» Настройка Samba

Определись все таки с названием реалма

Цитата:

realm = DCTS

Цитата:

[domain_realm]
.dcts = DCTS

Цитата:

[root@]# ping dcts.local

1) Конфиги содержат много не нужных "переопределений" которые как факт в самбе заданы по умолчанию
2) Обычно делал автоматический поиск серевров в /etc/krb5.conf, все равботало на ура. Главное чтоб ДНС виндовый был без проблем

PS
Конфигов рабочих под рукой нету, если интересны то могу выложить ... конфиги рабичие ... работали 3-4 года когда работал в холдинге

Привет знающим людям!
Столкнулся с проблемой настройки Samba на линухе, чтобы она работала в домене под Windows Server 2003 SP1 с развернутым на нем Active Directory и пользователей брала из домена. Расшаренная папка чтобы была доступна пользователям домена на запись и чтение. Перечитал кучу литературы, пересмотрел все страницы вашего форума, многое применил, но нифига не работает.
Появляется окошко ввода. Ввожу логин и пароль и так до бесконечности.
Создал домашнюю папку для пользователя в линухе.
Доступ открыл, но при выборе расшаренной папки выходит окошко с надписью «Нет доступа к \\Samba\Samba. Возможно, у вас нет прав на использование этого сетевого ресурса. Обратитесь к администратору этого сервера для получения соответствующих прав доступа.
Не удалось получить данные о конфигурации от контроллера домена. Либо он отключен, либо к нему нет доступа»

Установки:
RedHat Enterprise Linux AS release 4 (October update 5) (10.138.69.11)
Samba 3.0.10-1.4E.11
Windows Server 2003 SP1 (10.138.69.118) (пользователь: Администратор)
Также моя машина Win XP SP3 (10.138.69.212) (пользователь: Admin013)

kinit прошел успешно
klist показывает только одного пользователя (Администратора под которым я делал kinit)
net ads join прошел на ура, я в домене
wbinfo –g показывает группы в формате DAS+ группы
wbinfo -u показывает пользователей в формате DAS+пользователь
getent passwd все в порядке. все соотносит
getent group все в порядке. все соотносит

А зайти из Windows-ой машины не могу.

ПОМОГИТЕ!!! где ошибка и что я сделал не так. (как всегда самое очивидное)


Выкладываю конфиги:
smb.conf

[more][global]
realm = DAS.BAD.GOR.RU
unix charset = KOI8-R
dos charset = cp866
workgroup = DAS
server string = Samba Server
netbios name = SAMBA
security = ADS
password server = 10.138.69.118
winbind enum groups = yes
winbind enum users = yes
winbind uid = 10000-20000
winbind gid = 10000-20000
auth methods = winbind
log level = 4
log file = /var/log/samba/%m.log
max log size = 50
dns proxy = No
ldap ssl = no
winbind separator = +
# winbind use default domain = Yes
# winbind trusted domains only = Yes
# username map = winbind
encrypt passwords = yes
hosts allow = 10.138.69. 127.
obey pam restrictions = yes
template primary group = "Domain Users"
template shell = /bin/bash
template homedir = /home/DAS/%U

[homes]
comment = Home Directories
valid users = @"DAS+Пользователи домена" @"DAS+Domain Users"
read only = no
browseable = no
writeable = yes
create mode = 0600
directory mode = 0700

[Samba]
comment = None
path = /d00/Samba
valid users = @"DAS+Пользователи домена" @"DAS+Администраторы домена"
inherit acls = yes
inherit permissions = yes
browseable = yes
writeable = yes
read only = yes
[/more]


krb5.conf
[more][logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
default_realm = DAS.BAD.GOR.RU
dns_lookup_realm = true
dns_lookup_kdc = true

[realms]

DAS.BAD.GOR.RU = {
kdc = f1.das.bad.gor.ru:88
default_domain = DAS.BAD.GOR.RU
}

[domain_realm]
. das.bad.gor.ru = DAS.BAD.GOR.RU
das.bad.gor.ru = DAS.BAD.GOR.RU

[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf

[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
[/more]

nsswitch.conf

[more]passwd: files winbind
shadow: files
group: files winbind

hosts: files dns
networks: files

services: files
protocols: files
rpc: files
ethers: files
netmasks: files
netgroup: files
publickey: files
bootparams: files
automount: files
aliases: files
[/more]

pam.d
login
[more]#%PAM-1.0
auth required pam_securetty.so

auth sufficient pam_winbind.so
auth sufficient pam_unix.so use_first_pass

auth required pam_stack.so service=system-auth
auth required pam_nologin.so

account sufficient pam_winbind.so

account required pam_stack.so service=system-auth
password required pam_stack.so service=system-auth

# pam_selinux.so close should be the first session rule

session required pam_selinux.so close
session required pam_stack.so service=system-auth
session required pam_loginuid.so
session optional pam_console.so
#pam_selinux.so open should be the last session rule
session required pam_selinux.so open
[/more]

system-auth
[more]#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth required /lib/security/$ISA/pam_env.so
auth sufficient /lib/security/$ISA/pam_unix.so likeauth nullok
auth sufficient /lib/security/$ISA/pam_krb5.so use_first_pass ccache=/tmp/krb5cc_%u
auth sufficient /lib/security/$ISA/pam_winbind.so use_first_pass
# auth required /lib/security/$ISA/pam_deny.so

account required /lib/security/$ISA/pam_unix.so
# account sufficient /lib/security/$ISA/pam_succeed_if.so uid < 100 quiet
account sufficient /lib/security/$ISA/pam_krb5.so
account sufficient /lib/security/$ISA/pam_winbind.so
# account required /lib/security/$ISA/pam_permit.so

password requisite /lib/security/$ISA/pam_cracklib.so retry=3 type=
password sufficient /lib/security/$ISA/pam_unix.so nullok use_authtok md5 shadow
password sufficient /lib/security/$ISA/pam_krb5.so use_authtok
password sufficient /lib/security/$ISA/pam_winbind.so use_authtok
# password required /lib/security/$ISA/pam_deny.so

session required /lib/security/$ISA/pam_limits.so
session required /lib/security/$ISA/pam_unix.so
#session optional /lib/security/$ISA/pam_mkhomedir.so skel=etc/skel/ umask=0077
session optional /lib/security/$ISA/pam_krb5.so
[/more]


Выкладываю также логи:
[more]
10.138.69.118.log
[2009/03/23 11:18:13, 3] smbd/oplock.c:init_oplocks(1302)
open_oplock_ipc: opening loopback UDP socket.
[2009/03/23 11:18:13, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
Linux kernel oplocks enabled
[2009/03/23 11:18:13, 3] smbd/oplock.c:init_oplocks(1333)
open_oplock ipc: pid = 24225, global_oplock_port = 32891
[2009/03/23 11:18:13, 4] lib/time.c:get_serverzone(122)
Serverzone is -10800
[2009/03/23 11:18:13, 3] lib/access.c:check_access(313)
check_access: no hostnames in host allow/deny list.
[2009/03/23 11:18:13, 2] lib/access.c:check_access(324)
Allowed connection from (10.138.69.118)
[2009/03/23 11:18:13, 3] smbd/process.c:process_smb(1091)
Transaction 0 of length 137
[2009/03/23 11:18:13, 3] smbd/process.c:switch_message(886)
switch message SMBnegprot (pid 24225) conn 0x0
[2009/03/23 11:18:13, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:18:13, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2009/03/23 11:18:13, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN1.0]
[2009/03/23 11:18:13, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [Windows for Workgroups 3.1a]
[2009/03/23 11:18:13, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LM1.2X002]
[2009/03/23 11:18:13, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN2.1]
[2009/03/23 11:18:13, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [NT LM 0.12]
[2009/03/23 11:18:13, 3] smbd/negprot.c:reply_nt1(333)
using SPNEGO
[2009/03/23 11:18:13, 3] smbd/negprot.c:reply_negprot(549)
Selected protocol NT LM 0.12
[2009/03/23 11:18:13, 3] smbd/process.c:process_smb(1091)
Transaction 1 of length 2772
[2009/03/23 11:18:13, 3] smbd/process.c:switch_message(886)
switch message SMBsesssetupX (pid 24225) conn 0x0
[2009/03/23 11:18:13, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:18:13, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
wct=12 flg2=0xc807
[2009/03/23 11:18:13, 2] smbd/sesssetup.c:setup_new_vc_session(608)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2009/03/23 11:18:13, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
Doing spnego session setup
[2009/03/23 11:18:13, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
NativeOS=[Windows Server 2003 3790 Service Pack 1] NativeLanMan=[] PrimaryDomain=[Windows Server 2003 5.2]
[2009/03/23 11:18:13, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 2 840 48018 1 2 2
[2009/03/23 11:18:13, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 2 840 113554 1 2 2
[2009/03/23 11:18:13, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 3 6 1 4 1 311 2 2 10
[2009/03/23 11:18:13, 3] smbd/sesssetup.c:reply_spnego_negotiate(447)
Got secblob of size 2510
[2009/03/23 11:18:13, 3] smbd/sesssetup.c:reply_spnego_kerberos(179)
Ticket name is [Администратор@DAS.BAD.GOR.RU]
[2009/03/23 11:18:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username DAS+Администратор is invalid on this system
[2009/03/23 11:18:13, 3] smbd/error.c:error_packet(129)
error packet at smbd/sesssetup.c(255) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE
[2009/03/23 11:18:13, 3] smbd/process.c:process_smb(1091)
Transaction 2 of length 2772
[2009/03/23 11:18:13, 3] smbd/process.c:switch_message(886)
switch message SMBsesssetupX (pid 24225) conn 0x0
[2009/03/23 11:18:13, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:18:13, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
wct=12 flg2=0xc807
[2009/03/23 11:18:13, 2] smbd/sesssetup.c:setup_new_vc_session(608)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2009/03/23 11:18:13, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
Doing spnego session setup
[2009/03/23 11:18:13, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
NativeOS=[Windows Server 2003 3790 Service Pack 1] NativeLanMan=[] PrimaryDomain=[Windows Server 2003 5.2]
[2009/03/23 11:18:13, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 2 840 48018 1 2 2
[2009/03/23 11:18:13, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 2 840 113554 1 2 2
[2009/03/23 11:18:13, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 3 6 1 4 1 311 2 2 10
[2009/03/23 11:18:13, 3] smbd/sesssetup.c:reply_spnego_negotiate(447)
Got secblob of size 2510
[2009/03/23 11:18:13, 3] smbd/sesssetup.c:reply_spnego_kerberos(179)
Ticket name is [Администратор@DAS.BAD.GOR.RU]
[2009/03/23 11:18:13, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username DAS+Администратор is invalid on this system
[2009/03/23 11:18:13, 3] smbd/error.c:error_packet(129)
error packet at smbd/sesssetup.c(255) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE
[2009/03/23 11:18:15, 3] smbd/process.c:timeout_processing(1336)
timeout_processing: End of file from client (client has disconnected).
[2009/03/23 11:18:15, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:18:15, 2] smbd/server.c:exit_server(571)
Closing connections
[2009/03/23 11:18:15, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2009/03/23 11:18:15, 3] smbd/connection.c:yield_connection(76)
yield_connection: tdb_delete for name failed with error Record does not exist.
[2009/03/23 11:18:15, 3] smbd/server.c:exit_server(614)
Server exit (normal exit)
[2009/03/23 11:18:25, 3] smbd/oplock.c:init_oplocks(1302)
open_oplock_ipc: opening loopback UDP socket.
[2009/03/23 11:18:25, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
Linux kernel oplocks enabled
[2009/03/23 11:18:25, 3] smbd/oplock.c:init_oplocks(1333)
open_oplock ipc: pid = 24238, global_oplock_port = 32891
[2009/03/23 11:18:25, 4] lib/time.c:get_serverzone(122)
Serverzone is -10800
[2009/03/23 11:18:25, 3] lib/access.c:check_access(313)
check_access: no hostnames in host allow/deny list.
[2009/03/23 11:18:25, 2] lib/access.c:check_access(324)
Allowed connection from (10.138.69.118)
[2009/03/23 11:18:25, 3] smbd/process.c:process_smb(1091)
Transaction 0 of length 137
[2009/03/23 11:18:25, 3] smbd/process.c:switch_message(886)
switch message SMBnegprot (pid 24238) conn 0x0
[2009/03/23 11:18:25, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:18:25, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2009/03/23 11:18:25, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN1.0]
[2009/03/23 11:18:25, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [Windows for Workgroups 3.1a]
[2009/03/23 11:18:25, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LM1.2X002]
[2009/03/23 11:18:25, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN2.1]
[2009/03/23 11:18:25, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [NT LM 0.12]
[2009/03/23 11:18:25, 3] smbd/negprot.c:reply_nt1(333)
using SPNEGO
[2009/03/23 11:18:25, 3] smbd/negprot.c:reply_negprot(549)
Selected protocol NT LM 0.12
[2009/03/23 11:18:25, 3] smbd/process.c:timeout_processing(1336)
timeout_processing: End of file from client (client has disconnected).
[2009/03/23 11:18:25, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:18:25, 2] smbd/server.c:exit_server(571)
Closing connections
[2009/03/23 11:18:25, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2009/03/23 11:18:25, 3] smbd/connection.c:yield_connection(76)
yield_connection: tdb_delete for name failed with error Record does not exist.
[2009/03/23 11:18:25, 3] smbd/server.c:exit_server(614)
Server exit (normal exit)
[2009/03/23 11:18:26, 3] smbd/oplock.c:init_oplocks(1302)
open_oplock_ipc: opening loopback UDP socket.
[2009/03/23 11:18:26, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
Linux kernel oplocks enabled
[2009/03/23 11:18:26, 3] smbd/oplock.c:init_oplocks(1333)
open_oplock ipc: pid = 24239, global_oplock_port = 32891
[2009/03/23 11:18:26, 4] lib/time.c:get_serverzone(122)
Serverzone is -10800
[2009/03/23 11:18:26, 3] lib/access.c:check_access(313)
check_access: no hostnames in host allow/deny list.
[2009/03/23 11:18:26, 2] lib/access.c:check_access(324)
Allowed connection from (10.138.69.118)
[2009/03/23 11:18:26, 3] smbd/process.c:process_smb(1091)
Transaction 0 of length 137
[2009/03/23 11:18:26, 3] smbd/process.c:switch_message(886)
switch message SMBnegprot (pid 24239) conn 0x0
[2009/03/23 11:18:26, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:18:26, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2009/03/23 11:18:26, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN1.0]
[2009/03/23 11:18:26, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [Windows for Workgroups 3.1a]
[2009/03/23 11:18:26, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LM1.2X002]
[2009/03/23 11:18:26, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN2.1]
[2009/03/23 11:18:26, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [NT LM 0.12]
[2009/03/23 11:18:26, 3] smbd/negprot.c:reply_nt1(333)
using SPNEGO
[2009/03/23 11:18:26, 3] smbd/negprot.c:reply_negprot(549)
Selected protocol NT LM 0.12
[2009/03/23 11:18:26, 3] smbd/process.c:timeout_processing(1336)
timeout_processing: End of file from client (client has disconnected).
[2009/03/23 11:18:26, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:18:26, 2] smbd/server.c:exit_server(571)
Closing connections
[2009/03/23 11:18:26, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2009/03/23 11:18:26, 3] smbd/connection.c:yield_connection(76)
yield_connection: tdb_delete for name failed with error Record does not exist.
[2009/03/23 11:18:26, 3] smbd/server.c:exit_server(614)
Server exit (normal exit)
[2009/03/23 11:18:26, 3] smbd/oplock.c:init_oplocks(1302)
open_oplock_ipc: opening loopback UDP socket.
[2009/03/23 11:18:26, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
Linux kernel oplocks enabled
[2009/03/23 11:18:26, 3] smbd/oplock.c:init_oplocks(1333)
open_oplock ipc: pid = 24240, global_oplock_port = 32891
[2009/03/23 11:18:26, 4] lib/time.c:get_serverzone(122)
Serverzone is -10800
[2009/03/23 11:18:26, 3] lib/access.c:check_access(313)
check_access: no hostnames in host allow/deny list.
[2009/03/23 11:18:26, 2] lib/access.c:check_access(324)
Allowed connection from (10.138.69.118)
[2009/03/23 11:18:26, 3] smbd/process.c:process_smb(1091)
Transaction 0 of length 137
[2009/03/23 11:18:26, 3] smbd/process.c:switch_message(886)
switch message SMBnegprot (pid 24240) conn 0x0
[2009/03/23 11:18:26, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:18:26, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2009/03/23 11:18:26, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN1.0]
[2009/03/23 11:18:26, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [Windows for Workgroups 3.1a]
[2009/03/23 11:18:26, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LM1.2X002]
[2009/03/23 11:18:26, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN2.1]
[2009/03/23 11:18:26, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [NT LM 0.12]
[2009/03/23 11:18:26, 3] smbd/negprot.c:reply_nt1(333)
using SPNEGO
[2009/03/23 11:18:26, 3] smbd/negprot.c:reply_negprot(549)
Selected protocol NT LM 0.12
[2009/03/23 11:18:26, 3] smbd/process.c:timeout_processing(1336)
timeout_processing: End of file from client (client has disconnected).
[2009/03/23 11:18:26, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:18:26, 2] smbd/server.c:exit_server(571)
Closing connections
[2009/03/23 11:18:26, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2009/03/23 11:18:26, 3] smbd/connection.c:yield_connection(76)
yield_connection: tdb_delete for name failed with error Record does not exist.
[2009/03/23 11:18:26, 3] smbd/server.c:exit_server(614)
Server exit (normal exit)
[2009/03/23 11:18:27, 3] smbd/oplock.c:init_oplocks(1302)
open_oplock_ipc: opening loopback UDP socket.
[2009/03/23 11:18:27, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
Linux kernel oplocks enabled
[2009/03/23 11:18:27, 3] smbd/oplock.c:init_oplocks(1333)
open_oplock ipc: pid = 24241, global_oplock_port = 32891
[2009/03/23 11:18:27, 4] lib/time.c:get_serverzone(122)
Serverzone is -10800
[2009/03/23 11:18:27, 3] lib/access.c:check_access(313)
check_access: no hostnames in host allow/deny list.
[2009/03/23 11:18:27, 2] lib/access.c:check_access(324)
Allowed connection from (10.138.69.118)
[2009/03/23 11:18:27, 3] smbd/process.c:process_smb(1091)
Transaction 0 of length 137
[2009/03/23 11:18:27, 3] smbd/process.c:switch_message(886)
switch message SMBnegprot (pid 24241) conn 0x0
[2009/03/23 11:18:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN1.0]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [Windows for Workgroups 3.1a]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LM1.2X002]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN2.1]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [NT LM 0.12]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_nt1(333)
using SPNEGO
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(549)
Selected protocol NT LM 0.12
[2009/03/23 11:18:27, 3] smbd/process.c:timeout_processing(1336)
timeout_processing: End of file from client (client has disconnected).
[2009/03/23 11:18:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:18:27, 2] smbd/server.c:exit_server(571)
Closing connections
[2009/03/23 11:18:27, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2009/03/23 11:18:27, 3] smbd/connection.c:yield_connection(76)
yield_connection: tdb_delete for name failed with error Record does not exist.
[2009/03/23 11:18:27, 3] smbd/server.c:exit_server(614)
Server exit (normal exit)
[2009/03/23 11:18:27, 3] smbd/oplock.c:init_oplocks(1302)
open_oplock_ipc: opening loopback UDP socket.
[2009/03/23 11:18:27, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
Linux kernel oplocks enabled
[2009/03/23 11:18:27, 3] smbd/oplock.c:init_oplocks(1333)
open_oplock ipc: pid = 24242, global_oplock_port = 32891
[2009/03/23 11:18:27, 4] lib/time.c:get_serverzone(122)
Serverzone is -10800
[2009/03/23 11:18:27, 3] lib/access.c:check_access(313)
check_access: no hostnames in host allow/deny list.
[2009/03/23 11:18:27, 2] lib/access.c:check_access(324)
Allowed connection from (10.138.69.118)
[2009/03/23 11:18:27, 3] smbd/process.c:process_smb(1091)
Transaction 0 of length 137
[2009/03/23 11:18:27, 3] smbd/process.c:switch_message(886)
switch message SMBnegprot (pid 24242) conn 0x0
[2009/03/23 11:18:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN1.0]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [Windows for Workgroups 3.1a]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LM1.2X002]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN2.1]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [NT LM 0.12]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_nt1(333)
using SPNEGO
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(549)
Selected protocol NT LM 0.12
[2009/03/23 11:18:27, 3] smbd/process.c:timeout_processing(1336)
timeout_processing: End of file from client (client has disconnected).
[2009/03/23 11:18:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:18:27, 2] smbd/server.c:exit_server(571)
Closing connections
[2009/03/23 11:18:27, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2009/03/23 11:18:27, 3] smbd/connection.c:yield_connection(76)
yield_connection: tdb_delete for name failed with error Record does not exist.
[2009/03/23 11:18:27, 3] smbd/server.c:exit_server(614)
Server exit (normal exit)
[2009/03/23 11:18:27, 3] smbd/oplock.c:init_oplocks(1302)
open_oplock_ipc: opening loopback UDP socket.
[2009/03/23 11:18:27, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
Linux kernel oplocks enabled
[2009/03/23 11:18:27, 3] smbd/oplock.c:init_oplocks(1333)
open_oplock ipc: pid = 24243, global_oplock_port = 32891
[2009/03/23 11:18:27, 4] lib/time.c:get_serverzone(122)
Serverzone is -10800
[2009/03/23 11:18:27, 3] lib/access.c:check_access(313)
check_access: no hostnames in host allow/deny list.
[2009/03/23 11:18:27, 2] lib/access.c:check_access(324)
Allowed connection from (10.138.69.118)
[2009/03/23 11:18:27, 3] smbd/process.c:process_smb(1091)
Transaction 0 of length 137
[2009/03/23 11:18:27, 3] smbd/process.c:switch_message(886)
switch message SMBnegprot (pid 24243) conn 0x0
[2009/03/23 11:18:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN1.0]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [Windows for Workgroups 3.1a]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LM1.2X002]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN2.1]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [NT LM 0.12]
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_nt1(333)
using SPNEGO
[2009/03/23 11:18:27, 3] smbd/negprot.c:reply_negprot(549)
Selected protocol NT LM 0.12
[2009/03/23 11:18:27, 3] smbd/process.c:timeout_processing(1336)
timeout_processing: End of file from client (client has disconnected).
[2009/03/23 11:18:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:18:27, 2] smbd/server.c:exit_server(571)
Closing connections
[2009/03/23 11:18:27, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2009/03/23 11:18:27, 3] smbd/connection.c:yield_connection(76)
yield_connection: tdb_delete for name failed with error Record does not exist.
[2009/03/23 11:18:27, 3] smbd/server.c:exit_server(614)
Server exit (normal exit)

10.138.69.212.log

[2009/03/23 11:17:49, 3] smbd/oplock.c:init_oplocks(1302)
open_oplock_ipc: opening loopback UDP socket.
[2009/03/23 11:17:49, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
Linux kernel oplocks enabled
[2009/03/23 11:17:49, 3] smbd/oplock.c:init_oplocks(1333)
open_oplock ipc: pid = 24196, global_oplock_port = 32889
[2009/03/23 11:17:49, 4] lib/time.c:get_serverzone(122)
Serverzone is -10800
[2009/03/23 11:17:49, 3] lib/access.c:check_access(313)
check_access: no hostnames in host allow/deny list.
[2009/03/23 11:17:49, 2] lib/access.c:check_access(324)
Allowed connection from (10.138.69.212)
[2009/03/23 11:17:49, 3] smbd/process.c:process_smb(1091)
Transaction 0 of length 72
[2009/03/23 11:17:49, 2] smbd/reply.c:reply_special(235)
netbios connect: name1=SAMBA name2=ADMIN013
[2009/03/23 11:17:49, 2] smbd/reply.c:reply_special(242)
netbios connect: local=samba remote=admin013, name type = 0

admin013.log

[2009/03/23 11:17:49, 3] smbd/process.c:process_smb(1091)
Transaction 1 of length 137
[2009/03/23 11:17:49, 3] smbd/process.c:switch_message(886)
switch message SMBnegprot (pid 24196) conn 0x0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2009/03/23 11:17:49, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN1.0]
[2009/03/23 11:17:49, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [Windows for Workgroups 3.1a]
[2009/03/23 11:17:49, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LM1.2X002]
[2009/03/23 11:17:49, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN2.1]
[2009/03/23 11:17:49, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [NT LM 0.12]
[2009/03/23 11:17:49, 3] smbd/negprot.c:reply_nt1(333)
using SPNEGO
[2009/03/23 11:17:49, 3] smbd/negprot.c:reply_negprot(549)
Selected protocol NT LM 0.12
[2009/03/23 11:17:49, 3] smbd/process.c:process_smb(1091)
Transaction 2 of length 2668
[2009/03/23 11:17:49, 3] smbd/process.c:switch_message(886)
switch message SMBsesssetupX (pid 24196) conn 0x0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
wct=12 flg2=0xc807
[2009/03/23 11:17:49, 2] smbd/sesssetup.c:setup_new_vc_session(608)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2009/03/23 11:17:49, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
Doing spnego session setup
[2009/03/23 11:17:49, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
[2009/03/23 11:17:49, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 2 840 48018 1 2 2
[2009/03/23 11:17:49, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 2 840 113554 1 2 2
[2009/03/23 11:17:49, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 3 6 1 4 1 311 2 2 10
[2009/03/23 11:17:49, 3] smbd/sesssetup.c:reply_spnego_negotiate(447)
Got secblob of size 2436
[2009/03/23 11:17:49, 3] smbd/sesssetup.c:reply_spnego_kerberos(179)
Ticket name is [admin013@ DAS.BAD.GOR.RU]
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/03/23 11:17:49, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 4] lib/substitute.c:automount_server(337)
Home server: samba
[2009/03/23 11:17:49, 4] lib/substitute.c:automount_server(337)
Home server: samba
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/03/23 11:17:49, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/03/23 11:17:49, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/03/23 11:17:49, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/03/23 11:17:49, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/03/23 11:17:49, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/03/23 11:17:49, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/03/23 11:17:49, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/password.c:register_vuid(222)
User name: admin013    Real name:
[2009/03/23 11:17:49, 3] smbd/password.c:register_vuid(241)
UNIX uid 503 is UNIX user admin013, and will be vuid 100
[2009/03/23 11:17:49, 4] auth/pampass.c:smb_pam_start(459)
smb_pam_start: PAM: Init user: admin013
[2009/03/23 11:17:49, 4] auth/pampass.c:smb_pam_start(476)
smb_pam_start: PAM: setting rhost to: 10.138.69.212
[2009/03/23 11:17:49, 4] auth/pampass.c:smb_pam_start(485)
smb_pam_start: PAM: setting tty
[2009/03/23 11:17:49, 4] auth/pampass.c:smb_pam_start(493)
smb_pam_start: PAM: Init passed for user: admin013
[2009/03/23 11:17:49, 4] auth/pampass.c:smb_internal_pam_session(630)
smb_internal_pam_session: PAM: tty set to: smb/24196/100
[2009/03/23 11:17:49, 4] auth/pampass.c:smb_pam_end(440)
smb_pam_end: PAM: PAM_END OK.
[2009/03/23 11:17:49, 3] smbd/password.c:register_vuid(270)
Adding homes service for user 'admin013' using home directory: '/home/samba/admin013'
[2009/03/23 11:17:49, 3] param/loadparm.c:lp_add_home(2341)
adding home's share [admin013] for user 'admin013' at '/home/samba/admin013'
[2009/03/23 11:17:49, 3] smbd/process.c:process_smb(1091)
Transaction 3 of length 80
[2009/03/23 11:17:49, 3] smbd/process.c:switch_message(886)
switch message SMBtconX (pid 24196) conn 0x0
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 4] smbd/reply.c:reply_tcon_and_X(408)
Client requested device type [?????] for share [IPC$]
[2009/03/23 11:17:49, 3] lib/access.c:check_access(313)
check_access: no hostnames in host allow/deny list.
[2009/03/23 11:17:49, 2] lib/access.c:check_access(324)
Allowed connection from (10.138.69.212)
[2009/03/23 11:17:49, 3] smbd/service.c:make_connection_snum(472)
Connect path is '/tmp' for service [IPC$]
[2009/03/23 11:17:49, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
get_share_security: using default secdesc for IPC$
[2009/03/23 11:17:49, 3] lib/util_seaccess.c:se_access_check(251)
[2009/03/23 11:17:49, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-2325587448-473723436-2317771444-2006
se_access_check: also S-1-5-21-2325587448-473723436-2317771444-1001
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-2325587448-473723436-2317771444-1011
se_access_check: also S-1-5-21-2325587448-473723436-2317771444-1101
se_access_check: also S-1-5-21-2325587448-473723436-2317771444-2001
se_access_check: also S-1-5-21-2325587448-473723436-2317771444-2003
se_access_check: also S-1-5-21-2325587448-473723436-2317771444-2005
[2009/03/23 11:17:49, 3] smbd/vfs.c:vfs_init_default(203)
Initialising default vfs hooks
[2009/03/23 11:17:49, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
get_share_security: using default secdesc for IPC$
[2009/03/23 11:17:49, 3] lib/util_seaccess.c:se_access_check(251)
[2009/03/23 11:17:49, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-2325587448-473723436-2317771444-2006
se_access_check: also S-1-5-21-2325587448-473723436-2317771444-1001
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-11
se_access_check: also S-1-5-21-2325587448-473723436-2317771444-1011
se_access_check: also S-1-5-21-2325587448-473723436-2317771444-1101
se_access_check: also S-1-5-21-2325587448-473723436-2317771444-2001
se_access_check: also S-1-5-21-2325587448-473723436-2317771444-2003
se_access_check: also S-1-5-21-2325587448-473723436-2317771444-2005
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (503, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/service.c:make_connection_snum(648)
admin013 (10.138.69.212) connect to service IPC$ initially as user admin013 (uid=503, gid=0) (pid 24196)
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 3] smbd/reply.c:reply_tcon_and_X(456)
tconX service=IPC$
[2009/03/23 11:17:49, 3] smbd/process.c:process_smb(1091)
Transaction 4 of length 104
[2009/03/23 11:17:49, 3] smbd/process.c:switch_message(886)
switch message SMBntcreateX (pid 24196) conn 0x9dc1290
[2009/03/23 11:17:49, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (503, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:49, 4] smbd/vfs.c:vfs_ChDir(654)
vfs_ChDir to /tmp
[2009/03/23 11:17:49, 4] smbd/nttrans.c:nt_open_pipe(497)
nt_open_pipe: Opening pipe \srvsvc.
[2009/03/23 11:17:49, 3] smbd/nttrans.c:nt_open_pipe(514)
nt_open_pipe: Known pipe srvsvc opening.
[2009/03/23 11:17:49, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178)
Open pipe requested srvsvc (pipes_open=0)
[2009/03/23 11:17:49, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(278)
Create pipe requested srvsvc
[2009/03/23 11:17:49, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(370)
Created internal pipe srvsvc (pipes_open=0)
[2009/03/23 11:17:49, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(257)
Opened pipe srvsvc with handle 7329 (pipes_open=1)
[2009/03/23 11:17:49, 3] smbd/process.c:process_smb(1091)
Transaction 5 of length 140
[2009/03/23 11:17:49, 3] smbd/process.c:switch_message(886)
switch message SMBwriteX (pid 24196) conn 0x9dc1290
[2009/03/23 11:17:49, 4] smbd/uid.c:change_to_user(194)
change_to_user: Skipping user change - already user
[2009/03/23 11:17:49, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
search for pipe pnum=7329
[2009/03/23 11:17:49, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887)
api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
[2009/03/23 11:17:49, 3] rpc_server/srv_pipe.c:check_bind_req(762)
check_bind_req for \PIPE\srvsvc
[2009/03/23 11:17:49, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
writeX-IPC pnum=7329 nwritten=72
[2009/03/23 11:17:49, 3] smbd/process.c:process_smb(1091)
Transaction 6 of length 63
[2009/03/23 11:17:49, 3] smbd/process.c:switch_message(886)
switch message SMBreadX (pid 24196) conn 0x9dc1290
[2009/03/23 11:17:49, 4] smbd/uid.c:change_to_user(194)
change_to_user: Skipping user change - already user
[2009/03/23 11:17:49, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
search for pipe pnum=7329
[2009/03/23 11:17:49, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
readX-IPC pnum=7329 min=1024 max=1024 nread=68
[2009/03/23 11:17:49, 3] smbd/process.c:process_smb(1091)
Transaction 7 of length 172
[2009/03/23 11:17:49, 3] smbd/process.c:switch_message(886)
switch message SMBtrans (pid 24196) conn 0x9dc1290
[2009/03/23 11:17:49, 4] smbd/uid.c:change_to_user(194)
change_to_user: Skipping user change - already user
[2009/03/23 11:17:49, 3] smbd/ipc.c:reply_trans(538)
trans <\PIPE\> data=84 params=0 setup=2
[2009/03/23 11:17:49, 3] smbd/ipc.c:named_pipe(334)
named pipe command on <> name
[2009/03/23 11:17:49, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
search for pipe pnum=7329
[2009/03/23 11:17:49, 3] smbd/ipc.c:api_fd_reply(296)
Got API command 0x26 on pipe "srvsvc" (pnum 7329)
[2009/03/23 11:17:49, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 0
[2009/03/23 11:17:49, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
api_rpcTNP: srvsvc op 0xf - api_rpcTNP: rpc command: SRV_NET_SHARE_ENUM_ALL
[2009/03/23 11:17:49, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
free_pipe_context: destroying talloc pool of size 4304
[2009/03/23 11:17:49, 3] smbd/process.c:process_smb(1091)
Transaction 8 of length 45
[2009/03/23 11:17:49, 3] smbd/process.c:switch_message(886)
switch message SMBclose (pid 24196) conn 0x9dc1290
[2009/03/23 11:17:49, 4] smbd/uid.c:change_to_user(194)
change_to_user: Skipping user change - already user
[2009/03/23 11:17:49, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
search for pipe pnum=7329
[2009/03/23 11:17:49, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1081)
closed pipe name srvsvc pnum=7329 (pipes_open=0)
[2009/03/23 11:17:55, 3] smbd/process.c:process_smb(1091)
Transaction 9 of length 2592
[2009/03/23 11:17:55, 3] smbd/process.c:switch_message(886)
switch message SMBsesssetupX (pid 24196) conn 0x0
[2009/03/23 11:17:55, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:55, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
wct=12 flg2=0xc807
[2009/03/23 11:17:55, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
Doing spnego session setup
[2009/03/23 11:17:55, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
[2009/03/23 11:17:55, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 2 840 48018 1 2 2
[2009/03/23 11:17:55, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 2 840 113554 1 2 2
[2009/03/23 11:17:55, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
Got OID 1 3 6 1 4 1 311 2 2 10
[2009/03/23 11:17:55, 3] smbd/sesssetup.c:reply_spnego_negotiate(447)
Got secblob of size 2360
[2009/03/23 11:17:55, 3] smbd/sesssetup.c:reply_spnego_kerberos(179)
Ticket name is [ADMIN013$@ DAS.BAD.GOR.RU]
[2009/03/23 11:17:55, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username DAS+ADMIN013$ is invalid on this system
[2009/03/23 11:17:55, 3] smbd/error.c:error_packet(129)
error packet at smbd/sesssetup.c(255) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE
[2009/03/23 11:17:59, 3] smbd/process.c:process_smb(1091)
Transaction 10 of length 43
[2009/03/23 11:17:59, 3] smbd/process.c:switch_message(886)
switch message SMBulogoffX (pid 24196) conn 0x0
[2009/03/23 11:17:59, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:59, 4] auth/pampass.c:smb_pam_start(459)
smb_pam_start: PAM: Init user: admin013
[2009/03/23 11:17:59, 4] auth/pampass.c:smb_pam_start(476)
smb_pam_start: PAM: setting rhost to: 10.138.69.212
[2009/03/23 11:17:59, 4] auth/pampass.c:smb_pam_start(485)
smb_pam_start: PAM: setting tty
[2009/03/23 11:17:59, 4] auth/pampass.c:smb_pam_start(493)
smb_pam_start: PAM: Init passed for user: admin013
[2009/03/23 11:17:59, 4] auth/pampass.c:smb_internal_pam_session(630)
smb_internal_pam_session: PAM: tty set to: smb/24196/100
[2009/03/23 11:17:59, 4] auth/pampass.c:smb_pam_end(440)
smb_pam_end: PAM: PAM_END OK.
[2009/03/23 11:17:59, 3] smbd/reply.c:reply_ulogoffX(1249)
ulogoffX vuid=100
[2009/03/23 11:17:59, 3] smbd/process.c:process_smb(1091)
Transaction 11 of length 39
[2009/03/23 11:17:59, 3] smbd/process.c:switch_message(886)
switch message SMBtdis (pid 24196) conn 0x9dc1290
[2009/03/23 11:17:59, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:59, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:59, 3] smbd/service.c:close_cnum(841)
admin013 (10.138.69.212) closed connection to service IPC$
[2009/03/23 11:17:59, 3] smbd/connection.c:yield_connection(69)
Yielding connection to IPC$
[2009/03/23 11:17:59, 4] smbd/vfs.c:vfs_ChDir(654)
vfs_ChDir to /
[2009/03/23 11:17:59, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:59, 3] smbd/process.c:timeout_processing(1336)
timeout_processing: End of file from client (client has disconnected).
[2009/03/23 11:17:59, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 11:17:59, 2] smbd/server.c:exit_server(571)
Closing connections
[2009/03/23 11:17:59, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2009/03/23 11:17:59, 3] smbd/server.c:exit_server(614)
Server exit (normal exit)

nmbd.log

header: rcode=0 qdcount=1 ancount=0 nscount=0 arcount=0
question: q_name=KASPERSKY.RU<00> q_type=32 q_class=1
[2009/03/23 11:21:08, 3] nmbd/nmbd_incomingrequests.c:process_name_query_request(454)
process_name_query_request: Name query from 10.138.69.152 on subnet 10.138.69.11 for name KASPERSKY.RU<00>
[2009/03/23 11:21:08, 4] nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(173)
find_workgroup_on_subnet: workgroup search for DAS on subnet 10.138.69.11: found.

smbd.log

[2009/03/23 13:06:11, 2] lib/interface.c:add_interface(79)
added interface ip=10.138.69.11 bcast=10.138.69.255 nmask=255.255.255.0
[2009/03/23 13:06:11, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/03/23 13:06:11, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/03/23 13:06:11, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/23 13:06:11, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 13:06:11, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/03/23 13:06:11, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/03/23 13:06:11, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/23 13:06:11, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 13:06:11, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/03/23 13:06:11, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/03/23 13:06:11, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/23 13:06:11, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/23 13:06:11, 3] smbd/server.c:main(793)
loaded services
[2009/03/23 13:06:11, 3] smbd/server.c:main(808)
Becoming a daemon.
[2009/03/23 13:06:11, 2] lib/tallocmsg.c:register_msg_pool_usage(57)
Registered MSG_REQ_POOL_USAGE
[2009/03/23 13:06:11, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71)
Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
[2009/03/23 13:06:11, 4] libsmb/namequery.c:get_dc_list(1406)
get_dc_list: returning 1 ip addresses in an ordered list
[2009/03/23 13:06:11, 4] libsmb/namequery.c:get_dc_list(1407)
get_dc_list: 10.138.69.118:389
[2009/03/23 13:06:11, 3] libads/ldap.c:ads_connect(285)
Connected to LDAP server 10.138.69.118
[2009/03/23 13:06:11, 3] libads/ldap.c:ads_server_info(2469)
got ldap server name f1@DAS.BAD.GOR.RU, using bind path: dc=DAS,dc=BAD,dc=GOR,dc=RU
[2009/03/23 13:06:11, 4] libads/ldap.c:ads_server_info(2475)
time offset is 6 seconds
[2009/03/23 13:06:11, 4] libads/sasl.c:ads_sasl_bind(447)
Found SASL mechanism GSS-SPNEGO
[2009/03/23 13:06:11, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
ads_sasl_spnego_bind: got OID=1 2 840 48018 1 2 2
[2009/03/23 13:06:11, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2
[2009/03/23 13:06:11, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 3
[2009/03/23 13:06:11, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10
[2009/03/23 13:06:11, 3] libads/sasl.c:ads_sasl_spnego_bind(211)
ads_sasl_spnego_bind: got server principal name =f1$@DAS.BAD.GOR.RU
[2009/03/23 13:06:11, 3] libsmb/clikrb5.c:ads_krb5_mk_req(382)
ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found)
[2009/03/23 13:06:11, 4] libsmb/clikrb5.c:ads_krb5_mk_req(398)
ads_krb5_mk_req: Advancing clock by 6 seconds to cope with clock skew
[2009/03/23 13:06:11, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(319)
Ticket in ccache[MEMORY:prtpub_cache] expiration Mon, 23 Mar 2009 23:06:17 GMT
[2009/03/23 13:06:11, 3] printing/printing.c:start_background_queue(1224)
start_background_queue: Starting background LPQ thread
[2009/03/23 13:06:11, 2] smbd/server.c:open_sockets_smbd(324)
waiting for a connection

[color=#990000][/color]

[2009/03/23 13:16:32, 4] libads/ldap.c:ads_server_info(2475)
time offset is 6 seconds
[2009/03/23 13:16:32, 4] libsmb/namequery_dc.c:ads_dc_name(63)
ads_dc_name: using server='F1' IP=10.138.69.118
[2009/03/23 13:16:32, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(109)
IPC$ connections done anonymously
[2009/03/23 13:16:32, 3] libsmb/cliconnect.c:cli_start_connection(1388)
Connecting to host=F1
[2009/03/23 13:16:32, 3] lib/util_sock.c:open_socket_out(752)
Connecting to 10.138.69.118 at port 445
[2009/03/23 13:16:32, 3] libsmb/cliconnect.c:cli_session_setup_spnego(713)
Doing spnego session setup (blob length=106)
[2009/03/23 13:16:32, 3] libsmb/cliconnect.c:cli_session_setup_spnego(738)
got OID=1 2 840 48018 1 2 2
[2009/03/23 13:16:32, 3] libsmb/cliconnect.c:cli_session_setup_spnego(738)
got OID=1 2 840 113554 1 2 2
[2009/03/23 13:16:32, 3] libsmb/cliconnect.c:cli_session_setup_spnego(738)
got OID=1 2 840 113554 1 2 2 3
[2009/03/23 13:16:32, 3] libsmb/cliconnect.c:cli_session_setup_spnego(738)
got OID=1 3 6 1 4 1 311 2 2 10
[2009/03/23 13:16:32, 3] libsmb/cliconnect.c:cli_session_setup_spnego(745)
got principal=f1$@DAS.BAD.GOR.RU
[2009/03/23 13:16:32, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(538)
Doing kerberos session setup
[2009/03/23 13:16:32, 4] libsmb/clikrb5.c:ads_krb5_mk_req(398)
ads_krb5_mk_req: Advancing clock by 6 seconds to cope with clock skew
[2009/03/23 13:16:32, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(319)
Ticket in ccache[MEMORY:cliconnect] expiration Mon, 23 Mar 2009 23:16:38 GMT
[2009/03/23 13:16:32, 4] passdb/secrets.c:secrets_fetch_trust_account_password(290)
Using cleartext machine password
[2009/03/23 13:16:32, 4] rpc_client/cli_netlogon.c:cli_net_req_chal(45)
cli_net_req_chal: LSA Request Challenge from SAMBA to F1: 099DE9BF3D69B8E7
[2009/03/23 13:16:32, 4] libsmb/credentials.c:cred_session_key(59)
cred_session_key
[2009/03/23 13:16:32, 4] libsmb/credentials.c:cred_create(90)
cred_create
[2009/03/23 13:16:32, 4] rpc_client/cli_netlogon.c:cli_net_auth2(108)
cli_net_auth2: srv:\\F1 acct:SAMBA$ sc:2 mc: SAMBA chal 89C6F0AD1B584711 neg: 400701ff
[2009/03/23 13:16:32, 4] libsmb/credentials.c:cred_create(90)
cred_create
[2009/03/23 13:16:32, 4] libsmb/credentials.c:cred_assert(121)
cred_assert
[2009/03/23 13:16:32, 3] nsswitch/winbindd_rpc.c:domain_sid(921)
rpc: domain_sid
[2009/03/23 13:16:32, 3] libsmb/namequery.c:resolve_lmhosts(855)
resolve_lmhosts: Attempting lmhosts lookup for name Samba<0x1c>
[2009/03/23 13:16:32, 4] libsmb/namequery.c:getlmhostsent(606)
getlmhostsent: lmhost entry: 127.0.0.1 localhost
[2009/03/23 13:16:32, 4] libsmb/namequery.c:getlmhostsent(606)
getlmhostsent: lmhost entry: 10.138.69.118 F1.DAS.BAD.GOR.RU
[2009/03/23 13:16:32, 3] libsmb/namequery.c:resolve_wins(752)
resolve_wins: Attempting wins lookup for name Samba<0x1c>
[2009/03/23 13:16:32, 3] libsmb/namequery.c:resolve_wins(755)
resolve_wins: WINS server resolution selected and no WINS servers listed.
[2009/03/23 13:16:32, 3] libsmb/namequery.c:name_resolve_bcast(694)
name_resolve_bcast: Attempting broadcast lookup for name Samba<0x1c>
[2009/03/23 13:16:33, 3] libsmb/namequery_dc.c:rpc_dc_name(106)
Could not look up dc's for domain Samba
[2009/03/23 13:16:33, 3] nsswitch/winbindd_cm.c:new_cm_connection(499)
Could not open a connection to Samba for \PIPE\lsarpc (NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND)
[/more]

Реально работающие конфиги с рабочего сервера CentOS 5.2 + samba-3.0.32 + AD 2003

[more=smb.conf]
[global]
realm = REMP.LAN
workgroup = REMP
server string = File server
# netbios name = SRV-PIGLET

dos charset = CP866

security = ads
encrypt passwords = Yes
allow trusted domains = Yes

# hosts allow = 192.168.0 192.168.1 127.
# bind interfaces only = Yes

load printers = no

os level = 10
preferred master = No
local master = No
domain master = No

time server = Yes

wins server = 192.168.0.1

dns proxy = no
wins proxy = no

socket options = TCP_NODELAY SO_RCVBUF=65536 SO_SNDBUF=65536

syslog = 0
log level = 0
max log size = 500

default case = lower
case sensitive = no

idmap uid = 100000-200000
idmap gid = 100000-200000

winbind enum users=yes
winbind enum groups=yes

winbind cache time = 10
winbind use default domain = no

# tune
getwd cache = yes
wide links = no

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No

[Distr]
comment = Software distribution share
path = /u01/share/distr
read only = Yes
guest ok = Yes
create mask = 0666
directory mask = 0777
valid users = "@REMP\administrators"
write list = "@REMP\administrators"
force group = wheel

[Media]
comment = Медиа файлы
path = /u01/share/media
read only = Yes
guest ok = Yes
create mask = 0666
directory mask = 0777
valid users = "@REMP\Domain users"
write list = "@REMP\Domain users"
force group = wheel
[/more]
[more=krb5.conf]
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
default_realm = REMP.LAN
dns_lookup_realm = true
dns_lookup_kdc = true
ticket_lifetime = 24h
forwardable = yes

[realms]
REMP.LAN = { default_domain = remp.lan }

[domain_realm]
.remp.lan = remp.lan
remp.lan = remp.lan

[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}

[/more]
[more=nsswitch.conf]
passwd: compat winbind
group: compat winbind
[/more]


PS
slepoj2
Скрой свои листинги в теги more

А они по RedHat Enterprise AS 4 + Samba 3.0.10 подойдут? Потому-что под разные сборки Linux разные настройки
И кстати что по поводу pam файлов? Какие файлы изменять и и что вписывать?

Кстати не мог бы ты скопировать и выложить,что выводиться на экран при использовании этих конфигов. запуская тестирование командой testparm -sv. Очень нужно, там оказывается полно скрытых настроек, которые я не вижу в smb.conf

Ребята подскажите плиз, настроил PDC под OpenSUSE 11.1 всё вроде нормально работает, компы в домен вводятся, юзеры друг друга видят, LDAP работает, все зашибись, но проблемки мелкие остались, боюсь что я чего то не знаю или не понимаю, гугля не помогла

я понимаю, что политик на самба для windows не будет еще лет 15 и в принципе файлы bat и cmd меня вполне устраивают, через них можно и шаблоны политик загурзить если препрёт, но параметр
logon script = <имя файла>
задает скрипт только для входа в домен пользователя и запускается он соотвественно от прав юзера, как сделать так, чтобы скрипты отрабатывали до логона?
как я понимаю эту тему существует 2 типа учётных записей, пользовательские и компьютерные. и при включении компьютера сперва он "авторизуется в домене" от учётки компьютера.
в Windows 2003 есть 2 скрипта логона для машины и для юзера, как быть тут? напишите очень жду

не могу понять зачем тебе что-то делать до входа пользователя

ну дак, когда пользователь заходит в систему он имеет права пользователя, соотвественно я не могу управлять самим компьютером, а только профилем этого самого пользователя, бегать и настраивать ручками, извольте... зачем тогда вообще всё это делать, бегать я могу и без SAMBA.
запуск из скрипта файлов от прав админа тоже не вариант, это создает угрозу безопасности. так как пароль надо будет указывать в открытом виде, даже если в хеше это всё равно лажа

это я понимаю - я не могу придумать задачу под это. Просто у меня такие задачи разовые. Винду переставил, один раз скриптец из-под админа запустил и все.

не понимаю, почему ты не понимаешь, сущетствует ветка реестра HKEY_LOCAL_MACHINE, HKEY_USERS доступ к этим ветвям имеет только администратор (за исключением родной подвеки пользователя в USERS) многие приложения и задачи которые приходится выполнять при администрировании делаются именно там. так как я не горю желанием бегать и запускать везде скриптики, это откровенный бред, я хочу чтобы он запускался с контроллера домена, вполне такое нормальное желание.
а задачи могут быть разнообразные, начиная от установки софта, антивирусов, программ контроля за устройствами. да мало ли что можно придумать.

не получится. точнее получится - но проблем в будущем не оберешься.

Накатишь автоматом какой-нибудь апдейт на все машины - и все поляжет. Лучше ограничиться только юзерским аккаунтом, это как минимум, гарантирует работоспособность компьютера.

Из примеров - установка SP2 на Windows XP. Статистика по какой-то большой конторе на около 5000 рабочих станций - 15% трупов. Не помню уже где читал - давно это было.

Представь себе ситуацию - приходишь ты на работу, а у тебя 15% машин не функционирует. Я себе не могу этого позволить. Мне проще и спокойнее пройтись по каждой раз в 2 месяца и поставить апдейты. Софт я вообще не считаю - это делается разово при установке.

Танкистка блин о чем спор то, я задал вопрос не о том, целесообразно ли это.
я работаю и у меня в сети около 1000 компьютеров и ни чего ни как проблем нет
в данном случаи сеть из 20 компиков

а при вводе компьютера в домен применяются политики и компьютера и пользователя и это важно. а в данном случаи я не знаю как применить политики компьютера так как logon script этого сделать не позволяет.

Эх, вот за что я люблю постсоветское пространство - так это за демагогию. Человек спросил "как", а ему объясняют "почему не надо".

Вообщем у меня логон-скрипты выполняются и от аккаунта пользователя, и от системного аккаунта. Второе реализовано так:

CLASS MACHINE
CATEGORY "Доменные политики"
POLICY "System-startup - общее описание"
KEYNAME "SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Startup\0"
PART "Каталог шаблона: " EDITTEXT
VALUENAME "FileSysPath" REQUIRED DEFAULT "C:\WINDOWS\System32\GroupPolicy\Machine"
END PART
PART "Идентификатор GPO: " EDITTEXT
VALUENAME "GPO-ID" REQUIRED DEFAULT "LocalGPO"
END PART
PART "Имя GPO: " EDITTEXT
VALUENAME "GPOName" REQUIRED DEFAULT "Local Group Policy"
END PART
PART "Идентификатор SOM: " EDITTEXT
VALUENAME "SOM-ID" REQUIRED DEFAULT "Local"
END PART
PART "Выводимое имя: " EDITTEXT
VALUENAME "DisplayName" REQUIRED DEFAULT "Local Group Policy"
END PART
END POLICY
POLICY "System-startup - параметры"
KEYNAME "SOFTWARE\Policies\Microsoft\Windows\System\Scripts\Startup\0\0"
PART "Исполняемый файл скрипта: " EDITTEXT
VALUENAME "Script" REQUIRED DEFAULT "\\server-name\netlogon\startup.bat"
END PART
PART "Параметры скрипта: " EDITTEXT
VALUENAME "Parameters"
END PART
END POLICY
POLICY "System-startup - параметры еще раз"
KEYNAME "SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine\Scripts\Startup\0\0"
PART "Исполняемый файл скрипта: " EDITTEXT
VALUENAME "Script" REQUIRED DEFAULT "\\server-name\netlogon\startup.bat"
END PART
PART "Параметры скрипта: " EDITTEXT
VALUENAME "Parameters"
END PART
END POLICY

Рабочие станции - WinXP SP2
Сервер - Samba 3.0.10-3.0.25aRHEL

buddie5058 я немного тебя не понял, я понял, что это adm файл, но в каком месте его прикрутить к самбе я пока что не понял
можешь чуть подробнее раскрыть тему заранее спасибо

Можно реализовать 2-мя способами:
1. Формируешь из него .adm, залее берешь poledit.exe, загружаешь в него этот шаблон и применяешь эти политики для "компьютера по умолчанию", сохраняешься, кладешь получившийся ntconfig.pol в \\server-name\netlogon.
2. Преобразовываешь этот .adm в обычный .reg, после установки винды импортируешь его в реестр.

Гораздо удобнее реализовать 1-й вариант, т.к. появляется возможность применять различные политики для отдельных пользователей/компьютеров.
Подробнее - здесь.

низкий поклон =) на вопрос POLEDIT.EXE + SAMBA еще тыща ссылок не знал про эту утилитку
без лишней риторики получил все ответы, теперь сяжу чищу репу ) очень много инфы нахавал из ссылки, та ниточка, которую я не мой найти =)

Подскажите как задать максимальный объем места которое может использоваться
каталогом который задаю в переменной path

#man quota

tankistua
А имеет ли смысл ограничивать максимальный объем?
Может так никто не делает, я новичок в samba.
Пользователи у меня такие сколько не дай любой ресурс переполнят.
Подскажите, как правильно поступить.

Очень хорошо описана настройка Samba на сайте IBM: http://www.ibm.com/developerworks/ru/edu/samba2/

Доброго времени суток, гуру!

Стоит Мандрива 2008.1, Samba в связке с winbind
Также стоит squid c авторизацией через NT
Введено в домен (ROLE_DOMAIN_MEMBER). Все замечательно.
Команды wbinfo -t, -u, -g работают отлично
На команду kinit "плюется", говорит, что такой нет
Керберос не настраивал. Просьба аргументировать надобность если что

Через какое-то время (обычно сутки, двое) начинаются проблемы.
Сквид перестает авторизовать пользователей. Начал копаться. Опытным путем выяснилось что если снова ввести в домен (net rpc join -U <user>), то все снова отлично. Итак до следующего раза. С чем связано отпадание ума не приложу.

Подскажите в чем может быть проблема? Нужные логи и конфиги сброшу. (Решил сразу не отправлять, потому как многовато всего получается, да и нужно ли все)

Жду ваших ответов и помощи. Спасибо

Guardian2007 Идея кербероса в том что бы зарегестрировать машину в домене и получать тикеты автоматом. А так вы залогинились в домен под юзером получили тикет, тикет (он же сеансовый ключ как я понимаю) через ~34 часа сдох, и далее при опросе контролера домена есть ли такой пользователь самба ловит ответ "я вас не знаю, ни чего не скажу". Видимо в логах это и написано. И второе, почему rpc? Почему не ads ? У девелоперов четко написано: "When used against a server that is a member of an Active Directory domain, it is preferable (and often necessary) to use ADS mode operations." То есть если не мигрируем, то используем адс.

Доброго времени.
Не могли бы поведать о таком куске лога samba:
May 4 08:07:13 smbd[120]: [2009/05/04 08:07:13, 0] smbd/service.c:make_connection(214)
May 4 08:07:13 smbd[120]: web (172.16.101.2) couldn't find service we

Предисловие:
Имеется коробочка с недолинуксом ASUS WL500W c прошивкой от "Olega" с ip 172.16.100.2. Имеется Web сервер 172.16.101.2 который забирает странички с шары 172.16.100.2. Между ними стоит Windows 2k3 с Kerio на борту, который маршрутизирует эти 2 сети. При обращении к Web серверу наблюдаю простой до 10 секунд. После чего страница грузиться. В логах появляються такие вот замечания.

SM8Yozhig в частности это может означать попытку найти локальный профиль (папку в хоме) для юзера we , или как то так. Конфиг самбы плиз.

Gar2k
Вот собственно мой конфиг:
[global]
    interfaces = br0
    bind interfaces only = yes
    workgroup = SM8
    server string = Share
    guest account = nobody
    security = share
    browseable = yes
    guest ok = yes
    guest only = yes
    log level = 1
    max log size = 100
    encrypt passwords = no
    preserve case = yes
    short preserve case = yes
    client code page = 866
    coding system = utf8


[Private]
    path = /opt/private
    writable = yes
    force user = admin


[Web]
    path = /opt/web
    writable = yes
    force user = admin

други!
пскажите, плз, как сделать, чтоб сват для авторизации пользовал бакенд-овские пароли?
евойным рутом не пущает пущает тока системным
самбу собирал без пам-а, мож надо было с ним?
шас попробую пам приделать... но чет сомнюваюсь шо дело внём..

SM8Yozhig
ну собственно кто то ломиться не в папку web, а в папку we , ставьте уровень логов 10 и смотрите что по чем.

dvijaya

Цитата:

Есть samba в качестве файлового сервера, есть общие папки с доступом для всех, и есть папки с доступом по паролю.

Подскажи, как сделать папку с доступом по паролю? Я создавал юзеров и в конфе указывал valid users = test1 допустим. Появлялось окошко с просьбой ввести пароль, но самого юзера указать нельзя, там всегда стоит Гость.

Помогите решить проблему, CentOS 4.7 поднял samba, winbind, kerberos. Командой kinit получил билет в домене windows2000, командой klist проверил. Завёл машину в домен net join ads -U srvadmin, проверил пользователей из домена wbinfo -u и группы wbinfo -g всё отображается. Линукс не видит пользователей домена, команда id srvadmin выдаёт - такого пользователя нет. Пробовал добавить библиотеку libnss_winbind.so и сделал линки к ней. как советовали - не помогло.

niko7

Цитата:

А имеет ли смысл ограничивать максимальный объем?

я не огранициваю. Можно попробовать запрет записи определенных файлов. Но проще грохнуть все лишнее и пойти по голове настучать. У меня не много пользователей везде.


Цитата:

в частности это может означать попытку найти локальный профиль (папку в хоме) для юзера we , или как то так. Конфиг самбы плиз.

;; logon patch
logon home =
logon path =


Обязательно дописать - по-умолчанию профиль ищется на домен-контроллере.

cloudw
Надо смотреть логи , но скорее всего проблема в nssvitсh.conf должно быть что то вроде:

Код:
passwd: files winbind
shadow: files
group: files winbind