and to review the 6000+ lines of log,
as i was a complete newbie with the SMB protocol.
So i would like now if possible the opinion of more knowledged people about NT 
internals...
as i cannot pursue my analysis any further without external help (I did not find any 
usefull information
on NT RPCS).

What i would like to know is:
  - if my analysis is right
  - if it is a bug in HummingBird DM auth mechanism
  - if it is a bad assumption in Samba (Is SAM_NETLOGON RPC always using NTLMv2?)
  - if it is an unimplemented dark NT feature in Samba ;-)

...and of course if it is fixable.

I hope somebody out there can help.

Best regards,

Fabien Chevalier
Computer Science Student - www.supelec.fr
#
# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
#
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options most of which 
# are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash) 
# is a comment and is ignored. In this example we will use a #
# for commentary and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command
# "testparm" to check that you have not many any basic syntactic 
# errors. 
#

#=== Global Settings ===

[global]

  unix charset = ISO8859-1
  nt acl support = yes

  client ntlmv2 auth = yes
  client lanman auth = no

## Browsing/Identification ###

   workgroup = DC-SORRAL
   netbios name = STR-DON-01
   domain master = yes
   domain logons = yes

# server string is the equivalent of the NT Description field
   server string = Serveur de Fichiers micro-informatique Sorral

# LDAP support
   ldap admin dn = cn=admin,dc=sorral,dc=duferco-coating,dc=com
   ldap ssl = off
   # start_tls should run on 389, but samba defaults incorrectly to 636
   ldap suffix = dc=sorral,dc=duferco-coating,dc=com
   ldap user suffix = ou=People
   ldap group suffix = ou=Group
   ldap passwd sync = true

# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable its WINS Server
   wins support = yes

# WINS Server - Tells the NMBD components of Samba to be a WINS Client
# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
#  wins server = 172.16.0.3

# This will prevent nmbd to search for NetBIOS names through DNS.
   dns proxy = no

# What naming service and in what order should we use to resolve host names
# to IP addresses
;   name resolve order = lmhosts host wins bcast

# Needed by NT PDC support
add machine script = /usr/sbin/useradd -d /dev/null -g nogroup -c 'Machine account' -s 
/bin/false %u

#Logon settings
logon home = \\%L\%U
logon drive = P:
logon path = \\%L\Profiles\%U

 Debugging/Accounting 

# This tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba/log.%m
   log level = 200

# Put a capping on the size of the log files (in Kb).
   max log size = 5000

# If you want Samba to only log through syslog then set t

Re: [Samba] ldapsam_compat & net rpc user issue (maybe BUG?)

2003-10-10 Thread Fabien Chevalier
Le Friday 10 October 2003 14:59, Andrew Bartlett a écrit :
> On Fri, 2003-10-10 at 22:35, Fabien Chevalier wrote:
> > > I'm wondering if it has to do with the 'default' ACB
> > > value. Try the following (untested) patches.
> >
> > I've downloaded the vanilla samba 3.0.0 source, compiled...
> > and i had the same odd behavior than my previous (slightly)
> > patched Debian Samba 3.
> >
> > I've applied your patch and now it works! :-)
>
> I've applied it to CVS, because as you noticed this broke
> Samba 2.2 compatibility.

Ok.

How many CVS branches to you have?
Does it mean it will be part of 3.0.1?

Again, Thanks for your *very efficient* support!

Regards,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ldapsam_compat & net rpc user issue (maybe BUG?)

2003-10-10 Thread Fabien Chevalier

> I'm wondering if it has to do with the 'default' ACB value. 
> Try the following (untested) patches.

I've downloaded the vanilla samba 3.0.0 source, compiled...
and i had the same odd behavior than my previous (slightly) patched
Debian Samba 3.

I've applied your patch and now it works! :-)

   dc-sorral-05:~# net rpc user -Utoto
   Password:
   toto3
   toto4
   root
   toto5
   toto
   zzAdmin
   fchevalier

Thanks a lot. :-))

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] ldapsam_compat & net rpc user issue (maybe BUG?)

2003-10-10 Thread Fabien Chevalier

Hi all,

I'm sorry i have to complain about something that seems to go wrong with samba.
I'm a long time satisfacted Samba 2 user and i have to switch to 3.0.
I'm using samba 3.0.0 on a test Debian machine with pre-built packages from Debian.
It comes with openldap 2.1.22

I've tested Samba 3.0 as a PDC for WinXP machines...
and it works great! :-)

But i am facing an issue i can't solve alone, despite hours of readings :-(.

I have to use ldapsam_compat on my system to be able to use Directory Administrator.
The following users are created on ldap: toto, zzAdmin, fchevalier
I also use tdbsam with the following users : toto3, toto4, toto5; root.

My setup seems to work:
  -I can connect to home shares of my ldap & tdb users. The authentification goes 
right.
  -But when i run net rpc user, i get the following:

dc-sorral-05:~# net rpc user -Utoto
Password:
toto3
toto4
root
toto5

  I got authenticated trough my ldap 'toto' user but it is not in the list !!!.
  My ldap users are not listed!
  With debug level 2 I got in my logs:

  2003/10/09 18:00:52, 2] lib/smbldap.c:smbldap_search_suffix(1066)
  smbldap_search_suffix: searching for:[(&(uid=*)(objectclass=sambaAccount))]
[2003/10/09 18:00:52, 2] passdb/pdb_ldap.c:ldapsam_setsampwent(948)
  ldapsam_setsampwent: 3 entries in the base!
[2003/10/09 18:00:52, 2] passdb/pdb_ldap.c:init_sam_from_ldap(460)
  init_sam_from_ldap: Entry found for user: toto
[2003/10/09 18:00:52, 2] passdb/pdb_ldap.c:init_sam_from_ldap(460)
  init_sam_from_ldap: Entry found for user: zzAdmin
[2003/10/09 18:00:52, 2] passdb/pdb_ldap.c:init_sam_from_ldap(460)
  init_sam_from_ldap: Entry found for user: fchevalier

So it seems samba is able to retrieve them from LDAP.

Has anybody got this same trouble?
Have i missed something in the doc (RTFM, RTFM...)?

Cheers,

Fabien Chevalier

PS - Here is my smb.conf

=== Global Settings ===

[global]

  unix charset = ISO8859-1
  nt acl support = yes

## Browsing/Identification ###

   workgroup = DC-SORRAL
   netbios name = STR-DON-01
   domain master = yes
   domain logons = yes

# server string is the equivalent of the NT Description field
   server string = Serveur de Fichiers micro-informatique Sorral

# LDAP support
   ldap admin dn = cn=admin,dc=sorral,dc=duferco-coating,dc=com
   ldap ssl = off
   ldap suffix = dc=sorral,dc=duferco-coating,dc=com
   ldap user suffix = ou=People
   ldap group suffix = ou=Group
   ldap passwd sync = true

# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable its WINS Server
   wins support = yes

# This will prevent nmbd to search for NetBIOS names through DNS.
   dns proxy = no

# What naming service and in what order should we use to resolve host names
# to IP addresses
;   name resolve order = lmhosts host wins bcast

# Needed by NT PDC support
add machine script = /usr/sbin/useradd -d /dev/null -g nogroup -c 'Machine account' -s 
/bin/false %u

#Logon settings
logon home = \\%L\%U
logon drive = P:
logon path = \\%L\Profiles\%U

 Debugging/Accounting 

# This tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba/log.%m
   log level = 3

# Put a capping on the size of the log files (in Kb).
   max log size = 5000

# If you want Samba to only log through syslog then set the following
# parameter to 'yes'.
;   syslog only = no

# We want Samba to log a minimum amount of information to syslog. Everything
# should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log
# through syslog you should set the following parameter to something higher.
   syslog = 0

# Do something sensible when Samba crashes: mail the admin a backtrace
   panic action = /usr/share/samba/panic-action %d


   security = user
   encrypt passwords = true

   passdb backend = tdbsam ldapsam_compat:ldap://localhost
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
  domain master = auto

[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   create mask = 0700
   directory mask = 0700
   root preexec = mkdir /home/%u; chown %u /home/%u; chmod 700 /home/%u;



[netlogon]
   comment = Network Logon Service
   path = /var/lib/samba/netlogon
   guest ok = yes
   writable = no
   share modes = no

[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers
   browseable = yes
   read only = yes
   guest ok = no
[Profiles]
path = /users/profiles
nt acl support =  yes
#   profile acls = Yes
browsable = no
writable = yes
directory mask = 700
create mask = 700

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] samba server list

2003-08-20 Thread Fabien . LIOU
Hi,


For information,
I found a command in samba suite called "findsmb".
I think it's quite usable with some filters.

 

BR


Fabien



-Message d'origine-
De: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED]
Date: mardi 19 août 2003 15:23
À: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Objet: Re: [Samba] samba server list


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 19 Aug 2003 [EMAIL PROTECTED] wrote:

> Hi,
> 
> Is there a command or a tool usable to scan and establish a list of samba
> servers through different subnets ?
> I would like to propagate datas to them automatically without managing a
> list of sambva servers.

There's lots of scanners that search for samba (but ther're normally not 
used for good) :-)





cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
--John Cusack - "Grosse Point Blank" (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE/QiSvIR7qMdg1EfYRAgL+AKCMguLtnatp7LBFFwAxTgB+PtYy5QCgimBN
H7EEnAN0oCC0CnOcRFHOUKs=
=c+VD
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba server list

2003-08-19 Thread Fabien . LIOU
Hi,

Is there a command or a tool usable to scan and establish a list of samba
servers through different subnets ?
I would like to propagate datas to them automatically without managing a
list of sambva servers.

thanks

 

Fabien 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] centralize usermap

2003-07-29 Thread Fabien . LIOU
Hello,


We have several samba servers with different versions running on Solaris8
servers and Linux machines.
NB: We have two NIS domains (if necessary we can merge them).

We would like to manage (add, remove, change) a single centralized usermap
file.

What is the best way to do this (by script, crontab, NIS map, etc...) ?
Have you a example ?


Also do you know a tool that can test the syntax of an usermap file ? 


thanks

Fabien 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] SAMBA - Problen with several users

2003-06-03 Thread Fabien Daumen
Hi,
  
I want to have two connections on the same server with my WXP Pro
workstations, with two different users.
I have declared user1, path1 and user2, path2 in smb.conf file.
With the first login, I can have the connection, but for the second one, the
connection is refused.
If I change users2 by users1, also I can have a connection on the two paths.
 
The more interesting is that if I keep only user2 path2, in smb.conf file,
no connection is possible.
 
 
Version: RH8, samba 2.2.5.
 
Somebody, can help me? It’s normal?
 
Regards.
 
 
 
Sincères Salutations.

  Fabien DAUMEN - Chef de projet.
  NEOPOST – NBG
   MIN 26, Halle 4   -   84953 CAVAILLON CEDEX  -  FRANCE
   Tél: (33) 4.90.76.08.08   -   Fax: (33) 4.90.06.18.86
  http://www.neopost.com/ls

This e-mail and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this e-mail in error please notify the system manager
 
 


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Joining Samba 3.0 to a "pure" Active Directory

2003-02-20 Thread fabien assuid
On your active directory initialize your password 
vz6tml 
 --- Alexander Skwar <[EMAIL PROTECTED]>
a écrit : > Alexander Skwar schrieb:
> 
> > In a previous mail, I've been asked if I already
> have Kerberos setup and
> > tested.  I don't.  How do I test if Kerberos is
> working correctly for me?
> 
> In an off-list mail, someone told me to try
> 
> | For test your kerberos
> |
> | The command
> |
> | Kinit [EMAIL PROTECTED]
> | And your password username
> 
> I'm getting this error:
> 
> [root@ugkbase samba]# kinit
> [EMAIL PROTECTED]
> kinit(v5): Cannot find KDC for requested realm while
> getting initial
> credentials
> 
> In the ads documentation file of samba at
> http://tinyurl.com/64gv I read
> that I need to configure kerberos first:
> 
> | The minimal configuration for krb5.conf is:
> |
> | [realms]
> | YOUR.KERBEROS.REALM = {
> |  kdc = your.kerberos.server
> | }
> 
> That's what I did not yet do.
> 
> Suppose I've got some Windows clients which are
> already in the AD -
> using these machines, can I figure out the name of
> the KDC?  If so, how?
> 
> Thanks again,
> 
> 
> Alexander Skwar
> -- 
> /* When we have more time, we can teach the penguin
> to say
>  * "By your command" or "Activating turbo boost,
> Michael".
>  */
>   2.2.16 /usr/src/linux/arch/sparc/prom/sun4prom.c
> 
> -- 
> To unsubscribe from this list go to the following
> URL and read the
> instructions: 
http://lists.samba.org/mailman/listinfo/samba 

___
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] SAMBA 3.0 with active directory

2003-02-14 Thread fabien assuid
i have installed samba 3.0 with kerberos and openldap
library , in my smb.conf i put 
realm=DOMAIN.COM
security=ads
..



but when i try to authenticate with acitve directoey
server i have in my log samba

NT status wrong password


excuse me for my english

and thank you

___
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] PDC.

2003-01-15 Thread Fabien Combernous
Finaly i added an X juste after U in smbpasswd file and now root can 
access my domaine. But all other users can't. I don't know what to 
change to get good permission.
root:0:passwd_type1:passwd_type2:[UX ]:LCT-number:root
   ^
  i added this X

Don Zajic wrote:
Fabien,

When you are asked for a user name and password when adding a
workstation to the domain controller, do not use "Administrator",
instead use "root" (no quotes in your response) as the user name and the
appropriate password for root.

This should help.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
On Behalf Of Fabien Combernous
Sent: Wednesday, January 15, 2003 4:59 AM
To: [EMAIL PROTECTED]
Subject: [Samba] PDC.


Lo,

I'm wanting to set up a samba pdc with win2k stations.

Actually when a when to add a station in the domaine i have configurer 
on my samba server i have this type of answer in client side :" 
immpossible to enter in this domaine becuase user or passwd is not
correct".

So but i have in smbd log :
this in first :
[2003/01/14 19:09:36, 4] smbd/password.c:smb_password_ok(467)
   smb_password_ok: Checking SMB password for user administrateur
[2003/01/14 19:09:36, 5] smbd/password.c:smb_password_ok(481)
   smb_password_ok: challenge received
[2003/01/14 19:09:36, 4] smbd/password.c:smb_password_ok(491)
   smb_password_ok: Checking NT MD4 password
[2003/01/14 19:09:36, 4] smbd/password.c:smb_password_ok(493)
   smb_password_ok: NT MD4 password check succeeded

this is second :
[2003/01/14 19:21:14, 2] passdb/pdb_smbpasswd.c:startsmbfilepwent(170)
   startsmbfilepwent_internal: unable to open file /etc/samba/smbpasswd.

Error was Permission denied
[2003/01/14 19:21:14, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416)
   unable to open passdb database.
[2003/01/14 19:21:14, 5] rpc_parse/parse_prs.c:prs_debug(60)
   00 samr_io_r_set_userinfo
[2003/01/14 19:21:14, 5] rpc_parse/parse_prs.c:prs_ntstatus(588)
    status: NT_STATUS_ACCESS_DENIED
[2003/01/14 19:21:14, 5] rpc_server/srv_pipe.c:api_rpcTNP(1218)
   api_rpcTNP: called api_samr_rpc successfully

My configuration file is :

[global]

workgroup = EPROCESS
server string = e'process Samba Server

invalid users = root
log file = /var/log/samba/log.%m
max log size = 1000
syslog = 0
smb passwd file = /etc/samba/smbpasswd

security = user
encrypt passwords = true
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

domain logons = yes
local master = yes
os level = 99
domain master = yes
preferred master = yes

wins support = yes
dns proxy = yes


Any idea ? What is wrong ?
Any help will be appreciated :o)

Thank's Fabien.



--

Fabien COMBERNOUS - IT Engineer
eProcess - Parc Club du Millénaire Batiment n° 6
1025 rue Henri Becquerel - 34000 Montpellier FRANCE
http://www.eprocess.tv - +33 (0)4 67 13 84 50

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] PDC.

2003-01-15 Thread Fabien Combernous
When i'm with root user client side say that my network passwd is wrong. 
My pdc server side say NT_STATUS_WRONG_PASSWORD.

Buy i have verified my passwd i am sure of my passwd. I have put same 
passwd on system and samba. Same message is given.

Any idea ?

Don Zajic wrote:
Fabien,

When you are asked for a user name and password when adding a
workstation to the domain controller, do not use "Administrator",
instead use "root" (no quotes in your response) as the user name and the
appropriate password for root.

This should help.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
On Behalf Of Fabien Combernous
Sent: Wednesday, January 15, 2003 4:59 AM
To: [EMAIL PROTECTED]
Subject: [Samba] PDC.


Lo,

I'm wanting to set up a samba pdc with win2k stations.

Actually when a when to add a station in the domaine i have configurer 
on my samba server i have this type of answer in client side :" 
immpossible to enter in this domaine becuase user or passwd is not
correct".

So but i have in smbd log :
this in first :
[2003/01/14 19:09:36, 4] smbd/password.c:smb_password_ok(467)
   smb_password_ok: Checking SMB password for user administrateur
[2003/01/14 19:09:36, 5] smbd/password.c:smb_password_ok(481)
   smb_password_ok: challenge received
[2003/01/14 19:09:36, 4] smbd/password.c:smb_password_ok(491)
   smb_password_ok: Checking NT MD4 password
[2003/01/14 19:09:36, 4] smbd/password.c:smb_password_ok(493)
   smb_password_ok: NT MD4 password check succeeded

this is second :
[2003/01/14 19:21:14, 2] passdb/pdb_smbpasswd.c:startsmbfilepwent(170)
   startsmbfilepwent_internal: unable to open file /etc/samba/smbpasswd.

Error was Permission denied
[2003/01/14 19:21:14, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416)
   unable to open passdb database.
[2003/01/14 19:21:14, 5] rpc_parse/parse_prs.c:prs_debug(60)
   00 samr_io_r_set_userinfo
[2003/01/14 19:21:14, 5] rpc_parse/parse_prs.c:prs_ntstatus(588)
    status: NT_STATUS_ACCESS_DENIED
[2003/01/14 19:21:14, 5] rpc_server/srv_pipe.c:api_rpcTNP(1218)
   api_rpcTNP: called api_samr_rpc successfully

My configuration file is :

[global]

workgroup = EPROCESS
server string = e'process Samba Server

invalid users = root
log file = /var/log/samba/log.%m
max log size = 1000
syslog = 0
smb passwd file = /etc/samba/smbpasswd

security = user
encrypt passwords = true
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

domain logons = yes
local master = yes
os level = 99
domain master = yes
preferred master = yes

wins support = yes
dns proxy = yes


Any idea ? What is wrong ?
Any help will be appreciated :o)

Thank's Fabien.



--

Fabien COMBERNOUS - IT Engineer
eProcess - Parc Club du Millénaire Batiment n° 6
1025 rue Henri Becquerel - 34000 Montpellier FRANCE
http://www.eprocess.tv - +33 (0)4 67 13 84 50

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] PDC.

2003-01-15 Thread Fabien Combernous
I have to say that my client have an entry in smbpasswd file made with 
-m option of smbpasswd command. And all this computer is known by my DNS 
with Netbios name.



--

Fabien COMBERNOUS - IT Engineer
eProcess - Parc Club du Millénaire Batiment n° 6
1025 rue Henri Becquerel - 34000 Montpellier FRANCE
http://www.eprocess.tv - +33 (0)4 67 13 84 50

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] PDC.

2003-01-15 Thread Fabien Combernous
Lo,

I'm wanting to set up a samba pdc with win2k stations.

Actually when a when to add a station in the domaine i have configurer 
on my samba server i have this type of answer in client side :" 
immpossible to enter in this domaine becuase user or passwd is not correct".

So but i have in smbd log :
this in first :
[2003/01/14 19:09:36, 4] smbd/password.c:smb_password_ok(467)
  smb_password_ok: Checking SMB password for user administrateur
[2003/01/14 19:09:36, 5] smbd/password.c:smb_password_ok(481)
  smb_password_ok: challenge received
[2003/01/14 19:09:36, 4] smbd/password.c:smb_password_ok(491)
  smb_password_ok: Checking NT MD4 password
[2003/01/14 19:09:36, 4] smbd/password.c:smb_password_ok(493)
  smb_password_ok: NT MD4 password check succeeded

this is second :
[2003/01/14 19:21:14, 2] passdb/pdb_smbpasswd.c:startsmbfilepwent(170)
  startsmbfilepwent_internal: unable to open file /etc/samba/smbpasswd. 
Error was Permission denied
[2003/01/14 19:21:14, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416)
  unable to open passdb database.
[2003/01/14 19:21:14, 5] rpc_parse/parse_prs.c:prs_debug(60)
  00 samr_io_r_set_userinfo
[2003/01/14 19:21:14, 5] rpc_parse/parse_prs.c:prs_ntstatus(588)
   status: NT_STATUS_ACCESS_DENIED
[2003/01/14 19:21:14, 5] rpc_server/srv_pipe.c:api_rpcTNP(1218)
  api_rpcTNP: called api_samr_rpc successfully

My configuration file is :

[global]

   workgroup = EPROCESS
   server string = e'process Samba Server

   invalid users = root
   log file = /var/log/samba/log.%m
   max log size = 1000
   syslog = 0
   smb passwd file = /etc/samba/smbpasswd

   security = user
   encrypt passwords = true
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

   domain logons = yes
   local master = yes
   os level = 99
   domain master = yes
   preferred master = yes

   wins support = yes
   dns proxy = yes


Any idea ? What is wrong ?
Any help will be appreciated :o)

Thank's Fabien.


--

Fabien COMBERNOUS - IT Engineer
eProcess - Parc Club du Millénaire Batiment n° 6
1025 rue Henri Becquerel - 34000 Montpellier FRANCE
http://www.eprocess.tv - +33 (0)4 67 13 84 50

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[samba] calculate memory and cpu use

2002-04-26 Thread Fabien . LIOU



Hello,

How can i measure the consumption of samba's processes (backgroung processes
and user's connections) ?
I need to evaluate this to specify cpu and ram values

Thanks
Fabien LIOU
DSI/ISI
Thales Communications




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[samba] calculate memory and cpu use

2002-04-26 Thread Fabien . LIOU

Hello,

How can i measure the consumption of samba's processes (backgroung processes
and user's connections) ?
I need to evaluate this to specify cpu and ram values

Thanks


Fabien LIOU
DSI/ISI
Thales Communications






LIOU Fabien - CLB.vcf
Description: Binary data


[samba] calculate memory and cpu use

2002-04-26 Thread Fabien . LIOU


Hello,

How can i measure the consumption of samba's processes (backgroung processes
and user's connections) ?
I need to evaluate this to specify cpu and ram values

Thanks

Fabien LIOU
DSI/ISI
Thales Communications







LIOU Fabien - CLB.vcf
Description: Binary data