[Samba] Samba 3.0.3pre1 - Linux 2.6.4 Freeze
I had a smbd process which locked up, totally frozen. Would not even respond to SIGTERM. Had to SIGKILL it. It was preventing users from accessing a file (it had a lock on the file). The process seems to have been stuck in the ldapsam code, and might be a fault of libldap, but I don't know enough about it to make that assumption. The problem started because our LDAP server was restarted. I got a full backtrace from the frozen smbd process, and it is attached. The only way to fix the lock was to kill -9 the frozen process and restart all of Samba. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. #0 0x4017a7ee in select () from /lib/libc.so.6 No symbol table info available. #1 0x40047854 in ldap_int_hostname () from /usr/lib/libldap.so.2 No symbol table info available. #2 0x40032606 in ldap_connect_to_host () from /usr/lib/libldap.so.2 No symbol table info available. #3 0x40022033 in ldap_int_open_connection () from /usr/lib/libldap.so.2 No symbol table info available. #4 0x40030968 in ldap_new_connection () from /usr/lib/libldap.so.2 ---Type return to continue, or q return to quit--- No symbol table info available. #5 0x40021bf9 in ldap_open_defconn () from /usr/lib/libldap.so.2 No symbol table info available. #6 0x40030597 in ldap_send_initial_request () from /usr/lib/libldap.so.2 No symbol table info available. #7 0x40028610 in ldap_sasl_bind () from /usr/lib/libldap.so.2 No symbol table info available. #8 0x400286b9 in ldap_sasl_bind_s () from /usr/lib/libldap.so.2 No symbol table info available. #9 0x40028d8b in ldap_simple_bind_s () from /usr/lib/libldap.so.2 No symbol table info available. #10 0x082564d2 in smbldap_connect_system (ldap_state=0x83d87a0, ldap_struct=0x83de590) at lib/smbldap.c:776 rc = 0 ldap_dn = 0x83e92b8 cn=samba,ou=Accounts,dc=feedbackplusinc,dc=com ldap_secret = 0x884270e0 Address 0x884270e0 out of bounds #11 0x082568b6 in smbldap_open (ldap_state=0x83d87a0) at lib/smbldap.c:836 rc = 0 #12 0x08256b59 in smbldap_retry_open (ldap_state=0x83d87a0, attempts=0xbfffe264) at lib/smbldap.c:895 rc = 81 #13 0x08256ea2 in smbldap_search (ldap_state=0x83d87a0, base=0x83ec5b0 dc=feedbackplusinc,dc=com, scope=2, filter=0xbfffe3dc ((sambaSID=S-1-5-21-663510196-2259326107-1491937660-501)(objectclass=sambaSamAccount)), attrs=0x83ecb98, attrsonly=0, res=0xbfffe944) at lib/smbldap.c:950 rc = 81 attempts = 2 utf8_filter = 0x83fc6a0 ((sambaSID=S-1-5-21-663510196-2259326107-1491937660-501)(objectclass=sambaSamAccount)) #14 0x08257747 in smbldap_search_suffix (ldap_state=0x83d87a0, filter=0xbfffe3dc ((sambaSID=S-1-5-21-663510196-2259326107-1491937660-501)(objectclass=sambaSamAccount)), search_attr=0x83ecb98, result=0xbfffe944) at lib/smbldap.c:1106 scope = 2 rc = -1073749028 #15 0x081be3c3 in ldapsam_search_suffix_by_sid (ldap_state=0x83d8730, sid=0xbfffea00, result=0xbfffe944, attr=0x83ecb98) at passdb/pdb_ldap.c:245 filter = ((sambaSID=S-1-5-21-663510196-2259326107-1491937660-501)(objectclass=sambaSamAccount))[EMAIL PROTECTED] [EMAIL PROTECTED], '\0' repeats 40 times, \u\aA\b, '\u' repeats 12 times, \020\u\u\u\0\0\0\0`\u,\b\002\0\0\0\003\0\0\0\230\u\u\u|\u\u\u'\0\0\0\u\u\u\u\0\0\0\0\001\0\0\0\u\u\u\u\u\u\u\u\0\0\0\0 \0\0\0\u\aA\b... rc = -235802127 sid_string = S-1-5-21-663510196-2259326107-1491937660-501\0, '\u' repeats 211 times#16 0x081c0b4c in ldapsam_get_ldap_user_by_sid (ldap_state=0x83d8730, sid=0xbfffea00, result=0xbfffe944) at passdb/pdb_ldap.c:1098 rc = -1 attr_list = (char **) 0x83ecb98 rid = 1074913750 #17 0x081c0c3c in ldapsam_getsampwsid (my_methods=0x83bd960, user=0x83ff8a8, sid=0xbfffea00) at passdb/pdb_ldap.c:1134 ldap_state = (struct ldapsam_privates *) 0x83d8730 result = (LDAPMessage *) 0x0 entry = (LDAPMessage *) 0x0 count = -1073747620 rc = 1075600400 signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 3.0.3pre1 byte range lock leak?
I'm having a problem involving Outlook and .pst files and a lock that is getting stuck I believe. Once Outlook crashes in the fashion it does, it is unable to reopen the file, claiming it is already in use. Explorer also does not let me access the file. Rebooting the workstation does not fix it. smbstatus does not show the lock, however hwen I show byte range locks, there is one, from a PID that doesn't exist. I assume this is the problem lock. The smbd that owned the lock died when the client rebooted/reconnected. I am unable to fix this problem. I think that samba at least needs a smblocks utility to force locks to be released, and manipulate the lock db (is there such a thing) in order to fix solutions like these. When it happens a user on the network is unable to access their email until samba is restarted, which cannot be done during normal working hours... it's becoming a big problem. (does it already have such a utility?) I am using 3.0.3pre1, Debian Woody. Linux 2.4.22. Thanks. Jerry Haltom signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Trying to put a MS SQL 7.0 database on a samba share
This seems like a VERY bad thing to do anyways. Usually putting transactional databases of any kind... like bdb database, or any of hte like, on a shared drive is a recipe for disaster. I'd guess SQL falls into this same category, but don't know it. Anyways this would be super slow? why put a db on a share? On Wed, 2004-03-03 at 04:44, Warren Green wrote: Hi, I have a linux box set up with Samba 3.0 and have configured my shared drives. What I am trying to do is store a MS SQL data base on my Samba share. I can see the drive from my SQL machine but when I try create the database there I get errors like inconsistent file names etc. Fist can this be done and if so how? Thanx Warren -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Signal 11 in smbd 3.0.2rc2 on printer operation!
Follow up on this. I have SAMBA_3_0 from CVS, checked out about 4 days
ago (last time we discussed this). I have been able to cause hte
problem, or another similar problem, im not sure, to be reproduced.
What I was doing was adding a new printer, by editing smb.conf, adding
the new printer entry, and then SIGHUPping all smbd processes. After
wards, the new printer began working, but after printing the first page,
all printers immediatly ceased working. The following messages in no
particular order are now appearing in my logs:
tdb(/opt/samba/var/locks/printing/pdfwriter.tdb): tdb_lock failed on
list 4128 ltype=0 (Bad file descriptor)
and
[2004/02/10 13:27:44, 0] tdb/tdbutil.c:tdb_log(724)
tdb(/opt/samba/var/locks/printing/hpljet8100n.tdb): tdb_oob len
842018636 beyond eof at 40960
Perhaps the action of adding a new printer and SIGHUPping smbd is
causing these problems? I will once again attempt to fix this once
people leave the office by clearing all the .tdb files and restarting
samba.
=)
On Thu, 2004-02-05 at 11:29, Jerry Haltom wrote:
Nope. In fact, I do suspect bad ram. I don't know why it would be
consistant though. I would think that bad ram would effect more than
just samba's printing. And you'd think reacreating the process
(different location in memory) would get around it. The problem is
pretty consistant, it's happening for every computer in the office now.
On Thu, 2004-02-05 at 10:08, Gerald (Jerry) Carter wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jerry Haltom wrote:
|
| Could a corrupt .tdb of any sort be causing this? It
| is touching a variable named pdb (maybe printer db?),
| but I'm not sure what that is.
It could I guess, but I agree with Jeremy. That's a
strange place to crash. How many machines did you
see this on? If only one, have you ruled out bad RAM ?
On Wed, 2004-02-04 at 19:08, Jeremy Allison wrote:
| #7 0x0820b54b in print_queue_status (snum=1, ppqueue=0xb4d0,
|status=0xb4d4) at printing/printing.c:2283
| keystr = STATUS/hpljet8100n\0\0\001\0\0\0 öÿ¿ [EMAIL PROTECTED]\bò\006
[EMAIL
PROTECTED]:´\0\0\0\0\0\0\0\0Döÿ¿,ôÿ¿Q0\026\b\004\0\0\0Döÿ¿\024\0\0\0\0\0\0\0\001\0\0\0\0\0\0\0\004\0\0\0\0\0\0\0\002\0\0\08U=\bLôÿ¿\0361\026\b\220\026=\bDöÿ¿xôÿ¿\004\0\0\0\0\0\0\0\001\0\0\0|ôÿ¿ð\214!\b\001\0\0\0Döÿ¿xôÿ¿,L\023\b\0\0\0\0\224ýÿ¿\214ôÿ¿Kð\017\b...
| data = {dptr = 0x0, dsize = 264}
| key = {dptr = 0xb3ac STATUS/hpljet8100n, dsize = 18}
| printername = 0x82f6c40 hpljet8100n
| pdb = (struct tdb_print_db *) 0x83d4ac8
| count = 0
|
| This is a strange crash location. It appears to be in the call here :
|
|if (!get_stored_queue_info(pdb, snum, count, ppqueue)) {
|release_print_db(pdb);
|return 0;
|
| I don't immediately see any bad pointers etc. in this call...
cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFAImqUIR7qMdg1EfYRAikcAJ43erXruQhRuLE7arSDsDUROwnVuQCgyLwU
8T0AGaPERFSb0WPYVczJEKE=
=G3Fk
-END PGP SIGNATURE-
--
Jerry Haltom [EMAIL PROTECTED]
Feedback Plus, Inc.
signature.asc
Description: This is a digitally signed message part
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Signal 11 in smbd 3.0.2rc2 on printer operation!
Nope. In fact, I do suspect bad ram. I don't know why it would be
consistant though. I would think that bad ram would effect more than
just samba's printing. And you'd think reacreating the process
(different location in memory) would get around it. The problem is
pretty consistant, it's happening for every computer in the office now.
On Thu, 2004-02-05 at 10:08, Gerald (Jerry) Carter wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jerry Haltom wrote:
|
| Could a corrupt .tdb of any sort be causing this? It
| is touching a variable named pdb (maybe printer db?),
| but I'm not sure what that is.
It could I guess, but I agree with Jeremy. That's a
strange place to crash. How many machines did you
see this on? If only one, have you ruled out bad RAM ?
On Wed, 2004-02-04 at 19:08, Jeremy Allison wrote:
| #7 0x0820b54b in print_queue_status (snum=1, ppqueue=0xb4d0,
|status=0xb4d4) at printing/printing.c:2283
| keystr = STATUS/hpljet8100n\0\0\001\0\0\0 öÿ¿ [EMAIL PROTECTED]\bò\006
[EMAIL
PROTECTED]:´\0\0\0\0\0\0\0\0Döÿ¿,ôÿ¿Q0\026\b\004\0\0\0Döÿ¿\024\0\0\0\0\0\0\0\001\0\0\0\0\0\0\0\004\0\0\0\0\0\0\0\002\0\0\08U=\bLôÿ¿\0361\026\b\220\026=\bDöÿ¿xôÿ¿\004\0\0\0\0\0\0\0\001\0\0\0|ôÿ¿ð\214!\b\001\0\0\0Döÿ¿xôÿ¿,L\023\b\0\0\0\0\224ýÿ¿\214ôÿ¿Kð\017\b...
| data = {dptr = 0x0, dsize = 264}
| key = {dptr = 0xb3ac STATUS/hpljet8100n, dsize = 18}
| printername = 0x82f6c40 hpljet8100n
| pdb = (struct tdb_print_db *) 0x83d4ac8
| count = 0
|
| This is a strange crash location. It appears to be in the call here :
|
|if (!get_stored_queue_info(pdb, snum, count, ppqueue)) {
|release_print_db(pdb);
|return 0;
|
| I don't immediately see any bad pointers etc. in this call...
cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFAImqUIR7qMdg1EfYRAikcAJ43erXruQhRuLE7arSDsDUROwnVuQCgyLwU
8T0AGaPERFSb0WPYVczJEKE=
=G3Fk
-END PGP SIGNATURE-
--
Jerry Haltom [EMAIL PROTECTED]
Feedback Plus, Inc.
signature.asc
Description: This is a digitally signed message part
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Signal 11 in smbd 3.0.2rc2 on printer operation!
in write_to_pipe (p=0x83cc2b0, data=0x83ef2b8 \005, n=1092)
at rpc_server/srv_pipe_hnd.c:861
No locals.
#17 0x0808e674 in api_fd_reply (conn=0x83ccf88, vuid=100,
outbuf=0x404a4008 , setup=0x83cf230, data=0x83ef2b8 \005, params=0x0,
suwcnt=2, tdscnt=1092, tpscnt=0, mdrcnt=3208, mprcnt=0) at smbd/ipc.c:306
vuid = 100
reply = 0
p = (smb_np_struct *) 0x83cc2b0
pnum = 30334
subcommand = 38
#18 0x0808e93a in named_pipe (conn=0x83ccf88, vuid=100, outbuf=0x404a4008 ,
name=0xba52 , setup=0x83cf230, data=0x83ef2b8 \005, params=0x0,
suwcnt=2, tdscnt=1092, tpscnt=0, msrcnt=0, mdrcnt=3208, mprcnt=0)
at smbd/ipc.c:350
vuid = 100
#19 0x0808f80b in reply_trans (conn=0x83ccf88, inbuf=0x40483008 ,
outbuf=0x404a4008 , size=1180, bufsize=131072) at smbd/ipc.c:558
name = \\PIPE\\, '\0' repeats 249 times
name_offset = 6
data = 0x83ef2b8 \005
params = 0x0
setup = (short unsigned int *) 0x83cf230
outsize = 0
vuid = 100
tpscnt = 0
tdscnt = 1092
mprcnt = 0
mdrcnt = 3208
msrcnt = 0
close_on_completion = 0
one_way = 0
pscnt = 0
psoff = 84
dscnt = 1092
dsoff = 84
suwcnt = 2
#20 0x080d5d1f in switch_message (type=37, inbuf=0x40483008 ,
outbuf=0x404a4008 , size=1180, bufsize=131072) at smbd/process.c:767
flags = 9
last_session_tag = 100
session_tag = 100
conn = (connection_struct *) 0x83ccf88
pid = 5839
outsize = 0
#21 0x080d5def in construct_reply (inbuf=0x40483008 , outbuf=0x404a4008 ,
size=1180, bufsize=131072) at smbd/process.c:797
type = 37
outsize = 0
msg_type = 0
#22 0x080d618b in process_smb (inbuf=0x40483008 , outbuf=0x404a4008 )
at smbd/process.c:897
trans_num = 28
msg_type = 0
len = 1176
nread = 1180
#23 0x080d6f05 in smbd_process () at smbd/process.c:1328
deadtime = 604800
select_timeout = 6
num_echos = 0
last_timeout_processing_time = 1075937457
num_smbs = 28
total_buffer_size = 132161
#24 0x08256fd7 in main (argc=2, argv=0xbe04) at smbd/server.c:887
is_daemon = 1
interactive = 0
Fork = 1
log_stdout = 0
ports = 0x0
opt = -1
pc = 0x82f3f38
long_options = {{longName = 0x0, shortName = 0 '\0', argInfo = 4,
arg = 0x82dd25c, val = 0, descrip = 0x82d3ff3 Help options,
argDescrip = 0x0}, {longName = 0x82d4000 daemon, shortName = 68 'D',
argInfo = 7, arg = 0x82dd248, val = 1,
descrip = 0x82d4007 Become a daemon (default), argDescrip = 0x0}, {
longName = 0x82d4021 interactive, shortName = 105 'i', argInfo = 7,
arg = 0x82dd24c, val = 1,
descrip = 0x82d4040 Run interactive (not a daemon), argDescrip = 0x0}, {
longName = 0x82d405f foreground, shortName = 70 'F', argInfo = 7,
arg = 0x82dd250, val = 0,
descrip = 0x82d4080 Run daemon in foreground (for daemontools etc),
argDescrip = 0x0}, {longName = 0x82d40b1 log-stdout, shortName = 83 'S',
argInfo = 7, arg = 0x82dd254, val = 1,
descrip = 0x82d40bc Log to stdout, argDescrip = 0x0}, {
longName = 0x82d40ca build-options, shortName = 98 'b', argInfo = 0,
arg = 0x0, val = 98, descrip = 0x82d40d8 Print build options,
argDescrip = 0x0}, {longName = 0x82d40ec port, shortName = 112 'p',
argInfo = 1, arg = 0x82dd258, val = 0,
descrip = 0x82d40f1 Listen on the specified ports, argDescrip = 0x0}, {
longName = 0x0, shortName = 0 '\0', argInfo = 4, arg = 0x82dcce8, val = 0,
descrip = 0x82d410f Common samba options:, argDescrip = 0x0}, {
longName = 0x0, shortName = 0 '\0', argInfo = 0, arg = 0x0, val = 0,
descrip = 0x0, argDescrip = 0x0}}
--
Jerry Haltom [EMAIL PROTECTED]
Feedback Plus, Inc.
signature.asc
Description: This is a digitally signed message part
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Signal 11 in smbd 3.0.2rc2 on printer operation!
I don't know enough about what is going on to know if what I'm saying
makes any sense. :) But I'm working on it.
Could a corrupt .tdb of any sort be causing this? It is touching a
variable named pdb (maybe printer db?), but I'm not sure what that is.
Since I had the problem I have deleted all of my tbds and recreated
necessary data. However, I did it as part of a few troubleshooting
steps, and didn't check 100% to make sure my changes fixed it.
It appears to be fixed on the two systems I can access from home to test
from, however, our office has 25 more systems, which I can't get from
home to test with. I will follow up on this if the problem is resolved.
If somebody could confirm a corrupted tdb could be responsible for this,
I won't pursue it any further unless it resurfaces. Thanks!
On Wed, 2004-02-04 at 19:08, Jeremy Allison wrote:
On Wed, Feb 04, 2004 at 05:35:11PM -0600, Jerry Haltom wrote:
Our computers in our office ceased being able to print to a shared cups
printer today. Could not find the cause. Seems the smbd processes are
dying. Below is the stack trace produced by gdb bt full.
The Samba 'panic action' script, /usr/share/samba/panic-action,
was called for pid 5839 (/usr/opt/samba-3.0.2rc2/sbin/smbd).
0x40150a59 in wait4 () from /lib/libc.so.6
#0 0x40150a59 in wait4 () from /lib/libc.so.6
No symbol table info available.
#1 0x401c7e48 in __check_rhosts_file () from /lib/libc.so.6
No symbol table info available.
#2 0x400f57c5 in system () from /lib/libc.so.6
No symbol table info available.
#3 0x081e7625 in smb_panic (why=0x82af4fe internal error) at lib/util.c:1391
cmd = 0x83ec268 /usr/share/samba/panic-action 5839
result = 1074632376
backtrace_stack = {0x0, 0xbfffeee0, 0xbfffefd4, 0x81d174f, 0x82af3e2,
0x82e43e0, 0x0, 0xbfffef08, 0x400c9319, 0xb628, 0xbfffefd4, 0x81d1757,
0xb51c, 0x4e4ec24c, 0xb55c, 0x8299000, 0x0, 0x400fa582, 0x82f6c4b,
0x83d4ae3, 0xbfffef3c, 0x81dd474, 0x83d4ad8, 0x82f6c40, 0x0, 0x0, 0x0, 0x0,
0xb36c, 0x821a08b, 0x83d4ad8, 0x82f6c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
0x0, 0x0, 0xb598, 0x81d4704, 0x1c, 0x84038d4, 0x68, 0x0, 0x83d4c40, 0x0,
0xbfffefcc, 0x81eafe1, 0x400c9319, 0x401c7e48, 0xb0fc, 0x401c7e48,
0xb628, 0x0, 0xbd94, 0x4011e1d6, 0x401c7e48, 0x401c56a0, 0x0, 0x0,
0x8200b20, 0x400}
backtrace_size = 138426576
backtrace_strings = (char **) 0x1c
#4 0x081d1951 in fault_report (sig=11) at lib/fault.c:41
counter = 1
#5 0x081d19ba in sig_fault (sig=11) at lib/fault.c:61
No locals.
#6 0x400d96b8 in sigaction () from /lib/libc.so.6
No symbol table info available.
#7 0x0820b54b in print_queue_status (snum=1, ppqueue=0xb4d0,
status=0xb4d4) at printing/printing.c:2283
keystr = STATUS/hpljet8100n\0\0\001\0\0\0 öÿ¿ [EMAIL PROTECTED]\bò\006
[EMAIL
PROTECTED]:´\0\0\0\0\0\0\0\0Döÿ¿,ôÿ¿Q0\026\b\004\0\0\0Döÿ¿\024\0\0\0\0\0\0\0\001\0\0\0\0\0\0\0\004\0\0\0\0\0\0\0\002\0\0\08U=\bLôÿ¿\0361\026\b\220\026=\bDöÿ¿xôÿ¿\004\0\0\0\0\0\0\0\001\0\0\0|ôÿ¿ð\214!\b\001\0\0\0Döÿ¿xôÿ¿,L\023\b\0\0\0\0\224ýÿ¿\214ôÿ¿Kð\017\b...
data = {dptr = 0x0, dsize = 264}
key = {dptr = 0xb3ac STATUS/hpljet8100n, dsize = 18}
printername = 0x82f6c40 hpljet8100n
pdb = (struct tdb_print_db *) 0x83d4ac8
count = 0
This is a strange crash location. It appears to be in the call here :
if (!get_stored_queue_info(pdb, snum, count, ppqueue)) {
release_print_db(pdb);
return 0;
I don't immediately see any bad pointers etc. in this call...
Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] suse 8.2 Samba 3 LDAP :Cannot Log onto Domain Member Workstation After Joining Domain
While this is being discussed: Has anybody done any work into distributing Group Policy settings to a Samba domain? Even if it's some sort of startup/.bat procedure just copying settings from a share, has it been done? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SQL 2000 Failed Authentication
I am runnign a Samba 3.0.1 PDC, serving a domain named FEEDBACK. Joined to this domain we have about 30 workstations and 2 Windows 2000 Servers. These servers run MS SQL Server 2000. SQL Server is using Windows authentication. This allows users/applications on our LAN to connect to the server using Windows authentication. This process has been flakey for the last month, with authentication failing (SQL applications say: username (null) not associated with a trusted connection). Since upgrading to Samba 3.0.1 about 2 days ago, it has barely worked. It does work, if you try to connect enough times. Perhaps 1/10 times. I am unable to put a finger on what is causing the problem. We are not having other problems with other computers or services on our network. People can log in and access their shares just fine. Both SQL servers show hte same problems, with no helpful messages in the event log: SubSystem Message - Job 'DOTTIE-Clients-GREG-13' (0x7FAE23BF34367744869B36C09E3B81D2), step 2 - Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection. The process could not connect to Subscriber 'GREG'. We have tried rebooting both servers, as well as disjoining and rejoining one to the domain. The disjoining and rejoining is flawless, but it doesn't fix the problem. We are unable to determine what to try next. Can anybody help us out? Thanks. Please include me in the reply. Jerry Haltom Feedback Plus, Inc. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] W2k/SQL Authentication problems 3.0.1, help please
[syslog] path = /var/log/ public = no browseable = no valid users = root __ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 3.0.0, password switching on it's own
This morning one of our employees came into us noting that W2K said their password was invalid. It seemed to have changed on it's own. At that time LM/NT passwords in LDAP were the following: EE899DB29A5F1658AAD3B435B51404EE 62D7C4362BDB83A95BB28244BD9AF321 I made a note of them, and then changed the password using smbpasswd, to the same thing that it should have already been. At this point the LM/NT passwords were: EE899DB29A5F1658AAD3B435B51404EE 27AC53B3162CD6F069D360FF31849D05 Notice the LM password is not different, only the NT portion had changed itself. This has happened twice before, but previously our staff just reset the password and went on with life. I caught this one. I have no logs, because I don't know what to be looking for. It has to have changed itself in the last 12 hours, however, I don't know when to place that. Any ideas what could cause this to happen? Anything I could look for? It's going to become a problem if it starts happening more frequently. Thank you. I am running Samba 3.0.0. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] WPKG
http://wpkg.sf.net On Tue, 2003-11-18 at 23:20, Jerry Haltom wrote: Just wondering if anybody out there actually downloaded and got my Wpkg utility working. I'd like to hear what people think about it. Not having a progect page for it and all doesn't make that easy. Hmm. Maybe i'll set up a sourceforge page. Anyways, anybody using it? (for those not aware, it's a utility to automatically install software on windows computers, without any specific dependencies on Windows on the server end. Yippy! It's pretty feature complete.) http://svn.feedbackplusinc.com/repos/wpkg/ guest:anypassword -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Machine password change failed: stub received bad data
DId you receive the traffic dump? On Tue, 2003-12-09 at 12:35, Jeremy Allison wrote: On Tue, Dec 09, 2003 at 12:35:29PM -0600, Jerry Haltom wrote: Samba 3.0 PDC, Windows 2k SP4 clients. After talking with you in the channel I had a bunch of logs. I don't see anything strange... but I don't know what to look for. I have an etherreal dump of the conversation between the two boxes, and have isolated hte NETSERVERPASSWORDSET request and reply. Don't know what to do with them though. Want the data? Yes please ! That sounds like a call we don't support right now... Jeremy. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Machine password change failed: stub received bad data
It just started happening this morning to just about every member of the domain. Trying to figure out how to set log level to 10 for just a few systems so we don't bring it to a crawl. Will this eventually result in failed authentication? I don't think it should, unless Samba disables the machine accounts somehow. Just wanna make sure the system isn't going to just stop working in the middle of the day. On Mon, 2003-12-08 at 14:57, Jeremy Allison wrote: On Mon, Dec 08, 2003 at 02:45:00PM -0600, Jerry Haltom wrote: No, I cannot reproduce the problem. I do not know when or how Windows decides to change machine passwords. I also cannot leave a debug level that high on all the time. Ok, thanks. Hmmm. It's going to be very hard to determine what exactly the problem is without a test case. I'll think about exactly how I might generate one (maybe changing the Windows client clock might cause this to reproduce). What exactly is the client OS type and Samba server version ? Thanks, Jeremy. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Machine password change failed: stub received bad data
Samba 3.0 PDC, Windows 2k SP4 clients. After talking with you in the channel I had a bunch of logs. I don't see anything strange... but I don't know what to look for. I have an etherreal dump of the conversation between the two boxes, and have isolated hte NETSERVERPASSWORDSET request and reply. Don't know what to do with them though. Want the data? On Tue, 2003-12-09 at 12:23, Jeremy Allison wrote: On Tue, Dec 09, 2003 at 09:25:50AM -0600, Jerry Haltom wrote: It just started happening this morning to just about every member of the domain. Trying to figure out how to set log level to 10 for just a few systems so we don't bring it to a crawl. Will this eventually result in failed authentication? I don't think it should, unless Samba disables the machine accounts somehow. Just wanna make sure the system isn't going to just stop working in the middle of the day. No I don't think I'll fail auth. It just won't allow successful machine password change. What is your configuration again, a Samba PDC with XP clients ? Jeremy. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Roaming profiles with Samba3
Roaming profiles are not a function of a domain controller really. The only thing the PDC is responsible for is handing the PATH of the profile off to Windows. From there Windows can take over and royally fuck it up to no end. Problems with roaming profiles: 1. If any portion breaks (incorrect permissions on a single file in their start menu), the entire profile load aborts, and the user uses a temporary profile. 2. They merge... incorrectly. If you have a person log onto two computers, both computers download the profile, and make modifications, and then both upload again when you log off. Some files are overwritten from each copy, usually creating a mess. 3. When logging off, sometimes the profile unload. Reasons vary. Usually it's a legitimate reasons: server is slow, etc. Either way, you have modifications locally which haven't been synched remotely... or of which half have been synched. Logging onto aanother computer loads this broken copy. Logging off unloads, and replaces it on the server. Logging onto the original box creates a merge of the local and remote profiles: usually breaking stuff. They work if you can guarentee the following: Nobody logs on twice. The server is up all the time. Nobody touches the files. None of this is Samba's fault. On Tue, 2003-12-09 at 12:44, Jason Williams wrote: Good morning everyone. I wanted to ask the people on this list who are currently using roaming profiles with samba 3 how it is working? I worked a little with roaming profiles with 2.2.8a, but it was not working as well as I wanted it to and im hoping that samba 3 roaming profiles are working pretty well. Our network here is really calling for roaming profiles to be a major option here. Our CEO wants the ability for users to be able to log into any terminal on the network with their username and password...roaming profiles is what im hoping to use here. Im setting up a test box here, but have not yet had time to test roaming profiles. WIth that in mind, anyone care to share how roaming profiles are working? Any tips or suggestions on ways to improve roaming profiles on my end? Lastly, is it possible to setup a hours of operations for shares on samba? For example, maybe you only want shares to be available during buisness hours and closed on the weekends. Is there a way to do that with samba, or would you need to use something like the poledit utility? I appreciate everyones feedback and help. Jason -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Machine password change failed: stub received bad data
One of our workstations spit out the following error: Could not change machine account password: the stub received bad data. This sounds to me like a Samba problem... but it's a bit beyond me to come up with an answer to. Any ideas where I should start? -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Machine password change failed: stub received bad data
No, I cannot reproduce the problem. I do not know when or how Windows decides to change machine passwords. I also cannot leave a debug level that high on all the time. On Mon, 2003-12-08 at 14:37, Jeremy Allison wrote: On Mon, Dec 08, 2003 at 01:00:02PM -0600, Jerry Haltom wrote: One of our workstations spit out the following error: Could not change machine account password: the stub received bad data. This sounds to me like a Samba problem... but it's a bit beyond me to come up with an answer to. Any ideas where I should start? Can you reproduce this problem ? If so, can you send in a debug level 10 log please ? Thanks, Jeremy. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Failing Authentication
I am running Samba on a box serving a network of 30 clients, and 2 MS SQL 2000 servers. The SQL servers are members of the domain, and use NT authentication for connections and such. For the most part, this works fine. However, it seems that every now and then, pretty randomlly, NT authentication is failing for these services. Errors returned are pretty typical of DC-not-working problems: Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection. (Source: GREG (Data source); Error number: 18452) --- Pretty much, restarting the services that run as domain users just fixes it up, for the time being. I suspect Samba isn't performing up to par... refusing connections, or something. But I also don't see anything useful in the logs. But I could be logging wrong. So, anybody have any ideas on the problem, or simply what log level settings I could use to obtain useful information? Thanks! -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Failing Authentication
Sambe 3.0 is the PDC. No, I can't get any info. The Server is serving a LOT of people. And the authentiction failures are extremely random... as in maybe 3 a day. Debug level 10 is way to slow to turn on. Let me just ask this for clarity. The fact that it is SQL server has nothing to do with it, right? It uses Windows Authentication, weither that be through a Win32 API or whatever, just like every other program. Same APIs. Is there a specific debug level for a specific thing I can enable? 3.0 has better debug support now, but I haven't figured out how to use it...? Thanks. On Tue, 2003-11-18 at 12:09, Jeremy Allison wrote: On Tue, Nov 18, 2003 at 12:03:53PM -0600, Jerry Haltom wrote: I am running Samba on a box serving a network of 30 clients, and 2 MS SQL 2000 servers. The SQL servers are members of the domain, and use NT authentication for connections and such. For the most part, this works fine. However, it seems that every now and then, pretty randomlly, NT authentication is failing for these services. Errors returned are pretty typical of DC-not-working problems: Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection. (Source: GREG (Data source); Error number: 18452) --- More info please. Is Samba a PDC ? Can you get a debug level 10 or an ethereal trace of the SQL server authentication failures ? Jeremy. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] WPKG
Just wondering if anybody out there actually downloaded and got my Wpkg utility working. I'd like to hear what people think about it. Not having a progect page for it and all doesn't make that easy. Hmm. Maybe i'll set up a sourceforge page. Anyways, anybody using it? (for those not aware, it's a utility to automatically install software on windows computers, without any specific dependencies on Windows on the server end. Yippy! It's pretty feature complete.) http://svn.feedbackplusinc.com/repos/wpkg/ guest:anypassword -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba Success Story
I'd like to thank the Samba team for making our switch off of Active Directory amazingly smooth. We're a small company, only 30 desktops, but things went great for us. Actually, nobody even notices the Windows DC is even gone! The Exchange migration that went along with this wasn't as hassle free though. =( It's really refreshing to be able to SSH into our file server and see what's going on! Kudo's to the Samba team for saving us time/money and our sanity! -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Success Story
Well, getting off of Active Directory was our main goal. I'm sure most here can figure out why. Thanks to MS's innovation, one can't just keep Exchange working with it. So... we searched for alternatives that were exactly the same, and found nothing that offered any clear benefits. They'res just nothing the can offer the Outlook Integration thing, which is apparently intentional. :) We wanted to get with a standard IMAP server, and we did. Cyrus-IMAP. it performs well, is WAY more usable, storing messages as normal files. Easy to tar up and backup normal files vs. a massive JET database. It doesn't offer Calendar/Contacts such as Exchange does though... so we kept looking. A new project just appeared, OpenGroupware (www.opengroupware.org). It started as a commerical project, but has recently been released under the GPL. The code base itself is very mature, however the conversion to rename everything from SKYRIX to OGo has caused some headaches. It is however not Exchange. It offers a lot of features Exchange doesn't, and doesn't offer some Exchange does, and offers others differently. It's a different product. It's a lot like ACT actually, which some of our users love. That is taking some adjusting by our users, but they'll get over it. Also, unless you pay for the commercial Outlook plugin, it doesn't just work in Outlook. It does however have a nice WebUI Mmmm WebUI... *coughhackcough*. We're using the WebUI. It works okay. Outlook makes using an IMAP server a bitch though, it does the crossout deleted messages thing. Can't store the password properly. Doens't ask you when it changes, just silently fails. Outlook is at fault, but that's that. We can live with it. Now that our server end is clean we can begin on our ultimate goal of removing Windows from the desktop though. On Mon, 2003-11-10 at 18:10, Greg Folkert wrote: On Mon, 2003-11-10 at 19:03, Jerry Haltom wrote: I'd like to thank the Samba team for making our switch off of Active Directory amazingly smooth. We're a small company, only 30 desktops, but things went great for us. Actually, nobody even notices the Windows DC is even gone! The Exchange migration that went along with this wasn't as hassle free though. =( It's really refreshing to be able to SSH into our file server and see what's going on! Kudo's to the Samba team for saving us time/money and our sanity! Could you share what you did? Along with what e-mail/groupware package did you switch to... I'd be interested to know. I am sure other would be as well. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: AW: [Samba] Samba Success Story
No, I bought the Samba 3.0 Official Reference and Howto book and followed the instructions. :) On Mon, 2003-11-10 at 18:44, SEFEROVIC Edvin wrote: Congratulations... nice move... a high quality solution doesn't have to mean expensive solution as well... I wish you luck in your next step ( removing Windows from the desktop )... another question - have you documented this project of yours? Greets SEFEROVIC Edvin -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Jerry Haltom Gesendet: Dienstag, 11. November 2003 01:33 An: Greg Folkert Cc: SambaUser List Betreff: Re: [Samba] Samba Success Story Well, getting off of Active Directory was our main goal. I'm sure most here can figure out why. Thanks to MS's innovation, one can't just keep Exchange working with it. So... we searched for alternatives that were exactly the same, and found nothing that offered any clear benefits. They'res just nothing the can offer the Outlook Integration thing, which is apparently intentional. :) We wanted to get with a standard IMAP server, and we did. Cyrus-IMAP. it performs well, is WAY more usable, storing messages as normal files. Easy to tar up and backup normal files vs. a massive JET database. It doesn't offer Calendar/Contacts such as Exchange does though... so we kept looking. A new project just appeared, OpenGroupware (www.opengroupware.org). It started as a commerical project, but has recently been released under the GPL. The code base itself is very mature, however the conversion to rename everything from SKYRIX to OGo has caused some headaches. It is however not Exchange. It offers a lot of features Exchange doesn't, and doesn't offer some Exchange does, and offers others differently. It's a different product. It's a lot like ACT actually, which some of our users love. That is taking some adjusting by our users, but they'll get over it. Also, unless you pay for the commercial Outlook plugin, it doesn't just work in Outlook. It does however have a nice WebUI Mmmm WebUI... *coughhackcough*. We're using the WebUI. It works okay. Outlook makes using an IMAP server a bitch though, it does the crossout deleted messages thing. Can't store the password properly. Doens't ask you when it changes, just silently fails. Outlook is at fault, but that's that. We can live with it. Now that our server end is clean we can begin on our ultimate goal of removing Windows from the desktop though. On Mon, 2003-11-10 at 18:10, Greg Folkert wrote: On Mon, 2003-11-10 at 19:03, Jerry Haltom wrote: I'd like to thank the Samba team for making our switch off of Active Directory amazingly smooth. We're a small company, only 30 desktops, but things went great for us. Actually, nobody even notices the Windows DC is even gone! The Exchange migration that went along with this wasn't as hassle free though. =( It's really refreshing to be able to SSH into our file server and see what's going on! Kudo's to the Samba team for saving us time/money and our sanity! Could you share what you did? Along with what e-mail/groupware package did you switch to... I'd be interested to know. I am sure other would be as well. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Add Printer Wizard
On Thu, 2003-10-30 at 08:14, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jerry Haltom wrote: | I also can't seem to get the Add Printer Drivers wizard | to work right. I followed the instructions in the 3.0 howto | as best as I could. My samba admin user, is named samba, | he has a uid 0. It's stored in LDAP. It works for | joining computers to the domain. | | I added samba to printer admin, and when I try to | log into a Windows computer, as this user, and add a | driver, I get: Access Denied. an admin user may not be the same as a printer admin. Your message isn't clear on what is considered to be an 'admin' user. I refer to a user which I have made to join stuff to the domain. It has a uid of 0. You're right, admin user is sort of a made up term, however I also went one to say I added \samba\ to the printer admin. So, the user I am trying the add/remove wizard as, IS listed as a printer admin. | I'm not sure what I'm being denied access too! This user has uid 0. give me more details and we'll figure out what is going on. I have no more details to give. Windows is very unhelpful in this matter. It simple says Could not add drivers: Access denied. I should also point out, I've tried the add printer driver wizard with users other than this specific one. I have both added and not added them to the printer admin line. I've tried a whole lot of stuff, but because I don't seem to understand the process, it's all guesswork. | After setting all this up, can I expect queue's to | be consistant? I need to see, in the Windows queue, unix jobs | submitted directly to cups. On the cup's queue, I'd like to | see window's jobs. This works fine. smbd does use an 'lpq cache time' since we cache the queue listing along with some addition job information. | Also, can samba be made to spool to cups AS it's receiving | from the client? We regularly print out 900 page jobs, which | take 30 pages to print from the client to the server. If the | client has to sit there and spool all 900 pages before | the job can even start, we've doubled our print time! As | of now, Windows will start printing INSTATLY upon receiving | data from the client, this may be more like buffering | than spooling. Samba cannot give the job to the printing system until the client has spooled the entire job to us. SOrry. Okay, will try to make do. Is this a limitation of Samba, or CUPs in particular? If cups supports receiving streamed data, could not Samba just start streaming it to cups, and cups would handle either spooling it, or printing it immediatly if they're are no other jobs? I'm just trying to duplicate the experience on Windows. Trying to cause as little hassle to people as possible. Doing a full Linux migration here, every server: If I can do it with no interruptions at all, people will love me for it. :) Thanks for your help. cheers, jerry ~ -- ~ Hewlett-Packard--- -- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ You can never go home again, Oatman, but I guess you can shop there. ~--John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oRzNIR7qMdg1EfYRAnbNAKDNsTcM7nZbrBxVvVb/ilaA7CO1nACeJUBl /lpTJhIkmgQPWbahlPZ+xp8= =zgJT -END PGP SIGNATURE- -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Add Printer Wizard
Okay! I've managed to defeat this obstacle. I did it all manually using smbclient and rpcclient. Printer drivers work. However, Windows is producing VERY VERY BAD quality output. Totally grainy. It does not do this when using hte printer through the normal WIndows server's shared printer (this is a TCP/IP printer, directly supporting IPP, we are using the windows server/samba servers just to centralize it). Windows is using the native drivers for this printer, which are postscript. So, I assume, samba shold be receiving a postscript file from Windows, and in turn sending that to cups... so at first glance I wouldn't think Samba was at fault... but since it only happens when samba is involved, I don't know. All the settings for the printer are at their highest. When printing directly to CUPs using a Unix workstation, quality is just fine. On Fri, 2003-10-31 at 10:10, Jerry Haltom wrote: On Thu, 2003-10-30 at 08:14, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jerry Haltom wrote: | I also can't seem to get the Add Printer Drivers wizard | to work right. I followed the instructions in the 3.0 howto | as best as I could. My samba admin user, is named samba, | he has a uid 0. It's stored in LDAP. It works for | joining computers to the domain. | | I added samba to printer admin, and when I try to | log into a Windows computer, as this user, and add a | driver, I get: Access Denied. an admin user may not be the same as a printer admin. Your message isn't clear on what is considered to be an 'admin' user. I refer to a user which I have made to join stuff to the domain. It has a uid of 0. You're right, admin user is sort of a made up term, however I also went one to say I added \samba\ to the printer admin. So, the user I am trying the add/remove wizard as, IS listed as a printer admin. | I'm not sure what I'm being denied access too! This user has uid 0. give me more details and we'll figure out what is going on. I have no more details to give. Windows is very unhelpful in this matter. It simple says Could not add drivers: Access denied. I should also point out, I've tried the add printer driver wizard with users other than this specific one. I have both added and not added them to the printer admin line. I've tried a whole lot of stuff, but because I don't seem to understand the process, it's all guesswork. | After setting all this up, can I expect queue's to | be consistant? I need to see, in the Windows queue, unix jobs | submitted directly to cups. On the cup's queue, I'd like to | see window's jobs. This works fine. smbd does use an 'lpq cache time' since we cache the queue listing along with some addition job information. | Also, can samba be made to spool to cups AS it's receiving | from the client? We regularly print out 900 page jobs, which | take 30 pages to print from the client to the server. If the | client has to sit there and spool all 900 pages before | the job can even start, we've doubled our print time! As | of now, Windows will start printing INSTATLY upon receiving | data from the client, this may be more like buffering | than spooling. Samba cannot give the job to the printing system until the client has spooled the entire job to us. SOrry. Okay, will try to make do. Is this a limitation of Samba, or CUPs in particular? If cups supports receiving streamed data, could not Samba just start streaming it to cups, and cups would handle either spooling it, or printing it immediatly if they're are no other jobs? I'm just trying to duplicate the experience on Windows. Trying to cause as little hassle to people as possible. Doing a full Linux migration here, every server: If I can do it with no interruptions at all, people will love me for it. :) Thanks for your help. cheers, jerry ~ -- ~ Hewlett-Packard--- -- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ You can never go home again, Oatman, but I guess you can shop there. ~--John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/oRzNIR7qMdg1EfYRAnbNAKDNsTcM7nZbrBxVvVb/ilaA7CO1nACeJUBl /lpTJhIkmgQPWbahlPZ+xp8= =zgJT -END PGP SIGNATURE- -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Add Printer Wizard
Okay, I have done as you said: Printing from Unix - Cups, the image is fine. I have added the printer in W2K, as a IPP printer (W2K supports that), I set the driver to the correct driver, but the image quality is not good. So, this is obviously not samba's fault. Hope you don't mind me asking here then, what could hte problem be? What would windows see differently with CUPs/Samba VS Unix? Windows to Windows works, Windows to Cups or Samba doesn't! On Fri, 2003-10-31 at 17:24, Andrew Bartlett wrote: On Sat, 2003-11-01 at 10:01, Jerry Haltom wrote: Okay! I've managed to defeat this obstacle. I did it all manually using smbclient and rpcclient. Printer drivers work. However, Windows is producing VERY VERY BAD quality output. Totally grainy. It does not do this when using hte printer through the normal WIndows server's shared printer (this is a TCP/IP printer, directly supporting IPP, we are using the windows server/samba servers just to centralize it). Windows is using the native drivers for this printer, which are postscript. So, I assume, samba shold be receiving a postscript file from Windows, and in turn sending that to cups... so at first glance I wouldn't think Samba was at fault... but since it only happens when samba is involved, I don't know. Try removing Samba - print using IPP to the CUPS server. Also, check you are using the postscript drivers for the printer in CUPS - you don't want CUPS rendering it to PCL (or whatever your printers also speak) if you can avoid it. Andrew Bartlett -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Add Printer Wizard
Cancel that! Thank you for all you guy's help. I had the printer in CUPs configured as an HP (which it is...). I set it to RAW, and now both sides are working fine. Still don't understand what was wrong with HP though. :) Thanks again. On Fri, 2003-10-31 at 17:41, Jerry Haltom wrote: Okay, I have done as you said: Printing from Unix - Cups, the image is fine. I have added the printer in W2K, as a IPP printer (W2K supports that), I set the driver to the correct driver, but the image quality is not good. So, this is obviously not samba's fault. Hope you don't mind me asking here then, what could hte problem be? What would windows see differently with CUPs/Samba VS Unix? Windows to Windows works, Windows to Cups or Samba doesn't! On Fri, 2003-10-31 at 17:24, Andrew Bartlett wrote: On Sat, 2003-11-01 at 10:01, Jerry Haltom wrote: Okay! I've managed to defeat this obstacle. I did it all manually using smbclient and rpcclient. Printer drivers work. However, Windows is producing VERY VERY BAD quality output. Totally grainy. It does not do this when using hte printer through the normal WIndows server's shared printer (this is a TCP/IP printer, directly supporting IPP, we are using the windows server/samba servers just to centralize it). Windows is using the native drivers for this printer, which are postscript. So, I assume, samba shold be receiving a postscript file from Windows, and in turn sending that to cups... so at first glance I wouldn't think Samba was at fault... but since it only happens when samba is involved, I don't know. Try removing Samba - print using IPP to the CUPS server. Also, check you are using the postscript drivers for the printer in CUPS - you don't want CUPS rendering it to PCL (or whatever your printers also speak) if you can avoid it. Andrew Bartlett -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Add Printer Wizard
I'm having a bit of trouble getting a Samba printer set up. What I have is a postscript capable HP laserjet. It actually has IPP/HTTP and stuff on it. I need queueing to work, so my clients can't print to it directly, so what I want to do is: Get the printer set up on a central CUPs server: done. Printing quality is perfect from Unix machines. Thank you postscript! Have samba print to that printer as well, this, I have working, but it's not pretty. The quality is horrible, and im not sure why. Things are grainy, blocky, etc. This is printing from a Windows computer (with teh HP laserJet PS drivers installed). Samba is messing up my image quality! Not sure what is causing that. I also can't seem to get the Add Printer Drivers wizard to work right. I followed the instructions in the 3.0 howto as best as I could. My samba admin user, is named samba, he has a uid 0. It's stored in LDAP. It works for joining computers to the domain. I added samba to printer admin, and when I try to loginto a Windows computer, as this user, and add a driver, I get: Access Denied. I'm not sure what I'm being denied access too! This user has uid 0. After setting all this up, can I expect queue's to be consistant? I need to see, in the Windows queue, unix jobs submitted directly to cups. On the cup's queue, I'd like to see window's jobs. Also, can samba be made to spool to cups AS it's receiving from the client? We regularly print out 900 page jobs, which take 30 pages to print from the client to the server. If the client has to sit there and spool all 900 pages before the job can even start, we've doubled our print time! As of now, Windows will start printing INSTATLY upon receiving data from the client, this may be more like buffering than spooling. Thanks for the prompt assistance. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Dfs - Load Balancing
I will second this. On Wed, 2003-10-29 at 19:48, David Chait wrote: I am not certain how Samba specifically will handle this, but I can say from experience that MS's FRS/DFS implimentation is a dissaster, don't go near it if you value your data. - Original Message - From: Nicholas McDowell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 29, 2003 5:28 PM Subject: [Samba] Dfs - Load Balancing Hi, I was wondering if anyone has had any experience with using the Dfs functionality within Samba. I've been searching for any performance information and or documentation regarding Dfs in particular load balancing i.e. 1) How does it load balance? Is it some sort of round robin? 2) Is there a limit to the number of servers that can used in the load balance? 3) How many requests per second can Dfs handle? Any information or links would be greatly appreciated. Thanks Nicholas -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Automatic Windows Patch Deployment (OS Agnostic)
Yes, i've considered the registry keys idea, and I have a very good idea on how to implement. Each package could have a series of installation checks, for registry, or file existance, which could clue it into the fact that it's already installed, just add the entry and continue. package id=hotfix check type=registryHKEY_LOCAL_MACHINE/blah/blah/check ... Yup. GPG. :) On Sat, 2003-10-25 at 23:51, Andrew Bartlett wrote: On Sun, 2003-10-26 at 12:16, Jerry Haltom wrote: A month ago I mentioned on this list work on a automated package deployment tool for Windows systems, which is server agnostic. At the time, I didn't have the time to put it up in a place for public consumption. I do now. The utility is named wpkg (punny isn't it?) It's nothing more than a simple .js (jscript) file which needs to be run on Windows, from a directory containing three XML files describing packages, hosts, and profiles to be installed on a system. Each package consists of nothing more than a set of command lines to run on install/upgrade/removal, a version number, and a name. When the script is run (preferably as a service at boot, using srvany.exe, or FireDaemon), it checks a local C:\$SYS$\System32\wpkg.xml file, which lists the package entries of locally installed packages, determines which new packages are available, and attempts to install them according to their command lines, and reboots if neccassary. Have you considered making it look in the registry for the hotfix keys? For sites which are not deployed from scratch, this could help move to this central system, without needing to standardise all the machines from scratch. It is very simple, but I've now been running it for a week, with about 10 boxes (about to roll it out to all my systems), and it is totally successful. It's very easy to add new packages, or upgade existing packages, and then force a system wide reboot. I am sending it to the list because I imagine there are similar Windows administrators out there, running Samba (or not) that need a good software deployment utility. Microsoft's SUS sort of requires IIS, SMS isn't much better. Also, I would like people to check it out, and submit patches, or changes, or new features to me, so that I may make use of them too. :) As I mentioned on IRC, the big thing I think it needs is a GPG signature over the patch repository, to try and prevent spoofs. The source code is currently hosted on my subversion repository, at: http://jack.feedbackplusinc.com/svn/repos/wpkg/ Username: guest Password: your email address The package is released under the GPL. (Can one of you license guru's tell me if the GPL is appropiate for a windows patcher written in jscript?) Well, it doesn't have much of a binary form, but the GPL works pretty well for almost anything :-) Enjoy. I certainly will :-) Andrew Bartlett -- My current setup is using this sytem, with FireDaemon to launch the service at start. Soon as Monday rolls around, im going to play with the ResKit's srvany.exe program. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Automatic Windows Patch Deployment (OS Agnostic)
This will install any type of package, of any form, that can be installed silently from the command line. MSI's are of course easy. msiexec /i path to msi. However, almost any program out there has silent install options of some sort. This makes no distinction. If it can be installed by running a program with various options, this utility can do it. And you can of course make your own .bat files for packages. On Sun, 2003-10-26 at 04:47, rruegner wrote: Hi, as far as i studied your scripts, this will only deploy msi packs , am i right ? so far ,wonderfull idea but at my knowledge you can do this with netlogon scripts too i.e if you check the registrty at logon and if not exist the wanted pack, install it via batch and the quit option which is included to msi, reinstall should work just the same. after all wonderfull work , i will test it...but a deploy system for all kind of packs would be the greatest ...do you have any idea about that with freeware. on freshmeat there is only one project unattended which relates in this stuff it is a complex perl thing... i would preffer a more simple solution lets stay in contact about that best Regards - Original Message - From: Jerry Haltom [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Sunday, October 26, 2003 2:16 AM Subject: [Samba] Automatic Windows Patch Deployment (OS Agnostic) A month ago I mentioned on this list work on a automated package deployment tool for Windows systems, which is server agnostic. At the time, I didn't have the time to put it up in a place for public consumption. I do now. The utility is named wpkg (punny isn't it?) It's nothing more than a simple .js (jscript) file which needs to be run on Windows, from a directory containing three XML files describing packages, hosts, and profiles to be installed on a system. Each package consists of nothing more than a set of command lines to run on install/upgrade/removal, a version number, and a name. When the script is run (preferably as a service at boot, using srvany.exe, or FireDaemon), it checks a local C:\$SYS$\System32\wpkg.xml file, which lists the package entries of locally installed packages, determines which new packages are available, and attempts to install them according to their command lines, and reboots if neccassary. It is very simple, but I've now been running it for a week, with about 10 boxes (about to roll it out to all my systems), and it is totally successful. It's very easy to add new packages, or upgade existing packages, and then force a system wide reboot. I am sending it to the list because I imagine there are similar Windows administrators out there, running Samba (or not) that need a good software deployment utility. Microsoft's SUS sort of requires IIS, SMS isn't much better. Also, I would like people to check it out, and submit patches, or changes, or new features to me, so that I may make use of them too. :) The source code is currently hosted on my subversion repository, at: http://jack.feedbackplusinc.com/svn/repos/wpkg/ Username: guest Password: your email address The package is released under the GPL. (Can one of you license guru's tell me if the GPL is appropiate for a windows patcher written in jscript?) Enjoy. -- My current setup is using this sytem, with FireDaemon to launch the service at start. Soon as Monday rolls around, im going to play with the ResKit's srvany.exe program. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Automatic Windows Patch Deployment (OS Agnostic)
Looking at registry keys. Very good idea. Seems like this could be a check entry for each package, or multiple, that was checked just before install. If it passes, the install isn't actually run, but the entry is made in the local file that the package is in fact installed. Will make bringing a system up to date easy. Good idea! Thanks! GPG: It's not high on MY priority list. I don't need it in my environment. I am only a small office with 30 computers. :) However, it is definatly something I want to do... and plan to do, when time allows. Or somebody could submit patches! Yay for open source! Good day. On Sat, 2003-10-25 at 23:51, Andrew Bartlett wrote: On Sun, 2003-10-26 at 12:16, Jerry Haltom wrote: A month ago I mentioned on this list work on a automated package deployment tool for Windows systems, which is server agnostic. At the time, I didn't have the time to put it up in a place for public consumption. I do now. The utility is named wpkg (punny isn't it?) It's nothing more than a simple .js (jscript) file which needs to be run on Windows, from a directory containing three XML files describing packages, hosts, and profiles to be installed on a system. Each package consists of nothing more than a set of command lines to run on install/upgrade/removal, a version number, and a name. When the script is run (preferably as a service at boot, using srvany.exe, or FireDaemon), it checks a local C:\$SYS$\System32\wpkg.xml file, which lists the package entries of locally installed packages, determines which new packages are available, and attempts to install them according to their command lines, and reboots if neccassary. Have you considered making it look in the registry for the hotfix keys? For sites which are not deployed from scratch, this could help move to this central system, without needing to standardise all the machines from scratch. It is very simple, but I've now been running it for a week, with about 10 boxes (about to roll it out to all my systems), and it is totally successful. It's very easy to add new packages, or upgade existing packages, and then force a system wide reboot. I am sending it to the list because I imagine there are similar Windows administrators out there, running Samba (or not) that need a good software deployment utility. Microsoft's SUS sort of requires IIS, SMS isn't much better. Also, I would like people to check it out, and submit patches, or changes, or new features to me, so that I may make use of them too. :) As I mentioned on IRC, the big thing I think it needs is a GPG signature over the patch repository, to try and prevent spoofs. The source code is currently hosted on my subversion repository, at: http://jack.feedbackplusinc.com/svn/repos/wpkg/ Username: guest Password: your email address The package is released under the GPL. (Can one of you license guru's tell me if the GPL is appropiate for a windows patcher written in jscript?) Well, it doesn't have much of a binary form, but the GPL works pretty well for almost anything :-) Enjoy. I certainly will :-) Andrew Bartlett -- My current setup is using this sytem, with FireDaemon to launch the service at start. Soon as Monday rolls around, im going to play with the ResKit's srvany.exe program. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Automatic Windows Patch Deployment (OS Agnostic)
A month ago I mentioned on this list work on a automated package deployment tool for Windows systems, which is server agnostic. At the time, I didn't have the time to put it up in a place for public consumption. I do now. The utility is named wpkg (punny isn't it?) It's nothing more than a simple .js (jscript) file which needs to be run on Windows, from a directory containing three XML files describing packages, hosts, and profiles to be installed on a system. Each package consists of nothing more than a set of command lines to run on install/upgrade/removal, a version number, and a name. When the script is run (preferably as a service at boot, using srvany.exe, or FireDaemon), it checks a local C:\$SYS$\System32\wpkg.xml file, which lists the package entries of locally installed packages, determines which new packages are available, and attempts to install them according to their command lines, and reboots if neccassary. It is very simple, but I've now been running it for a week, with about 10 boxes (about to roll it out to all my systems), and it is totally successful. It's very easy to add new packages, or upgade existing packages, and then force a system wide reboot. I am sending it to the list because I imagine there are similar Windows administrators out there, running Samba (or not) that need a good software deployment utility. Microsoft's SUS sort of requires IIS, SMS isn't much better. Also, I would like people to check it out, and submit patches, or changes, or new features to me, so that I may make use of them too. :) The source code is currently hosted on my subversion repository, at: http://jack.feedbackplusinc.com/svn/repos/wpkg/ Username: guest Password: your email address The package is released under the GPL. (Can one of you license guru's tell me if the GPL is appropiate for a windows patcher written in jscript?) Enjoy. -- My current setup is using this sytem, with FireDaemon to launch the service at start. Soon as Monday rolls around, im going to play with the ResKit's srvany.exe program. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] ldap passwd sync
Having a bit of trouble understanding, or getting, ldap passwd sync working. I assume, setting it to Yes, would make it issue a change password command to the ldap server, just like pam does, ldappasswd does, or any other ldap program. Right? What does only do? -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Too Many Open Files problem...
Chances are, you have too many open files. These servers are running on Linux. Linux limits the number of file handlers on a system wide basis to the value set in the sys.fs.file-max sysctl. This can be changed by editing the value in /proc/sys/fs/file-max, or using the sysctl utility. This is a per system (kernel) limit. There is also a per-process limit, which is a bit harder to change. Hope this helps you. This limit is here to prevent a DoS attack on any process from eatting up all the systems memory. File descriptors take memory in the kernel, so too many can consume it all. Choose a value that is reasonable for your workload. On Tue, 2003-09-02 at 12:41, Collins, Kevin wrote: I have a problem on the two heaviest-used Samba servers in my company. They both are exhibiting the same problem, just in different ways. Stargazer is my Main File and LDAP directory server - it functions as the PDC for my network. It's running Red Hat Enterprise Linux ES 2.1, a recompiled custom Red Hat ES version of Samba 2.2.7 (to add LDAP functionality), and OpenLDAP 2.0.27. Valykyrie is my Print and Backup server. It's running Red Hat 8.0, a recompiled Red Hat 8 version of Samba 2.2.7 (as above), OpenLDAP 2.0.27 and CUPS 1.1.17. With the exceptions of configuration for Primary LDAP server/LDAP client, the machines are configured roughly the same. Both were constructed using the IDEALX.org Samba+LDAP HOWTO. And both run quite well - for a while. Then, they will quit responding to connection requests an even local logon requests. This doesn't happen at the same time on both machines - it appears that the failures are not connected in any way other than both system logs report Too many open files. On Stargazer it seems to be associated with OpenLDAP (slapd) and Valykyrie's problems seem to stem from nscd. This is shown in the following snippets from each /var/log/messages: STARGAZER: --- Aug 24 20:20:00 stargazer slapd[32271]: warning: cannot open /etc/hosts.allow: Too many open files Aug 24 20:20:00 stargazer slapd[32271]: warning: cannot open /etc/hosts.deny: Too many open files Aug 24 20:20:00 stargazer slapd[32271]: warning: cannot open /etc/hosts.allow: Too many open files Aug 24 20:20:00 stargazer slapd[32271]: warning: cannot open /etc/hosts.deny: Too many open files --- VALYKYRIE: --- Sep 2 03:25:38 valykyrie nscd: 718: while accepting connection: Too many open files --- The reason I post this inquiry here is that both machines are running Samba and as such both depend on these daemons for proper functioning. I am hoping that someone on the list will be able to give a pointer as to the cause of the problem. If I need to ask this elsewhere, please advise me. I have 5 other machines running Samba just not with the load of the these two. The other machines seem to be unaffected by this problem - as yet. Any help will be appreciated... -- Kevin L. Collins, MCSE Systems Manager Nesbitt Engineering, Inc. -- Jerry Haltom Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Pseudo-GPO Support for Samba
I am actually trying to figure out how to set up anonymous read access to a peice of the Subversion source repository it lives in so I can give everybody access. :D For now, here it is: http://jack.feedbackplusinc.com/~jhaltom/wpkg.tar.gz It's not currently super impressive, but it gets the job done. It is by no means a full product. Just a simple script. Please, if anybody has useful contributions, I'll happily accept them. Really, my only real need, is some clean way to launch this on workstations at boot. RIght now im using FireDaemon, to run cscript.exe \\path\to\script, and stop when it exits. This is fairly ugly, and hard to set up. I was thinking of quickly knocking out a small NT service in VS.NET, but I haven't done that in ages (I run a full linux desktop now). If I did that, I would probably just rewrite the script as a real service anyways. Also, I need to add dependencies between packages in some way. Or, if that's too far to go, at least ordering. Right now, it installs packages in a pretty random order. Need some way to specify to install Package X before it installs package Y, which happens to be an upgrade to package X, or something. Enjoy! On Fri, 2003-07-11 at 10:13, Urs Rau wrote: Jerry Haltom wrote: I have created a GPO similar program specifically for deploying applications to workstations. Similar to how GPO can push software packages. I like to call it wpkg. (dpkg for Windows :) It's very simple, but, very effective, and it works for more than MSI's. Sounds very interesting. I take it you are about to offer it for inspection/download at some point in the near future? Or you are writing up some plan of action on how to write another (more comprehensive/flexible) one? And we are all waiting very patiently. ;-) Good work! Keep it up! Thanks for your efforts. Urs Rau -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Out Of Office Replies
I can't take anymore! Last time I posted I got FIVE. Can we please turn them off for mailing lists? Jerry Haltom Feedback Plus, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Pseudo-GPO Support for Samba
I have created a GPO similar program specifically for deploying applications to workstations. Similar to how GPO can push software packages. I like to call it wpkg. (dpkg for Windows :) It's very simple, but, very effective, and it works for more than MSI's. It consists of a script, which is run at STARTUP (not login) as a domain account. I did this by using FireDaemon to start it. The script examines a centralized XML file (on a share reachable by the service the script is started by). The XML file details packages, version, and command lines to add/remove/upgrade each package. There is another XML file, for profiles, which reference package's in the packages file. This is used for departments in my office. I have a profile named it which requires certain packages. Profiles can inherit from other profiles. The sum of all packages is collected. The script then compares the packages that should be installed, with those that are, from a local xml file (C:\WINNT\System32\wpkg.xml), and determines what action it needs to take for each file. Install, Upgrade, or remove. Each package has a list of command lines assoicated with each action. Such as running msiexec /i path to an msi for the install action, and msiexec /x for remove commands... some of my packages just run xcopy. It's pretty useful. The main problem im having with it is the FireDaemon service needs to start as a Domain user, so I need to edit the computers local security policy to enable that account to Log on as a Service. That would have been automated by group policy. :D Jerry Haltom Feedback Plus, Inc. On Wed, 2003-07-09 at 12:22, Erich Vinson wrote: However, the advantage that GPO's had when I used them is that they seem to take effect immediatly where some of the registry edits with kixtart don't... The reason for this is that in a native 2K domain, you can set a GPO refresh interval that downloads and applies updated GPOs. We could certainly implement something similar to that, whether with Kixtart or developing a new app... I would like to start getting input from other admins that use Samba as a 2KServer alternative as far as the features they would like to see, how it should be deployed, etc. Not sure right now which is better, modify Kixtart or start from scratch? I have been thinking more and more and definately want to get something started, if for no other reason than it would make my life easier ;-) Of course, I'm willing to share! :-D Also, this could really help the cause of Samba as the GPO thing is a pretty major hurdle for 2K admins to overcome when considering whether to switch or not. -- Erich Vinson Chief of Technology IT, Inc. 64 6F 6E 27 74 20 66 65 61 72 20 74 68 65 20 70 65 6E 67 75 69 6E -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] LDAP Bind Failure
I have fixed this by patching Samba to use LDAPv3. I added a ldap version parameter to the config file, which forces the version used to bind. If anybody is interested, or also has this problem, just ask for patches. I liked this idea better than changing OpenLDAP to allow v2. =) Jerry Haltom Feedback Plus, Inc. On Thu, 2003-04-17 at 22:21, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 16 Apr 2003, Jerry Haltom wrote: I am using Samba 2.2.3a, and trying to use ldap for simple sambaAccount lookups. After installing OpenLDAP 2.1, Samba is no longer able to bind to the LDAP server at all apparently. All authentication fails. This appears in the log files. You probably just need to allow LDAPv2 binds. When not using StartTLS, smbd will do a LDAPv2 bind. OpenLDAP 2.1 only allows LDAPv3 binds by default. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc You can never go home again, Oatman, but I guess you can shop there. --John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+n282IR7qMdg1EfYRAgfFAKCAzEqniCftqCbgK8STbu1yMqz7IgCeN1cf f01UfyVbcRmmvpRg3UwUf+o= =5b65 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
