Re: [Samba] Veto files only at one location

2009-03-25 Thread Kevin Bailey

Jeremy Allison wrote:

On Tue, Mar 24, 2009 at 03:46:31PM +, Kevin Bailey wrote:
  

This *must* be do-able!

If I want to veto a single directory at the root of the users home  
directory


i.e.

/home/user/Maildir

I can with

veto files = /Maildir/

However,  this prevents the user from being able to create  
directories/files with that name *anywhere* in the directory structure.


Is there a way I can set 'veto files' to only veto one particular directory?



No, that was never part of the design of the parameter, sorry.
The code would need to be expanded to do regexp processing
in order to do this. Possible, but no one has yet needed it.

Jeremy.

  


Thanks for the definitive reply.

If the user tries to create a directory (or file) with the vetoed name 
then they get an error from Windows.  The folder  looks like it has a 
name of 'New Folder' initially but this disappears when the view is 
refreshed.


So in other words - as it stops the user from being able to create a 
folder/file with that name it kinda fails safe.


Thanks - and well done for the column in Linux Format - always a good read.

Kevin
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Veto files only at one location

2009-03-24 Thread Kevin Bailey

This *must* be do-able!

If I want to veto a single directory at the root of the users home 
directory


i.e.

/home/user/Maildir

I can with

veto files = /Maildir/

However,  this prevents the user from being able to create 
directories/files with that name *anywhere* in the directory structure.


Is there a way I can set 'veto files' to only veto one particular directory?

Thanks,

Kev
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Postfix and Samba best practice

2009-03-16 Thread Kevin Bailey


Hi,

We have a server which is going to be a Samba file server and a Postfix 
server where the users will access their mail over IMAP.


We normally prefer to use Maildir storage as it seems to be recommended 
over mailbox - for me, for example, I am subscribed to a dozen or so 
lists and have tens if not hundreds of thousands of emails on the 
server.  The combination of Postfix and Courier-imap has worked 
perfectly for a couple of years.


So - in /etc/postfix/main.cf we set

mailbox_command = /usr/bin/procmail -a $EXTENSION 
DEFAULT=$HOME/Maildir/ MAILDIR=$HOME/Maildir


to put the mail under my home directory and to enable procmail to work.  
(I can then use procmail to sort mail into subdirectories etc).


Now, if I set up Samba as default on Debian it shares out my home 
directory to Windows clients.  If I allow the viewing of hidden files 
then the .Maildir directory shows up on Windows where it can be explored 
or even deleted.


In my case it's not a problem because I won't (intentionally) delete 
that folder - but we're setting up a server for a client with normal users.


So, we want to separate the Maildir from the directory being shared out 
over Samba.


My question is this:

Is it better to store the mail somewhere else entirely - i.e. 
/var/mail/users or something or a new home directory (/home/mailstorage) 
or something?  In which case how best to set up permissions?  It seems 
that when the mail is stored it gets the username as the owner:group.  
This should mean that logging in over imap should allow that user to 
read/manipulate mail.


Or should I try to share out a different directory via Samba.  I.e. 
Leave the mail in /home/username/.Maildir and get Samba to share out 
/home/username/samba for example?


Obviously, I can bodge this around with permissions etc but would prefer 
any links to best practice so that we can implement the best way on all 
future installs.


BTW - I've (sorry!) cross posted this to the Samba/Postfix list to see 
what both sides say - hope that's OK.


Regards,

Kevin




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Postfix and Samba best practice

2009-03-16 Thread Kevin Bailey


Or should I try to share out a different directory via Samba.  I.e. 
Leave the mail in /home/username/.Maildir and get Samba to share out 
/home/username/samba for example?



You can also continue your current setup and just use Samba's veto files
directive in the home directory share to hide whatever directory
contains the user's mail

[homedir]
  ...
  veto files = /.Maildir/
  ...
  
  

Brilliant - thanks!

I did have that at the back of my mind - but thought of blocking 
directories by name might cause a problem if a user decides to create a 
directory called Maildir - but of course - your solution only stops the 
viewing of that one particular directory.


This means that all data is in the /home partition which can be set as a 
large one - permissions are fine - and courier-imap works without any 
tweaking.



Thanks again!

Kev
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] namecache_shutdown: Couldn't close namecache on top of gencache.

2009-03-16 Thread Kevin Bailey

Hi,

When mounting a drive on a Samba server version - 3.0.24-6etch10

with


smbmount //127.0.0.1/sagedata3 testmnt -o username=rbailey%password

I get the warning


namecache_shutdown: Couldn't close namecache on top of gencache.

which makes no sense to me and apart from a couple of other postings 
reporting the error does not appear much in Google searches.


Obviously, we prefer things to be nice and quiet - any pointers.

And BTW - I'm mounting a localhost share as I'm testing the Samba is 
running OK on the server before mounting over the network.


Thanks,

Kevin
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Postfix and Samba best practice

2009-03-15 Thread Kevin Bailey

Hi,

We have a server which is going to be a Samba file server and a Postfix 
server where the users will access their mail over IMAP.


We normally prefer to use Maildir storage as it seems to be recommended 
over mailbox - for me, for example, I am subscribed to a dozen or so 
lists and have tens if not hundreds of thousands of emails on the 
server.  The combination of Postfix and Courier-imap has worked 
perfectly for a couple of years.


So - in /etc/postfix/main.cf we set

mailbox_command = /usr/bin/procmail -a $EXTENSION 
DEFAULT=$HOME/Maildir/ MAILDIR=$HOME/Maildir


to put the mail under my home directory and to enable procmail to work.  
(I can then use procmail to sort mail into subdirectories etc).


Now, if I set up Samba as default on Debian it shares out my home 
directory to Windows clients.  If I allow the viewing of hidden files 
then the .Maildir directory shows up on Windows where it can be explored 
or even deleted.


In my case it's not a problem because I won't (intentionally) delete 
that folder - but we're setting up a server for a client with normal users.


So, we want to separate the Maildir from the directory being shared out 
over Samba.


My question is this:

Is it better to store the mail somewhere else entirely - i.e. 
/var/mail/users or something or a new home directory (/home/mailstorage) 
or something?  In which case how best to set up permissions?  It seems 
that when the mail is stored it gets the username as the owner:group.  
This should mean that logging in over imap should allow that user to 
read/manipulate mail.


Or should I try to share out a different directory via Samba.  I.e. 
Leave the mail in /home/username/.Maildir and get Samba to share out 
/home/username/samba for example?


Obviously, I can bodge this around with permissions etc but would prefer 
any links to best practice so that we can implement the best way on all 
future installs.


BTW - I've (sorry!) cross posted this to the Samba/Postfix list to see 
what both sides say - hope that's OK.


Regards,

Kevin


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Tunneling over SSH

2009-02-25 Thread Kevin Bailey

Michael Heydon wrote:

Kevin Bailey wrote:
Also, we had trouble setting up a VPN from his house - can't remember 
the details apart from the fact that it was BT's fault!


Was this using OpenVPN or PPTP? OpenVPN is much more flexible than 
PPTP and will happily work across all but the most stubborn 
connections  (also it doesn't rely on GRE which is what has caused me 
the most VPN headaches).




It was OpenVPN/IPSec.  I think it was to do with the router supplied by 
BT - I would have replaced it but couldn't for some reason.


I haven't used Sage before, but if it is opening the data files 
directly off a share (which would seem to be the case) then you may 
run into issues using it remotely. I have had users insist on running 
MYOB and Quicken over VPNs, if they are lucky it is almost unusable 
and they give up, a couple have had issues with file corruption.




This is why I was hoping to use SMB tunnelled over SSH - that way it is 
using Samba for the file sharing.  But you're making a good point.  
Initially I shared out the files over FTP and set up Netdrive on the PC 
- and this resulted in corrupted data.


I've tried various ways to enable users to connect their Windows PC to a 
network share.


Basically, the office gets assigned an 8 IP address block - their PC's 
are then behind a router on one of the addresses - and the server is 
assigned another address.  That way the Laptops are set to access the 
server via it's internet static IP address.  The nice thing is that the 
users then access the server in exactly the same way if they are in the 
office or elsewhere connected to the internet.


Of course - when they're in the office they get very fast access to the 
server and the traffic never leaves the building.


We've had reasonable success with Netdrive accessing FTP shares from 
PC's for file reading and saving.


I've tried SSH - no joy, SFTPShare is buggy and crashes Windows 
explorer.  Also, tried using encrypted data/comms channels over FTP 
using Vsftpd - again problems with the Windows client.


Have you considered RDP? This would allow quick and easy access from 
most connections without any setup, it would be faster than pulling a 
large access file over a VPN and would be immune to corruption as a 
result of interrupted connections.





That is a very good idea and will provide a fallback.  What I'm thinking 
of doing is to run tests on a test server here (old laptop) and see how 
the connection of Samba over SSH fares - but you're right in general.  
There are two problems here - Sage using crappy Access database files 
and then crappy MS networking.


Will update the list later with progress.

Thanks,

Kevin



*Michael Heydon - IT Administrator *
micha...@jaswin.com.au mailto:micha...@jaswin.com.au




--
*Kevin Bailey*
Director/Programmer - Freeway Projects Limited
Web: www.freewayprojects.com http://www.freewayprojects.com/
Email: kbai...@freewayprojects.com mailto:kbai...@freewayprojects.com
Phone: +44 (0)1752 267090
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba tunneling over SSH - does the ssh login count RE permissions

2009-02-25 Thread Kevin Bailey

Kevin Bailey wrote:

Michael Heydon wrote:

Kevin Bailey wrote:
Also, we had trouble setting up a VPN from his house - can't 
remember the details apart from the fact that it was BT's fault!


Was this using OpenVPN or PPTP? OpenVPN is much more flexible than 
PPTP and will happily work across all but the most stubborn 
connections  (also it doesn't rely on GRE which is what has caused me 
the most VPN headaches).




It was OpenVPN/IPSec.  I think it was to do with the router supplied 
by BT - I would have replaced it but couldn't for some reason.


I haven't used Sage before, but if it is opening the data files 
directly off a share (which would seem to be the case) then you may 
run into issues using it remotely. I have had users insist on running 
MYOB and Quicken over VPNs, if they are lucky it is almost unusable 
and they give up, a couple have had issues with file corruption.




This is why I was hoping to use SMB tunnelled over SSH - that way it 
is using Samba for the file sharing.  But you're making a good point.  
Initially I shared out the files over FTP and set up Netdrive on the 
PC - and this resulted in corrupted data.


I've tried various ways to enable users to connect their Windows PC to 
a network share.


Basically, the office gets assigned an 8 IP address block - their PC's 
are then behind a router on one of the addresses - and the server is 
assigned another address.  That way the Laptops are set to access the 
server via it's internet static IP address.  The nice thing is that 
the users then access the server in exactly the same way if they are 
in the office or elsewhere connected to the internet.


Of course - when they're in the office they get very fast access to 
the server and the traffic never leaves the building.


We've had reasonable success with Netdrive accessing FTP shares from 
PC's for file reading and saving.


I've tried SSH - no joy, SFTPShare is buggy and crashes Windows 
explorer.  Also, tried using encrypted data/comms channels over FTP 
using Vsftpd - again problems with the Windows client.


Have you considered RDP? This would allow quick and easy access from 
most connections without any setup, it would be faster than pulling a 
large access file over a VPN and would be immune to corruption as a 
result of interrupted connections.





That is a very good idea and will provide a fallback.  What I'm 
thinking of doing is to run tests on a test server here (old laptop) 
and see how the connection of Samba over SSH fares - but you're right 
in general.  There are two problems here - Sage using crappy Access 
database files and then crappy MS networking.


Will update the list later with progress.

Thanks,

Kevin



*Michael Heydon - IT Administrator *
micha...@jaswin.com.au mailto:micha...@jaswin.com.au








Hiya,

Managed to get Vista SP1 to connect to a Samba server - used the tricks here

http://social.technet.microsoft.com/Forums/en-US/itprovistanetworking/thread/d30d3c98-58c5-47f6-b5a5-f5620882020d/

but although the shares are showing the files and folders are not being 
listed.  Now this is a non-authenticated Samba setup - i.e. a basic one 
for 2-3 users where they wanted easy access to all shares/files - so I 
set up up with SHARE access and guest OK to everything.  That way the 
users did not need to authenticate.


Now they have grown they want to authenticate to protect certain shares 
so I have to set up USER sharing.


My question is - do you think the SHARE access is responsible for 
accessing over SSH tunnel not showing the files/folders?


Kev

--
*Kevin Bailey*
Director/Programmer - Freeway Projects Limited
Web: www.freewayprojects.com http://www.freewayprojects.com/
Email: kbai...@freewayprojects.com mailto:kbai...@freewayprojects.com
Phone: +44 (0)1752 267090
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Tunneling over SSH

2009-02-24 Thread Kevin Bailey

Hi,

Has anyone successfully got a Windows PC to access Samba over an SSH 
tunnel.  This first of all worked immediately - but now seems to have 
stopped.


I've tried with using putty and myentunnel to set up the tunnel - and 
these are working when I test against a web server.


I've followed instructions at:

http://www.security-hacks.com/2007/05/18/tunneling-smb-over-ssh-secure-file-sharing

This has set up another loopback device which means that the Windows 
machine can carry on with its own file sharing.


This is particularly important as my client needs to access Sage 
Accounts data files which are Access files - I want them to continue 
accessing the data using Samba - but as I need to put the server on to 
the internet I need to tunnel the Samba traffic over ssh for security.


Any help, pointers gratefully received.

Kevin Bailey
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Tunneling over SSH

2009-02-24 Thread Kevin Bailey

Kevin Bailey wrote:

Hi,

Has anyone successfully got a Windows PC to access Samba over an SSH 
tunnel.  This first of all worked immediately - but now seems to have 
stopped.


I've tried with using putty and myentunnel to set up the tunnel - and 
these are working when I test against a web server.


I've followed instructions at:

http://www.security-hacks.com/2007/05/18/tunneling-smb-over-ssh-secure-file-sharing 



This has set up another loopback device which means that the Windows 
machine can carry on with its own file sharing.


This is particularly important as my client needs to access Sage 
Accounts data files which are Access files - I want them to continue 
accessing the data using Samba - but as I need to put the server on to 
the internet I need to tunnel the Samba traffic over ssh for security.


Any help, pointers gratefully received.

Kevin Bailey

To reply to my own question...

The best thread I've found RE this issue is

http://social.technet.microsoft.com/Forums/en-US/itprovistanetworking/thread/d30d3c98-58c5-47f6-b5a5-f5620882020d/#page:1

Basically, MS have been childish again and are causing vast amounts of 
grief and costs for businesses.


I have trouble viewing the contents of the folders - but this is 
probably a Samba issue with the fact that the request is coming from an 
unusual IP address - I'll look into it further - these are the logs.


[2009/02/24 14:25:28, 3] smbd/vfs.c:vfs_init_default(219)
 Initialising default vfs hooks
[2009/02/24 14:25:28, 3] smbd/sec_ctx.c:set_sec_ctx(241)
 setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/02/24 14:25:28, 3] smbd/service.c:make_connection_snum(950)
 127.0.0.1 (127.0.0.1) connect to service IPC$ initially as user nobody 
(uid=65534, gid=65534) (pid 16262)

[2009/02/24 14:25:28, 3] smbd/sec_ctx.c:set_sec_ctx(241)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/02/24 14:25:28, 2] smbd/reply.c:reply_tcon_and_X(711)
 Serving IPC$ as a Dfs root
[2009/02/24 14:25:28, 3] smbd/reply.c:reply_tcon_and_X(716)
 tconX service=IPC$
[2009/02/24 14:25:28, 3] smbd/process.c:process_smb()
 Transaction 2 of length 112
[2009/02/24 14:25:28, 3] smbd/process.c:switch_message(915)
 switch message SMBtrans2 (pid 16262) conn 0x83f0cd0
[2009/02/24 14:25:28, 3] smbd/sec_ctx.c:set_sec_ctx(241)
 setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/02/24 14:25:28, 3] smbd/msdfs.c:get_referred_path(510)
 get_referred_path: Invalid hostname 10.0.0.1 in path \10.0.0.1\sagedata
[2009/02/24 14:25:28, 3] smbd/error.c:error_packet(146)
 error packet at smbd/trans2.c(4955) cmd=50 (SMBtrans2) 
NT_STATUS_NO_SUCH_FILE

[2009/02/24 14:25:28, 3] smbd/process.c:process_smb()
 Transaction 3 of length 112
[2009/02/24 14:25:28, 3] smbd/process.c:switch_message(915)
 switch message SMBtrans2 (pid 16262) conn 0x83f0cd0
[2009/02/24 14:25:28, 3] smbd/msdfs.c:get_referred_path(510)
 get_referred_path: Invalid hostname 10.0.0.1 in path \10.0.0.1\sagedata
[2009/02/24 14:25:28, 3] smbd/error.c:error_packet(146)
 error packet at smbd/trans2.c(4955) cmd=50 (SMBtrans2) 
NT_STATUS_NO_SUCH_FILE





Kev

--
*Kevin Bailey*
Director/Programmer - Freeway Projects Limited
Web: www.freewayprojects.com http://www.freewayprojects.com/
Email: kbai...@freewayprojects.com mailto:kbai...@freewayprojects.com
Phone: +44 (0)1752 267090
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Tunneling over SSH

2009-02-24 Thread Kevin Bailey
Thanks for the offer of sending the script off-list - that would be good 
because I'm still struggling to get the XP machines to connect.


It was strange because when I first carried out the steps in the 
instructions the shares showed up straight away - even mapped the share 
to a drive letter and connected Sage to the data file on the share.  
That was on Friday.  Then I went back on Monday and nothing would show 
the shares!!!


I'm determined to get to the root of this because it is such a useful 
feature for clients - effectively the files are still accessed over 
Samba.  This is probably preferable to sharing the data files out over 
ssh or FTP using buggy little programs such as SftpShare or Netdrive.


Thanks again,

Kevin

RUTH, JONATHAN C wrote:

I successfully connect to Samba using plink (part of the PuTTY family of apps). 
 I've also written a script to map the Samba share under WinXP.

I can send you the bat files off list or post them if there's interest.

Jon

  

Kevin Bailey wrote:


Hi,

Has anyone successfully got a Windows PC to access Samba over an SSH
tunnel.  This first of all worked immediately - but now seems to have
stopped.
  


--

==

 Jon Ruth, Ph.D.
 Manager, FlexMatters Accelerator
 LCI, Kent State University
 Kent, OH   44242-0001   U.S.A.

==

 NOTICE:  This message and any attached files are
 intended only for the use of the addressee
 indicated above, and may contain information that
 is privileged or otherwise confidential.  If you
 are not the intended recipient, you are hereby
 notified that any dissemination, review, or use of
 this message, files, or other information contained
 herein is strictly prohibited.  If you have
 received this message in error, please notify the
 sender immediately by phone, fax, or e-mail.
 Please return this message with all attachments to
 the sender via e-mail.  Please delete any copies
 created or stored on your computer or server.

 Thank you.

==

  



--
*Kevin Bailey*
Director/Programmer - Freeway Projects Limited
Web: www.freewayprojects.com http://www.freewayprojects.com/
Email: kbai...@freewayprojects.com mailto:kbai...@freewayprojects.com
Phone: +44 (0)1752 267090
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Tunneling over SSH

2009-02-24 Thread Kevin Bailey

Mike Messick wrote:

Hi Kevin,

You might take a look at openvpn instead - http://openvpn.net.

I've had great success for 3+ years using openvpn on my samba server and
having windows machines accessing shares via the vpn link.  Since openvpn
can use udp as well it provides a much more resilient transport for samba
traffic (At the cost of some throughput I'm sure.)

Hope this helps,
-Mike.

==
Mike Messick   Dona nobis pacem  rm -rf /bin/laden
PGP Key Fingerprint:   email: mi...@alaska.net 
2048/0x57318496 053B 412B 82FC 3808 E141  CDCD 74AE 01C5 5731 8496


On Tue, 24 Feb 2009, Kevin Bailey wrote:

  

Hi,

Has anyone successfully got a Windows PC to access Samba over an SSH 
tunnel.  This first of all worked immediately - but now seems to have 
stopped.


I've tried with using putty and myentunnel to set up the tunnel - and 
these are working when I test against a web server.


I've followed instructions at:

http://www.security-hacks.com/2007/05/18/tunneling-smb-over-ssh-secure-file-sharing

This has set up another loopback device which means that the Windows 
machine can carry on with its own file sharing.


This is particularly important as my client needs to access Sage 
Accounts data files which are Access files - I want them to continue 
accessing the data using Samba - but as I need to put the server on to 
the internet I need to tunnel the Samba traffic over ssh for security.


Any help, pointers gratefully received.

Kevin Bailey
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba




  
Yep - thanks for that.  We've used VPN's successfully before - but the 
client wants to attach from various locations and setting up VPN's is 
too much.


Also, we had trouble setting up a VPN from his house - can't remember 
the details apart from the fact that it was BT's fault!


Cheers,

Kevin

--
*Kevin Bailey*
Director/Programmer - Freeway Projects Limited
Web: www.freewayprojects.com http://www.freewayprojects.com/
Email: kbai...@freewayprojects.com mailto:kbai...@freewayprojects.com
Phone: +44 (0)1752 267090
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Device WinDfs error

2007-05-04 Thread Kevin Bailey

Jeremy Allison wrote:


On Sun, Apr 29, 2007 at 07:59:00PM +0100, Kevin Bailey wrote:
 


\Device\WinDfs\H:00186bf9\psctpdc\bpeters\thunderbird\ImapMail\10.1.1.10\INBOX.msf
The data has been lost.
This error may be caused by a failure of your computer hardware or 
network connection.


[2007/04/23 14:38:26, 0] lib/util_sock.c:write_data(562)
write_data: write failure in writing to client 10.1.1.144. Error 
Connection reset by peer

[2007/04/23 14:38:26, 0] lib/util_sock.c:send_smb(769)
Error writing 4 bytes to client. -1. (Connection reset by peer)
[2007/04/23 14:57:23, 0] lib/util_sock.c:read_data(534)
read_data: read failure for 4 bytes to client 10.1.1.144. Error = 
Connection timed out
   



Your tcp connection failed. We (smbd) don't know why.

Check your networking hardware + cables.

Jeremy.
 




Thanks for the reply.

This error has occured since we upgraded to Samba 3 but we also turned off 
roaming profiles at the same time.


Since the Thunderbird profile is now stored in the users H: drive and not being 
downloaded from the server to the PC at logon it sounds like Thunderbird is 
having a glitch.


(We don't want to turn profiles back on as loading the NTConfig.POL file gives 
us all the control we need).


Thanks again for all the hard work!

Kevin





Jeremy Allison wrote:


On Sun, Apr 29, 2007 at 07:59:00PM +0100, Kevin Bailey wrote:
 


\Device\WinDfs\H:00186bf9\psctpdc\bpeters\thunderbird\ImapMail\10.1.1.10\INBOX.msf
The data has been lost.
This error may be caused by a failure of your computer hardware or 
network connection.


[2007/04/23 14:38:26, 0] lib/util_sock.c:write_data(562)
write_data: write failure in writing to client 10.1.1.144. Error 
Connection reset by peer

[2007/04/23 14:38:26, 0] lib/util_sock.c:send_smb(769)
Error writing 4 bytes to client. -1. (Connection reset by peer)
[2007/04/23 14:57:23, 0] lib/util_sock.c:read_data(534)
read_data: read failure for 4 bytes to client 10.1.1.144. Error = 
Connection timed out
   



Your tcp connection failed. We (smbd) don't know why.

Check your networking hardware + cables.

Jeremy.
 



--
Kevin Bailey
IT Consultant

Email: [EMAIL PROTECTED]
Tel: 01752 268923
W: www.freewayprojects.com

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problem when importing via tdbedit and then picking up NTConfig.POL

2007-05-04 Thread Kevin Bailey

Hi,

Just found this out - is it a bug which I should register or is this by design?

We had been running a Samba 2.2 server for a few years with a domain called PSCT 
- everybody very happy (well done guys!).  Installed a new server with Samba 3 
based on Debian Etch.  The new server was set as the domain PSCT2 to keep things 
clear.


Copied all data across to the new server. 

The new server has a tdbsam back end - and the accounts from the old server were 
imported using tdbedit (see man tdbedit) were imported.  So tdbedit was used to 
import the records from the smbpasswd file from the old server.


What happened was that the user accounts in the tdbsam database were set up with 
the old PSCT domain and not the domain of the new server which is PSCT2.  And 
tdbedit can not be used to change the Domain value.


The users logons would still work - but

but - when users logged on they would not pick up the NTConfig.POL file and 
load it.

What I had to do was to use smbpasswd to delete each account individually and 
then readd them.  It would then show that the acounts were now created with the 
PSCT2 domain value.


And NTConfig.POL would then be picked up.

(BTW - I used smbpasswd and not tdbedit to delete/add the accounts as using 
smbpasswd seemed to keep the original UID at the end of the SID.  Maybe it was 
picking up something from /etc/passwd. This helped because it meant the users 
used the same local profile on their PC's as when they forst logged on to the 
new server/domain.  BTW - profiles are not used).


Is this something I should register as a bug or is it by design?

Kevin
**

--
Kevin Bailey
IT Consultant

Email: [EMAIL PROTECTED]
Tel: 01752 268923
W: www.freewayprojects.com

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Strange file listing with mounted REV drive

2007-05-04 Thread Kevin Bailey

Hi,

A client has an Iomega REV drive installed on a PC and this is used for 
the off-site backups.  This drive has disks left in and then that drive 
on the PC is shared out.


I mount the share with

mount -t cifs //10.1.1.20/XP61REV /mnt/xp61 -o 
username=user,password=password,rw


and this is mounted on to a Debian Etch / Samba 3.0.24-6 machine.

Now when I 'ls' or 'find' this share it only returns 43 file names.  If 
I delete a couple files at the begining of the list (alphanumerically) 
then the next 43 are shown.


I need to delete all of the existing files on the share before I then 
copy across the latest backup copies.


To delete all of the files I run

# find /mnt/xp61 -type f -print0 | xargs -0 --max-args=1 -r --verbose 
/bin/rm
# find /mnt/xp61 -type f -print0 | xargs -0 --max-args=1 -r --verbose 
/bin/rm


several times to make sure all files have been deleted.

OK - so I have a workaround but thought this needed clarifying.

Cheers,

Kevin


--
Kevin Bailey
IT Consultant

Email: [EMAIL PROTECTED]
Tel: 01752 268923
W: www.freewayprojects.com

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] CIFS VFS: close with pending writes

2007-05-03 Thread Kevin Bailey

During the night I mount a Win2K share using the -t cifs option and tar/gzip 
files across from the Etch/Samba 3 server to the Windows server.

The kern.log is showing the following errors - could someone point me towards 
an explanation please?


May  2 02:00:45 psctpdc kernel:  CIFS VFS: close with pending writes
May  2 05:12:04 psctpdc kernel:  CIFS VFS: close with pending writes
May  3 01:54:49 psctpdc kernel:  CIFS VFS: close with pending writes
May  3 02:56:55 psctpdc kernel:  CIFS VFS: close with pending writes
May  3 06:48:13 psctpdc kernel:  CIFS VFS: close with pending writes


Thanks,

Kevin

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] tdbedit imports from smbpasswd ok but sets domain value as old domain

2007-05-01 Thread Kevin Bailey

I tried to send this before but it might need re-sending...


Hi,

Just found this out - is it a bug which I should register or is this by design?

We had been running a Samba 2.2 server for a few years with a domain called PSCT 
- everybody very happy (well done guys!).  Installed a new server with Samba 3 
based on Debian Etch.  The new server was set as the domain PSCT2 to keep things 
clear.


Copied all data across to the new server. 

The new server has a tdbsam back end - and the accounts from the old server were 
imported using tdbedit (see man tdbedit).  So tdbedit was used to 
import the records from the smbpasswd file from the old server.


What happened was that the user accounts in the tdbsam database were set up with 
the old PSCT as the value for domain and not the domain of the new server which is PSCT2.  And 
tdbedit can not be used to change the Domain value.


The users logons would still work - but

but - when users logged on they would not pick up the NTConfig.POL file and 
load it.

What I had to do was to use smbpasswd to delete each account individually and 
then re-add them.  It would then show that the acounts were now created with the 
PSCT2 domain value.


And NTConfig.POL would then be picked up.

(BTW - I used smbpasswd and not tdbedit to delete/add the accounts as using 
smbpasswd seemed to keep the original UID at the end of the SID.  Maybe it was 
picking up something from /etc/passwd. This helped because it meant the users 
used the same local profile on their PC's as when they first logged on to the 
new server/domain.  BTW - profiles are not used).


Is this something I should register as a bug or is it by design?

Kevin
**


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Device WinDfs error

2007-04-29 Thread Kevin Bailey

Hi,

Have recently upgraded from Samba 2.2 on Debian Woody to Samba 3.0.24-6 
on Debian Etch.


Some PC's have now reported errors similar to this one.

Windows - delay write failed.
Windows was unable to save all the data for the file
\Device\WinDfs\H:00186bf9\psctpdc\bpeters\thunderbird\ImapMail\10.1.1.10\INBOX.msf
The data has been lost.
This error may be caused by a failure of your computer hardware or 
network connection.



This seems to be related to when the users are using Thunderbird.  
Thunderbird on each PC is set up to use a profile which is stored under 
the users H: drive which is the home folder supplied by Samba.  All the 
profiles are set to pick up mail over IMAP and the actual mail is stored 
under a Maildir in each users home directory.


Funny thing is that I can't see an INBOX.msf file anywhere.  I'm not 
sure what Windows is trying to do here.


The server runs dual SCSI HDD's as RAID 1 from an adaptec SCSI RAID 2110s.

uname -a gives
Linux psctpdc 2.6.18-4-486 #1 Mon Mar 26 16:39:10 UTC 2007 i686 GNU/Linux

and this is the output from the samba log file which I fairly sure is 
the right PC on the day when the error appeared.



Thanks for any help.

[2007/04/23 08:42:11, 1] smbd/service.c:make_connection_snum(950)
 xp4 (10.1.1.144) connect to service netlogon initially as user bpeters 
(uid=1007, gid=1007) (pid 25434)

[2007/04/23 08:42:14, 1] smbd/service.c:make_connection_snum(950)
 xp4 (10.1.1.144) connect to service bpeters initially as user bpeters 
(uid=1007, gid=1007) (pid 25434)

[2007/04/23 08:42:24, 1] smbd/service.c:make_connection_snum(950)
 xp4 (10.1.1.144) connect to service bksb initially as user bpeters 
(uid=1007, gid=1007) (pid 25434)

[2007/04/23 08:42:25, 1] smbd/service.c:make_connection_snum(950)
 xp4 (10.1.1.144) connect to service public initially as user bpeters 
(uid=1007, gid=1007) (pid 25434)

[2007/04/23 08:50:00, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 08:50:00, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 08:52:46, 1] smbd/service.c:close_cnum(1150)
 xp4 (10.1.1.144) closed connection to service public
[2007/04/23 08:52:46, 1] smbd/service.c:close_cnum(1150)
 xp4 (10.1.1.144) closed connection to service bksb
[2007/04/23 08:52:46, 1] smbd/service.c:close_cnum(1150)
 xp4 (10.1.1.144) closed connection to service netlogon
[2007/04/23 09:02:56, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 09:02:56, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 09:07:45, 1] smbd/service.c:make_connection_snum(950)
 xp4 (10.1.1.144) connect to service bksb initially as user bpeters 
(uid=1007, gid=1007) (pid 25434)

[2007/04/23 09:16:01, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 09:16:01, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 09:18:01, 1] smbd/service.c:close_cnum(1150)
 xp4 (10.1.1.144) closed connection to service bksb
[2007/04/23 09:29:03, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 09:29:03, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 09:42:05, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 09:42:05, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 09:55:01, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 09:55:01, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 10:08:00, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 10:08:00, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 10:21:00, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 10:21:00, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 10:34:00, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 10:34:00, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 10:47:00, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 10:47:00, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 11:00:00, 0] printing/pcap.c:pcap_cache_reload(159)
 Unable to open printcap file /etc/printcap for read!
[2007/04/23 11:00:00, 

[Samba] kernel: smb_proc_readdir_long: error=-2, breaking

2007-04-29 Thread Kevin Bailey

Hi,

Found this in the kernel.log

psctpdc:/var/log/samba# tail /var/log/kern.log
Apr 29 08:18:05 psctpdc kernel: smb_proc_readdir_long: error=-2, breaking

The server may have been doing some copying/backups at the time.

Is it anything which needs action?

Thanks,

Kevin
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Part of a domain connected via VPN - is this feasible.

2007-02-16 Thread Kevin Bailey

Hi,

A client is setting up a branch office a couple of miles away from the 
main office.


The branch office and the main office will be connected by a router to 
router IpSec VPN at about 1MB per sec.  (Unfortunately this is about the 
only option they have for connection speed.  The next fastest available 
connection is about £3,000 per month).


They want 4 PC's in the branch office to be able to connect to the 
domain at the main office. 

Say I set up the PDC server to use LDAP for its SAM.  And then say I 
install a BDC at the branch office to handle authentication and this BDC 
uses either the PDC's LDAP or its own slave LDAP server for its backend.


Is this setup feasible?

I've read through my copies of Samba3 by example and The official Samba 
3 but can't see any pointers.


Does anyone have experience of the sort of setup I am looking at?

Thanks,

Kevin
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Windows interacting with SAMBA share

2005-10-22 Thread Kevin Bailey
not sure if this is help or not but you may find this is a limitation of 
windows.


when i came across this issue i solved it by breaking down the 2GB file.

it was a tarred/gzipped backup of the /home directory - i wrote a script 
which looped through the directories inside the home directory and 
zipped up the individual directories.


the nice extra on this is that the user can more easily retreive an 
archive version of a file.


HTH,

kevin

Jeremy Hatter - BIA wrote:


Hi,

My company has a Samba [3.0] share on a Debian Linux 3.0 [Kernel 2.6]
machine and we are trying to copy a large file [2GB] from a Windows
machine to the Samba share.  When we try to do this, it only copies 2GB
of the information.  We were previously having a similar issue when
transfering a large file [2GB] from Linux to a Windows share [mounted
as smbfs], but fixed that with the 'lfs' option in the mount command.
Does anyone know what settings need changed to allow the Samba share to
accept large files from Windows?  I've searched the internet for a
couple days now and haven't found a solution.  Thanks for your help.

Jeremy

_
Jeremy Hatter
Business Intelligence Associates, Inc.

Voice: 212-240-2282
Fax: 212-240-2298
[EMAIL PROTECTED]

http://www.biaprotect.com
blocked::/exchweb/bin/redir.asp?URL=http://www.biaprotect.com/ 
Digital Discovery Services  Computer Forensics


This message may contain confidential and/or legally privileged
information intended only for the use of the individual(s) named on the
To:, Cc: and Bcc: lines. If you are not one of the intended
recipient(s), then you are hereby notified that any disclosure, copying,
distribution or the taking of any action in reliance on the contents of
this email transmission is strictly prohibited. If you have received
this communication in error, please delete the email in its entirety and
call or email us immediately so that we may take appropriate steps to
correct the problem at no cost to you. Even if this message has reached
you in error, sender does not in any way waive confidentiality or
privilege. Thank you.

 



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] smb_request: result -104, setting invalid

2005-09-06 Thread Kevin Bailey
smb_request: result -104, setting invalid

this repeatedly occurs in the messages log and the kernel log.

does anyone know how i can look this up and find out what it means?

samba appears to be working fine but i'd like to get to the bottom of
it.

cheers,

kev

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] XP Pro and windows 98 clients on single samba 2.2 domain

2005-03-29 Thread Kevin Bailey
hi,

been running samba 2.2.3 (debian stable) and using it with windows 98
clients no problem.  domain logins, logon.bat and config.pol stuff all
working.

the customer now wants to add XP Pro PC's to the domain.

now, after following the instructions in 'Using Samba' I have set up an
XP PC to log on to a test server.  once the PC has been added to the
domain the users can log in no problem.

however, how should i run win98 and XP clients at the same time on the
main server?

should i create 2 logins for each user?  one for when they are using a
win98 machine and the other for XP.  how would i stop users logging in
with the wrong login?

could the users use a single login? the logon.bat file seems to work the
same on both systems.  the profile data goes into /home/samba-ntprof for
XP and /home/user1/.win_profile for win98 so is kept separate enough.

also - since we're using poledit and not group policies i can set the
machines up to pickup one config.pol file for win98 and a different one
for XP.

apparently there will only ever be win98 and XP Pro on the domain - and
win98 is being phased out.  there are a pair of servers (one acts as a
hot-swap backup) so maybe that gives some options.

any help/comments gratefully received.

-- 
Kevin Bailey

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba