[Samba] root can print, users not

2003-03-12 Thread Tim Thaler
Hi,

I have a Win2k client that should be able to print to a printer 
connected to a SuSE 8.1 Linux box.

The situation:

- 'root' is able to print from Win2k to the Linux, user 'tim' is not.
- Both, 'root' and 'tim' have their home directories visible and 
accessible on the Win2k.
- User acounts on Win2k and Linux are the same: 'root', 'tim'  with 
identical passwords on both machines.
- Both, 'root' and 'tim' have been added to the smbpasswd file.
- The smb.log file (level 10) has been filled with a load of messages I 
simply don't know how to interpret, but there is something like "access 
denied". I just can't figure why?
- The printer has been made browsable = yes and guest ok = yes
- The printer is visible to Win2k users; 'root' and 'tim'.

Does anyone have a good idea what else could be wrong that only 'root' 
is allowed to print but 'tim' is not?

Cheers

Tim

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: SAMBA and native mode

2003-03-12 Thread Valter Dal Bo
Hi there !

Yes I have. Samba works just as fine in native mode than it does in
mixed mode.
Have you got samba installed on an SGI server ?
If so, have you noticed some _strange_ behaviours ?
Let me know.
Valter
Hswe, Barbara wrote:

Hello:
A few months ago you posted the following messages on the samba message board:
""Hi all ! I've got Samba 2.2.2 installed on a SGI running IRIX 6.5.16 and PDC is a Win2000 in 
mixed mode. For security reasons the company I work for has to switch the win2000 installation from mixed 
mode to _NATIVE_ mode. Apparently (M$ sources say), doing so it will not allow samba to work with 
Win2000 because samba advertises itself as beeing a NT4 xDC. Even though my Samba installation is NOT in 
any way a DC, could that compromize samba to work correctly ? Best Regards ""
Did you find out if Samba is able to work in native windows 2000 even if the samba 
server is NOT a DC?
Thanks,
Barbara


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Configuring firewall to allow Samba to work

2003-03-12 Thread Nobody
Dear Folks,

This is a note for all those people out there who had to turn off their 
firewalls (iptables) to get Samba to work.  First start the GUI 
interface to the firewall by typing

[somedir]# redhat-config-securitylevel

Click on "Customize".

Click the check box for your network adapter (usually "eth0").

Click on the checkboxes for any services you want to allow (I allow WWW, 
FTP, SSH, DHCP, and Telnet).

In the "Other ports" edit box, enter 
"137:udp,137:tcp,138:udp,138:tcp,139:udp,139:tcp".  At a command prompt type

[somedir]# service iptables stop
Flushing all chains:   [  OK  ]
Removing user defined chains:  [  OK  ]
Resetting built-in chains to the default ACCEPT policy:[  OK  ]
[somedir]# service iptables start
Flushing all current rules and user defined chains:[  OK  ]
Clearing all current rules and user defined chains:[  OK  ]
Applying iptables firewall rules:  [  OK  ]
This should allow all the packets necessary for Samba.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Win95 & Win98 - NOT WORKING - NT,2000, XP are ok(reposted)

2003-03-12 Thread John H Terpstra
On Thu, 13 Mar 2003 [EMAIL PROTECTED] wrote:

Suggest you add a [printers] entry in your smb.conf file. You should NOT
need an entry for the printer itself. My samba-2.2.x prints fine from
Win95/98/Me as well as NT4/2K/XP.

- John T.

> Hey, thanks for your efforts anyway.
>
> I don't know what to make of this.
> Obviously a lot of things have changed between Samba 2.0.6 and 2.2.7a,
> but I can't figure out why Win95 & 98 suddenly can't print.
> I think you may be right - something to do with the new Samba using the
> MS-RPCs...
> which I imagine would mean a completely different printing method.
> Do you think this would require a different printer driver on the 95/98 boxes??
> >From what I read, I had the impression that it should all still work.
>
>  I'd like to hear from anyone if they are successfully printing from Win95,
> Win98 clients
>  on a   Solaris server and using HP printers.
>
> I'm sure many people must be successfully printing from 95/98, but maybe this
> problem
> is specific to my particular environment ?
>
> I am contemplating your suggestion about the bug message.
> Maybe another day or so of frustration and I will try it.
>
> again - thanks muchly for your help.
>
> -peter.
>
> >Date: Mon, 10 Mar 2003 18:33:35 +0100
> >From: "maraqas" <[EMAIL PROTECTED]>
> >
> >Hi Peter,
> >i had a long, frunstrating web surfing yesterday night, searching for
> >something
> >that could apply to your case. I didn't find much at all, sorry. The only
> >thing
> >perhaps interesting to you could be this:
> >http://us2.samba.org/samba/ftp/docs/htmldocs/printer_driver2.html
> >This doc contains a section about migrating from 2.0.x to 2.2.x
> >I think the problem lyes in the new way samba manages printing, that is
> >by listening the MS-RPCs (Remote Procedure Call) coming from the
> >winNT and win2000 clients. This is done thanks to spoolss, as i figured
> >out reading here and there across the net. Well they say spoolss supports
> >even win9x driver calls, even if those OSes do not actually make an RPC.
> >They also say that backward compat. is reached through "use client driver"
> >and "spoolss disable". With these options enabled, the samba server should
> >act just like it was a 2.0.x
> >I think you'd need help from the samba guys themselves, so i advice
> >reposting this problem with a more shocking subject line (suggest to
> >use the keyword BUG :)) so you'll be able to capture their attention.
> >
> >Really sorry not to have been useful to you...
> >
> >cheers
> >
> >Maq
>
> >>Sorry to have to repost this (didn't get any response on the first post),
> >>we really need some of the fixes of the new Samba but cannot go ahead without
> the support for the older machines.
> >>Need to prove that Samba is the great product that I believe it is.
> >>
> >>Hi folks - I am having printing problems with our older machines.
> >>
> >>Printing is working fine for our Windows NT, 2000 and XP clients.
> >>However, with windows 95 & 98, the print job gets put into the Samba
> >>spool directory (path = /var/spool/lp/tmp/samba)  but doesn't make it to the
> printer.
> >>The print files stay there in the directory - don't get removed.
> >>
> >>Samba version is 2.2.7a,  on Solaris 8
> >>Printers are HP printers - e.g. HP 8100dn
> >>
> >>All clients including 95/98 were happily printing on a very much older version
> of Samba (2.0.6)
> >>
> >>printing directly from Unix to the printer is working ok
> >>
> >>Has anyone experienced this problem or have any advice on how to
> >>get my older boxes printing with the latest Samba?
> >>
> >>any thoughts welcome - no really - anything - please
> >>:-)
> >>
> >>-peter.
> >>
> >>
> >>(p.s. Just for a wild stab in the dark I tried setting the "disable spoolss =
> yes"
> >>but this stopped all printing from making it to the computer - even from the
> clients that
> >>were originally working.)
> >>
> >>
> >>relevant bits of conf. file included below...
> >>note that I don't have print command explicitly stated, but testparm
> >>indicates that it is configured properly...
> >>
> >>[global]
> >>  printing = sysv
>
> >> lprm command = /usr/bin/cancel %p-%j
> >> lppause command = lp -i %p-%j -H hold
> >> lpresume command = lp -i %p-%j -H resume
> >> load printers = no
> >>
> >>[hp8100DN1]
> >> printer = hp8100dn_1
> >>comment = HP LaserJet hp8100 DN
> >>path = /var/spool/lp/tmp/samba
> >>guest account = nobody
> >>guest ok = yes
> >>browseable = yes
> >>printable = yes
> >>writable = yes
>
>
>
>
>
> 
> Opinions contained in this e-mail do not necessarily reflect
> the opinions of the Queensland Department of Main Roads,
> Queensland Transport or National Transport Secretariat, or
> endorsed organisations utilising the same infrastructure.
> If you have received this electronic mail message in error,
> please immediately notify the sender and delete the message
> from your computer.
> 

[Samba] Win95 & Win98 - NOT WORKING - NT,2000, XP are ok (reposted)

2003-03-12 Thread peter.a.bryant



Hey, thanks for your efforts anyway.

I don't know what to make of this.
Obviously a lot of things have changed between Samba 2.0.6 and 2.2.7a,
but I can't figure out why Win95 & 98 suddenly can't print.
I think you may be right - something to do with the new Samba using the
MS-RPCs...
which I imagine would mean a completely different printing method.
Do you think this would require a different printer driver on the 95/98 boxes??
>From what I read, I had the impression that it should all still work.

 I'd like to hear from anyone if they are successfully printing from Win95,
Win98 clients
 on a   Solaris server and using HP printers.

I'm sure many people must be successfully printing from 95/98, but maybe this
problem
is specific to my particular environment ?

I am contemplating your suggestion about the bug message.
Maybe another day or so of frustration and I will try it.

again - thanks muchly for your help.

-peter.

>Date: Mon, 10 Mar 2003 18:33:35 +0100
>From: "maraqas" <[EMAIL PROTECTED]>
>
>Hi Peter,
>i had a long, frunstrating web surfing yesterday night, searching for
>something
>that could apply to your case. I didn't find much at all, sorry. The only
>thing
>perhaps interesting to you could be this:
>http://us2.samba.org/samba/ftp/docs/htmldocs/printer_driver2.html
>This doc contains a section about migrating from 2.0.x to 2.2.x
>I think the problem lyes in the new way samba manages printing, that is
>by listening the MS-RPCs (Remote Procedure Call) coming from the
>winNT and win2000 clients. This is done thanks to spoolss, as i figured
>out reading here and there across the net. Well they say spoolss supports
>even win9x driver calls, even if those OSes do not actually make an RPC.
>They also say that backward compat. is reached through "use client driver"
>and "spoolss disable". With these options enabled, the samba server should
>act just like it was a 2.0.x
>I think you'd need help from the samba guys themselves, so i advice
>reposting this problem with a more shocking subject line (suggest to
>use the keyword BUG :)) so you'll be able to capture their attention.
>
>Really sorry not to have been useful to you...
>
>cheers
>
>Maq

>>Sorry to have to repost this (didn't get any response on the first post),
>>we really need some of the fixes of the new Samba but cannot go ahead without
the support for the older machines.
>>Need to prove that Samba is the great product that I believe it is.
>>
>>Hi folks - I am having printing problems with our older machines.
>>
>>Printing is working fine for our Windows NT, 2000 and XP clients.
>>However, with windows 95 & 98, the print job gets put into the Samba
>>spool directory (path = /var/spool/lp/tmp/samba)  but doesn't make it to the
printer.
>>The print files stay there in the directory - don't get removed.
>>
>>Samba version is 2.2.7a,  on Solaris 8
>>Printers are HP printers - e.g. HP 8100dn
>>
>>All clients including 95/98 were happily printing on a very much older version
of Samba (2.0.6)
>>
>>printing directly from Unix to the printer is working ok
>>
>>Has anyone experienced this problem or have any advice on how to
>>get my older boxes printing with the latest Samba?
>>
>>any thoughts welcome - no really - anything - please
>>:-)
>>
>>-peter.
>>
>>
>>(p.s. Just for a wild stab in the dark I tried setting the "disable spoolss =
yes"
>>but this stopped all printing from making it to the computer - even from the
clients that
>>were originally working.)
>>
>>
>>relevant bits of conf. file included below...
>>note that I don't have print command explicitly stated, but testparm
>>indicates that it is configured properly...
>>
>>[global]
>>  printing = sysv
   
 
>> lprm command = /usr/bin/cancel %p-%j
>> lppause command = lp -i %p-%j -H hold
>> lpresume command = lp -i %p-%j -H resume
>> load printers = no
>>
>>[hp8100DN1]
>> printer = hp8100dn_1
>>comment = HP LaserJet hp8100 DN
>>path = /var/spool/lp/tmp/samba
>>guest account = nobody
>>guest ok = yes
>>browseable = yes
>>printable = yes
>>writable = yes






Opinions contained in this e-mail do not necessarily reflect
the opinions of the Queensland Department of Main Roads,
Queensland Transport or National Transport Secretariat, or
endorsed organisations utilising the same infrastructure.
If you have received this electronic mail message in error,
please immediately notify the sender and delete the message
from your computer.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Windows XP and plain text password

2003-03-12 Thread John H Terpstra
On Wed, 12 Mar 2003, Kenny Mann wrote:

> I have yet to find samba for QNX with encpryption nor do I have the time
> to port it.
> If perhaps you know of a location (and I have tried google, although
> only for a short search), I would be more than happy to listen however
> that is the only method that I know.
>
> BTW, IF someone enabled plaintextpassword's does that mean that ALL of
> there passwords are plaintext or just any that can't be encrpyted?

Re-enabling plain text password support by the registry change does NOT
disable encrypted password support at all. It just re-enables plain text
based authentication.

MS Windows clients do NOT cache the plain text password, only the
encrypted password. So if you do not enable encrypted passwords on Samba
then when the MS Windows client drops a connection and later tries to
restore the connection, this later re-connect can only send the encrypted
password which will fail if you do not have this enabled in samba. The
result then will be a blue kiss of death screen on the client.

To enable encrypted passwords in samba: In smb.conf [globals] put:
encrypted password = Yes

Then for each of your users:
smbpasswd -a 'usern_name'

For some time now samba compiles in encrypted password ability, you just
need to enable it as per above.

- John T.

>
> THANKS!
>
> --KM
>
> > -Original Message-
> > From: Andrew Bartlett [mailto:[EMAIL PROTECTED]
> > Sent: Wednesday, March 12, 2003 3:55 PM
> > To: Kenny Mann
> > Cc: John H Terpstra; Sacha HAEGELIN; [EMAIL PROTECTED]
> > Subject: RE: [Samba] Windows XP and plain text password
> >
> >
> > On Thu, 2003-03-13 at 05:01, Kenny Mann wrote:
> > > Samba built for OS's such as QNX do not have the encryption
> > > capability. You must have plain text turned on. Perhaps he
> > is in the
> > > same position.
> >
> > Why?  It's certainly not a code-size issue, as there are much
> > bigger parts of samba...
> >
> > It seems a pretty lame excuse for almost complete
> > incompatibility with out-of-the-box installations.
> >
> > Andrew Bartlett
> >
> > --
> > Andrew Bartlett [EMAIL PROTECTED]
> > Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
> > Student Network Administrator, Hawker College   [EMAIL PROTECTED]
> > http://samba.org http://build.samba.org http://hawkerc.net
> >
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Windows XP and plain text password

2003-03-12 Thread Kenny Mann
I have yet to find samba for QNX with encpryption nor do I have the time
to port it.
If perhaps you know of a location (and I have tried google, although
only for a short search), I would be more than happy to listen however
that is the only method that I know.

BTW, IF someone enabled plaintextpassword's does that mean that ALL of
there passwords are plaintext or just any that can't be encrpyted?

THANKS!

--KM

> -Original Message-
> From: Andrew Bartlett [mailto:[EMAIL PROTECTED] 
> Sent: Wednesday, March 12, 2003 3:55 PM
> To: Kenny Mann
> Cc: John H Terpstra; Sacha HAEGELIN; [EMAIL PROTECTED]
> Subject: RE: [Samba] Windows XP and plain text password
> 
> 
> On Thu, 2003-03-13 at 05:01, Kenny Mann wrote:
> > Samba built for OS's such as QNX do not have the encryption 
> > capability. You must have plain text turned on. Perhaps he 
> is in the 
> > same position.
> 
> Why?  It's certainly not a code-size issue, as there are much 
> bigger parts of samba...
> 
> It seems a pretty lame excuse for almost complete 
> incompatibility with out-of-the-box installations.
> 
> Andrew Bartlett
> 
> -- 
> Andrew Bartlett [EMAIL PROTECTED]
> Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
> Student Network Administrator, Hawker College   [EMAIL PROTECTED]
> http://samba.org http://build.samba.org http://hawkerc.net
> 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba & ldap

2003-03-12 Thread Gregory Chagnon
Hi-
I'm using Samba & OpenLdap.  For each UID there is a field called 
ntpassword.  What type of hahsh is this?  Thanks!!
-Greg

_
Add photos to your e-mail with MSN 8. Get 2 months FREE*.  
http://join.msn.com/?page=features/featuredemail

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] 2000 and XP cannot join PDC, (but NT can)

2003-03-12 Thread Steve Jr Ramage
I'm running Samba 2.2.3a-12, on Debian 3.0r0, kernel: 2.2.20. 
I am trying to get my machines to join the domain, but alas nothing has
worked so far. My XP and 2000 machine give different errors (but upon
changing the Domain name to something other than the set one a different
error appears). 2000 and XP asks for a user/pass that has permission on
joining the domain. Which account is it? I have already added the
machine to the /etc/passwd and to smbpasswd as a machine... When I put
in the user/pass 2000 reports that the network path was not found, and
XP reports access is denied. The NT Machine is fine, any ideas? 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Are NT Tools compatible with Samba? && Auto join domains? &&Is a patch needed for XP?

2003-03-12 Thread Steve Jr Ramage
Do things like the User Manager for Domains work transparently with a
Samba PDC in 2.2.3 (if so how, since my first attempt failed miserably).
Similar to my other post is it even possible for a machine to join a
domain with out manually editing the passwd file and stuff? Someone told
me it is but I can't get it to work thus far (namely what account do I
use to add the user).

Thanks,
Steve


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] does 'all trusted domains' work?

2003-03-12 Thread unolinuxguru
Does the 'allow trusted domains' functionality in samba even work?  How is
it intended to work?

I have 2 domains, one run by an NT4 PDC and one run by a Samba PDC.  There
are Win98 clients on both of them.  How can I allow clients from the NT4
domain to access shares on the Samba domain?  Is this possible?  Any
enlightenment would be appreciated... =)

I have read every piece of samba documentation that I can find on this
topic (virtually nil) and still do not have an answer, or even a clear
understanding of what this function is supposed to do.  Can anyone help?

thanks, peace

> I would truly appreciate some help on this, it seems even the simplest
> things are so complicated!?...
>
> How does one enable samba shares through "allow trusted domains" to
> users of an nt4 domain?  Has anyone else done this?.. (I would hope so)
>
> see below for what I've tried...
>> I am running a samba pdc on host "debianpdc" for domain "linuxdom" and
>> have set "allow trusted domains = yes" in my [global] smb.conf file...
>> now how do I specify which domains to trust?
>>
>> I would like to trust an NT4 domain "nt4dom" run by the host "nt4pdc"
>> on the same network.
>
> I just need a general overview of what needs to be done please.  Looking
> at this chart [1] for the process of how authentication to a share is
> done from a user in a seperate 'trusted' domain, I do not know what I am
> missing, this seems it should be simple enough...
>
> I have an entirely new user "user2" created on the "nt4dom" domain, this
> user is completely unkown to the "linuxdom" domain.  From a Win98
> workstation "user2pc", "user2" can log on fine into "nt4dom" and
> everything works.
>
> I now want user2 to access a shared drive (//lnxmbrsvr/share, perms
> rwxrwxrwx) on a member server "lnxmbrsvr" in the domain "linuxdom".  I
> have configured "lnxmbrsvr" to have the following pertinent settings in
> it's smb.conf file:
>
> [global]
> security = domain
> password server = debianpdc
> allow trusted domains = yes
> add user script = ...(it works in the linuxdom domain)
>
> I have also added a unix+samba machine (trust?) account for the "nt4dom"
> primary domain controller "nt4pdc" and user2's workstation "user2pc" on
> this linux domain member server "lnxmbrsvr".  I have tested and
> reloaded+restarted the debianpdc and lnxmbrsvr samba servers.
>
> The nt4pdc has also been configured to trust the 'linuxdom' domain.  I
> see no helpful output in the samba logs, what am I possibly missing?
> (When user2 is logged on at user2pc workstation in nt4dom domain and
> tries to access //lnxmbrsvr/share in the linuxdom domain (prompted for
> \\LNXMBRSVR\IPC$) and supplies the password for the nt4dom, it still
> errors "The password is incorrect. Try again.")
>
>
> [1] http://samba.linuxbe.org/en/samba/config/domain-1.html#trusted



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba-2.2.7a on HPUX 11.00 trying to compile LDAP support

2003-03-12 Thread Damian Hickey
Dear all,

I am trying to use Samba with LDAP support so I can't use the CIFS
binaries.

I are having an issue with compiling samba-2.27.a (patched) on our HPUX
server.

I am configuring it with these Samba option flags:

--prefix=/opt/samba
--libdir=/etc/opt/samba
--localstatedir=/var/opt/samba
--with-privatedir=/var/opt/samba/private
--with-lockdir=/var/opt/samba/locks
--with-swatdir=/opt/samba/swat
--with-acl-support
--with-msdfs
--with-ldapsam
--with-profile
-disable-static

I have gcc-3.2 installed.

I run configure OK, but get an error when running gmake:

Compiling lib/snprintf.c 
lib/snprintf.c790: conflicting types for `snprintf' 
/opt/gcc/lib/gcc-lib/hppa2.0n-hp-hpux11.00/3.0.1/include/stdio.h:493:previous
declaration of `snprintf' 
***Error exit code 1 

I think the lines in conflict are:

gcc-3.2 stdio.h   "extern int snprintf(char *, _hpux_size_t, char
*,...);"

samba-2.2.7a/source/lib/snprintf.c " int snprintf(char *str,size_t
count,const char *fmt,...)"

but I do not know how to resolve the issue.

I'd love to know if you have had any success with this or have any
ideas.





With thanks,

Damian Hickey
Unix Administrator
Workcover Queensland
15th Floor, 280 Adelaide St.
Brisbane
ph 07 30066422
fax 07 30066424
mob 0421 093582


***
Messages included in this e-mail and any of its attachments are those
of the author unless specifically stated to represent WorkCover Queensland.
The contents of this message are to be used for the intended purpose only
and are to be kept confidential at all times. This message may contain
privileged information directed only to the intended addressee/s.
Accidental receipt of this information should be deleted promptly
and the sender notified.
This e-mail has been scanned by Sophos for known viruses.
However, no warranty nor liability is implied in this respect.
**

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Setting up PDC with PAM

2003-03-12 Thread Brian Wiese
On 11 Mar 2003 22:43:22 +1100
Andrew Bartlett <[EMAIL PROTECTED]> wrote:

|On Mon, 2003-03-10 at 17:09, Paul Cabot wrote:
|> According to the documentation on setting up Samba to be a PDC.  It
|> says that you have to enable encrypted passwords for it to work!
|> 
|> Now for Samba with PAM to work the documentation says that you can't 
|> have encrypted passwords enabled!
|
|Correct, for authentication.  The 'obey pam restrictions' is about
|'account' and 'session' properties like 'expired' and 'too many users'.

Does this apply for the 'password' properties as well?  Can one enforce
the PAM cracklib or passwdqc[1] modules to ensure strong passwords are
being used or not?  Would anyone be willing to contribute a working Samba
PAM config file to the list please?

[1] http://www.openwall.com/passwdqc/

|> So does that mean that I can't set up Samba has a PDC and use PAM to 
|> authenticate the users!
|
|Yes.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problem in listing print drivers in WinXP

2003-03-12 Thread Sanjay Wangoo
Hi,

I am facing strange problem with Windows-XP
and samba 2.2.7a. Every thing was working just fine
with Win2000, but with WinXP I am not able to see the
list of drivers that I already installed with Win2000.
So if I look at printer property of any printer on my
Samba Server they show only driver associated with 
that perticular printer but not the complete list
of drivers. Now I cannot change driver associated with
any printer to other driver already installed on
server. I have the printer name entry in the printcap
file.

I have following result from testparm.

Load smb config files from
/usr/local/icp/config/current/smb.conf
Processing section "[print$]"
Processing section "[share]"
Processing section "[printers]"
Processing section "[DQ]"
Loaded services file OK.
Press enter to see a dump of your service definitions
# Global parameters
[global]
 coding system = 
 client code page = 850
 code page directory =
/usr/local/icp/resources/codepages
 workgroup = DSE
 netbios name = ISPSERVER
 netbios aliases = 
 netbios scope = 
 server string = ispserver Print Server
 interfaces = eth0 127.0.0.1
 bind interfaces only = Yes
 security = USER
 encrypt passwords = Yes
 update encrypted = No
 allow trusted domains = Yes
 hosts equiv = 
 min passwd length = 5
 map to guest = Never
 null passwords = No
 obey pam restrictions = No
 password server = 
 smb passwd file = /usr/local/icp/private/smbpasswd
 root directory = 
 pam password change = No
 passwd program = /usr/bin/passwd
 passwd chat = *new*password* %n\n *new*password*
%n\n
*changed*
 passwd chat debug = No
 username map = /etc/samba/smbusers
 password level = 0
 username level = 0
 unix password sync = No
 restrict anonymous = No
 lanman auth = Yes
 use rhosts = No
 admin log = No
 log level = 3
 syslog = 1
 syslog only = No
 log file = %$(ISP)/var/samba/[EMAIL PROTECTED]
 max log size = 5000
 timestamp logs = Yes
 debug hires timestamp = No
 debug pid = No
 debug uid = No
 protocol = NT1
 large readwrite = Yes
 max protocol = NT1
 min protocol = CORE
 read bmpx = No
 read raw = Yes
 write raw = Yes
 nt smb support = Yes
 nt pipe support = Yes
 nt status support = Yes
 announce version = 4.9
 announce as = NT
 max mux = 50
 max xmit = 16644
 name resolve order = lmhosts host wins bcast
 max ttl = 259200
 max wins ttl = 518400
 min wins ttl = 21600
 time server = No
 unix extensions = No
 change notify timeout = 60
 deadtime = 0
 getwd cache = Yes
 keepalive = 300
 lpq cache time = 10
 max smbd processes = 0
 max disk size = 0
 max open files = 1
 name cache timeout = 660
 read size = 16384
 socket options = TCP_NODELAY SO_RCVBUF=8192
SO_SNDBUF=8192
 stat cache size = 50
 use mmap = Yes
 total print jobs = 0
 load printers = Yes
 printcap name = %$(TA_ISP_PRINTCAP)
 disable spoolss = No
 enumports command = %$(ISP)/scripts/listports
 addprinter command = %$(ISP)/scripts/addprinter
 deleteprinter command = 
 show add printer wizard = No
 os2 driver map = 
 strip dot = No
 mangling method = hash
 character set = 
 mangled stack = 50
 stat cache = Yes
 domain admin group = 
 domain guest group = 
 machine password timeout = 604800
 add user script = 
 delete user script = 
 logon script = 
 logon path = \\%N\%U\profile
 logon drive = 
 logon home = \\%N\%U
 domain logons = No
 os level = 20
 lm announce = Auto
 lm interval = 60
   

RE: [Samba] smbpasswd question

2003-03-12 Thread Andrew Bartlett
On Thu, 2003-03-13 at 08:18, [EMAIL PROTECTED] wrote:
> They do not need local accounts, however the company do not want to 
> support winbind

Is there any reason you cannot run 'security=domain' against the local
accounts, as indicated in the documentation?

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Threaten warnings while compiling Samba 2.2.7a onSolaris 2.5.1

2003-03-12 Thread Andrew Bartlett
On Tue, 2003-03-11 at 20:01, Pierre Lebrun wrote:
> I get warning messages while compiling samba 2.2.7a on Solaris with
> Sun cc 4.2
> - assignment type mismatch
> - argument #1 is incompatible with prototype
> - initializer does not fit or is out of range: -1
> 
> Must I change variables type in source code to fit what is guessed by 
> the compiler ?
> Is source 2.2.7a not compatible with Solaris 2.5.1 ?

Any portable C program will cause warnings on some compilers.  We aim to
reduce the number of warnings, as they can indicate bugs, but just the
compiler's warning alone does not mean there must be a bug on that
line.  Some parts of the Samba code do not cast between signed and
unsigned characters - and for our purposes they are identical.  This
kind of thing will cause a warning.  Likewise our use of 'const' may
cause warnings when compiling against broken LDAP headers.

Because these warnings *can* indicate bugs, we compile samba after every
checkin on over 30 different compiler/arch combinations at
build.samba.org, and developers are encouraged to study the compiler
output presented there.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Windows XP and plain text password

2003-03-12 Thread Andrew Bartlett
On Thu, 2003-03-13 at 05:01, Kenny Mann wrote:
> Samba built for OS's such as QNX do not have the encryption capability.
> You must have plain text turned on. Perhaps he is in the same position.

Why?  It's certainly not a code-size issue, as there are much bigger
parts of samba...

It seems a pretty lame excuse for almost complete incompatibility with
out-of-the-box installations.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] smbpasswd question

2003-03-12 Thread SPURGEON_MATHEW_D
They do not need local accounts, however the company do not want to 
support winbind





Chris McKeever <[EMAIL PROTECTED]>
03/12/2003 04:13 PM

 
To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>, Chris 
McKeever <[EMAIL PROTECTED]>
cc: [EMAIL PROTECTED]
Subject:RE: [Samba] smbpasswd question


do they need local account on the samba machine? if not you can just do 
all password validation off the PDC
 
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 12, 2003 3:15 PM
To: Chris McKeever
Cc: [EMAIL PROTECTED]
Subject: RE: [Samba] smbpasswd question


No winbind is not running. 
Each user has an account on the UNIX machine

Mathew Spurgeon
Eli Lilly and Company
Software Engineering Support Team
Phone: (317)  276-7436
Mobile:  (317)  716-7789
http://mcntstep03.d51.lilly.com/SEST
[EMAIL PROTECTED] 



Chris McKeever <[EMAIL PROTECTED]> 
03/12/2003 04:07 PM 

To:"'[EMAIL PROTECTED]'" 
<[EMAIL PROTECTED]>, [EMAIL PROTECTED] 
cc: 
Subject:RE: [Samba] smbpasswd question



is winbind running?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 12, 2003 3:04 PM
To: [EMAIL PROTECTED]
Subject: [Samba] smbpasswd question


When I add my windows id and password to the smbpasswd -a it works fine, 
however I need to add all the users to the smbpasswd and I do not know 
everyone's password.  Is there a way to get this password directly from 
the PDC.  I have the smb.conf file setup as security = domain and the 
machine successfully joined the domain a week ago.


Mathew Spurgeon
Eli Lilly and Company
Software Engineering Support Team
Phone: (317)  276-7436
Mobile:  (317)  716-7789
http://mcntstep03.d51.lilly.com/SEST
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] smbpasswd question

2003-03-12 Thread Chris McKeever
do they need local account on the samba machine? if not you can just do all
password validation off the PDC
 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 12, 2003 3:15 PM
To: Chris McKeever
Cc: [EMAIL PROTECTED]
Subject: RE: [Samba] smbpasswd question



No winbind is not running. 
Each user has an account on the UNIX machine

Mathew Spurgeon
Eli Lilly and Company
Software Engineering Support Team
Phone: (317)  276-7436
Mobile:  (317)  716-7789
http://mcntstep03.d51.lilly.com/SEST
[EMAIL PROTECTED] 



Chris McKeever <[EMAIL PROTECTED]> 


03/12/2003 04:07 PM 



To:"'[EMAIL PROTECTED]'"
<[EMAIL PROTECTED]>, [EMAIL PROTECTED] 
cc: 
Subject:RE: [Samba] smbpasswd question



is winbind running?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 12, 2003 3:04 PM
To: [EMAIL PROTECTED]
Subject: [Samba] smbpasswd question


When I add my windows id and password to the smbpasswd -a it works fine, 
however I need to add all the users to the smbpasswd and I do not know 
everyone's password.  Is there a way to get this password directly from 
the PDC.  I have the smb.conf file setup as security = domain and the 
machine successfully joined the domain a week ago.


Mathew Spurgeon
Eli Lilly and Company
Software Engineering Support Team
Phone: (317)  276-7436
Mobile:  (317)  716-7789
http://mcntstep03.d51.lilly.com/SEST
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] smbpasswd question

2003-03-12 Thread SPURGEON_MATHEW_D
No winbind is not running.
Each user has an account on the UNIX machine

Mathew Spurgeon
Eli Lilly and Company
Software Engineering Support Team
Phone: (317)  276-7436
Mobile:  (317)  716-7789
http://mcntstep03.d51.lilly.com/SEST
[EMAIL PROTECTED]




Chris McKeever <[EMAIL PROTECTED]>
03/12/2003 04:07 PM

 
To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>, 
[EMAIL PROTECTED]
cc: 
Subject:RE: [Samba] smbpasswd question


is winbind running?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 12, 2003 3:04 PM
To: [EMAIL PROTECTED]
Subject: [Samba] smbpasswd question


When I add my windows id and password to the smbpasswd -a it works fine, 
however I need to add all the users to the smbpasswd and I do not know 
everyone's password.  Is there a way to get this password directly from 
the PDC.  I have the smb.conf file setup as security = domain and the 
machine successfully joined the domain a week ago.


Mathew Spurgeon
Eli Lilly and Company
Software Engineering Support Team
Phone: (317)  276-7436
Mobile:  (317)  716-7789
http://mcntstep03.d51.lilly.com/SEST
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] smbpasswd question

2003-03-12 Thread Chris McKeever
is winbind running?

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 12, 2003 3:04 PM
To: [EMAIL PROTECTED]
Subject: [Samba] smbpasswd question


When I add my windows id and password to the smbpasswd -a it works fine, 
however I need to add all the users to the smbpasswd and I do not know 
everyone's password.  Is there a way to get this password directly from 
the PDC.  I have the smb.conf file setup as security = domain and the 
machine successfully joined the domain a week ago.


Mathew Spurgeon
Eli Lilly and Company
Software Engineering Support Team
Phone: (317)  276-7436
Mobile:  (317)  716-7789
http://mcntstep03.d51.lilly.com/SEST
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] smbpasswd question

2003-03-12 Thread SPURGEON_MATHEW_D
When I add my windows id and password to the smbpasswd -a it works fine, 
however I need to add all the users to the smbpasswd and I do not know 
everyone's password.  Is there a way to get this password directly from 
the PDC.  I have the smb.conf file setup as security = domain and the 
machine successfully joined the domain a week ago.


Mathew Spurgeon
Eli Lilly and Company
Software Engineering Support Team
Phone: (317)  276-7436
Mobile:  (317)  716-7789
http://mcntstep03.d51.lilly.com/SEST
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Backup - suggestions needed....

2003-03-12 Thread TJ Davis
I use taper as my backup software and it works VERY well.  Free is good too.
:-)

http://taper.sourceforge.net/



-Original Message-
From: Chris McKeever [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 12, 2003 2:29 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Backup - suggestions needed


Linux RH 7.3, Samba 2.2.7a
NT 4.0 SP6 - Backup Exec 8.5

The linux box is running the Backup Exec client for Unix
('http://seer.support.veritas.com/docs/192093.htm')

Occasionally, when doing a backup the entire linux system freezes.  I have
to do a hard reboot without a shutdown, etc.
There is 40 plus gigs on the backup, so I dont think a tar and copy would be
bery efficient.

I am wondering a couple things here:

1.  Is anyone successfull with doing a backup off of linux using BE and the
BE agent for UNIX?

2.  Is there a better way to do this?  I thought I could be able to connect
to the samba share and pull it off that way, but that doesnt work...

Any help on this would be greatly appreciated.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbmount - again

2003-03-12 Thread bkrusic
So basically you don't have anything helpful for me
regarding my smbmount issue other than esoteric
comments?

Bri-

__
Do you Yahoo!?
Yahoo! Web Hosting - establish your business online
http://webhosting.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Backup - suggestions needed....

2003-03-12 Thread Chris McKeever
Linux RH 7.3, Samba 2.2.7a
NT 4.0 SP6 - Backup Exec 8.5

The linux box is running the Backup Exec client for Unix
('http://seer.support.veritas.com/docs/192093.htm')

Occasionally, when doing a backup the entire linux system freezes.  I have
to do a hard reboot without a shutdown, etc.
There is 40 plus gigs on the backup, so I dont think a tar and copy would be
bery efficient.

I am wondering a couple things here:

1.  Is anyone successfull with doing a backup off of linux using BE and the
BE agent for UNIX?

2.  Is there a better way to do this?  I thought I could be able to connect
to the samba share and pull it off that way, but that doesnt work...

Any help on this would be greatly appreciated.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbmount - again

2003-03-12 Thread David Morel
Gurnish Anand wrote:
No...nfs is a part of the kernel..and not samba

David Morel wrote:


SMB is a better choice than NFS for many reasons,
especially for the fact that its user based and not
kernal based
er... smbfs is part of the kernel as far as i know...

David
okay, let's rephrase that: smbmount is a wrapper which uses smbfs which 
 IS a kernel fs module. smbmount does not use the samba suite, or to a 
limited extent only. The client part in the samba package is smbclient, 
which itself has nothing to see whith smbfs. I might be wrong though..

David.



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Is there a way?

2003-03-12 Thread Morgan Toal
Esler, Joel Contractor wrote:

Is there a way to make clients not see "hidden" shares?  Like we have an
"I:" drive, but it's actually a "Common-Share"...
Appending a $ on to a share name will make it not browseable in Network Neighborhood.

Also saying "browseable = no" will also make it not browseable.

Also a DFS may be of interest to you. We have departmental shares in a DFS root share. That way, 
everyone sees drive "X:", with their department's folder inside.
All the departmental shares are in "X:" but the users only see the ones they have 
priveleges to.
DFS info: http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection.html#MSDFS

Does this help?

mtoal

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbmount - again

2003-03-12 Thread bkrusic
> er... smbfs is part of the kernel as far as i
> know...

er.. isn't Samba a userspace program where as NFS is
not?

er... this is the context by which my statement is
true.

er... thanks.

er...
Bri-

__
Do you Yahoo!?
Yahoo! Web Hosting - establish your business online
http://webhosting.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Is there a way?

2003-03-12 Thread Sylvestre TABURET
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wednesday 12 March 2003 01:52 pm, Esler, Joel Contractor wrote:
> Is there a way to make clients not see "hidden" shares?  Like we have
> an "I:" drive, but it's actually a "Common-Share"...
>
> Thoughts?
>
> Joel

what clients? what servers? and what does "Invisible" mean?

I mean do you want to make a samba share non-browseable to windows users 
(1), or are you afraid linux users might see a windows share despite 
calling it "COMMON$" so it's hidden to windows browsers (2)?

If your concern is (1) then you just need to add "browseable = no" to the 
share definition. If your concern is (2), then you need to switch from NT 
to samba, so you get a (1)-type configuration...

Cheers
- -- 
| Sylvestre TABURET - 1024D/030E1B7E
| . MandrakeSoft - [EMAIL PROTECTED]
| . Hewlett-Packard - [EMAIL PROTECTED]
| CCA07:7809, 20555 SH 249, Houston, TX, 77070 - USA
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (GNU/Linux)

iD4DBQE+b5VGBot2zwMOG34RAqVeAKC47bFRxbcv4+3UmhqugWF5rWQ2BACWKO+3
eMZnWZpp9uUjws1c1OoUAA==
=aPUw
-END PGP SIGNATURE-

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbmount - again

2003-03-12 Thread Gurnish Anand
No...nfs is a part of the kernel..and not samba

David Morel wrote:

> > SMB is a better choice than NFS for many reasons,
> > especially for the fact that its user based and not
> > kernal based
>
> er... smbfs is part of the kernel as far as i know...
>
> David
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Is there a way?

2003-03-12 Thread Esler, Joel Contractor
Is there a way to make clients not see "hidden" shares?  Like we have an
"I:" drive, but it's actually a "Common-Share"...

Thoughts?

Joel
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] NisPlus

2003-03-12 Thread Paul Hong
Hi all,
I am trying to transfer all my NT domain user names and passwords into Samba.

Whats the difference between Nisplus and winbindd?
Which one is more suitable for what I want to do?

Thanks,
-Paul Hong
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbmount - again

2003-03-12 Thread David Morel

SMB is a better choice than NFS for many reasons,
especially for the fact that its user based and not
kernal based 
er... smbfs is part of the kernel as far as i know...

David

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Copying Files

2003-03-12 Thread TJ Davis
For some reason when I try to copy some files from a windows machine to a
samba share on a particular Linux server it creates the filename on the
share and then gives me the following error:

This folder already contains a file named "foo.exe"

Would you like to replace the existing file which is 0 bytes
with this one which is 13.4mb

It does not do this with all files.  I copied two different iso files that
are approximately 650mb fine several times but I have tried with exe files
and some work while some do not.




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Winbindd on FreeBSD?

2003-03-12 Thread Markus Schanovsky
Hello!
I try to run Samba 2.7.7.a on FreeBSD - 4.7 and 5.0.
I installed from the ports and from the original source.

Every time I get a compiler error according to the files
nsswitch/pam_winbind.c and pam_winbind.h - PAM_AUTHTOK_RECOVER_ERR
undefined - and then exit.

I tried to solve the problem patching the source file - so all will be
compiled and linked well.

Winbindd is able to run, but nothing else - wbinfo -p is not able to ping my
winbindd.

Is winbindd not able to be compiled under FreeBSD?

With best regards from Vienna
Markus Schanovsky

paedagogical institute of the vienna council
http://www.pi-wien.at



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] documentation project

2003-03-12 Thread Igor Debacker
Greetings from Brazil,

I want to know if are there any Brazilians here which want to create a home page with 
documentation for people who wants to use SAMBA.

I've just finished some projects here, and have documentated stuff which i want to 
share with other users.

I want to know if it is possible to add a link in the samba.org home page for a 
possible site for Brasilians users.

Waiting Answers,

Igor Vieira Debacker
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Client hang w/Samba

2003-03-12 Thread John Goerzen
Hi,

We are trying to move from a Novell to a Samba server here, but are
encountering a strange problem.

We are storing several applications on a Samba share and running them
from there.  Most are working OK.  For one particular application
(which requires read/write permissions on the server since it stores
data there), the first user to enter the application has no problems.
It is lightning fast.  The second user to enter the application will
just be stuck waiting for at least five minutes, and then experience
very slow loading after that.  But, if the first user exits the
application, the second user's session immediately continues at normal
speed.

This made me think that locking was to blame, so I went ahead and set
blocking locks = no for the share in smb.conf.  This did not solve the
problem; it appeared to have no impact at all.

Do you have any other suggestions for things I might try?

The server is Samba 2.2.3a and the clients are Windows 95 or 98.

Thanks,
John Goerzen


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Printers Icon

2003-03-12 Thread pamela . wade
Thanks again.  I added the additional entries, and it is now working. 
Samba is starting from inetd, so there is no stop/start scripts involved.

Pamela M. Wade
IT Systems Engineering








[EMAIL PROTECTED]


03/12/2003 01:13 PM

 
To: [EMAIL PROTECTED]
cc: [EMAIL PROTECTED]
Subject:Re: [Samba] Re: Printers Icon


Hi,

So in addition I also have;

load printers = no
show add printer wizard = no
disable spoolss = yes

You did restart samba right?  Just asking :)

Bri-

__
Do you Yahoo!?
Yahoo! Web Hosting - establish your business online
http://webhosting.yahoo.com


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Printers Icon

2003-03-12 Thread bkrusic
Hi,

So in addition I also have;

load printers = no
show add printer wizard = no
disable spoolss = yes

You did restart samba right?  Just asking :)

Bri-

__
Do you Yahoo!?
Yahoo! Web Hosting - establish your business online
http://webhosting.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Printers Icon

2003-03-12 Thread pamela . wade
Thanks for the information.  I added that parameter in the conf file under 
the global section, but for some reason, I am still seeing the Printers 
Icon on Windows2000

Pamela M. Wade
IT Systems Engineering








[EMAIL PROTECTED]


03/12/2003 12:46 PM

 
To: [EMAIL PROTECTED]
cc: [EMAIL PROTECTED]
Subject:Re: [Samba] Re: Printers Icon


Hi,

Yes, I didn't like this icon either.  Do this on the
conf file;

disable spoolss = yes

Bri-

__
Do you Yahoo!?
Yahoo! Web Hosting - establish your business online
http://webhosting.yahoo.com


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Windows XP and plain text password

2003-03-12 Thread Kenny Mann
Samba built for OS's such as QNX do not have the encryption capability.
You must have plain text turned on. Perhaps he is in the same position.

--KM

> -Original Message-
> From: John H Terpstra [mailto:[EMAIL PROTECTED] 
> Sent: Wednesday, March 12, 2003 11:08 AM
> To: Sacha HAEGELIN
> Cc: [EMAIL PROTECTED]
> Subject: Re: [Samba] Windows XP and plain text password
> 
> 
> On Wed, 12 Mar 2003, Sacha HAEGELIN wrote:
> 
> > Hello,
> >
> > Can you say me which is the key to add in the registry for 
> Windows XP 
> > to Enable Plain Text Password?
> 
> Sacha,
> 
> You obtained your answer, but why do you want to enable plain 
> text passwords? I hope you are aware the plain text passwords 
> and domain security do not work together. I recommend that 
> you do NOT use plain text password handling as it is basically broken.
> 
> - John T.
> -- 
> John H Terpstra
> Email: [EMAIL PROTECTED]
> 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Mandatory profile changes languagesetting

2003-03-12 Thread Tarjei
Hi,


I've set up a domain where some of my users are using mandatory profiles
to logon to the network. However, I got one problem that just doesn't go
away.

When my users log on, they do not get the correct keyboard setting -
even if it is the same as configured for the mandatory user + all other
users on the client machine. Instead the users get the us-keyboard
settings.

Also the users are not allowed to install og modify printers using
mandatory profiles.

Does anyone know what is causing this? Has anyone experienced the same
problem?

If this is an ACL issue, how do I debug it? 
(I've already set nt acl support= no on the profile share.

System: 
RH 8.0 using default samba w/ Samba-tng as dc. Profileshare on samba. 

Share setup:
[profiles]
create mode = 0770
oplocks = no
nt acl support = no
 comment = profiles
 path = /home/samba/profiles
 read only = no
 public = yes


The mandatory profile dir is set up so no user may write to it, but they
got r-x perms on all the files there. 

I would be happy for any help in solving this.

Cheers,
tarjei


-- 
Tarjei <[EMAIL PROTECTED]>
Natur og Ungdom

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Printers Icon

2003-03-12 Thread bkrusic
Hi,

Yes, I didn't like this icon either.  Do this on the
conf file;

disable spoolss = yes

Bri-

__
Do you Yahoo!?
Yahoo! Web Hosting - establish your business online
http://webhosting.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Printers Icon

2003-03-12 Thread pamela . wade
Actually when accessing the resource from Windows2000, I am seeing the 
Printers icon, but on Windows98, I am only seeing the shared resource.  I 
don't want the Printers Icon to be viewable at all, regardless of the 
Windows OS type.

Pamela M. Wade
IT Systems Engineering








Pamela Wade


03/12/2003 12:31 PM

 
To: [EMAIL PROTECTED]
cc: 
Subject:Printers Icon 

I have installed Samba2.2.7a on an Ultra5 Solaris 8 Operating System.  The 
smb.conf file has been configured and all appears to work fine.  However, 
along with my shared resource, I am seeing the Printers icon.  I only want 
to use Samba to share resources, and not for printing. Is there a way to 
make the Printers Icon invisible?  I already tried the hide files, and 
veto files parameters in the smb.conf file, but that did not appear to 
work.  Any suggestions

Pamela M. Wade
IT Systems Engineering





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Printers Icon

2003-03-12 Thread pamela . wade
I have installed Samba2.2.7a on an Ultra5 Solaris 8 Operating System.  The 
smb.conf file has been configured and all appears to work fine.  However, 
along with my shared resource, I am seeing the Printers icon.  I only want 
to use Samba to share resources, and not for printing. Is there a way to 
make the Printers Icon invisible?  I already tried the hide files, and 
veto files parameters in the smb.conf file, but that did not appear to 
work.  Any suggestions

Pamela M. Wade
IT Systems Engineering



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: How to verify the domain secret is good or bad?

2003-03-12 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 11 Mar 2003, Chere Zhou wrote:

> I know there is the command "wbinfo -t".  But when it says that "could not 
> check secret", how do I know it's the secret is bad, or something else wrong, 
> like winbind went crazy maybe?  

winbindd has to be running to check the secret.

> Also, sometimes I saw problems like "wbinfo -t" just says "secret is bad", 
> when all the daemons were running.  It sure was good at some point before.  

Samba periodially changes the password on the server.  secrets.tdb should 
be in sync with this.  





cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+b27kIR7qMdg1EfYRAjFkAJ9OwmyQjfz2wiHL8/WoWPfZhd+w0wCZAYJn
03pUnG6Vd0Nv8u0abJLmm14=
=Did/
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] winbind and NT must change password at next logon.

2003-03-12 Thread Rob Keeling
How do I configure samba / winbind & pam to allow a user to change their password if 
the "change password at next logon password"
is set?

I am trying to intergrate a number of samba boxes (2.2.7a) into an existing Windows NT 
domain.

What I really want to happen is the same as loging in on a windows box i.e. xdm logon 
via pam, if the users
password needs to be changed a requester is displayed.

Is this possible?

Rob Keeling
Queen Elizabeth`s Grammar School

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] smbmount - again

2003-03-12 Thread bkrusic
Hi,

Why is it that when asking "whats create mode 777"
gets an answer which with a simple google search or
reading Unix basics coulda been answered anyways.

But my smbmount Q which is not answered?

So once again, 

Is there a way to use smbmount so as to inherit the
perms set forth by the remote file server?

I'd rather not use the options of;

- guest
- credentials file

as the file system that I'd like to mount has many
diff uids/gids set.

SMB is a better choice than NFS for many reasons,
especially for the fact that its user based and not
kernal based so if you're gonna say use NFS, please
don't :).

Bri-



__
Do you Yahoo!?
Yahoo! Web Hosting - establish your business online
http://webhosting.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Windows XP and plain text password

2003-03-12 Thread John H Terpstra
On Wed, 12 Mar 2003, Sacha HAEGELIN wrote:

> Hello,
>
> Can you say me which is the key to add in the registry for Windows XP to
> Enable Plain Text Password?

Sacha,

You obtained your answer, but why do you want to enable plain text
passwords? I hope you are aware the plain text passwords and domain
security do not work together. I recommend that you do NOT use plain text
password handling as it is basically broken.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problems with Samba as PDC

2003-03-12 Thread Andre Meiske
I've got an ugly problem... hope somebody can help:

I upgraded from Samba 2.2.5a to 2.2.7a yesterday (SuSE RPM update). 
Since then, all connected Windows computers show strange behaviour: 
Depending on the computer, only a few selected users can log in - but 
the users able to log in change from computer to computer. None of 
them have any local accounts on the machines in question, just the 
global Samba-managed Domain account. Additionally, on some machines I 
can log in as 'Administrator' (being an alias for the Linux-side 
account 'root', defined in smbusers) whereas on most other machines I 
need to log in as 'root'. 

Any suggestions where I should look or how I could debug this problem? 
Setting the debuglevel to 10 and trying to log in just floods me with 
messages I don't quite understand. Only real difference between 
successful logins and unsuccessful logins is that for the 
unsuccessful logins there's never a line saying 

  'smb_password_ok: Checking SMB password for user '

This line only shows up in the logs for successful logins.

I'm grateful for any kind of help
  Andre Meiske

PS: After I temporarily downgraded back to 2.2.5a, the problem 
remained, and even a self-compiled Samba 2.2.7a shows the same 
strange behaviour, so I think it's a configuration setting - I just 
can't find anything.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba & XP Professional

2003-03-12 Thread Antonio Moya Krijer
I configure the XP for a domain validation "TYC.ES", ask me for 
USER/PASS root/, the name of the machine that runs SAMBA have the 
machine account antoniou$, group XPstation, and this user "antoniou$" 
and root in the samba passwd database, my smb.conf  it's something like 
this:
# Global parameters

[global]
   workgroup = tyc.es
   server string = HAL9000
   netbios name = HAL9000
   interfaces = eth0
   bind interfaces only = yes
   map to guest = Bad User
   username map = /etc/users.map
   password level = 5
   keepalive = 30
   character set = ISO8859-1
   logon path = /usr/lib/samba/netlogon
   logon script = %U.bat
   csc policy = disable
   profile acls = yes # When i run the command "testparm 
/etc/samba/smb.conf", it tells me that this directive is unknown for 
samba ¿?
   domain logons = yes
   domain master = yes
   local master = yes
   preferred master = yes
   os level = 65
   preferred master = True
   domain master = True
   kernel oplocks = No
   create mask = 0660
   directory mask = 0770
   hosts allow = 192.168.254. EXCEPT 192.168.254.8
   wins support = yes
   encrypt passwords = yes
   log level = 3
   log file = /var/log/samba.log

[tmp]
   path = /tmp
   browseable = yes
   writeable = yes
[homes]
   comment = Homes de Usuarios
   read only = No
   create mask = 0750
   browseable = No
[netlogon]
   path = /usr/lib/samba/netlogon

The file i want to run when the XP boots contain various route commands 
and net time.
It has permissions 755 root:root.

I try with NAMEOFMACHINE.bat "antoniou.bat"
"   root.bat
Thanks.

Kurt Weiss escribió:



Antonio Moya Krijer schrieb:

Hi,

I have a linux SuSE 8.1 with samba 2.2.5 Release 80.

I have a Windows XP Professional  that is member of a Samba domain, 
authentication it's OK but i have a profile in /usr/lib/samba/netlogon 


u mean: a script?
(or a roaming profile???)
that i want to execute when the XP boots, i don't know what's happening.

I have read the "How to" documentation

Can you help me, please?

Thanks a lot.



.



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Windows XP and plain text password

2003-03-12 Thread Kenny Mann
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\p
arameters
enableplaintextpassword

--Kenny Mann

> -Original Message-
> From: Sacha HAEGELIN [mailto:[EMAIL PROTECTED] 
> Sent: Wednesday, March 12, 2003 8:28 AM
> To: [EMAIL PROTECTED]
> Subject: [Samba] Windows XP and plain text password
> 
> 
> Hello,
> 
> Can you say me which is the key to add in the registry for 
> Windows XP to Enable Plain Text Password?
> 
> Best Regards
> 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Windows XP and plain text password

2003-03-12 Thread Sacha HAEGELIN
Hello,

Can you say me which is the key to add in the registry for Windows XP to
Enable Plain Text Password?

Best Regards
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: gpedit.msc as centralized policy for 2k/xp clients indomain

2003-03-12 Thread Wolfgang Ratzka
-BEGIN PGP SIGNED MESSAGE-

John Newhouse schrieb:
| I found this from
http://charon.minilab.bdeb.qc.ca/anonym/nt/2000/ads/TTGW2KGP_Vol1through4.pdf
|
| I would like to figure out how to do this gpedit.msc+AD+gpc+gpt magic for
win2k/xp with
| linux+samba(2.2/3.0/tng)+openldap and is it possible at all?
Group policies are stored in Active Directory. Current samba development
is still improving on "good old" Windows NT 4.0 domain services. I would
suspect, that Active Directory services on samba will not be available
anytime soon. (I would love to be proven wrong :-) on that.)
- --
Wolfgang Ratzka  Phone: +49 6421 2823531  FAX: +49 6421 2826994
Uni Marburg,  HRZ, Hans-Meerwein-Str., D-35032 Marburg, Germany
~  http://www.uni-marburg.de/hrz/mitarbeiter/ratzka.html
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iQEVAwUBPm9PiRwiO5rz0xULAQHG8Qf+NmOjxJfMAG8vKu0UQiSub4P9bM/vh9k7
67H/B5105nICEnK8VCX4WcGr9+bKv5P5EwnrhJ0CNnFwAGc2uxT99utECsKnV7Tp
czvU3YarmVxFXGF6eLz5ZF1ApA8l+qusKhdNn1F9BBx57a4qYeVUqXGbMdLcUmOi
7IyH34S8LNELlc49eyHB7pBKjsjv48iecVrcMotqPaGXxZGgv37yOx1fd4cKMI8I
d8bJKckzLy/WKrhq55zEd1pu8//KEbUY56tGgFTMNmWn8e0b+d9HKS/5DPa76aOO
c8gNQA7zjUWnBk5bPdIxkKmmWItWlMwYx/OMGPPH2ODGQAxHtasAyw==
=p713
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] pam_mkhomedir.so

2003-03-12 Thread Buchan Milne
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

> From: [EMAIL PROTECTED]
> To: <[EMAIL PROTECTED]>
> Date: Wed, 12 Mar 03 10:16:59 +0100
> Subject: [Samba] pam_mkhomedir.so

> Problem is how to setup samba for automatic home directory
> creating. Maybe smb.conf is incorrect, but if I create home
> directory manually, samba log me in without problems.
>
> Second question.Computers in network are under W2k PDC. Everytime
> I try to login into Mandrake via putty(ssh) and I'm not as local
> user (on mandrake) but I'm domain user, pam_mkhomedir.so writes
> this:'Can't change directory to /home/DOMAIN/user (No such file
> or directory)'. But if I manually create directory /DOMAIN under
> /home and change mode for /DOMAIN to 777 then directory /user
> will be create automatically.

You should only need to have all users have x permission on /home/DOMAIN
(ie chmod a+x /home/DOMAIN should do it).

> But this is valid only for ssh
> access. Samba still does not create directory /user.

As Andrew answered, use "obey restrictions = yes". BTW, you should not
need to modify your /etc/pam.d/samba at all if you use the method below:

>
> So. I need to setup auto creat of directory:/home/DOMAIN/user for
> each service.
>
> Next question is, if is possible to configure all of services
> (login, telnet, ftp, ssh, samba, kde...) centrally in one file or
> somewhere. Or it is not possible?

Replace your /etc/pam.d/system-auth with the
/etc/pam.d/system-auth-winbind that ships with Mandrake.

BTW, you can have Mandrake 9.0 setup winbind for you (only available in
installation) by doing an expert install, and choosing "Windows Domain"
as authentication method in the dialog where you enter the root
password. In the dialog where you are propmted for the domain
name/username/password to use to join the domain, just enter your domain
in capitals (small buglet, should be fixed for 9.1). In this case, you
do not need to worry about the /etc/pam.d/system-auth, it is done for you.

For more info on winbind setup in Mandrake (with some examples and some
configs that you may need to change) see:
http://ranger.dnsalias.com/mandrake/samba/Integrating%20Linux%20into%20Windows%20Networks.tar.gz

Regards,
Buchan

- --
|--Another happy Mandrake Club member--|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE+b0xcrJK6UGDSBKcRAtKbAJ9xWV/lF/Rss0tAIObn1I643sg/hACgqHn4
0XnPjKAEAay4nU620UHi0k4=
=UGf8
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] WINS server not appearing in Nethood

2003-03-12 Thread Morgan Toal
Gary Stainburn wrote:
Hi folks,

I've had a setup working for quite some time and everything's fine except that 
the server that hosts the WINS never appears in the network neighbourhood, 
and when trying to connect to that server there is a small delay.

As few people need to browse to it, the problem's had a low priority as the 
WINS side of it is working fine, and the rest of the nethood is also working 
fine.

However, when I tried to use smbclient to connect to itself today I saw an 
error message which may relate to the problem, and therefore possibly point 
to a fix.

Below is the session I am talking about, followed by the basics from my 
smb.conf. 10.2.1.2 is a Linux box at a remote site, running as browse master 
for the Doncaster workgroup.

[EMAIL PROTECTED] cgi-bin]# smbclient //larry/pdf
added interface ip=10.1.1.101 bcast=10.1.255.255 nmask=255.255.0.0
wins_srv_died(): Could not mark WINS server 127.0.0.1 down.
Address not found in server list.
Password:
Domain=[LEEDS] OS=[Unix] Server=[Samba 2.2.1a]
smb: \> 
Firstly, have we restarted smbd and nmbd lately?

I just had an issue with cross-subnet browsing myself. You only need one WINS server for the whole WAN.

I removed all the remote browse announce and remote sync statements. I picked one samba box to be the WINS server, set the other samba boxen to use it for WINS. Each site in the WAN is it's own domain so each site needs a "domain master = yes".

regards,
mtoal


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Weird (again)

2003-03-12 Thread Morgan Toal
Igor Debacker wrote:

i installed it in other 5 machines .. changed their netbios and ip,
but when i tryed to use these new machines .. only the last machine i turn on
could be able to log in.. in some way they were conflicting.. 
One issue may be duplicate netbios machine names. 
They do need to be unique within the workgroup.

Control Panel | Network and Dialup | Advanced | Network Identification

Are you cloning your w2k workstations?

If so, you need to run SYSPREP to generate a new SID and other stuff.
This actually works reasonably well.
See http://www.microsoft.com/windows2000/downloads/tools/sysprep/default.asp

regards,
mtoal
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] gpedit.msc as centralized policy for 2k/xp clients in domain

2003-03-12 Thread John Newhouse

I found this from
http://charon.minilab.bdeb.qc.ca/anonym/nt/2000/ads/TTGW2KGP_Vol1through4.pdf

I would like to figure out how to do this gpedit.msc+AD+gpc+gpt magic for
win2k/xp with linux+samba(2.2/3.0/tng)+openldap and is it possible at all?

Thanks.

Although GPOs provide significantly more policy features than NT 4.0 System
Policy provides,
GPOs are stored and processed differently than NT 4.0 System Policy is. In
NT 4.0, the System
Policy file (often called ntconfig.pol) is stored in the Netlogon share on
domain controllers
within an NT 4.0 domain. When an NT 4.0 user logs onto a workstation in an
NT 4.0 domain,
the system reads the System Policy file from the Netlogon share, then sets
registry values that are
specific to a computer, user, or user group according to the policy file. NT
4.0 allows only a
single policy file to be processed at a given time. NT 4.0 System Policy
could apply to a specific
computer (or all computers), a specific user (or all users), or an NT 4.0
domain global group.
In contrast, GPOs are composed of two parts: the Group Policy Container
(GPC), which is stored
within Active Directory (AD), and the Group Policy Template (GPT), which is
stored within the
replicated SYSVOL folder on all AD domain controllers in a domain. Whereas
System Policy is
processed only when a user logs onto an NT 4.0 workstation, GPOs are
processed at both
machine startup (at which point machine-specific policy is processed) and
user logon (at which
point user-specific policy is processed). Again, in contrast to System
Policies, you can define a
virtually unlimited number of GPOs within an AD domain (though
practically speaking, large
numbers of GPOs will take a long time to process). And, whereas System
Policies apply to
individual users, individual computers, and NT security groups, GPOs are
processed only by AD
users and computers. However, AD security groups composed of either machines
or users can
filter GPOs' effects. This filtering capability, in conjunction with the
ability to have multiple
GPOs processed by a given user or computer, can provide much greater policy
flexibility than is
available in NT 4.0. Figure 1.2 shows an example of how you can use security
groups to filter
the effects of a GPO.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] WINS servers and browsing

2003-03-12 Thread Morgan Toal
Richard,

Thanks for your suggestion!

Your pw1 config below is configured as a local master for its workgroup
"pw" ..your config:   domain master = no
where is its domain master browser? If you wish "pw1" to be a dom-master
then change the above line to .. domain master = yes . IF these are the
We have a winner! I read but did not read closely enough the text file regarding this. It is clear to me now thanks to your advice!

Regards,
mtoal


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba BDC and secrets.tdb question

2003-03-12 Thread Robert Styma
I have a question about setting up a samba BDC
(with a samba PDC).

I am running Samba as the PDC on a small network.
Other Unix boxes on the network are running
with:
security = DOMAIN
encrypt passwords = Yes
update encrypted = Yes
password server = 192.168.1.5

So they make use of the PDC for smbmount and smbsh
applications.  The W2K box also uses Samba at the PDC.

I want to set up a Redhat 8 box as a BDC.
smbpasswd -S 
got the machine ID informationa across to the secrets.tbd per
the BDC howto.  Later it the document, it says I have to blindly
copy the secrets.tbd from the PDC to the BDC.  It also says I have
to change from "security = DOMAIN" to "security = USER"

This appears to indicate that the BDC will now use it's own authentication
information rather than defering to the PDC. 
1.  Is this true?

2.  Blindly copying the secrets.tbd across seems a dangerous idea.
Is there an equivalent to smbpasswd -S which just copies across 
the relevant data.?

3.  If not, is it really safe to copy secrets.tbd from the PDC to the BDC?
I do not want to foul things up trying to get the BDC to work.
I am not ready to try switching to LDAP, although I will do this if it is
the only way.

Thanks for any help.


-- 
Robert E. Styma 
Principal Engineer
AG Communication Systems, Phoenix - A subsidiary of Lucent
Email: [EMAIL PROTECTED]
Phone: 623-582-7323
FAX:   623-581-4884
Company:  http://www.agcs.com
Personal: http://www.swlink.net/~styma
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba & XP Professional

2003-03-12 Thread Antonio Moya Krijer
Hi,

I have a linux SuSE 8.1 with samba 2.2.5 Release 80.

I have a Windows XP Professional  that is member of a Samba domain, 
authentication it's OK but i have a profile in /usr/lib/samba/netlogon 
that i want to execute when the XP boots, i don't know what's happening.

I have read the "How to" documentation

Can you help me, please?

Thanks a lot.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] pam_mkhomedir.so

2003-03-12 Thread borpeter
Hi!

I'm again here.

Samba works and made directory /user for me, but directory
/DOMAIN I must still create manually.

What's wrong?

Thanks.

-- 
Ziskejte kvalitu, kterou si zasluhujete. Za minimalni mesicni
poplatek vam nabizime Antivir, Antispam nebo dalsi kapacitu pro
vas Mailbox. Vice na: http://sluzby.volny.cz/product/postpaid/

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] anybody is running Samba PDC on FreeBSD ?

2003-03-12 Thread mark
On Wed, 12 Mar 2003 16:09:50 +0500 (YEKT)
éÌØÑ ûÉÐÉÃÉÎ <[EMAIL PROTECTED]> wrote:


> Ok!!!
> 
> so, can you help me with my setup ? I already have questions to ask :)
> 
> Cheers,
> Ilia

I'll help but have you read,
http://hr.uoregon.edu/davidrl/samba/samba-pdc.html#pdc

It's what I followed and I didn't have any problems.  And it will
explain things much better than I can.  

mark
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] anybody is running Samba PDC on FreeBSD ?

2003-03-12 Thread Илья Шипицин
> On Wed, 12 Mar 2003 14:59:51 +0500 (YEKT)
> Илья Шипицин <[EMAIL PROTECTED]> wrote:
>
> > Dear Sirs,
> >
> > I've been trying for a couple of week to join WinXP to samba domain.
> >
> > is anybody running Samba PDC on FreeBSD already ??
> >
> Yep.  No problem.  Two WinXP pro machines joined to it no problem.
>

Ok!!!

so, can you help me with my setup ? I already have questions to ask :)

Cheers,
Ilia

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] anybody is running Samba PDC on FreeBSD ?

2003-03-12 Thread mark
On Wed, 12 Mar 2003 14:59:51 +0500 (YEKT)
éÌØÑ ûÉÐÉÃÉÎ <[EMAIL PROTECTED]> wrote:

> Dear Sirs,
> 
> I've been trying for a couple of week to join WinXP to samba domain.
> 
> is anybody running Samba PDC on FreeBSD already ??
> 
Yep.  No problem.  Two WinXP pro machines joined to it no problem.


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] re

2003-03-12 Thread yen0622

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] pam_mkhomedir.so

2003-03-12 Thread Andrew Bartlett
On Wed, 2003-03-12 at 20:16, [EMAIL PROTECTED] wrote:
> Hi!
> 
> This error appears as answer to browse home directory from WinXP
> on Samba server2.27 on Mandrake9.0: 'Can't change directory to
> /home/DOMAIN/user (No such file or directory)'
> 
> Here is my etc/pam.d/samba :
> #%PAM-1.0
> auth sufficient /lib/security/pam_winbind.so
> auth required /lib/security/pam_nologin.so
> auth required /lib/security/pam_stack.so service=system-auth
> account sufficient /lib/security/pam_winbind.so
> account required /lib/security/pam_stack.so service=system-auth
> session required /lib/security/pam_mkhomedir.so skel=/etc/skel/
> umask=0022  session required /lib/security/pam_stack.so
> service=system-auth
> password required /lib/security/pam_stack.so service=system-auth
> 
> Here is my etc/pam.d/sshd :
> #%PAM-1.0
> auth sufficient /lib/security/pam_winbind.so
> auth required /lib/security/pam_stack.so service=system-auth
> auth required /lib/security/pam_nologin.so
> account sufficient /lib/security/pam_winbind.so
> account required /lib/security/pam_stack.so service=system-auth
> password required /lib/security/pam_stack.so service=system-auth
> session optional /lib/security/pam_mkhomedir.so skel=/etc/skel/
> umask=0022  session required /lib/security/pam_stack.so
> service=system-auth
> session required /lib/security/pam_limits.so
> session optional /lib/security/pam_console.so
> 
> Problem is how to setup samba for automatic home directory
> creating. Maybe smb.conf is incorrect, but if I create home
> directory manually, samba log me in without problems.

Have you set 'obey pam restrictions = yes' in your smb.conf?

> Second question.Computers in network are under W2k PDC. Everytime
> I try to login into Mandrake via putty(ssh) and I'm not as local
> user (on mandrake) but I'm domain user, pam_mkhomedir.so writes
> this:'Can't change directory to /home/DOMAIN/user (No such file
> or directory)'. But if I manually create directory /DOMAIN under
> /home and change mode for /DOMAIN to 777 then directory /user
> will be create automatically. But this is valid only for ssh
> access. Samba still does not create directory /user.

You shouldn't need to make it 777, but you might have a buggy OpenSSH
(privsep broke a number of things like this - there are patches
currently in their bugzilla to test fixes)

> So. I need to setup auto creat of directory:/home/DOMAIN/user for
> each service.
> 
> Next question is, if is possible to configure all of services
> (login, telnet, ftp, ssh, samba, kde...) centrally in one file or
> somewhere. Or it is not possible?

That's what the system-auth stuff is about.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Winbindd Error

2003-03-12 Thread Alex Murphy
> try turning off kerberos

I can not switch off kerberos, since beside me Win2000Domain, but Samba
in him as BDC, problem sooner whole in grow old ticket from KDC,
possible somehow force Samba recharge ticket or save him(it) beside
itself? After all Win2000 do not require after rebooting the relogs and
domain.

> > Hello !! Please Help me !!
> >   Im execute command ./net ads join, start winbindd,smbd,nmbd - all

is

> >   Ok !
> > (wbinfo -g - Ok, wbinfo -u - Ok)
> >   Reboot me mashine - start winbindd,smbd,nmbd - wbinfo -u - Error
> >   lookup
> > Users
> >
> >  In log file :
> > [2003/03/11 15:48:07, 1] libsmb/clikrb5.c:krb5_mk_req2(256)
> >   krb5_cc_get_principal failed (No credentials cache found)
> >
> >
> > What is it ??
> >
> >  Senks, Alexei.
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] anybody is running Samba PDC on FreeBSD ?

2003-03-12 Thread Илья Шипицин
Dear Sirs,

I've been trying for a couple of week to join WinXP to samba domain.

is anybody running Samba PDC on FreeBSD already ??

Regards, (Наилучшие пожелания)
Ilia Chipitsine (Илья Шипицин)

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] WinXP fails to find samba server

2003-03-12 Thread Patrick Hendricks
I set up a samba server which can be connected to be other linux boxes. 
Everything works great when I connect through a linux machine, but when 
I try connecting through my WinXP (sp1) box I cannot connect to the 
samba server.  The XP box gives me a "system error 53 has occured.  The 
network path was not found."  So I was curious if my linux box was even 
responding to my window computer.  so I turned on tcp dump and tried to 
access the server.  This is what I get:

02:33:18.072576 192.168.1.2.1828 > 192.168.1.50.445: S [tcp sum ok] 
564739778:564739778(0) win 64240  (DF) (ttl 
128, id 19947, len 48)
02:33:18.072599 192.168.1.50.445 > 192.168.1.2.1828: R [tcp sum ok] 
0:0(0) ack 1 win 0 (DF) (ttl 64, id 0, len 40)

I find that kinda strange since samba is listening on port 139 and my 
windows box is trying to connect to port 445.  I checked the log file 
and i's still just sitting there waiting for a connection.

Other than that, I'm stumped.  Anyone have an idea? 

Thanks,
P Hendricks
ps: here's my smb.conf if ya wanna see it:

[global]
  netbios name = bunta
  workgroup = revil
  log file = /var/log/samba/log.%m
  max log size = 50
  log level = 3
  security = user
  encrypt passwords = yes
  smb passwd file = /etc/samba/private/smbpasswd
  wins support = yes
  dns proxy = no
[pub]
  path = /home/public
  browseable = yes
  guest ok = yes
  read only = no
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] pam_mkhomedir.so

2003-03-12 Thread borpeter
Hi!

This error appears as answer to browse home directory from WinXP
on Samba server2.27 on Mandrake9.0: 'Can't change directory to
/home/DOMAIN/user (No such file or directory)'

Here is my etc/pam.d/samba :
#%PAM-1.0
auth sufficient /lib/security/pam_winbind.so
auth required /lib/security/pam_nologin.so
auth required /lib/security/pam_stack.so service=system-auth
account sufficient /lib/security/pam_winbind.so
account required /lib/security/pam_stack.so service=system-auth
session required /lib/security/pam_mkhomedir.so skel=/etc/skel/
umask=0022  session required /lib/security/pam_stack.so
service=system-auth
password required /lib/security/pam_stack.so service=system-auth

Here is my etc/pam.d/sshd :
#%PAM-1.0
auth sufficient /lib/security/pam_winbind.so
auth required /lib/security/pam_stack.so service=system-auth
auth required /lib/security/pam_nologin.so
account sufficient /lib/security/pam_winbind.so
account required /lib/security/pam_stack.so service=system-auth
password required /lib/security/pam_stack.so service=system-auth
session optional /lib/security/pam_mkhomedir.so skel=/etc/skel/
umask=0022  session required /lib/security/pam_stack.so
service=system-auth
session required /lib/security/pam_limits.so
session optional /lib/security/pam_console.so

Problem is how to setup samba for automatic home directory
creating. Maybe smb.conf is incorrect, but if I create home
directory manually, samba log me in without problems.

Second question.Computers in network are under W2k PDC. Everytime
I try to login into Mandrake via putty(ssh) and I'm not as local
user (on mandrake) but I'm domain user, pam_mkhomedir.so writes
this:'Can't change directory to /home/DOMAIN/user (No such file
or directory)'. But if I manually create directory /DOMAIN under
/home and change mode for /DOMAIN to 777 then directory /user
will be create automatically. But this is valid only for ssh
access. Samba still does not create directory /user.

So. I need to setup auto creat of directory:/home/DOMAIN/user for
each service.

Next question is, if is possible to configure all of services
(login, telnet, ftp, ssh, samba, kde...) centrally in one file or
somewhere. Or it is not possible?

Thanks.

Peter.

-- 
Ziskejte kvalitu, kterou si zasluhujete. Za minimalni mesicni
poplatek vam nabizime Antivir, Antispam nebo dalsi kapacitu pro
vas Mailbox. Vice na: http://sluzby.volny.cz/product/postpaid/

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[SAMBA] 2.2.7a: %a variable / Win2k / WinXP ?

2003-03-12 Thread beckstette
I am using samba 2.2.7a an would like to use the %a variable to 
distinguish between WinXP und Win2k
because I (and others) have problems when using the same roaming profiles 
for both OP-Systems

--> During Logoff when writing back the profile I get an error message: 
"unable to write ... file prxxx.tmp" 
  and after this the profile when written back by XP is not more 
usable from 2k "... unable to load profile ... using temporal ..."

Klaus Beckstette
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba