Re: [Samba] copy of smbpasswd

2006-05-23 Thread C.Rathnasinghe

C.Rathnasinghe wrote:

Hi Tom

Finally it is solved. I found that problem is with the SID(unmatched 
SID with your workstations). U have to be bit tricky in this case.



after U upgrade run old version and then using your new version net 
utility give this command


net rpc getsid

* this will set your SID from old version to new version this is 
locate at secrets.tdb file  samba 2 /etc/samba and update new versions 
file /pathtonewversion/private.


* your smbpasswd file can use without any problem. simply copy to 
location specified.


stop older version then start new version

PS. before U do so backup your both secrests.tdb files to store your 
both SID's 


after long fighting I won the battle.

good luck

chami

Tom Haerens wrote:


Ok, I'll let you know!
Unfortunally, until now, you're the only one that replied on my 
message   :-(


Did you use the same SuSE version?


Cheers,
Tom

 

[EMAIL PROTECTED] wrote on 23/05/2006 
05:25:50:


> Hi
> I have same problem exactly U got,  even I post earlier to this group
> but didn't get any help If U do resolve this Please update me also. 
thanks.

>
> chami
>
> Tom Haerens wrote:
> > Hi,
> >
> >
> > I have to move our old samba file server to a new machine.
> > The old samba server was a RedHat8 with samba 2.2.5.  The new one 
is SLES9

> > with samba 3.0.2b-3.4 SuSE
> >
> > Is there a way to re-use the old smbpasswd file?
> >
> > In the log-files I can see that the authentication fails when I 
try to

> > access a shared folder.
> > A windows client keeps on asking the login and password.
> >
> > Is it possible to re-use the smbpasswd file?
> >
> > When I create a new smbpasswd file, everything works fine.
> > But, I want to avoid that everybody has to re-enter his or her 
password...

> >
> >
> > Kind Regards,
> > Tom
> >
> >  
> >  
>

>
>
>
> --
> This e-mail message is confidential and for use by the addressee only.
> If the message is received by anyone other than the addressee, please
> return the message to the sender by replying to it and then delete the
> message from your computer. Internet e-mails are not necessarily
> secure.Ministry of Finance & Planning does not accept responsibility
> for changes made to this message after it was sent.
>
> Whilst all reasonable care has been taken to avoid the transmission of
> viruses, it is the responsibility of the recipient to ensure that the
> onward transmission, opening or use of this message and any attachments
> will not adversely affect its systems or data. No responsibility is
> accepted by Ministry of Finance & Planning Sri Lanka in this regard.
>
> 


> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba






--
This e-mail message is confidential and for use by the addressee only.
If the message is received by anyone other than the addressee, please
return the message to the sender by replying to it and then delete the
message from your computer. Internet e-mails are not necessarily secure.Ministry of 
Finance & Planning does not accept responsibility for changes made to this 
message after it was sent.

Whilst all reasonable care has been taken to avoid the transmission of
viruses, it is the responsibility of the recipient to ensure that the
onward transmission, opening or use of this message and any attachments
will not adversely affect its systems or data. No responsibility is accepted by 
Ministry of Finance & Planning Sri Lanka in this regard.

 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] help needed: connecting with similar windows-unix usernames?

2006-05-23 Thread Amit Zvigoren
Hello all samba'ers
 
 
I'm trying to configure samba for Windows (active-directory)
authentication, with every Windows-user having a similar unix username.
I've created the users in both sides but I couldn't configure the
smb.conf file (either with or without SWAT) to make it work.
 
I'm using XP clients with a Win2K3 as the domain server and Solaris 9 as
the samba server.
 
Everything works fine when I use the 'security = share' option so I
believe the physical connection is ok.
 
 
1. Do I actually need to use 'security = user', or should I use
'security = server"?
2. I've created the smbpasswd(5) file and edited it with smbpasswd(8),
and synchronized users+passwords with the relevant ones at /etc/passwd
and /etc/shadow. Do I actually need the smbpasswd(5)?
3. Is it feasible without using winbind?
4. Does any of you have some smb.conf sample for connecting using
similar windows-unix usernames?
5. Do I need to use the 'username map' option even if the usernames are
similar?
 
 
Here is a part of the [global] section at my smb.conf, each line
suffiixed (here, not actually in the file itself) with my description:
[global]
workgroup = GIS' windows workgroup to 'contain' the
samba server
null passwords = yes  ' preferred, not a must
valid users = minhal, +pcgis' pcgis is a group on unix. am I right?
or does this parameter meant to be for windows groups?
write list = minhal  ' this user should have
write-permission on shared directories regardless of their mode
 
Here is another section of my smb.conf for defining a samba share:
[home1]
path = /home1
read only = no
guest ok = yes ' not necessary, just for the test
 
 
Now what am I missing? what have I done wrong?
 
 
 
Thanks and regards,
 
Amit Zvigoren
Systematics Technologies
 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] smbldap-populate

2006-05-23 Thread mario
Anyone familiar with ldap tools smbldap-tools ? 

I am having a problem populating the LDAP directory with samba schema ... 

When I run smbldap-populate I get error :

ERROR : failed to add entry : objectclass : value #4 invalid per syntax at 
/usr/local/sbin/smbldap-populate line 495 
 Line 7

I am using openldap that comes with Zimbra so there is already Zimbra schema 
there . 

Anyone know what this error could be about . Would it help if upload my schema 
files
and the smbldap-populate script ?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Valid users directive

2006-05-23 Thread Nicolas Kassis

Hi Everyone

I'm new to samba and I have been trying in vein to find a solution to 
this problem. I am setting up a linux samba server as a domain member 
server. It is part of the MAINT workgroup. Winbind and Samba 
authenticate correctly. The issue arises when I try to limit the users 
who are allowed to use a my share folder.


Most of the information I have lookup seem to say that I should set up 
the Valid Users directive like this :


valid users  = '@MAINT\nkassis', '@MAINT\aburns'

Of course this dosen't work. Can anyone point me to a place where I can 
find information about this or any indepth explanation of how to define 
users in this directive ?


Nic




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba-problems

2006-05-23 Thread Gary Dale

Fernando j Cabello wrote:


Hi

 i am having some problems with my samba, it is runnig on an Slackware
linux. I have arround 20 directories on it, were every day around 20
users exchange files from them. The situation is that  when I try to get
logg into one of this directories with one of the users(just with one
user,) the loggin is not allowed. I had already delete this user, create
it again.
do you have any clue about it?

thanks



 

Your problem isn't clear. Is the user account having problem logging 
into the domain or is it having problems accessing the share? If it is 
having problems with the share, is it just one share or every share?


Your best bet is to try to isolate what is different about this account 
and/or the particular share. Is the account a member of the same 
group(s) as the other accounts. Do all the shares have the same access 
rights (look at both the Domain access rights and the Unix/Linux rights 
on the actual directory).


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: samba domain controller

2006-05-23 Thread Joseph
Hi Ivan,
i think the problem may be related to your allow and deny ip address range.

1, in the address range 192.168.1.0 subnet, i think it should be use
"192.168.1.0" in your config file. try to change it to see if it can solve the
problem.

2, try to remove the deny address range and test if the problem is casused from
this line.

hope this help.

Joseph




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Setting AD user's home dir/logon script from Samba?

2006-05-23 Thread Don Meyer

Folks,

Does there exist any (relatively) easy method to set user settings 
like home directory & logon script from a *nix system w/ Samba?


I find that I can create a new user and set group membership, as well 
as set/change the user's password on an AD from a *nix system with 
Samba using the NET [ADS|RPC] utility.   But I don't see a way to 
either create the user with home directory / logon script preset, or 
to change these settings after user creation. Am I missing something?


TIA,
-D


Don Meyer   <[EMAIL PROTECTED]>
Network Manager, ACES Academic Computing Facility
Technical System Manager, ACES TeleNet System
UIUC College of ACES, Information Technology and Communication Services

  "They that can give up essential liberty to obtain a little 
temporary safety,
deserve neither liberty or safety." -- Benjamin Franklin, 1759 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba-problems

2006-05-23 Thread Fernando j Cabello
Hi

  i am having some problems with my samba, it is runnig on an Slackware
linux. I have arround 20 directories on it, were every day around 20
users exchange files from them. The situation is that  when I try to get
logg into one of this directories with one of the users(just with one
user,) the loggin is not allowed. I had already delete this user, create
it again.
 do you have any clue about it?

thanks



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 4.0 LDAP backend -- replacement for OpenLDAP?

2006-05-23 Thread Andrew Bartlett
On Tue, 2006-05-23 at 17:34 -0400, Ken D'Ambrosio wrote:
> I was reading up on the Linux Magazine overview of Samba 4.0
> (http://www.linux-magazine.com/issue/67/Samba_4_Technical_Preview.pdf),
> and noticed that Samba 4 was going to have its own LDAP backend ("LDB",
> according to the article).  Since I'm planning on rolling out LDAP
> authentication at my site in the not-incredibly-distant-future, should I
> consider using the Samba LDAP backend instead of OpenLDAP?  Is there a
> comparison of the two?

Currently there is no comparison, clearly any production deployment in
the near future would have to be based on Samba 3.0, and it relies on an
external LDAP server.

When we get Samba4 to a release, then if you only wanted LDAP as a
backend for Samba, then Samba4 will provide all you need.  If you want
other tools to use Samba4, you will need to look at what level of
standards compliance each application expects, what schema is expected
etc.  Samba4 needs to aim for compatibility with windows clients first,
standards second.  This is very different from OpenLDAP's goals.

All that said, we do hope to have a good, easily configured LDAP server
as part of Samba4, useful to a wide variety of clients.

Andrew Bartlett
-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Can Samba run on Unisys?

2006-05-23 Thread Ellison, Steven \(CCL\)
We need to save a file from Windows server 2000 to a Unisys mainframe.
I have seen bits and pieces on the web that suggest this may be possible
but nothing definitive.

Can somebody advise?  If not Samba, is there another software that will
do the same thing?

We currently use Samba to save files from Windows to Unix.

Thanks very much.

Steve

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba on NAS perfs

2006-05-23 Thread Jonathan DEL CAMPO /jdc/ .Y
 Hi,

I am running a samba 3.0.14a server on a 2.6.15.6 kernel, on a 4T - SATA2
NAS.
The disks are formated in xfs and configurated in hard RAID5. Network is
bonded with 2 Gbits links using 802.3ad agregation. The NAS is connected
on a Gbits switch (Summit 400 - extreme Networks), also configured with
dynamic sharing.
I am trying to get the best performances in Reading/writting the NAS, and
what I am obtaining is very poor ...

I have been trying many kind of tests with several clients (win XP
console, win XP gui, MACOSX, many linux ...).
The fact is first I can't get the first NAS interface overloaded, it never
get the turn to the second one.
I have very poor transfer rates :
 -copy to windows from a NAS Samba export : max 20 MBytes/s  with many
kind of file sizes
 -copy to Linux (on firewire 800) from a NAS Samba export : max 12
MBytes/s  with many kind of file sizes
The linux mount is made using CIFS drivers.

on the other side, writting on the NAS give me the same results.

I have also made some tests with the IOMeter tool on a winXP samba mount,
configure with a transfert request size of 32MB, 100% reading, full
sequential access. With 4 workers on the same client I get (according to
snmp results) a rate of 80 MBytes/s !

PS : Directly on the NAS, using the tool Bonnie++ (not using samba...) we
get a pretty 150 MBytes/s with the writting tests.
PS2 : We have made theses tests with samba,nfs and Afp exports 

The clients configurations are the following :

- linux clients :
Bi-Proc 1Ghz - 1 GB RAM
Disks Firewire 800
GbE network

- Avid HP WinXP
Bi-Proc 3Ghz
2GB RAM
6 SCSI RAID0 drives
GbE network

Thanks for helping me to understand why we can't get better perfs ?

john

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] plz, help me syn smbpass with passwd's system

2006-05-23 Thread Duc Nguyen Huynh
I use Linux ES4 and I want syn smbpass with passwd's system.

How can i do that ? 

Thanks
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Does samba support Active Directory User Group name with space

2006-05-23 Thread Angela Cheng
Hi Jeremy, thank you.  It works.


Angela Cheng
Senior Solutions Architect
Bycast Inc.
(office) 604-692-2067
(cell) 778-238-2716
-Original Message-
From: Jeremy Allison [mailto:[EMAIL PROTECTED]
Sent: Monday, May 22, 2006 3:20 PM
To: Angela Cheng
Cc: samba@lists.samba.org
Subject: Re: [Samba] Does samba support Active Directory User Group name
with space

On Mon, May 22, 2006 at 12:51:47PM -0700, Angela Cheng wrote:
> Hi,
>
> I am using samba 3.0.20 and winbind 3.0.20 on Debian Linux kernel
> version 2.4.27
>
> ii  samba  3.0.20b-bycast a LanManager-like file and printer
> server fo
> ii  samba-common   3.0.20b-bycast Samba common files used by both the
> server a
> ii  winbind3.0.20b-bycast service to resolve user and group
> informatio
>
> I was able to authentic with AD Domain and allow groups and individual

> users to access the CIFS share from Windows.
>
> However, there is a AD User Group name "ABC USERS" I need to grant
> access to.  How do I specify the User Group name with space in between

> in the samba share file.

Enclose it using quotes.

Jeremy.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba domain controller

2006-05-23 Thread Ivan Ordonez
Run the "testparm" (without the quotes) command and see if your samba is 
really a PDC.


Hope this helps.

-Ivan

At 03:03 PM 5/23/2006, Rodney Richison wrote:

I tried to post this in the debian group, but my mail never appeared there..

Am attempting to do a test install of samba as a primary domain
controller. I can see the shares and navigate them.
However, when I attempt to join the domain, WinXP says "username could
not be found".
I have a root user with a password. I can see it's shares as well if I
use the root name and password.
So the problem appears to be ONLY when I try to join. I'll post some
logs for /var/logs/samba/log.0.0.0.0 as they may be a hint.


[2006/05/23 09:56:15, 0] lib/util_sock.c:get_peer_addr(1150)
 getpeername failed. Error was Transport endpoint is not connected
[2006/05/23 09:56:15, 0] lib/access.c:check_access(328)
[2006/05/23 09:56:15, 0] lib/util_sock.c:get_peer_addr(1150)
 getpeername failed. Error was Transport endpoint is not connected
 Denied connection from  (0.0.0.0)
[2006/05/23 09:56:15, 1] smbd/process.c:process_smb(1084)
[2006/05/23 09:56:15, 0] lib/util_sock.c:get_peer_addr(1150)
 getpeername failed. Error was Transport endpoint is not connected
 Connection denied from 0.0.0.0
[2006/05/23 09:56:15, 0] lib/util_sock.c:write_socket_data(430)
 write_socket_data: write failure. Error = Connection reset by peer
[2006/05/23 09:56:15, 0] lib/util_sock.c:write_socket(455)
 write_socket: Error writing 5 bytes to socket 27: ERRNO = Connection
reset by peer
[2006/05/23 09:56:15, 0] lib/util_sock.c:send_smb(647)
 Error writing 5 bytes to client. -1. (Connection reset by peer)
r writing 5 bytes to client. -1. (Connection reset by peer)
[2006/05/23 09:56:15, 0] lib/util_sock.c:send_smb(647)
 Error writing 5 bytes to client. -1. (Connection reset by peer)
r writing 5 bytes to client. -1. (Connection reset by peer)

Below is my smb.conf file.

[global]
# the domain name
workgroup = pdc
smb passwd file = /etc/samba/smbpasswd

# the server's name
netbios name = file-server

# comment describing what the machine is
server string = the file server

# workstations will set their time by this server
time server = yes

# security and logging settings
security = user ; this must be 'user' on a PDC
# allow connections only from the local machine and the 10.0.0.* address
range:
# (you'll want to change this if your network uses a different
addressing range)
hosts allow = 127.0.0.1 192.168.1.
# don't allow connections from any other IP address ranges than defined
by 'hosts allow':
hosts deny 0.0.0.0/0
# only allow connections from ethernet cards and the loopback address:
interfaces = eth* lo
bind interfaces only = yes

# for Windows 2000 encrypted passwords
encrypt passwords = yes

# provide logon scripts, home directories etc aswell as authentication
domain logons = yes

log file = /var/log/samba/log.%m
# log level = 2

# put a capping on the size (in kB) of the log file
max log size = 50

# PDC and master browser settings
os level = 64 ; ensure this machine consulted 1st regarding current
browse list
preferred master = yes
local master = yes
domain master = yes ; This is the Primary Domain Controller

# automatedly add a Linux and Samba machine account
add user script = /usr/sbin/useradd -d /dev/null -g machines -s
/bin/false -M %u


# user profiles and home directory
# the local path to which the home ([HOMES]) directory will be connected
logon drive = H:

# where 'profiles' = [profiles] further on
logon path = \\%L\profiles\%U

logon script = netlogon.bat ; logon script, location defined in [NETLOGON]

# define user mappings between this system and Windows systems.
# without this you get asked for a password even if none is required
# username map = /etc/samba/users.map
# but if you've created SMB users on here you don't need it

# fine-tuning Samba for increased speed on Linux systems
# SO_KEEPALIVE - sends a probe every 4 hours to check that a connection
is still active. if the connection does not respond, it is closed
# TCP_NODELAY -
# IPTOS_LOWDELAY -
# SO_SNDBUF=14596 - 14596 is roughly the best in most ciscumstances, it
may be able to be tuned better for your system
# SO_RCVBUF=14596 - same reason as above
socket options = TCP_NODELAY, IPTOS_LOWDELAY, SO_KEEPALIVE,
SO_SNDBUF=14596, SO_RCVBUF=14596

# keep the case when saving; when looking for a file
# matching is done without regard to case, as expected by Windows
preserve case = yes
short preserve case = yes
case sensitive = no

# check every 30 seconds to see if client has disconnected
# I've used 30 so that the Samba server can be restarted and
# maybe the connections won't be lost
keep alive = 30

#sync Unix passwords from Windows workstations using PAM
unix password sync = yes
pam password change = yes

# printing
printing = BSD
print command = /usr/bin/lpr -r %s
min print space = 2000

# --- shares ---

[printers]
# (picks up all printers specified in /etc/printcap)

# tell Samba its a printer share, not a disk share
prin

[Samba] samba domain controller

2006-05-23 Thread Rodney Richison

I tried to post this in the debian group, but my mail never appeared there..

Am attempting to do a test install of samba as a primary domain
controller. I can see the shares and navigate them.
However, when I attempt to join the domain, WinXP says "username could
not be found".
I have a root user with a password. I can see it's shares as well if I
use the root name and password.
So the problem appears to be ONLY when I try to join. I'll post some
logs for /var/logs/samba/log.0.0.0.0 as they may be a hint.


[2006/05/23 09:56:15, 0] lib/util_sock.c:get_peer_addr(1150)
 getpeername failed. Error was Transport endpoint is not connected
[2006/05/23 09:56:15, 0] lib/access.c:check_access(328)
[2006/05/23 09:56:15, 0] lib/util_sock.c:get_peer_addr(1150)
 getpeername failed. Error was Transport endpoint is not connected
 Denied connection from  (0.0.0.0)
[2006/05/23 09:56:15, 1] smbd/process.c:process_smb(1084)
[2006/05/23 09:56:15, 0] lib/util_sock.c:get_peer_addr(1150)
 getpeername failed. Error was Transport endpoint is not connected
 Connection denied from 0.0.0.0
[2006/05/23 09:56:15, 0] lib/util_sock.c:write_socket_data(430)
 write_socket_data: write failure. Error = Connection reset by peer
[2006/05/23 09:56:15, 0] lib/util_sock.c:write_socket(455)
 write_socket: Error writing 5 bytes to socket 27: ERRNO = Connection
reset by peer
[2006/05/23 09:56:15, 0] lib/util_sock.c:send_smb(647)
 Error writing 5 bytes to client. -1. (Connection reset by peer)
r writing 5 bytes to client. -1. (Connection reset by peer)
[2006/05/23 09:56:15, 0] lib/util_sock.c:send_smb(647)
 Error writing 5 bytes to client. -1. (Connection reset by peer)
r writing 5 bytes to client. -1. (Connection reset by peer)

Below is my smb.conf file.

[global]
# the domain name
workgroup = pdc
smb passwd file = /etc/samba/smbpasswd

# the server's name
netbios name = file-server

# comment describing what the machine is
server string = the file server

# workstations will set their time by this server
time server = yes

# security and logging settings
security = user ; this must be 'user' on a PDC
# allow connections only from the local machine and the 10.0.0.* address
range:
# (you'll want to change this if your network uses a different
addressing range)
hosts allow = 127.0.0.1 192.168.1.
# don't allow connections from any other IP address ranges than defined
by 'hosts allow':
hosts deny 0.0.0.0/0
# only allow connections from ethernet cards and the loopback address:
interfaces = eth* lo
bind interfaces only = yes

# for Windows 2000 encrypted passwords
encrypt passwords = yes

# provide logon scripts, home directories etc aswell as authentication
domain logons = yes

log file = /var/log/samba/log.%m
# log level = 2

# put a capping on the size (in kB) of the log file
max log size = 50

# PDC and master browser settings
os level = 64 ; ensure this machine consulted 1st regarding current
browse list
preferred master = yes
local master = yes
domain master = yes ; This is the Primary Domain Controller

# automatedly add a Linux and Samba machine account
add user script = /usr/sbin/useradd -d /dev/null -g machines -s
/bin/false -M %u


# user profiles and home directory
# the local path to which the home ([HOMES]) directory will be connected
logon drive = H:

# where 'profiles' = [profiles] further on
logon path = \\%L\profiles\%U

logon script = netlogon.bat ; logon script, location defined in [NETLOGON]

# define user mappings between this system and Windows systems.
# without this you get asked for a password even if none is required
# username map = /etc/samba/users.map
# but if you've created SMB users on here you don't need it

# fine-tuning Samba for increased speed on Linux systems
# SO_KEEPALIVE - sends a probe every 4 hours to check that a connection
is still active. if the connection does not respond, it is closed
# TCP_NODELAY -
# IPTOS_LOWDELAY -
# SO_SNDBUF=14596 - 14596 is roughly the best in most ciscumstances, it
may be able to be tuned better for your system
# SO_RCVBUF=14596 - same reason as above
socket options = TCP_NODELAY, IPTOS_LOWDELAY, SO_KEEPALIVE,
SO_SNDBUF=14596, SO_RCVBUF=14596

# keep the case when saving; when looking for a file
# matching is done without regard to case, as expected by Windows
preserve case = yes
short preserve case = yes
case sensitive = no

# check every 30 seconds to see if client has disconnected
# I've used 30 so that the Samba server can be restarted and
# maybe the connections won't be lost
keep alive = 30

#sync Unix passwords from Windows workstations using PAM
unix password sync = yes
pam password change = yes

# printing
printing = BSD
print command = /usr/bin/lpr -r %s
min print space = 2000

# --- shares ---

[printers]
# (picks up all printers specified in /etc/printcap)

# tell Samba its a printer share, not a disk share
printable = yes

# printer = lp
read only = yes
guest ok = yes

[profiles]
comment = users' profile directories
path = /home/samba/profiles
read only = no
browseable

[Samba] make: Circular /cygdrive/c/Documents <- /cygdrive/c/Documents

2006-05-23 Thread Justin Akazan
Hello, 


I followed the instructions from  samba.org to 
compile release-3.0.4 and I got the following 
error message: 

make: Circular /cygdrive/c/Documents <-
/cygdrive/c/Documents dependency dropped. 
make: Circular and <- /cygdrive/c/Documents dependency
dropped. 
make: Circular and <- and dependency dropped.
...

I cannot execute "make". What should I do to fix 
this problem?


Thank you for your assistance. 


Regards, 

Justin Akazan
Wireless Ve. 
McLean, VA

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 4.0 LDAP backend -- replacement for OpenLDAP?

2006-05-23 Thread Ken D'Ambrosio
I was reading up on the Linux Magazine overview of Samba 4.0
(http://www.linux-magazine.com/issue/67/Samba_4_Technical_Preview.pdf),
and noticed that Samba 4 was going to have its own LDAP backend ("LDB",
according to the article).  Since I'm planning on rolling out LDAP
authentication at my site in the not-incredibly-distant-future, should I
consider using the Samba LDAP backend instead of OpenLDAP?  Is there a
comparison of the two?

Thanks much,

-Ken D'Ambrosio

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba Win64 XP not authenticating logon and Failing

2006-05-23 Thread David Reta
We currently built some new Windows XP 64 Bit systems and installed them
on the network. These are not able to connect to Samba shares. The XP 32
Bit systems have no problem connecting to the shares. I was using
samba3-3.0.22-26 and it was not working. I then downloaded 3.0.14a and
patched it with the following change and rebuilt it. This is still not
working.

 

Here is what I patched with.

 

if(p->out_data.data_sent_length + data_len >=
prs_offset(&p->out_data.rdata)) {
   p->hdr.flags |= RPC_FLG_LAST;
-  if ((auth_seal || auth_verify) && (data_len_left % 8)) {
+  if ((auth_seal || auth_verify ||
p->netsec_auth_validated) && (data_len_left % 8)) {
   ss_padding_len = 8 - (data_len_left % 8);
   DEBUG(10,("create_next_pdu: adding sign/seal
padding of %u\n",
   ss_padding_len ));

 

 

Here is my smb.conf file.

 

[EMAIL PROTECTED] bin]# ./testparm /etc/samba/smb.conf

Load smb config files from /etc/samba/smb.conf

Processing section "[engr]"

Loaded services file OK.

Server role: ROLE_DOMAIN_MEMBER

Press enter to see a dump of your service definitions

 

# Global parameters

[global]

workgroup = REDWOODCITY

server string = Engineering Home Directories

interfaces = 192.168.7.90/25

security = SERVER

password server = 192.168.7.144

smb passwd file = /etc/samba/smbpasswd

username map = /etc/samba/smbusers

log file = /var/log/samba/%m.log

max log size = 50

socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

local master = No

wins server = 192.168.7.132

idmap uid = 6000-66000

idmap gid = 6000-66000

winbind use default domain = Yes

cups options = raw

 

[engr]

comment = Engineering Home Directories

path = /engr

read only = No

guest ok = Yes

 

 

Here is a copy of the debug from the Samba server.

 

  socket option IPTOS_THROUGHPUT = 0

[2006/05/23 11:16:43, 5] lib/util_sock.c:print_socket_options(147)

  socket option SO_SNDBUF = 16384

[2006/05/23 11:16:43, 5] lib/util_sock.c:print_socket_options(147)

  socket option SO_RCVBUF = 16384

[2006/05/23 11:16:43, 5] lib/util_sock.c:print_socket_options(147)

  socket option SO_SNDLOWAT = 1

[2006/05/23 11:16:43, 5] lib/util_sock.c:print_socket_options(147)

  socket option SO_RCVLOWAT = 1

[2006/05/23 11:16:43, 5] lib/util_sock.c:print_socket_options(147)

  socket option SO_SNDTIMEO = 0

[2006/05/23 11:16:43, 5] lib/util_sock.c:print_socket_options(147)

  socket option SO_RCVTIMEO = 0

[2006/05/23 11:16:43, 3] auth/auth_server.c:server_cryptkey(75)

  connected to password server 192.168.7.144

[2006/05/23 11:16:43, 3] auth/auth_server.c:server_cryptkey(100)

  got session

[2006/05/23 11:16:43, 6] lib/util_sock.c:write_socket(449)

  write_socket(26,183)

[2006/05/23 11:16:43, 6] lib/util_sock.c:write_socket(452)

  write_socket(26,183) wrote 183

[2006/05/23 11:16:43, 10]
lib/util_sock.c:read_smb_length_return_keepalive(505)

  got smb length of 109

[2006/05/23 11:16:43, 5] lib/util.c:show_msg(464)

[2006/05/23 11:16:43, 5] lib/util.c:show_msg(474)

  size=109

  smb_com=0x72

  smb_rcls=0

  smb_reh=0

  smb_err=0

  smb_flg=136

  smb_flg2=53249

  smb_tid=0

  smb_pid=30051

  smb_uid=0

  smb_mid=1

  smt_wct=17

  smb_vwv[ 0]=8 (0x8)

  smb_vwv[ 1]=12815 (0x320F)

  smb_vwv[ 2]=  256 (0x100)

  smb_vwv[ 3]= 1024 (0x400)

  smb_vwv[ 4]=   65 (0x41)

  smb_vwv[ 5]=0 (0x0)

  smb_vwv[ 6]=  256 (0x100)

  smb_vwv[ 7]=0 (0x0)

  smb_vwv[ 8]=0 (0x0)

  smb_vwv[ 9]=64768 (0xFD00)

  smb_vwv[10]=  499 (0x1F3)

  smb_vwv[11]=35328 (0x8A00)

  smb_vwv[12]=51266 (0xC842)

  smb_vwv[13]=38155 (0x950B)

  smb_vwv[14]=50814 (0xC67E)

  smb_vwv[15]=41985 (0xA401)

  smb_vwv[16]= 2049 (0x801)

  smb_bcc=40

[2006/05/23 11:16:43, 10] lib/util.c:dump_data(1995)

  [000] B3 C9 17 EE 3D 17 69 79  52 00 45 00 44 00 57 00  =.iy
R.E.D.W.

  [010] 4F 00 4F 00 44 00 43 00  49 00 54 00 59 00 00 00  O.O.D.C.
I.T.Y...

  [020] 53 00 55 00 4E 00 00 00   S.U.N... 

[2006/05/23 11:16:43, 5] lib/util.c:show_msg(464)

[2006/05/23 11:16:43, 5] lib/util.c:show_msg(474)

  size=109

  smb_com=0x72

  smb_rcls=0

  smb_reh=0

  smb_err=0

  smb_flg=136

  smb_flg2=53249

  smb_tid=0

  smb_pid=30051

  smb_uid=0

  smb_mid=1

  smt_wct=17

  smb_vwv[ 0]=8 (0x8)

  smb_vwv[ 1]=12815 (0x320F)

  smb_vwv[ 2]=  256 (0x100)

  smb_vwv[ 3]= 1024 (0x400)

  smb_vwv[ 4]=   65 (0x41)

  smb_vwv[ 5]=0 (0x0)

  smb_vwv[ 6]=  256 (0x100)

  smb_vwv[ 7]=0 (0x0)

  smb_vwv[ 8]=0 (0x0)

  smb_vwv[ 9]=64768 (0xFD00)

  smb_vwv[10]=  499 (0x1F3)

  smb_vwv[11]=35328 (0x8A00)

  smb_vwv[12]=51266 (0xC842)

  smb_vwv[13]=38155 (0x950B)

  smb_vwv[14]=50814 (0xC67E)

  smb_vwv[15]=41985 (0xA401)

  smb_vwv[16]= 2049 (0x801)

  smb_bcc=40

[2006/05/23 11:1

[Samba] Problems with "net rpc trustdom establish"

2006-05-23 Thread kalilac

Hello peaplo.
I´m training to establish a domain relationship.
The first comand "#net rpc trustdom adm aaa -S bkp -U root%111 -I 
192.168.0.1" is working fine.
But when a trai to establish with this command: "#net rpc trustdom establish 
adm -S bkp -U root%111 -I 192.168.0.1"
I receive this message: 


[2006/05/23 18:16:45, 0] utils/net_rpc.c:rpc_trustdom_establish(4632)
Couldn't find domain controller for domain ADM 


I attempted to just this:
"#net rpc trustdom establish adm -U root%111 -I 192.168.0.1" 

and nothing 

Here my smb.conf 



[global]
netbios name = debian
workgroup = sambaConf
log file = /var/log/samba/log.%m
max log size = 50
security = user
smb passwd file = /etc/samba/smbpasswd
passdb backend = smbpasswd
add user script = /usr/sbin/useradd -m %u
add machine script = /usr/sbin/useradd -g machine -c "Samba machine" -d 
/dev/null -s /bin/false -M %u

wins server = 192.168.0.150
interfaces = 192.168.0.1
socket address = 192.168.0.255
bind interfaces only = yes

winbind separator = +
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = Yes
template homedir = /home/winnt/%D/%U
template shell = /bin/bash
template shell = /bin/false
obey pam restrictions = Yes
syslog = 0
idmap uid = 15000-2
idmap gid = 15000-2 

Please helpe me 



Kalil de A. Carvalho.
Setor de Redes.
+55-84-3212-1236/8845-9998
UnP - Universidade Potiguar
APEC - Associação Potiguar de Educação e Cultura. 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] HA-Samba

2006-05-23 Thread marcos rocha

does samba's dfs root support replication ???
if so, it is somehow a ha.

Marcos

--- Volker Lendecke <[EMAIL PROTECTED]>
escreveu:

> On Tue, May 23, 2006 at 09:59:50AM +, marcos
> rocha wrote:
> > what about running dfs root with samba ???
> > is it possible to run a domain dfs root with samba
> ???
> 
> Sure it is. See the options 'host msdfs' and 'msdfs
> root'.
> 
> But this is not real clustering :-)
> 
> Volker
> 




___ 
Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de e-mail no celular e 
anti-spam realmente eficaz. 
http://br.info.mail.yahoo.com/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Linux - Automount with password prompt

2006-05-23 Thread Ken D'Ambrosio
On Tue, May 23, 2006 4:31 pm, Aaron Couts wrote:
> Hello,
> I'd like to enable automounting of Samba shares during linux startup, but
> I don't want to store any passwords in fstab or .credentials.  Is there
> any way to prompt the user for a password during startup?  I'm running
> Redhat Enterprise Linux 3.0.

With all due respect, then you probably don't want to be using fstab or
the like; instead, have it be a user-side script they can execute, instead
of having to watch console output -- which can be difficult to interact
with, regardless, and would probably cause you boot problems if the user
failed to interact with it.

$.02,

-Ken

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Linux - Automount with password prompt

2006-05-23 Thread Aaron Couts
Hello,
I'd like to enable automounting of Samba shares during linux startup, but 
I don't want to store any passwords in fstab or .credentials.  Is there 
any way to prompt the user for a password during startup?  I'm running
Redhat Enterprise Linux 3.0.
Thanks,
Aaron
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] allocate_print_jobid: failed to allocate a print job for queue lbrmgt

2006-05-23 Thread Mineau, Kevin
Update / resolution:

After additional investigation into our problem, we have occasionally
seen an entry like:

   wks069195 () connect to service lbrmgt initially as user
nobody (uid=-2, gid=-2) (pid 1015860)

We then opened up the permissions on /var/spool/samba/lbrmgt.  (chmod
777)
Since then this error condition has stopped.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Domain logins: 2 small issues

2006-05-23 Thread Rob Hall


- Original Message - 
From: "Rob Hall" <[EMAIL PROTECTED]>

To: 
Sent: Wednesday, May 17, 2006 8:50 AM
Subject: [Samba] Domain logins: 2 small issues



Hey gang,
   I've managed to get samba servers working as PDCs/BDCs with LDAP 
backend for replication. Working fine. Here's my problems:
1) A new machine will not join the domain on the first attempt. Apparently 
samba creates the machine account but can't authenticate it. I have 
attempt to join a second time for it to authenticate and succeed. This 
isn't that big of a deal, and if I don't figure it out, I'm not in a major 
bind.


2) After a machine joins a domain, EVERYTHING in msconfig is gibberish. 
Looking in the registry, every entry now has either a "C" or just "" for 
it's entry. Also, the machines now pop up the system32 folder on login. 
This is the one I *REALLY* need help with. My smb.conf is as follows:


--
[global]
netbios name = 
workgroup = 
server string = 
security = user
hosts allow = 
log file = /var/log/samba.%m
max log size = 50
log level = 1
passdb = ldapsam:ldap://127.0.0.1
socket options = TCP_NODELAY
interfaces = 
local master = yes
os level = 64
domain master = yes
preferred master = auto
domain logins = yes

# LDAP authentication stuff:
ldap admin dn = cn=Manager,dc=,dc=com
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmap
ldap machine suffix = ou=Computers
ldap passwd sync = Yes
ldap suffix = dc=,dc=com
ldap user suffix = ou=Users
idmap backend = ldap:ldap://127.0.0.1
idmap uid = 1-2
idmap gid = 1-2

logon script = logon.bat
logon path =
logon drive = H:
wins support = yes
wins proxy = no
dns proxy = no

# domain scripts
 add user script = /usr/local/sbin/smbldap-useradd -a '%u'
 add group script = /usr/local/sbin/smbldap-groupadd -p '%g'
 add user to group script = /usr/local/sbin/smbldap-groupmod -m '%u' '%g'
 delete user script = /usr/local/sbin/smbldap-userdel '%u'
 delete user from group script = /usr/local/sbin/smbldap-groupmod -x '%u' 
'%g'

 set primary group script = /usr/local/sbin/smbldap-usermod -g '%g' '%u'
 add machine script = /usr/local/sbin/smbldap-useradd -w '%u'
 delete group script = /usr/local/sbin/smbldap-groupdel '%g'

# Share Definitions 
==

[homes]
  comment = Home Directories
  browseable = no
  writable = yes

# Un-comment the following and create the netlogon directory for Domain 
Logons

[netlogon]
  comment = Network Logon Service
  path = /usr/local/samba/lib/netlogon
  guest ok = yes
  writable = no
  share modes = no

[shared]
  comment = Shared Space
  path = /usr/local/share/common
  public = yes
  writable = yes
  printable = no
  create mask = 777

-- end 
smb.conf 


Any help/suggestions is greatly appreciated.

Thanks!
--
Rob


Nobody has any suggestions?
--
Rob 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] LDAP Upgrades (both Unix and Samba)

2006-05-23 Thread Brian White

The latest version of this document can be found at

http://pobox.com/~bcwhite/ldap-upgrade.txt


Last Updated:  2006-05-23

I just upgraded our company's network from a system created 6 years ago 
(NIS and SMBPASSWD) to an up-to-date one (for 2006, at least) including 
a central LDAP server.  It was a far from painless experience, so I 
thought I'd write up the experience in the hope that it may help others. 
 If I've left anything out, please let me know. 
mailto:[EMAIL PROTECTED] (or if I've left there, 
mailto:[EMAIL PROTECTED]).


I used my own "cfile" utility (http://sf.net/projects/cfile) to manage 
all the configuration files across multiple machines.  I hope to package 
it up for Debian soon.


Here's what I did...  Note that I'm using Debian 3.1 as my installed system.



Create an LDAP Server  (apt-get install slapd)
~~

Ref:http://www.metaconsultancy.com/whitepapers/ldap.htm
http://www.tldp.org/HOWTO/LDAP-HOWTO/
http://www.grennan.com/ldap-HOWTO.html

SLAPD has to be one of the most difficult things to wrap your head 
around I've ever come across.  Perhaps if you spoke LDAP in your sleep, 
it would all be obvious, but I've smoothed out the brick wall next to me 
banging my head against it these past few days.


Getting SLAPD (v2.2.23) started wasn't much trouble.  I set my suffix 
(aka "base") to "dc=precidia".  This would typically be 
"dc=precidia,dc=com", but I'm lazy.  I also set my default password 
style to SSHA (salted-SHA) and set an administrator access point.  Since 
I planned on disabling this access point later, I just used a basic 
"crypt" to store the password.


# "secret" is password, "XX" is salt (use any two letters or 
numbers)

perl -e 'print crypt("secret","XX"),"\n"'
XXIABNgk3eFuw

password-hash SSHA
rootdn cn=root,dc=precidia
rootpw {crypt}XXIABNgk3eFuw

Also, create all the appropriate indices for speed:

index   objectClass eq
index   cn  pres,sub,eq
index   sn  pres,sub,eq
index   uid pres,sub,eq
index   displayName pres,sub,eq
index   uidNumber   eq
index   gidNumber   eq
index   memberUid   eq
index   sambaSIDeq
#index  sambaPrimaryGroups  eq
index   sambaDomainName eq
index   default sub


Push these changes with: /etc/init.d/slapd force-reload

In brief, LDAP is an object storage system where objects are grouped 
(typcially) by an "organizationalUnit", or "ou" for short.  Of course, 
you can't simply store an object specifying a new "ou=something"; you 
first have to create an object that describes it.  Thus, before you can 
store objects in "ou=Domains" you first have to store the object:


dn: ou=Domains,dc=precidia
ou: Domains
objectClass: top
objectClass: organizationalUnit

The first line is the "distinuguished name" and is the unique identifier 
for this object.  Every object has one and it details the hierarchy 
under which the object is stored.  In this case, my "base" (the root of 
my tree) is "dc=precidia" and the sub-tree is "Domains".  Despite the 
fact that I said you cannot store an object in a "ou=Domains" without 
first creating it, it is possible to create it and store it there at the 
same time.


Enabing Ssecure LDAP ("ldaps") is left as an exercise to the reader! 
(That means I haven't yet done it at the time this was written.)


Luckily, the LDAP Account Manager will do much of that for you...



Migrate Existing UNIX Information
~

Ref:http://www.linuxjournal.com/article/6266
http://www.gurulabs.com/goodies/downloads.php
http://www.gurulabs.com/downloads/ldapmigrate

For this, I used the "ldapmigrate" perl script desribed above.  For this 
to run, you'll have to install "libnet-ldap-perl" and maybe a few 
others.  Then, on your ldap server, do:


cd /var/data/ldap
/etc/init.d/slapd stop
rm -f *
/etc/init.d/slapd start

This will give you a clean database to start from.  I restarted from 
this point many, many times.


Create an "admin" account for LDAP administration.  It will need a valid 
password but should have an invalid shell to prevent unix login (because 
it will eventually have root access -- see Samba section).  A vaild home 
directory may be useful, though.


Before doing the migration, I edited the "ldapmigrate" script and 
changed all occurances of "Group" to "Groups" for naming consistancy and 
to match the defaults of the LDAP Account Manager.


Then do the migration...

LDAPBIND="cn=root,dc=precidia"
LDAPPASS="secret"
LDAP

Re: [Samba] I need your help about Microsoft pleaseeeee

2006-05-23 Thread Jonathan Johnson

On 5/16/2006 4:26 PM, William Tran wrote:
> Dear JimCould you please help me out with a couple questions here ? 1. Which 
> Administrative tool would you use to manage a user account in Active 
> Directory ? 2. Define roaming profile and its advantages ?3. With 
> administrator rights , how can you access a user's hard drive from your 
> workstation without the use of shared folders ?  Thanks alot in advance. Best 
> Regards, W Tran
>
>   
Did you REALLY mean to post this in the Samba forum? If not, then I hope
I've done you a favor by alerting you that your message did not reach
the intended recipient.

This looks like you are asking us to do your homework for you. We won't.
Do your own research, you might learn something useful.

You have made other errors in your post:

1. Your subject line does not describe the problem accurately (it
indicates the YOU have the problem, not your Samba installation)
2. Your questions have nothing to do with Samba, per se. They can, I'm
sure, be answered by properly formatted Web searches or by reading
Microsoft Windows Administration texts.
3. Your message is poorly formatted. Judicious use of white space (hint:
use a few carriage returns) is a good thing.

Best of luck to you on your exams.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] resource used

2006-05-23 Thread Nicolas Pereyra

How I known what resource is being used in samba?
I have a PDC that run out of memory when the users is accessing on file
server and any processes smbds use more than 60% of CPU.
The server run over Debian Sarge with kernel 2.6.12, Samba 3.0.20b-2+b1 with
slapd 2.2.26-5

Thanks,
Nicolas Pereyra
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] usrmgr.exe "group name could not be found" error

2006-05-23 Thread Tom
I've been having this problem on one of my PDC's where when using usrmgr 
from a windows box, I get the error: The group name could not be found. 
Since all of the groups samba is interested in exist and since they are 
all mapped to the appropriate posix groups I'm not sure where to start 
with this one.


A 'net rpc group list' gives the following:

Domain Guests
Domain Admins
Domain Users

A 'net groupmap list' provides the following:

System Operators (S-1-5-32-549) -> -1
Replicators (S-1-5-32-552) -> -1
Guests (S-1-5-32-546) -> -1
Domain Guests (S-1-5-21-1579542642-193579-1944909670-514) -> nobody
Domain Admins (S-1-5-21-1579542642-193579-1944909670-512) -> root
Power Users (S-1-5-32-547) -> -1
Print Operators (S-1-5-32-550) -> -1
Administrators (S-1-5-32-544) -> -1
Account Operators (S-1-5-32-548) -> -1
Domain Users (S-1-5-21-1579542642-193579-1944909670-513) -> users
Backup Operators (S-1-5-32-551) -> -1
Users (S-1-5-32-545) -> -1

smb.conf relevant parts:

passdb backend = tdbsam
add user script = /usr/sbin/useradd -m '%u'
delete user script = /usr/sbin/userdel -r '%u'
add group script = /usr/sbin/groupadd '%g'
delete group script = /usr/sbin/groupdel '%g'
add user to group script = /usr/bin/gpasswd -a '%u' '%g'
delete user from group script = /usr/bin/gpasswd -d '%u' '%g'
add machine script = /usr/sbin/useradd -s /bin/false -d /tmp '%u'
shutdown script = /var/lib/samba/scripts/shutdown.sh
abort shutdown script = /sbin/shutdown -c
map acl inherit = Yes

What log level should I look at if required?

This is running on Slackware 9.1, Samba 3.0.21b.

Thanks.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] smbcontrol for memory state

2006-05-23 Thread Nicolas Pereyra

Hi
I want to know about memory state of smb. I use ldap in passdb backend in
smb.conf, and I read the man of smbcontrol, but I obtain:

dcint:/var/log# smbcontrol smbd pool-usage
Processing section "[netlogon]"
Processing section "[SERVER NT]"
Processing section "[BANCO95]"
Processing section "[BANCO98]"
Processing section "[biblio]"
Processing section "[Info_financ]"
Processing section "[Informes]"
Processing section "[jupe2]"
Processing section "[jupe3]"
Processing section "[new_siaf]"
Processing section "[SABYS]"
Processing section "[SIAF2]"
Processing section "[SIAF.NEW]"
Processing section "[siaf_tesoro]"
Processing section "[siafdmfas]"
Processing section "[Siare]"
Processing section "[Sibe]"
Processing section "[sicap]"
Processing section "[SIGE]"
Processing section "[sime2]"
Processing section "[sime_fue]"
Processing section "[SINARH4]"
Processing section "[sinarh_fue]"
Processing section "[SPB95]"
Processing section "[SPB98]"
Processing section "[sqln]"
Processing section "[Sqlnet2.w95]"
Processing section "[UTILITAR]"
Processing section "[Version4]"
Processing section "[xnear-share]"
Processing section "[xnear-informes]"
Processing section "[jupecheque]"
Registered MSG_REQ_POOL_USAGE
Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
00


smbcontrol really detail me of memory state?
Thanks,
Nicolas Pereyra
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Long delay when printing from XP (over samba, cups, raw)

2006-05-23 Thread Gerald Drouillard

Seag wrote:

Hi all together,

I set up a SAMBA-Server as Primary Domain Controller. Everything works
so far, I can logon to domain, get printers and shares, etc...

But when I start a print job in windows xp nothing happens for about 3-5
minutes an then it is printed (without problems).
Try changing your print driver.  We had the same issue with a XP HP 
print driver and downloaded a newer driver from HP and the problem went 
away.



--
Regards
--
Gerald Drouillard
Technology Architect
Drouillard & Associates, Inc.
http://www.Drouillard.ca
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Preventing non-domain user from accessing domain resources

2006-05-23 Thread fransisco . mario
Hi,

I've just built a Samba PDC on SuSE 10.0 OSS (the open source version)
with openldap as the backend passwd wrapped in the same machine.
Everything (almost) works fine: windows users (win98/Me or winXP Pro) can
authenticate against the PDC+LDAP server or change their password - thanx
to Samba. But something just doesn't right. Users that login into their
computers using their local accounts (2 rows authentication mode without
the domain text box) with the same login names and passwords reside in the
LDAP server may still access another computer that had already joinned the
domain. If bad guys (with winXP Pro) try to connect to the domain
computers then the domain computers will happily provide them with an
authentication welcome message. Just type the login name and password -
voila, you're in! Is that weird or is that just how things work within a
domain? I thought non-domain computers will be kept out off the domain? Is
that an IPsec or group-policy matters as in the windows environment? I am
trully a newbie about those two subjects. That's the 1st problem.

I've also built another file server (redhat 9, samba has been reinstalled
using samba3, different workgroup from the PDC but samba share directory
is accessible for the domain users, the passwd backend is the LDAP
server). But I can only login locally - even as root - into the samba file
server when the LDAP server is running and the samba file server is
connected to the network! Why can't I log in against the local passwd? Any
idea or can somebody point me to the thread related with those two
problems? I've lost months trying to fix them. Thank you.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem mapping from windows x64 version

2006-05-23 Thread Emídio Augusto Arantes Macedo

Hi George,

I´ve simply changed the way samba clients authenticates on PDC, chaging 
the smb.conf  variable "security" from "server" to "domain".  Only works 
if the client join the domain.  Dont know why, but after that  mapping  
from xp x64 now works.


Cheers,

Emidio



Emidio,

I have this same problem.  Did you get any help fixing it or come up 
with a fix yourself?


Thanks,
George



*[Samba] Problem mapping from windows x64 version*
*Emidio Augusto Arantes* _emidio at crc.dcc.ufmg.br _ 
/

Wed Apr 12 22:43:22 GMT 2006/

* Previous message: _[Samba] Problem mapping from windows x64
  version _
  
* Next message: _[Samba] Adding a GNU/Linux client to a FreeBSD
  Domain controller _
  
* *Messages sorted by:* _[ date ]_
  
  _[ thread ]_
  
  _[ subject ]_
  
  _[ author ]_
  




I got a problem mapping a network drive from a samba sharing server wich
authenticates on a PDC samba server.  Windows says "network path was not
found" but the bdc's log says it tried to authenticate on the server but
it seems the client disconected before. Mapping from a windows 32bit
version or directly from the pdc  everything works fine. Does anybody
knows a way to fix it? The samba version is 3.0.22  at both pdc and
sharing client, both freebsd 5-4.

Thanks..
E.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] copy of smbpasswd

2006-05-23 Thread John H Terpstra
On Monday 22 May 2006 22:25, C.Rathnasinghe wrote:
> Hi
> I have same problem exactly U got,  even I post earlier to this group
> but didn't get any help If U do resolve this Please update me also. thanks.

Before asking for help did it is a good idea to check available documentation. 
Did either of you happen to check chapter 8 of the book "Samba-3 by Example"?

http://www.samba.org/samba/docs/Samba3-ByExample.pdf

This chapter was written to help those who need to migrate, update, or upgrade 
a Samba server. Is this information what you need? If not - file a bug 
report!

- John T.

>
> chami
>
> Tom Haerens wrote:
> > Hi,
> >
> >
> > I have to move our old samba file server to a new machine.
> > The old samba server was a RedHat8 with samba 2.2.5.  The new one is
> > SLES9 with samba 3.0.2b-3.4 SuSE
> >
> > Is there a way to re-use the old smbpasswd file?
> >
> > In the log-files I can see that the authentication fails when I try to
> > access a shared folder.
> > A windows client keeps on asking the login and password.
> >
> > Is it possible to re-use the smbpasswd file?
> >
> > When I create a new smbpasswd file, everything works fine.
> > But, I want to avoid that everybody has to re-enter his or her
> > password...
> >
> >
> > Kind Regards,
> > Tom
>
> --
> This e-mail message is confidential and for use by the addressee only.
> If the message is received by anyone other than the addressee, please
> return the message to the sender by replying to it and then delete the
> message from your computer. Internet e-mails are not necessarily
> secure.Ministry of Finance & Planning does not accept responsibility for
> changes made to this message after it was sent.
>
> Whilst all reasonable care has been taken to avoid the transmission of
> viruses, it is the responsibility of the recipient to ensure that the
> onward transmission, opening or use of this message and any attachments
> will not adversely affect its systems or data. No responsibility is
> accepted by Ministry of Finance & Planning Sri Lanka in this regard.
>
> --

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, 2 Ed., ISBN: 0131882228
Samba-3 by Example, 2 Ed., ISBN: 0131882221X
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba behind firewall

2006-05-23 Thread marcos rocha

Hi Ivan,

try to configure and use wins.


Marcos

--- Ivan Ordonez <[EMAIL PROTECTED]>
escreveu:

> Hi,
> 
> I was able to join samba to the domain successfully
> (net rpc testjoin 
> command says ok) but could not see it in network
> neighborhood.  I can't map 
> to it as well.  The machine is sitting on a
> different subnet and behind the 
> firewall.
> 
> What port should I open to make samba accessible to
> all Windows XP client 
> sitting on different subnets and not behind the
> firewall.  I want to make 
> samba a domain member and use it for file, printer
> sharing etc.
> 
> Settings:
> Samba version 3.0.22 with Windows NT 4.0 server and
> XP clients.
> 
> Thanks in advance for all the help.
> 
> -Ivan
> 
> .
> 
> -- 
> To unsubscribe from this list go to the following
> URL and read the
> instructions: 
> https://lists.samba.org/mailman/listinfo/samba
> 




___ 
Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de e-mail no celular e 
anti-spam realmente eficaz. 
http://br.info.mail.yahoo.com/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba & Windows 2003 AD

2006-05-23 Thread Veronica Hill
Firstly, winbind is going to be your best friend with AD, so yes set it 
up.  idmap_rid is particularly easy for companies with many sites that 
need consistent UID & GID mapping. (think centralized backups using 
rsync and you'll get the idea)


Secondly the Domain Users Group doesn't fully exist in any practical 
way under Samba..

Do:
getent group | grep domain\ users

I think you'll see why..  This is a weird one that the Samba guys 
haven't coded for yet (from what I remember).  The domain users group 
is "special" as in Microsoft special.  I create shares that have access 
to a specific group of users, because the DU group is unusable ( I 
don't think that's FUD ).  If I want access to be given to a large 
group of users then I create a group specifically for that site / area 
and add all users that are at that site / area into that group.


Bye, Veronica.

On 19 May 2006, at 00:54, [EMAIL PROTECTED] wrote:


Hello,

I have joined my samba 3.0.7 server successfully to Windows 2003 ADS, 
and

Kerberos authentication seems to work fine, provided that the user also
exists on the Linux machine. However, I can't seem to create a share 
that
grants access to the Domain Users Group. Will I need to set up Winbind 
for
that or is there a way to do this in my current setup? If I need to 
set up

winbind, will I need to remove the ADS bits in my smb.conf file?

Any tips are very much appreciated.

Stijn
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] HA-Samba

2006-05-23 Thread Volker Lendecke
On Tue, May 23, 2006 at 09:59:50AM +, marcos rocha wrote:
> what about running dfs root with samba ???
> is it possible to run a domain dfs root with samba ???

Sure it is. See the options 'host msdfs' and 'msdfs root'.

But this is not real clustering :-)

Volker


pgpgRdf7w3p56.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] HA-Samba

2006-05-23 Thread marcos rocha

Hi Jeremy,

what about running dfs root with samba ???
is it possible to run a domain dfs root with samba ???

Marcos


--- Jeremy Allison <[EMAIL PROTECTED]> escreveu:

> On Mon, May 15, 2006 at 04:19:20PM +0200,
> Dr.Peer-Joachim Koch wrote:
> > 
> > our file services is running on a gfs (global file
> system).
> > Therefore we have a couple of machines seeing all
> the same
> > file system and can work parallel on the file
> system.
> > 
> > Is it somehow possible to run samba on 3-4 nodes
> > with the same shares using ONE name ?
> > So if one server fails, there are still enough
> other
> > working nodes.
> 
> Not currently. There are several companies that have
> this working, but it needs Samba support (I know SGI
> have a version of Samba that will do this) - and
> this
> needs merging back to the mainline version. It's
> fairly
> high on our priority list, but very hard to do
> right.
> 
> Maybe James could comment more
> 
> Jeremy.
> -- 
> To unsubscribe from this list go to the following
> URL and read the
> instructions: 
> https://lists.samba.org/mailman/listinfo/samba
> 




___ 
Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de e-mail no celular e 
anti-spam realmente eficaz. 
http://br.info.mail.yahoo.com/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] connections.tdb file keeps growing.

2006-05-23 Thread Duncan Brannen


Hi,
  I think I've found the cause of the large smbd processes.

Does each smbd process keep a pointer to the connections.tdb file?  This 
keeps growing
and is currently over 20MB in size despite there being only 40 current 
users and 80 smbd

processes?

smbstatus reports services being accessed and files locked by non 
existent pids

which are over a month old.

Samba 3.0.21c on Solaris 10

Is there any way to force samba to refresh / clear out this file or does 
it require a restart?


Cheers,
 Duncan

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem

2006-05-23 Thread Denis Vlasenko
On Monday 22 May 2006 10:05, Bastiaan Hollander (Bas Kwadraat ) wrote:
> I have a problem with my samba server and mij Apple imac G5. 
> The connection is very slow. Can you tell me what the problem is.

Please read:

http://www.catb.org/~esr/faqs/smart-questions.html
--
vda
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] wbinfo -g Error looking up domain groups

2006-05-23 Thread Jan Luehr
Hello,

sadly, I've some problem adding a DMS (Sama 3.0.22 on Debian Sarge) to our 
donain (hosted by Samba 3.0.14 on SuSE 9.0 - not managed by me.).

I added my dms by using net rpc join without any problem and wbinfo -u lists 
all domain users. But somehow wbinfo -g fails with "Error looking up domain 
groups"
net user -S pdc and net group -S pdc are both working on the dms, but say

[2006/05/23 10:37:07, 0] utils/net_ads.c:ads_startup(191)
  ads_connect: Transport endpoint is not connected
when I execute 'em.

The relevant(?) parts of my smb.conf are:

security = server
winbind use default domain = yes
idmap uid = 4970-2
idmap gid = 1000-2
template shell = /bin/bash

Do you know what's wrong here?

Thanks in advance,
Keep smiling
yanosz
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Problem

2006-05-23 Thread Robert Mortimer
No config details
No hardware specs
No log output
No description of the operating environment
No definition of slow.

Humm let me think?

If you ring up the garage and tell them your car is slow would you expect
them to have an answer without looking at it or maybe asking some more
questions (model, funny noises, position of petrol gauge etc)?

Maybe start with the following question

Where can I find out about trouble shooting samba performance issues?

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
> ]On Behalf Of Bastiaan Hollander (Bas Kwadraat )
> Sent: 22 May 2006 08:06
> To: [EMAIL PROTECTED]
> Subject: [Samba] Problem
>
>
> I have a problem with my samba server and mij Apple imac G5.
> The connection is very slow. Can you tell me what the problem is.
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba