[Samba] SAMBA3.0.0 ADS SETUP

2003-06-28 Thread Talwar, Puneet (NIH/NIAID)
HI,
 
I would like to know some peoples experience on samba authentication against
ADS and if so how was the setup procedure and did the authentication part of
mechanism work that way you wanted it to?
 
Thanks,
 
Puneet
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Add Machine Failed

2003-06-28 Thread John H Terpstra
On Sat, 28 Jun 2003 [EMAIL PROTECTED] wrote:


The smbpasswd file may not exist. Log on as root, then execute:

smbpasswd -a root

After prompting for the password twice this account should be added to a
newly created smbpasswd file. This is the account you must use to add
Windows clients to the domain, you also need this password to do it.

- John T.

> I know I am getting tiresome to this list, but I can't see what I am doing
> wrong, which is obviously something.  I am new to samba as far as setting
> it up as a PDC.  I am not having trouble accessing sanba shares when I set
> my computer to be part of a workgroup, but when I try to configure samba
> server as a PDC, i get the following message:
>
> The account used is a computer account.  Use your global or local user
> account to access this server.
>
> I have added the following line to smb.conf:
>
> add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
>
> The domain I am trying to join is not the same as the workgroup I am trying
> to leave.
>
> Savy is my machine name. I see the following in the savy.log file every time
> I try to join the domain:
>
> [2003/06/28 18:23:41, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1369)
>   unable to open passdb database.
> [2003/06/28 18:23:41, 0] passdb/pdb_smbpasswd.c:add_smbfilepwd_entry(575)
>   add_smbfilepwd_entry: unable to open file.
> [2003/06/28 18:23:41, 0]
> rpc_server/srv_samr_nt.c:_api_samr_create_user(1929)
>   Failed to add entry for user savy$.
>
> [2003/06/28 18:23:42, 0] rpc_server/srv_netlog_nt.c:get_md4pw(176)
>   get_md4pw: Workstation savy$: no account in domain
>
> My smb.conf contains the following :
>
> [global]
>
> # workgroup = NT-Domain-Name or Workgroup-Name
>
>workgroup = boostus
>netbios name = alvarado
>os level = 64
>domain master = yes
>local master = yes
>preferred master = yes
>security = user
>encrypt passwords = yes
>domain logons = yes
>logon drive = h:
>logon home = \\alvarado\home\%u
>
> # server string is the equivalent of the NT Description field
>server string = Samba Server
>
> # than setting them up individually then you'll need this
>printcap name = /etc/printcap
>load printers = yes
>
> # It should not be necessary to spell out the print system type unless
> # yours is non-standard. Currently supported print systems include:
> # bsd, sysv, plp, lprng, aix, hpux, qnx, cups
>printing = cups
>
> # this tells Samba to use a separate log file for each machine
> # that connects
>log file = /var/log/samba/%m.log
>
> # Put a capping on the size of the log files (in Kb).
>max log size = 0
>
> # Security mode. Most people will want user level security. See
> # security_level.txt for details.
>security = user
>
> # You may wish to use password encryption. Please read
> # ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
> # Do not enable this option unless you have read those documents
>encrypt passwords = yes
>smb passwd file = /etc/samba/smbpasswd
>
> # NOTE2: You do NOT need these to allow workstations to change only
> #the encrypted SMB passwords. They allow the Unix password
> #to be kept in sync with the SMB password.
>unix password sync = Yes
>passwd program = /usr/bin/passwd %u
>passwd chat = *New*password* %n\n *Retype*new*password* %n\n
> *passwd:*all*authentication*tokens*updated*successfully*
>
> add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M
> %u
>
>pam password change = yes
>obey pam restrictions = yes
>
> # Most people will find that this option gives better performance.
> # See speed.txt and the manual pages for details
>socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>
>wins support = yes
>
> # DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names
> # via DNS nslookups. The built-in default for versions 1.9.17 is yes,
> # this has been changed in version 1.9.18 to no.
>dns proxy = no
>
> # Share Definitions ==
> [homes]
>comment = Home Directories
>browseable = no
>writable = yes
>valid users = %S
>create mode = 0664
>directory mode = 0775
> # If you want users samba doesn't recognize to be mapped to a guest user
> ; map to guest = bad user
>
>
> # Un-comment the following and create the netlogon directory for Domain
> Logons
> [netlogon]
>comment = Network Logon Service
>path = /home/netlogon
>guest ok = yes
>writable = no
>share modes = no
>
> # NOTE: If you have a BSD-style print system there is no need to
> # specifically define each individual printer
> [printers]
>comment = All Printers
>path = /var/spool/samba
>browseable = no
> # Set public = yes to allow user 'guest account' to print
>guest ok = no
>writable = no
>printable = yes
>
> tia,
> cmc
>
>

-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To un

Re: [Samba] Problem with OS X (as client) to Samba on Linux box

2003-06-28 Thread Kyle Loree
l.m.orchard <[EMAIL PROTECTED]> writes:
>Hoping someone can give me a pointer on this:
>
>I'm trying to connect a Mac OS X 10.2.6 machine to Samba 2.2.8 hosted 
>on a Linux 2.2.20 machine.  I can authenticate, connect to a share, 
>navigate through.  I can even delete and move files.  But, whenever I 
>try to save a file in most programs, or copy a file in the Finder, I'm 
>told that I don't have the privileges to do it.
>
>Strangely enough, I've found that if I copy files in the shell, 
>straight into the volume mounted under /Volumes/, things work fine.  
>I've also played with file permissions like crazy, but to no avail.  
>Windows and Linux machines at my office have no problems.
>
>Having been successful in the shell, I wonder if it has something to do 
>with the "._" files OS X tries creating in order to preserve the 
>resource fork of files?
>
>I'm out of ideas on this one, can anyone help?
>
>--
>l.m.orchard <[EMAIL PROTECTED]> http://www.decafbad.com/
>...see you space cowboy.
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  http://lists.samba.org/mailman/listinfo/samba

I just tested saving from word to the share.
Version 2.2.3a-12 for Debian
worked fine for me, running os 10.2.6 with the developers tools loaded,
and fink installed.
no rforks were created though.
What user is the share mounted as?  the program would try to create the
file with the name of the user that started the app.
other than that,  what programs?

best of luck, hope I can be of help.

Kyle Loree
Rendek Communications
[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Add Machine Failed

2003-06-28 Thread cmc
I know I am getting tiresome to this list, but I can't see what I am doing 
wrong, which is obviously something.  I am new to samba as far as setting 
it up as a PDC.  I am not having trouble accessing sanba shares when I set 
my computer to be part of a workgroup, but when I try to configure samba 
server as a PDC, i get the following message:

The account used is a computer account.  Use your global or local user 
account to access this server.

I have added the following line to smb.conf:

add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u

The domain I am trying to join is not the same as the workgroup I am trying 
to leave.

Savy is my machine name. I see the following in the savy.log file every time 
I try to join the domain:

[2003/06/28 18:23:41, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1369)
  unable to open passdb database.
[2003/06/28 18:23:41, 0] passdb/pdb_smbpasswd.c:add_smbfilepwd_entry(575)
  add_smbfilepwd_entry: unable to open file.
[2003/06/28 18:23:41, 0] 
rpc_server/srv_samr_nt.c:_api_samr_create_user(1929)
  Failed to add entry for user savy$.
   
  
[2003/06/28 18:23:42, 0] rpc_server/srv_netlog_nt.c:get_md4pw(176)
  get_md4pw: Workstation savy$: no account in domain

My smb.conf contains the following :

[global]

# workgroup = NT-Domain-Name or Workgroup-Name

   workgroup = boostus
   netbios name = alvarado
   os level = 64
   domain master = yes
   local master = yes
   preferred master = yes
   security = user
   encrypt passwords = yes
   domain logons = yes
   logon drive = h:
   logon home = \\alvarado\home\%u

# server string is the equivalent of the NT Description field
   server string = Samba Server

# than setting them up individually then you'll need this
   printcap name = /etc/printcap
   load printers = yes

# It should not be necessary to spell out the print system type unless
# yours is non-standard. Currently supported print systems include:
# bsd, sysv, plp, lprng, aix, hpux, qnx, cups
   printing = cups

# this tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba/%m.log

# Put a capping on the size of the log files (in Kb).
   max log size = 0

# Security mode. Most people will want user level security. See
# security_level.txt for details.
   security = user

# You may wish to use password encryption. Please read
# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
# Do not enable this option unless you have read those documents
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd

# NOTE2: You do NOT need these to allow workstations to change only
#the encrypted SMB passwords. They allow the Unix password
#to be kept in sync with the SMB password.
   unix password sync = Yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *New*password* %n\n *Retype*new*password* %n\n 
*passwd:*all*authentication*tokens*updated*successfully*

add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M 
%u

   pam password change = yes
   obey pam restrictions = yes

# Most people will find that this option gives better performance.
# See speed.txt and the manual pages for details
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

   wins support = yes

# DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names
# via DNS nslookups. The built-in default for versions 1.9.17 is yes,
# this has been changed in version 1.9.18 to no.
   dns proxy = no 

# Share Definitions ==
[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   valid users = %S
   create mode = 0664
   directory mode = 0775
# If you want users samba doesn't recognize to be mapped to a guest user
; map to guest = bad user


# Un-comment the following and create the netlogon directory for Domain 
Logons
[netlogon]
   comment = Network Logon Service
   path = /home/netlogon
   guest ok = yes
   writable = no
   share modes = no

# NOTE: If you have a BSD-style print system there is no need to 
# specifically define each individual printer
[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
# Set public = yes to allow user 'guest account' to print
   guest ok = no
   writable = no
   printable = yes

tia,
cmc

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Listing samba 2.2.8a (redhat 8) verables to a text file

2003-06-28 Thread Thomas Bork
Hi Peter Atkin,

you wrote:

> However i would like to do two things,
>
> 1) print samba veriables to a log file in a location of my choice
> 2) When a windows test user logs on, i would like to display a
> windowed dialog box showing the verious samba veriable stats.

this is what I do in my samba package for www.eisfair.org (adapted from
Joel ;):

#! /bin/sh
#--
--
# /usr/local/bin/smbinfo - write info to /tmp/smbinfo
#
# Copyright (c) 2001-2003 Thomas Bork <[EMAIL PROTECTED]>
#
# Creation: 28.07.2002  tb
# Last Update:  12.11.2002  tb
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#--
--

i=`echo "$1" | tr -s " "`
index=`echo "$i" | cut -d" " -f1`
value=`echo "$i" | sed 's/^. //'`
case $index in
T )  message="Datum/Zeit (%$index)
= $value";;
d )  message="PID des Servers(%$index)
= $value";;
v )  message="Samba-Version  (%$index)
= $value";;
h )  message="(Internet)Hostname des Servers (%$index)
= $value";;
L )  message="NETBIOS-Name des Servers   (%$index)
= $value";;
N )  message="NIS Heimat-Verzeichnis (%$index)
= $value";;
p )  message="Pfad des NIS-Heimatverzeichnisses  (%$index)
= $value";;
R )  message="Ausgehandeltes Protokoll-Level (%$index)
= $value";;
S )  message="Name der aktuellen Freigabe(%$index)
= $value";;
P )  message="Hauptverzeichnis der aktuellen Freigabe(%$index)
= $value";;
U )  message="Vom Client angeforderter Benutzername  (%$index)
= $value";;
G )  message="Primaere Gruppe des angeforderten Benutzers(%$index)
= $value";;
u )  message="Name des effektiven Benutzers  (%$index)
= $value";;
g )  message="Primaerer Gruppenname des effektiven Benutzers (%$index)
= $value";;
H )  message="Heimatverzeichnis des effektiven Benutzers (%$index)
= $value";;
I )  message="IP Adresse des Client-Rechners (%$index)
= $value";;
M )  message="(Internet)Hostname des Client-Rechners (%$index)
= $value";;
m )  message="NETBIOS-Name des Client-Rechners   (%$index)
= $value";;
a )  message="Betriebssystem des Client-Rechners (%$index)
= $value";;
esac

echo "$message" >> /tmp/samba-smbinfo


In smb.conf:

[public]
   comment = public directory on vmeis
   path = /public
   public = yes
   create mode = 0777
   directory mode = 0777
   browseable = yes
   writable = yes
   oplocks = no
   level2 oplocks = no
   blocking locks = no
   preexec = echo "\"T %T \" \"d %d \" \"v %v \" \"h %h \" \"L %L \"
\"N %N \"
   \"p %p \" \"R %R \" \"S %S \" \"P %P \" \"U %U \"
\"G %G \"
   \"u %u \" \"g %g \" \"H %H \" \"I %I \" \"M %M \"
\"m %m \"
   \"a %a \"" | xargs -n1
/usr/local/bin/samba-smbinfo;\
 smbclient -U "eisfair Samba Server" -M %m
http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Listing samba 2.2.8a (redhat 8) verables to a text file

2003-06-28 Thread Joel Hammer
Here is a response I just sent to somebody else who wanted to prevent
a user from logging on twice at the same time. You may find it useful,
if you use bash. It saves the data in a file /tmp/Hello

Here is a possibly useful tool for figuring out what you want. This smb.conf
share, with the script Hello, captures all the variables passed when a user
logs on. This may help you writing your script. With the results of this
script and the output of smbstatus, you could really fine tune what you
do.
With care, just cut and paste this into your smb.conf file.


[public]
comment = Root directory
path = /
read only = no
create mask = 0777
exec = rm /tmp/Hello;echo \"m %m \" \"G %G \" \"I %I \" \"L %L \" \"M %M \" 
\"N %N \" \"R %R \" \"T %T \" \"U %U \" \"a %a \" \"d %d \" 
\"h %h \" \"p %p \" \"v %v \" \"H %H \" \"P %P \" \"S %S \" 
\"g %g \" \"u %u \"  | xargs -n1 /usr/local/samba/bin/Hello;\
  echo This is my home %$(HOME) >> /tmp/Hello


The script Hello is as follows:


#!/bin/bash
 i=`echo "$1" | tr -s " "`
 index=`echo "$i" | cut -d" " -f1`
 value=`echo "$i" | sed 's/^. //'`
 case $index in
   m )  message="client machine NetBios name = $value";;

   M )  message="Internet DNS of client= $value";;

   I )  message="IP address of client = $value";;

   a )  message="Architecture of remote machine= $value";;

   U )  message="Session user name (one the client wanted)= $value";;

   L )  message="Netbios name of server = $value";;

   h )  message="Internet DNS hostname of server= $value";;

   R )  message="Protocal level = $value";;

   v )  message="Samba version= $value";;

   T )  message="Current time and date= $value";;

   G )  message="Primary goup name of U = $value";;

   N )  message="NIS home directory= $value";;

   d )  message="Process ID of current server= $value";;

   p )  message="Path of services home directory from NIS= $value";;

   H )  message="Home directory of user in u= $value";;

   P )  message="Root directory of current service = $value";;

   S )  message="Name of current service = $value";;

   g )  message="Primary group name of u in share = $value";;

   u )  message="User name of current service = $value";;
esac
echo $message \(\%$index\) >> /tmp/Hello


The output should look like this:

client machine NetBios name = hammer10 (%m)
Primary goup name of U = ftp (%G)
IP address of client = 192.168.1.10 (%I)
Netbios name of server = jhammer6 (%L)
Internet DNS of client= hammer10.jhammer.org (%M)
NIS home directory= jhammer6 (%N)
Protocal level = NT1 (%R)
Current time and date= 2003/06/26 06:56:28 (%T)
Session user name (one the client wanted)= anonymous (%U)
Architecture of remote machine= Samba (%a)
Process ID of current server= 13089 (%d)
Internet DNS hostname of server= jhammer6 (%h)
Path of services home directory from NIS= (%p)
Samba version= 2.2.1a (%v)
Home directory of user in u= /home/ftp (%H)
Root directory of current service = / (%P)
Name of current service = public (%S)
Primary group name of u in share = ftp (%g)
User name of current service = ftp (%u)
This is my home /home/jlh

The above is what I get when I log on as user jlh but ask for a guest access,
with the guest account being ftp.
Note, you have the process ID of the connection. That could be killed with
kill -15 %d if you wanted to.

Joel


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Listing samba 2.2.8a (redhat 8) verables to a text file

2003-06-28 Thread Peter Atkin
I have been using samba for a while now with great sucesses it has replaced my Windows 
2000 server completely, I am using 
a mix of windows98, 2000 and XP with no problems.

However i would like to do two things, 

1) print samba veriables to a log file in a location of my choice
2) When a windows test user logs on, i would like to display a windowed dialog box 
showing the verious samba veriable 
stats.

Can this be down without melting my brain, I have tried verious options without much 
sucsess.

Just for refernace here is my current current smb.conf file.

# Computer Facilities
# currently and always under delvelopment using samba 2.2.8a on linux 8 
# /etc/samba/smb.conf
# last edit date was 22/06/2003 (D/M/Y)

[Global]
workgroup = cfu
netbios name = linuxserver
server string = Samba %v File Server on %L  

domain logons = yes
domain master = yes
dns proxy = No
preferred master = yes
local master = yes
os level = 99
security = user
domain admin group = @admin
domain logons = Yes

;socket options = TCP_NODELAY SO_SNDBUF=20480 SO_RCVBUF=20480 IPTOS_LOWDELAY 
lock spin time = 15
lock spin count = 100
level2 oplocks = no
oplocks = no
getwd cache = yes

log level = 3
log file = "/var/log/samba/%U-%m.log"
max log size = 0

logon path =
logon home =

logon drive = H:
logon home = "\\Nas_server\User\%u"
logon script = "%u.bat"

browseable = no

default case = lower

case sensitive = no

preserve case = no

encrypt passwords = yes

deadtime = 15

time server = yes

hosts allow = 10.0.0.0/255.255.255.0 127.0.0.1 EXCEPT 10.0.0.100 10.0.0.4 
10.0.0.1
hosts deny = 0.0.0.0/0
hide unreadable = yes
interfaces = 10.0.0.0/255.255.255.0 127.0.0.1
bind interfaces only = Yes
unix password sync = true
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n 
*passwd:*all*authentication*tokens*updated*successfully*
add user script = /usr/sbin/useradd -d /dev/null \
-d /dev/null  \
-g machines   \
-s /bin/false \
-M %u


[homes]
comment = Users network home directory
path = /mnt/nas/users/u%
;read only = no
;create mode = 0600
;directory mode = 0700

[netlogon]
comment = Network Logon Service 
path = /mnt/nas/logon
write list = @admin
guest ok = no

[backup]
path = /backup
valid users = @admin
read only = yes
write list = @admin
force create mode = 0775
force group = admin
directory mask = 0775

[source]
browseable = yes
path = /mnt/nas/source
valid users = @admin
read only = yes
write list = @admin, root
force create mode = 0775
force group = admin
directory mask = 0775

[public]
browseable = yes
path = /mnt/nas/public
valid users = @admin
read only = yes
write list = @admin, root
force create mode = 0775
force group = admin
directory mask = 0775

[music]
comment = MP3 Music
browseable = yes
path = /mnt/nas/music
valid users = @staff
read only = yes
write list = @admin
force create mode = 0775
force group = admin
directory mask = 0775


Kind Regards

Peter

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Help please, samba IPv6 support?

2003-06-28 Thread lordjohn
Hi guys

I really need to know if samba have a version with native IPv6 support.

I have tried the patch present in http://v6web.litech.org/samba/ but it seams
that doesnt works. For example, the smbclient dont understand ipv6 addresses and
when connecting to machines with ipv6, doesnt detect the ipv6 addresses in 445 port.

   Thanx

PS:Sorry my enlish

 




__
O email preferido dos portugueses agora com 
100Mb de espaço e acesso gratuito à Internet
http://www.portugalmail.com/gold/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] exec scripts question

2003-06-28 Thread Joel Hammer
Anything in the samba logs?
Joel

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] exec scripts question

2003-06-28 Thread Joel Hammer
exec works in global and share definitions.
I haven't tried what you are doing, but simply thinking out loud:
Could this be a permissions problem?
Is %U defined when you try to call it?
Can samba find the mkdir command? 
Is this a special problem for the [homes] share?
Joel

On Sat, Jun 28, 2003 at 11:59:26PM +1000, ipguy wrote:
> i'm having problems with preexec scripts... see example below
> 
> [homes]
> preexec = mkdir /samba/users/%U
> 
> do exec scripts only work in a Samba PDC setup or are we able to use exec
> scripts in any setup ?
> if you look at the preexec script above, all i'm trying to do is make a dir
> for the connecting user (i don't need to make an account as the samba server
> is seup as a domain member server to a NT4 PDC, i'm using winbind for
> accounts)
> why wouldn't the script work ?
> it's to simple for it not to
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] exec scripts question

2003-06-28 Thread David Morel
Le sam 28/06/2003 à 15:59, ipguy a écrit :
> i'm having problems with preexec scripts... see example below
> 
> [homes]
> preexec = mkdir /samba/users/%U
> 
> do exec scripts only work in a Samba PDC setup or are we able to use exec
> scripts in any setup ?
> if you look at the preexec script above, all i'm trying to do is make a dir
> for the connecting user (i don't need to make an account as the samba server
> is seup as a domain member server to a NT4 PDC, i'm using winbind for
> accounts)
> why wouldn't the script work ?
> it's to simple for it not to

I read several reports of failure about that. Haven't tried it myself,
but I remember an answer was that pam_mkhomedir was meant to do
precisely that.

David

-- 
***
[EMAIL PROTECTED]
OpenPGP public key: http://www.amakuru.net/dmorel.asc
28192ef126bc871757cb7d97f4a44536



signature.asc
Description: Ceci est une partie de message=?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e?=
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] exec scripts question

2003-06-28 Thread ipguy
i'm having problems with preexec scripts... see example below

[homes]
preexec = mkdir /samba/users/%U

do exec scripts only work in a Samba PDC setup or are we able to use exec
scripts in any setup ?
if you look at the preexec script above, all i'm trying to do is make a dir
for the connecting user (i don't need to make an account as the samba server
is seup as a domain member server to a NT4 PDC, i'm using winbind for
accounts)
why wouldn't the script work ?
it's to simple for it not to


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] RID numbers

2003-06-28 Thread Andrew Bartlett
On Sat, 2003-06-28 at 21:01, Andrey Nepomnyaschih wrote:
> Thanks for the answer Andrew,
> 
> I've got another question on the RID numbers.
> 
> It's a long time for now RIDs for users and groups should have been
> calculated from uidNumber and gidNumber respectively. If I set RID of
> user to anything else than (uidNumber * 2 + 1000) I'm asking for big
> troubles. Is there any feature in plans to remove this requirement? And
> does sambaGroupMapping class in schema solves this for groups?

With Samba 3.0beta2 (and current CVS) if you have an entry in LDAP with
both the SambaSID and the uidNumber it should use that mapping.

Likewise for groups, with that sambaGroupMapping.

You should consider your case carefully - only do this if you need to,
and consider if you want to adjust the value of 'algrithmic RID base' to
avoid having an algorithmic RID in that space.

Andrew Bartlett

-- 
Andrew Bartlett <[EMAIL PROTECTED]>


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] ask about oplock kernel in detail

2003-06-28 Thread ardi
Hi all..

I see that there is oplock kernel option in samba

Is there somebody here that can help me to get an
information / link about how the kernel manage that
oplock option.

I'm not looking for an explanation about how the
oplock do their job, but im looking for something in
detail or general howto or maybe theory about kernel
task on file activity.

I want to compare how linux (samba) and windows do
their job behind their kernel, so it would be nice if
I can get both documentation (in Linux and Windows)

Thank's all

-ardi-



__
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] RID numbers

2003-06-28 Thread Andrey Nepomnyaschih
Thanks for the answer Andrew,

I've got another question on the RID numbers.

It's a long time for now RIDs for users and groups should have been
calculated from uidNumber and gidNumber respectively. If I set RID of
user to anything else than (uidNumber * 2 + 1000) I'm asking for big
troubles. Is there any feature in plans to remove this requirement? And
does sambaGroupMapping class in schema solves this for groups?

Have a good time,
Andrey Nepomnyaschih

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Andrew Bartlett
Sent: Saturday, June 28, 2003 2:26 PM
To: Andrey Nepomnyaschih
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] Computer Account


On Sat, 2003-06-28 at 18:33, Andrey Nepomnyaschih wrote:
> Hello,
> 
> Does samba-3.0.0beta-1 still requires a computer account to be present
> inside OS user database? I had heard there were moves to make that 
> obsolete.

No, provided you correctly configure it, this is no longer required.

If you allocate 'idmap uid 1-2' then smbd will create accounts
in that range, if they don't already exist.  This will be tightened up a
little, but for machines should still work. 

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Can't add machine account to domain

2003-06-28 Thread Admir
try also to add this line:
add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u

It work for me!



regards,

Admir



<[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
>
> I am running samba-2.2.7a-7.9.0 on RedHat 9.0.  The domain I am trying
> to join has a different name than the workgroup I am trying to leave.
>
> Below is a copy of the last two entries of the computer_name.log, which
> are created when I try to add the machine account.
>
> [2003/06/27 15:57:24, 0]
> rpc_server/srv_samr_nt.c:_api_samr_create_user(1929)
>   User carroll-313cny4$ does not exist in system password file (usually
> /etc/passwd). Cannot add account without a valid local system user.
>
> [2003/06/27 15:57:26, 0] rpc_server/srv_netlog_nt.c:get_md4pw(176)
>   get_md4pw: Workstation carroll-313cny4$: no account in domain
>
> tia,
> cmc
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] urgent request please

2003-06-28 Thread benedict . moful
sir,
 
 I need your help, i am  Benedict moful, the son of a
 
   Late minister during the reign of mobutu seseko,
   I came to know you in the course of my search for
 a reliable and God fearing partner and I decide
   to contact you because I believe you are a reputable

  person and I felt you can help us over this
   confidential
matter. I count on your intergrity and honesty to be
 able
 to handle this business.


  My father was a minister in Democratic Republic of
   Congo during the reign of Late President Mobutu.
  Our father was killed during the rebel attack and
  our house was burnt. We  manage to escape to Ghana
 with  my mother and two of my sisters
   where we are now taking refuge.Before the death of
 my father he deposited US50 MILLION, with a
   security
  company in Europe.The money is kept in a trunk boxes
 
 and was registered as precious substance. Thus there
   is
 nobody that knows that it is money that is in the
   box.

  All the document with which the money was deposited
  is

   with us. I am lookinf for somebody to that is
   capable
 and willing to travel to any part of   Europe to
   receive the two trunk boxes of money on behalf of my
   family from the security company.
 
   We need a trust worthy and experience person that
   will

 help us to invest this money in your country  and
  take
us as one family  and will also buy a house for us
   over
 there where we can live safely.
 
 
   We are expecting to hear from you.Please contact me
  on

   this Email Address:[EMAIL PROTECTED]
 Thanks for your  anticipated cooperation.please
  include your telephone number and fax number in
  your reply
 
Best Regards,
 
 BENEDICT MOFUL
 


 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Computer Account

2003-06-28 Thread Andrew Bartlett
On Sat, 2003-06-28 at 18:33, Andrey Nepomnyaschih wrote:
> Hello,
> 
> Does samba-3.0.0beta-1 still requires a computer account to be present
> inside OS user database? I had heard there were moves to make that
> obsolete. 

No, provided you correctly configure it, this is no longer required.

If you allocate 'idmap uid 1-2' then smbd will create accounts
in that range, if they don't already exist.  This will be tightened up a
little, but for machines should still work. 

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] I don't see any domain groups with usrmgr

2003-06-28 Thread Admir
Yo,

I have samba 3 beta running as pdc on Red Hat 8. When I try to view groups
with usrmgr I see domain name but no groups, only users.
Can someone please tel me or give a clue how to make groups avalible in
usrmgr en poledit.

Regards,

Admir



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Probs with smbfs

2003-06-28 Thread David Morel

> On Fri, Jun 27, 2003 at 02:11:45PM -0300, michelld wrote:
> > Hi all 
> > I am having trouble with my SMBFS and it is the following 
> > Every time I try to connect to other machine in my network, throught the command 
> > MOUNT, the folowing ERROR appears. I've already tried to see the manpage but i had 
> > not success. 
> > [EMAIL PROTECTED] bin] mount -t smbfs //sarq/c /mnt/windows
> > Password: 
> > ERROR: smbfs filesystem not supported by the kernel 
> > Please refer to the smbnt (8) manual page 
> > smbmnt failed: 255 
> > I want to remember that service smb is running and last week, it was working 
> > properly. 
> > Please i need this help
> > I get very please about your attention. Thanks a lot 

smbfs has little to do with smbd/nmbd; samba is the server (user-space),
while smbfs is the client part (kernel-space), compiled in the kernel or
as a module.
the error message means smbfs is not supportred by your kernel, so you
must either recompile your kernel with smbfs support, or load the
relevant module (something like smbfs.o i guess)
Wether the smb service ( meaning smbd+nmbd i guess) is running or not
makes no difference.
and also, instead of using mount -t smbfs, you'd rather use smbmount
(man smbmount)

D.Morel

-- 
***
[EMAIL PROTECTED]
OpenPGP public key: http://www.amakuru.net/dmorel.asc
28192ef126bc871757cb7d97f4a44536



signature.asc
Description: Ceci est une partie de message=?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e?=
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Computer Account

2003-06-28 Thread Andrey Nepomnyaschih
Hello,

Does samba-3.0.0beta-1 still requires a computer account to be present
inside OS user database? I had heard there were moves to make that
obsolete. 

Andrey Nepomnyaschih

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba