[Samba] usrmgr.exe issues after upgrade samba
Hello, After upgrade samba on my 64-bit RHEL4 server from version `3.0.31` to `3.5.3` everything just works fine, but I only have issues with `usrmgr.exe`. Before upgrade, I could manage domain accounts with this utility. Now it say Access denied after running without any detailed information. I checked out samba logs and didn't found any errors related. How to get it working again? Thanks, wbr, Denis. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] usrmgr.exe issues after upgrade samba
On Sun, Jun 13, 2010 at 02:03:08PM +0600, Denis Fateyev wrote: After upgrade samba on my 64-bit RHEL4 server from version `3.0.31` to `3.5.3` everything just works fine, but I only have issues with `usrmgr.exe`. Before upgrade, I could manage domain accounts with this utility. Now it say Access denied after running without any detailed information. I checked out samba logs and didn't found any errors related. How to get it working again? If you're running with LDAP backend, http://git.samba.org/?p=samba.git;a=commitdiff;h=f66cc8270 might be for you. Will be in 3.5.4. Volker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] usrmgr.exe issues after upgrade samba
Hello Volker, Thanks for the quick answer. Yes, I'm using LDAP backend with samba. I will test the issue when 5.3.4 will be released. 2010/6/13 Volker Lendecke volker.lende...@sernet.de On Sun, Jun 13, 2010 at 02:03:08PM +0600, Denis Fateyev wrote: After upgrade samba on my 64-bit RHEL4 server from version `3.0.31` to `3.5.3` everything just works fine, but I only have issues with `usrmgr.exe`. Before upgrade, I could manage domain accounts with this utility. Now it say Access denied after running without any detailed information. I checked out samba logs and didn't found any errors related. How to get it working again? If you're running with LDAP backend, http://git.samba.org/?p=samba.git;a=commitdiff;h=f66cc8270 might be for you. Will be in 3.5.4. Volker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] usrmgr.exe does not show any Samba groups
Hi, We are running samba 3.0.28 on RHEL 5 as a PDC serving around 1000 active users . This domain was vampired from aWindows NT 4 domain a few years ago. OpenLDAP 2.2.13 is used as the back end user database. One of the problems we have is that usrmgr.exe does not display any groups. I can use usrmgr to create users, delete users and create groups. But I cannot use it to delete groups or add users to groups. I am running usrmgr.exe version 5.1 Service Pack 3 on Windows XP SP3. On the server, net groupmap list lists the groups correctly. If I select a user from the usgmgr panel, it shows the user's primary group correctly but it does not list any groups to make this user a member of. I have googled around but did not find any thing helpful. I can post my configuration if that is needed. Thanks! John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Usrmgr.exe does not list all the domain users
Hi, We are running samba 3.0.28 with Openldap 2.2.13 as a Windows PDC. The OS is Red Hat RHEL5. We also have some VMWare servers. A VMWare management toolqueries the PDC for users. For some reason, it cannot find some users even given the complete uid. To diagnose the problem, I ran the Windows NT domain user manager, Usrmgr.exe. It has the same problem as the VMWare tool. It does not show those users the VMWare tool cannot find. The users have no problem to login to the domain and use the resources in the domain. The Windows Explorer can see these users too. I have googled around but have not found anything helpful. Thank you for your help. John Du -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] usrmgr.exe issues
Hi I have set up my own domain on Debian stable (3.0.14a-3sarge2) and can log in etc. I have just gone to administrate my user accounts using the server tool (usrmgr.exe) from microsoft (i know it is not the problem of samba to support these but...) when i select my new domain 'EDDU' i get the error: the specified local group does not exist Having read pretty much every google entry and searched this list to no avail, the only solution i found was a patch that would solve the problem if you were using an ldap backend. I am using a straight up tdbsam backend a fear this patch will not solve the problem. Does anyone know how to solve this problem? thanks Edd Parris .'' ` . Edward Parris : http://www.communecation.net/ : :' : Social Engineer : http://socialengineer.communecation.net/ `. `'` Debian Linux : http://www.debian.org : How Gnu are You? `- ___ All new Yahoo! Mail The new Interface is stunning in its simplicity and ease of use. - PC Magazine http://uk.docs.yahoo.com/nowyoucan.html -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.exe not working properly
Nope, these should be unix groups.. afaik, unix groups don't allow 'space' in there names... so 'Domain Users' will not work, 'domain_users' would.. dunno.. Holger Wesser wrote: 'net groupmap list' shows (an extract): Domain Admins (S-1-5-21-995113423-1751251495-2796976809-512) - Domain Admins Domain Users (S-1-5-21-995113423-1751251495-2796976809-513) - Domain Users Domain Guests (S-1-5-21-995113423-1751251495-2796976809-514) - Domain Guests Domain Computers (S-1-5-21-995113423-1751251495-2796976809-515) - Domain Computers Administrators (S-1-5-32-544) - Administrators Print Operators (S-1-5-32-550) - Print Operators Backup Operators (S-1-5-32-551) - Backup Operators Replicators (S-1-5-32-552) - Replicators this seems to be okay, don't it? Holger Collen Blijenberg schrieb: what do you see with the 'net groupmap list' command.. maybe you need to map them manually, (net group add .) coz' this became the default behavior for the 3.0.23 version... Cheers Collen Holger Wesser wrote: Hi there, I'm running Debian Sarge with the sernet-packages of Samba. Yesterday I updated from 3.0.22 to 3.0.23. When I start the usrmgr.exe, I still are able to modify users but I cannot see/modify groups anymore. Where could I start to find the problem? Thanks. Holger -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.exe not working properly
sorry, i really don't know, how to fix the problem. until to 3.0.22 everything worked fine. in the changelog to 3.0.23 i read: New handling of unmapped users and groups what does this mean? i never got in contact with manual mappings, because i used the smbldap-populate tool. does it mean, i have to rename the groupnames manually??? Collen Blijenberg schrieb: Nope, these should be unix groups.. afaik, unix groups don't allow 'space' in there names... so 'Domain Users' will not work, 'domain_users' would.. dunno.. Holger Wesser wrote: 'net groupmap list' shows (an extract): Domain Admins (S-1-5-21-995113423-1751251495-2796976809-512) - Domain Admins Domain Users (S-1-5-21-995113423-1751251495-2796976809-513) - Domain Users Domain Guests (S-1-5-21-995113423-1751251495-2796976809-514) - Domain Guests Domain Computers (S-1-5-21-995113423-1751251495-2796976809-515) - Domain Computers Administrators (S-1-5-32-544) - Administrators Print Operators (S-1-5-32-550) - Print Operators Backup Operators (S-1-5-32-551) - Backup Operators Replicators (S-1-5-32-552) - Replicators this seems to be okay, don't it? Holger Collen Blijenberg schrieb: what do you see with the 'net groupmap list' command.. maybe you need to map them manually, (net group add .) coz' this became the default behavior for the 3.0.23 version... Cheers Collen Holger Wesser wrote: Hi there, I'm running Debian Sarge with the sernet-packages of Samba. Yesterday I updated from 3.0.22 to 3.0.23. When I start the usrmgr.exe, I still are able to modify users but I cannot see/modify groups anymore. Where could I start to find the problem? Thanks. Holger -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.exe not working properly
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Holger Wesser wrote: sorry, i really don't know, how to fix the problem. until to 3.0.22 everything worked fine. in the changelog to 3.0.23 i read: New handling of unmapped users and groups what does this mean? i never got in contact with manual mappings, because i used the smbldap-populate tool. does it mean, i have to rename the groupnames manually??? I'm interested in this also, as it may be the problem I am facing in the other thread. Zach -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFEu/LmMyx0fW1d8G0RAtgsAJ9/yil6S3pv4WQrVEL//hFR5h036QCePTwi F0dVooWrcH48gJ0NHYEisSc= =LcW/ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.exe not working properly
On Mon, Jul 17, 2006 at 10:23:41PM +0200, Holger Wesser wrote: New handling of unmapped users and groups what does this mean? This means that we have cleaned up a big mess that has caused very difficult to diagnose problems for quite a number of people. It comes down to a different handling of interconnecting the different concepts Windows and Unix have about users and groups. Under Windows users, groups and lots of other stuff is represented by security identifiers. These are the S-1-5-21-x-y-z-512 things you seen in 'net groupmap'. Saying Windows has 128-bit long user and group IDs is technically not fully correct, but approximates it quite well. We always have the problem to a) squeeze the 128-bit space into the 32 bits unix provides us and b) the other way round, invent 128-bit SIDs from the 32-bit unix IDs. In the various scenarios that we have to live in this turns out to be quite difficult: * Samba as a standalone server has to invent SIDs from unix IDs. This is not too difficult, historically this has been done with the so-called algorithmic mapping: We invented a random x-y-z for the machine and created a user sid by uid*2+1000 and a group sid by gid*2+1001. * Samba as a member server has to work with SIDs presented by others, namely domain controllers. It's not only one domain, the domain controller we use as ours can all of the sudden trust another domain. For this task winbind maintains a static table, the winbindd_idmap.tdb with its remote backends. * Samba as a domain controller has to provide both tasks: For the users/groups it is responsible for itself has to invent SIDs and for the SIDs it imports from trusted domain controllers it has to invent uids/gids. These abstract tasks are a there, like it or not. We have to solve them. Before 3.0.23 it has been a BIG mess that led to inconsistent mappings in different situations. For example it was not possible to get reasonable local (nested) group support in Samba with that code, so some clean up had to be done. In fact, a big Samba user complaining that nested groups did not work made me fix all this. You are facing the only incompatible change that we had to introduce: You are not seeing the groups your users are in anymore without mapping them with the net sam mapunixgroup utility. One thing you could do for example is: getent group | cut -d : -f 1 | xargs -n 1 net sam mapunixgroup This does the explicit mapping for all unix groups you have in /etc/passwd and/or nss_ldap. If this still does not help, we need your smb.conf and a full debug level 10 log of smbd, running usrmgr.exe into the error. Volker pgpo0mVJ4WF2J.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.exe not working properly
'net groupmap list' shows (an extract): Domain Admins (S-1-5-21-995113423-1751251495-2796976809-512) - Domain Admins Domain Users (S-1-5-21-995113423-1751251495-2796976809-513) - Domain Users Domain Guests (S-1-5-21-995113423-1751251495-2796976809-514) - Domain Guests Domain Computers (S-1-5-21-995113423-1751251495-2796976809-515) - Domain Computers Administrators (S-1-5-32-544) - Administrators Print Operators (S-1-5-32-550) - Print Operators Backup Operators (S-1-5-32-551) - Backup Operators Replicators (S-1-5-32-552) - Replicators this seems to be okay, don't it? Holger Collen Blijenberg schrieb: what do you see with the 'net groupmap list' command.. maybe you need to map them manually, (net group add .) coz' this became the default behavior for the 3.0.23 version... Cheers Collen Holger Wesser wrote: Hi there, I'm running Debian Sarge with the sernet-packages of Samba. Yesterday I updated from 3.0.22 to 3.0.23. When I start the usrmgr.exe, I still are able to modify users but I cannot see/modify groups anymore. Where could I start to find the problem? Thanks. Holger -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] USRMGR.exe not working properly
Hi there, I'm running Debian Sarge with the sernet-packages of Samba. Yesterday I updated from 3.0.22 to 3.0.23. When I start the usrmgr.exe, I still are able to modify users but I cannot see/modify groups anymore. Where could I start to find the problem? Thanks. Holger -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.exe not working properly
what do you see with the 'net groupmap list' command.. maybe you need to map them manually, (net group add .) coz' this became the default behavior for the 3.0.23 version... Cheers Collen Holger Wesser wrote: Hi there, I'm running Debian Sarge with the sernet-packages of Samba. Yesterday I updated from 3.0.22 to 3.0.23. When I start the usrmgr.exe, I still are able to modify users but I cannot see/modify groups anymore. Where could I start to find the problem? Thanks. Holger -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.exe not working properly
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Holger Wesser wrote: Hi there, I'm running Debian Sarge with the sernet-packages of Samba. Yesterday I updated from 3.0.22 to 3.0.23. When I start the usrmgr.exe, I still are able to modify users but I cannot see/modify groups anymore. Where could I start to find the problem? Hmmm...works fine here. Are none of the groups listed ? What passdb backend are you using ? cheers, jerry = Samba--- http://www.samba.org Centeris --- http://www.centeris.com What man is a man who does not make the world better? --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFEt42wIR7qMdg1EfYRAij3AKCqLVvNng6janii+qCO2fIS37+u/gCgqrE7 1QdgHbxGUC5HH+D2q3s6vtA= =URzF -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] usrmgr.exe group name could not be found error
Hello, I have the same problem this post : http://marc.theaimsgroup.com/?l=sambam=114881731013700w=2 After read the solution, What can i do for an production server on next week ? samba 3.0.22 is stable version, anybody know if it fixed this bug. thanks. Rodolphe -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] usrmgr.exe group name could not be found error
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tom wrote: It seems the 3.0.23rc1 version has fixed this issue on my PDC. Excellent! Thanks for the testing and feedback. cheers, jerry = Samba--- http://www.samba.org Centeris --- http://www.centeris.com What man is a man who does not make the world better? --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFEeYqoIR7qMdg1EfYRApgrAJ9njKJtowjoLFLPUdDtP6unmxLuLgCg1xsf w2cwd9BNha84cAXIWjzm4MI= =Azhe -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] usrmgr.exe group name could not be found error
It seems the 3.0.23rc1 version has fixed this issue on my PDC. Thank you. Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tom wrote: I've been having this problem on one of my PDC's where when using usrmgr from a windows box, I get the error: The group name could not be found. Since all of the groups samba is interested in exist and since they are all mapped to the appropriate posix groups I'm not sure where to start with this one. Please test 3.0.23rc1 and let me know if this is better. We spent a good bit of time working on users and groups in the current code. cheers, jerry = Samba--- http://www.samba.org Centeris --- http://www.centeris.com What man is a man who does not make the world better? --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFEdaF0IR7qMdg1EfYRAkokAKCyJccv0DLI5niw7GxdG7dla/n5DACg0Ei0 kOnY5YQHP3mKuHtnkkD4jhk= =gzGi -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] usrmgr.exe group name could not be found error
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tom wrote: I've been having this problem on one of my PDC's where when using usrmgr from a windows box, I get the error: The group name could not be found. Since all of the groups samba is interested in exist and since they are all mapped to the appropriate posix groups I'm not sure where to start with this one. Please test 3.0.23rc1 and let me know if this is better. We spent a good bit of time working on users and groups in the current code. cheers, jerry = Samba--- http://www.samba.org Centeris --- http://www.centeris.com What man is a man who does not make the world better? --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFEdaF0IR7qMdg1EfYRAkokAKCyJccv0DLI5niw7GxdG7dla/n5DACg0Ei0 kOnY5YQHP3mKuHtnkkD4jhk= =gzGi -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] usrmgr.exe group name could not be found error
I've been having this problem on one of my PDC's where when using usrmgr from a windows box, I get the error: The group name could not be found. Since all of the groups samba is interested in exist and since they are all mapped to the appropriate posix groups I'm not sure where to start with this one. A 'net rpc group list' gives the following: Domain Guests Domain Admins Domain Users A 'net groupmap list' provides the following: System Operators (S-1-5-32-549) - -1 Replicators (S-1-5-32-552) - -1 Guests (S-1-5-32-546) - -1 Domain Guests (S-1-5-21-1579542642-193579-1944909670-514) - nobody Domain Admins (S-1-5-21-1579542642-193579-1944909670-512) - root Power Users (S-1-5-32-547) - -1 Print Operators (S-1-5-32-550) - -1 Administrators (S-1-5-32-544) - -1 Account Operators (S-1-5-32-548) - -1 Domain Users (S-1-5-21-1579542642-193579-1944909670-513) - users Backup Operators (S-1-5-32-551) - -1 Users (S-1-5-32-545) - -1 smb.conf relevant parts: passdb backend = tdbsam add user script = /usr/sbin/useradd -m '%u' delete user script = /usr/sbin/userdel -r '%u' add group script = /usr/sbin/groupadd '%g' delete group script = /usr/sbin/groupdel '%g' add user to group script = /usr/bin/gpasswd -a '%u' '%g' delete user from group script = /usr/bin/gpasswd -d '%u' '%g' add machine script = /usr/sbin/useradd -s /bin/false -d /tmp '%u' shutdown script = /var/lib/samba/scripts/shutdown.sh abort shutdown script = /sbin/shutdown -c map acl inherit = Yes What log level should I look at if required? This is running on Slackware 9.1, Samba 3.0.21b. Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
same here, thx Umberto Zanatta wrote: Hi, I've compiled samba with the patch and installed it. both of usrmgr and srvmgr are working now. Thanks. Il giorno gio, 01/09/2005 alle 14.09 -0500, Gerald (Jerry) Carter ha scritto: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Umberto Zanatta wrote: | Hi, | | my test system is a w2k server. my server is a SLES8 with Samba 3.0.20 | (I get it from ftp.sernet.de). | | I've tried to start srvmgr: same result! | | it says: «Il servizio Server non è avviato» - I can translate in: «The | service Server is not start». | | There are some strange randoms errors on smbd (but not when usrmgr e | srvmgr starts): | | Sep 1 20:44:41 provtvlp smbd[7699]: Failed to setup RT_SIGNAL_LEASE | handler | Sep 1 20:44:41 provtvlp smbd[7699]: [2005/09/01 20:44:41, 0, | effective(0, 0), real(0, 0)] | smbd/notify_kernel.c:kernel_notify_init(224) | | On other way samba is working better than old one. So I'm confused. What is not working in 3.0.20 after applying the patches at http://www.samba.org/samba/patches/ ? cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDF1H/IR7qMdg1EfYRAvxqAKCDe/LbKWHsLNLOk9q+sok4hk3TfACffTSM SQZC1Yb/ducNZ3YIs18y6uY= =xK/A -END PGP SIGNATURE- -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution (IT) Deutscher Platz 6 D-04103 Leipzig Germany Phone: 49 (0)341 - 3550 137 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
Hi, I've compiled samba with the patch and installed it. both of usrmgr and srvmgr are working now. Thanks. Il giorno gio, 01/09/2005 alle 14.09 -0500, Gerald (Jerry) Carter ha scritto: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Umberto Zanatta wrote: | Hi, | | my test system is a w2k server. my server is a SLES8 with Samba 3.0.20 | (I get it from ftp.sernet.de). | | I've tried to start srvmgr: same result! | | it says: «Il servizio Server non è avviato» - I can translate in: «The | service Server is not start». | | There are some strange randoms errors on smbd (but not when usrmgr e | srvmgr starts): | | Sep 1 20:44:41 provtvlp smbd[7699]: Failed to setup RT_SIGNAL_LEASE | handler | Sep 1 20:44:41 provtvlp smbd[7699]: [2005/09/01 20:44:41, 0, | effective(0, 0), real(0, 0)] | smbd/notify_kernel.c:kernel_notify_init(224) | | On other way samba is working better than old one. So I'm confused. What is not working in 3.0.20 after applying the patches at http://www.samba.org/samba/patches/ ? cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDF1H/IR7qMdg1EfYRAvxqAKCDe/LbKWHsLNLOk9q+sok4hk3TfACffTSM SQZC1Yb/ducNZ3YIs18y6uY= =xK/A -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
Samba is compiled by sernet, I will try to recompile without libaio. thanks. Il giorno sab, 03/09/2005 alle 01.24 +0200, Thomas Bork ha scritto: Umberto Zanatta wrote: | Sep 1 20:44:41 provtvlp smbd[7699]: Failed to setup RT_SIGNAL_LEASE | handler I have this message, if 3.0.20 was compiled with aio support - even if aio support in smb.conf is deactivated with aio read size = aio write size = This leads here to problems with oplocking. If compiling without aio support, the oplock problems and the message is gone. der tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
I have not tested yet because the server is a PDC Server (over 400 people log on Samba everyday). I'm going to install the patch on the weekend. Thanks a lot. Cheers, uz I do hope the problem is not on SLES 8 Il giorno gio, 01/09/2005 alle 14.09 -0500, Gerald (Jerry) Carter ha scritto: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Umberto Zanatta wrote: | Hi, | | my test system is a w2k server. my server is a SLES8 with Samba 3.0.20 | (I get it from ftp.sernet.de). | | I've tried to start srvmgr: same result! | | it says: «Il servizio Server non è avviato» - I can translate in: «The | service Server is not start». | | There are some strange randoms errors on smbd (but not when usrmgr e | srvmgr starts): | | Sep 1 20:44:41 provtvlp smbd[7699]: Failed to setup RT_SIGNAL_LEASE | handler | Sep 1 20:44:41 provtvlp smbd[7699]: [2005/09/01 20:44:41, 0, | effective(0, 0), real(0, 0)] | smbd/notify_kernel.c:kernel_notify_init(224) | | On other way samba is working better than old one. So I'm confused. What is not working in 3.0.20 after applying the patches at http://www.samba.org/samba/patches/ ? cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDF1H/IR7qMdg1EfYRAvxqAKCDe/LbKWHsLNLOk9q+sok4hk3TfACffTSM SQZC1Yb/ducNZ3YIs18y6uY= =xK/A -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] USRMGR.EXE doesn't work anymore.
Hi, Just a little side note. Not really a good idea to be testing patches in production servers... Best Regards, Bruno Guerreiro -Original Message- From: Umberto Zanatta [mailto:[EMAIL PROTECTED] Sent: sexta-feira, 2 de Setembro de 2005 10:05 To: Gerald (Jerry) Carter Cc: Bruno Guerreiro; [EMAIL PROTECTED]; 'samba@lists.samba.org' Subject: Re: [Samba] USRMGR.EXE doesn't work anymore. I have not tested yet because the server is a PDC Server (over 400 people log on Samba everyday). I'm going to install the patch on the weekend. Thanks a lot. Cheers, uz I do hope the problem is not on SLES 8 Il giorno gio, 01/09/2005 alle 14.09 -0500, Gerald (Jerry) Carter ha scritto: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Umberto Zanatta wrote: | Hi, | | my test system is a w2k server. my server is a SLES8 with Samba 3.0.20 | (I get it from ftp.sernet.de). | | I've tried to start srvmgr: same result! | | it says: «Il servizio Server non è avviato» - I can translate in: «The | service Server is not start». | | There are some strange randoms errors on smbd (but not when usrmgr e | srvmgr starts): | | Sep 1 20:44:41 provtvlp smbd[7699]: Failed to setup RT_SIGNAL_LEASE | handler | Sep 1 20:44:41 provtvlp smbd[7699]: [2005/09/01 20:44:41, 0, | effective(0, 0), real(0, 0)] | smbd/notify_kernel.c:kernel_notify_init(224) | | On other way samba is working better than old one. So I'm confused. What is not working in 3.0.20 after applying the patches at http://www.samba.org/samba/patches/ ? cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDF1H/IR7qMdg1EfYRAvxqAKCDe/LbKWHsLNLOk9q+sok4hk3TfACffTSM SQZC1Yb/ducNZ3YIs18y6uY= =xK/A -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] USRMGR.EXE doesn't work anymore.
Hi, After applying the patches available today, all the problems i've mentioned have disappeared. Testing an older one, it still exists. If I add a user to more than 60 or 70 groups, that usermanager can no longer manage that user. It gives: The remote procedure call failed The user properties cannot be edited or viewed at this time I then have to refresh user/group list or else every user will fail That user also can't access resources which permissions are group based. In the samba log's the following lines appear: *** glibc detected *** double free or corruption (!prev): 0xb879cc10 *** Best Regards, Bruno Guerreiro -Original Message- From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] Sent: quinta-feira, 1 de Setembro de 2005 20:10 To: Umberto Zanatta Cc: Bruno Guerreiro; [EMAIL PROTECTED]; 'samba@lists.samba.org' Subject: Re: [Samba] USRMGR.EXE doesn't work anymore. -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Umberto Zanatta wrote: | Hi, | | my test system is a w2k server. my server is a SLES8 with Samba 3.0.20 | (I get it from ftp.sernet.de). | | I've tried to start srvmgr: same result! | | it says: «Il servizio Server non è avviato» - I can translate in: «The | service Server is not start». | | There are some strange randoms errors on smbd (but not when usrmgr e | srvmgr starts): | | Sep 1 20:44:41 provtvlp smbd[7699]: Failed to setup RT_SIGNAL_LEASE | handler | Sep 1 20:44:41 provtvlp smbd[7699]: [2005/09/01 20:44:41, 0, | effective(0, 0), real(0, 0)] | smbd/notify_kernel.c:kernel_notify_init(224) | | On other way samba is working better than old one. So I'm confused. What is not working in 3.0.20 after applying the patches at http://www.samba.org/samba/patches/ ? cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDF1H/IR7qMdg1EfYRAvxqAKCDe/LbKWHsLNLOk9q+sok4hk3TfACffTSM SQZC1Yb/ducNZ3YIs18y6uY= =xK/A -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
Umberto Zanatta wrote: | Sep 1 20:44:41 provtvlp smbd[7699]: Failed to setup RT_SIGNAL_LEASE | handler I have this message, if 3.0.20 was compiled with aio support - even if aio support in smb.conf is deactivated with aio read size = aio write size = This leads here to problems with oplocking. If compiling without aio support, the oplock problems and the message is gone. der tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
On Sat, Sep 03, 2005 at 01:24:06AM +0200, Thomas Bork wrote: Umberto Zanatta wrote: | Sep 1 20:44:41 provtvlp smbd[7699]: Failed to setup RT_SIGNAL_LEASE | handler I have this message, if 3.0.20 was compiled with aio support - even if aio support in smb.conf is deactivated with aio read size = aio write size = This leads here to problems with oplocking. If compiling without aio support, the oplock problems and the message is gone. aio support is exteremly experimental. I did it to learn about what effects this would have on our performance (the answer - it's a *negative* unless there's kernel support - even then it may not help...). Please don't turn this on unless you're currently working on glibc or kernel aio code paths. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
Jeremy Allison wrote: | Sep 1 20:44:41 provtvlp smbd[7699]: Failed to setup RT_SIGNAL_LEASE | handler I have this message, if 3.0.20 was compiled with aio support - even if [...] aio support is exteremly experimental. I did it to learn about what effects this would have on our performance (the answer - it's a *negative* unless there's kernel support - even then it may not help...). Please don't turn this on unless you're currently working on glibc or kernel aio code paths. It was only meant as a tip for the error message 'Failed to setup RT_SIGNAL_LEASE' for Umberto. I tested the aio support only a short time and removed it due problems. der tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] USRMGR.EXE doesn't work anymore.
Hi, I've got the same problem ( http://lists.samba.org/archive/samba/2005-August/109895.html ). It seems this has been laying around since RC1/2 ( http://lists.samba.org/archive/samba/2005-August/109465.html ) I've already supplied a level 10 log to Günther Deschner, If you wish I may forward it to you. Best Regards, Bruno Guerreiro -Original Message- From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] Sent: quarta-feira, 31 de Agosto de 2005 17:45 To: Umberto Zanatta Cc: samba@lists.samba.org Subject: Re: [Samba] USRMGR.EXE doesn't work anymore. -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Umberto Zanatta wrote: | This is the log about usrmgr. | | | Aug 31 18:26:55 provtvlp smbd[17237]: [2005/08/31 18:26:55, 0, | effective(0, 512), real(0, 0)] rpc_parse/parse_prs.c:prs_mem_get(533) | Aug 31 18:26:55 provtvlp smbd[17237]: prs_mem_get: reading data of | size 4 would overrun buffer. | Aug 31 18:26:55 provtvlp smbd[17237]: [2005/08/31 18:26:55, 0, | effective(0, 512), real(0, 0)] rpc_server/srv_pipe.c:api_rpcTNP(1572) | Aug 31 18:26:55 provtvlp smbd[17237]: api_rpcTNP: winreg: | REG_CREATE_KEY_EX failed. | | Thank you. Seriously? ok. I'll fix that up. Might be later this week. I'll post a patch once I'm done. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFd6PIR7qMdg1EfYRAl+JAJ9TEpPUHW26rm0/gBHSw/NvqMzhQwCfT8qy dTvq/Hxm6iTM3m7jeRWFD5k= =G0R0 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bruno Guerreiro wrote: | Hi, | I've got the same problem ( | http://lists.samba.org/archive/samba/2005-August/109895.html ). | It seems this has been laying around since RC1/2 ( | http://lists.samba.org/archive/samba/2005-August/109465.html ) | I've already supplied a level 10 log to Günther Deschner, | If you wish I may forward it to you. Please do. If it's just the REG_CREATE_KEY issue, then I might be able to fix that today. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFt5CIR7qMdg1EfYRAnTiAKDUD4YQ5ay4SKCAD+Gkrt+XWCxWUwCfZQdT II0cpiE9vLCnSKuRksD2rTY= =SltA -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] USRMGR.EXE doesn't work anymore.
Where goes. The log.vmxp is for the client running usrmgr Best regards, Bruno Guerreiro -Original Message- From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] Sent: quinta-feira, 1 de Setembro de 2005 11:56 To: Bruno Guerreiro Cc: 'samba@lists.samba.org' Subject: Re: [Samba] USRMGR.EXE doesn't work anymore. -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bruno Guerreiro wrote: | Hi, | I've got the same problem ( | http://lists.samba.org/archive/samba/2005-August/109895.html ). | It seems this has been laying around since RC1/2 ( | http://lists.samba.org/archive/samba/2005-August/109465.html ) | I've already supplied a level 10 log to Günther Deschner, | If you wish I may forward it to you. Please do. If it's just the REG_CREATE_KEY issue, then I might be able to fix that today. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFt5CIR7qMdg1EfYRAnTiAKDUD4YQ5ay4SKCAD+Gkrt+XWCxWUwCfZQdT II0cpiE9vLCnSKuRksD2rTY= =SltA -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ok Folks I've tried but cannot reproduce this. The REG_CREATE_EX failure is during a domain logon from Windows XP. The client is trying to create [System\CurrentControlSet\Control\Terminal Server\ DefaultUserConfiguration] I can fix this, but it appears to have nothing to do with user manager. Until I get those logs or a faw network sniff of the connection failure, I'm stuck. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFulZIR7qMdg1EfYRArG8AKC4ciUg01uELfBdcSbbZKrF+9kD3ACeP7SW 3sG3s43tc1vrKj/5VfzPe+Q= =HMRV -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gerald (Jerry) Carter wrote: | ok Folks | | I've tried but cannot reproduce this. The REG_CREATE_EX | failure is during a domain logon from Windows XP. The | client is trying to create | | [System\CurrentControlSet\Control\Terminal Server\ | DefaultUserConfiguration] | | I can fix this, but it appears to have nothing to do | with user manager. Until I get those logs or a faw | network sniff of the connection failure, I'm stuck. ok. Can you folks try out the patch at http://samba.org/~jerry/patches/regcreatekey_v1.patch and let me know if that fixes the usrmgr.exe failures you are seeing? It should at least fix the REG_CREATE_KEY_EX failures in the logs. cheer,s jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFv99IR7qMdg1EfYRAjEQAKDSu2KW1wglAXbMkWePCXQNAc0RoQCfV1Hk hdNoTno8WFF8iFDRzdmGPSg= =+K+E -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
Gerald (Jerry) Carter wrote: ok. Can you folks try out the patch at http://samba.org/~jerry/patches/regcreatekey_v1.patch and let me know if that fixes the usrmgr.exe failures you are seeing? It should at least fix the REG_CREATE_KEY_EX failures in the logs. + HKLM\\SYSTEM\\CurrentControlSet\\Control\\Termininal Server\DefaultUserConfiguration, Are you shure, you only need one backslash before DefaultUserConfiguration and not two backslashes as in the rest of rpc_reg.h? -- der tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas Bork wrote: | Gerald (Jerry) Carter wrote: | | ok. Can you folks try out the patch at | http://samba.org/~jerry/patches/regcreatekey_v1.patch | and let me know if that fixes the usrmgr.exe failures | you are seeing? It should at least fix the REG_CREATE_KEY_EX | failures in the logs. | | +HKLM\\SYSTEM\\CurrentControlSet\\Control\\Termininal | Server\DefaultUserConfiguration, | | Are you shure, you only need one backslash before | DefaultUserConfiguration and not two backslashes as in the rest of | rpc_reg.h? Your right. Thanks for catching it. But that's ifdef'd out for now. I wanted to focus on the rpc fault before adding the key (which would prevent the client from sending the RegCraetKeyEx() request altogether. That mistake, shouldn't make any difference in the patch for now. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFwMBIR7qMdg1EfYRAqiRAJ4l031odqMidvBVrxmQJoWAB7CuMwCcD4Nk IHCWtLyVObEBz0/tLIggyI8= =lZwu -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] USRMGR.EXE doesn't work anymore.
, 10] lib/adt_tree.c:pathtree_find(460) pathtree_find: Exit [2005/08/31 18:26:56, 5] registry/reg_db.c:regdb_fetch_keys(382) regdb_fetch_keys: tdb lookup failed to locate key [HKLM\System\CurrentControlSet\Control\Terminal Server] [2005/08/31 18:26:56, 7] rpc_server/srv_reg_nt.c:open_registry_key(200) open_registry_key: exit Best Regards, Bruno Guerreiro -Original Message- From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] Sent: quinta-feira, 1 de Setembro de 2005 14:18 To: Bruno Guerreiro; [EMAIL PROTECTED]; [EMAIL PROTECTED] Cc: 'samba@lists.samba.org' Subject: Re: [Samba] USRMGR.EXE doesn't work anymore. -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gerald (Jerry) Carter wrote: | ok Folks | | I've tried but cannot reproduce this. The REG_CREATE_EX | failure is during a domain logon from Windows XP. The | client is trying to create | | [System\CurrentControlSet\Control\Terminal Server\ | DefaultUserConfiguration] | | I can fix this, but it appears to have nothing to do | with user manager. Until I get those logs or a faw | network sniff of the connection failure, I'm stuck. ok. Can you folks try out the patch at http://samba.org/~jerry/patches/regcreatekey_v1.patch and let me know if that fixes the usrmgr.exe failures you are seeing? It should at least fix the REG_CREATE_KEY_EX failures in the logs. cheer,s jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFv99IR7qMdg1EfYRAjEQAKDSu2KW1wglAXbMkWePCXQNAc0RoQCfV1Hk hdNoTno8WFF8iFDRzdmGPSg= =+K+E -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bruno Guerreiro wrote: | I started by getting to the point where users and | local groups were listed. Then a Stub received bad | data message appeared. Tried net rpc groupmap list | and net rpc group It worked. | Tried usermanager again, no errors | Tried using usermanager to modify user/groups. It worked. | Restarted samba and Ldap. Usermanager still works. | Restarted windows client. Usermanager still works. | | So, i guessed you smashed the right bug. :-) Still very curious to me. Wonder why I could never reproduce the usrmgr.exe failure. Hmmm... | The weird thing is the REG_CREATE_KEY_EX still | gives an error: It's a failure to create the key rather than an RPC failure error though. I've also gone ahead and added the registry key to the Samba's registry.tdb file in the patch posted at http://www.samba.org/samba/patches/ Thanks for the help testing the changes. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFyprIR7qMdg1EfYRAi4bAJ9j4Zr+kuI5izGi00ysfP7rntic/gCfQM0p 8z9c27lHJBJH2jApcRrQEag= =zq+2 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore. cant reproduce it
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Folks, i had doubled checked any procedure with usrmgr with smb pdc ldap on suse 9.3 latest stable samba version 3.20 from suse so i have no failures with create user, delete user, create groups, delete Groups, and add/del users to group so i am total happy. Are you sure about this failure, i cant reproduce it Regards Gerald (Jerry) Carter schrieb: | ok Folks | | I've tried but cannot reproduce this. The REG_CREATE_EX | failure is during a domain logon from Windows XP. The | client is trying to create | | [System\CurrentControlSet\Control\Terminal Server\ | DefaultUserConfiguration] | | I can fix this, but it appears to have nothing to do | with user manager. Until I get those logs or a faw | network sniff of the connection failure, I'm stuck. | | | | | | cheers, jerry | | - -- Mit freundlichen Gruessen Best Regards Robert Schetterer robert_at_schetterer.org Munich / Bavaria / Germany https://www.schetterer.org \** \* gnupgp \* public key: \* https://www.schetterer.org/public.key \** -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFy2lb0iqzJq+0MgRApkvAJwP0HEWRDkduuKZCqd5a1YLGew9oQCePLUn foiEtfxgTJTSApX4oW12So0= =XJ94 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
Gerald (Jerry) Carter wrote: failure error though. I've also gone ahead and added the registry key to the Samba's registry.tdb file in the patch posted at http://www.samba.org/samba/patches/ The only error message in the samba logs while joining the 3.0.20 samba domain with XP SP2 is now: [2005/09/01 18:55:09.745874, 0, pid=26389] rpc_server/srv_samr.c:api_samr_set_userinfo(786) api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO. Without the patch http://samba.org/samba/patches/regcreatekey_winxp_v1.patch it was: [2005/08/09 18:45:07, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(786) api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO. [2005/08/09 18:46:03, 0] lib/util_sock.c:get_peer_addr(1222) getpeername failed. Error was Transport endpoint is not connected [2005/08/09 18:46:03, 0] lib/util_sock.c:get_peer_addr(1222) getpeername failed. Error was Transport endpoint is not connected [2005/08/09 18:46:03, 0] lib/util_sock.c:get_peer_addr(1222) getpeername failed. Error was Transport endpoint is not connected [2005/08/09 18:46:03, 0] lib/access.c:check_access(328) [2005/08/09 18:46:03, 0] lib/util_sock.c:get_peer_addr(1222) getpeername failed. Error was Transport endpoint is not connected Denied connection from (0.0.0.0) [2005/08/09 18:46:03, 0] lib/util_sock.c:write_data(554) write_data: write failure in writing to client 0.0.0.0. Error Connection reset by peer [2005/08/09 18:46:03, 0] lib/util_sock.c:send_smb(762) Error writing 5 bytes to client. -1. (Connection reset by peer) [2005/08/09 18:50:21, 0] rpc_server/srv_pipe.c:api_pipe_bind_req(981) Attempt to bind using schannel without successful serverauth2 [2005/08/09 18:50:26, 0] rpc_parse/parse_prs.c:prs_mem_get(533) prs_mem_get: reading data of size 4 would overrun buffer. [2005/08/09 18:50:26, 0] rpc_server/srv_pipe.c:api_rpcTNP(1572) api_rpcTNP: winreg: REG_CREATE_KEY_EX failed. Thanks a lot! der tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore. cant reproduce it
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert Schetterer wrote: | Hi Folks, | | i had doubled checked any procedure with usrmgr | with smb pdc ldap on suse 9.3 latest stable samba version 3.20 from suse | so i have no failures with create user, delete user, | create groups, delete Groups, and add/del users to group | so i am total happy. | Are you sure about this failure, i cant reproduce it I'm in the same boat. Everything works for me. But the RegCreateKeyEx() is real. I've seen it on a domain logon from a Windows XP client. So whether or not the usrmgr.exe failurea are related, this was still a bug. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFzX7IR7qMdg1EfYRAgXBAKCyjVvP/rQMslM9a/qCkLdsARnEygCfTQGb x47d/1Yc0zmRUTwxqbZqluk= =tGiS -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas Bork wrote: | Gerald (Jerry) Carter wrote: | | failure error though. I've also gone ahead and added | the registry key to the Samba's registry.tdb file in | the patch posted at http://www.samba.org/samba/patches/ | | The only error message in the samba logs while joining | the 3.0.20 samba domain with XP SP2 is now: | | [2005/09/01 18:55:09.745874, 0, pid=26389] | rpc_server/srv_samr.c:api_samr_set_userinfo(786) | api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO. That's normal. It's an unsupported info level and has been there for a while now. Glad the other part worked out ok. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFzaeIR7qMdg1EfYRAukEAJ9F0ke87AMLn/FIr4Y6/BTvNkrCJwCdFBfc jBVUmcI2TrYTcc6MTezasjE= =MsYL -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
Hi, my test system is a w2k server. my server is a SLES8 with Samba 3.0.20 (I get it from ftp.sernet.de). I've tried to start srvmgr: same result! it says: «Il servizio Server non è avviato» - I can translate in: «The service Server is not start». There are some strange randoms errors on smbd (but not when usrmgr e srvmgr starts): Sep 1 20:44:41 provtvlp smbd[7699]: Failed to setup RT_SIGNAL_LEASE handler Sep 1 20:44:41 provtvlp smbd[7699]: [2005/09/01 20:44:41, 0, effective(0, 0), real(0, 0)] smbd/notify_kernel.c:kernel_notify_init(224) On other way samba is working better than old one. thanks. Il giorno gio, 01/09/2005 alle 06.43 -0500, Gerald (Jerry) Carter ha scritto: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ok Folks I've tried but cannot reproduce this. The REG_CREATE_EX failure is during a domain logon from Windows XP. The client is trying to create [System\CurrentControlSet\Control\Terminal Server\ DefaultUserConfiguration] I can fix this, but it appears to have nothing to do with user manager. Until I get those logs or a faw network sniff of the connection failure, I'm stuck. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFulZIR7qMdg1EfYRArG8AKC4ciUg01uELfBdcSbbZKrF+9kD3ACeP7SW 3sG3s43tc1vrKj/5VfzPe+Q= =HMRV -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Umberto Zanatta wrote: | Hi, | | my test system is a w2k server. my server is a SLES8 with Samba 3.0.20 | (I get it from ftp.sernet.de). | | I've tried to start srvmgr: same result! | | it says: «Il servizio Server non è avviato» - I can translate in: «The | service Server is not start». | | There are some strange randoms errors on smbd (but not when usrmgr e | srvmgr starts): | | Sep 1 20:44:41 provtvlp smbd[7699]: Failed to setup RT_SIGNAL_LEASE | handler | Sep 1 20:44:41 provtvlp smbd[7699]: [2005/09/01 20:44:41, 0, | effective(0, 0), real(0, 0)] | smbd/notify_kernel.c:kernel_notify_init(224) | | On other way samba is working better than old one. So I'm confused. What is not working in 3.0.20 after applying the patches at http://www.samba.org/samba/patches/ ? cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDF1H/IR7qMdg1EfYRAvxqAKCDe/LbKWHsLNLOk9q+sok4hk3TfACffTSM SQZC1Yb/ducNZ3YIs18y6uY= =xK/A -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] USRMGR.EXE doesn't work anymore.
I've upgraded my system at Samba 3.0.20 (SLES 8) bacause of some errors on winbind and Windows 2003. Now, usrmgr.exe doesn't work anymore. It reports: «procedure number is out of range - Do you want to administrate another domain?» USRMGR has been working for 3 years; I've made all upgrades on Windows 2000, but the results it's the same. Any Idea? uz. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
On Wed, Aug 31, 2005 at 03:49:13PM +0200, Umberto Zanatta wrote: I've upgraded my system at Samba 3.0.20 (SLES 8) bacause of some errors on winbind and Windows 2003. Now, usrmgr.exe doesn't work anymore. It reports: «procedure number is out of range - Do you want to administrate another domain?» USRMGR has been working for 3 years; I've made all upgrades on Windows 2000, but the results it's the same. Any Idea? Samba user/system database content loss during the upgrade. Cheers Geert Stappers -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Umberto Zanatta wrote: | I've upgraded my system at Samba 3.0.20 (SLES 8) bacause | of some errors on winbind and Windows 2003. | Now, usrmgr.exe doesn't work anymore. | | It reports: «procedure number is out of range - Do you want to | administrate another domain?» | USRMGR has been working for 3 years; I've made all upgrades | on Windows 2000, but the results it's the same. You're going to have to check the Samba logs for exactly what failed. This was working last time I checked (in the recent weeks). cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFcnZIR7qMdg1EfYRAvkxAJ9znDVYbW2M6MoeS6AUzoxh46Ee4gCgpm+M o9SeC1oeXMQgvRGHNV6e9H0= =Afvk -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
This is the log about usrmgr. Aug 31 18:26:55 provtvlp smbd[17237]: [2005/08/31 18:26:55, 0, effective(0, 512), real(0, 0)] rpc_parse/parse_prs.c:prs_mem_get(533) Aug 31 18:26:55 provtvlp smbd[17237]: prs_mem_get: reading data of size 4 would overrun buffer. Aug 31 18:26:55 provtvlp smbd[17237]: [2005/08/31 18:26:55, 0, effective(0, 512), real(0, 0)] rpc_server/srv_pipe.c:api_rpcTNP(1572) Aug 31 18:26:55 provtvlp smbd[17237]: api_rpcTNP: winreg: REG_CREATE_KEY_EX failed. Thank you. Il giorno mer, 31/08/2005 alle 10.16 -0500, Gerald (Jerry) Carter ha scritto: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Umberto Zanatta wrote: | I've upgraded my system at Samba 3.0.20 (SLES 8) bacause | of some errors on winbind and Windows 2003. | Now, usrmgr.exe doesn't work anymore. | | It reports: «procedure number is out of range - Do you want to | administrate another domain?» | USRMGR has been working for 3 years; I've made all upgrades | on Windows 2000, but the results it's the same. You're going to have to check the Samba logs for exactly what failed. This was working last time I checked (in the recent weeks). cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFcnZIR7qMdg1EfYRAvkxAJ9znDVYbW2M6MoeS6AUzoxh46Ee4gCgpm+M o9SeC1oeXMQgvRGHNV6e9H0= =Afvk -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE doesn't work anymore.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Umberto Zanatta wrote: | This is the log about usrmgr. | | | Aug 31 18:26:55 provtvlp smbd[17237]: [2005/08/31 18:26:55, 0, | effective(0, 512), real(0, 0)] rpc_parse/parse_prs.c:prs_mem_get(533) | Aug 31 18:26:55 provtvlp smbd[17237]: prs_mem_get: reading data of | size 4 would overrun buffer. | Aug 31 18:26:55 provtvlp smbd[17237]: [2005/08/31 18:26:55, 0, | effective(0, 512), real(0, 0)] rpc_server/srv_pipe.c:api_rpcTNP(1572) | Aug 31 18:26:55 provtvlp smbd[17237]: api_rpcTNP: winreg: | REG_CREATE_KEY_EX failed. | | Thank you. Seriously? ok. I'll fix that up. Might be later this week. I'll post a patch once I'm done. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDFd6PIR7qMdg1EfYRAl+JAJ9TEpPUHW26rm0/gBHSw/NvqMzhQwCfT8qy dTvq/Hxm6iTM3m7jeRWFD5k= =G0R0 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] usrmgr.exe and problems
Hello! Jerry you are right about script and permissions! I'm looking again to usrmgr.exe and has corrected most of the problems of which I spoke earlier This patch is corrected most problems, but i can't fixed, current moment, problems where not root create global group ... sorry :( This patch not create security holes and another holes ... :) I'm testing and is looking good ... Is try help you, i hope :) Sergey Loskutov --- srv_samr_nt.c.orig 2005-03-16 09:33:15.394423183 -1000 +++ srv_samr_nt.c 2005-03-17 17:41:13.297259499 -1000 @@ -2865,8 +2865,10 @@ * id21. I don't know if they need to be set.--jerry */ - if (IS_SAM_CHANGED(pwd, PDB_GROUPSID)) - set_unix_primary_group(pwd); + if (IS_SAM_CHANGED(pwd, PDB_GROUPSID) !set_unix_primary_group(pwd) ) { + pdb_free_sam(pwd); + return False; + } /* write the change out */ if(!pdb_update_sam_account(pwd)) { @@ -2933,8 +2935,10 @@ ZERO_STRUCT(plaintext_buf); - if (IS_SAM_CHANGED(pwd, PDB_GROUPSID)) - set_unix_primary_group(pwd); + if (IS_SAM_CHANGED(pwd, PDB_GROUPSID) !set_unix_primary_group(pwd) ) { + pdb_free_sam(pwd); + return False; + } if(!pdb_update_sam_account(pwd)) { pdb_free_sam(pwd); @@ -3624,12 +3628,16 @@ sid_copy(user_sid, get_global_sam_sid()); sid_append_rid(user_sid, q_u-rid); - + + ret = pdb_init_sam(sam_user); + if (!NT_STATUS_IS_OK(ret)) return ret; + become_root(); check = pdb_getsampwsid(sam_user, user_sid); + unbecome_root(); if (check != True) { pdb_free_sam(sam_user); @@ -3708,6 +3716,7 @@ uint32 acc_granted; SE_PRIV se_rights; BOOL can_add_accounts; + BOOL ret; /* * delete the group member named q_u-rid @@ -3740,7 +3749,12 @@ /* check if the user exists before trying to remove it from the group */ pdb_init_sam(sam_pass); - if (!pdb_getsampwsid(sam_pass, user_sid)) { + + become_root(); + ret = pdb_getsampwsid(sam_pass, user_sid); + unbecome_root(); + + if (!ret) { DEBUG(5,(User %s doesn't exist.\n, pdb_get_username(sam_pass))); pdb_free_sam(sam_pass); return NT_STATUS_NO_SUCH_USER; @@ -4253,6 +4267,7 @@ GROUP_MAP map; GROUP_INFO_CTR *ctr; uint32 acc_granted; + BOOL ret; if (!get_lsa_policy_samr_sid(p, q_u-pol, group_sid, acc_granted)) return NT_STATUS_INVALID_HANDLE; @@ -4276,9 +4291,13 @@ default: return NT_STATUS_INVALID_INFO_CLASS; } + + become_root(); + ret = pdb_update_group_mapping_entry(map); + unbecome_root(); - if(!pdb_update_group_mapping_entry(map)) { - return NT_STATUS_NO_SUCH_GROUP; + if(!ret) { + return NT_STATUS_NO_SUCH_GROUP; } return NT_STATUS_OK; @@ -4430,6 +4449,7 @@ BOOLis_user = False; NTSTATUSresult; enum SID_NAME_USE type = SID_NAME_UNKNOWN; + BOOLret; sid_copy( delete_sid, q_u-sid.sid ); @@ -4466,18 +4486,27 @@ pdb_init_sam(sam_pass); - if ( pdb_getsampwsid(sam_pass, delete_sid) ) { - is_user = True; + become_root(); + + ret = pdb_getsampwsid(sam_pass, delete_sid); + + if ( ret ) { + is_user = True; } else { - /* maybe it is a group */ - if( !pdb_getgrsid(map, delete_sid) ) { - DEBUG(3,(_samr_remove_sid_foreign_domain: %s is not a user or a group!\n, - sid_string_static(delete_sid))); - result = NT_STATUS_INVALID_SID; - goto done; - } + /* maybe it is a group */ + ret = pdb_getgrsid(map, delete_sid); + } + + unbecome_root(); + + if ( !ret ) { + DEBUG(3,(_samr_remove_sid_foreign_domain: %s is not a user or a group!\n, + sid_string_static(delete_sid))); + result = NT_STATUS_INVALID_SID; + goto done; } + /* we can only delete a user from a group since we don't have nested groups anyways. So in the latter case, just say OK */ @@ -4486,7 +4515,10 @@ int num_groups, i; struct group*grp2; - if ( pdb_enum_group_mapping(type, mappings, num_groups, False) num_groups0 ) { + become_root(); + ret = pdb_enum_group_mapping(type, mappings, num_groups,
[Samba] USRMGR.EXE smbpasswd as password backend
Hi to everybody. I'm using samba 3.0.6 as PDC and everything is ok. I'm now trying to use some windows managing tool, as USRMGR to add user and group, but I'm finding some problem, in particular about some of the user configuration detail that I can't set. I've read that there is an usefull tool to manage all the user detail but I don't know how to set up the add script Essentially I ask to you if you know which parameters (for example %u as user name) are passed from USRMGR to SAMBA when you try to add an user or a group so I can create an appropriate script!!! I hope you can understand (sorry for my english)! Thanks to all -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Usrmgr.exe / W2K Server
Hi! I can use this legacy tool fine to display/modify user information on W2K workstations. Double click a user on W2K Server gives procedure out of range Any idea? Environment is Samba 3.0.4 / LDAP. DB -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE, passwd sync and failed user addition
Joseph Doran schrieb: Hi, Sorry if I am stating the obvious, but I could not find any info anywhere about this issue. Just a quick email to alert people to the fact that some posts that I have been scouring over suggest that certain individuals are unable to add users through usrmgr.exe. I have spent the last 4~5 hours hunting down this very problem looking at permissions, groups and so on. So I thought I would pass the info on. It would appear the problem can arise due to the passwd chat (when called as root). I am running Redhat 9.0 and the usual passwd chat is slightly different to version 7.1 from which I took the smb.conf over from. Keyword (UNIX) seems to have been dropped. I did read somewhere that some versions of unix/linux display ReType instead of Retype, although I cant confirm this. 7.0 expects *Changing*password*for*user*%u.\n*New*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* 7.1 expects *Changing*password*for*user*%u.\n*New*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* whereas 7.2 expects *Changing*password*for*user*%u.\n*New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* and 9.x expects *Changing*password*for*user*%u.\n*New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* Dont have access to a version 8.0 box. Hopefully this will save someone trawling though, passwd chat debug = yes, and 101 level debugs :-). To:- samba-technical list. Would it not be possible to say add a dummy user account, change the passwd and capture the stdout, and delete dummy account, to populate the chat script automatically? Best Regards Joe. PS: I am not on list, so reply directly if you wish to make contact. Hi ,nice to see that, but including the samba versions would be the more related info ,instead of redhat versions Regards -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE, passwd sync and failed user addition
Hi Robert, I am running Version 3.0.2a. I did not add the version number as I would have thought that it would affect any version that uses passwd chat. Regards Joe. Joseph Doran schrieb: Hi, Sorry if I am stating the obvious, but I could not find any info anywhere about this issue. Just a quick email to alert people to the fact that some posts that I have been scouring over suggest that certain individuals are unable to add users through usrmgr.exe. I have spent the last 4~5 hours hunting down this very problem looking at permissions, groups and so on. So I thought I would pass the info on. It would appear the problem can arise due to the passwd chat (when called as root). I am running Redhat 9.0 and the usual passwd chat is slightly different to version 7.1 from which I took the smb.conf over from. Keyword (UNIX) seems to have been dropped. I did read somewhere that some versions of unix/linux display ReType instead of Retype, although I cant confirm this. 7.0 expects *Changing*password*for*user*%u.\n*New*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* 7.1 expects *Changing*password*for*user*%u.\n*New*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* whereas 7.2 expects *Changing*password*for*user*%u.\n*New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* and 9.x expects *Changing*password*for*user*%u.\n*New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* Dont have access to a version 8.0 box. Hopefully this will save someone trawling though, passwd chat debug = yes, and 101 level debugs :-). To:- samba-technical list. Would it not be possible to say add a dummy user account, change the passwd and capture the stdout, and delete dummy account, to populate the chat script automatically? Best Regards Joe. PS: I am not on list, so reply directly if you wish to make contact. Hi ,nice to see that, but including the samba versions would be the more related info ,instead of redhat versions Regards -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] USRMGR.EXE, passwd sync and failed user addition
Hi, Sorry if I am stating the obvious, but I could not find any info anywhere about this issue. Just a quick email to alert people to the fact that some posts that I have been scouring over suggest that certain individuals are unable to add users through usrmgr.exe. I have spent the last 4~5 hours hunting down this very problem looking at permissions, groups and so on. So I thought I would pass the info on. It would appear the problem can arise due to the passwd chat (when called as root). I am running Redhat 9.0 and the usual passwd chat is slightly different to version 7.1 from which I took the smb.conf over from. Keyword (UNIX) seems to have been dropped. I did read somewhere that some versions of unix/linux display ReType instead of Retype, although I cant confirm this. 7.0 expects *Changing*password*for*user*%u.\n*New*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* 7.1 expects *Changing*password*for*user*%u.\n*New*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* whereas 7.2 expects *Changing*password*for*user*%u.\n*New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* and 9.x expects *Changing*password*for*user*%u.\n*New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* Dont have access to a version 8.0 box. Hopefully this will save someone trawling though, passwd chat debug = yes, and 101 level debugs :-). To:- samba-technical list. Would it not be possible to say add a dummy user account, change the passwd and capture the stdout, and delete dummy account, to populate the chat script automatically? Best Regards Joe. PS: I am not on list, so reply directly if you wish to make contact. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] usrmgr.exe problems / samba3.0.1 LDAP
Hello, I'm using Samba 3.0.1 with LDAP backend running as a PDC here. When I start up usrmgr.exe from Windows NT, it will read all the users (or computers, for srvmgr.exe) in the domain and report them back correctly. However, whomever I am logged in as ( including gid 512 users) it will not let me see details or change anything. In the logs after trying to view a users details I will get (hand typed from across the room, so forgive the lack of log lines): rpc_server/src_samr_nt.c:access_check_samr_object(93) _samr_open_user: ACCESS DENIED (requested: 0x00601bf) Before that it does access checks se_access_check of different SID variations, ending in also S-1-5-21-...-512. Does anyone have any idea why it is not enabling me to use the usrmgr.exe to manage users? The scripts work great as far as I am concerned, but with the school I work for enrolling new students soon, I need a counselor level tool that they can do simple tasks with. :) If not, does anyone have any recommendations for other gui / cheesy user management that will run on windows? Thanks in advance! Toby Schaefer -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE won't add user
_ / | /usr/local/samba/bin/mygroupadd \_ / | #!/bin/bash | | # Add the group using normal system groupadd tool. | groupadd smbtmpgrp00 | | thegid=`cat /etc/group | grep smbtmpgrp00 | cut -d : -f3` | | # Now change the name to what we want for the MS Windows networking end | cp /etc/group /etc/group.bak | cat /etc/group.bak | sed -e s/smbtmpgrp00/$1/g /etc/group | | # Now return the GID as would normally happen. | echo $thegid | exit 0 | \_ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba I hope I'm not imposing, but I was reading your post. I'm setting up my own Domain using Samba 3.0. My Domain was running to my satisfaction using 2.27a. I have since upgraded to 3.0, have been having some problems. Did USRMGR.EXE administration work in 2.27a? that is mygroupdel. I was wondering if you could post it. I noticed I haven't written up any mygroupdel. But now I tried /usr/sbin/groupdel and it works even for strange group names like Live Beef sh-2.05b# /usr/local/samba/bin/mygroupadd Live Beef 414 bash-2.05b# fgrep Live Beef /etc/group Live Beef:x:414: bash-2.05b# /usr/sbin/groupdel Live Beef bash-2.05b# fgrep Live Beef /etc/group bash-2.05b# So I changed my smb.conf line to delete group script = /usr/sbin/groupdel %g Is it possible my problems were caused by not-working group deletion? I doubt USRMGR.EXE would delete any groups on user addition. Cl -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] USRMGR.EXE now adds users :)
Was it my fault, of course. passwd program = /bin/passwd was wrong. Right is passwd program = /bin/passwd %u Passwd chat: passwd chat = *ew*password* %n\n *ew*password* %n\n I can add users, add groups, delete users, delete groups,... :) My backend is tdbsam. How did I find it? Was reading through /usr/local/samba/var/log.smbd and saw a complaint that passwd program must contain %u. Why doesn't testparm test this? If it did, it would save me two days of experiments ;-) Cl -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] USRMGR.EXE won't add user
Hello Tried to add user in user manager from domains, NT4.0 client, logged in as root on the NT client. Clicked New User, filled in nick, description, full name, password1, password2 (was dead sure they were the same, carefully typed 9-chars long stupid passwd). The user wasn't in the database. Then clicked OK. Never managed to add user this way. Checked all the add user, del user etc. scripts, tried manually that they: * add user * add group * add user to group * delete user from group * delete user root is in admin users in smb.conf. Tried the following version of samba: CVS head 2003-12-10: Access is denied 3.0.1rc1:Access is denied 3.0.1rc2:Access is denied 3.0.0: Access is denied /etc/passwd and pdbedit -L don't show any new user after this action. But when the delete user script is removed/made unfunctional, the user appears in /etc/passwd (but not in pdbedit -L). Between tests, I removed the client from the domain, killed all connections in SWAT, removed whole samba, reinstalled, reinitialized databases, put the client back by pdbedit, rebooted client, ran usrmgr.exe. Can you help what can be set wrong in my case? Config files and scripts follow. Logs don't say any error. There is a bunch of DCE RPC calls in ethereal logs: 17 SAMR_LOOKUP_NAMES 57 SAMR_CONNECT 44 SAMR_GET_USRDOM_PWINFO 7 SAMR_OPEN_DOMAIN 0 SAMR_CONNECT_ANON 7 SAMR_OPEN_DOMAIN 50 SAMR_CREATE_USER 36 SAMR_QUERY_USERINFO 44 SAMR_GET_USRDOM_PWINFO 58 SAMR_SET_USERINFO 35 SAMR_DELETE_USER 1 SAMR_CLOSE_HND Has anyone working USRMGR.EXE administrastion including adding users? Can you please paste your config files and additional info necessary to make this work? Cl _ / | /usr/local/samba/lib/smb.conf \_ / | # Samba config file created using SWAT | # from 127.0.0.1 (127.0.0.1) | # Date: 2003/11/19 15:51:41 | | # Global parameters | [global] | security = user | wins support = no | workgroup = KEVF_D4 | encrypt passwords = yes | domain logons = yes | null passwords = yes | interfaces = eth0 | preferred master = Yes | domain master = Yes | debuglevel = 3 | ldap ssl = no | admin users = admin,prech,root | hosts allow = 195.113.0.0/255.255.0.0 | # hide local users = yes | name resolve order=lmhosts,bcast | | socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 | | unix password sync = yes | passwd program = /bin/passwd | passwd chat = *ew*password* %n\n *new*password* %n\n | | add user to group script = /usr/local/samba/bin/myaddusertogroup %u %g | add user script = /usr/sbin/useradd -c 'Samba User' -d /dev/null -g smbusers -s /bin/false %u | add machine script = /usr/sbin/useradd -c 'Machine' -d /dev/null -g machines -s /bin/false %u | add group script = /usr/local/samba/bin/mygroupadd %g | delete group script = /usr/local/samba/bin/mygroupdel %g | delete user script = /usr/sbin/userdel %u | delete user from group script = /usr/local/samba/bin/mydeleteuserfromgroupscript %u %g | delete user script = /usr/sbin/userdel %u | | map to guest = Bad User | passdb backend = tdbsam | | logon drive = h: | logon home = \{}\{}oberon\{}%U | logon path = \{}\{}oberon\}{profiles\{}%U | | server schannel = yes | server signing = auto | | [netlogon] | path=/usr/local/samba/netlogon | read only = yes | guest ok = yes | browseable = yes | write list = admin prech root | locking = no | public = no | csc policy = disable | | [homes] | comment = Home Directories | browseable = no | writable = yes | | [admin] | comment = Admin Home | writable = yes | path = /home/admin | | [root] | comment = Root Home | writable = yes | path = /home/admin | | [test] | comment = test's home | writable = yes | path = /home/test | | [linux] | comment = Linux Kernel Sources | path = /usr/src/linux | | [profiles] | create mode = 0600 | csc policy = disable | directory mode = 0700 | comment = Profiles | path = /usr/local/samba/profiles/ | profile acls = yes | read only = no \_ _ / | /usr/local/samba/bin/myaddusertogroup \_ / | #!/bin/bash | | # myaddusertogroup username groupname | | username=$1 | groupname=$2 | groups=`cat /etc/group | grep [,:]$username | cut -d ':' -f 1 | tr '\n' ','` | groups=$groups$groupname | usermod -G $groups
Re: [Samba] USRMGR.EXE
Thanks, server schannel = Yes ^ This is the key. After setting this (on samba-3.0.1pre3), usrmgr.exe started to partially work. samba-3.0.1pre3 usrmgr.exe: Works: Browsing users properties Change of user's description Browsing groups Seems to work: Moving users into a group Doesn't work: adding an user * admin users = admin,root * logging on NT4.0 client as root Will investigate further. Will try samba-3.0.0 or other versions. Cl -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] USRMGR.EXE
Hello Is here anybody who is able to manage his NT4.0 domain on hid Samba 3 PDC with User Manager for Domains? Can you please tell me what things must be checked to be sure USRMGR.EXE administration (User Manager for Domains aka Domain User Manager) works? I am unable to make it working and tried already these Samba versions: 3.0.0 3.0.0rc1 3.0.0rc2 3.0.0rc3 3.0.1pre3 3.0.1rc1 2003-12-04 head 2003-12-05 head Cl -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] USRMGR.EXE
Hi, good news usrmgr works if you have right conf and groupmapping with samba 3.01 Store usrmgr on the smbpdc share, and connect with a admin user from a win domain client machine here example conf ( but study the man files of parameters ) # Samba config file created using SWAT # from 127.0.0.1 (127.0.0.1) # Date: 2003/11/26 19:24:39 # Global parameters [global] unix charset = ISO8859-1 display charset = ISO8859-1 workgroup = ROBOWARP netbios name = SMBPDC interfaces = lo, eth0 bind interfaces only = Yes server schannel = Yes passdb backend = smbpasswd:/etc/samba/smbpasswd pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *password* %n\n *password* %n\n *changed* username map = /etc/samba/smbusers unix password sync = Yes log level = 2 syslog = 0 log file = /var/log/samba/%m name resolve order = wins bcast hosts time server = Yes keepalive = 255 socket options = TCP_NODELAY SO_KEEPALIVE SO_SNDBUF load printers = No printcap name = cups add user script = /usr/sbin/useradd -m %u delete user script = /usr/sbin/userdel -r %u add group script = /usr/sbin/groupadd -r %g delete group script = /usr/sbin/groupdel %g add user to group script = /usr/bin/gpasswd -a %u %g delete user from group script = /usr/bin/gpasswd -d %u %g set primary group script = /usr/sbin/usermod -g '%g' '%u' add machine script = /usr/sbin/useradd -g Machines -c Machine -d /dev/null -s /bin/false %u shutdown script = /sbin/shutdown abort shutdown script = /sbin/shutdown -c logon script = login.bat logon path = \\%L\%U\profile logon drive = Z: logon home = \\%L\%u domain logons = Yes os level = 255 domain master = Yes wins proxy = Yes wins support = Yes wins hook = /usr/share/doc/packages/samba3/examples/wins_hook/dns_update ldap ssl = no add share command = /usr/share/doc/packages/samba3/examples/misc/modify_samba_config.pl change share command = /usr/share/doc/packages/samba3/examples/misc/modify_samba_config.pl delete share command = /usr/share/doc/packages/samba3/examples/misc/modify_samba_config.pl utmp = Yes host msdfs = Yes idmap uid = 15000-2 idmap gid = 15000-2 admin users = root hosts allow = 127., 10.10.10. use sendfile = Yes delete veto files = Yes veto files = /*.eml/*.nws/riched20.dll/*.{*}/.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/.*/ hide files = /.*/DesktopFolderDB/TrashFor%m/resource.frk/ browseable = No [files1] comment = public files path = /files1 read only = No guest ok = Yes browseable = Yes csc policy = disable vfs objects = vscan-fprotd, netatalk, audit, recycle:repository, recycle:keeptree, recycle:versions [files2] comment = public files path = /files2 read only = No guest ok = Yes browseable = Yes csc policy = disable vfs objects = vscan-fprotd, netatalk, audit, recycle:repository, recycle:keeptree, recycle:versions [files3] comment = public files path = /files3 read only = No guest ok = Yes browseable = Yes csc policy = disable vfs objects = vscan-fprotd, netatalk, audit, recycle:repository, recycle:keeptree, recycle:versions [homes] comment = Home Directories read only = No csc policy = disable vfs objects = vscan-fprotd, netatalk, audit, recycle:repository, recycle:keeptree, recycle:versions [netlogon] comment = Netlogon Share path = /var/lib/samba/netlogon write list = @ntadmin csc policy = disable locking = No share modes = No root preexec = /var/lib/samba/netlogon/login.pl %U %G %m %L vfs objects = vscan-fprotd, netatalk, audit, recycle:repository, recycle:keeptree, recycle:versions [tmp] comment = public files path = /tmp read only = No guest ok = Yes browseable = Yes csc policy = disable a start group mapping maybe #!/bin/bash net groupmap modify ntgroup=Domain Admins unixgroup=root net groupmap modify ntgroup=Domain Users unixgroup=users net groupmap modify ntgroup=Domain Guests unixgroup=nobody net groupmap modify ntgroup=Administrators unixgroup=root net groupmap modify ntgroup=Users unixgroup=users net groupmap modify ntgroup=Guests unixgroup=nobody net groupmap modify ntgroup=System Operators unixgroup=sys net groupmap modify ntgroup=Account Operators unixgroup=ntadmin net groupmap modify ntgroup=Backup Operators unixgroup=bin net groupmap modify ntgroup=Print Operators unixgroup=lp net groupmap modify ntgroup=Replicators unixgroup=daemon net groupmap modify ntgroup=Power Users unixgroup=sys this conf fits for suse 9.0 ( 8.2 ) with ther smb pack from ftp.suse.com people gd dont forget to create root smbpasswd entry ( smbpasswd -a root ) to have a valid starting admin user dont do copy and paste this , study man smb.conf so you will find out what fits to your needs Best Regards - Original Message - From: Karel Kulhavý [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 05, 2003 4:44 PM Subject: [Samba] USRMGR.EXE Hello Is here anybody who is able to manage his NT4.0 domain on hid Samba 3 PDC with User Manager
[Samba] USRMGR.EXE administration: invalid syntax error message
I try to admin Samba 3.0.0 and 3.0.1pre3 (tried both versions) NT4.0 PDC with NT4.0 machine and NT4.0 USRMGR.EXE and get persistent error message 1) The group name could not be found 2) The user name could not be found 3) The filename, directory name, or volume label syntax is incorrect. Loggin into domain under name: root I can see the user and group listing. When I click on a user to see his details, I get message (2). When I click on a group to see it's details, I get message (1). When I click on Add New User in the menu, I get message (3). I have read mailing list postings indicating this works for other people. Am I doing something wrong? Is there any specification I should read describing under what circumstances should USRMGR.EXE administration work? Windows on client: NT4.0 (reinstalled from NT3.5 to NT4.0). Tried also another NT4.0 box with the same result Tried also XP box and running NT4.0 USRMGR.EXE -- the same result Samba: 3.0.0 and 3.0.1pre3 (tried first 3.0.1pre3 and then reinstalled to 3.0.0 by compiling 3.0.0 and make install 3.0.0 with leaving the same environment) Install path: default (./configure without parameters, path defaults to /usr/local/samba/) Distribution: gentoo. smb.conf contents: # Samba config file created using SWAT # from 127.0.0.1 (127.0.0.1) # Date: 2003/11/19 15:51:41 # Global parameters [global] security = user wins support = no workgroup = KEVF_D4 encrypt passwords = yes domain logons = yes null passwords = yes interfaces = eth0 preferred master = Yes domain master = Yes debuglevel = 3 ldap ssl = no hosts allow = 195.113.28.0/255.255.254.0 admin users = admin,prech,root hide local users = yes unix password sync = yes passwd program = /bin/passwd passwd chat = *ew*password* %n\n *new*password* %n\n add user to group script = /usr/local/samba/bin/myaddusertogroup %u %g add user script = /usr/sbin/useradd -c 'Samba User' -d /dev/null -g smbusers -s /bin/false %u add machine script = /usr/sbin/useradd -c 'Machine' -d /dev/null -g machines -s /bin/false %u add group script = /usr/local/samba/bin/mygroupadd %g delete group script = /usr/local/samba/bin/mygroupdel %g map to guest = Bad User passdb backend = tdbsam logon drive = h: logon home = \{}\{}oberon\{}%U logon path = \{}\{}oberon\}{profiles\{}%U [netlogon] path=/usr/local/samba/netlogon read only = yes guest ok = yes browseable = yes write list = admin prech root locking = no public = no [homes] comment = Home Directories browseable = no writable = yes [admin] comment = Admin Home writable = yes path = /home/admin [root] comment = Root Home writable = yes path = /home/admin [linux] comment = Linux Kernel Sources path = /usr/src/linux [profiles] create mode = 0600 csc policy = disable directory mode = 0700 comment = Profiles path = /usr/local/samba/profiles/ profile acls = yes read only = no permissions: drwxrwxrwt root root /usr/local/samba/profiles drwxrwxrwt root root /usr/local/samba/netlogon contents of netlogon: only directory scripts (no ntconfig.pol) Group information /etc/group: domain_users:x:410:root,admin,test domad:x:412:admin,root machines:x:408: smbusers:x:407: bash-2.05b# net groupmap list System Operators (S-1-5-32-549) - -1 Replicators (S-1-5-32-552) - -1 Guests (S-1-5-32-546) - -1 Domain Users (S-1-5-21-xx-yy-zz-513) - smbusers Power Users (S-1-5-32-547) - -1 Print Operators (S-1-5-32-550) - -1 Administrators (S-1-5-32-544) - -1 Account Operators (S-1-5-32-548) - -1 Domain Admins (S-1-5-21-xx-yy-zz-512) - domadm Domain Guests (S-1-5-21-xx-yy-zz-514) - nobody Backup Operators (S-1-5-32-551) - -1 Users (S-1-5-32-545) - -1 bash-2.05b# pdbedit -Lv root Unix username:root NT username: Account Flags:[U ] User SID: S-1-5-21-1720464068-1560033322-1864438560-1000 Primary Group SID:S-1-5-21-1720464068-1560033322-1864438560-1001 Full Name:root Home Directory: \{}\{}oberon\{}root HomeDir Drive:h: Logon Script: Profile Path: \{}\{}oberon\}{profiles\{}root Domain: KEVF_D4 Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Fri, 13 Dec 1901 21:45:51 GMT Kickoff time: Fri, 13 Dec 1901 21:45:51 GMT Password last set:Fri, 28 Nov 2003 08:48:20 GMT Password can change: Fri, 28 Nov 2003 08:48:20 GMT Password must change: Fri, 13 Dec 1901 21:45:51 GMT Cl -- To unsubscribe from this list go to the following URL and read the instructions:
Re: [Samba] USRMGR.EXE administration: invalid syntax error message
3.0.1pre3 has failures with usmgr - Original Message - From: Karel Kulhavý [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, November 28, 2003 5:04 PM Subject: [Samba] USRMGR.EXE administration: invalid syntax error message I try to admin Samba 3.0.0 and 3.0.1pre3 (tried both versions) NT4.0 PDC with NT4.0 machine and NT4.0 USRMGR.EXE and get persistent error message 1) The group name could not be found 2) The user name could not be found 3) The filename, directory name, or volume label syntax is incorrect. Loggin into domain under name: root I can see the user and group listing. When I click on a user to see his details, I get message (2). When I click on a group to see it's details, I get message (1). When I click on Add New User in the menu, I get message (3). I have read mailing list postings indicating this works for other people. Am I doing something wrong? Is there any specification I should read describing under what circumstances should USRMGR.EXE administration work? Windows on client: NT4.0 (reinstalled from NT3.5 to NT4.0). Tried also another NT4.0 box with the same result Tried also XP box and running NT4.0 USRMGR.EXE -- the same result Samba: 3.0.0 and 3.0.1pre3 (tried first 3.0.1pre3 and then reinstalled to 3.0.0 by compiling 3.0.0 and make install 3.0.0 with leaving the same environment) Install path: default (./configure without parameters, path defaults to /usr/local/samba/) Distribution: gentoo. smb.conf contents: # Samba config file created using SWAT # from 127.0.0.1 (127.0.0.1) # Date: 2003/11/19 15:51:41 # Global parameters [global] security = user wins support = no workgroup = KEVF_D4 encrypt passwords = yes domain logons = yes null passwords = yes interfaces = eth0 preferred master = Yes domain master = Yes debuglevel = 3 ldap ssl = no hosts allow = 195.113.28.0/255.255.254.0 admin users = admin,prech,root hide local users = yes unix password sync = yes passwd program = /bin/passwd passwd chat = *ew*password* %n\n *new*password* %n\n add user to group script = /usr/local/samba/bin/myaddusertogroup %u %g add user script = /usr/sbin/useradd -c 'Samba User' -d /dev/null -g smbusers -s /bin/false %u add machine script = /usr/sbin/useradd -c 'Machine' -d /dev/null -g machines -s /bin/false %u add group script = /usr/local/samba/bin/mygroupadd %g delete group script = /usr/local/samba/bin/mygroupdel %g map to guest = Bad User passdb backend = tdbsam logon drive = h: logon home = \{}\{}oberon\{}%U logon path = \{}\{}oberon\}{profiles\{}%U [netlogon] path=/usr/local/samba/netlogon read only = yes guest ok = yes browseable = yes write list = admin prech root locking = no public = no [homes] comment = Home Directories browseable = no writable = yes [admin] comment = Admin Home writable = yes path = /home/admin [root] comment = Root Home writable = yes path = /home/admin [linux] comment = Linux Kernel Sources path = /usr/src/linux [profiles] create mode = 0600 csc policy = disable directory mode = 0700 comment = Profiles path = /usr/local/samba/profiles/ profile acls = yes read only = no permissions: drwxrwxrwt root root /usr/local/samba/profiles drwxrwxrwt root root /usr/local/samba/netlogon contents of netlogon: only directory scripts (no ntconfig.pol) Group information /etc/group: domain_users:x:410:root,admin,test domad:x:412:admin,root machines:x:408: smbusers:x:407: bash-2.05b# net groupmap list System Operators (S-1-5-32-549) - -1 Replicators (S-1-5-32-552) - -1 Guests (S-1-5-32-546) - -1 Domain Users (S-1-5-21-xx-yy-zz-513) - smbusers Power Users (S-1-5-32-547) - -1 Print Operators (S-1-5-32-550) - -1 Administrators (S-1-5-32-544) - -1 Account Operators (S-1-5-32-548) - -1 Domain Admins (S-1-5-21-xx-yy-zz-512) - domadm Domain Guests (S-1-5-21-xx-yy-zz-514) - nobody Backup Operators (S-1-5-32-551) - -1 Users (S-1-5-32-545) - -1 bash-2.05b# pdbedit -Lv root Unix username:root NT username: Account Flags:[U ] User SID: S-1-5-21-1720464068-1560033322-1864438560-1000 Primary Group SID:S-1-5-21-1720464068-1560033322-1864438560-1001 Full Name:root Home Directory: \{}\{}oberon\{}root HomeDir Drive:h: Logon Script: Profile Path: \{}\{}oberon\}{profiles\{}root Domain: KEVF_D4 Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Fri, 13 Dec 1901 21:45:51 GMT Kickoff time: Fri, 13 Dec 1901 21:45:51 GMT Password last set:Fri, 28 Nov 2003 08:48:20 GMT Password can change: Fri, 28 Nov 2003 08:48:20 GMT Password must change: Fri, 13 Dec 1901 21:45:51 GMT Cl -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go