[Samba] Recovery from Domain/WINS Outage - Didn't work well
We're using Samba 2.2.5 and 2.2.7 in SECURITY=DOMAIN mode. This morning we lost contact with our PDC, and for about 2 hours, users were unable to logon. After chasing this down, we determined that we were also unable to contact the WINS server defined in smb.conf. Our backup WINS server was available, but it seems Samba only supports one WINS server in smb.conf, so this didn't help much. After manually switching to the other WINS server, we were able to connect. We're still new with this, and so far Samba isn't looking too reliable to our management. This is the second time a WINS-related problem has knocked us down while the Windows servers remained available. I'm assuming we're still only allowed to specify a single WINS server. Does anyone have any idea if this will be fixed anytime soon? Should Samba have recovered from the DC outage? It appears that after losing contact with the DC, it went back to WINS, and tried to get a new list. Does it only try the first DC on the list, or does it work down till it finds a good one? Am I correct in assuming that being unable to connect to the WINS server would prevent this from happening? Thanks in advance for any info you can provide. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Recovery from Domain/WINS Outage - Didn't work well
We're using Samba 2.2.5 and 2.2.7 in SECURITY=DOMAIN mode. This morning we lost contact with our PDC, and for about 2 hours, users were unable to logon. After chasing this down, we determined that we were also unable to contact the WINS server defined in smb.conf. Our backup WINS server was available, but it seems Samba only supports one WINS server in smb.conf, so this didn't help much. After manually switching to the other WINS server, we were able to connect. We're still new with this, and so far Samba isn't looking too reliable to our management. This is the second time a WINS-related problem has knocked us down while the Windows servers remained available. I'm assuming we're still only allowed to specify a single WINS server. Does anyone have any idea if this will be fixed anytime soon? Should Samba have recovered from the DC outage? It appears that after losing contact with the DC, it went back to WINS, and tried to get a new list. Does it only try the first DC on the list, or does it work down till it finds a good one? Am I correct in assuming that being unable to connect to the WINS server would prevent this from happening? Thanks in advance for any info you can provide.
RE: [Samba] Linux permissions vs Samba permissions
On directories, the execute bit means permission to search the directory. That's what the Samba user needs to see files in it. -Original Message- From: Marshall Lucas [mailto:[EMAIL PROTECTED]] Sent: Friday, January 17, 2003 9:20 AM To: [EMAIL PROTECTED] Subject: [Samba] Linux permissions vs Samba permissions Okay, admittedly I'm running an old version 2.0.5, but, why do I have to set the eXecute permission in Linux before Samba will let a Windows client see any files? Why would execute have anything to do with read and/or write? I would think I could set -rw-rw or -rw-rw-rw- and be just fine, but oh no, you get an empty list and cannot create new files until I change it to -rwxrwx--- or -rwxrwxrwx. -- Marshall Lucas -- IT Systems Analyst -- EDI Specialist -- Petra Industries, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Delayed Write failures with Windows XP
We have Windows XP users who have their desktop folders on a Samba share. Some of them have been getting Delayed Write Failure messages recently on the cookies/index.dat file. At first I thought it was a fluke related to a network outage we experienced, but now I'm finding out it had been happening previously, and it's still going on. This is Samba 2.2.5 on SuSE Linux SLES7 on S/390. Does anyone have any ideas? Thanks. One respondent suggested giving all users admin authority to the share, but that's not acceptable for a number of reasons, and since the problem isn't consistent, I don't see why this would help or be necessary. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Delayed Write failures with Windows XP
Not an option for the time being. Does anyone have an idea why this is happening? I don't see why permissions would be an issue for this situation and no other, especially given that the users aren't having trouble with any other files. -Original Message- From: Ken Schneider [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 24, 2002 9:51 AM To: '[EMAIL PROTECTED]' Subject: Re: [Samba] Delayed Write failures with Windows XP Or you could try the follwing link: http://acl.bestbits.at/ Extended ACL's helped with this type of problem here. On Tue, 2002-12-24 at 09:38, Hall, Ken (ECSS) wrote: We have Windows XP users who have their desktop folders on a Samba share. Some of them have been getting Delayed Write Failure messages recently on the cookies/index.dat file. At first I thought it was a fluke related to a network outage we experienced, but now I'm finding out it had been happening previously, and it's still going on. This is Samba 2.2.5 on SuSE Linux SLES7 on S/390. Does anyone have any ideas? Thanks. One respondent suggested giving all users admin authority to the share, but that's not acceptable for a number of reasons, and since the problem isn't consistent, I don't see why this would help or be necessary. -- Ken Schneider Senior UNIX Administrator Network Administrator [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Delayed Write failures with Windows XP
We have users who have their desktop folders on a Samba share. Some of them have been getting Delayed Write Failure messages recently on the cookies/index.dat file. At first I thought it was a fluke related to a network outage we experienced, but now I'm finding out it had been happening previously. This is Samba 2.2.5 on SuSE Linux SLES7 on S/390. Does anyone have any ideas? Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Roaming profiles problem - loading failure
I just came out of a meeting where we narrowed our version of this problem down to a particular build level (or two) of Win2K. NT appears to be fine, and so does XP. We're going to try a couple of different builds and hopefully get a level 10 log of a failing case. If anyone has any more information on this, I'd love to hear it, and if the Samba folks need any additional doc, speak now! -Original Message- From: [EMAIL PROTECTED] [mailto:jra;dp.samba.org] Sent: Tuesday, November 05, 2002 1:29 PM To: Andrew Gaffney Cc: Peter Polkinghorne; Samba Subject: Re: [Samba] Roaming profiles problem - loading failure On Tue, Nov 05, 2002 at 08:48:42AM -0600, Andrew Gaffney wrote: I have been having this same problem. There is nothing in 2.2.6 that fixes it. I still have no idea what's causing it. Peter Polkinghorne wrote: I have a samba 2.2.4 PDC which acts as the repository of roaming profiles. Just recently some of our users have experienced failure to load roaming profiles. The clients are on a pair of Windows 2000 terminal servers. The failure does not seem to be confined to one server and only affects some people. The error given takes place during the loading profile stage: Windows can not copy: \\Samba server\profiles\aaa\Application Data\Microsoft\Outlook\FAVF.tmp to C:\Documents and Settings\aaa.KINGSFORDS\Application Data\Microsoft\Outlook\FAVF.tmp DETAIL - Access is denied More details please, a packet sniff or log file extract -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Roaming profiles problem - loading failure
I've been seeing this too. They seem to be getting around it by deleting the current profile and letting Windows re-save it, but we've held off migrating any more users with roaming profiles till we figure out exactly what's going on. If anyone finds out anything about this, I'd be very interested. -Original Message- From: Andrew Gaffney [mailto:agaffney;locutus2.yi.org] Sent: Tuesday, November 05, 2002 9:49 AM To: Peter Polkinghorne Cc: Samba Subject: Re: [Samba] Roaming profiles problem - loading failure I have been having this same problem. There is nothing in 2.2.6 that fixes it. I still have no idea what's causing it. Peter Polkinghorne wrote: I have a samba 2.2.4 PDC which acts as the repository of roaming profiles. Just recently some of our users have experienced failure to load roaming profiles. The clients are on a pair of Windows 2000 terminal servers. The failure does not seem to be confined to one server and only affects some people. The error given takes place during the loading profile stage: Windows can not copy: \\Samba server\profiles\aaa\Application Data\Microsoft\Outlook\FAVF.tmp to C:\Documents and Settings\aaa.KINGSFORDS\Application Data\Microsoft\Outlook\FAVF.tmp DETAIL - Access is denied Then it says: Windows could not load the profile and is logging you on with a temporary profile. My profiles part of smb.conf is: # Profiles [profiles] path = /home/ntprofile writeable = yes create mask = 0600 directory mask = 0700 nt acl support = no csc policy = disable ... the last 2 lines being added during the day, but with no effect. I have checked the source file and apart from being 0 length it looks perfectly accessible. Anyone else seen this? Or any hints as to what to do? I am contemplating upgrading to 2.2.6 - but the WHATSNEW gives no hint that this might be a fixed problem. Of course it might be a problem with the Windows 2000 servers - not sure what SP level we are at - Windows manager away. -- Um, can you repeat the part of the stuff where you said all about the things? - Homer Simpson -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Share name length issue?
I remember seeing some posts on here about problems with long share names. Particularly, I'm having trouble with a user who has a 14 character ID. When she tries to access her HOME directory, she gets RESOURCE UNAVAILABLE. We can see the directory, however, if we come down from a share above (and so can she). Does anyone know anything about this problem? It's happening on both my 2.2.5 production and 2.2.6 test servers. Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] getent not working correctly
All looks fine, but did you reboot after changing nsswitch.conf? When I was testing both winbind and ldap nsswitch, I found that the mechanism caches lookups, so changes to the config weren't always recognized. It would work, not work, work, etc., and it drove me crazy till I found out about the nscd daemons. I'm not sure this is your problem, but it sounds a lot like what I saw, so I thought I'd ask. -Original Message- From: Sean Patrick Ingles [mailto:ingless;visionsys.com] Sent: Monday, November 04, 2002 10:19 AM To: Hall, Ken (ECSS); [EMAIL PROTECTED] Subject: RE: [Samba] getent not working correctly Here is my /etc/nsswitch.conf (abbreviated): passwd: files winbind shadow: files winbind group: files winbind I first start smbd -D and nmbd -D Then I start winbindd Then I join the domain (smbpasswd -j DOMAIN -r DOMAINCONTROLLER -U Administrator) It works Then I check my Secret (wbinfo -t) and it's good Then I list users and groups (wbinfo -u and wbinfo -g) and it works fine However I still cannot get getent passwd and getent group working. I am 100% stumped -SP -Original Message- From: Hall, Ken (ECSS) [mailto:KeHall;exchange.ml.com] Sent: Friday, November 01, 2002 12:55 PM To: [EMAIL PROTECTED] Subject: RE: [Samba] getent not working correctly Did you reboot after starting winbindd? Either do that, or try looking for the nameserver cache daemons (nscd), and kill them all. (Don't worry, they'll restart.) I had the same problem with nss_ldap, and it drove me NUTS till I found out about the cache mechanism. -Original Message- From: Noel Kelly [mailto:nkelly;citrusnetworks.net] Sent: Friday, November 01, 2002 12:46 PM To: 'Sean Patrick Ingles'; [EMAIL PROTECTED] Subject: RE: [Samba] getent not working correctly You need getent to work. This is really how Unix actually does the authenticating - winbind is just the conduit to the M$ database. Have you edited your /etc/nsswitch.conf correctly? You need: passwd: files winbind nisplus shadow: files winbind nisplus group: files winbind nisplus This will make Unix call winbind when looking for users/groups (this the mechanism that getent passwd/group runs). HTH, Noel -Original Message- From: Sean Patrick Ingles [mailto:ingless;visionsys.com] Sent: 01 November 2002 15:41 To: [EMAIL PROTECTED] Subject: [Samba] getent not working correctly Hello again! Ok, I've gotten wbinfo -u and wbinfo -g working great Now I try to run getent passwd and getent group I get my local users/groups but not the ones on the Windows 2k Server Domain Controller and it just hangs after listing the local ones. I also tried authenticating a user and it worked I'm assuming wbinfo -a DOMAIN+ingless@DOMAIN%password (The usernames here have user@domain due to some M$ Active-Directory thing...) plaintext password authentication succeeded challenge/response password authentication failed Could not authenticate user DOMAIN+ingless@DOMAIN%password with challenge/response Do I need getent working, or is it safe to assume everything is functioning normally now? Thanks! -SP === \ / / / Sean Patrick Ingles \ / / / Jr. Network Engineer \ / ___ / / \ / / / Vision Systems, Inc. __/ / _/ 142 State Street Albany, NY 12207 www.visionsys.com Landline: +1 518.434.4300 x1406 [EMAIL PROTECTED] Fax: +1 518.434.4304 == -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.408 / Virus Database: 230 - Release Date: 24/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] getent not working correctly
Did you reboot after starting winbindd? Either do that, or try looking for the nameserver cache daemons (nscd), and kill them all. (Don't worry, they'll restart.) I had the same problem with nss_ldap, and it drove me NUTS till I found out about the cache mechanism. -Original Message- From: Noel Kelly [mailto:nkelly;citrusnetworks.net] Sent: Friday, November 01, 2002 12:46 PM To: 'Sean Patrick Ingles'; [EMAIL PROTECTED] Subject: RE: [Samba] getent not working correctly You need getent to work. This is really how Unix actually does the authenticating - winbind is just the conduit to the M$ database. Have you edited your /etc/nsswitch.conf correctly? You need: passwd: files winbind nisplus shadow: files winbind nisplus group: files winbind nisplus This will make Unix call winbind when looking for users/groups (this the mechanism that getent passwd/group runs). HTH, Noel -Original Message- From: Sean Patrick Ingles [mailto:ingless;visionsys.com] Sent: 01 November 2002 15:41 To: [EMAIL PROTECTED] Subject: [Samba] getent not working correctly Hello again! Ok, I've gotten wbinfo -u and wbinfo -g working great Now I try to run getent passwd and getent group I get my local users/groups but not the ones on the Windows 2k Server Domain Controller and it just hangs after listing the local ones. I also tried authenticating a user and it worked I'm assuming wbinfo -a DOMAIN+ingless@DOMAIN%password (The usernames here have user@domain due to some M$ Active-Directory thing...) plaintext password authentication succeeded challenge/response password authentication failed Could not authenticate user DOMAIN+ingless@DOMAIN%password with challenge/response Do I need getent working, or is it safe to assume everything is functioning normally now? Thanks! -SP === \ / / / Sean Patrick Ingles \ / / / Jr. Network Engineer \ / ___ / / \ / / / Vision Systems, Inc. __/ / _/ 142 State Street Albany, NY 12207 www.visionsys.com Landline: +1 518.434.4300 x1406 [EMAIL PROTECTED] Fax: +1 518.434.4304 == -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.408 / Virus Database: 230 - Release Date: 24/10/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Creating user home directories with domain login
There's a login script option at the share level that can be used to run the adduser or useradd command. I'm using a script with some extra smarts, but it can be done pretty easily. -Original Message- From: Scott Wrosch [mailto:kc8lir;yahoo.com] Sent: Friday, October 25, 2002 2:20 PM To: [EMAIL PROTECTED] Subject: [Samba] Creating user home directories with domain login Hello, I've got Samba set up for domain logins and use winbind as well. What I'm wondering is if it's possible for the home directory to be automatically created when the user logs in if it doesn't already exist? If not, anyone have a relatively easy way to do this, in addition to giving the proper owner and group? Thanks, Scott __ Do you Yahoo!? Y! Web Hosting - Let the expert host your web site http://webhosting.yahoo.com/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] samba 2.2.6pre2 make fails
I ran into this. You need the pam-devel package. -Original Message- From: Galecki, Jason [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 10, 2002 9:46 AM To: '[EMAIL PROTECTED]' Subject: [Samba] samba 2.2.6pre2 make fails When I compile Samba, this is on SuSE 7.2, I keep getting a make failure, but it still completes to a prompt. Should I ignore or does anyone have a fix? When I configure, I use these options: ./configure --enable-cups --with-smbwrapper --with-automount --with-smbmount --with-pam --with-pam_smbpass --with-winbind --with-winbind-auth-challenge When I run make, this is the error, it's the very last line: Compiling passdb/pampass.c passdb/pampass.c:42: security/pam_appl.h: No such file or directory make: *** [passdb/pampass.o] Error 1 When this is all done, it doesn't create a pampass.o file, so I'm guessing I will definitely need this to pass the make command. Jason -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] HOME share behavior
I have a [homes] share with a group of users. One of them is greg. When administrator matt tries to map a share like so: net use \\server\greg h: (I might not have the syntax exactly right, it's been a while.) The function succeeds, but the share actually mapped is MATT's home directory (\\server\matt, not greg. Is this normal behavior for the homes share? This is Samba 2.2.0 a on SuSE Linux on S/390. Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] FreeBSD 4.5, Samba 2.2.4_1,W2K client printer prope rties cannot be displayed
(Embedded image moved Hall, Ken (ECSS) [EMAIL PROTECTED] to file: 06/06/2002 01:57 PM pic16789.pcx) (Embedded image moved Hall, Ken (ECSS) [EMAIL PROTECTED] to file: 06/06/2002 01:57 PM pic05107.pcx) (Embedded image moved Hall, Ken (ECSS) [EMAIL PROTECTED] to file: 06/06/2002 01:57 PM pic27385.pcx) Looks like there's some kind of loop going. The list admin needs to take a look. -Original Message- From: WEBSTER, Greg [mailto:[EMAIL PROTECTED]] Sent: Thursday, June 06, 2002 1:39 PM To: 'Kevin Long'; '[EMAIL PROTECTED]' Subject: RE: [Samba] FreeBSD 4.5, Samba 2.2.4_1, W2K client printer prope rties cannot be displayed Could you please not send emails with 6 bloody useless pics attached to clutter by inbox? It's rather rude. Greg -Original Message- From: Kevin Long [mailto:[EMAIL PROTECTED]] Sent: June 6, 2002 10:15 AM To: '[EMAIL PROTECTED]' Subject: [Samba] FreeBSD 4.5, Samba 2.2.4_1, W2K client printer properties cannot be displayed (Embedded image moved Kevin Long [EMAIL PROTECTED] to file: 06/06/2002 01:15 PM pic29929.pcx) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba pic27385.pcx Description: Binary data pic05107.pcx Description: Binary data pic16789.pcx Description: Binary data
