Dotaz: Samba server OK - nevidim adresare

[Dan]

prihlaseni na smbserver i overeni z win2k probehne v poradku, ale nejsou dostupne zadne adresare. Na serveru je videt pripojeny uzivatel

tcg:~# smbstatus
load_client_codepage: filename /usr/share/samba/codepages/codepage.000 does not exist.
Unknown parameter encountered: "comments"
Ignoring unknown parameter "comments"

Samba version 2.2.3a-14.1 for Debian
Service      uid      gid      pid     machine
----------------------------------------------
IPC$         op       op        1113   run      (192.168.5.1) Wed Mar 23 11:41:44 2005
No locked files
tcg:~#

ale na win stanici vidim jen prazdnou slozku Tiskarny. Jeste pripojuji smb.conf

[global]
        obey pam restrictions = yes
        passwd program = /usr/bin/passwd %u
        passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .
        dns proxy = no
        available = no
        encrypt passwords = true
        workgroup = OL5Q
        server string = %h server (Samba %v)
        syslog = 0
        client code page = cp1250
        socket options = TCP_NODELAY
        character set = iso8859-2
        log file = /var/log/samba/log.%m
        invalid users = root
        max log size = 1000

[homes]
   comment = Home Directories
   browseable = yes
   writable = no
   create mask = 0700
   directory mask = 0700
;[netlogon]
;   comment = Network Logon Service
;   path = /home/samba/netlogon
;   guest ok = yes
;   writable = no
;   share modes = no

[Z]
   comments = diskZ
   writeable = yes
   browseable = yes
   path = /home/op/samba
   public = yes
;  path=/var/data1

[printers]
   comment = All Printers
   browseable = no
   path = /tmp
   printable = yes
   public = no
   writable = no
   create mode = 0700

[cdrom]
   comment = Samba server's CD-ROM
   writable = no
   locking = no
   path = /cdrom
   public = yes

cemu nerozumim, co delam spatne?

Odpovědi

[Kamorek]

no a co to ma delat? Tiskarny se nastavuji v /etc/printcap. (FC,RH). Jen tak jako se nekde nevezmou. A pokud nemas login script, tak se samy nenamontuji na win stanicich ani disky.Ale ty adresare /home a /home/op samba bys mel najit.(okolni pc, prohledat......)Pokud je mas teda vytvorene a nikde neni dalsi chyba.

[Dan]

/home/op/samba existuje a dokonce i neco obsahuje, ty tiskarny a cdrom jsem zapnul jen proto, abych vyzkousel jestli nejsou take videt, kdyz nevidim [z]. v prohledavani okolnich pocitacu z win neni problem. Ten pocitac ze sambou najdu, i autentizace probehne v poradku, ale neobsahuje zadne adresare. Zkousel jsem to i z linuxu pomoci aplikace samba4k, abych mel jistotu, ze problem neni na strane win.

[Kamorek]

Jake adresare?

[Dan]

[Z]
   comments = diskZ
   writeable = yes
   browseable = yes
   path = /home/op/samba
   public = yes

a jeho obsah

[Kamorek]

Chces rict, ze neni videt adresarova struktura, ktera je v /home/op/samba? Navrhuju zkusebni postup, ktery rozhodne neni doporuceni pro conf samby z hlediska bezpecnosti, ale odhalis hned, zda je to ono:

1) chmod 777 /home/op/samba 2) do confu "z" dej jeste: valid users = user1 user2 write list = user1 user2 create mode = 0777 directory mask = 0777

3) rozhodne ne "comments = diskZ" ale "comment"

4) takhle to mam ja:

[global]

   workgroup = domena.cz
   netbios name = SERVER
   encrypt passwords = yes
   domain master = yes
   local master = yes
   os level = 65
   security = user
   domain logons = yes
   logon path =  \\%L\profiles\%u\%m
   add machine script = /usr/sbin/useradd -c "Machine account" -d /dev/null -g 1002 -s /bin/false %u
   logon script = logon.bat
   dos charset = CP852
   unix charset = ISO8859-2
   display charset = ISO8859-2
   max log size = 5000
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   

[netlogon]
   comment = Network Logon Service
   path = /home/netlogon
   public = no
   writable = no
   browseable = no
   write list = kama admin root


[Profiles]
    path = /home/profiles
    browseable = no
    writeable = yes
    guest ok = yes
    create mask = 0600
    directory mask = 0700

[stereo7]
  comment = ucetni sw ver 7
  path = /home/stereo7
  public = yes
  writeable = yes
  valid users = kamil lida ludka
  write list = kamil lida ludka
  create mode = 0777
  directory mask = 0777



[JEDUN]
  comment = Jednoduche ucto
  path = /home/jedun
  public = yes
  writeable = yes
  valid users = kamil karel lida
  write list = kamil karel lida
  create mode = 0777
  directory mask = 0777

[PSQLDATA]
	comment = Pervasive databases
	path = /home/k2
	public = yes
	force user = psql
	force group = pvsw
	read only = No
	writeable = yes
	valid users = radka jarda
	write list = radka jarda
	create mode = 0777
	create mask = 0777
	directory mask = 0777

[PVPIPE$]
	comment = Pervasive pipes
	path = /usr/local/psql/etc/pipe
	# only members of group pvsw will have access
	valid users = @pvsw ludka radka jarda
	# Absolutely necessary - prevents caching
	oplocks = no
	level2 oplocks = no
	read only = yes
	browseable = No

[Dan]

diky za namet > zkusim

[MartinH]

Ještě: pokud vím, tak standardně se používá kombinace ISO8859-2 a CP852 (ne CP1250)

To jen k tomu prvnímu řádku výpisu, že nelze najít CODEPAGE.000

[Dan]

Nepomohlo, chova se to porad stejne. Sambu jsem restartoval /etc/init.d/samba reload. Po upravach je smb.conf v tomto tvaru.

[global]
        passwd program = /usr/bin/passwd %u
        passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .
        dns proxy = no
        available = no
        encrypt passwords = true
        workgroup = OL5Q
        server string = %h server (Samba %v)
        syslog = 0
        client code page = cp852
        socket options = TCP_NODELAY
        character set = iso8859-2
        log file = /var/log/samba/log.%m
        invalid users = root
        max log size = 1000
        os level = 65
[homes]
   comment = Home Directories
   browseable = no
   writable = no
   create mask = 0700
   directory mask = 0700

[Z]
   comment = diskZ
   writeable = yes
   browseable = yes
   path = /home/op/samba
   public = yes
   valid users = op
   write list = op
   create mode = 0777
   directory mask = 0777

[printers]
   comment = All Printers
   browseable = no
   path = /tmp
   printable = yes
   public = no
   writable = no
   create mode = 0700

[Kamorek]

Co service smb restart? Reload je myslim malo. A co firewall??? mas povoleny porty?? Jaka je to distribuce?

[Dan]

Firewall-Jay nema nastaveny do vnitrni site zadna omezeni (zkousel jsem ho i vypnout). Tim by to byt asi nemelo, protoze ja se na ten smb server z vnitrni site z win prihlasim, ale nevidim zadny obsah. Distribuce je to Debian stable jadro 2.4.29. Smb restart zkusim, momentalne jsem zas mimo.

[Pepíno]

za prve - co se pise v logu pro danou stanici?
za druhe - nikde nevidim prikaz security = (asi nejlip security = user). Jak ma pak samba vedet, jakym zpusobem overit uzivatele? Co kdyz chces overovat uzivatele v domene nebo u jineho serveru? Dokud to samba nevi, tak jsi sice fajn uzivatel, ale neduveryhodnej, takze nedostanes zadny data

[anon123]

Toto by melo chodit. Nezapomen pridat uzivatele do smbpasswd. A nejlepsi je mit stejnou skupinu a stejne uzivatelske jsmeno na vsech strojich.

[global]
        workgroup = homelinux
        printing = cups
        printcap name = cups
        printcap cache time = 750
        cups options = raw
        printer admin = @ntadmin, root, administrator
        username map = /etc/samba/smbusers
        map to guest = Bad User
        include = /etc/samba/dhcp.conf
        logon path = \\%L\profiles\.msprofile
        logon home = \\%L\%U\.9xprofile
        logon drive = P:
        security = user
        encrypt passwords = yes
        passdb backend = smbpasswd
        ldap idmap suffix = ou=Idmap
        ldap machine suffix = ou=Computers
        netbios name = ibmlab
        ldap suffix = dc=example,dc=com

[homes]
        comment = Home Directories
        valid users = %S
        browseable = no
        read only = no
        inherit acls = yes

[profiles]
        comment = Network Profiles Service
        path = %H
        read only = no
        store dos attributes = yes
        create mask = 0600
        directory mask = 0700

[users]
        comment = All users
        path = /home
        read only = no
        inherit acls = yes
        veto files = /aquota.user/groups/shares/

[groups]
        comment = All groups
        path = /home/groups
        read only = no
        inherit acls = yes

[printers]
        comment = All Printers
        path = /var/tmp
        printable = yes
        create mask = 0600
        browseable = no

[print$]
        comment = Printer Drivers
        path = /var/lib/samba/drivers
        write list = @ntadmin root
        force group = ntadmin
        create mask = 0664
        directory mask = 0775

[maxtor]
        comment = storage
        path = /mnt/maxtor
        browseable = yes
        read only = no
        inherit permissions = yes
        guest ok = no
        printable = no

[Kamorek]

No, myslim, ze by bylo dobre, kdyby zadavatel tohoto problemu napsal popis, jak postupoval. Vsem nam to totiz funuje. Nicmene porad doporucuji ten clanek, o kterem jsem psal vyse.

[Dan]

Omlouvam se za prodlevu, ale stroj je ode mne 35km a zkouset pristup do samby z vnitrni site dokazu jen na miste. Vyzkousel jsem vyse zminene rady, ale je to porad stejne - po zadani jmena a hesla se do sambaserveru prihlasim, ale jediny obsah je slozka "tiskarny".

Co se tyka logu
/var/log/samba/log.smbd

[2005/03/26 00:42:04, 0] smbd/server.c:main(698)
  smbd version 2.2.3a-14.1 for Debian started.
  Copyright Andrew Tridgell and the Samba Team 1992-2002
[2005/03/26 00:42:04, 0] lib/charset.c:load_client_codepage(213)
  load_client_codepage: filename /usr/share/samba/codepages/codepage.000 does not exist.

/var/log/samba/log.nmbd

[2005/03/26 00:42:00, 0] nmbd/nmbd.c:sig_term(63)
  Got SIGTERM: going down...
[2005/03/26 00:42:02, 0] nmbd/nmbd.c:main(783)
  Netbios nameserver version 2.2.3a-14.1 for Debian started.
  Copyright Andrew Tridgell and the Samba Team 1994-2002
[2005/03/26 00:42:02, 0] lib/charset.c:load_client_codepage(213)
  load_client_codepage: filename /usr/share/samba/codepages/codepage.000 does not exist.
[2005/03/26 00:42:06, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(237)
  find_response_record: response packet id 9833 received with no matching record.
[2005/03/26 00:42:06, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(237)
  find_response_record: response packet id 9834 received with no matching record.
[2005/03/26 00:46:34, 0] nmbd/nmbd_incomingrequests.c:process_name_refresh_request(183)
  process_name_refresh_request: unicast name registration request received for name ADMINISTRATOR<03> from IP 192.168.5.1 on subnet UNICAST_SUBNET.
[2005/03/26 00:46:34, 0] nmbd/nmbd_incomingrequests.c:process_name_refresh_request(184)
  Error - should be sent to WINS server
[2005/03/26 00:46:34, 0] nmbd/nmbd_incomingrequests.c:process_name_refresh_request(183)
  process_name_refresh_request: unicast name registration request received for name RUN<1f> from IP 192.168.5.1 on subnet UNICAST_SUBNET.
[2005/03/26 00:46:34, 0] nmbd/nmbd_incomingrequests.c:process_name_refresh_request(184)
  Error - should be sent to WINS server

Diky za trpelivost!

[Robk0]

ahoj, pokial som to pochopil spravne snazis sa rozbehnut sambu overovanu oproti domene, pre inspiraciu moj konfigurak>:

[root@white-box ~]# cat /etc/samba/smb.conf

# Global parameters
[global]
        workgroup = DOMENA
        server string = Pandora`s Box
        interfaces = 192.168.12.205/27
        encrypt passwords = yes
        smb passwd file = /etc/samba/smbpasswd
        security = DOMAIN
        password server = [PDC]
;       guest account =
        passwd program = /usr/bin/passwd %u
        passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully*
        unix password sync = Yes
        log level = 2
        log file = /var/log/samba/%m.log
        max log size = 3000
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        load printers = No
        printcap name = /etc/printcap
        local master = No
;       remote announce = 10.251.1.255
        case sensitive = No
        preserve case = yes

#Definice zdileni
[Pandora]
        comment = Pandora`s Box
        path = /data/pandoras_box/
        valid users = +qusers, +qadmins
        read only = No
        create mask = 775
        force create mode = 775
;       browseable = no

[kleopatra]
        comment = test disk
        path = /data/kleopatra/
        valid users = +pgrup
        read only = No
        create mask = 777
        force create mode = 777
        browseable = no

[robko]
        comment = data
        path = /home/robko/data/
        valid users = +robko
        read only = NO
        create mask = 777
        force create mode = 777
        browseable = no

Ked si nebudes vediet dat rady mozes ma kontaktovat na ICQ> 151-026-665

[Pepíno]

no je to jasne, ne?

/var/log/samba/log.smbd
neexistuje soubor codepage.000 - na to uz nekdo odpovidal. Standardne tam je pro ceska wokna a sambu 2.x client code page = cp852 (nekdy taky jen 852).

/var/log/samba/log.nmbd
jasne tam vidim ...request received for name ADMINISTRATOR<03> - zadny uzivatel op ale administrator. Cili na te stanici jste prihlaseny jako administrator, takze taky dostanete prava jako administrator. Prihlaste se na stanici jako op a mate to. Nebo si na sambe zalozte uzivatele administrator. Uz jste tam doplnil ten parametr security = _vase_volba_?

No a konec te hlasky rika, ze ta hlaska spravne patri na WINS server a vam tam zadny nebezi. Tak si ho spustte parametrem wins support = yes.