[Samba] OES Samba question

2007-06-01 Thread Jordan Nielsen
We are currently running Open Enterprise Server from Novell and have been migrating to Samba. We have ran into an issue where occasionally a user will click on a directory and it will just sit there forever with an hour glass or flashlight. If you go to the same directory through a command prompt a

Re: [Samba] policy files

2007-06-01 Thread Dmitri Colebatch
Hi again, I've now got this all working, and thought I'd outline what I did for others: On 6/1/07, Adam Tauno Williams <[EMAIL PROTECTED]> wrote: > Thanks for the tip - I think half my problem is I'm not exactly sure what > I'm looking for. ADM files and POLEDIT.EXE With that piece of info

Re: [Samba] Weird behaviour when using "kernel oplocks = yes" leading to "corrupt" files - bug in samba?

2007-06-01 Thread Jeremy Allison
On Fri, Jun 01, 2007 at 11:44:29PM +0200, Matthias Merz wrote: > Hi folks, > > Today I noticed some strange behaviour when accessing a samba server > (samba 3.0.25a) from windows: On our Debian fileserver I prepared a > file testfile.txt being owned by user usera and group dpt-a. Then I > "setfacl

Re: [Samba] roaming profiles in a home environment

2007-06-01 Thread Dmitri Colebatch
Hi Charles, Josh, et al, Firstly, this is getting off topic a little, so don't read on unless you're interested in how Samba might be used to make email usage easier in a home environment with multiple computers. On 6/2/07, Charles Marcus <[EMAIL PROTECTED]> wrote: Josh Kelley wrote: > On 5/31

[Samba] 3.0.24 -- Office read only issue, bizarre EAs and disappearing ACLs

2007-06-01 Thread Aaron Kincer
Everyone, I have finally resolved the new heartburn 3.0.24 on Ubuntu Feisty was giving me and have stumbled upon some information that might help others out there. I was seeing problems with ACL entries getting mangled and disappearing, Excel making files read only and extended attributes do

[Samba] Weird behaviour when using "kernel oplocks = yes" leading to "corrupt" files - bug in samba?

2007-06-01 Thread Matthias Merz
Hi folks, Today I noticed some strange behaviour when accessing a samba server (samba 3.0.25a) from windows: On our Debian fileserver I prepared a file testfile.txt being owned by user usera and group dpt-a. Then I "setfacl -m g:admins:rwx testfile.txt". User userb who is only in group admins, but

Re: [Samba] roaming profiles in a home environment

2007-06-01 Thread Charles Marcus
Josh Kelley wrote: On 5/31/07, Charles Marcus <[EMAIL PROTECTED]> wrote: I would recommend against doing this... Microsoft itself recommends against it, but I have also had problems with corruption in .pst files that are stored on a network share, both on Windows shares *and* Samba shares...

[Samba] Not seeing the expected group memberships with ifmember.exe /list

2007-06-01 Thread Michael Lueck
We have bumped into a most odd problem. Server: Debian Etch and their Samba 3.0.24-2 Client: WinXP SP2, MSI v3, all hot fixes The following settings are in place on the server: #!/bin/bash # # initGrps.sh # Map Windows Domain Groups to UNIX groups net groupmap add ntgroup="Domain Admins" unixg

[Samba] Net command help. Please!

2007-06-01 Thread Henrik Zagerholm
Hello, What user flags are available to the net ads | rpc user add command. It states in the man pages that you can add [-F user flags] but not which flags? Please help this is important as I now only can create disabled users in my AD. Regards, Henrik -- To unsubscribe from this list go

[Samba] net ads dns register question

2007-06-01 Thread Henrik Zagerholm
Hello, First time using the new ads function and have some questions. I'm issuing the command 5 times with different parameters and only one succeeds. #net ads dns register DNS update failed! #net ads dns register -P DNS update failed! #net ads dns register -P -I 10.170.4.10 DNS update fail

Re: [Samba] Samba 3.025 wbinfo checking the trust secret via RPC calls failed

2007-06-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gaiseric Vandal wrote: > Do you know if this was specific to Solaris? Or is linux also > affected?I had configure warnings building on solaris 9 > and 10. Generic bug to all platforms I think. Have not confirmed it yet though. jerry -B

[Samba] Interdomain Trust the NT-style

2007-06-01 Thread Thorkil Olesen
I have upgraded to SAMBA 3.0.25a and that broke my interdomain trust to Windows 2003. I have seen a similar error before, so I don't think it is directly related to the new version. But I still need som help... Creating the trust (CALYPSO is the Windows 2003-server): [EMAIL PROTECTED] /root]# ne

RE: [Samba] Difficulty w/Offline Files and Samba 3.0.25

2007-06-01 Thread Schaefer Jr, Thomas R.
I filed a bug report about this exact issue yesterday. Everything you are describing aligns 100% with what I'm experiencing too. I can use the exact same smb.conf with 3.0.24 and it works fine. The bug report is at https://bugzilla.samba.org/show_bug.cgi?id=4673 (down for maintenance as I type t

Re: [Samba] Samba 3.025 wbinfo checking the trust secret via RPC calls failed

2007-06-01 Thread Gaiseric Vandal
Do you know if this was specific to Solaris? Or is linux also affected?I had configure warnings building on solaris 9 and 10. Thanks On 6/1/07, Gerald (Jerry) Carter <[EMAIL PROTECTED]> wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gaiseric Vandal wrote: >pdc # ./wbinfo -

[Samba] Difficulty w/Offline Files and Samba 3.0.25

2007-06-01 Thread David F. Severski
Good morning, I have a working Offline Files setup w/Samba 3.0.24 (FreeBSD 6.2 host OS) and a Win XP SP2 client. Upon updating to Samba 3.0.25, the XP client's offline cache would show (as viewed via the Offline Files Folder) that synced files are write-only ('User W' in the Access column). When

Re: [Samba] What makes excel file opening so slow??

2007-06-01 Thread Gaiseric Vandal
Can you set Excel to use the local drive for the temporary files? By default, MS Office creates temporary files in the same directory as the original file. In the past, troubleshooting a LAN related issue, it seemed that when saving a file, excel would rewrite the entire file to a new file then

Re: [Samba] Fwd: Samba 3.025 wbinfo checking the trust secret via RPC calls failed

2007-06-01 Thread Gaiseric Vandal
This affects local logins as well as RDP. On 6/1/07, Jean-Jacques Moulis <[EMAIL PROTECTED]> wrote: On Thu, 31 May 2007 17:53:10 -0400 Gaiseric Vandal <[EMAIL PROTECTED]> wrote: GV> I joined 2 Windows 2003 machines to the domain. I was able to log as GV> "administrator" and "root" but no other

[Samba] Re: groupmapping impossible?

2007-06-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Urs, > Does someone know how to do this group mapping in samba? Please read the documentation or at least the right help text. # /opt/samba/bin/net groupmap add Usage: net groupmap add {rid=|sid=} unixgroup= [type=] [ntgroup=] [comment=] No offens

Re: [Samba] net groupmap --> HELP!

2007-06-01 Thread Urs Golla
Usage: net time to view or set time information net lookupto lookup host name or ip address net user to manage users net group to manage groups net sam to edit the local user database directly net lookupto look up va

Re: [Samba] groupmapping impossible?

2007-06-01 Thread Chris Smith
On Friday 01 June 2007, Urs Golla wrote: > Does someone know how to do this group mapping in samba? why does "net > groupmap x y" has no effect? If I map a domain group to a local group, > then the members of the domain group should be treated as members of > the local group, or not? Maybe spendin

Re: [Bulk] [Samba] Trying to mount a Linux share on Windows

2007-06-01 Thread Adam Tauno Williams
> > You can mount Linux file systems on Windows you just have to have the right > > utilities to do so. Linux supports NTFS (NTVFS is another matter) with > > ntfs-3g now. > So for instance, I could take a partition on a Windows server (NTFS) and > share it using Samba instead of the Windows sha

[Samba] groupmapping impossible?

2007-06-01 Thread Urs Golla
Does someone know how to do this group mapping in samba? why does "net groupmap x y" has no effect? If I map a domain group to a local group, then the members of the domain group should be treated as members of the local group, or not? On 6/1/07, Urs Golla <[EMAIL PROTECTED]> wrote: Usage: ne

Re: [Bulk] [Samba] Trying to mount a Linux share on Windows

2007-06-01 Thread Miguel Gonzalez Castaños
You can mount Linux file systems on Windows you just have to have the right utilities to do so. Linux supports NTFS (NTVFS is another matter) with ntfs-3g now. So for instance, I could take a partition on a Windows server (NTFS) and share it using Samba instead of the Windows share service

Re: [Samba] roaming profiles in a home environment

2007-06-01 Thread Josh Kelley
On 5/31/07, Charles Marcus <[EMAIL PROTECTED]> wrote: I would recommend against doing this... Microsoft itself recommends against it, but I have also had problems with corruption in .pst files that are stored on a network share, both on Windows shares *and* Samba shares... Just to share my own

Re: [Samba] net groupmap --> HELP!

2007-06-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Urs Golla wrote: > Hi > > I mean, if i do a "net groupmap add mydomaingroup mylocalgroup". what > is exactly the result of this? That's not valid syntax. run "net group" for the syntax help text. cheers, jerry -BEGIN PGP SIGNATURE- Vers

Re: [Samba] net groupmap --> HELP!

2007-06-01 Thread Urs Golla
Hi I mean, if i do a "net groupmap add mydomaingroup mylocalgroup". what is exactly the result of this? cheers On 6/1/07, Gerald (Jerry) Carter <[EMAIL PROTECTED]> wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Urs Golla wrote: > Hello > > I still have a problem with the "net groupmap a

Re: [Samba] policy files

2007-06-01 Thread Dmitri Colebatch
Hi again, On 6/1/07, Adam Tauno Williams <[EMAIL PROTECTED]> wrote: You are seeing documentation on GPOs / Group Policies. You want NT4 Domain Policies. You need to look at *OLD* Windows documentation. If it doesn't mention NT4, or it mentions AD, ignore it. A... now that, makes sense

Re: [Samba] policy files

2007-06-01 Thread Adam Tauno Williams
> All the information I've been able to find references windows tools Of course. > - the > part I'm missing is where the windows tools stop and Samba takes over It doesn't, at all. NT4 domain policies require no action from the PDC at all. It is just a file loaded by the client from a specif

[Samba] Do Machine Accounts Expire?

2007-06-01 Thread lists
I recently started playing with pdbedit to set the maximum password age policy on v3.0.25a. After setting this policy, I see that running pdbedit -Lv shows the machine accounts expiring in the same time frame as the user accounts. So my question is do the machine accounts actually expire jus

Re: [Samba] samba problem: Multiple Heap Overflows Allow Remote Code Execution

2007-06-01 Thread Volker Lendecke
On Fri, Jun 01, 2007 at 03:54:05PM +0800, liujack wrote: > Dear Jeremy:We use samba 2.2.12 as our samba > server, and it worked perfectly before, but now there > is one security problem found in samba 3.0 now, so we > worry about our samba server, but for some reason we can't > upda

Re: [Samba] net groupmap --> HELP!

2007-06-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Urs Golla wrote: > Hello > > I still have a problem with the "net groupmap add" command. If I add a > domain group to a lcoal group, the memebers of the domain group should > show up as members of the local group. Or am I totaly wrong? Yes. But that

Re: [Samba] Re: changing ACLs only as owner possible

2007-06-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: > Dos filemode works for the main unixgroup, but not for ACL-Users/Groups > (with full access). > Is there an opportunity also for ACL-Users/Groups It does apply to acls in current releases. Easlier release use the "acl g

Re: [Samba] samba problem: Multiple Heap Overflows Allow Remote Code Execution

2007-06-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 liujack, > Dear Jeremy:We use samba 2.2.12 as our > samba server, and it worked perfectly before, > but now there is one security problem found in > samba 3.0 now, so we worry about our samba server, > but for some reason we can't

Re: [Samba] Samba 3.025 wbinfo checking the trust secret via RPC calls failed

2007-06-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gaiseric Vandal wrote: >pdc # ./wbinfo -t >checking the trust secret via RPC calls failed >error code was NT_STATUS_INVALID_HANDLE (0xc008) >Could not check secret Known issue. I'll fix this for 3.0.25b. In the

Re: [Samba] policy files

2007-06-01 Thread Cardon Denis
Hi Dimitri, > I think I have two questions - one which is samba and one which is windows > policy files. I'll try to limit this question to the samba side but will > give the full picture for completeness. > > I'm trying to implement a simple policy to redirect a few simple folders > (for starte

[Samba] net groupmap --> HELP!

2007-06-01 Thread Urs Golla
Hello I still have a problem with the "net groupmap add" command. If I add a domain group to a lcoal group, the memebers of the domain group should show up as members of the local group. Or am I totaly wrong? cheers -- To unsubscribe from this list go to the following URL and read the instructio

Re: [Samba] policy files

2007-06-01 Thread Dmitri Colebatch
Hi Adam, Thanks for your reply. A couple a questions inline: On 5/31/07, Adam Tauno Williams <[EMAIL PROTECTED]> wrote: This is a Windows issue, not a Samba issue. All the information I've been able to find references windows tools - the part I'm missing is where the windows tools stop and

[Samba] Re: changing ACLs only as owner possible

2007-06-01 Thread Bjoern_80
Sven Geggus schrieb: > [EMAIL PROTECTED] wrote: > > > > But I'll can  change ACLs, if i'm the owner of this file/folder. If > > I'm member of an ownerproup or I have full access via ACLs (as user or > > as a member of a group) I always get an error message: > > setfacl: test_unixgrpvoll: Op

[Samba] Re: Samba authentication slow after upgrade to Samba 3

2007-06-01 Thread Gary Mansell
I have a gut feeling that this is to do with encrypted passwords. I have "encrypt passwords = no" set and pc's have the clear text password hack - could this be causing it? I really don't want to go t encrypted passwords if I can help it as it will mean another password file to keep in sync. R

[Samba] Re: changing ACLs only as owner possible

2007-06-01 Thread Sven Geggus
[EMAIL PROTECTED] wrote: > But I'll can  change ACLs, if i'm the owner of this file/folder. If I'm > member of an ownerproup or I have full access via ACLs (as user or as a > member of a group) I always get an error message: > > setfacl: test_unixgrpvoll: Operation not permitted RTFL hels in

[Samba] Repost: Can't follow DFS link

2007-06-01 Thread Kent Tong
Hi, I am using 3.0.22 on Ubuntu 6.06. I'm trying to setup a DFS root. Here is the smb.conf share section: My smb.conf file is: [global] # use default ; security = user host msdfs = yes [Share] path=/var/Share writable=yes msdfs root=yes The dfs link is: # ls -l /var/Share/Data/2007/OfficeAdmi

[Samba] samba problem: Multiple Heap Overflows Allow Remote Code Execution

2007-06-01 Thread liujack
Dear Jeremy:We use samba 2.2.12 as our samba server, and it worked perfectly before, but now there is one security problem found in samba 3.0 now, so we worry about our samba server, but for some reason we can't update to samba 3.0.25, so can you tell us whether the problem be

[Samba] Samba authentication slow after upgrade to Samba 3

2007-06-01 Thread Mansell, Gary
Hi, I have just upgraded a server from Samba 2 to Samba 3 and some of the Windows clients are taking a long time to authenticate shares (1 or 2 minutes). Eventually the username/password box appears and then when you enter a correct password, all is fine - it is just the initial authentication. T

Re: [Samba] Fwd: Samba 3.025 wbinfo checking the trust secret via RPC calls failed

2007-06-01 Thread Jean-Jacques Moulis
On Thu, 31 May 2007 17:53:10 -0400 Gaiseric Vandal <[EMAIL PROTECTED]> wrote: GV> I joined 2 Windows 2003 machines to the domain. I was able to log as GV> "administrator" and "root" but no other accounts, whether local or GV> not. The user accounts them self seem OK- it just seems to be a GV> winb