QNX 4.25
Can someone point my in the direction where i can get a distribution. I don't have a compiler and therefore would like a package. I seem to remember using 1.19 sometime ago. I only want to share a read only directory and nothing fancy. Many thanks Rod
Re: QNX 4.25
On Thu, 6 Feb 2003 [EMAIL PROTECTED] wrote: Can someone point my in the direction where i can get a distribution. I don't have a compiler and therefore would like a package. I seem to remember using 1.19 sometime ago. I only want to share a read only directory and nothing fancy. Suggest you ask on the right list: [EMAIL PROTECTED] This list is for people who package binaries. It has VERY low traffic and very few subscribers. Your chances of getting what you need will be hundreds times greater by asking the right list. - John T. -- John H Terpstra Email: [EMAIL PROTECTED]
[Samba] please help...
i have the following problem, the outlook express desktop settings are being overwritten every time i change the host. i was helped by Laurent HOFMANN (thanks a lot), who pointed out that the exclusion list in ntuser.ini excludes Local Settings from the files, which are being synchronized. However, I still can not figure out the way to change this list for all users. Even if i change it manually (in the user profile on the server) it is being overwritten with the same exclusion list after i log out. i also tried to make changes in the registry, but it did not help either. Thanks in advance for your help. Dimirty - Original Message - From: Dimitry Surkov [EMAIL PROTECTED] To: sbaron [EMAIL PROTECTED] Sent: Saturday, December 21, 2002 4:30 PM Subject: Fw: [Samba] Re: How to enforce client to download the profile form server - Original Message - From: Laurent Hofmann [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 20, 2002 8:53 PM Subject: [Samba] Re: How to enforce client to download the profile form server hello, as a clue you should take a look at ntuser.ini in the profile location of an user : [General] ExclusionList=Local Settings;Temporary Internet Files;Historique;Temp;Local Settings\Application Data\Microsoft\Outlook; This is the list of folders of the profile that do not synchronize... I think this can help ;) Please send me your feedback :) Laurent HOFMANN Owens, Bob [EMAIL PROTECTED] a Ecrit dans le message de news: [EMAIL PROTECTED] Help to see your smb.conf but here is mine it may help. [global] logon path = \\%L\Profiles\%U [Profiles] path = /data/domain/Profiles/ browseable = no writable = yes valid users = @domusers create mode = 0770 directory mode = 0770 force group = root -Original Message- From: Dimitry Surkov [mailto:[EMAIL PROTECTED]] Sent: Friday, December 20, 2002 10:07 AM To: [EMAIL PROTECTED] Subject: [Samba] How to enforce client to download the profile form server Dear all, i have the following problem. my smb.conf is working, but clients cannot download their profiles from the server. I explain this on an example: i have two windows machines: #1 and #2 i) i delete all local profiles in windows and a profile of user in unix ii) login to machine #1, have the win dialog as though i just started the machine for the first time (which is true), set my personal settings in Outlook. logout iii) login to machine #1 again and everything functions o.k., logout iii) login to machine #2, i have the same win dialog as though i just started the machine, although it is not the case, since i was on machine #1 already and no settings in Outlook. logout iv) login to machine #1, the profile is gone, i do not have the win start dialog again, but my outlook settings are gone. What could it be? It seems that the windows machine uploads the profile to the server, but in case of start on the same machine the local profile is being used. However the new machine does not download the profile, but overwrites it with a new locally created profile. SO, as i see it the problem is: the client does not download the profile form the samba server. Please help. Thanks in advance. Dimitry Surkov mailto: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem inchanging Samba Passwd:Thank you
Dear Keith and R. Garcia, Thank you for replying me. I set the parameter unix password sync equals to No and now I can both change the local user password and as well as the samba password from a remote machine. But for the synchronization of local UNIX users to samba users cannot be done with that parameter as by changing only the UNIX user password doesn't change the samba password as well. Regards, Thushani University of Colombo, Sri Lanka - Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] please help me..... : now its done
okay the problem has solved. now the client is connecting to the domain. by creating machine name different from the user account. below is log file which i have done. Thank you very much brad i think all is ok here : ---smb.conf--- [root@LinuxBox root]# useradd adil [root@LinuxBox root]# passwd adil Changing password for user adil. New password: Retype new password: passwd: all authentication tokens updated successfully. [root@LinuxBox root]# smbpasswd -a adil New SMB password: Retype new SMB password: Added user adil. [root@LinuxBox root]# cat /etc/passwd root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/sbin/nologin news:x:9:13:news:/etc/news: uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin gopher:x:13:30:gopher:/var/gopher:/sbin/nologin ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin nobody:x:99:99:Nobody:/:/sbin/nologin ntp:x:38:38::/etc/ntp:/sbin/nologin rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin nscd:x:28:28:NSCD Daemon:/:/sbin/nologin sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin rpm:x:37:37::/var/lib/rpm:/bin/bash mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin pcap:x:77:77::/var/arpwatch:/sbin/nologin xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin named:x:25:25:Named:/var/named:/sbin/nologin postgres:x:26:26:PostgreSQL Server:/var/lib/pgsql:/bin/bash apache:x:48:48:Apache:/var/www:/sbin/nologin postfix:x:89:89::/var/spool/postfix:/sbin/nologin squid:x:23:23::/var/spool/squid:/dev/null webalizer:x:67:67:Webalizer:/var/www/html/usage:/sbin/nologin adil:x:500:500::/home/adil:/bin/bash [root@LinuxBox root]# useradd adilspc$ [root@LinuxBox root]# passwd adilspc$ Changing password for user adilspc$. New password: Retype new password: passwd: all authentication tokens updated successfully. [root@LinuxBox root]# smbpasswd -a adilspc$ New SMB password: Retype new SMB password: Added user adilspc$. [root@LinuxBox root]# vi /etc/passwd root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/sbin/nologin news:x:9:13:news:/etc/news: uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin gopher:x:13:30:gopher:/var/gopher:/sbin/nologin ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin nobody:x:99:99:Nobody:/:/sbin/nologin ntp:x:38:38::/etc/ntp:/sbin/nologin rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin nscd:x:28:28:NSCD Daemon:/:/sbin/nologin sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin rpm:x:37:37::/var/lib/rpm:/bin/bash mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin pcap:x:77:77::/var/arpwatch:/sbin/nologin xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin named:x:25:25:Named:/var/named:/sbin/nologin postgres:x:26:26:PostgreSQL Server:/var/lib/pgsql:/bin/bash [root@LinuxBox root]# vi /etc/samba/smbpasswd root:0:C737062C3CF68ED8AAD3B435B51404EE:1C5D097D2FF79E7C114C030C09CADA9A:[UX ]:LCT-3E3BF2E3: ---smb.conf--- --- Bradley W. Langhorst [EMAIL PROTECTED] wrote: ]On Tue, 2003-02-04 at 16:52, Adil Hussain wrote: yes you are right there is no need for this account , i only need account of root user, but i am still confuse about how many account i need and what type of. my windows box name is adil, please tell me how many accounts i need and of what privilege. also when i give right login/password it says The specified user does not exist and when i give wrong Login or password or both it says Logon failure : unknown user name or bad password why is it so behaviour? okay the computer names should not be the same as usernames (it's too confusing - see the relevant rfc on computer naming) you need 2 accounts for every user (one samba account, one unix account) with the same username. In addition you need 2 accounts for every machine in the
[Samba] samba slow at overwriting of files
dear samba list members, I recently installed RedHat 8.0 with samba 2.2.7 (already updated, was 2.2.5 before I think, but with the same problem). now I have the problem, that overwriting of files on shares of that samba machine sometimes is extremely slow. writing new files is fast as ever. but what seems interesting to me is, that it depends on how I'm overwriting files. for example I'm working with homesite 5, which needs up to 15sec to overwrite a simple html file. ultraedit(a text editor) on the other hand has no problems with overwriting. an other example: copying files with windows commander (now: total commander) is extremely slow too if I'm copying files that already exist on the target network drive. on the other hand, if I copy a file in windows commander with ctrl-C and then paste it on the samba share with ctrl-V, it's fast, no problem! has anyone already experienced (and solved) this problem? any help is very much appreciated! oliver ps: my smb.conf settings are below. #=== Global Settings = [global] workgroup = LAN server string = Lobo hosts allow = 10.0. printcap name = /etc/printcap load printers = no printing = lprng log file = /var/log/samba/%m.log max log size = 0 security = domain password server = JACK encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd unix password sync = No passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd: pam password change = yes obey pam restrictions = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 interfaces = 10.0.0.5/16 dns proxy = no # Share Definitions == [homes] comment = Home Directories browseable = no writable = yes valid users = %S create mode = 0664 directory mode = 0775 [printers] comment = All Printers path = /var/spool/samba browseable = no # Set public = yes to allow user 'guest account' to print guest ok = no writable = no printable = yes [www] comment = document root path = /www public = yes writable = yes printable = no create mask = 0755 force user = www [root] comment = / on %h path = / public = yes writeable = yes valid users = oliver force user = root create mask = 0755 -- +++ GMX - Mail, Messaging more http://www.gmx.net +++ NEU: Mit GMX ins Internet. Rund um die Uhr für 1 ct/ Min. surfen! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] which ACL attributes are supported by Samba?
I've tried to determine this empirically, but have run foul of config issues that won't be resolved in the immediate future. Basically, I know that Samba + ACL + an acl-aware filesystem will allow me to assign unix-style permissions to arbitrary groups of people for a given file. However, Windows has additional permissions: delete, take ownership, and, um, I think possibly one or two more. My question is whether these are supported by Samba if I have extended attributes switched on (which, as far as I can tell, should allow you to define whatever attributes you like for any file)? Cheers, Waider. -- [EMAIL PROTECTED] / Yes, it /is/ very personal of me. There's no place like ~. - Brian P. Casey -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba and OS X
Hello, We are having this issue with samba and OSX 10.2.3. We are using freebsd4.7 serving samba as a fileserver for our company, we have a mix of windows and macs connecting to it. The windows machines work just fine the macs are another story. I have narrowed it down to this: I can open a file/document from the fileserver on my mac and edit it but it tells me I dont have the permissions to copy it back. This is from a volume that I mounted on the desktop using the 'apple+k' to mount it. When I mount it by command line I can edit the file/document(anyfile) and copy it back with no problem. I have also found this to be true on my linux system. Exact same problem when trying to edit and copy a file back to the fileserver that has been mounted on the desktop, I get the permission denied error. When mounted by command line I can open any file and edit it then copy it back. Has anyone run into this before and have found a solution they would like to share? I have done google searches but from everything I find it doesn't answer my question or im just not posing the question correctly. Thanks for any help, Jon -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Copy User/Pass from Samba to WinXP
On Thu, 2003-02-06 at 07:57, Jean-Rene Cormier wrote: Ok I have a samba server that I use for file sharing, I have a lot of trouble with it and I want to see if putting those shares on a WinXP box would work better. But we don't have a domain here, just workstation in a workgroup and I was wondering if there was a way I could copy all user/pass from the samba server to the Windows box so that transfering the shares from Samba to Windows would be transparent to them. I would do that in the off hours of course. I don't need to sync the password after that since it'll only be for a short period of time to see how well or not it works. Like if I use the passwords in the smbpasswd file is there a way I can import them in windows? I don't care if I have to enter every user into the windows box by hand but I don't want to ask everybody to retype their password for that. And please don't reply if it's only to tell me to stay away from windows or something like that, it pissed me off enough already today. Samba cannot act as a PDC for SAM replication, and that's the only real way that Windows systems can use for importing pre-hashed passwords. (as far as I know). However, if you are just needing to run this WinXP server as a 'slave', then making your Samba machine a PDC and joining the WinXP machine to the domain should work. Your existing clients can still access the Samba server as-before, they are not forced to use domain logons etc. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Password expire
yes that would be a fantastic feature??!! I'd like to force all the users to change password every once a month but I'm not sure how!? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba X processing (please - help me is very important!!!!!)
Hi, I have a server SUN (solaris 8), and I have instaled in this server samba_version_2.2.2. My problem is : I have 35 clients windows2000 that, when the users open any file, in the place of utilize the local processing, utilizes the processing of the server. So, the processor from the server stayed divided for 35 (nuber of client), and the processor of the clients stayed standby. When I open the file utilizing an another SUN (without pass for the samba), is utilized the local processing Have any sintaxe in smb.conf ...etc. to set that the clients windows2000 utilize them processor local, and no the processor server? Atenciosamente Alexandre Salomé Comau System _ Sistemas Engenharia tel: 0055 031 9944 8646 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Binary packages for RedHat 8.0 of 3.0?
Hi! The Samba 3.0 roadmap page says, that there should be binary packages of 3.0 alpha 21 available for Red Hat 8.0. The link points to http://download.samba.org/samba/ftp/Binary_Packages/RedHat - however there doesn't seem to be such a directory... Where can I get binary packages for RH 8.0? Thank,s Alexander Skwar -- How to quote: http://learn.to/quote (german) http://quote.6x.to (en) Homepage: http://www.iso-top.biz | Jabber: [EMAIL PROTECTED] iso-top.biz - Die günstige Art an Linux Distributionen zu kommen -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba failover
Well, I was wondering how to setup samba installations to provide fail-over for linux boxes that will be acting as a print-server for windows clients in an NT Domain (windows PDC and WINS servers). I didn't see any ideas in The Unofficial Samba Howto and the Samba- HOWTO-Collection. I was thinking having two print-servers NATed behind a linux router, and have the linux router do port forwarding on 137-139 to the main samba print-server, which talks to LPRng to talk to network attached printers. If the samba print-server goes down then switch the port-forwarding destination to the backup box with a similar configuration. What are the better ways? If there aren't any (which I doubt), is this even workable (I'm not sure having these two samba servers with the same netbios name, etc, is workable). Thanks for any ideas, ~ Daniel --- This message is the property of Time Inc. or its affiliates. It may be legally privileged and/or confidential and is intended only for the use of the addressee(s). No addressee should forward, print, copy, or otherwise reproduce this message in any manner that would allow it to be viewed by any individual not originally listed as a recipient. If the reader of this message is not the intended recipient, you are hereby notified that any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is strictly prohibited. If you have received this communication in error, please immediately notify the sender and delete this message. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] pdc
On Thu, 2003-02-06 at 04:39, Ryan oberto wrote: howdie all i have a samba pdc server runnnig 3 instances of samba 1 for each different domain it works but i cant add a machine to a domain if the domain doesnt start first and now after 3 days i get service netlogon not running on the window machines can anybody tell me why windows only works properly with the first domain that starts I've never tried this but I'll speculate if you like (take it for what it's worth...) Since the domain joining occurs via rpc i'm guessing that all three sambas are listening (or trying to listen) on the same network address. I don't know how to explain the netlogon premature death Have you multihomed this machine? I think you'd have to at least use ip aliasing and make samba use and interfaces only statement to get this working. This might be one for samba-technical. brad -- Bradley W. Langhorst [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] please help...
On Thu, 2003-02-06 at 04:39, Dmitry Surkov wrote: i have the following problem, the outlook express desktop settings are being overwritten every time i change the host. i was helped by Laurent HOFMANN (thanks a lot), who pointed out that the exclusion list in ntuser.ini excludes Local Settings from the files, which are being synchronized. However, I still can not figure out the way to change this list for all users. I don't think you can change whether local settings is copied... I've moved users outlook files to a network drive instead of allowing them to reside in the profile. Mozilla has a similar problem i have to manually move its cache folder INTO the local settings folder to prevent profile bloat. brad -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem inchanging Samba Passwd:Thank you
On Thu, 2003-02-06 at 04:48, Thushani Weerasinghe wrote: Dear Keith and R. Garcia, Thank you for replying me. I set the parameter unix password sync equals to No and now I can both change the local user password and as well as the samba password from a remote machine. But for the synchronization of local UNIX users to samba users cannot be done with that parameter as by changing only the UNIX user password doesn't change the samba password as well. you need to use pam_smbpass to get unix-smbpassword syncronization and unix password sync to get samba-unix passdb syncronization brad -- Bradley W. Langhorst [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Password expire
On Thu, 2003-02-06 at 06:25, richard wrote: yes that would be a fantastic feature??!! I'd like to force all the users to change password every once a month but I'm not sure how!? you need samba3 for this... brad -- Bradley W. Langhorst [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Binary packages for RedHat 8.0 of 3.0?
On Thu, 2003-02-06 at 07:51, Alexander Skwar wrote: Hi! The Samba 3.0 roadmap page says, that there should be binary packages of 3.0 alpha 21 available for Red Hat 8.0. The link points to http://download.samba.org/samba/ftp/Binary_Packages/RedHat - however there doesn't seem to be such a directory... Where can I get binary packages for RH 8.0? I don't know where they are - but you can build them yourself using the scripts in the packaging folder in the source tgz file. brad -- Bradley W. Langhorst [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] net ads vampire?
Is there an equivalent of net rpc vampire for w2k in samba3? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Redhat ACL support
Date: Wed, 5 Feb 2003 09:09:41 -0500 From: David Gibbins [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: [Samba] Redhat ACL support Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=iso-8859-1 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Precedence: list Reply-To: [EMAIL PROTECTED] Message: 7 Hi, I'm trying to setup a RedHat 8 fileserver, it must work seamlessly within our 2000/NT network. After some research, I believe the first thing I need to do is install ACL support. I tried doing this once, didn't go well, had to reinstall RedHat. What files do I need and from where, to install ACL support for RedHat 8? Alternatively you could use a distribution that supports ACLs out-the-box on ext2/ext3 and XFS. Both Mandrake 9.0 and SuSE 8.1 do AFAIK. That way, at least you are using the kernel and samba binaries provided by the distribution. Also, Mandrake comes with winbind support out-the-box (ie you can join the domiain during installation, but only in expert mode, and remember to specify the domain name in caps). Buchan -- |--Another happy Mandrake Club member--| Buchan MilneMechanical Engineer, Network Manager Cellphone * Work+27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] oplock problems
I've been using Samba mostly succesfully for my Linux box serving Win9x machines for a couple of years now In the last few days I've been getting all sorts of connectivity problems Most of the errors in the samba log files are like: [2003/02/06 09:54:16, 0] smbd/oplock.c:oplock_break(684) oplock_break: ERROR: oplock_break already sent for file docs/2002/200250/2500 Sow Unit/a1.dwg (dev = 1641, inode = 1131698, file_id = 211385) [2003/02/06 09:54:16, 0] smbd/open.c:open_mode_check(599) open_mode_check: FAILED when breaking oplock (3) on file /home/docs/2002/200250/2500 Sow Unit/a1.dwg, dev = 1641, inode = 1131698 This is what is in nmbd.log for the same time period: [2003/02/06 08:33:42, 0] nmbd/nmbd_incomingdgrams.c:process_get_backup_list_request(709) process_get_backup_list_request: domain list requested for workgroup JOHNSON and I am not a local master browser. [2003/02/06 09:51:00, 0] nmbd/nmbd_incomingdgrams.c:process_get_backup_list_request(709) process_get_backup_list_request: domain list requested for workgroup JOHNSON and I am not a local master browser. smbd.log isn't showing any errors I haven't touched the config files but I was playing with installing/using apt-get (on my Redhat server) and if I remember correctly it upgraded the samba package ... it is now: samba-client-2.2.7-1.7.3 samba-2.2.7-1.7.3 samba-common-2.2.7-1.7.3 I also switched the position of two autosensing 10/100 hubs on the network - but I don't think that would be the problem Any ideas? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] net ads vampire?
hello andreas, On Thu, Feb 06, 2003 at 11:52:18AM -0200, Andreas Hasenack wrote: Is there an equivalent of net rpc vampire for w2k in samba3? no. although user and group-information can be nicely retrieved, a win2k dc will not give you the password-hashes (for now). i think Jeremy Allison has put a lot of effort into getting the required secure schannel to work recently but i do not know if it's fully working now. bye, guenther -- Guenther Deschner [EMAIL PROTECTED] SuSE Linux AGGnuPG: 8EE11688 Berliner Str. 27 phone: +49 (0) 30 / 430944778 D-13507 Berlin fax: +49 (0) 30 / 43732804 msg13791/pgp0.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Net ADS JOIN error
Hi all, After having spend 2 days to resolve my problem to configure Samba 3.0 (the path to the libgcc_s was wrong) I've finally installed it and I'm trying to join the W2K AD domain with the command: 1. kinit [EMAIL PROTECTED] (asking password and getting the ticket from the W2K) 2. net ads join [EMAIL PROTECTED] (doesn't work) error message : [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from UCS-2LE to CP850 not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from UTF8 to CP850 not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from ASCII to CP850 not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UCS-2LE not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UTF8 not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to ASCII not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UTF8 not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from UTF8 to CP850 not supported [EMAIL PROTECTED] password: [2003/02/06 15:09:08, 1] libsmb/clikrb5.c:krb5_mk_req2(234) krb5_get_credentials failed for s-tnet1luxdc01$@OUR.DOMAIN.INT (No credentials found with supported encryption types) [2003/02/06 15:09:08, 0] libads/kerberos.c:ads_kinit_password(133) kerberos_kinit_password [EMAIL PROTECTED] failed: Preauthentication failed [2003/02/06 15:09:08, 1] utils/net_ads.c:ads_startup(150) ads_connect: Invalid credentials Is there somebody that can help me to [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from UCS-2LE to CP850 not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from UTF8 to CP850 not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from ASCII to CP850 not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UCS-2LE not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UTF8 not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to ASCII not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from CP850 to UTF8 not supported [2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93) Conversion from UTF8 to CP850 not supported [EMAIL PROTECTED] password: [2003/02/06 15:09:08, 1] libsmb/clikrb5.c:krb5_mk_req2(234) krb5_get_credentials failed for s-tnet1luxdc01$@OUR.DOMAIN.INT (No credentials found with supported encryption types) [2003/02/06 15:09:08, 0] libads/kerberos.c:ads_kinit_password(133) kerberos_kinit_password [EMAIL PROTECTED]@OUR.DOMAIN.INT failed: Malformed representation of principal [2003/02/06 15:09:08, 1] utils/net_ads.c:ads_startup(150) ads_connect: Invalid credentials I've no access to a W2K server but only to a XP with Administrator right for our OU (Organisational Unit). ( I hate M$) Can someone help me on this matter, because I'm getting mad with this stuff. Many thanks guys PS Clive: I've read your document join W2K domain, but I'm blocked now by this thing to make it work. Sorry to botter you. Alessandro BRUNI Local Systems Mail Administrator European Commission Directorate General TRADE E-mail : [EMAIL PROTECTED] Web site : http://europa.eu.int/comm/trade -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] please help...
On Thu, 6 Feb 2003, Dmitry Surkov wrote: i have the following problem, the outlook express desktop settings are being overwritten every time i change the host. i was helped by Laurent HOFMANN (thanks a lot), who pointed out that the exclusion list in ntuser.ini excludes Local Settings from the files, which are being synchronized. However, I still can not figure out the way to change this list for all users. Even if i change it manually (in the user profile on the server) it is being overwritten with the same exclusion list after i log out. i also tried to make changes in the registry, but it did not help either. Dimitry, Please provide more information about your configuration. Suggest you email a copy of your smb.conf (off list might be best). Also, please describe hom your Windows clients are configured: - Are you using WINS - What versions of MS Windows - Are the MS Windows workstations domain members - if so, how did you join them to the domain - How did you configure outlook (what versions of outlook) I suspect that what you are trying to achieve can not be done, but I am willing to help you. - John T. Thanks in advance for your help. Dimirty - Original Message - From: Dimitry Surkov [EMAIL PROTECTED] To: sbaron [EMAIL PROTECTED] Sent: Saturday, December 21, 2002 4:30 PM Subject: Fw: [Samba] Re: How to enforce client to download the profile form server - Original Message - From: Laurent Hofmann [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 20, 2002 8:53 PM Subject: [Samba] Re: How to enforce client to download the profile form server hello, as a clue you should take a look at ntuser.ini in the profile location of an user : [General] ExclusionList=Local Settings;Temporary Internet Files;Historique;Temp;Local Settings\Application Data\Microsoft\Outlook; This is the list of folders of the profile that do not synchronize... I think this can help ;) Please send me your feedback :) Laurent HOFMANN Owens, Bob [EMAIL PROTECTED] a Ecrit dans le message de news: [EMAIL PROTECTED] Help to see your smb.conf but here is mine it may help. [global] logon path = \\%L\Profiles\%U [Profiles] path = /data/domain/Profiles/ browseable = no writable = yes valid users = @domusers create mode = 0770 directory mode = 0770 force group = root -Original Message- From: Dimitry Surkov [mailto:[EMAIL PROTECTED]] Sent: Friday, December 20, 2002 10:07 AM To: [EMAIL PROTECTED] Subject: [Samba] How to enforce client to download the profile form server Dear all, i have the following problem. my smb.conf is working, but clients cannot download their profiles from the server. I explain this on an example: i have two windows machines: #1 and #2 i) i delete all local profiles in windows and a profile of user in unix ii) login to machine #1, have the win dialog as though i just started the machine for the first time (which is true), set my personal settings in Outlook. logout iii) login to machine #1 again and everything functions o.k., logout iii) login to machine #2, i have the same win dialog as though i just started the machine, although it is not the case, since i was on machine #1 already and no settings in Outlook. logout iv) login to machine #1, the profile is gone, i do not have the win start dialog again, but my outlook settings are gone. What could it be? It seems that the windows machine uploads the profile to the server, but in case of start on the same machine the local profile is being used. However the new machine does not download the profile, but overwrites it with a new locally created profile. SO, as i see it the problem is: the client does not download the profile form the samba server. Please help. Thanks in advance. Dimitry Surkov mailto: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba and OS X
I am having a permission denied error as well. I know that osx has huge default permissions error. if you create a file on the server then you no longer have access to read it, and various problems of the same sort. My problem is joining a system to a mac osx server 10.2.3 domain, if you have any expertise in that, I would love some help. Mac 10.2.4 should be out very soon. hopefully that will solve alot of problems. Good luck, mac osx is a baby, still growing up. Kyle Loree Rendek Communications [EMAIL PROTECTED] [EMAIL PROTECTED] writes: Hello, We are having this issue with samba and OSX 10.2.3. We are using freebsd4.7 serving samba as a fileserver for our company, we have a mix of windows and macs connecting to it. The windows machines work just fine the macs are another story. I have narrowed it down to this: I can open a file/document from the fileserver on my mac and edit it but it tells me I dont have the permissions to copy it back. This is from a volume that I mounted on the desktop using the 'apple+k' to mount it. When I mount it by command line I can edit the file/document(anyfile) and copy it back with no problem. I have also found this to be true on my linux system. Exact same problem when trying to edit and copy a file back to the fileserver that has been mounted on the desktop, I get the permission denied error. When mounted by command line I can open any file and edit it then copy it back. Has anyone run into this before and have found a solution they would like to share? I have done google searches but from everything I find it doesn't answer my question or im just not posing the question correctly. Thanks for any help, Jon -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Fwd: Re: oplock problems
Oops, [EMAIL PROTECTED], not SALBA (: /dev/idal --- Chris de Vidal [EMAIL PROTECTED] wrote: Date: Thu, 6 Feb 2003 08:19:56 -0800 (PST) From: Chris de Vidal [EMAIL PROTECTED] Subject: Re: oplock problems To: Brian Johnson [EMAIL PROTECTED] CC: [EMAIL PROTECTED] --- Brian Johnson [EMAIL PROTECTED] wrote: I also switched the position of two autosensing 10/100 hubs on the network - but I don't think that would be the problem I had oplock issues a few months ago but it was with large, flat database files (search marc.theaimsgroup.com). I learned, in this process, that oplock break messages are almost always network related. We were seeing no messages but corruption, so we ruled out networking. But for you, start with networking. Disable autosensing if you can and go entirely half/full duplex at a certain rate. It is safe to entirely disable oplocks, but you gain so much performance with them. /dev/idal __ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com __ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Goin' bald by the minute :)
Hello everyone, I've just a single question? Can domain group policy's be served by samba 3.0? Just a thought ; Make a share with gpt.ini, user and machine dirs and the registry.pol files within. Then editing them with something like: /gpobject:LDAP://cn=MAINBOX,ou=MACHINES,ou=SERVERS,dc=eazy,dc=homeip,dc=net; (err something like that) Is this possible? Lookin' more like Homer Simpson everyday ! :) J. -- Jesse Jacobs, R.H.C.T. (a.k.a. Supa' Nube, BeeHive Freak) Ajax,ON Canada -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] which ACL attributes are supported by Samba?
On Thu, 2003-02-06 at 05:08, Ronan Waide wrote: I've tried to determine this empirically, but have run foul of config issues that won't be resolved in the immediate future. Basically, I know that Samba + ACL + an acl-aware filesystem will allow me to assign unix-style permissions to arbitrary groups of people for a given file. you don't need ACL support for unix style permissions (user, group, world) ACLs are lists of arbitrary users that have the specified permissions on the files you choose. However, Windows has additional permissions: delete, take ownership, and, um, I think possibly one or two more. My question is whether these are supported by Samba if I have extended attributes switched on (which, as far as I can tell, should allow you to define whatever attributes you like for any file)? I don't use those permissions so i'm not sure that samba supports them but i think it does... brad -- Bradley W. Langhorst [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Goin' bald by the minute :)
Hello again, How about make a link ie. referer to the samba share from this attr.(//MAINBOX/POLICY) /gpobject:LDAP://dn=POLICY,cn=MAINBOX,ou=MACHINES,ou=SERVERS,dc=eazy,dc=homeip,dc=net; Only four hairs left! J. Jesse Jacobs said: Hello everyone, I've just a single question? Can domain group policy's be served by samba 3.0? Just a thought ; Make a share with gpt.ini, user and machine dirs and the registry.pol files within. Then editing them with something like: /gpobject:LDAP://cn=MAINBOX,ou=MACHINES,ou=SERVERS,dc=eazy,dc=homeip,dc=net; (err something like that) Is this possible? Lookin' more like Homer Simpson everyday ! :) J. -- Jesse Jacobs, R.H.C.T. (a.k.a. Supa' Nube, BeeHive Freak) Ajax,ON Canada -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- Jesse Jacobs, R.H.C.T. (a.k.a. Supa' Nube, BeeHive Freak) Ajax,ON Canada -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] WINS Server periodically losing entry for Samba Server
Hi there, We have Samba running on an HP-UX 11.0 server. Our end-users are still on Windows 95, soon to change to Windows 2000, and therefore use NetBIOS to connect to the network share on the machine. Occasionally the WINS server on the network loses its entry for the Samba server. This, in turn, causes the Win95 machine to be unable to connect to the UNIX server. The WINS server is configured in such a way that it is not possible to manually add a permanent entry into its database for Samba. As a result, we are forced to stop and restart the smbd and nmbd daemons on the server in order for the Windows 95 machine to be able to reconnect. Is there a way for Samba to constantly broadcast, multicast, or unicast its information to the WINS server in order for this problem not to occur? One other note, the workstations will be upgraded to Windows 2000 in several weeks and thereby make this issue moot. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] which ACL attributes are supported by Samba?
On February 6, [EMAIL PROTECTED] said: you don't need ACL support for unix style permissions (user, group, world) ACLs are lists of arbitrary users that have the specified permissions on the files you choose. You do if you want more than one set of user/group acls per file. Waider. -- [EMAIL PROTECTED] / Yes, it /is/ very personal of me. I can't seem to undo 2,500 years of western rational thinking just by reading a couple Gary Snyder poems. - [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] which ACL attributes are supported by Samba?
On Thu, 2003-02-06 at 08:58, Ronan Waide wrote: On February 6, [EMAIL PROTECTED] said: you don't need ACL support for unix style permissions (user, group, world) ACLs are lists of arbitrary users that have the specified permissions on the files you choose. You do if you want more than one set of user/group acls per file. More than one set of users/groups is not unix style permissions - that is ACLs. If you want to list those users/groups with permission that is a access control LIST unix style permissions means drwxrwxrwx - only rwx for one group brad -- Bradley W. Langhorst [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] joining xp to domain
Because in OSX server you cannot login to a server remotely using root, you have to use an admin accout to join a machine to a domain. I changed the owner of the samba dir and smbpasswd file to admin. Seems a little too easy now. /me kicks self for not thinking of that a while ago. I just hope this saves someone else some time. Kyle Loree Rendek Communications [EMAIL PROTECTED] [EMAIL PROTECTED] writes: I have a mac osx 10.2.3 as a server, anyone unfamiliar with it, it uses admin as main user. root is still on the system. Admin is admin of the password server which is required to login to samba. therefore root can't be the one to join. yet admin doesn't have rights to modify smbpasswd. I know the smb.conf config should work. I have added the users and machines using smbpasswd successfully, I can connect to the shares over the network. Somehow I have to force admin to be able to modify smbpasswd to allow for the users. the only pertinent info out of the logs, unable to open file unable to open passdb database unable to open file /var/db/samba/smbpasswd. Error was permission denied. [global] local master = YES guest account = unknown encrypt passwords = YES max smbd processes = 0 print command = /usr/sbin/PrintServiceAccess printps %p %s lpq command = /usr/sbin/PrintServiceAccess jobs %p lprm command = /usr/sbin/PrintServiceAccess remove %p %j lppause command = /usr/sbin/PrintServiceAccess hold %p %j lpresume command = /usr/sbin/PrintServiceAccess release %p %j printer admin = unknown, @staff server string = Mac OS X Server log file = /Library/Logs/WindowsServices/WindowsFileService.log netbios name = onpaserv workgroup = WORKGROUP log level = 2 wins support = YES domain master = YES client code page = 437 coding system = utf8 domain admin group = @admin security = user preferred master = YES domain logons = YES os level = 64 logon drive = i: logon home = \\onpaserv\users\%u logon path = \\onpaserv\users\%u logon script = %u.bat [users] path = /Volumes/iRAID/users browseable = NO read only = NO comment = macosx public = NO [shared] path = /Volumes/iRAID/shared public = NO read only = NO writable = YES comment = macosx [projects] path = /Volumes/iRAID/projects public = NO read only = NO comment = macosx [profiles] path = /Volumes/iRAID/profiles public = NO read only = NO comment = macosx Any help would be greatly appreciated Kyle Loree Rendek Communications [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Win98 policies,profiles and logon scripts
I am running Samba 2.2.3a and have my users logging into the 'samba domain'. My WinNT and WinXP users are working fine with roaming profiles and policies. My problem is my Win98 users. The logon script doesn't seem to be working, i.e. when I log onto a Win98 machine (logging into the domain), the logon script doesn't run. I have opened up the permissions to the logon script (for testing) and that doesn't seem to help, it's still not running. Also, I have implemented a domain policy to 'exclude directories in roaming profiles', namely temporary internet files, cookies, etc. This policy works fine for WinNT but doesn't seem to work for Win98, is this a 'feature' of WinNT and not Win98? I did create separate policies for WinNT (ntconfig.POL) and Win98 (config.POL). Other settings within the policy ARE working, for example, restricting the screen saver tab on the display. Joseph Morin Dominion Diagnostics -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] which ACL attributes are supported by Samba?
On Thu, 2003-02-06 at 09:21, Ronan Waide wrote: The whole point of my question was NOT these ACLs, but whether the extended ACLs provided by Windows were supported. Your response to this was that you didn't know. So essentially, you told me something I already knew, and said I don't know to my actual question. I appreciate that you're trying to help, but consider this: you don't have to reply to every question that's asked, and it's better to say nothing if you can't answer the question being asked in a useful fashion. I'm not going to get into some kind of petty fight with you. It was not clear to me that you understood the difference between ACLs and unix style permission and it's still not... So I responded to the part of your question which I had useful input to. I just tried to set an acl on take ownership it doesn't stick - it should. Read and write attributes does stick. I won't answer your questions in the future brad -- Bradley W. Langhorst [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win98 policies,profiles and logon scripts
Hello Joe, How did u get the win XP group policies to work within the domain? I'd really like to hear back from ya. I am running Samba 2.2.3a and have my users logging into the 'samba domain'. My WinNT and WinXP users are working fine with roaming profiles and policies. My problem is my Win98 users. The logon script doesn't seem to be working, i.e. when I log onto a Win98 machine (logging into the domain), the logon script doesn't run. I have opened up the permissions to the logon script (for testing) and that doesn't seem to help, it's still not running. Also, I have implemented a domain policy to 'exclude directories in roaming profiles', namely temporary internet files, cookies, etc. This policy works fine for WinNT but doesn't seem to work for Win98, is this a 'feature' of WinNT and not Win98? I did create separate policies for WinNT (ntconfig.POL) and Win98 (config.POL). Other settings within the policy ARE working, for example, restricting the screen saver tab on the display. Joseph Morin Dominion Diagnostics -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- Jesse Jacobs, R.H.C.T. (a.k.a. Supa' Nube, BeeHive Freak) Ajax,ON Canada -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] quick question re: smb.conf parameters
Ok, I know this is a stupid question but im having problems with some shares and so I have to ask: Are share parameters specified within the [global] section used as defaults for my other shares, or are they ignored? For example, if I set veto oplock files = /*.DBM/*.dbm/ within the [global] section, will that trickle down to my shares if I don't have veto oplock files explicitly set within them? If so, are there any share level parameters where this isn't the case? Thanks, Brad -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba and quotas
Hello, I'm using Samba 2.2.7 + XFS (1.1) + ACL + quotas on a Linux machine with kernel 2.4.18. What I want to ask you - is Samba's quota support reliable enough so I can use it at commercial environment ? (I'm asking because of experimental flag at --with-quota in Samba .configure file) Thanks in advance for any post Dan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win98 policies,profiles and logon scripts
Hi Jesse, I didn't get the 'group' policies working. All my users will have the same policy applied, so I just used the default user policy (for both Win2k and WinXP). I did notice a difference between Win2k and WinXP profiles though. I use a different 'default' profile for Win2k and WinXP. I'd love to get group policies working, but right now it's not an issue for me. When I try to add a group to the policy, all I see is the domain admin group, I haven't tried using it in a policy though. Sorry I couldn't offer more info. Joseph Morin Dominion Diagnostics Jesse Jacobs [EMAIL PROTECTED] p.net To [EMAIL PROTECTED] 02/06/2003 12:24 cc PM[EMAIL PROTECTED] Subject Re: [Samba] Win98 policies,profiles and logon scripts Hello Joe, How did u get the win XP group policies to work within the domain? I'd really like to hear back from ya. I am running Samba 2.2.3a and have my users logging into the 'samba domain'. My WinNT and WinXP users are working fine with roaming profiles and policies. My problem is my Win98 users. The logon script doesn't seem to be working, i.e. when I log onto a Win98 machine (logging into the domain), the logon script doesn't run. I have opened up the permissions to the logon script (for testing) and that doesn't seem to help, it's still not running. Also, I have implemented a domain policy to 'exclude directories in roaming profiles', namely temporary internet files, cookies, etc. This policy works fine for WinNT but doesn't seem to work for Win98, is this a 'feature' of WinNT and not Win98? I did create separate policies for WinNT (ntconfig.POL) and Win98 (config.POL). Other settings within the policy ARE working, for example, restricting the screen saver tab on the display. Joseph Morin Dominion Diagnostics -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- Jesse Jacobs, R.H.C.T. (a.k.a. Supa' Nube, BeeHive Freak) Ajax,ON Canada -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Password expire
Does anyone know if implementing LDAP with samba will help this? I'd like to implement LDAP with samba for this specific reason (password expiration), but I don't want to implement this if it doesn't work. Joseph Morin Dominion Diagnostics -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win98 policies,profiles and logon scripts
Hi ! Please post your smb.conf . It may help to solve your problem. Regards, Michael At 12:10 06.02.2003 -0500, you wrote: I am running Samba 2.2.3a and have my users logging into the 'samba domain'. My WinNT and WinXP users are working fine with roaming profiles and policies. My problem is my Win98 users. The logon script doesn't seem to be working, i.e. when I log onto a Win98 machine (logging into the domain), the logon script doesn't run. I have opened up the permissions to the logon script (for testing) and that doesn't seem to help, it's still not running. Also, I have implemented a domain policy to 'exclude directories in roaming profiles', namely temporary internet files, cookies, etc. This policy works fine for WinNT but doesn't seem to work for Win98, is this a 'feature' of WinNT and not Win98? I did create separate policies for WinNT (ntconfig.POL) and Win98 (config.POL). Other settings within the policy ARE working, for example, restricting the screen saver tab on the display. Joseph Morin Dominion Diagnostics -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba quotas (one more)
Hello again (I hope it's not too much to have two questions in one day :), Currently I'm testing quota support on Linux system with kernel 2.4.18 + XFS 1.1 patch + Samba 2.2.7 (--with-quota compiled) and I went into one really unpleasant problem when accesing Samba share from Windows 2000 SP3 with Total commander 5.5. When user reach soft limit, then he'll get a warning message Low space, do you want to continue ?. Copy can be forced and up to this moment everything is ok. But at moment when trying to copy a file which will cause to overreach hard quota limit, then happens this: - warning message is displayed but user is allowed to enforce copy. - Windows then displays error message windows with (translated): Delayed write failed ... Data were lost - Destination file has same size as source, but content is different! - Any further copy try will fail with message Write protected ... So where is the problem? Is it bug in Samba (quota support is in .configure file announced as experimental), XFS quota support, or in Total commander (since same action made with Windows Explorer is ok, copy over hard limit is denied). In case you think it's not a bug (or some kind of misconfiguration), does other OS's /filesystems behave the same way ? Thanks a lot in advance for any answer, Dan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Yes, finally it works !!!!
Hi Community, I want to thank everybody which help me. Mostly Mr. John Terpstra that help me always I needed. What's happen? I changed SAMBA 2.2.5 to SAMBA 2.2.7 and everything works. I believe that the problem was the package that I used. Why? I downloaded directly of the freewarebull.com, there I got the package for AIX, but I suspect that package wasn't made of the better way. Then, I downloaded the RPM package for AIX and installed and BUM !!! Everything works !!! Thank you ___ (0 0) +V+ | Rodrigo Nascimento | | Linux Users Brazil o0o o0o| +( )---( )+ http://www.ieg.com.br -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win98 policies,profiles and logon scripts
Yes, I'm using the ntconfig.POL for XP users. by 'default' I'm referring to the default profile for new users. I use the copy facility to copy a default profile on top of the new users (local) profile on their machine, then log on as that user and log out (which copies the 'new' profile) to the server. I would have used the 'default user' profile (placed in the netlogon share), but I've noticed a few differences between Win2K and WinXP so I do it manually instead. Joseph Morin Dominion Diagnostics Jesse Jacobs [EMAIL PROTECTED] p.net To [EMAIL PROTECTED] 02/06/2003 12:37 cc PM Subject Re: [Samba] Win98 policies,profiles and logon scripts Hello again Joe, Thanks for the prompt responce :) Are u using the NTConfig.pol file for XP? What do u mean by 'default'? Local-policy? Thanks again :) J. Hi Jesse, I didn't get the 'group' policies working. All my users will have the same policy applied, so I just used the default user policy (for both Win2k and WinXP). I did notice a difference between Win2k and WinXP profiles though. I use a different 'default' profile for Win2k and WinXP. I'd love to get group policies working, but right now it's not an issue for me. When I try to add a group to the policy, all I see is the domain admin group, I haven't tried using it in a policy though. Sorry I couldn't offer more info. Joseph Morin Dominion Diagnostics Jesse Jacobs [EMAIL PROTECTED] p.net To [EMAIL PROTECTED] 02/06/2003 12:24 cc PM[EMAIL PROTECTED] Subject Re: [Samba] Win98 policies,profiles and logon scripts Hello Joe, How did u get the win XP group policies to work within the domain? I'd really like to hear back from ya. I am running Samba 2.2.3a and have my users logging into the 'samba domain'. My WinNT and WinXP users are working fine with roaming profiles and policies. My problem is my Win98 users. The logon script doesn't seem to be working, i.e. when I log onto a Win98 machine (logging into the domain), the logon script doesn't run. I have opened up the permissions to the logon script (for testing) and that doesn't seem to help, it's still not running. Also, I have implemented a domain policy to 'exclude directories in roaming profiles', namely temporary internet files, cookies, etc. This policy works fine for WinNT but doesn't seem to work for Win98, is this a 'feature' of WinNT and not Win98? I did create separate policies for WinNT (ntconfig.POL) and Win98 (config.POL). Other settings within the policy ARE working, for example, restricting the screen saver tab on the display. Joseph Morin Dominion Diagnostics -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- Jesse Jacobs, R.H.C.T. (a.k.a. Supa' Nube, BeeHive Freak) Ajax,ON Canada -- Jesse Jacobs, R.H.C.T. (a.k.a. Supa' Nube, BeeHive Freak) Ajax,ON Canada -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Write-Protection-problem with opening Documents w/ Samba2.2.5 / AIX 4.3.3
Köhler Andreas wrote: Dear Members, When opening a document the first time in the folder, it's opening write-protected in MS-Word2000. If the same document is opened the second time afterwards, then it's opening correct w/o write-protection set. Do you have any solution for that problem ? 'man smb.conf' and look at 'force create mode' ? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] codepage problems
I have both set client codepage 850 (Win98SE, I checked with chcp) and I have set character set ISO8859-1. Problems arise when I use a special character in the Win client, like ñ (lowercase n with a tilde), I get a questionmark in Linux The other way around, when I use the same character ñ (lowercase n with tilde) in Linux, then I get ñ (highercase A with tilde and a plus minus character). I tried to recompile kernel and/or add the codepage 850 support module, but still no change. How do you check the codepage support is really active? How should I solve this problem? greetings, René -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win98 policies,profiles and logon scripts
Here's my smb.conf file. Thanks for the help! # Global parameters [global] workgroup = DOMAINNAME netbios name= SERVERNAME security = USER hosts allow = 192.168.1., 192.168.0., 127. name resolve order = host bcast wide links= No follow symlinks = No socket options = TCP_NODELAY IPTOS_LOWDELAY invalid users = bin daemon adm sync shutdown halt mail news time server = yes encrypt passwords = yes unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully.* os level = 255 wins support= yes local master= yes preferred master = yes domain master = yes domain logons = yes Domain Admin group = @domainadmin logon home= \\%L\%U\.profile logon drive = H: logon path= \\%L\Profiles\.%U logon script= %G.bat add user script = /usr/sbin/useradd -g 201 -d /dev/null -s /bin/false -M %u # # PDC shares # [netlogon] comment = Network Logon Service path = /home/samba/netlogon browseable= no writable = no share modes = no [Profiles] path = /home/samba/profiles browseable= yes writeable = yes force create mode = 0660 force directory mode= 0770 # # User H drives # [homes] read only = No create mask = 0644 browseable= No # # Shares # [public] comment = Public Share path = /data/public writeable = yes create mask = 0664 directory mask = 0775 guest ok = yes # # End config file # Joseph Morin Dominion Diagnostics Michael Paarmann [EMAIL PROTECTED] To 02/06/2003 12:29 [EMAIL PROTECTED] PM cc [EMAIL PROTECTED] Subject Re: [Samba] Win98 policies,profiles and logon scripts Hi ! Please post your smb.conf . It may help to solve your problem. Regards, Michael At 12:10 06.02.2003 -0500, you wrote: I am running Samba 2.2.3a and have my users logging into the 'samba domain'. My WinNT and WinXP users are working fine with roaming profiles and policies. My problem is my Win98 users. The logon script doesn't seem to be working, i.e. when I log onto a Win98 machine (logging into the domain), the logon script doesn't run. I have opened up the permissions to the logon script (for testing) and that doesn't seem to help, it's still not running. Also, I have implemented a domain policy to 'exclude directories in roaming profiles', namely temporary internet files, cookies, etc. This policy works fine for WinNT but doesn't seem to work for Win98, is this a 'feature' of WinNT and not Win98? I did create separate policies for WinNT (ntconfig.POL) and Win98 (config.POL). Other settings within the policy ARE working, for example, restricting the screen saver tab on the display. Joseph Morin Dominion Diagnostics -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] which ACL attributes are supported by Samba?
On February 6, [EMAIL PROTECTED] said: I just tried to set an acl on take ownership it doesn't stick - it should. Read and write attributes does stick. Thanks, that's what I'd seen myself. I guess it's not supported at present. Cheers, Waider. -- [EMAIL PROTECTED] / Yes, it /is/ very personal of me. theres no polite way to deal with sales ppl - Louise -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win98 policies,profiles and logon scripts
On Thu, 6 Feb 2003 [EMAIL PROTECTED] wrote: Here's my smb.conf file. Joe, Looks OK. How are your Win98 configured? 1. In TCP/IP is WINS IP Addr. set to the IP Addr. of your samba server? 2. Have you installed the Client for Microsoft Networks? - configured it to 'Log onto Windows NT Domain'? - set the correct domain name 3. Set the 'Client for Microsoft Networks' as the 'Primary Network Logon'? 4. Set the workgroup name (under 'Identification') to the same as your domain name? - John T. Thanks for the help! # Global parameters [global] workgroup = DOMAINNAME netbios name= SERVERNAME security = USER hosts allow = 192.168.1., 192.168.0., 127. name resolve order = host bcast wide links= No follow symlinks = No socket options = TCP_NODELAY IPTOS_LOWDELAY invalid users = bin daemon adm sync shutdown halt mail news time server = yes encrypt passwords = yes unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully.* os level = 255 wins support= yes local master= yes preferred master = yes domain master = yes domain logons = yes Domain Admin group = @domainadmin logon home= \\%L\%U\.profile logon drive = H: logon path= \\%L\Profiles\.%U logon script= %G.bat add user script = /usr/sbin/useradd -g 201 -d /dev/null -s /bin/false -M %u # # PDC shares # [netlogon] comment = Network Logon Service path = /home/samba/netlogon browseable= no writable = no share modes = no [Profiles] path = /home/samba/profiles browseable= yes writeable = yes force create mode = 0660 force directory mode= 0770 # # User H drives # [homes] read only = No create mask = 0644 browseable= No # # Shares # [public] comment = Public Share path = /data/public writeable = yes create mask = 0664 directory mask = 0775 guest ok = yes # # End config file # Joseph Morin Dominion Diagnostics Michael Paarmann [EMAIL PROTECTED] To 02/06/2003 12:29 [EMAIL PROTECTED] PM cc [EMAIL PROTECTED] Subject Re: [Samba] Win98 policies,profiles and logon scripts Hi ! Please post your smb.conf . It may help to solve your problem. Regards, Michael At 12:10 06.02.2003 -0500, you wrote: I am running Samba 2.2.3a and have my users logging into the 'samba domain'. My WinNT and WinXP users are working fine with roaming profiles and policies. My problem is my Win98 users. The logon script doesn't seem to be working, i.e. when I log onto a Win98 machine (logging into the domain), the logon script doesn't run. I have opened up the permissions to the logon script (for testing) and that doesn't seem to help, it's still not running. Also, I have implemented a domain policy to 'exclude directories in roaming profiles', namely temporary internet files, cookies, etc. This policy works fine for WinNT but doesn't seem to work for Win98, is this a 'feature' of WinNT and not Win98? I did create separate policies for WinNT (ntconfig.POL) and Win98 (config.POL). Other settings within the policy ARE working, for example, restricting the screen saver tab on the display. Joseph Morin Dominion Diagnostics -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Broadcast message with smbclient -M
Hello, Is there a way to broadcast a message with smbclient -M? Also, is there some utility out there with user interface where I can select which machines should receive the message and then send it out? Thanks, Tomas -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Interesting problem with samba and .ntprofile
To ANYONE that can help :), we where using samba version 2.0.7 and everything worked great. we just upgraded to version 2.2.7a. and now we get this weird/wicked problem. sometimes when a user logs out and then trys to log back in it says //servername/.ntprofile/share/file cannot be copied over. i can delete the file and then another file cant be copied over. i at times cant delete the folder or file. windows will say access denied source file is in use. i cant even delete the file when i boot up into safe mode. i have to change the permissions all over just to be able to delete it. it only happens to a few people. now the thing is if i go to a different win2k machine the profile will download file and it will save fine. something is happening since we went to the new version of samba and i cant seem to figure it out. if you need more help or .information please send a email to [EMAIL PROTECTED] Thank you to all smb.conf = workgroup = ??? (our workgroup) security = DOMAIN encrypt passwords = Yes password server = PDC (our pdc) passwd chat = *login*password* %o\n *New*password* %n\n *new*password* %n\n *changed* debug level = 0 max disk size = 1000 logon script = scripts\%U.bat logon path = \\%N\%U\.ntprofile logon home = \\%N\%U\.wprofile homedir map = auto_home NIS homedir = Yes create mask = 0664 directory mask = 0775 hide files = /DesktopFolderDB/TrashFor%m/resource.frk/ delete readonly = Yes -- Ronald Rusnak Wall Street Source 212-479-1451 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Not able to login to Samba P
To all, i have a simulur problem. whenever i log into samba. it tries to copy the profile over but then it hangs and says it cant. i also cant delete the local folder which it copies over to the win2k box. its very strange and weird. it just started to happen when we upgraded to 2.2.7a. are old version worked fine without any problems. no matter what i do there is a problem. deleted his .ntprofile. you name it i basically did it. Ronnie Manjunath H N [EMAIL PROTECTED] wrote in message 04f401c2cb9f$3a29c610$[EMAIL PROTECTED]">news:04f401c2cb9f$3a29c610$[EMAIL PROTECTED]... On Monday, February 03, 2003 7:56 PM Robert Adkins [EMAIL PROTECTED] wrote: I believe that your issue is related to UNIX permissions. The location of your profiles directory must be set to allow all users R/W to it. Create a new group in your group file and add every user to it. Then change the ownership of the profiles directory. Also make sure that all of your users have R/W permissions on that directory. Yea I changed the permissions but now on Win 2k m/c I am getting the following error Windows cannot log on you bcos it cannot find the file specified. (i.e The Profile ) Detail - The system cannot find the file specified. -Original Message- From: Manjunath H N [mailto:[EMAIL PROTECTED]] Sent: Monday, February 03, 2003 5:37 PM To: [EMAIL PROTECTED]; Robert Adkins Subject: [Samba] Not able to login to Samba PDC. Hello All, I am getting Windows cannot create profile directory, when I try to log on to the Samba PDC, on Win2K m/c Also I am not getting any log messages, this is the only log I got, the second log I got a long time back the log file is not getting appended after further logins [2003/02/03 17:06:24, 0] smbd/service.c:make_connection(384) administrator logged in as admin user (root privileges) [2003/02/03 17:13:29, 0] lib/util_sock.c:read_data(436) read_data: read failure for 4. Error = Connection reset by peer But earlier for the same problem I was getting these logs [2003/02/01 13:53:08, 0] smbd/service.c:make_connection(252) iwave-123 (192.168.2.157) couldn't find service profiles DISCLAIMER: This e-mail and any attachment (s) is for authorised use by the intended recipient (s) only. It may contain proprietary material, confidential information and/or be subject to the legal privilege of iWave Systems Technologies Private Limited. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from retaining, using, copying, alerting or disclosing the content of this message. Thank you for your co-operation. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win98 policies,profiles and logon scripts
John, Thanks for the prompt response. Here's what I have. 1. In TCP/IP is WINS IP Addr. set to the IP Addr. of your samba server? Yes, using winipcfg, the Primary WINS Server is set to my samba server 2. Have you installed the Client for Microsoft Networks? - configured it to 'Log onto Windows NT Domain'? - set the correct domain name Yes, Client for Microsoft Networks is installed, configured to log onto Windows NT Domain, yes, set to the correct domain. but what about the 'Network logon options' ? I have tried both the 'Quick Logon' and 'Logon and restore network connections'. 3. Set the 'Client for Microsoft Networks' as the 'Primary Network Logon'? - Yes 4. Set the workgroup name (under 'Identification') to the same as your domain name? - Yes FYI, System is Win98 Second edition. Also, in a command window using 'net use' I can see \\sambaserver\username \\sambaserver\NETLOGON but neither are mapped to a drive. I can also manually map drives using the net use command. I also see a 'Windows NT logon script' popup window at logon, a command window also pops up but immediately closes and I cannot see any of the commands (if any) that are being executed. thank you for all the help. Joseph Morin Dominion Diagnostics John H Terpstra [EMAIL PROTECTED] To 02/06/2003 01:22 [EMAIL PROTECTED] PM cc Michael Paarmann [EMAIL PROTECTED], [EMAIL PROTECTED] Subject Re: [Samba] Win98 policies,profiles and logon scripts On Thu, 6 Feb 2003 [EMAIL PROTECTED] wrote: Here's my smb.conf file. Joe, Looks OK. How are your Win98 configured? 1. In TCP/IP is WINS IP Addr. set to the IP Addr. of your samba server? 2. Have you installed the Client for Microsoft Networks? - configured it to 'Log onto Windows NT Domain'? - set the correct domain name 3. Set the 'Client for Microsoft Networks' as the 'Primary Network Logon'? 4. Set the workgroup name (under 'Identification') to the same as your domain name? - John T. Thanks for the help! # Global parameters [global] workgroup = DOMAINNAME netbios name= SERVERNAME security = USER hosts allow = 192.168.1., 192.168.0., 127. name resolve order = host bcast wide links= No follow symlinks = No socket options = TCP_NODELAY IPTOS_LOWDELAY invalid users = bin daemon adm sync shutdown halt mail news time server = yes encrypt passwords = yes unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully.* os level = 255 wins support= yes local master= yes preferred master = yes domain master = yes domain logons = yes Domain Admin group = @domainadmin logon home= \\%L\%U\.profile logon drive = H: logon path= \\%L\Profiles\.%U logon script= %G.bat add user script = /usr/sbin/useradd -g 201 -d /dev/null -s /bin/false -M %u # # PDC shares # [netlogon] comment = Network Logon Service path = /home/samba/netlogon browseable= no writable = no share modes = no [Profiles] path = /home/samba/profiles browseable= yes writeable = yes force create mode = 0660 force directory mode= 0770 # # User H drives # [homes] read only = No create mask = 0644 browseable= No # # Shares # [public]
Re: [Samba] Win98 policies,profiles and logon scripts
John, Do I need a machine account for this win98 machine? I have them auto-created for Win2k and WinXP machines, but I haven't created one manually, and it didn't get auto-created. Thanks again, Joseph Morin Dominion Diagnostics John H Terpstra [EMAIL PROTECTED] To 02/06/2003 01:22 [EMAIL PROTECTED] PM cc Michael Paarmann [EMAIL PROTECTED], [EMAIL PROTECTED] Subject Re: [Samba] Win98 policies,profiles and logon scripts On Thu, 6 Feb 2003 [EMAIL PROTECTED] wrote: Here's my smb.conf file. Joe, Looks OK. How are your Win98 configured? 1. In TCP/IP is WINS IP Addr. set to the IP Addr. of your samba server? 2. Have you installed the Client for Microsoft Networks? - configured it to 'Log onto Windows NT Domain'? - set the correct domain name 3. Set the 'Client for Microsoft Networks' as the 'Primary Network Logon'? 4. Set the workgroup name (under 'Identification') to the same as your domain name? - John T. Thanks for the help! # Global parameters [global] workgroup = DOMAINNAME netbios name= SERVERNAME security = USER hosts allow = 192.168.1., 192.168.0., 127. name resolve order = host bcast wide links= No follow symlinks = No socket options = TCP_NODELAY IPTOS_LOWDELAY invalid users = bin daemon adm sync shutdown halt mail news time server = yes encrypt passwords = yes unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully.* os level = 255 wins support= yes local master= yes preferred master = yes domain master = yes domain logons = yes Domain Admin group = @domainadmin logon home= \\%L\%U\.profile logon drive = H: logon path= \\%L\Profiles\.%U logon script= %G.bat add user script = /usr/sbin/useradd -g 201 -d /dev/null -s /bin/false -M %u # # PDC shares # [netlogon] comment = Network Logon Service path = /home/samba/netlogon browseable= no writable = no share modes = no [Profiles] path = /home/samba/profiles browseable= yes writeable = yes force create mode = 0660 force directory mode= 0770 # # User H drives # [homes] read only = No create mask = 0644 browseable= No # # Shares # [public] comment = Public Share path = /data/public writeable = yes create mask = 0664 directory mask = 0775 guest ok = yes # # End config file # Joseph Morin Dominion Diagnostics Michael Paarmann [EMAIL PROTECTED] To 02/06/2003 12:29 [EMAIL PROTECTED] PM cc [EMAIL PROTECTED] Subject Re: [Samba] Win98 policies,profiles and logon scripts Hi ! Please post your smb.conf . It may help to solve your problem. Regards, Michael At 12:10 06.02.2003 -0500, you wrote: I am running Samba 2.2.3a and have my users logging into the 'samba domain'. My WinNT and WinXP users are working fine with roaming profiles and policies. My problem is my Win98 users. The logon script doesn't seem to be working, i.e. when I log onto a Win98 machine (logging into the domain), the
Re: [Samba] Win98 policies,profiles and logon scripts
On Thu, 6 Feb 2003 [EMAIL PROTECTED] wrote: John, Thanks for the prompt response. Here's what I have. 1. In TCP/IP is WINS IP Addr. set to the IP Addr. of your samba server? Yes, using winipcfg, the Primary WINS Server is set to my samba server 2. Have you installed the Client for Microsoft Networks? - configured it to 'Log onto Windows NT Domain'? - set the correct domain name Yes, Client for Microsoft Networks is installed, configured to log onto Windows NT Domain, yes, set to the correct domain. but what about the 'Network logon options' ? I have tried both the 'Quick Logon' and 'Logon and restore network connections'. 3. Set the 'Client for Microsoft Networks' as the 'Primary Network Logon'? - Yes 4. Set the workgroup name (under 'Identification') to the same as your domain name? - Yes FYI, System is Win98 Second edition. Ok. Also, in a command window using 'net use' I can see \\sambaserver\username \\sambaserver\NETLOGON but neither are mapped to a drive. I can also manually map drives using the net use command. Do you have statements in your logon script to attache them? If so, what are they? You should have somethings like: net use h: /Delete net use h: \\server\homes /yes The above \\server\homes implies of course your samba server's name, and the 'homes' info automatically translates to the users' homedir. Alternatively you could do: net use h: /D net use H: /HOME You might also like to forcibly close the netlogon connection by: net \\server\netlogon /D And set your workstation time clock by: net time \\server /set /yes PS: For this to work on NT/2K/XP you need to set appropriate security settings as administrator on the workstation. I also see a 'Windows NT logon script' popup window at logon, a command window also pops up but immediately closes and I cannot see any of the commands (if any) that are being executed. Well, this means that your logon script is being run. If you want to see the commands that have been executed you need to put a pause statement in the logon script. That way you get to hit enter to close the logon box - and thus you can see what the output of your commands was. - John T. thank you for all the help. Joseph Morin Dominion Diagnostics John H Terpstra [EMAIL PROTECTED] To 02/06/2003 01:22 [EMAIL PROTECTED] PM cc Michael Paarmann [EMAIL PROTECTED], [EMAIL PROTECTED] Subject Re: [Samba] Win98 policies,profiles and logon scripts On Thu, 6 Feb 2003 [EMAIL PROTECTED] wrote: Here's my smb.conf file. Joe, Looks OK. How are your Win98 configured? 1. In TCP/IP is WINS IP Addr. set to the IP Addr. of your samba server? 2. Have you installed the Client for Microsoft Networks? - configured it to 'Log onto Windows NT Domain'? - set the correct domain name 3. Set the 'Client for Microsoft Networks' as the 'Primary Network Logon'? 4. Set the workgroup name (under 'Identification') to the same as your domain name? - John T. Thanks for the help! # Global parameters [global] workgroup = DOMAINNAME netbios name= SERVERNAME security = USER hosts allow = 192.168.1., 192.168.0., 127. name resolve order = host bcast wide links= No follow symlinks = No socket options = TCP_NODELAY IPTOS_LOWDELAY invalid users = bin daemon adm sync shutdown halt mail news time server = yes encrypt passwords = yes unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully.* os level = 255 wins support= yes local master= yes preferred master = yes domain master = yes domain logons = yes Domain Admin group = @domainadmin logon home= \\%L\%U\.profile logon drive = H: logon path= \\%L\Profiles\.%U logon script= %G.bat add user script = /usr/sbin/useradd -g 201 -d /dev/null -s /bin/false -M %u # # PDC shares # [netlogon] comment = Network Logon Service path = /home/samba/netlogon browseable= no
Re: [Samba] Win98 policies,profiles and logon scripts
On Thu, 6 Feb 2003 [EMAIL PROTECTED] wrote: John, Do I need a machine account for this win98 machine? I have them auto-created for Win2k and WinXP machines, but I haven't created one manually, and it didn't get auto-created. No. Samba works the same way as NT/2K servers would. Win9X/Me do NOT have full domain security capabilities and thus can not play as a fully secured domain member. Samba applies to MS Windows XP Home edition. Windows 9X/Me can use the network logon capability, MS Windows XP Home Edition apparently can't use the network logon facility. You can use the Windows 95/98 Group Policy Editor (on the Win98 CD under \tools\reskit\poledit) for 95/98/Me to set them so that the user can not get past the logon screen unless authenticated to a network logon server (NT Domain). - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Interesting problem with samba and .ntprofile
here is a update We are now trying to upgrade all of our domain client machines from WinNT to Windows2000 (we're actually doing clean installs, not upgrades). Under our limited testing this worked well. Now that we're rolling it out to the masses in our department, many users are beginning to have roaming profile problems. Upon logging in, Win2k (SP3) gives access denied errors to seemingly random files in a users' profile, and then login using a local profile. I delete the trouble-maker files, and a user can login... once. They logout, and try to login again, and then we get some access denied errors again. (I can access these files by hand just fine once logged in). same problem someone else had a from a long time ago. Ronald [EMAIL PROTECTED] wrote in message b1u5jb$d9t$[EMAIL PROTECTED]">news:b1u5jb$d9t$[EMAIL PROTECTED]... To ANYONE that can help :), we where using samba version 2.0.7 and everything worked great. we just upgraded to version 2.2.7a. and now we get this weird/wicked problem. sometimes when a user logs out and then trys to log back in it says //servername/.ntprofile/share/file cannot be copied over. i can delete the file and then another file cant be copied over. i at times cant delete the folder or file. windows will say access denied source file is in use. i cant even delete the file when i boot up into safe mode. i have to change the permissions all over just to be able to delete it. it only happens to a few people. now the thing is if i go to a different win2k machine the profile will download file and it will save fine. something is happening since we went to the new version of samba and i cant seem to figure it out. if you need more help or .information please send a email to [EMAIL PROTECTED] Thank you to all smb.conf = workgroup = ??? (our workgroup) security = DOMAIN encrypt passwords = Yes password server = PDC (our pdc) passwd chat = *login*password* %o\n *New*password* %n\n *new*password* %n\n *changed* debug level = 0 max disk size = 1000 logon script = scripts\%U.bat logon path = \\%N\%U\.ntprofile logon home = \\%N\%U\.wprofile homedir map = auto_home NIS homedir = Yes create mask = 0664 directory mask = 0775 hide files = /DesktopFolderDB/TrashFor%m/resource.frk/ delete readonly = Yes -- Ronald Rusnak Wall Street Source 212-479-1451 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Interesting problem with samba and .ntprofile
Ronald, I am not sure, but I think I remember reading that some strange behavior connected with roaming profiles can be taken care of by turning nt acl support off on the profile share. I don't know if it applies here or if is is dependent on other unknown factors (OS of Samba machine, phase of moon, ...). Good luck, Troy Ronald [EMAIL PROTECTED] 02/06/03 02:25PM here is a update We are now trying to upgrade all of our domain client machines from WinNT to Windows2000 (we're actually doing clean installs, not upgrades). Under our limited testing this worked well. Now that we're rolling it out to the masses in our department, many users are beginning to have roaming profile problems. Upon logging in, Win2k (SP3) gives access denied errors to seemingly random files in a users' profile, and then login using a local profile. I delete the trouble-maker files, and a user can login... once. They logout, and try to login again, and then we get some access denied errors again. (I can access these files by hand just fine once logged in). same problem someone else had a from a long time ago. Ronald [EMAIL PROTECTED] wrote in message b1u5jb$d9t$[EMAIL PROTECTED]">news:b1u5jb$d9t$[EMAIL PROTECTED]... To ANYONE that can help :), we where using samba version 2.0.7 and everything worked great. we just upgraded to version 2.2.7a. and now we get this weird/wicked problem. sometimes when a user logs out and then trys to log back in it says //servername/.ntprofile/share/file cannot be copied over. i can delete the file and then another file cant be copied over. i at times cant delete the folder or file. windows will say access denied source file is in use. i cant even delete the file when i boot up into safe mode. i have to change the permissions all over just to be able to delete it. it only happens to a few people. now the thing is if i go to a different win2k machine the profile will download file and it will save fine. something is happening since we went to the new version of samba and i cant seem to figure it out. if you need more help or .information please send a email to [EMAIL PROTECTED] Thank you to all smb.conf = workgroup = ??? (our workgroup) security = DOMAIN encrypt passwords = Yes password server = PDC (our pdc) passwd chat = *login*password* %o\n *New*password* %n\n *new*password* %n\n *changed* debug level = 0 max disk size = 1000 logon script = scripts\%U.bat logon path = \\%N\%U\.ntprofile logon home = \\%N\%U\.wprofile homedir map = auto_home NIS homedir = Yes create mask = 0664 directory mask = 0775 hide files = /DesktopFolderDB/TrashFor%m/resource.frk/ delete readonly = Yes -- Ronald Rusnak Wall Street Source 212-479-1451 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Interesting problem with samba and .ntprofile
http://us1.samba.org/samba/ftp/docs/README.Win2kSP2 it has info on that there. [EMAIL PROTECTED] writes: Ronald, I am not sure, but I think I remember reading that some strange behavior connected with roaming profiles can be taken care of by turning nt acl support off on the profile share. I don't know if it applies here or if is is dependent on other unknown factors (OS of Samba machine, phase of moon, ...). Good luck, Troy Ronald [EMAIL PROTECTED] 02/06/03 02:25PM here is a update We are now trying to upgrade all of our domain client machines from WinNT to Windows2000 (we're actually doing clean installs, not upgrades). Under our limited testing this worked well. Now that we're rolling it out to the masses in our department, many users are beginning to have roaming profile problems. Upon logging in, Win2k (SP3) gives access denied errors to seemingly random files in a users' profile, and then login using a local profile. I delete the trouble-maker files, and a user can login... once. They logout, and try to login again, and then we get some access denied errors again. (I can access these files by hand just fine once logged in). same problem someone else had a from a long time ago. Ronald [EMAIL PROTECTED] wrote in message b1u5jb$d9t$[EMAIL PROTECTED]">news:b1u5jb$d9t$[EMAIL PROTECTED]... To ANYONE that can help :), we where using samba version 2.0.7 and everything worked great. we just upgraded to version 2.2.7a. and now we get this weird/wicked problem. sometimes when a user logs out and then trys to log back in it says //servername/.ntprofile/share/file cannot be copied over. i can delete the file and then another file cant be copied over. i at times cant delete the folder or file. windows will say access denied source file is in use. i cant even delete the file when i boot up into safe mode. i have to change the permissions all over just to be able to delete it. it only happens to a few people. now the thing is if i go to a different win2k machine the profile will download file and it will save fine. something is happening since we went to the new version of samba and i cant seem to figure it out. if you need more help or .information please send a email to [EMAIL PROTECTED] Thank you to all smb.conf = workgroup = ??? (our workgroup) security = DOMAIN encrypt passwords = Yes password server = PDC (our pdc) passwd chat = *login*password* %o\n *New*password* %n\n *new*password* %n\n *changed* debug level = 0 max disk size = 1000 logon script = scripts\%U.bat logon path = \\%N\%U\.ntprofile logon home = \\%N\%U\.wprofile homedir map = auto_home NIS homedir = Yes create mask = 0664 directory mask = 0775 hide files = /DesktopFolderDB/TrashFor%m/resource.frk/ delete readonly = Yes -- Ronald Rusnak Wall Street Source 212-479-1451 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba Kyle Loree Rendek Communications [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Interesting problem with samba and .ntprofile
Dear Troy, Already did that and still no luck. i noticed that when there was a + at the end of the directories. and reran the config. everything was working fine untill this new upgrade. i have read on the forums about it but nobody really gives a answer. i also added this user to are default group and that didnt work. ive been racking my brain all day over this :( thanks for the help though Troy Ronald On Thu, 6 Feb 2003, Troy.A Johnson wrote: Ronald, I am not sure, but I think I remember reading that some strange behavior connected with roaming profiles can be taken care of by turning nt acl support off on the profile share. I don't know if it applies here or if is is dependent on other unknown factors (OS of Samba machine, phase of moon, ...). Good luck, Troy Ronald [EMAIL PROTECTED] 02/06/03 02:25PM here is a update We are now trying to upgrade all of our domain client machines from WinNT to Windows2000 (we're actually doing clean installs, not upgrades). Under our limited testing this worked well. Now that we're rolling it out to the masses in our department, many users are beginning to have roaming profile problems. Upon logging in, Win2k (SP3) gives access denied errors to seemingly random files in a users' profile, and then login using a local profile. I delete the trouble-maker files, and a user can login... once. They logout, and try to login again, and then we get some access denied errors again. (I can access these files by hand just fine once logged in). same problem someone else had a from a long time ago. Ronald [EMAIL PROTECTED] wrote in message b1u5jb$d9t$[EMAIL PROTECTED]">news:b1u5jb$d9t$[EMAIL PROTECTED]... To ANYONE that can help :), we where using samba version 2.0.7 and everything worked great. we just upgraded to version 2.2.7a. and now we get this weird/wicked problem. sometimes when a user logs out and then trys to log back in it says //servername/.ntprofile/share/file cannot be copied over. i can delete the file and then another file cant be copied over. i at times cant delete the folder or file. windows will say access denied source file is in use. i cant even delete the file when i boot up into safe mode. i have to change the permissions all over just to be able to delete it. it only happens to a few people. now the thing is if i go to a different win2k machine the profile will download file and it will save fine. something is happening since we went to the new version of samba and i cant seem to figure it out. if you need more help or .information please send a email to [EMAIL PROTECTED] Thank you to all smb.conf = workgroup = ??? (our workgroup) security = DOMAIN encrypt passwords = Yes password server = PDC (our pdc) passwd chat = *login*password* %o\n *New*password* %n\n *new*password* %n\n *changed* debug level = 0 max disk size = 1000 logon script = scripts\%U.bat logon path = \\%N\%U\.ntprofile logon home = \\%N\%U\.wprofile homedir map = auto_home NIS homedir = Yes create mask = 0664 directory mask = 0775 hide files = /DesktopFolderDB/TrashFor%m/resource.frk/ delete readonly = Yes -- Ronald Rusnak Wall Street Source 212-479-1451 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Novice question
Hi, New to Samba this list, so please forgive if I make a faux pas. I've got a Redhat 7.3 box with Samba, 2 Win stations, called ws1 ws2. When either station creates files on the server, all the files get created with permissions of rw-r--r-- (644). How do I get them created with 777? ws1 ws2 are both set up as entries in the /etc/passwd file in the samba password file, with umask 000 in their respective .bash_profile's. root user also has umask 000. The smb.conf attempts are shown below: [homes] comment = Home Directories browseable = yes public = yes writable = yes create mode = 0777 ; valid users = %S directory mode = 0777 read only = no # If you want users samba doesn't recognize to be mapped to a guest user ; map to guest = bad user Thanks for any help, I'll go ahead say Duh! right now. Glen -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 2.2.7 as printserver
I have had this running now for 3 weeks and have not been able to figure a few things out. Samba 2.2.7-1 on RH7.2 using lprng and doing the print serving for windows XP clients I added printer drivers for each printer via APW facility. I can add drivers all day long, but I cannot remove them, the button is greyed out. I've got several color HP printer drivers that are causing problems but I can't do anything with them. I suspect a permissions issue, but I have exhausted every possibility that I know of (wich isn't very much). Phillip M. Bryant ITT Industries, Advanced Engineering and Sciences Network Administrator Albuquerque, NM 87120 If this email is not intended for you, or you are not responsible for the delivery of this message to the addressee, please note that this message may contain ITT Privileged/Proprietary Information. In such a case, you may not copy or deliver this message to anyone. You should destroy this message and kindly notify the sender by reply email. Information contained in this message that does not relate to the business of ITT is neither endorsed by nor attributable to ITT. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Novice question
Glen, Add: force create mode = 0777 force directory mode = 0777 to the config file. That is a sure way to accomplish your goal. You could change the default umask for bash in /etc/bashrc, but this may or may not affect the default umask of Samba created files. You could try it though. :-/ Troy Glen Overman [EMAIL PROTECTED] 02/06/03 03:32PM Hi, New to Samba this list, so please forgive if I make a faux pas. I've got a Redhat 7.3 box with Samba, 2 Win stations, called ws1 ws2. When either station creates files on the server, all the files get created with permissions of rw-r--r-- (644). How do I get them created with 777? ws1 ws2 are both set up as entries in the /etc/passwd file in the samba password file, with umask 000 in their respective .bash_profile's. root user also has umask 000. The smb.conf attempts are shown below: [homes] comment = Home Directories browseable = yes public = yes writable = yes create mode = 0777 ; valid users = %S directory mode = 0777 read only = no # If you want users samba doesn't recognize to be mapped to a guest user ; map to guest = bad user Thanks for any help, I'll go ahead say Duh! right now. Glen -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Novice question
On Thu, 2003-02-06 at 16:32, Glen Overman wrote: Hi, New to Samba this list, so please forgive if I make a faux pas. I've got a Redhat 7.3 box with Samba, 2 Win stations, called ws1 ws2. When either station creates files on the server, all the files get created with permissions of rw-r--r-- (644). How do I get them created with 777? ws1 ws2 are both set up as entries in the /etc/passwd file in the samba password file, with umask 000 in their respective .bash_profile's. root user also has umask 000. The smb.conf attempts are shown below: are you looking for force create mode (S) This parameter specifies a set of UNIX mode bit permissions that will always be set on a file created by Samba. This is done by bitwise 'OR'ing these bits onto the mode bits of a file that is being created or having its permissions changed. The default for this parameter is (in octal) 000. The modes in this parameter are bitwise 'OR'ed onto the file mode after the mask set in the create mask parameter is applied. See also the parameter create mask for details on masking mode bits on files. See also the inherit permissions parameter. Default: force create mode = 000 Example: force create mode = 0755 would force all created files to have read and execute permissions set for 'group' and 'other' as well as the read/write/execute bits set for the 'user'. -- Bradley W. Langhorst [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba quotas (one more)
The problem is with Windows doing delayed writes. Windows before it writes anything, it sets the file properties. Setting the file properties always succeeds. So even though the file copy is unsuccessful, file size is shown correctly. You can use smb.conf variable strict allocate = yes to prevent these kinds of problems. However, it has some performance impact. Try with the above variable turned on and see if you still experience the problem. - Ranjit HP CIFS Team -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dan Bar Sent: Tuesday, February 04, 2003 3:56 PM To: [EMAIL PROTECTED] Subject: [Samba] Samba quotas (one more) Hello again (I hope it's not too much to have two questions in one day :), Currently I'm testing quota support on Linux system with kernel 2.4.18 + XFS 1.1 patch + Samba 2.2.7 (--with-quota compiled) and I went into one really unpleasant problem when accesing Samba share from Windows 2000 SP3 with Total commander 5.5. When user reach soft limit, then he'll get a warning message Low space, do you want to continue ?. Copy can be forced and up to this moment everything is ok. But at moment when trying to copy a file which will cause to overreach hard quota limit, then happens this: - warning message is displayed but user is allowed to enforce copy. - Windows then displays error message windows with (translated): Delayed write failed ... Data were lost - Destination file has same size as source, but content is different! - Any further copy try will fail with message Write protected ... So where is the problem? Is it bug in Samba (quota support is in .configure file announced as experimental), XFS quota support, or in Total commander (since same action made with Windows Explorer is ok, copy over hard limit is denied). In case you think it's not a bug (or some kind of misconfiguration), does other OS's /filesystems behave the same way ? Thanks a lot in advance for any answer, Dan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Re: Interesting problem with samba and .ntprofile
Kyle and everyone else, I tried that also and still it didnt work. so i then installed sp3 and W00t. works fine now. i dont have much time to look into it as im in a rush and have about 100x other things to do but i will look into it more tomorrow. thanks for the help everyone. Sincerely Ronald Kyle Loree [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... http://us1.samba.org/samba/ftp/docs/README.Win2kSP2 it has info on that there. [EMAIL PROTECTED] writes: Ronald, I am not sure, but I think I remember reading that some strange behavior connected with roaming profiles can be taken care of by turning nt acl support off on the profile share. I don't know if it applies here or if is is dependent on other unknown factors (OS of Samba machine, phase of moon, ...). Good luck, Troy Ronald [EMAIL PROTECTED] 02/06/03 02:25PM here is a update We are now trying to upgrade all of our domain client machines from WinNT to Windows2000 (we're actually doing clean installs, not upgrades). Under our limited testing this worked well. Now that we're rolling it out to the masses in our department, many users are beginning to have roaming profile problems. Upon logging in, Win2k (SP3) gives access denied errors to seemingly random files in a users' profile, and then login using a local profile. I delete the trouble-maker files, and a user can login... once. They logout, and try to login again, and then we get some access denied errors again. (I can access these files by hand just fine once logged in). same problem someone else had a from a long time ago. Ronald [EMAIL PROTECTED] wrote in message b1u5jb$d9t$[EMAIL PROTECTED]">news:b1u5jb$d9t$[EMAIL PROTECTED]... To ANYONE that can help :), we where using samba version 2.0.7 and everything worked great. we just upgraded to version 2.2.7a. and now we get this weird/wicked problem. sometimes when a user logs out and then trys to log back in it says //servername/.ntprofile/share/file cannot be copied over. i can delete the file and then another file cant be copied over. i at times cant delete the folder or file. windows will say access denied source file is in use. i cant even delete the file when i boot up into safe mode. i have to change the permissions all over just to be able to delete it. it only happens to a few people. now the thing is if i go to a different win2k machine the profile will download file and it will save fine. something is happening since we went to the new version of samba and i cant seem to figure it out. if you need more help or .information please send a email to [EMAIL PROTECTED] Thank you to all smb.conf = workgroup = ??? (our workgroup) security = DOMAIN encrypt passwords = Yes password server = PDC (our pdc) passwd chat = *login*password* %o\n *New*password* %n\n *new*password* %n\n *changed* debug level = 0 max disk size = 1000 logon script = scripts\%U.bat logon path = \\%N\%U\.ntprofile logon home = \\%N\%U\.wprofile homedir map = auto_home NIS homedir = Yes create mask = 0664 directory mask = 0775 hide files = /DesktopFolderDB/TrashFor%m/resource.frk/ delete readonly = Yes -- Ronald Rusnak Wall Street Source 212-479-1451 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba Kyle Loree Rendek Communications [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Strange File Permission
Hi, I have a Samba share [docs] comment=Document Control path=/srv/doccon write list=root, MYDOMAIN\doccon read only=no create mask=0660 force create mode=0660 directory mask=0750 hide undreadable=yes The files are under /srv/doccon are given 0770 for doccon:MYDOMAIN\Doc Writers, with ACL setfacl -R -m g:Group B:rwx /srv/doccon/docindex/ setfacl -R -d -m g:Group B:rwx /srv/doccon/docindex/ Group B users can rwx documents under NT 4.0 no problem. But if the user edits the document under W2K the permission is assigned read-only access (470). No one can edit the document. Would someone please tell me what am I doing wrong? Regards, Norman -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win98 policies,profiles and logon scripts
John, Thanks for the help! It's working! In my logon script for Win2K users I had a line something like this: NET USE H:\\server\%username% And this wouldn't run in win98. Changing it to what you suggested: NET USE H:/HOME works just fine. I have the NET TIME command running successfully in win98 also. I do have a question about the permissions required to set the system time on Win2k and WinXP though... Exactly WHAT permissions need to be set? And is this a registry edit? I don't see where this can be configured using the poledit.exe to create a domain policy. (Yes, I'm a unix guy NOT a windows guy, but I'm learning, unfortunately) Joseph Morin Dominion Diagnostics John H Terpstra [EMAIL PROTECTED] To 02/06/2003 02:37 [EMAIL PROTECTED] PM cc Michael Paarmann [EMAIL PROTECTED], [EMAIL PROTECTED] Subject Re: [Samba] Win98 policies,profiles and logon scripts On Thu, 6 Feb 2003 [EMAIL PROTECTED] wrote: John, Thanks for the prompt response. Here's what I have. 1. In TCP/IP is WINS IP Addr. set to the IP Addr. of your samba server? Yes, using winipcfg, the Primary WINS Server is set to my samba server 2. Have you installed the Client for Microsoft Networks? - configured it to 'Log onto Windows NT Domain'? - set the correct domain name Yes, Client for Microsoft Networks is installed, configured to log onto Windows NT Domain, yes, set to the correct domain. but what about the 'Network logon options' ? I have tried both the 'Quick Logon' and 'Logon and restore network connections'. 3. Set the 'Client for Microsoft Networks' as the 'Primary Network Logon'? - Yes 4. Set the workgroup name (under 'Identification') to the same as your domain name? - Yes FYI, System is Win98 Second edition. Ok. Also, in a command window using 'net use' I can see \\sambaserver\username \\sambaserver\NETLOGON but neither are mapped to a drive. I can also manually map drives using the net use command. Do you have statements in your logon script to attache them? If so, what are they? You should have somethings like: net use h: /Delete net use h: \\server\homes /yes The above \\server\homes implies of course your samba server's name, and the 'homes' info automatically translates to the users' homedir. Alternatively you could do: net use h: /D net use H: /HOME You might also like to forcibly close the netlogon connection by: net \\server\netlogon /D And set your workstation time clock by: net time \\server /set /yes PS: For this to work on NT/2K/XP you need to set appropriate security settings as administrator on the workstation. I also see a 'Windows NT logon script' popup window at logon, a command window also pops up but immediately closes and I cannot see any of the commands (if any) that are being executed. Well, this means that your logon script is being run. If you want to see the commands that have been executed you need to put a pause statement in the logon script. That way you get to hit enter to close the logon box - and thus you can see what the output of your commands was. - John T. thank you for all the help. Joseph Morin Dominion Diagnostics John H Terpstra [EMAIL PROTECTED] To 02/06/2003 01:22 [EMAIL PROTECTED] PM cc Michael Paarmann [EMAIL PROTECTED], [EMAIL PROTECTED] Subject Re: [Samba] Win98 policies,profiles and logon scripts On Thu, 6 Feb 2003 [EMAIL PROTECTED] wrote: Here's my smb.conf file. Joe, Looks OK. How are your Win98 configured? 1. In TCP/IP is WINS IP Addr. set to the IP Addr. of your samba server? 2. Have you installed
[Samba] password expire time
In Samba 2.2.7a, 'password expire time' appears to be being ignored. When I run 'smbstatus' it says: Unknown parameter encountered: password expire time Ignoring unknown parameter password expire time What should I be using to force a password change every n days? Regards, -- Adam Smith Information Technology Officer SAGE Automation Ltd. [EMAIL PROTECTED] http://www.sageautomation.com Phone: (08) 8276 0703 Fax: (08) 8276 0799 Mobile: 0414 895 273 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] quick question re: smb.conf parameters
From the smb.con man page: Note that all S parameters can also be specified in the [global] section - in which case they will define the default behavior for all services. Joel On Thu, Feb 06, 2003 at 11:07:46AM -0600, Henry, Brad ERM wrote: Ok, I know this is a stupid question but im having problems with some shares and so I have to ask: Are share parameters specified within the [global] section used as defaults for my other shares, or are they ignored? For example, if I set veto oplock files = /*.DBM/*.dbm/ within the [global] section, will that trickle down to my shares if I don't have veto oplock files explicitly set within them? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] dual-boot and gettings SIDs to match
Is there a way to get the Windows side and the Linux side (running samba) of a dual boot box to have the same SID? I want the box to be a member of a domain run by a Samba PDC whether it is in Windows or Linux. -- --- Paul Raines email: [EMAIL PROTECTED] MGH/MIT/HMS Athinoula A. Martinos Center for Biomedical Imaging 149 (2301) 13th Streettel:(617)-724-2369 Charlestown, MA 02129 USA fax:(617)-726-7422 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Broadcast message with smbclient -M
I don't know of a simple broadcast method. To broadcast to all clients on your network, I can think of two possibilities. There is a findsmb Perl script which comes with the samba. With nmbd turned off, it will look for responding machines. Or, if you have a wins server, smbclient -L winserver will list all the servers known to it. After that, you have to write a script, I guess. If you just want to broadcast to some clients, this could be another simple script. script: #!/bin/bash cat MyMessage | smbclient -M netbios1 cat MyMessage | smbclient -M netbios2 cat MyMessage | smbclient -M netbios3 Then, put your message into file MyMessage and run the script. To be more organized, you could keep all your users in one file, users: netbios1 netbios2 netbios3 Then, your script might be : #!/bin/bash for i in `cat users` do cat MyMessage | smbclient -M $i done I haven't tried any of this stuff out, but, it sure looks simple. Forget the user interface for this stuff. You are better off without it. Joel On Thu, Feb 06, 2003 at 11:28:32AM -0700, Tomas Florian wrote: Hello, Is there a way to broadcast a message with smbclient -M? Also, is there some utility out there with user interface where I can select which machines should receive the message and then send it out? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Not able to login to Samba P
Ronald schrieb: To all, i have a simulur problem. whenever i log into samba. it tries to copy the profile over but then it hangs and says it cant. i also cant delete the local folder which it copies over to the win2k box. its very strange and weird. it just started to happen when we upgraded to 2.2.7a. are old version u must login as local administrator to your w2k box, then go into the profile, get ownership (i hope it's the right word) of the broken dirs/files and change the userrights. - after that all runs again. we had this problem a view times with w2k/sp2 boxes. never with w2k/sp3. but i don't know if its a problem from samba or w2k. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RE: Winbind on HPUX 11, some small progress
Hi Miles, This sounds like a PAM_USER_UNKNOWN13 error. Which would indicate that winbind daemon did it's job (ie passed the username and password to the password server ,and got validation back that the user is authenticated, but then when it went thru the nsswitch stuff to 'look up' the user, that failed. Kinda wierd. I don't have your original post, but I'm assuming that you have passwd: files winbind group: files winbind in your /etc/nsswitch.conf file and that you have working links to the winbind nss code (look something like this): 46 Aug 27 11:16 /usr/lib/libnss_winbind.1 - /usr/local/samba/lib/winbind/libnss_winbind.so To verify that your nsswitch code is working compile the getent.c program I have attached to this message, and then verify that you can get an appropriate uid/gid back for a user defined on your NT password server in the following manner; getent passwd domainnamedomainseparatorusername (for instance on my system, I use '+' as winbind domain separator, and my domain is atl-wtec, so: getent passwd atl-wtec+administrator returns me the 'passwd' entry faked up from the NT domain controller I am a member of. Just a thought, Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 04, 2003 21:28 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; Kim (E-mail) Subject: Winbind on HPUX 11, some small progress Hi All, Well, i've managed to enable some debugging in syslog, I had to put in /etc/syslog.conf ;*.debug on the syslog line. So at least I have an error which is being returned into syslog from winbind. This is what I get from winbind Feb 4 21:13:17 coastdr pam_winbind[20753]: Verify user `lonnie' Feb 4 21:13:18 coastdr pam_winbind[20753]: user 'lonnie' granted acces Feb 4 21:13:18 coastdr pam_winbind[20753]: LOGIN: exiting with return code 13 This is what I get from pamsmb (ignore the dates, they are a bit funny for some reason) Feb 5 14:53:55 coastdr pamsmbd[20119]: server: remote auth user unix:trainingus er nt:traininguser NTDOM:WESTCOASTDHB PDC:COASTDB BDC: Feb 5 14:53:55 coastdr pamsmbd[20119]: cache_add: inserted entry Feb 4 20:53:55 coastdr : pamsmbd: Got something back... 0 Feb 4 20:53:55 coastdr : pam_smb: got back 0 username traininguser Feb 4 20:53:55 coastdr : LOGIN: exiting with return code 13 So the error with pamsmb and winbind is the same. I've done a man on login and can only find a description of errors, not the error codes. What is error code 13? If I can find that out it will make looking for it a bit easier. I thought it might be that the shell doens't exist, but I tried making a user with a invalid shell and get back error code 1, so its not that. Ideas? Cheers Miles -Original Message- From: Miles Roper Sent: Monday, 3 February 2003 08:54 a.m. To: 'MCCALL,DON (HP-USA,ex1)' Cc: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'; Esh, Andrew; Ronan Waide; STEFFENS,MICHAEL (HP-Germany,ex1); 'Richard Sharpe'; 'John H Terpstra' Subject: RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help Thanks for your help, still no luck though. More info for you. with no debug statements in my /etc/pam.conf I get in sys log the following. Feb 2 14:43:02 coastdr pam_winbind[2832]: user 'traininguser' granted acces with debug turned on I get Feb 2 14:47:49 coastdr pam_winbind[2839]: Verify user `traininguser' Feb 2 14:47:49 coastdr pam_winbind[2839]: user 'traininguser' granted acces the user is still logging out. incidentlally, when I log in as a unix user, rather than a win2k user I don't get anything in sys log. I've included my pam.conf below. Also, I checked for /etc/shells, no such file, and I have set my smb.conf shell line to template shell = /sbin/sh and also tried template shell = /usr/bin/sh both files exist. # # PAM configuration # # Authentication management # loginauth sufficient/usr/lib/security/libpam_unix.1 debug loginauth sufficient/usr/lib/security/libpam_winbind.1 debug #login auth sufficient/usr/lib/security/libpam_smb.1 nolocal debug su auth required /usr/lib/security/libpam_unix.1 debug dtlogin auth required /usr/lib/security/libpam_unix.1 debug dtaction auth required /usr/lib/security/libpam_unix.1 debug ftp auth required /usr/lib/security/libpam_unix.1 debug OTHERauth required /usr/lib/security/libpam_unix.1 debug # # Account management # loginaccount sufficient /usr/lib/security/libpam_unix.1 debug loginaccount sufficient /usr/lib/security/libpam_winbind.1 debug su account required /usr/lib/security/libpam_unix.1 debug dtlogin account required /usr/lib/security/libpam_unix.1 debug dtaction account required
[Samba] RE: Winbind on HPUX 11, some small progress
Hi Miles, any reason you are compiling it yourself, instead of pulling the depot from the samba ftp site? That is what I am using successfully. Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 15:31 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Don, Michael Steffens a while back sent me a compiled version of getent which I couldn't get to work. I compiled your version and it doesn't seem to produce any result either, seems to return immeditaly without doing anything. ie coastdr: /mnt/1/samba/test ./getent passwd WESTCOASTDHB+mroper coastdr: /mnt/1/samba/test If I run it without any parameters I get a core dump :o) Better tell you that I'm compiling winbind with gcc 3.01 on hpux. I compiled the getent program you sent me with. gcc -c -I. -g -O2 getent.c gcc -g getent.o -o getent From what you have said it would seem like libnss_winbind.so itsn't working. Anyway to get any debug output? Here is my /usr/lib/libnss* -r-xr-xr-x 1 binbin 28672 Mar 13 2001 libnss_compat.1 -r-xr-xr-x 1 binbin 104536 Nov 6 1997 libnss_dns.1 -r-xr-xr-x 1 binbin 40960 Mar 7 2001 libnss_files.1 lrwxrwxrwx 1 root sys 17 Jan 27 09:49 libnss_ldap.1 - libns s_winbind.so -r-xr-xr-x 1 binbin 40960 Mar 13 2001 libnss_nis.1 -r-xr-xr-x 1 binbin 57344 Mar 13 2001 libnss_nisplus.1 -r-xr-xr-x 1 binbin 28672 Jan 24 15:23 libnss_winbind.so lrwxrwxrwx 1 root sys 17 Jan 27 11:51 libnss_winbind.so.1 - libnss_winbind.so lrwxrwxrwx 1 root sys 17 Oct 15 16:14 libnss_winbind.so.2 - libnss_winbind.so Here is my /etc/nsswitch.conf hosts: dns [NOTFOUND=continue UNAVAIL=continue TRYAGAIN=continue] files [N OTFOUND=return UNAVAIL=continue TRYAGAIN=return] passwd: files winbind group: files winbind Here is the compile output from libnss_winbind.so Compiling nsswitch/winbind_nss.c with -fpic nsswitch/winbind_nss.c: In function `fill_pwent': nsswitch/winbind_nss.c:600: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:612: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:629: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:641: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:653: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c: In function `fill_grent': nsswitch/winbind_nss.c:690: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:702: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:728: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:753: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwent_r': nsswitch/winbind_nss.c:870: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwuid_r': nsswitch/winbind_nss.c:920: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c:933: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwnam_r': nsswitch/winbind_nss.c:982: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c:995: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrent_r': nsswitch/winbind_nss.c:1119: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrnam_r': nsswitch/winbind_nss.c:1179: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c:1193: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrgid_r': nsswitch/winbind_nss.c:1242: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c:1256: warning: passing arg 5 of `fill_grent' from incompatible pointer type Compiling nsswitch/winbind_nss_solaris.c with -fpic Linking nsswitch/libnss_winbind.so Any idea where to go from here? Cheers Miles -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Thursday, 6 February
[Samba] RE: Winbind on HPUX 11, some small progress
ps, the fact that get getpwent and getent programs that you are running do NOT return any output indicate that the issue is probably with the libnss_winbind.so on your system.. Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 15:31 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Don, Michael Steffens a while back sent me a compiled version of getent which I couldn't get to work. I compiled your version and it doesn't seem to produce any result either, seems to return immeditaly without doing anything. ie coastdr: /mnt/1/samba/test ./getent passwd WESTCOASTDHB+mroper coastdr: /mnt/1/samba/test If I run it without any parameters I get a core dump :o) Better tell you that I'm compiling winbind with gcc 3.01 on hpux. I compiled the getent program you sent me with. gcc -c -I. -g -O2 getent.c gcc -g getent.o -o getent From what you have said it would seem like libnss_winbind.so itsn't working. Anyway to get any debug output? Here is my /usr/lib/libnss* -r-xr-xr-x 1 binbin 28672 Mar 13 2001 libnss_compat.1 -r-xr-xr-x 1 binbin 104536 Nov 6 1997 libnss_dns.1 -r-xr-xr-x 1 binbin 40960 Mar 7 2001 libnss_files.1 lrwxrwxrwx 1 root sys 17 Jan 27 09:49 libnss_ldap.1 - libns s_winbind.so -r-xr-xr-x 1 binbin 40960 Mar 13 2001 libnss_nis.1 -r-xr-xr-x 1 binbin 57344 Mar 13 2001 libnss_nisplus.1 -r-xr-xr-x 1 binbin 28672 Jan 24 15:23 libnss_winbind.so lrwxrwxrwx 1 root sys 17 Jan 27 11:51 libnss_winbind.so.1 - libnss_winbind.so lrwxrwxrwx 1 root sys 17 Oct 15 16:14 libnss_winbind.so.2 - libnss_winbind.so Here is my /etc/nsswitch.conf hosts: dns [NOTFOUND=continue UNAVAIL=continue TRYAGAIN=continue] files [N OTFOUND=return UNAVAIL=continue TRYAGAIN=return] passwd: files winbind group: files winbind Here is the compile output from libnss_winbind.so Compiling nsswitch/winbind_nss.c with -fpic nsswitch/winbind_nss.c: In function `fill_pwent': nsswitch/winbind_nss.c:600: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:612: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:629: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:641: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:653: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c: In function `fill_grent': nsswitch/winbind_nss.c:690: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:702: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:728: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:753: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwent_r': nsswitch/winbind_nss.c:870: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwuid_r': nsswitch/winbind_nss.c:920: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c:933: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwnam_r': nsswitch/winbind_nss.c:982: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c:995: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrent_r': nsswitch/winbind_nss.c:1119: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrnam_r': nsswitch/winbind_nss.c:1179: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c:1193: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrgid_r': nsswitch/winbind_nss.c:1242: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c:1256: warning: passing arg 5 of `fill_grent' from incompatible pointer type Compiling nsswitch/winbind_nss_solaris.c with -fpic Linking nsswitch/libnss_winbind.so Any idea where to go from here? Cheers Miles -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL
[Samba] RE: Winbind on HPUX 11, some small progress
Hi Don, Michael Steffens a while back sent me a compiled version of getent which I couldn't get to work. I compiled your version and it doesn't seem to produce any result either, seems to return immeditaly without doing anything. ie coastdr: /mnt/1/samba/test ./getent passwd WESTCOASTDHB+mroper coastdr: /mnt/1/samba/test If I run it without any parameters I get a core dump :o) Better tell you that I'm compiling winbind with gcc 3.01 on hpux. I compiled the getent program you sent me with. gcc -c -I. -g -O2 getent.c gcc -g getent.o -o getent From what you have said it would seem like libnss_winbind.so itsn't working. Anyway to get any debug output? Here is my /usr/lib/libnss* -r-xr-xr-x 1 binbin 28672 Mar 13 2001 libnss_compat.1 -r-xr-xr-x 1 binbin 104536 Nov 6 1997 libnss_dns.1 -r-xr-xr-x 1 binbin 40960 Mar 7 2001 libnss_files.1 lrwxrwxrwx 1 root sys 17 Jan 27 09:49 libnss_ldap.1 - libns s_winbind.so -r-xr-xr-x 1 binbin 40960 Mar 13 2001 libnss_nis.1 -r-xr-xr-x 1 binbin 57344 Mar 13 2001 libnss_nisplus.1 -r-xr-xr-x 1 binbin 28672 Jan 24 15:23 libnss_winbind.so lrwxrwxrwx 1 root sys 17 Jan 27 11:51 libnss_winbind.so.1 - libnss_winbind.so lrwxrwxrwx 1 root sys 17 Oct 15 16:14 libnss_winbind.so.2 - libnss_winbind.so Here is my /etc/nsswitch.conf hosts: dns [NOTFOUND=continue UNAVAIL=continue TRYAGAIN=continue] files [N OTFOUND=return UNAVAIL=continue TRYAGAIN=return] passwd: files winbind group: files winbind Here is the compile output from libnss_winbind.so Compiling nsswitch/winbind_nss.c with -fpic nsswitch/winbind_nss.c: In function `fill_pwent': nsswitch/winbind_nss.c:600: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:612: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:629: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:641: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:653: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c: In function `fill_grent': nsswitch/winbind_nss.c:690: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:702: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:728: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:753: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwent_r': nsswitch/winbind_nss.c:870: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwuid_r': nsswitch/winbind_nss.c:920: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c:933: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwnam_r': nsswitch/winbind_nss.c:982: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c:995: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrent_r': nsswitch/winbind_nss.c:1119: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrnam_r': nsswitch/winbind_nss.c:1179: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c:1193: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrgid_r': nsswitch/winbind_nss.c:1242: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c:1256: warning: passing arg 5 of `fill_grent' from incompatible pointer type Compiling nsswitch/winbind_nss_solaris.c with -fpic Linking nsswitch/libnss_winbind.so Any idea where to go from here? Cheers Miles -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Thursday, 6 February 2003 05:53 a.m. To: 'Miles Roper'; MCCALL,DON (HP-USA,ex1); [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; STEFFENS,MICHAEL (HP-Germany,ex1); 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Miles, This sounds like a PAM_USER_UNKNOWN13 error. Which would indicate that winbind daemon did it's job (ie passed the username and password to the password server ,and got validation back that the user is authenticated, but then when it went thru the nsswitch stuff to 'look up' the user, that failed. Kinda wierd. I don't have your original post, but I'm assuming that you
[Samba] RE: Winbind on HPUX 11, some small progress
had the same problem, I thought compiling it from scratch may fix it, although I've only just recently worked out how to get the extra debugging from pam, but symptoms were exactly the same. has taken me a long time to work out how to compile it on hpux with gcc, had to change a include file and the configure script, i've included it for you interest :o) in configure find if test $ac_cv_prog_cc_Ae = yes; then BLDSHARED=true SHLD=/usr/bin/ld LDSHFLAGS=-B symbolic -b -z PICFLAG=+z fi change to #if test $ac_cv_prog_cc_Ae = yes; then BLDSHARED=true SHLD=/usr/bin/ld LDSHFLAGS=-B symbolic -b -z # PICFLAG=+z #fi find /usr/local/lib/gcc-lib/hppa2.0n-hp-hpux11.00/3.1/include/stdio.h BEFORE extern int snprintf(char *, _hpux_size_t, char *,...); AFTER extern int snprintf(char *, _hpux_size_t, const char *,...); ps, that was quick :o) -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Friday, 7 February 2003 09:36 a.m. To: 'Miles Roper'; MCCALL,DON (HP-USA,ex1); [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; STEFFENS,MICHAEL (HP-Germany,ex1); 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Miles, any reason you are compiling it yourself, instead of pulling the depot from the samba ftp site? That is what I am using successfully. Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 15:31 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Don, Michael Steffens a while back sent me a compiled version of getent which I couldn't get to work. I compiled your version and it doesn't seem to produce any result either, seems to return immeditaly without doing anything. ie coastdr: /mnt/1/samba/test ./getent passwd WESTCOASTDHB+mroper coastdr: /mnt/1/samba/test If I run it without any parameters I get a core dump :o) Better tell you that I'm compiling winbind with gcc 3.01 on hpux. I compiled the getent program you sent me with. gcc -c -I. -g -O2 getent.c gcc -g getent.o -o getent From what you have said it would seem like libnss_winbind.so itsn't working. Anyway to get any debug output? Here is my /usr/lib/libnss* -r-xr-xr-x 1 binbin 28672 Mar 13 2001 libnss_compat.1 -r-xr-xr-x 1 binbin 104536 Nov 6 1997 libnss_dns.1 -r-xr-xr-x 1 binbin 40960 Mar 7 2001 libnss_files.1 lrwxrwxrwx 1 root sys 17 Jan 27 09:49 libnss_ldap.1 - libns s_winbind.so -r-xr-xr-x 1 binbin 40960 Mar 13 2001 libnss_nis.1 -r-xr-xr-x 1 binbin 57344 Mar 13 2001 libnss_nisplus.1 -r-xr-xr-x 1 binbin 28672 Jan 24 15:23 libnss_winbind.so lrwxrwxrwx 1 root sys 17 Jan 27 11:51 libnss_winbind.so.1 - libnss_winbind.so lrwxrwxrwx 1 root sys 17 Oct 15 16:14 libnss_winbind.so.2 - libnss_winbind.so Here is my /etc/nsswitch.conf hosts: dns [NOTFOUND=continue UNAVAIL=continue TRYAGAIN=continue] files [N OTFOUND=return UNAVAIL=continue TRYAGAIN=return] passwd: files winbind group: files winbind Here is the compile output from libnss_winbind.so Compiling nsswitch/winbind_nss.c with -fpic nsswitch/winbind_nss.c: In function `fill_pwent': nsswitch/winbind_nss.c:600: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:612: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:629: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:641: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:653: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c: In function `fill_grent': nsswitch/winbind_nss.c:690: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:702: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:728: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:753: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwent_r': nsswitch/winbind_nss.c:870: warning: passing arg 4 of `fill_pwent' from incompatible
[Samba] RE: Winbind on HPUX 11, some small progress
so where to from now? do you think it would be useful to install the compiled one for HPUX one from samba ftp? just a note, I've been tring to get this to work for at least a year, since winbind was first included in winbind, this time I'm determined I'm going to get it working :o) -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Friday, 7 February 2003 09:37 a.m. To: 'Miles Roper'; MCCALL,DON (HP-USA,ex1); [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; STEFFENS,MICHAEL (HP-Germany,ex1); 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress ps, the fact that get getpwent and getent programs that you are running do NOT return any output indicate that the issue is probably with the libnss_winbind.so on your system.. Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 15:31 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Don, Michael Steffens a while back sent me a compiled version of getent which I couldn't get to work. I compiled your version and it doesn't seem to produce any result either, seems to return immeditaly without doing anything. ie coastdr: /mnt/1/samba/test ./getent passwd WESTCOASTDHB+mroper coastdr: /mnt/1/samba/test If I run it without any parameters I get a core dump :o) Better tell you that I'm compiling winbind with gcc 3.01 on hpux. I compiled the getent program you sent me with. gcc -c -I. -g -O2 getent.c gcc -g getent.o -o getent From what you have said it would seem like libnss_winbind.so itsn't working. Anyway to get any debug output? Here is my /usr/lib/libnss* -r-xr-xr-x 1 binbin 28672 Mar 13 2001 libnss_compat.1 -r-xr-xr-x 1 binbin 104536 Nov 6 1997 libnss_dns.1 -r-xr-xr-x 1 binbin 40960 Mar 7 2001 libnss_files.1 lrwxrwxrwx 1 root sys 17 Jan 27 09:49 libnss_ldap.1 - libns s_winbind.so -r-xr-xr-x 1 binbin 40960 Mar 13 2001 libnss_nis.1 -r-xr-xr-x 1 binbin 57344 Mar 13 2001 libnss_nisplus.1 -r-xr-xr-x 1 binbin 28672 Jan 24 15:23 libnss_winbind.so lrwxrwxrwx 1 root sys 17 Jan 27 11:51 libnss_winbind.so.1 - libnss_winbind.so lrwxrwxrwx 1 root sys 17 Oct 15 16:14 libnss_winbind.so.2 - libnss_winbind.so Here is my /etc/nsswitch.conf hosts: dns [NOTFOUND=continue UNAVAIL=continue TRYAGAIN=continue] files [N OTFOUND=return UNAVAIL=continue TRYAGAIN=return] passwd: files winbind group: files winbind Here is the compile output from libnss_winbind.so Compiling nsswitch/winbind_nss.c with -fpic nsswitch/winbind_nss.c: In function `fill_pwent': nsswitch/winbind_nss.c:600: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:612: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:629: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:641: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:653: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c: In function `fill_grent': nsswitch/winbind_nss.c:690: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:702: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:728: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c:753: warning: passing arg 2 of `get_static' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwent_r': nsswitch/winbind_nss.c:870: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwuid_r': nsswitch/winbind_nss.c:920: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c:933: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getpwnam_r': nsswitch/winbind_nss.c:982: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c:995: warning: passing arg 4 of `fill_pwent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrent_r': nsswitch/winbind_nss.c:1119: warning: passing arg 5 of `fill_grent' from incompatible pointer type nsswitch/winbind_nss.c: In function `_nss_winbind_getgrnam_r':
Corrupted JPEG File Names
Hello, I am setting up a music server and have run into some file corruption with Samba. Whenever I copy JPG files from either my Win2K machine or my WinXP machine, I get file corruption. Please Help, Frank
RE: Samba and spinlocks on Linux (was Re: REPOST: Meaning oftdb_free: left read failed at ...?
If you are referring to: lock spin count = lock spin time = They are working very well 2.2.7a thank you. Here are my settings: lock spin count = 50 ;default=10 ;test with 6 wks show anything higher or lower than 15 cause increased load on server with slower performance lock spin time = 15 Regards - Gerald Drouillard Owner and Consultant Drouillard Associates, Inc. http://www.Drouillard.ca -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, February 05, 2003 12:40 PM To: Volker Lendecke Cc: Ralf G. R. Bergs; [EMAIL PROTECTED] Subject: Re: Samba and spinlocks on Linux (was Re: REPOST: Meaning of tdb_free: left read failed at ...? On Wed, Feb 05, 2003 at 11:50:50AM +0100, Volker Lendecke wrote: P.S: I might be wrong, but I'm not sure whether the spinlock code ever actually worked. Jeremy? Yes they did work and were tested at one stage, but bit-rot may have occurred since then. Jeremy.
RE: Trusted domains' users and Samba
Idzet Marc Kaplan [EMAIL PROTECTED] levelbl It should be connecting to the trusted domain by default. 1. What does wbinfo --sequence show you? Wbinfo tells it does not support --sequence option. However wbinfo -m shows DOM2 in the list. 2. What version of samba are you running? The version is 2.2.3a-6 for Debian that was shipped with distribution (Woody). szilva
make: *** [nsswitch/pam_winbind.po] Error 1
Hello, I configured samba 3.0 (alpha21) --with-pam but i get the following Error Message when I want to make make. I installed all IMHO packeges which are for pam necessary. Can anybody please say me what is the best way to solve my Problem. sles:/usr/samba-3.0alpha21/source # make Using FLAGS = -O-I./popt -Iinclude -I./include -I./ubiqx -I./smbwrapper -I. -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -D_GNU_SOURCE -I. FLAGS32 = -O-I./popt -Iinclude -I./include -I./ubiqx -I./smbwrapper -I. -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -D_GNU_SOURCE -I. LIBS = -lresolv -ldl -lnsl LDSHFLAGS = -shared -O LDFLAGS = Compiling nsswitch/pam_winbind.c with -fPIC nsswitch/pam_winbind.c:60: parse error before '*' token nsswitch/pam_winbind.c: In function `converse': nsswitch/pam_winbind.c:67: `pamh' undeclared (first use in this function) nsswitch/pam_winbind.c:67: (Each undeclared identifier is reported only once nsswitch/pam_winbind.c:67: for each function it appears in.) nsswitch/pam_winbind.c:67: `PAM_CONV' undeclared (first use in this function) nsswitch/pam_winbind.c:68: `PAM_SUCCESS' undeclared (first use in this function) nsswitch/pam_winbind.c:69: dereferencing pointer to incomplete type nsswitch/pam_winbind.c:69: `nargs' undeclared (first use in this function) nsswitch/pam_winbind.c:69: `message' undeclared (first use in this function) nsswitch/pam_winbind.c:70: `response' undeclared (first use in this function) nsswitch/pam_winbind.c:70: dereferencing pointer to incomplete type nsswitch/pam_winbind.c: At top level: nsswitch/pam_winbind.c:77: parse error before '*' token nsswitch/pam_winbind.c: In function `_make_remark': nsswitch/pam_winbind.c:79: `PAM_SUCCESS' undeclared (first use in this function) nsswitch/pam_winbind.c:81: storage size of `msg' isn't known nsswitch/pam_winbind.c:85: `text' undeclared (first use in this function) nsswitch/pam_winbind.c:86: `type' undeclared (first use in this function) nsswitch/pam_winbind.c:89: `pamh' undeclared (first use in this function) nsswitch/pam_winbind.c:92: invalid use of undefined type `struct pam_response' nsswitch/pam_winbind.c:92: dereferencing pointer to incomplete type nsswitch/pam_winbind.c:92: invalid use of undefined type `struct pam_response' nsswitch/pam_winbind.c:92: dereferencing pointer to incomplete type nsswitch/pam_winbind.c:92: invalid use of undefined type `struct pam_response' nsswitch/pam_winbind.c:92: dereferencing pointer to incomplete type nsswitch/pam_winbind.c: In function `pam_winbind_request': nsswitch/pam_winbind.c:108: `PAM_SERVICE_ERR' undeclared (first use in this function) nsswitch/pam_winbind.c:123: `PAM_SUCCESS' undeclared (first use in this function) nsswitch/pam_winbind.c: In function `pam_winbind_request_log': nsswitch/pam_winbind.c:148: `PAM_AUTH_ERR' undeclared (first use in this function) nsswitch/pam_winbind.c:152: `PAM_ACCT_EXPIRED' undeclared (first use in this function) nsswitch/pam_winbind.c:156: `PAM_AUTHTOK_EXPIRED' undeclared (first use in this function) nsswitch/pam_winbind.c:160: `PAM_NEW_AUTHTOK_REQD' undeclared (first use in this function) nsswitch/pam_winbind.c:164: `PAM_USER_UNKNOWN' undeclared (first use in this function) nsswitch/pam_winbind.c:170: `PAM_IGNORE' undeclared (first use in this function) nsswitch/pam_winbind.c:173: `PAM_SUCCESS' undeclared (first use in this function) nsswitch/pam_winbind.c: At top level: nsswitch/pam_winbind.c:267: parse error before '*' token nsswitch/pam_winbind.c: In function `_winbind_read_password': nsswitch/pam_winbind.c:283: `pass' undeclared (first use in this function) nsswitch/pam_winbind.c:289: `ctrl' undeclared (first use in this function) nsswitch/pam_winbind.c:289: `PAM_OLDAUTHTOK' undeclared (first use in this function) nsswitch/pam_winbind.c:289: `PAM_AUTHTOK' undeclared (first use in this function) nsswitch/pam_winbind.c:296: `pamh' undeclared (first use in this function) nsswitch/pam_winbind.c:297: `PAM_SUCCESS' undeclared (first use in this function) nsswitch/pam_winbind.c:308: `PAM_AUTHTOK_RECOVER_ERR' undeclared (first use in this function) nsswitch/pam_winbind.c:320: storage size of `msg' isn't known nsswitch/pam_winbind.c:326: `comment' undeclared (first use in this function) nsswitch/pam_winbind.c:328: `PAM_TEXT_INFO' undeclared (first use in this function) nsswitch/pam_winbind.c:336: `PAM_PROMPT_ECHO_OFF' undeclared (first use in this function) nsswitch/pam_winbind.c:337: `prompt1' undeclared (first use in this function) nsswitch/pam_winbind.c:340: `prompt2' undeclared (first use in this function) nsswitch/pam_winbind.c:356: invalid use of undefined type `struct pam_response' nsswitch/pam_winbind.c:356: dereferencing pointer to incomplete type nsswitch/pam_winbind.c:356: invalid use of undefined type `struct pam_response' nsswitch/pam_winbind.c:356: dereferencing pointer to incomplete type nsswitch/pam_winbind.c:356: invalid use of undefined type `struct pam_response'
Re: make: *** [nsswitch/pam_winbind.po] Error 1
On Thu, 2003-02-06 at 21:41, [EMAIL PROTECTED] wrote: Hello, I configured samba 3.0 (alpha21) --with-pam but i get the following Error Message when I want to make make. I installed all IMHO packeges which are for pam necessary. Can anybody please say me what is the best way to solve my Problem. Don't configure --with-pam if you don't have PAM (both libs and devel headers). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
Re: Corrupted JPEG File Names
On Thu, 2003-02-06 at 03:17, [EMAIL PROTECTED] wrote: Hello, I am setting up a music server and have run into some file corruption with Samba. Whenever I copy JPG files from either my Win2K machine or my WinXP machine, I get file corruption. take it to [EMAIL PROTECTED] have you run through diagnosis.txt? are you sure your network is setup properly? brad -- Bradley W. Langhorst [EMAIL PROTECTED]
Interaction of share modes and file permissions
Consider a file with ownership and mode such that a client has read-only permission on that file. Suppose that this file is open read-only by second client, with a share mode of DENY_WRITE. If the first client attempts to open the file read-write then a question arises: what is the appropriate response by the server? There are multiple reasons why the open should fail (access denied and share mode violation), but the response to the Open AndX request only allows for one reason to be communicated back to the client (I think ...). I raise this issue because Samba (v2.2.7 on Solaris) appears to respond to this circumstance differently than a Windows 2000 system does - Samba reports the share mode problem, whereas Windows reports access denied. I stumbled across this distinction when trying to diagnose a problem with a Windows application called Endnote, which is an academic reference manager. The application responds differently depending on which error code it gets - as a result, multiple readers can simultaneously open an Endnote reference library read-only if it is stored on Windows share, but only one reader at a time can open the same file if it is stored on a Samba share. The fact that the app tries a read-only open on the file if it gets permission denied but doesn't if it encounters a share mode problem is arguably a misfeature of the app, and Samba's choice about how to handle the situation seems just as valid as Windows', but I thought that I'd highlight the difference in case the team think it is worth correcting Samba to make it ape a Windows server more closely. I have network packet captures which I think illustrate the difference between Windows and Samba, which I can provide if anyone is interested in pursuing this? Regards, -- Neil Hoggarth Departmental Computer Officer [EMAIL PROTECTED] Laboratory of Physiology http://www.physiol.ox.ac.uk/~njh/ University of Oxford, UK
machine names same as usernames - problems...
Since samba 2.2.8 seems to be on the way i thought i might raise this issue before release. I've seen a few users get confused by the fact that their machine name and their user name cannot be very similar adil (users) and adil$ (machine) cannot work. I think it's not good practice to have machine names and usernames be the same but i also don't think samba should fail cryptically in that situation... The usernames are different - why does this fail? I'm guessing that the $ gets stripped off somewhere but why? At minimum we should provide an explicit prohibion in the docs (doc patch for SAMBA2_2 follows) diff -u -r1.1.2.15 Samba-PDC-HOWTO.sgml --- docs/docbook/projdoc/Samba-PDC-HOWTO.sgml 28 Nov 2001 22:03:22 - 1.1.2.15 +++ docs/docbook/projdoc/Samba-PDC-HOWTO.sgml 6 Feb 2003 14:02:08 - @@ -288,6 +288,11 @@ account, and thus has no shared secret with the domain controller. /para +paraNote: Machine accounts must not have the same base names as user +accounts. eg. The machine account sambauser1$ is not allowed when +there is a regular user sambauser1. +/para + paraA Windows PDC stores each machine trust account in the Windows Registry. A Samba PDC, however, stores each machine trust account in two parts, as follows: -- Bradley W. Langhorst [EMAIL PROTECTED]
Re: Solaris fcntl CPU/Lock update
Esh, Andrew wrote: Also, try loading a few other non-Samba programs into gdb, to see what they require. Maybe threading is a common library to load. I have tried this against sshd, httpd, radiusd and lpsched. None are showing libthread anywhere in the list of symbols. After latest libthread patch, I still have runaways. Results were the same for each process. bt gives a greatly shortened output which highlights libthread quite prominently: [Switching to Thread 1 (LWP 1)] 0xfecd9764 in __sigprocmask () from /usr/lib/libthread.so.1 (gdb) bt #0 0xfecd9764 in __sigprocmask () from /usr/lib/libthread.so.1 #1 0xfecce1b8 in _deliversigs () from /usr/lib/libthread.so.1 #2 0xfecd0594 in thr_sigsetmask () from /usr/lib/libthread.so.1 #3 signal handler called (gdb) The program is running. Quit anyway (and detach it)? (y or n) y Any other suggestions for gathering more info, or compile options for samba? Full list again below: root@reiger# gdb /usr/local/samba/bin/smbd 1812 GNU gdb 5.0 Copyright 2000 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type show copying to see the conditions. There is absolutely no warranty for GDB. Type show warranty for details. This GDB was configured as sparc-sun-solaris2.8... /tmp/1812: No such file or directory. Attaching to program `/usr/local/samba/bin/smbd', process 1812 Reading symbols from /usr/lib/libsec.so.1...done. Loaded symbols for /usr/lib/libsec.so.1 Reading symbols from /usr/lib/libgen.so.1...done. Loaded symbols for /usr/lib/libgen.so.1 Reading symbols from /usr/lib/libsocket.so.1...done. Loaded symbols for /usr/lib/libsocket.so.1 Reading symbols from /usr/lib/libnsl.so.1...done. Loaded symbols for /usr/lib/libnsl.so.1 Reading symbols from /usr/lib/libdl.so.1...done. Loaded symbols for /usr/lib/libdl.so.1 Reading symbols from /usr/lib/libpopt.so.0...done. Loaded symbols for /usr/lib/libpopt.so.0 Reading symbols from /usr/lib/libc.so.1...done. Loaded symbols for /usr/lib/libc.so.1 Reading symbols from /usr/lib/libmp.so.2...done. Loaded symbols for /usr/lib/libmp.so.2 Reading symbols from /usr/platform/SUNW,Sun-Fire-280R/lib/libc_psr.so.1...done. Loaded symbols for /usr/platform/SUNW,Sun-Fire-280R/lib/libc_psr.so.1 Reading symbols from /usr/lib/nss_files.so.1...done. Loaded symbols for /usr/lib/nss_files.so.1 Reading symbols from /usr/lib/nss_ldap.so.1...done. Loaded symbols for /usr/lib/nss_ldap.so.1 Reading symbols from /usr/lib/libpthread.so.1...done. Loaded symbols for /usr/lib/libpthread.so.1 Reading symbols from /usr/local/ldapsdk5/lib/libldap50.so...done. Loaded symbols for /usr/local/ldapsdk5/lib/libldap50.so Reading symbols from /usr/local/ldapsdk5/lib/libssldap50.so...done. Loaded symbols for /usr/local/ldapsdk5/lib/libssldap50.so Reading symbols from /usr/local/ldapsdk5/lib/libssl3.so...done. Loaded symbols for /usr/local/ldapsdk5/lib/libssl3.so ---Type return to continue, or q return to quit--- Reading symbols from /usr/local/ldapsdk5/lib/libnss3.so...done. Loaded symbols for /usr/local/ldapsdk5/lib/libnss3.so Reading symbols from /usr/local/ldapsdk5/lib/libnspr4.so...done. Loaded symbols for /usr/local/ldapsdk5/lib/libnspr4.so Reading symbols from /usr/local/ldapsdk5/lib/libprldap50.so...done. Loaded symbols for /usr/local/ldapsdk5/lib/libprldap50.so Reading symbols from /usr/local/ldapsdk5/lib/libplc4.so...done. Loaded symbols for /usr/local/ldapsdk5/lib/libplc4.so Reading symbols from /usr/local/ldapsdk5/lib/libplds4.so...done. Loaded symbols for /usr/local/ldapsdk5/lib/libplds4.so Reading symbols from /usr/lib/libdb-3.3.so...done. Loaded symbols for /usr/lib/libdb-3.3.so Reading symbols from /usr/lib/libresolv.so.2...done. Loaded symbols for /usr/lib/libresolv.so.2 Reading symbols from /usr/lib/libthread.so.1...done. Loaded symbols for /usr/lib/libthread.so.1 Reading symbols from /usr/lib/librt.so.1...done. Loaded symbols for /usr/lib/librt.so.1 Reading symbols from /usr/lib/libaio.so.1...done. Loaded symbols for /usr/lib/libaio.so.1 sol-thread active. Retry #1: Retry #2: Retry #3: Retry #4: [New LWP1] [New Thread 1 (LWP 1)] Symbols already loaded for /usr/lib/libsec.so.1 Symbols already loaded for /usr/lib/libgen.so.1 Symbols already loaded for /usr/lib/libsocket.so.1 Symbols already loaded for /usr/lib/libnsl.so.1 Symbols already loaded for /usr/lib/libdl.so.1 Symbols already loaded for /usr/lib/libpopt.so.0 Symbols already loaded for /usr/lib/libc.so.1 Symbols already loaded for /usr/lib/libmp.so.2 Symbols already loaded for /usr/platform/SUNW,Sun-Fire-280R/lib/libc_psr.so.1 Symbols already loaded for /usr/lib/nss_files.so.1 Symbols already loaded for /usr/lib/nss_ldap.so.1 Symbols already loaded for /usr/lib/libpthread.so.1 Symbols already loaded for /usr/local/ldapsdk5/lib/libldap50.so Symbols already loaded for /usr/local/ldapsdk5/lib/libssldap50.so Symbols already loaded for
Re: machine names same as usernames - problems...
On Thu, Feb 06, 2003 at 09:04:14AM -0500, Bradley W. Langhorst wrote: Since samba 2.2.8 seems to be on the way i thought i might raise this issue before release. I've seen a few users get confused by the fact that their machine name and their user name cannot be very similar adil (users) and adil$ (machine) cannot work. I think it's not good practice to have machine names and usernames be the same but i also don't think samba should fail cryptically in that situation... Is this not a holdover from NETBIOS and the way the NETBIOS 'protocol' worked -- flat namespace, distributed data base, unique and group level identifiers, etc. If you've been doing samba or any other netbios based network you already know this. However, what happens with netbioslees smb? aka port 443 smb... I just ran into a name resolution issue that caught me for two hours before I figured it out -- all due to the flat namespace that netbios has... samba can't go too far from whatever CIFS may define in this regard, but maybe use FQDN for the machine name and some other nonqualified name for user names may be the answer. and yes, there need to be updated documentation. I'd volunteer if I didn't have to read C code.. -- David Bear College of Public Programs/ASU Mail Code 0803
Re: Interaction of share modes and file permissions
On Thu, Feb 06, 2003 at 02:26:25PM +, Neil Hoggarth wrote: Consider a file with ownership and mode such that a client has read-only permission on that file. Suppose that this file is open read-only by second client, with a share mode of DENY_WRITE. If the first client attempts to open the file read-write then a question arises: what is the appropriate response by the server? There are multiple reasons why the open should fail (access denied and share mode violation), but the response to the Open AndX request only allows for one reason to be communicated back to the client (I think ...). I raise this issue because Samba (v2.2.7 on Solaris) appears to respond to this circumstance differently than a Windows 2000 system does - Samba reports the share mode problem, whereas Windows reports access denied. Ok, we treat this as a bug. We need to give the same error codes as W2K as far ar humanly possible. I stumbled across this distinction when trying to diagnose a problem with a Windows application called Endnote, which is an academic reference manager. The application responds differently depending on which error code it gets - as a result, multiple readers can simultaneously open an Endnote reference library read-only if it is stored on Windows share, but only one reader at a time can open the same file if it is stored on a Samba share. The fact that the app tries a read-only open on the file if it gets permission denied but doesn't if it encounters a share mode problem is arguably a misfeature of the app, and Samba's choice about how to handle the situation seems just as valid as Windows', but I thought that I'd highlight the difference in case the team think it is worth correcting Samba to make it ape a Windows server more closely. I have network packet captures which I think illustrate the difference between Windows and Samba, which I can provide if anyone is interested Yes please, I would love to see the ethereal capture traces. If you can get them to me asap I'll make sure it gets fixed for 2.2.8. Thanks, Jeremy.
why didn't we use krb5-config???
Hi Jeremy, I just see that newer version's of heimdal and mit have krb5-config. it would be cool to use it by default if it's available and if not fallback to the current tests metze - Stefan metze Metzmacher [EMAIL PROTECTED]
Re: why didn't we use krb5-config???
On Thu, Feb 06, 2003 at 07:27:24PM +0100, Stefan (metze) Metzmacher wrote: Hi Jeremy, I just see that newer version's of heimdal and mit have krb5-config. it would be cool to use it by default if it's available and if not fallback to the current tests Didn't know about it :-). I'll take a look - thanks ! Jeremy.
RE: Trusted domains' users and Samba
On 6th.Feb.2003 Szilva wrote : 2. What version of samba are you running? The version is 2.2.3a-6 for Debian that was shipped with distribution (Woody). On behalf of yourself, your users, and Net users everywhere in general :), can I plead with you to install the later security-fixed version of Samba-for-Debian ? The current stable security-fixed Debian Samba is 2.2.3a-12. See http://www.debian.org/security/2002/dsa-200 dated 22.Nov.2002, concerning a potential remote root hole. It won't make any difference to the --sequence option - it's still not there - but things might work better for you. PS: I'm just attempting to configure Debian Samba 2.2.3a-12 winbind to allow login authentications against a real NT domain (with a trusted domain) myself, so I'll let you know if it works for me. I can certainly see the domain my Samba server's domain trusts, in the output from wbinfo -m. Nick Boyce EDS Southwest Solution Centre, Bristol, UK -Original Message- From: Szilvsy Zoltn [mailto:[EMAIL PROTECTED]] Sent: 06 February 2003 11:16 To: [EMAIL PROTECTED] Subject: RE: Trusted domains' users and Samba Idzet Marc Kaplan [EMAIL PROTECTED] levelbl It should be connecting to the trusted domain by default. 1. What does wbinfo --sequence show you? Wbinfo tells it does not support --sequence option. However wbinfo -m shows DOM2 in the list. 2. What version of samba are you running? The version is 2.2.3a-6 for Debian that was shipped with distribution (Woody). szilva
RE: Winbind on HPUX 11, some small progress
Hi Don, lrwxrwxrwx 1 root sys 17 Feb 7 09:59 libnss_winbind.1 - li bnss_winbind.so -r-xr-xr-x 1 binbin 28672 Jan 24 15:23 libnss_winbind.so Same problem, I was all excited there for a moment :o) Cheers Miles -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Friday, 7 February 2003 09:50 a.m. To: 'Miles Roper'; MCCALL,DON (HP-USA,ex1); [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; STEFFENS,MICHAEL (HP-Germany,ex1); 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Miles, reading further; change you link to the following: lrwxr-xr-x 1 root sys 46 Aug 27 11:16 /usr/lib/libnss_winbin d.1 - libnss_winbind.so We (HP-UX) don't know from .so files... So winbind in nsswitch.conf entries is going to trigger looking for a libnss_winbind.1 NOT a libnss_winbind.so.1 See if that doesn't help, Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 15:41 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress had the same problem, I thought compiling it from scratch may fix it, although I've only just recently worked out how to get the extra debugging from pam, but symptoms were exactly the same. has taken me a long time to work out how to compile it on hpux with gcc, had to change a include file and the configure script, i've included it for you interest :o) in configure find if test $ac_cv_prog_cc_Ae = yes; then BLDSHARED=true SHLD=/usr/bin/ld LDSHFLAGS=-B symbolic -b -z PICFLAG=+z fi change to #if test $ac_cv_prog_cc_Ae = yes; then BLDSHARED=true SHLD=/usr/bin/ld LDSHFLAGS=-B symbolic -b -z # PICFLAG=+z #fi find /usr/local/lib/gcc-lib/hppa2.0n-hp-hpux11.00/3.1/include/stdio.h BEFORE extern int snprintf(char *, _hpux_size_t, char *,...); AFTER extern int snprintf(char *, _hpux_size_t, const char *,...); ps, that was quick :o) -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Friday, 7 February 2003 09:36 a.m. To: 'Miles Roper'; MCCALL,DON (HP-USA,ex1); [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; STEFFENS,MICHAEL (HP-Germany,ex1); 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Miles, any reason you are compiling it yourself, instead of pulling the depot from the samba ftp site? That is what I am using successfully. Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 15:31 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Don, Michael Steffens a while back sent me a compiled version of getent which I couldn't get to work. I compiled your version and it doesn't seem to produce any result either, seems to return immeditaly without doing anything. ie coastdr: /mnt/1/samba/test ./getent passwd WESTCOASTDHB+mroper coastdr: /mnt/1/samba/test If I run it without any parameters I get a core dump :o) Better tell you that I'm compiling winbind with gcc 3.01 on hpux. I compiled the getent program you sent me with. gcc -c -I. -g -O2 getent.c gcc -g getent.o -o getent From what you have said it would seem like libnss_winbind.so itsn't working. Anyway to get any debug output? Here is my /usr/lib/libnss* -r-xr-xr-x 1 binbin 28672 Mar 13 2001 libnss_compat.1 -r-xr-xr-x 1 binbin 104536 Nov 6 1997 libnss_dns.1 -r-xr-xr-x 1 binbin 40960 Mar 7 2001 libnss_files.1 lrwxrwxrwx 1 root sys 17 Jan 27 09:49 libnss_ldap.1 - libns s_winbind.so -r-xr-xr-x 1 binbin 40960 Mar 13 2001 libnss_nis.1 -r-xr-xr-x 1 binbin 57344 Mar 13 2001 libnss_nisplus.1 -r-xr-xr-x 1 binbin 28672 Jan 24 15:23 libnss_winbind.so lrwxrwxrwx 1 root sys 17 Jan 27 11:51 libnss_winbind.so.1 - libnss_winbind.so lrwxrwxrwx 1 root sys 17 Oct 15 16:14 libnss_winbind.so.2 -
RE: Winbind on HPUX 11, some small progress
Hi Miles, Set log level = 10 in your smb.conf file stop winbindd daemon and nmbd and smbd, and clear out your /var/opt/samba/log.* Then start nmbd,smbd and winbindd and do the getent command again. After you do, check for a log.winbindd file and send it to me offlist. Thanks, Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 16:07 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; [EMAIL PROTECTED]; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Don, lrwxrwxrwx 1 root sys 17 Feb 7 09:59 libnss_winbind.1 - li bnss_winbind.so -r-xr-xr-x 1 binbin 28672 Jan 24 15:23 libnss_winbind.so Same problem, I was all excited there for a moment :o) Cheers Miles -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Friday, 7 February 2003 09:50 a.m. To: 'Miles Roper'; MCCALL,DON (HP-USA,ex1); [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; STEFFENS,MICHAEL (HP-Germany,ex1); 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Miles, reading further; change you link to the following: lrwxr-xr-x 1 root sys 46 Aug 27 11:16 /usr/lib/libnss_winbin d.1 - libnss_winbind.so We (HP-UX) don't know from .so files... So winbind in nsswitch.conf entries is going to trigger looking for a libnss_winbind.1 NOT a libnss_winbind.so.1 See if that doesn't help, Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 15:41 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress had the same problem, I thought compiling it from scratch may fix it, although I've only just recently worked out how to get the extra debugging from pam, but symptoms were exactly the same. has taken me a long time to work out how to compile it on hpux with gcc, had to change a include file and the configure script, i've included it for you interest :o) in configure find if test $ac_cv_prog_cc_Ae = yes; then BLDSHARED=true SHLD=/usr/bin/ld LDSHFLAGS=-B symbolic -b -z PICFLAG=+z fi change to #if test $ac_cv_prog_cc_Ae = yes; then BLDSHARED=true SHLD=/usr/bin/ld LDSHFLAGS=-B symbolic -b -z # PICFLAG=+z #fi find /usr/local/lib/gcc-lib/hppa2.0n-hp-hpux11.00/3.1/include/stdio.h BEFORE extern int snprintf(char *, _hpux_size_t, char *,...); AFTER extern int snprintf(char *, _hpux_size_t, const char *,...); ps, that was quick :o) -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Friday, 7 February 2003 09:36 a.m. To: 'Miles Roper'; MCCALL,DON (HP-USA,ex1); [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; STEFFENS,MICHAEL (HP-Germany,ex1); 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Miles, any reason you are compiling it yourself, instead of pulling the depot from the samba ftp site? That is what I am using successfully. Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 15:31 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Don, Michael Steffens a while back sent me a compiled version of getent which I couldn't get to work. I compiled your version and it doesn't seem to produce any result either, seems to return immeditaly without doing anything. ie coastdr: /mnt/1/samba/test ./getent passwd WESTCOASTDHB+mroper coastdr: /mnt/1/samba/test If I run it without any parameters I get a core dump :o) Better tell you that I'm compiling winbind with gcc 3.01 on hpux. I compiled the getent program you sent me with. gcc -c -I. -g -O2 getent.c gcc -g getent.o -o getent From what you have said it would seem like libnss_winbind.so itsn't working. Anyway to get any debug output? Here is my /usr/lib/libnss* -r-xr-xr-x 1 binbin 28672
NTLMv2 Session Security
While trying to document NTLMv2 authentication, I stumbled across something known as NTLMv2 Session Security. Does anyone know what this is? I can set HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\LMCompatibilityLevel to 1 to enable NTLMv2 Session Security, but I'm not sure what it does. Some sources say that it allows the client and server to 'negotiate' the use of NTLMv2 challenge/response (how?). Other sources say that it provides message integrity and confidentiality (how?). I've played with this enough to know that enabling NTLMv2 Session Security does not enable SMB packet signing (MAC signing). There's a different set of registry variables for that. Perhaps they all interact with one another... Clues welcome. Chris -)- -- Samba Team -- http://www.samba.org/ -)- Christopher R. Hertel jCIFS Team -- http://jcifs.samba.org/ -)- ubiqx development, uninq. ubiqx Team -- http://www.ubiqx.org/ -)- [EMAIL PROTECTED] OnLineBook -- http://ubiqx.org/cifs/-)- [EMAIL PROTECTED]
[PATCH] file change notification
Attached is a patch that adds support for reporting
individual files during file change notification. The patch
keeps a table of the stats of all files in a watched
directory and then compares the current stats of the files
with the stored stats whenever there is a notification
event. Note that all of the code is in the generic notify.c
file, so it works regardless of whether the server is using
hash_notify.c or kernel_notify.c.
The costs are 1) the memory cost of storing the tdb info in
memory and 2) the performance cost of having to check each
file to figure out which one changed everytime there is a
file notification event. The memory use could be reduced by
storing the table on disk instead of in memory, but that
would incur a cost in performance and could result in a lot
of *tdb files sitting around (one per directory watched).
The only way to reduce the performance cost is to make the
kernel stuff return a file name with its notification. This
change wouldn't be too hard to add to the kernel, but I'd
rather not require a hacked kernel to make samba work as it
should.
The only thing that doesn't work quite as it should is that
the code does not report a file name change event as such,
but instead just treats a name change as a file remove and
then a file add. Supporting this would make the code a lot
more complex (I'd have to keep a separate, inode indexed
table of file stats in addition to the file name indexed
one), and I can't imagine when a remove/add instead of a
move would break a client, though it might cause performance
issues.
Also, though this is a separate issue, the file change stuff
still doesn't support deep notifications as it should as far
as I can tell (which is to say not at all).
-hal
diff -u -r samba-2.2.7a.dist/source/include/smb.h samba-2.2.7a/source/include/smb.h
--- samba-2.2.7a.dist/source/include/smb.h Wed Dec 4 12:16:36 2002
+++ samba-2.2.7a/source/include/smb.h Wed Jan 22 16:26:56 2003
@@ -1202,6 +1202,16 @@
#define FILE_NOTIFY_CHANGE_SECURITY0x100
#define FILE_NOTIFY_CHANGE_FILE_NAME 0x200
+/* file notification actions */
+#define FILE_ACTION_ADDED 0x0001
+#define FILE_ACTION_REMOVED0x0002
+#define FILE_ACTION_MODIFIED 0x0003
+#define FILE_ACTION_RENAMED_OLD_NAME 0x0004
+#define FILE_ACTION_RENAMED_NEW_NAME 0x0005
+#define FILE_ACTION_ADDED_STREAM 0x0006
+#define FILE_ACTION_REMOVED_STREAM 0x0007
+#define FILE_ACTION_MODIFIED_STREAM0x0008
+
/* where to find the base of the SMB packet proper */
#define smb_base(buf) (((char *)(buf))+4)
diff -u -r samba-2.2.7a.dist/source/smbd/notify.c samba-2.2.7a/source/smbd/notify.c
--- samba-2.2.7a.dist/source/smbd/notify.c Fri Feb 1 17:14:47 2002
+++ samba-2.2.7a/source/smbd/notify.c Thu Feb 6 16:08:07 2003
@@ -25,6 +25,16 @@
static struct cnotify_fns *cnotify;
/
+This structure holds a list of files and associated notification actions.
+*/
+struct file_action {
+ struct file_action *next, *prev;
+ int action;
+ char *filename;
+ int filename_length;
+};
+
+/
This is the structure to queue to implement NT change
notify. It consists of smb_size bytes stored from the
transact command (to keep the mid, tid etc around).
@@ -38,14 +48,250 @@
uint32 flags;
char request_buf[smb_size];
void *change_data;
+ TDB_CONTEXT *file_data;
+ struct file_action *file_actions;
};
static struct change_notify *change_notify_list;
/
+ Return a file action struct with the given filename and fileaction
+*/
+struct file_action *change_notify_get_file_action(char *filename,
+ int fileaction) {
+
+ struct file_action *fa;
+
+ if (!(fa = (struct file_action *)malloc(sizeof(struct file_action {
+ DEBUG(0, (malloc failed!));
+ }
+
+ fa-action = fileaction;
+ fa-filename = strdup(filename);
+ fa-filename_length = strlen(filename);
+
+ return fa;
+}
+
+/
+ Check to make sure that the file in the given cnbp.file_data record
+ still exists.
+*/
+int change_notify_file_data_exists(TDB_CONTEXT *tdb, TDB_DATA key,
+ TDB_DATA data, void *status) {
+
+ struct file_action *fa;
+ struct change_notify *cnbp = (struct change_notify *)status;
+ char *filename;
+ char
RE: Winbind on HPUX 11, some small progress
I thought I was told early on in this discussion that HP-UX doesn't like certain keywords in nsswitch.conf, and winbind is one of them. That being the case, isn't libnss_winbind.1 useless? Can another nsswitch keyword be faked into pointing at winbind? Maybe libnss_ldap.1 - libnss_winbind.so, and a passwd: ldap files ... in nsswitch.conf. Also, a truss (or strace) on getent might show or fail to show libnss_winbind.1 being loaded and called. What else is known about winbind? The nss library is just a translation shim that calls winbindd through a named pipe. Is the pipe file there while winbindd is up and running? Does fuser show that winbindd has /tmp/.winbindd/pipe open? How about netstat -ax | grep winbindd? Does wbinfo work? It uses the same communication. -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 3:07 PM To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; [EMAIL PROTECTED]; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Don, lrwxrwxrwx 1 root sys 17 Feb 7 09:59 libnss_winbind.1 - li bnss_winbind.so -r-xr-xr-x 1 binbin 28672 Jan 24 15:23 libnss_winbind.so Same problem, I was all excited there for a moment :o) Cheers Miles -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Friday, 7 February 2003 09:50 a.m. To: 'Miles Roper'; MCCALL,DON (HP-USA,ex1); [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; STEFFENS,MICHAEL (HP-Germany,ex1); 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Miles, reading further; change you link to the following: lrwxr-xr-x 1 root sys 46 Aug 27 11:16 /usr/lib/libnss_winbin d.1 - libnss_winbind.so We (HP-UX) don't know from .so files... So winbind in nsswitch.conf entries is going to trigger looking for a libnss_winbind.1 NOT a libnss_winbind.so.1 See if that doesn't help, Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 15:41 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress had the same problem, I thought compiling it from scratch may fix it, although I've only just recently worked out how to get the extra debugging from pam, but symptoms were exactly the same. has taken me a long time to work out how to compile it on hpux with gcc, had to change a include file and the configure script, i've included it for you interest :o) in configure find if test $ac_cv_prog_cc_Ae = yes; then BLDSHARED=true SHLD=/usr/bin/ld LDSHFLAGS=-B symbolic -b -z PICFLAG=+z fi change to #if test $ac_cv_prog_cc_Ae = yes; then BLDSHARED=true SHLD=/usr/bin/ld LDSHFLAGS=-B symbolic -b -z # PICFLAG=+z #fi find /usr/local/lib/gcc-lib/hppa2.0n-hp-hpux11.00/3.1/include/stdio.h BEFORE extern int snprintf(char *, _hpux_size_t, char *,...); AFTER extern int snprintf(char *, _hpux_size_t, const char *,...); ps, that was quick :o) -Original Message- From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] Sent: Friday, 7 February 2003 09:36 a.m. To: 'Miles Roper'; MCCALL,DON (HP-USA,ex1); [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; STEFFENS,MICHAEL (HP-Germany,ex1); 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Miles, any reason you are compiling it yourself, instead of pulling the depot from the samba ftp site? That is what I am using successfully. Don -Original Message- From: Miles Roper [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 06, 2003 15:31 To: 'MCCALL,DON (HP-USA,ex1)'; [EMAIL PROTECTED]; '[EMAIL PROTECTED]'; 'Esh, Andrew'; 'Ronan Waide'; [EMAIL PROTECTED]; 'Richard Sharpe'; 'John H Terpstra'; GILCHRIST,KIM (HP-NewZealand,ex1) Subject: RE: Winbind on HPUX 11, some small progress Hi Don, Michael Steffens a while back sent me a compiled version of getent which I couldn't get to work. I compiled your version and it doesn't seem to produce any result either, seems to return immeditaly without doing anything. ie coastdr: /mnt/1/samba/test ./getent passwd WESTCOASTDHB+mroper
Annoying Minor Bug In Winbind 2.2.x
As per my message an hour or so ago, I'm trying to get the winbind that comes with Debian 3.0 Samba 2.2.3a-12 configured to allow me to telnet into the box with authentication handed off to a real NT domain. Anyway, even before I really get started, I find what seems to be an obvious, simple and annoying buggette - if I stop and restart winbind (the sort of thing you do a lot at this stage) then it fails to restart, with this message in /var/log/samba/log.winbindd : invalid permissions on socket directory /tmp/.winbindd Here's the permissions : /etc# ls -ld /tmp/.w* drwxr-x---2 root root 4096 Feb 6 21:33 /tmp/.winbindd A quick Google Groups search (Samba.org's own archives being unsearchable) comes up with just one hit : http://groups.google.com/groups?q=%22invalid+permissions+on+socket+directory +/tmp/.winbindd%22hl=enlr=ie=UTF-8oe=UTF-8selm=b29cf7d1.0301240738.6e61 2f4a%40posting.google.comrnum=1 This guy's solution certainly works for me (simply rename the faulty socket directory out of harm's way), but ... surely you folks saw this buggette a few lightyears ago down the way. Is it a known bug ? Does a later Samba 2.2.x version fix it ? Cheers, Nick Boyce EDS Southwest Solution Centre, Bristol, UK
Re: machine names same as usernames - problems...
On Fri, 2003-02-07 at 01:04, Bradley W. Langhorst wrote: Since samba 2.2.8 seems to be on the way i thought i might raise this issue before release. I've seen a few users get confused by the fact that their machine name and their user name cannot be very similar adil (users) and adil$ (machine) cannot work. Why can't it work? I've seen this discussed a number of times, but never really been told why it doesn't work. That $ is there for exactly that reason you know - to make them different. I think it's not good practice to have machine names and usernames be the same but i also don't think samba should fail cryptically in that situation... Can you describe the failure please? The usernames are different - why does this fail? I'm guessing that the $ gets stripped off somewhere but why? At minimum we should provide an explicit prohibion in the docs (doc patch for SAMBA2_2 follows) diff -u -r1.1.2.15 Samba-PDC-HOWTO.sgml --- docs/docbook/projdoc/Samba-PDC-HOWTO.sgml 28 Nov 2001 22:03:22 - 1.1.2.15 +++ docs/docbook/projdoc/Samba-PDC-HOWTO.sgml 6 Feb 2003 14:02:08 - @@ -288,6 +288,11 @@ account, and thus has no shared secret with the domain controller. /para +paraNote: Machine accounts must not have the same base names as user +accounts. eg. The machine account sambauser1$ is not allowed when +there is a regular user sambauser1. +/para + Certainly at the SAM level, there is no reason for this restriction. There may be other good reasons, but an NT SAM (and therefore smbpasswd etc) should have no problem with this. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
