[Samba] Samba Migration Question

[Bruce P. Morin]

Hello,

I have a RedHat 7.3 Server running as a Samba PDC for a Windows Network.
We want to migrate that box to RedHat 9.0. Our plan is to format the
drive and do a fresh install.

Of course we will back up the system, but I want to make sure that when
our users log back on to the system nothing is lost.

The question is, if we restore the /etc/samba directory, plus all the
user data and the user/password files will this achieve this result or
are we missing something?

TIA, 
_
Bruce P. Morin 
SafePoint E-Technology Group, LLC.

phone: +1 860 410 0790 
email: [EMAIL PROTECTED]
web: http://www.safepointetech.com
_


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Samba+CUPS+Driver autodownload

[Matt Dainty]

Hi,

The version of CUPS and cupsaddsmb is currently 1.1.18, (due to be
upgraded to 1.1.19 soon-ish).

Here's the output of running "cupsaddsmb -v ...":

# /usr/sbin/cupsaddsmb -v -U root oki7200
Password for root required to access localhost via SAMBA: 
Running command: smbclient //localhost/print\$ -N -U'root%secret' -c 'mkdir W32X86;put 
/var/spool/cups/tmp/3ed6034d677c4 W32X86/oki7200.PPD;put 
/usr/share/cups/drivers/ADOBEPS5.DLL W32X86/ADOBEPS5.DLL;put 
/usr/share/cups/drivers/ADOBEPSU.DLL W32X86/ADOBEPSU.DLL;put 
/usr/share/cups/drivers/ADOBEPSU.HLP W32X86/ADOBEPSU.HLP'
added interface ip=192.168.50.129 bcast=192.168.50.255 nmask=255.255.255.128
added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
Domain=[XREFER] OS=[Unix] Server=[Samba 2.2.9pre1]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
putting file /var/spool/cups/tmp/3ed6034d677c4 as \W32X86/oki7200.PPD (16523.1 kb/s) 
(average 16523.4 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS5.DLL as \W32X86/ADOBEPS5.DLL (23519.6 
kb/s) (average 22062.2 kb/s)
putting file /usr/share/cups/drivers/ADOBEPSU.DLL as \W32X86/ADOBEPSU.DLL (22083.0 
kb/s) (average 22066.4 kb/s)
putting file /usr/share/cups/drivers/ADOBEPSU.HLP as \W32X86/ADOBEPSU.HLP (18016.8 
kb/s) (average 21935.8 kb/s)

Running command: rpcclient localhost -N -U'root%secret' -c 'adddriver "Windows NT x86" 
"oki7200:ADOBEPS5.DLL:oki7200.PPD:ADOBEPSU.DLL:ADOBEPSU.HLP:NULL:RAW:NULL"'
cmd = adddriver "Windows NT x86" 
"oki7200:ADOBEPS5.DLL:oki7200.PPD:ADOBEPSU.DLL:ADOBEPSU.HLP:NULL:RAW:NULL"
result was NT_STATUS_UNSUCCESSFUL

Running command: smbclient //localhost/print\$ -N -U'root%secret' -c 'mkdir WIN40;put 
/var/spool/cups/tmp/3ed6034d677c4 WIN40/oki7200.PPD;put 
/usr/share/cups/drivers/ADFONTS.MFM WIN40/ADFONTS.MFM;put 
/usr/share/cups/drivers/ADOBEPS4.DRV WIN40/ADOBEPS4.DRV;put 
/usr/share/cups/drivers/ADOBEPS4.HLP WIN40/ADOBEPS4.HLP;put 
/usr/share/cups/drivers/DEFPRTR2.PPD WIN40/DEFPRTR2.PPD;put 
/usr/share/cups/drivers/ICONLIB.DLL WIN40/ICONLIB.DLL;put 
/usr/share/cups/drivers/PSMON.DLL WIN40/PSMON.DLL;'
added interface ip=192.168.50.129 bcast=192.168.50.255 nmask=255.255.255.128
added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
Domain=[XREFER] OS=[Unix] Server=[Samba 2.2.9pre1]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \WIN40
putting file /var/spool/cups/tmp/3ed6034d677c4 as \WIN40/oki7200.PPD (20653.8 kb/s) 
(average 20654.3 kb/s)
putting file /usr/share/cups/drivers/ADFONTS.MFM as \WIN40/ADFONTS.MFM (23420.0 kb/s) 
(average 23025.0 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.DRV as \WIN40/ADOBEPS4.DRV (23434.6 
kb/s) (average 23294.7 kb/s)
putting file /usr/share/cups/drivers/ADOBEPS4.HLP as \WIN40/ADOBEPS4.HLP (23981.6 
kb/s) (average 23355.8 kb/s)
putting file /usr/share/cups/drivers/DEFPRTR2.PPD as \WIN40/DEFPRTR2.PPD (13174.5 
kb/s) (average 23244.0 kb/s)
putting file /usr/share/cups/drivers/ICONLIB.DLL as \WIN40/ICONLIB.DLL (23071.4 kb/s) 
(average 23235.0 kb/s)
putting file /usr/share/cups/drivers/PSMON.DLL as \WIN40/PSMON.DLL (18666.1 kb/s) 
(average 23096.6 kb/s)

Running command: rpcclient localhost -N -U'root%secret' -c 'adddriver "Windows 4.0" 
"oki7200:ADOBEPS4.DRV:oki7200.PPD:NULL:ADOBEPS4.HLP:PSMON.DLL:RAW:ADOBEPS4.DRV,oki7200.PPD,ADOBEPS4.HLP,PSMON.DLL,ADFONTS.MFM,DEFPRTR2.PPD,ICONLIB.DLL"'
cmd = adddriver "Windows 4.0" 
"oki7200:ADOBEPS4.DRV:oki7200.PPD:NULL:ADOBEPS4.HLP:PSMON.DLL:RAW:ADOBEPS4.DRV,oki7200.PPD,ADOBEPS4.HLP,PSMON.DLL,ADFONTS.MFM,DEFPRTR2.PPD,ICONLIB.DLL"
result was NT_STATUS_UNSUCCESSFUL

Running command: rpcclient localhost -N -U'root%secret' -c 'setdriver oki7200 oki7200'
cmd = setdriver oki7200 oki7200
Succesfully set oki7200 to driver oki7200.

I've also tried running the enum{printers,drivers} commands.
"enumprinters [12]" both give output, but "enumprinters 3" gives me the
same NT_STATUS_UNSUCCESSFUL. "enumdrivers [123]" runs without an error
message, but displays nothing apart from the "cmd = ...".

Cheers

Matt
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] FW: THE [PRINT$] SHARE

[Kevin Smith]

Is this an exclusively NT/XP/2K share or will it work with windows 9x as
well?

Kev

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Folder redirection on samba

[Murali krishnan Ganapathy]

Two ways to do it. One is on a per user basis, and the other is through
policies.

First: Per User
---
   All that needs to be done is to change one registry key, in HKCU.
All other methods essentially do this for you and give you a cleaner 
interface. I cant remember the registry key to change off the top of
my head, but if you want I can find it for you.

Second: Policies

   I know this can surely be done with Group Policies in Win2K/XP. But 
SAMBA does not support Active Directory Objects yet (needs to serve them
up).
But NT4 sytle system policies are supported by samba. It just involves
placing
a NTConfig.pol file in the netlogon share. But I dont know if NT4 System
policies
allow folder redirection.

The way I am planning to use (still experimenting with it), is to use
method one
(Still dont have a way to generate a NTConfig.pol file, since I only
have a Win2K 
Advanced Server CD and not a NT4 server CD). Basically, we allow the
users to create
a .windowsrc file in their home directory which is in INI format. Then
during logon,
as part of the logon script, this file is read, parsed and settings
specified there
are implemented. Settings include folder redirection and mounting
network shares, and
hope to add more features eventually.

The only problem I have is that: In my case, I want the My Documents
redirected to a
network share (usually their home directory). The redirection works
fine. Windows realises 
the redirection is in effect and does not download MyDocuments from the
profiles directory.
But in order to improve network performance (or whatever), it is trying
to cache the MyDocuments
locally. Since user home directories are typically huge (100MB), it is
downloading the entire 
MyDocuments folder, which is a bad thing.

I still need to figure out, how to tell windows programmatically, not to
cache MyDocuments. So 
any changes they make is written to the network share immediately. Even
if it means loosing 
MyDocuments when there is a network outage.

Hope this helps.

- Murali

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Thursday, May 29, 2003 3:35 AM
To: [EMAIL PROTECTED]
Subject: [Samba] Folder redirection on samba


hi,
how can i set up the folder "my documents" on clients desktop on my
samba
 pdc?
thanks
andrea


__
Tiscali ADSL  a 1 euro al giorno, traffico incluso!e in piu' telefoni
gratis. Abbonati entro il 31 maggio, l'attivazione e' gratuita.
http://point.tiscali.it/adsl/index.shtml



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: share persistence problem

[Paul Trepanier]

/It's looks like the resolution to this problem is setting the deadtime 
global option to 0 (at the cost of resources).  Although it defaults to 
5 (minutes), a stale connection is actually tossed under 1.  I will 
continue to experiment with this and contribute further should 
information of value is obtained.

Paul
/
Paul Trepanier wrote:
After awhile, my connections from my PC to my samba server end up with a 
red "X" in them (share disappeared) if I leave my explorer window open. 
 If I click on these, they "wake up" and continue to function (and 
the red X's go away).  If I close my explorer window (while the red X's 
are there) and reopen it , they are gone.  An attempt to reestablish 
these  dropped connections is immediately successful.

This is obviously a connection persistence issue and I've tried setting 
both keepalive= and SO_KEEPALIVE (individually, of course) to no avail.

Any ideas?

My installation is samba 2.2.8 running as a daemon (not inetd) on
Solaris 8 configured to use a WINS server and provide authentication via
a PDC (same host as WINS server).  I do have an lmhosts file in the
samba /lib directory with the PDC/WINS server address in it.
My globals section;

[global]
workgroup = WORKGROUP
netbios name = SAMBASERVER
security = SERVER
encrypt passwords = Yes
password server = pdc
lanman auth = No
log level = 2
log file = /usr/local/depot/samba-2.2.8/var/%m.log
deadtime = 5
max smbd processes = 5
socket options = IPTOS_LOWDELAY TCP_NODELAY SO_KEEPALIVE
load printers = No
show add printer wizard = No
preferred master = No
local master = No
domain master = No
wins server = [IP address of WINS/PDC server]
follow symlinks = No



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba+CUPS+Driver autodownload

[Kurt Pfeifle]

Matt Dainty wrote on Samba-Digest


I'm trying to get Samba to offer the Adobe driver automatically for the
two printers I have set up with CUPS.
I have all of the necessary files plucked out of the Adobe Postscript
Windows driver package, but I'm hitting the problem when I come to run
"cupsaddsmb -v ..." that the "rpcclient adddrivers" command always fails
with NT_STATUS_UNSUCCESSFUL.
Which version of CUPS/cupsaddsmb are you running?

Have you seen the docu on

http://www.linuxprinting.org/kpfeifle/SambaPrintHOWTO/

about this?

The drivers are being copied to the [print$]
directories correctly, just the driver registration fails.
Before looking at the level 100 Samba log, let's first see the "-v"
cupsaddsmb output on stderr
Cheers,
Kurt
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: share persistence problem

[Paul Trepanier]

While you may be onto something, I currently disagree as the samba logs 
show the details of what's happening...

[2003/05/29 08:05:11, 2] smbd/dosmode.c:unix_mode(59)
  unix_mode(Desktop.ini) inheriting from .
[2003/05/29 08:05:11, 2] smbd/dosmode.c:unix_mode(67)
  unix_mode(Desktop.ini) inherit mode 42775
[2003/05/29 08:05:11, 2] smbd/dosmode.c:unix_mode(59)
  unix_mode(Desktop.ini) inheriting from .
[2003/05/29 08:05:11, 2] smbd/dosmode.c:unix_mode(67)
  unix_mode(Desktop.ini) inherit mode 42775
[2003/05/29 08:05:11, 1] smbd/service.c:make_connection(636)
  sambaclient(111.222.333.444) connect to service home as user 
sambauser(uid=772, gid=10772) (pid 4803)
[2003/05/29 08:05:11, 2] smbd/dosmode.c:unix_mode(59)
  unix_mode(Desktop.ini) inheriting from .
[2003/05/29 08:05:11, 2] smbd/dosmode.c:unix_mode(67)
  unix_mode(Desktop.ini) inherit mode 42775
[2003/05/29 08:05:13, 2] smbd/dosmode.c:unix_mode(59)
  unix_mode(.) inheriting from .
[2003/05/29 08:05:13, 2] smbd/dosmode.c:unix_mode(67)
  unix_mode(.) inherit mode 42775
[2003/05/29 08:06:05, 1] smbd/service.c:close_cnum(677)
  sambaclient(111.222.333.444) closed connection to service home

As you can see by the last log entry, samba blows the client off and 
closes the connection less than a minute after it was established.  All 
on it's own.

My users simply will not tolerate having to remap drives umpteen times a 
day as doing so to an actual MS windows share does not require constant 
remapping.  This behavior is unfortunately a showstopper and I would 
hate to loose the opportunity for samba to address our UNIX filesharing 
problems.

I've found slews of reports of this behavior on google, but all the 
proposed solutions appear to not provide an answer/resolution.  Nada @ 
samba.org & docs (from my perspective).

Thoughts?

John H Terpstra wrote:
On Wed, 28 May 2003, Paul Trepanier wrote:


After awhile, my connections from my PC to my samba server end up with a
red "X" in them (share disappeared) if I leave my explorer window open.
 If I click on these, they "wake up" and continue to function (and
the red X's go away).  If I close my explorer window (while the red X's
are there) and reopen it , they are gone.  An attempt to reestablish
these  dropped connections is immediately successful.
This is obviously a connection persistence issue and I've tried setting
both keepalive= and SO_KEEPALIVE (individually, of course) to no avail.
Any ideas?


Your MS Windows client is the culprit - it is dropping idle connections as
I recall. Also, you may find that there is a registry setting to turn that
feature off.
- John T.


My installation is samba 2.2.8 running as a daemon (not inetd) on
Solaris 8 configured to use a WINS server and provide authentication via
a PDC (same host as WINS server).  I do have an lmhosts file in the
samba /lib directory with the PDC/WINS server address in it.
My globals section;

[global]
workgroup = WORKGROUP
netbios name = SAMBASERVER
security = SERVER
encrypt passwords = Yes
password server = pdc
lanman auth = No
log level = 2
log file = /usr/local/depot/samba-2.2.8/var/%m.log
deadtime = 5
max smbd processes = 5
socket options = IPTOS_LOWDELAY TCP_NODELAY SO_KEEPALIVE
load printers = No
show add printer wizard = No
preferred master = No
local master = No
domain master = No
wins server = [IP address of WINS/PDC server]
follow symlinks = No






--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 3.0.a24 -- nmbd coredump when sync_browse_lists withother samba host!!!

[Andriy Galetski]

>From nmbd.log :
.
.
[2003/05/29 08:10:02, 2] nmbd/nmbd_synclists.c:sync_browse_lists(168)
  Initiating browse sync for DPMN to BETA(10.201.60.10)
[2003/05/29 08:10:03, 0] lib/iconv.c:utf8_pull(471)
  short utf8 char
[2003/05/29 08:10:03, 0] lib/charcnv.c:convert_string_allocate(248)
  Conversion error: Incomplete multibyte sequence(а)
[2003/05/29 08:10:03, 0] lib/util.c:smb_panic(1463)
  PANIC: failed to create UCS2 buffer
..

Thanks for any idea.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba+CUPS+Driver autodownload

[Matt Dainty]

Hi,

I'm trying to get Samba to offer the Adobe driver automatically for the
two printers I have set up with CUPS.

I have all of the necessary files plucked out of the Adobe Postscript
Windows driver package, but I'm hitting the problem when I come to run
"cupsaddsmb -v ..." that the "rpcclient adddrivers" command always fails
with NT_STATUS_UNSUCCESSFUL. The drivers are being copied to the [print$]
directories correctly, just the driver registration fails.

I found the posts relating to this error in 2.2.8a, so I've actually
downloaded the current CVS SAMBA_2_2 branch as of yesterday, and I'm
still getting the same problem, which I assumed would be fixed in the
source now.

I have run "rpcclient -d 100 ..." but it's quite big so if anyone would
like to see that, please let me know.

Anyone have this fixed and working?

Cheers

Matt
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Moving samba from one machine to another?

[Vizitiu, Ciprian]

Hi listers.

I have a 2.2.7 samba running on a RH8. I'd like to "move" the current samba
(with all the accounts and so) to a more powerful machine. Assuming that at
the destination I have exactly the same installed packets what files must be
copied in order to make the move as easy as possible? To me it looks like
copying /etc/samba/* and /var/cache/samba/* will do the trick. Am I missing
something?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Update: [Samba] Samba as PDC, connections from clients refused...

[Dinyar Rabady]

sorrynot username...Win2k was reffering to the machine name not beeing 
existant on the server...but i have definately added the clientname with 
'smbpasswd -a -m [clientname]$'



--- Forwarded message ---
From: Dinyar Rabady <[EMAIL PROTECTED]>
To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
Subject: [Samba] Samba as PDC, connections from clients refused...
Date: Thu, 29 May 2003 10:01:49 +0200
hi,
i have the following netowork situation:
2x Debian Linux
1x Stable with samba 2.2.3a-12.3 for Debian as PDC
2x Unstable with samba 2.999+3.0.alpha24-3for Debian as Client
2x Windows
1x Win2k also as Client
1x WinXP Client
now i have the following problem:
If i try to logon as a samba-enabled linux user on the domain with the 
Win2k server i get the message that the user doesn't exist on the server 
or that the passowrt is wrong.
I tryed loggin on with smbclient from the unstable client but it also 
doesn't seem to recognize the user.

Any ideas on how to fix it?

regards,
Dinyar Rabady
PS: here is my smb.conf:

[global]

netbios name = server-debian
workgroup = Rabady
encrypt passwords = yes
domain master  = yes
local master = yes
preferred master = yes
os level = 255
wins support= yes

security = user
domain logons = yes
logon path = \\&L\profiles\%u\%m
logon script = logon.bat
logon drive = H:

logon home = \\/%L\%u\.win_profile\%m

time server = yes

domain admin group = root dinyar

add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M 
%u

[netlogon]
path = /usr/local/samba/lib/netlogon
writable = no
browsable = no
[profiles]
path = /home/samba-ntprof
writable = yes
create mask = 0600
directory mask = 0700
browsable = no
[homes]
comment = Home Directory
browsable = no
read only = no
guest ok = no
map archive = yes


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Folder redirection on samba

[vecvac]

hi,
how can i set up the folder "my documents" on clients desktop on my samba
 pdc?
thanks
andrea


__
Tiscali ADSL  a 1 euro al giorno, traffico incluso!e in piu' telefoni
gratis. Abbonati entro il 31 maggio, l'attivazione e' gratuita.
http://point.tiscali.it/adsl/index.shtml



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba as PDC, connections from clients refused...

[Dinyar Rabady]

hi,
i have the following netowork situation:
2x Debian Linux
1x Stable with samba 2.2.3a-12.3 for Debian as PDC
2x Unstable with samba 2.999+3.0.alpha24-3for Debian as Client
2x Windows
1x Win2k also as Client
1x WinXP Client
now i have the following problem:
If i try to logon as a samba-enabled linux user on the domain with the 
Win2k server i get the message that the user doesn't exist on the server or 
that the passowrt is wrong.
I tryed loggin on with smbclient from the unstable client but it also 
doesn't seem to recognize the user.

Any ideas on how to fix it?

regards,
Dinyar Rabady
PS: here is my smb.conf:

[global]

netbios name = server-debian
workgroup = Rabady
encrypt passwords = yes
domain master  = yes
local master = yes
preferred master = yes
os level = 255
wins support= yes

security = user
domain logons = yes
logon path = \\&L\profiles\%u\%m
logon script = logon.bat
logon drive = H:

logon home = \\/%L\%u\.win_profile\%m

time server = yes

domain admin group = root dinyar

add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u

[netlogon]
path = /usr/local/samba/lib/netlogon
writable = no
browsable = no
[profiles]
path = /home/samba-ntprof
writable = yes
create mask = 0600
directory mask = 0700
browsable = no
[homes]
comment = Home Directory
browsable = no
read only = no
guest ok = no
map archive = yes
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Problem with printing in samba server

[gertian . brataj]

Hai,
thankyou for the solution.It seems work fine now.
I edit the file /etc/lprng/lpd.perms with option DEFAULT ACCEPT
I have create a new file "hosts"under /etc.

file /etc/hosts:

127.0.0.1 localhost
192.168.1.X  octest octest.riedmann.it

I don't receive the message now ( get_local_host ´myhostname´ bad ) ,
and the window printing status is working fine.

Gertian
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Making winbindd and pam_mount play nice together (2nd try)

[jim feldman]

We're trying to set up linux based workstations that use a win2k AD/DC for 
authentication, and pam_mount to mount a share as the user's home directory. 
It looks like winbind isn't passing on the credentials (although it is 
getting us logged in).  If anyone has made this work, I'd love the details.  
It looks like winbind isn't passing the auth information 

thanks
jim feldman 

RH 7.3/samba 2.2.7a/pam_mount 0.90 

Red Hat Linux release 7.3 (Valhalla)
Kernel 2.4.18-27.7.x on an i586
login: oterostaff1
Password:
pam_mount: adding to command: /usr/sbin/lsof lsof
pam_mount: reading options_require...
pam_mount: options: nosuid nodev
pam_mount: adding to command: /bin/mount mount -t smbfs
pam_mount: adding to command: /bin/umount umount
pam_mount: adding to command: /bin/mount mount -p0
pam_mount: checking sanity of volume record
pam_mount: back from global readconfig
pam_mount:  does not exist or is not owned by user
pam_mount: expand_wildcard for &
pam_mount: expand_wildcard for oterostaff1
pam_mount: expand_wildcard for /home/winnt/&
pam_mount: expand_wildcard for /home/winnt/oterostaff1
pam_mount: expand_wildcard for uid=&,gid=&,dmask=0750,workgroup=MAIN
pam_mount: expand_wildcard for 
uid=oterostaff1,gid=&,dmask=0750,workgroup=MAIN
pam_mount: expand_wildcard for 
uid=oterostaff1,gid=oterostaff1,dmask=0750,workgroup=MAIN
pam_mount: real and effective user ID are 0 and 0.
pam_mount: about to perform mount operations
pam_mount: information for mount:
pam_mount: 
pam_mount: (defined by globalconf)
pam_mount: user:  oterostaff1
pam_mount: server:mainad1
pam_mount: volume:oterostaff1
pam_mount: mountpoint:/home/winnt/oterostaff1
pam_mount: options:   
uid=oterostaff1,gid=oterostaff1,dmask=0750,workgroup=MAIN
pam_mount: fs_key_cipher:
pam_mount: fs_key_path:
pam_mount: mount command:  /bin/mount
mount
-t
smbfs 

pam_mount: 
pam_mount: checking to see if //mainad1/oterostaff1 is already mounted
pam_mount: checking for encrypted filesystem key configuration
pam_mount: about to start building mount command
pam_mount: mount type is SMBMOUNT
pam_mount: waiting for homedir mount
pam_mount: arg is: /bin/mount
pam_mount: arg is: mount
pam_mount: arg is: -t
pam_mount: arg is: smbfs
pam_mount: arg is: //mainad1/oterostaff1
pam_mount: arg is: /home/winnt/oterostaff1
pam_mount: arg is: -o
pam_mount: arg is: 
username=oterostaff1,uid=oterostaff1,gid=oterostaff1,dmask=0750,workgroup=MA 
IN
Error reading password from file descriptor 0: empty password 

Last login: Wed May 28 19:52:17 from localhost 

messages says that winbindd looks happy 

May 28 22:11:31 localhost pam_winbind[1827]: user 'oterostaff1' granted 
acces
May 28 22:11:31 localhost pam_winbind[1827]: user 'oterostaff1' granted 
acces
May 28 22:11:31 localhost login(pam_unix)[1827]: session opened for user 
oterostaff1 by (uid=0) 

The pam file for login looks like:
#%PAM-1.0
auth   required /lib/security/pam_securetty.so
auth   sufficient   /lib/security/pam_winbind.so
auth   sufficient   /lib/security/pam_unix.so use_first_pass
auth   required /lib/security/pam_stack.so service=system-auth
auth   required /lib/security/pam_nologin.so
accountsufficient   /lib/security/pam_winbind.so
accountrequired /lib/security/pam_stack.so service=system-auth
password   required /lib/security/pam_stack.so service=system-auth
sessionrequired /lib/security/pam_stack.so service=system-auth
sessionoptional /lib/security/pam_console.so
session   required  /usr/lib/security/pam_mount.so use_first_pass
auth  required  /usr/lib/security/pam_mount.so use_first_pass 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba/Winbind/PAM

[John Simovic]

Hi there. I have Samba 2.28 configured. wbinof returns all users and groups in the 
domain. I can getent passwd and everything works fine. But I cannot login using RH 9. 
My /etc/pam.d/login file is
authrequired /lib/security/pam_securetty.so
authrequired /lib/security/pam_nologin.so
authsufficient   /lib/security/pam_winbind.so
authrequired /lib/security/pam_pwdb.so use_first_pass shadow nullok
account required /lib/security/pam_winbind.so
#accountrequired /lib/security/pam_stack.so service=system-auth
passwordrequired /lib/security/pam_stack.so service=system-auth
session required /lib/security/pam_stack.so service=system-auth
session required /lib/security/pam_console.so

Is there anything I am missing here or do I have to edit other pam files as well? 
Regards.

**
This message is intended for the addressee named and may contain
privileged information or confidential information or both. If you
are not the intended recipient please delete it and notify the sender.
**
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] "lprm command" problem

[Joel Hammer]

They say you should not have any print commands defined in smb.conf when
you are using cups.

Joel

On Wed, May 28, 2003 at 04:45:13PM +0200, Manuel Arenaz wrote:
> Hello, 
> 
> I have successfully installed samba  2.2.8 
> (with CUPS) as a windows printing server using the 
> print$ share. The W2000 clients are able to send 
> jobs to a printer and view the corresponding 
> printer queue.
> 
> However, when I try to delete a job from the 
> windows client, I get the error "bad command".
> My printers share in smb.conf is:
> 
> [printers]
>   comment = All Printers
>   path = /tmp
>   create mask = 0700
>   browseable = yes
>   guest ok = yes
>   writable = no
>   printable = yes
>   print command = /usr/bin/lp -d %p -o raw %s
>   lpq command = /usr/bin/lpstat -o %p
>   lprm command = /usr/bin/cancel %p-%j
> 
> The command "/usr/bin/cancel" works fine in the 
> linux server. May the error be due to bad 
> replacement of the "%p-%j" string?
> 
> Any help would be appreciated.
> 
> Thanks in advance,
> 
>Manuel Arenaz
> 
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problem with samba printer under Win2k

[Joel Hammer]

I am confused,now.

In your first post it seemed you were printing. Can you not print at all?

>From which machine is the printing failing? 

There is no printing command given in your global section.

You have spool misspelled in your printer share.

Doesn't removing all those comments make this file easier to read?

Joel

On Wed, May 28, 2003 at 05:14:30PM +0200, [EMAIL PROTECTED] wrote:
> On 28 May 2003 at 7:41, Joel Hammer wrote:
> 
> > With lprng, you need to edit the file:
> > /etc/lpd.perms
> > Here is all I have in mine:
> > DEFAULT ACCEPT
> > Joel
> > 
> Hai,
> I try to make the changes, but it seems to have another problem, don't work at all.
> I recive this message when I try to print or to see the printer status with lpstat: 
> get_local_host ´myhostname´ bad 
> 
> 
> > On Wed, May 28, 2003 at 09:50:11AM +0200, [EMAIL PROTECTED] wrote:
> > > I´m running Debian Linux 3.0 r1 with Samba 2.2.8a and I have got printing 
> > > problems:
> > > --- when I print something the job don't appear in the window printing status, 
> > > so I 
> > > have no way to check the actual status of the job, or to delete the job from 
> > > window 
> > > printer status in Win2K.
> > > here is configurations file of smb.conf:
> > > [global]
> > >workgroup = Gertian
> > >log level = 99
> > >queuepause command = /usr/bin/lpc stop %p
> > >queueresume command = /usr/bin/lpc start %p
> > >lppause command = lp -I %p-%j -H hold
> > >lpresume command = lp -I %p-%j -H
> > >lprm command = /usr/bin/cancel %p-%j
> > >lpq command = /usr/bin/lpq -P%p -l   
> > >printing = lprng
> > >server string = %h server (Samba %v)
> > >load printers = yes
> > >printcap name = /etc/printcap
> > >printer admin = gertian wolfgang
> > >hosts allow = 192.168.1.111
> > >invalid users = root
> > >log file = /var/log/samba/log.%m
> > >max log size = 1000
> > >syslog = 0
> > >encrypt passwords = true
> > >socket options = TCP_NODELAY
> > >dns proxy = no
> > >passwd program = /usr/bin/passwd %u
> > >passwd chat = *Enter\snew\sUNIX\spassword:* %n\n 
> > > *Retype\snew\sUNIX\spassword:* %n\n .
> > >obey pam restrictions = yes
> > > [homes]
> > >comment = Home Directories
> > >browseable = no
> > >writable = no
> > >create mask = 0700
> > >directory mask = 0700
> > > [sharing]
> > >comment = docs sharing
> > >path = /usr/local/src
> > >browseable = yes
> > >writable = yes
> > >directory mask = 0777
> > >guest account = nobody
> > >guest only = true  
> > > [printers]
> > >comment = All printer
> > >browseable = yes 
> > >path = /var/spoll/lpd/lp
> > >printable = yes
> > >public = yes 
> > >create mode = 0700
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Accessing printer from outside the domain

[lloyd]

We need to give a user in another domain access to our printer:

our domain: OURDOM  (samba)

other domain: OTHERDOM (AD?)

user's workstation: \\OTHERDOM\WKSTN, in other domain

printer: in our domain

user: JOEBLOW - an account in each domain with the same login/password

We're getting this error in wkstn.log:

[2003/05/28 20:44:20, 1] smbd/password.c:server_validate(1101)
  password server  is not connected
[2003/05/28 20:44:20, 1] smbd/password.c:pass_check_smb(545)
  Couldn't find user 'joeblow' in passdb.
[2003/05/28 20:44:20, 2] smbd/reply.c:reply_sesssetup_and_X(975)
  NT Password did not match for user 'joeblow'!
[2003/05/28 20:44:20, 2] smbd/reply.c:reply_sesssetup_and_X(985)
  Defaulting to Lanman password for joeblow
[2003/05/28 20:44:20, 1] smbd/password.c:pass_check_smb(545)
  Couldn't find user 'joeblow' in passdb.
[2003/05/28 20:44:20, 1] smbd/reply.c:reply_sesssetup_and_X(1001)
  Rejecting user 'joeblow': authentication failed
[2003/05/28 20:44:20, 3] smbd/error.c:error_packet(94)
  error string = No such file or directory
[2003/05/28 20:44:20, 3] smbd/error.c:error_packet(113)
  error packet at smbd/reply.c(1003) cmd=115 (SMBsesssetupX) 
NT_STATUS_LOGON_FAILURE



Our password server (samba pdc) is ourdc.ourorg.org and has smbpasswd 
accounts on it.  The print server has no user accounts on it, smbpasswd 
or passwd.

The guest account "sambaguest" exists in smbpasswd and passwd both on 
the print server and password server, with the same password in all files.

this smb.conf is from the print server:

[global]
   debuglevel = 3
   workgroup = OURDOMAIN
   server string = samba print server
   printcap name = /etc/printcap
   load printers = yes
   printing = cups
   guest account = sambaguest
   log file = /var/log/samba/%m.log
   max log size = 0
   security = server
   password server = ourdc.ourorg.org
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd
   unix password sync = Yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *New*password* %n\n *Retype*new*password* %n\n
  *passwd:*all*authentication*tokens*updated*successfully*
   pam password change = yes
   obey pam restrictions = yes
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   domain master = no
   preferred master = no
   wins server = 123.123.123.123
   dns proxy = no
[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
   public = yes
   guest ok = yes
   writable = no
   printable = yes
Any suggestions appreciated.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba + LDAP problem

[Gabriel Maffia]

Hi:

I'm trying to integrate Samba and LDAP (Samba working as a PDC). While
trying to add a computer to the domain, this is what I get (This is not a
production server, so there is no problem with password revealing):

[2003/05/28 18:59:00, 2] passdb/pdb_ldap.c:get_single_attribute(435)
  get_single_attribute: [userWorkstations] = []
[2003/05/28 18:59:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [rid] = [3000]
[2003/05/28 18:59:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [primaryGroupID] = [3001]
[2003/05/28 18:59:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [lmPassword] = [E52CAC67419A9A220CEC7D55CCC350DD]
[2003/05/28 18:59:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [ntPassword] = [489DC27E7F41B2F1482B8B72B9F593D7]
[2003/05/28 18:59:00, 2] passdb/pdb_ldap.c:get_single_attribute(441)
  get_single_attribute: [acctFlags] = [[UX ]]
[2003/05/28 18:59:00, 4] smbd/password.c:smb_password_ok(475)
  smb_password_ok: Checking SMB password for user test
[2003/05/28 18:59:00, 5] smbd/password.c:smb_password_ok(489)
  smb_password_ok: challenge received
[2003/05/28 18:59:00, 4] smbd/password.c:smb_password_ok(499)
  smb_password_ok: Checking NT MD4 password
[2003/05/28 18:59:00, 4] smbd/password.c:smb_password_ok(504)
  smb_password_ok: NT MD4 password check failed
[2003/05/28 18:59:00, 4] smbd/password.c:smb_password_ok(518)
  smb_password_ok: Checking LM password
[2003/05/28 18:59:00, 4] smbd/password.c:smb_password_ok(523)
  smb_password_ok: LM password check failed
[2003/05/28 18:59:00, 2] smbd/password.c:pass_check_smb(575)
  pass_check_smb failed - invalid password for user [test]
[2003/05/28 18:59:00, 1] smbd/reply.c:reply_sesssetup_and_X(1023)
  Rejecting user 'test': authentication failed
[2003/05/28 18:59:00, 3] smbd/error.c:error_packet(109)
  error packet at smbd/reply.c(1025) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2003/05/28 18:59:00, 5] lib/util.c:show_msg(268)

I guess the attributes are OK. The passwords where generated with mkntpwd
(mkntpwd -L password -N password)


Thanks a lot!

Gabriel.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] more info; current master browser = UNKOWN

[bkrusic]

Hi,

preffered master
local master
domain master

are all yes on the PDC.

os level = 99

on all other samba file servers, os level = 0
prventing the election process (and ofcourse the
corresponding args are = no).

nmbd.log on the pdc says = UNKOWN

Bri-

__
Do you Yahoo!?
Yahoo! Calendar - Free online calendar with sync to Outlook(TM).
http://calendar.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Slow performance with QuickBooks

[Brandon Lederer]

Yes OPLOCKS are off.  My smb.conf file follows:

[global]

workgroup = HMS
server string = CBS Quickbooks Server (Samba)

load printers = yes
printer admin = @HMS+adminx
printcap name = cups
printing = cups
guest ok = no
restrict anonymous = yes
valid users = @HMS+cbsusers, roz, root, dennis
#invalid users = root
admin users = root, @HMS+adminx

log file = /var/log/samba/log.%m
# max size of the log files (in Kb).
max log size = 1000
#log level = 100

syslog = 0

security = domain
password server = hms-pdc
encrypt passwords = yes

browsable = yes
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=2048
SO_RCVBUF=2048
#I've been playing with this here. 8192 made it slower
oplocks = no
level2 oplocks = no

wins server = 192.168.2.5
   dns proxy = no

   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n .
   winbind uid = 1-2
   winbind gid = 1-2
   template shell = /bin/false
   template homedir = /dev/null
   winbind cache time = 10
   winbind separator = +

#and the relevant share
[qbdata]
   comment = QuickBooks Data
   path = /data/qbdata
   browsable = yes
   writable = no
   write list = @HMS+Finance, @HMS+adminx
   create mode = 0770
   force create mode = 0770
   directory mode = 0770
   force directory mode = 0770


-Original Message-
From: Gerald Drouillard [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 28, 2003 4:20 PM
To: Brandon Lederer; [EMAIL PROTECTED]
Subject: RE: [Samba] Slow performance with QuickBooks


Did you turn oplocks off? Can we see your smb.conf file?

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Brandon Lederer
> Sent: Wednesday, May 28, 2003 4:05 PM
> To: '[EMAIL PROTECTED]'
> Subject: RE: [Samba] Slow performance with QuickBooks
>
>
> Just also verified that WinXP and Win98SE Exhibit the SAME issue.  almost
> identical time from one OS to the Other.  I just cant seem to make it any
> better.
>
> -Original Message-
> From: Brandon Lederer [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, May 28, 2003 2:26 PM
> To: '[EMAIL PROTECTED]'
> Subject: [Samba] Slow performance with QuickBooks
>
>
> I have spent much of the day today researching performance tuning with
> samba.  I have tried everything that I can find out about how to make
> performance faster.  I checked disk performance with Bonnie, installed FTP
> and tested a transfer that way, achieving 6-7 MB / second.  about
> 30 seconds
> for 150 MB file.  I was finally able to achieve those speeds on a file
> transfer to the server through samba.  But QuickBooks is still
> just as slow
> as it was.  Its performance has not changed a bit.  I am banging my head
> against the wall on this.  I am going nuts.  Please Help.
>
> Brandon
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] current master browser = UNKOWN

[bkrusic]

Hi,

Upon looking at nmbd.log, I see

current master browser = UNKOWN

google has mountains on this so I am sifting through. 
any ideas?

Bri-

__
Do you Yahoo!?
Yahoo! Calendar - Free online calendar with sync to Outlook(TM).
http://calendar.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Cross Subnet WINS?

[ganapathy murali krishnan]

OK. The problem is solved. The problem was not with samba.
The wireless subnet is controlled by a different group of people,
and after a few experiments, I found out that all out going traffic
to port 139 is dropped. So, I was able to contact my SAMBASERVER
on port 22 (ssh) but not on 139.
Till I get the firewall opened up, I have asked the user to do all
NETBIOS resolutions locally through LMHOSTS.
- Murali

Murali krishnan Ganapathy wrote:
But the win wks on the other subnet is configured to use my
SAMBASERVER as its WINS SERVER, and it is configured using the 
IP Adress of the SAMBASERVER and not the name. Shouldn't this
do the trick?

win wks is on a wireless subnet and hence runs at 11 MBPS, while
the SAMBASERVER is on a wired subnet. I read somewhere that windows
does some kind of "optimization" with slow networks. Is it possible
that this is a result of that? or am I way of the target here? 

- Murali


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Slow performance with QuickBooks

[Gerald Drouillard]

Did you turn oplocks off? Can we see your smb.conf file?

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Brandon Lederer
> Sent: Wednesday, May 28, 2003 4:05 PM
> To: '[EMAIL PROTECTED]'
> Subject: RE: [Samba] Slow performance with QuickBooks
>
>
> Just also verified that WinXP and Win98SE Exhibit the SAME issue.  almost
> identical time from one OS to the Other.  I just cant seem to make it any
> better.
>
> -Original Message-
> From: Brandon Lederer [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, May 28, 2003 2:26 PM
> To: '[EMAIL PROTECTED]'
> Subject: [Samba] Slow performance with QuickBooks
>
>
> I have spent much of the day today researching performance tuning with
> samba.  I have tried everything that I can find out about how to make
> performance faster.  I checked disk performance with Bonnie, installed FTP
> and tested a transfer that way, achieving 6-7 MB / second.  about
> 30 seconds
> for 150 MB file.  I was finally able to achieve those speeds on a file
> transfer to the server through samba.  But QuickBooks is still
> just as slow
> as it was.  Its performance has not changed a bit.  I am banging my head
> against the wall on this.  I am going nuts.  Please Help.
>
> Brandon
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Panic action ignored by winbind during crash

[Paul Eggleton]

In my problem description should probably have mentioned the
following... I am running Samba 3.0beta23 with ACL support on Red Hat
8.0 (custom 2.4.20 kernel).

Cheers,
Paul


Paul Eggleton wrote on Wednesday, 28 May 2003 3:18 p.m.:
> Hi there,
> 
> I am trying to debug a problem with winbind crashing, but the "panic 
> action" I have set in smb.conf doesn't seem to be working. First, the 
> message I get in the log.winbindd file is as follows:
> 
> -- snip --
> [2003/05/27 17:05:01, 1] libads/ldap_utils.c:ads_do_search_retry(76)
>   ads reopen failed after error Success
> winbindd: ../../../libraries/libldap/getvalues.c:36: ldap_get_values: 
> Assertion `entry != ((void *)0)' failed.
> -- snip --
> 
> I have the panic action set as follows:
> 
> panic action = /bin/sh /usr/local/bin/cjnwbcrash.sh
> 
> (I have tried with quotes, the result is the same - the script is not 
> executed).
> 
> The reason I am using a script is that I need it to do two things when

> a crash occurs: a) Email me and then sleep (so I can get in and run 
> gdb) b) Don't run sleep outside working hours as I won't be here to 
> debug it
> 
> I also have a cron job which checks if winbind is running every 5 
> minutes and starts it if it isn't.
> 
> Any hints?
> 
> Cheers,
> Paul
> 
> -
> Paul Eggleton  Ph:+64-9-4154790
> Software Developer Fax:   +64-9-4154791
> CJN Technologies Ltd.  DDI:   +64-9-4154795
> http://www.cjntech.co.nz   Email: [EMAIL PROTECTED]
> -
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Slow performance with QuickBooks

[Brandon Lederer]

Just also verified that WinXP and Win98SE Exhibit the SAME issue.  almost
identical time from one OS to the Other.  I just cant seem to make it any
better.

-Original Message-
From: Brandon Lederer [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 28, 2003 2:26 PM
To: '[EMAIL PROTECTED]'
Subject: [Samba] Slow performance with QuickBooks


I have spent much of the day today researching performance tuning with
samba.  I have tried everything that I can find out about how to make
performance faster.  I checked disk performance with Bonnie, installed FTP
and tested a transfer that way, achieving 6-7 MB / second.  about 30 seconds
for 150 MB file.  I was finally able to achieve those speeds on a file
transfer to the server through samba.  But QuickBooks is still just as slow
as it was.  Its performance has not changed a bit.  I am banging my head
against the wall on this.  I am going nuts.  Please Help.

Brandon
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Can we have a WINS

[David Morel]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Le Mercredi 28 Mai 2003 21:39, David Chait a écrit :
> Samba can be made into a WINS server by simply uncommenting a few lines in
> the default config, trivial really.
>
> - Original Message -
> From: "Patrick Nelson" <[EMAIL PROTECTED]>
> To: "Samba List" <[EMAIL PROTECTED]>
> Sent: Wednesday, May 28, 2003 12:29 PM
> Subject: [Samba] Can we have a WINS
>
> > Is there anyway to replicate WINS in an all Samba environment?  Or is
> > there another way of accomplishing this?  Like just DNS...
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba

on the wins server:
===
[global]

interfaces = eth0 lo
bind interfaces only = Yes
name resolve order = wins lmhosts  bcast host
 wins support = Yes


on the other Linux machines
=
[global]
  name resolve order = wins lmhosts  bcast host
  wins server = XXX.XXX.XXX.XXX <-insert real ip here.

thats it; simpler than setting up bind; i don't know about tinydns.

David
- -- 
***
[EMAIL PROTECTED]
OpenPGP public key: http://www.amakuru.net/dmorel.asc
28192ef126bc871757cb7d97f4a44536

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE+1RRgqr7QF98duCMRAmTVAJ9FyLC2VwQGHN0HyZ6QWtrDzbH+CwCfQkZv
9fi9su6q3yFi0U8BfjSeJ8s=
=mbvj
-END PGP SIGNATURE-

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Can we have a WINS

[Patrick Nelson]

On Wed, 2003-05-28 at 12:30, Brandon Lederer wrote:
> I would think you could just use DNS.  DNS will be used instead of WINS,
> right?
> 
> -Original Message-
> From: Patrick Nelson [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, May 28, 2003 2:29 PM
> To: Samba List
> Subject: [Samba] Can we have a WINS
> 
> 
> Is there anyway to replicate WINS in an all Samba environment?  Or is
> there another way of accomplishing this?  Like just DNS... 
> 

Hmmm...  DNS would be totally acceptable.  Might have to convert over
all of the WINS stuff to the DNS server but sounds good.  So drop the
entry of wins server from smb.conf.  Testing now.  

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Can we have a WINS

[David Chait]

Samba can be made into a WINS server by simply uncommenting a few lines in
the default config, trivial really.

- Original Message -
From: "Patrick Nelson" <[EMAIL PROTECTED]>
To: "Samba List" <[EMAIL PROTECTED]>
Sent: Wednesday, May 28, 2003 12:29 PM
Subject: [Samba] Can we have a WINS


> Is there anyway to replicate WINS in an all Samba environment?  Or is
> there another way of accomplishing this?  Like just DNS...
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Can we have a WINS

[Brandon Lederer]

I would think you could just use DNS.  DNS will be used instead of WINS,
right?

-Original Message-
From: Patrick Nelson [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 28, 2003 2:29 PM
To: Samba List
Subject: [Samba] Can we have a WINS


Is there anyway to replicate WINS in an all Samba environment?  Or is
there another way of accomplishing this?  Like just DNS... 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Can we have a WINS

[Patrick Nelson]

Is there anyway to replicate WINS in an all Samba environment?  Or is
there another way of accomplishing this?  Like just DNS... 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Slow performance with QuickBooks

[Brandon Lederer]

I have spent much of the day today researching performance tuning with
samba.  I have tried everything that I can find out about how to make
performance faster.  I checked disk performance with Bonnie, installed FTP
and tested a transfer that way, achieving 6-7 MB / second.  about 30 seconds
for 150 MB file.  I was finally able to achieve those speeds on a file
transfer to the server through samba.  But QuickBooks is still just as slow
as it was.  Its performance has not changed a bit.  I am banging my head
against the wall on this.  I am going nuts.  Please Help.

Brandon
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Question on Profiles when users join the Domain

[John H Terpstra]

On Wed, 28 May 2003, Jason Williams wrote:

> Hello everyone. I will keep this question as brief as possible.
>
> As it is now, our users are all set in a workgroup environment using local
> profiles. I have setup our Samba PDC with LDAP to use roaming profiles.
> My question is this:
> Users right now use a local profile. How do I make sure that when these
> users and computers join the PDC, their profiles (desktop settings, icons
> etc) will carry over the the PDC for their roaming profiles?
>
> My fear is that my users will loose their desktop settings when they join
> the PDC. How can I avoid this and make sure they retain all their settings
> that are being used on their local profiles.

As administrator on their local workstation you need to copy (migrate
using the system tools on the workstation) the profile to a domain user
profile and in the process copy it to the central domain profile server
share.

This is documented in the new Samba-HOWTO.

http://samba.org/~jht/NT4migration/Samba-HOWTO-Collection.pdf

See chapter 22, section 22.2.4


- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] WINT-NT is working as PDC and Redhat Linux Samba BDCand how to use rsync?

[John H Terpstra]

On Wed, 28 May 2003, Yeri Swamy wrote:

> John H Terpstra wrote:
>
> >On Wed, 28 May 2003, Yeri Swamy wrote:
> >
> >
> >
> >>Thanks a lot! for ur speedy reply...
> >>The link u sent i looked at it very closely... i am still confused what
> >>to do...
> >>
> >>It is not explained anywhere howto setup LDAP for Linux Samba BDC..
> >>
> >>
> >
> >If you implement a Samba based solution you need a Samba SAM (Security
> >Account Managment) database. The soon to be released Samba-3 fully
> >supports two SAM solutions that will store the extended security
> >information needed to implement a true replacement for MS Windows NT.
> >These are tdbsam and ldapsam.
> >
> >See chapter on "Account Information Database", sub-section on LDAP back
> >end.
> >
> >Samba-3 ldapsam is the only passdb backend that allows scalability across
> >Samba PDC/BDC configurations. See Chapter on "Backup Domain Control" for
> >information about how this works.
> >
>  Thanks a ton...
>
> Please bear with me coz before coming to you i did search tons of
> links with no proper clear cut details...
>
>  This means NT PDC and Samba BDC to work like(NT PDC & NT BDC i.e if
> PDC fails BDC will take over)

No read my reply carefully:

Samba CAN NOT be a BDC to an NT PDC!

>  we have to wait till we get a tool/utility  tdbsam which will
> gather all the machine account. users and groups info from NT will
> convert into meaningfull format that Samba BDC can understand then Samba
> BDC will work like a horse as BDC when NT PDC fails...

No. You can migrate your NT PDC SAM account information to a Samba PDC
using the "vampire" tool. Then you will need to replace your NT PDC with a
Samba PDC, if you want a Samba BDC to work correctly.

You should NOT use tdbsam for ANY Samba PDC/BDC combination. The tdbsam is
only intended for sites that do NOT need a BDC.

>  And with ldapsam we can only have Samba PDC and Samba BDC and this case
> if Samba PDC fails then Samba BDC will take over

With Samba-3 using ldapsam you can have a Samba PDC and as many Samba BDCs
are you like. The real benefit of this is that machine account password
changes will be stored in a common LDAP backend.


- John T.


> >
> >>that means do i have to setup Linux Samba BDC as LDAP server or client
> >>or ???
> >>I believe if i setup Linux Samba BDC as a LDAP server then do i have to
> >>setup WIN-NT PDC as LDAP client and how to transfer all the machine
> >>accounts, users, groups and passwords from NT to Linux..
> >>So that when WIN-NT PDC fails then Linux SAMBA BDC can takeover the
> >>network...
> >>
> >>
> >
> >Ok. I looked at your original question more closely. Sad to say, but Samba
> >can NOT be a true BDC to an MS Windows PDC. There is NO facility for using
> >rsync to replicate an MS Windows NT PDC SAM to a Samba server (not with
> >Samba-2 nor with soon to be released Samba-3).
> >
> >Samba-3 has a facility to suck MS Windows NT4 SAM accounts into it's own
> >tdbsam or into an ldapsam database. This is a new facility that is not
> >available with Samba-2.2.x.
> >
> >In the strict definition of the terms:
> >
> > 1. Samba can not be a BDC to an NT PDC
> > 2. Samba can not do what you have described
> >
> >You can replace your Windows NT PDC with a Samba server, in which case you
> >CAN run a Samba BDC (so long as you use an LDAP accounts database
> >backend).
> >
> >The old solution involved using a flat text based file called smbpasswd in
> >which Samba stored the Microsoft encrypted passwords. This file could be
> >replicated using rsync. The problem with that method is that domain member
> >workstations do change their trust account password periodically. This
> >will happen locally with the old method - this breaks machine trusts.
> >
> >That is what I was referring to.
> >
> >- John T.
> >
> >
> >
> >>with Best Regards
> >>YS
> >>
> >>John H Terpstra wrote:
> >>
> >>
> >>
> >>>Yeri,
> >>>
> >>>The dogma to use rsync to replicate the password database is bad karma.
> >>>   "It's a bit like your karma runs over your dogma."
> >>>
> >>>MS Windows NT Domain member machines change their password at certain
> >>>intervals. If they do so on a local copy of the database nad it gets
> >>>over-written by the rsync'd copy then your local workstation trusts get
> >>>broken.
> >>>
> >>>A better solution is to use LDAP, and follow the guidelines available from
> >>>several sources on how to set up a PDC/BDC using an LDAP backend.
> >>>
> >>>The following reference might help you:
> >>>
> >>>   http://samba.org/~jht/NT4migration/Samba-HOWTO-Collection.pdf
> >>>
> >>>- John T.
> >>>
> >>>On Wed, 28 May 2003, Yeri Swamy wrote:
> >>>
> >>>
> >>>
> >>>
> >>>
> Can anybody give me a hint how to set up Samba BDC(RedHat 9.0) with
> rsync-ing WIN-NT PDC so that if WIN-NT PDC is down all the clients can
> still get Authentication service from Samba BDC(RedHat 9.0). i have seen
> in Samba documentation that it can be done using rsync but nowhwere i

[Samba] Question on Profiles when users join the Domain

[Jason Williams]

Hello everyone. I will keep this question as brief as possible.

As it is now, our users are all set in a workgroup environment using local 
profiles. I have setup our Samba PDC with LDAP to use roaming profiles.
My question is this:
Users right now use a local profile. How do I make sure that when these 
users and computers join the PDC, their profiles (desktop settings, icons 
etc) will carry over the the PDC for their roaming profiles?

My fear is that my users will loose their desktop settings when they join 
the PDC. How can I avoid this and make sure they retain all their settings 
that are being used on their local profiles.

Thank you everyone.

Jason

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Member server of Samba PDC

[Patrick Nelson]

PDC RH9 running v2.2.7-a-8.9.0 from RH 
Member RH73 running v2.2.7-3.7.3 from RH
both are up to date with regards to RH

Would like the Member server to authenticate against the PDC rather than
locally to itself causing me to keep auth all synced up between the two.
Yes LDAP is an option as we already use it, but was waiting for ver 3 to
go down this road as we don't like to compile because of the vast amount
of systems we have (plus the level of work for upgrading).

Been searching for docs on adding a Samba Member Server to Samba PDC,
but have not found anything specific.  Anyone point me toward how to
accomplish this?  Ah thank ya... ah thank ya very much!


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] WINT-NT is working as PDC and Redhat Linux Samba BDCand how to use rsync?

[John H Terpstra]

On Wed, 28 May 2003, Yeri Swamy wrote:

> Thanks a lot! for ur speedy reply...
> The link u sent i looked at it very closely... i am still confused what
> to do...
>
> It is not explained anywhere howto setup LDAP for Linux Samba BDC..

If you implement a Samba based solution you need a Samba SAM (Security
Account Managment) database. The soon to be released Samba-3 fully
supports two SAM solutions that will store the extended security
information needed to implement a true replacement for MS Windows NT.
These are tdbsam and ldapsam.

See chapter on "Account Information Database", sub-section on LDAP back
end.

Samba-3 ldapsam is the only passdb backend that allows scalability across
Samba PDC/BDC configurations. See Chapter on "Backup Domain Control" for
information about how this works.

> that means do i have to setup Linux Samba BDC as LDAP server or client
> or ???
> I believe if i setup Linux Samba BDC as a LDAP server then do i have to
> setup WIN-NT PDC as LDAP client and how to transfer all the machine
> accounts, users, groups and passwords from NT to Linux..
> So that when WIN-NT PDC fails then Linux SAMBA BDC can takeover the
> network...

Ok. I looked at your original question more closely. Sad to say, but Samba
can NOT be a true BDC to an MS Windows PDC. There is NO facility for using
rsync to replicate an MS Windows NT PDC SAM to a Samba server (not with
Samba-2 nor with soon to be released Samba-3).

Samba-3 has a facility to suck MS Windows NT4 SAM accounts into it's own
tdbsam or into an ldapsam database. This is a new facility that is not
available with Samba-2.2.x.

In the strict definition of the terms:

1. Samba can not be a BDC to an NT PDC
2. Samba can not do what you have described

You can replace your Windows NT PDC with a Samba server, in which case you
CAN run a Samba BDC (so long as you use an LDAP accounts database
backend).

The old solution involved using a flat text based file called smbpasswd in
which Samba stored the Microsoft encrypted passwords. This file could be
replicated using rsync. The problem with that method is that domain member
workstations do change their trust account password periodically. This
will happen locally with the old method - this breaks machine trusts.

That is what I was referring to.

- John T.

>
> with Best Regards
> YS
>
> John H Terpstra wrote:
>
> >Yeri,
> >
> >The dogma to use rsync to replicate the password database is bad karma.
> > "It's a bit like your karma runs over your dogma."
> >
> >MS Windows NT Domain member machines change their password at certain
> >intervals. If they do so on a local copy of the database nad it gets
> >over-written by the rsync'd copy then your local workstation trusts get
> >broken.
> >
> >A better solution is to use LDAP, and follow the guidelines available from
> >several sources on how to set up a PDC/BDC using an LDAP backend.
> >
> >The following reference might help you:
> >
> > http://samba.org/~jht/NT4migration/Samba-HOWTO-Collection.pdf
> >
> >- John T.
> >
> >On Wed, 28 May 2003, Yeri Swamy wrote:
> >
> >
> >
> >>Can anybody give me a hint how to set up Samba BDC(RedHat 9.0) with
> >>rsync-ing WIN-NT PDC so that if WIN-NT PDC is down all the clients can
> >>still get Authentication service from Samba BDC(RedHat 9.0). i have seen
> >>in Samba documentation that it can be done using rsync but nowhwere it
> >>is clearly explained howto do it.. I ran out of gas by looking through
> >>google also... :-(
> >>
> >>
> >>With Best Regards
> >>YS
> >>
> >>
> >>
> >>
> >
> >
> >
>
>

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] WINT-NT is working as PDC and Redhat Linux Samba BDCand how to use rsync?

[Yeri Swamy]

Yeri Swamy wrote:

Thanks a lot! for ur speedy reply...
The link u sent i looked at it very closely... i am still confused 
what to do...

It is not explained anywhere howto setup LDAP for Linux Samba BDC..
that means do i have to setup Linux Samba BDC as LDAP server or client 
or ???
I believe if i setup Linux Samba BDC as a LDAP server then do i have 
to setup WIN-NT PDC as LDAP client and how to transfer all the machine 
accounts, users, groups and passwords from NT to Linux..
So that when WIN-NT PDC fails then Linux SAMBA BDC can takeover the 
network...

with Best Regards
YS
John H Terpstra wrote:

Yeri,

The dogma to use rsync to replicate the password database is bad karma.
"It's a bit like your karma runs over your dogma."
MS Windows NT Domain member machines change their password at certain
intervals. If they do so on a local copy of the database nad it gets
over-written by the rsync'd copy then your local workstation trusts get
broken.
A better solution is to use LDAP, and follow the guidelines available 
from
several sources on how to set up a PDC/BDC using an LDAP backend.

The following reference might help you:

http://samba.org/~jht/NT4migration/Samba-HOWTO-Collection.pdf

- John T.

On Wed, 28 May 2003, Yeri Swamy wrote:

 

Can anybody give me a hint how to set up Samba BDC(RedHat 9.0) with
rsync-ing WIN-NT PDC so that if WIN-NT PDC is down all the clients can
still get Authentication service from Samba BDC(RedHat 9.0). i have 
seen
in Samba documentation that it can be done using rsync but nowhwere it
is clearly explained howto do it.. I ran out of gas by looking through
google also... :-(

With Best Regards
YS
  


 





--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Passing domain name to PPP

[Tom Hallewell]

I should probably add some clarifications here.  First, since we have over
200 users, we would like to not have to add the users anywhere.  It seems
like the tweak would have to take place in PAM.
What we'd really like to do is find a friendly way where PAM can be
configured to maybe try both (username, domain+username).
Again, any help would be greatly appreciated.
Tom

> -Original Message-
> From: Deryk Robosson [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, May 28, 2003 1:01 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [Samba] Passing domain name to PPP
>
>
> On Thu, 29 May 2003 12:23 am, Tom Hallewell wrote:
> > Hi-
> > Our PPP RAS server is running Samba 2.2.8a and winbind.  We want to
> > authenticate dialup users through the PDC (Win NT 4 SP6).  However, in
> > order to do so, the dommainname needs to be prepended to the
> username, ie,
> > DOMAIN+USERNAME.
> > We don't want to have to teach all our dialup users to add the
> domainname
> > when they login to RAS, so we are looking for a way to script this.
> > Has anyone tweaked PPP/CHAP to automatically prepend the domain to the
> > username?
> > Thanks for any help,
> > Tom
>
> I've got some l2tp/ipsec roadwarriors that login using just that
> method to a
> server.  It's already supplied by the client (win2k/xp) if the client is
> setup to login to the domain for that connection.  This also
> works with pptp
> as well.  Depending on your authentication method, you'd add the users as
> WORKGROUP\\username * secret * to either chap-secrets or pap-secrets.
>
> --
> Regards,
> Deryk Robosson
>
> Robosson Business Services
> 22 Flemington Street
> Albany, WA  6330
> ABN: 56 728 377 499
> Phone: +61 4 0842 9835 Email: [EMAIL PROTECTED]
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Share violation

[Oscar A. Valdez]

Ocassionally (not always), some (not all) of my Win 9x clients get a 
share violation when trying to open a shared file. I also have many more
DOSEMU/Linux clients that never encounter this problem. The log snippet
is as follows:

[2003/05/28 11:50:30, 5] smbd/filename.c:unix_convert(119)
  unix_convert called on file "\INMASS.EXE"
[2003/05/28 11:50:30, 3] lib/util.c:unix_clean_name(387)
  unix_clean_name [/INMASS.EXE]
[2003/05/28 11:50:30, 5] smbd/mangle_hash.c:is_8_3(368)
  Checking INMASS.EXE for 8.3
[2003/05/28 11:50:30, 3] smbd/dosmode.c:unix_mode(111)
  unix_mode(INMASS.EXE) returning 0764
[2003/05/28 11:50:30, 5] smbd/files.c:file_new(121)
  allocated file structure 8630, fnum = 12726 (1 used)
[2003/05/28 11:50:30, 3] lib/util.c:unix_clean_name(387)
  unix_clean_name [INMASS.EXE]
[2003/05/28 11:50:30, 2] smbd/open.c:check_share_mode(502)
  Share violation on file (2,4,2,3957,INMASS.EXE,fcbopen = 0, flags = 0)
= 0
[2003/05/28 11:50:30, 2] smbd/open.c:open_file(233)
  JOAQUIN opened file INMASS.EXE read=Yes write=No (numopen=1)
[2003/05/28 11:50:30, 4] smbd/open.c:open_file_shared1(869)
  open_file_shared : share_mode deny - calling open_file with flags=0x0
flags2=0x0 mode=0764 returned 1
[2003/05/28 11:50:30, 5] smbd/files.c:file_free(339)
  freed files structure 12726 (0 used)
[2003/05/28 11:50:30, 3] smbd/error.c:error_packet(91)
  error string = Operation not permitted
[2003/05/28 11:50:30, 3] smbd/error.c:error_packet(126)
  error packet at smbd/reply.c(1702) cmd=45 (SMBopenX) eclass=1 ecode=32

Tips and suggestions will be much appreciated.
-- 
Oscar A. Valdez
Plastipak, S.A. de C.V.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Security information missing

[Gustavo Rincon]

We are running samba 2.2.8 on redhat linux kernel 2.4.20, our linux server
joined a PDC server runing win 2k SP2.
We share a FS from our linux server and mapped it from the PDC, everything
is OK
so far, when we create a directory from the client that have the FS mapped
and
try to see the security properties it shows all check boxes empty below next
to
the "Advanced.." button it display a message saying "Additional permissions
are
present but not viewable here. Press Advanced to see them." once we press
Advance all permissions are showed well.
What's preventing the permissions to be viewed from the security properties
window?.
I have seen that on samba 2.2.4 but only in some cases.
Thanks,


Thank you,

Gustavo Rincon
Ciprico Inc.
106 Apple Street Suite 100.
Tinton Falls, NJ 07724.
Phone: 732-450-8944 Ext 19
Fax: 732-450-8589
mailto:[EMAIL PROTECTED]  
http://www.ciprico.com/  


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Passing domain name to PPP

[Tom Hallewell]

Hi-
Our PPP RAS server is running Samba 2.2.8a and winbind.  We want to
authenticate dialup users through the PDC (Win NT 4 SP6).  However, in order
to do so, the dommainname needs to be prepended to the username, ie,
DOMAIN+USERNAME.
We don't want to have to teach all our dialup users to add the domainname
when they login to RAS, so we are looking for a way to script this.
Has anyone tweaked PPP/CHAP to automatically prepend the domain to the
username?
Thanks for any help,
Tom

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] share persistence problem

[John H Terpstra]

On Wed, 28 May 2003, Paul Trepanier wrote:

> After awhile, my connections from my PC to my samba server end up with a
> red "X" in them (share disappeared) if I leave my explorer window open.
>   If I click on these, they "wake up" and continue to function (and
> the red X's go away).  If I close my explorer window (while the red X's
> are there) and reopen it , they are gone.  An attempt to reestablish
> these  dropped connections is immediately successful.
>
> This is obviously a connection persistence issue and I've tried setting
> both keepalive= and SO_KEEPALIVE (individually, of course) to no avail.
>
> Any ideas?

Your MS Windows client is the culprit - it is dropping idle connections as
I recall. Also, you may find that there is a registry setting to turn that
feature off.

- John T.

>
> My installation is samba 2.2.8 running as a daemon (not inetd) on
> Solaris 8 configured to use a WINS server and provide authentication via
> a PDC (same host as WINS server).  I do have an lmhosts file in the
> samba /lib directory with the PDC/WINS server address in it.
>
> My globals section;
>
> [global]
>  workgroup = WORKGROUP
>  netbios name = SAMBASERVER
>  security = SERVER
>  encrypt passwords = Yes
>  password server = pdc
>  lanman auth = No
>  log level = 2
>  log file = /usr/local/depot/samba-2.2.8/var/%m.log
>  deadtime = 5
>  max smbd processes = 5
>  socket options = IPTOS_LOWDELAY TCP_NODELAY SO_KEEPALIVE
>  load printers = No
>  show add printer wizard = No
>  preferred master = No
>  local master = No
>  domain master = No
>  wins server = [IP address of WINS/PDC server]
>  follow symlinks = No
>
>
>

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] netbios name resolution problem

[Russell, Toby]

Hello all,

the subject is actually my guess as to the nature of the problem.

We have two Sun machines (Sol 8), both of which offer samba shares from
within the same workgroup. They are the only members of the group. One is a
produciton system, the other a test system. The company for whom we
administer these machines has the curious situation where they can browse
the production machine, but not the test machine, unless they use the test
machine's IP address when executing e.g. net view. They come from outside
the network via their own routers to us. We can browse both machines from
within the network, and another company (who administer the databases) can
also browse both machines, using the names. The problem for our client is
there regardless of where they attempt to log in from, within their company
networks.

I have reinstalled the latest version of samba on the test machine (2.2.8a),
and on the 'working' production we have 2.2.2. We have changed who should be
masterbrowser from production to test machine and back again, but this makes
no difference. We have even placed the machines in our client's workgroup,
although the two sun boxes have no way of conversing with our client's
PDC/masterbrowser. No matter what we do, the situation stays the same. 

The problem first reared its head on the 20th May. Before that date there
were no problems with samba. And it is the usual story; all relevant parties
have not changed a thing anywhere. All we have done is to reboot the test
machine due to a httpd problem. Strangely, having finally seen a broadcast
address error and fixed it, the problem has remained, despite reboots of the
relevant PC at our client's company.

For a while the following messages showed up in log.nmbd (I have the log
level at 6 on the test machine):

[2003/05/28 12:27:23, 4]
nmbd/nmbd_packets.c:retransmit_or_expire_response_records(1664)
  retransmit_or_expire_response_records: timeout for packet id 1461 to IP *
on subnet *
[2003/05/28 12:54:52, 4]
nmbd/nmbd_packets.c:retransmit_or_expire_response_records(1664)
  retransmit_or_expire_response_records: timeout for packet id 4343 to IP *
on subnet *
[2003/05/28 13:04:53, 4]
nmbd/nmbd_packets.c:retransmit_or_expire_response_records(1664)
  retransmit_or_expire_response_records: timeout for packet id 4348 to IP *
on subnet *
[2003/05/28 13:04:53, 4]
nmbd/nmbd_packets.c:retransmit_or_expire_response_records(1664)
  retransmit_or_expire_response_records: timeout for packet id 4349 to IP *
on subnet *
[2003/05/28 13:52:41, 4]
nmbd/nmbd_packets.c:retransmit_or_expire_response_records(1664)
  retransmit_or_expire_response_records: timeout for packet id 8153 to IP *
on subnet *

However, those messages no longer seem to arise.

I have also tried setting bind interfaces only to yes, and listing the
interface in smb.conf.

On both machines smbclient returns the correct results, as does testparm.
The client can ping the test machine using the name, as well as ftp it. I
have spoken with the network people at the client's company, but they have
thrown up their hands and claimed to have changed nothing. In fact
everything works EXCEPT browsing by name on the test machine. I have been
working on this problem for days, have trawled google and am finally without
a clue as to how to proceed, other than to mail the people at the list here.
I hope you can help me.

Regards and thanks in advance

Toby Russell
(Applications Providing/UNIX)

Telefon  +49 (0) 30 72 62 3- 6669
Telefax  +49 (0) 30 72 62 3- 6689
Mobil +49 (0) 172 6847428
E-Mail[EMAIL PROTECTED]
Internet  www.BerlinDat.de
___

BerlinDat
Gesellschaft für Informationsverarbeitung und Systemtechnik mbH
Rohrdamm 7
13629 Berlin


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] share persistence problem

[Paul Trepanier]

After awhile, my connections from my PC to my samba server end up with a 
red "X" in them (share disappeared) if I leave my explorer window open. 
 If I click on these, they "wake up" and continue to function (and 
the red X's go away).  If I close my explorer window (while the red X's 
are there) and reopen it , they are gone.  An attempt to reestablish 
these  dropped connections is immediately successful.

This is obviously a connection persistence issue and I've tried setting 
both keepalive= and SO_KEEPALIVE (individually, of course) to no avail.

Any ideas?

My installation is samba 2.2.8 running as a daemon (not inetd) on
Solaris 8 configured to use a WINS server and provide authentication via
a PDC (same host as WINS server).  I do have an lmhosts file in the
samba /lib directory with the PDC/WINS server address in it.
My globals section;

[global]
workgroup = WORKGROUP
netbios name = SAMBASERVER
security = SERVER
encrypt passwords = Yes
password server = pdc
lanman auth = No
log level = 2
log file = /usr/local/depot/samba-2.2.8/var/%m.log
deadtime = 5
max smbd processes = 5
socket options = IPTOS_LOWDELAY TCP_NODELAY SO_KEEPALIVE
load printers = No
show add printer wizard = No
preferred master = No
local master = No
domain master = No
wins server = [IP address of WINS/PDC server]
follow symlinks = No
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] roaming profiles

[vecvac]

Hi,
how can i manage roaming profiles only for few users?
in samba there is an option that i manage the roaming profile for all lan's
users but i want who only the "stage" users can this.
In W2k is possible assign for every users if use local profile or not.
Roaming profiles is a good choice if users change often pc, but in my office
every user have a pc. Only new or stage users neeeds roaming profile because
haven't pc.

Please help me, my user profile are too big for my server!!

andrea
[EMAIL PROTECTED]

__
Tiscali ADSL  a 1 euro al giorno, traffico incluso!e in piu' telefoni
gratis. Abbonati entro il 31 maggio, l'attivazione e' gratuita.
http://point.tiscali.it/adsl/index.shtml



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] WINT-NT is working as PDC and Redhat Linux Samba BDCand how to use rsync?

[John H Terpstra]

Yeri,

The dogma to use rsync to replicate the password database is bad karma.
"It's a bit like your karma runs over your dogma."

MS Windows NT Domain member machines change their password at certain
intervals. If they do so on a local copy of the database nad it gets
over-written by the rsync'd copy then your local workstation trusts get
broken.

A better solution is to use LDAP, and follow the guidelines available from
several sources on how to set up a PDC/BDC using an LDAP backend.

The following reference might help you:

http://samba.org/~jht/NT4migration/Samba-HOWTO-Collection.pdf

- John T.

On Wed, 28 May 2003, Yeri Swamy wrote:

> Can anybody give me a hint how to set up Samba BDC(RedHat 9.0) with
> rsync-ing WIN-NT PDC so that if WIN-NT PDC is down all the clients can
> still get Authentication service from Samba BDC(RedHat 9.0). i have seen
> in Samba documentation that it can be done using rsync but nowhwere it
> is clearly explained howto do it.. I ran out of gas by looking through
> google also... :-(
>
>
> With Best Regards
> YS
>
>

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problem with samba printer under Win2k

[gertian . brataj]

On 28 May 2003 at 7:41, Joel Hammer wrote:

> With lprng, you need to edit the file:
> /etc/lpd.perms
> Here is all I have in mine:
> DEFAULT ACCEPT
> Joel
>
Hai,
I try to make the changes, but it seems to have another problem, don't work at all.
I recive this message when I try to print or to see the printer status with lpstat:
get_local_host ´myhostname´ bad


> On Wed, May 28, 2003 at 09:50:11AM +0200, [EMAIL PROTECTED] wrote:
> > I´m running Debian Linux 3.0 r1 with Samba 2.2.8a and I have got printing problems:
> >
> > --- when I print something the job don't appear in the window printing status, so I
> > have no way to check the actual status of the job, or to delete the job from window
> > printer status in Win2K.
> >
> > here is configurations file of smb.conf:
> >
> > [global]
> >workgroup = Gertian
> >log level = 99
> >
> >queuepause command = /usr/bin/lpc stop %p
> >queueresume command = /usr/bin/lpc start %p
> >lppause command = lp -I %p-%j -H hold
> >lpresume command = lp -I %p-%j -H
> >lprm command = /usr/bin/cancel %p-%j
> >lpq command = /usr/bin/lpq -P%p -l
> >printing = lprng
> >server string = %h server (Samba %v)
> >load printers = yes
> >printcap name = /etc/printcap
> >printer admin = gertian wolfgang
> >hosts allow = 192.168.1.111
> >
> >
> > #  printing = cups # works nicely
> > ;  printing = bsd
> >
> > ;   guest account = nobody
> >invalid users = root
> >
> > # This tells Samba to use a separate log file for each machine
> > # that connects
> >log file = /var/log/samba/log.%m
> >
> > # Put a capping on the size of the log files (in Kb).
> >max log size = 1000
> >
> > # If you want Samba to log though syslog only then set the following
> > # parameter to 'yes'. Please note that logging through syslog in
> > # Samba is still experimental.
> > ;   syslog only = no
> >
> > # We want Samba to log a minimum amount of information to syslog. Everything
> > # should go to /var/log/samba/log.{smb,nmb} instead. If you want to log
> > # through syslog you should set the following parameter to something higher.
> >syslog = 0
> >
> > # "security = user" is always a good idea. This will require a Unix account
> > # in this server for every user accessing the server. See
> > # security_level.txt for details.
> > ;   security = user
> >
> > # You may wish to use password encryption. Please read ENCRYPTION.txt,
> > # Win95.txt and WinNT.txt in the Samba documentation. Do not enable this
> > # option unless you have read those documents
> >encrypt passwords = true
> >
> > # Using the following line enables you to customise your configuration
> > # on a per machine basis. The %m gets replaced with the netbios name
> > # of the machine that is connecting
> > ;   include = /home/samba/etc/smb.conf.%m
> >
> > # Most people will find that this option gives better performance.
> > # See speed.txt and the manual pages for details
> > # You may want to add the following on a Linux system:
> > # SO_RCVBUF=8192 SO_SNDBUF=8192
> >socket options = TCP_NODELAY
> >
> > # --- Browser Control Options ---
> >
> > # Please _read_ BROWSING.txt and set the next four parameters according
> > # to your network setup. The defaults are specified below (commented
> > # out.) It's important that you read BROWSING.txt so you don't break
> > # browsing in your network!
> >
> > # set local master to no if you don't want Samba to become a master
> > # browser on your network. Otherwise the normal election rules apply
> > ;   local master = yes
> >
> > # OS Level determines the precedence of this server in master browser
> > # elections. The default value should be reasonable
> > ;   os level = 20
> >
> > # Domain Master specifies Samba to be the Domain Master Browser. This
> > # allows Samba to collate browse lists between subnets. Don't use this
> > # if you already have a Windows NT domain controller doing this job
> > ;   domain master = auto
> >
> > # Preferred Master causes Samba to force a local browser election on startup
> > # and gives it a slightly higher chance of winning the election
> > ;   preferred master = auto
> >
> > # --- End of Browser Control Options ---
> >
> > # Windows Internet Name Serving Support Section:
> > # WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
> > ;   wins support = no
> >
> > # WINS Server - Tells the NMBD components of Samba to be a WINS Client
> > # Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
> > ;   wins server = w.x.y.z
> >
> > # This will prevent nmbd to search for NetBIOS names through DNS.
> >dns proxy = no
> >
> > # What naming service and in what order should we use to resolve host names
> > # to IP addresses
> > ;   name resolve order = lmhosts host wins bcast
> >
> > # Name mangling options
> > ;   preserve case = yes
> > ;   short preserve case = yes
> >
> > # This boolean parameter controlls whether Samba attempts to sync. the Un

[Samba] login (W2K) takes very long

[Wolfgang Pichler]

hi,

i've configured samba-2.2.5 and openldap2-2.1.4 with the help of the
howto avaible at idealx. I can add users / delete them - login in pver
ssh - get the right groups and id's... - nearly everything works.

But when i try to login with a W2K Workstation (havn't tested other
OS'es) then i can type in the username/password - then it takes about 5
minutes (you can still see the username/password dialog grayed) and then
it tells me that it couldn't load my profile. I have the right
permissions set at the profile directory.

in the ldap.log file i get such messages:
May 28 16:01:54 zion slapd[18348]: <= bdb_equality_candidates:
index_param failed (18)
May 28 16:01:57 zion last message repeated 7 times
May 28 16:04:11 zion slapd[18348]: <= bdb_equality_candidates:
index_param failed (18)

why ?

is it a failure with the indexes in sldap.conf ?
i have:

index   objectClass eq
index   default sub
index uid   pres,eq
## support pdb_getsampwrid()
index rid   eq
## posixGroup entries in the directory as well
index uidNumber eq
index gidNumber eq
index cneq
index memberUid eq


in the log.smbd i get:
[2003/05/28 16:06:00, 2] smbd/reply.c:reply_special(92)
  netbios connect: name1=ZION name2=NOMICRO
[2003/05/28 16:06:00, 2] smbd/reply.c:reply_special(111)
  netbios connect: local=zion remote=nomicro
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:ldap_open_connection(226)
  ldap_open_connection: connection opened
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:ldap_connect_system(260)
  ldap_connect_system: succesful connection to the LDAP server
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:ldap_search_one_user(272)
  ldap_search_one_user: searching
for:[(&(uid=nomicro$)(objectclass=sambaAccount))]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [uid] = [nomicro$]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:init_sam_from_ldap(505)
  Entry found for user: nomicro$
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [pwdLastSet] = [1053939659]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [logonTime] = [0]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [logoffTime] = [0]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [kickoffTime] = [0]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [pwdCanChange] = [0]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [pwdMustChange] = [0]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [cn] = [NOMICRO$]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(364)
  get_single_attribute: [homeDrive] = []
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(364)
  get_single_attribute: [smbHome] = []
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(364)
  get_single_attribute: [scriptPath] = []
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(364)
  get_single_attribute: [profilePath] = []
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [description] = [Computer]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(364)
  get_single_attribute: [userWorkstations] = []
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [rid] = [3000]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [primaryGroupID] = [2007]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [lmPassword] = []
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [ntPassword] = []
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [acctFlags] = [[W  ]]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:ldap_open_connection(226)
  ldap_open_connection: connection opened
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:ldap_connect_system(260)
  ldap_connect_system: succesful connection to the LDAP server
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:ldap_search_one_user(272)
  ldap_search_one_user: searching
for:[(&(uid=pichler)(objectclass=sambaAccount))]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [uid] = [pichler]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:init_sam_from_ldap(505)
  Entry found for user: pichler
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [pwdLastSet] = [0]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [logonTime] = [0]
[2003/05/28 16:06:00, 2] passdb/pdb_ldap.c:get_single_attribute(370)
  get_single_attribute: [logoffT

[Samba] "lprm command" problem

[Manuel Arenaz]

Hello, 

I have successfully installed samba  2.2.8 
(with CUPS) as a windows printing server using the 
print$ share. The W2000 clients are able to send 
jobs to a printer and view the corresponding 
printer queue.

However, when I try to delete a job from the 
windows client, I get the error "bad command".
My printers share in smb.conf is:

[printers]
  comment = All Printers
  path = /tmp
  create mask = 0700
  browseable = yes
  guest ok = yes
  writable = no
  printable = yes
  print command = /usr/bin/lp -d %p -o raw %s
  lpq command = /usr/bin/lpstat -o %p
  lprm command = /usr/bin/cancel %p-%j

The command "/usr/bin/cancel" works fine in the 
linux server. May the error be due to bad 
replacement of the "%p-%j" string?

Any help would be appreciated.

Thanks in advance,

   Manuel Arenaz




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] WINT-NT is working as PDC and Redhat Linux Samba BDC andhow to use rsync?

[Yeri Swamy]

Can anybody give me a hint how to set up Samba BDC(RedHat 9.0) with 
rsync-ing WIN-NT PDC so that if WIN-NT PDC is down all the clients can 
still get Authentication service from Samba BDC(RedHat 9.0). i have seen 
in Samba documentation that it can be done using rsync but nowhwere it 
is clearly explained howto do it.. I ran out of gas by looking through 
google also... :-(

With Best Regards
YS
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba Directory Permissions

[John H Terpstra]

On Wed, 28 May 2003, Greg Hirsch wrote:

>
> Slight correction: Write permission doesn't necessarily grant delete
> permission.  If a user has write permission on a file but not on the dir
> it resides in, the user can modify the file but can't delete it.
> Permissions of 755 on a directory and 777 on specific files inside it
> will allow everyone to modify those files, but only the directory owner
> to create or delete them.

Correct.

So if the directory the file is in is writable to the user, AND the file
is writable to the user then that user can delete it.

But if the directory is read-only to the user, but the file is writable to
that user, then the user can zap all the contents of the file.

The fact of inability to delete it is then a moot point!

- John T.

>
> -Greg
>
> -Original Message-
> From: John H Terpstra [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, May 28, 2003 8:53 AM
> To: Manuel Linder
> Cc: [EMAIL PROTECTED]
> Subject: Re: [Samba] Samba Directory Permissions
>
>
> On Wed, 28 May 2003, Manuel Linder wrote:
>
> > Hello,
> >
> > I installed samba on a linux-machine is it now possible to prohibit the
> > samba users from deleting and creating new directories but allow them to
> > save and edit files in the directories.
>
> This question has been asked many times on this list. I encourage posters
> to do some homework before posting repetitive questions that can irritate
> some of our readers.
>
> If I have edit (write) capability, then I can remove all content band
> write and empty file. In that case I have deleted all content!
>
> Under Unix - if you have write capability to a file you can delete it.
>
> If anyone can come up with a way around this then judging by comments on
> this list, the IT industry needs you!
>
>
> - John T.
>

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba2.2.8a+Netscape DS4.16:Bind failed

[[EMAIL PROTECTED]]

Hello

I'm trying to setup samba/linux file server , with authentification made by Netscape 
directory server.
The steps I follow:

1 Installing Netscape DS , for now de directory server in empty .
  the only users are : admin  and  manager each one has his
  passwd.  

2 Installing Samba2.2.8a (--with-ldapsam support)

3 modifiying smb.conf   to
  
  [global]
 ldap server = localhost
 ldap port   = 389
 ldap suffix = "o=post1,c=fr"
 ldap ssl=no
 ldap admin dn   = "cn=admin, o=post1,c=fr"
 netbios name=Serveur1
 security=user
 host allow  =192.30.254. 
 workgroup   = Group1
 os level=33
 encrypt passwords=yes
 log file=/dev/tty12
  [Public] 

4 I put the admin passwd in secrets.tdb by doing
 smbpasswd -w 'adminpasswd'

5 to test my setting  :
 smbclient -L serveur1 -N

 I got the following :

   added interface ip=..
   Got a positive name query response from 172.
   session setup failed :NT_STATUS_LOGON_FAILURE

 and the log messages whers saying :

#passdb/pdb_ldap.c:ldap_connect_system(316)
#  ldap_connect_system:Binding to ldap server
  as "cn=admin,o=post1,c=fr"
#passdb/pdb_ldap.c:ldap_connect_system(327)
  ldap_connect_system:Bind failed no such object.

Thank you for your help   


** SPECIAL ADSL **
L'ADSL à partir de 15,95 EUR/mois et le modem ADSL offert ?  C'est en exclusivité chez 
Tiscali !
Pour profiter de cette offre, cliquez ici: http://register.tiscali.fr/adsl/
Offre soumise à conditions.


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba Directory Permissions

[Greg Hirsch]

Slight correction: Write permission doesn't necessarily grant delete permission.  If a 
user has write permission on a file but not on the dir it resides in, the user can 
modify the file but can't delete it.  Permissions of 755 on a directory and 777 on 
specific files inside it will allow everyone to modify those files, but only the 
directory owner to create or delete them.

-Greg

-Original Message-
From: John H Terpstra [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 28, 2003 8:53 AM
To: Manuel Linder
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] Samba Directory Permissions


On Wed, 28 May 2003, Manuel Linder wrote:

> Hello,
>
> I installed samba on a linux-machine is it now possible to prohibit the
> samba users from deleting and creating new directories but allow them to
> save and edit files in the directories.

This question has been asked many times on this list. I encourage posters
to do some homework before posting repetitive questions that can irritate
some of our readers.

If I have edit (write) capability, then I can remove all content band
write and empty file. In that case I have deleted all content!

Under Unix - if you have write capability to a file you can delete it.

If anyone can come up with a way around this then judging by comments on
this list, the IT industry needs you!


- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Cross Subnet WINS?

[John H Terpstra]

On Wed, 28 May 2003, George Kasica wrote:

> Not sure if this would apply but a while ago in a Cisco router world,
> I need the command
>
> ip helper-address A.B.C.D <= Your SAMBA/WINS Server IP Address
>
> to get he various wins boxes to be seen across the network. I put one
> in for each WINS Server on each router and all was well.

Please can you explain how that works.

- John T.

>
> George
>
> >Have you walked through the DIAGNOSIS.txt troubleshooting guide?
> >This is test 8, I believe.
> >Joel
> >
> >On Tue, May 27, 2003 at 06:58:04PM -0500, ganapathy murali krishnan wrote:
> >>
> >> I have a question about WINS across subnets. I am
> >> *not* interested in cross subnet browsing.
> >>
> >> SAMBASERVER is my PDC as well as WINS.
> >> I run "net view \\CLIENT" on a windows machine
> >> A which is on the same subnet as my SAMBASERVER
> >> and everything works fine.
> >> If I run the same command on a windows machine B
> >> on another subnet it does not work. The network
> >> interface on B has been configured to use SAMBASERVER
> >> (rather its IP address) as the WINS server.
> >>
> >> I dont know if this is important. But A is on a wired
> >> network, and B is on a wireless network.
> >>
> >> - Murali
> >>
> >> --
> >> To unsubscribe from this list go to the following URL and read the
> >> instructions:  http://lists.samba.org/mailman/listinfo/samba
>
> George, MR. Tibbs, Nazerene, Ginger/The Beast Kasica(8/1/88-3/19/01, 1/17/02-)
> Jackson, WI USA
> [EMAIL PROTECTED]
> http://www.netwrx1.com/georgek
> ICQ #12862186
>
>   Zz
>zZ
> |\ z_,,,---,,_
> /,`.-'`'_   ;-;;,_
>|,4-  ) )-,_..;\ (  `'_'
>   '---''(_/--'  `-'\_)
>

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] vfs modules audit + recycle

[John H Terpstra]

On Wed, 28 May 2003, Denis Heitbrock wrote:

> hi,
>
> i use samba 2.2.8a
> on a share i wanted to use the audit.so and recycle.so modules. in my
> smb.conf i added the following share

With Samba-2.2.8 you can have only 1 VFS module per share. With Samba-3
you can load multiple VFS modules.

- John T.

>
> [dir]
> comment = dir
> valid users = @edv
> writeable = yes
> create mode = 777
> path = /data/
> directory mode = 777
> vfs object = /usr/lib/samba/vfs/audit.so
> vfs object = /usr/lib/samba/vfs/recycle.so
> vfs options = /etc/samba/recycle.conf
>
> with this config the recycle bin is running but there are no audit
> information logged in the messages file. when i comment out the recycle
> lines the audit module is running fine. i also tried this config:
>
> [dir]
> comment = dir
> valid users = @edv
> writeable = yes
> create mode = 777
> path = /data/
> directory mode = 777
> vfs object = /usr/lib/samba/vfs/audit.so /usr/lib/samba/vfs/recycle.so
> vfs options = /etc/samba/recycle.conf
>
> but when i then start samba i cant get access to the directory.
> could anyone help me with this problem? thxxx for help.
>
> greetz
> denis
>
>

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 2.2.8a Install

[[EMAIL PROTECTED]]

New version is in /usr/local/samba/...
smbd is in /usr/local/samba/bin/

Your startup scripts are probably still refering to a smbd in a different location.


 [EMAIL PROTECTED] wrote:

I just downloaded and installed the above tar ball, all went fine, all runs,
>hits no errors (./configure, make, make install bin, make install_man).
>When it finished, it typed, service smb stop, service smb restart, then
>smbclient -L firewall, which still reported 2.2.7a.
>So I tried it another way, /etc/rc.d/init.d/smbd stop/start...Smbclient -L
>firewall yielded the same version number, ditto after a reboot.
>As far as I can tell, the install was fine, but I still can't seem to get
>proof that the new version is running. Now the old version is fine, and I
>don't really want to make revert and take a chance of messing that up (I
>know, but I'm cautious).
>Any clue how to get the new version to come up?
>
>Kev
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba Directory Permissions

[John H Terpstra]

On Wed, 28 May 2003, Manuel Linder wrote:

> Hello,
>
> I installed samba on a linux-machine is it now possible to prohibit the
> samba users from deleting and creating new directories but allow them to
> save and edit files in the directories.

This question has been asked many times on this list. I encourage posters
to do some homework before posting repetitive questions that can irritate
some of our readers.

If I have edit (write) capability, then I can remove all content band
write and empty file. In that case I have deleted all content!

Under Unix - if you have write capability to a file you can delete it.

If anyone can come up with a way around this then judging by comments on
this list, the IT industry needs you!


- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] vfs modules audit + recycle

[Bob Crandell]

Denis Heitbrock ([EMAIL PROTECTED]) wrote:
>
>hi,
>
>i use samba 2.2.8a
>on a share i wanted to use the audit.so and recycle.so modules. in my
>smb.conf i added the following share
>
>[dir]
>comment = dir
>valid users = @edv
>writeable = yes
>create mode = 777
>path = /data/
>directory mode = 777
>vfs object = /usr/lib/samba/vfs/audit.so
>vfs object = /usr/lib/samba/vfs/recycle.so
>vfs options = /etc/samba/recycle.conf
>
>with this config the recycle bin is running but there are no audit
>information logged in the messages file. when i comment out the recycle
>lines the audit module is running fine. i also tried this config:
>
>[dir]
>comment = dir
>valid users = @edv
>writeable = yes
>create mode = 777
>path = /data/
>directory mode = 777
>vfs object = /usr/lib/samba/vfs/audit.so /usr/lib/samba/vfs/recycle.so
>vfs options = /etc/samba/recycle.conf
>
>but when i then start samba i cant get access to the directory.
>could anyone help me with this problem? thxxx for help.
>
>greetz
>denis
>
>

Hi,

You can't run 2 different modules in the same share in 2.2.8a.  I think I saw that
will be available in version 3.

--
Bob Crandell
Assured Computing
When you need to be sure.
[EMAIL PROTECTED]
www.assuredcomp.com
Voice - 541-689-9159
FAX - 541-463-1627
Eugene, Oregon


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba