[Samba] Info from the object picker was incomplete
I have a small domain at home, which I recently upgraded to Samba 3.0 (tried beta2 and the current cvs SAMBA_3_0 branch). I am unable to add Domain Admins to the local Administrators group (they were not there by default, which is strange) on an XP box. The message I get is --- Local Users and Groups --- Information returned from the object picker for object "Domain Admins" was incomplete. The object will not be processed. --- OK --- I have scoured google on this message, and found questions like this but no answers. This only happens when I attempt to add a group from the domain to a local group on XP. I can add domain users to local groups no problem. Anybody seen anything like this? And, better yet, anybody know how to fix it. I am not subscribed to the list, please CC me in responses. Thanks, Jeremy -- When choosing between two evils, I always like to take the one I've never tried before. -- Mae West, "Klondike Annie" -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] How to restrict samba access to ipsec?
I have a standalone Linux server (no network behind it) running Freeswan ipsec and Samba, and client systems connect to it over the Internet. What is the best way to make Samba accessible only via the ipsec0 interface? Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Manually add machine trust?
Is it possible to add machine manually and then client did not need administrator user to join their machine to the samba domain? It is possible with WNT 4, but seems not work on samba 3.0b3. I already add machine account manually, but whenever client wants to join, it still ask for administrator password. I have to migrate lot of client and it seems not practical to go to client one by one and re-join the workstation. --beast -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Fwd: Re: [Samba] Join from Win2K to Samba domain problem
Note: forwarded message attached. - Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Join from Win2K to Samba domain problem
please help!! anthony ho <[EMAIL PROTECTED]> wrote:Thanks a lot! I followed your guides..Still failed! The auth works properly in Win 98 indeed. I dont why. Jan Peuker wrote: > The errors are : > 'The credentials supplied conflict with an existing set of credentials.' > Deactive all Printers pointing to LINUXSMB, deconnect all network drives (especially in the win2k network neighborhood overview and workplace) and try again. Then go to "cmd" and do a "net file" and "net use" - are there any connections to the server left? I think this could help, jan - Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software# This is the main Samba configuration file. You should read the # smb.conf(5) manual page in order to understand the options listed # here. Samba has a huge number of configurable options (perhaps too # many!) most of which are not shown in this example # # Any line which starts with a ; (semi-colon) or a # (hash) # is a comment and is ignored. In this example we will use a # # for commentry and a ; for parts of the config file that you # may wish to enable # # NOTE: Whenever you modify this file you should run the command "testparm" # to check that you have not made any basic syntactic errors. # #=== Global Settings = [global] # #security = user encrypt passwords = yes ldap server = ws18 ldap port = 389 ldap suffix ="dc=my-domain,dc=com" ldap admin dn = "cn=Manager,dc=my-domain,dc=com" ldap ssl = no netbios name = linux # workgroup = NT-Domain-Name or Workgroup-Name workgroup = LINUXSMB1 logon drive = U: logon path = \\%L\profiles\%G # server string is the equivalent of the NT Description field server string = Samba Server # add user script = /usr/local/sbin/smbldap-useradd.pl -w %u domain admin group = " @"Domain Admins" " #add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u$ # This option is important for security. It allows you to restrict # connections to machines which are on your local network. The # following example restricts access to two C class networks and # the "loopback" interface. For more examples of the syntax see # the smb.conf man page ; hosts allow = 192.168.1. 192.168.2. 127. # if you want to automatically load your printer list rather # than setting them up individually then you'll need this printcap name = /etc/printcap load printers = yes # It should not be necessary to spell out the print system type unless # yours is non-standard. Currently supported print systems include: # bsd, sysv, plp, lprng, aix, hpux, qnx printing = lprng # Uncomment this if you want a guest account, you must add this to /etc/passwd # otherwise the user "nobody" is used ; guest account = pcguest # this tells Samba to use a separate log file for each machine # that connects log file = /var/log/samba/%m.log #public = No #browsable = No # Put a capping on the size of the log files (in Kb). max log size = 0 # Security mode. Most people will want user level security. See # security_level.txt for details. # security = user # Use password server option only with security = server # The argument list may include: # password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name] # or to auto-locate the domain controller/s # password server = * ; password server = # Password Level allows matching of _n_ characters of the password for # all combinations of upper and lower case. ; password level = 8 ; username level = 8 # You may wish to use password encryption. Please read # ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation. # Do not enable this option unless you have read those documents null passwords = yes encrypt passwords = yes # smb passwd file = /usr/local/samba/smbpasswd # smb passwd file = /etc/samba/smbpasswd # The following is needed to keep smbclient from spouting spurious errors # when Samba is built with support for SSL. ; ssl CA certFile = /usr/share/ssl/certs/ca-bundle.crt # The following are needed to allow password changing from Windows to # update the Linux system password also. # NOTE: Use these with 'encrypt passwords' and 'smb passwd file' above. # NOTE2: You do NOT need these to allow workstations to change only # the encrypted SMB passwords. They allow the Unix password # to be kept in sync with the SMB password. unix password sync = Yes # passwd program = /usr/bin/passwd %u passwd program = /usr/local/sbin/smbldap-passwd.pl -o %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* # You can use PAM's password change control flag for Samba. If # enabled, then PAM will be used for password changes when requested # by an SMB client instead of the program listed in passwd program. # It should be possible to enable this without changing your passwd # chat parameter for most setups. pam password change = yes # Unix users can
Re: [Samba] Strange Problem
On Mon, Aug 04, 2003 at 04:11:45PM -0700, D. Rick Anderson wrote: > I'm having a strange problem with Samba 2.2.8 on RH 9.0. > > When I delete a folder on the server from a workstation, it gives me an > error saying that it can't be found and the folder remains in Explorer, > but if I look on the server (via SSH) the folder is gone. If I hit F5 on > the machine that I'm using to delete the file, the folder disappears and > all seems normal. > > The log file on the server shows this error: > > Aug 4 15:10:07 ACS-SMB01 smbd[19564]: set_delete_on_close_internal: > failed to > change delete on close flag for file Common/FOLDER_NAME > > What is causing this? I googled both portions of the error, and got only > results showing code for one, and an unanswered question as the only > result for another. Can you post a debug level 10 on this if it's reproducible. Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Browsing problem
Hi, First, I think I should say I'm relatively new to linux and to using samba. I'm trying to share a directory on my linux machine to the rest of my network, the other computers are running win2k or xp. Now my share is setup as follows: [public] comment = Public Stuff path = /ddrive/public guest ok = yes and in the global section I've defined security as follows: security = share Now to my understanding of samba this should be enough for the other win machines to connect to my public share, however the win machines only see my workgroup, and nothing in it; I checked LinNeighborhood and I can connect to myself fine. Whats wrong here? --pat -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Strange Problem
Thanks for the reply. I'm running Win2k SP4 on all of our workstations. Rick > At 16:11 4-8-03 -0700, you wrote: >>I'm having a strange problem with Samba 2.2.8 on RH 9.0. >> >>When I delete a folder on the server from a workstation, it gives me an >> error saying that it can't be found and the folder remains in Explorer, >> but if I look on the server (via SSH) the folder is gone. If I hit F5 >> on the machine that I'm using to delete the file, the folder disappears >> and all seems normal. > [snip] > > Could this perhaps be a win95 client ? > > I remember setting a 0 or so in the registry that made explorer > autorefresh, wich it didn't by default > > > Greetz, > Cor Lem -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Strange Problem
I'm having a strange problem with Samba 2.2.8 on RH 9.0. When I delete a folder on the server from a workstation, it gives me an error saying that it can't be found and the folder remains in Explorer, but if I look on the server (via SSH) the folder is gone. If I hit F5 on the machine that I'm using to delete the file, the folder disappears and all seems normal. The log file on the server shows this error: Aug 4 15:10:07 ACS-SMB01 smbd[19564]: set_delete_on_close_internal: failed to change delete on close flag for file Common/FOLDER_NAME What is causing this? I googled both portions of the error, and got only results showing code for one, and an unanswered question as the only result for another. TIA Rick -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0 and LDAP
On Mon, 4 Aug 2003, Matt Bednarik wrote: > I was looking through my o'reilly book and according to it all of the ldap > inputs that would be in smb.conf are not supposed to be there in samba 3.0. > How do you specify which ldap server to use and whatnot? Please refer to chapter 11 of the Samba-HOWTO-Collection.pdf You will find you copy since samba-3.0.0Beta3 in the docs directory of the tarball. Alternatively, you may obtain a copy from the documentation area on all samba web sites. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] WinXP Pro domain join OK -- add domain users to localgroups NOT
Good day everyone and sorry to add to the traffic with one more (possibly stupid) question. I have the following problem which I could reproduce with both Samba 2.2.7 and 2.2.8 and with about 5 clients. I install WindowxXP Pro (w/SP1), I modify "RequireSignOrSeal=0", I join the domain (using a 'root' account that is present in smbpasswd and whose password I know) -- and it's all okay: it says "Welcome to the domain!". I check the Linux part: it's all okay, the machine$ account is in place, in both smbpasswd and passwd. When I try to logon with a domain user it sometimes works, sometimes not. When I logon as local admin and try to add a domain user to a local group, it first asks the name and password of a user with enumeration rights in the domain -- I feed it, it displays the user list but when I pick a domain user and click OK it hangs for about 10 to 20 seconds and it says something like "I could not add that user because the domain did not give me enough information about it". If anyone needs any kind of extra info -- just let me know. In debug level 3 logs all seems normal ... If you have any idea, do please let me know ... I'm supposed to make this work at work ... and it worked just fine for '9x, NT4 and 2k ... but XP seems to be a new kind of magic :D Kind Regards, Radu - Eosif Mihailescu -- @Dexter <[EMAIL PROTECTED]> ICQ: 27762040 GSM: +40 (721) 294400 JID: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] cannot write to my shares
On Mon, 2003-08-04 at 23:17, Tobias Pfeiffer wrote: > Hi! > > Well, I have a Linux machine (RedHat 9.0) with samba on it and a Win ME on > the other machine and I want to share a partition for music, read-only. > (Won't be hard, is mounted read-only) and a transfer share where I can > write to, too. My config file looks as follwing: Make sure you have "writable = yes" for each of your shares, and also, check the directories permissions. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Finally winbind on RH9 working, but why ?
I'll have to join you in this one... Here's my situation: RH 9 Kernel 2.6 test 1 Samba 2.2.7 (from RPM) ACLs on ext3 turned on. I tried your winbind cache timeout and I can now browse my home dir after a restart of winbind Other explicit shares I could always access. oddly enough the same smb.conf with samba 3.0 beta3 allowed me home dir access without that value. Winbind even allows me to su a user from the domain while on the Linux box. That's pretty cool ;^) getent group gives me a full listing of my local and domian's groups. wbinfo works like a charm. Still I have the problem that I cannot effect permission from a Win2k or NT workstation, even on my own home directory! What is working / not working for you? getent? Regards, Matt [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 08/04/2003 05:08 PM Please respond to jo To: [EMAIL PROTECTED] cc: [EMAIL PROTECTED] Subject:Re: [Samba] Finally winbind on RH9 working, but why ? Maybe I'll rephrase it shorter : 1) eventhough 'wbinfo -g' gives me the correct groups, they do not show up when I go 'getent group'. Can it be the spaces in the Samba groups 'Domain Admins' and 'Domain Users'? Where is the information about these groups stored on the Samba pdc? 2) I only get winbind to do it's job (which is connecting to a local share on the domain member with a winbind user) when I a) set the parameter 'winbind cache timeout = 0' OR b) create the user locally on the domain member, which is of course what we try to avoid by using winbind... any idea's why playing with the cache timeout causes a difference? Thanks in advance... the full story is below but I guess it's to long for anyone to read *grin* Jo De Baer On Mon, 04 Aug 2003 16:42:05 +0200 [EMAIL PROTECTED] wrote: > Hi, > > maybe (probably ??) it's me, but it took me more than a week to > get winbindd working on Redhat 9. It works now after changing a > parameter in smb.conf, but I have NO idea why. Maybe some of you > already had the same problem. If so, PLEASE clearify ! Thanks... > PS as you will see later, getent group also does not work. This is > an independent problem I think... can it have something to do with > spaces in group names ??? > > > Here are the config files of the two machines. Both are linux boxes, so > no win machine is involved. > > > server (PDC): > - > > Redhat 9 > samba 2.2.8a compiled with > --with-winbind --with-winbind-auth-challenge > > hw : lx50 > > > [EMAIL PROTECTED] source]# more /etc/sysconfig/network > NETWORKING=yes > HOSTNAME=server.one.sunedu > > > [EMAIL PROTECTED] source]# more /etc/hosts > # Do not remove the following line, or various programs > # that require network functionality will fail. > 127.0.0.1 localhost.localdomain localhost > 172.17.11.5client.one.sunedu CLIENT client > 172.17.11.4server.one.sunedu SERVER server > > (I still have a problem with the name service, that's why) > > > [EMAIL PROTECTED] lib]# more smb.conf > [global] >workgroup = MYGROUP >netbios name = SERVER >add user script = /usr/sbin/useradd -d /dev/null -s /bin/false -g > machines -M %u >server string = Samba Server >printcap name = /etc/printcap >load printers = yes >log file = /var/log/samba/log.%m >max log size = 50 >security = user > encrypt passwords = yes > smb passwd file = /etc/samba/smbpasswd > unix password sync = Yes > passwd program = /usr/bin/passwd %u > passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n > *passwd:*all*authentication*tokens*updated*successfully* >socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 >local master = yes >os level = 33 >domain master = yes >preferred master = yes >domain logons = yes >logon path = \\%L\Profiles\%U >wins support = yes >dns proxy = no > [homes] >comment = Home Directories >browseable = no >writable = yes > [netlogon] >comment = Network Logon Service >path = /home/netlogon >writable = no >share modes = no > [Profiles] > path = /home/profiles > browseable = no > guest ok = yes > [printers] >comment = All Printers >path = /var/spool/samba >browseable = no >guest ok = no >writable = no >printable = yes > > client (domain member) : > > Redhat 9 > samba 2.2.8a compiled with > --with-winbind --with-winbind-auth-challenge > > > [EMAIL PROTECTED] root]# more /etc/sysconfig/network > NETWORKING=yes > HOSTNAME=client.one.sunedu > > > [EMAIL PROTECTED] root]# more /etc/hosts > # Do not remove the following line, or various programs > # that require network functionality will fail. > 127.0.0.1 localhost.localdomain localhost > 172.17.11.5client.one.sunedu client CLIENT > 172.17.11.4server.one.sunedu
[Samba] cannot write to my shares
Hi! Well, I have a Linux machine (RedHat 9.0) with samba on it and a Win ME on the other machine and I want to share a partition for music, read-only. (Won't be hard, is mounted read-only) and a transfer share where I can write to, too. My config file looks as follwing: # Samba config file created using SWAT # from 192.168.0.1 (192.168.0.1) # Date: 2003/08/04 23:05:42 # Global parameters [global] workgroup = LAN netbios name = TOBI server string = Tobis Linux-Kiste interfaces = eth0 security = SHARE encrypt passwords = Yes obey pam restrictions = Yes pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* unix password sync = Yes log file = /var/log/samba/%m.log max log size = 0 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy = No printing = cups [homes] comment = Home Directories valid users = %S read only = No create mask = 0664 directory mask = 0775 browseable = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [musik] comment = Tobis Musik path = /mnt/music guest ok = Yes [transfer] comment = Netzwerk-Transfer path = /mnt/windows/Netzwerk-Transfer read only = No guest ok = Yes [drucker] comment = Tobis DeskJet path = /var/spool/samba read only = No guest ok = Yes printable = Yes printer name = drucker oplocks = No So, the problem is that I can't write from the Windows PC to this transfer share; if I want to change a filename I get the message "Access denied; maybe the files is opened" and if I want to copy a file to it, I get the message "Access denied. Make sure that the drive is neither full nor write-protected nor the file is opened." I already rebooted both machines a few times but always the same result. How can I solve that? Bye Tobias _ Ich missbillige, was Ihr sagt, aber Euer Recht, es zu sagen, werde ich bis an mein Ende verteidigen. (Voltaire) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Finally winbind on RH9 working, but why ?
Maybe I'll rephrase it shorter : 1) eventhough 'wbinfo -g' gives me the correct groups, they do not show up when I go 'getent group'. Can it be the spaces in the Samba groups 'Domain Admins' and 'Domain Users'? Where is the information about these groups stored on the Samba pdc? 2) I only get winbind to do it's job (which is connecting to a local share on the domain member with a winbind user) when I a) set the parameter 'winbind cache timeout = 0' OR b) create the user locally on the domain member, which is of course what we try to avoid by using winbind... any idea's why playing with the cache timeout causes a difference? Thanks in advance... the full story is below but I guess it's to long for anyone to read *grin* Jo De Baer On Mon, 04 Aug 2003 16:42:05 +0200 [EMAIL PROTECTED] wrote: > Hi, > > maybe (probably ??) it's me, but it took me more than a week to > get winbindd working on Redhat 9. It works now after changing a > parameter in smb.conf, but I have NO idea why. Maybe some of you > already had the same problem. If so, PLEASE clearify ! Thanks... > PS as you will see later, getent group also does not work. This is > an independent problem I think... can it have something to do with > spaces in group names ??? > > > Here are the config files of the two machines. Both are linux boxes, so > no win machine is involved. > > > server (PDC): > - > > Redhat 9 > samba 2.2.8a compiled with > --with-winbind --with-winbind-auth-challenge > > hw : lx50 > > > [EMAIL PROTECTED] source]# more /etc/sysconfig/network > NETWORKING=yes > HOSTNAME=server.one.sunedu > > > [EMAIL PROTECTED] source]# more /etc/hosts > # Do not remove the following line, or various programs > # that require network functionality will fail. > 127.0.0.1 localhost.localdomain localhost > 172.17.11.5 client.one.sunedu CLIENT client > 172.17.11.4 server.one.sunedu SERVER server > > (I still have a problem with the name service, that's why) > > > [EMAIL PROTECTED] lib]# more smb.conf > [global] >workgroup = MYGROUP >netbios name = SERVER >add user script = /usr/sbin/useradd -d /dev/null -s /bin/false -g > machines -M %u >server string = Samba Server >printcap name = /etc/printcap >load printers = yes >log file = /var/log/samba/log.%m >max log size = 50 >security = user > encrypt passwords = yes > smb passwd file = /etc/samba/smbpasswd > unix password sync = Yes > passwd program = /usr/bin/passwd %u > passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n > *passwd:*all*authentication*tokens*updated*successfully* >socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 >local master = yes >os level = 33 >domain master = yes >preferred master = yes >domain logons = yes >logon path = \\%L\Profiles\%U >wins support = yes >dns proxy = no > [homes] >comment = Home Directories >browseable = no >writable = yes > [netlogon] >comment = Network Logon Service >path = /home/netlogon >writable = no >share modes = no > [Profiles] > path = /home/profiles > browseable = no > guest ok = yes > [printers] >comment = All Printers >path = /var/spool/samba >browseable = no >guest ok = no >writable = no >printable = yes > > client (domain member) : > > Redhat 9 > samba 2.2.8a compiled with > --with-winbind --with-winbind-auth-challenge > > > [EMAIL PROTECTED] root]# more /etc/sysconfig/network > NETWORKING=yes > HOSTNAME=client.one.sunedu > > > [EMAIL PROTECTED] root]# more /etc/hosts > # Do not remove the following line, or various programs > # that require network functionality will fail. > 127.0.0.1 localhost.localdomain localhost > 172.17.11.5 client.one.sunedu client CLIENT > 172.17.11.4 server.one.sunedu SERVER server > > > [EMAIL PROTECTED] lib]# more smb.conf > [global] > server string = SambaBSD-2.2.8 > netbios name = CLIENT > workgroup = MYGROUP > security = domain > password server = * > encrypt passwords = yes > wins server = 172.17.11.4 > winbind uid = 1-2 > winbind gid = 1-2 > winbind enum users = yes > winbind enum groups = yes > winbind separator = . > winbind use default domain = yes > winbind cache time = 0 > password level = 8 > username level = 8 > [tmp] > path = /tmp > browseable = yes > writable = yes > public = no > create mode = 0664 > directory mode = 0775 > > > as you can see pretty normal settings. The reason I recompiled samba > is that apparently Redhat forgot to compile with > --with-winbind-auth-challenge which I think is necessary for windbind to > work (correct me ?) > > > The parameter that made it all work is : > > winbind cache time = 0 > > if I reset this to the default on the client, which is 15, I get the > following results : > > > > [EMAIL PROTECTED] root]# getent passwd > root:x:0:0:root:/root:/bin/bash > ... > clien
Re: [Samba] Samba 3.0 and LDAP
I'm kind of a newbie with some of the samba stuff so this might not be right. According to the Samba site the only obsolete options are the following: printer driver (replaced by new driver procedures) printer driver file (replaced by new driver procedures) printer driver location (replaced by new driver procedures) use rhosts postscript client code page (replaced by dos charset) vfs path vfs options I would say you just use the same options as before. Are you doing something like connecting to a Windows network? Adam Oliver System Administrator Microsoft Certified Professional "Even in trifling matters the depths of one's heart can be seen." >From Hagakure, The Book of the Samurai - Original Message - From: "Matt Bednarik" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, August 04, 2003 3:59 PM Subject: [Samba] Samba 3.0 and LDAP > I was looking through my o'reilly book and according to it all of the ldap > inputs that would be in smb.conf are not supposed to be there in samba 3.0. > How do you specify which ldap server to use and whatnot? > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] winbind timeouts
Hello, I have tried posting to comp.protocols.smb with no luck. Please help. I am running: Slackware 9.0 (x86) kernel 2.4.21 samba 3.0b3 MIT kerberos5 v1.2.7 I am testing samba 3.0b3 as part of migrating my site to Active Directory. Compiles/installs OK. When winbindd is started, it looks for the list of trusted domains and then queries those domains for user/group info. When I have the samba3b3 box joined to an NT4 domain, it takes about 15 minutes to get this info from all domains. (roughly 6+ user accounts in many domains.) When the machine is joined to the AD domain, though, it gets list of IP's for each domain on servers it can try to get the user/group data from. Many of the IP addresses it is obtaining are bad in almost every domain it contacts (cannot nslookup, ping, traceroute, or query WINS with any results). Winbindd just sits there until it times out, then tries the next one. The problem is that it takes many HOURS of waiting to get a full list generated so that I can run 'getent passwd'. Then I have to start the wait all over again so that 'getent group' works also. Once winbindd is queried, the test box is useless from the network until it's done (including plain Linux stuff like ssh) Everyting is fine at this point until I restart winbindd, then the whole thing starts over again. These are my questions: I thought that winbindd was supposed to cache all this info. Why doesn't it read the cache when it's restarted instead of getting new information? Is there something that can be done to tell winbindd not to try to query servers that aren't actually up? Where is this list of IP's coming from? Are these a bunch of dead accounts being reported from some Server Manager on a PDC? Any info would be greatly appreciated. -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0 and LDAP
I was looking through my o'reilly book and according to it all of the ldap inputs that would be in smb.conf are not supposed to be there in samba 3.0. How do you specify which ldap server to use and whatnot? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Citrix, Samba, and profiles
Hi, We currently have Citrix Metaframe 1.8 running in an AD domain and are preparing to migrate to a Samba 2.2.8 PDC. The biggest issue for us is ensuring the Citrix server is properly integrated, and this remains a stumbling block after observing some strange behaviour when users login to the Citrix server when it is joined to the Samba domain. Simply put, user "tom" logs in successfully to the domain, but rather than get his profile, he gets user "dick"'s profile. In fact, all users logging in to the citrix server get dick's profile, with the added twist being user harry's yahoo messenger runs within dick's profile, which of course it shouldn't and never did. I've checked the "All Users" profile and "Default User" profile and they don't seem to be the problem. I've also renamed dick's profile to dick.bak and oddly enough, the symptoms persist. Has anyone observed this behaviour when using Citrix on Windows 2000 in a Samba controlled domain? Any ideas? Thanks, -- John P. Campbell <[EMAIL PROTECTED]> Maximum Throughput -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba Printer Administration
How do you handle general samba print job administration? Anyone have print command scripts to share? We would like our printer admins to be able to "pause" and "resume" printing. Now we get "Error processing command" when "Pause Printing" is attempted from an NT workstation. I presume this is because the admin lacks authority to execute the lppause/lpresume commands. Ours are: lp -d %p -%j -H hold lp -d %p -%j -H resume Any suggestions will be appreciated. Helen Other pertinent details: samba version 2.2.8a solaris 2.8 smb.conf: # Global parameters [global] workgroup = UNCSPH netbios name = BIANCA netbios aliases = SPH1 server string = Samba Server 2.2.8a interfaces = qfe* nnn.nnn.nnn.nnn/255.255.0.0 security = DOMAIN encrypt passwords = Yes min passwd length = 6 password server = CORDELIA CRESSIDA passwd program = /bin/passwd %u passwd chat = *Enter login(NIS+) password:* %o\n *New*password* %n\n *Re-enter*password:* %n\n *changed for* username map = /usr/local/samba/lib/users.map log level = 3 syslog only = Yes max log size = 50 printcap name = /etc/printers.conf os level = 0 wins proxy = Yes wins server = nnn.nnn.nnn.nnn host msdfs = Yes printer admin = administrator admin system root hnulty testsmb security mask = 0377 force security mode = 0377 directory security mask = 0377 force directory security mode = 0377 hosts allow = nnn.nnn.0.0/255.255.0.0 nnn.nnn.0.0/255.255.0.0 hosts deny = all printing = bsd print command = lp -c -d %p %s; rm %s lpq command = lpq -P %p lprm command = lprm -P %p -%j lppause command = lp -d %p -%j -H hold lpresume command = lp -d %p -%j -H resume [printers] path = /var/spool/samba guest account = printer admin = administrator admin root system hnulty testsmb guest ok = Yes printable = Yes browseable = No [print$] comment = Support uploading of printer driver files path = /usr/local/samba/printers write list = admin administrator system root force user = system force group = system -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] installing samba printer on windows xp
We ran into this also. We learned that there is a Point and Print Restrictions Policy Setting in Windows Server 2003 and Windows XP that may prevent some users from installing the new printers. See this article: http://support.microsoft.com/?kbid=319939 Helen daryl wrote: > hello everyone. i am running into an issue where xp pro clients > must have local admin rights to be able to install a samba printer. > the actual error message is: > > A policy is in effect on your computer which prevents you from > connecting to this print queue. Please contact your System Administrator. > > well, i am the system administrator and am not sure where to go next. > i am able to install the printer if i have local admin privileges on the > windows xp host, but this wont scale very well. i have created a > print package using mkprintpkg.pl and the instructions at: > http://us2.samba.org/samba/ftp/docs/htmldocs/printer_driver2.html > but still have the same problem. > > maybe i've missed some documentation? or someone can help explain > where/if i've gone wrong. the linux box can print fine to the printer > and my smb.conf looks like this: > > [printers] > comment = CompassAI Printers > path = /var/spool/lpd/samba > browseable = no > public = yes > guest ok = yes > read only = yes > printable = yes > printer admin = root, jon > > [print$] > comment = Print Drivers > path = /etc/samba/drivers > browseable = yes > guest ok = no > read only = yes > write list = root, jon > > you help is greatly appreciated. > > daryl > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba proceses - question
Hi I noticed mulitiple samba procceses when i run smbstatus. ( samba 2.2.8a on solaris , clients win2k ) pids are different sometimes for the same uid ( with root pid being same), machine name is same again ( the client ) my understanding is, there should be one root process for smbd and then all user mappings are spawned process from the root, and irrespective how many shares a user is mapped from win2k clients, there should be one smbd process for each unix id. In my case this is not what am observing. I notice multiple user ids ( smbstatus) for same pid, and some times diff pid for same uid. Also i noticed lot of times some proceses are owned by 'root' while some by unix user id? is this normal. Thanks in advance for replies. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba with acl's, acl's in but not working
I have installed Redhat 8.0 with the Sgi xfs rpm kernel running. I also recompiled the srpm from Redhat's ftp site with acl support. I have a partition called data that was formatted in xfs. I can do a getfacl and it works on the directories and seems to be working. I am trying to change the permission's from a windows machine logged in as root but nothing seems to work. When I set certain permission's they don't seem to be working right. Regular users can get into a folder that I put as only root having access to. I want to put a folder called home under /data (/data/home) and use this for the home directories of the windows users and lock it down with acl's the way windows does it. I put read and list permission's on the home for all users and I want to put full access to only that user and root on each users directory. The company wants all files to reside within one partition for backup purposes. I have tried to ask them just to use the Linux home directories but the said it was causing problems when the users were accidentally delete the Linux user files so they would prefer to do it in this /data dir. Any help would be appreciated. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Browsing
Hi, Iteresting one... yes I had WINS and yes everything was configured to use it and was pointed at the *same* samba machine. It actualy all started working "by itself" although it took several hours to come good. I don't like that kind of solution - I'm waiting for it o break again! Howard Quoting John H Terpstra <[EMAIL PROTECTED]>: > On Mon, 4 Aug 2003, Howard Miller wrote: > > > Hi, > > > > More problems... getting my monies worth :-) > > > > I have two subnets. Basically I cannot get the machines on the subnet > that the Samba server is > > *not* on the join the domain. They just sit there for a couple of > minutes and then claim that the > > domain server cannot be found. > > Are you running WINS on your Samba server? Have all your clients been > configured to use that WINS server? > > > > Browsing from either subnet only shows machines on that subnet, > although if you specify a > > machine on the "other side" you can connect to shared resources > (supplying a suitable username > > and password) no problem at all. > > If you want cross subnet browsing to work, and if you want your clients > to > be able to find a samba server that is on a remote subnet, then WINS > is > your friend. It's documented in chapter 10 of the HOWTO. > > - John T. > -- > John H Terpstra > Email: [EMAIL PROTECTED] > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] installing samba printer on windows xp
hello everyone. i am running into an issue where xp pro clients must have local admin rights to be able to install a samba printer. the actual error message is: A policy is in effect on your computer which prevents you from connecting to this print queue. Please contact your System Administrator. well, i am the system administrator and am not sure where to go next. i am able to install the printer if i have local admin privileges on the windows xp host, but this wont scale very well. i have created a print package using mkprintpkg.pl and the instructions at: http://us2.samba.org/samba/ftp/docs/htmldocs/printer_driver2.html but still have the same problem. maybe i've missed some documentation? or someone can help explain where/if i've gone wrong. the linux box can print fine to the printer and my smb.conf looks like this: [printers] comment = CompassAI Printers path = /var/spool/lpd/samba browseable = no public = yes guest ok = yes read only = yes printable = yes printer admin = root, jon [print$] comment = Print Drivers path = /etc/samba/drivers browseable = yes guest ok = no read only = yes write list = root, jon you help is greatly appreciated. daryl -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Supported version of Samba for commercial use.
On Mon, Aug 04, 2003 at 10:42:20AM +0100, [EMAIL PROTECTED] wrote:
> Dear Sirs.
>
> We have csv reports that are created on a unix server automatically via a
> cron job. We are looking at putting these reports in a shared area / work
> out a way of sharing a unix device to windows machine like mapping a network
> drive. The only product we have found that can possibly do this is samba.
> Because we are a large company ('BRITISH TELECOM') we really need a version
> of this product that is supported. Are there any subsidiary companies that
> offer support for this product?
>
> If any one can help can you reply by returning an email or call 01908656496.
I'm sure that many Samba support companies in the UK are salivating at the
thought of a Samba contract with BT :-).
Try here :
http://us1.samba.org/samba/support/uk.html
In addition, you should know that you can get Samba support
from IBM, HP, SGI and Sun - just ask your sales rep.
Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] mimicking Active directory
Hi Has anyone on the mailing list succeeded in mimicking Microsoft's Active directory using OSS software (such as Heimdal, OpenLDAP, Samba etc ...)? Paolo -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] GUI browser that can use Kerberos ticket
I have been unsuccessful in finding a way to get Nautilus to use a Kerberos ticket to connect to a Win2K share. Can anyone recommend a GUI browser that will do this? Adam Oliver System Administrator Microsoft Certified Professional "Even in trifling matters the depths of one's heart can be seen." >From Hagakure, The Book of the Samurai -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Duplex printer settings
Hello, I have a samba 2.2.6 print server running on Solaris 2.7. It has been working wonderfully for a long time. Now, I'm setting up the server to automatically download the printer drivers to the client PC. This also works great, except for the duplex option on my duplex printers. The correct options appear in "device settings" (such as "flip on long edge"), but do not appear when a user goes to advanced properties in the print dialog from Microsoft Word (I have not tested MX excel, etc) since I don't know how to use them. :-) I followed the docs, doing the following: 1) uploaded the drivers to the server via MS Windows 2000 as a "printer admin". This worked great, the drivers were installed in the correct place on the server. 2) Made my first connection as the same printer admin, setting up the defaults for the printer, including saying the duplex option is installed in device settings. 3) further client connects after surfing to the samba printer in Network places, right clicking on the printer, choosing connect, work great except for the lack of duplexing option when printing, although it shows up for clients in device settings as well. Any ideas would be GREATLY appreciated. -- Terri Eads UNIX Systems Administrator [EMAIL PROTECTED] Research Applications Program 303-497-8425National Center for Atmospheric Research -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Windows 2000 don't fetch user.DOMAIN profile
I've successfully added a machine to my DOMAIN but the users still continue to use his local profile. this profile is in folder c:\document and Settings\blah blah\username but I want he to get those in c:\document and Settings\blah blah\username.DOMAIN. How is it possible ? Bye, Samu. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba + Linux ext3/FS + As/400 + Quotas
Nicolas Silvestre <[EMAIL PROTECTED]> writes: > Hi, > Thank you for your help. You're right for the version : it's 2.2.3. > I checked on the ftp server of SuSE the compile options used to build > the binaries. "--with-quotas" is mentionned. So, it's strange. > The last chance to go further is to compile Samba on the AS/400 but > I'm not close to it for one month. > > The next part of your mail deals about the strange behaviour of > quotas. I also made tests on Samba 2.2.8/SuSE Linux 8.1 > professional/Client NT4. > I got file truncation, and also differents displays between Linux and > WinNT4 due to "copy on write" mode on WinNT4 I suppose > > Nicolas Silvestre > > Johannes Niess wrote: > >>>- samba 2.2.23 > > This version does not exist. > > You have to recompile "./configure --with-quota" to get the quota > > displayed as share size. It is not enabled by most vendor binaries. > > You need extensive testing for correctnes. On i386 linux I got silent > > file truncations when exceeding quota. I just copied files with W2k > > explorer. Unfortunately the Samba team could not reproduce it > > (yet). For me it happens even without quota when the real (floppy) > > disk is full.. Quota just triggers it earlier. > > Reason seems to be "sparse" files. Sometimes Windows does a strange > > test for disk space: A new file is opened and seeked to the last byte > > of data to be written. Then the last byte is written and the return > > code used. > > Unix tries to be smart and does a kind of run length encoding for all > > these unused bytes that have been seeked over. This is accounted with > > it's compressed size for quota. So the test succeeds and Windows does > > no further error checking. Samba is bound to Unix quota restrictions > > and the client has no way to reask the status. The file is truncated > > at quota boundary and ext3 displays full file size to the client. > > Setting "strict allocate = yes" in smb.conf is supposed to help, but > > it does not for me in this case. > > Please report negative _and_ positive test results here to establish > > some statistics. Maybe we can find the pattern where things go wrong. > > Johannes Nieß I've made level 5 debug logs with W98SE as client. You can find them on samba-technical. The Debian woody package of Samba 2.2.3a is compiled without quota and does not show the bug. I used a floppy disk as a test share. On a different Debian Wody machine I recompiled with quota and it truncated files. It looks like at least Samba 2.2.3a and 2.2.8a can have this behavior, but there might be other components involved, e.g. libc. At the moment I don't have a clue .Please Give the US-based samba team members a chance to see through the logs. Did you contact Suse Support? They have a new contract with Volker Lendekes Sernet company. The ultimate test would be two compilations on the same server and with the same client. It looks like I need to do that. A workaround might be to not use "--with-quotas", but use the "dfree command" setting in smb.conf to show quotas. It might kill performance. What I really want is a per share and per user quota. Maybe via a tcp connection to a simple daemon. But that might be a wishlist item for a vfs module in Samba 3. Johannes Nieß -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: DID ANYBODY HERE...
Beast wrote: It was help me much, because i though the groupmap is just cosmetic on this release and still not usable :-) Glad to see that it works, it gives me confidence to try it more harder. May i know how you do it? This is my environment : RH9, samba 3.0b3, openldap 2.1.21 All accounts are on ldap [EMAIL PROTECTED] root]# net groupmap list Domain Admins (S-1-5-21-2897595519-3619093474-3625347041-512) -> root [EMAIL PROTECTED] root]# getent passwd |grep administrator administrator:x:0:0:Administrator:/home/administrator:/sbin/nologin [EMAIL PROTECTED] root]# getent group |grep administrator administrator:x:0: [EMAIL PROTECTED] root]# pdbedit -Lv administrator Unix username:administrator NT username: administrator Account Flags:[U ] User SID: S-1-5-21-2897595519-3619093474-3625347041-1000 Primary Group SID:S-1-5-21-2897595519-3619093474-3625347041-1001 Full Name:Administrator Home Directory: HomeDir Drive: Logon Script: logon.bat Profile Path: Domain: DJKT Account desc: ... With admin uid 0, i can use admin to add machine trust, but when login w2k client can not recognized it as domain admin (ie. can not change IP address on client machine etc.) Looks good so far, make sure your "Administrator" is a member of your "Domain Admin" group. I'm not sure about how samba checks that, but there are only two possible ways to do it I can think of right now. 1. Change the "Primary Group SID" of your Administator to the SID of the "Domain Admins" global group. 2. Add something like "memberUID: Administrator" to the corresponding UNIX group of your "Domain Admins" group. good luck Paul -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] ads_connect error joining W2K3 AD domain
I'm trying to join my linux laptop(samba3b3) to a W2K3 active directory domain. I am able to run kinit [EMAIL PROTECTED], and after requesting the password, it seems to complete without error. After the kinit, I try to net ads join, but get the following error: [2003/08/04 11:34:58, 1] utils/net_ads.c:ads_startup(176) ads_connect: No such file or directory I am logged in as root when I'm doing this, and [EMAIL PROTECTED] is a domain admin. My smb.conf is appended at the end of this e-mail. I checked the archives, and found that this has happened to other people, but I didn't see a response in the archives. Thank you for any insight you can offer on this problem. [global] realm = POWERSINC.ATH.CX ads_server = 192.168.1.2 security = ADS encrypt_passwords = yes -- Jason Powers <[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] RedHat Samba 2.2.7a-8.9.0 RPM complete?
yep also for me wbinfo -u gave all the right info, but connecting TO a client share FROM the client (/tmp) with smbclient did not work. If you run into the same problem, check out my previous mail on the list (recent). If you don't have the same problem, the smb.conf is very welcome, than I can at least figure out where the difference is *grin* 'later jo On Mon, 4 Aug 2003 11:29:36 -0400 [EMAIL PROTECTED] wrote: > Hi, > It is indeed on RH9. > Winbind does seen to run well, and it answers to wbinfo queries. > > I can post my smb.conf if it helps. > > Regards, > > Matthew Twigg > Network Administrator > SunGard Insurance Systems | 313 Speen Street Natick, MA 01760 > (508) 903-1758 > > Copyright © 2003 by SunGard Data Systems Inc. (or its subsidiaries, > "SunGard"). All rights reserved. No parts of this document may be > reproduced or transmitted without SunGard's prior written permission. > This document contains SunGard's confidential or proprietary information. > By accepting this document, you agree that: (A)(1) if a pre-existing > contract containing disclosure and use restrictions exists between your > company and SunGard, you and your company will use this information > subject to the terms of the pre-existing contract; or (2) if no such > pre-existing contract exists, you and your Company agree to protect this > information and not reproduce or disclose the information in any way; and > (B) SunGard makes no warranties, express or implied, in this > document, and > SunGard shall not be liable for damages of any kind arising out of use of > this document. > > > > > [EMAIL PROTECTED] > 08/04/2003 11:25 AM > Please respond to jo > > > To: [EMAIL PROTECTED] > cc: [EMAIL PROTECTED] > Subject:Re: [Samba] RedHat Samba 2.2.7a-8.9.0 RPM > complete? > > > Is that samba on RH9?? Did you get winbind running easily? Can I > take a look at a smb.conf file of a domain member that uses > winbindd? I had a lot of problems cfr. my previuos mail. Btw I think > redhat did at least not compile with --with-winbind-auth-challenge > which AFAIK is necessary for winbind to run... > > Thanks > > Jo De Baer > > > On Mon, 4 Aug 2003 10:54:59 -0400 [EMAIL PROTECTED] wrote: > > > Does anyone have information or know how I can find out what option > this > > > rpm was built with? ie with winbind on... > > I still seem to be having odd winbind / samba / acl problems > (cannot get > > > perms. modified via a Win2k station to stick). > > > > Regards, > > > > Matt Twigg > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > NEOlabs - http://www.neolabs.be - mailto:[EMAIL PROTECTED] > > NEOlabs - http://www.neolabs.be - mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] RedHat Samba 2.2.7a-8.9.0 RPM complete?
Hi, It is indeed on RH9. Winbind does seen to run well, and it answers to wbinfo queries. I can post my smb.conf if it helps. Regards, Matthew Twigg Network Administrator SunGard Insurance Systems | 313 Speen Street Natick, MA 01760 (508) 903-1758 Copyright © 2003 by SunGard Data Systems Inc. (or its subsidiaries, "SunGard"). All rights reserved. No parts of this document may be reproduced or transmitted without SunGard's prior written permission. This document contains SunGard's confidential or proprietary information. By accepting this document, you agree that: (A)(1) if a pre-existing contract containing disclosure and use restrictions exists between your company and SunGard, you and your company will use this information subject to the terms of the pre-existing contract; or (2) if no such pre-existing contract exists, you and your Company agree to protect this information and not reproduce or disclose the information in any way; and (B) SunGard makes no warranties, express or implied, in this document, and SunGard shall not be liable for damages of any kind arising out of use of this document. [EMAIL PROTECTED] 08/04/2003 11:25 AM Please respond to jo To: [EMAIL PROTECTED] cc: [EMAIL PROTECTED] Subject:Re: [Samba] RedHat Samba 2.2.7a-8.9.0 RPM complete? Is that samba on RH9?? Did you get winbind running easily? Can I take a look at a smb.conf file of a domain member that uses winbindd? I had a lot of problems cfr. my previuos mail. Btw I think redhat did at least not compile with --with-winbind-auth-challenge which AFAIK is necessary for winbind to run... Thanks Jo De Baer On Mon, 4 Aug 2003 10:54:59 -0400 [EMAIL PROTECTED] wrote: > Does anyone have information or know how I can find out what option this > rpm was built with? ie with winbind on... > I still seem to be having odd winbind / samba / acl problems (cannot get > perms. modified via a Win2k station to stick). > > Regards, > > Matt Twigg > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba NEOlabs - http://www.neolabs.be - mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] RedHat Samba 2.2.7a-8.9.0 RPM complete?
Is that samba on RH9?? Did you get winbind running easily? Can I take a look at a smb.conf file of a domain member that uses winbindd? I had a lot of problems cfr. my previuos mail. Btw I think redhat did at least not compile with --with-winbind-auth-challenge which AFAIK is necessary for winbind to run... Thanks Jo De Baer On Mon, 4 Aug 2003 10:54:59 -0400 [EMAIL PROTECTED] wrote: > Does anyone have information or know how I can find out what option this > rpm was built with? ie with winbind on... > I still seem to be having odd winbind / samba / acl problems (cannot get > perms. modified via a Win2k station to stick). > > Regards, > > Matt Twigg > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba NEOlabs - http://www.neolabs.be - mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RedHat Samba 2.2.7a-8.9.0 RPM complete?
Does anyone have information or know how I can find out what option this rpm was built with? ie with winbind on... I still seem to be having odd winbind / samba / acl problems (cannot get perms. modified via a Win2k station to stick). Regards, Matt Twigg -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba + Linux ext3/FS + As/400 + Quotas
Hi, Thank you for your help. You're right for the version : it's 2.2.3. I checked on the ftp server of SuSE the compile options used to build the binaries. "--with-quotas" is mentionned. So, it's strange. The last chance to go further is to compile Samba on the AS/400 but I'm not close to it for one month. The next part of your mail deals about the strange behaviour of quotas. I also made tests on Samba 2.2.8/SuSE Linux 8.1 professional/Client NT4. I got file truncation, and also differents displays between Linux and WinNT4 due to "copy on write" mode on WinNT4 I suppose Nicolas Silvestre Johannes Niess wrote: - samba 2.2.23 This version does not exist. You have to recompile "./configure --with-quota" to get the quota displayed as share size. It is not enabled by most vendor binaries. You need extensive testing for correctnes. On i386 linux I got silent file truncations when exceeding quota. I just copied files with W2k explorer. Unfortunately the Samba team could not reproduce it (yet). For me it happens even without quota when the real (floppy) disk is full.. Quota just triggers it earlier. Reason seems to be "sparse" files. Sometimes Windows does a strange test for disk space: A new file is opened and seeked to the last byte of data to be written. Then the last byte is written and the return code used. Unix tries to be smart and does a kind of run length encoding for all these unused bytes that have been seeked over. This is accounted with it's compressed size for quota. So the test succeeds and Windows does no further error checking. Samba is bound to Unix quota restrictions and the client has no way to reask the status. The file is truncated at quota boundary and ext3 displays full file size to the client. Setting "strict allocate = yes" in smb.conf is supposed to help, but it does not for me in this case. Please report negative _and_ positive test results here to establish some statistics. Maybe we can find the pattern where things go wrong. Johannes Nieß -- [EMAIL PROTECTED]www.aliacom.fr Toulouse : 05 62 19 24 91 Portable : 06 73 99 62 19 ParisIdF : 01 48 25 53 13 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Browsing
On Mon, 4 Aug 2003, Howard Miller wrote: > Hi, > > More problems... getting my monies worth :-) > > I have two subnets. Basically I cannot get the machines on the subnet that the Samba > server is > *not* on the join the domain. They just sit there for a couple of minutes and then > claim that the > domain server cannot be found. Are you running WINS on your Samba server? Have all your clients been configured to use that WINS server? > > Browsing from either subnet only shows machines on that subnet, although if you > specify a > machine on the "other side" you can connect to shared resources (supplying a > suitable username > and password) no problem at all. If you want cross subnet browsing to work, and if you want your clients to be able to find a samba server that is on a remote subnet, then WINS is your friend. It's documented in chapter 10 of the HOWTO. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Finally winbind on RH9 working, but why ?
Hi, maybe (probably ??) it's me, but it took me more than a week to get winbindd working on Redhat 9. It works now after changing a parameter in smb.conf, but I have NO idea why. Maybe some of you already had the same problem. If so, PLEASE clearify ! Thanks... PS as you will see later, getent group also does not work. This is an independent problem I think... can it have something to do with spaces in group names ??? Here are the config files of the two machines. Both are linux boxes, so no win machine is involved. server (PDC): - Redhat 9 samba 2.2.8a compiled with --with-winbind --with-winbind-auth-challenge hw : lx50 [EMAIL PROTECTED] source]# more /etc/sysconfig/network NETWORKING=yes HOSTNAME=server.one.sunedu [EMAIL PROTECTED] source]# more /etc/hosts # Do not remove the following line, or various programs # that require network functionality will fail. 127.0.0.1 localhost.localdomain localhost 172.17.11.5 client.one.sunedu CLIENT client 172.17.11.4 server.one.sunedu SERVER server (I still have a problem with the name service, that's why) [EMAIL PROTECTED] lib]# more smb.conf [global] workgroup = MYGROUP netbios name = SERVER add user script = /usr/sbin/useradd -d /dev/null -s /bin/false -g machines -M %u server string = Samba Server printcap name = /etc/printcap load printers = yes log file = /var/log/samba/log.%m max log size = 50 security = user encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd unix password sync = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local master = yes os level = 33 domain master = yes preferred master = yes domain logons = yes logon path = \\%L\Profiles\%U wins support = yes dns proxy = no [homes] comment = Home Directories browseable = no writable = yes [netlogon] comment = Network Logon Service path = /home/netlogon writable = no share modes = no [Profiles] path = /home/profiles browseable = no guest ok = yes [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = no writable = no printable = yes client (domain member) : Redhat 9 samba 2.2.8a compiled with --with-winbind --with-winbind-auth-challenge [EMAIL PROTECTED] root]# more /etc/sysconfig/network NETWORKING=yes HOSTNAME=client.one.sunedu [EMAIL PROTECTED] root]# more /etc/hosts # Do not remove the following line, or various programs # that require network functionality will fail. 127.0.0.1 localhost.localdomain localhost 172.17.11.5 client.one.sunedu client CLIENT 172.17.11.4 server.one.sunedu SERVER server [EMAIL PROTECTED] lib]# more smb.conf [global] server string = SambaBSD-2.2.8 netbios name = CLIENT workgroup = MYGROUP security = domain password server = * encrypt passwords = yes wins server = 172.17.11.4 winbind uid = 1-2 winbind gid = 1-2 winbind enum users = yes winbind enum groups = yes winbind separator = . winbind use default domain = yes winbind cache time = 0 password level = 8 username level = 8 [tmp] path = /tmp browseable = yes writable = yes public = no create mode = 0664 directory mode = 0775 as you can see pretty normal settings. The reason I recompiled samba is that apparently Redhat forgot to compile with --with-winbind-auth-challenge which I think is necessary for windbind to work (correct me ?) The parameter that made it all work is : winbind cache time = 0 if I reset this to the default on the client, which is 15, I get the following results : [EMAIL PROTECTED] root]# getent passwd root:x:0:0:root:/root:/bin/bash ... client$:x:502:501::/dev/null:/bin/false root:x:1:1:root:/home/MYGROUP/root:/bin/false jo:x:10001:1::/home/MYGROUP/jo:/bin/false [EMAIL PROTECTED] root]# getent group DOES NOT SHOW THE "win" GROUPS... ANY IDEA WHY? Where are the groups stored on the samba pdc [EMAIL PROTECTED] root]# wbinfo -u root jo [EMAIL PROTECTED] root]# wbinfo -g Domain Admins Domain Users [EMAIL PROTECTED] root]# [EMAIL PROTECTED] root]# wbinfo -t Secret is good [EMAIL PROTECTED] root]# [EMAIL PROTECTED] root]# wbinfo -a jo%welcome plaintext password authentication succeeded challenge/response password authentication succeeded //thanks to recompiling !! [EMAIL PROTECTED] root]# So everything seems ok, but if I try to connect to a local share on the client in the hope that winbind will provide the user accout jo, it fails like this : [EMAIL PROTECTED] root]# smbclient //CLIENT/tmp -U jo%welcome added interface ip=172.17.11.5 bcast=172.17.11.255 nmask=255.255.255.0 Domain=[MYGROUP] OS=[Unix] Server=[Samba 2.2.8a] tree connect failed: NT_STATUS_UNSUCCESSFUL <--- [EMAIL PR
[Samba] workgroup filter
Hi, I have only just started using Samba and I'm trying to do the following: There's a Linux computer that's running Samba. It's the local master and the WINS server for our network. All computers are on this network, using a workgroup. In a couple of days 5 computers will be added to this network. What I want is for those 5 new computers to be a member of the network but not to be able to browse it. The 5 computers will be used for teaching purposes, and I don't want any of those computers to be able to access any private data on the rest of the network. However, there are certain areas that they need to have access to through a webbrowser. Can this be done with Samba? Thanks, Martin -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] cant open access database while being used byanotheruser/antivirus
Eric: Are you disabling OPLOCKS and LEVEL2OPLOCKS? I had that problem and I think that the solution was disabling them. Anyway, if you want to, I'll send you my smb.conf. Regards LauZ - Original Message - From: Mr eric salayon <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, August 01, 2003 9:38 PM Subject: [Samba] cant open access database while being used by anotheruser/antivirus > hi, > > why is it i cannot open a ms access database (residing > in my samba server) while being used/open by another > user? is there an implementation of antivirus in a > samba server? Thanks in advance for your suggestion! > > eric > > __ > Do you Yahoo!? > Yahoo! SiteBuilder - Free, easy-to-use web site design software > http://sitebuilder.yahoo.com > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Group mapping... static ???
Hi all, I'm testing group mapping, wondering how It works exactly... I thought Samba was storing a mapping table allowing to retreive infos on Unix/Windows groups in a DYNAMIC way. Unfortunately, group mapping seems to be static, here is what I did : [I'm using Samba b3v3 + LDAP, WITHOUT nss-ldap/pam-ldap/winbind -> everything is stored in my /etc/passwd and /etc/group + in LDAP for Samba accounts] 1) Created Unix group (let's say domusers) : groupadd domusers 2) Created LDAP group, with ldapadd, and a file containing : dn: cn=domusers,ou=Users,dc=domain,dc=org objectClass: posixGroup gidNumber: 1001 cn: domusers memberUid: foo 3) Created Unix user (foo, primary group domusers) : useradd -g domusers foo 4) Created Group mapping : net groupmap add sid=-513 unixgroup=domusers ntgroup="Domain Users" type=domain (then "net groupmap list", OK) 5) Finally, created LDAP (samba) user : smbpasswd -a foo Ok, no problem, foo gets the domain local sid + the domain users rid as SambaPrimaryGroupSid, he IS a Win Domain User. Here is what I don't understand : If I delete the groupmapping or modify it, the SambaPrimaryGroupSid of foo isn't modified ! Foo remains a Domain User... Another example : if I create first the user, then the mapping : the user doens't get the new SambaPrimaryGroupSid and doesn't become a Domain User... Am I missing something ? Is the mapping only used while creating users ? I thought the table was used in a more dynamic way... Is there a technical limit in implementing this function this way ? Please help me... Regards, Ganaël. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba 2.2.8a 64bit on solaris 9
Hello Can any one help me to solve this problem I cant see network group on my local net. I found this error in log.nmbd Pls. advice magdi [2003/08/04 17:38:16, 0] nmbd/nmbd.c:main(795) Netbios nameserver version 2.2.8a started. Copyright Andrew Tridgell and the Samba Team 1994-2002 [2003/08/04 17:44:02, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(404) * Samba name server BIGMACK is now a local master browser for workgroup SUN GROU P on subnet 172.16.4.85 * [2003/08/04 17:44:02, 0] nmbd/nmbd_browsesync.c:find_domain_master_name_query_fa il(358) find_domain_master_name_query_fail: Unable to find the Domain Master Browser name SUN GROUP<1b> for the workgroup SUN GROUP. Unable to sync browse lists in this workgroup. [2003/08/04 17:59:16, 0] nmbd/nmbd_browsesync.c:find_domain_master_name_query_fa il(358) find_domain_master_name_query_fail: Unable to find the Domain Master Browser name SUN GROUP<1b> for the workgroup SUN GROUP. Unable to sync browse lists in this workgroup. [2003/08/04 18:14:23, 0] nmbd/nmbd_browsesync.c:find_domain_master_name_query_fa il(358) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: DID ANYBODY HERE...
Monday, August 4, 2003, 1:53:43 AM, paul wrote: > Beast wrote: >> Sorry to puuting all caps subject, but at least i get your >> attentention right now :-) >> >> I just want to ask 1 (one) question to anybody here. >> >> Did you ever try samba 3.0b3 and having 'domain admins' global group >> working on Win2000 client? > YES!! > hope that helps ;) I think I have to add "..with ldap backend". with smbpasswd backend it was work (i've try it), why no response? is it means nobody was implementing samba3+ldap so far? --beast -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Browsing
In a word - no. Its just three servers, two W2K, one SuSE Linux running Samba. Samba install does not have master browse set or anything. Why should it? Is this my problem. Quoting "Marian Mlcoch, Ing" <[EMAIL PROTECTED]>: > Are you use WINS SERVER on network? > have you any server on second subnet? > > I mean first subnet is with samba. > > - Original Message - > From: "Howard Miller" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Monday, August 04, 2003 12:18 PM > Subject: [Samba] Browsing > > > > Hi, > > > > More problems... getting my monies worth :-) > > > > I have two subnets. Basically I cannot get the machines on the subnet > that > the Samba server is > > *not* on the join the domain. They just sit there for a couple of > minutes > and then claim that the > > domain server cannot be found. > > > > Browsing from either subnet only shows machines on that subnet, > although > if you specify a > > machine on the "other side" you can connect to shared resources > (supplying > a suitable username > > and password) no problem at all. > > > > Thanks > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Where is mysql support?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > Message: 40 > Date: Sat, 02 Aug 2003 09:54:30 +0100 (BST) > From: Howard Miller <[EMAIL PROTECTED]> > Subject: Re: [Samba] Where is mysql support? > To: [EMAIL PROTECTED] > Message-ID: <[EMAIL PROTECTED]> > Content-Type: text/plain; charset=ISO-8859-1 > > Bad plan, obviously > > I found the problem... sort of... I didn't notice the experimental module switch to ./configure. That > should have been a clue > > Next the mysql "test" application wouldn't compile, but there is a switch to disable that, so that got > mysql support past the configure stage. > Then of course the mysql modules wouldn't compile! So, I am taking experimental to mean that it > doesn't work at all! > It does compile, my packages for Mandrake 8.2-9.1 and in cooker contrib have the mysql plugin. I had to disable the test application for configure (since it doesn't seem to work for mysql 4.x or later), but it does compile if you have the relevant development files installed (ie libmysql-devel on Mandrake, MySQL-devel on Redhat etc). http://ranger.dnsalias.com/mandrake/9.1/samba-3.0.0beta3/ (note the xml and mysql passdb plugins are in subpackages) > Oh well LDAP suffering and brain damage here we come What's wrong with LDAP? Regards, Buchan - -- |--Another happy Mandrake Club member--| Buchan MilneMechanical Engineer, Network Manager Cellphone * Work+27 82 472 2231 * +27 21 8828820x202 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/LlQVrJK6UGDSBKcRAkmIAKCvMIS8h7QeN05bMFTzqZK/9X3HYACgxeHN ErNNOOAOv+CiNjWBxoHraIk= =IRSQ -END PGP SIGNATURE- ** Please click on http://www.cae.co.za/disclaimer.htm to read our e-mail disclaimer or send an e-mail to [EMAIL PROTECTED] for a copy. ** -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba-3.0.0beta2 reports internal error
hello list, we're running samba-3.0.0beta2 with ldapsam backend on debian unstable. when contacting the samba server from a nt4 client, windows reports an unexpected network error and samba reports the following internal error: [2003/08/04 13:05:20, 0] lib/fault.c:fault_report(36) === [2003/08/04 13:05:20, 0] lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 14465 (3.0.0beta2-1 for Debian) Please read the appendix Bugs of the Samba HOWTO collection [2003/08/04 13:05:20, 0] lib/fault.c:fault_report(39) === [2003/08/04 13:05:20, 0] lib/util.c:smb_panic(1452) smb_panic(): calling panic action [/usr/share/samba/panic-action 14465] [2003/08/04 13:05:20, 0] lib/util.c:smb_panic(1460) smb_panic(): action returned status 0 [2003/08/04 13:05:20, 0] lib/util.c:smb_panic(1462) PANIC: internal error [2003/08/04 13:05:20, 0] lib/util.c:smb_panic(1469) BACKTRACE: 33 stack frames: #0 /usr/sbin/smbd(smb_panic+0xc9) [0x817eb3d] #1 /usr/sbin/smbd [0x81700e2] #2 /lib/libc.so.6 [0x401c99c8] #3 /usr/lib/libldap.so.2(gnutls_SSL_get_certificate+0x39) [0x400f1c4e] #4 /usr/lib/libldap.so.2(ldap_pvt_tls_get_my_dn+0x1e) [0x400efdaf] #5 /usr/lib/libldap.so.2(ldap_int_tls_start+0x116) [0x400f0bce] #6 /usr/lib/libldap.so.2(ldap_int_open_connection+0x2a6) [0x400cd27b] #7 /usr/lib/libldap.so.2(ldap_new_connection+0xea) [0x400dfb5b] #8 /usr/lib/libldap.so.2(ldap_open_defconn+0x2e) [0x400ccaee] #9 /usr/lib/libldap.so.2(ldap_send_initial_request+0x63) [0x400df627] #10 /usr/lib/libldap.so.2(ldap_sasl_bind+0x2ec) [0x400d4e28] #11 /usr/lib/libldap.so.2(ldap_simple_bind+0xd2) [0x400d5666] #12 /lib/libnss_ldap.so.2 [0x40512e55] #13 /lib/libnss_ldap.so.2 [0x40512b05] #14 /lib/libnss_ldap.so.2(_nss_ldap_initgroups_dyn+0x54) [0x40514efc] #15 /lib/libc.so.6 [0x4023ac99] #16 /lib/libc.so.6(getgrouplist+0x4f) [0x4023ad3d] #17 /usr/sbin/smbd(sys_getgrouplist+0x3e) [0x81c7a6e] #18 /usr/sbin/smbd [0x81aa1d5] #19 /usr/sbin/smbd [0x81aa590] #20 /usr/sbin/smbd(make_server_info_sam+0x9c) [0x81aa7bc] #21 /usr/sbin/smbd(make_server_info_guest+0x97) [0x81aa96f] #22 /usr/sbin/smbd [0x81a8f93] #23 /usr/sbin/smbd [0x81a4550] #24 /usr/sbin/smbd [0x809d181] #25 /usr/sbin/smbd(reply_sesssetup_and_X+0x532) [0x809e38a] #26 /usr/sbin/smbd [0x80b670d] #27 /usr/sbin/smbd [0x80b6903] #28 /usr/sbin/smbd(process_smb+0x74) [0x80b6ab0] #29 /usr/sbin/smbd(smbd_process+0x198) [0x80b7578] #30 /usr/sbin/smbd(main+0x440) [0x81d5140] #31 /lib/libc.so.6(__libc_start_main+0xdd) [0x401b8a51] #32 /usr/sbin/smbd(chroot+0x31) [0x8075fa5] i hope this error isn't caused by a misconfigured smb.conf, testparm however reports no errors. any hints what causes this error or what i can do? thanks in advance, Rico Hauke -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Recommendations for 'X' Network Neighborhood Browser
Monday, August 4, 2003, 6:33:34 PM, Shashank wrote: > Hi, >> >> Any recommendation for a Network Browser for KDE/GNOME/WindowMaker?? >> > I use LinNeighborhood works pretty well for me you have to set proper > preferences before you actually start using it. > Also there are ohter smb browsers like gnomba, xsmbbrowser but I ve never > used them. Its pretty, but slooow... (just like kde/gnome apps :) --beast -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Recommendations for 'X' Network Neighborhood Browser
Hi, > > Any recommendation for a Network Browser for KDE/GNOME/WindowMaker?? > I use LinNeighborhood works pretty well for me you have to set proper preferences before you actually start using it. Also there are ohter smb browsers like gnomba, xsmbbrowser but I ve never used them. Shashank -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] winbindd/pam problems
Hi, setup: Debian 3.0, samba 3.0bx / latest cvs, self compiled. options: --with-syslog --with-quotas --with-utmp --with-msdfs \ --with-vfs --with-acl --with-pam acces as domain-user to the samba-shares is working, i set up pam support folowing the html-docs about ADS-support and pam-login. getent shows all domain-users and groups correct on the samba-server. But i'v got a problem: i can not login locally on my samba-server with a domain-user-account. if i telnet to the machine i enter username and password, and get the message User not known to the underlying authentication module Connection closed by foreign host. in auth.log i get the folowing messages (Lines wraped around) Aug 4 12:36:35 greulix pam_winbind[7891]: user 'administrator' \ granted acces Aug 4 12:36:35 greulix PAM_unix[7891]: could not identify user \ (from getpwnam(administrator)) Aug 4 12:36:35 greulix login[7891]: User not known to the \ underlying authentication module can anybody shed some light on this please? Christoph -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Supported version of Samba for commercial use.
On Mon, Aug 04, 2003 at 05:17:47PM +0700, Beast wrote: > Monday, August 4, 2003, 4:42:20 PM, steve wrote: > > > Dear Sirs. > > > We have csv reports that are created on a unix server automatically via a > > cron job. We are looking at putting these reports in a shared area / work > > out a way of sharing a unix device to windows machine like mapping a network > > drive. The only product we have found that can possibly do this is samba. > > What if in the unix box you install samba client and then it map > \\WINSERVER\SHARE as /mnt/samba. > >From cron just output all file to /mnt/samba. > >From client just access this files as \\WINSERVER\SHARE > >From admin, just set permission, accesslit etc from WINSERVER only. > Happy ending (hopefully). This assumes Linux, or using a product like sharity. However, then you rely on the network for the correct operation of the cron job. Generally, I would not recommend such a setup - using Samba on the server-side is much mroe reliable - if only becouse then you only have one server, not the windows machine serving the files out again. Samba is highly suited to solving this particular problem. If you are after commericial support (and I certainly understand the need for this in many corperate environments) then you will find a number of consultants listed in our support directory: http://samba.org/samba/support/ (Unfortunetely the Samba team can only list them, we cannot warrent their services). You might also want to consider SerNet www.sernet.de, who put on the annual SambaXP conference. Andrew Bartlett -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] PDC Controller Error
this is exactly what happened to me. Given that there is no mention of this patch in the samba 2.x docn, who would be responsible for putting it in, I was starting to think i was going mad with this one and as soon as I put in the registry patch everything just worked!! many thanks to the people on the list that replied alex --On 02 August 2003 10:55 +0200 Dietrich Restemeyer <[EMAIL PROTECTED]> wrote: On Saturday 02 August 2003 06:44, Bob Kruger wrote: I am trying to set up a PDC controller on a samba server, but continue to get the following error: The user could not be added because the following error occured: The trust relationship between the workstation and the primary domain failed. An extract from the log shows only the following: [2003/08/01 22:58:42, 0] smbd/service.c:make_connection(381) make_connection: bkruger logged in as admin user (root privileges) [2003/08/01 22:58:43, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(670) api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO. Specifics are: Slackware v8.0 running kernel v2.4.19, Samba 2.2.7a. Extract from the smb.conf file : [global] workgroup = HOME_OFFICE netbios name = LINUX50 server string = Linux 50 Server encrypt passwords = Yes update encrypted = No log file = /var/log/samba announce version = 4.0 socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false - logon path = \\%L\profiles\%U logon drive = H: logon home = \\%L\%U\.profile domain logons = Yes os level = 64 preferred master = Yes domain master = Yes wins support = Yes guest account = guest admin users = bkruger [netlogon] path = /usr/local/samba/lib/netlogon write list = ntadmin [profiles] path = /export/smb/ntprofile read only = No create mask = 0600 directory mask = 0700 --- Anyone got any hints or suggestions? Thanks in advance for any assistance. Bob do you use XP OS on Clients ? Joining domain works, but the logon after reboot fails ? then you perhaps have forget to apply the Sign_or_Seal registry-patch ? bye Didi -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba Sent using Mulberry 3.01a -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Browsing
Hi, More problems... getting my monies worth :-) I have two subnets. Basically I cannot get the machines on the subnet that the Samba server is *not* on the join the domain. They just sit there for a couple of minutes and then claim that the domain server cannot be found. Browsing from either subnet only shows machines on that subnet, although if you specify a machine on the "other side" you can connect to shared resources (supplying a suitable username and password) no problem at all. Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Supported version of Samba for commercial use.
Monday, August 4, 2003, 4:42:20 PM, steve wrote: > Dear Sirs. > We have csv reports that are created on a unix server automatically via a > cron job. We are looking at putting these reports in a shared area / work > out a way of sharing a unix device to windows machine like mapping a network > drive. The only product we have found that can possibly do this is samba. What if in the unix box you install samba client and then it map \\WINSERVER\SHARE as /mnt/samba. >From cron just output all file to /mnt/samba. >From client just access this files as \\WINSERVER\SHARE >From admin, just set permission, accesslit etc from WINSERVER only. Happy ending (hopefully). --beast -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Connection refused
I reconfigured ipchains ... and voila... Samba works for all of the users... thx Poetro - Original Message - From: "Galiba Péter" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Mon, 04 Aug 2003 11:09 Subject: Re: [Samba] Connection refused As you've wrote the porblem should be around the firewall... ipchains and i think iptables is up (not sure about iptables - it replys with an error). A tried to connect to 192.168.0.100 through http and it shows an error for that too... I have Webmin on that server... this is the only thing I can connect to from an other computer with http://192.168.0.100:1 so this should be becouse of the firewall(s). Thanks for your help, I'll inform you about my success in this question. Poetro - Original Message - From: "Marian Mlcoch, Ing" <[EMAIL PROTECTED]> To: "Galiba Péter" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Mon, 04 Aug 2003 10:54 Subject: Re: [Samba] Connection refused > This samba is old but i try help you. As you write you compile samba with > SSL and i mean that problem is on this. > Second way to problem is firewall settings on client or server (c2-server or > c2-server3) > Try first add to yuor smb.conf global section netbios name. > Second is local interfaces test on c2-server3 console try commands: > netstat -na > smbclient -L localhost > smbclient -L 192.168.0.100 > smbclient -L c2-server3 > > test on c2-server console try commands: > ping 192.168.0.100 > telnet 192.168.0.100 139 > > > Reply to mail this command status. > > Bye. > > > > - Original Message - > From: "Galiba Péter" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Monday, August 04, 2003 10:28 AM > Subject: Re: [Samba] Connection refused > > > > Samba is running form inetd. I don't think there's a firewall on that > > machine, but i look around it. > > I tried many thing with the config... but still can only log inform > > localhost. > > > > Poetro > > - Original Message - > > From: "Joel Hammer" <[EMAIL PROTECTED]> > > To: "Galiba Piter" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> > > Sent: Sat, 02 Aug 2003 00:06 > > Subject: Re: [Samba] Connection refused > > > > > > > Is samba running? > > > Is samba being controlled by (x)inetd? > > > Joel > > > On Fri, Aug 01, 2003 at 02:19:56PM +0200, Galiba Piter wrote: > > > > I have newly configured our new HP Netserver LC 2000r with Samba > 2.0.7. > > > > The Samba was compiled with SSL. > > > > I can connect to it from localhost, but from any other ip i got the > > error: > > > > connectionrefused > > > > > > > > c2-server:~# smbclient -L 192.168.0.100 > > > > added interface ip=192.168.0.3 bcast=192.168.0.255 nmask=255.255.255.0 > > > > error connecting to 192.168.0.100:139 (Connection refused) > > > > Connection to 192.168.0.100 failed > > > > > > > > c2-server:~# smbclient -L c2-server3 > > > > added interface ip=192.168.0.3 bcast=192.168.0.255 nmask=255.255.255.0 > > > > Connection to c2-server3 failed > > > > > > > > > > > > The name of the Server is C2-Server3, and it is on 192.168.0.100. > > > > The smb.conf file looks like this: > > > > > > > > [global] > > > >printing = bsd > > > >printcap name = /etc/printcap > > > >load printers = yes > > > >guest account = nobody > > > >security = user > > > >workgroup = C2 > > > >server string = %h server (Samba %v) > > > >syslog only = no > > > >syslog = 0; > > > >socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=4096 > > SO_RCVBUF=4096 > > > >encrypt passwords = yes > > > >wins support = no > > > >name resolve order = lmhosts host wins bcast > > > >dns proxy = no > > > >preserve case = yes > > > >short preserve case = yes > > > >unix password sync = false > > > >max log size = 1000 > > > >ssl CA certFile = /etc/share/certs/ca-certs.crt > > > > > > > > [homes] > > > >comment = Home Directories > > > >browseable = no > > > >read only = no > > > >create mask = 0700 > > > >directory mask = 0700 > > > > > > > > [printers] > > > >comment = All Printers > > > >browseable = no > > > >path = /tmp > > > >printable = yes > > > >public = no > > > >writable = no > > > > > > > > [munka-9] > > > > path = /mnt/data/munka-9 > > > > public = yes > > > > writable = yes > > > > comment = > > > > force group = c2-users > > > > force create mode = 777 > > > > force directory mode = 777 > > > > printable = no > > > > > > > > > > > > > > > > Can anybody tell me what went wrong? > > > > There is no error in the log files. They don't even tell that I wanted > > to > > > > connect, only if I connect from localhost. > > > > > > > > Thanks.. > > > > Poetro > > > > > > > > > > > > -- > > > > To unsubscribe from this list go to the following URL and read the > > > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > > > > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions:
[Samba] Supported version of Samba for commercial use.
Dear Sirs.
We have csv reports that are created on a unix server automatically via a
cron job. We are looking at putting these reports in a shared area / work
out a way of sharing a unix device to windows machine like mapping a network
drive. The only product we have found that can possibly do this is samba.
Because we are a large company ('BRITISH TELECOM') we really need a version
of this product that is supported. Are there any subsidiary companies that
offer support for this product?
If any one can help can you reply by returning an email or call 01908656496.
Regards
Stephen Williams
Steve
A question for you - may need a bit of digging about.
John has asked us to look at automating the creation of some csv report
extracts which he currently does manually. Chris has worked out the method
to get this done using a cron job but we would need to store the outputs
(daily) on some sort of shared area so they could be accessed by Pete/Jason
to move onto Plink folders, and also in the future by Actuate.
There will be obvious questions about archiving etc but for now we need to
know what's practical in terms of sharing a UNIX device so it could be
mapped to a PC like a network drive. The product that I've had mentioned to
me is Samba but I'm not sure how this works or whether it's suitable for the
live environment (it may be a freeware product which could cause
acceptability issues?)
Could you see if anyone knows anything about this, or similarly acceptable
products please?
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Réf. : Réf. : [Samba] trash can on samba
Mateus, here is a more complex (working !) example : vfs objects = recycle recycle:name = .recycle ; max-size (in bytes) of files allowed in the recycle bin recycle:maxsize = 200 ; keep directory trees ? recycle_keeptree = True ; files to exclude from the bin recycle:exclude = *.tmp *.temp *.swp ; root dirs to exclude from the bin recycle:exclude_dir = tmp ; include file versionning in the bin (adds a "Copy #n of" before the filename) recycle:versions = True ; files to exclude from the versionning (previous versions are lost) recycle:noversions = *.doc *.xls *.ppt Did someone try versionning ? I get a strange error while deleting a file with versionning activated : WinXP tells me the file doesn't exist anymore... but it is supposed to delete it ! In fact, the file has been deleted, and versionned in the bin BEFORE the appearance of the msgbox... Stange... If I deactivate versionning, everything works well... Ganaël. Ganael LAPLANCHE 07/29/2003 09:47 AM Pour : [EMAIL PROTECTED] cc : [EMAIL PROTECTED] Objet : Réf. : [Samba] trash can on samba (Document link: Ganael LAPLANCHE) Hi ! I successfully used recycle bin + audit with these parameters : vfs objects = extd_audit recycle I didn't configure anything else, so I can't tell for advanced options... I don't remember having used any configure options for this. Ganael. [EMAIL PROTECTED]@lists.samba.org on 07/28/2003 12:46:54 PM Envoyé par : [EMAIL PROTECTED] Pour : [EMAIL PROTECTED] cc : Objet : [Samba] trash can on samba I'm having problems to install de recycle module on samba. I think it can be some configuration error or something missing when I compiled samba. Is there any special compilation option to enable vfs and de recycle.so module? I used: ./configure --with-smbmount --with-syslog --with-vfs And here my configuration options: smb.conf: [homes] comment = Pastas Pessoais browseable = no writable = yes admin users = mateus vfs object = /usr/local/samba/lib/recycle.so vfs options = /usr/local/samba/lib/recycle.conf recycle.conf: name = .recycle mode = KEEP_DIRECTORIES|VERSIONS|TOUCH maxsize = 0 exclude = *.tmp|*.temp|*.o|*.obj|~$* excludedir = /tmp|/temp|/cache noversions = *.doc|*.xls|*.ppt Sorry for my poor english Mateus Tarcinalli Machado site: http://mateus.webhostme.com/ e-mail: [EMAIL PROTECTED] ICQ: 40075236 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Connection refused
As you've wrote the porblem should be around the firewall... ipchains and i think iptables is up (not sure about iptables - it replys with an error). A tried to connect to 192.168.0.100 through http and it shows an error for that too... I have Webmin on that server... this is the only thing I can connect to from an other computer with http://192.168.0.100:1 so this should be becouse of the firewall(s). Thanks for your help, I'll inform you about my success in this question. Poetro - Original Message - From: "Marian Mlcoch, Ing" <[EMAIL PROTECTED]> To: "Galiba Péter" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Mon, 04 Aug 2003 10:54 Subject: Re: [Samba] Connection refused > This samba is old but i try help you. As you write you compile samba with > SSL and i mean that problem is on this. > Second way to problem is firewall settings on client or server (c2-server or > c2-server3) > Try first add to yuor smb.conf global section netbios name. > Second is local interfaces test on c2-server3 console try commands: > netstat -na > smbclient -L localhost > smbclient -L 192.168.0.100 > smbclient -L c2-server3 > > test on c2-server console try commands: > ping 192.168.0.100 > telnet 192.168.0.100 139 > > > Reply to mail this command status. > > Bye. > > > > - Original Message - > From: "Galiba Péter" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Monday, August 04, 2003 10:28 AM > Subject: Re: [Samba] Connection refused > > > > Samba is running form inetd. I don't think there's a firewall on that > > machine, but i look around it. > > I tried many thing with the config... but still can only log inform > > localhost. > > > > Poetro > > - Original Message - > > From: "Joel Hammer" <[EMAIL PROTECTED]> > > To: "Galiba Piter" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> > > Sent: Sat, 02 Aug 2003 00:06 > > Subject: Re: [Samba] Connection refused > > > > > > > Is samba running? > > > Is samba being controlled by (x)inetd? > > > Joel > > > On Fri, Aug 01, 2003 at 02:19:56PM +0200, Galiba Piter wrote: > > > > I have newly configured our new HP Netserver LC 2000r with Samba > 2.0.7. > > > > The Samba was compiled with SSL. > > > > I can connect to it from localhost, but from any other ip i got the > > error: > > > > connectionrefused > > > > > > > > c2-server:~# smbclient -L 192.168.0.100 > > > > added interface ip=192.168.0.3 bcast=192.168.0.255 nmask=255.255.255.0 > > > > error connecting to 192.168.0.100:139 (Connection refused) > > > > Connection to 192.168.0.100 failed > > > > > > > > c2-server:~# smbclient -L c2-server3 > > > > added interface ip=192.168.0.3 bcast=192.168.0.255 nmask=255.255.255.0 > > > > Connection to c2-server3 failed > > > > > > > > > > > > The name of the Server is C2-Server3, and it is on 192.168.0.100. > > > > The smb.conf file looks like this: > > > > > > > > [global] > > > >printing = bsd > > > >printcap name = /etc/printcap > > > >load printers = yes > > > >guest account = nobody > > > >security = user > > > >workgroup = C2 > > > >server string = %h server (Samba %v) > > > >syslog only = no > > > >syslog = 0; > > > >socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=4096 > > SO_RCVBUF=4096 > > > >encrypt passwords = yes > > > >wins support = no > > > >name resolve order = lmhosts host wins bcast > > > >dns proxy = no > > > >preserve case = yes > > > >short preserve case = yes > > > >unix password sync = false > > > >max log size = 1000 > > > >ssl CA certFile = /etc/share/certs/ca-certs.crt > > > > > > > > [homes] > > > >comment = Home Directories > > > >browseable = no > > > >read only = no > > > >create mask = 0700 > > > >directory mask = 0700 > > > > > > > > [printers] > > > >comment = All Printers > > > >browseable = no > > > >path = /tmp > > > >printable = yes > > > >public = no > > > >writable = no > > > > > > > > [munka-9] > > > > path = /mnt/data/munka-9 > > > > public = yes > > > > writable = yes > > > > comment = > > > > force group = c2-users > > > > force create mode = 777 > > > > force directory mode = 777 > > > > printable = no > > > > > > > > > > > > > > > > Can anybody tell me what went wrong? > > > > There is no error in the log files. They don't even tell that I wanted > > to > > > > connect, only if I connect from localhost. > > > > > > > > Thanks.. > > > > Poetro > > > > > > > > > > > > -- > > > > To unsubscribe from this list go to the following URL and read the > > > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > > > > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Connection refused
This samba is old but i try help you. As you write you compile samba with SSL and i mean that problem is on this. Second way to problem is firewall settings on client or server (c2-server or c2-server3) Try first add to yuor smb.conf global section netbios name. Second is local interfaces test on c2-server3 console try commands: netstat -na smbclient -L localhost smbclient -L 192.168.0.100 smbclient -L c2-server3 test on c2-server console try commands: ping 192.168.0.100 telnet 192.168.0.100 139 Reply to mail this command status. Bye. - Original Message - From: "Galiba Péter" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, August 04, 2003 10:28 AM Subject: Re: [Samba] Connection refused > Samba is running form inetd. I don't think there's a firewall on that > machine, but i look around it. > I tried many thing with the config... but still can only log inform > localhost. > > Poetro > - Original Message - > From: "Joel Hammer" <[EMAIL PROTECTED]> > To: "Galiba Piter" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> > Sent: Sat, 02 Aug 2003 00:06 > Subject: Re: [Samba] Connection refused > > > > Is samba running? > > Is samba being controlled by (x)inetd? > > Joel > > On Fri, Aug 01, 2003 at 02:19:56PM +0200, Galiba Piter wrote: > > > I have newly configured our new HP Netserver LC 2000r with Samba 2.0.7. > > > The Samba was compiled with SSL. > > > I can connect to it from localhost, but from any other ip i got the > error: > > > connectionrefused > > > > > > c2-server:~# smbclient -L 192.168.0.100 > > > added interface ip=192.168.0.3 bcast=192.168.0.255 nmask=255.255.255.0 > > > error connecting to 192.168.0.100:139 (Connection refused) > > > Connection to 192.168.0.100 failed > > > > > > c2-server:~# smbclient -L c2-server3 > > > added interface ip=192.168.0.3 bcast=192.168.0.255 nmask=255.255.255.0 > > > Connection to c2-server3 failed > > > > > > > > > The name of the Server is C2-Server3, and it is on 192.168.0.100. > > > The smb.conf file looks like this: > > > > > > [global] > > >printing = bsd > > >printcap name = /etc/printcap > > >load printers = yes > > >guest account = nobody > > >security = user > > >workgroup = C2 > > >server string = %h server (Samba %v) > > >syslog only = no > > >syslog = 0; > > >socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=4096 > SO_RCVBUF=4096 > > >encrypt passwords = yes > > >wins support = no > > >name resolve order = lmhosts host wins bcast > > >dns proxy = no > > >preserve case = yes > > >short preserve case = yes > > >unix password sync = false > > >max log size = 1000 > > >ssl CA certFile = /etc/share/certs/ca-certs.crt > > > > > > [homes] > > >comment = Home Directories > > >browseable = no > > >read only = no > > >create mask = 0700 > > >directory mask = 0700 > > > > > > [printers] > > >comment = All Printers > > >browseable = no > > >path = /tmp > > >printable = yes > > >public = no > > >writable = no > > > > > > [munka-9] > > > path = /mnt/data/munka-9 > > > public = yes > > > writable = yes > > > comment = > > > force group = c2-users > > > force create mode = 777 > > > force directory mode = 777 > > > printable = no > > > > > > > > > > > > Can anybody tell me what went wrong? > > > There is no error in the log files. They don't even tell that I wanted > to > > > connect, only if I connect from localhost. > > > > > > Thanks.. > > > Poetro > > > > > > > > > -- > > > To unsubscribe from this list go to the following URL and read the > > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How to control TEMP directory
Ahhh I didn't notice the packaging stuff at all. I have now found Buchan' site with all the prebuilt rpms. I wish I had known about that a couple of days ago - oh well! Yes I have read the howto's reasonably extensively (although abviously managing to skip the most important bits). The LDAP section assumes you know something about LDAP - although I can't really complain about this. A complete idiots guide to setting up the LDAP server might be nice, but I'm starting to feel the heat already :-). I'll go and read about it! I'll have a go with the Mandrake rpms and see what happens... watch this space. Thanks! Much better off than half an hour ago Howard Quoting John H Terpstra <[EMAIL PROTECTED]>: > On Mon, 4 Aug 2003, Howard Miller wrote: > > Those who prepare the packaging for Linux systems go to much trouble > to > solve this sort of issue. The easiest way to build RPS for your > platform > is: > > 1. cd ~samba/packaging/Mandrake > 2. sh makerpms.sh > > That should build your RPMS and you should find them in > /usr/src/packaging/RPMS/i386 > > If these have the same problem then please post to this list and > chances > are the Buchan Milne (who handles the Mandrake RPMs) will chip in to > help > you over the humps. > > In the ~samba/docs directory you should find the > Samba-HOWTO-Collection.pdf file. It is reasonably current (will soon > be > published as a book by Prentice-Hall - that version is a little more > recent and thus more up to date). > > This HOWTO has information about just about every topic you might > need. > If it is deficient in any area please let me know - that way I can fix > it. > > Let me know how else I can help you. > > - John T. > > > > Thanks for taking an interest before we go any further... > > > > I am building this on Mandrake 9.1. I used the latest beta release of > Samba. > > > > I unzipped it and then > > cd source > > ./configure > > make > > su > > make install > > > > Worked fine (although config.log did show some comilatio errors in > "test" programs), installed and > > on the face of it ran. Rapidly came unstuck with temp file problems > though. Oher basic > > functionality seems fine (as long as you log in as root on the Windoze > machine :-) ) > > > > BTW: I was keen on using the mysql support (as I don't have the first > clue about LDAP) but couldn't > > get this to work at all. The version test program (well I guess that's > what it is) failed to compile > > with lots of undefined identifier errors. If I disabled the test > program then mysql.so wouldn't > > compile anyway. I had to download and compile my own MySql into > /usr/local/mysql before even > > getting that far. So back to smbpasswd at the moment. > > > > Howard > > > > Quoting John H Terpstra <[EMAIL PROTECTED]>: > > > > > On Mon, 4 Aug 2003, Howard Miller wrote: > > > > > > > Yes I did build the binaries myself I have had a really bad > time > > > with Samba 3, considering earlier > > > > versions have posed no problems at all. > > > > > > What platform are you building this on? > > > > > > What steps are you following to build this? > > > > > > > > > > > Where do you think I might have gone wrong with the temp thing? > > > > > > There are a number of gotcha's that could have hit you in the > face. > > > Let's > > > take this one step at a time. > > > > > > - John T. > > > > > > > > > > > Quoting John H Terpstra <[EMAIL PROTECTED]>: > > > > > > > > > On Sun, 3 Aug 2003, Howard Miller wrote: > > > > > > > > > > > This is a slight rework of my last question but should be > > > clearer. > > > > > > > > > > > > My samba installation appears to be trying to use /root/tmp > as > > > its > > > > > temp directory. This is > > > > > > useless as when logged in as a user the system has no access > to > > > the > > > > > temp directory and so > > > > > > nothing works. How do I pursaude Samba to use /tmp as the > temp > > > dir. I > > > > > am running Samba > > > > > > 3 on a Mandrake system. > > > > > > > > > > Make sure that your TMPDIR in the environment is set to "/tmp" > > > before > > > > > you > > > > > launch smbd. ie:In the /etc/rc.d/init.d/smb script, before > > > executing > > > > > smbd > > > > > add an entry that says: > > > > > > > > > > export TMPDIR=/tmp > > > > > > > > > > That should solve your immediate problems. > > > > > > > > > > Did you build the samba binaries yourself? > > > > > > > > > > - John T. > > > > > -- > > > > > John H Terpstra > > > > > Email: [EMAIL PROTECTED] > > > > > -- > > > > > To unsubscribe from this list go to the following URL and read > the > > > > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > > > > > > > > > > > > -- > > > John H Terpstra > > > Email: [EMAIL PROTECTED] > > > > > > > -- > John H Terpstra > Email: [EMAIL PROTECTED] > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Join from Win2K to Samba domain problem
Thanks a lot! I followed your guides..Still failed! The auth works properly in Win 98 indeed. I dont why. Jan Peuker <[EMAIL PROTECTED]> wrote: > The errors are : > 'The credentials supplied conflict with an existing set of credentials.' > Deactive all Printers pointing to LINUXSMB, deconnect all network drives (especially in the win2k network neighborhood overview and workplace) and try again. Then go to "cmd" and do a "net file" and "net use" - are there any connections to the server left? I think this could help, jan - Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software# This is the main Samba configuration file. You should read the # smb.conf(5) manual page in order to understand the options listed # here. Samba has a huge number of configurable options (perhaps too # many!) most of which are not shown in this example # # Any line which starts with a ; (semi-colon) or a # (hash) # is a comment and is ignored. In this example we will use a # # for commentry and a ; for parts of the config file that you # may wish to enable # # NOTE: Whenever you modify this file you should run the command "testparm" # to check that you have not made any basic syntactic errors. # #=== Global Settings = [global] # #security = user encrypt passwords = yes ldap server = ws18 ldap port = 389 ldap suffix ="dc=my-domain,dc=com" ldap admin dn = "cn=Manager,dc=my-domain,dc=com" ldap ssl = no netbios name = linux # workgroup = NT-Domain-Name or Workgroup-Name workgroup = LINUXSMB1 logon drive = U: logon path = \\%L\profiles\%G # server string is the equivalent of the NT Description field server string = Samba Server # add user script = /usr/local/sbin/smbldap-useradd.pl -w %u domain admin group = " @"Domain Admins" " #add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u$ # This option is important for security. It allows you to restrict # connections to machines which are on your local network. The # following example restricts access to two C class networks and # the "loopback" interface. For more examples of the syntax see # the smb.conf man page ; hosts allow = 192.168.1. 192.168.2. 127. # if you want to automatically load your printer list rather # than setting them up individually then you'll need this printcap name = /etc/printcap load printers = yes # It should not be necessary to spell out the print system type unless # yours is non-standard. Currently supported print systems include: # bsd, sysv, plp, lprng, aix, hpux, qnx printing = lprng # Uncomment this if you want a guest account, you must add this to /etc/passwd # otherwise the user "nobody" is used ; guest account = pcguest # this tells Samba to use a separate log file for each machine # that connects log file = /var/log/samba/%m.log #public = No #browsable = No # Put a capping on the size of the log files (in Kb). max log size = 0 # Security mode. Most people will want user level security. See # security_level.txt for details. # security = user # Use password server option only with security = server # The argument list may include: # password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name] # or to auto-locate the domain controller/s # password server = * ; password server = # Password Level allows matching of _n_ characters of the password for # all combinations of upper and lower case. ; password level = 8 ; username level = 8 # You may wish to use password encryption. Please read # ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation. # Do not enable this option unless you have read those documents null passwords = yes encrypt passwords = yes # smb passwd file = /usr/local/samba/smbpasswd # smb passwd file = /etc/samba/smbpasswd # The following is needed to keep smbclient from spouting spurious errors # when Samba is built with support for SSL. ; ssl CA certFile = /usr/share/ssl/certs/ca-bundle.crt # The following are needed to allow password changing from Windows to # update the Linux system password also. # NOTE: Use these with 'encrypt passwords' and 'smb passwd file' above. # NOTE2: You do NOT need these to allow workstations to change only #the encrypted SMB passwords. They allow the Unix password #to be kept in sync with the SMB password. unix password sync = Yes # passwd program = /usr/bin/passwd %u passwd program = /usr/local/sbin/smbldap-passwd.pl -o %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* # You can use PAM's password change control flag for Samba. If # enabled, then PAM will be used for password changes when requested # by an SMB client instead of the program listed in passwd program. # It should be possible to enable this without changing your passwd # chat parameter for most setups. pam password
Re: [Samba] Connection refused
Samba is running form inetd. I don't think there's a firewall on that machine, but i look around it. I tried many thing with the config... but still can only log inform localhost. Poetro - Original Message - From: "Joel Hammer" <[EMAIL PROTECTED]> To: "Galiba Piter" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Sat, 02 Aug 2003 00:06 Subject: Re: [Samba] Connection refused > Is samba running? > Is samba being controlled by (x)inetd? > Joel > On Fri, Aug 01, 2003 at 02:19:56PM +0200, Galiba Piter wrote: > > I have newly configured our new HP Netserver LC 2000r with Samba 2.0.7. > > The Samba was compiled with SSL. > > I can connect to it from localhost, but from any other ip i got the error: > > connectionrefused > > > > c2-server:~# smbclient -L 192.168.0.100 > > added interface ip=192.168.0.3 bcast=192.168.0.255 nmask=255.255.255.0 > > error connecting to 192.168.0.100:139 (Connection refused) > > Connection to 192.168.0.100 failed > > > > c2-server:~# smbclient -L c2-server3 > > added interface ip=192.168.0.3 bcast=192.168.0.255 nmask=255.255.255.0 > > Connection to c2-server3 failed > > > > > > The name of the Server is C2-Server3, and it is on 192.168.0.100. > > The smb.conf file looks like this: > > > > [global] > >printing = bsd > >printcap name = /etc/printcap > >load printers = yes > >guest account = nobody > >security = user > >workgroup = C2 > >server string = %h server (Samba %v) > >syslog only = no > >syslog = 0; > >socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=4096 SO_RCVBUF=4096 > >encrypt passwords = yes > >wins support = no > >name resolve order = lmhosts host wins bcast > >dns proxy = no > >preserve case = yes > >short preserve case = yes > >unix password sync = false > >max log size = 1000 > >ssl CA certFile = /etc/share/certs/ca-certs.crt > > > > [homes] > >comment = Home Directories > >browseable = no > >read only = no > >create mask = 0700 > >directory mask = 0700 > > > > [printers] > >comment = All Printers > >browseable = no > >path = /tmp > >printable = yes > >public = no > >writable = no > > > > [munka-9] > > path = /mnt/data/munka-9 > > public = yes > > writable = yes > > comment = > > force group = c2-users > > force create mode = 777 > > force directory mode = 777 > > printable = no > > > > > > > > Can anybody tell me what went wrong? > > There is no error in the log files. They don't even tell that I wanted to > > connect, only if I connect from localhost. > > > > Thanks.. > > Poetro > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Join from Win2K to Samba domain problem
On Mon, 4 Aug 2003, anthony ho wrote: > Hi all, > When I attempt to join my samba server domain from Win 2000 client, I triend the > following steps:- > 1) Right click 'My computer' > Properties > 2) Network Identification > Properties > 3) Choose 'Member of' & Fill 'LINUXSMB' in Domain > 4) Enter 'Name' : root > 5) 'Password' : samba123 > > The errors are : > 'The credentials supplied conflict with an existing set of credentials.' > > > Any clues ? Thank you Open a DOS box (ie: Run cmd) and execute: net use * /d Then try to join again. If this does not work then email me your smb.conf file (off list). - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain password not working for Administrator
On Mon, 4 Aug 2003, Frederick HW Lim wrote: > Hi, > > My samba version is 2.2.4, recently I cannot login as root (administrator). > I tried change the UNIX and samba password but no effect. That's strange because > I used to able to login as root and add Win2000 client to samba. > > When I login as root I got the following error: > > >>The domain password you supplied is not correct, or access to your logon server > has been denied.<< > > I have no idea how to solve this problem, please help and any adivse is appreciate. Suggest you reset the SMB password for root as follows: smbpasswd root Follow the prompts. If this does not solve your problem then please email me (off list) your smb.conf file and I'll try to help. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Join from Win2K to Samba domain problem
> The errors are : > 'The credentials supplied conflict with an existing set of credentials.' > Deactive all Printers pointing to LINUXSMB, deconnect all network drives (especially in the win2k network neighborhood overview and workplace) and try again. Then go to "cmd" and do a "net file" and "net use" - are there any connections to the server left? I think this could help, jan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Réf. : Re: R?f. : [Samba] system users andsmbpasswd users
Hi again, A useful link : see http://www.padl.com for more infos on libnss-ldap and libpam-ldap... Hope this helps, Regards, Ganaël. [EMAIL PROTECTED] on 07/31/2003 04:02:46 PM Pour : [EMAIL PROTECTED] cc : Objet : Re: R?f. : [Samba] system users and smbpasswd users Hi, Thanks for the mail. On Wed, Jul 30, 2003 at 10:58:35AM +0200, Ganael LAPLANCHE wrote: > Samba needs two accounts : a system account AND a samba account. The reason > for this is > you can't store every piece of information samba needs in the /etc/passwd > file (e.g. Samba Home dir). oh! some people say that I can use PAM for this. Do you have any ideas on this? > You may have heard about _nua (No Unix Accounts) backends, a way of storing > users in samba-only No never heard of this. Can you give some more info. As you say in French, Merci beaucoup :) With warm regards, -Payal -- "Visit GNU/Linux Success Stories" http://payal.staticky.com Guest-Book Section Updated. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Join from Win2K to Samba domain problem
Hi all, When I attempt to join my samba server domain from Win 2000 client, I triend the following steps:- 1) Right click 'My computer' > Properties 2) Network Identification > Properties 3) Choose 'Member of' & Fill 'LINUXSMB' in Domain 4) Enter 'Name' : root 5) 'Password' : samba123 The errors are : 'The credentials supplied conflict with an existing set of credentials.' Any clues ? Thank you Ant. - Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Domain password not working for Administrator
Hi, > When I login as root I got the following error: > > >>The domain password you supplied is not correct, or access to your logon server > has been denied.<< could you send us your smb.conf? Maybe there is an error like "deny user" or your account has been deleted/deactivated. Is your "administrator" mapped to root or in the root group or do you have a seperate domainadmin group? Are you able to login via smbclient from the same machine? regards, jan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Domain password not working for Administrator
Hi, My samba version is 2.2.4, recently I cannot login as root (administrator). I tried change the UNIX and samba password but no effect. That's strange because I used to able to login as root and add Win2000 client to samba. When I login as root I got the following error: >>The domain password you supplied is not correct, or access to your logon server has been denied.<< I have no idea how to solve this problem, please help and any adivse is appreciate. Regards. http://www.i-cable.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SambaSID problem in Samba 3.0 beta 3
Hi, I have the following problem : I have +- 400 Users in LDAP. They are all Samba users and all have the objectclasses : account posixAccount top shadowAccount sambaSamAccount When I try to add a machine account, I first make a useradd -g -d /dev/null -c machine$ -s /bin/false 100 machine$ after that I make smbpasswd -a -m machine But the I receive the error when executin "smbpasswd -a -m machine" : "SID 'S-1-5-...-31008' already in base, with samba attributes" When I browse the LDAP tree I find a user with this sambaSID. How is it possible to change the procedure in order to directly add a user or machineaccount without using "useradd" and that the sambaSID is a unique string ?? Thanks Georges Goebel -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Réf. : Re: R?f. : [Samba] system users andsmbpasswd users
Hi :) As I'd say in French "de rien !" (you're welcome :)) Yes, you can use PAM to redirect the system authentication calls to your LDAP directory, but in reality samba will continue to use two types of accounts : the "posixAccount"s (same as /etc/passwd) and the "sambaSamAccount"s. Everything will be stored in you LDAP directory, but Samba still needs two types of accounts : one for the system, one for Samba (even if the accounts will be merged in only one entry). If you plan to use PAM, don't forget to use nsswitch (libnss-ldap), which allows your system to catch name services calls (e.g. to identify the available accounts when you use "getent passwd") and to redirect them to a dedicated backend (e.g. /etc/passwd). Pam is for only authentication, while nsswitch is for name service "translation". You should use both libpam-ldap and libnss-ldap if you want your System being able to identify AND authenticate LDAP-only users. I don't have much more infos about "_nua" accounts, I think they've been removed, or maybe they were just planned... I really don't know... Good luck ! Ganaël. [EMAIL PROTECTED] on 07/31/2003 04:02:46 PM Pour : [EMAIL PROTECTED] cc : Objet : Re: R?f. : [Samba] system users and smbpasswd users Hi, Thanks for the mail. On Wed, Jul 30, 2003 at 10:58:35AM +0200, Ganael LAPLANCHE wrote: > Samba needs two accounts : a system account AND a samba account. The reason > for this is > you can't store every piece of information samba needs in the /etc/passwd > file (e.g. Samba Home dir). oh! some people say that I can use PAM for this. Do you have any ideas on this? > You may have heard about _nua (No Unix Accounts) backends, a way of storing > users in samba-only No never heard of this. Can you give some more info. As you say in French, Merci beaucoup :) With warm regards, -Payal -- "Visit GNU/Linux Success Stories" http://payal.staticky.com Guest-Book Section Updated. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
