Re: [Samba] About NAS versus Samba

2013-07-12 Thread Daniel Müller
Mostly All the NAS Vendors that belong to the linux side have samba3 winbind
running
pointing in their config to ads:

Ex.:
security = ADS
something like this..
winbind enum users = Yes
   winbind enum groups = Yes
   winbind use default domain = Yes
   winbind nested groups = Yes
   winbind separator = +

But in the first run you have to talk to them. Now and then you can buy the
nas with a possibility to join
to your samba3 domain.

If you haven' t tried you will never know :-)
Good Luck
Daniel
---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---
-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im
Auftrag von Gaiseric Vandal
Gesendet: Donnerstag, 11. Juli 2013 18:44
An: samba@lists.samba.org
Betreff: Re: [Samba] About NAS versus Samba

On 07/11/13 12:29, Fernando Lozano wrote:
 Hi,

 what about the samba running on your NAS. I did a lot of NAS hacking 
 pointing  a running samba/winbind config of the vendor to my nt-style 
 samba/ldap domain .
 But if you do so be aware you are loosing your support :-).
 So if you can change the samba on your NAS you are up and running.
 I don't have the NAS box yet. I wish advice on which one to buy based 
 on compatibility with a Samba 3 PDC (or Samba 4 DC, or IPA).

 Vendors I talked to tell me it won't work, I'd have to use Microsoft 
 AD.  Knowing the Linux and Windows side (protocols, software) this 
 doesn't make sense to me, I'm guessing the sales people I talked to 
 simply doesn't know and doesn't want to learn.

 And it's not easy to tell the boss I'll buy a somewhat expensive box 
 (for a small business) just to hack and see if it'll work the way I 
 want. :-(

 It would help if you simply tell me which NAS you had success and 
 which one was easier, out-of-the-box, or had to hack.


 []s, Fernando Lozano


It seems common that vendors (esp the sales guys) assume you are running 
Windows 200x and AD.I think the logic is that none of our customers 
use linux so we won't support it. It becomes self-fulfilling when 
anyone wanting something besides the basic Windows AD support looks for
other solutions.

Getting samba to work sometimes requires fiddling with protocol 
versions, WINS and DNS.  For example windows 7 won't work with Samba 
3.x until you tweek the registry.   You can probably put together a 
price-comparable equivalent of the Buffalo using a white-box PC tower 
and linux.  You can even set up software raid.   It is more likely 
to work the way you want than a NAS box.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-12 Thread Jim Potter
I use a Netgear readynas1500 as a fileserver for my Samba3/ldap domain 
which I' ve just upgraded to AD and it works fine in both cases (lots of 
users, though with relatively few active connections). It runs a bog 
standard Samba3 + winbind member server (NT or ADS) as far as I can tell.


Having said that, the 2 shortcomings I have found are with windows 7 
clients...  troubles doing offline files (there are  bunch of tweaks, 
but none work perfectly) and it doesnt work too well with the libraries 
feature in win7 (it needs indexing o some sort that isn't povided by 
samba I think)


BTW, would a Samba4 member server setup help with these issues? If it 
did, I'd upgrade even if it did invaidate warranty...


cheers

Jim

On 11/07/2013 05:03, ferna...@lozano.eti.br wrote:

Hi Cris,


Hi there, Has anyone tried to configure a NAS server to authenticate
users using a Samba PDC, or even a Samba4 DC (AD-compatible) or an IPA
server?


not in a while, but I have done a samba 3 DC


This was not my question. I'm ok running samba 3 DCs. :-)

Have you ever configured a NAS so it would authenticate users from 
your Samba DC and them serve SMB file shares (aka network drives) to 
Windows desktops?




I'm evaluating replacing some Linux file server for a NAS product, but
all them make me nervous when the vendor talks about Active Directory
support and nothing else.


if 3rd party support is your concern, why are you using fedora 
instead of

RHEL?


Are you trying to sell me RHEL subscriptions or help me with my 
question? ;-) Anything wrong about asking about Fedora on a Fedora 
list, or any server issue is forbidden for Fedora users? ;-)


AFAIK it shouldn't matter, from a technical perspective, if the samba 
DC runs Fedora, Debian, Slackware, RHEL, SuSE, Ubuntu, Solaris, 
whatever. I am not talking about OS level FC drivers or iSCSI 
initiators. Either a NAS will be compatible with Samba3, Samba4, both 
or neither. This depends on the SMB and MSRPC features needed by the 
NAS, all them application level protocols, not kernel modules. If I'll 
need Red Hat support for managing this system is another, unrelated, 
question.


If the NAS vendors state they suṕport RHEL, that's not que question 
either, as supporting RHEL could mean the RHEL linux kernel smbfs and 
cifsfs driver talks to the NAS, not the NAS talks to the Samba DC. Or 
else, RHEL support may mean just that the NAS talks NFS and so a RHEL 
machine can mount volumes from tne NAS. That's not what I want.


Most times I see linux servers they are simply members of a MSAD 
domain, not the DC themselves. But mine are. All vendors I talked to 
assume MSAD, and don't know about Samba. :-(


Anyway Fedora is my desktop system and development workstation. The DC 
in question runs RHEL. But if this works I can try someday using 
Fedora or CentOS with the same (or other) NAS.




In theory, many NASes are Linux boxes running samba, so there

shouldn't be a problem, except if the web admin interface won't support
a samba DC setup and I won't have SSH access to configure the NAS samba
myself



a cheaper nas will probably use samba, but not all NASs do. there are
several commercial SMB/CIFS implementation out there.


At least iomega/lenovo/emc state their NAS runs Samba. And a lot of 
less know vendors also. I'll buy a single, cheap NAS, not a high end 
EMC rack full of boxes. :-)


But... will any NAS you know work with a Samba DC, or else, using an 
IPA server? Or will they only work with Microsoft Windows Server AD?


All vendors I contacted talk only about MS Active Directory. They 
don't even know about NT4-style domains, which would mean a Samba3 DC 
should work. Besides, AFAIK a Samba4 DC isn't supported by RHEL at all 
-- that's why I included IPA in my question -- I'd have to use Sernet 
packages for Samba4. Even then, Samba4 is very new, I don't know if a 
NAS implementation would accept it in place of a MSAD DC.


Most vendors talk to me about vmware, exchange and sql server support. 
They offer me windows-only backup servers and the like. Some even 
offer me SAP R/3 agents, while my ERP is another one. They can only 
follow their standard script for windows shops. So I ask for the 
collective knowledge from the Fedora and Samba lists... can anyone 
tell me I tried this NAS and it worked? Or should I better forget 
about this and keep using cheap intel boxes as file servers?


Am I the first linux sysadmin in the world who's considering to have a 
NAS replacing some file servers but keeping his samba DCs?



[]s, Fernando Lozano



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] About NAS versus Samba

2013-07-12 Thread L . P . H . van Belle
quote:
 I'm evaluating replacing some Linux file server for a NAS 
product, but
 all them make me nervous when the vendor talks about 
Active Directory
 support and nothing else.

Its simple, this is a BAD thing tot do. 
But if you really want a nas. 

Get a synology. 
The best you can get, is my experiance. 
http://www.synology.com/index.php?lang=default 

or 
Just get a pc with 2 harddisks and install. 
http://www.freenas.org/

or if you want a ready setup for samba4 . 
get the sernet samba4 appliance.
http://www.enterprisesamba.com/samba4app/ 

My advice, get or the synoligy of the samba4 app. 

personaly, get the samba4 appliance. 
get zarafa, and you have about the samba as Windows + exchange 

Im running samba 3 with zarafa now, and im in the process of upgradeing to 
samba4. 

Good luck. 

Louis




-Oorspronkelijk bericht-
Van: jimpot...@orange.net 
[mailto:samba-boun...@lists.samba.org] Namens Jim Potter
Verzonden: vrijdag 12 juli 2013 8:44
Aan: samba@lists.samba.org
Onderwerp: Re: [Samba] About NAS versus Samba

I use a Netgear readynas1500 as a fileserver for my Samba3/ldap domain 
which I' ve just upgraded to AD and it works fine in both 
cases (lots of 
users, though with relatively few active connections). It runs a bog 
standard Samba3 + winbind member server (NT or ADS) as far as 
I can tell.

Having said that, the 2 shortcomings I have found are with windows 7 
clients...  troubles doing offline files (there are  bunch of tweaks, 
but none work perfectly) and it doesnt work too well with the 
libraries 
feature in win7 (it needs indexing o some sort that isn't povided by 
samba I think)

BTW, would a Samba4 member server setup help with these issues? If it 
did, I'd upgrade even if it did invaidate warranty...

cheers

Jim

On 11/07/2013 05:03, ferna...@lozano.eti.br wrote:
 Hi Cris,

 Hi there, Has anyone tried to configure a NAS server to 
authenticate
 users using a Samba PDC, or even a Samba4 DC 
(AD-compatible) or an IPA
 server?

 not in a while, but I have done a samba 3 DC

 This was not my question. I'm ok running samba 3 DCs. :-)

 Have you ever configured a NAS so it would authenticate users from 
 your Samba DC and them serve SMB file shares (aka network drives) to 
 Windows desktops?


 I'm evaluating replacing some Linux file server for a NAS 
product, but
 all them make me nervous when the vendor talks about 
Active Directory
 support and nothing else.

 if 3rd party support is your concern, why are you using fedora 
 instead of
 RHEL?

 Are you trying to sell me RHEL subscriptions or help me with my 
 question? ;-) Anything wrong about asking about Fedora on a Fedora 
 list, or any server issue is forbidden for Fedora users? ;-)

 AFAIK it shouldn't matter, from a technical perspective, if 
the samba 
 DC runs Fedora, Debian, Slackware, RHEL, SuSE, Ubuntu, Solaris, 
 whatever. I am not talking about OS level FC drivers or iSCSI 
 initiators. Either a NAS will be compatible with Samba3, 
Samba4, both 
 or neither. This depends on the SMB and MSRPC features needed by the 
 NAS, all them application level protocols, not kernel 
modules. If I'll 
 need Red Hat support for managing this system is another, unrelated, 
 question.

 If the NAS vendors state they su???port RHEL, that's not que 
question 
 either, as supporting RHEL could mean the RHEL linux kernel 
smbfs and 
 cifsfs driver talks to the NAS, not the NAS talks to the 
Samba DC. Or 
 else, RHEL support may mean just that the NAS talks NFS and 
so a RHEL 
 machine can mount volumes from tne NAS. That's not what I want.

 Most times I see linux servers they are simply members of a MSAD 
 domain, not the DC themselves. But mine are. All vendors I talked to 
 assume MSAD, and don't know about Samba. :-(

 Anyway Fedora is my desktop system and development 
workstation. The DC 
 in question runs RHEL. But if this works I can try someday using 
 Fedora or CentOS with the same (or other) NAS.


 In theory, many NASes are Linux boxes running samba, so there
 shouldn't be a problem, except if the web admin interface 
won't support
 a samba DC setup and I won't have SSH access to configure 
the NAS samba
 myself


 a cheaper nas will probably use samba, but not all NASs do. 
there are
 several commercial SMB/CIFS implementation out there.

 At least iomega/lenovo/emc state their NAS runs Samba. And a lot of 
 less know vendors also. I'll buy a single, cheap NAS, not a high end 
 EMC rack full of boxes. :-)

 But... will any NAS you know work with a Samba DC, or else, using an 
 IPA server? Or will they only work with Microsoft Windows Server AD?

 All vendors I contacted talk only about MS Active Directory. They 
 don't even know about NT4-style domains, which would mean a 
Samba3 DC 
 should work. Besides, AFAIK a Samba4 DC isn't supported by 
RHEL at all 
 -- that's why I included IPA in my question -- I'd have to 
use Sernet 
 packages for Samba4. Even then, Samba4 is very new, I don't 
know if a 
 NAS 

[Samba] removing dead samba4 dc

2013-07-12 Thread Tom Seeley

Hi,

I have a small but live samba4 AD (pure samba4, no Windows servers).   
My secondary (the one that was added 2nd) DC has expired, so I need to  
remove it from the domain.  However the traditional Windows mechanism  
for doing this (deleting the entry from ADUC) doesn't work.  I'm not  
sure if this was supposed to work, but the error I get is:


Windows cannot delete object  
LDAP://primarydcaddress/CN=2nddcname,OU=Domain  
Controllers,DC=orgname,DC=tld because: The specified module could  
not be found.


My guess is that method is not supposed to work.

So given that I can't run a samba-tool demote (the server I wish to  
demote is not running), how do I remove it as a DC?


Thanks,

Tom.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] domain RODC fails with default provisioning

2013-07-12 Thread Andreas Calvo
Sure.
However, notice that it was caused by an incorrect libdefaults entry in
krb5.conf (wrote bdefaults] instead of [libdefaults]).
I've uploaded the log on pastebin: http://pastebin.com/sP8VNXQ5


On Thu, Jul 11, 2013 at 2:08 AM, Andrew Bartlett abart...@samba.org wrote:

 On Wed, 2013-07-10 at 17:27 +0200, Andreas Calvo wrote:
  We're evaluating joining another samba domain controller in read-only
 mode.
  With a default provisioning, when running the samba-tool domain RODC, it
  fails with the following error:
  ldb: ldb_trace_request: (tdb)-search
  ldb: ldb_asprintf/set_errstring: NULL Base DN invalid for a base search
  ldb_wrap open of hklm.ldb
  ldb: start ldb transaction (nesting: 0)
  ldb: ldb_trace_request: (tdb)-start_transaction
  ldb: start ldb transaction error: (null)
  ldb: ldb_trace_request: ADD
  dn: @ATTRIBUTES
  changetype: add
  key: CASE_INSENSITIVE
  value: CASE_INSENSITIVE
 
 
   control: NONE
 
  ldb: ldb_trace_request: (tdb)-add
  ldb: ldb_trace_request: (tdb)-prepare_commit
  ldb: commit ldb transaction (nesting: 0)
  ldb: ldb_trace_request: (tdb)-end_transaction
  Key 'key=SOFTWARE,hive=NONE' not found
  key added: key=SOFTWARE,hive=NONE
  Key 'key=Microsoft,key=SOFTWARE,hive=NONE' not found
  key added: key=Microsoft,key=SOFTWARE,hive=NONE
  Key 'key=Windows NT,key=Microsoft,key=SOFTWARE,hive=NONE' not found
  key added: key=Windows NT,key=Microsoft,key=SOFTWARE,hive=NONE
  Key 'key=CurrentVersion,key=Windows
  NT,key=Microsoft,key=SOFTWARE,hive=NONE' not found
  key added: key=CurrentVersion,key=Windows
  NT,key=Microsoft,key=SOFTWARE,hive=NONE
  About to write CurrentVersion with type (null), length 3: 6.1
  Key 'key=SYSTEM,hive=NONE' not found
  key added: key=SYSTEM,hive=NONE
  Key 'key=CurrentControlSet,key=SYSTEM,hive=NONE' not found
  key added: key=CurrentControlSet,key=SYSTEM,hive=NONE
  Key 'key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE' not found
  key added: key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE
  Key
 
 'key=ProductOptions,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE'
  not found
  key added:
  key=ProductOptions,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE
  About to write ProductType with type (null), length 8: LanmanNT
  Key 'key=Print,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE'
 not
  found
  key added:
 key=Print,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE
  Key 'key=Terminal
  Server,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE' not found
  key added: key=Terminal
  Server,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE
  Key 'key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE' not found
  key added: key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE
  Key
 'key=Netlogon,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE'
  not found
  key added:
  key=Netlogon,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE
  Key
 
 'key=Parameters,key=Netlogon,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE'
  not found
  key added:
 
 key=Parameters,key=Netlogon,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE
  About to write RefusePasswordChange with type dword, length 8: 
  Key 'key=Alerter,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE'
  not found
  key added:
  key=Alerter,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE
  Key
 
 'key=Parameters,key=Alerter,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE'
  not found
  key added:
 
 key=Parameters,key=Alerter,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE
  lpcfg_servicenumber: couldn't find ldb
  lpcfg_servicenumber: couldn't find ldb
  lpcfg_servicenumber: couldn't find ldb
  lpcfg_servicenumber: couldn't find ldb
  partition_metadata: Migrating partition metadata
  krb5_init_context failed (Invalid argument)
  smb_krb5_context_init_basic failed (Invalid argument)
  talloc: access after free error - first free may be at @ �3
  Bad talloc magic value - access after free
  Aborted
 
  Is there something special to be done prior to the domain join command?

 Can you re-run this under valgrind?  While krb5_init_context should not
 fail (I did see your reply), it also shouldn't cause a crash, and we can
 at least fix that much.

 Thanks,

 Andrew Bartlett

 --
 Andrew Bartletthttp://samba.org/~abartlet/
 Authentication Developer, Samba Team   http://samba.org





-- 
Atentamente,
Andreas Calvo
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba limitation to concurrent open files

2013-07-12 Thread Santosh Patnaik
Can Samba handle in the range of 1million to 3 millions concurrently open
files? If so, then from which Samba version onwards?
Does it have any benchmarking results on maximum number of open files that
Samba can have concurrently?

Any reply to this question is highly appreciated.

Thanks in Advance
Santosh
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba limitation to concurrent open files

2013-07-12 Thread Luuk

On 12-07-2013 12:55, Santosh Patnaik wrote:

Can Samba handle in the range of 1million to 3 millions concurrently open
files? If so, then from which Samba version onwards?
Does it have any benchmarking results on maximum number of open files that
Samba can have concurrently?

Any reply to this question is highly appreciated.

Thanks in Advance
Santosh



http://www.samba.org/samba/docs/using_samba/ch11.html
says:
max open files
numeric
Limits number of open files to be below Unix limits.
1
Global


If the default value is 1 and you want it to be 100-300 times bigger?

I see nothing mentioned in de docs about bigger values, just that is 
need to be below 'unix limits' ;)



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba limitation to concurrent open files

2013-07-12 Thread Volker Lendecke
On Fri, Jul 12, 2013 at 01:05:24PM +0200, Luuk wrote:
 On 12-07-2013 12:55, Santosh Patnaik wrote:
 Can Samba handle in the range of 1million to 3 millions concurrently open
 files? If so, then from which Samba version onwards?
 Does it have any benchmarking results on maximum number of open files that
 Samba can have concurrently?
 
 Any reply to this question is highly appreciated.
 
 Thanks in Advance
 Santosh
 
 
 http://www.samba.org/samba/docs/using_samba/ch11.html
 says:
 max open files
 numeric
 Limits number of open files to be below Unix limits.
 1
 Global
 
 
 If the default value is 1 and you want it to be 100-300 times bigger?
 
 I see nothing mentioned in de docs about bigger values, just that is
 need to be below 'unix limits' ;)

Well, your ulimit should be high enough ;-)

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kont...@sernet.de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba limitation to concurrent open files

2013-07-12 Thread Volker Lendecke
On Fri, Jul 12, 2013 at 04:25:05PM +0530, Santosh Patnaik wrote:
 Can Samba handle in the range of 1million to 3 millions concurrently open
 files? If so, then from which Samba version onwards?

Is this per connection? How many clients connect to that
system? If you are using SMB1, the protocol has a 16-bit
field for file IDs, this effectively limits the maximum
number of files to 65536. In the real world it will be a bit
less. With SMB2, there's no such limitation, but I don't
know where people have pushed this so far.

 Does it have any benchmarking results on maximum number of open files that
 Samba can have concurrently?

Not really. Do you have a bit more information about your
workload, so that we can test this and lift limits?

Thanks,

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kont...@sernet.de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] no log on servers on ubuntu clients (Samba4)

2013-07-12 Thread alxgrb
Hi All,

I need some help about these errors:

1).
 samba version 4.0.7 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2012
[2013/07/12 10:57:36,  0] ../source4/smbd/server.c:475(binary_smbd_main)
  samba: using 'standard' process model
[2013/07/12 10:57:37,  1]
../source4/auth/gensec/gensec_gssapi.c:339(gensec_gssapi_client_start)
  Could not determine hostname for target computer, cannot use kerberos
[2013/07/12 10:57:37,  1]
../source4/auth/gensec/gensec_gssapi.c:339(gensec_gssapi_client_start)
  Could not determine hostname for target computer, cannot use kerberos
[2013/07/12 12:00:55,  0] ../lib/util/fault.c:72(fault_report)
  ===
[2013/07/12 12:00:55,  0] ../lib/util/fault.c:73(fault_report)
  INTERNAL ERROR: Signal 11 in pid 2264 (4.0.7)
  Please read the Trouble-Shooting section of the Samba HOWTO
[2013/07/12 12:00:55,  0] ../lib/util/fault.c:75(fault_report)
  ===
[2013/07/12 12:00:55,  0] ../lib/util/fault.c:144(smb_panic_default)
  PANIC: internal error
[2013/07/12 13:27:55,  1]
../source4/dsdb/kcc/kcc_deleted.c:105(kccsrv_check_deleted)
  Doing a full scan on DC=ForestDnsZones,DC=home,DC=net and looking for
deleted object
[2013/07/12 13:27:55,  1]
../source4/dsdb/kcc/kcc_deleted.c:105(kccsrv_check_deleted)
  Doing a full scan on DC=DomainDnsZones,DC=home,DC=net and looking for
deleted object
[2013/07/12 13:27:55,  1]
../source4/dsdb/kcc/kcc_deleted.c:105(kccsrv_check_deleted)
  Doing a full scan on CN=Configuration,DC=home,DC=net and looking for
deleted object
[2013/07/12 13:27:55,  1]
../source4/dsdb/kcc/kcc_deleted.c:105(kccsrv_check_deleted)
  Doing a full scan on DC=home,DC=net and looking for deleted object
[2013/07/12 13:37:18,  1] ../source4/dns_server/dns_query.c:521(handle_tkey)
  Tkey handshake completed
[2013/07/12 13:37:18,  1]
../source4/dns_server/dns_update.c:672(handle_updates)
  update count is 2

After restart of the server it goes again...

2.)
I cannot login with lightdm (ubuntu 12.04) to my samba4 server. [no log on
servers]???
I'm waiting about 5 or 7 min, then I can log without problems
It's every day!
wbinfo -u(-g)  getent passwd (groups) lists all groups and users.


Thanks,
Alexander



--
View this message in context: 
http://samba.2283325.n4.nabble.com/no-log-on-servers-on-ubuntu-clients-Samba4-tp4651010.html
Sent from the Samba - General mailing list archive at Nabble.com.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] 3.5.6 to 3.6.6: session setup failed

2013-07-12 Thread Thiago Parolin
Hi,
I think that someone has the solution for my problem! ;)
After i did the upgrade process in a samba server, from debian squeeze to
wheezy, the new samba version (3.6.6) is not working.
Searching on web, there are many causes for this error, and i dont know
what is mine.
I can't connect with smbclient -L host -U ldapuser, that give me error
session setup failed: NT_STATUS_UNSUCCESSFUL


How can i fix this?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] 3.5.6 to 3.6.6: session setup failed

2013-07-12 Thread Gaiseric Vandal
Does pdbedit -Lv still show users? You want to verify that samba is 
able to access LDAP.







On 07/12/13 08:51, Thiago Parolin wrote:

Hi,
I think that someone has the solution for my problem! ;)
After i did the upgrade process in a samba server, from debian squeeze to
wheezy, the new samba version (3.6.6) is not working.
Searching on web, there are many causes for this error, and i dont know
what is mine.
I can't connect with smbclient -L host -U ldapuser, that give me error
session setup failed: NT_STATUS_UNSUCCESSFUL


How can i fix this?


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] oLschema2ldif segfault

2013-07-12 Thread Bo Kersey
So I changed the syntax to 1.3.6.1.4.1.1466.115.121.1.15 so I could process the 
schema...  Now I'd like to manually edit the resultant LDIF so that I can 
create binary objects

Where can I find the attributSyntax and oMSyntax for 
1.3.6.1.4.1.1466.115.121.1.5 (binary objects)?

Thanks!


- Original Message -
 From: Bo Kersey b...@vircio.com
 To: Andrew Bartlett abart...@samba.org
 Sent: Friday, July 12, 2013 7:22:48 AM
 Subject: Re: [Samba] oLschema2ldif segfault
 
 Andrew,
 So it is the problem with the tool and I should be able to attributes
 that are binary to the LDIF manually?
 
 Thanks!
 Bo
 
 
 - Original Message -
  From: Andrew Bartlett abart...@samba.org
  To: Bo Kersey b...@vircio.com
  Cc: samba@lists.samba.org, samba-techni...@samba.org
  Sent: Thursday, July 11, 2013 9:09:32 PM
  Subject: Re: [Samba] oLschema2ldif segfault
  
  On Thu, 2013-07-11 at 13:11 -0500, Bo Kersey wrote:
   I'm seeing a oLschema2ldif segfault when it comes across
   attributetypes with syntax '1.3.6.1.4.1.1466.115.121.1.5' that is
   a BINARY attribute.
   
   Is this by design?
   
   Can I store binary attributes in samba4 ldap?
  
  We need to remove this tool, and someone needs to write a
  replacement
  in
  python.
  
  Andrew Bartlett
  
  --
  Andrew Bartlett
 http://samba.org/~abartlet/
  Authentication Developer, Samba Team   http://samba.org
  
  
  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-12 Thread Gaiseric Vandal
With Samba 3.x (I think it was samba 3.4.x when we started deploying 
Windows 7)  I found that offline folders on Windows 7 broke offline 
authentication.



On 07/12/13 02:43, Jim Potter wrote:
I use a Netgear readynas1500 as a fileserver for my Samba3/ldap domain 
which I' ve just upgraded to AD and it works fine in both cases (lots 
of users, though with relatively few active connections). It runs a 
bog standard Samba3 + winbind member server (NT or ADS) as far as I 
can tell.


Having said that, the 2 shortcomings I have found are with windows 7 
clients...  troubles doing offline files (there are  bunch of tweaks, 
but none work perfectly) and it doesnt work too well with the 
libraries feature in win7 (it needs indexing o some sort that isn't 
povided by samba I think)


BTW, would a Samba4 member server setup help with these issues? If it 
did, I'd upgrade even if it did invaidate warranty...


cheers

Jim

On 11/07/2013 05:03, ferna...@lozano.eti.br wrote:

Hi Cris,


Hi there, Has anyone tried to configure a NAS server to authenticate
users using a Samba PDC, or even a Samba4 DC (AD-compatible) or an IPA
server?


not in a while, but I have done a samba 3 DC


This was not my question. I'm ok running samba 3 DCs. :-)

Have you ever configured a NAS so it would authenticate users from 
your Samba DC and them serve SMB file shares (aka network drives) to 
Windows desktops?




I'm evaluating replacing some Linux file server for a NAS product, but
all them make me nervous when the vendor talks about Active Directory
support and nothing else.


if 3rd party support is your concern, why are you using fedora 
instead of

RHEL?


Are you trying to sell me RHEL subscriptions or help me with my 
question? ;-) Anything wrong about asking about Fedora on a Fedora 
list, or any server issue is forbidden for Fedora users? ;-)


AFAIK it shouldn't matter, from a technical perspective, if the samba 
DC runs Fedora, Debian, Slackware, RHEL, SuSE, Ubuntu, Solaris, 
whatever. I am not talking about OS level FC drivers or iSCSI 
initiators. Either a NAS will be compatible with Samba3, Samba4, both 
or neither. This depends on the SMB and MSRPC features needed by the 
NAS, all them application level protocols, not kernel modules. If 
I'll need Red Hat support for managing this system is another, 
unrelated, question.


If the NAS vendors state they suṕport RHEL, that's not que question 
either, as supporting RHEL could mean the RHEL linux kernel smbfs and 
cifsfs driver talks to the NAS, not the NAS talks to the Samba DC. Or 
else, RHEL support may mean just that the NAS talks NFS and so a RHEL 
machine can mount volumes from tne NAS. That's not what I want.


Most times I see linux servers they are simply members of a MSAD 
domain, not the DC themselves. But mine are. All vendors I talked to 
assume MSAD, and don't know about Samba. :-(


Anyway Fedora is my desktop system and development workstation. The 
DC in question runs RHEL. But if this works I can try someday using 
Fedora or CentOS with the same (or other) NAS.




In theory, many NASes are Linux boxes running samba, so there
shouldn't be a problem, except if the web admin interface won't 
support
a samba DC setup and I won't have SSH access to configure the NAS 
samba

myself



a cheaper nas will probably use samba, but not all NASs do. there are
several commercial SMB/CIFS implementation out there.


At least iomega/lenovo/emc state their NAS runs Samba. And a lot of 
less know vendors also. I'll buy a single, cheap NAS, not a high end 
EMC rack full of boxes. :-)


But... will any NAS you know work with a Samba DC, or else, using an 
IPA server? Or will they only work with Microsoft Windows Server AD?


All vendors I contacted talk only about MS Active Directory. They 
don't even know about NT4-style domains, which would mean a Samba3 DC 
should work. Besides, AFAIK a Samba4 DC isn't supported by RHEL at 
all -- that's why I included IPA in my question -- I'd have to use 
Sernet packages for Samba4. Even then, Samba4 is very new, I don't 
know if a NAS implementation would accept it in place of a MSAD DC.


Most vendors talk to me about vmware, exchange and sql server 
support. They offer me windows-only backup servers and the like. Some 
even offer me SAP R/3 agents, while my ERP is another one. They can 
only follow their standard script for windows shops. So I ask for the 
collective knowledge from the Fedora and Samba lists... can anyone 
tell me I tried this NAS and it worked? Or should I better forget 
about this and keep using cheap intel boxes as file servers?


Am I the first linux sysadmin in the world who's considering to have 
a NAS replacing some file servers but keeping his samba DCs?



[]s, Fernando Lozano





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] About NAS versus Samba

2013-07-12 Thread Fernando Lozano

Hi,


Its simple, this is a BAD thing tot do.
But if you really want a nas.
As a technician I can agree, but I ceased trying to explain to 
management. Hey, we must help hardware vendor personal have a living ;-) 
and they help us put more expertise areas in our own resume. ;-)))




Get a synology.
The best you can get, is my experiance.


Thanks a lot. I hope not only best as a NAS but also easy to setup as a 
member server for a samba 3 or 4 domain, right?




Just get a pc with 2 harddisks and install.
http://www.freenas.org/
Risking being off-topic on this list, many people told me not to use 
freenas because it was unmantained. Do you actually use it, follow the 
project closely, or just heard about it?




personaly, get the samba4 appliance.
I have to use my RHEL subscriptions ;-) Will use sernet packages when I 
get to upgrade to samba4.




get zarafa, and you have about the samba as Windows + exchange
Already have Zimbra. Someday I'll research about integrating Zimbra LDAP 
to Samba 4 LDAP. Won't try with Samba 3 because I hope to upgrade to 
samba4 this year.



[]s, Fernando Lozano

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba 4 domain members

2013-07-12 Thread Chris Alavoine
Hi there,

I would like to setup a Samba 4 member server to act as a separate
fileserver within my Samba 4 domain.

Does anyone have any recommendations for this setup?

I've tried to create one following this:

https://wiki.samba.org/index.php/Samba4/Domain_Member

Which seems to work ok until I try to change any permission on any shares
(or anything within the shares). I then get access denied errors.
Obviously, this is unworkable as a solution as I need to set permissions.

Any help much appreciated.

Thanks,
Chris.

-- 
ACS (Alavoine Computer Services Ltd)
Chris Alavoine
mob +44 (0)7724 710 730
www.alavoinecs.co.uk
http://twitter.com/#!/alavoinecs
http://www.linkedin.com/pub/chris-alavoine/39/606/192
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] About NAS versus Samba

2013-07-12 Thread Fernando Lozano

Hi Andrew,

I work on a NAS product myself, and at this vendor and my previous 
vendor Samba 4.0 as an AD DC was all I ever needed to use to test the 
AD integration features of the NAS. Thanks, Andrew Bartlett 
Please tell me which product this is, so I can contact the local 
reseller. :-) You can send me in pvt if you think it would not be 
ethical to advertise your employee on the list.


Sales people here (and their technical consultants) don't know / don't 
care about Samba. Every time I ask about samba compatibility they try to 
sell me Windows and VmWare licenses. They even lie trying to make my 
employee buy those licenses and ditch Linux altogether.


I am only saved because of some previous incidents where I told my boss 
either they are lying or they don't know, showing technical references 
from vendors themselves and standards bodies, but was overruled. Later 
my boss found I was right the had way: products didn't worked as 
expected, company lost money.


Most non-IT people, even many IT people, wrongly believe the vendor 
people should be the better experts and so any conflict of opinion they 
should be right. When it fails, the IT manager or the business area 
manager hide it, so they don't take blame for the wrong decision 
consequences. :-(


If I someone tell me this product works I can by knowing if something 
bad happens it's something I can solve. Sometimes the management 
interface for a product won't let you do things the embebed software 
could do, so I don't want to risk a product without someone telling me 
this one worked for me.



[]s, Fernando Lozano
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 4 domain members

2013-07-12 Thread steve
On Fri, 2013-07-12 at 15:21 +0100, Chris Alavoine wrote:
 Hi there,
 
 I would like to setup a Samba 4 member server to act as a separate
 fileserver within my Samba 4 domain.
 
 Does anyone have any recommendations for this setup?
 
 I've tried to create one following this:
 
 https://wiki.samba.org/index.php/Samba4/Domain_Member
 
 Which seems to work ok until I try to change any permission on any shares
 (or anything within the shares). I then get access denied errors.
 Obviously, this is unworkable as a solution as I need to set permissions.

Hi
Give us an example of a share that's working. Then, what you change
within it and what permissions you change to get the 'access denied'.
Which version have you installed?
Cheers,
Steve


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] 3.5.6 to 3.6.6: session setup failed

2013-07-12 Thread Thiago Parolin
if i do: smbclient -L 127.0.0.1 -U%, the resources are showed, but with
smbclient -L 127.0.0.1 -U ldapuser, i get : session setup failed:
NT_STATUS_UNSUCCESSFUL

the samba log says:
[2013/07/12 14:17:28.607965, 0] auth/check_samsec.c:491(check_sam_security)
check_sam_security: make_server_info_sam() failed with
'NT_STATUS_UNSUCCESSFUL'




2013/7/12 Thiago Parolin tlparo...@gmail.com


 the pdbedit -Lv shows:
 sid S-xx.-3024 does not belong to our domain
 sid S-xx.-3018 does not belong to our domain
 sid S-xx.-3022 does not belong to our domain
 sid S-xx.-3026 does not belong to our domain
 sid S-xx.-3030 does not belong to our domain
 sid S-xx.-3032 does not belong to our domain
 sid S-xx.-3034 does not belong to our domain

 (i think) the comunication with ldap is ok. (ldapsearch, getent passwd,
 group..).
 deleted sambadomain in ldap tree, then restarted the samba service to
 recreate the entries, and all these process is ok.

 the output in samba server (used for printer): net getdomainsid
 SID for local machine SPSI is:
 S-1-5-21-380638
 SID for domain PSI is: S-1-5-21-272.099

 the samba in ldap server: net getdomainsid is the same for SPSI above.

 pdbedit -Lv userldap shows:
 User SID: S-1-5-21-380638-3432
 Primary Group SID: S-1-5-21-272.099-513

 the samba log says:
 [2013/07/12 14:17:28.607965, 0] auth/check_samsec.c:491(check_sam_security)
 check_sam_security: make_server_info_sam() failed with
 'NT_STATUS_UNSUCCESSFUL'




 2013/7/12 Gaiseric Vandal gaiseric.van...@gmail.com

 Does pdbedit -Lv still show users? You want to verify that samba is
 able to access LDAP.







 On 07/12/13 08:51, Thiago Parolin wrote:

 Hi,
 I think that someone has the solution for my problem! ;)
 After i did the upgrade process in a samba server, from debian squeeze to
 wheezy, the new samba version (3.6.6) is not working.
 Searching on web, there are many causes for this error, and i dont know
 what is mine.
 I can't connect with smbclient -L host -U ldapuser, that give me error
 session setup failed: NT_STATUS_UNSUCCESSFUL


 How can i fix this?


 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  
 https://lists.samba.org/**mailman/options/sambahttps://lists.samba.org/mailman/options/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Share configuration between subdomains

2013-07-12 Thread Túlio Henrique
Hello everyone!

In my enviroment, I have an AD Domain Controler where some samba server are
connected.

Look the domain tree.

LOCAL
SUBDOMAIN1
SUBDOMAIN2
SUBDOMAIN3
SUBDOMAIN4

I have a samba server included in SUBDOMAIN2.LOCAL and users from
SUBDOMAIN4.LOCAL need permission to access share on SUBDOMAIN2.LOCAL

I have been searching in google but nothing could help me.

Best regards,

-- 
Túlio Henrique A. dos Santos
LPI3-Certificate
Linux User #454598
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] 3.5.6 to 3.6.6: session setup failed

2013-07-12 Thread Thiago Parolin
I've been trying many things, and one of them was reinstall samba for print
server.
After reinstall, i set the SID for print server to the same SID for samba's
ldap server.
Now, when i type pdbedit -Lv in print server, i get all users from my ldap
tree.
the command smbclient -L 127.0.0.1 -U ldapuser, now shows all resources
normally, but (there are always a but) when i try to print, i got :
NT_STATUS_ACCESS_DENIED opening remote spool Página_de_teste.

Anyone can help me with this?


2013/7/12 Thiago Parolin tlparo...@gmail.com


 if i do: smbclient -L 127.0.0.1 -U%, the resources are showed, but with
 smbclient -L 127.0.0.1 -U ldapuser, i get : session setup failed:
 NT_STATUS_UNSUCCESSFUL

 the samba log says:
 [2013/07/12 14:17:28.607965, 0] auth/check_samsec.c:491(check_sam_security)
 check_sam_security: make_server_info_sam() failed with
 'NT_STATUS_UNSUCCESSFUL'




 2013/7/12 Thiago Parolin tlparo...@gmail.com


 the pdbedit -Lv shows:
 sid S-xx.-3024 does not belong to our domain
 sid S-xx.-3018 does not belong to our domain
 sid S-xx.-3022 does not belong to our domain
 sid S-xx.-3026 does not belong to our domain
 sid S-xx.-3030 does not belong to our domain
 sid S-xx.-3032 does not belong to our domain
 sid S-xx.-3034 does not belong to our domain

 (i think) the comunication with ldap is ok. (ldapsearch, getent passwd,
 group..).
 deleted sambadomain in ldap tree, then restarted the samba service to
 recreate the entries, and all these process is ok.

 the output in samba server (used for printer): net getdomainsid
 SID for local machine SPSI is:
 S-1-5-21-380638
 SID for domain PSI is: S-1-5-21-272.099

 the samba in ldap server: net getdomainsid is the same for SPSI above.

 pdbedit -Lv userldap shows:
 User SID: S-1-5-21-380638-3432
 Primary Group SID: S-1-5-21-272.099-513

 the samba log says:
 [2013/07/12 14:17:28.607965, 0]
 auth/check_samsec.c:491(check_sam_security)
 check_sam_security: make_server_info_sam() failed with
 'NT_STATUS_UNSUCCESSFUL'




 2013/7/12 Gaiseric Vandal gaiseric.van...@gmail.com

 Does pdbedit -Lv still show users? You want to verify that samba is
 able to access LDAP.







 On 07/12/13 08:51, Thiago Parolin wrote:

 Hi,
 I think that someone has the solution for my problem! ;)
 After i did the upgrade process in a samba server, from debian squeeze
 to
 wheezy, the new samba version (3.6.6) is not working.
 Searching on web, there are many causes for this error, and i dont know
 what is mine.
 I can't connect with smbclient -L host -U ldapuser, that give me error
 session setup failed: NT_STATUS_UNSUCCESSFUL


 How can i fix this?


 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  
 https://lists.samba.org/**mailman/options/sambahttps://lists.samba.org/mailman/options/samba




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] 3.5.6 to 3.6.6: session setup failed

2013-07-12 Thread Thiago Parolin
Solved!
My steps:
reinstall samba on print server, without erase smb.conf.
set sid for print server the same for ldap/samba server.
after this, to fix the error NT_STATUS_ACCESS_DENIED opening remote spool,
i set in smb.conf printer section use client driver = yes
now, printer is working again!!
thanks.


2013/7/12 Thiago Parolin tlparo...@gmail.com

 I've been trying many things, and one of them was reinstall samba for
 print server.
 After reinstall, i set the SID for print server to the same SID for
 samba's ldap server.
 Now, when i type pdbedit -Lv in print server, i get all users from my ldap
 tree.
 the command smbclient -L 127.0.0.1 -U ldapuser, now shows all resources
 normally, but (there are always a but) when i try to print, i got :
 NT_STATUS_ACCESS_DENIED opening remote spool Página_de_teste.

 Anyone can help me with this?


 2013/7/12 Thiago Parolin tlparo...@gmail.com


 if i do: smbclient -L 127.0.0.1 -U%, the resources are showed, but with
 smbclient -L 127.0.0.1 -U ldapuser, i get : session setup failed:
 NT_STATUS_UNSUCCESSFUL

 the samba log says:
 [2013/07/12 14:17:28.607965, 0]
 auth/check_samsec.c:491(check_sam_security)
 check_sam_security: make_server_info_sam() failed with
 'NT_STATUS_UNSUCCESSFUL'




 2013/7/12 Thiago Parolin tlparo...@gmail.com


 the pdbedit -Lv shows:
 sid S-xx.-3024 does not belong to our domain
 sid S-xx.-3018 does not belong to our domain
 sid S-xx.-3022 does not belong to our domain
 sid S-xx.-3026 does not belong to our domain
 sid S-xx.-3030 does not belong to our domain
 sid S-xx.-3032 does not belong to our domain
 sid S-xx.-3034 does not belong to our domain

 (i think) the comunication with ldap is ok. (ldapsearch, getent passwd,
 group..).
 deleted sambadomain in ldap tree, then restarted the samba service to
 recreate the entries, and all these process is ok.

 the output in samba server (used for printer): net getdomainsid
 SID for local machine SPSI is:
 S-1-5-21-380638
 SID for domain PSI is: S-1-5-21-272.099

 the samba in ldap server: net getdomainsid is the same for SPSI above.

 pdbedit -Lv userldap shows:
 User SID: S-1-5-21-380638-3432
 Primary Group SID: S-1-5-21-272.099-513

 the samba log says:
 [2013/07/12 14:17:28.607965, 0]
 auth/check_samsec.c:491(check_sam_security)
 check_sam_security: make_server_info_sam() failed with
 'NT_STATUS_UNSUCCESSFUL'




 2013/7/12 Gaiseric Vandal gaiseric.van...@gmail.com

 Does pdbedit -Lv still show users? You want to verify that samba is
 able to access LDAP.







 On 07/12/13 08:51, Thiago Parolin wrote:

 Hi,
 I think that someone has the solution for my problem! ;)
 After i did the upgrade process in a samba server, from debian squeeze
 to
 wheezy, the new samba version (3.6.6) is not working.
 Searching on web, there are many causes for this error, and i dont know
 what is mine.
 I can't connect with smbclient -L host -U ldapuser, that give me error
 session setup failed: NT_STATUS_UNSUCCESSFUL


 How can i fix this?


 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  
 https://lists.samba.org/**mailman/options/sambahttps://lists.samba.org/mailman/options/samba





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Administrative users on domain

2013-07-12 Thread Donny Brooks
Back in January we upgraded/moved our domain from an old install of samba and 
openldap to a newer version (samba 3.5.10 and openldap 2.4.23) while also 
moving our domain to a new name. On the old domain, which was setup before I 
got here, our IT section was in an ldap group that allowed us to join PC's to 
the domain and when the prompt came up in windows to install software we could 
log in as ourselves. However that is not the case on the new domain and I 
cannot figure out how to set that back up. I have looked at the docs on samba 
rights (http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/rights.html) 
but it seems I am missing something since when I type:

net rpc rights grant 'MDAH\Domain Admins' SeMachineAccountPrivilege -S 
enterprise -U superusername

it returns:

Failed to grant privileges for MDAH\Domain Admins (NT_STATUS_NO_SUCH_USER)

superusername is our superuser account that we have to currently type in to 
join machines to join the domain. However when installing software we have to 
log in as local administrator or do a MACHINENAME\Administrator and it's 
password to install software. 

Any pointers?
-- 

Donny B.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Unable to connect to Samba server, but it shows on the network

2013-07-12 Thread Dale Schroeder

Being Fedora, 1st check selinux configuration:

https://wiki.samba.org/index.php/Samba_Troubleshooting

Dale


On 07/11/2013 9:47 PM, renito73 Михаил wrote:

  Hello friends

I am trying to setup Samba on my Fedora 19 installation, but it does not work... although 
smbclient -L myserver shows my shares, I can't access any of them from other 
computers and even from the same server, it returns an error that could not connect to to 
the server...

My very simple configuration is this (my computer has fixed IP)

[global]
 workgroup = MYGROUPNAME
 server string = Samba Server Version %v

 # log files split per-machine:
 log file = /var/log/samba/log.%m
 # maximum size of 50KB per log file, then rotate:
 max log size = 50

 security = user
 passdb backend = tdbsam

 load printers = yes
 cups options = raw

[tmp]
comment = temporal files
path = /tmp
public = yes
writable = yes
printable = no

[mp3]
comment = my data files
path = /mydatafiles
public = yes
writable = no
printable = no


I start the service by running

# smbd -D
# nmbd -D

then the logs show:

log.nmbd:
-
[2013/07/11 21:11:47,  0] ../source3/nmbd/nmbd.c:883(main)
   nmbd version 4.0.7 started.
   Copyright Andrew Tridgell and the Samba Team 1992-2012
[2013/07/11 21:12:20,  0] 
../source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2)
   *
   Samba name server MYSERVER is now a local master browser for workgroup 
MYGROUPNAME on subnet 192.168.1.20
   *

log.smbd:
-[2013/07/11 21:11:45,  0] ../source3/smbd/server.c:1200(main)
   smbd version 4.0.7 started.
   Copyright Andrew Tridgell and the Samba Team 1992-2012

When I try:

# smbclient -L myserver (the name of my computer)

Anonymous login successful
Domain=[MYGROUPNAME] OS=[Unix] Server=[Samba 4.0.7]

 Sharename   Type  Comment
 -     ---
 tmp Disk  temporal files
 mp3 Disk  mp3 music
 IPC$IPC   IPC Service (Samba Server Version 4.0.7)
Anonymous login successful
Domain=[SORCERY] OS=[Unix] Server=[Samba 4.0.7]

 Server   Comment
 ----
 MYSERVER Samba Server Version 4.0.7

 WorkgroupMaster
 ----
 MYGROUPNAME  MYSERVER


 From windows computers, it shows on the network, from Linux (dolphin browser) 
it does not show but calling 'smbclient -L myserver' it shows the shared 
directories... how can I allow other computers to connect? and how can I allow 
my local computer see its own shares?

Thanks for your help




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Accessing sysvol results in fatal PANIC: internal error

2013-07-12 Thread Andrew Martin
Hello,

I am currently testing two Samba 4.0.6 AD DCs. I've noticed that permissions in 
the sysvol directory do not seem to be consistent. Some GPs are owned by root, 
while others are owned by DOMAIN\Domain Admins. Attempting to fix the 
permissions with samba-tool ntacl sysvolreset while samba is running results 
in a PANIC: internal error. In fact, even trying to ls -l the directories 
inside of the sysvol directory causes a PANIC. The domain is then unusable 
until I restart samba. Here is a verbose log with log level = 3: 
http://pastebin.com/F1tSZVNf

What is the correct/safe way to fix permissions on the sysvol directory (and 
why do they get changed like this) and what is a safe way to sync the sysvol 
directory between DCs (rsync causes this same PANIC)?

Thanks,

Andrew Martin
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Accessing sysvol results in fatal PANIC: internal error

2013-07-12 Thread Andrew Martin
- Original Message -
 From: Andrew Martin amar...@xes-inc.com
 To: samba@lists.samba.org
 Sent: Friday, July 12, 2013 9:48:41 PM
 Subject: [Samba] Accessing sysvol results in fatal PANIC: internal error
 
 Hello,
 
 I am currently testing two Samba 4.0.6 AD DCs. I've noticed that
 permissions in the sysvol directory do not seem to be consistent.
 Some GPs are owned by root, while others are owned by DOMAIN\Domain
 Admins. Attempting to fix the permissions with samba-tool ntacl
 sysvolreset while samba is running results in a PANIC: internal
 error. In fact, even trying to ls -l the directories inside of
 the sysvol directory causes a PANIC. The domain is then unusable
 until I restart samba. Here is a verbose log with log level = 3:
 http://pastebin.com/F1tSZVNf
 
 What is the correct/safe way to fix permissions on the sysvol
 directory (and why do they get changed like this) and what is a safe
 way to sync the sysvol directory between DCs (rsync causes this same
 PANIC)?
 
 Thanks,
 
 Andrew Martin
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba
 

It seems that this might be bug #9820:
https://bugzilla.samba.org/show_bug.cgi?id=9820
I haven't noticed it in winbind specifically, just in that samba
becomes unresponsive.

If so, the attached patch (#9043) is the current solution to this
problem? Can it be applied to 4.0.6?

Thanks,

Andrew
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


autobuild: intermittent test failure detected

2013-07-12 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2013-07-12-1845/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2013-07-12-1845/samba3.stderr
   http://git.samba.org/autobuild.flakey/2013-07-12-1845/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2013-07-12-1845/samba.stderr
   http://git.samba.org/autobuild.flakey/2013-07-12-1845/samba.stdout
  
The top commit at the time of the failure was:

commit 940395d38bcc348eb5f1be7ba03cd554d9d3bc93
Author: Volker Lendecke v...@samba.org
Date:   Thu Jul 11 16:22:26 2013 +0200

smbd: Fix a 100% loop at shutdown time

In the destructor of fsp-aio_requests[0] we put another request into
fsp-aio_requests[0]. Don't overwrite that with TALLOC_FREE.

Signed-off-by: Volker Lendecke v...@samba.org
Reviewed-by: Jeremy Allison j...@samba.org

Autobuild-User(master): Jeremy Allison j...@samba.org
Autobuild-Date(master): Thu Jul 11 20:56:42 CEST 2013 on sn-devel-104