Re: Is Active Directory integrated file sharing possible on FreeBSD?

2006-09-20 Thread Ashley Moran


On 19 Sep 2006, at 14:47, Stephanie Bridges wrote:


Ashley,

This is quite doable, and winbindd isn't broken on FreeBSD.  It  
took me a
bit to figure out how to make it work correctly, however.  I have a  
FBSD

system here that authenticates to our university AD server, and allows
access based upon membership in certain security groups.  We don't  
have
any services for unix support on our AD server either.  If your  
linux boy
needs a little help, I'd be happy to send you my config files,  
sounds like

maybe he hasn't actually done it on linux either as my FreeBSD/Linux
setups are nearly identical.



Thanks for the suggestions everyone.

Stephanie... I will take you up on your offer.  Can  you send me the  
configs you use?  He has got it working on Linux, we've got a couple  
of servers I assume are authenticating correctly.  I don't know what  
the problem is.


Ashley

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Is Active Directory integrated file sharing possible on FreeBSD?

2006-09-20 Thread Murray Taylor
 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of 
 Stephanie Bridges
 Sent: Tuesday, 19 September 2006 11:48 PM
 To: 'Ashley Moran'
 Cc: freebsd-questions@freebsd.org
 Subject: RE: Is Active Directory integrated file sharing 
 possible on FreeBSD?
 
 Ashley Moran wrote:
  On 19 Sep 2006, at 12:51, Bob M. wrote:
  
  It's absolutely possible Ashley.  We have samba 2.x 
 running on a few 
  solaris 8 through 10 servers, one might be 3.x.  One of 
 our solaris 
  admins made the mistake of making one of them a domain 
 controller and 
  it was authenticating users in an AD domain.  I've run 
 samba at home 
  on various releases of FreeBSD over the past few years. 
 You're just 
  looking to setup file shares with permissions, right?
  
  Bob
  
  
  Hi Bob
  
  Yep, all we need is a file server.  We want folders in /var/share 
  available to users in Active Directory, eg 
 /var/share/ashleymoran for 
  just me, and maybe a shared one for the office or the 
 design team etc.  
  Nothing complicated really.
  
  Our network admin said winbindd is broken on FreeBSD so he tried 
  compiling the Solaris version(!) but couldn't make that work.
  Unfortunately he's beeyessdeephobic, but I want to avoid 
 looking into 
  it myself because, well, it's not my job :)  If I have no 
 choice, do 
  you think it will take long to learn how to set it up?  I 
 don't want 
  to lose a whole day to it.
  
 
 
 Ashley,
 
 This is quite doable, and winbindd isn't broken on FreeBSD.  
 It took me a bit to figure out how to make it work correctly, 
 however.  I have a FBSD system here that authenticates to our 
 university AD server, and allows access based upon membership 
 in certain security groups.  We don't have any services for 
 unix support on our AD server either.  If your linux boy 
 needs a little help, I'd be happy to send you my config 
 files, sounds like maybe he hasn't actually done it on linux 
 either as my FreeBSD/Linux setups are nearly identical.
 
 

Please send me the configs if possible as we have a mixed environment
that the IT guys have 
just mandated 'shall be controlled by AD' ... and it was working so well
before under BSD, but 
the new ones didnt want to 'learn this command line stuff' ... sigh

mjt 
---
The information transmitted in this e-mail is for the exclusive
use of the intended addressee and may contain confidential
and/or privileged material. Any review, re-transmission,
dissemination or other use of it, or the taking of any action
in reliance upon this information by persons and/or entities
other than the intended recipient is prohibited. If you
received this in error, please inform the sender and/or
addressee immediately and delete the material. 

E-mails may not be secure, may contain computer viruses and
may be corrupted in transmission. Please carefully check this
e-mail (and any attachment) accordingly. No warranties are
given and no liability is accepted for any loss or damage
caused by such matters.
---

### This e-mail message has been scanned for Viruses by Bytecraft ###
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Is Active Directory integrated file sharing possible on FreeBSD?

2006-09-19 Thread Ashley Moran


On 18 Sep 2006, at 19:41, Bob Johnson wrote:

You might need to make sure AD support got enabled. In the samba3 port
at least, it is off by default (although winbind support is enabled by
default).



Bob,

I think that's done,  judging by the output of make config.   
Unfortunately all the feedback I've got is Done that that's the easy  
bit, its all set up and it should be working
just its returning invalid users all the time which is not really  
precise enough to expect a response from the list :)


I think I will have to look at this myself.  I just wanted to sanity  
check that it was possible more than anything.


Ashley



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Is Active Directory integrated file sharing possible on FreeBSD?

2006-09-19 Thread Bob M.
On Tue, 2006-09-19 at 10:13 +0100, Ashley Moran wrote:
 On 18 Sep 2006, at 19:41, Bob Johnson wrote:
  You might need to make sure AD support got enabled. In the samba3 port
  at least, it is off by default (although winbind support is enabled by
  default).
 
 
 Bob,
 
 I think that's done,  judging by the output of make config.   
 Unfortunately all the feedback I've got is Done that that's the easy  
 bit, its all set up and it should be working
 just its returning invalid users all the time which is not really  
 precise enough to expect a response from the list :)
 
 I think I will have to look at this myself.  I just wanted to sanity  
 check that it was possible more than anything.
 
 Ashley
 

It's absolutely possible Ashley.  We have samba 2.x running on a few
solaris 8 through 10 servers, one might be 3.x.  One of our solaris
admins made the mistake of making one of them a domain controller and it
was authenticating users in an AD domain.  I've run samba at home on
various releases of FreeBSD over the past few years.  You're just
looking to setup file shares with permissions, right?

Bob

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Is Active Directory integrated file sharing possible on FreeBSD?

2006-09-19 Thread Ashley Moran


On 19 Sep 2006, at 12:51, Bob M. wrote:


It's absolutely possible Ashley.  We have samba 2.x running on a few
solaris 8 through 10 servers, one might be 3.x.  One of our solaris
admins made the mistake of making one of them a domain controller  
and it

was authenticating users in an AD domain.  I've run samba at home on
various releases of FreeBSD over the past few years.  You're just
looking to setup file shares with permissions, right?

Bob



Hi Bob

Yep, all we need is a file server.  We want folders in /var/share  
available to users in Active Directory, eg /var/share/ashleymoran for  
just me, and maybe a shared one for the office or the design team  
etc.  Nothing complicated really.


Our network admin said winbindd is broken on FreeBSD so he tried  
compiling the Solaris version(!) but couldn't make that work.   
Unfortunately he's beeyessdeephobic, but I want to avoid looking into  
it myself because, well, it's not my job :)  If I have no choice, do  
you think it will take long to learn how to set it up?  I don't want  
to lose a whole day to it.


Ashley 
___

freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Is Active Directory integrated file sharing possible on FreeBSD?

2006-09-19 Thread Greg Barniskis

Ashley Moran wrote:

Our network admin said winbindd is broken on FreeBSD so he tried 
compiling the Solaris version(!) but couldn't make that work.  
Unfortunately he's beeyessdeephobic, but I want to avoid looking into it 
myself because, well, it's not my job :)  If I have no choice, do you 
think it will take long to learn how to set it up?  I don't want to lose 
a whole day to it.


Tell your lackey to to RTFM. =)

The Samba web site gives a bunch of scenarios and recipes for 
commonly requested configs. Procedure for joining a domain as a 
member server and creating/configuring file and print shares:


http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/FastStart.html#id2559527

--
Greg Barniskis, Computer Systems Integrator
South Central Library System (SCLS)
Library Interchange Network (LINK)
gregb at scls.lib.wi.us, (608) 266-6348
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Is Active Directory integrated file sharing possible on FreeBSD?

2006-09-19 Thread Stephanie Bridges
Ashley Moran wrote:
 On 19 Sep 2006, at 12:51, Bob M. wrote:
 
 It's absolutely possible Ashley.  We have samba 2.x running on a few
 solaris 8 through 10 servers, one might be 3.x.  One of our solaris
 admins made the mistake of making one of them a domain controller and
 it was authenticating users in an AD domain.  I've run samba at home
 on various releases of FreeBSD over the past few years. You're just
 looking to setup file shares with permissions, right?
 
 Bob
 
 
 Hi Bob
 
 Yep, all we need is a file server.  We want folders in
 /var/share available to users in Active Directory, eg
 /var/share/ashleymoran for just me, and maybe a shared one
 for the office or the design team etc.  Nothing complicated really.
 
 Our network admin said winbindd is broken on FreeBSD so he tried
 compiling the Solaris version(!) but couldn't make that work.
 Unfortunately he's beeyessdeephobic, but I want to avoid
 looking into it myself because, well, it's not my job :)  If
 I have no choice, do you think it will take long to learn how
 to set it up?  I don't want to lose a whole day to it.
 


Ashley,

This is quite doable, and winbindd isn't broken on FreeBSD.  It took me a
bit to figure out how to make it work correctly, however.  I have a FBSD
system here that authenticates to our university AD server, and allows
access based upon membership in certain security groups.  We don't have
any services for unix support on our AD server either.  If your linux boy
needs a little help, I'd be happy to send you my config files, sounds like
maybe he hasn't actually done it on linux either as my FreeBSD/Linux
setups are nearly identical.


~~~
Stephanie Bridges
Economics Department -- Iowa State University
80B Heady Hall, Ames, IA  50011
ph: 515.294.8732 ~~ fax: 515.294.0221
http://www.econ.iastate.edu




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Is Active Directory integrated file sharing possible on FreeBSD?

2006-09-19 Thread David Robillard

I just wanted to sanity check that it is possible.  I think he just
doesn't want to work on our server because it isn't Linux :)


Have you looked into Windows Services for UNIX from Microsoft ?

http://www.microsoft.com/technet/interopmigration/unix/sfu/default.mspx

I've tried version 2.0 while at another company and it was already
pretty good. They're at version 3.5 now, so one could think it's
better now.

David
--
David Robillard
UNIX systems administrator  Oracle DBA
CISSP, RHCE  Sun Certified Security Administrator
Montreal: +1 514 966 0122
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Is Active Directory integrated file sharing possible on FreeBSD?

2006-09-18 Thread Ashley Moran

Hi people

I recently added a pair of extra disks to one of our internal servers  
(FreeBSD 6.1) to give us a share for our office.  Our user  
authentication is all done by Active Directory Small Business Server  
2000.  I gave the job of getting Samba running an authenticated share  
to our Linux-fanboy network admin.  He came back to me claiming the  
following reason why it can't be done (I assume the second word  
should be followed by not):


Winbind is fully functional on FreeBSD so it doesn’t work  
authenticating with windows, ive tried compiling the Solaris  
version which is supposedly meant to work but I cant get it to  
compile.


So now I was working on a public anonymous share but that doesn’t  
work cus FreeBSD says that account is not permitted access from  
that station.


So I know give up, give me a proper linux server or light security  
abit so it dosent care who logs on from where



See bloody BSD, lol



I don't know anything about Samba, so I was wondering if someone here  
has seen a similar setup working.  Is it really impossible to do what  
I want?


Thanks
Ashley___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Is Active Directory integrated file sharing possible on FreeBSD?

2006-09-18 Thread James Seward

On 9/18/06, Ashley Moran [EMAIL PROTECTED] wrote:

 Winbind is [not?] fully functional on FreeBSD so it doesn't work
 authenticating with windows, ive tried compiling the Solaris
 version which is supposedly meant to work but I cant get it to
 compile.



I don't know anything about Samba, so I was wondering if someone here
has seen a similar setup working.  Is it really impossible to do what
I want?


In a previous job I've had squid using winbindd to do user
authentication against a native-mode Windows Server 2003 domain; I'd
say it works pretty well. Due to it being a previous job I can't
recall/lookup the exact procedure I went though to do it, but you just
have to join the BSD machine to the domain. IIRC this used to be done
with smbpasswd -J but I think they changed that to a new tool.

/JMS
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Is Active Directory integrated file sharing possible on FreeBSD?

2006-09-18 Thread Ashley Moran


On 18 Sep 2006, at 10:08, James Seward wrote:


In a previous job I've had squid using winbindd to do user
authentication against a native-mode Windows Server 2003 domain; I'd
say it works pretty well. Due to it being a previous job I can't
recall/lookup the exact procedure I went though to do it, but you just
have to join the BSD machine to the domain. IIRC this used to be done
with smbpasswd -J but I think they changed that to a new tool.



Thanks James

I just wanted to sanity check that it is possible.  I think he just  
doesn't want to work on our server because it isn't Linux :)


Ashley

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Is Active Directory integrated file sharing possible on FreeBSD?

2006-09-18 Thread Bob Johnson

On 9/18/06, Ashley Moran [EMAIL PROTECTED] wrote:



I just wanted to sanity check that it is possible.  I think he just
doesn't want to work on our server because it isn't Linux :)

Ashley


You might need to make sure AD support got enabled. In the samba3 port
at least, it is off by default (although winbind support is enabled by
default).

- Bob
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]