RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help
You got it. I had Passwd: compat winbind don -Original Message- From: Dan Nuffer [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 06, 2003 11:07 AM To: MCCALL,DON (HP-USA,ex1) Cc: [EMAIL PROTECTED] Subject: Re: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help I think I've figured it out. It doesn't work if nsswitch.conf has got passwd: files nis winbind or passwd: files winbind nis But if it only has two modules listed: passwd: files winbind then passwd -r files works fine. -- Dan Nuffer MCCALL,DON (HP-USA,ex1) wrote: Hello Dan, Can you post the passwd line of your nsswitch.conf file? I am on 11.11, and passwd -r files username Works just fine for me, with winbind added to my passwd line in the /etc/nsswitch.conf file... Don -Original Message- From: Dan Nuffer [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 05, 2003 3:13 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help I've been trying to find a solution to passwd not working on HPUX 11 with a modified nsswitch.conf. (Interestingly, using the -r files switch works on Solaris, but not HPUX.) The two proposed workarounds I have seen (naming the module ldap and replacing the system one, or creating a wrapper for passwd that fiddles with the nsswitch.conf) aren't acceptable. I'm really hoping that HP has fixed this, but I wasn't able to locate an applicable patch on their site. If anyone knows of one, please point me to it! Thanks, Dan Nuffer MCCALL, DON (HP-USA,ex1) wrote: Hi Everyone, This whole problem with the password command not working when winbind is included as a method in the nsswitch.conf can probably be worked around by simply using the -r files (or -r nis or -r nisplus) switch. Take a look at the man page for passwd on HP-UX 11.x and see if this won't help you out. Hope this helps, Don -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help
Hello Dan, Can you post the passwd line of your nsswitch.conf file? I am on 11.11, and passwd -r files username Works just fine for me, with winbind added to my passwd line in the /etc/nsswitch.conf file... Don -Original Message- From: Dan Nuffer [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 05, 2003 3:13 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help I've been trying to find a solution to passwd not working on HPUX 11 with a modified nsswitch.conf. (Interestingly, using the -r files switch works on Solaris, but not HPUX.) The two proposed workarounds I have seen (naming the module ldap and replacing the system one, or creating a wrapper for passwd that fiddles with the nsswitch.conf) aren't acceptable. I'm really hoping that HP has fixed this, but I wasn't able to locate an applicable patch on their site. If anyone knows of one, please point me to it! Thanks, Dan Nuffer MCCALL, DON (HP-USA,ex1) wrote: Hi Everyone, This whole problem with the password command not working when winbind is included as a method in the nsswitch.conf can probably be worked around by simply using the -r files (or -r nis or -r nisplus) switch. Take a look at the man page for passwd on HP-UX 11.x and see if this won't help you out. Hope this helps, Don -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
FW: encrypt passwords=no, security=yes, samba 2.2.8, W2K user auth fails
Hi Tony, Another workaround would be to populate an smbpasswd file with all the names from your /etc/passwd file. But I realize this can be onerous. Samba has a script to help with this, mksmbpasswd.sh since you won't be needing passwords from this smbpasswd file, this would do it for you, I think if your distribution doesn't install this script, it can be found in the source at /usr/local/samba/source/script/mksmbpasswd.sh useage: cat /etc/passwd|./mksmbpasswd.sh /usr/local/samba/var/private/smbpasswd Hope this helps Don
RE: tmp files hanging around too long.
Hi Brad, We have noticed an extra open on files when you have 'map share modes = yes' in the smb.conf file; This causes a problem with deleting a file that you own IF the unix permissions are 0700. At least that's the symptom that came in for us; perhaps your tmp file issue is related. Can you do a testparm and see how that parameter is set on your system? Thanks, Don -Original Message- From: Bradley W. Langhorst [mailto:[EMAIL PROTECTED] Sent: Friday, March 28, 2003 15:51 To: [EMAIL PROTECTED] Subject: tmp files hanging around too long. I recently upgraded my a21 system to a22 runaway smbds seem to have disappeared. A new, less serious problem, has emerged. When a user keeps a word document open for a very long time i see a proliferation of locked temporary files (87 since yesterday) I'd like to help track down this problem but I'm not sure where to start... The logs show the the tmp files are opened and opened closed opened closed opened closed opened closed opened opened closed closed opened closed opened opened closed note that the last closed does not happen... this file is never used again - it just hangs around in the locked files is left on the disk until the program is closed. I know this looks like a word bug... but the client computers have not changed and I've only observed this phenomena since upgrading to alpha22. How can i help debug this? brad -- Bradley W. Langhorst [EMAIL PROTECTED]
RE: FW: encrypt passwords=no, security=yes, samba 2.2.8, W2K useraut h fails
Hi Dave, yeah, not pretty - should be fixed in the code. Just looking for a workaround that might be less undesireable than security = share (which was one of the options he was looking at in a private message to me). The point really is that we shouldn't even be LOOKING in the smbpasswd file when we specify encrypt passwords = no. But until we fix that, moving his users (from whatever user store he is using, nis, etc/passwd, etc) into the smbpasswd file, will avoid this particular windowsism. And with encrypt passwords = no, the smbpasswd is NOT being used for authentication, just verification of user existence for the 'map to guest=bad user' case... It's very convoluted code... not pretending to understand it all. (grin) That's why I cc'ed the list on the original problem and a (possibly poor) code diff change to fix it... Hopefully someone will look at that and say - well, HEY, that's dumb - lets fix it THIS way... Don -Original Message- From: David Collier-Brown -- Customer Engineering [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 10:34 To: MCCALL,DON (HP-USA,ex1); '[EMAIL PROTECTED]' Subject: Re: FW: encrypt passwords=no, security=yes, samba 2.2.8, W2K user aut h fails That's highly undesirable, as it breaks single-signon (unless you're an NT-cenric organization, which Sun isn't (:-)) --dave |Hi Tony, |Another workaround would be to populate an smbpasswd file with all the names | |from your /etc/passwd file. |But I realize this can be onerous. Samba has a script to help with this, |mksmbpasswd.sh |since you won't be needing passwords from this smbpasswd file, this would do |it for you, I think if your distribution doesn't install this script, |it |can be found in the source at /usr/local/samba/source/script/mksmbpasswd.sh | |useage: | |cat /etc/passwd|./mksmbpasswd.sh /usr/local/samba/var/private/smbpasswd | |Hope this helps |Don
RE: tmp files hanging around too long.
Oops, Brad; sorry - just noticed this is on 3.0; my problem is at 2.2.5 on HPUX with the map share modes parameter, not the 'share modes' parameter. Don -Original Message- From: Bradley W. Langhorst [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 11:37 To: MCCALL,DON (HP-USA,ex1) Cc: [EMAIL PROTECTED] Subject: RE: tmp files hanging around too long. On Tue, 2003-04-01 at 10:19, MCCALL,DON (HP-USA,ex1) wrote: Hi Brad, We have noticed an extra open on files when you have 'map share modes = yes' in the smb.conf file; This causes a problem with deleting a file that you own IF the unix permissions are 0700. At least that's the symptom that came in for us; perhaps your tmp file issue is related. Can you do a testparm and see how that parameter is set on your system? testparm -v shows share modes = Yes i also have oplocks turned off for this share - maybe that's a problem... I'll mess with both settings later today... brad -- Bradley W. Langhorst [EMAIL PROTECTED]
[Samba] RE: How to verify the domain secret is good or bad?
By default machine account passwords are changed ever 7 days in MS world. you can change this via the machine password timeout smb.conf parameter. Hope this helps, Don -Original Message- From: Joey Collins [mailto:[EMAIL PROTECTED] Sent: Sunday, March 30, 2003 20:10 To: Gerald (Jerry) Carter Cc: Chere Zhou; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: How to verify the domain secret is good or bad? Gerald (Jerry) Carter wrote: [snip] Also, sometimes I saw problems like wbinfo -t just says secret is bad, when all the daemons were running. It sure was good at some point before. Samba periodially changes the password on the server. secrets.tdb should be in sync with this. Hi, Why does Samba do this? Does the secret expire after a certain period of time or is this done as a safety precaution? thanks, Joey. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
FW: encrypt passwords=no, security=yes, samba 2.2.8, W2K user aut h fails
Sorry, forgot to cc the list...
Jerry, you made some comments around the code I modified, maybe you
could take a look at this and comment??
Don
-Original Message-
From: MCCALL,DON (HP-USA,ex1)
Sent: Monday, March 31, 2003 16:30
To: 'tony shepherd'; MCCALL,DON (HP-USA,ex1);
'[EMAIL PROTECTED]'
Subject: RE: encrypt passwords=no, security=yes, samba 2.2.8, W2K user
aut h fails
Hi Tony,
Problem appears to be a result of your having
null passwords = no
map to guest = bad user
AND
encrypt passwords = no
What appears to be happening is that reply.c only checks the smbpasswd file
to see if you have a 'bad user', and with encrypt passwords = NO, you won't
have an smbpasswd file, and it never goes to check the /etc/passwd or nis
store, etc, for this map to guest=bad user case.
Since it's ALREADY failed password_ok, what it's doing at this time is
trying to decide if it has the 'bad password' or the 'bad user' case, since
the return from password_ok doesn't differentiate. Since it never finds the
username in smbpasswd (since that doesn't exist), it assumes that the
problem is NOT a bad password, but a bad USER, and goes off to try to use
guest.
in your log file, this actually works, your sessionsetupx succeeds, but you
are mapped to the guest user. ( Registered username ts74081 for guest
access) Later on, the actual share (home share for ts7481 I am assuming)
tconX fails because the guest account has a null password, and you didn't
specify guest ok for homes.
For reasons completely unknown to me, win2k is NOT ever sending the password
you type in UNTIL
you try a different user, which generates an SMBulogoff() request, so the
next negotprot,sesssetupX sequence starts, and THEN the win2k client sends
the appropriate password,
and you get authenticated appropriately (instead of being mapped to
guest...)
My guess is that the original attempt to connect to the share used your
current username with a null password, which set up the vc, and from then
on, all the sessionsetups are on that vc, no more negot.prot's are made,
until an SMBulogoff is done. Since win2k was successful in it's initial
attempt at sessionsetupX with a null password (because you got mapped to
guest as a bad user), it won't send a real password, even though it's ASKING
FOR ONE, until you force an SMBulogoff, and a complete resetup of the vc,
etc... (which is what using another username does)
Win2k REALLY doesn't like using cleartext passwords, apparently (grin).
I can make this problem go away by changing reply.c so that it checks the
/etc/passwd/nis store for a user instead of smbpasswd when encrypted
passwords = no; my diffs are listed below if you want to try it.
I'm copying the samba_technical list in hopes that someone smarter than I
(practically everyone) will know more about what's going on and do an
appropriate fix for this. This diff is on a 2.2.8 code base.
# diff reply.c reply.original.c
1028c1028
if (lp_map_to_guest() == MAP_TO_GUEST_ON_BAD_USER
lp_encrypted_pass
words())
---
if (lp_map_to_guest() == MAP_TO_GUEST_ON_BAD_USER)
1054,1062d1053
/* add mccall */
if (lp_map_to_guest() == MAP_TO_GUEST_ON_BAD_USER
!lp_encrypted_pas
swords() sys_getpwnam(user))
{
/* delete_nt_token(ptok); */
DEBUG(1,(Rejecting user '%s': authentication failed\n, user));
END_PROFILE(SMBsesssetupX);
return ERROR_BOTH(NT_STATUS_LOGON_FAILURE,ERRSRV,ERRbadpw);
}
/* end add mccall */
-Original Message-
From: tony shepherd [mailto:[EMAIL PROTECTED]
Sent: Sunday, March 30, 2003 22:49
To: MCCALL,DON (HP-USA,ex1)
Cc: tony.shepherd
Subject: RE: encrypt passwords=no, security=yes, samba 2.2.8, W2K user
aut h fails
Hi Don
attached are the files requested. Thanks for looking at this for me.
Solaris must be tweaking something that is not showing up
under other OS's.
tony
--On Friday, March 28, 2003 06:13:14 AM -0800 MCCALL,DON
(HP-USA,ex1)
[EMAIL PROTECTED] wrote:
Hi Tony,
Can't make it happen here on my HP-UX system, and I don't
have a Solaris
system to test on. But if you want to get me a log level
10 debug of
the issue, and the output of testparm, I'll see if I can
spot anything.
Send the log and testparm off list, and compressed, ok?
Don
-Original Message-
From: tony shepherd [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 27, 2003 23:31
To: MCCALL,DON (HP-USA,ex1); [EMAIL PROTECTED]
Subject: RE: encrypt passwords=no, security=yes, samba
2.2.8, W2K user
aut h fails
--On Thursday, March 27, 2003 10:06:08 AM -0500 MCCALL,DON
(HP-USA,ex1)
[EMAIL PROTECTED] wrote:
Hi tony,
based on your log file, it sure does APPEAR that you have
NOT turned off
encrypted passwords,
as samba is trying to open
/usr/local/samba/private/smbpasswd. It should
only do that if it negotiated encrypted passwords in the
negot prot call,
which it should
RE: How to verify the domain secret is good or bad?
By default machine account passwords are changed ever 7 days in MS world. you can change this via the machine password timeout smb.conf parameter. Hope this helps, Don -Original Message- From: Joey Collins [mailto:[EMAIL PROTECTED] Sent: Sunday, March 30, 2003 20:10 To: Gerald (Jerry) Carter Cc: Chere Zhou; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: How to verify the domain secret is good or bad? Gerald (Jerry) Carter wrote: [snip] Also, sometimes I saw problems like wbinfo -t just says secret is bad, when all the daemons were running. It sure was good at some point before. Samba periodially changes the password on the server. secrets.tdb should be in sync with this. Hi, Why does Samba do this? Does the secret expire after a certain period of time or is this done as a safety precaution? thanks, Joey.
RE: encrypt passwords=no, security=yes, samba 2.2.8, W2K user aut h fails
Hi Tony, Can't make it happen here on my HP-UX system, and I don't have a Solaris system to test on. But if you want to get me a log level 10 debug of the issue, and the output of testparm, I'll see if I can spot anything. Send the log and testparm off list, and compressed, ok? Don -Original Message- From: tony shepherd [mailto:[EMAIL PROTECTED] Sent: Thursday, March 27, 2003 23:31 To: MCCALL,DON (HP-USA,ex1); [EMAIL PROTECTED] Subject: RE: encrypt passwords=no, security=yes, samba 2.2.8, W2K user aut h fails --On Thursday, March 27, 2003 10:06:08 AM -0500 MCCALL,DON (HP-USA,ex1) [EMAIL PROTECTED] wrote: Hi tony, based on your log file, it sure does APPEAR that you have NOT turned off encrypted passwords, as samba is trying to open /usr/local/samba/private/smbpasswd. It should only do that if it negotiated encrypted passwords in the negot prot call, which it should only be able to do if encrypted passwords is set to yes. I note that you are including ANOTHER smb.conf file at the end of your global section; please check there and see if you have an encrypt passwords = yes, and/or include the contents of that smb.conf file as well in your next message to the list, ok? include=/etc/sfw/local-smb.conf local-smb.conf is an empty file. I don't have another encrypt passwords = yes anywhere in the config file. What is weird is that I can eventually authenticate after I change the username I try to authenticate with and then change back again. So, this looks like a bug? I wonder whether it only effects Solaris systems. I would have thought others would have fallen across it. I can't code, but I can provide logs and testing. Please let me know if I can help at all. tony -Original Message- From: tony shepherd [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 25, 2003 21:31 To: [EMAIL PROTECTED] Cc: tony.shepherd Subject: BUG: encrypt passwords=no, security=yes, samba 2.2.8, W2K user auth fails folks ** I am not on this mail list. Can all replied please be Cc'ed to me as well. ** I have come across the following bug using samba 2.2.8 (in the throws of upgrading from 2.0.10 to fix security vul). I discovered this bug using a W2K system; it was not present when testing with win98. I am running the samba server on a solaris 9 system. I am using encrypt passwords = no and security=user and using the Unix passwords for authentication. Registry modification have been made to the windows system. To replicate the bug, I do the following: * log onto w2k system as user ts74081, passwd: fred * try and open the share: \\huey\ts74081. As my password is different between the windows system and the samba server, it prompts me for a username/password pair. I give the correct values but I still get rejected. * I then try to access the share as a different user (one that does not exist on the system): username fred, passwd fred. Naturally it fails. * I then try again with the proper username/password pair and I get authenticated correctly and the share is made available. If I do not try and authenticate as a different user before retrying with the proper username, it will continue to fail to authenticate. I have attached debug 3 logs of the above scenario as well as the smb.conf I am using. If I change the security parameter to security=share, the above bug does not show itself. thanks tony
RE: encrypt passwords=no, security=yes, samba 2.2.8, W2K user auth fails
Hi tony, based on your log file, it sure does APPEAR that you have NOT turned off encrypted passwords, as samba is trying to open /usr/local/samba/private/smbpasswd. It should only do that if it negotiated encrypted passwords in the negot prot call, which it should only be able to do if encrypted passwords is set to yes. I note that you are including ANOTHER smb.conf file at the end of your global section; please check there and see if you have an encrypt passwords = yes, and/or include the contents of that smb.conf file as well in your next message to the list, ok? include=/etc/sfw/local-smb.conf -Original Message- From: tony shepherd [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 25, 2003 21:31 To: [EMAIL PROTECTED] Cc: tony.shepherd Subject: BUG: encrypt passwords=no, security=yes, samba 2.2.8, W2K user auth fails folks ** I am not on this mail list. Can all replied please be Cc'ed to me as well. ** I have come across the following bug using samba 2.2.8 (in the throws of upgrading from 2.0.10 to fix security vul). I discovered this bug using a W2K system; it was not present when testing with win98. I am running the samba server on a solaris 9 system. I am using encrypt passwords = no and security=user and using the Unix passwords for authentication. Registry modification have been made to the windows system. To replicate the bug, I do the following: * log onto w2k system as user ts74081, passwd: fred * try and open the share: \\huey\ts74081. As my password is different between the windows system and the samba server, it prompts me for a username/password pair. I give the correct values but I still get rejected. * I then try to access the share as a different user (one that does not exist on the system): username fred, passwd fred. Naturally it fails. * I then try again with the proper username/password pair and I get authenticated correctly and the share is made available. If I do not try and authenticate as a different user before retrying with the proper username, it will continue to fail to authenticate. I have attached debug 3 logs of the above scenario as well as the smb.conf I am using. If I change the security parameter to security=share, the above bug does not show itself. thanks tony
RE: error message.
Sounds like someone at ip 10.68.1.102 has YOUR samba servers ip address as it's primary wins server. Don -Original Message- From: Hassen Chaker [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 18, 2003 12:43 To: [EMAIL PROTECTED] Subject: error message. Hye, I have installed a printer SHARP on a LAN network. I have an HPserver 10.20 with SAMBA 2.0.6 and I have this error messages in nmbd logs : [2003/03/18 18:27:22, 0] nmbd/nmbd_incomingrequests.c:(222) process_name_registration_request: unicast name registration request received for name SC08954D00 from IP 10.68.1.102 on subnet UNICAST_SUBNET. Error - should be sent to WINS server [2003/03/18 18:27:27, 0] nmbd/nmbd_incomingrequests.c:(222) Thank you for help. Hassen CHAKER
RE: Restrict Anonymous
Hi Marc, For winbindd to function, you must use wbinfo -A username%passwd to store the username and password of the user you want winbindd to use for authentication. Hope this helps, Don -Original Message- From: Marc Kaplan [mailto:[EMAIL PROTECTED] Sent: Thursday, March 06, 2003 11:52 To: '[EMAIL PROTECTED]' Subject: Restrict Anonymous Hello list, Has anybody coded some sort of workaround for joining domains with RestrictAnonymous set? The typical behavior I see is for NT4 domains we're able to look up sequence, but never enumerate users and groups. For ADS domains, it seems that even looking up sequence from the domain fails. I appreciate any insight. Thanks, -Marc
[Samba] RE: number of groups of NT account causes authenticationproblems
Hi Richard, et al;
Can't speak for Solaris, but HP-UX has a 20 group membership limit
for HP-UX users. From man setgroups: must be no more than NGROUPS_MAX,
as defined in limits.h. Same applies to initgroups.
So Solaris may have some limit as well
Hope this helps,
Don
-Original Message-
From: Richard Sharpe [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 04, 2003 22:08
To: Gopal Bhat
Cc: samba; samba-technical
Subject: Re: number of groups of NT account causes authentication
problems
On Tue, 4 Mar 2003, Gopal Bhat wrote:
Hi,
I did more experiments with this problem and found that
'SMBD' fails to
authenticate when the Number of Groups an NT user belongs
grows more
than 14 (i.e. 15 or more).
Thanks,
Gopal
I can't have a look until tomorrow, but I wonder, is it possible that
Solaris 9 has a restriction that the user cannot be in more that 14
groups? I would think not, but will find it difficult to test tonight.
Besides, I can probably only test on Solaris 8.
If that is not the problem, then I would have to look at the
code that
does setgroups and test on our platform.
Gopal Bhat wrote:
I am facing a strange problem related to authentication
of NT users
accessing the SAMBA server.
Here are the details:
Server: Solaris 9, SUN Ultra 60, SAMBA 2.2.7a with PAM
and WINBIND
Client: Windows XP, NT4.0, 2000
Symptoms:
Created a share \\server\test (UNIX: /export/SMB/test)
with access to
group 'TestGoup' where 'TestUser' is a member.
'TestUser' is a member of 14 more groups along with
'TestGroup' (Total
number of TestUser's group = 15)
With the above settings 'TestUser' can't access the share
'\\server\test', and the following message shows up in
the Client.log:
[2003/03/04 13:31:52, 0] smbd/sec_ctx.c:initialise_groups(244)
Unable to initgroups. Error was Not owner
[2003/03/04 13:31:52, 0] smbd/sec_ctx.c:initialise_groups(247)
This is probably a problem with the account domain\testuser
[2003/03/04 13:31:52, 0] smbd/service.c:make_connection(599)
client (10.81.105.121) Can't change directory to /export/SMB/test
(Permission denied)
If I change the number of groups the user 'TestUser'
belongs from 15
to 8 ('TestGroup' + 7 other groups), the user can access
the share
'\\server\test' without any problems.
It looks like there is some limitation on number of NT group
memberships 'smbd' can handle. Note: 'wbinfo' returns
all the right
groups of the user without any problems.
Is there anyone out there who is aware of this problem
and knows a
workaround/solution to this?
I really appreciate any help from the prestigious SAMBA Team.
Thanks,
Gopal
--
Regards
-
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org,
sharpe[at]ethereal.com, http://www.richardsharpe.com
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
RE: number of groups of NT account causes authentication problems
Hi Richard, et al;
Can't speak for Solaris, but HP-UX has a 20 group membership limit
for HP-UX users. From man setgroups: must be no more than NGROUPS_MAX,
as defined in limits.h. Same applies to initgroups.
So Solaris may have some limit as well
Hope this helps,
Don
-Original Message-
From: Richard Sharpe [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 04, 2003 22:08
To: Gopal Bhat
Cc: samba; samba-technical
Subject: Re: number of groups of NT account causes authentication
problems
On Tue, 4 Mar 2003, Gopal Bhat wrote:
Hi,
I did more experiments with this problem and found that
'SMBD' fails to
authenticate when the Number of Groups an NT user belongs
grows more
than 14 (i.e. 15 or more).
Thanks,
Gopal
I can't have a look until tomorrow, but I wonder, is it possible that
Solaris 9 has a restriction that the user cannot be in more that 14
groups? I would think not, but will find it difficult to test tonight.
Besides, I can probably only test on Solaris 8.
If that is not the problem, then I would have to look at the
code that
does setgroups and test on our platform.
Gopal Bhat wrote:
I am facing a strange problem related to authentication
of NT users
accessing the SAMBA server.
Here are the details:
Server: Solaris 9, SUN Ultra 60, SAMBA 2.2.7a with PAM
and WINBIND
Client: Windows XP, NT4.0, 2000
Symptoms:
Created a share \\server\test (UNIX: /export/SMB/test)
with access to
group 'TestGoup' where 'TestUser' is a member.
'TestUser' is a member of 14 more groups along with
'TestGroup' (Total
number of TestUser's group = 15)
With the above settings 'TestUser' can't access the share
'\\server\test', and the following message shows up in
the Client.log:
[2003/03/04 13:31:52, 0] smbd/sec_ctx.c:initialise_groups(244)
Unable to initgroups. Error was Not owner
[2003/03/04 13:31:52, 0] smbd/sec_ctx.c:initialise_groups(247)
This is probably a problem with the account domain\testuser
[2003/03/04 13:31:52, 0] smbd/service.c:make_connection(599)
client (10.81.105.121) Can't change directory to /export/SMB/test
(Permission denied)
If I change the number of groups the user 'TestUser'
belongs from 15
to 8 ('TestGroup' + 7 other groups), the user can access
the share
'\\server\test' without any problems.
It looks like there is some limitation on number of NT group
memberships 'smbd' can handle. Note: 'wbinfo' returns
all the right
groups of the user without any problems.
Is there anyone out there who is aware of this problem
and knows a
workaround/solution to this?
I really appreciate any help from the prestigious SAMBA Team.
Thanks,
Gopal
--
Regards
-
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org,
sharpe[at]ethereal.com, http://www.richardsharpe.com
[Samba] performance problem with Samba built with pread/pwrite on HP-UX 11.11
Hi everyone, One of my teammates here at HP uncovered this, and I thought it deserved proactive mention on the list: It covers non-HP builds of Samba, so HP CIFS Server (HP's version of Samba bundled with all 11.0 and above OS'es) customers are not directly affected but those of you on the list who might build Samba yourselves on 11.11 could be affected. Customers building their own Samba server can find that on 11.11 the performance is slower than on 11.0 when testing with smbtorture, and possibly slower in production. The HP produced Samba version did not have this performance drop, because the HP version did not use pread/pwrite calls. Also note that the problem only affects systems running on top of JFS file systems. Version 2.2.2 Samba can be built to use system calls pread/pwrite, instead of using a combination of lseek (to move the pointer in the file), and read/write. The pread/pwrite calls are fairly new to the HP-UX world, introduced first in 11.11, and in a patch PHKL_20349 in 11.0. The Samba build process will check if these calls are provided by the OS, and if they are use enable their use prior to the compilation step. So under 11.11 the use of these calls would be enabled by default. The reason for HP not using pread/pwrite is historic, 11.0 did not have pread/pwrite on release, and to keep the source trees the same, the 11.11 version was also build in the same way. The newly released JFS patch is PHKL_28512 for 11.11 to address a problem with pwrite calls and should be considered for installation on any Samba system using the public domain builds of Samba, that have pread/pwrite enabled. One caveat though - this problem was only found under testing using smbtorture - so we have don't have a handle how big an issue this could be in a production environment. But to give you an idea of the difference in tests we found using pwrite would be over 20 times slower than the lseek/write combinations. We also created a test program that made extensive use of pread/pwrite calls. After applying the patch this test program which would return in less than one second, previously the same executable would take over 4 minutes to run. Just to reiterate this patch does not affect the performance of HP CIFS Server, and is not necessary for systems running this version of Samba on 11.11. 11.0 systems are not affected by this issue, with OR without pread/pwrite. Hope this info may be useful to someone out there! Don -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
performance problem with Samba built with pread/pwrite on HP-UX 11.11
Hi everyone, One of my teammates here at HP uncovered this, and I thought it deserved proactive mention on the list: It covers non-HP builds of Samba, so HP CIFS Server (HP's version of Samba bundled with all 11.0 and above OS'es) customers are not directly affected but those of you on the list who might build Samba yourselves on 11.11 could be affected. Customers building their own Samba server can find that on 11.11 the performance is slower than on 11.0 when testing with smbtorture, and possibly slower in production. The HP produced Samba version did not have this performance drop, because the HP version did not use pread/pwrite calls. Also note that the problem only affects systems running on top of JFS file systems. Version 2.2.2 Samba can be built to use system calls pread/pwrite, instead of using a combination of lseek (to move the pointer in the file), and read/write. The pread/pwrite calls are fairly new to the HP-UX world, introduced first in 11.11, and in a patch PHKL_20349 in 11.0. The Samba build process will check if these calls are provided by the OS, and if they are use enable their use prior to the compilation step. So under 11.11 the use of these calls would be enabled by default. The reason for HP not using pread/pwrite is historic, 11.0 did not have pread/pwrite on release, and to keep the source trees the same, the 11.11 version was also build in the same way. The newly released JFS patch is PHKL_28512 for 11.11 to address a problem with pwrite calls and should be considered for installation on any Samba system using the public domain builds of Samba, that have pread/pwrite enabled. One caveat though - this problem was only found under testing using smbtorture - so we have don't have a handle how big an issue this could be in a production environment. But to give you an idea of the difference in tests we found using pwrite would be over 20 times slower than the lseek/write combinations. We also created a test program that made extensive use of pread/pwrite calls. After applying the patch this test program which would return in less than one second, previously the same executable would take over 4 minutes to run. Just to reiterate this patch does not affect the performance of HP CIFS Server, and is not necessary for systems running this version of Samba on 11.11. 11.0 systems are not affected by this issue, with OR without pread/pwrite. Hope this info may be useful to someone out there! Don
RE: Winbindd limited by select
On HP-UX 11.x, the default is 2048 for FD_SETSIZE. You can also (according to man page for select()) handle this dynamically, if you are concerned for memory footprint for your application. An example from the man page: The user can also allocate the space for fd_set structure dynamically, depending upon the number of file descriptors to be tested. The following code segment illustrates the basic concepts. int num_of_fds,s; struct fd_set *f; /* * Set num_of_fds to the required value. * User can set it to the maximum possible value the kernel is * configured for, by using sysconf(_SC_OPEN_MAX). * Note that, if you are not using these many files, you are * wasting too much space. */ num_of_fds = sysconf(_SC_OPEN_MAX); s = sizeof(long); /* * howmany is a macro defined in sys/types.h */ f = (struct fd_set *)malloc(s*howmany(num_of_fds, s*8); /* * Use f wherever struct fd_set * is used. * It can be used to test num_of_fds file descriptors. */ So, might be a couple of ways to skin this cat :-) (I don't mean literally, for all you cat lovers out there!) Don -Original Message- From: Ken Cross [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 12, 2003 7:36 To: 'Multiple recipients of list SAMBA-TECHNICAL' Subject: Winbindd limited by select Samba-folk: I've run into a problem with winbindd in both 2.2.x and 3.0 where it just locks up after a while on large, busy networks. We finally tracked down the problem to the fact that the C library select function is limited by default to 256 file descriptors in NetBSD (1024 in FreeBSD, 2048 in Linux). So once 256 (or whatever) smbd processes connected to winbindd, it broke pretty badly and was very hard to kill. This is set at compile-time, not run-time. This line: #define FD_SETSIZE 2048 /* Max # of winbindd connections */ must occur before the first invocation of sys/types. This could be a build option, but it might be much simpler to hard-code it in local.h, which is what I did to fix it. Can somebody check the implications of this on Solaris, HPUX, etc.? Thanks, Ken Cross Network Storage Solutions
RE: Problem with nt acl support when saving Excel or Word Files
Hi Michael, what's your umask for the users in question? Don -Original Message- From: Michael Steffens [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 11, 2003 7:12 To: [EMAIL PROTECTED] Subject: Problem with nt acl support when saving Excel or Word Files Hi, does anyone have an idea concerning this one? Has anyone else also seen these symptoms? http://lists.samba.org/pipermail/samba-technical/2003-January/ 041748.html The problem described in this posting occurs here, too. The situation: A user has read/write permissions on a Word/Excel file, via group membership, but file owner and group are different from the current UID and primary GID. After editing and saving the file ACLs are broken, in one or the other way, for all of NT4, W2k, and WinXP clients, but differently for all of them. All clients do store by creating a temp file, first. With NT4 the final owner and group is changed to the last writer, but original user and group privileges don't make it into the new ACL. Samba log reports it got SMB_ACL_GROUP_OBJ and SMB_ACL_USER_OBJ for them, however. The new group has no write permissions. With Win2k the final owner and group is changed to the last writer. Previous user and group permissions are correctly transferred to the resulting ACL. But the new owner gets write permissions revoked. With WinXP owner and group remain the same as in the original file. Samba log reports it got SMB_ACL_GROUP_OBJ and SMB_ACL_USER_OBJ, but actually setting them fails with Not owner on the temp file. Nevertheless, the file group gets write permission revoked. Being totally confused :) Cheers! Michael
[Samba] RE: Winbind on HPUX 11, some small progress
Hi Miles, This sounds like a PAM_USER_UNKNOWN13 error. Which would indicate that winbind daemon did it's job (ie passed the username and password to the password server ,and got validation back that the user is authenticated, but then when it went thru the nsswitch stuff to 'look up' the user, that failed. Kinda wierd. I don't have your original post, but I'm assuming that you have passwd: files winbind group: files winbind in your /etc/nsswitch.conf file and that you have working links to the winbind nss code (look something like this): 46 Aug 27 11:16 /usr/lib/libnss_winbind.1 - /usr/local/samba/lib/winbind/libnss_winbind.so To verify that your nsswitch code is working compile the getent.c program I have attached to this message, and then verify that you can get an appropriate uid/gid back for a user defined on your NT password server in the following manner; getent passwd domainnamedomainseparatorusername (for instance on my system, I use '+' as winbind domain separator, and my domain is atl-wtec, so: getent passwd atl-wtec+administrator returns me the 'passwd' entry faked up from the NT domain controller I am a member of. Just a thought, Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 04, 2003 21:28 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; Kim (E-mail) Subject: Winbind on HPUX 11, some small progress Hi All, Well, i've managed to enable some debugging in syslog, I had to put in /etc/syslog.conf ;*.debug on the syslog line. So at least I have an error which is being returned into syslog from winbind. This is what I get from winbind Feb 4 21:13:17 coastdr pam_winbind[20753]: Verify user `lonnie' Feb 4 21:13:18 coastdr pam_winbind[20753]: user 'lonnie' granted acces Feb 4 21:13:18 coastdr pam_winbind[20753]: LOGIN: exiting with return code 13 This is what I get from pamsmb (ignore the dates, they are a bit funny for some reason) Feb 5 14:53:55 coastdr pamsmbd[20119]: server: remote auth user unix:trainingus er nt:traininguser NTDOM:WESTCOASTDHB PDC:COASTDB BDC: Feb 5 14:53:55 coastdr pamsmbd[20119]: cache_add: inserted entry Feb 4 20:53:55 coastdr : pamsmbd: Got something back... 0 Feb 4 20:53:55 coastdr : pam_smb: got back 0 username traininguser Feb 4 20:53:55 coastdr : LOGIN: exiting with return code 13 So the error with pamsmb and winbind is the same. I've done a man on login and can only find a description of errors, not the error codes. What is error code 13? If I can find that out it will make looking for it a bit easier. I thought it might be that the shell doens't exist, but I tried making a user with a invalid shell and get back error code 1, so its not that. Ideas? Cheers Miles -Original Message- From: Miles Roper Sent: Monday, 3 February 2003 08:54 a.m. To: 'MCCALL,DON (HP-USA,ex1)' Cc: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'; Esh, Andrew; Ronan Waide; STEFFENS,MICHAEL (HP-Germany,ex1); 'Richard Sharpe'; 'John H Terpstra' Subject: RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help Thanks for your help, still no luck though. More info for you. with no debug statements in my /etc/pam.conf I get in sys log the following. Feb 2 14:43:02 coastdr pam_winbind[2832]: user 'traininguser' granted acces with debug turned on I get Feb 2 14:47:49 coastdr pam_winbind[2839]: Verify user `traininguser' Feb 2 14:47:49 coastdr pam_winbind[2839]: user 'traininguser' granted acces the user is still logging out. incidentlally, when I log in as a unix user, rather than a win2k user I don't get anything in sys log. I've included my pam.conf below. Also, I checked for /etc/shells, no such file, and I have set my smb.conf shell line to template shell = /sbin/sh and also tried template shell = /usr/bin/sh both files exist. # # PAM configuration # # Authentication management # loginauth sufficient/usr/lib/security/libpam_unix.1 debug loginauth sufficient/usr/lib/security/libpam_winbind.1 debug #login auth sufficient/usr/lib/security/libpam_smb.1 nolocal debug su auth required /usr/lib/security/libpam_unix.1 debug dtlogin auth required /usr/lib/security/libpam_unix.1 debug dtaction auth required /usr/lib/security/libpam_unix.1 debug ftp auth required /usr/lib/security/libpam_unix.1 debug OTHERauth required /usr/lib/security/libpam_unix.1 debug # # Account management # loginaccount sufficient /usr/lib/security/libpam_unix.1 debug loginaccount sufficient /usr/lib/security/libpam_winbind.1 debug su account required /usr/lib/security/libpam_unix.1 debug dtlogin account required /usr/lib/security/libpam_unix.1 debug dtaction account required
[Samba] RE: Winbind on HPUX 11, some small progress
Hi Miles, any reason you are compiling it yourself, instead of pulling the depot from the samba ftp site? That is what I am using successfully. Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 15:31 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Don, Michael Steffens a while back sent me a compiled version of getent which I couldn't get to work. I compiled your version and it doesn't seem to produce any result either, seems to return immeditaly without doing anything. ie coastdr: /mnt/1/samba/test ./getent passwd WESTCOASTDHB+mroper coastdr: /mnt/1/samba/test If I run it without any parameters I get a core dump :o) Better tell you that I'm compiling winbind with gcc 3.01 on hpux. I compiled the getent program you sent me with. gcc -c -I. -g -O2 getent.c gcc -g getent.o -o getent From what you have said it would seem like libnss_winbind.so itsn't working. Anyway to get any debug output? Here is my /usr/lib/libnss* -r-xr-xr-x 1 binbin 28672 Mar 13 2001 libnss_compat.1 -r-xr-xr-x 1 binbin 104536 Nov 6 1997 libnss_dns.1 -r-xr-xr-x 1 binbin 40960 Mar 7 2001 libnss_files.1 lrwxrwxrwx 1 root sys 17 Jan 27 09:49 libnss_ldap.1 - libns s_winbind.so -r-xr-xr-x 1 binbin 40960 Mar 13 2001 libnss_nis.1 -r-xr-xr-x 1 binbin 57344 Mar 13 2001 libnss_nisplus.1 -r-xr-xr-x 1 binbin 28672 Jan 24 15:23 libnss_winbind.so lrwxrwxrwx 1 root sys 17 Jan 27 11:51 libnss_winbind.so.1 - libnss_winbind.so lrwxrwxrwx 1 root sys 17 Oct 15 16:14 libnss_winbind.so.2 - libnss_winbind.so Here is my /etc/nsswitch.conf hosts: dns [NOTFOUND=continue UNAVAIL=continue TRYAGAIN=continue] files [N OTFOUND=return UNAVAIL=continue TRYAGAIN=return] passwd: files winbind group: files winbind Here is the compile output from libnss_winbind.so Compiling nsswitch/winbind_nss.c with -fpic nsswitch/winbind_nss.c: In function `fill_pwent': nsswitch/winbind_nss.c:600: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:612: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:629: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:641: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:653: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c: In function `fill_grent': nsswitch/winbind_nss.c:690: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:702: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:728: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:753: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwent_r': nsswitch/winbind_nss.c:870: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwuid_r': nsswitch/winbind_nss.c:920: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c:933: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwnam_r': nsswitch/winbind_nss.c:982: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c:995: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrent_r': nsswitch/winbind_nss.c:1119: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrnam_r': nsswitch/winbind_nss.c:1179: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c:1193: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrgid_r': nsswitch/winbind_nss.c:1242: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c:1256: warning: passing arg 5 of `fill_grent' from incompatible pointer type Compiling nsswitch/winbind_nss_solaris.c with -fpic Linking nsswitch/libnss_winbind.so Any idea where to go from here? Cheers Miles -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Thursday, 6 February
[Samba] RE: Winbind on HPUX 11, some small progress
ps, the fact that get getpwent and getent programs that you are running do NOT return any output indicate that the issue is probably with the libnss_winbind.so on your system.. Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 15:31 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Don, Michael Steffens a while back sent me a compiled version of getent which I couldn't get to work. I compiled your version and it doesn't seem to produce any result either, seems to return immeditaly without doing anything. ie coastdr: /mnt/1/samba/test ./getent passwd WESTCOASTDHB+mroper coastdr: /mnt/1/samba/test If I run it without any parameters I get a core dump :o) Better tell you that I'm compiling winbind with gcc 3.01 on hpux. I compiled the getent program you sent me with. gcc -c -I. -g -O2 getent.c gcc -g getent.o -o getent From what you have said it would seem like libnss_winbind.so itsn't working. Anyway to get any debug output? Here is my /usr/lib/libnss* -r-xr-xr-x 1 binbin 28672 Mar 13 2001 libnss_compat.1 -r-xr-xr-x 1 binbin 104536 Nov 6 1997 libnss_dns.1 -r-xr-xr-x 1 binbin 40960 Mar 7 2001 libnss_files.1 lrwxrwxrwx 1 root sys 17 Jan 27 09:49 libnss_ldap.1 - libns s_winbind.so -r-xr-xr-x 1 binbin 40960 Mar 13 2001 libnss_nis.1 -r-xr-xr-x 1 binbin 57344 Mar 13 2001 libnss_nisplus.1 -r-xr-xr-x 1 binbin 28672 Jan 24 15:23 libnss_winbind.so lrwxrwxrwx 1 root sys 17 Jan 27 11:51 libnss_winbind.so.1 - libnss_winbind.so lrwxrwxrwx 1 root sys 17 Oct 15 16:14 libnss_winbind.so.2 - libnss_winbind.so Here is my /etc/nsswitch.conf hosts: dns [NOTFOUND=continue UNAVAIL=continue TRYAGAIN=continue] files [N OTFOUND=return UNAVAIL=continue TRYAGAIN=return] passwd: files winbind group: files winbind Here is the compile output from libnss_winbind.so Compiling nsswitch/winbind_nss.c with -fpic nsswitch/winbind_nss.c: In function `fill_pwent': nsswitch/winbind_nss.c:600: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:612: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:629: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:641: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:653: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c: In function `fill_grent': nsswitch/winbind_nss.c:690: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:702: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:728: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:753: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwent_r': nsswitch/winbind_nss.c:870: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwuid_r': nsswitch/winbind_nss.c:920: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c:933: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwnam_r': nsswitch/winbind_nss.c:982: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c:995: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrent_r': nsswitch/winbind_nss.c:1119: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrnam_r': nsswitch/winbind_nss.c:1179: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c:1193: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrgid_r': nsswitch/winbind_nss.c:1242: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c:1256: warning: passing arg 5 of `fill_grent' from incompatible pointer type Compiling nsswitch/winbind_nss_solaris.c with -fpic Linking nsswitch/libnss_winbind.so Any idea where to go from here? Cheers Miles -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL
RE: Winbind on HPUX 11, some small progress
Hi Miles, Set log level = 10 in your smb.conf file stop winbindd daemon and nmbd and smbd, and clear out your /var/opt/samba/log.* Then start nmbd,smbd and winbindd and do the getent command again. After you do, check for a log.winbindd file and send it to me offlist. Thanks, Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 16:07 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; [EMAIL PROTECTED]; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Don, lrwxrwxrwx 1 root sys 17 Feb 7 09:59 libnss_winbind.1 - li bnss_winbind.so -r-xr-xr-x 1 binbin 28672 Jan 24 15:23 libnss_winbind.so Same problem, I was all excited there for a moment :o) Cheers Miles -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Friday, 7 February 2003 09:50 a.m. To: 'Miles Roper'; MCCALL,DON (HP-USA,ex1); [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; STEFFENS,MICHAEL (HP-Germany,ex1); 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Miles, reading further; change you link to the following: lrwxr-xr-x 1 root sys 46 Aug 27 11:16 /usr/lib/libnss_winbin d.1 - libnss_winbind.so We (HP-UX) don't know from .so files... So winbind in nsswitch.conf entries is going to trigger looking for a libnss_winbind.1 NOT a libnss_winbind.so.1 See if that doesn't help, Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 15:41 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress had the same problem, I thought compiling it from scratch may fix it, although I've only just recently worked out how to get the extra debugging from pam, but symptoms were exactly the same. has taken me a long time to work out how to compile it on hpux with gcc, had to change a include file and the configure script, i've included it for you interest :o) in configure find if test $ac_cv_prog_cc_Ae = yes; then BLDSHARED=true SHLD=/usr/bin/ld LDSHFLAGS=-B symbolic -b -z PICFLAG=+z fi change to #if test $ac_cv_prog_cc_Ae = yes; then BLDSHARED=true SHLD=/usr/bin/ld LDSHFLAGS=-B symbolic -b -z # PICFLAG=+z #fi find /usr/local/lib/gcc-lib/hppa2.0n-hp-hpux11.00/3.1/include/stdio.h BEFORE extern int snprintf(char *, _hpux_size_t, char *,...); AFTER extern int snprintf(char *, _hpux_size_t, const char *,...); ps, that was quick :o) -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Friday, 7 February 2003 09:36 a.m. To: 'Miles Roper'; MCCALL,DON (HP-USA,ex1); [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; STEFFENS,MICHAEL (HP-Germany,ex1); 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Miles, any reason you are compiling it yourself, instead of pulling the depot from the samba ftp site? That is what I am using successfully. Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 15:31 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Don, Michael Steffens a while back sent me a compiled version of getent which I couldn't get to work. I compiled your version and it doesn't seem to produce any result either, seems to return immeditaly without doing anything. ie coastdr: /mnt/1/samba/test ./getent passwd WESTCOASTDHB+mroper coastdr: /mnt/1/samba/test If I run it without any parameters I get a core dump :o) Better tell you that I'm compiling winbind with gcc 3.01 on hpux. I compiled the getent program you sent me with. gcc -c -I. -g -O2 getent.c gcc -g getent.o -o getent From what you have said it would seem like libnss_winbind.so itsn't working. Anyway to get any debug output? Here is my /usr/lib/libnss* -r-xr-xr-x 1 binbin 28672
RE: Winbind on HPUX 11, some small progress
Hi Miles, reading further; change you link to the following: lrwxr-xr-x 1 root sys 46 Aug 27 11:16 /usr/lib/libnss_winbin d.1 - libnss_winbind.so We (HP-UX) don't know from .so files... So winbind in nsswitch.conf entries is going to trigger looking for a libnss_winbind.1 NOT a libnss_winbind.so.1 See if that doesn't help, Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 15:41 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress had the same problem, I thought compiling it from scratch may fix it, although I've only just recently worked out how to get the extra debugging from pam, but symptoms were exactly the same. has taken me a long time to work out how to compile it on hpux with gcc, had to change a include file and the configure script, i've included it for you interest :o) in configure find if test $ac_cv_prog_cc_Ae = yes; then BLDSHARED=true SHLD=/usr/bin/ld LDSHFLAGS=-B symbolic -b -z PICFLAG=+z fi change to #if test $ac_cv_prog_cc_Ae = yes; then BLDSHARED=true SHLD=/usr/bin/ld LDSHFLAGS=-B symbolic -b -z # PICFLAG=+z #fi find /usr/local/lib/gcc-lib/hppa2.0n-hp-hpux11.00/3.1/include/stdio.h BEFORE extern int snprintf(char *, _hpux_size_t, char *,...); AFTER extern int snprintf(char *, _hpux_size_t, const char *,...); ps, that was quick :o) -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Friday, 7 February 2003 09:36 a.m. To: 'Miles Roper'; MCCALL,DON (HP-USA,ex1); [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; STEFFENS,MICHAEL (HP-Germany,ex1); 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Miles, any reason you are compiling it yourself, instead of pulling the depot from the samba ftp site? That is what I am using successfully. Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 15:31 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Don, Michael Steffens a while back sent me a compiled version of getent which I couldn't get to work. I compiled your version and it doesn't seem to produce any result either, seems to return immeditaly without doing anything. ie coastdr: /mnt/1/samba/test ./getent passwd WESTCOASTDHB+mroper coastdr: /mnt/1/samba/test If I run it without any parameters I get a core dump :o) Better tell you that I'm compiling winbind with gcc 3.01 on hpux. I compiled the getent program you sent me with. gcc -c -I. -g -O2 getent.c gcc -g getent.o -o getent From what you have said it would seem like libnss_winbind.so itsn't working. Anyway to get any debug output? Here is my /usr/lib/libnss* -r-xr-xr-x 1 binbin 28672 Mar 13 2001 libnss_compat.1 -r-xr-xr-x 1 binbin 104536 Nov 6 1997 libnss_dns.1 -r-xr-xr-x 1 binbin 40960 Mar 7 2001 libnss_files.1 lrwxrwxrwx 1 root sys 17 Jan 27 09:49 libnss_ldap.1 - libns s_winbind.so -r-xr-xr-x 1 binbin 40960 Mar 13 2001 libnss_nis.1 -r-xr-xr-x 1 binbin 57344 Mar 13 2001 libnss_nisplus.1 -r-xr-xr-x 1 binbin 28672 Jan 24 15:23 libnss_winbind.so lrwxrwxrwx 1 root sys 17 Jan 27 11:51 libnss_winbind.so.1 - libnss_winbind.so lrwxrwxrwx 1 root sys 17 Oct 15 16:14 libnss_winbind.so.2 - libnss_winbind.so Here is my /etc/nsswitch.conf hosts: dns [NOTFOUND=continue UNAVAIL=continue TRYAGAIN=continue] files [N OTFOUND=return UNAVAIL=continue TRYAGAIN=return] passwd: files winbind group: files winbind Here is the compile output from libnss_winbind.so Compiling nsswitch/winbind_nss.c with -fpic nsswitch/winbind_nss.c: In function `fill_pwent': nsswitch/winbind_nss.c:600: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:612: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:629: warning: passing arg
RE: Drive already connected Error in Windows 2000
Hi Garry, I missed that in the original post, thanks. Do you do a lot of printing? I seem to remember a problem involving smbd's remaining open because of print status requests or something that Jeremy Allison was working on, but I can't find it. Either way, I think upping your flocks table space should help Don -Original Message- From: Grierson, Garry (UK07) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 04, 2003 2:42 To: MCCALL,DON (HP-USA,ex1) Cc: [EMAIL PROTECTED] Subject: RE: Drive already connected Error in Windows 2000 I did mention in my original post that I think the systems resource issues are coming from the fact that unused smbd deamon processes are clogging up the system and wont die, rather than the other way round. So I'm not sure if upping the resource table sizes would solve the problem or just delay it. I will try this and see if it makes a difference. Thank's for your response. Garry. -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: 03 February 2003 19:20 To: 'Grierson, Garry (UK07)'; [EMAIL PROTECTED] Subject: RE: Drive already connected Error in Windows 2000 Samba 2.2.7 uses fcntl locks on a regular basis for internal locking, even if you have set strict locking and posix locks=no. The errors you are getting in your log indicate that you have run out of the system resource controlling the size of the fcntl lock table. You will need to go into SAM (or have your hpux sysadm do this) and increase the kernel parameter (nflocks). Hope this helps, Don -Original Message- From: Grierson, Garry (UK07) [mailto:[EMAIL PROTECTED]] Sent: Monday, February 03, 2003 7:08 To: [EMAIL PROTECTED] Subject: Drive already connected Error in Windows 2000 The W2K client systems may be at different service pack levels: most are probably at 2 or 3. Samba 2.2.7 is running on HP-UX 11. The last entries in the log.smbd before this happens are: [2003/02/03 10:59:40, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 10:59:40, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 10:59:54, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 10:59:54, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 11:00:19, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 11:00:19, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 11:00:32, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 11:00:32, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 11:02:55, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 11:02:55, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) There is nothing strictly reproducible as it seems like a random thing! -Original Message- From: Green, Paul [mailto:[EMAIL PROTECTED]] Sent: 02 February 2003 15:46 To: 'Grierson, Garry (UK07)'; [EMAIL PROTECTED] Subject: RE: Drive already connected Error in Windows 2000 (please reply to list) Some standard questions... What service pack level for W2K? What operating system are you running under samba 2.2.7? Do you have a reproducible test case you can post? Anything out of the ordinary in your smb.conf file? Sounds like an operating system resource-limit issue... PG -Original Message- From: Grierson, Garry (UK07) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 28, 2003 7:45 AM To: [EMAIL PROTECTED] Subject: FW: Drive already connected Error in Windows 2000 The log.smbd file has lots of (No locks available) errors.. Any help? -Original Message- From: Grierson, Garry (UK07) Sent: 28 January 2003 11:36 To: '[EMAIL PROTECTED]' Subject:Drive already connected Error in Windows 2000 I have been successfully running with Samba 2.0.7 for more
RE: Drive already connected Error in Windows 2000
Samba 2.2.7 uses fcntl locks on a regular basis for internal locking, even if you have set strict locking and posix locks=no. The errors you are getting in your log indicate that you have run out of the system resource controlling the size of the fcntl lock table. You will need to go into SAM (or have your hpux sysadm do this) and increase the kernel parameter (nflocks). Hope this helps, Don -Original Message- From: Grierson, Garry (UK07) [mailto:[EMAIL PROTECTED]] Sent: Monday, February 03, 2003 7:08 To: [EMAIL PROTECTED] Subject: Drive already connected Error in Windows 2000 The W2K client systems may be at different service pack levels: most are probably at 2 or 3. Samba 2.2.7 is running on HP-UX 11. The last entries in the log.smbd before this happens are: [2003/02/03 10:59:40, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 10:59:40, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 10:59:54, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 10:59:54, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 11:00:19, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 11:00:19, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 11:00:32, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 11:00:32, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 11:02:55, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) [2003/02/03 11:02:55, 0] printing/nt_printing.c:(281) nt_printing_init: Failed to open nt forms database /usr/local/samba/locks/ntforms.tdb (No locks available) There is nothing strictly reproducible as it seems like a random thing! -Original Message- From: Green, Paul [mailto:[EMAIL PROTECTED]] Sent: 02 February 2003 15:46 To: 'Grierson, Garry (UK07)'; [EMAIL PROTECTED] Subject: RE: Drive already connected Error in Windows 2000 (please reply to list) Some standard questions... What service pack level for W2K? What operating system are you running under samba 2.2.7? Do you have a reproducible test case you can post? Anything out of the ordinary in your smb.conf file? Sounds like an operating system resource-limit issue... PG -Original Message- From: Grierson, Garry (UK07) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 28, 2003 7:45 AM To: [EMAIL PROTECTED] Subject: FW: Drive already connected Error in Windows 2000 The log.smbd file has lots of (No locks available) errors.. Any help? -Original Message- From: Grierson, Garry (UK07) Sent: 28 January 2003 11:36 To: '[EMAIL PROTECTED]' Subject: Drive already connected Error in Windows 2000 I have been successfully running with Samba 2.0.7 for more than a year now
RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help
Hi, Miles, Actually on HP-UX, you will need to add the word 'debug' at the end of each of the lines in you /etc/pam.conf file, to enable more debugging to go into the /var/adm/syslog/syslog.log file. One thing that I have seen something like this happen on is if the /etc/shells file is corrupt, or if the shell that is defined for the user (since they don't have a /etc/passwd entry, this would be whatever you put in template in the smb.conf) does not exactly match one of the lines in /etc/shells, or the defaults, if this file does not exist. The defaults for 11.0 are: /sbin/sh /usr/bin/sh /usr/bin/rsh /usr/bin/ksh /usr/bin/rksh /usr/bin/csh /usr/bin/keysh Hope this helps, Don -Original Message- From: John H Terpstra [mailto:[EMAIL PROTECTED]] Sent: Friday, January 31, 2003 1:36 To: Miles Roper Cc: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'; Esh, Andrew; Ronan Waide; STEFFENS,MICHAEL (HP-Germany,ex1); 'MCCALL,DON (HP-USA,ex1)'; 'Richard Sharpe' Subject: RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help On Fri, 31 Jan 2003, Miles Roper wrote: Hi Everyone, I'm forgetting about the password one at the moment, thanks for all your input :o) I still don't have a clue how to solve my main problem. I'm assuming that its not actually winbind related now, as I've recently tried pam_smb and get the same basic problem. Basically, when I log into the UNIX box, the username/password of a NT user is being authenticated, but doesn't actually log in. It doesn't get past the password line. I know it accepts the password. Its almost as if it can't find the shell. But the template variable is set within the smb.conf file. Permissions are fine. I have exactly the same problem with the pam_smb module. So what does PAM report into your /var/log files? Have you tried adding to each line in your /etc/pam.d/login (after the .so file name) the word 'audit' - this will increase the volume of debugging info spit out into /var/log/messages, or wherever PAM send this on your distro. - John T. If there is any further information I can send let me know. Ideas? Thanks Miles -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Friday, 31 January 2003 07:06 a.m. To: STEFFENS,MICHAEL (HP-Germany,ex1); Ronan Waide Cc: '[EMAIL PROTECTED]'; Esh, Andrew; Miles Roper; '[EMAIL PROTECTED]'; 'Richard Sharpe' Subject: RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help Hi Everyone, This whole problem with the password command not working when winbind is included as a method in the nsswitch.conf can probably be worked around by simply using the -r files (or -r nis or -r nisplus) switch. Take a look at the man page for passwd on HP-UX 11.x and see if this won't help you out. Hope this helps, Don -Original Message- From: Michael Steffens [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 28, 2003 11:52 To: Ronan Waide Cc: '[EMAIL PROTECTED]'; Esh, Andrew; Miles Roper; '[EMAIL PROTECTED]'; 'Richard Sharpe' Subject: Re: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help Ronan Waide wrote: On January 28, [EMAIL PROTECTED] said: I don't have HPUX, so I don't know what to suggest for that. I just know getent won't work without winbindd in nsswitch.conf on Linux. I think the point that was being made is that NSS support on HPUX only supports a few known types, of which one is LDAP. The discussion was basically about faking out the system so that what it thinks is LDAP is actually winbind. Yep. It's a HP-UX specific workaround. Please ignore it everywhere else. Michael -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help
Hi, Miles, Actually on HP-UX, you will need to add the word 'debug' at the end of each of the lines in you /etc/pam.conf file, to enable more debugging to go into the /var/adm/syslog/syslog.log file. One thing that I have seen something like this happen on is if the /etc/shells file is corrupt, or if the shell that is defined for the user (since they don't have a /etc/passwd entry, this would be whatever you put in template in the smb.conf) does not exactly match one of the lines in /etc/shells, or the defaults, if this file does not exist. The defaults for 11.0 are: /sbin/sh /usr/bin/sh /usr/bin/rsh /usr/bin/ksh /usr/bin/rksh /usr/bin/csh /usr/bin/keysh Hope this helps, Don -Original Message- From: John H Terpstra [mailto:[EMAIL PROTECTED]] Sent: Friday, January 31, 2003 1:36 To: Miles Roper Cc: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'; Esh, Andrew; Ronan Waide; STEFFENS,MICHAEL (HP-Germany,ex1); 'MCCALL,DON (HP-USA,ex1)'; 'Richard Sharpe' Subject: RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help On Fri, 31 Jan 2003, Miles Roper wrote: Hi Everyone, I'm forgetting about the password one at the moment, thanks for all your input :o) I still don't have a clue how to solve my main problem. I'm assuming that its not actually winbind related now, as I've recently tried pam_smb and get the same basic problem. Basically, when I log into the UNIX box, the username/password of a NT user is being authenticated, but doesn't actually log in. It doesn't get past the password line. I know it accepts the password. Its almost as if it can't find the shell. But the template variable is set within the smb.conf file. Permissions are fine. I have exactly the same problem with the pam_smb module. So what does PAM report into your /var/log files? Have you tried adding to each line in your /etc/pam.d/login (after the .so file name) the word 'audit' - this will increase the volume of debugging info spit out into /var/log/messages, or wherever PAM send this on your distro. - John T. If there is any further information I can send let me know. Ideas? Thanks Miles -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Friday, 31 January 2003 07:06 a.m. To: STEFFENS,MICHAEL (HP-Germany,ex1); Ronan Waide Cc: '[EMAIL PROTECTED]'; Esh, Andrew; Miles Roper; '[EMAIL PROTECTED]'; 'Richard Sharpe' Subject: RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help Hi Everyone, This whole problem with the password command not working when winbind is included as a method in the nsswitch.conf can probably be worked around by simply using the -r files (or -r nis or -r nisplus) switch. Take a look at the man page for passwd on HP-UX 11.x and see if this won't help you out. Hope this helps, Don -Original Message- From: Michael Steffens [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 28, 2003 11:52 To: Ronan Waide Cc: '[EMAIL PROTECTED]'; Esh, Andrew; Miles Roper; '[EMAIL PROTECTED]'; 'Richard Sharpe' Subject: Re: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help Ronan Waide wrote: On January 28, [EMAIL PROTECTED] said: I don't have HPUX, so I don't know what to suggest for that. I just know getent won't work without winbindd in nsswitch.conf on Linux. I think the point that was being made is that NSS support on HPUX only supports a few known types, of which one is LDAP. The discussion was basically about faking out the system so that what it thinks is LDAP is actually winbind. Yep. It's a HP-UX specific workaround. Please ignore it everywhere else. Michael -- John H Terpstra Email: [EMAIL PROTECTED]
RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help
Hi Everyone, This whole problem with the password command not working when winbind is included as a method in the nsswitch.conf can probably be worked around by simply using the -r files (or -r nis or -r nisplus) switch. Take a look at the man page for passwd on HP-UX 11.x and see if this won't help you out. Hope this helps, Don -Original Message- From: Michael Steffens [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 28, 2003 11:52 To: Ronan Waide Cc: '[EMAIL PROTECTED]'; Esh, Andrew; Miles Roper; '[EMAIL PROTECTED]'; 'Richard Sharpe' Subject: Re: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help Ronan Waide wrote: On January 28, [EMAIL PROTECTED] said: I don't have HPUX, so I don't know what to suggest for that. I just know getent won't work without winbindd in nsswitch.conf on Linux. I think the point that was being made is that NSS support on HPUX only supports a few known types, of which one is LDAP. The discussion was basically about faking out the system so that what it thinks is LDAP is actually winbind. Yep. It's a HP-UX specific workaround. Please ignore it everywhere else. Michael -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help
Hi Everyone, Been following this a bit; faking out nsswitch with the ldap stuff seems like a HIGH and complicated price to pay for getting a passwd program that will work to change passwords for standard unix users. One of the other things I have seen is a simple script that moved and replaced the winbind enabled nsswitch.conf with a standard one before executing the passwd command, then moved it back. Or even hack a c program together that 'gets' the username,password from the user BEFORE it exec's the actual passwd program, so you could minimize the amount of time the nsswitch.conf file would be in place WITHOUT the winbind support. Either way, this is an issue both on SUN and HP-UX systems. For the HP-UX customers, I'd like to see them submit enhancement requests through their support channel tochange the behavior of the nsswitch stuff so that we could have a code change in the OS where it belongs to deal with this. It's the squeaky wheel that gets the grease Hope this helps, Don -Original Message- From: Michael Steffens [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 28, 2003 11:52 To: Ronan Waide Cc: '[EMAIL PROTECTED]'; Esh, Andrew; Miles Roper; '[EMAIL PROTECTED]'; 'Richard Sharpe' Subject: Re: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help Ronan Waide wrote: On January 28, [EMAIL PROTECTED] said: I don't have HPUX, so I don't know what to suggest for that. I just know getent won't work without winbindd in nsswitch.conf on Linux. I think the point that was being made is that NSS support on HPUX only supports a few known types, of which one is LDAP. The discussion was basically about faking out the system so that what it thinks is LDAP is actually winbind. Yep. It's a HP-UX specific workaround. Please ignore it everywhere else. Michael -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: A registry editor taking shape ...
Hi Richard, Command line would be good, to allow add/delete/modify/list commands to a unique path to a key/value combo for batch purposes. It would also be nice to have an 'interactive mode, that would allow you to traverse the registry like a file system, so you could 'cd' into a particular branch, and make interactive changes to several registry values in a particular place. Don -Original Message- From: Richard Sharpe [mailto:[EMAIL PROTECTED]] Sent: Monday, December 09, 2002 4:57 To: [EMAIL PROTECTED] Subject: A registry editor taking shape ... Hi, A registry editor, editreg, is slowly taking shape in Samba-head. The goal is to be able to do things like: - delete keys and values - add keys and values - change keys and values - Change the SIDS/SecDescs applied to keys. - write out the changes tree - create a tree from scratch What would be useful is some thoughts on how the interface should be constructed, as in command-line, or a .reg file of commands, etc. Regards - Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, sharpe[at]ethereal.com, http://www.richardsharpe.com
[Samba] RE: How to compile samba-2.2.x on HP/UX 11.00
Hi Rene, I would be interested in your test program, and information on what archetecture and compiler you are using to test this out on. Can you send it to me off list? Thanks, Don -Original Message- From: René Nieuwenhuizen [mailto:[EMAIL PROTECTED]] Sent: Sunday, November 24, 2002 1:11 To: samba; samba Subject: How to compile samba-2.2.x on HP/UX 11.00 Hi, Here's my problem: Samba-2.2.x (even 2.2.7) compiled right out of the box on HP/UX 11.00 gives some errors in the log file: Nov 23 16:17:32 pandora smbd[6744]: [2002/11/23 16:17:32, 0] locking/posix.c:posix_fcntl_lock(661) Nov 23 16:17:32 pandora smbd[6744]: posix_fcntl_lock: WARNING: lock request at offset 0, length 9223372036854779000 returned Nov 23 16:17:32 pandora smbd[6744]: [2002/11/23 16:17:32, 0] locking/posix.c:posix_fcntl_lock(662) Nov 23 16:17:32 pandora smbd[6744]: an Invalid argument error. This can happen when using 64 bit lock offsets I've checked but the filesystem is local and a locking test program compiled with the same definitions (_LARGEFILE64_SOURCE) gave the same results. Whenever _LAGEFILE64_SOURCE is defined the upperlimit for offset is 2Gb otherwise EINVAL is returned. So I thought adding _FILE_OFFSET_BITS=64 would do the trick. Upperlimit for locking got raised beyond 2Gb and my locking test program showed me this. But now the tdb code starts acting up. Nov 23 14:43:24 pandora nmbd[13772]: [2002/11/23 14:43:24, 0] tdb/tdbutil.c:tdb_log(531) Nov 23 14:43:24 pandora nmbd[13772]: tdb(/usr/local/samba-2.2.7/var/locks/unexpected.tdb): tdb_oob len 1718185085 beyond eof at 696 The len is always 1718185085 only eof changes in between error logs. Is there anyone with some knowledge of HP/UX and who can point me at the errors I make??? Thanks in advance, BTW. I can get samba error free by removing _LARGEFILE64_SOURCE and adding _LARGEFILE_SOURCE (64 left out). But am I missing out on some specialities? -- René Nieuwenhuizen Afdeling Informatietechnologie Centraal Planbureau Bezoekadres: Van Stolkweg 14, 2585 JR Den Haag Postadres: Postbus 80510, 2508 GM Den Haag T (070) 3383 342 F (070) 3383 350 I http://www.cpb.nl/nl/general/org/afdelingen/it/ -- == == Aan dit bericht kunnen geen rechten worden ontleend. Het bericht is alleen bestemd voor de geadresseerde. Indien dit bericht niet voor u is bestemd, verzoeken wij u dit onmiddellijk aan ons te melden en de inhoud van het bericht te vernietigen. This message shall not constitute any obligations. This message is intended solely for the addressee. If you have received this message in error, please inform us immediately and delete its contents. == == -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] passwd command problem with Solaris/winbind/pam
Hi Paul, pretty neat. HP-UX also has this issue; I think the real answer is to get the vendor(s) to modify the code so that winbind is a 'valid' source, same as 'files', 'nis' 'compat' etc... For one thing, the interposititor solution doesn't take into account someone on the Unix side doing a 'll' or 'ls -l' on the directory with files owned by winbindd users, so all you get is the uid/gid number for those files (since the standard ls, etc are going to use calls that are going to be routed thru the 'real' nsswitch.conf file)... Just something to keep in mind when implementing this particular workaround... Hope this helps, Don -Original Message- From: DeStefano, Paul [mailto:Paul.DeStefano;nwdc.ibs-lmco.com] Sent: Friday, November 08, 2002 13:28 To: '[EMAIL PROTECTED]' Cc: '[EMAIL PROTECTED]' Subject: RE: [Samba] passwd command problem with Solaris/winbind/pam Hello Stephen and All, Yes, I think so. Someone I know had a good idea and it worked out pretty well. My understanding of the problem: Solaris /usr/bin/passwd doesn't tolerate the winbind nameservice in /etc/nsswitch.conf. His solution: Only use winbind resolution for samba, and leave passwd and the rest of Solaris alone. We can accomplish this using library interposition on samba (and any process which requires winbind resolution). Like overloading operators, you can override the normal system calls linked when smbd loads. (I'd never heard of interposers before, but always wondered when I'd get to use LD_PRELOAD. Whee.) Some info: http://www.itworld.com/AppDev/1006/UIR000929interposers/. Here's the skinny. He wrote an interposer library for fopen(2) that opens /usr/local/samba/lib/nsswitch.conf instead of /etc/nsswitch.conf. So, basically, if arg=/etc/nsswitch.conf, return this other file instead. We LD_PRELOAD-ed it for smbd and winbindd, and removed winbind from the real nsswitch.conf. Now, smbd (and winbindd, though I don't think it needs it) gets name resolution through winbind because it thinks winbind is in nsswitch.conf, BUT NOTHING ELSE does. This has the side benefit that logins and utilities like 'finger' do not have to perform winbind resolution either, so they're fast, again. (We're not using the Samba PAM module; we don't let Windows Domain users login to our Solaris box, so we don't need to have winbind resolution in the normal utilities. We just use winbind to authenticate users when accessing samba shares.) Now, one problem. nscd (Name Service Caching Daemon) will now run! That sounds good, right, because normally when winbind is in nsswitch.conf, nscd bails? Well, when nscd is running, name resolution is done by nscd, NOT the application, so our fopen(2) override is ineffective. nscd doesn't crash, but doesn't resolve through winbind either, so smbd fails to lookup Windows Domain accounts. Solution: turn off nscd, easy as that. Okay, so that's what we did. We're satisfied with it. If you don't need nscd, I think you will be too. Your reactions are eagerly anticipated! I bet I can convince my friend to post the source, if you really want it. But I encourage you to write your own interposer; it's pretty easy and maybe you'll notice something we didn't. __ Paul DeStefano -Original Message- From: Michaels, Stephen P. [mailto:Steve.Michaels;jhuapl.edu] Sent: November 04, 2002 9:45 AM To: '[EMAIL PROTECTED]' Subject: [Samba] passwd command problem with Solaris/winbind/pam Hi- I am running Samba 2.2.5 on Solaris 8 with winbind and pam configured. I have the following in my nsswitch.conf: passwd: files winbind group: files winbind Now local users on the Solaris 8 machine cannot change there password using the passwd command: Here is the sample output: # passwd michasp1 Enter new password: Enter new password again: Supported configurations for passwd management are as follows: passwd: files passwd: files ldap passwd: files nis passwd: files nisplus passwd: compat passwd: compat AND passwd_compat: ldap OR passwd_compat: nisplus Please check your /etc/nsswitch.conf file Permission denied # Does anybody have a workaround solution for this or I am doing something wrong? Thanks Stephen P. Michaels ISS-1 Server Systems Group The Johns Hopkins University Applied Physics Laboratory 11100 Johns Hopkins Rd. Laurel, MD. 20723-6099 (443) 778-7527 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: Problems with map hidden (and possibly map system)
Hi Glen, Just to confirm, this also happens with Samba 3.0alpha20. If I make a file on my c drive, drag it onto the share (defined below) named 'mccall' (unix perms 777), that works. If I THEN mark that file readonly on my c drive, and drag it onto the share 'mccall' again, it asks me if I want to overwrite the existing file, I say yes, and I get the error: Cannot copy filename: Access is denied. Make sure the disk is not full or write-protected and that the file is not currently in use. My smb.conf: # Global parameters [global] workgroup = TEST netbios name = ECL2000 server string = Samba Server smb passwd file = /var/opt/samba/locks/smbpasswd username map = /usr/local/samba/lib/username.map syslog = 0 log file = /var/opt/samba/log.%m max log size = 1000 lock dir = /var/opt/samba/locks read only = No short preserve case = No dos filetime resolution = Yes [homes] comment = Home Directories browseable = No [tmp] comment = Temporary file space path = /tmp [mccall] path = /tmp/mccall create mask = 0777 map hidden = Yes Hope this helps, Don -Original Message- From: Glen Gibb [mailto:grg;ridley.unimelb.edu.au] Sent: Tuesday, November 05, 2002 20:03 To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: Problems with map hidden (and possibly map system) On Wed, 6 Nov 2002, Glen Gibb wrote: Have you tested this against a Windows 2000 or XP server ? What is the behavior there ? No, sorry. I don't have access to a 2k/XP server (at least not for at a month or so). I've done a little more testing (between a Win2K and an NT4 server at a site that I don't manage), and I can cofirm that this is a Samba only problem. New Test Case: == 1. Create a file on a local drive 2. Copy the file to the server (eg. by dragging). 3. Change the hidden attribute of the local file 4. Copy file to server 5. A message will appear asking if you want to replace the file. Say yes Copying from 2k to NT works fine. Copying from 2k to Samba with map hidden = no works fine Copying from 2k to Samba with map hidden = yes FAILS (ps. make sure the create mask doesn't clear the world execute bit). Hope this helps. Glen
RE: Pb make samba 2.2.5 with snprintf on HPUX11
Hi Patrick, Problem is that the header file stdio.h on HP-UX 11 had a bad declaration for snprintf() (doesn't match the standard OR the man page). HP is planning on fixing this in a future release, but for now, if you are using gcc, you'll need to edit the stdio.h that gcc is using so that the snprintf() entry reads: extern int snprintf(char *, size_t, const char *,...); instead of: extern int snprintf(char *, size_t, char *,...); Hope this helps, Don -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, August 30, 2002 4:21 To: [EMAIL PROTECTED] Subject: Pb make samba 2.2.5 with snprintf on HPUX11 Hello I am compiling samba 2.2.5 on HPUX 11 with Gcc 2.95.2. During the make i get an error : Compiling lib/snprintf.c In file included from lib/snprintf.c:69: /opt/gcc/lib/gcc-lib/hppa2.0n-hp-hpux11.00/2.95.2/include/stri ng.h:29: warning: conflicting types for built-in function `memcmp' /opt/gcc/lib/gcc-lib/hppa2.0n-hp-hpux11.00/2.95.2/include/stri ng.h:85: warning: conflicting types for built-in function `memcpy' /opt/gcc/lib/gcc-lib/hppa2.0n-hp-hpux11.00/2.95.2/include/stri ng.h:87: warning: conflicting types for built-in function `memset' lib/snprintf.c:790: conflicting types for `snprintf' /opt/gcc/lib/gcc-lib/hppa2.0n-hp-hpux11.00/2.95.2/include/stdi o.h:447: previous declaration of `snprintf' *** Error exit code 1 Stop. Thanks for your help Patrick GIRARD ATMEL Nantes [EMAIL PROTECTED]
RE: is this the right maillist?
Hi Ernst, Problem is that HPUX does not have a C99 compatible version of snprintf (or vsnprintf, I forget which). Either way, what happens is that the snprintf.c module has ifdef's that make sure that we DON'T include stdio.h if we are going to redefine snprintf or vsnprintf (which we ARE, since we don't have a C99 version). The ifdef's do their job, but UNFORTUNATELY, we DO include another module, called stdlib.h, which includes pwd.h, which includes stdio.h (oops!), and so you get the redefinition error. Not actually sure what to do about this at this time I'll let you know if I come up with anything... Don -Original Message- From: Ernst Cozijnsen [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 11, 2002 5:38 To: [EMAIL PROTECTED] Subject: is this the right maillist? \Is this the right list for these type of questions?? When i do a configure --with-fhs everything seems 2 go fine but when i do a make i get this: ILE=/usr/local/samba/etc/samba/private/smbpasswd.tdb Using LIBS = -lgen -lsec -lnsl Compiling lib/snprintf.c lib/snprintf.c:764: conflicting types for `vsnprintf' /opt/gnu/lib/gcc-lib/hppa1.1-hp-hpux/3.0/include/stdio.h:494: previous declaration of `vsnprintf' lib/snprintf.c:779: conflicting types for `snprintf' /opt/gnu/lib/gcc-lib/hppa1.1-hp-hpux/3.0/include/stdio.h:493: previous declaration of `snprintf' make: *** [lib/snprintf.o] Error 1 It seems there are a few differences of declarations in the include files. We use gcc version 3.0 and on the OS we've got the latest patchbundel of June installed. Is this a knows error? and is there a fix for it? With kind regards, Ernst Cozijnsen -- This message contains information that may be privileged or confidential and is the property of the Cap Gemini Ernst Young Group. It is only intended for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.
RE: sessionid.tdb missing after build and client read failutre
Hi David, It looks like you might have misspelt gdb in your smb.conf line (in your message it is spelt gbd Don -Original Message- From: David Shapiro [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 02, 2002 8:56 To: 'Andrew Bartlett'; David Shapiro Cc: 'Richard Sharpe'; '[EMAIL PROTECTED]' Subject: RE: sessionid.tdb missing after build and client read failutre Thank you Andrew. I was looking at joining because it was mentioned that to get sessionid.tdb, you needed to join domain. I looked ing smbd.log and saw a connection from davidsha, and then in my workstation log and saw at the bottom: user_in_list: checking user |INS+DavidSha| against |INS+DavidSha| [2002/07/02 08:40:53, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is ins+davidsha [2002/07/02 08:40:53, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [INS+DavidSha]! [2002/07/02 08:40:53, 1] smbd/service.c:make_connection_snum(513) Couldn't find group @Users [2002/07/02 08:40:53, 3] smbd/service.c:make_connection_snum(523) Connect path is /usr/local/samba/lib [2002/07/02 08:40:53, 3] smbd/sec_ctx.c:push_sec_ctx(241) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2002/07/02 08:40:53, 3] smbd/uid.c:push_conn_ctx(279) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2002/07/02 08:40:53, 3] smbd/sec_ctx.c:set_sec_ctx(273) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2002/07/02 08:40:53, 0] lib/fault.c:fault_report(36) === [2002/07/02 08:40:53, 0] lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 8127 (3.0-alpha17) Please read the file BUGS.txt in the distribution [2002/07/02 08:40:53, 0] lib/fault.c:fault_report(39) === I also keep getting an xterm session pop up that says: xterm: Can't execvp /usr/local/bin/gdb I think this comes from the line in smb.conf: panic action = /usr/openwin/bin/xterm -display $DISPLAY -e /usr/local/bin/gbd -p %d gdb is in /usr/local/bin. What does it mean it can't execvp it? -Original Message- From: Andrew Bartlett [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 02, 2002 8:36 AM To: David Shapiro Cc: 'Richard Sharpe'; '[EMAIL PROTECTED]' Subject: Re: sessionid.tdb missing after build and client read failutre David Shapiro wrote: getent group shows davidsha is in domain admin. I list using a net from a server I buildt 3 months ago and have not updated, and the new net command from yesterday cvs build of head. Both report I joined the domain, but I do not have a sessionid.tdb after it is done. I can not access shares as it stands now... Joined domain INS. So it joined fine. sessionid.tdb is not related to this at all - and should be created on the first login to the server. Look into the smbd logs for connections, not the domain join. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net
RE: Very bad performance when copying large files from windows to samba-share
Hi Lars, Just a guess, but what I see is a zero byte write request a offset 719970304; a zero byte write request to an offset beyond the eof is typically used by ms applications to 'extend' a file, ie make sure physical space adequate for the entire eventual operation is available before writing data to the file. if your OS is actually reserving this space by writing 'zeros' to each and every byte between 0 and 719970304, this could conceivably take a LONG time, and explain the large time gap between the zero byte write request, and the eventual RESPONSE to this request approx. 45 seconds later. Samba has a smb.conf parameter to deal with this called 'strict allocate' - take a look at it in the man page for smb.conf. Hope this helps, Don -Original Message- From: Lars Heineken [mailto:[EMAIL PROTECTED]] Sent: Monday, June 24, 2002 14:19 To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: Very bad performance when copying large files from windows to samba-share This the summary: Most interresting is the gap between the beginning of the transaction and the actual writing (writing begins at about 45sec) Any traffic above this point is just minor. After the 45sec the real transfer begins. As I found no way to search for checksum errors, I didn't found any.. The graph looks like this: -- -- -- ---| | ...45s Or that in Bandwith: ## -- ## -- ---| | ...45s I can attach screenshots if interested. No. TimeSourceDestination Protocol Info 1 0.00lars-heineken.lan 192.168.10.255CUPS ipp://192.168.10.1:631/printers/HPLaserjet6L (idle) 2 10.996660 www.heineken.lan 192.168.10.255CUPS ipp://heineken.lan:631/printers/HPLaserJet6L (idle) 3 11.999360 lars-heineken.lan arne-heineken.lan TCP hostname boomerang [PSH, ACK] Seq=1926846500 Ack=1568123 Win=6432 Len=28 4 12.009310 lars-heineken.lan arne-heineken.lan TCP hostname boomerang [PSH, ACK] Seq=1926846528 Ack=1568123 Win=6432 Len=36 5 12.009479 arne-heineken.lan lars-heineken.lan TCP boomerang hostname [ACK] Seq=1568123 Ack=1926846564 Win=7704 Len=0 6 13.987759 arne-heineken.lan lars-heineken.lan SMB Tree Connect AndX Request, Path: \\LARS-HEINEKEN\IPC$ 7 13.989816 lars-heineken.lan arne-heineken.lan SMB Tree Connect AndX Response 8 13.990034 arne-heineken.lan lars-heineken.lan LANMAN NetWkstaGetInfo Request 9 13.990220 lars-heineken.lan arne-heineken.lan LANMAN NetWkstaGetInfo Response 10 13.990568 arne-heineken.lan lars-heineken.lan LANMAN NetServerGetInfo Request 11 13.990865 lars-heineken.lan arne-heineken.lan LANMAN NetServerGetInfo Response 12 13.991240 arne-heineken.lan lars-heineken.lan LANMAN NetWkstaGetInfo Request 13 13.991362 lars-heineken.lan arne-heineken.lan LANMAN NetWkstaGetInfo Response 14 13.992297 arne-heineken.lan lars-heineken.lan LANMAN NetShareEnum Request 15 13.992524 lars-heineken.lan arne-heineken.lan LANMAN NetShareEnum Response 16 13.993013 arne-heineken.lan lars-heineken.lan LANMAN NetWkstaGetInfo Request 17 13.993125 lars-heineken.lan arne-heineken.lan LANMAN NetWkstaGetInfo Response 18 14.045036 arne-heineken.lan lars-heineken.lan SMB Open AndX Request, Path: \The Man Who Sued God (2001).XPD.ShareReactor.avi 19 14.046435 lars-heineken.lan arne-heineken.lan SMB Open AndX Response, FID: 0x1ba0 20 14.046757 arne-heineken.lan lars-heineken.lan SMB Write Request, FID: 0x1ba0, 0 bytes at offset 719970304, 0 bytes at offset 719970304 21 14.079254 lars-heineken.lan arne-heineken.lan TCP netbios-ssn pe-mike [ACK] Seq=1974177356 Ack=1615097 Win=5840 Len=0 22 15.895193 www.heineken.lan 192.168.10.255RIPv1 Response 23 16.048326 arne-heineken.lan lars-heineken.lan SMB Transaction2 Request FIND_FIRST2, Pattern: \* 24 16.048429 lars-heineken.lan arne-heineken.lan TCP netbios-ssn pe-mike [ACK] Seq=1974177356 Ack=1615182 Win=5840 Len=0 25 16.173695 arne-heineken.lan lars-heineken.lan SMB Tree Disconnect Request 26 16.173765 lars-heineken.lan arne-heineken.lan TCP netbios-ssn pe-mike [ACK] Seq=1974177356 Ack=1615221 Win=5840 Len=0 27 26.109439 lars-heineken.lan 192.168.10.255BROWSER Host Announcement LARS-HEINEKEN, Workstation, Server, Print Queue Server, Xenix Server, NT Workstation, NT Server 28 27.989388 lars-heineken.lan 192.168.10.255CUPS ipp://192.168.10.1:631/printers/HPDJ520 (idle) 29 27.989448 lars-heineken.lan 192.168.10.255CUPS ipp://192.168.10.1:631/printers/lp (idle) 30 30.989599
[Samba] RE: INFORMAZIONE
Hi, Best you discuss this with your HP support people - cifsmount is a part of the CIFSCLIENT software (based on Sharity client), NOT samba. Sorry, Don -Original Message- From: Simo Sorce [mailto:[EMAIL PROTECTED]] Sent: Friday, May 31, 2002 4:19 To: Manuel Clericuzio Cc: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: Re: INFORMAZIONE From samba-technical. On Fri, 2002-05-31 at 09:58, Manuel Clericuzio wrote: Buongiorno, mi hanno chiesto di montare un filesystem NT (macchina win2000) su una macchina con Unix HP (release 11.11). Ho provato a fare dei tentativi con il comando cifsmount ma non riesco. Spero che voi mi potiate aiutare. Grazie e buona giornata Manuel Better you write in english Manuel and on the users support list not the technical one! I will translate this time only to benefit of the list and the user: Good morning, I've been requested to mount a filesystem shared by a win2k server on a HP-UX (11.11) machine. I tried to mount it with the cifsmount command but failed. Is there anyone that can help me. Thank you. -- Simo Sorce -- Una scelta di liberta': Software Libero. A choice of freedom: Free Software. http://www.softwarelibero.it -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Windows won't send passwd to samba server
Hi CJ, are you using UNENCRYPTED passwords? (ie if you do testparm|grep encrypt pass does it come back and say encrypt passwords = no) If so, then this is normal windows client behavior (for later clients like win2k) - they can successfully negotiate cleartext passwords, but will not actually SEND a cleartext password across the wire until you respond to a prompt that asks for username password again. The first time, it sends a null password (as you see in the trace), and then when it fails, should ask you for a username and password. If you type in the correct username and password then, it should work... Hope this helps, Don -Original Message- From: CJ ferguson [mailto:[EMAIL PROTECTED]] Sent: Friday, May 31, 2002 1:13 To: [EMAIL PROTECTED] Subject: [Samba] Windows won't send passwd to samba server Hello I cannot get my Windows98 machines to connect to my Samba server(2.2.4) shares. It appears that my Win machines are not transmitting the password. The Samba server looks OK. On the server machine, smbclient -L server -U user1 prompts me for a passwd, then, after authentication, displays the shares. When I attempt to map a share from my Win machines, the samba log file shows ... smbd/reply.c:reply_sesssetup_and_X(973) Defaulting to Lanman password for user1 smbd/password.c:password_ok(593) Null passwords not allowed. smbd/reply.c:reply_sesssetup_and_X(989) Rejecting user 'user1': authentication failed smbd/error.c:error_packet(91) error string = No such file or directory ... I verified the null passwd being sent from the Win machines by turning on the sniffer(ethereal) on the samba server and looking at the packets coming through. In packets labeled by the sniffer Session Setup AndX Request, I can see the account name, and primary domain name, but when it comes to the password, the length is set to '1' and the password is set to '00'. I am using the same login and passwords for both my Linux and Win98 machines. What am I missing? I would appreciate any info or insight as to what will help me solve my problem. CJ Ferguson [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: INFORMAZIONE
Hi, Best you discuss this with your HP support people - cifsmount is a part of the CIFSCLIENT software (based on Sharity client), NOT samba. Sorry, Don -Original Message- From: Simo Sorce [mailto:[EMAIL PROTECTED]] Sent: Friday, May 31, 2002 4:19 To: Manuel Clericuzio Cc: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: Re: INFORMAZIONE From samba-technical. On Fri, 2002-05-31 at 09:58, Manuel Clericuzio wrote: Buongiorno, mi hanno chiesto di montare un filesystem NT (macchina win2000) su una macchina con Unix HP (release 11.11). Ho provato a fare dei tentativi con il comando cifsmount ma non riesco. Spero che voi mi potiate aiutare. Grazie e buona giornata Manuel Better you write in english Manuel and on the users support list not the technical one! I will translate this time only to benefit of the list and the user: Good morning, I've been requested to mount a filesystem shared by a win2k server on a HP-UX (11.11) machine. I tried to mount it with the cifsmount command but failed. Is there anyone that can help me. Thank you. -- Simo Sorce -- Una scelta di liberta': Software Libero. A choice of freedom: Free Software. http://www.softwarelibero.it
RE: Disk full error message with certain apps
Hi Mark, This may not be your problem, but I had a person that was getting the same symptoms with certain ms office 97 apps (specifically ones that had links to other docs in them). Setting strict allocate = yes took care of the problem for them... Hope this helps, Don -Original Message- From: Mark Branigan [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 30, 2002 5:00 To: [EMAIL PROTECTED] Subject: Disk full error message with certain apps Hi all, First off, Samba -- great bit of software, goes like a rocket. Now I have done a bit of creeping, on to the problem. The problem is solid, repeatable and reproducible. My gut feeling is it is something to do with the way Samba and certain Microsoft file creation/modification/extending APIs interact. The problem *** When trying to save files into a directory which is on a Samba server via an NT4 workstation I get variations on the theme that the disk is full. Word 97 reports The save failed due to out of memory or disk space and then after retrying I get The disk is full. Free some space yadda blah blah etc ... Other apps report Disk Full. These include a package called PenServer and Eudora Photoshop have also been reported to me. Some apps are ok. For example Mozilla and Excel. The fun bit is that The disk is nowwhere near full. 49GB share with 45GB available I can save a 50MB file into the same directory via NT explorer. I can save the word document in the parent directory. I can save the word document in some of the sibling directories but not all of them. We're using Samba 2.2.4 precompiled binary from samba.org on Solaris 2.8 SPARC hardware. The clients are NT4 workstations with SP6a. Samba logs have nothing related to the problem. I have checked available inodes and only 1% are used. The disk space free stats are all ok. The oplock and other locking settings appear to have very little effect. Snoop-ing the network traffic reveals very little apart from client and server happily talking to each other. Truss doesn't show any odd behaviour or unusual error messages. Debug level 5 doesn't show any unusual messages, just slows down samba. Problem end I posted this to the samba list but had very little response apart from a number of people e-mailing privately saying they also have a problem, can't find a fix and to let them know what the fix is. I have raised it as a bug (PR#24286) but I am not sure how long it takes to wiggle it's way through the system. Hopefully somebody here can help or let me know where else I can get help with this problem. Apologies if this list isn't the right place. Anyhelp greatly appreciated. Thanks, Mark
RE: [Samba] annoying authentication failure problem: sambatest[hostname]
Hi Toni, This error is the result of a test that samba does in the module server_validate, (in password.c) to check the password server for a bug where NT 4 (some versions) would not correctly set the guest bit. There is currently no smb.conf parameter to allow you to control this behavior, so to change it , you would need to actually hack the password.c module to disable it. Not difficult, but you would leave yourself open to a security hole, if the password server you are using (esp. if you have password server=* set in smb.conf) gets one of the versions of NT that has the bug after you have removed this protection. Most of us don't have control over our NT domains, so we can't guarantee this won't happen - thus our 'paranoia' in the code we CAN control ;-. Hope this helps, Don -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, May 29, 2002 6:09 To: [EMAIL PROTECTED] Subject: [Samba] annoying authentication failure problem: sambatest[hostname] Hello, I have a little problem which appeared when I installed first 2.2 generation sambaserver on linux and same effect when updated 2.0.3 to 2.2.2 on hp-ux. The actual problem is that my security servers log (NT4 server) get's failure message every time someone connects to samba share which is quite log and it get's frustrating to search real information from logs when this failure message fills log. Fortunately the service works fine and this problem is transparent to a user but bothers administration... If someone would have a tip to remove this feature it will be highly appreciated. about authentication settings security=server password server=[NT4 servername] which is also pdc the error message from nt eventviewer security log: Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 529 Date: 29.5.2002 Time: 12:32:50 User: NT AUTHORITY\SYSTEM Computer: [COMPUTERNAME] Description: Logon Failure: Reason: Unknown user name or bad password User Name: SAMBATEST[SAMBASERVERNAME] Domain: CIMCORP Logon Type: 3 Logon Process: KSecDD Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Workstation Name: \\[SAMBASERVERNAME] Best regards, Toni Niemi -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Unable to configure 2.2.4 on HPUX 10.20 (locking not available)
Hello Ed, It means that you are using the built in C complier shipped with HPUX, which is not Ansi C compliant. You'll need to ether go to the gnu.org web site and pull a hpux version of gcc, or purchase HP's ansi c compliant compiler. There are a number of messages on the searchable samba archives dealing with this, if you need more info: http://marc.theaimsgroup.com/?l=sambar=1w=2 Hope this helps, Don -Original Message- From: Ed Rodgers [mailto:[EMAIL PROTECTED]] Sent: Wednesday, May 29, 2002 8:54 To: '[EMAIL PROTECTED]' Subject: [Samba] Unable to configure 2.2.4 on HPUX 10.20 (locking not available) While running configure on samba2.2.4 source on an HP-UX 10.20 OS, I get the following: checking configure summary... ERROR: No locking available. Running Samba would be unsafe configure: error: summary failure. Aborting config What exactly does No locking available mean, and is there a workaround? I'm currently running version 1.9.15p8 on the same OS. TIA! Ed Rodgers [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] disk full error message (again, again)
I seem to remember excel 97 and word 97 sometimes having problems due to the fact that we don't actually reserve space on the disk when they do a zero byte write to extend a file - try setting 'strict allocate=yes' in your smb.conf file and see if that makes any difference... Just an idea, Don -Original Message- From: Mark Branigan [mailto:[EMAIL PROTECTED]] Sent: Friday, May 24, 2002 7:11 To: [EMAIL PROTECTED] Subject: [Samba] disk full error message (again, again) Hi all, I've got a bit of an odd problem When trying to save files into a directory which is on a Samba server via an NT4 workstation I get variations on the theme that the disk is full. Word 97 reports The save failed due to out of memory or disk space and then after retrying I get The disk is full. Free some space yadda blah blah etc ... Other apps report Disk Full The fun bit is that The disk is nowwhere near full. 49GB share with 45GB available I can save a 50MB file into the same directory via NT explorer. I can save the word document in the parent directory. I can save the word document in some of the sibling directories but not all of them. We're using Samba 2.2.4 precompiled binary from samba.org on Solaris 2.8 SPARC hardware. The clients are NT4 workstations with SP6a. I have searched the Samba list archives, Google and asked around but haven't found a satisfactory answer yet. My testing has so far drawn a blank: Samba logs have nothing related to the problem. I have checked available inodes and only 1% are used. The disk space free stats are all ok. The oplock and other locking settings appear to have very little effect. Snoop-ing the network traffic reveals very little apart from client and server happily talking to each other. Truss doesn't show any odd behaviour or unusual error messages. Debug level 5 doesn't show any unusual messages, just slows down samba. Anyhelp greatly appreciated. Thanks, Mark -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Error compiling...
Hello Donovan, This error typically indicates that you are using the built in hpux c compiler that ships with the os - this compiler is mainly there to allow for kernel regens, etc - it is NOT ansi compliant, and will not compile samba. You can either purchase the ANSI compliant hp compiler, or go to gnu.org and follow the links to pull the free gcc compiler down and use that. Hope this helps, Don -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 21, 2002 8:55 To: [EMAIL PROTECTED] Subject: [Samba] Error compiling... I am trying to compile Samba 2.2.4 on an HP-UX 10.20 machine, and I get this error at the end: checking configure summary... ERROR: No locking available. Running Samba would be unsafe configure: error: summary failure. Aborting config I looked on the web for possible causes, I didn't see anything that answered my question. This box that I'm compiling on is currently running 1.9.16, and I am using it for testing before I deploy 2.2.4 into production at a site that just upgraded their PC's to 2000 from NT 4.0. They are currently using 2.0.0.0. Any ideas?? Donovan Scott Support Technician Healthmatics EmSTAT Ofc: (512) 583-1128 Fax: (512) 583-0330 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: Problem with smbclient
Hi Paul, I just did a quick test from hpux 11.11 samba2.0.9 smbclient to a share on a win2k sp2 server, and didn't experience any problems: the command I used was /opt/samba/bin/smbclient //ceres/i386 -Umyuser -T c /tmp/test.tar What are you doing different? Don -Original Message- From: Paul Baker, SO16 6TU [mailto:[EMAIL PROTECTED]] Sent: Monday, May 20, 2002 8:52 To: Samba Technical Subject: Problem with smbclient I'm running Samba 2.0.9 under HP-UX 11.11. It's working fine as a file server to about 120 WIN2K PC's but I'm having a problem with smbclient. I can connect to my PC OK and see my folders, move around etc but when I try to use tar to back up a folder to the HP9000 the PC usually (but not always crashes) with the blue screen showing DRIVER_IRQL_NOT_LESS_OR_EQUAL message. According to Microsoft, this can have many causes, some of which are fixed in Service Pack 2. I've installed this but it's made no difference. Anyone else have any experience of this? Paul Baker Enichem UK
RE: [Samba] Problems building Samba 2.2.4 under HPUX 10.20
Hi folks, 10.20 is pretty old - but I'll see what I can do about getting a compile/build patch put together for 2.2.4 on 10.20 in the next couple of days... Don -Original Message- From: Moeller Daniel (QI/EES3) * [mailto:[EMAIL PROTECTED]] Sent: Tuesday, May 14, 2002 4:10 To: 'Roland Langner'; [EMAIL PROTECTED] Subject: AW: [Samba] Problems building Samba 2.2.4 under HPUX 10.20 Hello, I can't get Samba 2.2.4 to compile on HP-UX, too. I'm also interested in a solution. Kind regards, Daniel -Ursprüngliche Nachricht- Von: Roland Langner [mailto:[EMAIL PROTECTED]] Gesendet: Montag, 13. Mai 2002 12:38 An: [EMAIL PROTECTED] Betreff: [Samba] Problems building Samba 2.2.4 under HPUX 10.20 i tried to build Samba 2.2.4 under HPUX 10.20, but configure generated a Makfile with systax errors. make Make: line 664: syntax error. Stop. Makefile Line 664 shows: : $(WINBIND_NSS_PICOBJS) there should be something before the : configure said: checking whether to build winbind... no, unsupported on hpux10.20 is there a woraround, or can somebody tell me whats before the : -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] bug (?)
Hi Panagiotis, I just verified I see the same behavior - looking into it now... Don -Original Message- From: Panagiotis J. Roris [mailto:[EMAIL PROTECTED]] Sent: Friday, April 26, 2002 12:25 PM To: [EMAIL PROTECTED] Subject: [Samba] bug (?) Hi, I would like to mention the existence of an not browseable undefined sharename in samba. I tested it with samba 2.2.1a, 2.2.3a and linux, sunos, freebsd. If you run a samba server and try to connect at sharename bin, which is not defined in the smb.conf you actually achieve it. (the user that tries to connect must be is smbpasswd) In linux after the connection you see the /bin dir and in freebsd you go to / and you can browse the whole tree. (access is not with write permissions). Is this a feature of samba, because it looks to me as a bug or something? A small proof follows, not wanted to make this mail so big. Thank you. prori@ikaros: [106] ~ uname -r 4.5-RELEASE prori@ikaros: [103] ~ cat /usr/local/etc/smb.conf [global] workgroup = HOME server string = Unix FreeBSD hosts allow = 192.168.0. 127. load printers = no log file = /var/log/log.%m max log size = 50 security = user encrypt passwords = yes socket options = TCP_NODELAY local master = yes dns proxy = no client code page=737 # Share Definitions == [homes] comment = Home Directories browseable = no writeable = yes prori@ikaros: [101] ~ id uid=1001(prori) gid=1001(prori) groups=1001(prori) prori@ikaros: [102] ~ smbd -V Version 2.2.3a prori@ikaros: [104] ~ smbclient //ikaros/bin added interface ip=192.168.0.202 bcast=192.168.0.255 nmask=255.255.255.0 Password:** Domain=[HOME] OS=[Unix] Server=[Samba 2.2.3a] smb: \ smb: \ cd /root smb: \root\ smb: \root\ ls . D0 Fri Apr 19 19:59:36 2002 .. D0 Fri Apr 19 20:06:50 2002 .msgsrc H2 Sun Mar 10 09:53:50 2002 .klogin H 142 Mon Jan 28 15:13:22 2002 .login H 297 Mon Jan 28 15:13:22 2002 .profileH 251 Mon Jan 28 15:13:22 2002 .historyH 868 Sun Mar 3 09:02:27 2002 .xinitrc AH 15 Sun Mar 3 09:39:32 2002 .xsession AH 15 Sun Mar 3 09:39:32 2002 .ssh DH0 Thu Apr 18 16:57:51 2002 zlib.v1.1.corrected.patch 1759 Thu Apr 18 17:32:06 2002 62760 blocks of size 32768. 40290 blocks available smb: \root\ ... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] bug (?)
Hi Everyone, The ability to access the /usr/bin subdirectory is a function of samba looking for a 'home directory' in the user store (/etc/passwd in this case). It FINDS it because the system user 'bin' is defined as: bin:*:2:2::/usr/bin:/sbin/sh You can prevent this behavior by adding the following line to your 'homes' section of the smb.conf file: valid users = %S This will ensure that the user of the home directory is in fact the appropriate unix user (for in this instance 'bin')... BTW, this is true of ANY 'home directory' listed in the /etc/passwd file... Hope this helps, Don -Original Message- From: Panagiotis J. Roris [mailto:[EMAIL PROTECTED]] Sent: Friday, April 26, 2002 12:25 PM To: [EMAIL PROTECTED] Subject: [Samba] bug (?) Hi, I would like to mention the existence of an not browseable undefined sharename in samba. I tested it with samba 2.2.1a, 2.2.3a and linux, sunos, freebsd. If you run a samba server and try to connect at sharename bin, which is not defined in the smb.conf you actually achieve it. (the user that tries to connect must be is smbpasswd) In linux after the connection you see the /bin dir and in freebsd you go to / and you can browse the whole tree. (access is not with write permissions). Is this a feature of samba, because it looks to me as a bug or something? A small proof follows, not wanted to make this mail so big. Thank you. prori@ikaros: [106] ~ uname -r 4.5-RELEASE prori@ikaros: [103] ~ cat /usr/local/etc/smb.conf [global] workgroup = HOME server string = Unix FreeBSD hosts allow = 192.168.0. 127. load printers = no log file = /var/log/log.%m max log size = 50 security = user encrypt passwords = yes socket options = TCP_NODELAY local master = yes dns proxy = no client code page=737 # Share Definitions == [homes] comment = Home Directories browseable = no writeable = yes prori@ikaros: [101] ~ id uid=1001(prori) gid=1001(prori) groups=1001(prori) prori@ikaros: [102] ~ smbd -V Version 2.2.3a prori@ikaros: [104] ~ smbclient //ikaros/bin added interface ip=192.168.0.202 bcast=192.168.0.255 nmask=255.255.255.0 Password:** Domain=[HOME] OS=[Unix] Server=[Samba 2.2.3a] smb: \ smb: \ cd /root smb: \root\ smb: \root\ ls . D0 Fri Apr 19 19:59:36 2002 .. D0 Fri Apr 19 20:06:50 2002 .msgsrc H2 Sun Mar 10 09:53:50 2002 .klogin H 142 Mon Jan 28 15:13:22 2002 .login H 297 Mon Jan 28 15:13:22 2002 .profileH 251 Mon Jan 28 15:13:22 2002 .historyH 868 Sun Mar 3 09:02:27 2002 .xinitrc AH 15 Sun Mar 3 09:39:32 2002 .xsession AH 15 Sun Mar 3 09:39:32 2002 .ssh DH0 Thu Apr 18 16:57:51 2002 zlib.v1.1.corrected.patch 1759 Thu Apr 18 17:32:06 2002 62760 blocks of size 32768. 40290 blocks available smb: \root\ ... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Problem with Samba2.2.3a
Hello Hemant, You will need either the HP ANSI C compiler (NOT the one that ships with HPUX for free) or the gcc C complier to compile SAMBA on HPUX. That is the reason you are getting the configure errors you are getting. If you do not wish to compile for 11.i, You can get the binaries for 2.2.3a from HP software web site for free: http://www.software.hp.com under the 'network and system management' section. It is called cifs/9000 server 2.2a. It is a software depot that is installable via HP's swinstall. If you have a support contract with HP, you can also get support for this version directly from HP, just like you do with the HP-UX operating system. You can also get these binaries from the samba.org web site: http://us1.samba.org/samba/ftp/bin-pkgs/hp/samba2.2.3a/ Hope this helps! Don -Original Message- From: Hemant Kumar Choudhary [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 24, 2002 8:01 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [Samba] Problem with Samba2.2.3a Importance: High Hello John I have downloaded samba-latest.tar from the website. I just want to know can I install it on my HP-UX 11i machine or not ? Can it be installed on this machine. Also, please let me know if I can install samba-2.0.7 on my HP-UX 11i machine or not. When I do ./configure, I am getting the following error checking configure summary WARNING: No automated network interface determination ERROR: no seteuid method available configure: error: summary failure. Aborting config Can you please help me in this regard ? Thanks and regards, Hemant Kumar Choudhary Software Engineer Patni Computer Systems Limited Phone: 6930205/06/09 Extn: 2105 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: Secondary WINS Enhancement
Hi Eric, Yep, it's in there. you can now have a wins server= ipaddr1 ipaddr2 ipaddr3 ... and the code will build a wins_svr_list that will be used to resolve names. Hope this helps, Don -Original Message- From: Eric Roseme [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 24, 2002 11:32 AM To: Samba Technical Subject: Secondary WINS Enhancement Did the secondary WINS server config enhancement go into 3.0? The original was submitted by Dave Olker of HP about 2 years ago, then Chris Hertel picked it up and was re-designing it. What is the current status? Note that this is *not* redundant WINS or WINS sync. This is to be able to configure a secondary MS WINS server in smb.conf. Thanks, Eric Roseme Hewlett-Packard
RE: [Samba] Time Outs on Samba Server
Hi Tony, Doesn't sound like SAMBA if all you have to do to fix it is hit the enter key on your server. Sounds more like some sort of power save mode, either h/w or in Linux- I'm not familiar with RedHat, but you might want to check your pc bios settings to see if there is some default power save mode that it goes into if there is no keyboard activity within a certain period of time... Don -Original Message- From: Neves, Tony [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 11:15 AM To: '[EMAIL PROTECTED]' Subject: [Samba] Time Outs on Samba Server To Whom this May Concern: I have installed samba on my RedHat 7.2 linux server. It works fine for a period but then it times out loosing the connection and locks out the server preventing further connection between the client and the server. To correct the problem I have to walk up to the server and hit the enter key. This frees the lockup and then I have to re-establish the connection closing down the client application and logging back in. Can you please help me! P.S. Can you email back to this address: [EMAIL PROTECTED] Thanks, Tony Neves -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: 2.2.3a-CVS HPUX 10.20 and source/nsswitch/hp_nss_common.h
Andrew, Will need the same to the head branch (SAMBA_3_0, I guess, now), so it will compile on HPUX 10.20 as well... Thanks, Don -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 11:31 AM To: 'Harald Koenig'; [EMAIL PROTECTED] Subject: RE: 2.2.3a-CVS HPUX 10.20 and source/nsswitch/hp_nss_common.h Hi Jeremy, Can you apply this change Harald has attached? It looks like another victim of the port of Head winbindd back into the 2.2 branch, at revision 1.1.2.3 of this file... Thanks, Don -Original Message- From: Harald Koenig [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 7:12 AM To: [EMAIL PROTECTED] Cc: Harald Koenig Subject: 2.2.3a-CVS HPUX 10.20 and source/nsswitch/hp_nss_common.h Hi, the current 2.2.3x CVS sources don't compile on HPUX 10.20 while 2.2.3b is ok. reason is the change in nsswitch/hp_nss_common.h after 2.2.3b which is still needed for HPUX 10.20. please undo that minor change or just apply the attached patch. thanks, Harald Koenig -- I hope to die ___ _ before I *have* to use Microsoft Word., 0--,|/OOO\ Donald E. Knuth, 02-Oct-2001 in Tuebingen._/ / /OOO\ \ \/OOO\ \ O|// Harald Koenig \/\/\/\/\/\/\/\/\/ science+computing ag// / \\ \ [EMAIL PROTECTED]^ ^
RE: [Samba] Locking Errors with Samba 2.2.3a on HP-UX 11.00
Hi Christian, I suspect that this is simply a result of 2.2.3a needing/using more fcntl locks than it's predicessors, and that the nflocks kernel parameter in HP-UX is by default rather small (200). I would suggest that you use SAM to modify the kernel parameter 'nflocks', possibly up to about 1000 or so; this will require a regen and reboot, that SAM will do for you. Also, take a look at the online HP-UX documentation for this samba version at: http://www.docs.hp.com/hpux/onlinedocs/B8725-90021/B8725-90021.html There is a section called HP-UX Configuration for CIFS/9000 (samba) that discusses how to determine appropriate values for nflocks, as well as other kernel tuneable parameters that you will need to alter depending on # of users, etc. Hope this helps, Don -Original Message- From: Ehrke, Christian [mailto:[EMAIL PROTECTED]] Sent: Thursday, April 18, 2002 6:56 AM To: '[EMAIL PROTECTED]' Subject: [Samba] Locking Errors with Samba 2.2.3a on HP-UX 11.00 Hello, while running Samba 2.2.3a on HP-UX 11.00 the following error occured: [2002/04/18 10:36:43, 0] tdb/tdbutil.c:tdb_log(475) tdb(/opt/samba/var/locks/connections.tdb): tdb_lock failed on list -1 ltype=2 (No locks available) [2002/04/18 10:36:43, 0] smbd/connection.c:claim_connection(187) claim_connection: tdb_store failed with error Locking error. For more detail see attached file SambaError.txt The version of Samba 2.2.3a cmes as a binary distribution from the HP-UX Porting Center. Mit freundlichem Gruß / Kind regards Christian Ehrke, Abt./Dept. ZOS Organisation/Informationsystems ALLWEILER AG A Member of the COLFAX PUMP GROUP Postfach 1140 . 78301 Radolfzell Allweilerstraße 1 . 78315 Radolfzell Germany Tel. +49 (0)7732 86-509 Fax +49 ((0)7732 86-552, 86-99509 E-mail: [EMAIL PROTECTED] http://www.allweiler.com SambaError.txt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Problems compiling Samba 2.2.3a on HP-UX 11.00
Hi Christian, The problem is that the configure script checks to see if you are using the HPUX Ansi c compiler, and if you ARE, then modifies some of the loader parameters that are passed to the HP-UX loader; one of these ensures that if there are duplicate modules around, the 'nearest' one (in this case the SAMBA one) gets loaded. Since you are using the gcc complier, this flag does not get passed to the loader - gcc STILL uses the HPUX loader. On 10.20 there wasn't an sprintf implementation, so this issue didn't come up. You can fix your compilation issue by looking for the following section in your configure script, commenting out the if test... and fi lines, removing config.cache, rerunning configure and then doing a make again: #define HPUX 1 EOF SHLIBEXT=sl # Use special PIC flags for the native HP-UX compiler. # if test $ac_cv_prog_cc_Ae = yes; then BLDSHARED=true SHLD=/usr/bin/ld LDSHFLAGS=-B symbolic -b -z +h \$@ PICFLAG=+z # fi DYNEXP=-Wl,-E cat confdefs.h \EOF Hope this helps, Don -Original Message- From: Ehrke, Christian [mailto:[EMAIL PROTECTED]] Sent: Thursday, April 18, 2002 5:50 AM To: '[EMAIL PROTECTED]' Subject: [Samba] Problems compiling Samba 2.2.3a on HP-UX 11.00 Hello, I have problems to complile the actual sources of Samba 2.2.3a on a HP-UX 11.00 system. The compiler I used was gcc 3.0.1 AND gcc 3.0.4 In both cases the same error occures, see also attached text file. lib/snprintf.c:775: conflicting types for `snprintf' /opt/gcc/lib/gcc-lib/hppa2.0n-hp-hpux11.00/3.0.4/include/stdio.h:493: previous declaration of `snprintf' The Samba configure script ends successful before invoking the make command. The same error also occures while trying to compile Samba 2.2.2 on the HP-UX 11.00 machine. On HP-UX 10.20 the compilation runs successful. Who can help? Mit freundlichem Gruß / Kind regards Christian Ehrke, Abt./Dept. ZOS Organisation/Informationsystems ALLWEILER AG A Member of the COLFAX PUMP GROUP Postfach 1140 . 78301 Radolfzell Allweilerstraße 1 . 78315 Radolfzell Germany Tel. +49 (0)7732 86-509 Fax +49 ((0)7732 86-552, 86-99509 E-mail: [EMAIL PROTECTED] http://www.allweiler.com error.txt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: compile samba 2.2 and 3.0 on HP/UX 10.20
Hi Thomas, go to smbd/vfs.c and change the call to dlerror() to sys_dlerror(), that will get you past your compile problem on 2.2. Haven't looked any further at this yet; let me know if you run into other issues on 10.20 Don -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 16, 2002 4:42 AM To: DOELKER,RAINER (HP-Germany,ex2) Cc: [EMAIL PROTECTED] Subject: RE: compile samba 2.2 and 3.0 on HP/UX 10.20 Hello Rainer, thank you for your answer! The binaries on samba.org are very old ... newer are on the HP/UX Porting Centre (2.2.3a) http://hpux.connect.org.uk/ ... but this ist not that what I need! My last compile for Samba 2.2.4pre from 21 Feb was OK! The compile from yesterday (after the nss.h cleanup) give my for the Samba 2.2 branch: Compiling smbd/notify_hash.c Compiling smbd/notify_kernel.c Linking bin/smbd /usr/ccs/bin/ld: Unsatisfied symbols: dlerror (code) collect2: ld returned 1 exit status gmake: *** [bin/smbd] Error 1 and for the Samba 3 branch: Compiling lib/xfile.c Compiling lib/wins_srv.c Compiling lib/util_str.c lib/util_str.c: In function `all_string_sub_w': lib/util_str.c:765: warning: initialization discards qualifiers from pointer target type Compiling lib/util_sid.c Compiling lib/util_unistr.c Compiling lib/util_file.c lib/util_file.c: In function `map_file': lib/util_file.c:443: `MAP_FAILED' undeclared (first use in this function) lib/util_file.c:443: (Each undeclared identifier is reported only once lib/util_file.c:443: for each function it appears in.) gmake: *** [lib/util_file.o] Error 1 ... maybe it is something broken! I will make a new cvs sync today! Regards, Thomas An: '[EMAIL PROTECTED]' [EMAIL PROTECTED] Kopie: [EMAIL PROTECTED] Thema: compile samba 2.2 and 3.0 on HP/UX 10.20 Hello Thomas, the current cvs tree for the samba 2.2 and 3 branch dont compile on HP/UX10.20. The new samba-versions were not jet avail as binaries for 10.20 -- and may result in compiling problems -- as (AFAIK) the threaded functions (syscalls) which are used by samba are not available for 10.20. So I do not know if you'll ever make it run. (I have to admit I've not compiled one for a long time). There are ready packages, which might be of help ? ftp://ftp.samba.org/pub/samba/Binary_Packages/hp/ samba-2.2.2-hppa1.1-hp-hpux10.20.tar or samba-2.0.7-hppa1.1-hp-hpux10.20.tar Hope that helps. Regs, Rainer
RE: [Samba] Configure problem under HPUX 11....
Hello Florent, you cannot compile/build samba with the builtin c compiler on HPUX - it is not ANSI compliant, but there mainly to allow for kernel rebuilds, etc. You will need to either purchase HP's Ansi C compiler, or go to the www.gnu.org site and pull a version of gcc for HPUX to build samba with. In addition, you can get an already build swdepot of Samba 2.2.3a from http://software.hp.com (it's called CIFS/9000 SERVER) if you don't want to go thru the trouble of building it yourself. Hope this helps, Don -Original Message-From: Florent Gilain [mailto:[EMAIL PROTECTED]]Sent: Thursday, April 11, 2002 7:30 AMTo: [EMAIL PROTECTED]Subject: [Samba] Configure problem under HPUX 11 Hi all, Sorry for my poor English... I get an error message at the end of the configure command of smaba 2.2.3a under my HP UX 11 French system : WARNING: No automated network interface determinationERROR: no seteuid method availableconfigure: error: summary failure. Aborting config Could someone tell me why it happens... thanks a lot (or is there a website where i could find a simple documentation of how to install samba ? I 'm very a UNIX beginner...) Florent GILAIN Administrateur systèmes Direct Medica 33, rue traversière - 92100 Boulogne Billancourt Tel : 01.46.20.94.27 - Fax : 01.46.20.94.05 - Gsm : 06.12.24.28.45
RE: [Samba] samba installation on hp-ux help
Hi, This typically means that you are trying to compile samba with the built in c compiler that ships with HP. THis compiler is primarily provided to do kernel regens, etc. it is NOT ansi compliant, and cannot be used to compile/build samba. You can either purchase the HP Ansi C compiler, or go to the gnu gcc web site and download the gcc compiler for HPUX, and use it. Hope this helps, Don -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 09, 2002 3:54 AM To: [EMAIL PROTECTED] Subject: [Samba] samba installation on hp-ux help Hello, When I am running ./configure I am facing the below mentioned error checking configure summary WARNING: No automated network interface determination ERROR: no seteuid method available Please help me in resolving this. Thanks G Manikandan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
