date:20030610

Phillippe,

Since you have found the problem, please share with us your solution.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Final stable version

On Tue, 10 Jun 2003, Fabricio Adorno wrote:

 Hi all.

 I would like to know if someone (maybe from samba team) can tell me when a
 final stable version of samba 3 is going to be released (within a month, two,
 three . . .).

Samba-3.0.0 will go into final release as soon as it is ready. How long
that takes depends on what bugs get reported during beta test. We would
like to get it out as quickly as possible. I hope it will be out in 4 - 6
weeks, but it all depends on what bugs get reported and how long it takes
to fix them.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba 3.0 PDC on debian linux

2003-06-10 Thread Philippe Dhont (Sea-ro)

Well, the solution is pretty simple,
I overlooked that my root was *not* in the smbpasswd file, as soon as it was
in the file, everything worked fine.
The only thing that is not working is the add user script, don't know why
but i have to do this manually.

GreetZ!

Ph.
 


 


-Original Message-
From: John H Terpstra [mailto:[EMAIL PROTECTED] 
Sent: dinsdag 10 juni 2003 15:11
To: Philippe Dhont (Sea-ro)
Cc: '[EMAIL PROTECTED]'

Phillippe,

Since you have found the problem, please share with us your solution.

- John T.
--
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

AW: [Samba] Problems with machine accounts

2003-06-10 Thread Kopmann, Goetz

Hi there,

after several (pretended successful) rejoins to the domain it does not work
and we decided to give up the domain login concept and simply map the
shares by a batch file now. We also had to disable the downloadable printer
driver option, because not all drivers work correctly :-(

-Ursprüngliche Nachricht-
Von: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Gesendet: Dienstag, 10. Juni 2003 14:57
An: [EMAIL PROTECTED]
Betreff: [Samba] Problems with machine accounts


Hi all,

I'm really banging my head against the wall here.
I'm running Samba v2.2.8a as a PDC on OpenBSD v3.3-current, and I 
haven't
been able to join my Win2000 machines to the domain.

I have tried both manually and automatically to add machine accounts 
to smbpasswd file to no avail. It always takes 2-3 minutes for the 
Win2k machine to join the domain, suggesting that it really cannot.
This is confirmed after rebooting the Windows client when I get 
the error message
saying that the computer accout is missing or incorrect password.

Samba log files show nothing of importance to me.

Anyone have experience with Samba PDC and OpenBSD v3.3?

/etc/samba/smb.conf:
[global]
workgroup = FINITLAW
netbios name = GATEKEEPER
server string = FinitLaw File Server
interfaces = 192.168.0.1/24
encrypt passwords = Yes
passwd chat = Changing local password for*\n *New  password* 
%n\n $
unix password sync = Yes
log file = /var/log/smbd.%m
max log size = 50
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 
SO_SNDBUF=81$
logon script = login.bat
logon path = \\%N\profiles\%u
logon drive = H:
logon home = \\gatekeeper\%u
domain logons = Yes
domain admin group = root @domainadmin
os level = 64
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
guest account = smbguest
#   add user script = /usr/sbin/useradd -d /var/empty -g 300 
-s /sbin/nolog$
null passwords = yes

/etc/passwd:
COMPAQ3$:*:2003:300:Workstation:/var/empty:/sbin/nologin





===
EASY and FREE access to your email anywhere: http://Mailreader.com/
===


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] ./configure problems using --with-pam under Debian stable.

2003-06-10 Thread kend

Hey, all.  I'm running Debian stable, and when I try to
./configure --with-pam
for either 2.2.7a or 2.2.8a, I wind up with
[...]
checking whether struct passwd has pw_age... (cached) no
checking for poptGetContext in -lpopt... (cached) no
checking whether to use included popt... ./popt
checking configure summary... configure: error: summary failure. Aborting
config

There don't appear to be any other overt errors, and this happens on two
different XFS-enabled Debian boxes.  When I configure on my unstable box,
it seems to work fine.  I really kind of need PAM support, but I also need
XFS ACL support -- if I do a compile using
--with-acl-support --with-pam
on my unstable, will it run properly on my stable?  Or will the lack of
libraries it compiled against give it grief?  And, of course, the best of
all worlds would be if anyone could tell me what's wrong with my stable.

Thanks...

Ken D'Ambrosio
Sr. SysAdmin,
Xanoptix, Inc.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] ./configure problems using --with-pam under Debian stable.

2003-06-10 Thread Gareth Davies

 Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 10, 2003 3:09 PM
Subject: [Samba] ./configure problems using --with-pam under Debian stable.

 Hey, all.  I'm running Debian stable, and when I try to
 ./configure --with-pam
 for either 2.2.7a or 2.2.8a, I wind up with
 [...]
 checking whether struct passwd has pw_age... (cached) no
snip

Why not just use the Debian packages for 2.2.8a?

I'm pretty sure they have PAM support.

http://www.mirror.ac.uk/sites/ftp.samba.org/Binary_Packages/Debian/dists/sta
ble/main/binary-i386/

Gareth Davies
Willowbrook I.T.
Ext. 235

*
This email has been checked by the altohiway e-Sweeper Service
*

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Looking for folks with BIG Samba +/orSamba-LDAPinstallations

2003-06-10 Thread Tori Williamson

Hi Anthony,

The best place that I can point you for a good howto or instructions on
setting up Samba with LDAP is http://samba.idealx.com.

Bear in mind that if you are going to use eDirectory, you are in for a long
trip. The best LDAP server to use currently with Samba is OpenLDAP or
Netscape Directory Server, as eDirectory has some problems with the
sambaAccount objectClass Attributes.

Good luck!

.t
- Original Message -
From: Anthony Hess [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 10, 2003 1:03 AM
Subject: [Samba] Looking for folks with BIG Samba +/or
Samba-LDAPinstallations


 Hello all,

 I've been doing my share of googling on this topic, but I am looking for
 large installations of Samba (preferably Samba/LDAP).  I'd hope to find
some
 people in the tens of thousands of users range.  If you are on a
University
 campus, even better!

 Anyway, I'd like to discuss some questions with anyone who meets that
 criteria.  If you could email me off list I'd really appreciate it!

 Thanks,

 Anthony Hess
 University of Arizona

 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Outlook .pst on a samba share; do or don't?


 Hi listers.

 People here are trying to push me into moving the Outlook .psts on a samba
share for back-up reasons. I'd like to hear your experience about this: is
it feasible in the size of 20 users with 400...800MB each .pst? Any special
settings on samba side? Something special that I should pay attention to? Or
is just NO?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] SAMBA 3.0 on HPUX as an ADS Domain Member

2003-06-10 Thread Drew . Zeller

Hi,

I was just wondering if anyone has tried setting up any of the Samba 3.0,
alpha or beta versions, as an ADS domain member from HPUX 11.0 or 11i?  Is
it possible to use the Kerberos and LDAP libraries from the HP application
CD's or do we have to download the MIT and OpenLDAP libraries?

Thanks in advance.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] 2.2.8a with XFS and LDAP - What should and wont work?

2003-06-10 Thread Gareth Blades

I have Samba 2.2.8a running on RH9 with XFS setup and most things appear to
be working but there are a couple of things not behaving as expected.

My account has been created on the server as a member of the Admisistrators
and Domain Admins groups.
I have the following line in by smb.conf file:-
domain admin group =  @Domain Admins 

Working
---
Printing
Changing permissions on files/directories that I own
Adding machines to the domain automatically (using my account)

Not Working
---
Creating user accounts via the Win2K tools (I know from the Samba-Ldap-PDC
howto that this wont work)
I cannot take ownership of a file even if the file has the domain admins
group as full control.
I cannot change permissions of a file even if the domain admins group has
full control (which includes the change permissions right)

Should I be able to do the last two?

Thanks


--
Gareth Blades
Webscreen Technology
Index House
St Georges Lane
Ascot, Berkshire
SL5 7EU, UK
Tel +44 (0) 1344 636339
http://www.webscreen-technology.com


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Access Denied setting Directory Access Permissions

Hello *,

i've got a debian samba 3.0alpha23 with ldapsam.
my problem is that i can't set directory permissions. i alwasy get
access denied.

what i have:

svpdc:/etc/samba# smbgroupedit -v
params.c:Parameter() - Ignoring badly formed line in configuration file:
ldap trust ids
NT group (SID) - Unix group
System Operators (S-1-5-32-549) - -1
Replicators (S-1-5-32-552) - -1
Guests (S-1-5-32-546) - -1
kollegstufe (S-1-5-21-3839733233-2759951301-2176690758-3011) -
kollegstufe
root (S-1-5-21-3839733233-2759951301-2176690758-1001) - root
Domain Admins (S-1-5-21-3839733233-2759951301-2176690758-512) - root
Domain Guests (S-1-5-21-3839733233-2759951301-2176690758-514) - -1
Power Users (S-1-5-32-547) - -1
stundenplan (S-1-5-21-3839733233-2759951301-2176690758-3013) -
stundenplan
users (S-1-5-21-1904509300-1595774664-1972565418-1201) - users
Domain Admins (S-1-5-21-1904509300-1595774664-1972565418-512) - root
Domain Guests (S-1-5-21-4168099664-486183441-673156717-514) - -1
Print Operators (S-1-5-32-550) - -1
Administrators (S-1-5-32-544) - -1
Domain Guests (S-1-5-21-1904509300-1595774664-1972565418-514) - -1
sekretariat (S-1-5-21-3839733233-2759951301-2176690758-3007) -
sekretariat
Account Operators (S-1-5-32-548) - -1
Domain Users (S-1-5-21-3839733233-2759951301-2176690758-513) - users
Backup Operators (S-1-5-32-551) - -1
direktorat (S-1-5-21-3839733233-2759951301-2176690758-3009) -
direktorat
Users (S-1-5-32-545) - users

i'm wondering why some groups are listed more than once. how can i find
out which group is actually used and how do i get rid of the unused ones
? i know i can do smbgroupedit -x, but there i can't specify a SID.

svpdc:~# pdbedit -v -l root
params.c:Parameter() - Ignoring badly formed line in configuration file:
ldap trust ids
Unix username:root
NT username:
Account Flags:[U  ]
User ID/Group ID: 0/0
User SID: S-1-5-21-3839733233-2759951301-2176690758-1000
Primary Group SID:S-1-5-21-3839733233-2759951301-2176690758-1001
Full Name:root
Home Directory:   \\svpdc\root
HomeDir Drive:
Logon Script:
Profile Path: \\svpdc\root\profile
Domain:   SVFMG
Account desc:
Workstations:
Munged dial:
Logon time:   0
Logoff time:  Fri, 13 Dec 1901 21:45:51 GMT
Kickoff time: Fri, 13 Dec 1901 21:45:51 GMT
Password last set:Tue, 10 Jun 2003 16:15:24 GMT
Password can change:  Tue, 10 Jun 2003 16:15:24 GMT
Password must change: Fri, 13 Dec 1901 21:45:51 GMT

so user root is not a member of the domain admins. this might be the
reason why i get access denied trying to apply direcotry permissions.
i though mapping group root to NT Domain Admin should be enough, but it
doesn't seem to be. 

can anybody help me on this issue ?!?

thanks a lot

Holger Brueckner
net-labs Systemhaus GmbH







-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 2.2.7 as PDC causing BSOD on 2K domain logon

2003-06-10 Thread Anders

Hello,

Have wrestled this one for about a week, now, getting frustrated ;-)

Running samba as PDC for my domain (cf. smb.conf further down)
When logging in on my 2K Pro machine, I first get a can't find roaming 
profile, attempting local profile-error, but logon using my user's smb 
account accepts only the correct password and so the identification part 
works well.

Next, the screen on my 2K plays the chimes, displays the background for a 
little while, and then the Blue Screen Of Death with the brief text ... 
the windows logon process terminated unexpectedly ... and subsequent 
automatic reboot.

I'd appreciate any help.

I have some thoughts of what could be wrong, but I'm at road's end trying 
to do something about it, not even knowing if it's the true problem.

Oh, and btw, I've tried two different 2K machines, same result.

Possible errors:

* the user anders-l exists only on the PDC and not locally on the 2K 
machine, hence it could die trying to find a local profile.

* the owner structure on the PDC /home/%U stuff could be messed up (see 
below) (not sure how this would cause the BSOD though)

* the //dl280/profile share doesn't show when listing the shares (see 
below), should it? (also unsure how this would cause the BSOD)

* I've made a darn stupid hum-dinger of a rookie error (and really, what 
better way to expose your ignorance than to post to a list - right?)

Follows some helpful(?) stats:

*

$ smbclient -L //dl380 -U anders-l
added interface ip=192.168.0.191 bcast=192.168.0.255 nmask=255.255.255.0
Password:
Domain=[PN-TRADING] OS=[Unix] Server=[Samba 2.2.7a-security-rollup-fix]

Sharename  Type  Comment
-    ---
netlogon   Disk  Network Logon Service (Samba)
IPC$   IPC   IPC Service (PDC on dl380 (Linux with samba version: 
-hidden-)
ADMIN$ Disk  IPC Service (PDC on dl380 (Linux with samba version: 
-hidden-)
anders-l   Disk  Home Directories

Server   Comment
----
DL380PDC on dl380 (Linux with samba version: 
-hidden-

WorkgroupMaster
----
PN-TRADING   DL380



a trimmed smb.conf, for brevity. The complete one posted on 
http://www.dsv.su.se/~anders-l/samba/smb.conf (full of crap comments, 
work notes etc, just in case you'll need to see it.) This one is the same, 
just with all comments grep -v:ed

[global]
   workgroup = pn-trading
   server string = PDC on %L (Linux with samba version: -hidden-)
   hosts allow = 192.168.0. 127.
   printing = cups
   log file = /var/log/samba/%m.log
   max log size = 1024
   security = user
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd
   pam password change = yes
   username map = /etc/samba/smbusers
   obey pam restrictions = yes
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   local master = yes
   os level = 65
   domain master = yes
   preferred master = yes
   domain logons = yes
   logon home = \\%L\%U
   logon path = \\%L\profiles\%U
   dns proxy = no
   status = yes
   domain admin group = @ntadmin
   add user script = /usr/sbin/adduser -n -g machines -c Machine -d 
/dev/null -s /sbin/nologin %m\$
   share modes=yes

[homes]
   comment = Home Directories
   path = /home/%U
   browseable = no
   writable = yes
   valid users = %S
   create mode = 0664
   directory mode = 0775
   guest ok = no
   read only = no
   create mask = 0700
   directory mask = 0700
   oplocks = false
   locking = yes

[netlogon]
comment = Network Logon Service (Samba)
path = /home/samba/netlogon
read only = yes
share modes = no
write list = ntadmin

[profiles]
comment = The roaming profile share.
path = //home/nt-profiles/%U
read only = no
create mask = 0600
directory mask = 0700
browseable = no

[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
   guest ok = no
   writable = no
   printable = yes



the log file /var/log/samba/ibm.log (the 2K's netbios name)
contains these very cryptic messages, that aren'r generated from a 
pattern I can discern (i.e. not every time I get the BSOD, for instance, 
but could nonetheless be a result thereof. I include them for reference.

[2003/06/10 10:09:30, 0] lib/util_sock.c:read_data(436)
  read_data: read failure for 4. Error = Connection reset by peer
[2003/06/10 10:10:57, 0] lib/util_sock.c:read_data(436)
  read_data: read failure for 4. Error = Connection reset by peer
[2003/06/10 10:27:28, 0] lib/util_sock.c:read_data(436)
  read_data: read failure for 4. Error = Connection reset by peer
[2003/06/10 10:47:37, 0] smbd/service.c:make_connection(252)
  ibm (192.168.0.190) couldn't find service 
::{2227a280-3aea-1069-a2de-08002b30309d}
[2003/06/10 11:18:45, 0] lib/util_sock.c:read_data(436)

Re: [Samba] Looking for folks with BIG Samba+/orSamba-LDAPinstallations

2003-06-10 Thread Anthony Hess

Thanks for the response - actually we have an iPlanet server running on
Solaris 9 that we are using with Samba to allow for home directory access
(mostly for students, but also fac/staff who want it).  The machine has
about 500 user accounts or so.  We are also looking at a few other things.

My questions mostly aren't technical, however, but rather queries as to what
kind of experiences people are having and if indeed there are deployments of
this size out there using LDAP.

(its mostly a political thing :) )

Tony

- Original Message - 
From: Tori Williamson [EMAIL PROTECTED]
To: Anthony Hess [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Tuesday, June 10, 2003 7:14 AM
Subject: Re: [Samba] Looking for folks with BIG Samba
+/orSamba-LDAPinstallations


 Hi Anthony,

 The best place that I can point you for a good howto or instructions on
 setting up Samba with LDAP is http://samba.idealx.com.

 Bear in mind that if you are going to use eDirectory, you are in for a
long
 trip. The best LDAP server to use currently with Samba is OpenLDAP or
 Netscape Directory Server, as eDirectory has some problems with the
 sambaAccount objectClass Attributes.

 Good luck!

 .t
 - Original Message -
 From: Anthony Hess [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Tuesday, June 10, 2003 1:03 AM
 Subject: [Samba] Looking for folks with BIG Samba +/or
 Samba-LDAPinstallations


  Hello all,
 
  I've been doing my share of googling on this topic, but I am looking for
  large installations of Samba (preferably Samba/LDAP).  I'd hope to find
 some
  people in the tens of thousands of users range.  If you are on a
 University
  campus, even better!
 
  Anyway, I'd like to discuss some questions with anyone who meets that
  criteria.  If you could email me off list I'd really appreciate it!
 
  Thanks,
 
  Anthony Hess
  University of Arizona
 
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  http://lists.samba.org/mailman/listinfo/samba
 

 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Idmap probs with smb3beta

2003-06-10 Thread Collen

Well just trying to get the new beta working..

if i use the passwd plain text file, no probs.
but i realy like to use the tdbsam (passdb.tdb) file..
i put passdb backend = tdbsam:/path to passdb.tdb
now my error log complains about: Idmap gid range missing  uid range missing.

i mapped the ntdomain groups to unix groups..

also i get these same errors using pdbedit...

second and more problematic is that, as soon as i use tdbsam the domain 
goes down,
can't look around, no server in the list...

so how can i map these missing gid  uid ranges.. ??
i thought you mapped your id's through the 'net command'  and with pdbedit ?
Got some tips ?

L8r

Collen

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 2.2.7 as PDC causing BSOD on 2K domain logon

2003-06-10 Thread Tom McKellips

On Tue, 10 Jun 2003 16:30:11 +0200 (CEST), Anders wrote
 Hello,
 
 Have wrestled this one for about a week, now, getting frustrated ;-)
 
 Running samba as PDC for my domain (cf. smb.conf further down)
 When logging in on my 2K Pro machine, I first get a can't find 
 roaming profile, attempting local profile-error, but logon using my 
 user's smb account accepts only the correct password and so the 
 identification part works well.
 
 Next, the screen on my 2K plays the chimes, displays the background 
 for a little while, and then the Blue Screen Of Death with the brief 
 text ... the windows logon process terminated unexpectedly ... and 
 subsequent automatic reboot.
 
 I'd appreciate any help.
 
 I have some thoughts of what could be wrong, but I'm at road's end 
 trying to do something about it, not even knowing if it's the true problem.
 
 Oh, and btw, I've tried two different 2K machines, same result.
 
 Possible errors:
 
 * the user anders-l exists only on the PDC and not locally on the 2K 
 machine, hence it could die trying to find a local profile.
 
 * the owner structure on the PDC /home/%U stuff could be messed up 
 (see below) (not sure how this would cause the BSOD though)
 
 * the //dl280/profile share doesn't show when listing the shares 
 (see below), should it? (also unsure how this would cause the BSOD)
 
 * I've made a darn stupid hum-dinger of a rookie error (and really,
  what better way to expose your ignorance than to post to a list - 
 right?)
 
 Follows some helpful(?) stats:
 
 *
 
 $ smbclient -L //dl380 -U anders-l
 added interface ip=192.168.0.191 bcast=192.168.0.255 nmask=255.255.255.0
 Password:
 Domain=[PN-TRADING] OS=[Unix] Server=[Samba 2.2.7a-security-rollup-fix]
 
 Sharename  Type  Comment
 -    ---
 netlogon   Disk  Network Logon Service (Samba)
 IPC$   IPC   IPC Service (PDC on dl380 (Linux 
 with samba version: -hidden-)ADMIN$ Disk  IPC 
 Service (PDC on dl380 (Linux with samba version: -hidden-)   
  anders-l   Disk  Home Directories
 
 Server   Comment
 ----
 DL380PDC on dl380 (Linux with samba version: 
 -hidden-
 
 WorkgroupMaster
 ----
 PN-TRADING   DL380
 
 
 
 a trimmed smb.conf, for brevity. The complete one posted on 
 http://www.dsv.su.se/~anders-l/samba/smb.conf (full of crap 
 comments, work notes etc, just in case you'll need to see it.) This 
 one is the same, just with all comments grep -v:ed
 
 [global]
workgroup = pn-trading
server string = PDC on %L (Linux with samba version: -hidden-)
hosts allow = 192.168.0. 127.
printing = cups
log file = /var/log/samba/%m.log
max log size = 1024
security = user
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
pam password change = yes
username map = /etc/samba/smbusers
obey pam restrictions = yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
local master = yes
os level = 65
domain master = yes
preferred master = yes
domain logons = yes
logon home = \\%L\%U
logon path = \\%L\profiles\%U
dns proxy = no
status = yes
domain admin group = @ntadmin
add user script = /usr/sbin/adduser -n -g machines -c Machine -d 
 /dev/null -s /sbin/nologin %m\$
share modes=yes
 
 [homes]
comment = Home Directories
path = /home/%U
browseable = no
writable = yes
valid users = %S
create mode = 0664
directory mode = 0775
guest ok = no
read only = no
create mask = 0700
directory mask = 0700
oplocks = false
locking = yes
 
 [netlogon]
 comment = Network Logon Service (Samba)
 path = /home/samba/netlogon
 read only = yes
 share modes = no
 write list = ntadmin
 
 [profiles]
 comment = The roaming profile share.
 path = //home/nt-profiles/%U
 read only = no
 create mask = 0600
 directory mask = 0700
 browseable = no
 
 [printers]
comment = All Printers
path = /var/spool/samba
browseable = no
guest ok = no
writable = no
printable = yes
 
 
 
 the log file /var/log/samba/ibm.log (the 2K's netbios name)
 contains these very cryptic messages, that aren'r generated from a 
 pattern I can discern (i.e. not every time I get the BSOD, for 
 instance, but could nonetheless be a result thereof. I include them 
 for reference.
 
 [2003/06/10 10:09:30, 0] lib/util_sock.c:read_data(436)
   read_data: read failure for 4. Error = Connection reset by peer
 [2003/06/10 10:10:57, 0] lib/util_sock.c:read_data(436)
   read_data: read failure for 4. Error = Connection reset by peer
 [2003/06/10 10:27:28, 0] lib/util_sock.c:read_data(436)
   read_data: read failure for 4. Error = Connection reset by peer

RE: [Samba] SAMBA 3.0 on HPUX as an ADS Domain Member

2003-06-10 Thread Ladner, Eric (Eric.Ladner)


Samba 3.0 alpha 24 (I think) on HP-UX 11.0 works fine as an ADS member.

I haven't used the LDAP support.  http://docs.hp.com has some info on
using LDAP with Microsoft ADS servers, but you have to install something
on the Windows side (Unix Extensions for ADS, or something like that) to
use ADS as an authentication/user creation source.  It's outlined in the
LDAP docs from HP.

Eric

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, June 10, 2003 09:09
To: [EMAIL PROTECTED]
Subject: [Samba] SAMBA 3.0 on HPUX as an ADS Domain Member


Hi,

I was just wondering if anyone has tried setting up any of the Samba
3.0, alpha or beta versions, as an ADS domain member from HPUX 11.0 or
11i?  Is it possible to use the Kerberos and LDAP libraries from the HP
application CD's or do we have to download the MIT and OpenLDAP
libraries?

Thanks in advance.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] ./configure problems using --with-pam under Debian stable.

2003-06-10 Thread kend

 Hey, all.  I'm running Debian stable, and when I try to
 ./configure --with-pam
 for either 2.2.7a or 2.2.8a, I wind up with
 [...]
 checking whether struct passwd has pw_age... (cached) no
 snip

 Why not just use the Debian packages for 2.2.8a?

 I'm pretty sure they have PAM support.

It might have PAM support, but it's unlikely it'd have XFS support. 
HOWEVER, thanks to
 http://lists.debian.org/debian-alpha/2001/debian-alpha-200106/msg00143.html
I started plugging -dev packages in, and when I loaded up (big surprise
here, I guess) libpam0g-dev, the configure worked like a champ.

-Ken


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Access Denied setting Directory Access Permissions

u upgraded to 3.0beta1, but i'm still having the same problem.



On Tue, 2003-06-10 at 16:29, Holger Brückner wrote:
 Hello *,
 
 i've got a debian samba 3.0alpha23 with ldapsam.
 my problem is that i can't set directory permissions. i alwasy get
 access denied.
 
 what i have:
 
 svpdc:/etc/samba# smbgroupedit -v
 params.c:Parameter() - Ignoring badly formed line in configuration file:
 ldap trust ids
 NT group (SID) - Unix group
 System Operators (S-1-5-32-549) - -1
 Replicators (S-1-5-32-552) - -1
 Guests (S-1-5-32-546) - -1
 kollegstufe (S-1-5-21-3839733233-2759951301-2176690758-3011) -
 kollegstufe
 root (S-1-5-21-3839733233-2759951301-2176690758-1001) - root
 Domain Admins (S-1-5-21-3839733233-2759951301-2176690758-512) - root
 Domain Guests (S-1-5-21-3839733233-2759951301-2176690758-514) - -1
 Power Users (S-1-5-32-547) - -1
 stundenplan (S-1-5-21-3839733233-2759951301-2176690758-3013) -
 stundenplan
 users (S-1-5-21-1904509300-1595774664-1972565418-1201) - users
 Domain Admins (S-1-5-21-1904509300-1595774664-1972565418-512) - root
 Domain Guests (S-1-5-21-4168099664-486183441-673156717-514) - -1
 Print Operators (S-1-5-32-550) - -1
 Administrators (S-1-5-32-544) - -1
 Domain Guests (S-1-5-21-1904509300-1595774664-1972565418-514) - -1
 sekretariat (S-1-5-21-3839733233-2759951301-2176690758-3007) -
 sekretariat
 Account Operators (S-1-5-32-548) - -1
 Domain Users (S-1-5-21-3839733233-2759951301-2176690758-513) - users
 Backup Operators (S-1-5-32-551) - -1
 direktorat (S-1-5-21-3839733233-2759951301-2176690758-3009) -
 direktorat
 Users (S-1-5-32-545) - users
 
 i'm wondering why some groups are listed more than once. how can i find
 out which group is actually used and how do i get rid of the unused ones
 ? i know i can do smbgroupedit -x, but there i can't specify a SID.
 
 svpdc:~# pdbedit -v -l root
 params.c:Parameter() - Ignoring badly formed line in configuration file:
 ldap trust ids
 Unix username:root
 NT username:
 Account Flags:[U  ]
 User ID/Group ID: 0/0
 User SID: S-1-5-21-3839733233-2759951301-2176690758-1000
 Primary Group SID:S-1-5-21-3839733233-2759951301-2176690758-1001
 Full Name:root
 Home Directory:   \\svpdc\root
 HomeDir Drive:
 Logon Script:
 Profile Path: \\svpdc\root\profile
 Domain:   SVFMG
 Account desc:
 Workstations:
 Munged dial:
 Logon time:   0
 Logoff time:  Fri, 13 Dec 1901 21:45:51 GMT
 Kickoff time: Fri, 13 Dec 1901 21:45:51 GMT
 Password last set:Tue, 10 Jun 2003 16:15:24 GMT
 Password can change:  Tue, 10 Jun 2003 16:15:24 GMT
 Password must change: Fri, 13 Dec 1901 21:45:51 GMT
 
 so user root is not a member of the domain admins. this might be the
 reason why i get access denied trying to apply direcotry permissions.
 i though mapping group root to NT Domain Admin should be enough, but it
 doesn't seem to be. 
 
 can anybody help me on this issue ?!?
 
 thanks a lot
 
 Holger Brueckner
 net-labs Systemhaus GmbH
 
 
 
 
 
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows XP Machines (well mostly the XP ones) hanging

On Tue, Jun 10, 2003 at 10:24:38AM +0100, James Jeffrey wrote:
 Hello Folks,
 
 I will personally send $50(AU) of Pizza to anyone that solves this one :)
 
 We have a network comprising approx 30 Windows workstations all logging in
 to a samba machine running as a PDC. The main exported file system is an NFS
 mounted file system, but this was happening back when this was an xfs file
 system as well. ACL's are enabled. We are running Samba Version 2.2.8a. The
 server does not appear overloaded.
 
 Multiple users have reported that when they are trying to access files
 across the network their machine hangs for approx 20 secs then continues as
 normal. This does not happen every time, but does happen quite frequently.

Can you get a sniffer trace from their machine at the time this
happens ? It's probably the only way you're going to reliably
track this down.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: samba Digest, Vol 6, Issue 19

2003-06-10 Thread suportecs - Hotmail

I have some problems with my SMB PDC Server, when the windows clients
machines open files in the pub directory in the SMB server the clients
machines hangs.
I try many options in the smb.conf but is always the same.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows XP Machines (well mostly the XP ones) hanging

On Tue, Jun 10, 2003 at 09:46:44PM +1200, Mikevl wrote:
Right I may be a little off the track here and please don't laugh as you
read on. I had a similar problem when installing a MS SBS server with XP
workstations SP1. The client really needed MS SQL server poor buggers.
Anyway XP SP1 has some significant problems all on it's own. This dosn't
show all the time on an installation and not every installation either. The
problem is described here
http://www.smallbizserver.net/Workstations/I_get_an_error_when_I_try_to_save_a_file_in_Office.aspx

Very interesting article thanks ! I'd also
refer people to these pages if they're having
problems with MS-Office on a network drive on XP.

http://support.microsoft.com/?id=812937

This problem occurs when the redirector flushes the contents of the file, and writes
to a file handle with read-only access instead of to a file handle with write access.
When the redirector received an opportunistic lock break to none, it purged the cache
for the file, but did not uninitialize the cache for the file. The redirector also
needed to purge and uninitialize when the set end of file occurs because the
opportunistic lock break is asynchronous. Because it did not uninitialize the cache
for the file, it wrote to the incorrect file handle.

and this one :

http://support.microsoft.com/?id=811492

After you apply Windows XP Service Pack 1 (SP1), it may take approximately 35
seconds to delete files over the network. This problem occurs approximately 10 to 15
percent of the time. A network trace of the problem shows the following frames:

Client - Server - C NT Create X, File : \test.txt - request for OpLock\OpBatch
Client - Server - C Delete File, File = : \test.txt
Server - Client - R NT Create X, FID = 0x8003 - oplock level = Batch
Server - Client - C Lock - Break Oplock
A delay of approximately 35 seconds occurs at this time.

Server - Client - R Delete Status_Sharing_Violation
Client - Server - C Lock X, FID = 0x8003 - Break OpLock
Client - Server - C Delete File, File = : \test.txt
Server - Client - R Delete
The first two frames are from the client. The initial frame is an NT Create message
with a request for Oplock/OpBatch for the file. This is followed by the Delete
request for the same file. The next frame is the server's response to the NT Create
request with a Oplock level of batch. The server then sends a Break OpLock message
for the previous frame so that it can delete the file. The server then waits 35
seconds (until its OpLockBreakWait time-out value has expired) before the deletion
does not work. The client can then release the lock and try the deletion again.
CAUSE
When the Break Oplock request is received by the client, the client cannot process the
request because it is already waiting on the Delete request. The server cannot handle
the Delete request until the Oplock on the file has been released. This causes a
pseudo-deadlock condition that is broken after the server's OpLockBreakWait time-out
value expires.

(Looks like not all oplock problems are the fault of Samba :-).

Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows XP Machines (well mostly the XP ones) hanging

On Tue, Jun 10, 2003 at 07:20:47AM -0400, Shawn D. Kelly wrote:
 This may or may not help, but I've installed about 25 XP machines onto a W2K
 network and experienced the exact same thing - slowdown and then all of the
 sudden it's fine.  I don't believe it's a Samba thing, but an XP thing.
 Search google or your engine of choice for 'XP slow network' or something
 like that and you might get luckier.

Indeed. It looks like WinXP SP1 has some bad bugs w.r.t. oplock
processing.

See this page for details :

http://support.microsoft.com/?id=811492

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Final stable version

On Tue, Jun 10, 2003 at 08:54:23AM -0300, Fabricio Adorno wrote:
 Hi all.
 
 I would like to know if someone (maybe from samba team) can tell me when a 
 final stable version of samba 3 is going to be released (within a month, two, 
 three . . .). 

The more you use the betas and report bugs, the faster that
will be

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Question on pam_smbpass

2003-06-10 Thread Sameer Zeidat

Greetings all ..

Is it possible to use pam_smbpass with a smbpasswd backend for login on
a linux machine. If yes, how will it figure out things like home
directory and shell?

Thanks,

__
Do you Yahoo!?
Yahoo! Calendar - Free online calendar with sync to Outlook(TM).
http://calendar.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] FW: Samba Linux and Windows 2000 Server

2003-06-10 Thread Green, Paul

-Original Message-
From: Ilkka Valkonen [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 10, 2003 7:48 AM
To: [EMAIL PROTECTED]
Subject: Samba Linux and Windows 2000 Server

Dear Mr. Green,

I have find, that You have good knowledge of Samba. 

If You have time, can You answer to following question:

We have in or net one Windows NT 4.0 server and Windows 2000 server. With
Samba I can get connection to NT server but with Windows 2000 server with
sbmclient from Linux I get message connection refused.

Is there some services, which must be used in Windows 2000 server or is the
reason, that this Windows 2000 server is our Domain controller.

Best Regards
Ilkka Valkonen 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 3 Beta and Encryption Issues

2003-06-10 Thread Dan Kador

Hi All,
 
This is an update/question about the new beta release of Samba.  I installed it onto a 
test bay.  One machine is Redhat 7.3, one is XP.  For our purposes, the clients need 
to have encryption turned off (IE: we enabled cleartext passwords).  With Samba 2.2.7, 
I had PDC support, including roving profiles and login scripts working when ecryption 
was turned on, both server-side and client-side.  Now, with the new beta release, I 
have the exact same connectivity level working, only with encryption turned on server 
side, but turned OFF client side.  As somebody else posted - is this a bug, or a 
feature? :)
 
Our ideal solution would be to have encryption turned off server side and use an LDAP 
backend for authentication.  With Samba 3, will it be possible to do so and still 
support roving profiles and true domain logins?  If not, we can always migrate 
passwords from the LDAP server, but it's an extra step and it'd be best if we could 
avoid it entirely.
 
Thanks for your help!  I'll keep playing with the beta and post if I find anything 
else interesting.
 
Dan


-
Do you Yahoo!?
Free online calendar with sync to Outlook(TM).
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Compiling 3.0.0beta1

2003-06-10 Thread Derek T. Yarnell

Figured this out, make sure you don't have any rouge headers in
/usr/local/include. This can cause all sorts of wierd headaches and
compile problems.

On Mon, Jun 09, 2003 at 11:12:02PM -0400, Derek T. Yarnell wrote:
 Preface, running redhat 8.0 (pretty standard and up2date)
 
 [atlantis 158] uname -a
  Linux atlantis.cs.umd.edu 2.4.18-27.8.0 #1 Fri Mar 14 06:45:49 EST 2003
  i686 i686 i386 GNU/Linux
 [atlantis 159] gcc --version
  gcc (GCC) 3.2 20020903 (Red Hat Linux 8.0 3.2-7)
  Copyright (C) 2002 Free Software Foundation, Inc.
  This is free software; see the source for copying conditions.  There
  is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR
  PURPOSE.
 
 I am getting wierd errors trying to compile 3.0b1, and getting here and
 it is dying,
 
 Linking bin/smbd
 tdb/tdbutil.o: In function `tdb_search_keys':
 /tmp/samba-3.0.0beta1/source/tdb/tdbutil.c:791: undefined reference to
 `ap_fnmatch'
 collect2: ld returned 1 exit status
 make: *** [bin/smbd] Error 1
 
 ap_fnmatch is an apache thing as far as I can find, why is smbd linking
 against it? This is just a straight 
   ./confiure --prefix=/opt/samba-3.0.0b1 
 
 No wierd CPPFLAGS,LDFLAGS or any other environmental variables.
 
 -- 
 ---
 Derek T. Yarnell
 University of Maryland
 Computer Science Department Unix Staff
 [EMAIL PROTECTED]
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
---
Derek T. Yarnell
University of Maryland
Computer Science Department Unix Staff
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Question on pam_smbpass

On Tue, 10 Jun 2003, Sameer Zeidat wrote:

 Greetings all ..

 Is it possible to use pam_smbpass with a smbpasswd backend for login on
 a linux machine. If yes, how will it figure out things like home
 directory and shell?

Yes. You still need an /etc/passwd entry for each user though. The
smbpasswd file does NOT replace /etc/passwd, unless you are using Winbind.

If using Winbind then you will need to use pam_mount and / or
pam_mkhomedir to handle home directories. The shell information is se
either in smb.conf OR in your password backend. Obviously, the smbpasswd
file does NOT store this information so this is only possible with the
extended capability SAM formats (eg: tdbsam, ldapsam).

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] net groupmap syntax ?!?

hello,

trying to follow the example im the howto-collection.
this is a samba 3.0beta-1 from debian, recompiled with ldapsam support

refering to the howto, the following command should work:

net groupmap add unixgroup=smbadmin ntgroup=Domain Admins

unfortunately ist just says:
 svpdc:~# net groupmap add unixgroup=smbadmin ntgroup=Domain Admins
Usage: net groupmap add {rid=int|sid=string} unixgroup=string
[type=domain|local|builtin] [ntgroup=string] [comment=string]

what am i doing wrong here ?!?

smbadmin is in ldap as a posixGroup:

svpdc:~# getent group smbadmin
smbadmin:x:1008:

thanks a lot

Holger



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] net groupmap syntax ?!?

another strange thing

i only get a listing of the buildingroups if i define smbpasswd
as the first backend in smb.conf:

passdb backend = smbpasswd ldapsam tdbsam guest

svpdc:/etc/samba# net groupmap list
System Operators (S-1-5-32-549) - -1
smbadmin (S-1-5-21-3839733233-2759951301-2176690758-3036) - smbadmin
Replicators (S-1-5-32-552) - -1
Guests (S-1-5-32-546) - -1
..

passdb backend = ldapsam tdbsam smbpasswd guest
svpdc:/etc/samba# net groupmap list
svpdc:/etc/samba#

?!? ;)

Holger

On Tue, 2003-06-10 at 19:01, Holger Brückner wrote:
 hello,
 
 trying to follow the example im the howto-collection.
 this is a samba 3.0beta-1 from debian, recompiled with ldapsam support
 
 refering to the howto, the following command should work:
 
 net groupmap add unixgroup=smbadmin ntgroup=Domain Admins
 
 unfortunately ist just says:
  svpdc:~# net groupmap add unixgroup=smbadmin ntgroup=Domain Admins
 Usage: net groupmap add {rid=int|sid=string} unixgroup=string
 [type=domain|local|builtin] [ntgroup=string] [comment=string]
 
 what am i doing wrong here ?!?
 
 smbadmin is in ldap as a posixGroup:
 
 svpdc:~# getent group smbadmin
 smbadmin:x:1008:
 
 thanks a lot
 
 Holger
 
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] FreeBSD + winbindd + PAM

2003-06-10 Thread chris Bouchet


hello !

well what gives

#getent passwd ?

if this works you should see all the users including the domain ones.

have you tries to put a symbolic link named libnss_winbind.so.2 linked to 
libnss_winbind.so in the /lib dir ?

bye!

chris



-
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Testez le nouveau Yahoo! Mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] update encypted and LDAP

2003-06-10 Thread Martin Sapsed

Andrew Bartlett wrote:
On Tue, 2003-06-10 at 02:13, Martin Sapsed wrote:

Hello all,

I'm currently trying out samba-3.0alpha24 and moving to samba-3.0.0beta1 
since we're getting into XP and encrypted passwords etc. I was hoping to 
set everyone (about 13,000 users) up on an LDAP (openLDAP) server with 
just the Unix crypt passwords for now and run with

encrypt passwords = no
update encrypted = yes
for a while to populate the NT/LM password hashes before going over to 
encrypted passwords for everyone. (Most clients are Win 9x using plain 
text passwords against NIS at the moment.)

From what I can see and have gathered from some searching, it looks 
like update encrypted only works with an smbpasswd file. Is this the 
case? 
The code routines call the passdb backend, whatever that may be.
Testing a bit further seems to suggest that

encrypt passwords = no

doesn't work at all if you're using

passdb backend = ldapsam:ldap://..., guest

in 3.0alpha24. Is this a bug or a feature? ;-)

Cheers,

Martin

--
Martin Sapsed   
Information Services   Who do you say I am?
University of Wales, Bangor Jesus of Nazareth
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] samba/ldap - smbpasswd/userdelete

2003-06-10 Thread Ken Kleiner

Hi...

  I'm running samba and ldap (openldap).  Using smbpasswd -a username 
adds the samba ldap info into the users ldap entry just fine.

  The problem is deletion.  Running smbpasswd -x username deletes the
ENTIRE user's ldap entry.  This is good if I want to delete the unix and
windows account information, but not if I want to just delete the windows
info.  

  I assume it is because the ldap dn I connect with from samba has write
access to the ldap branch and just deletes the entire entry.  Can I make
it just delete the samba related fields in the record, or do the samba
accounts need to be in a seperate branch?

  Thanks

-- 
 

Ken Kleiner
System Manager
Computer Science Department
Umass Lowell

voice : 978 934 3645
fax : 978 934 3551

cell : 603 930 5582 (emergencies only, please)

[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] NMBD option bug

2003-06-10 Thread Fabricio Adorno

Hi samba team,


Please check if there is a problem with the option -l ([-l log directory]) 
on nmbd daemon (I have script that worked fine with samba 2.2.7a and with 
samba 3.0.0beta1 it doesn't log in the directory I've especified).

Thanks.





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Problems with machine accounts

2003-06-10 Thread Hena Häkkänen

Hi,

I actually figured it out! I had accidentally forgot to create the
smbguest account to smbpasswd, and yet I declared it in smb.conf. By
more carefully examining the smbd.machinename log file, I found that the
missing account was responsible for NT login failures. Once I created
smbguest account, everything worked great. I'm a happy camper :)

Now on to the roaming profiles ...

Hena

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED]
 g] On Behalf Of Kopmann, Goetz
 Sent: 10. kesäkuuta 2003 16:54
 To: Samba (E-Mail)
 Subject: AW: [Samba] Problems with machine accounts
 
 
 Hi there,
 
 after several (pretended successful) rejoins to the domain it 
 does not work and we decided to give up the domain login 
 concept and simply map the shares by a batch file now. We 
 also had to disable the downloadable printer driver option, 
 because not all drivers work correctly :-(
 
 -Ursprüngliche Nachricht-
 Von: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]
 Gesendet: Dienstag, 10. Juni 2003 14:57
 An: [EMAIL PROTECTED]
 Betreff: [Samba] Problems with machine accounts
 
 
 Hi all,
 
 I'm really banging my head against the wall here.
 I'm running Samba v2.2.8a as a PDC on OpenBSD v3.3-current, and I 
 haven't
 been able to join my Win2000 machines to the domain.
 
 I have tried both manually and automatically to add machine accounts 
 to smbpasswd file to no avail. It always takes 2-3 minutes for the 
 Win2k machine to join the domain, suggesting that it really 
 cannot. This is confirmed after rebooting the Windows client 
 when I get 
 the error message
 saying that the computer accout is missing or incorrect password.
 
 Samba log files show nothing of importance to me.
 
 Anyone have experience with Samba PDC and OpenBSD v3.3?
 
 /etc/samba/smb.conf:
 [global]
 workgroup = FINITLAW
 netbios name = GATEKEEPER
 server string = FinitLaw File Server
 interfaces = 192.168.0.1/24
 encrypt passwords = Yes
 passwd chat = Changing local password for*\n *New  
 password* 
 %n\n $
 unix password sync = Yes
 log file = /var/log/smbd.%m
 max log size = 50
 socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 
 SO_SNDBUF=81$
 logon script = login.bat
 logon path = \\%N\profiles\%u
 logon drive = H:
 logon home = \\gatekeeper\%u
 domain logons = Yes
 domain admin group = root @domainadmin
 os level = 64
 preferred master = Yes
 domain master = Yes
 dns proxy = No
 wins support = Yes
 guest account = smbguest
 #   add user script = /usr/sbin/useradd -d /var/empty -g 300 
 -s /sbin/nolog$
 null passwords = yes
 
 /etc/passwd: COMPAQ3$:*:2003:300:Workstation:/var/empty:/sbin/nologin
 
 
 
 
 
 ===
 EASY and FREE access to your email anywhere: 
 http://Mailreader.com/ 
 ===
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Compiling 2.2.8a with SSL support on Solaris 7

2003-06-10 Thread stephen . jackson

I'm running into a problem when compiling Samba 2.2.8a with SSL support on
Solaris 7. The build appears to be choking on redefinitions between the
Openssl des.h and kerberos/des.h (which is grabbed because it is on the
system). Here's the error I'm getting:

In file included from /usr/local/include/openssl/evp.h:89,
 from /usr/local/include/openssl/x509.h:67,
 from /usr/local/include/openssl/ssl.h:69,
 from lib/util.c:53:
/usr/local/include/openssl/des.h:79: redefinition of `struct des_ks_struct'
/usr/local/include/openssl/des.h:246: conflicting types for `bit_64'
/usr/include/kerberos/des.h:48: previous declaration of `bit_64'
make: *** [lib/util.o] Error 1

Has anyone run into this problem on Solaris and found a way around it?
Thanks.

Stephen


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba newbie need help with files copied from NT to sambalinux box...

2003-06-10 Thread marvc

I've managed to get samba up and running on my rh7.3 web server. I'm
able to see this server in My Network Places and browse to see the
shared directories. My problem is this: 
I want to create and test my web pages on my XP box using DWMX, upload
these files to one of the shared directories to be published to the
site. The problem is that after copying a few files to this directory
for testing; I go to the linux box and copy the files to my
/wwwroot/htdocs directory and attempt to access it from a broswer. I get
page not found. The files aren't displaying as they do in DWMX. Can
someone assist me in resolving this issue or point me to a suitable
resource? The files are both .php and html. Since php is installed on
the server and working I've ruled out it not parsing files correctly. I
notice that the files are green after I copy them to the linux server.
Could that have something to do with it? 
My apologizes if this is a bit Off-Topic but I just need a push in the
right direction. 

TIA

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] shadow folders in XP explorer?


Samba 2.2.8 which is also PDC, logon from windows XP WS.

If different users log on from the same WS one can tell the history of the
logons because upon exploring the samba server one can see all the other
users home shares; I mean the previously logged in users. That is if John
logs in to XP WS and the samba server was just started he sees his home. If
he logs off and then Jane logs in, Jane can see on the samba server her home
and a share John that she can not access. If samba gets a restart the
ghost home disappears immediately. Anybody with a hint on how to avoid
this kind of behavior?

[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   public = no
   create mode = 0700
   directory mode = 0700


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] German characters for Windows and Linux clients

On Sat, Jun 07, 2003 at 11:34:49PM +0200, Hollerer wrote:
 Hi,
 
 I use a central Linux RH 9.0 Server which should serve as a fileserver 
 using SAMBA.
 But the main issue is, that i have Linux and Windows clients to server !.
 
 If i configure the the codepages 850 and the character set ISO8859-1 
 then the Windows client works fine with his own files, including special 
   german characters like ä or others, but the Linux Workstations are not 
 able to use these files and directories !.
 
 What kind of configuration can solve my problem ?.

The Linux apps are using utf8, the Samba files are being created
in ISO8859-1 (as requested). Change the Linux locale to be iso8859-1
and you should see the files correctly.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba newbie need help with files copied from NT to samba linux box...

 
 I've managed to get samba up and running on my rh7.3 web 
 server. I'm able to see this server in My Network Places and 
 browse to see the shared directories. My problem is this: 
 I want to create and test my web pages on my XP box using 
 DWMX, upload these files to one of the shared directories to 
 be published to the site. The problem is that after copying a 
 few files to this directory for testing; I go to the linux 
 box and copy the files to my /wwwroot/htdocs directory and 
 attempt to access it from a broswer. I get page not found. 
 The files aren't displaying as they do in DWMX. 


Here a better trick: define a share that will point to your /wwwroot/htdocs!
So there would be no need to copy them to an other folder. ;-)

In smb.conf have something like

[webdevelop]

   comment = Web root drive
   path = /wwwroot/htdocs
   public = yes
   read only = no
   browsable = yes
   create mask = 0777
   directory mask = 0777


This should get you in the right direction. Then man smb.conf and see about
file permisions. The files that you put there are supposed to be read by the
apache user (f you haven't changed anything...) OTOH samba will create them
as the user that you connect. So look at groups and file permisions. The
above 777 example is not a good ideea but should you started.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

SUMMARY: [Samba] samba/ldap - smbpasswd/userdelete

2003-06-10 Thread Ken Kleiner

Well, I think I have my answer.

Instead of embedding the samba ldap entries into the same record that
the posix/unix stuff is in, I created another ou for sambausers and point
samba to that.  Deleting the user now just deletes samba entry.

Phew.


 
 Hi...
 
   I'm running samba and ldap (openldap).  Using smbpasswd -a username 
 adds the samba ldap info into the users ldap entry just fine.
 
   The problem is deletion.  Running smbpasswd -x username deletes the
 ENTIRE user's ldap entry.  This is good if I want to delete the unix and
 windows account information, but not if I want to just delete the windows
 info.  
 
   I assume it is because the ldap dn I connect with from samba has write
 access to the ldap branch and just deletes the entire entry.  Can I make
 it just delete the samba related fields in the record, or do the samba
 accounts need to be in a seperate branch?
 
   Thanks
 
 -- 
  
 
 Ken Kleiner
 System Manager
 Computer Science Department
 Umass Lowell
 
 voice : 978 934 3645
 fax : 978 934 3551
 
 cell : 603 930 5582 (emergencies only, please)
 
 [EMAIL PROTECTED]
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 
 
  E3-I: This message has been scanned for viruses and dangerous content by UML's 
 antivirus scanning services.
 
 
 
 


-- 
 

Ken Kleiner
System Manager
Computer Science Department
Umass Lowell

voice : 978 934 3645
fax : 978 934 3551

cell : 603 930 5582 (emergencies only, please)

[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] shadow folders in XP explorer?



 Try the
 following:
 
 1. restart samba

OK

 2. login john
 3. run smbstatus (save output)

[EMAIL PROTECTED] tmp]# smbstatus

Samba version 2.2.8
Service  uid  gid  pid machine
--
john  johnjohn 15079   XPWS  (192..132) Tue Jun 10 22:12:51
2003
netlogon  johnjohn 15079   XPWS  (192..132) Tue Jun 10 22:12:52
2003
IPC$  nobody  nobody   15079   XPWS  (192..132) Tue Jun 10 22:12:47
2003

No locked files

 4. logoff john 
 5. run smbstatus (save output)

[EMAIL PROTECTED] tmp]# smbstatus

Samba version 2.2.8
Service  uid  gid  pid machine
--
Profiles john john 15079   XPWS  (192..132) Tue Jun 10 22:15:55
2003
IPC$ john john 15079   XPWS  (192..132) Tue Jun 10 22:13:22
2003

No locked files

Now wait a second! This is a strange one! As admin on that XP WS I used
gpedit to make Computer Configuration\bla bla\User Profiles\Only allow
local user profiles - Enable! Why does it still use Profiles?

... Anyway the profiles connection dissapears after a while but the IPC$ one
no!

 6. login jane
 7. run smbstatus (save output)

Probably this is it:

[EMAIL PROTECTED] tmp]# smbstatus

Samba version 2.2.8
Service  uid  gid  pid machine
--
IPC$ nobody   nobody   15079   XPWS  (192..132) Tue Jun 10 22:21:10
2003
Jane Jane Jane 15079   XPWS  (192..132) Tue Jun 10 22:20:39
2003
PJane Jane 15079   XPWS  (192..132) Tue Jun 10 22:21:09
2003
IPC$ john john 15079   XPWS  (192..132) Tue Jun 10 22:13:22
2003
netlogon Jane Jane 15079   XPWS  (192..132) Tue Jun 10 22:20:40
2003

No locked files

... and after a while:

[EMAIL PROTECTED] tmp]# smbstatus

Samba version 2.2.8
Service  uid  gid  pid machine
--
Jane Jane Jane 15079   XPWS  (192..132) Tue Jun 10 22:20:39
2003
PJane Jane 15079   XPWS  (192..132) Tue Jun 10 22:21:09
2003
IPC$ john john 15079   XPWS  (192..132) Tue Jun 10 22:13:22
2003

No locked files



Huh? What on earth does this mean?? :-o

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

re: [Samba] Cups printing works but status is always Access Denied

2003-06-10 Thread Karl Banasky

I use Cups here and the install has been with out fail.  Some oddities with XP but I 
figure that is cause I am not forking the doe out, no worries thou, it all works 
fabulously well.  I have Caldera 3.1.1  with CUPS 1.1.19.   Also with the smb 
My suggestion is to use these settings:

[global] 
printer admin = karl
printing = cups
printcap name = lpstat (this is the proper one per some cups document I read)
load printers = yes

[printers]
comment = All Printers
path = /var/spool/samba
guest ok = yes
browseable = no
public = yes
writable = no
printable = yes
printer admin = (user or @group name)

If you would like to add drivers put this in:

[print$]
comment = Printer Drivers
path = /etc/samba.d/drivers (path were driver will be located)
guest ok = no
write list = (user or @group name)
writable = no
browsable = yes

Review this for the right directories to setup and the cool cups utility to add 
drivers.  A little time is required and so smooth when done.
http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection.html#CUPS

Hope that assists you.  
Karl-


  I have a RedHat 9 installation running XFS.
   Cups 1.1.17-13 is installed

   I have compiled and installed Samba 2.2.8a and everything appears to be
   working apart from a minor printing problem.
   After I have installed a printer on my Win2K workstation I can print via
   samba to the cups printer using the windows PCL print driver and it works
   fine.
   However the printer status is always 'Access denied, unable to connect'.

   I get the following entries in the log file for my machine :-

   [2003/06/10 12:28:24, 0] printing/print_cups.c:cups_printername_ok(388)
   Unable to get printer status for
   ::{2227a280-3aea-1069-a2de-08002b30309d} - client-error-not-found
   [2003/06/10 12:28:24, 0] smbd/service.c:make_connection(252)
   gb-desktop (192.168.1.250) couldn't find service
   ::{2227a280-3aea-1069-a2de-08002b30309d}

   My samba configuration :-

   [global]
   workgroup = ASCOT
   netbios name = DIBBLER
   server string = SAMBA-LDAP PDC Server
   encrypt passwords = Yes
   passwd program = /usr/local/sbin/smbldap-passwd.pl -o %u
   passwd chat = *new*password* %n\n *new*password* %n\n *successfully*
   unix password sync = Yes

   log file = /var/log/samba/%m.log
   log level = 5 ; remember to lower the log level in real life :-)
   max log size = 0


   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

   domain logons = Yes
   os level = 80
   preferred master = False
   domain master = True
   dns proxy = No
   wins support = Yes

   ; SAMBA-LDAP declarations
   ldap suffix = dc=ASCOT.WEBSCREEN-TECHNOLOGY,dc=COM
   ldap admin dn = cn=Manager,dc=ASCOT.WEBSCREEN-TECHNOLOGY,dc=COM
   ldap port = 389
   ldap server = 127.0.0.1
   ldap ssl = No

   load printers = yes
   printing = cups
   printcap name = cups

   ; Deactivate opportunistic locks (wised)
   ; opLocks = False
   ; encoding to french
   ; character set = iso8859-1

   ; using smbldap-tools to add machines
   add user script = /usr/local/sbin/smbldap-useradd.pl -w %u
   ; users and groups allowed to be 'Domain Admins'
   domain admin group =  @Domain Admins 

   [homes]
   comment = Home Directories
   valid users = %S
   read only = No
   create mask = 0664
   directory mask = 0775
   browseable = No

   [netlogon]
   comment = Network Logon Service
   path = /usr/local/samba/netlogon
   guest ok = Yes

   [profiles]
   path = /data/profiles
   writeable = yes
   browseable = no
   create mode = 0644
   directory mode = 0755
   guest ok = yes

   [samba]
   path=/data/samba
   writable= yes
   force create mode   = 660
   force directory mode= 770
   create mode = 660
   directory mode  = 770
   mangle case = yes
   case sensitive  = no
   default case= lower
   preserve case   = yes
   short preserve case = no
   valid users = @users
   force group = users

   [printers]
   comment = All Printers
   path = /var/spool/samba
   printable = Yes
   browseable = No
   public = yes
   guest ok = yes
   writable = no
   printer admin = root


   --
   Gareth Blades
   Webscreen Technology
   Index House
   St Georges Lane
   Ascot, Berkshire
   SL5 7EU, UK
   Tel +44 (0) 1344 636339
   http://www.webscreen-technology.com


   -- 
   To unsubscribe from this list go to the following URL and read the
   instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba + CUPS = Two printers instead of one?


Samba 2.2.8 + cups-1.1.17. 

load printers = yes
show add printer wizard = yes
printcap name = cups
printer admin = root
printing = cups

[print$]
   path = /home/printers
   guest ok = yes
   browseable = yes
   write list = root

[printers]
   comment = All Printers
   printable = yes
   path = /var/spool/samba
   browseable = no
   guest ok = yes
   public = yes
   read only = yes
   writable = no

[2 floor IBM BW]
   comment = IBM Infoprint 1222
   path = /var/spool/lpd/samba/2ndflbw
   printable = yes
   browseable = yes
   writable = no
   public = yes
   printer admin = root


Everything all right added drivers, set default all works like a charm just
it's just that... Why do I have two printers instead of one listed on the
server? 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Access Denied setting Directory Access Permissions

ok, i removed all ldap stuff .. but i still cannot set samba share
acl's:

svpdc:/data/download# smbcacls //svpdc/winkd test
Password:
REVISION:1
OWNER:SVFMG\root
GROUP:SVFMG\root
ACL:SVFMG\root:ALLOWED/0/RW
ACL:SVFMG\root:ALLOWED/0/R
ACL:\Everyone:ALLOWED/0/R
svpdc:/data/download# smbcacls -A ACL:SVFMG\kollegstufe:ALLOWED/0/RW
//svpdc/winkd test
Password:
svpdc:/data/download# echo $?
0
svpdc:/data/download# smbcacls //svpdc/winkd test
Password:
REVISION:1
OWNER:SVFMG\root
GROUP:SVFMG\root
ACL:SVFMG\root:ALLOWED/0/RW
ACL:SVFMG\root:ALLOWED/0/R
ACL:\Everyone:ALLOWED/0/R

i still get something like permissions not saved, cannot acces if i
try from a win2k box.

can someone enlighten me ?!? this must somehow work.

thanks

Holger

PS: if you need mor debugging messages just tell me.


On Tue, 2003-06-10 at 16:29, Holger Brückner wrote:
 Hello *,
 
 i've got a debian samba 3.0alpha23 with ldapsam.
 my problem is that i can't set directory permissions. i alwasy get
 access denied.
 
 what i have:
 
 svpdc:/etc/samba# smbgroupedit -v
 params.c:Parameter() - Ignoring badly formed line in configuration file:
 ldap trust ids
 NT group (SID) - Unix group
 System Operators (S-1-5-32-549) - -1
 Replicators (S-1-5-32-552) - -1
 Guests (S-1-5-32-546) - -1
 kollegstufe (S-1-5-21-3839733233-2759951301-2176690758-3011) -
 kollegstufe
 root (S-1-5-21-3839733233-2759951301-2176690758-1001) - root
 Domain Admins (S-1-5-21-3839733233-2759951301-2176690758-512) - root
 Domain Guests (S-1-5-21-3839733233-2759951301-2176690758-514) - -1
 Power Users (S-1-5-32-547) - -1
 stundenplan (S-1-5-21-3839733233-2759951301-2176690758-3013) -
 stundenplan
 users (S-1-5-21-1904509300-1595774664-1972565418-1201) - users
 Domain Admins (S-1-5-21-1904509300-1595774664-1972565418-512) - root
 Domain Guests (S-1-5-21-4168099664-486183441-673156717-514) - -1
 Print Operators (S-1-5-32-550) - -1
 Administrators (S-1-5-32-544) - -1
 Domain Guests (S-1-5-21-1904509300-1595774664-1972565418-514) - -1
 sekretariat (S-1-5-21-3839733233-2759951301-2176690758-3007) -
 sekretariat
 Account Operators (S-1-5-32-548) - -1
 Domain Users (S-1-5-21-3839733233-2759951301-2176690758-513) - users
 Backup Operators (S-1-5-32-551) - -1
 direktorat (S-1-5-21-3839733233-2759951301-2176690758-3009) -
 direktorat
 Users (S-1-5-32-545) - users
 
 i'm wondering why some groups are listed more than once. how can i find
 out which group is actually used and how do i get rid of the unused ones
 ? i know i can do smbgroupedit -x, but there i can't specify a SID.
 
 svpdc:~# pdbedit -v -l root
 params.c:Parameter() - Ignoring badly formed line in configuration file:
 ldap trust ids
 Unix username:root
 NT username:
 Account Flags:[U  ]
 User ID/Group ID: 0/0
 User SID: S-1-5-21-3839733233-2759951301-2176690758-1000
 Primary Group SID:S-1-5-21-3839733233-2759951301-2176690758-1001
 Full Name:root
 Home Directory:   \\svpdc\root
 HomeDir Drive:
 Logon Script:
 Profile Path: \\svpdc\root\profile
 Domain:   SVFMG
 Account desc:
 Workstations:
 Munged dial:
 Logon time:   0
 Logoff time:  Fri, 13 Dec 1901 21:45:51 GMT
 Kickoff time: Fri, 13 Dec 1901 21:45:51 GMT
 Password last set:Tue, 10 Jun 2003 16:15:24 GMT
 Password can change:  Tue, 10 Jun 2003 16:15:24 GMT
 Password must change: Fri, 13 Dec 1901 21:45:51 GMT
 
 so user root is not a member of the domain admins. this might be the
 reason why i get access denied trying to apply direcotry permissions.
 i though mapping group root to NT Domain Admin should be enough, but it
 doesn't seem to be. 
 
 can anybody help me on this issue ?!?
 
 thanks a lot
 
 Holger Brueckner
 net-labs Systemhaus GmbH
 
 
 
 
 
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] samba / solaris 7 /sparc 5 -110

2003-06-10 Thread Anthony Watters

Which version of Samba works on Solaris 7 on Sparc 5 (-110) platform?
Which file name and where to download?

Installation documentation?

thanks

tw




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] update encypted and LDAP

On Tue, 10 Jun 2003, Martin Sapsed wrote:

 Andrew Bartlett wrote:
  On Tue, 2003-06-10 at 02:13, Martin Sapsed wrote:
 
 Hello all,
 
 I'm currently trying out samba-3.0alpha24 and moving to samba-3.0.0beta1
 since we're getting into XP and encrypted passwords etc. I was hoping to
 set everyone (about 13,000 users) up on an LDAP (openLDAP) server with
 just the Unix crypt passwords for now and run with
 
 encrypt passwords = no
 update encrypted = yes
 
 for a while to populate the NT/LM password hashes before going over to
 encrypted passwords for everyone. (Most clients are Win 9x using plain
 text passwords against NIS at the moment.)
 
  From what I can see and have gathered from some searching, it looks
 like update encrypted only works with an smbpasswd file. Is this the
 case?
 
  The code routines call the passdb backend, whatever that may be.

 Testing a bit further seems to suggest that

 encrypt passwords = no

 doesn't work at all if you're using

 passdb backend = ldapsam:ldap://..., guest

 in 3.0alpha24. Is this a bug or a feature? ;-)

It's a feature. You can not have domain membership with plain text
passwords. The purpose of the LDAP based SAM is to enable full NT style
account data (including MS encrypted passwords) to be stored in a suitable
scalable backend.

If you really must use plain text passwords you can use an LDAP backend
for your Unix system accounts but your passdb backend entry should have
guest, but accessing of the LDAP backend will need to be done at the OS
level. ie: Do NOT put ldapsam in the passdb backend line in your smb.conf.

PS: It is a very bad idea to use plain text passwords - it is insecure and
no longer supported well by Microsoft. Use of plain text passwords will
lead to operational problems and user complaints.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Can't use mount command with samba

2003-06-10 Thread Rohan Parkes

I have a home network based on Win XP Pro, with one Linux machine
running Red Hat 9. All updates have been applied. There's no domain
controller.

I can connect from the Linux machine to the XP machines via Konqueror
using
smb://mymachine/myshare

However, I can't use the mount command.

I'm trying to use syntax like

mount -t smbfs -o username=myname,password=mypwd //192.168.0.1
/win/myshare

But I always just get a print-out showing command usage, and then
demonstrating the exact syntax that I am using.

I got this from The Unofficial Samba HOWTO

http://hr.uoregon.edu/davidrl/samba/index.html

A few other sites have demonstrated the same syntax. Samba seems to have
been correctly compiled for mounting.

I'm assuming Samba is basically working, or else I couldn't connect via
Konqueror.

-- 
Rohan Parkes
Melbourne
Australia

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Can't use mount command with samba

 I have a home network based on Win XP Pro, with one Linux 
 machine running Red Hat 9. All updates have been applied. 
 There's no domain controller.
 
 I can connect from the Linux machine to the XP machines via 
 Konqueror using smb://mymachine/myshare
 
 However, I can't use the mount command.
 
 I'm trying to use syntax like
 
 mount -t smbfs -o username=myname,password=mypwd 
 //192.168.0.1 /win/myshare


smbmount '\\mymachine\myshare' /mnt/xpshare -o
username=myname,password=mypwd
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Can't use mount command with samba

2003-06-10 Thread Dan Shadix

You aren't specifying the share, only the machine.  You should use

//192.168.0.1/myshare

-- Original Message --
From: Rohan Parkes [EMAIL PROTECTED]
Date:  11 Jun 2003 07:59:10 +1000

I have a home network based on Win XP Pro, with one Linux machine
running Red Hat 9. All updates have been applied. There's no domain
controller.

I can connect from the Linux machine to the XP machines via Konqueror
using
smb://mymachine/myshare

However, I can't use the mount command.

I'm trying to use syntax like

mount -t smbfs -o username=myname,password=mypwd //192.168.0.1
/win/myshare

But I always just get a print-out showing command usage, and then
demonstrating the exact syntax that I am using.

I got this from The Unofficial Samba HOWTO

http://hr.uoregon.edu/davidrl/samba/index.html

A few other sites have demonstrated the same syntax. Samba seems to have
been correctly compiled for mounting.

I'm assuming Samba is basically working, or else I couldn't connect via
Konqueror.

-- 
Rohan Parkes
Melbourne
Australia

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] problem after upgrading redhat 9

2003-06-10 Thread [EMAIL PROTECTED]

so i just upgraded an ftp server to redhat 9 with several of my win2k drives mounted 
in fstab. all worked fine before but now when it comes on smb starting it just hangs. 
some directories i can mount via 

mount -t smbfs -o username=X,password=XX //hyacinth/mp3s /pub/mp3

but some it jsut hangs. i have taken the entries out of fstab that will not mount via 
command line but it still hangs. why should these directories not mount anyways? the 
only thing i can think of is that the directory has 37.7 gigs. is there a limit on how 
much space can be mounted? i have included my fstab below. the only way i can get the 
machine to boot is by unplugging the network cable, else i get:

Jun 10 10:42:56 amnesiac mount: 602: session request to 192.168.1.201 failed (Called 
name not present)
Jun 10 10:42:56 amnesiac mount: 602: session request to 192 failed (Called name not 
present)

a bunch of times in my boot.log and it jsut hangs as i said. someone said i should 
change the ip addresses in fstab to the hostname (hyacinth) and add a line to 
/etc/hosts defining hyacinth so i did this but it did not help.
any help apreciated. i had other entries in there as well (ie the big drive is not in 
there right now).

fstab with user/pass = XXX to protect the innocent

LABEL=/ /   ext3defaults1 1
LABEL=/boot /boot   ext3defaults1 2
none/dev/ptsdevpts  gid=5,mode=620  0 0
none/proc   procdefaults0 0
none/dev/shmtmpfs   defaults0 0
/dev/hdb3   swapswapdefaults0 0
\\hyacinth\mp3s /pub/mp3smbfs   
username=xxx,password=xxx00
\\hyacinth\archive   /pub/archive smbfs   
username=xxx,password=xxx00
\\hyacinth\archivegames   /pub/archivegames smbfs   
username=xxx,password=xxx00
\\hyacinth\familyguy/pub/familyguy smbfs   
username=xxx,password=xxx00
\\hyacinth\upload/pub/upload smbfs   
username=xxx,password=xxx,rw,dmask=07700
/dev/cdrom   /mnt/cdrom  iso9660 noauto,owner,kudzu,ro 0 0
/dev/fd0 /mnt/floppy autonoauto,owner,kudzu 0 0
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Can't use mount command with samba

2003-06-10 Thread Rohan Parkes

On Wed, 2003-06-11 at 08:06, Vizitiu, Ciprian wrote:
  I have a home network based on Win XP Pro, with one Linux 
  machine running Red Hat 9. All updates have been applied. 
  There's no domain controller.
  
  I can connect from the Linux machine to the XP machines via 
  Konqueror using smb://mymachine/myshare
  
  However, I can't use the mount command.
  
  I'm trying to use syntax like
  
  mount -t smbfs -o username=myname,password=mypwd 
  //192.168.0.1 /win/myshare
 
 
 smbmount '\\mymachine\myshare' /mnt/xpshare -o
 username=myname,password=mypwd

Thanks - I'm just wondering why the articles (and the smb usability
print out) seemed to be giving the wrong syntax.

Another article stated that I could mount samba shares using fstab. But
when I tried this, I encountered the problem that the network interface
wasn't up in time.

Is there any way of doing this?

-- 
Rohan Parkes
Melbourne
Australia

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Can't use mount command with samba

2003-06-10 Thread Rohan Parkes

On Wed, 2003-06-11 at 08:16, Dan Shadix wrote:
 You aren't specifying the share, only the machine.  You should use
 
 //192.168.0.1/myshare

Darn it, that appears to be correct, although I thought I was doing this
in practice, despite the example I gave.

I might have gotten sloppy, because I can use smb://myserver in
Konqueror, and it works.

-- 
Rohan Parkes
Melbourne
Australia

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Access Denied setting Directory Access Permissions

solved ... mounting with acl mount option helps
where's the wall to bang my head ?!? 

On Tue, 2003-06-10 at 16:29, Holger Brückner wrote:
 Hello *,
 
 i've got a debian samba 3.0alpha23 with ldapsam.
 my problem is that i can't set directory permissions. i alwasy get
 access denied.
 
 what i have:
 
 svpdc:/etc/samba# smbgroupedit -v
 params.c:Parameter() - Ignoring badly formed line in configuration file:
 ldap trust ids
 NT group (SID) - Unix group
 System Operators (S-1-5-32-549) - -1
 Replicators (S-1-5-32-552) - -1
 Guests (S-1-5-32-546) - -1
 kollegstufe (S-1-5-21-3839733233-2759951301-2176690758-3011) -
 kollegstufe
 root (S-1-5-21-3839733233-2759951301-2176690758-1001) - root
 Domain Admins (S-1-5-21-3839733233-2759951301-2176690758-512) - root
 Domain Guests (S-1-5-21-3839733233-2759951301-2176690758-514) - -1
 Power Users (S-1-5-32-547) - -1
 stundenplan (S-1-5-21-3839733233-2759951301-2176690758-3013) -
 stundenplan
 users (S-1-5-21-1904509300-1595774664-1972565418-1201) - users
 Domain Admins (S-1-5-21-1904509300-1595774664-1972565418-512) - root
 Domain Guests (S-1-5-21-4168099664-486183441-673156717-514) - -1
 Print Operators (S-1-5-32-550) - -1
 Administrators (S-1-5-32-544) - -1
 Domain Guests (S-1-5-21-1904509300-1595774664-1972565418-514) - -1
 sekretariat (S-1-5-21-3839733233-2759951301-2176690758-3007) -
 sekretariat
 Account Operators (S-1-5-32-548) - -1
 Domain Users (S-1-5-21-3839733233-2759951301-2176690758-513) - users
 Backup Operators (S-1-5-32-551) - -1
 direktorat (S-1-5-21-3839733233-2759951301-2176690758-3009) -
 direktorat
 Users (S-1-5-32-545) - users
 
 i'm wondering why some groups are listed more than once. how can i find
 out which group is actually used and how do i get rid of the unused ones
 ? i know i can do smbgroupedit -x, but there i can't specify a SID.
 
 svpdc:~# pdbedit -v -l root
 params.c:Parameter() - Ignoring badly formed line in configuration file:
 ldap trust ids
 Unix username:root
 NT username:
 Account Flags:[U  ]
 User ID/Group ID: 0/0
 User SID: S-1-5-21-3839733233-2759951301-2176690758-1000
 Primary Group SID:S-1-5-21-3839733233-2759951301-2176690758-1001
 Full Name:root
 Home Directory:   \\svpdc\root
 HomeDir Drive:
 Logon Script:
 Profile Path: \\svpdc\root\profile
 Domain:   SVFMG
 Account desc:
 Workstations:
 Munged dial:
 Logon time:   0
 Logoff time:  Fri, 13 Dec 1901 21:45:51 GMT
 Kickoff time: Fri, 13 Dec 1901 21:45:51 GMT
 Password last set:Tue, 10 Jun 2003 16:15:24 GMT
 Password can change:  Tue, 10 Jun 2003 16:15:24 GMT
 Password must change: Fri, 13 Dec 1901 21:45:51 GMT
 
 so user root is not a member of the domain admins. this might be the
 reason why i get access denied trying to apply direcotry permissions.
 i though mapping group root to NT Domain Admin should be enough, but it
 doesn't seem to be. 
 
 can anybody help me on this issue ?!?
 
 thanks a lot
 
 Holger Brueckner
 net-labs Systemhaus GmbH
 
 
 
 
 
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba/ldap - smbpasswd/userdelete

2003-06-10 Thread Andrew Bartlett

On Wed, 2003-06-11 at 04:41, Ken Kleiner wrote:
 Hi...
 
   I'm running samba and ldap (openldap).  Using smbpasswd -a username 
 adds the samba ldap info into the users ldap entry just fine.
 
   The problem is deletion.  Running smbpasswd -x username deletes the
 ENTIRE user's ldap entry.  This is good if I want to delete the unix and
 windows account information, but not if I want to just delete the windows
 info.  

Samba 3.0 has the new option 'ldap delete dn', for exactly this reason.



-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Cups / Samba Driver Download question

2003-06-10 Thread James Sewell

Hey all!!

Sorry about the crosspost but this invoves CUPS and Samba issues.

[Samba 2.2.8 / CUPS 1.1.8 / Redhat 7.2 std]

I have encountered a small problem (which is due to my own slipup more
than anything else).
I have Windows 2000 versions of the Adobe postscript drivers installed
on many of my 2000 machines. Now I am wanting to use the CUPS drivers
which are Windows 2000 or NT4 version stamped.
If a workstation has had a printer installed (Say it's called Bear)
before it will have the Bear W2K version drivers on it. The Bear printer
will be linked to this. If this printer is then removed and reinstalled
(just the printer not the drivers) then it will now install the Bear
NT4/2K drivers - thats fine. HOWEVER becasue these new drivers are lower
in the pecking hierachy than the old 2K version stamped ones they are
installed but not used. This is a problem.
I can see several solutions to this problem:

- Somehow get Samab to prompt a delete of all old drivers (the mappings
not the files obviously as printers can share files) with the same name
before an install form the client.
- Use a CUPS 2K only driver (which does not seem to be available as it
is not usually needed or wanted)
- Remove the old driver before installing the new printer. This however,
totally ruins the click to install metaphor that Samba and CUPS provide.
Does anyone have any suggestions or comments?

James.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Outlook .pst on a samba share; do or don't?

On Tue, 10 Jun 2003, Vizitiu, Ciprian wrote:


  Hi listers.

  People here are trying to push me into moving the Outlook .psts on a samba
 share for back-up reasons. I'd like to hear your experience about this: is
 it feasible in the size of 20 users with 400...800MB each .pst? Any special
 settings on samba side? Something special that I should pay attention to? Or
 is just NO?

It's OK to put the .pst files in a user share, just remember that
performance across the network is slower than to local hard disk.

If you leave the .pst file in the desktop profile then the whole profile
has to be copied across the network into a local profile cache, that can
be VERY slow also. Here the greater slowdown is the time taken to log onto
and off the network.

I prefer to put the .pst files in a user share (the user's home directory
is a good place). Check out the new Samba-3 HOWTO chapter on policies and
the one on profiles to find how to redirect your .pst file to a share.

Cheers,
John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Winbind no longer mapping groups correctly

2003-06-10 Thread Paul Eggleton

Hi there,

I have just discovered that my winbind installation (3.0 alpha 24
w/ACLs, RH 8.0, connected to a Windows 2000 ADS domain) seems to be no
longer mapping groups correctly. Executing the groups command for any
particular domain user fails, complaining that it can't get the group
name for various winbind-ranged gids. Doing an ls of a directory created
from Windows via samba works fine, however, listing the user/group names
correctly.

Here is a somewhat worrying excerpt from log.winbindd:
-- snip -
[2003/06/11 15:48:29, 1] nsswitch/winbindd_ads.c:enum_dom_groups(254)
  No rid for Server Operators !?
[2003/06/11 15:48:29, 1] nsswitch/winbindd_ads.c:enum_dom_groups(254)
  No rid for Account Operators !?
[2003/06/11 15:48:29, 1] nsswitch/winbindd_ads.c:enum_dom_groups(254)
  No rid for Print Operators !?
[2003/06/11 15:48:29, 1] nsswitch/winbindd_ads.c:enum_dom_groups(254)
  No rid for Pre-Windows 2000 Compatible Access !?
[2003/06/11 15:48:29, 1] nsswitch/winbindd_ads.c:enum_dom_groups(254)
  No rid for Users !?
[2003/06/11 15:48:29, 1] nsswitch/winbindd_ads.c:enum_dom_groups(254)
  No rid for Administrators !?
[2003/06/11 15:48:29, 1] nsswitch/winbindd_ads.c:enum_dom_groups(254)
  No rid for Guests !?
[2003/06/11 15:50:00, 1]
nsswitch/winbindd_sid.c:winbindd_sid_to_uid(142)
  Could not get uid for sid
S-1-5-21-1708537768-2139871995-725345543-1151
[2003/06/11 15:50:45, 1]
nsswitch/winbindd_util.c:rescan_trusted_domains(168)
  scanning trusted domain list
[2003/06/11 15:55:53, 1]
nsswitch/winbindd_util.c:rescan_trusted_domains(168)
  scanning trusted domain list
-- snip -

In all other respects winbind  samba seem to be operating correctly.
Any ideas?

Cheers,
Paul

-
Paul Eggleton  Ph:+64-9-4154790
Software Developer Fax:   +64-9-4154791
CJN Technologies Ltd.  DDI:   +64-9-4154795
http://www.cjntech.co.nz   Email: [EMAIL PROTECTED]
- 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Idmap probs with smb3beta

On Tue, 10 Jun 2003, Collen wrote:

 Well just trying to get the new beta working..

 if i use the passwd plain text file, no probs.
 but i realy like to use the tdbsam (passdb.tdb) file..
 i put passdb backend = tdbsam:/path to passdb.tdb

Try:

passdb backend = tdbsam, guest

The 'guest' is necessary.

 now my error log complains about: Idmap gid range missing  uid range missing.

In your smb.conf [globals] add:

idmap uid = 1-15000
idmap gid = 1-15000

That should solve that error message.

 i mapped the ntdomain groups to unix groups..

Good.


 also i get these same errors using pdbedit...

Before you use pdbedit do:

smbpasswd -a root

That should work.


 second and more problematic is that, as soon as i use tdbsam the domain
 goes down, can't look around, no server in the list...

You need the guest account handler above.

 so how can i map these missing gid  uid ranges.. ??

That's answered above too.

 i thought you mapped your id's through the 'net command'  and with pdbedit ?

You can map your groups using:

net groupmap ...

 Got some tips ?

Yep! Hope they help.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Compiling 2.2.8a with SSL support on Solaris 7

On Tue, 10 Jun 2003 [EMAIL PROTECTED] wrote:

 I'm running into a problem when compiling Samba 2.2.8a with SSL support on
 Solaris 7. The build appears to be choking on redefinitions between the
 Openssl des.h and kerberos/des.h (which is grabbed because it is on the
 system). Here's the error I'm getting:

 In file included from /usr/local/include/openssl/evp.h:89,
  from /usr/local/include/openssl/x509.h:67,
  from /usr/local/include/openssl/ssl.h:69,
  from lib/util.c:53:
 /usr/local/include/openssl/des.h:79: redefinition of `struct des_ks_struct'
 /usr/local/include/openssl/des.h:246: conflicting types for `bit_64'
 /usr/include/kerberos/des.h:48: previous declaration of `bit_64'
 make: *** [lib/util.o] Error 1

 Has anyone run into this problem on Solaris and found a way around it?

Yes. Why do you want SSL support in Samba? Are you aware that not one MS
Windows client supports it? SSL support in Samba is an experimental
feature only.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Compiling 2.2.8a with SSL support on Solaris 7

2003-06-10 Thread Andrew Bartlett

On Wed, Jun 11, 2003 at 04:35:30AM +, John H Terpstra wrote:
 On Tue, 10 Jun 2003 [EMAIL PROTECTED] wrote:
 
  I'm running into a problem when compiling Samba 2.2.8a with SSL support on
  Solaris 7. The build appears to be choking on redefinitions between the
  Openssl des.h and kerberos/des.h (which is grabbed because it is on the
  system). Here's the error I'm getting:
 
  In file included from /usr/local/include/openssl/evp.h:89,
   from /usr/local/include/openssl/x509.h:67,
   from /usr/local/include/openssl/ssl.h:69,
   from lib/util.c:53:
  /usr/local/include/openssl/des.h:79: redefinition of `struct des_ks_struct'
  /usr/local/include/openssl/des.h:246: conflicting types for `bit_64'
  /usr/include/kerberos/des.h:48: previous declaration of `bit_64'
  make: *** [lib/util.o] Error 1
 
  Has anyone run into this problem on Solaris and found a way around it?
 
 Yes. Why do you want SSL support in Samba? Are you aware that not one MS
 Windows client supports it? SSL support in Samba is an experimental
 feature only.

That has been removed from Samba 3.0, for very good reason.

Andrew Bartlett
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Winbind no longer mapping groups correctly

Paul,

Suggest you try this with samba-3.0.0-beta1. If you still have a problem
please let us know.

- John T.

On Wed, 11 Jun 2003, Paul Eggleton wrote:

 Hi there,

 I have just discovered that my winbind installation (3.0 alpha 24
 w/ACLs, RH 8.0, connected to a Windows 2000 ADS domain) seems to be no
 longer mapping groups correctly. Executing the groups command for any
 particular domain user fails, complaining that it can't get the group
 name for various winbind-ranged gids. Doing an ls of a directory created
 from Windows via samba works fine, however, listing the user/group names
 correctly.

 Here is a somewhat worrying excerpt from log.winbindd:
 -- snip -
 [2003/06/11 15:48:29, 1] nsswitch/winbindd_ads.c:enum_dom_groups(254)
   No rid for Server Operators !?
 [2003/06/11 15:48:29, 1] nsswitch/winbindd_ads.c:enum_dom_groups(254)
   No rid for Account Operators !?
 [2003/06/11 15:48:29, 1] nsswitch/winbindd_ads.c:enum_dom_groups(254)
   No rid for Print Operators !?
 [2003/06/11 15:48:29, 1] nsswitch/winbindd_ads.c:enum_dom_groups(254)
   No rid for Pre-Windows 2000 Compatible Access !?
 [2003/06/11 15:48:29, 1] nsswitch/winbindd_ads.c:enum_dom_groups(254)
   No rid for Users !?
 [2003/06/11 15:48:29, 1] nsswitch/winbindd_ads.c:enum_dom_groups(254)
   No rid for Administrators !?
 [2003/06/11 15:48:29, 1] nsswitch/winbindd_ads.c:enum_dom_groups(254)
   No rid for Guests !?
 [2003/06/11 15:50:00, 1]
 nsswitch/winbindd_sid.c:winbindd_sid_to_uid(142)
   Could not get uid for sid
 S-1-5-21-1708537768-2139871995-725345543-1151
 [2003/06/11 15:50:45, 1]
 nsswitch/winbindd_util.c:rescan_trusted_domains(168)
   scanning trusted domain list
 [2003/06/11 15:55:53, 1]
 nsswitch/winbindd_util.c:rescan_trusted_domains(168)
   scanning trusted domain list
 -- snip -

 In all other respects winbind  samba seem to be operating correctly.
 Any ideas?

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] update encypted and LDAP

2003-06-10 Thread Andrew Bartlett

On Wed, 2003-06-11 at 02:36, John H Terpstra wrote:
 On Tue, 10 Jun 2003, Martin Sapsed wrote:
 
  Andrew Bartlett wrote:
   On Tue, 2003-06-10 at 02:13, Martin Sapsed wrote:
  
  Hello all,
  
  I'm currently trying out samba-3.0alpha24 and moving to samba-3.0.0beta1
  since we're getting into XP and encrypted passwords etc. I was hoping to
  set everyone (about 13,000 users) up on an LDAP (openLDAP) server with
  just the Unix crypt passwords for now and run with
  
  encrypt passwords = no
  update encrypted = yes
  
  for a while to populate the NT/LM password hashes before going over to
  encrypted passwords for everyone. (Most clients are Win 9x using plain
  text passwords against NIS at the moment.)
  
   From what I can see and have gathered from some searching, it looks
  like update encrypted only works with an smbpasswd file. Is this the
  case?
  
   The code routines call the passdb backend, whatever that may be.
 
  Testing a bit further seems to suggest that
 
  encrypt passwords = no
 
  doesn't work at all if you're using
 
  passdb backend = ldapsam:ldap://..., guest
 
  in 3.0alpha24. Is this a bug or a feature? ;-)
 
 It's a feature. 

Well if it breaks 'update encrypted' it's a bug...

It's also (not default) possible to do plaintext auth against our NT
SAM, but that's just insane, stupid and very useful for testing :-)

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

CVS update: samba/source/nsswitch

2003-06-10 Thread tpot


Date:   Tue Jun 10 06:07:47 2003
Author: tpot

Update of /data/cvs/samba/source/nsswitch
In directory dp.samba.org:/tmp/cvs-serv27504

Modified Files:
  Tag: APPLIANCE_HEAD
winbindd_group.c 
Log Message:
Fix for cr 2214: use the group list in the cached info3 structure in
preference to the group list returned by the get user groups rpc which
doesn't seem to return the correct group membership in all cases.


Revisions:
winbindd_group.c1.3.2.9 = 1.3.2.10

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_group.c.diff?r1=1.3.2.9r2=1.3.2.10

CVS update: samba/source/libsmb


Date:   Tue Jun 10 06:16:51 2003
Author: jra

Update of /data/cvs/samba/source/libsmb
In directory dp.samba.org:/tmp/cvs-serv28257/libsmb

Modified Files:
  Tag: APPLIANCE_HEAD
cli_samr.c 
Log Message:
Add some basic DEBUG statements at level 10 so we can see what is being
called. This is *essential* (and should be done on all the other cli_XX
rpc calls) to help debug winbindd problems remotely. No CR#.
Jeremy.


Revisions:
cli_samr.c  1.30.2.7 = 1.30.2.8

http://www.samba.org/cgi-bin/cvsweb/samba/source/libsmb/cli_samr.c.diff?r1=1.30.2.7r2=1.30.2.8

CVS update: samba/source/torture

2003-06-10 Thread tridge


Date:   Tue Jun 10 14:01:58 2003
Author: tridge

Update of /home/cvs/samba/source/torture
In directory dp.samba.org:/tmp/cvs-serv6010

Modified Files:
  Tag: SAMBA_3_0
torture.c 
Log Message:
fixed smbtorture LOCK1 test to know about the correct multiplier for
timed blocking locks


Revisions:
torture.c   1.63.2.15 = 1.63.2.16

http://www.samba.org/cgi-bin/cvsweb/samba/source/torture/torture.c.diff?r1=1.63.2.15r2=1.63.2.16

CVS update: samba/source/libsmb

2003-06-10 Thread tridge


Date:   Tue Jun 10 14:02:46 2003
Author: tridge

Update of /home/cvs/samba/source/libsmb
In directory dp.samba.org:/tmp/cvs-serv6128

Modified Files:
  Tag: SAMBA_3_0
clifile.c 
Log Message:
fixed libsmb code to set correct timeout in cli_state when waiting for
a blocking lock



Revisions:
clifile.c   1.39.2.8 = 1.39.2.9

http://www.samba.org/cgi-bin/cvsweb/samba/source/libsmb/clifile.c.diff?r1=1.39.2.8r2=1.39.2.9

CVS update: samba/source

2003-06-10 Thread tridge


Date:   Tue Jun 10 14:09:21 2003
Author: tridge

Update of /home/cvs/samba/source
In directory dp.samba.org:/tmp/cvs-serv6662

Modified Files:
  Tag: SAMBA_3_0
Makefile.in 
Log Message:
removed editreg from standard build until it is portable. Right now it
fails to build on a ton of platforms as it completely bypasses all of
our portability code.

if you want it then use 'make bin/editreg'. If some distros want to
add that to their spec files then thats up to them, but we really
can't have non-portable code unconditionally built in our main tree.


Revisions:
Makefile.in 1.468.2.118 = 1.468.2.119

http://www.samba.org/cgi-bin/cvsweb/samba/source/Makefile.in.diff?r1=1.468.2.118r2=1.468.2.119

CVS update: samba/source/utils

2003-06-10 Thread sharpe


Date:   Tue Jun 10 17:18:07 2003
Author: sharpe

Update of /data/cvs/samba/source/utils
In directory dp.samba.org:/tmp/cvs-serv25397/utils

Modified Files:
  Tag: SAMBA_3_0
editreg.c 
Log Message:

More updates on editreg.c to bring it better in line with the Samba source.



Revisions:
editreg.c   1.31.2.7 = 1.31.2.8

http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/editreg.c.diff?r1=1.31.2.7r2=1.31.2.8

CVS update: samba/source/include


Date:   Tue Jun 10 17:30:28 2003
Author: jra

Update of /data/cvs/samba/source/include
In directory dp.samba.org:/tmp/cvs-serv26290/include

Modified Files:
  Tag: SAMBA_3_0
includes.h safe_string.h 
Log Message:
Ok, I've tried being Mr. Nice Guy and people (you know who you are) still
keep putting bzero BSD'ism's into our source code. Make this an error like
bcopy and others to prevent it in future.
Jeremy.


Revisions:
includes.h  1.262.2.41 = 1.262.2.42

http://www.samba.org/cgi-bin/cvsweb/samba/source/include/includes.h.diff?r1=1.262.2.41r2=1.262.2.42
safe_string.h   1.12.2.8 = 1.12.2.9

http://www.samba.org/cgi-bin/cvsweb/samba/source/include/safe_string.h.diff?r1=1.12.2.8r2=1.12.2.9

CVS update: samba/source/client


Date:   Tue Jun 10 19:27:32 2003
Author: jelmer

Update of /home/cvs/samba/source/client
In directory dp.samba.org:/tmp/cvs-serv3714/client

Modified Files:
  Tag: SAMBA_3_0
client.c 
Log Message:
Don't segfault when -b is specified (fixes debian bug #196833)


Revisions:
client.c1.209.2.23 = 1.209.2.24

http://www.samba.org/cgi-bin/cvsweb/samba/source/client/client.c.diff?r1=1.209.2.23r2=1.209.2.24

CVS update: samba/docs/docbook/projdoc


Date:   Tue Jun 10 19:36:28 2003
Author: jelmer

Update of /home/cvs/samba/docs/docbook/projdoc
In directory dp.samba.org:/tmp/cvs-serv5143/projdoc

Modified Files:
  Tag: SAMBA_3_0
passdb.xml 
Log Message:
Fix 2 typos (reported by Marc Groot Koerkamp [EMAIL PROTECTED])


Revisions:
passdb.xml  1.1.2.18 = 1.1.2.19

http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/projdoc/passdb.xml.diff?r1=1.1.2.18r2=1.1.2.19

CVS update: samba/docs/docbook/projdoc


Date:   Tue Jun 10 19:39:17 2003
Author: jelmer

Update of /home/cvs/samba/docs/docbook/projdoc
In directory dp.samba.org:/tmp/cvs-serv5345/projdoc

Modified Files:
  Tag: SAMBA_3_0
CUPS-printing.xml printer_driver2.xml 
Log Message:
Add authors


Revisions:
CUPS-printing.xml   1.1.2.6 = 1.1.2.7

http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/projdoc/CUPS-printing.xml.diff?r1=1.1.2.6r2=1.1.2.7
printer_driver2.xml 1.1.2.11 = 1.1.2.12

http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/projdoc/printer_driver2.xml.diff?r1=1.1.2.11r2=1.1.2.12

CVS update: samba/docs/docbook/xslt


Date:   Tue Jun 10 19:42:23 2003
Author: jelmer

Update of /home/cvs/samba/docs/docbook/xslt
In directory dp.samba.org:/tmp/cvs-serv5765/xslt

Modified Files:
  Tag: SAMBA_3_0
generate-attributions.xsl 
Log Message:
Handle contrib when generating attributions page


Revisions:
generate-attributions.xsl   1.1.2.3 = 1.1.2.4

http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/xslt/generate-attributions.xsl.diff?r1=1.1.2.3r2=1.1.2.4

Re: CVS update: samba/source/nsswitch

On Tue, Jun 10, 2003 at 06:07:47AM +, [EMAIL PROTECTED] wrote:
 
 Date: Tue Jun 10 06:07:47 2003
 Author:   tpot
 
 Update of /data/cvs/samba/source/nsswitch
 In directory dp.samba.org:/tmp/cvs-serv27504
 
 Modified Files:
   Tag: APPLIANCE_HEAD
   winbindd_group.c 
 Log Message:
 Fix for cr 2214: use the group list in the cached info3 structure in
 preference to the group list returned by the get user groups rpc which
 doesn't seem to return the correct group membership in all cases.

Merge with 3.0 please (message from your janitor-in-chief :-).

Jeremy.

CVS update: samba/source/nsswitch


Date:   Tue Jun 10 21:53:24 2003
Author: jra

Update of /data/cvs/samba/source/nsswitch
In directory dp.samba.org:/tmp/cvs-serv19448/nsswitch

Modified Files:
  Tag: APPLIANCE_HEAD
winbindd_cache.c 
Log Message:
Instrument the cache code in winbindd so I can tell what is going on.
No CR#.
Jeremy.


Revisions:
winbindd_cache.c1.5.2.20 = 1.5.2.21

http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_cache.c.diff?r1=1.5.2.20r2=1.5.2.21

CVS update: samba/source/nsswitch