Re: [Samba] with ldap - samba - password sync - domain group map
hello! so may passwd-chat line is as follows: passwd chat = *New\spassword:* %n\n *Re-enter\snew\spassword:* %n\n . note the asterisk and dot (i haven't really understood now what the dot means, but the asterisks match anything, and maybe the blank (\s) between passwd: and %n is just no plain blank but something different. ok, i moved the passwdchat to following line: passwd chat = *New*\spassword:*\s* %n\n *Re-enter*\snew*\spassword:*\s % n\n *Result:*\sSuccess*\s(0)\n . and the log tells: expect: expected [*New* password:* *] received [New password: ] match no whats going wrong on my system? since last mail i made a new server with samba 2.2.4, but compiled it myself (so i know whats going on ;-) ). the situation doesn't change! could it be that i need an additionally package or anything similar? thanks and lg thomas reisenbichler -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] VPN and SAMBA
Hello! I've got a problem with DNS,VPN and SAMBA. I do have 3 Linux servers on distinct subnets. (192.168.1.1 ,192.168.2.1 and 192.168.3.1). I have done a VPN between the 3 subnets and I could do a ping from 192.168.1.1 to the others without problems. Each sever has 2 network cards. One of them is connected to ADSL. From 192.168.1.1, I could see the samba server from 192.168.2.1 when I do nmblookup -A 192.168.2.1 for example and if I am working in a win98 client, I could connect with another computer from the other lans such as this computer was on my lan. In lan1 server is server1, in lan2 server is server2 and server3 in lan3 My problem is that I would like the w98 clients could see the 3 lans at the same time on the windows explorer. Now I can see the three servers on the explorer but when i try to connect to other server, windows says me that it couldn't find the name of the server, however, since dos promp i can do -- net view \\server and it's ok Is a problem If netbios-name from the 3 servers are the same name? Somebody can help me??? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba-LDAP:Ldap call each time you open a text file?
At 11:14 19/06/2002, Andrew Bartlett wrote: werner maes wrote: Hello, When I open a text file on a Samba fileserver using LDAP for authentication, Samba always makes these LDAP calls (see below). The user has been authenticated so why does Samba still makes these LDAP connections? Samba's ldap handling is 'inefficient' to say the least. It also hits the underlying getpw*() interface a fair bit - particulary becouse clients often request additional info about a file - like owner - and sysadmins have various smb.conf options set. Thanks for the information. Do you know whether this ldap handling will be improved? I tried to eliminate the smb.conf options that could effect this behaviour but with no result. The ldap calls were still made. Werner -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba as a PDC for W2K Network
Matt Hughes [EMAIL PROTECTED] schrieb: I have setup a Machine Trust Account with the following commands with no success: /usr/sbin/useradd -g 100 -d /dev/null -c corp -s /bin/false corp$ passwd -l corp$ smbpasswd -a -m corp$ As far as I know (and as the HOWTOs say), you cannot join a domain with Win2K after you've created a Machine Trust Account manually. Rather, give root a password in /etc/[samba/]smbpasswd (different to his unix password) and create the trust account on the fly, as described in the HOWTOs. I'm a little befuddled. Any advice or something I may have missed in my smb.conf file? Thanks a bundle in advance. SMB.CONF [global] workgroup = INAVNET2 netbios name = SYMPHONY2 server string = Samba %v on (%L) encrypt passwords = Yes obey pam restrictions = Yes pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* unix password sync = Yes log file = /var/log/samba/%m.log max log size = 0 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u logon drive = H:domain logons = Yes That should be on separate lines. Bye, Frank -- Frank Fürst, physikalische Biochemie, Universität Potsdam, Germany Tel.: +49-331-977-5244 Fax: +49-331-977-5062 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba-LDAP:Ldap call each time you open a textfile?
werner maes wrote: At 11:14 19/06/2002, Andrew Bartlett wrote: werner maes wrote: Hello, When I open a text file on a Samba fileserver using LDAP for authentication, Samba always makes these LDAP calls (see below). The user has been authenticated so why does Samba still makes these LDAP connections? Samba's ldap handling is 'inefficient' to say the least. It also hits the underlying getpw*() interface a fair bit - particulary becouse clients often request additional info about a file - like owner - and sysadmins have various smb.conf options set. Thanks for the information. Do you know whether this ldap handling will be improved? I tried to eliminate the smb.conf options that could effect this behaviour but with no result. The ldap calls were still made. Most of this is simply glibc and nsswitch doing their stuff. The rest is becouse we re-open smbd's own ldap connections per use. However, what you see is just glibc at work. Try using ncsd if this bothers you. Does this really affect performance? Just becouse somthing can be logged doesn't mean that its a problem. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Introducing new time tracking solution by myHours.com!
Title: myHours myHours.com is a new time tracking solution. It enables you to track you work time, projects you work on and tasks you perform. It is web based and can be used from any location at any time. It's free. Click here to learn more.We are sorry if this message bothers you. We believe this is a sound offer from which many people will benefit. We won't send another message to you.www.myHours.com[EMAIL PROTECTED]
RE: [Samba] Samba and netbios --- HEEEEELLLP!!!
Could I take a look at your smb.conf? There are some files that you may find your answer to your question. Check out 1. /usr/share/doc/samba-version/textdocs/BROWSING-Config.txt 2. /usr/share/doc/samba-version/textdocs/BROWSING.txt --- Dmitry Voronov [EMAIL PROTECTED] wrote: I could do that but it doesn't solve the issue as to why it's not working with netbios. It should and it does with my laptop. I don't like abandoning problems. There is a reason it's not working and I don't believe in voodoo magic (...yet). Thanks, Dmitry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Rongyao Sent: Tuesday, June 18, 2002 12:17 PM To: Rongyao; Dmitry Voronov; Enrique Sanchez Vela Cc: Samba Subject: RE: [Samba] Samba and netbios --- HELLLP!!! Sorry I forgot to add one more point. Configure your other clients to point to the correct wins server.. I do it using dhcp to distribute the information. Apart from using dhcp to distribute wins server ip, I also distribute router(gateway) ip, dns ip..etc --- Rongyao [EMAIL PROTECTED] wrote: Check out www.samba.org for documentation on Network neighborhood. Maybe it is a good idea that you set up a WINS server. in global section of smb.conf , enter wins support = yes --- Dmitry Voronov [EMAIL PROTECTED] wrote: Not DNS, NetBIOS over TCP. By name query, I didn't mean DNS but NMB. Dmitry -Original Message- From: Enrique Sanchez Vela [mailto:[EMAIL PROTECTED]] Sent: Tuesday, June 18, 2002 11:46 AM To: Dmitry Voronov; samba Subject: Re: [Samba] Samba and netbios --- HELLLP!!! so, are you telling me windows (netbios) uses standard tcpip DNS queries ? I find that difficult to swallow since there are a bunch of pcs not in the DNS, visible on the network neighborhood. thanks, esv --- Dmitry Voronov [EMAIL PROTECTED] wrote: Well, it does matter because that's the only way the other machines know you're there. They send out a name query for the domain name and if no one responds, it's not there. Same with the name of the machine. My problem is actually a little different. After setting up the laptop at home and bringing it to work, it worked perfectly fine. I just can't get any other machine on the network to follow suit. Dmitry Enrique Sanchez Vela wrote: Hi all, I have the same problem at the cust lan, I took the samba server with me, set it up at home and it worked perfectly at the first time, then took it to the office it also worked, but when its time to take it to customer's office, it refuses to work. the only difference is related to tcp/ip name resoultion but it should not matter. regards, esv. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dmitry Voronov Sent: Monday, June 17, 2002 12:31 PM To: [EMAIL PROTECTED] Subject: [Samba] Samba and netbios --- HELLLP!!! Wow, ok, whatever the problem is, I'm now pretty convinced that it's over my head. I am trying to setup samba as the PDC for our network. I cannot for the life of me get it to work. I went home, tried it on my laptop and it worked in 15 seconds. I came to work, setup the server exactly the same and...nothing. The domain either does not exist or could not be contacted blah blah. I've resorted to looking at the details of what's going on with ethereal. I can see no difference in the way the two machines register themselves but the server does not respond to name queries, neither to its netbios name nor the domain name. The laptop does. I am running way short on ideas. I have tried Potato, Woody, Redhat 7.1, 7.3. 7.1 is what's on my laptop. I've tried 2.2.3a-something (6 I think), 2.2.4-2. No difference. I tried duplicating the net setup of the laptop on the server with no luck (hostnames, static ip etc). I just don't get it. IT SHOULD WORK! Please help!!! Dmitry __ === message truncated === __ Do You Yahoo!? Yahoo! - Official partner of 2002 FIFA World Cup http://fifaworldcup.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] NT clients are not logging on
I configured my Samba server asa PDC for the domain and I was able to join the NT 4 service pack 6 clients to join to the domain, using samba automatic scripting. The machines are joined properly and I got the welcome message to the domain. After I restart the NT client, while logging on to domain, its not logging on and I got a message " The system cannot log u on to the domain because the systems computer account in the primary domain is missing or the password on that account is incorrect" I am using Mandrake linux 8.2 and Samba ver 2.2.3a If anybody can help me on this matter please mail me on [EMAIL PROTECTED] thanks Do You Yahoo!? Sign-up for Video Highlights of 2002 FIFA World Cup
max smbd processes
hello, i'm using Samba Version 2.2.4 on Solaris 5.8 in my smb.conf i have max smbd processes = 200 when i use tesparm for checking i've the following answer : ERROR: the 'max smbd processes' parameter is set and the 'status' parameter is set to 'no'. What is wrong in my configuration ? thanks a lot for reply Alain Defrance Ingénieur systèmes et réseaux Service Informatique Université d'Evry Val d'Essonne [EMAIL PROTECTED] 01.69.47.80.69 06.74.09.19.54 www.univ-evry.fr
Re: max smbd processes
On Wed, Jun 19, 2002 at 09:00:56AM +0200, Alain Defrance wrote: hello, i'm using Samba Version 2.2.4 on Solaris 5.8 in my smb.conf i have max smbd processes = 200 when i use tesparm for checking i've the following answer : ERROR: the 'max smbd processes' parameter is set and the 'status' parameter is set to 'no'. What is wrong in my configuration ? Why do you have the status parameter set to no? From the smb.conf manual page: status (G) This enables or disables logging of connections to a status file that smbstatus(1) can read. With this disabled smbstatus won't be able to tell you what connections are active. You should never need to change this parameter. Default: status = yes Counting the number of concurrent smbd processes requires the logging of connections to the status file, connections.tdb. Try removing 'status = no' from your smb.conf Tim.
Re: max smbd processes
Why do you have the status parameter set to no? i've never set status =no in my smb.conf !!! but now i append the line status =yes and the answer is the same ! ERROR: the 'max smbd processes' parameter is set and the 'status' parameter is set to 'no' here is the begining of my smb.conf status = yes workgroup = mySERVER hosts allow = 194.199. 172.16. 127. client code page = 850 character set = ISO8859-1 log file = /usr/local/samba/var/log.%m max log size = 50 security = server password server = server encrypt passwords = yes socket options = TCP_NODELAY os level = 33 domain master = yes preferred master = yes dns proxy = no max connections = 80 max disk size = 20 max smbd processes = 80 deadtime = 10 Alain Defrance Ingénieur systèmes et réseaux Service Informatique Université d'Evry Val d'Essonne [EMAIL PROTECTED] 01.69.47.80.69 06.74.09.19.54 www.univ-evry.fr
Re: Winbindd!
Tim Potter wrote: On Wed, Jun 19, 2002 at 09:15:31AM +0300, Osman Tufanogullari (Garanti Teknoloji) wrote: One more question. Today i also work on it but when you look into a share's properties on NT or 2000 desktop, there is a Security tab on this panel... If you have a share on a linux server ( intented to use as a file print server ), from a windows NT or 2000 desktop, Can we define security parameters (adding and deleting user with read/write rights) using that panel? I think share level security is supported in the 2.2 series of Samba. Give it a try and find out! Watch that language! Per-share ACLs are supported in 2.2 and above. 'Share level security' is somthing compleatly different - 'security = share' in smb.conf - and is somthing we have always supported. (It refers to one password per share, not one password per user. Samba implments this, but takes 'guesses' at the username instead... Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net
RE: Winbindd!
I really need the answer ... The question is hard to ask so i try to give an example.. There is a sharing on Linux with Samba 2.2.4 called Shared1... We are using winbindd for unified logons and all the users and groups of our domains and trusted domains are mapped in the unix machine... These are supposed to be OK. There are two domain users called teknolojy\andrew and teknolojy\tim... These domains are Win2000 domains... And users are windows 2000 users... The need is to use Linux servers as print and file servers in our Win2000 domains with unified logons... Sharing1 points the directory /var/documents and drwxrwxrwx is given to it File system ext3... Is it possible to give r/w rights to teknology\andrew whereas we give only r permission to teknolojy\tim... And also teknolojy\domain users will have the only read permission..??? That means is it possible to implement all the rights ,that Win2000 supports, in Samba? ( Full Control, Read, Write, Execute... ) Because of Unix drwxrwxrwx rules, it doesnt seem to me YES to the answer of the question! Because drwxrwxrwx , owner, group and world is only 3 parameter. But i can need different parameteres for each of my users? Do you know the one who successfully imlement it fully in his company? Many thanks. -Original Message- From: Andrew Bartlett [mailto:[EMAIL PROTECTED]] Sent: Wednesday, June 19, 2002 11:04 AM To: Tim Potter Cc: Osman Tufanogullari (Garanti Teknoloji); [EMAIL PROTECTED] Subject: Re: Winbindd! Tim Potter wrote: On Wed, Jun 19, 2002 at 09:15:31AM +0300, Osman Tufanogullari (Garanti Teknoloji) wrote: One more question. Today i also work on it but when you look into a share's properties on NT or 2000 desktop, there is a Security tab on this panel... If you have a share on a linux server ( intented to use as a file print server ), from a windows NT or 2000 desktop, Can we define security parameters (adding and deleting user with read/write rights) using that panel? I think share level security is supported in the 2.2 series of Samba. Give it a try and find out! Watch that language! Per-share ACLs are supported in 2.2 and above. 'Share level security' is somthing compleatly different - 'security = share' in smb.conf - and is somthing we have always supported. (It refers to one password per share, not one password per user. Samba implments this, but takes 'guesses' at the username instead... Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net
