docs/faq/faq-errors.html

   1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
   2 <HTML
   3 ><HEAD
   4 ><TITLE
   5 >Common errors</TITLE
   6 ><META
   7 NAME="GENERATOR"
   8 CONTENT="Modular DocBook HTML Stylesheet Version 1.7"><LINK
   9 REL="HOME"
  10 TITLE="Samba FAQ"
  11 HREF="samba-faq.html"><LINK
  12 REL="PREVIOUS"
  13 TITLE="Specific client application problems"
  14 HREF="faq-clientapp.html"><LINK
  15 REL="NEXT"
  16 TITLE="Features"
  17 HREF="faq-features.html"></HEAD
  18 ><BODY
  19 CLASS="CHAPTER"
  20 BGCOLOR="#FFFFFF"
  21 TEXT="#000000"
  22 LINK="#0000FF"
  23 VLINK="#840084"
  24 ALINK="#0000FF"
  25 ><DIV
  26 CLASS="NAVHEADER"
  27 ><TABLE
  28 SUMMARY="Header navigation table"
  29 WIDTH="100%"
  30 BORDER="0"
  31 CELLPADDING="0"
  32 CELLSPACING="0"
  33 ><TR
  34 ><TH
  35 COLSPAN="3"
  36 ALIGN="center"
  37 >Samba FAQ</TH
  38 ></TR
  39 ><TR
  40 ><TD
  41 WIDTH="10%"
  42 ALIGN="left"
  43 VALIGN="bottom"
  44 ><A
  45 HREF="faq-clientapp.html"
  46 ACCESSKEY="P"
  47 >Prev</A
  48 ></TD
  49 ><TD
  50 WIDTH="80%"
  51 ALIGN="center"
  52 VALIGN="bottom"
  53 ></TD
  54 ><TD
  55 WIDTH="10%"
  56 ALIGN="right"
  57 VALIGN="bottom"
  58 ><A
  59 HREF="faq-features.html"
  60 ACCESSKEY="N"
  61 >Next</A
  62 ></TD
  63 ></TR
  64 ></TABLE
  65 ><HR
  66 ALIGN="LEFT"
  67 WIDTH="100%"></DIV
  68 ><DIV
  69 CLASS="CHAPTER"
  70 ><H1
  71 ><A
  72 NAME="FAQ-ERRORS"
  73 ></A
  74 >Chapter 5. Common errors</H1
  75 ><DIV
  76 CLASS="TOC"
  77 ><DL
  78 ><DT
  79 ><B
  80 >Table of Contents</B
  81 ></DT
  82 ><DT
  83 >5.1. <A
  84 HREF="faq-errors.html#AEN209"
  85 >Not listening for calling name</A
  86 ></DT
  87 ><DT
  88 >5.2. <A
  89 HREF="faq-errors.html#AEN216"
  90 >System Error 1240</A
  91 ></DT
  92 ><DT
  93 >5.3. <A
  94 HREF="faq-errors.html#AEN223"
  95 >smbclient ignores -N !</A
  96 ></DT
  97 ><DT
  98 >5.4. <A
  99 HREF="faq-errors.html#AEN232"
 100 >The data on the CD-Drive I've shared seems to be corrupted!</A
 101 ></DT
 102 ><DT
 103 >5.5. <A
 104 HREF="faq-errors.html#AEN236"
 105 >Why can users access home directories of other users?</A
 106 ></DT
 107 ><DT
 108 >5.6. <A
 109 HREF="faq-errors.html#AEN249"
 110 >Until a few minutes after samba has started, clients get the error "Domain Controller Unavailable"</A
 111 ></DT
 112 ><DT
 113 >5.7. <A
 114 HREF="faq-errors.html#AEN252"
 115 >I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</A
 116 ></DT
 117 ></DL
 118 ></DIV
 119 ><DIV
 120 CLASS="SECT1"
 121 ><H1
 122 CLASS="SECT1"
 123 ><A
 124 NAME="AEN209"
 125 >5.1. Not listening for calling name</A
 126 ></H1
 127 ><P
 128 ><PRE
 129 CLASS="PROGRAMLISTING"
 130 >Session request failed (131,129) with myname=HOBBES destname=CALVIN
 131 Not listening for calling name</PRE
 132 ></P
 133 ><P
 134 >If you get this when talking to a Samba box then it means that your
 135 global "hosts allow" or "hosts deny" settings are causing the Samba
 136 server to refuse the connection. </P
 137 ><P
 138 >Look carefully at your "hosts allow" and "hosts deny" lines in the
 139 global section of smb.conf. </P
 140 ><P
 141 >It can also be a problem with reverse DNS lookups not functioning
 142 correctly, leading to the remote host identity not being able to
 143 be confirmed, but that is less likely.</P
 144 ></DIV
 145 ><DIV
 146 CLASS="SECT1"
 147 ><H1
 148 CLASS="SECT1"
 149 ><A
 150 NAME="AEN216"
 151 >5.2. System Error 1240</A
 152 ></H1
 153 ><P
 154 >System error 1240 means that the client is refusing to talk
 155 to a non-encrypting server. Microsoft changed WinNT in service
 156 pack 3 to refuse to connect to servers that do not support
 157 SMB password encryption.</P
 158 ><P
 159 >There are two main solutions:
 160 <P
 161 ></P
 162 ><TABLE
 163 BORDER="0"
 164 ><TBODY
 165 ><TR
 166 ><TD
 167 >enable SMB password encryption in Samba. See the encryption part of
 168 the samba HOWTO Collection</TD
 169 ></TR
 170 ><TR
 171 ><TD
 172 >disable this new behaviour in NT. See the section about
 173 Windows NT in the chapter "Portability" of the samba HOWTO collection</TD
 174 ></TR
 175 ></TBODY
 176 ></TABLE
 177 ><P
 178 ></P
 179 ></P
 180 ></DIV
 181 ><DIV
 182 CLASS="SECT1"
 183 ><H1
 184 CLASS="SECT1"
 185 ><A
 186 NAME="AEN223"
 187 >5.3. smbclient ignores -N !</A
 188 ></H1
 189 ><P
 190 ><SPAN
 191 CLASS="QUOTE"
 192 >"When getting the list of shares available on a host using the command
 193 <B
 194 CLASS="COMMAND"
 195 >smbclient -N -L</B
 196 >
 197 the program always prompts for the password if the server is a Samba server.
 198 It also ignores the "-N" argument when querying some (but not all) of our
 199 NT servers."</SPAN
 200 ></P
 201 ><P
 202 >No, it does not ignore -N, it is just that your server rejected the
 203 null password in the connection, so smbclient prompts for a password
 204 to try again.</P
 205 ><P
 206 >To get the behaviour that you probably want use <B
 207 CLASS="COMMAND"
 208 >smbclient -L host -U%</B
 209 ></P
 210 ><P
 211 >This will set both the username and password to null, which is
 212 an anonymous login for SMB. Using -N would only set the password
 213 to null, and this is not accepted as an anonymous login for most
 214 SMB servers.</P
 215 ></DIV
 216 ><DIV
 217 CLASS="SECT1"
 218 ><H1
 219 CLASS="SECT1"
 220 ><A
 221 NAME="AEN232"
 222 >5.4. The data on the CD-Drive I've shared seems to be corrupted!</A
 223 ></H1
 224 ><P
 225 >Some OSes (notably Linux) default to auto detection of file type on
 226 cdroms and do cr/lf translation. This is a very bad idea when use with
 227 Samba. It causes all sorts of stuff ups.</P
 228 ><P
 229 >To overcome this problem use conv=binary when mounting the cdrom
 230 before exporting it with Samba.</P
 231 ></DIV
 232 ><DIV
 233 CLASS="SECT1"
 234 ><H1
 235 CLASS="SECT1"
 236 ><A
 237 NAME="AEN236"
 238 >5.5. Why can users access home directories of other users?</A
 239 ></H1
 240 ><P
 241 ><SPAN
 242 CLASS="QUOTE"
 243 >"We are unable to keep individual users from mapping to any other user's
 244 home directory once they have supplied a valid password! They only need
 245 to enter their own password. I have not found *any* method that I can
 246 use to configure samba to enforce that only a user may map their own
 247 home directory."</SPAN
 248 ></P
 249 ><P
 250 ><SPAN
 251 CLASS="QUOTE"
 252 >"User xyzzy can map his home directory. Once mapped user xyzzy can also map
 253 *anyone* elses home directory!"</SPAN
 254 ></P
 255 ><P
 256 >This is not a security flaw, it is by design. Samba allows
 257 users to have *exactly* the same access to the UNIX filesystem
 258 as they would if they were logged onto the UNIX box, except
 259 that it only allows such views onto the file system as are
 260 allowed by the defined shares.</P
 261 ><P
 262 >This means that if your UNIX home directories are set up
 263 such that one user can happily cd into another users
 264 directory and do an ls, the UNIX security solution is to
 265 change the UNIX file permissions on the users home directories
 266 such that the cd and ls would be denied.</P
 267 ><P
 268 >Samba tries very hard not to second guess the UNIX administrators
 269 security policies, and trusts the UNIX admin to set
 270 the policies and permissions he or she desires.</P
 271 ><P
 272 >Samba does allow the setup you require when you have set the
 273 "only user = yes" option on the share, is that you have not set the
 274 valid users list for the share.</P
 275 ><P
 276 >Note that only user works in conjunction with the users= list,
 277 so to get the behavior you require, add the line :
 278 <PRE
 279 CLASS="PROGRAMLISTING"
 280 >users = %S</PRE
 281 >
 282 this is equivalent to:
 283 <PRE
 284 CLASS="PROGRAMLISTING"
 285 >valid users = %S</PRE
 286 >
 287 to the definition of the [homes] share, as recommended in
 288 the smb.conf man page.</P
 289 ></DIV
 290 ><DIV
 291 CLASS="SECT1"
 292 ><H1
 293 CLASS="SECT1"
 294 ><A
 295 NAME="AEN249"
 296 >5.6. Until a few minutes after samba has started, clients get the error "Domain Controller Unavailable"</A
 297 ></H1
 298 ><P
 299 >A domain controller has to announce on the network who it is. This usually takes a while.</P
 300 ></DIV
 301 ><DIV
 302 CLASS="SECT1"
 303 ><H1
 304 CLASS="SECT1"
 305 ><A
 306 NAME="AEN252"
 307 >5.7. I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs</A
 308 ></H1
 309 ><P
 310 >Your loopback device isn't working correctly. Make sure it's running.</P
 311 ></DIV
 312 ></DIV
 313 ><DIV
 314 CLASS="NAVFOOTER"
 315 ><HR
 316 ALIGN="LEFT"
 317 WIDTH="100%"><TABLE
 318 SUMMARY="Footer navigation table"
 319 WIDTH="100%"
 320 BORDER="0"
 321 CELLPADDING="0"
 322 CELLSPACING="0"
 323 ><TR
 324 ><TD
 325 WIDTH="33%"
 326 ALIGN="left"
 327 VALIGN="top"
 328 ><A
 329 HREF="faq-clientapp.html"
 330 ACCESSKEY="P"
 331 >Prev</A
 332 ></TD
 333 ><TD
 334 WIDTH="34%"
 335 ALIGN="center"
 336 VALIGN="top"
 337 ><A
 338 HREF="samba-faq.html"
 339 ACCESSKEY="H"
 340 >Home</A
 341 ></TD
 342 ><TD
 343 WIDTH="33%"
 344 ALIGN="right"
 345 VALIGN="top"
 346 ><A
 347 HREF="faq-features.html"
 348 ACCESSKEY="N"
 349 >Next</A
 350 ></TD
 351 ></TR
 352 ><TR
 353 ><TD
 354 WIDTH="33%"
 355 ALIGN="left"
 356 VALIGN="top"
 357 >Specific client application problems</TD
 358 ><TD
 359 WIDTH="34%"
 360 ALIGN="center"
 361 VALIGN="top"
 362 >&nbsp;</TD
 363 ><TD
 364 WIDTH="33%"
 365 ALIGN="right"
 366 VALIGN="top"
 367 >Features</TD
 368 ></TR
 369 ></TABLE
 370 ></DIV
 371 ></BODY
 372 ></HTML
 373 >