Help!

[Samba] "Failed to create Users" problem.


Post new topic   General Reply to Topic (not reply to a specific post)    Forums Home -> Samba RSS
Next:  [Samba] Domain and local user permissions  
Author Message
Daryl
External


Since: Aug 01, 2007
Posts: 3



PostPosted: Wed Aug 01, 2007 2:14 am    Post subject: [Samba] "Failed to create Users" problem.
Archived from groups: linux>samba (more info?)

Hi everybody,

I have been struggling to get my Windows XP box to be able to
access my samba server. When samba starts, I see the following my my
/var/log/samba/log.smb file:

smbd version 3.0.25b-2.fc7 started.
Copyright Andrew Tridgell and the Samba Team 1992-2007
[2007/07/31 20:22:43, 0] auth/auth_util.c:create_builtin_administrators(792)
create_builtin_administrators: Failed to create Administrators
[2007/07/31 20:22:43, 0] auth/auth_util.c:create_builtin_users(758)
create_builtin_users: Failed to create Users
[2007/07/31 20:22:43, 0] auth/auth_util.c:create_builtin_administrators(792)
create_builtin_administrators: Failed to create Administrators
[2007/07/31 20:22:43, 0] auth/auth_util.c:create_builtin_users(758)
create_builtin_users: Failed to create Users

Through various Google searches, I have found that when people
say they get this error, it means samba will not work at all. Though
samba does stay running:

# ps aux | grep mbd
root 4428 0.0 0.1 8996 1288 ? Ss 20:22 0:00 nmbd -D
root 4679 0.0 0.2 13704 2236 ? Ss 21:09 0:00 smbd -D
root 4681 0.0 0.0 13704 924 ? S 21:09 0:00 smbd -D

When I try to access \\www in Explorer from my XP box, I get an
alert that says, "Windows cannot find '\\www'. Check the spelling and
try again, [etc...]" (same when I try by IP). When I access "smb:/" and
navigate through the tree in Konqueror on the samba server itself,
everything works fine. I can ping back-and-forth between the two
machines by name and IP just fine.
My passwords seem in order:

# pdbedit -L
daryl:500:Daryl Beattie
tv:522:Television

My workgroup is named "home" on both client and server, my
hostname matches my netbios name (as defined in smb.conf, it is
"www")... The only thing slightly abnormal that I have is that my /files
share has a different group than its owner --but I've fiddled with the
group permissions (i.e. setting them back to same owner/group) and that
doesn't seem to help.
Here is my testparm output:

# testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[files]"
Processing section "[downloads]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions

[global]
workgroup = HOME
server string = Samba Server Version %v
passdb backend = tdbsam
username map = /etc/samba/smbusers
log file = /var/log/samba/log.%m
max log size = 50
socket options = TCP_NODELAY SO_KEEPALIVE SO_RCVBUF=8192
SO_SNDBUF=8192 IPTOS_LOWDELAY
idmap uid = 10000-20000
idmap gid = 10000-20000
hosts allow = 192.168.0.

[homes]
comment = Home Directories
read only = No

[files]
path = /files
read only = No
guest ok = Yes

[downloads]
path = /home/daryl/documents/downloads
valid users = daryl, tv
read only = No
browseable = No


This problem has been driving me nuts for a while, because
everything /used to/ work fine with an almost identical setup on my old
Fedora Core 5 machine (same filesystem directories, same users, etc;
they were moved from one machine to the other). But looking at the logs
on that machine, I never had a "Failed to create Users" error message.
I'd greatly appreciate any help anybody could give me.

Sincerely,

Daryl.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Back to top
Felipe Augusto van de Wie
External


Since: Aug 28, 2006
Posts: 304



PostPosted: Wed Aug 01, 2007 2:40 pm    Post subject: Re: [Samba] "Failed to create Users" problem. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Daryl wrote, On 31-07-2007 22:57:
> This problem has been driving me nuts for a while, because
> everything /used to/ work fine with an almost identical setup on my old
> Fedora Core 5 machine (same filesystem directories, same users, etc;
> they were moved from one machine to the other). But looking at the logs
> on that machine, I never had a "Failed to create Users" error message.
> I'd greatly appreciate any help anybody could give me.

Hmmm... the builtin groups changed a little bit in the
course of Samba releases, did you check Release Notes or your
FC packages about that? If I'm not wrong this happened on 3.0.23:

http://samba.org/samba/history/samba-3.0.23.html




Kind regards,
- --
Felipe Augusto van de Wiel <felipe RemoveThis @paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGsH2ICj65ZxU4gPQRCBBQAKC/zc3d3fjmU8H1udUH7p908euujgCbBOIY
YP+FZlx1+A+FQT9PgKDVI1Y=
=EoGR
-----END PGP SIGNATURE-----
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Back to top
Daryl
External


Since: Aug 01, 2007
Posts: 3



PostPosted: Wed Aug 01, 2007 5:00 pm    Post subject: Re: [Samba] "Failed to create Users" problem. PLUS further evidence [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Hi,

Felipe Augusto van de Wiel wrote:
> Hmmm... the builtin groups changed a little bit in the
> course of Samba releases, did you check Release Notes or your
> FC packages about that? If I'm not wrong this happened on 3.0.23
>

Assuming that's true, how would I change things to get this
problem to go away? Add some kind of group mapping or something? How
does one go about doing that?
I may try verifying that 3.0.23 introduced this issue by rolling
back samba to its previous version (whatever it was). We'll see.

ALSO

My Windows XP client also dual-boots into Fedora 7 as well, and
from Fedora 7 on the workstation I can access the samba shares:

$ smbclient -L //www
Password:
Anonymous login successful
Domain=[HOME] OS=[Unix] Server=[Samba 3.0.25b-2.fc7]

Sharename Type Comment
--------- ---- -------
homes Disk Home Directories
files Disk
IPC$ IPC IPC Service (Samba Server Version
3.0.25b-2.fc7)
Anonymous login successful
Domain=[HOME] OS=[Unix] Server=[Samba 3.0.25b-2.fc7]

Server Comment
--------- -------
WWW Samba Server Version 3.0.25b-2.fc7

Workgroup Master
--------- -------
HOME WWW


But for some strange reason, the same machine in Windows cannot
see the "www" machine at all.
My question is now: What reason would there be for the client to
be able to connect to samba from Linux but not from Windows?
I am going to hook up wireshark and watch what's going on at the
network level when I get a free moment. In the meantime, any suggestions
whatsoever are welcome.

Sincerely,

Daryl.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Back to top
Felipe Augusto van de Wie
External


Since: Aug 28, 2006
Posts: 304



PostPosted: Wed Aug 01, 2007 8:00 pm    Post subject: Re: [Samba] "Failed to create Users" problem. PLUS further evidence [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Daryl wrote, On 01-08-2007 11:48:
> Hi,
>
> Felipe Augusto van de Wiel wrote:
>> Hmmm... the builtin groups changed a little bit in the
>> course of Samba releases, did you check Release Notes or your
>> FC packages about that? If I'm not wrong this happened on 3.0.23
>>
>
> Assuming that's true, how would I change things
> to get this problem to go away? Add some kind of group
> mapping or something? How does one go about doing that?

Did you checked the Release Notes? And the Samba
Official HOWTO about Group Mapping?


> I may try verifying that 3.0.23 introduced this
> issue by rolling back samba to its previous version
> (whatever it was). We'll see.

Ok.


> ALSO
>
> My Windows XP client also dual-boots into Fedora
> 7 as well, and from Fedora 7 on the workstation I can
> access the samba shares:
>
> $ smbclient -L //www
> Password:
> Anonymous login successful
> Domain=[HOME] OS=[Unix] Server=[Samba 3.0.25b-2.fc7]
>
> Sharename Type Comment
> --------- ---- -------
> homes Disk Home Directories
> files Disk
> IPC$ IPC IPC Service (Samba Server Version 3.0.25b-2.fc7)
> Anonymous login successful
> Domain=[HOME] OS=[Unix] Server=[Samba 3.0.25b-2.fc7]
>
> Server Comment
> --------- -------
> WWW Samba Server Version 3.0.25b-2.fc7
>
> Workgroup Master
> --------- -------
> HOME WWW

This is an anonymous login.


> But for some strange reason, the same machine in
> Windows cannot see the "www" machine at all.

Probably because you are not login anonymously from Windows.


> My question is now: What reason would there be for
> the client to be able to connect to samba from Linux but
> not from Windows?

Anonymous logins are different from WinXP logins, AFAICT.


> I am going to hook up wireshark and watch what's going
> on at the network level when I get a free moment. In the
> meantime, any suggestions whatsoever are welcome.

If everything is ok with you user and group account,
group mappings and SID, everything should be ok, getting the
error about builtin accounts with the fact of the migration
hint me to the BUILTIN Group problems.

It could be something else, increased log levels (10)
can help a lot in this context, you can also test simples
shares decreasing the security level just to figure out what's
going on.

Kind regards,
- --
Felipe Augusto van de Wiel <felipe.TakeThisOut@paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGsMekCj65ZxU4gPQRCMp+AKDQ5VAoy0xYnBlAuQTAiGyQoJ7b9ACgyI8z
oro+1m1yc6sv5sG7F+0FhC4=
=e0w7
-----END PGP SIGNATURE-----
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Back to top
Daryl
External


Since: Aug 01, 2007
Posts: 3



PostPosted: Wed Aug 01, 2007 11:10 pm    Post subject: Re: [Samba] "Failed to create Users" problem. PLUS further evidence [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Hi Felipe (and others),

Thanks very much for your help so far.

Felipe Augusto van de Wiel wrote:
>> Assuming that's true, how would I change things
>> to get this problem to go away? Add some kind of group
>> mapping or something? How does one go about doing that?
>>
> Did you checked the Release Notes? And the Samba
> Official HOWTO about Group Mapping?
>

I did check out the Release Notes, but I'm no samba expert so I didn't
fully understand them. I will check out the HOWTO on Group Mapping later.

I was hoping you (or anybody, really) had a quick way to get this done
that didn't require me to do lots of research beforehand. Maybe somebody
has come across and solved this problem before, and knew exactly what to
do with say 1 simple command or something. Anyway, I'll look into it
myself later.


> Probably because you are not login anonymously from Windows.
>
> Anonymous logins are different from WinXP logins, AFAICT.
>

Okay, I didn't know that. When I try as a specific user, I get
the following:

$ smbclient -L //www -U daryl
Password:
session setup failed: NT_STATUS_LOGON_FAILURE

When I check the log for that machine on the samba server, the
log is filled with the same sorts of messages as the generic log.smbd
(but what you see below is from "log.[worstation-name]"):

[2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_administrators(792)
create_builtin_administrators: Failed to create Administrators
[2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_users(758)
create_builtin_users: Failed to create Users
[2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_administrators(792)
create_builtin_administrators: Failed to create Administrators
[2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_users(758)
create_builtin_users: Failed to create Users

I also saw this at the top of that log file, which seems strange
to me since I'm using tdbsam:

[2007/08/01 10:06:10, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(241)
startsmbfilepwent_internal: file /var/lib/samba/private/smbpasswd did
not exist. File successfully created.


>
>
>> I am going to hook up wireshark and watch what's going
>> on at the network level when I get a free moment. In the
>> meantime, any suggestions whatsoever are welcome.
>>
>
> If everything is ok with you user and group account,
> group mappings and SID, everything should be ok, getting the
> error about builtin accounts with the fact of the migration
> hint me to the BUILTIN Group problems.
>
> It could be something else, increased log levels (10)
> can help a lot in this context, you can also test simples
> shares decreasing the security level just to figure out what's
> going on

I tried increasing the log level to 10 before, and didn't see
anything unusual beyond the errors reported already. I will try that
again though, and get back to you.

Thanks again for the help.

Sincerely,

Daryl.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Back to top
Felipe Augusto van de Wie
External


Since: Aug 28, 2006
Posts: 304



PostPosted: Thu Aug 02, 2007 2:50 pm    Post subject: Re: [Samba] "Failed to create Users" problem. PLUS further evidence [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Daryl wrote, On 01-08-2007 18:05:
> Hi Felipe (and others),
> Thanks very much for your help so far.

You are welcome. Smile


> Felipe Augusto van de Wiel wrote:
>>> Assuming that's true, how would I change things
>>> to get this problem to go away? Add some kind of group
>>> mapping or something? How does one go about doing that?
>>>
>> Did you checked the Release Notes? And the Samba
>> Official HOWTO about Group Mapping?
>
> I did check out the Release Notes, but I'm no samba
> expert so I didn't fully understand them. I will
> check out the HOWTO on Group Mapping later.

Before 3.0.23, Samba automagically create some
groupmaps when you use tdbsam, after that, you need to
create them by yourself.

The HOWTO has the specific commands, it is not
a big chapter and it is really relevant to read and
understand.


> I was hoping you (or anybody, really) had a quick way
> to get this done that didn't require me to do lots of
> research beforehand. Maybe somebody has come across
> and solved this problem before, and knew exactly what
> to do with say 1 simple command or something. Anyway,
> I'll look into it myself later.

Unfortunately, Samba requires some understanding
of what's going on, in this specific case it is not one
line that will solve your problem, but a few of them and
there is not much point in repeating the docs here, this
part of the HOWTO is good and clear on what to do.

You will use 'net groupmap'. And of course, you
need to have *nix accounts on the server that are mapped
by Samba to convert users from "Windows world" in real
users and permissions.


>> Probably because you are not login anonymously from
>> Windows. Anonymous logins are different from WinXP
>> logins, AFAICT.
>
> Okay, I didn't know that. When I try as a
> specific user, I get the following:
>
> $ smbclient -L //www -U daryl
> Password:
> session setup failed: NT_STATUS_LOGON_FAILURE

Ok, this is a user/password error.

So, you are really missing the user or something
else related to permissions on the server.


> When I check the log for that machine on the
> samba server, the log is filled with the same sorts
> of messages as the generic log.smbd (but what you see
> below is from "log.[worstation-name]"):
>
> [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_administrators(792)
> create_builtin_administrators: Failed to create Administrators
> [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_users(758)
> create_builtin_users: Failed to create Users
> [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_administrators(792)
> create_builtin_administrators: Failed to create Administrators
> [2007/08/01 15:03:06, 0] auth/auth_util.c:create_builtin_users(758)
> create_builtin_users: Failed to create Users
>
> I also saw this at the top of that log file, which seems strange
> to me since I'm using tdbsam:
>
> [2007/08/01 10:06:10, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(241)
> startsmbfilepwent_internal: file /var/lib/samba/private/smbpasswd did
> not exist. File successfully created.

I will keep my hint, try to create the groups,
users and groupmaps and make sure that everything is
consistent (SIDs, permissions, shares, usernames, uids,
gids).


> I tried increasing the log level to 10 before, and didn't see
> anything unusual beyond the errors reported already. I will try that
> again though, and get back to you.

It is not just the error, but also when the error happens
and what happened before it.


> Thanks again for the help.
> Sincerely,
> Daryl.


Kind regards,
- --
Felipe Augusto van de Wiel <felipe DeleteThis @paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGsdEICj65ZxU4gPQRCIwgAKCa4AFEmHT4nCa6m0qJwNVB4AJA1ACdGUGm
ava9r1ZQTQL2kZse1W9b61s=
=l0Yo
-----END PGP SIGNATURE-----
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Back to top
Display posts from previous:   
Post new topic   General Reply to Topic (not reply to a specific post)    Forums Home -> Samba All times are: Eastern Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum