samba - Dec 2011 - Fw: Convert Unix users to Samba users

No-one has had this problem before?

----- Forwarded by Raymond Hoogerdijk/home on 20-12-2011 20:36 -----

From:   Samba <samba at hoogerdijk.org>
To:     Samba Maillist <samba at lists.samba.org>
Date:   14-12-2011 21:37
Subject:        [Samba] Convert Unix users to Samba users
Sent by:        samba-bounces at lists.samba.org



Hi,

I just installed a new Centos 6.1 machine with Samba 3.5.6-86.el6_1.4 . I 
use Webmin to administer the server and configuring Samba (SWAT is also 
available in Webmin). I have chosen the option to convert the Linux users 
to Samba users and the command completes and says the users have been 
converted. However, when I then look at the Samba users the list is empty. 

Restarted the Samba services and also the complete box, however, it still 
doesn't work.

I have the following error message in the log.SMBD file:

[2011/12/14 20:52:13.289684,  0] smbd/server.c:500(smbd_open_one_socket)
  smbd_open_once_socket: open_socket_in: Address already in use
[2011/12/14 20:52:13.291029,  0] smbd/server.c:500(smbd_open_one_socket)
  smbd_open_once_socket: open_socket_in: Address already in use

And the SWAT logfile:

[2011/12/14 20:52:36.578244,  0] 
lib/util_sock.c:1441(get_peer_addr_internal)
  getpeername failed. Error was Socket operation on non-socket
[2011/12/14 20:52:36.584471,  0] 
lib/util_sock.c:1441(get_peer_addr_internal)
  getpeername failed. Error was Socket operation on non-socket

Why is this going wrong? Where do I need to look to fix it? 

Kind regards,

Raymond
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

On Tue, Dec 20, 2011 at 2:36 PM, Samba <samba at hoogerdijk.org>
wrote:
> No-one has had this problem before?
The problem is too generic. It depends, very heavily, on what your
authentication technology is. To keep Windows and Linux authentication
in sync, they need to use the same password handling tools. This is
ideally Kerberos, since that's what Active Directory uses with the
name scraped off and concealed.

Migrating non-Kerberos users to Kerberos is.... its own adventure. The
passwords are stored very differently, and there's no way to simplay
transfer one to the other without someone putting in passwords.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

We used the pam_smbpasswd module, which does not work for either TDBSAM
or LDAPSAM I don't think. It's OK if you want to maintain an smbpasswd
file, but I think you really don't for more than X number of users and
I'm not sure how well it works with Active Directory (this was back
before AD was big that we were using Samba).

The way that that worked was to take advantage of other password
manipulation people had done (eg. authenticate successfully using
anything) and that that time the PAM module would get the unencrypted
password and write it using the proper hash for the new Samba auth
method. That is a pretty slick idea and if it does not exist for LDAP or
TDBSAM, I do wonder why not.

On 12/20/2011 02:36 PM, Samba wrote:
> No-one has had this problem before?
> 
> ----- Forwarded by Raymond Hoogerdijk/home on 20-12-2011 20:36 -----
> 
> From:   Samba <samba at hoogerdijk.org>
> To:     Samba Maillist <samba at lists.samba.org>
> Date:   14-12-2011 21:37
> Subject:        [Samba] Convert Unix users to Samba users
> Sent by:        samba-bounces at lists.samba.org
> 
> 
> 
> Hi,
> 
> I just installed a new Centos 6.1 machine with Samba 3.5.6-86.el6_1.4 . I 
> use Webmin to administer the server and configuring Samba (SWAT is also 
> available in Webmin). I have chosen the option to convert the Linux users 
> to Samba users and the command completes and says the users have been 
> converted. However, when I then look at the Samba users the list is empty. 
> 
> Restarted the Samba services and also the complete box, however, it still 
> doesn't work.
> 
> I have the following error message in the log.SMBD file:
> 
> [2011/12/14 20:52:13.289684,  0] smbd/server.c:500(smbd_open_one_socket)
>   smbd_open_once_socket: open_socket_in: Address already in use
> [2011/12/14 20:52:13.291029,  0] smbd/server.c:500(smbd_open_one_socket)
>   smbd_open_once_socket: open_socket_in: Address already in use
> 
> And the SWAT logfile:
> 
> [2011/12/14 20:52:36.578244,  0] 
> lib/util_sock.c:1441(get_peer_addr_internal)
>   getpeername failed. Error was Socket operation on non-socket
> [2011/12/14 20:52:36.584471,  0] 
> lib/util_sock.c:1441(get_peer_addr_internal)
>   getpeername failed. Error was Socket operation on non-socket
> 
> Why is this going wrong? Where do I need to look to fix it? 
> 
> Kind regards,
> 
> Raymond

- -- 
- ---- _  _ _  _ ___  _  _  _
|Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Sr. Systems Programmer
|$&| |__| |  | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk78oyUACgkQmb+gadEcsb4JQQCeNYldR5CDdGR5XUy2DyMEZqTD
PNoAn1Gy/4njeHF8ahcrlk+8480slwbW
=Ox7d
-----END PGP SIGNATURE-----