[Samba-it] net rpc vampire: Segmentation fault

Tue Jan 24 12:34:02 MST 2006

Salve a tutti, avevo già avuto in passato un simile problema,

> Oggetto:        Re: [Samba-it] Problemi in migrazione PDC da NT a Samba
> Data:   Mon, 9 Jan 2006 12:05:31

In quell'occasione mi ero ricreato tutti gli utenti a manina e
reinserito i 5 PC WinXP nel nuovo dominio.

Ora mi ricapita e i PC sono 20!!!

Quando tento net rpc vampire o smbdump la procedura NON mi chiede la
password di administrator e mi va in Segmentation fault

[root at s-peirone Samba]# net rpc join -S server -w WORKGROUP -U
Administrator
Password:
Joined domain WORKGROUP.
[root at s-peirone Samba]# net rpc testjoin
Join to 'WORKGROUP' is OK
[root at s-peirone Samba]# net rpc vampire -S server -U administrator
Fetching DOMAIN database
Segmentation fault

Il server Windows è un 2000 server, Il server linux era "vergine", ho
installato samba 3.0.21a, ho copiato il smb.conf seguente:

> [root at s-peirone ~]# testparm
> Load smb config files from /etc/samba/smb.conf
> Processing section "[homes]"
> Processing section "[netlogon]"
> Processing section "[profiles]"
> Processing section "[printers]"
> Processing section "[pubblica]"
> Processing section "[software]"
> Loaded services file OK.
> WARNING: passdb expand explicit = yes is deprecated
> Server role: ROLE_DOMAIN_BDC
> Press enter to see a dump of your service definitions
> 
> [global]
>         server string = Xxxx Samba PDC Server (Powered by Fedora Core 4)
>         interfaces = lo, eth0
>         passdb backend = tdbsam
>         enable privileges = Yes
>         log file = /var/log/samba/%m.log
>         max log size = 50
>         socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>         printcap name = /etc/printcap
>         add user script = /usr/sbin/useradd -m -c "Utente Samba (%u)" -g smbusers -d "/u/samba/home/%u" -s /sbin/nologin "%u"
>         delete user script = test 0$(id -u "%u" 2>/dev/null) -gt 100 && /usr/sbin/userdel "%u"
>         add group script = /usr/sbin/groupadd "%g"
>         delete group script = test 0$(id -g "%g" 2>/dev/null) -gt 100 && /usr/sbin/groupdel "%g"
>         add user to group script = /usr/bin/gpasswd -a "%u" "%g"
>         delete user from group script = /usr/bin/gpasswd -d "%u" "%g"
>         set primary group script = /usr/sbin/usermod -g "%g" "%u"
>         add machine script = /usr/sbin/useradd -M -c "Computer di dominio (%u)" -g smbhosts -d /tmp/smbpc -s /sbin/nologin "%u"
>         logon script = netlogon.bat
>         logon path =
>         logon drive = X:
>         logon home = \\%L\%U
>         domain logons = Yes
>         os level = 83
>         preferred master = Yes
>         domain master = No
>         dns proxy = No
>         wins support = Yes
>         idmap uid = 16777216-33554431
>         idmap gid = 16777216-33554431
>         winbind trusted domains only = Yes
>         cups options = raw
> 
> [homes]
>         comment = Home Directories
>         read only = No
>         browseable = No
> 
> [netlogon]
>         comment = Network Logon Service
>         path = /u/samba/netlogon
>         write list = @admins
>         guest ok = Yes
>         share modes = No
> 
> .......

ho tirato su il sid:

> [root at s-peirone ~]# net rpc getsid  -S server -U administrator
> Storing SID S-1-5-21-1644491937-2025429265-725345543 for Domain WORKGROUP in secrets.tdb
> [root at s-peirone ~]# net rpc samdump  -S server -U administrator
> Dumping DOMAIN database
> Segmentation fault

ho creato i gruppi in UNIX,

> + groupadd smbadmins
> + groupadd smbusers
> + groupadd smbguests
> + groupadd smbhosts
> 
ho fatto il mapping dei gruppi:

> [root at s-peirone Samba]# net groupmap modify unixgroup=smbadmins ntgroup="Domain Admins"
> Updated mapping entry for Domain Admins
> [root at s-peirone Samba]# net groupmap modify unixgroup=smbusers  ntgroup="Domain Users"
> Updated mapping entry for Domain Users
> [root at s-peirone Samba]# net groupmap modify unixgroup=smbguests ntgroup="Domain Guests"
> Updated mapping entry for Domain Guests
> [root at s-peirone Samba]# net groupmap add    unixgroup=smbhosts  ntgroup="Domain Computers" rid=515 type=domain
> Successfully added group Domain Computers to the mapping db
> [root at s-peirone Samba]#
> [root at s-peirone Samba]# net groupmap list
> System Operators (S-1-5-32-549) -> -1
> Replicators (S-1-5-32-552) -> -1
> Guests (S-1-5-32-546) -> -1
> Power Users (S-1-5-32-547) -> -1
> Print Operators (S-1-5-32-550) -> -1
> Administrators (S-1-5-32-544) -> -1
> Account Operators (S-1-5-32-548) -> -1
> Domain Users (S-1-5-21-1644491937-2025429265-725345543-513) -> smbusers
> Domain Computers (S-1-5-21-1644491937-2025429265-725345543-515) -> smbhosts
> Domain Admins (S-1-5-21-1644491937-2025429265-725345543-512) -> smbadmins
> Domain Guests (S-1-5-21-1644491937-2025429265-725345543-514) -> smbguests
> Backup Operators (S-1-5-32-551) -> -1
> Users (S-1-5-32-545) -> -1

A questo punto quando tento di fare net rpc vampire e la procedura si blocca....

Se provo altri comandi pare che funzionino:

> [root at s-peirone Samba]# net rpc group -S server -U administrator
> Password:
> Cert Publishers
> Computer del dominio
> Controller di dominio
> DnsUpdateProxy
> Domain Admins
> Domain Guests
> Domain Users
> Enterprise Admins
> ......

In coda un vampire con debug... se vi servono altre informazioni fatemi sapere.

Qualche suggerimento?

Grazie per l'aiuto!.

-- 
Dario Lesca <d.lesca at solinos.it>

> [root at s-peirone Samba]# net rpc vampire -S server -U administrator -d 3
> [2006/01/24 12:31:41, 3] param/loadparm.c:lp_load(4195)
>   lp_load: refreshing parameters
> [2006/01/24 12:31:41, 3] param/loadparm.c:init_globals(1385)
>   Initialising global parameters
> [2006/01/24 12:31:41, 3] param/params.c:pm_process(574)
>   params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
> [2006/01/24 12:31:41, 3] param/loadparm.c:do_section(3657)
>   Processing section "[global]"
> [2006/01/24 12:31:41, 2] lib/interface.c:add_interface(81)
>   added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
> [2006/01/24 12:31:41, 2] lib/interface.c:add_interface(81)
>   added interface ip=192.168.100.252 bcast=192.168.100.255 nmask=255.255.255.0
> [2006/01/24 12:31:41, 3] libsmb/cliconnect.c:cli_start_connection(1389)
>   Connecting to host=server
> [2006/01/24 12:31:41, 3] lib/util_sock.c:open_socket_out(867)
>   Connecting to 192.168.100.1 at port 445
> [2006/01/24 12:31:41, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
>   rpc_pipe_bind: Remote machine server pipe \lsarpc fnum 0x800b bind request returned ok.
> [2006/01/24 12:31:41, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
>   rpc_pipe_bind: Remote machine server pipe \NETLOGON fnum 0x800d bind request returned ok.
> [2006/01/24 12:31:41, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
>   rpc_pipe_bind: Remote machine server pipe \NETLOGON fnum 0x800c bind request returned ok.
> Fetching DOMAIN database
> Segmentation fault