Re: [Samba] WINS + BDC Problem
On 04.07.2011 11:10, Daniel Müller wrote: Just, do install samba4wins and everything is fine: I am running 3 samba4wins on, cenOs 5.6 PDC (samba-sernet 5.9) and centos 5.6 BDC (samba-sernet 5.9) and Windows 2008 in replication mode without any problems. Good to know, I'd like to use it too. What repository has rpm packages of samba4win for Centos 5? -- Veiko -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] vampire skipping SAM_DOMAIN_INFO delta
Hi I'm testing vampiring from NT4 PDC to Samba 3.5.8 with LDAP 2.3 backend on Centos 5.6 using smbldap-tools. Can somebody explain me following message: skipping SAM_DOMAIN_INFO delta for 'Builtin' (is not my domain) Creating unix group: 'Guests' Creating unix group: 'Server Operators' Creating unix group: 'Users' Those are 4 last lines of vampire log. What does it skip and why? -- Veiko -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Strange error
Hi, I'm getting many errors in samba logfiles on file server, which is NT4 domain member. Centos 5.5, Samba packages from Sernet repo, version 3.5.6-43.el5. That error is: [2011/03/16 09:37:49.057565, 1] smbd/service.c:678(make_connection_snum) create_connection_server_info failed: NT_STATUS_ACCESS_DENIED What does that error mean? Everything is working correctly as far as i can tell, but still log files get filled with frequent error messages. [2011/03/16 09:39:10.254893, 1] smbd/service.c:678(make_connection_snum) create_connection_server_info failed: NT_STATUS_ACCESS_DENIED [2011/03/16 09:39:20.400353, 1] smbd/service.c:678(make_connection_snum) create_connection_server_info failed: NT_STATUS_ACCESS_DENIED [2011/03/16 09:39:30.557324, 1] smbd/service.c:678(make_connection_snum) create_connection_server_info failed: NT_STATUS_ACCESS_DENIED [2011/03/16 09:39:40.706674, 1] smbd/service.c:678(make_connection_snum) create_connection_server_info failed: NT_STATUS_ACCESS_DENIED [2011/03/16 09:39:50.857928, 1] smbd/service.c:678(make_connection_snum) create_connection_server_info failed: NT_STATUS_ACCESS_DENIED [2011/03/16 09:40:00.421819, 1] smbd/service.c:678(make_connection_snum) create_connection_server_info failed: NT_STATUS_ACCESS_DENIED [2011/03/16 09:40:01.011064, 1] smbd/service.c:678(make_connection_snum) create_connection_server_info failed: NT_STATUS_ACCESS_DENIED [2011/03/16 09:40:11.160259, 1] smbd/service.c:678(make_connection_snum) create_connection_server_info failed: NT_STATUS_ACCESS_DENIED [2011/03/16 09:40:21.263571, 1] smbd/service.c:678(make_connection_snum) create_connection_server_info failed: NT_STATUS_ACCESS_DENIED -- with best regards Veiko -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Strange error
On 16/03/11 09:41, Veiko Kukk wrote: That error is: [2011/03/16 09:37:49.057565, 1] smbd/service.c:678(make_connection_snum) create_connection_server_info failed: NT_STATUS_ACCESS_DENIED I'm sorry, found the answer myself. http://lists.samba.org/archive/samba/2009-May/147995.html In the smb.conf, log level was set to 1. Still it's unclear what create_connection_server_info tries to do and why it fails. -- Veiko -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Migrating (vampire) from NT4 to samba 3.5.7
On 02/03/11 15:43, Veiko Kukk wrote: Also, on NT4 there is group named Domain Users, but that too does not get imported to ldap database. It's empty on linux box, getent group output gives: ... Domain Users:*:513: I investigated some more and found out that if I do net rpc group MEMBERS Domain Users, group members get listed. EKRPTEST\kasutaja1 EKRPTEST\kasutaja2 EKRPTEST\kasutaja3 EKRPTEST\kasutaja4 Then why getent group does not list members of Domain Users? -- Veiko -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Migrating (vampire) from NT4 to samba 3.5.7
Hi, I'm trying to prepare migration from NT4 server to samba with ldap backend. For testing and simulating I have prepared one NT4 server, one Centos 5.5 samba server and now I have almost working setup for vampiring users and groups. Using following packages: samba3.i386 3.5.7-43.el5 samba3-cifsmount.i386 3.5.7-43.el5 samba3-client.i386 3.5.7-43.el5 samba3-doc.i386 3.5.7-43.el5 samba3-utils.i386 3.5.7-43.el5 smbldap-tools.noarch0.9.5-2.el5.rf openldap.i386 2.3.43-12.el5_5.3 openldap-clients.i386 2.3.43-12.el5_5.3 openldap-servers.i386 2.3.43-12.el5_5.3 On NT4 PDC I have entered only some sample users and groups. I'm worried about error messages during vampiring. 1) Why and what does mean ldapsam_update_sam_account: No user to modify!? 2)It creates EKRPTESTSERV$ machine account, but next complains that user EKRPTESTSERV_ doesn't exist. Why $ is being replaced by _? Same with second machineaccount which the samba machine and what are consequences of that error? Is it the same bug? https://bugzilla.samba.org/show_bug.cgi?id=5722 3) There is also group Administrators which contains user Administrator and group Domain Admins on NT4 PDC, but those do not get vampired... on linux server, group Administrators is empty: Administrators:*:544: Following is vampire log: net rpc vampire -S EKRPTESTSERV -U Administrator Fetching (to passdb) DOMAIN database Creating unix group: 'specialusers1' Creating account: Administrator Creating account: Guest ldapsam_update_sam_account: No user to modify! Creating account: EKRPTESTSERV$ /usr/sbin/smbldap-usermod: user EKRPTESTSERV_ doesn't exist smb_set_primary_group: Running the command `/usr/sbin/smbldap-usermod -g 'Domain Users' 'EKRPTESTSERV_'' gave 1 Creating account: kasutaja1 Creating account: kasutaja2 Creating account: kasutaja3 Creating account: kasutaja4 Creating account: ldap2$ /usr/sbin/smbldap-usermod: user ldap2_ doesn't exist smb_set_primary_group: Running the command `/usr/sbin/smbldap-usermod -g 'Domain Users' 'ldap2_'' gave 1 Group members of Domain Admins: root,kasutaja1, adding user kasutaja1 to group Domain Admins Group members of Domain Users: root(primary),EKRPTESTSERV$,kasutaja1(primary),kasutaja2(primary),kasutaja3(primary),kasutaja4(primary),ldap2$, User EKRPTESTSERV_ does not exist: create it first ! User ldap2_ does not exist: create it first ! Group members of Domain Guests: nobody, adding user nobody to group Domain Guests Group members of specialusers1: kasutaja1,kasutaja3, adding user kasutaja1 to group specialusers1 adding user kasutaja3 to group specialusers1 Fetching (to passdb) BUILTIN database skipping SAM_DOMAIN_INFO delta for 'Builtin' (is not my domain) Creating unix group: 'Guests' Creating unix group: 'Server Operators' Creating unix group: 'Users' -- with best regards Veiko -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Migrating (vampire) from NT4 to samba 3.5.7
On 02/03/11 14:27, Veiko Kukk wrote: 3) There is also group Administrators which contains user Administrator and group Domain Admins on NT4 PDC, but those do not get vampired... on linux server, group Administrators is empty: Administrators:*:544: Also, on NT4 there is group named Domain Users, but that too does not get imported to ldap database. It's empty on linux box, getent group output gives: ... Domain Admins:*:512:root,kasutaja1 Domain Users:*:513: Domain Guests:*:514:nobody Domain Computers:*:515: Administrators:*:544: Account Operators:*:548: Print Operators:*:550: Backup Operators:*:551: Replicators:*:552: specialusers1:*:1000:kasutaja1,kasutaja3 Guests:*:1008: Server Operators:*:1009: Users:*:1010: -- Veiko -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] 3.5.6 rpcclient settdriver error
On 04/11/10 19:04, Daniel Deptuła wrote: net rpc rights grant veiko SePrintOperatorPrivilege That helped, thank you very much! Thought I had to add -Uveiko to the end of that line. -- Veiko -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] 3.5.6 rpcclient settdriver error
Hi, I have Centos 5.5 64b with Sernet samba 3.5.6-43.el5 packages. It is configured as domain member server, providing file and printer services. I can connect with: rpcclient -Uveiko localhost, enumdrivers and enumprinters work, both printer and driver are listed, but when I'm trying to set driver to printer: setdriver pdf-ipunkt HP Color LaserJet 5/5M PS result was WERR_ACCESS_DENIED Another server with only difference being samba version 3.3.14-40.el5 works perfectly. Tried this with two different users belonging to domain admins group. Using rpcclient with -d10, ends with: rpc_api_pipe: host localhost num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=200, this_data=200, max_data=4280, param_offset=82, param_disp=0, data_disp=0 00 smb_io_rpc_hdr rpc_hdr major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 000c call_id : 0009 10 smb_io_rpc_hdr_resp rpc_hdr_resp 0010 alloc_hint: 0018 0014 context_id: 0016 cancel_ct : 00 0017 reserved : 00 cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK rpc_api_pipe: host localhost returned 48 bytes. spoolss_OpenPrinterEx: struct spoolss_OpenPrinterEx out: struct spoolss_OpenPrinterEx handle : * handle: struct policy_handle handle_type : 0x (0) uuid : ---- result : WERR_ACCESS_DENIED result was WERR_ACCESS_DENIED -- with best regards Veiko -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.5.4 strange access problem
On 08/16/2010 03:51 PM, Veiko Kukk wrote: Hello, I have a situation with my samba server (CentOS 5.5, Sernet samba 3.5.4-43.el5 x86_64). There is one file on one share that cannot be Did reboot yesterday and that anomaly is gone. At least for a while. :) Veiko -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba 3.5.4 strange access problem
Hello, I have a situation with my samba server (CentOS 5.5, Sernet samba 3.5.4-43.el5 x86_64). There is one file on one share that cannot be accessed over samba, even admin users cannot get write access, windows does not even display security tab for that file. ACL and file rights are correct and tested, even gave 777 and rwx for every ACL group and user, but nothing changed, still unable to access that file. From Ubuntu 10.04 workstation when browsing with Nautilus, this file is not even listed. When looking at file properties from win2k workstation, /var/log/messages lists following: Aug 16 15:35:31 failid smbd[10265]: [2010/08/16 15:35:31.427081, 0] smbd/process.c:1345(switch_message) Aug 16 15:35:31 failid smbd[10265]: Error: Could not change to user. Removing deferred open, mid=52416. Aug 16 15:35:31 failid smbd[10265]: [2010/08/16 15:35:31.430322, 0] smbd/process.c:1345(switch_message) Aug 16 15:35:31 failid smbd[10265]: Error: Could not change to user. Removing deferred open, mid=52544. From that server I can see that file and content of it. Seems perfectly normal file for me. What might cause that anomaly and how to solve it? Thanks, Veiko -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.5.0 and getent group output
Volker Lendecke wrote: On Thu, Mar 04, 2010 at 09:59:47PM +0200, Veiko Kukk wrote: Before upgrade to 3.5, 'getent group' returned something like that: groupname:x:16777268:user1,user2,user3 etc. Now it only returns: groupname:x:16777268: without listing members of any group. What might be the problem and how should I fix it? Please file a bug at https://bugzilla.samba.org/ and assign it to v...@samba.org. Done, bug: https://bugzilla.samba.org/show_bug.cgi?id=7212 -- Veiko -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba 3.5.0 and getent group output
Hello, I recently upgraded my testserver Centos 5.4 from sernet samba 3.3.11-40.el5 to sernet samba 3.5.0-41.el5. Did no configuration changes. Samba is configured to get users and groups from NT4 PDC through winbind. Before upgrade to 3.5, 'getent group' returned something like that: groupname:x:16777268:user1,user2,user3 etc. Now it only returns: groupname:x:16777268: without listing members of any group. What might be the problem and how should I fix it? -- Veiko -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
