Smb.conf?

Hi,
After a completely flawless upgrade to Leopard on my Mac Pro, a so-so upgrade leading to a wipe and clean install on my Powerbook, I am now trying to get my mac mini updated to Leopard. The mini acts as a mini home server for music and acts as an email and file server to a win xp laptop and the aforementioned Macs. My problem has been (and I've seen many many posts on this) is that what worked with no problem in Tiger seems to be completely broken in Leopard. The WinXP laptop cannot connect to the Mini. When I try to connect via SMB from one of the Macs it says that it is unable to connect etc. (I can connect via AFP however).
One thing that is definitely new/different with Leopard is that /etc/smb.conf seems to have very little control over how smbd behaves. Has anyone figured out where all the parameters for smb.conf are coming from? I would like the mini to act as a domain server and WINS server (things I had running previously with no problems, pre-upgrade). I see no way of switching the "no" to "yes" via smb.conf even when I've tried adding an "include" file to the end of smb.conf.
Any help here would be greatly appreciated.

..."One thing that is definitely new/different with Leopard is that /etc/smb.conf seems to have very little control over how smbd behaves. Has anyone figured out where all the parameters for smb.conf are coming from?"...
My understandng is that many of the problems of users trying to set things in '/etc/smb.conf' comes from the 'include = /var/run/smb.conf' line near the end of the file, overriding user settings in "/etc/smb.conf". I would have thought that any settings entered after that line (including additional "includes") would have taken precedence.
At least some of the contents of "/var/run/smb.conf" seem to come from the file "/System" > "Library" > "CoreServices" > "SmbFileServer.bundle" > "Resources" > "DesktopDefaults.plist". While it isn't always clear (to me, anyway) how that file is interpreted to generate "/var/run/smb.conf", it might be worth a look...

Similar Messages

[SOLVED]Setting up Arch to read CIFS shares but no smb.conf

I am trying to ACCESS CIFS shares from another computer. Other clients can access these shares without issue. I am NOT trying to host files from Arch.
Reading I have done: wiki pages on SAMBA and SMBCLIENT.
Reading the SMBCLIENT wiki page, it apparently states that only the package smbclient should be installed, which I did.
But, following the SMBCLIENT wiki, it shows to issue:
#smbclient -L
#smbclient
both error saying smb.conf can not be read. BTW, is the -L to just list the shares available from any place?
Questions:
1. So, should smb.conf be created to use smbclient? This package evidently does not install smb.conf in any form.
2. Does the SAMBA package need to be installed to use smbclient? Samba does install a smb.conf.something.
Any tips you have so I can read CIFS shares will be appreciated.
Thanks
steve.
Last edited by stevepa (2012-11-30 03:22:49)

Reporting my results at resolving my issues
1. installing smbclient provides the described ftp-like environment while accessing CIFS shares. It works fine. I used
$smbclient //OMV/steve -Usteve%omv
to access my share on the OMV server. I could list, get and put files. I still get the message about no smb.conf file but it works.
2. Installing gvfs-smb package allowed Thunar to display the shares. In my case, I do a Ctrl-L and then smb://OMV/steve and I can display the shared content perfectly! Click to remember password or it apparently does not work.
Hope this helps someone.
Steve.

Sync prob of updatin info from WDM to smb.conf using smb protocol

Hi,
I would appreciate if somebody could help me as i'm trying hard to solve my server's problem but could not find any solutions. My Mac OSX Server is running as a Dual 2.3GHZ PowerPC G5 and the current version is 10.4.11. When i tried to create a new sharepoint volume which is located at the XServe Raid or editing the permissions of the existing sharepoint volume, it was not able to update the smb.conf and i was not able to view the volumes using 'smb' command. I'm not sure if this lies with the synchronization problem between the workgroup manager and smb.conf file. From the Server Admin under the Window service, there's an error message displayed as follow:
/SourceCache/samba/samba-100.12/samba/source/smbd/service.c:make_connection(805)
Is there any way where i could fix the files as I have no idea of where the files reside in the system?
Thank you!
Cheers,
Stephanie

Don't know what your issue has to do with 'Using Mac OS X Tiger'. That is the forum you've posted in but I see you are running 10.5 Leopard. Perhaps posting in the 'Mac OS X Server' forum would help.
http://discussions.apple.com/category.jspa?categoryID=96

Adding "logon path =" keyword in smb.conf

Greetings,
I was looking how to disable roaming profiles for windows users, and there is a keyword in samba configuration, where if you set it to blank like following:
logon path =
it will effectively disable roaming profiles.
However, when I add this line in [General] section of /etc/smb.conf, and then later do some changes with GUI tools in Windows files services, these GUI tools (Server Admin, Workgroup Manager) will remove this keyword. I tried putting this in /etc/smb.conf.template as well - no help.
Any idea how to make this keyword GUI tools friendly so that it stays in /etc/smb.conf permanently ?

>Any idea how to make this keyword GUI tools friendly so that it stays in /etc/smb.conf permanently ?
I don't think you can.
It's been a long-standing complaint of Server Admin - it's too happy to trounce any manual changes you've made. It's got better over the years/versions, but I still stick by the mantra that once you've edited by hand you can never go back to Server Admin (unless you're prepared to repeatedly re-apply your handcrafting).

Change settings fo Samba(SMB) via smb.conf has no effect in 10.5 nor 10.6

Hello,
I would like to change some stuff of my Samba Configuration on my MacBook and PowerMac (10.6.2 and 10.5.8). But on both OS X Versions changing /etc/smb.conf doesn´t do anything and /var/db/smb.conf is written automatically, so how can i make sure the changes will be done correct and permanent.
thx
T.

Had a further play with my system. It seems as though smbclient respects the content in /etc/smb.conf. I tried using the -d4 debug option and my adjustments made in smb.conf were used.
However Finder seems to be broken and ignores smb.conf. Feedback sent to Apple.
Try smbclient //ip-address-of-NAS/share-name -W workgroupname -U username -d4
and see what happens.

Windows XP users can't access SMB/CIFS shares on MAC OSX10.4.4 Xserve bug?

The Xserves are new for us. This problem involves two of the 10.4 xerserves.
1 serves as an Open Directory System Master(10.4.3). 2 Serves as a file share & backup (10.4.4).
Both are production machines and cannot easily be restarted.
There is no Windows network, Active Directory or Windows domain in our network.
We created a SMB and AFP share on the file server which is a member of the Open Directory. (It is bound and kerberized to server 1).
The users all have accounts in the OD system and all passwords are Open Directory. Our users can ssh into the various xserves (including the file share server 2) and authenticate against OD.
We made the shares available via smb under Protocols --> Windows File Settings. We turned the Windows Service on in Server Admin. I'ts a standalone server and all the authentication types are checked under access.
The MAC (powerbook) users can access the share fine. The Windows users can't. The Windows laptops can see the file share server (through search - not visable is Network Neighborhood) but when they try and connect they are presented by an authentication box that just keeps cycling over and over regardless of what the user types as user name & passwd.
I tried to access the smb share with my powerbook(10.4.4) and have the same issue. I'm presented with an authentication box but authentication fails.
The Windows File Service Log shows:
auth.c:checkntlmpassword(312)
checkntlmpassword: Authentication for user [csmith] -> [csmith] FAILED with error NTSTATUS_WRONGPASSWORD
[2006/02/24 21:52:03, 1] authods.c:opendirectory_authuser(212)
User "csmith" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14090)
[2006/02/24 21:52:03, 1] authods.c:opendirectory_smb_pwd_checkntlmv1(427)
opendirectorysmb_pwd_checkntlmv1: [-14090]opendirectoryauthuser
[2006/02/24 21:52:03, 2] /SourceCache/samba/samba-92.15/samba/source/auth/auth.c:checkntlmpassword(312)
checkntlmpassword: Authentication for user [csmith] -> [csmith] FAILED with error NTSTATUS_WRONGPASSWORD
[2006/02/24 21:52:03, 1] authods.c:opendirectory_authuser(212)
User "csmith" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14090)
[2006/02/24 21:52:03, 1] authods.c:opendirectory_smb_pwd_checkntlmv1(427)
opendirectorysmb_pwd_checkntlmv1: [-14090]opendirectoryauthuser
[2006/02/24 21:52:03, 2] /SourceCache/samba/samba-92.15/samba/source/auth/auth.c:checkntlmpassword(312)
checkntlmpassword: Authentication for user [csmith] -> [csmith] FAILED with error NTSTATUS_WRONGPASSWORD
[2006/02/24 21:52:03, 2] /SourceCache/samba/samba-92.15/samba/source/smbd/server.c:exit_server(595)
Closing connections
I've googled this error and it seems that there a lot of engineers out there with the same problem but no answers. Could this be a bug with Apple's SMB process? Is there something I've missed? (I've looked at the smb.conf and have even turned off deny clear text passwords - I've even tried granting guest access) Anyone have any ideas?

On the server itself, run the following in the Terminal:
(from a few different sources):
run ps -auxw | grep Password
to see if Password service is running
Also check the logs in /Library/Logs/PasswordService
Try: id username
and see if you get some info returned.
Ex: id jimguy
You should get some info about uid, gid, groups.
sudo killall -USR1 DirectoryService
Then try to login from a client machine.
Be sure to re-issue
sudo killall -USR1 DirectoryService
in order to stop the (far more) verbose logging.
Then check the logs in /Library/Logs/DirectoryService
In Open Directory, you might want to revert to standalone (this will destory the existing OD setup) and then re-promote to OD Master. You'll lose all OD users however when doing so. If you don't have many, this may be best.
You'll want to verify the hostname, and forward & reverse DNS lookups before re-promoting, and watch for any errors when promoting to OD master
See, when you say "The real clue is that I'm unable to access the shares from my Powerbook G4 with my Open Directory account. I can log in to the file share as the local admin though and that's why I'm thinking there is a bug in the samba/OD relationship. " - that's the real clue indeed.
The local admin account, the first admin account you setup on the server, is indeed local, and resides in NetInfo, not Open Directory.
So something is afoul in your OD.

SMB client URL works in 10.4.10, breaks in 10.5 -- password not accepted

Hi,
The SMB client URL (Finder Command-K) that was working under 10.4.10 breaks under 10.5:
smb://DOMAIN-name;userid@Fully-qualified-DN-for-WinServer/PrivateSharename$
The symptom is that the Mac does connect to the WinServer, as I do get the userid/password prompt, with the userid already prefilled as DOMAIN-name\userid. But when I add my Windows password and submit, I get a delay and then a message my userid or password is invalid.
I know my userid and password are valid as they work from my PC, as well as from my Mac as far as establishing a Mac to PC screensharing session using MS Remote Desktop Connection.
I know that it's not a network, DNS, or WINS name resolution problem as I do get as far as the initial connection to the PC -- i.e. the userid/password prompt. As well I've tried using the Windows Server's IP address directly in the URL.
I've read the threads here and tried these variants of the URL:
smb://DOMAIN-name;userid@IP-of-WinServer/PrivateSharename$
smb://DOMAIN-name;userid:win-password@IP-of-WinServer/PrivateSharename$
I've tried the Ruby script to escape any funny characters in my win-password; but there are none anyways, and the output from the Ruby script mentioned in another thread are the same as my inputted password.
I've also gone into /etc/smb.conf and added the line suggested in another thread:
client NTLMv2 auth = Yes
...and rebooted. But that line is for Windows clients trying to connect to a samba server running on the Mac. I'm doing the opposite: trying to run a Samba client connection to a PC server.
Bottom line:
OS X 10.4.10 : no problem connecting to Windows server
OS X 10.5 : cannot
suggestions welcome,
...b

OK, so this SMB client URL (in the Finder, press Command-K) that was working under 10.4.10 breaks under 10.5:
smb://domain;[email protected]/share
so I added my domain name and WINS servers into the WINS tab of the Networking Preference Pane, and I was then able to browse our windows network in the Finder, find the above Win2003 PC server name, and connect! Yay!
So I went back and tried variations on the SMB URL above. Until finally this variation worked:
smb://domain;userid@server/share
Hmm. So server.domain.company.com which does resolve to the PC server's IP, no longer works under OS X 10.5 -- even though the same SMB URL worked in OS X 10.4.
Worse, while smb://domain;userid@server/share now works on the company LAN, smb://domain;userid@server/share fails over the company (cisco) VPN.
I speculate it's because OS X 10.5 is using the PC servers NetBIOS name above and therefore relying on various PC WINS server ports, whose packets can flow unimpeded over my LAN. But when I'm VPN'ing, the company LAN I land on blocks these packets and ports.
So after much tinkering, I returned to the Terminal.app and started reading the man pages about Samba, the open source Windows networking software used by OS X:
man -k smb <-- to look up all the terminal commands for samba
one of the entries this returned was:
nsmb.conf(5) - configuration file for SMB requests
Hmm, that sounds promising.
man nsmb.conf
returned a sample configuration file. I edited the sample file to include our windows "domain" name, and to map our "server" name to it's fully-qualified DNS name: "server.domain.company.com", and put this updated file, as per the man pages, in ~/Library/Preferences/nsmb.conf, and volia:
smb://domain;userid@server/share
now works for me to connect from OS X 10.5 to the "server" over our LAN and over our VPN!
This was a lot of work and not a general solution. OS X 10.4 was definitely better, but this is the only PC server I need to connect to, so I'm very happy that I don't have to uninstall Leopard and re-install Tiger.
...b

Printing PDF files with smb/cups not possible // SLPReg status -20!

Hello *,
i am running SAMBA 3.6.1-1 and CUPS 1.5.0-1 on a dedicated system. Printer: Canon Pixma IP4500 (USB).
The problem is that all Windows 7 clients are not able to print PDF files (since few months) on that printer while printing these files with Linux software is no problem. The PDF files are neither encrypted nor forbidden to print.
I tried to print with Adobe Acrobat Reader X (latest) and Foxit Reader. Both are preparing the pages to be printed and close their printing dialog after processing. Windows printing queue does not show any jobs (which it even does not when printing simple images with MS Paint, which is not a problem).
Windows systems are using the Canon Inkjet 4500 and Canon iP 4500 driver (manually installed). Printing images works with both drivers.
I searched for "SLPReg […] failed with status -20!" but found no helpful information.
/var/log/cups/error_log
D [24/Dec/2011:23:05:35 +0100] Report: clients=0
D [24/Dec/2011:23:05:35 +0100] Report: jobs=499
D [24/Dec/2011:23:05:35 +0100] Report: jobs-active=0
D [24/Dec/2011:23:05:35 +0100] Report: printers=2
D [24/Dec/2011:23:05:35 +0100] Report: printers-implicit=0
D [24/Dec/2011:23:05:35 +0100] Report: stringpool-string-count=199735
D [24/Dec/2011:23:05:35 +0100] Report: stringpool-alloc-bytes=14344
D [24/Dec/2011:23:05:35 +0100] Report: stringpool-total-bytes=3718136
D [24/Dec/2011:23:05:36 +0100] cupsdNetIFUpdate: "lo" = localhost:631
D [24/Dec/2011:23:05:36 +0100] cupsdNetIFUpdate: "eth0" = 192.168.2.9:631
D [24/Dec/2011:23:05:36 +0100] cupsdNetIFUpdate: "lo" = localhost:631
D [24/Dec/2011:23:05:36 +0100] cupsdNetIFUpdate: "eth0" = [v1.fe80::1e6f:65ff:fe51:1b3+eth0]:631
D [24/Dec/2011:23:05:36 +0100] send_slp_browse(0x7f7d52023050 = "IP4500")
E [24/Dec/2011:23:05:36 +0100] SLPReg of "IP4500" failed with status -20!
D [24/Dec/2011:23:05:48 +0100] send_slp_browse(0x7f7d52017c90 = "IP4500_Duplex")
E [24/Dec/2011:23:05:48 +0100] SLPReg of "IP4500_Duplex" failed with status -20!
D [24/Dec/2011:23:06:07 +0100] send_slp_browse(0x7f7d52023050 = "IP4500")
E [24/Dec/2011:23:06:07 +0100] SLPReg of "IP4500" failed with status -20!
D [24/Dec/2011:23:06:19 +0100] send_slp_browse(0x7f7d52017c90 = "IP4500_Duplex")
E [24/Dec/2011:23:06:19 +0100] SLPReg of "IP4500_Duplex" failed with status -20!
D [24/Dec/2011:23:06:35 +0100] Report: clients=0
D [24/Dec/2011:23:06:35 +0100] Report: jobs=499
D [24/Dec/2011:23:06:35 +0100] Report: jobs-active=0
D [24/Dec/2011:23:06:35 +0100] Report: printers=2
D [24/Dec/2011:23:06:35 +0100] Report: printers-implicit=0
D [24/Dec/2011:23:06:35 +0100] Report: stringpool-string-count=199735
D [24/Dec/2011:23:06:35 +0100] Report: stringpool-alloc-bytes=14344
D [24/Dec/2011:23:06:35 +0100] Report: stringpool-total-bytes=3718136
D [24/Dec/2011:23:06:38 +0100] cupsdNetIFUpdate: "lo" = localhost:631
D [24/Dec/2011:23:06:38 +0100] cupsdNetIFUpdate: "eth0" = 192.168.2.9:631
D [24/Dec/2011:23:06:38 +0100] cupsdNetIFUpdate: "lo" = localhost:631
D [24/Dec/2011:23:06:38 +0100] cupsdNetIFUpdate: "eth0" = [v1.fe80::1e6f:65ff:fe51:1b3+eth0]:631
D [24/Dec/2011:23:06:38 +0100] send_slp_browse(0x7f7d52023050 = "IP4500")
E [24/Dec/2011:23:06:38 +0100] SLPReg of "IP4500" failed with status -20!
D [24/Dec/2011:23:06:50 +0100] send_slp_browse(0x7f7d52017c90 = "IP4500_Duplex")
E [24/Dec/2011:23:06:50 +0100] SLPReg of "IP4500_Duplex" failed with status -20!
/etc/samba/smb.conf
load printers = yes
printing = cups
printcap = cups
[printers]
path = /var/spool/samba
printable = yes
public = yes
writable = no
/etc/cups/printers.conf
# Printer configuration file for CUPS v1.5.0
# Written by cupsd on 2011-12-24 22:25
# DO NOT EDIT THIS FILE WHEN CUPSD IS RUNNING
<Printer IP4500>
UUID urn:uuid:f9850f70-d898-39ad-4e0a-9edfecf4977b
Info Canon iP4500 series
Location Keller
MakeModel Canon PIXMA iP4500 - CUPS+Gutenprint v5.2.7
DeviceURI usb://Canon/iP4500%20series?serial=42E635
State Idle
StateTime 1306084752
Type 45084
Accepting Yes
Shared Yes
JobSheets none none
QuotaPeriod 0
PageLimit 0
KLimit 0
DenyUser xy
OpPolicy default
ErrorPolicy stop-printer
</Printer>
<Printer IP4500_Duplex>
UUID urn:uuid:14fcd3ca-2118-380e-5033-79beb09bb3b7
Info Canon iP4500 series (Duplex)
Location Keller
MakeModel Canon PIXMA iP4500 - CUPS+Gutenprint v5.2.7
DeviceURI usb://Canon/iP4500%20series?serial=42E635
State Idle
StateTime 1324761079
Type 45084
Accepting Yes
Shared Yes
JobSheets none none
QuotaPeriod 0
PageLimit 0
KLimit 0
OpPolicy default
ErrorPolicy stop-printer
</Printer>

Hi,
I can, unfortanetly, confirm this problem for me with a Brother HL-2030 and an HP Officejet 5600 series.
cups error log
D [03/May/2012:21:42:46 +0200] Report: printers=3
D [03/May/2012:21:42:46 +0200] Report: printers-implicit=0
D [03/May/2012:21:42:46 +0200] Report: stringpool-string-count=10577
D [03/May/2012:21:42:46 +0200] Report: stringpool-alloc-bytes=13088
D [03/May/2012:21:42:46 +0200] Report: stringpool-total-bytes=192536
D [03/May/2012:21:43:48 +0200] cupsdNetIFUpdate: "lo" = localhost:631
D [03/May/2012:21:43:48 +0200] cupsdNetIFUpdate: "eth0" = 192.168.2.100:631
D [03/May/2012:21:43:48 +0200] cupsdNetIFUpdate: "tun0" = 10.8.0.1:631
D [03/May/2012:21:43:48 +0200] cupsdNetIFUpdate: "lo" = localhost:631
D [03/May/2012:21:43:48 +0200] cupsdNetIFUpdate: "eth0" = [v1.fe80::201:2eff:fe27:6993+eth0]:631
D [03/May/2012:21:43:48 +0200] Report: clients=0
D [03/May/2012:21:43:48 +0200] Report: jobs=233
D [03/May/2012:21:43:48 +0200] Report: jobs-active=0
D [03/May/2012:21:43:48 +0200] Report: printers=3
D [03/May/2012:21:43:48 +0200] Report: printers-implicit=0
D [03/May/2012:21:43:48 +0200] Report: stringpool-string-count=10577
D [03/May/2012:21:43:48 +0200] Report: stringpool-alloc-bytes=13088
D [03/May/2012:21:43:48 +0200] Report: stringpool-total-bytes=192536
D [03/May/2012:21:44:50 +0200] cupsdNetIFUpdate: "lo" = localhost:631
D [03/May/2012:21:44:50 +0200] cupsdNetIFUpdate: "eth0" = 192.168.2.100:631
D [03/May/2012:21:44:50 +0200] cupsdNetIFUpdate: "tun0" = 10.8.0.1:631
D [03/May/2012:21:44:50 +0200] cupsdNetIFUpdate: "lo" = localhost:631
D [03/May/2012:21:44:50 +0200] cupsdNetIFUpdate: "eth0" = [v1.fe80::201:2eff:fe27:6993+eth0]:631
D [03/May/2012:21:44:50 +0200] Report: clients=0
D [03/May/2012:21:44:50 +0200] Report: jobs=233
D [03/May/2012:21:44:50 +0200] Report: jobs-active=0
D [03/May/2012:21:44:50 +0200] Report: printers=3
D [03/May/2012:21:44:50 +0200] Report: printers-implicit=0
D [03/May/2012:21:44:50 +0200] Report: stringpool-string-count=10577
D [03/May/2012:21:44:50 +0200] Report: stringpool-alloc-bytes=13088
D [03/May/2012:21:44:50 +0200] Report: stringpool-total-bytes=192536
printers.conf
# Printer configuration file for CUPS v1.5.0
# Written by cupsd on 2011-12-24 13:14
# DO NOT EDIT THIS FILE WHEN CUPSD IS RUNNING
<Printer CUPS-PDF>
UUID urn:uuid:ad99f5dd-2577-355f-759c-6b2941a88d34
Info Virtual PDF Printer
Location Zion
MakeModel Generic CUPS-PDF Printer
DeviceURI cups-pdf:/
State Idle
StateTime 1309396700
Type 8450124
Accepting Yes
Shared Yes
JobSheets none none
QuotaPeriod 0
PageLimit 0
KLimit 0
OpPolicy default
ErrorPolicy stop-printer
</Printer>
<Printer HL2030>
UUID urn:uuid:1b453a5d-ade0-3ddb-45e4-c5bcfe1feabd
Info Brother HL-2030 series
Location Zion
MakeModel Brother HL-2030 Foomatic/hl1250 (recommended)
DeviceURI usb://Brother/HL-2030%20series?serial=G6J274210
State Idle
StateTime 1324728260
Type 8433668
Accepting Yes
Shared Yes
JobSheets none none
QuotaPeriod 0
PageLimit 0
KLimit 0
OpPolicy default
ErrorPolicy stop-printer
</Printer>
<Printer HP5600>
UUID urn:uuid:8d882659-3c7e-319f-5072-38d14683cfaf
Info HP Officejet 5600
Location
MakeModel HP Officejet 5600 Series, hpcups 3.11.10
DeviceURI hp:/usb/Officejet_5600_series?serial=CN838F31ZQ04B2
State Idle
StateTime 1324728896
Type 8425484
Accepting Yes
Shared Yes
JobSheets none none
QuotaPeriod 0
PageLimit 0
KLimit 0
OpPolicy default
ErrorPolicy stop-printer
</Printer>
smb.conf
# NOTE: If you have a BSD-style print system there is no need to
# specifically define each individual printer
[printers]
comment = All Printers
path = /var/spool/samba
browseable = yes
# Set public = yes to allow user 'guest account' to print
guest ok = yes
writable = no
printable = yes
Did you find a solution in the meantime?

Leopard Server 10.5.4 + SMB + Windows XP Clients

Hello!
I got quite some interesting problems with my Xserv under Leopard Server 10.5.4 with Windows XP Clients.
The server runs as an open directory master and a standalone server for smb.
Shares are setup for AFP and SMB clients, ACLs are set up with read+write access for the user's group. So far everything works, users can connect from their Macs (OS X 10.3.x - 10.5.4) without problems.
My problem are the windows clients.
Connecting works fine, and apart from one permission bug (more on that later) they can access all files and do everything the macs can do.
Problem 1:
Users cannot rename files if they don't have write permission at the POSIX-level as either owner or group on the enclosing folder. ACLs do not matter at this point, if the user connects through SMB he cannot rename files or folders.
No big problem, I just put all users into one group and set this group as the POSIX-group and do a chmod -R g+w on all shares.
Inheritate this settings for SMB-connections works.
But not for AFP-connections. Every new folder a mac-client creates comes with permissions 755. So I changed UMasks on the clients to 002, and at least folders created by the finder now have the right permissions of 775.
Folders created by "new folder" on most applications load/save dialogs still come as 755 which screws up renaming for windows-clients.
Folders created when expanding a zip-file also behave this way.
The only solution I found for this was to make a cronjob that does a chmod -R g+w on the shares. Not that great.
Another "fun" feature with POSIX-permissions and SMB:
Files inside a folder. Files+Folder have an ACL set up that specifically denies deleting files+folders for a user. This users group has POSIX-permissions with write access to the enclosing folder. Window's explorer will let that user delete files and folders without any complaint about missing permissions to do so. They even disappear from the explorer-window, but are not actually deleted.
If you refresh the view, the files+folders are there again.
If the user instead has no POSIX-permission that grants him write-access, but an ACL that grants him delete, explorer happily deletes the files the user wishes to. And these files actually get deleted.
If the user has no write POSIX-permission and no ACL-permission to delete files, explorer complains about missing rights to delete files/folders.
I tried adding "acl check permissions = no" to smb.conf, but that didn't change this behaviour.
Problem 2:
Sometimes, when copying "large" files to a server share with windows explorer (from 50 MB upto 3 GB), the user immidiately gets an error message: "Cannot copy. The specified network name is no longer available."
The copied file shows up at once in the destination directory and has the correct file size, but only contains "garbage". Half a second later the same copy works and the file is actually copied successfully.
Sometimes this error shows up while a large file is copied and if you browse through other shared folders while the copy takes place.
Most often it will show up when you copy&paste with explorer.
I am stomped and have no idea where to search for a solution to this one.
I tried changing ethernet cables (premade and selfmade), the network switch, ethernet port of the Xserv ... connected a workstation directly to the Xserv - no change.
DNS works, all clients+Xserv have static IPs and the same settings for DNS-Server. Name resolution works, as does reverse resolution.
I even tried using a windows server 2003 as a WINS-Server without success for this problem.
There are no event log entries on the clients when this happens, and smbd.log on the server shows
read failure for 4 bytes to client 192.168.1.137. Error Connection reset by peer
I used wireshark to monitor what exactly happens when this shows up, but it just happens out of nowhere ... the clients just sends a TCP_RST. No unusual things before or after the TCP_RST.
I ran some tests with samba 3.0.32 and samba 3.2.x under linux 2.6.x - no such errors at all.
I tried installing Leopard Server on my Mac Pro, same behaviour.
I ran some batch-scripts that would copy large and small files in excess from/to the server from 4 different windows xp clients for a whole weekend 24 hours - not a single error. As soon as I use windows explorer to copy a file this error has a chance of showing itself.
Problem 3, more of an application bug:
Adobe InDesign CS2 (Windows again ;)) cannot export a PDF to a shared folder if the filename is longer than 8 characters. It starts exporting and after reaching 100% it just stops with the error "PDF cannot be exported." If the filename is shorter than 8 characters, all works fine. Exporting locally or to other samba servers (linux) or windows servers (2003) works fine. Copying this files to the share works, too.
Exporting any other filetype from IDCS2 (eps, inx, jpeg ...) works regardless of filename length. So does saving InDesign-files.
InDesign CS1 and CS3 do not show this, so I guess it's safe to assume this one is Adobe's problem
Did anyone experience similar problems or even better has a solution to some of these?
The real showstopper is problem #2, at least for us.
Thanks in advance and excuse my poor english skills!

I tried several new approaches, but nothing worked so far.
The update to 10.5.5 made things worse. Connections are dropping all over the place, when saving from Adobe programs in particular.
Printing from clients to a Xerox Phaser 5500 works, but choosing a different paper size than the default chosen in the cups admin interface goes all wrong and either prints on the default paper size, but down/upscaled to the chosen paper size or prints on the chosen paper size and down/upscaled as if you were printing to the default paper size. (e.g. default paper size is A4, you choose A3 with an A3 document. Document prints on A4 and is downscaled to A4, or prints on A3 and is downscaled to A4.)
There is no way I can keep this thing in production much longer. I tried reinstalling again, but that did not change any behaviour. Another nice "feature": InDesign disables "edit original" when the path to the linked file contains any directoryname with more than 8 characters in length.
Coupled with a sometimes disappearing "dirserv" (it just stops working until I reboot the whole computer) the decision stands to move away from the Xserve.
Leopard Server 10.5.x just does not seem to work well with windows clients.
We will migrate to a windows server 2003 running ExtremZ-IP for the macintosh clients this weekend. Too bad that Apple does not allow Bootcamp to work on Xserves, at least the hardware would have been useful then.
(As a nice finishing touch, the harddisk partition where all data resides did become corrupt over the weekend. "The volume Daten could not be repaired."
Disk Utility and first aid did show nothing on friday ... saturday after no work being done on the partition this error shows up. The only solution I could find was to reformat the partition and restore from a previous backup. Another weekend down the drain. Sorry for the rant, but 6 weekends in a row is enough.)

Windows 2008 and Tiger SMB Issues

I've been pulling hair out all morning over this one.
We have a new Windows 2008 server for file sharing. We are trying to connect to it via SMB on our network (with AD domain). Works great on PC, works on Leopard, does not work on Tiger.
From connect I type “smb://xxxxxxxx” after a few minutes I get an error: “could not connect to the server because the name or password is not correct” which is odd because I haven’t entered any login credentials to begin with.
I’ve been pouring over Google, Microsoft KB and anything else I can come across with no luck. Things I’ve tried.
-Clearing keychain passwords for the server
-Setting the digital signing on the server to disable (most cited fix, but no go for me)
-Setting Sharing and Security model to “Classic – local users authenticate themselves”
-Setting LAN Manager authentication to “Send LM & NTLM – use NTLMv2 session security if negotiated”
-Editing the smb.conf file on the mac to no security
-Created the nsmb.conf file on the mac with minauth=none.
-Used Directory access on the mac to add the mac and bind it to the domain.
-Many Many restarts of the server and clients (and running gpupdate.exe on the server)
One thing that DOES work is a trial of ADmitmac… but this is not realistic for us if we have guest users needing to access the share.
I’ve been able to use smb before with tiger and windows xp and windows 2003… but the mac is throwing a fit over the new windows 2008. Also, we can’t upgrade all of our machines to Leopard (which does work) because it will break Quark 6.5.

Any relevant looking log messages if you browse in Console?
- cfr

SMB Newbie: Accessing Linux Share

I have my /etc/samba/smb.conf set up like so:
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options (perhaps too
# many!) most of which are not shown in this example
# For a step to step guide on installing, configuring and using samba,
# read the Samba HOWTO Collection.
# Any line which starts with a ; (semi-colon) or a # (hash)
# is a comment and is ignored. In this example we will use a #
# for commentry and a ; for parts of the config file that you
# may wish to enable
# NOTE: Whenever you modify this file you should run the command "testparm"
# to check that you have not made any basic syntactic errors.
#======================= Global Settings =====================================
[global]
# workgroup = NT-Domain-Name or Workgroup-Name, eg: REDHAT4
workgroup = WORKGROUP
# server string is the equivalent of the NT Description field
server string = Samba Server
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
# Security mode. Defines in which mode Samba will operate. Possible
# values are share, user, server, domain and ads. Most people will want
# user level security. See the HOWTO Collection for details.
security = user
# This option is important for security. It allows you to restrict
# connections to machines which are on your local network. The
# following example restricts access to two C class networks and
# the "loopback" interface. For more examples of the syntax see
# the smb.conf man page
; hosts allow = 192.168.1. 192.168.2. 127.
# If you want to automatically load your printer list rather
# than setting them up individually then you'll need this
load printers = yes
# you may wish to override the location of the printcap file
; printcap name = /etc/printcap
# on SystemV system setting printcap name to lpstat should allow
# you to automatically obtain a printer list from the SystemV spool
# system
; printcap name = lpstat
# It should not be necessary to specify the print system type unless
# it is non-standard. Currently supported print systems include:
# bsd, cups, sysv, plp, lprng, aix, hpux, qnx
; printing = cups
# Uncomment this if you want a guest account, you must add this to /etc/passwd
# otherwise the user "nobody" is used
; guest account = pcguest
# this tells Samba to use a separate log file for each machine
# that connects
log file = /var/log/samba/log.%m
# Put a capping on the size of the log files (in Kb).
max log size = 50
# Use password server option only with security = server
# The argument list may include:
# password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]
# or to auto-locate the domain controller/s
# password server = *
password server = *
# Use the realm option only with security = ads
# Specifies the Active Directory realm the host is part of
; realm = MY_REALM
# Backend to store user information in. New installations should
# use either tdbsam or ldapsam. smbpasswd is available for backwards
# compatibility. tdbsam requires no further configuration.
; passdb backend = tdbsam
# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting.
# Note: Consider carefully the location in the configuration file of
# this line. The included file is read at that point.
; include = /usr/local/samba/lib/smb.conf.%m
# Most people will find that this option gives better performance.
# See the chapter 'Samba performance issues' in the Samba HOWTO Collection
# and the manual pages for details.
# You may want to add the following on a Linux system:
# SO_RCVBUF=8192 SO_SNDBUF=8192
socket options = TCP_NODELAY
# Configure Samba to use multiple interfaces
# If you have multiple network interfaces then you must list them
# here. See the man page for details.
; interfaces = 192.168.12.2/24 192.168.13.2/24
# Browser Control Options:
# set local master to no if you don't want Samba to become a master
# browser on your network. Otherwise the normal election rules apply
; local master = no
# OS Level determines the precedence of this server in master browser
# elections. The default value should be reasonable
; os level = 33
# Domain Master specifies Samba to be the Domain Master Browser. This
# allows Samba to collate browse lists between subnets. Don't use this
# if you already have a Windows NT domain controller doing this job
; domain master = yes
# Preferred Master causes Samba to force a local browser election on startup
# and gives it a slightly higher chance of winning the election
; preferred master = yes
# Enable this if you want Samba to be a domain logon server for
# Windows95 workstations.
; domain logons = yes
# if you enable domain logons then you may want a per-machine or
# per user logon script
# run a specific logon batch file per workstation (machine)
; logon script = %m.bat
# run a specific logon batch file per username
; logon script = %U.bat
# Where to store roving profiles (only for Win95 and WinNT)
# %L substitutes for this servers netbios name, %U is username
# You must uncomment the [Profiles] share below
; logon path = \%LProfiles%U
# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
; wins support = yes
# WINS Server - Tells the NMBD components of Samba to be a WINS Client
# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
; wins server = w.x.y.z
# WINS Proxy - Tells Samba to answer name resolution queries on
# behalf of a non WINS capable client, for this to work there must be
# at least one WINS Server on the network. The default is NO.
; wins proxy = yes
# DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names
# via DNS nslookups. The default is NO.
dns proxy = no
# These scripts are used on a domain controller or stand-alone
# machine to add or delete corresponding unix accounts
; add user script = /usr/sbin/useradd %u
; add group script = /usr/sbin/groupadd %g
; add machine script = /usr/sbin/adduser -n -g machines -c Machine -d /dev/null -s /bin/false %u
; delete user script = /usr/sbin/userdel %u
; delete user from group script = /usr/sbin/deluser %u %g
; delete group script = /usr/sbin/groupdel %g
#============================ Share Definitions ==============================
[public]
comment = Public Stuff
path = /home/samba
public = yes
writable = yes
printable = no
Whenever I try to login from a windows XP machine, access is always denies. How can I set up permissions for anyone to access the share?

Ok, did you look at that page I recommended? It gives you the steps.
You don't have to create the file, just do, if the windows user is john, and has a password on the MS box of 1234
smbpasswd -a john
It'll ask for his password, type in 1234, it'll ask for confirmation and type it in again.
On the MS box, user john might have to log off and logon.
However, again, I recommend taking a look at that page, trying the nbtstat and such. Actually, I hadn't realized how dated that page is, I have to redo it, but the tips there should still be useful.

SMB access for Active Directory users

Hi there,
My server is an OD Master bound to AD for authentication and my institution's Kerberos realm.
When I try to share files from the server via SMB and connect as an Active Directory user I get the following error in the logs:
[2009/06/11 12:02:27, 1, pid=5308] /SourceCache/samba/samba-187.8/samba/source/libads/kerberosverify.c:ads_verifyticket(428)
adsverifyticket: smbkrb5_parse_name(myserver$) failed (Configuration file does not specify default realm)
[2009/06/11 12:02:27, 1, pid=5308] /SourceCache/samba/samba-187.8/samba/source/smbd/sesssetup.c:replyspnegokerberos(340)
Failed to verify incoming ticket with error NTSTATUS_LOGONFAILURE!
I've read something vague about having to Kerberize the SMB service seperately so I'm not sure if that's the problem.
My smb.conf file is as follows:
; Configuration file for the Samba software suite.
; ============================================================================
; For the format of this file and comprehensive descriptions of all the
; configuration option, please refer to the man page for smb.conf(5).
; The following configuration should suit most systems for basic usage and
; initial testing. It gives all clients access to their home directories and
; allows access to all printers specified in /etc/printcap.
; BEGIN required configuration
; Parameters inside the required configuration block should not be altered.
; They may be changed at any time by upgrades or other automated processes.
; Site-specific customizations will only be preserved if they are done
; outside this block. If you choose to make customizations, it is your
; own responsibility to verify that they work correctly with the supported
; configuration tools.
[global]
debug pid = yes
log level = 1
server string = Mac OS X
printcap name = cups
printing = cups
encrypt passwords = yes
use spnego = yes
passdb backend = odsam
idmap domains = default
idmap config default: default = yes
idmap config default: backend = odsam
idmap alloc backend = odsam
idmap negative cache time = 5
map to guest = Bad User
guest account = nobody
unix charset = UTF-8-MAC
display charset = UTF-8-MAC
dos charset = 437
vfs objects = darwinacl,darwin_streams
; Don't become a master browser unless absolutely necessary.
os level = 2
domain master = no
; For performance reasons, set the transmit buffer size
; to the maximum and enable sendfile support.
max xmit = 131072
use sendfile = yes
; The darwin_streams module gives us named streams support.
stream support = yes
ea support = yes
; Enable locking coherency with AFP.
darwin_streams:brlm = yes
; Core files are invariably disabled system-wide, but attempting to
; dump core will trigger a crash report, so we still want to try.
enable core files = yes
; Configure usershares for use by the synchronize-shares tool.
usershare max shares = 1000
usershare path = /var/samba/shares
usershare owner only = no
usershare allow guests = yes
usershare allow full config = yes
; Filter inaccessible shares from the browse list.
com.apple:filter shares by access = yes
; Check in with PAM to enforce SACL access policy.
obey pam restrictions = yes
; Don't be trying to enforce ACLs in userspace.
acl check permissions = no
; Make sure that we resolve unqualified names as NetBIOS before DNS.
name resolve order = lmhosts wins bcast host
; Pull in system-wide preference settings. These are managed by
; synchronize-preferences tool.
include = /var/db/smb.conf
[printers]
comment = All Printers
path = /tmp
printable = yes
guest ok = no
create mode = 0700
writeable = no
browseable = no
; Site-specific parameters can be added below this comment.
; END required configuration.
Any help would be much appreciated!!
Thanks.

I am now having the same problem - a Windows server trying to access a file share on the Mac Server is presented with the same error message in the log files:
[2009/06/29 21:34:56, 2, pid=485] /SourceCache/samba/samba-187.8/samba/source/smbd/sesssetup.c:setupnew_vcsession(1260)
setupnew_vcsession: New VC == 0, if NT4.x compatible we would close all old resources.
[2009/06/29 21:34:56, 1, pid=485] /SourceCache/samba/samba-187.8/samba/source/libads/kerberosverify.c:ads_verifyticket(428)
adsverifyticket: smbkrb5_parsename(vifile$) failed (Configuration file does not specify default realm)
[2009/06/29 21:34:56, 1, pid=485] /SourceCache/samba/samba-187.8/samba/source/smbd/sesssetup.c:replyspnegokerberos(340)
Failed to verify incoming ticket with error NTSTATUS_LOGONFAILURE!
Workgroup manager can read from Active Directory - seems to be jiving correctly - my server (SMB) is in Domain Member mode...
When I try to access system from \\UNC command, I am presented with username/password prompt and nothing works.
Not feeling the Mac OS X love tonight.
Bill
System is bound to active directory - green light in Directory Utility

Smb error in 10.4.3 to 10.4.5 - ok in 10.4.0

I'm trying to use a G5 on a corporate Windows network. When I do a clean install of 10.4.0 on a drive, I can connect to our Active Directory network without changing any settings at all - I just use Go/Connect to Server, enter the path to the share, it asks for my username and pw, and I can connect. Very nice.
If I do a combo update to 10.4.3 through 10.4.5, I can no longer connect to the network. I get this error message:
The Finder cannot complete the operation because some data in "smb://<server>/<sharename>" could not be read or written.
(Error code -36).
The Console looks like this:
mbgetmem(449): incomplete copy
mbgetmem(449): incomplete copy
mbgetmem(449): incomplete copy
mbgetmem(449): incomplete copy
mbgetmem(449): incomplete copy
mbgetmem(449): incomplete copy
mbgetmem(449): incomplete copy
mbgetmem(449): incomplete copy
mount_smbfs: can't get server address `<servername>':
Unknown host
mount_smbfs: can't get server address: syserr = Network is down
If I attempt to connect using the IP address rather than the path, I get this error message:
The Finder cannot complete the operation because some data in "smb://<IPaddress>/<sharename>" could not be read or written.
(Error code -36).
And the console looks like this:
mount_smbfs: negotiate phase failed: syserr = Software caused connection abort
If I re-install 10.4.0, I can connect again.
Does anyone know why 10.4.0 works "out of the box" for me and later versions don't? And how I might alter settings in later versions to work like 10.4.0? BTW, I can't alter any settings on the server - I need to do this from my end. My current workaround is to re-boot from a 10.4.0 drive when I need to access the server.
I've done a LOT of searching on the web and in the forums and have found a variety of solutions but none have worked for me. Thanks for any comments/advice.
bart
G5 dual 1.8 Mac OS X (10.4.4) 3.5 gigs RAM

Thanks for your reply.
1) I tried renaming /private/etc/smb.conf to smb-OLD.conf and restarting. I still couldn't hit the server, and when I ran testparm after that, it said that it couldn't find smb.conf. So it didn't create a new smb.conf file. (Please excuse me; I'm not very technical and I barely understood your reply!)
2) I also tried turning windows sharing off and back on; still can't hit the server.
3) I removed SMB in Directory Access, rebooted and re-enabled it, but I don't have any workgroup or wins settings to fill in. When I boot from my 10.4.0 drive (which IS able to log on to the server), workgroup is set to Workgroup, and wins is blank.
When I run testparm booted from my 10.4.0 drive, the settings are exactly the same as what I see booted from my 10.4.5 drive.
This is driving me crazy. Thanks again for your help, and again, any advice is welcome.

Restore SMB Shares

Hi All
I have a problem with my Mac Mini creating a SMB share for my windows laptops to access files over the network.
I have created shares in system preferences and selected share over SMB, included the correct user permissions.
When I browse to \\ipaddress it shows up with 1 share only which is called films. I do not have any shares setup like this at all. If I try to get into this folder it fails.
Is there a file or something which holds this information which I can restore? I really don't want to keep using FTP or have to reinstall the OS.
Thanks
Sam!

Hi guys,
I too am having a very similar issue - I have a Freecom Network Drive (that is the model name..) and I can't connect to it either from Snow Leopard. It worked fine in Leopard, but I guess Apple have broken something in Snow Leopard.
However, I have some differences in my experience here.
1) The Freecom drive that I have doesn't seem to support usernames and passwords so it is always free to connect to from any machine on the LAN. I've never specified a username and password to connect to it and its always worked - the wife's PC can still connect to it and so can my Linux Box running Xbox Media center.
2) I can navigate around the disk in Finder and in Terminal, but when I do try to open a file, I get two error boxes, one on top of the other, the first being:
'The application iTunes.app can't be opened. -36' for MP3 files
'The application VLC.app can't be opened. -36' for AVI
and so on depending on the type of file.
The second message is:
'The operation can't be completed - an unexpected error occurred (error code -36)'
3) Another strange thing is I can copy the file directly to the Mac HD from the NAS ok, but I can't write anything there.
I've also upgraded to 10.6.1 but no luck - I haven't tried hacking around in the smb.conf either.
Hopefully Apple monitors this!!
C

Finder fails to mount SMB share, while Terminal does

I'm trying to mount shared NTFS partition from my desktop running W2000 at work to my MB at home, and can't make Finder to see it (Error -36 and mount_smbfs: negotiate phase failed: syserr = Operation timed out in the console). Teminal can mount it 100 times ina row, my wife's XP notebook next to me can mount it, but Finder can't. And I feel like I tried everything...
What else could I try - workgroup renaming, all possible spelling combinations, passwd security disable...darn, I'm running VNC to that mashine just to be able to tweak the server if needed...again for no avail...it's a bug with Finder and I can't find way around it...
What would you suggest?
MB 2.0 Mac OS X (10.4.9)

Let me be more specific
W2000 SP4 server, MacBook client, trying to mount shared volume thru SMB
-on the same subnet (i.e. lappy next to the server on the same switch) both mount_smbfs and smbclient work OK
-from home smbclient is working, mount_smbfs does not (Err -36)
-from home my wife can mount the shared volume thru Network Neighbours on her XP notebook
-it does not seem to be TCP/IP related - all comp can make FTP or VNC to the server verywhere
-err log of mount_smbfs is "negotiate phase failed: syserr Operation timed out in the console", no idea is there a way to verbose mount_smbfs
-smb.conf looks basic...secure passwords=enable, no nsmb.conf
-W2000 SP4 sever is all default secure policies, running FTP server w/o any issues.
So is there a key on server...or the client which I have to tweak?
Thank you.
MB 2.0 Mac OS X (10.4.9)
MB 2.0 Mac OS X (10.4.9)

Smb.conf?

Similar Messages

Maybe you are looking for