[Samba] Samba log hell

2006-08-11 Thread reader
Setup: Running Gentoo linux 2.6X kenel
   Samba 3.0.23

I'm having a time getting samba working after having it working for
mnths.  I did do a major update world.  

That kind of update on Gentoo can involve many other apps.

At the end when adjusting files under /etc/ that may have newer
versions, I rejected the new smb.conf keeping my old config which is
still in place so the trouble may be coming from somewhere else.

It seems something has suddenly chagned whereby I cannot access any
linux shares from windows.

Attempting to get some details of the failure from the logs seem
fruitless since the log output is literally huge and nothing stands
out with big letters `error'.

Maybe some kind soul can tell me what would be usefull to post here.

I'm just not prepared to understand 670 lines of output for one
connection attempt. And that is with `log level' cranked down to 3.

The following area from one of the two logs produced by this
connection attempt, seems to be important but even this small chunk
defies understanding far as I can see:

The `Sid' lines seem to be telling something but who knows what.  Then
finally it shows a ACCESS_DENIED.

`reader' and `Harry' are the only two authorized users and listed as
`valid users' on each share in smb.conf.  (I've inlined smb.conf for
reference following this message and log output.)

What provoked this piece of log is an attempt from machine `harvey' to
login to samba share on machine `reader'.  The incoming user is also
`reader'.

[...]
[2006/08/11 13:38:11, 3] lib/util_sid.c:string_to_sid(223)
  string_to_sid: Sid reader does not start with 'S-'.
[2006/08/11 13:38:11, 3] lib/util_sid.c:string_to_sid(223)
  string_to_sid: Sid Harry does not start with 'S-'.
[2006/08/11 13:38:11, 3] smbd/sec_ctx.c:push_sec_ctx(208)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2006/08/11 13:38:11, 3] smbd/uid.c:push_conn_ctx(345)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2006/08/11 13:38:11, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/08/11 13:38:11, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/08/11 13:38:11, 3] smbd/sec_ctx.c:push_sec_ctx(208)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2006/08/11 13:38:11, 3] smbd/uid.c:push_conn_ctx(345)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2006/08/11 13:38:11, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/08/11 13:38:11, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/08/11 13:38:11, 2] smbd/service.c:make_connection_snum(571)
  user 'reader' (from session setup) not permitted to access this share 
(smReader)
[2006/08/11 13:38:11, 3] smbd/error.c:error_packet(146)
  error packet at smbd/reply.c(676) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED
[2006/08/11 13:38:11, 3] smbd/process.c:process_smb(1110)
  Transaction 4 of length 43
[2006/08/11 13:38:11, 3] smbd/process.c:switch_message(914)
  switch message SMBulogoffX (pid 4834) conn 0x0
[2006/08/11 13:38:11, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/08/11 13:38:11, 3] smbd/reply.c:reply_ulogoffX(1618)
  ulogoffX vuid=101
[2006/08/11 13:38:11, 3] smbd/process.c:timeout_processing(1359)
  timeout_processing: End of file from client (client has disconnected).
[2006/08/11 13:38:11, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/08/11 13:38:11, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to 
[2006/08/11 13:38:11, 3] smbd/server.c:exit_server_common(675)
  Server exit (normal exit)
[2006/08/11 13:38:11, 3] auth/auth.c:check_ntlm_password(221)
  check_ntlm_password:  Checking password for unmapped user [EMAIL PROTECTED] 
with the new password interface

[...]

Then about 60 more lines and I see:

[2006/08/11 14:05:19, 3] auth/auth.c:check_ntlm_password(270)
  check_ntlm_password: sam authentication for user [reader] succeeded

===

smb.conf:
#=== Global Settings =
[global]

# 1. Server Naming Options:
# workgroup = NT-Domain-Name or Workgroup-Name
   workgroup = home

# netbios name is the name you will see in Network Neighbourhood,
# but defaults to your hostname
;  netbios name = name_of_this_server

# server string is the equivalent of the NT Description field
   server string = Samba_%v

# Message command is run by samba when a popup message is sent to it.
# The example below is for use with LinPopUp:
; message command = /usr/bin/linpopup %f %m %s; rm %s

# 2. Printing Options:
# CHANGES TO ENABLE PRINTING ON ALL CUPS PRINTERS IN THE NETWORK
# if you want to automatically load your printer list rather
# than setting them up individually then you'll need this
   printcap name = cups
   load printers = yes

# It should not be necessary to spell out the print system type unless
# yours is non-standard. Currently supported 

Re: [Samba] Samba log hell

2006-08-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

[EMAIL PROTECTED] wrote:
 Setup: Running Gentoo linux 2.6X kenel
Samba 3.0.23

I would recommend you start by getting
3.0.23b + the lookup_name_smbconf_v2.patch
file from http://www.samba.org/~jerry/patches/

 It seems something has suddenly chagned whereby I 
 cannot access any linux shares from windows.

Yup.  You need 3.0.23b plus the patch I posted today.
You're using an smbpasswd file right ?



cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFE3R9hIR7qMdg1EfYRAvgoAJ9V9q93WhiYR6rqQEYGJUroOqhf/wCguI31
YCpHQPR7milZy/CkBtvQxL8=
=07Sy
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba