Re: [Samba] Unknown panic actions
2009/10/11 Ralph Kutschera news2...@ecuapac.dyndns.org: Michael Wood schrieb: Well, that's why I said you should perhaps try to figure out why it's not there when the panic action runs :) Otherwise if you can get a core dump you can do this sort of thing: gdb /usr/sbin/smbd /path/to/core and then run the bt gdb command. Sorry, I never did this before. What is the core? Basically when a process crashes on Unix from a segmentation fault (or for a couple of other reasons) the operating system can take a snapshot of the memory of the process and write it to a core file. Whether the OS will actually do this is controlled by things like the RLIMIT_CORE which can be set with ulimit -c and in the case of Linux by some stuff in /proc. See http://kbase.redhat.com/faq/docs/DOC-4897 for more details. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Unknown panic actions
2009/10/11 Ralph Kutschera news2...@ecuapac.dyndns.org: Hallo Michael! Thanks for you answer. Michael Wood schrieb: [...] Otherwise, try to figure out why the executable could not be found for process 4170 happens. If you could get a stack trace out of it someone might be able to help you figure out what's going wrong. How can I get a backtrace of an executable that doesn't seem to be running anymore? Well, that's why I said you should perhaps try to figure out why it's not there when the panic action runs :) Otherwise if you can get a core dump you can do this sort of thing: gdb /usr/sbin/smbd /path/to/core and then run the bt gdb command. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] symbol Lookup Error
Sorry, I forgot to send this to the list. 2009/10/10 Rod Rook rod.r...@gmail.com: Hi, I've just installed Fedora 11 and samba (including common, client, server, config-system0samba). I am unable to start smbd with the following error. *[2009/10/09 22:16:45, 0] smbd/server.c:1065(main) smbd version 3.4.2-0.42.fc11 started. Copyright Andrew Tridgell and the Samba Team 1992-2009 smbd: symbol lookup error: smbd: undefined symbol: _talloc_get_type_abort* What would cause this problem? It looks like it can't find one or more libraries. Try running: ldd /usr/sbin/smbd It should print out all the libraries it's looking for and will tell you which ones it can't find. This would either be because there is a package missing or because the libraries are not where the dynamic linker can find them (defined in /etc/ld.so.conf or similar). Were these rawhide packages or something? Maybe one of the packages hasn't defined the correct dependencies? I don't run Fedora, so I'm not sure what packages are available in Fedora 11 as opposed to from rawhide. I did find a list of samba packages, though, and it sounds like you have the following installed? libsmbclient-3.4.2-0.42.fc11 samba-3.4.2-0.42.fc11 samba-client-3.4.2-0.42.fc11 samba-common-3.4.2-0.42.fc11 I see the other related packages are: libsmbclient-devel-3.4.2-0.42.fc11 samba-debuginfo-3.4.2-0.42.fc11 samba-doc-3.4.2-0.42.fc11 samba-domainjoin-gui-3.4.2-0.42.fc11 samba-swat-3.4.2-0.42.fc11 samba-winbind-3.4.2-0.42.fc11 samba-winbind-devel-3.4.2-0.42.fc11 So if you are in fact missing some libraries, maybe you could try installing some of those to see if they contain the missing libraries. e.g. samba-winbind. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Desiring to set up Windows Vista and Linux Fedora Core 4
Hi Barry 2009/10/10 Barry L. Bond bb...@cfl.rr.com: Hi Michael! Thank you for your fast reply! On Sat, Oct 03, 2009 at 04:35:50PM +0200, Michael Wood wrote: From what you say above, I assume that the Windows machine is on either 192.168.1.x or 192.168.2.x networks? Don't forget to use a full stop after them like: hosts allow 192.168.1. 192.168.2. or you could write it like: hosts allow 192.168.1.0/24 192.168.2.0/24 H... I have hosts allow = 192.168.1., 192.168.2., 127. That looks fine as long as the Windows machine is on 192.168.1.x or 192.168.2.x. According to the documentation you can use either commas or spaces (or both) to separate them. I have a space between the IP address excerpts (I presume that's what you mean by the full stop), though I also have a comma. I'll remove the commas... By full stop I mean what Americans like to call a period :) i.e. a dot. In other words I just wanted to make sure you had something like: hosts allow 192.168.1., 192.168.2., 127. and NOT: hosts allow 192.168.1, 192.168.2, 127 although to be honest I don't know if Samba would accept the latter. What does your smb.conf look like? And what happens when you try to connect/print from the Windows machine? What errors to you get? Here is my current smb.conf file: # Samba config file created using SWAT # from 127.0.0.1 (127.0.0.1) # Date: 2009/10/03 00:37:16 # Global parameters [global] server string = Windows in Linux - VMware interfaces = eth0, vmnet1, vmnet8 I see you are restricting Samba to the above interfaces. Which interface is your Windows machine plugged into? Your hosts allow line leads me to suspect you might have another ethernet interface in the machine (unless the other 192.168.x.y network is allocated to VMware.) guest account = barry username map = /etc/samba/smbusers log file = /var/log/samba/%m.log max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 printcap name = /etc/printcap preferred master = Yes dns proxy = No idmap uid = 16777216-33554431 idmap gid = 16777216-33554431 guest ok = Yes hosts allow = 192.168.1. 192.168.2. 127. cups options = raw Are you using cups? The printcap name above leads me to believe you are not using cups. [homes] comment = Home Directories read only = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [HostFS] comment = VMware host filesystem path = / read only = No [barry] path = /home/barry valid users = barry read only = No This should not really be necessary because of the [homes] section above, but should not cause any trouble either. [HP9110] comment = Hewlett-Packard OfficeJet 9110 path = /var/spool/samba read only = No printable = Yes printer name = HP9110 oplocks = No share modes = No Your [printers] section should automatically set up a share for any printers defined in your /etc/printcap file. So this should also not be necessary. There are a LOT of comments in my original smb.conf file, but since I tried to modify a couple of things using SWAT, I see it removed the comments. Yes, unfortunately SWAT does not preserve the comments, but they just get in the way when you post your config to the list anyway. Much of what is in this file is what I had, years ago, when I had Windows 98 which I could access through VMware, which was running on my Linux system. (I want to do exactly what I did with that, be able to submit a print job or transfer a file either direction.) After I removed the comments in my hosts allow line, I typed service smb restart in my root window: [...] On the Windows computer, I clicked Start and then Network. I double-clicked OFFICE-WINDOWS. I double-clicked Add a Printer. Then an Add a printer came up near the top of my explorer, after Organize and Views. Clicking Add a printer, I choose Add a network, wireless or Bluetooth printer in the dialog box that comes up. (Add a local printer is the only other choice here.) Yes, Network printer is the correct option. It says Searching for available printers... After a delay, it says No printers were found. I click The printer that I want isn't listed and out of the three choices (Browse for a printer, Select a shared printer by name and Add a printer using a TCP/IP address or hostname), I choose the second one, as the printer is connected to my Linux system with a parallel port, and it does not have an IP address. Well, actually the IP address in this case would have been the IP address of the Linux box. If the printer was plugged directly into the network then of course this would be the IP address
Re: [Samba] Desiring to set up Windows Vista and Linux Fedora Core 4
2009/10/10 Barry L. Bond bb...@cfl.rr.com: Hi Gary! [...] I just now read a previous post from you that also indicated concerns with my running FC4, that I missed before. [...] I'm afraid I'm in an if it works, don't fix it mode... Just bear in mind that sometimes the problems you have when trying to set something new up could in part be caused by the old versions you are restricted to because you are running an old distribution. Of course upgrading is not guaranteed to fix your Samba problems and could cause other stuff to break :) By backport do you mean a more recent version of Samba that will work in FC4? Yes, that's exactly what he means. I do not know off hand where you'd find it, though. It sounds like you are using FC4 as a file print server. All you need to do on it is share the resources (folders and printers) and set up the permissions and accounts (if required). On the Windows, I did do some things along this line (setting up sharing) last week... He did not mean that you should create shares on the Windows machine, but that you just need to share your printer and e.g. your home directory on the Linux machine, as you have done. You don't mention which version of Vista you are using, and I don't know if they crippled certain versions like they did with XP to prevent them from joining domains. However, if you can join Vista to a domain, install and use SWAT to set up Samba as a domain controller and use it to log in from Vista. If I go to Control Panel and double click System, it says this: Windows edition.. Windows Vista Ultimate [...] I believe that's the version with the most features, so you should not run into any problems like not being able to join domains or whatever if that's what you wanted to do. Gary, I really appreciate your help. On terminology, how do I join Vista to a domain? I think you should probably try to keep things as simple as possible to start with. Setting up Samba as a domain controller is much more trouble than is necessary for your simple requirements. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Unknown panic actions
2009/10/10 Ralph Kutschera news2...@ecuapac.dyndns.org: Noone got an idea? *push* *push* :) Ralph Kutschera schrieb: Dear list, I have Debian Etch with Samba Version 3.0.24 configured as a PDC. Every day I get exactly 9 emails with panic action: The Samba 'panic action' script, /usr/share/samba/panic-action, was called for PID 4170 (). This means there was a problem with the program, such as a segfault. However, the executable could not be found for process 4170. It may have died unexpectedly, or you may not have permission to debug the process. All emails are sent at the same time usually in the morning between 7:30 and 8:30. My wild guess is cron or anacron or something like that is running something that is somehow interfering with Samba. What happens around that time? What's in /var/log/messages, /var/log/syslog, /var/log/daemon.log, etc? I cannot find anything dubious within the logfiles (samba's and syslog) nor do I recognize any functional errors. OK, but can you find anything that always seems to happen around the same time? Otherwise, try to figure out why the executable could not be found for process 4170 happens. If you could get a stack trace out of it someone might be able to help you figure out what's going wrong. How can I find out what triggers these panic actions? -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] TOSHAG-Winbind.xml translate finished and some bug found
Hi 2009/10/8 John H Terpstra - Samba Team j...@samba.org: On 10/08/2009 03:01 AM, ITPFS oota wrote: Now, TOSHARG-VFS.xml translate to Japanese finished(3.4.0 base). And some bug found. [...] on your system. Please refer to the PAM Web site ulink url=http://www.kernel.org/pub/linux/libs/pam//. is this? Yes. I do believe that to compile Samba with PAM support the pam development libraries are needed. Please refer to the ulink url=http://www.kernel.org/pub/linux/libs/pam//PAM Web site/ulink. I think he was proposing to replace: ulink url=http://www.kernel.org/pub/linux/libs/pam// with: ulink url=http://www.kernel.org/pub/linux/libs/pam/;PAM Web site/ulink -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Change Allowed Workstations with pdbedit
2009/10/9 Philipp Boksberger sys.ad...@bogenhofen.at: My understanding is you cannot manage this attribute from the pdbedit CLI, you must use the NT4 Domain User Manager. I tried the NT4 Domain User Manager, but there I can only enter up to eight workstations while I need 30 to 50 entries there. Maybe you could try fiddling with tdbtool to edit the relevant tdb files, but it may completely mess everything up, and I know next to nothing about what is stored in the tdb files etc., so if you do decide to be reckless and use tdbtool to edit them manually, don't complain to me when it breaks :) -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Desiring to set up Windows Vista and Linux Fedora Core 4
Hi 2009/10/3 Barry L. Bond bb...@cfl.rr.com: [...] I have added hosts allow with 192.168.1 and 192.168.2. I have experimented with a few things. I have looked at http://forums.fedoraforum.org/showthread.php?t=2556 and even read This fedoraforums thread is about connecting to Windows from the Linux machine. Based on what you say below it looks like you want the opposite, i.e. connect from the Windows machine to the Linux machine in order to print. something about making the network communication in Vista be LM as well as NTLM... You might want to add a bit more context for people who did not see or do not remember the rest of this thread. From what you say above, I assume that the Windows machine is on either 192.168.1.x or 192.168.2.x networks? Don't forget to use a full stop after them like: hosts allow 192.168.1. 192.168.2. or you could write it like: hosts allow 192.168.1.0/24 192.168.2.0/24 Okay, let me ask one basic question at a time. I was thinking that I didn't have to actually mount samba (smbmount) in the past, back years ago when I used it with VMWare and Windows 98. (I was thinking that the smdb/nmdb daemons just did what was needed.) I'm not entirely sure what you mean by this, but smbmount is for letting the Linux box mount (connect to) a Windows (or Samba) share on another machine. It seems that what you want is the other way around. i.e. to connect to Samba on the Linux machine from the Windows machine. I will be fine if I just am able to submit a print job from the Windows/Vista to the Linux HP9110 printer. I will be fine if I just transfer any files, either direction, by accessing my host filesystem via Explorer in Windows. (This is how I did it, years ago, with Windows 98 in VMWare.) I am thinking that I do NOT need to add to /etc/fstab, or smbmount anything from the Linux side. Do you agree? Yes, if you want to connect to Samba from the Windows machine then you do not have to do anything with /etc/fstab or smbmount. What does your smb.conf look like? And what happens when you try to connect/print from the Windows machine? What errors to you get? -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] NTLM
Hi 2009/10/3 Eustáquio Rangel eustaquioran...@gmail.com: Hey there! Can you guys tell me about what's the status of docs of NTLM/NTLMv2 provided by Microsoft? Let me explain why I need that: we had here a discussion on a local college about free x proprietary software, and the Microsoft guy (always them, right?) told us about a case where he claimed that Firefox sent one user username and password through the network without encription. On the next day I asked the Microsoft guy for some reference about the case he talked about. He sent me this URL: http://blogs.technet.com/dbordini/archive/2008/09/03/browser-navega-o-e-seguran-a-estudo-de-caso.aspx I translated it with Google and seems that make some sense: http://translate.google.com.br/translate?u=http%3A%2F%2Fblogs.technet.com%2Fdbordini%2Farchive%2F2008%2F09%2F03%2Fbrowser-navega-o-e-seguran-a-estudo-de-caso.aspxsl=pttl=enhl=pt-BRie=UTF-8 I am no expert in NTLM vs. NTLMv2, but NTLM does NOT mean clear-text username and password. The passwords are still hashed (not sure about the username). My understanding is that it is not as secure as NTLMv2, but is still much better than LM and much better still than clear-text. So it seems either there was a misunderstanding between you and the Microsoft guy, or he misunderstood the article or he was exaggerating. By the way, I am not sure about earlier versions of Firefox, but at least 3.0.14 has network.ntlm.send-lm-response set to false by default. i.e. it will not send the LM hash in response to an NTLM challenge. See here for details: http://kb.mozillazine.org/About:config_entries#Network. See also the following URL which seems relevant: https://developer.mozilla.org/En/Integrated_Authentication Trying to resume all the whole stuff, he's complaining that Firefox automatically decreased the safety level to NTLM (not using NTLMv2), when used with Windows Vista, without warning the user about that, sending the username and password as plain text, and for that reason Firefox is junk, not IE (oh,boy), who worked on the expected way. I'll write a post on my blog (http://eustaquiorangel.com, it's Portuguese but I'm wondering on this case would not be a good idea to make an English version also) about all this and we'll continue the discussion on the college on the next, but first I'd like to ask you about that. Seems you Samba guys made some reverse engineering over time to deal with NTLM and after some years Microsoft released some docs, but I don't know it they are with enough quality to use and if you are still making reverse engineering and perhaps living with some patent risk, as I could not find information enough about the copyright of this protocol, which is the first point I'm planning to talk about on the discussion. Please note that patent and copyright are completely different from each other. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Cannot compile RHEL rpms using samba 3.4.2 series source
2009/10/2 Werner Maes werner.m...@icts.kuleuven.be: [...] ps: or maybe the resolution only refers that it is a duplicate of bug 6742? Exactly. Did you try the patch attached to bug 6742? -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] New Samba Team Blog post up !
o Watching Tridge and Andrew Bartlett demonstrate Active Directory replication to a Windows AD server. This sounds interesting :) How does replication work in the other direction? Does the vampire support relate to this at all? -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] smb.conf(5) format meaning question
2009/9/17 Linda Walsh sa...@tlinx.org: In the smb.conf manpage, there is a notation used, (G) or (S) for global or share. Does (S) mean it can only be used in a Share section (i.e. - will be ignored in the global section), or is that they *can* be applied at the share level, and, possibly set a default in the 'G'lobal section? [...] S means it can be used in a share definition and also in the Global section: I've sorta got it in my head that most (S) switch that could make sense globally, could be used/set in the global section as a 'default' for all shares, but I don't find that documented in the manpage, so I'm questioning...?? It's in the PARAMETERS section. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] smb.conf(5) format meaning question
2009/9/17 Linda Walsh sa...@tlinx.org: Michael Wood wrote: S means it can be used in a share definition and also in the Global section: I've sorta got it in my head that most (S) switch that could make sense globally, could be used/set in the global section as a 'default' for all shares, but I don't find that documented in the manpage, so I'm questioning...?? It's in the PARAMETERS section. Thanks for pointing to the right paragraph. I think I glossed over it because I didn't see the same notation in the definition, as used in the successive text. There are some notational conventions used in the documentation that I feel could use some improvement, but I know, in some cases, that the underlying source is based on DocBook, and I don't know if some of those conventions are enforced by DB, or can be adjusted with a style sheet. But until I think or come up with a better concrete solution, I'll keep my mouth shut and just thank you for pointing me at the correct section...:-) Well, I searched for it first as \(S and didn't find it, so I searched for \S\ instead and I didn't have to go through very many false positives before finding that paragraph :) I agree it would probably be harder to miss if the references in that paragraph also used parentheses. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Compiling 3.4.0 on SPARC Solaris 9
Hi 2009/9/9 nigel.p...@scotland.gsi.gov.uk: I've been trying to compile Samba 3.4.0 on a Solaris 9 server. However, when I run configure, it is only creating a Makefile-noincludes, not the standard Makefile. Looking at the config.log file, there are lines that suggest that it can't find the libiconv libraries. These are installed (version 1.11) in /usr/local so I tried re-running configure with the option --with-libiconv=/usr/local. However, this also fails as conftest now will not compile. Thanks in advance for any suggestions. 3.4.1 was just announced earlier today. One of the things it lists as changed from 3.4.0 is: * Fix linking on Solaris. Although that doesn't sound like the problem you're running into (I don't think) it might be a good idea to try 3.4.1 anyway. Also, perhaps if you paste the part of the config.log where the libiconv test fails into your next e-mail someone will be figure out what's wrong. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba wants chdir
Hello Helmut :) 2009/9/1 Helmut Hullen hul...@t-online.de: Hallo, Michael, Du meintest am 01.09.09: 2009/8/31 Helmut Hullen hul...@t-online.de: [...] Aug 31 10:09:28 Server smbd[20793]: chdir (/home/adm) failed [...] b) which machine or program asks chdir /home/adm? That's a DOS command, no Linux command. There is a Unix system call called chdir(). I suspect that this is what smbd is referring to. Hmmm - never seen. But that's no proof of inexistence. Well on Debian and Ubuntu the manpage is in the manpages-dev package: $ man -w chdir /usr/share/man/man2/chdir.2.gz $ dpkg -S /usr/share/man/man2/chdir.2.gz manpages-dev: /usr/share/man/man2/chdir.2.gz $ man 2 chdir CHDIR(2) Linux Programmer's Manual CHDIR(2) NAME chdir, fchdir - change working directory SYNOPSIS #include unistd.h int chdir(const char *path); int fchdir(int fd); [...] CONFORMING TO SVr4, 4.4BSD, POSIX.1-2001. [...] strings /usr/sbin/smbd | grep chdir tells make_connection_with_chdir chdir (%s) failed make_connection_with_chdir Failed to chdir to / on chroot to %s And there is the above error message - ok. /home/adm exists, it's a Samba share. What user is smbd running as? (ps aux | grep smbd) Owner: root Who owns /home/adm and what are the permissions? /home: root:root 755 /home/adm: adm:lehrer 755 OK, that's strange. Anybody should be able to change directory to /home/adm, unless there's something else preventing it, like ACLs or SELinux or Samba is chrooted so it's looking for /path/to/chroot/home/adm instead of /home/adm. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] HELP: Samba server crashing on me
2009/9/7 Timothy Normand Miller theo...@gmail.com: I'm glad I could help. Should we try to figure out why it happened in the first place? Like what changed in my environment that caused it to go through this code path now and never before? Do you suddenly have any Macs using Bonjour or something? :) Just a guess, and that still wouldn't explain why you're the first person to notice. mDNS is Multicast DNS which is used by Bonjour/zeroconf/avahi. On Mon, Sep 7, 2009 at 6:17 AM, Volker Lendeckevolker.lende...@sernet.de wrote: On Mon, Sep 07, 2009 at 01:05:31AM -0400, Timothy Normand Miller wrote: Well, the solution was as simple as this: bool dns_register_smbd_reply(struct dns_reg_state *dns_state, fd_set *lfds, struct timeval *timeout) { int mdnsd_conn_fd = -1; + if (!dns_state) return false; if (dns_state-srv_ref == NULL) { return false; } Thanks a lot! Will be in 3.3.8. Volker -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] URGENT: printer problem under 3.3.7
Hi 2009/9/4 William Jojo w.j...@hvcc.edu: I (cross-)posted a few days ago about TDB files growing for individual printers. These TDB files are holding onto information about previous jobs after they have been printed. [...] Is there a way to remove this old information from the TDB file? Shouldn't Samba remove this knowledge after the job is printed? [...] Maybe you could use perl's TDB_File module or tdbtool to delete old records as a workaround until the issue has been resolved: http://search.cpan.org/~anguslees/TDB_File-0.90/TDB_File.pm http://linux.die.net/man/8/tdbtool -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] several domain
Sorry, I forgot to include the list in my reply. 2009/9/4 Michael Wood esiot...@gmail.com: 2009/9/4 azzouz azz...@hymedia.univ-paris8.fr: [...] otherwise the script don't work as i expected. i have tow different script : one execute 1 instance for the domainn Domain1 and an other one for the domain domain1. The tow script refer to tow different smb.conf file. 1 - When i execute the first one first: it 's OK But when i execute the second one after: nothing! the process are not executed. 2 - When i execute the second one first: it's ok But when i execute the first one after: nothing! the process are not executed it's like i could only execute only one instance ! how to get around ? Unfortunately I can't test this at the moment. Maybe you should try starting up smbd and nmbd from the command line first without using the scripts. When that's working it should be possible to make the necessary changes to the scripts. Try increasing the debugging when you start smbd and nmbd and checking the logs to see if there are error messages. Maybe you will not need two instances of nmbd, but maybe someone else can comment. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] several domain
2009/9/3 azzouz azz...@hymedia.univ-paris8.fr: Michael Wood wrote: 2009/9/3 azzouz azz...@hymedia.univ-paris8.fr: [...] i write instead : test -x `/usr/sbin/nmbd -D -s $CONFIG_FILE` -a -x `/usr/sbin/smbd -D -s $CONFIG_FILE` || exit 0 This will run nmbd and will probably complain about test: too many arguments (same for smbd) because you're supposed to call test -x with a filename, and not with the string smbd version ... Copyright in fact it work fine. No complain from smbd I'm glad you have it working, but that line is wrong anyway :) test -x /usr/sbin/smbd means: Is the file called /usr/sbin/smbd executable? It does not run /usr/sbin/smbd. It just looks at the file to see if it is executable. test -x `/usr/sbin/smbd -D -s $CONFIG_FILE` means: Run /usr/sbin/smbd with parameters -D -s $CONFIG_FILE and get the output. (The output could be something like smbd version 3.4.0-GIT-a3e9b62-devel started. Copyright Andrew Tridgell and the Samba Team 1992-2009 or it could be nothing.) If the output was smbd version... then the test line will expand to: test -x smbd version... and you will get an error about too many arguments. If the output was blank, then the test line will expand to: test -x I'm not sure why, but that does not complain and also returns success, so in your case I suspect this is what's happening. But despite test not complaining or failing, that line still starts smbd and nmbd when it isn't supposed to! They are supposed to be started further down in the script. That line is only to see if they are executable. I hope my explanation is clear. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Password policy under Samba 4?
2009/9/1 Michael Wood esiot...@gmail.com: How does one set a password policy using Samba 4? I've set up Samba 4 as a domain controller with one Windows 2003 server joined to the domain. I've seen mention of the check password script option, but I think that's not available in Samba 4, right? I've also seen mention of Group Policies, but I am not sure if this is correct or not because I haven't been able to find anything in the Group Policy management tool on Windows that seems applicable. Basically I just want to know where to set the user must change password after 30 days and password must be at least X characters long settings and have these apply to users logging into the Windows machine. I'd appreciate it if someone could point me at the relevant documentation. I've now found dompol.msc on a Windows 2003 Server AD domain controller. This seems to be what I'm looking for, but if I try running dompol.msc on a Windows 2003 Server joined to the Samba 4 domain as a member server I get an error saying: Failed to open the Group Policy Object. You may not have appropriate rights. Details: The specified domain either does not exist or could not be contacted. This is while logged in to the Windows machine as administra...@example.org (where example.org is the domain I'm using for testing.) Also, dsa.msc works fine for adding users/groups etc. I'm running samba with -d100 and nothing appears to be logged when I start dompol.msc. I can start dompol.msc, acknowledge the error and close it down again without anything at all being added to the log. Group Policy Management shows a Default Domain Policy and I can create a new test policy object, but dompol.msc still gives the same error with no evidence of having contacted Samba at all. Even tcpdump on the Samba box and wireshark on the Windows box show nothing happening when I start, acknowledge and stop dompol.msc. Any ideas? Thanks. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba wants chdir
2009/8/31 Helmut Hullen hul...@t-online.de: [...] Aug 31 10:09:28 Server smbd[20793]: chdir (/home/adm) failed [...] b) which machine or program asks chdir /home/adm? That's a DOS command, no Linux command. There is a Unix system call called chdir(). I suspect that this is what smbd is referring to. /home/adm exists, it's a Samba share. What user is smbd running as? (ps aux | grep smbd) Who owns /home/adm and what are the permissions? -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Password policy under Samba 4?
How does one set a password policy using Samba 4? I've set up Samba 4 as a domain controller with one Windows 2003 server joined to the domain. I've seen mention of the check password script option, but I think that's not available in Samba 4, right? I've also seen mention of Group Policies, but I am not sure if this is correct or not because I haven't been able to find anything in the Group Policy management tool on Windows that seems applicable. Basically I just want to know where to set the user must change password after 30 days and password must be at least X characters long settings and have these apply to users logging into the Windows machine. I'd appreciate it if someone could point me at the relevant documentation. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] How are tickets used by Samba in an Active Directory environment?
Hi 2009/8/29 Jose Perez jvoorhe...@gmail.com: Hi there: I'm just setting up a Samba as member of an Active Directory Domain. I [...] I was searching at Google about Samba, Kerberos, Active Directory and tickets purporse but I didn't find a good explanation. I'd just like to know if I just configure some Kerberos params at the Active Directory Server, or maybe configure a cron to renew tickets or maybe if I just should run kinit once and then forget about Kerberos forever. I *think* that you run kinit only to test that Kerberos is working properly and that the kinit command you run has nothing to do with Samba. My Kerberos knowledge is a little lacking, but I think the Wikipedia article has a nice description: http://en.wikipedia.org/wiki/Kerberos_%28protocol%29 Where it refers to Service Server or SS you should read it as Samba. Could someone point me to a link where some good explanation about these components if available? Because I'm about to release a server in production and I want to be careful. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] ldap? Samba? Nss?
2009/8/27 sgm...@mail.bloomfield.k12.mo.us: [...] Yes. I hope it is all setup correctly. It is working it seems. It seems that it really got slow in the last couple of days. I have added some users to LDAP, but not that many. There are proabably a total of 1000 users and not near all of them would log on at once. Maybe a couple of hundred at the very most and more like 75-100. [...] Perhaps you need to tweak the LDAP indexes? Your LDAP logs should tell you what is being accessed without an index. You can also get the LDAP server to log the queries and try them yourself using ldapsearch to see if they are slow. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] samba as a time server (newby question): time not updated
Hi On Tue, Jun 20, 2006 at 07:17:53PM +1000, Ivan Teliatnikov wrote: Colleagues, I am trying to use my PDC as a time server. [snip] What do I need to do to ensure that time is synchronised on XP client when non-admin user logs into the machine. Why don't you just set up an NTP server on your Samba server and then point all the WinXP boxes at it. I think it's under Time in the control panel, or if you right-click on the time in the system tray. By default it syncs off time.windows.com or something like that. I am not a Windows person, so I don't know if you can do this via group policies or whatever. Hope that helps :) -- Michael Wood [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] [PATCH] Pet peave then-than
than one TCP/IP binding) This call */ /* can be used to validate the binding */ /* from the client. */ [idempotent] WERROR ServerAlive (); Index: NEWS === --- NEWS(revision 16046) +++ NEWS(working copy) @@ -12,7 +12,7 @@ Removal of nmbd and introduction of process models == -smbd now implements several network protocols other then just CIFS and +smbd now implements several network protocols other than just CIFS and DCE/RPC. nmbd's functionality has been merged into smbd. smbd supports various 'process models' that specify how concurrent connections are handled (when to fork, use threads, etc). @@ -24,7 +24,7 @@ Much improved SWAT == -SWAT has had some rather large improvements and is now more then just a +SWAT has had some rather large improvements and is now more than just a direct editor for smb.conf. Its layout has been improved. SWAT can now also be used for editing run-time data - maintaining user information, provisioning, etc. TLS is supported out of the box. @@ -368,7 +368,7 @@ Default: Set at compile-time + ntvfs handler - Backend to the NT VFS to use (more then one can be specified). Available + Backend to the NT VFS to use (more than one can be specified). Available backends include: - posix: @@ -433,7 +433,7 @@ + client use spnego principal Tells the client to use the Kerberos service principal specified by the - server during the security protocol negotation rather then + server during the security protocol negotation rather than looking up the principal itself (cifs/hostname). Default: false Index: WHATSNEW.txt === --- WHATSNEW.txt(revision 16046) +++ WHATSNEW.txt(working copy) @@ -14,7 +14,7 @@ * Call the wins hook script again (metze) - * Make sure no more then 25 records are added in the WINS database (metze) + * Make sure no more than 25 records are added in the WINS database (metze) * Documentation updates (jelmer) Index: BUGS.txt === --- BUGS.txt(revision 16046) +++ BUGS.txt(working copy) @@ -1,5 +1,5 @@ Samba 4 is still feature incomplete. If you are using it for anything other -then education you are insane. +than education you are insane. Please file bug reports at https://bugzilla.samba.org/, product: Samba4. Please include as much information as possible, such as SVN revision number -- Michael Wood [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba