Pbl samba ldap - réseaux et sécurité - Linux et OS Alternatifs
MarshPosté le 20-12-2006 à 12:15:52
Bonjour, J'ai un souci sur un Samba version 3.0.14a-Debian. La machine est installée en controleur de domaine principal. Tout fonctionne a part que le samba se plante aléatoirement (1 fois par jour ou une fois tous les deux jour) Je n'ais rien dans les logs. J'execute la commande /etc/init.d/samba stop killall -s9 smbd /etc/init.d/samba start et ca repart ! Une idéé ?
Mon smb.conf:
#======================= Global Settings =======================
[global] os level = 80 local master = yes preferred master = yes deadtime = 1 domain master = Yes workgroup = EMI-SEMUR server string = pdc netbios name = pdc wins support = yes dns proxy = no name resolve order = wins bcast log level = 2 log file = /var/log/samba/log.%m max log size = 10000 syslog = 1 panic action = /usr/share/samba/panic-action %d security = user encrypt passwords = yes socket options = TCP_NODELAY smb ports = 139 445 use sendfile = no
# sylvain le 8/11 #case sensitive = No #default case = lower #preserve case = yes #short preserve case = Yes #nt acl support = Yes #large readwrite = no #max limit = 16644
#add user script = /usr/sbin/smbldap-useradd -m "%u" ldap delete dn = Yes #delete user script = /usr/sbin/smbldap-userdel "%u" #add machine script = /usr/sbin/smbldap-useradd -w "%u" #add group script = /usr/sbin/smbldap-groupadd -p "%g" #delete group script = /usr/sbin/smbldap-groupdel "%g" #add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g" #delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g" #set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
#logon script global #logon script = logon.bat #logon script de groupe #logon script = %g.bat #logon script du user logon script = %U.bat logon home = logon path =
; obey pam restrictions = yes ; guest account = nobody ; invalid users = root # This boolean parameter controls whether Samba attempts to sync the Unix # password with the SMB password when the encrypted SMB password in the # passdb is changed. ; unix password sync = no ldap password sync = yes # For Unix password sync to work on a Debian GNU/Linux system, the following # parameters must be set (thanks to Augustin Luton <aluton@hybrigenics.fr> for # sending the correct chat script for the passwd program in Debian Potato). passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .
# This boolean controls whether PAM will be used for password changes # when requested by an SMB client instead of the program listed in # 'passwd program'. The default is 'no'. ; pam password change = no
########## Printing ##########
# If you want to automatically load your printer list rather # than setting them up individually then you'll need this ; load printers = yes
# lpr(ng) printing. You may wish to override the location of the # printcap file ; printing = bsd ; printcap name = /etc/printcap
# CUPS printing. See also the cupsaddsmb(8) manpage in the # cupsys-client package. ; printing = cups ; printcap name = cups
# When using [print$], root is implicitly a 'printer admin', but you can # also give this right to other users to add drivers and set printer # properties ; printer admin = @ntadmin
######## File sharing ########
# Name mangling options ; preserve case = yes ; short preserve case = yes
############ Misc ############
# Using the following line enables you to customise your configuration # on a per machine basis. The %m gets replaced with the netbios name # of the machine that is connecting ; include = /home/samba/etc/smb.conf.%m
# Most people will find that this option gives better performance. # See smb.conf(5) and /usr/share/doc/samba-doc/htmldocs/speed.html # for details # You may want to add the following on a Linux system: # SO_RCVBUF=8192 SO_SNDBUF=8192 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
# The following parameter is useful only if you have the linpopup package # installed. The samba maintainer and the linpopup maintainer are # working to ease installation and configuration of linpopup and samba. ; message command = /bin/sh -c '/usr/bin/linpopup "%f" "%m" %s; rm %s' &
# Domain Master specifies Samba to be the Domain Master Browser. If this # machine will be configured as a BDC (a secondary logon server), you # must set this to 'no'; otherwise, the default behavior is recommended. ; domain master = auto logon home = logon path =
# Some defaults for winbind (make sure you're not using the ranges # for something else.) ; idmap uid = 10000-20000 ; idmap gid = 10000-20000 ; template shell = /bin/bash
#[IPC$] #path = /tmp #guest ok = Yes #read only = No #force user = root [netlogon] comment = Network Logon service path = /home/netlogon guest ok = Yes write list = @informatique
Marsh Posté le 20-12-2006 à 12:15:52
Bonjour,
J'ai un souci sur un Samba version 3.0.14a-Debian. La machine est installée en controleur de domaine principal. Tout fonctionne a part que le samba se plante aléatoirement (1 fois par jour ou une fois tous les deux jour)
Je n'ais rien dans les logs.
J'execute la commande /etc/init.d/samba stop killall -s9 smbd /etc/init.d/samba start
et ca repart !
Une idéé ?
Mon smb.conf:
#======================= Global Settings =======================
[global]
os level = 80
local master = yes
preferred master = yes
deadtime = 1
domain master = Yes
workgroup = EMI-SEMUR
server string = pdc
netbios name = pdc
wins support = yes
dns proxy = no
name resolve order = wins bcast
log level = 2
log file = /var/log/samba/log.%m
max log size = 10000
syslog = 1
panic action = /usr/share/samba/panic-action %d
security = user
encrypt passwords = yes
socket options = TCP_NODELAY
smb ports = 139 445
use sendfile = no
# sylvain le 8/11
#case sensitive = No
#default case = lower
#preserve case = yes
#short preserve case = Yes
#nt acl support = Yes
#large readwrite = no
#max limit = 16644
passdb backend = ldapsam:ldap://127.0.0.1
ldap suffix = dc=EMI-SEMUR
ldap machine suffix = ou=machines
ldap user suffix = ou=users
ldap group suffix = ou=groups
ldap admin dn = cn=admin,dc=EMI-SEMUR
ldap delete dn = no
ldap idmap suffix = ou=users
ldap passwd sync = yes
passwd program = /usr/sbin/smbldap-passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n *all*authentication*tokens*updated*
#add user script = /usr/sbin/smbldap-useradd -m "%u"
ldap delete dn = Yes
#delete user script = /usr/sbin/smbldap-userdel "%u"
#add machine script = /usr/sbin/smbldap-useradd -w "%u"
#add group script = /usr/sbin/smbldap-groupadd -p "%g"
#delete group script = /usr/sbin/smbldap-groupdel "%g"
#add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
#delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
#set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
#logon script global
#logon script = logon.bat
#logon script de groupe
#logon script = %g.bat
#logon script du user
logon script = %U.bat
logon home =
logon path =
domain logons = yes
add machine script = /usr/local/smbldaptools/smbldap-useradd -w "%u"
# Allow user privileges
enable privileges = yes
; obey pam restrictions = yes
; guest account = nobody
; invalid users = root
# This boolean parameter controls whether Samba attempts to sync the Unix
# password with the SMB password when the encrypted SMB password in the
# passdb is changed.
; unix password sync = no
ldap password sync = yes
# For Unix password sync to work on a Debian GNU/Linux system, the following
# parameters must be set (thanks to Augustin Luton <aluton@hybrigenics.fr> for
# sending the correct chat script for the passwd program in Debian Potato).
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .
# This boolean controls whether PAM will be used for password changes
# when requested by an SMB client instead of the program listed in
# 'passwd program'. The default is 'no'.
; pam password change = no
########## Printing ##########
# If you want to automatically load your printer list rather
# than setting them up individually then you'll need this
; load printers = yes
# lpr(ng) printing. You may wish to override the location of the
# printcap file
; printing = bsd
; printcap name = /etc/printcap
# CUPS printing. See also the cupsaddsmb(8) manpage in the
# cupsys-client package.
; printing = cups
; printcap name = cups
# When using [print$], root is implicitly a 'printer admin', but you can
# also give this right to other users to add drivers and set printer
# properties
; printer admin = @ntadmin
######## File sharing ########
# Name mangling options
; preserve case = yes
; short preserve case = yes
############ Misc ############
# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting
; include = /home/samba/etc/smb.conf.%m
# Most people will find that this option gives better performance.
# See smb.conf(5) and /usr/share/doc/samba-doc/htmldocs/speed.html
# for details
# You may want to add the following on a Linux system:
# SO_RCVBUF=8192 SO_SNDBUF=8192
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
# The following parameter is useful only if you have the linpopup package
# installed. The samba maintainer and the linpopup maintainer are
# working to ease installation and configuration of linpopup and samba.
; message command = /bin/sh -c '/usr/bin/linpopup "%f" "%m" %s; rm %s' &
# Domain Master specifies Samba to be the Domain Master Browser. If this
# machine will be configured as a BDC (a secondary logon server), you
# must set this to 'no'; otherwise, the default behavior is recommended.
; domain master = auto
logon home =
logon path =
# Some defaults for winbind (make sure you're not using the ranges
# for something else.)
; idmap uid = 10000-20000
; idmap gid = 10000-20000
; template shell = /bin/bash
#======================= Share Definitions =======================
#[IPC$]
#path = /tmp
#guest ok = Yes
#read only = No
#force user = root
[netlogon]
comment = Network Logon service
path = /home/netlogon
guest ok = Yes
write list = @informatique