Luiz Alfredo Baggiotto
2002-Jan-23 04:55 UTC
Problems with logs in samba 2.2.2: help me please!
Dear Sir
Recently, I was write to this list abou a problem with my log files on samba
2.2.2 and
anyone has replied.
I don?t know if the question was stupid (I?m sorry if this is the situation, but
I couldn?t
find anything in docs and archives) or if anyone know the answer.
The problem is that I updated our samba 2.0.7 to samba 2.2.2 and then the only
thing
in log.smb file is something like this:
===================================api_net_sam_logon: Failed to marshall
NET_R_SAM_LOGON.
api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed.
domain_client_validate: could not fetch trust account password for domain DOMAIN
ERROR: string overflow by 1 in safe_strcpy [usr_test]
call_nt_transact_ioctl: Currently not implemented.
call_nt_transact_ioctl: Currently not implemented.
call_nt_transact_ioctl: Currently not implemented.
===================================
Our network have more than 5.000 users and is much frequent that one tries to
invade
another net or similar thing. When happened this, I need to make a relationship
beetween IP number, machine and user. With the old logs, it?s very simple, but
now
this funcionality has disapped and, if I can?t retrive it, I will need make the
downgrade to
samba 2.0.7 again... :-(
Please, help me!
I?m running samba in a Solaris 7 box, and compiled it like this:
./configure --prefix=/opt/local/Samba --with-configdir=/opt/local/samba/etc
--with-
smbwrapper=/opt/local/bin/smbwrapper.so --with-syslog --with-utmp --with-msdfs
--
with-vfs --with-acl-support --with-quotas
My logs, in smb.conf, is setted to level 0. Thank you ver much for ANY help!!!
Best regards
============================= Administra?ao da Rede
FACIN / PUCRS
Ramal 4184
Pr?dio 30 - Sala 145
Hello, I've want the same functionality as you for samba 2.2.1, but I did not yet figure it out. How did you get your samba 2.0.7 to log all the user-activities that you've described? I'm first of all interested in having a log entry for logon and logoff. Do you have any idea? Best regards, Ralf Ronneburger Luiz Alfredo Baggiotto wrote:> Dear Sir > > Recently, I was write to this list abou a problem with my log files on samba 2.2.2 and > anyone has replied. > I don?t know if the question was stupid (I?m sorry if this is the situation, but I couldn?t > find anything in docs and archives) or if anyone know the answer. > The problem is that I updated our samba 2.0.7 to samba 2.2.2 and then the only thing > in log.smb file is something like this: > > ===================================> api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. > api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. > domain_client_validate: could not fetch trust account password for domain DOMAIN > ERROR: string overflow by 1 in safe_strcpy [usr_test] > call_nt_transact_ioctl: Currently not implemented. > call_nt_transact_ioctl: Currently not implemented. > call_nt_transact_ioctl: Currently not implemented. > ===================================> > Our network have more than 5.000 users and is much frequent that one tries to invade > another net or similar thing. When happened this, I need to make a relationship > beetween IP number, machine and user. With the old logs, it?s very simple, but now > this funcionality has disapped and, if I can?t retrive it, I will need make the downgrade to > samba 2.0.7 again... :-( > Please, help me! > I?m running samba in a Solaris 7 box, and compiled it like this: > > ./configure --prefix=/opt/local/Samba --with-configdir=/opt/local/samba/etc --with- > smbwrapper=/opt/local/bin/smbwrapper.so --with-syslog --with-utmp --with-msdfs -- > with-vfs --with-acl-support --with-quotas > > My logs, in smb.conf, is setted to level 0. Thank you ver much for ANY help!!! > Best regards > > =============================> Administra?ao da Rede > FACIN / PUCRS > Ramal 4184 > Pr?dio 30 - Sala 145 > > >-- ------------------------------------------------------------ Ralf Ronneburger ralf@ronneburger.de Prefers to receive encrypted Mail, download public-key from http://www.ronneburger.net/gpg/ralf_ronneburger.asc ------------------------------------------------------------
Hi Guys, When you upgrade your samba and if you running under Domain Modes, be careful ... My experience is: When I was using Samba 2.0.7, the file MACHINE.SID, secrets.tdb and smbpasswd were saved in directory /usr/local/samba/private -- it is decided your option when compiling. When I am using Samba 2.2.2, I use /usr/priate directory, I met the same problem as yours ( Luiz Alfredo ...), after I copy those files to new folder, it works. I am not sure whether it works for you, just try it :) Juer>-----Original Message----- >From: Ralf Ronneburger [mailto:ralf@ronneburger.de] >Sent: 23 January 2002 13:02 >To: samba >Subject: Re: Problems with logs in samba 2.2.2: help me please! > > >Hello, > >I've want the same functionality as you for samba 2.2.1, but I did not >yet figure it out. How did you get your samba 2.0.7 to log all the >user-activities that you've described? > >I'm first of all interested in having a log entry for logon >and logoff. >Do you have any idea? > >Best regards, > >Ralf Ronneburger > > > >Luiz Alfredo Baggiotto wrote: > >> Dear Sir >> >> Recently, I was write to this list abou a problem with my >log files on samba 2.2.2 and >> anyone has replied. >> I don?t know if the question was stupid (I?m sorry if this >is the situation, but I couldn?t >> find anything in docs and archives) or if anyone know the answer. >> The problem is that I updated our samba 2.0.7 to samba 2.2.2 >and then the only thing >> in log.smb file is something like this: >> >> ===================================>> api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. >> api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. >> domain_client_validate: could not fetch trust account >password for domain DOMAIN >> ERROR: string overflow by 1 in safe_strcpy [usr_test] >> call_nt_transact_ioctl: Currently not implemented. >> call_nt_transact_ioctl: Currently not implemented. >> call_nt_transact_ioctl: Currently not implemented. >> ===================================>> >> Our network have more than 5.000 users and is much frequent >that one tries to invade >> another net or similar thing. When happened this, I need to >make a relationship >> beetween IP number, machine and user. With the old logs, it? >s very simple, but now >> this funcionality has disapped and, if I can?t retrive it, >I will need make the downgrade to >> samba 2.0.7 again... :-( >> Please, help me! >> I?m running samba in a Solaris 7 box, and compiled it like this: >> >> ./configure --prefix=/opt/local/Samba >--with-configdir=/opt/local/samba/etc --with- >> smbwrapper=/opt/local/bin/smbwrapper.so --with-syslog >--with-utmp --with-msdfs -- >> with-vfs --with-acl-support --with-quotas >> >> My logs, in smb.conf, is setted to level 0. Thank you ver >much for ANY help!!! >> Best regards >> >> =============================>> Administra?ao da Rede >> FACIN / PUCRS >> Ramal 4184 >> Pr?dio 30 - Sala 145 >> >> >> > > > >-- >------------------------------------------------------------ >Ralf Ronneburger >ralf@ronneburger.de > >Prefers to receive encrypted Mail, download public-key from >http://www.ronneburger.net/gpg/ralf_ronneburger.asc >------------------------------------------------------------ > > >-- >To unsubscribe from this list go to the following URL and read the >instructions: http://lists.samba.org/mailman/listinfo/samba >
On Wed, 23 Jan 2002, Luiz Alfredo Baggiotto wrote:> Our network have more than 5.000 users and is much frequent that one tries to invade > another net or similar thing. When happened this, I need to make a relationship > beetween IP number, machine and user. With the old logs, it?s very simple, but now > this funcionality has disapped and, if I can?t retrive it, I will need make the downgrade to > samba 2.0.7 again... :-( > Please, help me! > I?m running samba in a Solaris 7 box, and compiled it like this: > > ./configure --prefix=/opt/local/Samba --with-configdir=/opt/local/samba/etc --with- > smbwrapper=/opt/local/bin/smbwrapper.so --with-syslog --with-utmp --with-msdfs -- > with-vfs --with-acl-support --with-quotas > > My logs, in smb.conf, is setted to level 0. Thank you ver much for ANY help!!!Set "log level = 1" jerry --------------------------------------------------------------------- Hewlett-Packard http://www.hp.com SAMBA Team http://www.samba.org -- http://www.plainjoe.org "Sam's Teach Yourself Samba in 24 Hours" 2ed. ISBN 0-672-32269-2 --"I never saved anything for the swim back." Ethan Hawk in Gattaca--
Luiz Alfredo Baggiotto
2002-Jan-23 11:23 UTC
Problems with logs in samba 2.2.2: help me please!
Hello Thanks a lot for the help. :-) I read your messages.> I've want the same functionality as you for samba 2.2.1, but I did not > yet figure it out. How did you get your samba 2.0.7 to log all the > user-activities that you've described? > I'm first of all interested in having a log entry for logon and logoff. > Do you have any idea?This is a sample of log.smb of the old version 2.0.7: ========================[2002/01/16 15:52:47, 1] smbd/service.c:make_connection(550) usr_1 (200.17.94.73) connect to service netlogon as user usr_1 (uid=270, gid=100) (pid 3003) [2002/01/16 15:52:49, 1] smbd/service.c:make_connection(550) usr_1 (200.17.94.73) connect to service software as user usr_1 (uid=270, gid=100) (pid 3003) [2002/01/16 16:01:59, 1] smbd/service.c:close_cnum(583) w120863 (200.17.91.141) closed connection to service usr_2 [2002/01/16 16:01:59, 1] smbd/service.c:close_cnum(583) w120863 (200.17.91.141) closed connection to service software ======================== Using this information, I was made a script to find the period of users sessions. It?s very important for us.> When I was using Samba 2.0.7, the file MACHINE.SID, secrets.tdb and > smbpasswd were saved in directory /usr/local/samba/private -- it is > decided your option when compiling. > When I am using Samba 2.2.2, I use /usr/priate directory, I met the same > problem as yours ( Luiz Alfredo ...), after I copy those files to new > folder, it works. > I am not sure whether it works for you, just try it :)I was check the directories and my files MACHINE.SID and smbpasswd, in old version 2.0.7, is in /opt/local/samba/private dir. In the new version 2.2.2, I compile with the option /opt/local/Samba and the files is in /opt/local/Samba/private. There are not file named secrets.tdb in old structure. Then, unfortunatly, I think the problem is another... :-(> Perhaps you can provide us with the OLD 207 smb.conf and the NEW 2.2 smb.conf > they may contain hints on what is going wrong.Of course! Here is it: # Global parameters of samba 2.0.7 [global] workgroup = DOMAIN netbios name = SERVER server string = Server encrypt passwords = Yes name resolve order = wins hosts bcast lmhosts time server = Yes logon script = script.bat logon path = \\%N\profiles\%U logon drive = h: domain logons = Yes os level = 34 preferred master = Yes domain master = Yes wins server = xxx.xxx.xxx.xxx panic action = echo create mask = 0755 hosts allow = yyy.yyy.yyy. hide dot files = No utmp = Yes And # Global parameters of samba 2.2.2 [global] workgroup = DOMAIN netbios name = SERVER server string = Server security = DOMAIN encrypt passwords = Yes passwd program = /bin/passwd %u unix password sync = Yes max log size = 50000 timestamp logs = No large readwrite = Yes time server = Yes domain admin group = @adm add user script = /usr/sbin/useradd -d /dev/null -g 122 -s /bin/false %u delete user script = /usr/sbin/userdel %u logon script = script.bat logon path = \\%N\profiles\%U logon drive = h: domain logons = Yes os level = 34 domain master = True wins server = xxx.xxx.xxx.xxx utmp = Yes host msdfs = Yes winbind uid = 50000-60000 winbind gid = 50000-60000 create mask = 0755 hosts allow = yyy.yyy.yyy.> Also what is your exact question? "I want to see the problem machines IP in > the logs?" is that it?No. My problem is that the old log supplies to me the login and logoff of any user, with the machine used for he (please, see the sample above). Now, I have only the errors in my log and I haven?t any idea about what causes this errors.> Have you tried upping debuglevel to 1 or higher?I tried level 3 and individual logs for machine, but the errors persists and the information desired don?t appear. Thanks again ============================= Administra?ao da Rede FACIN / PUCRS Ramal 4184 Pr?dio 30 - Sala 145
Luiz Alfredo Baggiotto
2002-Jan-23 11:54 UTC
Problems with logs in samba 2.2.2: help me please!
Hello> Set "log level = 1"YES!!! It works! Setting log level to 1, now I really can view the users. I?m a dumb! I think when I tried with log level 3, I didn?t see the desired messages in the middle of another infos... :-( [2002/01/23 17:31:28, 0] smbd/password.c:domain_client_validate(1554) domain_client_validate: could not fetch trust account password for domain DOMAIN [2002/01/23 17:31:28, 0] lib/util_str.c:safe_strcpy(878) ERROR: string overflow by 1 in safe_strcpy [usr_1] [2002/01/23 17:35:05, 1] smbd/service.c:make_connection(610) w089806 (200.17.94.78) connect to service secppgcc as user usr_2 (uid=725, gid=126) (pid 22765) With this, I can use the samba in new version in this network! Thanks god!! :-) But, I would like to ask another thing. What does this errors mean (...could not fetch trust account password for domain ..., ... string overflow by 1 in ...)? I read about similar something with the MIME types of the version 2.0.6, but now the problem seem another. Thanks again ============================= Administra?ao da Rede FACIN / PUCRS Ramal 4184 Pr?dio 30 - Sala 145