No subject


Tue Dec 2 02:23:37 GMT 2003


/etc/passwd machine account automatically using the "useradd" program.  I 
believe that if you comment out or remove the entries for "add user script =" 
parameter, and make sure that you add the hostname on the samba server 
beforehand, you should be ok.

You might try looking through the archives for your answer.

Good luck, hope that helps.

Arnold Andrews

Return-Path: <shaas at vibe.com>
Delivered-To: samba-ntdom at lists.samba.org
Received: from vibe.com (unknown [65.105.250.196]) by lists.samba.org
  (Postfix) with ESMTP id 84AA95564 for <samba-ntdom at lists.samba.org>;
  Fri, 10 Aug 2001 07:32:59 -0700 (PDT)
Received: from [208.247.204.158] (HELO stuarthaasw2k) by vibe.com
  (CommuniGate Pro SMTP 3.4.7) with ESMTP-TLS id 310448; Fri, 10 Aug
  2001 10:37:01 -0400
Message-ID: <002f01c121a9$c94e8340$910c10ac at stuarthaasw2k>
From: "Stuart Haas" <shaas at vibe.com>
To: "Arnold Andrews X-324-4292" <aandrews at eng.okla.seagate.com>,
  <samba-ntdom at lists.samba.org>
References: <200108101431.JAA26833 at ocosdrc01.eng.okla.seagate.com>
Subject: Re: Problem w/SAMBA 2.2.1a as PDC 
Date: Fri, 10 Aug 2001 10:35:19 -0400
Organization: Vibe/Spin Ventures
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook Express 6.00.2479.0006
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

Thanks for the reply -

I had done everything by the book, but I managed to solve the problem by A)
pointing the W2K client to the samba server as the WINS server and B)
deleting the smbpasswd database, adding root and trying again - now it
works.

Stuart


----- Original Message -----
From: "Arnold Andrews X-324-4292" <aandrews at eng.okla.seagate.com>
To: <samba-ntdom at lists.samba.org>; <shaas at vibe.com>
Sent: Friday, August 10, 2001 10:31 AM
Subject: Re: Problem w/SAMBA 2.2.1a as PDC


> > I'm reposting this because I didn't get any responses and I'm still very
> > stuck.
> >
> > Just for the record, I follow the docs for setting up a PDC, etc...
> >
> > Thank you all in advance!
> >
> > Stuart
> >
> >
> > > Hi,
> > >
> > > We are having a problem with joining a Windows 2000 client to the
domain.
> > > When trying to add a computer manually or automatically, we get the
error
> > > message 'The account name is a computer name.......' and we just can't
> > join
> > > the domain.  The computer name exists in the password file
>
> Just to make sure, you first created the computer name in "/etc/passwd"
using a
> "$" at the end of the name, right?  Then you used "smbpasswd -m -a
> <computer_name>  (without the dollar sign)?  Also, you will need to make
sure
> that you have added "root" to the smbpasswd  --> "smbpasswd -a root".
>
> Then when attempting to join the computer to the domain from the win2k
side,
> make sure that you use the "root" account and the smbpasswd password.
>
> > > The server is RH7.1. Samba 2.2.1a.
> > >
> > > Below is a portion of the SAMBA log file:
> > >
> > > Aug 6 15:01:55 fs1 useradd[30076]: new user: name=loaner1$, uid=1026,
> > > gid=5000, home=/dev/null, shell=/bin/false
> > > Aug 6 15:02:58 fs1 smbd[30080]: [2001/08/06 15:02:58, 0]
> > > rpc_server/srv_samr.c:api_samr_set_userinfo(672)
> > > Aug 6 15:02:58 fs1 smbd[30080]: api_samr_set_userinfo: Unable to
> > unmarshall
> > > SAMR_Q_SET_USERINFO.
> > > Aug 6 15:02:58 fs1 smbd[30080]: [2001/08/06 15:02:58, 0]
> > > libsmb/smbencrypt.c:decode_pw_buffer(270)
> > > Aug 6 15:02:58 fs1 smbd[30080]: decode_pw_buffer: incorrect password
> > length
> > > (2079677056).
> > > Aug 6 15:03:00 fs1 smbd[30080]: [2001/08/06 15:03:00, 0]
> > > rpc_server/srv_netlog_nt.c:get_md4pw(154)
> > > Aug 6 15:03:00 fs1 smbd[30080]: get_md4pw: Workstation loaner1$: no
> > account
> > > in domain
> > >
>
> I have also seen some messages about some users needing to set their
"password
> chat" to something like:
>
>
> passwd program = /usr/bin/passwd %u
> passwd chat = *new*password* %n\n *new*password* %n\n *success*
> unix password sync = Yes
>
>
> No guarantees, but I believe I also have heard there may be a problem
joining
> domains when using "unix password sync = Yes"
>
> >From your logs, it looks like you have your smb.conf set to try to create
the
> /etc/passwd machine account automatically using the "useradd" program.  I
> believe that if you comment out or remove the entries for "add user script
="
> parameter, and make sure that you add the hostname on the samba server
> beforehand, you should be ok.
>
> You might try looking through the archives for your answer.
>
> Good luck, hope that helps.
>
> Arnold Andrews
>
>

Return-Path: <aandrews at eng.okla.seagate.com>
Delivered-To: samba-ntdom at lists.samba.org
Received: from seastamp.seagate.com (seastamp.seagate.com
  [204.160.183.25]) by lists.samba.org (Postfix) with ESMTP id 07923557C
  for <samba-ntdom at lists.samba.org>; Fri, 10 Aug 2001 07:37:12 -0700
  (PDT)
Received: from auth0.it.stsj.seagate.com (auth0.it.stsj.seagate.com
  [192.168.109.16]) by seastamp.seagate.com (8.11.2/8.11.2) with ESMTP
  id f7AEfM519353; Fri, 10 Aug 2001 14:41:22 GMT
Received: from ocosdrc01.eng.okla.seagate.com ([10.9.7.65]) by
  auth0.it.stsj.seagate.com  with ESMTP id OAA06072; Fri, 10 Aug 2001
  14:41:16 GMT
Received: from sdrc30 by ocosdrc01.eng.okla.seagate.com
  (8.9.3+Sun/SMI-SVR4) id JAA26860; Fri, 10 Aug 2001 09:39:48 -0500
  (CDT)
Message-Id: <200108101439.JAA26860 at ocosdrc01.eng.okla.seagate.com>
Date: Fri, 10 Aug 2001 09:39:46 -0500 (CDT)
From: Arnold Andrews X-324-4292 <aandrews at eng.okla.seagate.com>
Reply-To: Arnold Andrews X-324-4292 <aandrews at eng.okla.seagate.com>
Subject: Re: heavy Problem with machine trust account - w2k sp2 / 2.2.1a
To: samba-ntdom at lists.samba.org, patrick at haindl.ch
MIME-Version: 1.0
Content-Type: TEXT/plain; charset=us-ascii
Content-MD5: mFwKW81zMFzpiGWUuPgERg==
X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.4.2 SunOS 5.8 sun4u sparc 
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

> I'm using Samba 2.2.1a source on RH 7.1 machine. I set up Samba 2.2.1a
> as PDC. Everything works fine. I could see the Domain on the w2k
> clients. But when I try to add w2k sp2 machine for the first one of all
> machines works, when I try to add a second machnie - also w2k sp2 - to
> the domain. I get the message after choose user type (administrator
> etc.) in the wizard that the relationshipp between the machine and
> primary domain is unable to reconnect.
> When I go back to frist machine the relationship ist also broken.
>  
> In w2k wizard I use root user for both of the first one.
>  
> It's mysterious, why does it work with the first machine, and why does
> the second all break down? Is it because I use root user to add the
> machines, but I read to add I should use root!
>  
> I hope one of you got a solutions for my problem.

It sounds like you are trying to use a "user add script =" parameter which may 
not be giving you unique user ID's.  Check to make sure that each computer added 
has a unique ID in /etc/passwd.

Hope that helps,

Arnold Andrews

Return-Path: <nlz5093 at owl.forestry.uga.edu>
Delivered-To: samba-ntdom at lists.samba.org
Received: from mailgw.cc.uga.edu (mailgw.cc.uga.edu [128.192.1.101]) by
  lists.samba.org (Postfix) with ESMTP id 1A33A557F for
  <samba-ntdom at lists.samba.org>; Fri, 10 Aug 2001 07:39:24 -0700 (PDT)
Received: from redhorse.forestry.uga.edu by mailgw.cc.uga.edu (LSMTP for
  Windows NT v1.1b) with SMTP id <0.0363AC83 at mailgw.cc.uga.edu>; Fri, 10
  Aug 2001 10:40:43 -0400
Received: from Smokey-Message_Server by redhorse.forestry.uga.edu with
  Novell_GroupWise; Fri, 10 Aug 2001 10:44:07 -0400
Message-Id: <sb73baf7.076 at redhorse.forestry.uga.edu>
X-Mailer: Novell GroupWise 5.5.2
Date: Fri, 10 Aug 2001 10:43:55 -0400
From: "Nathan Zimpfer" <nlz5093 at owl.forestry.uga.edu>
To: <samba-ntdom at lists.samba.org>
Subject: 2.2 PDC issuses with 9x logon and passwd sync
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

hi all,

I have set up 2.2.1a on RH 7.1 as a PDC, and I seem to be having 2 odd
problems. Our WinNT stations have no problem logging in, But when I try to
logon with a Win9x station with the same username and password, I get "Bad
Password, or access to the logon server denied".  After checking the nmbd log
there is

"logon from 128.XXX.XX.XX: code 0x0"

Does anyone know what this code means so that I can get Win9x machines to
authenticate to the server ?  This particular machine that I am useing for
testing is has Win98se installed.

The second problem that I have is getting the unix and samba passwords to
sync.  When I attempt
to change the password on the NT workstation I get "The user name or old
password is incorrect"
I have passwd chat debug set to yes but there is nothing in the logs about the
attempted
password change..

Any suggestions.
Thanks in advance

Nathan Zimpfer

I have enclosed my smb.conf below.
------Smb.conf-----------
#===================GlobalSettings==========
#Basic Sever Settings
[global]
   netbios name = Milo
   workgroup = rh_domain
   domain admin group = @adm
   server string = our test domain
   name resolve order = lmhost bcast
   dns proxy = no
   time server = true
   smb passwd file = /etc/samba/private/smbpasswd
   log level = 2

   case sensitive = no
   preserve case = yes
   short preserve case = yes

#log file settings
   log file = /var/log/samba/log.%m
   max log size = 50

#Act as the domain and local master browser
   os level = 64
   preferred master = yes
   domain master = yes
   local master = yes

#Security Settings <DO NOT CHANGE>
   security = user
   hosts allow = 128.192. 127.

#Use Encrypted passwords
   encrypt passwords = yes

#Unix password synching
 unix password sync = yes
 passwd program = /usr/bin/passwd %u
 passwd chat = *Enter*NEW*password* %nn *Reenter*NEW*password* %nn
*Passowrd*change*successful*

#Performance enhancement
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

#Support domain logons
   domain logons = yes

#User profile storage location
   logon path = \%Lprofiles%u
   browsable = yes
   writeable = yes

#Specify a generic logon script for all users
#this is a relative **DOS** path to the [netlogon] share
   logon script = scripts%u.bat

#Necessary share for domain controller
[netlogon]
   path = /etc/samba/netlogon
   locking = no
   public = no
   browsable = yes
   writeable = no
   write list = @adm

<SNIP>

Return-Path: <Volker.Lendecke at SerNet.DE>
Delivered-To: samba-ntdom at us5.samba.org
Received: from mail.SerNet.DE (mail.SerNet.DE [193.159.217.66]) by
  lists.samba.org (Postfix) with ESMTP id 5BEF4560A for
  <samba-ntdom at us5.samba.org>; Fri, 10 Aug 2001 08:15:56 -0700 (PDT)
Received: from intern.SerNet.DE by mail.SerNet.DE with esmtp (Exim 2.12
  #1) id 15VE50-0002z7-00; Fri, 10 Aug 2001 17:20:06 +0200
Received: by intern.SerNet.DE id 15VE4z-0008KY-00; Fri, 10 Aug 2001
  17:20:05 +0200
Date: Fri, 10 Aug 2001 17:20:05 +0200
From: Volker Lendecke <Volker.Lendecke at SerNet.DE>
To: "Michels, Gustavo [EES/BR]" <gustavo.michels at emersonenergy.com>
Cc: samba-ntdom at us5.samba.org
Subject: Re: share name length limit?
Reply-To: Volker.Lendecke at SerNet.DE
References: <7F0147C496F3D411813C0002B32BF1CCF99F5D at eesekkex001.kkekant.
  ericsson.se>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
User-Agent: Mutt/1.2.4i
In-Reply-To: <7F0147C496F3D411813C0002B32BF1CCF99F5D at eesekkex001.kkekant
  . ericsson.se>; from gustavo.michels at emersonenergy.com on Fri, Aug 10,
  2001 at 02:12:06PM +0100
Message-Id: <E15VE4z-0008KY-00 at intern.SerNet.DE>
Organization: Service Network GmbH, Goettingen, Germany
X-Converted-To-Plain-Text: from multipart/signed by demime 0.98b
X-Converted-To-Plain-Text: Alternative section used was text/plain
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

On Fri, Aug 10, 2001 at 02:12:06PM +0100, Michels, Gustavo [EES/BR] wrote:
> No, there's no such limitation. This problem only occurs if you are
> accessing from old clients (like msdos) that do not support filenames longer
> than 8 chars.

In theory, there's no limitation. In practice, the limit is 12 chars due to a
bug in the NT redirector. This will go away once Samba has been converted to
unicode.

Volker

[demime 0.98b removed an attachment of type application/pgp-signature]

Return-Path: <aalang at rutgersinsurance.com>
Delivered-To: samba-ntdom at samba.org
Received: from bush.rutgersinsurance.com (rutgersinsurance.com
  [38.138.71.194]) by lists.samba.org (Postfix) with ESMTP id 3D7EC55E2
  for <samba-ntdom at samba.org>; Fri, 10 Aug 2001 08:19:11 -0700 (PDT)
Received: from nj012 ([10.10.10.51]) by bush.rutgersinsurance.com
  (8.9.3/8.9.3) with SMTP id LAA31028 for <samba-ntdom at samba.org>; Fri,
  10 Aug 2001 11:25:53 -0400
Message-ID: <001101c121b0$30cbae20$330a0a0a at rutgersinsurance.com>
From: "Adam Lang" <aalang at rutgersinsurance.com>
To: "Samba" <samba-ntdom at samba.org>
Subject: Samba 2.2.0 won't accept logons
Date: Fri, 10 Aug 2001 11:21:55 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

I am setting up a logon server for Win98 machines.  This is what I have for
my smb.conf so far:

# Global parameters
[global]
 workgroup = CHERRY_HILL
 netbios name = CARTER
 encrypt passwords = Yes
 domain logons = Yes
 domain master = True
 wins support = Yes

[homes]
 read only = No


I can browse without any problems.  I log off and try to login to a domian
server and it says there is not one available.  The following is in my
log.nmbd file:

[2001/08/10 10:52:55, 0]
nmbd/nmbd_logonnames.c:become_logon_server_success(116)
  become_logon_server_success: Samba is now a logon server for workgroup
WORKGROUP on subnet UNI
CAST_SUBNET

Anyone have any clues or what elese I can do to try to test what the problem
is?

Adam Lang
Systems Engineer
Rutgers Casualty Insurance Company
http://www.rutgersinsurance.com

Return-Path: <aalang at rutgersinsurance.com>
Delivered-To: samba-ntdom at samba.org
Received: from bush.rutgersinsurance.com (rutgersinsurance.com
  [38.138.71.194]) by lists.samba.org (Postfix) with ESMTP id 2F35F561F
  for <samba-ntdom at samba.org>; Fri, 10 Aug 2001 08:40:52 -0700 (PDT)
Received: from nj012 ([10.10.10.51]) by bush.rutgersinsurance.com
  (8.9.3/8.9.3) with SMTP id LAA31160 for <samba-ntdom at samba.org>; Fri,
  10 Aug 2001 11:47:34 -0400
Message-ID: <000f01c121b3$382b29e0$330a0a0a at rutgersinsurance.com>
From: "Adam Lang" <aalang at rutgersinsurance.com>
To: "Samba" <samba-ntdom at samba.org>
References: <001101c121b0$30cbae20$330a0a0a at rutgersinsurance.com>
Subject: Re: Samba 2.2.0 won't accept logons
Date: Fri, 10 Aug 2001 11:43:36 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

Nevermind... stupid me was restarting smbd but not nmbd.

Adam Lang
Systems Engineer
Rutgers Casualty Insurance Company
http://www.rutgersinsurance.com
----- Original Message -----
From: "Adam Lang" <aalang at rutgersinsurance.com>
To: "Samba" <samba-ntdom at samba.org>
Sent: Friday, August 10, 2001 11:21 AM
Subject: Samba 2.2.0 won't accept logons


> I am setting up a logon server for Win98 machines.  This is what I have
for
> my smb.conf so far:
>
> # Global parameters
> [global]
>  workgroup = CHERRY_HILL
>  netbios name = CARTER
>  encrypt passwords = Yes
>  domain logons = Yes
>  domain master = True
>  wins support = Yes
>
> [homes]
>  read only = No
>
>
> I can browse without any problems.  I log off and try to login to a domian
> server and it says there is not one available.  The following is in my
> log.nmbd file:
>
> [2001/08/10 10:52:55, 0]
> nmbd/nmbd_logonnames.c:become_logon_server_success(116)
>   become_logon_server_success: Samba is now a logon server for workgroup
> WORKGROUP on subnet UNI
> CAST_SUBNET
>
> Anyone have any clues or what elese I can do to try to test what the
problem
> is?
>
> Adam Lang
> Systems Engineer
> Rutgers Casualty Insurance Company
> http://www.rutgersinsurance.com

Return-Path: <Bill.Smith at jhuapl.edu>
Delivered-To: samba-ntdom at lists.samba.org
Received: from aples1.jhuapl.edu (aples1.jhuapl.edu [128.244.26.85]) by
  lists.samba.org (Postfix) with ESMTP id C812F4B12 for
  <samba-ntdom at lists.samba.org>; Fri, 10 Aug 2001 09:22:16 -0700 (PDT)
Received: by aples1.jhuapl.edu with Internet Mail Service (5.5.2653.19)
  id <QGQVWQB6>; Fri, 10 Aug 2001 12:29:51 -0400
Message-ID: <B07BB447BEDED411A49D0008C7E691E22059B4 at aples3.jhuapl.edu>
From: "Smith, William E. (Bill), Jr." <Bill.Smith at jhuapl.edu>
To: "'samba-ntdom at lists.samba.org'" <samba-ntdom at lists.samba.org>
Subject: Problems Authenticating to NT Domain
Date: Fri, 10 Aug 2001 12:28:12 -0400
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain; charset="us-ascii"
X-Converted-To-Plain-Text: from multipart/alternative by demime 0.98b
X-Converted-To-Plain-Text: Alternative section used was text/plain
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

I've setup my Samba server to use the password server option and put in the
netbios name of the DC that authenticates.  However, that is failing with
the errors I'm seeing below.  The NT domain I have my samba server in is a
resource domain but I have to authenticate to a DC in another domain.  Given
the error I'm guessing perhaps I need to have a machine account added in the
domain doing the authentication? If my guess happens to be correct is there
anything else that needs to be done besides adding that account?

Thanks,

Bill



[2001/08/10 11:56:21, 0] rpc_client/cli_netlogon.c:cli_net_auth2(160)
  cli_net_auth2: Error NT_STATUS_NO_TRUST_SAM_ACCOUNT
[2001/08/10 11:56:21, 0] rpc_client/cli_login.c:cli_nt_setup_creds(71)
  cli_nt_setup_creds: auth2 challenge failed
[2001/08/10 11:56:21, 0]
smbd/password.c:connect_to_domain_password_server(1380)
  connect_to_domain_password_server: unable to setup the PDC credentials to
machine JHUAPL-DC2. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT.
[2001/08/10 11:56:21, 0] smbd/password.c:domain_client_validate(1596)
  domain_client_validate: Domain password server not available.
[2001/08/10 11:56:21, 0] rpc_client/cli_netlogon.c:cli_net_auth2(160)
  cli_net_auth2: Error NT_STATUS_NO_TRUST_SAM_ACCOUNT
[2001/08/10 11:56:21, 0] rpc_client/cli_login.c:cli_nt_setup_creds(71)
  cli_nt_setup_creds: auth2 challenge failed
[2001/08/10 11:56:21, 0]
smbd/password.c:connect_to_domain_password_server(1380)
  connect_to_domain_password_server: unable to setup the PDC credentials to
machine JHUAPL-DC2. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT.
[2001/08/10 11:56:21, 0] smbd/password.c:domain_client_validate(1596)
  domain_client_validate: Domain password server not available.
[2001/08/10 11:56:22, 0] rpc_client/cli_netlogon.c:cli_net_auth2(160)
  cli_net_auth2: Error NT_STATUS_NO_TRUST_SAM_ACCOUNT
[2001/08/10 11:56:22, 0] rpc_client/cli_login.c:cli_nt_setup_creds(71)
  cli_nt_setup_creds: auth2 challenge failed
[2001/08/10 11:56:22, 0]
smbd/password.c:connect_to_domain_password_server(1380)
  connect_to_domain_password_server: unable to setup the PDC credentials to
machine JHUAPL-DC2. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT.
[2001/08/10 11:56:22, 0] smbd/password.c:domain_client_validate(1596)
  domain_client_validate: Domain password server not available.
[2001/08/10 11:56:22, 0] rpc_client/cli_netlogon.c:cli_net_auth2(160)
  cli_net_auth2: Error NT_STATUS_NO_TRUST_SAM_ACCOUNT
[2001/08/10 11:56:22, 0] rpc_client/cli_login.c:cli_nt_setup_creds(71)
  cli_nt_setup_creds: auth2 challenge failed
[2001/08/10 11:56:22, 0]
smbd/password.c:connect_to_domain_password_server(1380)
  connect_to_domain_password_server: unable to setup the PDC credentials to
machine JHUAPL-DC2. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT.
[2001/08/10 11:56:22, 0] smbd/password.c:domain_client_validate(1596)
  domain_client_validate: Domain password server not available.
[2001/08/10 11:56:30, 0] rpc_client/cli_netlogon.c:cli_net_auth2(160)
  cli_net_auth2: Error NT_STATUS_NO_TRUST_SAM_ACCOUNT
[2001/08/10 11:56:30, 0] rpc_client/cli_login.c:cli_nt_setup_creds(71)
  cli_nt_setup_creds: auth2 challenge failed
[2001/08/10 11:56:30, 0]
smbd/password.c:connect_to_domain_password_server(1380)
  connect_to_domain_password_server: unable to setup the PDC credentials to
machine JHUAPL-DC2. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT.
[2001/08/10 11:56:30, 0] smbd/password.c:domain_client_validate(1596)
  domain_client_validate: Domain password server not available.
[2001/08/10 11:56:36, 0] rpc_client/cli_netlogon.c:cli_net_auth2(160)
  cli_net_auth2: Error NT_STATUS_NO_TRUST_SAM_ACCOUNT
[2001/08/10 11:56:36, 0] rpc_client/cli_login.c:cli_nt_setup_creds(71)
  cli_nt_setup_creds: auth2 challenge failed
[2001/08/10 11:56:36, 0]
smbd/password.c:connect_to_domain_password_server(1380)
  connect_to_domain_password_server: unable to setup the PDC credentials to
machine JHUAPL-DC2. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT.
[2001/08/10 11:56:36, 0] smbd/password.c:domain_client_validate(1596)
  domain_client_validate: Domain password server not available.

Return-Path: <idra at samba.org>
Delivered-To: samba-ntdom at us5.samba.org
Received: by lists.samba.org (Postfix, from userid 1120) id BA4E44BC0;
  Fri, 10 Aug 2001 09:26:48 -0700 (PDT)
Date: Fri, 10 Aug 2001 09:26:48 -0700
To: "Michels, Gustavo [EES/BR]" <gustavo.michels at emersonenergy.com>
Cc: samba-ntdom at us5.samba.org
Subject: Re: share name length limit?
Message-ID: <20010810092647.A5549 at va.samba.org>
References: <7F0147C496F3D411813C0002B32BF1CCF99F5D at eesekkex001.kkekant.
  ericsson.se>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <7F0147C496F3D411813C0002B32BF1CCF99F5D at eesekkex001.kkekant
  . ericsson.se>; from gustavo.michels at emersonenergy.com on Fri, Aug 10,
  2001 at 02:12:06PM +0100
From: idra at samba.org (Simo Sorce)
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

Sharenames are limited to 12 chars for NT and possibly win9x clients until we
switch to unicode on the wire (yet working in HEAD development branch)
W2K seem not to be affected.

On Fri, Aug 10, 2001 at 02:12:06PM +0100, Michels, Gustavo [EES/BR] wrote:
> No, there's no such limitation. This problem only occurs if you are
> accessing from old clients (like msdos) that do not support filenames longer
> than 8 chars.
> 
> Maybe if you put your smb.conf here, you could get more help.
> 
> Cheers
> Gustavo
> 
> -----Original Message-----
> From: bernie doyle [mailto:bernie at red.co.uk] 
> Sent: sexta-feira, 10 de agosto de 2001 10:01
> To: samba-ntdom at us5.samba.org
> Subject: share name length limit?
> 
> 
> Hi
> 
> Sorry if I am missing something very simple here.
> 
> I appear to be having trouble accessing share names greater than 10
> characters.
> 
> I am running Samba 2.2.03a on RH-7
> 
> Is this a known limitation on the length of a samba share name or do I have
> a config problem.
> 
> Many thanks in advance
> bd

-- 
Simo Sorce       idra at samba.org
-------------------------------
Samba Team http://www.samba.org

Return-Path: <jstorey at netmpact.com>
Delivered-To: samba-ntdom at lists.samba.org
Received: from mail05a.webhosting-verizon.net
  (mail08.webhosting-verizon.net [209.238.3.57]) by lists.samba.org
  (Postfix) with SMTP id 1607E5331 for <samba-ntdom at lists.samba.org>;
  Fri, 10 Aug 2001 11:13:17 -0700 (PDT)
Received: from www.netmpact.com (209.238.5.11) by
  mail08.webhosting-verizon.net (RS ver 1.0.60s) with SMTP id 212626246;
  Fri, 10 Aug 2001 14:10:39 -0400 (EDT)
From: "John Storey" <jstorey at netmpact.com>
To: "'Tim Farrell'" <TFarrell at gablelaw.com>,
  <samba-ntdom at lists.samba.org>
Subject: RE: Specified User does not exist!
Date: Fri, 10 Aug 2001 10:41:24 -0700
Message-ID: <000a01c121c3$b02b4690$6501a8c0 at jstoreynotebook>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook, Build 10.0.2616
In-Reply-To: <sb7266fb.040 at gablelaw.com>
X-Loop-Detect: 1
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

Tim,

	I just overcame the exact same problem. With me, there had been
an unclean de-install of Samba 2.0.7 which messed things up. But some of
the suggestions I got were:

	* Try changing to a totally new workgroup, re-booting NT,
		and changing back to your domain

	* Make sure that you have done
			smbpasswd -a root
	  and log in as root when the W2K box asks for a valid 
	  account. This does not have to be
	  the same password as your real root account.

	* Try changing your domain name so that if it has an odd
	  number of letters, it now has an even number, and visa-versa

	* Make sure that everytime smb.conf is changed you kill and
	  restart both smbd and nmbd

Hope something in that list helps. My W2K box uses Samba 2.2.1a as a PDC
quite nicely now.

John


-----Original Message-----
From: samba-ntdom-admin at lists.samba.org
[mailto:samba-ntdom-admin at lists.samba.org] On Behalf Of Tim Farrell
Sent: Thursday, August 09, 2001 8:33 AM
To: samba-ntdom at lists.samba.org
Subject: Specified User does not exist!

System specs:  Debian 2.2 (i386),  Samba 2.2.1a (compiled from source)

I can't seem to get my W2k user to login.  The HOWTO is not incredibly
clear
as to how to do the autoadd feature.  As best I can tell, it should add
the
machine name automatically whenever I try to join the domain.  This does
not
work by giving me that "Specified User does not exist!"

I get the same error whenever I set up the accounts manually.  I have a
machine$ and user accounts set up in both passwd(shadow) and smbpasswd.

Should there be any user specific settings in smb.conf set for either
user?
Grr, this is frustrating.

Thanks,


Timothy Farrell
PC Support Technician
Gable & Gotwals
1100 Oneok Plaza
100 W. 5th Street
Tulsa, OK 74103

Return-Path: <armin at cogidata.com>
Delivered-To: samba-ntdom at lists.samba.org
Received: from linux.cogidata.com (www.cogidata.com [195.230.42.130]) by
  lists.samba.org (Postfix) with ESMTP id E7F49415D for
  <samba-ntdom at lists.samba.org>; Sat, 11 Aug 2001 04:10:04 -0700 (PDT)
Received: from armin-f.fuerst.home (cm.kor.3284832703.kabelnet.net
  [195.202.145.191]) by linux.cogidata.com (8.11.4/8.11.4) with ESMTP id
  f7BBEDS20693 for <samba-ntdom at lists.samba.org>; Sat, 11 Aug 2001
  13:14:13 +0200
Date: Sat, 11 Aug 2001 13:14:37 +0200 (W. Europe Daylight Time)
From: Armin Fuerst <armin at cogidata.com>
To: <samba-ntdom at lists.samba.org>
Subject: samba 2.2.1a as pdc for nt4/sp6a
Message-ID: <Pine.WNT.4.33.0108111305180.114-100000 at armin-f.fuerst.home>
X-X-Sender: armin at newton.fuerst.home
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

hi!

i recently upgraded from samba 2.0.7 to 2.2.1a because i read it works as
pdc for nt wks. 2.0.7 was configured and running as pdc for win9x. the
upgrade seems successful, i made several changes according to
Samba-PDC-HOWTO.html. the nt system successfully joined the domain, the
computer account was created automatically. (the computer-account was
named in small letters, i expected it as capital letters, but i assume
this is normal...)

my problem now is, that i cannot login to the system. i get the message:

"The system cannot log you on to this domain because the system's computer
account in its primary domain is missing or the password on that account
is incorrect."

in /etc/shadow, there is certainly an invalid password set ("!"), in
smbpasswd there seems to be a valid password.

when i log in with local authentification on to winnt, i can access the
share-names without any problems.
i'm using:
winnt wks 4.0, sp6a
linux slackware with samba 2.2.1a

what am i doing wrong?

many thanks!

armin

Return-Path: <bcaudle at hotmail.com>
Delivered-To: samba-ntdom at lists.samba.org
Received: from hotmail.com (f115.law10.hotmail.com [64.4.15.115]) by
  lists.samba.org (Postfix) with ESMTP id 0250F417D for
  <samba-ntdom at lists.samba.org>; Sat, 11 Aug 2001 07:21:45 -0700 (PDT)
Received: from mail pickup service by hotmail.com with Microsoft
  SMTPSVC; Sat, 11 Aug 2001 07:25:53 -0700
Received: from 64.192.99.49 by lw10fd.law10.hotmail.msn.com with HTTP;
  Sat, 11 Aug 2001 14:25:52 GMT
X-Originating-IP: [64.192.99.49]
Reply-To: bcaudle at hotmail.com
From: "Brandon Caudle" <bcaudle at hotmail.com>
To: samba-ntdom at lists.samba.org
Subject: Samba 2.2.1a Not Working
Date: Sat, 11 Aug 2001 10:25:52 -0400
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
Message-ID: <F115NXRPmcarcR4ZDgC00004c18 at hotmail.com>
X-OriginalArrivalTime: 11 Aug 2001 14:25:53.0031 (UTC)
  FILETIME=[86BDA970:01C12271]
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

Hello Everyone,

I am currently running (or trying at least) 2.2.1a but I have a couple of 
problems.

Ok I setup the computer in my /etc/passwd file

themaster$:x:517:100::/dev/null:/bin/false

Is that correct? 100 = Users Group

Ok I setup the computer in smbpassed file with the command

smbpasswd -a -m themaster

themaster$:517:35852276ECC0BE7F8963805A19B0ED49:0808AA16382CB00732CF2D8B1D4165B3:[W 
          ]:LCT-3B75D69E:

Is that correct?

Ok and in swat I enabled the root user after i added him.

So i added the computer to the GOLF domain successfully, rebooted and tryed 
to login as root but it didn't work! So i went in  to 2000 to  add the local 
user root and when I did in the users and passwords and it says on all the 
users domain = themaster but were only running 2000 Pro, does it do this on 
any one else?

Thanks

Brandon Caudle
--------------
15yr Old Avid Unix User (HP-UX,FreeBSD,Linux)
Larkhaven Golf Course
Charlotte, NC

"There cannot be a crisis next week. My schedule is already full." -- Henry 
Kissinger



_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

Return-Path: <nic at plumtree.co.nz>
Delivered-To: samba-ntdom at lists.samba.org
Received: from volcano.plumtree.co.nz
  (203-79-82-83.adsl-wns.paradise.net.nz [203.79.82.83]) by
  lists.samba.org (Postfix) with SMTP id D717B434B for
  <samba-ntdom at lists.samba.org>; Sun, 12 Aug 2001 03:24:18 -0700 (PDT)
Received: (qmail 28456 invoked by uid 1000); 12 Aug 2001 10:28:21 -0000
Date: Sun, 12 Aug 2001 22:28:21 +1200
From: Nicholas Lee <nj.lee at plumtree.co.nz>
To: samba-ntdom at lists.samba.org
Subject: Samba PDC 2.2.1 and Debian:  Assuming EUID problem?
Message-ID: <20010812222820.B1501 at cone.kiwa.co.nz>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

While trying to get samba working as a PDC on Debian potato linux 2.2.19
with 2.2.1a (I back ported it from sid) I got this basic problem:

[nic at woodcut:/etc/samba] smbclient -L //woodcut -U root 
params.c:Parameter() - Ignoring badly formed line in configuration file:
[...]
added interface ip=192.168.xx.xx bcast=192.168.xx.xxx nmask=255.255.xxx.xxx
Password: 
Domain=[KPAC] OS=[Unix] Server=[Samba 2.2.1a]
tree connect failed: ERRSRV - ERRbadpw (Bad password - name/password pair in a Tree Connect or Session Setup are invalid.)


Even though root was in the smbpasswd file, I was getting the error when
trying to auto add machine trust accounts: "Network password invalid..."
or something similar. This is with the auto useradd script config option
added to smb.conf

So I change the owner:group of smbpasswd to the admin user from root and
everything seemed to work.  (I assume that since root can rw anything
that it doesn't matter from that prepexive.) 


The error I was getting in smbd.log was:
[2001/08/12 20:58:05, 0] smbd/service.c:make_connection(550)
  Can't become connected user!

It is running as root:
[nic at woodcut:/etc/samba] ps awxu | grep mbd
root     29280  0.0  0.2  2308 1112 ?        S    22:07   0:00 /usr/sbin/nmbd -D
root     29285  0.0  0.2  3128 1100 ?        S    22:07   0:00 /usr/sbin/smbd -D




Anyway few questions.

i) Is this setup going to cause a long term problems?  (I sort of prefer not
have root in smbpasswd anyway.)

ii) Will this stuff up the DOMAIN setup at all?


iii)  Seems like this might be a bug in debians setup, the smbd process
not being able to assume 'root'  permissions.  Is this an correct
assumption and what is the likely config error.   (Then I can file a bug
against samba in debian if nessary.)

Note: I guess this report should probably go in samba at samba.org rather
than here, but its late and I'm tired. ;)  Plus I expect this is ONLY a
problem when trying to get a samba PDC going.


-- 
Nicholas Lee - nj.lee at plumtree.co dot nz, somewhere on the fish Maui caught.

    "If it was easy, someone has probably done it already."

Return-Path: <sigalmal at hotmail.com>
Delivered-To: samba-ntdom at lists.samba.org
Received: from hotmail.com (f29.law14.hotmail.com [64.4.21.29]) by
  lists.samba.org (Postfix) with ESMTP id 1D83A4172 for
  <samba-ntdom at lists.samba.org>; Sun, 12 Aug 2001 04:06:51 -0700 (PDT)
Received: from mail pickup service by hotmail.com with Microsoft
  SMTPSVC; Sun, 12 Aug 2001 04:10:56 -0700
Received: from 212.143.112.85 by lw14fd.law14.hotmail.msn.com with HTTP;
  Sun, 12 Aug 2001 11:10:55 GMT
X-Originating-IP: [212.143.112.85]
From: "Sigal Malkin" <sigalmal at hotmail.com>
To: samba-ntdom at lists.samba.org
Subject: Supporting users enumeration on Samba
Date: Sun, 12 Aug 2001 11:10:55 
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
Message-ID: <F29FOAmEaJswFCHOzyf0000488c at hotmail.com>
X-OriginalArrivalTime: 12 Aug 2001 11:10:56.0222 (UTC)
  FILETIME=[754FFFE0:01C1231F]
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

Hi,
I am trying to make Samba support user enumeration on a single
machine (and not a domain). The purpose is support the command "enum -U"
from Windows to a Samba server (getting user list). The problem is that 
"enum -U" needs to perform command 0x3E on samr pipe - and I don't have a 
clue how to handle this command.
Any suggestions??

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

Return-Path: <jackytsoi at msn.com>
Delivered-To: samba-ntdom at lists.samba.org
Received: from hotmail.com (f24.pav0.hotmail.com [64.4.32.208]) by
  lists.samba.org (Postfix) with ESMTP id EEC25423A for
  <samba-ntdom at lists.samba.org>; Sun, 12 Aug 2001 05:31:50 -0700 (PDT)
Received: from mail pickup service by hotmail.com with Microsoft
  SMTPSVC; Sun, 12 Aug 2001 05:35:55 -0700
Received: from 203.198.24.2 by pv0fd.pav0.hotmail.msn.com with HTTP;
  Sun, 12 Aug 2001 12:35:55 GMT
X-Originating-IP: [203.198.24.2]
From: "Jacky Tsoi" <jackytsoi at msn.com>
To: samba-ntdom at lists.samba.org
Subject: Samba 2.2.1 Domain groups
Date: Sun, 12 Aug 2001 20:35:55 +0800
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
Message-ID: <F24NzPZrIkyPzGNsokL00000862 at hotmail.com>
X-OriginalArrivalTime: 12 Aug 2001 12:35:55.0769 (UTC)
  FILETIME=[54E11E90:01C1232B]
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

Dear all,

I'd like to ask how can I use the groups in /etc/group on Windows 2000 which 
is currently logged on to the samba domain? I can see the groups using "net 
localgroup /domain" but I can't choose it when I set permission for files or 
do the group policy. My samba verion is 2.2.1a.

Best Regards,

Jacky

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

Return-Path: <wmmvdwee at hawedo.com>
Delivered-To: samba-ntdom at lists.samba.org
Received: from smtp03.wxs.nl (smtp03.wxs.nl [195.121.6.37]) by
  lists.samba.org (Postfix) with ESMTP id 5D8D84402 for
  <samba-ntdom at lists.samba.org>; Sun, 12 Aug 2001 08:37:54 -0700 (PDT)
Received: from wil ([195.121.120.189]) by smtp03.wxs.nl (Netscape
  Messaging Server 4.05) with SMTP id GHYOXX00.1WZ for
  <samba-ntdom at lists.samba.org>; Sun, 12 Aug 2001 17:41:57 +0200 
Message-ID: <006c01c12345$26045be0$0401a8c0 at wil>
From: "wil van der wee" <wmmvdwee at hawedo.com>
To: <samba-ntdom at lists.samba.org>
Subject: win2000 problem
Date: Sun, 12 Aug 2001 17:40:33 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
X-Converted-To-Plain-Text: from multipart/alternative by demime 0.98b
X-Converted-To-Plain-Text: Alternative section used was text/plain
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

Hi All,

I'am running a Linux server with samba 2.2 as a Domain Controller. I try to
connect a win2000
pc with the samba DC. I followed the instruction outlined in the samba docs.
When I try to login
the win2000 says " the procedure number is out of range"

I'am not sure that I have setup Win2000 correctly, like wins and dns etc.
under network properties. I only used the ip address and subnet mask.

Can somebody tell me what this means, and what I did wrong.

Thanks for any help or suggestions.

Rgds

Wil

Return-Path: <s.a.hardy at connectux.com>
Delivered-To: samba-ntdom at lists.samba.org
Received: from griffin.sio2.nl (griffin.sio2.nl [212.204.249.201]) by
  lists.samba.org (Postfix) with SMTP id B3BAE4153 for
  <samba-ntdom at lists.samba.org>; Sun, 12 Aug 2001 10:45:57 -0700 (PDT)
Received: (qmail 1455 invoked by uid 104); 12 Aug 2001 17:31:59 -0000
Received: from s.a.hardy at connectux.com by griffin with
  qmail-scanner-0.96 (uvscan: v4.1.40/v4152. . Clean. Processed in
  0.191981 secs); 12 Aug 2001 17:31:59 -0000
Received: from huurders.geodelft.nl (HELO shark) (145.3.1.48) by
  griffin.sio2.nl with SMTP; 12 Aug 2001 17:31:59 -0000
From: "Steve Hardy" <s.a.hardy at connectux.com>
To: <samba-ntdom at lists.samba.org>
Subject: NT Domain + postscript
Date: Sun, 12 Aug 2001 19:47:36 +0200
Message-ID: <NEBBJBDAMLAOPMEDFICJEEDHCGAA.s.a.hardy at connectux.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

Hi,

I've been having extremely strange effects with printing from w2k to a samba
2.2.1a server; when the win2k machine is in "workgroup" mode, it works
perfectly, but when the system is added to the domain (the samba server is
the PDC), printing suddenly breaks (HP2100) .. the printer rejects the print
job as being bad postscript data. However, when setting the driver to PCL
(in w2k), it suddenly starts working again ... could it be that the SPOOLSS
system is adding some weird characters or something along the way ?

I have also experienced the printsystem completely breaking (refreshes in
the spooler window in w2k generate errors in the logfiles .. seem to
remember messages about some kind of stack being full) which require a
restart for smbd to fix ... can't reproduce it at the moment though ....

grtz,
	Steve

Return-Path: <fred at arkansaswebs.com>
Delivered-To: samba-ntdom at lists.samba.org
Received: from srvr201.castmark.com (unknown [209.38.98.99]) by
  lists.samba.org (Postfix) with ESMTP id C95644483 for
  <samba-ntdom at lists.samba.org>; Sun, 12 Aug 2001 14:38:29 -0700 (PDT)
Received: from bits.linuxball (bits [208.161.142.154]) by
  srvr201.castmark.com (8.11.0/8.11.0) with SMTP id f7CLhG409118 for
  <samba-ntdom at lists.samba.org>; Sun, 12 Aug 2001 16:43:16 -0500
Content-Type: text/plain; charset="iso-8859-1"
From: Fred Jackson <fred at arkansaswebs.com>
To: samba-ntdom at lists.samba.org
Subject: Re: Samba PDC 2.2.1 and Debian: Assuming EUID problem?
Date: Sun, 12 Aug 2001 16:40:47 -0500
X-Mailer: KMail [version 1.2]
References: <20010812222820.B1501 at cone.kiwa.co.nz>
In-Reply-To: <20010812222820.B1501 at cone.kiwa.co.nz>
MIME-Version: 1.0
Message-Id: <01081216404701.26558 at bits.linuxball>
Content-Transfer-Encoding: 7bit
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

Have you added passwd entry for woodcut$   ?
woodcut$:x:508:508::/dev/null:/bin/false

be sure that the UID and GID are unique ( i added a user with 
"adduser <machine_name>" and the manually edit the file to change the 
shell and directory and add the $ to the username.


is the machine "woodcut" a member of the domain?
eg: on the PDC server have you: "smbpasswd -a -m woodcut"    ?

Hope this helps, if not mail me and I'll include my conf files for 
PDC and the Clients.

Fred



also:
is the connecting client a win9x PC?
if any clients are win9x or NT then you must have 
restrict anonymous = No

in the PDC's conf file.

_________________________________ 
On Sunday 12 August 2001 05:28 am, Nicholas Lee wrote:
> While trying to get samba working as a PDC on Debian potato linux 
2.2.19
> with 2.2.1a (I back ported it from sid) I got this basic problem:
> 
> [nic at woodcut:/etc/samba] smbclient -L //woodcut -U root 
> params.c:Parameter() - Ignoring badly formed line in configuration 
file:
> [...]
> added interface ip=192.168.xx.xx bcast=192.168.xx.xxx 
nmask=255.255.xxx.xxx
> Password: 
> Domain=[KPAC] OS=[Unix] Server=[Samba 2.2.1a]
> tree connect failed: ERRSRV - ERRbadpw (Bad password - 
name/password pair in a Tree Connect or Session Setup are invalid.)
> 
> 
> Even though root was in the smbpasswd file, I was getting the error 
when
> trying to auto add machine trust accounts: "Network password 
invalid..."
> or something similar. This is with the auto useradd script config 
option
> added to smb.conf
> 
> So I change the owner:group of smbpasswd to the admin user from 
root and
> everything seemed to work.  (I assume that since root can rw 
anything
> that it doesn't matter from that prepexive.) 
> 
> 
> The error I was getting in smbd.log was:
> [2001/08/12 20:58:05, 0] smbd/service.c:make_connection(550)
>   Can't become connected user!
> 
> It is running as root:
> [nic at woodcut:/etc/samba] ps awxu | grep mbd
> root     29280  0.0  0.2  2308 1112 ?        S    22:07   0:00 
/usr/sbin/nmbd -D
> root     29285  0.0  0.2  3128 1100 ?        S    22:07   0:00 
/usr/sbin/smbd -D
> 
> 
> 
> 
> Anyway few questions.
> 
> i) Is this setup going to cause a long term problems?  (I sort of 
prefer not
> have root in smbpasswd anyway.)
> 
> ii) Will this stuff up the DOMAIN setup at all?
> 
> 
> iii)  Seems like this might be a bug in debians setup, the smbd 
process
> not being able to assume 'root'  permissions.  Is this an correct
> assumption and what is the likely config error.   (Then I can file 
a bug
> against samba in debian if nessary.)
> 
> Note: I guess this report should probably go in samba at samba.org 
rather
> than here, but its late and I'm tired. ;)  Plus I expect this is 
ONLY a
> problem when trying to get a samba PDC going.
> 
> 
> -- 
> Nicholas Lee - nj.lee at plumtree.co dot nz, somewhere on the fish 
Maui caught.
> 
>     "If it was easy, someone has probably done it already."
> 

Return-Path: <samj at samj.net>
Delivered-To: samba-ntdom at lists.samba.org
Received: from retina.ranzco.edu (retina.ranzco.edu [198.142.14.177]) by
  lists.samba.org (Postfix) with SMTP id 07F1349DB for
  <samba-ntdom at lists.samba.org>; Sun, 12 Aug 2001 19:14:41 -0700 (PDT)
Received: (qmail 19994 invoked from network); 13 Aug 2001 02:18:42 -0000
Received: from unknown (HELO HYDRA) (192.168.0.2) by 192.168.0.1 with
  SMTP; 13 Aug 2001 02:18:42 -0000
Message-ID: <001e01c1239c$c2c909b0$b20e8ec6 at ranzco.edu>
From: "Sam Johnston" <samj at samj.net>
To: <samba-ntdom at lists.samba.org>
Subject: Installing print drivers from win2k
Date: Mon, 13 Aug 2001 12:05:54 +1000
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Mailer: Microsoft Outlook Express 5.50.4807.1700
X-Converted-To-Plain-Text: from multipart/alternative by demime 0.98b
X-Converted-To-Plain-Text: Alternative section used was text/plain
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

Hello all,

I've been busy rolling out samba 2.2 and have run into trouble with installing
drivers from win2k machines. I don't have any NT4 machines available at one
site and suspect that installing from NT4 may cause problems with Win2k
drivers. The error I get in Win2k when I select what platforms I want from the
'additional drivers' dialog is 'Unable to install the Intel, Windows NT 4.0 or
2000 driver. Operation could not be completed.'. On the samba side I get
smbd/service.c:make_connection(370) coudn't find service
::{2227a280-3aea-1069-a2de-08002b30309d}.

How do I work around this problem?

Sam

Return-Path: <xiuyuan at 263.net.cn>
Delivered-To: samba-ntdom at samba.org
Received: from bizmail.263.net.cn (unknown [210.78.128.66]) by
  lists.samba.org (Postfix) with ESMTP id 4067A4A63; Sun, 12 Aug 2001
  20:36:39 -0700 (PDT)
Received: from xiuyuan ([211.100.88.24]) by bizmail.263.net.cn
  (InterMail vK.4.03.03.00 201-232-128 license
  efc3979d4bb5eceb039ee53502770185) with ESMTP id
  <20010813034448.JYWM21467.bizmail at xiuyuan>; Mon, 13 Aug 2001 11:44:48
  +0800
Reply-To: xiuyuan <xiuyuan at 263.net.cn>
From: "xiuyuan" <xiuyuan at 263.net.cn>
To: "" <samba at samba.org>
Subject: business letter from Beijing, China
Date: Wed,13 °ËÔÂ 2001 11:42:07 +0800
X-Mailer: ½ð·æÓʼþȺ·¢ v2.4
Message-Id: <20010813034448.JYWM21467.bizmail at xiuyuan>
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

Dear Sir or Madam,
    This is a business letter from Beijing,China.I am apologetic if I disturb you.
    Credit Inquiry & Information will help all kinds of industry and commerce to make a successful deal with customer or partner.There are some sort of credit inquiry,they are: 
1/Consul or trade liaison man in any country; 
2/Chamber of Commerce or Bank;
3/Business Directory;
4/Commercial Enquiry Office.
    T&F,Commercial Enquiry Office,is providing all kinds of information about anyone trade and industry company in China. They are: registration of corporation, history of corporation, background of the legal person, financial statement, relations of banking, leading products, condition of manufacturing abilities and equipment, management of trademark as well as affiliates, and so on.
    T&F keeps in close contact and builds many co-operation relations with a lot of governments in China for ages,such as the Trade & Industry Administration Department of China,  Statistics Bureau, China national Economy Information Centre etc.There are many specialists of business economists, and investigating and administrative staffs constitute a special and all-round investigation channels by us. Believe me! 
   T&F will be provides a piece of accurate and credible investigation data, which you want about achieving nation-wide and comprehensive reference report forever!Please visit our Webster http://tangfeng.3322.net,write or e-mail to T&F promptly,if you are interested.And T&F shall be pleased to render you any further services.
#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=#=
Address: No.210, Building 2, Party School of Beijing Municipal Government Committee,

          No.6 Chegongzhuang Street,Xicheng District,

          Beijing, China.

Postal Code:100044

Fax: 86-10-6800-1452

Tel: 86-10-6800-1452

E-mail:cbph at cei.gov.cn

       xiuyuan at 263.net.cn
     

Return-Path: <s.a.hardy at connectux.com>
Delivered-To: samba-ntdom at lists.samba.org
Received: from griffin.sio2.nl (griffin.sio2.nl [212.204.249.201]) by
  lists.samba.org (Postfix) with SMTP id 57F784BED for
  <samba-ntdom at lists.samba.org>; Mon, 13 Aug 2001 01:01:42 -0700 (PDT)
Received: (qmail 3727 invoked by uid 104); 13 Aug 2001 07:47:33 -0000
Received: from s.a.hardy at connectux.com by griffin with
  qmail-scanner-0.96 (uvscan: v4.1.40/v4152. . Clean. Processed in
  0.130707 secs); 13 Aug 2001 07:47:33 -0000
Received: from huurders.geodelft.nl (HELO shark) (145.3.1.48) by
  griffin.sio2.nl with SMTP; 13 Aug 2001 07:47:33 -0000
From: "Steve Hardy" <s.a.hardy at connectux.com>
To: <samba-ntdom at lists.samba.org>
Subject: RE: Installing print drivers from win2k
Date: Mon, 13 Aug 2001 10:03:50 +0200
Message-ID: <NEBBJBDAMLAOPMEDFICJCEDMCGAA.s.a.hardy at connectux.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
In-Reply-To: <001e01c1239c$c2c909b0$b20e8ec6 at ranzco.edu>
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

I have found that some drivers will install (say the Apple Laserwriter
drivers) but others don't (like the very first Agfa driver)... ?

> -----Oorspronkelijk bericht-----
> Van: samba-ntdom-admin at lists.samba.org
> [mailto:samba-ntdom-admin at lists.samba.org]Namens Sam Johnston
> Verzonden: maandag 13 augustus 2001 4:06
> Aan: samba-ntdom at lists.samba.org
> Onderwerp: Installing print drivers from win2k
>
>
> Hello all,
>
> I've been busy rolling out samba 2.2 and have run into trouble
> with installing
> drivers from win2k machines. I don't have any NT4 machines
> available at one
> site and suspect that installing from NT4 may cause problems with Win2k
> drivers. The error I get in Win2k when I select what platforms I
> want from the
> 'additional drivers' dialog is 'Unable to install the Intel,
> Windows NT 4.0 or
> 2000 driver. Operation could not be completed.'. On the samba side I get
> smbd/service.c:make_connection(370) coudn't find service
> ::{2227a280-3aea-1069-a2de-08002b30309d}.
>
> How do I work around this problem?
>
> Sam
>

Return-Path: <mario.sanguineti at opensystems.com.au>
Delivered-To: samba-ntdom at lists.samba.org
Received: from opensystems.com.au (ns.opensystems.com.au [203.22.30.33])
  by lists.samba.org (Postfix) with ESMTP id 5734A419E for
  <samba-ntdom at lists.samba.org>; Mon, 13 Aug 2001 01:39:04 -0700 (PDT)
Received: by gateway.opensystems.com.au id <53761>; Mon, 13 Aug 2001
  18:44:42 +1000
Message-Id: <01Aug13.184442est.53761 at gateway.opensystems.com.au>
From: "Mario Sanguineti" <mario.sanguineti at opensystems.com.au>
To: <samba-ntdom at lists.samba.org>
Subject: NT Groups fom Linux
Date: Tue, 14 Aug 2001 04:41:14 +1000
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Mailer: Microsoft Outlook Express 4.72.3110.5
X-Converted-To-Plain-Text: from multipart/alternative by demime 0.98b
X-Converted-To-Plain-Text: Alternative section used was text/plain
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

I need to write code in C/C++ that authenticates users in groups on a NT
Domain from RedHat linux.
Basically my starting point has been the source code for smbclient:
"smbclient -L server -U username%password -W domain" works well for me.
My Problem is how to I include NT Groups ?
I need to either have it return the list of groups the User is in on the NT
Domain so I can check my list against it
OR have it pass the group with the username to the NT DOmain and return
success or failure !

Can some one give me a clue on how to resolve this ?
Mario

Return-Path: <idra at samba.org>
Delivered-To: samba-ntdom at lists.samba.org
Received: by lists.samba.org (Postfix, from userid 1120) id 269CA4BD6;
  Mon, 13 Aug 2001 01:50:18 -0700 (PDT)
Date: Mon, 13 Aug 2001 01:50:18 -0700
To: Mario Sanguineti <mario.sanguineti at opensystems.com.au>
Cc: samba-ntdom at lists.samba.org
Subject: Re: NT Groups fom Linux
Message-ID: <20010813015017.C2525 at va.samba.org>
References: <01Aug13.184442est.53761 at gateway.opensystems.com.au>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <01Aug13.184442est.53761 at gateway.opensystems.com.au>; from
  mario.sanguineti at opensystems.com.au on Tue, Aug 14, 2001 at 04:41:14AM
  +1000
From: idra at samba.org (Simo Sorce)
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

take a look at rpcclient

On Tue, Aug 14, 2001 at 04:41:14AM +1000, Mario Sanguineti wrote:
> I need to write code in C/C++ that authenticates users in groups on a NT
> Domain from RedHat linux.
> Basically my starting point has been the source code for smbclient:
> "smbclient -L server -U username%password -W domain" works well for me.
> My Problem is how to I include NT Groups ?
> I need to either have it return the list of groups the User is in on the NT
> Domain so I can check my list against it
> OR have it pass the group with the username to the NT DOmain and return
> success or failure !
> 
> Can some one give me a clue on how to resolve this ?
> Mario

-- 
Simo Sorce       idra at samba.org
-------------------------------
Samba Team http://www.samba.org

Return-Path: <jkur at Informatik.Uni-Bremen.DE>
Delivered-To: samba-ntdom at lists.samba.org
Received: from nmh.informatik.uni-bremen.de
  (nmh.informatik.uni-bremen.de [134.102.224.3]) by lists.samba.org
  (Postfix) with ESMTP id 7E42B4CED for <samba-ntdom at lists.samba.org>;
  Mon, 13 Aug 2001 01:54:27 -0700 (PDT)
Received: from x11.informatik.uni-bremen.de
  (IDENT:root at x11.informatik.uni-bremen.de [134.102.201.184]) by
  nmh.informatik.uni-bremen.de (8.10.1/8.10.1) with ESMTP id
  f7D8wBJ08071; Mon, 13 Aug 2001 10:58:11 +0200 (MEST)
Received: from localhost (jkur at localhost) by
  x11.informatik.uni-bremen.de (8.9.3/8.8.7) with ESMTP id KAA26736;
  Mon, 13 Aug 2001 10:58:27 +0200
X-Authentication-Warning: x11.informatik.uni-bremen.de: jkur owned
  process doing -bs
Date: Mon, 13 Aug 2001 10:58:27 +0200 (MEST)
From: =?ISO-8859-1?Q?J=F6rg_Kurlbaum?= <jkur at Informatik.Uni-Bremen.DE>
To: wil van der wee <wmmvdwee at hawedo.com>
Cc: <samba-ntdom at lists.samba.org>
Subject: Re: win2000 problem
In-Reply-To: <006c01c12345$26045be0$0401a8c0 at wil>
Message-ID: <Pine.LNX.4.33.0108131049170.26711-100000 at x11.informatik.uni
  -bremen.de>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

On Sun, 12 Aug 2001, wil van der wee wrote:

> Hi All,
>
> I'am running a Linux server with samba 2.2 as a Domain Controller. I try to
> connect a win2000
> pc with the samba DC. I followed the instruction outlined in the samba docs.
> When I try to login
> the win2000 says " the procedure number is out of range"
>
> I'am not sure that I have setup Win2000 correctly, like wins and dns etc.
> under network properties. I only used the ip address and subnet mask.
>
> Can somebody tell me what this means, and what I did wrong.
>
> Thanks for any help or suggestions.
>
> Rgds
>
> Wil
>

-- 
The problem is often dicussed here, but you cannot find it in the
Documentation.
First of all upgrade to the latest version of samba, wich should be 2.2.1a.
With win2000 you can create the account needed for samba "on the fly"
That for you need:
	- an entry for root in the smbpasswd
	- in smb.conf : add user script = useradd -g ntomain .... %U"
		(or something that would fit to your system. You can find
		some examples in the Documentation)

Then don't have an account for the machine you are trying to connect. Not in
the /etc/passwd and also not in smbpasswd.
Be sure you don't have a parameter like
invalid users = root,...
that won't work.
if you have an domain admin user, you can give it's login and password at
the prompt on the W2K Machine. (I'm not really sure but it is possible that
you need the same password for the root entry in smbpasswd and yout admin
user) you could also use the root account directly)
That's all. Don't get to frustated, i've been looking for a solution for
about two weeks.

Ciao Jvrg :-)

Return-Path: <s.a.hardy at connectux.com>
Delivered-To: samba-ntdom at lists.samba.org
Received: from griffin.sio2.nl (griffin.sio2.nl [212.204.249.201]) by
  lists.samba.org (Postfix) with SMTP id A369640C4 for
  <samba-ntdom at lists.samba.org>; Mon, 13 Aug 2001 02:16:40 -0700 (PDT)
Received: (qmail 4058 invoked by uid 104); 13 Aug 2001 09:02:29 -0000
Received: from s.a.hardy at connectux.com by griffin with
  qmail-scanner-0.96 (uvscan: v4.1.40/v4152. . Clean. Processed in
  2.543546 secs); 13 Aug 2001 09:02:29 -0000
Received: from huurders.geodelft.nl (HELO shark) (145.3.1.48) by
  griffin.sio2.nl with SMTP; 13 Aug 2001 09:02:26 -0000
From: "Steve Hardy" <s.a.hardy at connectux.com>
To: <samba-ntdom at lists.samba.org>
Subject: must be root user to add system to domain
Date: Mon, 13 Aug 2001 11:18:44 +0200
Message-ID: <NEBBJBDAMLAOPMEDFICJEEDNCGAA.s.a.hardy at connectux.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

Hi,

is there a technical reason why you *have* to have a smbpasswd entry for a
uid 0 user for adding machine accounts on-the-fly ? ie. why can't admin
users do it ? I presume this is because you always connect to IPC$ as the
user id and never with uid 0 ?

-===============================================-
  Steve Hardy           S.A.Hardy at connectux.com
  ConnecTUX                Simplifying Networks
-===============================================-

Return-Path: <jmcd at us.ibm.com>
Delivered-To: samba-ntdom at lists.samba.org
Received: from e31.bld.us.ibm.com (e31.co.us.ibm.com [32.97.110.129]) by
  lists.samba.org (Postfix) with ESMTP id 7868047C9 for
  <samba-ntdom at lists.samba.org>; Mon, 13 Aug 2001 06:17:37 -0700 (PDT)
Received: from westrelay02.boulder.ibm.com (westrelay02.boulder.ibm.com
  [9.99.140.23]) by e31.bld.us.ibm.com (8.9.3/8.9.3) with ESMTP id
  JAA22850; Mon, 13 Aug 2001 09:19:31 -0400
Received: from d03nm800.boulder.ibm.com (d03nm800.boulder.ibm.com
  [9.17.187.101]) by westrelay02.boulder.ibm.com (8.11.1m3/NCO v4.97.1)
  with ESMTP id f7DDLbu22198; Mon, 13 Aug 2001 07:21:37 -0600
Subject: Re: Supporting users enumeration on Samba
To: "Sigal Malkin" <sigalmal at hotmail.com>
Cc: samba-ntdom at lists.samba.org
X-Mailer: Lotus Notes Release 5.0  March 30, 1999
Message-ID: <OF869C098B.42FD6E20-ON85256AA7.00485307 at boulder.ibm.com>
From: "Jim McDonough" <jmcd at us.ibm.com>
Date: Mon, 13 Aug 2001 09:21:56 -0400
X-MIMETrack: Serialize by Router on D03NM800/03/M/IBM(Release 5.0.6
  |December 14, 2000) at 08/13/2001 07:21:57 AM
MIME-Version: 1.0
Content-type: text/plain; charset=us-ascii
Sender: samba-ntdom-admin at lists.samba.org
Errors-To: samba-ntdom-admin at lists.samba.org
X-BeenThere: samba-ntdom at lists.samba.org
X-Mailman-Version: 2.0beta6
Precedence: bulk
List-Help: <mailto:samba-ntdom-request at lists.samba.org?subject=help>
List-Post: <mailto:samba-ntdom at lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=subscribe>
List-Id: Using Samba with Windows NT domains <samba-ntdom.lists.samba.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/samba-ntdom>, <mailto:samba-ntdom-request at lists.samba.org?subject=unsubscribe>
List-Archive: http://lists.samba.org/pipermail/samba-ntdom/

Sigal Malkin wrote:
>I am trying to make Samba support user enumeration on a single
>machine (and not a domain). The purpose is support the command "enum -U"
>from Windows to a Samba server (getting user list). The problem is that
>"enum -U" needs to perform command 0x3E on samr pipe - and I don't have a
>clue how to handle this command.
>Any suggestions??


More information about the samba-ntdom mailing list