Ow Mun Heng
2003-May-19 09:16 UTC
[Samba] Logwatch - malformed password entry(uid not number)
Hi All, I've the following in the logs and am wondering why they are there. I also keep getting emails from SAMBA log-deamon (or something like that). [2003/05/19 15:24:29, 0] passdb/pdb_smbpasswd.c:getsmbfilepwent(364) getsmbfilepwent: malformed password entry (uid not number) It's not really serious (at least to me) but it's a cause for concern. Below are the details LInux Redhat 8.0 Samba 2.2.7-5.8.0 - Security Rollup fix pam_smbpasswd.so enabled. I've got smbpasswd and passwd database sync'ed together using PAM. Since Redhat's shipping samba is 'flawed' and not pam e-nabled, I recompiled it using source and Redhat's errata. (i'm pretty sure I did it correctly) Any help is appreciated. Cheers, Mun Heng, Ow H/M Engineering Western Digital M'sia DID : 03-7870 5168
Ow Mun Heng
2003-May-20 02:29 UTC
[Samba] Logwatch - malformed password entry(uid not number)
Hi All, Here's the contents of the emails I'm getting. Any Help is Greatly Appreciated. Date: Tue, 20 May 2003 04:02:04 +0800 From: root <root@xxx.com> To: root@xxx.com Subject: LogWatch for xxx.com ################## LogWatch 2.6 Begin ##################### --------------------- Samba Begin ------------------------ **Unmatched Entries** [2003/05/19 13:56:34, 0] nmbd/nmbd.c:main(794) : 1 Time(s) [2003/05/19 13:56:34, 0] param/loadparm.c:lp_do_parameter(2775) : 1 Time(s) [2003/05/19 13:56:34, 0] smbd/server.c:main(707) : 1 Time(s) [2003/05/19 17:31:33, 0] nmbd/nmbd.c:terminate(59) : 1 Time(s) [2003/05/19 17:31:33, 0] nmbd/nmbd.c:terminate(59) : 1 Time(s) [2003/05/19 19:07:23, 0] nmbd/nmbd.c:main(794) : 1 Time(s) [2003/05/19 19:07:23, 0] param/loadparm.c:lp_do_parameter(2775) : 1 Time(s) [2003/05/19 19:07:23, 0] smbd/server.c:main(707) : 1 Time(s) ---------------------- Samba End ------------------------- ---------------- Connections (secure-log) Begin ------------------- Connections: Service sgi_fam: <no address>: 2 Time(s) Service swat: 127.0.0.1: 26 Time(s) ----------------- Connections (secure-log) End -------------------- ###################### LogWatch End ######################### Cheers, Mun Heng, Ow H/M Engineering Western Digital M'sia DID : 03-7870 5168 -----Original Message----- From: Ow Mun Heng Sent: Monday, May 19, 2003 5:16 PM To: samba@lists.samba.org Subject: [Samba] Logwatch - malformed password entry(uid not number) Hi All, I've the following in the logs and am wondering why they are there. I also keep getting emails from SAMBA log-deamon (or something like that). [2003/05/19 15:24:29, 0] passdb/pdb_smbpasswd.c:getsmbfilepwent(364) getsmbfilepwent: malformed password entry (uid not number) It's not really serious (at least to me) but it's a cause for concern. Below are the details LInux Redhat 8.0 Samba 2.2.7-5.8.0 - Security Rollup fix pam_smbpasswd.so enabled. I've got smbpasswd and passwd database sync'ed together using PAM. Since Redhat's shipping samba is 'flawed' and not pam e-nabled, I recompiled it using source and Redhat's errata. (i'm pretty sure I did it correctly) Any help is appreciated. Cheers, Mun Heng, Ow H/M Engineering Western Digital M'sia DID : 03-7870 5168
Ow Mun Heng
2003-May-22 03:46 UTC
[Samba] Logwatch - malformed password entry(uid not number)
Hi All, I solved my [2003/05/19 15:24:29, 0] passdb/pdb_smbpasswd.c:getsmbfilepwent(364) getsmbfilepwent: malformed password entry (uid not number) Problem. It seems that my smbpasswd file had a lot of ::::: before it finally hits users. the samba authentication procedure seems to go through this file line by line and thus the errors. Hope this helps for others. Ps : I'm still getting logwatch. Can anyone tell me if this is normal? Cheers, Mun Heng, Ow H/M Engineering Western Digital M'sia DID : 03-7870 5168 -----Original Message----- From: Ow Mun Heng Sent: Tuesday, May 20, 2003 10:30 AM To: samba@lists.samba.org Subject: RE: [Samba] Logwatch - malformed password entry(uid not number) Hi All, Here's the contents of the emails I'm getting. Any Help is Greatly Appreciated. Date: Tue, 20 May 2003 04:02:04 +0800 From: root <root@xxx.com> To: root@xxx.com Subject: LogWatch for xxx.com ################## LogWatch 2.6 Begin ##################### --------------------- Samba Begin ------------------------ **Unmatched Entries** [2003/05/19 13:56:34, 0] nmbd/nmbd.c:main(794) : 1 Time(s) [2003/05/19 13:56:34, 0] param/loadparm.c:lp_do_parameter(2775) : 1 Time(s) [2003/05/19 13:56:34, 0] smbd/server.c:main(707) : 1 Time(s) [2003/05/19 17:31:33, 0] nmbd/nmbd.c:terminate(59) : 1 Time(s) [2003/05/19 17:31:33, 0] nmbd/nmbd.c:terminate(59) : 1 Time(s) [2003/05/19 19:07:23, 0] nmbd/nmbd.c:main(794) : 1 Time(s) [2003/05/19 19:07:23, 0] param/loadparm.c:lp_do_parameter(2775) : 1 Time(s) [2003/05/19 19:07:23, 0] smbd/server.c:main(707) : 1 Time(s) ---------------------- Samba End ------------------------- ---------------- Connections (secure-log) Begin ------------------- Connections: Service sgi_fam: <no address>: 2 Time(s) Service swat: 127.0.0.1: 26 Time(s) ----------------- Connections (secure-log) End -------------------- ###################### LogWatch End ######################### Cheers, Mun Heng, Ow H/M Engineering Western Digital M'sia DID : 03-7870 5168 -----Original Message----- From: Ow Mun Heng Sent: Monday, May 19, 2003 5:16 PM To: samba@lists.samba.org Subject: [Samba] Logwatch - malformed password entry(uid not number) Hi All, I've the following in the logs and am wondering why they are there. I also keep getting emails from SAMBA log-deamon (or something like that). [2003/05/19 15:24:29, 0] passdb/pdb_smbpasswd.c:getsmbfilepwent(364) getsmbfilepwent: malformed password entry (uid not number) It's not really serious (at least to me) but it's a cause for concern. Below are the details LInux Redhat 8.0 Samba 2.2.7-5.8.0 - Security Rollup fix pam_smbpasswd.so enabled. I've got smbpasswd and passwd database sync'ed together using PAM. Since Redhat's shipping samba is 'flawed' and not pam e-nabled, I recompiled it using source and Redhat's errata. (i'm pretty sure I did it correctly) Any help is appreciated. Cheers, Mun Heng, Ow H/M Engineering Western Digital M'sia DID : 03-7870 5168