[Samba] samba option for users to have admin rights for their machine

2002-05-19 Thread Bilal Dar,5726133

Hi,
I want to know something, i configured samba and its working fine so far. But i was 
told by boss that the user of a machine should hav administrative rights for their own 
machine. I have no idea how to do this and i cant find it in documentation as well. 
Kindly if anyone knows about it do letme know.

Thanks

Regards,
Dar.
Bilal Dar,
e-mail: [EMAIL PROTECTED]


--
Go Net

The right way to go ...

http://www.go.net.pk




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Queries on samba with roaming profiles

2002-05-19 Thread Hardi Gunawan

Yes, I do have logon path and a profiles share, with it set writable.  In 
fact, when I add a IE favorite, it is roaming (when I login to another 
desktop, the favorites are mine).

I got to correct my previous statement.  Outlook didn't create the personal 
folder file in C:\Documents and Settings\username\Local Settings\ ..
It is "looking" for the personal folder in that directory and it is nowhere to 
be found.

So my steps are:
1) login into wks1 for the first time with username1 and setup outlook 2000 
(never ask where to put the personal folder files).  And I add a Favorite 
just for testing whether roaming profiles is working

2) logout from wks1 and login into wks2 for the first time with username1

3) Open up Outlook in wks2, and the error of not finding the personal 
folder.pst file in c:\documents and settings\username\Local Settings\
appears.  But IE's favorite is there.  So I guess the roaming profiles works?

4) logout from wks2 and login into wks1 again, but with username2

5) I can see c:\documents and settings\username1 and username2.  But I can't 
open username1 directory (that's a relief!).  But I was wondering why does 
the folder even be there?  I thought it would be removed once the user 
logout?  Does that mean the roaming profiles doesn't work?

:) This is getting confusing

On Monday 20 May 2002 6:07 am, Neil Muller wrote:
> Have you got a "login path" entry in your smb.conf? For w2k it seems you
> need login path and a profiles share in smb.conf. I also had to make the
> directory named in my profiles section writeable by all. The entries in my
> smb.conf file are:
>
> [global]
> .
> .
>   logon path = \\%N\profiles\%U
> .
> .
> [profiles]
>   path = /usr/local/samba/profiles
>   read only = no
>   create mask = 0600
>   directory mask = 0766
>   browseable = yes
>
>
>
> Neil
>
> Quoting Hardi Gunawan <[EMAIL PROTECTED]>:
> > I've some queries on Samba, hope that someone in the mailing list can
> > help me
> >
> > :)
> >
> > 1) I've Samba PDC with W2k workstation (w2kwks).  When I login into
> > w2kwks, it
> > created a folder with my username in C:\Documents and Settings directory
> >
> > (which I think is the roaming profile directory?)
> >
> > 2) When I configure Outlook 2000 on the w2kwks (for imap), it
> > automatically
> > create a Personal Folder in C:\Documents and Settings\username\Local
> > Settings.  But seems that the Local Settings directory is not roaming
> > (even
> > though it's inside the c:\Documents and Settings\username directory)?
> >
> > 3) When I logout and login as another user, I can see the previous
> > user's
> > folder in C:\Documents and Settings (I can't open it though).  Is this
> >
> > normal?  I thought it should get deleted when the user logout?
> >
> > There must be something wrong with the way I setup Samba PDC.. :(
> >
> > Thank you.
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
>
> ---
> Neil Muller
> Neologix Pty Ltd
> http://www.neologix.net
> PO Box 3183, Weston Creek, ACT, 2611, Australia
> email: [EMAIL PROTECTED]
> voice: +61 2 62875900fax:   +61 2 62875911
> mob:   +61 408 977 976


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] NT_STATUS_INVALID_DOMAIN_ROLE

2002-05-19 Thread Sergey Klusov

Hello samba,

here is my config:

[global]
   netbios name = tech-server
   workgroup = SAGAPROJECT
   security = domain
   password server = SERVER
   encrypt passwords = yes

machine SERVER is accessible and works
   
ATTEMPT #1

lion@tech-server:/usr/local/etc# smbpasswd -D 3 -j SAGAPROJECT -r server -Ujoker
Initialising global parameters
params.c:pm_process() - Processing configuration file "/usr/local/etc/smb.conf"
Processing section "[global]"
added interface ip=172.16.1.9 bcast=172.16.1.255 nmask=255.255.255.0
Password:
resolve_lmhosts: Attempting lmhosts lookup for name server<0x20>
resolve_hosts: Attempting host lookup for name server<0x20>
Connecting to 172.16.1.10 at port 445
error connecting to 172.16.1.10:445 (Invalid argument)
Connecting to 172.16.1.10 at port 139
failed session request
Error connecting to server
Unable to join domain SAGAPROJECT.

ATTEMPT #2

lion@tech-server:/usr/local/etc# smbpasswd -D 3 -j SAGAPROJECT -Ujoker
Initialising global parameters
params.c:pm_process() - Processing configuration file "/usr/local/etc/smb.conf"
Processing section "[global]"
added interface ip=172.16.1.9 bcast=172.16.1.255 nmask=255.255.255.0
Password:
resolve_lmhosts: Attempting lmhosts lookup for name SERVER<0x20>
resolve_hosts: Attempting host lookup for name SERVER<0x20>
bind succeeded on port 0
Connecting to 172.16.1.10 at port 445
error connecting to 172.16.1.10:445 (Invalid argument)
Connecting to 172.16.1.10 at port 139
session setup ok
Domain=[SAGAPROJECT] OS=[Windows NT 4.0] Server=[NT LAN Manager 4.0]
lsa_io_sec_qos: length c does not match size 8
error creating domain user: NT_STATUS_INVALID_DOMAIN_ROLE
Unable to join domain SAGAPROJECT.


what's wrong?

-- 
Best regards,
 Sergey  mailto:[EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] winbind and FreeBSD

2002-05-19 Thread Andrew Bartlett

Robert Collins wrote:
> 
> Has anyone gotten, and/or can point me to some documentation that talks
> about, getting winbind running on FreeBSD? Preferably without linux-compat
> enabled.

While winbind should work fine under FreeBSD, the bit you probably want
(that actually gives you the functionality) is winbind_nss and relies on
FreeBSD supporting nsswitch.

My understanding is that currently it doesn't.  They have a
nsswitch.conf, but you can only select from the libc backends - not an
aribitary .so.

So, you are free to use it for PAM, NTLM-and-apache/squid, but not for
the normal 'get my unix users' stuff.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] WinBind does not work well with Rational ClearCase (bugfix atta ched :)

2002-05-19 Thread Andrew Bartlett

Stephen Jazdzewski wrote:
> 
> >You are accessing clearcase on UNIX right?
> Yes we will be.  But not right now.  Since ClearCase will not support Unix
> clients from a Windows VOB server, we started with a Linux Server even though
> our first clients are all windows.
> 
> >Not through Samba.
> No, we are using Samba in addition to WinBind.  I am fuzzy on why ClearCase
> needs Samba in addition to it's own stuff.  I think that is how the Windows
> View Server talks to the Unix VOB Server.
> 
> >You need winbindd so that Windows domain users can have a UNIX account
> >and access the respoitory on the UNIX server.  Right?
> Yes that is correct.

What type of DC?  ADS or NT4?

> Most sites can control the primary windows group users get for any Domain.  We
> can add users to a clearcase group, but can't make it the user's primary
> group.  clearcase has a patch to get around it under Windows.  They use a
> special environment variable.
> 
> I limited the "winbind primary group" so it would only set the primary group
> if the user is actually a member of the group in the first place.  But this
> can be overridden with the "winbind force primary".  The primary group value
> is a RID and *not* a Unix GID.

Assuming this is a problem only for access *via* samba, and that you
*can* change the windows primary group (I'm not sure this applies in
your case, but I'll detail the solution anyway) we can fix this.

I'm doing some work in HEAD for this kind of thing, and I'll be changing
the code so that the users' Windows primary group (as specified by the
returned NET_USER_INFO3) becomes their unix primary group for Samba's
internal stuff.

Currently we do a getpwnam(), which returnes "Domain Users" for all NT4
based users (or all users for 2.2).  (At least I think we do that for
getpwnam, we certainly do it for getpwent()).

I'll be chaning it so that it simply does a sid->gid on the Users
primary group sid, and uses that.

This will have the same effect as a normal 'force group' directive, but
be 'general' to the problem, rather than a hack workaround...

> I suspect if I use Andrew's suggestion and set g+s on the directories it may
> work, and this has worked for me in the past when using NFS & NIS+.  But one
> of the first questions on the pre-techsupport droid's check list is "type 'id'
> and read me your default user group...".

This should work better with HEAD and an ADS backend.  We don't have to
fudge the primary group in that case.

> This default group thing has *never* been a problem for me under Unix.
> 
> Once I applied the patch, clearcase started working like a charm.
> 
> -Stephen
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Can't join Samba PDC from Win2k

2002-05-19 Thread Neil Muller


I forgot to add that to join the domain from w2k I didn't use the wizard.
Instead I went to the properties button on the system->identity notebook page
and clicked the domain radio button, typed in the domain I wanted the machine to
join and then clicked the ok button. W2K prompts for some machine information
and then a userid and pasword of someone authorised to join the machine to the
domain. This is where I entered root and the root password. Everthing worked
fine after that.

Neil


Quoting Neil Muller <[EMAIL PROTECTED]>:

> 
> I went through exactly the same thing over the weekend and after help
> from this
> list I got it all working. What I had to do was add settings for domain
> admin
> group and domain admin users to my smb.conf global section (both items
> were set
> to root) and I also made root a samba user. If you have done all this
> and its
> still not working make sure the machine trust account is being created
> correctly
> (check smbpasswd and /etc/passwd for entries with your w2k machine name
> with a $
> appended.
> 
> Neil


> 
> 
> 
> 
> 
> Quoting Brian Lavender <[EMAIL PROTECTED]>:
> 
> > I am trying to make my Samba server act as a domain controller, but
> I
> > can't join the domain. When I go into Windows 2k and I right click
> the
> > computer, the properties button, and try to make it a part of the
> > domain,
> > it asks me for a user account, and a password. I am not sure what
> user
> > account to type in here. What user account do I type in?
> > 
> > Below is my smb.conf file. I followed the howto from 
> > 
> > ftp://us6.samba.org/pub/samba/docs/htmldocs/Samba-PDC-HOWTO.html
> > 
> > and you can see where I put the adduser in my global configuration
> so
> > a machine is added automatically.
> > 
> > # from linux.local (127.0.0.2)
> > # Date: 2002/05/18 21:55:34
> > 
> > # Global parameters
> > [global]
> > netbios name = DASERVER
> > workgroup = CHEDDAR
> > map to guest = Bad User
> > socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
> > character set = ISO8859-15
> > 
> > os level = 64
> > preferred master = yes
> > domain master = yes
> > local master = yes
> > 
> > security = user
> > 
> > encrypt passwords = Yes
> > 
> > domain logons = yes
> > 
> > logon path = \\%N\profiles\%u
> > 
> > logon drive = H:
> > logon home = "\\%N\%U"
> > 
> > logon script = logon.cmd
> > 
> > printing = lprng
> > veto files = /*.eml/*.nws/riched20.dll/*.{*}/
> > 
> > add user script = /usr/sbin/useradd -d /dev/null -g 100 -s
> /bin/false
> > -M %u 
> > 
> > 
> > [homes]
> > comment = Home Directories
> > read only = No
> > create mask = 0640
> > directory mask = 0750
> > browseable = No
> > 
> > [printers]
> > comment = All Printers
> > path = /var/tmp
> > create mask = 0600
> > printable = Yes
> > browseable = No
> > 
> > ;DOMAIN SPECIFIC INFO
> > [netlogon]
> > comment = NETLOGON service
> > path = /home/netlogon
> > read only = yes
> > write list = ntadmin
> > 
> > [profiles]
> > path = /home/profiles
> > read only = no
> > create mask = 0600
> > directory mask = 0700
> > 
> > 
> > 
> > -- 
> > Brian Lavender
> > http://www.brie.com/brian/
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > 
> 
> 
> 
> ---
> Neil Muller
> Neologix Pty Ltd
> http://www.neologix.net
> PO Box 3183, Weston Creek, ACT, 2611, Australia
> email: [EMAIL PROTECTED]
> voice: +61 2 62875900fax:   +61 2 62875911   
> mob:   +61 408 977 976
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 



---
Neil Muller
Neologix Pty Ltd
http://www.neologix.net
PO Box 3183, Weston Creek, ACT, 2611, Australia
email: [EMAIL PROTECTED]
voice: +61 2 62875900fax:   +61 2 62875911   
mob:   +61 408 977 976


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Can't join Samba PDC from Win2k

2002-05-19 Thread Neil Muller


I went through exactly the same thing over the weekend and after help from this
list I got it all working. What I had to do was add settings for domain admin
group and domain admin users to my smb.conf global section (both items were set
to root) and I also made root a samba user. If you have done all this and its
still not working make sure the machine trust account is being created correctly
(check smbpasswd and /etc/passwd for entries with your w2k machine name with a $
appended.

Neil





Quoting Brian Lavender <[EMAIL PROTECTED]>:

> I am trying to make my Samba server act as a domain controller, but I
> can't join the domain. When I go into Windows 2k and I right click the
> computer, the properties button, and try to make it a part of the
> domain,
> it asks me for a user account, and a password. I am not sure what user
> account to type in here. What user account do I type in?
> 
> Below is my smb.conf file. I followed the howto from 
> 
> ftp://us6.samba.org/pub/samba/docs/htmldocs/Samba-PDC-HOWTO.html
> 
> and you can see where I put the adduser in my global configuration so
> a machine is added automatically.
> 
> # from linux.local (127.0.0.2)
> # Date: 2002/05/18 21:55:34
> 
> # Global parameters
> [global]
>   netbios name = DASERVER
>   workgroup = CHEDDAR
>   map to guest = Bad User
>   socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
>   character set = ISO8859-15
> 
>   os level = 64
>   preferred master = yes
>   domain master = yes
>   local master = yes
> 
>   security = user
> 
>   encrypt passwords = Yes
> 
>   domain logons = yes
> 
>   logon path = \\%N\profiles\%u
>   
>   logon drive = H:
>   logon home = "\\%N\%U"
> 
>   logon script = logon.cmd
> 
>   printing = lprng
>   veto files = /*.eml/*.nws/riched20.dll/*.{*}/
> 
>   add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false
> -M %u 
> 
> 
> [homes]
>   comment = Home Directories
>   read only = No
>   create mask = 0640
>   directory mask = 0750
>   browseable = No
> 
> [printers]
>   comment = All Printers
>   path = /var/tmp
>   create mask = 0600
>   printable = Yes
>   browseable = No
> 
> ;DOMAIN SPECIFIC INFO
> [netlogon]
>   comment = NETLOGON service
>   path = /home/netlogon
>   read only = yes
>   write list = ntadmin
> 
> [profiles]
>   path = /home/profiles
>   read only = no
>   create mask = 0600
>   directory mask = 0700
>   
> 
> 
> -- 
> Brian Lavender
> http://www.brie.com/brian/
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 



---
Neil Muller
Neologix Pty Ltd
http://www.neologix.net
PO Box 3183, Weston Creek, ACT, 2611, Australia
email: [EMAIL PROTECTED]
voice: +61 2 62875900fax:   +61 2 62875911   
mob:   +61 408 977 976


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Can't join Samba PDC from Win2k

2002-05-19 Thread Brian Lavender

On Sun, May 19, 2002 at 03:47:53PM -0700, Brian Lavender wrote:
> I am trying to make my Samba server act as a domain controller, but I
> can't join the domain. When I go into Windows 2k and I right click the
> computer, the properties button, and try to make it a part of the domain,
> it asks me for a user account, and a password. I am not sure what user
> account to type in here. What user account do I type in?

Here's more info on the error I am getting when I try to join the
Domain. It asks me:

Enter the name and password of an account with permission to join
the domain
user: brian
password: 

"Click Ok"

It pauses for a few moments, and here is the error I get:

The following error occurred attempting to join the domain "cheddar"
The account used is a computer account. Use your global user account or
local user account to access this server.

I have a user account on the "cheddar" domain. What am I doing wrong?

brian
-- 
Brian Lavender
http://www.brie.com/brian/

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Can't join Samba PDC from Win2k

2002-05-19 Thread Brian Lavender

I am trying to make my Samba server act as a domain controller, but I
can't join the domain. When I go into Windows 2k and I right click the
computer, the properties button, and try to make it a part of the domain,
it asks me for a user account, and a password. I am not sure what user
account to type in here. What user account do I type in?

Below is my smb.conf file. I followed the howto from 

ftp://us6.samba.org/pub/samba/docs/htmldocs/Samba-PDC-HOWTO.html

and you can see where I put the adduser in my global configuration so
a machine is added automatically.

# from linux.local (127.0.0.2)
# Date: 2002/05/18 21:55:34

# Global parameters
[global]
netbios name = DASERVER
workgroup = CHEDDAR
map to guest = Bad User
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
character set = ISO8859-15

os level = 64
preferred master = yes
domain master = yes
local master = yes

security = user

encrypt passwords = Yes

domain logons = yes

logon path = \\%N\profiles\%u

logon drive = H:
logon home = "\\%N\%U"

logon script = logon.cmd

printing = lprng
veto files = /*.eml/*.nws/riched20.dll/*.{*}/

add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u 


[homes]
comment = Home Directories
read only = No
create mask = 0640
directory mask = 0750
browseable = No

[printers]
comment = All Printers
path = /var/tmp
create mask = 0600
printable = Yes
browseable = No

;DOMAIN SPECIFIC INFO
[netlogon]
comment = NETLOGON service
path = /home/netlogon
read only = yes
write list = ntadmin

[profiles]
path = /home/profiles
read only = no
create mask = 0600
directory mask = 0700



-- 
Brian Lavender
http://www.brie.com/brian/

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Queries on samba with roaming profiles

2002-05-19 Thread Neil Muller



Have you got a "login path" entry in your smb.conf? For w2k it seems you need
login path and a profiles share in smb.conf. I also had to make the directory
named in my profiles section writeable by all. The entries in my smb.conf file are:

[global]
.
.
  logon path = \\%N\profiles\%U
.
.
[profiles]
  path = /usr/local/samba/profiles
  read only = no
  create mask = 0600
  directory mask = 0766
  browseable = yes



Neil






Quoting Hardi Gunawan <[EMAIL PROTECTED]>:

> I've some queries on Samba, hope that someone in the mailing list can
> help me 
> :)
> 
> 1) I've Samba PDC with W2k workstation (w2kwks).  When I login into
> w2kwks, it 
> created a folder with my username in C:\Documents and Settings directory
> 
> (which I think is the roaming profile directory?)
> 
> 2) When I configure Outlook 2000 on the w2kwks (for imap), it
> automatically 
> create a Personal Folder in C:\Documents and Settings\username\Local 
> Settings.  But seems that the Local Settings directory is not roaming
> (even 
> though it's inside the c:\Documents and Settings\username directory)?
> 
> 3) When I logout and login as another user, I can see the previous
> user's 
> folder in C:\Documents and Settings (I can't open it though).  Is this
> 
> normal?  I thought it should get deleted when the user logout?
> 
> There must be something wrong with the way I setup Samba PDC.. :(
> 
> Thank you.
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 



---
Neil Muller
Neologix Pty Ltd
http://www.neologix.net
PO Box 3183, Weston Creek, ACT, 2611, Australia
email: [EMAIL PROTECTED]
voice: +61 2 62875900fax:   +61 2 62875911   
mob:   +61 408 977 976


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Samba and windows 2K Active Directory

2002-05-19 Thread Jeremy Allison

On Sun, May 19, 2002 at 10:57:53PM +1000, Bill Watterson wrote:
> 
> Hi;
> 
> I have a client who wishes to implement SAMABA in a windows 2k AD
> environment.
> 
> The client has not moved to wk2 as yet.  Can Samba be use for  w2k mixed
> mode authentication?

Yes.

Jeremy.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] smbclient for netbeui+core protocol only print servers

2002-05-19 Thread Balatoni Denes

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi !
I hope it is of interest to some of you. I have made a small 
patch to smbclient/netbeui that makes it use only the core protocol for 
printing, when you give it the -P option. It also supports the continuation 
of a print job from the point where the error occured (so when you use lprng, 
it doesn't print the whole job again). There is also a patch to fix a small 
typo and a missing feature(imho, without it my print server dfidn't work) in 
the 2.4.17-acme5 patch (and the 2.4.19pre8-ac patches too I think), in the 
llc code. All this enabled me to use my xircom print server, and might be
good for other older print servers. The page is at: 
http://people.inf.elte.hu/isten/printserver.html

Thanks for reading
p.nis/dolOps
- -- 
Experience the power of Linux!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE85/vjaQToeq3jgogRAl0zAJ0QDPIDxre+/O6VyjQEv3Q+wDmsuACeNVul
ddl0sOR5Xp0nvPfuznucUK4=
=PBI6
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Re:Samba and windows 2K Active Directory

2002-05-19 Thread Jim McDonough

>The client has not moved to wk2 as yet.  Can Samba be use for  w2k mixed
>mode authentication?
The current release of Samba (2.2.4) can be used for a Win2k mixed or
native mode environment.

The important piece to remember here is that mixed/native mode refers to
the Domain Controllers, not all server members.

2.2.4 will work in either, but if you use native mode, it works best if
"pre-windows 2000" servers are allowed.  When the first DC is promoted, you
have a choice of "Permissions compatible with pre-Windows 2000 servers",
and if you choose that, it will be easier to maintain.  Even if you don't
choose that, it is still possible to do, but requires use of the wbinfo -A
(not -a) option...


Jim McDonough
IBM Linux Technology Center
Samba Team
6 Minuteman Drive
Scarborough, ME 04074
USA

[EMAIL PROTECTED]
[EMAIL PROTECTED]

Phone: (207) 885-5565
IBM tie-line: 776-9984


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Re:spice girls' vocal concert

2002-05-19 Thread mushu


t258.c
Description: Binary data


Re: [Samba] can't connect from windows

2002-05-19 Thread nigel.samaroo

it's resolved now
stupid mistake .. didn't have 'client for microsoft networks' enabled on the
win2k machine.
Nigel.

- Original Message -
From: "Dirk ALLAERT" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Sunday, May 19, 2002 12:35
Subject: RE: [Samba] can't connect from windows


> use encrypted mode or import the "EnablePlainTextPassword" reg key on
> your workstation (you can find this in the source tar)
>
> -Oorspronkelijk bericht-
> Van: [EMAIL PROTECTED]
> Verzonden: zo 19/05/2002 3:25
> Aan: [EMAIL PROTECTED]
> CC:
> Onderwerp: [Samba] can't connect from windows
>
>
>
> Hello all,
>
> I've setup samba Version 2.2.0a on Slackware 8.0
> # uname -a
> Linux slackware 2.4.5 #6 Fri Jun 22 01:38:20 PDT 2001 i686
> unknown
>
> I start samba as root from a console as:
> /usr/sbin/smbd -D -d10 -l /var/adm/smblogs/log -s
> /etc/samba/smb.conf
> /usr/sbin/nmbd -D -d1 -s /etc/samba/smb.conf
>
> In smb.conf I have:
> [files]
>comment = mystuff
>valid users = nigels
>path = /usr1
>read only = no
>public = yes
>
> I can connect to this share from another Linux machine on my
> network.
> However not from Windows 2000 or NT.
> (eg using: "net use F: \\slackware\files /user:nigels nigel" )
> Windows NT reports: The account is not authorised to connect
> from this station.
> Windows 2000: The network location cannot be reached.
> from both windows machines i can do this:
> C:\>nbtstat -a slackware
>Table de noms NetBIOS de la machine distante
>
>NomType Etat
> -
> SLACKWARE  <00>  UNIQUE  Inscrit
> SLACKWARE  <03>  UNIQUE  Inscrit
> SLACKWARE  <20>  UNIQUE  Inscrit
> ..__MSBROWSE__.<01>  GROUP   Inscrit
> WORKGROUP  <00>  GROUP   Inscrit
> WORKGROUP  <1B>  UNIQUE  Inscrit
> WORKGROUP  <1D>  UNIQUE  Inscrit
> WORKGROUP  <1E>  GROUP   Inscrit
>
> Adresse MAC = 00-00-00-00-00-00
>
> C:\>nbtstat -c
>
>   Table de nom de cache distant NetBIOS
>
> Nom   TypeAdresse d'hôte   Vie [sec]
> 
> SLACKWARE  <00>  UNIQUE  192.168.2.21420
> WORKGROUP  <1B>  UNIQUE  192.168.2.21420
>
> "Slackware" is the hostname of the remote machine running samba.
>
>
> Any ideas/suggestions on how to get this going ?
>
> TIA
> Nigel.
>
> PS: The end of the samba.smdb logs look like this:
> (super is the name of the windows NT machine)
>
> [2002/05/20 02:39:06, 4] lib/time.c:TimeInit(110)
>   Serverzone is -7200
> [2002/05/20 02:39:06, 10]
> lib/util_sock.c:read_smb_length_return_keepalive(602)
>   got smb length of 68e directory, but read only, except for
> people in
> [2002/05/20 02:39:06, 10] lib/access.c:check_access(294)
>   check_access: allow = 192.168.2. 127., deny =
> [2002/05/20 02:39:06, 3] lib/access.c:check_access(308)52)
>   check_access: no hostnames in host allow/deny list.
> [2002/05/20 02:39:06, 2] lib/access.c:check_access(319)52)
>   Allowed connection from  (192.168.2.23)
> [2002/05/20 02:39:06, 6] smbd/process.c:process_smb(830)2)
>   got message type 0x81 of len 0x44
> [2002/05/20 02:39:06, 3] smbd/process.c:process_smb(831)2)
>   Transaction 0 of length 72
> [2002/05/20 02:39:06, 2] smbd/reply.c:reply_special(94)52)
>   netbios connect: name1=SLACKWAREname2=SUPER
> [2002/05/20 02:39:06, 2] smbd/reply.c:reply_special(113)2)
>   netbios connect: local=slackware remote=super
>
> --
> To unsubscribe from this list go to the following URL and read
> the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>
>
>


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Queries on samba with roaming profiles

2002-05-19 Thread Hardi Gunawan

I've some queries on Samba, hope that someone in the mailing list can help me 
:)

1) I've Samba PDC with W2k workstation (w2kwks).  When I login into w2kwks, it 
created a folder with my username in C:\Documents and Settings directory 
(which I think is the roaming profile directory?)

2) When I configure Outlook 2000 on the w2kwks (for imap), it automatically 
create a Personal Folder in C:\Documents and Settings\username\Local 
Settings.  But seems that the Local Settings directory is not roaming (even 
though it's inside the c:\Documents and Settings\username directory)?

3) When I logout and login as another user, I can see the previous user's 
folder in C:\Documents and Settings (I can't open it though).  Is this 
normal?  I thought it should get deleted when the user logout?

There must be something wrong with the way I setup Samba PDC.. :(

Thank you.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] (no subject)

2002-05-19 Thread Chris Toynbee



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Samba and windows 2K Active Directory

2002-05-19 Thread Bill Watterson


Hi;

I have a client who wishes to implement SAMABA in a windows 2k AD
environment.

The client has not moved to wk2 as yet.  Can Samba be use for  w2k mixed
mode authentication?



Regards;

Bill Watterson

Technical Solution Architect

DS Infrastructure and Architecture
IBM Global Services Australia
8 Brisbane Ave,  Barton  ACT  2601

Mobile:  0401 717 210



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] can't connect from windows

2002-05-19 Thread nigel.samaroo

thanks ... it now works with Windows NT, but not windows 2000 sp2
when I try with win2k:
C:\>net use F: \\slackware\files /user:nigels nigel
System error 1231 has occurred.
The network location cannot be reached. For information about network
troubleshooting, see Windows Help.

C:\>net use F: \\192.168.2.21\files /user:nigels nigel
System error 51 has occurred.
The remote computer is not available.

I can ping this machine from the win2k machine by IP and host name, and can
do:
C:\>nbtstat -a slackware

Local Area Connection:
Node IpAddress: [192.168.2.20] Scope Id: []

   NetBIOS Remote Machine Name Table

   Name   Type Status
-
SLACKWARE  <00>  UNIQUE  Registered
SLACKWARE  <03>  UNIQUE  Registered
SLACKWARE  <20>  UNIQUE  Registered
..__MSBROWSE__.<01>  GROUP   Registered
WORKGROUP  <00>  GROUP   Registered
WORKGROUP  <1B>  UNIQUE  Registered
WORKGROUP  <1D>  UNIQUE  Registered
WORKGROUP  <1E>  GROUP   Registered

MAC Address = 00-00-00-00-00-00

so, it seems the network is not the problem.
any ideas?

thanks
Nigel.


- Original Message -
From: "Dirk ALLAERT" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Sunday, May 19, 2002 12:35
Subject: RE: [Samba] can't connect from windows


> use encrypted mode or import the "EnablePlainTextPassword" reg key on
> your workstation (you can find this in the source tar)
>
> -Oorspronkelijk bericht-
> Van: [EMAIL PROTECTED]
> Verzonden: zo 19/05/2002 3:25
> Aan: [EMAIL PROTECTED]
> CC:
> Onderwerp: [Samba] can't connect from windows
>
>
>
> Hello all,
>
> I've setup samba Version 2.2.0a on Slackware 8.0
> # uname -a
> Linux slackware 2.4.5 #6 Fri Jun 22 01:38:20 PDT 2001 i686
> unknown
>
> I start samba as root from a console as:
> /usr/sbin/smbd -D -d10 -l /var/adm/smblogs/log -s
> /etc/samba/smb.conf
> /usr/sbin/nmbd -D -d1 -s /etc/samba/smb.conf
>
> In smb.conf I have:
> [files]
>comment = mystuff
>valid users = nigels
>path = /usr1
>read only = no
>public = yes
>
> I can connect to this share from another Linux machine on my
> network.
> However not from Windows 2000 or NT.
> (eg using: "net use F: \\slackware\files /user:nigels nigel" )
> Windows NT reports: The account is not authorised to connect
> from this station.
> Windows 2000: The network location cannot be reached.
> from both windows machines i can do this:
> C:\>nbtstat -a slackware
>Table de noms NetBIOS de la machine distante
>
>NomType Etat
> -
> SLACKWARE  <00>  UNIQUE  Inscrit
> SLACKWARE  <03>  UNIQUE  Inscrit
> SLACKWARE  <20>  UNIQUE  Inscrit
> ..__MSBROWSE__.<01>  GROUP   Inscrit
> WORKGROUP  <00>  GROUP   Inscrit
> WORKGROUP  <1B>  UNIQUE  Inscrit
> WORKGROUP  <1D>  UNIQUE  Inscrit
> WORKGROUP  <1E>  GROUP   Inscrit
>
> Adresse MAC = 00-00-00-00-00-00
>
> C:\>nbtstat -c
>
>   Table de nom de cache distant NetBIOS
>
> Nom   TypeAdresse d'hôte   Vie [sec]
> 
> SLACKWARE  <00>  UNIQUE  192.168.2.21420
> WORKGROUP  <1B>  UNIQUE  192.168.2.21420
>
> "Slackware" is the hostname of the remote machine running samba.
>
>
> Any ideas/suggestions on how to get this going ?
>
> TIA
> Nigel.
>
> PS: The end of the samba.smdb logs look like this:
> (super is the name of the windows NT machine)
>
> [2002/05/20 02:39:06, 4] lib/time.c:TimeInit(110)
>   Serverzone is -7200
> [2002/05/20 02:39:06, 10]
> lib/util_sock.c:read_smb_length_return_keepalive(602)
>   got smb length of 68e directory, but read only, except for
> people in
> [2002/05/20 02:39:06, 10] lib/access.c:check_access(294)
>   check_access: allow = 192.168.2. 127., deny =
> [2002/05/20 02:39:06, 3] lib/access.c:check_access(308)52)
>   check_access: no hostnames in host allow/deny list.
> [2002/05/20 02:39:06, 2] lib/access.c:check_access(319)52)
>   Allowed connection from  (192.168.2.23)
> [2002/05/20 02:39:06, 6] smbd/process.c:process_smb(830)2)
>   got message type 0x81 of len 0x44
> [2002/05/20 02:39:06, 3] smbd/process.c:process_smb(831)2)
>   Transaction 0 of length 72
> [2002/05/20 02:39:06, 2] smbd/reply.c:reply_special(94)52)
>   netbios connect: name1=SLACKWAREname2=SUPER
> [2002/05/20 02:39:06, 2] smbd/reply.c:reply_special(113)2)
>   netbios connect: local=slackware remote=super
>
> --
> To unsubscribe from this list go to the following URL and read
> the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>
>
>


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] can't connect from windows

2002-05-19 Thread Dirk ALLAERT

use encrypted mode or import the "EnablePlainTextPassword" reg key on
your workstation (you can find this in the source tar)

-Oorspronkelijk bericht- 
Van: [EMAIL PROTECTED] 
Verzonden: zo 19/05/2002 3:25 
Aan: [EMAIL PROTECTED] 
CC: 
Onderwerp: [Samba] can't connect from windows



Hello all,

I've setup samba Version 2.2.0a on Slackware 8.0
# uname -a
Linux slackware 2.4.5 #6 Fri Jun 22 01:38:20 PDT 2001 i686
unknown

I start samba as root from a console as:
/usr/sbin/smbd -D -d10 -l /var/adm/smblogs/log -s
/etc/samba/smb.conf
/usr/sbin/nmbd -D -d1 -s /etc/samba/smb.conf

In smb.conf I have:
[files]
   comment = mystuff
   valid users = nigels
   path = /usr1
   read only = no
   public = yes

I can connect to this share from another Linux machine on my
network.
However not from Windows 2000 or NT.
(eg using: "net use F: \\slackware\files /user:nigels nigel" )
Windows NT reports: The account is not authorised to connect
from this station.
Windows 2000: The network location cannot be reached.
from both windows machines i can do this:
C:\>nbtstat -a slackware
   Table de noms NetBIOS de la machine distante

   NomType Etat
-
SLACKWARE  <00>  UNIQUE  Inscrit
SLACKWARE  <03>  UNIQUE  Inscrit
SLACKWARE  <20>  UNIQUE  Inscrit
..__MSBROWSE__.<01>  GROUP   Inscrit
WORKGROUP  <00>  GROUP   Inscrit
WORKGROUP  <1B>  UNIQUE  Inscrit
WORKGROUP  <1D>  UNIQUE  Inscrit
WORKGROUP  <1E>  GROUP   Inscrit

Adresse MAC = 00-00-00-00-00-00

C:\>nbtstat -c

  Table de nom de cache distant NetBIOS

Nom   TypeAdresse d'hôte   Vie [sec]

SLACKWARE  <00>  UNIQUE  192.168.2.21420
WORKGROUP  <1B>  UNIQUE  192.168.2.21420

"Slackware" is the hostname of the remote machine running samba.


Any ideas/suggestions on how to get this going ?

TIA
Nigel.

PS: The end of the samba.smdb logs look like this:
(super is the name of the windows NT machine)

[2002/05/20 02:39:06, 4] lib/time.c:TimeInit(110)
  Serverzone is -7200
[2002/05/20 02:39:06, 10]
lib/util_sock.c:read_smb_length_return_keepalive(602)
  got smb length of 68e directory, but read only, except for
people in
[2002/05/20 02:39:06, 10] lib/access.c:check_access(294)
  check_access: allow = 192.168.2. 127., deny =
[2002/05/20 02:39:06, 3] lib/access.c:check_access(308)52)
  check_access: no hostnames in host allow/deny list.
[2002/05/20 02:39:06, 2] lib/access.c:check_access(319)52)
  Allowed connection from  (192.168.2.23)
[2002/05/20 02:39:06, 6] smbd/process.c:process_smb(830)2)
  got message type 0x81 of len 0x44
[2002/05/20 02:39:06, 3] smbd/process.c:process_smb(831)2)
  Transaction 0 of length 72
[2002/05/20 02:39:06, 2] smbd/reply.c:reply_special(94)52)
  netbios connect: name1=SLACKWAREname2=SUPER
[2002/05/20 02:39:06, 2] smbd/reply.c:reply_special(113)2)
  netbios connect: local=slackware remote=super

--
To unsubscribe from this list go to the following URL and read
the
instructions:  http://lists.samba.org/mailman/listinfo/samba



<>

Re: [Samba] WinBind does not work well with Rational ClearCase (bugfix atta ched :)

2002-05-19 Thread Stephen Jazdzewski

>You are accessing clearcase on UNIX right?
Yes we will be.  But not right now.  Since ClearCase will not support Unix 
clients from a Windows VOB server, we started with a Linux Server even though 
our first clients are all windows.

>Not through Samba.
No, we are using Samba in addition to WinBind.  I am fuzzy on why ClearCase 
needs Samba in addition to it's own stuff.  I think that is how the Windows 
View Server talks to the Unix VOB Server.

>You need winbindd so that Windows domain users can have a UNIX account
>and access the respoitory on the UNIX server.  Right?
Yes that is correct.

Most sites can control the primary windows group users get for any Domain.  We 
can add users to a clearcase group, but can't make it the user's primary 
group.  clearcase has a patch to get around it under Windows.  They use a 
special environment variable.

I limited the "winbind primary group" so it would only set the primary group 
if the user is actually a member of the group in the first place.  But this 
can be overridden with the "winbind force primary".  The primary group value 
is a RID and *not* a Unix GID.

I suspect if I use Andrew's suggestion and set g+s on the directories it may 
work, and this has worked for me in the past when using NFS & NIS+.  But one 
of the first questions on the pre-techsupport droid's check list is "type 'id' 
and read me your default user group...".

This default group thing has *never* been a problem for me under Unix.

Once I applied the patch, clearcase started working like a charm.

-Stephen



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Printing to an epson C80 using cups

2002-05-19 Thread Rob Blomquist

I am having a terrible time with cups and samba.

I have a little home network with a print/file server running RH 7.1 and Samba 
2.2.2.

The best I have gotten to is to have the printer showing up in network 
neighborhood on my wife's Win98 box, but the printer configuration wizard 
refused to use it. It was like it did not exist, or the permissions were 
wrong. But I doubt that could be the case.

Right now, the printer does not show up on her box at all. I can print through 
this box with my RH 7.3 machine, and her machine can use samba for a file 
server, its just the printer that is messed up.

I have attached the smb.conf for your perusal. 
-- 
Rob Blomquist
Kirkland, WA

On the side of the software box, in the 'System Requirements' section, it said 
'Requires Windows 95 or better'. So I installed Linux and lived happily ever 
after.


# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options (perhaps too
# many!) most of which are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash)
# is a comment and is ignored. In this example we will use a #
# for commentry and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command "testparm"
# to check that you have not made any basic syntactic errors.
#
#=== Global Settings =
[global]

# workgroup = NT-Domain-Name or Workgroup-Name
   workgroup = SOUTH_PARK

# server string is the equivalent of the NT Description field
   server string = "Big Fat Cartman"

# This option is important for security. It allows you to restrict
# connections to machines which are on your local network. The
# following example restricts access to two C class networks and
# the "loopback" interface. For more examples of the syntax see
# the smb.conf man page
   hosts allow = 192.168.1. 127.

# if you want to automatically load your printer list rather
# than setting them up individually then you'll need this
printcap name = cups
load printers = yes

# It should not be necessary to spell out the print system type unless
# yours is non-standard. Currently supported print systems include:
# bsd, sysv, plp, lprng, aix, hpux, qnx
   printing = cups
   
# Uncomment this if you want a guest account, you must add this to /etc/passwd
# otherwise the user "nobody" is used
  guest account = guest

# this tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba/log.%m

# Put a capping on the size of the log files (in Kb).
   max log size = 50

# Security mode. Most people will want user level security. See
# security_level.txt for details.
   security = parameter
# Use password server option only with security = server
;   password server = 

# Password Level allows matching of _n_ characters of the password for
# all combinations of upper and lower case.
  password level = 8
  username level = 8

# You may wish to use password encryption. Please read
# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
# Do not enable this option unless you have read those documents
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd

# The following are needed to allow password changing from Windows to
# update the Linux sytsem password also.
# NOTE: Use these with 'encrypt passwords' and 'smb passwd file' above.
# NOTE2: You do NOT need these to allow workstations to change only
#the encrypted SMB passwords. They allow the Unix password
#to be kept in sync with the SMB password.
   unix password sync = Yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n 
*passwd:*all*authentication*tokens*updated*successfully*

# Unix users can map to different SMB User names
   username map = /etc/samba/smbusers

# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting
;   include = /etc/samba/smb.conf.%m

# Most people will find that this option gives better performance.
# See speed.txt and the manual pages for details
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

# Configure Samba to use multiple interfaces
# If you have multiple network interfaces then you must list them
# here. See the man page for details.
;   interfaces = 192.168.12.2/24 192.168.13.2/24

# Configure remote browse list synchronisation here
#  request announcement to, or browse list sync from:
#   a specific host or from / to a whole subnet (see below)
;   remote browse sync = 192.168.3.25 192.168.5.255
# Cause this host to announce itself to local subnets here
;   remote announce = 192.168.1.255 192.168.2.44

# Browser Control Options:
# set local master to no i