[Samba] Re: listing groups not working
Dale Schroeder
dale at BriannasSaladDressing.com
Thu Jun 21 18:24:32 GMT 2007
Guido,
There were major changes starting in 3.0.23, including the samba schema
in ldap _and_ group mapping. Etch is at 3.0.24 One or more of these
changes is probably causing your problems. If you haven't already read
the change notes, you should do that now.
Release Notes <http://us3.samba.org/samba/history/samba-3.0.25a.html>
http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/ChangeNotes.html
Good luck,
Dale
Guido Lorenzutti wrote:
> To add a little more..
>
>
> amayo-fs2:/etc/samba# net rpc info -U glorenzutti
> Password:
> Domain Name: JUSBAIRES
> Domain SID: S-1-5-21-2281447165-45835457-3575675572
> Sequence number: 1182389270
> Num users: 1725
> Num domain groups: 0
> Num local groups: 0
> amayo-fs2:/etc/samba#
>
>
> And with debug output...
>
> amayo-fs2:/etc/samba# net -d 4 rpc info -U glorenzutti
> [2007/06/20 22:27:27, 3] param/loadparm.c:lp_load(4953)
> lp_load: refreshing parameters
> [2007/06/20 22:27:27, 3] param/loadparm.c:init_globals(1418)
> Initialising global parameters
> [2007/06/20 22:27:27, 3] param/params.c:pm_process(572)
> params.c:pm_process() - Processing configuration file
> "/etc/samba/smb.conf"
> [2007/06/20 22:27:27, 3] param/loadparm.c:do_section(3695)
> Processing section "[global]"
> doing parameter workgroup = JUSBAIRES
> doing parameter netbios name = BDCAMAYO
> [2007/06/20 22:27:27, 4] param/loadparm.c:handle_netbios_name(3053)
> handle_netbios_name: set global_myname to: BDCAMAYO
> doing parameter netbios aliases = SERVER
> doing parameter server string =
> doing parameter debug level = 0
> doing parameter syslog = 0
> doing parameter log level = 0
> doing parameter log file = /var/log/samba/%m.%U.log
> doing parameter max log size = 5000
> doing parameter panic action = /usr/share/samba/panic-action %d
> doing parameter name resolve order = wins hosts lmhosts bcast
> doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192
> SO_SNDBUF=8192 IPTOS_LOWDELAY SO_KEEPALIVE
> doing parameter use sendfile = yes
> doing parameter wins support = yes
> doing parameter wins proxy = yes
> doing parameter enhanced browsing = yes
> doing parameter dns proxy = yes
> doing parameter time server = yes
> doing parameter smb ports = 139
> doing parameter add user script = /usr/sbin/smbldap-useradd -a %u
> doing parameter delete user script = /usr/sbin/smbldap-userdel "%u"
> doing parameter add machine script = /usr/sbin/smbldap-useradd -w "%u"
> doing parameter add group script = /usr/sbin/smbldap-groupadd -p "%g"
> doing parameter delete group script = /usr/sbin/smbldap-groupdel "%g"
> doing parameter add user to group script = /usr/sbin/smbldap-groupmod
> -m "%u" "%g"
> doing parameter delete user from group script =
> /usr/sbin/smbldap-groupmod -x "%u" "%g"
> doing parameter set primary group script = /usr/sbin/smbldap-usermod
> -g "%g" "%u"
> doing parameter ldap admin dn =
> uid=amayo-fs2,ou=security,dc=jusbaires,dc=gov,dc=ar
> doing parameter ldap suffix = dc=jusbaires,dc=gov,dc=ar
> doing parameter ldap group suffix = ou=Group
> doing parameter ldap user suffix = ou=People
> doing parameter ldap machine suffix = ou=amayo,ou=Computers
> doing parameter ldap ssl = on
> doing parameter ldap delete dn = yes
> doing parameter ldap passwd sync = yes
> doing parameter printcap name = /dev/null
> doing parameter printing = bsd
> doing parameter load printers = no
> doing parameter admin users = administrador mchamorro mlopez gpanizzo
> glorenzutti
> doing parameter enable privileges = yes
> doing parameter os level = 80
> doing parameter preferred master = yes
> doing parameter lm announce = yes
> doing parameter domain master = yes
> doing parameter domain logons = yes
> doing parameter encrypt passwords = yes
> doing parameter pam password change = yes
> doing parameter passdb backend =
> ldapsam:"ldap://amayo-fs2.jusbaires.gov.ar
> ldap://alem-cups.jusbaires.gov.ar ldap://alem-systemlog.jusbaires.gov.ar"
> doing parameter passwd chat debug = no
> doing parameter check password script = /usr/local/bin/crackcheck -d
> /var/cache/cracklib/cracklib_dict
> doing parameter unix charset = 850
> doing parameter dont descend = .recycle
> doing parameter delete veto files = yes
> doing parameter restrict anonymous = 1
> doing parameter logon script = netlogon.%U.bat
> doing parameter logon path = \\server\profiles\%U
> doing parameter logon home = \\server\profiles\%U
> doing parameter logon drive = C:
> doing parameter hide files = /Desktop.ini/desktop.ini/
> doing parameter hide dot files = yes
> doing parameter include = /etc/samba/default_shares.smb.conf
> [2007/06/20 22:27:27, 3] param/params.c:pm_process(572)
> params.c:pm_process() - Processing configuration file
> "/etc/samba/default_shares.smb.conf"
> [2007/06/20 22:27:27, 4] param/loadparm.c:lp_load(4984)
> pm_process() returned Yes
> [2007/06/20 22:27:27, 2] lib/interface.c:add_interface(81)
> added interface ip=10.2.0.2 bcast=10.2.255.255 nmask=255.255.0.0
> Password:
> [2007/06/20 22:27:29, 3] libsmb/cliconnect.c:cli_start_connection(1426)
> Connecting to host=BDCAMAYO
> [2007/06/20 22:27:29, 3] lib/util_sock.c:open_socket_out(874)
> Connecting to 10.2.0.2 at port 445
> [2007/06/20 22:27:29, 2] lib/util_sock.c:open_socket_out(911)
> error connecting to 10.2.0.2:445 (Connection refused)
> [2007/06/20 22:27:29, 3] lib/util_sock.c:open_socket_out(874)
> Connecting to 10.2.0.2 at port 139
> [2007/06/20 22:27:29, 3] libsmb/cliconnect.c:cli_session_setup_spnego(721)
> Doing spnego session setup (blob length=58)
> [2007/06/20 22:27:29, 3] libsmb/cliconnect.c:cli_session_setup_spnego(746)
> got OID=1 3 6 1 4 1 311 2 2 10
> [2007/06/20 22:27:29, 3] libsmb/cliconnect.c:cli_session_setup_spnego(754)
> got principal=NONE
> [2007/06/20 22:27:29, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(950)
> Got challenge flags:
> [2007/06/20 22:27:29, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
> Got NTLMSSP neg_flags=0x60890215
> NTLMSSP_NEGOTIATE_UNICODE
> NTLMSSP_REQUEST_TARGET
> NTLMSSP_NEGOTIATE_SIGN
> NTLMSSP_NEGOTIATE_NTLM
> NTLMSSP_NEGOTIATE_NTLM2
> NTLMSSP_CHAL_TARGET_INFO
> NTLMSSP_NEGOTIATE_128
> NTLMSSP_NEGOTIATE_KEY_EXCH
> [2007/06/20 22:27:29, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(972)
> NTLMSSP: Set final flags:
> [2007/06/20 22:27:29, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
> Got NTLMSSP neg_flags=0x60080215
> NTLMSSP_NEGOTIATE_UNICODE
> NTLMSSP_REQUEST_TARGET
> NTLMSSP_NEGOTIATE_SIGN
> NTLMSSP_NEGOTIATE_NTLM
> NTLMSSP_NEGOTIATE_NTLM2
> NTLMSSP_NEGOTIATE_128
> NTLMSSP_NEGOTIATE_KEY_EXCH
> [2007/06/20 22:27:29, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338)
> NTLMSSP Sign/Seal - Initialising with flags:
> [2007/06/20 22:27:29, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
> Got NTLMSSP neg_flags=0x60080215
> NTLMSSP_NEGOTIATE_UNICODE
> NTLMSSP_REQUEST_TARGET
> NTLMSSP_NEGOTIATE_SIGN
> NTLMSSP_NEGOTIATE_NTLM
> NTLMSSP_NEGOTIATE_NTLM2
> NTLMSSP_NEGOTIATE_128
> NTLMSSP_NEGOTIATE_KEY_EXCH
> [2007/06/20 22:27:30, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
> rpc_pipe_bind: Remote machine BDCAMAYO pipe \lsarpc fnum 0x7405 bind
> request returned ok.
> [2007/06/20 22:27:30, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
> rpc_pipe_bind: Remote machine BDCAMAYO pipe \samr fnum 0x7406 bind
> request returned ok.
> Domain Name: JUSBAIRES
> Domain SID: S-1-5-21-2281447165-45835457-3575675572
> Sequence number: 1182389251
> Num users: 1725
> Num domain groups: 0
> Num local groups: 0
> [2007/06/20 22:27:31, 2] utils/net.c:main(988)
> return code = 0
>
> The same thing with samba 3.0.14 works just fine.
> Any ideas? Any clue? The people are starting to give me copies of
> windows 2003!!! :)
>
> Tnxs in advance.
>
>
> guido.lorenzutti.com.ar at presencia.net wrote:
>
>> Im having some problems with the samba 3.0.24 in Debian Etch when I try to
>> list the groups, like this:
>>
>> wbinfo -g
>>
>> or
>>
>> net rpc group -U username
>>
>> All the times the output of the command is... "NOTHING".
>>
>> In samba 3.0.14 (Sarge), this works OK.
>> I don't try in a newer version of samba.
>>
>> I test this with the debug on -d 4 with the rpc command and this is the
>> ouput (see attached files).
>>
>> The winbind package is not the problem, coz if I try from a client that
>> dosen't have the winbind package, the same thing happends.
>>
>> Tnxs in advance.
>>
>> Sorry for my english. I never study.
>>
>
>
More information about the samba
mailing list