Re: [Samba] XP Pro client perm issues after joining samba domain

2012-08-24 Thread Tom Ryan

On 8/24/12 7:42 AM, Chris Nighswonger cnighswon...@foundations.edu
wrote:

No takers?

I googled for

internet explorer crashes when administrator

Figuring that samba wasn't to blame here.

The first hit I got might be your cause.. (protected mode)


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] ongoing printer issues

2012-02-01 Thread Tom Ryan
So I continue to work through the various printing issues I've had with Samba. 
Hopefully the indexing of my messages will prove useful to others :)

Anyway, while my previous fixes have gotten us printing for the most part, we 
still experience random issues (mostly with PDF printing to certain printers 
and printing from speciality programs).

Anyway, our current issue is as such.

User can print from Word/Outlook/Firefox/etc just fine.
User prints from speciality program to same printer (as word/etc) and it does 
not print.

Samba reports (at log level 3) a slew of stuff, the most unusual part though is

[2012/02/01 16:43:55.319563,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/ipc.c(137) cmd=37 (SMBtrans) STATUS_BUFFER_OVERFLOW

I should note that this is a Win7 64bit system printing to 3.6.3

I've found some posts on the 'net relating to regressions in samba and 64bit 
clients, but I was hoping if anyone had some other suggestions.

Many thanks!

Tom
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] issues with printing

2012-01-06 Thread Tom Ryan


On 1/6/12 3:31 PM, Jeremy Allison j...@samba.org wrote:

The problem I can see from the pastebin is an authentication
issue. The client is trying to connect via a machine account.

If you don't allow the machine account access to the print
share then it'll get access denied.

The error above is the machine account not being present
on the box, so we can't allow such a user to connect. You
could set map to guest = bad user, and allow guest
access to the print shares, or use a username map to
map the incoming machine account to another (known)
user, but the underlying problem here isn't in the print
subsystem.

Jeremy.


Jeremy,

This is true. I would not have the issue (I suspect) if I used winbind.

I read somewhere prior to Samba 3, machine account auths were dropped (I
forget the exact wording).

In my case (I want 3.6.x for the print notice setting due to client
firewalls), I think the fix would be an option to ignore (or silently
map to guest account?) machine account auth requests?

I don't know the best fix.. I just fixed it by manually adding the
accounts.. Ugh.. But now at least it works.

Tom

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] issues with printing

2012-01-05 Thread Tom Ryan


On 1/4/12 5:44 PM, Tom Ryan tomr...@camlaw.rutgers.edu wrote:

I've included a full log from a failed print session here:

http://pastebin.com/WBA4PEnG

Ok, I've managed to determine that every user who is having an issue
printing has an error message like

[2012/01/05 09:18:54.928729,  3] auth/auth_util.c:1028(check_account)
  Failed to find authenticated user DOMAIN\machinename$ via getpwnam(),
denying access.
[2012/01/05 09:18:54.929709,  2] auth/auth.c:319(check_ntlm_password)
  check_ntlm_password:  Authentication for user [machinename$] -
[machinename$] FAILED with error NT_STATUS_NO_SUCH_USER
[2012/01/05 09:18:54.929807,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/sesssetup.c(124) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE

You might recall that we don't use winbind so I'm at a loss as to why this
happens sporadically and what I can do (short of editing the code) to work
around it.


Thoughts?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] issues with printing

2012-01-05 Thread Tom Ryan


On 1/5/12 9:31 AM, Tom Ryan tomr...@camlaw.rutgers.edu wrote:


[2012/01/05 09:18:54.928729,  3] auth/auth_util.c:1028(check_account)
  Failed to find authenticated user DOMAIN\machinename$ via getpwnam(),
denying access.
[2012/01/05 09:18:54.929709,  2] auth/auth.c:319(check_ntlm_password)
  check_ntlm_password:  Authentication for user [machinename$] -
[machinename$] FAILED with error NT_STATUS_NO_SUCH_USER
[2012/01/05 09:18:54.929807,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/sesssetup.c(124) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE

You might recall that we don't use winbind so I'm at a loss as to why this
happens sporadically and what I can do (short of editing the code) to work
around it.


Thoughts?

Ok, so I have found out if I put

DOMAIN\machinename$
And
machinename$

In /etc/passwd

Then everything works.. However, that really isn't acceptable.

Does anyone have a solution??

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] issues with printing

2012-01-04 Thread Tom Ryan
We have recently started having an odd problem with printing via samba (3.6.1). 
Samba is joined via security = ads to our domain. We do not use winbind on this 
system. Our account usernames are provided via openldap.

User starts system (generally windows 7 64bit, but we've seen it on 32bit 
windows 7 and XP), sometimes they can print, sometimes they can't. If they 
reboot, they can almost always print.

I've turned the logging up to level 3 and have noticed repeated errors like

[2012/01/04 09:10:32.252107,  2] auth/auth.c:319(check_ntlm_password)
  check_ntlm_password:  Authentication for user [MACHINENAME$] - 
[MACHINENAME$] FAILED with error NT_STATUS_NO_SUCH_USER
[2012/01/04 09:10:32.252212,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/sesssetup.c(124) cmd=115 (SMBsesssetupX) 
NT_STATUS_LOGON_FAILURE

Which I suspect has to do with the lack of winbind and not having machine names 
in our ldap service.

I should note that this all worked perfectly up until a few weeks ago and then 
just started breaking randomly.. Isn't that always the case?

I appreciate any pointers.

Thanks.

Tom
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] issues with printing

2012-01-04 Thread Tom Ryan


On 1/4/12 9:13 AM, Tom Ryan tomr...@camlaw.rutgers.edu wrote:

We have recently started having an odd problem with printing via samba
(3.6.1). Samba is joined via security = ads to our domain. We do not use
winbind on this system. Our account usernames are provided via openldap.

User starts system (generally windows 7 64bit, but we've seen it on 32bit
windows 7 and XP), sometimes they can print, sometimes they can't. If
they reboot, they can almost always print.

I've turned the logging up to level 3 and have noticed repeated errors
like

[2012/01/04 09:10:32.252107,  2] auth/auth.c:319(check_ntlm_password)
  check_ntlm_password:  Authentication for user [MACHINENAME$] -
[MACHINENAME$] FAILED with error NT_STATUS_NO_SUCH_USER
[2012/01/04 09:10:32.252212,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/sesssetup.c(124) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE

Which I suspect has to do with the lack of winbind and not having machine
names in our ldap service.

I should note that this all worked perfectly up until a few weeks ago and
then just started breaking randomly.. Isn't that always the case?

I appreciate any pointers.
Thanks.

Tom

I've included a full log from a failed print session here:

http://pastebin.com/WBA4PEnG

Thanks for any consideration.

Tom

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] issues with printing

2012-01-04 Thread Tom Ryan


On 1/4/12 9:57 AM, Tom Ryan tomr...@camlaw.rutgers.edu wrote:


I've included a full log from a failed print session here:

http://pastebin.com/WBA4PEnG

Some additional info..

On one of our interim firewalls, we're noticing various dropped
connections from our client hosts to this particular samba server's port
135.

Any comments or suggestions would be appreciated.

Thanks.

Tom

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] samba print notifications

2011-12-15 Thread Tom Ryan
I remember conversing with Jeremy at the beginning of the year re: issues with 
samba's print notifications to clients (specifically XP) with firewalls enabled.

I believe that an option to turn this behavior off was going to be added.

Does anyone know if the option was added and if so, beginning in what version 
and the name of the option?

I'm not having much luck (other then finding my original message :)

Tom
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Odd printing issue

2011-01-06 Thread Tom Ryan
On 1/5/11 11:34 AM, Tom Ryan tomr...@camlaw.rutgers.edu wrote:

 Over the last few days, our users have started experiencing delays in
 printing.
 
 In the log files (for the client), we now see
 
 [2011/01/05 11:12:34.360166,  1]
 libsmb/cliconnect.c:2216(cli_start_connection)
   cli_start_connection: failed to connect to MACHINENAME20
 (:::IPADDRESS). Error NT_STATUS_UNSUCCESSFUL
 
 As new systems are affected, these errors appear. We get about 7 of them
 (every 10 seconds) and then the print job completes.
 
 
I saw Jeremy¹s reply to this on the website (Sorry, I think a spam filter
blocked it).

Anyway, I was wondering if you had an eta on this as its causing us quite a
few issues and we¹d like to resolve it asap (i.e. Whether we wait for the
samba team to address or look into it ourselves).

Thanks Jeremy!

Tom
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Odd printing issue

2011-01-05 Thread Tom Ryan
Over the last few days, our users have started experiencing delays in
printing.

In the log files (for the client), we now see

[2011/01/05 11:12:34.360166,  1]
libsmb/cliconnect.c:2216(cli_start_connection)
  cli_start_connection: failed to connect to MACHINENAME20
(:::IPADDRESS). Error NT_STATUS_UNSUCCESSFUL

As new systems are affected, these errors appear. We get about 7 of them
(every 10 seconds) and then the print job completes.

Suggestions? Thoughts?

Tom
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.0.6 Problems w/AD and Kerberos

2004-09-10 Thread Tom Ryan
I submitted a ticket (bugzilla) to redhat on this..

with the 3.0.6 update from them, coupled with their recent kerberos
updates, it fails unless you use the FQDN..

its completely reproducable (at least on my end). I moved to security =
domain and have it at least working again..

Tom

On Fri, 10 Sep 2004, Gerald (Jerry) Carter wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1

 Christian Merrill wrote:

 | Well from my end (Redhat) the behavior is indicative of
 | a known issue with the MIT kerberos 1.2.x packages
 | that we currently support and Win2k3 DC's...however Win2k
 | DC's have been operating fine as far as I know.  What I
 | am seeing are customers who were previously running
 | upgrade to the 3.0.6 samba package and then start to
 | encounter these errors.  If they downgrade the samba
 | package the problem goes away.   I've also noticed a few
 | other posts from users on other distros such as
 | Debian encountering very similar behavior.

 | On the surface it really looks like a kerberos problem,
 | but people are reporting that it seems to be directly
 | linked to the samba package.  My current test environment
 | is on 2k3 so I'm still in the process of setting up a
 | 2k AD environment to do testing on...at this point just
 | relaying feedback that I am getting from others.

 I spent some time on this today without any luck
 reproducing the problem.  My test server was SuSE 9.1 pro
 however with heimdal 0.6.1rc3.

 I've updated the comments in

   https://bugzilla.samba.org/show_bug.cgi?id=1717

 And I checked the ticket cache produced by
 smbclient //server/share -k from 3.0.5 and 3.0.6.  Same
 host principal is used ([EMAIL PROTECTED]).

 So far, I've not learned of any common thread from the people
 who posted on this.  I'm open to suggestions.  (off to
 review abartlet's mail to samba-technical about this).


 cheers, jerry
 - -
 Alleviating the pain of Windows(tm)  --- http://www.samba.org
 GnuPG Key- http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song--Switchfoot (2003)
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.2.4 (GNU/Linux)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

 iD8DBQFBQgLaIR7qMdg1EfYRAhVvAJ9skQtebUDF4QgAMFgxE+3IblGBNACgpnzi
 atDsjikhg3nr7PyaWuVXaLY=
 =odE/
 -END PGP SIGNATURE-
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden   IT Help Desk: 856-225-2343
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.6 Problems w/AD and Kerberos

2004-09-10 Thread Tom Ryan
Christian,

another reason I think this is also kerberos related is that I am also
having problems with ssh on my (admittedly) odd round robin dns setup..

I used to be able to ssh to the common hostname and get access to either
box, now I get an unknown kerberos error and have to login to either host
by name.

couple that with my samba issues and how it works with FQDN, and I was
inclined to think it was kerberos..

but hey.. I admit it.. you guys know better than I do :)

Tom

On Tue, 7 Sep 2004, Christian Merrill wrote:

 Tom Ryan wrote:

 I submitted a ticket (bugzilla) to redhat on this..
 
 with the 3.0.6 update from them, coupled with their recent kerberos
 updates, it fails unless you use the FQDN..
 
 its completely reproducable (at least on my end). I moved to security =
 domain and have it at least working again..
 
 Tom
 
 On Fri, 10 Sep 2004, Gerald (Jerry) Carter wrote:
 
 
 
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Christian Merrill wrote:
 
 | Well from my end (Redhat) the behavior is indicative of
 | a known issue with the MIT kerberos 1.2.x packages
 | that we currently support and Win2k3 DC's...however Win2k
 | DC's have been operating fine as far as I know.  What I
 | am seeing are customers who were previously running
 | upgrade to the 3.0.6 samba package and then start to
 | encounter these errors.  If they downgrade the samba
 | package the problem goes away.   I've also noticed a few
 | other posts from users on other distros such as
 | Debian encountering very similar behavior.
 
 | On the surface it really looks like a kerberos problem,
 | but people are reporting that it seems to be directly
 | linked to the samba package.  My current test environment
 | is on 2k3 so I'm still in the process of setting up a
 | 2k AD environment to do testing on...at this point just
 | relaying feedback that I am getting from others.
 
 I spent some time on this today without any luck
 reproducing the problem.  My test server was SuSE 9.1 pro
 however with heimdal 0.6.1rc3.
 
 I've updated the comments in
 
 https://bugzilla.samba.org/show_bug.cgi?id=1717
 
 And I checked the ticket cache produced by
 smbclient //server/share -k from 3.0.5 and 3.0.6.  Same
 host principal is used ([EMAIL PROTECTED]).
 
 So far, I've not learned of any common thread from the people
 who posted on this.  I'm open to suggestions.  (off to
 review abartlet's mail to samba-technical about this).
 
 
 cheers, jerry
 - -
 Alleviating the pain of Windows(tm)  --- http://www.samba.org
 GnuPG Key- http://www.plainjoe.org/gpg_public.asc
 If we're adding to the noise, turn off this song--Switchfoot (2003)
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.2.4 (GNU/Linux)
 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
 iD8DBQFBQgLaIR7qMdg1EfYRAhVvAJ9skQtebUDF4QgAMFgxE+3IblGBNACgpnzi
 atDsjikhg3nr7PyaWuVXaLY=
 =odE/
 -END PGP SIGNATURE-
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 
 
 
 
 ___
 Tom RyanVoice: 856-225-6361
 Consulting System Administrator   Fax: 856-969-7900
 Rutgers School of Law - Camden   IT Help Desk: 856-225-2343
 
 
 Tom we have had multiple reports of this and I imagine your ticket is
 probably one of many in my queue right now.  We are working on it
 internally as well but so far have not made any real progress narrowing
 down the problem.  It *appears* that this is actually unrelated to our
 kerberos update.  As I mentioned previously this looks like the problems
 we have been seeing in win2k3 environments -- almost as if something
 helped spread this issue to win2k as well.

 Christian


___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden   IT Help Desk: 856-225-2343
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.6 Problems w/AD and Kerberos

2004-09-08 Thread Tom Ryan
I found that if you use the FQDN it works.. (which was not acceptable to
us).. we (unfortuantely) went to security = domain.

Tom

On Wed, 8 Sep 2004, Blindauer Emmanuel wrote:

 Le dimanche 05 Septembre 2004 13:38, Christian Merrill a écrit :
  Running into a lot of people upgrading to the 3.0.6 package that all
  of a sudden begin to experience the Failed to verify incoming
  ticket! errors etc., that are generally associated with a kerberos
  package incompatibility.
 
  However many of these people are running later versions of kerberos
  *and* reverting to a previous version of Samba appears to fix the
  issue.  Is there something new setting wise that has taken place, is
  something really wrong with this new package, or is this all just a
  strange coincidence?
 
  Christian
 I confirm the problem:
 I'm running win2k SP4, AD, mixed mode, no other special conf.
 the samba is 3.0.6, compiled from sources. I use winbind too.
 winbind has some   krb5_cc_get_principal failed (No credentials cache found)
 but nothing special.
 but the samba daemon get, for some users,
 smbd/sesssetup.c:reply_spnego_kerberos(173)
 Failed to verify incoming ticket 
 and this prevent user from acceding their share.
 the used kerberos is 1.3.4

 The 2000 domain has been started from scratch, no NT4 migration.

 Emmanuel
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden   IT Help Desk: 856-225-2343
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] issues with samba / shares

2004-09-07 Thread Tom Ryan
After upgrading to 3.0.6 (RHEL's version), I can no longer access shares
(file or printer) on the server by referencing the short hostname. I
must now enter the FQDN..

any ideas?

Tom
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: issues with samba / shares (potential issue)

2004-09-07 Thread Tom Ryan
ok.. I dug around a bit more and it would appear that the problem is
related to the kerberos libraries I now have (which RH also updated).

short of remapping all of my shares, is there any workaround?

Tom

On Tue, 7 Sep 2004, Tom Ryan wrote:

 After upgrading to 3.0.6 (RHEL's version), I can no longer access shares
 (file or printer) on the server by referencing the short hostname. I
 must now enter the FQDN..

 any ideas?

 Tom


___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden   IT Help Desk: 856-225-2343
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: issue with running samba on two separate systems under 1 hostname

2004-08-26 Thread Tom Ryan
ok.. at this point, I think I have 0 issues EXCEPT constant corruption of
my printing TDBs.. is there anyway to cut down on this/prevent this?

should I upgrade my samba beyond the RHEL provided one?

Tom

On Wed, 25 Aug 2004, Tom Ryan wrote:

 I have a read only share and a couple of printers exported that I would
 like to be available under a single hostname.

 to that end, I have a created a hostname that refers to two ip addresses,
 each being a separate machine.

 I have configured samba identically on each system and everything appears
 to work ok for a little while until our printing tdb becomes corrupted and
 everything hangs up.. (at least the printing).. deleting the tdbs and
 restarting samba appears to correct the issue until the next hang..

 this is samba-3.0.4-6.3E (yep on RHEL 3).

 is there anything else I should be doing or am I at this point, stuck..

 Tom

 p.s. for what its worth, I can't get both machines to register (of course)
 under the same netbios name, but I'm not sure thats an issue..


___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden   IT Help Desk: 856-225-2343
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] issue with running samba on two separate systems under 1 hostname

2004-08-25 Thread Tom Ryan
I have a read only share and a couple of printers exported that I would
like to be available under a single hostname.

to that end, I have a created a hostname that refers to two ip addresses,
each being a separate machine.

I have configured samba identically on each system and everything appears
to work ok for a little while until our printing tdb becomes corrupted and
everything hangs up.. (at least the printing).. deleting the tdbs and
restarting samba appears to correct the issue until the next hang..

this is samba-3.0.4-6.3E (yep on RHEL 3).

is there anything else I should be doing or am I at this point, stuck..

Tom

p.s. for what its worth, I can't get both machines to register (of course)
under the same netbios name, but I'm not sure thats an issue..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba NTFS permissions

2003-12-08 Thread Tom Ryan
true.. if you use a unix filesystem, but there's reasons to still use 
samba :)

samba with ssl would be much more secure (for several reasons) over nfs 
(and easier to use than the afs/etc).

We have some machines that I don't trust enough to give NFS access to (and 
I don't particulary like having to setup X number of exports).

come on.. samba works for *everything* :)

Tom

On Mon, 8 Dec 2003, Jeremy Allison wrote:
 
 Think of the taxpayers ! Convert the desktops to Linux also,
 then you won't need the Samba servers :-).
 
 Jeremy.
 

-- 
___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SAMBA and FreeRadius

2003-12-03 Thread Tom Ryan
As freeradius supports PAM for authentication, this is trivial.

Simply configure freeradius to use pam (see config files for freeradius) 
and then set your pam config for radius to use smb (via winbind) for 
authentication.

Tom

On Wed, 3 Dec 2003 [EMAIL PROTECTED] wrote:

 I need to use CHAP on my NAS. Is it possible to authenticate FreeRadius 
 against SAMBA 3.x?
 
 Thanks in advance for any help!
 
 Bob
 

-- 
___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] extremely high %CPU and TIME

2003-11-20 Thread Tom Ryan
Jeremy (and all),

just wanted to say that we moved (quicker than we wanted) to 3.0.x and 
everything is fine!

Thanks so much !

Tom

On Wed, 19 Nov 2003, Jeremy Allison wrote:

 On Wed, Nov 19, 2003 at 03:57:56PM -0500, Tom Ryan wrote:
  yes.. but I was having problems before with that enabled previously.
 
 The client behaviour changes once spoolss is enabled. If you're 
 claiming to see the same issue on the clients you need to restart
 the spooler service on them in order for them to notice the now
 open spoolss pipe.
 
 3.0.x has a *much* improved version of the printing code we use
 on the HP PSA (Print Server Appliance), so I can definately
 recommend it.
 
 Jeremy.
 

-- 
___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] extremely high %CPU and TIME

2003-11-19 Thread Tom Ryan
I've kept looking for an answer to this to no avail.. any ideas?

strace -p  reveals

fcntl64(14, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=684, len=1}, 
0xb180) = 0
fcntl64(14, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=684, len=1}, 
0xb150) = 0
fcntl64(14, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=5676, 
len=1}, 0xb160) = 0
fcntl64(14, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=684, len=1}, 
0xb150) = 0
fcntl64(14, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=688, len=1}, 
0xb150) = 0
fcntl64(14, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=688, len=1}, 
0xb150) = 0
fcntl64(16, F_SETLKW64, {type=F_RDLCK, whence=SEEK_SET, start=528, len=1}, 
0xbfffda40) = 0
fcntl64(16, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=528, len=1}, 
0xbfffda40) = 0
time(NULL)  = 1069272774
fcntl64(16, F_SETLKW64, {type=F_RDLCK, whence=SEEK_SET, start=548, len=1}, 
0xbfffc8a0) = 0
fcntl64(16, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=548, len=1}, 
0xbfffc8e0) = 0

thanks!

On Thu, 9 Oct 2003, Tom Ryan wrote:

 Looking around on the net, I saw that someone else had a similar issue 
 when they were running all of their users behind terminal server. Our 
 users are all behind two NAT'd firewalls.
 
 Is it possible that there is some confusion going on? should I stop the 
 service and remove locking.tdb? (that's what 14 references right?)
 
 Thanks.
 
 tom
 
 On Wed, 8 Oct 2003, Tom Ryan wrote:
 
  2.4.20-19.8 on redhat 8
  
  strace reports 
  fcntl64(14, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=628, len=1}, 
  0xb150) = 0
  fcntl64(14, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=632, len=1}, 
  0xb150) = 0
  
  over and over again (with different start points)
  
  Tom
  
  On Wed, 8 Oct 2003, Jeremy Allison wrote:
  
   On Wed, Oct 08, 2003 at 02:29:31PM -0400, Tom Ryan wrote:
I have a samba box that has around 70 users on it at any given time.

When I run ps axu there are certain smbd processes (and usually always 
by the same login) that look like

username 26126 39.4  0.1  6652 2912 ?S13:44  17:12 smbd -D

any ideas why CPU is running at 39.4??
   
   What OS ? Try doing an strace on it to see what the process is doing.
   
   Jeremy.
   
  
  
 
 

-- 
___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] extremely high %CPU and TIME

2003-11-19 Thread Tom Ryan
Jeremy,

(gdb) bt
#0  0x08173176 in tdb_brlock ()
#1  0x0817349a in tdb_unlock ()
#2  0x0817517a in tdb_next_lock ()
#3  0x081752a6 in tdb_traverse ()
#4  0x08179de4 in print_queue_status ()
#5  0x0807a6de in api_DosPrintQGetInfo ()
#6  0x0807fdd8 in api_reply ()
#7  0x08077e03 in reply_trans ()
#8  0x080af1af in switch_message ()
#9  0x080af3a9 in construct_reply ()
#10 0x080af528 in process_smb ()
#11 0x080b01b4 in smbd_process ()
#12 0x0806ab4b in main ()
#13 0x420158f7 in __libc_start_main () from /lib/i686/libc.so.6
(gdb) 

On Wed, 19 Nov 2003, Jeremy Allison wrote:

 On Wed, Nov 19, 2003 at 03:14:02PM -0500, Tom Ryan wrote:
  I've kept looking for an answer to this to no avail.. any ideas?
  
  strace -p  reveals
  
  fcntl64(14, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=684, len=1}, 
  0xb180) = 0
  fcntl64(14, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=684, len=1}, 
  0xb150) = 0
 
 Ok, it's in a tdb call. Can you attach with gdb and get a stack backtrace ?
 
 Jeremy.
 

-- 
___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] extremely high %CPU and TIME

2003-11-19 Thread Tom Ryan
2.2.7 on redhat 8. i uped lpq cache time = 60. doesn't seem to help.

Tom

On Wed, 19 Nov 2003, Jeremy Allison wrote:

 On Wed, Nov 19, 2003 at 03:23:31PM -0500, Tom Ryan wrote:
  Jeremy,
  
  (gdb) bt
  #0  0x08173176 in tdb_brlock ()
  #1  0x0817349a in tdb_unlock ()
  #2  0x0817517a in tdb_next_lock ()
  #3  0x081752a6 in tdb_traverse ()
  #4  0x08179de4 in print_queue_status ()
  #5  0x0807a6de in api_DosPrintQGetInfo ()
  #6  0x0807fdd8 in api_reply ()
  #7  0x08077e03 in reply_trans ()
  #8  0x080af1af in switch_message ()
  #9  0x080af3a9 in construct_reply ()
  #10 0x080af528 in process_smb ()
  #11 0x080b01b4 in smbd_process ()
  #12 0x0806ab4b in main ()
  #13 0x420158f7 in __libc_start_main () from /lib/i686/libc.so.6
  (gdb) 
 
 Ok, this is a Win9x client scanning for print jobs. Up the
 lpq cache time I would suggest. What Samba version ?
 
 Jeremy.
 

-- 
___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] extremely high %CPU and TIME

2003-11-19 Thread Tom Ryan
Jeremy,

All clients are windows xp.

Tom

On Wed, 19 Nov 2003, Jeremy Allison wrote:

 On Wed, Nov 19, 2003 at 03:36:15PM -0500, Tom Ryan wrote:
  2.2.7 on redhat 8. i uped lpq cache time = 60. doesn't seem to help.
 
 How many print jobs do you have on this box ? Hmmm. As I recall,
 a Win9x client with an open print monitor will just continually
 scan the server - pounding it with requests. 
 
 We redesigned this for 3.0.x (try 3.0.1pre3) but it won't fix
 the problem that Win9x clients will continuously scan the print
 server - this is a problem of the Win9x design, not of Samba.
 The same thing happens to WinNT/2k/2k3.
 
 Can you get people to close down the print monitors ?
 
 Jeremy.
 

-- 
___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] extremely high %CPU and TIME

2003-11-19 Thread Tom Ryan
yes.. but I was having problems before with that enabled previously.

On Wed, 19 Nov 2003, Jeremy Allison wrote:

 On Wed, Nov 19, 2003 at 03:42:11PM -0500, Tom Ryan wrote:
  Jeremy,
  
  All clients are windows xp.
 
 Ok, then you're not using the spoolss pipe code on the Samba
 server, as this scanning behaviour goes away once WNT or above
 clients can open the SPOOLSS pipe (they use a strange form of
 change notify instead of scanning).
 
 Do you have disable spoolss set in your smb.conf ?
 
 Jeremy.
 

-- 
___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] extremely high %CPU and TIME

2003-11-19 Thread Tom Ryan
I enabled that.. but I'm still having the same issue.

On Wed, 19 Nov 2003, Tom Ryan wrote:

 yes.. but I was having problems before with that enabled previously.
 
 On Wed, 19 Nov 2003, Jeremy Allison wrote:
 
  On Wed, Nov 19, 2003 at 03:42:11PM -0500, Tom Ryan wrote:
   Jeremy,
   
   All clients are windows xp.
  
  Ok, then you're not using the spoolss pipe code on the Samba
  server, as this scanning behaviour goes away once WNT or above
  clients can open the SPOOLSS pipe (they use a strange form of
  change notify instead of scanning).
  
  Do you have disable spoolss set in your smb.conf ?
  
  Jeremy.
  
 
 

-- 
___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] extremely high %CPU and TIME

2003-11-19 Thread Tom Ryan
We are in the middle of planning our upgrade.

Thanks will try this and report back!

Tom

On Wed, 19 Nov 2003, Jeremy Allison wrote:

 On Wed, Nov 19, 2003 at 03:57:56PM -0500, Tom Ryan wrote:
  yes.. but I was having problems before with that enabled previously.
 
 The client behaviour changes once spoolss is enabled. If you're 
 claiming to see the same issue on the clients you need to restart
 the spooler service on them in order for them to notice the now
 open spoolss pipe.
 
 3.0.x has a *much* improved version of the printing code we use
 on the HP PSA (Print Server Appliance), so I can definately
 recommend it.
 
 Jeremy.
 

-- 
___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] extremely high %CPU and TIME

2003-10-13 Thread Tom Ryan
Does anyone have any thoughts on this? Any things that I can try? I'm open 
to suggestions :)

Tom

On Thu, 9 Oct 2003, Tom Ryan wrote:

 Ok.. still researching this. should i try disabling kernel oplocks? also, 
 any thoughts on why it only happens to certain user processes?
 
 could it be a corrupted file or patch level of their machine?
 
 Tom
 
 On Thu, 9 Oct 2003, Tom Ryan wrote:
 
  Looking around on the net, I saw that someone else had a similar issue 
  when they were running all of their users behind terminal server. Our 
  users are all behind two NAT'd firewalls.
  
  Is it possible that there is some confusion going on? should I stop the 
  service and remove locking.tdb? (that's what 14 references right?)
  
  Thanks.
  
  tom
  
  On Wed, 8 Oct 2003, Tom Ryan wrote:
  
   2.4.20-19.8 on redhat 8
   
   strace reports 
   fcntl64(14, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=628, len=1}, 
   0xb150) = 0
   fcntl64(14, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=632, len=1}, 
   0xb150) = 0
   
   over and over again (with different start points)
   
   Tom
   
   On Wed, 8 Oct 2003, Jeremy Allison wrote:
   
On Wed, Oct 08, 2003 at 02:29:31PM -0400, Tom Ryan wrote:
 I have a samba box that has around 70 users on it at any given time.
 
 When I run ps axu there are certain smbd processes (and usually always 
 by the same login) that look like
 
 username 26126 39.4  0.1  6652 2912 ?S13:44  17:12 smbd -D
 
 any ideas why CPU is running at 39.4??

What OS ? Try doing an strace on it to see what the process is doing.

Jeremy.

   
   
  
  
 
 

-- 
___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] extremely high %CPU and TIME

2003-10-09 Thread Tom Ryan
Looking around on the net, I saw that someone else had a similar issue 
when they were running all of their users behind terminal server. Our 
users are all behind two NAT'd firewalls.

Is it possible that there is some confusion going on? should I stop the 
service and remove locking.tdb? (that's what 14 references right?)

Thanks.

tom

On Wed, 8 Oct 2003, Tom Ryan wrote:

 2.4.20-19.8 on redhat 8
 
 strace reports 
 fcntl64(14, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=628, len=1}, 
 0xb150) = 0
 fcntl64(14, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=632, len=1}, 
 0xb150) = 0
 
 over and over again (with different start points)
 
 Tom
 
 On Wed, 8 Oct 2003, Jeremy Allison wrote:
 
  On Wed, Oct 08, 2003 at 02:29:31PM -0400, Tom Ryan wrote:
   I have a samba box that has around 70 users on it at any given time.
   
   When I run ps axu there are certain smbd processes (and usually always 
   by the same login) that look like
   
   username 26126 39.4  0.1  6652 2912 ?S13:44  17:12 smbd -D
   
   any ideas why CPU is running at 39.4??
  
  What OS ? Try doing an strace on it to see what the process is doing.
  
  Jeremy.
  
 
 

-- 
___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] extremely high %CPU and TIME

2003-10-08 Thread Tom Ryan
Jeremy,

2.4.20-19.8 on redhat 8

strace reports 
fcntl64(14, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=628, len=1}, 
0xb150) = 0
fcntl64(14, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=632, len=1}, 
0xb150) = 0

over and over again (with different start points)

Tom

On Wed, 8 Oct 2003, Jeremy Allison wrote:

 On Wed, Oct 08, 2003 at 02:29:31PM -0400, Tom Ryan wrote:
  I have a samba box that has around 70 users on it at any given time.
  
  When I run ps axu there are certain smbd processes (and usually always 
  by the same login) that look like
  
  username 26126 39.4  0.1  6652 2912 ?S13:44  17:12 smbd -D
  
  any ideas why CPU is running at 39.4??
 
 What OS ? Try doing an strace on it to see what the process is doing.
 
 Jeremy.
 

-- 
___
Tom RyanVoice: 856-225-6361
Consulting System Administrator   Fax: 856-969-7900
Rutgers School of Law - Camden

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Domain Trust and smbclient error.

2003-10-07 Thread Tom Ryan
I am trying to get a W2K server to trust a samba 3.0 server.
I followed the directions in the InterdomainTrusts.html file and receive 
an error that the domain is not found when trying to trust it.

my samba server is configured to use pam to authenticate. I had to add a 
user named w2kdomain$ on the machine before I could run smbpasswd -a -i 
w2kdomain. Once I did that, it created the user just fine.

If I run smbclient -L sambaserver -U localusername and enter my password, 
it uses pam to authenticate it (i am running log level 5 to verify this).

If I run the same command on another box (different version of 
samba/smbclient), it fails. The log file shows that at the same point of 
authentication, there's some pop_sec_ctx calls and then unix 
authentication failed for user username.

I'm scratching my head at this point..

my smb.conf is miminal, security = user, encrypt passwords = no

any ideas?

tom

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba