docs/faq/FAQ-errors.html

   1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
   2 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter 5. Common errors</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.59.1"><link rel="home" href="samba-faq.html" title="Samba FAQ"><link rel="up" href="samba-faq.html" title="Samba FAQ"><link rel="previous" href="FAQ-ClientApp.html" title="Chapter 4. Specific client application problems"><link rel="next" href="FAQ-features.html" title="Chapter 6. Features"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter 5. Common errors</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="FAQ-ClientApp.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="FAQ-features.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><h2 class="title"><a name="FAQ-errors"></a>Chapter 5. Common errors</h2></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="FAQ-errors.html#id2811288">Not listening for calling name</a></dt><dt><a href="FAQ-errors.html#id2811329">System Error 1240</a></dt><dt><a href="FAQ-errors.html#id2811215">smbclient ignores -N !</a></dt><dt><a href="FAQ-errors.html#id2811270">The data on the CD-Drive I've shared seems to be corrupted!</a></dt><dt><a href="FAQ-errors.html#id2874350">Why can users access home directories of other users?</a></dt><dt><a href="FAQ-errors.html#id2874436">Until a few minutes after samba has started, clients get the error &quot;Domain Controller Unavailable&quot;</a></dt><dt><a href="FAQ-errors.html#id2874451">I'm getting &quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot; in the logs</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><h2 class="title" style="clear: both"><a name="id2811288"></a>Not listening for calling name</h2></div></div><p>
   3 </p><pre class="programlisting">
   4 Session request failed (131,129) with myname=HOBBES destname=CALVIN
   5 Not listening for calling name
   6 </pre><p>
   7 </p><p>
   8 If you get this when talking to a Samba box then it means that your
   9 global &quot;hosts allow&quot; or &quot;hosts deny&quot; settings are causing the Samba
  10 server to refuse the connection.
  11 </p><p>
  12 Look carefully at your &quot;hosts allow&quot; and &quot;hosts deny&quot; lines in the
  13 global section of smb.conf.
  14 </p><p>
  15 It can also be a problem with reverse DNS lookups not functioning
  16 correctly, leading to the remote host identity not being able to
  17 be confirmed, but that is less likely.
  18 </p></div><div class="sect1" lang="en"><div class="titlepage"><div><h2 class="title" style="clear: both"><a name="id2811329"></a>System Error 1240</h2></div></div><p>
  19 System error 1240 means that the client is refusing to talk
  20 to a non-encrypting server. Microsoft changed WinNT in service
  21 pack 3 to refuse to connect to servers that do not support
  22 SMB password encryption.
  23 </p><p>There are two main solutions:
  24 </p><table class="simplelist" border="0" summary="Simple list"><tr><td>enable SMB password encryption in Samba. See the encryption part of
  25 the samba HOWTO Collection</td></tr><tr><td>disable this new behaviour in NT. See the section about
  26 Windows NT in the chapter &quot;Portability&quot; of the samba HOWTO collection
  27 </td></tr></table><p>
  28 </p></div><div class="sect1" lang="en"><div class="titlepage"><div><h2 class="title" style="clear: both"><a name="id2811215"></a>smbclient ignores -N !</h2></div></div><p>
  29 &#8220;When getting the list of shares available on a host using the command
  30 <b>smbclient -N -L</b>
  31 the program always prompts for the password if the server is a Samba server.
  32 It also ignores the &quot;-N&quot; argument when querying some (but not all) of our
  33 NT servers.
  34 &#8221;
  35 </p><p>
  36 No, it does not ignore -N, it is just that your server rejected the
  37 null password in the connection, so smbclient prompts for a password
  38 to try again.
  39 </p><p>
  40 To get the behaviour that you probably want use <b>smbclient -L host -U%</b>
  41 </p><p>
  42 This will set both the username and password to null, which is
  43 an anonymous login for SMB. Using -N would only set the password
  44 to null, and this is not accepted as an anonymous login for most
  45 SMB servers.
  46 </p></div><div class="sect1" lang="en"><div class="titlepage"><div><h2 class="title" style="clear: both"><a name="id2811270"></a>The data on the CD-Drive I've shared seems to be corrupted!</h2></div></div><p>
  47 Some OSes (notably Linux) default to auto detection of file type on
  48 cdroms and do cr/lf translation. This is a very bad idea when use with
  49 Samba. It causes all sorts of stuff ups.
  50 </p><p>
  51 To overcome this problem use conv=binary when mounting the cdrom
  52 before exporting it with Samba.
  53 </p></div><div class="sect1" lang="en"><div class="titlepage"><div><h2 class="title" style="clear: both"><a name="id2874350"></a>Why can users access home directories of other users?</h2></div></div><p>
  54 &#8220;
  55 We are unable to keep individual users from mapping to any other user's
  56 home directory once they have supplied a valid password! They only need
  57 to enter their own password. I have not found *any* method that I can
  58 use to configure samba to enforce that only a user may map their own
  59 home directory.
  60 &#8221;
  61 </p><p>&#8220;
  62 User xyzzy can map his home directory. Once mapped user xyzzy can also map
  63 *anyone* elses home directory!
  64 &#8221;</p><p>
  65 This is not a security flaw, it is by design. Samba allows
  66 users to have *exactly* the same access to the UNIX filesystem
  67 as they would if they were logged onto the UNIX box, except
  68 that it only allows such views onto the file system as are
  69 allowed by the defined shares.
  70 </p><p>
  71 This means that if your UNIX home directories are set up
  72 such that one user can happily cd into another users
  73 directory and do an ls, the UNIX security solution is to
  74 change the UNIX file permissions on the users home directories
  75 such that the cd and ls would be denied.
  76 </p><p>
  77 Samba tries very hard not to second guess the UNIX administrators
  78 security policies, and trusts the UNIX admin to set
  79 the policies and permissions he or she desires.
  80 </p><p>
  81 Samba does allow the setup you require when you have set the
  82 &quot;only user = yes&quot; option on the share, is that you have not set the
  83 valid users list for the share.
  84 </p><p>
  85 Note that only user works in conjunction with the users= list,
  86 so to get the behavior you require, add the line :
  87 </p><pre class="programlisting">
  88 users = %S
  89 </pre><p>
  90 this is equivalent to:
  91 </p><pre class="programlisting">
  92 valid users = %S
  93 </pre><p>
  94 to the definition of the [homes] share, as recommended in
  95 the smb.conf man page.
  96 </p></div><div class="sect1" lang="en"><div class="titlepage"><div><h2 class="title" style="clear: both"><a name="id2874436"></a>Until a few minutes after samba has started, clients get the error &quot;Domain Controller Unavailable&quot;</h2></div></div><p>
  97 A domain controller has to announce on the network who it is. This usually takes a while.
  98 </p></div><div class="sect1" lang="en"><div class="titlepage"><div><h2 class="title" style="clear: both"><a name="id2874451"></a>I'm getting &quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot; in the logs</h2></div></div><p>Your loopback device isn't working correctly. Make sure it's running.
  99 </p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="FAQ-ClientApp.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="samba-faq.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="FAQ-features.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 4. Specific client application problems </td><td width="20%" align="center"><a accesskey="h" href="samba-faq.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 6. Features</td></tr></table></div></body></html>