Re: [Samba] pam_smbpass.so passdb.tdb support
Dear John T and samba list, Can you please help me to understand following things. I have browsed the net , points are not clear to me. 1) What exactly doesn't work with the existing smbpasswd based mechanism? -- from http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html#i d2593073 This form of password backend does not store any of the MS Windows NT/200x SAM (Security Account Manager) information required to provide the extended controls that are needed for more comprehensive interoperation with MS Windows NT4/200x servers. what exactly is the above point? is it the only one limitation?. is there any other limitations?.please let me know if any other. 2) Can we easily convert an existing smbpasswd file to the new format and allow system authentication to work uninterrupted? Thanks Suresh -Original Message- From: Kandukuru, Suresh Sent: Saturday, July 03, 2010 9:02 PM To: 'j...@samba.org' Subject: RE: [Samba] pam_smbpass.so passdb.tdb support Thanks John, Created bug at https://bugzilla.samba.org/show_bug.cgi?id=7546. Thanks again. Suresh -Original Message- From: John H Terpstra [mailto:j...@samba.org] Sent: Saturday, July 03, 2010 7:56 PM To: Kandukuru, Suresh Cc: samba@lists.samba.org Subject: Re: [Samba] pam_smbpass.so passdb.tdb support On 07/03/2010 08:50 AM, kandukuru_sur...@emc.com wrote: Dear JHT, Thanks for the quick reply.in http://www.samba.org/samba/history/samba-3.4.0.html . Samba team is recommending to use tdbsam. Not just recommending - it is the default now. The smbpasswd file can not contain the information needed to fully support current MS Windows clients. The result is the smbpasswd format storage of MS Windows networking credentials has been obsoleted. just wanted to know one thing, from samba 3.4 default backend has been changed to tdbsam , why for one of the module pam_smbpass in samba code is still looking for passwords in smbpasswd?.is there any patch for that?. The pam_smbpasswd module has not been updated because noone has contributed the necessary patches. The tdbsam backend has been available since September 2003, so my take on this is that VERY few people use pam_smbpasswd. If more were using it, someone might by now have done something about the lack of support for tsbsam (and ldapsam for that matter) in the pam_smbpasswd module. will this be removed in higher versions of samba than 3.4? Probably. Why don't you file a bug report on https://bugzilla.samba.org ? - that is the only way you might get action on this. I find several people asking the question on net.did not find any answer.anticipating your reply. Sorry to disappoint you. cheers, John T. Configuration changes = !!! ATTENTION !!! The default passdb backend has been changed to 'tdbsam'! That breaks existing setups using the 'smbpasswd' backend without explicit declaration! Please use 'passdb backend = smbpasswd' if you would like to stick to the 'smbpasswd' backend or convert your smbpasswd entries using e.g. 'pdbedit -i smbpasswd -e tdbsam'. The 'tdbsam' backend is much more flexible concerning per user settings like 'profile path' or 'home directory' and there are some commands which do not work with the 'smbpasswd' backend at all. - Thanks Suresh -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of John H Terpstra Sent: Saturday, July 03, 2010 6:31 PM To: samba@lists.samba.org Subject: Re: [Samba] pam_smbpass.so passdb.tdb support On 07/03/2010 05:29 AM, kandukuru_sur...@emc.com wrote: Hi, Recently I have installed samba 3.4.8 on my device. Since then ftp (vsftp,proftpd) which is taking users from samba database with pam_smbpass.so is not working. After enabling detailed log I have noticed it is looking for the passwords in smbpasswd (/etc/samba/private) which is of zero size . I think all users passwd are located in passwd.tdb.I could fix this by giving passdb backend=smbpasswd . somewhere I read smbpasswd is obsolete , and recommended to use tdbsam .. and /etc/pam.d/ftp file is - r...@storage:/# cat /etc/pam.d/ftp auth required /lib/security/pam_smbpass.so accountrequired /lib/security/pam_nologin.so accountrequired /lib/security/pam_smbpass.so password required /lib/security/pam_smbpass.so sessionrequired /lib/security/pam_unix.so --- How can I tell pam_smbpass module to use passdb.tdb (tdbsam) .?. Please tell me I have been trying for last 2 days. Did not find anything. You can not do that without changing the pam_smbpasswd code. This module specifically operates against the smbpasswd file. -John T. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] pam_smbpass.so passdb.tdb support
Dear Volker, We are facing problem with tdbsam support for pam_smbpass in samba. Below is the email conversion with John T . and I have created a bug at https://bugzilla.samba.org/show_bug.cgi?id=7546 . I think we have to use tdbsam for our NAS device. Can you help us on this?. Thanks Suresh -Original Message- From: Kandukuru, Suresh Sent: Saturday, July 03, 2010 9:02 PM To: 'j...@samba.org' Subject: RE: [Samba] pam_smbpass.so passdb.tdb support Thanks John, Created bug at https://bugzilla.samba.org/show_bug.cgi?id=7546. Thanks again. Suresh -Original Message- From: John H Terpstra [mailto:j...@samba.org] Sent: Saturday, July 03, 2010 7:56 PM To: Kandukuru, Suresh Cc: samba@lists.samba.org Subject: Re: [Samba] pam_smbpass.so passdb.tdb support On 07/03/2010 08:50 AM, kandukuru_sur...@emc.com wrote: Dear JHT, Thanks for the quick reply.in http://www.samba.org/samba/history/samba-3.4.0.html . Samba team is recommending to use tdbsam. Not just recommending - it is the default now. The smbpasswd file can not contain the information needed to fully support current MS Windows clients. The result is the smbpasswd format storage of MS Windows networking credentials has been obsoleted. just wanted to know one thing, from samba 3.4 default backend has been changed to tdbsam , why for one of the module pam_smbpass in samba code is still looking for passwords in smbpasswd?.is there any patch for that?. The pam_smbpasswd module has not been updated because noone has contributed the necessary patches. The tdbsam backend has been available since September 2003, so my take on this is that VERY few people use pam_smbpasswd. If more were using it, someone might by now have done something about the lack of support for tsbsam (and ldapsam for that matter) in the pam_smbpasswd module. will this be removed in higher versions of samba than 3.4? Probably. Why don't you file a bug report on https://bugzilla.samba.org ? - that is the only way you might get action on this. I find several people asking the question on net.did not find any answer.anticipating your reply. Sorry to disappoint you. cheers, John T. Configuration changes = !!! ATTENTION !!! The default passdb backend has been changed to 'tdbsam'! That breaks existing setups using the 'smbpasswd' backend without explicit declaration! Please use 'passdb backend = smbpasswd' if you would like to stick to the 'smbpasswd' backend or convert your smbpasswd entries using e.g. 'pdbedit -i smbpasswd -e tdbsam'. The 'tdbsam' backend is much more flexible concerning per user settings like 'profile path' or 'home directory' and there are some commands which do not work with the 'smbpasswd' backend at all. - Thanks Suresh -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of John H Terpstra Sent: Saturday, July 03, 2010 6:31 PM To: samba@lists.samba.org Subject: Re: [Samba] pam_smbpass.so passdb.tdb support On 07/03/2010 05:29 AM, kandukuru_sur...@emc.com wrote: Hi, Recently I have installed samba 3.4.8 on my device. Since then ftp (vsftp,proftpd) which is taking users from samba database with pam_smbpass.so is not working. After enabling detailed log I have noticed it is looking for the passwords in smbpasswd (/etc/samba/private) which is of zero size . I think all users passwd are located in passwd.tdb.I could fix this by giving passdb backend=smbpasswd . somewhere I read smbpasswd is obsolete , and recommended to use tdbsam .. and /etc/pam.d/ftp file is - r...@storage:/# cat /etc/pam.d/ftp auth required /lib/security/pam_smbpass.so accountrequired /lib/security/pam_nologin.so accountrequired /lib/security/pam_smbpass.so password required /lib/security/pam_smbpass.so sessionrequired /lib/security/pam_unix.so --- How can I tell pam_smbpass module to use passdb.tdb (tdbsam) .?. Please tell me I have been trying for last 2 days. Did not find anything. You can not do that without changing the pam_smbpasswd code. This module specifically operates against the smbpasswd file. -John T. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] pam_smbpass.so passdb.tdb support
Hi, Recently I have installed samba 3.4.8 on my device. Since then ftp (vsftp,proftpd) which is taking users from samba database with pam_smbpass.so is not working. After enabling detailed log I have noticed it is looking for the passwords in smbpasswd (/etc/samba/private) which is of zero size . I think all users passwd are located in passwd.tdb.I could fix this by giving passdb backend=smbpasswd . somewhere I read smbpasswd is obsolete , and recommended to use tdbsam .. and /etc/pam.d/ftp file is - r...@storage:/# cat /etc/pam.d/ftp auth required /lib/security/pam_smbpass.so accountrequired /lib/security/pam_nologin.so accountrequired /lib/security/pam_smbpass.so password required /lib/security/pam_smbpass.so sessionrequired /lib/security/pam_unix.so --- How can I tell pam_smbpass module to use passdb.tdb (tdbsam) .?. Please tell me I have been trying for last 2 days. Did not find anything. Thanks Suresh -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] pam_smbpass.so passdb.tdb support
Dear JHT, Thanks for the quick reply.in http://www.samba.org/samba/history/samba-3.4.0.html . Samba team is recommending to use tdbsam.just wanted to know one thing, from samba 3.4 default backend has been changed to tdbsam , why for one of the module pam_smbpass in samba code is still looking for passwords in smbpasswd?.is there any patch for that?. will this be removed in higher versions of samba than 3.4?. I find several people asking the question on net.did not find any answer.anticipating your reply. Configuration changes = !!! ATTENTION !!! The default passdb backend has been changed to 'tdbsam'! That breaks existing setups using the 'smbpasswd' backend without explicit declaration! Please use 'passdb backend = smbpasswd' if you would like to stick to the 'smbpasswd' backend or convert your smbpasswd entries using e.g. 'pdbedit -i smbpasswd -e tdbsam'. The 'tdbsam' backend is much more flexible concerning per user settings like 'profile path' or 'home directory' and there are some commands which do not work with the 'smbpasswd' backend at all. - Thanks Suresh -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of John H Terpstra Sent: Saturday, July 03, 2010 6:31 PM To: samba@lists.samba.org Subject: Re: [Samba] pam_smbpass.so passdb.tdb support On 07/03/2010 05:29 AM, kandukuru_sur...@emc.com wrote: Hi, Recently I have installed samba 3.4.8 on my device. Since then ftp (vsftp,proftpd) which is taking users from samba database with pam_smbpass.so is not working. After enabling detailed log I have noticed it is looking for the passwords in smbpasswd (/etc/samba/private) which is of zero size . I think all users passwd are located in passwd.tdb.I could fix this by giving passdb backend=smbpasswd . somewhere I read smbpasswd is obsolete , and recommended to use tdbsam .. and /etc/pam.d/ftp file is - r...@storage:/# cat /etc/pam.d/ftp auth required /lib/security/pam_smbpass.so accountrequired /lib/security/pam_nologin.so accountrequired /lib/security/pam_smbpass.so password required /lib/security/pam_smbpass.so sessionrequired /lib/security/pam_unix.so --- How can I tell pam_smbpass module to use passdb.tdb (tdbsam) .?. Please tell me I have been trying for last 2 days. Did not find anything. You can not do that without changing the pam_smbpasswd code. This module specifically operates against the smbpasswd file. -John T. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Enabling logs in pam_smbpass in samba source code
I am facing some problem with samba 3.4.8 PAM pam_smbpass module, both vsftpd,proftpd are not working ..I have opened thread at http://forums.proftpd.org/smf/index.php/topic,4739.0.html it is working fine with samba 3.0.32 I want to see the _log_err messages from pam_smbpass , for that I have added log level=4 and log file= /tmp/samba/sambalog.log. I did not see any of the messages in that samba log file. Please tell me how to enable log for pam_smbpass module in samba, Thanks Suresh -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Fat32 - 1Gb file copy is failing
Hi All, Setup :- NAS device is running with 2.6.13 kernel and samba 3.0.32.I have connected a 4GB USB flash drive having FAT32.USB drive is available from the windows machine as connected shared drive. From my windows machine when I am trying to copy the file (1Gb) to shared USB drive(FAT32).it is giving error as shared USB drive is not reachable. File copy is working fine with small files. And I could copy the files more than 1Gb when the drive is with NTFS and other file systems I went though the code. In the following samba code piece: samba-3.0.32_old/source/modules/vfs_default.c: 714 static int vfswrap_ftruncate(vfs_handle_struct *handle, files_struct *fsp, int fd, SMB_OFF_T len) 715 { ... 734 735 result = sys_ftruncate(fd, len); 736 if (result == 0) 737 goto done; 738 If comment out line 735/736 (not to extend space for the file to copy on fat), no error will occur during copying. (But we cannot do so otherwise all truncate requests from client would be skipped) Please advice me what is the exact poblem,or it is known bug?. Any reply will be appreciated . Thanks in advance Suresh -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] How to enable TDB_LOG
Hi, I am beginner to samba. How to enable TDB_LOG for logging operations on tdb files.. Thanks Suresh -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Windows xp is waking up NAS for every 30 minutes with NBSS session service packets
Dear All, Sorry to bothering you. I am beginner to samba. Please help me regarding the below problem. while I am testing my NAS disk standby(sleep) mode, I noticed windows xp (Professional version 2002 SP2) PC on the network is sending NBSS session service packets for every 30 minutes to NAS and this causing the parent smbd in NAS to spawn worker smbd and this smbd is accessing some of the files on disk( group_mapping.tdb,account_policy.tdb,shar_info.tdb) and causing spinup. On this XP computer I have closed all network connections and already disabled the automatic searching for new network shares. Nevertheless, every 30 minutes the system idle process (PID 0) initiates a connection the to netbios-ssn port on the NAS. I have tried with another windows xp PC .it is also behaving the same manner. Windows vista ultimate is not giving any problem like this. I have two questions here?. 1) Why and for what windows xp is sending these packets?. 2) Is there a way to handle these packets at NAS samba side?. like patches are available, Thanks in advance. Suresh -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Windows xp is waking up NAS for every 30 minutes with NBSS session service packets
Thanks ..I have tried both like tweaking xp and disabling automatic searching for folders and printers. Windows system idle process(PID=0) is still sending NBSS packing trying to connect netbios-ssn of NAS -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba