[Samba] Snow in Paris/Neige � Paris

[Thomas Ludwig]

Snow in Paris - See Paris streets covered in snow on 
http://perso.wanadoo.fr/einfachso/photographs.htm

Neige à Paris - voir les rues de Paris couvertes dans la neige sur 
http://perso.wanadoo.fr/einfachso/photographs.htm




Regards

Thomas Ludwig


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba + LDAP = Misery

[Pouchoulon Jean-Marc]

Beware of having machine account$ in /etc/passwd and ldap database.
( the problem seems to be in /etc/passwd )
Other difference I can see is 
I do not use 227a syntax for ldap setting but 302alpha. 
Hope this help




 Messages d´origine 
De: "John Peak" <[EMAIL PROTECTED]>
Date: Mardi, Février 11, 2003 4:32 am
Objet: [Samba] Samba + LDAP = Misery

> I have been working on this for weeks now and feel like I am at a 
> dead-end.
> I am using Samba 3.0 (Head) and OpenLDAP (2.0) and smbldap-tools 
> 0.7 and
> cannot join either a Linux machine or Windows 2000 machine to the 
> domain.If any of you have some ideas they would be much appreciated.
> 
> Highlights:
> - I have a root defined (UID and GID of 0).
> - Trying to join the domain will successfully add my machine to 
> the LDAP
> database.
> - I have my users defined and can successfully login to view 
> shares from
> either a windows or Linux machine.
> - When trying to join domain I use root as the account with 
> permission to
> join domain.  The log appears to indicate that root is succesfully
> validated.
> 
> Bottomw Line:
> - Whenver I try to join I always get NT_STATUS_ACCESS_DENIED.  
> More details
> and log messages below.
> 
> smb.conf
> ==
> [global]
>workgroup = ELUCIDATION
>netbios name = Boo
>server string = %h server (Samba %v)
>security = user
>obey pam restrictions = Yes
>guest account = guest
>#passwd program = /usr/local/sbin/smbldap-passwd.pl -o %u
>passwd program = /usr/local/sbin/smbldap-passwd.pl %u
>passwd chat = *new*password* %n\n *new*password* %n\n 
> *successfully*unix password sync = No
>encrypt passwords = Yes
>log level = 5
>log file = /var/log/samba/%m.log
>max log size = 1000
>socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>domain logons = Yes
>logon script = startup.bat
>os level = 80
>preferred master = Yes
>domain master = Yes
>local master = Yes
>dns proxy = No
>wins support = Yes
>ldap suffix = dc=ELUCIDATION
>ldap machine suffix = dc=ELUCIDATION
>ldap user suffix = dc=ELUCIDATION
>ldap admin dn = cn=Manager,dc=ELUCIDATION
>ldap ssl = No
>printing = lprng
>add user script = /usr/local/sbin/smbldap-useradd.pl -m -a %u
>add machine script = /usr/local/sbin/smbldap-useradd.pl -w %u
>panic action = /usr/share/samba/panic-action %d
>#invalid users = root
>admin users = root administrator
>hosts allow = 192.168.1.0/255.255.255.0
>logon drive = H:
>logon home = \\boo\profiles\%u
> 
> 
> Attempt to join domain from anther Linux box
> ===
> asa:~# smbpasswd -j elucidation -r boo
> cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
> cli_nt_setup_creds: auth2 challenge failed
> modify_trust_password: unable to setup the PDC credentials to 
> machine BOO.
> Error was : NT_STATUS_ACCESS_DENIED.
> 2003/02/10 21:57:01 : change_trust_account_password: Failed to change
> password for domain ELUCIDATION.
> Unable to join domain ELUCIDATION.
> 
> Log results try to join from another Linux box
> ===
> [2003/02/10 22:02:10, 2] passdb/pdb_ldap.c:init_sam_from_ldap(953)
>  Entry found for user: asa$
> [2003/02/10 22:02:10, 2] passdb/pdb_ldap.c:init_sam_from_ldap(990)
>  init_sam_from_ldap: User [asa$] does not exist via system getpwnam!
> [2003/02/10 22:02:10, 1] passdb/pdb_ldap.c:ldapsam_getsampwnam(1581)
>  ldapsam_getsampwnam: init_sam_from_ldap failed for user 'ASA$'!
> [2003/02/10 22:02:10, 5] lib/username.c:Get_Pwnam(288)
>  Finding user ASA$
> [2003/02/10 22:02:10, 5] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is asa$
> [2003/02/10 22:02:10, 5] lib/username.c:Get_Pwnam_internals(230)
>  Trying _Get_Pwnam(), username as given is ASA$
> [2003/02/10 22:02:10, 5] lib/username.c:Get_Pwnam_internals(247)
>  Checking combinations of 0 uppercase letters in asa$
> [2003/02/10 22:02:10, 5] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals didn't find user [ASA$]!
> [2003/02/10 22:02:10, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
> [2003/02/10 22:02:10, 0] rpc_server/srv_netlog_nt.c:get_md4pw(201)
>  get_md4pw: Workstation ASA$: no account in domain
> [2003/02/10 22:02:10, 5] rpc_parse/parse_prs.c:prs_debug(81)
>  00 net_io_r_auth_2
> [2003/02/10 22:02:10, 5] rpc_parse/parse_prs.c:prs_uint8s(679)
>   data: cc f3 ff bf 84 83 2c 08
> [2003/02/10 22:02:10, 5] rpc_parse/parse_prs.c:prs_uint32(592)
>  0008 neg_flags: 01ff
> [2003/02/10 22:02:10, 5] rpc_parse/parse_prs.c:prs_ntstatus(622)
>  000c status: NT_STATUS_ACCESS_DENIED
> 
> Log Results Attempting to Join Domain from Windows 2000
> 
> [2003/02/10 22:06:33,

Re: [Samba] samba.2.2.7a clearcase solaris 8 "Too many open files"

[Joseph Loo]

IHave you check the ulimit account settings for the account samba is 
running under? If you type ulimit, it shows the ulimit settings.  This 
is just a guess.


Schreiber Martin wrote:

Hello,

We ran a big mixed win2k unix environment. We use latest samba-version
(2.2.7a) and clearcase v2002 (latest version). Our vob and view servers are
sol 8 boxes , clients ran win2k.

Since a week or 2 i can see the following error or warning messages in the
logs:

##
Unable to open new log file /usr/local/samba/log.leipzig2: Too many open
files
##

I tuned the filedescriptor settings in /etc/system to

set rlim_fd_max=8192
set rlim_fd_cur=4096

and the samba "max open" settings to 	max open files = 16384	, but that
settings seam to be useless , no affect.

In the clearcase logs no errors or warnings are indicated , now my question
, may i forget it , or is that a serious behaviour.


kind regards			martin schreiber

 Siemens Business Services
	CCN-ITS Betrieb Wien GUD
 	Gudrunstrasse 11
	A-1101 Wien

	Martin Schreiber			
 Phone	+43 5 1707 47565
	Server-Administration	
 Fax	+43 5 1707 57560
	mailto:[EMAIL PROTECTED]
	http://www.sbs.at


 


--
Joseph Loo
[EMAIL PROTECTED]


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba up, and remote PCs can see it

[ala_frosty]

Okay, I managed to delete all of the firewall protection built into Redhat,
and now Samba is working. Hurray.

Firewall [big raspberry] who needs that .. I'm on a private network anyway.

If anyone knows how to add some of the iptables or firewall security, or
whatever it is in Redhat 8.0 that stops the bad "things" getting in, I'm all
(happy) ears.

Stephen

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] re: Samba up, but not listening

[John H Terpstra]

On Tue, 11 Feb 2003, ala_frosty wrote:

> Thanks Joel,
>
> I think you are correct, in order to successfully run Samba on Redhat 8.0,
> one needs to know what's going on with iptables, and probably a bunch of
> "other stuff" that I don't know yet. Here's hoping that someone else on this
> list has had some experience with this sort of thing, and knows how to get
> the security to let the packets through.

Log on as 'root'. Run: 'iptables -L -vn'
This will tell you if you have any iptables rules in place.

To find which start-up script starts a firewall on your system:
cd /etc/rc.d/init.d
grep iptables *

If the script is called 'firewall' you can turn it off by:
/etc/rc.d/init.d/firewall stop

Also, be aware that your tcp_wrappers may be part of the problem too. So
check the contents of:
/etc/hosts.allow
/etc/hosts.deny


> I guess I shall have to offer a documentation suggestion when I get this
> running finally. Someone somewhere needs to note that Samba will not work if
> there is firewall software in place preventing packets getting to smbd or
> nmbd. I haven't read _anything_ _anywhere_ that even hinted that something
> else on the system might be able to prevent the packet transmission to
> samba, but that's definitely what is happening. Maybe even add commentary to
> "the tests" that indicate if these are the characteristics you are
> experiencing, while Samba is running, then your networked machines can't see
> the shares because of a firewall.

How much documentation on samba could there be before people will just
stop reading ti altogether? It is difficult enough to get folks to read
what is there now. :)

> Oh well, this is probably going to take me another week. I've tried using
> the Redhat Security Level setting software, but even when I set it to "no
> firewall protection" Samba still doesn't work.

The above might help.

- John T.

>
> Cheers,
>
> Stephen
>
>
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of
> Joel Hammer
> Sent: Tuesday, February 11, 2003 9:08 PM
> To: ala_frosty; [EMAIL PROTECTED]
> Subject: Re: [Samba] re: Samba up, but not listening
>
>
> I think you will have to learn about iptables. Redhat may keep many of these
> ports closed by default for security.
> Linux is not noted for instant gratification. Be prepared to learn a lot.
> Joel
>
>

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Access Denied when connect to samba box

[Denis I. Morozov]

Hi!

I have MS domain, based on MS Windows 2000 Server. I successfully joined 
my samba box (Linux 2.5.53, Samba 2.2.4) to domain via smbpasswd -j 
DOMAIN -r DC -Uuser%pwd.

So when I try to open Samba box via network neighbornhood I got pop-up 
window with inputs of username and password, I tape valid values and got 
this popup again. In samba log I see this:

[2003/02/12 09:27:58, 0] 
smbd/password.c:connect_to_domain_password_server(1328)
  connect_to_domain_password_server: machine DC rejected the tconX on 
the IPC$ share. Error was : NT_STATUS_ACCESS_DENIED.

And a lot of my smb.conf:
workgroup = DOMAIN
netbios name = LINUXBOX
server string = Samba server
os level = 17
domain master = no
local master = no
security = domain
password server = DC
wins server = 192.168.1.2
name resolve order = wins hosts bcast
encrypt passwords = yes

Where is error?

Thanks for help.
Best regards, Den

PS: Also I cant connect to Win'9x boxes from Win'2000,XP.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] re: Samba up, but not listening

[ala_frosty]

Thanks Joel,

I think you are correct, in order to successfully run Samba on Redhat 8.0,
one needs to know what's going on with iptables, and probably a bunch of
"other stuff" that I don't know yet. Here's hoping that someone else on this
list has had some experience with this sort of thing, and knows how to get
the security to let the packets through.

I guess I shall have to offer a documentation suggestion when I get this
running finally. Someone somewhere needs to note that Samba will not work if
there is firewall software in place preventing packets getting to smbd or
nmbd. I haven't read _anything_ _anywhere_ that even hinted that something
else on the system might be able to prevent the packet transmission to
samba, but that's definitely what is happening. Maybe even add commentary to
"the tests" that indicate if these are the characteristics you are
experiencing, while Samba is running, then your networked machines can't see
the shares because of a firewall.

Oh well, this is probably going to take me another week. I've tried using
the Redhat Security Level setting software, but even when I set it to "no
firewall protection" Samba still doesn't work.

Cheers,

Stephen



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of
Joel Hammer
Sent: Tuesday, February 11, 2003 9:08 PM
To: ala_frosty; [EMAIL PROTECTED]
Subject: Re: [Samba] re: Samba up, but not listening


I think you will have to learn about iptables. Redhat may keep many of these
ports closed by default for security.
Linux is not noted for instant gratification. Be prepared to learn a lot.
Joel

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] VFS RecycleBin.

[Jason C. Leach]

hi,

I see in the VFS RecycleBin from Sama 2.2.7a, they changed
the config so the recycle bin dir is relative to the share.
I would like to use a global recycle bin, can the config
be modified to accomplish this?

Thanks,
j.

-- 
..
. Jason C. Leach
.. 

Current PGP/GPG Key ID: 43AD2024 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] re: Samba up, but not listening

[Joel Hammer]

I think you will have to learn about iptables. Redhat may keep many of these
ports closed by default for security. 
Linux is not noted for instant gratification. Be prepared to learn a lot.
Joel

On Tue, Feb 11, 2003 at 08:10:30PM -0500, ala_frosty wrote:
> Joel
> 
> The Redhat 7.3 firewall has got Samba 2.2.4 running successfully. I was
> trying to copy the configuration of the firewall PC to get Samba 2.2.7
> running on a new Redhat 8.0 box running that has nothing to do with the
> firewall (except the obvious network connection). The non-working system
> Samba 2.2.7 on the Redhat 8.0 box has an issue with not replying to
> broadcast messages. It has only one NIC in it, and it is not forwarding any
> packets.
> 
> I read somewhere that Redhat 8.0 is no longer using IPchains, and now uses
> IPtables. Not that I know anything about either of those .. I am trying to
> get Samba running. I guess I just figured Redhat is mature enough to run all
> this sort of thing out-of-the-box with just some minimal tweaking so to
> speak.
> 
> Thanks for looking,
> 
> Stephen
> 
> 
> 
> -Original Message-
> From: Joel Hammer [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, February 11, 2003 7:15 PM
> To: stephen dee; [EMAIL PROTECTED]
> Subject: Re: [Samba] re: Samba up, but not listening
> 
> 
> I am confused by this paragraph:
> 
> > I have looked at the Redhat firewall. I have even
> > tried copying its smb.conf file to no avail.
> 
> smb.conf has nothing to do with the Redhat firewall. I use ipchains
> but Redhat likely used a more advanced firewall, that I can't really help
> you
> with much, if that is your problem.
> 
> 
> Joel
> 
> 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] HP Deskjet drivers, Samba and Cups

[John H Terpstra]

On Tue, 11 Feb 2003, Nick Gale wrote:

> Thanks for this, unfortunately I've tried this and it makes no difference.
>
> Below is from Cups error log, message is the same whether printer is RAW or
> set up as a Deskjet. Please note that the same problem occurs when I
> configure the printers via LPRng or Webmin. Again it doesn't matter whether
> its RAW or not.
>
> Any other clues?

Yep! Read the CUPS Printing HOWTO! I have attached it for your reference.

>From it you will find the need to change two files:

/etc/cups/mime.types and /etc/cups/mime.convs. In both you need to
uncomment the lines that have:

application/octet-stream

in them.

In the case of my system:

In /etc/mime.types:


#
# Raw print file support...
#
# Uncomment the following type and the application/octet-stream
# filter line in mime.convs to allow raw file printing without the
# -oraw option.
#

application/octet-stream



And in /etc/cups/mime.conv:


#
# Raw filter...
#
# Uncomment the following filter and the application/octet-stream type
# in mime.types to allow printing of arbitrary files without the -oraw
# option.
#

application/octet-streamapplication/vnd.cups-raw0   -


That should do it for you.

- John T.



>
> Thanks
>
> Nick Gale
>
> I [11/Feb/2003:08:50:02 +] Started "/usr/lib/cups/cgi-bin/printers.cgi"
> (pid=1778)
> I [11/Feb/2003:08:50:07 +] Started "/usr/lib/cups/cgi-bin/printers.cgi"
> (pid=1784)
> E [11/Feb/2003:08:50:13 +] print_job: Unsupported format
> 'application/octet-stream'!
> I [11/Feb/2003:08:50:13 +] Hint: Do you have the raw file printing rules
> enabled?
>
>
> - Original Message -
> From: "John H Terpstra" <[EMAIL PROTECTED]>
> To: "Nick Gale" <[EMAIL PROTECTED]>
> Cc: <[EMAIL PROTECTED]>
> Sent: Tuesday, February 11, 2003 12:00 AM
> Subject: Re: [Samba] HP Deskjet drivers, Samba and Cups
>
>
> > On Mon, 10 Feb 2003, Nick Gale wrote:
> >
> > > I have Samba 2.2.7 running on Redhat 8 (fully updated). I have two
> printers
> > > set up - a laser and a Deskjet 920C both connected to the Redhat server
> via
> > > USB cables. Printing is managed using CUPS although I get the same
> problem
> > > with LPR and Webmin configured printers. The laser works fine, the
> deskjet
> > > doesn't. The deskjet works with a generic windows HP Deskjet or HP
> Deskjet
> > > plus driver in black and white but if I use the actual 920C driver (Or
> any
> > > other DJ ***C driver for that matter) the print jobs appear to spool but
> > > never arrive at the printer. You see a file being generated in the Samba
> and
> > > Cups spool directory but in the Cups spool directory thay appear briefly
> and
> > > then vanish, for jobs that do make it to the printer the file is present
> for
> > > longer as the printer loads the file.
> > >
> > > I can only assume this is a problem with Samba or Cups with HP desklet
> > > drivers? Has anyone else seen this? Any Idea?
> >
> > Configure a RAW CUPS printer for the HP9x0C if you install the HP9x0C
> > driver on Windows.
> >
> > If you want to install the printer in CUPS with the CUPS driver for the
> > HP9xC, then install you Windows printers as Postscript printers and let
> > CUPS convert from postscript to HP DJ format.
> >
> > Both the above work for me. I have set up several sites with HP940C
> > printers and my own network has HP PhotoSmart P1000. All work find from
> > both Linux and Windows. For Windows I prefer to print to a RAW CUPS
> > printer and use the HP940C driver on each MS Windwos machine. Your mileage
> > may bary!
> >
> > Best advice is to read the CUPS Printing HOWTO that will be in
> > Samba-3.0.0.
> >
> > - John T.
> > --
> > John H Terpstra
> > Email: [EMAIL PROTECTED]
>

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
There are Six (6) Extracts here from mail in the Samba Mailing List.
The key contribution here is from Kurt Pfeifle.

I added them to this repository in the hope that someone would find the information 
helpful.

John T. <[EMAIL PROTECTED]>

==
<<< EXTANT 1 >>>
==
Subject: Print Filtering Mechanism Explained


Date: Sun, 22 Sep 2002 15:38:02 +0200
From: "Kurt Pfeifle" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Organization: Danka Deutschland GmbH
To: [EMAIL PROTECTED]
Subject: CUPS filtering mechanism explained, was: [cups raw mode, was Re: [Samba] 
unlink data file in cups_job_submit]

Paul Janzen wrote on Samba digest:

 > Message: 7
 > To: Gerald Carter <[EMAIL PROTECTED]>
 > Cc: [EMAIL PROTECTED]
 > From: Paul Janzen <[EMAIL PROTECTED]>
 > Subject: cups raw mode, was Re: [Samba] unlink data file in cups_job_submit
 > Date: 21 Sep 2002 12

[Samba] INTERNAL ERROR on smbd_audit

[Piercarlo Marengo]

I re-post the message that I posted 3 days ago,but with the syslog in
plain-text.

thank to everybody for the interest
bye
> > Hello
> > my name is Piercarlo and I've discovered a bug in smbd_audit when I
> > trace a Samba 2.2.7 or 2.2.7a on red hat 7.3 -the error exist on the
> > redhat 2.4.18-17kernel ,on the original rh73 2.4.18-3 kernel and on the
> > standard linus kernel (I tried on 2.4.20)-->these kernels are all the
> > kernels that I tried.
> > This error appear when samba is configured as pdc with the roaming of
> > the users profiles and the user is logging-out and the only method to stop 
them,is to stop the samba service.
> > The hardware where I discovered this problem is an HP tc4100 with a
> > netraid 1m raid card.
> >
> > The syslog and the smb.conf are attached.
> >
> > thank you very much for the help
> >

# Samba config file created using SWAT
# from 192.168.53.26 (192.168.53.26)
# Date: 2003/02/05 11:53:55

# Global parameters
[global]
workgroup = ELECTRONICS
netbios name = SRV-ELN
server string = Srv-eln
encrypt passwords = Yes
syslog only = Yes
log file = /var/log/samba/%m.log
max log size = 5
add user script = /usr/sbin/useradd -d /dev/null -g 100 -s
/bin/false -M %u
delete user script = /usr/sbin/userdel %u
logon script = logon.cmd
logon path = \\srv-eln\profiles\%u
logon drive = H:
logon home = \\srv-eln\%u
domain logons = Yes
os level = 64
preferred master = Yes
domain master = Yes
dns proxy = No
nt acl support = No

[AGGKD03PC]
path = /usr/local/samba/lib/AGGKD03PC
write list = ntadmin
vfs object = /usr/lib/samba/vfs/audit.so

[netlogon]
path = /usr/local/samba/lib/netlogon
write list = ntadmin
vfs object = /usr/lib/samba/vfs/audit.so

[profiles]
path = /home
read only = No
create mask = 0700
directory mask = 0700
browseable = No
vfs object = /usr/lib/samba/vfs/audit.so

[homes]
comment = Home Directories
read only = No
browseable = No
#vfs object = /usr/lib/samba/vfs/audit.so

[area1]
comment = Area di lavoro n 1
path = /mnt/area1
read only = No
vfs object = /usr/lib/samba/vfs/audit.so

[test]
path = /tmp
printable = Yes


Feb  5 16:53:38 srv-eln smbd_audit[2816]: VFS_INIT: vfs_ops loaded
Feb  5 16:53:38 srv-eln smbd_audit[2816]: connect to service profiles by
user root
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root/SendTo
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root/Risorse di stampa
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root/Risorse di rete
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root/Risorse di
rete/area1 su srv-eln
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root/Recent
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root/Preferiti
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root/Preferiti/Media
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir
root/Preferiti/Collegamenti
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root/Modelli
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root/Menu Avvio
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root/Menu
Avvio/Programmi
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root/Menu
Avvio/Programmi/Esecuzione automatica
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root/Menu
Avvio/Programmi/Accessori
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root/Menu
Avvio/Programmi/Accessori/Utilit\205 di sistema
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root/Menu
Avvio/Programmi/Accessori/Svago
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root/Menu
Avvio/Programmi/Accessori/Accesso facilitato
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir root/Documenti
Feb  5 16:53:38 srv-eln smbd_audit[2816]: opendir
root/Documenti/Immagini
Feb  5 16:53:39 srv-eln smbd_audit[2816]: opendir root/Desktop
Feb  5 16:53:39 srv-eln smbd_audit[2816]: opendir root/Desktop/Nuova
cartella
Feb  5 16:53:39 srv-eln smbd_audit[2816]: opendir root/Dati applicazioni
Feb  5 16:53:39 srv-eln smbd_audit[2816]: opendir root/Dati
applicazioni/Microsoft
Feb  5 16:53:39 srv-eln smbd_audit[2816]: opendir root/Dati
applicazioni/Microsoft/SystemCertificates
Feb  5 16:53:39 srv-eln smbd_audit[2816]: opendir root/Dati
applicazioni/Microsoft/SystemCertificates/My
Feb  5 16:53:39 srv-eln smbd_audit[2816]: opendir root/Dati
applicazioni/Microsoft/SystemCertificates/My/CTLs
Feb  5 16:53:39 srv-eln smbd_audit[2816]: opendir root/Dati
applicazioni/Microsoft/SystemCertificates/My/CRLs
Feb  5 16:53:39 srv-eln smbd_audit[2816]: opendir root/Dati
applicazioni/Microsoft/SystemCertificates/My/Certificates
Feb  5 16:53:39 srv-eln smbd_audit[2816]: opendir ro

Re: [Samba] fine grain perms

[bkrusic]

> "create mask" and "directory mask" i use the sticky
> bits
Me too.

> With Windows or especially Novell
Actually, it like Microsoft copied Novells auth tree 
back in the day.

Bri-

__
Do you Yahoo!?
Yahoo! Shopping - Send Flowers for Valentine's Day
http://shopping.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] fine grain perms

[Michael Paarmann]

Hi!



What I mean is;

dir /a/b/c/d

condition;
1) dir abc cannot be deleted
2) dir d can be deleted
3) files in dir ab cannot be deleted
but can be created
4) files in dir cd can be deleted

As a work around I've created an empty tree structure
(a sort of template) and have just renamed the dirs
while maintaning the custom perms.

Would be nice if it were dynamic.


I have nearly the same problem. But, sorry, i don't have real solution for 
this. I try to set the permissions with the unix rights. In addition to 
"create mask" and "directory mask" i use the sticky bits to realize my 
permission structure. It's sad to say, but i think, that this is a real big 
disadvantage of Samba. If you try to set a complex permission structure, 
it's a very difficult work. With Windows or especially Novell it's much 
more easier, i think.

Michael   

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] fine grain perms

[Michael Paarmann]

Hi!



What I mean is;

dir /a/b/c/d

condition;
1) dir abc cannot be deleted
2) dir d can be deleted
3) files in dir ab cannot be deleted
but can be created
4) files in dir cd can be deleted

As a work around I've created an empty tree structure
(a sort of template) and have just renamed the dirs
while maintaning the custom perms.

Would be nice if it were dynamic.


I have nearly the same problem. But, sorry, i don't have real solution for 
this. I try to set the permissions with the unix rights. In addition to 
"create mask" and "directory mask" i use the sticky bits to realize my 
permission structure. It's sad to say, but i think, that this to a real big 
disadvantage of Samba. If you try to set a complex permission structure, 
it's very difficult work. With Windows or especially Novell it's much more 
easier, i think.

Michael   

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] iSeries Positive Pay 4.0

[inFORM Decisions]

*

MEDIA RELEASE

FOR IMMEDIATE RELEASE  
  
inFORM Decisions enhances its iSeries Positive Pay, 
Check Fraud Prevention Software to V. 4.0

Irvine, CA, February 11, 2003:  inFORM Decisions Inc. enhances its iSeries Positive 
Pay module, an important security component to their secure eBanking solutions 
suite for iSeries-AS/400 computers.

iSeries Positive Pay, now in V.4, seamlessly integrates with any iSeries-AS/400-based 
check writing application.  iSeries Positive Pay transmits data on payments directly 
to a designated bank, which verifies payment and reduces check fraud. 

In addition, iSeries Positive Pay now transmits multiple accounts to a bank’s 
computer with "account stacking".  The product transmits check data on several 
different accounts in a single bank transmission, thus eliminating the need to 
reconnect for each different account, bank transaction fees are reduced and the 
upload process is faster and easier to manage.

iSeries Positive Pay V.4 now also supports FTP by means of a secured server. 
Although bisynchronous communications has been the standard for data transmissions 
of this type, bisync is limiting.  Recently, banking institutions have begun 
accepting transmissions via FTP over an asynchronous line, which is far more 
common in other types of data transfer scenarios.  Using FTP frees up the 
iSeries-AS/400s 
ECS line, requires less expensive data communications hardware and gives companies 
more flexibility in how they manage the link to their bank.

iSeries Positive Pay is eBanking software that enables companies to transmit 
check processing information directly from iSeries-AS/400 based applications 
to standard bank interfaces with a high level of security and reliability.   
This significantly reduces the likelihood that a company will fall prey to check 
fraud because it facilitates a one-to-one correlation between checks cut by a 
company and checks cleared at the bank.  

According to a top US accounting firm, 500 million checks are forged annually 
with losses totaling more than $10 billion. Losses to check fraud are expected 
to grow by 2.5% annually.  The law generally allows merchants and banks to seek 
restitution from the payee, so its important to do everything you can to limit 
your exposure and liability.  That’s what iSeries Positive Pay R.4 does. If a 
bank or merchant’s own failures contributed to a forged signature or alteration 
then responsibility lies with them."

iSeries Positive Pay can be licensed for any iSeries-AS/400 model/processor 
configuration, 
which includes assistance with configuration and testing.  inFORM Decisions offers 
evaluation copies of iSeries Positive Pay free of charge.  Software and documentation 
can be downloaded from www.informdecisions.com.  For an evaluation copy on CD 
call inFORM Decisions at (800) 858-5544 or forward your request via email to 
inFORM Decisions at [EMAIL PROTECTED]

###
About inFORM Decisions, Inc.
inFORM Decisions develops leading edge automated and secure electronic check, 
epayment and form systems for iSeries-AS/400 and NT Client-Server environments. 
 These solutions integrate seamlessly with existing applications and dramatically 
reduce material and labor costs for their clients worldwide.  inFORM Decisions 
develops their products with modularity in mind and delivers systems that are 
tailored to a client‘s needs. 


For Details, Contact:

inFORM Decisions, Inc.
5540 Rockfield Blvd, Suite A
Irvine, California 92618
(800) 858-5544 Toll Free
(949) 609-4580 Phone 
(949) 609 4581 Fax
www.informdecisions.com
[EMAIL PROTECTED]

This email was sent you you, [EMAIL PROTECTED] because you indicated an interest 
in iSeries software. You can remove yourself from future messages by clicking 
here: www.informdecisions.com/email/021103/remove.asp?[EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] fine grain perms

[bkrusic]

Hi,

Do any of you know of a way to get perms such as they
are in a Windows PDC in Samba?

What I mean is;

dir /a/b/c/d

condition;
1) dir abc cannot be deleted
2) dir d can be deleted
3) files in dir ab cannot be deleted
but can be created
4) files in dir cd can be deleted

As a work around I've created an empty tree structure
(a sort of template) and have just renamed the dirs
while maintaning the custom perms.

Would be nice if it were dynamic.

Bri-

__
Do you Yahoo!?
Yahoo! Shopping - Send Flowers for Valentine's Day
http://shopping.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] re: Samba up, but not listening

[Joel Hammer]

I am confused by this paragraph:

> I have looked at the Redhat firewall. I have even
> tried copying its smb.conf file to no avail. 

smb.conf has nothing to do with the Redhat firewall. I use ipchains
but Redhat likely used a more advanced firewall, that I can't really help you
with much, if that is your problem.


Joel


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Experience with Samba - are errors normal ?

[Michael Paarmann]

Hi Sambafriends !

I have done a migration from Novell to a Samba-PDC in a medium enterprise 
with nearly 50 workstations eight weeks ago. After a couple of problems the 
most things run well. But i have a few questions left and it would be nice, 
if an experienced user can help me:

When i look at the /var/log/warn listing i still see some errors, and i 
like to ask you, if this messages are "normal" ?

smbd[7809]: [2003/02/11 18:26:45, 0] 
smbd/password.c:domain_client_validate(1517)
smbd[7809]:   domain_client_validate: could not fetch trust account 
password for domain OFFICE

smbd[4902]: [2003/02/11 18:32:32, 0] lib/util_sock.c:read_data(436)
smbd[4902]:   read_data: read failure for 4. Error = Connection reset by peer

smbd[3535]: [2003/02/11 18:33:28, 0] lib/util_sock.c:read_data(436)
smbd[3535]:   read_data: read failure for 4. Error = No route to host

smbd[30829]: [2003/02/11 14:02:15, 0] 
rpc_server/srv_netlog.c:api_net_sam_logon(206)
smbd[30829]:   api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON.

smbd[30829]: [2003/02/11 14:02:15, 0] rpc_server/srv_pipe.c:api_rpcTNP(1200)
smbd[30829]:   api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed.

smbd[3777]: [2002/12/23 12:03:43, 0] lib/util_sock.c:write_socket_data(500)
smbd[3777]:   write_socket_data: write failure. Error = Broken pipe

The workstations run with Win98, Win 2000 and Win XP Pro. I have diabled 
all oplocks (because i had a lot of oplock-failures). The workstation now 
hang more often than with the Novell Server. I fear, that the read_date and 
the write_socket_data errors cause this hangs.

It would be very nice, if you could help me. I'm sure that a lot of other 
samba-users have the same problems.

Thanx.

Michael

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Adding Printer Drivers from Windows XP

[John Mc Quillan]

I am having trouble trying to add printer drivers from Windows XP.

I'm running SAMBA 2.2.7a on SUSE 7.2.

 

As best I can determine, the problem relates to permissions - Windows
doesn't seem to be able to write the files to the printer driver
directory on the server.

Yet, I can set up an ordinary file share to that same directory and
logged on as the same user, I can read and write the directory.

 

The relevant sections of the conf file are shown below - note the
'printx' share which was used to test the ability to write to the
relevant directories.

 

Any ideas?

 

[global]

encrypt passwords = Yes

logon script = logon.cmd

logon drive = F:

printer admin = root,john

hosts allow = 192.168.2.

 

 

[Printers]

path=/tmp

printable=yes

 

[printx]

path = /usr/local/samba/printers

write list = root,john

read only = Yes

 

[print$]

path = /usr/local/samba/printers

write list = root,john

read only = Yes

printable = Yes

 

John Mc Quillan

+353 (01) 4100681

http://www.openjawtech.com

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Unable to see linux files on windows using Samba

[Joel Hammer]

Walk throught DIAGNOSIS.txt in the source documents.
Joel

On Tue, Feb 11, 2003 at 10:57:51AM -0800, Premkumar Stephen wrote:
> Hi,
> 
> I installed Samba on the only linux server that
> we have on our network.
> 
> On the Linux server, I was able to mount various shared
> directories from various windows machines ( we use windows 2000 )
> So, seeing windows files on linux is not a problem.
> 
> We also wanted to go the other way( seeing linux files on windows )
> I searched on google but to no avail. I set the lmhosts file and
> still nothing works.
> 
> On the windows network list, my linux server shows up as
> "linuxserver.vnetwo" where "linuxserver" is the name of the server
> and "vnetwork" is the name of the network.
> 
> Now, the windows machine on which I would like to see my linux files
> is not the primary domain controller. Nor do I want to make my
> linux box the primary domain controller.
> 
> Please let me know what steps I need to take?
> 
> TIA,
> Prem
> 
> 
> __
> Do you Yahoo!?
> Yahoo! Shopping - Send Flowers for Valentine's Day
> http://shopping.yahoo.com
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba running, but nobody can see shares

[Joel Hammer]

Have you looked at the Redhat firewall?
Have you looked into xinetd?
Have you run nmap or other such program against the RH server?
Are you sure the nmbd and smbd daemons are running?
What does:
netstat -apn | egrep "13[789] " 
show?
Joel

On Tue, Feb 11, 2003 at 01:46:18PM -0800, stephen dee wrote:
> Samba not responding to broadcast calls from networked
> PCs.
> 
> Short: My Redhat Linux 8.0 box is not replying to udp
> broadcasts, and I can't figure out why. 
> 
> Network: 
> The offending Redhat 8.0 Linux Box (//DS) attempting
> to run Samba 2.2.7
> Firewall Redhat 7.3 (//IW) successfully running Samba
> 2.2.4
> Win98 (//MS)
> Win2k (//SL) 
> 
> Very long:
> I've read through the docs, the mans, the FAQs and
> relevant responses to samba questions I can find. I
> have read a lot of The Samba Black Book (which seems
> sadly quite outdated these days). I'm stumped! I have
> a hunch the problem is some sort of security access
> issue with RedHat 8.0, but I can't find any
> documentation that refers to such a thing, let alone
> how to resolve it. I have spent a good deal of time
> trying to hunt the problem down on my own, or through
> the trouble-shooting guides, but I seem to have a 
> problem that none of them address. Hopefully one of
> the guru's here will know what to make of this.  I'm
> fairly sure it's just a configuration issue, but I
> just can't seem to figure it out from the doc. I've
> tried lots and lots of smb.conf settings, but none of
> them seem to result in a working configuration.
> 
> Thank you, Stephen
> 
> SWAT Note: 
> When I try http://DS:901 the browser tries to find
> www.DS.com:901. 
> When I try http://192.168.10.68:901/ I get an error:
> Document contains no data. 
> When I try http://localhost:901/ I get taken into
> SWAT.
> 
> # cat /etc/hosts
> 127.0.0.1 localhost.localdomain localhost 
> 192.168.10.68 DS
> 192.168.10.1IW
> 192.168.10.65 MS
> 
> Test 1:
> =
> Testparm smb.conf shows no errors
> 
> Test 2:
> =
> Everyone pings everyone else with no trouble.
> 
> Test 3:
> =
> from //DS
> # smbclient -L DS -N
> added interface ip=192.168.10.68 bcast=192.168.10.255
> nmask=255.255.255.0
> Anonymous login successful
> Domain=[MYNET] OS=[Unix] Server=[Samba 2.2.7]
> 
> Sharename  Type  Comment
> -    ---
> homes  Disk
> public Disk
> IPC$   IPC   IPC Service (Samba
> 2.2.7)
> ADMIN$ Disk  IPC Service (Samba
> 2.2.7)
> 
> Server   Comment
> ----
> DS   Samba 2.2.7
> 
> WorkgroupMaster
> ----
> MYNET
> 
> from //IW
> # smbclient -L DS -N
> added interface ip=127.0.0.1 bcast=127.255.255.255
> nmask=255.0.0.0
> added interface ip=192.168.10.1 bcast=192.168.10.255
> nmask=255.255.255.0
> Connection to DS failed
> 
> +
> from //DS
> # echo 'hello' | telnet DS 139 
> Trying 192.168.10.68...
> Connected to DS
> Escape character is '^]'.
> Connection closed by foreign host.
> 
> >From //IW
> # echo 'hello' | telnet DS 139 
> Trying 192.168.10.68...
> Telnet: Connection to address 192.168.10.68:
> Connection refused.
> 
> +
> Here's the result of netstat -a
> Active Internet connections (servers and established)
> Proto Recv-Q Send-Q Local Address   Foreign
> Address State
> tcp0  0 *:32768 *:*   
>  LISTEN
> tcp0  0 *:swat  *:*   
>  LISTEN
> tcp0  0 *:9098  *:*   
>  LISTEN
> tcp0  0 *:netbios-ssn   *:*   
>  LISTEN
> tcp0  0 *:sunrpc*:*   
>  LISTEN
> tcp0  0 *:x11   *:*   
>  LISTEN
> tcp0  0 *:ssh   *:*   
>  LISTEN
> tcp0  0 localhost.localdom:smtp *:*   
>  LISTEN
> tcp0  0 localhost.localdo:32959 *:*   
>  LISTEN
> udp0  0 *:32768 *:*
> udp0  0 demonseed:netbios-ns*:*
> udp0  0 *:netbios-ns*:*
> udp0  0 demonseed:netbios-dgm   *:*
> udp0  0 *:netbios-dgm   *:*
> udp0  0 *:bootpc*:*
> udp0  0 *:sunrpc*:*
> 
> +
> # PS -aux [edited]
> USER   PID %CPU %MEM   VSZ  RSS TTY  STAT
> START   TIME COMMAND
> root  1773  0.0  0.6  4932 1780 ?S   
> 14:40   0:00 smbd -D

RE: [Samba] Samba getting user info from NT PDC

[Simeonidis, Steve]

winbind seems to work OK, the only problem that I had with that was
length of the groups (characters).
 
eg.
 
group
DOMAIN+Everyone
 
Trying to give a linux directory DOMAIN+Everyone rights "ls -l" displays
only
the first 8 characters "DOMAIN+E" of the group, if you have alot of groups
it makes it difficult to 
figure out which one is which.
I'm not sure if there is an easy way to fix that.
 
 
Thanks 
 


Steve Simeonidis 
Network Engineer, Spherion Education 
Spherion Group Ltd 

"Making the Workplace Work Better" 

1st Floor, 493 St. Kilda Rd, 
Melbourne VIC 3004, 
Australia 
+61 3 9243 2382 
[EMAIL PROTECTED] 

-Original Message-
From: Pierrick Brossin [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 12, 2003 9:11 AM
To: Simeonidis, Steve; [EMAIL PROTECTED]
Subject: Re: [Samba] Samba getting user info from NT PDC


Thanx for your answer.
 
It worked after I added the username to the samba server...
I read that on samba.org just after I sent the mail to the mailing list !
 
Now, someone told me I could use winbind to avoid having to add the users to
the local machine..
 
I'll see that on thursday afternoon or friday.
 
Cya

- Original Message - 
From: Simeonidis, Steve   
To: 'Pierrick Brossin'   ;
[EMAIL PROTECTED]   
Sent: Tuesday, February 11, 2003 10:53 PM
Subject: RE: [Samba] Samba getting user info from NT PDC


Sorry, you have a ttached your conf file. 

Try using password server = * 

Try login to the share using smbclient //TESTSMB/www -U , 
enable debug level and check the SAMBA log files for errors. 

Thanks 


Steve Simeonidis 
Network Engineer, Spherion Education 
Spherion Group Ltd 

"Making the Workplace Work Better" 

1st Floor, 493 St. Kilda Rd, 
Melbourne VIC 3004, 
Australia 
+61 3 9243 2382 
[EMAIL PROTECTED]   



-Original Message- 
From: Pierrick Brossin [ mailto:[EMAIL PROTECTED]
 ] 
Sent: Tuesday, February 11, 2003 9:22 PM 
To: [EMAIL PROTECTED] 
Subject: [Samba] Samba getting user info from NT PDC 


Hi! 

My boss asked me to be able to share some directories on a FreeBSD Samba
server 
with users already created (and used) on a NT 4.0 PDC server. 

So I followed http://www.sugoi.org/bits/index.php?bit_id=10
  

I just replaced the Windows 2k part by adding the NetBIOS name of the
machine to 
the NT PDC. 

When I did the smbpasswd trick it worked like charm: 

testsmb# smbpasswd -j CH-DOMAIN -r PDC 
2003/02/11 10:11:23 : change_trust_account_password: Changed password for
domain 
CH-DOMAIN. 
Joined domain CH-DOMAIN 

The trouble is when I make a share on my Samba server and I try to access it

from a Windows machine connected to the NT PDC it keeps asking the password
and 
never enters the share. 

What I need to do is to share a directory. Try to enter it from a Windows 
machine which is connected to the NT PDC. Samba asks the NT PDC if the user
is 
valid and if so it enters the share. 
But it doesn't work at all. 

Any idea ? 

Thanx ! 

Here is my smb config file: 

# Global parameters 
[global] 
workgroup = CH-DOMAIN 
netbios name = TESTSMB 
server string = TESTSMB Server 
interfaces = 10.41.0.39/24 
security = DOMAIN 
password server = PDC 
encrypt passwords = yes 
update encrypted = yes 
unix password sync = yes 
passwd program = /usr/bin/passwd %u 
passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password*
%n\n 
*passwd:*all*authentication*tokens*updated*successfully* 
remote announce = 10.41.0.255 
log file = /var/log/log.%m 
max log size = 50 
load printers = no 
os level = 0 
preferred master = False 
local master = no 
domain master = False 
wins support = no 
wins server = 10.41.0.16 
hosts allow = 10.41.0. 
dns proxy = no 

[www] 
comment = www root directory 
path = /usr/local/www/data/ 
browseable = yes 
writable = yes 

-- 
Pierrick Brossin 
IT Swiss - QUARK Media House 
6a Puits Godet, 2000 Neuchatel, Switzerland 
Mail Prof: [EMAIL PROTECTED] Mail Priv: [EMAIL PROTECTED] 
-- 
To unsubscribe from this list go to the following URL and read the 
instructions:  http://lists.samba.org/mailman/listinfo/samba
  


The information contained in this email and any attachments to it:



(a) may be confidential and if you are not the intended recipient, any
interference with, 

use, disclosure or copying of this material is unauthorised and prohibited;
and



(b) may contain personal information of the recipient and/or the sender as
defined 

under the Privacy Act 1988 (Cth). Consent is hereby given by the
recipient(s) to 

collect, hold and use such information and any personal information
containe

[Samba] duplex printing

[Norman Zhang]

Hi,

I have couple of printers shared using Samba. How do I enable duplex
printing by default and allow users to change the setting as per print job
needs?

My print command in samba is lpr-cups -P %p -o raw %s -r

Regards,
Norman

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] PDC Problems

[lists]

Hi list,

I am running Samba 2.2.7 on a 2.4 Linux, I have 3 clients, each win2kSP3.
There a a few users, but with just 2 of them I can log in. If I try to
connect(from win, smbclient runs perfectly) to the server using one of the
other, I get the message "the domain is not available", and my log.int01
(where int01 is my workstation) says "int01 - no account in domain". hmm.
I know all these problems, machine accounts, registy-hacks, but, as you
see - the server knows the workstation with some user accounts, while
others are blocked. If I enter a wrong user name I get "cannot log on to
domain". 
Any suggestions?
Thanks a lot,

jan
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba getting user info from NT PDC

[Pierrick Brossin]

RE: [Samba] Samba getting user info from NT PDCThanx for your answer.

It worked after I added the username to the samba server...
I read that on samba.org just after I sent the mail to the mailing list !

Now, someone told me I could use winbind to avoid having to add the users to the local 
machine..

I'll see that on thursday afternoon or friday.

Cya
  - Original Message - 
  From: Simeonidis, Steve 
  To: 'Pierrick Brossin' ; [EMAIL PROTECTED] 
  Sent: Tuesday, February 11, 2003 10:53 PM
  Subject: RE: [Samba] Samba getting user info from NT PDC


  Sorry, you have a ttached your conf file. 

  Try using password server = * 

  Try login to the share using smbclient //TESTSMB/www -U , 
  enable debug level and check the SAMBA log files for errors. 

  Thanks 



  Steve Simeonidis 
  Network Engineer, Spherion Education 
  Spherion Group Ltd 

  "Making the Workplace Work Better" 

  1st Floor, 493 St. Kilda Rd, 
  Melbourne VIC 3004, 
  Australia 
  +61 3 9243 2382 
  [EMAIL PROTECTED] 




  -Original Message- 
  From: Pierrick Brossin [mailto:[EMAIL PROTECTED]] 
  Sent: Tuesday, February 11, 2003 9:22 PM 
  To: [EMAIL PROTECTED] 
  Subject: [Samba] Samba getting user info from NT PDC 



  Hi! 

  My boss asked me to be able to share some directories on a FreeBSD Samba server 
  with users already created (and used) on a NT 4.0 PDC server. 

  So I followed http://www.sugoi.org/bits/index.php?bit_id=10 

  I just replaced the Windows 2k part by adding the NetBIOS name of the machine to 
  the NT PDC. 

  When I did the smbpasswd trick it worked like charm: 

  testsmb# smbpasswd -j CH-DOMAIN -r PDC 
  2003/02/11 10:11:23 : change_trust_account_password: Changed password for domain 
  CH-DOMAIN. 
  Joined domain CH-DOMAIN 

  The trouble is when I make a share on my Samba server and I try to access it 
  from a Windows machine connected to the NT PDC it keeps asking the password and 
  never enters the share. 

  What I need to do is to share a directory. Try to enter it from a Windows 
  machine which is connected to the NT PDC. Samba asks the NT PDC if the user is 
  valid and if so it enters the share. 
  But it doesn't work at all. 

  Any idea ? 

  Thanx ! 

  Here is my smb config file: 

  # Global parameters 
  [global] 
  workgroup = CH-DOMAIN 
  netbios name = TESTSMB 
  server string = TESTSMB Server 
  interfaces = 10.41.0.39/24 
  security = DOMAIN 
  password server = PDC 
  encrypt passwords = yes 
  update encrypted = yes 
  unix password sync = yes 
  passwd program = /usr/bin/passwd %u 
  passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n 
  *passwd:*all*authentication*tokens*updated*successfully* 
  remote announce = 10.41.0.255 
  log file = /var/log/log.%m 
  max log size = 50 
  load printers = no 
  os level = 0 
  preferred master = False 
  local master = no 
  domain master = False 
  wins support = no 
  wins server = 10.41.0.16 
  hosts allow = 10.41.0. 
  dns proxy = no 

  [www] 
  comment = www root directory 
  path = /usr/local/www/data/ 
  browseable = yes 
  writable = yes 

  -- 
  Pierrick Brossin 
  IT Swiss - QUARK Media House 
  6a Puits Godet, 2000 Neuchatel, Switzerland 
  Mail Prof: [EMAIL PROTECTED] Mail Priv: [EMAIL PROTECTED] 
  -- 
  To unsubscribe from this list go to the following URL and read the 
  instructions:  http://lists.samba.org/mailman/listinfo/samba 

The information contained in this email and any attachments to it:

(a) may be confidential and if you are not the intended recipient, any interference 
with, 
use, disclosure or copying of this material is unauthorised and prohibited; and

(b) may contain personal information of the recipient and/or the sender as defined 
under the Privacy Act 1988 (Cth). Consent is hereby given by the recipient(s) to 
collect, hold and use such information and any personal information contained in a 
response to this email, for any reasonable purpose in the ordinary course of 
Spherion's 
business, including forwarding this email internally or disclosing it to a third 
party. All 
personal information collected by Spherion will be handled in accordance with 
Spherion's Privacy Policy. If you have received this email in error, please notify the 
sender and delete it.

(c) you agree not to employ or arrange employment for any candidate(s) supplied in 
this email and any attachments without first entering into a contractual agreement 
with 
Spherion. You further agree not to divulge any information contained in this document 
to any person(s) or entities without the express permission of Spherion.




--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba getting user info from NT PDC

[bkrusic]

Hi,

1 caveat for this to work is that the smb user must
have an /etc/passwd entry.  It can be null login null 
pass and null home dir (all the gecos feilds can be
blank) but the name must exist.  I also had to tweak
the uid/gid feilds too.

Atleast thats what I had to do with v2.2.7.
Bri-

__
Do you Yahoo!?
Yahoo! Shopping - Send Flowers for Valentine's Day
http://shopping.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba getting user info from NT PDC

[Simeonidis, Steve]

Sorry, you have a ttached your conf file.

Try using password server = *

Try login to the share using smbclient //TESTSMB/www -U ,
enable debug level and check the SAMBA log files for errors.

Thanks


Steve Simeonidis
Network Engineer, Spherion Education
Spherion Group Ltd

"Making the Workplace Work Better"

1st Floor, 493 St. Kilda Rd,
Melbourne VIC 3004, 
Australia
+61 3 9243 2382
[EMAIL PROTECTED]



-Original Message-
From: Pierrick Brossin [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 11, 2003 9:22 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Samba getting user info from NT PDC


Hi!

My boss asked me to be able to share some directories on a FreeBSD Samba
server
with users already created (and used) on a NT 4.0 PDC server.

So I followed http://www.sugoi.org/bits/index.php?bit_id=10

I just replaced the Windows 2k part by adding the NetBIOS name of the
machine to
the NT PDC.

When I did the smbpasswd trick it worked like charm:

testsmb# smbpasswd -j CH-DOMAIN -r PDC
2003/02/11 10:11:23 : change_trust_account_password: Changed password for
domain
CH-DOMAIN.
Joined domain CH-DOMAIN

The trouble is when I make a share on my Samba server and I try to access it
from a Windows machine connected to the NT PDC it keeps asking the password
and
never enters the share.

What I need to do is to share a directory. Try to enter it from a Windows
machine which is connected to the NT PDC. Samba asks the NT PDC if the user
is
valid and if so it enters the share.
But it doesn't work at all.

Any idea ?

Thanx !

Here is my smb config file:

# Global parameters
[global]
workgroup = CH-DOMAIN
netbios name = TESTSMB
server string = TESTSMB Server
interfaces = 10.41.0.39/24
security = DOMAIN
password server = PDC
encrypt passwords = yes
update encrypted = yes
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password*
%n\n
*passwd:*all*authentication*tokens*updated*successfully*
remote announce = 10.41.0.255
log file = /var/log/log.%m
max log size = 50
load printers = no
os level = 0
preferred master = False
local master = no
domain master = False
wins support = no
wins server = 10.41.0.16
hosts allow = 10.41.0.
dns proxy = no

[www]
comment = www root directory
path = /usr/local/www/data/
browseable = yes
writable = yes

-- 
Pierrick Brossin
IT Swiss - QUARK Media House
6a Puits Godet, 2000 Neuchatel, Switzerland
Mail Prof: [EMAIL PROTECTED] Mail Priv: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

The information contained in this email and any attachments to it:

(a) may be confidential and if you are not the intended recipient, any interference 
with, 
use, disclosure or copying of this material is unauthorised and prohibited; and

(b) may contain personal information of the recipient and/or the sender as defined 
under the Privacy Act 1988 (Cth). Consent is hereby given by the recipient(s) to 
collect, hold and use such information and any personal information contained in a 
response to this email, for any reasonable purpose in the ordinary course of 
Spherion's 
business, including forwarding this email internally or disclosing it to a third 
party. All 
personal information collected by Spherion will be handled in accordance with 
Spherion's Privacy Policy. If you have received this email in error, please notify the 
sender and delete it.

(c) you agree not to employ or arrange employment for any candidate(s) supplied in 
this email and any attachments without first entering into a contractual agreement 
with 
Spherion. You further agree not to divulge any information contained in this document 
to any person(s) or entities without the express permission of Spherion.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba getting user info from NT PDC

[Simeonidis, Steve]

Make sure the same username exists on the SAMBA server with the
correct permissions to the share.

send you SAMBA configuration file.

Thanks


Steve Simeonidis
Network Engineer, Spherion Education
Spherion Group Ltd

"Making the Workplace Work Better"

1st Floor, 493 St. Kilda Rd,
Melbourne VIC 3004, 
Australia
+61 3 9243 2382
[EMAIL PROTECTED]



-Original Message-
From: Pierrick Brossin [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 11, 2003 9:22 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Samba getting user info from NT PDC


Hi!

My boss asked me to be able to share some directories on a FreeBSD Samba
server
with users already created (and used) on a NT 4.0 PDC server.

So I followed http://www.sugoi.org/bits/index.php?bit_id=10

I just replaced the Windows 2k part by adding the NetBIOS name of the
machine to
the NT PDC.

When I did the smbpasswd trick it worked like charm:

testsmb# smbpasswd -j CH-DOMAIN -r PDC
2003/02/11 10:11:23 : change_trust_account_password: Changed password for
domain
CH-DOMAIN.
Joined domain CH-DOMAIN

The trouble is when I make a share on my Samba server and I try to access it
from a Windows machine connected to the NT PDC it keeps asking the password
and
never enters the share.

What I need to do is to share a directory. Try to enter it from a Windows
machine which is connected to the NT PDC. Samba asks the NT PDC if the user
is
valid and if so it enters the share.
But it doesn't work at all.

Any idea ?

Thanx !

Here is my smb config file:

# Global parameters
[global]
workgroup = CH-DOMAIN
netbios name = TESTSMB
server string = TESTSMB Server
interfaces = 10.41.0.39/24
security = DOMAIN
password server = PDC
encrypt passwords = yes
update encrypted = yes
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password*
%n\n
*passwd:*all*authentication*tokens*updated*successfully*
remote announce = 10.41.0.255
log file = /var/log/log.%m
max log size = 50
load printers = no
os level = 0
preferred master = False
local master = no
domain master = False
wins support = no
wins server = 10.41.0.16
hosts allow = 10.41.0.
dns proxy = no

[www]
comment = www root directory
path = /usr/local/www/data/
browseable = yes
writable = yes

-- 
Pierrick Brossin
IT Swiss - QUARK Media House
6a Puits Godet, 2000 Neuchatel, Switzerland
Mail Prof: [EMAIL PROTECTED] Mail Priv: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

The information contained in this email and any attachments to it:

(a) may be confidential and if you are not the intended recipient, any interference 
with, 
use, disclosure or copying of this material is unauthorised and prohibited; and

(b) may contain personal information of the recipient and/or the sender as defined 
under the Privacy Act 1988 (Cth). Consent is hereby given by the recipient(s) to 
collect, hold and use such information and any personal information contained in a 
response to this email, for any reasonable purpose in the ordinary course of 
Spherion's 
business, including forwarding this email internally or disclosing it to a third 
party. All 
personal information collected by Spherion will be handled in accordance with 
Spherion's Privacy Policy. If you have received this email in error, please notify the 
sender and delete it.

(c) you agree not to employ or arrange employment for any candidate(s) supplied in 
this email and any attachments without first entering into a contractual agreement 
with 
Spherion. You further agree not to divulge any information contained in this document 
to any person(s) or entities without the express permission of Spherion.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] krb5 + samba config

[Dieter Kluenter]

Hi,

Peter Schüller <[EMAIL PROTECTED]> writes:

> [If you get this twice, ignore it. I had E-Mail MUA difficulties. ]
[...]
> I'm afraid I can't help you with your problem, but I was wondering if you 
> could point me in the right direction as to how to make a Win2K client 
> authenticate against a Kerberos KDC/realm?
>
> I've found some very-verbose-but-not-really-helpful documentation on 
> Microsoft's site, but I still haven't figured out how to simply tell it "yes, 
> authenticate using kerberos, and use this KDC".

I forgot to mention, that i have also configured my BIND-9 zone files
with additional service RR's, that is

__kerberos  86400   IN  TXT "MY.REALM.TLD"
$ORIGIN _udp.my.domain.
_kpasswd86400   IN  SRV  0 0 464 kdc.server.my.domain.
_kerberos   86400   IN  SRV  0 0 88 kdc.server.my.domain.
_kerberos-master 86400  IN  SRV  0 0 88 kdc.server.my.domain.
$ORIGIN _tcp.my.domain.
_kerberos-adm   86400   IN  SRV  0 0 749 kdc.server.my.domain.
_ldap   86400   IN  SRV  0 0 389 ldapserver.my.domain.
_ldaps  86400   IN  SRV  0 0 636 ldapserver.my.domain.

-Dieter

-- 
Dieter Kluenter  | Systemberatung
Tel:040.64861967 | Fax: 040.64891521
mailto: [EMAIL PROTECTED]
http://www.schevolution.com/tour

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba running, but nobody can see shares

[stephen dee]

Samba not responding to broadcast calls from networked
PCs.

Short: My Redhat Linux 8.0 box is not replying to udp
broadcasts, and I can't figure out why. 

Network: 
The offending Redhat 8.0 Linux Box (//DS) attempting
to run Samba 2.2.7
Firewall Redhat 7.3 (//IW) successfully running Samba
2.2.4
Win98 (//MS)
Win2k (//SL) 

Very long:
I've read through the docs, the mans, the FAQs and
relevant responses to samba questions I can find. I
have read a lot of The Samba Black Book (which seems
sadly quite outdated these days). I'm stumped! I have
a hunch the problem is some sort of security access
issue with RedHat 8.0, but I can't find any
documentation that refers to such a thing, let alone
how to resolve it. I have spent a good deal of time
trying to hunt the problem down on my own, or through
the trouble-shooting guides, but I seem to have a 
problem that none of them address. Hopefully one of
the guru's here will know what to make of this.  I'm
fairly sure it's just a configuration issue, but I
just can't seem to figure it out from the doc. I've
tried lots and lots of smb.conf settings, but none of
them seem to result in a working configuration.

Thank you, Stephen

SWAT Note: 
When I try http://DS:901 the browser tries to find
www.DS.com:901. 
When I try http://192.168.10.68:901/ I get an error:
Document contains no data. 
When I try http://localhost:901/ I get taken into
SWAT.

# cat /etc/hosts
127.0.0.1   localhost.localdomain localhost 
192.168.10.68   DS
192.168.10.1IW
192.168.10.65   MS

Test 1:
=
Testparm smb.conf shows no errors

Test 2:
=
Everyone pings everyone else with no trouble.

Test 3:
=
from //DS
# smbclient -L DS -N
added interface ip=192.168.10.68 bcast=192.168.10.255
nmask=255.255.255.0
Anonymous login successful
Domain=[MYNET] OS=[Unix] Server=[Samba 2.2.7]

Sharename  Type  Comment
-    ---
homes  Disk
public Disk
IPC$   IPC   IPC Service (Samba
2.2.7)
ADMIN$ Disk  IPC Service (Samba
2.2.7)

Server   Comment
----
DS   Samba 2.2.7

WorkgroupMaster
----
MYNET

from //IW
# smbclient -L DS -N
added interface ip=127.0.0.1 bcast=127.255.255.255
nmask=255.0.0.0
added interface ip=192.168.10.1 bcast=192.168.10.255
nmask=255.255.255.0
Connection to DS failed

+
from //DS
# echo 'hello' | telnet DS 139 
Trying 192.168.10.68...
Connected to DS
Escape character is '^]'.
Connection closed by foreign host.

>From //IW
# echo 'hello' | telnet DS 139 
Trying 192.168.10.68...
Telnet: Connection to address 192.168.10.68:
Connection refused.

+
Here's the result of netstat -a
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address   Foreign
Address State
tcp0  0 *:32768 *:*   
 LISTEN
tcp0  0 *:swat  *:*   
 LISTEN
tcp0  0 *:9098  *:*   
 LISTEN
tcp0  0 *:netbios-ssn   *:*   
 LISTEN
tcp0  0 *:sunrpc*:*   
 LISTEN
tcp0  0 *:x11   *:*   
 LISTEN
tcp0  0 *:ssh   *:*   
 LISTEN
tcp0  0 localhost.localdom:smtp *:*   
 LISTEN
tcp0  0 localhost.localdo:32959 *:*   
 LISTEN
udp0  0 *:32768 *:*
udp0  0 demonseed:netbios-ns*:*
udp0  0 *:netbios-ns*:*
udp0  0 demonseed:netbios-dgm   *:*
udp0  0 *:netbios-dgm   *:*
udp0  0 *:bootpc*:*
udp0  0 *:sunrpc*:*

+
# PS -aux [edited]
USER   PID %CPU %MEM   VSZ  RSS TTY  STAT
START   TIME COMMAND
root  1773  0.0  0.6  4932 1780 ?S   
14:40   0:00 smbd -D
root  1777  0.0  0.6  3780 1548 ?S   
14:40   0:00 nmbd -D

+
# tcpdump port 139
15:36:50.828305 MS.netbios-ns >
192.168.10.255.netbios-ns: NBT UDP PACKET(137):
QUERY; REQUEST; BROADCAST
15:36:51.578282 MS.netbios-ns >
192.168.10.255.netbios-ns: NBT UDP PACKET(137):
REGISTRATION; REQUEST; BROADCAST
15:36:52.328277 MS.netbios-ns >
192.168.10.255.netbios-ns: NBT UDP PACKET(137):
REGISTRATION; REQUEST; BROADCAST

[NOTE: //DS never replies]

+
# cat hosts.allow
ALL : ALL

+++

[Samba] samba config help please

[Dave Bateman]

I have a rh8.0 server that I'm trying to configure. The PDC is an NT box
providing domain logins,  and for the moment all I want Samba to do is
provide storage. I would like for all the users to be able to access
individual private shares acording to their respective accounts, and one
large share for common usage. Presently, all of the w2k/xpPro boxes can both
see the shares and map them. The individual shares are asking for passwords,
which is good, but none of the passwords I know of work, at least not in
user/password format. The public share maps for the w2k/xp boxes but won't
allow anything to be saved there. Running 'smbpasswd -j  -r  -U
' hasn't worked, it just says 'can't join '. Any insight
would be greatly appreciated..

Thanks,
Dave

smb.conf:

# Samba config file created using SWAT
# from RHserver.infoware (127.0.0.1)
# Date: 2003/02/11 16:28:21

# Global parameters
[global]
  workgroup = INFOWARE
  netbios name = RAID
  server string = Samba Server %v
  interfaces = 192.168.1.2/24
  security = DOMAIN
  encrypt passwords = Yes
  obey pam restrictions = Yes
  password server = 192.168.1.180
  pam password change = Yes
  passwd program = /usr/bin/passwd %u
  passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*al
l*authentication*tokens*updated*successfully*
  unix password sync = Yes
  log file = /var/log/samba/%m.log
  max log size = 0
  socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
  preferred master = False
  local master = No
  domain master = False
  dns proxy = No
  wins server = 192.168.1.180
  hosts allow = 192.168.1. 127.
  printing = lprng

[homes]
  comment = Home Directories
  path = /home/
  valid users = %S
  read only = No
  create mask = 0664
  directory mask = 0775
  only user = Yes
  browseable = No

[printers]
  comment = All Printers
  path = /var/spool/samba
  printable = Yes
  browseable = No

[Data]
  path = /home/Data/
  guest account = ftp
  read only = No
  guest ok = Yes

[public]
  comment = Samba Share
  path = /usr/share/public/
  read only = No
  guest ok = Yes

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Swat configuration problem

[Michael G. Noble]

I have all my users using the swat interface which is simpler for most
PC users than having to login to a UNIX/LINUX machine.  Since they 
login to swat as themselves, there is very little they can do to the
system.

Mike

On Tue, 2003-02-11 at 12:45, James Kosin wrote:
> Dear Jorge Videgain Marquez,
> 
> The easiest way to have users change their passwords is to:
> a)Login to the Linux/Unix box via TELNET.
> b)Have the user use smbpasswd to change their password.
> 
> This is the simplest method.  SWAT is usually reserved for configuring samba
> and not user management.
> 
> Thanks,
> James Kosin
> 
> - Original Message -
> From: <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, February 11, 2003 12:59 PM
> Subject: samba Digest, Vol 2, Issue 37
> |
> | Date: Tue, 11 Feb 2003 12:59:39 +0100
> | From: Jorge Videgain Marquez <[EMAIL PROTECTED]>
> | To: [EMAIL PROTECTED]
> | Subject: [Samba] Swat configuration problem
> | Message-ID: <[EMAIL PROTECTED]>
> | Content-Type: text/plain;
> |   charset="us-ascii"
> | MIME-Version: 1.0
> | Content-Transfer-Encoding: quoted-printable
> | Precedence: list
> | Message: 1
> |
> | I would like my terminals computer be allowed to change their passwords u=
> | sing=20
> | Swat web page, but i would not like they could see configuration, smb fil=
> | e,=20
> | status or any other infromation about the net.
> |
> | How can i grant access to they could use Swat? when i try to conect with =
> | a=20
> | local samba or linux user diferent than root it says Permision Denied at =
> | my=20
> | browser.
> |
> | How can i filter information sent to them so they only could change their=
> | =20
> | passwords?
> |
> | Does Swat work fine to do this? any other idea to allow them to chage the=
> | ir =20
> | passwords?
> |
> | Regards
> |
> | guanche
> |
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
Michael G. NobleRF Magic, Inc.
Senior System Administrator 10182 Telesis Ct., 4th Floor
San Diego, CA.   92121
email: [EMAIL PROTECTED]   voice: (858) 546-2401 x207
fax:   (858) 546-2402
--
There is Sanity in my Madness!

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba / OpenLDAP and groups

[Gregory Chagnon]

Hi-
I'm using Samba with OpenLDAP and was wondering how to add a user to 
multiple groups, for instance 'Domain Users' and 'Marketing'.  Is this 
stored in the gid field?  Do I just add more than one gid filed for each 
entry?  Thanks!
-Greg





_
The new MSN 8: advanced junk mail protection and 2 months FREE*  
http://join.msn.com/?page=features/junkmail

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] 2.2.8pre1 smbclient log in problem

[Uno Engborg]

Hi all samba coders. Glad to see that you work to improve samba.
I'm not sure if you got this message already, I got some wacation message at 
my last attempt to send. this mail.

I have a problem I would be very greatful if you could solve.
Certain international characters does not work as usernames when trying to log 
in to an NT4 file server. My problem is that in Swedish versions of NT the
"Administrator" username is translated and reads "Administratör". It seams 
that the "ö"  (Odiaresis) is not encoded properly.

I use Red Hat 8.0. It doesn't seam to matter what LANG setting I use in my 
shell. I have tried both sv_SE that uses iso-8859-1 ecoding  and sv_SE.utf8 
that is the default Red Hat encoding in the Swedish locale.

This problem was fixed in samba 2.2.4 but seams to be present in all other 
samba versions before and after version 2.2.4.

Example:

[root@odin SPECS]# smbclient -L 192.168.0.4 -U Administratör
added interface ip=192.168.0.19 bcast=192.168.0.255 nmask=255.255.255.0
added interface ip=192.168.203.1 bcast=192.168.203.255 nmask=255.255.255.0
session request to 192.168.0.4 failed (Called name not present)
session request to 192 failed (Called name not present)
Password:
session setup failed: NT_STATUS_LOGON_FAILURE



The user Administrator is present on the NT machine with ip 192.168.0.4
and the password I use contains only characters that is available in the 
enlish alphabet. So I guess it must be the username that is not encoded 
properly.


Regards
Uno Engborg

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Swat configuration problem

[James Kosin]

Dear Jorge Videgain Marquez,

The easiest way to have users change their passwords is to:
a)Login to the Linux/Unix box via TELNET.
b)Have the user use smbpasswd to change their password.

This is the simplest method.  SWAT is usually reserved for configuring samba
and not user management.

Thanks,
James Kosin

- Original Message -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, February 11, 2003 12:59 PM
Subject: samba Digest, Vol 2, Issue 37
|
| Date: Tue, 11 Feb 2003 12:59:39 +0100
| From: Jorge Videgain Marquez <[EMAIL PROTECTED]>
| To: [EMAIL PROTECTED]
| Subject: [Samba] Swat configuration problem
| Message-ID: <[EMAIL PROTECTED]>
| Content-Type: text/plain;
|   charset="us-ascii"
| MIME-Version: 1.0
| Content-Transfer-Encoding: quoted-printable
| Precedence: list
| Message: 1
|
| I would like my terminals computer be allowed to change their passwords u=
| sing=20
| Swat web page, but i would not like they could see configuration, smb fil=
| e,=20
| status or any other infromation about the net.
|
| How can i grant access to they could use Swat? when i try to conect with =
| a=20
| local samba or linux user diferent than root it says Permision Denied at =
| my=20
| browser.
|
| How can i filter information sent to them so they only could change their=
| =20
| passwords?
|
| Does Swat work fine to do this? any other idea to allow them to chage the=
| ir =20
| passwords?
|
| Regards
|
| guanche
|



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Duplicate name error when joining XP to Samba domain(Solved)

[Stephen Lee]

On Mon, 10 Feb 2003 10:34:38 -0800, Stephen Lee wrote:

> Hi,
> 
> I'm having problems trying to join my XPpro boxes to a Samba (2.2.7a)
> domain. I was able to get 1 XP box to join (the very first one) but the
> rest complain about a duplicate name on the network just after I enter
> the root/pw when joining the domain. None of the smb user names are in
> common with the machine names.
> 
> The NT4 workstations have no problem joining the samba domain. All
> workstations were previously on another PDC (an NT4 server on the same
> network). DHCP server is on a Linux firewall and all machines get the
> same IP lease based on MAC address.
> 
> Here's what I've tried:
> 
> - Checked /etc/passwd and /etc/samba/smb.conf to ensure machine name
> entry correct.
> - Ran "net use * /delete" to make sure no connections present. - Moved
> from Domain1 to Workgroup and tried to move to Domain2. - Changed the
> SID on the second XP box (just in case workstations were built with
> Ghost) - SignorSeal registry hack applied (forgot actual name). -
> Disabled Domain member: Digitally encrypt or sign secure channel data
> and Domain member: Digitally sign secure channel data (when possible) -
> Turned off NT4 PDC (workgroup = GLASS) - Tried workgroup = GW (just in
> case GLASS and GLASSWORLD perceived to be the same domain)
> 
> Portion of my smb.conf:
> 
> [global]
> 
>workgroup = GLASSWORLD
>netbios name = TS1
>server string = Samba Server
>printcap name = /etc/printcap
>load printers = yes
>printing = cups
>log file = /var/log/samba/%m.log
>max log size = 5000
>security = user
>encrypt passwords = yes
>smb passwd file = /etc/samba/smbpasswd unix password sync = Yes
>passwd program = /usr/bin/passwd %u
>passwd chat = *New*password* %n\n *Retype*new*password* %n\n \
> *passwd:*all*authentication*tokens*updated*successfully*
>pam password change = yes
>   obey pam restrictions = yes
>socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy
>= no
>username map = /etc/samba/smbusers
>admin users = root, administrator
>domain logons = yes
>domain master = no
>logon drive = X:
>logon home = \\ts1\%U
>logon script = logon.bat
>logon path = \\ts1\profile\%U
>os level = 99
>preferred master = yes
>wins support = yes
>log level = 3
>time server = yes
> 
> 
> Any suggestions appreciated. Just shout if you need some diagnostics.
> 
> Thanks,
> Stephen
 
FYI, it turns out that it was a DNS problem. Once I added the workstation
names and corresponding IPs to the Samba PDC /etc/hosts file, the XP boxes
happily joined the new domain.

BTW, contrary to above, you do need "domain master = yes" and the bit
about only the first XP box being able to join the domain was probably a
red herring. I don't know why though.

Stephen

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] krb5 + samba config

[Dieter Kluenter]

Hi,

Peter Schüller <[EMAIL PROTECTED]> writes:

> [If you get this twice, ignore it. I had E-Mail MUA difficulties. ]
>
> Hello,
>
>> my W2K clients and users are authenticated by a native MIT Kerberos-V5
>> KDC, that is they get tickets and TGT, while user data are stored in
>
> I'm afraid I can't help you with your problem, but I was wondering if you 
> could point me in the right direction as to how to make a Win2K client 
> authenticate against a Kerberos KDC/realm?
>
> I've found some very-verbose-but-not-really-helpful documentation on 
> Microsoft's site, but I still haven't figured out how to simply tell it "yes, 
> authenticate using kerberos, and use this KDC".

It is quite simple, actually :-)

Prior to prepare your w2k workstations, you should have created
principals for your users and hosts on your KDC, see MIT Kerberos
Install Guide on how to do this.
On your W2K-System-CD, change to directory \support\tools\ and run
setup.exe, this will install beside other tools the utility "Ksetup".

Run fro the W2K command line 
C:> Ksetup /setdomain YOUR.REALM.TLD
C:> Ksetup /addkdc YOUR.REALM.TLD your.kdc.server.tld
C:> Ksetup /mapuser [EMAIL PROTECTED]  C:>Ksetup /mapuser **

If you have created a password for your host principal run additonally
C:> Ksetup /setmachpassword 

Finally run
C:> Ksetup without any further arguements to see if all is properly
 setup.

Restart your workstation and you will have the choice either to login
on your local machine or to your KDC.

-Dieter

-- 
Dieter Kluenter  | Systemberatung
Tel:040.64861967 | Fax: 040.64891521
mailto: [EMAIL PROTECTED]
http://www.schevolution.com/tour

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Joining PDC w/LDAP Question

[Buchan Milne]

> Date: Tue, 11 Feb 2003 08:58:22 -0500
> From: "Samba Newsgroups" <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: [Samba] Joining PDC w/LDAP Question
> Message-ID: 
> Precedence: list
> Message: 15
> 
> Should I be required to add the machine to my passwd file even if I am using
> LDAP when joining a W2K domain domain? 

No, an LDAP account is enough, as long as your box is setup to retrieve
user information from ldap (ie via nss_ldap).

> The only way I can get a machine to
> join my Samba PDC is via the following commands.
> 
> # /usr/sbin/useradd -g 100 -d /dev/null -c "asa" -s /bin/false asa$
> # smbpasswd -a -m asa

Does 'getent passwd machinename$' return a valid entry on your DC? It
needs to at present (samba-2.2.x).

> 
> I thought that using ldapsam would lookup all machine information from LDAP
> without having to deal with passwd.  Any comments would be appreciated.
> Thanks.

Mandrake packages have this example:
# Script for domain controller with LDAP backend for adding machines (please
# configure in /etc/samba/smbldap_conf.pm first):
; add machine script = /usr/share/samba/scripts/smbldap-useradd.pl -w -d
/dev/null -g machines -c 'Machine Account' -s /bin/false %u

Where we provide the smbldap-tools (in examples/LDAP in the souce) in
/usr/share/samba/scripts

Buchan

-- 
|--Another happy Mandrake Club member--|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba & Delphi & Paradox

[Jim Morris]

On Tue, 2003-02-11 at 12:01, Fábio Ferreira wrote:

> I have a server samba/linux executing a software Delphi with access to
> database Paradox. The configurations are OK, but when more than an user is
> accessing the system, he is very slow.
> How can I solve this problem?

Delpi applications use the Borland Database Engine (BDE) to access
shared file databases such as Paradox and dBase files on a network
drive.  I develop a lot of C++ Builder applications myself, and have
been using the BDE for quite a few years now.  With dBASE files at
least, what causes slow operation when multiple users begin accessing
the files are the use of opportunistic locks (oplocks) on the share.

When one client is accessing the file, oplocks allow the client to cache
database table changes locally.  However, when a second client accesses
the file, the Samba server issues an oplock break request to the first
client that has an oplock on the file.  The second client is not granted
access to the file until the first client acknowledges the oplock break
and flushes all of its changes back to the Samba server.  This can take
quite a while if the file is large, or if the first client does not
acknowledge the oplock break request (due to network errors or buggy
client code).

There are two things you can try:

1. Disable oplocks on the entire share, by putting 'oplocks = no' in
that share definition in smb.conf:

[myshare]
oplocks = no

2. Or disable oplocks on JUST the Paradox files, by specifying using the
'veto oplock files' option and a wildcard pattern.  Here is what I use
to prevent oplocks on dBASE files:

[myshare]
veto oplock files = /*.DBF/*.dbf/*.MDX/*.mdx/

I hope that explanation helps.

Remember too that Paradox databases have a file called PDOXUSERS.NET,
which will typically be stored in the root of a drive.  This file is
used to arbitrate file access and locks between multiple Paradox client
applications.  If using a network drive, this needs to be a common
shared location for all client PC's.  According to the BDE help, if
using Paradox files on a network drive, ALL CLIENT PC's must have the
'NET DIR' parameters set to the same mapped network drive location. 
This is configured in the Paradox driver settings in the BDE
Administration tool
-- 
/---
| Jim Morris  |  Email: [EMAIL PROTECTED]
| |AIM: JFM2001
\---

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

(apologies) Re: [Samba] krb5 + samba config

[Peter Schüller]

I'm very sorry, I didn't mean to clutter the list with my last E-Mail.
-- 
/ Peter Schuller, InfiDyne Technologies HB

PGP userID: 0xE9758B7D or 'Peter Schuller <[EMAIL PROTECTED]>'
Key retrival: Send an E-Mail to [EMAIL PROTECTED]
E-Mail: [EMAIL PROTECTED] Web: http://www.scode.org




msg14119/pgp0.pgp
Description: signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] krb5 + samba config

[Peter Schüller]

[If you get this twice, ignore it. I had E-Mail MUA difficulties. ]

Hello,

> my W2K clients and users are authenticated by a native MIT Kerberos-V5
> KDC, that is they get tickets and TGT, while user data are stored in

I'm afraid I can't help you with your problem, but I was wondering if you 
could point me in the right direction as to how to make a Win2K client 
authenticate against a Kerberos KDC/realm?

I've found some very-verbose-but-not-really-helpful documentation on 
Microsoft's site, but I still haven't figured out how to simply tell it "yes, 
authenticate using kerberos, and use this KDC".

Thanks!

-- 
/ Peter Schuller, InfiDyne Technologies HB

PGP userID: 0xE9758B7D or 'Peter Schuller <[EMAIL PROTECTED]>'
Key retrival: Send an E-Mail to [EMAIL PROTECTED]
E-Mail: [EMAIL PROTECTED] Web: http://www.scode.org




msg14118/pgp0.pgp
Description: signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] CUPS on RH 7.3

[Kevin Smith]

I installed this last night and so far it look promising. One thing. I cant
seem to access via MSIE. I've allowed port 631 on the firewall. but I still
get the DNS server error. I've tried using the IP address, and the actual
name, both seem to WANT to find it as they look for about 2 minutes, but
never does. 
I've looking the cupsd.conf, but am not sure what to change. The
/var/log/meessages doesn't show that it was dropped or refused. So isothere
another port that I need to open? The docs are good, but I couldn't find
anything addressing this problem. Which of course means , it right under my
nose. 

TIA 
Kev

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Vmware and samba

[Antonio Gulli]

I'm not able to use samba and vmnetnat. Please help me because this is
making me crazy.

I use XP on an ADSL connection. PPPoE IP is assigned dinamically. Eth0
IP can be assigned dinamically or statical *tried both*

RedHat 8.0 is the guest, XP service pack 1 is the host. I also uses
sygate firewall on XP *but i set allow all for testing*

Linux routes via NAT and it works fine (even DNS resolution).
If i play with vmnetnat.cfg adding

18401 = 192.168.100.128:22
13139 = 192.168.100.128:139

I can access guest (i can log in with slogin and see the smb
port). So port forwarding works!

But this is just a test which is ok for ssh, but NOT for browse with
XP's explorer (am i wrong?)

If i try to browse directly the address NAT and Host hardware i always
see my XP shares not the RedHat ones.

All this stuff work better and trasparently in vmware 3.1!

Any suggestion?

-=-=-
Here is my numbers from XP:

ipconfig
C:\Documents and Settings\antonio.LORENIX\Menu Avvio>ipconfig /all

Nome host . . . . . . . . . . . . . . : lorenixp
Suffisso DNS primario  . . . . . . .  :
Tipo nodo . . . . . . . . .  : Sconosciuto
Routing IP abilitato . . . . . . . .  : Sì
Proxy WINS abilitato . . . . . . . .  : Sì

Scheda Ethernet WmWare NAT:

Suffisso DNS specifico per connessione:
Descrizione . . . . . . . . . . . . . : VMware Virtual
Ethernet Adapter
(Network Address Translation (NAT) for VMnet8)
Indirizzo fisico. . . . . . . . . . . : 00-50-56-C0-00-08
DHCP abilitato. . . . . . . . . . . . : Sì
Configurazione automatica abilitata   : Sì
Indirizzo IP configurazione automatica: 169.254.218.201
Subnet mask . . . . . . . . . . . . . : 255.255.0.0
Gateway predefinito . . . . . . . . . :

Scheda Ethernet VmWare Host:

Suffisso DNS specifico per connessione:
Descrizione . . . . . . . . . . . . . : VMware Virtual
Ethernet Adapter
(basic host-only support for VMnet1)
Indirizzo fisico. . . . . . . . . . . : 00-50-56-C0-00-01
DHCP abilitato. . . . . . . . . . . . : Sì
Configurazione automatica abilitata   : Sì
Indirizzo IP configurazione automatica: 169.254.25.142
Subnet mask . . . . . . . . . . . . . : 255.255.0.0
Gateway predefinito . . . . . . . . . :

Scheda Ethernet FastEth CNET:

Suffisso DNS specifico per connessione:
Descrizione . . . . . . . . . . . . . : Scheda Fast Ethernet
PCI CNet PR
O200
Indirizzo fisico. . . . . . . . . . . : 00-80-AD-7C-DB-9E
DHCP abilitato. . . . . . . . . . . . : No
Indirizzo IP. . . . . . . . . . . . . : 192.168.100.5
Subnet mask . . . . . . . . . . . . . : 255.255.255.0
Gateway predefinito . . . . . . . . . :

Scheda PPP {A6BAF807-87CC-4686-BC4F-E536BB32A9E5}:

Suffisso DNS specifico per connessione:
Descrizione . . . . . . . . . . . . . : WAN (PPP/SLIP)
Interface
Indirizzo fisico. . . . . . . . . . . : 00-53-45-00-00-00
DHCP abilitato. . . . . . . . . . . . : No
Indirizzo IP. . . . . . . . . . . . . :
Subnet mask . . . . . . . . . . . . . : 255.255.255.255
Gateway predefinito . . . . . . . . . : 0.0.0.0
Server DNS . . . . . . . . . . . . .  : 217.141.255.204
212.216.112.112
NetBIOS su TCPIP. . . . . . : Disabilitato


===> From Linux side i get this IP: 192.168.10.128
===> How can i route to this IP is from XP side NAT interface
===> is on another IP CLASS?


Here it is My vmnetnat.conf

# Windows NAT configuration file

[host]

# NAT gateway address
ip = 192.168.100.2/24
hostMAC = 00:50:56:C0:00:08

# enable configuration; disabled by default for security reasons
#
# Added by AG for fun
#configport = 33445

# VMnet device if not specified on command line
device = VMnet8

# Allow PORT/EPRT FTP commands (they need incoming TCP stream...)
activeFTP = 1

# Allows the source to have any OUI.  Turn this one if you change the
OUI
# in the MAC address of your virtual machines.
#allowAnyOUI = 1

[udp]
# Timeout in seconds, 0 = no timeout, default = 60; real value might
# be up to 100% longer
timeout = 30

[dns]
# This section applies only to Windows.
#
# Policy to use for DNS forwarding.  Accepted values include order,
# rotate, burst.
#
# order: send one DNS request at a time in order of the name servers
# rotate: send one DNS request at a time, rotate through the DNS
servers
# burst: send to three servers and wait for the first one to respond
policy = order;

# Timeout in seconds before retrying DNS request.
timeout = 2

# Retries before giving up on DNS request
retries = 3

# Automatically detect the DNS servers (not supported in Windows NT)
autodetect = 1

# List of DNS servers to use.  Up to three may be specified
#nameserver1 = 208.23.14.2
#nameserver2 = 63.93.12.3
#nameserver3 = 208.23.14.4

[netbios]
# This section applies only to Windows.

# Timeout for

[Samba] Adding printer driver with cupsaddsmb

[Nicki Messerschmidt, Linksystem Muenchen GmbH]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi list,
I have a problem adding printer drivers for automatic downloading via
samba for windows 2000 clients.
Under cups I added my printer and copied the Adobe postscript driver
files like mentioned in printer_driver2.html. And when I finally
commit:
cupsaddsmb -v -U root normal (normal is the name of the printer)

And here is the output:
sphinx:/usr/share/cups # cupsaddsmb -v -U root normal
Password for root required to access localhost via SAMBA:
Running command: smbclient //localhost/print\$ -N -U'root%'
- -c 'mkdir W32X86;put /var/spool/cups/tmp/3e4946cfeee23
W32X86/normal.PPD;put /usr/share/cups/drivers/ADOBEPS5.DLL
W32X86/ADOBEPS5.DLL;put /usr/share/cups/drivers/ADOBEPSU.DLL
W32X86/ADOBEPSU.DLL;put /usr/share/cups/drivers/ADOBEPSU.HLP
W32X86/ADOBEPSU.HLP'
added interface ip=XXX.XXX.XXX.XXX bcast=XXX.XXX.XXX.XXX
nmask=255.255.255.XXX
Domain=[LINK-M] OS=[Unix] Server=[Samba 2.2.7a-0.1 for Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
putting file /var/spool/cups/tmp/3e4946cfeee23 as \W32X86/normal.PPD
(24631.6 kb/s) (average 24632.8 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS5.DLL as
\W32X86/ADOBEPS5.DLL (42421.5 kb/s) (average 39457.0 kb/s)
putting file /usr/share/cups/drivers/ADOBEPSU.DLL as
\W32X86/ADOBEPSU.DLL (32399.4 kb/s) (average 37381.4 kb/s)
putting file /usr/share/cups/drivers/ADOBEPSU.HLP as
\W32X86/ADOBEPSU.HLP (19304.8 kb/s) (average 36377.3 kb/s)

Running command: smbclient //localhost/print\$ -N -U'root%'
- -c 'mkdir WIN40;put /var/spool/cups/tmp/3e4946cfeee23
WIN40/normal.PPD;put /usr/share/cups/drivers/ADFONTS.MFM
WIN40/ADFONTS.MFM;put /usr/share/cups/drivers/ADOBEPS4.DRV
WIN40/ADOBEPS4.DRV;put /usr/share/cups/drivers/ADOBEPS4.HLP
WIN40/ADOBEPS4.HLP;put /usr/share/cups/drivers/DEFPRTR2.PPD
WIN40/DEFPRTR2.PPD;put /usr/share/cups/drivers/ICONLIB.DLL
WIN40/ICONLIB.DLL;put /usr/share/cups/drivers/PSMON.DLL
WIN40/PSMON.DLL;'
added interface ip=XXX.XXX.XXX.XXX bcast=XXX.XXX.XXX.XXX
nmask=255.255.255.XXX
Domain=[LINK-M] OS=[Unix] Server=[Samba 2.2.7a-0.1 for Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \WIN40
putting file /var/spool/cups/tmp/3e4946cfeee23 as \WIN40/normal.PPD
(24631.6 kb/s) (average 24632.8 kb/s)
putting file /usr/share/cups/drivers/ADFONTS.MFM as \WIN40/ADFONTS.MFM
(40148.5 kb/s) (average 38209.3 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.DRV as
\WIN40/ADOBEPS4.DRV (43123.8 kb/s) (average 41376.5 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.HLP as
\WIN40/ADOBEPS4.HLP (37939.3 kb/s) (average 40972.2 kb/s)
putting file /usr/share/cups/drivers/DEFPRTR2.PPD as
\WIN40/DEFPRTR2.PPD (13175.5 kb/s) (average 40437.7 kb/s)
putting file /usr/share/cups/drivers/ICONLIB.DLL as \WIN40/ICONLIB.DLL
(38451.9 kb/s) (average 40329.4 kb/s)
putting file /usr/share/cups/drivers/PSMON.DLL as \WIN40/PSMON.DLL
(27998.6 kb/s) (average 39896.8 kb/s)

Running command: rpcclient localhost -N -U'root%' -c
'adddriver "Windows NT x86"
"normal:ADOBEPS5.DLL:normal.PPD:ADOBEPSU.DLL:ADOBEPSU.HLP:NULL:RAW:NULL"
'
cmd = adddriver "Windows NT x86"
"normal:ADOBEPS5.DLL:normal.PPD:ADOBEPSU.DLL:ADOBEPSU.HLP:NULL:RAW:NULL"
Printer Driver normal successfully installed.

Running command: rpcclient localhost -N -U'root%' -c
'addprinter normal normal "normal" ""'
cmd = addprinter normal normal "normal" ""
result was NT_STATUS_UNSUCCESSFUL

Running command: rpcclient localhost -N -U'root%' -c
'adddriver "Windows 4.0"
"normal:ADOBEPS4.DRV:normal.PPD:NULL:ADOBEPS4.HLP:PSMON.DLL:RAW:ADFONTS.
MFM,DEFPRTR2.PPD,ICONLIB.DLL"'
cmd = adddriver "Windows 4.0"
"normal:ADOBEPS4.DRV:normal.PPD:NULL:ADOBEPS4.HLP:PSMON.DLL:RAW:ADFONTS.
MFM,DEFPRTR2.PPD,ICONLIB.DLL"
Printer Driver normal successfully installed.

As you can see, the process won't finish successfully. I send my
smb.conf as attachement and can provide logfiles, if they are of any
help to you.
I don't understand, why this procedure is not successful and I hope,
that anyone of you can shed light onto this miracle...


Cheers
Nicki Messerschmidt

- --
Linksystem Muenchen GmbH  [EMAIL PROTECTED]
Schloerstrasse 10   http://www.link-m.de
80634 Muenchen  Tel. 089 / 890 518-0
We make the Net work.   Fax 089 / 890 518-77

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 6.5.3 for non-commercial use 
Comment: Get my key at: https://www.link-m.de/pgp/n.messerschmidt.asc

iQA/AwUBPkk6ses1nPm17iBDEQL1pwCgjUs8Th6uUK1tdgdTHS9cLkSbLY0Anj/9
Q1dIWhfuyo+1HOg43M2Wdh8Y
=0v1o
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Adding printer driver with cupsaddsmb

[Nicki Messerschmidt, Linksystem Muenchen GmbH]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi list,
I have a problem adding printer drivers for automatic downloading via
samba for windows 2000 clients.
Under cups I added my printer and copied the Adobe postscript driver
files like mentioned in printer_driver2.html. And when I finally
commit:
cupsaddsmb -v -U root normal (normal is the name of the printer)

And here is the output:
sphinx:/usr/share/cups # cupsaddsmb -v -U root normal
Password for root required to access localhost via SAMBA:
Running command: smbclient //localhost/print\$ -N -U'root%'
- -c 'mkdir W32X86;put /var/spool/cups/tmp/3e4946cfeee23
W32X86/normal.PPD;put /usr/share/cups/drivers/ADOBEPS5.DLL
W32X86/ADOBEPS5.DLL;put /usr/share/cups/drivers/ADOBEPSU.DLL
W32X86/ADOBEPSU.DLL;put /usr/share/cups/drivers/ADOBEPSU.HLP
W32X86/ADOBEPSU.HLP'
added interface ip=XXX.XXX.XXX.XXX bcast=XXX.XXX.XXX.XXX
nmask=255.255.255.XXX
Domain=[LINK-M] OS=[Unix] Server=[Samba 2.2.7a-0.1 for Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
putting file /var/spool/cups/tmp/3e4946cfeee23 as \W32X86/normal.PPD
(24631.6 kb/s) (average 24632.8 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS5.DLL as
\W32X86/ADOBEPS5.DLL (42421.5 kb/s) (average 39457.0 kb/s)
putting file /usr/share/cups/drivers/ADOBEPSU.DLL as
\W32X86/ADOBEPSU.DLL (32399.4 kb/s) (average 37381.4 kb/s)
putting file /usr/share/cups/drivers/ADOBEPSU.HLP as
\W32X86/ADOBEPSU.HLP (19304.8 kb/s) (average 36377.3 kb/s)

Running command: smbclient //localhost/print\$ -N -U'root%'
- -c 'mkdir WIN40;put /var/spool/cups/tmp/3e4946cfeee23
WIN40/normal.PPD;put /usr/share/cups/drivers/ADFONTS.MFM
WIN40/ADFONTS.MFM;put /usr/share/cups/drivers/ADOBEPS4.DRV
WIN40/ADOBEPS4.DRV;put /usr/share/cups/drivers/ADOBEPS4.HLP
WIN40/ADOBEPS4.HLP;put /usr/share/cups/drivers/DEFPRTR2.PPD
WIN40/DEFPRTR2.PPD;put /usr/share/cups/drivers/ICONLIB.DLL
WIN40/ICONLIB.DLL;put /usr/share/cups/drivers/PSMON.DLL
WIN40/PSMON.DLL;'
added interface ip=XXX.XXX.XXX.XXX bcast=XXX.XXX.XXX.XXX
nmask=255.255.255.XXX
Domain=[LINK-M] OS=[Unix] Server=[Samba 2.2.7a-0.1 for Debian]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \WIN40
putting file /var/spool/cups/tmp/3e4946cfeee23 as \WIN40/normal.PPD
(24631.6 kb/s) (average 24632.8 kb/s)
putting file /usr/share/cups/drivers/ADFONTS.MFM as \WIN40/ADFONTS.MFM
(40148.5 kb/s) (average 38209.3 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.DRV as
\WIN40/ADOBEPS4.DRV (43123.8 kb/s) (average 41376.5 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.HLP as
\WIN40/ADOBEPS4.HLP (37939.3 kb/s) (average 40972.2 kb/s)
putting file /usr/share/cups/drivers/DEFPRTR2.PPD as
\WIN40/DEFPRTR2.PPD (13175.5 kb/s) (average 40437.7 kb/s)
putting file /usr/share/cups/drivers/ICONLIB.DLL as \WIN40/ICONLIB.DLL
(38451.9 kb/s) (average 40329.4 kb/s)
putting file /usr/share/cups/drivers/PSMON.DLL as \WIN40/PSMON.DLL
(27998.6 kb/s) (average 39896.8 kb/s)

Running command: rpcclient localhost -N -U'root%' -c
'adddriver "Windows NT x86"
"normal:ADOBEPS5.DLL:normal.PPD:ADOBEPSU.DLL:ADOBEPSU.HLP:NULL:RAW:NULL"
'
cmd = adddriver "Windows NT x86"
"normal:ADOBEPS5.DLL:normal.PPD:ADOBEPSU.DLL:ADOBEPSU.HLP:NULL:RAW:NULL"
Printer Driver normal successfully installed.

Running command: rpcclient localhost -N -U'root%' -c
'addprinter normal normal "normal" ""'
cmd = addprinter normal normal "normal" ""
result was NT_STATUS_UNSUCCESSFUL

Running command: rpcclient localhost -N -U'root%' -c
'adddriver "Windows 4.0"
"normal:ADOBEPS4.DRV:normal.PPD:NULL:ADOBEPS4.HLP:PSMON.DLL:RAW:ADFONTS.
MFM,DEFPRTR2.PPD,ICONLIB.DLL"'
cmd = adddriver "Windows 4.0"
"normal:ADOBEPS4.DRV:normal.PPD:NULL:ADOBEPS4.HLP:PSMON.DLL:RAW:ADFONTS.
MFM,DEFPRTR2.PPD,ICONLIB.DLL"
Printer Driver normal successfully installed.

As you can see, the process won't finish successfully. I send my
smb.conf as attachement and can provide logfiles, if they are of any
help to you.
I don't understand, why this procedure is not successful and I hope,
that anyone of you can shed light onto this miracle...


Cheers
Nicki Messerschmidt

- --
Linksystem Muenchen GmbH  [EMAIL PROTECTED]
Schloerstrasse 10   http://www.link-m.de
80634 Muenchen  Tel. 089 / 890 518-0
We make the Net work.   Fax 089 / 890 518-77

-BEGIN PGP SIGNATURE-
Version: PGPfreeware 6.5.3 for non-commercial use 
Comment: Get my key at: https://www.link-m.de/pgp/n.messerschmidt.asc

iQA/AwUBPkk6ces1nPm17iBDEQKS4ACg2pVeCCmuZjTnzLN24s9acwTD+QAAnj+b
5zRvthCj9zT6h0Br/2CIhLod
=mzmk
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Unable to see linux files on windows using Samba

[Premkumar Stephen]

Hi,

I installed Samba on the only linux server that
we have on our network.

On the Linux server, I was able to mount various shared
directories from various windows machines ( we use windows 2000 )
So, seeing windows files on linux is not a problem.

We also wanted to go the other way( seeing linux files on windows )
I searched on google but to no avail. I set the lmhosts file and
still nothing works.

On the windows network list, my linux server shows up as
"linuxserver.vnetwo" where "linuxserver" is the name of the server
and "vnetwork" is the name of the network.

Now, the windows machine on which I would like to see my linux files
is not the primary domain controller. Nor do I want to make my
linux box the primary domain controller.

Please let me know what steps I need to take?

TIA,
Prem


__
Do you Yahoo!?
Yahoo! Shopping - Send Flowers for Valentine's Day
http://shopping.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] security = domain

[Michael Heironimus]

On Tue, Feb 11, 2003 at 02:57:46PM +0100, Michael Herber wrote:
> Hm, but as I did understand, in both cases, the log in at the
> samba-server is sent to the NT-machine to validate. After what I've
> read, "server" means that only the username and the password is sent and
> "domain" menas that more than these two values are sent. I am completely
> wrong?

As I recall, one major difference is that "security = server" requires
that a connection to the password server machine remain open for the
entire duration of the client's connection to Samba. "security = domain"
opens and closes connections for authentication as needed, just like a
Windows server in an NT domain would.

This makes "domain" a better choice in general, since temporary network
problems are less likely to cause problems. It also produces less of a
load on your password server: if you have several servers with many
clients each, your password server would have to support one connection
for each user on each server.

> Anyhow, "server" also needs a "password server" for authentification (at
> least this is what my sources are saying!). So what's the difference? Or
> are my sources wrong?

Yes, you need a password server if the Samba machine isn't
authenticating locally. The difference is mainly in how it accesses that
server to check the user/pass.

-- 
Michael Heironimus
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] MRTG + Samba

[Mike Brodbelt]

Ryan Beisner wrote:
> Hi all
> 
> 
> Just wondering if anyone has pointers for graphing data from Samba using
> MRTG.  I already have MRTG graphing things like signal strength (cisco
> aironet pci), total kbps in/out each interface, mem and disk i/o usage.
> 
> I'd like to graph, for example, average number connections over time; or
> maybe logins per hour  or failed logins per hour.
> 
> I know MRTG's requirements for input formatting -- it's getting the
> first two of these four numbers that gets me hung up:

You'll probably have to do some scripting.

You can get the current number of service connection by parsing the
output of "smbstatus -S", and the current number of connected clients
with "smbstatus -b". For failed logins, you'd probably have to parse the
logfile, but you could have syslog write to a pipe, and sit a script on
the end of the pipe.

I haven't really done anything with mrtg except point it at a router, so
how you get that into it is another matter. Personally, I'd probably
cron a perl script, which would periodically get data from smbstatus,
and use the perl bindings for rrdtool to stick it directly in an RRD,
and then build your graphs from that. YMMV.

HTH,

Mike.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] VPN access

[hans]

I just did something similar, and it seems to work well.  I did need a DNS
server, and the key was to NOT have it on my gateway machine.  I used
Mandrakes MNF as the gateway machine, and it's seems to work fairly slick.
It still took quite a bit of experimenting though.  The instructions in the
Mandrake MNF users manual were quite good, dunno if this helps you, but it's
my 3 cents (CDN).
- Original Message -
From: "Gregory Chagnon" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Tuesday, February 11, 2003 9:48 AM
Subject: Re: [Samba] VPN access


> Any good HOWTOs on this?  Don't I need access to a DNS server for
FreeSWAN?
> -Greg
>
>
>
>
>
>
> >From: John H Terpstra <[EMAIL PROTECTED]>
> >To: Gregory Chagnon <[EMAIL PROTECTED]>
> >CC: [EMAIL PROTECTED]
> >Subject: Re: [Samba] VPN access
> >Date: Tue, 11 Feb 2003 16:50:49 + (GMT)
> >
> >On Tue, 11 Feb 2003, Gregory Chagnon wrote:
> >
> > > Hi-
> > > I have a linux server running Samba where users on my local LAN can
log
> >in
> > > to a domain.  Is there any way, through VPN, to have remote users on
> >Win2000
> > > / WinXP log in to my domain?  Thanks!!
> >
> >Yes. I have set up several using FreeSWAN IPsec, but you really will want
> >to use WINS to make the configuration manageable.
> >
> >- John T.
> >--
> >John H Terpstra
> >Email: [EMAIL PROTECTED]
>
>
> _
> Add photos to your messages with MSN 8. Get 2 months FREE*.
> http://join.msn.com/?page=features/featuredemail
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>
> ___
> All emails incoming and outgoing from SBS Forestry Inc.
> are scanned by Kaspersky Antivirus.


___
All emails incoming and outgoing from SBS Forestry Inc.
are scanned by Kaspersky Antivirus.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] VPN access

[Gregory Chagnon]

Any good HOWTOs on this?  Don't I need access to a DNS server for FreeSWAN?
-Greg







From: John H Terpstra <[EMAIL PROTECTED]>
To: Gregory Chagnon <[EMAIL PROTECTED]>
CC: [EMAIL PROTECTED]
Subject: Re: [Samba] VPN access
Date: Tue, 11 Feb 2003 16:50:49 + (GMT)

On Tue, 11 Feb 2003, Gregory Chagnon wrote:

> Hi-
> I have a linux server running Samba where users on my local LAN can log 
in
> to a domain.  Is there any way, through VPN, to have remote users on 
Win2000
> / WinXP log in to my domain?  Thanks!!

Yes. I have set up several using FreeSWAN IPsec, but you really will want
to use WINS to make the configuration manageable.

- John T.
--
John H Terpstra
Email: [EMAIL PROTECTED]


_
Add photos to your messages with MSN 8. Get 2 months FREE*.  
http://join.msn.com/?page=features/featuredemail

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] printing with cups?

[Jason Kirschenmann]

Hello out there in samba land,
Do to the lack of a stable print spooler in windows 2000 server we have 
switched to redhat 8.0 to set up our spooler.  We are using cups in samba 
and we're trying to set printers so that everyone can access and use them.  
we can see all of the printers and even add them.  however once they are 
added when you double click on them to access on the printer it says access 
is denied, unable to connect.  the server is added to our domain.  here is 
our smb.conf.

[global]
	log file = /var/log/samba/%m.log
	smb passwd file = /etc/samba/smbpasswd
	load printers = yes
	passwd chat = *New*password* %n\n *Retype*new*password* %n\n 
*passwd:*all*authentication*tokens*updated*successfully*
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
	obey pam restrictions = yes
	wins server = Enterprise
	encrypt passwords = yes
	public = yes
	passwd program = /usr/bin/passwd %u
	dns proxy = no
	netbios name = spoolio
	server string = Samba Server
	printing = cups
	password server = Enterprise
	unix password sync = Yes
	workgroup = trinitynet
	printcap name = /etc/printcap
	security = domain
	max log size = 0
	pam password change = yes

[printers]
	comment = All Printers
	writeable = yes
	printable = yes
	path = /var/spool/samba
any help you can give our office would be greatly appreciated.
thanks,
jason

_
Protect your PC - get McAfee.com VirusScan Online  
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] printers and faxes

[bkrusic]

Hi,

Ok, I've been able to create a Samba PDC for XP and 2K
logins as well as several Samba file servers for
MacOSX, XP, 2K and Linux clients.  All this with very
good performance and authentication control not to
mention centralized home dirs, etc...

My simple question is;

How do I get rid of that damn Printers and Faxes icon
in the browse list of a Samba server?

Bri-


__
Do you Yahoo!?
Yahoo! Shopping - Send Flowers for Valentine's Day
http://shopping.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] krb5 + samba config

[Dieter Kluenter]

Hi,
my W2K clients and users are authenticated by a native MIT Kerberos-V5
KDC, that is they get tickets and TGT, while user data are stored in
an openldap directory. I use samba-3.0alpha21 which is still requiring
userpasswords beeing stored in the DIT, although i have following
directives in smb.conf
realm = MY.REALM
security = ads
smb ist still not requiring and accepting tickets from KDC. How can i
configure samba properly to request the MIT KDC. 

-Dieter

-- 
Dieter Kluenter  | Systemberatung
Tel:040.64861967 | Fax: 040.64891521
mailto: [EMAIL PROTECTED]
http://www.schevolution.com/tour


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba & Delphi & Paradox

[Fábio Ferreira]

Hello,
I have a server samba/linux executing a software Delphi with access to
database Paradox. The configurations are OK, but when more than an user is
accessing the system, he is very slow.
How can I solve this problem?

Regard´s
Fábio Ferreira
[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] VPN access

[John H Terpstra]

On Tue, 11 Feb 2003, Gregory Chagnon wrote:

> Hi-
> I have a linux server running Samba where users on my local LAN can log in
> to a domain.  Is there any way, through VPN, to have remote users on Win2000
> / WinXP log in to my domain?  Thanks!!

Yes. I have set up several using FreeSWAN IPsec, but you really will want
to use WINS to make the configuration manageable.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Problems loading printer list using Samba 2.2.7a with CUPS

[Sean Millichamp]

I am using Samba to successfully load the printer list directly from
CUPS with one fairly significant caveat.

If a printer is added to CUPS while Samba is running there is apparently
nothing I can do to have it visibly appear when doing a list of the
services in Samba (such as with "smbclient -L").  This is also a problem
if Samba starts before CUPS in the boot sequence.

I find that this is a significant problem because Windows XP will
apparently not let you add a printer (even if you specify it's path by
name) if you can't see the printer listed when doing "smbclient -L". 
Restarting Samba shows the printers in the share list and allows XP to
add them.

Is anyone else seeing this problem and is there anything I can do to fix
it?  Restarting Samba isn't a very practical solution every time a
printer is added.

My smb.conf has these printing related options set:
   printcap name = cups
   load printers = yes
   printing = cups

Thanks,
Sean


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] VPN access

[Gregory Chagnon]

Hi-
I have a linux server running Samba where users on my local LAN can log in 
to a domain.  Is there any way, through VPN, to have remote users on Win2000 
/ WinXP log in to my domain?  Thanks!!
-Greg





_
The new MSN 8: advanced junk mail protection and 2 months FREE*  
http://join.msn.com/?page=features/junkmail

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Joining PDC w/LDAP Question

[Samba Newsgroups]

Should I be required to add the machine to my passwd file even if I am using
LDAP when joining a W2K domain domain?  The only way I can get a machine to
join my Samba PDC is via the following commands.

# /usr/sbin/useradd -g 100 -d /dev/null -c "asa" -s /bin/false asa$
# smbpasswd -a -m asa

I thought that using ldapsam would lookup all machine information from LDAP
without having to deal with passwd.  Any comments would be appreciated.
Thanks.




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] smb.conf + freebsd 4.7

[Nego]

Hello

I've installed samba from ports (samba-2.2.6.p2_1)
i configured /usr/local/etc/smb.conf

[global]
   netbios name = SERWEREK
   workgroup = SIATKA
   security = share

   hosts allow = 192.168.0. 127.
   interfaces = rl1
   bind interfaces only = Yes

   server string = Freebsd
   client code page = 852
   dead time = 15
   keep alive = 15

[Ogolne]
   path = /home/samba
   browseable = yes
   public = yes
   read only = no


i makedir /home/samba
drwxrwxrwx  2 nego userzy   512 Feb 11 17:11 samba

and now i stared
smbd -D
nmbd -D

it worked for one day
and when next day i restarted server
i couldn't connect to this from my network (with winXP and win98)

but i can connect to it with smbclient from that server

and second:

Feb 11 17:09:47 localhost nmbd[3222]: [2003/02/11 17:09:47, 0] 
nmbd/nmbd_responserecordsdb.c:find_response_record(235)
Feb 11 17:09:47 localhost nmbd[3222]:   find_response_record: response packet id 7410 
received with no matching record.
Feb 11 17:09:47 localhost nmbd[3222]: [2003/02/11 17:09:47, 0] 
nmbd/nmbd_responserecordsdb.c:find_response_record(235)
Feb 11 17:09:47 localhost nmbd[3222]:   find_response_record: response packet id 7411 
received with no matching record.
Feb 11 17:10:10 localhost nmbd[3222]: [2003/02/11 17:10:10, 0] 
nmbd/nmbd.c:terminate(59)

which options in smb.conf can turn off this ?


Thanks in advance
  Negocjator

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Mangling problem

[Ivan Gustin]

> > > I have a strange problem with Samba on RedHat 7.2. In one directory
> > > there is many files with similar long file name (10+ digit file name
> > > for many pictures). When I dir this directory, I can see many files
> > > with different long file name, but with exactly the same short file
> > > name. There is about 3-5 files with the same 8.3 DOS file name.
> > >
> > > I really don't understand how can it happen and what is cause of that
> > > problem. I have Samba 2.2.3, so I put Samba 2.2.7, but the problem is
> > > still the same. I can't say that is mangling bug within Samba, but I
> > > never see such situation.
>
> Set mangling method = hash2 in smb.conf

I tried that. No help, the problem still persist.

--
Ivan Guštin, [EMAIL PROTECTED], (098) 366-346
ELIN Elektronika i informatika, www.elin.hr, (052) 623-491
Lindarska cesta 1, 52000 Pazin


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] acces to shared directories

[John H Terpstra]

On Tue, 11 Feb 2003, Fernando Rodriguez wrote:

> I have RH8  with samba 2.2.5
> En w95 machine  exists a shared folder  pepe, when tray to access from
> rh8-> konqueror, i see the shared directory  but  don't files .
> There is a bug  o is my mistake ?

What are the permissions and ownership of the shared directory?

Who are the ownership and permissions of the files that you can not see?

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] 2.2.7a panic with VFS Audit when writing file (reading is ok)

[Chris Shenton]

Running SAMBA 2.2.7a compiled with Audit support, enabled on a share:

[global]

workgroup   = HCAT
server string   = Samba Server for HCAT
hosts allow = xxx.xxx. yyy.yyy.yyy.
load printers   = no
log file= /var/log/log.%m
max log size= 50
security= user
encrypt passwords   = yes
socket options  = TCP_NODELAY
interfaces  = zzz.zzz.zzz.zzz
dns proxy   = no

[sts107]

  browseable= yes
  writeable = yes
  path  = /home/samba/hcat
  inherit acls  = yes
  inherit permissions   = yes
  #
  vfs object= /usr/local/lib/samba/audit.so


When I connect to it -- with smbclient or windows -- it works until I
try to write (create) a file, then it panics.  smbclient reports:


smbclient //epsilon/sts107 -W hcat -I epsilon.hq.nasa.gov -U cshento8
[change dirs]
smb: \STS107\> put /home/cshenton/.emacs DEBUG10
SUCCESS - 0 opening remote file \STS107\DEBUG10
smb: \STS107\> Bus error (core dumped)

I didn't see anything in the archives back about 8 months on this.  I
turned up debugging to "-d 10".  Any clues?  Our security folks
*really* want the nifty logging Audit provides.

Thanks. 

Here's the audit sent to /var/log/messages:

Feb 11 10:19:25 epsilon smbd_audit[6357]: VFS_INIT: vfs_ops loaded
Feb 11 10:19:25 epsilon smbd_audit[6357]: connect to service sts107 by user cshento8
Feb 11 10:19:47 epsilon smbd_audit[6357]: opendir STS107
Feb 11 10:19:47 epsilon smbd_audit[6357]: open STS107/DEBUG10 (fd 24) for writing
Feb 11 10:19:47 epsilon /kernel: pid 6357 (smbd), uid 1013: exited on signal 6

Here's the end of the output sent to log.clientname file:

[2003/02/11 10:19:47, 10] smbd/mangle_hash.c:is_mangled(317)
  is_mangled: DEBUG10 : False
[2003/02/11 10:19:47, 5] smbd/filename.c:unix_convert(314)
  New file DEBUG10
[2003/02/11 10:19:47, 2] smbd/dosmode.c:unix_mode(59)
  unix_mode(STS107/DEBUG10) inheriting from STS107
[2003/02/11 10:19:47, 2] smbd/dosmode.c:unix_mode(67)
  unix_mode(STS107/DEBUG10) inherit mode 40770
[2003/02/11 10:19:47, 3] smbd/dosmode.c:unix_mode(111)
  unix_mode(STS107/DEBUG10) returning 0760
[2003/02/11 10:19:47, 5] smbd/files.c:file_new(123)
  allocated file structure 4662, fnum = 8758 (1 used)
[2003/02/11 10:19:47, 10] smbd/open.c:open_file_shared1(782)
  open_file_shared: fname = STS107/DEBUG10, share_mode = 42, ofun = 12, mode = 760, 
oplock request = 0
[2003/02/11 10:19:47, 8] lib/util.c:is_in_path(1145)
  is_in_path: STS107/DEBUG10
[2003/02/11 10:19:47, 8] lib/util.c:is_in_path(1150)
  is_in_path: no name list.
[2003/02/11 10:19:47, 3] lib/util.c:unix_clean_name(387)
  unix_clean_name [STS107/DEBUG10]
[2003/02/11 10:19:47, 4] smbd/open.c:open_file_shared1(941)
  calling open_file with flags=0x2 flags2=0x600 mode=0760
[2003/02/11 10:19:47, 10] smbd/open.c:fd_open(53)
  fd_open: name STS107/DEBUG10, flags = 01002 mode = 0760, fd = 24.
[2003/02/11 10:19:47, 2] smbd/open.c:open_file(245)
  CSHENTO8 opened file STS107/DEBUG10 read=Yes write=Yes (numopen=1)
[2003/02/11 10:19:47, 10] smbd/open.c:open_file_shared1(1042)
  open_file_shared : share_mode = 42
[2003/02/11 10:19:47, 10] locking/locking.c:set_share_mode(692)
  set_share_mode: creating entry for file STS107/DEBUG10. num_share_modes = 1
[2003/02/11 10:19:47, 10] locking/locking.c:print_share_mode_table(445)
  print_share_mode_table: share_mode_entry[0]: pid = 6357, share_mode = 0x42, 
desired_access = 0x3, port = 0x0, type= 0x0, file_id = 1, dev = 0x28503, inode = 
8583476
[2003/02/11 10:19:47, 0] lib/fault.c:fault_report(38)
  ===
[2003/02/11 10:19:47, 0] lib/fault.c:fault_report(39)
  INTERNAL ERROR: Signal 11 in pid 6357 (2.2.7a)
  Please read the file BUGS.txt in the distribution
[2003/02/11 10:19:47, 0] lib/fault.c:fault_report(41)
  ===
[2003/02/11 10:19:47, 0] lib/util.c:smb_panic(1094)
  PANIC: internal error
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] NT4 with Samba PDC Domain Admin Privs

[James Read]

Hi there, 

I'm running FreeBSD 4.7-Stable with Samba 2.2.7. I have two windows machines, one 
running windows 2000 sp3 and one running windows NT 4 sp6a. Samba is corectly 
configured to run as a PDC with each machine trust account.

On the freebsd box i have created a group called 'domainadmin' and in that i have put 
the user 'james' i want to have with admin privs. 'james' is also under group 'wheel' 
aswell.

in /usr/local/etc/smb.conf  i have added the line

 domain admin group = @domainadmin

This works fine with windows 2000. I can logon in with the user 'james' and have admin 
privs, such as to change network settings and so on.


The problem lies with domain admin user rights with the NT box. As i said the problem 
doesnt exist with w2k. Everytime i logon to the NT4 box as user 'james' all i get is 
user privs and not admin privs. 

I have even read up about having domain group ,domain user and local group maps and 
they have not made a difference. I still logon with user rights instead of admin 
rights on the NT4 box.



Can anyone can figure this one out?


James.


Many thanks .
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba and a headache

[Harald Milz]

Hello List:

I have a problem i can't work around.

Look

[root@Server samba]# smbclient //server/homes -UHarald%pass
added interface ip=xxx.xxx.xxx.xxx bcast=xxx.xxx.xxx.xxx
nmask=xxx.xxx.xxx.xxx
added interface ip=192.168.100.1 bcast=192.168.100.255
nmask=255.255.255.0
Domain=[INTSER] OS=[Unix] Server=[Samba 2.2.7]
smb: \> exit

[root@Server samba]# exit
exit

[Harald@Server Harald]$ smbclient //server/homes
added interface ip=xxx.xxx.xxx.xxx bcast=xxx.xxx.xxx.xxx
nmask=xxx.xxx.xxx.xxx
added interface ip=192.168.100.1 bcast=192.168.100.255
nmask=255.255.255.0
Password:
session setup failed: NT_STATUS_LOGON_FAILURE
[Harald@Server Harald]$

Its the same password but when I login through the user, i get this error.

The same thing happens when i try to login as root with "smbclient //Server/homes"
and then enter the passwd. But if i do a -Uroot%passwd, there's no problem.

To be honest, i have been surfing around for days and days and read all the howto's
there is and nevertheless can't find any errors.

I am including all the configuration files i have below.

Greetings and thanks in advance for your help!!

SMB.CONF :

[global]

   netbios name = Server
   server string = Samba-Server
   workgroup = INTSER
#   encrypt passwords = yes  * also tried to enable this, but i get a BAD_PASSWD reply.
#   update encrypted = yes *same as above
   security = user
   browseable = yes
   smb passwd file = /etc/samba/smbpasswd
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

[homes]
   comment = Directorios Locales
   browseable = yes
   writeable = yes
   valid users = %S
   create mode = 0664
   directory mode = 0775

[public]
   comment = Espacio Temporal
   path = /usr/share/public
   guest ok = yes
   read only = no

---

SMBUSERS :

# Unix_name = SMB_name1 SMB_name2 ...
root = administrator admin
nobody = guest pcguest smbguest
Harald = harald Harald hmilz


the "smbpasswd" file i don't include... if really needed advice ;)

NOTE: I have both users "Harald" and "root" added to the smbpasswd file and enabled 
accordingly.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] security = domain

[Pierrick Brossin]

Quoting adam newton <[EMAIL PROTECTED]>:

> For example, I'm setting up a samba server on a windows 2k network. I
> use security=domain and password server = . This means that
> all incoming connections to the samba service are checked against the
> authentication mechanism on the PDC, rather than locally. The samba
> server trusts the PDC to only authenticate valid domain users, and the
> PDC trusts the samba server to only allow connections from
> PDC-authorised users.

Hi !

>From samba.org:
--
Currently, domain security in Samba doesn't free you from having to create
local Unix users to represent the users attaching to your server. This means
that if domain user DOM\fred attaches to your domain security Samba server,
there needs to be a local Unix user fred to represent that user in the Unix
filesystem 
--

So where is the advantage to use a Samba server against a NT server ?
My boss asked to install a freebsd machine with Samba and try to give
different access to different users from our NT PC on some shares.

If I have to enter the 60 people that are working here on my freebsd server
it's gonna take long and it's static. Everytime a new guy start here I'll
have to add it to the freebsd server...

My boss told me to look around 'users mappings'

Any idea how it works ?

Thanx

-- 
Pierrick Brossin
IT Swiss - QUARK Media House
6a Puits Godet, 2000 Neuchatel, Switzerland
Mail Prof: [EMAIL PROTECTED] Mail Priv: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] security = domain

[Michael Herber]

Hm, but as I did understand, in both cases, the log in at the
samba-server is sent to the NT-machine to validate. After what I've
read, "server" means that only the username and the password is sent and
"domain" menas that more than these two values are sent. I am completely
wrong?

Anyhow, "server" also needs a "password server" for authentification (at
least this is what my sources are saying!). So what's the difference? Or
are my sources wrong?

Michael

Am Die, 2003-02-11 um 14.33 schrieb adam newton:
> 
> My understanding of this is that the domain and server setting represent
> different levels of functionality within a windows-like domain.
> 
> The security=server setting allows a machine to emulate some form of
> (P/B)domain controller, directly managing all authentication for the
> domain etc. The security=domain option enables the samba server to allow
> the PDC on the domain to take care of authentication of
> users (which is what its there fore, afterall).
> 
> For example, I'm setting up a samba server on a windows 2k network. I
> use security=domain and password server = . This means that
> all incoming connections to the samba service are checked against the
> authentication mechanism on the PDC, rather than locally. The samba
> server trusts the PDC to only authenticate valid domain users, and the
> PDC trusts the samba server to only allow connections from
> PDC-authorised users.
> 
> 
> It allows me to offer a PDC-trusted fileserver service on a
> domain-controlled network, without actually being a domain controller.
> 
> 
> I hope that little explanation helped some.
> 
> 
> > Now, can anyone tell me
> > what exactly the NT-Server checks when I set "domain" as level and in
> > comparison, what's the difference to "server".
> > 
> 
> 
> -- 
> Adam Lee Newton, MSc
> ~
> IT Services
> University College Worcester
> [EMAIL PROTECTED]
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
> 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as PDC

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 11 Feb 2003, Titus Syengo wrote:

> I have just joined this list and I am sure this question may have been
> answered earlier. I am a newbie in Linux but with strong redmond skills, the
> reason I am here is that I want to migrate to Linux.
> 
> I just setup a linux server with one workstation, win 98 and I am connecting
> both with a crossed cable. I want to use Linux as a PDC to serve the one
> client of win 98 and have already installed samba and SMB service is running
> well. I can also ping the workstation and the workstation can ping the linux
> server. I have configured the smb.conf well but and also set win 98 to
> plaintext but I get the error message that the domain password you supplied
> is not corrcet, or access to your logon server has been denied.

Probably need to set a password level in smb.conf.  See the man page for 
details.





cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
--John Cusack - "Grosse Point Blank" (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+SQYLIR7qMdg1EfYRAtUZAKCyrvc2V1rds891HsdsdSUbxxXHuwCeL/Gl
FIHNbaoThS0p5pygoE7icqc=
=16YU
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] user in two groups - acl problem

[Jurica . Motusic]

This is a situation.

I have samba, winbind, w2k domain. Everything works fine BUT

User "test" is member of group "ALL" and group "MARKETING"
Group ALL have all permission on folder COMPANY, and  group MARKETING
doesn't have any access (deny) .

User test still can access folder COMPANY.

If I explicitly deny user test to access that folder then it's OK.

Why?
Is it possible to deny access to folder COMPANY to group MARKETING by using
groups.


Thanks

Jurica Motusic

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] security = domain

[adam newton]

My understanding of this is that the domain and server setting represent
different levels of functionality within a windows-like domain.

The security=server setting allows a machine to emulate some form of
(P/B)domain controller, directly managing all authentication for the
domain etc. The security=domain option enables the samba server to allow
the PDC on the domain to take care of authentication of
users (which is what its there fore, afterall).

For example, I'm setting up a samba server on a windows 2k network. I
use security=domain and password server = . This means that
all incoming connections to the samba service are checked against the
authentication mechanism on the PDC, rather than locally. The samba
server trusts the PDC to only authenticate valid domain users, and the
PDC trusts the samba server to only allow connections from
PDC-authorised users.


It allows me to offer a PDC-trusted fileserver service on a
domain-controlled network, without actually being a domain controller.


I hope that little explanation helped some.


> Now, can anyone tell me
> what exactly the NT-Server checks when I set "domain" as level and in
> comparison, what's the difference to "server".
> 


-- 
Adam Lee Newton, MSc
~
IT Services
University College Worcester
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] security = domain

[Michael Herber]

I have to prepare a little presentation about samba and there's a little
point I'm not quite sure about it.
I'm using 2.2.5 BTW.

Now, I know about the different "security ="-settings except for
"security = domain". When I set "security = server", a NT-Server is
reponsable for checking username and corresponding password if I'm
right. Now, in the books I have as source, "security = domain" is only
described as following: "If security = domain is set, then the NT-Server
checks entirely the log-in". That's quite short. Now, can anyone tell me
what exactly the NT-Server checks when I set "domain" as level and in
comparison, what's the difference to "server".

Michael


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba]

[Titus Syengo]

Titus Syengo,
Pact Kenya, 
P.O. Box 690 - 00606, Nairobi.
Tel: 254-2-571615, 254-2-578271/3/4
Fax: 254-2-570775 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] samba, winbind, 2k PDC and dynamic home shares?

[adam newton]

Hi again all,

First of all, apaologies if this message is replicated on a news server, my new server 
died on me, so I've moved to supernews and will be posting to the mailman list instead 
for this.

Anyway, I have a quick question about winbindd and PDC user home shares...


I have gone through all the usual steps for setting up a Samba (2.2.7 /
RedHat 8.0) fileserver, and have a simple, basically functional server
offering services to the NT domain. However, on the NT-facing daemon, what
is the proper way to get home shares to work, and to get them
automatically created and managed by winbind?

Here is the relevant, Winbind chunk of my smb.conf... Pretty much standard
here:

winbind separator = +
winbind uid = 1-2
winbind gid = 1-2
winbind enum users = yes
winbind enum groups = yes
template homedir = /home/winnt/%D/%U
template shell = /bin/bash


The authentication part seems to be working - the relevant users have
access to the relevant shares, but not home directories as yet.


Does anyone have any idea what I need to do next to get the home
directories going? Any thoughts and / or snippets of smb.conf would be
appreciated!!


Cheers,


Adam Lee Newton, MSc
~
IT Services
University College Worcester
[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Swat configuration problem

[Jorge Videgain Marquez]

I would like my terminals computer be allowed to change their passwords using 
Swat web page, but i would not like they could see configuration, smb file, 
status or any other infromation about the net.

How can i grant access to they could use Swat? when i try to conect with a 
local samba or linux user diferent than root it says Permision Denied at my 
browser.

How can i filter information sent to them so they only could change their 
passwords?

Does Swat work fine to do this? any other idea to allow them to chage their  
passwords?

Regards

guanche

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba as PDC

[Titus Syengo]

I have just joined this list and I am sure this question may have been
answered earlier. I am a newbie in Linux but with strong redmond skills, the
reason I am here is that I want to migrate to Linux.

I just setup a linux server with one workstation, win 98 and I am connecting
both with a crossed cable. I want to use Linux as a PDC to serve the one
client of win 98 and have already installed samba and SMB service is running
well. I can also ping the workstation and the workstation can ping the linux
server. I have configured the smb.conf well but and also set win 98 to
plaintext but I get the error message that the domain password you supplied
is not corrcet, or access to your logon server has been denied.

Any ideas?


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] trouble joining domain

[Buchan Milne]

> Date: Mon, 10 Feb 2003 19:23:37 -0500
> From: "Jim Wharton" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: [Samba] trouble joining domain
> Message-ID: <003101c2d163$d2100d30$1700a8c0@solomon>
> Content-Type: text/plain;
>   charset="iso-8859-1"
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> Precedence: list
> Message: 8
> 
> I have added a machine account to /etc/passwd named luna$ and in smbpasswd
> named luna. When I attempt to join my Win2K box to the domain, I get this
> error.
> 
> The following error occured attempting to join the domain:
> 
> The account used is a computer account. Use your global user account or
> local user account to access this server.

# smbpasswd -a

Then use 'root' as username and the smbpasswd you just entered as the
password.

> 
> I am using openldap if that makes any difference.

If you are using the ldap backend to samba, you probably want to make an
ldap account instead of a local account, on Mandrake you should
configure /etc/samba/smbldap_conf.pm and then:

# /usr/share/samba/scripts/smbldap-useradd.pl

You also need to configure samba for ldap, and give samba the password
for the ldap dn it uses (see the smbpasswd man page).

(read the help, and then add an account as with useradd, but ensure you
make a machine account).

Buchan

-- 
|--Another happy Mandrake Club member--|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Directories marqued as read only

[Buchan Milne]

> Date: Mon, 10 Feb 2003 19:41:07 -
> From: "Sylvio Bardes" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: [Samba] Directories marqued as read only
> Message-ID: <001601c2d13c$5af0d210$0302a8c0@livingstone>
> Content-Type: text/plain;
>   charset="iso-8859-1"
> MIME-Version: 1.0
> Content-Transfer-Encoding: quoted-printable
> Precedence: list
> Message: 13
> 
> I am using samba 2.2.6pre2 from mandrake 9.0,

Please run updates, or consider using smaba-2.2.7a-3mdk from here:

http://ranger.dnsalias.com/mandrake/mandrake9.0/samba-2.2.7a

(more updates will be coming sometime ...)

> I've set it up as PDC,

You're missins a netlogon share ..

You may want to take a look at
http://www.mandrakeuser.org/connect/csamba6.html

> 
> When I share directories, their properties are read-only, even if I have =
> the read/write permissions on the files. I'm able to =
> rename/delete/create...

You're going to have to give more detail here on exactly what you can't
delete, and what it's unix permissions are, and what the permissions of
it's parent directory are.

> 
> It's a probleme for certain programs who check the file permission =
> before some actions,
> 
> Thanks for your help,
> 
> 
> here is my config file:
> 
> # Samba config file created using SWAT
> # from 0.0.0.0 (0.0.0.0)
> # Date: 2003/01/15 09:03:38
> 

The default config works out the box ... and has many cool examples, but
you've trashed them now ...

If you run updates though, you will get a new one in
/etc/samba/smb.conf.rpmnew which you may want to look at in a text
editor (kate or vi do fine).

> # Global parameters
> [global]
>   workgroup =3D 98YS
>   netbios name =3D SERVER
>   server string =3D Samba Server %v
>   encrypt passwords =3D Yes
>   min passwd length =3D 0
>   null passwords =3D Yes
>   log file =3D /var/log/samba/log.%m
>   max log size =3D 50
>   socket options =3D TCP_NODELAY SO_RCVBUF=3D8192 SO_SNDBUF=3D8192
>   printcap name =3D lpstat
>   logon path =3D=20
>   logon home =3D=20
>   domain logons =3D Yes
>   os level =3D 99
>   preferred master =3D True
>   domain master =3D True
>   dns proxy =3D No
>   wins support =3D Yes
>   force create mode =3D 0755
>   force directory mode =3D 0755
>   printing =3D cups
> 
> [homes]
>   comment =3D Home Directories
>   read only =3D No
>   create mask =3D 0774
>   force create mode =3D 0775
>   directory mask =3D 0775
>   force directory mode =3D 0775


-- 
|--Another happy Mandrake Club member--|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] samba 2.2.7a and multiple logins...

[Michael Bramer]

Hello

I use a new samba server with LDAP support as PDC for some Windows2000
and WindowsXP machines. 

All is working nice. The useer can login with a user/password in the
domain, we have remote profiles, the user can access the samba shares
and print etc. 

But after some time (< 1 day) we get a smbstatus output like the
attached file. Users are connected multiple times with the same share
(without rebooting/crash the windows OS). 

And as a result of this, the user have looked outlook files. (the
outlook PST-files are on one samba share...)

Have someone a problem like this and maybe some ideas or solutions?

Thanks


Gruss
Grisu
-- 
Michael Bramer  -  a Debian Linux Developer  http://www.debsupport.de
PGP: finger [EMAIL PROTECTED]  -- Linux Sysadmin   -- Use Debian Linux
"But it's interactive, and it's not emacs, nor vi, and thus evil :-)"
  --- Jan Nieuwenhuizen


Samba version 2.2.7a-0.1 for Debian
Service  uid  gid  pid machine
--
kr   kr   users10724   pc33 (192.168.1.33) Tue Feb 11 08:42:02 2003
js   js   users10566   pc40 (192.168.1.40) Tue Feb 11 07:58:31 2003
IPC$ nobody   nogroup   5935   pc45 (192.168.1.45) Mon Feb 10 15:34:55 2003
transfer fr   users 5935   pc45 (192.168.1.45) Mon Feb 10 12:00:49 2003
jm   jm   users 6838   pc39 (192.168.1.39) Mon Feb 10 15:07:48 2003
IPC$ nobody   nogroup   5124   pc53 (192.168.1.53) Mon Feb 10 14:01:04 2003
IPC$ nobody   nogroup  10701   pc32 (192.168.1.66) Tue Feb 11 08:34:54 2003
IPC$ nobody   nogroup   4833   pc40 (192.168.1.40) Mon Feb 10 08:01:15 2003
kr   kr   users 5813   pc33 (192.168.1.33) Mon Feb 10 11:28:39 2003
demo jm   users 5902   pc39 (192.168.1.39) Mon Feb 10 11:52:14 2003
mas  mas  users10682   pc37 (192.168.1.37) Tue Feb 11 08:28:50 2003
IPC$ nobody   nogroup   6172   pc39 (192.168.1.39) Mon Feb 10 15:05:10 2003
IPC$ nobody   nogroup   5267   pc39 (192.168.1.39) Mon Feb 10 09:59:09 2003
IPC$ nobody   nogroup   4990   pc33 (192.168.1.33) Mon Feb 10 08:42:27 2003
project  mal  users24074   pc55 (192.168.1.123) Fri Feb  7 15:56:45 
2003
IPC$ nobody   nogroup   5123   pc51 (192.168.1.51) Mon Feb 10 09:10:30 2003
IPC$ nobody   nogroup   4930   pc49 (192.168.1.49) Mon Feb 10 08:25:44 2003
demo jm   users 5838   pc39 (192.168.1.39) Mon Feb 10 11:36:55 2003
IPC$ nobody   nogroup   4784   pc42 (192.168.1.42) Mon Feb 10 07:47:48 2003
IPC$ nobody   nogroup  10374   pc42 (192.168.1.42) Tue Feb 11 06:54:44 2003
jm   jm   users 5718   pc39 (192.168.1.39) Mon Feb 10 11:11:46 2003
project  jm   users 6838   pc39 (192.168.1.39) Mon Feb 10 15:06:53 2003
project  rb   users10729   pc52-rb  (192.168.1.52) Tue Feb 11 08:44:10 2003
transfer jm   users 6172   pc39 (192.168.1.39) Mon Feb 10 12:57:50 2003
IPC$ nobody   nogroup   5100   pc31 (192.168.1.31) Mon Feb 10 13:22:19 2003
IPC$ nobody   nogroup   5021   pc45 (192.168.1.45) Mon Feb 10 10:15:26 2003
transfer vb   users 5100   pc31 (192.168.1.31) Mon Feb 10 09:10:00 2003
IPC$ nobody   nogroup   5898   pc26 (192.168.1.26) Mon Feb 10 12:31:36 2003
IPC$ nobody   nogroup   5813   pc33 (192.168.1.33) Mon Feb 10 11:28:39 2003
IPC$ nobody   nogroup   4817   pc38 (192.168.1.38) Mon Feb 10 07:58:25 2003
IPC$ mal  users24074   pc55 (192.168.1.123) Fri Feb  7 17:38:13 
2003
IPC$ nobody   nogroup   4880   pc26 (192.168.1.26) Mon Feb 10 08:15:47 2003
IPC$ nobody   nogroup   5422   pc44 (192.168.1.44) Mon Feb 10 10:13:13 2003
IPC$ nobody   nogroup   5020   pc44 (192.168.1.44) Mon Feb 10 08:50:40 2003
js   js   users10558   pc40 (192.168.1.40) Tue Feb 11 07:56:23 2003
jm   jm   users 5838   pc39 (192.168.1.39) Mon Feb 10 11:38:07 2003
IPC$ nobody   nogroup   6838   pc39 (192.168.1.39) Mon Feb 10 15:44:12 2003
sek  pr   users 5389   pc26 (192.168.1.26) Mon Feb 10 10:07:45 2003
IPC$ nobody   nogroup   5077   pc28 (192.168.1.28) Mon Feb 10 09:00:20 2003
IPC$ nobody   nogroup   5718   pc39 (192.168.1.39) Mon Feb 10 11:35:43 2003
IPC$ kr   users10730   pc33 (192.168.1.33) Tue Feb 11 08:44:27 2003
transfer vb   users 6595   pc31 (192.168.1.31) Mon Feb 10 14:13:07 2003
IPC$ nobody   nogroup  10724   pc33 (192.168.1.33) Tue Feb 11 08:42:02 2003
IPC$ nobody   nogroup   6348   pc31 (192.168.1.31) Mon Feb 10 14:12:01 2003
oschad   oschad   users10635   pc55 (192.168.1.123) Tue Feb 11 08:19:35 
2003
manage   ct  

Re: [Samba] Mandrake Binaries

[Buchan Milne]

> Date: Mon, 10 Feb 2003 09:39:15 -0500
> From: "Jim Wharton" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: [Samba] Mandrake Binaries
> Message-ID: <[EMAIL PROTECTED]>
> In-Reply-To: <[EMAIL PROTECTED]>
> Content-Type: text/plain;
>   charset="us-ascii"
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> Precedence: list
> Message: 6
> 
> I lost my bookmarks to the samba binaries compiled for Mandrake 9.0.
> 
> I'd like to mess around with the 3.0 stuff. I remember there were 2 ftp
> sites that stayed pretty current. I'd like to add them to URPMI so I can
> update easily.
> 

http://download.samba.org/samba/ftp/bin-pkgs/Mandrake/

(a bit out-od-date - waiting for 2.2.8 ..., try below)

http://ranger.dnsalias.com/mandrake/samba
http://people.mandrakesoft.com/~staburet/samba

These RPMs should install alongside samba-2.2.x:
http://ranger.dnsalias.com/mandrake/mandrake9.0/samba-3.0alpha21/
But I haven't got hdlists there atm ...

There are RPMs of samba3 in cooker contrib

Buchan


-- 
|--Another happy Mandrake Club member--|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Virus Alert

[abuse]

We have detected a virus (WORM_KLEZ.H) in your mail traffic sent from 
[EMAIL PROTECTED] in the file charset.scr on 02/11/2003 04:53:10. We took the 
action delete. If you have questions regarding files or updating/installing Anti-virus 
protection on your PC, please contact your e-mail administrator or help desk.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] acces to shared directories

[Fernando Rodriguez]

I have RH8  with samba 2.2.5
En w95 machine  exists a shared folder  pepe, when tray to access from 
rh8-> konqueror, i see the shared directory  but  don't files .
There is a bug  o is my mistake ?

  thanks Fernando

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Displaying correct file ownership information on smbfsfilesystem

[Peter Whysall]

Hi

I'm mounting a remote Windows NT 4.0 share from a Debian Linux box via 
"mount -t smbfs -o username=foo //server/share /path/to/mount/point" 
which works well enough, and I can wander about the filesystem, but all 
the files have owner and group of "root" when one issues "ls -l".

Is there a mechanism for making the actual Windows NT file ownership 
information appear? Is this a Samba thing, or an smbfs thing?

Many thanks in advance,

Peter.


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba getting user info from NT PDC

[Pierrick Brossin]

Hi!

My boss asked me to be able to share some directories on a FreeBSD Samba server
with users already created (and used) on a NT 4.0 PDC server.

So I followed http://www.sugoi.org/bits/index.php?bit_id=10

I just replaced the Windows 2k part by adding the NetBIOS name of the machine to
the NT PDC.

When I did the smbpasswd trick it worked like charm:

testsmb# smbpasswd -j CH-DOMAIN -r PDC
2003/02/11 10:11:23 : change_trust_account_password: Changed password for domain
CH-DOMAIN.
Joined domain CH-DOMAIN

The trouble is when I make a share on my Samba server and I try to access it
from a Windows machine connected to the NT PDC it keeps asking the password and
never enters the share.

What I need to do is to share a directory. Try to enter it from a Windows
machine which is connected to the NT PDC. Samba asks the NT PDC if the user is
valid and if so it enters the share.
But it doesn't work at all.

Any idea ?

Thanx !

Here is my smb config file:

# Global parameters
[global]
workgroup = CH-DOMAIN
netbios name = TESTSMB
server string = TESTSMB Server
interfaces = 10.41.0.39/24
security = DOMAIN
password server = PDC
encrypt passwords = yes
update encrypted = yes
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
remote announce = 10.41.0.255
log file = /var/log/log.%m
max log size = 50
load printers = no
os level = 0
preferred master = False
local master = no
domain master = False
wins support = no
wins server = 10.41.0.16
hosts allow = 10.41.0.
dns proxy = no

[www]
comment = www root directory
path = /usr/local/www/data/
browseable = yes
writable = yes

-- 
Pierrick Brossin
IT Swiss - QUARK Media House
6a Puits Godet, 2000 Neuchatel, Switzerland
Mail Prof: [EMAIL PROTECTED] Mail Priv: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] ANSWER: my experiences with PDC

[Szanto Peter]

So here comes a fully functional skeleton for win2K,9x,NT, without ldap, 
pam, etc

I got the problem with the nmbd restarting (wins forget the netbios names).



Samba PDC instant guide by skylark
(Samba PDC HOWTO, Using Samba as PDC by IBM DeveloperWorks)

smb.conf:
[global]
	workgroup = skynet
	netbios name = skybox
	server string = Skybox (%v)
	socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192

	os level = 64
	preferred master = yes
	local master = yes
	domain master = yes

	security = user
	encrypt passwords = yes
	domain logon = yes
	log file = /var/log/samba/log.%m
	log level = 2
	max log size = 50
	hosts allow = 127.0.0.1 192.168.1.0/255.255.255.0
	
	logon home = \\%L\%U\.profile
	logon drive = H:
	logon path = \\%L\profiles\%U
	logon script = netlogon.bat

	add user script = useradd -d /dev/null -g pdc_machines -s /bin/false -M %u

	unix password sync = yes
	passwd program = passwd %u
	passwd chat = *New*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n
	*passwd: *all*authetication*tokens*updated*successfully*


[profiles]
	path = /home/samba/profiles
	writeable = yes
	browseable = no
	create mask = 0600
	directory mask = 0700

[netlogon]
	path = /home/netlogon
	read only = yes
	write list = szabop skylark

[homes]
	comment = Home Directories
	browseable = no
	writeable = yes

:
group -g 200 pdc_admins
group -g 201 pdc_machines
mkdir -m 0775 /home/netlogon
chown root.pdc_admins /home/netlogon
mkdir /home/samba /home/samba/profiles
chmod 1757 /home/samba/profiles
useradd domainuser
passwd domainuser (xxx)
smbpasswd -a domainuser (xxx)

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] HP Deskjet drivers, Samba and Cups

[Sandro Hannemann]

I had similar problems using HP Deskjet 970CXi

I also tried to setup a printing server using Samba 2.2.7a and Cups 1.1.18.
From linux clients I had no problems using the foomatic driver.
In order to be able to access the printer from a W2K-client I added to 
smb.conf: 

use client driver = yes

( that driver download thing, seamed to be kind of overkill for one Windows 
client)
I did that raw-printer setup thing under cups, and got the same result:
something like "format-not-supported" appeared in the "log.smbd"
Then I tried to setup the printing command by adding

print command = lpr -P %p %s -oraw -s

to the smb.conf.
Still the same
Then I read the manualpages of smb.conf
there it is written, that using printcap = cups disables any manually set 
printing commands, so I set

printing = BSD
printcap file = /etc/samba/printcap

in the smb.conf,
while /etc/samba/printcap
contains the manually edited line

hp|HP DeskJet 970CXi via Samba

finally the cups-system has now the printer queue hp using that foomatic 
driver (which is useful for all linux clients). The printing option is set to 
BSD, but still it prints to the hp-queue of cups, so it's finally working 
properly, but its not that straight forward, as the guys suggest in the 
documentation, I'd say.

Sandro

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] pdc help needed with win2k sp3 clients/samba2.27a/redhat 8.0

[mark]

On Tuesday 11 February 2003 07:52, Raj Saxena wrote:

> Does anyone have any good docs as to what clients work and with what
> service pack? I know some guys have had luck with debian, and win2ksp3. We
> have 17 clients in one building and then I would need to bring up two bdc
> (samba servers) if possible for the remote locations.
>

It sounds like you've done your homework, but this is quite a good document in 
case you haven't seen it.  

http://hr.uoregon.edu/davidrl/samba/samba-pdc.html#pdc

I know it's possible to connect a w2k machine to a samba pdc as I've done it.  
Which is not to say anything about you, but just to confirm that it is 
actually possible.  

Good luck,
mark

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] HP Deskjet drivers, Samba and Cups

[Nick Gale]

Thanks for this, unfortunately I've tried this and it makes no difference.

Below is from Cups error log, message is the same whether printer is RAW or
set up as a Deskjet. Please note that the same problem occurs when I
configure the printers via LPRng or Webmin. Again it doesn't matter whether
its RAW or not.

Any other clues?

Thanks

Nick Gale

I [11/Feb/2003:08:50:02 +] Started "/usr/lib/cups/cgi-bin/printers.cgi"
(pid=1778)
I [11/Feb/2003:08:50:07 +] Started "/usr/lib/cups/cgi-bin/printers.cgi"
(pid=1784)
E [11/Feb/2003:08:50:13 +] print_job: Unsupported format
'application/octet-stream'!
I [11/Feb/2003:08:50:13 +] Hint: Do you have the raw file printing rules
enabled?


- Original Message -
From: "John H Terpstra" <[EMAIL PROTECTED]>
To: "Nick Gale" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Tuesday, February 11, 2003 12:00 AM
Subject: Re: [Samba] HP Deskjet drivers, Samba and Cups


> On Mon, 10 Feb 2003, Nick Gale wrote:
>
> > I have Samba 2.2.7 running on Redhat 8 (fully updated). I have two
printers
> > set up - a laser and a Deskjet 920C both connected to the Redhat server
via
> > USB cables. Printing is managed using CUPS although I get the same
problem
> > with LPR and Webmin configured printers. The laser works fine, the
deskjet
> > doesn't. The deskjet works with a generic windows HP Deskjet or HP
Deskjet
> > plus driver in black and white but if I use the actual 920C driver (Or
any
> > other DJ ***C driver for that matter) the print jobs appear to spool but
> > never arrive at the printer. You see a file being generated in the Samba
and
> > Cups spool directory but in the Cups spool directory thay appear briefly
and
> > then vanish, for jobs that do make it to the printer the file is present
for
> > longer as the printer loads the file.
> >
> > I can only assume this is a problem with Samba or Cups with HP desklet
> > drivers? Has anyone else seen this? Any Idea?
>
> Configure a RAW CUPS printer for the HP9x0C if you install the HP9x0C
> driver on Windows.
>
> If you want to install the printer in CUPS with the CUPS driver for the
> HP9xC, then install you Windows printers as Postscript printers and let
> CUPS convert from postscript to HP DJ format.
>
> Both the above work for me. I have set up several sites with HP940C
> printers and my own network has HP PhotoSmart P1000. All work find from
> both Linux and Windows. For Windows I prefer to print to a RAW CUPS
> printer and use the HP940C driver on each MS Windwos machine. Your mileage
> may bary!
>
> Best advice is to read the CUPS Printing HOWTO that will be in
> Samba-3.0.0.
>
> - John T.
> --
> John H Terpstra
> Email: [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba