[Samba] How to restrict samba access to ipsec?

2003-08-05 Thread James Thornton

I have a standalone Linux server (no network behind it) running Freeswan
ipsec and Samba, and client systems connect to it over the Internet. What is
the best way to make Samba accessible only via the ipsec0 interface?

Thanks.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Info from the object picker was incomplete

2003-08-05 Thread Jeremy Drake
I have a small domain at home, which I recently upgraded to Samba 3.0
(tried beta2 and the current cvs SAMBA_3_0 branch).  I am unable to add
Domain Admins to the local Administrators group (they were not there by
default, which is strange) on an XP box.  The message I get is

---
Local Users and Groups
---
Information returned from the object picker for object Domain Admins was 
incomplete.  The object will not be processed.
---
OK   
---

I have scoured google on this message, and found questions like this but 
no answers.  This only happens when I attempt to add a group from the 
domain to a local group on XP.  I can add domain users to local groups no 
problem.  Anybody seen anything like this?  And, better yet, anybody know 
how to fix it.

I am not subscribed to the list, please CC me in responses.

Thanks,
Jeremy

-- 
When choosing between two evils, I always like to take the one I've never
tried before.
-- Mae West, Klondike Annie
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] FreeBSD5.1 as PDC cant connect winXP box

2003-08-05 Thread Jon Reynolds
I am at the end of my rope, I am trying to get a winxp box to logon to a
pdc using freebsd5.1 and keep getting Logon failure: unknown user name
or bad passsword. or Access Denied.

I am trying to logon with 'root' and the user is in smbpasswd and
/etc/passwd. I think my problem is I am not sure how to add the machine
account into the samba server. I have tried just adding the user then
adding a '$' after the username in /etc/passwd, when this is done I can
use smbpasswd -a -m MachineName and it adds the computer to smbpasswd
with a '$' sign next to it.

No matter which logon I try and use I never get to authenticate. I have
also made the two registry changes to the XP box and still I cannot log
in.

Can someone help me with this or point me to a freebsd doc or something.
I'm going nuckin' futs with this.

Any help is greatly appreciated,

Jon

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] How does group mapping function ?

2003-08-05 Thread Ganael LAPLANCHE
Hi all, this is a re-post, maybe the Samba Team can help ?

I'm testing group mapping, wondering how It works exactly...
I thought Samba was storing a mapping table allowing to retreive infos on
Unix/Windows groups in a DYNAMIC way. Unfortunately, group mapping seems to
be static, here is what I did :

[I'm using Samba b3v3 + LDAP, WITHOUT nss-ldap/pam-ldap/winbind -
everything is stored in my /etc/passwd and /etc/group + in LDAP for Samba
accounts]
1) Created Unix group (let's say domusers) : groupadd domusers
2) Created LDAP group, with ldapadd, and a file containing :

dn: cn=domusers,ou=Users,dc=domain,dc=org
objectClass: posixGroup
gidNumber: 1001
cn: domusers
memberUid: foo

3) Created Unix user (foo, primary group domusers) : useradd -g domusers
foo
4) Created Group mapping : net groupmap add sid=mySID-513
unixgroup=domusers ntgroup=Domain Users type=domain (then net groupmap
list, OK)
5) Finally, created LDAP (samba) user : smbpasswd -a foo

Ok, no problem, foo gets the domain local sid + the domain users rid as
SambaPrimaryGroupSid, he IS a Win Domain User.

Here is what I don't understand : If I delete the groupmapping or modify
it, the SambaPrimaryGroupSid of foo isn't modified ! Foo remains a Domain
User...
Another example : if I create first the user, then the mapping : the user
doens't get the new SambaPrimaryGroupSid and doesn't become a Domain
User...

Am I missing something ? Is the mapping only used while creating users ? I
thought the table was used in a more dynamic way... Is there a technical
limit in implementing this function this way ? Please help me...

Regards,
Ganaël.


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Secondary group not working ?

2003-08-05 Thread Ganael LAPLANCHE
Hi,

I'm using samba 3b3 and have created a user with two groups : his primary
group is mapped to the Domain Users Windows group, and his secondary one
is mapped to the Domain Admins Windows group. Unfortunately, only the
first group seems to be known by Samba, since the user doesn't become a
Domain Admin at all (but he is a Domain User)... I've googled a lot and
haven't been able to find any info about multiple-groups handling in Samba
; many users seems to get the same problem without getting a solution...
Any clue ?

Regards,
Ganaël.


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Browsing

2003-08-05 Thread Marian Mlcoch, Ing
Your reply is strong...
My question of have you any server on no worked subnet not reply...

I repeat query have wins and where? Who is router between subnets ?
Last who is browse master on not worked subnet?

Bye.


- Original Message - 
From: Howard Miller [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, August 04, 2003 8:47 PM
Subject: Re: [Samba] Browsing


 Hi,

 Iteresting one... yes I had WINS and yes everything was configured to use
it and was pointed at the
 *same* samba machine.

 It actualy all started working by itself although it took several hours
to come good. I don't like
 that kind of solution - I'm waiting for it o break again!

 Howard

 Quoting John H Terpstra [EMAIL PROTECTED]:

  On Mon, 4 Aug 2003, Howard Miller wrote:
 
   Hi,
  
   More problems... getting my monies worth :-)
  
   I have two subnets. Basically I cannot get the machines on the subnet
  that the Samba server is
   *not* on the join the domain. They just sit there for a couple of
  minutes and then claim that the
   domain server cannot be found.
 
  Are you running WINS on your Samba server? Have all your clients been
  configured to use that WINS server?
  
   Browsing from either subnet only shows machines on that subnet,
  although if you specify a
   machine on the other side you can connect to shared resources
  (supplying a suitable username
   and password) no problem at all.
 
  If you want cross subnet browsing to work, and if you want your clients
  to
  be able to find a samba server that is on a remote subnet, then WINS
  is
  your friend. It's documented in chapter 10 of the HOWTO.
 
  - John T.
  -- 
  John H Terpstra
  Email: [EMAIL PROTECTED]
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] suspicious activity

2003-08-05 Thread Payal Rathod
Hi,
While using samba as PDC and file sharing this for just 1 machine, 1
found out that it was giving me this in log,

[2003/08/06 11:37:42, 2] smbd/reply.c:reply_sesssetup_and_X(985)
  Defaulting to Lanman password for shanky123
[2003/08/06 11:37:44, 1] smbd/service.c:make_connection(636)
  default (192.168.0.2) connect to service shanky123 as user shanky123 (uid=501, 
gid=501) (pid 1699)
[2003/08/06 11:37:45, 2] smbd/open.c:open_file(245)
  SHANKY123 opened file comvir.exe read=Yes write=No (numopen=1)
[2003/08/06 11:38:21, 2] smbd/close.c:close_normal_file(213)
  shanky123 closed file comvir.exe (numopen=0)

I was testing it myself so I am sure that I hadn't opened the file comvir.exe
on /home/shanky123 cos' it is a known virus.

Nobody uses/test this setup other than me. What is wrong in the logs above
and why? Do the above logs look ok?

Waiting eagerly for any response.
With warm regards,
-Payal



-- 
Visit GNU/Linux Success Stories
http://payal.staticky.com
Guest-Book Section Updated.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


FINALLY ....[WAS Re: [Samba] Re: DID ANYBODY HERE...

2003-08-05 Thread Beast
Tuesday, August 5, 2003, 8:33:07 AM, paul wrote:

 1. Change the Primary Group SID of your Administator to the SID of the
 Domain Admins global group.

Well, to make it clear for everyone else, Requirements for domain
administator is you MUST set its group RID to 512.
No matter you have Domain Admins groupmapping or not.

To make user able to add machine to domain, (unix) uid and gid must be
0 no matter it belongs to nt domain admin or not at all.

This should be written in documentation, otherwise it will confuse
anybody.

well, i spent a whole week fight with this problem, however it 'just'
beta so it's my fault anyway to use beta sw.

However samba3 seems promissing, Tks samba team!


 2. Add something like memberUID: Administrator to the corresponding 
 UNIX group of your Domain Admins group.

This will not work.
Domain Admins group is still ok as long as you set GRID to 512.



--beast 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] users and smbpasswd

2003-08-05 Thread Thomas Dewar
Thomas Dewar wrote:

Hi all.

I am trying to let users change their passwords from the swap webpage. 
But in the password interface when a user wants to change his password 
I get the following error :
machine 127.0.0.1 rejected the session setup.  Error was : Not 
listening for
calling name.

OS: Debian 3.0
Samba v: 2.2.3
I have no problems changing the smb passwords as root, but when I 
login as a
regular user I get the same error.

Any idea?
Thomas

Sorry about all the fuss... my mistake so ill mend it...
I had just forgotten to put localhost in my host allows section... silly 
me :-[
hosts allow = 127.0.0.1

thanx anyway

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: Windows 2000 don't fetch user.DOMAIN profile

2003-08-05 Thread Jim Wharton
running echo %userprofile% from a windows command prompt will tell you
exactly where your user profile is located.

running set will give you all your environment settings.

Jim Wharton
Network Administrator
Alachua County Property Appraiser
[EMAIL PROTECTED]


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]
  Behalf Of
 Dragan Krnic
 Sent: Tuesday, August 05, 2003 6:23 AM
 To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Subject: [Samba] Re: Windows 2000 don't fetch user.DOMAIN profile


 | I've successfully added a machine to my DOMAIN but
 | the users still continue to use his local profile.
 | this profile is in folder
 | c:\document and Settings\blahblah\username
 | but I want he to get those in
 | c:\document and Settings\blahblah\username.DOMAIN.
 | How is it possible ?
 
 You mean
   c:\Documents and Settings\blahblah-username.DOMAIN
 

 How do you know the users is still using the local
 profile? If that really is the case, then you should
 make sure that the profile type for that user in
 My Computer-Properties-User Profile is
 Server stored and not Locally stored.



 
 Get advanced SPAM filtering on Webmail or POP Mail ... Get Lycos Mail!
 http://login.mail.lycos.com/r/referral?aid=27005
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba



OutBound Mail Scanned by Mcafee Web Appliance.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Finally winbind on RH9 working, but why ?

2003-08-05 Thread jo
OKOKOKOKOK COOL:

could you tell me where all those nice groups like 

 DHCP Users
 DHCP Administrators
 WINS Users
 Domain Computers
 Domain Controllers
 Schema Admins
 Enterprise Admins
 Cert Publishers

come from ? Where do you define these. I DO guess you have
configure them? Think we're getting there... *grin*

Thanks

Jo



On Tue, 5 Aug 2003 10:42:50 -0500 Lahners, Jeremy wrote:

 [EMAIL PROTECTED] admin]# wbinfo -u
 administrator
 Guest
 TsInternetUser
 
 [EMAIL PROTECTED] admin]# wbinfo -g
 DHCP Users
 DHCP Administrators
 WINS Users
 Domain Computers
 Domain Controllers
 Schema Admins
 Enterprise Admins
 Cert Publishers
 Domain Admins
 Domain Users
 Domain Guests
 
 Jeremy Lahners
 Manager, I.T.
 The Schemmer Associates Inc.
 (402) 493-4800 (P)
 (402) 493-7951 (F)
 
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
 Sent: Tuesday, August 05, 2003 10:40 AM
 To: Lahners, Jeremy
 Cc: [EMAIL PROTECTED]
 Subject: Re: Finally winbind on RH9 working, but why ?
 
 No... just tested it :(
 
 if you have time : does you output of wbinfo resembles this :
 
 [EMAIL PROTECTED] root]# wbinfo -u
 root
 jo
 [EMAIL PROTECTED] root]# wbinfo -g
 Domain Admins
 Domain Users
 
 
 I REALLY wonder where these groups are stored on the pdc... I find
 no trace of them in /etc/samba/smbpasswd or anywhere...
 
 
 
 
 
 
 On Tue, 5 Aug 2003 10:08:13 -0500 Lahners, Jeremy wrote:
 
  I don't have winbind under shadow.  I don't know if that would matter
 or
  not.
  
  Jeremy Lahners
  Manager, I.T.
  The Schemmer Associates Inc.
  (402) 493-4800 (P)
  (402) 493-7951 (F)
  
  
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  Sent: Tuesday, August 05, 2003 10:05 AM
  To: Lahners, Jeremy
  Cc: [EMAIL PROTECTED]
  Subject: Re: Finally winbind on RH9 working, but why ?
  
  Thanks for the reply ! But no such luck : 
  
  
  #group: db files nisplus nis
  
  passwd: files winbind
  shadow: files winbind
  group:  files winbind
  
  #hosts: db files nisplus nis dns
  hosts:  files dns
  
  # Example - obey only what nisplus tells us...
  #services:   nisplus [NOTFOUND=return] files
  
  
  *grin*
  
  
  
  
  
  
  On Tue, 5 Aug 2003 09:34:27 -0500 Lahners, Jeremy wrote:
  
   I had similar problems with getent on one of my servers.  After some
   investigation, I had forgotten to edit /etc/nsswitch.conf to add
  winbind
   to the users and groups there.  Wbinfo worked great, nothing from
   getent.  After the change, and a restart of winbind (don't know if
  that
   was necessary or not) all was well.
   
   Jeremy Lahners
   [EMAIL PROTECTED]
   The Schemmer Associates Inc.
   
  
  
  
  
   [EMAIL PROTECTED] wrote in message
   news:[EMAIL PROTECTED]...
   Maybe I'll rephrase it shorter :
   
   1) eventhough 'wbinfo -g' gives me the correct groups, they do not
  show
   up when I go 'getent group'. Can it be the spaces in the Samba
 groups
   'Domain Admins' and 'Domain Users'? Where is the information 
   about these groups stored on the Samba pdc?
   
   2) I only get winbind to do it's job (which is connecting to a local
   share on the domain member with a winbind user) when I
   a) set the parameter 'winbind cache timeout = 0'
   OR
   b) create the user locally on the domain member, which is of course
  what
   we try to avoid by using winbind... 
   
   any idea's why playing with the cache timeout causes a difference?
   
   Thanks in advance...
   
   the full story is below but I guess it's to long for anyone to read
   *grin*
   
   Jo De Baer
  
  NEOlabs - http://www.neolabs.be - mailto:[EMAIL PROTECTED]
 
 NEOlabs - http://www.neolabs.be - mailto:[EMAIL PROTECTED]

NEOlabs - http://www.neolabs.be - mailto:[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba auth via NDS LDAP

2003-08-05 Thread Jason Whitson
Hi All.

I am wanting to setup SAMBA to use a Novell LDAP server to authiticate 
users. I have Googled the topic and cannot find much except for OpenLDAP 
implementations.

Does anyone have suggestions or links to share?

--
Jason
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Home directory

2003-08-05 Thread Windberg Djoni
How can I automatically create home directories for my users from the Domain  NT4 ?

Djoni

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] capturing printer port net usefor samba in xp

2003-08-05 Thread VIK
Hello
I m running a samba and about 6 or 7 xp machines and
printing is all through samba.
I used net use to capture printer port in windows xp
and it works fine.
only prob which i have been facing is as follows:
I have a user who logs inn from xp and can print thru
samba. then he logs out and goes home and next day he
comes back and issues print command it doesnt work. i
(admin) type the net use command for capturing printer
port it starts working fine. 
any solution for this ? so that net use can be run
everytime he logs in into win xp so that printing will
b without any hassels
let me know asap

thank you

__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3 + PDC + LDAP machine accounts

2003-08-05 Thread Markus Amersdorfer
On Tue, 5 Aug 2003 17:38:15 +1200
[EMAIL PROTECTED] wrote:

Hi!

 (eg had machines in ou=Machines,dc=domain,dc=com
 and people in ou=People,dc=domain,dc=com)?
 If so, how did you add machines?
 I've tried smbpasswd -a -m MACHINE
 and with debugging, it shows that it tries to find a posix account for
 MACHINE$ first, which obviously doesn't exist.

As you probably know: you have to create a Linux-User first which
resides in ou=Machines.
In order to have the system find it when doing the lookup, you'll need
to tell your NSS to also search in the Machines-tree for users:
In /etc/ldap.conf (e.g. Mandrake) or /etc/libnss-ldap.conf (Debian),
change as follows:

  # nss_base_passwd ou=People,dc=domain,dc=net
  nss_base_passwd dc=domain,dc=net?sub

 The actual fault is, after determining that a sambaSamAccount object
 doesn't exist, it goes back to getpwnam to try and find an account.
 Obviously if I am putting machines in a different tree, pam_ldap, etc
 aren't going to find them there.

Right. Just that it's not pam_ldap but lib-nss. (PAM does the
authentication-stuff while NSS does the user-lookups.)
(At least Samba 2.2.x relies on NSS too.)


The problem I had while trying this with Debian's 2.2.3a yesterday was
that I _could_ get the system (and Samba) to find the Linux user, but
smbpasswd -m -a  created an entry in ou=People nevertheless.
This means, I got two entries for one machine: the Linux-User
machine$ in ou=Machines, and the Samba-part in ou=People.

Any idea how to fix this?

(I move machines to ou=People now, but I'd also rather see them in
ou=Machines...)

Cheers,
Max

-- 
The first time any man's freedom is trodden on, we're all damaged.
   Cpt. Picard, The Drumhead, StarTrek TNG

http://homex.subnet.at/~max/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Share with cdrom label

2003-08-05 Thread Adam Oliver
Anybody know if it's possible to get a linux box to read a cdrom's label and they have 
it's either share name or comment be that label?

Adam Oliver
System Administrator
Microsoft Certified Professional
 
Even in trifling matters the depths of one's heart can be seen.
From Hagakure, The Book of the Samurai

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Betas not building, cvs or provided tar archives

2003-08-05 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Sun, 27 Jul 2003, Sean Brown wrote:

 Since 3.0 went into Beta, it has not built on my machine, with the same 
 error(s), this is from the beta tarballs and checkout from CVS, thankfully 
 its very early in the make so i dont have to wait long to be dissapointed.
 
 It did build with the few alphas i tried.

This looks like you are building with srcdir != builddir?  Yes?
We've fixed some bugs in this aread recently.  

 Using FLAGS =  -g -O2  -Iinclude -I/var/installer/samba/source/include 
 -I/var/installer/samba/source/ubiqx -I/var/installer/samba/source/smbwrapper  
 -I. -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -D_GNU_SOURCE 
 -I/var/installer/samba/source
   LIBS = -lcrypt -lresolv -lnsl -ldl
   LDSHFLAGS = -shared
   LDFLAGS =
 Generating smbd/build_options.c
 Building include/wrepld_proto.h
 Building include/build_env.h
 creating /var/installer/samba/source/include/wrepld_proto.h
 creating /var/installer/samba/source/nsswitch/winbindd_proto.h
 creating /var/installer/samba/source/web/swat_proto.h
 creating /var/installer/samba/source/client/client_proto.h
 creating /var/installer/samba/source/utils/net_proto.h
 Compiling param/loadparm.c
 make[1]: Entering directory `/var/installer/samba/source'
 make[1]: Leaving directory `/var/installer/samba/source'





cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 You can never go home again, Oatman, but I guess you can shop there.  
--John Cusack - Grosse Point Blank (1997)

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE/MDKwIR7qMdg1EfYRAv0oAJoCKiNcxjXOOtBpjHfCeKKuEsBAMACfWVFC
t564+s3MVNwLtCratM4xpmQ=
=6lY3
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] [bug?] smbclient does not honour '-s' option

2003-08-05 Thread Marcus Blomenkamp
Hi,

'smbd' and 'nmbd' do behave well however 'smbclient' does not, so some of the 
other binaries neither i suppose. 

Running 'smbclient -s /etc/samba-pdc/config' gives me:

params.c:OpenConfFile() - Unable to open configuration file 
/opt/samba-3.0.0beta3/lib/smb.conf:
No such file or directory
bin/smbclient: Can't load /opt/samba-3.0.0beta3/lib/smb.conf - run testparm to 
debug it
Usage: [-?EVNk] [--usage] [-R NAME-RESOLVE-ORDER] [-M HOST] [-I IP] [-L HOST]
[-t CODE] [-m LEVEL] [-T c|xIXFqgbNan] [-D DIR] [-c ARG] [-b BYTES]
[-p PORT] [-d DEBUGLEVEL] [-s CONFIGFILE] [-l LOGFILEBASE]
[-O SOCKETOPTIONS] [-n NETBIOSNAME] [-W WORKGROUP] [-i SCOPE]
[-U USERNAME] [-A FILE] service password

cu, Marcus

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: DID ANYBODY HERE...

2003-08-05 Thread Beast
Tuesday, August 5, 2003, 8:33:07 AM, paul wrote:

 Beast wrote:


 [EMAIL PROTECTED] root]# pdbedit -Lv administrator
 Unix username:administrator
 NT username:  administrator
 Account Flags:[U  ]
 User SID: S-1-5-21-2897595519-3619093474-3625347041-1000
 Primary Group SID:S-1-5-21-2897595519-3619093474-3625347041-1001
 Full Name:Administrator
 Home Directory:
 HomeDir Drive:
 Logon Script: logon.bat
 Profile Path:
 Domain:   DJKT
 Account desc:
 ...
 
 With admin uid 0, i can use admin to add machine trust, but when login w2k
 client can not recognized it as domain admin (ie. can not change IP
 address on client machine etc.)
 Looks good so far, make sure your Administrator is a member of your 
 Domain Admin group. I'm not sure about how samba checks that, but 
 there are only two possible ways to do it I can think of right now.

 1. Change the Primary Group SID of your Administator to the SID of the 
 Domain Admins global group.

Aaaah., only this part i did not do some test.
I should think about this before, now it works :=)
Thanks Paul, you save my life, i o u.
Pls send your postal address, i'll send postcard from here...

 2. Add something like memberUID: Administrator to the corresponding 
 UNIX group of your Domain Admins group.

I already test this before (and again), it did not works even getent
group shows administrator as a member of domadmin.

 good luck
Paul

Thanks and regards,


--beast 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] where is the LFS patch?

2003-08-05 Thread Christoph 2
Hi,
AFAIK these patches are'nt needed anymore for 2.2.8a. they are included
in the standard sources already.
Samba detects at configure time if large-file-support can be enabled.
if your libc and or filesystem does not support it, you won't get it.
Christoph
whoever wrote:

Hello,
I found my samba can only support files no larger than 2GB. Searched internet for a 
while and learned I need the LFS patch. The problem is where can I found them? The 
link from google seems unreachable.
I found the patch is smbfs-2.4.16-lfs.patch and samba-2.2.2-lfs.patch, but I'm running kernel 2-4-20 and samba-2.2.7a, so the newer kernel and samba doesn't include these LFS patch? why?

Thanks in advance,
chris
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] users and smbpasswd

2003-08-05 Thread James Kosin
Dear Thomas Dewar,

Only root can use the '-U' parameter.  Try changing it without the '-U'
option and it should work.

James Kosin

Date: Tue, 05 Aug 2003 12:35:52 +0200
From: Thomas Dewar [EMAIL PROTECTED]
Subject: Re: [Samba] users and smbpasswd
To: Thomas Dewar [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Message-ID: [EMAIL PROTECTED]
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

Thomas Dewar wrote:

 snip 

Hello again, after having solved the previous message i am now
encountering this new one :
When i want to change a user password being connected as this user i get
the following error :
[EMAIL PROTECTED]:~$ smbpasswd -r ldap -U test
Old SMB password:
New SMB password:
Retype new SMB password:
machine ldap rejected the password change: Error was : RAP86: The
specified password is invalid.
Failed to change password for test

But when I am root i am allowed to change the password :
ldap:~#  smbpasswd  -U test
New SMB password:
Retype new SMB password:
Password changed for user test.

Any piece of advice??? (unless i find out myself... ;-) )

thanx

Thomas




James Kosin [EMAIL PROTECTED]

International Communications Group, Inc.
200 Enterprise Drive
Newport News, VA 23603-1300
-- United States of America --

Voice:   +1 (757) 947-1030 x122
Fax:  +1 (757) 947-1035


Walking on water and developing software to specification
are easy as long as both are frozen - Edward V. Berard.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


CVS update: sambaweb

2003-08-05 Thread tpot

Date:   Tue Aug  5 03:06:07 2003
Author: tpot

Update of /data/cvs/sambaweb
In directory dp.samba.org:/tmp/cvs-serv18951

Modified Files:
Linux_CIFS_client.html 
Log Message:
Fixed small typo.


Revisions:
Linux_CIFS_client.html  1.41 = 1.42

http://www.samba.org/cgi-bin/cvsweb/sambaweb/Linux_CIFS_client.html.diff?r1=1.41r2=1.42


CVS update: sambaweb

2003-08-05 Thread sfrench

Date:   Wed Aug  6 00:20:30 2003
Author: sfrench

Update of /home/cvs/sambaweb
In directory dp.samba.org:/tmp/cvs-serv10072/sambaweb

Modified Files:
Linux_CIFS_client.html 
Log Message:
Update cifs vfs web page to reflect 0.8.7 merge


Revisions:
Linux_CIFS_client.html  1.42 = 1.43

http://www.samba.org/cgi-bin/cvsweb/sambaweb/Linux_CIFS_client.html.diff?r1=1.42r2=1.43