Re: [Samba] Access to shares for authenticated domain users only
On Thu, 2003-03-27 at 23:45, Kevin wrote: > On Thu, 27 Mar 2003 07:11:55 +, Andrew wrote: > > >While 'hacks' might be possible, shares are authenticated seperatly to the > >domain logon, and there is no linkage apart from the fact that the domain > >logon sets up the default username/pw pair. > > > >Fundementally, any restriction imposed by logon script/.pol files can be > >avoided - you must never trust the client to actually follow their directions... > > > > Thanks Andrew. Point taken. Where would you go for more info on this sort of > security? In particular I'm trying to avoid unauthorised notebooks etc. > connecting to the network and then disappearing off home with sensitive data > from the server on their drives. Really, the best you can do is per-user passwords, strong passwords, correctly set permissions, and policies (human policies, not computer ones :-). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Does "active directory" support include policy support
On Thu, 2003-03-27 at 19:53, Lasse Riis wrote: > Well, a rather odd subject, but I couldn't really express it differently. > I would simply like to know if the active directory "emulation" of > samba+openLDAP+kerberos or samba 3.0 includes support for policies. > > I have a bunch of XP clients that I need to set some restrictions on. > But it seems the days of config.pol files are over, so i need active > directory support on my PDC. Having read several articles on active > directory, I still don't understand it fully, but articles about setting > up active directory on a samba pdc mentioned only partial support for > active directory(only some features supported). > > So before I start crashing our server with software and configuration, I > would like to know if (group)policies are supported by active directory > on samba. If this is the case, I'd also like to hear if anybody has a > working setup of it, and maybe some links (I couldn't finde any) to > howtos We don't yet have an Active Directory PDC (it is much more than samba+openLDAP+kerberos - we need them all working with each other :-). That said, we are often confused for an active directory PDC by the clients - they often 'fall back' in parts of the protocol. It may well be possible to create such policies - In the end, they are just a file in a particular file share. It would be an interesting challenge for somebody to work on. :-) Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Maximum characters for valid users = ?
On Fri, 2003-03-28 at 05:07, Tom Dickson wrote: > We have winbind running on our server, so all of our usernames look like > MIXEDDOMAIN+User Name, and because of the spaces in the names, we wrap all > of them with " "MIXEDDOMAIN+User Name" ". One share has many users, so the > valid users = list becomes long (over 1024 characters). Yes, in Samba 2.2 there is a static buffer here, of 1024 chars. > Testparm gives this error: > > ERROR: string overflow by 34 in safe_strcpy [" "@MIXEDDOMAIN+Cert > Publishers" " > " "@MIXEDDOMAIN] > > Whenever we get that error, there is difficulty connecting from the windows > clients. > > If I remove about 50 characters worth of names, it goes away and everything > works right (for the names left). I know I can get around this limitation by > assigning a group on the 2000 server, but I still have two questions. Can I > have more that one valid users = line per share? No. > And, is there a better way > to deal with spaces in usernames than " "User Name" "? > > Note: The same thing happens with write list =. This should be fixed in Samba 3.0, due to a change to the way we process such lists, but you are much advised to use a group on the server. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba/ms terminal server problem
Hello, i have a problem with samba (2.2.6) and microsoft terminal server (Windows 2000 Server, SP3) .only one user, who is working on the microsoft terminal server, can work with the samba share "TEST" when another terminal server user connect to the samba share "TEST", the other user will be disconnected this problem is only at the microsoft terminal server user of workstations can work without problems thanks Christoph Glanner -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: RES: RES: [Samba] Re: Winbind broken after 2.2.8 upgrade
On Fri, 2003-03-28 at 09:46, FRANCO wrote: > I did it more then 12 times... > > I have a lot of problems with winbind and NEVER I did receive a answer... > Sorry if I have a poore english: There are a number of documents on 'how to get questions answered' around on the net. In particular, just repeating the question, or complaining that your question isn't answered just gets people frustrated. Instead, show that you have tried to solve the problem yourself. For example, if you have downgraded back to 2.2.7, and the problem 'went away', then this needs to be made clear. If you didn't, how can you claim it's a bug in 2.2.8? > I hve 3 installations with problems... I never saw this I think that Im not > a god SAMBA Administrator but I did read all the doc I dont have any > troubles with other soft, but with samba ehehehehehe Samba is a complex peice of software. It's interactions with (often separately maintained) Windows DCs is particularly complex. If it doesn't occur on all your DCs, then you should look at what is different. This information should be present when you contact the list. > I did send e-mails to the lis in : > > 11/3. 12/3, 16/3, 18/3, 19, 20, 25, 27 with the same questions If you > want, please check it and will see if Im joking... Im 42 years old. > > > > FIRST INSTALATION: > > Can yoiu help m? > > [EMAIL PROTECTED] /etc]# smbpasswd -j surson -r cleo -U Administrator > Password: > Joined domain SURSON. > [EMAIL PROTECTED] /etc]# > > > [EMAIL PROTECTED] /etc]# smbclient //firewall/PUBLICO -UAdministrator added > interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0 Got a > positive name query response from 192.168.1.2 ( 192.168.1.1 ) > Password: > session setup failed: NT_STATUS_LOGON_FAILURE > > When I try \\firewall\PUBLICO in the NT I receive a BOX to type USER and > PASSWD > > Joe log.cleo > > [2003/03/25 04:38:27, 0] > smbd/password.c:connect_to_domain_password_server(1307) > connect_to_domain_password_server: machine CLEO rejected the tconX on the > IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. [2003/03/25 04:38:27, 0] > smbd/password.c:domain_client_validate(1554) > domain_client_validate: Domain password server not available. [2003/03/25 This looks like an issue with your PDC, not with Samba. Your PDC is has 'restrict anonymous = 2' set. The two options are to set a username for Samba to use (wbinfo -Auser%pass), or to disable it. However, setting this only really works for Samba 3.0 - for 2.2 you really can't run with this set. If you already have a username/pw set (by wbinfo -A), then I would suspect that you have SMB signing required, on a 'fixed' DC (MS did not used to enforce this). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] (no subject)
-- ** T Balamurugan, Systems Administrator, AU-KBC Research Centre, MIT Campus of Anna University, Chromepet,Chennai-600044, Tamilnadu, India. Tel: +91 44 22234885, 22232711 (O); +91 4112 231980 (R); Fax: +91 44 22231034; e-mail: [EMAIL PROTECTED]; -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] connection to a w2k pdc
my *nix client has successfully connected to the w2k domain, but I find that the clients need to login with the computer name & then the username. ie username: computername\username I also noticed it says in documentation that usernames on the *nix machine should appear in the domain\username form. Mine arn't doing that, they just appear as the username. The main reason I want to fix this up is to save having to do a second login, and so I can have the roaming profiles store on the *nix machine any Ideas would be greatly appreciated. I will paste my smb.conf if need be. thanks in advance -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem with xcopy /d & samba
On Thu, 27 Mar 2003 09:37:47 -0800, Stephen wrote: >A problem has arisen with the way samba handles file >creation dates compared to NT/win2k, which prevents >xcopy /d from working correctly. ISTR a generic problem with xcopy dates across a network. I got round it by using robocopy in it's place, as recommended my MS. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] getent displays incomplete lists of groups on Solaris 8
Greetings, I have installed the samba 2.2.8 binary package under Solaris 8 and followed the HOWTO in order to get winbind working. My samba server is participating in an NT 4.0 domain which contains 2000 users and 250 Domain groups. On the samba server, I can issue a wbinfo -g and see a complete list of my domain groups. However, when I issue a getent group, the last group I see is the one listed immediately before the Domain Users group. If I add a new group to the domain, it will appear when using getent group as long as its name falls before the name "Domain Users" in the alphabet. This problem does not occur with users, issuing getent passwd displays a complete list of all users. I have installed samba 2.2.8 on a RedHat Linux 8.0 server, joined it to this same NT domain and have experienced no problems. getent group works as it should under Linux. I suspect that Solaris is having a problem enumerating the Domain Users group because it is the one group in the domain in which everyone is a member. Is there some limit in Solaris in regards to the number of users which may be in a group ? Has anyone else experienced this type of behavior in a Solaris 8 environment ? I have experienced this on two different Solaris servers, one on which I installed the samba binary package, and the other where I compiled samba from the source code. Any suggestions, or advice appreciated. Thanks Chris Hanrahan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Installing Samba on AIX
Hi, I'm installing Samba version 2.2.7.0 using smit install. Smit installs everything but doesn't create a /usr/local/samba dir. All the samba files are located in /usr/local/bin. But when I try to test my setup and so smbpasswd, it wants to look for everything in /usr/local/samba dir. Should I just create a /usr/local/samba dir and copy all the samba files from bin to the respective samba dir? Thanks...Bobby -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba and CCC
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 26 Mar 2003, Will L G wrote: > When are you all going to make Samba compatible with CCC (Compaq > Compiler)? I would really like to be able to compile it using CCC but I > keep getting the errors listed below. I was wondering, could please > point me in the right direction for a solution to this dilemma? Don't think any one on the team has access to a machine with compaq's compiler. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+g63nIR7qMdg1EfYRAm2fAKCgosf9jpVFOamT7fqMLmRZ8l4ERACfV8ZH wiCv3bTMOmbdOT1SbJjUOs0= =px0B -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Point and Print problem 2.2.7A and 2.2.8
I have detected significant performance slow down when I use PnP driver with versions 2.2.7A and 2.2.8. It happened with all kinds of Windows OS (exclude 9x) when user has administrative rights to Samba based printers. In Windows system event viewer I see that spooler retrieves printer driver files from Samba server to Window machine a lot of times. It happened each time when I try to update driver properties, change paper size or print .. Sometimes Windows's spooler retrieves driver files hundreds times and it take all CPU's and network resources. It newer happened before with SAMBA 2.2.2 we used. Thanks Arcady -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Help with password changing problem
I am having an issue changing local unix passwords - when I attempt to change my root password, I get this error: [EMAIL PROTECTED]: passwd Supported configurations for passwd management are as follows: passwd: files passwd: files ldap passwd: files nis passwd: files nisplus passwd: compat passwd: compat AND passwd_compat: nisplus [EMAIL PROTECTED]: passwd root Supported configurations for passwd management are as follows: passwd: files passwd: files ldap passwd: files nis passwd: files nisplus passwd: compat passwd: compat AND passwd_compat: nisplus my nsswitch.conf reads: passwd: files winbind if i remove winbind from nsswitch.conf, it works. help! thanks Jenn -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbmount of Windows 2000/XP disregards uid option
Hello! I'm mounting Windows 2000/XP disk drives from Linux RedHat 7.3 using smbmount. No problems, the disks are mounted. However, it disregards the "uid" and "gid" options and leaves the smbfs owned by "root" giving the "uid" user read-only access and not read-write as expected. Adding the "rw" doesn't help either. What am I doing wrong? -- Bertil Askelid Anaheim Hills, California -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RES: RES: [Samba] Re: Winbind broken after 2.2.8 upgrade
I did it more then 12 times... I have a lot of problems with winbind and NEVER I did receive a answer... Sorry if I have a poore english: I hve 3 installations with problems... I never saw this I think that Im not a god SAMBA Administrator but I did read all the doc I dont have any troubles with other soft, but with samba ehehehehehe I did send e-mails to the lis in : 11/3. 12/3, 16/3, 18/3, 19, 20, 25, 27 with the same questions If you want, please check it and will see if Im joking... Im 42 years old. FIRST INSTALATION: Can yoiu help m? [EMAIL PROTECTED] /etc]# smbpasswd -j surson -r cleo -U Administrator Password: Joined domain SURSON. [EMAIL PROTECTED] /etc]# [EMAIL PROTECTED] /etc]# smbclient //firewall/PUBLICO -UAdministrator added interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0 Got a positive name query response from 192.168.1.2 ( 192.168.1.1 ) Password: session setup failed: NT_STATUS_LOGON_FAILURE When I try \\firewall\PUBLICO in the NT I receive a BOX to type USER and PASSWD Joe log.cleo [2003/03/25 04:38:27, 0] smbd/password.c:connect_to_domain_password_server(1307) connect_to_domain_password_server: machine CLEO rejected the tconX on the IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. [2003/03/25 04:38:27, 0] smbd/password.c:domain_client_validate(1554) domain_client_validate: Domain password server not available. [2003/03/25 04:38:27, 1] smbd/password.c:pass_check_smb(555) Couldn't find user 'surson+administrator' in passdb. [2003/03/25 04:38:27, 1] smbd/password.c:pass_check_smb(555) Couldn't find user 'surson+administrator' in passdb. [2003/03/25 04:38:27, 1] smbd/reply.c:reply_sesssetup_and_X(988) Rejecting user 'surson+administrator': authentication failed [2003/03/25 04:38:27, 0] smbd/password.c:connect_to_domain_password_server(1307) connect_to_domain_password_server: machine CLEO rejected the tconX on the IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. [2003/03/25 04:38:27, 0] smbd/password.c:domain_client_validate(1554) domain_client_validate: Domain password server not available. Joe.firewall IW log.firewall Row 1Col 14:57F1 for help [2003/03/25 04:37:32, 0] smbd/password.c:connect_to_domain_password_server(1307) connect_to_domain_password_server: machine CLEO rejected the tconX on the IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. [2003/03/25 04:37:32, 0] smbd/password.c:domain_client_validate(1554) domain_client_validate: Domain password server not available. [2003/03/25 04:37:32, 1] smbd/password.c:pass_check_smb(555) Couldn't find user 'surson+administrator' in passdb. [2003/03/25 04:37:32, 1] smbd/password.c:pass_check_smb(555) Couldn't find user 'surson+administrator' in passdb. [2003/03/25 04:37:32, 1] smbd/reply.c:reply_sesssetup_and_X(988) Rejecting user 'surson+administrator': authentication failed Etc/smbusers # Unix_name = SMB_name1 SMB_name2 ... root = administrator admin nobody = guest pcguest smbguest Etc/smbpasswd root:0:CHANGED BY ME:[UX ]:LCT-3E7AEA06: Administrator:1CHANGED BY MEe:[UX ]:LCT-3E7FED90: catena:500:CHANGED BY ME:[UX ]:LCT-3 Etc/passwd Administrator:x:10032:10033::/home/Administrator:/dev/null danilo:x:10033:10033::/home/danilo:/dev/null Etc/pwdb.conf # # This is the configuration file for the pwdb library # user: unix+shadow nis+unix+shadow group: unix+shadow nis+unix+shadow etc/Pam.d/samba auth required/lib/security/pam_unix.so nullok shadow accountrequired/lib/security/pam_unix.so #authrequired/lib/security/pam_securetty.so #authrequired/lib/security/pam_nologin.so #authsufficient /lib/security/pam_winbind.so #authrequired/lib/security/pam_pwdb.so use_first_pass shadow #account required/lib/security/pam_winbind.so SMB.conf [global] workgroup = SURSON server string = Server FIREWALL usando Samba interfaces = 192.168.1.1/24 bind interfaces only = Yes security = DOMAIN encrypt passwords = Yes password server = cleo password level = 8 username level = 8 log level = 1 log file = /var/log/samba/log.%m max log size = 50 name resolve order = wins hosts lmhosts bcast socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 os level = 0 preferred master = False local master = No domain master = False wins server = 192.168.1.2 winbind uid = 1-2 winbind gid = 1-2 template homedir = /home/winnt/%D/%U template shell = /bin/bash winbind separator = + winbind cache time = 10 hosts allow = 192.168.1. 192.168.2. 127. printing = lprng [homes] comme
[Samba] Re: Cannot see any files in samba shares
I have now tried version 2.2.7a, as well as 2.2.8 on a different Solaris 8 machine. They both have the same problems. What am I doing wrong? I have searched everywhere for an answer. I have seen several posts about this problem, but no one has had an answer yet. Permissions are 777 at this time on this folder, and still it does not work. Please help! "Matt Yahna" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > I have installed Samba 2.2.8 on a Solaris 8 machine. My compile options > were as follows: > > ./configure --with-fhs --prefix=/usr --sysconfdir=/etc --localstatedir=/var > --with-smbwrapper --with-syslog > > My smb.conf is as follows: > [global] > workgroup = > netbios name = MOJO > server string = Samba Server v. 2.2.8 > security = DOMAIN > encrypt passwords = Yes > password server = * > log level = 2 > log file = /var/log/samba/log.%m > max log size = 50 > socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE > preferred master = No > local master = No > domain master = No > dns proxy = No > wins server = 10.40.5.1 > hide dot files = No > > [tmp] > comment = Temporary Files > path = /tmp > > The server runs, I have run everything in DIAGNOSTIC.txt with no problems > except that running smbclient //mojo/tmp gets me connected to the server, > but there are no files through Samba (there are files in this directory). > > Using a Windows 2000 box, I can open \\mojo\tmp, it asks for a username and > password, and it connects. However, there are no files listed. > > I am able to create files in this directory via windows, but can't see them. > > Any help would be much appreciated. > > Thank you. > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] A WIN95 machine list the shares but 98/win2k not
Why this conf dont work? A WIN95 machine list the shares but 98/win2k not [EMAIL PROTECTED] init.d]# smbclient -L //linus U% added interface ip=200.168.58.231 bcast=200.168.58.255 nmask=255.255.255.192 added interface ip=192.168.4.1 bcast=192.168.4.255 nmask=255.255.255.0 wins_srv_died(): Could not mark WINS server 127.0.0.1 down. Address not found in server list. session request to LINUS failed (Not listening for calling name) wins_srv_died(): Could not mark WINS server 127.0.0.1 down. Address not found in server list. session request to *SMBSERVER failed (Not listening for calling name) [EMAIL PROTECTED] init.d]# # Global parameters [global] workgroup = ADVOCACIA netbios name = LINUS server string = Samba Server security = share encrypt passwords = yes log file = /var/log/samba/log.%m max log size = 50 name resolve order = wins hosts socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 logon path = \\%N\profiles\%u logon home = \\LINUS\%u os level = 64 preferred master = yes local master = No domain master = no dns proxy = No wins support = yes printing = lprng unix password sync = no map to guest = never password level = 0 null passwords = no dead time = 0 debug level = 0 load printers = yes domain logons = no allow hosts = 192.168.4.0/ 255.255.255.0, 127.0.0.1 [netlogon] path = /usr/local/samba/lib/netlogon browseable = No available = yes [homes] comment = Home Directories read only = No browseable = no available = yes public = no writable = no only user = no [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No Franco Catena http://www.surson.com.br tel 011-44374040 cel:78535362 NEXTEL: 55*26006*1 MSN: [EMAIL PROTECTED] ICQ: 24755602 -BEGIN PGP PUBLIC KEY BLOCK- Version: GnuPG v1.0.6 (MingW32) Comment: For info see http://www.gnupg.org mQGiBD5fPr8RBAC4GydYCddbpvUo2g8xInqq8mJf4wIx0a1rX1cgNVX4Mx62kMXR fKDB9wjCUrj73xdJDtwTD778LABwuF9hTK0WjrxGCFhZ1Vk1nwM8wrNAO6m98HVF /gsb2ZrWp2LFsxUQsV2RfZXYax6xCI1czx5i+oPIz8z0eqSr5cpwwgGGAwCggeyg IhuYbgFxKZYpONfIus3c6j8EAI3JIz026gcbMRyD7jeAAi8e+Brh1rifrtXmXbxr /TQh1+biwIpA/HEPzgRZGkGzjhZdVd9Oxkgp6Zq3XKV9XpHnoucq/dvWTYaMm0pi pD85VNkROD2F/9owcFWKPWDYem/ipmyfhKgQ2nnUIrD9eHGxrxGBYW76Xx1htIoF 8GqlA/0XAXR0hopoVxgTEuLPOWT7MktY2f6vtvNG7pp1b0HzbLU7PRWNgCv8DRdG E7o1ewuT7KjiLbsTlmtI2Tw+BIWd8dWdcGkHl75DCdr/jyONkJvD6vPga98P36Nn H9/LJpf3kpaHud9K27ThpTWVCMuVyWXwK77RdNM56wHBJpMFurQhZmFjYXRlbmEg PGZhY2F0ZW5hQHN1cnNvbi5jb20uYnI+iF0EExECAB0FAj5fPr8FCQGUvIAFCwcK AwQDFQMCAxYCAQIXgAAKCRAH3evru7lBCyw4AJ9YMfqtOt26h9h/7W1Mm9Ga9/d3 oQCeKXBdahSPvEv+egRCYbcx5hLqAYi5AY0EPl8+3hAGAJu+Ezr636haP3Vjfgsh EnYX7s/yNSyNUkdcGjEC6dNKmlAZ8U5Tc3DD1vnkBEcSVjg2lrMSVADGZBCXuIEC keI/wbQWFQIKfPIZx0kJnW+np+tmTxZ/LoKV7gVqNW9hIKE5UWC8bzoH3EvtBRR8 LVLNADZUuhn17Wta0wJ+L+vB3Qa6DzwdSE98qCrsUWyCbC9JUdWjxKNH9X5H8Jl/ mXZOFprSeEs7k9P5XeNyv0lVVqVtDBA004KVAXHRvNSPvwADBQX/YMbUCZ8fVc6F xPKyBnBYNvRNlxbL+NyFzUGvTO/u+CTeJrvE/3O1Ax9AfXRjXdWgZ7mqhJAEAqWN ACE3g0Y4gFfMhSfgMYt9lmcNBUrk58h1kW2kYakEpOZlk3klO9HvKTmIYYyyu3vc Da0q+ALmATihlY8duAKUw/U1HV8P5JZ8LAjiaKpJQAj2XrH+WZ5YDi22zJ7M94zi CRBci5YCnAHmdfbKIyDXdCtLK2D0ouFt9+ahoxdioSrIBr34WauliEwEGBECAAwF Aj5fPt4FCQGUvIAACgkQB93r67u5QQvImQCfdARi8DpWjBCcZW9E6rfA8wTWK/gA n3kZ/R2hS/Kk7KLtvIOQ8Cd5y2UD =ry0w -END PGP PUBLIC KEY BLOCK- -Mensagem original- De: Amir Mostafa Saleh [mailto:[EMAIL PROTECTED] Enviada em: quinta-feira, 27 de março de 2003 09:00 Para: FRANCO Assunto: Testes com o Winbind Caro Franco, Ontem à noite eu fiz os testes com o Winbind, conforme tinha dito. Usei um servidor Windows 2000 SP2 e um Red Hat 8. Funcionou muito bem. Eu integrei os usuários do Active Directory no Linux, e fiz testes de logon no console do Linux e de logon via telnet utilizando os usuários e senhas do AD. Que tipo de problema você enfrentou exatamente? []'s Amir Mostafa Saleh Vento Solar Sistemas de Informação [EMAIL PROTECTED] --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.465 / Virus Database: 263 - Release Date: 25/3/2003 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.465 / Virus Database: 263 - Release Date: 25/3/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Printing NT to Linux printer problem
If you are trying to add a printer share using the add printer wizard, it takes a little work. If you want APW, you need to define an "add printer command", and that command will need to modify your smb.conf to add the print share depending on the input received from the wizard prompts. Details are in man smb.conf. But seems since you have a [printers] section, your printer shares should be automatically generated from whatever cups's equivalent to printcap is, and you just need to upload windows drivers for it. Is the printer defined to cups? If not, that's your first step. Also, cups has a cupsaddsmb (or something like that) command, which is another method of installing windows print drivers. If you have the printer share working, just no windows drivers associated with it, check out the Samba-HOWTO-Collection available from samba.org documentation, there's a thorough section about print and uploading the drivers there. Good luck ~ Daniel On Wednesday, March 26, 2003 11:39 PM John wrote: > Using SuSE V8.0 Samba 2.2.7a on a small network I have a > Lexmark laser > printer attached to the Linux PC, using Cups 1.1.15. > > I was able to print from Linux OK, and some months ago had > setup the Win > NT PC to print across the network to the laser. So all was well. > > Recently I had a couple of problems with the NT machine (the > usual BSOD's > etc) also had a couple of problems with the SuSE PC and still > feeling my > way as newbie I took a while to get things going again, that > is with the > exception of printing from the NT PC. > > I have been back through the documents and run through the 11 > tests in > diagnosis.txt and the setup checks out OK between the two machines. > > The following is my smb.conf > > # Global parameters > [global] > workgroup = HOME > netbios name = PENGUIN > interfaces = eth0 > encrypt passwords = Yes > update encrypted = Yes > map to guest = Bad User > printcap name = cups > load printers = yes > preferred master = Yes > wins server = 192.168.0.1 > printer admin = @ntadmin, root,john > hosts allow = 192.168.0.0/255.255.255.0 127.0.0.1 > printing = cups > veto files = /*.eml/*.nws/riched20.dll/*.{*}/ > > [public] > comment = public > path = /home/public > read only = No > guest ok = Yes > > [print$] > comment = printer drivers > path = /etc/samba/drivers > write list = @ntadmin, root,john > browseable = yes > guest ok = no > read only = yes > > > [printers] > comment = All printers > path = /var/spool/samba > printer admin = root, @ntadmin, john > guest ok = Yes > printable = Yes > browseable = No > public = yes > writable = no > > On the NT Pc (NT$ sp6a) I can use windows explorer, browse to Penguin > (linux pc) see the shares and the printer. When I attempt to > add the printer I > can proceed through selecting the port, printer model etc but > as soon as I > select finish I get access denied. > > I have tried this logged in as administrator, and as a super user..no > difference. > > I would appreciate any advice on how to sort this out. > > Thanks, > > John > > This email has been pre-scanned using the latest Anti Virus > software for your peace of mind. > > Please remember to maintain your own anti virus up to date with > the latest reference files. > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > > --- This message is the property of Time Inc. or its affiliates. It may be legally privileged and/or confidential and is intended only for the use of the addressee(s). No addressee should forward, print, copy, or otherwise reproduce this message in any manner that would allow it to be viewed by any individual not originally listed as a recipient. If the reader of this message is not the intended recipient, you are hereby notified that any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is strictly prohibited. If you have received this communication in error, please immediately notify the sender and delete this message. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem with xcopy /d & samba
Hello, Did you try to drag the files from the Samba Box with something like smbtar OR smbmount + tar Probably long but it seems to work. Surlignage Shawn Wright <[EMAIL PROTECTED]>: > A problem has arisen with the way samba handles file > creation dates compared to NT/win2k, which prevents > xcopy /d from working correctly. > > On NT/Win2k, files copied from another NT machine using > xcopy end up with the modified dates equal to the original > modified date of the file, and the created and accessed > dates become the date of the xcopy operation. > > On Samba, files copied from an NT machine using xcopy > end up with created & modified dates equal to the original > modified date of the file, and the accessed date becomes > the date of the xcopy operation. > > Dates are as reported from a windows NT client in both > cases. The problem is that xcopy /d will NOT work as > expected when attempting to use it to only copy newer > files from NT to samba. Instead XCOPY /D will copy *all* > files. This is a problem as we hope to migrate a large # of > files from NT to samba and minimize downtime by using > xcopy /d to refresh any modified files. In this case we will > use a tape backup/restore to handle the modified files, but > it would be nice to know if xcopy can be made to work with > samba in this way? > > > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- > Shawn Wright, Systems Manager > Shawnigan Lake School > http://www.sls.bc.ca > [EMAIL PROTECTED] > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > __ www.eeigm.inpl-nancy.fr __ EEIGM - 6 rue Bastien LEPAGE - 54000 NANCY - FRANCE Phone +33.383.36.83.27 Fax +33.383.36.83.36 _ - This mail sent through IMP: http://horde.org/imp/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 2.2.8 is failing on change machine account password
I've noticed that a few systems that I've upgraded to Samba 2.2.8 are not able to change the machine account password. I have security = domain and I am seeing entries like this in the log. [2003/03/27 14:22:23, 1, pid=10302] smbd/service.c:(636) le21pai-1 (47.142.162.19) connect to service export as user wcitiadm (uid=201361, gid=4785) (pid 10302) [2003/03/27 14:22:24, 0, pid=10302] rpc_client/cli_trust.c:(46) domain_client_validate: unable to fetch domain sid. [2003/03/27 14:22:24, 0, pid=10302] rpc_client/cli_trust.c:(46) domain_client_validate: unable to fetch domain sid. [2003/03/27 14:22:24, 0, pid=10302] rpc_client/cli_trust.c:(46) domain_client_validate: unable to fetch domain sid. [2003/03/27 14:22:24, 0, pid=10302] rpc_client/cli_trust.c:(248) 2003/03/27 14:22:24 : change_trust_account_password: Failed to change password for domain AMERICASE. I've tried to debug this without much success. Any assistance in debugging this or resolving this would be appreciated. I am still able to access my shares but the machine account password is not changing as it should. -- Eric M. Boehm /"\ ASCII Ribbon Campaign [EMAIL PROTECTED] \ / No HTML or RTF in mail X No proprietary word-processing Respect Open Standards / \ files in mail -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba 2.2: workgroup browsing question
I looked in the archives and docs over and over again. I am sure I am missing something simple. I have several SunOS 5.8 systems in a workgroup - one Sun is a wins server and the others point to it. On my windows xp system, I can see the Sun workgroup and many others. I can drill down into the other workgroups, but not the Sun one - can't open it at all - not even to see the servers. What am I missing? Yes, I am going to upgrade samba, but this seems like a much more basic issue than a samba version issue. :) Brian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: WinXP Pro passwords
>Problem description >When changing the password of an existing user or adding a new user they can not logon from a WinXP Pro machine. Existing users >can logon OK from WinXP Pro and Win98. New users, and those with password changed, can logon from a Win98 machine >(smbclient server_name\\share_name -U user_name works OK). I have started an stopped samba but it makes no difference. Just to let everyone know I have found a work around to my problem. It may help others. 1on the server set the sampasswd to a blank (use smbpasswrd) 2create an account on the local (WinXP Pro) machine and log on as the user you need to change 3Ctrl-Alt-Del and select change pasword 4set Log on to to the domain (Not the local machine) 5change the password (use blank for old password ) 6log off and then log on to the domain cherz Keith -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] print$ share problem URGENT - BUG
Whoops! "extract" is really "expand". "expand /?" at the command prompt shows the options for expanding files with the trailing underscore. I use expand -r *.??_ which creates new, renamed, expanded files from the compressed ones. A word of warning: some compressed files do not have the original name embedded within the file. This will created expanded files with the underscore removed, not replaced with the original last character. In these situations, one must refer to the .INF file to discover the true name. What would be great is if someone wrote a simple Win32 program that parses the .INF print driver installation file, expanding the files as necessary, getting files from the local workstation and uploading them into the appropriate [print$] share directory, and doing the adddriver and setdriver RPCs. That way print driver installation would be free of the hoops imposed by drivers & show add printer wizard goofiness. Thanks, Peter Hurley [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, March 27, 2003 8:18 AM To: [EMAIL PROTECTED] Subject: RE: [Samba] print$ share problem URGENT - BUG Heya, I'm looking at having to do the same thing... a couple of manufacturer's drivers either fail to install on samba, or install incorrectly. I'm using a W2k pro client but have no extract command. Is this a program that comes with w2k or something you got from somewhere else? Btw, thanks for explaining the {2227a280-3aea...} messages. Googling turned up lots of hits, but the only suggested solution was to delete the key from the client's registry (which didn't seem like a good idea to me). I didn't know that InProcServer was depended on by some driver installations. Realizing that samba as a print-server w/ automatic driver download has more hurdles than getting a devmode set... Thanks for letting me know about extract, ~ Daniel On Wednesday, March 26, 2003 5:45 PM Peter Hurley wrote: > I do not know why your logs are showing an smb_panic(), but > the failure > to make a connection to {2227a280-3aea} is because the printer > driver is attempting to open the "Printers" InProcServer on the remote > print server. > > ***Snippet from logs*** > [2003/03/26 14:33:08, 0] smbd/service.c:make_connection(252) > donglesvr (10.217.7.11) couldn't find service > ::{2227a280-3aea-1069-a2de-08002b30309d} > *** > > Since the print server is a Samba machine (that has no registry or > capability to run InProcServers), that service doesn't exist. I had > this happen to me when trying to add additional drivers from my W2k > workstation to our 2.2.7a Samba server for a new HP2200 > network printer. > > The solution I used was to add them manually via rpcclient on > the Samba > server itself. It took me quite a while. Basically the process is: > 1) expand the driver files on your local W2k workstation, via the > "extract" command line utility. > 2) copy the driver files up to the appropriate directory on the > [print$] share. See section 6.2.1 of the Samba HOWTO for the > directory > structure. > Basically, NT4/W2K/XP drivers go in W32X86 and 95/98/Me go into WIN40. > 3) on the samba server, run rpcclient. > 4) at the rpcclient prompt, use "adddriver" to install the files into > the appropriate architecture location. The tricky part of this is > looking at the *.INF file to determine what parameters go where in the > adddriver command. The format is: > > adddriver "Architecture" "LongPrinterName:DriverFile:DataFile: > ConfigFile:HelpFile:LanguageMonitorFile:DataType:ListOfFiles" > > See rpcclient() man page for list of Architectures. > The ListOfFiles are the files not already specified in the other > parameters. > > For example, > > adddriver "Windows NT x86" "HP LaserJet 2200 Series PCL 6: > HPBF3222.DLL:HPBF3224.PMD:HPBF3220.DLL:HPBF3220.HLP:HPBMMON.DLL:RAW: > HPBAFD32.DLL,HPBFTM32.DLL,HPDOMON.DLL,HPBHEALR.DLL" > > 5) when you have added the driver successfully, then you use the > "setdriver" command (still at the rpcclient prompt) to associate the > printer share with the driver. > > For example, > > setdriver "hp2200" "HP LaserJet 2200 Series PCL 6" > > Now automatic driver download should work. > > This process was so painful, eventually I'm going to look at the > Imprints package to see if that works (there's a reference to this > package in section 6.3 of the Samba HOWTO). > > Thanks, > > Peter Hurley > [EMAIL PROTECTED] > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > On Behalf Of Stéphane Purnelle > Sent: Wednesday, March 26, 2003 4:33 PM > To: [EMAIL PROTECTED]; samba US; samba-tech > Subject: Re: [Samba] print$ share problem URGENT - BUG > > Why I have no answer for my questions ? > > I repeat the situation : > RedHat 8.0 with samba 2.2.8 compiled wiwth ldapsam and acl-support > I need the print$ share and this sys
RE:Subject: [Samba] I see my samba server but.............
Well first problem I see is you editied your sbm.conf...Should be smb.conf ;-) Can you access it as root? Id start by making sure the permissions are correct. And that the Sharename in smb.conf matches the folder name on the server and that the path is correct. -- Date: Mon, 24 Mar 2003 14:10:54 -0600 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: [Samba] I see my samba server but. Message-ID: <[EMAIL PROTECTED]> Content-Type: multipart/mixed; Boundary="0__=85256CF3006D91FF8f9e8a93df938690918c85256CF3006D91FF" MIME-Version: 1.0 Precedence: list Message: 1 --0__=85256CF3006D91FF8f9e8a93df938690918c85256CF3006D91FF Content-type: text/plain; charset=us-ascii Here I go guys! I've already changed the configuration of my sbm.conf, also I made my samba server to be configured as a windows domain, yes! it is found in my windows domain now but as doing double click on this machine (samba) it asks me for a user and passsword, it does not let me get into it, I have created the same samba users as windows, but without any results. I appreciate your help : (See attached file: samba1.jpg) And my samba config files is: |--- | | | | # Samba config file created using SWAT | -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 2.2.8 Upgrade, joining domain
Just posting an experience I had last weekend upgrading a Samba server (member server of NT4 domain) from 2.2.5 to 2.2.8... I noticed that the "join domain" command doesn't seem to work anymore using the IP address of the PDC. I used to use the following command: #smbpasswd -j -r -U With 2.2.8 it wouldn't work until I used this: #smbpasswd -j -r -U Also, I added "-D 4" to the end, which gives a nice smattering of debug info. Great stuff if you're having trouble joining a domain. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] New Files in Samba
On Thu, 2003-03-27 at 10:31, Jaques Metz wrote: > Hi. > > I've configured Samba to work as a dedicated file server, but when a user create a > new file in the shared directory, only this user can os access this file. What > should I do to change this? > > Thanks. > > Jaques Metz Add in your share: force create mode = 777 force directory mode = 777 [ ]'s Tiago Cruz Org. King de Contab. S/C Ltda. www.linuxrapido.kit.net Linux User #282636 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Common Authentication Scheme
On 3/26/03 22:17, "stscanlan" <[EMAIL PROTECTED]> wrote: > Has anybody out there had luck with LDAP or similar to enable users to share > a common logon database for Windows 2000 and Linux. Microsoft and Linux > supposedly allow authentication using LDAP, Kerberos and alternative schemes > to their native databases ie /etc/shadow/passwd and the SAM. > > Any help with this would be greatly appreciated. > > Steve S. You can set up your linux box to import users via LDAP. You will need to make some changes to your AD schema, such as adding attributes for UniqueID, mounts (typcially vfs, vfsopts, and vfsdir). I have had problems getting a clean group management system working, but the best work around I could figure out is by adding MemberUID, userlist, and gid attributes to the AD schema as well. Unfortunately, this means adding users on the PDC to a particular group does not add them on the Unix side, instead you have to manually go in on the windows box using ADSI Edit, (or from the client side using Domain admin privileges and cli tools) and manually add in the gid's to each user name. It's a pain, but it works. There seems to be a serious dearth of information on this. Once you have LDAP authentication up and running, then you can easily set up SMB pass through authentication with no need for winbindd, though I've had some problems using secure passwords on this. Hope this helps, Beau -- Beau Hunter Technical Consultant Wedgetail Consulting www.wedgetailtechs.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Maximum characters for valid users = ?
We have winbind running on our server, so all of our usernames look like MIXEDDOMAIN+User Name, and because of the spaces in the names, we wrap all of them with " "MIXEDDOMAIN+User Name" ". One share has many users, so the valid users = list becomes long (over 1024 characters). Testparm gives this error: ERROR: string overflow by 34 in safe_strcpy [" "@MIXEDDOMAIN+Cert Publishers" " " "@MIXEDDOMAIN] Whenever we get that error, there is difficulty connecting from the windows clients. If I remove about 50 characters worth of names, it goes away and everything works right (for the names left). I know I can get around this limitation by assigning a group on the 2000 server, but I still have two questions. Can I have more that one valid users = line per share? And, is there a better way to deal with spaces in usernames than " "User Name" "? Note: The same thing happens with write list =. Thank you, Tom Dickson InoStor, Corp. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem with xcopy /d & samba
A problem has arisen with the way samba handles file creation dates compared to NT/win2k, which prevents xcopy /d from working correctly. On NT/Win2k, files copied from another NT machine using xcopy end up with the modified dates equal to the original modified date of the file, and the created and accessed dates become the date of the xcopy operation. On Samba, files copied from an NT machine using xcopy end up with created & modified dates equal to the original modified date of the file, and the accessed date becomes the date of the xcopy operation. Dates are as reported from a windows NT client in both cases. The problem is that xcopy /d will NOT work as expected when attempting to use it to only copy newer files from NT to samba. Instead XCOPY /D will copy *all* files. This is a problem as we hope to migrate a large # of files from NT to samba and minimize downtime by using xcopy /d to refresh any modified files. In this case we will use a tape backup/restore to handle the modified files, but it would be nice to know if xcopy can be made to work with samba in this way? -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Shawn Wright, Systems Manager Shawnigan Lake School http://www.sls.bc.ca [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Users only in ldap
Hi everybody ... !! i have a few questions... i want to implement samba with ldap(only to share folders) ... and i want to know if i can create virtual users (the users are only in the ldap server, and not in the passwd file) is it posible?? TIA -- Lucas Lain -> Aconectarse.com - 40004000 [EMAIL PROTECTED] [EMAIL PROTECTED] pgp0.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] "Doing a node status request to the domain master browser"
Dear samba users, i'm getting the following message: Doing a node status request to the domain master browser at IP XXX.XXX.XXX.XXX failed. my assumption is that this computer wants to become the domain master or already has. am i off base in thinking this? thank you. --dave -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] SWAT problem
Do you have the option "Work Offline" selected in internet explorer? If so this will prevent you from accessing ANY website other than one hosted locally on that system. Un check it and try accessing swat again. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of sathya kuppa Sent: Thursday, March 27, 2003 11:53 AM To: [EMAIL PROTECTED] Subject: [Samba] SWAT problem dear all, I am able to run the GUI SWAT in my host (RedHat8.0) and other elements in the network(of different os) when the connection to internet is available. But the swat is not accessible when the internet connection is not available ( work offline). Can somebody suggest a solution? Sathya Student-India Catch all the cricket action. Download Yahoo! Score tracker -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem Joining a domain
Hi, I've a NT 4 SP6 PDC, i want to join this domain with a Linux Samba server (version 2.2.3a) Here is the GLOBAL of smb.conf: == [global] workgroup = RESSAC netbios name = GABARE server string = Frontal pages Web - Samba Server log file = /var/log/samba/log.%m max log size = 50 log level = 3 hosts allow = 193.55.236. 127. security = domain encrypt passwords = true password server = FREGATE remote announce = 193.55.236.255 dns proxy = no === GABARE is well create on FREGATE as "station server" Trying to join, i receive this message : === [EMAIL PROTECTED] root]# smbpasswd -j RESSAC -D4 added interface ip=193.55.236.130 bcast=193.55.236.255 nmask=255.255.255.0 resolve_lmhosts: Attempting lmhosts lookup for name FREGATE<0x20> getlmhostsent: lmhost entry: 193.55.236.54 FREGATE Connecting to 193.55.236.54 at port 445 error connecting to 193.55.236.54:445 (Connection refused) Connecting to 193.55.236.54 at port 139 resolve_lmhosts: Attempting lmhosts lookup for name FREGATE<0x20> getlmhostsent: lmhost entry: 193.55.236.54 FREGATE Connecting to 193.55.236.54 at port 445 error connecting to 193.55.236.54:445 (Connection refused) Connecting to 193.55.236.54 at port 139 cli_net_req_chal: LSA Request Challenge from FREGATE to GABARE: F41A0E3EFDE773C6 cred_session_key cred_create cli_net_auth2: srv:\\FREGATE acct:GABARE$ sc:2 mc: GABARE chal BCC467572BFF5E20 neg: 1ff cli_net_auth2: Error NT_STATUS_ACCESS_DENIED cli_nt_setup_creds: auth2 challenge failed modify_trust_password: unable to setup the PDC credentials to machine FREGATE. Error was : NT_STATUS_ACCESS_DENIED. 2003/03/27 17:50:30 : change_trust_account_password: Failed to change password for domain RESSAC. Unable to join domain RESSAC. === Why does it try to access 445 port? It seems to be a W2000 name service? Any idea? - __ www.eeigm.inpl-nancy.fr __ EEIGM - 6 rue Bastien LEPAGE - 54000 NANCY - FRANCE Phone +33.383.36.83.27 Fax +33.383.36.83.36 _ - This mail sent through IMP: http://horde.org/imp/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SWAT problem
dear all, I am able to run the GUI SWAT in my host (RedHat8.0) and other elements in the network(of different os) when the connection to internet is available. But the swat is not accessible when the internet connection is not available ( work offline). Can somebody suggest a solution? SathyaStudent-India Catch all the cricket action. Download Yahoo! Score tracker -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Winbind broken after 2.2.8 upgrade
On 27 Mar 2003 at 7:21, Andrew Bartlett wrote: > On Thu, Mar 27, 2003 at 01:27:26AM +, Andrew Bartlett wrote: > > On Wed, Mar 26, 2003 at 04:11:13PM -0800, Shawn Wright wrote: > > > Ok, stupid me. Somehow I missed updating /lib/libnss_winbind.so on both > > > these machines. Presumably this would have also caused corruption of the > > > winbind idmap? > > > > I doubt it, actually. > > > > > Since winbind is now installed with a "make install", would it not be a good > > > idea to also install libnss_winbind.so also? Or at least provide some version > > > checking in winbind so that it will fail to start and report an error if it > > > encounters the wrong version of libnss_winbind.so? > > > > Winbind doens't *require* libnss_winbind - there are actually situations where > > it is used without it. That said, I've implemented some extensive version > > checks from the client side - we certainly won't connect to a winbind with > > a different protocol version any more. > > (In Samba 3.0 and Samba HEAD) > > In Samba 2.2 we have a more basic check, but it should still cause the client to > bail if contacting the wrong version. Sorry for my ignorance, but I'm not sure what you mean by client here, but assume winbind is a client to nss? I do know that winbind from 2.2.8 *did* run with libnss_winbind.so v2.2.5 in place, resulting in broken getent passwd output, where only domain user ids were shown. Putting the libnss_winbind.so from v2.2.8 was all that was required to fix the problem... -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Shawn Wright, Systems Manager Shawnigan Lake School http://www.sls.bc.ca [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] I see my samba server but.............
Muchas Gracias Buchan Milne fro you help I´ll do that Thank You! Manuel Casoluengo Villanueva Network Administrator Mexico Coty Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Access to shares for authenticated domain users only
I believe this works OK with an NT PDC as one can restrict share users to, as an example, members of the "Domain Users" group, but this group is not available in Samba 2.2.x. Maybe 3.0 will help. I suppose, as one hack, you could use a "root preexec" and a "root postexec" to add and remove users to a particular group as they log on and off and then use this group to define the valid users of the share. On Thu, 2003-03-27 at 00:31, Kevin wrote: > I am running several samba servers (2.2.3a and 2.2.7) in various places as > pdcs. Everything seems to be running smoothly, but I can't find any way of > restricting access to only those uses who have logged on to the domain. Is > this possible? ie at the moment, any user can map a drive to \\server\share, > put in a valid user/password pair and have access to that share without > going through any logon script or pol files. This is what I would like to > avoid. I believe that if I can do this, it would also stop any unauthorised > machines from accessing the shares, as these machines would not be joined to > the domain. > > Is this sort of authorisation possible? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 2.2.8 - can't view or change permissions from NT clients
We were using 2.0.6 on a SunOS 5.6 server, using domain security in an NT domain, and have upgraded to 2.2.8 for the security fix. Now, when the file permissions are displayed on an NT client, ACL's are only shown for user/group/other if there are R,W, or X permissions. If u, g, or o have no rights, the ACL is not displayed for them. Example, in 2.0.6, with a file with r--r- permissions (440), the NT permissions display would have an ACL for the owner with R permissions, an ACL for the group with R permissions, and the Everyone group would show as O for no permissions. In 2.2.8 with the same file, the NT permissions dialog only shows an ACL line for the owner, and an ACL line for the group, but NO ACL line for Everyone since they have no permissions If a file had r permissions, there won't be an ACL line for the group either. In addition, we can't "Add" an ACL for the ones not displayed - In other words, in the first example, we couldn't Add the Everyone group with R prrmissions to give world read. Is this normal behavior in 2.2.8, or should we see the same displays as before? How can we get the displays to show as before, or what might we have missed? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Can't join domain "wrong password"
On Tue, 2003-03-25 at 21:29, Greg Miller wrote: > Guest account meaning an account named guest added to the smbpasswd? > Yes I have. It is not assigned a password. Should it have one? I don't think it needs a password - you just need to tell samba to use that user as the guest user guest account = should be something like guest account = nobody > Could you explain "you have some unusual valid users statements..."? valid users = @family valid users = %S (I don't know off hand what that does...) i find it hard to read the output of testparm (too much to sift through) brad -- Bradley W. Langhorst <[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] New Files in Samba
Hello, -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric Halverson Sent: Thursday, March 27, 2003 9:37 AM To: Jaques Metz Cc: Samba List Subject: Re: [Samba] New Files in Samba >On Thu, 2003-03-27 at 08:31, Jaques Metz wrote: >> Hi. >> >> I've configured Samba to work as a dedicated file server, but when a user >>create a new file in the shared directory, only this user can os access >>this file. What should I do to change this? >> >> Thanks. >> >> Jaques Metz The answer is simple... Let's say that you have a partition labeled "share" and inside it are a number of directories that you are sharing... cd in to the "share" partition... Then run this command... chmod -R g+s * What that will do is cause all files folders and sub-directories to be created with the same group ownership as group user that access and creates such files and folders. What you will end up with is the following when running a ls -l : [EMAIL PROTECTED] share]# ls -l total 84 drwxrwsrwx3 root account 4096 Jan 9 10:57 account drwxrws--- 29 root cad 4096 Mar 26 18:26 cad drwxr-x---5 root root 4096 Jan 20 11:13 configurations drwxrws--- 26 root docs 4096 Mar 25 12:11 docs drwxrws--- 31 root inspect 4096 Mar 27 07:07 inspect drwxrws---3 root jboss4096 Mar 27 09:43 jobboss drwxrws---2 root laser4096 Mar 27 10:09 laser drwxr-x---2 root root 4096 Mar 21 08:58 logfiles drwxrwS---2 root root16384 Jul 16 2002 lost+found drwxrws---3 root mail 4096 Jan 22 14:05 mail drwxrws--- 12 root mill 4096 Mar 27 10:08 mill drwxrws--- 18 root dmusers 4096 Mar 24 13:55 profiles drwxrws--- 27 root public 4096 Mar 26 16:02 public drwxrws--- 14 radkins purchasi 8192 Mar 27 10:00 purchasing drwxrws---9 dgillesp qsman4096 Mar 3 11:59 qs9000 drwxrws---2 root quotes 4096 Dec 5 10:33 quotes drwxrws---2 root shipping 4096 Feb 22 09:06 shipping If you know how the above output is read... The first listing shows what the files or directories are. The first group of 3 after the 'd' (which designates directory), refers to a user account, which in the case of most of the directories is root. The second group of 3 characters refers to the group, which can easily be seen above. The final group of 3 refers to world (meaning EVERYONE on the system) rights. If you are looking to fully utilize user and group security rights, then the final set of three should be --- like they are above. In the case of the second set of 3, the 's' denotes that all files and folders created within those directories will have the same group ownership rights attached to them. With this you can create a number of nested group/user rights. >You'll want to look at the create mask (or create mode) options in that >share. If you want rwx access for the creator and primary group, create >mask would be 0770, if you want full access for everyone to have full >access to the files, create mask would reflect 0777. Just make sure >that your create mask corresponds with the linux/unix file permission >structure. For the LOVE OF GOD, please refrain from using the number method when running chmod. You will have stricter control and actually KNOW what rights you are handing out to the various users and groups on your system when using the alpha character method. For example; chmod ug+rw some_text_file.txt Will put User "u" and Group "g" read "r" and write "w" rights onto the file. This will allow the user that has his or her username listed as the owner of the file as well as any members of the group that are listed on the file. For the "World" rights use "o". To add such rights use a "+" sign in between the "ugo" (User, Group, World) and the "rwx" (Read, Write, Executable) and the "-" sign to take them away. If you have a group called Accounting that needs access to a directory then use the following command... chown root:Accounting Then change the rwx rights to allow the group Accounting to use the directory and files within. Then you can run whatever group ownership rights you want on that directory and all Accounting group members will have access to the files within. These two commands, chmod and chown, are likely the most important UNIX/Linux commands that you could ever possibly learn. >-- >Eric Halverson <[EMAIL PROTECTED]> >Doctors Care Health Services Regards, Robert Adkins II IT Manager/Buyer Impel Industries, Inc. 586-254-5800 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Groups in Samba w/LDAP and ACL
I have samba-2.2.8 with LDAP and ACL. When I open the ACL in WinXP how do I add another group? Which attributes does Samba uses to search for groups? Thanks Jean-Rene Cormier -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] New Files in Samba
On Thu, 2003-03-27 at 08:31, Jaques Metz wrote: > Hi. > > I've configured Samba to work as a dedicated file server, but when a user create a > new file in the shared directory, only this user can os access this file. What > should I do to change this? > > Thanks. > > Jaques Metz You'll want to look at the create mask (or create mode) options in that share. If you want rwx access for the creator and primary group, create mask would be 0770, if you want full access for everyone to have full access to the files, create mask would reflect 0777. Just make sure that your create mask corresponds with the linux/unix file permission structure. -- Eric Halverson <[EMAIL PROTECTED]> Doctors Care Health Services -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Auth Problems with 2.2.8 and Windows 2000
We managed to fix this yesterday by modifing the security to DOMAIN from SERVER > -Original Message- > From: Gilbert, Erric E - CIDS-2 [mailto:[EMAIL PROTECTED] > Sent: Wednesday, March 26, 2003 2:26 PM > To: '[EMAIL PROTECTED]' > Subject: [Samba] Auth Problems with 2.2.8 and Windows 2000 > > > > Hi Folks, > > We recently upgraded from 2.2.7 to 2.2.8 to fix the recently > discovered bug in Samba. We are now getting intermittent log > on failures from Win2K clients connecting to our Samba server > (vitals below). > > Samba 2.2.8 is running on Solaris 2.8 with Kernel 108528-18 > > Our Samba security method is set to server and we pass along > auth requests to an Win2K AD Domain Controller that has NT 4 > compatibility enabled. > > We use 4 DC but for testing we have limited requests down to > 1. All DCs give the same un-desirable results. > > The DC does not show a failure but the Samba server shows: > > error packet at smbd/reply.c(1025) cmd=115 (SMBsesssetupX) > NT_STATUS_LOGON_FAILURE > > Some dirs on the samba server have in excess of 3 - 5K of > files (I am currently leaning on a timeout theory) > > The authentication does work almost 50% of the time. It isn't > exact but it is very close. > > This may be a bit vague so if there are things I could > describe further to help with a resolutoin, please let me know. > > Thanks, > > Erric > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] W2K DC as password server
All, I have recently begun a migration form NT 4.0 DCs to W2K DCs. Users have a home folder defined on Windows that lives on a samba server that now maps inconsistently when using the W2K server as the password server. Everything works as expected when I use an NT BDC as the password server. We have been using this configuration for a couple of years, upgrading samba several times, but have only seen this problem when using a W2K DC. Additionally, the problem does not occur during off-hours testing. I plan to test security = domain to see if it resolves this problem but was wondering if anyone has an explanation. Solaris 2.9 Samba 2.2.3a W2K Professional clients Thanks, Jim James D. Bonasera Lockheed Martin Corp. (610) 531-5873 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Help regarding Samba Server
On Wed, 2003-03-26 at 15:55, Abhijit Vaidya wrote: > hi all, > > I am student at ASU and i wanted to know if I could use Samba to export some local > file system like NFS via samba server. I am using Red Hat Linux 8 (kernel > 2.4.18-14). If it is possible kindly let me know how i can do it. > > thanks, > > Abhijit > you can do it by reading the manual at www.samba.org I don't recommend samba for unix to unix file sharing use NFS, AFS, or something else. brad -- Bradley W. Langhorst <[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] New Files in Samba
Hi. I've configured Samba to work as a dedicated file server, but when a user create a new file in the shared directory, only this user can os access this file. What should I do to change this? Thanks. Jaques Metz -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Access to shares for authenticated domain users only
On Thu, 27 Mar 2003 07:11:55 +, Andrew wrote: >While 'hacks' might be possible, shares are authenticated seperatly to the >domain logon, and there is no linkage apart from the fact that the domain >logon sets up the default username/pw pair. > >Fundementally, any restriction imposed by logon script/.pol files can be >avoided - you must never trust the client to actually follow their directions... > Thanks Andrew. Point taken. Where would you go for more info on this sort of security? In particular I'm trying to avoid unauthorised notebooks etc. connecting to the network and then disappearing off home with sensitive data from the server on their drives. I was thinking about using SSH, but it seems like a lot of work to set up a key for each user, and even then not foolproof. Any suggestions welcome. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] I see my samba server but.............
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > Date: Mon, 24 Mar 2003 14:10:54 -0600 > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Subject: [Samba] I see my samba server but. > Message-ID: <[EMAIL PROTECTED]> > Content-Type: multipart/mixed; > Boundary="0__=85256CF3006D91FF8f9e8a93df938690918c85256CF3006D91FF" > MIME-Version: 1.0 > Precedence: list > Message: 1 > > --0__=85256CF3006D91FF8f9e8a93df938690918c85256CF3006D91FF > Content-type: text/plain; charset=us-ascii > > Here I go guys! > > I've already changed the configuration of my sbm.conf, also I made my samba > server to be configured as a windows domain, yes! it is found in my windows > domain now but as doing double click on this machine (samba) it asks me for > a user and passsword, it does not let me get into it, I have created the > same samba users as windows, but without any results. > I appreciate your help : > > (See attached file: samba1.jpg) > > And my samba config files is: > Looks like it was a Mandrake 9.0 default config file until you crucified it with SWAT ;-). The best option for you may be winbind. If you have not got too much time invested in this machine, you may consider doing an installation in expert mode, where you can choose to have authentication via a Windows Domain (which sets up winbind). If not, you need to do this manually. 1)Install samba-winbind, either with software manager, or: # urpmi samba-winbind 2)Get a decent config file (backing up your current one) # cp /etc/samba/smb.conf /etc/samba/smb.conf.backup # cp /etc/samba/smb-winbind.conf /etc/samba/smb.conf 3)Edit the file with the text editor of your choice, spend 5 minutes reading it first, then change your workgroup name back as it was. 4)Join the domain # smbpasswd -j -U 5)Start winbind # service winbind start 6)Test # wbinfo -u should list users # getent passwd should list users in the same format as the passwd file 7)Setup authentication via winbind (making a backup): # cp /etc/pam.d/system-auth /etc/pam.d/system-auth.backup # cp /etc/pam.d/system-auth-winbind /etc/pam.d/system-auth (everything up to here gets done for you if you choose Windows Domain for authentication during installation) 8)Login to X/KDE/GNOME/Mail server/console with your domain account There are some caveats, see http://ranger.dnsalias.com/mandrake/samba/Integrating%20Linux%20into%20Windows%20Networks.pdf for more details in winbind setup in Mandrake. - -- |--Another happy Mandrake Club member--| Buchan MilneMechanical Engineer, Network Manager Cellphone * Work+27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE+gu7PrJK6UGDSBKcRAm4AAJ9XHU1bu+zaPbGW+2Y7hV5twozOvgCffYaN jvBO7j6tFeDIwRUu1r9yXZc= =z0p0 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba reporting errors!
My syslog is constantly bombarded with these messages: Mar 27 07:15:35 fileserver1 smbd[70359]: [2003/03/27 07:15:35, 0] lib/util_sock.c:get_socket_addr(1012) Mar 27 07:15:35 fileserver1 smbd[70359]: getpeername failed. Error was Socket is not connected Mar 27 07:15:35 fileserver1 smbd[70359]: [2003/03/27 07:15:35, 0] lib/util_sock.c:write_socket_data(499) Mar 27 07:15:35 fileserver1 smbd[70359]: write_socket_data: write failure. Error = Broken pipe Mar 27 07:15:35 fileserver1 smbd[70359]: [2003/03/27 07:15:35, 0] lib/util_sock.c:write_socket(524) Mar 27 07:15:35 fileserver1 smbd[70359]: write_socket: Error writing 4 bytes to socket 12: ERRNO = Broken pipe Mar 27 07:15:35 fileserver1 smbd[70359]: [2003/03/27 07:15:35, 0] lib/util_sock.c:send_smb(704) Mar 27 07:15:35 fileserver1 smbd[70359]: Error writing 4 bytes to client. -1. (Broken pipe) I'm running Samba 2.2.8 without optimizations. #uname -a FreeBSD fileserver1.smartrafficenter.net 4.7-STABLE FreeBSD 4.7-STABLE #0: Mon Dec 16 19:41:03 EST 2002 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/FILESERVER1 i386 What do these message mean? How to I rid myself of them? Thanks, Kevin I'm desperately trying to figure out why kamikaze pilots wore helmets -- Dave Edison -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] compile samba 2.2.8 on hpux11
did someone managed to build samba 2.2.8 on hpux11 with gcc 3.2 or gcc 2.95 I tried both and always get the make error: ld: No $UNWIND_END$ subspace has been defined (probably missing /usr/ccs/lib/crt0.o) *** Error exit code 1 I did ./configure --prefix=/opt/samba Regards Kai -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba]
Hello, iam looking for a way to splitt a printer job ( 200 pages) into many different jobs (2 or 3 Pages). Does anyone know a way to do this with samba or a other programm? Thanks in advance Philipp Hoeß __ Viren? Wir wissen nicht was Ihr Arzt empfiehlt. Wir empfehlen den Virencheck fur Ihre E-Mail-Anhange! http://freemail.web.de/features/?mc=021159 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Smbclient client IP address
Hello, Is it possible to specify the client's ip address? I've have tried creating a custom smb.conf and passing that to smbclient but to no avail. It always chooses the default ip on the FreeBSD box. I have a remote samba machine that auths by IP and I need to set a different client ip other than the box's default. Thanks in advance -- Bruno Miguel Afonso Biological Eng. student. [EMAIL PROTECTED] D.E.Q. @ I.S.T. - Portugal -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] WARNING: The "printer driver location"option is deprecated
Andre, Read Chapter 6 "Printing Support in Samba 2.2.x" in the "Samba-HOWTO-Collection" document which is in your source tree as a .pdf and a .html and on the Samba web site. PCC -Original Message- From: Andre Dieball [mailto:[EMAIL PROTECTED] Sent: Wednesday, 26 March, 2003 5:50 PM Hello After upgrade to 2.2.8-1 woody fom 2.2.7a I get (apart from other problems) the following error message: WARNING: The "printer driver location"option is deprecated As I use the Samba server only for printing, I'm not sure, what this means to me, as I have the follwoing in my smb.conf: printer driver file = /etc/samba/printers.def Any help is really appreciated. Thanks a lot in advance. Mit freundlichen Grüßen / Yours sincerely, Andre Dieball -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Does "active directory" support include policy support
Well, a rather odd subject, but I couldn't really express it differently. I would simply like to know if the active directory "emulation" of samba+openLDAP+kerberos or samba 3.0 includes support for policies. I have a bunch of XP clients that I need to set some restrictions on. But it seems the days of config.pol files are over, so i need active directory support on my PDC. Having read several articles on active directory, I still don't understand it fully, but articles about setting up active directory on a samba pdc mentioned only partial support for active directory(only some features supported). So before I start crashing our server with software and configuration, I would like to know if (group)policies are supported by active directory on samba. If this is the case, I'd also like to hear if anybody has a working setup of it, and maybe some links (I couldn't finde any) to howtos Lasse Riis -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba