Trouble Accessing linux samba server

[Michael Powell]

I have a debian linux box that is running samba server. I also have an
OS/2 box that was able to access the shares on the samba server.
I recently upgraded to debian 5.0 which includes a newer version of
samba, 2:3.2.5.

Now, OS/2 cannot access any of the shares on the samba server, even the
ones that are not password protected. The last time I had this problem,
I had to add a couple of lines to my samba config file, and they are
still there:

ea support = Yes
mfdfs root = Yes

I am guessing that there is another setting that samba has changed the
default on, or some other change that has taken place which has cut off
access to the box.

I also have a WinXP box, and it is still able to access all shares.

Is anyone else having this problem? If so, what did you do to correct
it? Thanks!

[Sjoerd Visser]

Post by Michael Powell
I have a debian linux box that is running samba server. I also have an
OS/2 box that was able to access the shares on the samba server.
I recently upgraded to debian 5.0 which includes a newer version of
samba, 2:3.2.5.
Now, OS/2 cannot access any of the shares on the samba server, even the
ones that are not password protected. The last time I had this problem,
I had to add a couple of lines to my samba config file, and they are
ea support = Yes
mfdfs root = Yes
I am guessing that there is another setting that samba has changed the
default on, or some other change that has taken place which has cut off
access to the box.
I also have a WinXP box, and it is still able to access all shares.
Is anyone else having this problem? If so, what did you do to correct
it? Thanks!

The most important one is:
smb.conf

lanman auth = Yes

This is what OS/2 (not the netdrive pluin) requires.

From a working configuration (accepting peer-to-peer and domain logons).

[global]
workgroup = THUIS
netbios name = ZOLDER
server string = Samba %v at %h
interfaces = 192.168.1.2/255.255.255.0
bind interfaces only = Yes
map to guest = Bad User
log level = 3
printcap name = cups
add machine script = /usr/sbin/useradd -c Machine -d /var/lib/nobody
-s /bin/false %m$
logon path = \\%L\profiles\.msprofile
logon drive = T:
logon home = \\%L\%U\.w2kprofile
domain logons = Yes
security = user
os level = 65
preferred master = Yes
local master = Yes
domain master = Yes
wins support = Yes
name resolve order = lmhosts bcast hosts wins
ldap ssl = no
ea support = Yes
cups options = raw
store dos attributes = Yes
passdb backend = smbpasswd
usershare max shares = 100
# OS/2 samba server related
disable netbios = No
lm announce = Yes
lm interval = 60
min protocol = LANMAN2
# max protocol = NT1
lanman auth = Yes
ntlm auth = Yes
# Tips van Gunter K
map archive = No
map hidden = No
map system = No
map readonly = No
# smbclient related
client lanman auth = Yes
client plaintext auth = No
usershare allow guests = No


Cannot find path to OS/2 errors with net use and net view happen much
less often if you also run the nmb server (also with the OS/2 samba server).

# This file provides the same function that the lmhosts file does for
# Windows. It's another way to map netbios names to ip addresses.
#
# See section 'name resolve order' in the manual page of smb.conf for
# more information.

127.0.0.1 localhost
192.168.1.2 zolder
192.168.1.5 multiboot






Greetings,

Sjoerd Visser

[Michael Powell]

Post by Sjoerd Visser

Post by Michael Powell
I have a debian linux box that is running samba server. I also have an
OS/2 box that was able to access the shares on the samba server.
I recently upgraded to debian 5.0 which includes a newer version of
samba, 2:3.2.5.
Now, OS/2 cannot access any of the shares on the samba server, even the
ones that are not password protected. The last time I had this problem,
I had to add a couple of lines to my samba config file, and they are
ea support = Yes
mfdfs root = Yes
I am guessing that there is another setting that samba has changed the
default on, or some other change that has taken place which has cut off
access to the box.
I also have a WinXP box, and it is still able to access all shares.
Is anyone else having this problem? If so, what did you do to correct
it? Thanks!

[snip]

Post by Sjoerd Visser
Cannot find path to OS/2 errors with net use and net view happen much
less often if you also run the nmb server (also with the OS/2 samba server).
# This file provides the same function that the lmhosts file does for
# Windows. It's another way to map netbios names to ip addresses.
#
# See section 'name resolve order' in the manual page of smb.conf for
# more information.
127.0.0.1 localhost
192.168.1.2 zolder
192.168.1.5 multiboot

thank you. I tried adding some of the settings from your smb.conf file,
but was still not able to get OS/2 to find the samba box. I am able to
ping it fine, but 'new view \\server' does not give results for that box.
What is the name of the file that you have included above, with the ip
addresses? Maybe I need to add my os/2 box to it on the debian server?

Here is my smb.conf file:

# Samba config file created using SWAT
# from UNKNOWN ()
# Date: 2009/04/18 08:38:28

[global]
workgroup = xxx
server string = xxx
interfaces = 127.0.0.1/8, xxx.xxx.xxx.yyy
bind interfaces only = Yes
security = SHARE
# Added these two lines 04/2009 for Win9x
client lanman auth = Yes
lanman auth = Yes
# End addition
update encrypted = Yes
client schannel = No
server schannel = No
allow trusted domains = No
obey pam restrictions = Yes
guest account = smbguest
passwd program = /usr/bin/passwd '%u'
passwd chat = *New*password* %n\n *ReType*new*password* %n\n *passwd*changed*\n
passwd chat timeout = 120
username map = /etc/samba/smbusers
log level = 10
log file = /var/log/samba/samba.log
max log size = 1000
name resolve order = wins lmhosts bcast hosts
client signing = No
client use spnego = No
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = cups
machine password timeout = 120
add user script = /usr/sbin/useradd -d /dev/null -c 'Samba User Account' -s /dev/null '%u'
delete user script = /usr/sbin/userdel '%u'
add group script = /usr/sbin/groupadd '%g'
delete group script = /usr/sbin/groupdel '%g'
add user to group script = /usr/sbin/useradd -d /dev/null -c 'Samba User Account' -s /dev/null -g '%g' '%u'
delete user from group script = /usr/sbin/userdel '%u' '%g'
add machine script = /usr/sbin/useradd -d /dev/null -g sambamachines -c 'Samba Machine Account' -s /dev/null -M '%u'
logon script = %G.bat
logon path = \\%L\profiles\%u
logon drive = m:
logon home = \\%L\homes\%u
os level = 33
local master = No
domain master = No
dns proxy = No
remote announce = xxx.xxx.xxx.255
remote browse sync = xxx.xxx.xxx.255
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
template shell = /dev/null
winbind separator = @
winbind cache time = 360
winbind use default domain = Yes
winbind trusted domains only = Yes
winbind nested groups = No
winbind nss info = no
hosts allow = 127., xxx.xxx.xxx.
cups options = raw
follow symlinks = No
# Added these lines when upgrading to etch
# they did allow OS/2 access
ea support = Yes
msdfs root = Yes
# Additional os/2 stuff 4/2009
disable netbios = No
lm announce = Yes
lm interval = 60
min protocol = LANMAN2
ntlm auth = Yes
# End addition

[homes]
comment = Home Directories
path = /home
# username = xxx
read only = No
locking = No
available = Yes
browseable = Yes
writable = Yes

[netlogon]
comment = Network Logon Service
path = /home/netlogon
locking = No

[profiles]
comment = User Profiles
path = /var/samba/profiles
read only = No
create mask = 0600
directory mask = 0700
browseable = No
locking = No

[printers]
comment = All Printers
path = /var/spool/samba
read only = No
guest ok = Yes
printable = Yes
browseable = No
locking = No
share modes = No

[pdf-documents]
comment = Converted PDF Documents
path = /home/pdf-documents
read only = No
guest ok = Yes

[pdf-printer]
comment = PDF Printer Service
path = /tmp
guest ok = Yes
printable = Yes
printing = bsd
print command = /usr/bin/gadmin-samba-pdf %s %u
lpq command =
lprm command = lprm -P'%p' %j
use client driver = Yes

[archive]
path = /mnt/hda5
read only = No
guest ok = Yes


Thanks for your help!

[Sjoerd Visser]

Post by Michael Powell

Post by Sjoerd Visser

Post by Michael Powell
I have a debian linux box that is running samba server. I also have an
OS/2 box that was able to access the shares on the samba server.
I recently upgraded to debian 5.0 which includes a newer version of
samba, 2:3.2.5.
Now, OS/2 cannot access any of the shares on the samba server, even the
ones that are not password protected. The last time I had this problem,
I had to add a couple of lines to my samba config file, and they are
ea support = Yes
mfdfs root = Yes
I am guessing that there is another setting that samba has changed the
default on, or some other change that has taken place which has cut off
access to the box.
I also have a WinXP box, and it is still able to access all shares.
Is anyone else having this problem? If so, what did you do to correct
it? Thanks!

[snip]

Post by Sjoerd Visser
Cannot find path to OS/2 errors with net use and net view happen much
less often if you also run the nmb server (also with the OS/2 samba server).
# This file provides the same function that the lmhosts file does for
# Windows. It's another way to map netbios names to ip addresses.
#
# See section 'name resolve order' in the manual page of smb.conf for
# more information.
127.0.0.1 localhost
192.168.1.2 zolder
192.168.1.5 multiboot

thank you. I tried adding some of the settings from your smb.conf file,
but was still not able to get OS/2 to find the samba box. I am able to
ping it fine, but 'new view \\server' does not give results for that box.

When it can be pinged under its hostname it is not automatically
recognized by NetBIOS.
OS/2 makes a difference between NetBIOS and hostnames (samba and
Windows do normally not).
So the servername must be listed in \IBMCOM\RFCNAMES.LST:
"connect" connect
"deskpro" deskpro
"laptop" laptop
"os2server" 192.168.1.6

This tells OS/2 explicitly that the LM client with the NetBIOS name
"laptop" also uses the (IP) hostname laptop (which IP adress must be
resolved via the hostfile \MPTN\ETC\hosts or the routers nameserver).

I think Samba can also acts as a NetBIOS name server (but nmb must
first be running fine)

\ibmcom\protocol.ini
[tcpbeui_nif]
NBNSADDR = "192.168.123.2"

If you want the server to respond to the OS/2 LM announce enter its
(resolvable) ip adres or hostname in :
\IBMCOM\RFCBCST.LST
192.168.1.255
os2server
zolder
deskpro

Post by Michael Powell
What is the name of the file that you have included above, with the ip
addresses? Maybe I need to add my os/2 box to it on the debian server?

I think that woulp help. But only when you also start the nmb server
(that reads the file first with :name resolve order = lmhosts bcast
hosts wins in smb.conf) .

The lm host file is /etc/samba/lmhosts (Suse).
It is the equivalent of \IBMCOM\RFCNAMES.LST

Post by Michael Powell
# Samba config file created using SWAT
# from UNKNOWN ()
# Date: 2009/04/18 08:38:28
[global]
workgroup = xxx
server string = xxx
interfaces = 127.0.0.1/8, xxx.xxx.xxx.yyy
bind interfaces only = Yes
security = SHARE

# Why not USER?

Post by Michael Powell
# Added these two lines 04/2009 for Win9x
client lanman auth = Yes
lanman auth = Yes

# Needed by OS/2 as well

Post by Michael Powell
# End addition
update encrypted = Yes

# Not needed anymore.

Post by Michael Powell
client schannel = No
server schannel = No
allow trusted domains = No
obey pam restrictions = Yes
guest account = smbguest
passwd program = /usr/bin/passwd '%u'
passwd chat = *New*password* %n\n *ReType*new*password* %n\n *passwd*changed*\n
passwd chat timeout = 120
username map = /etc/samba/smbusers
log level = 10
log file = /var/log/samba/samba.log
max log size = 1000
name resolve order = wins lmhosts bcast hosts

# Do you have a MS WINS server? If not:
# name resolve order = lmhosts bcast hosts wins

Post by Michael Powell
client signing = No
client use spnego = No
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = cups
machine password timeout = 120
add user script = /usr/sbin/useradd -d /dev/null -c 'Samba User Account' -s /dev/null '%u'
delete user script = /usr/sbin/userdel '%u'
add group script = /usr/sbin/groupadd '%g'
delete group script = /usr/sbin/groupdel '%g'
add user to group script = /usr/sbin/useradd -d /dev/null -c 'Samba User Account' -s /dev/null -g '%g' '%u'
delete user from group script = /usr/sbin/userdel '%u' '%g'
add machine script = /usr/sbin/useradd -d /dev/null -g sambamachines -c 'Samba Machine Account' -s /dev/null -M '%u'
logon script = %G.bat
logon path = \\%L\profiles\%u
logon home = \\%L\homes\%u
os level = 33
local master = No
domain master = No
dns proxy = No
remote announce = xxx.xxx.xxx.255
remote browse sync = xxx.xxx.xxx.255
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
template shell = /dev/null
winbind cache time = 360
winbind use default domain = Yes
winbind trusted domains only = Yes
winbind nested groups = No
winbind nss info = no
hosts allow = 127., xxx.xxx.xxx.
cups options = raw
follow symlinks = No
# Added these lines when upgrading to etch
# they did allow OS/2 access
ea support = Yes
msdfs root = Yes
# Additional os/2 stuff 4/2009
disable netbios = No
lm announce = Yes
lm interval = 60
min protocol = LANMAN2
ntlm auth = Yes
# End addition
[homes]
comment = Home Directories
path = /home
# username = xxx
read only = No
locking = No
available = Yes
browseable = Yes
writable = Yes
[netlogon]
comment = Network Logon Service
path = /home/netlogon
locking = No
[profiles]
comment = User Profiles
path = /var/samba/profiles
read only = No
create mask = 0600
directory mask = 0700
browseable = No
locking = No
[printers]
comment = All Printers
path = /var/spool/samba
read only = No
guest ok = Yes
printable = Yes
browseable = No
locking = No
share modes = No
[pdf-documents]
comment = Converted PDF Documents
path = /home/pdf-documents
read only = No
guest ok = Yes
[pdf-printer]
comment = PDF Printer Service
path = /tmp
guest ok = Yes
printable = Yes
printing = bsd
print command = /usr/bin/gadmin-samba-pdf %s %u
lpq command =
lprm command = lprm -P'%p' %j
use client driver = Yes
[archive]
path = /mnt/hda5
read only = No
guest ok = Yes
Thanks for your help!

I think you should have a look at the OS/2 side 1st
(\IBMCOM\RFCNAMES.LST).