Re: [Samba] samba and fail2ban

2011-03-29 Thread Hajo Locke




Hello,


to stop bruteforce logins to samba i want to create a fail2ban-rule which 
blocks IPs with to many login-errors.
unfortunately used logins and IPs in samba log are scattered to multiple 
lines so  i cant find a relation.

i use samba for wan and cant reduce to internal IPs.
What ist best in my case to get better logs or stop abusing?


nobody has an idea? is there no possibility to get logs which show which ip 
is doing too much false logins?


Thanks,
Hajo

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba and fail2ban

2011-03-29 Thread Hajo Locke

Hello,

Maybe have a script running in the background, parsing samba log file to 
create
and alternative log file with all related info on the same line for 
fail2ban...?


but problem will still be the same. How to find lines which belonging 
together?
may be in log we have connect from 3 IPs a, b, c and following 1 successful 
login and 2 false. which ip belongs to the false logins? Every other server 
i know sends this important messages in one line.


Thanks,
Hajo 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] samba and fail2ban

2011-03-23 Thread Hajo Locke

Hello,

to stop bruteforce logins to samba i want to create a fail2ban-rule which 
blocks IPs with to many login-errors.
unfortunately used logins and IPs in samba log are scattered to multiple 
lines so  i cant find a relation.

i use samba for wan and cant reduce to internal IPs.
What ist best in my case to get better logs or stop abusing?

Thanks,
Hajo 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba not knowing new users

2011-01-19 Thread Hajo Locke

Hello,


Is this server a PDC or standalone server?
this is a standalone server Ubuntu 10.04 lts, simple samba-setup for 
inetusers.



What is the backend for samba accounts?

passdb backend = smbpasswd

Do you create unix accounts first as well, or are you using winbind/idmap 
backend to allocate unix id's for the samba accounts.

Do accounts show up with wbinfo -u ?


we create the unix-accounts and after this we add the user to samba by 
smbpasswd -sa

i can see all users in the smbpasswd file.
hmm, i installed winwind, we dont use it but wbinfo -u shows all users incl. 
the users which wont work (NT_STATUS_NO_SUCH_USER)


this is a mircale to me, only restart helps to get users to work.

Thanks,
Hajo 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba not knowing new users

2011-01-19 Thread Hajo Locke


When you say restart do you mean the server or samba. 

i mean only samba, server remains untouched.

Thanks,
Hajo

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba not knowing new users

2011-01-18 Thread Hajo Locke



What do you mean users are in smb.conf?

ok, this was wrong. i meant there are the correct sections for my users.

How are you creating the users?   Can you see the user or users with 
pdbedit?
i can see the users in my smbpasswd, but if i use pdbedit -L there are only 
a few users listed.
i have to ask my buddy for errors when creating the users because this is 
done by script.


after restarting service smbd my missing users are immediately able to log 
in but with pdbedit -L they are still not shown.
so iam in doubt if there is an error when creating the user, but i will try 
to get further information.


Thanks,
Hajo 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba not knowing new users

2011-01-18 Thread Hajo Locke


so iam in doubt if there is an error when creating the user, but i will 
try

to get further information.

so, getting back with this information:
script is adding sections to smbd.conf, creates systemuser by useradd and 
finally it is creating the samba-user by smbpasswd -sa

my buddy tells there is no error etc.
what could be the problem that some new users only work after restarting 
smbd service? it happens not every time...


Thanks,
Hajo

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] samba not knowing new users

2011-01-17 Thread Hajo Locke

Hello,


sometime i have the problem that samba ist not knowing my new created users.
i can see the users in my smb.conf but login fails with: 
NT_STATUS_NO_SUCH_USER
i know samba is reading conf for ervery 60 seconds but also a manual reload 
is not working.
only thing which helps is restart of smdb service. after restart my users 
work immediately.


what could be the problem? i have no idea.

OS is Ubuntu 10.04 LTS and samba 3.4.7

Thanks,
Hajo

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba