samba - May 2004 - Problem upgrading to 3.0.4 and ArcServe

Hi,

Since I had upgraded from Samba 3.0.0 to 3.0.4
I have problems with ArcServe to connect to the 
share.
Arcserve is running on a NT 4.0 box, everytime
I try to connect to the samba share it says me
"authenticacion failed". When I browse the share
from windows explorer I have not problems.

Thank you in advance

Guillermo

> Since I had upgraded from Samba 3.0.0 to 3.0.4
> I have problems with ArcServe to connect to the
> share.
> Arcserve is running on a NT 4.0 box, everytime
> I try to connect to the samba share it says me
> "authenticacion failed". When I browse the share
> from windows explorer I have not problems.
Sorry, the ArcServe says me "access denied"

Guillermo

On Monday 10 May 2004 08:00 pm, Guillermo Borgobello
wrote:
> > Since I had upgraded from Samba 3.0.0 to 3.0.4
> > I have problems with ArcServe to connect to the
> > share.
> > Arcserve is running on a NT 4.0 box, everytime
> > I try to connect to the samba share it says me
> > "authenticacion failed". When I browse the share
> > from windows explorer I have not problems.
>
> Sorry, the ArcServe says me "access denied"
>
> Guillermo
Are you logged in as the ArcServe user when you test it manually?

> > > Since I had upgraded from Samba 3.0.0 to 3.0.4
> > > I have problems with ArcServe to connect to the
> > > share.
> > > ...
> Are you logged in as the ArcServe user when you test it manually?
I tried logging to the NT as different users (arcserve, root, admin, me)
but I always have the same problem.
I had added an alias for ArcServe user to root in my samba
box... but nothing.

Thank you

Hello,
I have the same problem. Since Version 3.0.3 of Samba. ArcServ Doesn't
login. I have tried to reference other
valid Domain user buy using CSQ\Administrator, CSQ\shane and the proper
passwords in the ArcServ Backup Screen(Please see attached pic). I am
running Fedora Core 1 on my Test Server with Samba 3.0.4. 
My ArcServ version is a 9.0. Running on Windows 2000 Server SP4
 my Smb.conf is -->
#======================= Global Settings
====================================[global]
#=================================Domain Control options======        local
master = no
        domain master = no
        preferred master = no
#===============================================================        large
readwrite = yes
        hosts allow = 127.0.0.1 172.27.0.0/16
        #lpq command = /usr/bin/lpq -P%p
        #lpq cache time = 60
        veto files = /*.eml/*.nws/riched20.dll/
        dns proxy = no
        netbios name = testbackup
        write cache size = 128000
        writeable = yes
        workgroup = CSQ
        os level = 0
        #printcap name = /etc/printcap
        security = domain
        log file = /var/log/samba/%m.log
        #smb passwd file = /etc/samba/smbpasswd
        #load printers = yes
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8576
        wins server = 172.27.1.17
        null passwords = yes
        interfaces = 172.27.1.21/24
        #map to guest = bad user
        encrypt passwords = yes
        public = yes
        #admin users = CSQ+Administrator
        #printing = lprng
        #printer admin =
@CSQ+Administrator,@CSQ+"Programmers",@CSQ+"Domain
Admins",@CSQ+"Domain Users",@CSQ+"PA Doctors"
        server string = Samba Server
        password server = *
        guest only = yes
#==========================Domain Controller=====================        winbind
cache time = 60
        winbind separator = +
        winbind uid = 10000-20000
        winbind gid = 10000-20000
        winbind enum users = yes
        winbind enum groups = yes
        template homedir = /home/%D/%U
        template shell = /bin/bash
#==============================================================[public]
   comment = Public Stuff
   path = /home/samba/public
   public = yes
   writeable = yes
   create mode = 755

Please note that the share I am testing with has public = yes. ArcServ will
still not mount the dir.
Jerry I also tried the patches and Samba-3.0.4. Still no connection. What
has Change from 3.0.2a to 3.0.3 and 3.0.4??
Further more what can I do to fix the problem...
					Thank you for your time.....
							Shane

					
-----Original Message-----
From: Jonathan Johnson [mailto:jon@sutinen.com]
Sent: Tuesday, May 11, 2004 11:40 AM
To: Dan Shadix
Cc: samba@lists.samba.org
Subject: Re: [Samba] Re: Problem upgrading to 3.0.4 and ArcServe


On Tue, 11 May 2004, Dan Shadix wrote:
> On Monday 10 May 2004 08:00 pm, Guillermo Borgobello wrote:
> > > Since I had upgraded from Samba 3.0.0 to 3.0.4
> > > I have problems with ArcServe to connect to the
> > > share.
> > > Arcserve is running on a NT 4.0 box, everytime
> > > I try to connect to the samba share it says me
> > > "authenticacion failed". When I browse the share
> > > from windows explorer I have not problems.
> >
> > Sorry, the ArcServe says me "access denied"
> >
> > Guillermo
> 
> Are you logged in as the ArcServe user when you test it manually?
> 
To clarify: ArcServe may be running under different credentials than
the user you are logged in as on the NT 4.0 box.

It's common for backup software to run or have services running under
alternate credentials; this allows non-administrators to perform backup
and restore operations.

Make sure that the username ArcServe is using has permissions on your
Samba box. To find out what this is, you can go to your Services
control panel applet, and look at the startup properties for the
ArcServe services, or if an event in your task scheduler starts
ArcServe, check the credentials there.

That reminds me of another thing: I've found that on Windows NT 4.0,
when changing automatically from daylight to standard time or vice
versa, it is often necessary to re-enter the passwords for each event
in the task scheduler. A very strange bug, but a bug nonetheless.

--Jonathan Johnson
Sutinen Consulting, Inc.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Jerry,
I am having the problem and I am in Iowa. So I don't think it is
a location specific problem. My Arc Serv Box is a Windows 2000 Server
box w/sp 4. One special note is that my Arc Serv Box is also a 
backup Domain controller for my Domain. Other than that I have a 
pretty run of the mill network. I am in the progress of testing 
the patch(https://bugzilla.samba.org/show_bug.cgi?id=1315) with my test
server.
I should know if it works bye tonight....

				Shane

-----Original Message-----
From: Gerald (Jerry) Carter [mailto:jerry@samba.org]
Sent: Thursday, May 20, 2004 10:12 AM
To: Andreas
Cc: samba@lists.samba.org
Subject: Re: [Samba] Re: Problem upgrading to 3.0.4 and ArcServe


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andreas wrote:

| On a related note, I'm surprised at the amount of people
| being hit by this bug, since, to my understanting, it
| only affects windows installations without strong cryptography
| support, which means old service packs or none.

I've looked into this some more and it could just be a
different in the way that non-us windows servers operate.
We only ask for AUTH_PIPE_SEAL in winbuindd' schannel code.
All of my servers include the nonce for sealing in the
verfier returned from the server as well.  But apparently
non-us servcers don't.

The only way I could reproduce this was to use a unpatched
2k DC.  But everyone of the people who reported this bug
(that I can remember) where outside the US.

Go figure....




cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFArMq/IR7qMdg1EfYRAoKkAKD0gd+5CnNMeED/1/YtxLUkxgI0vACghEFw
aH3gViDVWhpp6r/0lfYP+lE=qSFL
-----END PGP SIGNATURE-----
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Jerry,
I downloaded the SP from Microsoft.com( Offline network install ) I am on
SP4 on Windows?? Would ArcServ implement its own
Security???
			Shane

-----Original Message-----
From: Gerald (Jerry) Carter [mailto:jerry@samba.org]
Sent: Thursday, May 20, 2004 4:01 PM
To: Shane Drinkwater
Cc: samba@lists.samba.org
Subject: Re: [Samba] Re: Problem upgrading to 3.0.4 and ArcServe


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Shane Drinkwater wrote:
| Jerry,
| I am having the problem and I am in Iowa. So I
| don't think it is a location specific problem. My
| Arc Serv Box is a Windows 2000 Server box w/sp 4.
| One special note is that my Arc Serv Box is also a
| backup Domain controller for my Domain. Other than
| that I have a pretty run of the mill network. I am in
| the progress of testing  the
| patch(https://bugzilla.samba.org/show_bug.cgi?id=1315)
| with my test server. I should know if it works
| bye tonight....

Strange then.  I had originally thought that all service
packs for Windows 2k enabled strong encryption (unlike the
us and export versions we used to have for NT4).  Maybe
I'm wrong.

What service pack is you windows 200 DC and where did
you get the SP archive from ?





cheers, jerry
- ----------------------------------------------------------------------
Hewlett-Packard            ------------------------- http://www.hp.com
SAMBA Team                 ---------------------- http://www.samba.org
GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
"...a hundred billion castaways looking for a home." ----------- Sting
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFArRynIR7qMdg1EfYRArjwAKDhCsozLSuNtQe0GJwKyUOEHbCSjwCg7sUt
MzqI8mmMunuWLlsePoqEGpU=2DVF
-----END PGP SIGNATURE-----

Jerry,
No Dice. The ArcServ System Still reports a Authentication Error. This there
a mode I can 
put the winbindd and smbd deamons into to give more diagnostic info??

			Shane

-----Original Message-----
From: Gerald (Jerry) Carter [mailto:jerry@samba.org]
Sent: Thursday, May 20, 2004 4:47 PM
To: Shane Drinkwater
Cc: 'samba@lists.samba.org'
Subject: Re: [Samba] Re: Problem upgrading to 3.0.4 and ArcServe


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Shane Drinkwater wrote:
| Jerry,
| I downloaded the SP from Microsoft.com( Offline
| network install ) I am on
| SP4 on Windows?? Would ArcServ implement its own
| Security???

I'm not convinced your problem is related to bug 1315
but it could be.  Let me know what the outcome is and
we'll move on from there.




cheers, jerry

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFArSdWIR7qMdg1EfYRAjm0AKCIMcB0fAd7ertt2AGSkSbaYIFobACghFE0
B2wn9ihCeOIZ+VEHpkOsFWo=VTnT
-----END PGP SIGNATURE-----