[Samba] samba.schema

2005-03-26 Thread Ted Kaczmarek
##attributetype ( 1.3.6.1.4.1.7165.2.1.50 NAME 'sambaPrivName'
##  SUP name )

   MAY ( sambaPrivilegeList ) )

## retired during privilege rewrite
##objectclass ( 1.3.6.1.4.1.7165.2.2.13 NAME 'sambaPrivilege' SUP top
AUXILIARY
##  DESC 'Samba Privilege'
##  MUST ( sambaSID )
##  MAY ( sambaPrivilegeList ) )


The acl on the The Linux Samba-OpenLDAP Howto Revision 1.9 needs this,
yet the schema file has it commented out. Is their a reason this is
commented out?

Regards,
Ted

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Can't get local sid any more, ldap backend

2005-03-24 Thread Ted Kaczmarek
openldap-2.2.13-2
samba-3.0.11-5

I am having a problem with trying net getlocalsid
[EMAIL PROTECTED] tmp]# net getlocalsid
[2005/03/24 07:50:06, 0] utils/net.c:net_getlocalsid(494)
  Can't fetch domain SID for name: GROUPWARE

This happened after setting up an ldap backend,I do have the sid id from
before adding the backend but can't find anything anywhere on any lists
with same problem, my DIT does have a sambaDomain object, and slapcat
dump does appear to have the SID entries. Debuuging slapd I am getting
this error, will try OpenLdap list as well.

do_bind: version=3 dn=cn=Manager,ou=Users,ou=OxObjects,dc=test,dc=com
method=128
== bdb_bind: dn: cn=Manager,ou=Users,ou=OxObjects,dc=test,dc=com
bdb_dn2entry(cn=manager,ou=users,ou=oxobjects,dc=test,dc=com)
= bdb_dn2id( cn=manager,ou=users,ou=oxobjects,dc=test,dc=com )
= bdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found
(-30990)
send_ldap_result: conn=14 op=0 p=3
send_ldap_result: err=49 matched= text=
send_ldap_response: msgid=1 tag=97 err=49


Ted



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Can't get local sid any more, ldap backend

2005-03-24 Thread Ted Kaczmarek
On Thu, 2005-03-24 at 06:32 -0700, Craig White wrote:
 On Thu, 2005-03-24 at 08:23 -0500, Ted Kaczmarek wrote:
  openldap-2.2.13-2
  samba-3.0.11-5
  
  I am having a problem with trying net getlocalsid
  [EMAIL PROTECTED] tmp]# net getlocalsid
  [2005/03/24 07:50:06, 0] utils/net.c:net_getlocalsid(494)
Can't fetch domain SID for name: GROUPWARE
  
  This happened after setting up an ldap backend,I do have the sid id from
  before adding the backend but can't find anything anywhere on any lists
  with same problem, my DIT does have a sambaDomain object, and slapcat
  dump does appear to have the SID entries. Debuuging slapd I am getting
  this error, will try OpenLdap list as well.
  
  do_bind: version=3 dn=cn=Manager,ou=Users,ou=OxObjects,dc=test,dc=com
  method=128
  == bdb_bind: dn: cn=Manager,ou=Users,ou=OxObjects,dc=test,dc=com
  bdb_dn2entry(cn=manager,ou=users,ou=oxobjects,dc=test,dc=com)
  = bdb_dn2id( cn=manager,ou=users,ou=oxobjects,dc=test,dc=com )
  = bdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found
  (-30990)
  send_ldap_result: conn=14 op=0 p=3
  send_ldap_result: err=49 matched= text=
  send_ldap_response: msgid=1 tag=97 err=49
 
 err=49
 
 INSUFFICIENT CREDENTIALS
 
 you need to fix that - I doubt much of anything is working for
 samba/LDAP
 
 Craig
 
Yes, bad slapd acl, now I am getting an invalid dn error.
I dropped a ou in my ldif.

Thanks,
Ted

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Top posting is evil

2005-03-21 Thread Ted Kaczmarek
Please don't top post to mailing lists, many people will send your mail
to /dev/null it is also very hard to read a thread when replies are top
posted. I can understand one liners but even then you get enough one
liners and you end up with a mess.


Ted

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] idmap LDAP backend

2005-03-21 Thread Ted Kaczmarek
On Mon, 2005-03-21 at 11:30 -0800, Theodore Jencks wrote:
 Figure this out a little further:
 
 I had the following in my smb.conf:
 idmap uid = 1-2
 idmap gid = 1-2
 idmap backend = ldap:ldap://localhost
 ldap admin dn = cn=manager,dc=navis,dc=net
 ldap suffix = ou=smb,dc=navis,dc=net
 ldap idmap suffix = ou=idmap
 
 I took the quotes off and now Winbind seems to connect to LDAP fine:
 ldap suffix = ou=smb,dc=navis,dc=net
 ldap idmap suffix = ou=idmap
 
 
 I'm now getting this when I start Winbind in the Winbind log:
 [2005/03/21 11:16:25, 5] lib/gencache.c:gencache_init(59)
   Opening cache file at /var/lock/samba/gencache.tdb
 [2005/03/21 11:16:25, 5] libsmb/namecache.c:namecache_enable(58)
   namecache_enable: enabling netbios namecache, timeout 660 seconds
 [2005/03/21 11:16:25, 5] sam/idmap.c:smb_register_idmap(91)
   smb_register_idmap: Successfully added idmap backend 'ldap'
 [2005/03/21 11:16:25, 5] sam/idmap.c:smb_register_idmap(91)
   smb_register_idmap: Successfully added idmap backend 'tdb'
 [2005/03/21 11:16:25, 3] sam/idmap.c:idmap_init(132)
   idmap_init: using 'ldap' as remote backend
 [2005/03/21 11:16:25, 5] lib/smbldap.c:smbldap_search(1038)
   smbldap_search: base = [ou=idmap,ou=smb,dc=navis,dc=net], filter =
 [(objectclass=sambaUnixIdPool)], scope = [2]
 [2005/03/21 11:16:25, 5] lib/smbldap.c:smbldap_close(949)
   The connection to the LDAP server was closed
 [2005/03/21 11:16:25, 2] lib/smbldap.c:smbldap_open_connection(692)
   smbldap_open_connection: connection opened
 [2005/03/21 11:16:26, 3] lib/smbldap.c:smbldap_connect_system(866)
   ldap_connect_system: succesful connection to the LDAP server
   ldap_connect_system: LDAP server does support paged results
 [2005/03/21 11:16:26, 4] lib/smbldap.c:smbldap_open(929)
   The LDAP server is succesfully connected
 [2005/03/21 11:16:26, 2] lib/tallocmsg.c:register_msg_pool_usage(57)
   Registered MSG_REQ_POOL_USAGE
 [2005/03/21 11:16:26, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71)
   Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
 [2005/03/21 11:16:26, 2]
 nsswitch/winbindd_util.c:add_trusted_domain(175)
   Added domain HQ HQ.NAVIS.NET S-0-0
 [2005/03/21 11:16:26, 4]
 passdb/secrets.c:secrets_fetch_trust_account_password(290)
   Using cleartext machine password
 
 
 However I still think there is a problem because getent passwd only
 returns local usernames.  When I'm not using the ldap idmap backend
 getent passwd runs as expected giving both local and domain usernames.
 
 Any help appreciated,
 Theo
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of
 Theodore Jencks
 Sent: Monday, March 21, 2005 9:52 AM
 To: samba@lists.samba.org
 Subject: RE: [Samba] idmap LDAP backend
 
 Ok, I made the change however the LDAP backend for idmap is still not
 working.  I set Winbind to debugging level 5 and get the following in
 the logs:
 
 [2005/03/21 09:45:05, 2] lib/interface.c:add_interface(81)
   added interface ip=192.168.192.112 bcast=192.168.195.255
 nmask=255.255.252.0
 [2005/03/21 09:45:05, 5] lib/util.c:init_names(256)
   Netbios name list:-
   my_netbios_names[0]=THEO
 [2005/03/21 09:45:05, 2] lib/interface.c:add_interface(81)
   added interface ip=192.168.192.112 bcast=192.168.195.255
 nmask=255.255.252.0
 [2005/03/21 09:45:05, 5] lib/gencache.c:gencache_init(59)
   Opening cache file at /var/lock/samba/gencache.tdb
 [2005/03/21 09:45:05, 5] libsmb/namecache.c:namecache_enable(58)
   namecache_enable: enabling netbios namecache, timeout 660 seconds
 [2005/03/21 09:45:05, 5] sam/idmap.c:smb_register_idmap(91)
   smb_register_idmap: Successfully added idmap backend 'ldap'
 [2005/03/21 09:45:05, 5] sam/idmap.c:smb_register_idmap(91)
   smb_register_idmap: Successfully added idmap backend 'tdb'
 [2005/03/21 09:45:05, 3] sam/idmap.c:idmap_init(132)
   idmap_init: using 'ldap' as remote backend
 [2005/03/21 09:45:05, 5] lib/smbldap.c:smbldap_search(1038)
   smbldap_search: base = [ou=idmap,ou=smb,dc=navis,dc=net], filter
 = [(objectclass=sambaUnixIdPool)], scope = [2]
 [2005/03/21 09:45:05, 5] lib/smbldap.c:smbldap_close(949)
   The connection to the LDAP server was closed
 [2005/03/21 09:45:05, 2] lib/smbldap.c:smbldap_open_connection(692)
   smbldap_open_connection: connection opened
 [2005/03/21 09:45:05, 3] lib/smbldap.c:smbldap_connect_system(866)
   ldap_connect_system: succesful connection to the LDAP server
   ldap_connect_system: LDAP server does support paged results
 [2005/03/21 09:45:05, 4] lib/smbldap.c:smbldap_open(929)
   The LDAP server is succesfully connected
 [2005/03/21 09:45:05, 0] sam/idmap.c:idmap_init(138)
   idmap_init: failed to initialize remote backend!
 
 
 Looks like it tries to get what are called paged results and then it
 fails to initialize remote backend.  I'm not quite sure what is going on
 here and any further guidance would be greatly appreciated.
 
 Thanks in advance,
 Theo
 
 -Original Message-
 From: Gerald (Jerry) Carter 

Re: [Samba] Cant connect to samba server

2005-03-18 Thread Ted Kaczmarek
On Fri, 2005-03-18 at 14:26 -0800, indgirl 6 wrote:
 Hi All,
 This is very urgent, please help me.
  
 I have a redhat machine (2.4.9-e.24) which is acting as a samba server (samba 
 - 2.2.7)
 Everything was going smoothly until we changes the ip address of our windows 
 machines. 
 Now if i try to connect to the server it gives me the error:
 windows cannot find '\\titan. Check the spelling and try again.
 I have tried connecting by using the IP address too but i get the same error.
 
 I have added the new ip range in to the smb.conf file. I even tried (for 
 testing purpose) adding the IP address of my windows machine and see if i can 
 connect but i still cant connect. Please advice what i am doing wrong here.
 
 I went through the DIAGNOSTICS.txt and failed at 
 test 8 with the error: System error 53 has occurred. The network path was not 
 found.
 test 9 with the error: System error 59 has occurred. An unexpected network 
 error occurred.
  
 test 10 with the error: querying delta on 12.20.194.255
 querying delta on 12.20.194.255
 name_query failed to find name delta#1d
  
 Test 11: cant browse
  
 I know this is sone kind of network issue, but i fail to see where... 
  
 
Can the windows machine even ping the samba server?

Ping, traceroute (tracert) tcpdump and or ethereal, as well as the samba
logs files might tell you more. 
 

Look at things in smaller pieces, make sure the little pieces are doing
their work before you look at the assembly of pieces.

Ted

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Strange behavior with samba mountpoint

2002-12-19 Thread Ted Kaczmarek
I have a Redhat 8.0 box with many external connections.
Several nfs and 3 samba.
Today I tried to reattach to one on my mounts and I am geting
Could not resolve mount point /mnt/dir.
If I do an ls -a I can see the dir, but when adding the l option to ls
it does not show up.

fuser returns for the dir,
Input/output error

I apologize if this has nothing to do with Samba, but I am perplexed as
to how to continue troubleshooting this, and came across the problem
when doing a mount -t smbfs.

kernel - 2.4.18-18.8.0smp
samba 2.2.7-2

If I create a new directory I am able to mount the NT box on it.
-- 
Ted K. tedkaz-no-at-spam-optonline.net

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Strange behavior with samba mountpoint

2002-12-19 Thread Ted Kaczmarek
Thanks Joel,
that correlates exactly to my scenario. The network connection back to
the server is unreliable.I suspect their could be some tweaks done to
better handle these situations but that is beyond my present level of
knowledge to tackle.


On Thu, 2002-12-19 at 20:06, Joel Hammer wrote:
 I have this sort of problem a lot.
 
 I think this happens when there is  network connection
 lost. The smbfs mounts don't go away gracefully. In this situation,
 when I run mount I often see the share listed as mounted, although I
 cannot cd into the mount point. Attempts to umount the share fail, too.
 
 So, what to do? You could reboot. You could try killall smbmount. You could
 exit out of the xterm or tty that smbmounted the share. I really don't have
 a good way around this. My best results have been obtained by putting a
 command to umount all my smbfs connections in my network shutdown script.
 
 Joel
 
 
 
 
 
 
 On Thu, Dec 19, 2002 at 07:53:40PM -0500, Ted Kaczmarek wrote:
  I have a Redhat 8.0 box with many external connections.
  Several nfs and 3 samba.
  Today I tried to reattach to one on my mounts and I am geting
  Could not resolve mount point /mnt/dir.
  If I do an ls -a I can see the dir, but when adding the l option to ls
  it does not show up.
  
  fuser returns for the dir,
  Input/output error
  
  I apologize if this has nothing to do with Samba, but I am perplexed as
  to how to continue troubleshooting this, and came across the problem
  when doing a mount -t smbfs.
  
  kernel - 2.4.18-18.8.0smp
  samba 2.2.7-2
  
  If I create a new directory I am able to mount the NT box on it.
  -- 
  Ted K. tedkaz-no-at-spam-optonline.net
  
  -- 
  To unsubscribe from this list go to the following URL and read the
  instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba