From peter.milburn at sofcom.com.au Mon Apr 2 01:49:18 2001 From: peter.milburn at sofcom.com.au (peter.milburn@sofcom.com.au) Date: Tue Dec 2 02:34:04 2003 Subject: samba 2.2aplha3 Message-ID: Hi , I am need of urgent help, I am still not able to get a windows machine to join a samba PDC, I get any any linux machine to join it. I have deleted the smbpasswd and recreated it , but still with no joy. Can someone please help me with this problem Thanks, -- Peter Milburn Systems Manager Software Communication Group Ltd peter.milburn@sofcom.com.au Ph: +613 9826 8300 Fax: +613 9826 8336 Level 16, 644 Chapel St South Yarra, Vic 3141 www.sofcom.com.au ******************************************** This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you must not disseminate, copy or take any action in reliance on it. If you have received this message in error, please notify Software Communication Group immediately. Any views expressed in this message are those of the individual sender except where the sender specifically states them to be the views of Software Communication Group. ******************************************** From christoph.vollenweider at neutronic.ch Mon Apr 2 15:07:58 2001 From: christoph.vollenweider at neutronic.ch (Christoph Vollenweider) Date: Tue Dec 2 02:34:05 2003 Subject: (no subject) Message-ID: <11FA93A5C7A4D411A3D20050DA4AFBF001D861@NTR01> Mit besten Gr?ssen Christoph Vollenweider --------------------------------------------- Neutronic AG Christoph Vollenweider Ebnatsrasse 154 8200 Schaffhausen Telefon +41 (0)52 644 00 20 Fax +41 (0)52 644 00 22 Direkt +41 (0)52 644 00 23 Natel +41 (0)79 348 22 22 mailto:christoph.vollenweider@neutronic.ch --------------------------------------------- From greg at kwikfind.com Mon Apr 2 15:16:41 2001 From: greg at kwikfind.com (Greg J. Zartman) Date: Tue Dec 2 02:34:05 2003 Subject: samba 2.2aplha3 References: Message-ID: <001801c0bb87$ec9c01c0$6f00a8c0@logeng.net> Peter, Please forgive me if I appear rude here, but you've been asking this same exact question at least once a week for the past two to three months. My only advice would be to go back through the numerous replies to your question in the mailing list archives. There are only so many options that can be explored and I think they all have been in one form or another. Good luck. Greg ----- Original Message ----- From: To: Sent: Sunday, April 01, 2001 6:49 PM Subject: samba 2.2aplha3 > Hi , I am need of urgent help, I am still not able to get a windows > machine to join a samba PDC, I get any any linux machine to join it. > > I have deleted the smbpasswd and recreated it , but still with no joy. > > Can someone please help me with this problem > > Thanks, > > > > -- > Peter Milburn > Systems Manager > Software Communication Group Ltd > peter.milburn@sofcom.com.au > Ph: +613 9826 8300 Fax: +613 9826 8336 > Level 16, 644 Chapel St > South Yarra, Vic 3141 > www.sofcom.com.au > ******************************************** > This message contains privileged and confidential information intended > only > for the use of the addressee named above. If you are not the intended > recipient of this message you must not disseminate, copy or take any > action > in reliance on it. If you have received this message in error, please > notify Software Communication Group immediately. > Any views expressed in this message are those of the individual sender > except where the sender specifically states them to be the views of > Software > Communication Group. > ******************************************** > > > > > > > > From virgo at azcher.kharkov.ua Mon Apr 2 17:03:44 2001 From: virgo at azcher.kharkov.ua (Virgo) Date: Tue Dec 2 02:34:05 2003 Subject: 2.2.0a3 or 2.0.7? Message-ID: <3AC8B0F0.BA8642D@azcher.kharkov.ua> Hi guys! Is Samba-2.2.0aplha3 1. I can not join W2K to domain samba. After a perusal faq and HOWTO happens following: a) In smbpasswd the computer pfts1 is not added and in smb.conf is written add user script = /usr/sbin/adduser -n -g 65534 -c " Trust Account " -d /dev/null, that receivesi in W2K the following message: The account used is a computer account. Use you global user account or local user account to access this computer. b) In passwd the computer by hands is added, we obtain the following message: Out of range in procedure... It not literally. Signal me please where that I do not so? 2. I read ./docs/htmldocs/cvs.log, line 345198: alternate permissions = No (removed) max packet = 65535 (removed) ole locking compatibility (removed) shared mem size (removed) Is detuned removed ole locking compatibility. Without this parameter one program does not work. What it is substituted by? Large thank to you the guys for your work... I shall be grateful for the answers and advices. P.S.Unfortunately it was necessary to return on Samba-2.0.7 and W2K has remained in the domain NT :-( -- Registered Linux User #186627 ICQ UIN 50715669 From peter.milburn at sofcom.com.au Tue Apr 3 00:10:37 2001 From: peter.milburn at sofcom.com.au (peter.milburn@sofcom.com.au) Date: Tue Dec 2 02:34:05 2003 Subject: samba 2.2aplha3 Message-ID: At last I have windows machines again joinging the domain, thanks to eveyones help on that. This is not a real problem but, when a user logs in it is logging there home dir to z:, is there a way of changing this ? Thanks. Pete -- Peter Milburn Systems Manager Software Communication Group Ltd peter.milburn@sofcom.com.au Ph: +613 9826 8300 Fax: +613 9826 8336 Level 16, 644 Chapel St South Yarra, Vic 3141 www.sofcom.com.au ******************************************** This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you must not disseminate, copy or take any action in reliance on it. If you have received this message in error, please notify Software Communication Group immediately. Any views expressed in this message are those of the individual sender except where the sender specifically states them to be the views of Software Communication Group. ******************************************** From nigel at geefx.com.au Tue Apr 3 07:51:52 2001 From: nigel at geefx.com.au (Nigel Moore) Date: Tue Dec 2 02:34:05 2003 Subject: Samba and Multiple Shares Message-ID: <009001c0bc12$f301d270$0300a8c0@geefxinternal> Hello, I am in the process of turning our internal network into a Linux driven network, rather than a Win NT network for security and reliability reasons. At the moment on the NT box we have all of our users and groups, we also have the file storage (home dirs, client space, sales space, marketing space, graphics space etc etc) Each area has its own share: eg Sales Marketing Human Resources Graphics Clients Each of the shares has a group (eg Sales Group, Marketing Group - all NT Groups) So when I add a user (eg fred, and he is in Sales, I add him to the Sales Group, and possibly the Marketing Group, but he doesn't get access to Clients, Graphics and Human Resources Drives) How is the easiest way to do this under Samba2.2.0Alpha2 ?? I have home dirs setup and domain logons are now able to be done aswell. I want it so that: fred - sales, marketing joe - sales, graphics, human resources harry - clients, graphics mary - graphics There are many users, and few groups. I would like to know the easiest way to set this up. I want on the linux box: I have created a partition of 6 gig that has nothing in it at the moment I would like all of the files stored in here. Any help or HOWTO's would be greatly appreciated. Kind Regards, Nigel From andre.doehn at econia.com Tue Apr 3 07:28:39 2001 From: andre.doehn at econia.com (andre.doehn@econia.com) Date: Tue Dec 2 02:34:05 2003 Subject: samba 2.2aplha3 Message-ID: there is a smb.conf (man smb.conf) parameter in the global section: logon drive = z: bye Andre |--------+---------------------------------> | | peter.milburn@sofcom.co| | | m.au | | | Sent by: | | | samba-ntdom-admin@lists| | | .samba.org | | | | | | | | | 03.04.2001 02:10 | | | | |--------+---------------------------------> >-----------------------------------------------------------------------------------------------------------| | | | To: samba-ntdom@va.samba.org | | cc: | | Subject: samba 2.2aplha3 | >-----------------------------------------------------------------------------------------------------------| At last I have windows machines again joinging the domain, thanks to eveyones help on that. This is not a real problem but, when a user logs in it is logging there home dir to z:, is there a way of changing this ? Thanks. Pete -- Peter Milburn Systems Manager Software Communication Group Ltd peter.milburn@sofcom.com.au Ph: +613 9826 8300 Fax: +613 9826 8336 Level 16, 644 Chapel St South Yarra, Vic 3141 www.sofcom.com.au ******************************************** This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you must not disseminate, copy or take any action in reliance on it. If you have received this message in error, please notify Software Communication Group immediately. Any views expressed in this message are those of the individual sender except where the sender specifically states them to be the views of Software Communication Group. ******************************************** From ejs at delfi.lt Tue Apr 3 10:34:30 2001 From: ejs at delfi.lt (Augis) Date: Tue Dec 2 02:34:05 2003 Subject: samba-2.2.0-alpha3 spec for RedHat 7.0 Message-ID: <3AC9A736.4070705@delfi.lt> Hi all, is anyone here interested in .spec file for building RPM? I've fixed some rather serious bugs, which prevented RPM from being built and also added xinetd support, which is standart on RH 7.0 The only thing i could't make was Makefile patch. Seems like the patch it's being taken from alpha1 or alpha2 release. So, you'll have to fix Makefile by hand. Well. Another problem is that makerpms script is not working as it should: RH 7.0 uses RPM v4, which is fixable in script, but the script breaks when trying to resolve %{_topdir}/RPMS|SRPMS|SPECS. Specifying explicit paths solves the problem. -- Augis From barth at cck.uni-kl.de Tue Apr 3 11:06:44 2001 From: barth at cck.uni-kl.de (Christian Barth) Date: Tue Dec 2 02:34:05 2003 Subject: Samba and Multiple Shares In-Reply-To: <009001c0bc12$f301d270$0300a8c0@geefxinternal> Message-ID: <3AC9CAE4.26677.141BF58@localhost> Hello! > At the moment on the NT box we have all of our users and groups, we also > have the file storage (home dirs, client space, sales space, marketing > space, graphics space etc etc) > > Each area has its own share: eg > > Sales > Marketing > Human Resources > Graphics > Clients > > Each of the shares has a group (eg Sales Group, Marketing Group - all NT > Groups) > > So when I add a user (eg fred, and he is in Sales, I add him to the Sales > Group, and possibly the Marketing Group, but he doesn't get access to > Clients, Graphics and Human Resources Drives) > > How is the easiest way to do this under Samba2.2.0Alpha2 ?? It is easy to set up some thing similar with samba: On your hard drive, make a directory sales, a directory marketing, .... In Linux create the groups marketing, sales, ... and enter the userss to the groups in /etc/groups. Probably set the primary group in /etc/passwd appropriate for each user. Do chmod and chown that it looks on your hard drive similar to: drwxr-s--- salesuser sales 1024 13:03 sales drwxr-s--- marketinguser marketing 1024 13:03 markting .... .... With salesuser and marketinguser being guys who should be allowd to create new subdirectores, whicht the may be writeable to the wole group. Now create the shares in samba: [sales] path = /disk/sales [marketing] path = /disk/marketing That's it! I would recommand setting "inherit permissions = yes" in the global section of smb.conf. If you want you can now start playing with a couple of samba parameters like users allow, write group, ... but thats all not realy neccessary and I prefer to set these things up with linux-permissions because you may once have shell, ftp, scp, nfs, ... access as well. > Any help or HOWTO's would be greatly appreciated. Hope this helps. There are a lot of good books about samba, a fine one is supplied as html with the source. A book about Unix/Linux administration will be a good backgroud. Christian _______________________________________________________________________ In a world without walls and fences, who needs windows and gates? (SUN) From jwitte at meome-ag.de Tue Apr 3 11:07:33 2001 From: jwitte at meome-ag.de (Jochen Witte) Date: Tue Dec 2 02:34:05 2003 Subject: samba 2.2.0alpha3 and acls under W2000 Message-ID: <51620000.986296053@li-001> Hi, my setup: Linux (Kernel 2.4.2 + acl-support) Samba 2.2.0alpha3 Samba ist PDC. Under Windows NT4 manipulating acls: no problem. But under Windows2000 I get: "Error while searching displayable usernames" (translated from German. Has anyone any suggestions for me? Greetings -- Jochen WItte From akiselev at mow-co.ru.dhl.com Tue Apr 3 11:33:14 2001 From: akiselev at mow-co.ru.dhl.com (Alexander Kiselev) Date: Tue Dec 2 02:34:05 2003 Subject: Question about NT groups Message-ID: <01cd01c0bc31$dfcac080$86a88dc6@mowco.ru.dhl.com> Hi there. A little question: How to adjust Samba 2.0.7 to authorize users not through NT usernames but through NT groups? Thanks. -- Bests, Alexander From awilliam at whitemice.org Tue Apr 3 11:38:47 2001 From: awilliam at whitemice.org (Adam Tauno Williams) Date: Tue Dec 2 02:34:05 2003 Subject: Samba and Multiple Shares In-Reply-To: <009001c0bc12$f301d270$0300a8c0@geefxinternal> References: <009001c0bc12$f301d270$0300a8c0@geefxinternal> Message-ID: <20010403073847.17ebe9ed.awilliam@whitemice.org> >I am in the process of turning our internal network into a Linux driven >network, rather than a Win NT network for security and reliability reasons. >At the moment on the NT box we have all of our users and groups, we also >have the file storage (home dirs, client space, sales space, marketing >space, graphics space etc etc) >Each area has its own share: eg >Sales >Marketing >Human Resources >Graphics >Clients >Each of the shares has a group (eg Sales Group, Marketing Group - all NT >Groups) >So when I add a user (eg fred, and he is in Sales, I add him to the Sales >Group, and possibly the Marketing Group, but he doesn't get access to >Clients, Graphics and Human Resources Drives) >How is the easiest way to do this under Samba2.2.0Alpha2 ?? Works the same under all the sambas. Set the directory for the share to have the permissions for that group only (that protects it on the unix side), then use a {valid users = @groupname} in the share definition so only people of that group can connect. I set {logon script = %G.bat} so that people of the same group get the same logon script, and it connects them automatically to that groups shares. If you use {force group = groupname} in the share definition people outside that group (whom you specify in addition to @groupname in valid users) will look like they belong to that group when they connect to that share, this is very nice if you have people who roam (temp workers) or who perform tasks in two departments. Overall, Samba Rules! Just so flexible, simply an amazing package, keep up the great work guys. From akiselev at mow-co.ru.dhl.com Tue Apr 3 11:46:54 2001 From: akiselev at mow-co.ru.dhl.com (Alexander Kiselev) Date: Tue Dec 2 02:34:05 2003 Subject: Question about NT groups References: <01cd01c0bc31$dfcac080$86a88dc6@mowco.ru.dhl.com> Message-ID: <01f101c0bc33$c8d61080$86a88dc6@mowco.ru.dhl.com> An additional info regarding my question: Samba server under Unix. Authorization now works only through NT usernames in NT domain. Thanks. Alexander. ----- Original Message ----- From: "Alexander Kiselev" To: Sent: Tuesday, April 03, 2001 3:33 PM Subject: Question about NT groups > Hi there. > > A little question: > How to adjust Samba 2.0.7 to authorize users not through NT usernames but > through NT groups? > > Thanks. > > -- > Bests, > Alexander > > > > From eirvine at tpgi.com.au Tue Apr 3 12:27:10 2001 From: eirvine at tpgi.com.au (eirvine) Date: Tue Dec 2 02:34:05 2003 Subject: Samba and Multiple Shares References: <009001c0bc12$f301d270$0300a8c0@geefxinternal> Message-ID: <3AC9C19E.9D596337@tpgi.com.au> Hi Nigel, Nigel Moore wrote: > > Hello, > > I am in the process of turning our internal network into a Linux driven > network, rather than a Win NT network for security and reliability reasons. Great. > At the moment on the NT box we have all of our users and groups, we also > have the file storage (home dirs, client space, sales space, marketing > space, graphics space etc etc) > > Each area has its own share: eg > > Sales > Marketing > Human Resources > Graphics > Clients > > Each of the shares has a group (eg Sales Group, Marketing Group - all NT > Groups) > > So when I add a user (eg fred, and he is in Sales, I add him to the Sales > Group, and possibly the Marketing Group, but he doesn't get access to > Clients, Graphics and Human Resources Drives) Linux has users and groups too, and Samba supports this. No problem. > How is the easiest way to do this under Samba2.2.0Alpha2 ?? Well, you use the usual Linux tools to put users into groups (I'm not a linux guy - maybe just use linuxconf for this?). Make a new unix directory for each share, and give it the appropriate ownership and permissions. You might also want to check out the man page for smb.conf, especially the "valid user" and "force group" directives. Be aware, however, that Samba2.2 is alpha code. Domain logons with Win2K are very, very, very alpha. I've been using Samba for three years now, and I haven't moved to 2.2 yet. Eddie. From michael at hum.auc.dk Tue Apr 3 12:48:08 2001 From: michael at hum.auc.dk (Michael Collin Nielsen) Date: Tue Dec 2 02:34:05 2003 Subject: samba 2.2.0alpha3 and acls under W2000 In-Reply-To: <51620000.986296053@li-001> Message-ID: Hi, I have a problem that looks a lot like the one described by Jochen, my setup is: samba on Solaris 8 (2.2.0alpha3) (using security = domain and configured with: --prefix=/pack/samba-2.2.0-alpha3 --with-automount --with-syslog --with-profile --with-quotas --with-utmp --with-acl-support) win2000 PDC I connect to a samba drive from a win2000pro sp1(DK) which works fine. I then view the properties for a test document, and get into a situation much like the one described by Jochen. Screendumps can be found at: http://www.hum.auc.dk/~michael/samba/win2000ACL.html Are there any documentation on the ACL support (Apart from the source) ? Regards -Mcihael On Tue, 3 Apr 2001, Jochen Witte wrote: > Hi, > > my setup: Linux (Kernel 2.4.2 + acl-support) > Samba 2.2.0alpha3 > > Samba ist PDC. Under Windows NT4 manipulating acls: no problem. > But under Windows2000 I get: > > "Error while searching displayable usernames" (translated from German. > > Has anyone any suggestions for me? > > Greetings > > -- > Jochen WItte > > -- Michael Collin Nielsen mailto:michael@hum.auc.dk M.Sc.E.E. http://www.hum.auc.dk/~michael Sysadm in Faculty of Humanities, Aalborg University From Brecht.Samyn at kulak.ac.be Tue Apr 3 13:09:29 2001 From: Brecht.Samyn at kulak.ac.be (Brecht Samyn) Date: Tue Dec 2 02:34:05 2003 Subject: PDC and plaintext passwords Message-ID: <3AC9CB89.B6B9D008@kulak.ac.be> Hi, Is it possible to use cleartext passwords while Samba operates as a PDC ? We would like to use the username/passwords from LDAP (which we don't administer) (via PAM?) and being able to login to a Samba PDC (because we have Win2k clients). Any help or link appreciated! Thanks, Brecht -- Brecht Samyn, Systeemgroep Katholieke Universiteit Leuven Campus Kortrijk (KULAK) BELGIUM E-mail: Brecht.Samyn@kulak.ac.be tel. ++32 56 246 264 From M.hoeneveld at hes-rdam.nl Tue Apr 3 14:41:10 2001 From: M.hoeneveld at hes-rdam.nl (Maurice Hoeneveld) Date: Tue Dec 2 02:34:05 2003 Subject: PAM_SMB_AUTH and Solaris problem Message-ID: <5.0.2.1.2.20010403163940.00a73850@mntm.hes-rdam.nl> Hello all, I hope there is a wise guy out there who can hep us out. Im busy with the installation of a Solaris 7 (intel) machine which is memeber of a NT domain and also can be used from outside the campus using ftp (ProFTP) The samba part I installed runs fine. Im able to share 6000 home directories where the user is verified against the NT domain. I also installed ProFTP which I want to use with the pam_smb_auth module (which I downloaded from samba.org.) and configured pam.conf to use pam_smb_auth.so.1 as module for ftp authentication. The problem is a user which is * in /etc/passwd. I can see (when I start Proftp in debug mode) that Pam is invoked to verify the username but the user can not be found. Logging from ProFTP as follows; -- received: USER testuser -- no supplemental groups found for user 'testuser' -- received: PASS (hidden) -- no supplemental groups found for user 'testuser' -- PAM(testuser): Symbol not found -- USER testuser (Login failed): No such user found. When I check de system messages I see the following; -- proftpd[3946]: load_modules: pam_sm_acct_mgmt() missing Can anybody give me a hint. It looks like I need some extra options for compiling the pam_auth module. But probably it is an other problem. Any help is appreciated Thanks for your time Maurice Hoeneveld Technical System Engineer E-mail : m.hoeneveld@hes-rdam.nl Hogeschool voor Economische Studies Kralingse Zoom 91 Postbus 4030 3006 AA Rotterdam The Netherlands From goerke at mpipks-dresden.mpg.de Tue Apr 3 15:13:01 2001 From: goerke at mpipks-dresden.mpg.de (Goerke, Torsten) Date: Tue Dec 2 02:34:05 2003 Subject: MYDOMAIN\Domain Users on W2k Terminal Server Message-ID: <3AC9E87D.849EDB73@mpipks-dresden.mpg.de> Dear all, I set up samba-2.2.0-alpha3 to act as PDC for a W2k *Terminal Server*. Joining the Domain worked fine. Users can now authenticate with their password in smbpasswd. The Citrix Metaframe Software allows to create so called 'Published Applications'. I want to offer my Applications to the whole group MYDOMAIN\Domain Users (MYDOMAIN is handled by Samba). But i get the following message: Failed to create 'MYDOMAIN\Domain Users' account security descriptor for the 'MYTEST' application configuration (Error 1332). The update has been canceled ... In general terms i want to give a whole group (@users) access to programs or files on the Terminal server. I assume this behaviour is related to what is written already in the samba-pdc-faq.txt: ----schnipp---- These things are note expected to work in the forseeable future * Offer a list of domain users to User Manager for Domains (or the Security Tab etc). ---schnapp---- Is there by chance a workaround for the problem? I tried to play around with the username map option and a username map file like this: "Domain Users" @users but this does not work. Many thanks if somebody can help. -- Torsten Goerke __________________________________________________________________ Max-Planck-Institut fuer Max-Planck-Institute for the Physik komplexer Systeme Physics of Complex Systems Noethnitzer Str. 38 - 01187 Dresden tel: +49-(0)351-871-2112 _____________ http://www.mpipks-dresden.mpg.de/~goerke ___________ From vorlon at netexpress.net Tue Apr 3 15:44:44 2001 From: vorlon at netexpress.net (Steve Langasek) Date: Tue Dec 2 02:34:05 2003 Subject: samba-2.2.0-alpha3 spec for RedHat 7.0 In-Reply-To: <3AC9A736.4070705@delfi.lt> Message-ID: Hi Augis, On Tue, 3 Apr 2001, Augis wrote: > is anyone here interested in .spec file for building RPM? > I've fixed some rather serious bugs, which prevented RPM from being > built and also added xinetd support, which is standart on RH 7.0 > The only thing i could't make was Makefile patch. Seems like the patch > it's being taken from alpha1 or alpha2 release. So, you'll have to fix > Makefile by hand. If memory serves, the Makefile patch was only needed to correct the filesystem paths used by Samba. It should now be possible to achieve the same effect using --with-fhs and other options to ./configure. HTH, Steve Langasek postmodern programmer From vorlon at netexpress.net Tue Apr 3 15:46:32 2001 From: vorlon at netexpress.net (Steve Langasek) Date: Tue Dec 2 02:34:06 2003 Subject: samba-2.2.0-alpha3 spec for RedHat 7.0 In-Reply-To: <3AC9A736.4070705@delfi.lt> Message-ID: Ah... also... On Tue, 3 Apr 2001, Augis wrote: > is anyone here interested in .spec file for building RPM? > I've fixed some rather serious bugs, which prevented RPM from being > built and also added xinetd support, which is standart on RH 7.0 The consensus is that running Samba out of inetd is almost always a Very Bad Idea. I would suggest not supporting inetd-based configurations at all in the RPM; I don't see any reason to give people a loaded gun. Steve Langasek postmodern programmer From jeremy at valinux.com Tue Apr 3 15:44:14 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:06 2003 Subject: samba-2.2.0-alpha3 spec for RedHat 7.0 References: <3AC9A736.4070705@delfi.lt> Message-ID: <3AC9EFCE.712AE2FC@valinux.com> Augis wrote: > > Hi all, > > is anyone here interested in .spec file for building RPM? > I've fixed some rather serious bugs, which prevented RPM from being > built and also added xinetd support, which is standart on RH 7.0 > > The only thing i could't make was Makefile patch. Seems like the patch > it's being taken from alpha1 or alpha2 release. So, you'll have to fix > Makefile by hand. > > Well. Another problem is that makerpms script is not working as it > should: RH 7.0 uses RPM v4, which is fixable in script, but the script > breaks when trying to resolve %{_topdir}/RPMS|SRPMS|SPECS. Specifying > explicit paths solves the problem. Yes please - send the patch in diff -u format. John Terpstra is looking after this at the moment. Thanks, Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From ejs at delfi.lt Tue Apr 3 16:37:20 2001 From: ejs at delfi.lt (Augis) Date: Tue Dec 2 02:34:06 2003 Subject: samba-2.2.0-alpha3 spec for RedHat 7.0 References: Message-ID: <3AC9FC40.6040100@delfi.lt> Steve Langasek wrote: > The consensus is that running Samba out of inetd is almost always a Very Bad > Idea. I would suggest not supporting inetd-based configurations at all in the > RPM; I don't see any reason to give people a loaded gun. It was about swat, not about Samba :) As RH7 don't use inetd, it is impossible while addding lines to missing file /etc/inetd.conf make SWAT accept connections. You must write something to /etc/xinetd.d/samba file instead. -- Augis architect From vorlon at netexpress.net Tue Apr 3 17:53:08 2001 From: vorlon at netexpress.net (Steve Langasek) Date: Tue Dec 2 02:34:06 2003 Subject: samba-2.2.0-alpha3 spec for RedHat 7.0 In-Reply-To: <3AC9FC40.6040100@delfi.lt> Message-ID: On Tue, 3 Apr 2001, Augis wrote: > > The consensus is that running Samba out of inetd is almost always a Very Bad > > Idea. I would suggest not supporting inetd-based configurations at all in the > > RPM; I don't see any reason to give people a loaded gun. > It was about swat, not about Samba :) > As RH7 don't use inetd, it is impossible while addding lines to missing > file /etc/inetd.conf make SWAT accept connections. You must write > something to /etc/xinetd.d/samba file instead. Ah, makes sense. I was afraid the spec file did something similar to what the Debian Samba package does, giving users the option of running samba in daemon or inetd mode. (Worse, inetd mode is the /default/ in Debian...) Steve Langasek postmodern programmer From soslinux1 at bol.com.br Tue Apr 3 22:04:54 2001 From: soslinux1 at bol.com.br (soslinux1) Date: Tue Dec 2 02:34:06 2003 Subject: =?iso-8859-1?q?Configura=E7=E3o_do_Samba_?= Message-ID: Estou tentando configurar o Samba e ele j=E1 esta conseguindo compartilhar arquivos com m=E1quinas windows e vice - versa. Mas o problema =E9 o seguinte: n=E3o consigo fazer as maquinas windows se conectarem no dom=EDnio do linux que eu criei. Ele diaz que o dom=EDnio n=E3o foi encontrado. O que fazer??? Por favor mande-me a reposta usando o linuxconf, pois foi assim que consegui configurar todo o Samba sem precisar editar o smb.conf. Obrigado!!! __________________________________________________________________________ O BOL =E9 Top3 no iBest! Vote j=E1 para torn=E1-lo Top1! http://www.bol.com.br/ibest.html From jsw at manic-miner.freeserve.co.uk Wed Apr 4 10:50:42 2001 From: jsw at manic-miner.freeserve.co.uk (Jet Set Willy) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie Message-ID: <00b101c0bcf5$1f607b40$cf01020a@perfectdomain.perfectimage.co.uk> Please could somebody clear up some confusion I have - I freely admit that I am a clueless newbie in both samba and linux so be warned.... I am runing Mandrake 7.1 (if that makes a difference) and have managed to get samba running quite well ( verion 2.0.6) ie I can see shares copy files from my win98 machine and so on. Works perfectly. Now what I really want (what I really really want) is to be able to login to the linux box from the 98 machine. So far I have waded thru the text docs that come with samba, I've read a couple of how-to's and bought a book ( think is the samba black book but can't be sure of the exact title cos I've left it at home). Finally I've found this mailing list ! So far the documentation seems fairly confusing (to a newbie) as I understand it later versions[1] of samba support NT PDC type things however it suggests that the version I have will allow 98 logons - can somebody point me in the direction of a definitive answer of what 2.0.6 will support ie I think it supports logons from 98 machines but doesn't do full PDC - is this correct ? If so then I guess there must be some differences between the two - what are they ? Hope somebody can help, thanks JSW [1] I don't think I am up to downloading and recompling a newer version of samba *just* yet - give me time though From mhaney at info4cars.com Wed Apr 4 11:15:26 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie In-Reply-To: <00b101c0bcf5$1f607b40$cf01020a@perfectdomain.perfectimage.co.uk> Message-ID: What do you mean by 'log in' to the samba box? Do you mean authenticate to it? Or are you just trying to access the entire box itself and not just the shares? If you are doing authentication, 2.0.6 won't cut it. YOu'll need the 2.2.0-alpha3 code (the latest and greatest) in order to make samba act as a PDC. 2.0.6 supports authenticating of almost ANY (win2k excluded I believe) version of windows as long as there is an NT Domain controller available to handle the auth request from the samba box. Of course it needs to be part of an NT domain in order to do that, which is in the docs. Without an NT domain, it's just like any other peer-to-peer network in so much as you have to add each user to the samba box that needs access to it. Unless you use NIS or another central authenticating mechanism. Let me know if this helps or not. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Jet Set Willy Sent: Wednesday, April 04, 2001 6:51 AM To: samba-ntdom@samba.org Subject: Caution Stoopid Newbie Please could somebody clear up some confusion I have - I freely admit that I am a clueless newbie in both samba and linux so be warned.... I am runing Mandrake 7.1 (if that makes a difference) and have managed to get samba running quite well ( verion 2.0.6) ie I can see shares copy files from my win98 machine and so on. Works perfectly. Now what I really want (what I really really want) is to be able to login to the linux box from the 98 machine. So far I have waded thru the text docs that come with samba, I've read a couple of how-to's and bought a book ( think is the samba black book but can't be sure of the exact title cos I've left it at home). Finally I've found this mailing list ! So far the documentation seems fairly confusing (to a newbie) as I understand it later versions[1] of samba support NT PDC type things however it suggests that the version I have will allow 98 logons - can somebody point me in the direction of a definitive answer of what 2.0.6 will support ie I think it supports logons from 98 machines but doesn't do full PDC - is this correct ? If so then I guess there must be some differences between the two - what are they ? Hope somebody can help, thanks JSW [1] I don't think I am up to downloading and recompling a newer version of samba *just* yet - give me time though From eirvine at tpgi.com.au Wed Apr 4 11:53:35 2001 From: eirvine at tpgi.com.au (eirvine) Date: Tue Dec 2 02:34:06 2003 Subject: PDC and plaintext passwords References: <3AC9CB89.B6B9D008@kulak.ac.be> Message-ID: <3ACB0B3F.D47308B9@tpgi.com.au> Hi, Brecht Samyn wrote: > > Hi, > > Is it possible to use cleartext passwords while Samba operates as a > PDC ? Hmm. I tried this with NT4SP6 clients and network logons didn't work. When I switched to encrypted they did. > We would like to use the username/passwords from LDAP (which we don't > administer) (via PAM?) and being able to login to a Samba PDC (because > we have Win2k clients). > > Any help or link appreciated! > > Thanks, > > Brecht Eddie From Dallas.Hipwell at sbdpl.com Wed Apr 4 12:05:52 2001 From: Dallas.Hipwell at sbdpl.com (Dallas Hipwell) Date: Tue Dec 2 02:34:06 2003 Subject: smb.conf 'domain group map' and 'domain user map' options Message-ID: We have been installing/supporting/developing solutions based on, amongst other stuff, Linux and Samba for quite a while. To date we have been able to sort out most of our own problems but thought it about time we worked with the SAMBA community a little more actively. One thing I am trying to find out at the moment is whether or not the 'domain group map' and 'domain user map' options will be included into the 2.2 code at some point or if there are other plans to facilitate this functionality. I must say that watching SAMBA grow over the past few years has been pretty impressive and look forward to exciting future. Thanks DJH Systems By Design Pty Ltd From eirvine at tpgi.com.au Wed Apr 4 12:10:48 2001 From: eirvine at tpgi.com.au (eirvine) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie References: <00b101c0bcf5$1f607b40$cf01020a@perfectdomain.perfectimage.co.uk> Message-ID: <3ACB0F48.12E1A20E@tpgi.com.au> Hi Jet Set, Jet Set Willy wrote: > > Please could somebody clear up some confusion I have - I freely > admit that I am a clueless newbie in both samba and linux so be warned.... > I am runing Mandrake 7.1 (if that makes a difference) and have > managed to get samba running quite well ( verion 2.0.6) ie I > can see shares copy files from my win98 machine and so on. You can't be that clueless then. > Works perfectly. Now what I really want (what I really really want) > is to be able to login to the linux box from the 98 machine. So > far I have waded thru the text docs that come with samba, I've > read a couple of how-to's and bought a book ( think > is the samba black book but can't be sure of the exact title > cos I've left it at home). Finally I've found this mailing list ! Good. :) > So far the documentation seems fairly confusing (to a newbie) > as I understand it later versions[1] of samba support NT PDC > type things however it suggests that the version I have will allow > 98 logons - can somebody point me in the direction of a definitive > answer of what 2.0.6 will support ie I think it supports logons from > 98 machines but doesn't do full PDC - is this correct ? If so then > I guess there must be some differences between the two - what > are they ? The full PDC thing for WindowsNT/W2k is a ways off. But 2.07 seems to do what I want it to do with NT4 clients. I think you want to take a look at http://bioserve.biochem.latrobe.edu.au/samba/ Eddie. From Jonathan.W.Miner at lmco.com Wed Apr 4 12:17:06 2001 From: Jonathan.W.Miner at lmco.com (Jonathan W Miner) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie References: <00b101c0bcf5$1f607b40$cf01020a@perfectdomain.perfectimage.co.uk> Message-ID: <3ACB10C2.10A86155@lmco.com> Jet Set Willy wrote: > > I am runing Mandrake 7.1 (if that makes a difference) and have > managed to get samba running quite well ( verion 2.0.6) ie I > can see shares copy files from my win98 machine and so on. > Works perfectly. Now what I really want (what I really really want) > is to be able to login to the linux box from the 98 machine. For basic networks, Samba 2.0.6 will work as a PDC. There are some shortcomings, but I forget what they are, and it hasn't bothered me either. I use uit at home with a network of Win95, Win98 and NT machines. Here is the global section of my smb.conf [global] workgroup = {my domainname} encrypt passwords = Yes log file = /var/log/samba/log.%m max log size = 50 time server = Yes domain logons = Yes preferred master = Yes domain master = Yes wins support = Yes unix realname = Yes utmp = Yes I'm kind of surprised that I don't have "security = server". According to the man page for smb.conf, the default is "security = user", it also says that from the client's point of view the two are the same. Maybe someone can clarify this? -- | Jonathan Miner _o) | LM-Xpress: jonathan.w.miner@lmco.com /\\ _o) _o) | Phone: 603 885 UNIX - Fax: 603 885 3850 _\_V _(\) _(\) | USmail: PO Box 868, NCA01-3719, Nashua, NH 03061-0868 From dbannon at tpg.com.au Wed Apr 4 12:33:31 2001 From: dbannon at tpg.com.au (David Bannon) Date: Tue Dec 2 02:34:06 2003 Subject: samba-2.2.0-alpha3 spec for RedHat 7.0 In-Reply-To: <3AC9A736.4070705@delfi.lt> Message-ID: <3.0.6.32.20010404223331.007cd7a0@bioserve.latrobe.edu.au> At 12:34 PM 4/3/01 +0200, Augis wrote: > >Hi all, > >is anyone here interested in .spec file for building RPM? >I've fixed some rather serious bugs, which prevented RPM from being >built and also added xinetd support, which is standart on RH 7.0 At the risk of offending some hard working people, do we really want to encourage rms releases of samba 2.2.alpha stuff ? A good deal of the problems that we see on this list is due to people trying to get a cvs version going over top of a previously installed rms version. The main problem being that rms makers like to put config files in /etc/, logs in /var/log and so on and the non rms keeps all the samba files (by default) in one nice tidy tree. And I sure don't like the idea of starting samba from xinetd.... David ------------------------------------------------------------ David Bannon, phone mobile : 0418 525687 Private : Work : Email : dbannon@tpg.com.au D.Bannon@vpac.org Phone : 9337 4210 9925 4733 ------------------------------------------------------------ ... Humpty Dumpty was pushed ! From vorlon at netexpress.net Wed Apr 4 13:59:25 2001 From: vorlon at netexpress.net (Steve Langasek) Date: Tue Dec 2 02:34:06 2003 Subject: =?iso-8859-1?q?Configura=E7=E3o_do_Samba_?= In-Reply-To: Message-ID: Rapid translation, for anyone who might have some insights into the problem: "I'm trying to configure Samba and I already have it sharing files with Windows machines and vice-versa. The problem is, I can't make the Windows machines connect to the Linux domain that I created. It says that the domain was not found. What do I do? Please send me the answer using linuxconf, because I used linuxconf to configure Samba, so I never had to edit smb.conf. Thanks!" Steve Langasek postmodern programmer On Tue, 3 Apr 2001, soslinux1 wrote: > Estou tentando configurar o Samba e > ele j? esta conseguindo compartilhar > arquivos com m?quinas windows e vice - > versa. Mas o problema ? o seguinte: > n?o consigo fazer as maquinas windows > se conectarem no dom?nio do linux que > eu criei. Ele diaz que o dom?nio n?o > foi encontrado. O que fazer??? Por > favor mande-me a reposta usando o > linuxconf, pois foi assim que consegui > configurar todo o Samba sem precisar > editar o smb.conf. From MMcEldowney at deltaregional.com Wed Apr 4 14:37:57 2001 From: MMcEldowney at deltaregional.com (McEldowney, Michael) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie Message-ID: I'm not trying to be rude Mark, but you shouldn't post bad information. See my comments below. > -----Original Message----- > From: Mark Haney [mailto:mhaney@info4cars.com] > Sent: Wednesday, April 04, 2001 6:15 AM > To: Jet Set Willy; samba-ntdom@samba.org > Subject: RE: Caution Stoopid Newbie > > > What do you mean by 'log in' to the samba box? Do you mean > authenticate to > it? Or are you just trying to access the entire box itself > and not just the > shares? If you are doing authentication, 2.0.6 won't cut it. > YOu'll need > the 2.2.0-alpha3 code (the latest and greatest) in order to > make samba act > as a PDC. Err -- wrong. 2.0.6 and 2.0.7 _WILL_ authenticate, that's what the smbpasswd file is for. And alpha code should _NEVER_ be used in production. > > 2.0.6 supports authenticating of almost ANY (win2k excluded I believe) > version of windows as long as there is an NT Domain > controller available to > handle the auth request from the samba box. Again, not correct. A trueNT domain controller is _NOT_ necessary for this. Samba will authenticate all by itself. I have Win2K boxes authenticating on my 2.0.7 server right now. > Of course it > needs to be part > of an NT domain in order to do that, which is in the docs. > Without an NT > domain, it's just like any other peer-to-peer network in so > much as you have > to add each user to the samba box that needs access to it. OK, partially correct. You do have to add each user to the Samba box, just as you would have to add users to an NT box. Samba is _NOT_ peer-to-peer. Peer-to-peer networks do not authenticate from a central server, cannot handle logon scripting, cannot provide home directory services, etc. Samba does all this and more. > Unless you use > NIS or another central authenticating mechanism. Let me know > if this helps > or not. > Probably not. > > -----Original Message----- > From: samba-ntdom-admin@lists.samba.org > [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Jet Set Willy > Sent: Wednesday, April 04, 2001 6:51 AM > To: samba-ntdom@samba.org > Subject: Caution Stoopid Newbie > > > Please could somebody clear up some confusion I have - I freely > admit that I am a clueless newbie in both samba and linux so > be warned.... > I am runing Mandrake 7.1 (if that makes a difference) and have > managed to get samba running quite well ( verion 2.0.6) ie I > can see shares copy files from my win98 machine and so on. > Works perfectly. Now what I really want (what I really really want) > is to be able to login to the linux box from the 98 machine. So > far I have waded thru the text docs that come with samba, I've > read a couple of how-to's and bought a book ( think > is the samba black book but can't be sure of the exact title > cos I've left it at home). Finally I've found this mailing list ! > > So far the documentation seems fairly confusing (to a newbie) > as I understand it later versions[1] of samba support NT PDC > type things however it suggests that the version I have will allow > 98 logons - can somebody point me in the direction of a definitive > answer of what 2.0.6 will support ie I think it supports logons from > 98 machines but doesn't do full PDC - is this correct ? If so then > I guess there must be some differences between the two - what > are they ? > > Hope somebody can help, thanks > JSW > > > [1] I don't think I am up to downloading and recompling a newer > version of samba *just* yet - give me time though > > > > > From jsw at manic-miner.freeserve.co.uk Wed Apr 4 14:24:46 2001 From: jsw at manic-miner.freeserve.co.uk (Jet Set Willy) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie References: Message-ID: <00a201c0bd13$0774d760$cf01020a@perfectdomain.perfectimage.co.uk> > What do you mean by 'log in' to the samba box? Do you mean authenticate to > it? Or are you just trying to access the entire box itself and not just the > shares? If you are doing authentication, 2.0.6 won't cut it. hmm I think I mean authentication - sorry for being so unsure of my terminology as well as unsure of what I am doing. When I boot the win98 box - I have set up the networking to log in to a particular domain and I was/am hoping that I can get samba / linux to manage this. At the moment I have an NT box that is set to be PDC for the domain and this handles the login requests. My ultimate aim is to remove this NT box and replace it with a suitably set up samba (From reading the docs and some of the replies here it is obvious that the version of samba I have will not quite do this - I am just not sure how far off it is and whether or not it will make a difference to me.) Also as I understand it samba can be set up so that when a request to access a share is made samba can check the priveleges / rights against another machine ie I have two linux machines and one is set to use the other for authentication. I guess what I am trying to say is that I am aiming for one list of users on the network rather than a list of users / groups on each machine. > YOu'll need > the 2.2.0-alpha3 code (the latest and greatest) in order to make samba act > as a PDC. I am not sure if I have the knowledge to do that just yet :-) The book I have bought does go thru it so I guess at some point I will be able to give it a go but at the moment I am still feeling smug that I managed to get the thing working at all while trying to ignore the little voice that is telling me I don't even know the scale of the amount I have yet to learn..... > 2.0.6 supports authenticating of almost ANY (win2k excluded I believe) > version of windows as long as there is an NT Domain controller available to > handle the auth request from the samba box. Of course it needs to be part > of an NT domain in order to do that, which is in the docs. Without an NT > domain, it's just like any other peer-to-peer network in so much as you have > to add each user to the samba box that needs access to it. Unless you use > NIS or another central authenticating mechanism. Let me know if this helps > or not. Ok I do have a NT Domain controller but would rather not ! I do already have it all in the same domain so I guess it sounds like I need to have a read of the NIS how-to ? Finally Yes it has helped - thanks for replying so promptly. To be honest I have only just started learning about linux / Open source etc and am stunned by the quality and volume of stuff available - to a newbie it is quite overwhelming. Until you find newsgroups / mailing lists you tend to feel miles out of your depth. Thanks JSW. From jsw at manic-miner.freeserve.co.uk Wed Apr 4 14:28:45 2001 From: jsw at manic-miner.freeserve.co.uk (Jet Set Willy) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie References: <00b101c0bcf5$1f607b40$cf01020a@perfectdomain.perfectimage.co.uk> <3ACB0F48.12E1A20E@tpgi.com.au> Message-ID: <00b001c0bd13$974e6720$cf01020a@perfectdomain.perfectimage.co.uk> > > Please could somebody clear up some confusion I have - I freely > > admit that I am a clueless newbie in both samba and linux so be warned.... > > I am runing Mandrake 7.1 (if that makes a difference) and have > > managed to get samba running quite well ( verion 2.0.6) ie I > > can see shares copy files from my win98 machine and so on. > > You can't be that clueless then. don't speak too soon :-) > > > Works perfectly. Now what I really want (what I really really want) > > is to be able to login to the linux box from the 98 machine. So > > far I have waded thru the text docs that come with samba, I've > > read a couple of how-to's and bought a book ( think > > is the samba black book but can't be sure of the exact title > > cos I've left it at home). Finally I've found this mailing list ! > > The full PDC thing for WindowsNT/W2k is a ways off. But 2.07 seems to > do what I want it to do with NT4 clients. ok now this might work - I can download rpm's from mandrakes site for mandrake 7.2 which seem to be samba version 2.07 - is there any reason why I can't just install this without upgrading the whole of my linux machine > > I think you want to take a look at > http://bioserve.biochem.latrobe.edu.au/samba/ > Looking at it now thanks ! From MMcEldowney at deltaregional.com Wed Apr 4 14:51:47 2001 From: MMcEldowney at deltaregional.com (McEldowney, Michael) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie Message-ID: I'm using 2.0.7, so this may not pertain to your 2.0.6. That said... The way to do this is: in smb.conf set these options - workgroup = {whatever you want to name your domain} domain logons = yes encrypt passwords = yes domain master = yes preferred master = yes wins support = yes restart smbd and nmbd to make the changes take affect, and you should be able to set up the Win98 boxes to logon to the domain you named in the "workgroup=" line. Let me know if you have any trouble. I would suggest moving up to version 2.0.7. You can get it in an RPM which doesn't need compiling and makes it super easy to install. Mike > -----Original Message----- > From: Jet Set Willy [mailto:jsw@manic-miner.freeserve.co.uk] > Sent: Wednesday, April 04, 2001 5:51 AM > To: samba-ntdom@samba.org > Subject: Caution Stoopid Newbie > > > Please could somebody clear up some confusion I have - I freely > admit that I am a clueless newbie in both samba and linux so > be warned.... > I am runing Mandrake 7.1 (if that makes a difference) and have > managed to get samba running quite well ( verion 2.0.6) ie I > can see shares copy files from my win98 machine and so on. > Works perfectly. Now what I really want (what I really really want) > is to be able to login to the linux box from the 98 machine. So > far I have waded thru the text docs that come with samba, I've > read a couple of how-to's and bought a book ( think > is the samba black book but can't be sure of the exact title > cos I've left it at home). Finally I've found this mailing list ! > > So far the documentation seems fairly confusing (to a newbie) > as I understand it later versions[1] of samba support NT PDC > type things however it suggests that the version I have will allow > 98 logons - can somebody point me in the direction of a definitive > answer of what 2.0.6 will support ie I think it supports logons from > 98 machines but doesn't do full PDC - is this correct ? If so then > I guess there must be some differences between the two - what > are they ? > > Hope somebody can help, thanks > JSW > > > [1] I don't think I am up to downloading and recompling a newer > version of samba *just* yet - give me time though > > > From jsw at manic-miner.freeserve.co.uk Wed Apr 4 14:32:01 2001 From: jsw at manic-miner.freeserve.co.uk (Jet Set Willy) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie References: <00b101c0bcf5$1f607b40$cf01020a@perfectdomain.perfectimage.co.uk> <3ACB10C2.10A86155@lmco.com> Message-ID: <00b801c0bd14$071b5040$cf01020a@perfectdomain.perfectimage.co.uk> > Jet Set Willy wrote: > > > > I am runing Mandrake 7.1 (if that makes a difference) and have > > managed to get samba running quite well ( verion 2.0.6) ie I > > can see shares copy files from my win98 machine and so on. > > Works perfectly. Now what I really want (what I really really want) > > is to be able to login to the linux box from the 98 machine. > > For basic networks, Samba 2.0.6 will work as a PDC. There are some > shortcomings, but I forget what they are, and it hasn't bothered me > either. I use uit at home with a network of Win95, Win98 and NT > machines. Here is the global section of my smb.conf So when you say it works a PDC what does it do for you ? I've taken a copy of the global sections and will try them out tonight when I get back home Thanks ! From mhaney at info4cars.com Wed Apr 4 15:01:05 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie In-Reply-To: Message-ID: And I do not like being told I am posting bad info by someone who barely knows any anything like what I know. You and most everyone else out there I am sure misunderstood, what to everyone here is obvious. When I mean 'authentication' I mean act in a DC way to do domain authentication. YOur accusation that I am wrong in this is unfounded. 2.0.6 cannot stably be a PDC in an NT domain. 2.0.6 can certianly use an NT domain controllers to authenticate. And as any idiot knows running 'alpha code' in a production environment is not the greatest thing in the world to do, but it works well in this case and there was _no mention whatsoever_ that this was in a production environment, so I stand by my previous statement. And a true NT domain controller isn't needed for samba to authenticate is true as well. But he states he wantsd to 'log in' to the samba box. Unless you can read his mind, my first thought was to simply telnet to it if he needed access to it other than shares. And your statement that samba is not peer-to-peer is very obviously wrong, unless you are doing authentication from some central mechanism such as NIS or an NT domain, you are running a peer-to-peer network. YOu can run samba outside of an NT doamin and have the client auth to it just fine. I do it at home. So get your facts straight before you flame anyone. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of McEldowney, Michael Sent: Wednesday, April 04, 2001 10:38 AM To: 'Mark Haney'; Jet Set Willy; samba-ntdom@samba.org Subject: RE: Caution Stoopid Newbie I'm not trying to be rude Mark, but you shouldn't post bad information. See my comments below. > -----Original Message----- > From: Mark Haney [mailto:mhaney@info4cars.com] > Sent: Wednesday, April 04, 2001 6:15 AM > To: Jet Set Willy; samba-ntdom@samba.org > Subject: RE: Caution Stoopid Newbie > > > What do you mean by 'log in' to the samba box? Do you mean > authenticate to > it? Or are you just trying to access the entire box itself > and not just the > shares? If you are doing authentication, 2.0.6 won't cut it. > YOu'll need > the 2.2.0-alpha3 code (the latest and greatest) in order to > make samba act > as a PDC. Err -- wrong. 2.0.6 and 2.0.7 _WILL_ authenticate, that's what the smbpasswd file is for. And alpha code should _NEVER_ be used in production. > > 2.0.6 supports authenticating of almost ANY (win2k excluded I believe) > version of windows as long as there is an NT Domain > controller available to > handle the auth request from the samba box. Again, not correct. A trueNT domain controller is _NOT_ necessary for this. Samba will authenticate all by itself. I have Win2K boxes authenticating on my 2.0.7 server right now. > Of course it > needs to be part > of an NT domain in order to do that, which is in the docs. > Without an NT > domain, it's just like any other peer-to-peer network in so > much as you have > to add each user to the samba box that needs access to it. OK, partially correct. You do have to add each user to the Samba box, just as you would have to add users to an NT box. Samba is _NOT_ peer-to-peer. Peer-to-peer networks do not authenticate from a central server, cannot handle logon scripting, cannot provide home directory services, etc. Samba does all this and more. > Unless you use > NIS or another central authenticating mechanism. Let me know > if this helps > or not. > Probably not. > > -----Original Message----- > From: samba-ntdom-admin@lists.samba.org > [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Jet Set Willy > Sent: Wednesday, April 04, 2001 6:51 AM > To: samba-ntdom@samba.org > Subject: Caution Stoopid Newbie > > > Please could somebody clear up some confusion I have - I freely > admit that I am a clueless newbie in both samba and linux so > be warned.... > I am runing Mandrake 7.1 (if that makes a difference) and have > managed to get samba running quite well ( verion 2.0.6) ie I > can see shares copy files from my win98 machine and so on. > Works perfectly. Now what I really want (what I really really want) > is to be able to login to the linux box from the 98 machine. So > far I have waded thru the text docs that come with samba, I've > read a couple of how-to's and bought a book ( think > is the samba black book but can't be sure of the exact title > cos I've left it at home). Finally I've found this mailing list ! > > So far the documentation seems fairly confusing (to a newbie) > as I understand it later versions[1] of samba support NT PDC > type things however it suggests that the version I have will allow > 98 logons - can somebody point me in the direction of a definitive > answer of what 2.0.6 will support ie I think it supports logons from > 98 machines but doesn't do full PDC - is this correct ? If so then > I guess there must be some differences between the two - what > are they ? > > Hope somebody can help, thanks > JSW > > > [1] I don't think I am up to downloading and recompling a newer > version of samba *just* yet - give me time though > > > > > From mhaney at info4cars.com Wed Apr 4 15:07:10 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie In-Reply-To: <00b801c0bd14$071b5040$cf01020a@perfectdomain.perfectimage.co.uk> Message-ID: > For basic networks, Samba 2.0.6 will work as a PDC. There are some > shortcomings, but I forget what they are, and it hasn't bothered me > either. I use uit at home with a network of Win95, Win98 and NT > machines. Here is the global section of my smb.conf Don't listen to this. 2.0.6 doesn't work well enough as a PDC to make it worthwhile, especially if you are new to this. When we say it works as a PDC we mean that samba can act a a central authenticating authority for Windows NT domains. In this case it's the Primary Domain Controller. And unless you have an NT domain, don't worry about it to much. What kind of environment are we talking about here anyway? It sounds to me that if you are asking what a PDC is, you don't have an NT domain. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Jet Set Willy Sent: Wednesday, April 04, 2001 10:32 AM To: samba-ntdom@samba.org Subject: Re: Caution Stoopid Newbie > Jet Set Willy wrote: > > > > I am runing Mandrake 7.1 (if that makes a difference) and have > > managed to get samba running quite well ( verion 2.0.6) ie I > > can see shares copy files from my win98 machine and so on. > > Works perfectly. Now what I really want (what I really really want) > > is to be able to login to the linux box from the 98 machine. > > For basic networks, Samba 2.0.6 will work as a PDC. There are some > shortcomings, but I forget what they are, and it hasn't bothered me > either. I use uit at home with a network of Win95, Win98 and NT > machines. Here is the global section of my smb.conf So when you say it works a PDC what does it do for you ? I've taken a copy of the global sections and will try them out tonight when I get back home Thanks ! From aalang at rutgersinsurance.com Wed Apr 4 15:16:47 2001 From: aalang at rutgersinsurance.com (Adam Lang) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie References: Message-ID: <00bd01c0bd1a$43ffa280$330a0a0a@rutgersinsurance.com> But the point is Samba 2.0.7 CAN do central authentication. One Samba server that all file servers, email servers, squid servers, etc . use for user/password authentication. > And your statement that samba is not peer-to-peer is very obviously wrong, > unless you are doing authentication from some central mechanism such as NIS > or an NT domain, you are running a peer-to-peer network. YOu can run samba > outside of an NT doamin and have the client auth to it just fine. I do it at > home. So get your facts straight before you flame anyone. From mhaney at info4cars.com Wed Apr 4 15:28:18 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie In-Reply-To: <00bd01c0bd1a$43ffa280$330a0a0a@rutgersinsurance.com> Message-ID: > But the point is Samba 2.0.7 CAN do central authentication. One Samba server > that all file servers, email servers, squid servers, etc . use for > user/password authentication. By acting as an NT PDC perhaps? I still stand by my original statement 2.0.x isn't stable enough to do that. Believe me, I tried for over a month one time to do that and never had enough uptime to feel comfortable. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Adam Lang Sent: Wednesday, April 04, 2001 11:17 AM To: Mark Haney; McEldowney, Michael; Jet Set Willy; samba-ntdom@samba.org Subject: Re: Caution Stoopid Newbie But the point is Samba 2.0.7 CAN do central authentication. One Samba server that all file servers, email servers, squid servers, etc . use for user/password authentication. > And your statement that samba is not peer-to-peer is very obviously wrong, > unless you are doing authentication from some central mechanism such as NIS > or an NT domain, you are running a peer-to-peer network. YOu can run samba > outside of an NT doamin and have the client auth to it just fine. I do it at > home. So get your facts straight before you flame anyone. From ejs at delfi.lt Wed Apr 4 14:08:48 2001 From: ejs at delfi.lt (Augis) Date: Tue Dec 2 02:34:06 2003 Subject: samba-2.2.0-alpha3 spec for RedHat 7.0 References: <3.0.6.32.20010404223331.007cd7a0@bioserve.latrobe.edu.au> Message-ID: <3ACB2AF0.6050503@delfi.lt> David Bannon wrote: > At the risk of offending some hard working people, do we really want to > encourage rms releases of samba 2.2.alpha stuff ? Anyway, SPEC file should be correct for the release version? A good deal of the > problems that we see on this list is due to people trying to get a cvs > version going over top of a previously installed rms version. The main > problem being that rms makers like to put config files in /etc/, logs in > /var/log and so on and the non rms keeps all the samba files (by default) > in one nice tidy tree. Ok. I had some printing problems when running 2.2.0-alpha2 with CUPS (one station was mysteriosly crashing while printing). The easiest solution was mounting CD (via smbfs :), copying samba-2.0.7 rpm's, backing current Samba config; rpm -e samba-2.2.0-alpha2; rpm -i samba*-2.0.7.rpm Is it possible via CVS? -- Augis From MMcEldowney at deltaregional.com Wed Apr 4 15:40:55 2001 From: MMcEldowney at deltaregional.com (McEldowney, Michael) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie Message-ID: > -----Original Message----- > From: Mark Haney [mailto:mhaney@info4cars.com] > Sent: Wednesday, April 04, 2001 10:01 AM > To: McEldowney, Michael; Jet Set Willy; samba-ntdom@samba.org > Subject: RE: Caution Stoopid Newbie > > > And I do not like being told I am posting bad info by someone > who barely > knows any anything like what I know. Obviously you think you know it all. > > You and most everyone else out there I am sure misunderstood, what to > everyone here is obvious. When I mean 'authentication' I > mean act in a DC > way to do domain authentication. YOur accusation that I am > wrong in this is > unfounded. 2.0.6 cannot stably be a PDC in an NT domain. 2.0.6 can > certianly use an NT domain controllers to authenticate. Your definition/opinion of an NT Domain seems to insist that you must have a true NT OS operating somewhere on the network. That isn't correct. I run an "NT Domain" at home and at work on Samba alone. No NT required. And it's more stable than you are. > > And as any idiot knows running 'alpha code' in a production > environment is > not the greatest thing in the world to do, but it works well > in this case > and there was _no mention whatsoever_ that this was in a production > environment, so I stand by my previous statement. So you make the assumption that JSW was looking for something to test? There was "_no mention whatsoever_" that he wanted to be a beta tester either. In fact, he stated in his "ps" that he's not ready yet to download and compile. Read the entire post before you reply to it. > > And a true NT domain controller isn't needed for samba to > authenticate is > true as well. But he states he wantsd to 'log in' to the > samba box. Unless > you can read his mind, my first thought was to simply telnet > to it if he > needed access to it other than shares. Why would a user that wanted to know how to telnet into a box post a question on the Samba list? Obviously he wants to logon to the Samba services. Duh. > > And your statement that samba is not peer-to-peer is very > obviously wrong, > unless you are doing authentication from some central > mechanism such as NIS > or an NT domain, you are running a peer-to-peer network. No, your very wrong. Samba _IS_ the central authentication mechanism, hence it's not peer-to-peer. You need to grab a Webster's and look up the definition of a peer-to-peer network. > YOu > can run samba > outside of an NT doamin and have the client auth to it just > fine. I do it at > home. Which is exactly the point I'm trying to make. > >So get your facts straight before you flame anyone. > As I said before, you shouldn't post bad information. If you do your asking for flames. > -----Original Message----- > From: samba-ntdom-admin@lists.samba.org > [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of McEldowney, > Michael > Sent: Wednesday, April 04, 2001 10:38 AM > To: 'Mark Haney'; Jet Set Willy; samba-ntdom@samba.org > Subject: RE: Caution Stoopid Newbie > > > I'm not trying to be rude Mark, but you shouldn't post bad > information. > See my comments below. > > > -----Original Message----- > > From: Mark Haney [mailto:mhaney@info4cars.com] > > Sent: Wednesday, April 04, 2001 6:15 AM > > To: Jet Set Willy; samba-ntdom@samba.org > > Subject: RE: Caution Stoopid Newbie > > > > > > What do you mean by 'log in' to the samba box? Do you mean > > authenticate to > > it? Or are you just trying to access the entire box itself > > and not just the > > shares? If you are doing authentication, 2.0.6 won't cut it. > > YOu'll need > > the 2.2.0-alpha3 code (the latest and greatest) in order to > > make samba act > > as a PDC. > > Err -- wrong. 2.0.6 and 2.0.7 _WILL_ authenticate, that's what the > smbpasswd file is for. And alpha code should _NEVER_ be used in > production. > > > > > 2.0.6 supports authenticating of almost ANY (win2k excluded > I believe) > > version of windows as long as there is an NT Domain > > controller available to > > handle the auth request from the samba box. > > Again, not correct. A trueNT domain controller is _NOT_ necessary for > this. Samba will authenticate all by itself. I have Win2K boxes > authenticating on my 2.0.7 server right now. > > > Of course it > > needs to be part > > of an NT domain in order to do that, which is in the docs. > > Without an NT > > domain, it's just like any other peer-to-peer network in so > > much as you have > > to add each user to the samba box that needs access to it. > > OK, partially correct. You do have to add each user to the Samba box, > just as you would have to add users to an NT box. Samba is _NOT_ > peer-to-peer. Peer-to-peer networks do not authenticate from > a central > server, cannot handle logon scripting, cannot provide home directory > services, etc. Samba does all this and more. > > > Unless you use > > NIS or another central authenticating mechanism. Let me know > > if this helps > > or not. > > > > Probably not. > > > > > -----Original Message----- > > From: samba-ntdom-admin@lists.samba.org > > [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Jet Set Willy > > Sent: Wednesday, April 04, 2001 6:51 AM > > To: samba-ntdom@samba.org > > Subject: Caution Stoopid Newbie > > > > > > Please could somebody clear up some confusion I have - I freely > > admit that I am a clueless newbie in both samba and linux so > > be warned.... > > I am runing Mandrake 7.1 (if that makes a difference) and have > > managed to get samba running quite well ( verion 2.0.6) ie I > > can see shares copy files from my win98 machine and so on. > > Works perfectly. Now what I really want (what I really really want) > > is to be able to login to the linux box from the 98 machine. So > > far I have waded thru the text docs that come with samba, I've > > read a couple of how-to's and bought a book ( think > > is the samba black book but can't be sure of the exact title > > cos I've left it at home). Finally I've found this mailing list ! > > > > So far the documentation seems fairly confusing (to a newbie) > > as I understand it later versions[1] of samba support NT PDC > > type things however it suggests that the version I have will allow > > 98 logons - can somebody point me in the direction of a definitive > > answer of what 2.0.6 will support ie I think it supports logons from > > 98 machines but doesn't do full PDC - is this correct ? If so then > > I guess there must be some differences between the two - what > > are they ? > > > > Hope somebody can help, thanks > > JSW > > > > > > [1] I don't think I am up to downloading and recompling a newer > > version of samba *just* yet - give me time though > > > > > > > > > > > > > From simo.sorce at polimi.it Wed Apr 4 15:40:49 2001 From: simo.sorce at polimi.it (Simo Sorce) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie In-Reply-To: Message-ID: On Wed, 4 Apr 2001, Mark Haney wrote: > > But the point is Samba 2.0.7 CAN do central authentication. One Samba > server > > that all file servers, email servers, squid servers, etc . use for > > user/password authentication. > > > By acting as an NT PDC perhaps? I still stand by my original statement > 2.0.x isn't stable enough to do that. Believe me, I tried for over a month > one time to do that and never had enough uptime to feel comfortable. You are wrong. Samba 2.0.7 is quite stable and support NT domains. It is just limited in what it support about domains. If you need a domain only to centralize users logon, samba is good enough and with pam_smb it may be used to centralize also authentication services. If you need it for other reasons (eg. for exchange) then samba 2.0.7 isn't enough and you need to experiment with the 2.2.x alpha code branch. > > -----Original Message----- > From: samba-ntdom-admin@lists.samba.org > [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Adam Lang > Sent: Wednesday, April 04, 2001 11:17 AM > To: Mark Haney; McEldowney, Michael; Jet Set Willy; > samba-ntdom@samba.org > Subject: Re: Caution Stoopid Newbie > > > But the point is Samba 2.0.7 CAN do central authentication. One Samba server > that all file servers, email servers, squid servers, etc . use for > user/password authentication. > > > > And your statement that samba is not peer-to-peer is very obviously wrong, > > unless you are doing authentication from some central mechanism such as > NIS > > or an NT domain, you are running a peer-to-peer network. YOu can run > samba > > outside of an NT doamin and have the client auth to it just fine. I do it > at > > home. So get your facts straight before you flame anyone. > > > > > > -- Simo Sorce - Linux Systems Consultant E-mail: simo.sorce@polimi.it Tel: +39 0348 7149179 - Fax: +39 02 700442399 ----------------------------------------------------------------- Be happy, use Linux! From MMcEldowney at deltaregional.com Wed Apr 4 15:44:44 2001 From: MMcEldowney at deltaregional.com (McEldowney, Michael) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie Message-ID: > -----Original Message----- > From: Mark Haney [mailto:mhaney@info4cars.com] > Sent: Wednesday, April 04, 2001 10:28 AM > To: Adam Lang; samba-ntdom@samba.org > Subject: RE: Caution Stoopid Newbie > > > > But the point is Samba 2.0.7 CAN do central authentication. > One Samba > server > > that all file servers, email servers, squid servers, etc . use for > > user/password authentication. > > > By acting as an NT PDC perhaps? I still stand by my original > statement > 2.0.x isn't stable enough to do that. Believe me, I tried > for over a month > one time to do that and never had enough uptime to feel comfortable. My Samba server has been in the PDC role since it was installed, and I've had nothing but uptime. In fact, the last downtime I had was to upgrade from 2.0.6 to 2.0.7. Been running well ever since. I'd say that is very stable. Maybe you weren't configuring correctly. > > -----Original Message----- > From: samba-ntdom-admin@lists.samba.org > [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Adam Lang > Sent: Wednesday, April 04, 2001 11:17 AM > To: Mark Haney; McEldowney, Michael; Jet Set Willy; > samba-ntdom@samba.org > Subject: Re: Caution Stoopid Newbie > > > But the point is Samba 2.0.7 CAN do central authentication. > One Samba server > that all file servers, email servers, squid servers, etc . use for > user/password authentication. > > > > And your statement that samba is not peer-to-peer is very > obviously wrong, > > unless you are doing authentication from some central > mechanism such as > NIS > > or an NT domain, you are running a peer-to-peer network. > YOu can run > samba > > outside of an NT doamin and have the client auth to it just > fine. I do it > at > > home. So get your facts straight before you flame anyone. > > > > > From emercer at rad.upenn.edu Wed Apr 4 15:56:08 2001 From: emercer at rad.upenn.edu (Eric Mercer) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie References: Message-ID: <3ACB4418.A8555BE4@rad.upenn.edu> Mark Haney wrote: > > > But the point is Samba 2.0.7 CAN do central authentication. One Samba > server > > that all file servers, email servers, squid servers, etc . use for > > user/password authentication. > > By acting as an NT PDC perhaps? I still stand by my original statement > 2.0.x isn't stable enough to do that. Believe me, I tried for over a month > one time to do that and never had enough uptime to feel comfortable. > Experiences vary. While 2.0.7 doesn't support the complete set of features which are part of being a NT domain controller, I have set up several NT domains using 2.0.7, and they've continued running with very few problems. Users can log in, download policies, use printers, access their home directory, and use a roaming profile. Most of the problems I've had to deal with are related to the way MS implemented networking. Of course, I'm not exactly a newbie. I've been using Samba for a long time. Switched from DEC Pathworks to Samba & haven't looked back ;-) Everything is easy once you know how to do it. I had a really rough time with the first Samba Domain controller I set up, but I think most of my problems were related to getting pre-alpha code to compile. I also didn't have all the great FAQs which are available now. From MMcEldowney at deltaregional.com Wed Apr 4 15:57:11 2001 From: MMcEldowney at deltaregional.com (McEldowney, Michael) Date: Tue Dec 2 02:34:06 2003 Subject: Caution Stoopid Newbie Message-ID: JSW, You _can_ replace your NT boxes with Samba. I've done it with great success and little difficulty. Your making the right choice when you do. Linux/Samba is more stable, more secure, and _MUCH_ cheaper than NT. One other note, you really don't need additional authentication methods, like NIS, unless you want to add additional Linux boxes and/or services and have a central database for them. I think you'll find, however, that many utilities for authenticating against Samba have been written. For instance, my Squid proxy authenticates against Samba with the help of smb_auth. Works perfectly. And welcome to Opensource! It's the best you can get. Mike > -----Original Message----- > From: Jet Set Willy [mailto:jsw@manic-miner.freeserve.co.uk] > Sent: Wednesday, April 04, 2001 9:25 AM > To: Mark Haney; samba-ntdom@samba.org > Subject: Re: Caution Stoopid Newbie > > > > What do you mean by 'log in' to the samba box? Do you mean > authenticate > to > > it? Or are you just trying to access the entire box itself > and not just > the > > shares? If you are doing authentication, 2.0.6 won't cut it. > > hmm I think I mean authentication - sorry for being so unsure of my > terminology as well as unsure of what I am doing. > > When I boot the win98 box - I have set > up the networking to log in to a particular domain and I > was/am hoping that > I can get samba / linux to manage this. At the moment I have > an NT box > that is set to be PDC for the domain and this handles the > login requests. > My ultimate aim is to remove this NT box and replace it with > a suitably > set up samba (From reading the docs and some of the replies here it is > obvious that the version of samba I have will not quite do > this - I am just > not sure how far off it is and whether or not it will make a > difference to > me.) > Also as I understand it samba can be set up so that when a > request to access > a > share is made samba can check the priveleges / rights against another > machine ie I have two linux machines and one is set to use > the other for > authentication. I guess what I am trying to say is that I am > aiming for > one list of users on the network rather than a list of users / groups > on each machine. > > > YOu'll need > > the 2.2.0-alpha3 code (the latest and greatest) in order to > make samba act > > as a PDC. > > I am not sure if I have the knowledge to do that just yet :-) > The book I have bought does go thru it so I guess at some > point I will be able to give it a go but at the moment I am > still feeling smug that I managed to get the thing working at > all while trying to ignore the little voice that is telling me I > don't even know the scale of the amount I have yet to learn..... > > > > 2.0.6 supports authenticating of almost ANY (win2k excluded > I believe) > > version of windows as long as there is an NT Domain > controller available > to > > handle the auth request from the samba box. Of course it > needs to be part > > of an NT domain in order to do that, which is in the docs. > Without an NT > > domain, it's just like any other peer-to-peer network in so > much as you > have > > to add each user to the samba box that needs access to it. > Unless you use > > NIS or another central authenticating mechanism. Let me > know if this > helps > > or not. > > Ok I do have a NT Domain controller but would rather not ! I > do already have > it all > in the same domain so I guess it sounds like I need to have a > read of the > NIS > how-to ? > > Finally Yes it has helped - thanks for replying so promptly. > To be honest I > have only > just started learning about linux / Open source etc and am > stunned by the > quality > and volume of stuff available - to a newbie it is quite > overwhelming. Until > you find > newsgroups / mailing lists you tend to feel miles out of your depth. > > Thanks > JSW. > > > > From mhaney at info4cars.com Wed Apr 4 16:03:14 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:07 2003 Subject: Caution Stoopid Newbie In-Reply-To: Message-ID: Look let's all stop the BS here. YOu know the old saying about opinions. In this case I think everyone is correct to a point. Samba 2.0.7 _does_ support NT domains, but, IMHO, doesn't work well as an NT PDC. And when I say NT Domain, I mean say it to mean any network that uses the NT domain model regardless of the DC's OS type. As well, when someone says 'log in' to a machine, as an admin I take that to mean authenticate yourself as a user on that machine, which is different from _authenticating_. It's just a matter of wording in order to clarify what the user is trying to do. I 'log in' to my workstation. But I _authenticate_ to the NT domain controller in order to allow access to the network. Therefore, when I see someone wanting to 'log in', especially with a *nix box in question, I think telnet. So now that that's established, let's concentrate more on helping him than flaming each other. I stand by what I say, however, I do apologize for the tone of my earlier emails. And I will be more than happy off list to argue the points I made. -----Original Message----- From: McEldowney, Michael [mailto:MMcEldowney@deltaregional.com] Sent: Wednesday, April 04, 2001 11:45 AM To: 'Mark Haney'; Adam Lang; samba-ntdom@samba.org Subject: RE: Caution Stoopid Newbie > -----Original Message----- > From: Mark Haney [mailto:mhaney@info4cars.com] > Sent: Wednesday, April 04, 2001 10:28 AM > To: Adam Lang; samba-ntdom@samba.org > Subject: RE: Caution Stoopid Newbie > > > > But the point is Samba 2.0.7 CAN do central authentication. > One Samba > server > > that all file servers, email servers, squid servers, etc . use for > > user/password authentication. > > > By acting as an NT PDC perhaps? I still stand by my original > statement > 2.0.x isn't stable enough to do that. Believe me, I tried > for over a month > one time to do that and never had enough uptime to feel comfortable. My Samba server has been in the PDC role since it was installed, and I've had nothing but uptime. In fact, the last downtime I had was to upgrade from 2.0.6 to 2.0.7. Been running well ever since. I'd say that is very stable. Maybe you weren't configuring correctly. > > -----Original Message----- > From: samba-ntdom-admin@lists.samba.org > [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Adam Lang > Sent: Wednesday, April 04, 2001 11:17 AM > To: Mark Haney; McEldowney, Michael; Jet Set Willy; > samba-ntdom@samba.org > Subject: Re: Caution Stoopid Newbie > > > But the point is Samba 2.0.7 CAN do central authentication. > One Samba server > that all file servers, email servers, squid servers, etc . use for > user/password authentication. > > > > And your statement that samba is not peer-to-peer is very > obviously wrong, > > unless you are doing authentication from some central > mechanism such as > NIS > > or an NT domain, you are running a peer-to-peer network. > YOu can run > samba > > outside of an NT doamin and have the client auth to it just > fine. I do it > at > > home. So get your facts straight before you flame anyone. > > > > > From Daniel.Moeller at de.bosch.com Wed Apr 4 17:03:24 2001 From: Daniel.Moeller at de.bosch.com (Moeller Daniel (QI/CCE21) *) Date: Tue Dec 2 02:34:07 2003 Subject: =?iso-8859-1?Q?AW=3A_Configura=E7=E3o_do_Samba_?= Message-ID: <9015FB0BD980D411BFBC00508BAE6AF74E1261@simail5.server.bosch.com> Well, how about sending the smb.conf created by linuxconf? Perhaps there is missing a "wins server = a.b.c.d" statement in it. Kind regards, Danny > -----Urspr?ngliche Nachricht----- > Von: Steve Langasek [SMTP:vorlon@netexpress.net] > Gesendet am: Mittwoch, 4. April 2001 15:59 > An: samba-ntdom@samba.org > Cc: soslinux1 > Betreff: Re: Configura??o do Samba > > Rapid translation, for anyone who might have some insights into the > problem: > > "I'm trying to configure Samba and I already have it sharing files with > Windows machines and vice-versa. The problem is, I can't make the Windows > machines connect to the Linux domain that I created. It says that the > domain > was not found. What do I do? Please send me the answer using linuxconf, > because I used linuxconf to configure Samba, so I never had to edit > smb.conf. > > Thanks!" > > Steve Langasek > postmodern programmer > > On Tue, 3 Apr 2001, soslinux1 wrote: > > > Estou tentando configurar o Samba e > > ele j? esta conseguindo compartilhar > > arquivos com m?quinas windows e vice - > > versa. Mas o problema ? o seguinte: > > n?o consigo fazer as maquinas windows > > se conectarem no dom?nio do linux que > > eu criei. Ele diaz que o dom?nio n?o > > foi encontrado. O que fazer??? Por > > favor mande-me a reposta usando o > > linuxconf, pois foi assim que consegui > > configurar todo o Samba sem precisar > > editar o smb.conf. > From pilger at higp.hawaii.edu Wed Apr 4 17:29:52 2001 From: pilger at higp.hawaii.edu (Eric Pilger) Date: Tue Dec 2 02:34:07 2003 Subject: Caution Stoopid Newbie References: Message-ID: <3ACB5A10.CB2DC70F@higp.hawaii.edu> What an explosion :-) Here are some experiences with 2.0.x from a highly UNIX centric point of view. For years I have used SAMBA to provide access to the resources (printers and disk) available on my Solaris machines. "Authentification" (assigning of a valid user ID) has been unified across all workstations, first through NIS, then NIS+. Windows 95/98/NT/2000 machines were quite happy as members of a workgroup, joining via unencrypted passwords. I avoided encryption for many years because I enjoyed having only one password database. I have recently ventured into the realm of encrypted passwords. This works fine, and allows Win NT/2000 to connect automatically (if the Win user/password match the one stored on UNIX). I do not yet synchronize passwords, so I do have to maintain two password databases separately. I am now trying 2.2.0 and its PDC capabilities. It looks like it could work, but introduces a host of small issues which I'll need to work out, so I am not jumping in yet. Since I have now forgotten most of the original message, I include some of the relevant text below. >Please could somebody clear up some confusion I have - I freely >admit that I am a clueless newbie in both samba and linux so be warned.... >I am runing Mandrake 7.1 (if that makes a difference) and have >managed to get samba running quite well ( verion 2.0.6) ie I >can see shares copy files from my win98 machine and so on. >Works perfectly. Now what I really want (what I really really want) >is to be able to login to the linux box from the 98 machine. So Just what do you mean here? Aren't you already logging in? I guess the real question is what you hope to get from SAMBA that you aren't already getting. This leads naturally to the question "What are you getting now?" >So far the documentation seems fairly confusing (to a newbie) >as I understand it later versions[1] of samba support NT PDC >type things however it suggests that the version I have will allow >answer of what 2.0.6 will support ie I think it supports logons from >98 logons - can somebody point me in the direction of a definitive 2.0.x supports workgroups wonderfully. From the UNIX centered viewpoint this is all that is really necessary. However, I fully acknowledge my bias. Actually, I can see where the PDC stuff could be useful as I get more public workstations with multiple users. That is why I have been looking in to it. >98 machines but doesn't do full PDC - is this correct ? If so then >I guess there must be some differences between the two - what >are they ? -- Eric J. Pilger Systems Administrator Hawaii Institute of Geophysics and Planetology/SOEST pilger@pgd.hawaii.edu (808)956-6321 (Voice/FAX) From p.mayers at ic.ac.uk Wed Apr 4 17:47:53 2001 From: p.mayers at ic.ac.uk (Mayers, Philip J) Date: Tue Dec 2 02:34:07 2003 Subject: Caution Stoopid Newbie Message-ID: If you want to concentrate on helping him: > Now what I really want (what I really really want) > is to be able to login to the linux box from the 98 machine 2.0.x (including 2.0.7) will support 95 and 98 logins (which are *not* the same as being a PDC): man smb.conf: domain logons (G) If set to true, the Samba server will serve Windows 95/98 Domain logons for the workgroup it is in. For more details on setting up this feature see the file DOMAINS.txt in the Samba documentation direc? tory docs/ shipped with the source code. Note that Win95/98 Domain logons are NOT the same as Windows NT Domain logons. NT Domain logons require a Primary Domain Controller (PDC) for the Domain. It is intended that in a future release Samba will be able to provide this functionality for Windows NT clients also. Default: domain logons = no The aforementioned DOMAIN.txt says: Issues related to the single-logon network model are discussed in this document. Samba supports domain logons, network logon scripts, and user profiles for MS Windows for workgroups and MS Windows 9X clients. The rest of that file (which will either be in one of your RPMs or you can get from Sambas source - failing that, I'll happily email you :o) should describe the process for 95 and 98 machines. Now, things that don't work are: o) User lists (for setting share permissions) - this works in the 2.2 (currently alpha) source code o) NT logins (they sort-of work on the 2.0.x series - as many people have said at *great* length, it depends on what you're trying to do. the 2.2 series have a much more robust implementation, including Win2K. *But* I don't think you need NT logins, since you're running 98, right? ;o) o) There were some issues with user profiles or home drives at different levels of sharing causing problems becuase Win9x doesn't provide certain pieces of information at certain times - I don't think you'll have a problem if you avoid roaming profiles (which is ok in a single-client environment) So to cut a long argument^H^H^H^H^H^H^H^Hstory short, set this: [global] domain logons = yes logon script = %U.bat [netlogon] path = /path/to/logon/script/directory writeable = no guest ok = no Put any batch files named "username.bat" into that share, which will then be a users logon script when they logon - or don't, if you don't want a logon script. If you want roaming profiles, set this in the global section: logon path = \\server\profilshare\%U Create the profileshare [profileshare] path = /path/to/profiles writeable = yes guest ok = no browseable = yes Finally, go: Control Panel -> Network -> Client for Microsoft Networks -> Preferences, tick the "Log on to NT domain" box (it isn't an NT domain, but that doesn't matter), make sure that Primary Logon is the "Client for Microsoft Networks", hit ok, restart the computer when asked, and you should be in business. The "logon home" parameter can be set in the global section to make home drive map automatically on login, IIRC - see the manpage, I can't recall the exact syntax offhand, and don't have a win9x machine to test. Hope this helps! Regards, Phil +----------------------------------+ | Phil Mayers, Network Support | | Centre for Computing Services | | Imperial College | +----------------------------------+ -----Original Message----- From: Mark Haney [mailto:mhaney@info4cars.com] Sent: 04 April 2001 17:03 To: McEldowney, Michael; Adam Lang; samba-ntdom@samba.org Subject: RE: Caution Stoopid Newbie So now that that's established, let's concentrate more on helping him than flaming each other. From garcian002 at hawaii.rr.com Wed Apr 4 17:50:32 2001 From: garcian002 at hawaii.rr.com (Nelson Garcia) Date: Tue Dec 2 02:34:07 2003 Subject: Caution Stoopid Newbie References: <00b101c0bcf5$1f607b40$cf01020a@perfectdomain.perfectimage.co.uk> <3ACB0F48.12E1A20E@tpgi.com.au> <00b001c0bd13$974e6720$cf01020a@perfectdomain.perfectimage.co.uk> Message-ID: <016c01c0bd2f$bf9f13c0$8122050a@cpf.navy.mil> JSW, As one who claims newbie status everytime I break something, let me hand down my two favorite links that helped me make it through the last year of doing the Samba (and other forms of dirty dancing). http://bioserver.latrobe.edu.au/samba/ (one of the best step-by-step guides I have found) http://www.linuxnewbie.org (love those NHFs - Newbieized Help Files) Aloha, Nelson From mhaney at info4cars.com Wed Apr 4 18:15:53 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:07 2003 Subject: Caution Stoopid Newbie In-Reply-To: <3ACB5A10.CB2DC70F@higp.hawaii.edu> Message-ID: Yes, that's exactly been the whole issue here. For the most part, I am staring at the issue from more of a Windows-centric point of view. Mostly because I have in the past supported a lot of Windows clients and know _alot_ about SMB just from sheer need to know why my Windows Explorer doesn't see the network, even when I can ping stuff on it! I am pretty well versed in Domain Architecture from NT and 2000 because I need to support it and I like to learn it. Horn tooting aside here I think, to some extent the whole issue surrounding the problem is context. (And here I include the post from Philip Mayers in this as well.) > Now what I really want (what I really really want) > is to be able to login to the linux box from the 98 machine What exactly does everyone think of the above statement? According to the rest of the email, he can browse shares and read and write things to the shares, so in one sense he _is_ logging into the box. However, he's not necessarily _authenticating against_ the samba box in the Domain sense. This is where this discussion gets tricky and i think everyone on this list has maybe a different definition of the the term 'log in'. We know what it is, but can we explain it coherently? As I said before, based on the emails claims of being able to read/write/browse shares that he meant to access the machine either 'via telnet' or another remote process. (See my previous post about my definition of Authenticating vs logging in.) Okay, that out of the way, if it's authentication he wants, he's got it if he can browse, etc.. so my only other assumption is central authentication. Now I agree with Eric here, Samba 2.0.6 or 7 is great in a workgroup environment, as a member server in an NT domain and with other *nix OSes. But, and in my experience, it lacks as an NT PDC. Which is why I stated that it's not a good idea to use it as a PDC, and he should consider going to the alpha code. I realize alpha code _is_ alpha code, but it's more stable as an NT PDC than 2.0.x and therefore I felt to be a better choice _in that respect only_. I would never willingly give a total newbie alpha code and say 'here ya go, enjoy' without thinking that this newbie may not be so new at this at all. (Besides, if he's using Samba and Linux, he's gonna need to know how to compile-and-install soon enough anyway, it's the only way to go. ;) Long winded I am today. This has been (flames aside, myself included) a rather interesting discussion and hopefully something useful can come of it. Especially if I personally get feedback on what other think of 'logging in' versus 'authenticating'. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Eric Pilger Sent: Wednesday, April 04, 2001 1:30 PM To: samba-ntdom@samba.org Subject: Re: Caution Stoopid Newbie What an explosion :-) Here are some experiences with 2.0.x from a highly UNIX centric point of view. For years I have used SAMBA to provide access to the resources (printers and disk) available on my Solaris machines. "Authentification" (assigning of a valid user ID) has been unified across all workstations, first through NIS, then NIS+. Windows 95/98/NT/2000 machines were quite happy as members of a workgroup, joining via unencrypted passwords. I avoided encryption for many years because I enjoyed having only one password database. I have recently ventured into the realm of encrypted passwords. This works fine, and allows Win NT/2000 to connect automatically (if the Win user/password match the one stored on UNIX). I do not yet synchronize passwords, so I do have to maintain two password databases separately. I am now trying 2.2.0 and its PDC capabilities. It looks like it could work, but introduces a host of small issues which I'll need to work out, so I am not jumping in yet. Since I have now forgotten most of the original message, I include some of the relevant text below. >Please could somebody clear up some confusion I have - I freely >admit that I am a clueless newbie in both samba and linux so be warned.... >I am runing Mandrake 7.1 (if that makes a difference) and have >managed to get samba running quite well ( verion 2.0.6) ie I >can see shares copy files from my win98 machine and so on. >Works perfectly. Now what I really want (what I really really want) >is to be able to login to the linux box from the 98 machine. So Just what do you mean here? Aren't you already logging in? I guess the real question is what you hope to get from SAMBA that you aren't already getting. This leads naturally to the question "What are you getting now?" >So far the documentation seems fairly confusing (to a newbie) >as I understand it later versions[1] of samba support NT PDC >type things however it suggests that the version I have will allow >answer of what 2.0.6 will support ie I think it supports logons from >98 logons - can somebody point me in the direction of a definitive 2.0.x supports workgroups wonderfully. From the UNIX centered viewpoint this is all that is really necessary. However, I fully acknowledge my bias. Actually, I can see where the PDC stuff could be useful as I get more public workstations with multiple users. That is why I have been looking in to it. >98 machines but doesn't do full PDC - is this correct ? If so then >I guess there must be some differences between the two - what >are they ? -- Eric J. Pilger Systems Administrator Hawaii Institute of Geophysics and Planetology/SOEST pilger@pgd.hawaii.edu (808)956-6321 (Voice/FAX) From trehm at fitnessquest.com Wed Apr 4 19:05:11 2001 From: trehm at fitnessquest.com (Tym Rehm) Date: Tue Dec 2 02:34:07 2003 Subject: SmbMount question Message-ID: <007d01c0bd3a$2c9e7970$142aa8c0@fitnessquest.com> I know this maybe off topic: I'm trying to set a smbmount to mount on boot-up of a RH6.2 machine. Do you enter it in /etc/fstab? If so, I must have the syntax wrong. Thanks. -------------- next part -------------- HTML attachment scrubbed and removed From pilger at kahana.higp.hawaii.edu Wed Apr 4 19:44:42 2001 From: pilger at kahana.higp.hawaii.edu (Eric Pilger) Date: Tue Dec 2 02:34:07 2003 Subject: Runaway SMBD processes Message-ID: <3ACB79AA.D5D284DD@higp.hawaii.edu> I think this was covered earlier, but I missed it because I was beating my head against Win2K PDC support.Now I have that working, this problem is becoming a real pain. At least once a day, smbd will go crazy for one or more users.It will create a new instance every minutes or so to serve the exact same share, while not killing the old instances. Everything will lock up for the user and I will have to shut down their machine, and restart smbd to clear things up. This seems to be related primarily to running netscape with its profile on a remote share. Netscape keeps one or more files constantly open, locked, and various other things. In the past, this was only a problem when I rebooted the SAMBA server. However, I have a suspicion it is now somehow timimg out while in use. Smbd then starts another instance to server the request, leaving the old instance open.Things get all confused, the Windows Explorer hangs waiting for some request that will never be serviced, my users are wailing. Is there some switch I need to start tuning? -- Eric J. Pilger Systems Administrator Hawaii Institute of Geophysics and Planetology/SOEST pilger@pgd.hawaii.edu (808)956-6321 From pilger at kahana.higp.hawaii.edu Wed Apr 4 19:45:38 2001 From: pilger at kahana.higp.hawaii.edu (Eric Pilger) Date: Tue Dec 2 02:34:07 2003 Subject: Power Users on a SAMBA PDC Message-ID: <3ACB79E2.68B01763@higp.hawaii.edu> How do I add a Power Users group to my SAMBA PDC and put people in it? -- Eric J. Pilger Systems Administrator Hawaii Institute of Geophysics and Planetology/SOEST pilger@pgd.hawaii.edu (808)956-6321 From fcarreiro at loweryinc.com Wed Apr 4 19:57:13 2001 From: fcarreiro at loweryinc.com (Frank Carreiro) Date: Tue Dec 2 02:34:07 2003 Subject: smbfs problems Message-ID: <3ACB7C99.2030708@loweryinc.com> I've run into a problem with smbfs. Apparently after a user mounts a win2k share the mount directory will disappear and if they cd and type "ls" they receive an i/o error message. I've checked my message logs and see several messages which I believe indicate we have a problem. I'm attaching our message log in the hope someone may be able to give me some direction here. Originally I thought it was a problem with my /usr/src/linux/fs/smbfs/proc.c source code. The time-out value is 5 seconds. I've increased this to 30 seconds and recompiled my kernel (running RedHat 6.2 - 2.2.14-5.0 kernel) . Didn't seem to make a difference. I'm wondering if there is something else I should be looking at. I've checked Micro$ofts site and found a document "How the Auto disconnect Works with Windoze NT". I believe this "could" be the culprit but before I change my auto disconnect on the Windwoes server I'd like to hear what other's have done to resolve this problem (in case I'm barking up the wrong tree again). If this is the wrong list feel free to kindly direct me. I'm not sure which group to direct this to. Thx Frank -------------- next part -------------- Apr 3 09:18:51 testapp_002 kernel: smb_trans2_request: result=-32, setting invalid Apr 3 09:18:51 testapp_002 kernel: smb_retry: new pid=1244, generation=2 Apr 3 10:21:28 testapp_002 kernel: smb_trans2_request: result=-32, setting invalid Apr 3 10:21:29 testapp_002 kernel: smb_retry: new pid=1244, generation=3 Apr 3 10:55:48 testapp_002 kernel: smb_trans2_request: result=-32, setting invalid Apr 3 10:55:48 testapp_002 kernel: smb_retry: new pid=1244, generation=4 Apr 3 11:45:03 testapp_002 kernel: smb_trans2_request: result=-32, setting invalid Apr 3 11:45:04 testapp_002 kernel: smb_retry: new pid=1244, generation=5 Apr 3 16:27:26 testapp_002 kernel: smb_trans2_request: result=-32, setting invalid Apr 3 16:27:27 testapp_002 kernel: smb_retry: new pid=1244, generation=6 Apr 4 04:02:22 testapp_002 kernel: smb_trans2_request: result=-32, setting invalid Apr 4 04:02:22 testapp_002 kernel: smb_retry: new pid=1244, generation=7 Apr 4 07:54:01 testapp_002 kernel: smb_trans2_request: result=-32, setting invalid Apr 4 07:54:02 testapp_002 kernel: smb_retry: new pid=1244, generation=8 Apr 4 08:46:14 testapp_002 kernel: smb_get_length: recv error = 104 Apr 4 08:46:14 testapp_002 kernel: smb_trans2_request: result=-104, setting invalid Apr 4 08:46:14 testapp_002 kernel: smb_retry: new pid=1244, generation=9 Apr 4 09:47:43 testapp_002 kernel: smb_trans2_request: result=-32, setting invalid Apr 4 09:48:02 testapp_002 kernel: KERN_INFO: caught signal Apr 4 09:48:03 testapp_002 kernel: KERN_INFO: caught signal Apr 4 09:48:05 testapp_002 kernel: smb_retry: signal failed, error=-3 Apr 4 09:48:50 testapp_002 last message repeated 3 times Apr 4 09:51:29 testapp_002 kernel: smb_retry: signal failed, error=-3 Apr 4 09:51:32 testapp_002 last message repeated 2 times Apr 4 10:01:08 testapp_002 kernel: smb_trans2_request: result=-32, setting invalid Apr 4 10:01:08 testapp_002 kernel: smb_retry: new pid=1244, generation=10 Apr 4 10:30:19 testapp_002 kernel: smb_retry: signal failed, error=-3 Apr 4 11:08:35 testapp_002 kernel: smb_trans2_request: result=-32, setting invalid Apr 4 11:08:35 testapp_002 kernel: smb_retry: new pid=1244, generation=11 From barth at cck.uni-kl.de Wed Apr 4 20:15:16 2001 From: barth at cck.uni-kl.de (Christian Barth) Date: Tue Dec 2 02:34:07 2003 Subject: Runaway SMBD processes In-Reply-To: <3ACB79AA.D5D284DD@higp.hawaii.edu> Message-ID: <3ACB9CF4.9509.335D6D8@localhost> > I think this was covered earlier, but I missed it because I was beating > my head against Win2K PDC support.Now I have that working, this problem > is becoming a real pain. > > At least once a day, smbd will go crazy for one or more users.It will > create a new instance every minutes or so to serve the exact same share, > while not killing the old instances. Everything will lock up for the > user and I will have to shut down their machine, and restart smbd to > clear things up. We get exactly the same in the following unusual senario, which a haven't debugged any further: Redhat 6.2 NFS-Server --> NFS-mount across the university campus --> Debian NFS-Client and Server of the same directory [1] --> Solaris 2.7 NFS-Client and Samba 2.0.7-Server of the directory. On NFS-level everything is fine, but when using samba to copy files of this share randamly and not really reproducable the nt/w2k-clients hang. After a long time out they display a error message about a network problem. Using smbstatus, there is a lock on the copied file which always is there for some time after the copying has finished. In case of the failiure ther is a new smbd severing the same share to the same client. To clean things up, we kill just the new and the old smbd. Christian [1] don't ask wy we use this setup, the Debian-box is used to avoid having the important Solaris box hanging in case the campus network went down. _______________________________________________________________________ In a world without walls and fences, who needs windows and gates? (SUN) From trehm at fitnessquest.com Wed Apr 4 20:53:09 2001 From: trehm at fitnessquest.com (Tym Rehm) Date: Tue Dec 2 02:34:07 2003 Subject: SmbMount question References: Message-ID: <00a101c0bd49$41736e00$142aa8c0@fitnessquest.com> I got it working. Edit /etc/fstab and put the smbmounts in the file. ex. //ServerA/ShareA /mountpnt smbfs options 1 2 This should do it. One note, umount and remove from /etc/fstab if you want to remove the smbmount. If not, on reboot it will hang. ----- Original Message ----- From: Johnson, Byron G. To: 'Tym Rehm' Sent: Wednesday, April 04, 2001 3:19 PM Subject: RE: SmbMount question If you get an answer, please pass it on to me. I am mounting the shares manually. Would like to have them mounted automatically when the machine initializes. Thanks, -- Byron G. Johnson Business Development Manager, Enterprise Security Litton TASC 4801 Stonecroft Blvd Chantilly, VA 20151-3822 Voice: (703) 633-8478 Fax: (703) 449-1087 Cellular: (703) 819-6423 Pager: (888) 751-4116 Home: (703) 753-0204 E-Mail: bgjohnson@tasc.com -----Original Message----- From: Tym Rehm [mailto:trehm@fitnessquest.com] Sent: Wednesday, April 04, 2001 3:05 PM To: samba-ntdom@samba.org Subject: SmbMount question I know this maybe off topic: I'm trying to set a smbmount to mount on boot-up of a RH6.2 machine. Do you enter it in /etc/fstab? If so, I must have the syntax wrong. Thanks. -------------- next part -------------- HTML attachment scrubbed and removed From don_mccall at hp.com Wed Apr 4 22:04:00 2001 From: don_mccall at hp.com (MCCALL,DON (HP-USA,ex1)) Date: Tue Dec 2 02:34:07 2003 Subject: Runaway SMBD processes Message-ID: <079FD72E42C9D311B854009027650E6F04050931@xatl02.atl.hp.com> Hi Eric, What would help is to find out WHAT smbd is doing (what it's hanging on); In your smb.conf file, make the log file = /usr/local/samba/var/log.%m and log level = 0 and debug pid = yes Then when this happens again (smbd is getting spawned over and over for the same user/machine) quickly edit your smb.conf file and change log level = 10. After you have a goodsized log.machinename (where machinename is the netbios name of the pc that is experiencing the problem), change log level back to 0, and take a look at the log file; you should be able to track the 'spawining' based on the pid # changing in the log messages, and see what it was trying to do shortly before the log messages start logging with a different pid # (indicating that that machine has reconnected with a new smbd... Hope this helps, Don -----Original Message----- From: Eric Pilger [mailto:pilger@kahana.higp.hawaii.edu] Sent: Wednesday, April 04, 2001 3:45 PM To: samba-ntdom Subject: Runaway SMBD processes I think this was covered earlier, but I missed it because I was beating my head against Win2K PDC support.Now I have that working, this problem is becoming a real pain. At least once a day, smbd will go crazy for one or more users.It will create a new instance every minutes or so to serve the exact same share, while not killing the old instances. Everything will lock up for the user and I will have to shut down their machine, and restart smbd to clear things up. This seems to be related primarily to running netscape with its profile on a remote share. Netscape keeps one or more files constantly open, locked, and various other things. In the past, this was only a problem when I rebooted the SAMBA server. However, I have a suspicion it is now somehow timimg out while in use. Smbd then starts another instance to server the request, leaving the old instance open.Things get all confused, the Windows Explorer hangs waiting for some request that will never be serviced, my users are wailing. Is there some switch I need to start tuning? -- Eric J. Pilger Systems Administrator Hawaii Institute of Geophysics and Planetology/SOEST pilger@pgd.hawaii.edu (808)956-6321 From greg at kwikfind.com Wed Apr 4 23:20:22 2001 From: greg at kwikfind.com (Greg J. Zartman) Date: Tue Dec 2 02:34:07 2003 Subject: Caution Stoopid Newbie References: <00b101c0bcf5$1f607b40$cf01020a@perfectdomain.perfectimage.co.uk> Message-ID: <014a01c0bd5d$d2d9ef40$6f00a8c0@logeng.net> Jet, I think people can get all worked up about the different versions and which should be used by the average users. What it boils down to is this: Version 2.0.7 is the current production release and is therefore officially stable. If you are in an environment that is sensitive to stability, then use that version. With that said, I think that for just about anyone else, version 2.2 alphaxx is the best solution. Especially if you are setting up a domain that included Win2k machines. Yes, there is development going on with the code, and not all of it is 100% stable. From what I've seen, however, the samba team does an excellent job of keeping the code stable. I started from scratch with Linux (Mandrake 7.2) in January of this year and downloaded Samba from CVS right off the bat. The only problems that I have run into is with my own mistakes. The code has worked flawlessly. If you are in a non-critical environment, I wouldn't hesitate to use Samba 2.2. Greg ----- Original Message ----- From: "Jet Set Willy" To: Sent: Wednesday, April 04, 2001 3:50 AM Subject: Caution Stoopid Newbie > Please could somebody clear up some confusion I have - I freely > admit that I am a clueless newbie in both samba and linux so be warned.... > I am runing Mandrake 7.1 (if that makes a difference) and have > managed to get samba running quite well ( verion 2.0.6) ie I > can see shares copy files from my win98 machine and so on. > Works perfectly. Now what I really want (what I really really want) > is to be able to login to the linux box from the 98 machine. So > far I have waded thru the text docs that come with samba, I've > read a couple of how-to's and bought a book ( think > is the samba black book but can't be sure of the exact title > cos I've left it at home). Finally I've found this mailing list ! > > So far the documentation seems fairly confusing (to a newbie) > as I understand it later versions[1] of samba support NT PDC > type things however it suggests that the version I have will allow > 98 logons - can somebody point me in the direction of a definitive > answer of what 2.0.6 will support ie I think it supports logons from > 98 machines but doesn't do full PDC - is this correct ? If so then > I guess there must be some differences between the two - what > are they ? > > Hope somebody can help, thanks > JSW > > > [1] I don't think I am up to downloading and recompling a newer > version of samba *just* yet - give me time though > > > > > From linux at fenix.uam.mx Thu Apr 5 02:58:39 2001 From: linux at fenix.uam.mx (Lista linux) Date: Tue Dec 2 02:34:07 2003 Subject: Power Users on a SAMBA PDC In-Reply-To: <3ACB79E2.68B01763@higp.hawaii.edu> Message-ID: on w2k ws: control panel->users->advanced->groups->power users->add your samba users romy On Wed, 4 Apr 2001, Eric Pilger wrote: > How do I add a Power Users group to my SAMBA PDC and put people in it? > > -- > Eric J. Pilger > > Systems Administrator > > Hawaii Institute of Geophysics and Planetology/SOEST > > pilger@pgd.hawaii.edu > > (808)956-6321 > > > -- Ing. Romy Perez Moreno e-mail: romy@fenix.uam.mx, romy@correo.azc.uam.mx http://fenix.uam.mx/romy tel: 5318 9067 / 5382-7157 From virgo at azcher.kharkov.ua Mon Apr 2 17:03:44 2001 From: virgo at azcher.kharkov.ua (Virgo) Date: Tue Dec 2 02:34:07 2003 Subject: 2.2.0a3 or 2.0.7? Message-ID: <3AC8B0F0.BA8642D@azcher.kharkov.ua> Hi guys! Is Samba-2.2.0aplha3 1. I can not join W2K to domain samba. After a perusal faq and HOWTO happens following: a) In smbpasswd the computer pfts1 is not added and in smb.conf is written add user script = /usr/sbin/adduser -n -g 65534 -c " Trust Account " -d /dev/null, that receivesi in W2K the following message: The account used is a computer account. Use you global user account or local user account to access this computer. b) In passwd the computer by hands is added, we obtain the following message: Out of range in procedure... It not literally. Signal me please where that I do not so? 2. I read ./docs/htmldocs/cvs.log, line 345198: alternate permissions = No (removed) max packet = 65535 (removed) ole locking compatibility (removed) shared mem size (removed) Is detuned removed ole locking compatibility. Without this parameter one program does not work. What it is substituted by? Large thank to you the guys for your work... I shall be grateful for the answers and advices. P.S.Unfortunately it was necessary to return on Samba-2.0.7 and W2K has remained in the domain NT :-( -- Registered Linux User #186627 ICQ UIN 50715669 From pilger at kahana.higp.hawaii.edu Thu Apr 5 06:50:22 2001 From: pilger at kahana.higp.hawaii.edu (Eric Pilger) Date: Tue Dec 2 02:34:07 2003 Subject: Power Users on a SAMBA PDC References: Message-ID: <3ACC15AE.3457CB07@higp.hawaii.edu> This only adds people to the Local Group. I need a Power User group on the SAMBA PDC, and a way to add people to it, so that I set them once, and they're set for life. Without this, Adaptec CD Creator and other pieces of software spaz. Lista linux wrote: > on w2k ws: > > control panel->users->advanced->groups->power users->add your samba users > > romy > > On Wed, 4 Apr 2001, Eric Pilger wrote: > > > How do I add a Power Users group to my SAMBA PDC and put people in it? > > > > -- > > Eric J. Pilger > > > > Systems Administrator > > > > Hawaii Institute of Geophysics and Planetology/SOEST > > > > pilger@pgd.hawaii.edu > > > > (808)956-6321 > > > > > > > > -- > Ing. Romy Perez Moreno > e-mail: romy@fenix.uam.mx, romy@correo.azc.uam.mx > http://fenix.uam.mx/romy > tel: 5318 9067 / 5382-7157 -- Eric J. Pilger Systems Administrator Hawaii Institute of Geophysics and Planetology/SOEST pilger@pgd.hawaii.edu (808)956-6321 From alsbergt at cs.huji.ac.il Thu Apr 5 09:33:12 2001 From: alsbergt at cs.huji.ac.il (Tom Alsberg) Date: Tue Dec 2 02:34:07 2003 Subject: Computer account names on BSDI BSD/OS 4.2 Message-ID: <20010405113312.A11501@moon.cs.huji.ac.il> Hi there. It seems that for Samba to act as a PDC it must have an account for every computer in the system password file (normally /etc/passwd), correct me if I'm wrong. The problem is, a system we need it installed on to act as a PDC is a BSDi BSD/OS 4.2 system, and it doesn't seem to accept the dollar sign ('$') (which is required to distinguish computer accounts, correct me if I'm wrong) as a part of a username in /etc/passwd. It's Samba 2.2.0-alpha1 I'm talking about. Any idea what could solve the problem? Some workaround? -- ---*--- Tom Alsberg Hebrew University of Jerusalem, institute of Computer Science and Engineering - System Group / Vision Lab From eirvine at tpgi.com.au Thu Apr 5 09:42:10 2001 From: eirvine at tpgi.com.au (eirvine) Date: Tue Dec 2 02:34:07 2003 Subject: "$" in machine user name( was: account names on BSDI BSD/OS 4.2) References: <20010405113312.A11501@moon.cs.huji.ac.il> Message-ID: <3ACC3DF2.FAE83F72@tpgi.com.au> Hi Tom, Fortunately there is an easy workaround. 1) Add the user(s) as normal, but without the "$" in the username. Perhaps you use "pw" or "adduser" for this. Whatever. (yes, I know they are actually machine names not user names). 2) use vipw to manually put the "$" back in the username. 3) vi /etc/group to do the same thing for the group name. Viola! Eddie. Tom Alsberg wrote: > > Hi there. > > It seems that for Samba to act as a PDC it must have an account for > every computer in the system password file (normally /etc/passwd), > correct me if I'm wrong. > The problem is, a system we need it installed on to act as a PDC is > a BSDi BSD/OS 4.2 system, and it doesn't seem to accept the dollar > sign ('$') (which is required to distinguish computer accounts, > correct me if I'm wrong) as a part of a username in /etc/passwd. > > It's Samba 2.2.0-alpha1 I'm talking about. > > Any idea what could solve the problem? Some workaround? > > -- > > ---*--- > > Tom Alsberg > Hebrew University of Jerusalem, > institute of Computer Science and Engineering - > System Group / Vision Lab From jsw at manic-miner.freeserve.co.uk Thu Apr 5 09:46:28 2001 From: jsw at manic-miner.freeserve.co.uk (Jet Set Willy) Date: Tue Dec 2 02:34:07 2003 Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation References: <00b101c0bcf5$1f607b40$cf01020a@perfectdomain.perfectimage.co.uk> Message-ID: <012801c0bdb5$50543500$cf01020a@perfectdomain.perfectimage.co.uk> Well after all this not sure I dare post again but seeing as though I have got some new flameproof underwear here goes :-) Firstly thanks for all the replies - they are all really a great help - useful advice and kept me smiling while fighting with this. So I'll attempt to collate everything, hopefully explain where I am up and what I am trying to do more clearly and , of course, ask some more questions. My network is at home and serves no purpose other than for me to try and learn a thing or two so it is not mission critical - having said that it has taken me quite a while to set the thing up and I woudn't want to break everything in one go. So there are 4 machines - all old obsolete kit but still pretty good or at least good enough for me. 1) Mandrake 7.1 - with samba set up 2) NT 4.0 - currently the pdc 3) Win 98 machine 4) Mandrake 7.2 - not important (yet - hopefully will be used to build/test the latest version of samba etc) Current Situation: I boot the 98 machine - it comes up with the login box I enter my user name, password and domain as specified by the NT box. (The NT machine has been set up as the PDC for my domain) I can then access the shares on the NT and linux machine without any problem. (I have set up samba to map the NT user names to samba user names [see question 1]) Where I am trying to get to: I want to remove the NT PDC stuff from the equation. I will probably still keep the machine on my network just not as the PDC - I want to get the linux machine to do this. ie I boot up my win98 machine and enter my user name, password and domain - samba then checks this and either allows or denys access [see question 2] to its shares and the shares on the NT box. What I have done so far: I entered the details specified by Michael McEldowney in my smb.conf I also added one extra that I found in the docs somewhere os level = 65 (I think it was os level - haven't got my smb.conf) I also created a netlogon share and a script that just echo'd a few lines so that I could check it and set up the logon script paramter. (I did this via swat but I guess this doesn't matter - I did check them via emacs & testparm several times) restarted smbd and nmbd. I then changed the domain name of the NT machine and shut it down. I rebooted 98 machine and tried to "log in" or "authenticate myself" I tried both my original windows NT user name and the one for the linux machine to no avail. Always got the message "no domain controller could be found or the password is wrong" and I'm certain the password is correct. Bizarely if I boot up the nt machine it worked which suggested that I need to do something other than just changing the domain name for the NT machine. (The 98 machine *was* trying to log in to the domain specified in the smb.conf workgroup section which *is* different to the one newly changed onthe NT machine) Given that it was approaching 1am and I need all the beauty sleep I can get I thought I'd forget it and have another go tonight so I went back to the NT machine and tried to change the domain back to its original (and still in use by samba) however it wouldn't let me change it back complaining that it was already in use which of course it was and suggests that I was closer to getting it working than I thought. [see question 4] What I haven't done: *Remembered to bring my copy of the smb.conf file in so that I can post it here :-( question 1: Are Samba users different to the linux/machine users ? question 2: Sorry I am NOT deliberately trying to wind people up but I'm still not sure of my terminology is this authentication or logon ? question 3: Philip Mayers wrote/copied from the man page "Note that Win95/98 Domain logons are NOT the same as Windows NT Domain logons." Dare I ask what the difference is or should that be where can I find something to read that will tell me what the differences are ? question 4: So I guess that you guys really need my smb.conf file which I'll get tonight & post tomorrow but without that essential bit of info can anyone shed any light ? Am I trying to do the impossible or I am just a stoopid newbie who will work it out in the near future ? From B.Sutton at odey.co.uk Thu Apr 5 10:37:40 2001 From: B.Sutton at odey.co.uk (Blair Sutton/Odey) Date: Tue Dec 2 02:34:07 2003 Subject: Computer account names on BSDI BSD/OS 4.2 Message-ID: One way around is by editing the source code for pw. If you have the source for FreeBSD under /usr/src/usr.sbin/pw/. Edit pw_user.c and look for the function "pw_checkname", in the declarations you will find a line like such:- char const *notch = gecos ? ":!@" : " ,\t:+&#%$^()!@~*?<>=|\\/\""; If I remember correctly just delete the "$" character from this line and recompile by running "make" then "make install". I feel this is a good idea if your samba PDC is going to be heavily used. Blair. Tom Alsberg Sent by: samba-ntdom-admin@lists.samba.org 05/04/2001 10:33 To: samba-ntdom@lists.samba.org cc: Subject: Computer account names on BSDI BSD/OS 4.2 Hi there. It seems that for Samba to act as a PDC it must have an account for every computer in the system password file (normally /etc/passwd), correct me if I'm wrong. The problem is, a system we need it installed on to act as a PDC is a BSDi BSD/OS 4.2 system, and it doesn't seem to accept the dollar sign ('$') (which is required to distinguish computer accounts, correct me if I'm wrong) as a part of a username in /etc/passwd. It's Samba 2.2.0-alpha1 I'm talking about. Any idea what could solve the problem? Some workaround? -- ---*--- Tom Alsberg Hebrew University of Jerusalem, institute of Computer Science and Engineering - System Group / Vision Lab From mhaney at info4cars.com Thu Apr 5 13:08:32 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:08 2003 Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation In-Reply-To: <012801c0bdb5$50543500$cf01020a@perfectdomain.perfectimage.co.uk> Message-ID: Okay, now we are getting somewhere. Here's the best explanation that I can come up with not knowing the domain names, etc. The first thing I notice is you changed the domain of the NT machine. Was it the _domain_ name or the _machine_ name? Second, if it is the _domain_ name, DON'T change it. That really really will screw up the registry of the PDC. I have seen the very problem before. Yes, the domain name was in use, but I bet if you change it in samba to something and try the original NT domain name back on the NT box, it will still probably complain about the name being in use. I have seen it both ways, but my advice is to not change the NT domain name at all. It's okay to just shut that machine down, but don't change the name and don't try to make it a member server of another domain without either re-installing NT (yeah I know) or using something like UPromote to make the necessary reg changes. And, while I have never had to do this before, I am thinking you will need to remove the samba box from the original domain before you make it a PDC. I don't have any experience with that scenario, so I don't know if that really applies. It seems to me that even though the samba box is acting like a PDC, that it's still looking to the NT PDC for authentication. I have seen this problem in similar situations in NT with member servers of one domain being made a PDC in another domain using UPromote you still have to remove it from the domain before promoting it. As far as i can tell it's some sort of bizarre registry (I would call it a bug, but maybe it's a feature?) issue. Also, do you still have _any_ references to the original NT PDC still in your smb.conf? Such as WINS, etc? I hope this helps and doesn't lead to more flames. :) -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Jet Set Willy Sent: Thursday, April 05, 2001 5:46 AM To: samba-ntdom@samba.org Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation Well after all this not sure I dare post again but seeing as though I have got some new flameproof underwear here goes :-) Firstly thanks for all the replies - they are all really a great help - useful advice and kept me smiling while fighting with this. So I'll attempt to collate everything, hopefully explain where I am up and what I am trying to do more clearly and , of course, ask some more questions. My network is at home and serves no purpose other than for me to try and learn a thing or two so it is not mission critical - having said that it has taken me quite a while to set the thing up and I woudn't want to break everything in one go. So there are 4 machines - all old obsolete kit but still pretty good or at least good enough for me. 1) Mandrake 7.1 - with samba set up 2) NT 4.0 - currently the pdc 3) Win 98 machine 4) Mandrake 7.2 - not important (yet - hopefully will be used to build/test the latest version of samba etc) Current Situation: I boot the 98 machine - it comes up with the login box I enter my user name, password and domain as specified by the NT box. (The NT machine has been set up as the PDC for my domain) I can then access the shares on the NT and linux machine without any problem. (I have set up samba to map the NT user names to samba user names [see question 1]) Where I am trying to get to: I want to remove the NT PDC stuff from the equation. I will probably still keep the machine on my network just not as the PDC - I want to get the linux machine to do this. ie I boot up my win98 machine and enter my user name, password and domain - samba then checks this and either allows or denys access [see question 2] to its shares and the shares on the NT box. What I have done so far: I entered the details specified by Michael McEldowney in my smb.conf I also added one extra that I found in the docs somewhere os level = 65 (I think it was os level - haven't got my smb.conf) I also created a netlogon share and a script that just echo'd a few lines so that I could check it and set up the logon script paramter. (I did this via swat but I guess this doesn't matter - I did check them via emacs & testparm several times) restarted smbd and nmbd. I then changed the domain name of the NT machine and shut it down. I rebooted 98 machine and tried to "log in" or "authenticate myself" I tried both my original windows NT user name and the one for the linux machine to no avail. Always got the message "no domain controller could be found or the password is wrong" and I'm certain the password is correct. Bizarely if I boot up the nt machine it worked which suggested that I need to do something other than just changing the domain name for the NT machine. (The 98 machine *was* trying to log in to the domain specified in the smb.conf workgroup section which *is* different to the one newly changed onthe NT machine) Given that it was approaching 1am and I need all the beauty sleep I can get I thought I'd forget it and have another go tonight so I went back to the NT machine and tried to change the domain back to its original (and still in use by samba) however it wouldn't let me change it back complaining that it was already in use which of course it was and suggests that I was closer to getting it working than I thought. [see question 4] What I haven't done: *Remembered to bring my copy of the smb.conf file in so that I can post it here :-( question 1: Are Samba users different to the linux/machine users ? question 2: Sorry I am NOT deliberately trying to wind people up but I'm still not sure of my terminology is this authentication or logon ? question 3: Philip Mayers wrote/copied from the man page "Note that Win95/98 Domain logons are NOT the same as Windows NT Domain logons." Dare I ask what the difference is or should that be where can I find something to read that will tell me what the differences are ? question 4: So I guess that you guys really need my smb.conf file which I'll get tonight & post tomorrow but without that essential bit of info can anyone shed any light ? Am I trying to do the impossible or I am just a stoopid newbie who will work it out in the near future ? From aalang at rutgersinsurance.com Thu Apr 5 13:13:23 2001 From: aalang at rutgersinsurance.com (Adam Lang) Date: Tue Dec 2 02:34:08 2003 Subject: Caution Stoopid Newbie References: <00b101c0bcf5$1f607b40$cf01020a@perfectdomain.perfectimage.co.uk> <014a01c0bd5d$d2d9ef40$6f00a8c0@logeng.net> Message-ID: <006b01c0bdd2$3168afa0$330a0a0a@rutgersinsurance.com> Problem is though, unless it is a test environment, you should always treat your systems as critical. Bad practice if you think otherwise. Downtime is never acceptable if you can avoid it. Adam Lang Systems Engineer Rutgers Casualty Insurance Company http://www.rutgersinsurance.com ----- Original Message ----- From: "Greg J. Zartman" To: "Samba News" Sent: Wednesday, April 04, 2001 7:20 PM Subject: Re: Caution Stoopid Newbie > Jet, > > I think people can get all worked up about the different versions and which > should be used by the average users. What it boils down to is this: > Version 2.0.7 is the current production release and is therefore officially > stable. If you are in an environment that is sensitive to stability, then > use that version. With that said, I think that for just about anyone else, > version 2.2 alphaxx is the best solution. Especially if you are setting up a > domain that included Win2k machines. Yes, there is development going on > with the code, and not all of it is 100% stable. From what I've seen, > however, the samba team does an excellent job of keeping the code stable. > > I started from scratch with Linux (Mandrake 7.2) in January of this year and > downloaded Samba from CVS right off the bat. The only problems that I have > run into is with my own mistakes. The code has worked flawlessly. If you > are in a non-critical environment, I wouldn't hesitate to use Samba 2.2. > > Greg From ssande at sandia.gov Thu Apr 5 14:25:21 2001 From: ssande at sandia.gov (Stan Sander) Date: Tue Dec 2 02:34:08 2003 Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation References: <00b101c0bcf5$1f607b40$cf01020a@perfectdomain.perfectimage.co.uk> <012801c0bdb5$50543500$cf01020a@perfectdomain.perfectimage.co.uk> Message-ID: <3ACC8051.BE879D1B@sandia.gov> Jet Set Willy wrote: A question for you, and perhaps a point in the right direction. This may seem a pretty simple and basic question, but since I don't see that you have specifically mentioned this, I just feel compelled to ask.... Have you added yourself and any other users you want to be able to authenticate via samba on the linux machine to $SAMBA_PATH/private/smbpasswd > Well after all this not sure I dare post again > but seeing as though I have got some new > flameproof underwear here goes :-) > > Firstly thanks for all the replies - they are > all really a great help - useful advice and > kept me smiling while fighting with this. So > I'll attempt to collate everything, hopefully > explain where I am up and what I am trying > to do more clearly and , of course, ask > some more questions. > > My network is at home and serves no purpose other > than for me to try and learn a thing or two so it > is not mission critical - having said that it has > taken me quite a while to set the thing up and I > woudn't want to break everything in one go. > > So there are 4 machines - all old obsolete kit but > still pretty good or at least good enough for me. > 1) Mandrake 7.1 - with samba set up > 2) NT 4.0 - currently the pdc > 3) Win 98 machine > 4) Mandrake 7.2 - not important (yet - hopefully will > be used to build/test the latest version of samba etc) > > Current Situation: > I boot the 98 machine - it comes up > with the login box I enter my user name, password > and domain as specified by the NT box. (The NT machine > has been set up as the PDC for my domain) I can then > access the shares on the NT and linux machine without > any problem. (I have set up samba to map the NT user > names to samba user names [see question 1]) > > Where I am trying to get to: > I want to remove the NT PDC stuff from the equation. > I will probably still keep the machine on my network > just not as the PDC - I want to get the linux machine > to do this. ie I boot up my win98 machine and enter > my user name, password and domain - samba then > checks this and either allows or denys access [see > question 2] to its shares and the shares on the NT box. > > What I have done so far: > I entered the details specified by Michael McEldowney in my smb.conf I > also added one extra that I found in the docs somewhere > os level = 65 (I think it was os level - haven't got my smb.conf) I also > created a netlogon share and a script that just echo'd a few lines so > that I could check it and set up the logon script paramter. > (I did this via swat but I guess this doesn't matter - I did check them > via emacs & testparm several times) restarted smbd and nmbd. > I then changed the domain name of the NT machine and shut it > down. I rebooted 98 machine and tried to "log in" or > "authenticate myself" I tried both my original windows NT > user name and the one for the linux machine to no avail. > Always got the message "no domain controller could be found > or the password is wrong" and I'm certain the password is correct. > Bizarely if I boot up the nt machine it worked which suggested > that I need to do something other than just changing the domain > name for the NT machine. (The 98 machine *was* trying to log in > to the domain specified in the smb.conf workgroup section which > *is* different to the one newly changed onthe NT machine) Given > that it was approaching 1am and I need all the beauty sleep I can > get I thought I'd forget it and have another go tonight so I went > back to the NT machine and tried to change the domain back to its > original (and still in use by samba) however it wouldn't let me > change it back complaining that it was already in use which of course > it was and suggests that I was closer to getting it working > than I thought. [see question 4] > > What I haven't done: > *Remembered to bring my copy of the smb.conf file in > so that I can post it here :-( > > question 1: Are Samba users different to the linux/machine users ? > > question 2: Sorry I am NOT deliberately trying to wind people up > but I'm still not sure of my terminology is this authentication or logon ? > > question 3: Philip Mayers wrote/copied from the man page "Note that > Win95/98 Domain logons are NOT the same as Windows NT Domain logons." > Dare I ask what the difference is or should that be where can I find > something > to read that will tell me what the differences are ? > > question 4: So I guess that you guys really need my smb.conf file > which I'll get tonight & post tomorrow but without that essential > bit of info can anyone shed any light ? Am I trying to do the > impossible or I am just a stoopid newbie who will work it out > in the near future ? -- Stan Sander - CSU Special Projects Sandia National Laboratories Unix System Administrator Mail Stop 0662 (505)284-4915 1515 Eubank Blvd. SE Albuquerque, NM 87123 From greg at kwikfind.com Thu Apr 5 15:35:23 2001 From: greg at kwikfind.com (Greg J. Zartman) Date: Tue Dec 2 02:34:08 2003 Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation References: <00b101c0bcf5$1f607b40$cf01020a@perfectdomain.perfectimage.co.uk> <012801c0bdb5$50543500$cf01020a@perfectdomain.perfectimage.co.uk> Message-ID: <002701c0bde6$08772e50$6f00a8c0@logeng.net> Jet, Keep posting. No one takes it personally. First, my answers to your questions: > question 1: Are Samba users different to the linux/machine users ? They are one and the same. A user account on your linux box is just that, a user account. If all of you users are Windows people, then it's likely they won't be getting on the linux machine. Linux gives you the ability to essentially shut-off a users ability to use the Linux box while giving them access to their homes directory (what you are doing is giving them a null shell). I wouldn't get too hung up on this. If your users don't need to get on the linux machine, then set them up with accounts that have the "unix features" shut off (Read the Samba PDC FAQs for more info). > > question 2: Sorry I am NOT deliberately trying to wind people up > but I'm still not sure of my terminology is this authentication or logon ? Don't get to hung up on this either as both happen in windows, it's just that the terms aren't thrown around much. Authentication mean that a user or machine is approved to access certain shares, for example, on your network. When you join a domain, your machine is authenticated to access the shares on the network. Logon is the process that you perform to get yourself authenticated to access a computer/network. You type in your username and password and if they are correct, you are authenticated to access the network/computer. > > question 3: Philip Mayers wrote/copied from the man page "Note that > Win95/98 Domain logons are NOT the same as Windows NT Domain logons." > Dare I ask what the difference is or should that be where can I find > something > to read that will tell me what the differences are ? This is a question that I argued some time back. Richard Sharpe, one of the Samba Team, finally made the subject clear to me. The answer to this really depends on how you look at it. The difference isn't really as much in Samba as it is in the Clients. You see Win9x doesn't offer real security. You are only required to "authenticate yourself" when you login to a Win9x machine in order to gain access to shares on a network, not services or resources on the Win9x machine itself. Win NT, on the other had, does provide security. When you logon to a Win NT machine you are authenticated to access resources and shares on the system and network. From a networking standpoint, the difference between the two OSs is that Win9x basically acts like a workgroup machine regardless of weather it is participating in a workgroup or a domain. Win NT can participate in a workgroup, acting like a win 9x machine(i.e., little if any restriction to resources and shares), or is can participate in a domain (i.e., security and restriction to shares). From jorchard at pdx.datalex.com Thu Apr 5 16:59:17 2001 From: jorchard at pdx.datalex.com (Joe Orchard) Date: Tue Dec 2 02:34:08 2003 Subject: Member server not accessing Samba PDC Message-ID: <3ACCA465.678F3624@pdx.datalex.com> Here is my situation. I have a Samba server 2.2.0alpha2 running on Redhat 7.0. I have set it up to be a ?PDC?samba server. I have a NT4.0-SP5 workstation added to its domain and am able to get login services and share access on the ?PDC? without issue. I even have login scripts running at login. I also have a Samba server 2.2.0alpha2 running on a Solaris 2.7 box. I am trying to set it up as a ?member? server. I have added in the machine account to the ?PDC? (in both the etc/passwd and the smbpasswd files) and did a ?smbpasswd ?j DOMAIN? on the ?member server?. I got a ?Joined the domain? message. I enter all of the user accounts to the ?member? server?s /etc/passwd file. However, when I try to access the shares on the ?member? server from the NT4.0 workstation, no matter what username and password I try I can not gain access to them. I get the following error in the samba log on the ?member? server. Log.?member? server [2001/04/05 09:26:02, 0] smbd/password.c:domain_client_validate(1507) domain_client_validate: could not fetch trust account password for domain DATALEXTEST [2001/04/05 09:26:02, 0] passdb/smbpass.c:startsmbfilepwent_internal(87) startsmbfilepwent_internal: unable to open file /usr/local/samba/private/smbpasswd. Error was No such file or directory [2001/04/05 09:26:02, 0] passdb/passdb.c:iterate_getsmbpwnam(150) unable to open smb password database. [2001/04/05 09:26:02, 1] smbd/password.c:pass_check_smb(542) Couldn't find user 'jorchard' in smb_passwd file. [2001/04/05 09:26:02, 0] passdb/smbpass.c:startsmbfilepwent_internal(87) startsmbfilepwent_internal: unable to open file /usr/local/samba/private/smbpasswd. Error was No such file or directory [2001/04/05 09:26:02, 0] passdb/passdb.c:iterate_getsmbpwnam(150) unable to open smb password database. [2001/04/05 09:26:02, 1] smbd/password.c:pass_check_smb(542) Couldn't find user 'jorchard' in smb_passwd file. [2001/04/05 09:26:02, 1] smbd/reply.c:reply_sesssetup_and_X(966) Rejecting user 'jorchard': authentication failed I am at a lose as to what to do next to resolve this. I have read the ?Howto? and ?FAQ? numerous times and have not found anything to change. Any help would be greatly appreciated. Thanks Joe Orchard Smb.conf for ?member? server. [global] workgroup = datalextest server string = Samba 2.2.0a password server = 198.107.31.119 printcap name = /etc/printcap load printers = yes log file = /var/log/samba/log.%m max log size = 50 security = domain encrypt passwords = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local master = no domain logons = yes dns proxy = no #============================ Share Definitions ============================== [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = no writable = no printable = yes [share] comment = /share valid users = jorchard root path = /opt3 public = no writable = yes create mask = 0710 Smb.conf for ?PDC? samba server [global] workgroup = datalextest domain admin group = @adm server string = Samba 2.2.0a printcap name = /etc/printcap load printers = yes log file = /var/log/samba/log.%m max log size = 50 security = domain encrypt passwords = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local master = no domain logons = yes logon script = scripts\home.bat logon path = dns proxy = no #============================ Share Definitions ============================== [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = no writable = no printable = yes [web1] comment = web server path = /home/httpd/html valid user = jorchard public = no writable = yes create mask = 0710 [netlogon] path = /usr/local/samba/netlogon writeable = no guest ok = no From greg at kwikfind.com Thu Apr 5 19:15:39 2001 From: greg at kwikfind.com (Greg J. Zartman) Date: Tue Dec 2 02:34:08 2003 Subject: Caution Stoopid Newbie References: <00b101c0bcf5$1f607b40$cf01020a@perfectdomain.perfectimage.co.uk> <014a01c0bd5d$d2d9ef40$6f00a8c0@logeng.net> <006b01c0bdd2$3168afa0$330a0a0a@rutgersinsurance.com> Message-ID: <023e01c0be04$cd9737c0$6f00a8c0@logeng.net> I'm assuming that "the problem" you are referring to is using any version of Samba greater than V2.0.7? I agree that downtime is not a good thing, but that doesn't mean that you can't accept a certain amount of risk in implementing new code, hardware, or anything else. It depends on the situation. My comment about being in a non-critical environment referred to situation that this person currently is in. I believe he is trying to set this thing up at home with a handful of PCs. This is a completely different situation than if he were considering implementing it on a corporate environment with several hundred clients. Are both setups critical?? Apples and Oranges; Of course they aren't. If everyone took the all systems are critical approach, the Linux/Unix community would be light years behind where it is now. I don't think twice about trying new technology on select users in my office. Worse case, they can always goto the main server. This may be considered setting up a test environment, but I consider trying out a new "bell or whistle" on a non-critical environment. Regular users, performing everyday activities, are much more likely to run across a problem with a new setup than I would be working with it at home or something like that. My two cents. Greg ----- Original Message ----- From: "Adam Lang" To: "Samba News" Sent: Thursday, April 05, 2001 6:13 AM Subject: Re: Caution Stoopid Newbie > Problem is though, unless it is a test environment, you should always treat > your systems as critical. Bad practice if you think otherwise. Downtime is > never acceptable if you can avoid it. > > Adam Lang > Systems Engineer > Rutgers Casualty Insurance Company > http://www.rutgersinsurance.com > ----- Original Message ----- > From: "Greg J. Zartman" > To: "Samba News" > Sent: Wednesday, April 04, 2001 7:20 PM > Subject: Re: Caution Stoopid Newbie > > > > Jet, > > > > I think people can get all worked up about the different versions and > which > > should be used by the average users. What it boils down to is this: > > Version 2.0.7 is the current production release and is therefore > officially > > stable. If you are in an environment that is sensitive to stability, then > > use that version. With that said, I think that for just about anyone > else, > > version 2.2 alphaxx is the best solution. Especially if you are setting up > a > > domain that included Win2k machines. Yes, there is development going on > > with the code, and not all of it is 100% stable. From what I've seen, > > however, the samba team does an excellent job of keeping the code stable. > > > > I started from scratch with Linux (Mandrake 7.2) in January of this year > and > > downloaded Samba from CVS right off the bat. The only problems that I > have > > run into is with my own mistakes. The code has worked flawlessly. If you > > are in a non-critical environment, I wouldn't hesitate to use Samba 2.2. > > > > Greg > > > > > From aeby at graeff.com Thu Apr 5 19:11:03 2001 From: aeby at graeff.com (Thomas Aeby) Date: Tue Dec 2 02:34:08 2003 Subject: Runaway SMBD processes In-Reply-To: <3ACB9CF4.9509.335D6D8@localhost> Message-ID: On Wed, 4 Apr 2001, Christian Barth wrote: > We get exactly the same in the following unusual senario, which a > haven't debugged any further: > Redhat 6.2 NFS-Server --> NFS-mount across the university campus --> I've got the same problem ... I am pretty sure it is due to NFS locking problems - Linux NFS locking is not really robust IMHO. I assume when Samba tries to lock a file, it just hangs under some circumstances. As the hanging process won't be able to server any requests any more the Windows client after a timeout decides to re-open the server connection thus making smbd create another copy serving the station. Does this sound reasonable? Best regards, Tom ---------------------------------------------------------------------------- Thomas Aeby, Kirchweg 40, 1735 Giffers, Switzerland, Voice : (+41)26 4180040 Internet: aeby@graeff.com PGP public key available ---------------------------------------------------------------------------- ***"640K ought to be enough for anybody." - Bill Gates, 1981*** From pilger at kahana.higp.hawaii.edu Thu Apr 5 20:00:05 2001 From: pilger at kahana.higp.hawaii.edu (Eric Pilger) Date: Tue Dec 2 02:34:08 2003 Subject: Runaway SMBD processes - solved References: <3ACB9CF4.9509.335D6D8@localhost> Message-ID: <3ACCCEC5.EB7B810D@higp.hawaii.edu> Success! I hope. I noticed numerous oplock failures in the log file, so set "oplock break wait time" to 10. Not a peep out of it since, and no more runaways. > > I think this was covered earlier, but I missed it because I was beating > > my head against Win2K PDC support.Now I have that working, this problem > > is becoming a real pain. > > > > At least once a day, smbd will go crazy for one or more users.It will > > create a new instance every minutes or so to serve the exact same share, > > while not killing the old instances. Everything will lock up for the > > user and I will have to shut down their machine, and restart smbd to > > clear things up. -- Eric J. Pilger Systems Administrator Hawaii Institute of Geophysics and Planetology/SOEST pilger@pgd.hawaii.edu (808)956-6321 From vinod at yashaa.com Fri Apr 6 03:51:14 2001 From: vinod at yashaa.com (vinod) Date: Tue Dec 2 02:34:08 2003 Subject: Samba configuration Message-ID: <3ACD3D32.F8CA0317@yashaa.com> Hello Any one please help me I don't know how to configure samba server and smb so that i can access the linux system from windows NT and Windows 2000 systems From slu at firerun.net Fri Apr 6 04:12:51 2001 From: slu at firerun.net (Patrick) Date: Tue Dec 2 02:34:08 2003 Subject: Samba configuration Message-ID: <3ACD4243.C225E45D@firerun.net> -------- Original Message -------- Subject: Re: Samba configuration Date: Thu, 05 Apr 2001 22:11:52 -0600 From: Patrick Reply-To: critter@rmci.net To: vinod@yashaa.com References: <3ACD3D32.F8CA0317@yashaa.com> Go to http://us1.samba.org/samba/docs/ and look at the Samba 2.2.0 Howto and the FAQ they should tell you everything you will need to know. Patrick vinod wrote: > Hello > > Any one please help me > > I don't know how to configure samba server and smb so that i can access > the linux system from windows NT and Windows 2000 systems From M.hoeneveld at hes-rdam.nl Fri Apr 6 07:02:54 2001 From: M.hoeneveld at hes-rdam.nl (Maurice Hoeneveld) Date: Tue Dec 2 02:34:09 2003 Subject: PAM on Solaris experiences Message-ID: <5.0.2.1.2.20010406090037.00a7b0a0@mntm.hes-rdam.nl> Hello all, I hope there is a wise guy out there who can hep us out. Im busy with the installation of a Solaris 7 (intel) machine which is memeber of a NT domain and also can be used from outside the campus using ftp (ProFTP) One of my questions is Has anyone experiences with running PAM on Solaris for the NT user validation The samba part I installed runs fine. Im able to share 6000 home directories where the user is verified against the NT domain. I also installed ProFTP which I want to use with the pam_smb_auth module (which I downloaded from samba.org. and compiled it with the -lpam linker option) and configured pam.conf to use pam_smb_auth.so.1 as module for ftp authentication. The problem is a user which is * in /etc/passwd. I can see (when I start Proftp in debug mode) that Pam is invoked to verify the username but the user can not be found. Logging from ProFTP as follows; -- received: USER testuser -- no supplemental groups found for user 'testuser' -- received: PASS (hidden) -- no supplemental groups found for user 'testuser' -- PAM(testuser): Symbol not found -- USER testuser (Login failed): No such user found. When I check de system messages I see the following; -- proftpd[3946]: load_modules: pam_sm_acct_mgmt() missing Can anybody give me a hint. It looks like I need some extra options for compiling the pam_auth module. But probably it is an other problem. Any help is appreciated Thanks for your time Maurice Hoeneveld Technical System Engineer E-mail : m.hoeneveld@hes-rdam.nl Hogeschool voor Economische Studies Kralingse Zoom 91 Postbus 4030 3006 AA Rotterdam The Netherlands From Graeme.Vetterlein at ntl.com Fri Apr 6 07:51:12 2001 From: Graeme.Vetterlein at ntl.com (Graeme.Vetterlein@ntl.com) Date: Tue Dec 2 02:34:09 2003 Subject: CVS Message-ID: <5DD689222800D411B26100508B5E958436163E@mast-hk0-se02.private.ntl.com> I have some problems using CVS with Samba. The common thrust of resposes I get on the isssue is "Don't use samba/samba has problems with XXX" It occured to me. How is the source tree for samba maintained? Don't you guys use CVS? If so I'd guess you end up using CVS and Samba binarys together. -- Graeme *********************************************************************************** The contents of, and the information contained in this email and any files transmitted with it are confidential and legally privileged, and are sent for the personal attention of the addressee(s). If you are not the intended addressee, any use, disclosure or copying of this document is unauthorised. Thank you NTL *********************************************************************************** From andre.doehn at econia.com Fri Apr 6 08:10:16 2001 From: andre.doehn at econia.com (andre.doehn@econia.com) Date: Tue Dec 2 02:34:09 2003 Subject: =?iso-8859-1?Q?can=B4t_open_username_map_with_samba_2=2E2a3?= Message-ID: dear list, ive a problem with samba 2.2a3 concering the username map file - samba cant resolve the usernames stored in the usermap file. here is the syslog message: smbd[22258]: rpc_server/srv_netlog.c:api_net_sam_logon(177) smbd[22258]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. smbd[22258]: rpc_server/srv_pipe.c:api_rpcTNP(1199) smbd[22258]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. smbd[22258]: lib/username.c:map_username(87) smbd[22258]: can't open username map /usr/local/samba/lib/usermap here is the username map file (filepermissions: 600) with two entries (unix to the left and windows to the right side): root = Administrator user499022 = odemir here is the smb.conf: [global] security = user status = yes workgroup = NTDOM netbios name = cgn-pdc interfaces = eth0 lo bind interfaces only = yes server string = Samba %v running on %h wins support = yes time server = yes encrypt passwords = yes domain logons = yes domain master = yes local master = yes preferred master = yes logon script = scripts\logon.bat logon home = \\%L\homes logon path = \\%L\Profiles\%U logon drive = z: domain admin group = @adm add user script = /usr/sbin/useradd -g smbcl -c Machine -d /dev/null -s /bin/false %m$ guest account = ftp username map = /usr/local/samba/lib/usermap share modes=no os level=65 keepalive = 60 name resolve order = wins bcast host log level = 3 log file = /var/log/samba/log.%m socket options = TCP_NODELAY force create mode = 0640 force directory mode = 0750 [homes] comment = econia home directories guest ok = no read only = no create mask = 0700 directory mask = 0700 ;oplocks = false mode = 0755 locking = yes [Profiles] comment = Windows User Profiles path = /share/profiles guest ok = no browseable = no writeable = yes create mask = 0644 directory mask = 0755 locking = no [netlogon] path = /share/netlogon writeable = yes guest ok = no [print$] path=/share/printers guest ok = yes browseable = yes read only = yes write list = @adm [transfer] comment = share for filetransferring path = /share/files/transfer browseable = TRUE writeable = FALSE valid users = @adm,@users any hint what iam doing wrong? another problem is that when Win98/ME users login in the domain - the option logon drive = z: only work for win nt & 2k clients. Should I have to add a line "net use z: \\cgn-pdc\homes" in the Win98 section logon.bat? bye andre From icoupeau at unav.es Fri Apr 6 09:01:16 2001 From: icoupeau at unav.es (Ignacio Coupeau) Date: Tue Dec 2 02:34:09 2003 Subject: PAM on Solaris experiences References: <5.0.2.1.2.20010406090037.00a7b0a0@mntm.hes-rdam.nl> Message-ID: <3ACD85DC.5AC4B382@unav.es> Maurice Hoeneveld wrote: > > Hello all, > > I hope there is a wise guy out there who can hep us out. > Im busy with the installation of a Solaris 7 (intel) machine which is > memeber of a NT domain and also can be used from outside the campus > using ftp (ProFTP) > > One of my questions is > Has anyone experiences with running PAM on Solaris for the NT user validation no, but runs fine in linux and sftp (sshd). Our pam.d lines are: -- #%PAM-1.0 auth sufficient /lib/security/pam_smb_auth.so auth required /lib/security/pam_unix.so account sufficient /lib/security/pam_ldap.so account required /lib/security/pam_unix.so password sufficient /lib/security/pam_smb_auth.so --- and the /etc/pam_smb.conf lines (Domain, PDC1, PDC2): --- CTI-SMB-D1 PDC-D pdc2 --- Ignacio -- ____________________________________________________ Ignacio Coupeau, Ph.D. e-mail: icoupeau@unav.es CTI, Director fax: 948 425619 University of Navarra voice: 948 425600 Pamplona, SPAIN http://www.unav.es/cti/ From affuso at sipal.it Fri Apr 6 12:07:57 2001 From: affuso at sipal.it (Giovanni Affuso) Date: Tue Dec 2 02:34:09 2003 Subject: Samba and Nt Domain Message-ID: <5.0.2.1.2.20010406140342.00acb288@pop.inet.it> Dear EveryBody, I have in my network 2 sub-net for example 10.0.1.0 (net A) and 10.0.2.0(net B) the net A is a Nt Network in which the PDC is NT SERVER, in the net B the PDC is Samba 2.0.5 and have 2 network adapter for connect the 2 sub-network I want use the shared services (file server, ) of Net A in the Net B , I have create the same users in the 2 servers, but the user "pippo" of network B don't use the Network A. Why? Best Regards Giovanni Affuso Sipal Spa Sede sociale ed Uffici: Via Invorio, 24/a Torino tel. +390117176242 fax: +39011726766 mailto:affuso@sipal.it -------------- next part -------------- HTML attachment scrubbed and removed From vorlon at netexpress.net Fri Apr 6 13:39:35 2001 From: vorlon at netexpress.net (Steve Langasek) Date: Tue Dec 2 02:34:09 2003 Subject: PAM on Solaris experiences In-Reply-To: <5.0.2.1.2.20010406090037.00a7b0a0@mntm.hes-rdam.nl> Message-ID: On Fri, 6 Apr 2001, Maurice Hoeneveld wrote: > I hope there is a wise guy out there who can hep us out. > Im busy with the installation of a Solaris 7 (intel) machine which is > memeber of a NT domain and also can be used from outside the campus > using ftp (ProFTP) > One of my questions is > Has anyone experiences with running PAM on Solaris for the NT user validation > The samba part I installed runs fine. Im able to share 6000 home > directories where the user is verified against the NT domain. > I also installed ProFTP which I want to use with the pam_smb_auth > module (which I downloaded from samba.org. and compiled it with the -lpam > linker option) and configured pam.conf to > use pam_smb_auth.so.1 as module for ftp authentication. > The problem is a user which is * in /etc/passwd. > I can see (when I start Proftp in debug mode) that Pam is invoked to > verify the username but the user can not be found. > Logging from ProFTP as follows; > -- received: USER testuser > -- no supplemental groups found for user 'testuser' > -- received: PASS (hidden) > -- no supplemental groups found for user 'testuser' > -- PAM(testuser): Symbol not found > -- USER testuser (Login failed): No such user found. > When I check de system messages I see the following; > -- proftpd[3946]: load_modules: pam_sm_acct_mgmt() missing This indicates that you have 'acct xxx pam_smb_auth.so.1' in your pam.conf, but the pam_smb_auth module you have on your system doesn't provide the functions needed for the 'acct' section. I don't believe any version of pam_smb_auth supports this; you will need to use a different module in the acct section, such as pam_unix. Regards, Steve Langasek postmodern programmer From MMcEldowney at deltaregional.com Fri Apr 6 13:59:10 2001 From: MMcEldowney at deltaregional.com (McEldowney, Michael) Date: Tue Dec 2 02:34:09 2003 Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation Message-ID: Jet, Please continue to post. Don't let an occasional flare up discourage you. Discussion, even heated, is a good thing. Samba, Linux, and the Human Race would all be far behind in evolution without it. I had a similar problem when I first set up my "net@home.com". I was able to track it down to name resolution. Be sure to have WINS or DNS configured correctly. WINS is easiest to setup and is best for small networks (according to Micro$oft.) Make sure your Win98 box is configured to use your Samba box for WINS or DNS. At home I use DHCP to set up my clients and WINS for name rez. Name resolution is critical. If it doesn't work properly, you're domain won't either. Hope that helps, Thanks, Mike McEldowney Information Systems Director Delta Regional Medical Center v. 662-334-2075 p. 662-379-2498 e. mmceldowney@deltaregional.com > -----Original Message----- > From: Jet Set Willy [mailto:jsw@manic-miner.freeserve.co.uk] > Sent: Thursday, April 05, 2001 4:46 AM > To: samba-ntdom@samba.org > Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation > > > Well after all this not sure I dare post again > but seeing as though I have got some new > flameproof underwear here goes :-) > > Firstly thanks for all the replies - they are > all really a great help - useful advice and > kept me smiling while fighting with this. So > I'll attempt to collate everything, hopefully > explain where I am up and what I am trying > to do more clearly and , of course, ask > some more questions. > > My network is at home and serves no purpose other > than for me to try and learn a thing or two so it > is not mission critical - having said that it has > taken me quite a while to set the thing up and I > woudn't want to break everything in one go. > > So there are 4 machines - all old obsolete kit but > still pretty good or at least good enough for me. > 1) Mandrake 7.1 - with samba set up > 2) NT 4.0 - currently the pdc > 3) Win 98 machine > 4) Mandrake 7.2 - not important (yet - hopefully will > be used to build/test the latest version of samba etc) > > Current Situation: > I boot the 98 machine - it comes up > with the login box I enter my user name, password > and domain as specified by the NT box. (The NT machine > has been set up as the PDC for my domain) I can then > access the shares on the NT and linux machine without > any problem. (I have set up samba to map the NT user > names to samba user names [see question 1]) > > Where I am trying to get to: > I want to remove the NT PDC stuff from the equation. > I will probably still keep the machine on my network > just not as the PDC - I want to get the linux machine > to do this. ie I boot up my win98 machine and enter > my user name, password and domain - samba then > checks this and either allows or denys access [see > question 2] to its shares and the shares on the NT box. > > What I have done so far: > I entered the details specified by Michael McEldowney in my smb.conf I > also added one extra that I found in the docs somewhere > os level = 65 (I think it was os level - haven't got my > smb.conf) I also > created a netlogon share and a script that just echo'd a few lines so > that I could check it and set up the logon script paramter. > (I did this via swat but I guess this doesn't matter - I did > check them > via emacs & testparm several times) restarted smbd and nmbd. > I then changed the domain name of the NT machine and shut it > down. I rebooted 98 machine and tried to "log in" or > "authenticate myself" I tried both my original windows NT > user name and the one for the linux machine to no avail. > Always got the message "no domain controller could be found > or the password is wrong" and I'm certain the password is correct. > Bizarely if I boot up the nt machine it worked which suggested > that I need to do something other than just changing the domain > name for the NT machine. (The 98 machine *was* trying to log in > to the domain specified in the smb.conf workgroup section which > *is* different to the one newly changed onthe NT machine) Given > that it was approaching 1am and I need all the beauty sleep I can > get I thought I'd forget it and have another go tonight so I went > back to the NT machine and tried to change the domain back to its > original (and still in use by samba) however it wouldn't let me > change it back complaining that it was already in use which of course > it was and suggests that I was closer to getting it working > than I thought. [see question 4] > > > What I haven't done: > *Remembered to bring my copy of the smb.conf file in > so that I can post it here :-( > > > question 1: Are Samba users different to the linux/machine users ? > > question 2: Sorry I am NOT deliberately trying to wind people up > but I'm still not sure of my terminology is this > authentication or logon ? > > question 3: Philip Mayers wrote/copied from the man page "Note that > Win95/98 Domain logons are NOT the same as Windows NT > Domain logons." > Dare I ask what the difference is or should that be where can I find > something > to read that will tell me what the differences are ? > > question 4: So I guess that you guys really need my smb.conf file > which I'll get tonight & post tomorrow but without that essential > bit of info can anyone shed any light ? Am I trying to do the > impossible or I am just a stoopid newbie who will work it out > in the near future ? > > > > From gcarter at valinux.com Fri Apr 6 14:05:57 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:09 2003 Subject: CVS In-Reply-To: <5DD689222800D411B26100508B5E958436163E@mast-hk0-se02.private.ntl.com>; from Graeme.Vetterlein@ntl.com on Fri, Apr 06, 2001 at 02:51:12 -0500 References: <5DD689222800D411B26100508B5E958436163E@mast-hk0-se02.private.ntl.com> Message-ID: <20010406090557.G9859@pogo.plainjoe.org> On Fri, 06 Apr 2001 02:51:12 Graeme.Vetterlein@ntl.com wrote: > > It occured to me. How is the source tree for samba > maintained? Don't you guys use CVS? Yup. See http://www.samba.org/samba/cvs.html Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From mhaney at info4cars.com Fri Apr 6 14:06:10 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:09 2003 Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation In-Reply-To: Message-ID: In the M$ world, name resolution IS everything. I would make sure that WINS is working, but more importantly, from what I understand, (and especially in WIN9x) the client caches the domain info it last used to login. Even if you log in to a new domain name, Win9x is notorious in that it assumes alot more about the network than NT does. It might still be trying to authenticate to the orignal domain controller. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of McEldowney, Michael Sent: Friday, April 06, 2001 9:59 AM To: 'Jet Set Willy'; samba-ntdom@samba.org Subject: RE: (Was Caution Stoopid Newbie) - A better (Longer) explanation Jet, Please continue to post. Don't let an occasional flare up discourage you. Discussion, even heated, is a good thing. Samba, Linux, and the Human Race would all be far behind in evolution without it. I had a similar problem when I first set up my "net@home.com". I was able to track it down to name resolution. Be sure to have WINS or DNS configured correctly. WINS is easiest to setup and is best for small networks (according to Micro$oft.) Make sure your Win98 box is configured to use your Samba box for WINS or DNS. At home I use DHCP to set up my clients and WINS for name rez. Name resolution is critical. If it doesn't work properly, you're domain won't either. Hope that helps, Thanks, Mike McEldowney Information Systems Director Delta Regional Medical Center v. 662-334-2075 p. 662-379-2498 e. mmceldowney@deltaregional.com > -----Original Message----- > From: Jet Set Willy [mailto:jsw@manic-miner.freeserve.co.uk] > Sent: Thursday, April 05, 2001 4:46 AM > To: samba-ntdom@samba.org > Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation > > > Well after all this not sure I dare post again > but seeing as though I have got some new > flameproof underwear here goes :-) > > Firstly thanks for all the replies - they are > all really a great help - useful advice and > kept me smiling while fighting with this. So > I'll attempt to collate everything, hopefully > explain where I am up and what I am trying > to do more clearly and , of course, ask > some more questions. > > My network is at home and serves no purpose other > than for me to try and learn a thing or two so it > is not mission critical - having said that it has > taken me quite a while to set the thing up and I > woudn't want to break everything in one go. > > So there are 4 machines - all old obsolete kit but > still pretty good or at least good enough for me. > 1) Mandrake 7.1 - with samba set up > 2) NT 4.0 - currently the pdc > 3) Win 98 machine > 4) Mandrake 7.2 - not important (yet - hopefully will > be used to build/test the latest version of samba etc) > > Current Situation: > I boot the 98 machine - it comes up > with the login box I enter my user name, password > and domain as specified by the NT box. (The NT machine > has been set up as the PDC for my domain) I can then > access the shares on the NT and linux machine without > any problem. (I have set up samba to map the NT user > names to samba user names [see question 1]) > > Where I am trying to get to: > I want to remove the NT PDC stuff from the equation. > I will probably still keep the machine on my network > just not as the PDC - I want to get the linux machine > to do this. ie I boot up my win98 machine and enter > my user name, password and domain - samba then > checks this and either allows or denys access [see > question 2] to its shares and the shares on the NT box. > > What I have done so far: > I entered the details specified by Michael McEldowney in my smb.conf I > also added one extra that I found in the docs somewhere > os level = 65 (I think it was os level - haven't got my > smb.conf) I also > created a netlogon share and a script that just echo'd a few lines so > that I could check it and set up the logon script paramter. > (I did this via swat but I guess this doesn't matter - I did > check them > via emacs & testparm several times) restarted smbd and nmbd. > I then changed the domain name of the NT machine and shut it > down. I rebooted 98 machine and tried to "log in" or > "authenticate myself" I tried both my original windows NT > user name and the one for the linux machine to no avail. > Always got the message "no domain controller could be found > or the password is wrong" and I'm certain the password is correct. > Bizarely if I boot up the nt machine it worked which suggested > that I need to do something other than just changing the domain > name for the NT machine. (The 98 machine *was* trying to log in > to the domain specified in the smb.conf workgroup section which > *is* different to the one newly changed onthe NT machine) Given > that it was approaching 1am and I need all the beauty sleep I can > get I thought I'd forget it and have another go tonight so I went > back to the NT machine and tried to change the domain back to its > original (and still in use by samba) however it wouldn't let me > change it back complaining that it was already in use which of course > it was and suggests that I was closer to getting it working > than I thought. [see question 4] > > > What I haven't done: > *Remembered to bring my copy of the smb.conf file in > so that I can post it here :-( > > > question 1: Are Samba users different to the linux/machine users ? > > question 2: Sorry I am NOT deliberately trying to wind people up > but I'm still not sure of my terminology is this > authentication or logon ? > > question 3: Philip Mayers wrote/copied from the man page "Note that > Win95/98 Domain logons are NOT the same as Windows NT > Domain logons." > Dare I ask what the difference is or should that be where can I find > something > to read that will tell me what the differences are ? > > question 4: So I guess that you guys really need my smb.conf file > which I'll get tonight & post tomorrow but without that essential > bit of info can anyone shed any light ? Am I trying to do the > impossible or I am just a stoopid newbie who will work it out > in the near future ? > > > > From samba at grayassociates.net Fri Apr 6 14:09:42 2001 From: samba at grayassociates.net (Rich Forman) Date: Tue Dec 2 02:34:09 2003 Subject: Member server not accessing Samba PDC In-Reply-To: <3ACCA465.678F3624@pdx.datalex.com> Message-ID: <000201c0bea3$3a8279f0$0a01a8c0@forman> Did you add all of the users to the "member" server using smbpasswd as well? -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Joe Orchard Sent: Thursday, April 05, 2001 9:59 AM To: samba-ntdom@lists.samba.org Subject: Member server not accessing Samba PDC Here is my situation. I have a Samba server 2.2.0alpha2 running on Redhat 7.0. I have set it up to be a ?PDC?samba server. I have a NT4.0-SP5 workstation added to its domain and am able to get login services and share access on the ?PDC? without issue. I even have login scripts running at login. I also have a Samba server 2.2.0alpha2 running on a Solaris 2.7 box. I am trying to set it up as a ?member? server. I have added in the machine account to the ?PDC? (in both the etc/passwd and the smbpasswd files) and did a ?smbpasswd ?j DOMAIN? on the ?member server?. I got a ?Joined the domain? message. I enter all of the user accounts to the ?member? server?s /etc/passwd file. However, when I try to access the shares on the ?member? server from the NT4.0 workstation, no matter what username and password I try I can not gain access to them. I get the following error in the samba log on the ?member? server. Log.?member? server [2001/04/05 09:26:02, 0] smbd/password.c:domain_client_validate(1507) domain_client_validate: could not fetch trust account password for domain DATALEXTEST [2001/04/05 09:26:02, 0] passdb/smbpass.c:startsmbfilepwent_internal(87) startsmbfilepwent_internal: unable to open file /usr/local/samba/private/smbpasswd. Error was No such file or directory [2001/04/05 09:26:02, 0] passdb/passdb.c:iterate_getsmbpwnam(150) unable to open smb password database. [2001/04/05 09:26:02, 1] smbd/password.c:pass_check_smb(542) Couldn't find user 'jorchard' in smb_passwd file. [2001/04/05 09:26:02, 0] passdb/smbpass.c:startsmbfilepwent_internal(87) startsmbfilepwent_internal: unable to open file /usr/local/samba/private/smbpasswd. Error was No such file or directory [2001/04/05 09:26:02, 0] passdb/passdb.c:iterate_getsmbpwnam(150) unable to open smb password database. [2001/04/05 09:26:02, 1] smbd/password.c:pass_check_smb(542) Couldn't find user 'jorchard' in smb_passwd file. [2001/04/05 09:26:02, 1] smbd/reply.c:reply_sesssetup_and_X(966) Rejecting user 'jorchard': authentication failed I am at a lose as to what to do next to resolve this. I have read the ?Howto? and ?FAQ? numerous times and have not found anything to change. Any help would be greatly appreciated. Thanks Joe Orchard Smb.conf for ?member? server. [global] workgroup = datalextest server string = Samba 2.2.0a password server = 198.107.31.119 printcap name = /etc/printcap load printers = yes log file = /var/log/samba/log.%m max log size = 50 security = domain encrypt passwords = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local master = no domain logons = yes dns proxy = no #============================ Share Definitions ============================== [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = no writable = no printable = yes [share] comment = /share valid users = jorchard root path = /opt3 public = no writable = yes create mask = 0710 Smb.conf for ?PDC? samba server [global] workgroup = datalextest domain admin group = @adm server string = Samba 2.2.0a printcap name = /etc/printcap load printers = yes log file = /var/log/samba/log.%m max log size = 50 security = domain encrypt passwords = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local master = no domain logons = yes logon script = scripts\home.bat logon path = dns proxy = no #============================ Share Definitions ============================== [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = no writable = no printable = yes [web1] comment = web server path = /home/httpd/html valid user = jorchard public = no writable = yes create mask = 0710 [netlogon] path = /usr/local/samba/netlogon writeable = no guest ok = no From Heath.Goebel at trw.com Fri Apr 6 14:46:49 2001 From: Heath.Goebel at trw.com (Heath Goebel) Date: Tue Dec 2 02:34:09 2003 Subject: Trouble with my Hood Message-ID: <3ACDD6D4.C7CC75D@trw.com> I hope this is the correct mailing list. If not, I'm sure that someone will let me know. I'm having trouble getting all of my Samba servers into my Network Neighborhood. I have Samba 2.0.7 running on two Sun servers and they both appear in the Network Neighborhood and are accessable without any problems. I have Samba 2.0.7 running on one Silicon Graphics server. When I first installed it, I was able to get it added to the Network Neighborhood. But, it subsequently fell out and no longer appears in the Network Neighborhood although it is accessable using Find Computer. I'm not sure why. The best clue is the following error message in my log.nmb: nmbd/nmbd_nameregister.c(109): register_name_response: server at IP 129.193.133.5 reject our name registration of STING<00> with error code 6. 129.193.133.5 (eagle) is the NT PDC STING is the Silicon Graphics server I've tried deleting sting from the NT domain and re-adding it (/usr/local/samba/bin/smbpasswd -j HSV -r eagle) to no avail. My smb.conf looks like this... [global] workgroup = HSV server string = Samba %v on (%h) encrypt passwords = yes security = domain password server = EAGLE SIATA wins server = 129.193.133.5 log file = /usr/local/samba/log/samba.log.%m [homes] browsable = no writable = yes [apps-sgi] path = /apps/sgi writable = yes . . . Any help is appreciated. Like, what is error code 6? Thanks, Heath From mhaney at info4cars.com Fri Apr 6 14:50:04 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:09 2003 Subject: Trouble with my Hood In-Reply-To: <3ACDD6D4.C7CC75D@trw.com> Message-ID: Have you looked at WINS manager to see if the name is still registered? YOu might need to delete the registration and then restart samba to have it reregister. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Heath Goebel Sent: Friday, April 06, 2001 10:47 AM To: samba-ntdom@lists.samba.org Subject: Trouble with my Hood I hope this is the correct mailing list. If not, I'm sure that someone will let me know. I'm having trouble getting all of my Samba servers into my Network Neighborhood. I have Samba 2.0.7 running on two Sun servers and they both appear in the Network Neighborhood and are accessable without any problems. I have Samba 2.0.7 running on one Silicon Graphics server. When I first installed it, I was able to get it added to the Network Neighborhood. But, it subsequently fell out and no longer appears in the Network Neighborhood although it is accessable using Find Computer. I'm not sure why. The best clue is the following error message in my log.nmb: nmbd/nmbd_nameregister.c(109): register_name_response: server at IP 129.193.133.5 reject our name registration of STING<00> with error code 6. 129.193.133.5 (eagle) is the NT PDC STING is the Silicon Graphics server I've tried deleting sting from the NT domain and re-adding it (/usr/local/samba/bin/smbpasswd -j HSV -r eagle) to no avail. My smb.conf looks like this... [global] workgroup = HSV server string = Samba %v on (%h) encrypt passwords = yes security = domain password server = EAGLE SIATA wins server = 129.193.133.5 log file = /usr/local/samba/log/samba.log.%m [homes] browsable = no writable = yes [apps-sgi] path = /apps/sgi writable = yes . . . Any help is appreciated. Like, what is error code 6? Thanks, Heath From MMcEldowney at deltaregional.com Fri Apr 6 14:52:57 2001 From: MMcEldowney at deltaregional.com (McEldowney, Michael) Date: Tue Dec 2 02:34:09 2003 Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation Message-ID: Mark's right, I had forgotten about the caching. It can drive you nuts, but that's what M$ does best ;) > -----Original Message----- > From: Mark Haney [mailto:mhaney@info4cars.com] > Sent: Friday, April 06, 2001 9:06 AM > To: McEldowney, Michael; 'Jet Set Willy'; samba-ntdom@samba.org > Subject: RE: (Was Caution Stoopid Newbie) - A better (Longer) > explanation > > > In the M$ world, name resolution IS everything. I would make > sure that WINS > is working, but more importantly, from what I understand, > (and especially in > WIN9x) the client caches the domain info it last used to > login. Even if you > log in to a new domain name, Win9x is notorious in that it > assumes alot more > about the network than NT does. It might still be trying to > authenticate > to the orignal domain controller. > > > -----Original Message----- > From: samba-ntdom-admin@lists.samba.org > [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of McEldowney, > Michael > Sent: Friday, April 06, 2001 9:59 AM > To: 'Jet Set Willy'; samba-ntdom@samba.org > Subject: RE: (Was Caution Stoopid Newbie) - A better (Longer) > explanation > > > Jet, > > Please continue to post. Don't let an occasional flare up discourage > you. Discussion, even heated, is a good thing. Samba, Linux, and the > Human Race would all be far behind in evolution without it. > > I had a similar problem when I first set up my "net@home.com". I was > able to track it down to name resolution. Be sure to have WINS or DNS > configured correctly. WINS is easiest to setup and is best for small > networks (according to Micro$oft.) Make sure your Win98 box is > configured to use your Samba box for WINS or DNS. At home I > use DHCP to > set up my clients and WINS for name rez. > > Name resolution is critical. If it doesn't work properly, > you're domain > won't either. > > Hope that helps, > > Thanks, > Mike McEldowney > Information Systems Director > Delta Regional Medical Center > v. 662-334-2075 > p. 662-379-2498 > e. mmceldowney@deltaregional.com > > > > > -----Original Message----- > > From: Jet Set Willy [mailto:jsw@manic-miner.freeserve.co.uk] > > Sent: Thursday, April 05, 2001 4:46 AM > > To: samba-ntdom@samba.org > > Subject: (Was Caution Stoopid Newbie) - A better (Longer) > explanation > > > > > > Well after all this not sure I dare post again > > but seeing as though I have got some new > > flameproof underwear here goes :-) > > > > Firstly thanks for all the replies - they are > > all really a great help - useful advice and > > kept me smiling while fighting with this. So > > I'll attempt to collate everything, hopefully > > explain where I am up and what I am trying > > to do more clearly and , of course, ask > > some more questions. > > > > My network is at home and serves no purpose other > > than for me to try and learn a thing or two so it > > is not mission critical - having said that it has > > taken me quite a while to set the thing up and I > > woudn't want to break everything in one go. > > > > So there are 4 machines - all old obsolete kit but > > still pretty good or at least good enough for me. > > 1) Mandrake 7.1 - with samba set up > > 2) NT 4.0 - currently the pdc > > 3) Win 98 machine > > 4) Mandrake 7.2 - not important (yet - hopefully will > > be used to build/test the latest version of samba etc) > > > > Current Situation: > > I boot the 98 machine - it comes up > > with the login box I enter my user name, password > > and domain as specified by the NT box. (The NT machine > > has been set up as the PDC for my domain) I can then > > access the shares on the NT and linux machine without > > any problem. (I have set up samba to map the NT user > > names to samba user names [see question 1]) > > > > Where I am trying to get to: > > I want to remove the NT PDC stuff from the equation. > > I will probably still keep the machine on my network > > just not as the PDC - I want to get the linux machine > > to do this. ie I boot up my win98 machine and enter > > my user name, password and domain - samba then > > checks this and either allows or denys access [see > > question 2] to its shares and the shares on the NT box. > > > > What I have done so far: > > I entered the details specified by Michael McEldowney in my > smb.conf I > > also added one extra that I found in the docs somewhere > > os level = 65 (I think it was os level - haven't got my > > smb.conf) I also > > created a netlogon share and a script that just echo'd a > few lines so > > that I could check it and set up the logon script paramter. > > (I did this via swat but I guess this doesn't matter - I did > > check them > > via emacs & testparm several times) restarted smbd and nmbd. > > I then changed the domain name of the NT machine and shut it > > down. I rebooted 98 machine and tried to "log in" or > > "authenticate myself" I tried both my original windows NT > > user name and the one for the linux machine to no avail. > > Always got the message "no domain controller could be found > > or the password is wrong" and I'm certain the password is correct. > > Bizarely if I boot up the nt machine it worked which suggested > > that I need to do something other than just changing the domain > > name for the NT machine. (The 98 machine *was* trying to log in > > to the domain specified in the smb.conf workgroup section which > > *is* different to the one newly changed onthe NT machine) Given > > that it was approaching 1am and I need all the beauty sleep I can > > get I thought I'd forget it and have another go tonight so I went > > back to the NT machine and tried to change the domain back to its > > original (and still in use by samba) however it wouldn't let me > > change it back complaining that it was already in use which > of course > > it was and suggests that I was closer to getting it working > > than I thought. [see question 4] > > > > > > What I haven't done: > > *Remembered to bring my copy of the smb.conf file in > > so that I can post it here :-( > > > > > > question 1: Are Samba users different to the linux/machine users ? > > > > question 2: Sorry I am NOT deliberately trying to wind people up > > but I'm still not sure of my terminology is this > > authentication or logon ? > > > > question 3: Philip Mayers wrote/copied from the man page "Note that > > Win95/98 Domain logons are NOT the same as Windows NT > > Domain logons." > > Dare I ask what the difference is or should that be where can I find > > something > > to read that will tell me what the differences are ? > > > > question 4: So I guess that you guys really need my smb.conf file > > which I'll get tonight & post tomorrow but without that essential > > bit of info can anyone shed any light ? Am I trying to do the > > impossible or I am just a stoopid newbie who will work it out > > in the near future ? > > > > > > > > > > From M.hoeneveld at hes-rdam.nl Fri Apr 6 15:13:33 2001 From: M.hoeneveld at hes-rdam.nl (Maurice Hoeneveld) Date: Tue Dec 2 02:34:09 2003 Subject: PAM on Solaris experiences In-Reply-To: <5.0.2.1.2.20010406090037.00a7b0a0@mntm.hes-rdam.nl> Message-ID: <5.0.2.1.2.20010406170555.00a79bd0@mntm.hes-rdam.nl> First of all thanks to Bruce Hudson and Steve Langasek for their response. At least it gave me some ideas to experiment with. I did experiment with the pam.conf file a little further. Fortunatly there are nno hints in the README.PAM from ProFTP but the following is what I entered in pam.conf It goes wrong at the moment I use line ftp account ..... I replaced them one by one with the pam_unix module but that gave no solution. At the moment I enter the mentioned line again (which is in my opinion the one to verify the NT domain for the username/password it goes wrong A part of my pam.conf; #ident "@(#)pam.conf 1.19 95/11/30 SMI" # # PAM configuration # # Authentication management # # for ProFTPd ftp auth required /usr/lib/security/pam_smb_auth.so.1 nolocal debug ftp account required /usr/lib/security/pam_smb_auth.so.1 nolocal debug ftp session required /usr/lib/security/pam_smb_auth.so.1 nolocal debug At 09:02 06-04-2001 +0200, you wrote: >Hello all, > >I hope there is a wise guy out there who can hep us out. >Im busy with the installation of a Solaris 7 (intel) machine which is >memeber of a NT domain and also can be used from outside the campus >using ftp (ProFTP) > >One of my questions is >Has anyone experiences with running PAM on Solaris for the NT user validation > >The samba part I installed runs fine. Im able to share 6000 home >directories where the user is verified against the NT domain. >I also installed ProFTP which I want to use with the pam_smb_auth >module (which I downloaded from samba.org. and compiled it with the -lpam >linker option) and configured pam.conf to >use pam_smb_auth.so.1 as module for ftp authentication. > >The problem is a user which is * in /etc/passwd. >I can see (when I start Proftp in debug mode) that Pam is invoked to >verify the username but the user can not be found. >Logging from ProFTP as follows; > >-- received: USER testuser >-- no supplemental groups found for user 'testuser' >-- received: PASS (hidden) >-- no supplemental groups found for user 'testuser' >-- PAM(testuser): Symbol not found >-- USER testuser (Login failed): No such user found. > >When I check de system messages I see the following; > >-- proftpd[3946]: load_modules: pam_sm_acct_mgmt() missing > >Can anybody give me a hint. >It looks like I need some extra options for compiling the pam_auth >module. But probably it is an other problem. > >Any help is appreciated >Thanks for your time > > > > > >Maurice Hoeneveld >Technical System Engineer >E-mail : m.hoeneveld@hes-rdam.nl > >Hogeschool voor Economische Studies >Kralingse Zoom 91 >Postbus 4030 >3006 AA Rotterdam >The Netherlands Maurice Hoeneveld Technical System Engineer E-mail : m.hoeneveld@hes-rdam.nl Hogeschool voor Economische Studies Kralingse Zoom 91 Postbus 4030 3006 AA Rotterdam The Netherlands From GeorgeH at 3ciusa.com Fri Apr 6 16:49:08 2001 From: GeorgeH at 3ciusa.com (George Homme) Date: Tue Dec 2 02:34:09 2003 Subject: PAM on Solaris experiences In-Reply-To: Message-ID: How about AIX? I am using Samba with great sucess and use PAM and smb for authentication. Windows, Linux (mail and www server) are all authenticating via smb. If I could just find an AIX solution, life would be just perfect !! george -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Steve Langasek Sent: Friday, April 06, 2001 9:40 AM To: Maurice Hoeneveld Cc: samba-ntdom@samba.org Subject: Re: PAM on Solaris experiences On Fri, 6 Apr 2001, Maurice Hoeneveld wrote: > I hope there is a wise guy out there who can hep us out. > Im busy with the installation of a Solaris 7 (intel) machine which is > memeber of a NT domain and also can be used from outside the campus > using ftp (ProFTP) > One of my questions is > Has anyone experiences with running PAM on Solaris for the NT user validation > The samba part I installed runs fine. Im able to share 6000 home > directories where the user is verified against the NT domain. > I also installed ProFTP which I want to use with the pam_smb_auth > module (which I downloaded from samba.org. and compiled it with the -lpam > linker option) and configured pam.conf to > use pam_smb_auth.so.1 as module for ftp authentication. > The problem is a user which is * in /etc/passwd. > I can see (when I start Proftp in debug mode) that Pam is invoked to > verify the username but the user can not be found. > Logging from ProFTP as follows; > -- received: USER testuser > -- no supplemental groups found for user 'testuser' > -- received: PASS (hidden) > -- no supplemental groups found for user 'testuser' > -- PAM(testuser): Symbol not found > -- USER testuser (Login failed): No such user found. > When I check de system messages I see the following; > -- proftpd[3946]: load_modules: pam_sm_acct_mgmt() missing This indicates that you have 'acct xxx pam_smb_auth.so.1' in your pam.conf, but the pam_smb_auth module you have on your system doesn't provide the functions needed for the 'acct' section. I don't believe any version of pam_smb_auth supports this; you will need to use a different module in the acct section, such as pam_unix. Regards, Steve Langasek postmodern programmer From saul_ff at yahoo.com.mx Fri Apr 6 18:26:59 2001 From: saul_ff at yahoo.com.mx (=?iso-8859-1?q?Saul=20Fabian?=) Date: Tue Dec 2 02:34:09 2003 Subject: workgroup Message-ID: <20010406182659.95734.qmail@web13208.mail.yahoo.com> I have question: How I can configure samba for work with munch groups and appareance in all groups ifself???? and I cant sincrnize an directory of windows to directory of samba server??? any ideas !!! tanks _________________________________________________________ Do You Yahoo!? Construye tu p?gina personal en Yahoo! GeoCities. ?Es f?cil, r?pido y gratis! http://geocities.yahoo.com.mx From vorlon at netexpress.net Fri Apr 6 20:46:34 2001 From: vorlon at netexpress.net (Steve Langasek) Date: Tue Dec 2 02:34:09 2003 Subject: PAM on Solaris experiences In-Reply-To: <5.0.2.1.2.20010406170555.00a79bd0@mntm.hes-rdam.nl> Message-ID: On Fri, 6 Apr 2001, Maurice Hoeneveld wrote: > First of all thanks to Bruce Hudson and Steve Langasek for their response. > At least it gave me some ideas to experiment with. > I did experiment with the pam.conf file a little further. Fortunatly there > are nno hints in the README.PAM from ProFTP but the following is what I > entered in pam.conf > It goes wrong at the moment I use line > ftp account ..... > I replaced them one by one with the pam_unix module but that gave no solution. > At the moment I enter the mentioned line again (which is in my opinion the > one to verify the NT domain for the username/password it goes wrong > A part of my pam.conf; > #ident "@(#)pam.conf 1.19 95/11/30 SMI" > # > # PAM configuration > # > # Authentication management > # > # for ProFTPd > ftp auth required /usr/lib/security/pam_smb_auth.so.1 nolocal debug > ftp account required /usr/lib/security/pam_smb_auth.so.1 nolocal debug ^^^^ You cannot do this if pam_smb_auth does not supply this functionality (and the error message you got shows that it doesn't). The purpose of the 'account' rules is to check whether the user is *authorized* to access the service. You have already verified with the 'auth' line that they have a valid username and password, the 'account' line is to check whether this user should be allowed access to the service. Mostly, this is used for checking if an account is expired or not; if pam_smb_auth doesn't do this as a separate check, you can use pam_unix (if you use account expirations in /etc/shadow) or pam_permit. > ftp session required /usr/lib/security/pam_smb_auth.so.1 nolocal debug Steve Langasek postmodern programmer From awilliam at whitemice.org Fri Apr 6 20:59:06 2001 From: awilliam at whitemice.org (Adam Tauno Williams) Date: Tue Dec 2 02:34:09 2003 Subject: PAM on Solaris experiences In-Reply-To: References: Message-ID: <20010406165906.1a698468.awilliam@whitemice.org> >How about AIX? I am using Samba with great sucess and use PAM and smb for >authentication. Windows, Linux (mail and www server) are all authenticating >via smb. >If I could just find an AIX solution, life would be just perfect !! Your not alone. The best I can do with AIX is to publish my LDAP RFC2307 information into NIS for the AIX box to use. If you come up with something let me know. From purenrg at iastate.edu Fri Apr 6 21:12:37 2001 From: purenrg at iastate.edu (Nicholas Golder) Date: Tue Dec 2 02:34:09 2003 Subject: Can't logon to Samba PDC Message-ID: <000101c0bede$4eac3660$0101a8c0@tronyx> I am using: FreeBSD 4.2 Samba-2.2.0alpha3 Windows 2000 SP1 Problem: I have installed Samba and configured it the way the PDC-HOWTO describes. I have created the users and machines in the /etc/passwd and smbpasswd, configured the smb.conf file, and started the daemons. I have successfully joined the domain. When I try to logon using an account that is in both the /etc/passwd and smbpasswd, I get an error message that the user account doesn't exist in the domain [or some derivative of that]. When I try to add the users, using the account manager, I can see them in the domain but can't add them. I get the message: The user could not be added because the following error has occurred: The trust relationship between this workstation and the primary domain failed. Any help would be greatly appreciated. ---------------------------------- "Breaking stereotypes since 1977." Nicholas Golder From eirvine at tpgi.com.au Fri Apr 6 22:22:36 2001 From: eirvine at tpgi.com.au (eirvine) Date: Tue Dec 2 02:34:09 2003 Subject: Trouble with my Hood References: <3ACDD6D4.C7CC75D@trw.com> Message-ID: <3ACE41AC.C1AAB540@tpgi.com.au> Hi Heath, Heath Goebel wrote: > > I hope this is the correct mailing list. If not, I'm sure that someone > will let me know. > > I'm having trouble getting all of my Samba servers into my Network > Neighborhood. > > I have Samba 2.0.7 running on two Sun servers and they both appear in > the Network Neighborhood and are accessable without any problems. I have > Samba 2.0.7 running on one Silicon Graphics server. When I first > installed it, I was able to get it added to the Network Neighborhood. > But, it subsequently fell out and no longer appears in the Network > Neighborhood although it is accessable using Find Computer. I'm not sure > why. The best clue is the following error message in my log.nmb: > > nmbd/nmbd_nameregister.c(109): > register_name_response: server at IP 129.193.133.5 reject our name > registration of STING<00> with error code 6. This may be obvious, but how many samba servers are set up to be the PDC? > 129.193.133.5 (eagle) is the NT PDC > STING is the Silicon Graphics server > > I've tried deleting sting from the NT domain and re-adding it > (/usr/local/samba/bin/smbpasswd -j HSV -r eagle) to no avail. > > My smb.conf looks like this... > > [global] > workgroup = HSV > server string = Samba %v on (%h) > encrypt passwords = yes > security = domain > password server = EAGLE SIATA > wins server = 129.193.133.5 > log file = /usr/local/samba/log/samba.log.%m > [homes] > browsable = no > writable = yes > [apps-sgi] > path = /apps/sgi > writable = yes Eddie. From t98pth at student.bth.se Sun Apr 8 11:29:11 2001 From: t98pth at student.bth.se (=?ISO-8859-1?Q?P=E4r_Thoren?=) Date: Tue Dec 2 02:34:09 2003 Subject: master browser Message-ID: Hi! Does samba 2.2 have a better chance of being the master browser in a workgroup with mostly win2k clients? I can?t get samba 2.0.7 to be the master browser. /P?r From slu at firerun.net Sun Apr 8 17:04:53 2001 From: slu at firerun.net (Patrick) Date: Tue Dec 2 02:34:09 2003 Subject: master browser References: Message-ID: <3AD09A34.26CF426D@firerun.net> It depends on how high you have set the "os level" in smb.conf, and if you have "local master" and "preffered master" set to yes. A os level of 100 should allow it to win the election everytime. Patrick P?r Thoren wrote: > Hi! > > Does samba 2.2 have a better chance of being the master browser in > a workgroup with mostly win2k clients? > I can?t get samba 2.0.7 to be the master browser. > > /P?r From dan_perik-work at ntm.org.pg Sun Apr 8 23:16:28 2001 From: dan_perik-work at ntm.org.pg (Dan Perik) Date: Tue Dec 2 02:34:09 2003 Subject: Using 2.0.7 vs. 2.2.0-alpha3 Message-ID: <3AD0F14C.49AA0F2C@ntm.org.pg> Hello, I'm working on evaluating Linux/Samba for use in our organization, and I need some input. We have roughly 70 clients on our network, which are either Win9x or WinNT/2000. We are currently using Novell Netware 4.x for our file server/print server/etc.. We now have 2 Win 2000 servers dedicated to our soon-to-be implemented accounting system. And we have Linux hosting our e-mail and everything to do with it. We're looking at simplifying our system, which will most likely mean dropping the Novell system. So I'm evaluating using Linux/Samba vs. Win 2000 as our file/print server. Since we have WinNT/2000 clients, and I'm needing domain logins, I believe I need to run 2.2.0. But it's alpha. If I can't have domain logins for WinNT/2000 clients, we may have to decide to go Win2000 as our file server (much to my dismay). So my question is how alpha is 2.2.0-alpha3? Is it stable enough to trust our file serving to for all our operations? I mainly need the domain logins for logon scripts and possibly roaming profiles under WinNT/2000. I also need the ease of creating machine accounts automatically (which I just got working yesterday). Basically, in order to prove to the other guys that I'm working with that we should go Linux/Samba instead of Win2000, I have to prove that it's stable, easy to administer, and works well. What can you tell me? - Dan Perik -- - Dan Perik Computer Services Department Lapilo Center New Tribes Mission - PNG From peter.milburn at sofcom.com.au Mon Apr 9 02:44:18 2001 From: peter.milburn at sofcom.com.au (peter.milburn@sofcom.com.au) Date: Tue Dec 2 02:34:10 2003 Subject: Smaba 2.2aplha3 Message-ID: Minor Problem When goto save a file that I am downloading say from a web site, I the save dialog box hoems up, and I go to choose the drive that I have automatically mapped through a script, it sees the drive, but times out and won;t let me save the file. I can goto my computer and then the mapped drive and create a folder or save a file, any ideas ? Thanks, -- Peter Milburn Systems Manager Software Communication Group Ltd peter.milburn@sofcom.com.au Ph: +613 9826 8300 Fax: +613 9826 8336 Level 16, 644 Chapel St South Yarra, Vic 3141 www.sofcom.com.au ******************************************** This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you must not disseminate, copy or take any action in reliance on it. If you have received this message in error, please notify Software Communication Group immediately. Any views expressed in this message are those of the individual sender except where the sender specifically states them to be the views of Software Communication Group. ******************************************** From jsw at manic-miner.freeserve.co.uk Mon Apr 9 09:18:15 2001 From: jsw at manic-miner.freeserve.co.uk (Jet Set Willy) Date: Tue Dec 2 02:34:10 2003 Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation References: Message-ID: <001401c0c0d6$0666ab20$cf01020a@perfectdomain.perfectimage.co.uk> Well this problem just gets stranger and stranger.... I hate to say it and I am very sorry about it but I strongly suspect that it wasn't *quite* as broken as I thought. However there is definitely something strange going on and I reckon it is a combination of the messages that have been kindly suggested by everyone. The samba machine *is* "logging" me in. I have remembered to bring along my smb.conf and from this you can see my logon script is called logon.bat (showing my ms background) all this does is echo a whole load of lines so I can check if it is being run or not - it is ! However this only works if I have the original NT machine switched on (remember the first thing I did was turn it off ?) if I have the NT machine turned off it won't allow logins at all - comes up with the can't find the domain server etc etc message. Boot up the NT machine and the samba machine is immediatly happy and allows logins. So it looks like the samba machine is still somehow tied in with the original NT PDC. Thus tonights bonus task will be : Formating and reinstalling the NT machine as a standalone within the domain. Unless anyone knows better ? Just for information here is my smb.conf file - don't really know which are the important bits so I'm afraid this is everything with one note - I do have two nw cards and eth1 card is the one on the network ( the other is in preparation for cable modem) # Samba config file created using SWAT # from UNKNOWN (0.0.0.0) # Date: 2001/04/08 14:39:01 # Global parameters [global] workgroup = MYDOMAIN netbios name = My Machine netbios aliases = first second server string = Its the linux box! interfaces = eth1 bind interfaces only = No security = USER encrypt passwords = Yes update encrypted = No allow trusted domains = Yes hosts equiv = min passwd length = 5 map to guest = Never null passwords = No password server = smb passwd file = /etc/smbpasswd root directory = / passwd program = /bin/passwd passwd chat = *new*password* %n\n *new*password* %n\n *changed* passwd chat debug = No username map = /etc/user.map password level = 0 username level = 0 unix password sync = No restrict anonymous = No use rhosts = No log level = 0 syslog = 1 syslog only = No log file = /var/log/samba/log.%m max log size = 50 timestamp logs = Yes debug hires timestamp = No debug pid = No debug uid = No protocol = NT1 read bmpx = No read raw = Yes write raw = Yes nt smb support = Yes nt pipe support = Yes nt acl support = Yes announce version = 4.2 announce as = NT max mux = 50 max xmit = 65535 name resolve order = lmhosts host wins bcast max packet = 65535 max ttl = 259200 max wins ttl = 518400 min wins ttl = 21600 time server = No change notify timeout = 60 deadtime = 0 getwd cache = Yes keepalive = 300 lpq cache time = 10 max disk size = 0 max open files = 10000 read prediction = No read size = 16384 shared mem size = 1048576 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 stat cache size = 50 load printers = Yes printcap name = /etc/printcap printer driver file = /etc/printers.def strip dot = No character set = mangled stack = 50 coding system = client code page = 850 stat cache = Yes domain groups = domain admin group = domain guest group = domain admin users = domain guest users = machine password timeout = 604800 add user script = delete user script = logon script = logon.bat logon path = logon drive = logon home = domain logons = Yes os level = 65 lm announce = Auto lm interval = 60 preferred master = Yes local master = Yes domain master = Yes browse list = Yes dns proxy = Yes wins proxy = No wins server = wins support = Yes wins hook = kernel oplocks = Yes ole locking compatibility = Yes oplock break wait time = 10 smbrun = /usr/bin/smbrun config file = preload = lock dir = /var/lock/samba default service = message command = dfree command = valid chars = remote announce = remote browse sync = socket address = 0.0.0.0 homedir map = time offset = 0 unix realname = No NIS homedir = No panic action = comment = path = alternate permissions = No revalidate = No username = guest account = nobody invalid users = valid users = admin users = read list = write list = force user = force group = read only = Yes create mask = 0744 force create mode = 00 security mask = -1 force security mode = -1 directory mask = 0755 force directory mode = 00 directory security mask = -1 force directory security mode = -1 guest only = No guest ok = No only user = No hosts allow = hosts deny = status = Yes max connections = 0 min print space = 0 strict sync = No sync always = No print ok = No postscript = No printing = bsd print command = lpr -r -P%p %s lpq command = lpq -P%p lprm command = lprm -P%p %j lppause command = lpresume command = queuepause command = queueresume command = printer name = printer driver = NULL printer driver location = default case = lower case sensitive = No preserve case = Yes short preserve case = Yes mangle case = No mangling char = ~ hide dot files = Yes delete veto files = No veto files = hide files = veto oplock files = map system = No map hidden = No map archive = Yes mangled names = Yes mangled map = browseable = Yes blocking locks = Yes fake oplocks = No locking = Yes oplocks = Yes level2 oplocks = No oplock contention limit = 2 strict locking = No share modes = Yes copy = include = exec = preexec close = No postexec = root preexec = root preexec close = No root postexec = available = Yes volume = fstype = NTFS set directory = No wide links = Yes follow symlinks = Yes dont descend = magic script = magic output = delete readonly = No dos filetimes = No dos filetime resolution = No fake directory create times = No [homes] comment = Home Directories read only = No create mask = 0750 [printers] comment = All Printers path = /var/spool/samba print ok = Yes browseable = No [tmp] comment = Temporary File space path = /tmp read only = No guest ok = Yes [projects] comment = Development Projects path = /home/projects read only = No create mask = 0750 [d] path = /home/the_d_drive read only = No [RPM_Updates] comment = Updates for RPM Packages path = /var/lib/rpm/updates write list = @development read only = No [netlogon] comment = logon share path = /netlogon From M.hoeneveld at hes-rdam.nl Mon Apr 9 09:33:04 2001 From: M.hoeneveld at hes-rdam.nl (Maurice Hoeneveld) Date: Tue Dec 2 02:34:10 2003 Subject: PAM on Solaris experiences The next steps? Message-ID: <5.0.2.1.2.20010409112102.00a71600@mntm.hes-rdam.nl> Hello all, After some hints and wise words from Steve Langasek I started to experiment this morning with my ProFTP on Solaris using PAM to lookup the username/password on the NT domain At least I don't have the errors from before anymore but I still can't get in. I do use the pam.conf as listed below and my pam_smb.conf holds the next lines HESDOMNT HESNT01 SMSNT01 When I start ProFTP in debugmode I see the message; -- received: USER testuser -- no supplemental groups found for user 'testuser' -- received: PASS (hidden) -- no supplemental groups found for user 'testuser' -- PAM(testuser): No account present for user. -- USER testuser (Login failed): No such user found. It looks to me that PAM doesn't check the NT domain for validation. When I change pam.conf to use the local shadow database and I create a unix user everything works well. Any help or hint is welcome again. A part of my pam.conf; #ident "@(#)pam.conf 1.19 95/11/30 SMI" # # PAM configuration # # Authentication management # # for ProFTPd ftp auth required /usr/lib/security/pam_smb_auth.so.1 nolocal debug ftp session required /usr/lib/security/pam_smb_auth.so.1 nolocal debug At 09:02 06-04-2001 +0200, you wrote: >Hello all, > >I hope there is a wise guy out there who can hep us out. >Im busy with the installation of a Solaris 7 (intel) machine which is >memeber of a NT domain and also can be used from outside the campus >using ftp (ProFTP) > >One of my questions is >Has anyone experiences with running PAM on Solaris for the NT user validation > >The samba part I installed runs fine. Im able to share 6000 home >directories where the user is verified against the NT domain. >I also installed ProFTP which I want to use with the pam_smb_auth >module (which I downloaded from samba.org. and compiled it with the -lpam >linker option) and configured pam.conf to >use pam_smb_auth.so.1 as module for ftp authentication. > >The problem is a user which is * in /etc/passwd. >I can see (when I start Proftp in debug mode) that Pam is invoked to >verify the username but the user can not be found. >Logging from ProFTP as follows; > >-- received: USER testuser >-- no supplemental groups found for user 'testuser' >-- received: PASS (hidden) >-- no supplemental groups found for user 'testuser' >-- PAM(testuser): Symbol not found >-- USER testuser (Login failed): No such user found. > >When I check de system messages I see the following; > >-- proftpd[3946]: load_modules: pam_sm_acct_mgmt() missing > >Can anybody give me a hint. >It looks like I need some extra options for compiling the pam_auth >module. But probably it is an other problem. > >Any help is appreciated >Thanks for your time > > > > > >Maurice Hoeneveld >Technical System Engineer >E-mail : m.hoeneveld@hes-rdam.nl > >Hogeschool voor Economische Studies >Kralingse Zoom 91 >Postbus 4030 >3006 AA Rotterdam >The Netherlands Maurice Hoeneveld Technical System Engineer E-mail : m.hoeneveld@hes-rdam.nl Hogeschool voor Economische Studies Kralingse Zoom 91 Postbus 4030 3006 AA Rotterdam The Netherlands From mhaney at info4cars.com Mon Apr 9 12:47:43 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:10 2003 Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation In-Reply-To: <001401c0c0d6$0666ab20$cf01020a@perfectdomain.perfectimage.co.uk> Message-ID: Hold up a second. Don't reinstall NT unless you can figure out what the deal is with Samba. I mean, if you can't login with the NT box running, blowing that box away isn't going to fix the problem. The problem is with one of the other 2 boxes. There are 2 things I don't see in here. Is the logon.bat file in the \netlogon share of the _samba_ box now? Or is it still on the NT box? This _is_ rather important. :) Second, do you have the 98 box setup to login to the new Samba based domain? I know that's a rather silly one at this stage, but I don't recal that ever being explicitly said so I needed to ask to make sure. I have 2 possible explanations for this, which I have, as yet, been unable to test. One is the possibility that the Samba box _still_ thinks it's part of the NT domain and redirects the credentials to the NT box. Although, to be honest, I have never seen this problem before as most of the time the Samba server that replaces the NT server isn't a member of the domain first. It's just installed on the network as the PDC. So, I don't know that that has ever been tested. (Surely someone has done that, but I haven't.) I do not think this the likely issue here. The Win98 box is almost certainly the problem. Win9x barely logs in to an NT domain, much less moving to a new domain from an old one. Best way to diagnose this one is with a packet sniffer and look at the SMB calls made by the client. I can't tell you how many times I have had to uninstall TCP/IP (and in some cases the NIC driver as well) on a Win9x client in order to get it moved, or added, to a domain. Because 9x is more or less a hamstrung version of NT (in fact it was _never_ designed to be used in a business environment where you would encounter NT domains), it caches and stores alot of stuff. In the case of NT workstation, if the PDC isn't available, it will search for a BDC. This is also true of 9x but isn't as reliable. There may be a reg hack that will fix the caching problem by fluching all that data out, but I haven't found it and pulling all the networking components and re-installing them have _always_ worked. I would try that in stead of blowing away your NT box. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Jet Set Willy Sent: Monday, April 09, 2001 5:18 AM To: McEldowney, Michael; 'Mark Haney'; samba-ntdom@samba.org Subject: Re: (Was Caution Stoopid Newbie) - A better (Longer) explanation Well this problem just gets stranger and stranger.... I hate to say it and I am very sorry about it but I strongly suspect that it wasn't *quite* as broken as I thought. However there is definitely something strange going on and I reckon it is a combination of the messages that have been kindly suggested by everyone. The samba machine *is* "logging" me in. I have remembered to bring along my smb.conf and from this you can see my logon script is called logon.bat (showing my ms background) all this does is echo a whole load of lines so I can check if it is being run or not - it is ! However this only works if I have the original NT machine switched on (remember the first thing I did was turn it off ?) if I have the NT machine turned off it won't allow logins at all - comes up with the can't find the domain server etc etc message. Boot up the NT machine and the samba machine is immediatly happy and allows logins. So it looks like the samba machine is still somehow tied in with the original NT PDC. Thus tonights bonus task will be : Formating and reinstalling the NT machine as a standalone within the domain. Unless anyone knows better ? Just for information here is my smb.conf file - don't really know which are the important bits so I'm afraid this is everything with one note - I do have two nw cards and eth1 card is the one on the network ( the other is in preparation for cable modem) # Samba config file created using SWAT # from UNKNOWN (0.0.0.0) # Date: 2001/04/08 14:39:01 # Global parameters [global] workgroup = MYDOMAIN netbios name = My Machine netbios aliases = first second server string = Its the linux box! interfaces = eth1 bind interfaces only = No security = USER encrypt passwords = Yes update encrypted = No allow trusted domains = Yes hosts equiv = min passwd length = 5 map to guest = Never null passwords = No password server = smb passwd file = /etc/smbpasswd root directory = / passwd program = /bin/passwd passwd chat = *new*password* %n\n *new*password* %n\n *changed* passwd chat debug = No username map = /etc/user.map password level = 0 username level = 0 unix password sync = No restrict anonymous = No use rhosts = No log level = 0 syslog = 1 syslog only = No log file = /var/log/samba/log.%m max log size = 50 timestamp logs = Yes debug hires timestamp = No debug pid = No debug uid = No protocol = NT1 read bmpx = No read raw = Yes write raw = Yes nt smb support = Yes nt pipe support = Yes nt acl support = Yes announce version = 4.2 announce as = NT max mux = 50 max xmit = 65535 name resolve order = lmhosts host wins bcast max packet = 65535 max ttl = 259200 max wins ttl = 518400 min wins ttl = 21600 time server = No change notify timeout = 60 deadtime = 0 getwd cache = Yes keepalive = 300 lpq cache time = 10 max disk size = 0 max open files = 10000 read prediction = No read size = 16384 shared mem size = 1048576 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 stat cache size = 50 load printers = Yes printcap name = /etc/printcap printer driver file = /etc/printers.def strip dot = No character set = mangled stack = 50 coding system = client code page = 850 stat cache = Yes domain groups = domain admin group = domain guest group = domain admin users = domain guest users = machine password timeout = 604800 add user script = delete user script = logon script = logon.bat logon path = logon drive = logon home = domain logons = Yes os level = 65 lm announce = Auto lm interval = 60 preferred master = Yes local master = Yes domain master = Yes browse list = Yes dns proxy = Yes wins proxy = No wins server = wins support = Yes wins hook = kernel oplocks = Yes ole locking compatibility = Yes oplock break wait time = 10 smbrun = /usr/bin/smbrun config file = preload = lock dir = /var/lock/samba default service = message command = dfree command = valid chars = remote announce = remote browse sync = socket address = 0.0.0.0 homedir map = time offset = 0 unix realname = No NIS homedir = No panic action = comment = path = alternate permissions = No revalidate = No username = guest account = nobody invalid users = valid users = admin users = read list = write list = force user = force group = read only = Yes create mask = 0744 force create mode = 00 security mask = -1 force security mode = -1 directory mask = 0755 force directory mode = 00 directory security mask = -1 force directory security mode = -1 guest only = No guest ok = No only user = No hosts allow = hosts deny = status = Yes max connections = 0 min print space = 0 strict sync = No sync always = No print ok = No postscript = No printing = bsd print command = lpr -r -P%p %s lpq command = lpq -P%p lprm command = lprm -P%p %j lppause command = lpresume command = queuepause command = queueresume command = printer name = printer driver = NULL printer driver location = default case = lower case sensitive = No preserve case = Yes short preserve case = Yes mangle case = No mangling char = ~ hide dot files = Yes delete veto files = No veto files = hide files = veto oplock files = map system = No map hidden = No map archive = Yes mangled names = Yes mangled map = browseable = Yes blocking locks = Yes fake oplocks = No locking = Yes oplocks = Yes level2 oplocks = No oplock contention limit = 2 strict locking = No share modes = Yes copy = include = exec = preexec close = No postexec = root preexec = root preexec close = No root postexec = available = Yes volume = fstype = NTFS set directory = No wide links = Yes follow symlinks = Yes dont descend = magic script = magic output = delete readonly = No dos filetimes = No dos filetime resolution = No fake directory create times = No [homes] comment = Home Directories read only = No create mask = 0750 [printers] comment = All Printers path = /var/spool/samba print ok = Yes browseable = No [tmp] comment = Temporary File space path = /tmp read only = No guest ok = Yes [projects] comment = Development Projects path = /home/projects read only = No create mask = 0750 [d] path = /home/the_d_drive read only = No [RPM_Updates] comment = Updates for RPM Packages path = /var/lib/rpm/updates write list = @development read only = No [netlogon] comment = logon share path = /netlogon From andre.doehn at econia.com Mon Apr 9 13:03:56 2001 From: andre.doehn at econia.com (andre.doehn@econia.com) Date: Tue Dec 2 02:34:10 2003 Subject: failed to marshall using 2.2a3 Message-ID: hi list, iam getting an error in log.smdb smbd[8972]: rpc_server/srv_netlog.c:api_net_sam_logon(177) smbd[8972]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. smbd[8972]: rpc_server/srv_pipe.c:api_rpcTNP(1199) smbd[8972]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. what does it mean? the samba pdc based on linux 2.2.18 works very fine but iam getting this error in the log. thnx! andre From MMcEldowney at deltaregional.com Mon Apr 9 13:45:45 2001 From: MMcEldowney at deltaregional.com (McEldowney, Michael) Date: Tue Dec 2 02:34:10 2003 Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation Message-ID: I concur with Mark. Don't blow away your NT box yet. That's premature, and I don't think it will help in this case. One more question, what is the name of the domain that your NT box is PDC of? Is it "MYDOMAIN" as well, or something different? If it's different, have you changed the 98 box to log on to "MYDOMAIN" in the Network settings? If all of that looks right to you, then I would suggest taking Mark's advice and blow away your Win98 network settings, reboot, then reinstall them. I too have had to resort to this as the only way to make a Win98 box accept changes. Mike > -----Original Message----- > From: Mark Haney [mailto:mhaney@info4cars.com] > Sent: Monday, April 09, 2001 7:48 AM > To: Jet Set Willy; McEldowney, Michael; samba-ntdom@samba.org > Subject: RE: (Was Caution Stoopid Newbie) - A better (Longer) > explanation > > > Hold up a second. Don't reinstall NT unless you can figure > out what the > deal is with Samba. I mean, if you can't login with the NT > box running, > blowing that box away isn't going to fix the problem. The > problem is with > one of the other 2 boxes. > > There are 2 things I don't see in here. Is the logon.bat file in the > \netlogon share of the _samba_ box now? Or is it still on > the NT box? This > _is_ rather important. :) > Second, do you have the 98 box setup to login to the new > Samba based domain? > I know that's a rather silly one at this stage, but I don't > recal that ever > being explicitly said so I needed to ask to make sure. > > I have 2 possible explanations for this, which I have, as > yet, been unable > to test. One is the possibility that the Samba box _still_ > thinks it's part > of the NT domain and redirects the credentials to the NT box. > Although, to > be honest, I have never seen this problem before as most of > the time the > Samba server that replaces the NT server isn't a member of > the domain first. > It's just installed on the network as the PDC. So, I don't > know that that > has ever been tested. (Surely someone has done that, but I > haven't.) I do > not think this the likely issue here. > > The Win98 box is almost certainly the problem. Win9x barely > logs in to an > NT domain, much less moving to a new domain from an old one. > Best way to > diagnose this one is with a packet sniffer and look at the > SMB calls made by > the client. I can't tell you how many times I have had to > uninstall TCP/IP > (and in some cases the NIC driver as well) on a Win9x client > in order to get > it moved, or added, to a domain. Because 9x is more or less a > hamstrung > version of NT (in fact it was _never_ designed to be used in > a business > environment where you would encounter NT domains), it caches > and stores alot > of stuff. In the case of NT workstation, if the PDC isn't > available, it > will search for a BDC. This is also true of 9x but isn't as reliable. > There may be a reg hack that will fix the caching problem by > fluching all > that data out, but I haven't found it and pulling all the networking > components and re-installing them have _always_ worked. I > would try that in > stead of blowing away your NT box. > > > -----Original Message----- > From: samba-ntdom-admin@lists.samba.org > [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Jet Set Willy > Sent: Monday, April 09, 2001 5:18 AM > To: McEldowney, Michael; 'Mark Haney'; samba-ntdom@samba.org > Subject: Re: (Was Caution Stoopid Newbie) - A better (Longer) > explanation > > > Well this problem just gets stranger and stranger.... > I hate to say it and I am very sorry about it but I strongly > suspect that it wasn't *quite* as broken as I thought. > However there is definitely something strange going > on and I reckon it is a combination of the messages > that have been kindly suggested by everyone. > > The samba machine *is* "logging" me in. I have remembered > to bring along my smb.conf and from this you can see my > logon script is called logon.bat (showing my ms background) > all this does is echo a whole load of lines so I can check > if it is being run or not - it is ! However this only works > if I have the original NT machine switched on (remember > the first thing I did was turn it off ?) if I have the NT machine > turned off it won't allow logins at all - comes up with the > can't find the domain server etc etc message. Boot up > the NT machine and the samba machine is immediatly > happy and allows logins. So it looks like the samba machine > is still somehow tied in with the original NT PDC. > > Thus tonights bonus task will be : Formating and reinstalling > the NT machine as a standalone within the domain. > > Unless anyone knows better ? > > Just for information here is my smb.conf file - don't really know > which are the important bits so I'm afraid this is everything with > one note - I do have two nw cards and eth1 card is the one > on the network ( the other is in preparation for cable modem) > > # Samba config file created using SWAT > # from UNKNOWN (0.0.0.0) > # Date: 2001/04/08 14:39:01 > > # Global parameters > [global] > workgroup = MYDOMAIN > netbios name = My Machine > netbios aliases = first second > server string = Its the linux box! > interfaces = eth1 > bind interfaces only = No > security = USER > encrypt passwords = Yes > update encrypted = No > allow trusted domains = Yes > hosts equiv = > min passwd length = 5 > map to guest = Never > null passwords = No > password server = > smb passwd file = /etc/smbpasswd > root directory = / > passwd program = /bin/passwd > passwd chat = *new*password* %n\n *new*password* %n\n *changed* > passwd chat debug = No > username map = /etc/user.map > password level = 0 > username level = 0 > unix password sync = No > restrict anonymous = No > use rhosts = No > log level = 0 > syslog = 1 > syslog only = No > log file = /var/log/samba/log.%m > max log size = 50 > timestamp logs = Yes > debug hires timestamp = No > debug pid = No > debug uid = No > protocol = NT1 > read bmpx = No > read raw = Yes > write raw = Yes > nt smb support = Yes > nt pipe support = Yes > nt acl support = Yes > announce version = 4.2 > announce as = NT > max mux = 50 > max xmit = 65535 > name resolve order = lmhosts host wins bcast > max packet = 65535 > max ttl = 259200 > max wins ttl = 518400 > min wins ttl = 21600 > time server = No > change notify timeout = 60 > deadtime = 0 > getwd cache = Yes > keepalive = 300 > lpq cache time = 10 > max disk size = 0 > max open files = 10000 > read prediction = No > read size = 16384 > shared mem size = 1048576 > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > stat cache size = 50 > load printers = Yes > printcap name = /etc/printcap > printer driver file = /etc/printers.def > strip dot = No > character set = > mangled stack = 50 > coding system = > client code page = 850 > stat cache = Yes > domain groups = > domain admin group = > domain guest group = > domain admin users = > domain guest users = > machine password timeout = 604800 > add user script = > delete user script = > logon script = logon.bat > logon path = > logon drive = > logon home = > domain logons = Yes > os level = 65 > lm announce = Auto > lm interval = 60 > preferred master = Yes > local master = Yes > domain master = Yes > browse list = Yes > dns proxy = Yes > wins proxy = No > wins server = > wins support = Yes > wins hook = > kernel oplocks = Yes > ole locking compatibility = Yes > oplock break wait time = 10 > smbrun = /usr/bin/smbrun > config file = > preload = > lock dir = /var/lock/samba > default service = > message command = > dfree command = > valid chars = > remote announce = > remote browse sync = > socket address = 0.0.0.0 > homedir map = > time offset = 0 > unix realname = No > NIS homedir = No > panic action = > comment = > path = > alternate permissions = No > revalidate = No > username = > guest account = nobody > invalid users = > valid users = > admin users = > read list = > write list = > force user = > force group = > read only = Yes > create mask = 0744 > force create mode = 00 > security mask = -1 > force security mode = -1 > directory mask = 0755 > force directory mode = 00 > directory security mask = -1 > force directory security mode = -1 > guest only = No > guest ok = No > only user = No > hosts allow = > hosts deny = > status = Yes > max connections = 0 > min print space = 0 > strict sync = No > sync always = No > print ok = No > postscript = No > printing = bsd > print command = lpr -r -P%p %s > lpq command = lpq -P%p > lprm command = lprm -P%p %j > lppause command = > lpresume command = > queuepause command = > queueresume command = > printer name = > printer driver = NULL > printer driver location = > default case = lower > case sensitive = No > preserve case = Yes > short preserve case = Yes > mangle case = No > mangling char = ~ > hide dot files = Yes > delete veto files = No > veto files = > hide files = > veto oplock files = > map system = No > map hidden = No > map archive = Yes > mangled names = Yes > mangled map = > browseable = Yes > blocking locks = Yes > fake oplocks = No > locking = Yes > oplocks = Yes > level2 oplocks = No > oplock contention limit = 2 > strict locking = No > share modes = Yes > copy = > include = > exec = > preexec close = No > postexec = > root preexec = > root preexec close = No > root postexec = > available = Yes > volume = > fstype = NTFS > set directory = No > wide links = Yes > follow symlinks = Yes > dont descend = > magic script = > magic output = > delete readonly = No > dos filetimes = No > dos filetime resolution = No > fake directory create times = No > > [homes] > comment = Home Directories > read only = No > create mask = 0750 > > [printers] > comment = All Printers > path = /var/spool/samba > print ok = Yes > browseable = No > > [tmp] > comment = Temporary File space > path = /tmp > read only = No > guest ok = Yes > > [projects] > comment = Development Projects > path = /home/projects > read only = No > create mask = 0750 > > [d] > path = /home/the_d_drive > read only = No > > [RPM_Updates] > comment = Updates for RPM Packages > path = /var/lib/rpm/updates > write list = @development > read only = No > > [netlogon] > comment = logon share > path = /netlogon > > > > > > > > From Heath.Goebel at trw.com Mon Apr 9 13:56:28 2001 From: Heath.Goebel at trw.com (Heath Goebel) Date: Tue Dec 2 02:34:10 2003 Subject: Trouble with my Hood References: <3ACDD6D4.C7CC75D@trw.com> <3ACE41AC.C1AAB540@tpgi.com.au> Message-ID: <3AD1BF8B.80EE99AE@trw.com> eirvine wrote: > Hi Heath, > > Heath Goebel wrote: > > > > I hope this is the correct mailing list. If not, I'm sure that someone > > will let me know. > > > > I'm having trouble getting all of my Samba servers into my Network > > Neighborhood. > > > > I have Samba 2.0.7 running on two Sun servers and they both appear in > > the Network Neighborhood and are accessable without any problems. I have > > Samba 2.0.7 running on one Silicon Graphics server. When I first > > installed it, I was able to get it added to the Network Neighborhood. > > But, it subsequently fell out and no longer appears in the Network > > Neighborhood although it is accessable using Find Computer. I'm not sure > > why. The best clue is the following error message in my log.nmb: > > > > nmbd/nmbd_nameregister.c(109): > > register_name_response: server at IP 129.193.133.5 reject our name > > registration of STING<00> with error code 6. > > > This may be obvious, but how many samba servers are set up to be > the PDC? > None of the Samba servers are setup to be the PDC. The PDC is a Windows NT Server. From jsw at manic-miner.freeserve.co.uk Mon Apr 9 14:49:03 2001 From: jsw at manic-miner.freeserve.co.uk (Jet Set Willy) Date: Tue Dec 2 02:34:10 2003 Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation References: Message-ID: <003b01c0c104$45b20b20$cf01020a@perfectdomain.perfectimage.co.uk> > Hold up a second. Don't reinstall NT unless you can figure out what the > deal is with Samba. I mean, if you can't login with the NT box running, > blowing that box away isn't going to fix the problem. The problem is with > one of the other 2 boxes. ok - I will sit tight for now > > There are 2 things I don't see in here. Is the logon.bat file in the > \netlogon share of the _samba_ box now? Or is it still on the NT box? This > _is_ rather important. :) ok - def on the samba box - in the dir that I specified in the netlogon share. I'm certain its being called as I put lots of echo lines in (ie 100) so that I could see as the 98 machine logged on (diddn't know how to pause the file) > Second, do you have the 98 box setup to login to the new Samba based domain? > I know that's a rather silly one at this stage, but I don't recal that ever > being explicitly said so I needed to ask to make sure. Well from the past week or so I don't I think that you should be worried about asking me silly questions if anything it should be me worrying about asking you :-) it is logging into the Samba based domain - however this domain is the one the NT box used to be PDC for ( remember I changed the domain name on the NT box - hours before getting the message not to..... ) now the NT machine is in the domain "MyDomain2" while the samba machine is "MyDomain" problem being the NT machine used to be PDC for "MyDomain" hence me thinking there was still some link between the two machines and wanting to reformat the NT box > I have 2 possible explanations for this, which I have, as yet, been unable > to test. One is the possibility that the Samba box _still_ thinks it's part > of the NT domain and redirects the credentials to the NT box. Although, to > be honest, I have never seen this problem before as most of the time the > Samba server that replaces the NT server isn't a member of the domain first. > It's just installed on the network as the PDC. So, I don't know that that > has ever been tested. (Surely someone has done that, but I haven't.) I do > not think this the likely issue here. hmmm. I think it might be the issue - this sounds as though it might fit in with what I have done :-( I had the samba server as part of the domain that was controlled by the NT box (and was working fine copying files around etc), I then changed the domain name on NT and finally changed the smb.conf file to inlclude the PDC stuff. Just as an aside here in reply to Michaels question in his email that I have pasted below.... > One more question, what is > the name of the domain that your NT box is PDC of? Is it "MYDOMAIN" as > well, or something different? If it's different, have you changed the > 98 box to log on to "MYDOMAIN" in the Network settings? ...NT is now PDC for MyDomain2 while my 98 machine hasn't changed it still trys to login to MyDomain. I haven't tried to log in to MyDomain2 which I guess I should and will try tonight first. Following that I'll trash the tcp/ip and network settings on the 98 machine as you both suggest. Thanks again for your help ! JSW From mdmontazer at confluencewatersports.com Mon Apr 9 15:08:28 2001 From: mdmontazer at confluencewatersports.com (Mark Montazer) Date: Tue Dec 2 02:34:10 2003 Subject: Logon Oddities Message-ID: <000001c0c106$ef3b4f60$3600a8c0@confluencewatersports.com> First off, I'd like to say thanks for all the great replies posted to this group. I've forgone posting up until now because of them. Here's some information regarding my setup and configurations: PDC: Samba 22a3 O/S: Linux Mandrake 7.2 / Kernel 2.2.17 Client(s): W2K PRO (Both are identical machines) Problem: 1 machine is not reading the logon script. I am currently testing samba's support of 2 W2K clients, and after a few early problems, things appear to be running smooth, with one exception. 1 of the PC's can logon as expected (drives mapped properly), but the other refuses to read the logon script and have its home directory mapped to anything but Z:. If I make a modification to the logon script, the first PC picks-up the changes, but the second PC doesn't. I'm not seeing any errors in the logfiles coinciding with the times and dates of logons, so I'm a little stumped. I've checked the /etc/passwd for a machine name as well as a username for both machines, but there appear to be no differences, except the names of course. I have also checked the /usr/local/samba/private/smbpasswd as well with the same results. My goal: To have drive H: on both machines mapped to its particular home directory and drive I: on both machines mapped to a single shared folder. Here is my current logon script (I've tried seperate logon scripts for each user as well as symlinks to a master with no results): --------------------------------------------------------------------- net time \\SERVER /set /yes @echo off if %OS%.==Windows_NT. goto WinNT :Win95 net use j: \\SERVER\infosys goto end :WinNT net use j: \\SSERVER\infosys /persistent:no :end --------------------------------------------------------------------- I have also specified that drive H: be my logon drive, while one picks-it-up, the other doesn't. I have specified that intentionally left the logon path blank to prevent profiles from being written. Here is my config file: --------------------------------------------------------------------- [global] workgroup = TESTSERVER netbios name = SERVER server string = Confluence Watersports PDC encrypt passwords = Yes log file = /var/log/samba/log.%m time server = Yes domain admin group = @adm add user script = "/usr/sbin/adduser -n -g machines -c Machine -d /dev/null" logon script = scripts\%U.bat logon path = domain logons = Yes os level = 65 guest account = ftp share modes = No logon drive = q: [homes] read only = No create mask = 0600 directory mask = 0770 map hidden = Yes browseable = No locking = No [netlogon] path = /usr/local/samba/netlogon map hidden = Yes browseable = No [infosys] comment = Information Systems path = /export/infosys valid users = @infosys read only = No create mask = 0660 directory mask = 0770 map hidden = Yes browseable = No [print$] path = /usr/local/samba/printers write list = @adm guest ok = Yes The only error reported by Samba is: lib/util_sock.c:read_socket_data(479) read_socket_data: recv failure for 4. Error = Connection reset by peer But this error was only reported once today a few hours ago, and I've tried multiple logon configurations since. Any and all help is appreciated. Thanks, Mark From greg at kwikfind.com Mon Apr 9 15:13:58 2001 From: greg at kwikfind.com (Greg J. Zartman) Date: Tue Dec 2 02:34:10 2003 Subject: Using 2.0.7 vs. 2.2.0-alpha3 References: <3AD0F14C.49AA0F2C@ntm.org.pg> Message-ID: <0c1401c0c107$b42af5a0$6f00a8c0@logeng.net> Dan, Have a look at this article (http://www.programmers.net/mirrors/lg/issue29/coldiron.html ). This is what convinced me to switch me Win2000 server to Samba (that and the fact that I was always rebooting and/or restarting services on the Win2000 machine). In my opinion, Samba 2.2 is alpha in name only. I'm currently running it on Mandrake Linux 7.2 on a mixed windows client network (80% win2000, 10% Win NT 4.0, 10% Win 98). I'm being completely honest in saying that I haven't had a problem one with the software, other than mistakes I made in configuring the system. In fact, my new Linux server has been up and running, without a reboot, for almost two months now. One thing that I'm finding in using Samba is that you have to be a little creative in setting up a Windows network. For the most part, I'm using a pretty basic configuration. I haven't spend the time to learn how to implement some of the more "advanced" domain functionality currently being worked on in Samba. One example would be the ability to modify directory/file security settings using the "point and click" method (i.e., right click on a directory and modify the groups and/or users that have access rights). At some point I'll get this working, but for the time being, I simply goto the Linux box and modify security settings from there. One thing to be aware of with Samba is that you shouldn't expect to get all of the "bells and whistles" that a Windows setup will offer (especially Win2000). Win 2000 offers alot in the way of utilities through MMC for administering just about everything on your network (some of which can be a little dangerous if you're not careful. Alot of this stuff is "neat" and I thought I would it going to Samba, but I haven't. Samba is a very stable, fast, and easy to maintain setup. I couldn't be more pleased with my decision to switch. If you do decide to switch, drop me an email. I may be able to offer some advice that could speed your setup time. Good luck. Greg ----- Original Message ----- From: "Dan Perik" To: Sent: Sunday, April 08, 2001 4:16 PM Subject: Using 2.0.7 vs. 2.2.0-alpha3 > > Hello, > > I'm working on evaluating Linux/Samba for use in our organization, and I > need some input. We have roughly 70 clients on our network, which are > either Win9x or WinNT/2000. We are currently using Novell Netware 4.x > for our file server/print server/etc.. We now have 2 Win 2000 servers > dedicated to our soon-to-be implemented accounting system. And we have > Linux hosting our e-mail and everything to do with it. We're looking at > simplifying our system, which will most likely mean dropping the Novell > system. So I'm evaluating using Linux/Samba vs. Win 2000 as our > file/print server. Since we have WinNT/2000 clients, and I'm needing > domain logins, I believe I need to run 2.2.0. But it's alpha. If I > can't have domain logins for WinNT/2000 clients, we may have to decide > to go Win2000 as our file server (much to my dismay). So my question is > how alpha is 2.2.0-alpha3? Is it stable enough to trust our file > serving to for all our operations? I mainly need the domain logins for > logon scripts and possibly roaming profiles under WinNT/2000. I also > need the ease of creating machine accounts automatically (which I just > got working yesterday). Basically, in order to prove to the other guys > that I'm working with that we should go Linux/Samba instead of Win2000, > I have to prove that it's stable, easy to administer, and works well. > What can you tell me? > > - Dan Perik > > -- > - Dan Perik > Computer Services Department > Lapilo Center > New Tribes Mission - PNG > > > > > > From mhaney at info4cars.com Mon Apr 9 15:17:54 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:10 2003 Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation In-Reply-To: <003b01c0c104$45b20b20$cf01020a@perfectdomain.perfectimage.co.uk> Message-ID: >>it is logging into the Samba based domain - however this domain is the one >>the >>NT box used to be PDC for ( remember I changed the >>domain name on the NT box - hours before getting the message not o..... ) >>now the NT machine is in the domain "MyDomain2" while the samba machine >>is "MyDomain" problem being the NT machine used to be PDC for "MyDomain" >>hence me thinking there was still some link between the two machines and >>wanting to reformat the NT box Ah, now I see the issue. Don't do that. It will make 98 look for the IP address of the last known domain controller, as well as the SID for that controller, if memory serves me. Removing the networking components will most certainly fix that, however, why don't you try making the samba domain name different? It's easier than changing the domain on an NT box and is much less messier. :) Also, make sure you change the domain the 98 box is logging in to. Test that and see if you can log in. That way you don't have to go thru the mess of re-installing components. HOpe this helps. -----Original Message----- From: Jet Set Willy [mailto:jsw@manic-miner.freeserve.co.uk] Sent: Monday, April 09, 2001 10:49 AM To: Mark Haney; McEldowney, Michael; samba-ntdom@samba.org Subject: Re: (Was Caution Stoopid Newbie) - A better (Longer) explanation > Hold up a second. Don't reinstall NT unless you can figure out what the > deal is with Samba. I mean, if you can't login with the NT box running, > blowing that box away isn't going to fix the problem. The problem is with > one of the other 2 boxes. ok - I will sit tight for now > > There are 2 things I don't see in here. Is the logon.bat file in the > \netlogon share of the _samba_ box now? Or is it still on the NT box? This > _is_ rather important. :) ok - def on the samba box - in the dir that I specified in the netlogon share. I'm certain its being called as I put lots of echo lines in (ie 100) so that I could see as the 98 machine logged on (diddn't know how to pause the file) > Second, do you have the 98 box setup to login to the new Samba based domain? > I know that's a rather silly one at this stage, but I don't recal that ever > being explicitly said so I needed to ask to make sure. Well from the past week or so I don't I think that you should be worried about asking me silly questions if anything it should be me worrying about asking you :-) it is logging into the Samba based domain - however this domain is the one the NT box used to be PDC for ( remember I changed the domain name on the NT box - hours before getting the message not to..... ) now the NT machine is in the domain "MyDomain2" while the samba machine is "MyDomain" problem being the NT machine used to be PDC for "MyDomain" hence me thinking there was still some link between the two machines and wanting to reformat the NT box > I have 2 possible explanations for this, which I have, as yet, been unable > to test. One is the possibility that the Samba box _still_ thinks it's part > of the NT domain and redirects the credentials to the NT box. Although, to > be honest, I have never seen this problem before as most of the time the > Samba server that replaces the NT server isn't a member of the domain first. > It's just installed on the network as the PDC. So, I don't know that that > has ever been tested. (Surely someone has done that, but I haven't.) I do > not think this the likely issue here. hmmm. I think it might be the issue - this sounds as though it might fit in with what I have done :-( I had the samba server as part of the domain that was controlled by the NT box (and was working fine copying files around etc), I then changed the domain name on NT and finally changed the smb.conf file to inlclude the PDC stuff. Just as an aside here in reply to Michaels question in his email that I have pasted below.... > One more question, what is > the name of the domain that your NT box is PDC of? Is it "MYDOMAIN" as > well, or something different? If it's different, have you changed the > 98 box to log on to "MYDOMAIN" in the Network settings? ...NT is now PDC for MyDomain2 while my 98 machine hasn't changed it still trys to login to MyDomain. I haven't tried to log in to MyDomain2 which I guess I should and will try tonight first. Following that I'll trash the tcp/ip and network settings on the 98 machine as you both suggest. Thanks again for your help ! JSW From pascal.leger at storagetelecom.com Mon Apr 9 16:36:19 2001 From: pascal.leger at storagetelecom.com (Pascal Leger) Date: Tue Dec 2 02:34:10 2003 Subject: LDAP & Mac Message-ID: <005d01c0c113$349e41a0$270a010a@pleger> Hello, My first question is about LDAP: Is it possible to connect our samba server to an LDAP directory (Windows2000)? 2nd question. What is the best solution to serve mac users? Thanks in advance Pascal LEGER Architecte Stockage +33 (0)1 44 88 81 55 +33 ( 0)6 72 14 96 76 Storage Telecom http://www.storagetelecom.com -------------- next part -------------- HTML attachment scrubbed and removed From Heath.Goebel at trw.com Mon Apr 9 16:42:41 2001 From: Heath.Goebel at trw.com (Heath Goebel) Date: Tue Dec 2 02:34:10 2003 Subject: Using 2.0.7 vs. 2.2.0-alpha3 References: <3AD0F14C.49AA0F2C@ntm.org.pg> <0c1401c0c107$b42af5a0$6f00a8c0@logeng.net> Message-ID: <3AD1E675.3566B76E@trw.com> Are the ability to modify directory/file security settings using the "point and click" method part of 2.0.7 or only 2.2.0-alpha3? What configuration options control these directory/file security settings? Thanks, Heath "Greg J. Zartman" wrote: > One thing that I'm finding in using Samba is that you have to be a little > creative in setting up a Windows network. For the most part, I'm using a > pretty basic configuration. I haven't spend the time to learn how to > implement some of the more "advanced" domain functionality currently being > worked on in Samba. One example would be the ability to modify > directory/file security settings using the "point and click" method (i.e., > right click on a directory and modify the groups and/or users that have > access rights). At some point I'll get this working, but for the time > being, I simply goto the Linux box and modify security settings from there. > From damason at davenet.mine.nu Mon Apr 9 16:45:31 2001 From: damason at davenet.mine.nu (David A. Mason) Date: Tue Dec 2 02:34:10 2003 Subject: LDAP & Mac In-Reply-To: <005d01c0c113$349e41a0$270a010a@pleger> Message-ID: 1. I hear both ways - yes and no. 2. What do you need to serve to the Mac users? LDAP? Files? -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Pascal Leger Sent: Monday, April 09, 2001 09:36 To: samba-ntdom@samba.org Subject: LDAP & Mac Hello, My first question is about LDAP: Is it possible to connect our samba server to an LDAP directory (Windows2000)? 2nd question. What is the best solution to serve mac users? Thanks in advance Pascal LEGER Architecte Stockage +33 (0)1 44 88 81 55 +33 ( 0)6 72 14 96 76 Storage Telecom http://www.storagetelecom.com -------------- next part -------------- HTML attachment scrubbed and removed From jeremy at valinux.com Mon Apr 9 18:11:00 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:10 2003 Subject: 2.2 release imminent. Message-ID: <3AD1FB34.F6CA36E7@valinux.com> Well, as Andrew shouted at me again this weekend it's getting to be about that time.... :-) :-). Yep, we're thinking we should do an official 2.2 Samba release early next week, so if you have anything you can't live with, now would be a good time to tell us.... :-). It's been gestating longer than an elephant, so it's really time to let it out into the world and do its own thing :-). Feedback welcome (nay, *required* ! :-) :-). Cheers, Jeremy Allison, Samba Team. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From davecb at canada.sun.com Mon Apr 9 20:17:49 2001 From: davecb at canada.sun.com (David Collier-Brown) Date: Tue Dec 2 02:34:10 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> Message-ID: <3AD218ED.39AB153E@canada.sun.com> Jeremy Allison wrote: > Feedback welcome (nay, *required* ! :-) :-). What's a good release to put sanity-checking into loadparm.c? 2.2.2 or so? --dave -- David Collier-Brown, | Always do right. This will gratify Performance & Engineering Team | some people and astonish the rest. Americas Customer Engineering | -- Mark Twain (905) 415-2849 | davecb@canada.sun.com From gcarter at valinux.com Mon Apr 9 20:28:09 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:10 2003 Subject: LDAP & Mac In-Reply-To: <005d01c0c113$349e41a0$270a010a@pleger>; from pascal.leger@storagetelecom.com on Mon, Apr 09, 2001 at 11:36:19 -0500 References: <005d01c0c113$349e41a0$270a010a@pleger> Message-ID: <20010409152809.A20353@queso.plainjoe.org> On Mon, 09 Apr 2001 11:36:19 Pascal Leger wrote: > > My first question is about LDAP: > Is it possible to connect our samba server to an LDAP directory > (Windows2000)? Samba 2.2.0 will not have the ability to storage local account information in an LDAPv3 directory. Guessing at your intent, Samba 2.2.0 will be able to active as an NT4-style member server of a Win2k Domain using NetBIOS and ntlmv1. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From jeremy at valinux.com Mon Apr 9 18:27:16 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:11 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> <3AD218ED.39AB153E@canada.sun.com> Message-ID: <3AD1FF04.3B94A0F3@valinux.com> David Collier-Brown wrote: > > Jeremy Allison wrote: > > Feedback welcome (nay, *required* ! :-) :-). > > What's a good release to put sanity-checking > into loadparm.c? 2.2.2 or so? To be honest, that's one I really wanted in 2.2.0. I'm going to look very carefully at it and get it in if at all possible. If not, it should *definately* be there for 2.2.1 (which no doubt will follow soon after 2.2.0 :-). Jeremy., -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From ctooley at amoa.org Mon Apr 9 20:39:45 2001 From: ctooley at amoa.org (ctooley@amoa.org) Date: Tue Dec 2 02:34:11 2003 Subject: 2.2 release imminent. Message-ID: <86256A29.0070B3FB.00@amoa.org> What is the status of the 2.2 Documentation? I have seen some good documents for setting some stuff up, but was wondering if that is planned to be included in the 2.2.0 release or if it will still require hunting it down? Chris Tooley Jeremy Allison on 04/09/2001 01:27:16 PM To: David Collier-Brown cc: Samba technical , Samba NTDOM , Samba list (bcc: Chris Tooley/AMOA) Subject Re: 2.2 release imminent. : David Collier-Brown wrote: > > Jeremy Allison wrote: > > Feedback welcome (nay, *required* ! :-) :-). > > What's a good release to put sanity-checking > into loadparm.c? 2.2.2 or so? To be honest, that's one I really wanted in 2.2.0. I'm going to look very carefully at it and get it in if at all possible. If not, it should *definately* be there for 2.2.1 (which no doubt will follow soon after 2.2.0 :-). Jeremy., -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From gcarter at valinux.com Mon Apr 9 20:53:05 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:11 2003 Subject: 2.2 release imminent. In-Reply-To: <86256A29.0070B3FB.00@amoa.org> Message-ID: On Mon, 9 Apr 2001 ctooley@amoa.org wrote: > > > What is the status of the 2.2 Documentation? I have seen some good > documents for setting some stuff up, but was wondering if that is > planned to be included in the 2.2.0 release or if it will still > require hunting it down? I will include good documentation as people volunteer it :-) Send it my way. So far, the 2.2 manpages have been rewritten in SGML/DocBook. Still needs some proofreading. Also several text HOWTOs have been converted and included in docs/Samba-HOWTO-Collection.pdf. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From cwg-samba-ntdom at deepeddy.com Mon Apr 9 22:24:38 2001 From: cwg-samba-ntdom at deepeddy.com (Chris Garrigues) Date: Tue Dec 2 02:34:11 2003 Subject: 2.2 release imminent. In-Reply-To: <3AD1FB34.F6CA36E7@valinux.com> References: <3AD1FB34.F6CA36E7@valinux.com> Message-ID: <21829.986855078@deepeddy.com> > From: Jeremy Allison > Date: Mon, 09 Apr 2001 14:11:00 -0400 > > Well, as Andrew shouted at me again this weekend it's getting > to be about that time.... :-) :-). > > Yep, we're thinking we should do an official 2.2 Samba release > early next week, so if you have anything you can't live > with, now would be a good time to tell us.... > > :-). > > It's been gestating longer than an elephant, so it's really > time to let it out into the world and do its own thing :-). > > Feedback welcome (nay, *required* ! :-) :-). Does LDAP work in this forthcoming release? Chris -- Chris Garrigues http://www.DeepEddy.Com/~cwg/ virCIO http://www.virCIO.Com 4314 Avenue C Austin, TX 78751-3709 +1 512 374 0500 My email address is an experiment in SPAM elimination. For an explanation of what we're doing, see http://www.DeepEddy.Com/tms.html Nobody ever got fired for buying Microsoft, but they could get fired for relying on Microsoft. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 235 bytes Desc: not available Url : http://lists.samba.org/archive/samba-ntdom/attachments/20010409/bed8e9a6/attachment.bin From abartlet at pcug.org.au Mon Apr 9 22:27:12 2001 From: abartlet at pcug.org.au (Andrew Bartlett) Date: Tue Dec 2 02:34:11 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> Message-ID: <3AD23740.AA175D4F@bartlett.house> Jeremy Allison wrote: > > Well, as Andrew shouted at me again this weekend it's getting > to be about that time.... :-) :-). > > Yep, we're thinking we should do an official 2.2 Samba release > early next week, so if you have anything you can't live > with, now would be a good time to tell us.... Proper PAM support? Unfortunely I got rather busy with Uni, so I havn't had a chance to get my patch rewritten. The current patch however works, and has actualy had quite a bit of testing (Hawker College got my local tree when they needed Samba 2.2 :-) There is also an issue with null passwords = no being ignored again, this time in the domain logon support (rpc_server/srv_netlogon_nt.c). I am writing a patch that moves both the smbd and netlogon code into one place, with one set of rules for checking passwords and account status. I'm a little sick of this particular bug (been bitten once, don't want to be bitten again). Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au From slu at firerun.net Mon Apr 9 23:11:04 2001 From: slu at firerun.net (Patrick) Date: Tue Dec 2 02:34:11 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> Message-ID: <3AD24188.E450B403@firerun.net> Will there be support for dos/win3.11 directory listing in the 2.2.0 release? I would like to have it seems how I use dos to backup my win2k clients to my Linux Samba Raid machine. Patrick Jeremy Allison wrote: > Well, as Andrew shouted at me again this weekend it's getting > to be about that time.... :-) :-). > > Yep, we're thinking we should do an official 2.2 Samba release > early next week, so if you have anything you can't live > with, now would be a good time to tell us.... > > :-). > > It's been gestating longer than an elephant, so it's really > time to let it out into the world and do its own thing :-). > > Feedback welcome (nay, *required* ! :-) :-). > > Cheers, > > Jeremy Allison, > Samba Team. > > -- > -------------------------------------------------------- > Buying an operating system without source is like buying > a self-assembly Space Shuttle with no instructions. > -------------------------------------------------------- From dwcjr at inethouston.net Mon Apr 9 23:17:23 2001 From: dwcjr at inethouston.net (David W. Chapman Jr.) Date: Tue Dec 2 02:34:11 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> Message-ID: <013a01c0c14b$3bed76a0$931576d8@inethouston.net> What about that problem with quicken 2000 that you had me apply a patch and send you a log, I haven't heard anything about that. I'm also having a speed problem that I've been trying to figure out since 2.0.5 on FreeBSD ----- Original Message ----- From: "Jeremy Allison" To: "Samba technical" ; "Samba NTDOM" ; "Samba list" Sent: Monday, April 09, 2001 1:11 PM Subject: 2.2 release imminent. > Well, as Andrew shouted at me again this weekend it's getting > to be about that time.... :-) :-). > > Yep, we're thinking we should do an official 2.2 Samba release > early next week, so if you have anything you can't live > with, now would be a good time to tell us.... > > :-). > > It's been gestating longer than an elephant, so it's really > time to let it out into the world and do its own thing :-). > > Feedback welcome (nay, *required* ! :-) :-). > > Cheers, > > Jeremy Allison, > Samba Team. > > -- > -------------------------------------------------------- > Buying an operating system without source is like buying > a self-assembly Space Shuttle with no instructions. > -------------------------------------------------------- > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > From jeremy at valinux.com Mon Apr 9 21:22:49 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:11 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> <3AD23740.AA175D4F@bartlett.house> Message-ID: <3AD22829.CEF3A2D2@valinux.com> Andrew Bartlett wrote: > Proper PAM support? Unfortunely I got rather busy with Uni, so I havn't > had a chance to get my patch rewritten. The current patch however > works, and has actualy had quite a bit of testing (Hawker College got my > local tree when they needed Samba 2.2 :-) JohnT is working on that in the next few hours. > There is also an issue with null passwords = no being ignored again, > this time in the domain logon support (rpc_server/srv_netlogon_nt.c). Details please ? I'd like to kill this one stone dead... Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From jeremy at valinux.com Mon Apr 9 21:26:02 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:11 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> <013a01c0c14b$3bed76a0$931576d8@inethouston.net> Message-ID: <3AD228EA.32D4B50C@valinux.com> "David W. Chapman Jr." wrote: > > What about that problem with quicken 2000 that you had me apply a patch and > send you a log, I haven't heard anything about that. I'm also having a > speed problem that I've been trying to figure out since 2.0.5 on FreeBSD Is this still reproducible with the latest CVS ? I can't quickly remember the exact issue but wasn't it a permission problem ? I've fixed a share mode issue and several permsission problems between alpha3 and now. Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From jeremy at valinux.com Mon Apr 9 21:24:18 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:11 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> <3AD24188.E450B403@firerun.net> Message-ID: <3AD22882.E1404BD9@valinux.com> Patrick wrote: > > Will there be support for dos/win3.11 directory listing in the 2.2.0 > release? I would like to have it seems how I use dos to backup my win2k > clients to my Linux Samba Raid machine. Yes, I just bugged Andrew about that on the phone. It's on the list. Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From scott at pixo.com Mon Apr 9 23:58:45 2001 From: scott at pixo.com (Scott Smith) Date: Tue Dec 2 02:34:11 2003 Subject: 2.2 release imminent. In-Reply-To: <013a01c0c14b$3bed76a0$931576d8@inethouston.net> Message-ID: What is the "speed" problem you are experiencing? Scott On Mon, 9 Apr 2001, David W. Chapman Jr. wrote: > What about that problem with quicken 2000 that you had me apply a patch and > send you a log, I haven't heard anything about that. I'm also having a > speed problem that I've been trying to figure out since 2.0.5 on FreeBSD > > ----- Original Message ----- > From: "Jeremy Allison" > To: "Samba technical" ; "Samba NTDOM" > ; "Samba list" > Sent: Monday, April 09, 2001 1:11 PM > Subject: 2.2 release imminent. > > > > Well, as Andrew shouted at me again this weekend it's getting > > to be about that time.... :-) :-). > > > > Yep, we're thinking we should do an official 2.2 Samba release > > early next week, so if you have anything you can't live > > with, now would be a good time to tell us.... > > > > :-). > > > > It's been gestating longer than an elephant, so it's really > > time to let it out into the world and do its own thing :-). > > > > Feedback welcome (nay, *required* ! :-) :-). > > > > Cheers, > > > > Jeremy Allison, > > Samba Team. > > > > -- > > -------------------------------------------------------- > > Buying an operating system without source is like buying > > a self-assembly Space Shuttle with no instructions. > > -------------------------------------------------------- > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > From jbeauchamp7 at mindspring.com Tue Apr 10 00:05:53 2001 From: jbeauchamp7 at mindspring.com (James W. Beauchamp) Date: Tue Dec 2 02:34:11 2003 Subject: Newbie Questions References: Message-ID: <001c01c0c152$04e88440$1401a8c0@easypea.com> Hi my name is Brandon Caudle and i'm a newbie to samba so bare with me No problem - everyone had to start new sometime ! 1) If you are running windows 98/ME and your samba server is setup ass a domain can you make the windows 98/me run login scripts off the samba server? if you can where do i place the login scripts? I'll assume that's a typo :). Yes, the login script is run from the [Netlogon] share and gets its file name from the logon file = (can't remember the exact syntax) setting in the main part of smb.conf. 2) i have a program (access database .mdb ) and i want to place it on a samba share should i be worried or will it work just fine? I have several that work this way fine. Including all M$ applications that clients run across the network. 3)I have ghost from symantec is there any way to create a boot disk to login to the samba server and run ghost and ghost up an image? Don't know anything about this one - someone else maybe can help. 4) my samba server is set up as the wins server and it has a netbios name \\server. I can only see the server is if i type \\server and its in the same workgroup and it is set to be the browsemaster and everything except there is no computer in the Network Neighborhood that says server or has the server shares. any ideas? Wow, slightly confusing - If samba is set to be the domain master browser, with OS level =at least 64, and is set to perform domain logons = yes (this is for Win9x 'domain' logins support) and workgroup=myworkgroup, then if win9x clients are set to join the domain myworkgroup or are just members of the workgroup 'myworkgroup' then samba server should show up in Network Neightborhood. Each win9x users must have a username and password in passwd and smbpasswd for them to authenticate against Samba (unless you are using some other method like a WinNT domain or LDAP or other....) 5)is it fine to install applications to a share or will it not work correctly? See above answer... 6) how can i keep my win98/me users profiles on the server? Set up the [Profiles] share as described in various docs - this can get involved. Let's get the routine things set up first then you can work on Profiles - The archives are loaded with issues related to this. Hope this helps and forgive me if I have misspoken my facts anywhere :) thanks brandon caudle Get your FREE download of MSN Explorer at http://explorer.msn.com From boehm at nortelnetworks.com Tue Apr 10 00:35:10 2001 From: boehm at nortelnetworks.com (Eric Boehm) Date: Tue Dec 2 02:34:11 2003 Subject: 2.2 release imminent. In-Reply-To: <3AD1FF04.3B94A0F3@valinux.com>; from jeremy@valinux.com on Mon, Apr 09, 2001 at 02:27:16PM -0400 References: <3AD1FB34.F6CA36E7@valinux.com> <3AD218ED.39AB153E@canada.sun.com> <3AD1FF04.3B94A0F3@valinux.com> Message-ID: <20010409203510.A12112@zrtps04d.nortelnetworks.com> I submitted a patch to lib/util.c back in January/February. It's a rather small change that makes it possible to open more than 1014 files under Solaris, HP-UX, Linux without the need to raise the systemwide open file descriptor limit. It also preserves existing behavior if the attempt fails. --- samba-2.0.7/source/lib/util.c.~1~ Tue Apr 25 19:06:53 2000 +++ samba-2.0.7/source/lib/util.c Tue Jan 23 08:00:48 2001 @@ -3012,6 +3012,18 @@ * which always returns RLIM_INFINITY for rlp.rlim_max. */ + if ( geteuid() == 0 ) { + + if ( rlp.rlim_max < requested_max ) { + rlp.rlim_max = requested_max; + } + + if(setrlimit(RLIMIT_NOFILE, &rlp)) { + DEBUG(0,("set_maxfiles: setrlimit for RLIMIT_NOFILE for %d max files failed with error %s\n", + (int)rlp.rlim_max, strerror(errno) )); + } + } + saved_current_limit = rlp.rlim_cur = MIN(requested_max,rlp.rlim_max); if(setrlimit(RLIMIT_NOFILE, &rlp)) { -- Eric M. Boehm boehm@nortelnetworks.com From SRuth at LANDAM.com Tue Apr 10 00:45:21 2001 From: SRuth at LANDAM.com (SRuth@LANDAM.com) Date: Tue Dec 2 02:34:11 2003 Subject: Newbie Questions Message-ID: <6768A16CA846D3119104009027998CC30853FA26@lande04.landam.com> regarding question 3 I'm assuming you're trying to send an image to a share on a samba server. You should be able to do this without a problem provided you have the share set up and have write permission to the share and directory. If you're using Ghost 6.5 it has a wizard that walks you through setting up such a boot disk, too. Sven -----Original Message----- From: Brandon Caudle [mailto:bcaudle@hotmail.com] Sent: Monday, April 09, 2001 5:10 PM To: samba-ntdom@samba.org Subject: Newbie Questions Hi my name is Brandon Caudle and i'm a newbie to samba so bare with me 1) If you are running windows 98/ME and your samba server is setup ass a domain can you make the windows 98/me run login scripts off the samba server? if you can where do i place the login scripts? 2) i have a program (access database .mdb ) and i want to place it on a samba share should i be worried or will it work just fine? 3)I have ghost from symantec is there any way to create a boot disk to login to the samba server and run ghost and ghost up an image? 4) my samba server is set up as the wins server and it has a netbios name \\server . I can only see the server is if i type \\server and its in the same workgroup and it is set to be the browsemaster and everything except there is no computer in the Network Neighborhood that says server or has the server shares. any ideas? 5)is it fine to install applications to a share or will it not work correctly? 6) how can i keep my win98/me users profiles on the server? thanks brandon caudle _____ Get your FREE download of MSN Explorer at http://explorer.msn.com -------------- next part -------------- HTML attachment scrubbed and removed From gcarter at valinux.com Tue Apr 10 02:16:23 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:11 2003 Subject: 2.2 release imminent. In-Reply-To: <21829.986855078@deepeddy.com>; from cwg-dated-8004aa86db3546eb@deepeddy.com on Mon, Apr 09, 2001 at 17:24:38 -0500 References: <3AD1FB34.F6CA36E7@valinux.com> <21829.986855078@deepeddy.com> Message-ID: <20010409211623.E21234@queso.plainjoe.org> On Mon, 09 Apr 2001 17:24:38 Chris Garrigues wrote: > > Does LDAP work in this forthcoming release? LDAP work will go into a later 2.2.x release. Sorry. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From lynn at tsunami.cis.usouthal.edu Tue Apr 10 02:17:15 2001 From: lynn at tsunami.cis.usouthal.edu (Keith Lynn) Date: Tue Dec 2 02:34:11 2003 Subject: Screen Saver Message-ID: Hello everyone, I have three laboratories which have Windows NT 4.0 clients with a Samba server. I have recently purchased the Windowns NT 4.0 resource kit which contains the screen saver which will log a user out after a certain amount of inactivity. Can someone tell me how to set the screen saver for all users on a Workstation? Thanks. Keith Lynn Systems Administrator School of Computer and Information Sciences University of South Alabama Mobile, AL 36608 Phone: (334) 460-6390 Fax: (334) 460-7274 Alternative E-mail: lynn@gateway.cis.usouthal.edu URL: http://www.cis.usouthal.edu/~lynn/ From jtrostel at mindspring.com Tue Apr 10 04:14:32 2001 From: jtrostel at mindspring.com (John M Trostel) Date: Tue Dec 2 02:34:11 2003 Subject: 2.2 release imminent. Message-ID: <2.0.2-826059-227-A-OEWW@mail.mindspring.com> Jeremy Allison wrote: > From: Jeremy Allison > To: Andrew Bartlett > Subject: Re: 2.2 release imminent. > Date: Mon, 09 Apr 2001 17:22:49 -0400 > > Andrew Bartlett wrote: > > ......... >> There is also an issue with null passwords = no being ignored again, >> this time in the domain logon support (rpc_server/srv_netlogon_nt.c). > > Details please ? I'd like to kill this one stone dead... > > I don't have my "big" e-mail computer here, but wasn't there a patch for this submitted in the last few days (or at most, the last week) ? -- John M Trostel jtrostel@connex.com Linux OS Engineer Connex From dwcjr at inethouston.net Tue Apr 10 04:10:29 2001 From: dwcjr at inethouston.net (David W. Chapman Jr.) Date: Tue Dec 2 02:34:11 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> <3AD24188.E450B403@firerun.net> <3AD22882.E1404BD9@valinux.com> Message-ID: <01dc01c0c174$2e1885a0$931576d8@inethouston.net> I also posted a while ago too about my problem with smbclient that was similar to a few other people, I believe, where I couldn't get a directory listing on a 98 machine when I know I have perms and it worked with 2.0.7. From andre.doehn at econia.com Tue Apr 10 08:39:29 2001 From: andre.doehn at econia.com (andre.doehn@econia.com) Date: Tue Dec 2 02:34:11 2003 Subject: 2.2 release imminent. Message-ID: yes - there still strange things in the version 2.2 a3 that I cant get to work and I cant live with ;-)) (1) win98 password problem: i cant set a default password with a win98 client (see log), when I leave the smbpasswd emtpy i can change this to a new one??? log: smbd[10850]: smbd/chgpasswd.c:check_oem_password(785) smbd[10850]: check_oem_password: incorrect password length (1032140223). here is my global section: [global] security = user status = yes workgroup = NTDOM netbios name = cgn-pdc interfaces = eth0 lo bind interfaces only = yes server string = Samba %v running on %h wins support = yes time server = yes encrypt passwords = yes domain logons = yes domain master = yes local master = yes preferred master = yes logon script = scripts\logon.bat logon home = \\%L\homes logon path = \\%L\Profiles\%U logon drive = z: domain admin group = @adm add user script = /usr/sbin/useradd -g smbcl -c Machine -d /dev/null -s /bin/false %m share modes=no os level=65 keepalive = 60 name resolve order = wins bcast host log level = 3 log file = /var/log/samba/log.%m socket options = TCP_NODELAY force create mode = 0640 force directory mode = 0750 (2) strange filepermissions for profiles: in the subdir of a win2k profile which was stored on a samba share i get strange permissions for example user490067: [Profiles] comment = Windows User Profiles path = /share/profiles guest ok = no browseable = no writeable = yes create mask = 0644 directory mask = 0755 locking = no here are the permissions: root@cgn-lnx06:/share/profiles/user490067/Start Menu/Programs > ls -l total 8 drw-r--r-- 5 user4900 users 4096 Apr 9 19:07 Accessories drw-r--r-- 2 user4900 users 4096 Apr 9 19:07 Startup and here are the permissions for: root@cgn-lnx06:/share/profiles/user490067/Start Menu > ls -l total 4 drwxr-xr-x 4 user4900 users 4096 Apr 9 19:07 Programs you see the difference: the subdirs Accessories & Startup need executable permission to save the hole profile on this samba share. we are about to kick out the last NT machine here.. pls give me any comments. thnx! bye andre Jeremy Allison To: Samba technical , Samba NTDOM Sent by: , Samba list samba-ntdom-admin@lists cc: .samba.org Subject: 2.2 release imminent. 09.04.2001 20:11 Well, as Andrew shouted at me again this weekend it's getting to be about that time.... :-) :-). Yep, we're thinking we should do an official 2.2 Samba release early next week, so if you have anything you can't live with, now would be a good time to tell us.... :-). It's been gestating longer than an elephant, so it's really time to let it out into the world and do its own thing :-). Feedback welcome (nay, *required* ! :-) :-). Cheers, Jeremy Allison, Samba Team. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From goetzmail at gmx.de Tue Apr 10 09:45:54 2001 From: goetzmail at gmx.de (Goetz Weinmann) Date: Tue Dec 2 02:34:11 2003 Subject: Problems installing a standalone MS Exchange Server in a Samba 2.0.7 Domain Message-ID: <003b01c0c1a3$09a54530$330101b9@fnmail.fraenkische-nachrichten.de> Hi, I've got problems when I try to setup an Exchange Server in a Samba 2.0.7 Domain. I'm logged in as a domain admin and have gotthe local rights to install exchange. Setup starts and all questions can be answered... But the last step of setup fails: The services for exchange are installed and this fails with the error: "Account not found or invalid". Now I tried to start another service with a domain users account, which fails in the same way... Unfortunately Exchange can not be installed using a local sam Account or even the localSystem Account.... Can Somebody out there help me ???? Thanx for your support Goetz w........ -------------- next part -------------- HTML attachment scrubbed and removed From Roman.Orth at educators.de Tue Apr 10 09:56:08 2001 From: Roman.Orth at educators.de (Roman Orth) Date: Tue Dec 2 02:34:11 2003 Subject: Problems installing a standalone MS Exchange Server in a Samba 2.0.7 Domain In-Reply-To: <003b01c0c1a3$09a54530$330101b9@fnmail.fraenkische-nachrichten.de> Message-ID: <000701c0c1a4$778de880$640aa8c0@educators.de> Hi, > I've got problems when I try to setup an Exchange Server in a Samba 2.0.7 Domain. I'm logged in as a domain > admin and have gotthe local rights to install exchange. Setup starts and all questions can be answered... But > the last step of setup fails: The services for exchange are installed and this fails with the error: "Account > not found or invalid". If you are trying to install Exchange 2000 it won't do imho, because that version of Exchange needs an Active Directory to install properly. > Now I tried to start another service with a domain users account, which fails in the same way... Remember: the accouunt *must* have the right to _logon as a service_! > Unfortunately Exchange can not be installed using a local sam Account or even the localSystem Account.... Again: which version of Exchange you are using (or trying to use) ? > Can Somebody out there help me ???? I hope this will help you. > Thanx for your support Just to please you > Goetz w........ Regards Roman Orth ---------------------------------------------------------- \ Roman Orth roman.orth@educators.de / / educators Gbr +49(0)631 34106-0 \ \ Hoelzengraben 2 / / 67657 Kaiserslautern \ \ Germany / -------------------------------------------------------- From mdmontazer at confluencewatersports.com Tue Apr 10 12:20:47 2001 From: mdmontazer at confluencewatersports.com (Mark Montazer) Date: Tue Dec 2 02:34:11 2003 Subject: Problems Transferring Files Message-ID: <000f01c0c1b8$ad02a9b0$3600a8c0@confluencewatersports.com> Hey all, I suspect this is a Windows 2K related issue, but was wondering if anyone else has run into it before. Last night I was preparing to re-install Win2K on my workstation and decided to back-up all my data, which was a first for me ; ). Well, I dragged and dropped my 'Documents and Settings' folder to my Samba home share and let it ride. I came back 20 minutes, it was 2 gigs worth of data, and Win2K complained about 'Too Deep Nesting' and could no longer see the Samba server at all, however my other PC didn't have a problem with it. I don't think there was a nesting level issue, due to the fact that this was the bottom most directory and it had already copied half of it, and after rebooting it finished it. Has anyone else had a problem like this? Mark From kathee at mindiq.com Tue Apr 10 12:48:21 2001 From: kathee at mindiq.com (kat) Date: Tue Dec 2 02:34:11 2003 Subject: goldmine - anyone using it with 2.2a3? Message-ID: <5.0.2.1.2.20010410084322.02c527c0@mail.mindiq.com> Hi, Have a problem and the vendor is of course trying to blame linux/samba. Goldmine, a contact management app, which installs the app on the workstation including all DLL's and simply mantains data files on the server, continues to corrupt the data files. It is not to a point of being unusable, we simply have to stop all processing in Goldmine, rebuild all indices and continue -- takes about 40 minutes. The vendor has said they do not support Linux. Of course I explained this had nothing to do with it. Later they came back and asked if Linux/samba did locking -- I said yes (I had level 2 locks turned on) They said to turn then off. I did -- problem is worse. Bottom line, is anyone else running an app like this off a samba server where the app does the record locking but seems to lose it's mind now and then? For what it is worth, the previous version we had (4.0 -- now we are at 5.5) did not have any of these problems... You would think the vendor would get a clue. thanks Kat From jsw at manic-miner.freeserve.co.uk Tue Apr 10 11:43:49 2001 From: jsw at manic-miner.freeserve.co.uk (Jet Set Willy) Date: Tue Dec 2 02:34:11 2003 Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation References: Message-ID: <000001c0c1c0$57eb64a0$cf01020a@perfectdomain.perfectimage.co.uk> Ok, top marks go to both Mark and Michael as it is now working. As was hinted in an earlier message I strongly suspect that it was nearly working all along I just wasn't seeing the signals it was sending me :-( Anyway following the suggestions from Mark and Michael I have trashed my 98 network settings - resinstalled them and it logs into my samba controlled domain without a problem ! Thanks once again to everyone for helping - specially Mark and Michael guess I owe you guys a drink :-) JSW From mhaney at info4cars.com Tue Apr 10 13:25:20 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:11 2003 Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation In-Reply-To: <000001c0c1c0$57eb64a0$cf01020a@perfectdomain.perfectimage.co.uk> Message-ID: >> Ok, top marks go to both Mark and Michael as it is now working. Congrats! Good to hear of a successful resolution. >> guess I owe you guys a drink :-) Anyway I could have my drink on the Outer Banks while I'm fishing? :) -----Original Message----- From: Jet Set Willy [mailto:jsw@manic-miner.freeserve.co.uk] Sent: Tuesday, April 10, 2001 7:44 AM To: Mark Haney; McEldowney, Michael; samba-ntdom@samba.org Subject: Re: (Was Caution Stoopid Newbie) - A better (Longer) explanation Ok, top marks go to both Mark and Michael as it is now working. As was hinted in an earlier message I strongly suspect that it was nearly working all along I just wasn't seeing the signals it was sending me :-( Anyway following the suggestions from Mark and Michael I have trashed my 98 network settings - resinstalled them and it logs into my samba controlled domain without a problem ! Thanks once again to everyone for helping - specially Mark and Michael guess I owe you guys a drink :-) JSW From MMcEldowney at deltaregional.com Tue Apr 10 13:29:06 2001 From: MMcEldowney at deltaregional.com (McEldowney, Michael) Date: Tue Dec 2 02:34:12 2003 Subject: Problems installing a standalone MS Exchange Server in a Samb a 2.0.7 Domain Message-ID: I'm assuming that?your using the Samba 2.0.7 box as your "PDC" for the domain.? If so, you won't be able to get Exchange to work.? It requires PDC services that 2.0.7 doesn't provide.? You have 3 options: ? 1. Use 2.2.0-alpha3 if you dare run it in a production environment (not recommended, but?you could wait for?the 2.2 release) ? 2. I haven't tried this myself, but I've always thought it should work:? Set up the NT server that your installing Exchange on as it's own PDC in it's own domain.? Downside -> User and password maintenance will be a NIGHTMARE. ? 3. Dump Exchange and use something more stable that runs on Linux. (My personal preference) ? Hope that helps, ? Mike McEldowney Information Systems Director Delta Regional Medical Center v. 662-334-2075 p. 662-379-2498 e. mmceldowney@deltaregional.com -----Original Message----- From: Goetz Weinmann [mailto:goetzmail@gmx.de] Sent: Tuesday, April 10, 2001 4:46 AM To: samba-ntdom@lists.samba.org Subject: Problems installing a standalone MS Exchange Server in a Samba 2.0.7 Domain Hi, ? I've got problems when I try to setup an Exchange Server in a Samba 2.0.7 Domain. I'm logged in as a domain admin and have gotthe local rights to install exchange. Setup starts and all questions can be answered... But the last step of setup fails: The services for exchange are installed and this fails with the error: "Account not found or invalid". ? Now I tried to start another service with a domain users account, which fails in the same way... ? Unfortunately Exchange can not be installed using a local sam Account or even the localSystem Account.... ? Can Somebody out there help me ???? ? Thanx for your support ? Goetz w........ From gcarter at valinux.com Tue Apr 10 13:36:24 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:12 2003 Subject: goldmine - anyone using it with 2.2a3? In-Reply-To: <5.0.2.1.2.20010410084322.02c527c0@mail.mindiq.com>; from kathee@mindiq.com on Tue, Apr 10, 2001 at 07:48:21 -0500 References: <5.0.2.1.2.20010410084322.02c527c0@mail.mindiq.com> Message-ID: <20010410083624.P22909@queso.plainjoe.org> On Tue, 10 Apr 2001 07:48:21 kat wrote: > > Later they came back and asked if Linux/samba did locking > -- I said yes (I had level 2 locks turned on) They said to > turn then off. I did -- problem is worse. level II oplocks allow a client to dowgrade an exclusive (read/write) lock to a read only lock. Shouldn't have really been an issue here. If you set locking = no, then that would have been bad. > Bottom line, is anyone else running an app like this off > a samba server where the app does the record locking but > seems to lose it's mind now and then? For what it is worth, > the previous version we had (4.0 -- now we are at 5.5) did > not have any of these problems... You would think the > vendor would get a clue. Kat, Can you recreate this against the latest Samba 2.2. code? Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From mthomas at rhrk.uni-kl.de Tue Apr 10 13:36:03 2001 From: mthomas at rhrk.uni-kl.de (Martin Thomas) Date: Tue Dec 2 02:34:12 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> Message-ID: <005501c0c1c3$4c6a43f0$1332f683@arubi.unikl.de> > > Feedback welcome (nay, *required* ! :-) :-). > I've posted this issue some time ago but since I can reproduce it in the cvs-Version from yesterday I suppose the problem is still there and should not be in the 2.2 release: Windows 2000 handles shortcuts to a share or a computer in the network neighbourhood as a directory with the files 'desktop.ini' and 'target' in it. These shortcut-directorys have the dos-attribute 'read-only' so Windows 'knows' that it's not a normal directory but a shortcut. If such a shortcut directory is in the roaming profile that is stored on a Samba 2.2(cvs) profile-share the 'read-only' attribute is ignored. the Shortcut-directory should be mode r-x but is mode rwx. So, thanks to MS, the directory has do be r-x to map the read-only attribute but samba has to write files in it (desktop.ini/target). Hope, this issue will be solved in the release, it coused some confusion to the 'test-users' of W2K/Samba 2.2 server. since Windows seems to add shortcuts to shares in the Network neighbourhood automaticly. Another issue: While accessing shares with W2k %u or %U will not be substituted with the user name. Doing sambaclient -L on a linux box does the right substitutions. Martin Thomas the smb.conf: ----------------- [global] debug level = 2 netbios name = RADAGAST workgroup = SIWAWI security = user domain logons = yes encrypt passwords = yes status=yes # browse master is miraculix os level = 65 ; domain master = yes ; preferred master = yes ; local master = yes #wins server is miraculix wins server = 131.246.xxx.xxx time server = yes logon script = scripts\default.bat ##logon script = scripts\%U.bat logon drive = R: logon home = \\%N\%U logon path = \\%N\profile\%U domain admin group = @smbadm add user script = /usr/sbin/useradd -g machines -c RechnerAccount -d /dev/null -s /bin/false %m$ guest account = nobody ## dont do in man smb.conf, do in pdc-howto ?? ## share modes = no interfaces = 131.246.xxx.xxx/255.255.255.0 127.0.0.1/255.255.255.0 socket options = TCP_NODELAY bind interfaces only=True name resolve order = host wins lmhosts bcast allow hosts = 127.0.0.1 131.246.xxx.xxx 131.246.xxx.xxx \ ... ... printer admin = pcadmin,@smbadm #create mode=0700 #directory mode=0700 [homes] comment = %Ss privates Heimatverzeichnis (%u %U) browseable = no read only = no guest ok = no path = /home/%S valid users = %S create mask = 0600 directory mask = 0700 oplocks = false veto files = /.*/Desktop/ hide dot files = yes locking = no [netlogon] path = /home/smbdata/netlogon writable = no guest ok = no comment = PDC netlogon share browseable = yes [temp] comment = Temp auf %N (Arch: %a User: %u / %U) path = /home/smbdata/temp read only = no force group = smbusers create mode = 0660 directory mode = 0770 [profile] path = /home/smbdata/profile writeable = yes #create mask = 711 #directory mask = 711 #map hidden = yes #map system = yes force group = smbusers oplocks=false browseable=false #locking=no [ps] public = no comment = Laser A4 duplex RHRK printable = yes writable = no create mode = 0700 path = /tmp [print$] path=/home/smbdata/druckertreiber guest ok=yes browseable=yes read only=yes # force create mode = 664 # force directory mode = 775 force group = smbadm write list=pcadmin,@smbadm [mcafeeupd] public = no comment = Virenscannerupdates McAfee read only = yes browseable = yes create mode = 0664 directory mode = 0775 force group = smbadm write list = pcadmin Administrator administrator path = /home/smbdata/mcafeeupd From rob at consus.co.uk Tue Apr 10 13:42:10 2001 From: rob at consus.co.uk (Rob lyle) Date: Tue Dec 2 02:34:12 2003 Subject: NT 4.0 roaming profiles on 2.0.6 Message-ID: <00a201c0c1c4$0b2811a0$86002ad4@garf.co.uk> People, I've got samba 2.0.6 running as PDC on RH 6.2 with the 2.2.14 kernel. I've had romaing profiles configured and operational for some time, except for the fact they DON'T ROAM. If I actually go to a different NT 4.0 workstation, and log in, while my previous login is still valid on the first workstation, then all hell breaks loose w.r.t. profiles. I loose my entire desktop settings (background et. al.), and everything above the START->Programs menu line (i.e. I think that's stuff taken from the "default" profile yeah?) Most of my desktop program icons are missing, as are all my M$ Explorere favourites, addressbook you name it. This is a real pain. Anyone seen this before or know what's going on? Is this NTUSER.DAT and SID related? I'm at my wits end with this and will consider pretty much anything to get this sorted or just accept that samba can't roam profiles for NT 4.0 (yet?). If so, I'd sure appreciate someone shouting yeah or neah! Help! Rgds, --Rob. -------------- next part -------------- HTML attachment scrubbed and removed From gcarter at valinux.com Tue Apr 10 13:43:20 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:12 2003 Subject: failed to marshall using 2.2a3 In-Reply-To: ; from andre.doehn@econia.com on Mon, Apr 09, 2001 at 08:03:56 -0500 References: Message-ID: <20010410084320.T22909@queso.plainjoe.org> On Mon, 09 Apr 2001 08:03:56 andre.doehn@econia.com wrote: > hi list, > iam getting an error in log.smdb > > smbd[8972]: rpc_server/srv_netlog.c:api_net_sam_logon(177) > smbd[8972]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > smbd[8972]: rpc_server/srv_pipe.c:api_rpcTNP(1199) > smbd[8972]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > > what does it mean? > > the samba pdc based on linux 2.2.18 works very fine > but iam getting this error in the log. Can you send me (off list) a level 10 debug log surrounding this error? Thanks, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From MMcEldowney at deltaregional.com Tue Apr 10 13:41:44 2001 From: MMcEldowney at deltaregional.com (McEldowney, Michael) Date: Tue Dec 2 02:34:12 2003 Subject: (Was Caution Stoopid Newbie) - A better (Longer) explanation Message-ID: > Ok, top marks go to both Mark and Michael as it is now working. Great news! Now the fun begins! > guess I owe you guys a drink :-) You'll find me on the other side of Mark's cooler on the same beach ;-) From kathee at mindiq.com Tue Apr 10 13:57:13 2001 From: kathee at mindiq.com (kat) Date: Tue Dec 2 02:34:12 2003 Subject: goldmine - anyone using it with 2.2a3? In-Reply-To: <20010410083624.P22909@queso.plainjoe.org> References: <5.0.2.1.2.20010410084322.02c527c0@mail.mindiq.com> <5.0.2.1.2.20010410084322.02c527c0@mail.mindiq.com> Message-ID: <5.0.2.1.2.20010410095632.02c6b970@mail.mindiq.com> It used to happen, but less frequently on 2.0.7 -- I only run 2.2a3 and 2.07 on my servers right now. a3 for the PDC support. -K At 08:36 AM 4/10/2001 -0500, you wrote: >On Tue, 10 Apr 2001 07:48:21 kat wrote: > > > > Later they came back and asked if Linux/samba did locking > > -- I said yes (I had level 2 locks turned on) They said to > > turn then off. I did -- problem is worse. > >level II oplocks allow a client to dowgrade an exclusive >(read/write) lock to a read only lock. Shouldn't have really >been an issue here. If you set locking = no, then that would >have been bad. > > > Bottom line, is anyone else running an app like this off > > a samba server where the app does the record locking but > > seems to lose it's mind now and then? For what it is worth, > > the previous version we had (4.0 -- now we are at 5.5) did > > not have any of these problems... You would think the > > vendor would get a clue. > >Kat, Can you recreate this against the latest Samba 2.2. code? > > > > > > >Cheers, jerry >---------------------------------------------------------------------- > /\ Gerald (Jerry) Carter Professional Services > \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com > http://www.samba.org/ SAMBA Team jerry@samba.org > http://www.plainjoe.org/ jerry@plainjoe.org > > "...a hundred billion castaways looking for a home." > - Sting "Message in a Bottle" ( 1979 ) From gcarter at valinux.com Tue Apr 10 14:15:01 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:12 2003 Subject: goldmine - anyone using it with 2.2a3? In-Reply-To: <5.0.2.1.2.20010410095632.02c6b970@mail.mindiq.com> Message-ID: On Tue, 10 Apr 2001, kat wrote: > It used to happen, but less frequently on 2.0.7 -- I only run 2.2a3 > and 2.07 on my servers right now. a3 for the PDC support. ok. So the problem definitely still exists in 2.2.0? What we need is a level 10 debug log surrounding a failure (~1,000 line before and after). Somehow we need to be able to reproduce this. It would also be helpful to have a packet trace of a successful session against an NT server. Could you legally us get a copy of the application? Just out of curiousity, did this ever occur with 'ole lock compatibility = no' in 2.0.7? Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From kathee at mindiq.com Tue Apr 10 14:13:31 2001 From: kathee at mindiq.com (kat) Date: Tue Dec 2 02:34:12 2003 Subject: goldmine - anyone using it with 2.2a3? In-Reply-To: References: <5.0.2.1.2.20010410095632.02c6b970@mail.mindiq.com> Message-ID: <5.0.2.1.2.20010410101240.02c7ce30@mail.mindiq.com> I have already heard from several folks who experienced the same problem on NT based version... So, I am starting to think it is the app and not the infrastructure... At 09:15 AM 4/10/2001 -0500, Gerald Carter wrote: >On Tue, 10 Apr 2001, kat wrote: > > > It used to happen, but less frequently on 2.0.7 -- I only run 2.2a3 > > and 2.07 on my servers right now. a3 for the PDC support. > >ok. So the problem definitely still exists in 2.2.0? What we need >is a level 10 debug log surrounding a failure (~1,000 line before >and after). Somehow we need to be able to reproduce this. It >would also be helpful to have a packet trace of a successful session >against an NT server. Could you legally us get a copy of the >application? > >Just out of curiousity, did this ever occur with 'ole lock >compatibility = no' in 2.0.7? > > > > > >Cheers, jerry > >---------------------------------------------------------------------- > /\ Gerald (Jerry) Carter Professional Services > \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com > http://www.samba.org/ SAMBA Team jerry@samba.org > http://www.plainjoe.org/ jerry@plainjoe.org > > "...a hundred billion castaways looking for a home." > - Sting "Message in a Bottle" ( 1979 ) From gcarter at valinux.com Tue Apr 10 14:19:43 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:12 2003 Subject: goldmine - anyone using it with 2.2a3? In-Reply-To: <5.0.2.1.2.20010410101240.02c7ce30@mail.mindiq.com> Message-ID: On Tue, 10 Apr 2001, kat wrote: > I have already heard from several folks who experienced the same > problem on NT based version... So, I am starting to think it is the > app and not the infrastructure... Ah...ok. Not much we can do then. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From tomee at titanic.nyme.hu Tue Apr 10 15:49:33 2001 From: tomee at titanic.nyme.hu (Nemeth Tamas) Date: Tue Dec 2 02:34:12 2003 Subject: Samba PDC & Win2k Temporary Internet Files problem Message-ID: <200104101549.f3AFnXS13306@titanic.nyme.hu> Hi , I am need of urgent help. I have a Samba PDC controlled domain, with W2k workstations. Joining the domain was easy. Only one thing's not working: when a domain user logs in on a workstation, the space for Temporary Internet files is: 0 and can't change it. So can't download anything from internet. When a local user logs in the Temporary Internet files settings are correct. Can someone please help me with this problem in private mail too. Thanks, Tamas Nemeth tomee@titanic.nyme.hu University of West-Hungary Hungary From don_mccall at hp.com Tue Apr 10 16:14:00 2001 From: don_mccall at hp.com (MCCALL,DON (HP-USA,ex1)) Date: Tue Dec 2 02:34:12 2003 Subject: Samba PDC & Win2k Temporary Internet Files problem Message-ID: <079FD72E42C9D311B854009027650E6F0405094C@xatl02.atl.hp.com> Hello Tamas, That's a wierd one... What version of Internet Explorer are you using? In IE 5, if you rightclick on IE icon, go to properties, and look under general settings, there is a "Current Location" for "Temporary Internet Files Folder", and then a amount of disk space to be used box. What does yours report for Current location? Are you using roaming profiles for your win2k clients that log into the samba domain? If you are, check the profile directory and the "Temporary Internet Files" directory under that users profile directory; perhaps there is a permissions problem on the directory? Just a thought - I have seen several threads on this list discussing various problems/perceived problems with profiles and Win2k, but have not really worked much with them. Perhaps with more info someone else on the list more familiar with profiles (if this is indeed the issue) may be able to lend a hand. Hope this helps, Don -----Original Message----- From: Nemeth Tamas [mailto:tomee@titanic.nyme.hu] Sent: Tuesday, April 10, 2001 11:50 AM To: samba-ntdom@lists.samba.org Subject: Samba PDC & Win2k Temporary Internet Files problem Hi , I am need of urgent help. I have a Samba PDC controlled domain, with W2k workstations. Joining the domain was easy. Only one thing's not working: when a domain user logs in on a workstation, the space for Temporary Internet files is: 0 and can't change it. So can't download anything from internet. When a local user logs in the Temporary Internet files settings are correct. Can someone please help me with this problem in private mail too. Thanks, Tamas Nemeth tomee@titanic.nyme.hu University of West-Hungary Hungary From bcaudle at hotmail.com Tue Apr 10 16:43:15 2001 From: bcaudle at hotmail.com (Brandon Caudle) Date: Tue Dec 2 02:34:12 2003 Subject: access database Message-ID: Has anyone heard of corruption of an access database on a ext2 (riserfs) samba share? Brandon Caudle _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com From aalang at rutgersinsurance.com Tue Apr 10 16:49:25 2001 From: aalang at rutgersinsurance.com (Adam Lang) Date: Tue Dec 2 02:34:12 2003 Subject: access database References: Message-ID: <00f601c0c1de$33adc2e0$330a0a0a@rutgersinsurance.com> Access databases will corrupt no matter what filesystem they are on. It is corruption due to the Access application, not the OS. Adam Lang Systems Engineer Rutgers Casualty Insurance Company http://www.rutgersinsurance.com ----- Original Message ----- From: "Brandon Caudle" To: Sent: Tuesday, April 10, 2001 12:43 PM Subject: access database > Has anyone heard of corruption of an access database on a ext2 (riserfs) > samba share? > > Brandon Caudle > _________________________________________________________________ > Get your FREE download of MSN Explorer at http://explorer.msn.com > From mhaney at info4cars.com Tue Apr 10 16:47:26 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:12 2003 Subject: access database In-Reply-To: Message-ID: I have. But only due to Access FUBAR'ing it on it's own. I have an Access DB on a Samba share at home I have run for 3 years. I will say that I don't recommend converting it to a new format while on a Samba share. I blew mine up doing that, don't know it it was samba or what, but as a rule I don't do that anymore. Can you give us more info? -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Brandon Caudle Sent: Tuesday, April 10, 2001 12:43 PM To: samba-ntdom@samba.org Subject: access database Has anyone heard of corruption of an access database on a ext2 (riserfs) samba share? Brandon Caudle _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com From jeremy at valinux.com Tue Apr 10 15:05:56 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:12 2003 Subject: 2.2 release imminent. References: <2.0.2-826059-227-A-OEWW@mail.mindspring.com> Message-ID: <3AD32154.F8CDCA51@valinux.com> John M Trostel wrote: > > I don't have my "big" e-mail computer here, but wasn't there a patch for > this submitted in the last few days (or at most, the last week) ? I thought so, but then again I thought I applied it :-). Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From ken at hudat.com Tue Apr 10 17:50:51 2001 From: ken at hudat.com (Kendrick Vargas) Date: Tue Dec 2 02:34:12 2003 Subject: access database In-Reply-To: Message-ID: On Tue, 10 Apr 2001, Brandon Caudle wrote: > Has anyone heard of corruption of an access database on a ext2 (riserfs) > samba share? check to see what version of reiserfs you are running. There are patches out there which cover a NULL byte bug where null bytes are thrown into files. Unless you're running the latest kernel, you may be affected by this. I had a problem with sendmail where my user's email would be lost and replaced with lots of ^@'s. This went away (as far as I can tell) with an upgrade of my kernel. -peace -- Let he who is without clue kiss my ass From idra at samba.org Tue Apr 10 17:49:12 2001 From: idra at samba.org (Simo Sorce) Date: Tue Dec 2 02:34:12 2003 Subject: login scrips In-Reply-To: ; from bcaudle@hotmail.com on Tue, Apr 10, 2001 at 01:39:55PM -0400 References: Message-ID: <20010410104912.A27954@va.samba.org> Here an example: [netlogon] comment = Logon server share path = /usr/local/samba/netlogon read only = No browseable = Yes please may you send e-mails in plain/text not html? From ken at hudat.com Tue Apr 10 17:53:46 2001 From: ken at hudat.com (Kendrick Vargas) Date: Tue Dec 2 02:34:12 2003 Subject: access database In-Reply-To: Message-ID: On Tue, 10 Apr 2001, Kendrick Vargas wrote: > On Tue, 10 Apr 2001, Brandon Caudle wrote: > > > Has anyone heard of corruption of an access database on a ext2 (riserfs) > > samba share? > > check to see what version of reiserfs you are running. There are patches > out there which cover a NULL byte bug where null bytes are thrown into > files. Unless you're running the latest kernel, you may be affected by > this. > > I had a problem with sendmail where my user's email would be lost and > replaced with lots of ^@'s. This went away (as far as I can tell) with an > upgrade of my kernel. Just thought that I'd add that this affected 2.4 kernels (I don't think it affected the 2.2 kernels as they used an older version of reiserfs). -peace -- Let he who is without clue kiss my ass From jolt at nicholasofmyra.org Tue Apr 10 18:07:27 2001 From: jolt at nicholasofmyra.org (Joseph) Date: Tue Dec 2 02:34:12 2003 Subject: login scrips In-Reply-To: Message-ID: <5.0.2.1.0.20010410140644.00afae60@10.100.0.4> [netlogon] comment = Domain Logon Scripts path = /usr/local/samba/netlogon writeable = no guest ok = no At 01:39 PM 4/10/2001 -0400, Brandon Caudle wrote: >it's me again the newbie well my question this time is > >my question yesterday was where do i store the logon scripts. y'all or >most of you who wrote back said under the [netlogon] share like on a nt 4 >server. well what do i need to put into my smb.conf file to point it there? > >thanks everyone (and yes yesterday the ass was suppost to be as) > >brandon > > >---------- >Get your FREE download of MSN Explorer at >http://explorer.msn.com From David.Bear at asu.edu Tue Apr 10 18:07:39 2001 From: David.Bear at asu.edu (iddwb) Date: Tue Dec 2 02:34:12 2003 Subject: access database In-Reply-To: <00f601c0c1de$33adc2e0$330a0a0a@rutgersinsurance.com> Message-ID: On Tue, 10 Apr 2001, Adam Lang wrote: > Access databases will corrupt no matter what filesystem they are on. It is > corruption due to the Access application, not the OS. this was my sad experience as well. I'd be interested in any recovery tools that anyone has dreamed up to try to pull data out of a bombed access db. on the other hand, seems that use samba an a preexec script to backup a data base could make it a little more 'safe'... > > Adam Lang > Systems Engineer > Rutgers Casualty Insurance Company > http://www.rutgersinsurance.com > ----- Original Message ----- > From: "Brandon Caudle" > To: > Sent: Tuesday, April 10, 2001 12:43 PM > Subject: access database > > > > Has anyone heard of corruption of an access database on a ext2 (riserfs) > > samba share? > > > > Brandon Caudle > > _________________________________________________________________ > > Get your FREE download of MSN Explorer at http://explorer.msn.com > > > > > David Bear College of Public Programs/ASU From aalang at rutgersinsurance.com Tue Apr 10 18:40:19 2001 From: aalang at rutgersinsurance.com (Adam Lang) Date: Tue Dec 2 02:34:12 2003 Subject: access database References: Message-ID: <016f01c0c1ed$b160e0a0$330a0a0a@rutgersinsurance.com> Only thing I use are the tools that come with Access to recover a database. That and backups. Of course, that is also why I never use Access when it involves more than one person at a time. It is NOT a good multi-user database. This is not a Linux person talking, but a VB developer. Adam Lang Systems Engineer Rutgers Casualty Insurance Company http://www.rutgersinsurance.com ----- Original Message ----- From: "iddwb" To: Sent: Tuesday, April 10, 2001 2:07 PM Subject: Re: access database > On Tue, 10 Apr 2001, Adam Lang wrote: > > > Access databases will corrupt no matter what filesystem they are on. It is > > corruption due to the Access application, not the OS. > > this was my sad experience as well. I'd be interested in any recovery > tools that anyone has dreamed up to try to pull data out of a bombed > access db. > > on the other hand, seems that use samba an a preexec script to backup a > data base could make it a little more 'safe'... > > > > > Adam Lang > > Systems Engineer > > Rutgers Casualty Insurance Company > > http://www.rutgersinsurance.com > > ----- Original Message ----- > > From: "Brandon Caudle" > > To: > > Sent: Tuesday, April 10, 2001 12:43 PM > > Subject: access database > > > > > > > Has anyone heard of corruption of an access database on a ext2 (riserfs) > > > samba share? > > > > > > Brandon Caudle > > > _________________________________________________________________ > > > Get your FREE download of MSN Explorer at http://explorer.msn.com > > > > > > > > > > > David Bear > College of Public Programs/ASU > From ink at inconnu.isu.edu Tue Apr 10 19:52:25 2001 From: ink at inconnu.isu.edu (Craig Kelley) Date: Tue Dec 2 02:34:12 2003 Subject: goldmine - anyone using it with 2.2a3? In-Reply-To: <5.0.2.1.2.20010410084322.02c527c0@mail.mindiq.com> Message-ID: On Tue, 10 Apr 2001, kat wrote: > Hi, > > Have a problem and the vendor is of course trying to blame > linux/samba. Goldmine, a contact management app, which installs the > app on the workstation including all DLL's and simply mantains data > files on the server, continues to corrupt the data files. It is not > to a point of being unusable, we simply have to stop all processing in > Goldmine, rebuild all indices and continue -- takes about 40 minutes. > The vendor has said they do not support Linux. Of course I explained > this had nothing to do with it. Later they came back and asked if > Linux/samba did locking -- I said yes (I had level 2 locks turned on) > They said to turn then off. I did -- problem is worse. > > Bottom line, is anyone else running an app like this off a samba > server where the app does the record locking but seems to lose it's > mind now and then? For what it is worth, the previous version we had > (4.0 -- now we are at 5.5) did not have any of these problems... You > would think the vendor would get a clue. Goldmine is a horrible application. It would regularly corrupt it's database on our NT server (we were using version 4 at the time). We eventually replaced it with Micosoft Access, which is infinately more stable [that's saying a lot, considering the instability in Access]. We refused to give the company more money; they may have fixed this "bug" (ie, critical weakness that should never have shipped) -- but somehow I doubt it. We had to "rebuild the database" on a weekly, and even daily basis; the office joke is that the reason they chose the name 'Goldmine' was so that everyone would continue paying for useless upgrades. We've since ditched the NT Server, and now our Access appliction is served out via Samba just fine. Thinking the vendor of Goldmine will get a clue is a big stretch. :) This is just my 2 cents -- please don't sue my employer if anyone from Goldmine reads this (I doubt they will), because these observations are my own. -- It won't be long before the CPU is a card in a slot on your ATX videoboard Craig Kelley -- kellcrai@isu.edu http://www.isu.edu/~kellcrai finger ink@inconnu.isu.edu for PGP block From hillcj at geocities.com Tue Apr 10 19:53:53 2001 From: hillcj at geocities.com (Chill) Date: Tue Dec 2 02:34:12 2003 Subject: NT 4.0/ Samba (PDC/BDC passwords) Message-ID: Currently i have 2 servers, a NT 4.0 PDC and a Samba 2.0.7 BDC. I am trying to make the Samba BDC a PDC and get rid of the NT 4.0 PDC all together. I almost have everything converted over, profiles, logon scripts, maps, files, setup smb.conf properly, etc., but i don't know how to move the passwords over. Currently i just have samba relay the logon request to the NT server. Is there anyway of importing the users and passwords directly into the smbpasswd file without having to add all 200 users individually. From georgesc at pt.lu Tue Apr 10 18:56:39 2001 From: georgesc at pt.lu (Carlo GEORGES) Date: Tue Dec 2 02:34:12 2003 Subject: AW: Screen Saver In-Reply-To: Message-ID: Use the system policy editor 'poledit'. -----Ursprungliche Nachricht----- Von: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]Im Auftrag von Keith Lynn Gesendet: mardi, 10. avril 2001 04:17 An: samba-ntdom@samba.org Betreff: Screen Saver Hello everyone, I have three laboratories which have Windows NT 4.0 clients with a Samba server. I have recently purchased the Windowns NT 4.0 resource kit which contains the screen saver which will log a user out after a certain amount of inactivity. Can someone tell me how to set the screen saver for all users on a Workstation? Thanks. Keith Lynn Systems Administrator School of Computer and Information Sciences University of South Alabama Mobile, AL 36608 Phone: (334) 460-6390 Fax: (334) 460-7274 Alternative E-mail: lynn@gateway.cis.usouthal.edu URL: http://www.cis.usouthal.edu/~lynn/ From MMcEldowney at deltaregional.com Tue Apr 10 20:01:45 2001 From: MMcEldowney at deltaregional.com (McEldowney, Michael) Date: Tue Dec 2 02:34:12 2003 Subject: NT 4.0/ Samba (PDC/BDC passwords) Message-ID: Yes there is. I'll send you offlist the pwdump binary and the smbpasswd-2-unixpasswd script I wrote just for this purpose. I'd post to the list but it's larger than the list limit. Eventually I'll get a HOWTO together for this, but it may be too late now that 2.2 is on the way... Mike > -----Original Message----- > From: Chill [mailto:hillcj@geocities.com] > Sent: Tuesday, April 10, 2001 2:54 PM > To: samba-ntdom@lists.samba.org > Subject: NT 4.0/ Samba (PDC/BDC passwords) > > > Currently i have 2 servers, a NT 4.0 PDC and a Samba 2.0.7 BDC. > > I am trying to make the Samba BDC a PDC and get rid of the NT > 4.0 PDC all > together. I almost have everything converted over, profiles, logon > scripts, maps, files, setup smb.conf properly, etc., but i don't know > how to move the passwords over. Currently i just have samba relay the > logon request to the NT server. Is there anyway of importing > the users > and passwords directly into the smbpasswd file without having > to add all > 200 users individually. > > > > From philipp at hug.cx Tue Apr 10 18:32:36 2001 From: philipp at hug.cx (Philipp Hug) Date: Tue Dec 2 02:34:12 2003 Subject: Stability problems with Samba 2.2 Alpha 3 (CVS April 2) Message-ID: <009f01c0c1ec$9ddca6a0$070111ac@hug.local> Hi I copied a bunch of MP3s on my Samba Server and after about 4 Gigabytes Linux/Samba crashed. Then I copied the next part and it crashed again after about 4 Gigs. Anyone had a similar problem? Philipp -------------- next part -------------- HTML attachment scrubbed and removed From jeremy at valinux.com Tue Apr 10 18:15:16 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:12 2003 Subject: Stability problems with Samba 2.2 Alpha 3 (CVS April 2) References: <009f01c0c1ec$9ddca6a0$070111ac@hug.local> Message-ID: <3AD34DB4.AC22790F@valinux.com> > Philipp Hug wrote: > > Hi > > I copied a bunch of MP3s on my Samba Server and after about 4 > Gigabytes Linux/Samba crashed. > Then I copied the next part and it crashed again after about 4 Gigs. More details please. Did Linux crash ? If so this is a kernel not a Samba problem. Did smbd crash ? If so a debug level 10 log would help. Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From MMcEldowney at deltaregional.com Tue Apr 10 20:15:32 2001 From: MMcEldowney at deltaregional.com (McEldowney, Michael) Date: Tue Dec 2 02:34:12 2003 Subject: Stability problems with Samba 2.2 Alpha 3 (CVS April 2) Message-ID: I believe that's a kernel limitation, not Samba.? Check the list archives, I know I've seen this mentioned before... -----Original Message----- From: Philipp Hug [mailto:philipp@hug.cx] Sent: Tuesday, April 10, 2001 1:33 PM To: samba-ntdom@lists.samba.org Subject: Stability problems with Samba 2.2 Alpha 3 (CVS April 2) Hi I copied a bunch of MP3s on my Samba Server and after about 4 Gigabytes Linux/Samba crashed. Then I copied the next part and it crashed again after about 4 Gigs. Anyone had a similar problem? Philipp From gree3776 at rowan.edu Tue Apr 10 21:03:22 2001 From: gree3776 at rowan.edu (Samuel Greenfeld) Date: Tue Dec 2 02:34:12 2003 Subject: 2.2 Release immenent/2.0.7 possible print issues Message-ID: Pardon me for passing the buck, but there are some printing problems I had with 2.0.7 that I was wondering the status of in 2.2. I have not had time to play with 2.2 much given that we run a quasi-production system, and I personally may be graduating within a month. Relevant smb.conf portions: ;[printers] ;this section is commented out to prevent automated printer generation [ece201] comment = "LaserJet ECE Room 201" path = /var/spool/samba/ece201 writeable = no guest ok = no printable = yes browsable = yes hosts allow = 150.250.96.0/255.255.240.0 force user = daemon [ece238] ; This is similar, etc., etc., ; These lines were originally taken from the LPRng FAQ, and modified: print command = /usr/bin/lpr -P%p -U%U@%I -r %s lpq command = /usr/bin/lpq -P%p -U%U@%I # Note this needs a modified lprm executable to work due to a samba glitch :( lprm command = /usr/bin/lprm -U%U -P%p %j lppause command = /usr/sbin/lpc -U%U@%I hold %p %j lpresume command = /usr/sbin/lpc -U%U@%I release %p %j queuepause command = /usr/sbin/lpc -U%U@%I -P%p stop queueresume command = /usr/sbin/lpc -U%U@%I -P%p start The problem seems to come from the handling of the "force user" directive. This is done so LPRng can be used to log the user and host that printed the print job via scripts and an SQL database. The following problems were noted with 2.0.7 when "force user" was turned on: 1. While the print job itself is forced to the user, no accessory program used seems to do so. This is a problem with LPRng, given that only certain users may be given rights to force the username of a print job, and it is desirable to keep that list as small as possible. Right now, we are living with this, and working around it, but a fix to this would be nice. This activity was verified by temporarily putting a program in place of /bin/sh (run by system()) that would log the UID, EUID, GUID, command & parameters, etc. 2. Whenever someone requests the printer's status, samba creates a /tmp/lpq.XXXXX file, where XXXXX is a series of eight or so characters. This file is created as root, but is not deleted. After a while, this leads to a lot of /tmp/lpq.XXXXX files hanging around that have to be manually cleared. A new one seems to be created whenever samba feels like refreshing a print queue's status. From wilsong at sergievsky.cpmc.columbia.edu Tue Apr 10 21:44:51 2001 From: wilsong at sergievsky.cpmc.columbia.edu (Gary Wilson) Date: Tue Dec 2 02:34:12 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> Message-ID: <134001c0c207$793e9cc0$0300a8c0@station1> Does the --with-fhs option work in configure? I tried it with alpha3, but everything was stored in /usr/local. Is that correct? Gary ----- Original Message ----- From: "Jeremy Allison" To: "Samba technical" ; "Samba NTDOM" ; "Samba list" Sent: Monday, April 09, 2001 2:11 PM Subject: 2.2 release imminent. Well, as Andrew shouted at me again this weekend it's getting to be about that time.... :-) :-). Yep, we're thinking we should do an official 2.2 Samba release early next week, so if you have anything you can't live with, now would be a good time to tell us.... :-). It's been gestating longer than an elephant, so it's really time to let it out into the world and do its own thing :-). Feedback welcome (nay, *required* ! :-) :-). Cheers, Jeremy Allison, Samba Team. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From abartlet at pcug.org.au Tue Apr 10 21:54:46 2001 From: abartlet at pcug.org.au (Andrew Bartlett) Date: Tue Dec 2 02:34:12 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> <134001c0c207$793e9cc0$0300a8c0@station1> Message-ID: <3AD38126.76313713@bartlett.house> Gary Wilson wrote: > > Does the --with-fhs option work in configure? I tried it with alpha3, but > everything was stored in /usr/local. Is that correct? > > Gary > I use it in my RPMS. So I hope it works :-). As far as I can tell it does in current CVS. Andrew Bartlett > ----- Original Message ----- > From: "Jeremy Allison" > To: "Samba technical" ; "Samba NTDOM" > ; "Samba list" > Sent: Monday, April 09, 2001 2:11 PM > Subject: 2.2 release imminent. > > Well, as Andrew shouted at me again this weekend it's getting > to be about that time.... :-) :-). > > Yep, we're thinking we should do an official 2.2 Samba release > early next week, so if you have anything you can't live > with, now would be a good time to tell us.... > > :-). > > It's been gestating longer than an elephant, so it's really > time to let it out into the world and do its own thing :-). > > Feedback welcome (nay, *required* ! :-) :-). > > Cheers, > > Jeremy Allison, > Samba Team. > > -- > -------------------------------------------------------- > Buying an operating system without source is like buying > a self-assembly Space Shuttle with no instructions. > -------------------------------------------------------- -- Andrew Bartlett abartlet@pcug.org.au From rajeeva at research.bell-labs.com Tue Apr 10 21:03:51 2001 From: rajeeva at research.bell-labs.com (Rajeev Agrawala) Date: Tue Dec 2 02:34:13 2003 Subject: syncing print drivers between two samba servers Message-ID: <3AD37537.5D9F16CF@research.bell-labs.com> Hi, I have samba 2_2_alpha3 running on two machines. I want to install drivers on one machine and then I want to keep the other machine in sync with the first. Can I get away with doing the following 1. sync the print$ share 2. copy sambadir/var/locks/ntdrivers.tdb to the second samba server. Should I shutdown any/both samba servers, while I am doing this? I would really like to avoid, shutting down server, if I can. Would smbd read the new tdb file on it own? Thanks, rajeev From d.horth at tzlimited.com Tue Apr 10 22:29:47 2001 From: d.horth at tzlimited.com (Dan Horth) Date: Tue Dec 2 02:34:13 2003 Subject: NT & Roaming Profiles / Home Directory. Message-ID: Hi - I've been trying to set up a server to act as a roaming profiles / file server for a bunch of NT 4.0 machines and some 98 machines, and am having two issues, one I'm reasonably sure is an NT configuration issue and one is a strange login script / SAMBA problem: 1) When the NT client logs in the roaming profiles stuff gets copied across fine, and profile changes are stored on the server as expected. But for some reason the user's home directory ends up mounted on Z: as well as P: I can't disconnect the Z: drive as I get told there are open files on the drive. Windows 98 clients seem to be mounting, using and unmounting (or hiding?) the netlogon directory fine. 2) We currently have a netware server servicing the workstations, and I am using one of the NT 4 workstations to test the SAMBA server before switching them all over. I removed the netware login from the workstation network protocols control panel and set it to log in using windows networking. I got domain authentication working fine, except I've managed to lose the admin user on the workstation. I realise this is probably an NT issue, but was wondering if there is a way to get the SAMBA server to tell the workstation that my admin user has administrator rights on the workstation - or is this something I need to set up on the workstation before removing the novell client? Is there any way (other than a complete reinstall) to get administrator rights back on the workstation? Any advice / pointers on these two issues would be most appreciated. Thanks in advance, Dan. relevant??? parts of the smb.conf file look like this: [global] logon home = \\%L\%U\.hide\.profile logon path = \\%L\profiles\%U_NT_profile logon script = %U.bat domain user map = /etc/samba/domainuser.map [homes] comment = Home Directories browseable = no read only = no preserve case = yes short preserve case = yes create mode = 0700 [profiles] comment = Roving Profiles Share path = /shared/pcserver/Profiles readonly = false create mask = 0600 directory mask = 0700 browseable = false guest ok = false writable = true [netlogon] path = /shared/netlogon comment = Netlogon share root preexec = /shared/netlogon/genlogon.pl %U %G %L %m root postexec = /shared/netlogon/dellogon.pl %U %G %L %m writeable = no guest ok = no browseable = no the %U.bat login script that gets generated for a user looks like this: @echo off NET TIME \\server /SET /YES NET USE N: \\server\pcstuff NET USE P: \\server\dan NET USE K: \\server\data NET USE X: \\server\transfer the domainuser.map file looks like this: admin = Administrator dan = Administrator From mike at easysw.com Wed Apr 11 00:21:15 2001 From: mike at easysw.com (Sandra Sweet) Date: Tue Dec 2 02:34:13 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> <134001c0c207$793e9cc0$0300a8c0@station1> Message-ID: <3AD3A37B.7D147311@easysw.com> Gary Wilson wrote: > > Does the --with-fhs option work in configure? I tried it with > alpha3, but everything was stored in /usr/local. Is that correct? > ... Yes - the default prefix is still /usr/local; --with-fhs just changes the default paths for the config, etc. files to match the GNU/FHS specs. To get a complete FHS directory spec, use: ./configure --with-fhs --prefix=/usr --sysconfdir=/etc \ --localstatedir=/var -- ______________________________________________________________________ Michael Sweet, Easy Software Products mike@easysw.com Printing Software for UNIX http://www.easysw.com From bcaudle at hotmail.com Wed Apr 11 00:22:16 2001 From: bcaudle at hotmail.com (Brandon Caudle) Date: Tue Dec 2 02:34:13 2003 Subject: netlogon share Message-ID: Me Again, everyone told me i had to put the logon scripts in the netlogon share can that shares path be = /home/samba/netlogon ? Thanks brandon caudle _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com From jeremy at valinux.com Tue Apr 10 22:49:13 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:13 2003 Subject: 2.2 Release immenent/2.0.7 possible print issues References: Message-ID: <3AD38DE9.491B2E11@valinux.com> Samuel Greenfeld wrote: > 1. While the print job itself is forced to the user, no accessory program used seems > to do so. This is a problem with LPRng, given that only certain users may be given > rights to force the username of a print job, and it is desirable to keep that list as > small as possible. Right now, we are living with this, and working around it, but a > fix to this would be nice. This activity was verified by temporarily putting a program > in place of /bin/sh (run by system()) that would log the UID, EUID, GUID, command & > parameters, etc. Hmmmm. smbd becomes the user reqesting the print job before doing the lpr call. What isn't working for you here ? > 2. Whenever someone requests the printer's status, samba creates a /tmp/lpq.XXXXX file, > where XXXXX is a series of eight or so characters. This file is created as root, but > is not deleted. After a while, this leads to a lot of /tmp/lpq.XXXXX files hanging > around that have to be manually cleared. A new one seems to be created whenever samba > feels like refreshing a print queue's status. Fixed. Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From jeremy at valinux.com Wed Apr 11 00:06:26 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:13 2003 Subject: syncing print drivers between two samba servers References: <3AD37537.5D9F16CF@research.bell-labs.com> Message-ID: <3AD3A002.6391171D@valinux.com> Rajeev Agrawala wrote: > > Hi, > > I have samba 2_2_alpha3 running on two machines. I want to install > drivers on one machine and then I want to keep the other machine in sync > with the first. Can I get away with doing the following > > 1. sync the print$ share > 2. copy sambadir/var/locks/ntdrivers.tdb to the second samba server. > > Should I shutdown any/both samba servers, while I am doing this? I would > really like to avoid, shutting down server, if I can. Would smbd read > the new tdb file on it own? Hmmm. Very interesting point. I think it should work, try it and let the list know.... Don't forget to make sure the permissions on the print$ share files are the same. Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From gcarter at valinux.com Wed Apr 11 03:02:16 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:13 2003 Subject: syncing print drivers between two samba servers In-Reply-To: <3AD3A002.6391171D@valinux.com> Message-ID: On Tue, 10 Apr 2001, Jeremy Allison wrote: > Rajeev Agrawala wrote: > > > > Hi, > > > > I have samba 2_2_alpha3 running on two machines. I want to install > > drivers on one machine and then I want to keep the other machine in sync > > with the first. Can I get away with doing the following > > > > 1. sync the print$ share > > 2. copy sambadir/var/locks/ntdrivers.tdb to the second samba server. > > > > Should I shutdown any/both samba servers, while I am doing this? I would > > really like to avoid, shutting down server, if I can. Would smbd read > > the new tdb file on it own? > > Hmmm. Very interesting point. I think it should work, try > it and let the list know.... > > Don't forget to make sure the permissions on the print$ share > files are the same. You will need to set the driver for each print on the new server. see the setdriver command in rpcclient. jerry From rick.day at thewarehousegroup.com.au Wed Apr 11 03:59:38 2001 From: rick.day at thewarehousegroup.com.au (Rick Day) Date: Tue Dec 2 02:34:13 2003 Subject: access for local machine NT user using security=domain Message-ID: Hi all, I am using Samba 2.0.6 on SCO OS 5.0.5, using security=DOMAIN. On one of the WinNT member servers, I need to run some processes as administrator. Because I do not want to have the standard user for this system having network administrator privileges, I have set up the user on the local machine with administrator privileges, ie the standard login on this server is user 'rs1user' on to domain 'ccsydrs1' (the machine name). With this login, I can access shares on other WinNT servers, but not on any of the unix/samba servers. The same username is set up on the network, as a normal user, and connects to the shares fine, I just can not run the processes. It is obvious from the log messages, below, why the samba connection is working the way it is. My question is, does anyone know how to make samba work like WinNT, so that I can access the samba shares whilst logged on locally, rather than to the domain. I have attached the relevant log messages, and my smb.conf Thanks Rick Day Senior Systems Engineer Clints Crazy Bargains/The Warehouse Group email: rick.day@thewarehousegroup.com.au [2001/04/11 12:36:11, 0] rpc_client/cli_netlogon.c:cli_net_sam_logon(392) cli_net_sam_logon: NT_STATUS_NO_SUCH_USER [2001/04/11 12:36:11, 0] smbd/password.c:domain_client_validate(1431) domain_client_validate: unable to validate password for user rs1user in domain CCSYDRS1 to Domain controller CCSYDFS2. Error was NT_STATUS_NO_SUCH_USER. [global] workgroup = TWA server string = CBA Live Server log file = /usr/local/samba/log/log.%m max log size = 5000 security = DOMAIN password server = CCSYDFS2, CCSYDFS1, CCSYDMS1, CCMELFS2, CCBRIFS2, CCROCFS2 encrypt passwords = yes smb passwd file = /usr/local/samba/private/smbpasswd socket options = TCP_NODELAY local master = No dns proxy = no default case = lower case sensitive = No preserve case = Yes short preserve case = No deadtime = 15 oplocks = Yes [homes] comment = Home Directories browseable = no writable = yes [vol] comment = CBA Data share path = /u/vol writable = yes printable = no From lamasney at mlode.com Wed Apr 11 04:07:42 2001 From: lamasney at mlode.com (Mike Lamasney) Date: Tue Dec 2 02:34:13 2003 Subject: netlogon share In-Reply-To: Message-ID: <3.0.5.32.20010410210742.00a8fc60@mail.mlode.com> Brandon, you can make the path anywhere you want as long as it is defined in that part of the smb.conf that defines the "netlogon" share. Remember that all the workstations will only see the \\server\netlogon name and that Linux/Samba does the conversion to real directories on your mounted volumes. Mike At 08:22 PM 4/10/01 -0400, Brandon Caudle wrote: >Me Again, > >everyone told me i had to put the logon scripts in the netlogon share can >that shares path be > >= /home/samba/netlogon > >? > >Thanks > >brandon caudle >_________________________________________________________________ >Get your FREE download of MSN Explorer at http://explorer.msn.com > > > From vorlon at netexpress.net Wed Apr 11 04:24:41 2001 From: vorlon at netexpress.net (Steve Langasek) Date: Tue Dec 2 02:34:13 2003 Subject: Problems installing a standalone MS Exchange Server in a Samb a 2.0.7 Domain In-Reply-To: Message-ID: On Tue, 10 Apr 2001, McEldowney, Michael wrote: > I'm assuming that?your using the Samba 2.0.7 box as your "PDC" for the > domain.? If so, you won't be able to get Exchange to work.? It requires > PDC services that 2.0.7 doesn't provide.? You have 3 options: > 1. Use 2.2.0-alpha3 if you dare run it in a production environment (not > recommended, but?you could wait for?the 2.2 release) Hmm, I've had quite a few difficulties getting Exchange to work against our Samba 2.2.0-alpha3 PDC. (To be exact, a co-worker of mine tied an Exchange server into our Samba-TNG domain without telling me, and when I tried to migrate the PDC, everything broke and we have yet to get it working again.) Does anyone have any first-hand experience with getting Exchange working successfully against 2.2.0-alpha3? Steve Langasek postmodern programmer From barth at cck.uni-kl.de Wed Apr 11 06:13:10 2001 From: barth at cck.uni-kl.de (Christian Barth) Date: Tue Dec 2 02:34:13 2003 Subject: access for local machine NT user using security=domain In-Reply-To: Message-ID: <3AD41216.421.2EBF3F@localhost> > I am using Samba 2.0.6 on SCO OS 5.0.5, using security=DOMAIN. On one of > the WinNT member servers, I need to run some processes as administrator. > Because I do not want to have the standard user for this system having > network administrator privileges, I have set up the user on the local > machine with administrator privileges, ie the standard login on this server > is user 'rs1user' on to domain 'ccsydrs1' (the machine name). With this > login, I can access shares on other WinNT servers, but not on any of the > unix/samba servers. The same username is set up on the network, as a normal > user, and connects to the shares fine, I just can not run the processes. > > It is obvious from the log messages, below, why the samba connection is > working the way it is. My question is, does anyone know how to make samba > work like WinNT, so that I can access the samba shares whilst logged on > locally, rather than to the domain. > > I have attached the relevant log messages, and my smb.conf > > Thanks > Rick Day > Senior Systems Engineer > Clints Crazy Bargains/The Warehouse Group > email: rick.day@thewarehousegroup.com.au > > > [2001/04/11 12:36:11, 0] rpc_client/cli_netlogon.c:cli_net_sam_logon(392) > cli_net_sam_logon: NT_STATUS_NO_SUCH_USER > [2001/04/11 12:36:11, 0] smbd/password.c:domain_client_validate(1431) > domain_client_validate: unable to validate password for user rs1user in > domain CCSYDRS1 to Domain controller CCSYDFS2. Error was > NT_STATUS_NO_SUCH_USER. Just my thoughts: the local NT machine is ccsydrs1, the domain controlers are ccsydfs2, ccsydfs1, .... the local user is rs1user the user on the domain controlers is rs1user the password for the local user and the domain user rs1user are the same, the domain name ist TWA the name of the samba server is ....(I'll call it samba), right? Wenn connecting a network dirve in NT you get a dialog box, where you can chose: the drive name the network share the user name (pretty standard, just to make sure you don't go the network neighbourhood first) I recommend to start playing with the user name supplied in this box. (I had to do it once to connect to local accounts on domain member workstations): If you connect to \\smaba\share without supplying a user name or with supplying rs1user, you supply ccsydrs1\rs1user, not only rs1user, not twa\rs1user as rs1user is logged in localy. Try what happens if you enter twa\rs1user, samba\rs1user or ccsydfs2\rs1user, compare the -W option of smbclient and syntax of the NT "net use" comand (net use /?). Hope this points to the right direction Christian > > > [global] > workgroup = TWA > server string = CBA Live Server > log file = /usr/local/samba/log/log.%m > max log size = 5000 > security = DOMAIN > password server = CCSYDFS2, CCSYDFS1, CCSYDMS1, CCMELFS2, CCBRIFS2, > CCROCFS2 > encrypt passwords = yes > smb passwd file = /usr/local/samba/private/smbpasswd > socket options = TCP_NODELAY > local master = No > dns proxy = no > default case = lower > case sensitive = No > preserve case = Yes > short preserve case = No > deadtime = 15 > oplocks = Yes > [homes] > comment = Home Directories > browseable = no > writable = yes > [vol] > comment = CBA Data share > path = /u/vol > writable = yes > printable = no > > _______________________________________________________________________ In a world without walls and fences, who needs windows and gates? (SUN) From ejs at delfi.lt Wed Apr 11 08:29:04 2001 From: ejs at delfi.lt (Augis) Date: Tue Dec 2 02:34:13 2003 Subject: access for local machine NT user using security=domain References: Message-ID: <3AD415D0.1020006@delfi.lt> Rick Day wrote: > Hi all, > > I am using Samba 2.0.6 on SCO OS 5.0.5, using security=DOMAIN. On one of > the WinNT member servers, I need to run some processes as administrator. > Because I do not want to have the standard user for this system having > network administrator privileges, I have set up the user on the local > machine with administrator privileges, ie the standard login on this server > is user 'rs1user' on to domain 'ccsydrs1' (the machine name). With this > login, I can access shares on other WinNT servers, but not on any of the > unix/samba servers. The same username is set up on the network, as a normal > user, and connects to the shares fine, I just can not run the processes. Hope this will help: add normal user 'rs1user' to the domain and add this domain user to the local 'Administrators' group. Thus you should be able authenticate in the domain. > It is obvious from the log messages, below, why the samba connection is > working the way it is. My question is, does anyone know how to make samba > work like WinNT, so that I can access the samba shares whilst logged on > locally, rather than to the domain. -- Augis From Andrzej.Pecherski at at.siemens.de Wed Apr 11 11:18:16 2001 From: Andrzej.Pecherski at at.siemens.de (Pecherski Andrzej) Date: Tue Dec 2 02:34:13 2003 Subject: (no subject) Message-ID: Sincerely yours Andrzej Pecherski *mailto:andrzej.pecherski@at.siemens.de -------------- next part -------------- A non-text attachment was scrubbed... Name: Pecherski Andrzej.vcf Type: application/octet-stream Size: 427 bytes Desc: not available Url : http://lists.samba.org/archive/samba-ntdom/attachments/20010411/f3018d87/PecherskiAndrzej.obj From kimmo.akkanen at remedium.fi Wed Apr 11 12:19:54 2001 From: kimmo.akkanen at remedium.fi (Kimmo Akkanen) Date: Tue Dec 2 02:34:13 2003 Subject: Problems with NT logons, Samba as PDC References: <20010410190129.776A24F07@lists.samba.org> Message-ID: <3AD44BEA.E1B5BF73@remedium.fi> Hi! We're using Samba as PDC, and recently had a strange crash on the system (none of the NT-machines authenticated anymore). I re-created the user database and passwords on the server (TurboLinux 2.2.14-5, with Samba 2.0.6 & 2.1alpha for auth.) and also re-newed the profiles making 'em local on the NT-workstations. Sometimes when the NT-PC gets rebooted, I can't authenticate it back to the domain until I logon as admin and jump off and back on to the domain. Any ideas? I'll include a few strange rows from Samba's logfiles below, all help is appreciated. =) --- CLIP CLIP CLIP --- [2001/04/11 12:21:20, 0] passdb/smbpassfile.c:get_trust_account_password(202) get_trust_account_password: Malformed trust password file (wrong length - was 0, should be 45). [2001/04/11 12:21:20, 0] passdb/smbpassfile.c:trust_get_passwd(294) domain_client_validate: unable to read the machine account password for machine SERVERX in domain DOMAINX. [2001/04/11 12:21:20, 0] smbd/nttrans.c:call_nt_transact_ioctl(2401) call_nt_transact_ioctl: Currently not implemented. --- CLIP CLIP CLIP --- (did some cut&paste work on the lines, try to follow up) The SERVERX is replaced with the name of our server, as is the DOMAINX with the domain name. Does anyone have a clue what's the reason for those trust account-errors? They come up on every NT's logon. :( Still, I'm able to use all shares etc. What about that "currently not implemented"-thing? Thanks a lot for anyone who answers! =) -- Kimmo Akkanen IT-Officer Remedium Ltd./Oy phone. +358 9 6226 7125 cell. +358 40 9000 125 fax. +358 9 6226 7114 kimmo.akkanen@remedium.fi From GScherb at mriresearch.org Wed Apr 11 13:29:49 2001 From: GScherb at mriresearch.org (Scherb, Glenn) Date: Tue Dec 2 02:34:13 2003 Subject: access database Message-ID: We've been doing heavy MS Access development here since 1998 with Linux on ext2 and reiser partitions as well as FreeBSD using UFS. A number of issues crop up with Access and Microsoft Outlook. 1. Ensure the kernel has kernel locking enabled. I had problems with this on RH 5.2 and 6.1 until I recompiled the kernel. 2. Experiment with the oplock settings. I have ended up with corruption of Access *.mdb files and Outlook *.pst files when they were enabled on Linux machines. No problems with FreeBSD/ufs. This was a problem with multiple users on the same back end data container. 3. Look at the socket options. I usually have mine set with TCP_NODELAY and SO_KEEPALIVE 4. The keepalive setting is 300 on the Linux boxes and 0 for FreeBSD. I don't recommend adjusting this unless Access posts a 'disk or network error message'. When this happens, Access behaves as though the network connection has dropped, but the Windoze Explorer still shows the share as live and intact. This also happens on NT 4.0 servers periodically, so I suspect this is a Microsoft networking problem, not something caused by Samba. Experimenting will determine a useful value. 5. If you deploy multiuser Access databases, be sure to keep the application code and queries in a local container on the client machine and link the tables to a shared container on a server. Performance is better and you'll have fewer application hangs. The same rules apply to deployment on NT or Win2K servers. My client machines are Win95, NT4.0, and Win2K. Servers range from RH 6.1 (ext2), Mandrake 7.2 (reiserfs), and FreeBSD 4.2 (ufs). All systems run Samba 2.0.7 using an NTS4.0 PDC. We've been pounding the Mandrake box for 4 months with no problems; reiserfs performance is great. The RedHat boxes have been up for 16 months and the FreeBSD boxes have been up for 8 months. Best stability and performance is on FreeBSD oplocks work reliably on these systems so I typically set them on and get a little bet better performance with some operations. Don't hesitate to drop me a line if you need some assistance. Regards, Glenn -- Glenn Scherb Midwest Research Institute 425 Volker Boulevard Kansas City, Missouri 64110 gscherb@mriresearch.org http://www.mriresearch.org Phone: (816)753-7600 x1806 FAX: (816)753-5359 Page: (816)990-8513 pagegscherb@mriresearch.org -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Brandon Caudle Sent: Tuesday, April 10, 2001 11:43 AM To: samba-ntdom@samba.org Subject: access database Has anyone heard of corruption of an access database on a ext2 (riserfs) samba share? Brandon Caudle _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com From mhaney at info4cars.com Wed Apr 11 13:40:14 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:13 2003 Subject: access database In-Reply-To: Message-ID: In reply to number 4, yes this is a MS networking issue. It happens on a regular basis on Access DB's even on NT shares. I worked on the problem with MS for some time and never really got a good resolution to the problem other than migrate to a true multiuser DB like Oracle or SQL server with the Access front end. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Scherb, Glenn Sent: Wednesday, April 11, 2001 9:30 AM To: 'Brandon Caudle'; 'samba-ntdom@samba.org' Subject: RE: access database We've been doing heavy MS Access development here since 1998 with Linux on ext2 and reiser partitions as well as FreeBSD using UFS. A number of issues crop up with Access and Microsoft Outlook. 1. Ensure the kernel has kernel locking enabled. I had problems with this on RH 5.2 and 6.1 until I recompiled the kernel. 2. Experiment with the oplock settings. I have ended up with corruption of Access *.mdb files and Outlook *.pst files when they were enabled on Linux machines. No problems with FreeBSD/ufs. This was a problem with multiple users on the same back end data container. 3. Look at the socket options. I usually have mine set with TCP_NODELAY and SO_KEEPALIVE 4. The keepalive setting is 300 on the Linux boxes and 0 for FreeBSD. I don't recommend adjusting this unless Access posts a 'disk or network error message'. When this happens, Access behaves as though the network connection has dropped, but the Windoze Explorer still shows the share as live and intact. This also happens on NT 4.0 servers periodically, so I suspect this is a Microsoft networking problem, not something caused by Samba. Experimenting will determine a useful value. 5. If you deploy multiuser Access databases, be sure to keep the application code and queries in a local container on the client machine and link the tables to a shared container on a server. Performance is better and you'll have fewer application hangs. The same rules apply to deployment on NT or Win2K servers. My client machines are Win95, NT4.0, and Win2K. Servers range from RH 6.1 (ext2), Mandrake 7.2 (reiserfs), and FreeBSD 4.2 (ufs). All systems run Samba 2.0.7 using an NTS4.0 PDC. We've been pounding the Mandrake box for 4 months with no problems; reiserfs performance is great. The RedHat boxes have been up for 16 months and the FreeBSD boxes have been up for 8 months. Best stability and performance is on FreeBSD oplocks work reliably on these systems so I typically set them on and get a little bet better performance with some operations. Don't hesitate to drop me a line if you need some assistance. Regards, Glenn -- Glenn Scherb Midwest Research Institute 425 Volker Boulevard Kansas City, Missouri 64110 gscherb@mriresearch.org http://www.mriresearch.org Phone: (816)753-7600 x1806 FAX: (816)753-5359 Page: (816)990-8513 pagegscherb@mriresearch.org -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Brandon Caudle Sent: Tuesday, April 10, 2001 11:43 AM To: samba-ntdom@samba.org Subject: access database Has anyone heard of corruption of an access database on a ext2 (riserfs) samba share? Brandon Caudle _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com From aalang at rutgersinsurance.com Wed Apr 11 13:59:16 2001 From: aalang at rutgersinsurance.com (Adam Lang) Date: Tue Dec 2 02:34:13 2003 Subject: access database References: Message-ID: <008e01c0c28f$98b84960$330a0a0a@rutgersinsurance.com> As a side note, if you are working with Linux already, PostgreSQL is a very good choice. Adam Lang Systems Engineer Rutgers Casualty Insurance Company http://www.rutgersinsurance.com ----- Original Message ----- From: "Mark Haney" To: "Scherb, Glenn" ; "'Brandon Caudle'" ; Sent: Wednesday, April 11, 2001 9:40 AM Subject: RE: access database > In reply to number 4, yes this is a MS networking issue. It happens on a > regular basis on Access DB's even on NT shares. I worked on the problem > with MS for some time and never really got a good resolution to the problem > other than migrate to a true multiuser DB like Oracle or SQL server with the > Access front end. > > > -----Original Message----- > From: samba-ntdom-admin@lists.samba.org > [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Scherb, Glenn > Sent: Wednesday, April 11, 2001 9:30 AM > To: 'Brandon Caudle'; 'samba-ntdom@samba.org' > Subject: RE: access database > > > We've been doing heavy MS Access development here since 1998 with Linux on > ext2 and reiser partitions as well as FreeBSD using UFS. A number of issues > crop up with Access and Microsoft Outlook. > 1. Ensure the kernel has kernel locking enabled. I had problems with this > on RH 5.2 and 6.1 until I recompiled the kernel. > 2. Experiment with the oplock settings. I have ended up with corruption of > Access *.mdb files and Outlook *.pst files when they were enabled on Linux > machines. No problems with FreeBSD/ufs. This was a problem with multiple > users on the same back end data container. > 3. Look at the socket options. I usually have mine set with TCP_NODELAY > and SO_KEEPALIVE > 4. The keepalive setting is 300 on the Linux boxes and 0 for FreeBSD. I > don't recommend adjusting this unless Access posts a 'disk or network error > message'. When this happens, Access behaves as though the network > connection has dropped, but the Windoze Explorer still shows the share as > live and intact. This also happens on NT 4.0 servers periodically, so I > suspect this is a Microsoft networking problem, not something caused by > Samba. Experimenting will determine a useful value. > 5. If you deploy multiuser Access databases, be sure to keep the > application code and queries in a local container on the client machine and > link the tables to a shared container on a server. Performance is better > and you'll have fewer application hangs. The same rules apply to deployment > on NT or Win2K servers. > > My client machines are Win95, NT4.0, and Win2K. Servers range from RH 6.1 > (ext2), Mandrake 7.2 (reiserfs), and FreeBSD 4.2 (ufs). All systems run > Samba 2.0.7 using an NTS4.0 PDC. We've been pounding the Mandrake box for 4 > months with no problems; reiserfs performance is great. The RedHat boxes > have been up for 16 months and the FreeBSD boxes have been up for 8 months. > Best stability and performance is on FreeBSD oplocks work reliably on these > systems so I typically set them on and get a little bet better performance > with some operations. > > Don't hesitate to drop me a line if you need some assistance. > > Regards, > > Glenn > -- > Glenn Scherb > Midwest Research Institute > 425 Volker Boulevard > Kansas City, Missouri 64110 > > gscherb@mriresearch.org > http://www.mriresearch.org > > Phone: (816)753-7600 x1806 > FAX: (816)753-5359 > > Page: (816)990-8513 > pagegscherb@mriresearch.org > > > -----Original Message----- > From: samba-ntdom-admin@lists.samba.org > [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Brandon Caudle > Sent: Tuesday, April 10, 2001 11:43 AM > To: samba-ntdom@samba.org > Subject: access database > > > Has anyone heard of corruption of an access database on a ext2 (riserfs) > samba share? > > Brandon Caudle > _________________________________________________________________ > Get your FREE download of MSN Explorer at http://explorer.msn.com > > > > From Martin.Kadlez at austrocontrol.at Wed Apr 11 14:11:20 2001 From: Martin.Kadlez at austrocontrol.at (Martin Kadlez) Date: Tue Dec 2 02:34:13 2003 Subject: unsubsrcibe Message-ID: <3AD46608.D7A6B2D5@austrocontrol.at> From aalang at rutgersinsurance.com Wed Apr 11 14:27:01 2001 From: aalang at rutgersinsurance.com (Adam Lang) Date: Tue Dec 2 02:34:13 2003 Subject: unsubsrcibe References: <3AD46608.D7A6B2D5@austrocontrol.at> Message-ID: <000901c0c293$79a34c60$330a0a0a@rutgersinsurance.com> we won't let you Adam Lang Systems Engineer Rutgers Casualty Insurance Company http://www.rutgersinsurance.com ----- Original Message ----- From: "Martin Kadlez" To: Sent: Wednesday, April 11, 2001 10:11 AM Subject: unsubsrcibe > > From rforman at grayassociates.net Wed Apr 11 14:59:08 2001 From: rforman at grayassociates.net (Rich Forman) Date: Tue Dec 2 02:34:13 2003 Subject: Thanks to the Samba team (of course a few questions) Message-ID: <001801c0c297$f6348060$0a01a8c0@forman> First of all, thanks to the Samba team and all those who have done a fantastic job in giving the world a superior option to M$!!!!! I'm a newbian here so be a little patient. I have set up a 2.2 PDC and am able to get NT4 and W2k clients authenticating successfully. I have a few questions regarding some minor details When a client logs off, the machine is still shown in network neighborhood for quite a while (on the order of 30-40 min). Is there a setting for smb.conf to reduce this? I have wins support enabled but would like to know where the database file is located that resolves names to ip addresses. Is it a plain text file or do I need something special to view it. Our corporate finance program uses an access database that all employees need to access to enter time records. I will be moving all of this over to my new samba PDC soon. I have been following the recent thread concerning access but am still unsure if I need to do anything special to enable multiple people to access this file simultaneously either in smb.conf or anything else. Any suggestions? Thanks in advance for any assistance. Richard Forman Gray & Associates rforman@grayassociates.net 775/329-2911 From andre.doehn at econia.com Wed Apr 11 15:01:25 2001 From: andre.doehn at econia.com (andre.doehn@econia.com) Date: Tue Dec 2 02:34:13 2003 Subject: failed to set socket option Message-ID: hi list, iam using samba 2.2 a3 an I get this error message in the syslog. smbd[889]: lib/util_sock.c:set_socket_options(165) smbd[889]: Failed to set socket option SO_KEEPALIVE (Error Bad file descriptor) smbd[889]: lib/util_sock.c:set_socket_options(165) smbd[889]: Failed to set socket option TCP_NODELAY (Error Operation not supported) it?s a linux based system with kernel 2.2.18 - what kerneloption should I enable to provide these parameters? thanks andre From dpersohn at ifrance.com Wed Apr 11 15:34:51 2001 From: dpersohn at ifrance.com (dpersohn@ifrance.com) Date: Tue Dec 2 02:34:13 2003 Subject: smbpasswd 2.0.7-3 matters Message-ID: <200104111534.334f@lh00.opsion.fr> My message is first in english (hope you'll understand it), et en fran?ais pour ceux qui le causent. --- ENGLISH --- Hi everybody, I've got a matter with my Samba server supplied by Debien 2.2r0. testparm returns there's no problem in smb.conf. It's in 'security = DOMAIN' mode. I've got 3 boxes : SERVEUR$, POSTE1$ and POSTE2$, and 6 users, all correctly added to /etc/passwd. I've put SERVEUR$ in /etc/samba/smbpasswd with 'smbpasswd -a -m SERVEUR'. No problem. But, each entry after that, about a box or a user, gives that message twice : getsmbfilepwent : Malformed Lanman password entry (non hex chars) This, each time I add an entry, so at the end I've 16 lines like that. There wasn't problem for the first entry (SERVEUR$). My smbpasswd looks fine, smb.conf too... I added them here. Did someone have this matter ? Help !!! I can't work... Damien Persohn dpersohn@ifrance.com PS : notes about the server Bi-Pentium III 1 GHz, Linux 2.2.19, Samba 2.0.7-3 --- FRAN?AIS --- Bonjour tout le monde, j'ai un probl?me avec mon serveur Samba 2.0.7-3 livr? avec la Debian 2.2r0. testparm me dit que mon smb.conf est valide. Je suis en 'security = DOMAIN'. J'ai 3 machines : SERVEUR$, POSTE1$, POSTE2$, et 6 utilisateurs, tous correctement inscrits dans /etc/passwd. J'ai inscrit SERVEUR$ dans smbpasswd avec 'smbpasswd -a -m SERVEUR'. Jusque-l?, pas de probl?me. Mais ? chaque entr?e suivante, qu'elle concerne une machine ou un utilisateur, j'obtiens ce message en double exemplaire : getsmbfilepwent : Malformed Lanman password entry (non hex chars) Et ce, ? chaque fois que j'ajoute une entr?e, donc ? la fin j'ai 16 lignes de ce type. Il n'y a pas eu de probl?me pour la premi?re entr?e (SERVEUR$). Mon smbpasswd me semble correct, mon smb.conf aussi... Ils sont joints. Quelqu'un a-t'il d?j? eu ce genre de probl?me ? A l'aide !!! Je suis totalement bloqu? dans mon travail... Damien Persohn dpersohn@ifrance.com PS : config du serveur Bi-Pentium III 1 GHz, Linux 2.2.19, Samba 2.0.7-3 --------------- ______________________________________________________________________________ ifrance.com, l'email gratuit le plus complet de l'Internet ! vos emails depuis un navigateur, en POP3, sur Minitel, sur le WAP... http://www.ifrance.com/_reloc/email.emailif From bogus@does.not.exist.com Wed Apr 11 15:39:47 2001 From: bogus@does.not.exist.com (Damien Persohn) Date: Tue Dec 2 02:34:13 2003 Subject: smbpasswd 2.0.7-3 matters (with smbpasswd & smb.conf...) Message-ID: <200104111539.2ed1@lh00.opsion.fr> My message is first in english (hope you'll understand it), et en fran?ais pour ceux qui le causent. --- ENGLISH --- Hi everybody, I've got a matter with my Samba server supplied by Debien 2.2r0. testparm returns there's no problem in smb.conf. It's in 'security = DOMAIN' mode. I've got 3 boxes : SERVEUR$, POSTE1$ and POSTE2$, and 6 users, all correctly added to /etc/passwd. I've put SERVEUR$ in /etc/samba/smbpasswd with 'smbpasswd -a -m SERVEUR'. No problem. But, each entry after that, about a box or a user, gives that message twice : getsmbfilepwent : Malformed Lanman password entry (non hex chars) This, each time I add an entry, so at the end I've 16 lines like that. There wasn't problem for the first entry (SERVEUR$). My smbpasswd looks fine, smb.conf too... I added them here. Did someone have this matter ? Help !!! I can't work... Damien Persohn dpersohn@ifrance.com PS : notes about the server Bi-Pentium III 1 GHz, Linux 2.2.19, Samba 2.0.7-3 --- FRAN?AIS --- Bonjour tout le monde, j'ai un probl?me avec mon serveur Samba 2.0.7-3 livr? avec la Debian 2.2r0. testparm me dit que mon smb.conf est valide. Je suis en 'security = DOMAIN'. J'ai 3 machines : SERVEUR$, POSTE1$, POSTE2$, et 6 utilisateurs, tous correctement inscrits dans /etc/passwd. J'ai inscrit SERVEUR$ dans smbpasswd avec 'smbpasswd -a -m SERVEUR'. Jusque-l?, pas de probl?me. Mais ? chaque entr?e suivante, qu'elle concerne une machine ou un utilisateur, j'obtiens ce message en double exemplaire : getsmbfilepwent : Malformed Lanman password entry (non hex chars) Et ce, ? chaque fois que j'ajoute une entr?e, donc ? la fin j'ai 16 lignes de ce type. Il n'y a pas eu de probl?me pour la premi?re entr?e (SERVEUR$). Mon smbpasswd me semble correct, mon smb.conf aussi... Ils sont joints. Quelqu'un a-t'il d?j? eu ce genre de probl?me ? A l'aide !!! Je suis totalement bloqu? dans mon travail... Damien Persohn dpersohn@ifrance.com PS : config du serveur Bi-Pentium III 1 GHz, Linux 2.2.19, Samba 2.0.7-3 --------------- ______________________________________________________________________________ ifrance.com, l'email gratuit le plus complet de l'Internet ! vos emails depuis un navigateur, en POP3, sur Minitel, sur le WAP... http://www.ifrance.com/_reloc/email.emailif -------------- next part -------------- [global] admin users = admin allow trusted domains = yes bind interfaces only = yes case sensitive = no change notify timeout = 15 character set = ISO8859-1 client code page = 850 create mask = 0770 deadtime = 15 debug timestamp = yes debug level = 1 default case = lower delete readonly = yes delete veto files = yes directory mask = 0770 dns proxy = yes domain logons = yes domain master = yes dont descend = /dev dos filetimes = yes encrypt passwords = yes fake oplocks = yes getwd cache = yes guest ok = no hosts allow = 192.168.111.0/255.255.255.0 inherit permissions = yes interfaces = eth0 lo keepalive = 60 level2 oplocks = yes load printers = no local master = yes logon drive = u: logon home = \\SERVEUR\%U\Profils\%m logon path = \\SERVEUR\%U\Profils\%m logon script = /home/admin/demarrage.bat mangle case = no map to guest = Never max xmit = 65535 message command = bash -c 'mail -s "Message de %f sur %m" admin < %s; rm %s' name resolve order = lmhosts bcast wins hosts netbios name = SERVEUR nt acl support = yes null passwords = no oplocks = yes os level = 100 panic action = bash -c 'mail -s "Samba" < echo "Probl?me SMB"' passwd chat = "*Ancien mot de passe :*" %o\n "*Nouveau mot de passe :*" %n\n "*Confirmer :*" %n\n "*Mot de passe modifi?*" password level = 5 preferred master = yes preserve case = yes read raw = yes read size = 65536 remote announce = 192.168.111.255/PARAGEL restrict anonymous = yes security = domain server string = Serveur [Linux 2.2] shared mem size = 5242880 socket options = IPTOS_LOWDELAY TCP_NODELAY short preserve case = no time offset = 60 time server = yes unix password sync = yes unix realname = yes username level = 1 valid chars = 32 33 35 36 37 38 39 40 41 43 44 45 46 48 49 50 51 52 53 54 55 56 57 59 61 64 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 93 94 95 96 65:97 66:98 67:99 68:100 69:101 70:102 71:103 72:104 73:105 74:106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 125 126 127 128 130 131 132 133 134 135 136 137 138 139 140 145 146 147 148 149 150 151 152 153 154 155 156 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 valid users = @paragel wins support = yes widelinks = yes workgroup = PARAGEL write list = @paragel write cache size = 262144 [homes] create mask = 0700 directory mask = 0700 comment = Fichiers personnels [QMS] path = /var/spool/lpd/QMS lpq command = /usr/bin/lpq -P QMS lprm command = /usr/bin/lprm -P QMS %j comment = Minolta-QMS Magicolor 2200 GN print command = lpr -P QMS %s printer name = QMS printable = yes printer driver = MINOLTA-QMS magicolor 2200 [Epson] lpq command = /usr/bin/lpq -P Epson lprm command = /usr/bin/lprm -P Epson %j comment = Epson LQ-570+ printable = yes printer name = Epson print command = lpr -P Epson %s printer driver = Epson LQ-570+ ESC/P 2 path = /var/spool/lpd/Epson [Canon] lpq command = /usr/bin/lpq -P Canon lprm command = /usr/bin/lprm -P Canon %j comment = Canon LBP8-IIIR printable = yes print command = lpr -P Canon %s printer name = Canon printer driver = Canon LBP-8 IIIR path = /var/spool/lpd/Canon [Fax] comment = Envoi de t?l?copies printable = yes printer name = Fax path = /var/spool/lpd/Fax [Programmes] path = /opt comment = Applications [Documents] path = /documents create mask = 0770 comment = Documents accessibles ? tout le groupe [Web] path = /? comment = Racine du serveur HTTP [Racine] browseable = no only user = yes valid users = admin comment = Racine du syst?me de fichiers path = / ? -------------- next part -------------- SERVEUR$:999:33EA958F42D0D769AAD3B435B51404EE:AC35DD5119A272FEC8ACE8611A1B8EAC:[W ]:LCT-3AF7C179: POSTE1$:998:019531F2AC662DECAAD3B435B51404EE:637419A9D16C7D400F40117FEC1C328C:[W ]:LCT-3AF7C1AC: POSTE2$:997:D5E369F6930F10B8AAD3B435B51404EE:717ECDF3E18A9A2956636DAB303076E7:[W ]:LCT-3AF7C1B1: admin:1001:70D9FFE284F62773AAD3B435B51404EE:12F82CA11747D07446DF5C990BBB3B89:[U ]:LCT-3AF7C1D1: ph:1002:88BD38E32DD00D23AAD3B435B51404EE:9A7B306CA0AEDE9AA8F8C00FB905365E:[U ]:LCT-3AF7C1DC: jp:1003:997888244768CB40AAD3B435B51404EE:B4C3143D9B36A39156ED4743A8004D00:[U ]:LCT-3AF7C1EE: paul:1004:6402494CD3B86B10AAD3B435B51404EE:E0AEFFC8DE30D3246F9B5E3DE51D2C98:[U ]:LCT-3AF7C1F7: damien:1005:89C7E50CFCC5079FAAD3B435B51404EE:EC7208F1A70503FBDA4DC74AE23E2AD0:[U ]:LCT-3AF7C200: pierre:1006:E73AD857DF4902D8AAD3B435B51404EE:E0B4544BA4459E4FAD7D4431D127FC11:[U ]:LCT-3AF7C20E: ? From patrice.bourdon at agen.aquisante.fr Wed Apr 11 15:40:04 2001 From: patrice.bourdon at agen.aquisante.fr (Patrice Bourdon) Date: Tue Dec 2 02:34:13 2003 Subject: unsubsrcibe Message-ID: <002301c0c29d$aedb1020$2725a8c0@agen.aquisante.fr> -------------- next part -------------- HTML attachment scrubbed and removed From bferrell at microdisplay.com Wed Apr 11 17:00:27 2001 From: bferrell at microdisplay.com (Bruce Ferrell) Date: Tue Dec 2 02:34:13 2003 Subject: Problems with NT logons, Samba as PDC References: <20010410190129.776A24F07@lists.samba.org> <3AD44BEA.E1B5BF73@remedium.fi> Message-ID: <3AD48DAB.C4606CDD@microdisplay.com> Be very wary of TurboLinux. I had problems with NIC drivers latching up, databases halting (MySQL) and just general strangeness. Turned out to be a known bad glibc. They had no fixes for it beyond pay for an upgrade. It's now a RedHat box. Kimmo Akkanen wrote: > Hi! > > We're using Samba as PDC, and recently had a strange crash on the > system (none of the NT-machines authenticated anymore). I re-created > the user database and passwords on the server (TurboLinux 2.2.14-5, > with Samba 2.0.6 & 2.1alpha for auth.) and also re-newed the profiles > making 'em local on the NT-workstations. > > Sometimes when the NT-PC gets rebooted, I can't authenticate it back > to the domain until I logon as admin and jump off and back on to the > domain. Any ideas? I'll include a few strange rows from Samba's > logfiles below, all help is appreciated. =) > > --- CLIP CLIP CLIP --- > [2001/04/11 12:21:20, 0] > passdb/smbpassfile.c:get_trust_account_password(202) > get_trust_account_password: Malformed trust password file > (wrong length - was 0, should be 45). > > [2001/04/11 12:21:20, 0] > passdb/smbpassfile.c:trust_get_passwd(294) > domain_client_validate: unable to read the machine account password > for machine SERVERX in domain DOMAINX. > > [2001/04/11 12:21:20, 0] smbd/nttrans.c:call_nt_transact_ioctl(2401) > call_nt_transact_ioctl: Currently not implemented. > --- CLIP CLIP CLIP --- > > (did some cut&paste work on the lines, try to follow up) > > The SERVERX is replaced with the name of our server, as is the > DOMAINX with the domain name. Does anyone have a clue what's > the reason for those trust account-errors? They come up on > every NT's logon. :( Still, I'm able to use all shares etc. > > What about that "currently not implemented"-thing? > > Thanks a lot for anyone who answers! =) > > -- > Kimmo Akkanen > IT-Officer > Remedium Ltd./Oy > > phone. +358 9 6226 7125 > cell. +358 40 9000 125 > fax. +358 9 6226 7114 > kimmo.akkanen@remedium.fi From wendt at kingcrab.nrl.navy.mil Wed Apr 11 18:29:07 2001 From: wendt at kingcrab.nrl.navy.mil (Mark Wendt) Date: Tue Dec 2 02:34:13 2003 Subject: Samba TNG/Head set up profiles problem Message-ID: <5.0.1.4.2.20010411142512.00a7fda8@kingcrab.nrl.navy.mil> I've got the latest CVS versions of TNG and Head running on a Sun Ultra 1, Solaris 6. I seem to have most things working, but when I create a new machine account and try to log in on the new machine in the domain, I get a message window popping up during the logon process that says, "Cannot create profile directory //samba-head/profiles/testuser.pds. Anyone else run into this one? Thanks, Mark Wendt System/Network Admin Naval Research Lab Washington, DC From gree3776 at rowan.edu Wed Apr 11 16:41:58 2001 From: gree3776 at rowan.edu (Samuel Greenfeld) Date: Tue Dec 2 02:34:13 2003 Subject: 2.2 Release immenent/2.0.7 possible print issues Message-ID: >>> Jeremy Allison 04/10/01 06:49PM >>> Samuel Greenfeld wrote: > 1. While the print job itself is forced to the user, no accessory program used seems > to do so. This is a problem with LPRng, given that only certain users may be given > rights to force the username of a print job, and it is desirable to keep that list as > small as possible. Right now, we are living with this, and working around it, but a > fix to this would be nice. This activity was verified by temporarily putting a program > in place of /bin/sh (run by system()) that would log the UID, EUID, GUID, command & > parameters, etc. Hmmmm. smbd becomes the user reqesting the print job before doing the lpr call. What isn't working for you here ? -- Sorry about being a bit unclear; I meant that all operations *except* the call to lpr itself are not forced to the user. An example done from a Win2k workstation. The numbers are listed in the order UID/EUID/GID/EGID for the sh process. User #2 is daemon; user #10000 is gree3776. Group #2 is daemon, #1000 is students. Apr 11 11:41:41 henry sh[24406]: 2,2,2,2: Running /usr/bin/lpr -Pece238 -Ugree3776@150.250.105.108 -r GREE3776.6a9mKd Apr 11 11:41:43 henry sh[24415]: 10000,10000,1000,1000: Running /usr/sbin/lpc -Ugree3776@150.250.105.108 hold ece238 406 Apr 11 11:41:45 henry sh[24423]: 10000,10000,1000,1000: Running /usr/sbin/lpc -Ugree3776@150.250.105.108 release ece238 406 Apr 11 11:41:47 henry sh[24429]: 10000,10000,1000,1000: Running /usr/bin/lprm -Ugree3776 -Pece238 406 While LPRng will not fail these calls at the local level, the -U parameter gets ignored. With a "SAMEUSER SAMEHOST" ruleset with lprng, the job put in by lpr where the user and host were specified can not be modified by that user. Note my solution of sorts at one time was to allow local users (hence the lack of an @IP ) with the same username as a remote one to delete a print job (technically, the -U even without the IP is ignored and was just logged for me, but the UID the process ran as isn't). Got to look at my notes to figure out exactly what I am doing at the moment :) Please *also* check actions for the entire queue (pause/resume/flush/etc.), as I can not do it from this NT box at the moment. The "lpq" queue listing command also needs to be looked at (due to the number of lpq's I kept logging, eventually I made the executable used ignore them). A feature that also might be nice to add is the immediate expiration of cached queue data in the event of a control operation or even maybe a print job (although I do not know if any Windows OS requires this, or if this is done already). > 2. Whenever someone requests the printer's status, samba creates a /tmp/lpq.XXXXX file, > where XXXXX is a series of eight or so characters. This file is created as root, but > is not deleted. After a while, this leads to a lot of /tmp/lpq.XXXXX files hanging > around that have to be manually cleared. A new one seems to be created whenever samba > feels like refreshing a print queue's status. Fixed. -- Noted. Another minor bug (#3): granted, this likely is due to my setup, but when setting socket options, my system does not seem to be able to look up what TCP_NODELAY, etc., mean. Given I run servers pretty much stripped down so nothing bites me securitywise I do not know about, what did I accidentally take out which allows these to be turned into their proper constants? And for the documents (#4): Do different samba printer definitions need different paths like most lpd daemons require? Or can you define a bunch of printers (or even maybe file shares) pointing to the same path? Got to run again... (too many papers due too soon) Sincerely, Samuel Greenfeld From tronman123 at hotmail.com Wed Apr 11 19:51:35 2001 From: tronman123 at hotmail.com (E H) Date: Tue Dec 2 02:34:13 2003 Subject: unsubsrcibe Message-ID: _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com From dwcjr at inethouston.net Wed Apr 11 18:03:20 2001 From: dwcjr at inethouston.net (David W. Chapman Jr.) Date: Tue Dec 2 02:34:13 2003 Subject: unsubsrcibe References: <002301c0c29d$aedb1020$2725a8c0@agen.aquisante.fr> Message-ID: <01d901c0c2b1$b1abcc40$931576d8@inethouston.net> You have to do better than that! ----- Original Message ----- From: Patrice Bourdon To: samba-ntdom@samba.org Sent: Wednesday, April 11, 2001 10:40 AM Subject: unsubsrcibe -------------- next part -------------- HTML attachment scrubbed and removed From mark at axeon.screaming.net Wed Apr 11 20:32:24 2001 From: mark at axeon.screaming.net (Mark) Date: Tue Dec 2 02:34:13 2003 Subject: unsubsrcibe References: Message-ID: <000501c0c2c6$cb2cadf0$0b01a8c0@markxp1> why so many people unsubscribing at the moment? ----- Original Message ----- From: "E H" To: Sent: Wednesday, April 11, 2001 8:51 PM Subject: unsubsrcibe > > _________________________________________________________________ > Get your FREE download of MSN Explorer at http://explorer.msn.com > > From administrator at vulcanpub.com Wed Apr 11 20:42:50 2001 From: administrator at vulcanpub.com (Administrator) Date: Tue Dec 2 02:34:14 2003 Subject: unsubsrcibe In-Reply-To: <000501c0c2c6$cb2cadf0$0b01a8c0@markxp1> Message-ID: unsubsrcibe From aalang at rutgersinsurance.com Wed Apr 11 20:56:49 2001 From: aalang at rutgersinsurance.com (Adam Lang) Date: Tue Dec 2 02:34:14 2003 Subject: unsubsrcibe References: <000501c0c2c6$cb2cadf0$0b01a8c0@markxp1> Message-ID: <018301c0c2c9$edb43840$330a0a0a@rutgersinsurance.com> I think the more appropriate question is "Why so many people at the moment sending the unsubscribe request to the wrong email address"? I'm sure there are many people a day that unsubscribe... we just don't know it because they did it using the correct address. Adam Lang Systems Engineer Rutgers Casualty Insurance Company http://www.rutgersinsurance.com ----- Original Message ----- From: "Mark" To: Sent: Wednesday, April 11, 2001 4:32 PM Subject: Re: unsubsrcibe > why so many people unsubscribing at the moment? > ----- Original Message ----- > From: "E H" > To: > Sent: Wednesday, April 11, 2001 8:51 PM > Subject: unsubsrcibe > > > > > > _________________________________________________________________ > > Get your FREE download of MSN Explorer at http://explorer.msn.com > > > > > From dan_perik-work at ntm.org.pg Thu Apr 12 00:52:36 2001 From: dan_perik-work at ntm.org.pg (Dan Perik) Date: Tue Dec 2 02:34:14 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> Message-ID: <3AD4FC54.DF2C71A8@ntm.org.pg> What about the deal where an odd number of characters in a Win2000 machine name works but an even number doesn't? If that's fixed, let me know. If not, it would be nice if it was. - Dan Jeremy Allison wrote: > Well, as Andrew shouted at me again this weekend it's getting > to be about that time.... :-) :-). > > Yep, we're thinking we should do an official 2.2 Samba release > early next week, so if you have anything you can't live > with, now would be a good time to tell us.... > > :-). > > It's been gestating longer than an elephant, so it's really > time to let it out into the world and do its own thing :-). > > Feedback welcome (nay, *required* ! :-) :-). > > Cheers, > > Jeremy Allison, > Samba Team. > > -- > -------------------------------------------------------- > Buying an operating system without source is like buying > a self-assembly Space Shuttle with no instructions. > -------------------------------------------------------- -- - Dan Perik Computer Services Department Lapilo Center New Tribes Mission - PNG From jeremy at valinux.com Wed Apr 11 23:10:03 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:14 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> <3AD4FC54.DF2C71A8@ntm.org.pg> Message-ID: <3AD4E44B.426C0D60@valinux.com> Dan Perik wrote: > > What about the deal where an odd number of characters in a Win2000 > machine name works but an even number doesn't? If that's fixed, let me > know. If not, it would be nice if it was. Yes this was fixed a while ago (along with hundreds of other bugs :-). Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From dan_perik-work at ntm.org.pg Thu Apr 12 01:43:27 2001 From: dan_perik-work at ntm.org.pg (Dan Perik) Date: Tue Dec 2 02:34:14 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> <3AD4FC54.DF2C71A8@ntm.org.pg> <3AD4E44B.426C0D60@valinux.com> Message-ID: <3AD5083F.B1B6093F@ntm.org.pg> Great! I'm assuming that when 2.2.0 is released, the Samba 2.2 PDC FAQ will be changed to not warn against this exterminated bug. Great work on a such great product! - Dan Jeremy Allison wrote: > Dan Perik wrote: > > > > What about the deal where an odd number of characters in a Win2000 > > machine name works but an even number doesn't? If that's fixed, let me > > know. If not, it would be nice if it was. > > Yes this was fixed a while ago (along with hundreds of other > bugs :-). > > Jeremy. > > -- > -------------------------------------------------------- > Buying an operating system without source is like buying > a self-assembly Space Shuttle with no instructions. > -------------------------------------------------------- -- - Dan Perik Computer Services Department Lapilo Center New Tribes Mission - PNG From gcarter at valinux.com Thu Apr 12 02:53:16 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:14 2003 Subject: 2.2 release imminent. In-Reply-To: <3AD5083F.B1B6093F@ntm.org.pg>; from dan_perik-work@ntm.org.pg on Wed, Apr 11, 2001 at 20:43:27 -0500 References: <3AD1FB34.F6CA36E7@valinux.com> <3AD4FC54.DF2C71A8@ntm.org.pg> <3AD4E44B.426C0D60@valinux.com> <3AD5083F.B1B6093F@ntm.org.pg> Message-ID: <20010411215316.G1260@pogo.plainjoe.org> On Wed, 11 Apr 2001 20:43:27 Dan Perik wrote: > > Great! I'm assuming that when 2.2.0 is released, the Samba 2.2 PDC > FAQ will > be changed to not warn against this exterminated bug. Yes. I'll work on updating documentation later this week. jerry > > Great work on a such great product! > > - Dan > > Jeremy Allison wrote: > > > Dan Perik wrote: > > > > > > What about the deal where an odd number of characters in a Win2000 > > > machine name works but an even number doesn't? If that's fixed, > let me > > > know. If not, it would be nice if it was. > > > > Yes this was fixed a while ago (along with hundreds of other > > bugs :-). > > > > Jeremy. > > > > -- > > -------------------------------------------------------- > > Buying an operating system without source is like buying > > a self-assembly Space Shuttle with no instructions. > > -------------------------------------------------------- > > -- > - Dan Perik > Computer Services Department > Lapilo Center > New Tribes Mission - PNG > > > > > ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From awilliam at whitemice.org Thu Apr 12 03:08:55 2001 From: awilliam at whitemice.org (Adam Tauno Williams) Date: Tue Dec 2 02:34:14 2003 Subject: 2.2 release imminent. Message-ID: <20010411230855.5b61a807.awilliam@whitemice.org> >>Great! I'm assuming that when 2.2.0 is released, the Samba 2.2 PDC >>FAQ will be changed to not warn against this exterminated bug. >Yes. I'll work on updating documentation later this week. Has anyone tested the newest alphas with Terminal Server or Winframe for doing "published" applications? It didn't work for alpha1 or alpha2. From dave at deakin.edu.au Thu Apr 12 05:36:52 2001 From: dave at deakin.edu.au (David Schwarz) Date: Tue Dec 2 02:34:14 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> <3AD4FC54.DF2C71A8@ntm.org.pg> <3AD4E44B.426C0D60@valinux.com> Message-ID: <005d01c0c312$9841ca50$6b8bb880@TRAVELMATE> Jeremy, we have just discovered a bug in 2.07 and it seems to still happen in 2.2a1, Although we have only undertaken limited testing of 2.2. We are running with NIS and encrypted password. If we create a share, and say all members of Group A can access it, and some users in Group A do not exist any longer, then the share mounts but it takes a long, long time, it must wait for some sort of timeout before accepting the mount. Has anybody else reported this issue ?. I'm not sure at this time if this is samba or nis causing the issue. We are currently checking all our groups to ensure they only contain valid users, but it took a while to work out why some shares took forever to mount, while others happened allmost instantly. Dave... From gcarter at valinux.com Thu Apr 12 05:47:21 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:14 2003 Subject: 2.2 release imminent. In-Reply-To: <005d01c0c312$9841ca50$6b8bb880@TRAVELMATE> Message-ID: On Thu, 12 Apr 2001, David Schwarz wrote: > Jeremy, > > we have just discovered a bug in 2.07 and it seems to still happen in 2.2a1, > Although we have only undertaken limited testing of 2.2. > > We are running with NIS and encrypted password. > > If we create a share, and say all members of Group A can access it, > and some users in Group A do not exist any longer, then the share mounts > but it takes a long, long time, it must wait for some sort of timeout before > accepting the mount. > > Has anybody else reported this issue ?. > I'm not sure at this time if this is samba or nis causing the issue. > > We are currently checking all our groups to ensure they only contain valid > users, > but it took a while to work out why some shares took forever to mount, > while others happened allmost instantly. Doh! I think I might remember this one. At one point our code bombed if you removed a user from /etc/passwd (or NIS) but did not remove all references to this user in the group map. Does this sound like what you are seeing? jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From nottorf at roeders.de Thu Apr 12 08:14:24 2001 From: nottorf at roeders.de (Gerrit Nottorf) Date: Tue Dec 2 02:34:14 2003 Subject: Con Message-ID: <008301c0c328$96801b20$b401000a@pc80> Hallo everybody! I have curios effect if I name a directory "Con" or "con" on our Linux / Samba-Server. Under Win this directory cannot be renamed, deleted or similar (the rights are correct...). There pops up an error-message, telling me the filename is too long or the file is damaged. If I extend or shorten the name of the directory under Linux everything works on the win-machines, I can do everything with the directory. I just can't name it "Con".Wouldn't be that bad if I would not need this name, but I do. Regards, Gerrit Nottorf ALBRECHT R?DERS GMBH email : nottorf@roeders.de Tel : (05191) 603-255 internet: www.roederstec.com From andre.doehn at econia.com Thu Apr 12 08:17:30 2001 From: andre.doehn at econia.com (andre.doehn@econia.com) Date: Tue Dec 2 02:34:14 2003 Subject: Con Message-ID: hi, iam using samba 2.2 alpha 3 and i got the same error message when i try to create this folder "con" or "Con" with a german win2k sp1. andre "Gerrit Nottorf" To: Sent by: cc: samba-ntdom-admin@lists Subject: Con .samba.org 12.04.2001 10:14 Please respond to nottorf Hallo everybody! I have curios effect if I name a directory "Con" or "con" on our Linux / Samba-Server. Under Win this directory cannot be renamed, deleted or similar (the rights are correct...). There pops up an error-message, telling me the filename is too long or the file is damaged. If I extend or shorten the name of the directory under Linux everything works on the win-machines, I can do everything with the directory. I just can't name it "Con".Wouldn't be that bad if I would not need this name, but I do. Regards, Gerrit Nottorf ALBRECHT R?DERS GMBH email : nottorf@roeders.de Tel : (05191) 603-255 internet: www.roederstec.com From reinout.wijnveen at philips.com Thu Apr 12 08:34:37 2001 From: reinout.wijnveen at philips.com (reinout.wijnveen@philips.com) Date: Tue Dec 2 02:34:14 2003 Subject: Con Message-ID: <0056890026638839000002L992*@MHS> Of course, con is DOS language for console, the problem is with windows Try to make a dir named prn or lpt1, it won't work either (tested with NT TSE 4.0 and samba 2.0.6 on HP-UX) - Regards, Reinout Wijnveen "All those who believe in psychokinesis raise my hand" ICT-N/Philips Semiconductors Nijmegen Address: AC 0.039, Gerstweg 2, 6534 AE Nijmegen, Fax: +31 24 353 2019 andre.doehn@econia.com@SMTP@lists.samba.org on 04/12/2001 10:25:22 AM Sent by: samba-ntdom-admin@lists.samba.org To: nottorf@roeders.de@SMTP cc: samba-ntdom-admin@lists.samba.org@SMTP samba-ntdom@lists.samba.org@SMTP Subject: Re: Con Classification: hi, iam using samba 2.2 alpha 3 and i got the same error message when i try to create this folder "con" or "Con" with a german win2k sp1. andre "Gerrit Nottorf" To: Sent by: cc: samba-ntdom-admin@lists Subject: Con .samba.org 12.04.2001 10:14 Please respond to nottorf Hallo everybody! I have curios effect if I name a directory "Con" or "con" on our Linux / Samba-Server. Under Win this directory cannot be renamed, deleted or similar (the rights are correct...). There pops up an error-message, telling me the filename is too long or the file is damaged. If I extend or shorten the name of the directory under Linux everything works on the win-machines, I can do everything with the directory. I just can't name it "Con".Wouldn't be that bad if I would not need this name, but I do. Regards, Gerrit Nottorf ALBRECHT R?DERS GMBH email : nottorf@roeders.de Tel : (05191) 603-255 internet: www.roederstec.com From edmundo at shitepie.net Thu Apr 12 08:44:51 2001 From: edmundo at shitepie.net (Stokes) Date: Tue Dec 2 02:34:14 2003 Subject: Con References: Message-ID: <003701c0c32c$d75abfc0$010aa8c0@shitepie> Well I just had to try it, and sure enough... same error. I also was unable to create a file by the name of "con" on any writable share from the windows box, nor would it allow me to change the name of an existing file to "con". However, I was allowed (naturally) to create the file and folder from the samba server, command-line style, and then windows would let me write to the folder or the file without any problems. It would not let me delete or rename the file or folder created on the samba server. But I could rm it from the server, of course. I'm running Win2k sp1 everything current, and samba server is FreeBSD with alpha 2.2 from CVS on march 3 (i think). Andre, I suggest you create this folder from the command line on the samba server as a temprary solution to your problem. Marshall Stokes ----- Original Message ----- From: To: Cc: ; Sent: Thursday, April 12, 2001 1:17 AM Subject: Re: Con > hi, > iam using samba 2.2 alpha 3 and i got the same error message when > i try to create this folder "con" or "Con" with a german win2k sp1. > > andre > > > > "Gerrit Nottorf" > To: > Sent by: cc: > samba-ntdom-admin@lists Subject: Con > .samba.org > > > 12.04.2001 10:14 > Please respond to > nottorf > > > > > > > Hallo everybody! > I have curios effect if I name a directory "Con" or "con" on our Linux / > Samba-Server. Under Win this directory cannot be renamed, deleted or > similar > (the rights are correct...). There pops up an error-message, telling me the > filename is too long or the file is damaged. If I extend or shorten the > name > of the directory under Linux everything works on the win-machines, I can do > everything with the directory. I just can't name it "Con".Wouldn't be that > bad if I would not need this name, but I do. > > Regards, > Gerrit Nottorf > ALBRECHT R?DERS GMBH > > email : nottorf@roeders.de > Tel : (05191) 603-255 > internet: www.roederstec.com > > > > > > > > > > From andre.doehn at econia.com Thu Apr 12 08:42:18 2001 From: andre.doehn at econia.com (andre.doehn@econia.com) Date: Tue Dec 2 02:34:14 2003 Subject: Con Message-ID: yes i know but i can create folders like lpt1,prn on a samba 2.2a3 share without any error message??! best regards andre doehn reinout.wijnveen@philip s.com To: Sent by: cc: , , samba-ntdom-admin@lists .samba.org Subject: Re: Con 12.04.2001 10:34 Of course, con is DOS language for console, the problem is with windows Try to make a dir named prn or lpt1, it won't work either (tested with NT TSE 4.0 and samba 2.0.6 on HP-UX) - Regards, Reinout Wijnveen "All those who believe in psychokinesis raise my hand" ICT-N/Philips Semiconductors Nijmegen Address: AC 0.039, Gerstweg 2, 6534 AE Nijmegen, Fax: +31 24 353 2019 andre.doehn@econia.com@SMTP@lists.samba.org on 04/12/2001 10:25:22 AM Sent by: samba-ntdom-admin@lists.samba.org To: nottorf@roeders.de@SMTP cc: samba-ntdom-admin@lists.samba.org@SMTP samba-ntdom@lists.samba.org@SMTP Subject: Re: Con Classification: hi, iam using samba 2.2 alpha 3 and i got the same error message when i try to create this folder "con" or "Con" with a german win2k sp1. andre "Gerrit Nottorf" To: Sent by: cc: samba-ntdom-admin@lists Subject: Con .samba.org 12.04.2001 10:14 Please respond to nottorf Hallo everybody! I have curios effect if I name a directory "Con" or "con" on our Linux / Samba-Server. Under Win this directory cannot be renamed, deleted or similar (the rights are correct...). There pops up an error-message, telling me the filename is too long or the file is damaged. If I extend or shorten the name of the directory under Linux everything works on the win-machines, I can do everything with the directory. I just can't name it "Con".Wouldn't be that bad if I would not need this name, but I do. Regards, Gerrit Nottorf ALBRECHT R?DERS GMBH email : nottorf@roeders.de Tel : (05191) 603-255 internet: www.roederstec.com From mhaney at info4cars.com Thu Apr 12 09:27:37 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:14 2003 Subject: no computers In-Reply-To: Message-ID: I have 2 possible explanations for that. One, do you have WINS enabled on the clients? And is it pointing to the right WINS server? That would be the first thing I would check. Second, are you sure you have the samba server setup as the WINS server? (I am assuming that as browse master it's also the WINS server?) or is there another server that you use for WINS support? ----------------------------------------------------------------- Fear resistance when I'm awake. Mark Haney Network Administrator info4cars.com 828-974-5307 -- Work 828-242-5072 -- Cell mhaney@info4cars.com -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Brandon Caudle Sent: Wednesday, April 11, 2001 7:21 PM To: samba-ntdom@samba.org Subject: no computers Hi again, this time i have a small but annoying problem none of my computers in my network are visable in any of my network neighborhoods the microsoft file and print shareing's browse master is set to automatic and this is my smb.conf [global] workgroup = PME netbios name = SERVER encrypt passwords = Yes update encrypted = Yes map to guest = Bad User passwd program = /usr/bin/passwd %u password level = 8 username level = 8 unix password sync = Yes log file = /root/logs/log.%m max log size = 0 name resolve order = wins lmhosts host bcast time server = Yes keepalive = 30 logon script = %U.bat logon path = \\server\%U\profile logon home = \\server\%U domain logons = Yes os level = 65 preferred master = Yes domain master = Yes wins support = Yes kernel oplocks = No unix realname = Yes guest account = guest admin users = root brandon mary scott billy bill ship browse master = yes thanks brandon ---------------------------------------------------------------------------- -- Get your FREE download of MSN Explorer at http://explorer.msn.com -------------- next part -------------- HTML attachment scrubbed and removed From nottorf at roeders.de Thu Apr 12 09:59:20 2001 From: nottorf at roeders.de (Gerrit Nottorf) Date: Tue Dec 2 02:34:14 2003 Subject: Con Message-ID: <008901c0c337$3ee81a70$b401000a@pc80> Hi, sorry for causing unnecessary traffic here. The same problems you'll get on a winNT-Server if you name a directory "Con". A problem of the os we all love... not to work with. Regards Gerrit Nottorf ALBRECHT R?DERS GMBH email : nottorf@roeders.de Tel : (05191) 603-255 internet: www.roederstec.com From boehm at nortelnetworks.com Thu Apr 12 12:59:26 2001 From: boehm at nortelnetworks.com (Eric Boehm) Date: Tue Dec 2 02:34:14 2003 Subject: Compiling samba 64-bit on Solaris broke swat -- need some pointers to debug In-Reply-To: <20010409203510.A12112@zrtps04d.nortelnetworks.com>; from boehm@americasm01.nt.com on Mon, Apr 09, 2001 at 08:35:10PM -0400 References: <3AD1FB34.F6CA36E7@valinux.com> <3AD218ED.39AB153E@canada.sun.com> <3AD1FF04.3B94A0F3@valinux.com> <20010409203510.A12112@zrtps04d.nortelnetworks.com> Message-ID: <20010412085926.A16947@wnc0s00u.nortelnetworks.com> I've built Samba 2.0.7 as a 64-bit application to get around problems with open, fopen and the number of open files. However, in the process, SWAT appears to be broken. If I try to connect with a 64-bit swat binary, I am prompted for username and password but then get the error. The document contained no data. Try again later, or contact the server's administrator. Looking at the source code didn't give me any obvious hints for trying to debug the problem. I'm looking for any techniques or instructions on debugging this problem or swat in general. Thanks in advance, -- Eric M. Boehm boehm@nortelnetworks.com From aalang at rutgersinsurance.com Thu Apr 12 13:10:34 2001 From: aalang at rutgersinsurance.com (Adam Lang) Date: Tue Dec 2 02:34:14 2003 Subject: System Policies Message-ID: <009901c0c351$f5993640$330a0a0a@rutgersinsurance.com> Do system Policies work with Samba as a PDC? Any specific version? Do they work the same way as if it was an NT PDC? Adam Lang Systems Engineer Rutgers Casualty Insurance Company http://www.rutgersinsurance.com From Hans.Troost at solvay.com Thu Apr 12 13:47:00 2001 From: Hans.Troost at solvay.com (Troost, Hans) Date: Tue Dec 2 02:34:14 2003 Subject: Deleting files from NT/W95 clients Message-ID: <8058A4A7DD5FD411A29200805FEA165A3D00CD@we01ex.we.nl.solvay.com> L.S. As a SAMBA newbie I have the following question: Implemented SAMBA 2.0.7. on an SGI Octane running IRIX 6.5.4m to share directories on this machine with users at the NT-domain. This users have NT4 SP5 or W95 SR2. "Mapping" such an unix share is no problem. The only problem we have here is that it is impossible to use the clients to delete unix files, even when they have full access to the file under unix. I used an appriopriate USERS.MAP-file to map the NT-domain usernames with the unix-ones (works fine). So a file, owned by SGUX07\btgpj (unix user) cannot be deleted by a nt-domain user that is mapped to btgpj. I assume that I have to change one or more settings in the smb.conf file, which is now: # Samba config file created using SWAT # from 150.251.142.171 (150.251.142.171) # Date: 2001/04/10 08:26:39 # Global parameters [global] workgroup = WE0D0700 security = SHARE map to guest = Bad User username map = /usr/local/samba/lib/users.map debug pid = Yes debug uid = Yes wins server = <150.251.137.134> delete readonly = Yes [homes] writeable = Yes guest ok = Yes browseable = No [test] path = /export/samba/test writeable = Yes guest ok = Yes [Everything] path = / writeable = Yes guest ok = Yes Hope someone can give me some hints. Met vriendelijke groeten / With kind regards Hans Troost ################################################ # Hans Troost # Atos Origin (at SOLVAY Pharmaceuticals B.V.) # Building WWM, room B-104 # Postbox 900 # 1380 DA, Weesp # The Netherlands # # E-mail : Hans.Troost@solvay.com # Phone (+31) (0)294-477492 # Fax (+31) (0)294-477140 # # "non-SOLVAY"- and private mail : # Hans.Troost@nl.origin-it.com ############################################### -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/ms-tnef Size: 3455 bytes Desc: not available Url : http://lists.samba.org/archive/samba-ntdom/attachments/20010412/68ac356b/attachment.bin From aalang at rutgersinsurance.com Thu Apr 12 13:56:39 2001 From: aalang at rutgersinsurance.com (Adam Lang) Date: Tue Dec 2 02:34:14 2003 Subject: System Policies References: <009901c0c351$f5993640$330a0a0a@rutgersinsurance.com> Message-ID: <00d201c0c358$658187e0$330a0a0a@rutgersinsurance.com> Nevermind... I'm RTFM. Adam Lang Systems Engineer Rutgers Casualty Insurance Company http://www.rutgersinsurance.com ----- Original Message ----- From: "Adam Lang" To: "Samba" Sent: Thursday, April 12, 2001 9:10 AM Subject: System Policies > Do system Policies work with Samba as a PDC? Any specific version? Do they > work the same way as if it was an NT PDC? > > Adam Lang > Systems Engineer > Rutgers Casualty Insurance Company > http://www.rutgersinsurance.com > From herb at chomps.engr.sgi.com Thu Apr 12 13:50:02 2001 From: herb at chomps.engr.sgi.com (Herb Lewis) Date: Tue Dec 2 02:34:14 2003 Subject: Deleting files from NT/W95 clients References: <8058A4A7DD5FD411A29200805FEA165A3D00CD@we01ex.we.nl.solvay.com> Message-ID: <3AD5B28A.783EA0F1@chomps.engr.sgi.com> With share level security and all your shares set to guest ok = yes my guess is that your connections are being made as guest not as the user. Run smbstatus when a user is connected and see what is listed for the uid/gid that was used to connect. "Troost, Hans" wrote: > > L.S. > > As a SAMBA newbie I have the following question: > > Implemented SAMBA 2.0.7. on an SGI Octane running IRIX 6.5.4m to share > directories on this machine with users at the NT-domain. This users have NT4 > SP5 or W95 SR2. > > "Mapping" such an unix share is no problem. The only problem we have here is > that it is impossible to use the clients to delete unix files, even when > they have full access to the file under unix. I used an appriopriate > USERS.MAP-file to map the NT-domain usernames with the unix-ones (works > fine). > > So a file, owned by SGUX07\btgpj (unix user) cannot be deleted by a > nt-domain user that is mapped to btgpj. > > I assume that I have to change one or more settings in the smb.conf file, > which is now: > > # Samba config file created using SWAT > # from 150.251.142.171 (150.251.142.171) > # Date: 2001/04/10 08:26:39 > > # Global parameters > [global] > workgroup = WE0D0700 > security = SHARE > map to guest = Bad User > username map = /usr/local/samba/lib/users.map > debug pid = Yes > debug uid = Yes > wins server = <150.251.137.134> > delete readonly = Yes > > [homes] > writeable = Yes > guest ok = Yes > browseable = No > > [test] > path = /export/samba/test > writeable = Yes > guest ok = Yes > > [Everything] > path = / > writeable = Yes > guest ok = Yes > > Hope someone can give me some hints. > > Met vriendelijke groeten / With kind regards > > Hans Troost > > ################################################ > # Hans Troost > # Atos Origin (at SOLVAY Pharmaceuticals B.V.) > # Building WWM, room B-104 > # Postbox 900 > # 1380 DA, Weesp > # The Netherlands > # > # E-mail : Hans.Troost@solvay.com > # Phone (+31) (0)294-477492 > # Fax (+31) (0)294-477140 > # > # "non-SOLVAY"- and private mail : > # Hans.Troost@nl.origin-it.com > ############################################### > > ------------------------------------------------------------------------ > > Part 1.2 Type: application/ms-tnef > Encoding: base64 -- ====================================================================== Herb Lewis Silicon Graphics Networking Engineer 1600 Amphitheatre Pkwy MS-510 Strategic Software Organization Mountain View, CA 94043-1351 herb@sgi.com Tel: 650-933-2177 http://www.sgi.com Fax: 650-932-2177 ====================================================================== From ken at hudat.com Thu Apr 12 14:28:19 2001 From: ken at hudat.com (Kendrick Vargas) Date: Tue Dec 2 02:34:14 2003 Subject: Con In-Reply-To: <008901c0c337$3ee81a70$b401000a@pc80> Message-ID: On Thu, 12 Apr 2001, Gerrit Nottorf wrote: > sorry for causing unnecessary traffic here. The same problems you'll > get on a winNT-Server if you name a directory "Con". A problem of the > os we all love... not to work with. The following (from Command Prompt) works: mkdir C:\Con\ or mkdir Con\ I guess you just have to fool the OS :-) -peace -- Let he who is without clue kiss my ass From don_mccall at hp.com Thu Apr 12 16:49:37 2001 From: don_mccall at hp.com (MCCALL,DON (HP-USA,ex1)) Date: Tue Dec 2 02:34:14 2003 Subject: smbpasswd 2.0.7-3 matters (with smbpasswd & smb.conf...) Message-ID: <079FD72E42C9D311B854009027650E6F04050965@xatl02.atl.hp.com> Hello Damien, I think the problem MIGHT be your valid chars = .... You have mapped the characters ABCDEFGHI to abcdefghi in your valid chars = map... the routine that gets the entries from smbpasswd is running thru the 32byte password hash, and one of the things it does is to verify that each character is a HEX character; hex characters defined locally in the routine as "0123456789ABCDEF" Well, since ABCDEFGHI maps to abcdefghi, when it checks to see if a is a valid 'hexchar' it doesn't match (it's expecting A, not a) so you get the Malformed message... At least I think this is what's happening. Try removing the entries: 65:97 66:98 67:99 68:100 69:101 70:102 71:103 72:104 73:105 74:106 from your valid chars line in smb.conf and see if you don't get further... Hope this helps, Don -----Original Message----- From: Damien Persohn [mailto: Message-ID: It works for win 9x as i have tested. I bet (but am not entirely sure it worked for NT as well) -----Urspr?ngliche Nachricht----- Von: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]Im Auftrag von Adam Lang Gesendet: jeudi, 12. avril 2001 15:57 An: Samba Betreff: Re: System Policies Nevermind... I'm RTFM. Adam Lang Systems Engineer Rutgers Casualty Insurance Company http://www.rutgersinsurance.com ----- Original Message ----- From: "Adam Lang" To: "Samba" Sent: Thursday, April 12, 2001 9:10 AM Subject: System Policies > Do system Policies work with Samba as a PDC? Any specific version? Do they > work the same way as if it was an NT PDC? > > Adam Lang > Systems Engineer > Rutgers Casualty Insurance Company > http://www.rutgersinsurance.com > From pgoetz at math.utexas.edu Thu Apr 12 23:57:36 2001 From: pgoetz at math.utexas.edu (Patrick Goetz) Date: Tue Dec 2 02:34:15 2003 Subject: How to allow a W2K machine join a domain with Samba 2.2alpha3 PDC Message-ID: Hello - Please pardon what might be an often asked question, but I haven't found an answer in either "Using Samba", the HOWTO's, man pages, or by browsing through the last 3 months of this list. I've set up Samba 2.2alpha3 on a Debian linux machine to be a PDC: [global] workgroup = UTMATH wins support = yes security = user status = no encrypt passwords = yes # PDC Stuff below os level = 65 local master = yes preferred master = yes domain master = yes domain logons = yes However, I can't get my W2K test machine to join the UTMATH domain. Whenever I try, I'm prompted for the username and password of "an account with permission to join the domain". The only user I currently have set up in smbpasswd is myself, and it appears I'm not worthy, as when I enter my user name and password I'm informed that "The account used is a computer account. Use your global user account or local user account to access this server" The local administrator account doesn't work either, so question: Q1: What kind of an account do I need to set up and where in order to add the W2K machine to the UTMATH domain? and while I'm at it... Q2: Why do I need to add the machine name to the local /etc/passwd file? If anything, one would think that trust accounts would go in the smbpasswd file; but from what I've seen on the list, the opposite is the case; i.e. having the machine name in the smbpasswd file is a source of problems. From dan_perik-work at ntm.org.pg Thu Apr 12 23:22:15 2001 From: dan_perik-work at ntm.org.pg (Dan Perik Work) Date: Tue Dec 2 02:34:15 2003 Subject: Samba as member server in Win2k domain Message-ID: I've been given the task of evaluating the possiblities of migrating away from our Novell file server to either Linux/Samba or Win2000. I am very much in favor of going the Linux/Samba route. I've even gotten the domain logins from our Win2000 clients working and everything. There are some issues, though. Our soon-to-be implemented accounting system relies on 2 Win2000 servers and subsequently, clients of this accounting system rely on the Win2000 domain (DATA) for their authentication. Unfortunately, the Win2000 domain is running Active Directory, not "legacy" WinNT mode. My question is, can Samba participate in a Win2000 domain as a member server? This is the deal, the 2 Win2000 servers each have 10 client access licenses (which is all we need for our accounting system). Our entire network has about 70 clients. I don't want to go through the expense for another copy of Win2000 server, and the extra client access licenses that would be necessary to host the fileserving on Win2000. So if Samba can be a member server, and if our clients log in to the domain (authenticate via the Win2000 Domain Controller) and only access shares on the Samba server, can we get around having to get the extra client licenses? I would rather not do it this way, but if we're going to use Linux/Samba as the PDC for our file serving, we would probably need to use a different domain than the Win2000 machines, causing more complexity - the issue we're trying to avoid. We Could reinstall the 2 Win2000 servers, and run the domain in legacy mode, but that's not the most wonderful option, either. Especially since that's someone else's jurisdiction, and they wouldn't go for that too easily. Any suggestions/answers? - Dan From jeremy at valinux.com Thu Apr 12 22:48:19 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:15 2003 Subject: Samba as member server in Win2k domain References: Message-ID: <3AD630B3.ACCF9511@valinux.com> Ok - I just checked with Gerald (who is the expert in this), and by default a Win2k PDC will support a Samba member server. In otherwords, in order to prevent a Samba member server from working, you have to explicitly disable support for NTLM and NT member servers ("Disable access from pre-Win2k computers or something similar). So long as this hasn't been done you should be fine with a Samba 2.2 member server. Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From trobison at meadows.net Fri Apr 13 01:21:34 2001 From: trobison at meadows.net (Tim Robison) Date: Tue Dec 2 02:34:15 2003 Subject: Planning Message-ID: <001401c0c3b8$14321840$8500a8c0@ibm23ar813> I am going to bring up a LINUX box that will be running SAMBA. My network will be running Win98/95 and NT machines both laptops and desktops. I will be running 2.0.7 behind a firewall. What I need from the list is a little help, as I want to PLAN my installation so as to have as few issues as possible. I would also like to know if there is a way to allow logins from only certain MAC addresses. I have an need for this type of limitation. Thanks in Advance. -------------- next part -------------- HTML attachment scrubbed and removed From purenrg at iastate.edu Fri Apr 13 01:26:54 2001 From: purenrg at iastate.edu (Nicholas Golder) Date: Tue Dec 2 02:34:15 2003 Subject: How to allow a W2K machine join a domain with Samba 2.2alpha3 PDC In-Reply-To: Message-ID: <000201c0c3b8$d37a99c0$0101a8c0@stures.iastate.edu> I am assuming that you have added the machine name to the /etc/passwd file and also to the smbpasswd file. As far as I know, alpha 3 can only use the root account to add the machine to the domain this also has to be added to the smbpasswd file. This is a link that seems to do the job to get the machine added to the domain: http://bioserve.latrobe.edu.au/samba/samba-pdc-howto.html#MACHINEACCOUNT If this is new to you, here is the HOWTO: http://bioserve.latrobe.edu.au/samba/samba-pdc-howto.html If you can get your machine to logon to the domain after the joining the domain, let me know. This is where I am having problems. I have posted to this list about this problem but haven't had any resolution. ---------------------------------- "Breaking stereotypes since 1977." Nicholas Golder -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Patrick Goetz Sent: Thursday, April 12, 2001 6:58 PM To: samba-ntdom@lists.samba.org Subject: How to allow a W2K machine join a domain with Samba 2.2alpha3 PDC Hello - Please pardon what might be an often asked question, but I haven't found an answer in either "Using Samba", the HOWTO's, man pages, or by browsing through the last 3 months of this list. I've set up Samba 2.2alpha3 on a Debian linux machine to be a PDC: [global] workgroup = UTMATH wins support = yes security = user status = no encrypt passwords = yes # PDC Stuff below os level = 65 local master = yes preferred master = yes domain master = yes domain logons = yes However, I can't get my W2K test machine to join the UTMATH domain. Whenever I try, I'm prompted for the username and password of "an account with permission to join the domain". The only user I currently have set up in smbpasswd is myself, and it appears I'm not worthy, as when I enter my user name and password I'm informed that "The account used is a computer account. Use your global user account or local user account to access this server" The local administrator account doesn't work either, so question: Q1: What kind of an account do I need to set up and where in order to add the W2K machine to the UTMATH domain? and while I'm at it... Q2: Why do I need to add the machine name to the local /etc/passwd file? If anything, one would think that trust accounts would go in the smbpasswd file; but from what I've seen on the list, the opposite is the case; i.e. having the machine name in the smbpasswd file is a source of problems. From s354199 at student.uq.edu.au Fri Apr 13 01:35:03 2001 From: s354199 at student.uq.edu.au (Elliot Mackenzie) Date: Tue Dec 2 02:34:15 2003 Subject: How to allow a W2K machine join a domain with Samba 2.2alpha3 PDC In-Reply-To: Message-ID: In alpha 3, you must specify the user root in your admin list. In alpha 3, you can only use root and the root password to get a machine to join the domain the first time (this is obviously different to logging on when you can log on as any valid user in smb.conf). Stick: domain admin group = @adm in smb.conf make sure root is in the system group adm. If you followed the PDC HOWTO, then you would need to add a line similar to (smb.conf): add user script = /usr/sbin/adduser -n -g machines -c Machine -d /dev/null -s /bin/false %m$ After manually creating the machines system group. I am 90% sure that root must also exist in smbpasswd (I don't happen to have access to my terminal from this machine :) ). The problems I was having when I was trying to set up alpha 3 for the first time were because of a corrupt smbpasswd file - I started from scratch, added user root, and all was well :) You need to stick the machine name in the /etc/passwd (you can do it automatically using the line above) for a few reasons: samba becomes whatever user you connect as (you don't want machines running around with root acces for no good reason), and so samba can recognise and store the machines registration information (what is negotiated between windows and samba when you first join the domain). There are probably other reasons too, but I am just happy to accept that this is what I need to do to keep samba running happily as a PDC - and it seems to be pretty stable too :) Hope this helps, Elliot. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Patrick Goetz Sent: Friday, 13 April 2001 9:58 AM To: samba-ntdom@lists.samba.org Subject: How to allow a W2K machine join a domain with Samba 2.2alpha3 PDC Hello - Please pardon what might be an often asked question, but I haven't found an answer in either "Using Samba", the HOWTO's, man pages, or by browsing through the last 3 months of this list. I've set up Samba 2.2alpha3 on a Debian linux machine to be a PDC: [global] workgroup = UTMATH wins support = yes security = user status = no encrypt passwords = yes # PDC Stuff below os level = 65 local master = yes preferred master = yes domain master = yes domain logons = yes However, I can't get my W2K test machine to join the UTMATH domain. Whenever I try, I'm prompted for the username and password of "an account with permission to join the domain". The only user I currently have set up in smbpasswd is myself, and it appears I'm not worthy, as when I enter my user name and password I'm informed that "The account used is a computer account. Use your global user account or local user account to access this server" The local administrator account doesn't work either, so question: Q1: What kind of an account do I need to set up and where in order to add the W2K machine to the UTMATH domain? and while I'm at it... Q2: Why do I need to add the machine name to the local /etc/passwd file? If anything, one would think that trust accounts would go in the smbpasswd file; but from what I've seen on the list, the opposite is the case; i.e. having the machine name in the smbpasswd file is a source of problems. From purenrg at iastate.edu Fri Apr 13 01:35:24 2001 From: purenrg at iastate.edu (Nicholas Golder) Date: Tue Dec 2 02:34:15 2003 Subject: W2K machine logon to a domain with Samba 2.2alpha3 PDC Message-ID: <000301c0c3ba$038ab810$0101a8c0@stures.iastate.edu> I am using: FreeBSD 4.2 Samba-2.2.0alpha3 Windows 2000 SP1 Problem: I can't logon with a created account that exists on the Samba PDC with Win2k. I have installed Samba and configured it the way the PDC-HOWTO describes: http://bioserve.latrobe.edu.au/samba/samba-pdc-howto.html I have successfully joined the domain with the Win2k box. When I try to logon using an account that is in both the /etc/passwd and smbpasswd, I get an error message that the user account doesn't exist in the domain [or some derivative of that]. When I try to add the users on the Win2k box using the account manager, I can see them in the domain and the users I have created in smbpasswd but can't add them. I get the message: The user could not be added because the following error has occurred: The trust relationship between this workstation and the primary domain failed. How am I to: a) establish a trust relationship between my workstation and the primary domain? -or- b) make a config on the Win2k box so it doesn't require a trust relationship? Thanks in advance for you help, ---------------------------------- "Breaking stereotypes since 1977." Nicholas Golder From idra at samba.org Fri Apr 13 01:38:05 2001 From: idra at samba.org (Simo Sorce) Date: Tue Dec 2 02:34:15 2003 Subject: Planning In-Reply-To: <001401c0c3b8$14321840$8500a8c0@ibm23ar813>; from trobison@meadows.net on Thu, Apr 12, 2001 at 08:21:34PM -0500 References: <001401c0c3b8$14321840$8500a8c0@ibm23ar813> Message-ID: <20010412183805.A19953@va.samba.org> On Thu, Apr 12, 2001 at 08:21:34PM -0500, Tim Robison wrote: > I am going to bring up a LINUX box that will be running SAMBA. My network will be running Win98/95 and NT machines both laptops and desktops. I will be running 2.0.7 behind a firewall. What I need from the list is a little help, as I want to PLAN my installation so as to have as few issues as possible. > > I would also like to know if there is a way to allow logins from only certain MAC addresses. I have an need for this type of limitation. > No, I think it isn't so easy, and anyway behind a firewall or any gateway, you'll never see the machines MAC address. -- Simo Sorce ------------------------------ Unix IS user friendly, it is just selective about who his friends are. From s354199 at student.uq.edu.au Fri Apr 13 01:45:37 2001 From: s354199 at student.uq.edu.au (Elliot Mackenzie) Date: Tue Dec 2 02:34:15 2003 Subject: How to allow a W2K machine join a domain with Samba 2.2alpha3 PDC In-Reply-To: <000201c0c3b8$d37a99c0$0101a8c0@stures.iastate.edu> Message-ID: If you are getting an error like: "machine trust something something" - it's been a while since I fixed this :) then make sure of a few things: - When you restart all your daemons that there are no smbd or nmbd services still running before you start them up again. For some reason the init script I was using didn't properly terminate all the services and it was causing problems with domain logons. - Secondly, make sure you are indeed running a good alpha 3. I initially had some problems with the CVS copy - nothing was reported, I just could not log on to the domain. I got the alpha 3 tarball off the website and it was good. - Remove all your samba machine trust accounts (something$) from /etc/passwd, clear out the machine accounts from smbpasswd (I deleted the file and started from scratch). - Make sure your firewalling rules aren't causing any problems (If you can normally use samba OK this shouldn't be a problem). - NOW restart all your smbd and nmbd services.... :) - If you are using the adduser script rather than making the machine accounts manually, then just add root to smbpasswd and join the domain from the w2k macchine using the root passwd. Reboot and w2k should be able to log onto the domain (you will need a user in smbpasswd to log on, so create one) :) If you aren't using the script then you have to do this manually as per the FAQ and HOWTO. - Still having problems try the example smb.conf given in the HOWTO and work it out from there. This probably isn't the "proper" way to fix this but it worked like a charm for me, and I haven't had any problems since. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Nicholas Golder Sent: Friday, 13 April 2001 11:27 AM To: samba-ntdom@lists.samba.org Subject: RE: How to allow a W2K machine join a domain with Samba 2.2alpha3 PDC I am assuming that you have added the machine name to the /etc/passwd file and also to the smbpasswd file. As far as I know, alpha 3 can only use the root account to add the machine to the domain this also has to be added to the smbpasswd file. This is a link that seems to do the job to get the machine added to the domain: http://bioserve.latrobe.edu.au/samba/samba-pdc-howto.html#MACHINEACCOUNT If this is new to you, here is the HOWTO: http://bioserve.latrobe.edu.au/samba/samba-pdc-howto.html If you can get your machine to logon to the domain after the joining the domain, let me know. This is where I am having problems. I have posted to this list about this problem but haven't had any resolution. ---------------------------------- "Breaking stereotypes since 1977." Nicholas Golder -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Patrick Goetz Sent: Thursday, April 12, 2001 6:58 PM To: samba-ntdom@lists.samba.org Subject: How to allow a W2K machine join a domain with Samba 2.2alpha3 PDC Hello - Please pardon what might be an often asked question, but I haven't found an answer in either "Using Samba", the HOWTO's, man pages, or by browsing through the last 3 months of this list. I've set up Samba 2.2alpha3 on a Debian linux machine to be a PDC: [global] workgroup = UTMATH wins support = yes security = user status = no encrypt passwords = yes # PDC Stuff below os level = 65 local master = yes preferred master = yes domain master = yes domain logons = yes However, I can't get my W2K test machine to join the UTMATH domain. Whenever I try, I'm prompted for the username and password of "an account with permission to join the domain". The only user I currently have set up in smbpasswd is myself, and it appears I'm not worthy, as when I enter my user name and password I'm informed that "The account used is a computer account. Use your global user account or local user account to access this server" The local administrator account doesn't work either, so question: Q1: What kind of an account do I need to set up and where in order to add the W2K machine to the UTMATH domain? and while I'm at it... Q2: Why do I need to add the machine name to the local /etc/passwd file? If anything, one would think that trust accounts would go in the smbpasswd file; but from what I've seen on the list, the opposite is the case; i.e. having the machine name in the smbpasswd file is a source of problems. From purenrg at iastate.edu Fri Apr 13 04:33:37 2001 From: purenrg at iastate.edu (Nicholas Golder) Date: Tue Dec 2 02:34:15 2003 Subject: W2K machine logon to a domain with Samba 2.2alpha3 PDC In-Reply-To: <000301c0c3ba$038ab810$0101a8c0@stures.iastate.edu> Message-ID: <000001c0c3d2$e8f2ab20$0101a8c0@stures.iastate.edu> I have tried the following with no success: I removed the machine name from the passwd and the smbpasswd (I actually recreated the smbpasswd). I dropped the domain and then joined it again with the same luck. However, when I try to logon to the domain with an account in the smbpasswd it gives me some message about the user not existing in the domain. What does this mean: [2001/04/12 23:28:38, 0] nmbd/nmbd_incomingrequests.c:process_name_refresh_request(181) Error - should be sent to WINS server Is there something wrong with my /etc/passwd file (FreeBSD 4.2)? tronyx$:*:1000:1250:2000Machine:/dev/null:/usr/bin/false Here is my smb.conf: [global] security = user status = yes workgroup = HIVEPORTAL domain admin group = @wheel domain master = yes encrypt passwords = yes domain logons = yes logon script = scripts\%U.bat guest account = ftp share modes = no os level = 65 [homes] guest ok = no read only = no create mask = 0700 directory mask = 0700 locking = no [netlogon] path = /usr/local/samba/netlogon writable = no guest ok = no You may have tried to join the samba domain, had it happen successfully, then for some reason tried to join it again. This will put the trust password out of sync. Remove the machine account machine$ (whatever) from smbpasswd and passwd (wherever it exists as my memory is not that good :) ). Join the domain again (recreating whatever machine accounts using the adduser script or however you did it). That might fix it... Elliot. Any other suggestions? ---------------------------------- "Breaking stereotypes since 1977." Nicholas Golder -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Nicholas Golder Sent: Thursday, April 12, 2001 8:35 PM To: samba-ntdom@lists.samba.org Subject: W2K machine logon to a domain with Samba 2.2alpha3 PDC I am using: FreeBSD 4.2 Samba-2.2.0alpha3 Windows 2000 SP1 Problem: I can't logon with a created account that exists on the Samba PDC with Win2k. I have installed Samba and configured it the way the PDC-HOWTO describes: http://bioserve.latrobe.edu.au/samba/samba-pdc-howto.html I have successfully joined the domain with the Win2k box. When I try to logon using an account that is in both the /etc/passwd and smbpasswd, I get an error message that the user account doesn't exist in the domain [or some derivative of that]. When I try to add the users on the Win2k box using the account manager, I can see them in the domain and the users I have created in smbpasswd but can't add them. I get the message: The user could not be added because the following error has occurred: The trust relationship between this workstation and the primary domain failed. How am I to: a) establish a trust relationship between my workstation and the primary domain? -or- b) make a config on the Win2k box so it doesn't require a trust relationship? Thanks in advance for you help, ---------------------------------- "Breaking stereotypes since 1977." Nicholas Golder From s354199 at student.uq.edu.au Fri Apr 13 05:16:31 2001 From: s354199 at student.uq.edu.au (Elliot Mackenzie) Date: Tue Dec 2 02:34:15 2003 Subject: W2K machine logon to a domain with Samba 2.2alpha3 PDC In-Reply-To: <000001c0c3d2$e8f2ab20$0101a8c0@stures.iastate.edu> Message-ID: It looks like you've got your Windows machines pointing to the samba machine when looking for a WINS server. Unless you have setup Samba as a WINS server (wins support= yes - and rtm), this may generate errors similar to the one you pasted below. It is possible the name resolution is causing issues with your domain logons but without trying it I can only say it's not likely as you seem to be able to join the domains successfully. What is the windows error you get when logging on? (I'm specifically looking for whether it complains about the "machine" account or the "user" account not being valid).... M. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Nicholas Golder Sent: Friday, 13 April 2001 2:34 PM To: samba-ntdom@lists.samba.org Subject: RE: W2K machine logon to a domain with Samba 2.2alpha3 PDC I have tried the following with no success: I removed the machine name from the passwd and the smbpasswd (I actually recreated the smbpasswd). I dropped the domain and then joined it again with the same luck. However, when I try to logon to the domain with an account in the smbpasswd it gives me some message about the user not existing in the domain. What does this mean: [2001/04/12 23:28:38, 0] nmbd/nmbd_incomingrequests.c:process_name_refresh_request(181) Error - should be sent to WINS server Is there something wrong with my /etc/passwd file (FreeBSD 4.2)? tronyx$:*:1000:1250:2000Machine:/dev/null:/usr/bin/false Here is my smb.conf: [global] security = user status = yes workgroup = HIVEPORTAL domain admin group = @wheel domain master = yes encrypt passwords = yes domain logons = yes logon script = scripts\%U.bat guest account = ftp share modes = no os level = 65 [homes] guest ok = no read only = no create mask = 0700 directory mask = 0700 locking = no [netlogon] path = /usr/local/samba/netlogon writable = no guest ok = no You may have tried to join the samba domain, had it happen successfully, then for some reason tried to join it again. This will put the trust password out of sync. Remove the machine account machine$ (whatever) from smbpasswd and passwd (wherever it exists as my memory is not that good :) ). Join the domain again (recreating whatever machine accounts using the adduser script or however you did it). That might fix it... Elliot. Any other suggestions? ---------------------------------- "Breaking stereotypes since 1977." Nicholas Golder -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Nicholas Golder Sent: Thursday, April 12, 2001 8:35 PM To: samba-ntdom@lists.samba.org Subject: W2K machine logon to a domain with Samba 2.2alpha3 PDC I am using: FreeBSD 4.2 Samba-2.2.0alpha3 Windows 2000 SP1 Problem: I can't logon with a created account that exists on the Samba PDC with Win2k. I have installed Samba and configured it the way the PDC-HOWTO describes: http://bioserve.latrobe.edu.au/samba/samba-pdc-howto.html I have successfully joined the domain with the Win2k box. When I try to logon using an account that is in both the /etc/passwd and smbpasswd, I get an error message that the user account doesn't exist in the domain [or some derivative of that]. When I try to add the users on the Win2k box using the account manager, I can see them in the domain and the users I have created in smbpasswd but can't add them. I get the message: The user could not be added because the following error has occurred: The trust relationship between this workstation and the primary domain failed. How am I to: a) establish a trust relationship between my workstation and the primary domain? -or- b) make a config on the Win2k box so it doesn't require a trust relationship? Thanks in advance for you help, ---------------------------------- "Breaking stereotypes since 1977." Nicholas Golder From purenrg at iastate.edu Fri Apr 13 06:37:43 2001 From: purenrg at iastate.edu (Nicholas Golder) Date: Tue Dec 2 02:34:15 2003 Subject: W2K machine logon to a domain with Samba 2.2alpha3 PDC In-Reply-To: Message-ID: <000001c0c3e4$3eead0f0$0101a8c0@stures.iastate.edu> It is complaining about the machine account. I am using a FreeBSD 4.2 box. I will try a couple of modifications on the passwd file and reload the machine$ in the smbpasswd. I have the my box now pointing at the Samba server with WINS running. Thanks for all your help so far. ---------------------------------- "Breaking stereotypes since 1977." Nicholas Golder -----Original Message----- From: Elliot Mackenzie [mailto:s354199@student.uq.edu.au] Sent: Friday, April 13, 2001 12:17 AM To: Nicholas Golder; samba-ntdom@lists.samba.org Subject: RE: W2K machine logon to a domain with Samba 2.2alpha3 PDC It looks like you've got your Windows machines pointing to the samba machine when looking for a WINS server. Unless you have setup Samba as a WINS server (wins support= yes - and rtm), this may generate errors similar to the one you pasted below. It is possible the name resolution is causing issues with your domain logons but without trying it I can only say it's not likely as you seem to be able to join the domains successfully. What is the windows error you get when logging on? (I'm specifically looking for whether it complains about the "machine" account or the "user" account not being valid).... M. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Nicholas Golder Sent: Friday, 13 April 2001 2:34 PM To: samba-ntdom@lists.samba.org Subject: RE: W2K machine logon to a domain with Samba 2.2alpha3 PDC I have tried the following with no success: I removed the machine name from the passwd and the smbpasswd (I actually recreated the smbpasswd). I dropped the domain and then joined it again with the same luck. However, when I try to logon to the domain with an account in the smbpasswd it gives me some message about the user not existing in the domain. What does this mean: [2001/04/12 23:28:38, 0] nmbd/nmbd_incomingrequests.c:process_name_refresh_request(181) Error - should be sent to WINS server Is there something wrong with my /etc/passwd file (FreeBSD 4.2)? tronyx$:*:1000:1250:2000Machine:/dev/null:/usr/bin/false Here is my smb.conf: [global] security = user status = yes workgroup = HIVEPORTAL domain admin group = @wheel domain master = yes encrypt passwords = yes domain logons = yes logon script = scripts\%U.bat guest account = ftp share modes = no os level = 65 [homes] guest ok = no read only = no create mask = 0700 directory mask = 0700 locking = no [netlogon] path = /usr/local/samba/netlogon writable = no guest ok = no You may have tried to join the samba domain, had it happen successfully, then for some reason tried to join it again. This will put the trust password out of sync. Remove the machine account machine$ (whatever) from smbpasswd and passwd (wherever it exists as my memory is not that good :) ). Join the domain again (recreating whatever machine accounts using the adduser script or however you did it). That might fix it... Elliot. Any other suggestions? ---------------------------------- "Breaking stereotypes since 1977." Nicholas Golder -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Nicholas Golder Sent: Thursday, April 12, 2001 8:35 PM To: samba-ntdom@lists.samba.org Subject: W2K machine logon to a domain with Samba 2.2alpha3 PDC I am using: FreeBSD 4.2 Samba-2.2.0alpha3 Windows 2000 SP1 Problem: I can't logon with a created account that exists on the Samba PDC with Win2k. I have installed Samba and configured it the way the PDC-HOWTO describes: http://bioserve.latrobe.edu.au/samba/samba-pdc-howto.html I have successfully joined the domain with the Win2k box. When I try to logon using an account that is in both the /etc/passwd and smbpasswd, I get an error message that the user account doesn't exist in the domain [or some derivative of that]. When I try to add the users on the Win2k box using the account manager, I can see them in the domain and the users I have created in smbpasswd but can't add them. I get the message: The user could not be added because the following error has occurred: The trust relationship between this workstation and the primary domain failed. How am I to: a) establish a trust relationship between my workstation and the primary domain? -or- b) make a config on the Win2k box so it doesn't require a trust relationship? Thanks in advance for you help, ---------------------------------- "Breaking stereotypes since 1977." Nicholas Golder From s354199 at student.uq.edu.au Fri Apr 13 07:06:10 2001 From: s354199 at student.uq.edu.au (Elliot Mackenzie) Date: Tue Dec 2 02:34:15 2003 Subject: W2K machine logon to a domain with Samba 2.2alpha3 PDC In-Reply-To: <000001c0c3e4$3eead0f0$0101a8c0@stures.iastate.edu> Message-ID: If you created the account manually check that you did all these steps: adduser -g machines -c whatever -d /dev/null -s /bin/false -n machinename$ machines is the name of a system group you create that you put all the machine users into. machine name is tronyx$ in your case i think (the windows machine name). Make sure when you created the machine trust account using smbpasswd you specified the -m option (this creates the machine trust account): smbpasswd -a -m tronyx$ THEN get your windows machine to join the domain (not until you create the trust account with the last line). For simplicity, I find it easier to use the add user script for Win2k clients (add user script thing doesn't work for NT workstations afaik). See my previous post and/or the HOWTO for more info on automatic adding of machine accounts. Does this help? M. -----Original Message----- From: Nicholas Golder [mailto:purenrg@iastate.edu] Sent: Friday, 13 April 2001 4:38 PM To: 'Elliot Mackenzie'; samba-ntdom@lists.samba.org Subject: RE: W2K machine logon to a domain with Samba 2.2alpha3 PDC It is complaining about the machine account. I am using a FreeBSD 4.2 box. I will try a couple of modifications on the passwd file and reload the machine$ in the smbpasswd. I have the my box now pointing at the Samba server with WINS running. tronyx$:*:1000:1250:2000Machine:/dev/null:/usr/bin/false Here is my smb.conf: [global] security = user status = yes workgroup = HIVEPORTAL domain admin group = @wheel domain master = yes encrypt passwords = yes domain logons = yes logon script = scripts\%U.bat guest account = ftp share modes = no os level = 65 [homes] guest ok = no read only = no create mask = 0700 directory mask = 0700 locking = no [netlogon] path = /usr/local/samba/netlogon writable = no guest ok = no From Hans.Troost at solvay.com Fri Apr 13 07:56:17 2001 From: Hans.Troost at solvay.com (Troost, Hans) Date: Tue Dec 2 02:34:15 2003 Subject: users.map and real UID (smbstatus) Message-ID: <8058A4A7DD5FD411A29200805FEA165A3D00D1@we01ex.we.nl.solvay.com> L.S. We use SAMBA 2.0.7 on SGI IRIX 6.5.4m to facilitate using unix shares on NT/W95 clients. I created a users.map with e.g. next line: aitht = nltroo01 when NT-domain user nltroo01 maps a unix share (via unix homes share) indeed his unix home directory (usr/people/aitht) is mapped to the client. Inspecting the process on the SGI-machine (SGUX07) with smbstatus however shows that user nobody is is using the share aitht: sgux07 28# ./smbstatus Samba version 2.0.7 Service uid gid pid machine ---------------------------------------------- aitht nobody nobody 46707 we0w3944 (150.251.142.76) Fri Apr 13 08:58:25 2001 Everything nobody nobody 46810 we0w5177 (150.251.142.117) Fri Apr 13 09:06:30 2001 No locked files I hoped and expected that user aitht was the real UID using that share, because this mapping is done in users.map. What parameters do I have to set in the smb.conf to achieve the mapping I want (so that aitht is using the share in stead of nobody?) For more info: here is my smb.conf: # Samba config file created using SWAT # from 150.251.142.171 (150.251.142.171) # Date: 2001/04/10 08:26:39 # Global parameters [global] workgroup = WE0D0700 security = SHARE map to guest = Bad User username map = /usr/local/samba/lib/users.map debug pid = Yes debug uid = Yes wins server = 150.251.137.134 delete readonly = Yes [homes] writeable = Yes guest ok = Yes browseable = No [test] path = /export/samba/test writeable = Yes guest ok = Yes [Everything] path = / writeable = Yes guest ok = Yes Met vriendelijke groeten / With kind regards Hans Troost ################################################ # Hans Troost # Atos Origin (at SOLVAY Pharmaceuticals B.V.) # Building WWM, room B-104 # Postbox 900 # 1380 DA, Weesp # The Netherlands # # E-mail : Hans.Troost@solvay.com # Phone (+31) (0)294-477492 # Fax (+31) (0)294-477140 # # "non-SOLVAY"- and private mail : # Hans.Troost@nl.origin-it.com ############################################### -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/ms-tnef Size: 3583 bytes Desc: not available Url : http://lists.samba.org/archive/samba-ntdom/attachments/20010413/9bcb8599/attachment.bin From mhaney at info4cars.com Fri Apr 13 08:11:06 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:15 2003 Subject: Planning In-Reply-To: <001401c0c3b8$14321840$8500a8c0@ibm23ar813> Message-ID: You know it's amazing to me how some people seem to think the people 'in the know' can just figure what the heck they are trying to say with only a couple of sentences. You know, like 'my printer isn't working', that sort of thing. I hate to break this to you Tim, but, that just isn't enough info. Planning for what? Samba as the PDC? Just a memeber server? I mean there's more to it that what you are telling us. And allowing logins from certain MAC addresses? Do you realize how much of a nightmare that will be for you if someone in your IT staff replaces a bad NIC? Or the CEO decides to buy a new PC Card for his laptop? Why exactly would you need this capability other than your need? If you tell us why you 'need' this maybe we can figure out a better way that won't require as much work. Don't just throw us a bone, we want the whole dog. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Tim Robison Sent: Thursday, April 12, 2001 9:22 PM To: samba list Subject: Planning I am going to bring up a LINUX box that will be running SAMBA. My network will be running Win98/95 and NT machines both laptops and desktops. I will be running 2.0.7 behind a firewall. What I need from the list is a little help, as I want to PLAN my installation so as to have as few issues as possible. I would also like to know if there is a way to allow logins from only certain MAC addresses. I have an need for this type of limitation. Thanks in Advance. -------------- next part -------------- HTML attachment scrubbed and removed From nick at i-vision.be Fri Apr 13 13:29:01 2001 From: nick at i-vision.be (Nick De Decker) Date: Tue Dec 2 02:34:15 2003 Subject: Different Profiles Message-ID: Hello, Does anyone knows how to setup my samba-tng so that i have different profiles per machine per user, my clients run differen softwaren, so i cant simply use the same userprofile on every clientmachine. appreciate your help Nick nick@i-vision.be From trehm at fitnessquest.com Fri Apr 13 13:54:03 2001 From: trehm at fitnessquest.com (Tym Rehm) Date: Tue Dec 2 02:34:15 2003 Subject: Help -- Samba Memory Message-ID: <001301c0c421$334ec8e0$142aa8c0@fitnessquest.com> I'm running RH6.2 and mounting smb share in the fstab file on bootup. My users ftp into this machine to connect to smb shares on NT. One user is ftping in every 30 minutes and the pid for that user keeps taking more memory each time. Does anyone know how to fix this problem. Sorry if I forgot to include the correct info. Thanks. From vorlon at netexpress.net Fri Apr 13 14:59:06 2001 From: vorlon at netexpress.net (Steve Langasek) Date: Tue Dec 2 02:34:15 2003 Subject: W2K machine logon to a domain with Samba 2.2alpha3 PDC In-Reply-To: Message-ID: On Fri, 13 Apr 2001, Elliot Mackenzie wrote: > If you created the account manually check that you did all these steps: > adduser -g machines -c whatever -d /dev/null -s /bin/false -n machinename$ > machines is the name of a system group you create that you put all the > machine users into. machine name is tronyx$ in your case i think (the > windows machine name). > Make sure when you created the machine trust account using smbpasswd you > specified the -m option (this creates the machine trust account): > smbpasswd -a -m tronyx$ smbpasswd -a -m tronyx The smbpasswd command knows to add the $ to the end of the smbpasswd entry when creating a machine account, so you don't need to specify it on the commandline. I suspect that 'smbpasswd -a -m tronyx$' will get you an smbpasswd entry for user tronyx$$ .... Steve Langasek postmodern programmer From don_mccall at hp.com Fri Apr 13 15:41:28 2001 From: don_mccall at hp.com (MCCALL,DON (HP-USA,ex1)) Date: Tue Dec 2 02:34:16 2003 Subject: users.map and real UID (smbstatus) Message-ID: <079FD72E42C9D311B854009027650E6F0405096F@xatl02.atl.hp.com> Hallo Hans, A couple of things: you have map to guest = bad user This means that if for some reason the user is not found, then your connection will transparently be made as your guest account (nobody). Also in the share definitions, you specify guest ok = yes, so again if something has gone wrong with the username/password pair that was used to connect, the connection will be made as guest. So you get no errors, and can't tell what is REALLY happening. I would suggest that you comment out the "map to guest" parameter temporarily, and set guest ok = no for the share in question, and try to connect again. since you have security = share and encrypt passwords = no (this is default, so if you don't specify otherwise in the smb.conf file, this is what you get) then when your client tries to connect, if you haven't changed your pc registry to send plaintext passwords, it will fail, and the only way you WILL get in is as guest... If you set log level = 10 and log file = /usr/local/samba/var/log.%m and do this test, you can send me the resultant log file (name will be log.pcmachinename) and I can give you more info. Hope this helps, Don > -----Original Message----- > From: Troost, Hans [mailto:Hans.Troost@solvay.com] > Sent: Friday, April 13, 2001 3:56 AM > To: 'samba@lists.samba.org'; 'samba-ntdom@lists.samba.org' > Subject: users.map and real UID (smbstatus) > > L.S. > > We use SAMBA 2.0.7 on SGI IRIX 6.5.4m to facilitate using unix shares on > NT/W95 clients. > > I created a users.map with e.g. next line: > > aitht = nltroo01 > > when NT-domain user nltroo01 maps a unix share (via unix homes share) > indeed his unix home directory (usr/people/aitht) is mapped to the client. > > Inspecting the process on the SGI-machine (SGUX07) with smbstatus however > shows that user nobody is is using the share aitht: > > sgux07 28# ./smbstatus > > Samba version 2.0.7 > Service uid gid pid machine > ---------------------------------------------- > aitht nobody nobody 46707 we0w3944 (150.251.142.76) Fri Apr > 13 08:58:25 2001 > Everything nobody nobody 46810 we0w5177 (150.251.142.117) Fri Apr > 13 09:06:30 2001 > > No locked files > > I hoped and expected that user aitht was the real UID using that share, > because this mapping is done in users.map. > > What parameters do I have to set in the smb.conf to achieve the mapping I > want (so that aitht is using the share in stead of nobody?) > > For more info: here is my smb.conf: > > # Samba config file created using SWAT > # from 150.251.142.171 (150.251.142.171) > # Date: 2001/04/10 08:26:39 > > # Global parameters > [global] > workgroup = WE0D0700 > security = SHARE > map to guest = Bad User > username map = /usr/local/samba/lib/users.map > debug pid = Yes > debug uid = Yes > wins server = 150.251.137.134 > delete readonly = Yes > > [homes] > writeable = Yes > guest ok = Yes > browseable = No > > [test] > path = /export/samba/test > writeable = Yes > guest ok = Yes > > [Everything] > path = / > writeable = Yes > guest ok = Yes > > Met vriendelijke groeten / With kind regards > > Hans Troost > > ################################################ > # Hans Troost > # Atos Origin (at SOLVAY Pharmaceuticals B.V.) > # Building WWM, room B-104 > # Postbox 900 > # 1380 DA, Weesp > # The Netherlands > # > # E-mail : Hans.Troost@solvay.com > # Phone (+31) (0)294-477492 > # Fax (+31) (0)294-477140 > # > # "non-SOLVAY"- and private mail : > # Hans.Troost@nl.origin-it.com > ############################################### > From rajeeva at research.bell-labs.com Fri Apr 13 16:55:29 2001 From: rajeeva at research.bell-labs.com (Rajeev Agrawala) Date: Tue Dec 2 02:34:16 2003 Subject: syncing print drivers between two samba servers References: Message-ID: <3AD72F81.ADBC6B08@research.bell-labs.com> Gerald Carter wrote: > > On Tue, 10 Apr 2001, Jeremy Allison wrote: > > > Rajeev Agrawala wrote: > > > > > > Hi, > > > > > > I have samba 2_2_alpha3 running on two machines. I want to install > > > drivers on one machine and then I want to keep the other machine in sync > > > with the first. Can I get away with doing the following > > > > > > 1. sync the print$ share > > > 2. copy sambadir/var/locks/ntdrivers.tdb to the second samba server. > > > > > > Should I shutdown any/both samba servers, while I am doing this? I would > > > really like to avoid, shutting down server, if I can. Would smbd read > > > the new tdb file on it own? > > > > Hmmm. Very interesting point. I think it should work, try > > it and let the list know.... > > > > Don't forget to make sure the permissions on the print$ share > > files are the same. > > You will need to set the driver for each print on the new server. see the > setdriver command in rpcclient. > > jerry OK, I tried the same with shutting down the destination samba server. It worked fine. I did not need to use the setdriver command, may be because, both the samba installation had same printers defined in LPRng. I noticed that, every so often, the file ntdrivers.tdb keeps on getting modified, even though I am not connected to the samba server as root, only some clients are connected as guests. Therefore, I am not sure, if I can copy the file both the samba servers are running. Any ideas? Thanks, rajeev From David.Bear at asu.edu Fri Apr 13 17:43:12 2001 From: David.Bear at asu.edu (iddwb) Date: Tue Dec 2 02:34:16 2003 Subject: samba file time stamping Message-ID: I've posted this before and didn't receive a reply. I was wondering if this has been addressed in the new and about to be released v2.2? >-- This morning when I was doing file maintenance to delete completed projects from my C drive, I noticed that as I copied files to P, if the file was already there it would give the file the current time--HOWEVER, it was about an hour off from my computer's time (i.e., 6:46 instead of 7:46 when I was actually doing the copying). If I first deleted the file from P and then copied it from my C, it would have the same date/time as the file on my C drive. The following jobs on P are the ones I did this morning: From h.vandalen2 at chello.nl Fri Apr 13 18:19:34 2001 From: h.vandalen2 at chello.nl (Harm van Dalen) Date: Tue Dec 2 02:34:16 2003 Subject: Samba and a MS Acces Database Message-ID: <000a01c0c446$4b2a6bc0$ba0e2ed5@chello.nl> Hello, In our company we have a SuSE Linux 7.0 Professional Server. Our Win95 clients connect with this server via Samba. On this server is a MS Access database installed (just a .MDB file). The forms, queries, etc. are installed local on the clients. We've got a problem with it and it looks like it is a caching problem. When a person changes something in the database and another person looks in the same record in the database about a half hour later the record isn't changed yet. The time between changing by the person and writing by the server varies. Sometimes it's about 1 minute but yesterday we clocked more than 2 hours. Standard caching time by Linux is 30 seconds (this is what I read on The Internet on the SuSE-site). My question: Is it a 'problem' by Linux or can I configure something in my SMB.CONF ? Thanks for your time. Harm van Dalen VAMOO PLAYGROUND EQUIPMENT Boekel, The Netherlands -------------- next part -------------- HTML attachment scrubbed and removed From mark at axeon.screaming.net Fri Apr 13 19:11:36 2001 From: mark at axeon.screaming.net (Mark) Date: Tue Dec 2 02:34:16 2003 Subject: Adding users using USERMGR.EXE Message-ID: <001801c0c44d$8fbd7d20$3e01a8c0@markw2000> Is this going to be working before 2.2 is released? If not, which release is it planned for? Thanks Mark From jeremy at valinux.com Fri Apr 13 17:17:13 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:16 2003 Subject: Adding users using USERMGR.EXE References: <001801c0c44d$8fbd7d20$3e01a8c0@markw2000> Message-ID: <3AD73499.9D761A44@valinux.com> Mark wrote: > > Is this going to be working before 2.2 is released? If not, which release > is it planned for? No, this is not a 2.2.0 feature. It will be included as soon as we can get it working in the 2.2.x release stream however. Not sure on a timeframe, I need to look at what remains to be done (merging JF's group mapper stuff I think). Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From purenrg at iastate.edu Fri Apr 13 19:58:47 2001 From: purenrg at iastate.edu (Nicholas Golder) Date: Tue Dec 2 02:34:16 2003 Subject: W2K machine logon to a domain with Samba 2.2alpha3 PDC In-Reply-To: Message-ID: <000001c0c454$27ad2710$0101a8c0@stures.iastate.edu> It seems that I am reaching the end of possible solutions. I have done everything short of getting the latest CVS snapshot. Has anyone had any success in creating a FreeBSD 4.2 Samba 2.2.0alpha3 PDC? What are the distinguished differences between a BSD style /etc/passwd and the POSIX (Linux) /etc/passwd file. The reason I ask is that when I try to create the machine account as described below: adduser -g machines -c whatever -d /dev/null -s /bin/false -n machinename$ (minus the trailing $ of course which is later added in via vipw) It drops out to a usage descriptions. I am willing to make a transition to Linux if necessary (since the project is young and also in favor of PAM). Has there been a wider amount of success in using Linux as opposed to FreeBSD in this specific application of Samba (as PDC)? ---------------------------------- "Breaking stereotypes since 1977." Nicholas Golder -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Steve Langasek Sent: Friday, April 13, 2001 9:59 AM To: Elliot Mackenzie Cc: Nicholas Golder; samba-ntdom@lists.samba.org Subject: RE: W2K machine logon to a domain with Samba 2.2alpha3 PDC On Fri, 13 Apr 2001, Elliot Mackenzie wrote: > If you created the account manually check that you did all these steps: > adduser -g machines -c whatever -d /dev/null -s /bin/false -n machinename$ > machines is the name of a system group you create that you put all the > machine users into. machine name is tronyx$ in your case i think (the > windows machine name). > Make sure when you created the machine trust account using smbpasswd you > specified the -m option (this creates the machine trust account): > smbpasswd -a -m tronyx$ smbpasswd -a -m tronyx The smbpasswd command knows to add the $ to the end of the smbpasswd entry when creating a machine account, so you don't need to specify it on the commandline. I suspect that 'smbpasswd -a -m tronyx$' will get you an smbpasswd entry for user tronyx$$ .... Steve Langasek postmodern programmer From jeremy at valinux.com Fri Apr 13 17:36:39 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:16 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> <3AD218ED.39AB153E@canada.sun.com> <3AD1FF04.3B94A0F3@valinux.com> <20010409203510.A12112@zrtps04d.nortelnetworks.com> Message-ID: <3AD73927.E995938@valinux.com> Eric Boehm wrote: > > I submitted a patch to lib/util.c back in January/February. It's a rather > small change that makes it possible to open more than 1014 files under > Solaris, HP-UX, Linux without the need to raise the systemwide open file > descriptor limit. > > It also preserves existing behavior if the attempt fails. Applied to 2.2 and HEAD, thanks. Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From vorlon at netexpress.net Fri Apr 13 20:31:53 2001 From: vorlon at netexpress.net (Steve Langasek) Date: Tue Dec 2 02:34:16 2003 Subject: W2K machine logon to a domain with Samba 2.2alpha3 PDC In-Reply-To: <000001c0c454$27ad2710$0101a8c0@stures.iastate.edu> Message-ID: On Fri, 13 Apr 2001, Nicholas Golder wrote: > It seems that I am reaching the end of possible solutions. I have done > everything short of getting the latest CVS snapshot. > Has anyone had any success in creating a FreeBSD 4.2 Samba 2.2.0alpha3 PDC? > What are the distinguished differences between a BSD style /etc/passwd and > the POSIX (Linux) /etc/passwd file. The reason I ask is that when I try to > create the machine account as described below: > adduser -g machines -c whatever -d /dev/null -s /bin/false -n machinename$ > (minus the trailing $ of course which is later added in via vipw) > It drops out to a usage descriptions. I am willing to make a transition to > Linux if necessary (since the project is young and also in favor of PAM). > Has there been a wider amount of success in using Linux as opposed to > FreeBSD in this specific application of Samba (as PDC)? I can't speak to whether people enjoy wider success with Linux PDCs than with FreeBSD PDCs; I've only ever tried to get it working with Linux. If your adduser script takes a different syntax than that listed above, that's not a problem -- just remap the arguments to the syntax supported on your system. -g for primary group, -c for comment, -d for homedir, -s for shell, -n ... probably isn't necessary on your system. So far as I know, none of the above is incompatible with a BSD password file; it's only the adduser args which are incompatible. Once you've persuaded the BSD system to accept the usernames with extra characters in them, I can't see any reason that BSD would be less suitable for use as a PDC than Linux. Steve Langasek postmodern programmer From memphis_ms at gmx.net Fri Apr 13 21:38:57 2001 From: memphis_ms at gmx.net (Raoul Schroeder) Date: Tue Dec 2 02:34:16 2003 Subject: W2K machine logon to a domain with Samba 2.2alpha3 PDC References: <000001c0c454$27ad2710$0101a8c0@stures.iastate.edu> Message-ID: <3AD771F1.41DE4B5@gmx.net> I have had 2.2.0 run on FreeBSD 4.1 w/o problems, but switched back to Samba TNG for several reasons. First of all, I only add users with vipw anyway. Secondly, look into the /etc/passwd file. You will not see /bin/false or /dev/null. The corresponding entries for FreeBSD are /sbin/nologin and /nonexistant PAM of course exists for FreeBSD and most likely works with Samba. The only problem people have with putting Samba on FreeBSD is that everyone follows the Linux descriptions, which have to be altered when using FreeBSD. Other than that, Samba on FreeBSD seems to use even less memory, although some people (including me) have had problems with the oplocks. (Locking files for up to 30 seconds from time to time). Nicholas Golder wrote: > It seems that I am reaching the end of possible solutions. I have done > everything short of getting the latest CVS snapshot. > Has anyone had any success in creating a FreeBSD 4.2 Samba 2.2.0alpha3 PDC? > What are the distinguished differences between a BSD style /etc/passwd and > the POSIX (Linux) /etc/passwd file. The reason I ask is that when I try to > create the machine account as described below: > adduser -g machines -c whatever -d /dev/null -s /bin/false -n machinename$ > (minus the trailing $ of course which is later added in via vipw) > It drops out to a usage descriptions. I am willing to make a transition to > Linux if necessary (since the project is young and also in favor of PAM). > Has there been a wider amount of success in using Linux as opposed to > FreeBSD in this specific application of Samba (as PDC)? > > ---------------------------------- > "Breaking stereotypes since 1977." > Nicholas Golder > > -----Original Message----- > From: samba-ntdom-admin@lists.samba.org > [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Steve Langasek > Sent: Friday, April 13, 2001 9:59 AM > To: Elliot Mackenzie > Cc: Nicholas Golder; samba-ntdom@lists.samba.org > Subject: RE: W2K machine logon to a domain with Samba 2.2alpha3 PDC > > On Fri, 13 Apr 2001, Elliot Mackenzie wrote: > > > If you created the account manually check that you did all these steps: > > adduser -g machines -c whatever -d /dev/null -s /bin/false -n > machinename$ > > > machines is the name of a system group you create that you put all the > > machine users into. machine name is tronyx$ in your case i think (the > > windows machine name). > > > Make sure when you created the machine trust account using smbpasswd you > > specified the -m option (this creates the machine trust account): > > > smbpasswd -a -m tronyx$ > > smbpasswd -a -m tronyx > > The smbpasswd command knows to add the $ to the end of the smbpasswd entry > when creating a machine account, so you don't need to specify it on the > commandline. I suspect that 'smbpasswd -a -m tronyx$' will get you an > smbpasswd entry for user tronyx$$ .... > > Steve Langasek > postmodern programmer From pgoetz at math.utexas.edu Fri Apr 13 23:12:13 2001 From: pgoetz at math.utexas.edu (Patrick Goetz) Date: Tue Dec 2 02:34:16 2003 Subject: W2K machine in Samba2.2alpha3 domain: SUCCESS! Message-ID: Thanks to everyone from the list who pointed out the section of the PDC-HOWTO I had overlooked; i.e. that currently only root (added to smbpasswd) can allow a machine to join a domain. I added root to smbpasswd, and had no problem signing my W2K SP1 machine onto the domain and then logging in as myself. Here are a couple of comments regarding advice I received and stuff I read in the HOWTO. My goal was to get it working with the minimum amount of configuration cruft. To this end, I discovered that: (1) I did not have to mention root in the domain admins; in fact, I don't even, as far as I know, have domain admins set up in the configuration file. All I did was add root to smbpasswd. (2) I did not add the machine name (i.e. trust account) to the smbpasswd file. All I did was add machine$ to /etc/passwd and the smbpasswd file was updated automatically when the machine joined the domain. The only thing I put in the smbpasswd file are user names (including root) I added using smbpasswd -a. (3) Because the samba PDC and the W2K workstation are on different subnets, I did make the samba machine the WINS server on the W2K workstation. I'm not sure this would have been necessary had the machines been on the same subnet. Here is my complete smb.conf: ------------------------------------ [global] workgroup = UTMATH wins support = yes security = user status = no encrypt passwords = yes # PDC Stuff below os level = 65 local master = yes preferred master = yes domain master = yes domain logons = yes [netlogon] comment = The domain logon services path = /opt/samba/var/logon public = no writeable = no browseable = no [homes] guest ok = no ------------------------------------ Now for some questions. (A) When I logged myself on to the W2K machine, my home directory was automatically mounted and the workstation tried to load a profiles.pds file from it. Why did it assume that I wanted to mount my UNIX home directory and further load a stored profile from it? (B) One of the HOWTOs insisted that I need to set up a [netlogon] share, presumably for the purpose of storing roaming profiles. The preceding seems to indicate that this is not even being used, or is this directory only there for the purpose of storing logon scripts. Can anyone clarify what [netlogon] is supposed to be all about? (C) Last question. I would like all the network printers to be set up on the workstations automatically when either the machine joins the domain or the user logs on. Using Samba has a few words to say about this, but does this feature actually work, and if so, is it documented any place? From dwcjr at inethouston.net Sat Apr 14 08:09:27 2001 From: dwcjr at inethouston.net (David W. Chapman Jr.) Date: Tue Dec 2 02:34:16 2003 Subject: 2.2 release imminent. References: <3AD1FB34.F6CA36E7@valinux.com> <3AD218ED.39AB153E@canada.sun.com> <3AD1FF04.3B94A0F3@valinux.com> <20010409203510.A12112@zrtps04d.nortelnetworks.com> <3AD73927.E995938@valinux.com> Message-ID: <01fd01c0c4ba$3a0151a0$931576d8@inethouston.net> Just got a chance to install the latest samba from cvs as of 20 mins ago and still no luck with my quicken 2000 backup problem From jeremy at valinux.com Sat Apr 14 08:26:10 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:16 2003 Subject: 2.2 release imminent. In-Reply-To: <01fd01c0c4ba$3a0151a0$931576d8@inethouston.net>; from dwcjr@inethouston.net on Sat, Apr 14, 2001 at 03:09:27AM -0500 References: <3AD1FB34.F6CA36E7@valinux.com> <3AD218ED.39AB153E@canada.sun.com> <3AD1FF04.3B94A0F3@valinux.com> <20010409203510.A12112@zrtps04d.nortelnetworks.com> <3AD73927.E995938@valinux.com> <01fd01c0c4ba$3a0151a0$931576d8@inethouston.net> Message-ID: <20010414012610.A5490@valinux.com> On Sat, Apr 14, 2001 at 03:09:27AM -0500, David W. Chapman Jr. wrote: > Just got a chance to install the latest samba from cvs as of 20 mins ago and > still no luck with my quicken 2000 backup problem I need complete details please. Also a debug level 10 log without timestamps. That's a *complete* log from first connection to error with the error message that quicken is giving you please. I don't use quicken so I need some help here. Thanks, Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From frederic.cambray at secome.com Sat Apr 14 11:18:33 2001 From: frederic.cambray at secome.com (Frederic.Cambray) Date: Tue Dec 2 02:34:16 2003 Subject: performance problems !! Message-ID: <3AD83209.5070106@secome.com> I'm going to replace my NT (pII 450) server by a SAMBA linux (TBird 1Ghz) one. I run a comercial production managment software based on corel paradox. when I do a special treatment, witch processes all the articles, it starts normaly, but after a minute it blocks 2sec and restart 1s until the end of the treatment, like if a buffer was full. The global result is it takes 3 times more than with my NT server !! The two systems have a 100Mbits/s NIS and are connected on the same 10/100 switch. I tried samba 2.0.5a, 2.0.7 and 2.2.0_alpha2 and it doesn't change anything. I also tried different kernel, 2.2.14, 2.2.16 and now 2.2.19. My distibution is a slackware 7.0. I also tried to change the block size of my partition (1024, 2048 and 4096). My disks on the linux system are seagate SCSI 10000 rpm whit adaptec 21160N card. It takes about 1.30 mn to compile the 2.2.19 kernel. When I copy files from or to the samba server, it is normal, means fast. I don't really see wy this treatment is so slow with SAMBA. Every suggestion welcome. F. Cambray From f.w.j.wiegerinck at student.utwente.nl Sat Apr 14 12:46:49 2001 From: f.w.j.wiegerinck at student.utwente.nl (F.W.J.Wiegerinck) Date: Tue Dec 2 02:34:16 2003 Subject: performance problems !! In-Reply-To: <3AD83209.5070106@secome.com> Message-ID: <5.0.0.25.2.20010414143831.00a7efa8@mail.student.utwente.nl> At 13:18 14-4-2001 +0200, Frederic.Cambray wrote: >I'm going to replace my NT (pII 450) server by a SAMBA linux (TBird 1Ghz) one. >I run a comercial production managment software based on corel paradox. >when I do a special treatment, witch processes all the articles, it starts >normaly, >but after a minute it blocks 2sec and restart 1s until the end of the >treatment, like if >a buffer was full. The global result is it takes 3 times more than with my >NT server !! >The two systems have a 100Mbits/s NIS and are connected on the same 10/100 >switch. >I tried samba 2.0.5a, 2.0.7 and 2.2.0_alpha2 and it doesn't change anything. >I also tried different kernel, 2.2.14, 2.2.16 and now 2.2.19. >My distibution is a slackware 7.0. >I also tried to change the block size of my partition (1024, 2048 and 4096). >My disks on the linux system are seagate SCSI 10000 rpm whit adaptec >21160N card. >It takes about 1.30 mn to compile the 2.2.19 kernel. What if you search the problem in another direction. I had a similar problem on my server. I use my server as a routing machine and the problem I had was when I transfered larg amount of data at high speeds the speed tropped after 5sec to a low level. It starts with a speed of 5 -6Mb/s and after the 5sec. it dropped to 400kb/s. My solution was to upgrade my networkcarddrivers to an newer version. I have a Compex Freedomline with tulip-drivers. Maybe upgrading your networkcard- drivers to a newer version will help. Frank Wiegerinck From martin at zamenhof.demon.co.uk Sat Apr 14 12:53:45 2001 From: martin at zamenhof.demon.co.uk (Martin Radford) Date: Tue Dec 2 02:34:16 2003 Subject: Samba as member server in Win2k domain In-Reply-To: <20010413190142.ECADC4E64@lists.samba.org> from "samba-ntdom-request@lists.samba.org" at Apr 13, 2001 12:01:42 PM Message-ID: <200104141253.NAA17078@zamenhof.demon.co.uk> > for their authentication. Unfortunately, the Win2000 domain > is running Active Directory, not "legacy" WinNT mode. All Windows 2000 domains run Active Directory. I assume you mean it's in "natie" mode, as opposed to "mixed" mode. > My question is, can Samba participate in a Win2000 domain as > a member server? This is the deal, the 2 Win2000 servers Yes. > each have 10 client access licenses (which is all we need > for our accounting system). Our entire network has about 70 > clients. I don't want to go through the expense for another > copy of Win2000 server, and the extra client access licenses > that would be necessary to host the fileserving on Win2000. > So if Samba can be a member server, and if our clients log > in to the domain (authenticate via the Win2000 Domain > Controller) and only access shares on the Samba server, can > we get around having to get the extra client licenses? I Microsoft's position on Win2k licencing is that: "You need ... a Windows 2000 Server Client Access License (CAL) for each client computer that is used by an authenticated user or that uses Windows 2000 Server Services." ... and ... "An authenticated user is one who directly or indirectly uses the Windows 2000 Server Integrated Sign-on Service or receives credentials from the Windows 2000 Active Directory(TM) service." [Source: http://www.microsoft.com/windows2000/guide/server/pricing/model.asp ] So my reading is that if you're using a Samba server in a Windows 2000 domain, you need a CAL for each PC accessing that server. > would rather not do it this way, but if we're going to use > Linux/Samba as the PDC for our file serving, we would > probably need to use a different domain than the Win2000 > machines, causing more complexity - the issue we're trying > to avoid. We Could reinstall the 2 Win2000 servers, and run > the domain in legacy mode, but that's not the most wonderful > option, either. Especially since that's someone else's > jurisdiction, and they wouldn't go for that too easily. Martin -- Martin Radford | "Only wimps use tape backup: _real_ martin@zamenhof.demon.co.uk | men just upload their important stuff -o) Registered Linux user #9257 | on ftp and let the rest of the world /\\ - see http://counter.li.org | mirror it ;)" - Linus Torvalds _\_V From gcarter at valinux.com Sat Apr 14 12:59:16 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:16 2003 Subject: Samba as member server in Win2k domain In-Reply-To: <200104141253.NAA17078@zamenhof.demon.co.uk> Message-ID: On Sat, 14 Apr 2001, Martin Radford wrote: > Microsoft's position on Win2k licencing is that: > > "You need ... a Windows 2000 Server Client Access License (CAL) for > each client computer that is used by an authenticated user or that > uses Windows 2000 Server Services." > > ... and ... > > "An authenticated user is one who directly or indirectly uses the > Windows 2000 Server Integrated Sign-on Service or receives credentials > from the Windows 2000 Active Directory(TM) service." > > [Source: > http://www.microsoft.com/windows2000/guide/server/pricing/model.asp ] > > So my reading is that if you're using a Samba server in a Windows 2000 > domain, you need a CAL for each PC accessing that server. I'm afraid that it my understanding of the Win2k CAL's as well. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From dan_perik-work at ntm.org.pg Sun Apr 15 23:22:17 2001 From: dan_perik-work at ntm.org.pg (Dan Perik Work) Date: Tue Dec 2 02:34:16 2003 Subject: Samba as member server in Win2k domain In-Reply-To: <200104141253.NAA17078@zamenhof.demon.co.uk> Message-ID: Thank you for your input on that. I found out that our accounting users don't need to log in to the Accounting Win2k domain. They just need a username/password in the domain. I can use a seperate domain for the file serving and keep it seperate from the Win2k stuff. And, yes, I did mean "native mode" vs. "mixed mode". I'm just not super-fluent in all the terminology. - Dan On Sat, 14 Apr 2001 13:53:45 +0100 (BST) Martin Radford wrote: > > > for their authentication. Unfortunately, the Win2000 > domain > > is running Active Directory, not "legacy" WinNT mode. > > All Windows 2000 domains run Active Directory. I assume > you mean it's > in "natie" mode, as opposed to "mixed" mode. > > > My question is, can Samba participate in a Win2000 > domain as > > a member server? This is the deal, the 2 Win2000 > servers > > Yes. > > > each have 10 client access licenses (which is all we > need > > for our accounting system). Our entire network has > about 70 > > clients. I don't want to go through the expense for > another > > copy of Win2000 server, and the extra client access > licenses > > that would be necessary to host the fileserving on > Win2000. > > So if Samba can be a member server, and if our clients > log > > in to the domain (authenticate via the Win2000 Domain > > Controller) and only access shares on the Samba server, > can > > we get around having to get the extra client licenses? > I > > Microsoft's position on Win2k licencing is that: > > "You need ... a Windows 2000 Server Client Access License > (CAL) for > each client computer that is used by an authenticated > user or that > uses Windows 2000 Server Services." > > ... and ... > > "An authenticated user is one who directly or indirectly > uses the > Windows 2000 Server Integrated Sign-on Service or > receives credentials > from the Windows 2000 Active Directory(TM) service." > > [Source: > http://www.microsoft.com/windows2000/guide/server/pricing/model.asp > ] > > So my reading is that if you're using a Samba server in a > Windows 2000 > domain, you need a CAL for each PC accessing that server. > > > would rather not do it this way, but if we're going to > use > > Linux/Samba as the PDC for our file serving, we would > > probably need to use a different domain than the > Win2000 > > machines, causing more complexity - the issue we're > trying > > to avoid. We Could reinstall the 2 Win2000 servers, > and run > > the domain in legacy mode, but that's not the most > wonderful > > option, either. Especially since that's someone else's > > jurisdiction, and they wouldn't go for that too easily. > > Martin > -- > Martin Radford | "Only wimps use tape > backup: _real_ > martin@zamenhof.demon.co.uk | men just upload their > important stuff -o) > Registered Linux user #9257 | on ftp and let the rest of > the world /\\ > - see http://counter.li.org | mirror it ;)" - > Linus Torvalds _\_V > From dan_perik-work at ntm.org.pg Mon Apr 16 05:05:50 2001 From: dan_perik-work at ntm.org.pg (Dan Perik) Date: Tue Dec 2 02:34:16 2003 Subject: Samba as member server in Win2k domain References: <200104141253.NAA17078@zamenhof.demon.co.uk> Message-ID: <3ADA7DAE.1EC80C55@ntm.org.pg> Martin Radford wrote: > > for their authentication. Unfortunately, the Win2000 domain > > is running Active Directory, not "legacy" WinNT mode. > > All Windows 2000 domains run Active Directory. I assume you mean it's > in "natie" mode, as opposed to "mixed" mode. > > > My question is, can Samba participate in a Win2000 domain as > > a member server? This is the deal, the 2 Win2000 servers > > Yes. A question in this. Does the Win2000 domain need to be in "mixed" mode in order for the Samba server to be able to be a member server in the domain? Or can the Samba server be a member server in a "native" Win2000 domain? I ask because our existing Win2000 domain is running in native mode, and to convert means a reinstall (of course, it's a M$ product). - Dan -- - Dan Perik Computer Services Department Lapilo Center New Tribes Mission - PNG From evelyn at das.com.tw Mon Apr 16 07:00:05 2001 From: evelyn at das.com.tw (Evelyn Huang) Date: Tue Dec 2 02:34:16 2003 Subject: Printing from NT to Linux Message-ID: <3ADA9875.6C97957B@das.com.tw> Hi, I use RedHat 6.2 with samba-2.0.7. When I tried to print from NT to Linux, I encountered the following problem. I can print locally and from a remote Linux to my Linux server. But it says, "File, directory name or disk label usage fault" when I tried to print from NT to Linux. A print queue has already been properly set up on Linux while the filter is left blank, which is tested ok locally. A proper driver on NT is installed along with the process of printer setup wizard on NT through Network Neighbor. And SAMBA works fine in terms of file sharing. The shared printer of Linux can be seen on NT as well. There is no problem with the permissions regarding print queue cuz I've set /var/spool/lpd/lp2 as writable for user, group and other. For your reference, the content of /etc/printcap is provided as below. lp2:\ :rw:sh:\ :lp=/dev/lp0:\ :sd=/var/spool/lpd/lp2:\ :fx=flp: /etc/smb.conf [epson] path=/var/spool/lpd/lp2 printable=yes printer=lp2 print command=lpr -b -P%p %s lpq command=lpq -P%p lprm command=lprm -P%p %j Is there anything missing? I'll really appreciate it if you can answer this question for me! Evelyn Huang From barth at cck.uni-kl.de Mon Apr 16 09:53:22 2001 From: barth at cck.uni-kl.de (Christian Barth) Date: Tue Dec 2 02:34:16 2003 Subject: Printing from NT to Linux In-Reply-To: <3ADA9875.6C97957B@das.com.tw> Message-ID: <3ADADD32.345.25707C@localhost> > Hi, > > I use RedHat 6.2 with samba-2.0.7. > When I tried to print from NT to Linux, I encountered the following > problem. > I can print locally and from a remote Linux to my Linux server. > But it says, "File, directory name or disk label usage fault" when I > tried to print from NT to Linux. A print queue has already been > properly set up on Linux while the filter is left blank, which is tested > ok locally. A proper driver on NT is installed along with the process > of printer setup wizard on NT through Network > Neighbor. And SAMBA works fine in terms of file sharing. > The shared printer of Linux can be seen on NT as well. There is no > problem with the permissions regarding print queue cuz I've set > /var/spool/lpd/lp2 as writable for user, group and other. For your > reference, the content of /etc/printcap is provided as below. > > lp2:\ > :rw:sh:\ > :lp=/dev/lp0:\ > :sd=/var/spool/lpd/lp2:\ > :fx=flp: > > /etc/smb.conf > [epson] > path=/var/spool/lpd/lp2 > printable=yes > printer=lp2 > print command=lpr -b -P%p %s > lpq command=lpq -P%p > lprm command=lprm -P%p %j > > Is there anything missing? > I'll really appreciate it if you can answer this question for me! Hi, I never got that error message, but I would try 3 things first: - create a seperate spool directory for samba, e.g. /var/spool/samba and set the permissions for it to drwxrwxrwt. Then take this directory as path in smb.conf, e.g. path=/var/spool/samba - set the print/lpq/lprm command with the full path: print command = /usr/bin/lpr -b -P%p %s - in smb.conf set "printing = bsd", or are you using lprng? I guess so, because of the -b in your lpr command, this case set printing = lprng Christian _______________________________________________________________________ In a world without walls and fences, who needs windows and gates? (SUN) From mharding at ecwebworks.com Mon Apr 16 12:08:14 2001 From: mharding at ecwebworks.com (Marc Harding) Date: Tue Dec 2 02:34:16 2003 Subject: Setting up a Samba 2.2 Print Server. Message-ID: <5.0.2.1.2.20010416075315.00a76488@mail.ecwebworks.com> On our current 2.0.7 Samba Server, I have 3 Remote Printers configured using lpd. They are working fine without copying drivers down (just doing local installs for drivers). Last night I tried rolling over to Samba 2.2 from yesterdays CVS. I was unable to get the Printers to work. Anyone existing could still print to the shared printers, however, I could not upload the drivers or add the printer to new machines. It would say the driver was not correct for the OS or it was not the correct printer. When I tried to administrate the printers, I could see the files copying to the print$ share, but then it says Unable to install Lexmark Optra T614, Windows NT 4.0 or 2000, Intel driver, Operation could not be completed. I have been testing Samba 2.2 at home and on a test box, where I have been able to administrate. I have tried to compare differences, with no luck. The main differences that I can think of off the top of my head is that my test printers have always been hanging off the LPT port, but the live environment are IP based printers. When I attempt the driver upload I am connected as root. Any ideas or help would be greatly appreciated. If any more information is required, please feel free to ask. Marc Harding mharding@ecwebworks.com From don_mccall at hp.com Mon Apr 16 13:16:55 2001 From: don_mccall at hp.com (MCCALL,DON (HP-USA,ex1)) Date: Tue Dec 2 02:34:16 2003 Subject: Samba as member server in Win2k domain Message-ID: <079FD72E42C9D311B854009027650E6F04050974@xatl02.atl.hp.com> Hi Dan, Yes, Samba can be a member server in a win2k native domain. "Native" as opposed to "Mixed Mode" essentially means that the W2k DC's will no longer share user database information with 'downlevel' DC's, ie NT 4.0 bdcs. Member servers do not avail themselves of sam database updates from the pdc anyway, so this does not affect Samba. You just have to make sure that ntlm1 authentication has NOT been disabled, and accessing the machine accounts has not been disabled for "pre- win2k machines" . Hope this helps. -----Original Message----- From: Dan Perik [mailto:dan_perik-work@ntm.org.pg] Sent: Monday, April 16, 2001 1:06 AM To: samba-ntdom@samba.org Subject: Re: Samba as member server in Win2k domain Martin Radford wrote: > > for their authentication. Unfortunately, the Win2000 domain > > is running Active Directory, not "legacy" WinNT mode. > > All Windows 2000 domains run Active Directory. I assume you mean it's > in "natie" mode, as opposed to "mixed" mode. > > > My question is, can Samba participate in a Win2000 domain as > > a member server? This is the deal, the 2 Win2000 servers > > Yes. A question in this. Does the Win2000 domain need to be in "mixed" mode in order for the Samba server to be able to be a member server in the domain? Or can the Samba server be a member server in a "native" Win2000 domain? I ask because our existing Win2000 domain is running in native mode, and to convert means a reinstall (of course, it's a M$ product). - Dan -- - Dan Perik Computer Services Department Lapilo Center New Tribes Mission - PNG From dbannon at tpg.com.au Mon Apr 16 13:43:27 2001 From: dbannon at tpg.com.au (David Bannon) Date: Tue Dec 2 02:34:16 2003 Subject: Uppercase machine names ?? In-Reply-To: <3AD73499.9D761A44@valinux.com> References: <001801c0c44d$8fbd7d20$3e01a8c0@markw2000> Message-ID: <3.0.6.32.20010416234327.007cd6c0@bioserve.latrobe.edu.au> Hi, I'm trying to find some time to update the FAQ and HowTo on Samba22 as a PDC. Now, someone has sent me a message suggesting that they can get everything working perfectly if thay use only uppercase machine names, ie in /etc/passwd and ~/smbpasswd and at the W2K joining stages. I know that Windows likes to uppercase such things but samba (usually) takes care of it. Has anyone else experienced this funny business ?? David ------------------------------------------------------------ David Bannon, phone mobile : 0418 525687 Private - Work - Email : dbannon@tpg.com.au D.Bannon@vpac.org http://www.vpac.org Phone : 9337 4210 9925 4733 ------------------------------------------------------------ .... Humpty Dumpty was pushed ! From peterl at update.uu.se Mon Apr 16 17:46:37 2001 From: peterl at update.uu.se (Peter Lundqvist) Date: Tue Dec 2 02:34:16 2003 Subject: Uppercase machine names ?? In-Reply-To: <3.0.6.32.20010416234327.007cd6c0@bioserve.latrobe.edu.au> Message-ID: > Hi, > > I'm trying to find some time to update the FAQ and HowTo on Samba22 as a > PDC. Now, someone has sent me a message suggesting that they can get > everything working perfectly if thay use only uppercase machine names, ie > in /etc/passwd and ~/smbpasswd and at the W2K joining stages. I know that > Windows likes to uppercase such things but samba (usually) takes care of it. > > Has anyone else experienced this funny business ?? Well, yes, but that was CVS-code before samba_2_2 was forked off. I'm currently running a setup with lowercase machine names. From txkjohn at hotmail.com Mon Apr 16 18:25:44 2001 From: txkjohn at hotmail.com (John Humphrey) Date: Tue Dec 2 02:34:16 2003 Subject: Account Database replication Message-ID: First of all... I'm very greatful for all the applicable info posted to this mailing list. Now to my quesiton. We've just begun to implement samba in our network. We have multiple locations connected via frame relay. I want to run only one 'domain'. I've configured my samba 2.0.7 as a PDC and it works great. I have one problem... Our frame relay circuits go down about once a month... If the other samba servers cannot communicate with the samba PDC, how will the users on the 'wrong' side of the broken link authenticate? In other words, can samba 2.0.7 be a BDC? If not, is there any other way to 'trick' samba into replicating its user account database with each of the remote samba servers? _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com From ctresco at economics.mit.edu Mon Apr 16 19:58:39 2001 From: ctresco at economics.mit.edu (Christopher Tresco) Date: Tue Dec 2 02:34:16 2003 Subject: /etc/passwd and smbpasswd Message-ID: <001901c0c6af$a1ee0140$b201a8c0@snpc.net> Is it necessary to have all users in the /etc/passwd file for them to be able to use samba or do you just need them to be there in order to use the smbpasswd utility? Basically, I am trying to get everything done via ldap and I don't want a bunch of users in /etc/passwd. I am working through the howto for smb and ldap and it seems awfully redundant to have users in both places. What would the point of having an ldap db full of samba users when they are also listed in /etc/passwd. May as well just use an smbpasswd file..... Thanks, Chris Tresco From awilliam at whitemice.org Mon Apr 16 23:23:57 2001 From: awilliam at whitemice.org (Adam Tauno Williams) Date: Tue Dec 2 02:34:16 2003 Subject: /etc/passwd and smbpasswd In-Reply-To: <001901c0c6af$a1ee0140$b201a8c0@snpc.net> References: <001901c0c6af$a1ee0140$b201a8c0@snpc.net> Message-ID: <20010416192357.269f0ac8.awilliam@whitemice.org> >Is it necessary to have all users in the /etc/passwd file for them to be >able to use samba or do you just need them to be there in order to use the >smbpasswd utility? >Basically, I am trying to get everything done via ldap and I don't want a >bunch of users in /etc/passwd. I am working through the howto for smb and >ldap and it seems awfully redundant to have users in both places. What >would the point of having an ldap db full of samba users when they are also >listed in /etc/passwd. May as well just use an smbpasswd file..... You do NOT need users listed in /etc/passwd, they simply have to be "resolvable". If you setup nss_ldap then Samba will work fine (with users in smbpasswd and LDAP, not passwd). Of course I'm assuming you are on a platform that supports NSS. See /etc/nsswitch.conf. Samba 2.2.0 does not support LDAP. From don_mccall at hp.com Thu Apr 12 16:53:28 2001 From: don_mccall at hp.com (MCCALL,DON (HP-USA,ex1)) Date: Tue Dec 2 02:34:16 2003 Subject: smbpasswd 2.0.7-3 matters (with smbpasswd & smb.conf...) Message-ID: <079FD72E42C9D311B854009027650E6F04050966@xatl02.atl.hp.com> Hello Damien, I think the problem MIGHT be your valid chars = .... You have mapped the characters ABCDEFGHI to abcdefghi in your valid chars = map... the routine that gets the entries from smbpasswd is running thru the 32byte password hash, and one of the things it does is to verify that each character is a HEX character; hex characters defined locally in the routine as "0123456789ABCDEF" Well, since ABCDEFGHI maps to abcdefghi, when it checks to see if a is a valid 'hexchar' it doesn't match (it's expecting A, not a) so you get the Malformed message... At least I think this is what's happening. Try removing the entries: 65:97 66:98 67:99 68:100 69:101 70:102 71:103 72:104 73:105 74:106 from your valid chars line in smb.conf and see if you don't get further... Hope this helps, Don ____________________________________________________________________________ __ -----Original Message----- From: Damien Persohn [mailto: <20010416192357.269f0ac8.awilliam@whitemice.org> Message-ID: <007501c0c6df$14502fe0$1701000a@rar> I am using the smb-HEAD release. Thanks for the input, that is exactly what I needed to hear. I am using RH 7.0 that does support nss_ldap. Thanks a ton, Chris ----- Original Message ----- From: "Adam Tauno Williams" To: Sent: Monday, April 16, 2001 7:23 PM Subject: Re: /etc/passwd and smbpasswd > >Is it necessary to have all users in the /etc/passwd file for them to be > >able to use samba or do you just need them to be there in order to use the > >smbpasswd utility? > >Basically, I am trying to get everything done via ldap and I don't want a > >bunch of users in /etc/passwd. I am working through the howto for smb and > >ldap and it seems awfully redundant to have users in both places. What > >would the point of having an ldap db full of samba users when they are also > >listed in /etc/passwd. May as well just use an smbpasswd file..... > > You do NOT need users listed in /etc/passwd, they simply have to be "resolvable". If you setup nss_ldap then Samba will work fine (with users in smbpasswd and LDAP, not passwd). Of course I'm assuming you are on a platform that supports NSS. See /etc/nsswitch.conf. Samba 2.2.0 does not support LDAP. > > > From dariush at forouher.de Tue Apr 17 07:03:55 2001 From: dariush at forouher.de (Dariush Forouher) Date: Tue Dec 2 02:34:16 2003 Subject: NT Remote Printer Installation doesn't work Message-ID: Hello! Adding a new printer on Samba 2.2.0alpha3 (CVS 04/13/01) with the Add Printer Wizard won't work. The Dialog quits after uploading the files with "This process couldn't finished. Access denied." (or similar) I've selected the "samba printer port" (it's the only one, is that ok?) and used different printers (Generic/Text only; HP DJ 850C; HD Deskjet and some others), it makes no sense. I've tried it as user root and as a printer admin. For printer driver name i used those of the printcap file. The driver upload works perfect, with windows 2k i can view and add drivers in the Server-features dialog. I can view them with # ./rpcclient eridiani -U root%root -c "enumdrivers" INFO: Debug class all level = 1 (pid 1288 from pid 1288) session setup ok Domain=[FOROUHER] OS=[Unix] Server=[Samba 2.2.0-alpha3] [Windows NT x86] Printer Driver Info 1: Driver Name: [Generic / Text Only] Printer Driver Info 1: Driver Name: [HP DeskJet 850C] But when I try to view the current list of Printers (it should be empty) I get a segfault: [log gzipped as attachment] When i try to add a printer with rpcclient, i get the following: ...[log gzipped as attachment]... result was NT_STATUS_ACCESS_VIOLATION The logoutput by the APW trial is to big (more than 700kb) for this mailing list. i'll send it by mail if someone needs it. is this a bug or have i done a mistake? regards Dariush Forouher ;/opt/samba-2.2.0/lib/smb.conf [global] log level = 1 max log size = 300000 interfaces = eth0 lo bind interfaces only = true status = yes domain logons = yes encrypt passwords = yes workgroup = forouher domain admin group = @admin @root printer admin = @admin root printing = bsd printcap name = /etc/printcap load printers = yes logon path = \\eridiani\profile\%U server string = Forouher Homeserver (%v CVS vom 13.4.01) logon script = %m\%U.bat logon drive = h: netbios name = eridiani guest account = ftp security = user os level = 65 wins support = yes [homes] browsable = no guest ok = no read only = no create mask = 0600 directory mask = 0700 locking = yes [netlogon] path = /samba/netlogon locking=no browseable=yes writable= yes guest ok = no [profile] comment = Windows User Profiles path = /samba/profiles browsable = yes writeable= yes guest ok = no create mask = 0755 directory mask = 0755 [work] comment = Gemeinsamgenutzte Dokumente path = /samba/work writeable= yes guest ok = no create mask = 0666 directory mask = 0777 [programme] comment = Servergespeicherte Programme path = /files/progs writeable= yes guest ok = no create mask = 0666 directory mask = 0777 [files] comment = Stuff path = /files/stuff writeable= yes guest ok = no create mask = 0655 directory mask = 0755 [www] comment = Stuff path = /var/www writeable= yes guest ok = no create mask = 0655 directory mask = 0755 [print$] path = /samba/printer guest ok = yes browseable = yes read only = no -------------- next part -------------- A non-text attachment was scrubbed... Name: email-att.gz Type: application/octet-stream Size: 6206 bytes Desc: logs Url : http://lists.samba.org/archive/samba-ntdom/attachments/20010417/4cd3ff08/email-att.obj From evelyn at das.com.tw Tue Apr 17 07:18:02 2001 From: evelyn at das.com.tw (Evelyn Huang) Date: Tue Dec 2 02:34:16 2003 Subject: Error message during printing from NT to Linux Message-ID: <3ADBEE2A.6DB33710@das.com.tw> Hi, Can anybody explain the following error message in the log file for NT for me? [2001/04/17 13:52:29, 0] smbd/nttrans. c: call_nt_transact_ioctl(2516) call_nt_transact_ioctl: Currently not implemented Also, I logged in NT as "administrator", and I added user "administrator" using "useradd" & "smbadduser" with setting up the same password. I once succeeded in printing from NT to Linux but then failed again for I don't know what reasons! The same error message, "File, directory name or disk label fault", pops up again. I wonder if there is any conflict between the UNIX & the SMB password on Linux though. I had the accounts for both "administrator" & "Administrator" existed on Linux. Then after I deleted "Administrator", I could print from NT to Linux although soon failed later. This seems bizzare to me... Evelyn Huang From gcarter at valinux.com Tue Apr 17 05:43:35 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:17 2003 Subject: Setting up a Samba 2.2 Print Server. In-Reply-To: <5.0.2.1.2.20010416075315.00a76488@mail.ecwebworks.com>; from mharding@ecwebworks.com on Mon, Apr 16, 2001 at 07:08:14 -0500 References: <5.0.2.1.2.20010416075315.00a76488@mail.ecwebworks.com> Message-ID: <20010417004335.A2978@pogo.su.valinux.com> On Mon, 16 Apr 2001 07:08:14 Marc Harding wrote: > > Unable to install Lexmark Optra T614, Windows NT 4.0 or > 2000, Intel driver, Operation could not be completed. What is the client? NT4 or 2000? Is this a PCL or PS driver? > > that my test printers have always been hanging off > the LPT port, but the live environment are IP based > printers. Does not make a difference.. > When I attempt the driver upload I am connected as root. ok. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From jboyer at drig.com Tue Apr 17 09:34:19 2001 From: jboyer at drig.com (j boyer) Date: Tue Dec 2 02:34:17 2003 Subject: Samba 2.2.0? and NT printing? Message-ID: <3ADC0E1B.DE49E656@drig.com> Hi, Two questions. Where is this Samba 2.2.0? I'm currently using 2.0.7 which comes shipped with Calderas edesktop2.4. I've got a HP laserjet 6P connected to the parallel port of my NT machine. I told NT that I wanted to share it. I used webmin to tell my linux box about the printer, and lied that it was a HP laserjet 6L. It seemed to find the printer ok, but when I try and print I get a page printed out saying 'unknown device'. Edesktop uses LPRng. What have I done wrong? Thanks. J. From marcus at big.univali.br Tue Apr 17 12:07:55 2001 From: marcus at big.univali.br (Marcus Grando) Date: Tue Dec 2 02:34:17 2003 Subject: Group Policies Message-ID: <5.0.2.1.1.20010417090116.00a961c0@big.univali.br> Hello again, I have some problems with the samba and the policies for group. Somebody that has this functioning could order smb.conf to me and the archive POL? Regards Marcus Grando From mharding at ecwebworks.com Tue Apr 17 13:27:04 2001 From: mharding at ecwebworks.com (Marc Harding) Date: Tue Dec 2 02:34:17 2003 Subject: Setting up a Samba 2.2 Print Server. In-Reply-To: <20010417004335.A2978@pogo.su.valinux.com> References: <5.0.2.1.2.20010416075315.00a76488@mail.ecwebworks.com> <5.0.2.1.2.20010416075315.00a76488@mail.ecwebworks.com> Message-ID: <5.0.2.1.2.20010417081736.00a76640@192.168.100.8> The problems occured from a Windows 2000 machine, which is the same machine from which I tested this on my home machine. The biggest problem I am facing right now is that I can not even browse to a printer share and just install the driver manually to a windows 2000 machine. That is when I receive the message saying that is it the wrong driver or OS. This is the same case for PCL and PS, and the same for two different printers. Another thing I noticed last time I tried starting clean, is that in the printer properties, there was no port defined, however on my test server I could see a port. I hope this information is useful. Marc Harding At 12:43 AM 4/17/2001 -0500, Gerald Carter wrote: >On Mon, 16 Apr 2001 07:08:14 Marc Harding wrote: > > > > Unable to install Lexmark Optra T614, Windows NT 4.0 or > > 2000, Intel driver, Operation could not be completed. > >What is the client? NT4 or 2000? Is this a PCL or >PS driver? > > > > > that my test printers have always been hanging off > > the LPT port, but the live environment are IP based > > printers. > >Does not make a difference.. > > > When I attempt the driver upload I am connected as root. > >ok. > > > > > > > > > >Cheers, jerry >---------------------------------------------------------------------- > /\ Gerald (Jerry) Carter Professional Services > \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com > http://www.samba.org/ SAMBA Team jerry@samba.org > http://www.plainjoe.org/ jerry@plainjoe.org > > "...a hundred billion castaways looking for a home." > - Sting "Message in a Bottle" ( 1979 ) From s354199 at student.uq.edu.au Tue Apr 17 13:41:13 2001 From: s354199 at student.uq.edu.au (Elliot Mackenzie) Date: Tue Dec 2 02:34:17 2003 Subject: How to allow a W2K machine join a domain with Samba 2.2alpha3 PDC In-Reply-To: <3ADB71CD.F2053B7A@gmx.de> Message-ID: You probably wanted to send this to the samba-ntdom newsgroup rather than to me directly, but here is my answer anyway. If you are having problems with the machine accounts, you may have to recreate the machine accounts - you should not have to reset people's passwords or muck with other accounts in any way. I then suggest that you go through and follow the steps in the PDC HOWTO a little more closely regarding the creation of machine accounts. However, with 400 users you probably have 300 machines and deleting 300 machine accounts would really be a pain in the a** :) My suggestion is that you first ensure that this *really is* your problem. I'll be honest, it probably isn't - most people generally have problems because they stuff up somewhere else in the config, or because they still have stray old versions of samba running around. If you are *sure* that your config is 100%, then I strongly suggest that you try that config on an isolated samba server and win2k client before mucking around with something that is likely to upset 400 people very quickly. Before replying to this ng, I also suggest you include the following information: - the *precise* error you are getting on the windows machine, and WHEN it happens (when you join the domain or when you log on for eg) - your smb.conf - or at least the interesting or weird bits of it - your smb/nmb log entries during the relevant transaction. Before making any rash decisions see what other people have to say about this in the ng because as it stands my experience with samba is still very limited compared to some of the gurus in here. M. -----Original Message----- From: root@mailserver1.hrz.tu-darmstadt.de [mailto:root@mailserver1.hrz.tu-darmstadt.de]On Behalf Of Lars Grobe Sent: Tuesday, 17 April 2001 8:27 AM To: Elliot Mackenzie Subject: Re: How to allow a W2K machine join a domain with Samba 2.2alpha3 PDC Hi! Elliot Mackenzie wrote: > The problems I was having when I was trying to set up alpha 3 for the first > time were because of a corrupt smbpasswd file - I started from scratch, > added user root, and all was well :) I also have problems with machine accounts... Does anybody have an idea what this "corrupt smbpasswd" really means? I have about 400 users with their encrypted passwords, and I can't start a new database... ;-) CU, Lars. From mdmontazer at confluencewatersports.com Tue Apr 17 14:14:03 2001 From: mdmontazer at confluencewatersports.com (Mark Montazer) Date: Tue Dec 2 02:34:17 2003 Subject: Interface Unknown: WAS [RE: problem rejoining domain] In-Reply-To: <3.0.6.32.20010331072233.00e73b10@10.0.2.1> Message-ID: <000d01c0c748$a8c15870$3600a8c0@confluencewatersports.com> Hello all, I'm now having problems rejoining the domain from a W2K Pro workstation. I removed the workstation from the domain because it wasn't executing the logon script properly, and now it will not rejoin the domain at all. Windows gives an 'Interface Unknown' error. I am getting the latest from CVS and will set my log level higher, but until then, has anybody seen this error before or know of a workaround? Thanks, Mark -----Original Message----- From: samba-ntdom-admin@us5.samba.org [mailto:samba-ntdom-admin@us5.samba.org]On Behalf Of Richard Sharpe Sent: Friday, March 30, 2001 5:23 PM To: Bruce Ferrell; samba-ntdom@us5.samba.org Subject: Re: problem rejoining domain At 09:41 AM 3/30/01 -0800, Bruce Ferrell wrote: >Oh do I have a good one! > >I have a user who like to test things. I got his Win2K workstation into >a 2.2alpha3 controlled domain by carefully following instructions. i.e. >setting up so that the samba server auto adds the machine account to the >linux password file and to smbpasswd. No traces of the workstation in >/etc/passwd or smbpasswd. root used to add the machine account to the >domein. Too cool and smooth. He wanted to see how it worked, so he >removed himself from the domain. Now I can't get him back in to save my >soul! I keep getting the following message: "The account used is a >computer account. Use your Global user account or local user account to >access this server." Remove the entry from /etc/smbpasswd ... >Thanks in advance, > >Bruce Ferrell Regards ------- Richard Sharpe, sharpe@ns.aus.com Samba (Team member, www.samba.org), Ethereal (Team member, www.ethereal.com) Contributing author, SAMS Teach Yourself Samba in 24 Hours Author, Special Edition, Using Samba From Martin.Kadlez at austrocontrol.at Tue Apr 17 14:38:26 2001 From: Martin.Kadlez at austrocontrol.at (Martin Kadlez) Date: Tue Dec 2 02:34:17 2003 Subject: unsubsrcibe References: <000501c0c2c6$cb2cadf0$0b01a8c0@markxp1> <018301c0c2c9$edb43840$330a0a0a@rutgersinsurance.com> Message-ID: <3ADC5562.BC63722D@austrocontrol.at> ok, i believe you... so, could anyone of you tell me the RIGHT way to unsubscribe? please... Adam Lang wrote: > I think the more appropriate question is "Why so many people at the moment > sending the unsubscribe request to the wrong email address"? > > I'm sure there are many people a day that unsubscribe... we just don't know > it because they did it using the correct address. > > Adam Lang > Systems Engineer > Rutgers Casualty Insurance Company > http://www.rutgersinsurance.com > ----- Original Message ----- > From: "Mark" > To: > Sent: Wednesday, April 11, 2001 4:32 PM > Subject: Re: unsubsrcibe > > > why so many people unsubscribing at the moment? > > ----- Original Message ----- > > From: "E H" > > To: > > Sent: Wednesday, April 11, 2001 8:51 PM > > Subject: unsubsrcibe > > > > > > > > > > _________________________________________________________________ > > > Get your FREE download of MSN Explorer at http://explorer.msn.com > > > > > > > > From idra at samba.org Tue Apr 17 14:51:03 2001 From: idra at samba.org (Simo Sorce) Date: Tue Dec 2 02:34:17 2003 Subject: unsubsrcibe In-Reply-To: <3ADC5562.BC63722D@austrocontrol.at>; from Martin.Kadlez@austrocontrol.at on Tue, Apr 17, 2001 at 04:38:26PM +0200 References: <000501c0c2c6$cb2cadf0$0b01a8c0@markxp1> <018301c0c2c9$edb43840$330a0a0a@rutgersinsurance.com> <3ADC5562.BC63722D@austrocontrol.at> Message-ID: <20010417075103.A18072@va.samba.org> go there and click on your e-mail address http://lists.samba.org/roster/samba-ntdom On Tue, Apr 17, 2001 at 04:38:26PM +0200, Martin Kadlez wrote: > ok, i believe you... > > so, could anyone of you tell me the RIGHT way to unsubscribe? > > please... > > Adam Lang wrote: > > > I think the more appropriate question is "Why so many people at the moment > > sending the unsubscribe request to the wrong email address"? > > > > I'm sure there are many people a day that unsubscribe... we just don't know > > it because they did it using the correct address. > > > > Adam Lang > > Systems Engineer > > Rutgers Casualty Insurance Company > > http://www.rutgersinsurance.com > > ----- Original Message ----- > > From: "Mark" > > To: > > Sent: Wednesday, April 11, 2001 4:32 PM > > Subject: Re: unsubsrcibe > > > > > why so many people unsubscribing at the moment? > > > ----- Original Message ----- > > > From: "E H" > > > To: > > > Sent: Wednesday, April 11, 2001 8:51 PM > > > Subject: unsubsrcibe > > > > > > > > > > > > > > _________________________________________________________________ > > > > Get your FREE download of MSN Explorer at http://explorer.msn.com > > > > > > > > > > > > > -- Simo Sorce ------------------------------ Unix IS user friendly, it is just selective about who his friends are. From mharding at ecwebworks.com Tue Apr 17 15:16:29 2001 From: mharding at ecwebworks.com (Marc Harding) Date: Tue Dec 2 02:34:17 2003 Subject: Fwd: Re: Setting up a Samba 2.2 Print Server. Message-ID: <5.0.2.1.2.20010417111226.00a9ec80@192.168.100.8> It appears it was a problem with the Lexmark driver. After changing the printer driver name with rpcclient, I was able to configure a different printer (HP 4500). Also by using this method I am at least able to change the printer driver name for the printer that would not work (Lexmark T614, PS and PCL), and then from a client machine I can install the driver manually. Thanks for all input received, Marc Harding >Date: Tue, 17 Apr 2001 09:27:04 -0400 >To: Gerald Carter , samba-ntdom@lists.samba.org >From: Marc Harding >Subject: Re: Setting up a Samba 2.2 Print Server. > >The problems occured from a Windows 2000 machine, which is the same >machine from which I tested this on my home machine. The biggest problem >I am facing right now is that I can not even browse to a printer share and >just install the driver manually to a windows 2000 machine. That is when >I receive the message saying that is it the wrong driver or OS. This is >the same case for PCL and PS, and the same for two different printers. > >Another thing I noticed last time I tried starting clean, is that in the >printer properties, there was no port defined, however on my test server I >could see a port. > >I hope this information is useful. > >Marc Harding > > > >At 12:43 AM 4/17/2001 -0500, Gerald Carter wrote: >>On Mon, 16 Apr 2001 07:08:14 Marc Harding wrote: >> > >> > Unable to install Lexmark Optra T614, Windows NT 4.0 or >> > 2000, Intel driver, Operation could not be completed. >> >>What is the client? NT4 or 2000? Is this a PCL or >>PS driver? >> > >> >> > that my test printers have always been hanging off >> > the LPT port, but the live environment are IP based >> > printers. >> >>Does not make a difference.. >> >> > When I attempt the driver upload I am connected as root. >> >>ok. >> >> >> >> >> >> >> >> >> >>Cheers, jerry >>---------------------------------------------------------------------- >> /\ Gerald (Jerry) Carter Professional Services >> \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com >> http://www.samba.org/ SAMBA Team jerry@samba.org >> http://www.plainjoe.org/ jerry@plainjoe.org >> >> "...a hundred billion castaways looking for a home." >> - Sting "Message in a Bottle" ( 1979 ) From aalang at rutgersinsurance.com Tue Apr 17 16:03:08 2001 From: aalang at rutgersinsurance.com (Adam Lang) Date: Tue Dec 2 02:34:17 2003 Subject: unsubsrcibe References: <000501c0c2c6$cb2cadf0$0b01a8c0@markxp1> <018301c0c2c9$edb43840$330a0a0a@rutgersinsurance.com> <3ADC5562.BC63722D@austrocontrol.at> Message-ID: <00f501c0c757$e5641ec0$330a0a0a@rutgersinsurance.com> Yes, the instructions were in the initial email you received when you first subscribed. As a general rule if you subscribe to a mailing list, save the document. ALL instruction codes are usually placed in it. I also apologize for any "tone" I may have in the emails dealing with this topic. I subscribe to several lists from Samba to AS/400 to Visual Basic to the Oakland Raiders. This is a FAR to common occurrence on all lists and it gets very aggravating after a while. Here is the appropriate instructions pasted directly from the document in mention: "If you ever want to unsubscribe or change your options (eg, switch to or from digest mode, change your password, etc.), visit your subscription page at: http://lists.samba.org/options/samba-ntdom/aalang%40rutgersinsurance.com " Replace my email address with yours. Adam Lang Systems Engineer Rutgers Casualty Insurance Company http://www.rutgersinsurance.com ----- Original Message ----- From: "Martin Kadlez" To: Sent: Tuesday, April 17, 2001 10:38 AM Subject: Re: unsubsrcibe > ok, i believe you... > > so, could anyone of you tell me the RIGHT way to unsubscribe? > > please... > > Adam Lang wrote: > > > I think the more appropriate question is "Why so many people at the moment > > sending the unsubscribe request to the wrong email address"? > > > > I'm sure there are many people a day that unsubscribe... we just don't know > > it because they did it using the correct address. > > > > Adam Lang > > Systems Engineer > > Rutgers Casualty Insurance Company > > http://www.rutgersinsurance.com > > ----- Original Message ----- > > From: "Mark" > > To: > > Sent: Wednesday, April 11, 2001 4:32 PM > > Subject: Re: unsubsrcibe > > > > > why so many people unsubscribing at the moment? > > > ----- Original Message ----- > > > From: "E H" > > > To: > > > Sent: Wednesday, April 11, 2001 8:51 PM > > > Subject: unsubsrcibe > > > > > > > > > > > > > > _________________________________________________________________ > > > > Get your FREE download of MSN Explorer at http://explorer.msn.com > > > > > > > > > > > > From idra at samba.org Tue Apr 17 16:34:11 2001 From: idra at samba.org (Simo Sorce) Date: Tue Dec 2 02:34:17 2003 Subject: unsubsrcibe In-Reply-To: <00f501c0c757$e5641ec0$330a0a0a@rutgersinsurance.com>; from aalang@rutgersinsurance.com on Tue, Apr 17, 2001 at 12:03:08PM -0400 References: <000501c0c2c6$cb2cadf0$0b01a8c0@markxp1> <018301c0c2c9$edb43840$330a0a0a@rutgersinsurance.com> <3ADC5562.BC63722D@austrocontrol.at> <00f501c0c757$e5641ec0$330a0a0a@rutgersinsurance.com> Message-ID: <20010417093411.C18072@va.samba.org> Instrunctions can be found also in mails headers of any message sent through samba lists. Just to remind it. On Tue, Apr 17, 2001 at 12:03:08PM -0400, Adam Lang wrote: > Yes, the instructions were in the initial email you received when you first > subscribed. As a general rule if you subscribe to a mailing list, save the > document. ALL instruction codes are usually placed in it. > > I also apologize for any "tone" I may have in the emails dealing with this > topic. I subscribe to several lists from Samba to AS/400 to Visual Basic to > the Oakland Raiders. This is a FAR to common occurrence on all lists and it > gets very aggravating after a while. > > Here is the appropriate instructions pasted directly from the document in > mention: > > "If you ever want to unsubscribe or change your options (eg, switch to > or from digest mode, change your password, etc.), visit your > subscription page at: > > http://lists.samba.org/options/samba-ntdom/aalang%40rutgersinsurance.com > " > > Replace my email address with yours. > > Adam Lang > Systems Engineer > Rutgers Casualty Insurance Company > http://www.rutgersinsurance.com > ----- Original Message ----- > From: "Martin Kadlez" > To: > Sent: Tuesday, April 17, 2001 10:38 AM > Subject: Re: unsubsrcibe > > > > ok, i believe you... > > > > so, could anyone of you tell me the RIGHT way to unsubscribe? > > > > please... > > > > Adam Lang wrote: > > > > > I think the more appropriate question is "Why so many people at the > moment > > > sending the unsubscribe request to the wrong email address"? > > > > > > I'm sure there are many people a day that unsubscribe... we just don't > know > > > it because they did it using the correct address. > > > > > > Adam Lang > > > Systems Engineer > > > Rutgers Casualty Insurance Company > > > http://www.rutgersinsurance.com > > > ----- Original Message ----- > > > From: "Mark" > > > To: > > > Sent: Wednesday, April 11, 2001 4:32 PM > > > Subject: Re: unsubsrcibe > > > > > > > why so many people unsubscribing at the moment? > > > > ----- Original Message ----- > > > > From: "E H" > > > > To: > > > > Sent: Wednesday, April 11, 2001 8:51 PM > > > > Subject: unsubsrcibe > > > > > > > > > > > > > > > > > > _________________________________________________________________ > > > > > Get your FREE download of MSN Explorer at http://explorer.msn.com > > > > > > > > > > > > > > > > > > -- Simo Sorce ------------------------------ Unix IS user friendly, it is just selective about who his friends are. From mdmontazer at confluencewatersports.com Tue Apr 17 17:52:17 2001 From: mdmontazer at confluencewatersports.com (Mark Montazer) Date: Tue Dec 2 02:34:17 2003 Subject: Interface Unknown: WAS [RE: problem rejoining domain] In-Reply-To: <000d01c0c748$a8c15870$3600a8c0@confluencewatersports.com> Message-ID: <000101c0c767$253d7f00$3600a8c0@confluencewatersports.com> I figured this one out on my own. It appears the workstation had the Net Logon service disabled. After setting it to automatic and retrying, it worked immediately. Mark -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Mark Montazer Sent: Tuesday, April 17, 2001 10:14 AM To: SAMBA-NTDOM (E-mail) Subject: Interface Unknown: WAS [RE: problem rejoining domain] Hello all, I'm now having problems rejoining the domain from a W2K Pro workstation. I removed the workstation from the domain because it wasn't executing the logon script properly, and now it will not rejoin the domain at all. Windows gives an 'Interface Unknown' error. I am getting the latest from CVS and will set my log level higher, but until then, has anybody seen this error before or know of a workaround? Thanks, Mark -----Original Message----- From: samba-ntdom-admin@us5.samba.org [mailto:samba-ntdom-admin@us5.samba.org]On Behalf Of Richard Sharpe Sent: Friday, March 30, 2001 5:23 PM To: Bruce Ferrell; samba-ntdom@us5.samba.org Subject: Re: problem rejoining domain At 09:41 AM 3/30/01 -0800, Bruce Ferrell wrote: >Oh do I have a good one! > >I have a user who like to test things. I got his Win2K workstation into >a 2.2alpha3 controlled domain by carefully following instructions. i.e. >setting up so that the samba server auto adds the machine account to the >linux password file and to smbpasswd. No traces of the workstation in >/etc/passwd or smbpasswd. root used to add the machine account to the >domein. Too cool and smooth. He wanted to see how it worked, so he >removed himself from the domain. Now I can't get him back in to save my >soul! I keep getting the following message: "The account used is a >computer account. Use your Global user account or local user account to >access this server." Remove the entry from /etc/smbpasswd ... >Thanks in advance, > >Bruce Ferrell Regards ------- Richard Sharpe, sharpe@ns.aus.com Samba (Team member, www.samba.org), Ethereal (Team member, www.ethereal.com) Contributing author, SAMS Teach Yourself Samba in 24 Hours Author, Special Edition, Using Samba From bferrell at microdisplay.com Tue Apr 17 17:36:13 2001 From: bferrell at microdisplay.com (Bruce Ferrell) Date: Tue Dec 2 02:34:17 2003 Subject: weird error message Message-ID: <3ADC7F0D.72E50744@microdisplay.com> Anybody know what this message means? ./nmblookup -B KAKOI '*' Warning: inconsistant interface xxx.xxx.xxx.xxx Added interface ip=xxx.xxx.xxx.xxx bcast=0.0.0.0 nmask=97.0.0.0 Sending queries to xxx.xxx.xxx.xxx Got a positive name query response from xxx.xxx.xxx.xxx ( xxx.xxx.xxx.xxx ) xxx.xxx.xxx.xxx *<00> The broadcast address should be xxx.xxx.xxx.255 and the net mask should be 255.255.255.128 testparm shows no errors. From jbenedet at unm.edu Tue Apr 17 17:22:57 2001 From: jbenedet at unm.edu (John Benedetto) Date: Tue Dec 2 02:34:17 2003 Subject: unsubsrcibe In-Reply-To: <20010417093411.C18072@va.samba.org> Message-ID: <3959066866.987506577@bldg87-0053.unm.edu> --On Tuesday, April 17, 2001 9:34 AM -0700 Simo Sorce wrote: > Instrunctions can be found also in mails headers of any message sent > through samba lists. Just to remind it. My mail reader (well, both of them, actually: Unix based PINE, and PC based Mulberry) hide the mail headers, so I had to display them to see that info... but... That's great! I did not know that. Thank you. - John Benedetto From aalang at rutgersinsurance.com Tue Apr 17 18:09:51 2001 From: aalang at rutgersinsurance.com (Adam Lang) Date: Tue Dec 2 02:34:17 2003 Subject: unsubsrcibe References: <3959066866.987506577@bldg87-0053.unm.edu> Message-ID: <01ea01c0c769$98d715a0$330a0a0a@rutgersinsurance.com> Oh wow... that is sort of neat. I use outlook express andI had to go into the message source to see it... Very neat, just not very obvious. :) Adam Lang Systems Engineer Rutgers Casualty Insurance Company http://www.rutgersinsurance.com ----- Original Message ----- From: "John Benedetto" To: Sent: Tuesday, April 17, 2001 1:22 PM Subject: Re: unsubsrcibe > --On Tuesday, April 17, 2001 9:34 AM -0700 Simo Sorce > wrote: > > > Instrunctions can be found also in mails headers of any message sent > > through samba lists. Just to remind it. > > My mail reader (well, both of them, actually: Unix based PINE, and PC > based Mulberry) hide the mail headers, so I had to display them to see that > info... but... > > That's great! I did not know that. Thank you. > > - John Benedetto From luk.vermeylen at pandora.be Tue Apr 17 18:17:42 2001 From: luk.vermeylen at pandora.be (Luk Vermeylen) Date: Tue Dec 2 02:34:17 2003 Subject: linux as NT client Message-ID: <01041720174200.01675@luk> Does anyone knows howto login with a linux box on an NT domain? -- Luk Vermeylen Putsebaan 84 2040 Antwerpen 4 +32/(0)3 2950012 From gree3776 at rowan.edu Tue Apr 17 18:34:33 2001 From: gree3776 at rowan.edu (Samuel Greenfeld) Date: Tue Dec 2 02:34:17 2003 Subject: linux as NT client Message-ID: You just read my mind; I was looking for the same thing. If you use a PAM-based system, you can use the pam_smb module; do a search for it on Freshmeat.net. However, I am looking for the nss_smb module for systems that use NSS for password authentication instead of PAM. Does anyone know where this module is located? --- SJG >>> Luk Vermeylen 04/17/01 02:17PM >>> Does anyone knows howto login with a linux box on an NT domain? -- Luk Vermeylen Putsebaan 84 2040 Antwerpen 4 +32/(0)3 2950012 From idra at samba.org Tue Apr 17 18:41:49 2001 From: idra at samba.org (Simo Sorce) Date: Tue Dec 2 02:34:17 2003 Subject: unsubsrcibe In-Reply-To: <3959066866.987506577@bldg87-0053.unm.edu>; from jbenedet@unm.edu on Tue, Apr 17, 2001 at 11:22:57AM -0600 References: <20010417093411.C18072@va.samba.org> <3959066866.987506577@bldg87-0053.unm.edu> Message-ID: <20010417114149.A32055@va.samba.org> If you have a recent version of pine you should see this line at the end of any message: [ Note: This message contains email list management information ] if you press enter when the message is highlithed (going down with cursor to the end of cursor) will popup a menu with Mail List Commands there is also the Unsubscribe command. On Tue, Apr 17, 2001 at 11:22:57AM -0600, John Benedetto wrote: > --On Tuesday, April 17, 2001 9:34 AM -0700 Simo Sorce > wrote: > > > Instrunctions can be found also in mails headers of any message sent > > through samba lists. Just to remind it. > > My mail reader (well, both of them, actually: Unix based PINE, and PC > based Mulberry) hide the mail headers, so I had to display them to see that > info... but... > > That's great! I did not know that. Thank you. > > - John Benedetto > -- Simo Sorce ------------------------------ Unix IS user friendly, it is just selective about who his friends are. From smerrill at svfc.org Tue Apr 17 19:12:25 2001 From: smerrill at svfc.org (Scott Merrill) Date: Tue Dec 2 02:34:17 2003 Subject: smbpasswd -d Message-ID: <002601c0c772$57929fc0$4e0a0a0a@svfc.org> Hello all! I'm running Samba 2.2.0-alpha3 on a Red Hat Linux 6.2 machine. I'm extremely pleased with it, and am eagerly awaiting the official 2.2 release. Today, though, I stumbled onto a bit of a problem. I've got a few temporary and external vendor user accounts that I want to disable, since they're not needed right now (but will be needed in the future, so I don't want to delete them). ---begin--- [root@svclx001 /root]# smbpasswd -d temp_icss Disabled user temp_icss. [root@svclx001 /root]# cat /etc/smbpasswd |grep temp_icss temp_icss:529:44EFCE164AB921CAAAD3B435B51404EE:32ED87BDB5FDC5E9CBA8854737681 8D4:[U ]:LCT-3AA65A61 ---end--- According to the smbpasswd man page, when root executes 'smbpasswd -d ', it should insert a "D" into the status field of the smbpasswd file. As you can see, no such "D" is being inserted! Additionally: ---begin--- [root@svclx001 /root]# smbclient //svclx001/data -Utemp_icss%123456 added interface ip=10.10.1.1 bcast=10.10.255.255 nmask=255.255.0.0 Got a positive name query response from 10.10.1.1 ( 10.10.1.1 ) Domain=[SVFC] OS=[Unix] Server=[Samba 2.2.0-alpha3] smb: \> ---end--- The temp_icss user is not being denied access. I don't see anything in my log files - but that may be because I'm logging at the default level. I suppose I could increase log level to 10. Has anyone experienced anything like this? Thanks, Scott Below, please find my /etc/smb.conf file: ---begin--- [global] workgroup = SVFC server string = Main St. Server 001 hosts allow = 10.10. 10.20. 127. printcap name = /etc/printcap load printers = yes printing = bsd log file = /var/log/samba/log.%m # log level = 10 max log size = 50 security = user encrypt passwords = yes smb passwd file = /etc/smbpasswd unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *New*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* # add user script = /usr/sbin/adduser -g server -d /dev/null -s /bin/false -n -M %m$ domain admin group = @admins domain admin users = root smerrill mpriess svfc_admin socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192 remote announce = 10.20.1.1 local master = yes os level = 65 domain master = yes preferred master = yes domain logons = yes logon script = svfc.bat logon home = \\%G\%U\.profile name resolve order = wins lmhosts bcast wins support = yes wins proxy = yes dns proxy = yes preserve case = yes short preserve case = yes status = yes share modes = no #============================ Share Definitions ============================== [homes] comment = Home Directories browseable = no writable = yes hide dot files = yes [netlogon] comment = Network Logon Service path = /home/netlogon guest ok = no writable = no write list = svfc_admin # force user = root # force group = samba [Profiles] path = /%G/%U/.profile browseable = no guest ok = yes [printers] comment = All Printers path = /var/spool/samba browseable = no # Set public = yes to allow user 'guest account' to print guest ok = no writable = no printable = yes [apps] comment = SVFC Applications path = /samba/apps public = no writable = no printable = no create mask = 0666 directory mask = 0775 # force group = samba # force user = samba hide dot files = yes [data] comment = SVFC Data path = /samba/data public = no writable = yes printable = no create mask = 0666 directory mask = 0775 force group = users # force user = samba hide dot files = yes [public] comment = Public Stuff path = /samba/public public = no writable = yes printable = no create mask = 0666 directory mask = 0775 # force user = users force group = users hide dot files = yes [groups] comment = Group Shared Data path = /samba/groups public = no writable = yes printable = no create mask = 0666 directory mask = 0775 force group = users # force user = patches hide dot files = yes [norton] comment = Norton Antivirus updates path = /samba/data/norton/update public = yes writable = no printable = no guest ok = yes hide dot files = yes From pgoetz at math.utexas.edu Tue Apr 17 19:17:38 2001 From: pgoetz at math.utexas.edu (Patrick Goetz) Date: Tue Dec 2 02:34:17 2003 Subject: [printers], /etc/printcap, and network printer names Message-ID: Hi - I'm using Samba 2.2alpha3 on a Debian linux machine. I'm not sure if this should be regarded as a bug (perhaps it's a configuration option), but when I go to Network Neighborhood on a client machine and list the printers available on the Samba server, the name listed is the LAST name given in /etc/printcap. For example, my /etc/printcap contains the following listing: lw8a|biglab|lw8a-s|biglab-s:\ :mx#0:\ :rm=joe:rp=lw8a:lp=:\ :ty=HP Laserjet 5M printer: Duplex mode\ :note=Big lab:\ :sd=/var/spool/printers/lw8a:\ :lo=/var/spool/printers/lw8a/lock: This printer shows up in the network neighborhood as "biglab-s". Seems like the default behavior should be to use the first name in the list. Here are the relevant parts of my smb.conf file, just in case this matters: [global] workgroup = UTMATH wins support = yes security = user status = no encrypt passwords = yes # Printing printing = lprng print command = /usr/bin/lpr -P%p %s printcap file = /etc/printcap [printers] printable = true guest ok = false From fred at arkansaswebs.com Tue Apr 17 20:18:15 2001 From: fred at arkansaswebs.com (Fred Jackson) Date: Tue Dec 2 02:34:17 2003 Subject: am I missing something. Message-ID: <003f01c0c77b$8a1bb3b0$9a8ea1d0@bits> Hi everyone, ok, I'm using a CVS download from about a week ago. here's what I'd like to do: set up samba as a server for an office to provide shares accessable by win98 clients. I heve done as much reading as I can but I am unable to answer a few questions. Can samba be a security provider? win 98 won't display the 'username' box on a login for a network resource unless it is set to 'user level' access control, which requires an NT box? or can samba do this? so far when I attempt to switch to user level security on one of the 98 boxes, it complains that 'security provider not found' or some such. so I gave up on using samba as a PDC. if i then reconfigure the samba machine for user level access, and depend on win98 to use the network logon name provided at startup, I then get messages in the log about the user being disabled? I'm obviously confused, I use samba every day at home, but with a win2k box, not 98. What am I missing? Thanks Fred From jeremy at valinux.com Tue Apr 17 19:02:41 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:17 2003 Subject: Samba 2.2.0 released ! Message-ID: <3ADC9351.AE4F387F@valinux.com> The Samba Team is pleased to announce a new major release of Samba, Samba 2.2.0. Samba 2.2.0 is available in source form from samba.org and all of our mirror sites. Binary packages will be available shortly for many popular platforms. Please check the main Web site or email announcements for details. If you have problems, or think you have found a bug please email a report to : samba@samba.org The WHATSNEW.txt file follows. As always, any bugs are our responsibility, Regards, The Samba Team. ---------------------------------------------------------------------- WHATS NEW IN Samba 2.2.0 ======================== This is the official Samba 2.2.0 release. This version of Samba provides the following new features and enhancements. Integration between Windows oplocks and NFS file opens (IRIX and Linux 2.4 kernel only). This gives complete data and locking integrity between Windows and UNIX file access to the same data files. Ability to act as an authentication source for Windows 2000 clients as well as for NT4.x clients. Integration with the winbind daemon that provides a single sign on facility for UNIX servers in Windows 2000/NT4 networks driven by a Windows 2000/NT4 PDC. winbind is not included in this release, it currently must be obtained separately. We are committed to including winbind in a future Samba 2.2.x release. Support for native Windows 2000/NT4 printing RPCs. This includes support for automatic printer driver download. Support for server supported Access Control Lists (ACLs). This release contains support for the following filesystems: Solaris 2.6+ SGI Irix Linux Kernel with ACL patch from http://acl.bestbits.at Linux Kernel with XFS ACL support. Caldera/SCO UnixWare IBM AIX FreeBSD (with external patch) Other platforms will be supported as resources are available to test and implement the encessary modules. If you are interested in writing the support for a particular ACL filesystem, please join the samba-technical mailing list and coordinate your efforts. On PAM (Pluggable Authentication Module) based systems - better debugging messages and encrypted password users now have access control verified via PAM - Note: Authentication still uses the encrypted password database. Rewritten internal locking semantics for more robustness. This release supports full 64 bit locking semantics on all (even 32 bit) platforms. SMB locks are mapped onto POSIX locks (32 bit or 64 bit) as the underlying system allows. Conversion of various internal flat data structures to use database records for increased performance and flexibility. Support for acting as a MS-DFS (Distributed File System) server. Support for manipulating Samba shares using Windows client tools (server manager). Per share security can be set using these tools and Samba will obey the access restrictions applied. Samba profiling support (see below). Compile time option for enabling a (Virtual file system) VFS layer to allow non-disk resources to be exported as Windows filesystems (such as databases etc.). The documentation in this release has been updated and converted from Yodl to DocBook 4.1. There are many new parameters since 2.0.7 and some defaults have changed. Profiling support. ------------------ Support for collection of profile information. A shared memory area has been created which contains counters for the number of calls to and the amount of time spent in various system calls and smb transactions. See the file profile.h for a complete listing of the information collected. Sample code for a samba pmda (collection agent for Performance Co-Pilot) has been included in the pcp directory. To enable the profile data collection code in samba, you must compile samba with profile support (run configure with the --with-profile option). On startup, collection of data is disabled. To begin collecting data use the smbcontrol program to turn on profiling (see the smbcontrol man page). Profile information collection can be enabled for all smbd processes or one or more selected processes. The profiling data collected is the aggragate for all processes that have profiling enabled. With samba compiled for profile data collection, you may see a very slight degradation in performance even with profiling collection turned off. On initial tests with NetBench on an SGI Origin 200 server, this degradation was not measureable with profile collection off compared to no profile collection compiled into samba. With count profile collection enabled on all clients, the degradation was less than 2%. With full profile collection enabled on all clients, the degradation was about 8.5%. ===================================================================== If you think you have found a bug please email a report to : samba@samba.org As always, all bugs are our responsibility. Regards, The Samba Team. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From bferrell at microdisplay.com Tue Apr 17 21:21:33 2001 From: bferrell at microdisplay.com (Bruce Ferrell) Date: Tue Dec 2 02:34:17 2003 Subject: Samba 2.2.0 released ! References: <3ADC9351.AE4F387F@valinux.com> Message-ID: <3ADCB3DD.5F8052DA@microdisplay.com> So... Are you actually gonna allow us to download it? -- Forbidden You don't have permission to access /samba/ftp/samba-2.2.0.tar.gz on this server. Apache/1.3.9 Server at va.samba.org Port 80 :-) :-) :-) :-) :-) :-) :-) :-) :-) :-) :-) :-) :-) :-) :-) :-) :-) Jeremy Allison wrote: > The Samba Team is pleased to announce a new major release of Samba, > Samba 2.2.0. > > Samba 2.2.0 is available in source form from > samba.org and all of our mirror sites. > > Binary packages will be available shortly for many popular platforms. > Please check the main Web site or email announcements for details. > > If you have problems, or think you have found a bug please email > a report to : > > samba@samba.org > > The WHATSNEW.txt file follows. > > As always, any bugs are our responsibility, > > Regards, > > The Samba Team. > > ---------------------------------------------------------------------- > WHATS NEW IN Samba 2.2.0 > ======================== > > This is the official Samba 2.2.0 release. This version of Samba provides > the following new features and enhancements. > > Integration between Windows oplocks and NFS file opens (IRIX and Linux > 2.4 kernel only). This gives complete data and locking integrity between > Windows and UNIX file access to the same data files. > > Ability to act as an authentication source for Windows 2000 clients as > well as for NT4.x clients. > > Integration with the winbind daemon that provides a single > sign on facility for UNIX servers in Windows 2000/NT4 networks > driven by a Windows 2000/NT4 PDC. winbind is not included in > this release, it currently must be obtained separately. We are > committed to including winbind in a future Samba 2.2.x release. > > Support for native Windows 2000/NT4 printing RPCs. This includes > support for automatic printer driver download. > > Support for server supported Access Control Lists (ACLs). > This release contains support for the following filesystems: > > Solaris 2.6+ > SGI Irix > Linux Kernel with ACL patch from http://acl.bestbits.at > Linux Kernel with XFS ACL support. > Caldera/SCO UnixWare > IBM AIX > FreeBSD (with external patch) > > Other platforms will be supported as resources are > available to test and implement the encessary modules. If > you are interested in writing the support for a particular > ACL filesystem, please join the samba-technical mailing > list and coordinate your efforts. > > On PAM (Pluggable Authentication Module) based systems - better debugging > messages and encrypted password users now have access control verified via > PAM - Note: Authentication still uses the encrypted password database. > > Rewritten internal locking semantics for more robustness. > This release supports full 64 bit locking semantics on all > (even 32 bit) platforms. SMB locks are mapped onto POSIX > locks (32 bit or 64 bit) as the underlying system allows. > > Conversion of various internal flat data structures to use > database records for increased performance and > flexibility. > > Support for acting as a MS-DFS (Distributed File System) server. > > Support for manipulating Samba shares using Windows client tools > (server manager). Per share security can be set using these tools > and Samba will obey the access restrictions applied. > > Samba profiling support (see below). > > Compile time option for enabling a (Virtual file system) VFS layer > to allow non-disk resources to be exported as Windows filesystems > (such as databases etc.). > > The documentation in this release has been updated and converted > from Yodl to DocBook 4.1. There are many new parameters since 2.0.7 > and some defaults have changed. > > Profiling support. > ------------------ > Support for collection of profile information. A shared > memory area has been created which contains counters for > the number of calls to and the amount of time spent in > various system calls and smb transactions. See the file > profile.h for a complete listing of the information > collected. Sample code for a samba pmda (collection agent > for Performance Co-Pilot) has been included in the pcp > directory. > > To enable the profile data collection code in samba, you > must compile samba with profile support (run configure with > the --with-profile option). On startup, collection of data > is disabled. To begin collecting data use the smbcontrol > program to turn on profiling (see the smbcontrol man page). > Profile information collection can be enabled for all smbd > processes or one or more selected processes. The profiling > data collected is the aggragate for all processes that have > profiling enabled. > > With samba compiled for profile data collection, you may see > a very slight degradation in performance even with profiling > collection turned off. On initial tests with NetBench on an > SGI Origin 200 server, this degradation was not measureable > with profile collection off compared to no profile collection > compiled into samba. > > With count profile collection enabled on all clients, the > degradation was less than 2%. With full profile collection > enabled on all clients, the degradation was about 8.5%. > > ===================================================================== > > If you think you have found a bug please email a report to : > > samba@samba.org > > As always, all bugs are our responsibility. > > Regards, > > The Samba Team. > > -- > -------------------------------------------------------- > Buying an operating system without source is like buying > a self-assembly Space Shuttle with no instructions. > -------------------------------------------------------- From dwcjr at inethouston.net Tue Apr 17 21:36:33 2001 From: dwcjr at inethouston.net (David W. Chapman Jr.) Date: Tue Dec 2 02:34:17 2003 Subject: Samba 2.2.0 released ! References: <3ADC9351.AE4F387F@valinux.com> <3ADCB3DD.5F8052DA@microdisplay.com> Message-ID: <08d601c0c786$7cb29f80$931576d8@inethouston.net> ftp://ftp.samba.org/pub/samba/samba-2.2.0.tar.gz that link worked for me. ----- Original Message ----- From: "Bruce Ferrell" To: "Jeremy Allison" Cc: ; "Samba technical" ; "Samba NTDOM" Sent: Tuesday, April 17, 2001 4:21 PM Subject: Re: Samba 2.2.0 released ! > So... Are you actually gonna allow us to download it? -- > > > > Forbidden > > You don't have permission to access /samba/ftp/samba-2.2.0.tar.gz on this > server. > > > Apache/1.3.9 Server at va.samba.org Port 80 > > > :-) :-) :-) :-) :-) :-) :-) :-) :-) :-) :-) :-) :-) :-) :-) :-) :-) > > > > Jeremy Allison wrote: > > > The Samba Team is pleased to announce a new major release of Samba, > > Samba 2.2.0. > > > > Samba 2.2.0 is available in source form from > > samba.org and all of our mirror sites. > > > > Binary packages will be available shortly for many popular platforms. > > Please check the main Web site or email announcements for details. > > > > If you have problems, or think you have found a bug please email > > a report to : > > > > samba@samba.org > > > > The WHATSNEW.txt file follows. > > > > As always, any bugs are our responsibility, > > > > Regards, > > > > The Samba Team. > > > > ---------------------------------------------------------------------- > > WHATS NEW IN Samba 2.2.0 > > ======================== > > > > This is the official Samba 2.2.0 release. This version of Samba provides > > the following new features and enhancements. > > > > Integration between Windows oplocks and NFS file opens (IRIX and Linux > > 2.4 kernel only). This gives complete data and locking integrity between > > Windows and UNIX file access to the same data files. > > > > Ability to act as an authentication source for Windows 2000 clients as > > well as for NT4.x clients. > > > > Integration with the winbind daemon that provides a single > > sign on facility for UNIX servers in Windows 2000/NT4 networks > > driven by a Windows 2000/NT4 PDC. winbind is not included in > > this release, it currently must be obtained separately. We are > > committed to including winbind in a future Samba 2.2.x release. > > > > Support for native Windows 2000/NT4 printing RPCs. This includes > > support for automatic printer driver download. > > > > Support for server supported Access Control Lists (ACLs). > > This release contains support for the following filesystems: > > > > Solaris 2.6+ > > SGI Irix > > Linux Kernel with ACL patch from http://acl.bestbits.at > > Linux Kernel with XFS ACL support. > > Caldera/SCO UnixWare > > IBM AIX > > FreeBSD (with external patch) > > > > Other platforms will be supported as resources are > > available to test and implement the encessary modules. If > > you are interested in writing the support for a particular > > ACL filesystem, please join the samba-technical mailing > > list and coordinate your efforts. > > > > On PAM (Pluggable Authentication Module) based systems - better debugging > > messages and encrypted password users now have access control verified via > > PAM - Note: Authentication still uses the encrypted password database. > > > > Rewritten internal locking semantics for more robustness. > > This release supports full 64 bit locking semantics on all > > (even 32 bit) platforms. SMB locks are mapped onto POSIX > > locks (32 bit or 64 bit) as the underlying system allows. > > > > Conversion of various internal flat data structures to use > > database records for increased performance and > > flexibility. > > > > Support for acting as a MS-DFS (Distributed File System) server. > > > > Support for manipulating Samba shares using Windows client tools > > (server manager). Per share security can be set using these tools > > and Samba will obey the access restrictions applied. > > > > Samba profiling support (see below). > > > > Compile time option for enabling a (Virtual file system) VFS layer > > to allow non-disk resources to be exported as Windows filesystems > > (such as databases etc.). > > > > The documentation in this release has been updated and converted > > from Yodl to DocBook 4.1. There are many new parameters since 2.0.7 > > and some defaults have changed. > > > > Profiling support. > > ------------------ > > Support for collection of profile information. A shared > > memory area has been created which contains counters for > > the number of calls to and the amount of time spent in > > various system calls and smb transactions. See the file > > profile.h for a complete listing of the information > > collected. Sample code for a samba pmda (collection agent > > for Performance Co-Pilot) has been included in the pcp > > directory. > > > > To enable the profile data collection code in samba, you > > must compile samba with profile support (run configure with > > the --with-profile option). On startup, collection of data > > is disabled. To begin collecting data use the smbcontrol > > program to turn on profiling (see the smbcontrol man page). > > Profile information collection can be enabled for all smbd > > processes or one or more selected processes. The profiling > > data collected is the aggragate for all processes that have > > profiling enabled. > > > > With samba compiled for profile data collection, you may see > > a very slight degradation in performance even with profiling > > collection turned off. On initial tests with NetBench on an > > SGI Origin 200 server, this degradation was not measureable > > with profile collection off compared to no profile collection > > compiled into samba. > > > > With count profile collection enabled on all clients, the > > degradation was less than 2%. With full profile collection > > enabled on all clients, the degradation was about 8.5%. > > > > ===================================================================== > > > > If you think you have found a bug please email a report to : > > > > samba@samba.org > > > > As always, all bugs are our responsibility. > > > > Regards, > > > > The Samba Team. > > > > -- > > -------------------------------------------------------- > > Buying an operating system without source is like buying > > a self-assembly Space Shuttle with no instructions. > > -------------------------------------------------------- > > > From don_mccall at hp.com Tue Apr 17 22:13:02 2001 From: don_mccall at hp.com (MCCALL,DON (HP-USA,ex1)) Date: Tue Dec 2 02:34:17 2003 Subject: Account Database replication Message-ID: <079FD72E42C9D311B854009027650E6F04050982@xatl02.atl.hp.com> Hi John, Afraid you have run into one of the failings of samba at this point - redundancy. BDC capability is planned for a future release, but it's not here now. DEPENDING on how you are handling user authentication on your samba pdc, you could possibly use scripts to copy your smbpasswd file from the pdc to the other samba servers, so that when they fail to contact the pdc, they will fallback to checking the smbpasswd file to see if they can resolve the name/passwd pair locally. But this would require that you also have your /etc/passwd files in sync as well, or all of your unix servers using nis for username lookups from the same NIS server. This would at least allow your users to locally authenticate on the samba server that contains the share they are trying to access, when the PDC is unavailable.... Better heads than mine probably have more ideas on working around this... Sorry, Don -----Original Message----- From: John Humphrey [mailto:txkjohn@hotmail.com] Sent: Monday, April 16, 2001 2:26 PM To: samba-ntdom@lists.samba.org Subject: Account Database replication First of all... I'm very greatful for all the applicable info posted to this mailing list. Now to my quesiton. We've just begun to implement samba in our network. We have multiple locations connected via frame relay. I want to run only one 'domain'. I've configured my samba 2.0.7 as a PDC and it works great. I have one problem... Our frame relay circuits go down about once a month... If the other samba servers cannot communicate with the samba PDC, how will the users on the 'wrong' side of the broken link authenticate? In other words, can samba 2.0.7 be a BDC? If not, is there any other way to 'trick' samba into replicating its user account database with each of the remote samba servers? _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com From tpot at linuxcare.com.au Tue Apr 17 23:17:28 2001 From: tpot at linuxcare.com.au (Tim Potter) Date: Tue Dec 2 02:34:18 2003 Subject: Samba 2.2.0 released ! In-Reply-To: <08d601c0c786$7cb29f80$931576d8@inethouston.net> References: <3ADC9351.AE4F387F@valinux.com> <3ADCB3DD.5F8052DA@microdisplay.com> <08d601c0c786$7cb29f80$931576d8@inethouston.net> Message-ID: <15068.53000.492785.773550@stamp-collection.linuxcare.com.au> David W. Chapman Jr. writes: > ftp://ftp.samba.org/pub/samba/samba-2.2.0.tar.gz > > that link worked for me. There was a problem with downloading the release via http from va.samba.org which has now been fixed. Tim. From gaston at delta.com.ar Tue Apr 17 23:20:58 2001 From: gaston at delta.com.ar (Gaston Diaz) Date: Tue Dec 2 02:34:18 2003 Subject: unsubsrcibe Message-ID: <000f01c0c795$10115600$0300a8c0@a2m1z0> From dwcjr at inethouston.net Tue Apr 17 23:34:30 2001 From: dwcjr at inethouston.net (David W. Chapman Jr.) Date: Tue Dec 2 02:34:18 2003 Subject: unsubsrcibe References: <000f01c0c795$10115600$0300a8c0@a2m1z0> Message-ID: <0acc01c0c796$f3700300$931576d8@inethouston.net> We're not going to let you. Resistance is futile. ----- Original Message ----- From: "Gaston Diaz" To: Sent: Tuesday, April 17, 2001 6:20 PM Subject: unsubsrcibe > > > > > From gcarter at valinux.com Tue Apr 17 17:01:16 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:18 2003 Subject: NT Remote Printer Installation doesn't work In-Reply-To: ; from dariush@forouher.de on Tue, Apr 17, 2001 at 02:03:55 -0500 References: Message-ID: <20010417120116.A972@pogo.plainjoe.org> On Tue, 17 Apr 2001 02:03:55 Dariush Forouher wrote: > Hello! > > Adding a new printer on Samba 2.2.0alpha3 (CVS 04/13/01) > with the Add Printer Wizard won't work. Sure it does. :-) To use the APW, you have to define an 'add printer program =' hook to create the smb.conf entry. As it stands now, I do not see any printers defined in smb.conf so you will have to use this parameter. > But when I try to view the current list of Printers (it > should be empty) I get a segfault:[log gzipped as > attachment] ok. Thanks. I see the problem and can fix this fairly easily. Will look at it later this week I hope. The problem is in the enum_printers() reply when the server has nothing to say. It's a bounds checking bug. > When i try to add a printer with rpcclient, i get the > following: ...[log gzipped as attachment]... > result was NT_STATUS_ACCESS_VIOLATION See the 'add printer program' comment above. You can use the addprint command with this **if** you use the sharename of an existing printer. See the imprints installation for examples (use the --enable-debug to see all the smbclient and rpcclient commands). btw...My apolgies. A quick look shows that the mention of the interaction between the APW and the add printer program parameter go left of of the Printing HOWTO. I'll correct this today and post a link for obtaining the latest version of Samba-HOWTO-Collection.pdf. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From gcarter at valinux.com Tue Apr 17 17:04:22 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:18 2003 Subject: Setting up a Samba 2.2 Print Server. In-Reply-To: <5.0.2.1.2.20010417081736.00a76640@192.168.100.8>; from mharding@ecwebworks.com on Tue, Apr 17, 2001 at 08:27:04 -0500 References: <5.0.2.1.2.20010416075315.00a76488@mail.ecwebworks.com> <5.0.2.1.2.20010416075315.00a76488@mail.ecwebworks.com> <20010417004335.A2978@pogo.su.valinux.com> <5.0.2.1.2.20010417081736.00a76640@192.168.100.8> Message-ID: <20010417120422.B972@pogo.plainjoe.org> On Tue, 17 Apr 2001 08:27:04 Marc Harding wrote: > > The problems occured from a Windows 2000 machine, which > is the same machine from which I tested this on my home > machine. The biggest problem I am facing right now is > that I can not even browse to a printer share and > just install the driver manually to a windows 2000 machine. Hmm....I need to work out a few things in my head and update the Printing HOWTO I think. Let me remind myself of all the necessary steps and get back to you. > That is when I receive the message saying that is it the > wrong driver or OS. This is the same case for PCL and PS, > and the same for two different printers. > > Another thing I noticed last time I tried starting clean, > is that in the printer properties, there was no port defined, This is very strange. Samba should always report the default "Samba Printer Port" at a minimum. Can you send me a level 10 debug log for the smbd process associated with the installation attempt. Make sure that 'debug timestamps = no" > however on my test server I could see a port. > > I hope this information is useful. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From jeremy at valinux.com Wed Apr 18 00:17:31 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:18 2003 Subject: smbpasswd -d References: <002601c0c772$57929fc0$4e0a0a0a@svfc.org> Message-ID: <3ADCDD1B.955C366A@valinux.com> Hmmm. I just tested this with 2.2.0 final release, and can't reproduce the problem. smbpasswd -d user disables correctly for me. Can you try out the 2.2.0 final and get back to me if it's still a problem ? Thanks, Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From vinod at yashaa.com Wed Apr 18 03:56:04 2001 From: vinod at yashaa.com (vinod) Date: Tue Dec 2 02:34:18 2003 Subject: Samba Configuration Message-ID: <3ADD1053.36044268@yashaa.com> Hello Everybody I have configured samba server in my linux system but when i access the system from the windows nt system it is asking for the user name and password. I don't know which user name and password to give would any body please help me From d.horth at tzlimited.com Wed Apr 18 08:24:23 2001 From: d.horth at tzlimited.com (Dan Horth) Date: Tue Dec 2 02:34:18 2003 Subject: How to have administrator rights Message-ID: Hi - kind of experienced with SAMBA - but a Win NT newbie, I've just set up our samba server to be domain logon server for a bunch of Win NT 4 and Win 98 workstations. I was wondering whether I should be able to log in as administrator using the domain logon and have administrator privileges on the workstation. I have the following in my [global] section of smb.conf username map = /etc/samba/domainuser.map and /etc/samba/domainuser.map looks like this: admin = Administrator dan = Administrator does this mean that I should be able to log in to a workstation as either admin or dan and have Administrator rights on it? That's the impression I got from the smb.conf man page and my SAMBA QUE book... if I'm off track here can someone enlighten me as to how to get the SAMBA domain logon server to tell the NT workstation logging in that I should have full administrator rights? TIA - dan. -- Telezygology Manager, Technical Systems Ph (+61 2) 992 992 88 Fx (+61 2) 992 991 88 From danieljensen at home.se Wed Apr 18 09:57:10 2001 From: danieljensen at home.se (Daniel Jensen) Date: Tue Dec 2 02:34:18 2003 Subject: Win2k and Samba Message-ID: <000801c0c7ed$efd20930$0201000a@pernod> Hi! I've just installed Samba 2.2.0alpha3 and upgraded from Samba 2.0.x to get my Windows 2000 Pro-clients to work with the server. But the problem is that they don't. The samba-server won't accept the machines as part of the domain. I have added the machines to the /etc/passwd and smbpasswd files and it works ok with my older NT clients. I read some about problems with different versions of Win2k Pro. Would it be possible to solve the problem by getting the latest source from the CVS archive? Does anyone have any suggestions? Thanks Daniel From slu at firerun.net Wed Apr 18 11:45:59 2001 From: slu at firerun.net (Patrick) Date: Tue Dec 2 02:34:18 2003 Subject: Win2k and Samba References: <000801c0c7ed$efd20930$0201000a@pernod> Message-ID: <3ADD7E77.49697F04@firerun.net> Try the Samba 2.2.0 Release and see if you still have problems. Patrick Daniel Jensen wrote: > Hi! > > I've just installed Samba 2.2.0alpha3 and upgraded from Samba 2.0.x to > get my Windows 2000 Pro-clients to work with the server. But the problem > is that they don't. The samba-server won't accept the machines as part > of the domain. I have added the machines to the /etc/passwd and > smbpasswd files and it works ok with my older NT clients. I read some > about problems with different versions of Win2k Pro. Would it be > possible to solve the problem by getting the latest source from the CVS > archive? > > Does anyone have any suggestions? > > Thanks > > Daniel From MarkRoedel at letu.edu Wed Apr 18 13:56:25 2001 From: MarkRoedel at letu.edu (Mark Roedel) Date: Tue Dec 2 02:34:18 2003 Subject: samba as domain member, access control by domain group membership? Message-ID: I've searched the documentation, combed the archives and watched the list for a while, and I haven't been able to find a conclusive answer as to whether what I want is even possible. I've got two Samba servers (one 2.0.7, one 2.2.0) functioning as members of an NT domain. Both of them do beautifully with lists of individual user ID's, but I'd like to make some shares available based on membership in one of our domain groups so that I don't have to worry about keeping my access list synchronized with what our NT admin does. Possible? Pointers? --- Mark Roedel (roedelm@letu.edu) || "There cannot be a crisis next week. Systems Programmer / WebMaster || My schedule is already full." LeTourneau University || -- Henry Kissinger From aalang at rutgersinsurance.com Wed Apr 18 14:00:25 2001 From: aalang at rutgersinsurance.com (Adam Lang) Date: Tue Dec 2 02:34:18 2003 Subject: unsubsrcibe References: <000f01c0c795$10115600$0300a8c0@a2m1z0> <0acc01c0c796$f3700300$931576d8@inethouston.net> Message-ID: <008001c0c80f$eb0f7fa0$330a0a0a@rutgersinsurance.com> Didn't the list just go through this for two days worth of threads? Do people not read? Not a DAY after several people on the list post multiple ways to unsubscribe does some yahoo blow it. AHHH!!!!! Adam Lang Systems Engineer Rutgers Casualty Insurance Company http://www.rutgersinsurance.com ----- Original Message ----- From: "David W. Chapman Jr." To: ; Sent: Tuesday, April 17, 2001 7:34 PM Subject: Re: unsubsrcibe > We're not going to let you. Resistance is futile. > > ----- Original Message ----- > From: "Gaston Diaz" > To: > Sent: Tuesday, April 17, 2001 6:20 PM > Subject: unsubsrcibe > > > > > > > > > > > > > From lgroslegiat{locally} at swan.fr Wed Apr 18 14:10:46 2001 From: lgroslegiat{locally} at swan.fr (Laurent Groslegiat) Date: Tue Dec 2 02:34:18 2003 Subject: Samba2.2 for RH6.2 Message-ID: <31E92AD67A68D411B2164500000002001814EA@AS400NT> Hello everybody, I'm looking for Samba 2.2 (with smbmount if possible) for Linux RedHat 6.2 for Intel I'd like the package in " rpm " format, if possible. Thank you very much From smerrill at svfc.org Wed Apr 18 12:49:42 2001 From: smerrill at svfc.org (Scott Merrill) Date: Tue Dec 2 02:34:18 2003 Subject: smbpasswd -d In-Reply-To: <3ADCDD1B.955C366A@valinux.com> Message-ID: <000001c0c806$0a8f5b20$4e0a0a0a@svfc.org> I just installed 2.2.0 final this morning, and I'm experiencing the same issue: ---begin--- [root@svclx001 /root]# smbd -V Version 2.2.0 [root@svclx001 /root]# cat /etc/smbpasswd |grep temp_icss temp_icss:529:44EFCE164AB921CAAAD3B435B51404EE:32ED87BDB5FDC5E9CBA8854737681 8D4:[U ]:LCT-3AA65A61 [root@svclx001 /root]# smbpasswd -d temp_icss Disabled user temp_icss. [root@svclx001 /root]# cat /etc/smbpasswd |grep temp_icss temp_icss:529:44EFCE164AB921CAAAD3B435B51404EE:32ED87BDB5FDC5E9CBA8854737681 8D4:[U ]:LCT-3AA65A61 [root@svclx001 /root]# ---end--- I've got 112 lines in my smbpasswd file: [root@svclx001 /root]# wc -l /etc/smbpasswd 112 /etc/smbpasswd The smbpasswd command is successfully accessing the /etc/smbpasswd file, because I can change passwords: ---begin--- [root@svclx001 /root]# cat /etc/smbpasswd |grep temp_icss temp_icss:529:44EFCE164AB921CAAAD3B435B51404EE:32ED87BDB5FDC5E9CBA8854737681 8D4:[U ]:LCT-3AA65A61 [root@svclx001 /root]# smbpasswd temp_icss New SMB password: Retype new SMB password: Password changed for user temp_icss. [root@svclx001 /root]# cat /etc/smbpasswd |grep temp_icss temp_icss:529:9DAE649267F9349EAAD3B435B51404EE:5E718DC359A085CD053C8FFE44597 BF5:[U ]:LCT-3AA65A61 [root@svclx001 /root]# ---end--- I don't see anything particular in the logs; but I can't enable level 10 logging right now because everyone is in midst of logging in! I'll try to get a level 10 log this evening. Thanks, Scott -----Original Message----- From: jeremy@valinux.com [mailto:jeremy@valinux.com] Sent: April 17, 2001 8:18 PM To: Scott Merrill Cc: samba-ntdom@lists.samba.org Subject: Re: smbpasswd -d Hmmm. I just tested this with 2.2.0 final release, and can't reproduce the problem. smbpasswd -d user disables correctly for me. Can you try out the 2.2.0 final and get back to me if it's still a problem ? Thanks, Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From dwcjr at inethouston.net Wed Apr 18 16:27:15 2001 From: dwcjr at inethouston.net (David W. Chapman Jr.) Date: Tue Dec 2 02:34:18 2003 Subject: unsubsrcibe References: <000f01c0c795$10115600$0300a8c0@a2m1z0> <0acc01c0c796$f3700300$931576d8@inethouston.net> <008001c0c80f$eb0f7fa0$330a0a0a@rutgersinsurance.com> Message-ID: <01ef01c0c824$6dd000e0$931576d8@inethouston.net> I know, its very frustrating for me being on 4 freebsd lists, a postfix list, 2 samba lists, a vnc list, proftpd and isc-dhcp, so I atleast see it every other day at the least. ----- Original Message ----- From: "Adam Lang" To: Sent: Wednesday, April 18, 2001 9:00 AM Subject: Re: unsubsrcibe > Didn't the list just go through this for two days worth of threads? > > Do people not read? > > Not a DAY after several people on the list post multiple ways to unsubscribe > does some yahoo blow it. > > AHHH!!!!! > > Adam Lang > Systems Engineer > Rutgers Casualty Insurance Company > http://www.rutgersinsurance.com > ----- Original Message ----- > From: "David W. Chapman Jr." > To: ; > Sent: Tuesday, April 17, 2001 7:34 PM > Subject: Re: unsubsrcibe > > > > We're not going to let you. Resistance is futile. > > > > ----- Original Message ----- > > From: "Gaston Diaz" > > To: > > Sent: Tuesday, April 17, 2001 6:20 PM > > Subject: unsubsrcibe > > > > > > > > > > > > > > > > > > > > > > > > From wilsong at sergievsky.cpmc.columbia.edu Wed Apr 18 16:34:51 2001 From: wilsong at sergievsky.cpmc.columbia.edu (Gary Wilson) Date: Tue Dec 2 02:34:18 2003 Subject: Samba2.2 for RH6.2 References: <31E92AD67A68D411B2164500000002001814EA@AS400NT> Message-ID: <014c01c0c825$7ddd3c90$4100a8c0@wwpublish.com> Look on one of the Samba mirrors (the list of mirrors is at www.samba.org). There are RPMs for Red Hat 6.2 and 7. Gary ----- Original Message ----- From: "Laurent Groslegiat" To: "Samba NT List" Sent: Wednesday, April 18, 2001 10:10 AM Subject: Samba2.2 for RH6.2 Hello everybody, I'm looking for Samba 2.2 (with smbmount if possible) for Linux RedHat 6.2 for Intel I'd like the package in " rpm " format, if possible. Thank you very much From gunelawr at isu.edu Wed Apr 18 18:06:32 2001 From: gunelawr at isu.edu (Patrick) Date: Tue Dec 2 02:34:18 2003 Subject: Samba2.2 for RH6.2 References: <31E92AD67A68D411B2164500000002001814EA@AS400NT> Message-ID: <3ADDD7A8.9F18D2CD@isu.edu> Go to my download page http://www.firerun.net/main/downloads.html and download the source rpm then as root do a 'rpm --rebuild samba-2.2.0-1.src.rpm' that will give you your rpms. The binaries may work but they were compiled on a RedHat 7.0 system with a 2.4.0 kernel. Patrick Laurent Groslegiat wrote: > Hello everybody, > > I'm looking for Samba 2.2 (with smbmount if possible) for Linux RedHat 6.2 > for Intel > I'd like the package in " rpm " format, if possible. > > Thank you very much From txkjohn at hotmail.com Wed Apr 18 18:03:04 2001 From: txkjohn at hotmail.com (John Humphrey) Date: Tue Dec 2 02:34:18 2003 Subject: Stupid question about update from 2.0.7 to 2.2.0 Message-ID: Like the subject line states, this is probably a stupid question but .... Is there a 'recipe' regarding an update between Samba releases. I was running 2.0.7 and decided to update to the new 2.2.0 for added NT, Win2K support. However, after extracting the tar file into the /usr/src/samba directory and then running './configure' and finally 'make', nothing happened (besides the long compiling output). Now, when I run smbd -V it still returns a version 2.0.7 As you can tell, I'm a newbie. Feel free to berate me, but if you could include some helpful advise along with any derisions, I would be much appreciative. I'll list below some pertinent facts. samba 2.0.7 directory = /etc/samba new 2.2.0 directory = ??? John Humphrey _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com From mch at haus.dynodns.net Wed Apr 18 19:20:49 2001 From: mch at haus.dynodns.net (Christoph Mertins) Date: Tue Dec 2 02:34:18 2003 Subject: Problem in compiling smbd/session.c Message-ID: Hello I get an error in compiling smbd/session.c when it tries to copy the lp_utmp_hostname() in line 93. mfg From ely at txc.com Wed Apr 18 19:23:49 2001 From: ely at txc.com (Ely Zavin) Date: Tue Dec 2 02:34:19 2003 Subject: Domain Groups Message-ID: <3ADDE9C4.D83F027B@txc.com> I start running samba-2.2.0 Everything looks good. Thanks samba team for the great job. Only one question. How I can map unix groups to NT Domain groups? Before it was domaingroupmap file. Ely Zavin. -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 2470 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.samba.org/archive/samba-ntdom/attachments/20010418/f370ae77/smime.bin From barth at cck.uni-kl.de Wed Apr 18 19:32:53 2001 From: barth at cck.uni-kl.de (Christian Barth) Date: Tue Dec 2 02:34:19 2003 Subject: Stupid question about update from 2.0.7 to 2.2.0 In-Reply-To: Message-ID: <3ADE0805.32369.2EEBF83@localhost> > Like the subject line states, this is probably a stupid question but .... > > Is there a 'recipe' regarding an update between Samba releases. I was > running 2.0.7 and decided to update to the new 2.2.0 for added NT, Win2K > support. However, after extracting the tar file into the /usr/src/samba > directory and then running './configure' and finally 'make', nothing > happened (besides the long compiling output). Now, when I run smbd -V it > still returns a version 2.0.7 > > As you can tell, I'm a newbie. Feel free to berate me, but if you could > include some helpful advise along with any derisions, I would be much > appreciative. I'll list below some pertinent facts. do a "make install" to put the compiled binaries in to the directory configured with ./configure --...... (Default: everything in /usr/local/samba). It can be the same as the one for 2.0.7, back it up bevore you install or relay on the ".old / make revert" - feature of the samba Makefile. Restart the daemons, better: stop, install, start. Christian > > > samba 2.0.7 directory = /etc/samba > new 2.2.0 directory = ??? > > John Humphrey > _________________________________________________________________ > Get your FREE download of MSN Explorer at http://explorer.msn.com > > > _______________________________________________________________________ In a world without walls and fences, who needs windows and gates? (SUN) From gcarter at valinux.com Wed Apr 18 19:36:30 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:19 2003 Subject: Stupid question about update from 2.0.7 to 2.2.0 In-Reply-To: Message-ID: On Wed, 18 Apr 2001, John Humphrey wrote: > Like the subject line states, this is probably a stupid question but .... > > Is there a 'recipe' regarding an update between Samba releases. I was > running 2.0.7 and decided to update to the new 2.2.0 for added NT, Win2K > support. However, after extracting the tar file into the /usr/src/samba > directory and then running './configure' and finally 'make', nothing > happened (besides the long compiling output). Now, when I run smbd -V it > still returns a version 2.0.7 How about 'make install'? :-) jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From pkunst at csksoftware.de Wed Apr 18 19:46:39 2001 From: pkunst at csksoftware.de (Peter Kunst) Date: Tue Dec 2 02:34:19 2003 Subject: compiler warning samba-2.2.0 / gcc-2.95.3 / Solaris 2.6 Message-ID: <3ADDEF1F.E3250C52@csksoftware.de> just to make it better: Compiling lib/system.c ../../samba-2.2.0/source/lib/system.c: In function `sys_readdir': ../../samba-2.2.0/source/lib/system.c:234: warning: return from incompatible pointer type ...missing an explicit cast ? maybe somewhere in smbwrapper.c ? Cheers, Peter From ink at inconnu.isu.edu Wed Apr 18 19:53:11 2001 From: ink at inconnu.isu.edu (Craig Kelley) Date: Tue Dec 2 02:34:19 2003 Subject: samba-ntdom needed any more? In-Reply-To: Message-ID: Do we even need this list anymore? If the ntdom stuff has gone to the main branch, then there isn't really a need for an 'ntdom' discussion list, unless we want specific traffic to come here. (But I don't see a samba-printing or samba-time list either) Just curious. -- It won't be long before the CPU is a card in a slot on your ATX videoboard Craig Kelley -- kellcrai@isu.edu http://www.isu.edu/~kellcrai finger ink@inconnu.isu.edu for PGP block From gree3776 at rowan.edu Wed Apr 18 21:59:45 2001 From: gree3776 at rowan.edu (Samuel Greenfeld) Date: Tue Dec 2 02:34:19 2003 Subject: Samba 2.0.7 to 2.2.0 upgrade issues Message-ID: 1. I noticed that usernames returned by samba 2.2.0 for spawning helpers (in my case "root preexec" and "root postexec") are no longer forced to lower case. In particular, I noticed that when someone uses a Win9x client to access the server, the username is given in upper case (i.e. USER123), while WinNT machines result in usernames given in lower case (user123). While my scripts are written to be case insensitive in the first place, case sensitive scripts might run into some problems with this behavior. 2. The issue I mentioned a week or so ago about "force user" in a printer share definition only forcing said user for the printing command only. Pausing the queue, removing the job, etc. still is done as the uid of the user, not the forced declaration. The bug mentioned where temp files were sticking is indeed fixed. 3. Speaking of temporary files (given the recent 2.0.8/2.2.0 announcement), I noticed that samba 2.2.0 creates temporary files for print jobs sequentially numbered. In 2.0.7, said files were seemingly randomly generated to an extent. While I am not the best C programmer out there (and I *am* admitting the samba team knows more about this than I do) this seems to be a possible sanity issue. 4. (A 2.0.7 issue, don't know about 2.2.0 yet) If you have log files generated with filenames containing the relevant machine's name, and said machine name contains a space (acceptable under Win9x), the log file generated contains a space in its name. Not a big deal, although it screws up Red Hat's logrotate system if you try globbing the directory for rotation (it handles the space in the machine name improperly since it uses a text database of rotation information). Test case in point: "log file = /var/log/samba/log.%m-" (the dash being there so rotation can be done globbing all the machine names). A mechanism like the old one for generating print file names might be in order. From marcus at big.univali.br Wed Apr 18 22:33:33 2001 From: marcus at big.univali.br (Marcus Grando) Date: Tue Dec 2 02:34:19 2003 Subject: Problems with samba 2.2.0 and 2.0.8 Message-ID: <5.1.0.14.1.20010418192305.00abe4a0@mail.big.univali.br> Hello all, I have samba 2.0.7 in perfect state. My lan with machines Win95, Win98, NT4, authenticate with samba. The problem is, I upgrade samba to version 2.2.0, and the machines with WIN95 and WIN98 not print in the machine NT4. But others NT4 print normaly. This NT4 is server printer. Error is: "This account is expired." and no access the NT4. Thanks for all. Best regards, Marcus Grando From jeremy at valinux.com Wed Apr 18 23:43:37 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:19 2003 Subject: smbpasswd -d References: <000001c0c806$0a8f5b20$4e0a0a0a@svfc.org> Message-ID: <3ADE26A8.AC30905E@valinux.com> Scott Merrill wrote: > > I just installed 2.2.0 final this morning, and I'm experiencing the same > issue: > > ---begin--- > [root@svclx001 /root]# smbd -V > Version 2.2.0 > [root@svclx001 /root]# cat /etc/smbpasswd |grep temp_icss > temp_icss:529:44EFCE164AB921CAAAD3B435B51404EE:32ED87BDB5FDC5E9CBA8854737681 > 8D4:[U ]:LCT-3AA65A61 > [root@svclx001 /root]# smbpasswd -d temp_icss > Disabled user temp_icss. > [root@svclx001 /root]# cat /etc/smbpasswd |grep temp_icss > temp_icss:529:44EFCE164AB921CAAAD3B435B51404EE:32ED87BDB5FDC5E9CBA8854737681 > 8D4:[U ]:LCT-3AA65A61 > [root@svclx001 /root]# > ---end--- > > I've got 112 lines in my smbpasswd file: > [root@svclx001 /root]# wc -l /etc/smbpasswd > 112 /etc/smbpasswd Ok - a debug 10 or strace from smbpasswd would help.. Thanks, Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From gcarter at valinux.com Thu Apr 19 05:12:03 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:19 2003 Subject: samba-ntdom needed any more? In-Reply-To: ; from ink@inconnu.isu.edu on Wed, Apr 18, 2001 at 14:53:11 -0500 References: Message-ID: <20010419001203.C22316@pogo.plainjoe.org> On Wed, 18 Apr 2001 14:53:11 Craig Kelley wrote: > > Do we even need this list anymore? If the ntdom stuff > has gone to the main branch, then there isn't really a > need for an 'ntdom' discussion list, unless we want > specific traffic to come here. (But I don't > see a samba-printing or samba-time list either) > > Just curious. I have been wondering about this as well for a few weeks. In fact, I thinking posting administration of stable Samba PDC on samba@samba.org would provide for less redundancy. I just checked on membership. samba-ntdom has about 2,300 members (~600 of these are digested). Samba@samba.org has about 4,300 (~3000 are digested). What do people say? Has this list provided it purposes and should be merged back in samba@samba.org? I would personally love one less mailing list to read. :-) And it has been a little less than one topic recently. You folks decide. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From s354199 at student.uq.edu.au Thu Apr 19 05:24:09 2001 From: s354199 at student.uq.edu.au (Elliot Mackenzie) Date: Tue Dec 2 02:34:19 2003 Subject: FW: samba-ntdom needed any more? Message-ID: The NT domain feature is a very important (still relatively new) feature that a lot of people (including myself) have at one stage experienced problems with. The fact that we get up to 30 emails a day through this mailing list seems to suggest that there are sufficient people who use this list to make it worthwhile. I would personally find it more irritating having to double or triple my mail traffic each day just to receive the same emails I do currently (I am not a part of samba-main). M. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Craig Kelley Sent: Thursday, 19 April 2001 5:53 AM To: samba-ntdom@samba.org Subject: samba-ntdom needed any more? Do we even need this list anymore? If the ntdom stuff has gone to the main branch, then there isn't really a need for an 'ntdom' discussion list, unless we want specific traffic to come here. (But I don't see a samba-printing or samba-time list either) Just curious. -- It won't be long before the CPU is a card in a slot on your ATX videoboard Craig Kelley -- kellcrai@isu.edu http://www.isu.edu/~kellcrai finger ink@inconnu.isu.edu for PGP block From gcarter at valinux.com Thu Apr 19 05:30:26 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:19 2003 Subject: Domain Groups In-Reply-To: <3ADDE9C4.D83F027B@txc.com>; from ely@txc.com on Wed, Apr 18, 2001 at 14:23:49 -0500 References: <3ADDE9C4.D83F027B@txc.com> Message-ID: <20010419003026.O22316@pogo.plainjoe.org> On Wed, 18 Apr 2001 14:23:49 Ely Zavin wrote: > I start running samba-2.2.0 > Everything looks good. Thanks samba team for the great job. > Only one question. > How I can map unix groups to NT Domain groups? > Before it was domaingroupmap file. > Ely Zavin. Samba 2.2.0 servers groups out of /etc/group. Domain group mapping support is not implemented right now. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From gcarter at valinux.com Thu Apr 19 05:37:28 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:19 2003 Subject: FW: samba-ntdom needed any more? In-Reply-To: ; from s354199@student.uq.edu.au on Thu, Apr 19, 2001 at 00:24:09 -0500 References: Message-ID: <20010419003728.Q22316@pogo.plainjoe.org> On Thu, 19 Apr 2001 00:24:09 Elliot Mackenzie wrote: > > The NT domain feature is a very important (still relatively new) > feature that a lot of people (including myself) have at one > stage experienced problems with. The fact that we get up > to 30 emails a day through this mailing list seems to > suggest that there are sufficient people who use this > list to make it worthwhile. I would personally find it > more irritating having to double or triple my mail traffic > each day just to receive the same emails I do currently (I am > not a part of samba-main). I don;t think anyone is implying that the Domain feature is not important. I just don't want to be answering identical questions on Samba and samba-ntdom. Maybe I should just stick with Samba "main". Of course, more experimental work will be coming soon, so things will heat back up. :-) For now, I'm going to monitor samba more due to the initial release of 2.2.0. However, I do feel that should this list remain, it should not be for "How do I configure my Samba 2.2.0 PDC?" That should be on samba@... since it will benefit more people. This list should be for testing new features in Samba related to NT domains. Samba-techical should remain for coordinating development. However, since i is not moderated, you are of course free to do whatever you wish... :-) :-) signing of. Cheers, jerry Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From madesamba1 at telkom.net Thu Apr 19 05:47:35 2001 From: madesamba1 at telkom.net (dede) Date: Tue Dec 2 02:34:19 2003 Subject: Asking the architecture of SWAT References: <8058A4A7DD5FD411A29200805FEA165A3D00D1@we01ex.we.nl.solvay.com> Message-ID: <018a01c0c894$6af797a0$2871053d@handa> Hi there,.. I am planning to make application just like SWAT as my final project. Can you tell me the architecture of SWAT.. Thanks Made From gcarter at valinux.com Thu Apr 19 05:52:43 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:19 2003 Subject: Asking the architecture of SWAT In-Reply-To: <018a01c0c894$6af797a0$2871053d@handa> Message-ID: On Thu, 19 Apr 2001, dede wrote: > Hi there,.. > > I am planning to make application just like SWAT as my final project. > Can you tell me the architecture of SWAT.. See samba-2.2.0/source/web/*.c jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From franc at mml.usyd.edu.au Thu Apr 19 06:18:21 2001 From: franc at mml.usyd.edu.au (Franc Carter) Date: Tue Dec 2 02:34:19 2003 Subject: PDC problems Message-ID: <0104191618210K.09501@jevons.mml.usyd.edu.au> I'm trying to set up a Redhat-6.2 linux machine running samba 2.2.0 as a PDC. I can get the Terminal-Server machine to join the domain, however when I try to log in after the machine has rebooted, it fails with the following suspicious messages in the logs [2001/04/19 15:49:56, 5] libsmb/credentials.c:cred_assert(138) credentials check wrong and [2001/04/19 15:49:56, 0] rpc_server/srv_netlog.c:api_net_sam_logon(177) api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. Any help would be greatly appreciated. thanks -- Franc Carter SIRCA(Securities Industry Research Centre of Asia-Pacific) Ph:61-2-9351-7819 Fax: 61-2-9351-6461 From barth at cck.uni-kl.de Thu Apr 19 06:24:27 2001 From: barth at cck.uni-kl.de (Christian Barth) Date: Tue Dec 2 02:34:19 2003 Subject: Stupid question about update from 2.0.7 to 2.2.0 In-Reply-To: Message-ID: <3ADEA0BB.6498.157C18@localhost> > the 'make install' did exaclty what you guys said it would. Thanks for the > advice. One more question though... How do I load the new smbd and nmbd. The > smb startup script (/etc/rc.d/init.d/smb) still loads the old smbd file. If > I try to copy the new smbd and nmbd to the /usr/sbin directory, they both > fail to load properly. I'm sure I'm going about this all wrong, but I can't > find any information on the list that explains (in newbie terms) what to do > after the 'make install' command is finished. I'm running RH 7.0 My 2.0.7 > smb.conf and smbpasswd files reside in /etc/samba (I guess this would be > considered the working directory) and I have no idea where the 2.2.0 files > are located. Is there any advice you guys could issue? Thanks. 3 Possibilities: backup up the smb startup script, use rpm -e `rpm -q -f /etc/rc.d/init.d/smb` to remove all the Redhat-stuff. Install samba 2.2 (./configure, make, make install), restore the smb starup script and edit it to point to the new biniaries, that should be left where "make install" has put them to. Use the appropriate ./configure options to put the stuff with "make install" into the places the redhat components have been. Wait for RedHat to publish the RH7.0-samba2.2.0-rpm Christian _______________________________________________________________________ In a world without walls and fences, who needs windows and gates? (SUN) From teilo at cdt.luth.se Thu Apr 19 08:19:19 2001 From: teilo at cdt.luth.se (James Nord) Date: Tue Dec 2 02:34:19 2003 Subject: FW: samba-ntdom needed any more? References: <20010419003728.Q22316@pogo.plainjoe.org> Message-ID: <3ADE9F87.3060200@cdt.luth.se> Gerald Carter wrote: > On Thu, 19 Apr 2001 00:24:09 Elliot Mackenzie wrote: > >> The NT domain feature is a very important (still relatively new) >> feature that a lot of people (including myself) have at one >> stage experienced problems with. The fact that we get up >> to 30 emails a day through this mailing list seems to >> suggest that there are sufficient people who use this >> list to make it worthwhile. I would personally find it >> more irritating having to double or triple my mail traffic >> each day just to receive the same emails I do currently (I am >> not a part of samba-main). > > > I don;t think anyone is implying that the Domain feature > is not important. I just don't want to be answering identical > questions on Samba and samba-ntdom. Then what about subscribing samba@samba.org to samba-ntdom for a transitional period. - Okay this could end up with some people getting 2 of the same emails but as we are talking Samba/Unix'ish I'm guessing that most people have the abiltiy to do some mailbox filtering to get rid of the duplicates. In my view this > This list should be for testing new features in Samba related to > NT domains. Samba-techical should remain for coordinating > development. I would agree with that and it is how I have actually seen it in the past. just my 2cents /James -- Technology is a word that describes something that doesn't work yet. Douglas Adams From striker at samba-tng.org Thu Apr 19 08:29:05 2001 From: striker at samba-tng.org (Sander Striker) Date: Tue Dec 2 02:34:19 2003 Subject: [ANNOUNCE] Security hole Message-ID: Hi, Caldera has found a security hole in Samba. This hole affects both Samba and Samba TNG. The security hole was fixed in Samba 2.0.8 and 2.2.0 (http://www.samba.org). In TNG it was fixed in the CVS repository as of tuesday evening. Sander From santhosh at ece.cet.ac.in Fri Apr 13 22:59:13 2001 From: santhosh at ece.cet.ac.in (santhosh) Date: Tue Dec 2 02:34:19 2003 Subject: Multiple samba server egarding Message-ID: <000e01c0c46d$8c6013c0$5664a8c0@aryabhatta> Hello everyone, I have already setup a samba pdc . I have lready instllaed another linux machine in whic samba is installed. I would like to add the second machine as a part of samba pdc machine. My aim is to share a folder (read & write)to all users who are logging to samba pdc. How can I achieve this? Santhosh kumar.S lecturer E&C Dept -------------- next part -------------- HTML attachment scrubbed and removed From e9125884 at student.tuwien.ac.at Thu Apr 19 11:31:03 2001 From: e9125884 at student.tuwien.ac.at (Gerhard Wiesinger) Date: Tue Dec 2 02:34:19 2003 Subject: Proposed patch for Samba-2.0.7 to allow Solaris open more than 1014 (or rlim_fd_max) files In-Reply-To: Message-ID: On Fri, 2 Feb 2001, Gerhard Wiesinger wrote: > On Fri, 2 Feb 2001, Tim Potter wrote: > > > Gerhard Wiesinger writes: > > > > > > I would like to submit the following patch to source/lib/util.c to allow > > > > Samba under Solaris to open more than 1014 files -- or whatever the kernel > > > > variable rlim_fd_max is set to. > > > > > > The patch works fine for me. When will the patch be included into CVS? > > > > OK - since there are multiple reports of it actually working, I > > can probably merge it in to HEAD. Hopefully Jeremy will pick it > > up for the next 2.2 release. > > > > Can you integrate it into the 2.0.7 source tree too? > > BTW: I tested it on Suse Linux 7.0 (Kernel 2.2.16) and had the following > limitations with the patch. > > I did with bash: > echo 16384 > /proc/sys/fs/file-max > echo 30000 > /proc/sys/fs/inode-max > works well. > > Setting the rlimit works until the following: > rlp.rlim_max = 1048576; // Works on Linux 2.2.16 > rlp.rlim_max = 1048577; // Operation not permitted on Linux 2.2.16 > > So rlp.rlim_max = RLIM_INFINITY; does not work on Linux 2.2.16. > > So we could try infinity and when it does not work try this limit. > Why was the rlimit patch from Eric not integrated into 2.0.8? Ciao, Gerhard From Axel.Thimm at physik.fu-berlin.de Thu Apr 19 12:17:38 2001 From: Axel.Thimm at physik.fu-berlin.de (Axel Thimm) Date: Tue Dec 2 02:34:19 2003 Subject: Failed to marshall NET_R_SAM_LOGON and what's the successor to SAMBA_2_2? In-Reply-To: <20010317131107.A2406@pua.domain>; from Axel.Thimm@physik.fu-berlin.de on Sat, Mar 17, 2001 at 01:11:07PM +0100 References: <20010410084320.T22909@queso.plainjoe.org> <20010317131107.A2406@pua.domain> Message-ID: <20010419141738.A4984@pua.domain> On Sat, Mar 17, 2001 at 01:11:07PM +0100, Axel Thimm wrote: > Furthermore there are errors like: > Mar 17 13:01:03 axp1 smbd[17831]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Mar 17 13:01:03 axp1 smbd[17831]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. On Tue, Apr 10, 2001 at 08:43:20AM -0500, Gerald Carter wrote: > On Mon, 09 Apr 2001 08:03:56 andre.doehn@econia.com wrote: > > smbd[8972]: rpc_server/srv_netlog.c:api_net_sam_logon(177) > > smbd[8972]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > > smbd[8972]: rpc_server/srv_pipe.c:api_rpcTNP(1199) > > smbd[8972]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > > what does it mean? > > the samba pdc based on linux 2.2.18 works very fine but iam getting this > > error in the log. Same here. The error only pops up on the Samba PDC. > Can you send me (off list) a level 10 debug log surrounding > this error? I just compiled latest cvs SAMBA_2_2. This should be what is released as 2.2.0 right now, isn't it? I still get those messages: > Apr 19 11:00:53 axp1 smbd[10718]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 11:00:53 axp1 smbd[10718]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 11:06:47 axp1 smbd[367]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 11:06:47 axp1 smbd[367]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 11:38:16 axp1 smbd[11244]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 11:38:16 axp1 smbd[11244]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 11:49:11 axp1 smbd[12529]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 11:49:11 axp1 smbd[12529]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 12:05:15 axp1 smbd[12649]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 12:05:15 axp1 smbd[12649]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 12:33:26 axp1 smbd[12573]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 12:33:26 axp1 smbd[12573]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 12:34:57 axp1 smbd[12615]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 12:34:57 axp1 smbd[12615]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 13:12:21 axp1 smbd[13230]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 13:12:21 axp1 smbd[13230]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 13:18:32 axp1 smbd[13192]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 13:18:32 axp1 smbd[13192]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 13:23:17 axp1 smbd[13264]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 13:23:17 axp1 smbd[13264]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 13:28:00 axp1 smbd[13264]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 13:28:00 axp1 smbd[13264]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 13:46:41 axp1 smbd[12745]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 13:46:41 axp1 smbd[12745]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. Did I cvs the Right Thing? Has the cvs version tag changed? If I do have the latest 2.2.x Samba, then I can try to pollute you with level 10 logs ;) Regards, Axel. -- Axel.Thimm@physik.fu-berlin.de From andre.doehn at econia.com Thu Apr 19 12:33:06 2001 From: andre.doehn at econia.com (andre.doehn@econia.com) Date: Tue Dec 2 02:34:20 2003 Subject: Failed to marshall NET_R_SAM_LOGON and what's the successor to SAMBA_2_2? Message-ID: now iam using official samba 2.2 tgz and I compiled samba with ./configure --with-pam --with-ldap --with-syslog --with-quotas --prefix=/usr/local/samba22 --with-utmp --with-acl-support --with-smbwrapper and I still got these messages in the syslog. I cant get any further information (with log lvl 10) to find out where the problem can be located??! bye andre |--------+--------------------------------> | | Axel Thimm | | | | | | | | | 19.04.2001 14:17 | | | | |--------+--------------------------------> >-----------------------------------------------------------------------------------------------------------| | | | To: samba-technical@samba.org, Gerald Carter | | cc: andre.doehn@econia.com, samba-ntdom@samba.org | | Subject: Failed to marshall NET_R_SAM_LOGON and what's the successor to SAMBA_2_2? | >-----------------------------------------------------------------------------------------------------------| On Sat, Mar 17, 2001 at 01:11:07PM +0100, Axel Thimm wrote: > Furthermore there are errors like: > Mar 17 13:01:03 axp1 smbd[17831]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Mar 17 13:01:03 axp1 smbd[17831]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. On Tue, Apr 10, 2001 at 08:43:20AM -0500, Gerald Carter wrote: > On Mon, 09 Apr 2001 08:03:56 andre.doehn@econia.com wrote: > > smbd[8972]: rpc_server/srv_netlog.c:api_net_sam_logon(177) > > smbd[8972]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > > smbd[8972]: rpc_server/srv_pipe.c:api_rpcTNP(1199) > > smbd[8972]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > > what does it mean? > > the samba pdc based on linux 2.2.18 works very fine but iam getting this > > error in the log. Same here. The error only pops up on the Samba PDC. > Can you send me (off list) a level 10 debug log surrounding > this error? I just compiled latest cvs SAMBA_2_2. This should be what is released as 2.2.0 right now, isn't it? I still get those messages: > Apr 19 11:00:53 axp1 smbd[10718]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 11:00:53 axp1 smbd[10718]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 11:06:47 axp1 smbd[367]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 11:06:47 axp1 smbd[367]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 11:38:16 axp1 smbd[11244]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 11:38:16 axp1 smbd[11244]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 11:49:11 axp1 smbd[12529]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 11:49:11 axp1 smbd[12529]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 12:05:15 axp1 smbd[12649]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 12:05:15 axp1 smbd[12649]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 12:33:26 axp1 smbd[12573]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 12:33:26 axp1 smbd[12573]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 12:34:57 axp1 smbd[12615]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 12:34:57 axp1 smbd[12615]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 13:12:21 axp1 smbd[13230]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 13:12:21 axp1 smbd[13230]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 13:18:32 axp1 smbd[13192]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 13:18:32 axp1 smbd[13192]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 13:23:17 axp1 smbd[13264]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 13:23:17 axp1 smbd[13264]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 13:28:00 axp1 smbd[13264]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 13:28:00 axp1 smbd[13264]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > Apr 19 13:46:41 axp1 smbd[12745]: api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > Apr 19 13:46:41 axp1 smbd[12745]: api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. Did I cvs the Right Thing? Has the cvs version tag changed? If I do have the latest 2.2.x Samba, then I can try to pollute you with level 10 logs ;) Regards, Axel. -- Axel.Thimm@physik.fu-berlin.de From rajeeva at research.bell-labs.com Thu Apr 19 12:51:31 2001 From: rajeeva at research.bell-labs.com (Rajeev Agrawala) Date: Tue Dec 2 02:34:20 2003 Subject: Samba 2.2.0 released ! References: <3ADC9351.AE4F387F@valinux.com> Message-ID: <3ADEDF53.6AE8249F@research.bell-labs.com> Jeremy Allison wrote: > The Samba Team is pleased to announce a new major release of Samba, > Samba 2.2.0. > > Support for server supported Access Control Lists (ACLs). > This release contains support for the following filesystems: > > Solaris 2.6+ > SGI Irix > Linux Kernel with ACL patch from http://acl.bestbits.at > Linux Kernel with XFS ACL support. > Caldera/SCO UnixWare > IBM AIX > FreeBSD (with external patch) > Where would I get the external patch for freebsd? Thanks, rajeev From ssande at sandia.gov Thu Apr 19 12:53:43 2001 From: ssande at sandia.gov (Stan Sander) Date: Tue Dec 2 02:34:20 2003 Subject: samba-ntdom needed any more? References: <20010419001203.C22316@pogo.plainjoe.org> Message-ID: <3ADEDFD7.6372BECE@sandia.gov> Gerald Carter wrote: > On Wed, 18 Apr 2001 14:53:11 Craig Kelley wrote: > > > > Do we even need this list anymore? If the ntdom stuff > > has gone to the main branch, then there isn't really a > > need for an 'ntdom' discussion list, unless we want > > specific traffic to come here. (But I don't > > see a samba-printing or samba-time list either) > > > > Just curious. > > I have been wondering about this as well for a few weeks. > In fact, I thinking posting administration of stable Samba PDC > on samba@samba.org would provide for less redundancy. > > I just checked on membership. samba-ntdom has about 2,300 > members (~600 of these are digested). Samba@samba.org has about > 4,300 (~3000 are digested). > > What do people say? Has this list provided it purposes and > should be merged back in samba@samba.org? I would personally > love one less mailing list to read. :-) And it has been a little > less than one topic recently. > > You folks decide. > > Cheers, jerry > ---------------------------------------------------------------------- > /\ Gerald (Jerry) Carter Professional Services > \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com > http://www.samba.org/ SAMBA Team jerry@samba.org > http://www.plainjoe.org/ jerry@plainjoe.org > > "...a hundred billion castaways looking for a home." > - Sting "Message in a Bottle" ( 1979 ) I would agree. Now that NT domain code is included in the samba releases, this list has probably served it's purpose. Many of the questions it seems relate to general samba issues anyway. I vote to merge it back in to the main list. -- Stan Sander - CSU Special Projects Sandia National Laboratories (505) 284-4915 Mail Stop 0662 1515 Eubank SE Albuquerque, NM 87123 From theodore at eexi.gr Thu Apr 19 12:59:09 2001 From: theodore at eexi.gr (Theodore J. Soldatos) Date: Tue Dec 2 02:34:20 2003 Subject: [Fwd: Member Samba server of Samba domain not working correctly.] Message-ID: <3ADEE11D.6060103@eexi.gr> Hello, The problem described in the following mail still exists in 2.2.0 release, so i send it again as i got no responce the first time. Nothing has changed, except from the Samba version (2.2.0 instead of 2.2.0-alpha3). Thanks again, T. -------- Original Message -------- Hello, I'm using Samba 2.2.0alpha3, running on 2.2.18 kernel with Linux ACLs enabled. The problem appears in both WinNT 4.0 and Win2000 clients. I have 2 servers: The first (Yeb, 10.0.170.7) is the PDC. Clients can login as expected, change file permissions etc. The second (Yog, 10.0.170.8) is the file server. Home directories and profiles reside in this server. I have created the Yog machine account in Yeb and joined the domain (from Yog) using "smbpasswd -j TEST_DOMAIN". No errors, the record in smbpasswd of Yeb updated. In the Samba 2.2 PDC FAQ there was a mention of a SID file which is created when a Samba server joins a Samba domain, which in my case it should be TEST_DOMAIN.YOG.SID. The FAQ is not very clear about that file. In the private directory of both servers i can find a MACHINE.SID file only, i am not sure if this is correct. When i open the TEST_DOMAIN domain from a client (Network Neighborhood), both servers appear under TEST_DOMAIN. If i check the properties of the machines, the "Domain:" field of Yeb displays (correctly) "TEST_DOMAIN", but the same field on Yog displays "YOG". The result of all that is that when i try to change file permissions of files residing on the file server (Yog), the client looks for the domain controller of the YOG domain, which is wrong (and not found, of course), so the TEST_DOMAIN user list is not available.. If i try to do the same on files either on the PDC or on the local disk, i'm getting the correct user list from TEST_DOMAIN. In short, the member server appears to be partially member of TEST_DOMAIN and partially (and mostly) member of a non-existent domain which has the same name with itself. Here are some files: The Yeb (PDC, 10.0.170.7) smb.conf: --- Cut here --- [global] local master = yes preferred master = yes domain master = yes security = user status = yes workgroup = TEST_DOMAIN wins support = yes encrypt passwords = yes domain logons =yes logon script = scripts\%U.bat domain admin group = @adm add user script = /usr/sbin/useradd -g machines -c Machine -d /dev/null -s /bin/false %m$ delete user script = /usr/sbin/userdel %m$ guest account = ftp share modes=no os level=65 username map = /usr/local/samba/lib/users.map log file = /usr/local/samba/var/log.%m logon home = "\\YOG\%U" logon path = "\\YOG\%U\profile" [homes] writeable = yes guest ok = no read only = no create mask = 0744 directory mask = 0744 force create mode = 0744 force directory mode = 0744 inherit permissions = yes oplocks = false locking = no [netlogon] path = /usr/local/samba/netlogon writeable = no guest ok = no --- cut here --- The Yog (file server, 10.0.170.8) smb.conf: --- Cut here --- [global] workgroup = TEST_DOMAIN security = DOMAIN status = yes wins support = no wins server = 10.0.170.7 encrypt passwords = yes domain logons = no password server = 10.0.170.7 logon script = scripts\%U.bat domain admin group = @adm add user script = /usr/sbin/useradd -g machines -c Machine -d /dev/null -s /bin/false %m$ delete user script = /usr/sbin/userdel %m$ guest account = ftp share modes=no os level=65 username map = /usr/local/samba/lib/users.map netbios name = YOG log file = /usr/local/samba/var/log.%m [homes] writeable = yes guest ok = no read only = no create mask = 0744 directory mask = 0744 force create mode = 0744 force directory mode = 0744 inherit permissions = yes oplocks = false locking = no [netlogon] path = /usr/local/samba/netlogon writeable = no guest ok = no --- cut here --- The PDC wins.dat file (TSOL is a user account, VM2000 is a Win2000 client): --- Cut here --- VERSION 1 226698 "TEST_DOMAIN#00" 986220484 255.255.255.255 c4R "TEST_DOMAIN#1b" 986219928 10.0.170.7 44R "TEST_DOMAIN#1c" 986219928 10.0.170.7 c4R "TEST_DOMAIN#1e" 986220484 255.255.255.255 c4R "TSOL#03" 986259094 10.0.161.227 64R "VM2000#00" 986253433 10.0.161.227 64R "VM2000#03" 986253437 10.0.161.227 64R "VM2000#20" 986253438 10.0.161.227 64R "YEB#00" 986219928 10.0.170.7 46R "YEB#03" 986219928 10.0.170.7 46R "YEB#20" 986219928 10.0.170.7 46R "YOG#00" 986220484 10.0.170.8 44R "YOG#03" 986220484 10.0.170.8 44R "YOG#20" 986220484 10.0.170.8 44R --- cut here --- Thanks in advance, T. -- Theodore=J.=Soldatos=_\_="There=is=always=a=bug=somewhere",=said==HAL=to=the== = theodore@eexi.gr =_/_==Ultimate=Programmer,=and=turned=off=the=air=supply.= = bafh@hellug.gr =_\_="Everybody=knows=the=war=is=over,==================== = tsol@space.gr =_/_==everybody=knows=the=good=guys=lost"===Leonard=Cohen= =====================_\_============ http://w4u.eexi.gr/~theodore ============ === Space Hellas ====_/_=========== Finger: theodore@aurora.eexi.gr ========== -- Theodore=J.=Soldatos=_\_="There=is=always=a=bug=somewhere",=said==HAL=to=the== = theodore@eexi.gr =_/_==Ultimate=Programmer,=and=turned=off=the=air=supply.= = bafh@hellug.gr =_\_="Everybody=knows=the=war=is=over,==================== = tsol@space.gr =_/_==everybody=knows=the=good=guys=lost"===Leonard=Cohen= =====================_\_============ http://w4u.eexi.gr/~theodore ============ === Space Hellas ====_/_=========== Finger: theodore@aurora.eexi.gr ========== From MMcEldowney at deltaregional.com Thu Apr 19 13:32:51 2001 From: MMcEldowney at deltaregional.com (McEldowney, Michael) Date: Tue Dec 2 02:34:20 2003 Subject: samba-ntdom needed any more? Message-ID: Personally, it won't matter to me. I monitor both lists (nt-dom and main), and don't have any issues with the occasional duplicate post. That's an acceptable side-effect. As for others, I'm sure opinions will vary, they always do ;-) I agree with Jerry that this list has become a multitopic list. This list should remain and we should all limit our posts to matters that this list was originally intended for. Post the "regular" samba matters about installation, file, print, WINS, configs, etc. to the main list. Post domain admin matters here. Just a thought...how about renaming the list to 'samba-domain-admin', or 'samba-domain-auth? > -----Original Message----- > From: Gerald Carter [mailto:gcarter@valinux.com] > Sent: Thursday, April 19, 2001 12:12 AM > To: Craig Kelley > Cc: samba-ntdom@samba.org > Subject: Re: samba-ntdom needed any more? > > > > On Wed, 18 Apr 2001 14:53:11 Craig Kelley wrote: > > > > Do we even need this list anymore? If the ntdom stuff > > has gone to the main branch, then there isn't really a > > need for an 'ntdom' discussion list, unless we want > > specific traffic to come here. (But I don't > > see a samba-printing or samba-time list either) > > > > Just curious. > > I have been wondering about this as well for a few weeks. > In fact, I thinking posting administration of stable Samba PDC > on samba@samba.org would provide for less redundancy. > > I just checked on membership. samba-ntdom has about 2,300 > members (~600 of these are digested). Samba@samba.org has about > 4,300 (~3000 are digested). > > What do people say? Has this list provided it purposes and > should be merged back in samba@samba.org? I would personally > love one less mailing list to read. :-) And it has been a little > less than one topic recently. > > You folks decide. > > > > > > > Cheers, jerry > ---------------------------------------------------------------------- > /\ Gerald (Jerry) Carter Professional Services > \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com > http://www.samba.org/ SAMBA Team jerry@samba.org > http://www.plainjoe.org/ jerry@plainjoe.org > > "...a hundred billion castaways looking for a home." > - Sting "Message in a Bottle" ( 1979 ) > > From grunstra at grunstra.nl Thu Apr 19 13:34:16 2001 From: grunstra at grunstra.nl (Grunstra Architecten Groep bna) Date: Tue Dec 2 02:34:20 2003 Subject: inet.d or deamon Message-ID: <3ADEE957.2D2951EA@grunstra.nl> Hello dancers, We have Samba on Solaris 2.7. In an administrators book I read you can run Samba as a deamon or by inet.d (like we do now). What are the pro's and cons for both? best regards, Wim Benes   From MMcEldowney at deltaregional.com Thu Apr 19 13:41:36 2001 From: MMcEldowney at deltaregional.com (McEldowney, Michael) Date: Tue Dec 2 02:34:20 2003 Subject: Newbie ? Message-ID: Help us help you.? I'm confused about what you are attemping here ( I've only had one cup of coffee this morning, so bear with me ;).? What do you mean your about to upgrade to Win200 *and* Linux on others?? The more detail you can give the list the better. -----Original Message----- From: Brandon Caudle [mailto:bcaudle@hotmail.com] Sent: Wednesday, April 18, 2001 4:44 PM To: samba-ntdom@samba.org Subject: Newbie ? Hi, ? Question for all you. I'm new to linux (as you can tell) and I have a linux server in my office and we are running Suse 7.1 and Samba 2.0.7.? We are about to upgrade to Windows 2000 and Linux on others (because of ME's stability issues) and I have no clue how (except for the unzipping and taring of the file). Really I need some real basic help.? If you can help at all please email me ? Thanks ? Brandon Caudle ? _____ ? Get your FREE download of MSN Explorer at http://explorer.msn.com From jeremy at valinux.com Thu Apr 19 13:39:35 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:20 2003 Subject: Proposed patch for Samba-2.0.7 to allow Solaris open more than 1014 (or rlim_fd_max) files In-Reply-To: ; from e9125884@student.tuwien.ac.at on Thu, Apr 19, 2001 at 01:31:03PM +0200 References: Message-ID: <20010419063935.A18269@valinux.com> On Thu, Apr 19, 2001 at 01:31:03PM +0200, Gerhard Wiesinger wrote: > On Fri, 2 Feb 2001, Gerhard Wiesinger wrote: > > Why was the rlimit patch from Eric not integrated into 2.0.8? Because 2.0.8 was a security bugfix *only*. No new features for the sake of stability. 2.2 includes this fix. Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From dl at tyfon.net Thu Apr 19 14:11:25 2001 From: dl at tyfon.net (Dan Larsson) Date: Tue Dec 2 02:34:20 2003 Subject: Stable enough? Message-ID: <20010419160956.S26061-100000@hq1.tyfon.net> Is samba-2.2 stable enough for use on production servers or should I stick with samba-2.0.8 a while longer? Regards +------ Dan Larsson | Tel: +46 8 550 120 21 Tyfon Svenska AB | Fax: +46 8 550 120 02 GPG and PGP keys | finger dl@hq1.tyfon.net From sean at compu-aid.com Thu Apr 19 14:12:05 2001 From: sean at compu-aid.com (Sean E. Millichamp) Date: Tue Dec 2 02:34:20 2003 Subject: FW: samba-ntdom needed any more? In-Reply-To: <20010419003728.Q22316@pogo.plainjoe.org> Message-ID: On Thu, 19 Apr 2001, Gerald Carter wrote: > For now, I'm going to monitor samba more due to the initial > release of 2.2.0. However, I do feel that should this list remain, > it should not be for "How do I configure my Samba 2.2.0 PDC?" > That should be on samba@... since it will benefit more people. > This list should be for testing new features in Samba related to > NT domains. Samba-techical should remain for coordinating > development. Well, it seems to me that this list gets/got a lot of postings that really had nothing to do with NT PDC questions. I think what might make the most sense is to shut this list down and everyone who wants to discuss the in-production PDC features can move to samba@. Then create a new list called like samba-beta or samba-bleedingedge (too long, I know :) and that way you'd be more likely to get the people back on the list who really are running (or wanting to run) the bleeding edge beta code. I think there are probably a lot of people subscribed to both the samba and samba-ntdom lists. As for the folks who don't resub to either list - well, I guess that means it just wasn't interesting enough for them. It's not hard to issue a subcribe request or two if you really want to be on the list. Sure, some might argue that the PDC functionality is important enough to have it's own list, but a lot of people seem to not know where to draw the line between PDC problems and general config problems (perhaps the new 2.2.0 docs will help) and there seems to be a lot of crossover on what types of questions are asked. You could also argue that topics such as setting up roaming profiles and/or policies are high traffic and deserve their own list in addition to a "getting PDC working" list. Sean ------------------------------------------ Sean E. Millichamp, Consultant Ingematics - A Division of Compu-Aid, Inc. From tony at growzone.com.au Thu Apr 19 14:33:55 2001 From: tony at growzone.com.au (Tony Nugent) Date: Tue Dec 2 02:34:20 2003 Subject: Multiple samba server egarding In-Reply-To: message-id <000e01c0c46d$8c6013c0$5664a8c0@aryabhatta> of Sat, Apr 14 04:29:13 2001 Message-ID: <200104191433.f3JEXth24852@gandalf.linuxworks.com.au> On Sat Apr 14 2001 at 04:29, "santhosh" wrote: > Content-Type: text/html; > charset="iso-8859-1" > Content-Transfer-Encoding: quoted-printable Please don't pollute email lists with this rubbish. > I have already setup a samba pdc . I have lready instllaed another linux = > machine in whic samba is installed. I would like to add the second = > machine as a part of samba pdc machine. > My aim is to share a folder (read & write)to all users who are logging = > to samba pdc. > How can I achieve this? > > Santhosh kumar.S > lecturer > E&C Dept samba cannot (yet) act as a full PDC or a BDC. samba does an excellent job of local domain master, often that is all that is needed in a network. You cannot (yet) have more than one samba box on a network in the capacity of ldm/pdc/bdc. Get one of them to act as the logon/wins server and ldm, with the others configured as clients (with settings like "wins server =", "logon server =", "remote announce =", and so on). Make sure windows logon names can be resolved to local unix and smbpasswd users on each (via local accounts or smbuser entries). Then away you go... it works just fine. I have exactly this sort of arrangement around me right now - one linux box is the main logon and wins server, the others (several) are all configured as NT clients. I have full netbios access to them all, from everywhere on the LAN. Cheers Tony From dwcjr at inethouston.net Thu Apr 19 14:44:21 2001 From: dwcjr at inethouston.net (David W. Chapman Jr.) Date: Tue Dec 2 02:34:20 2003 Subject: Samba 2.2.0 released ! References: <3ADC9351.AE4F387F@valinux.com> <3ADEDF53.6AE8249F@research.bell-labs.com> Message-ID: <01c401c0c8df$389624c0$931576d8@inethouston.net> > Jeremy Allison wrote: > > > The Samba Team is pleased to announce a new major release of Samba, > > Samba 2.2.0. > > > > Support for server supported Access Control Lists (ACLs). > > This release contains support for the following filesystems: > > > > Solaris 2.6+ > > SGI Irix > > Linux Kernel with ACL patch from http://acl.bestbits.at > > Linux Kernel with XFS ACL support. > > Caldera/SCO UnixWare > > IBM AIX > > FreeBSD (with external patch) > > > > Where would I get the external patch for freebsd? First I believe that you have to run -current first and I'm not sure if the ACL has been committed yet for sure. But pretty soon, I'll be modifying the freebsd port to detect freebsd 5 and configure samba 2.2.0 for ACLs. From gcarter at valinux.com Thu Apr 19 09:47:10 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:20 2003 Subject: Proposed patch for Samba-2.0.7 to allow Solaris open more than 1014 (or rlim_fd_max) files In-Reply-To: ; from e9125884@student.tuwien.ac.at on Thu, Apr 19, 2001 at 06:31:03 -0500 References: Message-ID: <20010419044710.G29384@pogo.plainjoe.org> On Thu, 19 Apr 2001 06:31:03 Gerhard Wiesinger wrote: > > Why was the rlimit patch from Eric not integrated into 2.0.8? 2.0.8 was a security release only. with a minor exceptions. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From gcarter at valinux.com Thu Apr 19 15:05:27 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:20 2003 Subject: Proposed patch for Samba-2.0.7 to allow Solaris open more than 1014 (or rlim_fd_max) files In-Reply-To: <20010419044710.G29384@pogo.plainjoe.org> Message-ID: On Thu, 19 Apr 2001, Gerald Carter wrote: > On Thu, 19 Apr 2001 06:31:03 Gerhard Wiesinger wrote: > > > > Why was the rlimit patch from Eric not integrated into 2.0.8? > > 2.0.8 was a security release only. with a minor exceptions. I should also add the 2.0 is no longer being developed. All efforts are focuesed on HEAD and 2.2 jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From abrock at georgefox.edu Thu Apr 19 15:22:14 2001 From: abrock at georgefox.edu (Anthony Brock) Date: Tue Dec 2 02:34:20 2003 Subject: Domain Groups In-Reply-To: Message-ID: <5.0.2.1.2.20010419082120.02384df0@mail.georgefox.edu> At 10:30 PM 04/18/2001 -0700, gcarter@valinux.com wrote: >On Wed, 18 Apr 2001 14:23:49 Ely Zavin wrote: > >> I start running samba-2.2.0 > >> Everything looks good. Thanks samba team for the great job. > >> Only one question. > >> How I can map unix groups to NT Domain groups? > >> Before it was domaingroupmap file. > >> Ely Zavin. > >Samba 2.2.0 servers groups out of /etc/group. Domain group >mapping support is not implemented right now. Thanks for the reply! I asked this question (and a couple others) about 2 weeks ago, and never received a reply. Thanks for the info! Tony ****************************************************************************** * Anthony Brock abrock@georgefox.edu * * Director of Network Services George Fox University * ****************************************************************************** From gcarter at valinux.com Thu Apr 19 15:34:19 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:20 2003 Subject: Domain Groups In-Reply-To: <5.0.2.1.2.20010419082120.02384df0@mail.georgefox.edu> Message-ID: On Thu, 19 Apr 2001, Anthony Brock wrote: > Thanks for the reply! I asked this question (and a couple others) about 2 > weeks ago, and never received a reply. Thanks for the info! Sorry. I get buried in email sometime.... :-) jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From kimmo.akkanen at remedium.fi Thu Apr 19 14:36:34 2001 From: kimmo.akkanen at remedium.fi (Kimmo Akkanen) Date: Tue Dec 2 02:34:20 2003 Subject: Malformed trust account file? Message-ID: <3ADEF7F2.688DA8CE@remedium.fi> Hi! Our server's trust account file (DOMAIN.SID?) has somehow become corrupt, logfiles say sth. like this: --- Malformed trust account file, was 40, should be 45. --- ??? How can I create a new one, NT-PC's won't logon now until I rid them from the domain and put back on? Thanks! -- Kimmo Akkanen IT-Officer Remedium Ltd./Oy phone. +358 9 6226 7125 cell. +358 40 9000 125 fax. +358 9 6226 7114 kimmo.akkanen@remedium.fi From ink at inconnu.isu.edu Thu Apr 19 16:04:43 2001 From: ink at inconnu.isu.edu (Craig Kelley) Date: Tue Dec 2 02:34:20 2003 Subject: FW: samba-ntdom needed any more? In-Reply-To: <3ADE9F87.3060200@cdt.luth.se> Message-ID: On Thu, 19 Apr 2001, James Nord wrote: > Gerald Carter wrote: > > > On Thu, 19 Apr 2001 00:24:09 Elliot Mackenzie wrote: > > > >> The NT domain feature is a very important (still relatively new) > >> feature that a lot of people (including myself) have at one > >> stage experienced problems with. The fact that we get up > >> to 30 emails a day through this mailing list seems to > >> suggest that there are sufficient people who use this > >> list to make it worthwhile. I would personally find it > >> more irritating having to double or triple my mail traffic > >> each day just to receive the same emails I do currently (I am > >> not a part of samba-main). > > > > > > I don;t think anyone is implying that the Domain feature > > is not important. I just don't want to be answering identical > > questions on Samba and samba-ntdom. > > Then what about subscribing samba@samba.org to samba-ntdom for a > transitional period. > > - Okay this could end up with some people getting 2 of the same emails > but as we are talking Samba/Unix'ish I'm guessing that most people have > the abiltiy to do some mailbox filtering to get rid of the duplicates. > > In my view this > > > This list should be for testing new features in Samba related to > > NT domains. Samba-techical should remain for coordinating > > development. > > I would agree with that and it is how I have actually seen it in the past. What about changing the samba-ntdom list to samba-testing? It's purpose would then be more clear, and we wouldn't have confusion over which list to post questions on. The general 'samba' list gets a LOT of traffic, and I don't really want to subscribe to it in order to take part in secondary development of Samba. -- It won't be long before the CPU is a card in a slot on your ATX videoboard Craig Kelley -- kellcrai@isu.edu http://www.isu.edu/~kellcrai finger ink@inconnu.isu.edu for PGP block From ink at inconnu.isu.edu Thu Apr 19 16:10:00 2001 From: ink at inconnu.isu.edu (Craig Kelley) Date: Tue Dec 2 02:34:20 2003 Subject: samba-ntdom needed any more? In-Reply-To: <20010419001203.C22316@pogo.plainjoe.org> Message-ID: On Thu, 19 Apr 2001, Gerald Carter wrote: > > On Wed, 18 Apr 2001 14:53:11 Craig Kelley wrote: > > > > Do we even need this list anymore? If the ntdom stuff > > has gone to the main branch, then there isn't really a > > need for an 'ntdom' discussion list, unless we want > > specific traffic to come here. (But I don't > > see a samba-printing or samba-time list either) > > > > Just curious. > > I have been wondering about this as well for a few weeks. > In fact, I thinking posting administration of stable Samba PDC > on samba@samba.org would provide for less redundancy. > > I just checked on membership. samba-ntdom has about 2,300 > members (~600 of these are digested). Samba@samba.org has about > 4,300 (~3000 are digested). > > What do people say? Has this list provided it purposes and > should be merged back in samba@samba.org? I would personally > love one less mailing list to read. :-) And it has been a little > less than one topic recently. > > You folks decide. How about renaming it to samba-testing instead? It might step on the toes of the development list, but it would also take out some of the redundant posts over there. Reading through the messages over the last couple of days shows the confusion out there; many of them should have been posted to the general samba list and not here. -- It won't be long before the CPU is a card in a slot on your ATX videoboard Craig Kelley -- kellcrai@isu.edu http://www.isu.edu/~kellcrai finger ink@inconnu.isu.edu for PGP block From jbenedet at unm.edu Thu Apr 19 18:11:49 2001 From: jbenedet at unm.edu (John Benedetto) Date: Tue Dec 2 02:34:20 2003 Subject: samba-ntdom needed any more? (fwd) Message-ID: <4131198536.987678709@dhcp-200-0052.unm.edu> Gerald sent this to me, and I (assume) he meant for it to go to the entire list... - john ---------- Forwarded Message ---------- Date: Thursday, April 19, 2001 8:27 AM -0700 From: Gerald Carter To: "John T. Benedetto" Subject: Re: samba-ntdom needed any more? yOn Thu, 19 Apr 2001, John T. Benedetto wrote: > > I think folding it back in would be good idea (I, too, would like one > less list to read, though I wonder if it would reduce traffic all that > much, or just increase traffic on the main Samba list). My hope would be to remove some of the redundancy in answering questions. I'm also working on more documentation, so maybe that will help as well. Let me add that NT domain development is still going to continue with some experimental aspects such as LDAP, Kerberos, etc... so we may want to review how to best coordinate this. One option no one has mentioned to make it a moderated list. Of course then you need a moderator, but that is besides the point :-) How would people feel about this? Cheers, jerry ---------- End Forwarded Message ---------- From lobo at mental.com Thu Apr 19 17:26:04 2001 From: lobo at mental.com (Alexander Lobodzinski) Date: Tue Dec 2 02:34:20 2003 Subject: samba-ntdom needed any more? (fwd) In-Reply-To: John Benedetto's message of Thu, 19 Apr 2001 11:11:49 PDT <4131198536.987678709@dhcp-200-0052.unm.edu> Message-ID: <29567.987701164@mental.com> () One option no one has mentioned to make it a moderated list. Of course () then you need a moderator, but that is besides the point :-) How would () people feel about this? That's an easy one: a moderator would keep off-topic traffic away. So people interested in Samba for NT domains would like it, and people looking for knowledgeable people who can solve their printing, unsubscription, or whatever problems would dislike it. Ciao, Lobo From bgmilne at cae.co.za Thu Apr 19 17:57:46 2001 From: bgmilne at cae.co.za (Buchan Milne) Date: Tue Dec 2 02:34:20 2003 Subject: Samba 2.2.0 SRPMs available for Linux Mandrake 7.1 and 7.2 Message-ID: <3ADF271A.221F6FE4@cae.co.za> Hi All, I need to have samba 2.2.0 available on two production Linux Mandrake machines, and have built my own RPMs. I started from the latest Mandrake package for samba 2.0.7, and merged with the spec file provided in the new packaging/Mandrake directory of the samba 2.2.0 release. I have also migrated Mandrake's patched configuration files to packaging/Mandrake. Most of the patches from 2.0.7-25mdk have been migrated to 2.2.0, but there are a number that are not migrate ad used, and some that no longer take - and have been commented out. SRPMs, sources, patches and spec files for Mandrake 7.1 and 7.2 are available at http://www.cae.co.za/~bgmilne/mandrake. Please read the README.samba, and the changelog in the appropriate spec file, as there are a number of issues you should be aware of. Please note that I have not done extensive testing of either samba 2.2.0 as compiled by the spec file, nor the installation, upgrade, and removal scripts. All I know is that it works, and that I can join a windows 2000 pro machine to a domain controlled by a Linux Mandrake 7.2 box with the RPM I compiled from the SRPM. I will only be able to test the RPMs for Linux Mandrake 7.1 on the weekend. Subscibers of samba-ntdom@samba.org, please cc me directly as I am subscribed in digest mode, and may otherwise only read you mail next week once I have finished upgrading 45 Windows NT machines to Windows 2000 (if successful), or recompiling these RPMs a few times (if not successful!). ;-) Regards, Buchan P.S. for security-discuss: Sorry this took so long, the Samba team added a packaging/Mandrake directory :-), but made the changes to the packaging/RedHat directory :-( all since aplha3, so it took a bit longer than expected. -- |----------------Registered Linux User #182071-----------------| Buchan Milne Mechanical Engineer, Network Manager Cellphone * Work +27 82 472 2231 * +27 21 808 2497 Stellenbosch Automotive Engineering http://www.cae.co.za From edmundo at shitepie.net Thu Apr 19 17:59:10 2001 From: edmundo at shitepie.net (Stokes) Date: Tue Dec 2 02:34:20 2003 Subject: samba-ntdom needed any more? (fwd) References: <29567.987701164@mental.com> Message-ID: <00b601c0c8fa$705790e0$010aa8c0@shitepie> That sounds like a very good idea to me. Keeping the list on-topic would be very helpful. Stokes ----- Original Message ----- From: "Alexander Lobodzinski" To: Sent: Thursday, April 19, 2001 10:26 AM Subject: Re: samba-ntdom needed any more? (fwd) > () One option no one has mentioned to make it a moderated list. Of course > () then you need a moderator, but that is besides the point :-) How would > () people feel about this? > > That's an easy one: a moderator would keep off-topic traffic > away. So people interested in Samba for NT domains would like > it, and people looking for knowledgeable people who can solve > their printing, unsubscription, or whatever problems would > dislike it. > > Ciao, Lobo > > > From gcarter at valinux.com Thu Apr 19 17:56:01 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:20 2003 Subject: Samba 2.2.0 SRPMs available for Linux Mandrake 7.1 and 7.2 In-Reply-To: <3ADF271A.221F6FE4@cae.co.za> Message-ID: On Thu, 19 Apr 2001, Buchan Milne wrote: > Hi All, > > P.S. for security-discuss: Sorry this took so long, the Samba team > added a packaging/Mandrake directory :-), but made the changes to the > packaging/RedHat directory :-( all since aplha3, so it took a bit > longer than expected. Ironically enough I'm working on fixing this now and checking it into the main tree. I'll grab your SPEC files and integrate in the changes. Thanks to all who have passed these one to me. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From gcarter at valinux.com Thu Apr 19 13:08:47 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:20 2003 Subject: Samba 2.2.0 SRPMs available for Linux Mandrake 7.1 and 7.2 In-Reply-To: <3ADF271A.221F6FE4@cae.co.za> Message-ID: On Thu, 19 Apr 2001, Buchan Milne wrote: > SRPMs, sources, patches and spec files for Mandrake 7.1 and 7.2 are > available at http://www.cae.co.za/~bgmilne/mandrake. Please read the > README.samba, and the changelog in the appropriate spec file, as there > are a number of issues you should be aware of. Is there a DNS problem going on? Or is this a bad address? $ nslookup www.cae.co.za *** ns2.hdqt.valinux.com can't find www.cae.co.za: Non-existent host/domain Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From edmundo at shitepie.net Thu Apr 19 21:42:34 2001 From: edmundo at shitepie.net (Stokes) Date: Tue Dec 2 02:34:20 2003 Subject: samba-ntdom needed any more? (fwd) References: <86256A33.006E8F20.00@amoa.org> Message-ID: <002901c0c919$a5caf180$010aa8c0@shitepie> This is a very good set of points you have made. Fortunately the decision is not up to me. I was just putting in my opinion. However, who is to say that, just because the list is moderated, those people with problems other than NT Domain stuffs would at least get pointed in the right direction if they mistakenly sent their random samba problems to this list... Perhaps if, upon moderator refusal to allow a message to be posted, an automatic "general help" message were sent indicating other samba lists and web pages to look at for help, having a moderated samba-ntdom list would be a very efficient idea... Stokes note to ctooley@amoa.org: I assumed you wanted this posted to the list and only accidentally mailed it to me directly. If not, sorry. ----- Original Message ----- From: To: "Stokes" Sent: Thursday, April 19, 2001 1:17 PM Subject: Re: samba-ntdom needed any more? (fwd) > > > There are three reasons I don't like the idea of a moderated list, > 1) Moderators enter subjectivity to a situation, and while there have been > previous flame wars here, things are usually better off when everyone gets to > give their input. I like the fact that I got to report problems and I got > answers directly from the people working on the code. It may be annoying some > times, but we may never get to see the day when Samba becomes a non-issue > without that kind of interaction. > 2) A moderator adds another step to the process (unless you could find an > automated moderator) that takes even more time to get the question answered. > How many times do we see the subject of "URGENT PROBLEM" on this list, it may > not be urgent to you, but to the admin whose butt is on the line it sure is. > 3) I'd rather help someone with a problem that's slightly off topic and show > them the power of community based support than tell them to go somewhere else > and have them give up entirely. Sure maybe these questions should be asked in a > different forum but that can be noted at the end of an answer and not be the > only reply someone gets. > > Chris Tooley > > > > That sounds like a very good idea to me. Keeping the list on-topic would be > very helpful. > > Stokes > ----- Original Message ----- > From: "Alexander Lobodzinski" > To: > Sent: Thursday, April 19, 2001 10:26 AM > Subject: Re: samba-ntdom needed any more? (fwd) > > > > () One option no one has mentioned to make it a moderated list. Of course > > () then you need a moderator, but that is besides the point :-) How would > > () people feel about this? > > > > That's an easy one: a moderator would keep off-topic traffic > > away. So people interested in Samba for NT domains would like > > it, and people looking for knowledgeable people who can solve > > their printing, unsubscription, or whatever problems would > > dislike it. > > > > Ciao, Lobo > > > > > > > > > > > > From JJNishiyama at Email.cbe.ab.ca Thu Apr 19 22:06:07 2001 From: JJNishiyama at Email.cbe.ab.ca (Nishiyama, Jason J) Date: Tue Dec 2 02:34:21 2003 Subject: Help! Message-ID: I'm having a problem getting my samba server working properly as a domain login server. Whenever I try to login from a W95 client, I keep getting the error message "incorrect parameter". As far as I can tell, the workgroup name and the server name are different. I have included the HOSTNAME file as well as the hosts file below in case I have erroneously called the something the same. Any help would be greatly appreciated. My smb.conf file: *begin* [global] workgroup = School server string = AADAC Samba Server hosts allow = 10. 127. load printers = yes log file = /var/log/samba.%m max log size = 50 security = user encrypt passwords = no socket options = TCP_NODELAY local master = yes os level = 65 domain master = yes preferred master = yes domain logons = yes logon script = \\%L\home\netlogon\logon.bat logon path = \\%L\Profiles\%U logon home = \\%L\home\%U\Profiles wins support = yes dns proxy = no time server = yes [homes] comment = Home Directories browseable = no writable = yes [netlogon] comment = Network Logon Service path = /home/netlogon guest ok = no writable = no browseable = no [Profiles] path = /Profiles browseable = yes guest ok = yes *end* my "hosts" file: *begin* # For loopbacking. 127.0.0.1 localhost 10.1.1.1 aadac.ab.ca aadac 10.1.1.2 aadac.ab.ca office # End of hosts. *end* and my "HOSTNAME" file *begin* aadac.ab.ca *end* From bgjohnson at tasc.com Thu Apr 19 22:32:13 2001 From: bgjohnson at tasc.com (Johnson, Byron G.) Date: Tue Dec 2 02:34:21 2003 Subject: Upgrade from 2.0.7 to 2.2.0 Message-ID: I am about ready to upgrade from 2.0.7 to 2.2.0 on a RedHat 6.2 system. I have the .rpm file but would like to know ahead of time what "unknowns" I might encounter. 1) Will I have to re-create my password file? 2) Will I have to edit/make any changes to the smb.conf file? Are there any other problems / challenges I might encounter? thanks, -- Byron G. Johnson Business Development Manager, Enterprise Security <<...OLE_Obj...>> 4801 Stonecroft Blvd Chantilly, VA 20151-3822 Voice: (703) 633-8478 Fax: (703) 449-1087 Cellular: (703) 819-6423 Pager: (888) 751-4116 Home: (703) 753-0204 E-Mail: bgjohnson@tasc.com From anders at aae.wisc.edu Thu Apr 19 22:43:45 2001 From: anders at aae.wisc.edu (Anders C. Thorsen) Date: Tue Dec 2 02:34:21 2003 Subject: samba-ntdom needed any more? In-Reply-To: <20010419001203.C22316@pogo.plainjoe.org>; from gcarter@valinux.com on Thu, Apr 19, 2001 at 12:12:03AM -0500 References: <20010419001203.C22316@pogo.plainjoe.org> Message-ID: <20010419174345.A13648@aae.wisc.edu> I agree. Much of the discussions the last 12 months on samba-ntdom has been either discussions that fit better in samba@samba.org or samba-technical@samba.org --Anders On Thu, Apr 19, 2001 at 12:12:03AM -0500, Gerald Carter wrote: > > On Wed, 18 Apr 2001 14:53:11 Craig Kelley wrote: > > > > Do we even need this list anymore? If the ntdom stuff > > has gone to the main branch, then there isn't really a > > need for an 'ntdom' discussion list, unless we want > > specific traffic to come here. (But I don't > > see a samba-printing or samba-time list either) > > > > Just curious. > > I have been wondering about this as well for a few weeks. > In fact, I thinking posting administration of stable Samba PDC > on samba@samba.org would provide for less redundancy. > > I just checked on membership. samba-ntdom has about 2,300 > members (~600 of these are digested). Samba@samba.org has about > 4,300 (~3000 are digested). > > What do people say? Has this list provided it purposes and > should be merged back in samba@samba.org? I would personally > love one less mailing list to read. :-) And it has been a little > less than one topic recently. > > You folks decide. > > > > > > > Cheers, jerry > ---------------------------------------------------------------------- > /\ Gerald (Jerry) Carter Professional Services > \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com > http://www.samba.org/ SAMBA Team jerry@samba.org > http://www.plainjoe.org/ jerry@plainjoe.org > > "...a hundred billion castaways looking for a home." > - Sting "Message in a Bottle" ( 1979 ) > -- --Anders ---------------------------------------- Only two things are infinite. The universe and human stupidity. Although, I am unsure of the former. Albert Einstein From jeremy at valinux.com Tue Apr 17 19:16:14 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:21 2003 Subject: Samba 2.2.0 - glossy press release :-). Message-ID: <3ADC967E.3C7DBA69@valinux.com> In the interests of full disclosure, here's the glossy press release (with html as well ! :-). Jeremy. --------------------------------------------------------------------- Samba 2.2.0 - Powering the next generation of Network Attached -------------------------------------------------------------- Storage. -------- 17 April 2001. The Samba Team is proud to announce a new major release of Samba, version 2.2.0. This release includes significant feature enhancements for Samba, and sets the standard for UNIX? and Microsoft Windows? integration. Enhancements include : o Integration of server terminated leases (Windows "oplocks") with UNIX NFS sharing (Linux 2.4 kernel and IRIX only). Complete data and locking integrity when sharing files between UNIX and Windows. o Ability to act as an authentication source for Windows 2000? and Windows NT? clients, allowing savings on the purchase of Microsoft? Client Access Licenses. o Full support for the automatic downloading of Windows 2000 and Windows NT printer drivers, providing the first full implementation of the Windows NT point-and-print functionality independent of Microsoft code. o Unification of Windows 2000 and Windows NT Access control lists (ACLs) with UNIX Access control lists. Allow Windows clients to directly manipulate UNIX Access control entries as though they were Windows ACLs. o Single sign-on integration using the winbind server (available separately). Allow UNIX servers to use Windows 2000 and Windows NT Domain controllers as a user and group account server. Manage all user and group accounts from a single source. o Microsoft Distributed File System? (DFS) support. Samba 2.2.0 can act as a DFS server in a Microsoft network. o Share level security setting. Allow security on Samba shares to be set by Microsoft client tools. o Many other feature enhancements and bug fixes. About Samba ----------- Samba is an Open Source/Free Software implementation of the Microsoft CIFS/SMB protocols for UNIX systems. In development for ten years, Samba is considered to be the reference implementation of the CIFS/SMB protocol for UNIX systems. Samba test tools are used by all the CIFS/SMB vendors to test and fix their protocol implementations. Samba is currently used in Network attached storage (NAS) and other products from the following vendors (Note: this does not imply endorsement by these vendors, please contact the vendor marketing departments separately for comments). IBM?, SGI? (Samba for IRIX), Sun Microsystems ?(Cobalt Qube), Hewlett Packard? (CIFS/9000), VERITAS?, VA Linux Systems?, REALM Information Technologies ?, Network Concierge?, Procom ? and many others. In addition, Samba is shipped as a standard part of Linux? offerings from Linux vendors such as Red Hat?, Caldera?, SuSE?, Mandrake?, TurboLinux ? and others. Samba is being used worldwide to solve the problem of integrating hetrogeneous networks by corporations such as Agilent Technologies ?, CISCO Systems ?, and many others in addition to educational establishments and individuals Best of all Samba is an Open Source/Free software project, available under the GNU GPL license meaning that source code for Samba is freely available for anyone to modify and customize. Code from the Samba Team and individuals around the world has been integrated and tested to create Samba. In addition the following corporations have made significant donations of code, effort, testing facilities and support to make this release possible : Linuxcare (now TurboLinux), VA Linux Systems, Caldera, SGI, Hewlett Packard, VERITAS, IBM. This new release may be downloaded from our Web site at : http://www.samba.org For press enquiries about this release please contact either Jeremy Allison (jra@samba.org), Andrew Tridgell (tridge@samba.org) or John Terpstra (jht@samba.org). Samba - the SOURCE for Windows Networking ! -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- -------------- next part -------------- HTML attachment scrubbed and removed From jeremy at valinux.com Fri Apr 20 01:52:04 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:21 2003 Subject: Stable enough? In-Reply-To: <20010419160956.S26061-100000@hq1.tyfon.net>; from dl@tyfon.net on Thu, Apr 19, 2001 at 04:11:25PM +0200 References: <20010419160956.S26061-100000@hq1.tyfon.net> Message-ID: <20010419185204.B8655@valinux.com> On Thu, Apr 19, 2001 at 04:11:25PM +0200, Dan Larsson wrote: > Is samba-2.2 stable enough for use on production servers or should I stick > with samba-2.0.8 a while longer? Some people are running alpha3 in production... but "yer pays yer money and takes yer chance" :-) Having said that, all VA Linux samba servers are running 2.2 in production. Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From andre.doehn at econia.com Fri Apr 20 08:55:02 2001 From: andre.doehn at econia.com (andre.doehn@econia.com) Date: Tue Dec 2 02:34:21 2003 Subject: smnd: currently not implemented samba 2.2 Message-ID: hi list, i get this this message in the syslog: smbd[26872]: smbd/nttrans.c:call_nt_transact_ioctl(1776) smbd[26872]: call_nt_transact_ioctl: Currently not implemented. what service is currently not implemented? iam using samba 2.2 on linux machin as a pdc? here is my glaobal from smb.conf: [global] security = user status = yes workgroup = NTDOM netbios name = cgn-pdc interfaces = eth0 lo bind interfaces only = yes server string = Samba %v running on %h wins support = yes time server = yes encrypt passwords = yes domain logons = yes domain master = yes local master = yes preferred master = yes logon script = scripts\logon.bat logon home = \\%L\homes logon path = \\%L\Profiles\%U logon drive = z: domain admin group = @adm add user script = /usr/sbin/useradd -g smbcl -c Machine -d /dev/null -s /bin/false %m$ share modes=no os level=65 keepalive = 60 name resolve order = wins bcast host log level = 10 log file = /var/log/samba/log.%m socket options = IPTOS_LOWDELAY TCP_NODELAY any hints? bye andre From egb at us.ibm.com Fri Apr 20 13:20:15 2001 From: egb at us.ibm.com (Ed Bradford) Date: Tue Dec 2 02:34:21 2003 Subject: Mindcraft Message-ID: 2 questions. 1. Do you have Jeremy Allison's email address? 2. A while back there was a big press storm over Windows NT beating Linux using the ziff-davis NetBench and WebBench benchmarks. The Linux folks cried foul and the tests were re-run but the results still came out in favor of Windows. The latest Microsoft word I have found is: http://www.microsoft.com/ntserver/nts/news/msnw/nt4vLinux.asp Is this where things are today with respect to SAMBA versus Windows NT/2000 File services? Ed Your Windows 2000 Arborist and Linux Performance Comparisonist T/L 589-4410; Outside: 1-919-993-4410 egb@us.ibm.com From andre.doehn at econia.com Fri Apr 20 13:38:45 2001 From: andre.doehn at econia.com (andre.doehn@econia.com) Date: Tue Dec 2 02:34:21 2003 Subject: samba 2.2: user profiles were not updated when you restart samba-domain-member pc Message-ID: hi list, iam using samba 2.2 acting as a pdc - the userprofiles are stored on samba-shares but were only updated when you say "log off user" - when i modificate a file on my desktop and restart my win2k machine (not log off) the un-modified file from samba-pdc was copied back to my desktop :-( when i log off from my samba-domain-user win2k machine the file was updated??!! what iam doing wrong? andre From txkjohn at hotmail.com Fri Apr 20 13:39:41 2001 From: txkjohn at hotmail.com (John Humphrey) Date: Tue Dec 2 02:34:21 2003 Subject: WinNT, Win2K Profiles not working Message-ID: I've looked over the man pages and found some suggestions that I've been unsuccessful in implementing. The smb.conf man page states "...it is vital...not include a reference to the homes share (i.e. setting the parameter to \\%N\%U\profile_path will cause problems)." because of this, I want to use \\%N\profiles\%U but I get an error message each time an NT or Win2K client logs in. The error reads "Your roaming profile is not available. The operating system will log you in using you locally stored profile." When NT/Win2k users log off they get "Cannot update roamin profile. Contact your Network Administrator." I'll attach the relevant portions of my smb.conf file. [global] security = user os level = 65 preferred master = True domain master = True local master = yes domain logons = yes logon script = scripts\all.bat dns proxy = No wins support = Yes domain group map = /usr/local/samba/lib/domain-group.map guest account = pcguest preserve case = yes short case preserve = yes case sensitive = no logon path = \\%N\profiles\%U logon drive = i: logon home = \\%N\%U\profile [homes] comment = Home Directories read only = No browseable = No [netlogon] comment = Network Logon Service path = /usr/local/samba/share/netlogon guest ok = yes writable = no share modes = no [printer$] path = /usr/local/samba/printer comment = Win9x Printer Drivers public = yes writable = no browseable = yes [hplj4000n] path = /usr/local/samba/spool/p1 printer driver location = \\%L\printer$ comment = HP 4000N in Technology Office printable = yes printer driver = HP LaserJet 4000 Series PCL 6 public = yes [profiles] comment = Win32 profiles path = /usr/local/samba/profiles browseable = yes _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com From ely at txc.com Fri Apr 20 14:53:28 2001 From: ely at txc.com (Ely Zavin) Date: Tue Dec 2 02:34:21 2003 Subject: Samba-2.2.0 problem Message-ID: <3AE04D67.E690D049@txc.com> I am running samba-2.2.0 as PDC. I don't have any problem to authenticate users from WinNT and Win2000. But when Win98 user tried to login he got message: "The share name was not found. Be sure you typed it correctly." Following is part of my smb.conf file: workgroup = TEST security = user encrypt passwords = yes domain logons = yes Ely -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 2470 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.samba.org/archive/samba-ntdom/attachments/20010420/4bd52dbd/smime.bin From Staerk-Berlin at t-online.de Fri Apr 20 14:55:22 2001 From: Staerk-Berlin at t-online.de (=?iso-8859-1?Q?Ulrich_St=E4rk?=) Date: Tue Dec 2 02:34:21 2003 Subject: server stored user profiles Message-ID: <002601c0c9a9$ecd4d100$0a00a8c0@atb> Hi. I got samba 2.2 running as a pdc on my network with Win98 and Win2K clients. I got a little problem with my Win2K clients. Every time a user wants to log on to the domain it searches for a server stored user profile which it cannot find because I don't have any and I don't want any. I checked my smb.conf which is a modified version of the smb.conf.default shipped with the tarball but could not find any entry which accidently could have enabled server stored profiles. With my Win98 clients this problem does not occur. Can anyone please help me disable this? Uli -------------- next part -------------- HTML attachment scrubbed and removed From jodtmt at yahoo.it Fri Apr 20 15:02:22 2001 From: jodtmt at yahoo.it (=?iso-8859-1?q?.=20.?=) Date: Tue Dec 2 02:34:21 2003 Subject: samba 2.2, How to add users to the group? Message-ID: <20010420150222.60142.qmail@web13706.mail.yahoo.com> Hi list! I can't add user to a group. i'am using samba 2.2 acting as a pdc and a PC WinNT client. I added this row to /etc/group to include 2 user to the 'office' group: office::73:george,antony But after george logs onto the pdc and type 'net user george /domain' in the Dos Prompt, he can see himself only into the 'Domain Users' group. The samba log file of the client says: "make_dom_gids: unknown well-known alias RID office,/7" I'll attach the relevant portions of my smb.conf file. [global] workgroup = SAMBAGROUP server string = Samba %v on (%L) os level = 34 local master = yes preferred master = yes domain master = yes domain logons = yes admin users = root domain admin group = @adm guest account = guestpc encrypt passwords = yes security = domain netbios aliases = CICCIOMACHINE include = /usr/local/samba/lib/smb.conf.%L debug level = 3 log file = /usr/local/samba/logs/log.%m max log size = 100 debug timestamp = yes logon script = palogon.exe logon path = \\%N\homeuser [homes] comment = Home Directories browseable = no read only = no create mode = 0750 I tried to use the following option too: domain group map = /usr/local/samba/private/groups.mapping but "testparm" answer with: 'Unknown parameter encountered: "domain group map"' And what about next option: "domain groups = office" ? Thanks ______________________________________________________________________ Do You Yahoo!? Il tuo indirizzo gratis e per sempre @yahoo.it su http://mail.yahoo.it From Staerk-Berlin at t-online.de Fri Apr 20 15:41:46 2001 From: Staerk-Berlin at t-online.de (=?iso-8859-1?Q?Ulrich_St=E4rk?=) Date: Tue Dec 2 02:34:21 2003 Subject: another stuipid questions Message-ID: <000c01c0c9b0$6b779500$0a00a8c0@atb> this worked find with sambe 2.0.7 [%U's Heim] comment = %U's Heimatsverzeichnis path = /home/%U writable = yes browsable = yes now this doesn't work anymore does anyone know why? Uli -------------- next part -------------- HTML attachment scrubbed and removed From corey at gactr.uga.edu Fri Apr 20 16:56:19 2001 From: corey at gactr.uga.edu (Corey Doster) Date: Tue Dec 2 02:34:21 2003 Subject: Samba 2.2.0 PDC / Network Appliance Filer Question Message-ID: <3AE06A33.20579763@gactr.uga.edu> Hi, I was curious to see if anyone has tried to join a Network Appliance filer running newer versions of DataONTAP to a Samba 2.2.0 PDC domain. Does it work? If not, is it possible to NFS mount the filesystems onto the Samba 2.2.0 PDC and re-export them without running into file-locking issues? We would most likely implement this with FreeBSD 4.x, but are open to using Linux if it offers advantages in this arena. I have read through the older postings regarding this situation using 2.07 and older versions of the NetApp OS (there have been 2 if not 3 revisions of the DataONTAP since these postings). In these cases, it was reported to be an issue with the NetApp code; just curious if the new Samba code or the NetApp folks have made any adjustments that affect this situation (but didn't get posted to the list?) I don't know exactly what I should be looking for on the NetApp support pages with regards to a bug fix that addresses this issue? We are considering purchasing some NetApp F85 filers, but I was hoping someone could speak to the current status of the Samba PDC/NetApp situation (and make suggestions/recommendations) before we make any solid decisions? Thanks in advance, corey From mthomas at rhrk.uni-kl.de Fri Apr 20 16:57:43 2001 From: mthomas at rhrk.uni-kl.de (Martin Thomas) Date: Tue Dec 2 02:34:21 2003 Subject: another stuipid questions References: <000c01c0c9b0$6b779500$0a00a8c0@atb> Message-ID: <000801c0c9bb$045f36b0$1332f683@arubi.unikl.de> I also had problems using %U (and %u), it seems they don't work in samba 2.2 (this is, they do not get substituted with the user-name) Why don't you use the [homes] share? - This works fine here, since [home] will be substituted with the username and %S will be substituted with the sharename. [homes] comment = %Ss Home-Share browseable = no read only = no guest ok = no path = /home/%S valid users = %S create mask = 0600 directory mask = 0700 # oplocks = false veto files = /.*/Desktop/ hide dot files = yes # locking = no Martin ----- Original Message ----- From: Ulrich St?rk To: samba-ntdom@lists.samba.org Sent: Friday, April 20, 2001 5:41 PM Subject: another stuipid questions this worked find with sambe 2.0.7 [%U's Heim] comment = %U's Heimatsverzeichnis path = /home/%U writable = yes browsable = yes now this doesn't work anymore does anyone know why? Uli From ctresco at economics.mit.edu Fri Apr 20 16:54:40 2001 From: ctresco at economics.mit.edu (Christopher Tresco) Date: Tue Dec 2 02:34:21 2003 Subject: Samba 2.2.0 PDC / Network Appliance Filer Question In-Reply-To: <3AE06A33.20579763@gactr.uga.edu> Message-ID: I believe the file locking issue has been fixed...someone verify this... Not sure bout the netapps, although it would be good to know since I am in the market... Chris > -----Original Message----- > From: samba-ntdom-admin@lists.samba.org > [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Corey Doster > Sent: Friday, April 20, 2001 12:56 PM > To: samba-ntdom@lists.samba.org > Subject: Samba 2.2.0 PDC / Network Appliance Filer Question > > > Hi, > > I was curious to see if anyone has tried to join a Network Appliance > filer running newer > versions of DataONTAP to a Samba 2.2.0 PDC domain. Does it work? > > If not, is it possible to NFS mount the filesystems onto the Samba 2.2.0 > PDC and re-export them without running into file-locking issues? We > would most likely implement this with FreeBSD 4.x, > but are open to using Linux if it offers advantages in this arena. > > I have read through the older postings regarding this situation using > 2.07 and older > versions of the NetApp OS (there have been 2 if not 3 revisions of the > DataONTAP since > these postings). > > In these cases, it was reported to be an issue with the NetApp code; > just curious if the new Samba code or the NetApp folks have made any > adjustments that affect this situation > (but didn't get posted to the list?) > > I don't know exactly what I should be looking for on the NetApp support > pages with regards to a bug fix that addresses this issue? > > We are considering purchasing some NetApp F85 filers, but I was hoping > someone could speak > to the current status of the Samba PDC/NetApp situation (and make > suggestions/recommendations) before we make any solid decisions? > > > Thanks in advance, > corey > > > From abcorte at brhs.com.br Fri Apr 20 17:09:50 2001 From: abcorte at brhs.com.br (Ab Corte Real) Date: Tue Dec 2 02:34:21 2003 Subject: Problem with the include file.. Message-ID: <000e01c0c9bc$b6e6fd80$a4fcf9c8@gerencia> Hi, I am with a problem using the include file option with samba 2.0.7 running on a mandrake 7.2 system, my samba box is working like a PDC just fine, but i want some users to be allowed to log on (authenticate) just on their machines, so i read in the docs that i would do that inserting a line on the smb.conf file "include = /etc/smb.conf.%m" so samba were try to look for these files and include on the major smb.conf file the lines. So i created a file called /etc/smb.conf.cyro but it didn't work (cyro is the netbios name of a windows 98 machine). When i run testparm it say's that it couldn't find any smb.conf. file. What's wrong? How can i make it work? Thanks very much for the help. Cyro -------------- next part -------------- HTML attachment scrubbed and removed From MMcEldowney at deltaregional.com Fri Apr 20 17:13:31 2001 From: MMcEldowney at deltaregional.com (McEldowney, Michael) Date: Tue Dec 2 02:34:21 2003 Subject: Mindcraft Message-ID: First, I can't help you with Jeremy's email address. Second, I reread the article, and I'm still not impressed with NT. Don't listen to the anti-Linux hype. A lot of the information in the article is opinion, not fact, and what facts they do present are no longer true, such as the memory and file size limits. Whomever wrote the article is very clever in masking NT's pitfalls. For instance, they claim that "Administrators are required to re-link and reload kernel to add features to OS" for Linux. True. Same for NT, they just do the relinking and reloading for you, and call it a Service Pack. Another point they try to make is "Historically, in order to perform optimally, applications need to be recompiled when the OS is upgraded." Hmmm, ever see the "Minimum System Requirements" section on the side of a shrink-wrap package for something that runs on an MS OS? Notice the minimum OS seems to be Win98 anymore? Whatever happened to version 3.11, or win95? Sounds like you'll have to upgrade. Hmm. Sounds pretty similar to me. I could pick apart more of it, but I think you get the gist. My bottom line is uptime. The article has no mention of uptime guarantees from Microsoft, just from OEMs. That's interesting. Just to note my experiences: 1 high-end compaq NT server that _MUST_ be rebooted at least monthly. 4 high-end Dell servers that need frequent restarts. 2 Linux servers, low-end, that out perform the high-end boxes: one used for Samba (which has replaced 3 NT servers so far, and more to come ;) the other for system interfaces (medical stuff) ***Neither have failed or needed rebooted in over 2 years.*** That's why I use Linux. Mike > -----Original Message----- > From: Ed Bradford [mailto:egb@us.ibm.com] > Sent: Friday, April 20, 2001 8:20 AM > To: samba-ntdom@samba.org > Subject: Mindcraft > > > 2 questions. > 1. Do you have Jeremy Allison's email address? > 2. A while back there was a big press storm over Windows NT > beating Linux > using the ziff-davis NetBench and WebBench benchmarks. The > Linux folks > cried foul and the tests were re-run but the results still > came out in > favor of > Windows. > > The latest Microsoft word I have found is: > > http://www.microsoft.com/ntserver/nts/news/msnw/nt4vLinux.asp > > Is this where things are today with respect to SAMBA versus Windows > NT/2000 File services? > > Ed > > Your Windows 2000 Arborist and Linux Performance Comparisonist > T/L 589-4410; Outside: 1-919-993-4410 > egb@us.ibm.com > > From jodtmt at yahoo.it Fri Apr 20 17:30:20 2001 From: jodtmt at yahoo.it (=?iso-8859-1?q?.=20.?=) Date: Tue Dec 2 02:34:21 2003 Subject: samba 2.2alpha3, How to map Unix group into Windows NT global group? Message-ID: <20010420173020.77765.qmail@web13701.mail.yahoo.com> Hi list! I can't add user to a group. i'am using samba 2.2 acting as a pdc and a PC WinNT client. I'd like to kwnow if there's a way to map a Unix group into a WinNT global group. Thanks ______________________________________________________________________ Do You Yahoo!? Il tuo indirizzo gratis e per sempre @yahoo.it su http://mail.yahoo.it From JJNishiyama at Email.cbe.ab.ca Fri Apr 20 17:55:49 2001 From: JJNishiyama at Email.cbe.ab.ca (Nishiyama, Jason J) Date: Tue Dec 2 02:34:21 2003 Subject: Help! Message-ID: That seems to have helped! It's working now!!!! Thanks!!! -----Original Message----- From: Stephen Atkins [mailto:stephen.atkins@home.com] Sent: Thursday, April 19, 2001 4:29 PM To: Nishiyama, Jason J Subject: RE: Help! Try making the backslashes in your logon script/path/home forward slashes. Even if they are stored on a samba share (on a nt server) they need to be forward slashes. Also the logon script that runs should not be a complete path, only the file name. The path is found in the [NETLOGON] description. BTW: Glad to see fellow Albertans using Samba. Stephen Atkins satkins@skilouise.com From JJNishiyama at Email.cbe.ab.ca Fri Apr 20 17:56:46 2001 From: JJNishiyama at Email.cbe.ab.ca (Nishiyama, Jason J) Date: Tue Dec 2 02:34:21 2003 Subject: Help! Message-ID: I was doing that too... changed it and some config stuff and it's working now! Thanks! Jason. -----Original Message----- From: elektron [mailto:R.Kolesnik@elka.pw.edu.pl] Sent: Wednesday, April 26, 2000 11:54 PM To: Nishiyama, Jason J Subject: Re: Help! Hi there I did stupid thing maybe you too as name of domain i typed name of samba server - off course should be the name of domain (WORKGROUP=xxx) Romek From linux at fenix.uam.mx Fri Apr 20 18:06:53 2001 From: linux at fenix.uam.mx (Lista linux) Date: Tue Dec 2 02:34:21 2003 Subject: server stored user profiles In-Reply-To: <002601c0c9a9$ecd4d100$0a00a8c0@atb> Message-ID: hi, as far as i can see, the problem is not with samba, it's with w2k. disable roaming profiles for your user at the w2k computer. romy From linux at fenix.uam.mx Fri Apr 20 18:09:35 2001 From: linux at fenix.uam.mx (Lista linux) Date: Tue Dec 2 02:34:21 2003 Subject: WinNT, Win2K Profiles not working In-Reply-To: Message-ID: Hi, john, does \\%N\profiles\%U does exists? you must create all necesary share before you login a computer. romy. On Fri, 20 Apr 2001, John Humphrey wrote: > I've looked over the man pages and found some suggestions that I've been > unsuccessful in implementing. The smb.conf man page states > > "...it is vital...not include a reference to the homes share (i.e. setting > the parameter to \\%N\%U\profile_path will cause problems)." > > because of this, I want to use \\%N\profiles\%U but I get an error message > each time an NT or Win2K client logs in. The error reads "Your roaming > profile is not available. The operating system will log you in using you > locally stored profile." When NT/Win2k users log off they get "Cannot update > roamin profile. Contact your Network Administrator." I'll attach the > relevant portions of my smb.conf file. > > [global] > security = user > os level = 65 > preferred master = True > domain master = True > local master = yes > domain logons = yes > logon script = scripts\all.bat > dns proxy = No > wins support = Yes > domain group map = /usr/local/samba/lib/domain-group.map > guest account = pcguest > preserve case = yes > short case preserve = yes > case sensitive = no > logon path = \\%N\profiles\%U > logon drive = i: > logon home = \\%N\%U\profile > [homes] > comment = Home Directories > read only = No > browseable = No > [netlogon] > comment = Network Logon Service > path = /usr/local/samba/share/netlogon > guest ok = yes > writable = no > share modes = no > [printer$] > path = /usr/local/samba/printer > comment = Win9x Printer Drivers > public = yes > writable = no > browseable = yes > [hplj4000n] > path = /usr/local/samba/spool/p1 > printer driver location = \\%L\printer$ > comment = HP 4000N in Technology Office > printable = yes > printer driver = HP LaserJet 4000 Series PCL 6 > public = yes > [profiles] > comment = Win32 profiles > path = /usr/local/samba/profiles > browseable = yes > > > > > _________________________________________________________________ > Get your FREE download of MSN Explorer at http://explorer.msn.com > > -- Ing. Romy Perez Moreno e-mail: romy@fenix.uam.mx, romy@correo.azc.uam.mx http://fenix.uam.mx/romy tel: 5318 9067 / 5382-7157 From don_mccall at hp.com Fri Apr 20 19:07:06 2001 From: don_mccall at hp.com (MCCALL,DON (HP-USA,ex1)) Date: Tue Dec 2 02:34:21 2003 Subject: Samba-2.2.0 problem Message-ID: <079FD72E42C9D311B854009027650E6F04050997@xatl02.atl.hp.com> Ely, What is the share name that Win98 is complaining about? When you say win98 user 'login' do you mean when you have booted up the pc, and it asks for username, password, or when you are actually clicking on a share on the Samba server? Would be useful to see the rest of your smb.conf file (without comments). Hope this helps clarify, Don -----Original Message----- From: Ely Zavin [mailto:ely@txc.com] Sent: Friday, April 20, 2001 10:53 AM To: samba-ntdom@samba.org Subject: Samba-2.2.0 problem I am running samba-2.2.0 as PDC. I don't have any problem to authenticate users from WinNT and Win2000. But when Win98 user tried to login he got message: "The share name was not found. Be sure you typed it correctly." Following is part of my smb.conf file: workgroup = TEST security = user encrypt passwords = yes domain logons = yes Ely From david at dlevitan.com Fri Apr 20 20:16:42 2001 From: david at dlevitan.com (David Levitan) Date: Tue Dec 2 02:34:21 2003 Subject: printing problem with samba 2.2.0 Message-ID: <3AE0992A.26AE7409@dlevitan.com> Hi, I previously had samba 2.0.7 (or thereabouts) with a cups 1.1.6 printing system running on redhat 6.2 with 2.4.3 kernel. I have two printers connected to the cups system - and HP Deskjet 930c on a usb port and a canon bjc-600 connected on a parallel port. Both work from the linux computer, and did work through samba prior to my upgrade to 2.2.0. This week I decided to upgrade to 2.2.0 in order to add domain services to my network. The domain logons are working without a problem right now, but I am having major problems with printing. With the new system, I have to install drivers for w2k onto the samba system. I first installed drivers for the canon. These come on the w2k cd (this is an old printer), and installed without a problem. All printing preferences and properties also work. However, if I print anything to the printer, the print job disappears. It never shows up in w2k print windows or in the CUPS WWW administration system. However, the deskjet 930c has even more problems. Although I can install the drivers, I cannot access the properties or document settings windows in w2k. It generates with a protection fault. Any application that tries to access the hp driver crashes. Also, when I try to pause printing, the status bar of the print windows shows "Error processing command". This happens on several other computers as well (running nt4 and w2k). A copy of my smb.conf file is below: [global] netbios name = server workgroup = DOMAIN server string = Samba Server hosts allow = 192.168.1. 127. printcap name = lpstat load printers = yes printing = cups log file = /var/log/samba/log.%m max log size = 50 security = user encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd username map = /etc/samba/smbusers socket options = TCP_NODELAY interfaces = eth0 eth1 domain master = yes preferred master = yes local master = yes os level = 64 domain logons = yes name resolve order = lmhosts wins bcast wins support = yes dns proxy = no unix password sync = no map to guest = never password level = 0 null passwords = no dead time = 0 debug level = 0 logon drive = Z: logon home = \\server\%u logon path = \\server\profiles\%m\%u add user script = /usr/sbin/adduser -g 100 -d /dev/null -s /bin/false -M %m$ unix password sync = true passwd program = /usr/bin/passwd %u passwd chat = *password* %n\n *password* %n\n *successful* domain admin group = @wheel printer admin = @wheel [homes] comment = Home Directories browseable = no path = /home/%u/ writable = yes [netlogon] comment = Network Logon Service path = /var/samba/netlogon guest ok = yes writable = no write list = ntadmin, @wheel share modes = no [profiles] path = /var/samba/profiles browseable = no guest ok = no writable = no create mask = 0770 directory mask = 0770 write list = @winusers [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = no writable = no printable = yes write list = ntadmin, @wheel [print$] path = /var/samba/printers guest ok = no browseable = yes read only = yes write list = ntadmin, @wheel Thank you. -- David Levitan LIS From pgoetz at math.utexas.edu Fri Apr 20 21:19:50 2001 From: pgoetz at math.utexas.edu (Patrick Goetz) Date: Tue Dec 2 02:34:21 2003 Subject: make_printerdef & automatically setting up printer drivers Message-ID: Greetings, Sambists. I'm in the home stretch (I hope) of achieving Samba 2.2 PDC happiness with W2K clients. Last, but by far not least I'm trying to set it up so that the clients can automatically set up printer drivers and printers. Quoted from the Samba-HOWTO-Collection: "The additional functionality provided by the new SPOOLSS support includes: Support for downloading printer driver files to Windows 95/98/NT/2000 clients upon demand." Does anyone know how to go about setting this up or where this might be documented? There doesn't seem to be anything in the Samba-HOWTO-Collection or the samba/docs/textdocs directories, and the instructions given in "Using Samba" by Eckstein, et. al. are both woefully out of date and incorrect. From pgoetz at math.utexas.edu Fri Apr 20 21:41:52 2001 From: pgoetz at math.utexas.edu (Patrick Goetz) Date: Tue Dec 2 02:34:21 2003 Subject: downloading printer driver files and Samba2.2 Message-ID: In my previous post, I was looking for a way to set up the [print$] drivers by hand from the linux side. The Samba-HOWTO-Collection does provide some information on how to automatically set up the drivers for Samba using an NT4 client, so presumably a W2K client can do this, too. For lack of anything else to try, I thought I would give this a shot, but there is an immediate logistic concern. According to the Samba-HOWTO-Collection, The [print$] share should be set up with the following sub-directories: [print$] |-W32X86 ; "Windows NT x86" |-WIN40 ; "Windows 95/98" |-W32ALPHA ; "Windows NT Alpha_AXP" |-W32MIPS ; "Windows NT R4000" |-W32PPC ; "Windows NT PowerPC" hookay, what about for W2K? Also, is there anything magical about these names, and finally, if I use W2K to set up the printer drivers on the Samba server, will this also take care of the W98/ME machines? Speaking of Win ME, does this use the same directory as W95/98? From dougall at bigfoot.com Fri Apr 20 21:51:07 2001 From: dougall at bigfoot.com (Greg McDougall) Date: Tue Dec 2 02:34:21 2003 Subject: SMB Error Message-ID: <000d01c0c9e4$01570320$a78179d5@macbeth> We are receiving the following error from a product called Watermark, using SMB: SMB: SrvOpenAndX AddHandle Failed The application then continues on to fail with a message regarding an inability to allocate resources. Any thoughts would be appreciated, and I can email screen shots of the NT event logs if needed. Regards, Greg From corny at cup.hp.com Fri Apr 20 22:13:50 2001 From: corny at cup.hp.com (Cornelio Bondad) Date: Tue Dec 2 02:34:21 2003 Subject: make_printerdef & automatically setting up printer drivers References: Message-ID: <3AE0B49E.617E2C39@cup.hp.com> Click on http://pserver.samba.org/cgi-bin/cvsweb/samba/docs/textdocs/Attic/PRINTER_DRIVER2.txt and download the 1.1.2.6 version of printer_driver2.txt. This should be a good starting point Patrick Goetz wrote: > Greetings, Sambists. > > I'm in the home stretch (I hope) of achieving Samba 2.2 PDC happiness with > W2K clients. Last, but by far not least I'm trying to set it up so that > the clients can automatically set up printer drivers and printers. > > Quoted from the Samba-HOWTO-Collection: > > "The additional functionality provided by the new SPOOLSS support > includes: > > Support for downloading printer driver files to Windows 95/98/NT/2000 > clients upon demand." > > Does anyone know how to go about setting this up or where this might be > documented? There doesn't seem to be anything in the > Samba-HOWTO-Collection or the samba/docs/textdocs directories, and the > instructions given in "Using Samba" by Eckstein, et. al. are both woefully > out of date and incorrect. -------------- next part -------------- A non-text attachment was scrubbed... Name: corny.vcf Type: text/x-vcard Size: 334 bytes Desc: Card for Cornelio Bondad Url : http://lists.samba.org/archive/samba-ntdom/attachments/20010420/16b7abda/corny.vcf From Jean-Francois.Micouleau at dalalu.fr Fri Apr 20 22:29:08 2001 From: Jean-Francois.Micouleau at dalalu.fr (Jean Francois Micouleau) Date: Tue Dec 2 02:34:21 2003 Subject: downloading printer driver files and Samba2.2 In-Reply-To: Message-ID: On Fri, 20 Apr 2001, Patrick Goetz wrote: > In my previous post, I was looking for a way to set up the [print$] > drivers by hand from the linux side. The Samba-HOWTO-Collection does > provide some information on how to automatically set up the drivers for > Samba using an NT4 client, so presumably a W2K client can do this, too. W2k can do it if you install a NT4/W2K kernel mode printer driver as opposed as a native W2K user space printer driver. It's a current missing feature of samba. > For lack of anything else to try, I thought I would give this a shot, but > there is an immediate logistic concern. According to the > Samba-HOWTO-Collection, > > The [print$] share should be set up with the following sub-directories: > > [print$] > |-W32X86 ; "Windows NT x86" > |-WIN40 ; "Windows 95/98" > |-W32ALPHA ; "Windows NT Alpha_AXP" > |-W32MIPS ; "Windows NT R4000" > |-W32PPC ; "Windows NT PowerPC" > > > hookay, what about for W2K? W2K stores the drivers under the W32X86. Also, is there anything magical about these > names, yep, there are hard coded like in NT. and finally, if I use W2K to set up the printer drivers on the > Samba server, will this also take care of the W98/ME machines? That won't automatically take care of 95/98/ME. You will have to upload the 95/98 driver. You can do that from your W2K machine. Speaking of > Win ME, does this use the same directory as W95/98? yep. Win ME is W98 with more drivers :-) J.F. From pgoetz at math.utexas.edu Fri Apr 20 23:02:26 2001 From: pgoetz at math.utexas.edu (Patrick Goetz) Date: Tue Dec 2 02:34:21 2003 Subject: Samba2.2 and Printing: Another Mystery Message-ID: First, the relevant smb.conf stuff: ---------------------------------- [global] # Printing printing = lprng print command = /usr/bin/lpr -r -P%p %s printcap file = /etc/printcap [printers] printable = true guest ok = false [print$] path = /opt/samba/printers read only = yes browseable = yes guest ok = no ----------------------------------- When I browse the Samba server from a W2K machine, I get a listing of all the printers in /etc/printcap (still no explanation on why the last listed name is used rather than the first) AND a Printers folder. When I double click on the Printers folder, all the printers show up there again. I thought that the problem was that having a [printers] share and a [print$] share was redundant, but when I remove the [printers] share, all the printers disappear from both places. Is there an explanation for why the printers show up twice, once under the printers folder, and once at the top level? From pgoetz at math.utexas.edu Fri Apr 20 22:53:12 2001 From: pgoetz at math.utexas.edu (Patrick Goetz) Date: Tue Dec 2 02:34:21 2003 Subject: make_printerdef & automatically setting up printer drivers In-Reply-To: <3AE0B49E.617E2C39@cup.hp.com> Message-ID: On Fri, 20 Apr 2001, Cornelio Bondad wrote: > Click on > http://pserver.samba.org/cgi-bin/cvsweb/samba/docs/textdocs/Attic/PRINTER_DRIVER2.txt > > and download the 1.1.2.6 version of printer_driver2.txt. > > This should be a good starting point > Hi - This version of the file seems to be the one included with samba-2.2.0.tar.gz, and it's a bit out of date. There is a 1.5 version listed on the cvsweb, but it seems to not be available. From Angel.R.Rivera at usa.conoco.com Thu Apr 19 13:21:51 2001 From: Angel.R.Rivera at usa.conoco.com (Rivera, Angel R) Date: Tue Dec 2 02:34:22 2003 Subject: Domain Groups Message-ID: <4507D376B01BD411A51800805FE6B5D10163C400@hoex38.ho.conoco.com> Is it possible to authenticate using NT Domain groups? If so, can someone point me in the direction of the docs? TIA, angel > -----Original Message----- > From: Gerald Carter [SMTP:gcarter@valinux.com] > Sent: Thursday, April 19, 2001 12:30 AM > To: Ely Zavin > Cc: samba-ntdom@lists.samba.org > Subject: Re: Domain Groups > > > On Wed, 18 Apr 2001 14:23:49 Ely Zavin wrote: > > I start running samba-2.2.0 > > Everything looks good. Thanks samba team for the great job. > > Only one question. > > How I can map unix groups to NT Domain groups? > > Before it was domaingroupmap file. > > Ely Zavin. > > Samba 2.2.0 servers groups out of /etc/group. Domain group > mapping support is not implemented right now. > From bkelly at coastsystems.net Fri Apr 20 23:58:42 2001 From: bkelly at coastsystems.net (Boyd Kelly) Date: Tue Dec 2 02:34:22 2003 Subject: Really stumped Message-ID: <20010420235842.7440.qmail@ns1.courrielmail.com> Hi, I have had the CVS (PDC with win2k client) running just fine for a couple of weeks now, but since yesterday I get the message: "The system cannot log you on to this domain because the systems computer account in its primary domain is missing or the password on that account is incorrect." All I`ve done yesterday is install SSH and pure-ftp. Shouldn`t cause any problem??? Have tried to recreate the machine accounts manually and automatically. I can join the domain just fine, but when I reboot... No login. Any help on what to check here would be appreciated. -- Boyd Kelly Coast Systems 386 - 1755 Robson Street Vancouver BC V6G 3B7 T: (604) 738-0959 C: (604) 837-0765 E: bkelly@coastsystems.net From dleffler at alaska.com Sat Apr 21 04:08:06 2001 From: dleffler at alaska.com (Dave Leffler) Date: Tue Dec 2 02:34:22 2003 Subject: Password change from Win98 In-Reply-To: <3ADE26A8.AC30905E@valinux.com> Message-ID: <000001c0ca18$abe96740$c40aa8c0@anchorageak.net> I'm having problems changing passwords from Win98 machines on a Samba 2.2 PDC. I can change a null password (smb, unix, and windows all set to nothing), but after I change it the first time, it won't let me change it again. It keeps saying "incorrect password" which is strange since it's let's me log on the machine and domain. From bkelly at coastsystems.net Sat Apr 21 04:51:13 2001 From: bkelly at coastsystems.net (Boyd Kelly) Date: Tue Dec 2 02:34:22 2003 Subject: Really stumped In-Reply-To: <> References: <> Message-ID: <20010421045113.4161.qmail@ns1.courrielmail.com> Sorry, I found the problem here after looking at logs. Was ftp account that was changed. All is ok. Thanks anyways. BK On 20 Apr 2001 23:58:42 -0000, "Boyd Kelly" wrote : > Hi, > > I have had the CVS (PDC with win2k client) running just fine for a couple > of weeks now, but since yesterday I get the message: > > "The system cannot log you on to this domain because the systems > computer account in its primary domain is missing or the password on > that account is incorrect." > > All I`ve done yesterday is install SSH and pure-ftp. Shouldn`t cause any > problem??? > > Have tried to recreate the machine accounts manually and automatically. I > can join the domain just fine, but when I reboot... No login. > > Any help on what to check here would be appreciated. > > -- > Boyd Kelly > Coast Systems > 386 - 1755 Robson Street > Vancouver BC V6G 3B7 > T: (604) 738-0959 > C: (604) 837-0765 > E: bkelly@coastsystems.net > > > > > -- Boyd Kelly Coast Systems 386 - 1755 Robson Street Vancouver BC V6G 3B7 T: (604) 738-0959 C: (604) 837-0765 E: bkelly@coastsystems.net Web: http://www.coastsystems.net From gcarter at valinux.com Sat Apr 21 10:21:37 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:22 2003 Subject: make_printerdef & automatically setting up printer drivers In-Reply-To: ; from pgoetz@math.utexas.edu on Fri, Apr 20, 2001 at 16:19:50 -0500 References: Message-ID: <20010421052137.A2196@pogo.plainjoe.org> On Fri, 20 Apr 2001 16:19:50 Patrick Goetz wrote: > > Quoted from the Samba-HOWTO-Collection: > > "The additional functionality provided by the new SPOOLSS support > includes: > > Support for downloading printer driver files to Windows 95/98/NT/2000 > clients upon demand." > > > Does anyone know how to go about setting this up or > where this might be documented? There doesn't seem to be > anything in the Samba-HOWTO-Collection or the > samba/docs/textdocs directories, and the > instructions given in "Using Samba" by Eckstein, et. al. > are both woefully out of date and incorrect. Instructions are included in the PDF file. Did you read the entire chapter? I've updated the doc some in the latest 2.2 CVS. PRINTER_DRIVER2.txt has been rolled into the HOWTO PDF file. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From gcarter at valinux.com Sat Apr 21 10:27:35 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:22 2003 Subject: Samba2.2 and Printing: Another Mystery In-Reply-To: ; from pgoetz@math.utexas.edu on Fri, Apr 20, 2001 at 18:02:26 -0500 References: Message-ID: <20010421052735.C2196@pogo.plainjoe.org> On Fri, 20 Apr 2001 18:02:26 Patrick Goetz wrote: > > Is there an explanation for why the printers show up > twice, once under the printers folder, and once at the > top level? Please read the printing HOWTO in the PDF file. The share listing is provided for older (non-NT clients) and the Printers folder is for NT clients. While it is possible for these two listings to be different on an NT print server, it is not the case on a Samba server. The only printers known about by Samba are by definition "shared". Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From percy at py.dhs.org Sat Apr 21 19:09:40 2001 From: percy at py.dhs.org (PeRcY YuEn) Date: Tue Dec 2 02:34:22 2003 Subject: Problem Adding Domain User to Local Admin Group Message-ID: Hi all, When I upgraded from samba220a3 to samba220, I've found that when adding a domain user to the local admin group, something strange happened. For example, the domain is called DOM and is served by Samba on a Solaris 2.6 machine named SMB. When I added DOM\admin to the local administrators group, and press apply in the dialog, DOM\admin will be changed to SMB\admin automatically. Needless to say, the user admin in DOM won't get admin rights. This won't happen in alpha3. Any idea why this happens? Thanks. Regards, Percy From jeremy at valinux.com Sat Apr 21 19:46:25 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:22 2003 Subject: Samba2.2 and Printing: Another Mystery In-Reply-To: ; from pgoetz@mail.ma.utexas.edu on Fri, Apr 20, 2001 at 06:02:26PM -0500 References: Message-ID: <20010421124625.F27339@valinux.com> On Fri, Apr 20, 2001 at 06:02:26PM -0500, Patrick Goetz wrote: > > When I browse the Samba server from a W2K machine, I get a listing of all > the printers in /etc/printcap (still no explanation on why the last listed > name is used rather than the first) AND a Printers folder. When I double > click on the Printers folder, all the printers show up there again. > > I thought that the problem was that having a [printers] share and a > [print$] share was redundant, but when I remove the [printers] share, all > the printers disappear from both places. > > Is there an explanation for why the printers show up twice, once under the > printers folder, and once at the top level? This is just the way Windows 2000 and NT work. You'll see the same if you browse a Win2k server. The top level printers are the printers you can print to, the printers inside the printers folder you can manipulate to add drivers to (you can see the difference if you right click on the same printer in the two places and click on "properties"). I don't know why they did it that way, it's just part of the "windows experience" :-) :-). Cheers, Jeremy Allison, Samba Team. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From jeremy at valinux.com Sat Apr 21 19:48:10 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:22 2003 Subject: SMB Error In-Reply-To: <000d01c0c9e4$01570320$a78179d5@macbeth>; from dougall@bigfoot.com on Fri, Apr 20, 2001 at 10:51:07PM +0100 References: <000d01c0c9e4$01570320$a78179d5@macbeth> Message-ID: <20010421124810.G27339@valinux.com> On Fri, Apr 20, 2001 at 10:51:07PM +0100, Greg McDougall wrote: > We are receiving the following error from a product called Watermark, > using SMB: > > SMB: SrvOpenAndX AddHandle Failed > > The application then continues on to fail with a message regarding an > inability to allocate resources. > > Any thoughts would be appreciated, and I can email screen shots of the > NT event logs if needed. > Are you using Samba ? If so what version ? On what machine ? What do the Samba logs say ? I'm afraid we need much more information to help you here (and btw., if you're not using Samba 2.2.0 the first thing I'm going to say is "upgrade and try again" :-). Cheers, Jeremy Allison, Samba Team. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From pilger at higp.hawaii.edu Sun Apr 22 01:23:45 2001 From: pilger at higp.hawaii.edu (Eric Pilger) Date: Tue Dec 2 02:34:22 2003 Subject: samba-ntdom needed any more? References: Message-ID: <3AE232A1.9A29D83D@higp.hawaii.edu> Being a many year user of samba, but only a 3 month user of domains, I have far more questions concerning domain admin than general samba. If this list is joined to samba main then I will definitely stop subscribing. I am already almost overwhelmed with the current volume, even though much of it relates to my interests. Domain admin is a different beast than generic samba and deserves a separate list. "McEldowney, Michael" wrote: > I agree with Jerry that this list has become a multitopic list. This > list should remain and we should all limit our posts to matters that > this list was originally intended for. Post the "regular" samba matters > about installation, file, print, WINS, configs, etc. to the main list. > Post domain admin matters here. > > Just a thought...how about renaming the list to 'samba-domain-admin', or > 'samba-domain-auth? > Eric Pilger Sys Admin HIGP/SOEST University of Hawaii at Manoa From percy at py.dhs.org Sun Apr 22 03:11:04 2001 From: percy at py.dhs.org (PeRcY YuEn) Date: Tue Dec 2 02:34:22 2003 Subject: Problem Adding Domain User to Local Admin Group In-Reply-To: Message-ID: Hi all, I have forgotten to mention that I am using W2K. Regards, Percy On Sun, 22 Apr 2001, PeRcY YuEn wrote: > Hi all, > > When I upgraded from samba220a3 to samba220, I've found that when adding > a domain user to the local admin group, something strange happened. > > For example, the domain is called DOM and is served by Samba on a > Solaris 2.6 machine named SMB. When I added DOM\admin to the local > administrators group, and press apply in the dialog, DOM\admin will be > changed to SMB\admin automatically. Needless to say, the user admin in DOM > won't get admin rights. This won't happen in alpha3. > > Any idea why this happens? > > Thanks. > > Regards, > Percy > > From david at dlevitan.com Sun Apr 22 03:33:42 2001 From: david at dlevitan.com (David Levitan) Date: Tue Dec 2 02:34:22 2003 Subject: printing problem with samba 2.2.0 References: <3AE0992A.26AE7409@dlevitan.com> <3AE170A4.8020207@delfi.lt> Message-ID: <3AE25116.164BB199@dlevitan.com> Hi, I erased cups and installed lpr instead. The canon bjc-600 works now, so it must be a problem with samba->cups printing. However, I'm still having driver problems with the hp deskjet 930c. The drivers are installed correctly on the samba server - everything is coming up correctly for enumdrivers and enumprinters. Also, if I define a local printer with the hp driver, it works without a problem. Only the networked drivers have problems. Anyone have any ideas about this? Thanks. Augis wrote: > > > Hi all, > > i had similar problem with 'Epson Stylus Color 1520' printer on RH > Linux 7 (kenel 2.2.16-22) with CUPS 1.1.6 printing and Samba 2.2.0-*. It > missed the very first page from the print, if it was submitted after > some time from the previuos print job. Most of our printings are AutoCAD > drawings, so it was very annoying to miss every 3 or 4 drawing from the > printouts ;) > The behaviuos is hard to reproduce, but i think the problem is CUPS > printing. > > After i upgraded Samba to 2.2.0 relese, Epson printer drivers showed me > BSOD several times. I had to install drivers to Linux box (earlier > printer drivers location was something like //%h/print$) and use > rpcclient to assign printer driver to specified printer. It was > impossible to assign the driver from NT side: after changing the driver > control tab 'General', where i could controll which driver is used for > the printer, simply dissapeared :). With no affect to the printer driver > assignment. > > It was yesterday evening. We hadn't huge print jobs since then, so i > can't say that this helped much in the sense of missing print jobs. > Anyway, printer driver is unable to crash my NT box now :) > > Try > 'rpcclient SAMBA_Host -c "enumdrivers"; > rpcclient SAMBA_Host -c "enumprinters" ' > to see which drivers you are using for every printer and > 'rpcclient SAMBA_Host -c "setdriver printer_name \"printer driver name\"" ' > to set apropriate driver for each printer. > > If rpcclient SAMBA_Host -c "enumprinters" ' says something "NO DRIVER > AVAILABLE FOR THIS PRINTER", this it the problem. > > PS. We use Star Office 5.2 in our office. The driver used to crash NT > box with BSOD at every Star Office startup. > -- > Augis > In a world without walls and fences, who needs windows and gates? (SUN) -- David Levitan LIS From jouni.kyla-nikkila at kotiposti.net Sun Apr 22 07:54:41 2001 From: jouni.kyla-nikkila at kotiposti.net (=?iso-8859-1?Q?Jouni_Kyl=E4-Nikkil=E4?=) Date: Tue Dec 2 02:34:22 2003 Subject: Samba 2.2.0 doesn not work! Message-ID: <3070781676jouni.kyla-nikkila@kotiposti.net> Hi all! I downloaded new Samba 2.2.0 offical version few days ago and thought that maybe it would finally work.. but not. Once again it didn't. I copied smb.conf from Samba PDC 2.2 howto and created entries for me and my computer to smbpasswd file. And now samba says "The procedure number is out of range". If I have understand correctly this error message samba is not supporting some function which my Windows 2000 needs. Or whats wrong..? If this new offical samba release 2.2.0 doesn not support all functions why release it?! Damn this starts to be frustrating.. i have not got any of samba versions to work. I tried even new version (pre 3.0.0) which i took from CVS yesterday and used exactly same configs and smbpasswd-file and this version said "No mapping between account names and security IDs was done.". So error message changed but still it doesn not work. Could anyone help me or give me advices? Thanks in advance, Jouni From mark at axeon.screaming.net Sun Apr 22 09:21:45 2001 From: mark at axeon.screaming.net (Mark) Date: Tue Dec 2 02:34:22 2003 Subject: Samba 2.2.0 doesn not work! Message-ID: <001801c0cb0d$a74452e0$6201a8c0@markw2000> forgot to send this to the group. here we go (and should this message be in samba-ntdom or samba?) ----- Original Message ----- From: "Mark" To: "Jouni Kyl?-Nikkil?" Sent: Sunday, April 22, 2001 10:20 AM Subject: Re: Samba 2.2.0 doesn not work! > a) It Does > b) Calm Down > c) Look at your log files (/dirtosamba/var/log/smbd.log and nmbd.log). If > they do not show any info which helps you, change the log level setting in > smb.conf to a higher value so the logs show more information > > Mark > ----- Original Message ----- > From: "Jouni Kyl?-Nikkil?" > To: > Sent: Sunday, April 22, 2001 8:54 AM > Subject: Samba 2.2.0 doesn not work! > > > Hi all! > > I downloaded new Samba 2.2.0 offical version few days ago and thought that > maybe it would finally work.. but not. Once again it didn't. > > I copied smb.conf from Samba PDC 2.2 howto and created entries for me and my > computer to smbpasswd file. And now samba says > "The procedure number is out of range". If I have understand correctly this > error message samba is not supporting some function which my Windows 2000 > needs. Or whats wrong..? If this new offical samba release 2.2.0 doesn not > support all functions why release it?! Damn this starts to be frustrating.. > i have not got any of samba versions to work. > > I tried even new version (pre 3.0.0) which i took from CVS yesterday and > used exactly same configs and smbpasswd-file and this version said > "No mapping between account names and security IDs was done.". > So error message changed but still it doesn not work. > > Could anyone help me or give me advices? > > Thanks in advance, > Jouni > > From Vladislav.Mikhailikov at mfer.uz Sun Apr 22 10:25:13 2001 From: Vladislav.Mikhailikov at mfer.uz (Vladislav G. Mikhailikov) Date: Tue Dec 2 02:34:22 2003 Subject: error in rpm package for RedHat 7.0 Message-ID: <005d01c0cb16$882180f0$8800a8c0@ws136> Just from the scratch as you download samba-2.2.0-20010417.i386.rpm from ftp.samba.org and try to run swat you won`t do it fine because swat html pages installed at /usr/share/swat instead of /usr/share/samba/swat. That`s why you need to relocate all files from /usr/share/swat directory into /usr/share/samba/swat directory. After that it works fine. --- Thanks everyone. Regards, Vlad -------------- next part -------------- HTML attachment scrubbed and removed From gcarter at valinux.com Sun Apr 22 10:47:50 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:22 2003 Subject: error in rpm package for RedHat 7.0 In-Reply-To: <005d01c0cb16$882180f0$8800a8c0@ws136> Message-ID: On Sun, 22 Apr 2001, Vladislav G. Mikhailikov wrote: > Just from the scratch as you download samba-2.2.0-20010417.i386.rpm > from ftp.samba.org and try to run swat you won`t do it fine because > swat html pages installed at /usr/share/swat instead of > /usr/share/samba/swat. That`s why you need to relocate all files from > /usr/share/swat directory into /usr/share/samba/swat directory. After > that it works fine. Already fixed in CVS for the next release. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From david at dlevitan.com Sun Apr 22 18:45:05 2001 From: david at dlevitan.com (David Levitan) Date: Tue Dec 2 02:34:22 2003 Subject: CUPS + samba Message-ID: <3AE326B1.9BB3CDEE@dlevitan.com> Hi, I found a solution to my problem of CUPS + samba. If CUPS+samba is not working, set debug level to 3 and see the logs. If when it execute lpr -r -Pprinter smbprint.xx, an error code of 1 is generated, this could be happening because cups will not detect that this is raw input and should be sent directly to the printer. The way to fix this is to add the following line to smb.conf: print command = lpr -r -l -P%p %s The -l tells cups to not filter the input. This led me to another idea that may help anyone with driver problems. If you can get the printer to work well on linux, you can just get a ps or pdf driver (available for any platform), and print using that (without the -l flag). This should work correctly. -- David Levitan LIS From Staerk-Berlin at t-online.de Sun Apr 22 21:30:04 2001 From: Staerk-Berlin at t-online.de (=?iso-8859-1?Q?Ulrich_St=E4rk?=) Date: Tue Dec 2 02:34:22 2003 Subject: server stored user profiles References: Message-ID: <004101c0cb73$65118b20$0a00a8c0@atb> Ok after doing nothing at all to both my Win2k and my Samba machine the problem solved itself :) now there is another problem although I set "domain admin users = root administrator uli" in my smb.conf those users cannot login to the Win2k machine as administrators. it worked once but now it doesn't anymore. to be sure i also set admin users to the same users. anyone any idea? TIA Uli ----- Original Message ----- From: "Lista linux" To: "Ulrich St?rk" Cc: Sent: Friday, April 20, 2001 8:06 PM Subject: Re: server stored user profiles > hi, > > as far as i can see, the problem is not with samba, it's with w2k. disable > roaming profiles for your user at the w2k computer. > > romy > From dm at hejoe.de Sun Apr 22 21:30:20 2001 From: dm at hejoe.de (Dirk =?iso-8859-1?Q?Maa=DF?=) Date: Tue Dec 2 02:34:22 2003 Subject: replication of domain login service Message-ID: <3AE34D6C.86D12875@hejoe.de> Hi all! Is there any way to replicate the samba domain login service to other servers? I have set up an ldap directory (iplanet directory servers with a replication structure) that is used as name service for linux and solaris clients and I want to install a samba 2.2 server (Solaris 8) as PDC for the Windows 2000/NT machines. Samba should be used because I hope the user mapping and account synchronization between the NT and Unix worlds can be implemented easily. To improve availability a second samba domain server needs to be implemented (may be Solaris, too) so that NT users can still log in to their machines when the samba-PDC is temporarily not available (broken network connection or whatever). As I understand Microsoft networks there can be just one PDC in domain, replication of the user database is done through backup domain controllers. As I have read, samba 2.2. can not be used in a replication szenario. (right?) So I wonder if there is a possibility (workaround or another helpful idea) to achieve that the NT users can log in when the PDC is not online. Any help would be appreciated. Dirk Maass From mgeddes at xavier.sa.edu.au Sun Apr 22 23:48:02 2001 From: mgeddes at xavier.sa.edu.au (Matthew Geddes) Date: Tue Dec 2 02:34:22 2003 Subject: Mindcraft References: Message-ID: <3AE36DB2.A26A4F98@xavier.sa.edu.au> Ed Bradford wrote: > > 2 questions. > 1. Do you have Jeremy Allison's email address? I think Jeremy and other Samba team members are probably on this mailing list. We should be able to help with many things, though, rather than waste the time of the Samba team (as they are usually busy coding for our benefit :-)). > 2. A while back there was a big press storm over Windows NT beating Linux > using the ziff-davis NetBench and WebBench benchmarks. The Linux folks > cried foul and the tests were re-run but the results still came out in > favor of > Windows. > > The latest Microsoft word I have found is: > > http://www.microsoft.com/ntserver/nts/news/msnw/nt4vLinux.asp > > Is this where things are today with respect to SAMBA versus Windows > NT/2000 File services? From landingg at email.msn.com Mon Apr 23 01:14:37 2001 From: landingg at email.msn.com (landingg) Date: Tue Dec 2 02:34:22 2003 Subject: Square One Message-ID: <001a01c0cb92$c4c0b040$05026b85@garyland> As indicated in some of the other comments, this is perhaps too fundamental for this section. I haven't learned just where to go and what to ask yet, please redirect or advise as necessary. I have loaded Red Hat Linux Version 7.0 and it runs fine. Now I am having a very difficult time trying to install Samba and bring it up on my NT Domain. It is very frustrating to purchase this whole package with all the documentation and not find a consistent, straight forward, instruction on JUST INSTALLING and running Samba. Now, before you say READ, I have a total of five reference books on Linux, plus downloads of all the docs from the Samba FTP site. Many of the instructions refer to the inetd.conf file which I cannot find in RED HAT 6.X OR 7.0. Additionally, I cannot find other files such as HOSTNAME, HOSTS, etc. And if I try to run SWAT, the system stalls. Can you help a newbie? Gary -------------- next part -------------- HTML attachment scrubbed and removed From bferrell at baywinds.org Mon Apr 23 03:35:15 2001 From: bferrell at baywinds.org (Bruce Ferrell) Date: Tue Dec 2 02:34:22 2003 Subject: Square One References: <001a01c0cb92$c4c0b040$05026b85@garyland> Message-ID: <3AE3A2F3.55957C4A@baywinds.org> Hi Gary, First things first... RedHat 7.0 uses a different network superserver called xnet.... Just my opinion, it ugly and an unnecessary change to fundamental unix networking, but that just my opinion. I can't help you too much with that configuration, but I'm very willing to help you get samba running. Do you mean your samba installation to act as the PDC for your NT Domain, or is an NT/Win2k system fulfilling that task? Do you know which version of samba is installed on your system? Bruce > landingg wrote: > > As indicated in some of the other comments, this is perhaps too > fundamental for this section. I haven't learned just where to go and > what to ask yet, please redirect or advise as necessary. > > I have loaded Red Hat Linux Version 7.0 and it runs fine. Now I am > having a very difficult time trying to install Samba and bring it up > on my NT Domain. It is very frustrating to purchase this whole > package with all the documentation and not find a consistent, straight > forward, instruction on JUST INSTALLING and running Samba. Now, > before you say READ, I have a total of five reference books on Linux, > plus downloads of all the docs from the Samba FTP site. Many of the > instructions refer to the inetd.conf file which I cannot find in RED > HAT 6.X OR 7.0. Additionally, I cannot find other files such as > HOSTNAME, HOSTS, etc. And if I try to run SWAT, the system stalls. > > Can you help a newbie? > Gary From lnb at FreeBSDsystems.COM Mon Apr 23 05:38:29 2001 From: lnb at FreeBSDsystems.COM (Lanny Baron) Date: Tue Dec 2 02:34:22 2003 Subject: win2k advanced server ..cant join samba PDC? Message-ID: <01042301382900.27390@panda.FreeBSDsystems.COM> Hello, Is there some issue as regards to an Win2K Advanced server being unable to join a Samba PDC with Samba-2.2.0 (release)? Trying to joing the Samba domain using root ID just comes back with "The specified user does not exist" Thanks in advance and congrats on the new release. ~=~=~=~=~=~=~=~=~=~=~=~= Lanny Baron FreeBSD Systems, Inc. Freedom Technologies Corp. 1.877.963.1900 http://www.FreeBSDsystems.COM From lnb at FreeBSDsystems.COM Mon Apr 23 06:04:50 2001 From: lnb at FreeBSDsystems.COM (Lanny Baron) Date: Tue Dec 2 02:34:23 2003 Subject: win2k advanced server ..cant join samba PDC? Message-ID: <01042302045000.27564@panda.FreeBSDsystems.COM> Hello Again, Forget the last message. Reading more of David Bannon's article, the MACHINE.SID sure does replace itself fast. Addtionally, one must not have the machine$ in the smbpasswd file. Regards, ~=~=~=~=~=~=~=~=~=~=~=~= Lanny Baron FreeBSD Systems, Inc. Freedom Technologies Corp. 1.877.963.1900 http://www.FreeBSDsystems.COM From abartlet at pcug.org.au Mon Apr 23 06:08:57 2001 From: abartlet at pcug.org.au (Andrew Bartlett) Date: Tue Dec 2 02:34:23 2003 Subject: win2k advanced server ..cant join samba PDC? References: <01042301382900.27390@panda.FreeBSDsystems.COM> Message-ID: <3AE3C6F9.6394E05C@bartlett.house> Lanny Baron wrote: > > Hello, > Is there some issue as regards to an Win2K Advanced server being unable to > join a Samba PDC with Samba-2.2.0 (release)? > > Trying to joing the Samba domain using root ID just comes back with "The > specified user does not exist" > > Thanks in advance and congrats on the new release. The only issue I am aware of regards domain logon support and PAM - and I don't think your getting that far. Do you have the required entires in smbpasswd for root? What log entires are being made in samba's logfiles? Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au From jodtmt at yahoo.it Mon Apr 23 07:38:31 2001 From: jodtmt at yahoo.it (=?iso-8859-1?q?Giorgio=20Polaretti?=) Date: Tue Dec 2 02:34:23 2003 Subject: Domain group In-Reply-To: <20010420173020.77765.qmail@web13701.mail.yahoo.com> Message-ID: <20010423073831.36551.qmail@web13706.mail.yahoo.com> How can I add a samba user to a WinNT group domain group? i'am using samba 2.2 alpha 3 acting as a pdc and a PC WinNT client. I'd like to kwnow if there's a way to map a Unix group into a WinNT domain group. Who can help me? Thanks ______________________________________________________________________ Do You Yahoo!? Il tuo indirizzo gratis e per sempre @yahoo.it su http://mail.yahoo.it From Ext-Nikos.Lakoutsis at nokia.com Mon Apr 23 09:45:37 2001 From: Ext-Nikos.Lakoutsis at nokia.com (Ext-Nikos.Lakoutsis@nokia.com) Date: Tue Dec 2 02:34:23 2003 Subject: NT domain problem Message-ID: Hi all, I have the following problem and I was wondering if you could help: The problem exists in 2 servers one running Solaris 2.6 and the other HP-UX 10.20. When I am adding the servers to the NT4 domain NCS_CA (with PDC ntcdhcpaca) everything seems to work fine. I am using "smbpasswd -j NCS_CA -r ntcdhcpbca" and they are joining the domain ok. I can access the servers from my NT client by typing their fully qualified name but I cannot see the servers through the network neighborhood or by typing \\server_name from the run window.... This was working in the past.... Any suggestions? Thanks guys Nikos P.S.Here is the smb.conf [global] workgroup = NCS_CA netbios name = NFS01CA server string = NFS HP-UX nfs01ca Samba Server security = DOMAIN encrypt passwords = Yes password server = ntcdhcpbca ntcdhcpaca username map = /opt/samba/lib/smbusers debug level = 0 log file = /opt/samba/log/log.%m max log size = 500 name resolve order = lmhosts wins hosts bcast deadtime = 10 max open files = 4000 load printers = No local master = No dns proxy = No wins server = 172.26.33.44 hosts allow = 131.228. 172. From siva at aquila.soft.net Mon Apr 23 10:41:33 2001 From: siva at aquila.soft.net (siva) Date: Tue Dec 2 02:34:23 2003 Subject: samba+nis+pam Message-ID: <3AE406DD.F8353EE3@aquila.soft.net> I have a few queries about samba+nis+pam. I had setup nis and samba on same server , Due to this authentication for linux and NT was diferent . I decided to have one authentication system for both linux and NT clients. I had configured samba with PAM . Now , how to enable nis lookup in pam configuration files. So that while authentication it looks for pam , intern pam points to NIS maps. Can any body help me in this regard. Raz -------------- next part -------------- HTML attachment scrubbed and removed From lists at pealpjpain.de Mon Apr 23 10:36:35 2001 From: lists at pealpjpain.de (Lists) Date: Tue Dec 2 02:34:23 2003 Subject: AW: NT domain problem In-Reply-To: Message-ID: > I can access the servers from my NT client by typing their fully qualified > name but I cannot see the servers through the network neighborhood or by > typing \\server_name from the run window.... > This was working in the past.... Hi Nikos! Try using the "os level" option in the global section. Just start with a value around 8 and go up until your clients are able to 'see' the servers: [global] ... os level = 8 ... This option means how 'strong' a SMB Server should act on a network. So if this value is set too low, other services run e.g. by clients will overlap your samba service and you won't be able to see it from those clients. I had the problem when stepping from Win98 to Win2k clients. Nothing was changed on the server config but suddenly the machine was disappeared from my network neighbourhood. This is no guarantee that it works but it may help. Tell me of your experiences! Greetings >>>> Philipp From Ext-Nikos.Lakoutsis at nokia.com Mon Apr 23 11:00:14 2001 From: Ext-Nikos.Lakoutsis at nokia.com (Ext-Nikos.Lakoutsis@nokia.com) Date: Tue Dec 2 02:34:23 2003 Subject: NT domain problem Message-ID: Thanks for your quick reply Phillip.... I am afraid that didn't work. I even set the value to 34 which is even above an NT4 server....but still nothing...:( Regards Nikos -----Original Message----- From: ext Lists [mailto:lists@pealpjpain.de] Sent: Monday, April 23, 2001 11:37 AM To: Ext-Nikos.Lakoutsis@nokia.com Cc: samba-ntdom@lists.samba.org Subject: AW: NT domain problem > I can access the servers from my NT client by typing their fully qualified > name but I cannot see the servers through the network neighborhood or by > typing \\server_name from the run window.... > This was working in the past.... Hi Nikos! Try using the "os level" option in the global section. Just start with a value around 8 and go up until your clients are able to 'see' the servers: [global] ... os level = 8 ... This option means how 'strong' a SMB Server should act on a network. So if this value is set too low, other services run e.g. by clients will overlap your samba service and you won't be able to see it from those clients. I had the problem when stepping from Win98 to Win2k clients. Nothing was changed on the server config but suddenly the machine was disappeared from my network neighbourhood. This is no guarantee that it works but it may help. Tell me of your experiences! Greetings >>>> Philipp From linux4biz at yahoo.com Mon Apr 23 11:49:48 2001 From: linux4biz at yahoo.com (kapil sharma) Date: Tue Dec 2 02:34:23 2003 Subject: (no subject) Message-ID: <000a01c0cbeb$8083ac80$100a0a0a@comp2> -------------- next part -------------- HTML attachment scrubbed and removed From linux4biz at yahoo.com Mon Apr 23 12:00:14 2001 From: linux4biz at yahoo.com (kapil sharma) Date: Tue Dec 2 02:34:23 2003 Subject: (no subject) Message-ID: <001d01c0cbec$f5b60100$100a0a0a@comp2> -------------- next part -------------- HTML attachment scrubbed and removed From linux4biz at yahoo.com Mon Apr 23 12:15:51 2001 From: linux4biz at yahoo.com (kapil sharma) Date: Tue Dec 2 02:34:23 2003 Subject: samba-2.2.0 authentication problem Message-ID: <002601c0cbef$255e6760$100a0a0a@comp1> Hi, I have compiled samba-2.2.0 on redhat 7.0 server. I want to make it as master PDC. I want to authenticate my win2k workstations from this linux samba server (PDC). I am getting following error when i am tryinbg to change the setting of domain under win2k. [2001/04/23 11:30:57, 0] passdb/pampass.c:pam_accountcheck(381) PAM: Account Validation Failed - Rejecting User! [2001/04/23 11:30:57, 0] passdb/pampass.c:pam_accountcheck(381) PAM: Account Validation Failed - Rejecting User! I have added root as adm group and laso to smbpasswd file. What can be the problem?? Please help. kapil _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com From wendt at kingcrab.nrl.navy.mil Mon Apr 23 11:46:07 2001 From: wendt at kingcrab.nrl.navy.mil (Mark Wendt) Date: Tue Dec 2 02:34:23 2003 Subject: (no subject) Message-ID: <5.0.1.4.2.20010423074444.00adce48@kingcrab.nrl.navy.mil> Hi all, Posted this to the tng-user list last week and hadn't seen any replies (actually hadn't seen any traffic at all on that list...). Just wondered if any one else was running into this problem, and if any one had a fix or work around. Context: Solaris 2.6, patched, no NIS or NIS+ Latest cvs version of TNG gcc version 2.95.3 20010315 (release) Ran ./configure --prefix=/usr/local/samba-tng -- everything cool here Ran make, here's where the problem showed up: Compiling client/client.c client/client.c:1698: `cmd_history' undeclared here (not in a function) client/client.c:1698: initializer element is not constant client/client.c:1698: (near initialization for `commands[39].fn') *** Error code 1 make: Fatal error: Command failed for target `client/client.o' Thanks, Mark Wendt System/Network Administrator Naval Research Lab Washington, DC From kathee at mindiq.com Mon Apr 23 12:04:43 2001 From: kathee at mindiq.com (kat) Date: Tue Dec 2 02:34:23 2003 Subject: Square One In-Reply-To: <3AE3A2F3.55957C4A@baywinds.org> References: <001a01c0cb92$c4c0b040$05026b85@garyland> Message-ID: <5.0.2.1.2.20010423075350.025f5b98@mail.mindiq.com> "xinetd" is a WONDERFUL replacement to the tried and true inetd daemon. It has built in so much of the security that had to be "added" to inetd after the fact. It is fairly simple and yet very elegant in nature and does the job as well, if not better than inetd. It was not "RedHat's" decision to replace inetd -- check on just about every release of SuSE since 6.x or several other distros which have all implemented xinetd for sometime. RedHat was last to fall in . Solaris and AIX are other versions of the OS which also support xinetd. But I digress... First of all, download and install/upgrade 7.1 of RedHat as it fixes MANY bugs in the original 7.0. Although I am running 7.0 on my laptop and most of my servers, it is greatly modified to fix all the problems 7.0 had (broken gcc to name one) As for not finding /etc/hosts? Strange, as it should always be there. As for hostname? Never saw that in any RedHat distro unless you speak of the command itself. As for WHERE is the hostname kept? Check in the magic "/etc/sysconfig" directory for LOTS of goodies. Look at the "network" script and you will see you perm. IP address as well as hostname. Most of these files are managed from "linuxconf" which is what you should be using. The irony of all this -- if you select the rpms of samba with RH7, you will get 2.0.7, which is fine unless you want to be a PDC, but that is another topic. Try "rpm -qa | grep samba" and see if any packages with samba, client or otherwise are even installed. You can then use linuxconf to configure it. Swat will also be there but will not be running unless samba is started. Most of these are installed in "abnormal" places -- i.e. NOT in /usr/local as one might expect. In many cases, RH uses "/var" to install these extra packages. Since I built my samba from the various 2.2 trees (now the release 2.2) I did not have these issues. Well, I take that back, I do have 2 servers running 2.0.7 in my mix of a PDC with 2.2 in the domain. My suggestion -- REMOVE the samba rpms that come with redhat and download the clean 2.2 tarball. Go to the "source" subdirectory and do: ./configure make make install After that, you will find all the necessary files in /usr/local/samba. A final not on xinetd -- take a look at "/etc/xinetd.d" as a directory and you will find the files that configure each service. Simple info -- "disable = yes/no" in a config file for xinetd services -- well, do I need to explain what that would do? Also, these files, for each service, replace the need for tcpwrappers, however, I happen to run both. xinetd will look at hosts.allow/deny as well as its own config files. Very handy! Hope this helps, Cheers Kathee At 08:35 PM 4/22/2001 -0700, Bruce Ferrell wrote: >Hi Gary, > >First things first... RedHat 7.0 uses a different network superserver >called xnet.... Just my opinion, it ugly and an unnecessary change to >fundamental unix networking, but that just my opinion. I can't help you >too much with that configuration, but I'm very willing to help you get >samba running. > >Do you mean your samba installation to act as the PDC for your NT >Domain, or is an NT/Win2k system fulfilling that task? Do you know >which version of samba is installed on your system? > >Bruce > > > landingg wrote: > > > > As indicated in some of the other comments, this is perhaps too > > fundamental for this section. I haven't learned just where to go and > > what to ask yet, please redirect or advise as necessary. > > > > I have loaded Red Hat Linux Version 7.0 and it runs fine. Now I am > > having a very difficult time trying to install Samba and bring it up > > on my NT Domain. It is very frustrating to purchase this whole > > package with all the documentation and not find a consistent, straight > > forward, instruction on JUST INSTALLING and running Samba. Now, > > before you say READ, I have a total of five reference books on Linux, > > plus downloads of all the docs from the Samba FTP site. Many of the > > instructions refer to the inetd.conf file which I cannot find in RED > > HAT 6.X OR 7.0. Additionally, I cannot find other files such as > > HOSTNAME, HOSTS, etc. And if I try to run SWAT, the system stalls. > > > > Can you help a newbie? > > Gary From linux4biz at yahoo.com Mon Apr 23 12:44:43 2001 From: linux4biz at yahoo.com (kapil sharma) Date: Tue Dec 2 02:34:23 2003 Subject: samba swat Message-ID: <003b01c0cbf3$2c3c3a90$100a0a0a@comp1> Hi, What is the default login and password for swat interface. I am unable to login with root password. Cheers kapil _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com From bsumpter at emediadesigns.com Mon Apr 23 13:12:13 2001 From: bsumpter at emediadesigns.com (Brian Sumpter) Date: Tue Dec 2 02:34:23 2003 Subject: Win2k Woes...... In-Reply-To: <003b01c0cbf3$2c3c3a90$100a0a0a@comp1> Message-ID: Hey everyone! I'm new to the list here, and have been lurking for a few days to see if a problem I'm having was being discussed here, but seems I'm the only one having this particular problem. So on to the specifics: Network: SOHO network / 100 Base T Computers: 5 total - only two with problems (denoted by * ). a) Windows 2000 Professional b) Windows 2000 Professional * c) Windows 98 SE * d) Macintosh System 8.5 e) Red Hat Linux 7.0 Samba: Samba 2_2 branch compiled from yesterday's CVS tree. Specifics: OK, I'll try to make this short yet descriptive to the best of my writing abilities. Over a month ago, I downloaded and compiled Samba 2_2 from the CVS and set it up as a PDC for the network. Everything worked great, and the Win2k boxes were able to join the domain and access the network perfectly (including roaming profiles). The 98 box could log onto the domain, and could see the samba shares, but could not access them (got a "Network Path Not Found" error). I wasn't concerned with the 98 box at the time since it was a laptop and very rarely needed network access anyway. So I chugged along over a month on my Win2k boxes pleased as I could be that Samba was acting as a PDC (and doing a mighty fine job of it!). About a week ago, one of the Win2k boxes started doing really funky things, so in typical fashion, I decided to do a reformat as I contributed the problem to standard Microsoft "OS Rot", which develops over time on any of Redmond's platforms. I formatted and reinstalled Win2k, and the setup went perfectly. I joined the domain normally, and rebooted to get a clean start on the domain. That's when the problems began. It seems this box is having trouble resolving the network now. Sometimes on log on it says the domain "HOME" is not available, and will not allow me to log on at all, and other times it will allow me to join the domain, but then none of the shares (or any of the other Windows machines) are available, either in Network Neighborhood, or by going directly to the shares with the \\sharename\drive names. I get a " could not be located on the network" error. I can restart the network (by disabling and re-enabling the LAN in Network Neighborhood), and can then sometimes access the shares. Sometimes even this doesn't work. The next step was to examine the Samba logs. It seems the new Win2k box (named "Bessy") is trying to become a Master Browser for the "HOME" domain. Samba is of course winning the election, but does give up PDC abilities for a few minutes while the two boxes battle for control. I think this is the root of the problem, but am not entirely sure. I bumped the OS level up to 100, but Samba still gives up control for a few minutes until the Win2k box either decides its going to be a Master Browser anyway, or gives up, at which point Samba takes back over and becomes the PDC once again. I'm positive there's nothing wrong with the smb.conf file causing this, as it worked perfectly until the Win2k box was reformatted. All the other boxes on the network work just as they did before the reformat of the 2k box. I went into the registry on the troubled 2k box, and verified that the IsDomainMaster key was set to FALSE, and duplicated all network settings on the other (working) Win2k box to no avail. I've replaced the network cable, and swapped out the network cards, neither of which changed the situation. One thing of note - even when I restart the Network on this box, it still takes some time to see the shares, sometimes as long as 5 minutes. Even then it will "lose" the network again after 15 or 20 minutes. Has anyone had this problem before? Is there something different I need to do in the smb.conf or the smbpasswd files when I reinstall an OS? Sorry for the long letter - just wanted to be descriptive as possible. Below you will find a dump of my smb.conf file, and any help anyone can offer will be greatly appreciated. SMB CONF FILE: ########################### #### Primary Section ##### ########################### [global] ##### Primary Section ##### wins support = yes security = user status = yes log file = /usr/local/samba/var/samba-log lock directory = /var/lock/samba workgroup = home server string = "Emedia Server" socket options = TCP_NODELAY dns proxy = no preserve case = yes short preserve case = yes case sensitive = yes share modes = no ##### Domain Section ##### status = yes encrypt passwords = yes domain logons = yes logon script = scripts\%U.bat domain admin group = @bsumpter, @kat add user script = /usr/sbin/adduser -n -g machines -c Machine -d /dev/null -s /bin/false %m$ os level=100 time server = true ##### Password Sync ###### # passwd program = /usr/bin/passwd %u # passwd chat = *password* %n\n *password* %n\n *successful* ########################### ###### User Section ###### ########################### [public] comment = Public Stuff path = /home/public public = yes writable = yes printable = no browseable = yes create mode = 777 [homes] comment = Home Directories browseable = no writable = yes read only = no preserve case = yes short preserve case = yes path = /home/%U create mode = 0750 create mask = 0750 directory mask = 0750 locking = no [tmp] comment = Temporary file space path = /home/tmp read only = no public = yes create mode = 777 [netlogon] browseable = no path = /usr/local/samba/netlogon writeable = no guest ok = no Thanks! -- Brian Sumpter Emedia Designs bsumpter@emediadesigns.com http://emediadesigns.com/ From mosquito at planet-interkom.de Mon Apr 23 12:10:02 2001 From: mosquito at planet-interkom.de (Thomas Scholten) Date: Tue Dec 2 02:34:23 2003 Subject: Fw: Can't connect via IP Address Message-ID: <007601c0cbee$53873a00$5050a8c0@middleearth.mot> ----- Original Message ----- From: Thomas Scholten To: Sent: Monday, April 23, 2001 2:03 PM Subject: RE: Can't connect via IP Address > Hi All, > > i can't connect to my Suse-6.3, Samba 2.0.6 NT-Domain with the use of > IP-Addresses. Using Netbios Names works fine and the nmbd log the name > request. Trying the same with the correct IP from Windows 98se (net view > \\192.168.80.1 instead of net vie \\elrond) rsult in a "host not found" > error message. Testing the same with ping or tracert works fine. > > After browsing the faq and textdocs i'm still confused where to get more > info or help. Hopefully this is the right place. > > greets > > Tom > From sam at bigstudios.com Mon Apr 23 13:26:28 2001 From: sam at bigstudios.com (Sang-Kil Suh (Sam)) Date: Tue Dec 2 02:34:23 2003 Subject: backup problem Message-ID: Hi, everyone. I have a problem backing up NT 4 client boxes with network shares. I am able to backup freeBSD Samba shares using AT command on NT 4 box which has DLT hooked up. However, I was not able to perform backup using exactly same scheme with NT 4 client boxes network shares. It says I don't have permission for ".", which means current directory. However, all shares have full control for everybody with read and write. Funny thing is, if I were to run Interactive mode of NTBACKUP, then all NT 4 responds just fine and I can back them up just fine. I am baffled with this problem. I know this doesn't exactly looks like Samba problem but I am wondering the problem is Samba related. Has anyone by any chance had similar problem as I am. If you had, how did you solved it. I would love to hear your insights on this matter. Thank you. From thos at esat.com Mon Apr 23 13:22:34 2001 From: thos at esat.com (Tom Horan) Date: Tue Dec 2 02:34:23 2003 Subject: Help - Compiling Winbind ? Message-ID: <4AAE17B78CD3D411BF5700508B65645F4D7213@gcqsexc2.dublin.esat.ie> Hi, I am trying to get Winbind compiled but I just can seem to get it - I've tried getting source from TNG and from HEAD, and I've also taken samba-appliance. But they both bomb out when compiling tdb. Which is the most up to date TNG or HEAD ? Thanks, Tom _________________________________________________ Tom Horan System Administrator Esat Business Tel: (01) 432-6778 Mobile: (086) 807-9153 _________________________________________________ ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. http://www.esatbusiness.com ********************************************************************** From thos at esat.com Mon Apr 23 13:26:35 2001 From: thos at esat.com (Tom Horan) Date: Tue Dec 2 02:34:23 2003 Subject: backup problem Message-ID: <4AAE17B78CD3D411BF5700508B65645F4D7214@gcqsexc2.dublin.esat.ie> AT uses the Scheduler service. So the Scheduler service might only be running as the SYSTEM account and so wouldnt have any domain permissions. Change the Scheduler server to run as Administrator or as a Backup Operator user. That should do the trick. Thanks, Tom -----Original Message----- From: Sang-Kil Suh [mailto:sam@bigstudios.com] Sent: 23 April 2001 14:26 To: samba-ntdom@lists.samba.org Subject: backup problem Hi, everyone. I have a problem backing up NT 4 client boxes with network shares. I am able to backup freeBSD Samba shares using AT command on NT 4 box which has DLT hooked up. However, I was not able to perform backup using exactly same scheme with NT 4 client boxes network shares. It says I don't have permission for ".", which means current directory. However, all shares have full control for everybody with read and write. Funny thing is, if I were to run Interactive mode of NTBACKUP, then all NT 4 responds just fine and I can back them up just fine. I am baffled with this problem. I know this doesn't exactly looks like Samba problem but I am wondering the problem is Samba related. Has anyone by any chance had similar problem as I am. If you had, how did you solved it. I would love to hear your insights on this matter. Thank you. ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. http://www.esatbusiness.com ********************************************************************** From s354199 at student.uq.edu.au Mon Apr 23 13:35:59 2001 From: s354199 at student.uq.edu.au (Elliot Mackenzie) Date: Tue Dec 2 02:34:24 2003 Subject: backup problem In-Reply-To: Message-ID: Just a hunch... NT services run as some kind of system user (not any username you probably have setup in smbpasswd), and thus samba as rejecting you as a non-authenticated user. If this is the case, the solution is to find out what user this is (dig into your samba logs and this should tell you), and add it to smb.conf. Hope this helps, M. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Sang-Kil (Sam) Suh Sent: Monday, 23 April 2001 11:26 PM To: samba-ntdom@lists.samba.org Subject: backup problem Hi, everyone. I have a problem backing up NT 4 client boxes with network shares. I am able to backup freeBSD Samba shares using AT command on NT 4 box which has DLT hooked up. However, I was not able to perform backup using exactly same scheme with NT 4 client boxes network shares. It says I don't have permission for ".", which means current directory. However, all shares have full control for everybody with read and write. Funny thing is, if I were to run Interactive mode of NTBACKUP, then all NT 4 responds just fine and I can back them up just fine. I am baffled with this problem. I know this doesn't exactly looks like Samba problem but I am wondering the problem is Samba related. Has anyone by any chance had similar problem as I am. If you had, how did you solved it. I would love to hear your insights on this matter. Thank you. From s354199 at student.uq.edu.au Mon Apr 23 13:58:10 2001 From: s354199 at student.uq.edu.au (Elliot Mackenzie) Date: Tue Dec 2 02:34:24 2003 Subject: backup problem In-Reply-To: Message-ID: Urgh I'm tired.... What I *meant* to say was add the username to smbpasswd and make sure you've allowed that user/group in smb.conf. Unfortunately I have also got a hunch that without pulling some strange tricks, system services probably can't access user level (as opposed to share level) network shares by any means (I suspect the username is not a global username but rather a system and process specific one so that processes cannot interfere with other processes). I had a similar problem running an ancient version of Norton System Centre like that - the best solution I came up with was to not use smb, but rather to use ftp to transfer the files (which was admittedly a better idea anyway). I'm not sure whether the same restriction applies to share level network shares, but you might just sidestep the problem by ensuring your NT services run as a specific user, and then add that user/group as required. M. -----Original Message----- From: Sang-Kil (Sam) Suh [mailto:sam@bigstudios.com] Sent: Monday, 23 April 2001 11:48 PM To: Elliot Mackenzie Subject: RE: backup problem 4/24/01 10:35:59 AM, "Elliot Mackenzie" wrote: >Just a hunch... NT services run as some kind of system user (not any >username you probably have setup in smbpasswd), and thus samba as rejecting >you as a non-authenticated user. If this is the case, the solution is to >find out what user this is (dig into your samba logs and this should tell >you), and add it to smb.conf. > >Hope this helps, >M. > Wow, thank you very, very much for speedy reply. I never thought I will get help this fast. Thank you so much for your suggestions and I will try that out tonight. I will let you know how this turned out. Thanks! From Ext-Nikos.Lakoutsis at nokia.com Mon Apr 23 15:13:06 2001 From: Ext-Nikos.Lakoutsis at nokia.com (Ext-Nikos.Lakoutsis@nokia.com) Date: Tue Dec 2 02:34:24 2003 Subject: PLEASE HELP: NT domain problem Message-ID: Could anyone please help with the problem below... The funny think is that I can see one of those servers in the network neighborhood and I am getting that the network path was not found? Any ideas? Thanks amigos Nikos -----Original Message----- From: Lakoutsis Nikos (EXT-FlightMover/Camberley) Sent: Monday, April 23, 2001 12:00 PM To: 'ext Lists'; Lakoutsis Nikos (EXT-FlightMover/Camberley) Cc: samba-ntdom@lists.samba.org Subject: RE: NT domain problem Thanks for your quick reply Phillip.... I am afraid that didn't work. I even set the value to 34 which is even above an NT4 server....but still nothing...:( Regards Nikos -----Original Message----- From: ext Lists [mailto:lists@pealpjpain.de] Sent: Monday, April 23, 2001 11:37 AM To: Ext-Nikos.Lakoutsis@nokia.com Cc: samba-ntdom@lists.samba.org Subject: AW: NT domain problem > I can access the servers from my NT client by typing their fully qualified > name but I cannot see the servers through the network neighborhood or by > typing \\server_name from the run window.... > This was working in the past.... Hi Nikos! Try using the "os level" option in the global section. Just start with a value around 8 and go up until your clients are able to 'see' the servers: [global] ... os level = 8 ... This option means how 'strong' a SMB Server should act on a network. So if this value is set too low, other services run e.g. by clients will overlap your samba service and you won't be able to see it from those clients. I had the problem when stepping from Win98 to Win2k clients. Nothing was changed on the server config but suddenly the machine was disappeared from my network neighbourhood. This is no guarantee that it works but it may help. Tell me of your experiences! Greetings >>>> Philipp --------------------------------------------------------------------------- Hi all, I have the following problem and I was wondering if you could help: The problem exists in 2 servers one running Solaris 2.6 and the other HP-UX 10.20. When I am adding the servers to the NT4 domain NCS_CA (with PDC ntcdhcpaca) everything seems to work fine. I am using "smbpasswd -j NCS_CA -r ntcdhcpbca" and they are joining the domain ok. I can access the servers from my NT client by typing their fully qualified name but I cannot see the servers through the network neighborhood or by typing \\server_name from the run window.... This was working in the past.... Any suggestions? Thanks guys Nikos P.S.Here is the smb.conf [global] workgroup = NCS_CA netbios name = NFS01CA server string = NFS HP-UX nfs01ca Samba Server security = DOMAIN encrypt passwords = Yes password server = ntcdhcpbca ntcdhcpaca username map = /opt/samba/lib/smbusers debug level = 0 log file = /opt/samba/log/log.%m max log size = 500 name resolve order = lmhosts wins hosts bcast deadtime = 10 max open files = 4000 load printers = No local master = No dns proxy = No wins server = 172.26.33.44 hosts allow = 131.228. 172. ------------------------------------------------------ From tomasz at hieroglif.com.pl Mon Apr 23 15:28:56 2001 From: tomasz at hieroglif.com.pl (tomasz) Date: Tue Dec 2 02:34:24 2003 Subject: Win2k Woes...... In-Reply-To: Message-ID: On Mon, 23 Apr 2001, Brian Sumpter wrote: > perfectly (including roaming profiles). The 98 box could log onto the > domain, and could see the samba shares, but could not access them (got a > "Network Path Not Found" error). I wasn't concerned with the 98 box at the Hi, Turn off case sensitive in smb.conf - i had the same problem with win98 SE For the rest i don't know how to help you. > > [global] > ##### Primary Section ##### > wins support = yes > security = user > status = yes > log file = /usr/local/samba/var/samba-log > lock directory = /var/lock/samba > workgroup = home > server string = "Emedia Server" > socket options = TCP_NODELAY > dns proxy = no > preserve case = yes > short preserve case = yes > case sensitive = yes > share modes = no Tomasz Misterka ----------------H-I-E-R-O-G-L-I-F----------------- Komputery, Serwis, Sieci, Witryny WWW, Bazy Danych Programowanie, Multimedia, Administracja, Reklama 0-501 037 960 tel./fax (22) 8373237 wew. 371, 273 http://www.netla.pl http://www.hieroglif.com.pl ---------T-O-M-A-S-Z---M-I-S-T-E-R-K-A------------ From linux4biz at yahoo.com Mon Apr 23 16:34:35 2001 From: linux4biz at yahoo.com (kapil sharma) Date: Tue Dec 2 02:34:24 2003 Subject: samba problem Message-ID: <007c01c0cc13$4c509bd0$100a0a0a@comp1> Hi, While connecting win2k client to samba 2.2.0 server acting as PDC I am getting the following errors: [2001/04/23 15:34:42, 0] passdb/pampass.c:pam_accountcheck(381) PAM: Account Validation Failed - Rejecting User! [2001/04/23 15:34:42, 0] passdb/pampass.c:pam_accountcheck(381) PAM: Account Validation Failed - Rejecting User! Cheers kapil _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com From p.grimmerink at home.nl Mon Apr 23 16:17:49 2001 From: p.grimmerink at home.nl (Pieter Grimmerink) Date: Tue Dec 2 02:34:24 2003 Subject: Groups in Samba 2.2.0 Message-ID: I understand the Domain Users and Domain Admins group mappings are not going to be supported in Samba 2.2.0, but will there be a way to at least use the unix groups from the \etc\groups file? I really need group support for my PDC. Best regards, Pieter Grimmerink From ink at inconnu.isu.edu Mon Apr 23 17:06:48 2001 From: ink at inconnu.isu.edu (Craig Kelley) Date: Tue Dec 2 02:34:24 2003 Subject: Groups in Samba 2.2.0 In-Reply-To: Message-ID: On Mon, 23 Apr 2001, Pieter Grimmerink wrote: > I understand the Domain Users and Domain Admins group > mappings are not going to be supported in Samba 2.2.0, > but will there be a way to at least use the unix groups > from the \etc\groups file? > I really need group support for my PDC. No worries, they are still there in 2.2. -- It won't be long before the CPU is a card in a slot on your ATX videoboard Craig Kelley -- kellcrai@isu.edu http://www.isu.edu/~kellcrai finger ink@inconnu.isu.edu for PGP block From gcarter at valinux.com Mon Apr 23 17:45:24 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:24 2003 Subject: Groups in Samba 2.2.0 In-Reply-To: Message-ID: On Mon, 23 Apr 2001, Pieter Grimmerink wrote: > I understand the Domain Users and Domain Admins group > mappings are not going to be supported in Samba 2.2.0, > but will there be a way to at least use the unix groups > from the \etc\groups file? /etc/group should already be supported. They only thing is that they are considered to be local groups. Try 'net.exe localgroup /domain' and you will see what I mean. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From wendt at kingcrab.nrl.navy.mil Mon Apr 23 18:18:35 2001 From: wendt at kingcrab.nrl.navy.mil (Mark Wendt) Date: Tue Dec 2 02:34:24 2003 Subject: Problems with new cvs compile Message-ID: <5.0.1.4.2.20010423141827.00ad8490@kingcrab.nrl.navy.mil> Hi all, Posted this to the tng-user list last week and hadn't seen any replies (actually hadn't seen any traffic at all on that list...). Just wondered if any one else was running into this problem, and if any one had a fix or work around. Context: Solaris 2.6, patched, no NIS or NIS+ Latest cvs version of TNG gcc version 2.95.3 20010315 (release) Ran ./configure --prefix=/usr/local/samba-tng -- everything cool here Ran make, here's where the problem showed up: Compiling client/client.c client/client.c:1698: `cmd_history' undeclared here (not in a function) client/client.c:1698: initializer element is not constant client/client.c:1698: (near initialization for `commands[39].fn') *** Error code 1 make: Fatal error: Command failed for target `client/client.o' Thanks, Mark Wendt System/Network Administrator Naval Research Lab Washington, DC From don_mccall at hp.com Mon Apr 23 18:49:16 2001 From: don_mccall at hp.com (MCCALL,DON (HP-USA,ex1)) Date: Tue Dec 2 02:34:24 2003 Subject: PLEASE HELP: NT domain problem Message-ID: <079FD72E42C9D311B854009027650E6F040509A0@xatl02.atl.hp.com> Hello Nikos - You mention that not only can you NOT see the servers in the network neighborhood, but that you ALSO cannot get to them simply with \\servername , but must use \\servername.dnsdomainsuffix. If this is correct, then what this indicates is that your clients are not being able to resolve the netbios name (servername) via either netbios broadcast OR wins, but are able to resolve via hosts/dns. Not being able to resolve via netbios broadcast is simple; probably the clients and servers are on separate subnets. But I notice that you have a wins server entry in your smb.conf file - 172.26.33.44 You should make sure that the wins server you are trying to register your netbios name with is the same wins server that your clients are using for name resolution. If this IS the case, then you might want to use wins manager gui to check to see WHAT name is registered (if any) for the ip addresses of the samba servers in question. You should also check your log.nmb file to verify that the name registration to the wins server from your samba server is actually working; perhaps something is going wrong there. Finally, just to make sure that there is not some reverse name lookup issue (don't think so, as you appear to be ABLE to resolve names via DNS) you might want to try temporarily commenting out your hosts allow smb.conf line... Hope this helps, Don -----Original Message----- From: Ext-Nikos.Lakoutsis@nokia.com [mailto:Ext-Nikos.Lakoutsis@nokia.com] Sent: Monday, April 23, 2001 11:13 AM To: samba-ntdom@lists.samba.org Subject: PLEASE HELP: NT domain problem Could anyone please help with the problem below... The funny think is that I can see one of those servers in the network neighborhood and I am getting that the network path was not found? Any ideas? Thanks amigos Nikos -----Original Message----- From: Lakoutsis Nikos (EXT-FlightMover/Camberley) Sent: Monday, April 23, 2001 12:00 PM To: 'ext Lists'; Lakoutsis Nikos (EXT-FlightMover/Camberley) Cc: samba-ntdom@lists.samba.org Subject: RE: NT domain problem Thanks for your quick reply Phillip.... I am afraid that didn't work. I even set the value to 34 which is even above an NT4 server....but still nothing...:( Regards Nikos -----Original Message----- From: ext Lists [mailto:lists@pealpjpain.de] Sent: Monday, April 23, 2001 11:37 AM To: Ext-Nikos.Lakoutsis@nokia.com Cc: samba-ntdom@lists.samba.org Subject: AW: NT domain problem > I can access the servers from my NT client by typing their fully qualified > name but I cannot see the servers through the network neighborhood or by > typing \\server_name from the run window.... > This was working in the past.... Hi Nikos! Try using the "os level" option in the global section. Just start with a value around 8 and go up until your clients are able to 'see' the servers: [global] ... os level = 8 ... This option means how 'strong' a SMB Server should act on a network. So if this value is set too low, other services run e.g. by clients will overlap your samba service and you won't be able to see it from those clients. I had the problem when stepping from Win98 to Win2k clients. Nothing was changed on the server config but suddenly the machine was disappeared from my network neighbourhood. This is no guarantee that it works but it may help. Tell me of your experiences! Greetings >>>> Philipp --------------------------------------------------------------------------- Hi all, I have the following problem and I was wondering if you could help: The problem exists in 2 servers one running Solaris 2.6 and the other HP-UX 10.20. When I am adding the servers to the NT4 domain NCS_CA (with PDC ntcdhcpaca) everything seems to work fine. I am using "smbpasswd -j NCS_CA -r ntcdhcpbca" and they are joining the domain ok. I can access the servers from my NT client by typing their fully qualified name but I cannot see the servers through the network neighborhood or by typing \\server_name from the run window.... This was working in the past.... Any suggestions? Thanks guys Nikos P.S.Here is the smb.conf [global] workgroup = NCS_CA netbios name = NFS01CA server string = NFS HP-UX nfs01ca Samba Server security = DOMAIN encrypt passwords = Yes password server = ntcdhcpbca ntcdhcpaca username map = /opt/samba/lib/smbusers debug level = 0 log file = /opt/samba/log/log.%m max log size = 500 name resolve order = lmhosts wins hosts bcast deadtime = 10 max open files = 4000 load printers = No local master = No dns proxy = No wins server = 172.26.33.44 hosts allow = 131.228. 172. ------------------------------------------------------ From pilsl at goldfisch.at Mon Apr 23 19:39:51 2001 From: pilsl at goldfisch.at (Peter Pilsl) Date: Tue Dec 2 02:34:24 2003 Subject: udp-port of nmbd does not bind to interfaces Message-ID: <20010423213951.B87647@i3.atat.at> even when I force binding to interfaces the udp-ports of nmbd (127,138) are open to any interace. I use some older TNG-alpha-version. #netstat -an udp 0 0 192.168.11.1:138 0.0.0.0:* udp 0 0 192.168.11.1:137 0.0.0.0:* udp 0 0 0.0.0.0:138 0.0.0.0:* udp 0 0 0.0.0.0:137 0.0.0.0:* #socklist udp 138 342 0 239 10 nmbd udp 137 339 0 239 9 nmbd udp 138 331 0 239 8 nmbd udp 137 328 0 239 6 nmbd peter -- mag. peter pilsl phone: +43 676 3574035 fax : +43 676 3546512 email: pilsl@goldfisch.at sms : pilsl@max.mail.at pgp-key available From bcaudle at hotmail.com Mon Apr 23 21:05:23 2001 From: bcaudle at hotmail.com (Brandon Caudle) Date: Tue Dec 2 02:34:24 2003 Subject: Problem With Profiles Message-ID: I have a user Bill who logs on to his desktop which has the resoulution set to 800*600 his profile is stored on the server and when he goes and works on his laptop which has a native resolution of 1024*768 it messes him up and makes his resoultion reduce to 800*600 this is my current smb.conf [global] coding system = client code page = 850 workgroup = PME netbios name = SERVER netbios aliases = LINUX netbios scope = server string = Samba 2.0.7 interfaces = bind interfaces only = No security = USER logon script = %U.bat logon path = \\server\%U\profile\%m logon drive = H: logon home = \\server\%U domain logons = Yes this doesn't seem to work (i would like to keep him using the same login name not a different one) thanks brandon _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com From cordeiro at ipn.pt Mon Apr 23 22:18:18 2001 From: cordeiro at ipn.pt (Luis Cordeiro) Date: Tue Dec 2 02:34:24 2003 Subject: Samba, Win2000 and trust between samba Message-ID: <005301c0cc43$5ea264f0$0505020a@calimero> Hi, I'm having some problems with samba. I have two servers with redhat 7.0 and samba 2.2. The computers that are making autentification though samba have Win2000 (witch is working when having only one domain). My problem is that I need to have the possibility to logon on the Win2000 machines using the two servers. I've heard that I could use the trust between the two samba servers. But I've read in some documents (perhaps not the right ones) that that's not possible to do. My question is: is it possible? if so how to? if not is there another way to do it? Thanks, Luis From vorlon at netexpress.net Mon Apr 23 22:59:22 2001 From: vorlon at netexpress.net (Steve Langasek) Date: Tue Dec 2 02:34:24 2003 Subject: samba problem In-Reply-To: <007c01c0cc13$4c509bd0$100a0a0a@comp1> Message-ID: Hi Kapil, On Mon, 23 Apr 2001, kapil sharma wrote: > While connecting win2k client to samba 2.2.0 server acting as PDC I am > getting the following errors: > [2001/04/23 15:34:42, 0] passdb/pampass.c:pam_accountcheck(381) > PAM: Account Validation Failed - Rejecting User! > [2001/04/23 15:34:42, 0] passdb/pampass.c:pam_accountcheck(381) > PAM: Account Validation Failed - Rejecting User! There's quite an enthusiastic discussion on this subject taking place on the samba-technical list right now. :) To summarize, it appears that the new PAM account support in Samba 2.2.0 sometimes fails with certain combinations of PAM modules. The quick & dirty solution is to use 'account require pam_permit.so' in your PAM config instead of 'account require pam_unix.so'. If you have any trouble getting this to work, please post back with your Samba PAM config (/etc/pam.d/samba on Linux, or /etc/pam.conf on Solaris) and I'll try to help. Regards, Steve Langasek postmodern programmer From slu at firerun.net Mon Apr 23 23:02:11 2001 From: slu at firerun.net (Patrick) Date: Tue Dec 2 02:34:24 2003 Subject: Samba, Win2000 and trust between samba References: <005301c0cc43$5ea264f0$0505020a@calimero> Message-ID: <3AE4B473.C6AFA9F6@firerun.net> You will need to have one machine setup as the authentication machine. You will also have to add a machine account for the other server. Then for the other machine you will need to have 'security = domain' and 'password server = ' set in the smb.conf. then you will have to issue the command 'smbpasswd -j ' for the machine to join the domain. Patrick Luis Cordeiro wrote: > Hi, > > I'm having some problems with samba. > > I have two servers with redhat 7.0 and samba 2.2. The computers that are > making autentification though samba have Win2000 (witch is working when > having only one domain). > > My problem is that I need to have the possibility to logon on the Win2000 > machines using the two servers. I've heard that I could use the trust > between the two samba servers. But I've read in some documents (perhaps not > the right ones) that that's not possible to do. > > My question is: is it possible? if so how to? if not is there another way to > do it? > > Thanks, > Luis From txkjohn at hotmail.com Tue Apr 24 00:10:53 2001 From: txkjohn at hotmail.com (John Humphrey) Date: Tue Dec 2 02:34:24 2003 Subject: 'Load printers = no' question Message-ID: As the subject line implies, I have the 'load printers' option turned off. I have one printer loaded manually. The path is /usr/local/samba/spool/p0 This directory has permissions set as 1777. This is the only set of permissions that I've found will work. When my server reboots (Red Hat 7.0) the permissions are reset. I've had to place an entry in the rc.local file to set these permissions during the boot process. Is this the correct way? Am I going about this correctly? John Humphrey _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com From benr at rsp.com.au Tue Apr 24 03:41:32 2001 From: benr at rsp.com.au (Ben Roberts) Date: Tue Dec 2 02:34:24 2003 Subject: lastest rpm of samba 2.2.0 Message-ID: <3AE4F5EC.8365B129@rsp.com.au> Hi all, Sorry if this has been raised before, but Im just hunting down a rpm for samba 2.2.0 for redaht 6.2 and/or redhat 7.0. Thanks, Ben From lee.taylor at aeroton.scania.co.za Tue Apr 24 07:22:05 2001 From: lee.taylor at aeroton.scania.co.za (C.Lee Taylor ( Scania SA )) Date: Tue Dec 2 02:34:24 2003 Subject: 'Load printers = no' question References: Message-ID: <00dd01c0cc8f$4544cba0$6201010a@CLeeTaylor> > As the subject line implies, I have the 'load printers' option turned off. I > have one printer loaded manually. The path is /usr/local/samba/spool/p0 > This directory has permissions set as 1777. This is the only set of > permissions that I've found will work. When my server reboots (Red Hat 7.0) > the permissions are reset. I've had to place an entry in the rc.local file > to set these permissions during the boot process. Is this the correct way? > Am I going about this correctly? I am not sure weather the perms are right, but I think your problem is with LinuxConf ... if it is setup to run with ntsysv, it may be setting your perms back to what it believes is best for you ... From thomas.voigt at dg0ofz.weimar.thur.de Tue Apr 24 07:58:45 2001 From: thomas.voigt at dg0ofz.weimar.thur.de (Thomas Voigt) Date: Tue Dec 2 02:34:24 2003 Subject: Timesync SAMBA TNG <-> Win98 ? Message-ID: <001c01c0cc94$633c3490$0201a8c0@thomas> Hi all! Since I moved from Samba 2.0.7 to Samba TNG 2.6 alpha the time synchronisation with the "net time ..." command only works with Win2k. In Win98 the time is synchronized , but with an exact difference of 2 hours. Which ist the difference between localtime and UTC here. I've tryed the "time offset..." statement in smb.conf but without success. Some other people has the same problems. Does anyone solved this problem? -- Greetings from Weimar / Germany Thomas Voigt From linux4biz at yahoo.com Tue Apr 24 09:19:33 2001 From: linux4biz at yahoo.com (kapil sharma) Date: Tue Dec 2 02:34:24 2003 Subject: samba problem References: Message-ID: <001301c0cc9f$ada6a5a0$100a0a0a@comp1> Hi, I can't see any (/etc/pam.d/samba ) file on my server. I am using linux. Do I have to create one? kapil ----- Original Message ----- From: "Steve Langasek" To: "kapil sharma" Cc: Sent: Monday, April 23, 2001 11:59 PM Subject: Re: samba problem > Hi Kapil, > > On Mon, 23 Apr 2001, kapil sharma wrote: > > > While connecting win2k client to samba 2.2.0 server acting as PDC I am > > getting the following errors: > > > [2001/04/23 15:34:42, 0] passdb/pampass.c:pam_accountcheck(381) > > PAM: Account Validation Failed - Rejecting User! > > [2001/04/23 15:34:42, 0] passdb/pampass.c:pam_accountcheck(381) > > PAM: Account Validation Failed - Rejecting User! > > There's quite an enthusiastic discussion on this subject taking place on the > samba-technical list right now. :) To summarize, it appears that the new PAM > account support in Samba 2.2.0 sometimes fails with certain combinations of > PAM modules. The quick & dirty solution is to use > 'account require pam_permit.so' in your PAM config instead of > 'account require pam_unix.so'. If you have any trouble getting this to work, > please post back with your Samba PAM config (/etc/pam.d/samba on Linux, or > /etc/pam.conf on Solaris) and I'll try to help. > > Regards, > Steve Langasek > postmodern programmer _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com From ad at ordix.de Tue Apr 24 09:33:22 2001 From: ad at ordix.de (Andre Dirr) Date: Tue Dec 2 02:34:24 2003 Subject: samba and quotas Message-ID: <3AE54862.AF2CB22C@ordix.de> hi all, i wanna use samba2.2.0 with disk-quotas for all users. all i know is, that i have to configure samba with quotas. is that all i have to do or have i to change my smb.conf file or something else. thanks you for answers, andy dirr From andre.doehn at econia.com Tue Apr 24 09:41:12 2001 From: andre.doehn at econia.com (andre.doehn@econia.com) Date: Tue Dec 2 02:34:24 2003 Subject: samba and quotas Message-ID: no - all what you have to do is to compile samba with --with-quotas option and install disk quotas. a good introduction to use disk quotas is http://www.io.com/help/linux/Quota.html have fun! bye andre |--------+---------------------------------> | | Andre Dirr | | | | | | Sent by: | | | samba-ntdom-admin@lists| | | .samba.org | | | | | | | | | 24.04.2001 11:33 | | | | |--------+---------------------------------> >-----------------------------------------------------------------------------------------------------------| | | | To: samba-ntdom , samba | | cc: | | Subject: samba and quotas | >-----------------------------------------------------------------------------------------------------------| hi all, i wanna use samba2.2.0 with disk-quotas for all users. all i know is, that i have to configure samba with quotas. is that all i have to do or have i to change my smb.conf file or something else. thanks you for answers, andy dirr From Ext-Nikos.Lakoutsis at nokia.com Tue Apr 24 10:00:10 2001 From: Ext-Nikos.Lakoutsis at nokia.com (Ext-Nikos.Lakoutsis@nokia.com) Date: Tue Dec 2 02:34:24 2003 Subject: Solved: NT domain problem Message-ID: Thanks for your reply Don, I found the error. I set wins to be first in the resolve order and I've restarted nmbd as well. Everything seems ok now. Chirio Nikos -----Original Message----- From: ext MCCALL,DON (HP-USA,ex1) [mailto:don_mccall@hp.com] Sent: Monday, April 23, 2001 7:49 PM To: 'Ext-Nikos.Lakoutsis@nokia.com'; samba-ntdom@lists.samba.org Subject: RE: PLEASE HELP: NT domain problem Hello Nikos - You mention that not only can you NOT see the servers in the network neighborhood, but that you ALSO cannot get to them simply with \\servername , but must use \\servername.dnsdomainsuffix. If this is correct, then what this indicates is that your clients are not being able to resolve the netbios name (servername) via either netbios broadcast OR wins, but are able to resolve via hosts/dns. Not being able to resolve via netbios broadcast is simple; probably the clients and servers are on separate subnets. But I notice that you have a wins server entry in your smb.conf file - 172.26.33.44 You should make sure that the wins server you are trying to register your netbios name with is the same wins server that your clients are using for name resolution. If this IS the case, then you might want to use wins manager gui to check to see WHAT name is registered (if any) for the ip addresses of the samba servers in question. You should also check your log.nmb file to verify that the name registration to the wins server from your samba server is actually working; perhaps something is going wrong there. Finally, just to make sure that there is not some reverse name lookup issue (don't think so, as you appear to be ABLE to resolve names via DNS) you might want to try temporarily commenting out your hosts allow smb.conf line... Hope this helps, Don -----Original Message----- From: Ext-Nikos.Lakoutsis@nokia.com [mailto:Ext-Nikos.Lakoutsis@nokia.com] Sent: Monday, April 23, 2001 11:13 AM To: samba-ntdom@lists.samba.org Subject: PLEASE HELP: NT domain problem Could anyone please help with the problem below... The funny think is that I can see one of those servers in the network neighborhood and I am getting that the network path was not found? Any ideas? Thanks amigos Nikos -----Original Message----- From: Lakoutsis Nikos (EXT-FlightMover/Camberley) Sent: Monday, April 23, 2001 12:00 PM To: 'ext Lists'; Lakoutsis Nikos (EXT-FlightMover/Camberley) Cc: samba-ntdom@lists.samba.org Subject: RE: NT domain problem Thanks for your quick reply Phillip.... I am afraid that didn't work. I even set the value to 34 which is even above an NT4 server....but still nothing...:( Regards Nikos -----Original Message----- From: ext Lists [mailto:lists@pealpjpain.de] Sent: Monday, April 23, 2001 11:37 AM To: Ext-Nikos.Lakoutsis@nokia.com Cc: samba-ntdom@lists.samba.org Subject: AW: NT domain problem > I can access the servers from my NT client by typing their fully qualified > name but I cannot see the servers through the network neighborhood or by > typing \\server_name from the run window.... > This was working in the past.... Hi Nikos! Try using the "os level" option in the global section. Just start with a value around 8 and go up until your clients are able to 'see' the servers: [global] ... os level = 8 ... This option means how 'strong' a SMB Server should act on a network. So if this value is set too low, other services run e.g. by clients will overlap your samba service and you won't be able to see it from those clients. I had the problem when stepping from Win98 to Win2k clients. Nothing was changed on the server config but suddenly the machine was disappeared from my network neighbourhood. This is no guarantee that it works but it may help. Tell me of your experiences! Greetings >>>> Philipp --------------------------------------------------------------------------- Hi all, I have the following problem and I was wondering if you could help: The problem exists in 2 servers one running Solaris 2.6 and the other HP-UX 10.20. When I am adding the servers to the NT4 domain NCS_CA (with PDC ntcdhcpaca) everything seems to work fine. I am using "smbpasswd -j NCS_CA -r ntcdhcpbca" and they are joining the domain ok. I can access the servers from my NT client by typing their fully qualified name but I cannot see the servers through the network neighborhood or by typing \\server_name from the run window.... This was working in the past.... Any suggestions? Thanks guys Nikos P.S.Here is the smb.conf [global] workgroup = NCS_CA netbios name = NFS01CA server string = NFS HP-UX nfs01ca Samba Server security = DOMAIN encrypt passwords = Yes password server = ntcdhcpbca ntcdhcpaca username map = /opt/samba/lib/smbusers debug level = 0 log file = /opt/samba/log/log.%m max log size = 500 name resolve order = lmhosts wins hosts bcast deadtime = 10 max open files = 4000 load printers = No local master = No dns proxy = No wins server = 172.26.33.44 hosts allow = 131.228. 172. ------------------------------------------------------ From fphilippo at netra-systems.com Tue Apr 24 10:16:01 2001 From: fphilippo at netra-systems.com (francois PHILIPPO) Date: Tue Dec 2 02:34:24 2003 Subject: NT Client doesn't works Message-ID: <5.1.0.14.0.20010424121311.00a01d90@192.9.201.99> Hello everybody As i can know with SAMBA 2.2 I can be PDC even with NT client but each time I try to connect an NT client to my SAMBA NT DOMAIN I have an error (kernell32....) is there a special thing to do on NT client ? help . th@nx From idra at samba.org Tue Apr 24 10:14:32 2001 From: idra at samba.org (Simo Sorce) Date: Tue Dec 2 02:34:24 2003 Subject: samba and quotas In-Reply-To: <3AE54862.AF2CB22C@ordix.de>; from ad@ordix.de on Tue, Apr 24, 2001 at 11:33:22AM +0200 References: <3AE54862.AF2CB22C@ordix.de> Message-ID: <20010424031432.A2873@va.samba.org> You must also enable system quota for your filesystem. On Tue, Apr 24, 2001 at 11:33:22AM +0200, Andre Dirr wrote: > hi all, > i wanna use samba2.2.0 with disk-quotas for all users. all i know is, > that i have to configure samba with quotas. is that all i have to do or > have i to change my smb.conf file or something else. > thanks you for answers, > andy dirr > -- Simo Sorce ------------------------------ Unix IS user friendly, it is just selective about who his friends are. From ad at ordix.de Tue Apr 24 10:26:59 2001 From: ad at ordix.de (Andre Dirr) Date: Tue Dec 2 02:34:25 2003 Subject: samba and acl Message-ID: <3AE554F3.AE6F43C@ordix.de> hi all, i wanna use samba2.2.0 with acl. all i know is, that i have to configure samba with acl-support. is that all i have to do or have i to change my smb.conf file or something else. where can i get instructions for this in the net? when i start "./configure --with-acl-support" i get the following lines: checking whether to support ACLs... checking for acl_get_file in -lacl... (cached) no checking for ACL support... (cached) no checking for XFS ACL support... thanks you for answers, andy dirr From idra at samba.org Tue Apr 24 10:29:27 2001 From: idra at samba.org (Simo Sorce) Date: Tue Dec 2 02:34:25 2003 Subject: samba and acl In-Reply-To: <3AE554F3.AE6F43C@ordix.de>; from ad@ordix.de on Tue, Apr 24, 2001 at 12:26:59PM +0200 References: <3AE554F3.AE6F43C@ordix.de> Message-ID: <20010424032927.B2873@va.samba.org> You need acl support for your file system. seem that acl works for solaris , IRIX xfs linux ext2+bestbits patch and linux xfs, may be more system are supported yet or will be soon. On Tue, Apr 24, 2001 at 12:26:59PM +0200, Andre Dirr wrote: > hi all, > > i wanna use samba2.2.0 with acl. all i know is, that i have to configure > samba with acl-support. is that all i have to do or > have i to change my smb.conf file or something else. where can i get > instructions for this in the net? > when i start "./configure --with-acl-support" i get the following lines: > checking whether to support ACLs... checking for acl_get_file in > -lacl... (cached) no > checking for ACL support... (cached) no > checking for XFS ACL support... > > thanks you for answers, > andy dirr > -- Simo Sorce ------------------------------ Unix IS user friendly, it is just selective about who his friends are. From sven at sven-siemsen.de Tue Apr 24 10:40:17 2001 From: sven at sven-siemsen.de (Sven Siemsen) Date: Tue Dec 2 02:34:25 2003 Subject: samba and acl In-Reply-To: <3AE554F3.AE6F43C@ordix.de> Message-ID: Andy, you need an acl kernel patch for linux. Have a look at http://acl.bestbits.at/ This works very well for me (Kernel 2.2.18 and Samba 2.2.0) Regards, Sven am 24.04.2001 12:26 Uhr schrieb Andre Dirr unter ad@ordix.de: > hi all, > > i wanna use samba2.2.0 with acl. all i know is, that i have to configure > samba with acl-support. is that all i have to do or > have i to change my smb.conf file or something else. where can i get > instructions for this in the net? > when i start "./configure --with-acl-support" i get the following lines: > checking whether to support ACLs... checking for acl_get_file in > -lacl... (cached) no > checking for ACL support... (cached) no > checking for XFS ACL support... > > thanks you for answers, > andy dirr > > From thos at esat.com Tue Apr 24 10:41:11 2001 From: thos at esat.com (Tom Horan) Date: Tue Dec 2 02:34:25 2003 Subject: samba and acl Message-ID: <4AAE17B78CD3D411BF5700508B65645F4D7224@gcqsexc2.dublin.esat.ie> If you are running linux you need to patch your kernel - http://acl.bestbits.at. Then remove your config.cache and run ./configure --with-acl-support again. Tom -----Original Message----- From: Andre Dirr [mailto:ad@ordix.de] Sent: 24 April 2001 11:27 To: samba-ntdom; samba Subject: samba and acl hi all, i wanna use samba2.2.0 with acl. all i know is, that i have to configure samba with acl-support. is that all i have to do or have i to change my smb.conf file or something else. where can i get instructions for this in the net? when i start "./configure --with-acl-support" i get the following lines: checking whether to support ACLs... checking for acl_get_file in -lacl... (cached) no checking for ACL support... (cached) no checking for XFS ACL support... thanks you for answers, andy dirr -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. http://www.esatbusiness.com ********************************************************************** From ghost at uusikaupunki.net Tue Apr 24 12:23:46 2001 From: ghost at uusikaupunki.net (Juha Auvinen) Date: Tue Dec 2 02:34:25 2003 Subject: 2.2.0 Running as PDC on rh6.2 Message-ID: I'm having troubles to add computers to the domain xxx. Client computers OS is W2K and it says either rpc out of range or the account is not valid. Could somebody give a crash course how to make the samba run as pdc and how to add computers to the domain. Thank you in advance. -- Juha Auvinen Talinkorventie 11 c 80 20320 TURKU Handle Ghost Puh 0400-976272 http://atsilnx.uusikaupunki.net Carpe Diem Lads! From ad at ordix.de Tue Apr 24 12:42:04 2001 From: ad at ordix.de (Andre Dirr) Date: Tue Dec 2 02:34:25 2003 Subject: 2.2.0 Running as PDC on rh6.2 References: Message-ID: <3AE5749C.ECFA556F@ordix.de> hi all, it?s the same with me. i try to act samba2.2.0 as pdc here (red_hat6.2) and am interested in any news about that topic. bye, andy Juha Auvinen wrote: > > I'm having troubles to add computers to the domain xxx. Client computers > OS is W2K and it says either rpc out of range or the account is not valid. > Could somebody give a crash course how to make the samba run as pdc and > how to add computers to the domain. Thank you in advance. From ghost at uusikaupunki.net Tue Apr 24 12:42:51 2001 From: ghost at uusikaupunki.net (Juha Auvinen) Date: Tue Dec 2 02:34:25 2003 Subject: 2.2.0 Running as PDC on rh6.2 In-Reply-To: <3AE5749C.ECFA556F@ordix.de> Message-ID: Actually I managed to get one W2K machine to join the domain but when I tried another the same way those errors keep appearing... I didn't change anything in the smb.conf just tried to get computer to join the domain. On Tue, 24 Apr 2001, Andre Dirr wrote: > hi all, > it?s the same with me. i try to act samba2.2.0 as pdc here (red_hat6.2) > and am interested in any news about that topic. > bye, andy > > Juha Auvinen wrote: > > > > I'm having troubles to add computers to the domain xxx. Client computers > > OS is W2K and it says either rpc out of range or the account is not valid. > > Could somebody give a crash course how to make the samba run as pdc and > > how to add computers to the domain. Thank you in advance. > -- Juha Auvinen Talinkorventie 11 c 80 20320 TURKU Handle Ghost Puh 0400-976272 http://atsilnx.uusikaupunki.net Email: ghost@iki.fi ghost@uusikaupunki.net juha.auvinen@vskol.uusikaupunki.fi juha.auvinen@levi.fi Carpe Diem Lads! From linux4biz at yahoo.com Tue Apr 24 13:21:31 2001 From: linux4biz at yahoo.com (kapil sharma) Date: Tue Dec 2 02:34:25 2003 Subject: 2.2.0 Running as PDC on rh6.2 References: Message-ID: <006201c0ccc1$7b62a270$100a0a0a@comp1> Can anybody please help me in joining the win2k client with linux running samba 2.2.0. I am getting the following errors: [2001/04/23 15:34:42, 0] passdb/pampass.c:pam_accountcheck(381) PAM: Account Validation Failed - Rejecting User! [2001/04/23 15:34:42, 0] passdb/pampass.c:pam_accountcheck(381) PAM: Account Validation Failed - Rejecting User! kapil ----- Original Message ----- From: "Juha Auvinen" To: "Andre Dirr" Cc: "samba-ntdom" Sent: Tuesday, April 24, 2001 1:42 PM Subject: Re: 2.2.0 Running as PDC on rh6.2 > Actually I managed to get one W2K machine to join the domain but when I > tried another the same way those errors keep appearing... I didn't change > anything in the smb.conf just tried to get computer to join the > domain. > > On Tue, 24 Apr 2001, Andre Dirr wrote: > > > hi all, > > it?s the same with me. i try to act samba2.2.0 as pdc here (red_hat6.2) > > and am interested in any news about that topic. > > bye, andy > > > > Juha Auvinen wrote: > > > > > > I'm having troubles to add computers to the domain xxx. Client computers > > > OS is W2K and it says either rpc out of range or the account is not valid. > > > Could somebody give a crash course how to make the samba run as pdc and > > > how to add computers to the domain. Thank you in advance. > > > > -- > Juha Auvinen > Talinkorventie 11 c 80 > 20320 TURKU > > Handle Ghost > > Puh 0400-976272 > > http://atsilnx.uusikaupunki.net > > Email: > ghost@iki.fi > ghost@uusikaupunki.net > juha.auvinen@vskol.uusikaupunki.fi > juha.auvinen@levi.fi > > > Carpe Diem Lads! > _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com From vorlon at netexpress.net Tue Apr 24 14:37:04 2001 From: vorlon at netexpress.net (Steve Langasek) Date: Tue Dec 2 02:34:25 2003 Subject: samba problem In-Reply-To: <001301c0cc9f$ada6a5a0$100a0a0a@comp1> Message-ID: On Tue, 24 Apr 2001, kapil sharma wrote: > I can't see any (/etc/pam.d/samba ) file on my server. I am using linux. Do > I have to create one? If you don't have /etc/pam.d/samba, PAM will look at /etc/pam.d/other for its config. What Linux distribution are you using? Steve Langasek postmodern programmer > ----- Original Message ----- > From: "Steve Langasek" > To: "kapil sharma" > Cc: > Sent: Monday, April 23, 2001 11:59 PM > Subject: Re: samba problem > > > > Hi Kapil, > > > > On Mon, 23 Apr 2001, kapil sharma wrote: > > > > > While connecting win2k client to samba 2.2.0 server acting as PDC I am > > > getting the following errors: > > > > > [2001/04/23 15:34:42, 0] passdb/pampass.c:pam_accountcheck(381) > > > PAM: Account Validation Failed - Rejecting User! > > > [2001/04/23 15:34:42, 0] passdb/pampass.c:pam_accountcheck(381) > > > PAM: Account Validation Failed - Rejecting User! > > > > There's quite an enthusiastic discussion on this subject taking place on > the > > samba-technical list right now. :) To summarize, it appears that the new > PAM > > account support in Samba 2.2.0 sometimes fails with certain combinations > of > > PAM modules. The quick & dirty solution is to use > > 'account require pam_permit.so' in your PAM config instead of > > 'account require pam_unix.so'. If you have any trouble getting this to > work, > > please post back with your Samba PAM config (/etc/pam.d/samba on Linux, or > > /etc/pam.conf on Solaris) and I'll try to help. > > > > Regards, > > Steve Langasek > > postmodern programmer > > > _________________________________________________________ > Do You Yahoo!? > Get your free @yahoo.com address at http://mail.yahoo.com > From jeremy at valinux.com Tue Apr 24 15:12:06 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:25 2003 Subject: 2.2.0 Running as PDC on rh6.2 In-Reply-To: <3AE5749C.ECFA556F@ordix.de>; from ad@ordix.de on Tue, Apr 24, 2001 at 02:42:04PM +0200 References: <3AE5749C.ECFA556F@ordix.de> Message-ID: <20010424081206.A7488@valinux.com> On Tue, Apr 24, 2001 at 02:42:04PM +0200, Andre Dirr wrote: > hi all, > it?s the same with me. i try to act samba2.2.0 as pdc here (red_hat6.2) > and am interested in any news about that topic. > bye, andy > > Juha Auvinen wrote: > > > > I'm having troubles to add computers to the domain xxx. Client computers > > OS is W2K and it says either rpc out of range or the account is not valid. > > Could somebody give a crash course how to make the samba run as pdc and > > how to add computers to the domain. Thank you in advance. > Ok - Gerald discovered the cause of this problem, and I have changed the CVS code to give a better error message. The problem with "rpc out of range" is due to the machine account for a client machine not being present in /etc/passwd, although present in smbpasswd. Remember, it needs to be in *both* places before a client can be added into a Samba hosted domain. Regards, Jeremy Allison, Samba Team. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From linux4biz at yahoo.com Tue Apr 24 16:05:05 2001 From: linux4biz at yahoo.com (Kapil Sharma) Date: Tue Dec 2 02:34:25 2003 Subject: samba problem In-Reply-To: Message-ID: <20010424160505.55025.qmail@web10302.mail.yahoo.com> Hi , I am using redhat 7.0 kapil --- Steve Langasek wrote: > On Tue, 24 Apr 2001, kapil sharma wrote: > > > I can't see any (/etc/pam.d/samba ) file on my > server. I am using linux. Do > > I have to create one? > > If you don't have /etc/pam.d/samba, PAM will look at > /etc/pam.d/other for its > config. What Linux distribution are you using? > > Steve Langasek > postmodern programmer > > > ----- Original Message ----- > > From: "Steve Langasek" > > To: "kapil sharma" > > Cc: > > Sent: Monday, April 23, 2001 11:59 PM > > Subject: Re: samba problem > > > > > > > Hi Kapil, > > > > > > On Mon, 23 Apr 2001, kapil sharma wrote: > > > > > > > While connecting win2k client to samba 2.2.0 > server acting as PDC I am > > > > getting the following errors: > > > > > > > [2001/04/23 15:34:42, 0] > passdb/pampass.c:pam_accountcheck(381) > > > > PAM: Account Validation Failed - Rejecting > User! > > > > [2001/04/23 15:34:42, 0] > passdb/pampass.c:pam_accountcheck(381) > > > > PAM: Account Validation Failed - Rejecting > User! > > > > > > There's quite an enthusiastic discussion on this > subject taking place on > > the > > > samba-technical list right now. :) To > summarize, it appears that the new > > PAM > > > account support in Samba 2.2.0 sometimes fails > with certain combinations > > of > > > PAM modules. The quick & dirty solution is to > use > > > 'account require pam_permit.so' in your PAM > config instead of > > > 'account require pam_unix.so'. If you have any > trouble getting this to > > work, > > > please post back with your Samba PAM config > (/etc/pam.d/samba on Linux, or > > > /etc/pam.conf on Solaris) and I'll try to help. > > > > > > Regards, > > > Steve Langasek > > > postmodern programmer > > > > > > > _________________________________________________________ > > Do You Yahoo!? > > Get your free @yahoo.com address at > http://mail.yahoo.com > > > __________________________________________________ Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/ From vorlon at netexpress.net Tue Apr 24 16:26:00 2001 From: vorlon at netexpress.net (Steve Langasek) Date: Tue Dec 2 02:34:25 2003 Subject: samba problem In-Reply-To: <20010424160505.55025.qmail@web10302.mail.yahoo.com> Message-ID: On Tue, 24 Apr 2001, Kapil Sharma wrote: > Hi , > I am using redhat 7.0 In that case, please try using this /etc/pam.d/samba file: auth required pam_unix.so account required pam_permit.so Regards, Steve Langasek postmodern programmer From Michael.Keightley at quadstone.com Tue Apr 24 16:21:26 2001 From: Michael.Keightley at quadstone.com (Michael.Keightley@quadstone.com) Date: Tue Dec 2 02:34:25 2003 Subject: Samba 2.2.0 and print drivers Message-ID: <200104241621.f3OGLQW20251@gromit.quadstone.co.uk> Hi, I've installed Samba 2.2.0 as a test domain on one of out Solaris 7 machines. I tried to set this up so it would store the printer driver on the Samba server.I've been having some difficulties. I've made root a domain administrator and login as root. It displays all printers under the Printers share, including an "Add Printer" icon. When I select Properties on one of the printers and try to add a print driver, it comes up with the error: "Driver failed to install. Only spooler properties will be displayed" So I select "New Driver". When I try to install a driver, e.g. HP LaserJet 4/4M PS, it comes up with the error "Unable to change to the specified driver, original settings will be restored". Any one got any ideas? It's not a Solaris problem, as it also happens on Red Hat 6.2. Here is the print$ share setup from my smb.conf: [print$] path = /home/samba_wallace/printers guest ok = yes browseable = yes read only = yes write list = root, @ntadmin I've created the directory /home/samba_wallace/printers/W32X86 Here is the whole smb.conf: [global] workgroup = DEVEL server string = Quadstone SAMBA Server %h os level = 64 preferred master = yes domain master = yes local master = yes security = user encrypt passwords = yes domain logons = yes logon path = \\%N\profile\%U logon drive = Q: logon script = netlogon.bat printcap name = /usr/local/share/samba/var/printcap wins support = yes smb passwd file = /home/samba_wallace/private/smbpasswd nis homedir = true homedir map = auto_home domain admin group = @ntadmin socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=16384 SO_RCVBUF=16384 [profile] path = /home/samba_wallace/%a/profile writeable = yes create mask = 0600 directory mask = 0700 [printers] printing = BSD print command = /usr/ucb/lpr -r -P%p %s; rm -f %s lprm command = /usr/ucb/lprm -P%p %j lpq command = /usr/ucb/lpq -P%p path = /home/samba_wallace/var/spool/public guest ok = no browseable = no writable = no printable = yes [print$] path = /home/samba_wallace/printers guest ok = yes browseable = yes read only = yes write list = root, mk, @ntadmin [homes] comment = Home Directories browseable = yes guest ok = no writable = yes [netlogon] path = /home/samba_wallace/%a/netlogon writeable = no guest ok = yes locking = no public = no -- Michael Keightley Tel: +44 131 220 4491 Systems Manager, Quadstone Limited, Fax: +44 131 220 4492 16 Chester Street, Edinburgh EH3 7RA, Scotland http://www.quadstone.com -- Please Note: This email message and its contents are property of Quadstone. If you received this message in error, please delete it and notify the sender via email. Thank you. From mariano.guelar at mercadolibre.com Tue Apr 24 17:17:52 2001 From: mariano.guelar at mercadolibre.com (Mariano Guelar) Date: Tue Dec 2 02:34:25 2003 Subject: =?iso-8859-1?Q?I_can=B4t_join_the_domain?= Message-ID: Hey I?m having some problems with samba 2.2.0. The problem is that I can only join the domain only once with samba as PDC with one Machine Account in WIN NT. If I remove this machine from the domain and then I try to Join it again I can?t. This is the message that I get: "Unable to Connect to de domain controller for this domain. Have your administrator check your computer account on the domain". Does anyone had this problem or solved it?? Regards, Mariano Guelar -------------- next part -------------- HTML attachment scrubbed and removed From cordeiro at ipn.pt Tue Apr 24 17:40:15 2001 From: cordeiro at ipn.pt (Luis Cordeiro) Date: Tue Dec 2 02:34:25 2003 Subject: Samba, Win2000 and trust between samba References: <005301c0cc43$5ea264f0$0505020a@calimero> <3AE4B473.C6AFA9F6@firerun.net> Message-ID: <011c01c0cce5$b1853c90$6400a8c0@calimero> I'm sorry, I've tried to do it, and even reading the manual, I wasn't able to make it work. What I understand from this is: ********** * Win2000 * ********** | | V ********** ********** * Server 1 *----------->* Server 2 * ********** ********** Server 1: - security = server - password server = server 2 - allow trusted domains = yes and then I run the following on Server 1 : smbpasswd -j Server 2: - security = user and then I run the following on Server 2 : smbpasswd -a -m I'm sending the smb.conf files in attach so you can see how i'm doing it. What's the problem? Is it necessary to have the machines registered on a DNS server? (they are on the same LAN and have invalid IPs) thanks, Luis Cordeiro ----- Original Message ----- From: "Patrick" To: "Luis Cordeiro" Cc: ; Sent: Tuesday, April 24, 2001 12:02 AM Subject: Re: Samba, Win2000 and trust between samba > You will need to have one machine setup as the authentication machine. You will > also have to add a machine account for the other server. Then for the other > machine you will need to have 'security = domain' and 'password server = of server>' set in the smb.conf. then you will have to issue the command > 'smbpasswd -j ' for the machine to join the domain. > > Patrick > > Luis Cordeiro wrote: > > > Hi, > > > > I'm having some problems with samba. > > > > I have two servers with redhat 7.0 and samba 2.2. The computers that are > > making autentification though samba have Win2000 (witch is working when > > having only one domain). > > > > My problem is that I need to have the possibility to logon on the Win2000 > > machines using the two servers. I've heard that I could use the trust > > between the two samba servers. But I've read in some documents (perhaps not > > the right ones) that that's not possible to do. > > > > My question is: is it possible? if so how to? if not is there another way to > > do it? > > > > Thanks, > > Luis -------------- next part -------------- A non-text attachment was scrubbed... Name: smb.conf_osipn Type: application/octet-stream Size: 1069 bytes Desc: not available Url : http://lists.samba.org/archive/samba-ntdom/attachments/20010424/1f0ea87a/smb.obj -------------- next part -------------- A non-text attachment was scrubbed... Name: smb.conf_samba Type: application/octet-stream Size: 1125 bytes Desc: not available Url : http://lists.samba.org/archive/samba-ntdom/attachments/20010424/1f0ea87a/smb-0001.obj From ken at hudat.com Tue Apr 24 19:09:45 2001 From: ken at hudat.com (Kendrick Vargas) Date: Tue Dec 2 02:34:25 2003 Subject: Square One In-Reply-To: <5.0.2.1.2.20010423075350.025f5b98@mail.mindiq.com> Message-ID: On Mon, 23 Apr 2001, kat wrote: > First of all, download and install/upgrade 7.1 of RedHat as it fixes MANY > bugs in the original 7.0. Although I am running 7.0 on my laptop and most > of my servers, it is greatly modified to fix all the problems 7.0 had > (broken gcc to name one) I would highly suggest this as well. This is also the first distribution that has ever really "just worked" with our network. We installed a machine and it automatically picked up NIS users (after providing the appropriate domain n' stuff), as well as autofs maps VIA NIS. It was BEAUtiful :-) -peace -- Let he who is without clue kiss my ass From mrfusion at gmx.net Tue Apr 24 20:34:34 2001 From: mrfusion at gmx.net (S. Zwedler) Date: Tue Dec 2 02:34:25 2003 Subject: Samba 2.2.0 + Win2k Domain Logon Message-ID: <3AE5E35A.F0FBBE6@gmx.net> Hi, I wonder if anyone had those strange errors too and maybe a solution ;) [2001/04/24 21:10:45, 0] smbd/service.c:make_connection(244) steffen (10.0.0.1) couldn't find service profile [2001/04/24 21:13:34, 0] lib/util_sock.c:read_socket_data(479) read_socket_data: recv failure for 4. Error = The connection was reset by the communication partner (translation of the german output) Now, a snippet of my smb.conf: logon script = STARTUP.BAT logon path = //%L/profiles logon drive = z: domain logons = Yes os level = 65 preferred master = True domain master = True wins support = Yes [profiles] comment = User Profiles path = /fileserver/usr/%u/profile read only = No create mask = 0777 directory mask = 0777 The path for the profile of every user actually exists and has the standard profile files. What is strange that the domain logon *sometimes* (let's say 1 out of 6 times) actually works. Is there something like a machine profile maybe !? User "szwedler" who logs onto the domain of course has a profile, but what about the machine "steffen" ?? PS: Don't mind the masks ;) Thanks a lot ! S. Zwedler From pgoetz at math.utexas.edu Tue Apr 24 22:20:44 2001 From: pgoetz at math.utexas.edu (Patrick Goetz) Date: Tue Dec 2 02:34:25 2003 Subject: Printer Driver woes :(p Message-ID: Hi - Samba 2.2, W2K, Samba server is PDC. I'm trying to follow the instructions in the Samba-HOWTO-Collection on getting printer drivers set up on a Samba server using a W2K machine (with SP1 installed). After I get through all the steps, I get an access denied message. Anyone have any idea what's going wrong here? Here are the instructions from the HOWTO: ---------------------------------------------------- Once you have created the required [print$] service and associated subdirectories, simply log onto the Samba server using a root (or printer admin) account from a Windows NT 4.0 client. Navigate to the "Printers" folder on the Samba server. You should see an initial listing of printers that matches the printer shares defined on your Samba host. The initial listing of printers in the Samba host's Printers folder will have no printer driver assigned to them. The way assign a driver to a printer is to view the Properties of the printer and either Use the "New Driver..." button to install a new printer driver, or Select a driver from the popup list of installed drivers. Initially this list will be empty. If you wish to install printer drivers for client operating systems other than "Windows NT x86", you will need to use the "Sharing" tab of the printer properties dialog. -------------------------------------------------------- Here is the section from my smb.conf. All of the printers show up as shares and also show up in the printers folder. File system mounting and domain logins are working fine. [print$] path = /opt/samba/printers read only = yes browseable = yes guest ok = no Here is what happens when I try to do this: First, I gave root Administrative privileges on the W2K machine and installed the appropriate driver, in this case HP8000 PS, on the W2K machine. Logged in as root on the W2K machine, I opened the printers folder in the share, right clicked the printer, and clicked properties. Windows told me no driver was installed, had me select a driver and then appeared to install a driver locally. The the printer property panel came up, I selected "Advanced" and the "Install New Driver" button. I go through the motions of selecting the driver, am asked to insert the W2K CD, and then am told "Unable to install HP Laserjet Series 8000 PS, Windows NT 4.0 or 2000 Driver. Access is denied." the /opt/samba/printers directory exists and is owned/writeable by root, and I created the subdirectories as instructed; i.e. poweredge:/opt/samba/printers# ls -l total 8 drwxr-xr-x 2 root root 4096 Apr 20 16:47 W32X86 drwxr-xr-x 2 root root 4096 Apr 20 16:48 WIN40 poweredge:/opt/samba/printers# Since this seems to be the only way of getting drivers on to the Samba server, I'm at a loss as to what to try next. From r.belletti at libero.it Tue Apr 24 23:02:02 2001 From: r.belletti at libero.it (r.belletti@libero.it) Date: Tue Dec 2 02:34:25 2003 Subject: BDC Question from a dummy Message-ID: Can anybody tell me a prevision about Samba BDC function? thanking all you in advance roberto From slu at firerun.net Wed Apr 25 00:29:25 2001 From: slu at firerun.net (Patrick) Date: Tue Dec 2 02:34:25 2003 Subject: Samba, Win2000 and trust between samba References: <005301c0cc43$5ea264f0$0505020a@calimero> <3AE4B473.C6AFA9F6@firerun.net> <011c01c0cce5$b1853c90$6400a8c0@calimero> Message-ID: <3AE61A65.D293D067@firerun.net> Did you do the following in this order? 1. Add the machine account for server1 on server 2 using the adduser command "/usr/sbin/adduser -g machines -c Machine -d /dev/null -s /bin/" assuming you have a group called machines? 2. Then add the account to the smbpasswd file using "smbpasswd -a -m "? 3. Then issue the "smbpasswd -j " Patrick Luis Cordeiro wrote: > I'm sorry, > > I've tried to do it, and even reading the manual, I wasn't able to make it > work. > > What I understand from this is: > > ********** > * Win2000 * > ********** > | > | > V > ********** ********** > * Server 1 *----------->* Server 2 * > ********** ********** > > Server 1: - security = server > - password server = server 2 > - allow trusted domains = yes > > and then I run the following on Server 1 : smbpasswd -j > > Server 2: - security = user > > and then I run the following on Server 2 : smbpasswd -a -m > > I'm sending the smb.conf files in attach so you can see how i'm doing it. > > What's the problem? > > Is it necessary to have the machines registered on a DNS server? (they are > on the same LAN and have invalid IPs) > > thanks, > Luis Cordeiro > > ----- Original Message ----- > From: "Patrick" > To: "Luis Cordeiro" > Cc: ; > Sent: Tuesday, April 24, 2001 12:02 AM > Subject: Re: Samba, Win2000 and trust between samba > > > You will need to have one machine setup as the authentication machine. > You will > > also have to add a machine account for the other server. Then for the > other > > machine you will need to have 'security = domain' and 'password server = > > of server>' set in the smb.conf. then you will have to issue the command > > 'smbpasswd -j ' for the machine to join the domain. > > > > Patrick > > > > Luis Cordeiro wrote: > > > > > Hi, > > > > > > I'm having some problems with samba. > > > > > > I have two servers with redhat 7.0 and samba 2.2. The computers that are > > > making autentification though samba have Win2000 (witch is working when > > > having only one domain). > > > > > > My problem is that I need to have the possibility to logon on the > Win2000 > > > machines using the two servers. I've heard that I could use the trust > > > between the two samba servers. But I've read in some documents (perhaps > not > > > the right ones) that that's not possible to do. > > > > > > My question is: is it possible? if so how to? if not is there another > way to > > > do it? > > > > > > Thanks, > > > Luis > > ------------------------------------------------------------------------ > Name: smb.conf_osipn > smb.conf_osipn Type: unspecified type (application/octet-stream) > Encoding: quoted-printable > > Name: smb.conf_samba > smb.conf_samba Type: unspecified type (application/octet-stream) > Encoding: quoted-printable From royt at subexgroup.com Wed Apr 25 11:44:53 2001 From: royt at subexgroup.com (Roy Thomas) Date: Tue Dec 2 02:34:25 2003 Subject: Changing password Message-ID: <01C0CD7D.25535C00.royt@subexgroup.com> Hi I have configured my PDC with Samba.2.2 off release.. I am trying to change thE password form an NT workstation. but this option doesn't work. it giver an error " USERNAME OR PASSWORD IS INCORRRECT " Can someone help me on this rgds Roy From ad at ordix.de Wed Apr 25 07:10:02 2001 From: ad at ordix.de (Andre Dirr) Date: Tue Dec 2 02:34:25 2003 Subject: 2 x samba on one pc Message-ID: <3AE6784A.B32B16EE@ordix.de> hi all, we have got a pc with red_hat_6.2 and samba 2.0.7 running on it. i downloaded the new samba_2.2.0 and want to test it on this pc, but i don?t want to remove the old version, because first of all i want to test the new version and then i want to return to the old one. my question: which daemons have i to stop (and how?) and who to start the new samba??? samba_2.0.7 is in /opt/samba and the new one will be in /opt/samba2 thank you for answers, andy From royt at subexgroup.com Wed Apr 25 12:53:00 2001 From: royt at subexgroup.com (Roy Thomas) Date: Tue Dec 2 02:34:25 2003 Subject: Win9X in User Level Access modeWin98 Message-ID: <01C0CD86.A991A4A0.royt@subexgroup.com> Hi all The change password option is working after i made a few changes in the password program in smb.conf I need one more help.... Can anyone tell me if Win9X in User Level Access mode(sharing) problem is sorted out sharing something on the win98-client needs a userlist from the NT-Server (Samba). How can I get this userlist on Samba PDC Thanks and Regards Roy Thomas From isanchez at unav.es Wed Apr 25 07:30:25 2001 From: isanchez at unav.es (Inaki Sanchez) Date: Tue Dec 2 02:34:25 2003 Subject: lastest rpm of samba 2.2.0 In-Reply-To: <3AE4F5EC.8365B129@rsp.com.au> Message-ID: <005101c0cd59$98cb7d30$1308ed9f@unav.es> ftp://ftp.samba.org/pub/samba/Binary_Packages/redhat/RPMS --- Inaki Sanchez Redes y Comunicaciones Universidad de Navarra, Spain +34 948425600 > -----Original Message----- > From: samba-ntdom-admin@lists.samba.org > [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of Ben Roberts > Sent: Tuesday, April 24, 2001 5:42 AM > To: samba-ntdom@lists.samba.org > Subject: lastest rpm of samba 2.2.0 > > > Hi all, > > Sorry if this has been raised before, but Im just hunting > down a rpm for > samba 2.2.0 for redaht 6.2 and/or redhat 7.0. > > Thanks, > > Ben > From moser at egu.schule.ulm.de Wed Apr 25 08:17:24 2001 From: moser at egu.schule.ulm.de (Steffen Moser) Date: Tue Dec 2 02:34:25 2003 Subject: Changing password References: <01C0CD7D.25535C00.royt@subexgroup.com> Message-ID: <3AE68814.2B843001@egu.schule.ulm.de> Hello Roy, Roy Thomas wrote: > I have configured my PDC with Samba.2.2 off release.. > I am trying to change thE password form an NT workstation. > but this option doesn't work. it giver an error > " USERNAME OR PASSWORD IS INCORRRECT " > Can someone help me on this I had a very similar problem after the upgrade to "samba-2.2.0"... We don't have WinNT workstations, but only Win95/Win98 at the moment. Our users were no longer able to change their passwords via Windows' password changing dialogue as well as via "smbpasswd". I did some tests and found out that the problem only appears when using "unix password sync = yes". But we need this feature and it ran quite well before the upgrade. We didn't have to set "passwd chat" before, it worked (using 2.0.x) without any problems using the default "passwd chat" (samba is running on SuSE Linux 6.3 and uses "/usr/bin/passwd" (with option "%u") that came with the SuSE distribution to change the user's unix password). Then I tried to set a "passwd chat" which fits to the dialogue that our "/usr/bin/passwd" uses. After that I was able to change the password (as non-root) via "smbpasswd" and via Windows's dialog again! So I think (if you use "unix password sync") you can try to set a "passwd chat" manually. Perhaps it solves your problem, too. The string that I have set looks like: passwd chat = New* %n\n *password* %n\n *changed* I haven't had enough time to do further investigation, yet. I am sure that this line was not necessary before the upgrade. ;-) HTH! Best regards, Steffen From ejs at delfi.lt Wed Apr 25 06:59:25 2001 From: ejs at delfi.lt (Augis) Date: Tue Dec 2 02:34:26 2003 Subject: Printer Driver woes :(p References: Message-ID: <3AE675CD.5080602@delfi.lt> Patrick Goetz wrote: > Here is the section from my smb.conf. All of the printers show up as > shares and also show up in the printers folder. File system mounting and > domain logins are working fine. > > [print$] > path = /opt/samba/printers > read only = yes > browseable = yes > guest ok = no try this setup: [print$] comment = Printer Drivers path = ......... write list = root guest ok = Yes browseable = No It worked for me for driver upload, but i had to use rpcclient to assign driver to printer. Changing it from NT side was impossible for some strange reasons. > "Unable to install HP Laserjet Series 8000 PS, Windows NT 4.0 or 2000 > Driver. Access is denied." It's true. Take a look at your setup. -- Augis From siva at aquila.soft.net Wed Apr 25 09:43:47 2001 From: siva at aquila.soft.net (siva) Date: Tue Dec 2 02:34:26 2003 Subject: nis + smbpasswd Message-ID: <3AE69C53.8F074FF4@aquila.soft.net> I have a few queries about samba+nis+pam. I had setup nis and samba on same server , Due to this authentication for linux and NT was diferent . I decided to have one authentication system for both linux and NT clients. I had configured samba with PAM . Now , how to enable nis lookup in pam configuration files. So that while authentication it looks for pam , intern pam points to NIS maps. Can any body help me in this regard. Raz From idra at samba.org Wed Apr 25 10:13:59 2001 From: idra at samba.org (Simo Sorce) Date: Tue Dec 2 02:34:26 2003 Subject: BDC Question from a dummy In-Reply-To: ; from r.belletti@libero.it on Wed, Apr 25, 2001 at 01:02:02AM +0200 References: Message-ID: <20010425031359.B17299@va.samba.org> On Wed, Apr 25, 2001 at 01:02:02AM +0200, r.belletti@libero.it wrote: > Can anybody tell me a prevision about Samba BDC function? > > thanking all you in advance > roberto > It will be probably supported by the 3.0 version of samba, not really soon. The replication protocol haven't been yet uncovered completely. Verra' probabilmente supportato nella versione 3.0 di samba, quindi non presto. Il protocollo di replicazione non e' stato ancora scoperto del tutto. -- Simo Sorce ------------------------------ Unix IS user friendly, it is just selective about who his friends are. From idra at samba.org Wed Apr 25 10:16:32 2001 From: idra at samba.org (Simo Sorce) Date: Tue Dec 2 02:34:26 2003 Subject: 2 x samba on one pc In-Reply-To: <3AE6784A.B32B16EE@ordix.de>; from ad@ordix.de on Wed, Apr 25, 2001 at 09:10:02AM +0200 References: <3AE6784A.B32B16EE@ordix.de> Message-ID: <20010425031632.C17299@va.samba.org> You need to stop smbd and nmbd process. Then configure your /opt/samba2/lib/smb.conf and start the smbd and nmbd daemons from /opt/samba2/bin with -D option. killall smbd killall nmbd cd /opt/samba2/bin ./nmbd -D ./smbd -D On Wed, Apr 25, 2001 at 09:10:02AM +0200, Andre Dirr wrote: > hi all, > we have got a pc with red_hat_6.2 and samba 2.0.7 running on it. > i downloaded the new samba_2.2.0 and want to test it on this pc, but i > don?t want to remove the old version, because first of all i want to > test the new version and then i want to return to the old one. > my question: which daemons have i to stop (and how?) and who to start > the new samba??? > samba_2.0.7 is in /opt/samba and the new one will be in /opt/samba2 > thank you for answers, > andy > -- Simo Sorce ------------------------------ Unix IS user friendly, it is just selective about who his friends are. From ad at ordix.de Wed Apr 25 11:03:02 2001 From: ad at ordix.de (Andre Dirr) Date: Tue Dec 2 02:34:26 2003 Subject: configure --prefix Message-ID: <3AE6AEE6.83819FDA@ordix.de> hi all, very simple question: when i configure samba_2.2.0 with --prefix=/opt/samba2 are all files stored in this directory or are there files who will be stored in other dirs, perhaps smb.conf in /etc ... i don?t know and i can?t test it. i want to install all (really all) files in only one (really one) dir. is all i have to do --prefix=/opt/samba2 or have i to do something else??? thanks for answers, andy From J.Parsons at eim.surrey.ac.uk Wed Apr 25 10:56:55 2001 From: J.Parsons at eim.surrey.ac.uk (John Parsons) Date: Tue Dec 2 02:34:26 2003 Subject: configure --prefix Message-ID: <5FE97DD96380D111821E00805F2720E901E5BB05@endor.ee.surrey.ac.uk> > -----Original Message----- > From: Andre Dirr [mailto:ad@ordix.de] > Sent: Wednesday, April 25, 2001 12:03 PM > To: samba; samba-ntdom > Subject: configure --prefix > > > hi all, > very simple question: > when i configure samba_2.2.0 with --prefix=/opt/samba2 > are all files stored in this directory or are there files who will be > stored in other dirs, > perhaps smb.conf in /etc ... i don?t know and i can?t test it. > i want to install all (really all) files in only one (really one) dir. > is all i have to do --prefix=/opt/samba2 or have i to do something > else??? Everything will be located within the /opt/samba2 directory tree. You can specify other ./configure option to relocate certain stuff, such as putting smb.conf into /etc. Cheers JohnnyP This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited. From ivan at velton.donetsk.ua Wed Apr 25 11:07:17 2001 From: ivan at velton.donetsk.ua (ivan lobanov) Date: Tue Dec 2 02:34:26 2003 Subject: (no subject) Message-ID: <017d01c0cd77$e4bd2fe0$cf06a8c0@ivan> -------------- next part -------------- HTML attachment scrubbed and removed From royt at subexgroup.com Wed Apr 25 17:41:45 2001 From: royt at subexgroup.com (Roy Thomas) Date: Tue Dec 2 02:34:26 2003 Subject: Accessing NT shared directory from win98 - Samba Message-ID: <01C0CDAE.FFCFDCB0.royt@subexgroup.com> Hi all Thanks for the info on user list and password change. I am facing problems when a workstation with win98 is accessing a shared folder from WinNT workstation on Samba Domain. It gives me following error message " \\dir not accessible The User account has expired " Would be great if someone could guide me on this. Thanks Roy From Daniel.Sandmeier at hwk-do.de Wed Apr 25 12:23:17 2001 From: Daniel.Sandmeier at hwk-do.de (Daniel Sandmeier) Date: Tue Dec 2 02:34:26 2003 Subject: Problem accessing Win2k Share from Win98 Box Message-ID: <6921763844.20010425142317@hwk-do.de> Hello there, I just installed the Samba 2.2 final two days ago and after some small starting problems, I had a wondefull PDC for my Win2k Workstation. One day later I tried to join the domain with a Win98 box and everything seemed fine. I can accesss samba shares without problems, but since then I am not able anymore to access any share on my win2k-wks from the win98-box. When I look into the network-neighbourhood I can see the win2k-box, but when clicking on it, I get an error message saying "User account has expired" (just translated it from German to ENglish, so I don't know the exact phrase in English!). Vice versa everything works well, I can access the Win98-box and even the shares I first thought "Hey, must be Windows not Samba" and so I searched and searched and searched but found nothing relating this topic. So now I'm not quite sure if it is a Problem of Win2k or a problem of win9x or even a problem of my Samba Configuration. So if this IS obviously a Win2k bug/misconfiguration, then does anyone know where to find docs about this. Oh, btw. sorry for my English.....just learning!!!!!! -- MfG, Daniel Sandmeier mailto:Daniel.Sandmeier@hwk-do.de We all live in a yellow subroutine! From shanu at exocore.com Wed Apr 25 12:46:30 2001 From: shanu at exocore.com (Shanker Balan) Date: Tue Dec 2 02:34:26 2003 Subject: Uploading printer drivers from Win2K Prof Client Message-ID: <20010425181630.A6771@monster.exocore.com> Hello: I can't seem to upload the driver to my Samba 2.2 PDC (on RHL 7.0). I am however able to install the driver locally and print from my W2K workstation. It just gives me the error that the printer driver cannot be installed after going through the Add Printer Wizard routine. All stunts done while logged in as root. My smb.conf look like this: printcap name = /etc/printcap load printers = yes printer admin = root printing = lprng print command = /usr/bin/lpr -r -P%p %s; rm -f %s lprm command = /usr/bin/lprm -P%p %j lpq command = /usr/bin/lpq -P%p printer [printers] path = /var/spool/samba guest ok = yes browseable = no writable = no printable = yes printer driver = HP DeskJet 520 printer = lp [print$] path = /usr/local/samba/printers guest ok = yes browseable = no printable = yes write list = root I have also created the appropriate directories under print$ [root@monster] # ls -l /usr/local/samba/printers/ total 20 drwxrwxrwx 2 root root 4096 Apr 21 13:46 W32ALPHA/ drwxrwxrwx 2 root root 4096 Apr 21 13:46 W32MIPS/ drwxrwxrwx 2 root root 4096 Apr 21 13:46 W32PPC/ drwxrwxrwx 2 root root 4096 Apr 25 17:56 W32X86/ drwxrwxrwx 2 root root 4096 Apr 16 18:04 WIN40/ I ran "strings" on printing.tdb and here's a snip of the output: ---- snip --- &STATUS/print$printer: print_@monster - error: spool queue for 'print_' does not exist on server monster.exocore.com &CACHE/lp ---- snip --- Is this remotely connected to the problem i am facing now? Where should i create the "print_" spool? BTW, the printer driver upload did work once but died soon after the upload was finished saying that the printer could not be setup. Thanx for your time! -- Shanu - - - - - - - - - - - ( Shanu ) - - Shanker Balan shanu@exocore.com From seymourp at horizondata.com Wed Apr 25 13:16:47 2001 From: seymourp at horizondata.com (Paul Seymour) Date: Tue Dec 2 02:34:26 2003 Subject: Problems with 2.2 and Win2K Message-ID: I have a server running Redhat 7.0 and Samba 2.2, and I think i've setup the smb.conf and everything else correctly to allow win2k machines to add their computer accounts to the domain, but whenever I try to add a computer to said domain, I get the following error from windows: The account used is a computer account, use your global user account or local user account to access this server. Any ideas? I can see the domain and server on the network neighborhood, and can see the shares. Also, can someone send me a quick rundown on setting up a samba server for win2k machines to make sure i've done everything right (i've seen several different how-to's, but nothing definitive). Thanks in advance. Paul From gcarter at valinux.com Wed Apr 25 13:26:00 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:26 2003 Subject: Win9X in User Level Access modeWin98 In-Reply-To: <01C0CD86.A991A4A0.royt@subexgroup.com>; from royt@subexgroup.com on Wed, Apr 25, 2001 at 07:53:00 -0500 References: <01C0CD86.A991A4A0.royt@subexgroup.com> Message-ID: <20010425082600.C21422@queso.plainjoe.org> On Wed, 25 Apr 2001 07:53:00 Roy Thomas wrote: > > Can anyone tell me if Win9X in User Level Access > mode(sharing) problem is sorted out sharing something on > the win98-client needs a userlist from the NT-Server (Samba). > How can I get this userlist on Samba PDC We had an alignment bug in 2.2.0 that causes this to fail. Will be fixed in 2.2.1 Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From patrik.hall at pistetietoliikenne.com Wed Apr 25 13:32:05 2001 From: patrik.hall at pistetietoliikenne.com (Patrik Hall) Date: Tue Dec 2 02:34:26 2003 Subject: Account Disabled Message-ID: <00d401c0cd8c$1ee62a50$0701030a@tabor.pistetietoliikenne.com> Sorry if this topic has been discussed earlier. I have installed samba samba-2.2.0-20010417 on my RedHat 6.2, and I have succeeded joining the domain with a Windows NT. I have also noted that swat in the RPM file expects to find its home directory in /usr/share/samba/swat but is however installed in /usr/share/swat. After moving the directory swat worked. However, now when I try to login to the domain, I constantly get "Your account is disabled. See your sysadmin.". I have tried to play with smbpasswd -d and smbpasswd -e after that but none of them helps. smbclient //server/user -U user works fine, but I cannot login. Has anybody out there experienced same kind of problem? Patrik Hall. From don_mccall at hp.com Wed Apr 25 13:53:01 2001 From: don_mccall at hp.com (MCCALL,DON (HP-USA,ex1)) Date: Tue Dec 2 02:34:26 2003 Subject: configure --prefix Message-ID: <079FD72E42C9D311B854009027650E6F040509B2@xatl02.atl.hp.com> Sorry Andre, That won't do it - --prefix sets up the base directory for samba, under which other directories (lib, var, docs,private, ....) will be created. To actually have all files in a single directory, you would need to hack the resulting Makefile, looking to change the various path variables like LOCKDIR, CODEPAGEDIR,PRIVATEDIR, etc... But there ought to be a REALLY good reason why you are doing this, as you are mixing up configuration files, binaries, logfiles, VERY private password file, etc in a single directory, and this sounds like very poor management/security strategy on its face. Hope this helps, Don -----Original Message----- From: Andre Dirr [mailto:ad@ordix.de] Sent: Wednesday, April 25, 2001 7:03 AM To: samba; samba-ntdom Subject: configure --prefix hi all, very simple question: when i configure samba_2.2.0 with --prefix=/opt/samba2 are all files stored in this directory or are there files who will be stored in other dirs, perhaps smb.conf in /etc ... i don?t know and i can?t test it. i want to install all (really all) files in only one (really one) dir. is all i have to do --prefix=/opt/samba2 or have i to do something else??? thanks for answers, andy From gcarter at valinux.com Wed Apr 25 13:57:50 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:26 2003 Subject: Problems with 2.2 and Win2K In-Reply-To: Message-ID: On Wed, 25 Apr 2001, Paul Seymour wrote: > I have a server running Redhat 7.0 and Samba 2.2, and I think i've setup the > smb.conf and everything else correctly to allow win2k machines to add their > computer accounts to the domain, but whenever I try to add a computer to > said domain, I get the following error from windows: > > The account used is a computer account, use your global user account or > local user account to access this server. Have you defined an 'add user script'? Does it work. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From T.Zwinge at Alexius.de Wed Apr 25 14:22:18 2001 From: T.Zwinge at Alexius.de (T.Zwinge@Alexius.de) Date: Tue Dec 2 02:34:26 2003 Subject: How to map Windows NT groups to Linux groups? Message-ID: I'm using Samba 2.0.7. I was wondering if and how it is possible to map Windows NT 4.0 user groups to Linux groups. Thanks, Tamo From don_mccall at hp.com Wed Apr 25 14:20:02 2001 From: don_mccall at hp.com (MCCALL,DON (HP-USA,ex1)) Date: Tue Dec 2 02:34:26 2003 Subject: configure --prefix Message-ID: <079FD72E42C9D311B854009027650E6F040509B4@xatl02.atl.hp.com> Hi Andre, A clarification from my original reply - I hadn't read yet an earlier message that indicates that you wanted to do this for testing purposes, where you will have two versions of samba on the same box, and bring one or the other up at different times for testing. If this is the intent, the --prefix=/opt/samba2 will probably do it for you; as to bringing up one or the other version: ps -ef|grep -e SMBD -e NMBD|grep -v grep|awk '{print $2}'|xargs kill should bring down the currently running version of Samba (tested on HP-UX; syntax may vary depending on what version of *nix you are running...) (but after doing this, do a ps -ef|grep -e smbd -e nmbd just to make sure, and kill any daemons that the first sweep didn't get). Then cd to either /opt/samba/bin or /opt/samba2/bin (whichever version you want to bring up) and type ./nmbd -D ./smbd -D REMEMBER that the location of some files, like the smbpasswd and log files can be controlled by lines in your smb.conf, and these will override whatever samba was compiled with; so make sure you don't just copy over your old smb.conf file to the new directory, if you have any path specific lines in your smb.conf file... Hope this helps, Don -----Original Message----- From: Andre Dirr [mailto:ad@ordix.de] Sent: Wednesday, April 25, 2001 7:03 AM To: samba; samba-ntdom Subject: configure --prefix hi all, very simple question: when i configure samba_2.2.0 with --prefix=/opt/samba2 are all files stored in this directory or are there files who will be stored in other dirs, perhaps smb.conf in /etc ... i don?t know and i can?t test it. i want to install all (really all) files in only one (really one) dir. is all i have to do --prefix=/opt/samba2 or have i to do something else??? thanks for answers, andy -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba From thudak at sistina.com Wed Apr 25 14:25:30 2001 From: thudak at sistina.com (Tom Hudak) Date: Tue Dec 2 02:34:26 2003 Subject: w2k and authentication Message-ID: <20010425092530.A3949@localhost> I'm having some issues with my new flashy 2.2 based PDC. All seems to work fine with 9x/ME (ugh, I know...) in that they (lusers) can log in using their existing user-names passwords using domain level logins. However, when setting up the domain login's on a w2k machine after adding the machine to all the authentication files and setting up a trust account for the machine name, I can't for the life of me get it to log me in. I had to setup a root domain user and get w2k to join the domain using that user but now I can't login with that user or any other for that matter. I get the following winblows error: Your account has been disabled. Please see your system administrator. Obviously the account hasn't been disabled, but upon trying to login on this machine I get the following in the smbd logs: PAM: Init user: thudak [2001/04/25 09:19:29, 1] lib/util_sock.c:get_socket_name(1055) Gethostbyaddr failed for 10.0.2.214 [2001/04/25 09:19:29, 4] passdb/pampass.c:proc_pam_start(173) PAM: setting rhost to: 10.0.2.214 [2001/04/25 09:19:29, 4] passdb/pampass.c:proc_pam_start(181) PAM: setting tty [2001/04/25 09:19:29, 4] passdb/pampass.c:proc_pam_start(188) PAM: Init passed for user: thudak [2001/04/25 09:19:29, 4] passdb/pampass.c:pam_account(246) PAM: Account Management for User: thudak [2001/04/25 09:19:29, 0] passdb/pampass.c:pam_account(268) PAM: UNKNOWN ERROR for User: thudak [2001/04/25 09:19:29, 2] passdb/pampass.c:pam_error_handler(66) PAM: Account Check Failed : Authentication service cannot retrieve authentication info. [2001/04/25 09:19:29, 4] passdb/pampass.c:proc_pam_end(144) PAM: PAM_END OK. [2001/04/25 09:19:29, 0] passdb/pampass.c:pam_accountcheck(381) PAM: Account Validation Failed - Rejecting User! I'm not sure what exactly is failing, but the UNKNOWN ERROR seems to winblows'ish for me... I would like to know at least an error # or something to that effect. Has anyone else seen this? Any ideas? I'm 1 step away from using w2k inside a VMware session to do account management of my Samba2.2 PDC! Thanks, -- Thomas J. Hudak Systems Administrator Sistina Software Inc. - www.sistina.com Phone: 612.379.3951 Page: 612.318.1967 Fax: 612.379.3952 Key fingerprint = BEC6 3181 4C9B A7BB AF11 4717 6F85 B346 380D 523E -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 232 bytes Desc: not available Url : http://lists.samba.org/archive/samba-ntdom/attachments/20010425/8536a98c/attachment.bin From ad at ordix.de Wed Apr 25 14:35:48 2001 From: ad at ordix.de (Andre Dirr) Date: Tue Dec 2 02:34:26 2003 Subject: configure --prefix References: <079FD72E42C9D311B854009027650E6F040509B4@xatl02.atl.hp.com> Message-ID: <3AE6E0C4.B5DB5C03@ordix.de> hi don, hi all others, it works!!! two different versions of samba on one machine!!! not both at the same time, but now i can kill the original version (that works correctly) and start the new version for testing. after the tests i kill the new one and start the old version again. very good! thank you. andy "MCCALL,DON (HP-USA,ex1)" wrote: > > Hi Andre, > A clarification from my original reply - I hadn't read yet an earlier > message that indicates that you wanted to do this for testing purposes, > where you will have two versions of samba on the same box, and bring one or > the other up at different times for testing. > If this is the intent, the --prefix=/opt/samba2 will probably do it for > you; as to bringing up one or the other version: > ps -ef|grep -e SMBD -e NMBD|grep -v grep|awk '{print $2}'|xargs kill > > should bring down the currently running version of Samba (tested on HP-UX; > syntax may vary depending on what version of *nix you are running...) > (but after doing this, do a ps -ef|grep -e smbd -e nmbd just to make sure, > and kill any daemons that the first sweep didn't get). > Then cd to either /opt/samba/bin or /opt/samba2/bin (whichever version you > want to bring up) > and type ./nmbd -D > ./smbd -D > > REMEMBER that the location of some files, like the smbpasswd and log files > can be controlled by lines in your smb.conf, and these will override > whatever samba was compiled with; so make sure you don't just copy over your > old smb.conf file to the new directory, if you have any path specific lines > in your smb.conf file... From mhaney at info4cars.com Wed Apr 25 14:34:07 2001 From: mhaney at info4cars.com (Mark Haney) Date: Tue Dec 2 02:34:26 2003 Subject: How to map Windows NT groups to Linux groups? In-Reply-To: Message-ID: There's a script that will do it. YOu can get it at Gerald Carters website. I actually had a copy and just deleted it as I didn't think I would need it any more. (Shows you what I know) If you really need it and can't find it I can pull it off backup. -----Original Message----- From: samba-ntdom-admin@lists.samba.org [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of T.Zwinge@Alexius.de Sent: Wednesday, April 25, 2001 10:22 AM To: samba-ntdom@lists.samba.org Subject: How to map Windows NT groups to Linux groups? I'm using Samba 2.0.7. I was wondering if and how it is possible to map Windows NT 4.0 user groups to Linux groups. Thanks, Tamo From gcarter at valinux.com Wed Apr 25 14:44:25 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:26 2003 Subject: Uploading printer drivers from Win2K Prof Client In-Reply-To: <20010425181630.A6771@monster.exocore.com>; from shanu@exocore.com on Wed, Apr 25, 2001 at 07:46:30 -0500 References: <20010425181630.A6771@monster.exocore.com> Message-ID: <20010425094425.C23148@queso.plainjoe.org> On Wed, 25 Apr 2001 07:46:30 Shanker Balan wrote: > > I can't seem to upload the driver to my Samba 2.2 PDC (on > RHL 7.0). I am however able to install the driver locally > and print from my W2K workstation. It just gives me the error > that the printer driver cannot be installed after going through > the Add Printer Wizard routine. All stunts done while logged > in as root. There was a slight omission in the printing chapter of the howto collection in the 2.2.0 release. My fault entirely. In order to use the APW from a Windows NT/2000 client, you must also define a 'add printer command' in smb.conf. I have updated the Samba-HOWTO-Collection and the latest version will always be available onthe "Documentation" page on http://samba.org/ and mirrors (starting in about an hour). Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From kellermg at potsdam.edu Wed Apr 25 14:48:26 2001 From: kellermg at potsdam.edu (Matthew Keller) Date: Tue Dec 2 02:34:26 2003 Subject: %U and %u functionality change in 2.2?? Message-ID: <988210106.20240.7.camel@comp10574.potsdam.edu> I've been using %U macros within "include" statements in Samba 2.0 for years now. 2.2 doesn't seem to like them anyore. Has this functionality changed? I checked the smb.conf man page, but it doesn't seem to say anything different. I'm really hurting without this functionality (including different conf files depending on user name). Any help would be most appreciated. -- Matthew Keller Enterprise System Analyst Computing & Technology Services Information Services Division State University of NY at Potsdam Potsdam, NY USA http://mattwork.potsdam.edu/ From shanu at exocore.com Wed Apr 25 15:03:06 2001 From: shanu at exocore.com (Shanker Balan) Date: Tue Dec 2 02:34:26 2003 Subject: Uploading printer drivers from Win2K Prof Client In-Reply-To: <20010425094425.C23148@queso.plainjoe.org>; from gcarter@valinux.com on Wed, Apr 25, 2001 at 09:44:25AM -0500 References: <20010425181630.A6771@monster.exocore.com> <20010425094425.C23148@queso.plainjoe.org> Message-ID: <20010425203306.A6946@monster.exocore.com> Hello: I understand that i have to add "addprinter command = /usr/bin/addprinter" to my smb.conf (from man smb.conf). I cant find the add printer command "addprinter" anywhere in my samba_2_2 CVS download. Where can i find it? -- Shanu Gerald Carter wrote, > There was a slight omission in the printing chapter of the > howto collection in the 2.2.0 release. My fault entirely. > In order to use the APW from a Windows NT/2000 client, > you must also define a 'add printer command' in smb.conf. > I have updated the Samba-HOWTO-Collection and the latest version > will always be available onthe "Documentation" page > on http://samba.org/ and mirrors (starting in about an hour). -- - - - - - - - - - - - ( Shanu ) - - Shanker Balan shanu@exocore.com From gcarter at valinux.com Wed Apr 25 15:06:59 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:26 2003 Subject: Uploading printer drivers from Win2K Prof Client In-Reply-To: <20010425203306.A6946@monster.exocore.com> Message-ID: On Wed, 25 Apr 2001, Shanker Balan wrote: > Hello: > > I understand that i have to add "addprinter command = > /usr/bin/addprinter" to my smb.conf (from man smb.conf). > > I cant find the add printer command "addprinter" anywhere in my > samba_2_2 CVS download. Where can i find it? You have to write it I'm afraid. Note that this is only necessary if you want to add **new** printers not already defined in smb.conf. the add printer command should create a new printer on the UNIX host and create the appropriate entry in smb.conf. If you just want to use printers already defined in smb.conf (say [printers] for example), then just right click and upload the desired driver. Make sense? Cheers, jerry > > -- Shanu > > Gerald Carter wrote, > > There was a slight omission in the printing chapter of the > > howto collection in the 2.2.0 release. My fault entirely. > > In order to use the APW from a Windows NT/2000 client, > > you must also define a 'add printer command' in smb.conf. > > I have updated the Samba-HOWTO-Collection and the latest version > > will always be available onthe "Documentation" page > > on http://samba.org/ and mirrors (starting in about an hour). > > -- > > - - - - - - - - - - - ( Shanu ) - - > Shanker Balan shanu@exocore.com > ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From vorlon at netexpress.net Wed Apr 25 15:09:04 2001 From: vorlon at netexpress.net (Steve Langasek) Date: Tue Dec 2 02:34:26 2003 Subject: w2k and authentication In-Reply-To: <20010425092530.A3949@localhost> Message-ID: Hi Tom, If you're using Linux, replace all 'account' lines in /etc/pam.d/samba with this line: account sufficient pam_permit.so Regards, Steve Langasek postmodern programmer On Wed, 25 Apr 2001, Tom Hudak wrote: > I'm having some issues with my new flashy 2.2 based PDC. All seems to work > fine with 9x/ME (ugh, I know...) in that they (lusers) can log in using their > existing user-names passwords using domain level logins. > However, when setting up the domain login's on a w2k machine after adding the > machine to all the authentication files and setting up a trust account for the > machine name, I can't for the life of me get it to log me in. I had to setup a > root domain user and get w2k to join the domain using that user but now I > can't login with that user or any other for that matter. > I get the following winblows error: > Your account has been disabled. Please see your system administrator. > Obviously the account hasn't been disabled, but upon trying to login on this > machine I get the following in the smbd logs: > PAM: Init user: thudak > [2001/04/25 09:19:29, 1] lib/util_sock.c:get_socket_name(1055) > Gethostbyaddr failed for 10.0.2.214 > [2001/04/25 09:19:29, 4] passdb/pampass.c:proc_pam_start(173) > PAM: setting rhost to: 10.0.2.214 > [2001/04/25 09:19:29, 4] passdb/pampass.c:proc_pam_start(181) > PAM: setting tty > [2001/04/25 09:19:29, 4] passdb/pampass.c:proc_pam_start(188) > PAM: Init passed for user: thudak > [2001/04/25 09:19:29, 4] passdb/pampass.c:pam_account(246) > PAM: Account Management for User: thudak > [2001/04/25 09:19:29, 0] passdb/pampass.c:pam_account(268) > PAM: UNKNOWN ERROR for User: thudak > [2001/04/25 09:19:29, 2] passdb/pampass.c:pam_error_handler(66) > PAM: Account Check Failed : Authentication service cannot retrieve > authentication info. > [2001/04/25 09:19:29, 4] passdb/pampass.c:proc_pam_end(144) > PAM: PAM_END OK. > [2001/04/25 09:19:29, 0] passdb/pampass.c:pam_accountcheck(381) > PAM: Account Validation Failed - Rejecting User! > > I'm not sure what exactly is failing, but the UNKNOWN ERROR seems to > winblows'ish for me... I would like to know at least an error # or something > to that effect. > Has anyone else seen this? Any ideas? I'm 1 step away from using w2k inside a > VMware session to do account management of my Samba2.2 PDC! > Thanks, > From gcarter at valinux.com Wed Apr 25 15:10:41 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:26 2003 Subject: w2k and authentication In-Reply-To: <20010425092530.A3949@localhost> Message-ID: On Wed, 25 Apr 2001, Tom Hudak wrote: > I get the following winblows error: > Your account has been disabled. Please see your system > administrator. It's a bug in 2.2.0 related to PAM. We're working on it. CHeers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From thudak at sistina.com Wed Apr 25 15:24:23 2001 From: thudak at sistina.com (Tom Hudak) Date: Tue Dec 2 02:34:27 2003 Subject: w2k and authentication In-Reply-To: ; from vorlon@netexpress.net on Wed, Apr 25, 2001 at 10:09:04AM -0500 References: <20010425092530.A3949@localhost> Message-ID: <20010425102423.D3949@localhost> On Wed, Apr 25, 2001 at 10:09:04AM -0500, Steve Langasek wrote: >If you're using Linux, replace all 'account' lines in /etc/pam.d/samba with >this line: > > account sufficient pam_permit.so I'm assuming I'll need to change it back once the bug is worked out? It worked btw, this is awesome. I am so glad I now have a PDC for all the winblows machines upstairs and I have a bit less on my plate. Thanks for the quick response, -- Thomas J. Hudak Systems Administrator Sistina Software Inc. - www.sistina.com Phone: 612.379.3951 Page: 612.318.1967 Fax: 612.379.3952 Key fingerprint = BEC6 3181 4C9B A7BB AF11 4717 6F85 B346 380D 523E -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 232 bytes Desc: not available Url : http://lists.samba.org/archive/samba-ntdom/attachments/20010425/ad319d01/attachment.bin From gcarter at valinux.com Wed Apr 25 15:29:28 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:27 2003 Subject: UPDATE: latest colleciton of HOWTO's Message-ID: FYI... I am placing the latest copy of the HTML and PDF versions of the Samba-HOWTO-Collection on http://samba.org/. See the "Documentation" page. The printing chapter has been updated slightly since i previously left out mentioning the 'add printer command' parameter in relation to the NT APW. Will try to update the PDC HOWTO in a few days. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From thudak at sistina.com Wed Apr 25 16:11:04 2001 From: thudak at sistina.com (Tom Hudak) Date: Tue Dec 2 02:34:27 2003 Subject: MAILER-DAEMON Message-ID: <20010425111104.E3949@localhost> I'm assuming that error is due to that users subscription to the list not being updated (unsubscribed) and his account is gone. *List Moderators* Could you kindly remove bfitch@colltech.com from the list as I'm getting Mailer daemon errors that are from colltech.com's servers. I'm assuming everyone else is getting them as well. The annoying part is that it's addressed directly to me and not to the list.. Thanks, -- Thomas J. Hudak Systems Administrator Sistina Software Inc. - www.sistina.com Phone: 612.379.3951 Page: 612.318.1967 Fax: 612.379.3952 Key fingerprint = BEC6 3181 4C9B A7BB AF11 4717 6F85 B346 380D 523E -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 232 bytes Desc: not available Url : http://lists.samba.org/archive/samba-ntdom/attachments/20010425/5a123ad7/attachment.bin From vorlon at netexpress.net Wed Apr 25 16:12:24 2001 From: vorlon at netexpress.net (Steve Langasek) Date: Tue Dec 2 02:34:27 2003 Subject: w2k and authentication In-Reply-To: <20010425102423.D3949@localhost> References: <20010425092530.A3949@localhost> <20010425102423.D3949@localhost> Message-ID: <988215144.3ae6f76818ea1@www.secureserver.com> Quoting Tom Hudak : > On Wed, Apr 25, 2001 at 10:09:04AM -0500, Steve Langasek wrote: > >If you're using Linux, replace all 'account' lines in /etc/pam.d/samba > with > >this line: > > account sufficient pam_permit.so > I'm assuming I'll need to change it back once the bug is worked out? Entirely your call, actually. Samba never queried PAM for account status in the past, so the above line provides equivalence with Samba's previous behavior. If you want Samba to honor account authorization as reported by PAM, you would want to change this line back once the bug is fixed, yes. > It worked btw, this is awesome. I am so glad I now have a PDC for all the > winblows machines upstairs and I have a bit less on my plate. :) Cheers, Steve Langasek postmodern programmer From rpeterso at mtholyoke.edu Wed Apr 25 16:13:17 2001 From: rpeterso at mtholyoke.edu (Ron Peterson) Date: Tue Dec 2 02:34:27 2003 Subject: problem saving roaming profile Message-ID: <3AE6F79D.8F02A48B@mtholyoke.edu> Running Samba 2.2.0 as a PDC with a W2K client, I encountered an error message when logging out that indicated improper permissions to save part of the roaming profile. Most profile information was saved, however. A previous message to this list regarding an alpha version of Samba 2.2.0 indicated that there had been a problem with Samba creating directories with inproper permission bits set when saving profiles. I did a 'chmod 700' on all the directories in the profile tree, which fixed the problem. Has this problem been fixed in CVS? -- Ron Peterson Network & Systems Manager Mount Holyoke College GPG and other info at http://www.mtholyoke.edu/~rpeterso From gcarter at valinux.com Wed Apr 25 16:17:19 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:27 2003 Subject: How to map Windows NT groups to Linux groups? In-Reply-To: Message-ID: On Wed, 25 Apr 2001, Mark Haney wrote: > There's a script that will do it. YOu can get it at Gerald Carters > website. I actually had a copy and just deleted it as I didn't think I > would need it any more. (Shows you what I know) If you really need it > and can't find it I can pull it off backup. Look on ftp://ftp.samba.org/pub/samba/contributed/ CHeers, jerry > > -----Original Message----- > From: samba-ntdom-admin@lists.samba.org > [mailto:samba-ntdom-admin@lists.samba.org]On Behalf Of > T.Zwinge@Alexius.de > Sent: Wednesday, April 25, 2001 10:22 AM > To: samba-ntdom@lists.samba.org > Subject: How to map Windows NT groups to Linux groups? > > > I'm using Samba 2.0.7. > I was wondering if and how it is possible to map Windows NT 4.0 user > groups to Linux groups. > > Thanks, > > Tamo > > > > ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From bferrell at microdisplay.com Wed Apr 25 16:26:05 2001 From: bferrell at microdisplay.com (Bruce Ferrell) Date: Tue Dec 2 02:34:27 2003 Subject: UPDATE: latest colleciton of HOWTO's References: Message-ID: <3AE6FA9D.A6F57A92@microdisplay.com> Jerry, Seems to be a couple of minor bugs in the document on printing... smb.conf.5.html seems to be missing from the webserver I'm looking at. BTW, there was mention on the list of an addprinter script that you wrote. Where might that be available? TIA, and Thanks for all the hard work, Bruce Gerald Carter wrote: > FYI... > > I am placing the latest copy of the HTML and PDF versions of the > Samba-HOWTO-Collection on http://samba.org/. See the "Documentation" > page. The printing chapter has been updated slightly since i > previously left out mentioning the 'add printer command' parameter > in relation to the NT APW. > > Will try to update the PDC HOWTO in a few days. > > Cheers, jerry > ---------------------------------------------------------------------- > /\ Gerald (Jerry) Carter Professional Services > \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com > http://www.samba.org/ SAMBA Team jerry@samba.org > http://www.plainjoe.org/ jerry@plainjoe.org > > "...a hundred billion castaways looking for a home." > - Sting "Message in a Bottle" ( 1979 ) From ccb at lemon-computing.com Wed Apr 25 17:16:15 2001 From: ccb at lemon-computing.com (Clinton Byrne) Date: Tue Dec 2 02:34:27 2003 Subject: Samba and cron jobs Message-ID: <20010425181615.A15023@redshift.lemon-computing.com> ----- Forwarded message from ccb ----- Date: Wed, 25 Apr 2001 18:00:35 +0100 To: samba@samba.org Subject: Samba and cron jobs User-Agent: Mutt/1.2.5i Hi there! I am trying to backup my linux files to an NT machine using smbmount-2.2x. I want this process to be automated so i have written a small backup script that will be run by cron as root. If i run the script interactively it works fine. However when run as a cron job it spits out and error saying access denied. The backup script is as follows: env | grep PATH /usr/bin/smbmount //tobermory/comp /pub/tobermory -o password=xxxx, user=abc, uid=0, gid=0, fmask=700, dmask=700, debug=100 /bin/cp -Ruv /home/samba/public /pub/tobermory/Backup/orinoco > /var/log/netbackup 2>&1 /bin/umount /pub/tobermory The error message mailed to me is as follows: PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin session setup failed:ERRDOS - ERRnoaccess (Access denied.) SMB connection failed umount: /pub/tobermory: not mounted Does anyone have any ideas why cron won't run properly. If i run the /usr/bin/smbmount .. blah blah .... on the command line it works fine Many thanks Cheers Clinton ----- End forwarded message ----- From jeremy at valinux.com Wed Apr 25 15:31:54 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:27 2003 Subject: Account Disabled References: <00d401c0cd8c$1ee62a50$0701030a@tabor.pistetietoliikenne.com> Message-ID: <3AE6EDEA.9BE183AA@valinux.com> Patrik Hall wrote: > However, now when I try to login to the domain, I constantly get "Your > account is disabled. See your sysadmin.". I have tried to play with > smbpasswd -d and smbpasswd -e after that but none of them helps. smbclient > //server/user -U user works fine, but I cannot login. Has anybody out there > experienced same kind of problem? Steve Langasek posted the solution to this : ------------------------------------------------------------------ If you're using Linux, replace all 'account' lines in /etc/pam.d/samba with this line: account sufficient pam_permit.so ------------------------------------------------------------------ It's a known bug in 2.2.0 pam account checking. It will be fixed in 2.2.1. Sorry for the problem, Regards, Jeremy Allison, Samba Team. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From jeremy at valinux.com Wed Apr 25 16:27:54 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:27 2003 Subject: %U and %u functionality change in 2.2?? References: <988210106.20240.7.camel@comp10574.potsdam.edu> Message-ID: <3AE6FB0A.5C27AEA8@valinux.com> Matthew Keller wrote: > > I've been using %U macros within "include" statements in Samba 2.0 for > years now. 2.2 doesn't seem to like them anyore. Has this functionality > changed? I checked the smb.conf man page, but it doesn't seem to say > anything different. I'm really hurting without this functionality > (including different conf files depending on user name). Any help would > be most appreciated. Yes, we broke this by accident in 2.2.0. The intent is to fix this for 2.2.1 and make %U map to the incoming username (enforced lowercase). Here is the patch that will be in 2.2.1. Sorry for the problem, Jeremy. Index: lib/substitute.c =================================================================== RCS file: /data/cvs/samba/source/lib/substitute.c,v retrieving revision 1.8.2.5 diff -u -r1.8.2.5 substitute.c --- lib/substitute.c 2001/04/08 20:22:51 1.8.2.5 +++ lib/substitute.c 2001/04/25 18:24:31 @@ -172,9 +172,21 @@ fstring pidstr; for (s=str; (p=strchr(s, '%'));s=p) { + fstring tmp_str; + int l = sizeof(pstring) - (int)(p-str); switch (*(p+1)) { + case 'U' : + fstrcpy(tmp_str, sam_logon_in_ssb?samlogon_user:current_user_info.smb_name); + strlower(tmp_str); + string_sub(p,"%U",tmp_str,l); + break; + case 'D' : + fstrcpy(tmp_str, current_user_info.domain); + strupper(tmp_str); + string_sub(p,"%D", tmp_str,l); + break; case 'I' : string_sub(p,"%I", client_addr(),l); break; case 'L' : string_sub(p,"%L", local_machine,l); break; case 'M' : string_sub(p,"%M", client_name(),l); break; @@ -212,7 +224,6 @@ int l = sizeof(pstring) - (int)(p-str); switch (*(p+1)) { - case 'U' : string_sub(p,"%U",sam_logon_in_ssb?samlogon_user:current_user_info.smb_name,l); break; case 'G' : if ((pass = Get_Pwnam(user,False))!=NULL) { string_sub(p,"%G",gidtoname(pass->pw_gid),l); @@ -220,7 +231,6 @@ p += 2; } break; - case 'D' : string_sub(p,"%D", current_user_info.domain,l); break; case 'N' : string_sub(p,"%N", automount_server(user),l); break; case 'H': if ((home = get_user_home_dir(user))) { -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From gcarter at valinux.com Wed Apr 25 18:33:25 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:27 2003 Subject: Account Disabled In-Reply-To: <00d401c0cd8c$1ee62a50$0701030a@tabor.pistetietoliikenne.com>; from patrik.hall@pistetietoliikenne.com on Wed, Apr 25, 2001 at 08:32:05 -0500 References: <00d401c0cd8c$1ee62a50$0701030a@tabor.pistetietoliikenne.com> Message-ID: <20010425133325.C16557@pogo.plainjoe.org> On Wed, 25 Apr 2001 08:32:05 Patrik Hall wrote: > Sorry if this topic has been discussed earlier. > > I have installed samba samba-2.2.0-20010417 on my RedHat > 6.2, and I have succeeded joining the domain with a Windows > NT. I have also noted that swat in the RPM file expects > to find its home directory in /usr/share/samba/swat > but is however installed in /usr/share/swat. After moving the > directory swat worked. swat bug already fixed in CVS. Thanks. > However, now when I try to login to the domain, I constantly > get "Your account is disabled. See your sysadmin.". Known bug in 2.2.0. Related to PAM. Use the pam_permit.so line for session management I think. Will be fixed in 2.2.1 Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From kellermg at potsdam.edu Wed Apr 25 18:40:12 2001 From: kellermg at potsdam.edu (Matthew Keller) Date: Tue Dec 2 02:34:27 2003 Subject: %U and %u functionality change in 2.2?? In-Reply-To: <3AE6FB0A.5C27AEA8@valinux.com> References: <988210106.20240.7.camel@comp10574.potsdam.edu> <3AE6FB0A.5C27AEA8@valinux.com> Message-ID: <988224012.20238.18.camel@comp10574.potsdam.edu> Jeremy, As always, thanks for your help in the expedient resolution of any given problem! On 25 Apr 2001 12:27:54 -0400, Jeremy Allison wrote: > Matthew Keller wrote: > > > > I've been using %U macros within "include" statements in Samba 2.0 for > > years now. 2.2 doesn't seem to like them anyore. Has this functionality > > changed? I checked the smb.conf man page, but it doesn't seem to say > > anything different. I'm really hurting without this functionality > > (including different conf files depending on user name). Any help would > > be most appreciated. > > Yes, we broke this by accident in 2.2.0. The intent is to > fix this for 2.2.1 and make %U map to the incoming username > (enforced lowercase). > > Here is the patch that will be in 2.2.1. > > Sorry for the problem, -- Matthew Keller Enterprise System Analyst Computing & Technology Services Information Services Division State University of NY at Potsdam Potsdam, NY USA http://mattwork.potsdam.edu/ From jeremy at valinux.com Wed Apr 25 18:11:37 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:27 2003 Subject: problem saving roaming profile References: <3AE6F79D.8F02A48B@mtholyoke.edu> Message-ID: <3AE71359.2FFB3EFA@valinux.com> Ron Peterson wrote: > > Running Samba 2.2.0 as a PDC with a W2K client, I encountered an error > message when logging out that indicated improper permissions to save > part of the roaming profile. Most profile information was saved, > however. A previous message to this list regarding an alpha version of > Samba 2.2.0 indicated that there had been a problem with Samba creating > directories with inproper permission bits set when saving profiles. I > did a 'chmod 700' on all the directories in the profile tree, which > fixed the problem. > > Has this problem been fixed in CVS? No not yet, Gerald can reproduce it though so he's sending me a debug level 10 so I can track it down and fix it for 2.2.1. Thanks, Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From pgoetz at math.utexas.edu Wed Apr 25 21:52:03 2001 From: pgoetz at math.utexas.edu (Patrick Goetz) Date: Tue Dec 2 02:34:27 2003 Subject: Making Samba printers available to Domain Users Message-ID: Samba 2.2 PDC, W2K clients First, a note on the documentation: According to the Samba-HOWTO-Collection (most current version) ---------------------------------- In order to currently add a new driver to you Samba host, one of two conditions must hold true: * The account used to connect to the Samba host must have a uid of 0 (i.e. a root account) * The account used to connect to the Samba host must be a member of the printer admin list. --------------------------------------------------------- While logged in as root, I consistently got "Access Denied" messages while trying to add printer drivers to the Samba server. The trick which fixed this problem was to add a write list = root line to the print$ section, as in [print$] comment = Printer Drivers path = /opt/samba/printers write list = root read only = yes browseable = yes guest ok = no ======================================================================= Now I have 2 additional problems, one not particularly appropriate to this list, but a curiosity nonetheless. First, I would prefer to set up each printer once as root and then have the printers available to anyone from the domain who logs in on the machine. Is there any way to do this? As root, I tried going to the shared printers properties, clicking on Security, and adding "Domain Users", but when I try to do this, I get a message "Unable to lookup user names for display" and nothing gets added to "Security" list. Note that all the domain users do show up individually in the select list which pops up when I click on Add. Perhaps this isn't the thing I want anyway. A second problem is that postscript print jobs seem to get corrupted enroute from the W2K machine to the (HP) postscript printer. I can print from the W2K machine, the print job shows up at the printer, and then is squelched due to postscript errors. This happens when printing from MS Word 2000 and when printing a test page. The odd thing is that we had exactly the same problem with Samba 2.0.7 and ended up filtering each print job through a special filter designed to clean up the postscript. If anyone can shed some light on why this happens, it would be greatly appreciated. From david at dlevitan.com Mon Apr 23 02:00:55 2001 From: david at dlevitan.com (David Levitan) Date: Tue Dec 2 02:34:27 2003 Subject: account disabled? Message-ID: <3AE38CD7.E31CEE17@dlevitan.com> Hi, I was fiddling around with some things, and suddenly I could no longer login, getting an "Account Disabled" message. I can still access shares on the samba 2.2.0 server, but domain logons don't work anymore, not even for root. I tried uninstalling samba and reinstalling it, rejoining the domain, using smbpasswd -e user, but nothing has worked. Does anybody have any ideas about this? Thanks. -- David Levitan LIS From david at dlevitan.com Tue Apr 24 22:39:08 2001 From: david at dlevitan.com (David Levitan) Date: Tue Dec 2 02:34:27 2003 Subject: samba problem In-Reply-To: Message-ID: I have a question. I had installed samba, and got the following /etc/pam.d/samba: auth required pam_nologin.so auth required pam_stack.so service=system-auth account required pam_stack.so service=system-auth session required pam_stack.so service=system-auth password required pam_stack.so service=system-auth Using this with domains, I got an account disabled message everytime. When I moved to the file below, the messages dissappeared. Can anyone explain what happened? Thanks. On Tue, 24 Apr 2001, Steve Langasek wrote: > On Tue, 24 Apr 2001, Kapil Sharma wrote: > > > Hi , > > I am using redhat 7.0 > > In that case, please try using this /etc/pam.d/samba file: > > auth required pam_unix.so > account required pam_permit.so > > > Regards, > Steve Langasek > postmodern programmer > > > > -- David Levitan LIS From gcarter at valinux.com Wed Apr 25 22:22:40 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:27 2003 Subject: account disabled? In-Reply-To: <3AE38CD7.E31CEE17@dlevitan.com> Message-ID: On Sun, 22 Apr 2001, David Levitan wrote: > Hi, > I was fiddling around with some things, and suddenly I could no longer > login, getting an "Account Disabled" message. I can still access shares > on the samba 2.2.0 server, but domain logons don't work anymore, not > even for root. I tried uninstalling samba and reinstalling it, rejoining > the domain, using smbpasswd -e user, but nothing has worked. Does > anybody have any ideas about this? Please search the archives. We've been discussing this quite a lot on samba-technical. It is related to a bug in our PAM code in 2.2.0. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From gcarter at valinux.com Wed Apr 25 22:28:59 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:27 2003 Subject: Making Samba printers available to Domain Users In-Reply-To: Message-ID: On Wed, 25 Apr 2001, Patrick Goetz wrote: > Samba 2.2 PDC, W2K clients > > First, a note on the documentation: > According to the Samba-HOWTO-Collection (most current version) > > ---------------------------------- > In order to currently add a new driver to you Samba host, one of two > conditions must hold true: > > * The account used to connect to the Samba host must have > a uid of 0 (i.e. a root account) > > * The account used to connect to the Samba host must be a > member of the printer admin list. > --------------------------------------------------------- continueing on... Of course, the connected account must still possess access to add files to the subdirectories beneath [print$]. I'll make the docs clearer though :-) > First, I would prefer to set up each printer once as root and then > have the printers available to anyone from the domain who logs in on > the machine. Is there any way to do this? As root, I tried going to > the shared printers properties, clicking on Security, and adding > "Domain Users", but when I try to do this, I get a message "Unable to > lookup user names for display" and nothing gets added to "Security" > list. Note that all the domain users do show up individually in the > select list which pops up when I click on Add. Perhaps this isn't the > thing I want anyway. Printer ACLs default to "Everyone - Print" Is this not the case for you? > A second problem is that postscript print jobs seem to get corrupted > enroute from the W2K machine to the (HP) postscript printer. I can > print from the W2K machine, the print job shows up at the printer, and > then is squelched due to postscript errors. This happens when > printing from MS Word 2000 and when printing a test page. The odd > thing is that we had exactly the same problem with Samba 2.0.7 and > ended up filtering each print job through a special filter designed to > clean up the postscript. If anyone can shed some light on why this > happens, it would be greatly appreciated. Check the first 4 lines of the PS file for PJL codes. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From david at dlevitan.com Mon Apr 23 22:22:14 2001 From: david at dlevitan.com (David Levitan) Date: Tue Dec 2 02:34:27 2003 Subject: Samba, Win2000 and trust between samba References: <005301c0cc43$5ea264f0$0505020a@calimero> Message-ID: <3AE4AB16.B979140E@dlevitan.com> An idea not using samba: I assume that this is a redundant server. If the primary goes down, you want the seconday to kick in. In this case, what about setting up a heartbeat (and the rest of the redundancy stuff found in the HOW-TOs) to immediately transfer all ips, and the like to the backup server if the primary goes down. If anything fails, you simply start samba up, and everything works. Once the other machine goes back online, the process reverses. Luis Cordeiro wrote: > > Hi, > > I'm having some problems with samba. > > I have two servers with redhat 7.0 and samba 2.2. The computers that are > making autentification though samba have Win2000 (witch is working when > having only one domain). > > My problem is that I need to have the possibility to logon on the Win2000 > machines using the two servers. I've heard that I could use the trust > between the two samba servers. But I've read in some documents (perhaps not > the right ones) that that's not possible to do. > > My question is: is it possible? if so how to? if not is there another way to > do it? > > Thanks, > Luis -- David Levitan LIS From P.Charchalakis at sussex.ac.uk Wed Apr 25 23:28:07 2001 From: P.Charchalakis at sussex.ac.uk (Periklis Charchalakis) Date: Tue Dec 2 02:34:27 2003 Subject: Dots ('.') in usernames Message-ID: Has anybody used samba 2.2 with usernames that contain a dot ('.')? The logon works fine but the home share doesn't. Users with no dot work fine too.. Even if I make the home share browsable it fails when the user connected contains a dot, while non-domain users can see the share as they get the "root" username. In the logs all the accesses seem to contain the '.' properly, and there is no indication of "not found" directories or any other errors. From the NT side I get "access denied" and error type 5 when I try to mount the home manually with net. Finally if I set the "path" of the home share static to the home of one of the users with a dot then the share is accessible. Thus I suspect there is a problem in the substitution of the %u/%U/%S somewhere. I use samba 2.2.0 (downloaded and compiled 2 dayes ago), 2.2.18 kernel, intel arch, glibc2.2.2, gcc 2.95.3, all workstations are NT4 with sp5. ~regards P.C. -- FA EA F0 FF 00 F0 From gcarter at valinux.com Wed Apr 25 16:16:07 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:27 2003 Subject: %U and %u functionality change in 2.2?? In-Reply-To: <988210106.20240.7.camel@comp10574.potsdam.edu> Message-ID: On 25 Apr 2001, Matthew Keller wrote: > > I've been using %U macros within "include" statements in Samba 2.0 for > years now. 2.2 doesn't seem to like them anyore. Has this > functionality changed? I checked the smb.conf man page, but it doesn't > seem to say anything different. I'm really hurting without this > functionality (including different conf files depending on user name). > Any help would be most appreciated. Is it not being expanded? Can you give me the details surrounding the problem and send me a level 10 debug log when it fails? Have you tried %u? Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From pgoetz at math.utexas.edu Thu Apr 26 05:31:04 2001 From: pgoetz at math.utexas.edu (Patrick Goetz) Date: Tue Dec 2 02:34:27 2003 Subject: Making Samba printers available to All Domain Users In-Reply-To: Message-ID: On Wed, 25 Apr 2001, Gerald Carter wrote: > > > First, I would prefer to set up each printer once as root and then > > have the printers available to anyone from the domain who logs in on > > the machine. Is there any way to do this? > > Printer ACLs default to "Everyone - Print" Is this not the case for you? > Progress Report: I've done a little more research on this issue, trolling the Microsoft support database and deja.com. Apparently setting up network printers on W2K machines so that they are available to any domain user who logs in on the machine is not at all straight forward, and requires one to invoke bizarre and convoluted logon script commands - see, for example http://support.microsoft.com/support/kb/articles/Q189/1/05.ASP If anyone knows a simpler way to do this, I'd love to hear about it. Apparently the idea that everyone who uses a particular machine might want to have a particular printer availalble to them never occurred to Microsoft. Well, at least Active Directory Services are simple and elegant. >;-) From alisampras at esuria.com.bn Thu Apr 26 07:06:58 2001 From: alisampras at esuria.com.bn (Ali Sampras) Date: Tue Dec 2 02:34:27 2003 Subject: Needed Help !!!!!!!!!11 Message-ID: <003f01c0ce1f$7c1346c0$7900000a@alisampras> Hello Ough, You say that you have managed Solaris 8 box running samba to the NT domain.Here i have installed samba 2.0.7 in my Solaris 8 workstation , i can see my Solaris 8 workstation in Windows Network but when i double-click it its say " The network path was not found". I need your help? Please, can you email me your Documentation.( How did you install your samba 2.0.6 in Solaris 8) Ok bye. Waiting for your respond :-) # Yours Truly, # Mohd.Ali Bin Abdullah. # eSuria Mentari Systems Sdn Bhd. # Unit 9,1st Floor,Block A, # Kiarong Complex, # Bandar Seri Begawan, # Negara Brunei Darussalam,BE1318. # Tel No: +673-2-423721 OR +673-2-423722 # Fax No: +673-2-454076 # Email Add: alisampras@esuria.com.bn Can someone help? I have managed to add my Solaris 8 box running Samba 2.0.6 to the NT domain as a member (good, so far). Solution was to add the ip address of the PDC to the hosts file as NetBios could not resolve it. I have added a user to the local user group, but on restart Samba doesn't see the network. The PDC is on a domain called 'SUBDOM1' and named 'SUBDOMPDC1'. The user, however, needs to log on to a domain called 'DOM1', which I assume should be the domain listed in SMB.conf? The local user has the same name and password as he would on DOM1. Can someone point out the mistake? -------------------------------------------------------------------------------- -------------- next part -------------- HTML attachment scrubbed and removed From cantonpa at unive.it Thu Apr 26 07:02:37 2001 From: cantonpa at unive.it (Patrizia Canton) Date: Tue Dec 2 02:34:27 2003 Subject: problem with winword97 Message-ID: Hi, I hope somebody could help me, I am using samba 2.2.0 on Linux Debian 2.2rev2, kernel 2.4.3 It is acting as PDC. If I open winword97 from a win98 pc and try to save a file on the samba server I encounter no problem, if I try to do the same from a WinNT4 PC, winword97 complains it is not able to open the shared resource //romeo/utenti, which is not accessible. if I look at the log (loglevel 3) I find (this is a small part of it): [2001/04/24 17:23:50, 3] smbd/trans2.c:call_trans2qfilepathinfo(1355) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 257 [2001/04/24 17:23:50, 3] lib/util.c:unix_clean_name(384) unix_clean_name [/utenti/stefano/Documenti/congressi/WINSPOOL.DRV] [2001/04/24 17:23:50, 3] lib/util.c:unix_clean_name(384) unix_clean_name [utenti/stefano/Documenti/congressi/WINSPOOL.DRV] [2001/04/24 17:23:50, 3] smbd/trans2.c:call_trans2qfilepathinfo(1365) fileinfo of utenti/stefano/Documenti/congressi/WINSPOOL.DRV failed (No such fi le or directory) [2001/04/24 17:23:50, 3] smbd/error.c:error_packet(123) error string = No such file or directory [2001/04/24 17:23:50, 3] smbd/error.c:error_packet(141) error packet at line 1371 cmd=50 (SMBtrans2) eclass=1 ecode=2 [2001/04/24 17:23:50, 3] smbd/process.c:process_smb(831) this is my smb.conf any idea? [global] netbios name = romeo printing = bsd printcap name = /etc/printcap load printers = yes invalid users = root bin daemon adm sync shutdown halt mail news uucp operator gopher security = user workgroup = raggi-x domain logons = yes server string= log file= /var/log/samba/samba.log.m% log level=3 syslog only = no syslog = 0 socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=4096 SO_RCVBUF=4096 encrypt passwords = yes wins support = yes os level = 34 domain master = yes local master = yes preferred master = yes logon script = scripts\%U.bat name resolve order = lmhosts host wins bcast dns proxy = no preserve case = yes short preserve case = yes unix password sync = false # passwd program = /usr/bin/passwd %u #passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\sn;ew\sU#NIX\spassword;:* %n\n . max log size = 1000 [profile] comment = user profiles path = /export/samba/profile create mode = 0600 directory mode = 0700 writable = yes browsable = no [netlogon] comment = the domain logon service path = /export/samba/logon public = no writable = no browsable = no [dati] browseable = yes comment = data drive read only = yes write list = dati-rx marino1 path = /home1/dati follow symlinks = yes wide links = yes veto files = /.*//*.java//quota*//lost+found/ delete veto files = no create mask = 0700 directory mask = 0700 [utenti] browseable = yes comment = read only = yes write list = pat piero alessandro stefano path = /home1/utenti follow symlinks = yes wide links = yes veto files = /.*//*.java//quota*//lost+found/ delete veto files = no create mask = 0700 directory mask = 0700 [pat] browseable=yes write list=pat path=/home1/utenti/utenti/pat follow symlinks= yes wide links= yes veto files = /.*//*.java//quota*//lost+found/ delete veto files = no create mask = 0700 directory mask = 0700 [printers] comment = All Printers browseable = no path = /tmp printable = yes public = no writable = no create mode = 0700 available = yes ______________________________________________ Dr. Patrizia Canton Dept. of Physical Chemistry Via Torino 158 I-30170 Venezia-Mestre Italy Phone +39-041-2908590 Fax +39-041-2578594 e-mail cantonpa@unive.it ______________________________________________ From alisampras at esuria.com.bn Thu Apr 26 07:19:31 2001 From: alisampras at esuria.com.bn (Ali Sampras) Date: Tue Dec 2 02:34:27 2003 Subject: Needed Help!!!!!!!!!!!!! Message-ID: <007e01c0ce21$3d1a72c0$7900000a@alisampras> Hello Ough, You say that you have managed Solaris 8 box running samba to the NT domain.Here i have installed samba 2.0.7 in my Solaris 8 workstation , i can see my Solaris 8 workstation in Windows Network but when i double-click it its say " The network path was not found". I need your help? Please, can you email me your Documentation.( How did you install your samba 2.0.6 in Solaris 8) Ok bye. Waiting for your respond :-) # Yours Truly, # Mohd.Ali Bin Abdullah. # eSuria Mentari Systems Sdn Bhd. # Unit 9,1st Floor,Block A, # Kiarong Complex, # Bandar Seri Begawan, # Negara Brunei Darussalam,BE1318. # Tel No: +673-2-423721 OR +673-2-423722 # Fax No: +673-2-454076 # Email Add: alisampras@esuria.com.bn Can someone help? I have managed to add my Solaris 8 box running Samba 2.0.6 to the NT domain as a member (good, so far). Solution was to add the ip address of the PDC to the hosts file as NetBios could not resolve it. I have added a user to the local user group, but on restart Samba doesn't see the network. The PDC is on a domain called 'SUBDOM1' and named 'SUBDOMPDC1'. The user, however, needs to log on to a domain called 'DOM1', which I assume should be the domain listed in SMB.conf? The local user has the same name and password as he would on DOM1. Can someone point out the mistake? -------------- next part -------------- HTML attachment scrubbed and removed From royt at subexgroup.com Thu Apr 26 13:53:10 2001 From: royt at subexgroup.com (Roy Thomas) Date: Tue Dec 2 02:34:27 2003 Subject: FW: Accessing NT shared directory from win98 - Samba Message-ID: <01C0CE58.3B4EFC90.royt@subexgroup.com> Hi would be great if someone could help me on the win98, winNT directory share problem mentioned below Thanks Roy -----Original Message----- From: Roy Thomas [SMTP:royt@subexgroup.com] Sent: Wednesday, April 25, 2001 5:42 PM To: 'samba-ntdom@lists.samba.org' Subject: Accessing NT shared directory from win98 - Samba Hi all I am facing problems when a workstation with win98 is accessing a shared folder from WinNT workstation on Samba Domain. It gives me following error message " \\dir not accessible The User account has expired " Would be great if someone could guide me on this. Thanks Roy From shanu at exocore.com Thu Apr 26 08:40:20 2001 From: shanu at exocore.com (Shanker Balan) Date: Tue Dec 2 02:34:27 2003 Subject: Uploading printer drivers from Win2K Prof Client In-Reply-To: ; from gcarter@valinux.com on Wed, Apr 25, 2001 at 08:06:59AM -0700 References: <20010425203306.A6946@monster.exocore.com> Message-ID: <20010426141020.D3465@monster.exocore.com> Hello: Gerald Carter wrote, > > I cant find the add printer command "addprinter" anywhere in my > > samba_2_2 CVS download. Where can i find it? > > You have to write it I'm afraid. Note that this is only necessary > if you want to add **new** printers not already defined in smb.conf. > the add printer command should create a new printer on the UNIX > host and create the appropriate entry in smb.conf. I dont want to _add_ new printers. I just want to _upload_ the drivers to the samba server as explained in the printer_driver2.html doc which i am not able to do. > If you just want to use printers already defined in smb.conf > (say [printers] for example), then just right click and upload > the desired driver. Make sense? Makes sense. But my problem is that i cant seem to upload it. The wizard does not even make an attemp to upload the driver which it previusly used to but would later die. IIRC, this behaviour started after i used the local APW and installed the printer driver locally. I tried deleting the printer from control panel -> printers but no dice. Question: How does one make Win2K and samba "forget" all the printer related settings? -- Shanu - - - - - - - - - - - ( Shanu ) - - Shanker Balan shanu@exocore.com From khaidenthaler at softpoint.at Thu Apr 26 08:41:18 2001 From: khaidenthaler at softpoint.at (Klaus Haidenthaler) Date: Tue Dec 2 02:34:27 2003 Subject: CVS-tree: SMBRUN undeclared Message-ID: <51C724A98AEBD21183110080AD83572A2B26E9@POSTOFFICE-0> Hello, while trying to compile the current CVS-source (~1 hour old) I ran in to following error (see below), ./configure went through without obvious errors. ---snip--- Using LIBS = -ldl -lcrypt -lnsl -lcrypt Compiling param/loadparm.c param/loadparm.c: In function `init_globals': param/loadparm.c:1208: `SMBRUN' undeclared (first use in this function) param/loadparm.c:1208: (Each undeclared identifier is reported only once param/loadparm.c:1208: for each function it appears in.) make: *** [param/loadparm.o] Error 1 ---snip--- any hints where to fiddle around? TIA & regards Klaus Haidenthaler Softpoint electronics Server / Networks / IT-Security From steve at maths.ed.ac.uk Thu Apr 26 10:24:23 2001 From: steve at maths.ed.ac.uk (Steven Law) Date: Tue Dec 2 02:34:27 2003 Subject: 2 Samba Servers on same subnet Message-ID: Hello everyone, this is my first post to the ntdom list as I'm heading down the Domain trail .... I already have a 2.0.7 server on my subnet and want to keep that running for the time being. It is setup as a workgroup server and doesn't use encryption. I've set the os level to 34, it's the preferred master and uses wins support. Now I want to setup a new 2.2.0 samba server on my network to deal with the win2k clients that will come online shortly. It is going to be a PDC. My question is this .... even though the 2nd server will have a different workgroup name and will use domains, will there be any interference between the two ? I presume I should not have two preferred masters or two wins supports ? Does the domain based server have to be the preferred master and have wins support or can I just rely on the other server to do that for the time being. If my win9x clients are using workgroups only, will they stay clear of the developing 2nd server (which may well be up and down a bit to start with) ? Regards Steve Law -- Computing Officer Department of Mathematics and Statistics, Edinburgh University. Phone: 0131 650 5037 , Email: steve@maths.ed.ac.uk Home Page: http://www.maths.ed.ac.uk/~steve From lost at quake.ru Thu Apr 26 10:55:44 2001 From: lost at quake.ru (LOST) Date: Tue Dec 2 02:34:27 2003 Subject: Win2000 logon to SAMBA DOMIAN Message-ID: <1901736066.20010426145544@quake.ru> Hello ALL, I tried to make my smb.conf like documentation say. But I still get message from WINDOW$ 2000 clients: "The following error occured attempting to join the domian "SIMPLE" The procedure number is out of range" I've got samba-2.2.0 on FreeBSD-4.2-release unix. Can anybody help me? -- Best regards, LOST mailto:lost@quake.ru From Brecht.Samyn at kulak.ac.be Thu Apr 26 12:10:27 2001 From: Brecht.Samyn at kulak.ac.be (Brecht Samyn) Date: Tue Dec 2 02:34:27 2003 Subject: %U and %u functionality change in 2.2?? References: <988210106.20240.7.camel@comp10574.potsdam.edu> <3AE6FB0A.5C27AEA8@valinux.com> Message-ID: <3AE81033.1CF7E9E0@kulak.ac.be> Maybe someone noticed it before, but some shares with %U in the name don't work either (even after applying Jeremy's patch to samba 2.2.0). e.g. [%u] and [tlc-%U] don't work (I get %u and tlc-%U in the list of available shares) [%U] gets substituted correctly. Everything else we use seems to work after upgrading from 2.0.7 to 2.2.0 . Thanks for the great work! Brecht Jeremy Allison wrote: > Matthew Keller wrote: > > > > I've been using %U macros within "include" statements in Samba 2.0 for > > years now. 2.2 doesn't seem to like them anyore. Has this functionality > > changed? I checked the smb.conf man page, but it doesn't seem to say > > anything different. I'm really hurting without this functionality > > (including different conf files depending on user name). Any help would > > be most appreciated. > > Yes, we broke this by accident in 2.2.0. The intent is to > fix this for 2.2.1 and make %U map to the incoming username > (enforced lowercase). > > Here is the patch that will be in 2.2.1. > > Sorry for the problem, > > Jeremy. > -- Brecht Samyn, Systeemgroep Katholieke Universiteit Leuven Campus Kortrijk (KULAK) Belgium E-mail: Brecht.Samyn@kulak.ac.be tel. ++32 56 246 264 From jean-claude.ben at cc-thouarsais.fr Thu Apr 26 12:16:40 2001 From: jean-claude.ben at cc-thouarsais.fr (Jean-Claude Ben) Date: Tue Dec 2 02:34:27 2003 Subject: Samba 2.2 as a PDC server for W2k stations Message-ID: <002c01c0ce4a$bfde90f0$0801a8c0@jeanclaudeben> Hi I'm trying to use Samba 2.2 as a PDC server for W2k stations but when I try to join the domain i'm given this error : "The account used is a computer account. Use your global or local user account to access this server". Here is a copy of my smb.conf. Do something see something bad ? # Global parameters [global] workgroup = THOUARSAIS netbios name = SERVEUR server string = Serveur Intranet username map = /etc/smbusers log file = /var/log/samba/log.%m max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 domain logons = Yes os level = 65 domain master = Yes dns proxy = No wins support = Yes default service = commun logon script = netlogon.bat coding system = client code page = 850 code page directory = /usr/local/samba/lib/codepages netbios aliases = netbios scope = interfaces = 192.168.1.201 bind interfaces only = No security = USER encrypt passwords = No update encrypted = Yes allow trusted domains = Yes hosts equiv = /etc/hosts.equiv min passwd length = 6 map to guest = Never null passwords = Yes password server = smb passwd file = /usr/local/samba/private/smbpasswd root directory = passwd program = /usr/bin/passwd passwd chat = *new*password* %n\n *new*password* %n\n *updated* passwd chat debug = No username map = password level = 0 username level = 0 unix password sync = No restrict anonymous = No use rhosts = No log level = 3 syslog = 1 syslog only = No log file = max log size = 5000 timestamp logs = Yes debug hires timestamp = No debug pid = No debug uid = No protocol = NT1 read bmpx = No read raw = Yes write raw = Yes nt smb support = Yes nt pipe support = Yes nt acl support = Yes announce version = 4.2 announce as = NT max mux = 50 max xmit = 65535 name resolve order = lmhosts host wins bcast max packet = 65535 max ttl = 259200 max wins ttl = 518400 min wins ttl = 21600 time server = Yes change notify timeout = 60 deadtime = 0 getwd cache = Yes keepalive = 300 lpq cache time = 10 max disk size = 0 max open files = 2000 read size = 16384 stat cache size = 50 load printers = No printcap name = /etc/printcap enumports command = addprinter command = deleteprinter command = show add printer wizard = No strip dot = No character set = mangled stack = 50 stat cache = Yes domain groups = domain admin group = @root domain guest group = domain admin users = jean-claude.ben root domain guest users = machine password timeout = 604800 add user script = delete user script = # logon script = logon.bat # logon path = \\%N\profiles logon drive = L: # logon home = \\%N\%U domain logons = Yes os level = 65 lm announce = Auto lm interval = 60 preferred master = True local master = Yes domain master = True browse list = Yes dns proxy = Yes wins proxy = Yes wins server = wins support = Yes wins hook = kernel oplocks = Yes oplock break wait time = 10 smbrun = /usr/local/samba/bin/smbrun config file = preload = lock dir = /usr/local/samba/var/locks default service = message command = dfree command = valid chars = remote announce = remote browse sync = socket address = 0.0.0.0 homedir map = time offset = 0 unix realname = Yes NIS homedir = No source environment = panic action = hide local users = No host msdfs = No winbind uid = winbind gid = template homedir = /home/%D/%U template shell = /bin/false winbind separator = \ winbind cache time = 15 comment = file server path = alternate permissions = No username = guest account = nobody invalid users = valid users = admin users = read list = write list = printer admin = force user = force group = read only = Yes create mask = 0644 force create mode = 00 security mask = -1 force security mode = -1 directory mask = 0755 force directory mode = 00 directory security mask = -1 force directory security mode = -1 inherit permissions = No guest only = No guest ok = No only user = No hosts allow = 192.168.1. 127.0.0.1 hosts deny = ALL status = Yes max connections = 0 min print space = 0 strict sync = No sync always = No write cache size = 0 max print jobs = 1000 printable = No postscript = No printing = bsd print command = lpr -r -P%p %s lpq command = lpq -P%p lprm command = lprm -P%p %j lppause command = lpresume command = queuepause command = queueresume command = printer name = printer driver = printer driver file = /usr/local/samba/lib/printers.def printer driver location = default case = lower case sensitive = No preserve case = Yes short preserve case = Yes mangle case = No mangling char = ~ hide dot files = Yes delete veto files = No veto files = hide files = veto oplock files = map system = No map hidden = No map archive = Yes mangled names = Yes mangled map = browseable = Yes blocking locks = Yes fake oplocks = No locking = Yes oplocks = Yes level2 oplocks = Yes oplock contention limit = 2 posix locking = Yes strict locking = No share modes = Yes copy = include = exec = preexec close = No postexec = root preexec = root preexec close = No root postexec = available = Yes volume = fstype = NTFS set directory = No wide links = Yes follow symlinks = Yes dont descend = magic script = magic output = delete readonly = No dos filetimes = No dos filetime resolution = No fake directory create times = No vfs object = vfs options = msdfs root = No [perso] comment = Repertoire Perso read only = No # browseable = No # locking = No path = %H/Samba [commun] comment = Repertoire Commun path = /home/samba valid users = @users read only = no # locking = No [netlogon] comment = The domain logon service path = /usr/local/samba/netlogon write list = @root #[profiles] # comment = User Profiles # path = /home/utilisateurs/%u/profile # invalid users = all # valid users = +users admin # read only = No # locking = No From royt at subexgroup.com Thu Apr 26 17:56:35 2001 From: royt at subexgroup.com (Roy Thomas) Date: Tue Dec 2 02:34:27 2003 Subject: Samba 2.2 as a PDC server for W2k stations Message-ID: <01C0CE7A.3C9762A0.royt@subexgroup.com> Hi create a samba id for your root account use this root id to add your W2K workstation to the domain Hope this sorts the problem cheers Roy -----Original Message----- From: Jean-Claude Ben [SMTP:jean-claude.ben@cc-thouarsais.fr] Sent: Thursday, April 26, 2001 5:47 PM To: samba-ntdom@lists.samba.org Subject: Samba 2.2 as a PDC server for W2k stations Hi I'm trying to use Samba 2.2 as a PDC server for W2k stations but when I try to join the domain i'm given this error : "The account used is a computer account. Use your global or local user account to access this server". Here is a copy of my smb.conf. Do something see something bad ? # Global parameters [global] workgroup = THOUARSAIS netbios name = SERVEUR server string = Serveur Intranet username map = /etc/smbusers log file = /var/log/samba/log.%m max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 domain logons = Yes os level = 65 domain master = Yes dns proxy = No wins support = Yes default service = commun logon script = netlogon.bat coding system = client code page = 850 code page directory = /usr/local/samba/lib/codepages netbios aliases = netbios scope = interfaces = 192.168.1.201 bind interfaces only = No security = USER encrypt passwords = No update encrypted = Yes allow trusted domains = Yes hosts equiv = /etc/hosts.equiv min passwd length = 6 map to guest = Never null passwords = Yes password server = smb passwd file = /usr/local/samba/private/smbpasswd root directory = passwd program = /usr/bin/passwd passwd chat = *new*password* %n\n *new*password* %n\n *updated* passwd chat debug = No username map = password level = 0 username level = 0 unix password sync = No restrict anonymous = No use rhosts = No log level = 3 syslog = 1 syslog only = No log file = max log size = 5000 timestamp logs = Yes debug hires timestamp = No debug pid = No debug uid = No protocol = NT1 read bmpx = No read raw = Yes write raw = Yes nt smb support = Yes nt pipe support = Yes nt acl support = Yes announce version = 4.2 announce as = NT max mux = 50 max xmit = 65535 name resolve order = lmhosts host wins bcast max packet = 65535 max ttl = 259200 max wins ttl = 518400 min wins ttl = 21600 time server = Yes change notify timeout = 60 deadtime = 0 getwd cache = Yes keepalive = 300 lpq cache time = 10 max disk size = 0 max open files = 2000 read size = 16384 stat cache size = 50 load printers = No printcap name = /etc/printcap enumports command = addprinter command = deleteprinter command = show add printer wizard = No strip dot = No character set = mangled stack = 50 stat cache = Yes domain groups = domain admin group = @root domain guest group = domain admin users = jean-claude.ben root domain guest users = machine password timeout = 604800 add user script = delete user script = # logon script = logon.bat # logon path = \\%N\profiles logon drive = L: # logon home = \\%N\%U domain logons = Yes os level = 65 lm announce = Auto lm interval = 60 preferred master = True local master = Yes domain master = True browse list = Yes dns proxy = Yes wins proxy = Yes wins server = wins support = Yes wins hook = kernel oplocks = Yes oplock break wait time = 10 smbrun = /usr/local/samba/bin/smbrun config file = preload = lock dir = /usr/local/samba/var/locks default service = message command = dfree command = valid chars = remote announce = remote browse sync = socket address = 0.0.0.0 homedir map = time offset = 0 unix realname = Yes NIS homedir = No source environment = panic action = hide local users = No host msdfs = No winbind uid = winbind gid = template homedir = /home/%D/%U template shell = /bin/false winbind separator = \ winbind cache time = 15 comment = file server path = alternate permissions = No username = guest account = nobody invalid users = valid users = admin users = read list = write list = printer admin = force user = force group = read only = Yes create mask = 0644 force create mode = 00 security mask = -1 force security mode = -1 directory mask = 0755 force directory mode = 00 directory security mask = -1 force directory security mode = -1 inherit permissions = No guest only = No guest ok = No only user = No hosts allow = 192.168.1. 127.0.0.1 hosts deny = ALL status = Yes max connections = 0 min print space = 0 strict sync = No sync always = No write cache size = 0 max print jobs = 1000 printable = No postscript = No printing = bsd print command = lpr -r -P%p %s lpq command = lpq -P%p lprm command = lprm -P%p %j lppause command = lpresume command = queuepause command = queueresume command = printer name = printer driver = printer driver file = /usr/local/samba/lib/printers.def printer driver location = default case = lower case sensitive = No preserve case = Yes short preserve case = Yes mangle case = No mangling char = ~ hide dot files = Yes delete veto files = No veto files = hide files = veto oplock files = map system = No map hidden = No map archive = Yes mangled names = Yes mangled map = browseable = Yes blocking locks = Yes fake oplocks = No locking = Yes oplocks = Yes level2 oplocks = Yes oplock contention limit = 2 posix locking = Yes strict locking = No share modes = Yes copy = include = exec = preexec close = No postexec = root preexec = root preexec close = No root postexec = available = Yes volume = fstype = NTFS set directory = No wide links = Yes follow symlinks = Yes dont descend = magic script = magic output = delete readonly = No dos filetimes = No dos filetime resolution = No fake directory create times = No vfs object = vfs options = msdfs root = No [perso] comment = Repertoire Perso read only = No # browseable = No # locking = No path = %H/Samba [commun] comment = Repertoire Commun path = /home/samba valid users = @users read only = no # locking = No [netlogon] comment = The domain logon service path = /usr/local/samba/netlogon write list = @root #[profiles] # comment = User Profiles # path = /home/utilisateurs/%u/profile # invalid users = all # valid users = +users admin # read only = No # locking = No From rpeterso at mtholyoke.edu Thu Apr 26 13:05:10 2001 From: rpeterso at mtholyoke.edu (Ron Peterson) Date: Tue Dec 2 02:34:27 2003 Subject: Win2000 logon to SAMBA DOMIAN References: <1901736066.20010426145544@quake.ru> Message-ID: <3AE81D06.7D7BBAF9@mtholyoke.edu> LOST wrote: > > Hello ALL, > > I tried to make my smb.conf like documentation say. > But I still get message from WINDOW$ 2000 clients: > "The following error occured attempting to join the domian "SIMPLE" > The procedure number is out of range" > > I've got samba-2.2.0 on FreeBSD-4.2-release unix. > Can anybody help me? Have you tried logging in as 'root' when it asks for an authorized username/password? -- Ron Peterson Network & Systems Manager Mount Holyoke College GPG and other info at http://www.mtholyoke.edu/~rpeterso From bernie at red-post.co.uk Thu Apr 26 13:14:08 2001 From: bernie at red-post.co.uk (bernie doyle) Date: Tue Dec 2 02:34:28 2003 Subject: mapping user account for NT and w2k Message-ID: <3AE81F20.5E431F68@red-post.co.uk> Hi I am running the 2.2a3 as a PDC on linux. I have machine login in fine, but have a little bit of weirdness someone may be able to clear up. I am mapping user home directories to a drive letter (S:) when a user logs in. \\severname\sharename\%U. On a Win2k machine when I access S:\ is see the contents of the users home directory (correct). On a WinNT machine when I access S:\ i see a list of all the users home directories ie: the %U value does not seem to get mapped under WinNT. Has anyone come across this problem. many thanks in advance bernie doyle From gcarter at valinux.com Thu Apr 26 13:28:19 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:28 2003 Subject: CVS-tree: SMBRUN undeclared In-Reply-To: <51C724A98AEBD21183110080AD83572A2B26E9@POSTOFFICE-0>; from khaidenthaler@softpoint.at on Thu, Apr 26, 2001 at 03:41:18 -0500 References: <51C724A98AEBD21183110080AD83572A2B26E9@POSTOFFICE-0> Message-ID: <20010426082819.K18611@pogo.plainjoe.org> On Thu, 26 Apr 2001 03:41:18 Klaus Haidenthaler wrote: > > while trying to compile the current CVS-source (~1 hour old) I ran in > to > following error (see below), > ./configure went through without obvious errors. > > ---snip--- > Using LIBS = -ldl -lcrypt -lnsl -lcrypt > Compiling param/loadparm.c > param/loadparm.c: In function `init_globals': > param/loadparm.c:1208: `SMBRUN' undeclared (first use in this > function) > param/loadparm.c:1208: (Each undeclared identifier is reported only > once > param/loadparm.c:1208: for each function it appears in.) > make: *** [param/loadparm.o] Error 1 > ---snip--- HEAD branch fixed. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From khaidenthaler at softpoint.at Thu Apr 26 13:28:10 2001 From: khaidenthaler at softpoint.at (Klaus Haidenthaler) Date: Tue Dec 2 02:34:28 2003 Subject: AW: mapping user account for NT and w2k Message-ID: <51C724A98AEBD21183110080AD83572A2B26F0@POSTOFFICE-0> Thus spaketh Bernie Doyle: > I am mapping user home directories to a drive letter (S:) when a user > logs in. > > \\severname\sharename\%U. > > > On a Win2k machine when I access S:\ is see the contents of the users > home directory (correct). > > On a WinNT machine when I access S:\ i see a list of all the > users home > directories ie: the %U value does not seem to get mapped under WinNT. > Has anyone come across this problem. yupp. this has nothing to do with samba (imo), it's a w2k-"feature". With NT4 you cannot map root a subdir "below" a sharename, this just works with W2k and good ole netware. Why don't you use the [homes]-section of smb.conf for this kind of mapping, shoulda work fine, or, if it's the "logon home"-parameter, use \\servername\%U instead (could be that you have to enable [homes] to make this work, dunno) HTH Klaus Haidenthaler Softpoint electronics Server / Netzwerke / IT-Security Phone: +43 732 / 79 44 79 - 81 Fax: +43 765 / 77 30 10 - 81 From daniel.botella at teuchos.fr Thu Apr 26 13:23:28 2001 From: daniel.botella at teuchos.fr (Daniel Botella) Date: Tue Dec 2 02:34:28 2003 Subject: Netscape profiles with Samba Message-ID: <3b361fa963ffde80.63ffde803b361fa9@teuchos.fr> Hello, My configuration W NT4 SP5 / 6 with itinerant profiles and connection via Samba of the reader H: in which)the data's user are placed. Among these data is the profile of Netscape 4.6 Now for some time, I have the following things : The user connects, he has his data. He launches Netscape and all the directory H: is removed. For some, it began further to a network bug where H: was not accessible. They launched all the same Netscape and answered by mistake for questions of creation of profile. The pit is that now it is systematic and would tend to extend towards people having made no mistake. What to do ? From txkjohn at hotmail.com Thu Apr 26 13:36:34 2001 From: txkjohn at hotmail.com (John Humphrey) Date: Tue Dec 2 02:34:28 2003 Subject: Whose Running Samba as a PDC Message-ID: Again, permit me to thank everyone for the tremendous support given on this mailing list. With your help, and a lot of outside study, I've been able to learn the basic elements behind running a SAMBA powered domain. I work a for a Texas Public School system and have made a recommendation to install a SAMBA PDC at one of our faciliites. My superiors want a list of some other professional institutions that run SAMBA in a production enviroment. If you guys know of some, please respond with the names.... TO THE SAMBA TEAM - THANKS FOR OVERSEEING SUCH A GREAT PROJECT. JOB WELL DONE. _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com From don_mccall at hp.com Thu Apr 26 13:38:24 2001 From: don_mccall at hp.com (MCCALL,DON (HP-USA,ex1)) Date: Tue Dec 2 02:34:28 2003 Subject: 2 Samba Servers on same subnet Message-ID: <079FD72E42C9D311B854009027650E6F040509BC@xatl02.atl.hp.com> Hello Steven, This should be ok - since you are using two different workgroups for the samba servers, then each samba server can be the preferred master for it's respective workgroup, and shouldn't contend with each other. Your clients WILL notice a difference, however, as since they are on the same subnet, the browse masters for the two workgroups will exchange browse list information; that means, essentially that when your pc's go into their network neighborhood, they would then see two 'domains' and could click on either one, and see the machines in that 'domain'. I don't think this should be a problem for you. As for wins support, I suspect you would want to continue to have only one of the samba servers provide wins support for your clients, as samba is not currently able to replicate wins info between two wins servers. Your clients in the old workgroup should not 'run afoul' of the new pdc, since logon requests, etc are handled in a domain specific manner (ie, logon requests look for a logon server only in the DOMAIN that the client pc is a part of, and so a pdc from a different domain would not respond...) Good luck, Don -----Original Message----- From: Steven Law [mailto:steve@maths.ed.ac.uk] Sent: Thursday, April 26, 2001 6:24 AM To: samba-ntdom@lists.samba.org Subject: 2 Samba Servers on same subnet Hello everyone, this is my first post to the ntdom list as I'm heading down the Domain trail .... I already have a 2.0.7 server on my subnet and want to keep that running for the time being. It is setup as a workgroup server and doesn't use encryption. I've set the os level to 34, it's the preferred master and uses wins support. Now I want to setup a new 2.2.0 samba server on my network to deal with the win2k clients that will come online shortly. It is going to be a PDC. My question is this .... even though the 2nd server will have a different workgroup name and will use domains, will there be any interference between the two ? I presume I should not have two preferred masters or two wins supports ? Does the domain based server have to be the preferred master and have wins support or can I just rely on the other server to do that for the time being. If my win9x clients are using workgroups only, will they stay clear of the developing 2nd server (which may well be up and down a bit to start with) ? Regards Steve Law -- Computing Officer Department of Mathematics and Statistics, Edinburgh University. Phone: 0131 650 5037 , Email: steve@maths.ed.ac.uk Home Page: http://www.maths.ed.ac.uk/~steve From thos at esat.com Thu Apr 26 13:38:43 2001 From: thos at esat.com (Tom Horan) Date: Tue Dec 2 02:34:28 2003 Subject: mapping user account for NT and w2k Message-ID: <4AAE17B78CD3D411BF5700508B65645F4D7240@gcqsexc2.dublin.esat.ie> In NT you can only map to a sharename - \\server\share you cannot map to a sub-directory - \\server\share\subdir. You should be trying to share all the user account seperately so you can just map \\server\username Thanks, Tom -----Original Message----- From: bernie doyle [mailto:bernie@red-post.co.uk] Sent: 26 April 2001 14:14 To: samba-ntdom@lists.samba.org Subject: mapping user account for NT and w2k Hi I am running the 2.2a3 as a PDC on linux. I have machine login in fine, but have a little bit of weirdness someone may be able to clear up. I am mapping user home directories to a drive letter (S:) when a user logs in. \\severname\sharename\%U. On a Win2k machine when I access S:\ is see the contents of the users home directory (correct). On a WinNT machine when I access S:\ i see a list of all the users home directories ie: the %U value does not seem to get mapped under WinNT. Has anyone come across this problem. many thanks in advance bernie doyle ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. http://www.esatbusiness.com ********************************************************************** From thos at esat.com Thu Apr 26 13:41:26 2001 From: thos at esat.com (Tom Horan) Date: Tue Dec 2 02:34:28 2003 Subject: Dots ('.') in usernames Message-ID: <4AAE17B78CD3D411BF5700508B65645F4D7241@gcqsexc2.dublin.esat.ie> Does the account contain a dot or just begin with a dot ?? Remember a file beginning with a . in unix is a hidden file. -----Original Message----- From: Periklis Charchalakis [mailto:P.Charchalakis@sussex.ac.uk] Sent: 26 April 2001 00:28 To: samba-ntdom@lists.samba.org Subject: Dots ('.') in usernames Has anybody used samba 2.2 with usernames that contain a dot ('.')? The logon works fine but the home share doesn't. Users with no dot work fine too.. Even if I make the home share browsable it fails when the user connected contains a dot, while non-domain users can see the share as they get the "root" username. In the logs all the accesses seem to contain the '.' properly, and there is no indication of "not found" directories or any other errors. From the NT side I get "access denied" and error type 5 when I try to mount the home manually with net. Finally if I set the "path" of the home share static to the home of one of the users with a dot then the share is accessible. Thus I suspect there is a problem in the substitution of the %u/%U/%S somewhere. I use samba 2.2.0 (downloaded and compiled 2 dayes ago), 2.2.18 kernel, intel arch, glibc2.2.2, gcc 2.95.3, all workstations are NT4 with sp5. ~regards P.C. -- FA EA F0 FF 00 F0 ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. http://www.esatbusiness.com ********************************************************************** From ad at ordix.de Thu Apr 26 13:50:42 2001 From: ad at ordix.de (Andre Dirr) Date: Tue Dec 2 02:34:28 2003 Subject: WARNING: you need to rerun autoconf on making samba_2.2.0 Message-ID: <3AE827B2.594BC024@ordix.de> hi all, i try "make" on red_hat_6.2 with samba_2.2.0 and always get "WARNING: you need to rerun autoconf" at the beginning of the make-process. the making don?t stop but the warning makes me a little bit confused. any hints for me? thank you, andy From kellermg at potsdam.edu Thu Apr 26 13:52:51 2001 From: kellermg at potsdam.edu (Matthew Keller) Date: Tue Dec 2 02:34:28 2003 Subject: %U and %u functionality change in 2.2?? In-Reply-To: <3AE81033.1CF7E9E0@kulak.ac.be> References: <988210106.20240.7.camel@comp10574.potsdam.edu> <3AE6FB0A.5C27AEA8@valinux.com> <3AE81033.1CF7E9E0@kulak.ac.be> Message-ID: <988293172.27289.5.camel@comp10574.potsdam.edu> On 26 Apr 2001 14:10:27 +0200, Brecht Samyn wrote: > Maybe someone noticed it before, but some shares with %U in the name don't work either (even after applying Jeremy's > patch to samba 2.2.0). In my environment (w/ J's patch), shares still had to to use %u instead of %U - Other places (such as include worked fine with %U. -- Matthew Keller Enterprise System Analyst Computing & Technology Services Information Services Division State University of NY at Potsdam Potsdam, NY USA http://mattwork.potsdam.edu/ From don_mccall at hp.com Thu Apr 26 14:27:48 2001 From: don_mccall at hp.com (MCCALL,DON (HP-USA,ex1)) Date: Tue Dec 2 02:34:28 2003 Subject: Accessing NT shared directory from win98 - Samba Message-ID: <079FD72E42C9D311B854009027650E6F040509BE@xatl02.atl.hp.com> Hi Roy, Some more information needed: If I read you right, you are trying to access a share on an NT workstation from a win98 pc. You mention they are both in the SAMBA domain - does this mean to you that the win98 pc is set up to login to the samba domain, and the NT Workstation actually has a machine account on the Samba PDC for the domain? If this IS the case, do the following test: have the win98 pc that is having the problem attach to a share on the SAMBA server that is the pdc for the domain. use smbstatus to verify that the win98 pc is actually attaching AS the user you expect, and not as some guest user. Then, go into user manager gui on the NT workstation, and click on 'policies', 'audit', and check 'audit these events' and check success and failure for "Logon and Logoff". Then try accessing the share again from the pc. Once you have failed, use event viewer gui on the Nt workstation, and view the audit log, to see WHO you tried to log in as, and what failed. It's possible that the user you find mentioned in this audit log is a 'local' user (see user manager again) and that machine has a password expiration for that user, or all users in general... Just some things to try, Hope they help, Don -----Original Message----- From: Roy Thomas [mailto:royt@subexgroup.com] Sent: Thursday, April 26, 2001 9:53 AM To: 'samba-ntdom@lists.samba.org' Subject: FW: Accessing NT shared directory from win98 - Samba Hi would be great if someone could help me on the win98, winNT directory share problem mentioned below Thanks Roy -----Original Message----- From: Roy Thomas [SMTP:royt@subexgroup.com] Sent: Wednesday, April 25, 2001 5:42 PM To: 'samba-ntdom@lists.samba.org' Subject: Accessing NT shared directory from win98 - Samba Hi all I am facing problems when a workstation with win98 is accessing a shared folder from WinNT workstation on Samba Domain. It gives me following error message " \\dir not accessible The User account has expired " Would be great if someone could guide me on this. Thanks Roy From aureq at yahoo.com Thu Apr 26 14:36:23 2001 From: aureq at yahoo.com (=?iso-8859-1?q?aurelien=20requiem?=) Date: Tue Dec 2 02:34:28 2003 Subject: Samba 2.2 and Guest computers in Domain In-Reply-To: Message-ID: <20010426143623.6797.qmail@web1102.mail.yahoo.com> Hi all, I've installed Samba 2.2.0 as PDC for Win2K. I have added other machines in the domain and it works perfectly. I have other machines that could connect to my lan. I don't want to add them is the domain ! I just want, they could access to the printer ? I have set the printer to public, but i have an "access denied". Does anyone could help me ? Thanks ===== Aurelien Requiem Visit The ScsiReset HomePage ! http://aureq.free.fr/ May your dreams come true ! ___________________________________________________________ Do You Yahoo!? -- Pour faire vos courses sur le Net, Yahoo! Shopping : http://fr.shopping.yahoo.com From gcarter at valinux.com Thu Apr 26 15:31:45 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:28 2003 Subject: WARNING: you need to rerun autoconf on making samba_2.2.0 In-Reply-To: <3AE827B2.594BC024@ordix.de> Message-ID: On Thu, 26 Apr 2001, Andre Dirr wrote: > hi all, i try "make" on red_hat_6.2 with samba_2.2.0 and always get > "WARNING: you need to rerun autoconf" at the beginning of the > make-process. the making don?t stop but the warning makes me a little > bit confused. any hints for me? thank you, andy Our goof. run autoconf first. Only needs to eb done once. Fixed in CVS. > > ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From root at ifisiol.unam.mx Thu Apr 26 16:15:28 2001 From: root at ifisiol.unam.mx (root) Date: Tue Dec 2 02:34:28 2003 Subject: Whose Running Samba as a PDC In-Reply-To: Message-ID: Hi John: We have been running samba as a PDC for two LAN's with more than 300 Win9x clients for about for years now. We have not had any big problem related to samba. We had Netware and then Windows NT before and had much more problems with the servers then than now. We are a research and educational institution with more than 300 students, about 150 academics and more than 50 users in the administrative area. Our institution's name is Instituto de Fisiologia Celular and we are part of the National University of Mexico. Hope this helps. Cheers... Ana Maria Escalante Ana Maria Escalante Computer Department Instituto de Fisiologia Celular Universidad Nacional Autonoma de Mexico phone: (525) 6225730 fax: (525) 6162282 e-mail: aescalan@ifisiol.unam.mx On Thu, 26 Apr 2001, John Humphrey wrote: > Again, permit me to thank everyone for the tremendous support given on this > mailing list. With your help, and a lot of outside study, I've been able to > learn the basic elements behind running a SAMBA powered domain. I work a for > a Texas Public School system and have made a recommendation to install a > SAMBA PDC at one of our faciliites. My superiors want a list of some other > professional institutions that run SAMBA in a production enviroment. If you > guys know of some, please respond with the names.... TO THE SAMBA TEAM - > THANKS FOR OVERSEEING SUCH A GREAT PROJECT. JOB WELL DONE. > _________________________________________________________________ > Get your FREE download of MSN Explorer at http://explorer.msn.com > > From Franz.Sirl-kernel at lauterbach.com Thu Apr 26 16:51:50 2001 From: Franz.Sirl-kernel at lauterbach.com (Franz Sirl) Date: Tue Dec 2 02:34:28 2003 Subject: WARNING: you need to rerun autoconf on making samba_2.2.0 In-Reply-To: References: <3AE827B2.594BC024@ordix.de> Message-ID: <5.1.0.14.2.20010426184946.035c3c78@mail.lauterbach.com> At 17:31 26.04.2001, Gerald Carter wrote: >On Thu, 26 Apr 2001, Andre Dirr wrote: > > > hi all, i try "make" on red_hat_6.2 with samba_2.2.0 and always get > > "WARNING: you need to rerun autoconf" at the beginning of the > > make-process. the making don?t stop but the warning makes me a little > > bit confused. any hints for me? thank you, andy > >Our goof. run autoconf first. Only needs to eb done once. Fixed in CVS. Reminds me, config.guess/config.sub are _way_ out of date, please consider upgrading to the latest official version from . Franz. From linux at fenix.uam.mx Thu Apr 26 18:50:29 2001 From: linux at fenix.uam.mx (Lista linux) Date: Tue Dec 2 02:34:28 2003 Subject: group map from w2k to SMB PDC 2.2.0 Message-ID: hi All, i have a samba user USER1, and it logs ok at the samba domain, it has no account at the w2k machine, what level does it gets? how do i assign a w2k group to this user? i've been reading at smb.conf (today's CVS) about domain groups, domain admin group, domain guest group, etc. but i can't get any help. I also read the .PDF document. i read a in a previous mail on this list that samba 2.2. recognices the /etc/group file, is this correct? how can i declare w2k groups: Administrators, user, and power user at the samba PDC? regards. romy. From P.Charchalakis at sussex.ac.uk Thu Apr 26 19:42:37 2001 From: P.Charchalakis at sussex.ac.uk (Periklis Charchalakis) Date: Tue Dec 2 02:34:28 2003 Subject: Dots ('.') in usernames In-Reply-To: <4AAE17B78CD3D411BF5700508B65645F4D7241@gcqsexc2.dublin.esat.ie> Message-ID: They contain a dot. I 'patched' the problem by seting the logon home to \\%N\homes instead of \\%N\%U. Works fine this way. Everything else seems to work (policies, groups, profiles, passwd synch, etc) but I have problems with the trusted domains. I can _trust_ the samba domain to an NTsrv one but I can't make the NTsrv domain to be trusted by the samba one. When I put the samba domain to the NTsrv as one that is trusted by, the samba looks for a machine entry to the smbpasswd with the name of the domain. I add this entry and when I repeat the procedure and also put the proper password then the NTsrv says that the trust can't be verified etc etc. Samba doesn't complain. But still the samba domain doesn't trust the NTsrv one. PC -- FA EA F0 FF 00 F0 On Thu, 26 Apr 2001, Tom Horan wrote: > Does the account contain a dot or just begin with a dot ?? > > Remember a file beginning with a . in unix is a hidden file. > > ********************************************************************** > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they > are addressed. If you have received this email in error please notify > the system manager. > > http://www.esatbusiness.com > > ********************************************************************** > > From gcarter at valinux.com Thu Apr 26 19:49:40 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:28 2003 Subject: UPDATE: latest colleciton of HOWTO's In-Reply-To: <3AE6FA9D.A6F57A92@microdisplay.com>; from bferrell@microdisplay.com on Wed, Apr 25, 2001 at 11:26:05 -0500 References: <3AE6FA9D.A6F57A92@microdisplay.com> Message-ID: <20010426144940.A27942@queso.plainjoe.org> On Wed, 25 Apr 2001 11:26:05 Bruce Ferrell wrote: > Jerry, > > Seems to be a couple of minor bugs in the document > on printing... smb.conf.5.html seems to be missing from the > webserver I'm looking at. Fixed and updated. > BTW, there was mention on the list of an addprinter > script that you wrote. Where might that be available? I'm trying to track some down. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From ralf at owlnet.rice.edu Thu Apr 26 22:05:16 2001 From: ralf at owlnet.rice.edu (Alfredo Ramos) Date: Tue Dec 2 02:34:28 2003 Subject: Whose Running Samba as a PDC In-Reply-To: Message-ID: Hi John; We are running samba as a PDC here at Rice University. And it rocks!!!! We have a user base of about 4500 users that beat on the server relentlessly and samba doesn't even blink. We're planning to upgrade to samba 2.2.0 as soon as the current semester ends. Great work samba team! Al. --------------------------------------------------------------------------------- | Alfredo Ramos This space available for rent. | Educational Technology Get your product moving. Advertise here! | Rice University. | Email: ralf@is.rice.edu --------------------------------------------------------------------------------- On Thu, 26 Apr 2001, John Humphrey wrote: > Again, permit me to thank everyone for the tremendous support given on this > mailing list. With your help, and a lot of outside study, I've been able to > learn the basic elements behind running a SAMBA powered domain. I work a for > a Texas Public School system and have made a recommendation to install a > SAMBA PDC at one of our faciliites. My superiors want a list of some other > professional institutions that run SAMBA in a production enviroment. If you > guys know of some, please respond with the names.... TO THE SAMBA TEAM - > THANKS FOR OVERSEEING SUCH A GREAT PROJECT. JOB WELL DONE. > _________________________________________________________________ > Get your FREE download of MSN Explorer at http://explorer.msn.com > > > From ajudge at telocity.com Thu Apr 26 23:23:25 2001 From: ajudge at telocity.com (Andrew Judge) Date: Tue Dec 2 02:34:28 2003 Subject: Implementing SAMBA into NT and Novell question Message-ID: I have a question for the group. I would like to use SAMBA on a network currently using Novell and two NT servers acting as PDC and BDC running MS SQL and Exchange respectively. The clients are win9x and NT4 workstation (about 40 clients). The use would be for the following: 1. migrate exchange to postfix (POP3), using SAMBA to store Outlook pst files in users home directory for backup reasons. 2. run the SAMBA server for the majority of file serving I would probably use SAMBA 2.0.7 although 2.2 is probably better to play with NT and I believe we will migrate to the PDC for authentication with GSNW for Novell access. Are there any better suggestions? Is 2.2 the preferable solution? I'm a little concerned with how SAMBA interacts as a member server in an NT domain. Does anyone have anything similar running and how would you go about this? Best regards, Andrew Judge From kourosh at loop.com Thu Apr 26 23:28:24 2001 From: kourosh at loop.com (Kourosh Ghassemieh) Date: Tue Dec 2 02:34:28 2003 Subject: Whose Running Samba as a PDC In-Reply-To: References: Message-ID: <5.0.2.1.0.20010426162734.00b15650@pop.loop.com> 4500 hundred is pretty good. What type of hardwar? How many servers? Regards. At 05:05 PM 4/26/2001 -0500, you wrote: >Hi John; > >We are running samba as a PDC here at Rice University. And it rocks!!!! > >We have a user base of about 4500 users that beat on the server >relentlessly and samba doesn't even blink. > >We're planning to upgrade to samba 2.2.0 as soon as the current semester >ends. > >Great work samba team! > >Al. >--------------------------------------------------------------------------------- > | Alfredo Ramos >This space available for rent. | Educational Technology >Get your product moving. Advertise here! | Rice University. > | Email: ralf@is.rice.edu >--------------------------------------------------------------------------------- - ------------------------------------------------------------------------ Kourosh Ghassemieh MindWare Information Systems & Technologies 9255 Sunset Blvd, Penthouse West Hollywood CA 90069 (310) 729-1784 kourosh@loop.com ++++Networking Solutions for the Small Business++++ From ad at ordix.de Fri Apr 27 07:05:25 2001 From: ad at ordix.de (Andre Dirr) Date: Tue Dec 2 02:34:28 2003 Subject: A possible virus References: Message-ID: <3AE91A35.85C25C91@ordix.de> hi all, i had the same error! it is no virus, but a bug in mcafee antivirus: it tries to unzip and check all files in the tarball, but the archive is big and so the mcafee gets a timeout! you can solve the problem by setting up the timeout for mcafee in the registry: search for HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\OnAccess Scanner\McShield\Configuration] and change this entry ScanArchiveTimeout"=dword:00000005(5) to ScanArchiveTimeout"=dword:00000040(64) this will help! andy/ORDIX AG dan_mcmanus@co.blm.gov wrote: > > Hello, > > I downloaded samba-latest.tar.gz from http://us1.samba.org/samba/ftp/ and > my anti-virus software said it was infected, but didn't clean it, so I > deleted it. I downloaded it onto a Windows NT machine. I don't know whether > it's my software freaking out or an actual problem with the file, but I > thought I should let you know. From malvezzi at unimo.it Fri Apr 27 08:30:01 2001 From: malvezzi at unimo.it (Francesco) Date: Tue Dec 2 02:34:28 2003 Subject: find_response_record: response packet id 176 received with no matching record. Message-ID: <3AE92E09.9A7046C8@unimo.it> I have a couple of problems about samba as PDC. I run version 2.2.0 on a linux RedHat 6.2 machine. Everything works fine, but my /var/log/samba/log.nmdb receives the following warning: [2001/04/27 10:25:41, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(239) find_response_record: response packet id 176 received with no matching record. I have such a warning each half an hour from win98 clients, and much more often from win200 clients. What is wrong? Any hint? I have also a easier question. Everytime I logout from my win2000 clients, it warns me that it cannot update the common profile. What is about? Thank you for your help. If you need more details, just ask. Francesco From eirvine at tpgi.com.au Fri Apr 27 08:50:00 2001 From: eirvine at tpgi.com.au (eirvine) Date: Tue Dec 2 02:34:28 2003 Subject: Whose Running Samba as a PDC References: Message-ID: <3AE932B8.DF1BA3C3@tpgi.com.au> Hi, John Humphrey wrote: > > Again, permit me to thank everyone for the tremendous support given on this > mailing list. With your help, and a lot of outside study, I've been able to > learn the basic elements behind running a SAMBA powered domain. I work a for > a Texas Public School system and have made a recommendation to install a > SAMBA PDC at one of our faciliites. This is a page I put up a few years ago. It covers one of the largest high schools in our country.... http://www1.tpg.com.au/users/eirvine/freebsd/hermione.html Also by me, (but a little clinical) http://www1.tpg.com.au/users/eirvine/freebsdandlinux.pdf You might also want to have a look here: http://www.riverdale.k12.or.us/linux/ And here: http://www.stuy.edu Basically there is nothing unusual about what you want to do. Unusual for a school, maybe, but not a university. I calculated my uptime for the last three years - it worked out better than 99.99%. Eddie. From surajrai at yahoo.com Fri Apr 27 11:44:39 2001 From: surajrai at yahoo.com (Suraj K. Rai) Date: Tue Dec 2 02:34:28 2003 Subject: Problem Adding Domain User to Local Admin Group Message-ID: <3AE95BA7.9090203@yahoo.com> I also have the same problem regarding Adding Domain User.... I am running Win2K with RH 7.0 S.r. PeRcY YuEn percy@py.dhs.org Sun, 22 Apr 2001 11:11:04 +0800 (HKT) Previous message: Problem Adding Domain User to Local Admin Group Next message: Samba 2.2.0 doesn not work! Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] -------------------------------------------------------------------------------- Hi all, I have forgotten to mention that I am using W2K. Regards, Percy On Sun, 22 Apr 2001, PeRcY YuEn wrote: > Hi all, > > When I upgraded from samba220a3 to samba220, I've found that when adding > a domain user to the local admin group, something strange happened. > > For example, the domain is called DOM and is served by Samba on a > Solaris 2.6 machine named SMB. When I added DOM\admin to the local > administrators group, and press apply in the dialog, DOM\admin will be > changed to SMB\admin automatically. Needless to say, the user admin in DOM > won't get admin rights. This won't happen in alpha3. > > Any idea why this happens? > > Thanks. > > Regards, > Percy > > From ralf at owlnet.rice.edu Fri Apr 27 14:32:37 2001 From: ralf at owlnet.rice.edu (Alfredo Ramos) Date: Tue Dec 2 02:34:29 2003 Subject: Whose Running Samba as a PDC In-Reply-To: <5.0.2.1.0.20010426162734.00b15650@pop.loop.com> Message-ID: We have just one samba server. It is a Sun Ultra 250 running Solaris 2.6; 1 G of memory. It provides authentication and file and print sharing. Regards; Al. --------------------------------------------------------------------------------- | Alfredo Ramos This space available for rent. | Educational Technology Get your product moving. Advertise here! | Rice University. | Email: ralf@is.rice.edu --------------------------------------------------------------------------------- On Thu, 26 Apr 2001, Kourosh Ghassemieh wrote: > > 4500 hundred is pretty good. What type of hardwar? How many > servers? > > Regards. > > At 05:05 PM 4/26/2001 -0500, you wrote: > >Hi John; > > > >We are running samba as a PDC here at Rice University. And it rocks!!!! > > > >We have a user base of about 4500 users that beat on the server > >relentlessly and samba doesn't even blink. > > > >We're planning to upgrade to samba 2.2.0 as soon as the current semester > >ends. > > > >Great work samba team! > > > >Al. > >--------------------------------------------------------------------------------- > > | Alfredo Ramos > >This space available for rent. | Educational Technology > >Get your product moving. Advertise here! | Rice University. > > | Email: ralf@is.rice.edu > >--------------------------------------------------------------------------------- > > - > ------------------------------------------------------------------------ > Kourosh Ghassemieh > MindWare Information Systems & Technologies > 9255 Sunset Blvd, Penthouse > West Hollywood CA 90069 > (310) 729-1784 > kourosh@loop.com > > ++++Networking Solutions for the Small Business++++ > > > From memphis_ms at gmx.net Fri Apr 27 14:54:41 2001 From: memphis_ms at gmx.net (Raoul Schroeder) Date: Tue Dec 2 02:34:29 2003 Subject: A possible virus References: <3AE91A35.85C25C91@ordix.de> Message-ID: <3AE98831.29D7C021@gmx.net> Something similar happens when you use Norton Antivirus. If you don't have permission to read a file on a Samba Server, it complains that the file is infected. Very buggy indeed. Bad Norton... From rodolphe.kapouyan at free.fr Fri Apr 27 15:10:26 2001 From: rodolphe.kapouyan at free.fr (Rodolphe Kapouyan) Date: Tue Dec 2 02:34:29 2003 Subject: Whose Running Samba as a PDC References: Message-ID: <00e101c0cf2c$331775a0$3266a8c0@cref.dyndns.org> Hi , I'm " netwotk manager " and multimedia developper in my office , (not a school student but a school for employees who want to graduate ) We use a Linux box with Samba 2.0.7 ( but in a near future 2.2.0 ) as PDC for authentication , home directory and group directory and user list for 95 /98 and ... printing sharing just for me and this host running mysql postgresql server , internet acess sharing , web for the local network We are about 20 users ... Rodolphe Kapouyan ----- Original Message ----- From: "John Humphrey" To: Sent: Thursday, April 26, 2001 3:36 PM Subject: Whose Running Samba as a PDC > Again, permit me to thank everyone for the tremendous support given on this > mailing list. With your help, and a lot of outside study, I've been able to > learn the basic elements behind running a SAMBA powered domain. I work a for > a Texas Public School system and have made a recommendation to install a > SAMBA PDC at one of our faciliites. My superiors want a list of some other > professional institutions that run SAMBA in a production enviroment. If you > guys know of some, please respond with the names.... TO THE SAMBA TEAM - > THANKS FOR OVERSEEING SUCH A GREAT PROJECT. JOB WELL DONE. > _________________________________________________________________ > Get your FREE download of MSN Explorer at http://explorer.msn.com > > > From don_mccall at hp.com Fri Apr 27 15:21:45 2001 From: don_mccall at hp.com (MCCALL,DON (HP-USA,ex1)) Date: Tue Dec 2 02:34:29 2003 Subject: find_response_record: response packet id 176 received with no matching record. Message-ID: <079FD72E42C9D311B854009027650E6F040509C6@xatl02.atl.hp.com> Hi Francesco, I am not too familiar with this part of the code, but it APPEARS that this is telling you that nmbd received a packet marked as a response packet, but when nmbd searched its known subnet db's for a record, in order to route this response, there was no match... A couple of things that would help nail this down a bit better would be your smb.conf file (just the [global] part), with ipaddresses and subnets NOT xxx'ed out, and the ipaddress and subnet mask being used by one or more of the clients that are generating these messages; as a wild guess, I would suspect a network configuration issue with subnet masks,multiple nics, or something like this... You might also want to bump your log level up to 10 in the smb.conf file (BRIEFLY) in order to catch what type of packet is comming in that is generating this error. It would help narrow down what might be wrong. Good luck, Don -----Original Message----- From: Francesco [mailto:malvezzi@unimo.it] Sent: Friday, April 27, 2001 4:30 AM To: samba-ntdom@lists.samba.org Subject: find_response_record: response packet id 176 received with no matching record. I have a couple of problems about samba as PDC. I run version 2.2.0 on a linux RedHat 6.2 machine. Everything works fine, but my /var/log/samba/log.nmdb receives the following warning: [2001/04/27 10:25:41, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(239) find_response_record: response packet id 176 received with no matching record. I have such a warning each half an hour from win98 clients, and much more often from win200 clients. What is wrong? Any hint? I have also a easier question. Everytime I logout from my win2000 clients, it warns me that it cannot update the common profile. What is about? Thank you for your help. If you need more details, just ask. Francesco From thudak at sistina.com Fri Apr 27 16:11:22 2001 From: thudak at sistina.com (Tom Hudak) Date: Tue Dec 2 02:34:29 2003 Subject: Password changing? Message-ID: <20010427111122.G16803@localhost> I've been monkeying with remote password changing for a bit now, and I can't seem to get win98 to even *try* to change or even do a check on it before it's denied and I get the "Unable to change password for Microsoft Networking because of the following error: Incorrect Password" I've setup the password chat a number of ways reflecting both /usr/bin/passwd's syntax, as well as the smbpasswd but I don't even see anything in the logs that looks remotely like an attempt to verify/check/change/look at the password and it's associated files. This is a winblows 98 machine Samba 2.2.0 PDC Log level 5 Any ideas would be great! Thanks, -- Thomas J. Hudak Systems Administrator Sistina Software Inc. - www.sistina.com Phone: 612.379.3951 Page: 612.318.1967 Fax: 612.379.3952 Key fingerprint = BEC6 3181 4C9B A7BB AF11 4717 6F85 B346 380D 523E -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 232 bytes Desc: not available Url : http://lists.samba.org/archive/samba-ntdom/attachments/20010427/86497b12/attachment.bin From thudak at sistina.com Fri Apr 27 16:18:40 2001 From: thudak at sistina.com (Tom Hudak) Date: Tue Dec 2 02:34:29 2003 Subject: Broken subscriber out there --> Fwd: Mail message not delivered Message-ID: <20010427111840.H16803@localhost> ----- Forwarded message from MAILER-DAEMON@colltech.com ----- From: MAILER-DAEMON@colltech.com Message-Id: <200104271612.LAA00965@mx1.colltech.com> Date: Fri, 27 Apr 2001 11:12:33 -0500 To: thudak@sistina.com Subject: Mail message not delivered Your message, titled: Password changing? that you sent to bfitch@colltech.com has not been delivered. The user at that address is no longer available. The following alias addresses are also no longer available. brandon@colltech.com fitch_brandon@colltech.com brandon_fitch@colltech.com Please update your address book Thank You ----- End forwarded message ----- I mailed about this once before, but I failed to include the message in that mail. To the list moderators, could you kindly remove this user from the mailing list as the address is obviously not valid and slowly filling my mbox with MAILER-DAEMON errors that are addressed directly to me. Thanks, -- Thomas J. Hudak Systems Administrator Sistina Software Inc. - www.sistina.com Phone: 612.379.3951 Page: 612.318.1967 Fax: 612.379.3952 Key fingerprint = BEC6 3181 4C9B A7BB AF11 4717 6F85 B346 380D 523E -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 232 bytes Desc: not available Url : http://lists.samba.org/archive/samba-ntdom/attachments/20010427/9ac2f295/attachment.bin From joe at bridgewater.edu Fri Apr 27 16:31:23 2001 From: joe at bridgewater.edu (Joe Meslovich) Date: Tue Dec 2 02:34:29 2003 Subject: Password changing? In-Reply-To: <20010427111122.G16803@localhost> Message-ID: Tom, Do you have the guest account option turned on in the smb.conf? I was having a similar problem and when I created a valid guest account password changing worked properly. I think this is because Samba 2.2.0 changes a password by first attaching to the $IPC share and then running the password change. But the behaviour is that you only attach to the $IPC share as the guest user. Hope it helps, Joe Meslovich On Fri, 27 Apr 2001, Tom Hudak wrote: > I've been monkeying with remote password changing for a bit now, and I can't > seem to get win98 to even *try* to change or even do a check on it before it's > denied and I get the "Unable to change password for Microsoft Networking > because of the following error: Incorrect Password" > > I've setup the password chat a number of ways reflecting both > /usr/bin/passwd's syntax, as well as the smbpasswd but I don't even see > anything in the logs that looks remotely like an attempt to > verify/check/change/look at the password and it's associated files. > > This is a winblows 98 machine > Samba 2.2.0 PDC > Log level 5 > > Any ideas would be great! > Thanks, > -- > Thomas J. Hudak > Systems Administrator > Sistina Software Inc. - www.sistina.com > Phone: 612.379.3951 > Page: 612.318.1967 > Fax: 612.379.3952 > Key fingerprint = BEC6 3181 4C9B A7BB AF11 4717 6F85 B346 380D 523E > > ---------------------------------------------------------------------------- Joe Meslovich joe@bridgewater.edu Associate Network/Systems Engineer College Box 499 Tel: (540) 828 - 5343 From jeremy at valinux.com Fri Apr 27 16:39:44 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:29 2003 Subject: %U and %u functionality change in 2.2?? References: <988210106.20240.7.camel@comp10574.potsdam.edu> <3AE6FB0A.5C27AEA8@valinux.com> <3AE81033.1CF7E9E0@kulak.ac.be> Message-ID: <3AE9A0D0.3B6D26D9@valinux.com> Brecht Samyn wrote: > > Maybe someone noticed it before, but some shares with %U in the name don't work either (even after applying Jeremy's > patch to samba 2.2.0). > > e.g. > [%u] and [tlc-%U] don't work (I get %u and tlc-%U in the list of available shares) > [%U] gets substituted correctly. > > Everything else we use seems to work after upgrading from 2.0.7 to 2.2.0 . Thanks for the great work! I just tested this with the latest CVS (with my patch). I added a share in the smb.conf, [user-%U] comment = user %U path = /tmp And I see the share name and comment name with my current logged in user name substituted. So I can't reproduce your problem here. Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From linux at fenix.uam.mx Fri Apr 27 18:24:53 2001 From: linux at fenix.uam.mx (Lista linux) Date: Tue Dec 2 02:34:29 2003 Subject: w2k complains about updating roaming profiles at log off. Message-ID: Hi list, i have a samba 2.2.0 PDC working fine, but i have a pair of questions: 1. when a user logs off fromthe w2k ws, it complains about not being able to update the profile. I use create mask = 711 AND DIRECTORY MASK = 711 and it does not work, i also tried 0700/0600 as it says in the .pdf document. This problem persists when the NTUSER file has the .DAT extension and desappears if i make this a mandatory profile (.MAN) 2. when a user log in the domains, the whole process takes about 80 seconds, is this right? I have 14 WS under two subnets connected under two nics to the samba PDC. If i test all the 14 WS the time goes up to 120 seconds. the samba is 2.2.0 under redhat 6.2 (2.2.16-3), here is my smb.conf [global] workgroup = ALEXANDRIA server string = ALEXANDRIA samba %v bind interfaces only = Yes interfaces = 192.168.0.50/24 192.168.1.50/24 127.0.0.1 hosts allow = 192.168.0. 192.168.1. 127. security = user status = yes encrypt passwords = yes local master = yes os level = 65 domain master = yes preferred master = yes domain logons = yes wins support = yes announce as = NT announce version = 4.2 share modes = yes keepalive = 60 deadtime = 10 socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 log file = /usr/local/samba/var/log.%m max log size = 0 logon path = \\%N\profiles\%U preserve case = yes short preserve case = yes case sensitive = no client code page = 850 dos filetimes = true followsymlinks = true hide dot files = yes [homes] comment = Home Directories at JEFE Server browseable = no writable = yes [netlogon] comment = Network Logon Service path = /home/samba_admin/netlogon public = no guest ok = no writable = no browseable = no [profiles] path = /home/samba_admin/profiles/%m writable = yes browseable = no create mask = 711 directory mask = 711 map hidden = yes map system = yes oplocks=true [images] path = /win/images public = no valid users = admin writable = yes browseable = no create mask = 775 directory mask = 775 map archive = yes map hidden = yes map system = yes printable = no [cdrom] path = /mnt/cdrom public = no valid users = admin browseable = no writable = no printable = no [printers] comment = All Printers path = /var/spool/samba browseable = no # Set public = yes to allow user 'guest account' to print guest ok = no writable = no printable = yes regards, romy From gcarter at valinux.com Fri Apr 27 19:21:37 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:29 2003 Subject: find_response_record: response packet id 176 received with no matching record. In-Reply-To: <3AE92E09.9A7046C8@unimo.it>; from malvezzi@unimo.it on Fri, Apr 27, 2001 at 03:30:01 -0500 References: <3AE92E09.9A7046C8@unimo.it> Message-ID: <20010427142137.E6719@pogo.plainjoe.org> On Fri, 27 Apr 2001 03:30:01 Francesco wrote: > > I have also a easier question. Everytime I logout from > my win2000 clients, it warns me that it cannot update > the common profile. What is about? A possible bug that we are trying to track down. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From gcarter at valinux.com Fri Apr 27 19:35:19 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:29 2003 Subject: w2k complains about updating roaming profiles at log off. In-Reply-To: Message-ID: On Fri, 27 Apr 2001, Lista linux wrote: > Hi list, > > i have a samba 2.2.0 PDC working fine, but i have a pair of questions: > > 1. when a user logs off fromthe w2k ws, it complains about not being able > to update the profile. I use create mask = 711 AND DIRECTORY MASK = 711 > and it does not work, i also tried 0700/0600 as it says in the .pdf > document. This problem persists when the NTUSER file has the .DAT > extension and desappears if i make this a mandatory profile (.MAN) Looks like our bug. We're working on it. Cheers, jerry From thrash at uzix.com Fri Apr 27 22:09:35 2001 From: thrash at uzix.com (Steve Thrasher) Date: Tue Dec 2 02:34:29 2003 Subject: Windoze 2K and Samba 2.2 PDC Message-ID: <000b01c0cf66$bf28a660$0300a8c0@uzix.com> I'm running RH 7.1 and Samba 2.2.0-20010417 as the PDC. I have it set up and the Windoze 98 boxes login fine. The W2K box just errors with one of two error messages: The procedure number is out of range or The credentials supplied conflict with an existing set of credentials. I have followed the instructions in the Using Samba manual as well as the instruction at: http://bioserve.latrobe.edu.au/samba/samba-pdc-howto.html i.e.... Windows 2000 1) Logon to the W2k machine as Administrator, go to the Control Panel and double click on Network and Dialup Connections. Pull down the Advanced menu and choose Network Identification. Press Properties . 2) Choose Domain and enter the domain name. Press 'OK'. 3) Now enter a user name and password for a Domain Admin (Who must be root until a pre-release bug is fixed) and press 'OK'. 4) Wait for the confirmation, reboot when prompted I'm definitely not a windoze expert so when it asks for the user name and password in step 3, it says to login as root. I login as root (on the linux PDC) and supply the password (which I entered into smbpasswd by smbpasswd -a root...and so on) I have also created the machine$ account and it is listed in the smbpasswd file as well (per the instructions). Am I missing something here? Please help. Thanks Steve From linux at fenix.uam.mx Fri Apr 27 21:39:35 2001 From: linux at fenix.uam.mx (Lista linux) Date: Tue Dec 2 02:34:29 2003 Subject: Windoze 2K and Samba 2.2 PDC In-Reply-To: <000b01c0cf66$bf28a660$0300a8c0@uzix.com> Message-ID: hi steve, i solved this problem by NOT including the machine$ account in the smbpasswd before the first login. then i logged the machine onto the domain and the account in the smbpasswd was creadted succesfully. other reason may be that you have some shared resource mapped before you try to logon into the domain. disconnect that share and try again. romy. On Fri, 27 Apr 2001, Steve Thrasher wrote: > I'm running RH 7.1 and Samba 2.2.0-20010417 as the PDC. > > I have it set up and the Windoze 98 boxes login fine. The W2K box just > errors with one of two error messages: > > The procedure number is out of range > or > The credentials supplied conflict with an existing set of credentials. > > I have followed the instructions in the Using Samba manual as well as the > instruction at: > > http://bioserve.latrobe.edu.au/samba/samba-pdc-howto.html > > i.e.... > Windows 2000 > > 1) Logon to the W2k machine as Administrator, go to the Control Panel and > double click on Network and Dialup Connections. > Pull down the Advanced menu and choose Network Identification. Press > Properties . > 2) Choose Domain and enter the domain name. Press 'OK'. > 3) Now enter a user name and password for a Domain Admin (Who must be root > until a pre-release bug is fixed) and press 'OK'. > 4) Wait for the confirmation, reboot when prompted > > I'm definitely not a windoze expert so when it asks for the user name and > password in step 3, it says to login as root. I login as root (on the linux > PDC) and supply the password (which I entered into smbpasswd by smbpasswd -a > root...and so on) I have also created the machine$ account and it is listed > in the smbpasswd file as well (per the instructions). Am I missing > something here? Please help. > > Thanks > > Steve > > -- Ing. Romy Perez Moreno e-mail: romy@fenix.uam.mx, romy@correo.azc.uam.mx http://fenix.uam.mx/romy tel: 5318 9067 / 5382-7157 From peter.milburn at sofcom.com.au Sat Apr 28 01:45:35 2001 From: peter.milburn at sofcom.com.au (peter.milburn@sofcom.com.au) Date: Tue Dec 2 02:34:29 2003 Subject: Linux Machines Joing Domain Message-ID: Hi all.. I have a slight problem, in that I can not get a linux machine to join a linux PDC This is the error when I try.. I have in the past be able to get a linux machine to join the domain. [root@moose lib]# ../bin/smbpasswd -m -j sofcom_melb cli_net_auth2: Error NT_STATUS_ACCESS_DENIED cli_nt_setup_creds: auth2 challenge failed modify_trust_password: unable to setup the PDC credentials to machine TUX.SOFCOM.COM.AU. Error was : NT_STATUS_ACCESS_DENIED. 2001/04/28 12:08:22 : change_trust_account_password: Failed to change password for domain SOFCOM_MELB. Unable to join domain SOFCOM_MELB. Thanks, -- Peter Milburn Systems Manager Software Communication Group Ltd peter.milburn@sofcom.com.au Ph: +613 9826 8300 Fax: +613 9826 8336 Level 16, 644 Chapel St South Yarra, Vic 3141 www.sofcom.com.au ******************************************** This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you must not disseminate, copy or take any action in reliance on it. If you have received this message in error, please notify Software Communication Group immediately. Any views expressed in this message are those of the individual sender except where the sender specifically states them to be the views of Software Communication Group. ******************************************** From pgoetz at math.utexas.edu Sat Apr 28 03:34:06 2001 From: pgoetz at math.utexas.edu (Patrick Goetz) Date: Tue Dec 2 02:34:29 2003 Subject: Windows 2000 and Printing: What were they thinking? Message-ID: Samba 2.2 has a lovely system for providing UNIX printers to Windows machines complete with downloadable printer drivers which works perfectly, at least for me. This system is, however, as far as I can tell, commpletely useless for Windows 2000 machines unless all the users on the network have administrative access to the workstations they're going to use. I've been working on setting up a Samba server to provide network services for a small number of W2K machines on our mostly linux network. After struggling with this and that, I finally have all the Samba PDC stuff working, including the network printers. As an administrative user, I can connect to any of the UNIX printers without having to worry about having the correct printer driver installed on the workstation, which is a big advantage. The problem is that for W2K, network printers set up by administrators do not automatically appear on the desktops of ordinary domain users. I thought the problem could be solved by having a default login script with stuff like start \\samba-server\printer1 start \\samba-server\printer2 etc. However, whenever I try to do this as an ordinary domain user I get a message saying "You do not have sufficient access to your machine to connect to the selected printer". I've tried changing the security options on the printer shares so that Everyone, Authenticated Users, Network, etc. have complete management access to the printers, but nothing seems to provide domain users with the correct permissions to mount printers. I even tried setting up the printers for root and then copying the root profile to Default User, but this didn't work, either. I just can't believe that it never occurred to Microsoft that someone would want to set up workstations used by various domain users where a common set of network printers should be available to every user who logs in on the machine. On the other hand, I've spent several hours pouring over the MS knowlege-base and various mailing lists such as microsoft.public.win2000.printing and this question is asked over and over again, with either no response or responses which don't, as far as I can tell, solve the problem. From s354199 at student.uq.edu.au Sat Apr 28 04:55:20 2001 From: s354199 at student.uq.edu.au (Elliot Mackenzie) Date: Tue Dec 2 02:34:29 2003 Subject: XP/Samba2.2 as PDC Message-ID: Has anyone had any experience running Samba 2.2 as a PDC for Windows XP machines? Just need to know ahead of running a test machine if it works/doesn't work as stock standard or if i need to make some tweaks for it to work (or, in fact, if it just doesn't work at all). The Samba 2.2 PDC we are running at the moment runs happily as a PDC for Win2k SP1 machines. Are there any other issues with such a setup currently? Regards, Elliot Mackenzie. From hilarycheng at usa.net Sat Apr 28 05:56:04 2001 From: hilarycheng at usa.net (Hilary Cheng) Date: Tue Dec 2 02:34:29 2003 Subject: Windoze 2K and Samba 2.2 PDC References: <000b01c0cf66$bf28a660$0300a8c0@uzix.com> Message-ID: <3AEA5B74.2EB87A82@usa.net> Hi, to fix ur problem, u can try these procedure : 1. assign a unix group to domain admin group to ur config and turn log level higher than 3. 2. assign a unix user that belongs to domain admin group in unix 3. change ur workgroup name in ur win2000 to other name if ur domain name is same as workgroup name 4. join to domain in win2000 with ur user that belongs to domain admin group 5. try to read samba log file, u may require to change the premission of the smpasswd file 6. if can't , try to reboot ur machine and join to domain again. I have faced the same problem of "The procedure number is out of range", "The credentials supplied conflict with an existing set of credentials.". I have tried to fix it according the above procedure. Regards, Hilary Steve Thrasher wrote: > I'm running RH 7.1 and Samba 2.2.0-20010417 as the PDC. > > I have it set up and the Windoze 98 boxes login fine. The W2K box just > errors with one of two error messages: > > The procedure number is out of range > or > The credentials supplied conflict with an existing set of credentials. > > I have followed the instructions in the Using Samba manual as well as the > instruction at: > > http://bioserve.latrobe.edu.au/samba/samba-pdc-howto.html > > i.e.... > Windows 2000 > > 1) Logon to the W2k machine as Administrator, go to the Control Panel and > double click on Network and Dialup Connections. > Pull down the Advanced menu and choose Network Identification. Press > Properties . > 2) Choose Domain and enter the domain name. Press 'OK'. > 3) Now enter a user name and password for a Domain Admin (Who must be root > until a pre-release bug is fixed) and press 'OK'. > 4) Wait for the confirmation, reboot when prompted > > I'm definitely not a windoze expert so when it asks for the user name and > password in step 3, it says to login as root. I login as root (on the linux > PDC) and supply the password (which I entered into smbpasswd by smbpasswd -a > root...and so on) I have also created the machine$ account and it is listed > in the smbpasswd file as well (per the instructions). Am I missing > something here? Please help. > > Thanks > > Steve From smakarov at nes.ru Sat Apr 28 06:59:30 2001 From: smakarov at nes.ru (Sergei Makarov) Date: Tue Dec 2 02:34:29 2003 Subject: Whose Running Samba as a PDC References: <00e101c0cf2c$331775a0$3266a8c0@cref.dyndns.org> Message-ID: <3AEA6A52.1F1D57C4@nes.ru> Hi, We're New Economic School, Moscow. http://www.nes.ru Run Samba 2.0.7 (under Slackware 7) for a year now. As PDC for WinNT at PC Labs for students, bunch of Win98 at offices , file/print sharing. All together 50 computers, 300 users. Plus mail, mySQL, httpd... sorry, you didn't ask about them :) Hardware. Two almost identical servers. Home build Intel Pentium 233, 128 RAM, UW SCSI software RAID(s). Highly recommend. MUCH less headache since we migrated from OS/2 Warp Server. (Would you believe we never been WinNT Server shop?) Best regards, Sergei Makarov, Head of Computer Dept. > ----- Original Message ----- > From: "John Humphrey" > To: > Sent: Thursday, April 26, 2001 3:36 PM > Subject: Whose Running Samba as a PDC > > > Again, permit me to thank everyone for the tremendous support given on > this > > mailing list. With your help, and a lot of outside study, I've been able > to > > learn the basic elements behind running a SAMBA powered domain. I work a > for > > a Texas Public School system and have made a recommendation to install a > > SAMBA PDC at one of our faciliites. My superiors want a list of some other > > professional institutions that run SAMBA in a production enviroment. If > you > > guys know of some, please respond with the names.... TO THE SAMBA TEAM - > > THANKS FOR OVERSEEING SUCH A GREAT PROJECT. JOB WELL DONE. > > _________________________________________________________________ > > Get your FREE download of MSN Explorer at http://explorer.msn.com > > > > > > From mark at axeon.screaming.net Sat Apr 28 09:15:12 2001 From: mark at axeon.screaming.net (mark@axeon.screaming.net) Date: Tue Dec 2 02:34:29 2003 Subject: XP/Samba2.2 as PDC References: Message-ID: <000d01c0cfc3$bb584330$6201a8c0@markw2000> Hi there. I couldnt get this to work. (I have since downgraded back to Win2K). Some error was showing up in the samba log - something bout authentication, cant remember what it was. Hope this helps Mark ----- Original Message ----- From: "Elliot Mackenzie" To: "SAMBA - NTDOM" Sent: Saturday, April 28, 2001 5:55 AM Subject: XP/Samba2.2 as PDC > Has anyone had any experience running Samba 2.2 as a PDC for Windows XP > machines? Just need to know ahead of running a test machine if it > works/doesn't work as stock standard or if i need to make some tweaks for it > to work (or, in fact, if it just doesn't work at all). > > The Samba 2.2 PDC we are running at the moment runs happily as a PDC for > Win2k SP1 machines. > > Are there any other issues with such a setup currently? > > Regards, > Elliot Mackenzie. > > From ejs at delfi.lt Sat Apr 28 11:39:27 2001 From: ejs at delfi.lt (Eugenijus =?ISO-8859-1?Q?Janus=28kevic=28ius?=) Date: Tue Dec 2 02:34:29 2003 Subject: Windows 2000 and Printing: What were they thinking? References: Message-ID: <3AEAABEF.90609@delfi.lt> Patrick Goetz wrote: > The problem is that for W2K, network printers set up by > administrators do not automatically appear on the desktops of ordinary > domain users. I thought the problem could be solved by having a default > login script with stuff like > > start \\samba-server\printer1 > start \\samba-server\printer2 > etc. hm, try `net use \\samba-server\printer` then > However, whenever I try to do this as an ordinary domain user I get a > message saying > > "You do not have sufficient access to your machine to > connect to the selected printer". What about access rights on win2k machine? Maybe user can't get list of locally available printer drivers and tries to download them for local install? Check permissions for %windir%\system32\spool and below (it's true for NT. Check the correct location for Win2k) > I've tried changing the security options on the printer shares so that > Everyone, Authenticated Users, Network, etc. have complete management > access to the printers, but nothing seems to provide domain users with the > correct permissions to mount printers. I even tried setting up the > printers for root and then copying the root profile to Default User, but > this didn't work, either. > > I just can't believe that it never occurred to Microsoft that someone > would want to set up workstations used by various domain users where a > common set of network printers should be available to every user who logs > in on the machine. On the other hand, I've spent several hours pouring > over the MS knowlege-base and various mailing lists such as > microsoft.public.win2000.printing and this question is asked over and over > again, with either no response or responses which don't, as far as I can > tell, solve the problem. As it is on NT 4.0, once logged in as administrator you must set up printer drivers for intranet printers. At this stage drivers are installed locally for every printer you set up. When a user log is, (s)he initially gets empty list of printers, but (s)he can add any intranet printer, which has its drivers installed locally without any problems. I don't' believe this functionality has ben changed for Win2k. I think you should check access rights to printer drivers first -- Augis In a world without walls and fences, who needs windows and gates? (SUN) From B.Sutton at odey.co.uk Sat Apr 28 14:18:45 2001 From: B.Sutton at odey.co.uk (Blair Sutton/Odey) Date: Tue Dec 2 02:34:29 2003 Subject: Samba 2.2 PDC and W2K logon - remote procedure call failed Message-ID: I have been experiencing problems with W2K logons to a Samba 2.2 PDC. Firstly I should point out that I have successfully been able to get Win95 and NT4 workstations to logon correctly to Samba 2.2 using my current configuration. Actually this works very well! I am also using the "add user script" option in smb.conf which points to a script that allows usernames with $ (dollar) signs to be added to the /etc/passwd file on FreeBSD 4.X. I am able to do this by recompiling /usr/src/usr.sbin/pw/pw_user.c with the dollar restriction removed. The method I try to use for joining the domain from the W2K workstation is by changing the properties of the network ID tab on the "My Comupter" icon. I change the domain textfield to the Samba run domain name, then I supply root as the username and a password as given by the smbpasswd file for root. The error returned by the W2K network ID applet is "The remote procedure call failed". But what is strange is that when I check the /etc/passwd file the computer name HAS been added (with a dollar sign appended to the name) and when I examine the smbpasswd file the computer name has also been added. What is even stranger is that in the smbpasswd file the entry for the newly added machine has "NO PASSWORDXXXXX...:NO PASSWORDXXXX.." in the password fields. This does not follow the pattern for NT machine accounts also in the same file. Any ideas would be greatly welcome, if it might help I can also send my current configuration and some high level logging. Thanks in advance. Blair. From kellermg at potsdam.edu Sat Apr 28 16:35:27 2001 From: kellermg at potsdam.edu (Matthew Keller) Date: Tue Dec 2 02:34:29 2003 Subject: SMBD's go into "D" (uninteruptable sleep) and never wake up Message-ID: <988475727.2254.2.camel@comp10574.potsdam.edu> I have s myriad of Samba 2.0.8 and 2.2.0+%U/%Dpatched servers. Two of the heaviest used ones are doing file serving for Win9x (and some WinNT WS and 2k Pro) clients. Very vanilla. Both are running Linux 2.4.3 kernel, using NFS to connect to shared storage areas, FTP for remote access, and also running Netatalk to provide connectivity to Mac's. Both of these servers, on an increasingly frequent basis, are being subjected to what seems to be a heavy case of SMBD laziness, as the SMBD processes will go into the "D" state (uninteruptable sleep) and never come out. The user can log out and log back in (spawning a new SMBD) and continue on their merry way, but that process will never die unless I *gasp* reboot the server. It doesn't respond to any kill signals. Eventually, there gets to be so many that Samba refuses new logins outright (gracefully) and Netatalk just freezes the Macs (not like they aren't USED to freezing ;). They don't do this at the same time, and sometimes it'll be days before one of the starts this. Is this a known issue that I missed? Any feedback as to what would cause this permanent "D" state. I don't like it very much. If it responded to a kill, I'd be fine, but it just doesn't. I'd be happy to provide any information requested (within reason). Again, both 2.0.8 and 2.2.0 seem affected. -- Matthew Keller Enterprise System Analyst Computing & Technology Services Information Services Division State University of NY at Potsdam Potsdam, NY USA http://mattwork.potsdam.edu/ From pgoetz at math.utexas.edu Sat Apr 28 17:22:24 2001 From: pgoetz at math.utexas.edu (Patrick Goetz) Date: Tue Dec 2 02:34:29 2003 Subject: Windows 2000 and Printing: What were they thinking? In-Reply-To: <3AEAABEF.90609@delfi.lt> Message-ID: On Sat, 28 Apr 2001, Eugenijus [ISO-8859-1] Janus(kevic(ius wrote: > > As it is on NT 4.0, once logged in as administrator you must set up > printer drivers for intranet printers. At this stage drivers are > installed locally for every printer you set up. Well, I thought the whole idea of having a print server with downloadable drivers was that you didn't need local printer drivers any more and that all the resources were set up when the share was mounted. The advantage of this is that you can change the printer driver on the server and all the clients get updated automatically (not to mention not having to worry about installing drivers on the clients in the first place and being able to add and change printers without having to much with the client install). Of course I realize that W2K clearly doesn't work this way. When I first set up the Samba print server and mounted an /etc/printcap printer on a W2K machine, I couldn't get print jobs sent from the W2K machine to actually print. They showed up on the printer and were then being rejected. The problem is that the brain-damaged HP postscript driver insists on putting PJL commands at the top of the postscript file (hence completely negating the whole point of using plain ascii postscript in the first place, but I digress) and we have a print filter on the real print server (the Samba server was just remote spooling the jobs to the actual print server) which was messing up the PJL header so that the HP printer ended up rejecting the print job as being "improper postscript". My solution was to have the Samba print server spool the print jobs directly to the HP printer unfiltered. As soon as I did this, everything started working perfectly. Now the weird thing. As an experiment, I set the /etc/printcap file back to the old one (which spooled the jobs to a linux print server instead of directly to the printer), but the W2K machine continued to be able to print. I tried stopping and restarting lpd, nmbd, smbd. I removed the printer and reconnected it on the W2K machine, and rebooted the W2K machine a million times; I even used regedit32 to manually delete the printer from the registry. No matter what I did, I continued to be able to print when it hadn't worked before. Insanity. Then I started thinking that the whole thing had just been some kind of anomaly and the linux print server wasn't really messing up the jobs. Nope. I set up another printer and exactly the same thing happened. Weirdest of all, when I switched the second printer to printing in raw mode (leaving the first still spooling to the linux print server -- in theory --) the second printer started printing and the first one finally broke!!! F*cking windows, if there was ever an argument for relegating bill gates to the ranks of the unemployed this has got to be it. But in any case, I set up printer drivers on the Samba printer server as per the instructions and mounted them on the W2K machine as root/administrator as required by W2K. If W2K needs the drivers to be installed locally when I do this, shouldn't this have happened automatically? Shouldn't permissions on the spool directory be set up by default to allow what 99.999% of all users want; I mean don't most people want to have access to a printer if such is available? What magical, undocumented, un-newsgrouped incantations do I have to perform to get the drivers in a state where ordinary users can mount printers? > When a user log is, (s)he initially gets empty list of printers, but > (s)he can add any intranet printer, which has its drivers installed > locally without any problems. I don't' believe this functionality has > ben changed for Win2k. I think you should check access rights to printer > drivers first Thanks for the tips; I'll look at this, but I still maintain that the default access rights should set up to allow users to mount printers. Certainly such restrictions should be controlled either by the print server and/or the host providing the share and NOT by the client machine, not to mention that all of this crap should be documented someplace by Microsoft. Also, at the moment, I'm not at all convinced that any of this will work on W2K, based on >2 days of pulling my hair out already. I'm annoyed at the X people for not allowing for kernel mode video device drivers sooner (think games) and Corel for not getting it together to provide a usable office productivity suite for linux (think corporations). Had both these things happened when they should have, Samba would only have to worry about providing services to a few legacy Win98/95 machines, since everyone and their pet gecko would already be using linux by now. (Of course since I'm not working on my own X drivers or office suite, I guess I can't really complain too loudly. :-) ) From Jean-Francois.Micouleau at dalalu.fr Sat Apr 28 18:20:38 2001 From: Jean-Francois.Micouleau at dalalu.fr (Jean Francois Micouleau) Date: Tue Dec 2 02:34:30 2003 Subject: Windows 2000 and Printing: What were they thinking? In-Reply-To: Message-ID: On Sat, 28 Apr 2001, Patrick Goetz wrote: > But in any case, I set up printer drivers on the Samba printer server as > per the instructions and mounted them on the W2K machine as > root/administrator as required by W2K. If W2K needs the drivers to be > installed locally when I do this, shouldn't this have happened > automatically? Shouldn't permissions on the spool directory be set up by > default to allow what 99.999% of all users want; I mean don't most people > want to have access to a printer if such is available? What magical, > undocumented, un-newsgrouped incantations do I have to perform to get the > drivers in a state where ordinary users can mount printers? It used to be that way back when NT4sp3 was the standard. And Microsoft changed it for security concerns. Remember the printer driver is running in kernel ring 0 (totally stupid but I disgress), that means it has access to all the resources, including reformating the hard disk. A malicious hacker can send an email to plain joe user which contains a small script and a fake printer driver (thanks outlook for running scripts behind your back, but I disgress again...). Even if I agree with you it's plain boring to have the administrator setup the printers on each workstations, Microsoft have understood it was a problem. So since w2k you can push the drivers to the workstation from a central place. It's documented in the KB http://support.microsoft.com/support/kb/articles/Q189/1/05.ASP as someone else mentioned on this list some days ago. Private note to Jerry: can you add a link to this KB in the howtos ? thanks. If someone wants to send a pizza (for me) and some cat food (for my cat), I'm willing to add that "push printer driver" function to rpcclient. J.F. PS: I also accept T-bone steaks instead of pizza. From miker at incanta.net Sat Apr 28 20:30:33 2001 From: miker at incanta.net (Mike Rylander) Date: Tue Dec 2 02:34:30 2003 Subject: SMBD's go into "D" (uninteruptable sleep) and never wake up In-Reply-To: <988475727.2254.2.camel@comp10574.potsdam.edu> References: <988475727.2254.2.camel@comp10574.potsdam.edu> Message-ID: <01042816303301.00915@lizard2.incanta.net> On Saturday 28 April 2001 12:35, you mumbled SMBD's go into "D" (uninteruptable sleep) and never wake up: > I have s myriad of Samba 2.0.8 and 2.2.0+%U/%Dpatched servers. Two of > the heaviest used ones are doing file serving for Win9x (and some WinNT > WS and 2k Pro) clients. Very vanilla. Both are running Linux 2.4.3 > kernel, using NFS to connect to shared storage areas, FTP for remote > access, and also running Netatalk to provide connectivity to Mac's. > > Both of these servers, on an increasingly frequent basis, are being > subjected to what seems to be a heavy case of SMBD laziness, as the SMBD > processes will go into the "D" state (uninteruptable sleep) and never > come out. The user can log out and log back in (spawning a new SMBD) and > continue on their merry way, but that process will never die unless I > *gasp* reboot the server. It doesn't respond to any kill signals. > Eventually, there gets to be so many that Samba refuses new logins > outright (gracefully) and Netatalk just freezes the Macs (not like they > aren't USED to freezing ;). They don't do this at the same time, and > sometimes it'll be days before one of the starts this. I had this problem a while back. Running 2.0.7 as a simple workgroup server, I had a large amount of storage mounted via NFS and shared via Samba, and from time to time I would need to reboot the server to get rid of D-wait'd processes. As soon as I moved the most heavily accessed shares (the [homes] shares) to one big box and shared them directly (as opposed to via NFS) every thing was fine. As far as I can, this is a problem with state management in Linux's NFS driver. One note, I did have greater success with two Solaris machines smb-sharing via NFS (of course, right?). Hope this helps. > Is this a known issue that I missed? Any feedback as to what would cause > this permanent "D" state. I don't like it very much. If it responded to > a kill, I'd be fine, but it just doesn't. I'd be happy to provide any > information requested (within reason). Again, both 2.0.8 and 2.2.0 seem > affected. -- Mike Rylander Senior Unix Administrator Incanta, Inc. From b.j.smith at ieee.org Sat Apr 28 22:03:33 2001 From: b.j.smith at ieee.org (Bryan J. Smith) Date: Tue Dec 2 02:34:30 2003 Subject: SMBD's go into "D" (uninteruptable sleep) and never wake up References: <988475727.2254.2.camel@comp10574.potsdam.edu> <01042816303301.00915@lizard2.incanta.net> Message-ID: <3AEB3E35.F7F32DFA@ieee.org> Mike Rylander wrote: > I had this problem a while back. Running 2.0.7 as a > simple workgroup server, I had a large amount of storage > mounted via NFS and shared via Samba, Which is not exactly recommended -- unless you have Samba running on the same, remote server you are NFS mounting from and utilize NIS automounter maps. But yes, I have done this too (to avoid paying NetApp $7K for a CIFS license ;-). > and from time to time I would need to reboot the server > to get rid of D-wait'd processes. Reboot the server? Or just the daemons/service? [ Note: I'm coming at this blind. I just joined the list and am not familiar with this "D" state you speak of. ] > As soon as I moved the most heavily accessed shares (the > [homes] shares) to one big box and shared them directly > (as opposed to via NFS) every thing was fine. As far as > I can, this is a problem with state management in Linux's > NFS driver. One note, I did have greater success with two > Solaris machines smb-sharing via NFS (of course, right?). Linux's NFS services are still maturing. I had 0 issues once I upgraded to Trond+Higgens NFS v3 for kernel 2.2 (using VALinux's 2.2.16 kernel). Linux 2.4 is more on-par with Solaris in NFS-SMB locking at the kernel level from what I can tell (disclaimer: I'm just playing with Samba 2.2 now). -- TheBS -- Bryan "TheBS" Smith chat:thebs413 @AOL/MSN/Yahoo Engineer mailto:b.j.smith@ieee.org ******************************************************** "Linux will do for applications what the Internet did to networks" -- Sam Palmisano, IBM Chief Operating Officer From martin at zamenhof.demon.co.uk Sat Apr 28 22:24:46 2001 From: martin at zamenhof.demon.co.uk (Martin Radford) Date: Tue Dec 2 02:34:30 2003 Subject: Windows 2000 and Printing: What were they thinking? In-Reply-To: <20010428190202.930F04FD6@lists.samba.org> from "samba-ntdom-request@lists.samba.org" at Apr 28, 2001 12:02:02 PM Message-ID: <200104282224.XAA02726@zamenhof.demon.co.uk> > > Samba 2.2 has a lovely system for providing UNIX printers to Windows > machines complete with downloadable printer drivers which works perfectly, > at least for me. This system is, however, as far as I can tell, > commpletely useless for Windows 2000 machines unless all the users on the > network have administrative access to the workstations they're going to > use. > domain users. I thought the problem could be solved by having a default > login script with stuff like > > start \\samba-server\printer1 > start \\samba-server\printer2 > etc. > > However, whenever I try to do this as an ordinary domain user I get a > message saying > > "You do not have sufficient access to your machine to > connect to the selected printer". > > I've tried changing the security options on the printer shares so that > Everyone, Authenticated Users, Network, etc. have complete management > access to the printers, but nothing seems to provide domain users with the > correct permissions to mount printers. I even tried setting up the > printers for root and then copying the root profile to Default User, but > this didn't work, either. Did you check the security policy of your machine? Allowing users to install printer drivers is a security risk. Go to Start/Settings/Control Panel/Administrative Tools/Local Security Policy. Under Local Policies/Security Options, check the entry for "Prevent users from installing printer drivers". I think the default setting is "Enabled". This may be causing your problem. Martin -- Martin Radford | "Only wimps use tape backup: _real_ martin@zamenhof.demon.co.uk | men just upload their important stuff -o) Registered Linux user #9257 | on ftp and let the rest of the world /\\ - see http://counter.li.org | mirror it ;)" - Linus Torvalds _\_V From martin at zamenhof.demon.co.uk Sat Apr 28 22:35:33 2001 From: martin at zamenhof.demon.co.uk (Martin Radford) Date: Tue Dec 2 02:34:30 2003 Subject: Windows 2000 and Printing: What were they thinking? In-Reply-To: <20010428190202.930F04FD6@lists.samba.org> from "samba-ntdom-request@lists.samba.org" at Apr 28, 2001 12:02:02 PM Message-ID: <200104282235.XAA02755@zamenhof.demon.co.uk> > Well, I thought the whole idea of having a print server with downloadable > drivers was that you didn't need local printer drivers any more and that > all the resources were set up when the share was mounted. The advantage > of this is that you can change the printer driver on the server and all > the clients get updated automatically (not to mention not having to worry > about installing drivers on the clients in the first place and being able > to add and change printers without having to much with the client > install). The point is that the drivers still get installed locally - it's just the installation is done behind your back without you noticing. This is the way it works with NT4 and Win2k. > > I'm annoyed at the X people for not allowing for kernel mode video > device drivers sooner (think games) and Corel for not getting it together It's not necessarily the X people who object to kernel mode video drivers - it's the people who decide what goes into the kernel. While they make the driver run faster, it's at the expense of stability. When they put the graphics drivers into the NT4 kernel, it allowed user-level code to crash the OS by using invalid parameters to API calls. It took MS a while to get the bounds checking right. But this is off-topic, so I'll leave it here. Martin -- Martin Radford | "Only wimps use tape backup: _real_ martin@zamenhof.demon.co.uk | men just upload their important stuff -o) Registered Linux user #9257 | on ftp and let the rest of the world /\\ - see http://counter.li.org | mirror it ;)" - Linus Torvalds _\_V From seth at hollen.org Sat Apr 28 22:37:53 2001 From: seth at hollen.org (Seth) Date: Tue Dec 2 02:34:30 2003 Subject: w2k complains about updating roaming profiles at log off Message-ID: <01042818375300.22326@home.localdomain> I am having the same problem, or at least similar. I am using samba 2.0.7 on redhat 7.0 the computers are NT4. I just got this erver running a couple of weeks ago and everythign was fine. now a few roaming profiles seem to corrupted. I have made new ones for the useres and they seem to work ok for the time being. it is only 6 users sharing 4 computers. I am not using samba as a PDC just a place to store their profile that can always be accessed. I will try making them mandatory profiles thanks -- Lottery: A tax on people who are bad at math. Seth seth@hollen.org From idra at samba.org Sat Apr 28 22:54:44 2001 From: idra at samba.org (Simo Sorce) Date: Tue Dec 2 02:34:30 2003 Subject: SMBD's go into "D" (uninteruptable sleep) and never wake up In-Reply-To: <988475727.2254.2.camel@comp10574.potsdam.edu>; from kellermg@potsdam.edu on Sat, Apr 28, 2001 at 12:35:27PM -0400 References: <988475727.2254.2.camel@comp10574.potsdam.edu> Message-ID: <20010428155444.A7579@va.samba.org> Don't know if this is the case but kernel 2.4.3 has been reported to be able to eat ext2 file systems under heavy load, it seem that samba is blocked on a system call (only reason I know a process can't be killed), try upgrading your kernel to 2.4.4 or downgrade to a more stable and proven 2.2.x code base and see if this happens again. On Sat, Apr 28, 2001 at 12:35:27PM -0400, Matthew Keller wrote: > > I have s myriad of Samba 2.0.8 and 2.2.0+%U/%Dpatched servers. Two of > the heaviest used ones are doing file serving for Win9x (and some WinNT > WS and 2k Pro) clients. Very vanilla. Both are running Linux 2.4.3 > kernel, using NFS to connect to shared storage areas, FTP for remote > access, and also running Netatalk to provide connectivity to Mac's. > > Both of these servers, on an increasingly frequent basis, are being > subjected to what seems to be a heavy case of SMBD laziness, as the SMBD > processes will go into the "D" state (uninteruptable sleep) and never > come out. The user can log out and log back in (spawning a new SMBD) and > continue on their merry way, but that process will never die unless I > *gasp* reboot the server. It doesn't respond to any kill signals. > Eventually, there gets to be so many that Samba refuses new logins > outright (gracefully) and Netatalk just freezes the Macs (not like they > aren't USED to freezing ;). They don't do this at the same time, and > sometimes it'll be days before one of the starts this. > > Is this a known issue that I missed? Any feedback as to what would cause > this permanent "D" state. I don't like it very much. If it responded to > a kill, I'd be fine, but it just doesn't. I'd be happy to provide any > information requested (within reason). Again, both 2.0.8 and 2.2.0 seem > affected. > > -- > > Matthew Keller > Enterprise System Analyst > Computing & Technology Services > Information Services Division > State University of NY at Potsdam > Potsdam, NY USA > > http://mattwork.potsdam.edu/ > > -- Simo Sorce ------------------------------ Unix IS user friendly, it is just selective about who his friends are. From jeremy at valinux.com Sat Apr 28 23:18:40 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:30 2003 Subject: SMBD's go into "D" (uninteruptable sleep) and never wake up In-Reply-To: <3AEB3E35.F7F32DFA@ieee.org>; from b.j.smith@ieee.org on Sat, Apr 28, 2001 at 06:03:33PM -0400 References: <988475727.2254.2.camel@comp10574.potsdam.edu> <01042816303301.00915@lizard2.incanta.net> <3AEB3E35.F7F32DFA@ieee.org> Message-ID: <20010428161839.A6805@valinux.com> On Sat, Apr 28, 2001 at 06:03:33PM -0400, Bryan J. Smith wrote: > > Linux's NFS services are still maturing. I had 0 issues once I > upgraded to Trond+Higgens NFS v3 for kernel 2.2 (using VALinux's > 2.2.16 kernel). Linux 2.4 is more on-par with Solaris in NFS-SMB > locking at the kernel level from what I can tell (disclaimer: I'm > just playing with Samba 2.2 now). That would be "on-par with IRIX in NFS-SMB locking at the kernel level" - Solaris has no support for that, but IRIX does. Cheers, Jeremy Allison, Samba Team. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From schapiro at clerk.pi.huji.ac.il Sun Apr 29 11:29:19 2001 From: schapiro at clerk.pi.huji.ac.il (Schlomo Schapiro) Date: Tue Dec 2 02:34:30 2003 Subject: Implementing SAMBA into NT and Novell question In-Reply-To: Message-ID: Hi, close to this topic, does anybody from the Samba team know something about Novells CIFS server that should come out now ? Is it just a plain samba running on NetWare ? Any detailed info available ? Schlomo PS: Andrew, if you are already running Novell, maybe this might be just right for you ! On Thu, 26 Apr 2001, Andrew Judge wrote: > I have a question for the group.I would like to use SAMBA on a network > currently using Novell and two NT servers acting as PDC and BDC running MS > SQL and Exchange respectively.The clients are win9x and NT4 workstation > (about 40 clients).The use would be for the following: > > 1. migrate exchange to postfix (POP3), using SAMBA to store Outlook pst > files in users home directory for backup reasons. > > 2. run the SAMBA server for the majority of file serving > > I would probably use SAMBA 2.0.7 although 2.2 is probably better to play > with NT and I believe we will migrate to the PDC for authentication with > GSNW for Novell access.Are there any better suggestions? Is 2.2 the > preferable solution?I'm a little concerned with how SAMBA interacts as a > member server in an NT domain. > > Does anyone have anything similar running and how would you go about this? > > Best regards, > > Andrew Judge > > -- Schlomo Schapiro Computation Authority Hebrew University of Jerusalem Tel: ++972 / 2 / 65-84404 Fax: 65-27349 email: schapiro@clerk.pi.huji.ac.il WWW: http://shum.cc.huji.ac.il/~schapiro From b.j.smith at ieee.org Sun Apr 29 12:42:34 2001 From: b.j.smith at ieee.org (Bryan J. Smith) Date: Tue Dec 2 02:34:30 2003 Subject: More on locking -- WAS: SMBD's go into "D" (uninteruptable sleep) and never wake up References: <988475727.2254.2.camel@comp10574.potsdam.edu> <01042816303301.00915@lizard2.incanta.net> <3AEB3E35.F7F32DFA@ieee.org> <20010428161839.A6805@valinux.com> Message-ID: <3AEC0C3A.2AE6E798@ieee.org> Jeremy Allison wrote: > That would be "on-par with IRIX in NFS-SMB locking at the > kernel level" - Solaris has no support for that, but IRIX > does. Okay, since I got you here, I saw the new Samba 2.2 has "on-par" locking between Irix and Linux 2.4. Very good and I'm playing with both now. But in prior versions, it seemed that Solaris supported kernel-level oplocks (level 1) whereas Linux (or FreeBSD or Irix) did not? Please correct me if I am wrong (or talking about an even prior version). -- TheBS -- Bryan "TheBS" Smith chat:thebs413 @AOL/MSN/Yahoo Engineer mailto:b.j.smith@ieee.org ******************************************************** "Linux will do for applications what the Internet did to networks" -- Sam Palmisano, IBM Chief Operating Officer From b.j.smith at ieee.org Sun Apr 29 13:06:15 2001 From: b.j.smith at ieee.org (Bryan J. Smith) Date: Tue Dec 2 02:34:30 2003 Subject: More on locking -- WAS: SMBD's go into "D" (uninteruptable sleep) and never wake up References: <988475727.2254.2.camel@comp10574.potsdam.edu> <01042816303301.00915@lizard2.incanta.net> <3AEB3E35.F7F32DFA@ieee.org> <20010428161839.A6805@valinux.com> <3AEC0C3A.2AE6E798@ieee.org> Message-ID: <3AEC11C7.3C2B44AE@ieee.org> "Bryan J. Smith" wrote: > Okay, since I got you here, I saw the new Samba 2.2 has "on-par" > locking between Irix and Linux 2.4. Very good and I'm playing with > both now. > > But in prior versions, it seemed that Solaris supported kernel-level > oplocks (level 1) whereas Linux (or FreeBSD or Irix) did not? > Please correct me if I am wrong (or talking about an even prior > version). Samba 2.0.7 smb.conf: kernel oplocks (G) For UNIXs that support kernel based oplocks (cur- rently only IRIX but hopefully also Linux and FreeBSD soon) this parameter allows the use of them to be turned on or off. Samba 2.2.0 smb.conf: kernel oplocks (G) For UNIXes that support kernel based oplocks (cur- rently only IRIX and the Linux 2.4 kernel), this parameter allows the use of them to be turned on or off. I must be either greatly mistaken or it is enabled on my Solaris 2.6 boxes. And yes, it did set the #undef line automatically in "acconfig.h" but I did some testing and manually enabled it (removed the line from the file). I've had 0 issues with Jet/Access dbs on a Samba partition. Hmmm, maybe I should look at the logs closer to see if it is really using it. -- TheBS P.S. I've heard of others being able to enable them on Solaris by removing the #undef line. -- Bryan "TheBS" Smith chat:thebs413 @AOL/MSN/Yahoo Engineer mailto:b.j.smith@ieee.org ******************************************************** "Linux will do for applications what the Internet did to networks" -- Sam Palmisano, IBM Chief Operating Officer From Hochstaetter-Waldemar at gmx.de Sun Apr 29 15:02:42 2001 From: Hochstaetter-Waldemar at gmx.de (Waldi) Date: Tue Dec 2 02:34:30 2003 Subject: samba-tng bdc Message-ID: <3AEC2D11.2AA135B9@gmx.de> I would like to run Samba-TNG as a BDC for my NT4 PDC. I have found some examples for configuring smb.conf to act as BDC, but I did't found a description how to add the BDC to the NT4 PDC. did someone successfully run samba as a BDC ? Waldemar From kellermg at potsdam.edu Sun Apr 29 14:56:35 2001 From: kellermg at potsdam.edu (Matthew Keller) Date: Tue Dec 2 02:34:30 2003 Subject: SMBD's go into "D" (uninteruptable sleep) and never wake up In-Reply-To: <3AEB3E35.F7F32DFA@ieee.org> References: <988475727.2254.2.camel@comp10574.potsdam.edu> <01042816303301.00915@lizard2.incanta.net> <3AEB3E35.F7F32DFA@ieee.org> Message-ID: <988556195.9515.0.camel@comp10574.potsdam.edu> On 28 Apr 2001 18:03:33 -0400, Bryan J. Smith wrote: > > and from time to time I would need to reboot the server > > to get rid of D-wait'd processes. > > Reboot the server? Or just the daemons/service? > [ Note: I'm coming at this blind. I just joined the list and am > not familiar with this "D" state you speak of. ] Thus far, rebooting the entire server is the only way to get rid of them. They will not respond to any kill signals in this state. -- Matthew Keller Enterprise System Analyst Computing & Technology Services Information Services Division State University of NY at Potsdam Potsdam, NY USA http://mattwork.potsdam.edu/ From gcarter at valinux.com Sun Apr 29 18:28:14 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:30 2003 Subject: Windows 2000 and Printing: What were they thinking? In-Reply-To: ; from Jean-Francois.Micouleau@dalalu.fr on Sat, Apr 28, 2001 at 13:20:38 -0500 References: Message-ID: <20010429132814.A2318@pogo.plainjoe.org> On Sat, 28 Apr 2001 13:20:38 Jean Francois Micouleau wrote: > > http://support.microsoft.com/support/kb/articles/Q189/1/05.ASP > > as someone else mentioned on this list some days ago. > > Private note to Jerry: can you add a link to this KB in > the howtos ? thanks. Will do. > If someone wants to send a pizza (for me) and some > cat food (for my cat), I'm willing to add that "push printer > driver" function to rpcclient. Which RPC's is this? I'm assuming it would would be different than a simple addprinterdriver and addprinter? Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From dhbaker at rmci.net Mon Apr 30 03:36:38 2001 From: dhbaker at rmci.net (Michael Baker) Date: Tue Dec 2 02:34:30 2003 Subject: NT and W2k together on Samba 2.2 Message-ID: <003301c0d126$c4978280$0a00a8c0@rmci.net> I have configured a NT 4.0 machine and a Windows 2000 Pro machine both to authenticate on my samba domain server. The authentication works great, exactly as in the faq and howto, but I am having some problems with the groups and permissions on the shares. Is there a way in 2.2 to create and set groups of users for the domain? What are the Domain Users and Domain Admins groups that appear? When I try to access shares on the NT 4.0 machine from the w2k machine I get an error that says something about the w2k machine not being trusted, though it allowed me to log into the domain, so it should have the trust account set right.. If anyone can help, thanks in advance.. Michael -------------- next part -------------- HTML attachment scrubbed and removed From tgc at np.edu.sg Mon Apr 30 08:01:44 2001 From: tgc at np.edu.sg (Geok Choo Teo-Chee) Date: Tue Dec 2 02:34:30 2003 Subject: winbindd Message-ID: Hi, I had downloaded samba-tng (alpha 2.6) and successfully compiled it on my Solaris 2.6 . When I looked into the winbindd (8) man pages, it stated that I need to copy "libnss_winbind.so.2" and "pam_winbind.so" to "/lib" and "/lib/security" respectively. But I cannot find these two files that I need to copy. Any pointers to where I can find these two files while be much appreciated. Thank you. From jfenner at sino.de Mon Apr 30 08:55:44 2001 From: jfenner at sino.de (Jan Fenner) Date: Tue Dec 2 02:34:30 2003 Subject: Auto Adding account with smb 2.2.0 ?? References: Message-ID: <003701c0d153$57d0b400$0c0aa8c0@sinojfenner> Is it possible to to log on a client without adding $workstation account as unix user first? I mean, if a new workstation may join the domain, is it possible to add it just with login as a special user or smth without creating a new account? thnx -jF From B.Sutton at odey.co.uk Mon Apr 30 09:23:17 2001 From: B.Sutton at odey.co.uk (Blair Sutton/Odey) Date: Tue Dec 2 02:34:30 2003 Subject: Samba 2.2 PDC and W2K logon - remote procedure call failed Message-ID: I finally solved the problem by rebooting the Windows 2000 client. My Windows 2000 client now can join then logon to the domain. Thanks, Blair. "Blair Sutton/Odey" Sent by: samba-ntdom-admin@lists.samba.org 28/04/2001 15:18 To: cc: Subject: Samba 2.2 PDC and W2K logon - remote procedure call failed I have been experiencing problems with W2K logons to a Samba 2.2 PDC. Firstly I should point out that I have successfully been able to get Win95 and NT4 workstations to logon correctly to Samba 2.2 using my current configuration. Actually this works very well! I am also using the "add user script" option in smb.conf which points to a script that allows usernames with $ (dollar) signs to be added to the /etc/passwd file on FreeBSD 4.X. I am able to do this by recompiling /usr/src/usr.sbin/pw/pw_user.c with the dollar restriction removed. The method I try to use for joining the domain from the W2K workstation is by changing the properties of the network ID tab on the "My Comupter" icon. I change the domain textfield to the Samba run domain name, then I supply root as the username and a password as given by the smbpasswd file for root. The error returned by the W2K network ID applet is "The remote procedure call failed". But what is strange is that when I check the /etc/passwd file the computer name HAS been added (with a dollar sign appended to the name) and when I examine the smbpasswd file the computer name has also been added. What is even stranger is that in the smbpasswd file the entry for the newly added machine has "NO PASSWORDXXXXX...:NO PASSWORDXXXX.." in the password fields. This does not follow the pattern for NT machine accounts also in the same file. Any ideas would be greatly welcome, if it might help I can also send my current configuration and some high level logging. Thanks in advance. Blair. From jjs at acis.com.au Mon Apr 30 10:55:07 2001 From: jjs at acis.com.au (Justin Smith) Date: Tue Dec 2 02:34:30 2003 Subject: Problems with Samba 2.2.0 W2k domain Message-ID: <200104301055.UAA16438@bowan.acis.com.au> As a few others, I have the dreaded "Procedure number is out of range" when trying to join my W2K professional to Samba Domain. Ive read the doco and all looks good. I ran the join with log level 4 and the only thing unusual (to me at least) was the following snippets during the join: [2001/04/30 20:26:37, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(817) search for pipe pnum=7012 [2001/04/30 20:26:37, 3] smbd/ipc.c:api_fd_reply(3320) Got API command 0x26 on pipe "lsarpc" (pnum 7012)Doing \PIPE\lsarpc [2001/04/30 20:26:37, 4] rpc_server/srv_pipe.c:api_rpcTNP(1084) api_rpcTNP: api_ntlsa_rpc op 0x2e - unknown [2001/04/30 20:26:37, 3] smbd/process.c:process_smb(618) Transaction 22 of length 126 ...... [2001/04/30 20:26:38, 3] smbd/ipc.c:api_fd_reply(3320) Got API command 0x26 on pipe "samr" (pnum 7015)Doing \PIPE\samr [2001/04/30 20:26:38, 4] rpc_server/srv_pipe.c:api_rpcTNP(1084) api_rpcTNP: api_samr_rpc op 0x6 - unknown [2001/04/30 20:26:38, 3] smbd/process.c:process_smb(618) Transaction 39 of length 124 [2001/04/30 20:26:38, 3] smbd/process.c:switch_message(448) switch message SMBtrans (pid 14223) Could this be related? Jus From fortiz at ecogas.com.ar Mon Apr 30 14:14:01 2001 From: fortiz at ecogas.com.ar (=?iso-8859-1?Q?Facundo_C=E9sar_Ortiz?=) Date: Tue Dec 2 02:34:30 2003 Subject: Trabajar con WinNT Message-ID: Como se hace para que SAMBA valide usuarios y funcione como si fuera un servidor NT. Gracias. Facundo C?sar Ortiz Distribuidora de Gas Cuyana S.A. Sistemas Cuyo - (261) 4412 558 fortiz@ecogas.com.ar -------------- next part -------------- HTML attachment scrubbed and removed From gcarter at valinux.com Mon Apr 30 14:18:58 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:30 2003 Subject: Problems with Samba 2.2.0 W2k domain In-Reply-To: <200104301055.UAA16438@bowan.acis.com.au>; from jjs@acis.com.au on Mon, Apr 30, 2001 at 05:55:07 -0500 References: <200104301055.UAA16438@bowan.acis.com.au> Message-ID: <20010430091858.I1518@pogo.eng.auburn.edu> On Mon, 30 Apr 2001 05:55:07 Justin Smith wrote: > As a few others, I have the dreaded "Procedure number is out of > range" when trying to join my W2K professional to Samba Domain. Ive > read the doco and all looks good. I ran the join with log level 4 and > the only thing unusual (to me at least) was the following snippets > during the join: This error occurs when the machine account entry exists in the smbpasswd file, but the 'add user script' fails to add the entry into /etc/passwd. Have you verified that this part is working correctly? cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From Heering at edo.uni-dortmund.de Mon Apr 30 14:29:11 2001 From: Heering at edo.uni-dortmund.de (Oliver Heering) Date: Tue Dec 2 02:34:30 2003 Subject: problem saving roaming profile In-Reply-To: <3AE6F79D.8F02A48B@mtholyoke.edu> References: <3AE6F79D.8F02A48B@mtholyoke.edu> Message-ID: <2115407209.20010430162911@edo.uni-dortmund.de> Hi Ron, On Wednesday, April 25, 2001 you wrote: > Running Samba 2.2.0 as a PDC with a W2K client, I encountered an error > message when logging out that indicated improper permissions to save > part of the roaming profile. Most profile information was saved, > however. I encountered the same problem here. I experimented a bit with the smb.conf file and found out that the permissions were set correctly when i turned off the "nt acl support". Then i read some posts in this mailinglist where ppl talk about enabling ACL-support in their linux kernels. As i have an unpatched kernel and NO such ACL-support in it, i wonder if it has something to do with my problem. To be specific: The missing rights on the user-profiles are some execute-bits for the user i.e. some directories that are being created when the user logs off the first time will just have unix permissions "0600" instead of "0700" (even when using the "force directory mode 0700" option). I repeat, only SOME directories are treated like this, not all! ...a directory listing of my user-profile follows (german): drw------- 4 slop users 86 Apr 30 16:16 Anwendungsdaten drwx------ 2 slop users 35 Apr 30 16:16 Cookies drw------- 2 slop users 35 Apr 30 16:16 Desktop drw------- 2 slop users 35 Apr 30 16:16 Druckumgebung drw------- 3 slop users 64 Apr 30 16:16 Eigene Dateien drwx------ 4 slop users 77 Apr 30 16:16 Favoriten drw------- 4 slop users 98 Apr 30 16:16 Local Settings -rw------- 1 slop users 184320 Apr 30 16:16 NTUSER.DAT -rw------- 1 slop users 1024 Apr 30 16:16 NTUSER.DAT.LOG drw------- 2 slop users 35 Apr 30 16:16 Netzwerkumgebung drwx------ 2 slop users 35 Apr 30 16:16 Recent drw------- 2 slop users 35 Apr 30 16:16 SendTo drw------- 3 slop users 60 Apr 30 16:16 Startmen? drw------- 2 slop users 35 Apr 30 16:16 Vorlagen -rw------- 1 slop users 20 Apr 30 16:15 ntuser.ini You notice the directories "Recent", "Favoriten" and "Cookies" which have actually correct permissions set. All the other directories got messed up. Does anyone have any idea what to do? mfg, Oliver Heering Medienzentrum - Universit?t Dortmund http://www.medienzentrum.uni-dortmund.de From Heering at edo.uni-dortmund.de Mon Apr 30 14:41:34 2001 From: Heering at edo.uni-dortmund.de (Oliver Heering) Date: Tue Dec 2 02:34:30 2003 Subject: Failed to set socket option SO_KEEPALIVE Message-ID: <18416150624.20010430164134@edo.uni-dortmund.de> Hi, i noticed the following two errors in my log.smbd file and wonder what i could have done wrong: [2001/04/30 16:37:31, 0] lib/util_sock.c:set_socket_options(165) Failed to set socket option SO_KEEPALIVE (Error Bad file descriptor) [2001/04/30 16:37:31, 0] lib/util_sock.c:set_socket_options(165) Failed to set socket option TCP_NODELAY (Error Socket operation on non-socket) I'm using SuSE 7.0 with a 2.2.17 kernel (unpatched) and a self-compiled Samba 2.2.0. Is there any kernel option i forgot? mfg, Oliver Heering Medienzentrum - Universit?t Dortmund http://www.medienzentrum.uni-dortmund.de From dhbaker at rmci.net Mon Apr 30 14:50:35 2001 From: dhbaker at rmci.net (Michael L. Baker) Date: Tue Dec 2 02:34:30 2003 Subject: W2k and NT groups Message-ID: I was wondering if there was a way to use groups with Samba 2.2 I have tried to use domain users and admin users but they don't seem to work, is there a way to use groups in Samba 2.2 or do I have to share using either Everyone or the individual users? From gcarter at valinux.com Mon Apr 30 15:04:23 2001 From: gcarter at valinux.com (Gerald Carter) Date: Tue Dec 2 02:34:30 2003 Subject: problem saving roaming profile In-Reply-To: <2115407209.20010430162911@edo.uni-dortmund.de>; from Heering@edo.uni-dortmund.de on Mon, Apr 30, 2001 at 09:29:11 -0500 References: <3AE6F79D.8F02A48B@mtholyoke.edu> <2115407209.20010430162911@edo.uni-dortmund.de> Message-ID: <20010430100423.O1518@pogo.eng.auburn.edu> > > Running Samba 2.2.0 as a PDC with a W2K client, I encountered an > error > > message when logging out that indicated improper permissions to save > > part of the roaming profile. Most profile information was saved, > > however. > > I encountered the same problem here. This is fixed in 2.2 cvs tree. cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) From cyroreal at bol.com.br Mon Apr 30 15:27:01 2001 From: cyroreal at bol.com.br (Cyro Corte Real Filho) Date: Tue Dec 2 02:34:31 2003 Subject: Logon only from one computer Message-ID: <000e01c0d18a$023fc6c0$b0fcf9c8@gerencia> Hi All, I have a network here with 4 computers (win98) and 1 server (mandrake) working like PDC of the network, I am using samba 2.0.7 and it's working just fine, but I need to make users to be able to authenticate only from their computers, and be not able to authenticate from the other 3 of the network. Is it possible using samba 2.0.7? I had try to use the include line in smb.conf (include=/home/smb.conf.%m), with the files /home/smb.conf.computer1, /home/smb.conf.computer2, ... . In these files i just wrote "valid users = user", it worked, but i was not able to see the shares in network neighborhood (win98) any more, but i was able to use net use = \\server\... . Could any one help here, tanks. Cyro From jeremy at valinux.com Mon Apr 30 15:46:40 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:31 2003 Subject: More on locking -- WAS: SMBD's go into "D" (uninteruptable sleep) and never wake up References: <988475727.2254.2.camel@comp10574.potsdam.edu> <01042816303301.00915@lizard2.incanta.net> <3AEB3E35.F7F32DFA@ieee.org> <20010428161839.A6805@valinux.com> <3AEC0C3A.2AE6E798@ieee.org> Message-ID: <3AED88E0.BD5AA00C@valinux.com> "Bryan J. Smith" wrote: > > Jeremy Allison wrote: > > That would be "on-par with IRIX in NFS-SMB locking at the > > kernel level" - Solaris has no support for that, but IRIX > > does. > > Okay, since I got you here, I saw the new Samba 2.2 has "on-par" > locking between Irix and Linux 2.4. Very good and I'm playing with > both now. > > But in prior versions, it seemed that Solaris supported kernel-level > oplocks (level 1) whereas Linux (or FreeBSD or Irix) did not? > Please correct me if I am wrong (or talking about an even prior > version). Solaris has never supported kernel level oplocks. The only two UNIX'es that do are IRIX and Linux. Regards, Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From jeremy at valinux.com Mon Apr 30 15:47:21 2001 From: jeremy at valinux.com (Jeremy Allison) Date: Tue Dec 2 02:34:31 2003 Subject: More on locking -- WAS: SMBD's go into "D" (uninteruptable sleep) and never wake up References: <988475727.2254.2.camel@comp10574.potsdam.edu> <01042816303301.00915@lizard2.incanta.net> <3AEB3E35.F7F32DFA@ieee.org> <20010428161839.A6805@valinux.com> <3AEC0C3A.2AE6E798@ieee.org> <3AEC11C7.3C2B44AE@ieee.org> Message-ID: <3AED8909.2156BBB8@valinux.com> "Bryan J. Smith" wrote: > > Hmmm, maybe I should look at the logs closer to see if it is really > using it. > > -- TheBS > > P.S. I've heard of others being able to enable them on Solaris by > removing the #undef line. It really isn't using it. There's no kernel interface on Solaris. Jeremy. -- -------------------------------------------------------- Buying an operating system without source is like buying a self-assembly Space Shuttle with no instructions. -------------------------------------------------------- From linux at fenix.uam.mx Mon Apr 30 17:01:46 2001 From: linux at fenix.uam.mx (Lista linux) Date: Tue Dec 2 02:34:31 2003 Subject: sharing a serial plotter on samba? Message-ID: hi all, I have a serial plotter (used under AutoCad) and wanted to share it using samba, does any body knows if this is possible? is it posible to share a serial port from the server using samba (2.2.0 PDC)? thanks in advance. romy From bferrell at microdisplay.com Mon Apr 30 18:04:16 2001 From: bferrell at microdisplay.com (Bruce Ferrell) Date: Tue Dec 2 02:34:31 2003 Subject: Having logon problem Message-ID: <3AEDA920.6421A23D@microdisplay.com> I've recently installed 2.2.0 in PDC mode and I'm having interrmittant logon problems. The message that we get at logon time in "a domain controller can't be found. You have been logged on using cached information..." I have a few W2K systems and a few ME systems. It's driving me nuts and I can't see any cause for this. It all worked fine for about a week. The environment was samba PDC controlled before using 1.9 series code that seemed to break with the introduction of Win2K. I can remove and re-add the NT 4.0 systems which would seem to say that it's an interrmittant browsing problem. HELP!!!!!! Thanks in advance, Bruce Ferrell From bferrell at microdisplay.com Mon Apr 30 18:49:27 2001 From: bferrell at microdisplay.com (Bruce Ferrell) Date: Tue Dec 2 02:34:31 2003 Subject: Having logon problem References: Message-ID: <3AEDB3B7.313234FE@microdisplay.com> I'll give it a try and let you all know what happens. The problem has cleared up for now :( Todd Swain wrote: > Bruse try adding each machine to the others host file. > > Linux => /etc/host > windows => C:\windows\host (if you haven't created one already there should > be a file called hosts.sam to use) > > Todd > > -----Original Message----- > From: samba-admin@lists.samba.org [mailto:samba-admin@lists.samba.org]On > Behalf Of Bruce Ferrell > Sent: Monday, April 30, 2001 2:04 PM > To: 'samba@lists.samba.org'; SAMBA-NTDOM (E-mail) > Subject: Having logon problem > > I've recently installed 2.2.0 in PDC mode and I'm having interrmittant > logon problems. The message that we get at logon time in "a domain > controller can't be found. You have been logged on using cached > information..." I have a few W2K systems and a few ME systems. It's > driving me nuts and I can't see any cause for this. It all worked fine > for about a week. The environment was samba PDC controlled before using > 1.9 series code that seemed to break with the introduction of Win2K. > I can remove and re-add the NT 4.0 systems which would seem to say that > it's an interrmittant browsing problem. > > HELP!!!!!! > > Thanks in advance, > > Bruce Ferrell > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba From pgoetz at math.utexas.edu Mon Apr 30 19:20:47 2001 From: pgoetz at math.utexas.edu (Patrick Goetz) Date: Tue Dec 2 02:34:31 2003 Subject: W2K and Network Printing -- the ongoing saga In-Reply-To: <3AEAABEF.90609@delfi.lt> Message-ID: As some listizens might recall, I've been trying use a Samba 2.2 PDC to provide downloadable printer drivers to W2K machines. The Samba stuff seems to be working perfectly (modulo the fact that the printer names seem to be selected randomly from /etc/printcap -- not the last name in the list as I thought earlier), but I can't get the W2K machines to either provide the configured printers to ordinary domain users or have the users mount the printers either by hand or from a login script. Every time I try I get a message saying that I don't have sufficient access to the machine to connect to the selected printer. I was ready to give up and fly to Redmond with a 100 pounds of C4 strapped to my back, but an inability to locate any C4 combined with a number of helpful suggestions from this list got me back in front of the console for another try. No luck. For the sake of providing potentially useful feedback back to the list, here is what happened: On Sat, 28 Apr 2001, Eugenijus [ISO-8859-1] Janus(kevic(ius wrote: > > > The problem is that for W2K, network printers set up by > > administrators do not automatically appear on the desktops of ordinary > > domain users. I thought the problem could be solved by having a default > > login script with stuff like > > > > start \\samba-server\printer1 > > start \\samba-server\printer2 > > etc. > > hm, try `net use \\samba-server\printer` then > When I do this, I get a helpful message "operation succeeded". Unfortunately, I don't get a printer out of the deal. I also tried `net use lpt1: \\samba-server\printer` with the same result. ============ On Sat, 28 Apr 2001, Eugenijus [ISO-8859-1] Janus(kevic(ius wrote: > > Check permissions for %windir%\system32\spool and below (it's true for > NT. Check the correct location for Win2k) > Since the system drive is set up with FAT32, anyone can write to this directory. Just to check, I made sure I could create new folders in the %windir%\system32\spool\drivers directory. (I realize that this blows the whole point of securing the system in the first place, but one of my assistants made the mistake while installing the machines, and I don't feel like correcting right now.) Moreover, while I was experimenting with this suggestion, I noticed that - when I login on the W2K as a domain user - the printer drivers are already there, so there is no reason for the system to want to download them again! ============ On Sat, 28 Apr 2001, Jean Francois Micouleau wrote: > > Even if I agree with you it's plain boring to have the administrator > setup > the printers on each workstations, Microsoft have understood it was a > problem. So since w2k you can push the drivers to the workstation from a > central place. It's documented in the KB > > http://support.microsoft.com/support/kb/articles/Q189/1/05.ASP > > as someone else mentioned on this list some days ago. > Yes, I'm the one who mentioned this URL. When I try using the rundll32 printui.dll,PrintUIEntry command I get the same result as when trying to use `start \\samba-server\printer` i.e. I don't have sufficient access to the machine. The biggest problem is even if I'm willing to set up every single network printer on every machine by hand as administrator, the printers don't show up for users. ============ On Sat, 28 Apr 2001, Martin Radford wrote: > > > Did you check the security policy of your machine? Allowing users to > install printer drivers is a security risk. > > Go to Start/Settings/Control Panel/Administrative Tools/Local Security > Policy. Under Local Policies/Security Options, check the entry for > "Prevent users from installing printer drivers". I think the default > setting is "Enabled". This may be causing your problem. > I really thought this was going to be the answer, but sadly, no. By default, this option is Disabled, and in particular, it's disabled on the W2K machine I'm using for testing. ============ At this point, I'm really curious. Does A_N_Y_O_N_E have this working with W2K machines? I checked with a friend who administers a huge WinNT/2000 network, and their solution is to simply spool all print jobs directly from the W2K workstation to the printer. It turns out that TCP/IP printers are set up as local printers, and these DO show up for ordinary users. Since all the printers I currently care about are TCP/IP printers, this work-around solves my problem for now, but it's terribly inelegant, since I have to set up printer drivers by hand on each machine for each printer, and eventually it will become a big problem when people decide that they want to spool print jobs to printers attached to local linux machines on the network. From schapiro at clerk.pi.huji.ac.il Sun Apr 29 11:29:19 2001 From: schapiro at clerk.pi.huji.ac.il (Schlomo Schapiro) Date: Tue Dec 2 02:34:31 2003 Subject: Implementing SAMBA into NT and Novell question In-Reply-To: Message-ID: Hi, close to this topic, does anybody from the Samba team know something about Novells CIFS server that should come out now ? Is it just a plain samba running on NetWare ? Any detailed info available ? Schlomo PS: Andrew, if you are already running Novell, maybe this might be just right for you ! On Thu, 26 Apr 2001, Andrew Judge wrote: > I have a question for the group.I would like to use SAMBA on a network > currently using Novell and two NT servers acting as PDC and BDC running MS > SQL and Exchange respectively.The clients are win9x and NT4 workstation > (about 40 clients).The use would be for the following: > > 1. migrate exchange to postfix (POP3), using SAMBA to store Outlook pst > files in users home directory for backup reasons. > > 2. run the SAMBA server for the majority of file serving > > I would probably use SAMBA 2.0.7 although 2.2 is probably better to play > with NT and I believe we will migrate to the PDC for authentication with > GSNW for Novell access.Are there any better suggestions? Is 2.2 the > preferable solution?I'm a little concerned with how SAMBA interacts as a > member server in an NT domain. > > Does anyone have anything similar running and how would you go about this? > > Best regards, > > Andrew Judge > > -- Schlomo Schapiro Computation Authority Hebrew University of Jerusalem Tel: ++972 / 2 / 65-84404 Fax: 65-27349 email: schapiro@clerk.pi.huji.ac.il WWW: http://shum.cc.huji.ac.il/~schapiro -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba From bferrell at microdisplay.com Mon Apr 30 18:04:16 2001 From: bferrell at microdisplay.com (Bruce Ferrell) Date: Tue Dec 2 02:34:31 2003 Subject: Having logon problem Message-ID: <3AEDA920.6421A23D@microdisplay.com> I've recently installed 2.2.0 in PDC mode and I'm having interrmittant logon problems. The message that we get at logon time in "a domain controller can't be found. You have been logged on using cached information..." I have a few W2K systems and a few ME systems. It's driving me nuts and I can't see any cause for this. It all worked fine for about a week. The environment was samba PDC controlled before using 1.9 series code that seemed to break with the introduction of Win2K. I can remove and re-add the NT 4.0 systems which would seem to say that it's an interrmittant browsing problem. HELP!!!!!! Thanks in advance, Bruce Ferrell -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba From bferrell at microdisplay.com Mon Apr 30 18:49:27 2001 From: bferrell at microdisplay.com (Bruce Ferrell) Date: Tue Dec 2 02:34:31 2003 Subject: Having logon problem References: Message-ID: <3AEDB3B7.313234FE@microdisplay.com> I'll give it a try and let you all know what happens. The problem has cleared up for now :( Todd Swain wrote: > Bruse try adding each machine to the others host file. > > Linux => /etc/host > windows => C:\windows\host (if you haven't created one already there should > be a file called hosts.sam to use) > > Todd > > -----Original Message----- > From: samba-admin@lists.samba.org [mailto:samba-admin@lists.samba.org]On > Behalf Of Bruce Ferrell > Sent: Monday, April 30, 2001 2:04 PM > To: 'samba@lists.samba.org'; SAMBA-NTDOM (E-mail) > Subject: Having logon problem > > I've recently installed 2.2.0 in PDC mode and I'm having interrmittant > logon problems. The message that we get at logon time in "a domain > controller can't be found. You have been logged on using cached > information..." I have a few W2K systems and a few ME systems. It's > driving me nuts and I can't see any cause for this. It all worked fine > for about a week. The environment was samba PDC controlled before using > 1.9 series code that seemed to break with the introduction of Win2K. > I can remove and re-add the NT 4.0 systems which would seem to say that > it's an interrmittant browsing problem. > > HELP!!!!!! > > Thanks in advance, > > Bruce Ferrell > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba