Re: [Samba] Unknown panic actions

2009-10-12 Thread Michael Wood
2009/10/11 Ralph Kutschera news2...@ecuapac.dyndns.org:
 Michael Wood schrieb:

 Well, that's why I said you should perhaps try to figure out why it's
 not there when the panic action runs :)

 Otherwise if you can get a core dump you can do this sort of thing:

 gdb /usr/sbin/smbd /path/to/core

 and then run the bt gdb command.

 Sorry, I never did this before. What is the core?

Basically when a process crashes on Unix from a segmentation fault (or
for a couple of other reasons) the operating system can take a
snapshot of the memory of the process and write it to a core file.
Whether the OS will actually do this is controlled by things like the
RLIMIT_CORE which can be set with ulimit -c and in the case of Linux
by some stuff in /proc.

See http://kbase.redhat.com/faq/docs/DOC-4897 for more details.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Unknown panic actions

2009-10-11 Thread Michael Wood
2009/10/11 Ralph Kutschera news2...@ecuapac.dyndns.org:
 Hallo Michael!

  Thanks for you answer.

 Michael Wood schrieb:
[...]
 Otherwise, try to figure out why the executable could not be found for
 process 4170 happens.  If you could get a stack trace out of it someone
 might be able to help you figure out what's going wrong.

 How can I get a backtrace of an executable that doesn't seem to be
 running anymore?

Well, that's why I said you should perhaps try to figure out why it's
not there when the panic action runs :)

Otherwise if you can get a core dump you can do this sort of thing:

gdb /usr/sbin/smbd /path/to/core

and then run the bt gdb command.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] symbol Lookup Error

2009-10-10 Thread Michael Wood
Sorry, I forgot to send this to the list.

2009/10/10 Rod Rook rod.r...@gmail.com:
 Hi,

 I've just installed Fedora 11 and samba (including common, client, server,
 config-system0samba).

 I am unable to start smbd with the following error.

 *[2009/10/09 22:16:45,  0] smbd/server.c:1065(main)
  smbd version 3.4.2-0.42.fc11 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2009
 smbd: symbol lookup error: smbd: undefined symbol: _talloc_get_type_abort*

 What would cause this problem?

It looks like it can't find one or more libraries.

Try running:

ldd /usr/sbin/smbd

It should print out all the libraries it's looking for and will tell
you which ones it can't find.  This would either be because there is a
package missing or because the libraries are not where the dynamic
linker can find them (defined in /etc/ld.so.conf or similar).

Were these rawhide packages or something?  Maybe one of the packages
hasn't defined the correct dependencies?  I don't run Fedora, so I'm
not sure what packages are available in Fedora 11 as opposed to from
rawhide.

I did find a list of samba packages, though, and it sounds like you
have the following installed?

libsmbclient-3.4.2-0.42.fc11
samba-3.4.2-0.42.fc11
samba-client-3.4.2-0.42.fc11
samba-common-3.4.2-0.42.fc11

I see the other related packages are:

libsmbclient-devel-3.4.2-0.42.fc11
samba-debuginfo-3.4.2-0.42.fc11
samba-doc-3.4.2-0.42.fc11
samba-domainjoin-gui-3.4.2-0.42.fc11
samba-swat-3.4.2-0.42.fc11
samba-winbind-3.4.2-0.42.fc11
samba-winbind-devel-3.4.2-0.42.fc11

So if you are in fact missing some libraries, maybe you could try
installing some of those to see if they contain the missing libraries.
 e.g. samba-winbind.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Desiring to set up Windows Vista and Linux Fedora Core 4

2009-10-10 Thread Michael Wood
Hi Barry

2009/10/10 Barry L. Bond bb...@cfl.rr.com:
 Hi Michael!

     Thank you for your fast reply!

 On Sat, Oct 03, 2009 at 04:35:50PM +0200, Michael Wood wrote:

 From what you say above, I assume that the Windows machine is on
 either 192.168.1.x or 192.168.2.x networks?  Don't forget to use a
 full stop after them like:

 hosts allow 192.168.1. 192.168.2.

 or you could write it like:

 hosts allow 192.168.1.0/24 192.168.2.0/24

     H... I have hosts allow = 192.168.1., 192.168.2., 127.

That looks fine as long as the Windows machine is on 192.168.1.x or
192.168.2.x.  According to the documentation you can use either commas
or spaces (or both) to separate them.

     I have a space between the IP address excerpts (I presume that's what
 you mean by the full stop), though I also have a comma.  I'll remove the
 commas...

By full stop I mean what Americans like to call a period :)  i.e.
a dot.  In other words I just wanted to make sure you had something
like:

hosts allow 192.168.1., 192.168.2., 127.

and NOT:

hosts allow 192.168.1, 192.168.2, 127

although to be honest I don't know if Samba would accept the latter.

 What does your smb.conf look like?  And what happens when you try to
 connect/print from the Windows machine?  What errors to you get?

     Here is my current smb.conf file:

 
 # Samba config file created using SWAT
 # from 127.0.0.1 (127.0.0.1)
 # Date: 2009/10/03 00:37:16

 # Global parameters
 [global]
        server string = Windows in Linux - VMware
        interfaces = eth0, vmnet1, vmnet8

I see you are restricting Samba to the above interfaces.  Which
interface is your Windows machine plugged into?  Your hosts allow line
leads me to suspect you might have another ethernet interface in the
machine (unless the other 192.168.x.y network is allocated to VMware.)

        guest account = barry
        username map = /etc/samba/smbusers
        log file = /var/log/samba/%m.log
        max log size = 50
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        printcap name = /etc/printcap
        preferred master = Yes
        dns proxy = No
        idmap uid = 16777216-33554431
        idmap gid = 16777216-33554431
        guest ok = Yes
        hosts allow = 192.168.1. 192.168.2. 127.
        cups options = raw

Are you using cups?  The printcap name above leads me to believe you
are not using cups.

 [homes]
        comment = Home Directories
        read only = No

 [printers]
        comment = All Printers
        path = /var/spool/samba
        printable = Yes
        browseable = No

 [HostFS]
        comment = VMware host filesystem
        path = /
        read only = No

 [barry]
        path = /home/barry
        valid users = barry
        read only = No

This should not really be necessary because of the [homes] section
above, but should not cause any trouble either.

 [HP9110]
        comment = Hewlett-Packard OfficeJet 9110
        path = /var/spool/samba
        read only = No
        printable = Yes
        printer name = HP9110
        oplocks = No
        share modes = No

Your [printers] section should automatically set up a share for any
printers defined in your /etc/printcap file.  So this should also not
be necessary.

 

     There are a LOT of comments in my original smb.conf file, but since I
 tried to modify a couple of things using SWAT, I see it removed the
 comments.

Yes, unfortunately SWAT does not preserve the comments, but they just
get in the way when you post your config to the list anyway.

     Much of what is in this file is what I had, years ago, when I had
 Windows 98 which I could access through VMware, which was running on my
 Linux system.  (I want to do exactly what I did with that, be able to
 submit a print job or transfer a file either direction.)

     After I removed the comments in my hosts allow line, I typed
 service smb restart in my root window:
[...]
     On the Windows computer, I clicked Start and then Network.

     I double-clicked OFFICE-WINDOWS.

     I double-clicked Add a Printer.

     Then an Add a printer came up near the top of my explorer, after
 Organize and Views.

     Clicking Add a printer, I choose Add a network, wireless or
 Bluetooth printer in the dialog box that comes up. (Add a local printer
 is the only other choice here.)

Yes, Network printer is the correct option.

     It says Searching for available printers...

     After a delay, it says No printers were found.

     I click The printer that I want isn't listed and out of the three
 choices (Browse for a printer, Select a shared printer by name and
 Add a printer using a TCP/IP address or hostname), I choose the second
 one, as the printer is connected to my Linux system with a parallel port,
 and it does not have an IP address.

Well, actually the IP address in this case would have been the IP
address of the Linux box.  If the printer was plugged directly into
the network then of course this would be the IP address

Re: [Samba] Desiring to set up Windows Vista and Linux Fedora Core 4

2009-10-10 Thread Michael Wood
2009/10/10 Barry L. Bond bb...@cfl.rr.com:
 Hi Gary!
[...]
     I just now read a previous post from you that also indicated concerns
 with my running FC4, that I missed before.
 [...] I'm afraid I'm in an if it works, don't fix it mode...

Just bear in mind that sometimes the problems you have when trying to
set something new up could in part be caused by the old versions you
are restricted to because you are running an old distribution.  Of
course upgrading is not guaranteed to fix your Samba problems and
could cause other stuff to break :)

     By backport do you mean a more recent version of Samba that will
 work in FC4?

Yes, that's exactly what he means.  I do not know off hand where you'd
find it, though.

It sounds like you are using FC4 as a file  print server. All you need
to do on it is share the resources (folders and printers) and set up the
permissions and accounts (if required).

     On the Windows, I did do some things along this line (setting up
 sharing) last week...

He did not mean that you should create shares on the Windows machine,
but that you just need to share your printer and e.g. your home
directory on the Linux machine, as you have done.

You don't mention which version of Vista you are using, and I don't know
if they crippled certain versions like they did with XP to prevent them
from joining domains. However, if you can join Vista to a domain,
install and use SWAT to set up Samba as a domain controller and use it
to log in from Vista.

     If I go to Control Panel and double click System, it says this:

 
 Windows edition..

      Windows Vista Ultimate
[...]

I believe that's the version with the most features, so you should not
run into any problems like not being able to join domains or whatever
if that's what you wanted to do.

     Gary, I really appreciate your help.  On terminology, how do I join
 Vista to a domain?

I think you should probably try to keep things as simple as possible
to start with.  Setting up Samba as a domain controller is much more
trouble than is necessary for your simple requirements.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Unknown panic actions

2009-10-10 Thread Michael Wood
2009/10/10 Ralph Kutschera news2...@ecuapac.dyndns.org:
 Noone got an idea?

 *push* *push* :)

 Ralph Kutschera schrieb:

 Dear list,

  I have Debian Etch with Samba Version 3.0.24 configured as a PDC.

 Every day I get exactly 9 emails with panic action:

 The Samba 'panic action' script, /usr/share/samba/panic-action,
 was called for PID 4170 ().

 This means there was a problem with the program, such as a segfault.
 However, the executable could not be found for process 4170.
 It may have died unexpectedly, or you may not have permission to debug
 the process.

 All emails are sent at the same time usually in the morning between 7:30
 and 8:30.

My wild guess is cron or anacron or something like that is running
something that is somehow interfering with Samba.  What happens around
that time?  What's in /var/log/messages, /var/log/syslog,
/var/log/daemon.log, etc?

 I cannot find anything dubious within the logfiles (samba's and syslog)
 nor do I recognize any functional errors.

OK, but can you find anything that always seems to happen around the same time?

Otherwise, try to figure out why the executable could not be found
for process 4170 happens.  If you could get a stack trace out of it
someone might be able to help you figure out what's going wrong.

 How can I find out what triggers these panic actions?

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] TOSHAG-Winbind.xml translate finished and some bug found

2009-10-09 Thread Michael Wood
Hi

2009/10/8 John H Terpstra - Samba Team j...@samba.org:
 On 10/08/2009 03:01 AM, ITPFS oota wrote:
 Now, TOSHARG-VFS.xml translate to Japanese finished(3.4.0 base).
 And some bug found.
[...]
 on your system. Please refer to the PAM Web site ulink 
 url=http://www.kernel.org/pub/linux/libs/pam//.

 is this?

 Yes. I do believe that to compile Samba with PAM support the pam
 development libraries are needed.

 Please refer to the ulink 
 url=http://www.kernel.org/pub/linux/libs/pam//PAM Web site/ulink.

I think he was proposing to replace:
ulink url=http://www.kernel.org/pub/linux/libs/pam//

with:
ulink url=http://www.kernel.org/pub/linux/libs/pam/;PAM Web site/ulink

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Change Allowed Workstations with pdbedit

2009-10-09 Thread Michael Wood
2009/10/9 Philipp Boksberger sys.ad...@bogenhofen.at:
 My understanding is you cannot manage this attribute from the pdbedit
 CLI, you must use the NT4 Domain User Manager.

 I tried the NT4 Domain User Manager, but there I can only enter up to eight
 workstations while I need 30 to 50 entries there.

Maybe you could try fiddling with tdbtool to edit the relevant tdb
files, but it may completely mess everything up, and I know next to
nothing about what is stored in the tdb files etc., so if you do
decide to be reckless and use tdbtool to edit them manually, don't
complain to me when it breaks :)

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Desiring to set up Windows Vista and Linux Fedora Core 4

2009-10-03 Thread Michael Wood
Hi

2009/10/3 Barry L. Bond bb...@cfl.rr.com:
[...]
     I have added hosts allow with 192.168.1 and 192.168.2.  I have
 experimented with a few things.  I have looked at
 http://forums.fedoraforum.org/showthread.php?t=2556 and even read

This fedoraforums thread is about connecting to Windows from the Linux
machine.  Based on what you say below it looks like you want the
opposite, i.e. connect from the Windows machine to the Linux machine
in order to print.

 something about making the network communication in Vista be LM as well as
 NTLM...

You might want to add a bit more context for people who did not see or
do not remember the rest of this thread.

From what you say above, I assume that the Windows machine is on
either 192.168.1.x or 192.168.2.x networks?  Don't forget to use a
full stop after them like:

hosts allow 192.168.1. 192.168.2.

or you could write it like:

hosts allow 192.168.1.0/24 192.168.2.0/24

     Okay, let me ask one basic question at a time.

     I was thinking that I didn't have to actually mount samba
 (smbmount) in the past, back years ago when I used it with VMWare and
 Windows 98.  (I was thinking that the smdb/nmdb daemons just did what was
 needed.)

I'm not entirely sure what you mean by this, but smbmount is for
letting the Linux box mount (connect to) a Windows (or Samba) share on
another machine.  It seems that what you want is the other way around.
 i.e. to connect to Samba on the Linux machine from the Windows
machine.

     I will be fine if I just am able to submit a print job from the
 Windows/Vista to the Linux HP9110 printer.  I will be fine if I just
 transfer any files, either direction, by accessing my host filesystem via
 Explorer in Windows.  (This is how I did it, years ago, with Windows 98 in
 VMWare.)

     I am thinking that I do NOT need to add to /etc/fstab, or smbmount
 anything from the Linux side.  Do you agree?

Yes, if you want to connect to Samba from the Windows machine then you
do not have to do anything with /etc/fstab or smbmount.

What does your smb.conf look like?  And what happens when you try to
connect/print from the Windows machine?  What errors to you get?

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] NTLM

2009-10-03 Thread Michael Wood
Hi

2009/10/3 Eustáquio Rangel eustaquioran...@gmail.com:
 Hey there!

 Can you guys tell me about what's the status of docs of NTLM/NTLMv2
 provided by Microsoft?

 Let me explain why I need that: we had here a discussion on a local
 college about free x proprietary software, and the Microsoft guy
 (always them, right?) told us about a case where he claimed that
 Firefox sent one user username and password through the network
 without encription.

 On the next day I asked the Microsoft guy for some reference about the
 case he talked about. He sent me this URL:

 http://blogs.technet.com/dbordini/archive/2008/09/03/browser-navega-o-e-seguran-a-estudo-de-caso.aspx

 I translated it with Google and seems that make some sense:

 http://translate.google.com.br/translate?u=http%3A%2F%2Fblogs.technet.com%2Fdbordini%2Farchive%2F2008%2F09%2F03%2Fbrowser-navega-o-e-seguran-a-estudo-de-caso.aspxsl=pttl=enhl=pt-BRie=UTF-8

I am no expert in NTLM vs. NTLMv2, but NTLM does NOT mean clear-text
username and password.  The passwords are still hashed (not sure about
the username).  My understanding is that it is not as secure as
NTLMv2, but is still much better than LM and much better still than
clear-text.

So it seems either there was a misunderstanding between you and the
Microsoft guy, or he misunderstood the article or he was exaggerating.

By the way, I am not sure about earlier versions of Firefox, but at
least 3.0.14 has network.ntlm.send-lm-response set to false by
default.  i.e. it will not send the LM hash in response to an NTLM
challenge.  See here for details:

http://kb.mozillazine.org/About:config_entries#Network.

See also the following URL which seems relevant:
https://developer.mozilla.org/En/Integrated_Authentication

 Trying to resume all the whole stuff, he's complaining that Firefox
 automatically decreased the safety level to NTLM (not using NTLMv2),
 when used with Windows Vista, without warning the user about that,
 sending the username and password as plain text, and for that reason
 Firefox is junk, not IE (oh,boy), who worked on the expected way.

 I'll write a post on my blog (http://eustaquiorangel.com, it's
 Portuguese but I'm wondering on this case would not be a good idea to
 make an English version also) about all this and we'll continue the
 discussion on the college on the next, but first I'd like to ask you
 about that.

 Seems you Samba guys made some reverse engineering over time to deal
 with NTLM and after some
 years Microsoft released some docs, but I don't know it they are with
 enough quality to use and if you are still making reverse engineering
 and perhaps living with some patent risk, as I could not find
 information enough about the copyright of this protocol, which is
 the first point I'm planning to talk about on the discussion.

Please note that patent and copyright are completely different from each other.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Cannot compile RHEL rpms using samba 3.4.2 series source

2009-10-02 Thread Michael Wood
2009/10/2 Werner Maes werner.m...@icts.kuleuven.be:
[...]
 ps: or maybe the resolution only refers that it is a duplicate of bug 6742?

Exactly.

Did you try the patch attached to bug 6742?

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] New Samba Team Blog post up !

2009-09-28 Thread Michael Wood
 o  Watching Tridge and Andrew Bartlett demonstrate Active Directory 
 replication to a Windows AD server.

This sounds interesting :)

How does replication work in the other direction?  Does the vampire
support relate to this at all?

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] smb.conf(5) format meaning question

2009-09-17 Thread Michael Wood
2009/9/17 Linda Walsh sa...@tlinx.org:
 In the smb.conf manpage, there is a notation used, (G) or (S) for global or 
 share.

 Does (S) mean it can only be used in a Share section (i.e. - will be ignored
 in the global section), or is that they *can* be applied at the share level,
 and, possibly set a default in the 'G'lobal section?
[...]

S means it can be used in a share definition and also in the Global section:

 I've sorta got it in my head that most (S) switch that could make sense 
 globally,
 could be used/set in the global section as a 'default' for all shares, but
 I don't find that documented in the manpage, so I'm questioning...??

It's in the PARAMETERS section.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] smb.conf(5) format meaning question

2009-09-17 Thread Michael Wood
2009/9/17 Linda Walsh sa...@tlinx.org:
 Michael Wood wrote:
 S means it can be used in a share definition and also in the Global section:

 I've sorta got it in my head that most (S) switch that could make sense 
 globally,
 could be used/set in the global section as a 'default' for all shares, but
 I don't find that documented in the manpage, so I'm questioning...??

 It's in the PARAMETERS section.
 
        Thanks for pointing to the right paragraph.  I think I glossed over
 it because I didn't see the same notation in the definition, as used in
 the successive text.

        There are some notational conventions used in the documentation
 that I feel could use some improvement, but I know, in some cases, that
 the underlying source is based on DocBook, and I don't know if some of
 those conventions are enforced by DB, or can be adjusted with a style
 sheet.  But until I think or come up with a better concrete solution,
 I'll keep my mouth shut and just thank you for pointing me at the
 correct section...:-)

Well, I searched for it first as \(S and didn't find it, so I searched
for \S\ instead and I didn't have to go through very many false
positives before finding that paragraph :)

I agree it would probably be harder to miss if the references in that
paragraph also used parentheses.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Compiling 3.4.0 on SPARC Solaris 9

2009-09-09 Thread Michael Wood
Hi

2009/9/9  nigel.p...@scotland.gsi.gov.uk:
 I've been trying to compile Samba 3.4.0 on a Solaris 9 server. However,
 when I run configure, it is only creating a Makefile-noincludes, not the
 standard Makefile. Looking at the config.log file, there are lines that
 suggest that it can't find the libiconv libraries. These are installed
 (version 1.11) in /usr/local so I tried re-running configure with the
 option --with-libiconv=/usr/local. However, this also fails as conftest
 now will not compile.

 Thanks in advance for any suggestions.

3.4.1 was just announced earlier today.  One of the things it lists as
changed from 3.4.0 is:
   * Fix linking on Solaris.

Although that doesn't sound like the problem you're running into (I
don't think) it might be a good idea to try 3.4.1 anyway.

Also, perhaps if you paste the part of the config.log where the
libiconv test fails into your next e-mail someone will be figure out
what's wrong.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba wants chdir

2009-09-09 Thread Michael Wood
Hello Helmut :)

2009/9/1 Helmut Hullen hul...@t-online.de:
 Hallo, Michael,

 Du meintest am 01.09.09:

 2009/8/31 Helmut Hullen hul...@t-online.de:
 [...]
 Aug 31 10:09:28 Server smbd[20793]:   chdir (/home/adm) failed
 [...]
 b) which machine or program asks chdir /home/adm? That's a DOS
 command, no Linux command.

 There is a Unix system call called chdir().  I suspect that this is
 what smbd is referring to.

 Hmmm - never seen. But that's no proof of inexistence.

Well on Debian and Ubuntu the manpage is in the manpages-dev package:

$ man -w chdir
/usr/share/man/man2/chdir.2.gz
$ dpkg -S /usr/share/man/man2/chdir.2.gz
manpages-dev: /usr/share/man/man2/chdir.2.gz
$ man 2 chdir
CHDIR(2)   Linux Programmer's Manual  CHDIR(2)

NAME
   chdir, fchdir - change working directory

SYNOPSIS
   #include unistd.h

   int chdir(const char *path);
   int fchdir(int fd);
[...]
CONFORMING TO
   SVr4, 4.4BSD, POSIX.1-2001.
[...]

        strings /usr/sbin/smbd | grep chdir

 tells

 make_connection_with_chdir
 chdir (%s) failed
 make_connection_with_chdir
 Failed to chdir to / on chroot to %s

 And there is the above error message - ok.

 /home/adm exists, it's a Samba share.

 What user is smbd running as?  (ps aux | grep smbd)

 Owner: root

 Who owns /home/adm and what are the permissions?

        /home:          root:root       755
        /home/adm:      adm:lehrer      755

OK, that's strange.  Anybody should be able to change directory to
/home/adm, unless there's something else preventing it, like ACLs or
SELinux or Samba is chrooted so it's looking for
/path/to/chroot/home/adm instead of /home/adm.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] HELP: Samba server crashing on me

2009-09-07 Thread Michael Wood
2009/9/7 Timothy Normand Miller theo...@gmail.com:
 I'm glad I could help.  Should we try to figure out why it happened in
 the first place?  Like what changed in my environment that caused it
 to go through this code path now and never before?

Do you suddenly have any Macs using Bonjour or something? :)  Just a
guess, and that still wouldn't explain why you're the first person to
notice.

mDNS is Multicast DNS which is used by Bonjour/zeroconf/avahi.

 On Mon, Sep 7, 2009 at 6:17 AM, Volker
 Lendeckevolker.lende...@sernet.de wrote:
 On Mon, Sep 07, 2009 at 01:05:31AM -0400, Timothy Normand Miller wrote:
 Well, the solution was as simple as this:

 bool dns_register_smbd_reply(struct dns_reg_state *dns_state,
                 fd_set *lfds, struct timeval *timeout)
 {
         int mdnsd_conn_fd = -1;

 +        if (!dns_state) return false;
         if (dns_state-srv_ref == NULL) {
                 return false;
         }

 Thanks a lot! Will be in 3.3.8.

 Volker

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] URGENT: printer problem under 3.3.7

2009-09-05 Thread Michael Wood
Hi

2009/9/4 William Jojo w.j...@hvcc.edu:

 I (cross-)posted a few days ago about TDB files growing for individual
 printers. These TDB files are holding onto information about previous jobs
 after they have been printed.
[...]
 Is there a way to remove this old information from the TDB file? Shouldn't
 Samba remove this knowledge after the job is printed?
[...]

Maybe you could use perl's TDB_File module or tdbtool to delete old
records as a workaround until the issue has been resolved:

http://search.cpan.org/~anguslees/TDB_File-0.90/TDB_File.pm
http://linux.die.net/man/8/tdbtool

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] several domain

2009-09-04 Thread Michael Wood
Sorry, I forgot to include the list in my reply.

2009/9/4 Michael Wood esiot...@gmail.com:
 2009/9/4 azzouz azz...@hymedia.univ-paris8.fr:
 [...]
 otherwise the script don't work as i expected. i have tow different script :
 one execute 1 instance for the domainn Domain1 and an other one for the
 domain  domain1. The tow script refer to tow different smb.conf file.

 1 - When i execute the first one first: it 's OK
   But when i execute the second one after: nothing! the process are not
 executed.

 2 - When i execute the second one first: it's ok
   But when i execute the first one after: nothing! the process are not
 executed
  it's like i could only execute only one instance !

 how to get around ?

 Unfortunately I can't test this at the moment.  Maybe you should try
 starting up smbd and nmbd from the command line first without using
 the scripts.  When that's working it should be possible to make the
 necessary changes to the scripts.

 Try increasing the debugging when you start smbd and nmbd and checking
 the logs to see if there are error messages.

 Maybe you will not need two instances of nmbd, but maybe someone else
 can comment.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] several domain

2009-09-03 Thread Michael Wood
2009/9/3 azzouz azz...@hymedia.univ-paris8.fr:
 Michael Wood wrote:

 2009/9/3 azzouz azz...@hymedia.univ-paris8.fr:
[...]
 i write instead :

 test -x `/usr/sbin/nmbd -D -s $CONFIG_FILE` -a -x `/usr/sbin/smbd -D -s
 $CONFIG_FILE` || exit 0

 This will run nmbd and will probably complain about test: too many
 arguments (same for smbd) because you're supposed to call test -x
 with a filename, and not with the string smbd version ... Copyright

 in fact it work fine. No complain from smbd

I'm glad you have it working, but that line is wrong anyway :)

test -x /usr/sbin/smbd means:
Is the file called /usr/sbin/smbd executable?  It does not run
/usr/sbin/smbd.  It just looks at the file to see if it is executable.

test -x `/usr/sbin/smbd -D -s $CONFIG_FILE` means:
Run /usr/sbin/smbd with parameters -D -s $CONFIG_FILE and get the
output.  (The output could be something like smbd version
3.4.0-GIT-a3e9b62-devel started.
Copyright Andrew Tridgell and the Samba Team 1992-2009 or it could be nothing.)

If the output was smbd version... then the test line will expand to:

test -x smbd version...

and you will get an error about too many arguments.

If the output was blank, then the test line will expand to:

test -x

I'm not sure why, but that does not complain and also returns
success, so in your case I suspect this is what's happening.

But despite test not complaining or failing, that line still starts
smbd and nmbd when it isn't supposed to!  They are supposed to be
started further down in the script.  That line is only to see if they
are executable.

I hope my explanation is clear.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Password policy under Samba 4?

2009-09-02 Thread Michael Wood
2009/9/1 Michael Wood esiot...@gmail.com:
 How does one set a password policy using Samba 4?

 I've set up Samba 4 as a domain controller with one Windows 2003
 server joined to the domain.  I've seen mention of the check password
 script option, but I think that's not available in Samba 4, right?
 I've also seen mention of Group Policies, but I am not sure if this is
 correct or not because I haven't been able to find anything in the
 Group Policy management tool on Windows that seems applicable.

 Basically I just want to know where to set the user must change
 password after 30 days and password must be at least X characters
 long settings and have these apply to users logging into the Windows
 machine.

 I'd appreciate it if someone could point me at the relevant documentation.

I've now found dompol.msc on a Windows 2003 Server AD domain
controller.  This seems to be what I'm looking for, but if I try
running dompol.msc on a Windows 2003 Server joined to the Samba 4
domain as a member server I get an error saying:

Failed to open the Group Policy Object.  You may not have appropriate rights.
Details: The specified domain either does not exist or could not be contacted.

This is while logged in to the Windows machine as
administra...@example.org (where example.org is the domain I'm using
for testing.)  Also, dsa.msc works fine for adding users/groups etc.
I'm running samba with -d100 and nothing appears to be logged when I
start dompol.msc.  I can start dompol.msc, acknowledge the error and
close it down again without anything at all being added to the log.

Group Policy Management shows a Default Domain Policy and I can
create a new test policy object, but dompol.msc still gives the same
error with no evidence of having contacted Samba at all.  Even tcpdump
on the Samba box and wireshark on the Windows box show nothing
happening when I start, acknowledge and stop dompol.msc.

Any ideas?

Thanks.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba wants chdir

2009-09-01 Thread Michael Wood
2009/8/31 Helmut Hullen hul...@t-online.de:
[...]
 Aug 31 10:09:28 Server smbd[20793]:   chdir (/home/adm) failed
[...]
 b) which machine or program asks chdir /home/adm? That's a DOS
 command, no Linux command.

There is a Unix system call called chdir().  I suspect that this is
what smbd is referring to.

 /home/adm exists, it's a Samba share.

What user is smbd running as?  (ps aux | grep smbd)

Who owns /home/adm and what are the permissions?

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Password policy under Samba 4?

2009-09-01 Thread Michael Wood
How does one set a password policy using Samba 4?

I've set up Samba 4 as a domain controller with one Windows 2003
server joined to the domain.  I've seen mention of the check password
script option, but I think that's not available in Samba 4, right?
I've also seen mention of Group Policies, but I am not sure if this is
correct or not because I haven't been able to find anything in the
Group Policy management tool on Windows that seems applicable.

Basically I just want to know where to set the user must change
password after 30 days and password must be at least X characters
long settings and have these apply to users logging into the Windows
machine.

I'd appreciate it if someone could point me at the relevant documentation.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] How are tickets used by Samba in an Active Directory environment?

2009-08-29 Thread Michael Wood
Hi

2009/8/29 Jose Perez jvoorhe...@gmail.com:
 Hi there:

 I'm just setting up a Samba as member of an Active Directory Domain. I
[...]
 I was searching at Google about Samba, Kerberos, Active Directory and
 tickets purporse but I didn't find a good explanation. I'd just like to know
 if I just configure some Kerberos params at the Active Directory Server, or
 maybe configure a cron to renew tickets or maybe if I just should run kinit
 once and then forget about Kerberos forever.

I *think* that you run kinit only to test that Kerberos is working
properly and that the kinit command you run has nothing to do with
Samba.  My Kerberos knowledge is a little lacking, but I think the
Wikipedia article has a nice description:
http://en.wikipedia.org/wiki/Kerberos_%28protocol%29

Where it refers to Service Server or SS you should read it as Samba.

 Could someone point me to a link where some good explanation about these
 components if available? Because I'm about to release a server in production
 and I want to be careful.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] ldap? Samba? Nss?

2009-08-27 Thread Michael Wood
2009/8/27  sgm...@mail.bloomfield.k12.mo.us:
[...]
 Yes.  I hope it is all setup correctly.  It is working it seems.  It seems
 that it really got slow in the last couple of days.  I have added some
 users to LDAP, but not that many.  There are proabably a total of 1000
 users and not near all of them would log on at once.  Maybe a couple of
 hundred at the very most and more like 75-100.
[...]

Perhaps you need to tweak the LDAP indexes?  Your LDAP logs should
tell you what is being accessed without an index.  You can also get
the LDAP server to log the queries and try them yourself using
ldapsearch to see if they are slow.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba as a time server (newby question): time not updated

2006-06-20 Thread Michael Wood
Hi

On Tue, Jun 20, 2006 at 07:17:53PM +1000, Ivan Teliatnikov wrote:
 Colleagues,
 
 I am trying to use my PDC as a time server. 
 
[snip]
 What do I need to do to ensure that time is synchronised on XP client
 when non-admin user logs into the machine.

Why don't you just set up an NTP server on your Samba server and
then point all the WinXP boxes at it.  I think it's under Time
in the control panel, or if you right-click on the time in the
system tray.  By default it syncs off time.windows.com or
something like that.

I am not a Windows person, so I don't know if you can do this
via group policies or whatever.

Hope that helps :)

-- 
Michael Wood [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] [PATCH] Pet peave then-than

2006-06-05 Thread Michael Wood
 than one TCP/IP binding) This call */
/* can be used to validate the binding */
/* from the client. */
[idempotent] WERROR ServerAlive ();
Index: NEWS
===
--- NEWS(revision 16046)
+++ NEWS(working copy)
@@ -12,7 +12,7 @@
 
 Removal of nmbd and introduction of process models
 ==
-smbd now implements several network protocols other then just CIFS and 
+smbd now implements several network protocols other than just CIFS and 
 DCE/RPC. nmbd's functionality has been merged into smbd. smbd supports 
 various 'process models' that specify how concurrent connections are 
 handled (when to fork, use threads, etc). 
@@ -24,7 +24,7 @@
 
 Much improved SWAT
 ==
-SWAT has had some rather large improvements and is now more then just a 
+SWAT has had some rather large improvements and is now more than just a 
 direct editor for smb.conf. Its layout has been improved. SWAT can now also 
 be used for editing run-time data - maintaining user information, provisioning,
 etc. TLS is supported out of the box.
@@ -368,7 +368,7 @@
Default: Set at compile-time

 + ntvfs handler
-   Backend to the NT VFS to use (more then one can be specified). Available
+   Backend to the NT VFS to use (more than one can be specified). Available
backends include: 

- posix:
@@ -433,7 +433,7 @@

 + client use spnego principal
Tells the client to use the Kerberos service principal specified by the 
-   server during the security protocol negotation rather then 
+   server during the security protocol negotation rather than 
looking up the principal itself (cifs/hostname).
 
Default: false
Index: WHATSNEW.txt
===
--- WHATSNEW.txt(revision 16046)
+++ WHATSNEW.txt(working copy)
@@ -14,7 +14,7 @@
 
  * Call the wins hook script again (metze)
 
- * Make sure no more then 25 records are added in the WINS database (metze)
+ * Make sure no more than 25 records are added in the WINS database (metze)
  
  * Documentation updates (jelmer)
 
Index: BUGS.txt
===
--- BUGS.txt(revision 16046)
+++ BUGS.txt(working copy)
@@ -1,5 +1,5 @@
 Samba 4 is still feature incomplete. If you are using it for anything other
-then education you are insane.
+than education you are insane.
 
 Please file bug reports at https://bugzilla.samba.org/, product: Samba4. 
 Please include as much information as possible, such as SVN revision number 

-- 
Michael Wood [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


<    1   2   3   4   5