Re: [Samba] Suport to HP UX 10.20

2003-02-20 Thread Jonathan Gowland
On Thu, Feb 20, 2003 at 11:35:10AM -0300, MARIO YWAO AKIOKA wrote:

> I need to test SAMBA with a HP K 9000 Class machine, with HP-UX 10.20
> operating system.
> Wich SAMBA software version is compatible with this OS? How can I get this
> software?

You can get Samba 2.2.3a for HP-UX 10.20, in HP-UX "depot" format (for
use with the HP-UX "swinstall" command), from the Software Porting And
Archive Centre for HP-UX (http://hpux.connect.org.uk/ - it has nine
mirrors in other locations).

We've been running Samba from this site for years, and running the
above version for the last six months.

-- 
Jonathan Gowland 
GenaWare
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Controlling use of roaming profiles

2003-02-04 Thread Jonathan Gowland
We are using a system running Red Hat Linux 7.0 with Samba 2.2.7a as
our PDC.

For the most part, we want to use roaming profiles, so that users'
settings are backed up via the PDC, and are available if they need to
change or reinstall their Windows desktop machine.  However, there are
a few Windows systems (running NT 4.0 or Windows 2000) for which
we would like to be able to disable roaming profiles.

Atlas is a system running Windows 2000 server.  It is a member of the
domain.

On a system running Windows NT 4.0 Terminal Server edition I did the
following:

- Logged on as local administrator.

- Ran poledit.exe.

- Added machine Atlas.

- Double-clicked Atlas icon.  Under "Windows NT User Profiles"->"Choose
  profile default operation", selected "Use local profile".

- Saved as NTConfig.pol and copied to the root directory of the netlogon
   share.

When a user does a domain logon on Atlas, the Samba log log.atlas does
not show NTConfig.pol being accessed.  When the user logs off, updates
to the user's profiles are saved.

Agrigento is a system running Windows 2000 Workstation, and is also a 
member of the domain.  I ran poledit.exe as above, but added a computer 
entry for Agrigento, and saved NTConfig.pol.

When a user does a domain logon on Agrigento, the Samba log
log.agrigento shows NTConfig.pol being accessed. However, when the user
logs off, updates to the user's profiles are saved, so the policy change 
in NTConfig.pol seems to have no effect.

So what am I doing wrong?  Is it possible to disable the use of roaming 
profiles on a per-machine basis?  (I've been told that you can do this 
on a per-account basis, but this is not appropriate for our needs.)

--

Jonathan Gowland
GenaWare

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Can't see domain groups on Win 2K client

2002-12-02 Thread Jonathan Gowland
We have Samba 2.2.7 (the RPM for Red Hat 6.2 built by the Samba Team)
running on Red Hat 7.0.  It's set up as a PDC, with the config. file
as follows:

# Global parameters
[global]
workgroup = ESPL
server string = GenaWare Sydney main file server
interfaces = 192.168.20.2/24
encrypt passwords = Yes
smb passwd file = /etc/samba/smbpasswd
passwd program = /usr/bin/passwd %u
passwd chat = *password* %n\n *password* %n\n *successfull*
unix password sync = Yes
log file = /var/log/samba/log.%m
max log size = 50
name resolve order = host wins lmhosts bcast
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
domain logons = Yes
logon script = espl.bat
os level = 60
preferred master = Yes
time server = Yes
domain master = Yes
dns proxy = No
wins proxy = Yes
wins support = Yes
add user script = /usr/sbin/useradd -c 'Machine trust account' -d /dev/null -s 
/bin/false -M -g winboxes %u 

On an NT Workstation 4 with Service Pack 5:

The system is a member of the domain, and I can log on to the
domain on this system.

When using the Windows Explorer Properties applet to try to add
permissions to a file on a local disk, I can only see domain users
in the list, plus default domain groups (e.g Domain Users) but I
can enter a known domain group, and this is added successfully to
the file's ACLs.

On Windows 2000 (Workstation + Service pack 2, or Server + Service Pack 3)

The system is a member of the domain, and I can log on to the
domain on this system.

When using the Windows Explorer Properties applet to try to add
permissions to a file on a local disk, I can only see domain users
in the list, plus default domain groups (e.g Domain Users).  If I
enter a known domain group, I get the response "Invalid Name".

If I select a domain user and add permissions for that user, It
appears to succeed, but when I come back to view the security
information for the file, all I see is a long user ID string, not
the user name.

Curiously, on all three client systems, I can see the domain groups when
trying to add permissions to file on a Samba share.

Is it possible to see list of domain groups when adding permissions to
a local file?

Is there something I need to change to achieve this?

More importantly, can Windows 2000 apply domain group permissions
to local files?  If so, how can this be enabled?

-- 
Jonathan Gowland  |  GenaWare Pty Limited
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba