From dam at opencsw.org Thu Jun 6 14:12:16 2013 From: dam at opencsw.org (Dagobert Michelsen) Date: Thu, 6 Jun 2013 14:12:16 +0200 Subject: [csw-users] Update package CSWghostscript 9.07 Message-ID: <76C24246-35EB-49F5-8508-F080309B0BBA@opencsw.org> Dear users, I have now pushed a new CSWghostscript 9.07,REV=2013.06.06. There have been the following changes to the existing package: - The package is now called CSWghostscript instead of CSWgs - The existing CSWgs still depends on CSWlibgs8 until all programs have been rebuilt - The new CSWghostscript uses CSWlibgs9 and there is now CSWghostscript-dev - The CUPS filters have been put into a separate package CSWghostscript-filters All known bugs have been addressed which include #3651 Please provide 64 bit version #4551 Please upgrade to 9.00 #4704 Documentation reference incorrect in -help page output #4913 pstopxl: Solaris /bin/sh cannot eval $( ), sed has not option -r If you encounter anything suspicious just let me know. Best regards -- Dago -- "You don't become great by trying to be great, you become great by wanting to do something, and then doing it so hard that you become great in the process." - xkcd #896 From slowfranklin at opencsw.org Mon Jun 10 11:30:21 2013 From: slowfranklin at opencsw.org (slowfranklin) Date: Mon, 10 Jun 2013 11:30:21 +0200 Subject: [csw-users] HEADS UP: Failing removal of CSWnetatalk package during package upgrade Message-ID: <85D61919-57BB-417A-B76E-E9436D155513@opencsw.org> Hey anybody who has installed CSWnetatalk from unstable will need to perform the following manual step in order to fix a broken pre-remove package script. In the file /var/sadm/pkg/CSWnetatalk/install/preremove change the line chroot ${PKG_INSTALL_ROOT:-/} /usr/sbin/svccfg delete -f cswnetatalk to chroot ${PKG_INSTALL_ROOT:-/} /usr/sbin/svccfg delete -f netatalk Then rerun pkgutil -u. Sorry for the inconvenience. -slow From jwise at draga.com Mon Jun 17 18:41:19 2013 From: jwise at draga.com (Jim Wise) Date: Mon, 17 Jun 2013 12:41:19 -0400 Subject: [csw-users] nmap? Message-ID: <69A19447-8F8C-4236-8456-57B69DD766ED@draga.com> I noticed nmap is no longer in the unstable catalog: package installed catalog CSWnmap 4.20 not in catalog Is there an issue with the new version? Thanks, -- Jim Wise jwise at draga.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From morris.hawaii at hotmail.com Mon Jun 17 19:34:38 2013 From: morris.hawaii at hotmail.com (morris hooten) Date: Mon, 17 Jun 2013 07:34:38 -1000 Subject: [csw-users] Apache Upgrade Message-ID: I have installed the opencsw apache 2.2.22 package but need to upgrade apache to 2.2.24 but it's not available on opencsw. How can I upgrade the opencsw version? Thanks Morris -------------- next part -------------- An HTML attachment was scrubbed... URL: From dam at opencsw.org Mon Jun 17 20:22:34 2013 From: dam at opencsw.org (Dagobert Michelsen) Date: Mon, 17 Jun 2013 20:22:34 +0200 Subject: [csw-users] nmap? In-Reply-To: <69A19447-8F8C-4236-8456-57B69DD766ED@draga.com> References: <69A19447-8F8C-4236-8456-57B69DD766ED@draga.com> Message-ID: <2A7726BF-BA53-442F-9693-0843B8040D40@opencsw.org> Hi Jim, Am 17.06.2013 um 18:41 schrieb Jim Wise : > I noticed nmap is no longer in the unstable catalog: > > package installed catalog > CSWnmap 4.20 not in catalog > > Is there an issue with the new version? The version 4.20 had dependencies to the old libssl which was dropped. Redoing nmap was pretty hard, the 5.59beta1 was buildable with some fixes: http://buildfarm.opencsw.org/experimental.html#nmap The 6.01 version was not buildable on Solaris, but 6.25 looks much better and I got positive feedback from a colleague who compiled it successfully on Solaris 10. I will give it a try. Best regards -- Dago -- "You don't become great by trying to be great, you become great by wanting to do something, and then doing it so hard that you become great in the process." - xkcd #896 From dam at opencsw.org Mon Jun 17 20:24:16 2013 From: dam at opencsw.org (Dagobert Michelsen) Date: Mon, 17 Jun 2013 20:24:16 +0200 Subject: [csw-users] Apache Upgrade In-Reply-To: References: Message-ID: Hi Morris, Am 17.06.2013 um 19:34 schrieb morris hooten : > I have installed the opencsw apache 2.2.22 package > but need to upgrade apache to 2.2.24 but it's not available on opencsw. > > How can I upgrade the opencsw version? There are two possibilities: - wait until Ben has finished the new package - jump in and help bumping the package Best regards -- Dago -- "You don't become great by trying to be great, you become great by wanting to do something, and then doing it so hard that you become great in the process." - xkcd #896 From morris.hawaii at hotmail.com Mon Jun 17 21:17:53 2013 From: morris.hawaii at hotmail.com (morris hooten) Date: Mon, 17 Jun 2013 09:17:53 -1000 Subject: [csw-users] Apache Upgrade In-Reply-To: References: , Message-ID: Is Ben working on the package now? > From: dam at opencsw.org > Date: Mon, 17 Jun 2013 20:24:16 +0200 > To: users at lists.opencsw.org; bwalton at opencsw.org > Subject: Re: [csw-users] Apache Upgrade > > Hi Morris, > > Am 17.06.2013 um 19:34 schrieb morris hooten : > > I have installed the opencsw apache 2.2.22 package > > but need to upgrade apache to 2.2.24 but it's not available on opencsw. > > > > How can I upgrade the opencsw version? > > There are two possibilities: > - wait until Ben has finished the new package > - jump in and help bumping the package > > Best regards > > -- Dago > > > -- > "You don't become great by trying to be great, you become great by wanting to do something, > and then doing it so hard that you become great in the process." - xkcd #896 > > _______________________________________________ > users mailing list > users at lists.opencsw.org > https://lists.opencsw.org/mailman/listinfo/users -------------- next part -------------- An HTML attachment was scrubbed... URL: From jwise at draga.com Mon Jun 17 21:44:28 2013 From: jwise at draga.com (Jim Wise) Date: Mon, 17 Jun 2013 15:44:28 -0400 Subject: [csw-users] nmap? In-Reply-To: <2A7726BF-BA53-442F-9693-0843B8040D40@opencsw.org> References: <69A19447-8F8C-4236-8456-57B69DD766ED@draga.com> <2A7726BF-BA53-442F-9693-0843B8040D40@opencsw.org> Message-ID: <2E5AEE31-32F0-448B-880A-0048D445B239@draga.com> On Jun 17, 2013, at 14:22 , Dagobert Michelsen wrote: > Hi Jim, > > Am 17.06.2013 um 18:41 schrieb Jim Wise : >> I noticed nmap is no longer in the unstable catalog: >> >> package installed catalog >> CSWnmap 4.20 not in catalog >> >> Is there an issue with the new version? > > The version 4.20 had dependencies to the old libssl which was dropped. Redoing > nmap was pretty hard, the 5.59beta1 was buildable with some fixes: > http://buildfarm.opencsw.org/experimental.html#nmap > The 6.01 version was not buildable on Solaris, but 6.25 looks much better and > I got positive feedback from a colleague who compiled it successfully on > Solaris 10. I will give it a try. Makes sense -- and thank you for chasing this! -- Jim Wise jwise at draga.com From bwalton at opencsw.org Tue Jun 18 00:04:04 2013 From: bwalton at opencsw.org (Ben Walton) Date: Mon, 17 Jun 2013 23:04:04 +0100 Subject: [csw-users] Apache Upgrade In-Reply-To: References: Message-ID: I'm pushing 2.2.24 to the unstable catalog now. It'll be on the mirrors in a few hours. Thanks -Ben On Mon, Jun 17, 2013 at 6:34 PM, morris hooten wrote: > I have installed the opencsw apache 2.2.22 package > but need to upgrade apache to 2.2.24 but it's not available on opencsw. > > How can I upgrade the opencsw version? > > Thanks > > Morris > > _______________________________________________ > users mailing list > users at lists.opencsw.org > https://lists.opencsw.org/mailman/listinfo/users From morris.hawaii at hotmail.com Tue Jun 18 00:05:00 2013 From: morris.hawaii at hotmail.com (morris hooten) Date: Mon, 17 Jun 2013 12:05:00 -1000 Subject: [csw-users] Apache Upgrade In-Reply-To: References: , Message-ID: th >Thanksate: Mon, 17 Jun 2013 23:04:04 +0100 > From: bwalton at opencsw.org > To: users at lists.opencsw.org > Subject: Re: [csw-users] Apache Upgrade > > I'm pushing 2.2.24 to the unstable catalog now. It'll be on the > mirrors in a few hours. > > Thanks > -Ben > > On Mon, Jun 17, 2013 at 6:34 PM, morris hooten > wrote: > > I have installed the opencsw apache 2.2.22 package > > but need to upgrade apache to 2.2.24 but it's not available on opencsw. > > > > How can I upgrade the opencsw version? > > > > Thanks > > > > Morris > > > > _______________________________________________ > > users mailing list > > users at lists.opencsw.org > > https://lists.opencsw.org/mailman/listinfo/users > _______________________________________________ > users mailing list > users at lists.opencsw.org > https://lists.opencsw.org/mailman/listinfo/users -------------- next part -------------- An HTML attachment was scrubbed... URL: From james at themacplace.co.uk Fri Jun 21 07:15:37 2013 From: james at themacplace.co.uk (James Relph) Date: Fri, 21 Jun 2013 06:15:37 +0100 Subject: [csw-users] Odd Samba/winbind issue Message-ID: Hi, Apologies for cross posting, but I'm not sure if this is an Oi issue or a cswsamba issue. I've installed cswsamba (3.6.15) and cswsamba_winbind on an OI box (151a7). I've got it bound to AD fine, and winbind itself seems to be operating perfectly (I've actually got netatalk happily authenticating AD users via winbind). If I run wbinfo -u or getent passwd, I get the expected information back. Oddly though Samba itself isn't authenticating users. If I try and login (with a few variations of DOMAIN\username or username at DOMAIN) it just kicks it back as an unknown user (see below). The only thing that I can think of is that the cswsamba is actually still calling the previously installed (but turned off) winbind that I installed with the original OI samba install. With that not running though I wouldn't have thought that would have happened (but if that could be it - how do I make sure that cswsamba uses cswsamba_winbind). I have symlinked the csw nss_winbind libraries into /lib, I just don't know if there's anything else that could cause this. Thanks for any help. James Principal Consultant Mapping user [DOMAIN]\[james] from workstation [server03] attempting to make a user_info for james (james) making strings for james's user_info struct making blobs for james's user_info struct check_ntlm_password: Checking password for unmapped user [DOMAIN]\[james]@[server03] with the new password interface check_ntlm_password: mapped user is: [DOMAIN]\[james]@[server03] Finding user DOMAIN\james Trying _Get_Pwnam(), username as lowercase is DOMAIN\james Trying _Get_Pwnam(), username as given is DOMAIN\james Checking combinations of 0 uppercase letters in DOMAIN\james Get_Pwnam_internals didn't find user [DOMAIN\james]! Finding user james Trying _Get_Pwnam(), username as lowercase is james Checking combinations of 0 uppercase letters in james Get_Pwnam_internals didn't find user [james]! Failed to find authenticated user DOMAIN\james via getpwnam(), denying access. check_ntlm_password: winbind authentication for user [james] FAILED with error NT_STATUS_NO_SUCH_USER check_ntlm_password: Authentication for user [james] -> [james] FAILED with error NT_STATUS_NO_SUCH_USER Got user=[james at DOMAIN.CORP] domain=[DOMAIN] workstation=[server03] len1=24 len2=124 Mapping user [DOMAIN]\[james at DOMAIN.CORP] from workstation [server03] attempting to make a user_info for james at DOMAIN.CORP (james at DOMAIN.CORP) making strings for james at DOMAIN.CORP's user_info struct making blobs for james at DOMAIN.CORP's user_info struct check_ntlm_password: Checking password for unmapped user [DOMAIN]\[james at DOMAIN.CORP]@[server03] with the new password interface check_ntlm_password: mapped user is: [DOMAIN]\[james at DOMAIN.CORP]@[server03] check_ntlm_password: winbind authentication for user [james at DOMAIN.CORP] FAILED with error NT_STATUS_NO_SUCH_USER check_ntlm_password: Authentication for user [james at DOMAIN.CORP] -> [james at DOMAIN.CORP] FAILED with error NT_STATUS_NO_SUCH_USER Got user=[james at DOMAIN.CORP] domain=[DOMAIN] workstation=[server03] len1=24 len2=124 Mapping user [DOMAIN]\[james at DOMAIN.CORP] from workstation [server03] attempting to make a user_info for james at DOMAIN.CORP (james at DOMAIN.CORP) making strings for james at DOMAIN.CORP's user_info struct making blobs for james at DOMAIN.CORP's user_info struct check_ntlm_password: Checking password for unmapped user [DOMAIN]\[james at DOMAIN.CORP]@[server03] with the new password interface check_ntlm_password: mapped user is: [DOMAIN]\[james at DOMAIN.CORP]@[server03] check_ntlm_password: winbind authentication for user [james at DOMAIN.CORP] FAILED with error NT_STATUS_NO_SUCH_USER check_ntlm_password: Authentication for user [james at DOMAIN.CORP] -> [james at DOMAIN.CORP] FAILED with error NT_STATUS_NO_SUCH_USER -------------- next part -------------- An HTML attachment was scrubbed... URL: From jh at opencsw.org Fri Jun 21 07:24:47 2013 From: jh at opencsw.org (Jan Holzhueter) Date: Fri, 21 Jun 2013 07:24:47 +0200 Subject: [csw-users] Odd Samba/winbind issue In-Reply-To: References: Message-ID: <51C3E39F.9030704@opencsw.org> Hi, if you use the auth via pam you must symlink the nss_winbind to a special place. I'm not sure which one atm. Check the orginal OI samba package that should put it in the right place. We can't add this to our package as this would brake install on sparse zones. I wanted to write a short notice about it put did not have the time yet. It might be that you even need to copy and not symlink the lib. Not sure here. Greetings Jan Am 21.06.13 07:15, schrieb James Relph: > Hi, > > Apologies for cross posting, but I'm not sure if this is an Oi issue or > a cswsamba issue. I've installed cswsamba (3.6.15) and cswsamba_winbind > on an OI box (151a7). I've got it bound to AD fine, and winbind itself > seems to be operating perfectly (I've actually got netatalk happily > authenticating AD users via winbind). If I run wbinfo -u or getent > passwd, I get the expected information back. > > Oddly though Samba itself isn't authenticating users. If I try and > login (with a few variations of DOMAIN\username or username at DOMAIN) it > just kicks it back as an unknown user (see below). The only thing that > I can think of is that the cswsamba is actually still calling the > previously installed (but turned off) winbind that I installed with the > original OI samba install. With that not running though I wouldn't have > thought that would have happened (but if that could be it - how do I > make sure that cswsamba uses cswsamba_winbind). I have symlinked the > csw nss_winbind libraries into /lib, I just don't know if there's > anything else that could cause this. > > Thanks for any help. > > James > > Principal Consultant > > > Mapping user [DOMAIN]\[james] from workstation [server03] > attempting to make a user_info for james (james) > making strings for james's user_info struct > making blobs for james's user_info struct > check_ntlm_password: Checking password for unmapped user > [DOMAIN]\[james]@[server03] with the new password interface > check_ntlm_password: mapped user is: [DOMAIN]\[james]@[server03] > Finding user DOMAIN\james > Trying _Get_Pwnam(), username as lowercase is DOMAIN\james > Trying _Get_Pwnam(), username as given is DOMAIN\james > Checking combinations of 0 uppercase letters in DOMAIN\james > Get_Pwnam_internals didn't find user [DOMAIN\james]! > Finding user james > Trying _Get_Pwnam(), username as lowercase is james > Checking combinations of 0 uppercase letters in james > Get_Pwnam_internals didn't find user [james]! > Failed to find authenticated user DOMAIN\james via getpwnam(), denying > access. > check_ntlm_password: winbind authentication for user [james] FAILED > with error NT_STATUS_NO_SUCH_USER > check_ntlm_password: Authentication for user [james] -> [james] > FAILED with error NT_STATUS_NO_SUCH_USER > Got user=[james at DOMAIN.CORP ] > domain=[DOMAIN] workstation=[server03] len1=24 len2=124 > Mapping user [DOMAIN]\[james at DOMAIN.CORP ] > from workstation [server03] > attempting to make a user_info for james at DOMAIN.CORP > (james at DOMAIN.CORP ) > making strings for james at DOMAIN.CORP 's > user_info struct > making blobs for james at DOMAIN.CORP 's > user_info struct > check_ntlm_password: Checking password for unmapped user > [DOMAIN]\[james at DOMAIN.CORP ]@[server03] with > the new password interface > check_ntlm_password: mapped user is: [DOMAIN]\[james at DOMAIN.CORP > ]@[server03] > check_ntlm_password: winbind authentication for user > [james at DOMAIN.CORP ] FAILED with error > NT_STATUS_NO_SUCH_USER > check_ntlm_password: Authentication for user [james at DOMAIN.CORP > ] -> [james at DOMAIN.CORP > ] FAILED with error NT_STATUS_NO_SUCH_USER > Got user=[james at DOMAIN.CORP ] > domain=[DOMAIN] workstation=[server03] len1=24 len2=124 > Mapping user [DOMAIN]\[james at DOMAIN.CORP ] > from workstation [server03] > attempting to make a user_info for james at DOMAIN.CORP > (james at DOMAIN.CORP ) > making strings for james at DOMAIN.CORP 's > user_info struct > making blobs for james at DOMAIN.CORP 's > user_info struct > check_ntlm_password: Checking password for unmapped user > [DOMAIN]\[james at DOMAIN.CORP ]@[server03] with > the new password interface > check_ntlm_password: mapped user is: [DOMAIN]\[james at DOMAIN.CORP > ]@[server03] > check_ntlm_password: winbind authentication for user > [james at DOMAIN.CORP ] FAILED with error > NT_STATUS_NO_SUCH_USER > check_ntlm_password: Authentication for user [james at DOMAIN.CORP > ] -> [james at DOMAIN.CORP > ] FAILED with error NT_STATUS_NO_SUCH_USER > > > _______________________________________________ > users mailing list > users at lists.opencsw.org > https://lists.opencsw.org/mailman/listinfo/users > From james at themacplace.co.uk Fri Jun 21 07:30:31 2013 From: james at themacplace.co.uk (James Relph) Date: Fri, 21 Jun 2013 06:30:31 +0100 Subject: [csw-users] Odd Samba/winbind issue In-Reply-To: <51C3E39F.9030704@opencsw.org> References: <51C3E39F.9030704@opencsw.org> Message-ID: Thanks for the speedy reply. I think I found where you'd already mentioned that online anyway, I've got: libnss_winbind.so -> /opt/csw/lib/libnss_winbind.so.1 nss_winbind.so.1 -> /opt/csw/lib/libnss_winbind.so.1 In /lib. Winbind itself seems to be working fine, I've got netatalk using that happily, it's the cswsamba version that won't seem to use winbind (it's either not using it properly, or it's using the wrong winbind somehow). Netatalk, using winbind, is fine. Best regards, James. On 21 Jun 2013, at 06:24, Jan Holzhueter wrote: > Hi, > if you use the auth via pam you must symlink the nss_winbind to a > special place. I'm not sure which one atm. Check the orginal OI samba > package that should put it in the right place. > We can't add this to our package as this would brake install on sparse > zones. > I wanted to write a short notice about it put did not have the time yet. > It might be that you even need to copy and not symlink the lib. Not sure > here. > > Greetings > Jan > > > > Am 21.06.13 07:15, schrieb James Relph: >> Hi, >> >> Apologies for cross posting, but I'm not sure if this is an Oi issue or >> a cswsamba issue. I've installed cswsamba (3.6.15) and cswsamba_winbind >> on an OI box (151a7). I've got it bound to AD fine, and winbind itself >> seems to be operating perfectly (I've actually got netatalk happily >> authenticating AD users via winbind). If I run wbinfo -u or getent >> passwd, I get the expected information back. >> >> Oddly though Samba itself isn't authenticating users. If I try and >> login (with a few variations of DOMAIN\username or username at DOMAIN) it >> just kicks it back as an unknown user (see below). The only thing that >> I can think of is that the cswsamba is actually still calling the >> previously installed (but turned off) winbind that I installed with the >> original OI samba install. With that not running though I wouldn't have >> thought that would have happened (but if that could be it - how do I >> make sure that cswsamba uses cswsamba_winbind). I have symlinked the >> csw nss_winbind libraries into /lib, I just don't know if there's >> anything else that could cause this. >> >> Thanks for any help. >> >> James >> >> Principal Consultant >> >> >> Mapping user [DOMAIN]\[james] from workstation [server03] >> attempting to make a user_info for james (james) >> making strings for james's user_info struct >> making blobs for james's user_info struct >> check_ntlm_password: Checking password for unmapped user >> [DOMAIN]\[james]@[server03] with the new password interface >> check_ntlm_password: mapped user is: [DOMAIN]\[james]@[server03] >> Finding user DOMAIN\james >> Trying _Get_Pwnam(), username as lowercase is DOMAIN\james >> Trying _Get_Pwnam(), username as given is DOMAIN\james >> Checking combinations of 0 uppercase letters in DOMAIN\james >> Get_Pwnam_internals didn't find user [DOMAIN\james]! >> Finding user james >> Trying _Get_Pwnam(), username as lowercase is james >> Checking combinations of 0 uppercase letters in james >> Get_Pwnam_internals didn't find user [james]! >> Failed to find authenticated user DOMAIN\james via getpwnam(), denying >> access. >> check_ntlm_password: winbind authentication for user [james] FAILED >> with error NT_STATUS_NO_SUCH_USER >> check_ntlm_password: Authentication for user [james] -> [james] >> FAILED with error NT_STATUS_NO_SUCH_USER >> Got user=[james at DOMAIN.CORP ] >> domain=[DOMAIN] workstation=[server03] len1=24 len2=124 >> Mapping user [DOMAIN]\[james at DOMAIN.CORP ] >> from workstation [server03] >> attempting to make a user_info for james at DOMAIN.CORP >> (james at DOMAIN.CORP ) >> making strings for james at DOMAIN.CORP 's >> user_info struct >> making blobs for james at DOMAIN.CORP 's >> user_info struct >> check_ntlm_password: Checking password for unmapped user >> [DOMAIN]\[james at DOMAIN.CORP ]@[server03] with >> the new password interface >> check_ntlm_password: mapped user is: [DOMAIN]\[james at DOMAIN.CORP >> ]@[server03] >> check_ntlm_password: winbind authentication for user >> [james at DOMAIN.CORP ] FAILED with error >> NT_STATUS_NO_SUCH_USER >> check_ntlm_password: Authentication for user [james at DOMAIN.CORP >> ] -> [james at DOMAIN.CORP >> ] FAILED with error NT_STATUS_NO_SUCH_USER >> Got user=[james at DOMAIN.CORP ] >> domain=[DOMAIN] workstation=[server03] len1=24 len2=124 >> Mapping user [DOMAIN]\[james at DOMAIN.CORP ] >> from workstation [server03] >> attempting to make a user_info for james at DOMAIN.CORP >> (james at DOMAIN.CORP ) >> making strings for james at DOMAIN.CORP 's >> user_info struct >> making blobs for james at DOMAIN.CORP 's >> user_info struct >> check_ntlm_password: Checking password for unmapped user >> [DOMAIN]\[james at DOMAIN.CORP ]@[server03] with >> the new password interface >> check_ntlm_password: mapped user is: [DOMAIN]\[james at DOMAIN.CORP >> ]@[server03] >> check_ntlm_password: winbind authentication for user >> [james at DOMAIN.CORP ] FAILED with error >> NT_STATUS_NO_SUCH_USER >> check_ntlm_password: Authentication for user [james at DOMAIN.CORP >> ] -> [james at DOMAIN.CORP >> ] FAILED with error NT_STATUS_NO_SUCH_USER >> >> >> _______________________________________________ >> users mailing list >> users at lists.opencsw.org >> https://lists.opencsw.org/mailman/listinfo/users >> > > _______________________________________________ > users mailing list > users at lists.opencsw.org > https://lists.opencsw.org/mailman/listinfo/users -------------- next part -------------- An HTML attachment was scrubbed... URL: From jh at opencsw.org Fri Jun 21 10:00:15 2013 From: jh at opencsw.org (Jan Holzhueter) Date: Fri, 21 Jun 2013 10:00:15 +0200 Subject: [csw-users] Odd Samba/winbind issue In-Reply-To: References: <51C3E39F.9030704@opencsw.org> Message-ID: <51C4080F.7020204@opencsw.org> Hi, ok I looked up the old bug about that: https://www.opencsw.org/mantis/view.php?id=5020 acroding to this you need this: ln -s /opt/csw/lib/libnss_winbind.so.1 /lib/nss_winbind.so.1 Greetings Jan Am 21.06.13 07:30, schrieb James Relph: > Thanks for the speedy reply. I think I found where you'd already > mentioned that online anyway, I've got: > > libnss_winbind.so -> /opt/csw/lib/libnss_winbind.so.1 > nss_winbind.so.1 -> /opt/csw/lib/libnss_winbind.so.1 > > In /lib. Winbind itself seems to be working fine, I've got netatalk > using that happily, it's the cswsamba version that won't seem to use > winbind (it's either not using it properly, or it's using the wrong > winbind somehow). Netatalk, using winbind, is fine. > > Best regards, > > James. > > > On 21 Jun 2013, at 06:24, Jan Holzhueter > wrote: > >> Hi, >> if you use the auth via pam you must symlink the nss_winbind to a >> special place. I'm not sure which one atm. Check the orginal OI samba >> package that should put it in the right place. >> We can't add this to our package as this would brake install on sparse >> zones. >> I wanted to write a short notice about it put did not have the time yet. >> It might be that you even need to copy and not symlink the lib. Not sure >> here. >> >> Greetings >> Jan >> >> >> >> Am 21.06.13 07:15, schrieb James Relph: >>> Hi, >>> >>> Apologies for cross posting, but I'm not sure if this is an Oi issue or >>> a cswsamba issue. I've installed cswsamba (3.6.15) and cswsamba_winbind >>> on an OI box (151a7). I've got it bound to AD fine, and winbind itself >>> seems to be operating perfectly (I've actually got netatalk happily >>> authenticating AD users via winbind). If I run wbinfo -u or getent >>> passwd, I get the expected information back. >>> >>> Oddly though Samba itself isn't authenticating users. If I try and >>> login (with a few variations of DOMAIN\username or username at DOMAIN) it >>> just kicks it back as an unknown user (see below). The only thing that >>> I can think of is that the cswsamba is actually still calling the >>> previously installed (but turned off) winbind that I installed with the >>> original OI samba install. With that not running though I wouldn't have >>> thought that would have happened (but if that could be it - how do I >>> make sure that cswsamba uses cswsamba_winbind). I have symlinked the >>> csw nss_winbind libraries into /lib, I just don't know if there's >>> anything else that could cause this. >>> >>> Thanks for any help. >>> >>> James >>> >>> Principal Consultant >>> >>> >>> Mapping user [DOMAIN]\[james] from workstation [server03] >>> attempting to make a user_info for james (james) >>> making strings for james's user_info struct >>> making blobs for james's user_info struct >>> check_ntlm_password: Checking password for unmapped user >>> [DOMAIN]\[james]@[server03] with the new password interface >>> check_ntlm_password: mapped user is: [DOMAIN]\[james]@[server03] >>> Finding user DOMAIN\james >>> Trying _Get_Pwnam(), username as lowercase is DOMAIN\james >>> Trying _Get_Pwnam(), username as given is DOMAIN\james >>> Checking combinations of 0 uppercase letters in DOMAIN\james >>> Get_Pwnam_internals didn't find user [DOMAIN\james]! >>> Finding user james >>> Trying _Get_Pwnam(), username as lowercase is james >>> Checking combinations of 0 uppercase letters in james >>> Get_Pwnam_internals didn't find user [james]! >>> Failed to find authenticated user DOMAIN\james via getpwnam(), denying >>> access. >>> check_ntlm_password: winbind authentication for user [james] FAILED >>> with error NT_STATUS_NO_SUCH_USER >>> check_ntlm_password: Authentication for user [james] -> [james] >>> FAILED with error NT_STATUS_NO_SUCH_USER >>> Got user=[james at DOMAIN.CORP >>> ] >>> domain=[DOMAIN] workstation=[server03] len1=24 len2=124 >>> Mapping user [DOMAIN]\[james at DOMAIN.CORP >>> ] >>> from workstation [server03] >>> attempting to make a user_info for james at DOMAIN.CORP >>> >>> (james at DOMAIN.CORP >>> ) >>> making strings for james at DOMAIN.CORP >>> 's >>> user_info struct >>> making blobs for james at DOMAIN.CORP >>> 's >>> user_info struct >>> check_ntlm_password: Checking password for unmapped user >>> [DOMAIN]\[james at DOMAIN.CORP >>> ]@[server03] with >>> the new password interface >>> check_ntlm_password: mapped user is: [DOMAIN]\[james at DOMAIN.CORP >>> >>> ]@[server03] >>> check_ntlm_password: winbind authentication for user >>> [james at DOMAIN.CORP >>> ] FAILED with error >>> NT_STATUS_NO_SUCH_USER >>> check_ntlm_password: Authentication for user [james at DOMAIN.CORP >>> >>> ] -> [james at DOMAIN.CORP >>> >>> ] FAILED with error NT_STATUS_NO_SUCH_USER >>> Got user=[james at DOMAIN.CORP >>> ] >>> domain=[DOMAIN] workstation=[server03] len1=24 len2=124 >>> Mapping user [DOMAIN]\[james at DOMAIN.CORP >>> ] >>> from workstation [server03] >>> attempting to make a user_info for james at DOMAIN.CORP >>> >>> (james at DOMAIN.CORP >>> ) >>> making strings for james at DOMAIN.CORP >>> 's >>> user_info struct >>> making blobs for james at DOMAIN.CORP >>> 's >>> user_info struct >>> check_ntlm_password: Checking password for unmapped user >>> [DOMAIN]\[james at DOMAIN.CORP >>> ]@[server03] with >>> the new password interface >>> check_ntlm_password: mapped user is: [DOMAIN]\[james at DOMAIN.CORP >>> >>> ]@[server03] >>> check_ntlm_password: winbind authentication for user >>> [james at DOMAIN.CORP >>> ] FAILED with error >>> NT_STATUS_NO_SUCH_USER >>> check_ntlm_password: Authentication for user [james at DOMAIN.CORP >>> >>> ] -> [james at DOMAIN.CORP >>> >>> ] FAILED with error NT_STATUS_NO_SUCH_USER >>> >>> >>> _______________________________________________ >>> users mailing list >>> users at lists.opencsw.org >>> https://lists.opencsw.org/mailman/listinfo/users >>> >> >> _______________________________________________ >> users mailing list >> users at lists.opencsw.org >> https://lists.opencsw.org/mailman/listinfo/users > From james at themacplace.co.uk Fri Jun 21 10:43:19 2013 From: james at themacplace.co.uk (James Relph) Date: Fri, 21 Jun 2013 09:43:19 +0100 Subject: [csw-users] Odd Samba/winbind issue In-Reply-To: <51C4080F.7020204@opencsw.org> References: <51C3E39F.9030704@opencsw.org> <51C4080F.7020204@opencsw.org> Message-ID: <361568C2-8B6B-4910-B8BD-9C01278D00F8@themacplace.co.uk> Hi Jan, Yes, that's the one I had found, and I already have that link there. I don't think winbind worked at all until that was in place. It's samba that doesn't seem to be working with winbind properly. James On 21 Jun 2013, at 09:00, Jan Holzhueter wrote: > Hi, > ok I looked up the old bug about that: > https://www.opencsw.org/mantis/view.php?id=5020 > > acroding to this you need this: > ln -s /opt/csw/lib/libnss_winbind.so.1 /lib/nss_winbind.so.1 > > Greetings > Jan > > > Am 21.06.13 07:30, schrieb James Relph: >> Thanks for the speedy reply. I think I found where you'd already >> mentioned that online anyway, I've got: >> >> libnss_winbind.so -> /opt/csw/lib/libnss_winbind.so.1 >> nss_winbind.so.1 -> /opt/csw/lib/libnss_winbind.so.1 >> >> In /lib. Winbind itself seems to be working fine, I've got netatalk >> using that happily, it's the cswsamba version that won't seem to use >> winbind (it's either not using it properly, or it's using the wrong >> winbind somehow). Netatalk, using winbind, is fine. >> >> Best regards, >> >> James. >> >> >> On 21 Jun 2013, at 06:24, Jan Holzhueter > > wrote: >> >>> Hi, >>> if you use the auth via pam you must symlink the nss_winbind to a >>> special place. I'm not sure which one atm. Check the orginal OI samba >>> package that should put it in the right place. >>> We can't add this to our package as this would brake install on sparse >>> zones. >>> I wanted to write a short notice about it put did not have the time yet. >>> It might be that you even need to copy and not symlink the lib. Not sure >>> here. >>> >>> Greetings >>> Jan >>> >>> >>> >>> Am 21.06.13 07:15, schrieb James Relph: >>>> Hi, >>>> >>>> Apologies for cross posting, but I'm not sure if this is an Oi issue or >>>> a cswsamba issue. I've installed cswsamba (3.6.15) and cswsamba_winbind >>>> on an OI box (151a7). I've got it bound to AD fine, and winbind itself >>>> seems to be operating perfectly (I've actually got netatalk happily >>>> authenticating AD users via winbind). If I run wbinfo -u or getent >>>> passwd, I get the expected information back. >>>> >>>> Oddly though Samba itself isn't authenticating users. If I try and >>>> login (with a few variations of DOMAIN\username or username at DOMAIN) it >>>> just kicks it back as an unknown user (see below). The only thing that >>>> I can think of is that the cswsamba is actually still calling the >>>> previously installed (but turned off) winbind that I installed with the >>>> original OI samba install. With that not running though I wouldn't have >>>> thought that would have happened (but if that could be it - how do I >>>> make sure that cswsamba uses cswsamba_winbind). I have symlinked the >>>> csw nss_winbind libraries into /lib, I just don't know if there's >>>> anything else that could cause this. >>>> >>>> Thanks for any help. >>>> >>>> James >>>> >>>> Principal Consultant >>>> >>>> >>>> Mapping user [DOMAIN]\[james] from workstation [server03] >>>> attempting to make a user_info for james (james) >>>> making strings for james's user_info struct >>>> making blobs for james's user_info struct >>>> check_ntlm_password: Checking password for unmapped user >>>> [DOMAIN]\[james]@[server03] with the new password interface >>>> check_ntlm_password: mapped user is: [DOMAIN]\[james]@[server03] >>>> Finding user DOMAIN\james >>>> Trying _Get_Pwnam(), username as lowercase is DOMAIN\james >>>> Trying _Get_Pwnam(), username as given is DOMAIN\james >>>> Checking combinations of 0 uppercase letters in DOMAIN\james >>>> Get_Pwnam_internals didn't find user [DOMAIN\james]! >>>> Finding user james >>>> Trying _Get_Pwnam(), username as lowercase is james >>>> Checking combinations of 0 uppercase letters in james >>>> Get_Pwnam_internals didn't find user [james]! >>>> Failed to find authenticated user DOMAIN\james via getpwnam(), denying >>>> access. >>>> check_ntlm_password: winbind authentication for user [james] FAILED >>>> with error NT_STATUS_NO_SUCH_USER >>>> check_ntlm_password: Authentication for user [james] -> [james] >>>> FAILED with error NT_STATUS_NO_SUCH_USER >>>> Got user=[james at DOMAIN.CORP >>>> ] >>>> domain=[DOMAIN] workstation=[server03] len1=24 len2=124 >>>> Mapping user [DOMAIN]\[james at DOMAIN.CORP >>>> ] >>>> from workstation [server03] >>>> attempting to make a user_info for james at DOMAIN.CORP >>>> >>>> (james at DOMAIN.CORP >>>> ) >>>> making strings for james at DOMAIN.CORP >>>> 's >>>> user_info struct >>>> making blobs for james at DOMAIN.CORP >>>> 's >>>> user_info struct >>>> check_ntlm_password: Checking password for unmapped user >>>> [DOMAIN]\[james at DOMAIN.CORP >>>> ]@[server03] with >>>> the new password interface >>>> check_ntlm_password: mapped user is: [DOMAIN]\[james at DOMAIN.CORP >>>> >>>> ]@[server03] >>>> check_ntlm_password: winbind authentication for user >>>> [james at DOMAIN.CORP >>>> ] FAILED with error >>>> NT_STATUS_NO_SUCH_USER >>>> check_ntlm_password: Authentication for user [james at DOMAIN.CORP >>>> >>>> ] -> [james at DOMAIN.CORP >>>> >>>> ] FAILED with error NT_STATUS_NO_SUCH_USER >>>> Got user=[james at DOMAIN.CORP >>>> ] >>>> domain=[DOMAIN] workstation=[server03] len1=24 len2=124 >>>> Mapping user [DOMAIN]\[james at DOMAIN.CORP >>>> ] >>>> from workstation [server03] >>>> attempting to make a user_info for james at DOMAIN.CORP >>>> >>>> (james at DOMAIN.CORP >>>> ) >>>> making strings for james at DOMAIN.CORP >>>> 's >>>> user_info struct >>>> making blobs for james at DOMAIN.CORP >>>> 's >>>> user_info struct >>>> check_ntlm_password: Checking password for unmapped user >>>> [DOMAIN]\[james at DOMAIN.CORP >>>> ]@[server03] with >>>> the new password interface >>>> check_ntlm_password: mapped user is: [DOMAIN]\[james at DOMAIN.CORP >>>> >>>> ]@[server03] >>>> check_ntlm_password: winbind authentication for user >>>> [james at DOMAIN.CORP >>>> ] FAILED with error >>>> NT_STATUS_NO_SUCH_USER >>>> check_ntlm_password: Authentication for user [james at DOMAIN.CORP >>>> >>>> ] -> [james at DOMAIN.CORP >>>> >>>> ] FAILED with error NT_STATUS_NO_SUCH_USER >>>> >>>> >>>> _______________________________________________ >>>> users mailing list >>>> users at lists.opencsw.org >>>> https://lists.opencsw.org/mailman/listinfo/users >>>> >>> >>> _______________________________________________ >>> users mailing list >>> users at lists.opencsw.org >>> https://lists.opencsw.org/mailman/listinfo/users >> > > _______________________________________________ > users mailing list > users at lists.opencsw.org > https://lists.opencsw.org/mailman/listinfo/users -------------- next part -------------- An HTML attachment was scrubbed... URL: From jh at opencsw.org Fri Jun 21 10:54:42 2013 From: jh at opencsw.org (Jan Holzhueter) Date: Fri, 21 Jun 2013 10:54:42 +0200 Subject: [csw-users] Odd Samba/winbind issue In-Reply-To: <361568C2-8B6B-4910-B8BD-9C01278D00F8@themacplace.co.uk> References: <51C3E39F.9030704@opencsw.org> <51C4080F.7020204@opencsw.org> <361568C2-8B6B-4910-B8BD-9C01278D00F8@themacplace.co.uk> Message-ID: <51C414D2.706@opencsw.org> Hi, just do make sure what are you trying: login with an AD user as in ssh username at whatever. Or mount a share from the OI sever via smb? For first one please post /etc/pam.conf for the second please post /etc/opt/csw/samba/smb.conf Greetings Jan Am 21.06.13 10:43, schrieb James Relph: > Hi Jan, > > Yes, that's the one I had found, and I already have that link there. I > don't think winbind worked at all until that was in place. It's samba > that doesn't seem to be working with winbind properly. > > James > > On 21 Jun 2013, at 09:00, Jan Holzhueter > wrote: > >> Hi, >> ok I looked up the old bug about that: >> https://www.opencsw.org/mantis/view.php?id=5020 >> >> acroding to this you need this: >> ln -s /opt/csw/lib/libnss_winbind.so.1 /lib/nss_winbind.so.1 >> >> Greetings >> Jan >> >> >> Am 21.06.13 07:30, schrieb James Relph: >>> Thanks for the speedy reply. I think I found where you'd already >>> mentioned that online anyway, I've got: >>> >>> libnss_winbind.so -> /opt/csw/lib/libnss_winbind.so.1 >>> nss_winbind.so.1 -> /opt/csw/lib/libnss_winbind.so.1 >>> >>> In /lib. Winbind itself seems to be working fine, I've got netatalk >>> using that happily, it's the cswsamba version that won't seem to use >>> winbind (it's either not using it properly, or it's using the wrong >>> winbind somehow). Netatalk, using winbind, is fine. >>> >>> Best regards, >>> >>> James. >>> >>> >>> On 21 Jun 2013, at 06:24, Jan Holzhueter >> >>> > wrote: >>> >>>> Hi, >>>> if you use the auth via pam you must symlink the nss_winbind to a >>>> special place. I'm not sure which one atm. Check the orginal OI samba >>>> package that should put it in the right place. >>>> We can't add this to our package as this would brake install on sparse >>>> zones. >>>> I wanted to write a short notice about it put did not have the time yet. >>>> It might be that you even need to copy and not symlink the lib. Not sure >>>> here. >>>> >>>> Greetings >>>> Jan >>>> >>>> >>>> >>>> Am 21.06.13 07:15, schrieb James Relph: >>>>> Hi, >>>>> >>>>> Apologies for cross posting, but I'm not sure if this is an Oi issue or >>>>> a cswsamba issue. I've installed cswsamba (3.6.15) and >>>>> cswsamba_winbind >>>>> on an OI box (151a7). I've got it bound to AD fine, and winbind itself >>>>> seems to be operating perfectly (I've actually got netatalk happily >>>>> authenticating AD users via winbind). If I run wbinfo -u or getent >>>>> passwd, I get the expected information back. >>>>> >>>>> Oddly though Samba itself isn't authenticating users. If I try and >>>>> login (with a few variations of DOMAIN\username or username at DOMAIN) it >>>>> just kicks it back as an unknown user (see below). The only thing that >>>>> I can think of is that the cswsamba is actually still calling the >>>>> previously installed (but turned off) winbind that I installed with the >>>>> original OI samba install. With that not running though I wouldn't >>>>> have >>>>> thought that would have happened (but if that could be it - how do I >>>>> make sure that cswsamba uses cswsamba_winbind). I have symlinked the >>>>> csw nss_winbind libraries into /lib, I just don't know if there's >>>>> anything else that could cause this. >>>>> >>>>> Thanks for any help. >>>>> >>>>> James >>>>> >>>>> Principal Consultant >>>>> >>>>> >>>>> Mapping user [DOMAIN]\[james] from workstation [server03] >>>>> attempting to make a user_info for james (james) >>>>> making strings for james's user_info struct >>>>> making blobs for james's user_info struct >>>>> check_ntlm_password: Checking password for unmapped user >>>>> [DOMAIN]\[james]@[server03] with the new password interface >>>>> check_ntlm_password: mapped user is: [DOMAIN]\[james]@[server03] >>>>> Finding user DOMAIN\james >>>>> Trying _Get_Pwnam(), username as lowercase is DOMAIN\james >>>>> Trying _Get_Pwnam(), username as given is DOMAIN\james >>>>> Checking combinations of 0 uppercase letters in DOMAIN\james >>>>> Get_Pwnam_internals didn't find user [DOMAIN\james]! >>>>> Finding user james >>>>> Trying _Get_Pwnam(), username as lowercase is james >>>>> Checking combinations of 0 uppercase letters in james >>>>> Get_Pwnam_internals didn't find user [james]! >>>>> Failed to find authenticated user DOMAIN\james via getpwnam(), denying >>>>> access. >>>>> check_ntlm_password: winbind authentication for user [james] FAILED >>>>> with error NT_STATUS_NO_SUCH_USER >>>>> check_ntlm_password: Authentication for user [james] -> [james] >>>>> FAILED with error NT_STATUS_NO_SUCH_USER >>>>> Got user=[james at DOMAIN.CORP >>>>> ] >>>>> domain=[DOMAIN] workstation=[server03] len1=24 len2=124 >>>>> Mapping user [DOMAIN]\[james at DOMAIN.CORP >>>>> ] >>>>> from workstation [server03] >>>>> attempting to make a user_info for james at DOMAIN.CORP >>>>> >>>>> >>>>> (james at DOMAIN.CORP >>>>> >>>>> ) >>>>> making strings for james at DOMAIN.CORP >>>>> 's >>>>> user_info struct >>>>> making blobs for james at DOMAIN.CORP >>>>> 's >>>>> user_info struct >>>>> check_ntlm_password: Checking password for unmapped user >>>>> [DOMAIN]\[james at DOMAIN.CORP >>>>> ]@[server03] with >>>>> the new password interface >>>>> check_ntlm_password: mapped user is: [DOMAIN]\[james at DOMAIN.CORP >>>>> >>>>> >>>>> ]@[server03] >>>>> check_ntlm_password: winbind authentication for user >>>>> [james at DOMAIN.CORP >>>>> ] FAILED with >>>>> error >>>>> NT_STATUS_NO_SUCH_USER >>>>> check_ntlm_password: Authentication for user [james at DOMAIN.CORP >>>>> >>>>> >>>>> ] -> [james at DOMAIN.CORP >>>>> >>>>> >>>>> ] FAILED with error NT_STATUS_NO_SUCH_USER >>>>> Got user=[james at DOMAIN.CORP >>>>> ] >>>>> domain=[DOMAIN] workstation=[server03] len1=24 len2=124 >>>>> Mapping user [DOMAIN]\[james at DOMAIN.CORP >>>>> ] >>>>> from workstation [server03] >>>>> attempting to make a user_info for james at DOMAIN.CORP >>>>> >>>>> >>>>> (james at DOMAIN.CORP >>>>> >>>>> ) >>>>> making strings for james at DOMAIN.CORP >>>>> 's >>>>> user_info struct >>>>> making blobs for james at DOMAIN.CORP >>>>> 's >>>>> user_info struct >>>>> check_ntlm_password: Checking password for unmapped user >>>>> [DOMAIN]\[james at DOMAIN.CORP >>>>> ]@[server03] with >>>>> the new password interface >>>>> check_ntlm_password: mapped user is: [DOMAIN]\[james at DOMAIN.CORP >>>>> >>>>> >>>>> ]@[server03] >>>>> check_ntlm_password: winbind authentication for user >>>>> [james at DOMAIN.CORP >>>>> ] FAILED with >>>>> error >>>>> NT_STATUS_NO_SUCH_USER >>>>> check_ntlm_password: Authentication for user [james at DOMAIN.CORP >>>>> >>>>> >>>>> ] -> [james at DOMAIN.CORP >>>>> >>>>> >>>>> ] FAILED with error NT_STATUS_NO_SUCH_USER >>>>> >>>>> >>>>> _______________________________________________ >>>>> users mailing list >>>>> users at lists.opencsw.org >>>>> >>>>> https://lists.opencsw.org/mailman/listinfo/users >>>>> >>>> >>>> _______________________________________________ >>>> users mailing list >>>> users at lists.opencsw.org >>>> >>>> https://lists.opencsw.org/mailman/listinfo/users >>> >> >> _______________________________________________ >> users mailing list >> users at lists.opencsw.org >> https://lists.opencsw.org/mailman/listinfo/users > From james at themacplace.co.uk Fri Jun 21 11:05:40 2013 From: james at themacplace.co.uk (James Relph) Date: Fri, 21 Jun 2013 10:05:40 +0100 Subject: [csw-users] Odd Samba/winbind issue In-Reply-To: <51C414D2.706@opencsw.org> References: <51C3E39F.9030704@opencsw.org> <51C4080F.7020204@opencsw.org> <361568C2-8B6B-4910-B8BD-9C01278D00F8@themacplace.co.uk> <51C414D2.706@opencsw.org> Message-ID: <5041DC33-A17A-40B8-8BD2-38C18677ED48@themacplace.co.uk> Hi Jan, Basically the second situation there, pam authentication via winbind (eg. netatalk or SSH) is working OK. My smb.conf file is: [global] workgroup = DOMAIN realm = DOMAIN.CORP security = ads idmap uid = 16777216-33554431 idmap gid = 16777216-33554431 template shell = /usr/bin/bash map untrusted to domain = yes load printers = no server string = server01 dns proxy = no winbind cache time = 300 winbind enum users = Yes winbind enum groups = Yes winbind use default domain = Yes winbind trusted domains only = No winbind nested groups = Yes winbind expand groups = 5 winbind refresh tickets = No winbind offline logon = No winbind normalize names = No password server = server03.domain.corp template homedir = /export/home/%U log file = /var/samba/samba.log log level = 5 [FileShare] path = /shared/FileShare comment = FileShare read only = No [STUDIO] path = /shared/STUDIO comment = STUDIO read only = No Thanks very much James On 21 Jun 2013, at 09:54, Jan Holzhueter wrote: > > Hi, > just do make sure what are you trying: > > login with an AD user as in ssh username at whatever. > Or mount a share from the OI sever via smb? > > For first one please post /etc/pam.conf > > for the second please post /etc/opt/csw/samba/smb.conf > > Greetings > Jan > > > > Am 21.06.13 10:43, schrieb James Relph: >> Hi Jan, >> >> Yes, that's the one I had found, and I already have that link there. I >> don't think winbind worked at all until that was in place. It's samba >> that doesn't seem to be working with winbind properly. >> >> James >> >> On 21 Jun 2013, at 09:00, Jan Holzhueter > > wrote: >> >>> Hi, >>> ok I looked up the old bug about that: >>> https://www.opencsw.org/mantis/view.php?id=5020 >>> >>> acroding to this you need this: >>> ln -s /opt/csw/lib/libnss_winbind.so.1 /lib/nss_winbind.so.1 >>> >>> Greetings >>> Jan >>> >>> >>> Am 21.06.13 07:30, schrieb James Relph: >>>> Thanks for the speedy reply. I think I found where you'd already >>>> mentioned that online anyway, I've got: >>>> >>>> libnss_winbind.so -> /opt/csw/lib/libnss_winbind.so.1 >>>> nss_winbind.so.1 -> /opt/csw/lib/libnss_winbind.so.1 >>>> >>>> In /lib. Winbind itself seems to be working fine, I've got netatalk >>>> using that happily, it's the cswsamba version that won't seem to use >>>> winbind (it's either not using it properly, or it's using the wrong >>>> winbind somehow). Netatalk, using winbind, is fine. >>>> >>>> Best regards, >>>> >>>> James. >>>> >>>> >>>> On 21 Jun 2013, at 06:24, Jan Holzhueter >>> >>>> > wrote: >>>> >>>>> Hi, >>>>> if you use the auth via pam you must symlink the nss_winbind to a >>>>> special place. I'm not sure which one atm. Check the orginal OI samba >>>>> package that should put it in the right place. >>>>> We can't add this to our package as this would brake install on sparse >>>>> zones. >>>>> I wanted to write a short notice about it put did not have the time yet. >>>>> It might be that you even need to copy and not symlink the lib. Not sure >>>>> here. >>>>> >>>>> Greetings >>>>> Jan >>>>> >>>>> >>>>> >>>>> Am 21.06.13 07:15, schrieb James Relph: >>>>>> Hi, >>>>>> >>>>>> Apologies for cross posting, but I'm not sure if this is an Oi issue or >>>>>> a cswsamba issue. I've installed cswsamba (3.6.15) and >>>>>> cswsamba_winbind >>>>>> on an OI box (151a7). I've got it bound to AD fine, and winbind itself >>>>>> seems to be operating perfectly (I've actually got netatalk happily >>>>>> authenticating AD users via winbind). If I run wbinfo -u or getent >>>>>> passwd, I get the expected information back. >>>>>> >>>>>> Oddly though Samba itself isn't authenticating users. If I try and >>>>>> login (with a few variations of DOMAIN\username or username at DOMAIN) it >>>>>> just kicks it back as an unknown user (see below). The only thing that >>>>>> I can think of is that the cswsamba is actually still calling the >>>>>> previously installed (but turned off) winbind that I installed with the >>>>>> original OI samba install. With that not running though I wouldn't >>>>>> have >>>>>> thought that would have happened (but if that could be it - how do I >>>>>> make sure that cswsamba uses cswsamba_winbind). I have symlinked the >>>>>> csw nss_winbind libraries into /lib, I just don't know if there's >>>>>> anything else that could cause this. >>>>>> >>>>>> Thanks for any help. >>>>>> >>>>>> James >>>>>> >>>>>> Principal Consultant >>>>>> >>>>>> >>>>>> Mapping user [DOMAIN]\[james] from workstation [server03] >>>>>> attempting to make a user_info for james (james) >>>>>> making strings for james's user_info struct >>>>>> making blobs for james's user_info struct >>>>>> check_ntlm_password: Checking password for unmapped user >>>>>> [DOMAIN]\[james]@[server03] with the new password interface >>>>>> check_ntlm_password: mapped user is: [DOMAIN]\[james]@[server03] >>>>>> Finding user DOMAIN\james >>>>>> Trying _Get_Pwnam(), username as lowercase is DOMAIN\james >>>>>> Trying _Get_Pwnam(), username as given is DOMAIN\james >>>>>> Checking combinations of 0 uppercase letters in DOMAIN\james >>>>>> Get_Pwnam_internals didn't find user [DOMAIN\james]! >>>>>> Finding user james >>>>>> Trying _Get_Pwnam(), username as lowercase is james >>>>>> Checking combinations of 0 uppercase letters in james >>>>>> Get_Pwnam_internals didn't find user [james]! >>>>>> Failed to find authenticated user DOMAIN\james via getpwnam(), denying >>>>>> access. >>>>>> check_ntlm_password: winbind authentication for user [james] FAILED >>>>>> with error NT_STATUS_NO_SUCH_USER >>>>>> check_ntlm_password: Authentication for user [james] -> [james] >>>>>> FAILED with error NT_STATUS_NO_SUCH_USER >>>>>> Got user=[james at DOMAIN.CORP >>>>>> ] >>>>>> domain=[DOMAIN] workstation=[server03] len1=24 len2=124 >>>>>> Mapping user [DOMAIN]\[james at DOMAIN.CORP >>>>>> ] >>>>>> from workstation [server03] >>>>>> attempting to make a user_info for james at DOMAIN.CORP >>>>>> >>>>>> >>>>>> (james at DOMAIN.CORP >>>>>> >>>>>> ) >>>>>> making strings for james at DOMAIN.CORP >>>>>> 's >>>>>> user_info struct >>>>>> making blobs for james at DOMAIN.CORP >>>>>> 's >>>>>> user_info struct >>>>>> check_ntlm_password: Checking password for unmapped user >>>>>> [DOMAIN]\[james at DOMAIN.CORP >>>>>> ]@[server03] with >>>>>> the new password interface >>>>>> check_ntlm_password: mapped user is: [DOMAIN]\[james at DOMAIN.CORP >>>>>> >>>>>> >>>>>> ]@[server03] >>>>>> check_ntlm_password: winbind authentication for user >>>>>> [james at DOMAIN.CORP >>>>>> ] FAILED with >>>>>> error >>>>>> NT_STATUS_NO_SUCH_USER >>>>>> check_ntlm_password: Authentication for user [james at DOMAIN.CORP >>>>>> >>>>>> >>>>>> ] -> [james at DOMAIN.CORP >>>>>> >>>>>> >>>>>> ] FAILED with error NT_STATUS_NO_SUCH_USER >>>>>> Got user=[james at DOMAIN.CORP >>>>>> ] >>>>>> domain=[DOMAIN] workstation=[server03] len1=24 len2=124 >>>>>> Mapping user [DOMAIN]\[james at DOMAIN.CORP >>>>>> ] >>>>>> from workstation [server03] >>>>>> attempting to make a user_info for james at DOMAIN.CORP >>>>>> >>>>>> >>>>>> (james at DOMAIN.CORP >>>>>> >>>>>> ) >>>>>> making strings for james at DOMAIN.CORP >>>>>> 's >>>>>> user_info struct >>>>>> making blobs for james at DOMAIN.CORP >>>>>> 's >>>>>> user_info struct >>>>>> check_ntlm_password: Checking password for unmapped user >>>>>> [DOMAIN]\[james at DOMAIN.CORP >>>>>> ]@[server03] with >>>>>> the new password interface >>>>>> check_ntlm_password: mapped user is: [DOMAIN]\[james at DOMAIN.CORP >>>>>> >>>>>> >>>>>> ]@[server03] >>>>>> check_ntlm_password: winbind authentication for user >>>>>> [james at DOMAIN.CORP >>>>>> ] FAILED with >>>>>> error >>>>>> NT_STATUS_NO_SUCH_USER >>>>>> check_ntlm_password: Authentication for user [james at DOMAIN.CORP >>>>>> >>>>>> >>>>>> ] -> [james at DOMAIN.CORP >>>>>> >>>>>> >>>>>> ] FAILED with error NT_STATUS_NO_SUCH_USER >>>>>> >>>>>> >>>>>> _______________________________________________ >>>>>> users mailing list >>>>>> users at lists.opencsw.org >>>>>> >>>>>> https://lists.opencsw.org/mailman/listinfo/users >>>>>> >>>>> >>>>> _______________________________________________ >>>>> users mailing list >>>>> users at lists.opencsw.org >>>>> >>>>> https://lists.opencsw.org/mailman/listinfo/users >>>> >>> >>> _______________________________________________ >>> users mailing list >>> users at lists.opencsw.org >>> https://lists.opencsw.org/mailman/listinfo/users >> > > _______________________________________________ > users mailing list > users at lists.opencsw.org > https://lists.opencsw.org/mailman/listinfo/users -------------- next part -------------- An HTML attachment was scrubbed... URL: From jh at opencsw.org Fri Jun 21 11:20:40 2013 From: jh at opencsw.org (Jan Holzhueter) Date: Fri, 21 Jun 2013 11:20:40 +0200 Subject: [csw-users] Odd Samba/winbind issue In-Reply-To: <5041DC33-A17A-40B8-8BD2-38C18677ED48@themacplace.co.uk> References: <51C3E39F.9030704@opencsw.org> <51C4080F.7020204@opencsw.org> <361568C2-8B6B-4910-B8BD-9C01278D00F8@themacplace.co.uk> <51C414D2.706@opencsw.org> <5041DC33-A17A-40B8-8BD2-38C18677ED48@themacplace.co.uk> Message-ID: <51C41AE8.8030906@opencsw.org> Ok I'm not an ads samba expert but I found this: [global] security = ads realm = EXAMPLE.COM password server = IPADRESSE #IP of Domain Controller dns probably works too workgroup = EXAMPLE idmap uid = 10000-20000 idmap gid = 10000-20000 winbind enum users = yes winbind enum groups = yes winbind cache time = 10 winbind use default domain = yes template homedir = /home/%U template shell = /bin/bash client use spnego = yes client ntlmv2 auth = yes encrypt passwords = yes restrict anonymous = 2 domain master = no local master = no preferred master = no os level = 0 Which looks more or less like yours. I might have the time next week to try to get it to work Greetings Jan Am 21.06.13 11:05, schrieb James Relph: > Hi Jan, > > Basically the second situation there, pam authentication via winbind > (eg. netatalk or SSH) is working OK. > > My smb.conf file is: > > [global] > workgroup = DOMAIN > realm = DOMAIN.CORP > security = ads > idmap uid = 16777216-33554431 > idmap gid = 16777216-33554431 > template shell = /usr/bin/bash > map untrusted to domain = yes > load printers = no > server string = server01 > dns proxy = no > winbind cache time = 300 > winbind enum users = Yes > winbind enum groups = Yes > winbind use default domain = Yes > winbind trusted domains only = No > winbind nested groups = Yes > winbind expand groups = 5 > winbind refresh tickets = No > winbind offline logon = No > winbind normalize names = No > password server = server03.domain.corp > template homedir = /export/home/%U > log file = /var/samba/samba.log > log level = 5 > > [FileShare] > path = /shared/FileShare > comment = FileShare > read only = No > > [STUDIO] > path = /shared/STUDIO > comment = STUDIO > read only = No > > > Thanks very much > > James > > On 21 Jun 2013, at 09:54, Jan Holzhueter > wrote: > >> >> Hi, >> just do make sure what are you trying: >> >> login with an AD user as in ssh username at whatever. >> Or mount a share from the OI sever via smb? >> >> For first one please post /etc/pam.conf >> >> for the second please post /etc/opt/csw/samba/smb.conf >> >> Greetings >> Jan >> >> >> >> Am 21.06.13 10:43, schrieb James Relph: >>> Hi Jan, >>> >>> Yes, that's the one I had found, and I already have that link there. I >>> don't think winbind worked at all until that was in place. It's samba >>> that doesn't seem to be working with winbind properly. >>> >>> James >>> >>> On 21 Jun 2013, at 09:00, Jan Holzhueter >> >>> > wrote: >>> >>>> Hi, >>>> ok I looked up the old bug about that: >>>> https://www.opencsw.org/mantis/view.php?id=5020 >>>> >>>> acroding to this you need this: >>>> ln -s /opt/csw/lib/libnss_winbind.so.1 /lib/nss_winbind.so.1 >>>> >>>> Greetings >>>> Jan >>>> >>>> >>>> Am 21.06.13 07:30, schrieb James Relph: >>>>> Thanks for the speedy reply. I think I found where you'd already >>>>> mentioned that online anyway, I've got: >>>>> >>>>> libnss_winbind.so -> /opt/csw/lib/libnss_winbind.so.1 >>>>> nss_winbind.so.1 -> /opt/csw/lib/libnss_winbind.so.1 >>>>> >>>>> In /lib. Winbind itself seems to be working fine, I've got netatalk >>>>> using that happily, it's the cswsamba version that won't seem to use >>>>> winbind (it's either not using it properly, or it's using the wrong >>>>> winbind somehow). Netatalk, using winbind, is fine. >>>>> >>>>> Best regards, >>>>> >>>>> James. >>>>> >>>>> >>>>> On 21 Jun 2013, at 06:24, Jan Holzhueter >>>> >>>>> >>>>> > wrote: >>>>> >>>>>> Hi, >>>>>> if you use the auth via pam you must symlink the nss_winbind to a >>>>>> special place. I'm not sure which one atm. Check the orginal OI samba >>>>>> package that should put it in the right place. >>>>>> We can't add this to our package as this would brake install on sparse >>>>>> zones. >>>>>> I wanted to write a short notice about it put did not have the >>>>>> time yet. >>>>>> It might be that you even need to copy and not symlink the lib. >>>>>> Not sure >>>>>> here. >>>>>> >>>>>> Greetings >>>>>> Jan >>>>>> >>>>>> >>>>>> >>>>>> Am 21.06.13 07:15, schrieb James Relph: >>>>>>> Hi, >>>>>>> >>>>>>> Apologies for cross posting, but I'm not sure if this is an Oi >>>>>>> issue or >>>>>>> a cswsamba issue. I've installed cswsamba (3.6.15) and >>>>>>> cswsamba_winbind >>>>>>> on an OI box (151a7). I've got it bound to AD fine, and winbind >>>>>>> itself >>>>>>> seems to be operating perfectly (I've actually got netatalk happily >>>>>>> authenticating AD users via winbind). If I run wbinfo -u or getent >>>>>>> passwd, I get the expected information back. >>>>>>> >>>>>>> Oddly though Samba itself isn't authenticating users. If I try and >>>>>>> login (with a few variations of DOMAIN\username or >>>>>>> username at DOMAIN) it >>>>>>> just kicks it back as an unknown user (see below). The only >>>>>>> thing that >>>>>>> I can think of is that the cswsamba is actually still calling the >>>>>>> previously installed (but turned off) winbind that I installed >>>>>>> with the >>>>>>> original OI samba install. With that not running though I wouldn't >>>>>>> have >>>>>>> thought that would have happened (but if that could be it - how do I >>>>>>> make sure that cswsamba uses cswsamba_winbind). I have >>>>>>> symlinked the >>>>>>> csw nss_winbind libraries into /lib, I just don't know if there's >>>>>>> anything else that could cause this. >>>>>>> >>>>>>> Thanks for any help. >>>>>>> >>>>>>> James >>>>>>> >>>>>>> Principal Consultant >>>>>>> >>>>>>> >>>>>>> Mapping user [DOMAIN]\[james] from workstation [server03] >>>>>>> attempting to make a user_info for james (james) >>>>>>> making strings for james's user_info struct >>>>>>> making blobs for james's user_info struct >>>>>>> check_ntlm_password: Checking password for unmapped user >>>>>>> [DOMAIN]\[james]@[server03] with the new password interface >>>>>>> check_ntlm_password: mapped user is: [DOMAIN]\[james]@[server03] >>>>>>> Finding user DOMAIN\james >>>>>>> Trying _Get_Pwnam(), username as lowercase is DOMAIN\james >>>>>>> Trying _Get_Pwnam(), username as given is DOMAIN\james >>>>>>> Checking combinations of 0 uppercase letters in DOMAIN\james >>>>>>> Get_Pwnam_internals didn't find user [DOMAIN\james]! >>>>>>> Finding user james >>>>>>> Trying _Get_Pwnam(), username as lowercase is james >>>>>>> Checking combinations of 0 uppercase letters in james >>>>>>> Get_Pwnam_internals didn't find user [james]! >>>>>>> Failed to find authenticated user DOMAIN\james via getpwnam(), >>>>>>> denying >>>>>>> access. >>>>>>> check_ntlm_password: winbind authentication for user [james] FAILED >>>>>>> with error NT_STATUS_NO_SUCH_USER >>>>>>> check_ntlm_password: Authentication for user [james] -> [james] >>>>>>> FAILED with error NT_STATUS_NO_SUCH_USER >>>>>>> Got user=[james at DOMAIN.CORP >>>>>>> >>>>>>> ] >>>>>>> domain=[DOMAIN] workstation=[server03] len1=24 len2=124 >>>>>>> Mapping user [DOMAIN]\[james at DOMAIN.CORP >>>>>>> >>>>>>> ] >>>>>>> from workstation [server03] >>>>>>> attempting to make a user_info for james at DOMAIN.CORP >>>>>>> >>>>>>> >>>>>>> >>>>>>> (james at DOMAIN.CORP >>>>>>> >>>>>>> >>>>>>> ) >>>>>>> making strings for james at DOMAIN.CORP >>>>>>> >>>>>>> 's >>>>>>> user_info struct >>>>>>> making blobs for james at DOMAIN.CORP >>>>>>> >>>>>>> 's >>>>>>> user_info struct >>>>>>> check_ntlm_password: Checking password for unmapped user >>>>>>> [DOMAIN]\[james at DOMAIN.CORP >>>>>>> >>>>>>> ]@[server03] >>>>>>> with >>>>>>> the new password interface >>>>>>> check_ntlm_password: mapped user is: [DOMAIN]\[james at DOMAIN.CORP >>>>>>> >>>>>>> >>>>>>> >>>>>>> ]@[server03] >>>>>>> check_ntlm_password: winbind authentication for user >>>>>>> [james at DOMAIN.CORP >>>>>>> >>>>>>> ] FAILED with >>>>>>> error >>>>>>> NT_STATUS_NO_SUCH_USER >>>>>>> check_ntlm_password: Authentication for user [james at DOMAIN.CORP >>>>>>> >>>>>>> >>>>>>> >>>>>>> ] -> [james at DOMAIN.CORP >>>>>>> >>>>>>> >>>>>>> >>>>>>> ] FAILED with error NT_STATUS_NO_SUCH_USER >>>>>>> Got user=[james at DOMAIN.CORP >>>>>>> >>>>>>> ] >>>>>>> domain=[DOMAIN] workstation=[server03] len1=24 len2=124 >>>>>>> Mapping user [DOMAIN]\[james at DOMAIN.CORP >>>>>>> >>>>>>>