Nabble - Samba - General

Re: Cannot see server in win Neighborhood (again)

2009-12-18T18:59:19Z

Are you listening on port 139, or only on port 445?

Microsoft had a great idea when they implemented SMB over TCP on port 445 and eliminated the ancient and inefficient NETBIOS over TCP, or NetBT (on port 139). Unfortunately, they didn't think it all the way through - you still need NETBIOS to populate the network neighborhood, so if your Samba server only listens on port 445, you won't get happy in your network neighborhood.

In Vista and Windows 7, this problem is fixed: they now use UPnP (renamed to Network Discovery) to populate the network neighborhood (and do a lot of other neat stuff). Samba does not yet support UPnP, though.

Bottom line: even though Samba supports turning off NetBT, DON'T.

This problem is exacerbated if you are using an IPv6 network, because Microsoft no longer even supports NETBIOS at all.

> -----Original Message-----
> From: samba-bounces@... [mailto:samba-
> bounces@...] On Behalf Of Matias Morawicki
> Sent: Friday, December 18, 2009 7:16 AM
> To: samba@...
> Subject: [Samba] Cannot see server in win Neighborhood (again)
>
> Hello u all, sorry to bring this issue back again, but I´ve been
> searching and trying all the advices suggested in previous posts and I
> still can´t see the samba server in the win network neighborhood.
>
> I can see the samba shares from win via net view \\servername
>
> but if I issue a plain "net view" samba won´t show up. only the win
> machines, the same i can see on the Neighborhood...
>
> I´ve tried stopping iptables, different smb.conf from the simple
> examples of t first chapters of samba by example, to plenty of
> options... that´s why I´m not including my smb.conf, because I´ve
> tried many variations, always with the same results. I even tried a
> working smb.conf from another linux box which was showing in win
> Neighborhood...
>
> and when I select local master = no Samba would stay without master!
> I issue smbclient -L servername -U% and the master section remains
> empty.
>
> It´s like samba is not being able to "talk" to the rest of the
> workgroup. (of course they are all in the same workgroup)
>
> Btw, the server is a Centos 5.3, with samba 3.2.15 (it also happened
> with the default samba, so I´ve upgraded just in case...)
>
> I hope someone can point me some directions...
>
> thanks in advance!!
>
> Matias
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

srvtools -- are these really useful?

2009-12-18T15:46:43Z

I have installed 3.4.3 on a CentOS 5.4 box as a PDC with tdbsam
for a backend. All seems to be working as expected in the
Samba world.

With the intention of getting ordinary maintenance off of
my back, I downloaded and installed usrmgr and srvmgr in
/root/bin.

When I launch either of them from a WinXP workstation member
while logged into the domain as root, the domain is not found.
I can find the domain from the menu and look at various settings,
but cannot do much of anything that can be made permanent.

Question: Have I omitted some critical setting to make these
tools useful? Should I not be able to add users to
groups, for example?

What follows is some output that shows thing to be configured
correctly. I think.

root@foobar {~} net rpc group MEMBERS "Domain Admins"
Enter root's password:
PS2\root
PS2\b0fh

root@foobar {~} net groupmap list
... cut several local groups from this list ...
Domain Users (S-1-5-21-2487701501-27877076-1099799052-513) -> staff
Domain Guests (S-1-5-21-2487701501-27877076-1099799052-514) -> nobody
Domain Admins (S-1-5-21-2487701501-27877076-1099799052-512) -> wheel
Administrators (S-1-5-32-544) -> 10000
Users (S-1-5-32-545) -> 10001

Note: I'm not sure what the groups Administrators and Users are about.

root@foobar {~} net rpc rights list
Enter root's password:
SeMachineAccountPrivilege Add machines to domain
SeTakeOwnershipPrivilege Take ownership of files or other objects
SeBackupPrivilege Back up files and directories
SeRestorePrivilege Restore files and directories
SeRemoteShutdownPrivilege Force shutdown from a remote system
SePrintOperatorPrivilege Manage printers
SeAddUsersPrivilege Add users and groups to the domain
SeDiskOperatorPrivilege Manage disk shares

Note: I see no priv to add users to an existing group?

Thank you for your time,
Ray

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: new user can't log

2009-12-18T12:36:58Z

The database from ldap was a copy from another domain, that existed in
another network. i've done a slapcat in the old domain and did a slapadd
in this new one (both domain have the same name). But this happened
about 2 years ago. After a samba and ldap upgrade via apt-get, the
duplicated domains message start to pop (abouth 3 months ago). Just now
i've solved, but now, this =S.

I'll try some of the stuff you guys sugested me.

tks and sorry for my poor english.

*Leonardo de Souza Carneiro*
*Veltrac - Tecnologia em Logística.*
lscarneiro@... <mailto:lscarneiro@...>
http://www.veltrac.com.br <http://www.veltrac.com.br/>
/Fone Com.: (43)2105-5601/
/Av. Higienópolis 1601 Ed. Eurocenter Sl. 803/
/Londrina- PR/
/Cep: 86015-010/

David Whitney escreveu:

> Unless I've blown my memory on Windows internals, each user's SID is
> comprised of the domain's SID, then a "self-refential" RID portion. That
> means a user from the domain DOMINIOS should NOT have what amounts to a
> "prefix" that looks as though it came from a different domain. But unless
> I'm mistaken, your logs are telling you exactly that - the domain portion of
> the group and user SID's indicate different domains, and that indicates a
> problem.
>
> One theory is that perhaps your domain was created, groups and users were
> created, but then for some reason your domain SID changed, and perhaps that
> led to your described duplicate domain entry (?) problem.
>
> Anyway, I'd take a look at the SIDS of other users and groups and see if
> this problem exists for other users or groups on your domain.
>
> -David
>

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

new user can't log

2009-12-18T12:16:31Z

Unless I've blown my memory on Windows internals, each user's SID is
comprised of the domain's SID, then a "self-refential" RID portion. That
means a user from the domain DOMINIOS should NOT have what amounts to a
"prefix" that looks as though it came from a different domain. But unless
I'm mistaken, your logs are telling you exactly that - the domain portion of
the group and user SID's indicate different domains, and that indicates a
problem.

One theory is that perhaps your domain was created, groups and users were
created, but then for some reason your domain SID changed, and perhaps that
led to your described duplicate domain entry (?) problem.

Anyway, I'd take a look at the SIDS of other users and groups and see if
this problem exists for other users or groups on your domain.

-David
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: new user can't log

2009-12-18T11:21:53Z

2009/12/18 Leonardo Carneiro <lscarneiro@...>:

>
> [2009/12/18 16:47:29, 2] auth/auth.c:check_ntlm_password(308)
> check_ntlm_password: authentication for user [dsribeiro] ->
> [dsribeiro] -> [dsribeiro] succeeded
> [2009/12/18 16:47:29, 1]
> rpc_server/srv_netlog_nt.c:_netr_LogonSamLogon(1060)
> _netr_LogonSamLogon: user DOMINIO\dsribeiro has user sid
> S-1-5-21-4161212321-1980848047-2820993626-3468
> but group sid S-1-5-21-874179082-3571801642-3889913597-513.
> The conflicting domain portions are not supported for NETLOGON calls
>
> Can anyone point me to how to solve this? I'm not what you guys could call
> an expert in samba :D

The SIDs do not match.

Is this the only domain there? If so, I would simply use ldapmodify to
modify users' SID to match the domain SID. You'll need to replace
S-1-5-21-4161212321-1980848047-2820993626 with
S-1-5-21-874179082-3571801642-3889913597
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: Cannot see server in win Neighborhood (again)

2009-12-18T11:01:42Z

2009/12/18 Gaiseric Vandal <gaiseric.vandal@...>

> On 12/18/09 10:15, Matias Morawicki wrote:
>
>> Hello u all, sorry to bring this issue back again, but I´ve been
>> searching and trying all the advices suggested in previous posts and I
>> still can´t see the samba server in the win network neighborhood.
>>
>> I can see the samba shares from win via net view \\servername
>>
>> but if I issue a plain "net view" samba won´t show up. only the win
>> machines, the same i can see on the Neighborhood...
>>
>> I´ve tried stopping iptables, different smb.conf from the simple
>> examples of t first chapters of samba by example, to plenty of
>> options... that´s why I´m not including my smb.conf, because I´ve
>> tried many variations, always with the same results. I even tried a
>> working smb.conf from another linux box which was showing in win
>> Neighborhood...
>>
>> and when I select local master = no Samba would stay without master!
>> I issue smbclient -L servername -U% and the master section remains empty.
>>
>> It´s like samba is not being able to "talk" to the rest of the
>> workgroup. (of course they are all in the same workgroup)
>>
>> Btw, the server is a Centos 5.3, with samba 3.2.15 (it also happened
>> with the default samba, so I´ve upgraded just in case...)
>>
>> I hope someone can point me some directions...
>>
>> thanks in advance!!
>>
>> Matias
>>
>>
> Are you using a WINS server- I find that makes a lot of these issues go
> away. My guess is that your samba machines and windows machines are
> talking to different net bios browser masters (I use WINS servers to avoid
> having to figure out this stuff.)
>
>
> I have, at home, run in to this same issue with Windows machines (workgroup
> not domain, and no samba servers involved) not seeing each other in network
> neighborhood. Does turning off the XP firewall (assuming that you are
> using XP Pro) make a difference?
>
> Thanx for the reply Gaiseric!

yes, I´m using "wins support = yes" and I´ve set the DHCP to set the clients
to use the samba server as wins server.I´ve checked the win clients and they
get the correct conf.

I haven´t tried turning off the XP firewall, but when I tried a basic samba
configuration in a ubuntu server in another box just to test, they were able
to see it in the neigbohood... so I guess the issue is on the Centos side. I
tried the same smb.conf from that working ubuntu-samba and didn´t make it on
the Centos...

thanks again!

Matias
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

new user can't log

2009-12-18T10:48:31Z

Hello everyone.

I was having a problem with my Samba PDC with LDAP backend. The command
'net getlocalsid' gaves me the message "Got too many (2) domain info
entries for domain [domain]". I logged im my ldap server, and saw that i
have the following entries:

dn: sambaDomainName=DOMINIO,dc=dominio,dc=com,dc=br
sambaDomainName: DOMINIO
sambaSID: S-1-5-21-874179082-3571801642-3889913597
sambaAlgorithmicRidBase: 1000
objectClass: sambaDomain
sambaNextUserRid: 67109862
sambaNextGroupRid: 67109863
structuralObjectClass: sambaDomain
entryUUID: 9ca720c8-00a6-102c-9973-d48efacd902d
creatorsName: cn=root,dc=dominio,dc=com,dc=br
createTimestamp: 20070926180404Z
entryCSN: 20070926180404Z#000001#00#000000
modifiersName: cn=root,dc=dominio,dc=com,dc=br
modifyTimestamp: 20070926180404Z

and:

dn: ou=Dominios,dc=dominio,dc=com,dc=br
ou: Dominios
objectClass: top
objectClass: organizationalUnit
structuralObjectClass: organizationalUnit

dn: sambaDomainName=DOMINIO,ou=Dominios,dc=dominio,dc=com,dc=br
objectClass: sambaDomain
sambaAlgorithmicRidBase: 1000
sambaSID: S-1-5-21-874179082-3571801642-3889913597
sambaDomainName: DOMINIO
sambaMinPwdLength: 4
sambaLogonToChgPwd: 2
sambaForceLogoff: 0
sambaRefuseMachinePwdChange: 1
structuralObjectClass: sambaDomain

Deleting the former (the one that was not inside the 'ou=Dominios')
solved the problem. Now, the 'net getlocalsid' gives me the SID for my
domain correctly. I don't know if this have any relation with my new
problem, but i created a new user and he can't login.

The error is in portuguese, but i'll translate here: "The system could
not logon by the following error: A device conected to the system is not
working".

In the log of the machine the user is trying to log, i have the
following info:

[2009/12/18 16:47:29, 2] auth/auth.c:check_ntlm_password(308)
check_ntlm_password: authentication for user [dsribeiro] ->
[dsribeiro] -> [dsribeiro] succeeded
[2009/12/18 16:47:29, 1]
rpc_server/srv_netlog_nt.c:_netr_LogonSamLogon(1060)
_netr_LogonSamLogon: user DOMINIO\dsribeiro has user sid
S-1-5-21-4161212321-1980848047-2820993626-3468
but group sid S-1-5-21-874179082-3571801642-3889913597-513.
The conflicting domain portions are not supported for NETLOGON calls

Can anyone point me to how to solve this? I'm not what you guys could
call an expert in samba :D

--

*Leonardo de Souza Carneiro*
*Veltrac - Tecnologia em Logística.*
lscarneiro@... <mailto:lscarneiro@...>
http://www.veltrac.com.br <http://www.veltrac.com.br/>
/Fone Com.: (43)2105-5601/
/Av. Higienópolis 1601 Ed. Eurocenter Sl. 803/
/Londrina- PR/
/Cep: 86015-010/

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: Cannot see server in win Neighborhood (again)

2009-12-18T07:56:13Z

On 12/18/09 10:15, Matias Morawicki wrote:

> Hello u all, sorry to bring this issue back again, but I´ve been
> searching and trying all the advices suggested in previous posts and I
> still can´t see the samba server in the win network neighborhood.
>
> I can see the samba shares from win via net view \\servername
>
> but if I issue a plain "net view" samba won´t show up. only the win
> machines, the same i can see on the Neighborhood...
>
> I´ve tried stopping iptables, different smb.conf from the simple
> examples of t first chapters of samba by example, to plenty of
> options... that´s why I´m not including my smb.conf, because I´ve
> tried many variations, always with the same results. I even tried a
> working smb.conf from another linux box which was showing in win
> Neighborhood...
>
> and when I select local master = no Samba would stay without master!
> I issue smbclient -L servername -U% and the master section remains empty.
>
> It´s like samba is not being able to "talk" to the rest of the
> workgroup. (of course they are all in the same workgroup)
>
> Btw, the server is a Centos 5.3, with samba 3.2.15 (it also happened
> with the default samba, so I´ve upgraded just in case...)
>
> I hope someone can point me some directions...
>
> thanks in advance!!
>
> Matias
>

Are you using a WINS server- I find that makes a lot of these issues go
away. My guess is that your samba machines and windows machines are
talking to different net bios browser masters (I use WINS servers to
avoid having to figure out this stuff.)

I have, at home, run in to this same issue with Windows machines
(workgroup not domain, and no samba servers involved) not seeing each
other in network neighborhood. Does turning off the XP firewall
(assuming that you are using XP Pro) make a difference?

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Sharing violations on XP host

2009-12-18T07:37:07Z

Greetings,

I've got a samba server that has been serving a 100+ user network for over
a year with no issues, except recently, one XP workstation throws a
sharing violation when saving Excel files, but only intermittently.

It's an older Samba version (3.0.29) - and yes, I know I have to upgrade.

OS is Fedora 9 x64.

The log shows the following when this occurs:

[2009/12/18 09:42:25, 0] lib/util_sec.c:assert_uid(101)
Failed to set uid privileges to (1075,1075) now set to (0,0)
[2009/12/18 09:42:25, 0] lib/util.c:smb_panic(1633)
PANIC (pid 20846): failed to set uid

[2009/12/18 09:42:25, 0] lib/util.c:log_stack_trace(1737)
BACKTRACE: 16 stack frames:
#0 /usr/local/samba/sbin/smbd(log_stack_trace+0x1c) [0x7fa0a799e2a5]
#1 /usr/local/samba/sbin/smbd(smb_panic+0x55) [0x7fa0a799e3a7]
#2 /usr/local/samba/sbin/smbd [0x7fa0a79a2f65]
#3 /usr/local/samba/sbin/smbd(restore_re_uid_fromroot+0x2b)
[0x7fa0a79a2fce]
#4 /usr/local/samba/sbin/smbd [0x7fa0a79a5950]
#5 /usr/local/samba/sbin/smbd [0x7fa0a79a5d57]
#6 /usr/local/samba/sbin/smbd(messaging_send+0x23) [0x7fa0a79a6093]
#7 /usr/local/samba/sbin/smbd(notify_trigger+0x307) [0x7fa0a79d2d75]
#8 /usr/local/samba/sbin/smbd(notify_fname+0x96) [0x7fa0a79d10c8]
#9 /usr/local/samba/sbin/smbd(rename_internals+0x94a) [0x7fa0a782a926]
#10 /usr/local/samba/sbin/smbd(reply_mv+0x2b8) [0x7fa0a7832058]
#11 /usr/local/samba/sbin/smbd [0x7fa0a78639f1]
#12 /usr/local/samba/sbin/smbd(smbd_process+0x392) [0x7fa0a78644df]
#13 /usr/local/samba/sbin/smbd(main+0xa6b) [0x7fa0a7a4ec3d]
#14 /lib64/libc.so.6(__libc_start_main+0xfa) [0x20ea32a]
#15 /usr/local/samba/sbin/smbd [0x7fa0a77f7669]
[2009/12/18 09:42:25, 0] lib/fault.c:dump_core(181)
dumping core in /usr/local/samba/var/cores/smbd
[2009/12/18 09:42:25, 1] smbd/service.c:make_connection_snum(1033)
wks0000 (123.456.789.10) connect to service DATA initially as user
myuser (uid=1075, gid=1000) (pid 21329)

Note above, the error starts when trying to chown the file to uid.gid
1075.1075 - that UID is valid and is the user's UID, but that GID does not
exist. In the last few lines, it reconnects as UID 1075 (again, valid)
and GID 1000 (That *is* the correct GID). Although it says it's dumping
core, it doesn't.

On that share, the GID is forced (config excerpt):

[DATA]
path = /DATA
public = yes
writable = yes
printable = no
write list = @samba
create mask = 0660
force create mode = 0660
security mask = 0660
force security mode = 0660
directory mask = 0770
force directory mode = 0770
directory security mask = 0770
force directory security mode = 0770
force group = samba
nt acl support = no

The samba group is GID 1000, as above.

Any ideas?

TIA

-John

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Cannot see server in win Neighborhood (again)

2009-12-18T07:15:54Z

Hello u all, sorry to bring this issue back again, but I´ve been
searching and trying all the advices suggested in previous posts and I
still can´t see the samba server in the win network neighborhood.

I can see the samba shares from win via net view \\servername

but if I issue a plain "net view" samba won´t show up. only the win
machines, the same i can see on the Neighborhood...

I´ve tried stopping iptables, different smb.conf from the simple
examples of t first chapters of samba by example, to plenty of
options... that´s why I´m not including my smb.conf, because I´ve
tried many variations, always with the same results. I even tried a
working smb.conf from another linux box which was showing in win
Neighborhood...

and when I select local master = no Samba would stay without master!
I issue smbclient -L servername -U% and the master section remains empty.

It´s like samba is not being able to "talk" to the rest of the
workgroup. (of course they are all in the same workgroup)

Btw, the server is a Centos 5.3, with samba 3.2.15 (it also happened
with the default samba, so I´ve upgraded just in case...)

I hope someone can point me some directions...

thanks in advance!!

Matias
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: Migrating an NT4 domain to a Samba PDC - How to limit users access to only certain machines?

2009-12-18T07:06:31Z

Solved!

In case any of you are interested, John Terpstra gave me a call and
explained how to set this up, and I figured I would pass along the
information.

First, having set up the PDC, I logged into one of the Windows XP
workstations as a Domain Admin and downloaded the Windows NT Server
Tools package:

http://support.microsoft.com/kb/173673

I extracted the archive and ran USRMGR.EXE
From this old school interface, I was able to see my domain users and
using the "Log Onto" button, was able to set which machines each user
has the permission to log on to. I tested it out afterwords, and it
worked great. After uing an LDAP manager, I was able to see that the
object class added to the user profile was sambaUserWorkstations, so
Michael was indeed correct!
There was also an option in that app to set logon times and password
expiry options, but I have not yet gotten a chance to try them out.

A big thanks to everyone for your help!!!!

-Jason

=================================================
Jason Somers
Network Administrator
Red Barn Technology Group, Inc.
1235 Front Street - Suite 3
Binghamton, NY 13905
(607) 772-1888 x222

Michael Heydon wrote:

>
>> we need to limit certain users to have permission only to log in to
>> their specific workstation.
> I'm not familiar with ClearOS, but if it uses an LDAP backend (and
> maybe even if it doesn't) the sambaUserWorkstations property should do
> what you want.
>
> *Michael Heydon - IT Administrator *
> michaelh@... <mailto:michaelh@...>
>

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Samba4 Provisioning Segfault

2009-12-18T06:43:19Z

Hi,

Hope this is the right place to ask about this... I did a clean install of S4 alpha10 the other day and attempted to provision it with the python script provided. This failed with a segmentation fault, however doing this with alpha8 does not fail. I've compiled this under arm5 little endian on Ubuntu 9.04 and included a backtrace below. Any ideas where I'm going wrong or is this a (platform specific?) bug?

I also had trouble connecting Win7 clients to an alpha8 domain, trust relationship failed. Is this something which would be changed in the new release or have I missed a Windows registry change somewhere along the line?

Many Thanks

Ash

gdb:

root@ubuntu:~/src/samba-4.0.0alpha10/source4# gdb python
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "arm-linux-gnueabi"...
(gdb) run ./setup/provision
Starting program: /usr/bin/python ./setup/provision
[Thread debugging using libthread_db enabled]
[New Thread 0x402694d0 (LWP 4004)]
Realm: ashnet.lan
Domain [ashnet]:
Server Role (dc, member, standalone) [dc]:
Administrator password:
Setting up share.ldb

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x402694d0 (LWP 4004)]
0x40b1782c in talloc_chunk_from_ptr () from bin/python/ldb.so
Current language: auto; currently asm
(gdb) bt
#0 0x40b1782c in talloc_chunk_from_ptr () from bin/python/ldb.so
#1 0x40b19284 in talloc_get_name () from bin/python/ldb.so
#2 0x40b19358 in talloc_check_name () from bin/python/ldb.so
#3 0x4048ce88 in ltdb_index_idxptr () from bin/python/ldb.so
#4 0x4048d878 in ltdb_index_traverse_store () from bin/python/ldb.so
#5 0x40b1184c in tdb_traverse_internal () from bin/python/ldb.so
#6 0x40b11ae4 in tdb_traverse () from bin/python/ldb.so
#7 0x4048da6c in ltdb_index_transaction_commit () from bin/python/ldb.so
#8 0x4048942c in ltdb_prepare_commit () from bin/python/ldb.so
#9 0x403f0d08 in ldb_transaction_prepare_commit () from bin/python/ldb.so
#10 0x403f0ee8 in ldb_transaction_commit () from bin/python/ldb.so
#11 0x403e97f0 in py_ldb_add () from bin/python/ldb.so
#12 0x0012b84c in PyCFunction_Call (func=0x45756378, arg=0x4394f238,
kw=0x15fd88) at ../Objects/methodobject.c:116
#13 0x0009ed50 in PyEval_EvalFrameEx (f=0xab8ed8,
throwflag=<value optimized out>) at ../Python/ceval.c:3706
#14 0x000a0970 in PyEval_EvalCodeEx (co=0x4030f848,
globals=<value optimized out>, locals=<value optimized out>,
args=0x4032a780, argcount=2, kws=0xac7cd8, kwcount=1165320760,
defs=0x4032a77c, defcount=1, closure=0x0) at ../Python/ceval.c:2968
#15 0x0009f184 in PyEval_EvalFrameEx (f=0xab8900,
throwflag=<value optimized out>) at ../Python/ceval.c:3802
#16 0x0009f7b0 in PyEval_EvalFrameEx (f=0x35ae80,
throwflag=<value optimized out>) at ../Python/ceval.c:3792
#17 0x000a0970 in PyEval_EvalCodeEx (co=0x4033c848,
globals=<value optimized out>, locals=<value optimized out>,
args=0x4032264c, argcount=4, kws=0x2a2e48, kwcount=8196, defs=0x402967bc,
defcount=41, closure=0x0) at ../Python/ceval.c:2968
#18 0x0009f184 in PyEval_EvalFrameEx (f=0x2a2d10,
throwflag=<value optimized out>) at ../Python/ceval.c:3802
#19 0x000a0970 in PyEval_EvalCodeEx (co=0x402d2800,
globals=<value optimized out>, locals=<value optimized out>, args=0x0,
argcount=1076326696, kws=0xbeee1668, kwcount=1076701184, defs=0x0,
defcount=0, closure=0x0) at ../Python/ceval.c:2968
#20 0x000a0a88 in PyEval_EvalCode (co=0x244eaa18, globals=0x1617f0,
locals=0x15fd88) at ../Python/ceval.c:522
#21 0x000bfdb4 in PyRun_FileExFlags (fp=0x253cd8,
filename=0xbeee19ff "./setup/provision", start=<value optimized out>,
globals=0x40290270, locals=0x40290270, closeit=1076710432,
flags=0xbeee176c) at ../Python/pythonrun.c:1335
#22 0x000c007c in PyRun_SimpleFileExFlags (fp=0x253cd8,
filename=0xbeee19ff "./setup/provision", closeit=1, flags=0xbeee176c)
at ../Python/pythonrun.c:931
#23 0x00019bd4 in Py_Main (argc=2, argv=0xbeee18e4) at ../Modules/main.c:599
#24 0x4013a03c in __libc_start_main () from /lib/libc.so.6
#25 0x00018d10 in _start ()
(gdb)

_________________________________________________________________
Add your Gmail and Yahoo! Mail email accounts into Hotmail - it's easy
http://clk.atdmt.com/UKM/go/186394592/direct/01/
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Ques on samba internals

2009-12-17T19:57:08Z

Hello:

I'm seeing a performance issue with samba 3.0.25 wherein the CPU is
85% idle but samba performance (as seen from client PC) is pretty low.

Some questions"
1. In server.c, the parent forks and does CatchChild()...etc...I'm
unable to locate the exact function name for the child process. Can
someone pls guide?

2 During WRITE op, samba server would get big chunks 32k of data from
cleitn and write to the disk...
What is the default pkt size smbd would give to the disk controller
to write to the disk?

If there is a doc that explains the data-flow, please do point to that.

Thanks for your time and help!
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Fw: Re: nmbd won't start

2009-12-17T19:49:49Z

Seems to be solved:
interfaces=10.10.65.2/8, eth0, 127.0.0.1/8, lo
The solution was to comment out the "interfaces" line in smb.conf

stephen
>

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: nmbd won't start

2009-12-17T19:25:39Z

2009/12/18 Stephen Eastman <stephen_eastman@...>:
> I commented out that line and it seems to be working.
>

good!

regards,
norberto
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: nmbd won't start

2009-12-17T18:36:13Z

2009/12/17 Stephen Eastman <stephen_eastman@...>:
> interfaces = 10.10.65.2/8, eth0, 127.0.0.1/8, lo

have you tried removing that line or formating it correctly (hint:
remove commas)? maybe making it just:

interfaces = eth0 lo

as you can see, your config (removing interfaces) works here:

zoolook@venkman:/etc/samba$ smbclient -L //localhost -U%
Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.4.0]

Sharename Type Comment
--------- ---- -------
homes Disk Home Directories
print$ Disk Printer Drivers
www Disk gateway to apache
IPC$ IPC IPC Service (venkman server (Samba, Ubuntu))
EPSON_Stylus_CX5900 Printer EPSON Stylus CX5900
Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.4.0]

Server Comment
--------- -------
VENKMAN venkman server (Samba, Ubuntu)

Workgroup Master
--------- -------
WORKGROUP VENKMAN

zoolook@venkman:/etc/samba$ ps ax | grep mbd
17205 ? Ss 0:00 /usr/sbin/nmbd -D
17208 ? Ss 0:00 /usr/sbin/smbd -D
17212 ? S 0:00 /usr/sbin/smbd -D
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: nmbd won't start

2009-12-17T18:19:45Z

Here is a print out of testparm:

root@stephen-desktop:/etc# testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[printers]"
Processing section "[print$]"
Processing section "[www]"
Processing section "[homes]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions

[global]
server string = %h server (Samba, Ubuntu)
interfaces = 10.10.65.2/8, eth0, 127.0.0.1/8, lo
map to guest = Bad User
obey pam restrictions = Yes
pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
unix password sync = Yes
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
dns proxy = No
usershare allow guests = Yes
panic action = /usr/share/samba/panic-action %d

[homes]
comment = Home Directories
read only = No
guest ok = Yes

[printers]
comment = All Printers
path = /var/spool/samba
create mask = 0700
printable = Yes
browseable = No
browsable = No

[print$]
comment = Printer Drivers
path = /var/lib/samba/printers

[www]
comment = gateway to apache
path = /var/www
valid users = root, stephen
admin users = root, stephen
read only = No
guest ok = Yes

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: nmbd won't start

2009-12-17T17:48:46Z

(please, cc to the list.)

2009/12/17 Stephen Eastman <stephen_eastman@...>:
> No NETBIOS is not disabled in the smb.conf file
> (I assume that is what you are referring to)

Yes

> I am also assuming you are running Ubuntu.

Yes, karmic, and samba's working fine here.

Maybe you'll like to post your config (run testparm on it)
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: nmbd won't start

2009-12-17T16:35:58Z

2009/12/17 Stephen Eastman <stephen_eastman@...>:
> I am using Ubuntu Linux 9.10 (the latest).

...

> Could this update be broken?
>

Nope.

Maybe you disabled NB?
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

nmbd won't start

2009-12-17T16:31:20Z

I am using Ubuntu Linux 9.10 (the latest).
After I updated using the update manager the samba suite to the most current packages, nmbd refuses to start.
I tried it manually, /usr/sbin/nmdb -D but it does nothing, (doesn't show up in the process list). Could this update be broken?

stephen

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: Windows 7 won't authenticate

2009-12-17T15:30:53Z

mickey harvey wrote:

> I am trying to access a samba share from windows 7. The samba version is
> 3.3.3 on FreeBSD 7.2, The samba daemons are running and I can see the server
> in my Network Places on the Windows client. When I try to login using the
> username "spacebizall" and password (the same as the account on the server)
> I receive an "unknown username or password" error. I installed the registry
> patch here http://wiki.samba.org/index.php/Windows7. Attached are the samba
> log file and config. Test is the share I am trying to connect to.
>
> Also one of the packets caught my attention, it appears as if my username
> being sent is including my hostname for some reason:
> Code:
>
> 28 0.491330 192.168.137.1 192.168.137.2 SMB Session Setup AndX
> Request, NTLMSSP_AUTH, User: MICKEY-PC\spacebizall

----
I have Win7 and samba problems as well, in your case it almost looks like your win7 box is acting like a Domain controller = to itself. I wonder if this is what the 'home network' feature is supposed to look like. I'm not familiar with it. But it has the idea of home network servers and clients -- I wonder if it uses it's hostname as a domain name? Do you have the home networking feature turned on? (It's on be default). Don't know if that's anything to do with your problem. Just a thought.

-linda
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: Issue Joining Win7 to Samba Domain (tried wiki instructions)

2009-12-17T14:30:25Z

On Thu, Dec 17, 2009 at 5:25 AM, Moray Henderson
<Moray.Henderson@...> wrote:
>
> Last time I saw something like this, it was because the client (Win XP)
> did not have a WINS server set, and couldn’t find the domain. Can you
> ping the server from the problem client - by IP address and by name? Is
> its firewall blocking any SMB ports?

It's not a firewall problem as the client can browser shares on the
server using \\SERVER

I will try setting a WINS server and see if that resolves it.

Thanks.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

File corruption with two Samba servers

2009-12-17T13:15:37Z

I have two samba servers. One is "a proxy" for another; i.e. windows
clients access to the first via the second. When i copy a file from
"proxy" to the destination server via samba, everything is OK.
However, when Windows (XP) users copy, let's say a word document, file
becomes corrupted (probably, binary file is converted in 7-bit file,
but i am not sure).

Destination samba is 3.4 on 32bit Debian Sid with kernel 2.3.31 and
"proxy" samba is 3.3 on 64bit Debian Sid with kernel 2.6.26. Samba
configurations are very plain (after Debian defaults):

* Destination *
[storage]
comment = storage 1
path = /storage
read only = no
hosts allow = 10.0.0.0/24
public = yes
writable = yes
browseable = no

* Proxy *
[archive]
comment = archived material
path = /srv/archive
read only = no
hosts allow = 10.0.0.0/24
public = yes
writable = yes
browseable = yes
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Changing groups on files

2009-12-17T13:01:00Z

We have a Samba install connected up to LDAP and all works fine until
we try to change the group on a file or directory
and get permission denied (changing permissions works fine).
The underlying filesystem does not know about POSIX ACLs and while I
would have thought "acl schemes = unix" would
do the trick, it doesn't seem to. Ideas?

What I'm doing on the Windows side is:
create a file
properties->security->edit
* select the group and remove it
* select add and type in another group
* click ok and get a permission denied error

Environment:
Linux 2.6.30.9 on Debian Lenny
Samba 3.3.6 and 3.4.2 (both via Debian backports)
Underlying filesystem is POSIX compliant but does not support the
POSIX ACL draft.
Client is Windows 7

Config:
[global]
workgroup = ZZ-7
server string = %h server
dns proxy = no
client plaintext auth = yes
client lanman auth = yes
interfaces = eth0,eth1
log file = /var/log/samba/log.%m
log level = 10
max log size = 1000
syslog = 1
panic action = /usr/share/samba/panic-action %d
security = user
encrypt passwords = true
passdb backend = ldapsam:"ldaps://localhost:636"
ldap ssl = off
ldap suffix = dc=sub,dc=company,dc=com
ldap user suffix = ou=people
ldap group suffix = ou=group
ldap admin dn = cn=auth,dc=ops,dc=company,dc=com
obey pam restrictions = yes
invalid users = root
map to guest = Never
restrict anonymous = 2
unix password sync = no
passwd program =
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes

[share]
path = /mnt/share
valid users =
writable = yes
read only = no
printable = no
fstype = Samba
hide dot files = no
guest ok = no
create mask = 0660
directory mask = 0770
acl schemes = unix

Thanks,
Paul

--
It's time to finish going metric.
http://gometric.us
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

samba password complexity help?

2009-12-17T12:38:34Z

Hi there,

Here are the facts:
- I have samba 3.4.2-0.42.fc11 running on a Fedora 11 system.
- Samba is acting as a domain controller, no Windows server involved.
- I am using tdbsam.
- I need to enforce certain password requirements.

The password requirements are:
- min 8 characters
- expiration 90 days
- last 10 passwords may not be reused
- not a dictionary word

Per the Samba 3.2 FAQ, the first three requirements are easily
accomplished via pdbedit:
# pdbedit -P "min password length" -C 8
# pdbedit -P "password history" -C 10
# pdbedit -P "maximum password age" -C 90

These items appear to work with no difficulty. However this does not
address the dictionary/complexity requirement.

I have seen the following suggestion elsewhere on the samba list:

check password script = /usr/local/sbin/crackcheck -d
/var/cache/cracklib/cracklib_dict

I am not able to use this suggestion directly. No file "crackcheck" is
present on my system. There is a /usr/sbin/cracklib-check but it seems
to work on a file or stream, like grep or something, as opposed to
returning a value as a function. And it does not seem to accept a "-d"
switch. There seems to be no man page for cracklib-check. I have a
dictionary in /usr/share/cracklib

Here is what cracklib-check does...

# cracklib-check
test
test: it is too short
booger
booger: it is based on a dictionary word
bfg9000
bfg9000: OK
^C
# cracklib-check booger <-- attempting to check password "booger"
^C <-- sits there for input, ctrl-c to get out

It does not seem to be a program that "returns" something, so I don't
think it can return an error code to Samba if I use a crappy password.
But I try this anyway, but it does not seem to accomplish anything. I
see nothing in /var/log/messages or in /var/log/samba/log.smbd

check password script = /usr/sbin/cracklib-check /usr/share/cracklib/pw_dict

Well, it doesn't seem to work when I change my password from a windows
client. Does anyone have any suggestions? Thanks.

So what it boils down to is:

0) what am I missing here?

1) where can I get an example crackcheck script file?

2) I have seen other suggestions to use pam. This might supersede some
of the tdbsam policy requirements. Is this a better method?

--
Morgan Toal, CFCE, RHCE, CEH
Network Manager
City of Burlington, Iowa
319-759-8882
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: Configure a linux client to be a member of a Samba Domain and allow users from Domain to sign on.

2009-12-17T10:19:30Z

On Thu, Dec 17, 2009 at 10:57 AM, Ryan Davis <rrdavis@...> wrote:

> here is the output of testparm:
>
> ~$ testparm
> Load smb config files from /etc/samba/smb.conf
> Processing section "[printers]"
> Processing section "[print$]"
> Loaded services file OK.
> Server role: ROLE_DOMAIN_MEMBER
> Press enter to see a dump of your service definitions
>
> [global]
> workgroup = GO
> server string = %h server (Samba, Ubuntu)
> security = DOMAIN
> map to guest = Bad User
> obey pam restrictions = Yes
> passdb backend = tdbsam
> pam password change = Yes
> passwd program = /usr/bin/passwd %u
> passwd chat = *Enter\snew\s*\spassword:* %n\n
> *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
> unix password sync = Yes
> syslog = 0
> log file = /var/log/samba/log.%m
> max log size = 1000
> name resolve order = wins lmhosts host bcast
> dns proxy = No
> wins server = 152.xx.xxx.xx
> usershare allow guests = Yes
> panic action = /usr/share/samba/panic-action %d
>
> [printers]
> comment = All Printers
> path = /var/spool/samba
> create mask = 0700
> printable = Yes
> browseable = No
>
> [print$]
> comment = Printer Drivers
> path = /var/lib/samba/printers
>
>
> On Thu, Dec 17, 2009 at 4:02 AM, <tarikly@...> wrote:
>
> > Hi Davis,
> >
> > would be great if you could post your SMB.conf client file. So we can see
> > what you missed, if you did.
> >
> > 2009/12/17 Ryan Davis <rrdavis@...>
> >
> >> Hi,
> >>
> >> I have a Samba server setup as a PDC. I have a mostly Windows client in
> >> the
> >> domain. I have one linux client that I configured and joined the
> domain.
> >> However, after joining the domain, I can't login with any of the domain
> >> users.
> >> I have the SMB.conf configured on the client side as security=domain
> >> What else do I have to do to allow smb users to login to the linux box?
> I
> >> searched google but the most I find is how to configure PDCs
> >>
>
>

I suggest you check the thread titled "how to join to AD ? -Annoyed", I just
recently posted a very detailed post about getting interactive logins using
Samba.

Robert LeBlanc
Life Sciences & Undergraduate Education Computer Support
Brigham Young University
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: how to join to AD ? -Annoyed

2009-12-17T10:17:13Z

On Thu, Dec 17, 2009 at 8:23 AM, mistofeles <ptmusta@...> wrote:

>
>
> Robert LeBlanc wrote:
> >
> > You seem to be having a lot more trouble with this than it should be.
> >
> Yes, I know, I'm stupid ;)
> And after reading hundreds of pages of Samba documentation I still feel
> stupid.
>
> - I didn't find line 'password server = KDC' in your smb.conf. I tought it
> must be there.
> Login/access is OK. Here my troubles begin.
>

Password server by default will query the domain for servers to use, you may
override it and specify an order or pin it to specific servers. I choose to
leave the default so that I don't have to worry about which DCs are up and
if any more are added or removed in the future. I left it out to use the
defaults, check the man page for more info.

> Robert LeBlanc wrote:
> >
> > As far as file security, Samba will honor Linux's file permissions
> > including ACLs.
> >
> It seems that I do not understand the system Samba handles the permissions.
>
> It seems that in terminal Linux 'User' permissions (rwx------) are used but
> in Samba the access is determined with 'World' (------rwx), if group is nol
> valid AD group. Or it is determine by 'Group' (---rwx---), if the group is
> valid 'domain users'.
>

Linux and Samba will try the user's permissions, then group and then other.
This makes permission fall though more easily as generally you will give
more permissions to users and less permissions to other (world). Since we
usually use ACLs, user and group are given all permissions (usually they
need all permissions in most cases) and then give more restricted access
using ACL to other users and groups. The world permissions are set as normal
since ACLs don't make much sense in this situation. I usually map this to
the Everyone group in Windows in my head. Basically, our linux users that
login to the system has the same exact access as they do over Samba. Maybe
one of my share defs can help:

[users]
comment = Life Sciences user share
browseable = yes
path = /ls/users
guest ok = no
read only = no
admin users = lfsci-csr
create mask = 0770
directory mask = 0770
veto files = /.forward/.bash*/.profile/
dos filemode = yes
posix locking = no
hide unreadable = yes
vfs objects = shadow_copy2
shadow:snapdir = /ls/snapshots/users
shadow:basedir = /ls/users
shadow:fixinodes = yes

We have one share and users have folders that only they can see.

drwxr-sr-x 57 root root 4.0K 2009-12-17 03:14 users

A user folder:
drwxrws--- 18 rleblanc lfsci-csr 4.0K 2009-12-14 10:05 rleblanc

When someone with no access connects to the share, they see a blank screen,
When I access the same share (I'm a member of lfsci-csr), I see everyone's
folder. When a regular user logs in, they only see their folder. This allows
me to quickly help someone when they are having data problems, as that share
is already mapped on my machines.

> After reading your message twice I made some tuning and found that this
> line
> in [homes] made the permissions work:
> path = /home/%U
> Note %U. With %S it left users directories wide open RW if d---rwx---
> My conf's are still mostly as I have laid them.
>
> Now there is some funny behaviour. If I query \\myserver\somebody (somebody
> is a member of AD) on the WinXP MyComputer address line, I get my own
> directory \\myserver\myself in window.
> This doesn't matter, it happends in my old samba 2 server too.
>
> Another funny thing is that in Win there is both: 'homes' and 'myself' and
> they both are connected to 'homes'.
>
> After all this hacking my smb.conf is full of carbage, but it works. I will
> collect my conf's to my WWW page ASAP.
>
> I've cut out as much stuff as I could from my smb.conf file, and the

defaults work great most of the time. If you have time, you might want to
see what can be thrown out to make reading your conf a little easier.

Robert LeBlanc
Life Sciences & Undergraduate Education Computer Support
Brigham Young University
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: Configure a linux client to be a member of a Samba Domain and allow users from Domain to sign on.

2009-12-17T09:57:07Z

here is the output of testparm:

~$ testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[printers]"
Processing section "[print$]"
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

[global]
workgroup = GO
server string = %h server (Samba, Ubuntu)
security = DOMAIN
map to guest = Bad User
obey pam restrictions = Yes
passdb backend = tdbsam
pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
unix password sync = Yes
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
name resolve order = wins lmhosts host bcast
dns proxy = No
wins server = 152.xx.xxx.xx
usershare allow guests = Yes
panic action = /usr/share/samba/panic-action %d

[printers]
comment = All Printers
path = /var/spool/samba
create mask = 0700
printable = Yes
browseable = No

[print$]
comment = Printer Drivers
path = /var/lib/samba/printers

On Thu, Dec 17, 2009 at 4:02 AM, <tarikly@...> wrote:

> Hi Davis,
>
> would be great if you could post your SMB.conf client file. So we can see
> what you missed, if you did.
>
> 2009/12/17 Ryan Davis <rrdavis@...>
>
>> Hi,
>>
>> I have a Samba server setup as a PDC. I have a mostly Windows client in
>> the
>> domain. I have one linux client that I configured and joined the domain.
>> However, after joining the domain, I can't login with any of the domain
>> users.
>> I have the SMB.conf configured on the client side as security=domain
>> What else do I have to do to allow smb users to login to the linux box? I
>> searched google but the most I find is how to configure PDCs
>>
>> Thanks
>> --
>>
>> To unsubscribe from this list go to the following URL and read the
>> instructions: https://lists.samba.org/mailman/options/samba
>>
>
>
>
> --
> Tárikly Távora
>

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: Issue Joining Win7 to Samba Domain (tried wiki instructions)

2009-12-17T08:31:54Z

Moray Henderson wrote:
> Last time I saw something like this, it was because the client (Win XP)
> did not have a WINS server set, and couldn’t find the domain. Can you
> ping the server from the problem client - by IP address and by name? Is
> its firewall blocking any SMB ports?
-------

FWIW, I checked my Win7 client. It still has its win server set to
the Samba PDC. The PDC has 'smb ports = 139' set to attempt to use the %m
macro in the config file. The win7 client currently has firewall set to
disabled, as it's located on a isolated subnet.

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: SerNet package spool directory

2009-12-17T08:28:27Z

Karolin Seeger wrote:

>On Di, Dez 15, 2009 at 06:20:31 +0000, Moray Henderson wrote:
>> It would be useful if your 3.3.9 build (currently in recent) included
>> the /var/spool/samba directory - it just took me a while to figure out
>> why Samba printing wasn't working on a new EL5 server ;-)
>
>thanks for the hint!
>
>We packaged the /var/spool/samba directory in the past, but decided to
>drop it, because it's a 1777 directory which gives each user the chance to
>fill-up the /var partition. You could either use /tmp instead or create
>/var/spool/samba manually.

Hi Karolin,

Thanks for the reply. If you're willing to review that decision, I think there are some new arguments in favour of including the spool directory in the package again.

Using /tmp would not work these days because most systems tend to have SELinux enabled: smb_t cannot write to tmp_t without setting the boolean samba_export_all_rw, which should really only be done as a last resort. Even creating /var/spool/samba manually is not as straightforward as it used to be, since you now need either "restorecon /var/spool/samba" or "chcon -t samba_var_t /var/spool/samba" to make it work. There is already a file context for it set in the base policy, so the directory does get installed properly if it's part of an rpm, and that is the "expected location".

The partition debate has been going on for as long as partitions themselves have been around. The current Fedora/RHEL install uses a small boot partition and a massive root partition for everything else, so there is no benefit in putting the spool directory elsewhere. There was some talk on the anaconda list recently of switching to multiple partitions on larger disks, but with the size of modern large disks there would still be plenty of space on /var.

I'd vote for having /var/spool/samba there as a useable default, and if an individual sysadmin is worried about space in /var, they can still reconfigure it themselves.

Moray.
"To err is human. To purr, feline"

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: how to join to AD ? -Annoyed

2009-12-17T07:23:36Z

Robert LeBlanc wrote:

You seem to be having a lot more trouble with this than it should be.

Yes, I know, I'm stupid ;)
And after reading hundreds of pages of Samba documentation I still feel stupid.

- I didn't find line 'password server = KDC' in your smb.conf. I tought it must be there.
Login/access is OK. Here my troubles begin.

Robert LeBlanc wrote:

As far as file security, Samba will honor Linux's file permissions including ACLs.

It seems that I do not understand the system Samba handles the permissions.

It seems that in terminal Linux 'User' permissions (rwx------) are used but in Samba the access is determined with 'World' (------rwx), if group is nol valid AD group. Or it is determine by 'Group' (---rwx---), if the group is valid 'domain users'.

After reading your message twice I made some tuning and found that this line in [homes] made the permissions work:
path = /home/%U
Note %U. With %S it left users directories wide open RW if d---rwx---
My conf's are still mostly as I have laid them.

Now there is some funny behaviour. If I query \\myserver\somebody (somebody is a member of AD) on the WinXP MyComputer address line, I get my own directory \\myserver\myself in window.
This doesn't matter, it happends in my old samba 2 server too.

Another funny thing is that in Win there is both: 'homes' and 'myself' and they both are connected to 'homes'.

After all this hacking my smb.conf is full of carbage, but it works. I will collect my conf's to my WWW page ASAP.

Re: Opening "Printers and Faxes" crashes explorer.exe on Vista x64

2009-12-17T06:52:27Z

Kővári János wrote:

> Hello everyone,
>
> First time on this list, because I can't seem to find anything about
> my problem. I hope someone here will be able to help me.
> I have a file and print server running an old Ubuntu 7.04 x86 and
> Samba 3.0.2.4 that came with it. (I tried upgrading samba once, but it
> kept crashing, so I went back to this default version, because it
> works very well.)
> The problem is, as the title suggests: if the clients (running Vista
> Business x64, but there's a W2K one, too) try to open the "Printers
> and Faxes" share on the server in explorer, it crashes immediately,
> then restarts. Event log says, the problem causing the crash is in the
> ntlanman.dll. After it crashes and restarts, it doesn't even open the
> network computers list either, it crashes again until a reboot.
> During this, all shares keep working fine, printing works fine too, etc.
> I tried different ntlm/v2/lanman authentications, encrypting
> passwords, disabling the "all printers" and the print$ sections,
> whatever came to my mind, but nothing helped.
> Or was this a bug in that old samba version?
> Any help is much appreciated. If you need smb.conf or anything, just
> tell.
> Thanks in advance!

samba 3.0.2 is real old. I'm sure Vista wasn't even available for them
to test back then, let alone 64bit. AFAIK the 3.0 series is
discontinued now. You'll need to upgrade to support Vista.

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: samba with full audit and trash

2009-12-17T06:43:19Z

Thanks for help Sorensen ur sujestion works fine.

Losnak, André.

2009/12/15 Lennart Sorensen <lsorense@...>

> On Tue, Dec 15, 2009 at 05:10:39PM -0200, Andre Losnak wrote:
> > Hi list
> >
> > i running my samba with full audit module, when i run recycle together
> full
> > audit fails.
> >
> > I can run samba with full audit + recycle?
> >
> >
> > Thanks.
> >
> > My conf:
> >
> > in [GLOBAL]:
> > #lixeira
> > vfs object = recycle
> > recycle:repository = /hda1/lixeira/.recycle/%U
> > recycle:keeptree = Yes
> > recycle:touch = Yes
> > recycle:versions = Yes
> > recycle:maxsize = 0
> > recycle:minsize = 1
> > recycle:exclude = *.tmp *.temp *.o *.obj ~$* *.~??
> > recycle:excludedir = /tmp /temp /cache
> > recycle:noversions = *.doc *.xls *.ppt *.docx *.xlsx
> >
> > #auditoria
> > vfs objects = full_audit
> > full_audit:success = open, opendir, write, unlink, rename, mkdir,
> > rmdir, chmod, chown
> > full_audit:prefix = %u|%I|%S
> > full_audit:failure = none
> > full_audit:facility = local5
> > full_audit:priority = notice
> >
> >
> > in shares:
> > vfs object = recycle
> > recicle:repository = /hda1/lixeira/.recycle/
>
> So one says object the other objects. Do you have to pick one or
> the other? Do you have to perhaps combine them in one line?
>
> --
> Len Sorensen
>

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

samba cifs

2009-12-17T06:41:45Z

Hi list.

Im running samba 3.0.28a for compatibility with smb audit (mysql).
I need remove cifs support from makefile and all works fine.
Now I need use cifs, when i compile with cifs support return error, i tried
some patchs and not give success.
Anyone patched successfully and compile samba with cifs support?

Thanks.

Losnak, André.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Re: SerNet package spool directory

2009-12-17T06:19:06Z

Hi Moray,

On Di, Dez 15, 2009 at 06:20:31 +0000, Moray Henderson wrote:
> It would be useful if your 3.3.9 build (currently in recent) included
> the /var/spool/samba directory - it just took me a while to figure out
> why Samba printing wasn't working on a new EL5 server ;-)

thanks for the hint!

We packaged the /var/spool/samba directory in the past, but decided to
drop it, because it's a 1777 directory which gives each user the chance to
fill-up the /var partition. You could either use /tmp instead or create
/var/spool/samba manually.

Cheers,
Karolin

--
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.SerNet.DE, mailto: Info @ SerNet.DE

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

attachment0 (205 bytes) Download Attachment