[Samba] Per share IP restrictions
Is it possible to restrict access to specific shares by IP? The Hosts Allow directive is a global one, but is there something similar to be more restrictive for admin type shares? Philip -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Per share IP restrictions
Thanks. I was hoping for some sort of .htaccess to be able to allow or deny unauthenticated users (XP Home clients - cannot join the domain) based on their IP. Would be a nice addition... Philip On 2008-05-15 Jeremy Allison wrote: Shares can have ACLs, which restricts by user, but not by IP address. On Thu, May 15, 2008 at 11:51:12PM +0200, Philip Kloppers wrote: Is it possible to restrict access to specific shares by IP? The Hosts Allow directive is a global one, but is there something similar to be more restrictive for admin type shares? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Erratic / unstable PDC
Seems to repeat the same pattern and order. Have taken output from top whenever it changed. It doesn't seem to be resource related, and today is a holiday here, so there are no users online :D Philip May 2 09:27:22 nsc-dell01 winbindd[4281]: [2008/05/02 09:27:22, 0] libsmb/clientgen.c:cli_receive_smb(112) May 2 09:27:22 nsc-dell01 winbindd[4281]: Receiving SMB: Server stopped responding May 2 09:27:35 nsc-dell01 winbindd[4281]: [2008/05/02 09:27:35, 0] libsmb/clientgen.c:cli_receive_smb(112) May 2 09:27:35 nsc-dell01 winbindd[4281]: Receiving SMB: Server stopped responding May 2 09:27:48 nsc-dell01 winbindd[4281]: [2008/05/02 09:27:48, 0] libsmb/clientgen.c:cli_receive_smb(112) May 2 09:27:48 nsc-dell01 winbindd[4281]: Receiving SMB: Server stopped responding /// top - 09:26:58 up 3 days, 16:57, 1 user, load average: 0.00, 0.00, 0.00 Tasks: 159 total, 1 running, 158 sleeping, 0 stopped, 0 zombie Cpu(s): 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Mem: 3636624k total, 786608k used, 2850016k free, 219320k buffers Swap: 2104472k total,0k used, 2104472k free, 291724k cached PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND 4247 root 15 0 6920 1732 1168 S0 0.0 2:11.37 nmbd 9365 root 15 0 2384 1068 764 R0 0.0 0:00.18 top /// top - 09:27:13 up 3 days, 16:57, 1 user, load average: 0.00, 0.00, 0.00 Tasks: 160 total, 1 running, 159 sleeping, 0 stopped, 0 zombie Cpu(s): 0.0%us, 0.1%sy, 0.0%ni, 99.8%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Mem: 3636624k total, 786780k used, 2849844k free, 219324k buffers Swap: 2104472k total,0k used, 2104472k free, 291776k cached PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND 9365 root 15 0 2384 1068 764 R0 0.0 0:00.22 top 9370 root 18 0 12384 2560 1748 S0 0.1 0:00.01 smbd /// top - 09:27:25 up 3 days, 16:57, 1 user, load average: 0.00, 0.00, 0.00 Tasks: 161 total, 1 running, 160 sleeping, 0 stopped, 0 zombie Cpu(s): 0.1%us, 0.0%sy, 0.0%ni, 99.9%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Mem: 3636624k total, 786872k used, 2849752k free, 219324k buffers Swap: 2104472k total,0k used, 2104472k free, 291804k cached PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND 4247 root 15 0 6920 1732 1168 S0 0.0 2:11.38 nmbd 19227 nobody18 0 107m 37m 1944 S0 1.0 1:19.74 ntop 9365 root 15 0 2384 1068 764 R0 0.0 0:00.25 top /// top - 09:27:40 up 3 days, 16:57, 1 user, load average: 0.00, 0.00, 0.00 Tasks: 162 total, 1 running, 161 sleeping, 0 stopped, 0 zombie Cpu(s): 0.0%us, 0.1%sy, 0.0%ni, 99.9%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Mem: 3636624k total, 787648k used, 2848976k free, 219324k buffers Swap: 2104472k total,0k used, 2104472k free, 291888k cached PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND 4281 root 15 0 9408 2928 1920 S0 0.1 0:28.38 winbindd 9365 root 15 0 2384 1068 764 R0 0.0 0:00.29 top /// top - 09:27:43 up 3 days, 16:57, 1 user, load average: 0.00, 0.00, 0.00 Tasks: 162 total, 1 running, 161 sleeping, 0 stopped, 0 zombie Cpu(s): 0.0%us, 0.0%sy, 0.0%ni, 99.9%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Mem: 3636624k total, 787632k used, 2848992k free, 219324k buffers Swap: 2104472k total,0k used, 2104472k free, 291900k cached PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND 4247 root 15 0 6920 1732 1168 S0 0.0 2:11.40 nmbd 9365 root 15 0 2384 1068 764 R0 0.0 0:00.30 top -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] mba.org] On Behalf Of Henry Van Styn Sent: 2008-05-01 20:51 To: 'samba@lists.samba.org' Subject: RE: [Samba] Erratic / unstable PDC While this is happening, what does 'top' say? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Philip Kloppers Sent: Thursday, May 01, 2008 2:01 PM To: samba@lists.samba.org Subject: [Samba] Erratic / unstable PDC -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Erratic / unstable PDC
Greetings all, I have a problem with my Samba server seeming to hang every 5 minutes or so. Client machines also become sluggish across the entire network during this period. File transfers that are in progress do also hang, but do not seem to drop. Any ideas would be greatly appreciated. Philip nsc-dell01:/var/log/samba # uname -a Linux nsc-dell01 2.6.18.2-34-default #1 SMP Mon Nov 27 11:46:27 UTC 2006 i686 i686 i386 GNU/Linux nsc-dell01:/var/log/samba # smbd -V Version 3.0.28-0.1.95-1624-SUSE-SL10.2 (/etc/samba/smb.conf) [global] workgroup = NSC realm = NSC interfaces = 192.168.0.0/24, 127.0.0.1 bind interfaces only = Yes map to guest = Bad User null passwords = Yes password server = nsc-dell01 passdb backend = tdbsam log level = 9 log file = /var/log/samba/%m time server = Yes printcap name = cups add user script = /usr/sbin/useradd -m %u delete user script = /usr/sbin/userdel -r %u add group script = /usr/sbin/groupadd %g delete group script = /usr/sbin/groupdel %g add user to group script = /usr/sbin/usermod -G %g %u add machine script = /usr/sbin/useradd -d /var/lib/nobody -s /bin/false '%u' logon path = logon drive = U: logon home = \\%L\%U\Documents logon script = netlogon.bat domain logons = Yes os level = 65 preferred master = Yes domain master = Yes wins support = Yes ldap ssl = no usershare allow guests = Yes idmap uid = 1-2 idmap gid = 1-2 winbind enum users = Yes winbind enum groups = Yes cups options = raw include = /etc/samba/dhcp.conf (/var/log/messages) Apr 26 17:21:37 nsc-dell01 winbindd[7847]: [2008/04/26 17:21:37, 0] libsmb/clientgen.c:cli_receive_smb(112) Apr 26 17:21:37 nsc-dell01 winbindd[7847]: Receiving SMB: Server stopped responding Apr 26 17:21:49 nsc-dell01 winbindd[7847]: [2008/04/26 17:21:49, 0] libsmb/clientgen.c:cli_receive_smb(112) Apr 26 17:21:49 nsc-dell01 winbindd[7847]: Receiving SMB: Server stopped responding Apr 26 17:26:06 nsc-dell01 winbindd[7853]: [2008/04/26 17:26:06, 0] nsswitch/winbindd_dual.c:async_request_timeout_handler(181) Apr 26 17:26:06 nsc-dell01 winbindd[7853]: async_request_timeout_handler: child pid 7849 is not responding. Closing connection to it. Apr 26 17:26:59 nsc-dell01 winbindd[7847]: [2008/04/26 17:26:59, 0] libsmb/clientgen.c:cli_receive_smb(112) Apr 26 17:26:59 nsc-dell01 winbindd[7847]: Receiving SMB: Server stopped responding Apr 26 17:27:12 nsc-dell01 winbindd[7847]: [2008/04/26 17:27:12, 0] libsmb/clientgen.c:cli_receive_smb(112) Apr 26 17:27:12 nsc-dell01 winbindd[7847]: Receiving SMB: Server stopped responding Apr 26 17:27:24 nsc-dell01 winbindd[7847]: [2008/04/26 17:27:24, 0] libsmb/clientgen.c:cli_receive_smb(112) Apr 26 17:27:24 nsc-dell01 winbindd[7847]: Receiving SMB: Server stopped responding (/var/log/samba/winbindd) [2008/04/26 17:21:27, 6] libsmb/clientgen.c:write_socket(153) write_socket(21,274) [2008/04/26 17:21:27, 6] libsmb/clientgen.c:write_socket(156) write_socket(21,274) wrote 274 [2008/04/26 17:21:37, 5] lib/util.c:show_msg(484) [2008/04/26 17:21:37, 5] lib/util.c:show_msg(494) size=410 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=7847 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=0 (0x0) smb_vwv[ 2]=0 (0x0) smb_vwv[ 3]= 275 (0x113) smb_bcc=367 [2008/04/26 17:21:37, 0] libsmb/clientgen.c:cli_receive_smb(112) Receiving SMB: Server stopped responding [2008/04/26 17:21:37, 4] nsswitch/winbindd_cm.c:cm_prepare_connection(731) authenticated session setup failed with NT_STATUS_IO_TIMEOUT /* . . . */ [2008/04/26 17:21:39, 6] libsmb/clientgen.c:write_socket(153) write_socket(21,274) [2008/04/26 17:21:39, 6] libsmb/clientgen.c:write_socket(156) write_socket(21,274) wrote 274 [2008/04/26 17:21:49, 5] lib/util.c:show_msg(484) [2008/04/26 17:21:49, 5] lib/util.c:show_msg(494) size=410 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=7847 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=0 (0x0) smb_vwv[ 2]=0 (0x0) smb_vwv[ 3]= 275 (0x113) smb_bcc=367 [2008/04/26 17:21:49, 0] libsmb/clientgen.c:cli_receive_smb(112) Receiving SMB: Server stopped responding [2008/04/26 17:21:49, 4] nsswitch/winbindd_cm.c:cm_prepare_connection(731) authenticated session setup failed with NT_STATUS_IO_TIMEOUT (/var/log/samba/log.smbd) [2008/04/26 17:21:27, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(739) Got user=[NSC-DELL01$] domain=[NSC] workstation=[NSC-DELL01] len1=24 len2=24 [2008/04/26 17:21:27, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(69) auth_context challenge set by NTLMSSP
[Samba] Erratic / unstable PDC
Greetings all, I have a problem with my Samba server seeming to hang for 10 seconds every 5 minutes or so. Client machines also become sluggish across the entire network during this period. It does not seem to affect file transfers that are in progress. Any ideas would be greatly appreciated. Philip nsc-dell01:/var/log/samba # uname -a Linux nsc-dell01 2.6.18.2-34-default #1 SMP Mon Nov 27 11:46:27 UTC 2006 i686 i686 i386 GNU/Linux nsc-dell01:/var/log/samba # smbd -V Version 3.0.28-0.1.95-1624-SUSE-SL10.2 (/etc/samba/smb.conf) [global] workgroup = NSC realm = NSC interfaces = 192.168.0.0/24, 127.0.0.1 bind interfaces only = Yes map to guest = Bad User null passwords = Yes password server = nsc-dell01 passdb backend = tdbsam log level = 9 log file = /var/log/samba/%m time server = Yes printcap name = cups add user script = /usr/sbin/useradd -m %u delete user script = /usr/sbin/userdel -r %u add group script = /usr/sbin/groupadd %g delete group script = /usr/sbin/groupdel %g add user to group script = /usr/sbin/usermod -G %g %u add machine script = /usr/sbin/useradd -d /var/lib/nobody -s /bin/false '%u' logon path = logon drive = U: logon home = \\%L\%U\Documents logon script = netlogon.bat domain logons = Yes os level = 65 preferred master = Yes domain master = Yes wins support = Yes ldap ssl = no usershare allow guests = Yes idmap uid = 1-2 idmap gid = 1-2 winbind enum users = Yes winbind enum groups = Yes cups options = raw include = /etc/samba/dhcp.conf (/var/log/messages) Apr 26 17:21:37 nsc-dell01 winbindd[7847]: [2008/04/26 17:21:37, 0] libsmb/clientgen.c:cli_receive_smb(112) Apr 26 17:21:37 nsc-dell01 winbindd[7847]: Receiving SMB: Server stopped responding Apr 26 17:21:49 nsc-dell01 winbindd[7847]: [2008/04/26 17:21:49, 0] libsmb/clientgen.c:cli_receive_smb(112) Apr 26 17:21:49 nsc-dell01 winbindd[7847]: Receiving SMB: Server stopped responding Apr 26 17:26:06 nsc-dell01 winbindd[7853]: [2008/04/26 17:26:06, 0] nsswitch/winbindd_dual.c:async_request_timeout_handler(181) Apr 26 17:26:06 nsc-dell01 winbindd[7853]: async_request_timeout_handler: child pid 7849 is not responding. Closing connection to it. Apr 26 17:26:59 nsc-dell01 winbindd[7847]: [2008/04/26 17:26:59, 0] libsmb/clientgen.c:cli_receive_smb(112) Apr 26 17:26:59 nsc-dell01 winbindd[7847]: Receiving SMB: Server stopped responding Apr 26 17:27:12 nsc-dell01 winbindd[7847]: [2008/04/26 17:27:12, 0] libsmb/clientgen.c:cli_receive_smb(112) Apr 26 17:27:12 nsc-dell01 winbindd[7847]: Receiving SMB: Server stopped responding Apr 26 17:27:24 nsc-dell01 winbindd[7847]: [2008/04/26 17:27:24, 0] libsmb/clientgen.c:cli_receive_smb(112) Apr 26 17:27:24 nsc-dell01 winbindd[7847]: Receiving SMB: Server stopped responding (/var/log/samba/winbindd) [2008/04/26 17:21:27, 6] libsmb/clientgen.c:write_socket(153) write_socket(21,274) [2008/04/26 17:21:27, 6] libsmb/clientgen.c:write_socket(156) write_socket(21,274) wrote 274 [2008/04/26 17:21:37, 5] lib/util.c:show_msg(484) [2008/04/26 17:21:37, 5] lib/util.c:show_msg(494) size=410 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=7847 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=0 (0x0) smb_vwv[ 2]=0 (0x0) smb_vwv[ 3]= 275 (0x113) smb_bcc=367 [2008/04/26 17:21:37, 0] libsmb/clientgen.c:cli_receive_smb(112) Receiving SMB: Server stopped responding [2008/04/26 17:21:37, 4] nsswitch/winbindd_cm.c:cm_prepare_connection(731) authenticated session setup failed with NT_STATUS_IO_TIMEOUT / [2008/04/26 17:21:39, 6] libsmb/clientgen.c:write_socket(153) write_socket(21,274) [2008/04/26 17:21:39, 6] libsmb/clientgen.c:write_socket(156) write_socket(21,274) wrote 274 [2008/04/26 17:21:49, 5] lib/util.c:show_msg(484) [2008/04/26 17:21:49, 5] lib/util.c:show_msg(494) size=410 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=7847 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=0 (0x0) smb_vwv[ 2]=0 (0x0) smb_vwv[ 3]= 275 (0x113) smb_bcc=367 [2008/04/26 17:21:49, 0] libsmb/clientgen.c:cli_receive_smb(112) Receiving SMB: Server stopped responding [2008/04/26 17:21:49, 4] nsswitch/winbindd_cm.c:cm_prepare_connection(731) authenticated session setup failed with NT_STATUS_IO_TIMEOUT (/var/log/samba/log.smbd) [2008/04/26 17:21:27, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(739) Got user=[NSC-DELL01$] domain=[NSC] workstation=[NSC-DELL01] len1=24 len2=24 [2008/04/26 17:21:27, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(69) auth_context challenge set by NTLMSSP
