Ow Mun Heng
2003-May-19  09:16 UTC
[Samba] Logwatch - malformed password entry(uid not number)
Hi All, I've the following in the logs and am wondering why they are there. I also keep getting emails from SAMBA log-deamon (or something like that). [2003/05/19 15:24:29, 0] passdb/pdb_smbpasswd.c:getsmbfilepwent(364) getsmbfilepwent: malformed password entry (uid not number) It's not really serious (at least to me) but it's a cause for concern. Below are the details LInux Redhat 8.0 Samba 2.2.7-5.8.0 - Security Rollup fix pam_smbpasswd.so enabled. I've got smbpasswd and passwd database sync'ed together using PAM. Since Redhat's shipping samba is 'flawed' and not pam e-nabled, I recompiled it using source and Redhat's errata. (i'm pretty sure I did it correctly) Any help is appreciated. Cheers, Mun Heng, Ow H/M Engineering Western Digital M'sia DID : 03-7870 5168
Ow Mun Heng
2003-May-20  02:29 UTC
[Samba] Logwatch - malformed password entry(uid not number)
Hi All,
	Here's the contents of the emails I'm getting. Any Help is Greatly
Appreciated.
Date: Tue, 20 May 2003 04:02:04 +0800
From: root <root@xxx.com>
To: root@xxx.com
Subject: LogWatch for xxx.com
 ################## LogWatch 2.6 Begin #####################
 --------------------- Samba Begin ------------------------
**Unmatched Entries**
[2003/05/19 13:56:34, 0] nmbd/nmbd.c:main(794)
 : 1 Time(s)
[2003/05/19 13:56:34, 0] param/loadparm.c:lp_do_parameter(2775)
 : 1 Time(s)
[2003/05/19 13:56:34, 0] smbd/server.c:main(707)
 : 1 Time(s)
[2003/05/19 17:31:33, 0] nmbd/nmbd.c:terminate(59)
: 1 Time(s)
[2003/05/19 17:31:33, 0] nmbd/nmbd.c:terminate(59)
 : 1 Time(s)
[2003/05/19 19:07:23, 0] nmbd/nmbd.c:main(794)
 : 1 Time(s)
[2003/05/19 19:07:23, 0] param/loadparm.c:lp_do_parameter(2775)
 : 1 Time(s)
[2003/05/19 19:07:23, 0] smbd/server.c:main(707)
 : 1 Time(s)
 ---------------------- Samba End -------------------------
 ---------------- Connections (secure-log) Begin -------------------
Connections:
   Service sgi_fam:
      <no address>: 2 Time(s)
   Service swat:
      127.0.0.1: 26 Time(s)
 ----------------- Connections (secure-log) End --------------------
 ###################### LogWatch End #########################
Cheers,
Mun Heng, Ow
H/M Engineering
Western Digital M'sia 
DID : 03-7870 5168
-----Original Message-----
From: Ow Mun Heng 
Sent: Monday, May 19, 2003 5:16 PM
To: samba@lists.samba.org
Subject: [Samba] Logwatch - malformed password entry(uid not number)
Hi All,
	I've the following in the logs and am wondering why they are there.
I also keep getting emails from SAMBA log-deamon (or something like that).
[2003/05/19 15:24:29, 0] passdb/pdb_smbpasswd.c:getsmbfilepwent(364)
getsmbfilepwent: malformed password entry (uid not number)
It's not really serious (at least to me) but it's a cause for concern.
Below
are the details
LInux Redhat 8.0
Samba 2.2.7-5.8.0 - Security Rollup fix 
pam_smbpasswd.so enabled.
I've got smbpasswd and passwd database sync'ed together using PAM. Since
Redhat's shipping samba is 'flawed' and not pam e-nabled, I
recompiled it
using source and Redhat's errata. (i'm pretty sure I did it correctly)
Any help is appreciated.
Cheers,
Mun Heng, Ow
H/M Engineering
Western Digital M'sia 
DID : 03-7870 5168
Ow Mun Heng
2003-May-22  03:46 UTC
[Samba] Logwatch - malformed password entry(uid not number)
Hi All,
I solved my 
[2003/05/19 15:24:29, 0] passdb/pdb_smbpasswd.c:getsmbfilepwent(364)
getsmbfilepwent: malformed password entry (uid not number)
Problem. It seems that my smbpasswd file had a lot of ::::: before it
finally hits users. the samba authentication procedure seems to go through
this file line by line and thus the errors.
Hope this helps for others.
Ps : I'm still getting logwatch. Can anyone tell me if this is normal?
Cheers,
Mun Heng, Ow
H/M Engineering
Western Digital M'sia 
DID : 03-7870 5168
-----Original Message-----
From: Ow Mun Heng 
Sent: Tuesday, May 20, 2003 10:30 AM
To: samba@lists.samba.org
Subject: RE: [Samba] Logwatch - malformed password entry(uid not number)
Hi All,
	Here's the contents of the emails I'm getting. Any Help is Greatly
Appreciated.
Date: Tue, 20 May 2003 04:02:04 +0800
From: root <root@xxx.com>
To: root@xxx.com
Subject: LogWatch for xxx.com
 ################## LogWatch 2.6 Begin #####################
 --------------------- Samba Begin ------------------------
**Unmatched Entries**
[2003/05/19 13:56:34, 0] nmbd/nmbd.c:main(794)
 : 1 Time(s)
[2003/05/19 13:56:34, 0] param/loadparm.c:lp_do_parameter(2775)
 : 1 Time(s)
[2003/05/19 13:56:34, 0] smbd/server.c:main(707)
 : 1 Time(s)
[2003/05/19 17:31:33, 0] nmbd/nmbd.c:terminate(59)
: 1 Time(s)
[2003/05/19 17:31:33, 0] nmbd/nmbd.c:terminate(59)
 : 1 Time(s)
[2003/05/19 19:07:23, 0] nmbd/nmbd.c:main(794)
 : 1 Time(s)
[2003/05/19 19:07:23, 0] param/loadparm.c:lp_do_parameter(2775)
 : 1 Time(s)
[2003/05/19 19:07:23, 0] smbd/server.c:main(707)
 : 1 Time(s)
 ---------------------- Samba End -------------------------
 ---------------- Connections (secure-log) Begin -------------------
Connections:
   Service sgi_fam:
      <no address>: 2 Time(s)
   Service swat:
      127.0.0.1: 26 Time(s)
 ----------------- Connections (secure-log) End --------------------
 ###################### LogWatch End #########################
Cheers,
Mun Heng, Ow
H/M Engineering
Western Digital M'sia 
DID : 03-7870 5168
-----Original Message-----
From: Ow Mun Heng 
Sent: Monday, May 19, 2003 5:16 PM
To: samba@lists.samba.org
Subject: [Samba] Logwatch - malformed password entry(uid not number)
Hi All,
	I've the following in the logs and am wondering why they are there.
I also keep getting emails from SAMBA log-deamon (or something like that).
[2003/05/19 15:24:29, 0] passdb/pdb_smbpasswd.c:getsmbfilepwent(364)
getsmbfilepwent: malformed password entry (uid not number)
It's not really serious (at least to me) but it's a cause for concern.
Below
are the details
LInux Redhat 8.0
Samba 2.2.7-5.8.0 - Security Rollup fix 
pam_smbpasswd.so enabled.
I've got smbpasswd and passwd database sync'ed together using PAM. Since
Redhat's shipping samba is 'flawed' and not pam e-nabled, I
recompiled it
using source and Redhat's errata. (i'm pretty sure I did it correctly)
Any help is appreciated.
Cheers,
Mun Heng, Ow
H/M Engineering
Western Digital M'sia 
DID : 03-7870 5168