Re: [Samba] Samba ADS on AIX 6.1 TL04
Yashpal Nagar wrote: Hi All I'm trying to intergrate samba server with ADS on AIX 6.1 TL04, for last one week, with idmap / winbind but no satisfactory results. I have gone through various links at samba.org relating to winbind, idmapper and followed http://pware.hvcc.edu/ for precompiled binaries and http://pware.hvcc.edu/AIX-Samba.pdf which is for AIX 6.1 TL03 though. It shouldn't matter. The TL's are just IBM's way of drawing lines for patch sets. The documentation was updated when TL-03 was released. The code compiled on 5.3 should run just fine under 6.1. I have found the samba which is provided by IBM with expansion pack doesn't have support for ADS. The binaries I have tried with is both 32 bit and 64bit of samba, neither of them has worked for me. ADS join is ok, I am able to see all good ouput for wbinfo -t/-m/-p etc. I have copied the WINBIND module under /usr/lib/security and changed /usr/lib/security/methods.cfg as WINBIND: program = /usr/lib/security/WINBIND options = authonly Please remove the authonly, it's not necessary. the /etc/security/user the default stanza with SYSTEM = WINBIND OR compat The errors I have repeatedly encountered is -- Could not trigger lookup sid sid2gid returned an error Could not lookup name for user MYDOMAIN\USER1 Some other errors are Error GID range is full!! This is an indication that the winbind configuration may be incorrect. In general, the AD configurations work as expected on AIX. Could you post your smb.conf for review? Also, are you using the LDAP backend or TDB? The IDMAP piece has been significantly modified from 3.3.x through 3.5.x, so some docs (including my own) may need some revision and depending on how yours is written may be getting misinterpreted. I am posting info from one of my (old - 5.3-TL6-SP4) AIX machines running 3.5.2 joined to w2k8R2: [aixdev:/] # oslevel -s 5300-06-04-0748 [aixdev:/] # lslpp -l pware* Fileset Level State Description Path: /usr/lib/objrepos pware53.base.rte 5.3.0.0 COMMITTED pWare base for 5.3 pware53.bash.rte 4.0.35.0 COMMITTED GNU bash 4.0 pware53.bdb.rte 4.7.25.4 COMMITTED Berkeley DB 4.7.25 pware53.cyrus-sasl.rte2.1.23.1 COMMITTED cyrus-sasl 2.1.23 pware53.gettext.rte 0.17.0.0 COMMITTED GNU gettext 0.17 pware53.krb5.rte 1.7.1.1 COMMITTED MIT Kerberos 1.7.1 pware53.libiconv.rte 1.13.1.0 COMMITTED GNU libiconv 1.13.1 pware53.ncurses.rte5.7.0.1 COMMITTED ncurses 5.7.0.1 pware53.openldap.rte 2.4.21.1 COMMITTED OpenLDAP 2.4.21 pware53.openssl.rte 0.9.8.13 COMMITTED OpenSSL 0.9.8m pware53.popt.rte 1.10.4.0 COMMITTED popt 1.10.4 pware53.readline.rte 6.1.0.0 COMMITTED GNU readline 6.1 pware53.samba.rte 3.5.2.0 COMMITTED Samba 3.5.2 pware53.tar.rte 1.22.0.0 COMMITTED GNU tar 1.22 pware53.zlib.rte 1.2.4.0 COMMITTED zlib 1.2.4 [aixdev:/] # cat /opt/pware/lib/smb.conf [global] security = ads realm = DEV35.LOCAL password server = 151.103.35.21 workgroup = DEV35 winbind separator = + idmap uid = 1-2 idmap gid = 1-2 winbind enum users = yes winbind enum groups = yes log level = 3 template homedir = /home/%D/%U template shell = /opt/pware/bin/bash client use spnego = yes client ntlmv2 auth = yes encrypt passwords = yes winbind use default domain = yes restrict anonymous = 2 [netlogon] path = /netlogon [aixdev:/] # net ads testjoin Join is OK [aixdev:/] # wbinfo -u administrator guest krbtgt w.jojo [aixdev:/] # wbinfo -g domain computers domain controllers schema admins enterprise admins cert publishers domain admins domain users domain guests group policy creator owners ras and ias servers allowed rodc password replication group denied rodc password replication group read-only domain controllers enterprise read-only domain controllers dnsadmins dnsupdateproxy ctxpilot [aixdev:/] # lsuser w.jojo w.jojo id=1 pgrp=domain users home=/home/DEV35/w.jojo shell=/opt/pware/bin/bash gecos=William Jojo login=true su=true rlogin=true daemon=true admin=false sugroups=ALL admgroups= tpath=nosak ttys=ALL expires=0 auth1=SYSTEM auth2=NONE umask=22 registry=WINBIND SYSTEM=compat or WINBIND logintimes= loginretries=0 pwdwarntime=0 account_locked=false minage=0 maxage=0 maxexpired=-1 minalpha=0 minother=0 mindiff=0 maxrepeats=8 minlen=0 histexpire=0 histsize=0 pwdchecks= dictionlist= fsize=-1 cpu=-1 data=-1 stack=-1 core=2097151 rss=-1 nofiles=-1 roles= id=1 pgrp=domain users home=/home/DEV35/w.jojo shell=/opt/pware/bin/bash pgid=1 gecos=William Jojo shell=/opt/pware/bin/bash pgrp=domain users SID=S-1-5-21-2261283086-3937381662-459627218-1113 [aixdev
Re: [Samba] Samba ADS on AIX 6.1 TL04
Yashpal Nagar wrote: Thanks a lot Bill for your reply. My smb.conf - [global] As a member server, I would have expected workgroup to be AA, that is, the prefix of the realm. workgroup = MYGRP domain master = no local master = no server string = Test Samba Server netbios name = FOO realm = AA.DK http://AA.DK allow trusted domains = no security = ADS encrypt passwords = yes password server = * dns proxy = no log level = 3 max log size = 100 log file = /var/log/samba/%m.log client use spnego = yes Remove the following: idmap domains = MYGRP idmap config MYGRP:default = yes idmap config MYGRP:backend = tdb idmap config MYGRP:range = 20 - 50 idmap alloc backend = tdb idmap alloc config:range = 20 - 50 Add the following: idmap uid = 20-50 idmap gid = 20-50 Please see the following: http://samba.org/samba/docs/man/manpages-3/idmap_tdb.8.html But ignore the last example. :-) The idmap alloc is only necessary if the allocator it not going to the tdb model specified by idmap backend The man pages are very out of sync with the reality of IDMAP, but IDMAP is not a simple component and not always easy to debug, but I think it is in a better place now than previously. restrict anonymous = yes wins server = namesrv04 namesrv03 name resolve order = wins bcast - When I run testparm, it say unrecognised idmap domains = MYGRP. If I comment that out this throws no error for 'net ads testjoin' etc. No matter whichever samba ver I use it complains about this line, I may notice you have mentioned same example in one of your examples in your pdf, under IDMAP_TDB. Yeah, as of 3.3, that's not the case any longer. I will update my docs to reflect the truth. :-) Other smb.conf, I have tried which works well on AIX 5.2, but didn't work with precompiled binaries on AIX 6.1 --- [global] workgroup = MYGRP domain master = no local master = no server string = Test Samba Server netbios name = foo realm = AA.DK http://AA.DK allow trusted domains = no security = ADS encrypt passwords = yes password server = * dns proxy = no log level = 1 max log size = 100 log file = /var/log/samba/%m.log idmap uid = 10-99 idmap gid = 100-199 restrict anonymous = yes wins server = namesrv04 namesrv03 name resolve order = wins bcast winbind enum groups = no winbind enum users = no winbind cache time = 300 winbind use default domain = yes -- Since the existing setup (AIX5.2) works well with tdb backend, though it is not explicitly mentioned into the config above, But i can see a large winbindd_idmap.tdb under $SAMBA/var. I would keep the same tdb (default?) backend. The default is TDB, so yes, it would stay the same. You should (and probably want to) copy the winbindd_idmap.tdb to the new server to keep your mappings unless this is not desired. What I would like know - 1. Which samba binaries you have installed, I believe it is 32 bit. Can I use 64 bit binaries on a production server? You have mentioned *The 64-bit code is to be treated as PRODUCTION. * what does this mean? if this PRODUCTION means it shall be used for production servers or it is for you/SAMBA development team currently using for development/production of samba. Some more information here on your website surely would help more. Sorry about that. All of my package were initially 32-bit, then I offered the 64-bit code as BETA for about 6 months, and after some testing and feedback from users, I marked it as production quality. The Samba Team makes no guarantees whatsoever on what I produce. This is simply a statement of usability. I will remove that line from the site. 3. After changing mehtods.cfg, user file, Is there any program need to be restarted apart from samba or server reboot? The most you may need to do is stop Samba and run slibclean, then restart Samba. 4. I understand AIX uses LAM, instead of PAM which is used on Linux. Is there any setting related to LAM we got to do on AIX. There is no nsswitch.conf file as well, I assume since these binaries are already compiled for that platform, it should take care automatically? The package(s) I provide also support PAM. The IBM LAM framework is in use with the WINBIND product Andrew Tridgell wrote some time ago. You are correct that there no nsswitch.conf. Effectively, methods.cfg and /etc/security/user are the equivalent. Let me know how you get on. Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Compile errors for samba 3.5.2 on aix 5.3
Beau Gauthreaux wrote: Any suggestions would be appreciated. I'm trying to compile samba 3.5.2 on aix 5.3 using gcc. And getting the following error while running: Which make are you using? IBM's? Cheers, Bill ./source3/make -d -f Makefile-noincludes Linking non-shared library bin/libsmbclient.a update time: 13:48:41.808974749 Apr 21, 2010 Suff_FindDeps (bin/libsmbclient.so) No known suffix on bin/libsmbclient.so. Using .NULL suffix. bin/libsmbclient.so:@ = bin/libsmbclient.so bin/libsmbclient.so:* = bin/libsmbclient.so bin/libsmbclient.so: = No valid suffix on bin/libsmbclient.so. failed. Returning NULL Suff_FindDeps (bin/libsmbclient.so.0) No known suffix on bin/libsmbclient.so.0. Using .NULL suffix. bin/libsmbclient.so.0:@ = bin/libsmbclient.so.0 bin/libsmbclient.so.0:* = bin/libsmbclient.so.0 bin/libsmbclient.so.0: = No valid suffix on bin/libsmbclient.so.0. failed. Returning NULL Suff_FindDeps (libsmb/libsmb_thread_impl.o) trying libsmb/libsmb_thread_impl.c...got it. Caching 9:26:22.0 Apr 1, 2010 for libsmb/libsmb_thread_impl.c got it libsmb/libsmb_thread_impl.o:@ = libsmb/libsmb_thread_impl.o libsmb/libsmb_thread_impl.o:* = libsmb/libsmb_thread_impl libsmb/libsmb_thread_impl.o: = libsmb/libsmb_thread_impl.c applying .c - .o to libsmb/libsmb_thread_impl.o Suff_FindDeps (EXTRA_FLAGS) No known suffix on EXTRA_FLAGS. Using .NULL suffix. EXTRA_FLAGS:@ = EXTRA_FLAGS EXTRA_FLAGS:* = EXTRA_FLAGS EXTRA_FLAGS: = failed. Returning NULL Examining EXTRA_FLAGS...non-existent...non-existent and no sources...out-of-date. EXTRA_FLAGS:? = EXTRA_FLAGS: = make: 1254-002 Cannot find a rule to create target EXTRA_FLAGS from dependencies. Stop. Thanks, -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] krb5 library issues when Compiling 3.5.2 and 3.4.7 on AIX 5.3
Original message Date: Fri, 16 Apr 2010 10:38:09 +0200 From: Michael Wood esiot...@gmail.com Subject: Re: [Samba] krb5 library issues when Compiling 3.5.2 and 3.4.7 on AIX 5.3 To: christoph.be...@desy.de Cc: Samba samba@lists.samba.org Hi On 16 April 2010 09:59, christoph.be...@desy.de wrote: Hi, try --with-krb5=/path/to/your/kerberos/installation/root I suggested this at the bottom of his message and then realised that he had done this. The real problem is the ld command will not search for libs that end with .so unless you provide the -brtl option. BTW, 3.5.2 is available on the site, unless there are features you don't need. :-) The method of configuring Samba that I use for pWare is: env CC=gcc -O2 -Wl,-blibpath:/opt/pware/lib:/usr/lib:/lib,-brtl \ CPPFLAGS=-I/opt/pware/include \ CFLAGS=-O2 -I/opt/pware/include \ LDFLAGS=-L/opt/pware/lib \ ./configure --with-acl-support --with-utmp \ --with-ldap --with-krb5=/opt/pware \ --with-libiconv=/opt/pware --with-sendfile-support \ --prefix=/opt/pware --with-syslog --with-quotas \ --with-winbind=yes --with-aio-support=yes --with-automount \ --with-pam --with-acl-support \ --with-static-modules=vfs_aixacl2,vfs_aixacl \ --with-shared-modules=idmap_rid,idmap_ad,vfs_gpfs,idmap_tdb2 Cheers, Bill or export CPPFLAGS=-I/your/krb/dir/include export LDFLAGS=$LDFLAGS -L/your/krb/dir/lib This might be worth a try. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] AIX 5.3 Active Directory Synchronisation using Winbind
Craig Green wrote: Hi John, Thank you for your reply. I really appreciate your input. I have been using Samba on our AIX servers for last few years. Up unto recently I have always used security = DOMAIN, (with versions 3.0.28 and 3.3.9). I have had no issues with that type of setup. It is only now that I have been testing integration into MS AD and using security = ADS that I am having problems. The Samba versions I have tried with ADS are 3.3.9 and 3.5.0. Version 3.3.9 was compiled from scratch. I get the same issues with both versions. Originally I thought the issues must be with my compiled version. However it seems it be some sort of AIX config issue since I get the same issues with version 3.5.0 which is the pre-compiled version from the hvcc.edu site. I am stumped as to what the issue is. Everything I can find on the net re using samba and winbind implies I have the correct setup but this cannot be the case since I cannot get it to work. I must have something wrong but for the life of me I cannot figure it out. Re the question of do you really need ADS security mode. Well, most likely not, we could integrate using ldap but my understanding is that using winbind is a less complicated method or it is supposed to be. In regards to the correct version of WINBIND, I have checked this previously and the correct version is being used. In the past I have been able to connect a Linux server to an MS-AD but the Linux server uses NSS. AIX does not have NSS but I believe the changes to the /etc/security/user file are supposed to replace this. I am guessing the issue has something to do with this. However I have found info on the www that says other users of AIX have been able to Samba and WINBIND to join and ADS and to authenticate back to the AD without issues once they have made the alterations to the /etc/security/user and methods.cfg files. If I perform a test to verify that communications between Samba-3 winbind and the Active Directory server is using Kerberos protocols I get the correct data back. $ net ads info LDAP server: 172.16.xxx.xxx LDAP server name: blue.testrealm.com.au Realm: TESTREALM.COM.AU Bind Path: dc=TESTREALM,dc=COM,dc=AU LDAP port: 389 Server time: Tue, 06 Apr 2010 11:27:22 EET KDC server: 172.16.xxx.xxx Server time offset: 0 The net ads status command also returns the correct data. So everything I do implies I am communicating correctly with the AD. However authentication does not work. I also agree with you that the hvcc.edu site it is an awesome project. Without it my life would certainly be more difficult. Regards, Craig Green Support Consultant - Unix Ultradata - Vision to Reality +61 3 9291 1742 www.ultradata.com.au -Original Message- From: John Welch [mailto:jwe...@brosco.com] Sent: Saturday, 3 April 2010 1:10 AM To: William Jojo Cc: samba@lists.samba.org; Craig Green Subject: Re: [Samba] AIX 5.3 Active Directory Synchronisation using Winbind - William Jojo w.j...@hvcc.edu wrote: Original message Date: Fri, 2 Apr 2010 08:15:38 -0400 (EDT) From: John Welch jwe...@brosco.com Subject: Re: [Samba] AIX 5.3 Active Directory Synchronisation using Winbind To: cgr...@ultradata.com.au Cc: samba@lists.samba.org I know one issue I ran into when I recently upgraded Samba on the AIX box was that the WINBIND file in /usr/lib/security was a symbolic link that was not linked to the correct version of Samba. Have you looked at this file and verified that it is correct? John, Can you provide a little more on the problem you had? I'm not able to find the broken link in my development servers (32 or 64 bit), and I *really* want to improve our quality control. Glad to hear the project is working out for you otherwise. :-) Cheers, Bill Hi Bill, Prior to the recent upgrade to 3.4.5 we had been using an old 3.0 version (3.0.28) from your pware project. At that level of Samba at least the directory structure was /opt/pware/samba/version. I did the upgrade a few months ago, so I'm trying to recall from memory the exact issue, but I believe after upgrading the WINBIND symbolic link was still pointing to the 3.0.28 binary. Not sure if the upgrade should have fixed this automatically or not. Really a minor thing, but something I overlooked initially. Your project is awesome... Keep up the good work! Thanks! I just posted 3.5.2 yesterday. I was able to join AIX to ADS (w2k8r2) and I can telnet into AIX without issue. Can you tell me what lsuser returns for the shell? I bet it is /bin/false. If so, you may want to set: template shell = /opt/pware/bin/bash or template shell = /bin/ksh Depending on the shell you wish users to use. If this is not it, I'm happy to help figure out what is going on. Cheers, Bill Thanks, John Disclaimer Notice This message contains privileged and confidential information intended only for the use of the addressee
Re: [Samba] Joining a NetApp filer to a Samba PDC ?
Frank Bonnet wrote: Hello Does anyone succeded in joining a Samba PDC with a NetApp filer ? Yep, look here: http://pware.hvcc.edu/NetApp-Samba.pdf Cheers, Bill I tried many times but never succeded ... Any infos welcome. Thanks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] AIX 5.3 Active Directory Synchronisation using Winbind
Original message Date: Fri, 2 Apr 2010 08:15:38 -0400 (EDT) From: John Welch jwe...@brosco.com Subject: Re: [Samba] AIX 5.3 Active Directory Synchronisation using Winbind To: cgr...@ultradata.com.au Cc: samba@lists.samba.org I know one issue I ran into when I recently upgraded Samba on the AIX box was that the WINBIND file in /usr/lib/security was a symbolic link that was not linked to the correct version of Samba. Have you looked at this file and verified that it is correct? John, Can you provide a little more on the problem you had? I'm not able to find the broken link in my development servers (32 or 64 bit), and I *really* want to improve our quality control. Glad to hear the project is working out for you otherwise. :-) Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] AIX and DFS
Volker Lendecke wrote: On Tue, Feb 16, 2010 at 10:16:40PM -0600, Peacock, Joshua wrote: Has an official fix for this come down yet? It will be in 3.4.6 due next Wednesday, but this problem could be worked around in the build process. I'm not sure about the binary versions. Oh yeah! It could, but the readlink test was broken so you've have to dig pretty deep to realize you needed to do that. ;-) ;-) The 3.4.5 binaries on my site have the realink DFS fix. Thanks Volker! Cheers, Bill Volker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 2.2.7
Wagg, Dave wrote: Hi, When we first installed SAMBA on our IBM AIX 5.3 server, we created 6 shares. For some reason we have discovered that to access a Samba share we always had to assign one share ahead of all others to a user for that user to gain access. ( i.e. If a user requires access to the extracts share, we have to assign the reports share first in the user login, and then assign the extracts share to gain access to the extracts share. We always have to assign the reports share first for everyone that will be using SAMBA) Hi Dave, Version 2.2.7 is very old. Is this the IBM provided version from the AIX toolbox? You may want to consider: http://pware.hvcc.edu/downloads.html and download something more recent in the 3.3 (3.3.10) or 3.4 (3.4.5) series. Also, it is helpful to include your smb.conf (minus any security related stuff) so we can view your setup and offer advice. Cheers, Bill Any ideas what we have done wrong in the setup? Thanks Dave -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] AIX and DFS
Peacock, Joshua wrote: Thanks for all your help. I am using packages from pware. But I downloaded the the source for 3.3.7 and just ran a configure and I get the following in the config.log samba_cv_HAVE_BROKEN_READLINK=no Which I thought would need to be set to yes. I don't have access to a ftp/sftp site that I can give you access too. How would you like me to get you the log file (92k)? Just following this thread I did some digging and I think readlink is working as written. :-) http://www1.hrz.tu-darmstadt.de/hhlr/doku/sw/apidiffs.html#readlink http://publib.boulder.ibm.com/infocenter/aix/v6r1/index.jsp?topic=/com.ibm.aix.basetechref/doc/basetrf2/symlink.htm I think we either need to add AIX to the ifdef or properly handle the ERANGE. The former looks easier. ;-) At any rate, Joshua, are you using the 32- or 64-bit version of 3.3.7? I have a 32-bit patched smbd replacement you can test with the original patch Volker suggested. I can make a 64-bit if you need that. Interested? Cheers, Bill This is AIX 6.1 Thanks -Original Message- From: Volker Lendecke [mailto:volker.lende...@sernet.de] Sent: Thursday, January 14, 2010 9:48 AM To: Peacock, Joshua Cc: samba@lists.samba.org Subject: Re: [Samba] AIX and DFS On Thu, Jan 14, 2010 at 09:05:27AM -0600, Peacock, Joshua wrote: https://bugzilla.samba.org/show_bug.cgi?id=6330 Heh, too much going on for my aging brain... Miguel sent me the following bug report which states its fixed in 3.3.5 Does this mean it needs to be compiled with an option to define HAVE_BROKEN_READLINK? It should have figured that out itself if it is indeed fixed in 3.3.5. Can you post your config.log file somewhere? Thanks, Volker This message is intended only for the persons or entities to which it is addressed. The information transmitted herein may contain proprietary or confidential material. Review, reproduction, retransmission, distribution, disclosure or other use, and any consequent action taken by persons or entities other than intended recipients, are prohibited and may be unlawful. If you are not the intended recipient, please delete this information from your system and contact the sender. The information contained herein is subject to change without notice. Although reasonable precautions have been taken to ensure that no viruses are present, the sender makes no warranty or guaranty with respect thereto, and is not responsible for any loss or damage arising from the receipt or use of this e-mail or attachments hereto. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] AIX and DFS
Peacock, Joshua wrote: I am running 32bit and I would take that version to do some testing with. Will I need to file a bug report for this? The new smbd is here: http://pware.hvcc.edu/download/aix53/joshua/smbd And if this fixes the problem, I'll file the bug and follow up with Volker. Cheers, Bill Thanks -Original Message- From: William Jojo [mailto:w.j...@hvcc.edu] Sent: Thursday, January 14, 2010 1:45 PM To: Peacock, Joshua Cc: volker.lende...@sernet.de; samba@lists.samba.org Subject: Re: [Samba] AIX and DFS Peacock, Joshua wrote: Thanks for all your help. I am using packages from pware. But I downloaded the the source for 3.3.7 and just ran a configure and I get the following in the config.log samba_cv_HAVE_BROKEN_READLINK=no Which I thought would need to be set to yes. I don't have access to a ftp/sftp site that I can give you access too. How would you like me to get you the log file (92k)? Just following this thread I did some digging and I think readlink is working as written. :-) http://www1.hrz.tu-darmstadt.de/hhlr/doku/sw/apidiffs.html#readlink http://publib.boulder.ibm.com/infocenter/aix/v6r1/index.jsp?topic=/com.i bm.aix.basetechref/doc/basetrf2/symlink.htm I think we either need to add AIX to the ifdef or properly handle the ERANGE. The former looks easier. ;-) At any rate, Joshua, are you using the 32- or 64-bit version of 3.3.7? I have a 32-bit patched smbd replacement you can test with the original patch Volker suggested. I can make a 64-bit if you need that. Interested? Cheers, Bill This is AIX 6.1 Thanks -Original Message- From: Volker Lendecke [mailto:volker.lende...@sernet.de] Sent: Thursday, January 14, 2010 9:48 AM To: Peacock, Joshua Cc: samba@lists.samba.org Subject: Re: [Samba] AIX and DFS On Thu, Jan 14, 2010 at 09:05:27AM -0600, Peacock, Joshua wrote: https://bugzilla.samba.org/show_bug.cgi?id=6330 Heh, too much going on for my aging brain... Miguel sent me the following bug report which states its fixed in 3.3.5 Does this mean it needs to be compiled with an option to define HAVE_BROKEN_READLINK? It should have figured that out itself if it is indeed fixed in 3.3.5. Can you post your config.log file somewhere? Thanks, Volker This message is intended only for the persons or entities to which it is addressed. The information transmitted herein may contain proprietary or confidential material. Review, reproduction, retransmission, distribution, disclosure or other use, and any consequent action taken by persons or entities other than intended recipients, are prohibited and may be unlawful. If you are not the intended recipient, please delete this information from your system and contact the sender. The information contained herein is subject to change without notice. Although reasonable precautions have been taken to ensure that no viruses are present, the sender makes no warranty or guaranty with respect thereto, and is not responsible for any loss or damage arising from the receipt or use of this e-mail or attachments hereto. This message is intended only for the persons or entities to which it is addressed. The information transmitted herein may contain proprietary or confidential material. Review, reproduction, retransmission, distribution, disclosure or other use, and any consequent action taken by persons or entities other than intended recipients, are prohibited and may be unlawful. If you are not the intended recipient, please delete this information from your system and contact the sender. The information contained herein is subject to change without notice. Although reasonable precautions have been taken to ensure that no viruses are present, the sender makes no warranty or guaranty with respect thereto, and is not responsible for any loss or damage arising from the receipt or use of this e-mail or attachments hereto. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba query for aix 6.1 OS
Farhan Rafiq wrote: Dear All Could you please let me know if (samba-3.3.6.tar) samba version is compatible for aix version 6.1 ? Where did you get that binary from? And also if you have doco for configuring it on aix . Im going to read thru the readme and doco on internet, I presume it is all about configuring /etc/smb.conf file :) Well, it depends on how the developer configured it. Cheers, Bill Many Thanks Farhan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] URGENT: printer problem under 3.3.7
I (cross-)posted a few days ago about TDB files growing for individual printers. These TDB files are holding onto information about previous jobs after they have been printed. This is on AIX 5.3 that was just upgraded from 3.0.31 about 20 days ago. The problem now is we are bumping up against the max print jobs of 1000 for some really busy queues. Is there a way to remove this old information from the TDB file? Shouldn't Samba remove this knowledge after the job is printed? I will file a bug in bugzilla about the details, but I was wondering if this is a known problem in some other thread since Bugzilla searches turned up not related for print and tdb. Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Upgrade from 3.0.31 to 3.3.7 now has incredibly large printer tdb files
Sorry for the cross-post, but curious if this is a known issue. After upgrading our printer server from 3.0.31 to 3.3.7, the tdb files for the specific queues are growing out of control with old job data in the tdb file. In addition the queue from the windows view can show hundreds of old jobs that have long since printed. How can we: a) reduce the tdb file size and b) stop samba from recording this info in the first place (as no one really cares from the windows side as long as their job prints :-) :-) ) Setting lpq cache = 0 was no help and max reported print jobs does not help either. Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] re Trouble with idmap_ldap in 3.3.6
Charles Weber wrote: We also have been using samba 2 and 3 for years with ldap idmap. This occurs whether I use sernet 3.3.7 rpms or build my own from samba.org3.3.7 tgz. I increased logging and here is what I get in log.winbindd-idmap. [r...@niairphome2 ~]# tail -f /var/log/samba/log.winbindd-idmap [2009/08/03 10:46:24, 3] lib/module.c:do_smb_load_module(48) Error loading module '/usr/lib64/samba/idmap/ldap.so': /usr/lib64/samba/idmap/ldap.so: cannot open shared object file: No such file or directory [2009/08/03 10:46:24, 3] winbindd/idmap.c:idmap_init_domain(307) Could not probe idmap module ldap [2009/08/03 10:46:24, 3] winbindd/idmap.c:idmap_new_mapping(670) no default domain, no place to write This is using CentOS 5.3 and the old style ldap settings that work fine in samba 3.03x and samba 3.2.x. ldap admin dn = cn=Manager,dc=xxx,dc=xxx ldap idmap suffix = ou=xxx ldap suffix = dc=xxx,dc=xxx ldap ssl = no idmap backend = ldap:ldap://x.x.x; ldap:ldap://y.x.x; One set of quotes in the above. That should fix the problem. Cheers, Bill idmap uid = 15000-11 idmap gid = 15000-11 I tried the new idmap alloc syntax and it made no difference. ldap.so does exist in /usr/lib64/samba/idmap/, but of course ldap.so does not. Chuck -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Share access problem from 3.4.0
Arendt, Volker wrote: Hi all, we have a public share for all of our users. The share definition is as follows: [public] comment = browseable = yes writeable = yes path = /gpfs/fbb/apps/public force group = @BUILTIN+Users valid users = @BUILTIN+Users write list = @BUILTIN+Users All of our data resides on a GPFS file system. The share is defined and accessed on a AIX 5.3.10 node with samba 3.0.26a. Here users do not have any problem. A second node with AIX 5.3.10 and samba 3.4.0 provides the same share. Users cannot access the public share via this system. What could be the problem? Hi, Volker! If this is the same share, wouldn't the SID be different and thereby giving a different set of permissions for BUILTIN+Users on the shared filesystem, or did I miss something in your description. Cheers, Bill Kind regards Volker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Share access problem from 3.4.0
William Jojo wrote: Arendt, Volker wrote: Hi all, we have a public share for all of our users. The share definition is as follows: [public] comment = browseable = yes writeable = yes path = /gpfs/fbb/apps/public force group = @BUILTIN+Users valid users = @BUILTIN+Users write list = @BUILTIN+Users All of our data resides on a GPFS file system. The share is defined and accessed on a AIX 5.3.10 node with samba 3.0.26a. Here users do not have any problem. A second node with AIX 5.3.10 and samba 3.4.0 provides the same share. Users cannot access the public share via this system. What could be the problem? Hi, Volker! If this is the same share, wouldn't the SID be different and thereby giving a different set of permissions for BUILTIN+Users on the shared filesystem, or did I miss something in your description. That was a stupid question since the SID is well known. *S-1-5-32-545* Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Share access problem from 3.4.0 (solved)
Arendt, Volker wrote:
Hi all,
as it happens very often the problem sits about 30 centimeters from
the monitor (thanks for that, Volker)!
I incorrectly assumed that i can access the same directory on a GPFS
file system from two different nodes. As such my current problem is
solved. Currently we have to isolate access to a directory on GPFS to
a single node.
My next steps would be to setup CTDB and SAMBA on AIX. But the
documentation is not suited for a AIX install as it is very linux
based. I would be willing to cooperate to build the documentation and
a reference installation for AIX.
How about you, Bill? Shall we give it a try?! ;-)
Indeed I would. :-) I have passed some patches back upstream for AIX,
but I am completing a test for broken libgpfs.a before they can be
included. In the meantime, I've been successful with a
pware53{-64}.clustered-samba.rte 3.3.4.0 (32- and 64-bit).
I can work on the 3.4 version later today since my patch set is against
this level. I'm finishing up an AMP refresh I can't wait to get off my
plate. :-)
Cheers,
Bill
Kind regards
Volker
-Ursprüngliche Nachricht-
Von: Volker Lendecke [mailto:volker.lende...@sernet.de]
Gesendet: Mo 27.07.2009 15:47
An: Arendt, Volker
Cc: samba@lists.samba.org
Betreff: Re: [Samba] Share access problem from 3.4.0
On Mon, Jul 27, 2009 at 03:19:15PM +0200, Arendt, Volker wrote:
Hi all,
we have a public share for all of our users. The share definition is as
follows:
[public]
comment =
browseable = yes
writeable = yes
path = /gpfs/fbb/apps/public
force group = @BUILTIN+Users
valid users = @BUILTIN+Users
write list = @BUILTIN+Users
All of our data resides on a GPFS file system. The share is defined and
accessed on a AIX 5.3.10 node with samba 3.0.26a. Here users do not have
any problem.
A second node with AIX 5.3.10 and samba 3.4.0 provides the same share.
Users cannot access the public share via this system.
What could be the problem?
No idea without logfiles.
Just to make 100% sure: The path= you're pointing to is
different from the 3.0.26a node, right? Otherwise you're
forcing your users to destroy their data. You might want to
take a look at ctdb.samba.org.
Volker
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Share access problem from 3.4.0 (solved)
Arendt, Volker wrote:
Hi Bill,
please let me know when your AMP bundle is done and you have the 3.4.0
ctdb-samba version packaged. Then we could go to work and find out how
a best practice for setting up a clustered samba on AIX needs to
look like. :-)
Ok, perhaps we could add/supplement to these docs?
http://pware.hvcc.edu/AIX-Samba.pdf
These also need to be updated to include some additional backends that
have been released since 3.2. But everything listed there works very nicely.
Cheers,
Bill
regards
Volker
-Ursprüngliche Nachricht-
Von: William Jojo [mailto:w.j...@hvcc.edu]
Gesendet: Mo 27.07.2009 17:26
An: Arendt, Volker
Cc: volker.lende...@sernet.de; samba@lists.samba.org
Betreff: Re: AW: [Samba] Share access problem from 3.4.0 (solved)
Arendt, Volker wrote:
Hi all,
as it happens very often the problem sits about 30 centimeters from
the monitor (thanks for that, Volker)!
I incorrectly assumed that i can access the same directory on a GPFS
file system from two different nodes. As such my current problem is
solved. Currently we have to isolate access to a directory on GPFS to
a single node.
My next steps would be to setup CTDB and SAMBA on AIX. But the
documentation is not suited for a AIX install as it is very linux
based. I would be willing to cooperate to build the documentation and
a reference installation for AIX.
How about you, Bill? Shall we give it a try?! ;-)
Indeed I would. :-) I have passed some patches back upstream for AIX,
but I am completing a test for broken libgpfs.a before they can be
included. In the meantime, I've been successful with a
pware53{-64}.clustered-samba.rte 3.3.4.0 (32- and 64-bit).
I can work on the 3.4 version later today since my patch set is against
this level. I'm finishing up an AMP refresh I can't wait to get off my
plate. :-)
Cheers,
Bill
Kind regards
Volker
-Ursprüngliche Nachricht-
Von: Volker Lendecke [mailto:volker.lende...@sernet.de]
Gesendet: Mo 27.07.2009 15:47
An: Arendt, Volker
Cc: samba@lists.samba.org
Betreff: Re: [Samba] Share access problem from 3.4.0
On Mon, Jul 27, 2009 at 03:19:15PM +0200, Arendt, Volker wrote:
Hi all,
we have a public share for all of our users. The share definition
is as
follows:
[public]
comment =
browseable = yes
writeable = yes
path = /gpfs/fbb/apps/public
force group = @BUILTIN+Users
valid users = @BUILTIN+Users
write list = @BUILTIN+Users
All of our data resides on a GPFS file system. The share is
defined and
accessed on a AIX 5.3.10 node with samba 3.0.26a. Here users do
not have
any problem.
A second node with AIX 5.3.10 and samba 3.4.0 provides the same share.
Users cannot access the public share via this system.
What could be the problem?
No idea without logfiles.
Just to make 100% sure: The path= you're pointing to is
different from the 3.0.26a node, right? Otherwise you're
forcing your users to destroy their data. You might want to
take a look at ctdb.samba.org.
Volker
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] AIX starting and stopping samba from command line
Tim Evans wrote: BeefStu BeefStu wrote: All: I am running on an AIX 5.3 platform and I am looking to see if anybody has a script similar to this (see below) that will work under AIX. My goal is, on boot up I want to have samba started automatically. Can somebody let me what I have to do (on AIX) for this to happen. You can try the following (from several sources) /usr/bin/mkssys -s nmbd -p /opt/pware/sbin/nmbd -a '-F -s /opt/pware/lib/smb.conf' -u 0 -S -n 15 -f 9 -R -G samba /usr/bin/mkssys -s smbd -p /opt/pware/sbin/smbd -a '-F -s /opt/pware/lib/smb.conf' -u 0 -S -n 15 -f 9 -R -G samba /usr/bin/mkssys -s smbd -p /opt/pware/sbin/winbindd -a '-F -s /opt/pware/lib/smb.conf' -u 0 -S -n 15 -f 9 -R -G samba This gives you the ability to do:: startsrc -s smbd stopsrc -s winbindd stopsrc -g samba startsrc -g samba Assuming, of course, that you want to use the IBM way of managing daemons with SRC. Then you could add startsrc -g samba to inittab like: samba:2:once:/usr/bin/startsrc -g samba /dev/console 21 This can be done with: mkitab samba:2:once:/usr/bin/startsrc -g samba /dev/console 21 Just some thoughts... Cheers, Bill We start it from the /etc/rc.tcpip script. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Authentication problem with samba 3.3.4 on AIX 5.3
Arendt, Volker wrote: Hello all, we currently do have a problem with samba 3.3.4 on AIX 5.3. We have set up the samba system to integrate in our AD Domain. Integration was successfull (net ads join), wbinfo executes with parameters -ugt without any problems. Our smb.conf content follows at the end of this mail. We have defined just one share as follows: [smbtest] writeable = yes path = /gpfs/fbb/ls/cip valid users = When we connect from a Windows XP System we get the following error message: --- C:\Programme\Support Toolsnet use p: \\frigg\smbtest Systemfehler 2239 aufgetreten. Dieses Benutzerkonto ist abgelaufen. --- translated: user account has expired In the system log file we get: --- -- [2009/06/09 17:21:16, 10] smbd/sesssetup.c:reply_spnego_kerberos(402) Mapped to [FB6] (using PAC) [2009/06/09 17:21:16, 5] lib/username.c:Get_Pwnam_alloc(133) Finding user FB6+AdmMJ [2009/06/09 17:21:16, 5] lib/username.c:Get_Pwnam_internals(77) Trying _Get_Pwnam(), username as lowercase is fb6+admmj [2009/06/09 17:21:16, 5] lib/username.c:Get_Pwnam_internals(110) Get_Pwnam_internals did find user [FB6+AdmMJ]! [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_start(472) smb_pam_start: PAM: Init user: admmj [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_start(489) smb_pam_start: PAM: setting rhost to: 132.195.123.104 [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_start(498) smb_pam_start: PAM: setting tty [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_start(506) smb_pam_start: PAM: Init passed for user: admmj [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_account(564) smb_pam_account: PAM: Account Management for User: admmj [2009/06/09 17:21:16, 2] auth/pampass.c:smb_pam_account(571) smb_pam_account: PAM: User admmj no longer permitted to access system [2009/06/09 17:21:16, 2] auth/pampass.c:smb_pam_error_handler(77) smb_pam_error_handler: PAM: Account Check Failed : User account has expired [2009/06/09 17:21:16, 0] auth/pampass.c:smb_pam_accountcheck(794) smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User admmj! [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_end(450) smb_pam_end: PAM: PAM_END OK. --- -- Hey, Volker. It's been awhile. Couple of questions: 1) What does /etc/pam.conf look like and 2) What does /opt/pware/lib/fbb-projekte.conf look like? Glad to see you are still using the pWare stuff. :-) :-) How is your cluster testing going? I need to contact Miguel again to see how he is making out. Cheers, Bill An error log, debug level 10 is available on request. Kind regards Volker SMB.CONF --- --- [global] # # setting base configuration parameters # # workgroup = FB6 netbios name = FRIGG server string = AFS-2 security = ADS realm = FB6.UNI-WUPPERTAL.DE auth methods = winbind # password server = AD logon server password server = 132.195.120.9 132.195.120.12 wins server = 132.195.120.12 client use spnego = yes client signing = yes # added wg. ticket #5344 #client lanman auth = no #client ntlmv2 auth = yes encrypt passwords = yes host msdfs = no #domain logons = yes # fuer Samba 3.3.0 # damit keine verschluesselte Verbindung zum Domain Controller # aufgebaut wird ldap ssl = no # - # printer settings # ??? better disable these settings ??? # - # printcap name = cups # disable spoolss = Yes # show add printer wizard = No # - # ID mapping parameters # mapping windows users to unix users # this is performed on the basis of sid on windows and # unix with uid for users and gid for groups # the backend parameter rid allows to get the same mapping # form sid to uid because it is determined algorithmically # that way we get the same mapping even if we use samba on # several disparate systems # CHANGE NOTIFICATIO: with v3.3.0 there are changes # to idmap; idmap domains is no longer supported # - #idmap domains = FB6 #idmap backend = rid idmap backend = tdb idmap config FB6:backend = rid #idmap config FB6:base_rid = 0 idmap config FB6:range = 1 - 4 idmap uid = 1-4 idmap gid = 1-4 winbind separator =+ winbind use default domain = Yes winbind enum users = no winbind enum groups = no winbind cache time = 60 winbind gid = 1-4 winbind uid = 1-4 template homedir = /gpfs/fbb/user/%U template shell = /opt/pware/bin/bash #use sendfile = Yes #printing = cups #ldap suffix = dc=FB6, dc=UNI-WUPPERTAL, dc=DE
Re: [Samba] Authentication problem with samba 3.3.4 on AIX 5.3
/security/pam_aix use_new_state try_first_pass websm_supassword required /usr/lib/security/pam_aix try_first_pass websm_rloginsessionrequired /usr/lib/security/pam_aix websm_susessionrequired /usr/lib/security/pam_aix Cheers, Bill William Jojo wrote: Arendt, Volker wrote: Hello all, we currently do have a problem with samba 3.3.4 on AIX 5.3. We have set up the samba system to integrate in our AD Domain. Integration was successfull (net ads join), wbinfo executes with parameters -ugt without any problems. Our smb.conf content follows at the end of this mail. We have defined just one share as follows: [smbtest] writeable = yes path = /gpfs/fbb/ls/cip valid users = When we connect from a Windows XP System we get the following error message: --- C:\Programme\Support Toolsnet use p: \\frigg\smbtest Systemfehler 2239 aufgetreten. Dieses Benutzerkonto ist abgelaufen. --- translated: user account has expired In the system log file we get: --- -- [2009/06/09 17:21:16, 10] smbd/sesssetup.c:reply_spnego_kerberos(402) Mapped to [FB6] (using PAC) [2009/06/09 17:21:16, 5] lib/username.c:Get_Pwnam_alloc(133) Finding user FB6+AdmMJ [2009/06/09 17:21:16, 5] lib/username.c:Get_Pwnam_internals(77) Trying _Get_Pwnam(), username as lowercase is fb6+admmj [2009/06/09 17:21:16, 5] lib/username.c:Get_Pwnam_internals(110) Get_Pwnam_internals did find user [FB6+AdmMJ]! [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_start(472) smb_pam_start: PAM: Init user: admmj [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_start(489) smb_pam_start: PAM: setting rhost to: 132.195.123.104 [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_start(498) smb_pam_start: PAM: setting tty [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_start(506) smb_pam_start: PAM: Init passed for user: admmj [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_account(564) smb_pam_account: PAM: Account Management for User: admmj [2009/06/09 17:21:16, 2] auth/pampass.c:smb_pam_account(571) smb_pam_account: PAM: User admmj no longer permitted to access system [2009/06/09 17:21:16, 2] auth/pampass.c:smb_pam_error_handler(77) smb_pam_error_handler: PAM: Account Check Failed : User account has expired [2009/06/09 17:21:16, 0] auth/pampass.c:smb_pam_accountcheck(794) smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User admmj! [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_end(450) smb_pam_end: PAM: PAM_END OK. --- -- Hey, Volker. It's been awhile. Couple of questions: 1) What does /etc/pam.conf look like and 2) What does /opt/pware/lib/fbb-projekte.conf look like? Glad to see you are still using the pWare stuff. :-) :-) How is your cluster testing going? I need to contact Miguel again to see how he is making out. Cheers, Bill An error log, debug level 10 is available on request. Kind regards Volker SMB.CONF --- --- [global] # # setting base configuration parameters # # workgroup = FB6 netbios name = FRIGG server string = AFS-2 security = ADS realm = FB6.UNI-WUPPERTAL.DE auth methods = winbind # password server = AD logon server password server = 132.195.120.9 132.195.120.12 wins server = 132.195.120.12 client use spnego = yes client signing = yes # added wg. ticket #5344 #client lanman auth = no #client ntlmv2 auth = yes encrypt passwords = yes host msdfs = no #domain logons = yes # fuer Samba 3.3.0 # damit keine verschluesselte Verbindung zum Domain Controller # aufgebaut wird ldap ssl = no # - # printer settings # ??? better disable these settings ??? # - # printcap name = cups # disable spoolss = Yes # show add printer wizard = No # - # ID mapping parameters # mapping windows users to unix users # this is performed on the basis of sid on windows and # unix with uid for users and gid for groups # the backend parameter rid allows to get the same mapping # form sid to uid because it is determined algorithmically # that way we get the same mapping even if we use samba on # several disparate systems # CHANGE NOTIFICATIO: with v3.3.0 there are changes # to idmap; idmap domains is no longer supported # - #idmap domains = FB6 #idmap backend = rid idmap backend = tdb idmap config FB6:backend = rid #idmap config FB6:base_rid = 0 idmap config FB6:range = 1 - 4 idmap uid = 1-4 idmap gid = 1-4 winbind separator =+ winbind use default domain = Yes winbind enum
Re: SOLVED: [Samba] Authentication problem with samba 3.3.4 on AIX 5.3:
Arendt, Volker wrote: Hi David, Thats it! Thanks a lot!!! But, of course, you can always ignore PAM. ;-) Cheers, Bill Volker -Ursprüngliche Nachricht- Von: David Markey [mailto:dmar...@dodds.dmarkey.com] Gesendet: Di 09.06.2009 20:13 An: William Jojo Cc: Arendt, Volker; samba@lists.samba.org Betreff: Re: [Samba] Authentication problem with samba 3.3.4 on AIX 5.3 AIX doesnt have a pam.conf. it uses LAM. change obey pam restrictions = yes to obey pam restrictions = no William Jojo wrote: Arendt, Volker wrote: Hello all, we currently do have a problem with samba 3.3.4 on AIX 5.3. We have set up the samba system to integrate in our AD Domain. Integration was successfull (net ads join), wbinfo executes with parameters -ugt without any problems. Our smb.conf content follows at the end of this mail. We have defined just one share as follows: [smbtest] writeable = yes path = /gpfs/fbb/ls/cip valid users = When we connect from a Windows XP System we get the following error message: --- C:\Programme\Support Toolsnet use p: \\frigg\smbtest Systemfehler 2239 aufgetreten. Dieses Benutzerkonto ist abgelaufen. --- translated: user account has expired In the system log file we get: --- -- [2009/06/09 17:21:16, 10] smbd/sesssetup.c:reply_spnego_kerberos(402) Mapped to [FB6] (using PAC) [2009/06/09 17:21:16, 5] lib/username.c:Get_Pwnam_alloc(133) Finding user FB6+AdmMJ [2009/06/09 17:21:16, 5] lib/username.c:Get_Pwnam_internals(77) Trying _Get_Pwnam(), username as lowercase is fb6+admmj [2009/06/09 17:21:16, 5] lib/username.c:Get_Pwnam_internals(110) Get_Pwnam_internals did find user [FB6+AdmMJ]! [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_start(472) smb_pam_start: PAM: Init user: admmj [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_start(489) smb_pam_start: PAM: setting rhost to: 132.195.123.104 [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_start(498) smb_pam_start: PAM: setting tty [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_start(506) smb_pam_start: PAM: Init passed for user: admmj [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_account(564) smb_pam_account: PAM: Account Management for User: admmj [2009/06/09 17:21:16, 2] auth/pampass.c:smb_pam_account(571) smb_pam_account: PAM: User admmj no longer permitted to access system [2009/06/09 17:21:16, 2] auth/pampass.c:smb_pam_error_handler(77) smb_pam_error_handler: PAM: Account Check Failed : User account has expired [2009/06/09 17:21:16, 0] auth/pampass.c:smb_pam_accountcheck(794) smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User admmj! [2009/06/09 17:21:16, 4] auth/pampass.c:smb_pam_end(450) smb_pam_end: PAM: PAM_END OK. --- -- Hey, Volker. It's been awhile. Couple of questions: 1) What does /etc/pam.conf look like and 2) What does /opt/pware/lib/fbb-projekte.conf look like? Glad to see you are still using the pWare stuff. :-) :-) How is your cluster testing going? I need to contact Miguel again to see how he is making out. Cheers, Bill An error log, debug level 10 is available on request. Kind regards Volker SMB.CONF --- --- [global] # # setting base configuration parameters # # workgroup = FB6 netbios name = FRIGG server string = AFS-2 security = ADS realm = FB6.UNI-WUPPERTAL.DE auth methods = winbind # password server = AD logon server password server = 132.195.120.9 132.195.120.12 wins server = 132.195.120.12 client use spnego = yes client signing = yes # added wg. ticket #5344 #client lanman auth = no #client ntlmv2 auth = yes encrypt passwords = yes host msdfs = no #domain logons = yes # fuer Samba 3.3.0 # damit keine verschluesselte Verbindung zum Domain Controller # aufgebaut wird ldap ssl = no # - # printer settings # ??? better disable these settings ??? # - # printcap name = cups # disable spoolss = Yes # show add printer wizard = No # - # ID mapping parameters # mapping windows users to unix users # this is performed on the basis of sid on windows and # unix with uid for users and gid for groups # the backend parameter rid allows to get the same mapping # form sid to uid because it is determined algorithmically # that way we get the same mapping even if we use samba on # several disparate systems # CHANGE NOTIFICATIO: with v3.3.0 there are changes # to idmap; idmap domains is no longer supported
Re: [Samba] samba-3.3.4 AD/krb5/pam build failure on AIX 5.3/6.1 UNKNOWN_CREATE_KEY_FUNCTIONS
Benjamin Huntsman wrote: Hi all! Perhaps someone here could tell me if this has been seen before. We're trying to build samba-3.3.4 for IBM AIX with support for PAM, Active Directory, and Kerberos. The end goal is to be able to join the AIX system to our Active Directory domain so that users can log in via their AD username/password, and have access to their home directory via the Windows pass-through authentication system. We are building as STATIC on the latest AIX 5.3 with gcc 3.3.2, and deploying on AIX 6.1. We have IBM's Kerberos installed in /usr/krb5, where it is properly found by the configure script. If it's found by the script, why isn't it listed in the any of the -I options below? Here are the errors from 'make': Compiling libsmb/clikrb5.c libsmb/clikrb5.c:258:2: #error UNKNOWN_CREATE_KEY_FUNCTIONS libsmb/clikrb5.c:1011:2: #error UNKNOWN_KRB5_VERIFY_CHECKSUM_FUNCTION libsmb/clikrb5.c: In function `handle_krberror_packet': libsmb/clikrb5.c:1527: error: `ERROR_TABLE_BASE_krb5' undeclared (first use in t his function) libsmb/clikrb5.c:1527: error: (Each undeclared identifier is reported only once libsmb/clikrb5.c:1527: error: for each function it appears in.) libsmb/clikrb5.c:1608:2: #error UNKNOWN_KRB5_ENCTYPE_TO_STRING_FUNCTION The following command failed: gcc -I. -I/bk/compile/samba-3.3.4/build/source -I/bk/compile/samba-3.3.4/openld ap/include -O -D_SAMBA_BUILD_=3 -I/bk/compile/samba-3.3.4/build/source/popt -I/b k/compile/samba-3.3.4/build/source/iniparser/src -Iinclude -I./include -I. -I. -I./lib/replace -I./lib/talloc -I./lib/tdb/include -I./libaddns -I./librpc -DHAV E_CONFIG_H -Iinclude -I./include -I. -I. -I./lib/replace -I./lib/talloc -I./lib /tdb/include -I./libaddns -I./librpc -I./popt -DLDAP_DEPRECATED -I/include -I/ bk/compile/samba-3.3.4/build/source/lib -D_SAMBA_BUILD_=3 -c libsmb/clikrb5.c - o libsmb/clikrb5.o make: 1254-004 The error code from the last command is 1. And, here are the options to configure that we're using: ./configure --prefix=/opt/samba-3.3.4 \ --sysconfdir=/etc/samba-3.3.4 \ --localstatedir=/var/adm/samba-3.3.4 \ --enable-static=yes \ --enable-shared=no \ --with-privatedir=/etc/samba-3.3.4/private \ --with-lockdir=/var/adm/samba-3.3.4/locks \ --with-piddir=/var/adm/samba-3.3.4/locks \ --with-swatdir=/opt/samba-3.3.4/swat \ --with-configdir=/etc/samba-3.3.4/conf \ --with-logfilebase=/var/adm/samba-3.3.4/logs \ --with-localedir=/etc/samba-3.3.4/locale \ --with-aio-support \ --without-winbind \ --with-ldap \ --with-ads \ --with-krb5 \ --with-pam \ If you're using AD, you're likely going to want winbindd (and maybe WINBIND LAM) unless there is another way you plan on mapping SIDs to Unix user/group id values. Also, I would prefix the configure command with something similar to: env CFLAGS=-I/usr/krb5/include ... \ LDFLAGS=-L/usr/krb5/lib ... \ configure ... \ Assuming, of course, that those paths are correct. :-) Personally, I've never been successful with much that IBM put out with respect to Kerberos or libiconv. If you are unsuccessful in your venture, you can always try my site: http://pware.hvcc.edu/ And follow the links for Downloads until you get to the bundles directory. There's 32- and 64-bit options and a few of us are testing some Clustered Samba patches for AIX, which hopefully we can pass back upstream soon. Cheers, Bill Can anyone spot why the errors are occurring? I don't have much experience with Samba or Kerberos, but it would seem to me that the IBM Kerberos won't cut it. Has anyone here successfully compiled samba with Active Directory support on AIX with IBM's Kerberos? Many thanks to all in advance! -Ben -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] password authentification
Dale Schroeder wrote: I don't know AIX, but I do know you will have to configure kerberos on your system. Since this is AD, it is better to set security to ADS. security = ADS Add your realm realm = hshhp.com (or whatever it is) You can use the default idmap backend, but this is better idmap backend = rid:HSHHP:1000-1 (or whatever #'s you choose) winbid uid = 1000-1 winbind gid = 1000-1 I found an AIX tutorial for Samba/AD. You will have to determine how much of it applies to you. http://stgwiki.com/index.php/AIX_Samba_AD This is as step-by-step as I could find. Those notes are actually pretty good. I just ran through them, but it all depends on what BeefStu needs. Also, you can get more recent bundles (3.2.11 or 3.3.4) from: http://pware.hvcc.edu/download/aix53/bundles/samba/ Cheers, Bill Dale BeefStu BeefStu wrote: Since I am totally lost can somebody please walk me through this? My goal is to use AD to do password authentification and NOT need a password file with in SAMBA. The reason being is we have a policy that our domain password expires every 60 days and I don't want to keep 2 passwords files in sync. I am curretly running samba on an AIX 5.3 machine. # uname -a AIX diamond 3 5 000C86CF4C00 This is the what I think I need in my smb.conf file in order to use AD for password validation. Is this okay? Am I missing some settings? [global] workgroup = HSHHP security = DOMAIN auth methods = ntdomain password server = ttndc3 max xmit = 65535 socket options = TCP_NODELAY IPTOS_LOWDELAY ldap ssl = no oplocks = no Assume that this is all I have setup so far, what next? In the email below, it mentions winbind? Can I dowload that for AIX 5.3, does this come with the OS (if so do I have to install it from a particular module). I only care about AIX since that is where my SAMBA is running. Next, in the article below I see all this talk about Kerbos, do I need that? I was under the impression that samba had Kerbos compiled into its executable. Am I mistaken. Basically, what I am looking for is a step by step instrucution or detailed documentaiton on how to get this to work on AIX. Thanks to all who answer. Date: Mon, 8 Jun 2009 12:17:29 -0500 From: d...@briannassaladdressing.com To: beefstu...@hotmail.com CC: samba@lists.samba.org Subject: Re: [Samba] password authentification You will need winbind. Easy to understand 2-part howto for linux/AD following: http://www.enterprisenetworkingplanet.com/netos/article.php/3487081 http://www.enterprisenetworkingplanet.com/netos/article.php/10951_3502441_1 Choose the idmap backend that works for you. I'm partial to RID. http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/idmapper.html And SWAT is a good way to fine-tune your setup. There are links to each parameter and what each of them does (if Samba docs are installed). Good luck, Dale BeefStu BeefStu wrote: Ed, Thanks, but I have a few more questions. I took a working example of a smb.conf from another machine and placed this into my smb.cnf (see below in red). This is the only thing I did on the UNIX end. To use AD for password verification, I will follow your directions below, but is there anything else I need to do on the UNIX end? What I am trying to say, is how will samba get the password now if there is no password file. I know it will get it from AD, but can you take me through step by step as to what happens. Lets assume I want to map a drive. By doing a join does samba actually go into AD with my login (it must be cached some how right) and look up my password? Current working version [global] workgroup = hshhp server string = Samba 3.0.4.0 smb passwd file = /var/samba/private/smbpasswd log file = /usr/local/samba/var/log.%m mangle case = Yes New version [global] workgroup = hshhp security = DOMAIN auth methods = ntdomain password server = ttndc3 max xmit = 65535 socket options = TCP_NODELAY IPTOS_LOWDELAY ldap ssl = no oplocks = No For example, I see things like this (see below) do I need all this? The smbpasswd File For security reasons we will place the smbpasswd file in a private directory using the following commands: cd /etc/samba mkdir private cd private touch smbpasswd chmod 600 smbpasswd cd .. chmod 500 private Now we will add a dummy entry to the smbpasswd file. To do this, first create a user account for yourself on the Linux server [unless one already exists], then execute the following commands: cd /etc/samba/private cat /etc/passwd | mksmbpasswd.sh
Re: Antwort: Re: [Samba] Samba 3.3.4 Umlaut in Share comment
Christian Perrier wrote: Quoting Howard Allison (howard.alli...@pva.sozvers.at): How is the smb.conf file encoded? Is it UTF-8 or ISO-8859-1? -- I assume ISO8859-1(In the smitty 'convert flat file' menu UTF-8 isn't an option for the target - there are a few issues with the utf-8 packages for AIX 6... they don't seem to exist... In any case it's the same smb.conf that worked in 3.0.32...with umlauts... IIRC, full Unicode-only internal handling on strings has only been completed in 3.2 (samba developers would probably better confirm this than me) so it wouldn't be surprising that it doesn't work anymore. You really should convert that file to UTF-8: iconv -f iso-8859-1 -t utf-8 smb.conf smb.conf.new Hopefully, AIX 6 has iconv..:-)...otherwise you need to edit the file on an UTF-8 enabled system (any recent Linux distro is probably well suited). It does, but the AIX iconv is deficient (and has been for some time). You will likely need GNU libiconv (1.11 or higher - 1.13 is now available). You can also download the AIX binaries from my site. :-) Just follow the Binaries link from the Samba site. Cheers, Bill at worst, just try replacing the umlauts with ASCII characters, just to see (of course that will lead to Ugly German...). -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Conncetion Problem on XP client against Samba 3.2.8 on AIX 5.3.9
Original message Date: Mon, 16 Feb 2009 13:21:40 +0100 From: Arendt, Volker are...@wiwi.uni-wuppertal.de Subject: [Samba] Conncetion Problem on XP client against Samba 3.2.8 on AIX 5.3.9 To: samba@lists.samba.org Cc: Nölle, Christian noe...@wiwi.uni-wuppertal.de Hi everyone, we have a funny problem connection from an XP machine to a 3.2.8 server. The level 10 log is copied in. Please look at the end of the log entries. Has anybody seen that kind of message?! Volker, What is the error you are receiving? The log is inconclusive. Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.2.7 - Lost the abiltity to manage domain using user manager for domains
Original message Date: Fri, 23 Jan 2009 14:54:16 -0430 From: Victor Medina victor.med...@bws.com.ve Subject: [Samba] Samba 3.2.7 - Lost the abiltity to manage domain using user manager for domains To: samba samba@lists.samba.org Guys After upgrading my Samba setup, full ldap, 3.0.33 (binaries from sernet - sles9 and sles10) I have lost the ability to manage the domain using User Manager for Domains 1.- i can set account policies 2.- i cannot access user account information (for example to unlock an account, change passoword) It was perfectly working befor upgrading, it also used to work for 3.2.4, same setup, same smb.conf, same ldap config Has anybody had this problem before? Am I the only one with this issue? This sounds like the bug Jeremy recenly fixed for usermgr.exe non-root issues and unable to join domain as non-root user. I applied a manual patch from that thread (found in git) and it worked perfectly. It was literally one line of code that changed. http://lists.samba.org/archive/samba/2008-December/145364.html Cheers, Bill Victor Medina -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Listing shared printers
Original message Date: Mon, 22 Dec 2008 13:52:48 +0100 From: L.P.H. van Belle be...@bazuin.nl Subject: RE: [Samba] Listing shared printers To: 'Tom Van Deun' tomvd...@gmail.com Cc: samba@lists.samba.org This well be hard to find. I think best way is to download samba and compile it on your AIX to my knowlidge there is no such tool or other code to display windows shares on AIX besides smbclient, and please someone correct me if im wrong. so my guest is the first email i send you, thats one which will work if you compile samba. thats not that hard.. You can download the latest Samba code for AIX from: http://pware.hvcc.edu/ Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] problem regarding samba
Original message Date: Fri, 12 Dec 2008 12:53:50 +0100 From: Volker Lendecke volker.lende...@sernet.de Subject: Re: [Samba] problem regarding samba To: heena kaushik heenakaus...@bharatpetroleum.in Cc: samba@lists.samba.org samba@lists.samba.org On Fri, Dec 12, 2008 at 04:39:04PM +0530, heena kaushik wrote: Hi all I have installed samba in my UNIX server 5.2.But I am facing problem both in running swat and starting the samba daemons. When I type http:/localhost:901 in IE it gives the following error exec(): 0509-036 Cannot load program swat because of the following errors: 0509-150 Dependent module libtalloc.so could not be loaded. 0509-022 Cannot load module libtalloc.so. 0509-026 System error: A file or directory in the path name does not exist. You should do an export LD_LIBRARY_PATH=directory-where-libtalloc-lives Unless this is AIX, which it sounds like it is, and probably running the prebuilt pWare code. :-) Is this the case, Heena? Cheers, Bill Volker application.pgp-signature (1k bytes) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Stable Samba for AIX5.1
Original message Date: Fri, 5 Dec 2008 06:21:06 +0100 From: Urs Golla [EMAIL PROTECTED] Subject: Re: [Samba] Stable Samba for AIX5.1 To: William Jojo [EMAIL PROTECTED] Cc: Ray, Tito [EMAIL PROTECTED],samba@lists.samba.org You could be right about that... But it is worth going to 5.3 anyway. particularly if you plan to use group names with more than 9 (8+'\n') characters. The base pware code was compiled on 5.2 and the pware53 code was compiled on 5.3. They likely won't run on 5.1 due to missing symbols in /unix and other libraries. Also, long usernames were not supported in 5.3 until TL-07 and are supported completely in 6.1. For the record, AIX 4.3.3 was dropped in 12/2003, 5.1 was dropped in 4/2006 and 5.2 will be dropped by IBM in 4/2009. That leaves 5.3 and 6.1 as the only real viable choces. If IBM follows the three year cycle implied by the above, this means 5.3 will likely be dropped in 2012, but I've seen no such official announcement of any kind. I know this didn't really help, just meant to clarify... Cheers, Bill On Fri, Dec 5, 2008 at 1:51 AM, William Jojo [EMAIL PROTECTED] wrote: Original message Date: Thu, 4 Dec 2008 17:44:05 +0100 From: Urs Golla [EMAIL PROTECTED] Subject: Re: [Samba] Stable Samba for AIX5.1 To: Ray, Tito [EMAIL PROTECTED] Cc: samba@lists.samba.org Hi I use pware.samba-3.0.23d on AIX 5.3. It works very well for me and I am almost sure I have used it already on 5.1. Hmmm, I do not think that will run on 5.1. The latest stable code for AIX 5.3/6.1 is at: http://pware.hvcc.edu/ Cheers, Bill cheers On Wed, Dec 3, 2008 at 2:58 AM, Ray, Tito [EMAIL PROTECTED] wrote: Hello, I need to upgrade Samba 2.2.2 to a stable Samba version compatible with AIX5.1 . Need to know the samba version I need to download and apply. Tito -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Stable Samba for AIX5.1
Original message Date: Thu, 4 Dec 2008 17:44:05 +0100 From: Urs Golla [EMAIL PROTECTED] Subject: Re: [Samba] Stable Samba for AIX5.1 To: Ray, Tito [EMAIL PROTECTED] Cc: samba@lists.samba.org Hi I use pware.samba-3.0.23d on AIX 5.3. It works very well for me and I am almost sure I have used it already on 5.1. Hmmm, I do not think that will run on 5.1. The latest stable code for AIX 5.3/6.1 is at: http://pware.hvcc.edu/ Cheers, Bill cheers On Wed, Dec 3, 2008 at 2:58 AM, Ray, Tito [EMAIL PROTECTED] wrote: Hello, I need to upgrade Samba 2.2.2 to a stable Samba version compatible with AIX5.1 . Need to know the samba version I need to download and apply. Tito -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.2, Samba 3.3 release planning
Original message Date: Wed, 22 Oct 2008 10:12:45 -0700 From: Jeremy Allison [EMAIL PROTECTED] Subject: Re: [Samba] Samba 3.2, Samba 3.3 release planning To: Christian Perrier [EMAIL PROTECTED] Cc: samba@lists.samba.org,[EMAIL PROTECTED] On Wed, Oct 22, 2008 at 06:35:50PM +0200, Christian Perrier wrote: Quoting Michael Adam ([EMAIL PROTECTED]): If I am not completely wrong, this had been decided as well as follows: A release will reach EOL when the next release goes into maintenance mode, i.e. when the second next release comes out. With the aimed release cycle of 6 months, this means that each release will go into maintenance mode after 6 months and reach EOL anonther 6 months later. Example: 3.2 will go into maintenance mode in december 2008, when 3.3 is scheduled for release, and 3.2 will reach EOL around June 2009 (?) when 3.4 is scheduled. At least that is what Karolin had proposed and as far as I remember at least noone had objected. (Time will tell if the workload is manageable with such a tight release cycle.) have you folks settled on a security support maintenance window, i.e. having some kind of commitment to try supporting security patches for releases that are no longer in maintenance mode. You see where I'm going, I think: what will happen if security issues are discovered after June 2009 ? Is there a chance that, at least in a best effort mode, some patches are provided for 3.2.* series? Yes, I think it's reasonable to provide security patches for a year after release, and I'll commit (personally) to doing that. Thanks Jeremy. And, of course, thanks to Karolin, Jerry and the rest of the Samba team. I think I will attempt a parallel 3.2, 3.3 release for those who are not ready to make a jump right away to a new relase. Many thanks too all! Cheers, Bill Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.2, Samba 3.3 release planning
Original message Date: Tue, 21 Oct 2008 13:46:14 -0500 From: Gerald (Jerry) Carter [EMAIL PROTECTED] Subject: Re: [Samba] Samba 3.2, Samba 3.3 release planning To: Andreas Ladanyi [EMAIL PROTECTED] Cc: samba@lists.samba.org -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andreas Ladanyi wrote: Is samba 3.2 development stopped and all concentration given to Samba 3.3 ? Because there isnt any further release note available for 3.2, but instead there are some notes for 3.3 ? Any future Samba 3.2.x release will be bug fix releases only. New develeopment is on-going in the 3.3 branch which is due for release mid-december. I love that releases are moving very quickly now. My only concern is keeping up with and determining what is appropriate as I continue to maintain AIX binaries on my web page. Presently I have already dropped the 3.0 series and have 3.2.4 available with the clustering option for AIX 5.3 and 6.1. I am trying to determine how best to support a 3.2 and 3.3 parallel set or if I should just drop 3.2 after 3.3.1 is released or some other arbitrary schedule. :-) :-) How long after 3.3 is released to production does the Samba team anticipate supporting the 3.2 line? Much appreciation and thanks to all on the Team! Cheers, Bill cheers, jerry - -- = Samba--- http://www.samba.org Likewise Software - http://www.likewisesoftware.com What man is a man who does not make the world better? --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFI/iN2IR7qMdg1EfYRAinOAJ9XqGIi8selGvRTrPAfTumNJxTupwCgwn1K +6VSHinH8qJkRl9/FnlxURA= =+eBo -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Question about Samba connections for 3.0 and 3.2
What typically causes the following in the log? [2008/09/25 09:07:14, 0] smbd/server.c:open_sockets_smbd(527) open_sockets_smbd: accept: Software caused connection abort -- I know that these are created due to accepting connections on both 445 and 139: [2008/09/25 09:07:24, 0] lib/util_sock.c:get_peer_addr(1232) getpeername failed. Error was Socket is not connected [2008/09/25 09:07:24, 0] lib/util_sock.c:write_data(562) write_data: write failure in writing to client 151.103.29.248. Error Broken pipe [2008/09/25 09:07:24, 0] lib/util_sock.c:send_smb(769) Error writing 4 bytes to client. -1. (Broken pipe) The 445 is answered first by Samba, Windows closes the 139 connection and Samba then tries to reply to the client on the 139 connection which is no longer connected. Is this correct? Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] (no subject)
Original message Date: Tue, 23 Sep 2008 11:39:25 +1000 From: Ray, Tito [EMAIL PROTECTED] Subject: [Samba] (no subject) To: samba@lists.samba.org Hello, I am using samba 2.2.2 in AIX 5.1 environment and planning to upgrade to a more stable samba. 1. Which version is most stable? 2. Do I need to pay for the Licence? 3. How can I upgrade? Are you planning to upgrade to a supported AIX level? You can go to: http://pware.hvcc.edu/ For latest Samba for AIX 5.2, 5.3 and 6.1 releases. Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Printer driver problem in 3.0.28/31
This occurs with Samba downloaded drivers of an installed printer. When attempting to view the printer properties you receive the following error: “Function address 0x2d04193 caused a protection fault. (exception code 0xc005) Some or all property page(s) may not be displayed.” Followed by: “The ‘drivername’ printer driver is not installed on this computer. Some printer properties will not be accessible unless you install the printer driver. Do you want to install the driver now?” This occurs with the following drivers, all version 61.074.561.43 (5/21/08): HP LaserJet 5200 PCL5e HP LaserJet 5200 PCL6 HP LaserJet 5200 PostScript Anyone see this before? Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] LDAP user search request includes domain
Original message Date: Fri, 19 Sep 2008 07:34:39 +0200 From: Howard Allison [EMAIL PROTECTED] Subject: [Samba] LDAP user search request includes domain To: samba@lists.samba.org Hi, I'm running a Samba 3.0.32 server on AIX 6.1, AIX is authorizing with secldapclntd to an OpenLDAP Server. The Clients are coming from a Windows 2003 Terminal Server Thin Client session, logged in to the domain. I see in the logs that secldapclntd tries 3 times to authorize using DOMAIN\USER as identification, and then finally uses USER(which works). Is this Samba behavior, or AIX? Is there any way to convince Samba that he should use just the User name for File Access? Thanks Have you looked at winbind use default domain ? Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba AD support on Solaris and AIX
Original message Date: Sun, 03 Feb 2008 13:25:44 -0500 From: Ryan Novosielski [EMAIL PROTECTED] Subject: Re: [Samba] Samba AD support on Solaris and AIX To: Wei Hu [EMAIL PROTECTED] Cc: samba@lists.samba.org samba@lists.samba.org -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Take a look at the blastwave.org packages. They're likely newer anyway. AIX? No idea. They are on the Samba site in the Binaries section. They are also available at: http://pware.hvcc.edu/ Cheers, Bill Wei Hu wrote: Hello, I just found out that the binary Samba Solaris packages on samba.org were not built with AD support. Do you know any reason why? Do you know where I can find binary Samba packages supporting AD on Solaris? Also although not mentioned, I suspect the Samba package for AIX on samba.org was not built with AD support either. Anybody can confirm this? The same question as where I can find AD supported Samba binary for AIX. I am looking for binary Sambas which are available to public to download. I am interesting in setting up Samba on Solaris and AIX to work with Microsoft Active Directory. Building from source is not an option for me. Thanks very much, Wei - -- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Systems Programmer II |$| |__| | | |__/ | \| _| |[EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHpgcomb+gadEcsb4RAqEuAJwJjdUTuP9vbdWhAsuG2O58s/KavACgxFiw xD/7Qf90d6CdCv6bWDpe+sE= =fEYf -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Binaries for AIX 5.1
Original message Date: Fri, 26 Oct 2007 11:27:29 +0200 From: Dominique Rousseau [EMAIL PROTECTED] Subject: [Samba] Binaries for AIX 5.1 To: samba@lists.samba.org Hi, I'm looking for binaries of Samba 3 for AIX 5.1 The ones availables on Samba's FTP ( http://us3.samba.org/samba/ftp/Binary_Packages/AIX/ ) are given for AIX 5.2 or 5.3 (what is said in the README) That is correct, Dominique. I have been asked in the past for 4.3 and 5.1 versions, but alas, I no longer have CD's for those versions. These are also unsupported versions except through arrangement with IBM. AIX 5.1 reached end-of-service in April, 2006. When IBM drops support on for 5.2 on April 2009, I will likely not update the libs and just put out Samba updates until some as of yet unannounced date. Most of the development I am doing is on 5.3 with knowledge that 6.1 is about to be released. I found references to 3.0.21 packages (like in this message http://lists.samba.org/archive/samba/2006-January/116792.html ) that had existed, but this one is no longer avaible :( So, do somebody have Samba 3.0.x binaries that can run on AIX 5.1 (with the kerberos, ldap, stuff, it will have to interoperate with an AD) *IF* I can get my hands on a set of 5.1 CD's and *IF* I can manage a decent gcc build on that platform, I'll see what I can manage. No promises. :-) Otherwise, I would really consider moving to at least 5.2 and patch it here http://www14.software.ibm.com/webapp/set2/sas/f/genunix3/aixfixes.html and then download the binaries at the Samba site and visit my site for other goodies at http://pware.hvcc.edu Cheers, Bill Thanks in advance :) Dominique -- Dominique Rousseau Neuronnexion, Prestataire Internet Intranet 57, route de Paris 8 Amiens tel: 03 22 71 61 90 - fax: 03 22 71 61 99 - http://www.neuronnexion.fr -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] MIT-Kerberos-1.4.4. (where can i download)
Original message Date: Mon, 18 Jun 2007 11:37:57 +0100 From: Christian Bohlmann [EMAIL PROTECTED] Subject: [Samba] MIT-Kerberos-1.4.4. (where can i download) To: samba@lists.samba.org Hi there, i d like to install samba-3.0.25a on AIX 5.3. This Version some how depends on MIT-Kerberos-1.4.4. Does anybody know where i can download this Kerberosversion as a bff-Datei? You need to grab the opt-samba-base* package as well. That package contains the dependencies you seek and is only update about once or twice a year (I have a new bundle I'm trying to get ready for 3.0.26). You should be ready to go after that. Cheers, Bill Christian Bohlmann -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind AIX
It's in /opt/pware/samba/3.0.25a/lib/security. Copy it to /usr/lib/security: cp -p /opt/pware/samba/3.0.25a/lib/security/WINBIND /usr/lib/security Then edit the /usr/lib/security/methods.cfg and add modify the SYSTEM attribute for the default: stanza in /etc/security/user. Cheers, Bill Original message Date: Fri, 15 Jun 2007 23:23:03 +0100 From: Info [EMAIL PROTECTED] Subject: [Samba] winbind AIX To: samba@lists.samba.org I have installed Samba (from Binary) 3.0.25a on AIX 5.3 I'm trying to configure Winbind I believe I need to copy winbind file to /usr/lib/security and modify usr/lib/security/methods.cfg with ;- add WINBIND: programs=/usr/lib/security/WINBIND. nmbd, smbd and winbindd all running My problem is I cannot find a file called winbind on my system ? Any help appreciated Selwyn -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba 3.0.2a on Aix 5.2
Original message Date: Fri, 25 May 2007 11:33:33 -0500 From: Dan Pecina [EMAIL PROTECTED] Subject: [Samba] samba 3.0.2a on Aix 5.2 To: samba@lists.samba.org We have samba 3.0.2a running on Aix 5.1. We will be going to AIX 5.2. Trying to find out if Samba 3.0.2a is compatible with AIX 5.2. It should be binary compatible. Cheers, Bill Thank You! Dan Pecina Unix Administrator/Operations Supervisor John B. Sanfilippo Son, Inc. (847) 214-4621 [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: R: [Samba] Fwd: SAMBA on AIX -- nsswitch.conf?
Original message Date: Mon, 14 May 2007 10:34:32 +0200 From: Urs Golla [EMAIL PROTECTED] Subject: Re: R: [Samba] Fwd: SAMBA on AIX -- nsswitch.conf? To: Gianluca Culot [EMAIL PROTECTED] Cc: samba@lists.samba.org nsswitch.conf does not exist on AIX! It works after changing /etc/security/user and copying WINBIND etc... Correct. There is no nsswitch.conf. You edit /etc/security/user default stanza with: SYSTEM=WINBIND registry=WINBIND NEVER change the root entry. You'll always want root to be local in case winbindd is non-responsive or have network problems. I changed the idmap uid range in my smb.conf and if I now remove the winbindd_cache.tdb and winbindd_idmap.tdb (+ restart winbind samba) it says sid2uid returned an error in the winbind logfile... wbinfo -i username does also not work anymore... any idea? The uid ranges should be set before you go production. These mappings are local to your AIX machine and represent local uid /gid mappings to remote SID values. Therefore, whenever you create objects on the local server via WINBIND based ids, they will have the uid/gid values assinged and stored in the winbind_idmap.tdb. These values are used to map back to SIDs on the remote host to determine access rights and such. When you deleted your tdb, you deleted your map. Once in place and in production, guard this file as if it were your child. It's contents are precious and should be carried forward when performing upgrades. Cheers, Bill thanks a lot! On 5/14/07, Gianluca Culot [EMAIL PROTECTED] wrote: -Messaggio originale- Da: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] conto di Urs Golla Inviato: domenica 13 maggio 2007 10.35 A: samba@lists.samba.org Oggetto: [Samba] Fwd: SAMBA on AIX -- nsswitch.conf? it works if i create the user xy on AIX. any ideas? -- Forwarded message -- From: Urs Golla [EMAIL PROTECTED] Date: May 13, 2007 9:26 AM Subject: SAMBA on AIX -- nsswitch.conf? To: samba@lists.samba.org Hi I am still trying to run SAMBA on AIX with security = ads and I have a few questions: - on AIX is no such file as /etc/nsswitch.conf -- Do I have to add the configuration somewhere else? - I allways get this User xy is invalid on this system if try to map a share from Windows. What does this mean? Is the user invalid on the Domain? on AIX? on SAMBA? Is the User known by SAMBA but has no access rights on this share? - Has security = ads on AIX ever been tested? Any help would be appreciated!!! cheers -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba Don't think it depends on system... I think you are missing parts in Samab configuration if nsswitch doesn't exist... create it here is mine. passwd: files winbind shadow: files winbind group: files winbind #hosts: db files nisplus nis dns #hosts: files dns wins hosts: files dns # Example - obey only what nisplus tells us... #services: nisplus [NOTFOUND=return] files #networks: nisplus [NOTFOUND=return] files #protocols: nisplus [NOTFOUND=return] files #rpc: nisplus [NOTFOUND=return] files #ethers: nisplus [NOTFOUND=return] files #netmasks: nisplus [NOTFOUND=return] files bootparams: nisplus [NOTFOUND=return] files ethers: db files netmasks: files networks: files dns protocols: db files rpc: files services: files netgroup: files publickey: nisplus automount: files aliases: files nisplus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] cannot start smbd on AIX 5.3
Ben, Original message Date: Wed, 2 May 2007 16:11:18 -0700 From: BURRUEL, BENJAMIN D \(ATTSI\) [EMAIL PROTECTED] Subject: [Samba] cannot start smbd on AIX 5.3 To: samba@lists.samba.org Help please. I am in the process of configuring Samba 3.0.14a onto 4 AIX 5.3 systems. It seems to be working OK on 3 of the 4, but on the last one, I cannot start smbd. nmbd seems to start fine. The smb.conf file matches the other servers except that the server name is changed. Here's the error showing up on the log.smbd file. [2007/05/02 15:19:47, 0] smbd/server.c:main(835) standard input is not a socket, assuming -D option [2007/05/02 15:19:47, 0] lib/util_sock.c:open_socket_in(708) bind failed on port 139 socket_addr = 0.0.0.0. Error = Address already in use I'm hoping someone with network experience has seen this kind of error and can point me in the right direction to resolve. I did a netstat -a | grep 139 but didn't see anything using port 139. 139 is in /etc/services as netbios-ssn. Try adding the -n switch to search for 139. Also, 3.0.14a is rather old. You may want to consider getting binaries from: http://us4.samba.org/samba/ftp/Binary_Packages/AIX/ Cheers, Bill Ben Burruel Sr. Systems Manager Metrics Mainframe Capacity Planning San Diego (858) 886-3363 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] What version of Samba will work with an AIX version of Unix?
Original message Date: Tue, 1 May 2007 15:13:44 +0100 From: Mark Blake-Smith [EMAIL PROTECTED] Subject: [Samba] What version of Samba will work with an AIX version of Unix? To: samba@lists.samba.org Hi all We are currently looking to implement a scenario where our AIX Unix Server and Windows Server can communicate with each other using a version of Samba. You could try here: http://us4.samba.org/samba/ftp/Binary_Packages/AIX/ Cheers, Bill Kind Regards Mark -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Help with SWAT
Original message Date: Wed, 25 Apr 2007 14:18:55 -0400 From: Weinmann, Robert [EMAIL PROTECTED] Subject: [Samba] Help with SWAT To: 'samba@lists.samba.org' samba@lists.samba.org Hello all, I just installed 3.0.24 in AIX5.3 using installp binaries. The install went well, and I can connect to shared directories from Windows. When I try to log in to the SWAT tool, it does not accept the password of any userid that I try with, including root. I don't recall having to do anything special to use SWAT on my older servers running SAMBA 2.2.8. Ok, if it's not working, go here to get 3.0.24 (keep the base code you have): ftp://ftp.hvcc.edu/pub/pware/aix52/pware.samba-3.0.24.3.0.24.0.bff There must still be a PAM version floating around somewhere Cheers, Bill I have added the following line to /etc/inetd.conf, and refreshed inetd. swatstream tcp nowait root/opt/pware/samba/3.0.24/sbin/swat swat I have added the following line to /etc/services. swat 901/tcp Do I need to do any additional security configuration to use SWAT? Thanks, Bob -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba sessions
Original message Date: Tue, 17 Apr 2007 10:58:13 -0400 From: Wagg, Dave [EMAIL PROTECTED] Subject: [Samba] Samba sessions To: Samba user group samba@lists.samba.org Hi, We have implemented a new AIX 5.3, P55A using Samba...we have about 70 users online most of the day. We assign a particular Samba share to everyone when they login so it shows up in their Windows Explorer. Is it standard that we see so many smbd processes running when I do a ps -ef? Here is a portion of the output below. We have been experiencing lag at times during the day, we are trying to look all options, like network issues, circuits, routers etc. I was wondering if this was the norm for Samba. Sorry for the email being so big.: root 626706 114874 0 08:27:10 - 0:00 /opt/freeware/sbin/smbd -D /opt/freeware? This sounds like Linux Application pack code. There is also no version listed. Have you tried the AIX binaries? Use the following links: http://us1.samba.org/samba/ftp/Binary_Packages/AIX/README http://us1.samba.org/samba/ftp/Binary_Packages/AIX/opt-samba-base.tar.gz ftp://ftp.hvcc.edu/pub/pware/aix52/pware.samba-3.0.24.3.0.24.0.bff (The last link is the repaired non-PAM binary). Follow the directions in the README and let me know how you get on. Cheers, Bill Thanks Dave -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] probleme d'installation de samba sur AIX 5.3 et accés LDAP
Original message Date: Wed, 21 Mar 2007 11:54:08 +0100 From: [EMAIL PROTECTED] Subject: [Samba] probleme d'installation de samba sur AIX 5.3 et accés LDAP To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED], [EMAIL PROTECTED] good morning, We belong to PSA Peugeot Citroen Company and we need to install SAMBA on OS AIX5.3 with LDAP access. We download the SAMBA binaries 3.0.21 but in this version, we could not find the libraries for LDAP ACCESS. Could you tell us , if we have to download another version or where we can find the library for version 3.0.21. Further more , do you know if we can find a french company providing support on Samba. Where did you get this distro from? You can get the BASE code from: http://us1.samba.org/samba/ftp/Binary_Packages/AIX/ And the correct version of 3.0.24 from: ftp://ftp.hvcc.edu/pub/pware/aix52/ I hate sending you to two places, but the 3.0.24 on the Samba site is the wrong one... Cheers, Bill Thank you for your help Françoise Sportiche Resp Accompagnement Méthodes et Techniques de Développement DSIN/SISF/MOET Tel : 01 40 66 51 67 [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.24 on AIX
Original message Date: Tue, 27 Mar 2007 12:31:16 -0500 From: Hillel Seltzer [EMAIL PROTECTED] Subject: Re: [Samba] Samba 3.0.24 on AIX To: samba@lists.samba.org That was it? Cool, it works now! Thanks for fixing it. See previous posts on Swat not working with root on AIX. There is still one issue with the pware samba distribution. To use the samba programs and utilities, the library files sitting in /opt/pware/lib are required to be in the LIBPATH ahead of any directories that might have libraries with the same names. However, setting the LIBPATH environment variable as such messes with just about everything else outside of samba (or, more accurately, outside of pware provided packages). If you check the README, there should be a section that says you should unset LIBPATH prior to running the software and this will force the software to use the libraries and paths embedded in the executable. For running smbd, nmbd, winbindd, and swat, I wrote a short script in /opt/pware/sbin that just sets PATH and LIBPATH evironment variables and then runs the corresponding program with all the desired arguments. I then set this script as the startup for nmbd and smbd in the AIX system resource controller and for swat in inetd.conf. This gets around the environment problem of having to start or restart the daemon processes or swat. However, any user on an AIX terminal window who sets the environment to use the samba command line utilities cannot do anything else in that terminal window. Agreed. Your script should simply unset LIBPATH and launch the software with fully qualified paths. Then you should not need to alter /etc/profile, /etc/environment or any other file. :-) Cheers, Bill ---Hillel On Tue, 27 Mar 2007 10:07:26 -0400 (EDT), William Jojo wrote Yeah, that's my bad. Please go to ftp://ftp.hvcc.edu/pub/pware/aix52 And download 3.0.24 from there. I put the PAM version on the Samba site by mistake. I'll get a new one to Jerry today to move to the download site. Apologies for the screw up... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.24 on AIX
Original message Date: Tue, 27 Mar 2007 16:26:55 -0500 From: Hillel Seltzer [EMAIL PROTECTED] Subject: Re: [Samba] Samba 3.0.24 on AIX To: samba@lists.samba.org Cc: William Jojo [EMAIL PROTECTED] OK. I tried it with unset LIBPATH and it works. However, AFAICT it is not mentioned anywhere in the README on the samba.org AIX binary web page or in any README file that came with the pware samba packages. Hey! You're right! I'll fix that for the next release. Thanks a lot! Cheers, Bill Thanks. ---Hillel On Tue, 27 Mar 2007 15:09:55 -0400 (EDT), William Jojo wrote If you check the README, there should be a section that says you should unset LIBPATH prior to running the software and this will force the software to use the libraries and paths embedded in the executable. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Software for AIX available [WAS: AIX Testers Needed].
ftp://ftp.hvcc.edu/pub/pware/aix52/ The ftp site above contains IBM installp format packages that install into /opt/pware so it doesn't interfere with existing /usr/local installations. A few packages (BDB, MySQL, Apache and Samba) can have several versions installed concurrently, others are replaced on upgrade. Some packages of interest include GCC 4.1.1, Apache 2.0.59 with PHP 5.2.0 [which includes support for MS-SQL (via freeTDS), MySQL, Oracle (via the Oracle Instant Client), XML, etc.], Ruby, Python, Freeradius and Amanda. Many thanks to those who have tested these packages and provided feedback to improve the quality. Thanks also to Jerry Carter for supporting this form of packaging for the AIX Samba binaries. This software has been tested on AIX 5.2 (TL-08 and higher) and AIX 5.3 (TL-04 and higher). It has also been tested on full system, LPAR and Virtual I/O Client configurations. Be sure to read the README and TO-DO files and provide any feedback, suggestions for software or if you wish to participate in maintenance. Enjoy! Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.23c PANIC with LDAP
Marcin, Can you look at BUG #4063? Let me know if that temporary patch helps you. I'm having great joy in porting a replacement strptime to replace those that want spaces in parsing, but I'm not done yet. Please let me know it this fixes your problem (at least temporarily). Cheers, Bill - Original Message - From: Marcin Giedz [EMAIL PROTECTED] To: samba samba@lists.samba.org Sent: Wednesday, November 15, 2006 12:53 AM Subject: Re: [Samba] Samba 3.0.23c PANIC with LDAP Luis Daniel Lucio Quiroz napisał(a): I think you should recompile openldap (first) and then samba. On RPMs based systems, when I update one, I update other for dependencies. First of all, I compiled LDAP first and then Samba. I even showed samba to use my ldap (/opt/ldap) rather then system ldap (/usr/lib/). So in my opinion there is nothing to recompile I'm afraid. Marcin Regards, LD Le mardi 14 novembre 2006 03:51, Marcin Giedz a écrit : Hello again, Here is description of my first problem I encountered during setting up samba 3.0.23c and LDAP 2.3.28. Linux box is one of intel server platforms and debian etch (unstable) on board. Debian has its own ldap libraries in /usr/ldap and there are more then one but with different version ldap files. Despite of these I always compile almost everything from sources so this time I tried ldap-2.3.28. I compiled it, installed in opt/ldap, populated and run. So far so good. Next I started compiling samba 3.0.23c but theres is no switch to pass LDAP directory so I simply exported CPPFLAGS and LDFLAGS so samba can find ldap.h and appropriate libraries. Done OK. Next I checked samba's libs with ldd to be sure that there are linked to good ldap libraries. So I run samba. First attempt to authorize and PANIC: [2006/11/13 11:23:10, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2006/11/13 11:23:10, 3] smbd/server.c:exit_server(655) Server exit (normal exit) [2006/11/13 11:23:10, 0] lib/fault.c:fault_report(36) === [2006/11/13 11:23:10, 0] lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 27144 (3.0.22) Please read the Trouble-Shooting section of the Samba3-HOWTO [2006/11/13 11:23:10, 0] lib/fault.c:fault_report(39) From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf [2006/11/13 11:23:10, 0] lib/fault.c:fault_report(40) === [2006/11/13 11:23:10, 0] lib/util.c:smb_panic2(1554) PANIC: internal error [2006/11/13 11:23:10, 0] lib/util.c:smb_panic2(1562) BACKTRACE: 13 stack frames: #0 /opt/samba-3.0.22/sbin/smbd(smb_panic2+0x1ac) [0x7572b13d] #1 /opt/samba-3.0.22/sbin/smbd(smb_panic+0x19) [0x7572b21d] #2 /opt/samba-3.0.22/sbin/smbd [0x75716d03] #3 [0xe420] #4 /usr/lib/libldap_r.so.2 [0xa7b1ecf1] #5 /usr/lib/libldap_r.so.2 [0xa7b05190] #6 /usr/lib/libldap_r.so.2 [0xa7b2b4ba] #7 /lib/ld-linux.so.2 [0xa7f4eede] #8 /lib/tls/libc.so.6(exit+0xd0) [0xa7da24f0] #9 /opt/samba-3.0.22/sbin/smbd [0x757b1f12] #10 /opt/samba-3.0.22/sbin/smbd(main+0x1633) [0x757b38c3] #11 /lib/tls/libc.so.6(__libc_start_main+0xc8) [0xa7d8bea8] #12 /opt/samba-3.0.22/sbin/smbd [0x755904e1] [2006/11/13 11:23:10, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/11/13 11:23:10, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/11/13 11:23:10, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/11/13 11:23:10, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 Why /usr/lib/libldap_2.so.2 in this log??? Hmmm it was strange, but I compiled samba with debug mode but it was too much helpfull or maybe I did something wrong: 1) compile with --enable-debug --enable-developer 2) run: gdb ; attach PID; bt; - NOTHING - much less than in samba log file. ...so I can't provide this time more maybe you can help me what to do with this gdb and backtrace to get more details? Anyway I found workaround I simply changed link /usr/lib/libldap_r.so.2 to point to /opt/ldap/lib/libldap - now it works. But it doesn't really explain why samba uses libldap_2 from /usr/lib/ since I've switched to /opt/ldap/??? Regards, Marcin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba 3.0.23c and libiconv on AIX 5.3
- Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, October 06, 2006 8:24 AM Subject: Samba 3.0.23c and libiconv on AIX 5.3 Hello, I Installed your packages to new AIX 5.3 TL 5 server from: http://us3.samba.org/samba/ftp/Binary_Packages/AIX/ gunzip opt-samba-base.tar.gz opt-samba-3.0.23c-AIX5.tar.gz When I start nmbd I get the following mewssage: # /opt/pware/samba/3.0.23c/sbin/nmbd -D exec(): 0509-036 Cannot load program /opt/pware/samba/3.0.23c/sbin/nmbd because of the following errors: 0509-150 Dependent module /usr/lib/libiconv.a(libiconv.so.2) could not be loaded. 0509-152 Member libiconv.so.2 is not found in archive Ahh the joy of LIBPATHAs the root user, before you start the samba daemons, type: unset LIBAPTH You should be fine after that...maybe even script this for the future... Cheers, Bill Libconf files are here: # find /opt -name libiconv* -print /opt/pware/lib/libiconv.a /opt/pware/lib/libiconv.la /opt/pware/share/doc/libiconv How to define Samba to look up /opt/pware/lib directory I do not want to replace AIX original /usr/lib/libiconv.a Best regards, Jorma Heikkuri -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: AIX Testers Needed.
- Original Message - From: Stefan (metze) Metzmacher [EMAIL PROTECTED] To: Carlos Eduardo Pedroza Santiviago [EMAIL PROTECTED] Cc: William Jojo [EMAIL PROTECTED]; samba@lists.samba.org; samba-technical@lists.samba.org Sent: Thursday, September 28, 2006 8:31 AM Subject: Re: AIX Testers Needed. -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Carlos Eduardo Pedroza Santiviago schrieb: Hi, What I'd like to do instead is make as much of the package dependant upon shared libs and to allow for completeness of the package. In other words, BDB, OpenSSL, OpenLDAP, SASL, KRB5, libiconv and gcc shared libs are all included as *complete* packages; you'll have an LDAP server, Kerberos support, SSL and Berkeley tools for hot backups and recovery. It would be really nice to have some more AIX machines in our build-farm! How many? I'm adding 8 more CPUs and 16GB to our 560 Saturday (which is one of many reasons my AIX patches are way behind) I can create you a .4 entitled VIOC (presented as 2 VCPU with SMT, so 4 logical CPU) with 2 GB memory. How much disk does it need? Btw: the SAMBA_3_0 branch currently fails to build on AIX, http://build.samba.org/?function=View+Build;host=aix1;tree=samba_3_0;compiler=gcc with: ld: 0711-783 WARNING: TOC overflow. TOC size: 90328 Maximum size: 65536 Extra instructions are being generated for each reference to a TOC symbol if the symbol is in the TOC overflow area. I fixed this a couple of times. :-) You need -bbigtoc anywhere you do linking (shared libs, execs, etc) http://build.samba.org/?function=View+Build;host=oehmesrs6k;tree=samba_3_0;compiler=cc the problem here is known, the pidl generated files are commited to the svn tree without using --uint-enums and the cc compiler rejects to compile enums with negative values... It would be nice to get this problems fixed... Which cc compiler? I'll look it up. Cheers, Bill metze -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFFG8Czm70gjA5TCD8RArrFAJ4mg5fWq+5oVoXK/nmfGe6FdLMTqQCeNYk4 DLmjC5PCKxvZ/s2zxfTvpH8= =krXU -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: AIX Testers Needed.
- Original Message - From: Stefan (metze) Metzmacher [EMAIL PROTECTED] To: William Jojo [EMAIL PROTECTED] Cc: Carlos Eduardo Pedroza Santiviago [EMAIL PROTECTED]; samba@lists.samba.org; samba-technical@lists.samba.org Sent: Thursday, September 28, 2006 10:30 AM Subject: Re: AIX Testers Needed. http://build.samba.org/?function=View+Build;host=aix1;tree=samba_3_0;compiler=gcc with: ld: 0711-783 WARNING: TOC overflow. TOC size: 90328 Maximum size: 65536 Extra instructions are being generated for each reference to a TOC symbol if the symbol is in the TOC overflow area. I fixed this a couple of times. :-) You need -bbigtoc anywhere you do linking (shared libs, execs, etc) In samba4 we use this: CPP= ccache gcc -E CPPFLAGS = -I./include -I. -I./lib -D_SAMBA_BUILD_=4 -DHAVE_CONFIG_H CC = ccache gcc CFLAGS = -Wall -I./include -I. -I./lib -D_SAMBA_BUILD_=4 - -DHAVE_CONFIG_H PICFLAG= -O2 LD = ccache gcc LDFLAGS= -Wl,-brtl,-bexpall,-bbigtoc -L./bin STLD = /usr/bin/ar STLD_FLAGS = -rcs SHLD = ccache gcc SHLD_FLAGS = -Wl,-G,-bexpall -L./bin SHLIBEXT = so should I change SHLD_FLAGS to -Wl,-G,-bexpall,-bbigtoc -L./bin ? Definitely. :-) Cheers, Bill -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFFG9x2m70gjA5TCD8RArCNAJ0R6EHTuTkKM2rb3FlqoWq9Ld9EkwCfXql4 f6SRDgmj5razPa7NZcw9F9E= =FnjF -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: AIX Testers Needed.
- Original Message - From: Stefan (metze) Metzmacher [EMAIL PROTECTED] To: William Jojo [EMAIL PROTECTED] Cc: samba@lists.samba.org; samba-technical@lists.samba.org Sent: Thursday, September 28, 2006 9:50 AM Subject: Re: AIX Testers Needed. -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi William, It would be really nice to have some more AIX machines in our build-farm! How many? I'm adding 8 more CPUs and 16GB to our 560 Saturday (which is one of many reasons my AIX patches are way behind) I can create you a .4 entitled VIOC (presented as 2 VCPU with SMT, so 4 logical CPU) with 2 GB memory. How much disk does it need? 1GB free disk would be nice, but 2GB memory isn't needed 512MB would do it really fine. It would be nice to have each production release of AIX in the farm. Ok, so 512MB it is. How about a 5.2 and 5.3 system? Just need some specifics on rootpw and any other specifics that are important. I can get those systems rockin' next week for you. (Gotta find my later 5.2 CD's for virtual support, but the 5.3 I can do immediately) Btw: the SAMBA_3_0 branch currently fails to build on AIX, I fixed this a couple of times. :-) You need -bbigtoc anywhere you do linking (shared libs, execs, etc) Ah, thanks! I somehow gets lost somewhere in samba3's configure after it's added to DYNEXP, I'm debugging this currently. http://build.samba.org/?function=View+Build;host=oehmesrs6k;tree=samba_3_0;compiler=cc the problem here is known, the pidl generated files are commited to the svn tree without using --uint-enums and the cc compiler rejects to compile enums with negative values... Which cc compiler? I'll look it up. I don't know, it's AIX 5.2 but with the --uint-enums flags it build fine on samba4..., so we could workarround. That's a gcc option, correct? and you're compiling with cc? I'll have to svn the samba_3_0 tree and try it here to get the specifics. Cheers, Bill metze -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFFG9Mpm70gjA5TCD8RAhGEAJ9oOP/yMqejwPBgW2qVTBW+YQGCMACcD5RM qePSlZ2uR+oVzfwSi8vXdZQ= =9SNv -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] RE: Samba/AD and AIX (WAS: Dependent module /usr/lib/libiconv.a)
On Wed, 20 Sep 2006, Alexandre Sobral wrote: Willian, Tnks It?s ok with unset command. Fantastic! I?m trying implement the Samba for AIX with Active Directory Integration. Do you have any idea where can i find a How to about this. I?ve already search from internet but I haven?t found yet. I know that Johann Kappacher in Vienna, Austria just sent me an email on Saturday indicating he got this working with the new packaging of 3.0.23c in the binaries area. Perhaps he'd be willing to share :-) Cheers, Bill _ Alexandre Sobral? _ William Jojo [EMAIL PROTECTED] Para samba-technical@lists.samba.org, 19/09/2006 14:25 Alexandre Sobral [EMAIL PROTECTED] cc Assunto Re: Dependent module /usr/lib/libiconv.a When you are the root user, if you can: unset LIBPATH Then you'll be ok. Cheers, Bill - Original Message - From: Alexandre Sobral [EMAIL PROTECTED] To: samba-technical@lists.samba.org Sent: Tuesday, September 19, 2006 1:09 PM Subject: Dependent module /usr/lib/libiconv.a I?ve just installed my samba 3.0.23c in AIX 5.3 system. I installed this packages: pware.libiconv.1.9.2.0.bff pware.BerkeleyDB.4.4-NC.4.4.20.4.bff pware.openldap.2.3.27.0.bff pware.MIT-krb5.1.4.4.0.bff pware.openssl.0.9.8.3.bff pware.base.5.2.0.0.bff pware.samba-3.0.23c.3.0.23.3.bff pware.cyrus-sasl.2.1.22.0.bff pware.gcc-shared-libs.4.1.1.0.bff I ?ve just created my sm.conf and I?m receveing the error message when I try start the samba deamons: # ./nmbd -D exec(): 0509-036 Cannot load program ./nmbd because of the following errors: 0509-150 Dependent module /usr/lib/libiconv.a(libiconv.so.2) could not be loaded. 0509-152 Member libiconv.so.2 is not found in archive # _ Alexandre Sobral? _ -- -- Aviso: Esta mensagem destina-se exclusivamente ao destinat?rio, podendo ser confidencial. Se V. Sa. n?o ? o destinat?rio, fique advertido de que a divulga??o, distribui??o ou c?pia desta mensagem ? estritamente proibida. Caso tenha recebido esta mensagem por engano, por favor avise imediatamente seu remetente atrav?s de resposta por e-mail. Obrigado. Warning: This message is intended exclusively for its addressee and may contain confidential information. If you are not the addressee, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication by mistake, please immediately notify the sender by reply transmission. Thank you. -- -- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] AIX Testers Needed.
Hello AIX folks, I am changing the packaging of Samba for AIX. Presently Samba is built with a truckload of static libs and bound up in a package that has no other support for the supporting infrastructure. What I'd like to do instead is make as much of the package dependant upon shared libs and to allow for completeness of the package. In other words, BDB, OpenSSL, OpenLDAP, SASL, KRB5, libiconv and gcc shared libs are all included as *complete* packages; you'll have an LDAP server, Kerberos support, SSL and Berkeley tools for hot backups and recovery. You (should) need nothing else to make this work. The packages are unconfigured; that's where you come in. Use the included example configs and the mass of online documentation to setup your environment to your needs. These packages are in BFF format and as such are installed using installp. This will allow me to upgrade certain libraries along the way as the technology and requirements change. The binary release notes will indicate what is changing. My plans are to only change the shared libs about every 6 months or so and only when they are truly needed. (This is actually part of a larger project to BFF many packages, which include PHP, Apache, FreeRADIUS, the list grows a little each day, but is about 43 a the moment. I've called the project PWare for pSeries. I know there are other sites doing this with Open Source Software, but this is dependency responsive, driven by installp, more cohesive and is designed to not interfere with, but also offer a replacement to, sites that already have a /usr/local software repository.) Anyway, a preliminary package is available at: ftp://ftp.hvcc.edu/pub/pware This includes Samba-3.0.23c with a temporary fix for an AIX panic confirmed late last week with strptime (originally reported in Samba4) that is still being worked on. All software will install in /opt/pware. Be sure to examine the tree for an understanding of where things are placed. One path in particular /opt/pware/samba is special. This is designed to allow several versions of Samba to be installed simultaneously for version testing and debugging. The installp command will automatically increase the size of the filesystems as needed. You should look to have at leat 100MB free on /opt after install to make room for logs if you need to collect debug information. This may require an adjustment by you. Another thing to note is all packages were built with gcc on AIX 5.2 and should work fine on AIX 5.3. (I'm already working on an AIX 5.3 only version to take advantage of compiling on the native OS.) You should, wherever possible and appropriate, upgrade AIX to recent levels: http://www-03.ibm.com/servers/eserver/support/unixservers/aixfixes.html You must agree to a license agreement that basically is a disclaimer that I and my institution will not be held responsible, that they may adhere to GPL, LGPL and other appropriate licensing agreements (where applicable) and that copyrights are held by their respective owners. When the package is extracted use the following commands that assume you are cd'd to the extraction directory. To view the license agreement: installp -lE -d. To preview the install: installp -agpYX -d. all To install all packages: installp -agYX -d. all To remove all packages: installp -u pware.* To create a new table of contents: inutoc . You can also use smitty install to manage installp packages. It is recommended that this software not be used immediately in production and be tested first in your environment with non-production data. We *are* using this style (in AIX 5.3 compiled form) in a production environment and it is working wonderfully. Please provide any feedback regarding operation, packaging or basic AIX support to me off-list unless it will benefit many. Be sure to look at the README for some basic known AIX issues. Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.23a on AIX
On Mon, 7 Aug 2006, Stephen Boyd wrote: Has anyone managed to compile Samba 3.0.23a on AIX 4.3? I am getting a linker error: Linking libsmbclient shared library bin/libsmbclient.so ld: 0711-781 ERROR: TOC overflow. TOC size: 72976 Maximum size: 65536 make: 1254-004 The error code from the last command is 1. Look at the patch for Bug #3981 I posted yesterday. Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] no SID in NTUSER.DAT
On Sun, 6 Aug 2006, mlangendoen wrote: hello, when i do profiles NTUSER.DAT i see this: [$$$PROTO.HIV\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher] [$$$PROTO.HIV\Software\Policies\Microsoft\SystemCertificates] [$$$PROTO.HIV\Software\Policies\Microsoft] [$$$PROTO.HIV\Software\Policies] [$$$PROTO.HIV\Software\SimonTatham\PuTTY\SshHostKeys] [$$$PROTO.HIV\Software\SimonTatham\PuTTY] [$$$PROTO.HIV\Software\SimonTatham] [$$$PROTO.HIV\Software] [$$$PROTO.HIV\UNICODE Program Groups] -snip- why do i not see SID's? I fixed this in bug #3713. Jerry, can this make it into 23b? :-) Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] AIX 5.3 Samba member server to an NT domain
- Original Message - From: Willemse, Menno [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Thursday, May 25, 2006 10:12 AM Subject: [Samba] AIX 5.3 Samba member server to an NT domain Ladies and Gentlemen, I'm trying to get AIX to authenticate users off another Samba server (with an eye to doing the same off a Windows server at some point, just to be flexible). I have been using the binary distribution of Samba 3.0.22 to do this. While I have been able to get users to log in by using the WINBIND authentication method, they still cannot change their password or use FTP. I haven't been able to find the PAM module in the binary distribution. Have you altered /etc/security/user for the users or for the default stanza for SYSTEM or registry attribute values (but leave root untouched. let root auth against the local system - always)? Also are you using passwd or passwd -R WINBIND? If you've altered the file above, the former should work. Note too that there is a problem with lsuser reporting users from WINBIND LAM in 5.3. This is an open PMR with IBM that I've got and not making much progress. So I'm not sure if this extends further than lsuser. AIX 5.2 is working just fine (not that it's much help :-) ) So now I'm trying to compile Samba from source using the GCC 3.3.2-5 compiler from the Linux Toolbox CD. This is not going very well. The configure script warns that aio.h, tcp.h and ldap.h cannot be compiled, don't exist or both. These files do exist, though they may not be where Configure expects them. So far, despite much trying, I've not been able to So what do I have to do to make Samba's ./configure happy on a freshly-installed AIX 5.3 system? If you want to build Samba yourself, you can follow the steps I've outlined in the README for the binary package. Let me know if I can be of more assistance. Cheers, Bill Kind regards, Menno Willemse Internet communications are not secure and therefore John Guest companies do not accept legal responsibility for the contents of this message. Any views or opinions presented are solely those of the author and do not necessarily represent those of John Guest companies. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Performance issue on AIX when deleting files inadirectory with a large number of files
- Original Message - From: Jeremy Allison [EMAIL PROTECTED] To: Jeremy Allison [EMAIL PROTECTED] Cc: samba@lists.samba.org; William Jojo [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Friday, May 12, 2006 7:06 PM Subject: Re: [Samba] Performance issue on AIX when deleting files inadirectory with a large number of files On Thu, May 11, 2006 at 04:06:37PM -0700, Jeremy Allison wrote: On Thu, May 11, 2006 at 03:54:17PM -0700, Jeremy Allison wrote: Do you see the change notify replies happening followed by the change notify setups ? I bet I know what it is Because AIX doesn't have kernel change notify when the change notify setup comes (which happens after every delete) it causes a directory rescan at that point - after *each* delete ! I think I can code around this. The key is to ensure that setting change notify timeout to zero turns off change notify except for renames and deletes. Also make it a per-share parameter so it can be set to zero for large directories... Give me a day or so on this. Ok - here is the patch. Bill - if you could test this on AIX by setting the (now per-share) parameter : change notify timeout = 0 on the share definition that holds a large number of files, you might find a speed up. I can see the effect it has here when I disable the kernel and FAM based change notify. Looks good here, Jeremy. The response time is exactly like my tests in FC3. Thanks a lot! Cheers, Bill Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Performance issue on AIX when deleting files inadirectory with a large number of files
- Original Message -
From: Jeremy Allison [EMAIL PROTECTED]
To: Jeremy Allison [EMAIL PROTECTED]
Cc: samba@lists.samba.org; William Jojo [EMAIL PROTECTED];
[EMAIL PROTECTED]
Sent: Friday, May 12, 2006 7:06 PM
Subject: Re: [Samba] Performance issue on AIX when deleting files
inadirectory with a large number of files
On Thu, May 11, 2006 at 04:06:37PM -0700, Jeremy Allison wrote:
On Thu, May 11, 2006 at 03:54:17PM -0700, Jeremy Allison wrote:
Do you see the change notify replies happening followed by the
change notify setups ? I bet I know what it is
Because AIX doesn't have kernel change notify when the change
notify setup comes (which happens after every delete) it causes a
directory rescan at that point - after *each* delete !
I think I can code around this. The key is to ensure that
setting change notify timeout to zero turns off change
notify except for renames and deletes. Also make it a per-share
parameter so it can be set to zero for large directories...
Give me a day or so on this.
Ok - here is the patch. Bill - if you could test this on
AIX by setting the (now per-share) parameter :
change notify timeout = 0
Thanks Jeremy! I should have an answer for you on Monday morning.
on the share definition that holds a large number of files,
you might find a speed up. I can see the effect it has here
when I disable the kernel and FAM based change notify.
You know, I was trying to manufacture a way to do this with DMAPI (which is
supported on JFS2) and set an event on {postcreate, postdelete, postrename}
and check the errno value for success, but there seems to be absolutely no
way to get the lib to do signalling. It appears to be a poll/select API.
BummerI wish IBM would put some of these cool Linux-only goodies in
their FS.
Cheers,
Bill
Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Performance issue on AIX when deleting files in a directory with a large number of files
- Original Message - From: Jeremy Allison [EMAIL PROTECTED] To: James Peach [EMAIL PROTECTED] Cc: Jeremy Allison [EMAIL PROTECTED]; Claus Lund [EMAIL PROTECTED]; samba@lists.samba.org; [EMAIL PROTECTED] Sent: Thursday, May 11, 2006 11:30 AM Subject: Re: [Samba] Performance issue on AIX when deleting files in a directory with a large number of files On Fri, May 12, 2006 at 12:50:37AM +1000, James Peach wrote: On 5/11/06, Jeremy Allison [EMAIL PROTECTED] wrote: On Wed, May 10, 2006 at 12:29:53PM -0400, Claus Lund wrote: Well, then Windows Explorer is braindamaged as well (which is a claim I won't contest ;) )... because it's slow deleting files right through Explorer as well. Yep - I completely agree Explorer is braindamaged. That's probably the worst of the lot :-). Well, it looks like a Samba problem to me (or maybe a compiler/compiler optimization problem?). I'm trying to get Samba compiled using IBM's XLC instead of GCC in the hopes that XLC might produce faster running binaries ... but unfortunately that seems like a somewhat involved task (Samba doesn't compile cleanly out of the box with XLC). If it only happens on AIX, it's not a Samba code logic problem, that's what I mean. I doubt modifying compiler flags will do anything about actions taking seconds to resolve - that's almost certainly a system problem (ie. JFS on AIX). sounds like samba is recreating the directory hash for change notifies It only does that every 30 seconds or so - so I don't think that is the problem (although turning if off might prove me wrong). I'm looking into this here. Are you referring to stat cache? I've confirmed that 150k statx's are being done after each delete request. I mocked it up here on JFS2 and JFS. I'm mocking is up now in FC3/4 on ext3 to see if this is normal and just FS throughput issue on AIX. What's interesting is the client requests the initial list of files and you can see the exchange between Samba/client: statx(bigdir/file61702, 0x2FF20618, 128, 010) = 0 statx(bigdir/file61703, 0x2FF20618, 128, 010) = 0 kwrite(26, \0\0 @18FF S M B 2\0\0\0.., 16412) = 16412 _select(27, 0x2FF209E8, 0x, 0x, 0x2FF229E8) = 1 kread(26, \0\0\0 d, 4)= 4 kread(26, FF S M B 2\0\0\0\01807D8.., 100)= 100 statx(bigdir/file61704, 0x2FF20618, 128, 010) = 0 statx(bigdir/file61705, 0x2FF20618, 128, 010) = 0 statx(bigdir/file61706, 0x2FF20618, 128, 010) = 0 But, between deletes: statx(bigdir/file74272, 0x2FF22290, 128, 010) = 0 statx(bigdir/file74273, 0x2FF22290, 128, 010) = 0 getdirent64(21, 0x20184A28, 4096) = 4096 statx(bigdir/file74274, 0x2FF22290, 128, 010) = 0 statx(bigdir/file74275, 0x2FF22290, 128, 010) = 0 statx(bigdir/file74276, 0x2FF22290, 128, 010) = 0 I haven't verified this with ethereal yet, but I don't think the client is asking for an update while the files are still being processed... Cheers, Bill Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Performance issue on AIX when deleting files in adirectory with a large number of files
- Original Message - From: Claus Lund [EMAIL PROTECTED] To: Jeremy Allison [EMAIL PROTECTED] Cc: samba@lists.samba.org; [EMAIL PROTECTED] Sent: Thursday, May 11, 2006 1:03 PM Subject: RE: [Samba] Performance issue on AIX when deleting files in adirectory with a large number of files Ok, so it isn't the change notify effect James suspected You are using the canonicalized case settings and case sensitive settings needed for large directories aren't you ? I tried changing the settings per this HOWTO: http://mirrors.uol.com.br/pub/samba/HOWTO/Samba-LargeDirectory-HOWTO Using: case sensitive = True default case = lower preserve case = no short preserve case = no on my big share and it did not make any difference. Did you canonicalize all the filenames in there to lower case after making these changes ? Yes, all the filenames are lower case. Confirmed on FC3/ext3 and AIX/JFS2/JFS. statx's still being done between deletes. I'm using same settings as Claus and all files are in the form file%d (0 through 14). Now for me the initial display of files is ~30 seconds. AIX delete shows a slow meter with 20,15,... seconds remaining. FC3 delete show a fast meter, but then the window hangs for 30 more seconds. top shows the smbd using 50%+ of cpu. (mind you FC3 is in vmware 5 on my T43) Jeremy, do you want me to test FC4 as well? Cheers, Bill -Claus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Performance issue on AIX when deleting files in adirectory with a large number of files
- Original Message - From: Jeremy Allison [EMAIL PROTECTED] To: William Jojo [EMAIL PROTECTED] Cc: Claus Lund [EMAIL PROTECTED]; Jeremy Allison [EMAIL PROTECTED]; samba@lists.samba.org; [EMAIL PROTECTED] Sent: Thursday, May 11, 2006 1:37 PM Subject: Re: [Samba] Performance issue on AIX when deleting files in adirectory with a large number of files On Thu, May 11, 2006 at 01:26:58PM -0400, William Jojo wrote: Confirmed on FC3/ext3 and AIX/JFS2/JFS. statx's still being done between deletes. I'm using same settings as Claus and all files are in the form file%d (0 through 14). Now for me the initial display of files is ~30 seconds. AIX delete shows a slow meter with 20,15,... seconds remaining. FC3 delete show a fast meter, but then the window hangs for 30 more seconds. top shows the smbd using 50%+ of cpu. (mind you FC3 is in vmware 5 on my T43) Jeremy, do you want me to test FC4 as well? Can you tell me exactly how the files are being deleted (ie. are you just selecting everything in an explorer window and hitting delete ?). I can try and reproduce this and see where the stat's are being done inside the code paths. Certainly. :-) After the initial window refresh of all the files, select any 15 or so consecutive objects (location seems to make no difference for me), smack the delete key and confirm. Can I get you anything else? Cheers, Bill If it's not easy to reproduce send me a ethereal dump of client traffic when doing the deletes. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Performance issue on AIX when deleting files in adirectory with a large number of files
On Thu, 11 May 2006, Jeremy Allison wrote: On Thu, May 11, 2006 at 01:42:59PM -0400, William Jojo wrote: Certainly. :-) After the initial window refresh of all the files, select any 15 or so consecutive objects (location seems to make no difference for me), smack the delete key and confirm. Ok, I see what happens. Client opens each file in turn, sets delete on close, then closes - we send a changenotify - client sets another change notify up on the directory - repeat until all the files are deleted, then the client (explorer) re-scans the directory using findfirst/findnext with a * wildcard. It's the last action that's causing a stat on each remaining file in the directory. I don't see anything out of the ordinary here Hm, right. I'm seeing stats on each delete on AIX (like a 10-15 second pause between each) and on the re-scan. The deletes on FC3 were snappy followed by a long pause which was the rescan. taps chin I wonder why all the stats are happening on AIX between deletes and not on FC3. grabs shovel Bill Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Performance issue on AIX when deleting files in adirectory with a large number of files
- Original Message - From: Jeremy Allison [EMAIL PROTECTED] To: Jeremy Allison [EMAIL PROTECTED] Cc: William Jojo [EMAIL PROTECTED]; samba@lists.samba.org; [EMAIL PROTECTED] Sent: Thursday, May 11, 2006 7:06 PM Subject: Re: [Samba] Performance issue on AIX when deleting files in adirectory with a large number of files On Thu, May 11, 2006 at 03:54:17PM -0700, Jeremy Allison wrote: Do you see the change notify replies happening followed by the change notify setups ? I bet I know what it is Because AIX doesn't have kernel change notify when the change notify setup comes (which happens after every delete) it causes a directory rescan at that point - after *each* delete ! Yep...you're right no F_NOTIFY defined in fcntl.h (that I can find). I think I can code around this. The key is to ensure that setting change notify timeout to zero turns off change notify except for renames and deletes. Also make it a per-share parameter so it can be set to zero for large directories... Give me a day or so on this. Now, IBM claims they can do directory change notification in AIX Fast Connect. I wonder... Cheers, Bill Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Performance issue on AIX when deleting files in adirectory with a large number of files
- Original Message - From: Jeremy Allison [EMAIL PROTECTED] To: Claus Lund [EMAIL PROTECTED] Cc: samba@lists.samba.org; [EMAIL PROTECTED]; Jeremy Allison [EMAIL PROTECTED] Sent: Wednesday, May 10, 2006 1:27 PM Subject: Re: [Samba] Performance issue on AIX when deleting files in adirectory with a large number of files On Wed, May 10, 2006 at 01:14:08PM -0400, Claus Lund wrote: I agree that it's not a Samba logic problem ... more like a Samba porting problem? And I don't think we can just blame JFS2 and/or AIX either because deleting files in that directory directly on the box or even through NFS is orders of magnitudes faster (minutes vs days to delete all the files in a directory with 150K files). But the nfs or local access isn't performing the same access pattern that Samba is by being driven by the client. I'm guessing that if you performed the same actions locally that the client is requesting Samba perform you'd get the same results (in fact you *must* - as all of Samba is userspace, there's no magic in what Samba is doing here - it's doing what the client requests from userspace). My money is still on the kernel, as driven in this access pattern. Yep. I'd be curious what a truss of a smbd process shows for access on that filesystem. Is this jfs2 using an inline log? Just curious... Cheers, Bill Now the access pattern may be insane, but that's not our fault :-). Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Performance issue on AIX when deleting files in a directory with a large number of files
- Original Message - From: Claus Lund [EMAIL PROTECTED] To: William Jojo [EMAIL PROTECTED]; Jeremy Allison [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; samba@lists.samba.org Sent: Wednesday, May 10, 2006 2:29 PM Subject: RE: [Samba] Performance issue on AIX when deleting files in a directory with a large number of files Hi Bill, I already tried updating AIX. I'm on 5300-04 (only a couple of security related fixes added since the tech level) on my production box (we're using Samba 3.0.21a on that box). And I'm on the latest Technology Level + all the latest fixes on my test box (and that's where I currently have 3.0.22). Both machines are setup with JFS2 and neither use inline logs. I am not all that familar with debugging tools like truss (I haven't really done any real programming since my college days ... 6-7 years ago). But I just ran: truss -f -o /datavg/smb_truss.out /opt/Samba/3.0.22/sbin/smbd -D I used Windows Explorer to browse to my test directory (with about 30K files in it), highlighted all the files and hit delete. I let it delete a few files and then cancelled. The truss file is about 185MB (4MB zipped). Do you have a place where I can upload that? You can mail me the zip directly off-list, unless Jeremy or Volker wish to look at it as well... Bill -Claus But the nfs or local access isn't performing the same access pattern that Samba is by being driven by the client. I'm guessing that if you performed the same actions locally that the client is requesting Samba perform you'd get the same results (in fact you *must* - as all of Samba is userspace, there's no magic in what Samba is doing here - it's doing what the client requests from userspace). My money is still on the kernel, as driven in this access pattern. Yep. I'd be curious what a truss of a smbd process shows for access on that filesystem. Is this jfs2 using an inline log? Just curious... Claus, can you run oslevel -r and send me the results. I think this may have been fixed in 5300-03. 5300-04-3 is available, I'd consider that as well... Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: suggestion to change idmap parameter usage [Was : Re: [Samba] winbindnss info = sfu is not so much working]
- Original Message - From: Jonathan C. Detert [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Friday, April 28, 2006 10:03 AM Subject: suggestion to change idmap parameter usage [Was : Re: [Samba] winbindnss info = sfu is not so much working] I wanted to use winbind to get user and group (i.e. nss) info from a Microsoft Active Directory LDAP Server that supports an RFC2307 compliant LDAP schema. I was unable to make that work until Guenther Deschner (see below) explained that I still had to specify idmap guid and idmap uid ranges. That need is not intuitively obvious. I suggest it be removed, or at least explained in the smb.conf manpage. The man page suggests that 'idmap backend' and the idmap uid/gid ranges are mutually exclusive (except for when idmap backend = idmap_rid). To illustrate this, consider the first sentence under the description of the idmap backend parameter: idmap backend (G) The purpose of the idmap backend parameter is to allow idmap to NOT use the local idmap tdb file to obtain SID to UID / GID mappings, but instead to obtain them from a common LDAP backend. If we are to use LDAP for the map, then what good is it to specify the range of numbers that can be used in the map? Hasn't the range already been set by whatever process populated LDAP with the uid/gid's? Or are we to assume that winbind is the agent that will make the maps within the LDAP backend? No, this is a table of UID/GID mapping outside the POSIX assigned values. The intent is to have a table of values that could be used to map to NFS or other but still be used in conjunction with Samba. There is no implied mutual exclusion, it allows for a container in LDAP to be used instead of the winbindd_idmap.tdb file in var/locks. The idea it to share this among several servers. The values would still be chosen on a first come, first served basis. Obviously the answers are, 'Yes, the range has already been set', and 'No, winbind is not making the maps within the LDAP backend. Something else must have assigned the uid/gids within the LDAP backend server.'. You can assign the values yourself, to be certain, but without IDMAP these were algorithmic until 3.0.23. (uid * 2 + base or gid * 2 + base; bases defaulted to 1000 and 1001) So, what is the reasoning behind requiring the specification of idmap uid and gid ranges when the backend is MsAD? Suppose there is a good reason. Then, what do we do with the problem of how to specify the idmap uid/gid ranges? Do we query LDAP to determine the current range in order to make sure the range we specify includes all uids/gids already set within LDAP? That is crazy. If we don't, then it must not matter what ranges we specify. So again, setting the range seems to have no natural, reasonable purpose. Well, if you have the POSIX users in SFU for the AD tree, why not point nss to the POSIX LDAP portion and set winbind trusted domains only = yes. If I understand this setting correctly (since we are using it in development) the RID should map to the POSIX values of the users and groups as presented by your LDAP backend. I agree with you that *sometimes* the idmap ranges should be unnecessary as I still need to have them even when using winbind trusted domains only. But this is a small price for me to eliminate the idmap table. On AIX I have a tree on a domain that everyone else trusts. so: dc=hvcc,dc=tst |- dc=acdev |- cn=Users (every person on our campus) |- cn=Groups (every group) |- cn=Computers (only those for ACDEV) |- dc=devex |- cn=Users (empty except root and nobody) |- cn=Groups (a simple set of groups) |- cn=Computers (only those for DEVEX) DEVEX trusts ACDEV. All systems point to dc=acdev,dc=hvcc,dc=tst for POSIX user information specifying he cn=users and cn=groups for users and groups respectively. Samba's perspective is this (in 3.0.23pre1): Share mapped from ACDEV shows ACDEV\username in Security tab ACL. The local user is mapped to the sambaSID from the the LDAP entry. Share mapped from DEVEX shows Unix User\username in Security tab ACL. The user is taken from nss and the SID becomes S-1-22-1-uid. This is *perfect* for me since I want to use a single username across all platforms from the POSIX user list regardless of the machine is a DC, DC trusting another DC or a DMS. But that solution is not so great for everyone. Lastly, if it really does make sense to set the idmap uid/gid ranges, then please update the smb.conf manual. It is very misleading (at least in the v3.0.22 rendition). Besides the misleading opening paragraph (pointed out above), there is another bit that implies setting the uid/gid ranges is not needed when using idmap backend, _except_ when the idmap backend is set to 'idmap_rid': An alternate method of SID to UID / GID mapping can be achieved
[Samba] 3.0.23pre1 Security tab acls on share
Still testing 3.0.23pre1... Tried to add a user to an ACL on a share \\exdev\bufs. EXDEV (3.0.23pre1, AIX5.3) trusts ACDEV (3.0.21c AIX5.2). share connected to WinXP-SP1 (not joined to a domain). Same config file as when exdev ran 3.0.21c which was ok. Receive error: The program cannot open the required dialog box because it cannot determine whether the computer named exdev is joined to a domain. clicks close Unable to display the user selection dialog. The system cannot find message for the message number 0x%1 in the message file for %2. clicks ok -- Suggestions? Who wants a log level 10? (This might be related to the other problem Volker is already looking into with winbindd and SIDs.) :-) Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Samba 3.0.23pre1 Available for Download
On Mon, 24 Apr 2006, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 William Jojo wrote: This may sound like a stupid question, but should shares in 3.0.23pre1 now show the DFS tab upon upgrade of existing PDC? Yes. This is one of the change we are trying. The 'host msdfs' and 'msdfs root' are now both enabled by default. We have one small bug Volker found with accessing \\server\homes that has to be fixed. You can still disable 'msdfs root' in a given service obviously. whineNo one reads the release notes/ :-) I did...no reallyseriouslyok, maybe not *that* part :-) Bill cheers, jerry = I live in a Reply-to-All world. --- Samba--- http://www.samba.org Centeris --- http://www.centeris.com -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFETTz2IR7qMdg1EfYRAolDAJ9MM3/gpE2HYFV61CxFV82S/ndt4wCg38CH TbOxNFg3Al120fXv36PBE2E= =2gzy -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba 3.0.23pre1 Available for Download
This may sound like a stupid question, but should shares in 3.0.23pre1 now show the DFS tab upon upgrade of existing PDC? Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] LDAP search for root.
Hello all! Is there a reason that the root uid is sought after in ldap suffix and not in ldap user suffix,ldap suffix when smbd is started? This seems incorrect to me. I have three domains in the same tree and it's arranged like so (varying the last dc on each suffix): ldap group suffix = cn=Groups,dc=devex ldap idmap suffix = ou=Idmap ldap machine suffix = cn=Computers,dc=devex ldap passwd sync = Yes ldap suffix = dc=hvcc,dc=tst ldap user suffix = cn=Users,dc=devex idmap backend = ldap:ldap://acedev.hvcc.edu This is several test boxes that would share the same idmap backend. I know I *could* fix this with ACL's but am I reading correctly as a bug or am I misunderstanding something? Or is the intent to have idmap backend and ldap idmap suffix be mutually exclusive somehow? [2006/04/11 16:26:12, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/04/11 16:26:12, 5] lib/smbldap.c:smbldap_search_ext(1080) smbldap_search_ext: base = [dc=hvcc,dc=tst], filter = [((uid=root)(objectclass=sambaSamAccount))], scope = [2] [2006/04/11 16:26:12, 5] lib/smbldap.c:smbldap_close(989) The connection to the LDAP server was closed [2006/04/11 16:26:12, 2] lib/smbldap.c:smbldap_open_connection(722) smbldap_open_connection: connection opened [2006/04/11 16:26:12, 3] lib/smbldap.c:smbldap_connect_system(905) ldap_connect_system: succesful connection to the LDAP server [2006/04/11 16:26:12, 4] lib/smbldap.c:smbldap_open(969) The LDAP server is succesfully connected [2006/04/11 16:26:12, 1] passdb/pdb_ldap.c:ldapsam_getsampwnam(1491) ldapsam_getsampwnam: Duplicate entries for this user [root] Failing. count=3 [2006/04/11 16:26:12, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/04/11 16:26:12, 4] passdb/passdb.c:local_uid_to_sid(1146) local_uid_to_sid: User root [uid == 0] has no samba account [2006/04/11 16:26:12, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/04/11 16:26:12, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/04/11 16:26:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/04/11 16:26:12, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/04/11 16:26:12, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/04/11 16:26:12, 5] lib/smbldap.c:smbldap_search_ext(1080) smbldap_search_ext: base = [cn=Groups,dc=devex,dc=hvcc,dc=tst], filter = [((objectClass=sambaGroupMapping)(gidNumber=0))], scope = [2] Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Errors with 3.0.21b on AIX -- please help
- Original Message - From: Ray Gebbie [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Tuesday, March 14, 2006 1:55 PM Subject: Re: [Samba] Samba Errors with 3.0.21b on AIX -- please help I did not copy any of the files listed. I have the installations in 2 different locations. I only copied the smb.conf file. I then shutdown the old version and started up the new version. It would seem to me that the new version should create these files for itself. When installing a Samba version for the first time, these files would get created, so I would assume that they would also be created by the new version on my system. There are copies of secrets.tdb and account_policy.tdb in each installation, and they are different. winbind_idmap.tdb does not exist in either installation. secrets.tdb holds the server's SID plus all information on trusts. Without this you are not upgrading, you are creating a new DC which will in most cases create a new SID (LDAP is an exception, it searches the tree in the event of a missing secret.tdb) and has *no* external trusts established. account_policy.tdb holds any information with respect to net rpc rights commands you've used to grant Se* privileges to users/groups. So someone who had SeMachineAccountPrivilege in that last version is lost in the upgrade. Should I replace the versions of the 2 files in the new installation with those in the old installation? It would be advantageous. Bill Thank you for the response. Ray Gebbie Federated Systems Group San Francisco, CA 94102 415-422-1662 William Jojo [EMAIL PROTECTED] To Sent by: samba@lists.samba.org, Ray samba-bounces+ray Gebbie [EMAIL PROTECTED] [EMAIL PROTECTED] cc ists.samba.org Subject Re: [Samba] Samba Errors with 03/14/2006 04:02 3.0.21b on AIX -- please help AM - Original Message - From: Ray Gebbie [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Monday, March 13, 2006 5:37 PM Subject: Re: [Samba] Samba Errors with 3.0.21b on AIX -- please help I guess there have not been any responses because I did not specifically ask a question. Why would 3.0.4 work and 3.0.25b give indications that the system is not in the domain? The configurations are the same. How did you perform the migration? When you moved did you copy: private/secrets.tdb var/locks/account_policy.tdb var/locks/winbind_idmap.tdb These files are essential for domain SID and trusts, account privileges and winbind mappings respectively. Cheers, Bill Ray Gebbie Federated Systems Group San Francisco, CA 94102 415-422-1662 Ray Gebbie [EMAIL PROTECTED] om To Sent by: David Shapiro samba-bounces+ray [EMAIL PROTECTED], [EMAIL PROTECTED] samba@lists.samba.org ists.samba.org cc Subject 03/10/2006 09:32 Re: [Samba] Samba Errors with AM3.0.21b on AIX -- please help Since 3.0.4 works, I am assumming that the system is in the domain. But the errors seem to indicate it isn't. Here is wbinfo: [vobadm mcom4:/opt/Samba/3.0.21b/bin] ./wbinfo -u Error looking up domain users [vobadm mcom4:/opt/Samba/3.0.21b/bin] ./wbinfo -g Error looking up domain groups Ray Gebbie Federated Systems Group San Francisco, CA 94102 415-422-1662 David Shapiro [EMAIL PROTECTED] bsnc.com To Ray Gebbie [EMAIL PROTECTED] 03/10/2006 07:28 cc AM Subject Re: [Samba] Samba Errors with 3.0.21b on AIX -- please help Does wbinfo -u/-g work for you? david David Shapiro Unix Team Lead 919-765-2011 Ray Gebbie [EMAIL PROTECTED] 3/8/2006 11:42:14 AM There have been no responses yet for this. Perhaps I am not asking the right questions. If there is something obvious that I am missing please let me know, because we are unable to upgrade the way things are now. Thanks. Ray Gebbie Federated Systems Group San Francisco, CA 94102 415-422-1662 Ray Gebbie [EMAIL PROTECTED] om To Sent by: samba@lists.samba.org samba-bounces+ray cc [EMAIL PROTECTED] ists.samba.org Subject
Re: [Samba] Samba Errors with 3.0.21b on AIX -- please help
- Original Message - From: Ray Gebbie [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Monday, March 13, 2006 5:37 PM Subject: Re: [Samba] Samba Errors with 3.0.21b on AIX -- please help I guess there have not been any responses because I did not specifically ask a question. Why would 3.0.4 work and 3.0.25b give indications that the system is not in the domain? The configurations are the same. How did you perform the migration? When you moved did you copy: private/secrets.tdb var/locks/account_policy.tdb var/locks/winbind_idmap.tdb These files are essential for domain SID and trusts, account privileges and winbind mappings respectively. Cheers, Bill Ray Gebbie Federated Systems Group San Francisco, CA 94102 415-422-1662 Ray Gebbie [EMAIL PROTECTED] omTo Sent by: David Shapiro samba-bounces+ray [EMAIL PROTECTED], [EMAIL PROTECTED] samba@lists.samba.org ists.samba.org cc Subject 03/10/2006 09:32 Re: [Samba] Samba Errors with AM3.0.21b on AIX -- please help Since 3.0.4 works, I am assumming that the system is in the domain. But the errors seem to indicate it isn't. Here is wbinfo: [vobadm mcom4:/opt/Samba/3.0.21b/bin] ./wbinfo -u Error looking up domain users [vobadm mcom4:/opt/Samba/3.0.21b/bin] ./wbinfo -g Error looking up domain groups Ray Gebbie Federated Systems Group San Francisco, CA 94102 415-422-1662 David Shapiro [EMAIL PROTECTED] bsnc.com To Ray Gebbie [EMAIL PROTECTED] 03/10/2006 07:28 cc AM Subject Re: [Samba] Samba Errors with 3.0.21b on AIX -- please help Does wbinfo -u/-g work for you? david David Shapiro Unix Team Lead 919-765-2011 Ray Gebbie [EMAIL PROTECTED] 3/8/2006 11:42:14 AM There have been no responses yet for this. Perhaps I am not asking the right questions. If there is something obvious that I am missing please let me know, because we are unable to upgrade the way things are now. Thanks. Ray Gebbie Federated Systems Group San Francisco, CA 94102 415-422-1662 Ray Gebbie [EMAIL PROTECTED] omTo Sent by: samba@lists.samba.org samba-bounces+ray cc [EMAIL PROTECTED] ists.samba.orgSubject [Samba] Samba Errors with 3.0.21b on AIX -- please help 03/07/2006 10:51 AM I have been trying for 3 weeks to get 3.0.21b to work on AIX 5.2. I am currently running 3.0.4, which has no problems. I am getting very frustrated, and am about to give up entirely on Samba. Here are some of the errors I am getting: [root mcom4:/opt/Samba/3.0.21b/bin] ./smbclient -L ccasemcom4 -d 3 -N -Ub06reg%Becky1208 lp_load: refreshing parameters Initialising global parameters params.c:pm_process() - Processing configuration file /opt/Samba/3.0.21 b/lib/smb.conf Processing section [global] added interface ip=11.16.153.89 bcast=11.16.155.255 nmask=255.255.252.0 Client started (version 3.0.21b). Connecting to 11.16.153.89 at port 445 Doing spnego session setup (blob length=16) server didn't supply a full spnego negprot Got challenge flags: Got NTLMSSP neg_flags=0x60890235 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60080215 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60080215 SPNEGO login failed: NT_STATUS_CANT_ACCESS_DOMAIN_INFO session setup failed: NT_STATUS_CANT_ACCESS_DOMAIN_INFO After setting client schannel = no [root mcom4:/opt/Samba/3.0.21b/bin] ./smbclient -L ccasemcom4 -d 3 -N -Ub06reg%Becky1208 lp_load: refreshing parameters Initialising global parameters params.c:pm_process() - Processing configuration file /opt/Samba/3.0.21 b/lib/smb.conf Processing section [global] added interface ip=11.16.153.89 bcast=11.16.155.255 nmask=255.255.252.0 Client started (version 3.0.21b). resolve_lmhosts: Attempting lmhosts lookup for name ccasemcom40x20 resolve_wins: Attempting wins lookup for name ccasemcom40x20 resolve_wins: WINS server resolution selected and no WINS servers listed.
Re: [Samba] Deadtime parameter questsion
- Original Message - From: Michael [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Wednesday, March 08, 2006 6:09 AM Subject: [Samba] Deadtime parameter questsion Hello samba gurus ! I'm using samba 3.0.21c on AIX 5.3 box . I've specified deadtime=15 in my smb.conf file and I'm expecting that inactive sessions ( has no open files ) will be closed after 15 minutes . I'm connecting to samba from my PC ( win2000 ) , minimizing the window and waiting 15 minutes ... but nothing happens - smbd opened by my connection is still running , window on my workstation still usable and not closed ... Well, you could run smbstatus -L and be certain there are no active locks on any of the connected shares. deadtime will do the disconnect. There may also be other things happening on your workstation that is causing periodic scans of the share. I've found in documentation that this option should disconnect the session , but almost all clients has auto reconnect feature , so what is the reason to use deadtime option ? I believe it was intended to reduce resource comsumption of smaller systems using the autoreconnect to reintroduce the connection as you indicated. Could you please advise how I can totally disconnect inactive sessions - I mean kill smbd on the server and close the window on the client ? We have almost 100 samba sessions on that box and sometimes smbd processes takes to many system resources . Ummm, how much resource are we talking about here? Our AIX 5.2 system had 1054 connections yesterday and only used 26% of 12GB and most of that was probably stat cache data. I wonder if there is something else going on here. What does oslevel -r report? Bill Thanks a lot in advance , Michael Mikolyuk . System Unix Administrator . The information contained in this message is proprietary of Amdocs, protected from disclosure, and may be privileged. The information is intended to be conveyed only to the designated recipient(s) of the message. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, use, distribution or copying of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] hanging smbd(s) revisited
- Original Message - From: William Jojo [EMAIL PROTECTED] To: Jeremy Allison [EMAIL PROTECTED] Cc: samba@lists.samba.org; Gerald (Jerry) Carter [EMAIL PROTECTED]; Andrew Tridgell [EMAIL PROTECTED]; Jeremy Allison [EMAIL PROTECTED] Sent: Tuesday, February 28, 2006 4:33 PM Subject: Re: [Samba] hanging smbd(s) revisited - Original Message - From: Jeremy Allison [EMAIL PROTECTED] To: William Jojo [EMAIL PROTECTED] Cc: samba@lists.samba.org; Gerald (Jerry) Carter [EMAIL PROTECTED]; Andrew Tridgell [EMAIL PROTECTED]; Jeremy Allison [EMAIL PROTECTED] Sent: Tuesday, February 28, 2006 3:25 PM Subject: Re: [Samba] hanging smbd(s) revisited On Tue, Feb 28, 2006 at 01:30:40PM -0500, William Jojo wrote: So we've gone back to 3.0.20 and we're stable again. I should indicate that it's 3.0.20 with patches 9484, 9481 and 9456 to fix Win98 dir loop, excel shared workbook and ACLs (not necessarily in that order). Since the problem manifests in the filesystem where our Samba install is, and it appears to be a tdb (namely locking.tdb for fd=15, but can't identify the fd=3 that spins unmercifully), I'm wondering if *maybe* it could be the Fix for tdb clear-if-first race condition. or some other tdb change after 3.0.20 that traded one bug for another? I'm guessing... :-) Identifying that fd would be really useful. Ok, dug it up. This is the IBM info. - Original Message - From: Robert Elias To: [EMAIL PROTECTED] Sent: Monday, February 27, 2006 12:30 PM Subject: Pmr#47402,180 Bill, Thank you for patience while I work through your questions. I ran this issue by our level 3 performance team and received the following input. The file in question is inode 12363 in /samba. Use 'find /samba -inum 12363' to determine the file name. I ran this by the Samba team members that work for IBM and they suggested the following: As a long shot, I suggest that you have him run tdbtorture (a file i/o testcase) from the samba source tree as that does a simulation of the locking that Samba does and if we have a bug in AIX locking. Your comments or thoughts? Thanks, Robert Elias AIX Duty Manager IBM Integrated Technology Services 214-257-9292 - T/L 972 [storage:/samba/3.0.21b] # find /samba -inum 12363 /samba/3.0.21b/var/locks/locking.tdb We are going to start moving to 20a, then 20b, then to 21 then back to 21a where we started (21b did it too, haven't tried 21c yet) after another day or two of 3.0.20 to make sure we're not losing our mind. I've looked over the logic for the aquiring/release of the lock for the locking.tdb in the 3.0.21c release code - I can't see any possible paths, error or otherwise where the lock can be left live on a record. I'll keep looking though. When it's spinning, what is the errno that the fcntl call returns ? What appears to happen is pid 266946 is exiting (exited?) and some kind of dealock has occured which shows the following in filemon.sum from the perfpmr that IBM had me run during the event. snip 9603204 hooks processed (incl. 2108 utility) 60.013 secs in measured interval Cpu utilization: 42.9% Most Active Files #MBs #opns #rds #wrs file volume:inode 230.1 0 29492 0 pid=266946_fd=3 43.3 0 1588129 pid=240270_fd=5 /snip My question to IBM was how can this happen? The above inode number is what was provided to me yesterday. Since moving to 3.0.20 the problem has subsided, I'm back here and not bugging IBM at the moment. :-| Whatever else I can get you, just say the word. :-) Do you agree with us to step to 20a, 20b ... ? We've survived two days on 3.0.20, and our load is even more than when we started. We have over 1000 smbd's running on this machine and it's not even breaking a sweat. Now additonally, I'm looking through source/locking/locking.c I notice that diff of 3.0.20 and 20a and 20b have no changes. Then in 3.0.21 there's an invasive change. (locking/posix.c remains unchanged through 21b.) I'm pretty certain that 20a and 20b will be fine for us based on what I see, but I'm still learning (and comprehending :-) ) these changes looking for a smoking gun. And tomorrow I will put 20b (skipping 20a) in place on this server. I'm opening a bug because I think this one is real and load related. Cheers, Bill Cheers, Bill Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman
Re: [Samba] Errors after building 3.0.21b on AIX 5.2
- Original Message - From: Ray Gebbie [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Monday, February 27, 2006 5:40 PM Subject: [Samba] Errors after building 3.0.21b on AIX 5.2 I have seen a lot of recent posts about building on AIX 5.2, 5.3, etc. but none showed the same problems I am having. After building Samba 3.0.21b on AIX 5.2, I get this error when running a number of the binaries: Yes, there have been many postings. :-) And I'm quite excited about it! Please see the README file in the AIX binaries folder on any of the Samba mirrors. All of the missing symbol items posted lately (including yours) are addressed there with solutions. Cheers, Bill ./testparm exec(): 0509-036 Cannot load program ./testparm because of the following errors: 0509-130 Symbol resolution failed for /usr/lib/libc.a(posix_aio.o) because: 0509-136 Symbol _posix_kaio_rdwr (number 2) is not exported from dependent module /unix. 0509-136 Symbol _posix_listio (number 3) is not exported from dependent module /unix. 0509-136 Symbol _posix_acancel (number 4) is not exported from dependent module /unix. 0509-136 Symbol _posix_iosuspend (number 5) is not exported from dependent module /unix. 0509-136 Symbol _posix_aio_nwait (number 6) is not exported from dependent module /unix. 0509-136 Symbol _posix_iofsync (number 7) is not exported from dependent module /unix. 0509-192 Examine .loader section symbols with the 'dump -Tv' command. I have not built C programs in a long time, so I am very rusty at debugging these kind of problems. It is obvious that I did not do something right when I ran 'configure'. Here is the command line I used: ./configure --with-acl-support --with-utmp --with-ldap --with-ads --with-pam --with-winbind --with-aio=yes --with-libconf=/usr/local --with-sendfile-support --prefix=/ccase/dist/build/samba --with-quotas --with-krb5=/usr/local --with-shared-modules=idmap_ad,idmap_rid --enable-shared=yes --disable-static What did I do wrong? I am using gcc 4.0.2. Thank you. Ray Gebbie Federated Systems Group San Francisco, CA 94102 415-422-1662 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] hanging smbd(s) revisited
- Original Message - From: William Jojo [EMAIL PROTECTED] To: Gerald (Jerry) Carter [EMAIL PROTECTED] Cc: samba@lists.samba.org; Andrew Tridgell [EMAIL PROTECTED]; Jeremy Allison [EMAIL PROTECTED] Sent: Saturday, February 25, 2006 11:38 AM Subject: Re: [Samba] hanging smbd(s) revisited On Sat, 25 Feb 2006, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matt Johnson wrote: Hi, Just to add -- our fcntl locking issue is on Linux, we've seen it on 2.6.9, 2.6.13.1 and 2.6.15.3, running Mandrake 10.2. locking.tdb is on a local disk. All smbd child processes are blocked on apparently the same fcntl when it happens. Hmmm...ok. That ruins my theory. I thought you were on AIX as well. And just to make sure, you are running Samba 3.0.21b as well? Is it possible you're on the right track, but manifests differently on our two systems? :-) Last semester we were running 3.0.20 on this machine. We've been toying with going back to that code base to see if it stabalizes. (Of course putting deadtime back to zero for the test.) That still has me confused as to why the non-zero deadtime seems to make the whole environment more stable. It's the *only* modification we've made that has had any impact at all. If 3.0.20 fails, then it's most likely a kernel bug. It's so hard to get IBM to move on this without *ahem* additional compensation. I even got the duty manager involved on the PMR since I got the brush-off. I would appreciate any more info you have on the fcntl bug you mentioned so I can run it by IBM. I think on Monday we'll try 3.0.20 and see what happens. So we've gone back to 3.0.20 and we're stable again. I should indicate that it's 3.0.20 with patches 9484, 9481 and 9456 to fix Win98 dir loop, excel shared workbook and ACLs (not necessarily in that order). Since the problem manifests in the filesystem where our Samba install is, and it appears to be a tdb (namely locking.tdb for fd=15, but can't identify the fd=3 that spins unmercifully), I'm wondering if *maybe* it could be the Fix for tdb clear-if-first race condition. or some other tdb change after 3.0.20 that traded one bug for another? I'm guessing... :-) We upgraded from 3.0.20 to 3.0.21a for production. It never showed up in development for any version after 3.0.20 since we can't generate that kind of random load, so of course we thought everything was cool. Again, this only happens under heavy load, daily and clears up with a bounce of smbd. It seems to be related to a few hundred students logging off and a few hundred more logging on (classes are switching). Also we noticed that there are several hundred and in some cases a couple thousand cookie files being transfered around in roaming profiles per student (they were not redirected). We are going to start moving to 20a, then 20b, then to 21 then back to 21a where we started (21b did it too, haven't tried 21c yet) after another day or two of 3.0.20 to make sure we're not losing our mind. AIX 5.2 TL-08-1, Windows XP-SP2 clients. Storage is a CX-700 EMC SAN (which rocks, btw) Anything more I can provide, let me know. :-) Cheers, Bill cheers, Bill cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEAIVqIR7qMdg1EfYRAhY9AJsGDSjVGISuB7s5gXiN7SROGskv5wCcCj/C vk+23YRv9n1CWpYkQRXO17o= =dGU1 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] hanging smbd(s) revisited
- Original Message - From: Jeremy Allison [EMAIL PROTECTED] To: William Jojo [EMAIL PROTECTED] Cc: samba@lists.samba.org; Gerald (Jerry) Carter [EMAIL PROTECTED]; Andrew Tridgell [EMAIL PROTECTED]; Jeremy Allison [EMAIL PROTECTED] Sent: Tuesday, February 28, 2006 3:25 PM Subject: Re: [Samba] hanging smbd(s) revisited On Tue, Feb 28, 2006 at 01:30:40PM -0500, William Jojo wrote: So we've gone back to 3.0.20 and we're stable again. I should indicate that it's 3.0.20 with patches 9484, 9481 and 9456 to fix Win98 dir loop, excel shared workbook and ACLs (not necessarily in that order). Since the problem manifests in the filesystem where our Samba install is, and it appears to be a tdb (namely locking.tdb for fd=15, but can't identify the fd=3 that spins unmercifully), I'm wondering if *maybe* it could be the Fix for tdb clear-if-first race condition. or some other tdb change after 3.0.20 that traded one bug for another? I'm guessing... :-) Identifying that fd would be really useful. Ok, dug it up. This is the IBM info. - Original Message - From: Robert Elias To: [EMAIL PROTECTED] Sent: Monday, February 27, 2006 12:30 PM Subject: Pmr#47402,180 Bill, Thank you for patience while I work through your questions. I ran this issue by our level 3 performance team and received the following input. The file in question is inode 12363 in /samba. Use 'find /samba -inum 12363' to determine the file name. I ran this by the Samba team members that work for IBM and they suggested the following: As a long shot, I suggest that you have him run tdbtorture (a file i/o testcase) from the samba source tree as that does a simulation of the locking that Samba does and if we have a bug in AIX locking. Your comments or thoughts? Thanks, Robert Elias AIX Duty Manager IBM Integrated Technology Services 214-257-9292 - T/L 972 [storage:/samba/3.0.21b] # find /samba -inum 12363 /samba/3.0.21b/var/locks/locking.tdb We are going to start moving to 20a, then 20b, then to 21 then back to 21a where we started (21b did it too, haven't tried 21c yet) after another day or two of 3.0.20 to make sure we're not losing our mind. I've looked over the logic for the aquiring/release of the lock for the locking.tdb in the 3.0.21c release code - I can't see any possible paths, error or otherwise where the lock can be left live on a record. I'll keep looking though. When it's spinning, what is the errno that the fcntl call returns ? What appears to happen is pid 266946 is exiting (exited?) and some kind of dealock has occured which shows the following in filemon.sum from the perfpmr that IBM had me run during the event. snip 9603204 hooks processed (incl. 2108 utility) 60.013 secs in measured interval Cpu utilization: 42.9% Most Active Files #MBs #opns #rds #wrs file volume:inode 230.1 0 29492 0 pid=266946_fd=3 43.3 0 1588129 pid=240270_fd=5 /snip My question to IBM was how can this happen? The above inode number is what was provided to me yesterday. Since moving to 3.0.20 the problem has subsided, I'm back here and not bugging IBM at the moment. :-| Whatever else I can get you, just say the word. :-) Do you agree with us to step to 20a, 20b ... ? Cheers, Bill Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Building 3.0.21x on AIX 5.2
- Original Message -
From: Tim Evans [EMAIL PROTECTED]
To: samba@lists.samba.org; [EMAIL PROTECTED]
Sent: Friday, February 24, 2006 8:09 PM
Subject: [Samba] Building 3.0.21x on AIX 5.2
I've followed the instructions in the README at
http://us4.samba.org/samba/ftp/Binary_Packages/AIX/ for building 3.0.21x
on AIX
5.2 ('oslevel -r' reports '5200-07').
The last version I was able to build on the system was 3.0.14a.
3.0.21c's configure completes with no errors, but the make immediately
bombs
with:
# make
Using FLAGS = -O -D_SAMBA_BUILD_ -I./popt -Iinclude
-I/usr/local/SRC/samba-3.0.21c/source/include
-I/usr/local/SRC/samba-3.0.21c/source/ubiqx
-I/usr/local/SRC/samba-3.0.21c/source/tdb -I.
-I/usr/local/SRC/samba-3.0.21c/source -D_SAMBA_BUILD_
LIBS =
LDSHFLAGS = -Wl,-bexpall,-bM:SRE,-bnoentry,-berok
LDFLAGS =
PIE_CFLAGS =
PIE_LDFLAGS =
Generating smbd/build_options.c
Building include/proto.h
creating /usr/local/SRC/samba-3.0.21c/source/include/proto.h
Building include/wrepld_proto.h
creating /usr/local/SRC/samba-3.0.21c/source/include/wrepld_proto.h
Building include/build_env.h
creating /usr/local/SRC/samba-3.0.21c/source/nsswitch/winbindd_proto.h
creating /usr/local/SRC/samba-3.0.21c/source/web/swat_proto.h
creating /usr/local/SRC/samba-3.0.21c/source/client/client_proto.h
creating /usr/local/SRC/samba-3.0.21c/source/utils/net_proto.h
creating /usr/local/SRC/samba-3.0.21c/source/utils/ntlm_auth_proto.h
Compiling dynconfig.c
In file included from /usr/local/SRC/samba-3.0.21c/source/dynconfig.c:21:
include/includes.h:841: error: redefinition of `struct timespec'
make: 1254-004 The error code from the last command is 1.
I'm not able to create this on my 5.2 box, but I'm using gcc 3.4.4. Can you
tell me more about your installation? Compiler, additional products?
Cheers,
Bill
--
Tim Evans, TKEvans.com, Inc. |5 Chestnut Court
[EMAIL PROTECTED] |Owings Mills, MD 21117
http://www.tkevans.com/ |443-394-3864
http://www.come-here.com/News/ |
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.21b binaries on AIX 5.2 ML4, fails to run after install
- Original Message - From: [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Monday, February 27, 2006 11:16 AM Subject: [Samba] Samba 3.0.21b binaries on AIX 5.2 ML4,fails to run after install After installing the prbuilt binaries from samba.org for AIX 5.2, and installing, I get the following running testparm or smbstatus :- Please see the README file in the dir where you got the binary. You've got -04, but I think these symbols appeared in -05. (Presently 08-1 is available). Cheers, Bill [WMSTRAIN:root]/opt/Samba/3.0.21b/bin smbstatus exec(): 0509-036 Cannot load program smbstatus because of the following errors: 0509-130 Symbol resolution failed for smbstatus because: 0509-136 Symbol statvfs64 (number 115) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-136 Symbol opendir64 (number 145) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-136 Symbol closedir64 (number 146) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-136 Symbol readdir64 (number 147) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-136 Symbol seekdir64 (number 150) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-136 Symbol telldir64 (number 187) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-192 Examine .loader section symbols with the 'dump -Tv' command. Can anyone suggest a solution? Regards Mark Find out how to protect your home from frost this winter at www.yorkshirewater.com YORKSHIRE WATER - WINNER OF THE UTILITY OF THE YEAR AWARD 2004 AND 2005 The information in this e-mail is confidential and may also be legally privileged. The contents are intended for recipient only and are subject to the legal notice available at http://www.keldagroup.com/email.htm Yorkshire Water Services Limited Registered Office Western House Halifax Road Bradford BD6 2SZ Registered in England and Wales No 2366682 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Building 3.0.21x on AIX 5.2
- Original Message - From: Tim Evans [EMAIL PROTECTED] To: David Shapiro [EMAIL PROTECTED]; William Jojo [EMAIL PROTECTED]; samba@lists.samba.org; [EMAIL PROTECTED]; Tim Evans [EMAIL PROTECTED] Sent: Monday, February 27, 2006 12:02 PM Subject: Re: [Samba] Building 3.0.21x on AIX 5.2 On Mon, 27 Feb 2006 08:51:16 -0500, David Shapiro wrote Note: do not use binutils Could you be more specific here, please? #!/bin/ksh -x export LIBPATH=/usr/lib:/usr/local/lib:/opt/freeware/lib env CC=gcc \ CFLAGS=-DPAM_AUTHTOK_RECOVER_ERR=PAM_AUTHTOK_RECOVERY_ERR -DPAM_EXTERN=extern -D_LINUX_SOURCE_ COMPAT \ CPPFLAGS=-I/usr/local/bdb/include -I/usr/local/ssl/include -I/usr/local/include -I/usr/include \ LDFLAGS=-L/usr/local/bdb/lib -L/usr/local/cyrus-sasl/lib -L/usr/local/ssl/lib -L/usr/local/ope nldap/lib -L/usr/lib -L/usr/local/lib \ ../configure --prefix=/usr/local/samba --with-shared-modules=idmap_ad,idmap_rid --with-ads --with-ldap --with-pam --with-krb5=/usr/local/heimdal-krb5 --with-winbind --with-acl-support --with-utmp --with-quotas --with-sendfile-support --with-aio-support --enable-shared=yes --disable-static I really only need the default configuration. The configure script used to work properly by itself, with no arguments. Much, if not most, of the above is stuff I either don't need, directories I don't have/use, or what I think are normal defaults. This could be the crux. The notes you are following are simply the notes I used to build the binaries. As such, they provide a means for others to build as I did with as few dependencies at runtime as possible. However, this may not be ideal for *you*. Try something simpler like: env CC=gcc -g -D_LINUX_SOURCE_COMPAT \ CPPFLAGS=-I/usr/local/include -I/usr/local/BerkeleyDB.4.3/include \ LDFLAGS=-L/usr/local/lib -L/usr/local/BerkeleyDB.4.3/lib \ ./configure --with-acl-support --with-utmp \ --with-ldap --with-ads=no --with-aio=yes \ --with-libiconv=/usr/local --with-sendfile-support \ --prefix=/samba/3.0.21c --with-quotas If you don't want to use LDAP and BerkeleyDB, just remove them. You can safely turn off AIO and sendfile support as they are performance enhancers. Cheers, Bill -- Tim Evans, TKEvans.com, Inc.|5 Chestnut Court [EMAIL PROTECTED] |Owings Mills, MD 21117 http://www.tkevans.com/ |443-394-3864 http://www.come-here.com/News/ | -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Building 3.0.21x on AIX 5.2
- Original Message - From: Tim Evans [EMAIL PROTECTED] To: William Jojo [EMAIL PROTECTED]; [EMAIL PROTECTED]; David Shapiro [EMAIL PROTECTED]; samba@lists.samba.org; [EMAIL PROTECTED] Sent: Monday, February 27, 2006 1:01 PM Subject: Re: [Samba] Building 3.0.21x on AIX 5.2 On Mon, 27 Feb 2006 12:08:49 -0500, William Jojo wrote Try something simpler like: env CC=gcc -g -D_LINUX_SOURCE_COMPAT \ CPPFLAGS=-I/usr/local/include -I/usr/local/BerkeleyDB.4.3/include \ LDFLAGS=-L/usr/local/lib -L/usr/local/BerkeleyDB.4.3/lib \ ./configure --with-acl-support --with-utmp \ --with-ldap --with-ads=no --with-aio=yes \ --with-libiconv=/usr/local --with-sendfile-support \ --prefix=/samba/3.0.21c --with-quotas If you don't want to use LDAP and BerkeleyDB, just remove them. You can safely turn off AIO and sendfile support as they are performance enhancers. Thanks, again: env CC=gcc -g -D_LINUX_SOURCE_COMPAT \ CPPFLAGS=-I/usr/local/include \ LDFLAGS=-L/usr/local/lib \ ./configure --with-acl-support --with-utmp \ --with-libiconv=/usr/local --with-quotas --with-ads=no # make Using FLAGS = -O -D_SAMBA_BUILD_ -I./popt -Iinclude -I/usr/local/SRC/samba-3.0.21c/source/include -I/usr/local/SRC/samba-3.0.21c/source/ubiqx -I/usr/local/SRC/samba-3.0.21c/source/tdb -I. -I/usr/local/include -I/usr/local/SRC/samba-3.0.21c/source -D_SAMBA_BUILD_ LIBS = LDSHFLAGS = -Wl,-bexpall,-bM:SRE,-bnoentry,-berok -L/usr/local/lib LDFLAGS = -L/usr/local/lib PIE_CFLAGS = PIE_LDFLAGS = Generating smbd/build_options.c Building include/proto.h creating /usr/local/SRC/samba-3.0.21c/source/include/proto.h Building include/wrepld_proto.h creating /usr/local/SRC/samba-3.0.21c/source/include/wrepld_proto.h Building include/build_env.h creating /usr/local/SRC/samba-3.0.21c/source/nsswitch/winbindd_proto.h creating /usr/local/SRC/samba-3.0.21c/source/web/swat_proto.h creating /usr/local/SRC/samba-3.0.21c/source/client/client_proto.h creating /usr/local/SRC/samba-3.0.21c/source/utils/net_proto.h Compiling dynconfig.c In file included from /usr/local/SRC/samba-3.0.21c/source/dynconfig.c:21: include/includes.h:841: error: redefinition of `struct timespec' make: 1254-004 The error code from the last command is 1. Same error as I originally posted. Ok, can you get me oslevel -r, config.log and the includes.h file? You said 3.3.2 gcc? Was this from the IBM Linux toolset in rpm format? Can you try something before you send those? in the /opt folder where the freeware gcc will be, can you rename the include dir for gcc to something like include.old? don't delete it, just rename it. part of that install has some sketchy includes and i'm wondering if they are getting in the way (it did on some initial 5.3 testing at one time). It'll be something like /opt/freeware/gcc...-3.3.2.../include Cheers, Bill -- Tim Evans, TKEvans.com, Inc.|5 Chestnut Court [EMAIL PROTECTED] |Owings Mills, MD 21117 http://www.tkevans.com/ |443-394-3864 http://www.come-here.com/News/ | -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] hanging smbd(s) revisited
On Sat, 25 Feb 2006, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matt Johnson wrote: Hi, Just to add -- our fcntl locking issue is on Linux, we've seen it on 2.6.9, 2.6.13.1 and 2.6.15.3, running Mandrake 10.2. locking.tdb is on a local disk. All smbd child processes are blocked on apparently the same fcntl when it happens. Hmmm...ok. That ruins my theory. I thought you were on AIX as well. And just to make sure, you are running Samba 3.0.21b as well? Is it possible you're on the right track, but manifests differently on our two systems? :-) Last semester we were running 3.0.20 on this machine. We've been toying with going back to that code base to see if it stabalizes. (Of course putting deadtime back to zero for the test.) That still has me confused as to why the non-zero deadtime seems to make the whole environment more stable. It's the *only* modification we've made that has had any impact at all. If 3.0.20 fails, then it's most likely a kernel bug. It's so hard to get IBM to move on this without *ahem* additional compensation. I even got the duty manager involved on the PMR since I got the brush-off. I would appreciate any more info you have on the fcntl bug you mentioned so I can run it by IBM. I think on Monday we'll try 3.0.20 and see what happens. cheers, Bill cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEAIVqIR7qMdg1EfYRAhY9AJsGDSjVGISuB7s5gXiN7SROGskv5wCcCj/C vk+23YRv9n1CWpYkQRXO17o= =dGU1 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] hanging smbd(s) revisited
- Original Message -
From: Matt Johnson [EMAIL PROTECTED]
To: samba@lists.samba.org
Sent: Friday, February 24, 2006 11:21 AM
Subject: [Samba] hanging smbd(s) revisited
Back in December, I was having problems with fcntl64 locks hanging.
On Thu, 15 Dec 2005, Matt Johnson wrote:
On Thu, 15 Dec 2005, Gerald (Jerry) Carter wrote:
HmmI'm not sure if the bug was strictly in the new oplock
implement (post 3.0.20) but it doesn sound like what you are
describing. If you want to the the SAMBA_3_0_RELEASE branch
and see that would be appreciated. The final 3.0.21 release
should happen soon (just 2 more bugs to finish)
We'll give that a shot next week on a test server.
It being related to oplocks seems to make lots of sense -- we killed
oplocks
in our config and the problem has gone away (but we now obviously have a
*very* slow Samba service).
Well... it has been fine since we upgraded to 3.0.21b and reenabled
oplocks, but today we had exactly the same problem recur:
[EMAIL PROTECTED] fd]# strace -p 19827
Process 19827 attached - interrupt to quit
fcntl64(15, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=632, len=1}
unfinished ...
Process 19827 detached
fd 15 = locking.tdb
...so perhaps the frequency of the problem has been reduced, but the
problem itself has not been resolved.
I have an open call to IBM about a similar problem in AIX. I've been
suspiscious about locking.tdb, but we don't use oplocks on our server and I
can't definitively point the finger at Samba.
Unfortunately getting a log level 10 is prohibitive given the massive usage
on this server.
I'm not sure how yours manifests, but our is definitely load related. Each
hour our students log off from one Windows Xp-SP2 machine and then log into
another.
If we bounce smbd through swat, the problem goes away until about 24 hours
later. Now if we set deadtime to say 15 or 30 minutes, then we seem to last
beyond the 24 hour period.
Truss looks like this:
kfcntl(15, F_SETLKW, 0x2FF215E0)= 0
kfcntl(15, F_SETLKW, 0x2FF21540)= 0
kwrite(5, \0\0\0 tFF S M B 2\0\0\0.., 120)= 120
_select(23, 0x2FF20A08, 0x, 0x, 0x2FF22A08) = 1
kread(5, \0\0\0A6, 4) = 4
kread(5, FF S M B 2\0\0\0\01807C8.., 166) = 166
statx(profile/Cookies/[EMAIL PROTECTED], 0x2FF20AA0, 128, 010)
= 0
kfcntl(15, F_SETLKW, 0x2FF215E0)= 0
kfcntl(15, F_SETLKW, 0x2FF21540)= 0
kwrite(5, \0\0\0 tFF S M B 2\0\0\0.., 120)= 120
_select(23, 0x2FF20A08, 0x, 0x, 0x2FF22A08) = 1
kread(5, \0\0\0A6, 4) = 4
kread(5, FF S M B 2\0\0\0\01807C8.., 166) = 166
statx(profile/Cookies/[EMAIL PROTECTED], 0x2FF20AA0, 128, 010)
= 0
kfcntl(15, F_SETLKW, 0x2FF215E0)= 0
kfcntl(15, F_SETLKW, 0x2FF21540)= 0
kwrite(5, \0\0\0 tFF S M B 2\0\0\0.., 120)= 120
_select(23, 0x2FF20A08, 0x, 0x, 0x2FF22A08) = 1
kread(5, \0\0\0A0, 4) = 4
kread(5, FF S M B 2\0\0\0\01807C8.., 160) = 160
statx(profile/Cookies/[EMAIL PROTECTED], 0x2FF20AA0, 128, 010) = 0
kfcntl(15, F_SETLKW, 0x2FF215E0)= 0
kfcntl(15, F_SETLKW, 0x2FF21540)= 0
kwrite(5, \0\0\0 tFF S M B 2\0\0\0.., 120)= 120
_select(23, 0x2FF20A08, 0x, 0x, 0x2FF22A08) = 1
kread(5, \0\0\0B8, 4) = 4
kread(5, FF S M B 2\0\0\0\01807C8.., 184) = 184
statx(profile/Cookies/[EMAIL PROTECTED], 0x2FF20AA0,
128, 010) = 0
kfcntl(15, F_SETLKW, 0x2FF215E0)= 0
kfcntl(15, F_SETLKW, 0x2FF21540)= 0
kwrite(5, \0\0\0 tFF S M B 2\0\0\0.., 120)= 120
_select(23, 0x2FF20A08, 0x, 0x, 0x2FF22A08) = 1
kread(5, \0\0\09C, 4) = 4
kread(5, FF S M B 2\0\0\0\01807C8.., 156) = 156
statx(profile/Cookies/[EMAIL PROTECTED], 0x2FF20AA0, 128, 010) = 0
kfcntl(15, F_SETLKW, 0x2FF215E0)= 0
kfcntl(15, F_SETLKW, 0x2FF21540)= 0
kwrite(5, \0\0\0 tFF S M B 2\0\0\0.., 120)= 120
_select(23, 0x2FF20A08, 0x, 0x, 0x2FF22A08) = 1
kread(5, \0\0\094, 4) = 4
kread(5, FF S M B 2\0\0\0\01807C8.., 148) = 148
statx(profile/Cookies/[EMAIL PROTECTED], 0x2FF20AA0, 128, 010) = 0
kfcntl(15, F_SETLKW, 0x2FF215E0)= 0
kfcntl(15, F_SETLKW, 0x2FF21540)= 0
kwrite(5, \0\0\0 tFF S M B 2\0\0\0.., 120)= 120
_select(23, 0x2FF20A08, 0x, 0x, 0x2FF22A08) = 1
kread(5, \0\0\09E, 4) = 4
kread(5, FF S M B 2\0\0\0\01807C8.., 158) = 158
statx(profile/Cookies, 0x2FF20AA0, 128, 010) = 0
statx(profile/Cookies/[EMAIL PROTECTED], 0x2FF20AA0, 128, 010) = 0
kfcntl(15, F_SETLKW, 0x2FF215E0)= 0
kfcntl(15, F_SETLKW, 0x2FF21540)= 0
on a logout and the followin on a login:
setreuid(-1, 20644) = 0
getuidx(1)
Re: [Samba] Samba Problem on AIX
On Thu, 16 Feb 2006, [EMAIL PROTECTED] wrote: I've been running Samba3.0.21a on two AIX5.3 servers for several weeks with no major problems. Today, one of the servers stopped working. I received the following message from Windows when I tried to access one of the share drives: What does oslevel -r report? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Problem on AIX
On Thu, 16 Feb 2006, [EMAIL PROTECTED] wrote: An error occurred while reconnecting T: to \\wara01\TSMreports Microsoft Windows Network: This local device name is already in use This connection has not been restored I received this error a couple of times before. But when I cleared out the logs and refreshed the inetd daemon the problem was resolved. However, that did not work today. I went through all the troubleshooting steps and have concluded the following: - Networking software is working - TCP with FTP is working - Samba daemons (nmbd smbd) are running - The daemons are bound to ports (netstat -a ) - inetd.conf lines are correct netbios-ssn stream tcp nowait root /opt/Samba/3.0.21a/sbin/smbd smbd netbios-ns dgram udp waitroot /opt/Samba/3.0.21a/sbin/nmbd nmbd - smbd works with telnet - testparm shows no error messages I've not had a log of success with inetd controlling access to Samba. You should either script the nmbd and smbd startup or use swat. smbd will fork children as necessary. You may also want to look at 3.0.21b based on the release note entries alone. Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] recycle bin
On Tue, 14 Feb 2006, Manish Vashi wrote: I am trying to configure recycle bin on AIX and SUN server. After put the entry for vfs in smb.conf i cannot map drive. My vfs dir location is /export/apps/samba/lib/vfs Samba starts fine ,but when try to map the drive it gives error This is a bug I'm working on for AIX. It's a linker option that I'm testing to make certain it loads the shared object and binds external references correctly. I'm hoping to be done this week. Cheers, Bill === [2006/02/14 10:06:58, 0] lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 528394 (3.0.14a) Please read the appendix Bugs of the Samba HOWTO collection [2006/02/14 10:06:58, 0] lib/fault.c:fault_report(39) === [2006/02/14 10:06:58, 0] lib/util.c:smb_panic2(1495) PANIC: internal error -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba slowdown under load.
System: AIX 5.2 ML-07, Samba 3.0.21a 3.0.21b, Workstations: Win XP Pro SP2. (OpenLDAP 2.3.11, BDB 4.3) Users are in LDAP pdb. Stand alone DC, no winbindd. This system was upgraded from 3.0.20 to 3.0.21a (and later 3.0.21b). I'm looking for a scenario where under heavy load there could be locking contention within Samba Under heavy load, context switches go through the roof and we get hardly any work done. Trussing shows a lot of locks against what appear to be tdb files. (I'm still narrowing down which ones). Now this could be an AIX problem, ML-08 was just released, but stopping smbd and restarting clears the problem for awhile (read the next day). I'm recompiling 3.0.20b and 3.0.20 to see if the problem goes away. This system is production and never showed any symptoms like this in development. The other thing is all the WS's hitting this server are SP2. We have another server with *exact* same setup and XP boxes with only SP1 hitting it and not quite the same degree of load - no problems. I'm hoping this blurb will shake loose any thoughts on changes since 3.0.20 since a log level 10 is practically impossible with the number of machines hitting it at once. I do have a PMR open with IBM and so far they've only suggested APARs for GPFS (which we're not using). Cheers, Bill -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ldap authentication without 'ldap filter' parameter
- Original Message - From: Norbert Gomes [EMAIL PROTECTED] To: samba samba@lists.samba.org Sent: Wednesday, February 08, 2006 5:46 AM Subject: [Samba] ldap authentication without 'ldap filter' parameter Hello I'm trying to update samba from 3.0.11 to 3.0.21 and I noticed that the 'ldap filter' paramater has been removed. After some search, I read that I have to configure nss_ldap. But I don't know how to configure it properly to operate with our LDAP database. Let me explain : We used the 'ldap filter' parameter like this : ldap filter = ((iufmLogin=%u)(gecos=#*)) Well, I understand your position. Tree management can be tough. What you could look at if you are using OpenLDAP is: http://www.openldap.org/software/man.cgi?query=slapo-rwmsektion=5apropos=0manpath=OpenLDAP+2.3-Release This is the rewrite module. It allows you to remap attributes and create conditional changes to client searches and server replies. It works for updates as well, so it's not just smoke and mirrors. This *might* help you out of your jam. I looked at this for our installation (we have a single tree that's used among several DC's with trusts), but with the impending changes for enumerating group RIDs, our own use of group mappings, future AD (read Samba 4) implementation and other political considerations, I've decided to script a tree transform instead. Cheers, Bill Our authentication is based on the 'iufmLogin' attribute (we cannot use the 'uid' attribute) and the gecos has to start with the '#' character for the user to be authenticated. But my problem is that I can't parameter the /etc/ldap.conf file to use these filters. I tried to put this in the /etc/ldap.conf file : pam_filter iufmLogin=%s pam_login_attribute iufmLogin But the system seems to ignore these filters and it only uses the 'uid' attribute when I try the 'getent passwd' command. Can someone explain me how to do this correctly ? Thanks Norbert Gomes -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba on AIX
- Original Message - From: Jim Starke [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, February 02, 2006 12:20 PM Subject: Samba on AIX Hi JoJo, I looked but didn't find an answer to the question I have. Our /opt directory isn't very large and our Volume Group doesn't have enough space to add to it. In the coming months we are budgeting for larger system drives. But on to the question. Can one use softlinks instead of placing it in /opt? For example: ln -s /ssadrive/Samba /opt/Samba I would not do that as the tarball has absolute pathnames and it'll only replace the symlink. What you could do is create a filesytem /opt/Samba on another VG and mount that. Make sure there is a /opt/Samba dir in the /opt filesystem. Overmounting is a clever way to overcome your particularly common scenario of rootvg being too darned small (or overused). I'm copying the list so others can benefit from your scenario. and then place everything over there? I have planty of space on the other drives, it is just that the system drives are pressed for space. Thank you for your work in compiling an AIX version! My pleasure. Enjoy! Cheers, Bill Jim --- James Starke System Administrator Benco Dental 570-825-7781 x7143 [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Increasing samba performance
- Original Message - From: Jeremy Allison [EMAIL PROTECTED] To: Anthony Messina [EMAIL PROTECTED] Cc: samba@lists.samba.org; James Lamanna [EMAIL PROTECTED]; Jeremy Allison [EMAIL PROTECTED] Sent: Wednesday, February 01, 2006 1:53 PM Subject: Re: [Samba] Increasing samba performance On Wed, Feb 01, 2006 at 12:50:44PM -0600, Anthony Messina wrote: Jeremy Allison wrote: On Wed, Feb 01, 2006 at 08:05:28AM -0800, James Lamanna wrote: Hi. Between 2 linux (2.6.11 client and 2.6.14 server) machines connected by a 100Mb link I get samba performance copying a file from the client to the server through a smbmounted share of around 4.2MB/s Is this to be expected? Or can it be improved (and if so, how?) I've tried tweaking SO_(SND/RCV)BUF (after reading numerous articles on samba performance...), but it doesn't seem to have any effect. Unfortunately, I can't use jumbo frames at this moment either. I've tried this with shares on ReiserFS and XFS and there is no difference in the transfer rate. Both machines are not even close to maxxed on cpu (both are at around 10-15% cpu when the transfer is running). Add use sendfile = yes, this should help. Jeremy. can you still use sendfile = yes if some of the things that a samba server shares are nfs v3 mounts from another server? sendfile works if a file can be oplocked. If you're allowing oplocks onto that mounted filesystem then yes it can be used. Jeremy, On my AIX box I'm showing (in truss) send_file() calls for files in shares with oplocks turned off and use sendfile = yes. Cheers, Bill Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: SAMBA on AIX 5.1
- Original Message - From: Antonio Sosa To: samba@lists.samba.org Cc: [EMAIL PROTECTED] Sent: Thursday, January 26, 2006 10:49 AM Subject: SAMBA on AIX 5.1 I installed the binary from http://us2.samba.org/samba/ftp/Binary_Packages/AIX/ Opt-samba-AIX5-3.0.21a.tar.gz Installed fine but when I go to run the samba binaries, this is what I get: Can anyone help - thanks in advanced. What does oslevel -r report? 5100-09 is available at the IBM site and those functions should be supported in that release (I think actually at 06 or 07). http://www-03.ibm.com/servers/eserver/support/unixservers/aixfixes.html Select AIX 5.1 under Maintenance Packages. Cheers, Bill /opt/Samba/3.0.21a/sbin ./nmbd -D [1] 544860 oldpetes: root] /opt/Samba/3.0.21a/sbin exec(): 0509-036 Cannot load program ./nmbd because of the following errors: 0509-130 Symbol resolution failed for nmbd because: 0509-136 Symbol statvfs64 (number 134) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-136 Symbol opendir64 (number 169) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-136 Symbol closedir64 (number 170) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-136 Symbol readdir64 (number 171) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-136 Symbol seekdir64 (number 180) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-136 Symbol telldir64 (number 229) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-192 Examine .loader section symbols with the 'dump -Tv' command. [1] + Done(255) ./nmbd -D oldpetes: root] /opt/Samba/3.0.21a/sbin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Fw: SAMBA on AIX 5.1
forwarding this for AIX people...forgot to CC list D'oh! - Original Message - From: Antonio Sosa To: William Jojo Sent: Thursday, January 26, 2006 12:05 PM Subject: RE: SAMBA on AIX 5.1 Thanks William - I'll try it out. Antonio Sosa C.E.O. Ansotech Inc. We Design Technology Around You Tel: 877-389-8728 Cell: 773-406-3663 From: William Jojo [mailto:[EMAIL PROTECTED] Sent: Thursday, January 26, 2006 11:02 AM To: Antonio Sosa Subject: Re: SAMBA on AIX 5.1 Nope. This is 5.2 not 5.1 :-) You'll need to go to at least 5200-06 (5200-07 is available) Cheers, Bill - Original Message - From: Antonio Sosa To: William Jojo Sent: Thursday, January 26, 2006 11:22 AM Subject: RE: SAMBA on AIX 5.1 oldpetes: root] /opt/Samba/3.0.21a/sbin oslevel -r 5200-04 it appears high enough right? Antonio Sosa C.E.O. Ansotech Inc. We Design Technology Around You Tel: 877-389-8728 Cell: 773-406-3663 -- From: William Jojo [mailto:[EMAIL PROTECTED] Sent: Thursday, January 26, 2006 10:02 AM To: Antonio Sosa; samba@lists.samba.org Subject: Re: SAMBA on AIX 5.1 - Original Message - From: Antonio Sosa To: samba@lists.samba.org Cc: [EMAIL PROTECTED] Sent: Thursday, January 26, 2006 10:49 AM Subject: SAMBA on AIX 5.1 I installed the binary from http://us2.samba.org/samba/ftp/Binary_Packages/AIX/ Opt-samba-AIX5-3.0.21a.tar.gz Installed fine but when I go to run the samba binaries, this is what I get: Can anyone help - thanks in advanced. What does oslevel -r report? 5100-09 is available at the IBM site and those functions should be supported in that release (I think actually at 06 or 07). http://www-03.ibm.com/servers/eserver/support/unixservers/aixfixes.html Select AIX 5.1 under Maintenance Packages. Cheers, Bill /opt/Samba/3.0.21a/sbin ./nmbd -D [1] 544860 oldpetes: root] /opt/Samba/3.0.21a/sbin exec(): 0509-036 Cannot load program ./nmbd because of the following errors: 0509-130 Symbol resolution failed for nmbd because: 0509-136 Symbol statvfs64 (number 134) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-136 Symbol opendir64 (number 169) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-136 Symbol closedir64 (number 170) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-136 Symbol readdir64 (number 171) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-136 Symbol seekdir64 (number 180) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-136 Symbol telldir64 (number 229) is not exported from dependent module /usr/lib/libc.a(shr.o). 0509-192 Examine .loader section symbols with the 'dump -Tv' command. [1] + Done(255) ./nmbd -D oldpetes: root] /opt/Samba/3.0.21a/sbin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 2.2.5 pbedit
- Original Message - From: Antonio Sosa [EMAIL PROTECTED] To: William Jojo [EMAIL PROTECTED]; samba@lists.samba.org Sent: Friday, January 20, 2006 9:58 AM Subject: RE: [Samba] Samba 2.2.5 pbedit Hi all - Tried to install samba 3.0.4.0 on AIX 5.1 from bullsite. So after I installed it, I have the following errors. Can anyone give me some help on fixing them. Many Thanks. exec(): 0509-036 Cannot load program /usr/local/samba/sbin/smbd because of the following errors: 0509-150 Dependent module /usr/lib/libldap.a(libldap.so.2) could not be loaded. 0509-153 File /usr/lib/libldap.a is not an archive or the file could not be read properly. 0509-026 System error: Cannot run a file that does not have a valid format. Ok, I see the problem now. I would suggest you steer away from the Bull software. It's way too old anyway. http://us2.samba.org/samba/ftp/Binary_Packages/AIX/ This will work for you. Cheers, Bill Where can I get the libs. -Original Message- From: William Jojo [mailto:[EMAIL PROTECTED] Sent: Thursday, January 19, 2006 8:23 PM To: Antonio Sosa; samba@lists.samba.org Subject: Re: [Samba] Samba 2.2.5 pbedit - Original Message - From: Antonio Sosa [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Thursday, January 19, 2006 4:25 PM Subject: RE: [Samba] Samba 2.2.5 pbedit I have tried to upgrade to 3.0 on AIX but the binaries on the site require ldap on the machine and ldap is not installed and they have no plans to install it. I also do not have the luxury of building my own binary as there is no compilers on the server in question. It does not require LDAP. Trust me :-) They are LDAP capable and the library support is statically linked, but you may use the old flat smbpasswd file if you choose. See passdb backend global value in smb.conf.5: http://us1.samba.org/samba/docs/man/manpages-3/smb.conf.5.html Also check out the HowTo collection http://us1.samba.org/samba/docs/man/Samba3-HOWTO/ Cheers, Bill -Original Message- From: William Jojo [mailto:[EMAIL PROTECTED] Sent: Thursday, January 19, 2006 3:22 PM To: Antonio Sosa; samba@lists.samba.org Subject: Re: [Samba] Samba 2.2.5 pbedit - Original Message - From: Antonio Sosa [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Thursday, January 19, 2006 4:18 PM Subject: [Samba] Samba 2.2.5 pbedit Hi all Have an installation that is having problems using samba 2.2.5 on AIX 5.1 When I try to use the pdbedit command I get the following What I ultimately want to do is have samba expire and force the users to change their passwords periodically. I realize that it looks like I am missing a lib here but which one and where do I get it. The company I work for is strict on installations on the machine so I need an AIX rpm, smitty install or off of AIX cd. Much thanks to all. 2.2.5 is pretty old. Have you considered upgrading to 3.0.20b or 3.0.21a (latest)? There are AIX binaries on the the Samba mirrors and your posix_aio issue is addressed in the README file in the same directory. Cheers, Bill root] /usr/local/bin pdbedit -P maximum password age -C 90 exec(): 0509-036 Cannot load program pdbedit because of the following errors: 0509-130 Symbol resolution failed for /usr/lib/libc.a(posix_aio.o) because: 0509-136 Symbol _posix_kaio_rdwr (number 2) is not exported from dependent module /unix. 0509-136 Symbol _posix_listio (number 3) is not exported from dependent module /unix. 0509-136 Symbol _posix_acancel (number 4) is not exported from dependent module /unix. 0509-136 Symbol _posix_iosuspend (number 5) is not exported from dependent module /unix. 0509-136 Symbol _posix_aio_nwait (number 6) is not exported from dependent module /unix. 0509-136 Symbol _posix_iofsync (number 7) is not exported from dependent module /unix. 0509-192 Examine .loader section symbols with the 'dump -Tv' command. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 2.2.5 pbedit
- Original Message - From: Antonio Sosa [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Thursday, January 19, 2006 4:18 PM Subject: [Samba] Samba 2.2.5 pbedit Hi all Have an installation that is having problems using samba 2.2.5 on AIX 5.1 When I try to use the pdbedit command I get the following What I ultimately want to do is have samba expire and force the users to change their passwords periodically. I realize that it looks like I am missing a lib here but which one and where do I get it. The company I work for is strict on installations on the machine so I need an AIX rpm, smitty install or off of AIX cd. Much thanks to all. 2.2.5 is pretty old. Have you considered upgrading to 3.0.20b or 3.0.21a (latest)? There are AIX binaries on the the Samba mirrors and your posix_aio issue is addressed in the README file in the same directory. Cheers, Bill root] /usr/local/bin pdbedit -P maximum password age -C 90 exec(): 0509-036 Cannot load program pdbedit because of the following errors: 0509-130 Symbol resolution failed for /usr/lib/libc.a(posix_aio.o) because: 0509-136 Symbol _posix_kaio_rdwr (number 2) is not exported from dependent module /unix. 0509-136 Symbol _posix_listio (number 3) is not exported from dependent module /unix. 0509-136 Symbol _posix_acancel (number 4) is not exported from dependent module /unix. 0509-136 Symbol _posix_iosuspend (number 5) is not exported from dependent module /unix. 0509-136 Symbol _posix_aio_nwait (number 6) is not exported from dependent module /unix. 0509-136 Symbol _posix_iofsync (number 7) is not exported from dependent module /unix. 0509-192 Examine .loader section symbols with the 'dump -Tv' command. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
