[Samba] Samba Errors with 3.0.21b on AIX -- please help
William Jojo
jojowil at hvcc.edu
Wed Mar 15 12:18:56 GMT 2006
----- Original Message -----
From: "Ray Gebbie" <Ray.Gebbie at fds.com>
To: <samba at lists.samba.org>
Sent: Tuesday, March 14, 2006 1:55 PM
Subject: Re: [Samba] Samba Errors with 3.0.21b on AIX -- please help
> I did not copy any of the files listed.
>
> I have the installations in 2 different locations. I only copied the
> smb.conf file. I then shutdown the old version and started up the new
> version. It would seem to me that the new version should create these
> files for itself. When installing a Samba version for the first time,
> these files would get created, so I would assume that they would also be
> created by the new version on my system.
>
> There are copies of secrets.tdb and account_policy.tdb in each
> installation, and they are different. winbind_idmap.tdb does not exist in
> either installation.
>
secrets.tdb holds the server's SID plus all information on trusts. Without
this you are not upgrading, you are creating a new DC which will in most
cases create a new SID (LDAP is an exception, it searches the tree in the
event of a missing secret.tdb) and has *no* external trusts established.
account_policy.tdb holds any information with respect to "net rpc rights"
commands you've used to grant Se* privileges to users/groups. So someone who
had SeMachineAccountPrivilege in that last version is lost in the upgrade.
> Should I replace the versions of the 2 files in the new installation with
> those in the old installation?
>
It would be advantageous.
Bill
> Thank you for the response.
>
> Ray Gebbie
> Federated Systems Group
> San Francisco, CA 94102
> 415-422-1662
>
>
>
>
> "William Jojo"
> <jojowil at hvcc.edu
> > To
> Sent by: <samba at lists.samba.org>, "Ray
> samba-bounces+ray Gebbie" <Ray.Gebbie at fds.com>
> .gebbie=fds.com at l cc
> ists.samba.org
> Subject
> Re: [Samba] Samba Errors with
> 03/14/2006 04:02 3.0.21b on AIX -- please help
> AM
>
>
>
>
>
>
>
>
>
>
> ----- Original Message -----
> From: "Ray Gebbie" <Ray.Gebbie at fds.com>
> To: <samba at lists.samba.org>
> Sent: Monday, March 13, 2006 5:37 PM
> Subject: Re: [Samba] Samba Errors with 3.0.21b on AIX -- please help
>
>
> > I guess there have not been any responses because I did not specifically
> > ask a question.
> >
> > Why would 3.0.4 work and 3.0.25b give indications that the system is not
> in
> > the domain? The configurations are the same.
> >
>
> How did you perform the migration?
>
> When you moved did you copy:
>
> private/secrets.tdb
> var/locks/account_policy.tdb
> var/locks/winbind_idmap.tdb
>
>
> These files are essential for domain SID and trusts, account privileges
and
> winbind mappings respectively.
>
>
> Cheers,
>
> Bill
>
>
> > Ray Gebbie
> > Federated Systems Group
> > San Francisco, CA 94102
> > 415-422-1662
> >
> >
> >
> >
> > Ray Gebbie
> > <Ray.Gebbie at fds.c
> > om>
> To
> > Sent by: "David Shapiro"
> > samba-bounces+ray <David.Shapiro at bcbsnc.com>,
> > .gebbie=fds.com at l samba at lists.samba.org
> > ists.samba.org
> cc
> >
> >
> Subject
> > 03/10/2006 09:32 Re: [Samba] Samba Errors with
> > AM 3.0.21b on AIX -- please help
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > Since 3.0.4 works, I am assumming that the system is in the domain.
> >
> > But the errors seem to indicate it isn't.
> >
> > Here is wbinfo:
> >
> > [<vobadm> mcom4:/opt/Samba/3.0.21b/bin] > ./wbinfo -u
> > Error looking up domain users
> > [<vobadm> mcom4:/opt/Samba/3.0.21b/bin] > ./wbinfo -g
> > Error looking up domain groups
> >
> > Ray Gebbie
> > Federated Systems Group
> > San Francisco, CA 94102
> > 415-422-1662
> >
> >
> >
> >
> > "David Shapiro"
> > <David.Shapiro at bc
> > bsnc.com>
> To
> > "Ray Gebbie" <Ray.Gebbie at fds.com>
> > 03/10/2006 07:28
> cc
> > AM
> >
> Subject
> > Re: [Samba] Samba Errors with
> > 3.0.21b on AIX -- please help
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > Does wbinfo -u/-g work for you?
> >
> > david
> >
> > David Shapiro
> > Unix Team Lead
> > 919-765-2011
> >
> > >>> Ray Gebbie <Ray.Gebbie at fds.com> 3/8/2006 11:42:14 AM >>>
> > There have been no responses yet for this. Perhaps I am not asking the
> > right questions. If there is something obvious that I am missing please
> > let me know, because we are unable to upgrade the way things are now.
> >
> > Thanks.
> >
> > Ray Gebbie
> > Federated Systems Group
> > San Francisco, CA 94102
> > 415-422-1662
> >
> >
> >
> >
> > Ray Gebbie
> > <Ray.Gebbie at fds.c
> > om>
> To
> > Sent by: samba at lists.samba.org
> > samba-bounces+ray
> cc
> > .gebbie=fds.com at l
> > ists.samba.org
> Subject
> > [Samba] Samba Errors with 3.0.21b
> > on AIX -- please help
> > 03/07/2006 10:51
> > AM
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > I have been trying for 3 weeks to get 3.0.21b to work on AIX 5.2. I am
> > currently running 3.0.4, which has no problems. I am getting very
> > frustrated, and am about to give up entirely on Samba.
> >
> > Here are some of the errors I am getting:
> >
> > [<root> mcom4:/opt/Samba/3.0.21b/bin] > ./smbclient -L ccasemcom4 -d
3 -N
> > -Ub06reg%Becky1208
> > lp_load: refreshing parameters
> > Initialising global parameters
> > params.c:pm_process() - Processing configuration file "/opt/Samba/3.0.21
> > b/lib/smb.conf"
> > Processing section "[global]"
> > added interface ip=11.16.153.89 bcast=11.16.155.255 nmask=255.255.252.0
> > Client started (version 3.0.21b).
> > Connecting to 11.16.153.89 at port 445
> > Doing spnego session setup (blob length=16)
> > server didn't supply a full spnego negprot
> > Got challenge flags:
> > Got NTLMSSP neg_flags=0x60890235
> > NTLMSSP: Set final flags:
> > Got NTLMSSP neg_flags=0x60080215
> > NTLMSSP Sign/Seal - Initialising with flags:
> > Got NTLMSSP neg_flags=0x60080215
> > SPNEGO login failed: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
> > session setup failed: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
> >
> > After setting client schannel = no
> > [<root> mcom4:/opt/Samba/3.0.21b/bin] > ./smbclient -L ccasemcom4 -d
3 -N
> > -Ub06reg%Becky1208
> > lp_load: refreshing parameters
> > Initialising global parameters
> > params.c:pm_process() - Processing configuration file "/opt/Samba/3.0.21
> > b/lib/smb.conf"
> > Processing section "[global]"
> > added interface ip=11.16.153.89 bcast=11.16.155.255 nmask=255.255.252.0
> > Client started (version 3.0.21b).
> > resolve_lmhosts: Attempting lmhosts lookup for name ccasemcom4<0x20>
> > resolve_wins: Attempting wins lookup for name ccasemcom4<0x20>
> > resolve_wins: WINS server resolution selected and no WINS servers
listed.
> > resolve_hosts: Attempting host lookup for name ccasemcom4<0x20>
> > name_resolve_bcast: Attempting broadcast lookup for name
ccasemcom4<0x20>
> > Got a positive name query response from 11.16.153.89 ( 11.16.153.89 )
> > Connecting to 11.16.153.89 at port 445
> > Doing spnego session setup (blob length=16)
> > server didn't supply a full spnego negprot
> > Got challenge flags:
> > Got NTLMSSP neg_flags=0x60890235
> > NTLMSSP: Set final flags:
> > Got NTLMSSP neg_flags=0x60080215
> > NTLMSSP Sign/Seal - Initialising with flags:
> > Got NTLMSSP neg_flags=0x60080215
> > SPNEGO login failed: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
> > session setup failed: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
> >
> > [<root> mcom4:/opt/Samba/3.0.21b/bin] > ./smbclient -L ccasemcom4 -d 3
> > -Ub06reg%Becky1208
> > lp_load: refreshing parameters
> > Initialising global parameters
> > params.c:pm_process() - Processing configuration file "/opt/Samba/3.0.21
> > b/lib/smb.conf"
> > Processing section "[global]"
> > added interface ip=11.16.153.89 bcast=11.16.155.255 nmask=255.255.252.0
> > Client started (version 3.0.21b).
> > Connecting to 11.16.153.89 at port 445
> > Doing spnego session setup (blob length=16)
> > server didn't supply a full spnego negprot
> > Got challenge flags:
> > Got NTLMSSP neg_flags=0x60890235
> > NTLMSSP: Set final flags:
> > Got NTLMSSP neg_flags=0x60080215
> > NTLMSSP Sign/Seal - Initialising with flags:
> > Got NTLMSSP neg_flags=0x60080215
> > SPNEGO login failed: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
> > session setup failed: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
> >
> > testparm does not show any problems with smb.conf. Here is the Global
> > section of smb.conf:
> >
> > workgroup = FEDERATED
> > netbios name = CCASEMCOM4
> > server string = MCOM4 Samba Server
> > security = DOMAIN
> > update encrypted = Yes
> > password server = fd000xsfed01
> > smb passwd file = /var/samba/private/smbpasswd
> > passwd program = /usr/bin/passwd
> > log file = /opt/Samba/30.0.21b/var/log.%m
> > large readwrite = No
> > max xmit = 65535
> > time server = Yes
> > unix extensions = No
> > deadtime = 30
> > max open files = 15000
> > dns proxy = No
> > kernel oplocks = No
> > ldap ssl = no
> > create mask = 0775
> > directory mask = 0775
> > map archive = No
> > oplocks = No
> > level2 oplocks = No
> > strict locking = No
> > client schannel = no
> >
> > If I need to provide more info, please let me know.
> >
> > Ray Gebbie
> > Federated Systems Group
> > San Francisco, CA 94102
> > 415-422-1662
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/listinfo/samba
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/listinfo/samba
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/listinfo/samba
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/listinfo/samba
> >
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/listinfo/samba
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/listinfo/samba
>
More information about the samba
mailing list