Re: [Samba] Please Help! Dynamic DNS just will not work: failed gss_inquire_cred: GSSAPI error: Major = Unspecified GSS failure

2013-06-03 Thread Ludek Finstrle
Hello,

  I had the same problem during this weekend and I found the solution.

Sat, Jun 01, 2013 at 02:58:04PM -0700, Gary Maurizi napsal(a):
 01-Jun-2013 14:56:05.799 samba_dlz: starting transaction on zone
 mtolympus.local
 01-Jun-2013 14:56:05.800 client 10.0.0.106#60674: update
 'mtolympus.local/IN' denied
 01-Jun-2013 14:56:05.800 samba_dlz: cancelling transaction on zone
 mtolympus.local

This means that non-secure updates are forbidden in the zone.

 01-Jun-2013 14:56:05.894 client 10.0.0.106#57284: TCP request
 01-Jun-2013 14:56:05.894 client 10.0.0.106#57284: using view '_default'
 01-Jun-2013 14:56:05.894 client 10.0.0.106#57284: request is not signed
 01-Jun-2013 14:56:05.894 client 10.0.0.106#57284: recursion available
 01-Jun-2013 14:56:05.894 client 10.0.0.106#57284: query
 01-Jun-2013 14:56:05.894 failed gss_inquire_cred: GSSAPI error: Major =
 Unspecified GSS failure.  Minor code may provide more information, Minor =
 Success.
 01-Jun-2013 14:56:05.940 gss-api source name (accept) is
 gm-bed-desktop$@MTOLYMPUS.LOCAL
 01-Jun-2013 14:56:05.940 process_gsstkey(): dns_tsigerror_noerror

I don't think it's the major problem (but I had no time to debug it
after I solve the problem). It's in log_cred function which doesn't
return any value and it's continue well - gss-api source name (accept).
I see in tcpdump that bind returns success but windows doesn't continue
in TSIG.

 Thank you so very much for any help, I am so desperately lost at this
 point, I have tried everything.

Not everything ;o) You trust the RH too much.
As you can see at least steve has no problem with it (on ubuntu, suse).

 On Sat, Jun 1, 2013 at 1:13 PM, Gary Maurizi garymaur...@gmail.com wrote:
  On Sat, Jun 1, 2013 at 9:46 AM, Michael De Groote 
  i...@sint-pietersschool.be wrote:
 
  Nick,
 
  doesn't that bug apply to internal dns only? (Gary says he's using
  BIND9_DLZ)
 
  2013/6/1 Nick Semenkovich seme...@alum.mit.edu
 
   Looks like bug https://bugzilla.samba.org/show_bug.cgi?id=9559 which
   looks like it'll be fixed in git momentarily.
  
   On Sat, Jun 1, 2013 at 1:59 AM, Gary Maurizi garymaur...@gmail.com
   wrote:
I just can't seem to get dynamic DNS updates working on CentOS 6.4
  with
samba 4.0 .tar.gz from samba.org using BIND9_DLZ.
   
If I run bind 9.8.2.rc1 in debug mode and go to a domain joined
  windows
client and run 'ipconfig /registerdns' this is what I get in my
  console:
   
31-May-2013 23:51:06.520 client 10.0.0.106#54352: new TCP connection
31-May-2013 23:51:06.520 client 10.0.0.106#54352: replace
31-May-2013 23:51:06.520 clientmgr @0x7fe0575b5010: createclients
31-May-2013 23:51:06.520 clientmgr @0x7fe0575b5010: recycle
31-May-2013 23:51:06.520 client 10.0.0.106#54352: read
31-May-2013 23:51:06.520 client @0x7fe04c159600: accept
31-May-2013 23:51:06.529 client 10.0.0.106#54352: TCP request
31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view:
   using
view 'internal-view'
31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view:
request is not signed
31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view:
recursion available
31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view:
   query
31-May-2013 23:51:06.529 failed gss_inquire_cred: GSSAPI error: Major
  =
Unspecified GSS failure.  Minor code may provide more information,
  Minor
   =
Success.
31-May-2013 23:51:06.573 gss-api source name (accept) is
gm-bed-desktop$@MTOLYMPUS.LOCAL
31-May-2013 23:51:06.573 process_gsstkey(): dns_tsigerror_noerror
31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
   send
31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
   sendto
31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
senddone
31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
   next
31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
endrequest
31-May-2013 23:51:06.573 client 10.0.0.106#54352: read
31-May-2013 23:51:06.609 client 10.0.0.106#54352: next
31-May-2013 23:51:06.609 client 10.0.0.106#54352: request failed: end
  of
file
31-May-2013 23:51:06.609 client 10.0.0.106#54352: endrequest
31-May-2013 23:51:06.609 client 10.0.0.106#54352: closetcp
^C31-May-2013 23:51:29.665 shutting down
31-May-2013 23:51:29.665 stopping command channel on 127.0.0.1#953
31-May-2013 23:51:29.665 res 0x7fe0575c3010: shutdown
31-May-2013 23:51:29.665 res 0x7fe0575c3010: exiting
   
I have checked file permissions everywhere I can think of, this is my
  7th
time following the official samba.org samba 4 primary domain
  controller
tutorial and this has happened every single time.
   
Everything else seems to be functioning, I can manage everything from
  a
windows client with the AD snap-ins and the computer shows up in
   'Computers
 

[Samba] Please Help! Dynamic DNS just will not work: failed gss_inquire_cred: GSSAPI error: Major = Unspecified GSS failure

2013-06-01 Thread Gary Maurizi
I just can't seem to get dynamic DNS updates working on CentOS 6.4 with
samba 4.0 .tar.gz from samba.org using BIND9_DLZ.

If I run bind 9.8.2.rc1 in debug mode and go to a domain joined windows
client and run 'ipconfig /registerdns' this is what I get in my console:

31-May-2013 23:51:06.520 client 10.0.0.106#54352: new TCP connection
31-May-2013 23:51:06.520 client 10.0.0.106#54352: replace
31-May-2013 23:51:06.520 clientmgr @0x7fe0575b5010: createclients
31-May-2013 23:51:06.520 clientmgr @0x7fe0575b5010: recycle
31-May-2013 23:51:06.520 client 10.0.0.106#54352: read
31-May-2013 23:51:06.520 client @0x7fe04c159600: accept
31-May-2013 23:51:06.529 client 10.0.0.106#54352: TCP request
31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view: using
view 'internal-view'
31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view:
request is not signed
31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view:
recursion available
31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view: query
31-May-2013 23:51:06.529 failed gss_inquire_cred: GSSAPI error: Major =
Unspecified GSS failure.  Minor code may provide more information, Minor =
Success.
31-May-2013 23:51:06.573 gss-api source name (accept) is
gm-bed-desktop$@MTOLYMPUS.LOCAL
31-May-2013 23:51:06.573 process_gsstkey(): dns_tsigerror_noerror
31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view: send
31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view: sendto
31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
senddone
31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view: next
31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
endrequest
31-May-2013 23:51:06.573 client 10.0.0.106#54352: read
31-May-2013 23:51:06.609 client 10.0.0.106#54352: next
31-May-2013 23:51:06.609 client 10.0.0.106#54352: request failed: end of
file
31-May-2013 23:51:06.609 client 10.0.0.106#54352: endrequest
31-May-2013 23:51:06.609 client 10.0.0.106#54352: closetcp
^C31-May-2013 23:51:29.665 shutting down
31-May-2013 23:51:29.665 stopping command channel on 127.0.0.1#953
31-May-2013 23:51:29.665 res 0x7fe0575c3010: shutdown
31-May-2013 23:51:29.665 res 0x7fe0575c3010: exiting

I have checked file permissions everywhere I can think of, this is my 7th
time following the official samba.org samba 4 primary domain controller
tutorial and this has happened every single time.

Everything else seems to be functioning, I can manage everything from a
windows client with the AD snap-ins and the computer shows up in 'Computers
and Users' snap in, it just does NOT have a DNS A record!

Thank You!
--GM
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Please Help! Dynamic DNS just will not work: failed gss_inquire_cred: GSSAPI error: Major = Unspecified GSS failure

2013-06-01 Thread Nick Semenkovich
Looks like bug https://bugzilla.samba.org/show_bug.cgi?id=9559 which
looks like it'll be fixed in git momentarily.

On Sat, Jun 1, 2013 at 1:59 AM, Gary Maurizi garymaur...@gmail.com wrote:
 I just can't seem to get dynamic DNS updates working on CentOS 6.4 with
 samba 4.0 .tar.gz from samba.org using BIND9_DLZ.

 If I run bind 9.8.2.rc1 in debug mode and go to a domain joined windows
 client and run 'ipconfig /registerdns' this is what I get in my console:

 31-May-2013 23:51:06.520 client 10.0.0.106#54352: new TCP connection
 31-May-2013 23:51:06.520 client 10.0.0.106#54352: replace
 31-May-2013 23:51:06.520 clientmgr @0x7fe0575b5010: createclients
 31-May-2013 23:51:06.520 clientmgr @0x7fe0575b5010: recycle
 31-May-2013 23:51:06.520 client 10.0.0.106#54352: read
 31-May-2013 23:51:06.520 client @0x7fe04c159600: accept
 31-May-2013 23:51:06.529 client 10.0.0.106#54352: TCP request
 31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view: using
 view 'internal-view'
 31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view:
 request is not signed
 31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view:
 recursion available
 31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view: query
 31-May-2013 23:51:06.529 failed gss_inquire_cred: GSSAPI error: Major =
 Unspecified GSS failure.  Minor code may provide more information, Minor =
 Success.
 31-May-2013 23:51:06.573 gss-api source name (accept) is
 gm-bed-desktop$@MTOLYMPUS.LOCAL
 31-May-2013 23:51:06.573 process_gsstkey(): dns_tsigerror_noerror
 31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view: send
 31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view: sendto
 31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
 senddone
 31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view: next
 31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
 endrequest
 31-May-2013 23:51:06.573 client 10.0.0.106#54352: read
 31-May-2013 23:51:06.609 client 10.0.0.106#54352: next
 31-May-2013 23:51:06.609 client 10.0.0.106#54352: request failed: end of
 file
 31-May-2013 23:51:06.609 client 10.0.0.106#54352: endrequest
 31-May-2013 23:51:06.609 client 10.0.0.106#54352: closetcp
 ^C31-May-2013 23:51:29.665 shutting down
 31-May-2013 23:51:29.665 stopping command channel on 127.0.0.1#953
 31-May-2013 23:51:29.665 res 0x7fe0575c3010: shutdown
 31-May-2013 23:51:29.665 res 0x7fe0575c3010: exiting

 I have checked file permissions everywhere I can think of, this is my 7th
 time following the official samba.org samba 4 primary domain controller
 tutorial and this has happened every single time.

 Everything else seems to be functioning, I can manage everything from a
 windows client with the AD snap-ins and the computer shows up in 'Computers
 and Users' snap in, it just does NOT have a DNS A record!

 Thank You!
 --GM
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Please Help! Dynamic DNS just will not work: failed gss_inquire_cred: GSSAPI error: Major = Unspecified GSS failure

2013-06-01 Thread Michael De Groote
Nick,

doesn't that bug apply to internal dns only? (Gary says he's using
BIND9_DLZ)


2013/6/1 Nick Semenkovich seme...@alum.mit.edu

 Looks like bug https://bugzilla.samba.org/show_bug.cgi?id=9559 which
 looks like it'll be fixed in git momentarily.

 On Sat, Jun 1, 2013 at 1:59 AM, Gary Maurizi garymaur...@gmail.com
 wrote:
  I just can't seem to get dynamic DNS updates working on CentOS 6.4 with
  samba 4.0 .tar.gz from samba.org using BIND9_DLZ.
 
  If I run bind 9.8.2.rc1 in debug mode and go to a domain joined windows
  client and run 'ipconfig /registerdns' this is what I get in my console:
 
  31-May-2013 23:51:06.520 client 10.0.0.106#54352: new TCP connection
  31-May-2013 23:51:06.520 client 10.0.0.106#54352: replace
  31-May-2013 23:51:06.520 clientmgr @0x7fe0575b5010: createclients
  31-May-2013 23:51:06.520 clientmgr @0x7fe0575b5010: recycle
  31-May-2013 23:51:06.520 client 10.0.0.106#54352: read
  31-May-2013 23:51:06.520 client @0x7fe04c159600: accept
  31-May-2013 23:51:06.529 client 10.0.0.106#54352: TCP request
  31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view:
 using
  view 'internal-view'
  31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view:
  request is not signed
  31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view:
  recursion available
  31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view:
 query
  31-May-2013 23:51:06.529 failed gss_inquire_cred: GSSAPI error: Major =
  Unspecified GSS failure.  Minor code may provide more information, Minor
 =
  Success.
  31-May-2013 23:51:06.573 gss-api source name (accept) is
  gm-bed-desktop$@MTOLYMPUS.LOCAL
  31-May-2013 23:51:06.573 process_gsstkey(): dns_tsigerror_noerror
  31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
 send
  31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
 sendto
  31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
  senddone
  31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
 next
  31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
  endrequest
  31-May-2013 23:51:06.573 client 10.0.0.106#54352: read
  31-May-2013 23:51:06.609 client 10.0.0.106#54352: next
  31-May-2013 23:51:06.609 client 10.0.0.106#54352: request failed: end of
  file
  31-May-2013 23:51:06.609 client 10.0.0.106#54352: endrequest
  31-May-2013 23:51:06.609 client 10.0.0.106#54352: closetcp
  ^C31-May-2013 23:51:29.665 shutting down
  31-May-2013 23:51:29.665 stopping command channel on 127.0.0.1#953
  31-May-2013 23:51:29.665 res 0x7fe0575c3010: shutdown
  31-May-2013 23:51:29.665 res 0x7fe0575c3010: exiting
 
  I have checked file permissions everywhere I can think of, this is my 7th
  time following the official samba.org samba 4 primary domain controller
  tutorial and this has happened every single time.
 
  Everything else seems to be functioning, I can manage everything from a
  windows client with the AD snap-ins and the computer shows up in
 'Computers
  and Users' snap in, it just does NOT have a DNS A record!
 
  Thank You!
  --GM
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/options/samba
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba




-- 
Michael De Groote
ICT-coordinator Sint-Pietersschool Korbeek-Lo
ICT-support Sancta Maria Basisschool Leuven
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Please Help! Dynamic DNS just will not work: failed gss_inquire_cred: GSSAPI error: Major = Unspecified GSS failure

2013-06-01 Thread Gary Maurizi
Thank You so much Michael  Nick,

Michael I will try your solution and follow up ASAP.



On Sat, Jun 1, 2013 at 9:46 AM, Michael De Groote i...@sint-pietersschool.be
 wrote:

 Nick,

 doesn't that bug apply to internal dns only? (Gary says he's using
 BIND9_DLZ)


 2013/6/1 Nick Semenkovich seme...@alum.mit.edu

  Looks like bug https://bugzilla.samba.org/show_bug.cgi?id=9559 which
  looks like it'll be fixed in git momentarily.
 
  On Sat, Jun 1, 2013 at 1:59 AM, Gary Maurizi garymaur...@gmail.com
  wrote:
   I just can't seem to get dynamic DNS updates working on CentOS 6.4 with
   samba 4.0 .tar.gz from samba.org using BIND9_DLZ.
  
   If I run bind 9.8.2.rc1 in debug mode and go to a domain joined windows
   client and run 'ipconfig /registerdns' this is what I get in my
 console:
  
   31-May-2013 23:51:06.520 client 10.0.0.106#54352: new TCP connection
   31-May-2013 23:51:06.520 client 10.0.0.106#54352: replace
   31-May-2013 23:51:06.520 clientmgr @0x7fe0575b5010: createclients
   31-May-2013 23:51:06.520 clientmgr @0x7fe0575b5010: recycle
   31-May-2013 23:51:06.520 client 10.0.0.106#54352: read
   31-May-2013 23:51:06.520 client @0x7fe04c159600: accept
   31-May-2013 23:51:06.529 client 10.0.0.106#54352: TCP request
   31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view:
  using
   view 'internal-view'
   31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view:
   request is not signed
   31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view:
   recursion available
   31-May-2013 23:51:06.529 client 10.0.0.106#54352: view internal-view:
  query
   31-May-2013 23:51:06.529 failed gss_inquire_cred: GSSAPI error: Major =
   Unspecified GSS failure.  Minor code may provide more information,
 Minor
  =
   Success.
   31-May-2013 23:51:06.573 gss-api source name (accept) is
   gm-bed-desktop$@MTOLYMPUS.LOCAL
   31-May-2013 23:51:06.573 process_gsstkey(): dns_tsigerror_noerror
   31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
  send
   31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
  sendto
   31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
   senddone
   31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
  next
   31-May-2013 23:51:06.573 client 10.0.0.106#54352: view internal-view:
   endrequest
   31-May-2013 23:51:06.573 client 10.0.0.106#54352: read
   31-May-2013 23:51:06.609 client 10.0.0.106#54352: next
   31-May-2013 23:51:06.609 client 10.0.0.106#54352: request failed: end
 of
   file
   31-May-2013 23:51:06.609 client 10.0.0.106#54352: endrequest
   31-May-2013 23:51:06.609 client 10.0.0.106#54352: closetcp
   ^C31-May-2013 23:51:29.665 shutting down
   31-May-2013 23:51:29.665 stopping command channel on 127.0.0.1#953
   31-May-2013 23:51:29.665 res 0x7fe0575c3010: shutdown
   31-May-2013 23:51:29.665 res 0x7fe0575c3010: exiting
  
   I have checked file permissions everywhere I can think of, this is my
 7th
   time following the official samba.org samba 4 primary domain
 controller
   tutorial and this has happened every single time.
  
   Everything else seems to be functioning, I can manage everything from a
   windows client with the AD snap-ins and the computer shows up in
  'Computers
   and Users' snap in, it just does NOT have a DNS A record!
  
   Thank You!
   --GM
   --
   To unsubscribe from this list go to the following URL and read the
   instructions:  https://lists.samba.org/mailman/options/samba
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/options/samba
 



 --
 Michael De Groote
 ICT-coordinator Sint-Pietersschool Korbeek-Lo
 ICT-support Sancta Maria Basisschool Leuven
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Please Help! Dynamic DNS just will not work: failed gss_inquire_cred: GSSAPI error: Major = Unspecified GSS failure

2013-06-01 Thread Gary Maurizi
Michael I have implemented your guide in every respect and I still have the
same problem, is there some way to verify that the dns.keytab is correct?
here is the output running bind in debug mode:

01-Jun-2013 14:55:57.688 running
01-Jun-2013 14:56:05.705 client 10.0.0.106#56085: UDP request
01-Jun-2013 14:56:05.705 client 10.0.0.106#56085: using view '_default'
01-Jun-2013 14:56:05.705 client 10.0.0.106#56085: request is not signed
01-Jun-2013 14:56:05.705 client 10.0.0.106#56085: recursion available
01-Jun-2013 14:56:05.705 client 10.0.0.106#56085: query
01-Jun-2013 14:56:05.705 client 10.0.0.106#56085: query
'GM-BED-DESKTOP.mtolympus.local/SOA/IN' approved
01-Jun-2013 14:56:05.706 client 10.0.0.106#56085: send
01-Jun-2013 14:56:05.706 client 10.0.0.106#56085: sendto
01-Jun-2013 14:56:05.706 client 10.0.0.106#56085: senddone
01-Jun-2013 14:56:05.706 client 10.0.0.106#56085: next
01-Jun-2013 14:56:05.706 client 10.0.0.106#56085: endrequest
01-Jun-2013 14:56:05.706 client @0x7faf00111f50: udprecv
01-Jun-2013 14:56:05.753 client 10.0.0.106#62393: UDP request
01-Jun-2013 14:56:05.753 client 10.0.0.106#62393: using view '_default'
01-Jun-2013 14:56:05.753 client 10.0.0.106#62393: request is not signed
01-Jun-2013 14:56:05.753 client 10.0.0.106#62393: recursion available
01-Jun-2013 14:56:05.753 client 10.0.0.106#62393: query
01-Jun-2013 14:56:05.753 client 10.0.0.106#62393: query
'server.mtolympus.local/A/IN' approved
01-Jun-2013 14:56:05.754 client 10.0.0.106#62393: send
01-Jun-2013 14:56:05.754 client 10.0.0.106#62393: sendto
01-Jun-2013 14:56:05.754 client 10.0.0.106#62393: senddone
01-Jun-2013 14:56:05.754 client 10.0.0.106#62393: next
01-Jun-2013 14:56:05.754 client 10.0.0.106#62393: endrequest
01-Jun-2013 14:56:05.754 client @0x7faf001202b0: udprecv
01-Jun-2013 14:56:05.799 client 10.0.0.106#60674: UDP request
01-Jun-2013 14:56:05.799 client 10.0.0.106#60674: using view '_default'
01-Jun-2013 14:56:05.799 client 10.0.0.106#60674: request is not signed
01-Jun-2013 14:56:05.799 client 10.0.0.106#60674: recursion available
01-Jun-2013 14:56:05.799 client 10.0.0.106#60674: update
01-Jun-2013 14:56:05.799 samba_dlz: starting transaction on zone
mtolympus.local
01-Jun-2013 14:56:05.800 client 10.0.0.106#60674: update
'mtolympus.local/IN' denied
01-Jun-2013 14:56:05.800 samba_dlz: cancelling transaction on zone
mtolympus.local
01-Jun-2013 14:56:05.800 client 10.0.0.106#60674: send
01-Jun-2013 14:56:05.800 client 10.0.0.106#60674: sendto
01-Jun-2013 14:56:05.800 client 10.0.0.106#60674: senddone
01-Jun-2013 14:56:05.800 client 10.0.0.106#60674: next
01-Jun-2013 14:56:05.800 client 10.0.0.106#60674: endrequest
01-Jun-2013 14:56:05.800 client @0x7faf00111f50: udprecv
01-Jun-2013 14:56:05.890 client 10.0.0.106#57284: new TCP connection
01-Jun-2013 14:56:05.890 client 10.0.0.106#57284: replace
01-Jun-2013 14:56:05.890 clientmgr @0x7faf0b60bb08: createclients
01-Jun-2013 14:56:05.890 clientmgr @0x7faf0b60bb08: create new
01-Jun-2013 14:56:05.890 client @0x7faf00e599b0: create
01-Jun-2013 14:56:05.890 client 10.0.0.106#57284: read
01-Jun-2013 14:56:05.890 client @0x7faf00e599b0: accept
01-Jun-2013 14:56:05.894 client 10.0.0.106#57284: TCP request
01-Jun-2013 14:56:05.894 client 10.0.0.106#57284: using view '_default'
01-Jun-2013 14:56:05.894 client 10.0.0.106#57284: request is not signed
01-Jun-2013 14:56:05.894 client 10.0.0.106#57284: recursion available
01-Jun-2013 14:56:05.894 client 10.0.0.106#57284: query
01-Jun-2013 14:56:05.894 failed gss_inquire_cred: GSSAPI error: Major =
Unspecified GSS failure.  Minor code may provide more information, Minor =
Success.
01-Jun-2013 14:56:05.940 gss-api source name (accept) is
gm-bed-desktop$@MTOLYMPUS.LOCAL
01-Jun-2013 14:56:05.940 process_gsstkey(): dns_tsigerror_noerror
01-Jun-2013 14:56:05.941 client 10.0.0.106#57284: send
01-Jun-2013 14:56:05.941 client 10.0.0.106#57284: sendto
01-Jun-2013 14:56:05.941 client 10.0.0.106#57284: senddone
01-Jun-2013 14:56:05.941 client 10.0.0.106#57284: next
01-Jun-2013 14:56:05.941 client 10.0.0.106#57284: endrequest
01-Jun-2013 14:56:05.941 client 10.0.0.106#57284: read
01-Jun-2013 14:56:05.984 client 10.0.0.106#57284: next
01-Jun-2013 14:56:05.984 client 10.0.0.106#57284: request failed: end of
file
01-Jun-2013 14:56:05.984 client 10.0.0.106#57284: endrequest
01-Jun-2013 14:56:05.984 client 10.0.0.106#57284: closetcp
^C01-Jun-2013 14:56:07.844 shutting down
01-Jun-2013 14:56:07.844 stopping command channel on 127.0.0.1#953


Jun  1 14:54:27 server named[17079]: samba_dlz: starting transaction on
zone mtolympus.local
Jun  1 14:54:27 server named[17079]: client 10.0.0.106#61849: update
'mtolympus.local/IN' denied
Jun  1 14:54:27 server named[17079]: samba_dlz: cancelling transaction on
zone mtolympus.local

Thank you so very much for any help, I am so desperately lost at this
point, I have tried everything.


On Sat, Jun 1, 2013 at 1:13 PM, Gary Maurizi garymaur...@gmail.com wrote:

 Thank You so much Michael  Nick,

 Michael I will 

Re: [Samba] Please help: classicupgrade not importing users -- SOLVED

2013-04-08 Thread simon+samba


I finally found the solution. I was moving from a Gentoo system to Centos 
and the layout of the files is different under Gentoo.


In the Gentoo layout, the default location for passdb.tdb, 
schannel_store.tdb and  secrets.tdb is in /var/lib/samba/private .


When I first tried to import, I had got an error message about secrets.tdb 
not being found, so I had made a link /var/lib/samba/secrets.tdb that 
pointed to /var/lib/samba/private/secrets.tdb, but, crucially, I did not 
do this for the other files in the secrets subdirectory.


Once I made the links for the other files, all I had to do was clean up my 
old tdb files (duplicate and otherwise bad entries) and then the import 
worked!


Simon
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Please help: classicupgrade not importing users

2013-04-04 Thread simon+samba
Does anyone have any ideas what I might have done wrong or why this is not 
working?


Simon

On Tue, 2 Apr 2013, simon+sa...@matthews.eu wrote:

I have tried everything that I can think of, but the users are still not 
being imported.


I deleted and re-created the /usr/local/samba directory (using make install), 
I added users to the local passwd file (ypcat passwd  /etc/passwd) and 
then stopped ypbind.


Still the same. The users are not imported while the groups are.

I would really appreciate some help in getting past this step.

The transcript of my last attempt at classicupgrade can be found here:
http://pastebin.com/tP8bG5Yb

I changed the realm that I used to a.b and made edits to the file to make 
it consistent.



Simon

On Mon, 1 Apr 2013, simon+sa...@matthews.eu wrote:




 On Tue, 2 Apr 2013, Ricky Nance wrote:

   
http://wiki.samba.org/index.php/Samba4/samba-tool/domain/classicupgrade/HOWTOhttps://wiki.samba.org/index.php/Samba4/samba-tool/domain/classicupgrade/HOWTO
   should
   help.

 I have been following those instructions. I have a tdb backend, I am
 working on a VM that does not have SAMBA3 installed. The command:
 # samba-tool user list
 does not show my users.

 Interestingly, the groups seem to be there. If I use
 # samba-tool group list
 I see the expected groups.

 Simon



 
   Ricky
 
 
   On Tue, Apr 2, 2013 at 12:06 AM, Gémes Géza g...@kzsdabas.hu wrote:
 
2013-04-02 05:35 keltezéssel, simon+sa...@matthews.eu írta:
  
  
   
 On Mon, 1 Apr 2013, simon+sa...@matthews.eu wrote:
   
   
  On Tue, 2 Apr 2013, Andrew Bartlett wrote:

 On Mon, 2013-04-01 at 09:26 +0200, Gémes Géza wrote:

  2013-04-01 02:36 keltezéssel, simon+sa...@matthews.eu írta:
   Since I don't seem to be having any luck with the 
   classicupgrade,
 I   decided to try starting from scratch and then adding 
 I   users.

 I ran the command:
   /usr/local/samba/bin/samba-**tool domain provision 
   --realm=my
 realm   \   --domain=mydomain --adminpass 'mypass' 
 realm   --server-role=dc  \

   --dns-backend=BIND9_DLZ
 Then I tried both adding and changing users. In 
 neither case
   can I change the SID with pdbedit. It seems to be added 
   with a  
   system-defined SID, irrespective of what I specify. pdbedit -v 
   is 
   
   able to list the user's parameters, including the SID.
 Any suggestions? I am pretty much stuck here trying 
 to figure
   out how to migrate from an existing SAMBA3 domain to 
   SAMBA4.

  Hi,
   Trying to add users one by one (preserving SID) is IMHO a 
   lot
   harder(you would probably need to ldbmodify the user 
   record of each
   one) todo, than fixing your samba3 install to have it 
   classicupgraded.
 
 Indeed.  The only way to safely import a list of users who 
   already

   have
 SIDs is to migrate them to Samba 4.0's AD DC using one of the
   supported
 migration tools.
 
 These are 'samba-tool domain join dc' and 'samba-tool domain

 classicupgrade'.
 

  Perhaps I need to address why the classicupgrade did not work. 
  I see
  now that I did not pass the --dbdir option when running it 
  before. I'll try

  again.


 I went back to trying to get the classicupgrade to work:

 /usr/local/samba/bin/samba-**tool domain classicupgrade  \
 --dbdir=/var/lib/samba/ --dbdir=/var/lib/samba/ --realm=a.b  \
 /etc/samba/smb.conf --use-xattrs=yes
   
 For the realm, I used a subdomain of one of the two existing dns 
 domains
 in the LAN. It appears to be processing the information from the 
 old domain

 tdb files, although I see some errors:
 Cannot open idmap database, Ignoring: [Errno 2] No such file or 
 directory

 Importing groups
 Could not add group name=Remote Desktop Users ((68, samldb: 
 Account name

 (sAMAccountName) 'Remote Desktop Users' already in use!))
 Could not modify AD idmap entry for 
 sid=S-1-5-21-4254857281-**3346836279-4152649156-555,
 id=5077, type=ID_TYPE_GID ((32, Base-DN 
 'SID=S-1-5-21-4254857281-**3346836279-4152649156-555'

 not found))
 Could not add posix attrs for AD entry for 
 sid=S-1-5-21-4254857281-**3346836279-4152649156-555,
 ((32, Base-DN 
 'SID=S-1-5-21-4254857281-**3346836279-4152649156-555'

 not found))
 Group already exists 
 sid=S-1-5-21-4254857281-**3346836279-4152649156-512,

 groupname=Domain Admins existing_groupname=Domain Admins, Ignoring.
   
 However, after this, all I get from pdbedit -L is:

 # pdbedit -L
 RAIDSERVER$:4294967295:
 Administrator:4294967295:
 [root@samba ~]# pdbedit -L
 RAIDSERVER$:4294967295:
 Administrator:4294967295:
 

[Samba] Please help: classicupgrade not importing users

2013-04-02 Thread simon+samba
I have tried everything that I can think of, but the users are still not 
being imported.


I deleted and re-created the /usr/local/samba directory (using make 
install), I added users to the local passwd file (ypcat passwd  
/etc/passwd) and  then stopped ypbind.


Still the same. The users are not imported while the groups are.

I would really appreciate some help in getting past this step.

The transcript of my last attempt at classicupgrade can be found here:
http://pastebin.com/tP8bG5Yb

I changed the realm that I used to a.b and made edits to the file to 
make it consistent.



Simon

On Mon, 1 Apr 2013, simon+sa...@matthews.eu wrote:




On Tue, 2 Apr 2013, Ricky Nance wrote:


 
http://wiki.samba.org/index.php/Samba4/samba-tool/domain/classicupgrade/HOWTOhttps://wiki.samba.org/index.php/Samba4/samba-tool/domain/classicupgrade/HOWTO
 should
 help.


I have been following those instructions. I have a tdb backend, I am working 
on a VM that does not have SAMBA3 installed. The command:

# samba-tool user list
does not show my users.

Interestingly, the groups seem to be there. If I use
# samba-tool group list
I see the expected groups.

Simon





 Ricky


 On Tue, Apr 2, 2013 at 12:06 AM, Gémes Géza g...@kzsdabas.hu wrote:

  2013-04-02 05:35 keltezéssel, simon+sa...@matthews.eu írta:
 
 
  
   On Mon, 1 Apr 2013, simon+sa...@matthews.eu wrote:
  
  
On Tue, 2 Apr 2013, Andrew Bartlett wrote:
   
   On Mon, 2013-04-01 at 09:26 +0200, Gémes Géza wrote:

2013-04-01 02:36 keltezéssel, simon+sa...@matthews.eu írta:
 Since I don't seem to be having any luck with the 
 classicupgrade,
I  decided to try starting from scratch and then adding 
I  users.

   I ran the command:
 /usr/local/samba/bin/samba-**tool domain provision 
 --realm=my
realm  \   --domain=mydomain --adminpass 'mypass' 
realm  --server-role=dc  \

 --dns-backend=BIND9_DLZ
   Then I tried both adding and changing users. In neither 
   case
 can I change the SID with pdbedit. It seems to be added with 
 a  
 system-defined SID, irrespective of what I specify. pdbedit -v is 
  

 able to list the user's parameters, including the SID.
   Any suggestions? I am pretty much stuck here trying to 
   figure

 out how to migrate from an existing SAMBA3 domain to SAMBA4.
Hi,
 Trying to add users one by one (preserving SID) is IMHO a 
 lot
 harder(you would probably need to ldbmodify the user record 
 of each
 one) todo, than fixing your samba3 install to have it 
 classicupgraded.

   Indeed.  The only way to safely import a list of users who 
 already

 have
   SIDs is to migrate them to Samba 4.0's AD DC using one of the
 supported
   migration tools.

   These are 'samba-tool domain join dc' and 'samba-tool domain

   classicupgrade'.

   
Perhaps I need to address why the classicupgrade did not work. I 
see
now that I did not pass the --dbdir option when running it before. 
I'll try

again.
   
   
   I went back to trying to get the classicupgrade to work:

   /usr/local/samba/bin/samba-**tool domain classicupgrade  \
   --dbdir=/var/lib/samba/ --dbdir=/var/lib/samba/ --realm=a.b  \
   /etc/samba/smb.conf --use-xattrs=yes
  
   For the realm, I used a subdomain of one of the two existing dns 
   domains
   in the LAN. It appears to be processing the information from the old 
   domain

   tdb files, although I see some errors:
   Cannot open idmap database, Ignoring: [Errno 2] No such file or 
   directory

   Importing groups
   Could not add group name=Remote Desktop Users ((68, samldb: Account 
   name

   (sAMAccountName) 'Remote Desktop Users' already in use!))
   Could not modify AD idmap entry for 
   sid=S-1-5-21-4254857281-**3346836279-4152649156-555,
   id=5077, type=ID_TYPE_GID ((32, Base-DN 
   'SID=S-1-5-21-4254857281-**3346836279-4152649156-555'

   not found))
   Could not add posix attrs for AD entry for 
   sid=S-1-5-21-4254857281-**3346836279-4152649156-555,

   ((32, Base-DN 'SID=S-1-5-21-4254857281-**3346836279-4152649156-555'
   not found))
   Group already exists 
   sid=S-1-5-21-4254857281-**3346836279-4152649156-512,

   groupname=Domain Admins existing_groupname=Domain Admins, Ignoring.
  
   However, after this, all I get from pdbedit -L is:

   # pdbedit -L
   RAIDSERVER$:4294967295:
   Administrator:4294967295:
   [root@samba ~]# pdbedit -L
   RAIDSERVER$:4294967295:
   Administrator:4294967295:
   krbtgt:4294967295:--dbdir=/**var/lib/samba/ --realm=a.b
   /etc/samba/smb.confnobody:99:**Nobody
  
   Any ideas? What information might help debug this?
  
   Simon
  
  
Could this happen because pdbedit is from the samba3 install?
 
  I recommend doing upgrade on a new box/virtual machine where no samba3 
  is

  installed, and copying the tdb files to 

Re: [Samba] Please, help me clarify (winbind).

2011-02-21 Thread Daniel Müller
If I have understood right:you have a PDC/LDAP-Samba!!! And no Windows
Server and no Windows ADS so you do not need winbind at all.
Just make the Windows Server a member of your Samba-Server that’s it.

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---

-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im
Auftrag von Aleix Dorca
Gesendet: Samstag, 19. Februar 2011 21:40
An: samba@lists.samba.org
Betreff: [Samba] Please, help me clarify (winbind).

Hi again,

still struggling with winbind and trying to understand how it is supposed to
work. Let's see if someone can answer a simple resolution question so I can
see if something is wrong with my setup.

One PDC/LDAP (no winbind), nss with ldap. This works fine as far as I can
tell.

The other machine is a DMS. Let's say I have an entry like this on my
'getent passwd' (via LDAP):

adorca:x:10033:513:Aleix Dorca:/home/adorca:/bin/bash

As far as I can tell this user's uid is 10033.

So, now the question: If a windows machine should connect to this server
what would winbind return as uid number? 10033 via NSS_LDAP or a new mapping
stored/created on my LDAP Server. And would this user be treated as a
'Domain User' or as a 'Unix User'?

The Samba How-To Collections states on 'Winbind with NSS to resolve
UNIX/Linux user and group IDs':

The use of the LDAP-based passdb backend requires use of the PADL nss_ldap
utility or an equivalent. In this situation winbind is used to handle
foreign SIDs, that is, SIDs from standalone Windows clients (i.e., not a
member of our domain) as well as SIDs from another domain. The foreign
UID/GID is mapped from allocated ranges (idmap uid and idmap gid) in
precisely the same manner as when using winbind with a local IDMAP table.

As I understand this having NSS with Ldap an winbind running a query to user
'adorca' should return uid=10033 and not a new idmap mapping. Is this
correct?

Please someone answer... I'm about to loose it trying to understand how this
should work.

Thanks,

Aleix.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Please, help me clarify (winbind).

2011-02-21 Thread Aleix Dorca
Daniel, thanks for your answer.

What you say it is absolutely true. That was my first attempt to get things 
woking, avoid if possible Winbind, and IT DID work UNTIL I added ACL's on 
shares. After that it seems winbind was unavoidable. Then all the confusion 
began.

Still stuck, I'm afraid.

Aleix.


El 21/02/2011, a las 9:11, Daniel Müller escribió:

 If I have understood right:you have a PDC/LDAP-Samba!!! And no Windows
 Server and no Windows ADS so you do not need winbind at all.
 Just make the Windows Server a member of your Samba-Server that’s it.
 
 ---
 EDV Daniel Müller
 
 Leitung EDV
 Tropenklinik Paul-Lechler-Krankenhaus
 Paul-Lechler-Str. 24
 72076 Tübingen
 
 Tel.: 07071/206-463, Fax: 07071/206-499
 eMail: muel...@tropenklinik.de
 Internet: www.tropenklinik.de
 ---
 
 -Ursprüngliche Nachricht-
 Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im
 Auftrag von Aleix Dorca
 Gesendet: Samstag, 19. Februar 2011 21:40
 An: samba@lists.samba.org
 Betreff: [Samba] Please, help me clarify (winbind).
 
 Hi again,
 
 still struggling with winbind and trying to understand how it is supposed to
 work. Let's see if someone can answer a simple resolution question so I can
 see if something is wrong with my setup.
 
 One PDC/LDAP (no winbind), nss with ldap. This works fine as far as I can
 tell.
 
 The other machine is a DMS. Let's say I have an entry like this on my
 'getent passwd' (via LDAP):
 
 adorca:x:10033:513:Aleix Dorca:/home/adorca:/bin/bash
 
 As far as I can tell this user's uid is 10033.
 
 So, now the question: If a windows machine should connect to this server
 what would winbind return as uid number? 10033 via NSS_LDAP or a new mapping
 stored/created on my LDAP Server. And would this user be treated as a
 'Domain User' or as a 'Unix User'?
 
 The Samba How-To Collections states on 'Winbind with NSS to resolve
 UNIX/Linux user and group IDs':
 
 The use of the LDAP-based passdb backend requires use of the PADL nss_ldap
 utility or an equivalent. In this situation winbind is used to handle
 foreign SIDs, that is, SIDs from standalone Windows clients (i.e., not a
 member of our domain) as well as SIDs from another domain. The foreign
 UID/GID is mapped from allocated ranges (idmap uid and idmap gid) in
 precisely the same manner as when using winbind with a local IDMAP table.
 
 As I understand this having NSS with Ldap an winbind running a query to user
 'adorca' should return uid=10033 and not a new idmap mapping. Is this
 correct?
 
 Please someone answer... I'm about to loose it trying to understand how this
 should work.
 
 Thanks,
 
 Aleix.
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Please, help me clarify (winbind).

2011-02-21 Thread Daniel Müller
What do you mean with acl's. Did you do the acl' s from windows. My attempts
to do this failed every time. The only way make this
work is under samba4.
With samba3 I had to tune it within my share definitions in my smb.conf.
create mask and so on.
Now with this it is nearly impossible to have by ex. two different groups
manage their files (as in windows) on one share.
So you have to make a large group with all the users having write perms and
on the other side a group to have read perms.
You may test   #vfs objects = acl_xattr

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---

-Ursprüngliche Nachricht-
Von: Aleix Dorca [mailto:ado...@uda.ad] 
Gesendet: Montag, 21. Februar 2011 09:33
An: muel...@tropenklinik.de
Cc: samba@lists.samba.org
Betreff: Re: AW: [Samba] Please, help me clarify (winbind).

Daniel, thanks for your answer.

What you say it is absolutely true. That was my first attempt to get things
woking, avoid if possible Winbind, and IT DID work UNTIL I added ACL's on
shares. After that it seems winbind was unavoidable. Then all the confusion
began.

Still stuck, I'm afraid.

Aleix.


El 21/02/2011, a las 9:11, Daniel Müller escribió:

 If I have understood right:you have a PDC/LDAP-Samba!!! And no Windows
 Server and no Windows ADS so you do not need winbind at all.
 Just make the Windows Server a member of your Samba-Server that’s it.
 
 ---
 EDV Daniel Müller
 
 Leitung EDV
 Tropenklinik Paul-Lechler-Krankenhaus
 Paul-Lechler-Str. 24
 72076 Tübingen
 
 Tel.: 07071/206-463, Fax: 07071/206-499
 eMail: muel...@tropenklinik.de
 Internet: www.tropenklinik.de
 ---
 
 -Ursprüngliche Nachricht-
 Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
Im
 Auftrag von Aleix Dorca
 Gesendet: Samstag, 19. Februar 2011 21:40
 An: samba@lists.samba.org
 Betreff: [Samba] Please, help me clarify (winbind).
 
 Hi again,
 
 still struggling with winbind and trying to understand how it is supposed
to
 work. Let's see if someone can answer a simple resolution question so I
can
 see if something is wrong with my setup.
 
 One PDC/LDAP (no winbind), nss with ldap. This works fine as far as I can
 tell.
 
 The other machine is a DMS. Let's say I have an entry like this on my
 'getent passwd' (via LDAP):
 
 adorca:x:10033:513:Aleix Dorca:/home/adorca:/bin/bash
 
 As far as I can tell this user's uid is 10033.
 
 So, now the question: If a windows machine should connect to this server
 what would winbind return as uid number? 10033 via NSS_LDAP or a new
mapping
 stored/created on my LDAP Server. And would this user be treated as a
 'Domain User' or as a 'Unix User'?
 
 The Samba How-To Collections states on 'Winbind with NSS to resolve
 UNIX/Linux user and group IDs':
 
 The use of the LDAP-based passdb backend requires use of the PADL
nss_ldap
 utility or an equivalent. In this situation winbind is used to handle
 foreign SIDs, that is, SIDs from standalone Windows clients (i.e., not a
 member of our domain) as well as SIDs from another domain. The foreign
 UID/GID is mapped from allocated ranges (idmap uid and idmap gid) in
 precisely the same manner as when using winbind with a local IDMAP table.
 
 As I understand this having NSS with Ldap an winbind running a query to
user
 'adorca' should return uid=10033 and not a new idmap mapping. Is this
 correct?
 
 Please someone answer... I'm about to loose it trying to understand how
this
 should work.
 
 Thanks,
 
 Aleix.
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba
 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Please, help me clarify (winbind).

2011-02-19 Thread Aleix Dorca
Hi again,

still struggling with winbind and trying to understand how it is supposed to 
work. Let's see if someone can answer a simple resolution question so I can see 
if something is wrong with my setup.

One PDC/LDAP (no winbind), nss with ldap. This works fine as far as I can tell.

The other machine is a DMS. Let's say I have an entry like this on my 'getent 
passwd' (via LDAP):

adorca:x:10033:513:Aleix Dorca:/home/adorca:/bin/bash

As far as I can tell this user's uid is 10033.

So, now the question: If a windows machine should connect to this server what 
would winbind return as uid number? 10033 via NSS_LDAP or a new mapping 
stored/created on my LDAP Server. And would this user be treated as a 'Domain 
User' or as a 'Unix User'?

The Samba How-To Collections states on 'Winbind with NSS to resolve UNIX/Linux 
user and group IDs':

The use of the LDAP-based passdb backend requires use of the PADL nss_ldap 
utility or an equivalent. In this situation winbind is used to handle foreign 
SIDs, that is, SIDs from standalone Windows clients (i.e., not a member of our 
domain) as well as SIDs from another domain. The foreign UID/GID is mapped from 
allocated ranges (idmap uid and idmap gid) in precisely the same manner as when 
using winbind with a local IDMAP table.

As I understand this having NSS with Ldap an winbind running a query to user 
'adorca' should return uid=10033 and not a new idmap mapping. Is this correct?

Please someone answer... I'm about to loose it trying to understand how this 
should work.

Thanks,

Aleix.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Please Help me (share linux to MS-DOS)

2010-12-06 Thread Rajeeb Moidunny
Hi TAKAHASHI Motonobu,

Thanks a lot ,Its very helpful.we have more than 800 Novel Server.I would
like to change to Linux.

Can you please  tell me ,what is the procedure for installation.which are
files need to call for getting Linux Folder as Drive


i am use bellow batch file for connecting to Novel server
*Result is Ie can login to Novell  SYS volume will be F:\
Same way I have to get share linux folder to DOS Machine


C:\DOS\SMARTDRV.EXE /X
@ECHO OFF
PROMPT $p$g
MODE COM1:9600,N,8,1
MODE COM2:9600,N,8,1
c:\nwclient\ITE.COM
MODE COM3:9600,N,8,1
MODE LPT1:=COM3
MODE COM4:9600,N,8,1
PATH C:\DOS
SET TEMP=C:\DOS
c:\nwclient\lsl
c:\nwclient\e100bodi
c:\nwclient\ipxodi
c:\nwclient\netx
f:\
login admin

*Result is we can login to Novell  SYS volume will be F:\
Same way I have to get share linux folder to DOS Machine

Rajeeb Moidunny
Lifestyle IT Dept
Phone +97148095473,Ext:-5473
E-mail:-rajeeb.moidu...@cplmg.com
www.landmarkgroupme.com



From:   TAKAHASHI Motonobu mo...@monyo.com
To: Rajeeb Moidunny rajeeb.moidu...@cplmg.com
Cc: icti...@samba.org, samba@lists.samba.org,
samba-techni...@lists.samba.org, Sreejith Janardhanan
sreejith.janardha...@cplmg.com
Date:   12/03/2010 06:31 PM
Subject:Re: Please Help me (share linux to MS-DOS)



Hi

2010/12/2 Rajeeb Moidunny rajeeb.moidu...@cplmg.com:
 I want to share( Map as drive) Linux folder to Windows.If posible share
to
 MS-DOS operating system

You can connect from MS-DOS to Samba with LAN Manager or
MS Network Client.

They are still available from Microsoft at
ftp://ftp.microsoft.com/bussys/Clients/LANMAN/
or ftp://ftp.microsoft.com/bussys/Clients/MSCLIENT/

Also you have to need proper device driver of your network adapter for
MS-DOS.

Unfortunately they use much memory than Netware client especially
using TCP/IP, so you may meet memory exhausted error.

I publish the screen image at http://damedame.monyo.com/?date=20101113#p01
Sorry for Japanese message displayed there.

---
TAKAHASHI Motonobu mo...@samba.gr.jp




NOTE: This e-mail message (which includes attachment/s thereto, if any, and the 
information therein), is legally privileged, proprietary, strictly confidential 
and exempt from disclosure, which is not waived or lost by mis-transmission or 
error. If you are not the original intended recipient of this message, it may 
be unlawful and illegal for you to read, print, retain, copy, disseminate, 
disclose or otherwise use this message, or take any action in reliance on it, 
and the same is prohibited and forbidden. If you have received this email in 
error, please notify the sender immediately by return reply and delete the 
message from your system without printing or making a copy. Neither the sender 
nor we are liable for any loss or damage as a result of this message, or for 
any delay, interception, corruption, virus, error, omission, improper or 
incomplete transmission thereof.
www.landmarkgroupme.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Please Help me (share linux to MS-DOS)

2010-12-06 Thread Helmut Hullen
Hallo, TAKAHASHI,

Du meintest am 03.12.10:

 I want to share( Map as drive) Linux folder to Windows.If posible
 share to MS-DOS operating system

 You can connect from MS-DOS to Samba with LAN Manager or
 MS Network Client.

 They are still available from Microsoft at
 ftp://ftp.microsoft.com/bussys/Clients/LANMAN/
 or ftp://ftp.microsoft.com/bussys/Clients/MSCLIENT/

 Also you have to need proper device driver of your network adapter
 for MS-DOS.

Perhaps he has to switch password encryption to

encrypt passwords = no

Viele Gruesse!
Helmut
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Please Help me (share linux to MS-DOS)

2010-12-06 Thread TAKAHASHI Motonobu
Hello,

2010/12/6 Helmut Hullen hul...@t-online.de:
 Hallo, TAKAHASHI,
 I want to share( Map as drive) Linux folder to Windows.If posible
 share to MS-DOS operating system

 You can connect from MS-DOS to Samba with LAN Manager or
 MS Network Client.

 Perhaps he has to switch password encryption to

        encrypt passwords = no

No, LAN Manager can send LM hash, so you do not need to enable
plain text password.

---
TAKAHASHI Motonobu mo...@monyo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Please Help me (share linux to MS-DOS)

2010-12-03 Thread TAKAHASHI Motonobu
Hi

2010/12/2 Rajeeb Moidunny rajeeb.moidu...@cplmg.com:
 I want to share( Map as drive) Linux folder to Windows.If posible share to
 MS-DOS operating system

You can connect from MS-DOS to Samba with LAN Manager or
MS Network Client.

They are still available from Microsoft at
ftp://ftp.microsoft.com/bussys/Clients/LANMAN/
or ftp://ftp.microsoft.com/bussys/Clients/MSCLIENT/

Also you have to need proper device driver of your network adapter for
MS-DOS.

Unfortunately they use much memory than Netware client especially
using TCP/IP, so you may meet memory exhausted error.

I publish the screen image at http://damedame.monyo.com/?date=20101113#p01
Sorry for Japanese message displayed there.

---
TAKAHASHI Motonobu mo...@samba.gr.jp
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Please Help me (share linux to MS-DOS)

2010-12-02 Thread Rajeeb Moidunny

Hi Sir

I have installed Linux Fedora 8

I want to share( Map as drive) Linux folder to Windows.If posible share to
MS-DOS operating system

Currently we are using Novel Server as per bellow POS Machine(MS-DOS)
connecting to Novel Server

autorun.bat file

C:\DOS\SMARTDRV.EXE /X
@ECHO OFF
PROMPT $p$g
MODE COM1:9600,N,8,1
MODE COM2:9600,N,8,1
c:\nwclient\ITE.COM
MODE COM3:9600,N,8,1
MODE LPT1:=COM3
MODE COM4:9600,N,8,1
PATH C:\DOS
SET TEMP=C:\DOS
c:\nwclient\lsl
c:\nwclient\e100bodi
c:\nwclient\ipxodi
c:\nwclient\netx
f:\
login admin
*Result is we can login to Novell  SYS volume will be F:\
Same way I have to get share linux folder to DOS Machine



Rajeeb Moidunny
Lifestyle IT Dept
Phone +97148095473,Ext:-5473
E-mail:-rajeeb.moidu...@cplmg.com
www.landmarkgroupme.com



NOTE: This e-mail message (which includes attachment/s thereto, if any, and the 
information therein), is legally privileged, proprietary, strictly confidential 
and exempt from disclosure, which is not waived or lost by mis-transmission or 
error. If you are not the original intended recipient of this message, it may 
be unlawful and illegal for you to read, print, retain, copy, disseminate, 
disclose or otherwise use this message, or take any action in reliance on it, 
and the same is prohibited and forbidden. If you have received this email in 
error, please notify the sender immediately by return reply and delete the 
message from your system without printing or making a copy. Neither the sender 
nor we are liable for any loss or damage as a result of this message, or for 
any delay, interception, corruption, virus, error, omission, improper or 
incomplete transmission thereof.
www.landmarkgroupme.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Please help with Samba on Solaris10

2009-08-19 Thread Chris Osicki
Hi 

I'm having lots of problems getting Samba to work on Solaris.
First I tried the version which comes with Solaris10: 3.0.30.
It almost did work, but a user could not _rename_ files.

Next try was with 3.4.0. Unfortunately winbindd tried to _modify_ idmap
entries in my LDAP server to make them be from the UID range defined in 
smb.conf.
WHY? What's the idea behind it?

Winbindd also populated my LDAP server with few hundred (thousend?) of idmap 
entries,
including:
BUILTIN\Guests 4
BUILTIN\Users 4
BUILTIN\Administrators 4
\Everyone 5
NT AUTHORITY\NETWORK 5

I must be missing the reason. Is it documented somewhere?


Current try: 3.2.4

make install produces such errors:

/bin/sh: test: argument expected
make: [installlibwbclient] Error 1 (ignored)
/opt/MC/bin/install -c -m 0644 
/var/tmp/src/Samba/samba-3.2.4/source/nsswitch/libwbclient/wbclient.h 
//usr/local/samba/include
/opt/MC/bin/install -c bin/libnetapi.so.0 //usr/local/samba/lib
if test -e bin/libnetapi.so.0 ; then \
ln -s -f `basename bin/libnetapi.so.0` \
//usr/local/samba/lib/`basename bin/libnetapi.so` ; \
fi


smbd cannot find libraries:

ldd /usr/local/samba/sbin/smbd | grep not
libtalloc.so =  (file not found)
libtdb.so = (file not found)
libwbclient.so =(file not found)

RPATH not set. I set LD_LIBRARY_PATH to /usr/local/samba/lib.
Still couldn't find libraries.
It looks like make install didn't make softlinks. I made them.

I joined the domain,  set LDAP password, started winbindd and smbd.

Winbind looks OK, 
wbinfo -t - success
wbinfo --sid-to-uid - OK
smbclient -L usonfs - OK

When I access a share I get this:

smbclient //usonfs/test -U tgdosch1 -W corproot
Enter tgdosch1's password:
Domain=[CORPROOT] OS=[Unix] Server=[Samba 3.2.4]
Receiving SMB: Server stopped responding
tree connect failed: Call returned zero bytes (EOF)

Could anybody give me a hint what could cause this?
I can provide the (huge) logfiles if anybody want to have a look at them.

Moreover, winbind populated my LDAP server with few hundreds of SID-GID
mappings, probably all groups my user, tgdosch1, belongs to. Couldn't identify 
all them yet.

Is this behaviour documented somewhere?

My smb.conf below.

Thanks for your time.
Regards,
Chris

[global]
workgroup = CORPROOT
netbios name = usonfs
security = domain
#client lanman auth = No
#client NTLMv2 auth = Yes
log level = 10
preferred master = no
bind interfaces only = yes
interfaces = usonfs

password server = sg57.corproot.net sg1006z.corproot.net
winbind uid = 2-23000
winbind gid = 2-23000
winbind enum users = no
winbind enum groups = no

idmap backend = ldap:ldap://usoldap02.swissptt.ch
ldap admin dn = uid=idmapadm,ou=testmap,dc=swissptt,dc=ch
ldap idmap suffix = ou=testmap
ldap suffix = dc=swissptt,dc=ch
ldap ssl = off

[homes]
path = /export/home/%S
writable = yes
public = no
browseable = No
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] please help me PLEASEEEEEEEE

2009-03-13 Thread ankit jariwala
Dear ALL


Please tell me how to configure Openldap in rhel 5


Please send me links  document

Thanks in advance

Ankit Jariwala
9725655020
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] please help me PLEASEEEEEEEE

2009-03-13 Thread Nelson Vale
http://lmgtfy.com/?q=openldap+redhat+configuration

On Friday 13 March 2009 08:58:43 ankit jariwala wrote:
 Dear ALL


 Please tell me how to configure Openldap in rhel 5


 Please send me links  document

 Thanks in advance

 Ankit Jariwala
 9725655020
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


RE [Samba] please help me PLEASEEEEEEEE

2009-03-13 Thread Stéphane PURNELLE
I think that you find more information on the openldap.org website.

---
Stéphane PURNELLE stephane.purne...@corman.be
Service Informatique   Corman S.A.   Tel : 00 32 087/342467

samba-bounces+stephane.purnelle=corman...@lists.samba.org a écrit sur 
13/03/2009 09:58:43 :

 Dear ALL
 
 
 Please tell me how to configure Openldap in rhel 5
 
 
 Please send me links  document
 
 Thanks in advance
 
 Ankit Jariwala
 9725655020
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] please help me PLEASEEEEEEEE

2009-03-13 Thread John Doe

From: ankit jariwala ankit...@gmail.com
 Please tell me how to configure Openldap in rhel 5
 Please send me links  document

Try this link:
http://lmgtfy.com/?q=Openldap+rhel.5+howto

Good Lucckk!!!  ^_^
JD


  

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] please help me PLEASEEEEEEEE

2009-03-13 Thread Jason Voorhees
On Fri, Mar 13, 2009 at 3:58 AM, ankit jariwala ankit...@gmail.com wrote:
 Dear ALL


 Please tell me how to configure Openldap in rhel 5


 Please send me links  document

 Thanks in advance


Hey, I'm sure this link will be useful to you:

http://www.catb.org/~esr/faqs/smart-questions.html

After reading it ask again how we can help you in specific problems
related to SAMBA. Remember, this isn't OpenLDAP mailing list, your
question should be posted there maybe.

Bye

 Ankit Jariwala
 9725655020
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Please help me how to fix read only file problem

2009-03-07 Thread Jaroslav Fojtik
Dears,

I have tested SVN on samba drive and it totally fails.
Please help me to navigate in source code, where attributes are set.
It would be better either to fix it or at least to block R attribute 
to set.

foj...@dvouramenna:~/ESC_sro/Kancl/.svn$ chmod 777 entries
foj...@dvouramenna:~/ESC_sro/Kancl/.svn$ ls -la entries
-rwxrwxrwx  1 fojtik users 300 Mar  7 13:38 entries

M:\ESC_sro\Kancl\.svnattrib entries
A  M:\ESC_sro\Kancl\.svn\entries

M:\ESC_sro\Kancl\.svnattrib +r entries
M:\ESC_sro\Kancl\.svnattrib entries
AR M:\ESC_sro\Kancl\.svn\entries

foj...@dvouramenna:~/ESC_sro/Kancl/.svn$ ls -la entries
-r-xr-xr-x  1 fojtik users 300 Mar  7 13:38 entries

M:\ESC_sro\Kancl\.svnattrib -r entries
Access denied - M:\ESC_sro\Kancl\.svn\entries

From this point there is no way to handle a file on samba drive.
Access is denied. But user fojtik still could change right on 
Linux site. There is something wrong.

thank you
   Jara


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Please help me how to fix read only file problem

2009-03-07 Thread Volker Lendecke
On Sat, Mar 07, 2009 at 02:13:55PM +0100, Jaroslav Fojtik wrote:
 Dears,
 
 I have tested SVN on samba drive and it totally fails.
 Please help me to navigate in source code, where attributes are set.
 It would be better either to fix it or at least to block R attribute 
 to set.
 
 foj...@dvouramenna:~/ESC_sro/Kancl/.svn$ chmod 777 entries
 foj...@dvouramenna:~/ESC_sro/Kancl/.svn$ ls -la entries
 -rwxrwxrwx  1 fojtik users 300 Mar  7 13:38 entries
 
 M:\ESC_sro\Kancl\.svnattrib entries
 A  M:\ESC_sro\Kancl\.svn\entries
 
 M:\ESC_sro\Kancl\.svnattrib +r entries
 M:\ESC_sro\Kancl\.svnattrib entries
 AR M:\ESC_sro\Kancl\.svn\entries
 
 foj...@dvouramenna:~/ESC_sro/Kancl/.svn$ ls -la entries
 -r-xr-xr-x  1 fojtik users 300 Mar  7 13:38 entries
 
 M:\ESC_sro\Kancl\.svnattrib -r entries
 Access denied - M:\ESC_sro\Kancl\.svn\entries
 
 From this point there is no way to handle a file on samba drive.
 Access is denied. But user fojtik still could change right on 
 Linux site. There is something wrong.

Try store dos attributes = yes, given that you have a file
system mounted with xattrs enabled.

Volker


pgpgsNtkSnNUa.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re2: [Samba] Please help me how to fix read only file problem

2009-03-07 Thread Jaroslav Fojtik
Dear Volker Lendecke,

  From this point there is no way to handle a file on samba drive.
  Access is denied. But user fojtik still could change right on 
  Linux site. There is something wrong.
 
 Try store dos attributes = yes, given that you have a file
 system mounted with xattrs enabled.
Sorry it does not work:

M:\ESC_sro\Kancl\.svnattrib *
A  M:\ESC_sro\Kancl\.svn\entries
A  M:\ESC_sro\Kancl\.svn\format

M:\ESC_sro\Kancl\.svnattrib +r entries

M:\ESC_sro\Kancl\.svnattrib -r entries
Access denied - M:\ESC_sro\Kancl\.svn\entries

The 'r' attribute IS supported by filesystem, so it seems to be
handled unixy way. But it could be set only and clearing it is not
working.

Where it is set in a source code?

[homes]
   comment = Home Directories
   store dos attributes = yes
   browseable = yes
   writable = yes


thanks
   Jara

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] please help me st up samba as an application server

2008-02-27 Thread Jarvis Williams
Hi, 
I have samba running as a server, but i need to make it into an application 
server, I don't even know where or how to start. please help, any advice or 
assistance would be much appreciated.




  

Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Please help! Samba + MS Word

2006-10-26 Thread Ute Ferlein

Hello,

I have a great problem with Samba 3.0.20 and MS Word. The archive bit is only setted, if a new file 
is created. If a file is changed, the archive bit will not be setted and the time of saving is used

from the client. (WIN XP, WIN 2000).
When I use other programs (Editor, Openoffice, Excel...) all works fine.
Can someone help me?
Thanks.
Ute


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: Re: [Samba] PLEASE HELP - MAC NEWBIE - MAC OS X 10.4.8 (Intel) compiling errors of Samba 3.0.23.c

2006-10-24 Thread James Peach

On 24/10/06, Steven Thomas Smith [EMAIL PROTECTED] wrote:

Hi,

I'm a newbie having the same problems as reported at
http://www.mail-archive.com/samba@lists.samba.org/msg78809.html.

I'm writing to ask if these bug fixes have been implemented yet, and how
to download if they have!


The changes are in the svn repository but not yet in any released Samba version.


I'm used to downloading tarballs, but have no idea how to navigate
through subversion http://viewcvs.samba.org/cgi-bin/viewcvs.cgi/.


You can get the bleeding edge source via anonymous rsync:
   rsync --recursive rsync://rsync.samba.org/ftp/unpacked/samba .

--
James Peach | [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: Re: [Samba] PLEASE HELP - MAC NEWBIE - MAC OS X 10.4.8 (Intel) - Bus Error

2006-10-12 Thread James Peach

On 11/10/06, Dan [EMAIL PROTECTED] wrote:

I was able to get things to compile but with warnings of unrecognized
option '--pie'.


Add --disable-pie to your configure line. Unfortunately configure
tests generally
can't detect warnings, so -pie gets enabled when it probably shouldn't be.


When I run things I still can not login to shares and
when I run smbclient I get a Bus Error.  Could this be related to the
compile warnings?  Maybe a gcc thing? I don't see any glibc files on the
system.  Any help is greatly appreciated.  Here is the output from the
smbclient:


This smells like a bug. When this happens, smbclient should drop a
core file in /cores. It will be called /cores/core.$pid. Can you use
gdb to get a stack trace of where it crashes?

--
James Peach | [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] PLEASE HELP - MAC NEWBIE - MAC OS X 10.4.8 (Intel) - Bus Error

2006-10-12 Thread Dan
Unfortunately I can not find a core file any where on the system.  There 
is a directory /private/var/log/cores with smbd and nmbd folders but all 
are empty.  Any thing else I can do to get the core file or needed info?


James Peach wrote:

On 11/10/06, Dan [EMAIL PROTECTED] wrote:

I was able to get things to compile but with warnings of unrecognized
option '--pie'.


Add --disable-pie to your configure line. Unfortunately configure
tests generally
can't detect warnings, so -pie gets enabled when it probably shouldn't 
be.



When I run things I still can not login to shares and
when I run smbclient I get a Bus Error.  Could this be related to the
compile warnings?  Maybe a gcc thing? I don't see any glibc files on the
system.  Any help is greatly appreciated.  Here is the output from the
smbclient:


This smells like a bug. When this happens, smbclient should drop a
core file in /cores. It will be called /cores/core.$pid. Can you use
gdb to get a stack trace of where it crashes?



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: Re: [Samba] PLEASE HELP - MAC NEWBIE - MAC OS X 10.4.8 (Intel) - Bus Error

2006-10-12 Thread James Peach

On 12/10/06, Dan [EMAIL PROTECTED] wrote:

Unfortunately I can not find a core file any where on the system.  There
is a directory /private/var/log/cores with smbd and nmbd folders but all
are empty.  Any thing else I can do to get the core file or needed info?


try running smbclient under gdb

gdb /path/to/smbclient
(gdb)  run -with -whatever -args

--
James Peach | [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] PLEASE HELP - MAC NEWBIE - MAC OS X 10.4.8 (Intel) - Bus Error

2006-10-12 Thread Dan

Here is what I got:
(gdb) run -U administrator%MYPASS -I 10.1.0.11 -L 10.2.0.9
Starting program: /usr/bin/smbclient -U administrator%MYPASS -I 
10.1.0.11 -L 10.2.0.9

Reading symbols for shared libraries . done
Domain=[MY_DOMAIN] OS=[Unix] Server=[Samba 3.0.23c]

   Sharename   Type  Comment
   -     ---

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_PROTECTION_FAILURE at address: 0x
0x000a11fd in rpccli_srvsvc_NetShareEnum ()

James Peach wrote:

On 12/10/06, Dan [EMAIL PROTECTED] wrote:

Unfortunately I can not find a core file any where on the system.  There
is a directory /private/var/log/cores with smbd and nmbd folders but all
are empty.  Any thing else I can do to get the core file or needed info?


try running smbclient under gdb

gdb /path/to/smbclient
(gdb)  run -with -whatever -args



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: Re: [Samba] PLEASE HELP - MAC NEWBIE - MAC OS X 10.4.8 (Intel) - Bus Error

2006-10-12 Thread James Peach

On 12/10/06, Dan [EMAIL PROTECTED] wrote:

Here is what I got:
(gdb) run -U administrator%MYPASS -I 10.1.0.11 -L 10.2.0.9
Starting program: /usr/bin/smbclient -U administrator%MYPASS -I
10.1.0.11 -L 10.2.0.9
Reading symbols for shared libraries . done
Domain=[MY_DOMAIN] OS=[Unix] Server=[Samba 3.0.23c]

Sharename   Type  Comment
-     ---

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_PROTECTION_FAILURE at address: 0x
0x000a11fd in rpccli_srvsvc_NetShareEnum ()


ooh! null pointer dereference!

Can you please open a bug at bugzilla.samba.org? Assign it to
[EMAIL PROTECTED] and hopefully I'll be able to do something about it
in the next few days.

--
James Peach | [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] PLEASE HELP - MAC NEWBIE - MAC OS X 10.4.8 (Intel) compiling errors of Samba 3.0.23.c

2006-10-11 Thread Dan

Hello,
   I am trying to compile the latest samba 3.0.23c on MAC Intel OS X 
10.4.8 and I am getting errors with the krb5 stuff.  I have searched the 
net and found other people with the same error but didn't see any 
solution.  Has anyone successfully compiled it on 10.4.8 Intel?  Any 
help would be greatly appreciated as I am new to the mac platform but 
have lots of linux experience.  The errors are below:


Compiling libsmb/clikrb5.c
libsmb/clikrb5.c: In function 'krb5_locate_kdc':
libsmb/clikrb5.c:378: error: 'krb5_krbhst_handle' undeclared (first use 
in this function)
libsmb/clikrb5.c:378: error: (Each undeclared identifier is reported 
only once

libsmb/clikrb5.c:378: error: for each function it appears in.)
libsmb/clikrb5.c:378: error: parse error before 'hnd'
libsmb/clikrb5.c:379: error: 'krb5_krbhst_info' undeclared (first use in 
this function)

libsmb/clikrb5.c:379: error: 'hinfo' undeclared (first use in this function)
libsmb/clikrb5.c:388: error: 'KRB5_KRBHST_KDC' undeclared (first use in 
this function)

libsmb/clikrb5.c:388: error: 'hnd' undeclared (first use in this function)
libsmb/clikrb5.c:917:2: error: #error UNKNOWN_KRB5_AP_REQ_FREE_FUNCTION
libsmb/clikrb5.c:959:2: error: #error UNKOWN_KRB5_AP_REQ_DECODING_FUNCTION
make: *** [libsmb/clikrb5.o] Error 1

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] PLEASE HELP - MAC NEWBIE - MAC OS X 10.4.8 (Intel) compiling errors of Samba 3.0.23.c

2006-10-11 Thread James Peach

On 11/10/06, Dan [EMAIL PROTECTED] wrote:

Hello,
I am trying to compile the latest samba 3.0.23c on MAC Intel OS X
10.4.8 and I am getting errors with the krb5 stuff.  I have searched the
net and found other people with the same error but didn't see any
solution.  Has anyone successfully compiled it on 10.4.8 Intel?  Any
help would be greatly appreciated as I am new to the mac platform but
have lots of linux experience.  The errors are below:

Compiling libsmb/clikrb5.c
libsmb/clikrb5.c: In function 'krb5_locate_kdc':
libsmb/clikrb5.c:378: error: 'krb5_krbhst_handle' undeclared (first use
in this function)
libsmb/clikrb5.c:378: error: (Each undeclared identifier is reported
only once
libsmb/clikrb5.c:378: error: for each function it appears in.)
libsmb/clikrb5.c:378: error: parse error before 'hnd'
libsmb/clikrb5.c:379: error: 'krb5_krbhst_info' undeclared (first use in
this function)
libsmb/clikrb5.c:379: error: 'hinfo' undeclared (first use in this function)
libsmb/clikrb5.c:388: error: 'KRB5_KRBHST_KDC' undeclared (first use in
this function)
libsmb/clikrb5.c:388: error: 'hnd' undeclared (first use in this function)
libsmb/clikrb5.c:917:2: error: #error UNKNOWN_KRB5_AP_REQ_FREE_FUNCTION
libsmb/clikrb5.c:959:2: error: #error UNKOWN_KRB5_AP_REQ_DECODING_FUNCTION
make: *** [libsmb/clikrb5.o] Error 1


metze just checked in a change to fix this. If you try the latest code from the
subversion repository, it should build.

--
James Peach | [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] PLEASE HELP - MAC NEWBIE - MAC OS X 10.4.8 (Intel) compiling errors of Samba 3.0.23.c

2006-10-11 Thread Dan
Ok, I checked out the latest source using subversion and the command was 
as follows:


/usr/local/bin/svn co svn://svnanon.samba.org/samba/branches/SAMBA_3_0 
samba-3_0


I then rsynced the latest source into the 3.0.23c tree to get all the 
changes, but after a successful configure I get the following error when 
I run make.  I am probably doing something wrong but I am not sure what 
as I am not used to dealing with the source tree that doesn't have the 
configure script in it.  Any ideas?


intelimac:/Users/dan/samba-3.0.23c/source root# make
Using FLAGS  =  -O -D_SAMBA_BUILD_ 
-I/Users/dan/samba-3.0.23c/source/popt 
-I/Users/dan/samba-3.0.23c/source/iniparser/src @SAMBA_CPPFLAGS@  
-DHAVE_CONFIG_H  -I/sw/include -DLDAP_DEPRECATED
-I/Users/dan/samba-3.0.23c/source/lib -D_SAMBA_BUILD_=3

 PICFLAG= @PICFLAG@
 LIBS   = -lresolv -ldl -liconv
 LDFLAGS= -pie  -Wl,-search_paths_first -L/sw/lib
 DYNEXP =
 LDSHFLAGS  = -bundle -flat_namespace -undefined suppress  
-Wl,-search_paths_first -L/sw/lib

 SHLIBEXT   = dylib
 SONAMEFLAG = #
Generating smbd/build_options.c
Building include/proto.h
creating /Users/dan/samba-3.0.23c/source/include/proto.h
Building include/build_env.h
creating /Users/dan/samba-3.0.23c/source/nsswitch/winbindd_proto.h
creating /Users/dan/samba-3.0.23c/source/web/swat_proto.h
creating /Users/dan/samba-3.0.23c/source/client/client_proto.h
creating /Users/dan/samba-3.0.23c/source/utils/net_proto.h
creating /Users/dan/samba-3.0.23c/source/utils/ntlm_auth_proto.h
Compiling dynconfig.c
i686-apple-darwin8-gcc-4.0.1: @SAMBA_CPPFLAGS@: No such file or directory
i686-apple-darwin8-gcc-4.0.1: @PICFLAG@: No such file or directory
command line:1:1: warning: _SAMBA_BUILD_ redefined
command line:1:1: warning: this is the location of the previous definition
/Users/dan/samba-3.0.23c/source/dynconfig.c:21:22: error: includes.h: No 
such file or directory
/Users/dan/samba-3.0.23c/source/dynconfig.c:47: error: parse error 
before 'dyn_CONFIGFILE'
/Users/dan/samba-3.0.23c/source/dynconfig.c:47: warning: initialization 
makes integer from pointer without a cast
/Users/dan/samba-3.0.23c/source/dynconfig.c:47: warning: data definition 
has no type or storage class
/Users/dan/samba-3.0.23c/source/dynconfig.c:50: error: parse error 
before 'dyn_LOGFILEBASE'
/Users/dan/samba-3.0.23c/source/dynconfig.c:50: warning: initialization 
makes integer from pointer without a cast
/Users/dan/samba-3.0.23c/source/dynconfig.c:50: warning: data definition 
has no type or storage class
/Users/dan/samba-3.0.23c/source/dynconfig.c:53: error: parse error 
before 'dyn_LMHOSTSFILE'
/Users/dan/samba-3.0.23c/source/dynconfig.c:53: warning: initialization 
makes integer from pointer without a cast
/Users/dan/samba-3.0.23c/source/dynconfig.c:53: warning: data definition 
has no type or storage class
/Users/dan/samba-3.0.23c/source/dynconfig.c:60: error: parse error 
before 'dyn_LIBDIR'
/Users/dan/samba-3.0.23c/source/dynconfig.c:60: warning: initialization 
makes integer from pointer without a cast
/Users/dan/samba-3.0.23c/source/dynconfig.c:60: warning: data definition 
has no type or storage class
/Users/dan/samba-3.0.23c/source/dynconfig.c:61: error: parse error 
before 'dyn_SHLIBEXT'
/Users/dan/samba-3.0.23c/source/dynconfig.c:61: warning: initialization 
makes integer from pointer without a cast
/Users/dan/samba-3.0.23c/source/dynconfig.c:61: warning: data definition 
has no type or storage class
/Users/dan/samba-3.0.23c/source/dynconfig.c:68: error: parse error 
before 'dyn_LOCKDIR'
/Users/dan/samba-3.0.23c/source/dynconfig.c:68: warning: initialization 
makes integer from pointer without a cast
/Users/dan/samba-3.0.23c/source/dynconfig.c:68: warning: data definition 
has no type or storage class
/Users/dan/samba-3.0.23c/source/dynconfig.c:69: error: parse error 
before 'dyn_PIDDIR'
/Users/dan/samba-3.0.23c/source/dynconfig.c:69: warning: initialization 
makes integer from pointer without a cast
/Users/dan/samba-3.0.23c/source/dynconfig.c:69: warning: data definition 
has no type or storage class
/Users/dan/samba-3.0.23c/source/dynconfig.c:71: error: parse error 
before 'dyn_SMB_PASSWD_FILE'
/Users/dan/samba-3.0.23c/source/dynconfig.c:71: warning: initialization 
makes integer from pointer without a cast
/Users/dan/samba-3.0.23c/source/dynconfig.c:71: warning: data definition 
has no type or storage class
/Users/dan/samba-3.0.23c/source/dynconfig.c:72: error: parse error 
before 'dyn_PRIVATE_DIR'
/Users/dan/samba-3.0.23c/source/dynconfig.c:72: warning: initialization 
makes integer from pointer without a cast
/Users/dan/samba-3.0.23c/source/dynconfig.c:72: warning: data definition 
has no type or storage class

The following command failed:
gcc  -O -D_SAMBA_BUILD_ -I/Users/dan/samba-3.0.23c/source/popt 
-I/Users/dan/samba-3.0.23c/source/iniparser/src @SAMBA_CPPFLAGS@  
-DHAVE_CONFIG_H  -I/sw/include -DLDAP_DEPRECATED
-I/Users/dan/samba-3.0.23c/source/lib -D_SAMBA_BUILD_=3 

Re: [Samba] PLEASE HELP - MAC NEWBIE - MAC OS X 10.4.8 (Intel) compiling errors of Samba 3.0.23.c - FIXED

2006-10-11 Thread Dan
I figured out what I was doing wrong.  Obviously the old configure file 
will not work.  I ran the make-tarball.sh script to reproduce the 
configure and everything builds fine.  I will test it to make sure 
things work.  I am building this because my original 3.0.10 version 
wasn't allowing connections after upgrading to the 3.0.23c version on 
the domain controller.  I am hoping this will fix that problem.


James Peach wrote:

On 11/10/06, Dan [EMAIL PROTECTED] wrote:

Hello,
I am trying to compile the latest samba 3.0.23c on MAC Intel OS X
10.4.8 and I am getting errors with the krb5 stuff.  I have searched the
net and found other people with the same error but didn't see any
solution.  Has anyone successfully compiled it on 10.4.8 Intel?  Any
help would be greatly appreciated as I am new to the mac platform but
have lots of linux experience.  The errors are below:

Compiling libsmb/clikrb5.c
libsmb/clikrb5.c: In function 'krb5_locate_kdc':
libsmb/clikrb5.c:378: error: 'krb5_krbhst_handle' undeclared (first use
in this function)
libsmb/clikrb5.c:378: error: (Each undeclared identifier is reported
only once
libsmb/clikrb5.c:378: error: for each function it appears in.)
libsmb/clikrb5.c:378: error: parse error before 'hnd'
libsmb/clikrb5.c:379: error: 'krb5_krbhst_info' undeclared (first use in
this function)
libsmb/clikrb5.c:379: error: 'hinfo' undeclared (first use in this 
function)

libsmb/clikrb5.c:388: error: 'KRB5_KRBHST_KDC' undeclared (first use in
this function)
libsmb/clikrb5.c:388: error: 'hnd' undeclared (first use in this 
function)

libsmb/clikrb5.c:917:2: error: #error UNKNOWN_KRB5_AP_REQ_FREE_FUNCTION
libsmb/clikrb5.c:959:2: error: #error 
UNKOWN_KRB5_AP_REQ_DECODING_FUNCTION

make: *** [libsmb/clikrb5.o] Error 1


metze just checked in a change to fix this. If you try the latest code 
from the

subversion repository, it should build.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: Re: [Samba] PLEASE HELP - MAC NEWBIE - MAC OS X 10.4.8 (Intel) compiling errors of Samba 3.0.23.c - FIXED

2006-10-11 Thread James Peach

On 11/10/06, Dan [EMAIL PROTECTED] wrote:

I figured out what I was doing wrong.  Obviously the old configure file
will not work.  I ran the make-tarball.sh script to reproduce the
configure and everything builds fine.


yep :) I usually do a ./autogen.sh  ./configure --foo

--
James Peach | [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] PLEASE HELP - MAC NEWBIE - MAC OS X 10.4.8 (Intel) - Bus Error

2006-10-11 Thread Dan
I was able to get things to compile but with warnings of unrecognized 
option '--pie'.  When I run things I still can not login to shares and 
when I run smbclient I get a Bus Error.  Could this be related to the 
compile warnings?  Maybe a gcc thing? I don't see any glibc files on the 
system.  Any help is greatly appreciated.  Here is the output from the 
smbclient:



[000] 00 05 00 0C 03 10 00 00  00 44 00 00 00 01 00 00   .D..
[010] 00 B8 10 B8 10 F0 53 00  00 0D 00 5C 50 49 50 45  ..S. ...\PIPE
[020] 5C 6E 74 73 76 63 73 00  00 01 00 00 00 00 00 00  \ntsvcs. 
[030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]. .+.H
[040] 60 02 00 00 00`
size=124
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=6116
smb_uid=101
smb_mid=6
smt_wct=10
smb_vwv[ 0]=0 (0x0)
smb_vwv[ 1]=   68 (0x44)
smb_vwv[ 2]=0 (0x0)
smb_vwv[ 3]=0 (0x0)
smb_vwv[ 4]=   56 (0x38)
smb_vwv[ 5]=0 (0x0)
smb_vwv[ 6]=   68 (0x44)
smb_vwv[ 7]=   56 (0x38)
smb_vwv[ 8]=0 (0x0)
smb_vwv[ 9]=0 (0x0)
smb_bcc=69
[000] 00 05 00 0C 03 10 00 00  00 44 00 00 00 01 00 00   .D..
[010] 00 B8 10 B8 10 F0 53 00  00 0D 00 5C 50 49 50 45  ..S. ...\PIPE
[020] 5C 6E 74 73 76 63 73 00  00 01 00 00 00 00 00 00  \ntsvcs. 
[030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]. .+.H
[040] 60 02 00 00 00`
00 smb_io_rpc_hdr rpc_hdr  
    major : 05

   0001 minor : 00
   0002 pkt_type  : 0c
   0003 flags : 03
   0004 pack_type0: 10
   0005 pack_type1: 00
   0006 pack_type2: 00
   0007 pack_type3: 00
   0008 frag_len  : 0044
   000a auth_len  : 
   000c call_id   : 0001
rpc_api_pipe: got PDU len of 68 at offset 0
rpc_api_pipe: Remote machine 10.2.0.9 pipe \srvsvc fnum 0x775d returned 
68 bytes.
rpc_pipe_bind: Remote machine 10.2.0.9 pipe \srvsvc fnum 0x775d bind 
request returned ok.

00 smb_io_rpc_hdr hdr
    major : 05
   0001 minor : 00
   0002 pkt_type  : 0c
   0003 flags : 03
   0004 pack_type0: 10
   0005 pack_type1: 00
   0006 pack_type2: 00
   0007 pack_type3: 00
   0008 frag_len  : 0044
   000a auth_len  : 
   000c call_id   : 0001
10 smb_io_rpc_hdr_ba
   10 smb_io_rpc_hdr_bba
   0010 max_tsize: 10b8
   0012 max_rsize: 10b8
   0014 assoc_gid: 53f0
   18 smb_io_rpc_addr_str
   0018 len: 000d
   001a str: \PIPE\ntsvcs.
   27 smb_io_rpc_results
   0028 num_results: 01
   002c result : 
   002e reason : 
   30 smb_io_rpc_iface
   30 smb_io_uuid uuid
   0030 data   : 8a885d04
   0034 data   : 1ceb
   0036 data   : 11c9
   0038 data   : 9f e8
   003a data   : 08 00 2b 10 48 60
   0040 version: 0002
check_bind_response: accepted!
cli_rpc_pipe_open_noauth: opened pipe \srvsvc to machine 10.2.0.9 and 
bound anonymously.

   srvsvc_NetShareEnum: struct srvsvc_NetShareEnum
   in: struct srvsvc_NetShareEnum
   server_unc   : *
   server_unc   : ''
   level: *
   level: 0x0001 (1)
   ctr  : *
   ctr  : union srvsvc_NetShareCtr(case 1)
   ctr1 : *
   ctr1: struct srvsvc_NetShareCtr1
   count: 0x (0)
   array: NULL
   max_buffer   : 0x (4294967295)
   resume_handle: *
   resume_handle: 0x (0)
00 smb_io_rpc_hdr hdr   
    major : 05

   0001 minor : 00
   0002 pkt_type  : 00
   0003 flags : 03
   0004 pack_type0: 10
   0005 pack_type1: 00
   0006 pack_type2: 00
   0007 pack_type3: 00
   0008 frag_len  : 004c
   000a auth_len  : 
   000c call_id   : 0002
10 smb_io_rpc_hdr_req hdr_req
   0010 alloc_hint: 0034
   0014 context_id: 
   0016 opnum : 0024
rpc_api_pipe: Remote machine 10.2.0.9 pipe \srvsvc fnum 0x775d
size=158
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=8
smb_flg2=55297
smb_tid=1
smb_pid=6116
smb_uid=101
smb_mid=7
smt_wct=16
smb_vwv[ 0]=0 (0x0)
smb_vwv[ 1]=   76 (0x4C)
smb_vwv[ 2]=0 (0x0)
smb_vwv[ 3]= 4280 (0x10B8)
smb_vwv[ 4]=0 (0x0)
smb_vwv[ 5]=0 (0x0)
smb_vwv[ 6]=0 (0x0)
smb_vwv[ 7]=0 (0x0)
smb_vwv[ 8]=0 (0x0)
smb_vwv[ 9]=0 (0x0)
smb_vwv[10]=   82 (0x52)
smb_vwv[11]=   76 (0x4C)
smb_vwv[12]=   82 (0x52)
smb_vwv[13]=2 (0x2)
smb_vwv[14]=   38 (0x26)
smb_vwv[15]=30557 (0x775D)
smb_bcc=91
[000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 05  .\.P.I.P .E.\
[010] 00 00 03 10 00 00 00 4C  00 00 00 02 00 00 00 34  ...L ...4
[020] 00 00 00 00 00 24 00 00  00 02 00 01 00 00 00 00  .$.. 

Re: [Samba] PLEASE HELP! Can't add machines to domain!

2006-09-27 Thread Chuck Theobald

Hi,

I see this sort of behavior about half the time I add a machine to the 
domain.  The workstation comes back with a message expressing 
NT_STATUS_NO_SUCH_USER.  A second attempt generally succeeds. 

It looks like your add machine script in smb.conf is correct.  I would 
try running the smbldap-useradd command from the command-line, then 
checking the output and your LDAP database.  I have discovered stderr 
messages that do not make it back to the workstation level.


I think that the idealx scripts are wholly responsible for what goes 
into the LDAP database, the workstation does not have direct contact 
with your LDAP database.


Good luck,
Chuck


I have spent days now trying to debug why I can not add machines to the 
domain.  I am using samba 3.0.23c with an openldap backend.  I can 
authenticate fine using smbclient with the administrator account but 
when I go to add a machine it fails.  I have checked the debug logs and 
know what is happening, I am just not sure why or how to fix it.  I am 
using the idealx scripts to add machines.  It adds the machine to ldap 
but does not add any of the necessary samba attributes.  I thought the 
machine was supposed to do this now and not the scripts.  Is this 
correct?  If so I am seeing one thing in the log for the machine that I 
think may have something to do with it.  It says secrets_fetch failed! 
just before the check for the machine and failing.  What does this mean 
and is this a problem?  As you can see the administrator authenticates 
fine.  When it fails the check for the machine account with 
NT_STATUS_NO_SUCH_USER it is searching the ldap for 
((uid=xplaptop$)(objectClass=sambaSamAccount))  but the entry created 
does not contain any samba* entries like it should.  I am curious to 
know if the secrets check failing is the machine trying to add that 
stuff to ldap?  I have read the how to a few times and don't see 
anything I missed, but obviously I have something amiss here.  Any help 
would be GREATLY appreciated as I have spent many many hours trying to 
find out why this is happening.

[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_username(534)
pdb_set_username: setting username Administrator, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_domain(557)
pdb_set_domain: setting domain DOMAIN_UK, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_nt_username(580)
pdb_set_nt_username: setting nt username Administrator, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_fullname(603)
pdb_set_full_name: setting full name System User, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_homedir(696)
pdb_set_homedir: setting home dir \UK_PDC\Administrator, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(672)
pdb_set_dir_drive: setting dir drive c:, was NULL
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_logon_script(626)
pdb_set_logon_script: setting logon script logon.bat, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_profile_path(649)
pdb_set_profile_path: setting profile path c:\Documents and 
Settings\Administrator, was

[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_workstations(739)
pdb_set_workstations: setting workstations , was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_user_sid(463)
pdb_set_user_sid: setting user sid 
S-1-5-21-334771251-3296030561-843139161-500

[2006/09/26 10:35:53, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73)
pdb_set_user_sid_from_rid:
  setting user sid S-1-5-21-334771251-3296030561-843139161-500 from 
rid 500

[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_group_sid(521)
pdb_set_group_sid: setting group sid 
S-1-5-21-334771251-3296030561-843139161-512
[2006/09/26 10:35:53, 10] 
passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100)

pdb_set_group_sid_from_rid:
  setting group sid S-1-5-21-334771251-3296030561-843139161-512 
from rid 512
[2006/09/26 10:35:53, 5] 
passdb/secrets.c:secrets_fetch_trusted_domain_password(340)

secrets_fetch failed!
[2006/09/26 10:35:53, 4] passdb/pdb_ldap.c:ldapsam_getsampwnam(1396)
ldapsam_getsampwnam: Unable to locate user [XPLAPTOP$] count=0
[2006/09/26 10:35:53, 4] passdb/pdb_ldap.c:ldapsam_getgroup(2213)
ldapsam_getgroup: Did not find group
[2006/09/26 10:36:00, 3] 
passdb/pdb_interface.c:pdb_default_create_user(368)
_samr_create_user: Running the command `/usr/local/sbin/smbldap-useradd 
-t 5 -w 'xplaptop$'' gave 0
[2006/09/26 10:36:00, 3] 
passdb/pdb_interface.c:pdb_default_create_user(381)
pdb_default_create_user: failed to create a new user structure: 
NT_STATUS_NO_SUCH_USER

[2006/09/26 10:36:00, 5] lib/gencache.c:gencache_shutdown(90)
Closing cache file

--
Chuck Theobald
System Administrator
The Robert and Beverly Lewis Center for Neuroimaging
University of Oregon
P: 541-346-0343
F: 541-346-0345

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] PLEASE HELP! Can't add machines to domain!

2006-09-26 Thread Dan
I have spent days now trying to debug why I can not add machines to the 
domain.  I am using samba 3.0.23c with an openldap backend.  I can 
authenticate fine using smbclient with the administrator account but 
when I go to add a machine it fails.  I have checked the debug logs and 
know what is happening, I am just not sure why or how to fix it.  I am 
using the idealx scripts to add machines.  It adds the machine to ldap 
but does not add any of the necessary samba attributes.  I thought the 
machine was supposed to do this now and not the scripts.  Is this 
correct?  If so I am seeing one thing in the log for the machine that I 
think may have something to do with it.  It says secrets_fetch failed! 
just before the check for the machine and failing.  What does this mean 
and is this a problem?  As you can see the administrator authenticates 
fine.  When it fails the check for the machine account with 
NT_STATUS_NO_SUCH_USER it is searching the ldap for 
((uid=xplaptop$)(objectClass=sambaSamAccount))  but the entry created 
does not contain any samba* entries like it should.  I am curious to 
know if the secrets check failing is the machine trying to add that 
stuff to ldap?  I have read the how to a few times and don't see 
anything I missed, but obviously I have something amiss here.  Any help 
would be GREATLY appreciated as I have spent many many hours trying to 
find out why this is happening. 


[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_username(534)
 pdb_set_username: setting username Administrator, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_domain(557)
 pdb_set_domain: setting domain DOMAIN_UK, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_nt_username(580)
 pdb_set_nt_username: setting nt username Administrator, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_fullname(603)
 pdb_set_full_name: setting full name System User, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_homedir(696)
 pdb_set_homedir: setting home dir \UK_PDC\Administrator, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(672)
 pdb_set_dir_drive: setting dir drive c:, was NULL
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_logon_script(626)
 pdb_set_logon_script: setting logon script logon.bat, was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_profile_path(649)
 pdb_set_profile_path: setting profile path c:\Documents and 
Settings\Administrator, was

[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_workstations(739)
 pdb_set_workstations: setting workstations , was
[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_user_sid(463)
 pdb_set_user_sid: setting user sid 
S-1-5-21-334771251-3296030561-843139161-500

[2006/09/26 10:35:53, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73)
 pdb_set_user_sid_from_rid:
   setting user sid S-1-5-21-334771251-3296030561-843139161-500 
from rid 500

[2006/09/26 10:35:53, 10] passdb/pdb_get_set.c:pdb_set_group_sid(521)
 pdb_set_group_sid: setting group sid 
S-1-5-21-334771251-3296030561-843139161-512
[2006/09/26 10:35:53, 10] 
passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100)

 pdb_set_group_sid_from_rid:
   setting group sid S-1-5-21-334771251-3296030561-843139161-512 
from rid 512
[2006/09/26 10:35:53, 5] 
passdb/secrets.c:secrets_fetch_trusted_domain_password(340)

 secrets_fetch failed!
[2006/09/26 10:35:53, 4] passdb/pdb_ldap.c:ldapsam_getsampwnam(1396)
 ldapsam_getsampwnam: Unable to locate user [XPLAPTOP$] count=0
[2006/09/26 10:35:53, 4] passdb/pdb_ldap.c:ldapsam_getgroup(2213)
 ldapsam_getgroup: Did not find group
[2006/09/26 10:36:00, 3] passdb/pdb_interface.c:pdb_default_create_user(368)
 _samr_create_user: Running the command 
`/usr/local/sbin/smbldap-useradd -t 5 -w 'xplaptop$'' gave 0

[2006/09/26 10:36:00, 3] passdb/pdb_interface.c:pdb_default_create_user(381)
 pdb_default_create_user: failed to create a new user structure: 
NT_STATUS_NO_SUCH_USER

[2006/09/26 10:36:00, 5] lib/gencache.c:gencache_shutdown(90)
 Closing cache file

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Please help concerning my posting from 2004

2006-08-25 Thread Henrik von Lukowicz
Please delete the following page:

http://lists.samba.org/archive/samba/2004-June/087694.html

It includes personal information about me including my bank account.

Please delete!

Henrik von Lukowicz
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] please help me

2006-03-30 Thread Mohammad Mansoor Maasoomzade
hello
i use samba 3.0.21c and the os linux suse 10 x86_64 on one system and os win xp 
 media center on the other system.
when i try connect with os win xp to server samba 3.0.21c the below message was 
shown :
my workgrp is not accessible. You might not have premission to use this 
network resource. contact the administrator of this server to find out if you 
have access premission.
the list of server for this wrkgrp is not currently available.
i am biginner to use samba and can not type english correct totally.
please help me step by step if you can.
my mail is [EMAIL PROTECTED]



-
Talk is cheap. Use Yahoo! Messenger to make PC-to-Phone calls.  Great rates 
starting at 1cent;/min.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Please Help --- Samba accessing share very slowly

2006-03-22 Thread mallapadi niranjan
Hi all

I have a samba 3.0.21c with openldap 2.3.19,  with another linux system
having samba 3.0.21c acting as domain member server. (file server)
all my client access the file server shares extensively. about 100 users
access the file server at time,
this is making things very slow, on the file server about 180 smbd process
are getting created. on the file server i have 1gb of RAM with
2Gb of swap space, it occupies all the 1gb but never access swap space. The
share that they access is of 40gb of data
The access to the file server becomes so slow that all my client systems get
hanged (clients system windows 2k professional)
The server architecture of my file server IBM 226 series xeon server with
1gb ram and 73Gb hard disk.

on the file server when we do
smbclient //filesrv/share -U root%redhat
it says server did not respond after 2 milliseconds.
what could be the problem is it that i need to upgrage the RAM, or
plese suggest  or
can we do any changes share defination of smb.conf of my file server so that
access becomes quick.
the following is my smb.conf of domain member server ( file server)
###
[global]

 unix charset = LOCALE
 workgroup = msdpl.com
 netbios name = prjsrv01
 server string = Project Server 1
 printcap name = /etc/printcap
 load printers = yes
 cups options = raw
 log level = 2
 log file = /usr/local/samba-3c/var/%U.%m.log
 syslog = 0
 max log size = 100
 smb ports = 139
 security = domain
 username map = /usr/local/samba-3c/lib/smbusers
 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
 name resolve order = wins bcasts hosts
 wins server = 192.168.129.20
 dns proxy = no
 ldap server = 192.168.129.20
 ldap suffix = dc=msdpl,dc=com
 ldap machine suffix = ou=Computers
 ldap user suffix = ou=People
 ldap group suffix = ou=Groups
 ldap idmap suffix = ou=Idmap
 ldap admin dn = cn=manager,dc=msdpl,dc=com
 ldap ssl = no
 ldap timeout = 50
 acl check permissions = Yes
 template shell = /bin/false
 winbind use default domain = no
 inherit permissions = yes
 inherit acls = yes
 nt acl support = yes
 hide dot files = yes
###Share
Definations
 [homes]
   comment = Home Directories
   valid users = %S
   browseable = no
   writable = yes
   veto files =
/.bash_history/.bash_logout/.bash_profile/.bashrc/.canna/.emacs/.gtkrc/.kde/.viminfo/.xemacs/.zshrc/
   hide dot files = yes

[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
   guest ok = no
   writable = no
   printable = yes

 [projects]
 comment = All Projects
 path = /projects
 browseable = no
 guest ok = no
 writeable = yes
 printable = no
 veto files = desktop.ini/lost+found/.Trash-root/*.sh/*.scr/.recycle/
 create mode = 2700
 force create mode = 0700
 force directory mode = 0700
 inherit permissions = yes
 inherit acls = yes
 vfs objects = recycle

 [datalib]
 comment = DataLib
 path = /datalib
 browseable = no
 writeable = yes
 vfs objects = recycle
 veto files = lost+found
 inherit permissions = yes
 inherit acls = yes
 veto files = desktop.ini/lost+found/.Trash-root/*.sh/*.scr/.recycle/

[softdumps$]
Comment = Soft Dumps
Path = /dumps/softdumps
browseable = no
writeable = yes
inherit permissions = yes
inherit acls = yes
veto files = lost+found/.Trash-root/*.sh/*.scr/.recycle/
write list = @nns, root, @codesec
vfs objects = recycle
[dumps]
Comment = Dumps
Path = /dumps/dumps
browseable = yes
inherit permissions = yes
inherit acls = yes
vfs objects = recycle
veto files = desktop.ini/lost+found/.Trash-root/*.sh/*.scr/.recycle/

[hdrive$]
   path = /home
   browseable = no
   public = no
   writable = yes
   create mask = 0765
   veto files = desktop.ini
   valid users = kr1233, root
   force create mode = 0770
   force directory mode = 0770
   inherit permissions = yes
   inherit acls = yes
   hide dot files = yes
###
Regards
Niranjan
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Please help with samba 3.0.21a on AIX 5.3

2006-01-23 Thread Colht, Charles
On to the next problem:

I just got off the phone with IBM and they (the kerberos folks) said
they don't work with win2003 :O Has anybody got this working? Here is
what I get:


When I run 'net ads join -Uadmin' I get (at debug level 3):

[EMAIL PROTECTED]:~# net ads join -Umyname -d 3
[2006/01/17 10:50:09, 3] param/loadparm.c:lp_load(4195)
  lp_load: refreshing parameters
[2006/01/17 10:50:09, 3] param/loadparm.c:init_globals(1385)
  Initialising global parameters
[2006/01/17 10:50:09, 3] param/params.c:pm_process(574)
  params.c:pm_process() - Processing configuration file
/opt/Samba/3.0.21a/lib/smb.conf
[2006/01/17 10:50:09, 3] param/loadparm.c:do_section(3657)
  Processing section [global]
[2006/01/17 10:50:10, 2] lib/interface.c:add_interface(81)
  added interface ip=X.X.105.57 bcast=X.X.105.127 nmask=255.255.255.128
[2006/01/17 10:50:10, 2] lib/interface.c:add_interface(81)
  added interface ip=192.168.255.251 bcast=192.168.255.255
nmask=255.255.0.0
myname's password:
[2006/01/17 10:50:12, 3] libads/ldap.c:ads_connect(288)
  Connected to LDAP server X.X.100.207
[2006/01/17 10:50:12, 3] libads/ldap.c:ads_server_info(2541)
  got ldap server name [EMAIL PROTECTED], using bind path:
dc=CORP,dc=ACSALASKA,dc=COM
[2006/01/17 10:50:12, 3] libads/sasl.c:ads_sasl_spnego_bind(210)
  ads_sasl_spnego_bind: got OID=1 2 840 48018 1 2 2
[2006/01/17 10:50:12, 3] libads/sasl.c:ads_sasl_spnego_bind(210)
  ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2
[2006/01/17 10:50:12, 3] libads/sasl.c:ads_sasl_spnego_bind(210)
  ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 3
[2006/01/17 10:50:12, 3] libads/sasl.c:ads_sasl_spnego_bind(210)
  ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10
[2006/01/17 10:50:12, 3] libads/sasl.c:ads_sasl_spnego_bind(219)
  ads_sasl_spnego_bind: got server principal name
[EMAIL PROTECTED]
[2006/01/17 10:50:12, 3] libsmb/clikrb5.c:ads_krb5_mk_req(478)
  ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache
found)
[2006/01/17 10:50:12, 0] libads/kerberos.c:ads_kinit_password(164)
  kerberos_kinit_password [EMAIL PROTECTED] failed: Cannot
resolve network address for KDC in requested realm
[2006/01/17 10:50:12, 0] utils/net_ads.c:ads_startup(191)
  ads_connect: Cannot resolve network address for KDC in requested realm
[2006/01/17 10:50:12, 2] utils/net.c:main(876)
  return code = -1

===
X.X.100.207 is the address of the kdc so it CAN resolve the address
X.X.105.57 is the address of the samba server

===
My krb5.conf looks like this:
[libdefaults]
default_realm = CORP.ACSALASKA.COM
default_keytab_name = FILE:/etc/krb5/krb5.keytab
default_tkt_enctypes = des3-cbc-sha1 arcfour-hmac aes256-cts
des-cbc-md5 des-cbc-crc
default_tgs_enctypes = des3-cbc-sha1 arcfour-hmac aes256-cts
des-cbc-md5 des-cbc-crc
# the next 2 lines came from my linux setup that is working but did not
help
dns_lookup_realm = true
dns_lookup_kdc = true

[realms]
CORP.ACSALASKA.COM = {
kdc = acsad6.corp.acsalaska.com:88
admin_server = acsad6.corp.acsalaska.com:749
default_domain = corp.acsalaska.com
}

[domain_realm]
.corp.acsalaska.com = CORP.ACSALASKA.COM
acsad6.corp.acsalaska.com = CORP.ACSALASKA.COM

[logging]
kdc = FILE:/var/krb5/log/krb5kdc.log
admin_server = FILE:/var/krb5/log/kadmin.log
default = FILE:/var/krb5/log/krb5lib.log






-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Colht, Charles
Sent: Wednesday, January 11, 2006 1:19 PM
To: William Jojo; samba@lists.samba.org
Subject: RE: [Samba] Please help with samba 3.0.21a on AIX 5.3

Found that! It worked. Thanks for the help.

Chuck 

-Original Message-
From: William Jojo [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, January 10, 2006 1:55 PM
To: Colht, Charles; samba@lists.samba.org
Subject: Re: [Samba] Please help with samba 3.0.21a on AIX 5.3


- Original Message - 
From: Colht, Charles [EMAIL PROTECTED]
To: samba@lists.samba.org
Sent: Monday, January 09, 2006 8:37 PM
Subject: [Samba] Please help with samba 3.0.21a on AIX 5.3



***
This transmittal may contain confidential information intended solely for
the addressee. If you are not the intended recipient, you are hereby
notified that you have received this transmittal in error; any review,
dissemination, distribution or copying of this transmittal is strictly
prohibited. If you have received this communication in error, please notify
us immediately by reply or by telephone (collect at 907-564-1000) and ask to
speak with the message sender. In addition, please immediately delete this
message and all attachments. Thank you. ACS


--
To unsubscribe from this list go

RE: [Samba] Please help with samba 3.0.21a on AIX 5.3

2006-01-11 Thread Colht, Charles
Found that! It worked. Thanks for the help.

Chuck 

-Original Message-
From: William Jojo [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, January 10, 2006 1:55 PM
To: Colht, Charles; samba@lists.samba.org
Subject: Re: [Samba] Please help with samba 3.0.21a on AIX 5.3


- Original Message - 
From: Colht, Charles [EMAIL PROTECTED]
To: samba@lists.samba.org
Sent: Monday, January 09, 2006 8:37 PM
Subject: [Samba] Please help with samba 3.0.21a on AIX 5.3


 I've tried building samba 3.0.20 and 21a without luck. I've tried
binaries
and they all give this error. I know I am missing something but nothing
points to a solution.


In the binaries folder there is a README. There is a solution to the
posix_aio0 problem you are experiencing.

I need to update that doc with an additional line:

chdev -l posix_aio0 -a autoconfig=available -P


 ../bin/smbstatus
 exec(): 0509-036 Cannot load program ../bin/smbstatus because of the
following errors:
 0509-130 Symbol resolution failed for
/usr/lib/libc.a(posix_aio.o)
because:
 0509-136   Symbol _posix_kaio_rdwr (number 2) is not exported
from
dependent module /unix.
 0509-136   Symbol _posix_listio (number 3) is not exported
from
dependent module /unix.
 0509-136   Symbol _posix_acancel (number 4) is not exported
from
dependent module /unix.
 0509-136   Symbol _posix_iosuspend (number 5) is not exported
from
dependent module /unix.
 0509-136   Symbol _posix_aio_nwait (number 6) is not exported
from
dependent module /unix.
 0509-136   Symbol _posix_aio_nwait64 (number 7) is not
exported
from
dependent module /unix.
 0509-136   Symbol _posix_aio_nwait_timeout (number 8) is not
exported from
dependent module /unix.
 0509-136   Symbol _posix_aio_nwait_timeout64 (number 9) is not
exported from
dependent module /unix.
 0509-136   Symbol _posix_iofsync (number 10) is not exported
from
dependent module /unix.
 0509-026 System error: Error 0
 0509-192 Examine .loader section symbols with the
  'dump -Tv' command.


 This configure line successfully creates a Makefile:
  ./configure --with-ads --with-winbind --with-pam --with-aio-support

 Running make gives this:

 make
 Using FLAGS
=  -O -D_SAMBA_BUILD_ -I./popt -Iinclude
-I/home/inst/software/samba/samba-3
.0.21a/source/include
-I/home/inst/software/samba/samba-3.0.21a/source/ubiqx
 -I/home/inst/software/samba/samba-3.0.21a/source/tdb  -I.
-DLDAP_DEPRECATED
 -I/home/inst/software/samba/samba-3.0.21a/source -D_SAMBA_BUILD_
   LIBS =
   LDSHFLAGS = -Wl,-bexpall,-bM:SRE,-bnoentry,-berok
   LDFLAGS =
   PIE_CFLAGS =
   PIE_LDFLAGS =
 Compiling dynconfig.c
 In file included from /usr/include/aio.h:31,
  from include/includes.h:518,
  from
/home/inst/software/samba/samba-3.0.21a/source/dynconfig.c:21:
 /usr/include/sys/aio.h:91: error: field `aio_sigevent' has incomplete
type
 /usr/include/sys/aio.h:147: error: field `aio_sigevent' has incomplete
type
 In file included from
/home/inst/software/samba/samba-3.0.21a/source/dynconfig.c:21:
 include/includes.h:822: error: redefinition of `struct timespec'
 make: 1254-004 The error code from the last command is 1.


Ok, I'll take a look at this. Were there any other errors in the
config.log?

Also what does oslevel -r report? I'll bet it's baseline (5300-00). I
think I recall having problems with 5300-01 as well when I started
playing
with AIO support when Jeremy first released it. 5300-03 (which I'm
running)
is not reporting this problem for me since the binary has AIO support.
But,
if after you upgrade, you still have it, file a bug and I'll look into
it.


Cheers,

Bill



 Stop.
 Chuck Colht
 Sr System Administrator
 Alaska Communications Systems, Inc.
 907-269-2673
 [EMAIL PROTECTED]






***
 This transmittal may contain confidential information intended solely
for
 the addressee. If you are not the intended recipient, you are hereby
 notified that you have received this transmittal in error; any review,
 dissemination, distribution or copying of this transmittal is strictly
 prohibited. If you have received this communication in error, please
notify
 us immediately by reply or by telephone (collect at 907-564-1000) and
ask
to
 speak with the message sender. In addition, please immediately delete
this
 message and all attachments. Thank you. ACS


 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Please help with samba 3.0.21a on AIX 5.3

2006-01-10 Thread Colht, Charles
I've tried building samba 3.0.20 and 21a without luck. I've tried binaries and 
they all give this error. I know I am missing something but nothing points to a 
solution. 
 
../bin/smbstatus
exec(): 0509-036 Cannot load program ../bin/smbstatus because of the following 
errors:
0509-130 Symbol resolution failed for /usr/lib/libc.a(posix_aio.o) 
because:
0509-136   Symbol _posix_kaio_rdwr (number 2) is not exported from
   dependent module /unix.
0509-136   Symbol _posix_listio (number 3) is not exported from
   dependent module /unix.
0509-136   Symbol _posix_acancel (number 4) is not exported from
   dependent module /unix.
0509-136   Symbol _posix_iosuspend (number 5) is not exported from
   dependent module /unix.
0509-136   Symbol _posix_aio_nwait (number 6) is not exported from
   dependent module /unix.
0509-136   Symbol _posix_aio_nwait64 (number 7) is not exported from
   dependent module /unix.
0509-136   Symbol _posix_aio_nwait_timeout (number 8) is not exported 
from
   dependent module /unix.
0509-136   Symbol _posix_aio_nwait_timeout64 (number 9) is not exported 
from
   dependent module /unix.
0509-136   Symbol _posix_iofsync (number 10) is not exported from
   dependent module /unix.
0509-026 System error: Error 0
0509-192 Examine .loader section symbols with the
 'dump -Tv' command.


This configure line successfully creates a Makefile:
 ./configure --with-ads --with-winbind --with-pam --with-aio-support

Running make gives this:

make
Using FLAGS =  -O -D_SAMBA_BUILD_ -I./popt -Iinclude 
-I/home/inst/software/samba/samba-3.0.21a/source/include 
-I/home/inst/software/samba/samba-3.0.21a/source/ubiqx 
-I/home/inst/software/samba/samba-3.0.21a/source/tdb  -I. -DLDAP_DEPRECATED 
-I/home/inst/software/samba/samba-3.0.21a/source -D_SAMBA_BUILD_
  LIBS =
  LDSHFLAGS = -Wl,-bexpall,-bM:SRE,-bnoentry,-berok
  LDFLAGS =
  PIE_CFLAGS =
  PIE_LDFLAGS =
Compiling dynconfig.c
In file included from /usr/include/aio.h:31,
 from include/includes.h:518,
 from 
/home/inst/software/samba/samba-3.0.21a/source/dynconfig.c:21:
/usr/include/sys/aio.h:91: error: field `aio_sigevent' has incomplete type
/usr/include/sys/aio.h:147: error: field `aio_sigevent' has incomplete type
In file included from 
/home/inst/software/samba/samba-3.0.21a/source/dynconfig.c:21:
include/includes.h:822: error: redefinition of `struct timespec'
make: 1254-004 The error code from the last command is 1.


Stop.
Chuck Colht
Sr System Administrator
Alaska Communications Systems, Inc.
907-269-2673
[EMAIL PROTECTED] 
 


***
This transmittal may contain confidential information intended solely for
the addressee. If you are not the intended recipient, you are hereby
notified that you have received this transmittal in error; any review,
dissemination, distribution or copying of this transmittal is strictly
prohibited. If you have received this communication in error, please notify
us immediately by reply or by telephone (collect at 907-564-1000) and ask to
speak with the message sender. In addition, please immediately delete this
message and all attachments. Thank you. ACS


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Please help with samba 3.0.21a on AIX 5.3

2006-01-10 Thread William Jojo

- Original Message - 
From: Colht, Charles [EMAIL PROTECTED]
To: samba@lists.samba.org
Sent: Monday, January 09, 2006 8:37 PM
Subject: [Samba] Please help with samba 3.0.21a on AIX 5.3


 I've tried building samba 3.0.20 and 21a without luck. I've tried binaries
and they all give this error. I know I am missing something but nothing
points to a solution.


In the binaries folder there is a README. There is a solution to the
posix_aio0 problem you are experiencing.

I need to update that doc with an additional line:

chdev -l posix_aio0 -a autoconfig=available -P


 ../bin/smbstatus
 exec(): 0509-036 Cannot load program ../bin/smbstatus because of the
following errors:
 0509-130 Symbol resolution failed for /usr/lib/libc.a(posix_aio.o)
because:
 0509-136   Symbol _posix_kaio_rdwr (number 2) is not exported from
dependent module /unix.
 0509-136   Symbol _posix_listio (number 3) is not exported from
dependent module /unix.
 0509-136   Symbol _posix_acancel (number 4) is not exported from
dependent module /unix.
 0509-136   Symbol _posix_iosuspend (number 5) is not exported from
dependent module /unix.
 0509-136   Symbol _posix_aio_nwait (number 6) is not exported from
dependent module /unix.
 0509-136   Symbol _posix_aio_nwait64 (number 7) is not exported
from
dependent module /unix.
 0509-136   Symbol _posix_aio_nwait_timeout (number 8) is not
exported from
dependent module /unix.
 0509-136   Symbol _posix_aio_nwait_timeout64 (number 9) is not
exported from
dependent module /unix.
 0509-136   Symbol _posix_iofsync (number 10) is not exported from
dependent module /unix.
 0509-026 System error: Error 0
 0509-192 Examine .loader section symbols with the
  'dump -Tv' command.


 This configure line successfully creates a Makefile:
  ./configure --with-ads --with-winbind --with-pam --with-aio-support

 Running make gives this:

 make
 Using FLAGS
=  -O -D_SAMBA_BUILD_ -I./popt -Iinclude -I/home/inst/software/samba/samba-3
.0.21a/source/include -I/home/inst/software/samba/samba-3.0.21a/source/ubiqx
 -I/home/inst/software/samba/samba-3.0.21a/source/tdb  -I. -DLDAP_DEPRECATED
 -I/home/inst/software/samba/samba-3.0.21a/source -D_SAMBA_BUILD_
   LIBS =
   LDSHFLAGS = -Wl,-bexpall,-bM:SRE,-bnoentry,-berok
   LDFLAGS =
   PIE_CFLAGS =
   PIE_LDFLAGS =
 Compiling dynconfig.c
 In file included from /usr/include/aio.h:31,
  from include/includes.h:518,
  from
/home/inst/software/samba/samba-3.0.21a/source/dynconfig.c:21:
 /usr/include/sys/aio.h:91: error: field `aio_sigevent' has incomplete type
 /usr/include/sys/aio.h:147: error: field `aio_sigevent' has incomplete
type
 In file included from
/home/inst/software/samba/samba-3.0.21a/source/dynconfig.c:21:
 include/includes.h:822: error: redefinition of `struct timespec'
 make: 1254-004 The error code from the last command is 1.


Ok, I'll take a look at this. Were there any other errors in the config.log?

Also what does oslevel -r report? I'll bet it's baseline (5300-00). I
think I recall having problems with 5300-01 as well when I started playing
with AIO support when Jeremy first released it. 5300-03 (which I'm running)
is not reporting this problem for me since the binary has AIO support. But,
if after you upgrade, you still have it, file a bug and I'll look into it.


Cheers,

Bill



 Stop.
 Chuck Colht
 Sr System Administrator
 Alaska Communications Systems, Inc.
 907-269-2673
 [EMAIL PROTECTED]





***
 This transmittal may contain confidential information intended solely for
 the addressee. If you are not the intended recipient, you are hereby
 notified that you have received this transmittal in error; any review,
 dissemination, distribution or copying of this transmittal is strictly
 prohibited. If you have received this communication in error, please
notify
 us immediately by reply or by telephone (collect at 907-564-1000) and ask
to
 speak with the message sender. In addition, please immediately delete this
 message and all attachments. Thank you. ACS


 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] PLEASE HELP: Samba problems,

2005-08-12 Thread tech

[2005/08/12 12:50:44, 2] auth/auth.c:check_ntlm_password(305)
 check_ntlm_password:  authentication for user [JUAN] - [JUAN] - 
[juan] succeeded

[2005/08/12 12:50:44, 0] smbd/service.c:make_connection_snum(620)
 'tmp/' does not exist or is not a directory, when connecting to [tmp]
[2005/08/12 12:50:44, 2] smbd/server.c:exit_server(571)
 Closing connections

Dear Samba users
please help me fix this
I am using Ubuntu, I already tried LinuxQuestions and Ubuntuforums
I don't know what package I installed, but surely it broked samba

I am unable to list my shares

the main problem is this:
* '/root/tmp/' does not exist or is not a directory, when connecting to 
[tmp]
*I am 100% sure that the directory exists, and I've been trying to fix 
samba for over 3 days without luck


I really hope I can get some help



Regards
SoccerAccess/GamingAccess Tech Department

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Please, Help on Winbind/Squid

2005-05-13 Thread Phibee Network operation Center
Hi
i have a big problems with WInbind and Squid ...
i have join the domain without problems and :
[EMAIL PROTECTED] squid]# wbinfo -t
checking the trust secret via RPC calls succeeded
[EMAIL PROTECTED] squid]#
[EMAIL PROTECTED] squid]# wbinfo -p
Ping to winbindd succeeded on fd 4
[EMAIL PROTECTED] squid]#
[EMAIL PROTECTED] squid]# wbinfo -u|more
ARN
BOULO
...
all work's but when i put :
[EMAIL PROTECTED] squid]# ./wb_group -d
/wb_group[28942](wb_check_group.c:344): External ACL winbindd group 
helper build Apr 25 2005, 17:11:22 starting up...
/wb_group[28942](wb_check_group.c:308): Can't contact winbindd. Dying

[EMAIL PROTECTED] squid]# ./wb_auth -d
/wb_auth[28952](wb_basic_auth.c:183): basic winbindd auth helper build 
Apr 25 2005, 17:11:16 starting up...
/wb_auth[28952](wb_basic_auth.c:160): Can't contact winbindd. Dying
[EMAIL PROTECTED] squid]#

Anyone know why wb_auth and wb_group can't contact winbindd ??
Thanks for your help
I use:
samba-winbind-3.0.10-0.1.101mdk.rpm
squid-2.5.STABLE9-1.1.101mdk.rpm


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] please help....

2005-03-14 Thread Doug Stanley
I've got quite a weird and probably unique situation here.
We have both an Active Directory server and an OpenLDAP
server here. The ADS is for the windows boxes and the LDAP
is for the linux boxes.
My Problem is, there are a few overlapping usernames between
the two (mainly just a handfull of developers).
So I have been running into the problem that samba seems to
authenticate the user and go with the info for the user from
winbind instead of using the info from the ldap for local
users.
It's causing me quite a bit of a headache. I tried the sam_ignoredomain
but that doesn't seem to work. Is there any way to make it try just the
username and only try DOMAIN+username if username doesn't exist???
Thanks alot in advance for any help on this.
Doug
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] please help....

2005-03-14 Thread Paul Gienger

It's causing me quite a bit of a headache. I tried the sam_ignoredomain
but that doesn't seem to work. Is there any way to make it try just the
username and only try DOMAIN+username if username doesn't exist???
How is your nsswitch.conf set up?  If it's something like this
passwd: files winbind ldap
shadow: files winbind ldap
group:  files winbind ldap
you could always reverse the order of ldap and winbind.  Just a stab in 
the dark since I don't run winbind here, but it would stand to reason 
that it could work the other way.


--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] please help....

2005-03-14 Thread Doug Stanley
Nope, I've got:
password:   files ldap winbind
etc.
I think my only problem is in getting samba to only see if
DOMAIN+username exists if username doesn't exist.
So I'm guessing that it has something to do with the auth methods.
Which right now I have mine set to:
auth methods = guest sam_ignoredomain winbind:ntdomain
Which still doesn't work...it seems to find username, but it still
checks for DOMAIN+username...
I'm baffled...
Doug
Paul Gienger wrote:
It's causing me quite a bit of a headache. I tried the sam_ignoredomain
but that doesn't seem to work. Is there any way to make it try just the
username and only try DOMAIN+username if username doesn't exist???

How is your nsswitch.conf set up?  If it's something like this
passwd: files winbind ldap
shadow: files winbind ldap
group:  files winbind ldap
you could always reverse the order of ldap and winbind.  Just a stab in 
the dark since I don't run winbind here, but it would stand to reason 
that it could work the other way.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Please Help me

2005-03-08 Thread Bhargav
Dear All,
 
I want help to access my window machine from linux machine , with samba
server configure  on it.
 
Linux - 192.168.0.2 - with samba server
 
Windows 2000 - 192.168.0.1 - with share directory \\FORTEIT\linux_map
file:///\\FORTEIT\linux_map 
 
 
I already create one directory /mnt/share .. ok..
 
Now I want to mount /mnt/share to \\FORTEIT\linux_map
file:///\\FORTEIT\linux_map  ... using smbmount command
 
So , I can copy files from linux to windows 2000 machine .( want to
automate the process ..)
 
Please guide me for the same..
 
Waiting for your positive reply.
 
Email id ::: [EMAIL PROTECTED] , [EMAIL PROTECTED]
 
 Have A Nice Time..
 
 
Regards,
Bhargav Patel
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Please Help me

2005-03-08 Thread ankush grover
On Wed, 9 Mar 2005 12:01:51 +0530, Bhargav [EMAIL PROTECTED] wrote:
 Dear All,
 
 I want help to access my window machine from linux machine , with samba
 server configure  on it.
 
 Linux - 192.168.0.2 - with samba server
 
 Windows 2000 - 192.168.0.1 - with share directory \\FORTEIT\linux_map
 file:///\\FORTEIT\linux_map
 
 I already create one directory /mnt/share .. ok..
 
 Now I want to mount /mnt/share to \\FORTEIT\linux_map
 file:///\\FORTEIT\linux_map  ... using smbmount command
 
 So , I can copy files from linux to windows 2000 machine .( want to
 automate the process ..)
 
 Please guide me for the same..
 
 Waiting for your positive reply.
 
 Email id ::: [EMAIL PROTECTED] , [EMAIL PROTECTED]
 
  Have A Nice Time..
 

Hey ,

 For mounting the windows drive on linux you have to use mount command

mount -t smbfs //windows machine name/share directory  /mnt/share -o
user=windows user

then it will ask for the password.give the password of the windows user

If you want to kept it forever

edit /etc/fstab file and add an entry 

//windowsmahcine name/share folder /mnt/sharesmbfs  
credentials=  /etc/.smb   0 0

in /etc/.smb file give this

username = windows username
password = windows user password 


you can give any file means against /etc/.smb file but make sure that
permissions for that  are 600 .

like this ,you can  also make a file like this  /etc//home/bhargav/.smb


Regards

Ankush


and make
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Please help printing from CUPS to XP shared printer via smb

2005-02-06 Thread Bob Alexander
Sorry if this is a stupid question but I tried reading, studying and 
finding solution but am not making it alone :)

On my home lan I have a Linux (Debian sid) box (192.168.174.244) running 
 3.0.10 samba and  cups 1.1.23.

My objective is to print from this box to the other home PC which is 
running XP (192.168.174.242) and sharing an Epson R200 printer.

Follows the troubleshooting I could do by myself including an ethereal 
trace.

I would be grateful if any of you could help me understand what am I 
doing wrong which I suspect is related to a wrong authentication ???

TIA,
Bob
1) This is the first anomaly. What are those messages at the bottom ? 
It's reason ?

[EMAIL PROTECTED]:~$ smbclient -I 192.168.174.242 -L fenice-nf7-maxt -N
Domain=[FENICE-NF7-MAXT] OS=[Windows 5.1] Server=[Windows 2000 LAN Manager]
Sharename   Type  Comment
-     ---
P$  Disk  Default share
IPC$IPC   Remote IPC
print$  Disk  Printer Drivers
SharedDocs  Disk
R200Printer   R200
Z$  Disk  Default share
ADMIN$  Disk  Remote Admin
C$  Disk  Default share
timeout connecting to 192.168.174.242:139
Error connecting to 192.168.174.242 (Operation already in progress)
Connection to fenice-nf7-maxt failed
NetBIOS over TCP disabled -- no workgroup available
2) I proceeded to define the printer to my linux CUPS (127.0.0.1:631) 
and this is what I see with ethereal on either box. In particular I see 
a Tree Connect AndX Request, Path: \\192.168.174.242\R200 in frame 9 
going from linux to xp and Tree Connect AndX Response, Error: 
STATUS_ACCESS_DE as the reply from xp to linux in frame 10 the Reason ?

No. TimeSourceDestination   Protocol 
Info
  1 0.00192.168.174.244   192.168.174.242   TCP 
57074  microsoft-ds [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 
TSV=73543465 TSER=0 WS=2

Frame 1 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: 00:09:6b:53:12:f1, Dst: 00:04:4b:80:80:03
Internet Protocol, Src Addr: 192.168.174.244 (192.168.174.244), Dst 
Addr: 192.168.174.242 (192.168.174.242)
Transmission Control Protocol, Src Port: 57074 (57074), Dst Port: 
microsoft-ds (445), Seq: 0, Ack: 0, Len: 0

No. TimeSourceDestination   Protocol 
Info
  2 0.000267192.168.174.242   192.168.174.244   TCP 
microsoft-ds  57074 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 
WS=0 TSV=0 TSER=0

Frame 2 (78 bytes on wire, 78 bytes captured)
Ethernet II, Src: 00:04:4b:80:80:03, Dst: 00:09:6b:53:12:f1
Internet Protocol, Src Addr: 192.168.174.242 (192.168.174.242), Dst 
Addr: 192.168.174.244 (192.168.174.244)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 
57074 (57074), Seq: 0, Ack: 1, Len: 0

No. TimeSourceDestination   Protocol 
Info
  3 0.000338192.168.174.244   192.168.174.242   TCP 
57074  microsoft-ds [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=73543465 TSER=0

Frame 3 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: 00:09:6b:53:12:f1, Dst: 00:04:4b:80:80:03
Internet Protocol, Src Addr: 192.168.174.244 (192.168.174.244), Dst 
Addr: 192.168.174.242 (192.168.174.242)
Transmission Control Protocol, Src Port: 57074 (57074), Dst Port: 
microsoft-ds (445), Seq: 1, Ack: 1, Len: 0

No. TimeSourceDestination   Protocol 
Info
  4 0.015363192.168.174.244   192.168.174.242   SMB 
Negotiate Protocol Request

Frame 4 (249 bytes on wire, 249 bytes captured)
Ethernet II, Src: 00:09:6b:53:12:f1, Dst: 00:04:4b:80:80:03
Internet Protocol, Src Addr: 192.168.174.244 (192.168.174.244), Dst 
Addr: 192.168.174.242 (192.168.174.242)
Transmission Control Protocol, Src Port: 57074 (57074), Dst Port: 
microsoft-ds (445), Seq: 1, Ack: 1, Len: 183
NetBIOS Session Service
SMB (Server Message Block Protocol)
Frame 5 (155 bytes on wire, 155 bytes captured)
Ethernet II, Src: 00:04:4b:80:80:03, Dst: 00:09:6b:53:12:f1
Internet Protocol, Src Addr: 192.168.174.242 (192.168.174.242), Dst 
Addr: 192.168.174.244 (192.168.174.244)
Transmission Control Protocol, Src Port: microsoft-ds (445), Dst Port: 
57074 (57074), Seq: 1, Ack: 184, Len: 89
NetBIOS Session Service
SMB (Server Message Block Protocol)

No. TimeSourceDestination   Protocol 
Info
  6 0.016445192.168.174.244   192.168.174.242   TCP 
57074  microsoft-ds [ACK] Seq=184 Ack=90 Win=5840 Len=0 TSV=73543481 
TSER=5887

Frame 6 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: 00:09:6b:53:12:f1, Dst: 00:04:4b:80:80:03
Internet Protocol, Src Addr: 192.168.174.244 (192.168.174.244), Dst 
Addr: 192.168.174.242 (192.168.174.242)
Transmission Control Protocol, Src Port: 57074 (57074), Dst Port: 
microsoft-ds (445), Seq: 184,
Ack: 90, Len: 0


[Samba] please help

2005-01-28 Thread sasgekar




 Sir

 Sarang here (fresher for LDAP and Samba)
 I am working in project of Samba frontend and LDAP backend (i.e
smbldap tools.)
 I have added users by command smbldap-useradd command

 I want to allocate quota and ACL to them by smbcquotas smbcacls command.
 Since I don't know how to use this command. but I am unable to understand with
 the help of manual pages given as below

 http://www.hmug.org/man/1/smbcquotas.html
 http://www.hmug.org/man/1/smbcacls.html

 Since Iam not understanding the exact syntax of smbquotas and smbcacls.
 I need some documentation or examples of smbcquotas and smbcacls ,
which will be
 very much helpful to me.
regards
sarang






-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Please help me decipher a two-packet NetBT conversation...

2005-01-20 Thread David Black
My clients are Windows XP SP1 and SP2, members of a Samba-PDC NT domain 
(tested 3.0.7 and 3.0.10, same result).Attached is ethereal output 
of a two packet client-server exchange that takes place when an offline 
files sync is done.   SP1 quickly does this exchange twice - first 
broadcast, then unicast (as attached) and goes on its way.  SP2 tries, 
pauses many seconds, tries again, finally giving up and completing the sync.

Basically the client is attempting a SAM logon request with an empty 
user name.  Samba responds with user unknown.   Even at high log levels, 
I get nothing in the Samba logs.   I found one other reference to this 
sort of issue, on an earlier Samba list post in 2002, then a follow-up 
in 8/04, both unanswered.

I'd be happy to look at the Samba code to better understand how/why this 
is happening, but don't know where to start.  Advice is much appreciated.

Regards,
David Black
No. TimeSourceDestination   Protocol 
Info
   4191 14:45:44.739000 dblack-pc.magnalynx.com ha1.magnalynx.com NETLOGON 
SAM LOGON request from client

Frame 4191 (281 bytes on wire, 281 bytes captured)
Arrival Time: Jan 19, 2005 14:45:44.73900
Time delta from previous packet: 0.03000 seconds
Time since reference or first frame: 1238.005492000 seconds
Frame Number: 4191
Packet Length: 281 bytes
Capture Length: 281 bytes
Ethernet II, Src: 00:0d:60:af:59:fc, Dst: 00:0d:60:0f:01:d6
Destination: 00:0d:60:0f:01:d6 (ha1.magnalynx.com)
Source: 00:0d:60:af:59:fc (dblack-pc.magnalynx.com)
Type: IP (0x0800)
Internet Protocol, Src Addr: dblack-pc.magnalynx.com (192.168.10.151), Dst 
Addr: ha1.magnalynx.com (192.168.10.230)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
 00.. = Differentiated Services Codepoint: Default (0x00)
 ..0. = ECN-Capable Transport (ECT): 0
 ...0 = ECN-CE: 0
Total Length: 267
Identification: 0x31b6 (12726)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0x715e (correct)
Source: dblack-pc.magnalynx.com (192.168.10.151)
Destination: ha1.magnalynx.com (192.168.10.230)
User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138)
Source port: netbios-dgm (138)
Destination port: netbios-dgm (138)
Length: 247
Checksum: 0x7e57 (correct)
NetBIOS Datagram Service
Message Type: Direct_group datagram (17)
More fragments follow: No
This is first fragment: Yes
Node Type: P node (1)
Datagram ID: 0x8022
Source IP: dblack-pc.magnalynx.com (192.168.10.151)
Source Port: 138
Datagram length: 225 bytes
Packet offset: 0 bytes
Source name: DBLACK-PC00 (Workstation/Redirector)
Destination name: MAGNALYNX1c (Domain Controllers)
SMB (Server Message Block Protocol)
SMB Header
Server Component: SMB
SMB Command: Trans (0x25)
Error Class: Success (0x00)
Reserved: 00
Error Code: No Error
Flags: 0x00
0...  = Request/Response: Message is a request to the server
.0..  = Notify: Notify client only on open
..0.  = Oplocks: OpLock not requested/granted
...0  = Canonicalized Pathnames: Pathnames are not canonicalized
 0... = Case Sensitivity: Path names are case sensitive
 ..0. = Receive Buffer Posted: Receive buffer has not been 
posted
 ...0 = Lock and Read: LockRead, WriteUnlock are not supported
Flags2: 0x
0...    = Unicode Strings: Strings are ASCII
.0..    = Error Code Type: Error codes are DOS error 
codes
..0.    = Execute-only Reads: Don't permit reads if 
execute-only
...0    = Dfs: Don't resolve pathnames with Dfs
 0...   = Extended Security Negotiation: Extended 
security negotiation is not supported
  .0..  = Long Names Used: Path names in request are 
not long file names
   .0.. = Security Signatures: Security signatures are 
not supported
   ..0. = Extended Attributes: Extended attributes are 
not supported
   ...0 = Long Names Allowed: Long file names are not 
allowed in the response
Process ID High: 0
Signature: 
Reserved: 
Tree ID: 0
Process ID: 0
User ID: 0
Multiplex ID: 0
Trans Request (0x25)
Word Count (WCT): 17
Total Parameter Count: 0
Total Data Count: 65
Max Parameter Count: 0
Max Data Count: 0
Max Setup Count: 0
Reserved: 00

Re: [Samba] Please help me decipher a two-packet NetBT conversation...

2005-01-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
David Black wrote:
| My clients are Windows XP SP1 and SP2, members of a Samba-PDC NT domain
| (tested 3.0.7 and 3.0.10, same result).Attached is ethereal output
| of a two packet client-server exchange that takes place when an offline
| files sync is done.   SP1 quickly does this exchange twice - first
| broadcast, then unicast (as attached) and goes on its way.  SP2 tries,
| pauses many seconds, tries again, finally giving up and completing the
| sync.
|
| Basically the client is attempting a SAM logon request with an empty
| user name.  Samba responds with user unknown.   Even at high log levels,
| I get nothing in the Samba logs.   I found one other reference to this
| sort of issue, on an earlier Samba list post in 2002, then a follow-up
| in 8/04, both unanswered.
|
This is the correct response based on my memory of the
network traffic.  You could be running down the wrong trail
here.  I haven't dug in to the offline caching support
so I can't comment on that too much.  But the response code
in your trace was right as far as I know.

cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFB7/HEIR7qMdg1EfYRAlB2AKDkkQ1mfVXEbXwhk4JPrCfwi6qKpgCeILdr
kKnH2vT7i3VNhrJwQ5s9tZc=
=Jz3Z
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Please help me decipher a two-packet NetBT conversation...

2005-01-20 Thread David Black
Thanks for your response, Jerry.
I too would expect that response from Samba, given the seemingly odd 
request.  What I'm up against is the client - especially XP SP2, doesn't 
seem to like that response, retrying after a considerable pause.  

Absent any other trails to follow, I'd like to try making Samba give 
some other responses and see how the client responds.

Dave
Gerald (Jerry) Carter wrote:
This is the correct response based on my memory of the
network traffic.  You could be running down the wrong trail
here.  I haven't dug in to the offline caching support
so I can't comment on that too much.  But the response code
in your trace was right as far as I know.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Please help me decipher a two-packet NetBT conversation...

2005-01-20 Thread Andrew Bartlett
On Thu, 2005-01-20 at 10:33 -0600, David Black wrote:
 My clients are Windows XP SP1 and SP2, members of a Samba-PDC NT domain 
 (tested 3.0.7 and 3.0.10, same result).Attached is ethereal output 
 of a two packet client-server exchange that takes place when an offline 
 files sync is done.   SP1 quickly does this exchange twice - first 
 broadcast, then unicast (as attached) and goes on its way.  SP2 tries, 
 pauses many seconds, tries again, finally giving up and completing the sync.
 
 Basically the client is attempting a SAM logon request with an empty 
 user name.  Samba responds with user unknown.   

Before you spend too much time barking up the wrong tree, my
understating is that the username in this UDP SamLogon request is not
honoured by any modern operating system, and user-unknown is the correct
reply.  Giving out this information would confirm/deny a given username
without authentication, which is considered a bad thing.  Samba has
always left it up to the logon process to actually decide this.

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Please help: Re: Samba 2.0.6-3 (productive env.) slow down dramticaly

2004-09-16 Thread Heiko Boeringer
Hello together,
please help!!!
I made some more traces and test today.
The logon process from an Windows XP machines needs aprox. 7 Minutes. 
Then the machine is able to browse through the domain, can open shares e.g.

Wenn I copy a file from a share there happends nothing for round about 1 
minute - then windows means that the File could not be copied because 
the sourcefile or directory could not be read.

In the meantime Strace shows what happens within the smb-process:
After the Strace you can find a tcpdump - but for both, I´m not 
technical enough to read in detail.

I would be very appreciated to get help from this community-
Regards,
Heiko

lx2-rvmo-02:~# cat /tmp/strace.log
2419  select(25, [20 23 24], NULL, NULL, {48, 83}) = 1 (in [23], 
left {35, 84})
2419  read(23, 0x40510008, 4)   = -1 ECONNRESET (Connection 
reset by peer)
2419  time(NULL)= 1095364795
2419  time([1095364795])= 1095364795
2419  getpid()  = 2419
2419  rt_sigaction(SIGPIPE, {0x40262be0, [], 0x400}, {SIG_DFL}, 8) = 0
2419  send(4, 27Sep 16 21:59:55 smbd[2419]: ..., 95, 0) = 95
2419  rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
2419  geteuid32()   = 0
2419  write(27, [2004/09/16 21:59:55, 0] lib/uti..., 63) = 63
2419  time([1095364795])= 1095364795
2419  getpid()  = 2419
2419  rt_sigaction(SIGPIPE, {0x40262be0, [], 0x400}, {SIG_DFL}, 8) = 0
2419  send(4, 27Sep 16 21:59:55 smbd[2419]: ..., 105, 0) = 105
2419  rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
2419  geteuid32()   = 0
2419  write(27,   read_socket_data: recv failure..., 73) = 73
2419  time(NULL)= 1095364795
2419  geteuid32()   = 0
2419  write(27, [2004/09/16 21:59:55, 3] smbd/pr..., 65) = 65
2419  geteuid32()   = 0
2419  write(27,   timeout_processing: receive_sm..., 75) = 75
2419  munmap(0x40505000, 696)   = 0
2419  close(14) = 0
2419  time(NULL)= 1095364795
2419  geteuid32()   = 0
2419  write(27, [2004/09/16 21:59:55, 3] smbd/se..., 57) = 57
2419  geteuid32()   = 0
2419  write(27,   setting sec ctx (0, 0) - sec_c..., 49) = 49
2419  geteuid32()   = 0
2419  getegid32()   = 5021
2419  setresgid32(0x, 0, 0x) = 0
2419  getegid32()   = 0
2419  getegid32()   = 0
2419  setgroups32(0, 0) = 0
2419  setresgid32(0x, 0, 0x) = 0
2419  getegid32()   = 0
2419  setresuid32(0, 0, 0x) = 0
2419  geteuid32()   = 0
2419  time(NULL)= 1095364795
2419  time([1095364795])= 1095364795
2419  getpid()  = 2419
2419  rt_sigaction(SIGPIPE, {0x40262be0, [], 0x400}, {SIG_DFL}, 8) = 0
2419  send(4, 29Sep 16 21:59:55 smbd[2419]: ..., 88, 0) = 88
2419  rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
2419  geteuid32()   = 0
2419  write(27, [2004/09/16 21:59:55, 2] smbd/se..., 56) = 56
2419  time([1095364795])= 1095364795
2419  getpid()  = 2419
2419  rt_sigaction(SIGPIPE, {0x40262be0, [], 0x400}, {SIG_DFL}, 8) = 0
2419  send(4, 29Sep 16 21:59:55 smbd[2419]: ..., 54, 0) = 54
2419  rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
2419  geteuid32()   = 0
2419  write(27,   Closing connections\n, 22) = 22
2419  time(NULL)= 1095364795
2419  geteuid32()   = 0
2419  write(27, [2004/09/16 21:59:55, 3] smbd/se..., 57) = 57
2419  geteuid32()   = 0
2419  write(27,   setting sec ctx (0, 0) - sec_c..., 49) = 49
2419  geteuid32()   = 0
2419  getegid32()   = 0
2419  setgroups32(0, 0) = 0
2419  setresgid32(0x, 0, 0x) = 0
2419  getegid32()   = 0
2419  setresuid32(0, 0, 0x) = 0
2419  geteuid32()   = 0
2419  time(NULL)= 1095364795
2419  time([1095364795])= 1095364795
2419  getpid()  = 2419
2419  rt_sigaction(SIGPIPE, {0x40262be0, [], 0x400}, {SIG_DFL}, 8) = 0
2419  send(4, 28Sep 16 21:59:55 smbd[2419]: ..., 88, 0) = 88
2419  rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
2419  geteuid32()   = 0
2419  write(27, [2004/09/16 21:59:55, 1] smbd/se..., 56) = 56
2419  time([1095364795])= 1095364795
2419  getpid()  = 2419
2419  rt_sigaction(SIGPIPE, {0x40262be0, [], 0x400}, {SIG_DFL}, 8) = 0
2419  send(4, 28Sep 16 21:59:55 smbd[2419]: ..., 96, 0) = 96
2419  rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
2419  geteuid32()   = 0
2419  write(27,   

[Samba] Please help with winbind setup

2004-09-07 Thread Nicholas Porter
Hi there Josh

To be honest im really a in a bit over my head here but hopefully you can
help me.Ok I currently have a squid server in place and now want the
authentication setup using NT controllers.I have read a lot of info on the
winbind process interacting with PAM but im too much of a begginer to figure
out how to install and configure it.Please could you guide me to a site with
setup and install process or even if you could guide me through it .

Thanks a lot for your time and will hopefully here from you soon.

 
Regards
Nicholas Porter
IDT Global Ltd
IT Systems Engineer
95 Gresham Street
London
EC2V 7NA
Tel: +44 (0) 207 549 6000
Mo: +44 (0) 778 8148 405
Fax: +44 (0) 207 549 6138
 

PRIVILEGED AND CONFIDENTIAL:
The information contained in this e-mail and any attachments, is
confidential and may be legally privileged. It comes without any warranties
or intention to create a contractual relationship unless specifically
indicated otherwise and signed by an authorized signatory of an IDT entity
located in Europe (IDT).  Any part of this e-mail which is purely personal
in nature is not authorized by IDT and any opinions or advice expressed
herein are not necessarily endorsed by IDT. The information herein is
intended only for use by the intended recipient(s) named above. If you have
received this transmission in error, please notify the sender immediately
and permanently delete the e-mail and any copies, printouts or attachments
thereof. Any dissemination, alteration, distribution or copy of this
material is strictly prohibited. All liability for viruses and errors is
hereby excluded and no responsibility is accepted by IDT for any loss or
damage arising in any way from its use.
 
 
 
 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] please help

2004-08-09 Thread Paul Gienger
Are you going through any consumer grade ISPs here? Most notabe would be 
your local cable company.  Most of them block the 'traditional' smb 
ports (137 and 139) at their routers.  If you're behind a router you 
also need to do some hacking, but only if the ISP cause above is not 
applicable to you.

Barb Collamore wrote:
Hello,

I have recently signed up for a virtual private server which offers Samba
Share.  I am trying to connect to my samba share folder through my Windows
XP Professional PC by mapping a network drive.
I am unable to do this and get the error message, The network path name of
my server and folder could not be found.
I was told by our hosting provider that they do not support configuring my
smb.conf file, but they feel that something is wrong, as they (the hosting
providers) are able to connect and I am not.

I have attached my smb.conf file and have no idea as to what might be wrong
or what to change as I am not familiar with samba. 

   

I would appreciate any direction you could provide.

Thank you.

Barb Collamore


 

--
Paul Gienger Office: 701-281-1884
Applied Engineering Inc. 
Information Systems Consultant   Fax:701-281-1322
URL: www.ae-solutions.commailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] please help

2004-08-07 Thread Barb Collamore
Hello,

 

I have recently signed up for a virtual private server which offers Samba
Share.  I am trying to connect to my samba share folder through my Windows
XP Professional PC by mapping a network drive.

I am unable to do this and get the error message, The network path name of
my server and folder could not be found.

I was told by our hosting provider that they do not support configuring my
smb.conf file, but they feel that something is wrong, as they (the hosting
providers) are able to connect and I am not.

 

I have attached my smb.conf file and have no idea as to what might be wrong
or what to change as I am not familiar with samba. 



I would appreciate any direction you could provide.

 

Thank you.

 

Barb Collamore

 

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] please help

2004-08-07 Thread Paul Farrow
I presume that as they offer samba they have the correct ports open to
let smb through???

Paul
http://www.farrowhosting.com


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Barb Collamore
Sent: 07 August 2004 15:02
To: [EMAIL PROTECTED]
Subject: [Samba] please help


Hello,

 

I have recently signed up for a virtual private server which offers
Samba Share.  I am trying to connect to my samba share folder through my
Windows XP Professional PC by mapping a network drive.

I am unable to do this and get the error message, The network path
name of my server and folder could not be found.

I was told by our hosting provider that they do not support configuring
my smb.conf file, but they feel that something is wrong, as they (the
hosting
providers) are able to connect and I am not.

 

I have attached my smb.conf file and have no idea as to what might be
wrong or what to change as I am not familiar with samba. 



I would appreciate any direction you could provide.

 

Thank you.

 

Barb Collamore

 

 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] please help: smbd 100% cpu usage

2004-06-20 Thread lists
next try - as i was not able to post the level 10 log as a mail (180kb) 
i've put it here: http://www.mhcsoftware.de/smbprob.txt

the machine names are:
samba server: linux
windows ME:   norbert
perhaps some can suggest a solution ...
TIA
matthias

--On Freitag, Juni 18, 2004 08:01:45 -0400 Jason C. Waters 
[EMAIL PROTECTED] wrote:

| Set your log level to 10 and then send us the log for smbd and the
| machine name.  Maybe that will tell us something.
|
| Jason
|
| [EMAIL PROTECTED] wrote:
|
|  hi,
| 
|  i've a problem with samba 3.0.2. there is one windows ME client which
|  used to work with out any problems. now, as soon as the user connects
|  (sharelevel: user, or share - i've tried both) on smbd is forked which
|  causes 90 to 100% cpu load. when i stop samba (smbd/nmbd) this proces
|  does not die i can only get rid of it whit a kill -9. with this no
|  data can be transfered from or to the win ME client.
| 
|  this is what a level 2 log stats:
| 
|  [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(105)
|   netbios connect: name1=LINUX   name2=NORBERT
|  [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(112)
|   netbios connect: local=linux remote=norbert, name type = 0
|  [2004/06/16 16:28:44, 2] smbd/sesssetup.c:setup_new_vc_session(591)
|   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
|  all old resources.
|  [2004/06/16 16:28:44, 2] auth/auth.c:check_ntlm_password(305)
|   check_ntlm_password:  authentication for user [NORBERT] - [NORBERT]
|  - [norbert] succeeded
|  [2004/06/16 16:28:44, 1] smbd/service.c:make_connection_snum(705)
|   norbert (192.168.0.4) connect to service windows initially as user
|  norbert (uid=1000, gid=1000) (pid 10759)
| 
|  and top shows:
| 
|   PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
|  10759 norbert   25   0 10856 3652 8924 R 99.2  0.7   0:18.22 smbd
| 
| 
|  any suggestions ?
| 
|  TIA

--
Matthias Henze[EMAIL PROTECTED]
Use PGP!! http://www.mhcsoftware.de/MatthiasHenze.asc
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
MHC SoftWare GmbH  voice: +49-(0)9533-92006-0
Fichtera 17  fax: +49-(0)9533-92006-6
96274 Itzgrund/Germanye-Mail: [EMAIL PROTECTED]
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] please help: smbd 100% cpu usage

2004-06-20 Thread Jason C. Waters
That look like your nmbd.  What about the log.norbert file and the 
log.smbd.  Try tail -n 500 filename, for each that will output the last 
500 lines of the file.  You don't keep your log level at 10 do you?  If 
you have a busy server this will peg your CPU.

Jason
[EMAIL PROTECTED] wrote:
next try - as i was not able to post the level 10 log as a mail 
(180kb) i've put it here: http://www.mhcsoftware.de/smbprob.txt

the machine names are:
samba server: linux
windows ME:   norbert
perhaps some can suggest a solution ...
TIA
matthias

--On Freitag, Juni 18, 2004 08:01:45 -0400 Jason C. Waters 
[EMAIL PROTECTED] wrote:

| Set your log level to 10 and then send us the log for smbd and the
| machine name.  Maybe that will tell us something.
|
| Jason
|
| [EMAIL PROTECTED] wrote:
|
|  hi,
| 
|  i've a problem with samba 3.0.2. there is one windows ME client which
|  used to work with out any problems. now, as soon as the user connects
|  (sharelevel: user, or share - i've tried both) on smbd is forked 
which
|  causes 90 to 100% cpu load. when i stop samba (smbd/nmbd) this proces
|  does not die i can only get rid of it whit a kill -9. with this no
|  data can be transfered from or to the win ME client.
| 
|  this is what a level 2 log stats:
| 
|  [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(105)
|   netbios connect: name1=LINUX   name2=NORBERT
|  [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(112)
|   netbios connect: local=linux remote=norbert, name type = 0
|  [2004/06/16 16:28:44, 2] smbd/sesssetup.c:setup_new_vc_session(591)
|   setup_new_vc_session: New VC == 0, if NT4.x compatible we would 
close
|  all old resources.
|  [2004/06/16 16:28:44, 2] auth/auth.c:check_ntlm_password(305)
|   check_ntlm_password:  authentication for user [NORBERT] - [NORBERT]
|  - [norbert] succeeded
|  [2004/06/16 16:28:44, 1] smbd/service.c:make_connection_snum(705)
|   norbert (192.168.0.4) connect to service windows initially as user
|  norbert (uid=1000, gid=1000) (pid 10759)
| 
|  and top shows:
| 
|   PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
|  10759 norbert   25   0 10856 3652 8924 R 99.2  0.7   0:18.22 smbd
| 
| 
|  any suggestions ?
| 
|  TIA


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] please help: smbd 100% cpu usage

2004-06-20 Thread Matthias Spork
Hello,
check out, if you have a group, who has more members  then users on the 
system.

matze
Jason C. Waters schrieb:
That look like your nmbd.  What about the log.norbert file and the 
log.smbd.  Try tail -n 500 filename, for each that will output the 
last 500 lines of the file.  You don't keep your log level at 10 do 
you?  If you have a busy server this will peg your CPU.

Jason
[EMAIL PROTECTED] wrote:
next try - as i was not able to post the level 10 log as a mail 
(180kb) i've put it here: http://www.mhcsoftware.de/smbprob.txt

the machine names are:
samba server: linux
windows ME:   norbert
perhaps some can suggest a solution ...
TIA
matthias

--On Freitag, Juni 18, 2004 08:01:45 -0400 Jason C. Waters 
[EMAIL PROTECTED] wrote:

| Set your log level to 10 and then send us the log for smbd and the
| machine name.  Maybe that will tell us something.
|
| Jason
|
| [EMAIL PROTECTED] wrote:
|
|  hi,
| 
|  i've a problem with samba 3.0.2. there is one windows ME client 
which
|  used to work with out any problems. now, as soon as the user 
connects
|  (sharelevel: user, or share - i've tried both) on smbd is forked 
which
|  causes 90 to 100% cpu load. when i stop samba (smbd/nmbd) this 
proces
|  does not die i can only get rid of it whit a kill -9. with this no
|  data can be transfered from or to the win ME client.
| 
|  this is what a level 2 log stats:
| 
|  [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(105)
|   netbios connect: name1=LINUX   name2=NORBERT
|  [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(112)
|   netbios connect: local=linux remote=norbert, name type = 0
|  [2004/06/16 16:28:44, 2] smbd/sesssetup.c:setup_new_vc_session(591)
|   setup_new_vc_session: New VC == 0, if NT4.x compatible we would 
close
|  all old resources.
|  [2004/06/16 16:28:44, 2] auth/auth.c:check_ntlm_password(305)
|   check_ntlm_password:  authentication for user [NORBERT] - 
[NORBERT]
|  - [norbert] succeeded
|  [2004/06/16 16:28:44, 1] smbd/service.c:make_connection_snum(705)
|   norbert (192.168.0.4) connect to service windows initially as user
|  norbert (uid=1000, gid=1000) (pid 10759)
| 
|  and top shows:
| 
|   PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
|  10759 norbert   25   0 10856 3652 8924 R 99.2  0.7   0:18.22 smbd
| 
| 
|  any suggestions ?
| 
|  TIA



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] please help: smbd 100% cpu usage

2004-06-20 Thread lists
a unix group? a group with members where the users do not exist ?
--On Sonntag, Juni 20, 2004 18:52:24 +0200 Matthias Spork 
[EMAIL PROTECTED] wrote:

| Hello,
|
| check out, if you have a group, who has more members  then users on the
| system.
|
| matze
|
| Jason C. Waters schrieb:
|
|  That look like your nmbd.  What about the log.norbert file and the
|  log.smbd.  Try tail -n 500 filename, for each that will output the
|  last 500 lines of the file.  You don't keep your log level at 10 do
|  you?  If you have a busy server this will peg your CPU.
| 
|  Jason
| 
|  [EMAIL PROTECTED] wrote:
| 
|  next try - as i was not able to post the level 10 log as a mail
|  (180kb) i've put it here: http://www.mhcsoftware.de/smbprob.txt
| 
|  the machine names are:
| 
|  samba server: linux
|  windows ME:   norbert
| 
|  perhaps some can suggest a solution ...
| 
|  TIA
|  matthias
| 
| 
| 
| 
|  --On Freitag, Juni 18, 2004 08:01:45 -0400 Jason C. Waters
|  [EMAIL PROTECTED] wrote:
| 
|  | Set your log level to 10 and then send us the log for smbd and the
|  | machine name.  Maybe that will tell us something.
|  |
|  | Jason
|  |
|  | [EMAIL PROTECTED] wrote:
|  |
|  |  hi,
|  | 
|  |  i've a problem with samba 3.0.2. there is one windows ME client
|  which
|  |  used to work with out any problems. now, as soon as the user
|  connects
|  |  (sharelevel: user, or share - i've tried both) on smbd is forked
|  which
|  |  causes 90 to 100% cpu load. when i stop samba (smbd/nmbd) this
|  proces
|  |  does not die i can only get rid of it whit a kill -9. with this no
|  |  data can be transfered from or to the win ME client.
|  | 
|  |  this is what a level 2 log stats:
|  | 
|  |  [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(105)
|  |   netbios connect: name1=LINUX   name2=NORBERT
|  |  [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(112)
|  |   netbios connect: local=linux remote=norbert, name type = 0
|  |  [2004/06/16 16:28:44, 2] smbd/sesssetup.c:setup_new_vc_session(591)
|  |   setup_new_vc_session: New VC == 0, if NT4.x compatible we would
|  close
|  |  all old resources.
|  |  [2004/06/16 16:28:44, 2] auth/auth.c:check_ntlm_password(305)
|  |   check_ntlm_password:  authentication for user [NORBERT] -
|  [NORBERT]
|  |  - [norbert] succeeded
|  |  [2004/06/16 16:28:44, 1] smbd/service.c:make_connection_snum(705)
|  |   norbert (192.168.0.4) connect to service windows initially as user
|  |  norbert (uid=1000, gid=1000) (pid 10759)
|  | 
|  |  and top shows:
|  | 
|  |   PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
|  |  10759 norbert   25   0 10856 3652 8924 R 99.2  0.7   0:18.22 smbd
|  | 
|  | 
|  |  any suggestions ?
|  | 
|  |  TIA
| 
| 
| 

--
Matthias Henze[EMAIL PROTECTED]
Use PGP!! http://www.mhcsoftware.de/MatthiasHenze.asc
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
MHC SoftWare GmbH  voice: +49-(0)9533-92006-0
Fichtera 17  fax: +49-(0)9533-92006-6
96274 Itzgrund/Germanye-Mail: [EMAIL PROTECTED]
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] please help: smbd 100% cpu usage

2004-06-20 Thread Matthias Spork
[EMAIL PROTECTED] schrieb:
a unix group? a group with members where the users do not exist ?

Jep. I had this Problem in our LDAP-Tree. Every time I added a 
domain-group to a local windows-group
Samba gets up to 99%. I heard, this Bug is solved in Samba 305.
matze

--On Sonntag, Juni 20, 2004 18:52:24 +0200 Matthias Spork 
[EMAIL PROTECTED] wrote:

| Hello,
|
| check out, if you have a group, who has more members  then users on the
| system.
|
| matze
|
| Jason C. Waters schrieb:
|
|  That look like your nmbd.  What about the log.norbert file and the
|  log.smbd.  Try tail -n 500 filename, for each that will output the
|  last 500 lines of the file.  You don't keep your log level at 10 do
|  you?  If you have a busy server this will peg your CPU.
| 
|  Jason
| 
|  [EMAIL PROTECTED] wrote:
| 
|  next try - as i was not able to post the level 10 log as a mail
|  (180kb) i've put it here: http://www.mhcsoftware.de/smbprob.txt
| 
|  the machine names are:
| 
|  samba server: linux
|  windows ME:   norbert
| 
|  perhaps some can suggest a solution ...
| 
|  TIA
|  matthias
| 
| 
| 
| 
|  --On Freitag, Juni 18, 2004 08:01:45 -0400 Jason C. Waters
|  [EMAIL PROTECTED] wrote:
| 
|  | Set your log level to 10 and then send us the log for smbd and the
|  | machine name.  Maybe that will tell us something.
|  |
|  | Jason
|  |
|  | [EMAIL PROTECTED] wrote:
|  |
|  |  hi,
|  | 
|  |  i've a problem with samba 3.0.2. there is one windows ME client
|  which
|  |  used to work with out any problems. now, as soon as the user
|  connects
|  |  (sharelevel: user, or share - i've tried both) on smbd is forked
|  which
|  |  causes 90 to 100% cpu load. when i stop samba (smbd/nmbd) this
|  proces
|  |  does not die i can only get rid of it whit a kill -9. with 
this no
|  |  data can be transfered from or to the win ME client.
|  | 
|  |  this is what a level 2 log stats:
|  | 
|  |  [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(105)
|  |   netbios connect: name1=LINUX   name2=NORBERT
|  |  [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(112)
|  |   netbios connect: local=linux remote=norbert, name type = 0
|  |  [2004/06/16 16:28:44, 2] 
smbd/sesssetup.c:setup_new_vc_session(591)
|  |   setup_new_vc_session: New VC == 0, if NT4.x compatible we would
|  close
|  |  all old resources.
|  |  [2004/06/16 16:28:44, 2] auth/auth.c:check_ntlm_password(305)
|  |   check_ntlm_password:  authentication for user [NORBERT] -
|  [NORBERT]
|  |  - [norbert] succeeded
|  |  [2004/06/16 16:28:44, 1] 
smbd/service.c:make_connection_snum(705)
|  |   norbert (192.168.0.4) connect to service windows initially 
as user
|  |  norbert (uid=1000, gid=1000) (pid 10759)
|  | 
|  |  and top shows:
|  | 
|  |   PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  
COMMAND
|  |  10759 norbert   25   0 10856 3652 8924 R 99.2  0.7   0:18.22 
smbd
|  | 
|  | 
|  |  any suggestions ?
|  | 
|  |  TIA
| 
| 
| 


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] please help: smbd 100% cpu usage

2004-06-20 Thread lists
i've checked this, as there are only 2 users on the machine and only one of 
them uses windows it was not too difficult :-) all users in /etc/group do 
exist in /etc/passwd

--On Sonntag, Juni 20, 2004 19:39:45 +0200 Matthias Spork 
[EMAIL PROTECTED] wrote:

| [EMAIL PROTECTED] schrieb:
|
|  a unix group? a group with members where the users do not exist ?
|
|
| Jep. I had this Problem in our LDAP-Tree. Every time I added a
| domain-group to a local windows-group
| Samba gets up to 99%. I heard, this Bug is solved in Samba 305.
| matze
|
|  --On Sonntag, Juni 20, 2004 18:52:24 +0200 Matthias Spork
|  [EMAIL PROTECTED] wrote:
| 
|  | Hello,
|  |
|  | check out, if you have a group, who has more members  then users on
|  | the system.
|  |
|  | matze
|  |
|  | Jason C. Waters schrieb:
|  |
|  |  That look like your nmbd.  What about the log.norbert file and the
|  |  log.smbd.  Try tail -n 500 filename, for each that will output the
|  |  last 500 lines of the file.  You don't keep your log level at 10 do
|  |  you?  If you have a busy server this will peg your CPU.
|  | 
|  |  Jason
|  | 
|  |  [EMAIL PROTECTED] wrote:
|  | 
|  |  next try - as i was not able to post the level 10 log as a mail
|  |  (180kb) i've put it here: http://www.mhcsoftware.de/smbprob.txt
|  | 
|  |  the machine names are:
|  | 
|  |  samba server: linux
|  |  windows ME:   norbert
|  | 
|  |  perhaps some can suggest a solution ...
|  | 
|  |  TIA
|  |  matthias
|  | 
|  | 
|  | 
|  | 
|  |  --On Freitag, Juni 18, 2004 08:01:45 -0400 Jason C. Waters
|  |  [EMAIL PROTECTED] wrote:
|  | 
|  |  | Set your log level to 10 and then send us the log for smbd and
|  |  | the machine name.  Maybe that will tell us something.
|  |  |
|  |  | Jason
|  |  |
|  |  | [EMAIL PROTECTED] wrote:
|  |  |
|  |  |  hi,
|  |  | 
|  |  |  i've a problem with samba 3.0.2. there is one windows ME client
|  |  which
|  |  |  used to work with out any problems. now, as soon as the user
|  |  connects
|  |  |  (sharelevel: user, or share - i've tried both) on smbd is
|  |  |  forked
|  |  which
|  |  |  causes 90 to 100% cpu load. when i stop samba (smbd/nmbd) this
|  |  proces
|  |  |  does not die i can only get rid of it whit a kill -9. with
|  this no
|  |  |  data can be transfered from or to the win ME client.
|  |  | 
|  |  |  this is what a level 2 log stats:
|  |  | 
|  |  |  [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(105)
|  |  |   netbios connect: name1=LINUX   name2=NORBERT
|  |  |  [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(112)
|  |  |   netbios connect: local=linux remote=norbert, name type = 0
|  |  |  [2004/06/16 16:28:44, 2]
|  smbd/sesssetup.c:setup_new_vc_session(591)
|  |  |   setup_new_vc_session: New VC == 0, if NT4.x compatible we
|  |  |   would
|  |  close
|  |  |  all old resources.
|  |  |  [2004/06/16 16:28:44, 2] auth/auth.c:check_ntlm_password(305)
|  |  |   check_ntlm_password:  authentication for user [NORBERT] -
|  |  [NORBERT]
|  |  |  - [norbert] succeeded
|  |  |  [2004/06/16 16:28:44, 1]
|  smbd/service.c:make_connection_snum(705)
|  |  |   norbert (192.168.0.4) connect to service windows initially
|  as user
|  |  |  norbert (uid=1000, gid=1000) (pid 10759)
|  |  | 
|  |  |  and top shows:
|  |  | 
|  |  |   PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+
|  COMMAND
|  |  |  10759 norbert   25   0 10856 3652 8924 R 99.2  0.7   0:18.22
|  smbd
|  |  | 
|  |  | 
|  |  |  any suggestions ?
|  |  | 
|  |  |  TIA
|  | 
|  | 
|  | 
| 
| 
| 
|

--
Matthias Henze[EMAIL PROTECTED]
Use PGP!! http://www.mhcsoftware.de/MatthiasHenze.asc
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
MHC SoftWare GmbH  voice: +49-(0)9533-92006-0
Fichtera 17  fax: +49-(0)9533-92006-6
96274 Itzgrund/Germanye-Mail: [EMAIL PROTECTED]
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] please help: smbd 100% cpu usage

2004-06-20 Thread lists
you are right ... as log.norber is quite large i've placed it here:
http://www.mhcsoftware.de/log.norbert.txt
log.smbd is mutch shorter:
[2004/06/20 19:44:02, 6] param/loadparm.c:lp_file_list_changed(2661)
 lp_file_list_changed()
 file /etc/samba/dhcp.conf - /etc/samba/dhcp.conf  last mod_time: Thu Jan 
1 01:00:00 1970

 file /etc/samba/smb.conf - /etc/samba/smb.conf  last mod_time: Sun Jun 
20 19:32:20 2004

[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_KEEPALIVE = 1
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_REUSEADDR = 1
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_BROADCAST = 0
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option TCP_NODELAY = 1
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option IPTOS_LOWDELAY = 16
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option IPTOS_THROUGHPUT = 16
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_SNDBUF = 8192
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_RCVBUF = 8192
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_SNDLOWAT = 1
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_RCVLOWAT = 1
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_SNDTIMEO = 0
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_RCVTIMEO = 0
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_KEEPALIVE = 1
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_REUSEADDR = 1
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_BROADCAST = 0
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option TCP_NODELAY = 1
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option IPTOS_LOWDELAY = 16
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option IPTOS_THROUGHPUT = 16
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_SNDBUF = 8192
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_RCVBUF = 8192
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_SNDLOWAT = 1
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_RCVLOWAT = 1
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_SNDTIMEO = 0
[2004/06/20 19:44:02, 5] lib/util_sock.c:print_socket_options(105)
 socket option SO_RCVTIMEO = 0
[2004/06/20 19:44:02, 5] lib/gencache.c:gencache_init(59)
 Opening cache file at /var/run/samba/gencache.tdb
[2004/06/20 19:44:02, 5] libsmb/namecache.c:namecache_enable(58)
 namecache_enable: enabling netbios namecache, timeout 660 seconds
[2004/06/20 19:44:02, 10] registry/reg_cachehook.c:reghook_cache_add(60)
 reghook_cache_add: Adding key 
[/HKLM/SYSTEM/CurrentControlSet/Control/Print]
[2004/06/20 19:44:02, 8] lib/adt_tree.c:sorted_tree_add(247)
 sorted_tree_add: Enter
[2004/06/20 19:44:02, 10] lib/adt_tree.c:sorted_tree_add(314)
 sorted_tree_add: Successfully added node 
[HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree
[2004/06/20 19:44:02, 8] lib/adt_tree.c:sorted_tree_add(316)
 sorted_tree_add: Exit
[2004/06/20 19:44:02, 5] passdb/pdb_interface.c:make_pdb_context_list(602)
 Trying to load: smbpasswd
[2004/06/20 19:44:02, 5] passdb/pdb_interface.c:smb_register_passdb(93)
 Attempting to register passdb backend ldapsam
[2004/06/20 19:44:02, 5] passdb/pdb_interface.c:smb_register_passdb(106)
 Successfully added passdb backend 'ldapsam'
[2004/06/20 19:44:02, 5] passdb/pdb_interface.c:smb_register_passdb(93)
 Attempting to register passdb backend ldapsam_compat
[2004/06/20 19:44:02, 5] passdb/pdb_interface.c:smb_register_passdb(106)
 Successfully added passdb backend 'ldapsam_compat'
[2004/06/20 19:44:02, 5] passdb/pdb_interface.c:smb_register_passdb(93)
 Attempting to register passdb backend smbpasswd
[2004/06/20 19:44:02, 5] passdb/pdb_interface.c:smb_register_passdb(106)
 Successfully added passdb backend 'smbpasswd'
[2004/06/20 19:44:02, 5] passdb/pdb_interface.c:smb_register_passdb(93)
 Attempting to register passdb backend tdbsam
[2004/06/20 19:44:02, 5] passdb/pdb_interface.c:smb_register_passdb(106)
 Successfully added passdb backend 'tdbsam'
[2004/06/20 19:44:02, 5] passdb/pdb_interface.c:smb_register_passdb(93)
 Attempting to register passdb backend guest
[2004/06/20 19:44:02, 5] passdb/pdb_interface.c:smb_register_passdb(106)
 Successfully added passdb backend 'guest'
[2004/06/20 19:44:02, 5] passdb/pdb_interface.c:make_pdb_methods_name(498)
 Attempting to find an passdb backend to match smbpasswd (smbpasswd)
[2004/06/20 19:44:02, 5] 

Re: [Samba] please help: smbd 100% cpu usage

2004-06-19 Thread lists
so here we go, atatched (gziped - i tougt that it would be no good idea to 
paste 180KB here) there is the level 10 log. the machine names are:

samba server: linux
windows ME:   norbert
perhaps some can suggest a solution ...
TIA
matthias
--On Freitag, Juni 18, 2004 08:01:45 -0400 Jason C. Waters 
[EMAIL PROTECTED] wrote:

| Set your log level to 10 and then send us the log for smbd and the
| machine name.  Maybe that will tell us something.
|
| Jason
|
| [EMAIL PROTECTED] wrote:
|
|  hi,
| 
|  i've a problem with samba 3.0.2. there is one windows ME client which
|  used to work with out any problems. now, as soon as the user connects
|  (sharelevel: user, or share - i've tried both) on smbd is forked which
|  causes 90 to 100% cpu load. when i stop samba (smbd/nmbd) this proces
|  does not die i can only get rid of it whit a kill -9. with this no
|  data can be transfered from or to the win ME client.
| 
|  this is what a level 2 log stats:
| 
|  [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(105)
|   netbios connect: name1=LINUX   name2=NORBERT
|  [2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(112)
|   netbios connect: local=linux remote=norbert, name type = 0
|  [2004/06/16 16:28:44, 2] smbd/sesssetup.c:setup_new_vc_session(591)
|   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
|  all old resources.
|  [2004/06/16 16:28:44, 2] auth/auth.c:check_ntlm_password(305)
|   check_ntlm_password:  authentication for user [NORBERT] - [NORBERT]
|  - [norbert] succeeded
|  [2004/06/16 16:28:44, 1] smbd/service.c:make_connection_snum(705)
|   norbert (192.168.0.4) connect to service windows initially as user
|  norbert (uid=1000, gid=1000) (pid 10759)
| 
|  and top shows:
| 
|   PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
|  10759 norbert   25   0 10856 3652 8924 R 99.2  0.7   0:18.22 smbd
| 
| 
|  any suggestions ?
| 
|  TIA

--
Matthias Henze[EMAIL PROTECTED]
Use PGP!! http://www.mhcsoftware.de/MatthiasHenze.asc
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
MHC SoftWare GmbH  voice: +49-(0)9533-92006-0
Fichtera 17  fax: +49-(0)9533-92006-6
96274 Itzgrund/Germanye-Mail: [EMAIL PROTECTED]
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] please help: smbd 100% cpu usage

2004-06-18 Thread Jason C. Waters
Set your log level to 10 and then send us the log for smbd and the 
machine name.  Maybe that will tell us something.

Jason
[EMAIL PROTECTED] wrote:
hi,
i've a problem with samba 3.0.2. there is one windows ME client which 
used to work with out any problems. now, as soon as the user connects 
(sharelevel: user, or share - i've tried both) on smbd is forked which 
causes 90 to 100% cpu load. when i stop samba (smbd/nmbd) this proces 
does not die i can only get rid of it whit a kill -9. with this no 
data can be transfered from or to the win ME client.

this is what a level 2 log stats:
[2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(105)
 netbios connect: name1=LINUX   name2=NORBERT
[2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(112)
 netbios connect: local=linux remote=norbert, name type = 0
[2004/06/16 16:28:44, 2] smbd/sesssetup.c:setup_new_vc_session(591)
 setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2004/06/16 16:28:44, 2] auth/auth.c:check_ntlm_password(305)
 check_ntlm_password:  authentication for user [NORBERT] - [NORBERT] 
- [norbert] succeeded
[2004/06/16 16:28:44, 1] smbd/service.c:make_connection_snum(705)
 norbert (192.168.0.4) connect to service windows initially as user 
norbert (uid=1000, gid=1000) (pid 10759)

and top shows:
 PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
10759 norbert   25   0 10856 3652 8924 R 99.2  0.7   0:18.22 smbd
any suggestions ?
TIA

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] please help: smbd 100% cpu usage

2004-06-18 Thread lists
hi,
i've a problem with samba 3.0.2. there is one windows ME client which used 
to work with out any problems. now, as soon as the user connects 
(sharelevel: user, or share - i've tried both) on smbd is forked which 
causes 90 to 100% cpu load. when i stop samba (smbd/nmbd) this proces does 
not die i can only get rid of it whit a kill -9. with this no data can be 
transfered from or to the win ME client.

this is what a level 2 log stats:
[2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(105)
 netbios connect: name1=LINUX   name2=NORBERT
[2004/06/16 16:28:44, 2] smbd/reply.c:reply_special(112)
 netbios connect: local=linux remote=norbert, name type = 0
[2004/06/16 16:28:44, 2] smbd/sesssetup.c:setup_new_vc_session(591)
 setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all 
old resources.
[2004/06/16 16:28:44, 2] auth/auth.c:check_ntlm_password(305)
 check_ntlm_password:  authentication for user [NORBERT] - [NORBERT] - 
[norbert] succeeded
[2004/06/16 16:28:44, 1] smbd/service.c:make_connection_snum(705)
 norbert (192.168.0.4) connect to service windows initially as user 
norbert (uid=1000, gid=1000) (pid 10759)

and top shows:
 PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
10759 norbert   25   0 10856 3652 8924 R 99.2  0.7   0:18.22 smbd
any suggestions ?
TIA
--
Matthias Henze[EMAIL PROTECTED]
Use PGP!! http://www.mhcsoftware.de/MatthiasHenze.asc
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
MHC SoftWare GmbH  voice: +49-(0)9533-92006-0
Fichtera 17  fax: +49-(0)9533-92006-6
96274 Itzgrund/Germanye-Mail: [EMAIL PROTECTED]
- - - - - - - - - - - - - - - - - - - - - - - - - - - -
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Please help

2004-06-15 Thread Anil Thomas
Hi,
 
I am using Redhat Linux 9 and configured it as Samba sever.When I tried to
open files on windows network an error message is coming like Cannot open
files in Samba locations, you can copy those files and try to open in the
linux machine.
 
Why is it like that? Can you offer any ways to change this?
 
Thanking you,
 
Anil.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Please help

2004-06-15 Thread mbc
I am using Redhat Linux 9 and configured it as Samba sever.When I tried to
open files on windows network an error message is coming like Cannot open
files in Samba locations, you can copy those files and try to open in the
linux machine.

Hi Anil. Can you show us your smb.conf file? Also, what does the EXACT error
message say that Windows is giving you?

Matthew
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] please help me.

2004-05-31 Thread azeem ahmad
hi
if i remove the rule for transparent redirection from my firewall script 
then it works well. what can be the connection of transparent redirection 
with samba

please help me out. i m in a grate trouble. the detailed problem is below
Regards
Azeem
From: azeem ahmad [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: [Samba] iptables and samba
Date: Thu, 27 May 2004 21:02:44 +
hi
i m using the script below
-
iptables -F
iptables -t nat -F
iptables -P INPUT DROP
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 22   -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 53   -j ACCEPT
iptables -A INPUT -i eth0 -p udp --dport 53   -j ACCEPT
iptables -A INPUT -i eth0 -p udp --dport 137  -j ACCEPT
iptables -A INPUT -i eth0 -p udp --dport 138  -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 139  -j ACCEPT
-
i have two shares on samba server Soft and linux in these shares there 
are many folders. whenever i run the above script and then i open the share 
it takes atleast 4  minutes to open the share. but it doesnt take time 
while browsing inside share.
mean there is a folder on soft share like soft/adobe/acrobat/acrobat6
when i double click on soft it takes atleast 4 minutes but after that when 
i click on adobe then acrobat then acrobat6 it takes now time it just 
browse them normally. same problem is with the other share named linux.
but if i dont run this script then all shares work fine with no delay
this problem only occures first time. mean when i browse the share next 
time it doesnt occur

Regards
Azeem
_
Add photos to your e-mail with MSN 8. Get 2 months FREE*. 
http://join.msn.com/?page=features/featuredemail

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] please help me.

2004-05-31 Thread Sascha Bieler
I just wonder why port 445 is missing there...

Greetings 

Sascha

Am Montag, 31. Mai 2004 22:45 schrieb azeem ahmad:
 hi
 if i remove the rule for transparent redirection from my firewall script
 then it works well. what can be the connection of transparent redirection
 with samba

 please help me out. i m in a grate trouble. the detailed problem is below

 Regards
 Azeem

 From: azeem ahmad [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: [Samba] iptables and samba
 Date: Thu, 27 May 2004 21:02:44 +
 
 hi
 i m using the script below
 --
 --- iptables -F
 iptables -t nat -F
 iptables -P INPUT DROP
 iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
 iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT
 iptables -A INPUT -i eth0 -p tcp --dport 22   -j ACCEPT
 iptables -A INPUT -i eth0 -p tcp --dport 53   -j ACCEPT
 iptables -A INPUT -i eth0 -p udp --dport 53   -j ACCEPT
 iptables -A INPUT -i eth0 -p udp --dport 137  -j ACCEPT
 iptables -A INPUT -i eth0 -p udp --dport 138  -j ACCEPT
 iptables -A INPUT -i eth0 -p tcp --dport 139  -j ACCEPT
 
 --
 ---
 
 i have two shares on samba server Soft and linux in these shares there
 are many folders. whenever i run the above script and then i open the
  share it takes atleast 4  minutes to open the share. but it doesnt take
  time while browsing inside share.
 mean there is a folder on soft share like soft/adobe/acrobat/acrobat6
 when i double click on soft it takes atleast 4 minutes but after that when
 i click on adobe then acrobat then acrobat6 it takes now time it just
 browse them normally. same problem is with the other share named linux.
 but if i dont run this script then all shares work fine with no delay
 this problem only occures first time. mean when i browse the share next
 time it doesnt occur
 
 Regards
 Azeem

 _
 Add photos to your e-mail with MSN 8. Get 2 months FREE*.
 http://join.msn.com/?page=features/featuredemail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] please help me.

2004-05-31 Thread azeem ahmad


From: Sascha Bieler [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: [Samba] please help me.
Date: Mon, 31 May 2004 23:02:33 +0200
I just wonder why port 445 is missing there...
Greetings
Sascha
here is the new script but the same problem is with this script too that if 
i enable transparent redirection it starts taking about 4 minutes and if i 
remove the rule for port 80 transparent redirection then it starts working
here is the script
--
echo 1  /proc/sys/net/ipv4/ip_forward

iptables -F
iptables -t nat -F
modprobe ip_nat_ftp
iptables -P INPUT DROP
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 22   -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 53   -j ACCEPT
iptables -A INPUT -i eth0 -p udp --dport 53   -j ACCEPT
iptables -A INPUT -i eth0 -p udp --dport 137  -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 137  -j ACCEPT
iptables -A INPUT -i eth0 -p udp --dport 138  -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 138  -j ACCEPT
iptables -A INPUT -i eth0 -p udp --dport 139  -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 139  -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 445 -j ACCEPT
iptables -A INPUT -i eth0 -p udp --dport 445 -j ACCEPT
#iptables -A INPUT -j LOG
#iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080
#iptables -t nat -A PREROUTING -p udp --dport 80 -j REDIRECT --to-port 8080
iptables -P FORWARD DROP
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 21-j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 443   -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 5000  -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 5001  -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 5005  -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 5050  -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 6660:6670 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 7000  -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 28805 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 51215 -j ACCEPT
iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
--
Regards
Azeem
_
STOP MORE SPAM with the new MSN 8 and get 2 months FREE* 
http://join.msn.com/?page=features/junkmail

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] please help me.

2004-05-31 Thread Radio Gong 2000 GmbH Co. KG [Technik]
Wow, you are using your samba-server as internet-gateway and firewall??? 
Uffhh...

Ok, I don't have this configuration, but in my firewall-script I have

FIRST: transparent redirecting and
SECOND: masquarading

The DROP-Rule you should put in last.

I configured my firewall with the excellent tool fwbuilder, try it and throw 
away your probs...

http://www.fwbuilder.org/


Regards

Sascha

Am Montag, 31. Mai 2004 23:21 schrieb azeem ahmad:
 From: Sascha Bieler [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Re: [Samba] please help me.
 Date: Mon, 31 May 2004 23:02:33 +0200
 
 I just wonder why port 445 is missing there...
 
 Greetings
 
 Sascha

 here is the new script but the same problem is with this script too that if
 i enable transparent redirection it starts taking about 4 minutes and if i
 remove the rule for port 80 transparent redirection then it starts working
 here is the script
 ---
--- echo 1 
 /proc/sys/net/ipv4/ip_forward

 iptables -F
 iptables -t nat -F

 modprobe ip_nat_ftp

 iptables -P INPUT DROP
 iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

 iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT
 iptables -A INPUT -i eth0 -p tcp --dport 22   -j ACCEPT
 iptables -A INPUT -i eth0 -p tcp --dport 53   -j ACCEPT
 iptables -A INPUT -i eth0 -p udp --dport 53   -j ACCEPT
 iptables -A INPUT -i eth0 -p udp --dport 137  -j ACCEPT
 iptables -A INPUT -i eth0 -p tcp --dport 137  -j ACCEPT
 iptables -A INPUT -i eth0 -p udp --dport 138  -j ACCEPT
 iptables -A INPUT -i eth0 -p tcp --dport 138  -j ACCEPT
 iptables -A INPUT -i eth0 -p udp --dport 139  -j ACCEPT
 iptables -A INPUT -i eth0 -p tcp --dport 139  -j ACCEPT
 iptables -A INPUT -i eth0 -p tcp --dport 445 -j ACCEPT
 iptables -A INPUT -i eth0 -p udp --dport 445 -j ACCEPT
 #iptables -A INPUT -j LOG

 #iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080
 #iptables -t nat -A PREROUTING -p udp --dport 80 -j REDIRECT --to-port 8080

 iptables -P FORWARD DROP
 iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT

 iptables -A FORWARD -i eth0 -p tcp --dport 21-j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 443   -j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 5000  -j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 5001  -j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 5005  -j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 5050  -j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 6660:6670 -j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 7000  -j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 28805 -j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 51215 -j ACCEPT

 iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
 ---
---

 Regards
 Azeem

 _
 STOP MORE SPAM with the new MSN 8 and get 2 months FREE*
 http://join.msn.com/?page=features/junkmail

-- 
___
Radio Gong 2000 GmbH  Co. KG
Sascha Bieler
Technischer Leiter
Franz-Joseph-Strasse 14
80801 Mnchen
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] please help me.

2004-05-31 Thread azeem ahmad
infact i dont have any problem with redirection or masquerading instead i 
have problem with redirection and samba.

Regards
Azeem
From: Radio Gong 2000 GmbH  Co. KG [Technik] 
[EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: [Samba] please help me.
Date: Mon, 31 May 2004 23:48:12 +0200

Wow, you are using your samba-server as internet-gateway and firewall???
Uffhh...
Ok, I don't have this configuration, but in my firewall-script I have
FIRST: transparent redirecting and
SECOND: masquarading
The DROP-Rule you should put in last.
I configured my firewall with the excellent tool fwbuilder, try it and 
throw
away your probs...

http://www.fwbuilder.org/
Regards
Sascha
Am Montag, 31. Mai 2004 23:21 schrieb azeem ahmad:
 From: Sascha Bieler [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Re: [Samba] please help me.
 Date: Mon, 31 May 2004 23:02:33 +0200
 
 I just wonder why port 445 is missing there...
 
 Greetings
 
 Sascha

 here is the new script but the same problem is with this script too that 
if
 i enable transparent redirection it starts taking about 4 minutes and if 
i
 remove the rule for port 80 transparent redirection then it starts 
working
 here is the script
 
---
--- echo 1 
 /proc/sys/net/ipv4/ip_forward

 iptables -F
 iptables -t nat -F

 modprobe ip_nat_ftp

 iptables -P INPUT DROP
 iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

 iptables -A INPUT -i eth0 -p tcp --dport 8080 -j ACCEPT
 iptables -A INPUT -i eth0 -p tcp --dport 22   -j ACCEPT
 iptables -A INPUT -i eth0 -p tcp --dport 53   -j ACCEPT
 iptables -A INPUT -i eth0 -p udp --dport 53   -j ACCEPT
 iptables -A INPUT -i eth0 -p udp --dport 137  -j ACCEPT
 iptables -A INPUT -i eth0 -p tcp --dport 137  -j ACCEPT
 iptables -A INPUT -i eth0 -p udp --dport 138  -j ACCEPT
 iptables -A INPUT -i eth0 -p tcp --dport 138  -j ACCEPT
 iptables -A INPUT -i eth0 -p udp --dport 139  -j ACCEPT
 iptables -A INPUT -i eth0 -p tcp --dport 139  -j ACCEPT
 iptables -A INPUT -i eth0 -p tcp --dport 445 -j ACCEPT
 iptables -A INPUT -i eth0 -p udp --dport 445 -j ACCEPT
 #iptables -A INPUT -j LOG

 #iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 
8080
 #iptables -t nat -A PREROUTING -p udp --dport 80 -j REDIRECT --to-port 
8080

 iptables -P FORWARD DROP
 iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT

 iptables -A FORWARD -i eth0 -p tcp --dport 21-j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 443   -j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 5000  -j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 5001  -j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 5005  -j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 5050  -j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 6660:6670 -j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 7000  -j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 28805 -j ACCEPT
 iptables -A FORWARD -i eth0 -p tcp --dport 51215 -j ACCEPT

 iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
 
---
---

 Regards
 Azeem

 _
 STOP MORE SPAM with the new MSN 8 and get 2 months FREE*
 http://join.msn.com/?page=features/junkmail

--
___
Radio Gong 2000 GmbH  Co. KG
Sascha Bieler
Technischer Leiter
Franz-Joseph-Strasse 14
80801 München
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
_
MSN 8 with e-mail virus protection service: 2 months FREE* 
http://join.msn.com/?page=features/virus

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] please help me.

2004-05-31 Thread Radio Gong 2000 GmbH Co. KG [Technik]
But port 80 got nothing to do with samba and as u say, it works fine when u 
turn it off!

I made a script for u maybe u try it otherwise I have no more ideas. 

I added all rfc nets, because I don't know ur ip-range...
Maybe u have to change the path for iptables and so on

Regards and good luck


#!/bin/sh 
#
#  This is automatically generated file. 
#  Firewall Builder  fwb_ipt v1.1.2-1 
# Tue Jun  1 00:18:52 2004 CEST 
#
#
#  
#
#
#

log() {
  test -x $LOGGER  $LOGGER -p info $1
}

va_num=1
add_addr() {
  addr=$1
  nm=$2
  dev=$3

  type=
  aadd=

  L=`$IP -4 link ls $dev | grep $dev:`
  if test -n $L; then
OIFS=$IFS
IFS= /:,
set $L
type=$4
IFS=$OIFS

L=`$IP -4 addr ls $dev to $addr | grep  inet `
if test -n $L; then
  OIFS=$IFS
  IFS= /
  set $L
  aadd=$2
  IFS=$OIFS
fi
  fi
  if test -z $aadd; then
if test $type = POINTOPOINT; then
  $IP -4 addr add $addr dev $dev scope global label $dev:FWB${va_num}
  va_num=`expr $va_num + 1`
fi
if test $type = BROADCAST; then
  $IP -4 addr add $addr/$nm dev $dev brd + scope global label 
$dev:FWB${va_num}
  va_num=`expr $va_num + 1`
fi
  fi
}
getaddr() {
  dev=$1
  name=$2
  L=`$IP -4 addr show dev $dev | grep inet`
  test -z $L  { 
eval $name=''
return
  }
  OIFS=$IFS
  IFS= /
  set $L
  eval $name=$2
  IFS=$OIFS
}


getinterfaces() {
  NAME=$1
  $IP link show | grep -E $NAME[^ ]*: | while read L; do
OIFS=$IFS
IFS= :
set $L
IFS=$OIFS
echo $2
  done
}


LSMOD=/sbin/lsmod
MODPROBE=/sbin/modprobe
IPTABLES=/usr/sbin/iptables
IP=/sbin/ip
LOGGER=/bin/logger



INTERFACES=eth0 ppp0 lo 
for i in $INTERFACES ; do
  $IP link show $i  /dev/null 21 || {
echo Interface $i does not exist
exit 1
  }
done




add_addr 127.0.0.1 8 lo
$IP link set lo up

getaddr eth0  interface_eth0
getaddr ppp0  interface_ppp0


$IPTABLES -P OUTPUT  DROP
$IPTABLES -P INPUT   DROP
$IPTABLES -P FORWARD DROP



cat /proc/net/ip_tables_names | while read table; do
  $IPTABLES -t $table -L -n | while read c chain rest; do
  if test X$c = XChain ; then
$IPTABLES -t $table -F $chain
  fi
  done
  $IPTABLES -t $table -X
done



MODULE_DIR=/lib/modules/`uname -r`/kernel/net/ipv4/netfilter/ 
MODULES=`(cd $MODULE_DIR; ls *_conntrack_*  *_nat_* | sed 's/\.o.*$//; 
s/\.ko$//')`
for module in $(echo $MODULES); do 
  if $LSMOD | grep ${module} /dev/null; then continue; fi
  $MODPROBE ${module} ||  exit 1 
done



log Activating firewall for samba-server

#
#  Rule 0(NAT)
# 
# redirect to proxy
$IPTABLES -t nat -A PREROUTING  -p tcp  -s 10.0.0.0/8  --destination-port 80 
-j REDIRECT --to-ports 8080
$IPTABLES -t nat -A PREROUTING  -p tcp  -s 192.168.0.0/16  --destination-port 
80 -j REDIRECT --to-ports 8080
$IPTABLES -t nat -A PREROUTING  -p tcp  -s 172.16.0.0/12  --destination-port 
80 -j REDIRECT --to-ports 8080
#
#  Rule 1(NAT)
# 
# 
$IPTABLES -t nat -A POSTROUTING -o ppp0  -s 10.0.0.0/8 -j MASQUERADE  
$IPTABLES -t nat -A POSTROUTING -o ppp0  -s 192.168.0.0/16 -j MASQUERADE  
$IPTABLES -t nat -A POSTROUTING -o ppp0  -s 172.16.0.0/12 -j MASQUERADE  
#
#


$IPTABLES -A INPUT   -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A OUTPUT  -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT

# 
# Rule 0(ppp0)
# 
# anti-spoofing Regel
# 
$IPTABLES -N ppp0_In_RULE_0
test -n $interface_eth0  $IPTABLES -A INPUT  -i ppp0  -s $interface_eth0  
-j ppp0_In_RULE_0 
test -n $interface_ppp0  $IPTABLES -A INPUT  -i ppp0  -s $interface_ppp0  
-j ppp0_In_RULE_0 
$IPTABLES -A INPUT  -i ppp0  -s 10.0.0.0/8  -j ppp0_In_RULE_0 
$IPTABLES -A INPUT  -i ppp0  -s 192.168.0.0/16  -j ppp0_In_RULE_0 
$IPTABLES -A INPUT  -i ppp0  -s 172.16.0.0/12  -j ppp0_In_RULE_0 
test -n $interface_eth0  $IPTABLES -A FORWARD  -i ppp0  -s $interface_eth0  
-j ppp0_In_RULE_0 
test -n $interface_ppp0  $IPTABLES -A FORWARD  -i ppp0  -s $interface_ppp0  
-j ppp0_In_RULE_0 
$IPTABLES -A FORWARD  -i ppp0  -s 10.0.0.0/8  -j ppp0_In_RULE_0 
$IPTABLES -A FORWARD  -i ppp0  -s 192.168.0.0/16  -j ppp0_In_RULE_0 
$IPTABLES -A FORWARD  -i ppp0  -s 172.16.0.0/12  -j ppp0_In_RULE_0 
$IPTABLES -A ppp0_In_RULE_0   -j LOG  --log-level info --log-prefix RULE 0 -- 
DENY  
$IPTABLES -A ppp0_In_RULE_0   -j DROP 
# 
# Rule 1(ppp0)
# 
# anti-spoofing Regel
# 
$IPTABLES -N Cid40BBAA6A.0
$IPTABLES -A OUTPUT  -o ppp0  -j Cid40BBAA6A.0 
$IPTABLES -A FORWARD  -o ppp0  -j Cid40BBAA6A.0 
test -n $interface_eth0  $IPTABLES -A Cid40BBAA6A.0  -o ppp0  -s 
$interface_eth0  -j RETURN 
test -n $interface_ppp0  $IPTABLES -A Cid40BBAA6A.0  -o ppp0  -s 
$interface_ppp0  -j RETURN 
$IPTABLES -A Cid40BBAA6A.0  -o ppp0  -s 10.0.0.0/8  -j RETURN 
$IPTABLES -A Cid40BBAA6A.0  -o ppp0  -s 192.168.0.0/16  -j RETURN 
$IPTABLES -A Cid40BBAA6A.0  -o ppp0  -s 172.16.0.0/12  -j RETURN 
$IPTABLES -N ppp0_Out_RULE_1_3
$IPTABLES -A Cid40BBAA6A.0  -o ppp0  -j ppp0_Out_RULE_1_3 
$IPTABLES -A 

Re: [Samba] please help me.

2004-05-31 Thread azeem ahmad
thanx dude.
i check it
but any other friends out there plz try to solve my problem also
Regards
Azeem
_
STOP MORE SPAM with the new MSN 8 and get 2 months FREE* 
http://join.msn.com/?page=features/junkmail

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] please help me.

2004-05-31 Thread Joe Cipale
Radio Gong 2000 GmbH  Co. KG [Technik] wrote:
 
 Wow, you are using your samba-server as internet-gateway and firewall???
 Uffhh...
 
 

Azeem,

This has disasater written ALL OVER IT!

You should never use your samba server on your firewall/internet gateway
server. This opens your system up for all kinds of mailiciousness.

Joe
-- 
#--#
#   Penguinix Consulting   #
#--#
#Software development, QA and testing. #
#Linux support and training.   #
#Don't fear the penguin! #
#--#
# Registered Linux user: #309247 http://counter.li.org #
#--#
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Please, help with mput/mask!!! Thanks!

2004-03-19 Thread Ruslan Moskalenko
Guys, I really need some help.

Samba version

samba-client-2.2.7-3.7.2
samba-2.2.7-3.7.2
samba-swat-2.2.7-3.7.2
samba-common-2.2.7-3.7.2


I'm trying to upload all *.gz files only from dir* dirs.

I do

mask *.gz
recurse
mput dir*

See the detailed output below

But mput keeps grabbing non *.gz files IGNORING the mask *.gz command.

Am I doing something stupid here?

Thanks,
Ruslan.

[root at www005 root]# cd /var/log/httpd/www/ltest
[root at www005 ltest]# ls -l d*
dir1:
total 608
-rw-r--r--1 root root81543 Mar  4 23:51
Mar-04-2004-www005.driver-access.log.gz
-rw-r--r--1 root root   528990 Mar  7 05:46
Mar-07-2004-www005.driver-access.log

dir2:
total 628
-rw-r--r--1 root root99400 Mar  6 23:58
Mar-06-2004-www005.driver-access.log.gz
-rw-r--r--1 root root   528990 Mar  7 05:46
Mar-07-2004-www005.driver-access.log
[root at sfa30035www005 ltest]# /usr/bin/smbclient '//x.x.x.x/rawlogs$' -U
x%X
...
Domain=[DDD] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
smb: \ mask *.gz
smb: \ recurse
directory recursion is now on
smb: \ mask *.gz
smb: \ mput dir*
Put directory dir2? y
Put file dir2/Mar-06-2004-www005.driver-access.log.gz? y
putting file dir2/Mar-06-2004-www005.driver-access.log.gz as
\dir2\Mar-06-2004-www005.driver-access.log.gz (2426.8 kb/s) (average
2426.8 kb/s)
Put file dir2/Mar-07-2004-www005.driver-access.log? n
Put directory dir1? y
Put file dir1/Mar-07-2004-www005.driver-access.log? n
Put file dir1/Mar-04-2004-www005.driver-access.log.gz? y
putting file dir1/Mar-04-2004-www005.driver-access.log.gz as
\dir1\Mar-04-2004-www005.driver-access.log.gz (3062.8 kb/s) (average
2677.3 kb/s)
smb: \ quit
[root at www005 ltest]#.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Please help me with configuring samba as Dfs root !

2004-03-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
M. Vancl wrote:
| Hi,
|
| I have configured samba 3.0.2 as Dfs root but it seems smbd dont translate
| symlink to remote share name.
| All targeted shares are from testing workstation directly accessible.
...
| pokus - msdfs:prog01t\\share
The link should actually look like (on backslash).

	pokus - msdfs:prog01t\share

The docs say to use '\\' (and escaped backslash) when you invoke ln
to create the link.  You should only have only backslash in the
final link.
Hope this helps.





cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFAUGOeIR7qMdg1EfYRAlgdAJsGQ+bWjcmBVtOar2W2ssEQilQT3QCgv3Vc
ziF+vMrKg1i+9CkQ8aBZk3c=
=rPbF
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Please help me with configuring samba as Dfs root !

2004-03-10 Thread M. Vancl
Hi,

I have configured samba 3.0.2 as Dfs root but it seems smbd dont translate
symlink to remote share name.
All targeted shares are from testing workstation directly accessible.

My config is:
---
[global]
debuglevel = 10
netbios name = SAMBAII
workgroup = XAMBA
security = user
domain logons = yes
preferred master = yes
domain master = yes
local master = yes
os level = 33
encrypt passwords = yes
passdb backend = ldapsam:ldap://ldap.setuza.cz;
## ldap sam
...
## dfs
host msdfs = yes
...
## misc
follow symlinks = yes
...
## shares
writeable = no
create mask = 660
directory mask = 770
...
[dfs]
path = /var/samba/dfsroot
msdfs root = yes
follow symlinks = no
[test]
...
---

My dfs root is:
[EMAIL PROTECTED]:/# ls -ld /var/samba /var/samba/dfsroot
drwxrwx---7  Domain U 4096 Mar  4 19:07 /var/samba/
drwxr-xr-x2 root Domain U 4096 Mar  5 17:17 /var/samba/dfsroot/
[EMAIL PROTECTED]:/# ls -l /var/samba/dfsroot
total 0
lrwxrwxrwx1 root root   21 Mar  5 17:17 inoupd -
msdfs:rumba\\inoupdate
lrwxrwxrwx1 root root   16 Mar  5 17:01 lavir -
msdfs:prog23t\\lv
lrwxrwxrwx1 root root   19 Mar  4 19:20 pokus -
msdfs:prog01t\\share

In logfile I found target name only in this line:
...
[2004/03/05 19:23:23, 5] msdfs/msdfs.c:is_msdfs_link(201)
  is_msdfs_link: ./inoupd - msdfs:rumba\inoupdate
[2004/03/05 19:23:23, 5] smbd/trans2.c:get_lanman2_dir_entry(573)
  get_lanman2_dir_entry: Masquerading msdfs link ./inoupd as a directory
...
and then interesting part:
...
[2004/03/05 19:23:33, 5] smbd/statcache.c:stat_cache_add(178)
  stat_cache_add: Added entry INOUPD - inoupd
[2004/03/05 19:23:33, 5] smbd/filename.c:unix_convert(388)
  conversion finished inoupd - inoupd
[2004/03/05 19:23:33, 3] smbd/dosmode.c:unix_mode(110)
  unix_mode(inoupd) returning 0660
[2004/03/05 19:23:33, 5] smbd/files.c:file_new(122)
  allocated file structure 9316, fnum = 13412 (1 used)
[2004/03/05 19:23:33, 10] smbd/open.c:open_file_shared1(838)
  open_file_shared: fname = inoupd, share_mode = 8040, ofun = 1, mode = 660,
oplock request = 3
[2004/03/05 19:23:33, 8] lib/util.c:is_in_path(1474)
  is_in_path: inoupd
[2004/03/05 19:23:33, 8] lib/util.c:is_in_path(1478)
  is_in_path: no name list.
[2004/03/05 19:23:33, 3] lib/util.c:unix_clean_name(580)
  unix_clean_name [inoupd]
[2004/03/05 19:23:33, 3] smbd/filename.c:check_name(423)
  check_name: denied: file path name inoupd is a symlink
[2004/03/05 19:23:33, 5] smbd/filename.c:check_name(430)
  check_name on inoupd failed
[2004/03/05 19:23:33, 5] smbd/files.c:file_free(385)
  freed files structure 13412 (0 used)
[2004/03/05 19:23:33, 10] smbd/trans2.c:set_bad_path_error(1802)
  set_bad_path_error: err = 0 bad_path = 0
[2004/03/05 19:23:33, 3] smbd/error.c:error_packet(118)
  error packet at smbd/trans2.c(1811) cmd=162 (SMBntcreateX)
NT_STATUS_ACCESS_DENIED
...

Thanks for any suggestions

M. Vancl



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Please HELP!!!! Logon Script

2004-01-16 Thread Gilberto Nunes
Hi

   I make a perl script, to build on the fly login script to my users.
   In this script, there's some group that called, to mount specif shares.
   However, when logged on to the domain, with the student group, for
example,
   I received this message, for the syslog:

 [2004/01/16 16:37:13, 0] groupdb/mapping.c:init_group_mapping(139)
Jan 16 16:37:13 samba smbd[8299]:   Failed to open group mapping database
Jan 16 16:37:13 samba smbd[8299]: [2004/01/16 16:37:13, 0]
groupdb/mapping.c:get_group_from_gid(655)
Jan 16 16:37:13 samba smbd[8299]:   failed to initialize group
mappingFailed to open group mapping database
Jan 16 16:37:13 samba smbd[8299]: [2004/01/16 16:37:13, 0]
groupdb/mapping.c:get_group_from_gid(655)
Jan 16 16:37:13 samba smbd[8299]:   failed to initialize group
mappingget_alias_user_groups: gid of user gnunes doesn't exist. Check your
/etc/passwd and /etc/group files
Jan 16 16:39:46 samba sshd(pam_unix)[8405]: session opened for user root
by (uid=0)

  Note that users gnunes, is enclosed in the student group.

  What's wrong with this?

This the logon script:

#!/usr/bin/perl

$server=samba;

# Log Start
($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(time);
open LOG, /var/log/samba/netlogon.log;
print LOG $mon/$mday/$year $hour:$min:$sec - User $ARGV[0] logged into
$ARGV[1]\n;
close LOG;

# login script start

open (LOGON,/home/netlogon/.$ARGV[0].bat);

print LOGON [EMAIL PROTECTED] OFF\r\n;
print LOGON NET TIME $server /SET /YES\r\n;
print LOGON NET USE H: /HOME\r\n;


if ($ARGV[1] eq student || $ARVG[0] eq student)
{
print LOGON NET USE M: $server\\publico\\pub_student\r\n;
}


print LOGON $server\\NETLOGON\\.logon.bat\r\n;
close LOGON;

-- 
Gilberto Nunes
Suporte Rede Bonja - Bom Jesus/Ielusc
Fone: 433-0155 - ramal 235
www.ielusc.br - [EMAIL PROTECTED]
Linux User nº 199930
ICQ #136176504
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Please HELP!!!! Logon Script

2004-01-16 Thread Gémes Géza
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Gilberto Nunes írta:
| Hi
|
|I make a perl script, to build on the fly login script to my users.
|In this script, there's some group that called, to mount specif shares.
|However, when logged on to the domain, with the student group, for
| example,
|I received this message, for the syslog:
|
|  [2004/01/16 16:37:13, 0] groupdb/mapping.c:init_group_mapping(139)
| Jan 16 16:37:13 samba smbd[8299]:   Failed to open group mapping database
| Jan 16 16:37:13 samba smbd[8299]: [2004/01/16 16:37:13, 0]
| groupdb/mapping.c:get_group_from_gid(655)
| Jan 16 16:37:13 samba smbd[8299]:   failed to initialize group
| mappingFailed to open group mapping database
| Jan 16 16:37:13 samba smbd[8299]: [2004/01/16 16:37:13, 0]
| groupdb/mapping.c:get_group_from_gid(655)
| Jan 16 16:37:13 samba smbd[8299]:   failed to initialize group
| mappingget_alias_user_groups: gid of user gnunes doesn't exist. Check your
| /etc/passwd and /etc/group files
| Jan 16 16:39:46 samba sshd(pam_unix)[8405]: session opened for user root
| by (uid=0)
|
|   Note that users gnunes, is enclosed in the student group.
|
|   What's wrong with this?
|
| This the logon script:
|
| #!/usr/bin/perl
|
| $server=samba;
|
| # Log Start
| ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(time);
| open LOG, /var/log/samba/netlogon.log;
| print LOG $mon/$mday/$year $hour:$min:$sec - User $ARGV[0] logged into
| $ARGV[1]\n;
| close LOG;
|
| # login script start
|
| open (LOGON,/home/netlogon/.$ARGV[0].bat);
|
| print LOGON [EMAIL PROTECTED] OFF\r\n;
| print LOGON NET TIME $server /SET /YES\r\n;
| print LOGON NET USE H: /HOME\r\n;
|
|
| if ($ARGV[1] eq student || $ARVG[0] eq student)
| {
| print LOGON NET USE M: $server\\publico\\pub_student\r\n;
| }
|
|
| print LOGON $server\\NETLOGON\\.logon.bat\r\n;
| close LOGON;
|
Hi,
In my opinion you shouldn't rely on samba passing group membership
attributes to your script, for example my (bash) script does something
like this:
if [ `groups $USERNAME | grep student | wc -l` -gt 0 ]; then
.
fi
Regards,

Geza
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFACEgU/PxuIn+i1pIRApeiAKCNB1a6OI7jWsgM5JcupWXPyMahwwCguH+S
sRn+/ZwSM54RDj3Fjh1lV+o=
=b6es
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Please Help!! need samba 2.2.7 server to use ldap

2004-01-12 Thread Jason Gray
I have two servers running samba 2.2.7a and require them to join and use an
LDAP passwd backend.  My domain controller is running Samba 3.0 and OpenLdap
2.0.27 as the passwd backend.

The two servers have joined the domain but for some reason they are not
using the LDAP backend.

[global]
workgroup = SOMEDOMAIN
netbios name = BD4
server string =
security = DOMAIN
encrypt passwords = Yes
null passwords = yes
password server = ldapsam:ldap://dc2.somedomain.ca
log level =3
log file = /var/log/samba/%m.log
max log size = 0
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
preferred master = No
local master = No
domain master = No
dns proxy = No
#hosts allow = 192.168.1.
interfaces = eth0
#include = /etc/samba/smb.conf.%m

Can anyone suggest a solution?  I can use smbclient from the command line to
open the share but it only works as anoymous.  If I try to use a password I
get this error:

session setup failed: NT_STATUS_LOGON_FAILURE

Any ideas would be great...

THanks

Jason

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Please Help with Secondary Groups

2004-01-09 Thread MICHAEL BROWN
System:
I am running RedHat 8.0 (2.4.18-14smp) with SAMBA 2.7 and user
authentication against OpenLDAP 2.1.22.

Problem:
On RedHat, Put over (I think 70 or so) users within a secondary group. 
Got to Konqueror or Nautilus and try to change
a directory's permissions to that group with over 70 or so users in it,
(it may be 80 or 90 users), YOU CAN NOT assign that
group to have ownership of that directory or any directory.  It will
revert back to what the ownership was before.  You CAN NOT
assign the group rights with a chmod either.  

MANDRAKE 8.2 WILL ALLOW THIS, HOWEVER!

DOES ANYONE know what I may be missing on Redhat?  This is killing me!

Thanks!

[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Please Help with Secondary Groups

2004-01-09 Thread Craig White
On Fri, 2004-01-09 at 12:27, MICHAEL BROWN wrote:
 System:
 I am running RedHat 8.0 (2.4.18-14smp) with SAMBA 2.7 and user
 authentication against OpenLDAP 2.1.22.
 
 Problem:
 On RedHat, Put over (I think 70 or so) users within a secondary group. 
 Got to Konqueror or Nautilus and try to change
 a directory's permissions to that group with over 70 or so users in it,
 (it may be 80 or 90 users), YOU CAN NOT assign that
 group to have ownership of that directory or any directory.  It will
 revert back to what the ownership was before.  You CAN NOT
 assign the group rights with a chmod either.  
 
 MANDRAKE 8.2 WILL ALLOW THIS, HOWEVER!
 
 DOES ANYONE know what I may be missing on Redhat?  This is killing me!

This isn't a Red Hat problem - I do this all the time. This is a
configuration problem.

getent group #does it list the groups in /etc/group first and then
 #the groups in LDAP?

chmod problems? are you trying to change the mount? The mount is owned
by whomever made the mount

just to show you that it works on samba...
[EMAIL PROTECTED] samba]# mkdir test
[EMAIL PROTECTED] samba]# chown Craig White.Domain Users test
[EMAIL PROTECTED] samba]# ls -l
total 14
data snipped for clarity
drwxr-xr-x2 Craig White Domain Users 4096 Jan  9 14:13 test
[EMAIL PROTECTED] samba]# grep Craig White /etc/passwd
[EMAIL PROTECTED] samba]# grep Domain Users /etc/group
[EMAIL PROTECTED] samba]# getent passwd|grep Craig White
Craig White:x:1003:1008:System User:/home/users/Craig White:/bin/false
[EMAIL PROTECTED] samba]# getent group|grep Domain Users
Domain
Users:x:1008:root,artstation,Administrator,catchalladv,catchallpr,nkelley,kbenedetto,cmullen,cnassa,dgibson,dmitchell,efigg,equijada,jconcors,jgrammond,jwhittle,khageman,lhjerpstedt,lschnebly,mlalone,mmotta,msmith,msparks,mwilliams,pshannon,rcrisman,spainter,scooperman,sstrauss,test,dwaddle

check your /etc/nsswitch.conf

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Please Help with Secondary Groups

2004-01-09 Thread MICHAEL BROWN
Thanks for your reply Craig.

Yes, getent DOES show the group and users correctly and yes, I have
tried switching the nsswitch.conf file to:

group: ldap files nis

but that does not work either.
What DOES work, I found this out a little while ago, is setting the
directory to the GID within LDAP like:
chown :5011 /home/test
5011 is the name of the group with the number of users above 60 or 70. 
Samba will authenticate correctly like this.
Any group with the total user count below that number, (60 or 70), will
allow me to use the actual name of the group but
if you go above that number in the secondary groups, it does not
recognize the name on ANY Redhat machine that I have in production.
As I stated earlier, I have no problem on Mandrake 8.2


 Craig White [EMAIL PROTECTED] Friday, January 09, 2004 
On Fri, 2004-01-09 at 12:27, MICHAEL BROWN wrote:
 System:
 I am running RedHat 8.0 (2.4.18-14smp) with SAMBA 2.7 and user
 authentication against OpenLDAP 2.1.22.
 
 Problem:
 On RedHat, Put over (I think 70 or so) users within a secondary
group. 
 Got to Konqueror or Nautilus and try to change
 a directory's permissions to that group with over 70 or so users in
it,
 (it may be 80 or 90 users), YOU CAN NOT assign that
 group to have ownership of that directory or any directory.  It will
 revert back to what the ownership was before.  You CAN NOT
 assign the group rights with a chmod either.  
 
 MANDRAKE 8.2 WILL ALLOW THIS, HOWEVER!
 
 DOES ANYONE know what I may be missing on Redhat?  This is killing
me!

This isn't a Red Hat problem - I do this all the time. This is a
configuration problem.

getent group #does it list the groups in /etc/group first and then
 #the groups in LDAP?

chmod problems? are you trying to change the mount? The mount is owned
by whomever made the mount

just to show you that it works on samba...
[EMAIL PROTECTED] samba]# mkdir test
[EMAIL PROTECTED] samba]# chown Craig White.Domain Users test
[EMAIL PROTECTED] samba]# ls -l
total 14
data snipped for clarity
drwxr-xr-x2 Craig White Domain Users 4096 Jan  9 14:13 test
[EMAIL PROTECTED] samba]# grep Craig White /etc/passwd
[EMAIL PROTECTED] samba]# grep Domain Users /etc/group
[EMAIL PROTECTED] samba]# getent passwd|grep Craig White
Craig White:x:1003:1008:System User:/home/users/Craig White:/bin/false
[EMAIL PROTECTED] samba]# getent group|grep Domain Users
Domain
Users:x:1008:root,artstation,Administrator,catchalladv,catchallpr,nkelley,kb
enedetto,cmullen,cnassa,dgibson,dmitchell,efigg,equijada,jconcors,jgrammond,
jwhittle,khageman,lhjerpstedt,lschnebly,mlalone,mmotta,msmith,msparks,mwilli
 ams,pshannon,rcrisman,spainter,scooperman,sstrauss,test,dwaddle

check your /etc/nsswitch.conf

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Please Help with Secondary Groups

2004-01-09 Thread MICHAEL BROWN
Also Craig,
Your example group below Domain Users only has, if I count correctly,
31 users.  You have to get up to about 70-80 or so before you see what I
am seeing.  My groups work as well with that few of users within the
secondary groups =)


 Craig White [EMAIL PROTECTED] Friday, January 09, 2004 
On Fri, 2004-01-09 at 12:27, MICHAEL BROWN wrote:
 System:
 I am running RedHat 8.0 (2.4.18-14smp) with SAMBA 2.7 and user
 authentication against OpenLDAP 2.1.22.
 
 Problem:
 On RedHat, Put over (I think 70 or so) users within a secondary
group. 
 Got to Konqueror or Nautilus and try to change
 a directory's permissions to that group with over 70 or so users in
it,
 (it may be 80 or 90 users), YOU CAN NOT assign that
 group to have ownership of that directory or any directory.  It will
 revert back to what the ownership was before.  You CAN NOT
 assign the group rights with a chmod either.  
 
 MANDRAKE 8.2 WILL ALLOW THIS, HOWEVER!
 
 DOES ANYONE know what I may be missing on Redhat?  This is killing
me!

This isn't a Red Hat problem - I do this all the time. This is a
configuration problem.

getent group #does it list the groups in /etc/group first and then
 #the groups in LDAP?

chmod problems? are you trying to change the mount? The mount is owned
by whomever made the mount

just to show you that it works on samba...
[EMAIL PROTECTED] samba]# mkdir test
[EMAIL PROTECTED] samba]# chown Craig White.Domain Users test
[EMAIL PROTECTED] samba]# ls -l
total 14
data snipped for clarity
drwxr-xr-x2 Craig White Domain Users 4096 Jan  9 14:13 test
[EMAIL PROTECTED] samba]# grep Craig White /etc/passwd
[EMAIL PROTECTED] samba]# grep Domain Users /etc/group
[EMAIL PROTECTED] samba]# getent passwd|grep Craig White
Craig White:x:1003:1008:System User:/home/users/Craig White:/bin/false
[EMAIL PROTECTED] samba]# getent group|grep Domain Users
Domain
Users:x:1008:root,artstation,Administrator,catchalladv,catchallpr,nkelley,kb
enedetto,cmullen,cnassa,dgibson,dmitchell,efigg,equijada,jconcors,jgrammond,
jwhittle,khageman,lhjerpstedt,lschnebly,mlalone,mmotta,msmith,msparks,mwilli
 ams,pshannon,rcrisman,spainter,scooperman,sstrauss,test,dwaddle

check your /etc/nsswitch.conf

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Please Help with Secondary Groups

2004-01-09 Thread Craig White
On Fri, 2004-01-09 at 14:42, MICHAEL BROWN wrote:
 Thanks for your reply Craig.
 
 Yes, getent DOES show the group and users correctly and yes, I have
 tried switching the nsswitch.conf file to:
 
 group: ldap files nis
 
 but that does not work either.
 What DOES work, I found this out a little while ago, is setting the
 directory to the GID within LDAP like:
 chown :5011 /home/test
 5011 is the name of the group with the number of users above 60 or 70. 
 Samba will authenticate correctly like this.
 Any group with the total user count below that number, (60 or 70), will
 allow me to use the actual name of the group but
 if you go above that number in the secondary groups, it does not
 recognize the name on ANY Redhat machine that I have in production.
 As I stated earlier, I have no problem on Mandrake 8.2

OK - got it... nscd - Name Caching Server Daemon

According to the very famous Mr. Terpstra's How-to Guide, you must shut
this off if you use winbind

If you don't use winbind... service nscd restart 

Necessary sometimes after you adjust /etc/nsswitch.conf because the
caching remains in place.

and by the way, I think you will find life is easier if you set 

passwd: files ldap nisplus #only use nisplus if you use nisplus in
   #your network otherwise, don't use
group: files ldap

(and of course, if you change this setup, best to restart the nscd
service to clear the existing cache.

Craig

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Please Help with Secondary Groups

2004-01-09 Thread MICHAEL BROWN
That is not it either Craig.  I have tried it with nscd and without in
the past and neither worked =(
By the way, my nsswitch.conf is set to:
group: files ldap
I just tried putting ldap in front to see if it had any bearing on the
situation.
Any other ideas?
Do you have a secondary group with 70-80 users in it?  Oh yea, the
PRIMARY groups with over 70 and up ARE recognized.  It is
just the secondary groups.  

 Craig White [EMAIL PROTECTED] Friday, January 09, 2004 
On Fri, 2004-01-09 at 14:42, MICHAEL BROWN wrote:
 Thanks for your reply Craig.
 
 Yes, getent DOES show the group and users correctly and yes, I have
 tried switching the nsswitch.conf file to:
 
 group: ldap files nis
 
 but that does not work either.
 What DOES work, I found this out a little while ago, is setting the
 directory to the GID within LDAP like:
 chown :5011 /home/test
 5011 is the name of the group with the number of users above 60 or
70. 
 Samba will authenticate correctly like this.
 Any group with the total user count below that number, (60 or 70),
will
 allow me to use the actual name of the group but
 if you go above that number in the secondary groups, it does not
 recognize the name on ANY Redhat machine that I have in production.
 As I stated earlier, I have no problem on Mandrake 8.2

OK - got it... nscd - Name Caching Server Daemon

According to the very famous Mr. Terpstra's How-to Guide, you must
shut
this off if you use winbind

If you don't use winbind... service nscd restart 

Necessary sometimes after you adjust /etc/nsswitch.conf because the
caching remains in place.

and by the way, I think you will find life is easier if you set 

passwd: files ldap nisplus #only use nisplus if you use nisplus in
   #your network otherwise, don't use
group: files ldap

(and of course, if you change this setup, best to restart the nscd
service to clear the existing cache.

Craig

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


  1   2   >