[Samba] migration of samba 3.22a to Samba 3.23a - 2 possible bugs

2003-04-01 Thread Alex Murphy
How do you do !!!
  Pereshel with samba 3.22a on samba 3.23a (for support LDAP mapping group), 
did not change the config file - has installed in the same directory, has 
noticed 2 possible bugs:
1. after performing
root# pdbedit -i tdbsam -e ldapsam -g
 the groups were orderly exported in LDAP directory, but with full absence 
privelege:

[EMAIL PROTECTED] bin]# ./smbgroupedit -l
ldapsam_open_connection: connection opened
ldap_connect_system: succesful connection to the LDAP server
ldapsam_setsampwent: 12 entries in the base!
Entry found for group: 1002
Attribute description not found
 
System Operators
SID   : S-1-5-32-549
Unix group: System Operators
Group type: Domain group
Comment   :
Privilege : No privilege

Replicators
SID   : S-1-5-32-552
Unix group: Replicators
Group type: Domain group
Comment   :
Privilege : No privilege

Guests
SID   : S-1-5-32-546
Unix group: Guests
Group type: Domain group
Comment   :
Privilege : No privilege

Domain Admins
SID   : S-1-5-21-1174496667-1382807048-3288504375-512
Unix group: Domain Admins
Group type: Domain group
Comment   :
Privilege : No privilege

Domain Guests
SID   : S-1-5-21-1174496667-1382807048-3288504375-514
Unix group: Domain Guests
Group type: Domain group
Comment   :
Privilege : No privilege

Power Users
SID   : S-1-5-32-547
Unix group: Power Users
Group type: Domain group
Comment   :
Privilege : No privilege

Print Operators
SID   : S-1-5-32-550
Unix group: Print Operators
Group type: Domain group
Comment   :
Privilege : No privilege

Administrators
SID   : S-1-5-32-544
Unix group: Administrators
Group type: Domain group
Comment   :
Privilege : No privilege

Account Operators
SID   : S-1-5-32-548
Unix group: Account Operators
Group type: Domain group
Comment   :
Privilege : No privilege

Domain Users
SID   : S-1-5-21-1174496667-1382807048-3288504375-513
Unix group: Domain Users
Group type: Domain group
Comment   :
Privilege : No privilege

Backup Operators
SID   : S-1-5-32-551
Unix group: Backup Operators
Group type: Domain group
Comment   :
Privilege : No privilege

Users
SID   : S-1-5-32-545
Unix group: Users
Group type: Domain group
Comment   :
Privilege : No privilege
As be ? Privelege do not allow to use these groups for conferring user 
authority manager and etc.

2. On samba 3.22a user could remove attribut Read with file or files, now file 
ALWAYS ReadOnly i.e. attribut Read to remove not possible - that to do ?  
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] How to configure the file smb.conf

2003-04-01 Thread Olivier Studer
Hello,
 
I would like to mount a home directory UNIX on my PC. I use a server for samba. And I 
try to have an authentification with a server ldap (IPlanet product). But I can recive 
an authentification.
 
Could you help me, please.
 
Thanks
/Olivier
 
my smb.conf file:
=
[global]
 log file = /usr/local/samba/log.%m
 security = user
 encrypt passwords = yes
 
 workgroup = 
 
 # ldap related parameters
 
 # define the DN to use when binding to the directory servers
 # The password for this DN is not stored in smb.conf.  Rather it
 # must be set by using 'smbpasswd -w secretpw' to store the
 # passphrase in the secrets.tdb file.  If the "ldap admin dn" values
 # changes, this password will need to be reset.
 ldap admin dn = "cn=Directory Manager"

 #  specify the LDAP server's hostname (defaults to locahost)
 ldap server = my-server-ldap.x.ch
 
 # Define the SSL option when connecting to the directory
 # ('off', 'start tls', or 'on' (default))
 ldap ssl = off
 
 # define the port to use in the LDAP session (defaults to 636 when
 # "ldap ssl = on")
 ldap port = 389
 
 # specify the base DN to use when searching the directory
 #ldap suffix = NOT USE
 
 # generally the default ldap search filter is ok

 ldap filter = "(&(uid=%u))"
 
[homes]
writable = yes
force directory mode = 755
browseable = no
create mode = 0750
force create mode = 755
comment = Home Directoriec
users = %S
only user = yes
 
[printers]
   comment = All Printers
   browseable = no
   printable = yes
   public = no
   writable = no
   create mode = 0700



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] test

2003-04-01 Thread John H Terpstra
On Wed, 2 Apr 2003, Alex Murphy wrote:

> test

Failed! Test again later.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] test

2003-04-01 Thread Alex Murphy
test
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] M$, AD and Samba

2003-04-01 Thread Diego Rivera
Beat me to it!!!  ;)

On Tue, 2003-04-01 at 19:14, [EMAIL PROTECTED] wrote:
> April Fools' day ;-)
> 
> > -Original Message-
> > From: John H Terpstra [mailto:[EMAIL PROTECTED]
> > Sent: Tuesday, April 01, 2003 5:14 PM
> > To: Diego Rivera
> > Cc: [EMAIL PROTECTED]
> > Subject: Re: [Samba] M$, AD and Samba
> > 
> > 
> > On Wed, 1 Apr 2003, Diego Rivera wrote:
> > 
> > > Hello all,
> > >
> > > I have news on the AD front.
> > >
> > > It seems M$ is going to open-source it's AD implementation.  It also
> > > seems M$ is going to start development on the Samba code to 
> > help bring
> > > it up to speed to its codebase, and unify them both in the end.
> > 
> > What is the source of this information please?
> > 
> > - John T.
> > -- 
> > John H Terpstra
> > Email: [EMAIL PROTECTED]
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > 
-- 
Diego Rivera <[EMAIL PROTECTED]>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


samba@lists.samba.org

2003-04-01 Thread mcdimen
hallo everybody,
i've a little problem while i'm installing samba 2.2.8 for linux RedHat 
8.0 with gnome kernel. actually, i'm new to this RedHat and this is my 
first time using RedHat and samba. my problem is i can't run the smbd 
and nmbd but i can use smbclient. what i'm noticed is smbclient is 
located in /usr/bin meanwhile smbd and nmbd in /usr/sbin ( i found it 
using "search for files" function. If i'm using which smbd it will return:

[EMAIL PROTECTED] sidi]$ which nmbd
/usr/bin/which: no nmbd in 
(/usr/local/bin:/usr/bin:/bin:/usr/X11R6/bin:/home/sidi/bin)
i hope, anybody who have known abaout this can help me!!
thank you
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Looking for a detailed explaination of the options listedwhen you run ./configure --help

2003-04-01 Thread Tom Pride
Hi

Could someone please point me to a more detailed explaination of what 
some of the less obvious pre-compile options for samba actually are and 
do.  By this I mean the list you get when you run ./configure --help.

Cheers
Tom
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] M$, AD and Samba

2003-04-01 Thread John H Terpstra
On Tue, 1 Apr 2003 [EMAIL PROTECTED] wrote:

> April Fools' day ;-)

I believe you. :)

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] M$, AD and Samba

2003-04-01 Thread jra
On Wed, Apr 02, 2003 at 01:13:32AM +, John H Terpstra wrote:
> On Wed, 1 Apr 2003, Diego Rivera wrote:
> 
> > Hello all,
> >
> > I have news on the AD front.
> >
> > It seems M$ is going to open-source it's AD implementation.  It also
> > seems M$ is going to start development on the Samba code to help bring
> > it up to speed to its codebase, and unify them both in the end.
> 
> What is the source of this information please?

John. It's April 1 ! :-).

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] M$, AD and Samba

2003-04-01 Thread murali
April Fools' day ;-)

> -Original Message-
> From: John H Terpstra [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, April 01, 2003 5:14 PM
> To: Diego Rivera
> Cc: [EMAIL PROTECTED]
> Subject: Re: [Samba] M$, AD and Samba
> 
> 
> On Wed, 1 Apr 2003, Diego Rivera wrote:
> 
> > Hello all,
> >
> > I have news on the AD front.
> >
> > It seems M$ is going to open-source it's AD implementation.  It also
> > seems M$ is going to start development on the Samba code to 
> help bring
> > it up to speed to its codebase, and unify them both in the end.
> 
> What is the source of this information please?
> 
> - John T.
> -- 
> John H Terpstra
> Email: [EMAIL PROTECTED]
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] M$, AD and Samba

2003-04-01 Thread John H Terpstra
On Wed, 1 Apr 2003, Diego Rivera wrote:

> Hello all,
>
> I have news on the AD front.
>
> It seems M$ is going to open-source it's AD implementation.  It also
> seems M$ is going to start development on the Samba code to help bring
> it up to speed to its codebase, and unify them both in the end.

What is the source of this information please?

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] M$, AD and Samba

2003-04-01 Thread Diego Rivera
Hello all,

I have news on the AD front.

It seems M$ is going to open-source it's AD implementation.  It also
seems M$ is going to start development on the Samba code to help bring
it up to speed to its codebase, and unify them both in the end.

-- 
Diego Rivera <[EMAIL PROTECTED]>

;)

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] nmbd question

2003-04-01 Thread John H Terpstra
On Tue, 1 Apr 2003, khobar wrote:

> > On Tue, 1 Apr 2003, Barry, Christopher wrote:
> >
> > > Hi everyone,
> > > I know that there are issues with NetBIOS across subnets, but I was
> wondering:
> > >
> > > Q: If I run nmbd on a multi-interface Linux router, and allow it to
> > > listen on all interfaces, and pointing all clients to their respective
> > > router interface, can it effectively serve WINS to all subnets such that
> > > everyone can browse everyone?
> >
> > Yes. That is the design.
>
> I wish it actually did work. I'm running Mandrake 9.0 with Samba 2.2.6. The
> Mandrake box has 3 NICs in it: eth0 (internet), eth1 (wired intranet), and
> wlan0 (wireless intranet). Basically Samba works okay on the wired intranet,
> but on the wireless net it is up and down all day long...unreliable in the
> extreme.

Now please confirm that ALL your MS Windows clients TCP/IP configuration
has the IP addres of the samba server added to the WINS address.

> I've asked about this a number of times and posted my smb.conf with no
> responses. I do not know if the problem is specifically Samba, but because I
> have no other problems with the wireless net I can only assume the problem
> is either Samba or my smb.conf. I did have an MDK72 system with a Webgear
> Aviator 2.4 and an older version of Samba working successfully so I am at
> least somewhat familiar with the overall process. If someone could spot the
> error in my smb.conf file I would very much appreciate it.

Why are you using SHARE mode security? This alone will give you problems
with WinXP. Suggest you use USER mode security.

See below.

> Paul Nixon
>
> /etc/samba/smb.conf
>
> # Samba config file created using SWAT
> # from localhost.testgroup (127.0.0.1)
> # Date: 2003/02/02 20:18:31
>
> # Global parameters
> [global]
> workgroup = testgroup
> server string = Samba Server %v
> interfaces = 192.168.1.0/24 192.168.240.0/24
> bind interfaces only = yes
> security = SHARE

security = USER

> encrypt passwords = Yes
> passwd program = /usr/bin/passwd %u
> passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password*
> %n\n
> unix password sync = Yes
> log file = /var/log/samba/log.%m
> max log size = 50
> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> printcap name = lpstat

printcap name = CUPS

Means your cups printers are directly available. The printer share
[HP812C] is not needed then.

> os level = 65
> preferred master = Yes
> domain master = Yes
> local master = Yes
> dns proxy = No
> wins support = Yes
> printing = cups
>
> [homes]
> comment = Home Directories
> read only = No
> browseable = No
>
> [printers]
> comment = All Printers
> path = /var/spool/samba
> create mask = 0700
> guest ok = Yes
> printable = Yes
> print command = lpr-cups -P %p -o raw %s # using cups own drivers
> (use g
> eneric PostScript on clients).
> lpq command = lpstat -o %p
> lprm command = cancel %p-%j
> browseable = No
>
> [user1]
> comment = User1's Service
> path = /home/user1
> valid users = user1
> read only = No
>
> [user2]
> comment = user2's Service
> path = /home/user2
> valid users = user2
> read only = No
>
> [tmp]
> comment = temporary files
> path = /tmp
> read only = yes
>
> [HP812C]
> path = /var/spool/samba
> read only = No
> create mask = 0700
> guest ok = Yes
> printable = Yes
> print command = lpr-cups -P %p -o raw %s # using cups own drivers
> (use g
> eneric PostScript on clients).
> lpq command = lpstat -o %p
> lprm command = cancel %p-%j
> printer name = HP812C
> oplocks = Yes
>
>

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] nmblookup comand

2003-04-01 Thread Joel Hammer
There are differences in how nmbd and smbclient look up other computers.
For example, look in your smb.conf. Here is what I have in mind:

[global]
name resolve order =  wins bcast hosts lmhosts

hosts is the DNS server and lmhosts is the lmhost file on your linux box.

So, smbclient will try all of these before it gives up. I am very vague on
the details, but perhaps nmbd is failing because there is no nmbd daemon
running on the target machine? nmbd does not consult all these other
resources for finding a host, methinks.

Your nmbd fails after making one query. smbclient will try all the above
resources before giving up. It might be nice to compare a debug output
with smbclient, and see how smbclient finds the other host.

> querying pc8686 on 134.247.255.255
> Sending a packet of len 50 to (134.247.255.255) on port 137
> Sending a packet of len 50 to (134.247.255.255) on port 137
> Sending a packet of len 50 to (134.247.255.255) on port 137
> name_query failed to find name pc8686

Joel



On Tue, Apr 01, 2003 at 05:38:48PM +0200, Setzensack Stefan wrote:
> Dear Ladies and Gentlemens,
> 
> i have a problem, the nmblookup command have an error, but the smbclient
> command have no error.
> See example.
> Can you please help me.
> 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] nmbd question

2003-04-01 Thread khobar
> On Tue, 1 Apr 2003, Barry, Christopher wrote:
>
> > Hi everyone,
> > I know that there are issues with NetBIOS across subnets, but I was
wondering:
> >
> > Q: If I run nmbd on a multi-interface Linux router, and allow it to
> > listen on all interfaces, and pointing all clients to their respective
> > router interface, can it effectively serve WINS to all subnets such that
> > everyone can browse everyone?
>
> Yes. That is the design.

I wish it actually did work. I'm running Mandrake 9.0 with Samba 2.2.6. The
Mandrake box has 3 NICs in it: eth0 (internet), eth1 (wired intranet), and
wlan0 (wireless intranet). Basically Samba works okay on the wired intranet,
but on the wireless net it is up and down all day long...unreliable in the
extreme.

I've asked about this a number of times and posted my smb.conf with no
responses. I do not know if the problem is specifically Samba, but because I
have no other problems with the wireless net I can only assume the problem
is either Samba or my smb.conf. I did have an MDK72 system with a Webgear
Aviator 2.4 and an older version of Samba working successfully so I am at
least somewhat familiar with the overall process. If someone could spot the
error in my smb.conf file I would very much appreciate it.

Paul Nixon

/etc/samba/smb.conf

# Samba config file created using SWAT
# from localhost.testgroup (127.0.0.1)
# Date: 2003/02/02 20:18:31

# Global parameters
[global]
workgroup = testgroup
server string = Samba Server %v
interfaces = 192.168.1.0/24 192.168.240.0/24
bind interfaces only = yes
security = SHARE
encrypt passwords = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password*
%n\n
unix password sync = Yes
log file = /var/log/samba/log.%m
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = lpstat
os level = 65
preferred master = Yes
domain master = Yes
local master = Yes
dns proxy = No
wins support = Yes
printing = cups

[homes]
comment = Home Directories
read only = No
browseable = No

[printers]
comment = All Printers
path = /var/spool/samba
create mask = 0700
guest ok = Yes
printable = Yes
print command = lpr-cups -P %p -o raw %s # using cups own drivers
(use g
eneric PostScript on clients).
lpq command = lpstat -o %p
lprm command = cancel %p-%j
browseable = No

[user1]
comment = User1's Service
path = /home/user1
valid users = user1
read only = No

[user2]
comment = user2's Service
path = /home/user2
valid users = user2
read only = No

[tmp]
comment = temporary files
path = /tmp
read only = yes

[HP812C]
path = /var/spool/samba
read only = No
create mask = 0700
guest ok = Yes
printable = Yes
print command = lpr-cups -P %p -o raw %s # using cups own drivers
(use g
eneric PostScript on clients).
lpq command = lpstat -o %p
lprm command = cancel %p-%j
printer name = HP812C
oplocks = Yes

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] net rpc samdump error on samba-3.0alpha22

2003-04-01 Thread Laurent Hubert
Hi John,

I installed samba-3.0alpha22-1.rpm from crash (removed previous version
then install). I refreshed the membership of the samba server by
removing it from the NT domain and then made a "net join" to the domain
IMAGERIE. Then, I receive  the error messages below

**

[EMAIL PROTECTED] samba]# net rpc join -w IMAGERIE -U Administrator
[2003/04/01 18:34:17, 1]
rpc_client/cli_netlogon.c:cli_nt_setup_creds(300)
  cli_nt_setup_creds: auth2 challenge failed
NT_STATUS_NO_TRUST_SAM_ACCOUNT
[2003/04/01 18:34:17, 1]
libsmb/trust_passwd.c:just_change_the_password(41)
  just_change_the_password: unable to setup creds
(NT_STATUS_NO_TRUST_SAM_ACCOUNT)!
[2003/04/01 18:34:17, 1] utils/net_rpc.c:run_rpc_command(154)
  rpc command function failed! (NT_STATUS_NO_TRUST_SAM_ACCOUNT)
Password:
Joined domain IMAGERIE.

**

Nevertheless "Server manager" detect PELICAN as a Windows NT 4.9 server.
I can make various successfull use of 
net rpc [group share user] -S  -U Administrator -W IMAGERIE

to list the users, shares and group on the PDC server.

But  "NT_STATUS_NO_TRUST_SAM_ACCOUNT,  Failed to setup BDC creds"
occured on  samdump

*

[EMAIL PROTECTED] samba]# net rpc samdump -W IMAGERIE -U Administrator
[2003/04/01 18:59:27, 1]
rpc_client/cli_netlogon.c:cli_nt_setup_creds(300)
  cli_nt_setup_creds: auth2 challenge failed
NT_STATUS_NO_TRUST_SAM_ACCOUNT
Failed to setup BDC creds

**

Does it mean that I need to put the samba server to a BDC configuration
?




Here my smb.conf file


Processing section "[homes]"
Processing section "[printers]"
Processing section "[print$]"
Processing section "[soft]"
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

# Global parameters
[global]
workgroup = IMAGERIE
server string = Serveur Samba %v sur %L
interfaces = 192.168.1.125/24
security = DOMAIN
password server = TURBO LIMACE
username map = /etc/samba/smbusers
log file = /var/log/samba/log.%m
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
local master = No
dns proxy = No
wins server = 192.168.1.251, 192.168.1.241
remote announce = 192.168.1.255
hosts allow = 192.168.1., 127.

[homes]
comment = Home Directories
read only = No
browseable = No

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No

[print$]
path = /et/samba/printers
write list = root, lhubert

[soft]
comment = Depot de logiciel
path = /export/soft
write list = lhubert
read only = No
guest ok = Yes

Thanks 

-- 
Laurent Hubert, PhD
Assistant de recherche
Centre d'Imagerie Métabolique et Fonctionnelle
CRC, CHUS
Université de Sherbrooke
3001, 12e Avenue Nord
Sherbrooke, Québec
Canada
J1H 5N4
tél : 819 346 1110 poste 11836
Télécopieur : 819 820 6490
Courriel : [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba works on 2000, but not Win98/ME after relocation

2003-04-01 Thread Chen, Douglas
Hi,

We have recently relocated to the headquarters, and of course now in a different
window domain. Everyone got a new account and a password for their PC which
is different from the Unix account. Now, when I tried to access my Unix
account from my PC running Win98, I got "incorrect password" even though I have
turn on "EnablePlainTextPassword". But, it works OK if my tried it from a
Win2000 machine. Any idea how I can fix this problem? Thank you for your help.

Douglas

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Difficulty with Samba 2.2.8 and native CUPS PS drivers

2003-04-01 Thread Kurt Pfeifle
David F. Severski davidski-samba at deadheaven.com wrote:

Tue Apr 1 05:27:58 GMT 2003

Kurt,

Thanks for the detailed checklist.  It, and your help, are very much 
appreciated.

On Mon, Mar 31, 2003 at 07:49:58PM +0200, Kurt Pfeifle wrote:
readers -- it may avoid some traffic in the future... ;-)   But I can't see
a mention of your OS, and the source of your CUPS and Samba installations.
Self-compiled? Vendor-provided packages? )
The OS is FreeBSD 4.8-RC (STABLE) with CUPS, Samba, and all supporting 
print packages (gimp-print, etc.) compiled from source via the FreeBSD ports 
system.  Samba was compiled with the recycle and SSL options, though neither 
of those functions are currently used in my setup.

And your "smbd" is linked against "libcups"? Check for

   "ldd `which smbd`| grep libcups"
Cups is linked, as show below:

davidski at geoff:~$ ldd `which smbd`
/usr/local/sbin/smbd:
libssl.so.3 => /usr/lib/libssl.so.3 (0x281bc000)
libcrypto.so.3 => /usr/lib/libcrypto.so.3 (0x281eb000)
libcups.so.2 => /usr/local/lib/libcups.so.2 (0x282e2000)
libpam.so.1 => /usr/lib/libpam.so.1 (0x282fb000)
libpopt.so.0 => /usr/local/lib/libpopt.so.0 (0x28305000)
libc.so.4 => /usr/lib/libc.so.4 (0x2830c000)
I've just completed a round of tests, with the full procedure and results 
listed below.  Since it's rather lengthy, I'll summarize here:  Using the 
CUPS PS driver, I cannot rectify the error where Windows claims the driver is 
not installed.  Also, enumprinters 3 causes a core dump in rpcclient, though 
levels 2 and below complete.

Removing the CUPS drivers from both Samba and the Windows client, then 
reinstalling the Adobe driver, allows Windows clients to connect, and print 
properly.

The procedure and results are as follows:
[ ...have not been able to carefully study your session protocol -- will do
  tomorrow...]
I am nearly on my wits end. Everything further from here will likely involve
increasing the Samba debuglevel to 3 and more and do a detailled analysis of
what is going on and why the WinXP-SP1 client thinks it gets no proper PS
driver files offered
One quick (new) thought, though:

What is the PPD you use for the Canon_BJC like? Can you post the output of
"head -n 40 /etc/cups/ppd/Canon_PJC.ppd" (or some more or less lines, to show
the PPD header)?
Can you check the syntax of the PPD online at http://www.cups.org/testppd.php?

Maybe you should also post the problem on one of the CUPS mailing lists, to
draw the CUPS developers' attention to it.
Cheers,
Kurt


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] passwd chat (own programm) won't work

2003-04-01 Thread Stefan Völkel" <[EMAIL PROTECTED]>
Hello,

I would like to call a self written, non-interactive password change
script or programm.

smb.conf:

  unix password sync = Yes
  passwd program = /opt/samba/pass %u
  passwd chat = Password\n%n\n *ok
  passwd chat debug = yes

a c test programm

#include 
#include 
#include 
  
int main(void)
{ 
const int SIZE = 100;  
char buf[SIZE];
ssize_t i; 
 
openlog("pass", LOG_PID, LOG_USER);

printf("Password\n");
i = read(0, buf, SIZE);
buf[i] = 0;

syslog(LOG_DEBUG, buf);

return 0;
}

there appears no entry in the syslog :/.

so I tried a small shell script:

#!/bin/bash

logger $1
echo Password
read PASS
logger -t pass $PASS


I can see the user in the syslog but no password.

loglevel is up at 100, but I can see no entries involving my
script/programm.

Any ideas?

Thanks in advance
Stefan
-- 

Stefan Völkel[EMAIL PROTECTED]
Millenux GmbH  mobile: +49.170.79177.17
Lilienthalstraße 2  phone: +49.711.88770.300
70825 Stuttgart-Korntal   fax: +49.711.88770.349
 -= linux without limits -=- http://linux.zSeries.org/ =-


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Reading ADS volumes

2003-04-01 Thread Paul Kaplan
Forgive a possibly naive question.

I have a Linux laptop (mandrake 9) which I would like to use as a client on 
network at work.  The work LAN is a mixture of W2K servers and NT4 servers.  
Some share volumes are ADS.

I can read the non-ADS shares just fine (samba 2.2.7a), but (no surprise here) 
it chokes on ADS volumes using either the smb protocol in Konqueror or w/ 
Linneighborhood to mount the volumes.

I have no administrator rights on the LAN.

Can some one please point me to some directions for configuring the box to 
read the ADS volumes?
TIA
Paul
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


re[2]: [Samba] WINS on Samba

2003-04-01 Thread John H Terpstra
On Tue, 1 Apr 2003, Karl Banasky wrote:

> I read that in order to have WINS work correctly, one need to have the
> "guest account enabled for the SAMBA WINS server. Is this correct?

What problem are you trying to solve? Please give an example of what is
not working.

> I currently have WINS enabled and no guest account.  When I go to the
> "Hood" it shows a blank page.  I have checked, rechecked, checked and
> rechecked my settings.  Any ideas?

What do you believe WINS is and what does it do?

WINS is orthogonal to network browsing. A guest account is central to
network browsing, but has nothing to do with WINS. In the absence of a
guest account for samba you can forget about network browsing.

Why have you NOT configured a guest account for Samba? What is your
problem with this guest account?

Have you configured your MS Windows clients to use the WINS server by
setting the IP address of your Samba WINS server as the IP address of the
primary and secondary WINS addresses? If you have done this then use of
LMHOSTS is highly undesirable and can be counter productive.

- John T.

> Thanks.
> KArl
>
>
> >>  Am Die, 2003-04-01 um 16.29 schrieb Marco Calabi - T Plan S.r.l.:
>  >>  > Dear Sirs,
>  >>  > i'm trying to set up my samba server as WINS server
>
>  >>  > in /etc/lmhosts i've defined:
>  >>  Most likely you won't need a lmhosts if you have wins working properly.
>
>  >>  > In the tcp/ip setting, under wins server, i put the samba server address
>  >>
>  >>  > 192.168.1.1
>  >>  Configure all servers to use this wins server EXCEPT the wins server
>  >>  itself!
>  >>  This is on 192.168.1.1 you have
>  >>  wins support = yes
>  >>  and no "wins server" entry.
>
>  >>  On all other machines samba and NT/2k you configure
>  >>  wins server = 192.168.1.1
>  >>  (in smb.conf or the Windows network setup)

---
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Login denied after joinined Samba PDC - Fixed?

2003-04-01 Thread John H Terpstra
On Tue, 1 Apr 2003, Eric Halverson wrote:

> Okay, not sure why this seems to be the cause of the problem, but, for
> the record, whenever I have the following lines under my [global]
> section in smb.conf, I am unable to log into the domain with the afore
> mentioned error.  As soon as I comment out these two lines and restart
> samba everything seems to work just fine (so far...)
>
> valid users = root @ntadm
> write list = root @ntadm
>
> I'm not sure if then this is a bug, or just something that should be
> avoided.  Experienced this problem with 2.2.7 and 2.2.8 redhat rpms from
> samba.org

Valid Users is a parameter that may be used only within a share
specification. Same applies to "write list".

By putting these two options in the [globals] section you effectively
disable samba.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: please help: problems using 'force group' option

2003-04-01 Thread Marco De Vitis
On Tue, 1 Apr 2003 08:48:55 +0200, Jordi Castells wrote:

> I would like to control the access to the shared files,
> so only allowed groups of users can modify/create files

I think the simpler method to do this would be to use the "write list" 
parameter, together with "read only = yes".

-- 
Ciao,
  Marco.

..."A Passion Play", Jethro Tull 1973

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


re[2]: [Samba] WINS on Samba

2003-04-01 Thread Karl Banasky
I read that in order to have WINS work correctly, one need to have the "guest account 
enabled for the SAMBA WINS server. Is this correct?  I currently have WINS enabled and 
no guest account.  When I go to the "Hood" it shows a blank page.  I have checked, 
rechecked, checked and rechecked my settings.  Any ideas?
Thanks.
KArl


>>  Am Die, 2003-04-01 um 16.29 schrieb Marco Calabi - T Plan S.r.l.:
 >>  > Dear Sirs,
 >>  > i'm trying to set up my samba server as WINS server

 >>  > in /etc/lmhosts i've defined:
 >>  Most likely you won't need a lmhosts if you have wins working properly.

 >>  > In the tcp/ip setting, under wins server, i put the samba server address
 >>  
 >>  > 192.168.1.1
 >>  Configure all servers to use this wins server EXCEPT the wins server
 >>  itself!
 >>  This is on 192.168.1.1 you have
 >>  wins support = yes
 >>  and no "wins server" entry.

 >>  On all other machines samba and NT/2k you configure
 >>  wins server = 192.168.1.1
 >>  (in smb.conf or the Windows network setup)

 >>  Regards
 >>  Uli

 >>  -- 
 >>  To unsubscribe from this list go to the following URL and read the
 >>  instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Login denied after joinined Samba PDC - Fixed?

2003-04-01 Thread Eric Halverson
Okay, not sure why this seems to be the cause of the problem, but, for
the record, whenever I have the following lines under my [global]
section in smb.conf, I am unable to log into the domain with the afore
mentioned error.  As soon as I comment out these two lines and restart
samba everything seems to work just fine (so far...)

valid users = root @ntadm
write list = root @ntadm

I'm not sure if then this is a bug, or just something that should be
avoided.  Experienced this problem with 2.2.7 and 2.2.8 redhat rpms from
samba.org



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Can't join domain

2003-04-01 Thread Alfredo Ramos
Please I have a problem.

The new release of samba (2.2.8) does not allow the machines in the labs
to join the domain. I keep getting unkown userid or password when the
machine tries to join. If I go back to the previous release (2.2.2), the
machines join without any problem. What causes this behavior in the new
release? I'm running on a solaris 2.8 box, and the machines are all
Win2K SP2.

Please I need to correct this problem ASAP. Any ideas why the new
release is behaving this way?

Al.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Document updates (fwd)

2003-04-01 Thread John H Terpstra
Folks,

I am updating the Samba documentation in the HEAD and 3.0.0 branches
today.

If anyone has either documentation notes that they wish to contribute _or_
has constructive comments please email them to me direct at [EMAIL PROTECTED]
as soon as you can.

Later today (in about 5 hours time) I will commit my changes and want that
to be my last hit at this for a while. So if you have anything you would
like to see added NOW IS THE TIME. :)

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] nmbd question

2003-04-01 Thread Barry, Christopher
Sweet - that's what I figured.

Thanks,

--
Christopher Barry
Manager of Information Systems
InfiniCon Systems
http://www.infiniconsys.com



-Original Message-
From: John H Terpstra [mailto:[EMAIL PROTECTED]
Sent: Tuesday, April 01, 2003 1:50 PM
To: Barry, Christopher
Cc: Samba (E-mail)
Subject: Re: [Samba] nmbd question


On Tue, 1 Apr 2003, Barry, Christopher wrote:

> Hi everyone,
>   I know that there are issues with NetBIOS across subnets, but I was wondering:
>
> Q: If I run nmbd on a multi-interface Linux router, and allow it to
> listen on all interfaces, and pointing all clients to their respective
> router interface, can it effectively serve WINS to all subnets such that
> everyone can browse everyone?

Yes. That is the design.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] [LONG] Can't see the XP shares in my linux samba acting as aPDC

2003-04-01 Thread Markus PISTAUER (CISC)
did you finaly solve this problem ???
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] wbinfo works, getent doesn't

2003-04-01 Thread Doug Aldridge
You're right! The symbolic link was not there. I thought I'd checked
that. Thanks for the help!

Doug

>>> <[EMAIL PROTECTED]> 04/01/03 01:18PM >>>
> I am running Samba 2.2.8 with winbind on Red Hat 8.0. I can 
> do a "wbinfo -u" and get a list of my domain users but a
> "getent passwd" only returns my Linux users.

> 
> What am I missing?? Help!!

Could be the symbolic link from /lib/libnss_winbind.so.2 to
/lib/libnss_winbind.so

~ Daniel















---

This message is the property of Time Inc. or its affiliates. It may be
legally privileged and/or confidential and is intended only for the
use
of the addressee(s). No addressee should forward, print, copy, or
otherwise reproduce this message in any manner that would allow it to
be
viewed by any individual not originally listed as a recipient. If the
reader of this message is not the intended recipient, you are hereby
notified that any unauthorized disclosure, dissemination,
distribution,
copying or the taking of any action in reliance on the information
herein is strictly prohibited. If you have received this communication
in error, please immediately notify the sender and delete this
message.
Thank you.

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] ACL behavior

2003-04-01 Thread Hall, Ken (IDS ECCS)
I've been doing some testing with Samba 2.2.5 and ACL's under ext3, and everything 
seems to work as I need except when I try to add an ACL from Windows.

We're not using winbind because we need consistent UID's across servers.  We have a 
central LDAP directory with everyone in it, and use nss_ldap to resolve users and UID 
numbers.  We're authenticating
against a Windows 2000 cluster though.

When I set an ACL from Linux via the setfacl command, the ACL shows properly in the 
Windows "security" box.  It shows up as (for example) "lnxsles8/kehall" with the right 
permissions (lnxsles8 being
the Samba server).  But if I try to ADD an ACL, it can only find users from the domain 
directory.  Since all of the users are in the domain, I can assign permission using 
the corresponding ID from the
cluster ("NYC1/kehall", for example), but that triggers auto-assignment of a UID via 
Winbind, but since we're not using nss_winbind, the ACL ends up containing an 
unresolvable UID number.  If I
disable Winbind, I can't add the ACL at all.

Curiously, the security dialog DOES list the Linux groups from the LDAP directory.  It 
just doesn't seem to find the users.

Is there any way to get Samba (or Windows) to look at the Samba server's user list for 
valid names, instead of the domain/cluster?  Or am I just doing something wrong?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] nmbd question

2003-04-01 Thread John H Terpstra
On Tue, 1 Apr 2003, Barry, Christopher wrote:

> Hi everyone,
>   I know that there are issues with NetBIOS across subnets, but I was wondering:
>
> Q: If I run nmbd on a multi-interface Linux router, and allow it to
> listen on all interfaces, and pointing all clients to their respective
> router interface, can it effectively serve WINS to all subnets such that
> everyone can browse everyone?

Yes. That is the design.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Setup

2003-04-01 Thread John H Terpstra
On Tue, 1 Apr 2003, Jim Mashore wrote:

> Jim:
>
> The samba version is 2.2.7a
>
> I have tried to strep my smb.conf file, to the point it just has the
> following entries, the win2000 machine now sees the server, but will not
> allow Me to login.
>
> My goal here, is just to have samba use passwd/shadow to get login names and
> passwords, and send people off to their home directories. Something very
> clear and hopefully simple.
>
> [global]
>workgroup = WOLFPACK
>encrypt passwords = yes
 ^^^
This means you want to use an smbpasswd file.

Now I do recommend that, since if your do not, you will need to apply the
registry hack to your Win2K machines to re-enable plain text passwords.
Problem is that Microsoft Windows does not cache the plain text password
(even when you re-enable them) and that will cause you serious
intermittent problems in the long run.

So to add smbpasswds just run for each user:

smbpasswd -a 'username'

- John T.

>domain master = yes
>
> [homes]
>   guest ok = no
>   read only = no
>
>
> Output of log.smbd
> [2003/04/01 12:28:19, 0] smbd/server.c:main(707)
>   smbd version 2.2.7a started.
>   Copyright Andrew Tridgell and the Samba Team 1992-2002
> [2003/04/01 12:29:11, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1369)
>   unable to open passdb database.
> [2003/04/01 12:29:11, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1369)
>   unable to open passdb database.
> [2003/04/01 12:29:11, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1369)
>   unable to open passdb database.
> [2003/04/01 12:29:11, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1369)
>   unable to open passdb database.
>
>
> - Original Message -
> From: "Van Sickler, Jim" <[EMAIL PROTECTED]>
> To: "Samba-L (E-mail)" <[EMAIL PROTECTED]>
> Sent: Tuesday, April 01, 2003 10:56 AM
> Subject: RE: [Samba] Samba Setup
>
>
> > Jim,
> >
> > We'll need more info in order to effectively help you.
> >
> > Would you post your smb.conf for us?  Mod any IP info with
> > xxx's or 192.168.1.xxx, to keep your real net info private.
> >
> > What version of Samba are you running?
> >
> > What version of Solaris?
> >
> > RE: another post:  plain-text passwords are NOT
> > recommended, is what I think they meant to say/type.
> > And he's right.  Plain-text passwords aren't
> > neccessary, and probably won't fix what's really
> > wrong.
> >
> > Thanks in advance,
> >   Jim
> >
> > > > -Original Message-
> > > > From: Jim Mashore [mailto:[EMAIL PROTECTED]
> > > > Sent: Tuesday, April 01, 2003 11:27 AM
> > > > To: [EMAIL PROTECTED]
> > > > Subject: [Samba] Samba Setup
> > > >
> > > >
> > > > I'm setting up Samba on My Solaris box and whenever I try to
> > > > access it from My win2000 machine I get the following error
> > > >
> > > > "The account is not authorized to log in from this station"
> > > >
> > > > What does this mean ?
> > > >
> > > > TIA
> > > >
> > > > Jim Mashore
> > > >
> > > >
> > > >
> > > > --
> > > > To unsubscribe from this list go to the following URL and read the
> > > > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > > >
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> >
>
>

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] wbinfo works, getent doesn't

2003-04-01 Thread John H Terpstra
On Tue, 1 Apr 2003, Jennifer Fountain wrote:

> I am having the same problem.
> I have the following:
>
>  /lib/libnss_winbind.1 -> /usr/local/samba/lib/winbind/libnss_windbind.so
> /lib/security/libpam_winbind.1 -> /usr/local/samba/lib/winbind/pam_windbind.so
>
> where should /lib/libnss_winbind.so.2 point to?  Should it really point
> to the same one that the .1 goes to
> (/usr/local/samba/lib/winbind/libnss_winbind.so)?

Yes.

- John T.

>
> Thank you
> Jenn Fountain
>
>
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, April 01, 2003 1:18 PM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: RE: [Samba] wbinfo works, getent doesn't
>
>
> > I am running Samba 2.2.8 with winbind on Red Hat 8.0. I can
> > do a "wbinfo -u" and get a list of my domain users but a
> > "getent passwd" only returns my Linux users.
> 
> >
> > What am I missing?? Help!!
>
> Could be the symbolic link from /lib/libnss_winbind.so.2 to
> /lib/libnss_winbind.so
>
> ~ Daniel
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> ---
>
> This message is the property of Time Inc. or its affiliates. It may be
> legally privileged and/or confidential and is intended only for the use
> of the addressee(s). No addressee should forward, print, copy, or
> otherwise reproduce this message in any manner that would allow it to be
> viewed by any individual not originally listed as a recipient. If the
> reader of this message is not the intended recipient, you are hereby
> notified that any unauthorized disclosure, dissemination, distribution,
> copying or the taking of any action in reliance on the information
> herein is strictly prohibited. If you have received this communication
> in error, please immediately notify the sender and delete this message.
> Thank you.
>
>

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] nmbd question

2003-04-01 Thread Barry, Christopher
Hi everyone,
I know that there are issues with NetBIOS across subnets, but I was wondering:

Q: If I run nmbd on a multi-interface Linux router, and allow it to listen on all 
interfaces, and pointing all clients to their respective router interface, can it 
effectively serve WINS to all subnets such that everyone can browse everyone?

Thanks,

--
Christopher Barry
Manager of Information Systems
InfiniCon Systems
http://www.infiniconsys.com

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Setup

2003-04-01 Thread Jim Mashore
Jim:

The samba version is 2.2.7a

I have tried to strep my smb.conf file, to the point it just has the
following entries, the win2000 machine now sees the server, but will not
allow Me to login.

My goal here, is just to have samba use passwd/shadow to get login names and
passwords, and send people off to their home directories. Something very
clear and hopefully simple.

[global]
   workgroup = WOLFPACK
   encrypt passwords = yes
   domain master = yes

[homes]
  guest ok = no
  read only = no


Output of log.smbd
[2003/04/01 12:28:19, 0] smbd/server.c:main(707)
  smbd version 2.2.7a started.
  Copyright Andrew Tridgell and the Samba Team 1992-2002
[2003/04/01 12:29:11, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1369)
  unable to open passdb database.
[2003/04/01 12:29:11, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1369)
  unable to open passdb database.
[2003/04/01 12:29:11, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1369)
  unable to open passdb database.
[2003/04/01 12:29:11, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1369)
  unable to open passdb database.


- Original Message -
From: "Van Sickler, Jim" <[EMAIL PROTECTED]>
To: "Samba-L (E-mail)" <[EMAIL PROTECTED]>
Sent: Tuesday, April 01, 2003 10:56 AM
Subject: RE: [Samba] Samba Setup


> Jim,
>
> We'll need more info in order to effectively help you.
>
> Would you post your smb.conf for us?  Mod any IP info with
> xxx's or 192.168.1.xxx, to keep your real net info private.
>
> What version of Samba are you running?
>
> What version of Solaris?
>
> RE: another post:  plain-text passwords are NOT
> recommended, is what I think they meant to say/type.
> And he's right.  Plain-text passwords aren't
> neccessary, and probably won't fix what's really
> wrong.
>
> Thanks in advance,
>   Jim
>
> > > -Original Message-
> > > From: Jim Mashore [mailto:[EMAIL PROTECTED]
> > > Sent: Tuesday, April 01, 2003 11:27 AM
> > > To: [EMAIL PROTECTED]
> > > Subject: [Samba] Samba Setup
> > >
> > >
> > > I'm setting up Samba on My Solaris box and whenever I try to
> > > access it from My win2000 machine I get the following error
> > >
> > > "The account is not authorized to log in from this station"
> > >
> > > What does this mean ?
> > >
> > > TIA
> > >
> > > Jim Mashore
> > >
> > >
> > >
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> >
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] wbinfo works, getent doesn't

2003-04-01 Thread Jennifer Fountain
I am having the same problem. 
I have the following:

 /lib/libnss_winbind.1 -> /usr/local/samba/lib/winbind/libnss_windbind.so
/lib/security/libpam_winbind.1 -> /usr/local/samba/lib/winbind/pam_windbind.so

where should /lib/libnss_winbind.so.2 point to?  Should it really point to the same 
one that the .1 goes to (/usr/local/samba/lib/winbind/libnss_winbind.so)?

Thank you
Jenn Fountain



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Tuesday, April 01, 2003 1:18 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: RE: [Samba] wbinfo works, getent doesn't


> I am running Samba 2.2.8 with winbind on Red Hat 8.0. I can 
> do a "wbinfo -u" and get a list of my domain users but a
> "getent passwd" only returns my Linux users.

> 
> What am I missing?? Help!!

Could be the symbolic link from /lib/libnss_winbind.so.2 to
/lib/libnss_winbind.so

~ Daniel















---

This message is the property of Time Inc. or its affiliates. It may be
legally privileged and/or confidential and is intended only for the use
of the addressee(s). No addressee should forward, print, copy, or
otherwise reproduce this message in any manner that would allow it to be
viewed by any individual not originally listed as a recipient. If the
reader of this message is not the intended recipient, you are hereby
notified that any unauthorized disclosure, dissemination, distribution,
copying or the taking of any action in reliance on the information
herein is strictly prohibited. If you have received this communication
in error, please immediately notify the sender and delete this message.
Thank you.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] wbinfo works, getent doesn't

2003-04-01 Thread daniel . jarboe
> I am running Samba 2.2.8 with winbind on Red Hat 8.0. I can 
> do a "wbinfo -u" and get a list of my domain users but a
> "getent passwd" only returns my Linux users.

> 
> What am I missing?? Help!!

Could be the symbolic link from /lib/libnss_winbind.so.2 to
/lib/libnss_winbind.so

~ Daniel















---

This message is the property of Time Inc. or its affiliates. It may be
legally privileged and/or confidential and is intended only for the use
of the addressee(s). No addressee should forward, print, copy, or
otherwise reproduce this message in any manner that would allow it to be
viewed by any individual not originally listed as a recipient. If the
reader of this message is not the intended recipient, you are hereby
notified that any unauthorized disclosure, dissemination, distribution,
copying or the taking of any action in reliance on the information
herein is strictly prohibited. If you have received this communication
in error, please immediately notify the sender and delete this message.
Thank you.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] wbinfo works, getent doesn't

2003-04-01 Thread Doug Aldridge
I am running Samba 2.2.8 with winbind on Red Hat 8.0. I can do a "wbinfo
-u" and get a list of my domain users but a "getent passwd" only returns
my Linux users. Here are my configs:

/etc/nsswitch.conf
passwd: files winbind
shadow: files
group:files winbind

/etc/samba/smb.conf
[global]
workgroup = KOK1
server string = KOK1LNX5
security = DOMAIN
encrypt passwords = Yes
log file = /var/log/samba/log.%m
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = No
wins server = 10.70.8.9
winbind uid = 1-2
winbind gid = 1-2
template homedir = /home/%U
winbind separator = +

What am I missing?? Help!!

Doug Aldridge
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba Setup

2003-04-01 Thread Van Sickler, Jim
Jim,

We'll need more info in order to effectively help you.

Would you post your smb.conf for us?  Mod any IP info with
xxx's or 192.168.1.xxx, to keep your real net info private.

What version of Samba are you running?

What version of Solaris?

RE: another post:  plain-text passwords are NOT
recommended, is what I think they meant to say/type.
And he's right.  Plain-text passwords aren't
neccessary, and probably won't fix what's really
wrong.

Thanks in advance,
  Jim

> > -Original Message-
> > From: Jim Mashore [mailto:[EMAIL PROTECTED] 
> > Sent: Tuesday, April 01, 2003 11:27 AM
> > To: [EMAIL PROTECTED]
> > Subject: [Samba] Samba Setup 
> > 
> > 
> > I'm setting up Samba on My Solaris box and whenever I try to 
> > access it from My win2000 machine I get the following error
> > 
> > "The account is not authorized to log in from this station"
> > 
> > What does this mean ?
> > 
> > TIA
> > 
> > Jim Mashore
> > 
> > 
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] BUG REPORT: change_trust_account_password works in 2.0.7,fails in 2.2.3a through 2.2.8

2003-04-01 Thread Eric Boehm
I posted an earlier message about change_trust_account_password
failing.

I have been able to reproduce the error with

2.2.3a
2.2.5
2.2.7a
2.2.8

I can't seem to get 2.2.1 to even attempt to change the machine
account password, even with 

machine password timeout = 300

The log of the failure looks like this:

[2003/04/01 12:34:11, 1, pid=28443] lib/debug.c:(258)
  INFO: Debug class all level = 1   (pid 28443 from pid 28443)
[2003/04/01 12:34:12, 1, pid=28443] smbd/service.c:(651)
  boehm-1 (47.142.166.20) connect to service perl as user boehm (uid=20718, gid=2245) 
(pid 28443)
[2003/04/01 12:34:12, 1, pid=28443] smbd/service.c:(651)
  boehm-1 (47.142.166.20) connect to service perl as user boehm (uid=20718, gid=2245) 
(pid 28443)
[2003/04/01 12:35:12, 0, pid=28443] rpc_client/cli_trust.c:(46)
  domain_client_validate: unable to fetch domain sid.
[2003/04/01 12:35:12, 0, pid=28443] rpc_client/cli_trust.c:(46)
  domain_client_validate: unable to fetch domain sid.
[2003/04/01 12:35:12, 0, pid=28443] rpc_client/cli_trust.c:(46)
  domain_client_validate: unable to fetch domain sid.
[2003/04/01 12:35:12, 0, pid=28443] rpc_client/cli_trust.c:(247)
  2003/04/01 12:35:12 : change_trust_account_password: Failed to change password for 
domain AMERICASE.

Increasing the debug level to 10 doesn't seem to impart any more
useful information but I do have level 10 log of the problem (about
42K).

I don't believe that there is anything wrong with my machine
account. If I drop back to 2.0.7, I am able to successfully change my
machine account. I have done so by setting
'machine password timeout = 300' and went through two successful
changes of the machine account password.

-- 
Eric M. Boehm  /"\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Setup

2003-04-01 Thread Brian C. Hill
Does this mean that samba can now reverse a LM2 hash?

Brian
==
On Tue, Apr 01, 2003 at 11:32:13AM -0600, Kenny Mann wrote:
> You need to disable encrpyted passwords.
> The newer version of samba should allow encrypted passwords.
> There is a registry setting that you must create to allow plain text
> passwords.
> It is highly recommended that you do now use plaintext passwords for
> obvious security reasons.
> 
> Did you set any encryption settings in your smb.conf file?
> What version of Samba are you running?
> 
> If, for some reason, you can't get that going
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\p
> arameters
> 
> Create a dword called "enableplaintextpassword"
> Give it a value of 1.
> 1=on
> 0=off
> 
> --Kenny Mann
> 
> > -Original Message-
> > From: Jim Mashore [mailto:[EMAIL PROTECTED] 
> > Sent: Tuesday, April 01, 2003 11:27 AM
> > To: [EMAIL PROTECTED]
> > Subject: [Samba] Samba Setup 
> > 
> > 
> > I'm setting up Samba on My Solaris box and whenever I try to 
> > access it from My win2000 machine I get the following error
> > 
> > "The account is not authorized to log in from this station"
> > 
> > What does this mean ?
> > 
> > TIA
> > 
> > Jim Mashore
> > 
> > 
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
   _
  / Brian C. Hill   [EMAIL PROTECTED]   http://brian.bch.net\
  | Unix Specialist BCH Technical Services  http://www.bch.net  |
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba Setup

2003-04-01 Thread Kenny Mann
Now=not :-(

> -Original Message-
> From: John H Terpstra [mailto:[EMAIL PROTECTED] 
> Sent: Tuesday, April 01, 2003 11:38 AM
> To: Kenny Mann
> Cc: Jim Mashore; 
> Subject: RE: [Samba] Samba Setup 
> 
> 
> On Tue, 1 Apr 2003, Kenny Mann wrote:
> 
> > You need to disable encrpyted passwords.
> > The newer version of samba should allow encrypted 
> passwords. There is 
> > a registry setting that you must create to allow plain text 
> passwords.
> > It is highly recommended that you do now use plaintext passwords for
> > obvious security reasons.
> 
> Kenny,
> 
> Please explain the above statement. I'd like to know why 
> plain text passwords ARE more secure and I am sure others on 
> this list would like to know also.
> 
> - John T.
> 
> 
> >
> > Did you set any encryption settings in your smb.conf file? What 
> > version of Samba are you running?
> >
> > If, for some reason, you can't get that going 
> > 
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation
> > \p
> > arameters
> >
> > Create a dword called "enableplaintextpassword"
> > Give it a value of 1.
> > 1=on
> > 0=off
> >
> > --Kenny Mann
> >
> > > -Original Message-
> > > From: Jim Mashore [mailto:[EMAIL PROTECTED]
> > > Sent: Tuesday, April 01, 2003 11:27 AM
> > > To: [EMAIL PROTECTED]
> > > Subject: [Samba] Samba Setup
> > >
> > >
> > > I'm setting up Samba on My Solaris box and whenever I try 
> to access 
> > > it from My win2000 machine I get the following error
> > >
> > > "The account is not authorized to log in from this station"
> > >
> > > What does this mean ?
> > >
> > > TIA
> > >
> > > Jim Mashore
> > >
> > >
> > >
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> >
> 
> -- 
> John H Terpstra
> Email: [EMAIL PROTECTED]
> 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba Setup

2003-04-01 Thread Kenny Mann
Whoops, sorry. Typo.

> -Original Message-
> From: John H Terpstra [mailto:[EMAIL PROTECTED] 
> Sent: Tuesday, April 01, 2003 11:38 AM
> To: Kenny Mann
> Cc: Jim Mashore; 
> Subject: RE: [Samba] Samba Setup 
> 
> 
> On Tue, 1 Apr 2003, Kenny Mann wrote:
> 
> > You need to disable encrpyted passwords.
> > The newer version of samba should allow encrypted 
> passwords. There is 
> > a registry setting that you must create to allow plain text 
> passwords.
> > It is highly recommended that you do now use plaintext passwords for
> > obvious security reasons.
> 
> Kenny,
> 
> Please explain the above statement. I'd like to know why 
> plain text passwords ARE more secure and I am sure others on 
> this list would like to know also.
> 
> - John T.
> 
> 
> >
> > Did you set any encryption settings in your smb.conf file? What 
> > version of Samba are you running?
> >
> > If, for some reason, you can't get that going 
> > 
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation
> > \p
> > arameters
> >
> > Create a dword called "enableplaintextpassword"
> > Give it a value of 1.
> > 1=on
> > 0=off
> >
> > --Kenny Mann
> >
> > > -Original Message-
> > > From: Jim Mashore [mailto:[EMAIL PROTECTED]
> > > Sent: Tuesday, April 01, 2003 11:27 AM
> > > To: [EMAIL PROTECTED]
> > > Subject: [Samba] Samba Setup
> > >
> > >
> > > I'm setting up Samba on My Solaris box and whenever I try 
> to access 
> > > it from My win2000 machine I get the following error
> > >
> > > "The account is not authorized to log in from this station"
> > >
> > > What does this mean ?
> > >
> > > TIA
> > >
> > > Jim Mashore
> > >
> > >
> > >
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> >
> 
> -- 
> John H Terpstra
> Email: [EMAIL PROTECTED]
> 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba Setup

2003-04-01 Thread John H Terpstra
On Tue, 1 Apr 2003, Kenny Mann wrote:

> You need to disable encrpyted passwords.
> The newer version of samba should allow encrypted passwords.
> There is a registry setting that you must create to allow plain text
> passwords.
> It is highly recommended that you do now use plaintext passwords for
> obvious security reasons.

Kenny,

Please explain the above statement. I'd like to know why plain text
passwords ARE more secure and I am sure others on this list would like to
know also.

- John T.


>
> Did you set any encryption settings in your smb.conf file?
> What version of Samba are you running?
>
> If, for some reason, you can't get that going
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\p
> arameters
>
> Create a dword called "enableplaintextpassword"
> Give it a value of 1.
> 1=on
> 0=off
>
> --Kenny Mann
>
> > -Original Message-
> > From: Jim Mashore [mailto:[EMAIL PROTECTED]
> > Sent: Tuesday, April 01, 2003 11:27 AM
> > To: [EMAIL PROTECTED]
> > Subject: [Samba] Samba Setup
> >
> >
> > I'm setting up Samba on My Solaris box and whenever I try to
> > access it from My win2000 machine I get the following error
> >
> > "The account is not authorized to log in from this station"
> >
> > What does this mean ?
> >
> > TIA
> >
> > Jim Mashore
> >
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> >
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba Setup

2003-04-01 Thread Kenny Mann
You need to disable encrpyted passwords.
The newer version of samba should allow encrypted passwords.
There is a registry setting that you must create to allow plain text
passwords.
It is highly recommended that you do now use plaintext passwords for
obvious security reasons.

Did you set any encryption settings in your smb.conf file?
What version of Samba are you running?

If, for some reason, you can't get that going
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\p
arameters

Create a dword called "enableplaintextpassword"
Give it a value of 1.
1=on
0=off

--Kenny Mann

> -Original Message-
> From: Jim Mashore [mailto:[EMAIL PROTECTED] 
> Sent: Tuesday, April 01, 2003 11:27 AM
> To: [EMAIL PROTECTED]
> Subject: [Samba] Samba Setup 
> 
> 
> I'm setting up Samba on My Solaris box and whenever I try to 
> access it from My win2000 machine I get the following error
> 
> "The account is not authorized to log in from this station"
> 
> What does this mean ?
> 
> TIA
> 
> Jim Mashore
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba Setup

2003-04-01 Thread Jim Mashore
I'm setting up Samba on My Solaris box and whenever I try to access it from
My win2000 machine I get the following error

"The account is not authorized to log in from this station"

What does this mean ?

TIA

Jim Mashore



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] How to read NT Domain accounts from a Unix box

2003-04-01 Thread Barry, Christopher
What I do is a two-step process, kinda kludgy, but works well.

1.) on the NT box, from scheduler, I run the 'addusers /d' command (from the resource 
kit) dumping all user/group data to a file in an ftp root directory. This runs every 5 
minutes.

2.) from the NIS master Linux box, I grab the file via ftp, parse it and modify all of 
my NIS user and group info to match Windows. This way I can add/remove all users and 
groups in Windows, and this script keeps the users and groups in NIS in sync.

If anyone wants a copy of the script and conf files, let me know.

Regards,

--
Christopher Barry
Manager of Information Systems
InfiniCon Systems
http://www.infiniconsys.com



-Original Message-
From: ravi kiran [mailto:[EMAIL PROTECTED]
Sent: Monday, March 31, 2003 10:45 PM
To: [EMAIL PROTECTED]
Subject: [Samba] How to read NT Domain accounts from a Unix box


Hi,
Is there any open way of reading user/group accounts of a NT 
Domain from a Unix box? I guess, rpcclient is more like a hack of 
MS protocol.
Is it the only way currently? Can anyone give more information on 
this?

Thanks in advance.
Ravi
___
Odomos - the only  mosquito protection outside 4 walls -
Click here to know more!
http://r.rediff.com/r?http://clients.rediff.com/odomos/Odomos.htm&&odomos&&wn

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Compiling pam_winbind on Solaris 8

2003-04-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 20 Mar 2003, Chris Hanrahan wrote:

> Greetings,
> 
> I am trying to compile pam_winbind.so under Solaris 8.  I have the
> source for samba 2.2.8 on the server.  When I issue a make
> nsswitch/pam_winbind.so, I receive many compiler warnings, such as:
> 
> Compiling nsswitch/pam_winbind.c with -fPIC
> nsswitch/pam_winbind.c: In function `converse':
> nsswitch/pam_winbind.c:72: warning: passing arg 3 of `pam_get_item' from incompa
> tible pointer type
> nsswitch/pam_winbind.c:75: warning: passing arg 2 of pointer to function from in
> compatible pointer type
> nsswitch/pam_winbind.c: In function `_make_remark':
> nsswitch/pam_winbind.c:90: warning: assignment discards qualifiers from pointer
> target type
> nsswitch/pam_winbind.c: In function `_winbind_read_password':
> nsswitch/pam_winbind.c:265: warning: passing arg 3 of `pam_get_item' from incomp
> atible pointer type
> nsswitch/pam_winbind.c:298: warning: assignment discards qualifiers from pointer
>  target type
> 
> Am I missing a package that is necessary under Solaris ?  The
> pam_winbind.so is created anyway, but I am not sure that it will work
> correctly due to the warnings that I received.  Has anyone encountered
> and solved this problem ?

You should be able to ignore these warning.  As far as I know, 
pam_winbind.so does work correctly on Solaris.  If you discover 
differently, let me know and we'll straighten it out.




cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
--John Cusack - "Grosse Point Blank" (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+icIVIR7qMdg1EfYRAhJ8AKCN+GMK48tQj5+2cb2UJ0LmgMN4PACgod5i
Fqpg2JL74kEQ4BIrprLs4xc=
=oN0b
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Bug on samba

2003-04-01 Thread Ayelet Regev
Hi All,

I am using samba version 2.2.6 on an Irix OS.

My problem is that I have no permission to read/write into dot files.
when I access the data via Dos and edit the files I receive "read only file"
The files look great from the Unix side (777 permissions)

This is my smb.conf file:

# Samba config file created using SWAT
# from 172.17.5.221 (172.17.5.221)
# Date: 2003/04/01 19:09:50

# Global parameters
[global]
workgroup = TECNMX-IS-HR
server string = Ayelet's Server Samba %v
security = DOMAIN
encrypt passwords = Yes
password server = israel-2
log file = /usr/samba/var/log.%m
max log size = 50
read size = 8192
strip dot = Yes
dns proxy = No
wins server = israel-3 israel-2
comment = Ayelet's Samba Server %v
create mask = 0777
directory mask = 0777
force unknown acl user = 01
guest ok = Yes
nt acl support = No
default case = upper
case sensitive = Yes
hide dot files = No
map archive = No

[disk2]
comment = Tecnomatix Stuff
path = /net/disk2
read only = No

[shiri_data]
path = /shiri_data
read only = No

[test]
path = /tmp
read only = No



Please help me solve this issue,
Ayelet Regev 
Unix system Administrator
Tecnomatix LTD.


***

The information contained in this message is proprietary of Tecnomatix, protected 
from disclosure, and may be privileged.
The information is intended to be conveyed only to the designated recipient(s) of the 
message. If the reader of this message is not the intended recipient, you are hereby 
notified that any dissemination, use, distribution or copying of this communication is 
strictly prohibited and may be unlawful.
If you have received this communication in error, please notify us immediately
by replying to the message and deleting it from your computer.

Thank you.
***
001


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba, email, LDAP and password integration andmanagement

2003-04-01 Thread Markus Schabel
Brian Johnson wrote:
I set up a test server about a year ago to try this and gave up since it didn't seem
that the processes were quite yet in place to do it ..
I am evaluating the potential for Samba and Linux accounts (including postfix email
accounts) to share the same passwords and have a process in place to encourage users
to change their passwords and try to prevent esay to crack passwords
Could someone please confirm whether they have such a system working and how
difficult it was to set up?
When I looked at it before, it seemed that although Samba could use LDAP, it used a
different schema from the standard system accounts and therefore there was not
really any sharing of password data
If it matters, my server I'd like to do this on is a Redhat 7.3 system
I'm running the following services/daemons with my LDAP-users:
* postfix for address2mailbox-mapping, aliases, forwardings and
  authenticated SMTP
* courier for authenticated access to POP3 and IMAP
* apache with LDAP-authenticated .htacces
* proftpd with LDAP-users/homedirs
* samba as domain-controller and file-servers with LDAP-users
* dhcpd loads configuration from LDAP and stores leases in LDAP
* php-based addressbook
* squirrelmail webmail
currently work in progress:
* dhcpd logs leases into LDAP so that BIND or tinydns can do DNS with
  that data
I think that's all for the moment. Sure, it is *a lot of* work to get
all this running, but it's really nice when it finally works.
regards
--
  \\\ ||| ///   _\=/_
   (  @ @  )(o o)
+oOOo-(_)-oOOo--oOOo-(_)-oOOo--+
| Markus Schabel  TGM - Die Schule der Technik   www.tgm.ac.at |
| IT-Service  A-1200 Wien, Wexstrasse 19-23  net.tgm.ac.at |
| [EMAIL PROTECTED]   Tel.: +43(1)33126/316 |
| [EMAIL PROTECTED] Fax.: +43(1)33126/154 |
| FSF Associate Member #597, Linux User #259595 (counter.li.org)   |
|oOOoYet Another Spam Trap: oOOo   |
|   ()oOOo[EMAIL PROTECTED]   (   ) oOOo  |
+\  ((   )--\ ( -(   )-+
  \_) ) /\_)  ) /
 (_/ (_/
Computers are like airconditioners:
  They stop working properly if you open windows.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Point and Print problem 2.2.7A and 2.2.8

2003-04-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 27 Mar 2003, Arcady Chernyak wrote:

> I have detected significant performance slow down when I use PnP driver
> with versions 2.2.7A and 2.2.8. It happened with all kinds of Windows OS
> (exclude 9x) when user has administrative rights to Samba based
> printers. In Windows system event viewer I see that spooler retrieves
> printer driver files from Samba server to Window machine a lot of times.
> It happened each time when I try to update driver properties, change
> paper size or print .. Sometimes Windows's spooler retrieves driver
> files hundreds times and it take all CPU's and network resources.
> 
> It newer happened before with SAMBA 2.2.2 we used. 

This is behavior by design.  The client determines that it's local cache
is out of date abd updates.  If you are using PCL drivers, you might want 
to swap to PS ones and limit admin access to the printers as much as 
possible.





cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
--John Cusack - "Grosse Point Blank" (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+ibqZIR7qMdg1EfYRAoPmAKDagrKcVvIUNvCiUwDn+PCszVc/hACeMV60
KPuZzl10FnoWkcFUHpGMrLU=
=r1HH
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Users only in ldap

2003-04-01 Thread Markus Schabel
Lucas Lain wrote:
Hi everybody ... !! 
i have a few questions...
i want to implement samba with ldap(only to share folders) ... and i want to know if i can create virtual users (the users are only in the ldap server, and not in the passwd file)
is it posible??
You can have the passwd/shadow also in LDAP (look at libpam-ldap and
libnss-ldap). This works without problems.
regards
--
  \\\ ||| ///   _\=/_
   (  @ @  )(o o)
+oOOo-(_)-oOOo--oOOo-(_)-oOOo--+
| Markus Schabel  TGM - Die Schule der Technik   www.tgm.ac.at |
| IT-Service  A-1200 Wien, Wexstrasse 19-23  net.tgm.ac.at |
| [EMAIL PROTECTED]   Tel.: +43(1)33126/316 |
| [EMAIL PROTECTED] Fax.: +43(1)33126/154 |
| FSF Associate Member #597, Linux User #259595 (counter.li.org)   |
|oOOoYet Another Spam Trap: oOOo   |
|   ()oOOo[EMAIL PROTECTED]   (   ) oOOo  |
+\  ((   )--\ ( -(   )-+
  \_) ) /\_)  ) /
 (_/ (_/
Computers are like airconditioners:
  They stop working properly if you open windows.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A question

2003-04-01 Thread John H Terpstra
On Tue, 1 Apr 2003, Joedilson B. Azevedo wrote:

> Hi.
> I would like to know what kind of  processor and memory RAM I need to
> run the SAMBA for 200 people.

With samba you will be runninf more than 200 instances of smbd. Your
memory requirement (min) will be:
200 x approx. 0.5 MB per process = 100 MB
System requirements (for Linux approx 100 MB if X is running)

So you suggested minimum is NOT less than 256 MB. A Single CPU can manage
200 users. The key questions are:

1. What work load will your MS Windows users have? How many concurrent
writes/reads? What is the estimated Input/Output load (MB/sec)?

2. What performance levels will your heaviest user demand? Is instant
read/write behaviour esential? Will a 5 second delay be acceptable.

3. What disk subsystem bandwidth (disk I/O) will the machine provide?

It makes no sense to install a system that has 4 CPU's, with massive RAID
disk I/O, and with 4 Gigabytes memory if only one user will have a high
demand.

For 200 users you could manage the load with:
Dual CPU (AMD MP1600+ or Intel P-III Xeon)
1 Gigabyte memory
3Ware IDE RAID with 3 or more IDE 7200 rpm drives

You could build such a system for under USD$3000. You would be advised to
use 1 Gigabit ethernet to an etherswitch that will act as a concentrator
for 100BaseT workstation connections.

As a general guide: More CPUs means better performance, more memory means
better performance, more disk I/O means better performance, more network
I/O menas better performance. Above all keep system sizing in perspective
and balanced.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] nmblookup comand

2003-04-01 Thread Setzensack Stefan
Dear Ladies and Gentlemens,

i have a problem, the nmblookup command have an error, but the smbclient
command have no error.
See example.
Can you please help me.

rzs12:/opt/samba/bin># ./nmblookup -d 10 pc8686
Initialising global parameters
params.c:pm_process() - Processing configuration file
"/opt/samba/lib/smb.conf"
Processing section "[global]"
doing parameter workgroup = FMG
doing parameter netbios name = coibflow
handle_netbios_name: set global_myname to: COIBFLOW
doing parameter interfaces = 134.247.6.55
doing parameter bind interfaces only = Yes
doing parameter lock directory = /bflow2/samba/log/locks
doing parameter protocol = NT1
doing parameter server string = Sun Cluster
doing parameter security = server
doing parameter password server = nts1, nts2, nts3, nts4
doing parameter wins server = 134.247.134.21, 134.247.14.80
wins_srv_load_list(): Building WINS server list:
134.247.134.21,
134.247.14.80,
2 WINS servers listed.
doing parameter dns proxy = no
doing parameter name resolve order = wins host bcast
doing parameter load printers = no
doing parameter domain master = no
doing parameter local master = no
doing parameter domain logons = no
doing parameter encrypt passwords = yes
doing parameter wins support = no
doing parameter os level = 0
doing parameter add user script = /bflow2/samba/bin/adduser %u
doing parameter delete user script = /bflow2/samba/bin/deluser %u
doing parameter log file = /bflow2/samba/log/log.%I
pm_process() returned Yes
lp_servicenumber: couldn't find homes
set_server_role: ROLE_DOMAIN_MEMBER
added interface ip=134.247.6.55 bcast=134.247.255.255 nmask=255.255.0.0
bind succeeded on port 0
socket option SO_KEEPALIVE = 0
socket option SO_REUSEADDR = 4
socket option SO_BROADCAST = 32
Could not test socket option TCP_NODELAY.
socket option IPTOS_LOWDELAY = 0
socket option IPTOS_THROUGHPUT = 0
socket option SO_SNDBUF = 8192
socket option SO_RCVBUF = 8192
Could not test socket option SO_SNDLOWAT.
Could not test socket option SO_RCVLOWAT.
Could not test socket option SO_SNDTIMEO.
Could not test socket option SO_RCVTIMEO.
Socket opened.
querying pc8686 on 134.247.255.255
Sending a packet of len 50 to (134.247.255.255) on port 137
Sending a packet of len 50 to (134.247.255.255) on port 137
Sending a packet of len 50 to (134.247.255.255) on port 137
name_query failed to find name pc8686


rzs12:/opt/samba/bin># ./smbclient -L pc8686 -U setzenss
added interface ip=134.247.6.55 bcast=134.247.255.255 nmask=255.255.0.0
Got a positive name query response from 134.247.14.80 ( 134.247.142.204 )
Password: 
Domain=[FMG] OS=[Windows NT 4.0] Server=[NT LAN Manager 4.0]
Sharename  Type  Comment
   -   ---
ADMIN$ Disk  Remote-Admin
IPC$  IPC   Remote-IPC
C$ Disk  Standardfreigabe

Server   Comment
-  ---
Workgroup Master
-   ---



___
Stefan Setzensack  
Flughafen München GmbH
Postfach 
85326 München  

E-Mail:[EMAIL PROTECTED] (geschäftlich)
   [EMAIL PROTECTED] (privat)

Internet: www.munich-airport.de

Tel. +49 89 975 32328 
Fax +49 89 975 32306

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Bizarre problem - happens only under XP and not 2000

2003-04-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 13 Mar 2003, Kier Darby wrote:

> Just an update on this - I removed Samba 2.2.7 from the RH8 system and
> reinstalled it using the Samba 2.2.1a-4 version from my Redhat 7.2 CDs,
> and the problem has miraculously disappeared...
> 
> So what got broken between 2.2.1a-4 and 2.2.7-2?

Could you possibly retest with a stock Samba 2.2.8 build?  Or even test 
the SAMBA_3_0 cvs branch?  Thanks.



cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+ibFBIR7qMdg1EfYRAojIAKCR3Rv7LAmCr2yt35mDxiEgDm9MlwCgpUE/
SYCgkzJ2oTmmstny9ur+o04=
=XuT3
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] XP Machines/profiles/migration issues

2003-04-01 Thread Buchan Milne
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

> Date: 01 Apr 2003 10:11:01 +1000
> From: richard <[EMAIL PROTECTED]>
> To: Anthony Hardy <[EMAIL PROTECTED]>
> Cc: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
> Subject: Re: [Samba] XP Machines/profiles/migration issues
> Message-ID: <[EMAIL PROTECTED]>
> In-Reply-To: <[EMAIL PROTECTED]>
> References: <[EMAIL PROTECTED]>
> Content-Type: text/plain
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> Precedence: list
> Message: 5
>
> I'm no expert on Xp profiles but..doesen't xp assign a sid to each user
> in the profile. I believe you'll have to create your new domain-user on
> new server THEN copy old profile over newly created one (using xp user
> tools). There have posts on how to do this earlier this year. regards,
> Richard Coates.
>

Well, this will not fix the ntuser.dat, since the ACLs in the file will
still have the old SIDs.

> On Tue, 2003-04-01 at 04:11, Anthony Hardy wrote:
>
>>> well . would help if i didn't hit the send key before pasting in the
>>> original msg . once again . my apologies
>>>
>>> btw . helpful info:
>>>
>>> mandrake rpms at 2.2.7a, mandrake 9.0 . .all patches applied.
>>>
>>> I just sent this . but realized i sent it from the wrong email addy
. want
>>> to make sure it gets thru to the list . so i'm resending . i
apologize if
>>> both copies make it thru.
>>>
>>> problem:
>>>
>>>
>>> migrating from one server to another .  . .physical and software
migration.
>>> copied all profiles and am in the process of adding a new automated
system
>>> for domain management (mysql backend, blah balh) so the uid's
changed for
>>> each user.
>>>

Are you using the samba mysql sam backend (is that in 2.2.x, if not, you
 may want to try samba3).

Also, LDAP may be a better backend for 2.2.x.

>>> this is what how i THOUGHT things would work:
>>>
>>> 1. everyone logs out
>>> 2. shutdown samba on old server
>>> 3. add new users to new server
>>> 4. transfer ALL data to new server, including profiles, setup
permissions on
>>> files to correspond with new uids
>>> 5. finish config of smb.conf on new server, adding the proper
shares, etc .
>>> basically a mirror of the old box.
>>> 6. start up new server . . .login 9x machines for testing.
>>> 7. rejoin all XP machines to the domain, and i should have been good
to go.
>>>
>>> the problem lies in that once i rejoin an XP machine (testing with a
couple
>>> right now) is that the profiles don't load properly.  the user logs in,
>>> everything "seems" to be ok . in that the desktop icons are present,
custom
>>> apps seem to work . .but pieces are broken.
>>>

Chances are that if you need to rejoin machines to the domain, you are
going to need to fix the profiles. You should aim not to need to rejoin
machines.

>>> for example . . .OE or outlook . broken.  it's like the ntuser.dat file
>>> doesn't get pulled .. .

Probably becuase the ACLs in the profile itself don't allow the user to
read the settings.

>>>
>>> i noticed that under documents and settings on the local machines HD the
>>> owner wasn't correct for the correct profile directory (normally,
just the
>>> user name) and upon logging in . there was a new profile directory
created,
>>> username.domain.  That "should" have been fine i thought . .as long
as  the
>>> profile was copied from the network . but it's NOT being copied .
. . .so
>>> i tried different machines . and various tests . from rejoining the
domain
>>> and changing permission BEFORE logging in as the user to  . .well .
>>> everything i can think of.
>>>

If you don't repair the profile, you will have to delete it first.

>>> so . my question is two fold . .is there any reason an XP machine
that DID
>>> copy profiles from the network BEFORE the change wouldn't copy them now?

Yes, the SIDs have changed.

>>> logon path and logon home variables are the SAME and my 9x machines WORK
>>> fine

98 doesn't have SIDs, NT, 2k and XP do.

>>> . .i've got about 100 XP machines out there tho .  .and i NEED this to
>>> work . .or i'm going to attempt to go back to the old server.
>>>

It may be possible for you to fix this using the profiles binary in
samba3. Easiest way for you to do that is to install samba3-server and
samba3-common alpha22 (haven't gotten around to building alpha23 yet
...) from here:

http://ranger.dnsalias.com/mandrake/9.0/samba3/

These packages are made to parallel-install with Mandrake samba-2.2.x
RPMs, so they are safe to use (just check the smb3 is off with chkconfig
after installing it)

Then,  run
# profiles3

I have forgotten how to use it, but just read the --help, iy has an
option for changing SIDs.

Just ensure your existing profiles are backed up.

Buchan

- --
|--Another happy Mandrake Club member--|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dns

[Samba] SMB connection failed

2003-04-01 Thread Juan Nin
Hi,

I got the following schemma:

+---+
+---+  |   192.168.1.2  |
 |  Linux Box   | +- -+
 +---+  --  |Router  |
 | LAN| +---+
 | 192.168.1.1 |  |192.168.5.0/24|
+---+  +---+
  |   |
  |   |
+-+ +-+
| LAN   |  | LAN  |
+-+ +-+
| 192.168.1.0/24   |  | 192.168.1.0/24  |
+-+ +-+


I'm connecting via Samba from the Linux Box, to a Windows XP machine on the
192.168.1.0/24 LAN, of IP address 192.168.1.10, using the following script:

###
#!/bin/bash
IPADDR="192.168.1.10"
SERVERUNC="//Server/C$"
SERVERMNT="/mnt/server/"
USER="username"
PASS="password"

smbmount ${SERVERUNC} ${SERVERMNT} ip=${IPADDR} fmask=644 -o
username=${USER},password=${PASS} > /dev/null


It works OK...

Now, when I try to connect from the Linux box to another Windows XP machine,
that's in the 192.168.5.0/24 LAN, of IP address 192.168.5.15, using an
identical script but using that machine's information, I receive a "SMB
connection failed" error.

There are no routing problems, the Linux box can see the XP 192.168.5.15, I
can ping it. There are no forewall rules or anything that could be blocking
any type of access between both of them...

Moreover, I can connect from the XP 192.168.1.10 to the XP 192.168.5.15 and
mount it's hard drive without any problem

The Linux Box is a Debian 3.0 Woody with Kernel 2.4.18

Any ideas??

Thanks in advanced,

Juan



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Data replication/migration

2003-04-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 11 Mar 2003 [EMAIL PROTECTED] wrote:

> Hello.
> 
> Does Samba or the CIFS protocol support files replication/migration?

You might want to look at the --with-msdfs option and use rsync(8) for 
file replication.




cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
--John Cusack - "Grosse Point Blank" (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+iacpIR7qMdg1EfYRAhRPAJ0T+1rat4ZBh1xiGNUxXN/cqJrFOwCeNro8
wNP4Cz+Ouu0axCtYDZA+Dm4=
=6rZC
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] WINS on Samba

2003-04-01 Thread Uli Luckas
Am Die, 2003-04-01 um 16.29 schrieb Marco Calabi - T Plan S.r.l.:
> Dear Sirs,
> i'm trying to set up my samba server as WINS server

> in /etc/lmhosts i've defined:
Most likely you won't need a lmhosts if you have wins working properly.

> In the tcp/ip setting, under wins server, i put the samba server address 
> 192.168.1.1
Configure all servers to use this wins server EXCEPT the wins server
itself!
This is on 192.168.1.1 you have
wins support = yes
and no "wins server" entry.

On all other machines samba and NT/2k you configure
wins server = 192.168.1.1
(in smb.conf or the Windows network setup)

Regards
Uli

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] WINS on Samba

2003-04-01 Thread Marco Calabi - T Plan S.r.l.
Dear Sirs,
i'm trying to set up my samba server as WINS server
My smb.conf (global section) is:
[global]

#Parametri di configurazione Server
netbios name = LIGHTLORD
server string = Samba %v on (%L)
workgroup = T-PLAN
security = user
bind interfaces only = yes
log level = 3
log file = /var/log/samba/samba.log.%L.%m
max log size = 100
os level = 255
local master = yes
preferred master = yes
domain master = yes
domain logons = yes
encrypt passwords = yes
wins support = yes
name resolve order = lmhosts bcast
in /etc/lmhosts i've defined:
192.168.1.1 LIGHTLORD#20
192.168.1.9 myclientest#00
192.168.1.20client
In the tcp/ip setting, under wins server, i put the samba server address 
192.168.1.1

Ok, here is the problem: there's no name resolution
If i try (from a windows xp/98/ME client)
ping client
ping myclientest
there's an error: impossible to find the host. Verify if the name is right 
and try again (i don't know if it's the right english answer since i've the 
italian microsoft version so i did a translation)
I run samba with:
smbd -D
nmbd -H /etc/samba/lmhosts -D
in order to read the lmosts from another directory

Ok, i think i told everything so . please help!

Best Regards
Marco




--
Il messaggio e' riservato esclusivamente al destinatario.
Il contenuto e gli allegati sono da considerarsi di natura confidenziale.
Nel caso abbiate ricevuto il presente messaggio per errore,
siete pregati di renderlo noto al mittente e di eliminare il messaggio
dalle vostre evidenze di posta.
--
The contents of this email and any attachments are confidential.
It is intended for the named recipient(s) only.
If you have received this email in error please notify the system manager 
or  the
sender immediately and do not disclose the contents to any one or make copies.

--
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] A question

2003-04-01 Thread Joedilson B. Azevedo
Hi.
I would like to know what kind of  processor and memory RAM I need to 
run the SAMBA for 200 people.
Thank´s.

Joe

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Erwin Earley/Rochester/IBM is out of the office.

2003-04-01 Thread Erwin Earley
I will be out of the office starting  03/30/2003 and will not return until
04/14/2003.

I will be checking e-mail on a limited basis during this time and will
respond to your message/request as soon as possible.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] profiles name not same

2003-04-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 11 Mar 2003, tin tinny wrote:

> Hi, I used samba+ldap on rh8 as pdc. At w2k client,when I want to delete
> user1's profile I go to control panel -> system -> user profiles. But
> any names in this not same as account name.It appear such as
> DOMAIN\unix_group.2000 or DOMAIN\unix_user.1006. Can I config anything
> for this? Thank you.

Have you manually defined the rids for uses in LDAP ?  If so, that is 
probably the source of the problem.







cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
--John Cusack - "Grosse Point Blank" (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+iZyOIR7qMdg1EfYRAldKAKDytQQfKWPhU1wZlq+T3SUXx1NdRACgl0W+
8uT/oWNuT9+i5Ldf4wAeVhM=
=6sbK
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Difficulty with Samba 2.2.8 and native CUPS PS drivers

2003-04-01 Thread David F. Severski
Kurt,

Thanks for the detailed checklist.  It, and your help, are very much 
appreciated.

On Mon, Mar 31, 2003 at 07:49:58PM +0200, Kurt Pfeifle wrote:
> readers -- it may avoid some traffic in the future... ;-)   But I can't see
> a mention of your OS, and the source of your CUPS and Samba installations.
> Self-compiled? Vendor-provided packages? )

The OS is FreeBSD 4.8-RC (STABLE) with CUPS, Samba, and all supporting 
print packages (gimp-print, etc.) compiled from source via the FreeBSD ports 
system.  Samba was compiled with the recycle and SSL options, though neither 
of those functions are currently used in my setup.

> And your "smbd" is linked against "libcups"? Check for
> 
>"ldd `which smbd`| grep libcups"

Cups is linked, as show below:

[EMAIL PROTECTED]:~$ ldd `which smbd`
/usr/local/sbin/smbd:
libssl.so.3 => /usr/lib/libssl.so.3 (0x281bc000)
libcrypto.so.3 => /usr/lib/libcrypto.so.3 (0x281eb000)
libcups.so.2 => /usr/local/lib/libcups.so.2 (0x282e2000)
libpam.so.1 => /usr/lib/libpam.so.1 (0x282fb000)
libpopt.so.0 => /usr/local/lib/libpopt.so.0 (0x28305000)
libc.so.4 => /usr/lib/libc.so.4 (0x2830c000)

I've just completed a round of tests, with the full procedure and results 
listed below.  Since it's rather lengthy, I'll summarize here:  Using the 
CUPS PS driver, I cannot rectify the error where Windows claims the driver is 
not installed.  Also, enumprinters 3 causes a core dump in rpcclient, though 
levels 2 and below complete.

Removing the CUPS drivers from both Samba and the Windows client, then 
reinstalling the Adobe driver, allows Windows clients to connect, and print 
properly.

The procedure and results are as follows:


Troubleshooting Steps

1)  Restarted FreeBSD (FreeBSD 4.8-RC) server.
2)  Verified samba startup via /var/log/log.[smbd|nmbd] files and smbstatus 
command

On Windows XP SP1 laptop:

3)  Clicked on Canon_BJC
4)  Deleted Canon_BJC printer
5)  Right clicked to bring up server properties
6)  Removed Canon_BJC driver

On Samba server:
7)  Stopped samba
8)  Moved ntprinters.tdb, ntdrivers.tdb, printing.tdb to /var/lock/old 
subdirectory
9)  Started samba
10)  Verified startup via smbstatus
11)  Ran rpcclient -U root localhost -c "enumprinters", this showed the 
Canon_BJC printer.  This was not expected.
12)  Ran rm -rf /usr/local/samba/printers/*
13)  Ran chmod 777 /usr/local/samba/printers/
14)  Verified /usr/local/samba/printers directory was empty
15)  Stoped and restarted samba
16)  Verified startup via smbstatus
17)  Ran cupsaddsmb -v -a

-BEGIN OUTPUT-
Running command: smbclient //localhost/print\$ -N -U'root%12345' -c 'mkdir W32X86;put 
/var/spool/cups/tmp/3e88f46f27177 W32X86/Canon_BJC.ppd;put 
/usr/local/share/cups/drivers/cupsdrvr.dll W32X86/cupsdrvr.dll;put 
/usr/local/share/cups/drivers/cupsui.dll W32X86/cupsui.dll;put 
/usr/local/share/cups/drivers/cups.hlp W32X86/cups.hlp'
added interface ip=192.168.0.1 bcast=192.168.0.255 nmask=255.255.255.0
Domain=[DEADHEAVEN] OS=[Unix] Server=[Samba 2.2.8]
putting file /var/spool/cups/tmp/3e88f46f27177 as \W32X86/Canon_BJC.ppd (11776.5 kb/s) 
(average 11776.7 kb/s)
putting file /usr/local/share/cups/drivers/cupsdrvr.dll as \W32X86/cupsdrvr.dll 
(4530.9 kb/s) (average 5566.0 kb/s)
putting file /usr/local/share/cups/drivers/cupsui.dll as \W32X86/cupsui.dll (5697.0 
kb/s) (average 5611.3 kb/s)
putting file /usr/local/share/cups/drivers/cups.hlp as \W32X86/cups.hlp (926.7 kb/s) 
(average 5035.3 kb/s)

Running command: rpcclient localhost -N -U'root%12345' -c 'adddriver "Windows NT x86" 
"Canon_BJC:cupsdrvr.dll:Canon_BJC.ppd:cupsui.dll:cups.hlp:NULL:RAW:NULL"'
cmd = adddriver "Windows NT x86" 
"Canon_BJC:cupsdrvr.dll:Canon_BJC.ppd:cupsui.dll:cups.hlp:NULL:RAW:NULL"
Printer Driver Canon_BJC successfully installed.

Running command: rpcclient localhost -N -U'root%12345' -c 'setdriver Canon_BJC 
Canon_BJC'
cmd = setdriver Canon_BJC Canon_BJC
Succesfully set Canon_BJC to driver Canon_BJC.
-END OUTPUT-

18)  Verified contents of print$ share:

-BEGIN OUTPUT-
[EMAIL PROTECTED]:/var/lock# ll /usr/local/samba/printers/W32X86/2/*
-rwxr--r--  1 root  wheel  120593 Mar 31 18:07 
/usr/local/samba/printers/W32X86/2/Canon_BJC.ppd*
-rwxr--r--  1 root  wheel   14234 Mar 31 18:07 
/usr/local/samba/printers/W32X86/2/cups.hlp*
-rwxr--r--  1 root  wheel  278380 Mar 31 18:07 
/usr/local/samba/printers/W32X86/2/cupsdrvr.dll*
-rwxr--r--  1 root  wheel  215848 Mar 31 18:07 
/usr/local/samba/printers/W32X86/2/cupsui.dll*
-END OUTPUT-

19)  Verified checksums of CUPS drivers:
-BEGIN OUTPUT-
[EMAIL PROTECTED]:/var/lock# md5 /usr/local/samba/printers/W32X86/2/*
MD5 (/usr/local/samba/printers/W32X86/2/Canon_BJC.ppd) = 
485b687f0ffa89c33a40ec5c2ea71bc8
MD5 (/usr/local/samba/printers/W32X86/2/cups.hlp) = c77f774c31001c56f6d358d71dcabff1
MD5 (/usr/local/samba/printers/W32X86/2/cupsdrvr.dll) = 
f07ba9266cf9588ff759da69b0f3

Re: [Samba] Patch for relocatable installs

2003-04-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 19 Mar 2003, William R. Knox wrote:

> I remember seeing a patch here a long while back that I thought was
> going to be committed for making the install relocatable (i.e. allowing
> for a DESTDIR to be specified during a "make install"). I can't find it,
> and I'm not sure I am remembering correctly, anyway, so here is a shot
> at it. Tested both the install and uninstall, run as "make install
> DESTDIR=/new/top/level". I find the ability to do this invaluable for
> creating packages, so would love to see it in any new versions (I didn't
> check HEAD - maybe it's already there, so this would only apply to users
> of 2.2.X). Have fun with it. Any bugs, while my fault, are not my
> problem. ;-)

This is already in HEAD/SAMBA_3_0.  I'll add it to SAMBA_2_2 (although
I'm not sure when/if we will release another 2.2.x).



cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
--John Cusack - "Grosse Point Blank" (1997)


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+iZN3IR7qMdg1EfYRAiOaAKDyuKQ3iS14vqsIAOD6HzYYvue+MACgsBzn
P26RHVMVml8gC9a3s5RzK/4=
=I7qY
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] migrating from Samba 2.0 to Samba 2.2 (AIX)

2003-04-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 19 Mar 2003, Pierre Volcke wrote:

> [2003/03/19 16:42:56, 10] lib/username.c:user_in_list(456)
>   user_in_list: checking user nobody in list
> [2003/03/19 16:42:56, 4] printing/nt_printing.c:nt_printing_getsec(3848)
>   using default secdesc for hp5000n
> [2003/03/19 16:42:56, 10] smbd/uid.c:lookup_name(457)
>   lookup_name: winbind lookup for root failed - trying local
> [2003/03/19 16:42:56, 10] smbd/uid.c:lookup_name(489)
>   lookup_name: (local) root -> SID
> S-1-5-21-2110550684-2792681551-4169345231-1000 (type 1)
> [2003/03/19 16:42:56, 4]
> printing/nt_printing.c:construct_default_printer_sdb(3822)
>   construct_default_printer_sdb: size = 148.
> [2003/03/19 16:42:56, 0] lib/fault.c:fault_report(38)
>   ===
> [2003/03/19 16:42:56, 0] lib/fault.c:fault_report(39)
>   INTERNAL ERROR: Signal 11 in pid 42852 (2.2.8)
>   Please read the file BUGS.txt in the distribution
> [2003/03/19 16:42:56, 0] lib/fault.c:fault_report(41)
>   ===
> [2003/03/19 16:42:56, 0] lib/util.c:smb_panic(1094)
>   PANIC: internal error

Can you get a backtrace of this?  See the "panic action" smb.conf 
parameter in the man page.  I don't see anything obvious that could
cause a segfault.  




cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
--John Cusack - "Grosse Point Blank" (1997)


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+iZNyIR7qMdg1EfYRAmRVAJ4nwd8w7O2r5FXCDMOoxsDyqqm65QCgsxb5
OZY/eooXbj7Funq03rKDcmg=
=X8SN
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba 2.2.7 disconnect problems on solaris 2.8

2003-04-01 Thread Leeflang.Marco
we installed samba 2.2.7 on a solaris 2.8 box.
at random time, connections are dropped and shares are not available for
short times.
errors in log.smbd :

[2003/04/01 06:05:39, 0] lib/util_sock.c:(436)
  read_data: read failure for 4. Error = Connection reset by peer
[2003/04/01 06:12:15, 0] lib/util_sock.c:(436)
  read_data: read failure for 4. Error = Connection reset by peer
[2003/04/01 06:14:29, 0] lib/util_sock.c:(436)
  read_data: read failure for 4. Error = Connection reset by peer 


is this a known problem??

kind regards,

marco leeflang
siemens netherlands
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] LDAP base samba group

2003-04-01 Thread Alex Murphy
How do you do !!!
  Prompt please, possible use reception to information on group from LDAP 
directory? That is to say without use the utility smbgroupedit (Samba 3.22a), 
simple accompaniment in LDAP name of the group ? 
The Respect, Aleksey.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] VFS module programming

2003-04-01 Thread Jelmer Vernooij
On Tue, Apr 01, 2003 at 09:25:15AM +0200, Joachim Förster wrote about '[Samba] VFS 
module programming':
> I'm interested in VFS module programming. So I took the examples 
> (doc/examples/VFS) and compiled them. Then I added a "vfs object" line to my 
> smb.conf. I took the audit.so example.

> Result: It does not work! I can't access the share. I enabled logging and 
> found out that there is an error message, which says that samba could not 
> load the VFS module, because there is something like an unresolved symbol 
> called "default_vfs_ops".
> default_vfs_ops is declared as "extern" in audit.c. And I found the "real" 
> decleration of "default_vfs_ops" in the samba source files. So what?

> Why isn't it found by the loader? It IS there! What's wrong?
What version of samba is this with ? I don't have any problems in
3.0/HEAD

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://nl.linux.org/~jelmer/
 12:40:03 up 2 days, 20:57, 14 users,  load average: 0.04, 0.12, 0.13


pgp0.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Does "active directory" support include policy support

2003-04-01 Thread Lasse Riis
>The workaround that I am using to solve this problem is done on each
>client but it works.  I built the group policy settings I wanted on one
>of the machines which is stored on the client machines under
>\System32\GroupPolicy.  I made a copy of that directory and
>then copy it onto the client machines that need the group policy
>settings at build time.  A bit of a kludge, but it works like a charm.
>
>Nathan
Well making policies with gpedit.msc on the clients seem to enforce them 
for all users. I would like a setup where the strict policy is only 
applied for certain (one) users, so that admins still have complete 
control. Do I need a DC(Samba, Kerberos, LDAP, the works) for that

Lasse

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba - Windows XP permissions issue

2003-04-01 Thread Sally Walters Thomas
: I have an XP client running office XP. This is sitting on an network along
with an IBM RS6000. The RS6000 has SAMBA installed and configured so that
the XP client can see the RS6000 as though it is a network device. The user
opens a template in Word 2002 which creates a mailmerge document using VBA.
The VBA code gets the name of the document and the location for both the
document and the data from a control item which it reads in. The document
itself is stored on the RS6000 in one directory and the data file is stored
in a seperate directory on the RS6000. The document is created and saved
without any problems. When it comes to editing the mail merge document we
get an error message which says " is a mail merge main document.
Word cannot find its data source". I then click on "OK" and try to find the
data file. When I find the data file and click on it and open it we go back
to the box asking for me to locate the data source. If I try this on my own
machine running Windows '98 and Office XP the problem does not occur. If I
open a document which has been created on the first machine I still need to
locate the data source but when I select it the data source is attached and
I can carry on with the editing of the document. If I open a document
created on my machine on the first machine then again there isn't a problem.

Can you tell me if there is an issue with Samba and Windows XP regarding
File and Directory access permissions.

Sally

Sally Walters-Thomas
Systems Development Consultant
ADP Dealer Services (UK) Ltd
email:[EMAIL PROTECTED]
Tel: 0870 2255 237
Fax: 01709 835547




intY has scanned this email for all known viruses (www.inty.com)

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] XP Machines/profiles/migration issues

2003-04-01 Thread richard
I'm no expert on Xp profiles but..doesen't xp assign a sid to each user
in the profile. I believe you'll have to create your new domain-user on
new server THEN copy old profile over newly created one (using xp user
tools). There have posts on how to do this earlier this year. regards,
Richard Coates.

On Tue, 2003-04-01 at 04:11, Anthony Hardy wrote:
> well . would help if i didn't hit the send key before pasting in the
> original msg . once again . my apologies
> 
> btw . helpful info:
> 
> mandrake rpms at 2.2.7a, mandrake 9.0 . .all patches applied.
> 
> I just sent this . but realized i sent it from the wrong email addy . want
> to make sure it gets thru to the list . so i'm resending . i apologize if
> both copies make it thru.
> 
> problem:
> 
> 
> migrating from one server to another .  . .physical and software migration.
> copied all profiles and am in the process of adding a new automated system
> for domain management (mysql backend, blah balh) so the uid's changed for
> each user.
> 
> this is what how i THOUGHT things would work:
> 
> 1. everyone logs out
> 2. shutdown samba on old server
> 3. add new users to new server
> 4. transfer ALL data to new server, including profiles, setup permissions on
> files to correspond with new uids
> 5. finish config of smb.conf on new server, adding the proper shares, etc .
> basically a mirror of the old box.
> 6. start up new server . . .login 9x machines for testing.
> 7. rejoin all XP machines to the domain, and i should have been good to go.
> 
> the problem lies in that once i rejoin an XP machine (testing with a couple
> right now) is that the profiles don't load properly.  the user logs in,
> everything "seems" to be ok . in that the desktop icons are present, custom
> apps seem to work . .but pieces are broken.
> 
> for example . . .OE or outlook . broken.  it's like the ntuser.dat file
> doesn't get pulled .. .
> 
> i noticed that under documents and settings on the local machines HD the
> owner wasn't correct for the correct profile directory (normally, just the
> user name) and upon logging in . there was a new profile directory created,
> username.domain.  That "should" have been fine i thought . .as long as  the
> profile was copied from the network . but it's NOT being copied .   . . .so
> i tried different machines . and various tests . from rejoining the domain
> and changing permission BEFORE logging in as the user to  . .well .
> everything i can think of.
> 
> so . my question is two fold . .is there any reason an XP machine that DID
> copy profiles from the network BEFORE the change wouldn't copy them now?
> logon path and logon home variables are the SAME and my 9x machines WORK
> fine . .i've got about 100 XP machines out there tho .  .and i NEED this to
> work . .or i'm going to attempt to go back to the old server.
> 
> last question . what is the "proper" profile directory . . username or
> username.domain and what is the presence of these two directories telling me
> . if anything?
> 
> any help is appreciated GREATLY.
> 
> Anthony Hardy
> Director of MIS
> Jefferson Davis Community College
> AIM: trist1066
> Yahoo: trist1066
> MSN: [EMAIL PROTECTED]
> icq 1221725
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] RAS support

2003-04-01 Thread stephane . purnelle
Hi!

We have some server connected to domain with RAS support.
When the client connect to the server, the server respond that the user
have no right to make dialin.

How to setup samba or samba for autorize the dialin for the user.

RAS support is used for distant intervention.


---
Stéphane PURNELLE [EMAIL PROTECTED]
Service Informatique   Corman S.A.   Tel : 00 32 087/342467

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Write to NT Share from Unix, possible ?

2003-04-01 Thread Darren S. Eyers
Hi All,

we have been using OMNI-NFS software to share a PC share out to a Unix bos.
The Unix box places files on the PC, but the OMNI-NFS software keeps
crashing and occasionally will not restart at all even after rebooting the
machine and performing ChkDsk/Scandisks.

We would like to replace this with something else, anybody know if Samba can
help here?

Any help even small would be most appreciated!

Thanks
Darren
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] How to configure smb.conf file

2003-04-01 Thread Olivier Studer
Hello,

I would like to make an authentification with my IPlanet server (UNIX) to mount a home 
directory UNIX on PC with Samba 2.2.7a. But I have a problem to configure the 
different parameter ldap in smb.conf file. My server samba is an UNIX machine and the 
user's home is on an UNIX machine.

Thanks
/Olivier
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba