[Samba] Samba problems with versions = 3.0.25b
Hi all, I had a samba-server as a member in an Active Directory (security = DOMAIN) running 3.0.24 and everything was fine (system is RedHat Enterprise 4). This server is in domain A and all my users accessing this server are in another domain B (with trust relationship between A and B). During the latest RedHat updates I got a newer Samba-version (3.0.25b) and the problems started. From time to time no user from domain B can access shares on my server! ok, so I decided to update Samba to the most recent version (3.0.27a, self-built packages with makerpms.sh) and the problem is still the same! So the only possibility I have is currently downgrading the Server back to Samba 3.0.24. Any Idea what changes this problem could cause? thanks a lot, christian P.S.: as this is a very busy life-server I currently have no possibility to make traces with version 3.0.25b or above... but if really neccessary I could stop it for some time to get the needed traces (please tell me which log level is needed...) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba problems
Hello, I am running Solaris 10 on a Ultra Sparc 10 and I am having problems with the access to the share directory for each user. I am able to see the path but when I try to access and type my ID and Password I can I get an error message that I have permission issues and can not access the network. I want to use the /export/home/each_user_homedir as their share directory for each user. Is Swat a good idea to use? I tried both ways following instructions I found on the internet and with Swat but same result. Any help is really appreciated. Regards, Mario -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba problems
What happens when you run which smbmnt I'm not a fedora core user - does it come with smbfs standard? if not you will need to install the package. If these fail your $PATH may be messed up. try /usr/bin/smbmnt to see if the binary exists. Mark On Sat, Apr 07, 2007 at 04:55:55PM -0400, Jim Mills wrote: I have a question about samba. I found the smbmnt documentation but my fedora core 6 doesn't seem to recognize the command. Is there something Else I need to check to see why this is the case? The swat program seems to think things are OK. Thanks Jim -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba problems
I have a question about samba. I found the smbmnt documentation but my fedora core 6 doesn't seem to recognize the command. Is there something Else I need to check to see why this is the case? The swat program seems to think things are OK. Thanks Jim -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba problems. accounts expire after a hour, but work after reset
Hi Edmundo, here is the situation: we have a PDC and BDC running samba 3.0.23d we have a Application Server running samba 3.0.24 + winbind. all have fixed (static) IP addresses in the 192.168.2.X segment. (no dhcp or whatever) with resetting, i ment a restart of the samba processes (sorry i was a little un clear) some time's i need to remove the .tdb files (except the secrets.tdb) what i noticed is that the crash/bug happens at peak hour (150 pc's and 100 users) so either samba has too many connections (??) or some other process can't handle it (i was thinking of the mysql deamon, but he has max connections set to 1000, so that should be enough) might be the fedora core too ?? so back to testing, i hope the winbind server will keep up today.. btw, no caching name server runnig in the domain... Cheers, and thx for da input. Edmundo Valle Neto wrote: Collen Blijenberg escreveu: Hi Edmundo, the main problem we have here, is that all out of the blue, the samba PDC and BDC are giving error's. like TRUST DOMAIN FAILED, or USER AUTH FAILED, MACHINE HAS NO ACCOUNT. things like that. but the funny part is, there is no reason for the servers to do that, they run for a few hours (sometimes a day) and then start spitting out these error's. after resetting the PDC, all turns back to normal. and those error's go away, and samba function as it should be. but then after a while, it's back to the error's again. we do use however the pdb-sql backend for storing the usernames and all... in that period, of error's the sql get queried. so the backend does work. and i can't find anny error's generated from the sql backend. also the sql server is accessible in those error times. (we use it for nss-mysql aswell) The only similar problem that happened to me once was a problem with an unconfigured network (that was deactivated) in the dhcp server that was running in the same samba server, and I dont remember why it happened. You said resetting, restarting samba doesn't make it work? Have you sure that the problem is in samba? so either the migration part went wrong (the sid uid part +1000), or samba has a serious bug in the passwd plugin backend ?? the winbindd part are for some other servers in the domain. Where is your winbindd daemon running? In that same server? Just a guess, are you using nscd? our domain is only accessible for domain accounts, so no guests or other accounts here. also all machines have registered to the domain no anonymously accounts and all. it's really driving me crazy this bug. cheers Collen Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba problems. accounts expire after a hour, but work after reset
Hi Edmundo, the main problem we have here, is that all out of the blue, the samba PDC and BDC are giving error's. like TRUST DOMAIN FAILED, or USER AUTH FAILED, MACHINE HAS NO ACCOUNT. things like that. but the funny part is, there is no reason for the servers to do that, they run for a few hours (sometimes a day) and then start spitting out these error's. after resetting the PDC, all turns back to normal. and those error's go away, and samba function as it should be. but then after a while, it's back to the error's again. we do use however the pdb-sql backend for storing the usernames and all... in that period, of error's the sql get queried. so the backend does work. and i can't find anny error's generated from the sql backend. also the sql server is accessible in those error times. (we use it for nss-mysql aswell) so either the migration part went wrong (the sid uid part +1000), or samba has a serious bug in the passwd plugin backend ?? the winbindd part are for some other servers in the domain. our domain is only accessible for domain accounts, so no guests or other accounts here. also all machines have registered to the domain no anonymously accounts and all. it's really driving me crazy this bug. cheers Collen Edmundo Valle Neto wrote: Collen Blijenberg escreveu: Hmm.. just a few last questions. the bug came back the other day, after i fired up some machine that uses winbindd for apache authentication. (no smb processes here). downside is that it's winbindd from samba 3.0.11. winbindd from samba 3.0.24 has some strange issues with that machine, for every page it starts re authing again resulting in asking username and password again, and again and again and . i think the problem might be there. Sorry, I don't use winbind. the part i don't get is the 'resolve unmapped account' ?? how can you have unmapped accounts ?? isn't it so that all account that don't have entries in the user database (or machine) are rejected ?? so don't need anny auth at all ? I ever used LDAP, so, for me the scripts ever creates all needed stuff. But some parts of the documentation makes mention of the algorithmic rid being used on groups that wasn't mapped by net groupmap for example. so basically, i can leave the old sid's and posix uid alone, but need to monitor the sid and uid when creating new users and machines, coz they can collide with the existing not standard uid and sid's . If you changed the ids as you said in the last e-mail that collisions must not happens. great, back to debuging again... thx for da input. Collen I didn't understood very well whats your problem, you said in the first e-mail that accounts keep expiring. All them? Clients get some estrange return error after some time? When that happens listing shares in the server shell with an user smbclient -L \\servername -Usomeuser%password or anonymously smbclient -L localhost -U% at least works? Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba problems. accounts expire after a hour, but work after reset
Collen Blijenberg escreveu: Hi Edmundo, the main problem we have here, is that all out of the blue, the samba PDC and BDC are giving error's. like TRUST DOMAIN FAILED, or USER AUTH FAILED, MACHINE HAS NO ACCOUNT. things like that. but the funny part is, there is no reason for the servers to do that, they run for a few hours (sometimes a day) and then start spitting out these error's. after resetting the PDC, all turns back to normal. and those error's go away, and samba function as it should be. but then after a while, it's back to the error's again. we do use however the pdb-sql backend for storing the usernames and all... in that period, of error's the sql get queried. so the backend does work. and i can't find anny error's generated from the sql backend. also the sql server is accessible in those error times. (we use it for nss-mysql aswell) The only similar problem that happened to me once was a problem with an unconfigured network (that was deactivated) in the dhcp server that was running in the same samba server, and I dont remember why it happened. You said resetting, restarting samba doesn't make it work? Have you sure that the problem is in samba? so either the migration part went wrong (the sid uid part +1000), or samba has a serious bug in the passwd plugin backend ?? the winbindd part are for some other servers in the domain. Where is your winbindd daemon running? In that same server? Just a guess, are you using nscd? our domain is only accessible for domain accounts, so no guests or other accounts here. also all machines have registered to the domain no anonymously accounts and all. it's really driving me crazy this bug. cheers Collen Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba problems. accounts expire after a hour, but work after reset
Hmm.. just a few last questions. the bug came back the other day, after i fired up some machine that uses winbindd for apache authentication. (no smb processes here). downside is that it's winbindd from samba 3.0.11. winbindd from samba 3.0.24 has some strange issues with that machine, for every page it starts re authing again resulting in asking username and password again, and again and again and . i think the problem might be there. the part i don't get is the 'resolve unmapped account' ?? how can you have unmapped accounts ?? isn't it so that all account that don't have entries in the user database (or machine) are rejected ?? so don't need anny auth at all ? so basically, i can leave the old sid's and posix uid alone, but need to monitor the sid and uid when creating new users and machines, coz they can collide with the existing not standard uid and sid's . great, back to debuging again... thx for da input. Collen Edmundo Valle Neto wrote: Collen Blijenberg escreveu: Sorry, forgot something, indeed there was a mixup with the migrating, old posix uid were differed than the once we use now. a changed the auto_increment value of the user.uid table from mysql. i took the highest sid (5620) subbed 1000 and /2 and used that for auto_increment value.. so now my new user accounts are in sync with samba RID's again. all i'm interested in now is the once i already have and use... i have a heap of accounts that have a posix uid, that doesn't fit the rules Edmundo explained (1000 + (2*uid)) it looks like all works fine, but i would like to take the advise of the experts... is the rule only active when creating new accounts, or does samba use that rule also with in daily basic things ? (like logging in, or accessing shares ??) does it harm to have a posix uid 1050 and a SID ending with -1299 ? Cheers Collen ... [cut] That I know, this algorithmic mapping is made to prevent clashes and prevent the use of well know RIDs by Windows domains. I don't know all the situations that the algorithmic mapping will be used in addiction of the creation of new accounts or to resolve unmapped accounts. (Someone correct me if Im wrong). But I would guess that if your accounts are being resolved (SID-GID and SID-UID) (and if I remember right those mappings are made inside the base used and/or inside groupmap_idmap.tdb, when you are not using winbind) you will not have any problems beyond those related with permissions by lost/changed ids after used (IF that happened). Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba problems. accounts expire after a hour, but work after reset
He thx Edmundo, hmm, basically i did a migration. we replaced an old samba server after 4 years, and made a new one. i exported the samba user accounts with the -i and -e option in pdbedit. the old exported samba was version 3.0.11. all i did was transfered the domain SID to the new pdc. exported the users and machine accounts. imported all in the new PDC, added the posix users, mapped some groups with net map. et voila.. i left all the old .tdb files and all on the old machine, and let the new PDC handle it. it looks if all works fine, but adding users and machines gives me the head ace.. isn't there anny way to influence the SID making process ?? some how i think that changing the algorithmic rid base option isn't going to work... i did some other tests as well to day, but it keeps on generating existing SID's (tried other machines) what did i forget to do with the migration ??? that makes the SID's screw up.. ? Cheers, Collen Edmundo Valle Neto wrote: Collen Blijenberg escreveu: Thx Felipe, after a week debugging, i found the problem!! there was a mix up with SID's. i had 5 machines and username with the same SID including the PDC. Would be a nice thing if you discover why that happened. Samba generates the RID part of the SID algorithmically (1000 + (2 x uid) for user accounts, and 1001 + (2 x gid) for groups), if the uid is different in these accounts the RID should be different too. but there is something funny were i need some help with, if i make a new user or machine account, samba generate the SID automatically. i saw, that my server doesn't look at existing SID's. No it doesn't, that's right. It's not needed, calculating RIDs that way will not make clashes. how can i let samba make SID's after a specified number ?? my problem at the moment is that if i make a new user, samba generate an existing SID, and there for trouble arise! Well, normally it will not make clashes, unless you already have a base with SIDs calculated, who knows how. You can change the algorithmic rid base option that defaults to 1000 to another value raising the values that will make RIDs. (if you have unmapped accounts, it will have their SIDs changed too, as the algorithm will be different, if I remember right in samba 3.0.23c theres some changes about that). In some distributions, you can raise the uid/gids range. That way would make higher RIDs be generated too. :) example: current last SID in user database: S-1-5-21-1968991162-2130249723-1959552931-5462 if i make a new user samba will use: S-1-5-21-1968991162-2130249723-1959552931-5410 Do you use a database server to store your samba users right? Well, I never used it, I don't know how exactly it stores information. As I don't know how do you have created your accounts or how much have you messed with them. Normally uids are not reused in posix accounts and samba user/group accounts picks up even/odd RID numbers, not making that probably future clash as you are seeing. :) so basically it's all about the last 4 digits! can i alter a .tdb file ??? (if so witch one??) I can't say that you can't, there's some tools that dump/change/add/etc contents of .tdb files, you can even dump them and grep to find where's the information that you are looking for, but keep in mind that probably you will mess up with any reference to the SID being changed (beeing it ACLs, profiles, or whatever). The last time that I blowed up my base with repeated SIDs (took me a while to discover why users where getting permissions that they shouldn't, it was the first time I used an LDAP base importing the old base and I changed the code that make the SIDs in the scripts that creates the accounts) I deleted all these accounts, raised the base RID, recreated them and changed permissions with shell scripts. all i like is samba to start making SID's after that -5462 number !!! Cheers, Collen ... [cut] I hope it helps. Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba problems after latest Solaris 10 Patches
I am unable to setup printers on my samba system any long after I updated to the latest Solaris 10 Patch cluster. What I get in my log files all the time is: [2007/03/07 11:58:19, 2, effective(60001, 60001), real(0, 0)] rpc_server/srv_spoolss_nt.c:find_printer_index_by_hnd(263) find_printer_index_by_hnd: Printer handle not found: _spoolss_writeprinter: Invalid handle (OTHER:11687:16175) [2007/03/07 11:58:19, 2, effective(60001, 60001), real(0, 0)] rpc_server/srv_spoolss_nt.c:find_printer_index_by_hnd(263) find_printer_index_by_hnd: Printer handle not found: _spoolss_writeprinter: Invalid handle (OTHER:11068:16175) Plus when I do this on windows I get: \\lpserver\print$ The specified network name is no longer available. and the log files gives: [2007/03/07 11:59:38, 0, effective(0, 0), real(0, 0)] lib/fault.c:fault_report(41) === [2007/03/07 11:59:38, 0, effective(0, 0), real(0, 0)] lib/fault.c:fault_report(42) INTERNAL ERROR: Signal 10 in pid 16260 (3.0.24) Please read the Trouble-Shooting section of the Samba3-HOWTO [2007/03/07 11:59:38, 0, effective(0, 0), real(0, 0)] lib/fault.c:fault_report(44) From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf [2007/03/07 11:59:38, 0, effective(0, 0), real(0, 0)] lib/fault.c:fault_report(45) === [2007/03/07 11:59:38, 0, effective(0, 0), real(0, 0)] lib/util.c:smb_panic(1599) PANIC (pid 16260): internal error [2007/03/07 11:59:38, 0, effective(0, 0), real(0, 0)] lib/util.c:log_stack_trace(1756) unable to produce a stack trace on this platform [2007/03/07 11:59:38, 0, effective(0, 0), real(0, 0)] lib/fault.c:dump_core(173) dumping core in /usr/local/samba3024/var/cores/smbd [2007/03/07 11:59:39, 2, effective(106, 10), real(0, 0)] lib/access.c:check_access(323) I will try to load samba on another Solaris 10 machine and see what happens plus see what patch did IT!. Any pointers Andrew -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba problems. accounts expire after a hour, but work after reset
Sorry, forgot something, indeed there was a mixup with the migrating, old posix uid were differed than the once we use now. a changed the auto_increment value of the user.uid table from mysql. i took the highest sid (5620) subbed 1000 and /2 and used that for auto_increment value.. so now my new user accounts are in sync with samba RID's again. all i'm interested in now is the once i already have and use... i have a heap of accounts that have a posix uid, that doesn't fit the rules Edmundo explained (1000 + (2*uid)) it looks like all works fine, but i would like to take the advise of the experts... is the rule only active when creating new accounts, or does samba use that rule also with in daily basic things ? (like logging in, or accessing shares ??) does it harm to have a posix uid 1050 and a SID ending with -1299 ? Cheers Collen Collen Blijenberg wrote: He thx Edmundo, hmm, basically i did a migration. we replaced an old samba server after 4 years, and made a new one. i exported the samba user accounts with the -i and -e option in pdbedit. the old exported samba was version 3.0.11. all i did was transfered the domain SID to the new pdc. exported the users and machine accounts. imported all in the new PDC, added the posix users, mapped some groups with net map. et voila.. i left all the old .tdb files and all on the old machine, and let the new PDC handle it. it looks if all works fine, but adding users and machines gives me the head ace.. isn't there anny way to influence the SID making process ?? some how i think that changing the algorithmic rid base option isn't going to work... i did some other tests as well to day, but it keeps on generating existing SID's (tried other machines) what did i forget to do with the migration ??? that makes the SID's screw up.. ? Cheers, Collen Edmundo Valle Neto wrote: Collen Blijenberg escreveu: Thx Felipe, after a week debugging, i found the problem!! there was a mix up with SID's. i had 5 machines and username with the same SID including the PDC. Would be a nice thing if you discover why that happened. Samba generates the RID part of the SID algorithmically (1000 + (2 x uid) for user accounts, and 1001 + (2 x gid) for groups), if the uid is different in these accounts the RID should be different too. but there is something funny were i need some help with, if i make a new user or machine account, samba generate the SID automatically. i saw, that my server doesn't look at existing SID's. No it doesn't, that's right. It's not needed, calculating RIDs that way will not make clashes. how can i let samba make SID's after a specified number ?? my problem at the moment is that if i make a new user, samba generate an existing SID, and there for trouble arise! Well, normally it will not make clashes, unless you already have a base with SIDs calculated, who knows how. You can change the algorithmic rid base option that defaults to 1000 to another value raising the values that will make RIDs. (if you have unmapped accounts, it will have their SIDs changed too, as the algorithm will be different, if I remember right in samba 3.0.23c theres some changes about that). In some distributions, you can raise the uid/gids range. That way would make higher RIDs be generated too. :) example: current last SID in user database: S-1-5-21-1968991162-2130249723-1959552931-5462 if i make a new user samba will use: S-1-5-21-1968991162-2130249723-1959552931-5410 Do you use a database server to store your samba users right? Well, I never used it, I don't know how exactly it stores information. As I don't know how do you have created your accounts or how much have you messed with them. Normally uids are not reused in posix accounts and samba user/group accounts picks up even/odd RID numbers, not making that probably future clash as you are seeing. :) so basically it's all about the last 4 digits! can i alter a .tdb file ??? (if so witch one??) I can't say that you can't, there's some tools that dump/change/add/etc contents of .tdb files, you can even dump them and grep to find where's the information that you are looking for, but keep in mind that probably you will mess up with any reference to the SID being changed (beeing it ACLs, profiles, or whatever). The last time that I blowed up my base with repeated SIDs (took me a while to discover why users where getting permissions that they shouldn't, it was the first time I used an LDAP base importing the old base and I changed the code that make the SIDs in the scripts that creates the accounts) I deleted all these accounts, raised the base RID, recreated them and changed permissions with shell scripts. all i like is samba to start making SID's after that -5462 number !!! Cheers, Collen ... [cut] I hope it helps. Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the
Re: [Samba] Samba problems after latest Solaris 10 Patches
On Wed, Mar 07, 2007 at 12:03:59PM +, Andrew Watkins wrote: I am unable to setup printers on my samba system any long after I updated to the latest Solaris 10 Patch cluster. What I get in my log files all the time is: [2007/03/07 11:58:19, 2, effective(60001, 60001), real(0, 0)] rpc_server/srv_spoolss_nt.c:find_printer_index_by_hnd(263) find_printer_index_by_hnd: Printer handle not found: _spoolss_writeprinter: Invalid handle (OTHER:11687:16175) [2007/03/07 11:58:19, 2, effective(60001, 60001), real(0, 0)] rpc_server/srv_spoolss_nt.c:find_printer_index_by_hnd(263) find_printer_index_by_hnd: Printer handle not found: _spoolss_writeprinter: Invalid handle (OTHER:11068:16175) Plus when I do this on windows I get: \\lpserver\print$ The specified network name is no longer available. and the log files gives: [2007/03/07 11:59:38, 0, effective(0, 0), real(0, 0)] lib/fault.c:fault_report(41) === [2007/03/07 11:59:38, 0, effective(0, 0), real(0, 0)] lib/fault.c:fault_report(42) INTERNAL ERROR: Signal 10 in pid 16260 (3.0.24) Please read the Trouble-Shooting section of the Samba3-HOWTO Ouch - that's a panic. Please add the line : panic action = /bin/sleep 9 to the [global] section of your smb.conf, reproduce the problem and then gdb attach to the parent process of the sleep and post a backtrace. It'd also help if smbd was recompiled with -g. Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba problems. accounts expire after a hour, but work after reset
Collen Blijenberg escreveu: Sorry, forgot something, indeed there was a mixup with the migrating, old posix uid were differed than the once we use now. a changed the auto_increment value of the user.uid table from mysql. i took the highest sid (5620) subbed 1000 and /2 and used that for auto_increment value.. so now my new user accounts are in sync with samba RID's again. all i'm interested in now is the once i already have and use... i have a heap of accounts that have a posix uid, that doesn't fit the rules Edmundo explained (1000 + (2*uid)) it looks like all works fine, but i would like to take the advise of the experts... is the rule only active when creating new accounts, or does samba use that rule also with in daily basic things ? (like logging in, or accessing shares ??) does it harm to have a posix uid 1050 and a SID ending with -1299 ? Cheers Collen ... [cut] That I know, this algorithmic mapping is made to prevent clashes and prevent the use of well know RIDs by Windows domains. I don't know all the situations that the algorithmic mapping will be used in addiction of the creation of new accounts or to resolve unmapped accounts. (Someone correct me if Im wrong). But I would guess that if your accounts are being resolved (SID-GID and SID-UID) (and if I remember right those mappings are made inside the base used and/or inside groupmap_idmap.tdb, when you are not using winbind) you will not have any problems beyond those related with permissions by lost/changed ids after used (IF that happened). Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba problems after latest Solaris 10 Patches
Can I check how to get this information, since I do not seem to get the right info. 1) ./configure --enable-debug 2) add 'panic action = /bin/sleep 9' to smb.conf 3) run samba in normal may and then locate my PID i.e. smbstatus |grep andrew 4) gdb /usr/local/samba/sbin/smbd PID 5) gdb backtrace #0 0xfefc19dc in _waitid () from /lib/libc.so.1 #1 0xfef68414 in _waitpid () from /lib/libc.so.1 #2 0xfefb48ec in waitpid () from /lib/libc.so.1 #3 0xfefa7f34 in system () from /lib/libc.so.1 #4 0x003339bc in ?? () #5 0x003339bc in ?? () (gdb) The program is running. Quit anyway (and detach it)? (y or n) y This does not seem correct? Andrew Ouch - that's a panic. Please add the line : panic action = /bin/sleep 9 to the [global] section of your smb.conf, reproduce the problem and then gdb attach to the parent process of the sleep and post a backtrace. It'd also help if smbd was recompiled with -g. Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba problems after latest Solaris 10 Patches
On Wed, Mar 07, 2007 at 11:45:54PM +, Andrew Watkins wrote: Can I check how to get this information, since I do not seem to get the right info. 1) ./configure --enable-debug 2) add 'panic action = /bin/sleep 9' to smb.conf 3) run samba in normal may and then locate my PID i.e. smbstatus |grep andrew 4) gdb /usr/local/samba/sbin/smbd PID 5) gdb backtrace #0 0xfefc19dc in _waitid () from /lib/libc.so.1 #1 0xfef68414 in _waitpid () from /lib/libc.so.1 #2 0xfefb48ec in waitpid () from /lib/libc.so.1 #3 0xfefa7f34 in system () from /lib/libc.so.1 #4 0x003339bc in ?? () #5 0x003339bc in ?? () (gdb) The program is running. Quit anyway (and detach it)? (y or n) y This does not seem correct? Well it might be if the stack got smashed Are you sure it's being compiled with -g ? You can also try getting a debug level 10 log which will at least show where it went down. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba problems. accounts expire after a hour, but work after reset
Thx Felipe, after a week debugging, i found the problem!! there was a mix up with SID's. i had 5 machines and username with the same SID including the PDC. but there is something funny were i need some help with, if i make a new user or machine account, samba generate the SID automatically. i saw, that my server doesn't look at existing SID's. how can i let samba make SID's after a specified number ?? my problem at the moment is that if i make a new user, samba generate an existing SID, and there for trouble arise! example: current last SID in user database: S-1-5-21-1968991162-2130249723-1959552931-5462 if i make a new user samba will use: S-1-5-21-1968991162-2130249723-1959552931-5410 so basically it's all about the last 4 digits! can i alter a .tdb file ??? (if so witch one??) all i like is samba to start making SID's after that -5462 number !!! Cheers, Collen Felipe Augusto van de Wiel wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/28/2007 10:11 AM, Collen Blijenberg wrote: Hello I'm having some strange problems with samba 3.0.23d (PDC) on my FC6 Hi Collen! if i start samba, everything works fine, but after an hour orso(some times 2 hours if there is not mutch traffic) machines and user accounts start expiring. i don't know why, but it is ?! after i do a restart, samba comes up and works again. i checked the mysql server (coz' i use pdb-sql as backend) but the sql query's get executed and value's are returned. (even if goes into bug-mode) so that part works ok!, all i can think of is that tdb files get corrupted ?? That's strange. Are you using Policy for you domain? Like the length of the password, time before user can change password and so on. the funny part is that i also have a BDC running the same samba version and sql version, and that one has no prob's ad all (only the smb.conf is differed and the netbios name) but on the counter part, the bdc isn't really doing anything, ot's not serving shares or printers actively.. some input would be nice, coz' i really have no idea where to look... ??? Can you provide logs when your server is working? That could help diagnose the problem. Kind regards, - -- Felipe Augusto van de Wiel [EMAIL PROTECTED] Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFF5usCCj65ZxU4gPQRAjF0AJ0bU9di1VckV0pmvKEj6b/ouEuRNwCfenYu jz79l+zzDiTyYu6GRwpsxug= =3R6i -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba problems. accounts expire after a hour, but work after reset
Collen Blijenberg escreveu: Thx Felipe, after a week debugging, i found the problem!! there was a mix up with SID's. i had 5 machines and username with the same SID including the PDC. Would be a nice thing if you discover why that happened. Samba generates the RID part of the SID algorithmically (1000 + (2 x uid) for user accounts, and 1001 + (2 x gid) for groups), if the uid is different in these accounts the RID should be different too. but there is something funny were i need some help with, if i make a new user or machine account, samba generate the SID automatically. i saw, that my server doesn't look at existing SID's. No it doesn't, that's right. It's not needed, calculating RIDs that way will not make clashes. how can i let samba make SID's after a specified number ?? my problem at the moment is that if i make a new user, samba generate an existing SID, and there for trouble arise! Well, normally it will not make clashes, unless you already have a base with SIDs calculated, who knows how. You can change the algorithmic rid base option that defaults to 1000 to another value raising the values that will make RIDs. (if you have unmapped accounts, it will have their SIDs changed too, as the algorithm will be different, if I remember right in samba 3.0.23c theres some changes about that). In some distributions, you can raise the uid/gids range. That way would make higher RIDs be generated too. :) example: current last SID in user database: S-1-5-21-1968991162-2130249723-1959552931-5462 if i make a new user samba will use: S-1-5-21-1968991162-2130249723-1959552931-5410 Do you use a database server to store your samba users right? Well, I never used it, I don't know how exactly it stores information. As I don't know how do you have created your accounts or how much have you messed with them. Normally uids are not reused in posix accounts and samba user/group accounts picks up even/odd RID numbers, not making that probably future clash as you are seeing. :) so basically it's all about the last 4 digits! can i alter a .tdb file ??? (if so witch one??) I can't say that you can't, there's some tools that dump/change/add/etc contents of .tdb files, you can even dump them and grep to find where's the information that you are looking for, but keep in mind that probably you will mess up with any reference to the SID being changed (beeing it ACLs, profiles, or whatever). The last time that I blowed up my base with repeated SIDs (took me a while to discover why users where getting permissions that they shouldn't, it was the first time I used an LDAP base importing the old base and I changed the code that make the SIDs in the scripts that creates the accounts) I deleted all these accounts, raised the base RID, recreated them and changed permissions with shell scripts. all i like is samba to start making SID's after that -5462 number !!! Cheers, Collen ... [cut] I hope it helps. Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba problems. accounts expire after a hour, but work after reset
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/28/2007 10:11 AM, Collen Blijenberg wrote: Hello I'm having some strange problems with samba 3.0.23d (PDC) on my FC6 Hi Collen! if i start samba, everything works fine, but after an hour orso(some times 2 hours if there is not mutch traffic) machines and user accounts start expiring. i don't know why, but it is ?! after i do a restart, samba comes up and works again. i checked the mysql server (coz' i use pdb-sql as backend) but the sql query's get executed and value's are returned. (even if goes into bug-mode) so that part works ok!, all i can think of is that tdb files get corrupted ?? That's strange. Are you using Policy for you domain? Like the length of the password, time before user can change password and so on. the funny part is that i also have a BDC running the same samba version and sql version, and that one has no prob's ad all (only the smb.conf is differed and the netbios name) but on the counter part, the bdc isn't really doing anything, ot's not serving shares or printers actively.. some input would be nice, coz' i really have no idea where to look... ??? Can you provide logs when your server is working? That could help diagnose the problem. Kind regards, - -- Felipe Augusto van de Wiel [EMAIL PROTECTED] Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFF5usCCj65ZxU4gPQRAjF0AJ0bU9di1VckV0pmvKEj6b/ouEuRNwCfenYu jz79l+zzDiTyYu6GRwpsxug= =3R6i -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba problems. accounts expire after a hour, but work after reset
Hello I'm having some strange problems with samba 3.0.23d (PDC) on my FC6 if i start samba, everything works fine, but after an hour orso(some times 2 hours if there is not mutch traffic) machines and user accounts start expiring. i don't know why, but it is ?! after i do a restart, samba comes up and works again. i checked the mysql server (coz' i use pdb-sql as backend) but the sql query's get executed and value's are returned. (even if goes into bug-mode) so that part works ok!, all i can think of is that tdb files get corrupted ?? the funny part is that i also have a BDC running the same samba version and sql version, and that one has no prob's ad all (only the smb.conf is differed and the netbios name) but on the counter part, the bdc isn't really doing anything, ot's not serving shares or printers actively.. some input would be nice, coz' i really have no idea where to look... ??? Thx, Collen I get error's like these: --- [2007/02/27 09:48:26, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/02/27 09:48:26, 5] auth/auth_util.c:is_trusted_domain(2020) is_trusted_domain: Checking for domain trust with [JORDANET] [2007/02/27 09:48:26, 5] passdb/secrets.c:secrets_fetch_trusted_domain_password(340) secrets_fetch failed! [2007/02/27 09:48:26, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/02/27 09:48:26, 10] lib/gencache.c:gencache_get(329) Cache entry with key = TDOM/JORDANET couldn't be found [2007/02/27 09:48:26, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(184) no entry for trusted domain JORDANET found. [2007/02/27 09:48:26, 5] auth/auth_util.c:make_user_info(75) attempting to make a user_info for () [2007/02/27 09:48:26, 5] auth/auth_util.c:make_user_info(85) making strings for 's user_info struct === [2007/02/27 09:48:42, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 [2007/02/27 09:48:42, 0] rpc_server/srv_netlog_nt.c:get_md4pw(258) get_md4pw: Workstation C6-2$: account is not a trust account [2007/02/27 09:48:42, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(461) _net_auth2: failed to get machine password for account C6-2$: NT_STATUS_NO_TRUST_SAM_ACCOUNT [2007/02/27 09:48:42, 5] rpc_parse/parse_prs.c:prs_debug(84) 00 net_io_r_auth_2 = [2007/02/27 12:09:16, 3] auth/auth.c:check_ntlm_password(221) check_ntlm_password: Checking password for unmapped user [EMAIL PROTECTED] with the new password interface [2007/02/27 12:09:16, 3] auth/auth.c:check_ntlm_password(224) check_ntlm_password: mapped user is: [EMAIL PROTECTED] [2007/02/27 12:09:16, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/02/27 12:09:16, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/02/27 12:09:16, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/02/27 12:09:16, 2] pdb_mysql.c:mysqlsam_select_by_field(292) Executing query SELECT logon_time,logoff_time,kickoff_time,pass_last_set_time,pass_can_change_time,pass_must_change_time,username,domain,nt_username,nt_fullname,home_dir,dir_drive,logon_script,profile_path,acct_desc,workstations,unknown_str,munged_dial,user_sid,group_sid,lm_pw,nt_pw,NULL,acct_ctrl,logon_divs,hours_len,bad_password_count,logon_count,unknown_6,logon_hours,password_history FROM user WHERE username = 'ralph' [2007/02/27 12:09:16, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1015) fetch gid from cache 1001 - S-1-5-21-1968991162-2130249723-1959552931-513 [2007/02/27 12:09:16, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1015) fetch gid from cache 1001 - S-1-5-21-1968991162-2130249723-1959552931-513 [2007/02/27 12:09:16, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/02/27 12:09:16, 3] libsmb/ntlm_check.c:ntlm_password_check(344) ntlm_password_check: NT MD4 password check failed for user lldummanne [2007/02/27 12:09:16, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/02/27 12:09:16, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/02/27 12:09:16, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/02/27 12:09:16, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/02/27 12:09:16, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/02/27 12:09:16, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/02/27 12:09:16, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/02/27 12:09:16, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/02/27 12:09:16, 3] auth/auth_winbind.c:check_winbind_security(80) check_winbind_security: Not using winbind,
[Samba] samba-problems
Hi i am having some problems with my samba, it is runnig on an Slackware linux. I have arround 20 directories on it, were every day around 20 users exchange files from them. The situation is that when I try to get logg into one of this directories with one of the users(just with one user,) the loggin is not allowed. I had already delete this user, create it again. do you have any clue about it? thanks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba-problems
Fernando j Cabello wrote: Hi i am having some problems with my samba, it is runnig on an Slackware linux. I have arround 20 directories on it, were every day around 20 users exchange files from them. The situation is that when I try to get logg into one of this directories with one of the users(just with one user,) the loggin is not allowed. I had already delete this user, create it again. do you have any clue about it? thanks Your problem isn't clear. Is the user account having problem logging into the domain or is it having problems accessing the share? If it is having problems with the share, is it just one share or every share? Your best bet is to try to isolate what is different about this account and/or the particular share. Is the account a member of the same group(s) as the other accounts. Do all the shares have the same access rights (look at both the Domain access rights and the Unix/Linux rights on the actual directory). -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba problems
Hi guys. I have a problem. Here is the smb.conf. # This is the main Samba configuration file. You should read the # smb.conf(5) manual page in order to understand the options listed # here. Samba has a huge number of configurable options (perhaps too # many!) most of which are not shown in this example # # Any line which starts with a ; (semi-colon) or a # (hash) # is a comment and is ignored. In this example we will use a # # for commentry and a ; for parts of the config file that you # may wish to enable # # NOTE: Whenever you modify this file you should run the command testparm # to check that you have not made any basic syntactic errors. # #=== Global Settings = [global] # workgroup = NT-Domain-Name or Workgroup-Name workgroup = WORKGROUP # server string is the equivalent of the NT Description field server string = FILES Server # This option is important for security. It allows you to restrict # connections to machines which are on your local network. The # following example restricts access to two C class networks and # the loopback interface. For more examples of the syntax see # the smb.conf man page hosts allow = 192.168.38. 10.9.0. 127. # if you want to automatically load your printer list rather # than setting them up individually then you'll need this printcap name = /etc/printcap load printers = yes # It should not be necessary to spell out the print system type unless # yours is non-standard. Currently supported print systems include: # bsd, sysv, plp, lprng, aix, hpux, qnx ; printing = cups # This option tells cups that the data has already been rasterized cups options = raw # Uncomment this if you want a guest account, you must add this to /etc/passwd # otherwise the user nobody is used ; guest account = pcguest # this tells Samba to use a separate log file for each machine # that connects log file = /var/log/samba/%m.log # all log information in one file # log file = /var/log/samba/smbd.log # Put a capping on the size of the log files (in Kb). max log size = 50 # Security mode. Most people will want user level security. See # security_level.txt for details. ; security = user # Use password server option only with security = server ; password server = NT-Server-Name # Password Level allows matching of _n_ characters of the password for # all combinations of upper and lower case. ; password level = 8 ; username level = 8 # You may wish to use password encryption. Please read # ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation. # Do not enable this option unless you have read those documents ; encrypt passwords = yes ; smb passwd file = /etc/samba/smbpasswd # The following are needed to allow password changing from Windows to # update the Linux system password also. # NOTE: Use these with 'encrypt passwords' and 'smb passwd file' above. # NOTE2: You do NOT need these to allow workstations to change only #the encrypted SMB passwords. They allow the Unix password #to be kept in sync with the SMB password. ; unix password sync = Yes ; passwd program = /usr/bin/passwd %u ; passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* # Unix users can map to different SMB User names ; username map = /etc/samba/smbusers # Using the following line enables you to customise your configuration # on a per machine basis. The %m gets replaced with the netbios name # of the machine that is connecting ; include = /etc/samba/smb.conf.%m # Most people will find that this option gives better performance. # See speed.txt and the manual pages for details socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 # Configure Samba to use multiple interfaces # If you have multiple network interfaces then you must list them # here. See the man page for details. interfaces = 192.168.38.0/24 10.9.0.0/24 # Configure remote browse list synchronisation here # request announcement to, or browse list sync from: # a specific host or from / to a whole subnet (see below) ; remote browse sync = 192.168.3.25 192.168.5.255 # Cause this host to announce itself to local subnets here ; remote announce = 192.168.1.255 192.168.2.44 # Browser Control Options: # set local master to no if you don't want Samba to become a master # browser on your network. Otherwise the normal election rules apply ; local master = no # OS Level determines the precedence of this server in master browser # elections. The default value should be reasonable ; os level = 33 # Domain Master specifies Samba to be the Domain Master Browser. This # allows Samba to collate browse lists between subnets. Don't use this # if you already have a Windows NT domain controller doing this job domain master = yes # Preferred Master causes Samba to force a local browser election on startup # and
Re: [Samba] samba problems on aix
On Thu, 12 May 2005 [EMAIL PROTECTED] wrote: Installed samba 3.0.4.0 and libiconv 1.9.1 (download from bullfreeware) on AIX 5.2. When I run smbclient, it says error: exec(): 0509-036 Cannot load program ./smbclient because of the following errors: 0509-150 Dependent module libreadline.a(libreadline.so) could not be loaded. 0509-022 Cannot load module libreadline.a(libreadline.so). 0509-026 System error: A file or directory in the path name does not exist. If I try swat from IE, it says: exec(): 0509-036 Cannot load program swat because of the following errors: 0509-150 Dependent module libldap.a(libldap.so.2) could not be loaded. 0509-022 Cannot load module libldap.a(libldap.so.2). 0509-026 System error: A file or directory in the path name does not exist. What is the value of LIBPATH? It sounds like AIX is searching and not finding your libs. Try ldd (substitute your path to smbd): [support:/] # ldd /samba/3.0.11/sbin/smbd /samba/3.0.11/sbin/smbd needs: /usr/lib/libpthread.a(shr_comm.o) /usr/lib/libpthread.a(shr_xpg5.o) /usr/local/BerkeleyDB.4.2/lib/libdb.so /usr/local/lib/libldap.a(libldap-2.2.so.7) /usr/local/lib/liblber.a(liblber-2.2.so.7) /usr/local/lib/libiconv.a(libiconv.so.2) /usr/lib/libc.a(shr.o) /usr/lib/librtl.a(shr.o) /usr/lib/libpthreads.a(shr_comm.o) /unix /usr/lib/libs.a(shr.o) /usr/lib/libcrypt.a(shr.o) You may need to get additional libs from Bull or IBM. Ferret out which libs you don't have based on where the loader is looking. Does anyone know how to fix it? Worst case is you may have to build Samba yourself. 3.0.4 is pretty old at this point and 3.0.15 is on the way. I sent an email yesterday with instrunctions for building on AIX. I've attached them again. It includes KRB support, so if you so want ADS member support, remove the --without-ads in the samba build section. I don't use it, so the option drops the size of the smbd by a couple megs. Bill - Stay ahead of the information curve. Receive MCAD news and jobs on your desktop daily. Subscribe today to the MCAD CafeNews newsletter. [ http://www10.mcadcafe.com/nl/newsletter_subscribe.php ] It's informative and essential. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba Get gcc, bison and gdb (and whatever else you like!) from IBM: http://www-1.ibm.com/servers/aix/products/aixos/linux/rpmgroups.html#Development/Tools Before you get started, I'd create a 4GB /src filesystem. Also either create a /usr/local filesytem of a few GB or extend /usr and make a /usr/local dir. - Build GNU make 3.8.0 http://ftp.gnu.org/pub/gnu/make/ # mkdir /src/make # cp /path/to/gnumake /src/make # cd /src/make # gunzip make-3.80.tar.gz # tar -xvf make-3.80.tar # chown -R root:system make-3.80 # cd make-3.80 # ./configure # make # make install # ln -sf /usr/local/bin/make /usr/bin/make (the symlink replaces the one that points /usr/ccs/bin/make) - Build libiconv: http://ftp.gnu.org/pub/gnu/libiconv/libiconv-1.9.1.tar.gz # mkdir /src/libiconv # cp /path/to/libiconvtarball /src/libiconv # cd /src/libiconv # gunzip libiconv-1.9.1.tar.gz # tar -xvf libiconv-1.9.1.tar # chown -R root:system libiconv-1.9.1 # cd libiconv-1.9.1 # ./configure # make # make install ( the IBM libiconv will fail certain tests for Samba 3.0 ) - Build BerkeleyDB: http://www.sleepycat.com/download/db/index.shtml This can work for either 4.2 or 4.3. Extract the tarball to a suitable location: # mkdir /src/bdb # cp /path/to/berkeleydbtarball /src/bdb # cd /src/bdb # gunzip db-4.2.52.NC.tar.gz # tar -xvf db-4.2.52.NC.tar # chown -R root:system db-4.2.52.NC # cd db-4.2.52.NC/build_unix # ../dist/configure --enable-posixmutexes # make # make install -- Build OpenSSL 0.9.7?: http://www.openssl.org/ # mkdir /src/openssl # cp /path/to/openssltarball /src/openssl # cd /src/openssl # gunzip openssl-0.9.7e.tar.gz # tar -xvf openssl-0.9.7e.tar # chown -R root:system openssl-0.9.7e # cd openssl-0.9.7e # ./config threads # make # make install Build Kerberos (MIT 1.4 - requires bison): http://web.mit.edu/kerberos/www/dist/#krb5-1.4.1 # mkdir /src/krb # cp /path/to/krbtarball /src/krb # cd /src/krb # gunzip krb5-1.4.1-signed.tar.gz # tar -xvf krb5-1.4.1-signed.tar # gunzip krb5-1.4.1.tar.gz # tar -xvf krb5-1.4.1.tar # chown -R root:system krb5-1.4.1 # cd krb5-1.4.1/src # ./configure # make # make
[Samba] samba problems on aix
Installed samba 3.0.4.0 and libiconv 1.9.1 (download from bullfreeware) on AIX 5.2. When I run smbclient, it says error: exec(): 0509-036 Cannot load program ./smbclient because of the following errors: 0509-150 Dependent module libreadline.a(libreadline.so) could not be loaded. 0509-022 Cannot load module libreadline.a(libreadline.so). 0509-026 System error: A file or directory in the path name does not exist. If I try swat from IE, it says: exec(): 0509-036 Cannot load program swat because of the following errors: 0509-150 Dependent module libldap.a(libldap.so.2) could not be loaded. 0509-022 Cannot load module libldap.a(libldap.so.2). 0509-026 System error: A file or directory in the path name does not exist. Does anyone know how to fix it? - Stay ahead of the information curve. Receive MCAD news and jobs on your desktop daily. Subscribe today to the MCAD CafeNews newsletter. [ http://www10.mcadcafe.com/nl/newsletter_subscribe.php ] It's informative and essential. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba problems
This message was sent through MyMail http://www.mymail.com.au -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba problems
Hi to all. Have Slackware 10, with samba running, windows box connected directly to it; have two NIC's 10Mb 8390 realtek and rtl8139 100Mb. the 10Mb card works fine, can see samba server from windows box, but when connected with rtl8139, my shares still work but i can't see my server and shares from windows explorer. Any help will be greatly appreciated Cheers Sam Pinar This message was sent through MyMail http://www.mymail.com.au -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba problems after change of unix uids
Hi, for some reason, I changed the uid of the users on my samba (3.0.7) pdc server (smbpasswd backend). I ran chown on the home directories so the linux clients can login fine. Windows users can still log in, but their profile vanished. I guess windows treats them as new users and overwrites the original profiles. Is there some way to upgrade the samba passwd file also? Greetings Marc -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba problems in stable?
On Sat, 2004-07-31 at 06:20, Robert L. Harris wrote: Recently a production stable samba server started producing this: samba-log.cpr8r: oplock_break failed for file Share1/Files/Financial/Comms.xls (dev = b, inode = 151073815, file_id = 31). samba-log.cpr8r: oplock_break failed for file Share1/Files/Financial/Futures.xls (dev = b, inode = 411546895, file_id = 31). samba-log.cpr8r: oplock_break failed for file Share1/Files/Financial/Historical.xls (dev = b, inode = 402910038, file_id = 8). etc etc for many many files. My samba logs currently give this 580 times in the last 2 days since the server was restarted. This is due to the client failing to acknowledge the Oplock break (usually). The closest match is on google from 1999 and there's no reply. Samba.org doesn't even have any matches on their search page I can find. Anyone have any ideas what could cause this? Kernel 2.4.26-bk1 Samba 2.0.7-1 Debian Stable The hardware is a P3-850 with 512Megs of ram. Most of the files being accessed are nfs mounted from a hardare appliance (SNAP). If possible, you should use the version of Samba on the SNAP appliance. Samba backed by NFS is not a good idea - you probably only get away with it due to the age of your Samba installation. Samba 2.0.7 has known security holes, and should be upgraded to current 3.0. Depending on which SNAP appliance you have, you may be able to purchase an OS upgrade (to the Linux/Samba 3.0 based version). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Authentication Developer, Samba Teamhttp://samba.org Student Network Administrator, Hawker College [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba problems in stable?
Recently a production stable samba server started producing this: samba-log.cpr8r: oplock_break failed for file Share1/Files/Financial/Comms.xls (dev = b, inode = 151073815, file_id = 31). samba-log.cpr8r: oplock_break failed for file Share1/Files/Financial/Futures.xls (dev = b, inode = 411546895, file_id = 31). samba-log.cpr8r: oplock_break failed for file Share1/Files/Financial/Historical.xls (dev = b, inode = 402910038, file_id = 8). etc etc for many many files. My samba logs currently give this 580 times in the last 2 days since the server was restarted. The closest match is on google from 1999 and there's no reply. Samba.org doesn't even have any matches on their search page I can find. Anyone have any ideas what could cause this? Kernel 2.4.26-bk1 Samba 2.0.7-1 Debian Stable The hardware is a P3-850 with 512Megs of ram. Most of the files being accessed are nfs mounted from a hardare appliance (SNAP). Robert :wq! --- Robert L. Harris | GPG Key ID: E344DA3B @ x-hkp://pgp.mit.edu DISCLAIMER: These are MY OPINIONS ALONE. I speak for no-one else. With Dreams To Be A King First One Should Be A Man - Manowar signature.asc Description: Digital signature -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba Problems with Authentication against a 2K3 ADS Server
Ok, here's the problem now.. I have Two unix boxes and Four Windows Servers here. The two unix boxes marvin and muse are running rhes 3 and suse 9.1 stock. Marvin uses the smbpasswd file to authenticate; I just have to sync the passwords manually. I am trying to setup muse using winbind and samba 3.0.2a The problem is that the XP machines on the network don't want to talk to muse, I get an Access Denied message of sorts preceeded by a logon request dialog. The samba/log.smbd gives this explanation: [2004/06/28 23:40:56, 0] auth/auth_util.c:make_server_info_info3(1120) make_server_info_info3: pdb_init_sam failed! Very useful; nothing on google is useful either.. Here's my smb.conf: # Global parameters [global] workgroup = BRAINDONORS realm = BRAINDONORS.NET server string = Music / CDImage Server security = ADS auth methods = winbind local master = No wins server = zaphod.braindonors.net ldap suffix = dc=braindonors,dc=net ldap ssl = no idmap uid = 1-2 idmap gid = 1-2 winbind enable local accounts = No [music-mp3] comment = MP3 Format Music Files path = /music/mp3 read only = No [music-mp3-singles] comment = Singles and One tracks path = /music/singles/mp3 veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/._* -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba problems
Is the samba server winning the election? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba problems
Suddenly (at least I cannot remember any change) I cannot use the Network server with samba as I get the following message Impossible to show smb:/// as Nautilus cannot contact SMB master browser. Please check if a SMB server is operating on local network And here are results of a testparm. [EMAIL PROTECTED] antoniomontagnani]# testparm Load smb config files from /etc/samba/smb.conf Processing section [homes] Processing section [printers] Processing section [Aurat] Loaded services file OK. Server role: ROLE_STANDALONE Press enter to see a dump of your service definitions # Global parameters [global] server string = PC Antonio null passwords = Yes username map = /etc/samba/user.map log file = /var/log/samba/%m.log max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 os level = 10 dns proxy = No guest ok = Yes hosts allow = 192.168.0.0/24 [homes] comment = Home Directories read only = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [Aurat] comment = Copia directory HP path = /home/antoniomontagnani/HP read only = No -- Antonio Montagnani === Working with Mozilla 1.6 on Linux Fedora Core 1 === Utilizzo Mozilla 1.6 su Linux Fedora Core 1 === -- Antonio Montagnani === Working with Mozilla 1.6 on Linux Fedora Core 1 === Utilizzo Mozilla 1.6 su Linux Fedora Core 1 === -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba problems after IP change
I want to use samba to back up some directories on a QNX server to a Windows office network drive. (For those who may not be familiar with it, QNX is a commercial OS similar to Unix.) I am a samba newbie, but managed to fumble my way through this, using cron on the QNX machine to run smbclient command to copy a tar file to the Windows drive: smbclient //swin0001/comq -U$userpass -WCNT \ -c cd phase3/cqarch; put $logfile; put $tarfile This worked, but after an office move, the IP addresses of the machines changed (both are still on the same subnet), and the smbclient now fails. I have reconfigured the QNX machine for the new address, and regular TCP/IP (ping, ftp, telnet, c.) between the machines works fine. Running smbclient -U% -L localhost on the QNX machine shows expected shares. The Workgroup name matches the WinNT domain name. Running elm% smbclient //swin0001/comq -Uparsonw -WCNT shows: added interface ip=10.93.52.35 bcast=10.93.55.255 nmask=255.255.248.0 Connection to swin0001 failed On the Windows side, net view \\elm (where elm is the name of the QNX machine) results in a message: System error 53 has occurred The network path was not found. The QNX machine is no longer showing up in Network Neighborhood. nbtstat -A 10.93.52.35 shows entries for ELM with a status Registered. As far as I know, the only change to the network configuration was the new IP subnet. (I have direct control over the QNX machine, but the Windows machines are managed by the IT department.) Any thoughts on what broke or how to fix it would be welcome. - Will Parsons -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SAMBA Problems
Hi, I am setting up a small network with a Linux machine running SAMBA. I have no problems connecting from a Windows 95 machine to the SAMBA server. However, I can't connect from a SuSE Linux 9.0 machine. It does not seem to find any servers on the network from the Linux machine. Lisa is running. What am I missing? Thanks Sarel. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SAMBA Problems
lisa.conf ;) (it worked for me) Radu - Eosif Mihailescu Sarel Pretorius wrote: Hi, I am setting up a small network with a Linux machine running SAMBA. I have no problems connecting from a Windows 95 machine to the SAMBA server. However, I can't connect from a SuSE Linux 9.0 machine. It does not seem to find any servers on the network from the Linux machine. Lisa is running. What am I missing? Thanks Sarel. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba Problems
Hello can anyone please help??? i have SuSe Linux 7.9 and am using the inbuild Samba software that comes with it, i have a shared folder on the Samba system which is accessable to my windows XP pro system as long as i keep guest access on, when i turn this off the system can no longer access the directory it keeps poping up asking for login details, it won`t let me login even if i use the Linux box`s Root account details I even added a temporary account to the system and it refused to log me in using that. please help, BTW i`m completly new to linux (literally had it a week) Thanks Kris Davies The Source - Technical Support -- Source Software Limited. Registered in England Wales No. 2864963. Registered Office: Drake House, Plymouth Road, Penarth, CF64 3TP. Telephone : 029 2026 5265. Fax : 029 2070 4455. Disclaimer: This message and attachments are confidential and are sent for the personal attention of the addressee's. If you are not the intended addressee, any use, disclosure or copying of this document is unauthorised. Information transmitted by email may be intercepted, lost, destroyed, corrupted or delayed and as a result, Source Software Ltd do not accept responsibility for any errors or omissions in the contents of this message. If you would like to confirm the contents of this email, please request a hard copy version. Although emails are screened for viruses, Source Software Ltd cannot guarantee that any transmissions will be virus free. -- Source Software Limited. Registered in England Wales No. 2864963. Registered Office: Drake House, Plymouth Road, Penarth, CF64 3TP. Telephone : 029 2026 5265. Fax : 029 2070 4455. Disclaimer: This message and attachments are confidential and are sent for the personal attention of the addressee's. If you are not the intended addressee, any use, disclosure or copying of this document is unauthorised. Information transmitted by email may be intercepted, lost, destroyed, corrupted or delayed and as a result, Source Software Ltd do not accept responsibility for any errors or omissions in the contents of this message. If you would like to confirm the contents of this email, please request a hard copy version. Although emails are screened for viruses, Source Software Ltd cannot guarantee that any transmissions will be virus free. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba problems
Umm.. I think i should make one thing clear because I'm getting alot of replies saying I should do smbpasswd -a username. I just want to let you guys know that I have done this, I added the users I was testing out, ie. fred, root. this is not the problem. Also I'm using a newly installed version of redhat 8.0 and trying to make it work with samba2.2.8 Thanks for all your help so far _ MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba problems
Tried your suggestions but same problems on LRP. Trying the 2.2.8 smbpasswd on my SuSE box worked fine. Go figure. On Sun, 16 Mar 2003, Spiro Philopoulos wrote: Thanks for responding. I've appended my smb.conf and smbpasswd files. Ok. So are smb1 ... smbn all in your /etc/passwd file? Why do all have the same uid? The nobody uid. Do NOT do this. You need to have separate uids for each entry in smbpasswd. You should add your Unix users by: useradd 'username' passwd 'username' then to smbpasswd by: smbpasswd -a 'username' Do NOT put a guest account in smbpasswd. Samba should use the 'nobody' account from /etc/passwd for all connections to the IPC$ share. - John T. On Sat, 15 Mar 2003, Spiro Philopoulos wrote: I'm trying the latest versions of Samba on a LRP box (kernel 2.2.19), namely versions 2.2.7a and 2.2.8, but whenever I try to access a share it fails and the smbd log has the following error message: build_sam_account: smbpasswd database is corrupt! username smb1 not in unix passwd database! Email me your smb.conf and smbpasswd file please to [EMAIL PROTECTED] - NOT to this list. I have the user accounts defined in the smbpasswd file and in /etc/passwd. When using an older version (2.0.4b) I have no problems at all. Also, when trying to change a Samba password using smbpasswd I get a similar error message: build_sam_account: smbpasswd database is corrupt! username smb1 not in unix passwd database! Failed to find entry for user smb1. Failed to modify password entry for user smb1 I configured it during the build to use the traditional smbpasswd file. Does anybody know what this is?. Another issue is that nmbd won't start up if I have interfaces = all If you want all interfaces (even if it is just one) comment out this line. ie: Comment out interfaces = specified in the global section of smb.conf, which again wasn't a problem with the older version. Thanks in advance for any help. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- John H Terpstra Email: [EMAIL PROTECTED] -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba problems
I'm trying the latest versions of Samba on a LRP box (kernel 2.2.19), namely versions 2.2.7a and 2.2.8, but whenever I try to access a share it fails and the smbd log has the following error message: build_sam_account: smbpasswd database is corrupt! username smb1 not in unix passwd database! I have the user accounts defined in the smbpasswd file and in /etc/passwd. When using an older version (2.0.4b) I have no problems at all. Also, when trying to change a Samba password using smbpasswd I get a similar error message: build_sam_account: smbpasswd database is corrupt! username smb1 not in unix passwd database! Failed to find entry for user smb1. Failed to modify password entry for user smb1 I configured it during the build to use the traditional smbpasswd file. Does anybody know what this is?. Another issue is that nmbd won't start up if I have interfaces = all specified in the global section of smb.conf, which again wasn't a problem with the older version. Thanks in advance for any help. -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba problems
On Sat, 15 Mar 2003, Spiro Philopoulos wrote: I'm trying the latest versions of Samba on a LRP box (kernel 2.2.19), namely versions 2.2.7a and 2.2.8, but whenever I try to access a share it fails and the smbd log has the following error message: build_sam_account: smbpasswd database is corrupt! username smb1 not in unix passwd database! Email me your smb.conf and smbpasswd file please to [EMAIL PROTECTED] - NOT to this list. I have the user accounts defined in the smbpasswd file and in /etc/passwd. When using an older version (2.0.4b) I have no problems at all. Also, when trying to change a Samba password using smbpasswd I get a similar error message: build_sam_account: smbpasswd database is corrupt! username smb1 not in unix passwd database! Failed to find entry for user smb1. Failed to modify password entry for user smb1 I configured it during the build to use the traditional smbpasswd file. Does anybody know what this is?. Another issue is that nmbd won't start up if I have interfaces = all If you want all interfaces (even if it is just one) comment out this line. ie: Comment out interfaces = specified in the global section of smb.conf, which again wasn't a problem with the older version. Thanks in advance for any help. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba problems in RH8 and 98/Me
ok, I fixed the file permissions problem using chown... which is good. now, I am still having the problem in WIndows 98/Me. samba keeps prompting for a password to: //netbiosname//:IPC$ what in the heck is :IPC$ it works fine in windows XP or 2000, so what am I doing wrong that it doesn't work in 98/Me? I tried reinstalling windows me on my daughters computer and running the windows XP network setup wizard from the windows XP CD, still same problem.:( is :PC$ a guest account or something? I don't get it.. ___ Sent by ePrompter, the premier email notification software. Free download at http://www.ePrompter.com. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba problems
Hi! I tried to set up a Samba PDC but so far it is not yet working (3 weeks passed). I posted my Samba problems to news groups and discussion forums, but the suggestions given were not able to solve my problems. I went through a few HOWTOs and followed the step-by-step guide, still can not solve my problem. I am realy new to Linux and Samba and hope sameone will guide me through. (1) What I did: - (a) I installed the samba samba-swat, samba-common, samba-client, and edited /etc/samba/smb.conf files as following: - # Samba config file created using SWAT # from chee_ch.com (127.0.0.1) # Date : 2002/10/26 # Global parmeters [global] ;Basic server setting 3/11/2002 workgroup = CH LINUX SER netbios name = CH-HOMES server string = Primary Domain Server running Samba %v socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF = 8192 SO_SNDBUF = 8192 ;PDC and master browser setting os level = 64 preferred master = yes local master = yes domain master = yes domain logons = yes dns proxy = No ;Security and logging settings security = user encrypt passward = Yes log file = /var/log/samba/%m.log log level = 2 max log size = 0 host allow = 127.0.0.1 192.168.0.0/255.255.255.0 samba passwd file = /etc/samba/ambpasswd passward program = /usr/bin/passwd %u passwd chat = *New*passward* %n\n* *Retype*new*passwd*%n\n*passwd:*all* *authentication*token*updated*successfully* add user script = /usr/sbin/useradd -d /dev/null -g machines -c 'Mechine Account' -s /bin/false -M %u # Domain groups: domain admin group = root@adm [homes] comment = Home Directories browseable = no writable = yes [profiles] path = /home/samba/profiles writable = yes brawseable = no create mask = 0600 directory mask = 0700 [netlogon] comment = Network Logon Services path = /home/netlogon read only = yes browseable = no write list = @admins [printers] comment = All printer path = /var/spool/samba printeble = Yes brawsable = No (b) I added the Samba user Peter and Secretary: - #useradd -m Peter #passwd Peter . #cat /etc/passwd | /usr/bin/mksmbpasswd.sh /etc/samba/smbpasswd #smbpasswd Peter . (c) I repeated the steps to create account for Secretary. (d) I added root passward to the Samba #smbpasswd -a root .. (e) I did #groupadd -g 200 admins #groupadd -g 201 machines #mkdir -m 0775 /home/netlogon #chown root.admins /home/netlogon #mkdir /home/samba /home/samba/profiles #chmod 1757 /home/samba/profiles (f) At the Windows 98 client I change to Client for Microsoft Networks, Primary Network Logon, Logon to NT Domain. (g) I copied AutoCAD files to /home/Peter/tmp/ and /home/Secretary/tmp/ (2) What happened I re-booted theSamba PDCand Samba started fine. From the Network Neighborhood of window client (Peter and Secretary) I can see CH LINUX SER. I double clicked itIcansee CH-HOMES (netbios name). I double clicked CH-HOMES, it prompted for passwd, I enter and I went in CH-HOMES. But, it is an ***empty*** folder. Isupposted be able to seeto Peter and Secretary folders. And and in Peter and Secretary I supposted be ableto see tmp ... I rechecked the smb.conf file many, many times to ensure no spelling error etc, nothing worked out. In the CH-HOMES folder of window client, it isstill an empty folder. (3) What I like to see A Samba PDC serving 10 over window clients, each window client login to their respective /home diectory. What has happened?! I am new to Linux and Samba, and help will be greatly appreciated. Thank you Oswald
Re: [Samba] samba problems with FreeBSD
Add the user without the '$' at the end then after it has been added correctly use 'vipw' to edit the passwd file by hand and add the '$' to the end of that users entry. At 17:05 17/09/2002 -0700, Unix Rookie wrote: i'm trying to setup a PDC with my FreeBSD box. i'm following the directions in Samba Unleashed by SAMS. in it they mention the creation of a server user account. this is the example they give: useradd -c Samba PDC fir MYDOMAIN -M -s /bin/false -n PERSEUS$ other than the fact FreeBSD doesn't use useradd and that pw useradd doesn't have a -M option, i'm having a problem with the $ at the end of the username. i get the following error: pw: invalid character `$' in field is there a work around? any any all help will be greatly appreciated. oh yeah... and one more thing... is the client-side setup in Samba the same with W2k as it is for WinXP? if it isn't i might as well take this book back. :/ __ Do you Yahoo!? Yahoo! News - Today's headlines http://news.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Jonathan Dean [EMAIL PROTECTED] www.jondean.com Dept. Computer Science, University of Exeter, UK. [EMAIL PROTECTED] www.dcs.ex.ac.uk Network Manager, Dean UK Networks. [EMAIL PROTECTED] www.deanuk.net
[Samba] samba problems with FreeBSD
i'm trying to setup a PDC with my FreeBSD box. i'm following the directions in Samba Unleashed by SAMS. in it they mention the creation of a server user account. this is the example they give: useradd -c Samba PDC fir MYDOMAIN -M -s /bin/false -n PERSEUS$ other than the fact FreeBSD doesn't use useradd and that pw useradd doesn't have a -M option, i'm having a problem with the $ at the end of the username. i get the following error: pw: invalid character `$' in field is there a work around? any any all help will be greatly appreciated. oh yeah... and one more thing... is the client-side setup in Samba the same with W2k as it is for WinXP? if it isn't i might as well take this book back. :/ __ Do you Yahoo!? Yahoo! News - Today's headlines http://news.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
