RE: [Samba] Samba 3 & ADS current capabilities [adr]

2003-01-31 Thread Andrew Bartlett
On Sat, 2003-02-01 at 11:57, Rick Segeberg wrote:
> Andrew,
> 
> Thanks for your response.  This reply is actually not a request for
> additional help.  After much searching throught the lists and Google
> along with a lot of experimentation, I think I've got it (mostly) figure
> out.  This post is just an effort to help others who might be struggling
> with the same issues as I was.  I'm sure it's far from perfect and if
> anyone has suggestions on improving something, I'd like to hear them.
> 
> Server Information:
>Redhad 8.0 w/ kernel 2.4.28-18.8.0
>Samba 3.0 alpha 21
> 
> Just to be sure, I've started at the beginning and double checked
> everything to make sure it matches the documentation I have.  Also, I
> apologize for the wordiness, but hopefully this will help someone else.
> Here's what I've done so far:
> 
> I successfully joined the domain (actually this shows me re-joining):
> 
> # /usr/local/samba/bin/net ads join
> [2003/01/30 15:30:04, 0] libads/ldap.c:ads_join_realm(1325)
>   Host account for lintest already exists - deleting old account
> Joined 'LINTEST' to realm 'MYDOMAIN.ORG'
> 
> Then to make sure I could actually authenticate up to the w2k ads
> server:
> 
> # ../bin/smbclient //postoffice/c\$ -k
> added interface ip=10.1.46.5 bcast=10.1.47.255 nmask=255.255.240.0
> Doing spnego session setup (blob length=113)
> Doing kerberos session setup
> OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
> smb: \> 
> 
> At the prompt, I was able to traverse all directories, etc.
> 
> In following the winbind documentation, I tried joining the domain again
> after configuring my smb.conf file (figuring this wouldn't work since
> it's quite a bit different than the 1st join command):
> 
> # bin/net rpc join -s PDC -U john.doe

I've just commited clarifications to the documentation, as this only
applies to NT4 domains.  The new documentation refers to 'net join',
which detects which based on your 'security=' setting.

> Figuring I've already joined the domain, I proceeded in following the
> documentation.  I started up winbindd (which shows as running after
> issuing "ps ax"), then tried:

> [root@lintest samba]# bin/wbinfo -t
> checking the trust secret via RPC calls failed
> error code was NT_STATUS_ACCESS_DENIED (0xc022)
> Could not check secret
> 
> Logs show:
> 
> [2003/01/31 08:34:05, 1]
> rpc_client/cli_netlogon.c:cli_nt_setup_creds(300)
>   cli_nt_setup_creds: auth2 challenge failed NT_STATUS_ACCESS_DENIED
> [2003/01/31 08:34:05, 0] nsswitch/winbindd_cm.c:cm_get_netlogon_cli(936)
>   error connecting to domain password server: NT_STATUS_ACCESS_DENIED
> 
> Windows event viewer shows this:
> 
> The session setup from the computer LINTEST failed to authenticate. The
> name of the account referenced in the security database is LINTEST$.
> The following error occurred: 
> Access is denied.  
> 
> I finally found a fix for this.  My nsswitch.conf file had the shadow
> line incorrect.  It was:

That was not the fix for that issue.  The only thing that can cause that
error is an incorrect join.

> ==
> ## nsswitch.conf
> ## created by Rick
> 
> passwd: files winbind
> shadow: files winbind
> group:  files winbind
> ==
> 
> It is now:
> ==
> ## nsswitch.conf
> ## created by Rick
> 
> passwd: files winbind
> shadow: files 
> group:  files winbind
> =
> 
> Amazing how such a small oversight can effect things.  

That's because it was something else.

> Now this works:
> 
> [root@lintest samba]# bin/wbinfo -t
> checking the trust secret via RPC calls succeeded
> 
> Since this fix, my log now show:
> 
> [2003/01/31 09:23:52, 1]
> nsswitch/winbindd_util.c:add_trusted_domain(140)
>   Added domain MYDMN  
> [2003/01/31 09:24:02, 1] nsswitch/winbindd_util.c:init_domain_list(220)
>   Retrying startup domain sid fetch for MYDMN

> 
> As you can see, this continues about every 10 seconds.
> 
> I changed my smb.conf file back (I had been experimenting with the
> difference in the security = domain vs. = ADS and password = * vs. =
> ).  I am now able to connect to the samba server from the
> domain logged in w2k workstation (without asking for a password).
> Yahoo!!!
> 
> BUT - then it occurred to me that the user I'm using is in the
> /etc/passwd file (but not in the smbpasswd file).  I commented this user
> out (using #).  After this, the user could not connect to the samba
> server.  In the documentation, it appears that I need to use "getent
> passwd" and "getent group" to pull down the user list and groups from
> the server.  This doesn't seem to work.  Here's what I get:
> 
> #getent passwd
> 
> This seemed to only list the current contents of my /etc/passwd file.
> It's my understanding that it should list this and then follow it with
> the domain users with their new uids, gids, home direcoties and default
> shells.  All I got was th

Re: [Samba] Removing Print Driver?

2003-01-31 Thread Jeff Marcille
The tab is greyed out on all of my Samba boxes, but I was able to use
the rpcclient utility with the deldriver switch to remove the offending
print driver. Thanks for taking the time to respond.


On Mon, 2003-01-27 at 13:52, Gerald (Jerry) Carter wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> On 23 Jan 2003, Jeff Marcille wrote:
> 
> > 
> > Is it possible to remove a printer driver with Samba? I can update one
> > and install them through the add/remove wizard but can not remove one.
> 
> Goto the drivers tab of the Server properties window (printers folder on 
> server; File -> Server Properties).  Only shows up on Win2k/XP clients.
> 
> 
> 
> 
> cheers, jerry
>  --
>  Hewlett-Packard- http://www.hp.com
>  SAMBA Team -- http://www.samba.org
>  GnuPG Key   http://www.plainjoe.org/gpg_public.asc
>  ISBN 0-672-32269-2 "SAMS Teach Yourself Samba in 24 Hours" 2ed
>  "You can never go home again, Oatman, but I guess you can shop there."  
> --John Cusack - "Grosse Point Blank" (1997)
> 
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.2.0 (GNU/Linux)
> Comment: For info see http://quantumlab.net/pine_privacy_guard/
> 
> iD8DBQE+NZv3IR7qMdg1EfYRAj0EAKDZFIktTBRcDPWMClQnyzJkTs9hZACeOoIa
> LEiaRf8W9Ul6iStEY4zeJtc=
> =nEud
> -END PGP SIGNATURE-
-- 
Jeff Marcille <[EMAIL PROTECTED]>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [despammed] [Samba] Samba - winXP lookup

2003-01-31 Thread Gabriele Carioli
Hi
 
> from time to time I get a ~30 second lockup

Same for me!

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Account Lockout using Security=Server

2003-01-31 Thread Andreas Hasenack
Em Fri, Jan 31, 2003 at 04:28:50PM -0600, Evans Chris - cevans escreveu:
>I was wondering if any of you could help me out. I am not a Samba user
> although we have several instances of Samba running in our organization. We
> are running into a problem with Samba machines locking out user accounts in
> our Windows 2000 domain. I have found a little information about this but
> nothing in depth. The Samba servers are configured to use security=server
> and are using our domain controllers as password servers. Every time a user
> accesses one of the samba boxes 2 incorrect password attempts is logged on

This is expected and is a drawback in this security mode.

Check:
http://us1.samba.org/samba/docs/Samba-HOWTO-Collection.html#AEN393

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Samba 3 & ADS current capabilities [adr]

2003-01-31 Thread Rick Segeberg
Andrew,

Thanks for your response.  This reply is actually not a request for
additional help.  After much searching throught the lists and Google
along with a lot of experimentation, I think I've got it (mostly) figure
out.  This post is just an effort to help others who might be struggling
with the same issues as I was.  I'm sure it's far from perfect and if
anyone has suggestions on improving something, I'd like to hear them.

Server Information:
   Redhad 8.0 w/ kernel 2.4.28-18.8.0
   Samba 3.0 alpha 21

Just to be sure, I've started at the beginning and double checked
everything to make sure it matches the documentation I have.  Also, I
apologize for the wordiness, but hopefully this will help someone else.
Here's what I've done so far:

I successfully joined the domain (actually this shows me re-joining):

# /usr/local/samba/bin/net ads join
[2003/01/30 15:30:04, 0] libads/ldap.c:ads_join_realm(1325)
  Host account for lintest already exists - deleting old account
Joined 'LINTEST' to realm 'MYDOMAIN.ORG'

Then to make sure I could actually authenticate up to the w2k ads
server:

# ../bin/smbclient //postoffice/c\$ -k
added interface ip=10.1.46.5 bcast=10.1.47.255 nmask=255.255.240.0
Doing spnego session setup (blob length=113)
Doing kerberos session setup
OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
smb: \> 

At the prompt, I was able to traverse all directories, etc.

In following the winbind documentation, I tried joining the domain again
after configuring my smb.conf file (figuring this wouldn't work since
it's quite a bit different than the 1st join command):

# bin/net rpc join -s PDC -U john.doe
[2003/01/30 16:06:41, 0] param/params.c:OpenConfFile(532)
  params.c:OpenConfFile() - Unable to open configuration file "PDC":
No such file or directory
[2003/01/30 16:06:42, 1] utils/net.c:net_find_server(224)
  no server to connect to

Unable to find a suitable server
[2003/01/30 16:06:43, 1] utils/net.c:net_find_server(224)
  no server to connect to

Unable to find a suitable server

Figuring I've already joined the domain, I proceeded in following the
documentation.  I started up winbindd (which shows as running after
issuing "ps ax"), then tried:

# bin/wbinfo -u
MYDMN+Administrator
MYDMN+Guest
MYDMN+krbtgt
MYDMN+john.doe
MYDMN+jane.smith
MYDMN+george


Which finally worked.  Then I tried:

#wbinfo -g (this worked also)

Then I tried:

#wbinfo -t 

got this:

[root@lintest samba]# bin/wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_ACCESS_DENIED (0xc022)
Could not check secret

Logs show:

[2003/01/31 08:34:05, 1]
rpc_client/cli_netlogon.c:cli_nt_setup_creds(300)
  cli_nt_setup_creds: auth2 challenge failed NT_STATUS_ACCESS_DENIED
[2003/01/31 08:34:05, 0] nsswitch/winbindd_cm.c:cm_get_netlogon_cli(936)
  error connecting to domain password server: NT_STATUS_ACCESS_DENIED

Windows event viewer shows this:

The session setup from the computer LINTEST failed to authenticate. The
name of the account referenced in the security database is LINTEST$.
The following error occurred: 
Access is denied.  

I finally found a fix for this.  My nsswitch.conf file had the shadow
line incorrect.  It was:

==
## nsswitch.conf
## created by Rick

passwd: files winbind
shadow: files winbind
group:  files winbind
==

It is now:
==
## nsswitch.conf
## created by Rick

passwd: files winbind
shadow: files 
group:  files winbind
=

Amazing how such a small oversight can effect things.  

Now this works:

[root@lintest samba]# bin/wbinfo -t
checking the trust secret via RPC calls succeeded

Since this fix, my log now show:

[2003/01/31 09:23:52, 1]
nsswitch/winbindd_util.c:add_trusted_domain(140)
  Added domain MYDMN  
[2003/01/31 09:24:02, 1] nsswitch/winbindd_util.c:init_domain_list(220)
  Retrying startup domain sid fetch for MYDMN
[2003/01/31 09:24:12, 1] nsswitch/winbindd_util.c:init_domain_list(220)
  Retrying startup domain sid fetch for MYDMN
[2003/01/31 09:24:22, 1] nsswitch/winbindd_util.c:init_domain_list(220)
  Retrying startup domain sid fetch for MYDMN
[2003/01/31 09:24:34, 1] nsswitch/winbindd_util.c:init_domain_list(220)
  Retrying startup domain sid fetch for MYDMN
[2003/01/31 09:24:44, 1] nsswitch/winbindd_util.c:init_domain_list(220)
  Retrying startup domain sid fetch for MYDMN
[2003/01/31 09:24:54, 1] nsswitch/winbindd_util.c:init_domain_list(220)
  Retrying startup domain sid fetch for MYDMN
[2003/01/31 09:25:06, 1] nsswitch/winbindd_util.c:init_domain_list(220)
  Retrying startup domain sid fetch for MYDMN
[2003/01/31 09:25:16, 1] nsswitch/winbindd_util.c:init_domain_list(220)
  Retrying startup domain sid fetch for MYDMN



As you can see, this continues about every 10 seconds.

I changed my smb.conf file back (I had been experimenting with the
difference in the security = domain 

[Samba] exel

2003-01-31 Thread Luk Vermeylen
Hi,

I'm having a weird problem.
I have exel files with links in it to other exel files.
When I share the map on a windows server (or windows os) eveything works.
When I share it on a samba server it doesn't.
When I open the file, it asks to enable macro's (I need them so say yes) -
everything fine - After that It asks if I want to rework/check the links
(don't know if reworks is the good word). If I say no, everything ok, when I
say yes, exel hangs on reworking the links. With Open Office, I don't have
this problem.
I'm using samba 2.2.5 (with acl) on a 2.2.18 kernel

ps the files are copied from he old NT4 server to the samba server. Did a
chmod -R 777  on the files to test, but don't think it's a permission
issue - can write and read the files- and if the files are open, it works
also

Luk Vermeylen


Somebody had this problem before?


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] what's up about NETAPP and SAMBA PDC ?

2003-01-31 Thread Andrew Bartlett
On Fri, 2003-01-31 at 01:10, [EMAIL PROTECTED] wrote:
> Hi,
> 
> I would like to known if anybody has solved connexion problem of a Network 
> appliance filer to a SAMBA PDC. I've explored many mailing list without 
> good news.

It has been tested with a recent NetAPP and Samba 3.0 (alpha).  We have
got much closer to MS semantics in 3.0, so I would give that a try.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Account Lockout using Security=Server

2003-01-31 Thread Evans Chris - cevans
  Hi all,

   I was wondering if any of you could help me out. I am not a Samba user
although we have several instances of Samba running in our organization. We
are running into a problem with Samba machines locking out user accounts in
our Windows 2000 domain. I have found a little information about this but
nothing in depth. The Samba servers are configured to use security=server
and are using our domain controllers as password servers. Every time a user
accesses one of the samba boxes 2 incorrect password attempts is logged on
the Windows 2000 domain controller. Apparently security=domain resolves this
but if possible I would like an explanation of why Samba tries to use an
incorrect password the first 2 times it tries to validate the user? Any
information would be greatly appreciated. Thanks...Chris



*

The information contained in this communication is
confidential, is intended only for the use of the recipient
named above, and may be legally privileged.
If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination, 
distribution, or copying of this communication is strictly
prohibited.
If you have received this communication in error,
please re-send this communication to the sender and
delete the original message or any copy of it from your
computer system. Thank You.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Account Lockout using Security=Server

2003-01-31 Thread Evans Chris - cevans
Hi all,
   I was wondering if any of you could help me out. I am not a Samba user
although we have several instances of Samba running in our organization. We
are running into a problem with Samba machines locking out user accounts in
our Windows 2000 domain. I have found a little information about this but
nothing in depth. The Samba servers are configured to use security=server
and are using our domain controllers as password servers. Every time a user
accesses one of the samba boxes 2 incorrect password attempts is logged on
the Windows 2000 domain controller. Apparently security=domain resolves this
but if possible I would like an explanation of why Samba tries to use an
incorrect password the first 2 times it tries to validate the user? Any
information would be greatly appreciated. Thanks...Chris


*

The information contained in this communication is
confidential, is intended only for the use of the recipient
named above, and may be legally privileged.
If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination, 
distribution, or copying of this communication is strictly
prohibited.
If you have received this communication in error,
please re-send this communication to the sender and
delete the original message or any copy of it from your
computer system. Thank You.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Re: Can't see all of the directories in a share with 2.2.7a-1& RH8...but older version/kernel can

2003-01-31 Thread Chris de Vidal
--- Joe Gerkman <[EMAIL PROTECTED]> wrote:
> On Fri, 2003-01-31 at 07:47, Chris de Vidal wrote:
> > Update:
> > From a RedHat 8 box with Samba 2.2.7a from a
> Samba.org
> > RPM, I could see 1000 directories on a Windows
> 2000
> > Pro share.
> > 
> > From a RedHat 7.3 box with Samba 2.2.7a from a
> > Samba.org SRPM tweaked to include ACL support, I
> could
> > see 1000 directories on a Windows 2000 Pro share.
> > 
> > I created them with a for loop from my smbmount,
> not
> > from within Windows, in case it matters.
> 
> I figured it wasn't a directory/file number
> limitation, but wasn't
> entirely sure...I guess this confirms it...just as a
> check, were there
> any particularly large files/directories in there? 
> I know that we have
> some directories that can get as big a 8 GB in
> size...just not sure if
> size plays into this at all either...

This is what I did from the RH 8 box:
for ((i=1;i<=1000;i++)); do mkdir $i; done
ls | wc -l
1000

At your question, I made a 2GB file in 10 directories
(I couldn't create a 10GB file.. a Windows problem?):
for ((i=1;i<=10;i++)); do dd if=/dev/zero of=$i/2GB
bs=1M count=2000; done
ls | wc -l
1000

I can't explain it.  Perhaps some weird/corrupt binary
or library?  Try
rpm -Va | grep '^..5' | grep -v ' c ' | less
which will show every non-config file that has been
modified since being installed from its original RPM. 
Look at libraries and binaries in particular.

Reinstall a damaged RPM with
rpm -Uvh --replacepkgs --force some_package.rpm
paying special attention to any .rpmsave/orig/new
files created, which might move an original conf file
(so diff the *.rpmorig/save/new with the existing
file).

Also, ensure you are seeing the exact same files
missing each time:
ls > missing_at_12-24pm.txt

ls > missing_at_2-56pm.txt
diff missing_at_12-24pm.txt missing_at_2-56pm.txt
Any differences might tell me to look at intermittent
network connectivity... it's yet another shot in the
dark.

Sorry I could not offer more specific help; these are
the troubleshooting steps I go through when looking at
weird problems like these.

> > Someone shared that the permissions were possibly
> > incorrect, but that would only seem to apply to a
> > Samba server, not smbmount.  And you're not using
> a
> > umask, so the default umask is the one from the
> > system, which is 0022, making permissions for
> folders
> > and files 755.
> > 
> > The only thing I can offer now is possibly
> ensuring
> > that the username you access from the 6.2 box is
> the
> > same you use on the 7.x+ boxen.  If the usernames
> were
> > different, perhaps permissions on Windows hide
> those
> > directories from view (but obviously not from cd).
> 
> Yep...same id...same password.
> 
> > Oh, and check the DOS permissions on those
> > directories.. make sure they're not hidden.  I
> don't
> > know if smbmount obeys that, but it's worth a
> shot.
> 
> I'll double-check that and let you know...but as
> most of the directories
> are created by a script (on the windows side), and
> there haven't been
> any changes to the script, they *should* all be the
> same...but again,
> I'll confirm that.
> 
> > /dev/idal
> > 
> Thanks again Chris...
> 
> -Joe
> 
> > --- Chris de Vidal <[EMAIL PROTECTED]> wrote:
> > > To the list: We've been having some off-list
> > > conversation and I wanted to clue you in here. 
> Our
> > > thread might be useful for posterity's
> (Google's?)
> > > sake.
> > > 
> > > /dev/idal
> > > 
> > > --- Joe Gerkman <[EMAIL PROTECTED]> wrote:
> > > > We're using the following command (from a
> shell
> > > > script):
> > > 
> > > First (this isn't your fix but a nicety), it's
> > > easier
> > > when this is in /etc/fstab instead of with a
> script.
> > > 
> > > It can be done automatically at boot (RedHat
> > > recognizes smbfs types and waits til network is
> > > started) or manually with the noauto option. 
> Then,
> > > you can just run
> > > mount /blahblah/Data
> > > 
> > > If you put your password in a credentials file
> (see
> > > below), you can protect your password.
> > > 
> > > Again, not a fix for your issue but I thought
> you'd
> > > like to know that.
> > > 
> > > > mount -f -t smbfs -o
> > > 
> > > Second, I had to look up -f.  man mount:
> > > -f Causes everything to be done except for
> the
> > > actual system call; if it's not obvious, this
> > > ``fakes'' mount-ing  the  file  system.  This
> option
> > > is useful in conjunction with the -v flag to
> > > determine
> > > what the mount command is trying to do. It can
> also
> > > be
> > > used to add entries for devices that were
> mounted
> > > earlier with the -n option.
> > > 
> > > I have little confidence this will fix your
> problem,
> > > but please try it without that flag anyway.
> > > 
> > > It's just a shot in the dark...
> > > 
> > > >
> > >
> >
>
username=xxx,password=xxx,uid=xxx,gid=x,fmask=770,dmask=770
> > > > //blahblah/Data /blahblah/Data
> > > 
> > > Another nicety; use this option with mount o

Re: [Samba] interfaces parameter use needs clarification

2003-01-31 Thread Chris Smith
Thanks for clearing that up.
It's good to know that one can rely on the official docs.

On Fri, 2003-01-31 at 15:07, John H Terpstra wrote:
> On Fri, 31 Jan 2003, Chris Smith wrote:
> 
> > On Fri, 2003-01-31 at 14:17, John H Terpstra wrote:
> >
> > > > Which clearly, and seemingly purposely, leaves out the lo interface.
> > >
> > > Which is always allowed except when explicitly NOT allowed.
> >
> > OK, so there is no need to add the lo interface because it is added by
> > default.
> >
> > How about the format of the IP/submask pair:
> >
> > > > Furthermore in the "Unoffcial Samba HOWTO" it is stated:
> > > >
> > > > =
> > > > A common mistake is to set the interfaces line to the specific IP
> > > > address of the box, when it is actually the IP subnet that your
> > > > interface is on that you want to use. Assuming your server runs on
> > > > 192.168.0.1 and your netmask is 255.255.255.0, your smb.conf file should
> > > > look like:
> > > >
> > > > interfaces = 192.168.0.0/255.255.255.0 127.0.0.1
> > > > =
> > > >
> > > > However this also does not reconcile with the smb.conf manual, nor the
> > > > examples which clearly show the use of the IP address of the interface
> > > > itself as proper.
> >
> > Is it indeed a mistake at all to use the IP of the interface vs the
> > subnet's address or is the "Unofficial Samba HOWTO" in error here?
> > I recognize that if I knew C I might have been able to answer this one
> > myself, apologies.
> 
> The code actually checks for valid interfaces and compares them to the
> address pattern specified. In other words:
> 
>   Interface: 1.2.3.4/24, known as eth2
> 
> if:   interfaces = 1.2.0.0/16
>   interfaces = 1.0.0.0/8
>   interfaces = eth2
>   interfaces = 1.2.3.4
>   interfaces = 1.2.3.4/255.255.255.0
> 
> will all work fine.
> 
> 
> - John T.
> -- 
> John H Terpstra
> Email: [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Samba - winXP lookup

2003-01-31 Thread John H Terpstra
On Fri, 31 Jan 2003, Jens Pettersson wrote:

> Hi all,
>
> We're using samba, and we'd tried
> it with multiple Windows versions: 98, ME, 2000 and XP, in that order.
> However, when we migrated from 2000 to XP, a problem apeared that was not
> present in any other Windows version. Everthing works fine, excepting that
> when I am using the samba shares (browsing, opening files, etc...) from time
> to time I get a ~30 second lockup. During that time, the Samba shares are
> unresponsive from that computer (other computers work fine).
>
> I imagine this is probably an XP bug (since it doesn't happen in other
> Windows versions). But I would like to know if anyone has this problem and
> knows of a solution (from Samba or from XP).
>
> Is there a solution to this or do we have to live with it...hopefully not ;)

I have seen this with some XP machines also.

Send me your smb.conf and I'll see what help can be brought to bare.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Samba - winXP lookup

2003-01-31 Thread Jens Pettersson
Hi all,

We're using samba, and we'd tried
it with multiple Windows versions: 98, ME, 2000 and XP, in that order.
However, when we migrated from 2000 to XP, a problem apeared that was not
present in any other Windows version. Everthing works fine, excepting that
when I am using the samba shares (browsing, opening files, etc...) from time
to time I get a ~30 second lockup. During that time, the Samba shares are
unresponsive from that computer (other computers work fine).

I imagine this is probably an XP bug (since it doesn't happen in other
Windows versions). But I would like to know if anyone has this problem and
knows of a solution (from Samba or from XP).

Is there a solution to this or do we have to live with it...hopefully not ;)

/Dive
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] ls -l hangs

2003-01-31 Thread Heiko Ettelbrueck
Hi Chris,

Chris Unger wrote:

 I just installed Samba 2.2.7a, --with-winbind --with-pam.  Everything
appears to be working great, as far as logging in, authenicating to a Windows
2000 domain, creating/saving files. BUT, when I login to the UNIX box as root
and goto the shared directory and type ls -al, all I get is:

total 4
drwxrwxrwx   2 root other512 Jan 30 09:44 .
drwxr-xr-x  32 root root1024 Jan 29 14:14 ..

 Running ls or ls -a work just fine. I am guessing it has something to do
with the users/groups.


This problem sounds familiar to me. I tried winbind on a linux box to 
allow users to log in using their win domain user. Having searched a lot 
the www (without success) and mailinglists, I finally found a posting on 
the samba-technical mailing list where somebody complained about the 
same problem.

The problem seems to be a large number of users / groups in the domain 
together with winbind seeming to get a new list of all users / groups 
each time the corresponding pam module is called.

So the question is: How large is your win domain?

I think the guy I talked about had about 15,000 users, in "mine" there 
are over 60,000. The guy's "solution" was to change to samba 3.0 (it's 
alpha status today, as far as I know), as he had success with that 
version. Concerning "my" domain, I haven't tried samba 3.0 yet as I 
haven't been at the company for two months (it's a study/work 
combination). But I think I will try when I'm back at the end of february...

Perhaps you will try sooner and tell us about your experience?

Regards
Heiko

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] win XP off_line

2003-01-31 Thread Gabriele Carioli
Hi

> If your samba server is running as a stand-alone server,
> then you have NO control over XP's decision to drop the
> drive connection unless you hack the registry to no do so.

Could you please tell me which registry string has to be
changed (and with what value, obviously) or redirect me
where I can find this info?

Thanks.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] interfaces parameter use needs clarification

2003-01-31 Thread John H Terpstra
On Fri, 31 Jan 2003, Chris Smith wrote:

> On Fri, 2003-01-31 at 14:17, John H Terpstra wrote:
>
> > > Which clearly, and seemingly purposely, leaves out the lo interface.
> >
> > Which is always allowed except when explicitly NOT allowed.
>
> OK, so there is no need to add the lo interface because it is added by
> default.
>
> How about the format of the IP/submask pair:
>
> > > Furthermore in the "Unoffcial Samba HOWTO" it is stated:
> > >
> > > =
> > > A common mistake is to set the interfaces line to the specific IP
> > > address of the box, when it is actually the IP subnet that your
> > > interface is on that you want to use. Assuming your server runs on
> > > 192.168.0.1 and your netmask is 255.255.255.0, your smb.conf file should
> > > look like:
> > >
> > > interfaces = 192.168.0.0/255.255.255.0 127.0.0.1
> > > =
> > >
> > > However this also does not reconcile with the smb.conf manual, nor the
> > > examples which clearly show the use of the IP address of the interface
> > > itself as proper.
>
> Is it indeed a mistake at all to use the IP of the interface vs the
> subnet's address or is the "Unofficial Samba HOWTO" in error here?
> I recognize that if I knew C I might have been able to answer this one
> myself, apologies.

The code actually checks for valid interfaces and compares them to the
address pattern specified. In other words:

Interface: 1.2.3.4/24, known as eth2

if: interfaces = 1.2.0.0/16
interfaces = 1.0.0.0/8
interfaces = eth2
interfaces = 1.2.3.4
interfaces = 1.2.3.4/255.255.255.0

will all work fine.


- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] interfaces parameter use needs clarification

2003-01-31 Thread Chris Smith
On Fri, 2003-01-31 at 14:17, John H Terpstra wrote:

> > Which clearly, and seemingly purposely, leaves out the lo interface.
> 
> Which is always allowed except when explicitly NOT allowed.

OK, so there is no need to add the lo interface because it is added by
default.

How about the format of the IP/submask pair:

> > Furthermore in the "Unoffcial Samba HOWTO" it is stated:
> >
> > =
> > A common mistake is to set the interfaces line to the specific IP
> > address of the box, when it is actually the IP subnet that your
> > interface is on that you want to use. Assuming your server runs on
> > 192.168.0.1 and your netmask is 255.255.255.0, your smb.conf file should
> > look like:
> >
> > interfaces = 192.168.0.0/255.255.255.0 127.0.0.1
> > =
> >
> > However this also does not reconcile with the smb.conf manual, nor the
> > examples which clearly show the use of the IP address of the interface
> > itself as proper.

Is it indeed a mistake at all to use the IP of the interface vs the
subnet's address or is the "Unofficial Samba HOWTO" in error here?
I recognize that if I knew C I might have been able to answer this one
myself, apologies.

Thanks.
Chris

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] [found something] Problems making use of 2K PDC

2003-01-31 Thread Andreas Hasenack
Em Fri, Jan 31, 2003 at 04:05:06PM +, John H Terpstra escreveu:
> My clear preference is to make the samba server a full Win2K domain
> member. Of course the Win2K needs to be running either in NT4 domain
> security mode _or_ Active Directory in mixed mode.

John,

many thanks for your help. I'm doing exactly this now, samba has joined
the w2k domain and security = domain, the winxp client has also joined
the w2k domain and can access the samba server without a hitch. winbind
is also working.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Re: linux server completely hangs copying files with samba

2003-01-31 Thread Dragan Krnic
>> final experiments;
>> after realizing that unloading the usb-ohci module (non even the
>> usbcore) system was fine, i compiled the kernel without modules
>> support and without usb. the machine crashed and actually i was 
>> really angry, becuase i thought i had found the problem; but 
>> finally i discovered that if usb is not loaded the machine 
>> crashes, but if i load it and unload it (going back to the same 
>> situation) it doesn't crash. obviously if i disale usb from bios 
>> everything in ok. maybe is something about irq, so if it is 
>> enabled in bios the ira (11 for me) is used. loading and
>> unloading the module will do something strange to the irq
>> handles. cat /proc/interrupts gives 0 on usb. at this point i'm 
>> curios to find out why this happens; since i've red of
>> many people having this problem maybe someone (not you, as you
>> told me) had a similar situation.
>> don't know if it's relevant, but only once the keyboard was 
>> blocked, i had to unplag and plug it back (ps/2 keyb) and it was 
>> ok, checking the interrupts they had jumped from 1500 to about 
>> 3000 in few seconds. going to work, nice day
>
>I forget how recent your hardware is, but have you tried booting with:
>
>lilo: linux noapic

That's one of the fírst things I tried. Didn't help, but nodma
(or something similar disabling IDE DMA) did.


_
Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year.
http://login.mail.lycos.com/brandPage.shtml?pageId=plus&ref=lmtplus
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] interfaces parameter use needs clarification

2003-01-31 Thread John H Terpstra
Chris,

>From ~samba/source/lib/interface.c:

/
interpret a single element from a interfaces= config line

This handles the following different forms:

1) wildcard interface name
2) DNS name
3) IP/masklen
4) ip/mask
5) bcast/mask
/

And from ~samba/source/lib/access.c:

/* return true if access should be allowed */
static BOOL allow_access_internal(const char **deny_list,const char
**allow_list,
const char *cname, const char *caddr)
{
const char *client[2];

client[0] = cname;
client[1] = caddr;

/* if it is loopback then always allow unless specifically denied
*/
if (strcmp(caddr, "127.0.0.1") == 0) {
/*
 * If 127.0.0.1 matches both allow and deny then allow.
 * Patch from Steve Langasek [EMAIL PROTECTED]
 */
if (deny_list &&
list_match(deny_list,(const char
*)client,client_match) &&
(!allow_list ||
!list_match(allow_list,(const char
*)client, client_match))) {
return False;
}
return True;
}


Some time ago we explicitly added support for the loopback interface
because we were seeing so many users mess this up.

Cheers,
John T.



On Fri, 31 Jan 2003, Chris Smith wrote:
> In the thread titled:
>
> Re: [Samba] Mandrake 9.0: rpcclient problem exporting printers to samba
> for windows
>
> There exists some advice whcih brings confusion:
>
> > > interfaces = 10.0.0.2/24
> >
> > I think this could be a problem, you should list the loopback address in
> > your interfaces list (lo or 127.0.0.1)
> >
>
> I've seen this advice before in the "Unofficial Samba HOWTO" yet it
> doesn't seem to jive with the "Offical" documentation. I wish someone in
> the know would spill the beans on the real truth.
>
> The smb.conf doc states these choices:
>
> =
> The option takes a list of interface strings. Each string can be in any
> of the following forms:
>
>   * a network interface name (such as eth0). This may include
> shell-like wildcards so eth* will match any interface starting
> with the substring "eth"
>
>   * an IP address. In this case the netmask is determined from the
> list of interfaces obtained from the kernel
>
>   * an IP/mask pair.
>
>   * a broadcast/mask pair.
> =
>
> And provides an example:
>
> =
> interfaces = eth0 192.168.2.10/24 192.168.3.10/255.255.255.0
> =
>
> As well as stating the default:
>
> =
> Default: all active interfaces except 127.0.0.1 that are broadcast
> capable
> =
>
> Which clearly, and seemingly purposely, leaves out the lo interface.

Which is always allowed except when explicitly NOT allowed.

>
> Furthermore in the "Unoffcial Samba HOWTO" it is stated:
>
> =
> A common mistake is to set the interfaces line to the specific IP
> address of the box, when it is actually the IP subnet that your
> interface is on that you want to use. Assuming your server runs on
> 192.168.0.1 and your netmask is 255.255.255.0, your smb.conf file should
> look like:
>
> interfaces = 192.168.0.0/255.255.255.0 127.0.0.1
> =
>
> However this also does not reconcile with the smb.conf manual, nor the
> examples which clearly show the use of the IP address of the interface
> itself as proper.
>
> Please can someone clear this up.
>
> Thanks.
>
> Chris
>
>

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Need help with strange "rejected the tconX on the IPC$ share"error messages.

2003-01-31 Thread Chris Smith
One Win2k client constantly generates these messages in the log:


Jan 30 16:50:32 server smbd[30271]: [2003/01/30 16:50:32, 0]
rpc_client/cli_spoolss_notify.c:spoolss_connect_to_client(134)

Jan 30 16:50:32 server smbd[30271]:   connect_to_client: machine KW1
rejected the tconX on the IPC$ share. Error was :
NT_STATUS_ACCESS_DENIED.


Samba is a PDC, none of the other systems generate this error, the
problem system outwardly works just fine, all of the users can logon to
the domain and use the system.

Any clues?

Thanks.

Chris

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] interfaces parameter use needs clarification

2003-01-31 Thread Chris Smith
In the thread titled:

Re: [Samba] Mandrake 9.0: rpcclient problem exporting printers to samba
for windows

There exists some advice whcih brings confusion:

> > interfaces = 10.0.0.2/24
> 
> I think this could be a problem, you should list the loopback address in
> your interfaces list (lo or 127.0.0.1)
> 

I've seen this advice before in the "Unofficial Samba HOWTO" yet it
doesn't seem to jive with the "Offical" documentation. I wish someone in
the know would spill the beans on the real truth.

The smb.conf doc states these choices:

=
The option takes a list of interface strings. Each string can be in any
of the following forms:

  * a network interface name (such as eth0). This may include
shell-like wildcards so eth* will match any interface starting
with the substring "eth"

  * an IP address. In this case the netmask is determined from the
list of interfaces obtained from the kernel

  * an IP/mask pair. 

  * a broadcast/mask pair.
=

And provides an example:

=
interfaces = eth0 192.168.2.10/24 192.168.3.10/255.255.255.0
=

As well as stating the default:

=
Default: all active interfaces except 127.0.0.1 that are broadcast
capable
=

Which clearly, and seemingly purposely, leaves out the lo interface.

Furthermore in the "Unoffcial Samba HOWTO" it is stated:

=
A common mistake is to set the interfaces line to the specific IP
address of the box, when it is actually the IP subnet that your
interface is on that you want to use. Assuming your server runs on
192.168.0.1 and your netmask is 255.255.255.0, your smb.conf file should
look like:

interfaces = 192.168.0.0/255.255.255.0 127.0.0.1
=

However this also does not reconcile with the smb.conf manual, nor the
examples which clearly show the use of the IP address of the interface
itself as proper.

Please can someone clear this up.

Thanks.

Chris

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Moterboard help Please

2003-01-31 Thread Elijah Savage III
Well I have a gig of memory in this motherboard one of the reasons I
wanted to try and get it back working. All newer motherboards do not
support this type of memory already looked into it.

-Original Message-
From: Michael G. Noble [mailto:[EMAIL PROTECTED]] 
Sent: Friday, January 31, 2003 12:55 PM
To: Elijah Savage III
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] Moterboard help Please

With the time spent trying to find a bios, I would go out and 
spend $80.00 for a new motherboard.  You then have a motherboard
that is newer and will support what you need.

Mike

On Fri, 2003-01-31 at 09:46, Brian wrote:
> http://www.unicore.com
> 1-800-800-BIOS
> 
> They might be able to help you.
> 
> Do you know what BIOS it used initially? Was it Phoenix BIOS 4.0 Ver. 
> 6.0?  It might also be worthwhile then to call Phoenix tech support. (

> http://www.phoenix.com )
> 
> Also, where did you find the wrong BIOS?  Can't you go back there,
find 
> a new BIOS that will work and flash it to that?  That is, why go back
to 
> the original (which we can't find) when you know it won't support the 
> larger hard drives?  The quest should be for a new BIOS that will be 
> compatible, no?
> 
> Elijah Savage III wrote:
> 
> >I meant to include Off topic in the subject line. There is not list
for
> >something like this that I know of and I have been a user of this
> >mailing list for about 2 years and figured one of you out there might
> >have this motherboard and be able to send me the bios for it.
> >
> >-Original Message-
> >From: Gabriel D. Preston [mailto:[EMAIL PROTECTED]] 
> >Sent: Friday, January 31, 2003 11:09 AM
> >To: Elijah Savage III
> >Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> >Subject: Re: [Samba] Moterboard help Please
> >
> >Elijah,
> >
> >I believe you have the wrong mail list for this type of problem, but 
> >maybe my brain just isn't working today and I'm wrong.
> >
> >-Gabriel
> >
> >Elijah Savage III wrote:
> >
> >  
> >
> >>All,
> >>
> >>I have been terribly pleased with openbsd 3.2 I was using it as a
> >>mail/samba server with postifx on a pentium pro 200 with 1 gig of
> >>memory. Well I wanted to add a larger harddrive than what I have in
it
> >>now only 6.4 gig. Well the machine would not see it and for some
reason
> >>after hours and hours of trying I can't get a tekram 395UW and a
18gig
> >>scsi to be the boot drive and having failed I was stuck with IDE. I
> >>finally got tired of it being this way and decided to flash the
> >>motherboard which is a Micronics Invader ATX m8s-fin motherboard.
Well
> >>dumb me I flashed it with the wrong bios. And I can't find the
original
> >>bios on the net anywhere do any of you all have this motherboard and
> >>
> >>
> >can
> >  
> >
> >>send me the bios for it or possibly know where I can find it. Any of
> >>your help would be greatly appreciated. And before I flashed it, it
did
> >>not ask me to backup the prior bios.
> >>I would just hate to trash this setup. The machine still works but
with
> >>this current bios only the first pci slot works which means I can't
use
> >>a nic card or anything in it.
> >>
> >>Thank you
> >>Elijah
> >>http://www.digitalrage.org/
> >>For your technical news and HowTo's
> >>Stop by and vote in the latest poll about
> >>Mr. Spam King.
> >>
> >>
> >>
> >> 
> >>
> >>
> >>
> >
> >
> >  
> >
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
Michael G. NobleRF Magic, Inc.
Senior System Administrator 10182 Telesis Ct., 4th Floor
San Diego, CA.   92121
email: [EMAIL PROTECTED]   voice: (858) 546-2401 x207
fax:   (858) 546-2402
--
There is Sanity in my Madness!

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Moterboard help Please

2003-01-31 Thread Elijah Savage III
Yes Phoenix 4.0 ver 6 is the correct one. At this point I do not care
which one I got to I just want to get the machine back up and working.

-Original Message-
From: Brian [mailto:[EMAIL PROTECTED]] 
Sent: Friday, January 31, 2003 12:46 PM
To: Elijah Savage III
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] Moterboard help Please 

http://www.unicore.com
1-800-800-BIOS

They might be able to help you.

Do you know what BIOS it used initially? Was it Phoenix BIOS 4.0 Ver. 
6.0?  It might also be worthwhile then to call Phoenix tech support. ( 
http://www.phoenix.com )

Also, where did you find the wrong BIOS?  Can't you go back there, find 
a new BIOS that will work and flash it to that?  That is, why go back to

the original (which we can't find) when you know it won't support the 
larger hard drives?  The quest should be for a new BIOS that will be 
compatible, no?

Elijah Savage III wrote:

>I meant to include Off topic in the subject line. There is not list for
>something like this that I know of and I have been a user of this
>mailing list for about 2 years and figured one of you out there might
>have this motherboard and be able to send me the bios for it.
>
>-Original Message-
>From: Gabriel D. Preston [mailto:[EMAIL PROTECTED]] 
>Sent: Friday, January 31, 2003 11:09 AM
>To: Elijah Savage III
>Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
>Subject: Re: [Samba] Moterboard help Please
>
>Elijah,
>
>I believe you have the wrong mail list for this type of problem, but 
>maybe my brain just isn't working today and I'm wrong.
>
>-Gabriel
>
>Elijah Savage III wrote:
>
>  
>
>>All,
>>
>>I have been terribly pleased with openbsd 3.2 I was using it as a
>>mail/samba server with postifx on a pentium pro 200 with 1 gig of
>>memory. Well I wanted to add a larger harddrive than what I have in it
>>now only 6.4 gig. Well the machine would not see it and for some
reason
>>after hours and hours of trying I can't get a tekram 395UW and a 18gig
>>scsi to be the boot drive and having failed I was stuck with IDE. I
>>finally got tired of it being this way and decided to flash the
>>motherboard which is a Micronics Invader ATX m8s-fin motherboard. Well
>>dumb me I flashed it with the wrong bios. And I can't find the
original
>>bios on the net anywhere do any of you all have this motherboard and
>>
>>
>can
>  
>
>>send me the bios for it or possibly know where I can find it. Any of
>>your help would be greatly appreciated. And before I flashed it, it
did
>>not ask me to backup the prior bios.
>>I would just hate to trash this setup. The machine still works but
with
>>this current bios only the first pci slot works which means I can't
use
>>a nic card or anything in it.
>>
>>Thank you
>>Elijah
>>http://www.digitalrage.org/
>>For your technical news and HowTo's
>>Stop by and vote in the latest poll about
>>Mr. Spam King.
>>
>>
>>
>> 
>>
>>
>>
>
>
>  
>

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Question about version 2.2.5

2003-01-31 Thread John H Terpstra
On Fri, 31 Jan 2003, Rodrigo Nascimento wrote:

> Hi, I'm again...
>
> I have been studying a documentation of IBM (the Redbook) about Samba. In this
> document says that to run the SWAT I can to run with any user, but to chance
> something I need to log as root.
> The document speak about version 2.0.x.
> About this, my question is:
> It's true for version 2.2.5?

Yes.

> And, in this document says also that when I pass the password, it is going in
> text format. It's really on SAMBA 2.2.5 too?

Yes.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] SWAT

2003-01-31 Thread John H Terpstra
On Fri, 31 Jan 2003, Rodrigo Nascimento wrote:

> Hi List,
>
> I would like to make work my SWAT.
> I have a AIX 4.3.3 and SAMBA 2.2.5.
>
> What is the lines I need to add at the /etc/services and /etc/inetd.conf for
> it works?

Please check the man page:

man swat

- John T.

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] How to find out, if samba has SSL/LDAP support or not?

2003-01-31 Thread John H Terpstra
On Fri, 31 Jan 2003, Herb Lewis wrote:

> With samba 3.0 you can run "smbd -b" to see the build options. There
> is no such option in 2.2.x code.

Another approach would be to tun 'testparm' on the samba-2.0 systems and
look for the ssl and ldap entries. If not there, then support was not
comiled in.

Note: In samba-2.x testparm is verbose by default, in samba-3.x it is not.
To get samba-3.x to be verbose use the -v option.

- John T.

>
> Jan Schäfer wrote:
> >
> > Hi,
> >
> > I'm the developer of KSambaPlugin.
> > Is there a way to find out if samba
> > was compiled with SSL / LDAP support or not ?
> > I want to disable the options in the
> > case that samba doesn't support them.
> >
> > Thanks,
> >
> > Jan Schäfer
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
>
>

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Mandrake 9.0: rpcclient problem exporting printers tosamba for windows

2003-01-31 Thread David Woodyard

>From [EMAIL PROTECTED] Fri Jan 31 11:55:08 2003
From: David Woodyard <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: Buchan Milne <[EMAIL PROTECTED]>
Subject: Re: [Samba] Mandrake 9.0: rpcclient problem exporting printers to 
samba for windows
Date: Fri, 31 Jan 2003 11:55:08 -0600
User-Agent: KMail/1.5


It works!!! Thanks very much for your help!!!
I added 127.0.0.1/24 to interfaces. I also uninstalled the printer from cups 
and reinstalled it to make sure I had the process down. I actually added the 
printer from KDE print manager because CUPS does not have the driver and KDE 
does.
I had to stop and restart samba before the rpcclient setdriver command worked.

I installed (using your instructions below) the driver for my Deskjet printer 
from NT it got the drivers from the NT CD and it copied them to the samba 
printer directory. I then printed a test page and got the correct printout.

It is all so easy when you have a good understanding of what needs to be done.

Thanks again,

David

On Friday 31 January 2003 08:33 am, you wrote:
> David Woodyard wrote:
> > Thanks for your quick response. I added comments below after your
> > questions. I have a Canon 5500 and HP Deskjet. Do you know where the
> > print drivers are stored on WinNT?
>
> The way to do this from NT/2k is to:
> 1)Go to //sambabox/Printers
> 2)right-click on the printer, choose properties
> 3)When prompted to install a driver, say no
> 4)Click on the advanced tab, and click "New driver"
> 5)When prompted for the windows server CD, point it at %windir%\inf
> (usually c:\winnt\inf)
>
> > What next?
> >
> > Thanks again,
> > David
> >



Subject: Re: [Samba] Mandrake 9.0: rpcclient problem exporting printers to 
samba for windows
Date: Friday 31 January 2003 08:33 am
From: Buchan Milne <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]

David Woodyard wrote:
> Thanks for your quick response. I added comments below after your
> questions. I have a Canon 5500 and HP Deskjet. Do you know where the print
> drivers are stored on WinNT?

The way to do this from NT/2k is to:
1)Go to //sambabox/Printers
2)right-click on the printer, choose properties
3)When prompted to install a driver, say no
4)Click on the advanced tab, and click "New driver"
5)When prompted for the windows server CD, point it at %windir%\inf
(usually c:\winnt\inf)

> What next?
>
> Thanks again,
> David
>
> On Friday 31 January 2003 03:18 am, you wrote:
>>>Date: Thu, 30 Jan 2003 17:00:21 -0600
>>>From: David Woodyard <[EMAIL PROTECTED]>
>>>To: [EMAIL PROTECTED]
>>>Subject: [Samba]
>>> Mandrake 9.0: rpcclient problem exporting printers to samba for windows
>>>Message-ID: <[EMAIL PROTECTED]>
>>>Content-Type: text/plain;
>>>  charset="us-ascii"
>>>MIME-Version: 1.0
>>>Content-Transfer-Encoding: 7bit
>>>Precedence: list
>>>Reply-To: [EMAIL PROTECTED]
>>>Message: 2
>>>
>>>I am new to CUPS, after working for 4 days to get printing from WinNT to
>>>Mandrake 9.0, I give up. Here is the problem:
>>>the /etc/samba/smb.conf is setup with [printers] and [print$]. I copy the
>>>postscript drivers from adobe. I then tried to export a printer to samba
>>>with the following command
>>> cupsaddsmb -v -U dwoody canon
>>>
>>>It did all of the commands successfully except for the last one. which
>>>was: rpcclient localhost -N -Udwoody%password -c 'setdriver canon canon'
>>>
>>>It failed with NT_STATUS_UNSUCCESSFUL.
>>>I ran the same rpcclient standalone with debug and I got several error
>>>messages. They are
>>> 1) connection refused on localhost:445 (it then used port 139 - should
>>>it?) 2) WERR_ACCESS_DENIED (this was near the end of the output)
>>> 3) NT_STATUS_UNSUCCESSFUL
>>>
>>>I have not been able to fix the first two errors. BTW, the drive shares
>>>are working correctly.
>>
>>1)Is the user dwoody in the list of "printer admin"s
>>2)Does the user dwoody have write access to the print$ share
>
> [global]
>valid users = root, dwoody, rox
>   workgroup = WORKGROUP
>   printer admin = root, dwoody, rox
>   server string = Samba Server on Mandrake 9.0
> hosts allow = 127. 10.

Be careful with hosts allow unless you are sure reverse dns lookups work
for all clients.

>load printers = yes
>printcap name = cups
>printing = cups
>   guest account = dwoody
> log file = /var/log/samba/smb.%m
>max log size = 50
>security = user
> encrypt passwords = no
> smb passwd file = /etc/samba/smbpasswd
>socket options = TCP_NODELAY
> interfaces = 10.0.0.2/24

I think this could be a problem, you should list the loopback address in
your interfaces list (lo or 127.0.0.1)

>remote announce = 10.255.255.255
>local master = no
>dns proxy = no
> [printers]
>comment = All Printers
>path = /var/spool/samba
>browseable = no
>   allow hosts = 10.
>   write list = @users
>guest ok = yes
>readonly = yes
>writable = no
>printable = yes
>create mask = 0700
> [print$]
>path = /var/lib/samba/printers
>browseable = yes
>guest ok

Re: [Samba] Moterboard help Please

2003-01-31 Thread Michael G. Noble
With the time spent trying to find a bios, I would go out and 
spend $80.00 for a new motherboard.  You then have a motherboard
that is newer and will support what you need.

Mike

On Fri, 2003-01-31 at 09:46, Brian wrote:
> http://www.unicore.com
> 1-800-800-BIOS
> 
> They might be able to help you.
> 
> Do you know what BIOS it used initially? Was it Phoenix BIOS 4.0 Ver. 
> 6.0?  It might also be worthwhile then to call Phoenix tech support. ( 
> http://www.phoenix.com )
> 
> Also, where did you find the wrong BIOS?  Can't you go back there, find 
> a new BIOS that will work and flash it to that?  That is, why go back to 
> the original (which we can't find) when you know it won't support the 
> larger hard drives?  The quest should be for a new BIOS that will be 
> compatible, no?
> 
> Elijah Savage III wrote:
> 
> >I meant to include Off topic in the subject line. There is not list for
> >something like this that I know of and I have been a user of this
> >mailing list for about 2 years and figured one of you out there might
> >have this motherboard and be able to send me the bios for it.
> >
> >-Original Message-
> >From: Gabriel D. Preston [mailto:[EMAIL PROTECTED]] 
> >Sent: Friday, January 31, 2003 11:09 AM
> >To: Elijah Savage III
> >Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> >Subject: Re: [Samba] Moterboard help Please
> >
> >Elijah,
> >
> >I believe you have the wrong mail list for this type of problem, but 
> >maybe my brain just isn't working today and I'm wrong.
> >
> >-Gabriel
> >
> >Elijah Savage III wrote:
> >
> >  
> >
> >>All,
> >>
> >>I have been terribly pleased with openbsd 3.2 I was using it as a
> >>mail/samba server with postifx on a pentium pro 200 with 1 gig of
> >>memory. Well I wanted to add a larger harddrive than what I have in it
> >>now only 6.4 gig. Well the machine would not see it and for some reason
> >>after hours and hours of trying I can't get a tekram 395UW and a 18gig
> >>scsi to be the boot drive and having failed I was stuck with IDE. I
> >>finally got tired of it being this way and decided to flash the
> >>motherboard which is a Micronics Invader ATX m8s-fin motherboard. Well
> >>dumb me I flashed it with the wrong bios. And I can't find the original
> >>bios on the net anywhere do any of you all have this motherboard and
> >>
> >>
> >can
> >  
> >
> >>send me the bios for it or possibly know where I can find it. Any of
> >>your help would be greatly appreciated. And before I flashed it, it did
> >>not ask me to backup the prior bios.
> >>I would just hate to trash this setup. The machine still works but with
> >>this current bios only the first pci slot works which means I can't use
> >>a nic card or anything in it.
> >>
> >>Thank you
> >>Elijah
> >>http://www.digitalrage.org/
> >>For your technical news and HowTo's
> >>Stop by and vote in the latest poll about
> >>Mr. Spam King.
> >>
> >>
> >>
> >> 
> >>
> >>
> >>
> >
> >
> >  
> >
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
Michael G. NobleRF Magic, Inc.
Senior System Administrator 10182 Telesis Ct., 4th Floor
San Diego, CA.   92121
email: [EMAIL PROTECTED]   voice: (858) 546-2401 x207
fax:   (858) 546-2402
--
There is Sanity in my Madness!

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Using working devmode from windows clients on samba server?

2003-01-31 Thread daniel . jarboe
Samba 2.2.7a (built from samba RPM's) with LPRng print subsystem.

I've been having troubles with some print drivers which fail to work
properly when uploaded to the samba server whether devmode gets left as
null or a default devmode is used.  Some drivers do not leave you in a
position where you can "tickle" the driver to generate a devmode with
page orientation etc before things start misbehaving.  Stuff usually
works when the client installs their own drivers locally.  Is there any
way to grab the devmode generated by the windows clients and inject it
some place in samba's files to get a working devmode so driver downloads
with spools can work with these drivers?

Thanks for any suggestions,
~ Daniel







---

This message is the property of Time Inc. or its affiliates. It may be
legally privileged and/or confidential and is intended only for the use
of the addressee(s). No addressee should forward, print, copy, or
otherwise reproduce this message in any manner that would allow it to be
viewed by any individual not originally listed as a recipient. If the
reader of this message is not the intended recipient, you are hereby
notified that any unauthorized disclosure, dissemination, distribution,
copying or the taking of any action in reliance on the information
herein is strictly prohibited. If you have received this communication
in error, please immediately notify the sender and delete this message.
Thank you.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Moterboard help Please

2003-01-31 Thread Brian
http://www.unicore.com
1-800-800-BIOS

They might be able to help you.

Do you know what BIOS it used initially? Was it Phoenix BIOS 4.0 Ver. 
6.0?  It might also be worthwhile then to call Phoenix tech support. ( 
http://www.phoenix.com )

Also, where did you find the wrong BIOS?  Can't you go back there, find 
a new BIOS that will work and flash it to that?  That is, why go back to 
the original (which we can't find) when you know it won't support the 
larger hard drives?  The quest should be for a new BIOS that will be 
compatible, no?

Elijah Savage III wrote:

I meant to include Off topic in the subject line. There is not list for
something like this that I know of and I have been a user of this
mailing list for about 2 years and figured one of you out there might
have this motherboard and be able to send me the bios for it.

-Original Message-
From: Gabriel D. Preston [mailto:[EMAIL PROTECTED]] 
Sent: Friday, January 31, 2003 11:09 AM
To: Elijah Savage III
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: [Samba] Moterboard help Please

Elijah,

I believe you have the wrong mail list for this type of problem, but 
maybe my brain just isn't working today and I'm wrong.

-Gabriel

Elijah Savage III wrote:

 

All,

I have been terribly pleased with openbsd 3.2 I was using it as a
mail/samba server with postifx on a pentium pro 200 with 1 gig of
memory. Well I wanted to add a larger harddrive than what I have in it
now only 6.4 gig. Well the machine would not see it and for some reason
after hours and hours of trying I can't get a tekram 395UW and a 18gig
scsi to be the boot drive and having failed I was stuck with IDE. I
finally got tired of it being this way and decided to flash the
motherboard which is a Micronics Invader ATX m8s-fin motherboard. Well
dumb me I flashed it with the wrong bios. And I can't find the original
bios on the net anywhere do any of you all have this motherboard and
   

can
 

send me the bios for it or possibly know where I can find it. Any of
your help would be greatly appreciated. And before I flashed it, it did
not ask me to backup the prior bios.
I would just hate to trash this setup. The machine still works but with
this current bios only the first pci slot works which means I can't use
a nic card or anything in it.

Thank you
Elijah
http://www.digitalrage.org/
For your technical news and HowTo's
Stop by and vote in the latest poll about
Mr. Spam King.





   



 


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Question about version 2.2.5

2003-01-31 Thread Rodrigo Nascimento
Hi, I'm again...

I have been studying a documentation of IBM (the Redbook) about Samba. In this
document says that to run the SWAT I can to run with any user, but to chance
something I need to log as root. 
The document speak about version 2.0.x.
About this, my question is:
It's true for version 2.2.5?


And, in this document says also that when I pass the password, it is going in
text format. It's really on SAMBA 2.2.5 too?

So long,




___
   (0 0)
+V+
| Rodrigo Nascimento  |
| Linux Users Brazil o0o   o0o|
+( )---( )+












http://www.ieg.com.br
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] SWAT

2003-01-31 Thread Rodrigo Nascimento
Hi List,

I would like to make work my SWAT.
I have a AIX 4.3.3 and SAMBA 2.2.5.

What is the lines I need to add at the /etc/services and /etc/inetd.conf for
it works?

See you,



___
   (0 0)
+V+
| Rodrigo Nascimento  |
| Linux Users Brazil o0o   o0o|
+( )---( )+












http://www.ieg.com.br
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] How to find out, if samba has SSL/LDAP support or not ?

2003-01-31 Thread Herb Lewis
With samba 3.0 you can run "smbd -b" to see the build options. There
is no such option in 2.2.x code.

Jan Schäfer wrote:
> 
> Hi,
> 
> I'm the developer of KSambaPlugin.
> Is there a way to find out if samba
> was compiled with SSL / LDAP support or not ?
> I want to disable the options in the
> case that samba doesn't support them.
> 
> Thanks,
> 
> Jan Schäfer
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
==
Herb Lewis   Silicon Graphics 
Networking Engineer  1600 Amphitheatre Pkwy MS-510
Strategic Software Organization  Mountain View, CA  94043-1351
[EMAIL PROTECTED] Tel: 650-933-2177
http://www.sgi.com   Fax: 650-932-2177  
PGP Key: 0x8408D65D
==
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Re: Can't see all of the directories in a share with 2.2.7a-1& RH8...but older version/kernel can

2003-01-31 Thread Joe Gerkman
On Fri, 2003-01-31 at 07:47, Chris de Vidal wrote:
> Update:
> From a RedHat 8 box with Samba 2.2.7a from a Samba.org
> RPM, I could see 1000 directories on a Windows 2000
> Pro share.
> 
> From a RedHat 7.3 box with Samba 2.2.7a from a
> Samba.org SRPM tweaked to include ACL support, I could
> see 1000 directories on a Windows 2000 Pro share.
> 
> I created them with a for loop from my smbmount, not
> from within Windows, in case it matters.

I figured it wasn't a directory/file number limitation, but wasn't
entirely sure...I guess this confirms it...just as a check, were there
any particularly large files/directories in there?  I know that we have
some directories that can get as big a 8 GB in size...just not sure if
size plays into this at all either...


> Someone shared that the permissions were possibly
> incorrect, but that would only seem to apply to a
> Samba server, not smbmount.  And you're not using a
> umask, so the default umask is the one from the
> system, which is 0022, making permissions for folders
> and files 755.
> 
> The only thing I can offer now is possibly ensuring
> that the username you access from the 6.2 box is the
> same you use on the 7.x+ boxen.  If the usernames were
> different, perhaps permissions on Windows hide those
> directories from view (but obviously not from cd).

Yep...same id...same password.

> Oh, and check the DOS permissions on those
> directories.. make sure they're not hidden.  I don't
> know if smbmount obeys that, but it's worth a shot.

I'll double-check that and let you know...but as most of the directories
are created by a script (on the windows side), and there haven't been
any changes to the script, they *should* all be the same...but again,
I'll confirm that.

> /dev/idal
> 
Thanks again Chris...

-Joe

> --- Chris de Vidal <[EMAIL PROTECTED]> wrote:
> > To the list: We've been having some off-list
> > conversation and I wanted to clue you in here.  Our
> > thread might be useful for posterity's (Google's?)
> > sake.
> > 
> > /dev/idal
> > 
> > --- Joe Gerkman <[EMAIL PROTECTED]> wrote:
> > > We're using the following command (from a shell
> > > script):
> > 
> > First (this isn't your fix but a nicety), it's
> > easier
> > when this is in /etc/fstab instead of with a script.
> > 
> > It can be done automatically at boot (RedHat
> > recognizes smbfs types and waits til network is
> > started) or manually with the noauto option.  Then,
> > you can just run
> > mount /blahblah/Data
> > 
> > If you put your password in a credentials file (see
> > below), you can protect your password.
> > 
> > Again, not a fix for your issue but I thought you'd
> > like to know that.
> > 
> > > mount -f -t smbfs -o
> > 
> > Second, I had to look up -f.  man mount:
> > -f Causes everything to be done except for the
> > actual system call; if it's not obvious, this
> > ``fakes'' mount-ing  the  file  system.  This option
> > is useful in conjunction with the -v flag to
> > determine
> > what the mount command is trying to do. It can also
> > be
> > used to add entries for devices that were mounted
> > earlier with the -n option.
> > 
> > I have little confidence this will fix your problem,
> > but please try it without that flag anyway.
> > 
> > It's just a shot in the dark...
> > 
> > >
> >
> username=xxx,password=xxx,uid=xxx,gid=x,fmask=770,dmask=770
> > > //blahblah/Data /blahblah/Data
> > 
> > Another nicety; use this option with mount or in
> > your
> > fstab:
> > credentials=/some/file/chown/root.root/chmod/600
> > with
> > username = someuser
> > password = somepassword
> > inside that file.  I like to put mine in
> > /etc/smb_passwd and I run chown 0.0/chmod 600
> > against
> > it.
> > 
> > This lets you avoid putting the password in the
> > (world-readable) fstab.  Just a suggestion.
> > 
> > > Same command we've been using for a while now (>1
> > > year)...but then
> > > again, maybe one of the options could have been
> > > deprecated
> > > 
> > > Also, we installed Samba via the RPMs from
> > > samba.org...but I've also
> > > tried building from source (both SRPMs and plain
> > > source)...neither
> > > changed anything...
> > > 
> > > Thanks again for your help Chris
> > 
> > Don't thank me until I can confirm or deny it from a
> > RH 7.3 and 8.0 box to an NT and 2000 Pro (no
> > Server/Advanced) share (:
> > 
> > /dev/idal
> > 
> > 
> > 
> > > On Thu, 2003-01-30 at 17:45, Chris de Vidal wrote:
> > > > Whoa, really strange.  Might be something you're
> > > > doing, but I'll post my results to you and the
> > > list
> > > > tomorrow and we can see if it's a consistent
> > > problem
> > > > with RedHat 7+ and 2000.
> > > > 
> > > > You are using smbmount or mount smbfs in fstab,
> > > > correct?
> > > > 
> > > > Also, how did you install Samba?  I got an RPM
> > > from
> > > > Samba.org (well, an SRPM so I could tweak the
> > > > ./configure line).
> > > > 
> > > > /dev/idal
> > > > 
> > > > --- Joe Gerkman <[EMAIL PROTECTED]> wrote

[Samba] Re: Can't see all of the directories in a share with 2.2.7a-1& RH8...but older version/kernel can

2003-01-31 Thread Joe Gerkman
Here's an update from the problem end :-)

On Thu, 2003-01-30 at 18:56, Chris de Vidal wrote:
> To the list: We've been having some off-list
> conversation and I wanted to clue you in here.  Our
> thread might be useful for posterity's (Google's?)
> sake.
> 
> /dev/idal
> 
> --- Joe Gerkman <[EMAIL PROTECTED]> wrote:
> > We're using the following command (from a shell
> > script):
> 
> First (this isn't your fix but a nicety), it's easier
> when this is in /etc/fstab instead of with a script. 
> It can be done automatically at boot (RedHat
> recognizes smbfs types and waits til network is
> started) or manually with the noauto option.  Then,
> you can just run
> mount /blahblah/Data
> 
> If you put your password in a credentials file (see
> below), you can protect your password.
> Again, not a fix for your issue but I thought you'd
> like to know that.

Thanks Chris, we were aware of that...but alas, this is one of those
things that was set in place before I got here, and something we just
left in place.  Fortunately, the user account used in this case is
properly sandboxed.

> > mount -f -t smbfs -o
> 
> Second, I had to look up -f.  man mount:
> -f Causes everything to be done except for the
> actual system call; if it's not obvious, this
> ``fakes'' mount-ing  the  file  system.  This option
> is useful in conjunction with the -v flag to determine
> what the mount command is trying to do. It can also be
> used to add entries for devices that were mounted
> earlier with the -n option.
> 
> I have little confidence this will fix your problem,
> but please try it without that flag anyway.
> 
> It's just a shot in the dark...

Tried it with no flags and with reduced options, e.g. 

mount -t smbfs -o username=xxx,password=xxx //blahblah/Data
/blahblah/data

No change...

> 
> >
> username=xxx,password=xxx,uid=xxx,gid=x,fmask=770,dmask=770
> > //blahblah/Data /blahblah/Data
> 
> Another nicety; use this option with mount or in your
> fstab:
> credentials=/some/file/chown/root.root/chmod/600
> with
> username = someuser
> password = somepassword
> inside that file.  I like to put mine in
> /etc/smb_passwd and I run chown 0.0/chmod 600 against
> it.
> 
> This lets you avoid putting the password in the
> (world-readable) fstab.  Just a suggestion.
> 
> > Same command we've been using for a while now (>1
> > year)...but then
> > again, maybe one of the options could have been
> > deprecated
> > 
> > Also, we installed Samba via the RPMs from
> > samba.org...but I've also
> > tried building from source (both SRPMs and plain
> > source)...neither
> > changed anything...
> > 
> > Thanks again for your help Chris
> 
> Don't thank me until I can confirm or deny it from a
> RH 7.3 and 8.0 box to an NT and 2000 Pro (no
> Server/Advanced) share (:
> 

Let me know if you find anything new...and thanks again (everyone,
especially Chris and Kurt for your suggestions and assistance...very
much appreciated).

-Joe

> /dev/idal
> 
> 
> 
> > On Thu, 2003-01-30 at 17:45, Chris de Vidal wrote:
> > > Whoa, really strange.  Might be something you're
> > > doing, but I'll post my results to you and the
> > list
> > > tomorrow and we can see if it's a consistent
> > problem
> > > with RedHat 7+ and 2000.
> > > 
> > > You are using smbmount or mount smbfs in fstab,
> > > correct?
> > > 
> > > Also, how did you install Samba?  I got an RPM
> > from
> > > Samba.org (well, an SRPM so I could tweak the
> > > ./configure line).
> > > 
> > > /dev/idal
> > > 
> > > --- Joe Gerkman <[EMAIL PROTECTED]> wrote:
> > > > Update...
> > > > 
> > > > See 554 files on rh8.0/2.2.7a machine, 627 on
> > the
> > > > rh6.2/2.0.6-9 machine
> > > > (the latter being the true number).  
> > > > 
> > > > Tried copying over the same smb.conf file (which
> > I
> > > > thought I'd done
> > > > before)...no change/luck.  Also tried the same
> > > > version of samba on a 7.3
> > > > as well as a 7.1 box (same smb.conf file
> > too)...no
> > > > luck there
> > > > either...oh, all had 2.4.x kernel, well except
> > for
> > > > the working machine
> > > > (if that matters).
> > > > 
> > > > On Thu, 2003-01-30 at 14:05, Chris de Vidal
> > wrote:
> > > > > You're using smbmount, right?  Sounds like
> > you're
> > > > > seeing only 512 files.. do ls | wc -l.  512 is
> > a
> > > > nice
> > > > > round binary number and is probably what
> > you're
> > > > > seeing.
> > > > > 
> > > > > I don't have a direct answer, but I'm under
> > the
> > > > > impression that there are many broken things
> > in
> > > > RedHat
> > > > > 8.0 (RedHat 7.0 also had many broken things..
> > > > > cooincidence??).  I wrote earlier this week
> > about
> > > > a
> > > > > RedHat 8-specific problem "cannot find name
> > for
> > > > group
> > > > > ID X".  Others with RedHat 8 have shared
> > > > similar
> > > > > stories, and I'm having no issues with the
> > same
> > > > exact
> > > > > version of Samba on a RedHat 7.3 box.  I've
> > been
> > > > u

[Samba] samba3.0alpha21 PDC

2003-01-31 Thread Jesse Jacobs
Hello all,
First Thank you everyone(especially the samba team) for helping to make
this GREAT file/print/auth MS-RPC service. :)

Environment:
I've migrated my 2.2.7a PDC (clients XP & 98SE)configuration to the 3.0
alpha21 PDC and all is wonderful except for one thing.

Problem:
When signing in to the domain HTTPS is not allowed.  I tried using
gpedit.msc policy editor and received access denied using one of the
Domain Admins accounts.  I also tried using the Administrator account.  I
was able to use gpedit.msc when signing in to the local machine
Administrator account but was not able to locate the key for this setting
nor how to propagate to the domain policy :(.

If there's any docs that anyone could refer me to resolve this please link
me :)

Any and all help is appreciated.

TIA
Jesse

P.S.  I've recently decided to migrate the PDC to an OpenLDAP back end but
would like to resolve this first.  Any tips/pointers in this regard is
greatly appreciated as well. :)

--
Jesse Jacobs, R.H.C.T. (a.k.a. Supa' Nube, BeeHive Freak)
Ajax,ON Canada


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] How to find out, if samba has SSL/LDAP support or not ?

2003-01-31 Thread Jan Schäfer
Hi,

I'm the developer of KSambaPlugin.
Is there a way to find out if samba
was compiled with SSL / LDAP support or not ?
I want to disable the options in the
case that samba doesn't support them.

Thanks,

Jan Schäfer
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] help Error with Cli_spoolss_notify.c in CUPS

2003-01-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 29 Jan 2003, Karl Banasky wrote:

> Hello, I am getting this error when Win XP machines print to my SAMBA
> server. I think it is a compile issue, if so how do I recompile or get
> it in place. I used RPM to 'install' SAMBA. Anyone have any suggestions?  
> I am using SAMBA 2.2.6a with CUPS 1.1.8 on Caldera OpenLINUX 3.1.1
>
> Error: 
> connect_to_client: unable to connect to SMB server on machine CFO. 
>Error was : SUCCESS - 0.

Can smbd resolve the name CFO<0x20>?  Is teh File and Printer service for 
MS networks installed on the client?  This is all for the prnit change 
notify code.




cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
--John Cusack - "Grosse Point Blank" (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+OqERIR7qMdg1EfYRAnDOAJ9IOSbyB1ipyKAKBHOJj8adiQ/34gCeNF7J
4qckSzaodwSuhaJCqZhCVOw=
=en4E
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Moterboard help Please

2003-01-31 Thread Elijah Savage III
I meant to include Off topic in the subject line. There is not list for
something like this that I know of and I have been a user of this
mailing list for about 2 years and figured one of you out there might
have this motherboard and be able to send me the bios for it.

-Original Message-
From: Gabriel D. Preston [mailto:[EMAIL PROTECTED]] 
Sent: Friday, January 31, 2003 11:09 AM
To: Elijah Savage III
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: [Samba] Moterboard help Please

Elijah,

I believe you have the wrong mail list for this type of problem, but 
maybe my brain just isn't working today and I'm wrong.

-Gabriel

Elijah Savage III wrote:

>All,
>
>I have been terribly pleased with openbsd 3.2 I was using it as a
>mail/samba server with postifx on a pentium pro 200 with 1 gig of
>memory. Well I wanted to add a larger harddrive than what I have in it
>now only 6.4 gig. Well the machine would not see it and for some reason
>after hours and hours of trying I can't get a tekram 395UW and a 18gig
>scsi to be the boot drive and having failed I was stuck with IDE. I
>finally got tired of it being this way and decided to flash the
>motherboard which is a Micronics Invader ATX m8s-fin motherboard. Well
>dumb me I flashed it with the wrong bios. And I can't find the original
>bios on the net anywhere do any of you all have this motherboard and
can
>send me the bios for it or possibly know where I can find it. Any of
>your help would be greatly appreciated. And before I flashed it, it did
>not ask me to backup the prior bios.
>I would just hate to trash this setup. The machine still works but with
>this current bios only the first pci slot works which means I can't use
>a nic card or anything in it.
>
>Thank you
>Elijah
>http://www.digitalrage.org/
>For your technical news and HowTo's
>Stop by and vote in the latest poll about
>Mr. Spam King.
>
> 
>
>  
>


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Moterboard help Please

2003-01-31 Thread Gabriel D. Preston
Elijah,

I believe you have the wrong mail list for this type of problem, but 
maybe my brain just isn't working today and I'm wrong.

-Gabriel

Elijah Savage III wrote:

All,

I have been terribly pleased with openbsd 3.2 I was using it as a
mail/samba server with postifx on a pentium pro 200 with 1 gig of
memory. Well I wanted to add a larger harddrive than what I have in it
now only 6.4 gig. Well the machine would not see it and for some reason
after hours and hours of trying I can't get a tekram 395UW and a 18gig
scsi to be the boot drive and having failed I was stuck with IDE. I
finally got tired of it being this way and decided to flash the
motherboard which is a Micronics Invader ATX m8s-fin motherboard. Well
dumb me I flashed it with the wrong bios. And I can't find the original
bios on the net anywhere do any of you all have this motherboard and can
send me the bios for it or possibly know where I can find it. Any of
your help would be greatly appreciated. And before I flashed it, it did
not ask me to backup the prior bios.
I would just hate to trash this setup. The machine still works but with
this current bios only the first pci slot works which means I can't use
a nic card or anything in it.

Thank you
Elijah
http://www.digitalrage.org/
For your technical news and HowTo's
Stop by and vote in the latest poll about
Mr. Spam King.



 



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Re: linux server completely hangs copying files with samba

2003-01-31 Thread Buchan Milne
Davide Cavaleri wrote:
> final experiments;
> after realizing that unloading the usb-ohci module (non even the
> usbcore) system was fine, i compiled the kernel without modules support
> and without usb. the machine crashed and actually i was really angry,
> becuase i thought i had found the problem; but finally i discovered that
> if usb is not loaded the machine crashes, but if i load it and unload it
> (going back to the same situation) it doesn't crash. obviously if i
> disale usb from bios everything in ok. maybe is something about irq, so
> if it is enabled in bios the ira (11 for me) is used. loading and
> unloading the module will do something strange to the irq handles. cat
> /proc/interrupts gives 0 on usb.
> at this point i'm curios to find out why this happens; since i've red of
> many people having this problem maybe someone (not you, as you told me)
> had a similar situation.
> don't know if it's relevant, but only once the keyboard was blocked, i
> had to unplag and plug it back (ps/2 keyb) and it was ok, checking the
> interrupts they had jumped from 1500 to about 3000 in few seconds.
> going to work, nice day

I forget how recent your hardware is, but have you tried booting with:

lilo: linux noapic
?

Buchan

-- 
|--Another happy Mandrake Club member--|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] samba printing on Solaris 7

2003-01-31 Thread Hong
Hi all,

I'm running Solaris 7 with samba 2.2.7a and would like to 
have samba printing in place so that PC client can print 
from existing print queue "its_simx_local" on solaris 
(created via jetadmin). 

The print queue is visible in Windows Explorer. Using 
Windows "Add Printer Wizard", I installed the HP printer 
onto the PC client. However, there was no output on the 
printer when I sent a print job from the PC client. Rather 
the job is stuck in the path ("/usr/spool/samba" - mode 1777) 
that I defined in the [printers] folder in smb.conf:

woodstock:/usr/spool/samba% file *
smbprn.09.EZaOOL:   ascii text

Here are the print related entries in smb.conf:
[global]
load printers = yes
printcap name = /usr/local/samba/lib/printcap
printing = sysv
  print command = /bin/lp -c -d%p %s
[printers]
   comment = All Printers
   path = /usr/spool/samba
   browseable = yes
   guest ok = no
   writable = no
   printable = yes

And the contents of /usr/local/samba/lib/printcap:

# cat /usr/local/samba/lib/printcap
its_simx_local:\
:bsdaddr=woodstock,its_simx_local,Solaris:


Any quick response would be highly appreciated.

Many thanks,
Hong
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] [found something] Problems making use of 2K PDC

2003-01-31 Thread John H Terpstra
On Fri, 31 Jan 2003, Andreas Hasenack wrote:

> Em Fri, Jan 31, 2003 at 03:01:30PM +, John H Terpstra escreveu:
> > > And, since the w2k server is on a different subnet, I don't think I can make it
> > > the logon server for my clients, or can I? I mean, broadcasts mean a lot in a
> > > MS network...
> >
> > You must use WINS to avoid broadcast traffic. With WINS the important UDP
> > traffic will be unicast. WINS can reduce UDP broadcast traffic by up to
> > 95%. Using WINS, you clients will readilly locate the logon server. I
> > would recommend not using file and print shares over the WAN link though.
>
> But how does the windows client find out who the domain controller is for
> a specific domain? Does WINS advertise that info too?
> When I make a windows client join a domain, it never asks me for the name
> of the domain controller... Just the name of the domain.

Firstly, when you use WINS you configure one machine as your WINS server.
Then ALL SMB clients (Samba as well as MS Windows) get configured (part of
the TCP/IP stack configuration) to use that WINS server.

Now when the client starts up it registers with the WINS server. As it
starts it's networking services it registers various name types with the
WINS server also. The Domain Controllers that are providing the NETLOGON
services do this also.

The MS Windows client will then ask the WINS server for the IP address of
machines that have registered for their domain name (let's call it
MYDOMTHING) MYDOMTHING<1c> - the <1c> type means it runs the netlogon
service.

The client then connects to one of the addresses it obtained from thr WINS
server to commence the logon proceesses. WINS is you best friend - DNS
does NOT allow name type lookups that are particular to NetBIOS
networking over TCP/IP.

Please read the documentation - all of this is explained in the
Entire-HOWTO-Collection for which there is a link on the SWAT home page.

> > > Should I then just make the clients authenticate against the remote w2k machine
> > > anyway? I know, in both scenarios, the w2k server will be contacted anyway, 
>either
> > > by the samba server or by the linux client.
> >
> > Correct. That's my recommendation.
>
> What about using security = server, point the password server at the w2k
> machine and set domain logons = yes? Should this work?

Yes, it will work. However, be aware that SERVER mode security does a few
very nasty things. Because the machine is NOT a trusted domain member it
needs to step around some old bugs. SERVER mode security causes samba to
send a bogus username/password pair before trying the real
username/password pair. It needs to do this so that an old bug that was
present in some MS Windows systems does not inadvertently allow a user
with a wrong set of credentials (username/password pair) to gain system
access. If we did not do this then it could be used as a potential root
exploit

So what does this mean? Well, if your Win2K adminsitrator has set a
lockout threashold on the number of bad logins for a user, then this may
be triggered, Alternatively, the Event log on the Win2K machine will
record errors for each authentication attempt.

The undesirability applies only to use of MS WIndows NT4/2K authentication
servers, with samba<->samba authentication this poses no issues and is how
we can achieve a BDC type role.

My clear preference is to make the samba server a full Win2K domain
member. Of course the Win2K needs to be running either in NT4 domain
security mode _or_ Active Directory in mixed mode.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] samba drive acces through VB6

2003-01-31 Thread Kyle Loree
have you mapped the drives or does your script contain user and pass? or
do you have security = share ?

[EMAIL PROTECTED] writes:
>** High Priority **
>
>I have a PC running Win XP.  I can map to a samba folder on an AIX Unix
>server.  I can copy files to this folder update these files all through
>Win XP.  My problem comes when I try to access these same files using
>Visual Basic 6.  The dir() command in VB6 does not see the files or the
>folder.  I have tried the same on a Win 95 PC with the same results.
>
>Any suggestions?
>
>Thanks,
>John Seiler



Kyle Loree
Rendek Communications
[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Use client driver

2003-01-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 30 Jan 2003, Darin Bawden wrote:

> Good day everyone, Just a quick question.  When using Samba 2.2.7a and
> Cups 1.17 or 1.18, is it good or bad to use "Use client driver" as a
> share setting on the Printers share?  I used it with LPD, but I'm not
> real sure it's necessary with cups.

"use client driver" should only be used when you want to share some 
printer drivers using RPC to Windows NT+ clients and allow other printers 
to have clients install the driver locally.  It is a horrible (but 
apparently necessary) hack.  Generally only use it on printers that really 
needit and never use when trying to serve printer drivers to Windows NT+ 
clients.  It has no effect on Windows 9x clients.




cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
--John Cusack - "Grosse Point Blank" (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+Op4fIR7qMdg1EfYRAnqSAJ952CP+YFWxKy43MWDM6TjWljLdAwCcDiww
KwLAY+dptQ/Ha0bJ4PaqDqc=
=JncC
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Moterboard help Please

2003-01-31 Thread Elijah Savage III
All,

I have been terribly pleased with openbsd 3.2 I was using it as a
mail/samba server with postifx on a pentium pro 200 with 1 gig of
memory. Well I wanted to add a larger harddrive than what I have in it
now only 6.4 gig. Well the machine would not see it and for some reason
after hours and hours of trying I can't get a tekram 395UW and a 18gig
scsi to be the boot drive and having failed I was stuck with IDE. I
finally got tired of it being this way and decided to flash the
motherboard which is a Micronics Invader ATX m8s-fin motherboard. Well
dumb me I flashed it with the wrong bios. And I can't find the original
bios on the net anywhere do any of you all have this motherboard and can
send me the bios for it or possibly know where I can find it. Any of
your help would be greatly appreciated. And before I flashed it, it did
not ask me to backup the prior bios.
I would just hate to trash this setup. The machine still works but with
this current bios only the first pci slot works which means I can't use
a nic card or anything in it.

Thank you
Elijah
http://www.digitalrage.org/
For your technical news and HowTo's
Stop by and vote in the latest poll about
Mr. Spam King.

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] PAM Module for SMB-LDAP

2003-01-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 30 Jan 2003, Buchan Milne wrote:

> "This module authenticates a local smbpasswd user database.  If you require
> support for authenticating against a remote SMB server, or if you're
> concerned about the presence of suid root binaries on your system, it is
> recommended that you use one of the other two following modules"
> 
> I have already determined from Andrew Bartlett that there is ambiguity
> in 'smbpasswd user database', as it should be 'samba passdb backend', to
> be more clear that LDAP etc is supported in 2.2.7a on the DC.

Yup.  It should support changes for sambaAccounts if it was compiled 
with --with-ldapsam.  If Bradley is wrong on this one, I'll be surprised.

I'm working on theory here because I haven't tested it lately.



cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
--John Cusack - "Grosse Point Blank" (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+Op04IR7qMdg1EfYRAiJDAKCqlnyJOUQeK/vD2slUfcnnfzBmeACgmlCr
B4whlmshx3idhNYjtMIDP0E=
=0Nex
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] samba drive acces through VB6

2003-01-31 Thread John Seiler
** High Priority **

I have a PC running Win XP.  I can map to a samba folder on an AIX Unix server.  I can 
copy files to this folder update these files all through Win XP.  My problem comes 
when I try to access these same files using Visual Basic 6.  The dir() command in VB6 
does not see the files or the folder.  I have tried the same on a Win 95 PC with the 
same results.

Any suggestions?

Thanks,
John Seiler


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help

2003-01-31 Thread MCCALL,DON (HP-USA,ex1)
Hi, Miles,
Actually on HP-UX, you will need to add the word 'debug' at the end of each
of 
the lines in you /etc/pam.conf file, to enable more debugging to go into the

/var/adm/syslog/syslog.log file.

One thing that I have seen something like this happen on is if the 
/etc/shells file is corrupt, or if the shell that is defined for the user
(since they don't have a /etc/passwd entry, this would be whatever you put
in
template in the smb.conf) does not exactly match one of the lines in
/etc/shells,
or the defaults, if this file does not exist.
The defaults for 11.0 are:



/sbin/sh
/usr/bin/sh
/usr/bin/rsh
/usr/bin/ksh
/usr/bin/rksh
/usr/bin/csh
/usr/bin/keysh

Hope this helps,
Don
> -Original Message-
> From: John H Terpstra [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 31, 2003 1:36
> To: Miles Roper
> Cc: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'; Esh,
> Andrew; Ronan Waide; STEFFENS,MICHAEL (HP-Germany,ex1); 'MCCALL,DON
> (HP-USA,ex1)'; 'Richard Sharpe'
> Subject: RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help
> 
> 
> On Fri, 31 Jan 2003, Miles Roper wrote:
> 
> > Hi Everyone,
> >
> > I'm forgetting about the password one at the moment, thanks 
> for all your
> > input :o)
> >
> > I still don't have a clue how to solve my main problem.  
> I'm assuming that
> > its not actually winbind related now, as I've recently 
> tried pam_smb and get
> > the same basic problem.
> >
> > Basically, when I log into the UNIX box, the 
> username/password of a NT user
> > is being authenticated, but doesn't actually log in.  It 
> doesn't get past
> > the password line.  I know it accepts the password.  Its 
> almost as if it
> > can't find the shell.  But the template variable is set 
> within the smb.conf
> > file.  Permissions are fine.  I have exactly the same 
> problem with the
> > pam_smb module.
> 
> So what does PAM report into your /var/log files?
> 
> Have you tried adding to each line in your /etc/pam.d/login 
> (after the .so
> file name) the word 'audit' - this will increase the volume 
> of debugging
> info spit out into /var/log/messages, or wherever PAM send 
> this on your
> distro.
> 
> - John T.
> 
> >
> > If there is any further information I can send let me know.
> >
> > Ideas?
> >
> > Thanks
> >
> > Miles
> >
> >
> > -Original Message-
> > From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]]
> > Sent: Friday, 31 January 2003 07:06 a.m.
> > To: STEFFENS,MICHAEL (HP-Germany,ex1); Ronan Waide
> > Cc: '[EMAIL PROTECTED]'; Esh, Andrew; Miles Roper;
> > '[EMAIL PROTECTED]'; 'Richard Sharpe'
> > Subject: RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, 
> Please Help
> >
> >
> > Hi Everyone,
> > This whole problem with the password command not working 
> when winbind
> > is included as a method in the nsswitch.conf can probably 
> be worked around
> > by simply using the -r files (or -r nis or -r nisplus) 
> switch.  Take a look
> > at the man page for passwd on HP-UX 11.x  and see if this 
> won't help you
> > out.
> > Hope this helps,
> > Don
> >
> > > -Original Message-
> > > From: Michael Steffens [mailto:[EMAIL PROTECTED]]
> > > Sent: Tuesday, January 28, 2003 11:52
> > > To: Ronan Waide
> > > Cc: '[EMAIL PROTECTED]'; Esh, Andrew; Miles Roper;
> > > '[EMAIL PROTECTED]'; 'Richard Sharpe'
> > > Subject: Re: [Samba] RE: Winbind on HPUX11, Totally 
> Stuck, Please Help
> > >
> > >
> > > Ronan Waide wrote:
> > > > On January 28, [EMAIL PROTECTED] said:
> > > >
> > > >>I don't have HPUX, so I don't know what to suggest for
> > > that. I just know
> > > >>getent won't work without winbindd in nsswitch.conf on Linux.
> > > >
> > > >
> > > > I think the point that was being made is that NSS support
> > > on HPUX only
> > > > supports a few known types, of which one is LDAP. The 
> discussion was
> > > > basically about faking out the system so that what it 
> thinks is LDAP
> > > > is actually winbind.
> > >
> > > Yep. It's a HP-UX specific workaround. Please ignore it
> > > everywhere else.
> > >
> > > Michael
> > >
> > >
> >
> 
> -- 
> John H Terpstra
> Email: [EMAIL PROTECTED]
> 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] Samba File Sharing- Some Doubts?

2003-01-31 Thread Sadanapalli, Pradeep Kumar (MED, TCS)
Thank you very much John,
your response really cleared many of my doubts. But I am still unable to
share my files using Samba.
I configured samba on my Linux box, but the linux system is not visible
from the windows machine in the particular
domain I want it to appear. I donot know where I made mistake. I am
sending u the smb.conf below, please 
tell me how to get it work. 

"My smb.conf FILE"
 *
[global]
log file = /var/log/samba/%m.log
smb passwd file = /etc/samba/smbpasswd
load printers = yes
socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192
obey pam restrictions = yes
encrypt passwords = yes
dns proxy = no
server string = Pradeep's Samba
writeable = yes
printing = lprng
default = printers
unix password sync = Yes
workgroup = AMERICA   ### This is my Windows Domain
security = user
preferred master = no
max log size = 0
pam password change = yes

[Linux Pradeep]

path = /home/pradeep
comment = Pradeep Home Dir Samba Share
valid users = %S
public = yes
create mode = 0664
directory mode = 0775

# This one is useful for people to share files

[tmp]

 comment = Temporary file space
 path = /tmp
 read only = no
 public = yes

  ***

Thanks,
Pradeep



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 30, 2003 3:06 PM
To: Sadanapalli, Pradeep Kumar (MED, TCS)
Subject: Re: [Samba] Samba File Sharing- Some Doubts?


>My issues are :

Before addressing the specifics of your questions:  you need to decide 
what approach to security you want to use.  This is one of the most 
complex parts of Samba, primarily because Samba acts as a bridge between

two very dissimilar systems.  Samba provides a wide variety of choices, 
because there is no "one size fits all" solution that will satisfy 
everyone.

>1. Do I need to join the domain for sharing my files with them?

No.  The primary reason for having a Samba server join an Windows domain

is to allow the Windows domain controller to do user authentication, 
rather than maintaining a separate password file on the Samba server.
It's 
your choice.

>2. Do I need to have a login account for my linux machine on windows
>domain?

While this is not normally visible to users, this is just how domain 
membership works.  The domain member computer has a special "machine 
account" on the domain controller - during authentication, the domain 
member system presents it's account password to prove to the domain 
controller that it really is the computer that it's name suggests that
it 
is.

This is not normally visible when using the Microsoft domain tools, but
it 
IS how it works underneath.  When using Samba as a domain controller,
the 
underlying mechanisms of implementing domain membership are more
visible, 
which is why the "machine account" stuff appears in the Samba 
documentation.

>3. If a windows domain member needs to view my files, does he/she need
>to have 
>   account on my machine or his domain account is enough?

You have some more choices here.

You need to decide what Unix userid will be used for accessing files on 
the Samba server.  If you want all connections to use the same Unix 
userid, then you should use the "guest" facility of Samba to specify the

account that will be used by all windows users connecting to Samba.

If you want to use different Unix userids for different Windows users, 
then you need to define how the accounts map to each other.  The default

is to map accounts by name:  in other words, you need a Unix account to 
match each Windows account name.  When the Windows user connects, all 
operations done on his behalf will be done using the matching Unix 
account.  Note that this is independent of how you've configured 
passwords/authentication.

You can have Samba automatically create a unix account on the fly for
each 
Windows account that successfully authenticates by using the "add user 
script" facility.

Alternatively, you can explicitly define a mapping of Windows account 
names to Unix account names using the samba "username map" facility.

On systems that support it, you can use winbindd (which isn't strictly 
part of Samba) to map Windows domain accounts and groups onto your 
Unix/Linux system.  This approach tightly binds your Unix/Samba 
environment to a Windows domain.

>4. Who will authenticate the users for file sharing, my linux box or
>windows domain controller? If so, how should
>   I configure samba?

Again, you can choose to configure it either way.  If you have your
linux 
system join the domain (or use the domain controller as a password 
server), then it will be the windows domain controller doing 
authentication.  If not, it will be the linux system (probably).  There 
are other possible authentication approaches involving LDAP et. al.

>I

[Samba] Re: Can't see all of the directories in a share with 2.2.7a-1& RH8...but older version/kernel can

2003-01-31 Thread Chris de Vidal
Update:
>From a RedHat 8 box with Samba 2.2.7a from a Samba.org
RPM, I could see 1000 directories on a Windows 2000
Pro share.

>From a RedHat 7.3 box with Samba 2.2.7a from a
Samba.org SRPM tweaked to include ACL support, I could
see 1000 directories on a Windows 2000 Pro share.

I created them with a for loop from my smbmount, not
from within Windows, in case it matters.

Someone shared that the permissions were possibly
incorrect, but that would only seem to apply to a
Samba server, not smbmount.  And you're not using a
umask, so the default umask is the one from the
system, which is 0022, making permissions for folders
and files 755.

The only thing I can offer now is possibly ensuring
that the username you access from the 6.2 box is the
same you use on the 7.x+ boxen.  If the usernames were
different, perhaps permissions on Windows hide those
directories from view (but obviously not from cd).

Oh, and check the DOS permissions on those
directories.. make sure they're not hidden.  I don't
know if smbmount obeys that, but it's worth a shot.

/dev/idal

--- Chris de Vidal <[EMAIL PROTECTED]> wrote:
> To the list: We've been having some off-list
> conversation and I wanted to clue you in here.  Our
> thread might be useful for posterity's (Google's?)
> sake.
> 
> /dev/idal
> 
> --- Joe Gerkman <[EMAIL PROTECTED]> wrote:
> > We're using the following command (from a shell
> > script):
> 
> First (this isn't your fix but a nicety), it's
> easier
> when this is in /etc/fstab instead of with a script.
> 
> It can be done automatically at boot (RedHat
> recognizes smbfs types and waits til network is
> started) or manually with the noauto option.  Then,
> you can just run
> mount /blahblah/Data
> 
> If you put your password in a credentials file (see
> below), you can protect your password.
> 
> Again, not a fix for your issue but I thought you'd
> like to know that.
> 
> > mount -f -t smbfs -o
> 
> Second, I had to look up -f.  man mount:
> -f Causes everything to be done except for the
> actual system call; if it's not obvious, this
> ``fakes'' mount-ing  the  file  system.  This option
> is useful in conjunction with the -v flag to
> determine
> what the mount command is trying to do. It can also
> be
> used to add entries for devices that were mounted
> earlier with the -n option.
> 
> I have little confidence this will fix your problem,
> but please try it without that flag anyway.
> 
> It's just a shot in the dark...
> 
> >
>
username=xxx,password=xxx,uid=xxx,gid=x,fmask=770,dmask=770
> > //blahblah/Data /blahblah/Data
> 
> Another nicety; use this option with mount or in
> your
> fstab:
> credentials=/some/file/chown/root.root/chmod/600
> with
> username = someuser
> password = somepassword
> inside that file.  I like to put mine in
> /etc/smb_passwd and I run chown 0.0/chmod 600
> against
> it.
> 
> This lets you avoid putting the password in the
> (world-readable) fstab.  Just a suggestion.
> 
> > Same command we've been using for a while now (>1
> > year)...but then
> > again, maybe one of the options could have been
> > deprecated
> > 
> > Also, we installed Samba via the RPMs from
> > samba.org...but I've also
> > tried building from source (both SRPMs and plain
> > source)...neither
> > changed anything...
> > 
> > Thanks again for your help Chris
> 
> Don't thank me until I can confirm or deny it from a
> RH 7.3 and 8.0 box to an NT and 2000 Pro (no
> Server/Advanced) share (:
> 
> /dev/idal
> 
> 
> 
> > On Thu, 2003-01-30 at 17:45, Chris de Vidal wrote:
> > > Whoa, really strange.  Might be something you're
> > > doing, but I'll post my results to you and the
> > list
> > > tomorrow and we can see if it's a consistent
> > problem
> > > with RedHat 7+ and 2000.
> > > 
> > > You are using smbmount or mount smbfs in fstab,
> > > correct?
> > > 
> > > Also, how did you install Samba?  I got an RPM
> > from
> > > Samba.org (well, an SRPM so I could tweak the
> > > ./configure line).
> > > 
> > > /dev/idal
> > > 
> > > --- Joe Gerkman <[EMAIL PROTECTED]> wrote:
> > > > Update...
> > > > 
> > > > See 554 files on rh8.0/2.2.7a machine, 627 on
> > the
> > > > rh6.2/2.0.6-9 machine
> > > > (the latter being the true number).  
> > > > 
> > > > Tried copying over the same smb.conf file
> (which
> > I
> > > > thought I'd done
> > > > before)...no change/luck.  Also tried the same
> > > > version of samba on a 7.3
> > > > as well as a 7.1 box (same smb.conf file
> > too)...no
> > > > luck there
> > > > either...oh, all had 2.4.x kernel, well except
> > for
> > > > the working machine
> > > > (if that matters).
> > > > 
> > > > On Thu, 2003-01-30 at 14:05, Chris de Vidal
> > wrote:
> > > > > You're using smbmount, right?  Sounds like
> > you're
> > > > > seeing only 512 files.. do ls | wc -l.  512
> is
> > a
> > > > nice
> > > > > round binary number and is probably what
> > you're
> > > > > seeing.
> > > > > 
> > > > > I don't have a direct answer, but I'm under
> > the
> > > > > 

Re: [Samba] [found something] Problems making use of 2K PDC

2003-01-31 Thread Andreas Hasenack
Em Fri, Jan 31, 2003 at 03:01:30PM +, John H Terpstra escreveu:
> > And, since the w2k server is on a different subnet, I don't think I can make it
> > the logon server for my clients, or can I? I mean, broadcasts mean a lot in a
> > MS network...
> 
> You must use WINS to avoid broadcast traffic. With WINS the important UDP
> traffic will be unicast. WINS can reduce UDP broadcast traffic by up to
> 95%. Using WINS, you clients will readilly locate the logon server. I
> would recommend not using file and print shares over the WAN link though.

But how does the windows client find out who the domain controller is for
a specific domain? Does WINS advertise that info too?
When I make a windows client join a domain, it never asks me for the name
of the domain controller... Just the name of the domain.

> > Should I then just make the clients authenticate against the remote w2k machine
> > anyway? I know, in both scenarios, the w2k server will be contacted anyway, either
> > by the samba server or by the linux client.
> 
> Correct. That's my recommendation.

What about using security = server, point the password server at the w2k
machine and set domain logons = yes? Should this work?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] passwd: Authentication token manipulation error

2003-01-31 Thread Keith Fernandez
Hi,

I am trying to add a new user to my RedHat 8.0 System running samba 2.2.7-1a
This is the error I get.

---
[root@localhost named]# useradd -g users mandy
[root@localhost named]# passwd mandy
Changing password for user mandy.
New password:
BAD PASSWORD: it is too short
Retype new password:
Failed to find entry for user mandy.

passwd: Authentication token manipulation error
-

This error is only when I am creating a new user. Password sync happens if there is an 
existing user.
if after using useradd -g users mandy
I do a smbpassword -a mandy
then everything is fine
What could be the problem...


Regards,
Keith

"The linuX Files -- The Source is Out There."

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] [found something] Problems making use of 2K PDC

2003-01-31 Thread John H Terpstra
On Fri, 31 Jan 2003, Andreas Hasenack wrote:

> Em Thu, Jan 30, 2003 at 10:14:47PM +, John H Terpstra escreveu:
> > If your Win2K DC is your authentication server for your domain, then DO
> > NOT set "domain logons = Yes" on samba - it can cripple your Win2K DC!
> >
> > Instead, in your smb.conf [globals] you want:
> > security = domain
> > password server = *
> >
> > Then join the domain by:
> > smbpasswd -r 'PDC_name' -j 'Domain_Name'
> >
> > This way your MS Windows clients should be domain members and will log
> > onto the Win2K DC and will be able to seemlessly access your samba server.
>
> The win2k machine is on the other side of a WAN link, a different
> subnet, but the windows clients will be accessing shares on the local samba server.
> Users will be created and managed in the win2k machine, that's why I need the
> samba server to check passwords against the remote win2k machine.

I would try to NOT use Samba for logon services atthei time. There are not
big issues with doing this over a WAN link so long as there are not too
many clients _and_ you have sufficient bandwidth.

>
> And, since the w2k server is on a different subnet, I don't think I can make it
> the logon server for my clients, or can I? I mean, broadcasts mean a lot in a
> MS network...

You must use WINS to avoid broadcast traffic. With WINS the important UDP
traffic will be unicast. WINS can reduce UDP broadcast traffic by up to
95%. Using WINS, you clients will readilly locate the logon server. I
would recommend not using file and print shares over the WAN link though.

>
> Should I then just make the clients authenticate against the remote w2k machine
> anyway? I know, in both scenarios, the w2k server will be contacted anyway, either
> by the samba server or by the linux client.

Correct. That's my recommendation.


- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] So SAMBA no longer supports print driver downloads

2003-01-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 29 Jan 2003, Robert M. Martel wrote:

> So SAMBA no longer supports print driver downloads.  That is about the
> only conclusion that I can come to at this point.  I've not been able to
> get Windows printer driver downloads to work right since Samba 2.2.2.
>
> No one but printer admins displays the correct settings for printers,
> everyone else gets the original printer defaults that they cannot
> change.

Did you initialize the driver bound to the printer?

> Does anyone *REALLY* have downloading printer drivers to Windows 2000
> clients working properly?  Has anyone documented the steps as the ones
> in the available documentation DON'T work?

Works fine here (on a daily basis).  Not sure what to tell you with more 
information.

If you want to tell me exactly how you do it, I'll be glad to review the 
process.




cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
--John Cusack - "Grosse Point Blank" (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+Oo8nIR7qMdg1EfYRArmwAKDZKX7DRABQiQ62+Jz8i7sv0UJ7GgCaAoFr
sFGMdunZezKx8fBLhCCWoUQ=
=vovw
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



RE: [Samba] SAMBA ===== I have problem.

2003-01-31 Thread daniel . jarboe
> > I have a WinNT Domain, a Samba Server and some users WinNT.
> > 
> > I need to available a directory structure in the Samba Server.
> > 
> > I need to know if I really need to have a Unix user for 
> each WinNT user that
> > access the structure directory in the Samba Server?

Look in the docs for winbind.  Winbind allows you to have windows domain
users on the unix system without creating "real" unix accounts.  In
addition to the windows domain users being able to access files that are
globally readable on the unix system, you can set user/group ownership
of the files to the windows domain users and restrict permissions
appropriately.

~ Daniel








---

This message is the property of Time Inc. or its affiliates. It may be
legally privileged and/or confidential and is intended only for the use
of the addressee(s). No addressee should forward, print, copy, or
otherwise reproduce this message in any manner that would allow it to be
viewed by any individual not originally listed as a recipient. If the
reader of this message is not the intended recipient, you are hereby
notified that any unauthorized disclosure, dissemination, distribution,
copying or the taking of any action in reliance on the information
herein is strictly prohibited. If you have received this communication
in error, please immediately notify the sender and delete this message.
Thank you.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Samba PDC does not properly synchronise registry

2003-01-31 Thread Tobias Getrost
Hello,
I have a big problem with our Samba Primary Domain Controller. It synchronises user 
names and passwords without any problems. But there are some problems with the windows 
registry on the win2000 clients, namely some programs cannot access the registry. What 
can I do?

Best regards
Tobias
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Dumb ? question abount Name Resolution on a full SambaDomain

2003-01-31 Thread Rashkae
I don't know why the Samba documentation suggests not using Wins Support.
It is by far a more reliable mechanism that broadcasts for Windows
networks to find hosts, and is relatively painless to set up.  You only
need 1 computer with the Wins support on, the others would all have a Wins
Server = Ip address of the computer with Wins Support.


On Fri, 31 Jan 2003, Pierre Lebrun wrote:

I wonder how to configure the name resolution on the Windows network.

I am puzzled by the "Wins Support" section of the smb.conf man page:

" You should not set this to yes unless you have a multi-subnetted
network and you wish a particular nmbd to be your WINS server "

Does that mean that on my subnet, broadcast is as performant as direct
acces to the Name Server, even if Samba is the PDC and WINS Server ?

If the use of a name server is better, what should I use: DNS, WINS, both ?

Thanks for your comments.

Pierre


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] WinXP Printing Issue

2003-01-31 Thread Ron Bombard
Greetings!

I'm running Samba 2.2.5 on HP-UX 10.20.

I've recently started adding WinXP clients to my network.  Here's
my issue:

I installed a WinXP machine on the network.   I was able to add a
bunch of samba-networked printers to the Xp machine.  

I recently added 2 new printers to the network.   I added the
printer names to my samba "printcap" file.   I'm able to add
these printers to any Win98, 95 machines.   But my WinXP machine
doesn't see them.  Even if I don't "browse" for it, and just type
it in manually "\\Server\printer" it errors:

"Windows cannot connect to the printer.  Either the printer name
was typed incorrectly, or the specified printer has lost its
connection to the server."

I even removed a printer from my network, removed its printer
name from the "printcap" file.This printer STILL shows up in
WinXP.  It even lets me install it.

Is there some sort of "Cache" or something that stores this
information on WinXP machines?   Does anyone have any ideas?   It
sure would be "Handy" to be able to add printer to my network...

Thanks!
Ron

---
Ron Bombard,  Network Administrator
Meddle not in the affairs of dragons... for you 
are crunchy, and taste like chicken.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Win98 clients accessing Samba file server.

2003-01-31 Thread Bart Bekker

The home directory in win98 should be taken care of by the 'home\\server\dir\dir ' 
parameter in the [global] section, and another section
called [homes] where you put the comment, browsable, readonly, etc..
Browsing the server using win98 should show you a dir called 'homes' that
gives you access to the home dir of the username you are logged in with.
I use this for a mixed win98/win2k/winxp network without any problems.

 Bart.
---Original Message---

From: Bill Merry
Date: 29 ianuarie 2003 08:54:51
To: [EMAIL PROTECTED]
Subject: [Samba] Win98 clients accessing Samba file server.

HI All
I'm in the process of setting up my first Linux box at work, a basic file
server for all 20+ Win clients (I'm sick of paying M$ CAL) all have a 'home'
directory and all share a 'shared' directory. What my problem is, everything
is working OK with WinXP/2000 I can see the shared directory and our own
home directory on the Samba box.

With Win98 I can only see and access the shared directory. I can see and
access the home directory only if I set up a 'share' for them and give the
directory read/write access for everyone, not what I really desire.

I have gone though all the doc's that I can find and I can't find any
answers. As it's working for the WinXP/2000 I figured it probably a Win98
problem? but they are all set up according the HOW TO from Samba, as far as
I can tell.

Using RH8 & Samba 2.2.7a, have WinNT4 server as PDC and the network is
purely TCP/IP.

All and any help will be greatly appreciated.

This an entry from a client log

Denied connection from 192.168.0.44 (192.168.0.44)
[2003/01/29 14:42:38, 0]
rpc_client/cli_netlogon.c:cli_net_sam_logon_internal(406)
cli_net_sam_logon_internal: NT_STATUS_WRONG_PASSWORD
[2003/01/29 14:42:38, 0] smbd/password.c:domain_client_validate(1619)
domain_client_validate: unable to validate password for user DIMI in domain
MELB to Domain controller *. Error was NT_STATUS_WRONG_PASSWORD.

My smb.conf
# Samba config file created using SWAT
# from samba.melb (127.0.0.1)
# Date: 2003/01/29 09:51:17

# Global parameters
[global]
workgroup = MELB
server string = Samba Server
security = DOMAIN
encrypt passwords = Yes
password server = *
log file = /var/log/samba/log.%m
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF92 SO_SNDBUF92
dns proxy = No
username map = /system/samba/username_map

[homes]
comment = Home Directories
read only = No
# guest ok = Yes
browseable = No
valid users = %S
create mode = Yes
directort mode = 775

[Shared]
comment = Everybody's S:\ Drive
path = /home/Shared
read only = No
guest ok = Yes

Bill
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Re: Windows access problems

2003-01-31 Thread Pierre Lebrun
Can you send smb.conf please ?

Pierre

Dan Perik wrote:

Hello,

I had the pleasure of installing a new Linux(RH8.0)/Samba(2.2.7a) server
(as a PDC) at one of our locations this week.  They previously were
accessing a shared drive from a Win2k Pro. machine.  The migration did
not go very smooth.  Most things have been resolved, but we have some
strange issues that are still causing problems, which I was hoping
someone out there would have some insight on.

1. A day or two after the server was installed, one of the 98 machines
started locking up when opening files, or when left idle for a long
period of time.  (I know this could just be an instability of Windows
98, but being that it started just after the new server installation is
peculiar).

2. A different 98 machine can't open a particular Access 97 database. 
It can open other Access 97 files, but on this particular one, it pretty
much hangs the machine.  This same Access 97 database can be opened just
fine from another machine (a Win 95 machine in particular).  I have 
veto oplocks files = /*.mbd/*.ldb/*.dbf/*.idx/*.cdx/ (I also included
their upper case variants for good measure.) in the smb.conf file to
avoid the oplock problems.

The credibility of the new server (and Linux/Samba) and myself are not
faring well in the minds of these pleasant users, so help would be very
much appreciated.

Thank you,
Dan





--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] Dumb ? question abount Name Resolution on a full Samba Domain

2003-01-31 Thread Pierre Lebrun
I wonder how to configure the name resolution on the Windows network.

I am puzzled by the "Wins Support" section of the smb.conf man page:

" You should not set this to yes unless you have a multi-subnetted 
network and you wish a particular nmbd to be your WINS server "

Does that mean that on my subnet, broadcast is as performant as direct 
acces to the Name Server, even if Samba is the PDC and WINS Server ?

If the use of a name server is better, what should I use: DNS, WINS, both ?

Thanks for your comments.

Pierre


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] RE: linux server completely hangs copying files with samba

2003-01-31 Thread Davide Cavaleri
final experiments;
after realizing that unloading the usb-ohci module (non even the usbcore) 
system was fine, i compiled the kernel without modules support and without 
usb. the machine crashed and actually i was really angry, becuase i thought 
i had found the problem; but finally i discovered that if usb is not loaded 
the machine crashes, but if i load it and unload it (going back to the same 
situation) it doesn't crash. obviously if i disale usb from bios everything 
in ok. maybe is something about irq, so if it is enabled in bios the ira 
(11 for me) is used. loading and unloading the module will do something 
strange to the irq handles. cat /proc/interrupts gives 0 on usb.
at this point i'm curios to find out why this happens; since i've red of 
many people having this problem maybe someone (not you, as you told me) had 
a similar situation.
don't know if it's relevant, but only once the keyboard was blocked, i had 
to unplag and plug it back (ps/2 keyb) and it was ok, checking the 
interrupts they had jumped from 1500 to about 3000 in few seconds.
going to work, nice day

david

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba.src.rpm(RedHat site) VS samba.src.rpm(Samba site)

2003-01-31 Thread Keith Fernandez
Hi,

I have been checking the samba site and found a src rpm for RedHat 8.0. (2.2.7)
After checking the RedHat 8.0 updates site I found that they had a src rpm for 
samba.(2.2.7)

After looking at the spec files of both, I found that pam_smbpass was hashed in RedHat 
and unhased in the one I found at the samba
site. I need this for the smbpassword / passwd sync
Why would RedHat do this?
Also when I unhased the lines related to pam_smbpass I found that the RedHat src rpm 
gave some build errors.
Samba's src rpm didnt give any errors.

Any comments on the two src rpms.

Which one should I go in for. I am using RedHat 8.0 as my OS.

Regards,
Keith

"The linuX Files -- The Source is Out There."

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] [found something] Problems making use of 2K PDC

2003-01-31 Thread Andreas Hasenack
Em Thu, Jan 30, 2003 at 10:14:47PM +, John H Terpstra escreveu:
> If your Win2K DC is your authentication server for your domain, then DO
> NOT set "domain logons = Yes" on samba - it can cripple your Win2K DC!
> 
> Instead, in your smb.conf [globals] you want:
>   security = domain
>   password server = *
> 
> Then join the domain by:
>   smbpasswd -r 'PDC_name' -j 'Domain_Name'
> 
> This way your MS Windows clients should be domain members and will log
> onto the Win2K DC and will be able to seemlessly access your samba server.

The win2k machine is on the other side of a WAN link, a different
subnet, but the windows clients will be accessing shares on the local samba server.
Users will be created and managed in the win2k machine, that's why I need the
samba server to check passwords against the remote win2k machine.

And, since the w2k server is on a different subnet, I don't think I can make it
the logon server for my clients, or can I? I mean, broadcasts mean a lot in a
MS network...

Should I then just make the clients authenticate against the remote w2k machine
anyway? I know, in both scenarios, the w2k server will be contacted anyway, either
by the samba server or by the linux client.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Auth PPTP X SAMBA

2003-01-31 Thread Andrew Bartlett
On Fri, 2003-01-31 at 00:17, EU wrote:
> Good Morning,
> 
> My doubt and the following one: I have a server with SuSE 8,0 using
> VPN PPTP, would like to know as I can make with that the users if
> Authentication for the samba.

It's been on my todo list for a while - in particular to allow a Samba
member server to do MSCHAPv2 authentication against a NT4 or AD domain.

Unfortunately I don't know of any patches at present (MSCHAPv1 is
possible with current infrastructure) - and I havn't had a chance to
make the mods to Samba needed for the MSCHAPv2 part.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net



signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Mandrake 9.0: rpcclient problem exporting printers tosamba for windows

2003-01-31 Thread Buchan Milne
> Date: Thu, 30 Jan 2003 17:00:21 -0600
> From: David Woodyard <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: [Samba] 
>  Mandrake 9.0: rpcclient problem exporting printers to samba for windows
> Message-ID: <[EMAIL PROTECTED]>
> Content-Type: text/plain;
>   charset="us-ascii"
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> Precedence: list
> Reply-To: [EMAIL PROTECTED]
> Message: 2
> 
> I am new to CUPS, after working for 4 days to get printing from WinNT to 
> Mandrake 9.0, I give up. Here is the problem:
> the /etc/samba/smb.conf is setup with [printers] and [print$]. I copy the 
> postscript drivers from adobe. I then tried to export a printer to samba with 
> the following command
>   cupsaddsmb -v -U dwoody canon
> 
> It did all of the commands successfully except for the last one. which was:
>   rpcclient localhost -N -Udwoody%password -c 'setdriver canon canon'
> 
> It failed with NT_STATUS_UNSUCCESSFUL.
> I ran the same rpcclient standalone with debug and I got several error 
> messages. They are
>   1) connection refused on localhost:445 (it then used port 139 - should it?)
>   2) WERR_ACCESS_DENIED (this was near the end of the output)
>   3) NT_STATUS_UNSUCCESSFUL
> 
> I have not been able to fix the first two errors. BTW, the drive shares are 
> working correctly.


1)Is the user dwoody in the list of "printer admin"s
2)Does the user dwoody have write access to the print$ share
3)Does the user dwoody have write access to the directories in the
print$ share (ie /var/lib/samba/printers/*)

If in doubt, please send the entire defintions of your print$ and
printers shares, and the following output:
$ grep print /etc/samba/smb.conf|egrep -v [\;\#]

BTW, using the adobe postscript drivers is really only recommended for
postscript printers, you should upload the windows native drivers from a
windows machine if you have non-postscript printers.

But, the same issues would apply.

Buchan

-- 
|--Another happy Mandrake Club member--|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba