Re: [Samba] Access to shares for authenticated domain users only

2003-03-27 Thread Andrew Bartlett
On Thu, 2003-03-27 at 23:45, Kevin wrote:
> On Thu, 27 Mar 2003 07:11:55 +, Andrew wrote:
> 
> >While 'hacks' might be possible, shares are authenticated seperatly to the 
> >domain logon, and there is no linkage apart from the fact that the domain
> >logon sets up the default username/pw pair.
> >
> >Fundementally, any restriction imposed by logon script/.pol files can be
> >avoided - you must never trust the client to actually follow their directions...
> >
> 
> Thanks Andrew. Point taken. Where would you go for more info on this sort of
> security? In particular I'm trying to avoid unauthorised notebooks etc.
> connecting to the network and then disappearing off home with sensitive data
> from the server on their drives.

Really, the best you can do is per-user passwords, strong passwords,
correctly set permissions, and policies (human policies, not computer
ones :-).

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Does "active directory" support include policy support

2003-03-27 Thread Andrew Bartlett
On Thu, 2003-03-27 at 19:53, Lasse Riis wrote:
> Well, a rather odd subject, but I couldn't really express it differently.
> I would simply like to know if the active directory "emulation" of 
> samba+openLDAP+kerberos or samba 3.0 includes support for policies.
> 
> I have a bunch of XP clients that I need to set some restrictions on. 
> But it seems the days of config.pol files are over, so i need active 
> directory support on my PDC. Having read several articles on active 
> directory, I still don't understand it fully, but articles about setting 
> up active directory on a samba pdc mentioned only partial support for 
> active directory(only some features supported).
> 
> So before I start crashing our server with software and configuration, I 
> would like to know if (group)policies are supported by active directory 
> on samba. If this is the case, I'd also like to hear if anybody has a 
> working setup of it, and maybe some links (I couldn't finde any) to 
> howtos

We don't yet have an Active Directory PDC (it is much more than
samba+openLDAP+kerberos - we need them all working with each other :-).

That said, we are often confused for an active directory PDC by the
clients - they often 'fall back' in parts of the protocol.  It may well
be possible to create such policies - In the end, they are just a file
in a particular file share.  

It would be an interesting challenge for somebody to work on. :-)

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Maximum characters for valid users = ?

2003-03-27 Thread Andrew Bartlett
On Fri, 2003-03-28 at 05:07, Tom Dickson wrote:
> We have winbind running on our server, so all of our usernames look like
> MIXEDDOMAIN+User Name, and because of the spaces in the names, we wrap all
> of them with " "MIXEDDOMAIN+User Name" ". One share has many users, so the
> valid users = list becomes long (over 1024 characters).

Yes, in Samba 2.2 there is a static buffer here, of 1024 chars.

> Testparm gives this error:
> 
> ERROR: string overflow by 34 in safe_strcpy [" "@MIXEDDOMAIN+Cert
> Publishers" "
> " "@MIXEDDOMAIN]
> 
> Whenever we get that error, there is difficulty connecting from the windows
> clients.
> 
> If I remove about 50 characters worth of names, it goes away and everything
> works right (for the names left). I know I can get around this limitation by
> assigning a group on the 2000 server, but I still have two questions. Can I
> have more that one valid users = line per share? 

No.

> And, is there a better way
> to deal with spaces in usernames than " "User Name" "?
> 
> Note: The same thing happens with write list =.

This should be fixed in Samba 3.0, due to a change to the way we process
such lists, but you are much advised to use a group on the server. 

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba/ms terminal server problem

2003-03-27 Thread GLANNER Christoph - HÄUSERMANN GmbH
Hello,

i have a problem with samba (2.2.6) and microsoft terminal server (Windows
2000 Server, SP3)

.only one user, who is working on the microsoft terminal server, can
work with the samba share "TEST"
when another terminal server user connect to the samba share "TEST", the
other user will be disconnected

this problem is only at the microsoft terminal server
user of workstations can work without problems


thanks
Christoph Glanner

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: RES: RES: [Samba] Re: Winbind broken after 2.2.8 upgrade

2003-03-27 Thread Andrew Bartlett
On Fri, 2003-03-28 at 09:46, FRANCO wrote:
> I did it more then 12 times...
> 
> I have a lot of problems with winbind and NEVER I did receive a answer...
> Sorry if I have a poore english:

There are a number of documents on 'how to get questions answered'
around on the net.  In particular, just repeating the question, or
complaining that your question isn't answered just gets people
frustrated.  Instead, show that you have tried to solve the problem
yourself.

For example, if you have downgraded back to 2.2.7, and the problem 'went
away', then this needs to be made clear.  If you didn't, how can you
claim it's a bug in 2.2.8?

> I hve 3 installations with problems... I never saw this I think that Im not
> a god SAMBA Administrator but I did read all the doc I dont have any
> troubles with other soft, but with samba ehehehehehe

Samba is a complex peice of software.  It's interactions with (often
separately maintained) Windows DCs is particularly complex.

If it doesn't occur on all your DCs, then you should look at what is
different.  This information should be present when you contact the
list.

> I did send e-mails to the lis in :
> 
> 11/3. 12/3, 16/3, 18/3, 19, 20, 25, 27 with the same questions If you
> want, please check it and will see if Im joking... Im 42 years old.
> 
> 
> 
> FIRST INSTALATION:
> 
> Can yoiu help m?
> 
> [EMAIL PROTECTED] /etc]# smbpasswd -j surson -r cleo -U Administrator
> Password:
> Joined domain SURSON.
> [EMAIL PROTECTED] /etc]#
> 
> 
> [EMAIL PROTECTED] /etc]# smbclient //firewall/PUBLICO -UAdministrator added
> interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0 Got a
> positive name query response from 192.168.1.2 ( 192.168.1.1 )
> Password:
> session setup failed: NT_STATUS_LOGON_FAILURE
> 
> When I try \\firewall\PUBLICO in the NT I receive a BOX to type USER and
> PASSWD
> 
> Joe log.cleo
> 
> [2003/03/25 04:38:27, 0]
> smbd/password.c:connect_to_domain_password_server(1307)
>   connect_to_domain_password_server: machine CLEO rejected the tconX on the
> IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. [2003/03/25 04:38:27, 0]
> smbd/password.c:domain_client_validate(1554)
>   domain_client_validate: Domain password server not available. [2003/03/25

This looks like an issue with your PDC, not with Samba.

Your PDC is has 'restrict anonymous = 2' set.  The two options are to
set a username for Samba to use (wbinfo -Auser%pass), or to disable it. 

However, setting this only really works for Samba 3.0 - for 2.2 you
really can't run with this set. 

If you already have a username/pw set (by wbinfo -A), then I would
suspect that you have SMB signing required, on a 'fixed' DC (MS did not
used to enforce this).

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] (no subject)

2003-03-27 Thread Balamurugan
--
**
T Balamurugan,
Systems Administrator,
AU-KBC Research Centre,
MIT Campus of Anna University,
Chromepet,Chennai-600044,
Tamilnadu, India.
Tel: +91 44 22234885, 22232711 (O);  +91 4112 231980 (R);
Fax: +91 44 22231034;
e-mail: [EMAIL PROTECTED];
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] connection to a w2k pdc

2003-03-27 Thread Scott Wisely
my *nix client has successfully connected to the w2k domain, but I find that
the clients need to login with the computer name & then the username.

ie
username: computername\username

I also noticed it says in documentation that usernames on the *nix machine
should appear in the domain\username form. Mine arn't doing that, they just
appear as the username.

The main reason I want to fix this up is to save having to do a second
login, and so I can have the roaming profiles store on the *nix machine

any Ideas would be greatly appreciated. I will paste my smb.conf if need be.


thanks in advance




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem with xcopy /d & samba

2003-03-27 Thread Kevin
On Thu, 27 Mar 2003 09:37:47 -0800, Stephen wrote:

>A problem has arisen with the way samba handles file 
>creation dates compared to NT/win2k, which prevents 
>xcopy /d from working correctly.

ISTR a generic problem with xcopy dates across a network. I got round it by
using robocopy in it's place, as recommended my MS.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] getent displays incomplete lists of groups on Solaris 8

2003-03-27 Thread Chris Hanrahan
Greetings,

I have installed the samba 2.2.8 binary package under Solaris 8 and followed the HOWTO 
in order to get winbind working.  My samba server is participating in an NT 4.0 domain 
which contains 2000 users and 250 Domain groups.  On the samba server, I can issue a 
wbinfo -g and see a complete list of my domain groups.  However, when I issue a getent 
group, the last group I see is the one listed immediately before the Domain Users 
group.

If I add a new group to the domain, it will appear when using getent group as long as 
its name falls before the name "Domain Users" in the alphabet.

This problem does not occur with users, issuing getent passwd displays a complete list 
of all users.

I have installed samba 2.2.8 on a RedHat Linux 8.0 server, joined it to this same NT 
domain and have experienced no problems.  getent group works as it should under Linux.

I suspect that Solaris is having a problem enumerating the Domain Users group because 
it is the one group in the domain in which everyone is a member.

Is there some limit in Solaris in regards to the number of users which may be in a 
group ?  Has anyone else experienced this type of behavior in a Solaris 8 environment ?

I have experienced this on two different Solaris servers, one on which I installed the 
samba binary package, and the other where I compiled samba from the source code.

Any suggestions, or advice appreciated.

Thanks

Chris Hanrahan
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Installing Samba on AIX

2003-03-27 Thread Bobby Lalwani
Hi,
 
I'm installing Samba version 2.2.7.0 using smit install.  Smit installs everything but 
doesn't create a /usr/local/samba dir.  All the samba files are located in 
/usr/local/bin.  But when I try to test my setup and so smbpasswd, it wants to look 
for everything in /usr/local/samba dir.
 
Should I just create a /usr/local/samba dir and copy all the samba files from bin to 
the respective samba dir?
 
Thanks...Bobby
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba and CCC

2003-03-27 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 26 Mar 2003, Will L G wrote:

> When are you all going to make Samba compatible with CCC (Compaq
> Compiler)? I would really like to be able to compile it using CCC but I
> keep getting the errors listed below. I was wondering, could please
> point me in the right direction for a solution to this dilemma?

Don't think any one on the team has access to a machine with compaq's 
compiler.





cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
--John Cusack - "Grosse Point Blank" (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+g63nIR7qMdg1EfYRAm2fAKCgosf9jpVFOamT7fqMLmRZ8l4ERACfV8ZH
wiCv3bTMOmbdOT1SbJjUOs0=
=px0B
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Point and Print problem 2.2.7A and 2.2.8

2003-03-27 Thread Arcady Chernyak

I have detected significant performance slow down when I use PnP driver with versions 
2.2.7A and 2.2.8.
It happened with all kinds of Windows OS (exclude 9x) when user has administrative 
rights to Samba based printers.
In Windows system event viewer I see that  spooler retrieves printer driver files from 
Samba server to Window machine a lot of times.
It happened each time when I try to update driver properties, change paper size or 
print ..
Sometimes Windows's spooler retrieves driver files hundreds times and it take all 
CPU's and network resources.

It newer happened before with SAMBA 2.2.2 we used. 

Thanks
Arcady


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Help with password changing problem

2003-03-27 Thread Jennifer Fountain
I am having an issue changing local unix passwords - when I attempt to change my root 
password, I get this error:
 

[EMAIL PROTECTED]: passwd
Supported configurations for passwd management are as follows: 
passwd: files 
passwd: files ldap 
passwd: files nis 
passwd: files nisplus 
passwd: compat 
passwd: compat AND 
passwd_compat: nisplus 

[EMAIL PROTECTED]: passwd root
Supported configurations for passwd management are as follows: 
passwd: files 
passwd: files ldap 
passwd: files nis 
passwd: files nisplus 
passwd: compat 
passwd: compat AND 
passwd_compat: nisplus

my nsswitch.conf reads:  passwd:  files winbind

if i remove winbind from nsswitch.conf, it works.  help! 

 

thanks

Jenn

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] smbmount of Windows 2000/XP disregards uid option

2003-03-27 Thread Bertil Askelid
Hello!

   I'm mounting Windows 2000/XP disk drives from Linux RedHat 7.3 using
   smbmount. No problems, the disks are mounted.

   However, it disregards the "uid" and "gid" options and leaves the
   smbfs owned by "root" giving the "uid" user read-only access and not
   read-write as expected.  Adding the "rw" doesn't help either.

   What am I doing wrong?

--
  Bertil Askelid
  Anaheim Hills, California
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RES: RES: [Samba] Re: Winbind broken after 2.2.8 upgrade

2003-03-27 Thread FRANCO
I did it more then 12 times...

I have a lot of problems with winbind and NEVER I did receive a answer...
Sorry if I have a poore english:

I hve 3 installations with problems... I never saw this I think that Im not
a god SAMBA Administrator but I did read all the doc I dont have any
troubles with other soft, but with samba ehehehehehe

I did send e-mails to the lis in :

11/3. 12/3, 16/3, 18/3, 19, 20, 25, 27 with the same questions If you
want, please check it and will see if Im joking... Im 42 years old.



FIRST INSTALATION:

Can yoiu help m?

[EMAIL PROTECTED] /etc]# smbpasswd -j surson -r cleo -U Administrator
Password:
Joined domain SURSON.
[EMAIL PROTECTED] /etc]#


[EMAIL PROTECTED] /etc]# smbclient //firewall/PUBLICO -UAdministrator added
interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0 Got a
positive name query response from 192.168.1.2 ( 192.168.1.1 )
Password:
session setup failed: NT_STATUS_LOGON_FAILURE

When I try \\firewall\PUBLICO in the NT I receive a BOX to type USER and
PASSWD

Joe log.cleo

[2003/03/25 04:38:27, 0]
smbd/password.c:connect_to_domain_password_server(1307)
  connect_to_domain_password_server: machine CLEO rejected the tconX on the
IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. [2003/03/25 04:38:27, 0]
smbd/password.c:domain_client_validate(1554)
  domain_client_validate: Domain password server not available. [2003/03/25
04:38:27, 1] smbd/password.c:pass_check_smb(555)
  Couldn't find user 'surson+administrator' in passdb. [2003/03/25 04:38:27,
1] smbd/password.c:pass_check_smb(555)
  Couldn't find user 'surson+administrator' in passdb. [2003/03/25 04:38:27,
1] smbd/reply.c:reply_sesssetup_and_X(988)
  Rejecting user 'surson+administrator': authentication failed [2003/03/25
04:38:27, 0] smbd/password.c:connect_to_domain_password_server(1307)
  connect_to_domain_password_server: machine CLEO rejected the tconX on the
IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. [2003/03/25 04:38:27, 0]
smbd/password.c:domain_client_validate(1554)
  domain_client_validate: Domain password server not available.


Joe.firewall

IW   log.firewall
Row 1Col 14:57F1 for help
[2003/03/25 04:37:32, 0]
smbd/password.c:connect_to_domain_password_server(1307)
  connect_to_domain_password_server: machine CLEO rejected the tconX on the
IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. [2003/03/25 04:37:32, 0]
smbd/password.c:domain_client_validate(1554)
  domain_client_validate: Domain password server not available. [2003/03/25
04:37:32, 1] smbd/password.c:pass_check_smb(555)
  Couldn't find user 'surson+administrator' in passdb. [2003/03/25 04:37:32,
1] smbd/password.c:pass_check_smb(555)
  Couldn't find user 'surson+administrator' in passdb. [2003/03/25 04:37:32,
1] smbd/reply.c:reply_sesssetup_and_X(988)
  Rejecting user 'surson+administrator': authentication failed

Etc/smbusers

# Unix_name = SMB_name1 SMB_name2 ...
root = administrator admin
nobody = guest pcguest smbguest

Etc/smbpasswd

root:0:CHANGED BY ME:[UX
]:LCT-3E7AEA06:
Administrator:1CHANGED BY
MEe:[UX
]:LCT-3E7FED90:
catena:500:CHANGED BY
ME:[UX ]:LCT-3



Etc/passwd

Administrator:x:10032:10033::/home/Administrator:/dev/null
danilo:x:10033:10033::/home/danilo:/dev/null

Etc/pwdb.conf

#
# This is the configuration file for the pwdb library
#

user:
unix+shadow
nis+unix+shadow

group:
unix+shadow
nis+unix+shadow



etc/Pam.d/samba 

auth   required/lib/security/pam_unix.so nullok shadow
accountrequired/lib/security/pam_unix.so

#authrequired/lib/security/pam_securetty.so
#authrequired/lib/security/pam_nologin.so
#authsufficient  /lib/security/pam_winbind.so
#authrequired/lib/security/pam_pwdb.so use_first_pass shadow
#account required/lib/security/pam_winbind.so





SMB.conf
[global]
workgroup = SURSON
server string = Server FIREWALL usando  Samba
interfaces = 192.168.1.1/24
bind interfaces only = Yes
security = DOMAIN
encrypt passwords = Yes
password server = cleo
password level = 8
username level = 8
log level = 1
log file = /var/log/samba/log.%m
max log size = 50
name resolve order = wins hosts lmhosts bcast
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
os level = 0
preferred master = False
local master = No
domain master = False
wins server = 192.168.1.2
winbind uid = 1-2
winbind gid = 1-2
template homedir = /home/winnt/%D/%U
template shell = /bin/bash
winbind separator = +
winbind cache time = 10
hosts allow = 192.168.1. 192.168.2. 127.
printing = lprng

[homes]
comme

[Samba] Re: Cannot see any files in samba shares

2003-03-27 Thread Matt Yahna
I have now tried version 2.2.7a, as well as 2.2.8 on a different Solaris 8
machine.  They both have the same problems.  What am I doing wrong?  I have
searched everywhere for an answer.  I have seen several posts about this
problem, but no one has had an answer yet.  Permissions are 777 at this time
on this folder, and still it does not work.

Please help!

"Matt Yahna" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> I have installed Samba 2.2.8 on a Solaris 8 machine.  My compile options
> were as follows:
>
>
./configure  --with-fhs --prefix=/usr --sysconfdir=/etc --localstatedir=/var
>  --with-smbwrapper --with-syslog
>
> My smb.conf is as follows:
> [global]
> workgroup = 
> netbios name = MOJO
> server string = Samba Server v. 2.2.8
> security = DOMAIN
> encrypt passwords = Yes
> password server = *
> log level = 2
> log file = /var/log/samba/log.%m
> max log size = 50
> socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
> preferred master = No
> local master = No
> domain master = No
> dns proxy = No
> wins server = 10.40.5.1
> hide dot files = No
>
> [tmp]
> comment = Temporary Files
> path = /tmp
>
> The server runs, I have run everything in DIAGNOSTIC.txt with no problems
> except that running smbclient //mojo/tmp gets me connected to the server,
> but there are no files through Samba (there are files in this directory).
>
> Using a Windows 2000 box, I can open \\mojo\tmp, it asks for a username
and
> password, and it connects.  However, there are no files listed.
>
> I am able to create files in this directory via windows, but can't see
them.
>
> Any help would be much appreciated.
>
> Thank you.
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] A WIN95 machine list the shares but 98/win2k not

2003-03-27 Thread FRANCO
Why this conf dont work?

A WIN95 machine list the shares but 98/win2k not


[EMAIL PROTECTED] init.d]# smbclient -L //linus U%
added interface ip=200.168.58.231 bcast=200.168.58.255 nmask=255.255.255.192
added interface ip=192.168.4.1 bcast=192.168.4.255 nmask=255.255.255.0
wins_srv_died(): Could not mark WINS server 127.0.0.1 down.
Address not found in server list.
session request to LINUS failed (Not listening for calling name)
wins_srv_died(): Could not mark WINS server 127.0.0.1 down.
Address not found in server list.
session request to *SMBSERVER failed (Not listening for calling name)
[EMAIL PROTECTED] init.d]#




# Global parameters
[global]
workgroup = ADVOCACIA
netbios name = LINUS
server string = Samba Server
security = share
encrypt passwords = yes
log file = /var/log/samba/log.%m
max log size = 50
name resolve order = wins hosts
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
logon path = \\%N\profiles\%u
logon home = \\LINUS\%u
os level = 64
preferred master = yes
local master = No
domain master = no
dns proxy = No
wins support = yes
printing = lprng
unix password sync = no
map to guest = never
password level = 0
null passwords = no
dead time = 0
debug level = 0
load printers = yes
domain logons = no
allow hosts = 192.168.4.0/ 255.255.255.0, 127.0.0.1

[netlogon]
path = /usr/local/samba/lib/netlogon
browseable = No
available = yes

[homes]
comment = Home Directories
read only = No
browseable = no
available = yes
public = no
writable = no
only user = no

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No

Franco Catena
http://www.surson.com.br
tel 011-44374040
cel:78535362
NEXTEL: 55*26006*1
MSN: [EMAIL PROTECTED]
ICQ: 24755602
-BEGIN PGP PUBLIC KEY BLOCK-
Version: GnuPG v1.0.6 (MingW32)
Comment: For info see http://www.gnupg.org
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=ry0w
-END PGP PUBLIC KEY BLOCK-


-Mensagem original-
De: Amir Mostafa Saleh [mailto:[EMAIL PROTECTED] 
Enviada em: quinta-feira, 27 de março de 2003 09:00
Para: FRANCO
Assunto: Testes com o Winbind


Caro Franco,

Ontem à noite eu fiz os testes com o Winbind, conforme tinha dito.

Usei um servidor Windows 2000 SP2 e um Red Hat 8. Funcionou muito bem. 
Eu integrei os usuários do Active Directory no Linux, e fiz testes de 
logon no console do Linux e de logon via telnet utilizando os usuários e 
senhas do AD.

Que tipo de problema você enfrentou exatamente?

[]'s

Amir Mostafa Saleh
Vento Solar Sistemas de Informação
[EMAIL PROTECTED]


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.465 / Virus Database: 263 - Release Date: 25/3/2003
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.465 / Virus Database: 263 - Release Date: 25/3/2003
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Printing NT to Linux printer problem

2003-03-27 Thread daniel . jarboe
If you are trying to add a printer share using the add printer wizard,
it takes a little work.

If you want APW, you need to define an "add printer command", and that
command will need to modify your smb.conf to add the print share
depending on the input received from the wizard prompts.  Details are in
man smb.conf.

But seems since you have a [printers] section, your printer shares
should be automatically generated from whatever cups's equivalent to
printcap is, and you just need to upload windows drivers for it.  Is the
printer defined to cups?  If not, that's your first step.  Also, cups
has a cupsaddsmb (or something like that) command, which is another
method of installing windows print drivers.  If you have the printer
share working, just no windows drivers associated with it, check out the
Samba-HOWTO-Collection available from samba.org documentation, there's a
thorough section about print and uploading the drivers there.

Good luck
~ Daniel



On Wednesday, March 26, 2003 11:39 PM John wrote:
> Using SuSE V8.0 Samba 2.2.7a on a small network I have a 
> Lexmark laser 
> printer attached to the Linux PC, using Cups 1.1.15.
> 
> I was able to print from Linux OK, and some months ago had 
> setup  the Win 
> NT PC to print across the network to the laser. So all was well.
> 
> Recently I had a couple of problems with the NT machine (the 
> usual BSOD's 
> etc) also had a couple of problems with the SuSE PC and still 
> feeling my 
> way as newbie I took a while to get things going again, that 
> is with the 
> exception of printing from the NT PC.
> 
> I have been back through the documents and run through the 11 
> tests in 
> diagnosis.txt and the setup checks out OK between the two machines.
> 
> The following is my smb.conf
> 
> # Global parameters
> [global]
>  workgroup = HOME
>  netbios name = PENGUIN
>  interfaces = eth0
>  encrypt passwords = Yes
>  update encrypted = Yes
>  map to guest = Bad User
>  printcap name = cups
>  load printers = yes
>  preferred master = Yes
>  wins server = 192.168.0.1
>  printer admin = @ntadmin, root,john
>  hosts allow = 192.168.0.0/255.255.255.0  127.0.0.1
>  printing = cups
>  veto files = /*.eml/*.nws/riched20.dll/*.{*}/
> 
> [public]
>  comment = public
>  path = /home/public
>  read only = No
>  guest ok = Yes
> 
> [print$]
>  comment = printer drivers
>  path = /etc/samba/drivers
>  write list = @ntadmin, root,john
>  browseable = yes
>  guest ok = no
>  read only = yes
> 
> 
> [printers]
>  comment = All printers
>  path = /var/spool/samba
>  printer admin = root, @ntadmin, john
>  guest ok = Yes
>  printable = Yes
>  browseable = No
>  public = yes
>  writable = no
> 
> On the NT Pc (NT$ sp6a) I can use windows explorer, browse to Penguin 
> (linux pc) see the shares and the printer. When I attempt to 
> add the printer I 
> can proceed through selecting the port, printer model etc but 
> as soon as I 
> select finish I get access denied.
> 
> I have tried this logged in as administrator, and as a super user..no 
> difference.
> 
> I would appreciate any advice on how to sort this out. 
> 
> Thanks,
> 
> John
> 
> This email has been pre-scanned using the latest Anti Virus 
> software for your peace of mind.
> 
> Please remember to maintain your own anti virus up to date with 
> the latest reference files.
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
> 

---

This message is the property of Time Inc. or its affiliates. It may be
legally privileged and/or confidential and is intended only for the use
of the addressee(s). No addressee should forward, print, copy, or
otherwise reproduce this message in any manner that would allow it to be
viewed by any individual not originally listed as a recipient. If the
reader of this message is not the intended recipient, you are hereby
notified that any unauthorized disclosure, dissemination, distribution,
copying or the taking of any action in reliance on the information
herein is strictly prohibited. If you have received this communication
in error, please immediately notify the sender and delete this message.
Thank you.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem with xcopy /d & samba

2003-03-27 Thread Christian . Duclou
Hello,
Did you try to drag the files from the Samba Box with something like
smbtar OR smbmount + tar
Probably long but it seems to work.

Surlignage Shawn Wright <[EMAIL PROTECTED]>:

> A problem has arisen with the way samba handles file 
> creation dates compared to NT/win2k, which prevents 
> xcopy /d from working correctly.
> 
> On NT/Win2k, files copied from another NT machine using 
> xcopy end up with the modified dates equal to the original 
> modified date of the file, and the created and accessed 
> dates become the date of the xcopy operation.
> 
> On Samba, files copied from an NT machine using xcopy 
> end up with created & modified dates equal to the original 
> modified date of the file, and the accessed date becomes 
> the date of the xcopy operation.
> 
> Dates are as reported from a windows NT client in both 
> cases. The problem is that xcopy /d will NOT work as 
> expected when attempting to use it to only copy newer 
> files from NT to samba. Instead XCOPY /D will copy *all* 
> files. This is a problem as we hope to migrate a large # of 
> files from NT to samba and minimize downtime by using 
> xcopy /d to refresh any modified files. In this case we will 
> use a tape backup/restore to handle the modified files, but 
> it would be nice to know if xcopy can be made to work with 
> samba in this way?
> 
> 
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> Shawn Wright, Systems Manager
> Shawnigan Lake School
> http://www.sls.bc.ca
> [EMAIL PROTECTED]
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 


__ www.eeigm.inpl-nancy.fr __
 EEIGM - 6 rue Bastien LEPAGE - 54000 NANCY - FRANCE
   Phone +33.383.36.83.27 Fax +33.383.36.83.36
_


-
This mail sent through IMP: http://horde.org/imp/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 2.2.8 is failing on change machine account password

2003-03-27 Thread Eric Boehm
I've noticed that a few systems that I've upgraded to Samba 2.2.8 are
not able to change the machine account password.

I have security = domain and I am seeing entries like this in the log.

[2003/03/27 14:22:23, 1, pid=10302] smbd/service.c:(636)
  le21pai-1 (47.142.162.19) connect to service export as user wcitiadm (uid=201361, 
gid=4785) (pid 10302)
[2003/03/27 14:22:24, 0, pid=10302] rpc_client/cli_trust.c:(46)
  domain_client_validate: unable to fetch domain sid.
[2003/03/27 14:22:24, 0, pid=10302] rpc_client/cli_trust.c:(46)
  domain_client_validate: unable to fetch domain sid.
[2003/03/27 14:22:24, 0, pid=10302] rpc_client/cli_trust.c:(46)
  domain_client_validate: unable to fetch domain sid.
[2003/03/27 14:22:24, 0, pid=10302] rpc_client/cli_trust.c:(248)
  2003/03/27 14:22:24 : change_trust_account_password: Failed to change password for 
domain AMERICASE.

I've tried to debug this without much success. Any assistance in
debugging this or resolving this would be appreciated.

I am still able to access my shares but the machine account password
is not changing as it should.


-- 
Eric M. Boehm  /"\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba 2.2: workgroup browsing question

2003-03-27 Thread Brian C. Hill
I looked in the archives and docs over and over again.
I am sure I am missing something simple.

I have several SunOS 5.8 systems in a workgroup - one Sun is a
wins server and the others point to it. On my windows xp system, I can
see the Sun workgroup and many others.  I can drill down into the other
workgroups, but not the Sun one - can't open it at all - not even to
see the servers. What am I missing?

Yes, I am going to upgrade samba, but this seems like
a much more basic issue than a samba version issue. :)

Brian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: WinXP Pro passwords

2003-03-27 Thread wkc
>Problem description
>When changing the password of an existing user or adding a new user they
can not logon from a WinXP Pro machine.  Existing users >can logon OK from
WinXP Pro and Win98.  New users, and those with password changed, can logon
from a Win98 machine
>(smbclient server_name\\share_name -U user_name works OK).  I have
started an stopped samba but it makes no difference.

Just to let everyone know I have found a work around to my problem. It may
help others.

1on the server set the sampasswd to a blank (use smbpasswrd)
2create an account on the local (WinXP Pro) machine and log on as the
user you need to change
3Ctrl-Alt-Del and select change pasword
4set Log on to to the domain (Not the local machine)
5change the password (use blank for old password )
6log off and then log on to the domain

cherz

Keith



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] print$ share problem URGENT - BUG

2003-03-27 Thread Peter Hurley
Whoops!  "extract" is really "expand".

"expand /?" at the command prompt shows the options for expanding files
with the trailing underscore.  I use

expand -r *.??_

which creates new, renamed, expanded files from the compressed ones.

A word of warning: some compressed files do not have the original name
embedded within the file.  This will created expanded files with the
underscore removed, not replaced with the original last character.  In
these situations, one must refer to the .INF file to discover the true
name.

What would be great is if someone wrote a simple Win32 program that
parses the .INF print driver installation file, expanding the files as
necessary, getting files from the local workstation and uploading them
into the appropriate [print$] share directory, and doing the adddriver
and setdriver RPCs.  That way print driver installation would be free of
the hoops imposed by drivers & show add printer wizard goofiness.

Thanks,

Peter Hurley
[EMAIL PROTECTED]

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Thursday, March 27, 2003 8:18 AM
To: [EMAIL PROTECTED]
Subject: RE: [Samba] print$ share problem URGENT - BUG

Heya, I'm looking at having to do the same thing... a couple of
manufacturer's drivers either fail to install on samba, or install
incorrectly.  I'm using a W2k pro client but have no extract command.
Is this a program that comes with w2k or something you got from
somewhere else?

Btw, thanks for explaining the {2227a280-3aea...} messages.  Googling
turned up lots of hits, but the only suggested solution was to delete
the key from the client's registry (which didn't seem like a good idea
to me).  I didn't know that InProcServer was depended on by some driver
installations.  Realizing that samba as a print-server w/ automatic
driver download has more hurdles than getting a devmode set...

Thanks for letting me know about extract,
~ Daniel



On Wednesday, March 26, 2003 5:45 PM Peter Hurley wrote:
> I do not know why your logs are showing an smb_panic(), but 
> the failure
> to make a connection to {2227a280-3aea} is because the printer
> driver is attempting to open the "Printers" InProcServer on the remote
> print server.  
> 
> ***Snippet from logs***
> [2003/03/26 14:33:08, 0] smbd/service.c:make_connection(252)
>   donglesvr (10.217.7.11) couldn't find service
> ::{2227a280-3aea-1069-a2de-08002b30309d}
> ***
> 
> Since the print server is a Samba machine (that has no registry or
> capability to run InProcServers), that service doesn't exist.  I had
> this happen to me when trying to add additional drivers from my W2k
> workstation to our 2.2.7a Samba server for a new HP2200 
> network printer.
> 
> The solution I used was to add them manually via rpcclient on 
> the Samba
> server itself.  It took me quite a while.  Basically the process is:
> 1)  expand the driver files on your local W2k workstation, via the
> "extract" command line utility.
> 2)  copy the driver files up to the appropriate directory on the
> [print$] share.  See section 6.2.1 of the Samba HOWTO for the 
> directory
> structure.
> Basically, NT4/W2K/XP drivers go in W32X86 and 95/98/Me go into WIN40.
> 3)  on the samba server, run rpcclient.
> 4)  at the rpcclient prompt, use "adddriver" to install the files into
> the appropriate architecture location.  The tricky part of this is
> looking at the *.INF file to determine what parameters go where in the
> adddriver command. The format is:
> 
>   adddriver "Architecture" "LongPrinterName:DriverFile:DataFile:
> ConfigFile:HelpFile:LanguageMonitorFile:DataType:ListOfFiles"
> 
> See rpcclient() man page for list of Architectures.
> The ListOfFiles are the files not already specified in the other
> parameters.
> 
> For example,
> 
>   adddriver "Windows NT x86" "HP LaserJet 2200 Series PCL 6:
> HPBF3222.DLL:HPBF3224.PMD:HPBF3220.DLL:HPBF3220.HLP:HPBMMON.DLL:RAW:
> HPBAFD32.DLL,HPBFTM32.DLL,HPDOMON.DLL,HPBHEALR.DLL"
> 
> 5)  when you have added the driver successfully, then you use the
> "setdriver" command (still at the rpcclient prompt) to associate the
> printer share with the driver.
> 
> For example,
>   
>   setdriver "hp2200" "HP LaserJet 2200 Series PCL 6"
> 
> Now automatic driver download should work.
> 
> This process was so painful, eventually I'm going to look at the
> Imprints package to see if that works (there's a reference to this
> package in section 6.3 of the Samba HOWTO).
> 
> Thanks,
> 
> Peter Hurley
> [EMAIL PROTECTED]
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
> On Behalf Of Stéphane Purnelle
> Sent: Wednesday, March 26, 2003 4:33 PM
> To: [EMAIL PROTECTED]; samba US; samba-tech
> Subject: Re: [Samba] print$ share problem URGENT - BUG
> 
> Why I have no answer for my questions ?
> 
> I repeat the situation : 
> RedHat 8.0 with samba 2.2.8 compiled wiwth ldapsam and acl-support
> I need the print$ share and this sys

RE:Subject: [Samba] I see my samba server but.............

2003-03-27 Thread Kevin Smith
Well first problem I see is you editied your sbm.conf...Should be smb.conf
;-)
Can you access it as root? Id start by making sure the permissions are
correct. And that the Sharename in smb.conf matches the folder name on the
server and that the path is correct.   


--

Date: Mon, 24 Mar 2003 14:10:54 -0600
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: [Samba] I see my samba server but.
Message-ID: <[EMAIL PROTECTED]>
Content-Type: multipart/mixed; 
Boundary="0__=85256CF3006D91FF8f9e8a93df938690918c85256CF3006D91FF"
MIME-Version: 1.0
Precedence: list
Message: 1

--0__=85256CF3006D91FF8f9e8a93df938690918c85256CF3006D91FF
Content-type: text/plain; charset=us-ascii

Here I go guys!

I've already changed the configuration of my sbm.conf, also I made my samba
server to be configured as a windows domain, yes! it is found in my windows
domain now but as doing double click on this machine (samba) it asks me for
a user and passsword, it does not let me get into it, I have created the
same samba users as windows, but without any results.
I appreciate your help :

(See attached file: samba1.jpg)

And my samba config files is:


|---
|
|
|
| # Samba config file created using SWAT
|


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] 2.2.8 Upgrade, joining domain

2003-03-27 Thread Tom
Just posting an experience I had last weekend upgrading a Samba server 
(member server of NT4 domain) from 2.2.5 to 2.2.8...

I noticed that the "join domain" command doesn't seem to work anymore 
using the IP address of the PDC. I used to use the following command:

#smbpasswd -j  -r  -U 

With 2.2.8 it wouldn't work until I used this:

#smbpasswd -j  -r  -U 

Also, I added "-D 4" to the end, which gives a nice smattering of debug 
info. Great stuff if you're having trouble joining a domain.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] New Files in Samba

2003-03-27 Thread Tiago Cruz
On Thu, 2003-03-27 at 10:31, Jaques Metz wrote:
> Hi.
> 
> I've configured Samba to work as a dedicated file server, but when a user create a 
> new file in the shared directory, only this user can os access this file. What 
> should I do to change this?
> 
> Thanks.
> 
> Jaques Metz

Add in your share:

force create mode = 777
force directory mode = 777

[ ]'s

Tiago Cruz
Org. King de Contab. S/C Ltda.
www.linuxrapido.kit.net
Linux User #282636


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Common Authentication Scheme

2003-03-27 Thread Beau Hunter
On 3/26/03 22:17, "stscanlan" <[EMAIL PROTECTED]> wrote:

> Has anybody out there had luck with LDAP or similar to enable users to share
> a common logon database for Windows 2000 and Linux. Microsoft and Linux
> supposedly allow authentication using LDAP, Kerberos and alternative schemes
> to their native databases ie /etc/shadow/passwd and the SAM.
> 
> Any help with this would be greatly appreciated.
> 
> Steve S.

You can set up your linux box to import users via LDAP.  You will need to
make some changes to your AD schema, such as adding attributes for UniqueID,
mounts (typcially vfs, vfsopts, and vfsdir).  I have had problems getting a
clean group management system working, but the best work around I could
figure out is by adding MemberUID, userlist, and gid attributes to the AD
schema as well.  Unfortunately, this means adding users on the PDC to a
particular group does not add them on the Unix side, instead you have to
manually go in on the windows box using ADSI Edit, (or from the client side
using Domain admin privileges and cli tools) and manually add in the gid's
to each user name.  It's a pain, but it works.  There seems to be a serious
dearth of information on this.  Once you have LDAP authentication up and
running, then you can easily set up SMB pass through authentication with no
need for winbindd, though I've had some problems using secure passwords on
this.

Hope this helps,
Beau





-- 
Beau Hunter
Technical Consultant
Wedgetail Consulting
www.wedgetailtechs.com

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Maximum characters for valid users = ?

2003-03-27 Thread Tom Dickson
We have winbind running on our server, so all of our usernames look like
MIXEDDOMAIN+User Name, and because of the spaces in the names, we wrap all
of them with " "MIXEDDOMAIN+User Name" ". One share has many users, so the
valid users = list becomes long (over 1024 characters).

Testparm gives this error:

ERROR: string overflow by 34 in safe_strcpy [" "@MIXEDDOMAIN+Cert
Publishers" "
" "@MIXEDDOMAIN]

Whenever we get that error, there is difficulty connecting from the windows
clients.

If I remove about 50 characters worth of names, it goes away and everything
works right (for the names left). I know I can get around this limitation by
assigning a group on the 2000 server, but I still have two questions. Can I
have more that one valid users = line per share? And, is there a better way
to deal with spaces in usernames than " "User Name" "?

Note: The same thing happens with write list =.

Thank you,

Tom Dickson
InoStor, Corp.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problem with xcopy /d & samba

2003-03-27 Thread Shawn Wright
A problem has arisen with the way samba handles file 
creation dates compared to NT/win2k, which prevents 
xcopy /d from working correctly.

On NT/Win2k, files copied from another NT machine using 
xcopy end up with the modified dates equal to the original 
modified date of the file, and the created and accessed 
dates become the date of the xcopy operation.

On Samba, files copied from an NT machine using xcopy 
end up with created & modified dates equal to the original 
modified date of the file, and the accessed date becomes 
the date of the xcopy operation.

Dates are as reported from a windows NT client in both 
cases. The problem is that xcopy /d will NOT work as 
expected when attempting to use it to only copy newer 
files from NT to samba. Instead XCOPY /D will copy *all* 
files. This is a problem as we hope to migrate a large # of 
files from NT to samba and minimize downtime by using 
xcopy /d to refresh any modified files. In this case we will 
use a tape backup/restore to handle the modified files, but 
it would be nice to know if xcopy can be made to work with 
samba in this way?


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Shawn Wright, Systems Manager
Shawnigan Lake School
http://www.sls.bc.ca
[EMAIL PROTECTED]



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Users only in ldap

2003-03-27 Thread Lucas Lain
Hi everybody ... !! 
i have a few questions...
i want to implement samba with ldap(only to share folders) ... and i want to know if i 
can create virtual users (the users are only in the ldap server, and not in the passwd 
file)
is it posible??

TIA

-- 
Lucas Lain
-> Aconectarse.com - 40004000
[EMAIL PROTECTED]
[EMAIL PROTECTED]



pgp0.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] "Doing a node status request to the domain master browser"

2003-03-27 Thread dweise
Dear samba users,
   i'm getting the following message:
Doing a node status request to the domain master browser at IP 
XXX.XXX.XXX.XXX failed.
my assumption is that this computer wants to become the domain master or 
already has. am i off base in thinking this?
thank you.



--dave

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] SWAT problem

2003-03-27 Thread Greg Miller
Do you have the option "Work Offline" selected in internet explorer?  If
so this will prevent you from accessing ANY website other than one
hosted locally on that system.  Un check it and try accessing swat
again.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
sathya kuppa
Sent: Thursday, March 27, 2003 11:53 AM
To: [EMAIL PROTECTED]
Subject: [Samba] SWAT problem

dear all, I am able to run the GUI SWAT in my host (RedHat8.0)
and other elements in the network(of different os) when the connection
to internet is available.  But the swat is not accessible when the
internet connection is not available ( work offline).  Can somebody
suggest a solution?  Sathya
Student-India
Catch all the cricket action. Download Yahoo! Score tracker
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problem Joining a domain

2003-03-27 Thread Christian . Duclou


Hi,

I've a NT 4 SP6 PDC, i want to join this domain with a Linux Samba server
(version 2.2.3a)

Here is the GLOBAL of smb.conf:
==
[global]
   workgroup = RESSAC
  netbios name = GABARE
   server string = Frontal pages Web - Samba Server
   log file = /var/log/samba/log.%m
   max log size = 50
   log level = 3
   hosts allow = 193.55.236. 127.
   security = domain
   encrypt passwords = true
   password server = FREGATE
   remote announce = 193.55.236.255
   dns proxy = no
===

GABARE is well create on FREGATE as "station server"

Trying to join, i receive this message :
===
[EMAIL PROTECTED] root]# smbpasswd -j RESSAC -D4
added interface ip=193.55.236.130 bcast=193.55.236.255 nmask=255.255.255.0
resolve_lmhosts: Attempting lmhosts lookup for name FREGATE<0x20>
getlmhostsent: lmhost entry: 193.55.236.54 FREGATE
Connecting to 193.55.236.54 at port 445
error connecting to 193.55.236.54:445 (Connection refused)
Connecting to 193.55.236.54 at port 139
resolve_lmhosts: Attempting lmhosts lookup for name FREGATE<0x20>
getlmhostsent: lmhost entry: 193.55.236.54 FREGATE
Connecting to 193.55.236.54 at port 445
error connecting to 193.55.236.54:445 (Connection refused)
Connecting to 193.55.236.54 at port 139
cli_net_req_chal: LSA Request Challenge from FREGATE to GABARE: F41A0E3EFDE773C6
cred_session_key
cred_create
cli_net_auth2: srv:\\FREGATE acct:GABARE$ sc:2 mc: GABARE chal BCC467572BFF5E20
neg: 1ff
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
cli_nt_setup_creds: auth2 challenge failed
modify_trust_password: unable to setup the PDC credentials to machine FREGATE.
Error was : NT_STATUS_ACCESS_DENIED.
2003/03/27 17:50:30 : change_trust_account_password: Failed to change password
for domain RESSAC.
Unable to join domain RESSAC.
===

Why does it try to access 445 port? It seems to be a W2000 name service?

Any idea?

-
__ www.eeigm.inpl-nancy.fr __
 EEIGM - 6 rue Bastien LEPAGE - 54000 NANCY - FRANCE
   Phone +33.383.36.83.27 Fax +33.383.36.83.36
_


-
This mail sent through IMP: http://horde.org/imp/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] SWAT problem

2003-03-27 Thread sathya kuppa
dear all, I am able to run the GUI SWAT in my host (RedHat8.0) and other 
elements in the network(of different os) when the connection to internet is available. 
 But the swat is not accessible when the internet connection is not available ( work 
offline).  Can somebody suggest a solution?
  SathyaStudent-India
Catch all the cricket action. Download Yahoo! Score tracker
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Winbind broken after 2.2.8 upgrade

2003-03-27 Thread Shawn Wright
On 27 Mar 2003 at 7:21, Andrew Bartlett wrote:

> On Thu, Mar 27, 2003 at 01:27:26AM +, Andrew Bartlett wrote:
> > On Wed, Mar 26, 2003 at 04:11:13PM -0800, Shawn Wright wrote:
> > > Ok, stupid me. Somehow I missed updating /lib/libnss_winbind.so on both 
> > > these machines. Presumably this would have also caused corruption of the 
> > > winbind idmap?
> > 
> > I doubt it, actually.  
> > 
> > > Since winbind is now installed with a "make install", would it not be a good 
> > > idea to also install libnss_winbind.so also? Or at least provide some version 
> > > checking in winbind so that it will fail to start and report an error if it 
> > > encounters the wrong version of libnss_winbind.so?
> > 
> > Winbind doens't *require* libnss_winbind - there are actually situations where
> > it is used without it.  That said, I've implemented some extensive version
> > checks from the client side - we certainly won't connect to a winbind with
> > a different protocol version any more.
> 
> (In Samba 3.0 and Samba HEAD)
> 
> In Samba 2.2 we have a more basic check, but it should still cause the client to 
> bail if contacting the wrong version.

Sorry for my ignorance, but I'm not sure what you mean by client here, but 
assume winbind is a client to nss? I do know that winbind from 2.2.8 *did* 
run with libnss_winbind.so v2.2.5 in place, resulting in broken getent passwd 
output, where only domain user ids were shown. Putting the 
libnss_winbind.so from v2.2.8 was all that was required to fix the problem...


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Shawn Wright, Systems Manager
Shawnigan Lake School
http://www.sls.bc.ca
[EMAIL PROTECTED]



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] I see my samba server but.............

2003-03-27 Thread Manuel_Casoluengo
Muchas Gracias Buchan Milne fro you help I´ll do that
Thank You!


Manuel Casoluengo Villanueva
Network Administrator Mexico
Coty Inc.






--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Access to shares for authenticated domain users only

2003-03-27 Thread Chris Smith
I believe this works OK with an NT PDC as one can restrict share users
to, as an example, members of the "Domain Users" group, but this group
is not available in Samba 2.2.x. Maybe 3.0 will help.
I suppose, as one hack, you could use a "root preexec" and a "root
postexec" to add and remove users to a particular group as they log on
and off and then use this group to define the valid users of the share.

On Thu, 2003-03-27 at 00:31, Kevin wrote:
> I am running several samba servers (2.2.3a and 2.2.7) in various places as
> pdcs. Everything seems to be running smoothly, but I can't find any way of
> restricting access to only those uses who have logged on to the domain. Is
> this possible? ie at the moment, any user can map a drive to \\server\share,
> put in a valid user/password pair and have access to that share without
> going through any logon script or pol files. This is what I would like to
> avoid. I believe that if I can do this, it would also stop any unauthorised
> machines from accessing the shares, as these machines would not be joined to
> the domain.
> 
> Is this sort of authorisation possible?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] 2.2.8 - can't view or change permissions from NT clients

2003-03-27 Thread dowlime
We were using 2.0.6 on a SunOS 5.6 server, using domain security in an NT domain, and 
have upgraded to 2.2.8 for the security fix.  Now, when the file permissions are 
displayed on an NT client, ACL's are only shown for user/group/other if there are R,W, 
or X permissions.  If u, g, or o have no rights, the ACL is not displayed for them. 

Example, 
in 2.0.6, with a file with r--r- permissions (440), the NT permissions display 
would have an ACL for the owner with R permissions, an ACL for the group with R 
permissions, and the Everyone group would show as O for no permissions.
In 2.2.8 with the same file, the NT permissions dialog only shows an ACL line for the 
owner, and an ACL line for the group, but NO ACL line for Everyone since they have no 
permissions
If a file had r permissions, there won't be an ACL line for the group either.

In addition, we can't "Add" an ACL for the ones not displayed - In other words, in the 
first example, we couldn't Add the Everyone group with R prrmissions to give world 
read.

Is this normal behavior in 2.2.8, or should we see the same displays as before?
How can we get the displays to show as before, or what might we have missed?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Can't join domain "wrong password"

2003-03-27 Thread Bradley W. Langhorst
On Tue, 2003-03-25 at 21:29, Greg Miller wrote:
> Guest account meaning an account named guest added to the smbpasswd?
> Yes I have.  It is not assigned a password.  Should it have one? 
I don't think it needs a password - you just need to tell samba to use
that user as the guest user 

guest account =  
should be something like
guest account = nobody

> Could you explain "you have some unusual valid users statements..."?
 
valid users = @family

valid users = %S (I don't know off hand what that does...)

i find it hard to read the output of testparm (too much to sift through)

brad



-- 
Bradley W. Langhorst <[EMAIL PROTECTED]>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] New Files in Samba

2003-03-27 Thread Robert Adkins II
Hello,

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Eric Halverson
Sent: Thursday, March 27, 2003 9:37 AM
To: Jaques Metz
Cc: Samba List
Subject: Re: [Samba] New Files in Samba

>On Thu, 2003-03-27 at 08:31, Jaques Metz wrote:
>> Hi.
>> 
>> I've configured Samba to work as a dedicated file server, but when a
user >>create a new file in the shared directory, only this user can os
access >>this file. What should I do to change this?
>> 
>> Thanks.
>> 
>> Jaques Metz

The answer is simple...

Let's say that you have a partition labeled "share" and inside
it are a number of directories that you are sharing...

cd in to the "share" partition...

Then run this command...

chmod -R g+s *

What that will do is cause all files folders and sub-directories
to be created with the same group ownership as group user that access
and creates such files and folders. What you will end up with is the
following when running a ls -l :


[EMAIL PROTECTED] share]# ls -l
total 84
drwxrwsrwx3 root account  4096 Jan  9 10:57 account
drwxrws---   29 root cad  4096 Mar 26 18:26 cad
drwxr-x---5 root root 4096 Jan 20 11:13 configurations
drwxrws---   26 root docs 4096 Mar 25 12:11 docs
drwxrws---   31 root inspect  4096 Mar 27 07:07 inspect
drwxrws---3 root jboss4096 Mar 27 09:43 jobboss
drwxrws---2 root laser4096 Mar 27 10:09 laser
drwxr-x---2 root root 4096 Mar 21 08:58 logfiles
drwxrwS---2 root root16384 Jul 16  2002 lost+found
drwxrws---3 root mail 4096 Jan 22 14:05 mail
drwxrws---   12 root mill 4096 Mar 27 10:08 mill
drwxrws---   18 root dmusers  4096 Mar 24 13:55 profiles
drwxrws---   27 root public   4096 Mar 26 16:02 public
drwxrws---   14 radkins  purchasi 8192 Mar 27 10:00 purchasing
drwxrws---9 dgillesp qsman4096 Mar  3 11:59 qs9000
drwxrws---2 root quotes   4096 Dec  5 10:33 quotes
drwxrws---2 root shipping 4096 Feb 22 09:06 shipping

If you know how the above output is read... The first listing
shows what the files or directories are. The first group of 3 after the
'd' (which designates directory), refers to a user account, which in the
case of most of the directories is root. The second group of 3
characters refers to the group, which can easily be seen above. The
final group of 3 refers to world (meaning EVERYONE on the system)
rights. 

If you are looking to fully utilize user and group security
rights, then the final set of three should be --- like they are above.
In the case of the second set of 3, the 's' denotes that all files and
folders created within those directories will have the same group
ownership rights attached to them.

With this you can create a number of nested group/user rights.

>You'll want to look at the create mask (or create mode) options in that
>share.  If you want rwx access for the creator and primary group,
create
>mask would be 0770, if you want full access for everyone to have full
>access to the files, create mask would reflect 0777.  Just make sure
>that your create mask corresponds with the linux/unix file permission
>structure.

For the LOVE OF GOD, please refrain from using the number method
when running chmod. You will have stricter control and actually KNOW
what rights you are handing out to the various users and groups on your
system when using the alpha character method.

For example;

chmod ug+rw some_text_file.txt

Will put User "u" and Group "g" read "r" and write "w" rights
onto the file. This will allow the user that has his or her username
listed as the owner of the file as well as any members of the group that
are listed on the file. For the "World" rights use "o". To add such
rights use a "+" sign in between the "ugo" (User, Group, World) and the
"rwx" (Read, Write, Executable) and the "-" sign to take them away.

If you have a group called Accounting that needs access to a
directory then use the following command...

chown root:Accounting 

Then change the rwx rights to allow the group Accounting to use
the directory and files within.

Then you can run whatever group ownership rights you want on
that directory and all Accounting group members will have access to the
files within.

These two commands, chmod and chown, are likely the most
important UNIX/Linux commands that you could ever possibly learn. 

>-- 
>Eric Halverson <[EMAIL PROTECTED]>
>Doctors Care Health Services


Regards,
Robert Adkins II
IT Manager/Buyer
Impel Industries, Inc.
586-254-5800

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Groups in Samba w/LDAP and ACL

2003-03-27 Thread Jean-Rene Cormier
I have samba-2.2.8 with LDAP and ACL. When I open the ACL in WinXP how
do I add another group? Which attributes does Samba uses to search for
groups?

Thanks

Jean-Rene Cormier


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] New Files in Samba

2003-03-27 Thread Eric Halverson
On Thu, 2003-03-27 at 08:31, Jaques Metz wrote:
> Hi.
> 
> I've configured Samba to work as a dedicated file server, but when a user create a 
> new file in the shared directory, only this user can os access this file. What 
> should I do to change this?
> 
> Thanks.
> 
> Jaques Metz

You'll want to look at the create mask (or create mode) options in that
share.  If you want rwx access for the creator and primary group, create
mask would be 0770, if you want full access for everyone to have full
access to the files, create mask would reflect 0777.  Just make sure
that your create mask corresponds with the linux/unix file permission
structure.

-- 
Eric Halverson <[EMAIL PROTECTED]>
Doctors Care Health Services

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Auth Problems with 2.2.8 and Windows 2000

2003-03-27 Thread Gilbert, Erric E - CIDS-2

We managed to fix this yesterday by modifing the security to DOMAIN from SERVER


> -Original Message-
> From: Gilbert, Erric E - CIDS-2 [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, March 26, 2003 2:26 PM
> To: '[EMAIL PROTECTED]'
> Subject: [Samba] Auth Problems with 2.2.8 and Windows 2000
> 
> 
> 
>   Hi Folks, 
> 
> We recently upgraded from 2.2.7 to 2.2.8 to fix the recently 
> discovered bug in Samba. We are now getting intermittent log 
> on failures from Win2K clients connecting to our Samba server 
> (vitals below).
> 
> Samba 2.2.8 is running on Solaris 2.8 with Kernel 108528-18
> 
> Our Samba security method is set to server and we pass along 
> auth requests to an Win2K AD Domain Controller that has NT 4 
> compatibility enabled.
> 
> We use 4 DC but for testing we have limited requests down to 
> 1. All DCs give the same un-desirable results.
> 
> The DC does not show a failure but the Samba server shows:
> 
> error packet at smbd/reply.c(1025) cmd=115 (SMBsesssetupX) 
> NT_STATUS_LOGON_FAILURE
> 
> Some dirs on the samba server have in excess of 3 - 5K of 
> files (I am currently leaning on a timeout theory)
> 
> The authentication does work almost 50% of the time. It isn't 
> exact but it is very close.
> 
> This may be a bit vague so if there are things I could 
> describe further to help with a resolutoin, please let me know.
> 
> Thanks,
> 
> Erric
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] W2K DC as password server

2003-03-27 Thread Bonasera, James D
All,

I have recently begun a migration form NT 4.0 DCs to W2K DCs. Users have a
home folder defined on Windows that lives on a samba server that now maps
inconsistently when using the W2K server as the password server. Everything
works as expected when I use an NT BDC as the password server.

We have been using this configuration for a couple of years, upgrading samba
several times, but have only seen this problem when using a W2K DC.
Additionally, the problem does not occur during off-hours testing.

I plan to test security = domain to see if it resolves this problem but was
wondering if anyone has an explanation.

Solaris 2.9
Samba 2.2.3a
W2K Professional clients

Thanks,

Jim

James D. Bonasera
Lockheed Martin Corp.
(610) 531-5873

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Help regarding Samba Server

2003-03-27 Thread Bradley W. Langhorst
On Wed, 2003-03-26 at 15:55, Abhijit Vaidya wrote:
> hi all,
> 
> I am student at ASU and i wanted to know if I could use Samba to export some local 
> file system like NFS via samba server. I am using Red Hat Linux 8 (kernel 
> 2.4.18-14). If it is possible kindly let me know how i can do it.
> 
> thanks,
> 
> Abhijit
> 
you can do it by reading the manual at 
www.samba.org

I don't recommend samba for unix to unix file sharing
use NFS, AFS, or something else.

brad
-- 
Bradley W. Langhorst <[EMAIL PROTECTED]>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] New Files in Samba

2003-03-27 Thread Jaques Metz
Hi.

I've configured Samba to work as a dedicated file server, but when a user create a new 
file in the shared directory, only this user can os access this file. What should I do 
to change this?

Thanks.

Jaques Metz
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Access to shares for authenticated domain users only

2003-03-27 Thread Kevin
On Thu, 27 Mar 2003 07:11:55 +, Andrew wrote:

>While 'hacks' might be possible, shares are authenticated seperatly to the 
>domain logon, and there is no linkage apart from the fact that the domain
>logon sets up the default username/pw pair.
>
>Fundementally, any restriction imposed by logon script/.pol files can be
>avoided - you must never trust the client to actually follow their directions...
>

Thanks Andrew. Point taken. Where would you go for more info on this sort of
security? In particular I'm trying to avoid unauthorised notebooks etc.
connecting to the network and then disappearing off home with sensitive data
from the server on their drives.

I was thinking about using SSH, but it seems like a lot of work to set up a
key for each user, and even then not foolproof.

Any suggestions welcome.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] I see my samba server but.............

2003-03-27 Thread Buchan Milne
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

> Date: Mon, 24 Mar 2003 14:10:54 -0600
> From: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Subject: [Samba] I see my samba server but.
> Message-ID: <[EMAIL PROTECTED]>
> Content-Type: multipart/mixed;
>   Boundary="0__=85256CF3006D91FF8f9e8a93df938690918c85256CF3006D91FF"
> MIME-Version: 1.0
> Precedence: list
> Message: 1
>
> --0__=85256CF3006D91FF8f9e8a93df938690918c85256CF3006D91FF
> Content-type: text/plain; charset=us-ascii
>
> Here I go guys!
>
> I've already changed the configuration of my sbm.conf, also I made my
samba
> server to be configured as a windows domain, yes! it is found in my
windows
> domain now but as doing double click on this machine (samba) it asks
me for
> a user and passsword, it does not let me get into it, I have created the
> same samba users as windows, but without any results.
> I appreciate your help :
>
> (See attached file: samba1.jpg)
>
> And my samba config files is:
>

Looks like it was a Mandrake 9.0 default config file until you crucified
it with SWAT ;-).

The best option for you may be winbind. If you have not got too much
time invested in this machine, you may consider doing an installation in
expert mode, where you can choose to have authentication via a Windows
Domain (which sets up winbind).

If not, you need to do this manually.

1)Install samba-winbind, either with software manager, or:

# urpmi samba-winbind

2)Get a decent config file (backing up your current one)

# cp /etc/samba/smb.conf /etc/samba/smb.conf.backup
# cp /etc/samba/smb-winbind.conf /etc/samba/smb.conf

3)Edit the file with the text editor of your choice, spend 5 minutes
reading it first, then change your workgroup name back as it was.

4)Join the domain
# smbpasswd -j  -U 

5)Start winbind
# service winbind start

6)Test

# wbinfo -u
should list users
# getent passwd
should list users in the same format as the passwd file

7)Setup authentication via winbind (making a backup):
# cp /etc/pam.d/system-auth /etc/pam.d/system-auth.backup
# cp /etc/pam.d/system-auth-winbind /etc/pam.d/system-auth

(everything up to here gets done for you if you choose Windows Domain
for authentication during installation)

8)Login to X/KDE/GNOME/Mail server/console with your domain account

There are some caveats, see
http://ranger.dnsalias.com/mandrake/samba/Integrating%20Linux%20into%20Windows%20Networks.pdf
for more details in winbind setup in Mandrake.

- --
|--Another happy Mandrake Club member--|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE+gu7PrJK6UGDSBKcRAm4AAJ9XHU1bu+zaPbGW+2Y7hV5twozOvgCffYaN
jvBO7j6tFeDIwRUu1r9yXZc=
=z0p0
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba reporting errors!

2003-03-27 Thread Kevin A. Pieckiel
My syslog is constantly bombarded with these messages:

Mar 27 07:15:35 fileserver1 smbd[70359]: [2003/03/27 07:15:35, 0] 
lib/util_sock.c:get_socket_addr(1012) 
Mar 27 07:15:35 fileserver1 smbd[70359]:   getpeername failed. Error was Socket is not 
connected 
Mar 27 07:15:35 fileserver1 smbd[70359]: [2003/03/27 07:15:35, 0] 
lib/util_sock.c:write_socket_data(499) 
Mar 27 07:15:35 fileserver1 smbd[70359]:   write_socket_data: write failure. Error = 
Broken pipe 
Mar 27 07:15:35 fileserver1 smbd[70359]: [2003/03/27 07:15:35, 0] 
lib/util_sock.c:write_socket(524) 
Mar 27 07:15:35 fileserver1 smbd[70359]:   write_socket: Error writing 4 bytes to 
socket 12: ERRNO = Broken pipe 
Mar 27 07:15:35 fileserver1 smbd[70359]: [2003/03/27 07:15:35, 0] 
lib/util_sock.c:send_smb(704) 
Mar 27 07:15:35 fileserver1 smbd[70359]:   Error writing 4 bytes to client. -1. 
(Broken pipe) 

I'm running Samba 2.2.8 without optimizations.

#uname -a
FreeBSD fileserver1.smartrafficenter.net 4.7-STABLE FreeBSD 4.7-STABLE #0: Mon Dec 16 
19:41:03 EST 2002 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/FILESERVER1  i386

What do these message mean?  How to I rid myself of them?

Thanks,
Kevin


I'm desperately trying to figure out
why kamikaze pilots wore helmets
-- Dave Edison
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] compile samba 2.2.8 on hpux11

2003-03-27 Thread Kulicke Kai-CKK100
did someone managed to build samba 2.2.8 on hpux11
with gcc 3.2 or gcc 2.95
 
 
I tried both and always get the make error:
 
ld: No $UNWIND_END$ subspace has been defined (probably missing /usr/ccs/lib/crt0.o)
*** Error exit code 1

I did ./configure --prefix=/opt/samba 
 
Regards
Kai
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba]

2003-03-27 Thread p.hoess
Hello,

iam looking for a way to splitt a printer job ( 200 pages) into many different jobs (2 
or 3 Pages).

Does anyone know a way to do this with samba or a other programm?


Thanks in advance

Philipp Hoeß


__
Viren? Wir wissen nicht was Ihr Arzt empfiehlt. Wir empfehlen den
Virencheck fur Ihre E-Mail-Anhange! http://freemail.web.de/features/?mc=021159

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Smbclient client IP address

2003-03-27 Thread Bruno Afonso
Hello,

Is it possible to specify  the client's ip address? I've have tried 
creating a custom smb.conf and passing that to smbclient but to no 
avail. It always chooses the default ip on the FreeBSD box. I have a 
remote samba machine that auths by IP and I need to set a different 
client ip other than the box's default.

Thanks in advance
--
Bruno Miguel Afonso
Biological Eng. student.
[EMAIL PROTECTED]
D.E.Q. @ I.S.T. - Portugal
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] WARNING: The "printer driver location"option is deprecated

2003-03-27 Thread Peter Carpenter
Andre,

Read Chapter 6 "Printing Support in Samba 2.2.x" in the
"Samba-HOWTO-Collection" document which is in your source tree as a .pdf and
a .html and on the Samba web site.

PCC

-Original Message-
From: Andre Dieball [mailto:[EMAIL PROTECTED]
Sent: Wednesday, 26 March, 2003 5:50 PM

Hello

After upgrade to 2.2.8-1 woody fom 2.2.7a I get (apart from other problems)
the following error message:

WARNING: The "printer driver location"option is deprecated

As I use the Samba server only for printing, I'm not sure, what this means
to me, as I have the follwoing in my smb.conf:

printer driver file = /etc/samba/printers.def

Any help is really appreciated.

Thanks a lot in advance.


Mit freundlichen Grüßen / Yours sincerely,

Andre Dieball
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Does "active directory" support include policy support

2003-03-27 Thread Lasse Riis
Well, a rather odd subject, but I couldn't really express it differently.
I would simply like to know if the active directory "emulation" of 
samba+openLDAP+kerberos or samba 3.0 includes support for policies.

I have a bunch of XP clients that I need to set some restrictions on. 
But it seems the days of config.pol files are over, so i need active 
directory support on my PDC. Having read several articles on active 
directory, I still don't understand it fully, but articles about setting 
up active directory on a samba pdc mentioned only partial support for 
active directory(only some features supported).

So before I start crashing our server with software and configuration, I 
would like to know if (group)policies are supported by active directory 
on samba. If this is the case, I'd also like to hear if anybody has a 
working setup of it, and maybe some links (I couldn't finde any) to 
howtos

Lasse Riis

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba