Re: [Samba] Samba 3 - LDAP - PDC -??
Thank you for your assistance now my SAmba 3 is running as a PDC with openldap 2.0 as passdb backend. I have a new problem which is related to CUPS. I'm running (RH 9): - samba 3.0.0-15 - openldap 2.0.27-8 - cups-1.1.19-13 - cups-samba-1.1.16 (the only working) When I try to connect to a printer from win XP it doesn't report any problem or warning, but when I try to print a test page windowz tells me that the driver is not installed ! any idea ? thanks. On Tuesday 02 December 2003 21:20, Stéphane Purnelle wrote: Hi, Questions : 1- do I must create idmap entries ? how ? For a NT4 PDC style, it's no necessary 2- using smbclient only nobody (blank password) can log in, else I got : NT_STATUS_LOGON_FAILURE : any idea ? (of course I assigned the users with LM and NT passwords using mkntpwd from idealx) have you a log ? could you send on ML or directly to me email your smb.conf 3- is there someone who got it working ? :) Yes, it's work PDC with ldap backend and ACL (XFS FS). Zied Fakhfakh a écrit : Hi all, I'm new to this ML. I'm trying to get a Samba PDC serving WIN XP Pro using LDAP backend. my LAN contains linux and windowz clients. I started by configuring LDAP for central authentication to linux clients: it works out of the box. now I'm tryint o get samba acting as a PDC for win clients. Questions : 1- do I must create idmap entries ? how ? 2- using smbclient only nobody (blank password) can log in, else I got : NT_STATUS_LOGON_FAILURE : any idea ? (of course I assigned the users with LM and NT passwords using mkntpwd from idealx) 3- is there someone who got it working ? :) thanks a lot. -- Zied Fakhfakh CTO - dot TN Tel|Fax : +216 71 70 22 65 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] group policies, domain policies and workstation policies without Active Directory??
On Sat, 06 Dec 2003 15:47:32 -0600 Andrew Gaffney wrote: [EMAIL PROTECTED] wrote: I have the following situation: a network with 30 Windows NT Server on different sites, 800 clients with Windows XP; I want to migrate to Samba instead of Windows 2003 Server, but I have the effort to manage group policies, domain policies and workstation policies on the XP Clients; Do you really want to apply the XP registry hack to 800 clients? Although, it may no longer be necessary if you're using 3.0. Does anyone know? what hack are you talking about? (I'm really interested in doing this since I've posted several questions on this same list before). My approach was like this : - Samba 3 server - Windows XP client machines - Roaming profiles stored on the server - The client machines execute a script on logon that tries to load a specially customized .reg file, but fails doing it because the user that logs won't have priviledges enough to modify the registry (entries con hkey_current_user - HKU or similar) this didn't work... any ideas? :-) Haven't tested this yet, but I have thought to create a scheduled task which runs on Administrator privileges a .bat from netlogon share at every logon. To that .bat I can put all updates that needs to run with Administrator rights. Does this sound like a potential solution? Of course I have to create that scheduled task on every machine, but after that everything should be quite automatic. Hannu -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] is the domain-name in smb.conf case-sensitive?
hi list, i try since weeks to authenticate my linux-clients against my samba-server. This works very fine with 2 windoze-cliens. but i still cannot authenticate with my linux-clients. i am @office now, thats wy i ask instead to test: i heard, winbind is used to authenticate linux-clients against the samba-server. the wbinfo -u gives me back: DOMAIN-user (i use the minus as separator) so i should be able to authenticate my linux-clients in the form: DOMAIN\user as i do on windoze-clients. it didn't work. so i tried all variants except domain\user as i wrote my domain in the smb.conf small. is this case sensitive? i write that much, because i hope finally to get some help, as samba works fine for me - except with my linux-clients. btw. it announces the subnet in the messages.log with 10.0.0.1 - this is the ip-adress from the samba-serverde subnet i indicated in the smb.conf as 10.255.255.255.255 --- so, here also some entries from my quite full log: *Unmatched Entries** lib/util_sock.c:get_socket_addr(919) getpeername failed. Error was Der Socket ist nicht verbunden : 2 Time(s) lib/util_sock.c:send_smb(585) Error writing 4 bytes to client. -1. (Die Verbindung wurde vom Kommunikationspartner zurückgesetzt) : 1 Time(s) lib/util_sock.c:write_socket(413) write_socket: Error writing 4 bytes to socket 16: ERRNO = Die Verbindung wurde vom Kommunikationspartner zurückgesetzt : 1 Time(s) lib/util_sock.c:write_socket_data(388) write_socket_data: write failure. Error = Die Verbindung wurde vom Kommunikationspartner zurückgesetzt : 1 Time(s) lib/util_str.c:safe_strcpy_fn(577) ERROR: NULL dest in safe_strcpy : 20 Time(s) nmbd/nmbd_logonnames.c:add_logon_names(163) add_domain_logon_names: Attempting to become logon server for workgroup GWCH on subnet 10.0.0.1 : 1 Time(s) nmbd/nmbd_logonnames.c:add_logon_names(163) add_domain_logon_names: Attempting to become logon server for workgroup GWCH on subnet UNICAST_SUBNET : 1 Time(s) nmbd/nmbd_logonnames.c:become_logon_server_success(124) become_logon_server_success: Samba is now a logon server for workgroup GWCH on subnet 10.0.0.1 : 1 Time(s) nmbd/nmbd_logonnames.c:become_logon_server_success(124) become_logon_server_success: Samba is now a logon server for workgroup GWCH on subnet UNICAST_SUBNET : 1 Time(s) nmbd/nmbd_processlogon.c:process_logon_packet(95) process_logon_packet: Logon from 10.0.0.5: code = 0x12 : 41 Time(s) nmbd/nmbd_processlogon.c:process_logon_packet(95) process_logon_packet: Logon from 10.0.0.5: code = 0x7 : 1 Time(s) nsswitch/winbindd_util.c:add_trusted_domain(149) Added domain GWCH : 1 Time(s) nsswitch/winbindd_util.c:add_trusted_domains(206) scanning trusted domain list : 285 Time(s) rpc_server/srv_pipe.c:api_pipe_netsec_process(1357) failed to decode PDU : 1 Time(s) rpc_server/srv_pipe_hnd.c:process_request_pdu(605) process_request_pdu: failed to do schannel processing. : 1 Time(s) smbd/connection.c:register_message_flags(220) register_message_flags: tdb_fetch failed : 2 Time(s) smbd/service.c:make_connection_snum(698) agentsmith (10.0.0.5) connect to service netlogon initially as user roger (uid=500, gid=501) (pid 4955) : 1 Time(s) smbd/service.c:make_connection_snum(698) agentsmith (10.0.0.5) connect to service public initially as user roger (uid=500, gid=501) (pid 4955) : 1 Time(s) smbd/service.c:make_connection_snum(698) agentsmith (10.0.0.5) connect to service roger initially as user roger (uid=500, gid=501) (pid 4955) : 2 Time(s) log 2: --**Unmatched Entries** lib/fault.c:fault_report(36) === : 1 Time(s) lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 12958 (3.0.0-15) Please read the appendix Bugs of the Samba HOWTO collection : 1 Time(s) lib/fault.c:fault_report(39) === : 1 Time(s) lib/util.c:smb_panic(1422) PANIC: internal error : 1 Time(s) lib/util.c:smb_panic(1429) BACKTRACE: 11 stack frames: #0 smbd(smb_panic+0x110) [0x6fc430] #1 smbd [0x6e83e4] #2 /lib/tls/libc.so.6 [0x82da38] #3 /lib/tls/libc.so.6(__libc_free+0x8b) [0x875ffb] #4 smbd(talloc_destroy_pool+0x6c) [0x701a8c] #5 smbd(print_notify_send_messages+0x6e) [0x728e1e] #6 smbd [0x5ebefa] #7 smbd(smbd_process+0x13f) [0x5ec3af] #8 smbd(main+0x4fd) [0x76ff4d] #9 /lib/tls/libc.so.6(__libc_start_main+0xf0) [0x81b750] #10 smbd [0x5912e2] : 1 Time(s) lib/util_sock.c:get_socket_addr(919) getpeername failed. Error was Der Socket ist nicht verbunden : 2 Time(s) lib/util_sock.c:read_socket_data(342) read_socket_data: recv failure for 4. Error = Die Verbindung wurde vom Kommunikationspartner zurückgesetzt : 2 Time(s) lib/util_sock.c:read_socket_data(342) read_socket_data: recv failure for 4. Error = Keine Route zum Zielrechner : 1 Time(s) lib/util_sock.c:send_smb(585) Error writing 4 bytes to client. -1. (Die Verbindung wurde vom
[Samba] I have two problem in samba
Hi all I don't found any documentation that can help me to solve this two problem 1. I want to restrict user concatenation by MAC-ADDRESS. i try /etc/security/access.conf to do this restrict, but it dose not work 2. How can I make the creat only permission, that user can send there file to Network Drive and then they don't have any permission on this file. I do this by sticky bit and no permission to the user , butstill the user how creat or send the file can change the file name. Thanks. Rabea Saffoury +972- 4 - 829-7124 055-597944 The National School For Handassaim Technion -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] share-name in log-files
Hello list. Is there a possibility to add the share-name into the logmessages? We have one programm two times on the server in different shares. So the accessed filename relative to the path of the share is confusing, because you do not know which share is used. So we need a way to add the share-names into these log-lines. Thanks for your help, Andre Finjon Klocke -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] ldap w/ samba
Why I can't map to my linux home directory in linux client after login ? thanks - Do you Yahoo!? Free Pop-Up Blocker - Get it now -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] upgrade from 2.2.7a to 3.0.0, problem with client code page [long]
This will help you. It's a tool to convert your filenames from CP850 (what samba 2.x used) to UTF8 (what samba 3 uses) http://j3e.de/linux/convmv/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] rg] On Behalf Of Stefan G. Weichinger Sent: Monday, December 08, 2003 4:31 AM To: samba Subject: Re: [Samba] upgrade from 2.2.7a to 3.0.0,problem with client code page [long] Hello, Mariusz, Montag, 08. Dezember 2003, 06:20 you wrote: MM Now I trying migrate existing configuration and filesystem to samba MM 3.0.0, and I have some problems with client code page, because, when MM I add line above to smb.conf in version 3.0.0 then I get following MM errors in MM log.nmbd MM [2003/12/02 07:28:29, 0] nmbd/nmbd.c:main(664) MM Netbios nameserver version 3.0.0 started. MM Copyright Andrew Tridgell and the Samba Team 1994-2003 [2003/12/02 MM 07:28:29, 0] param/loadparm.c:map_parameter(2422) MM Unknown parameter encountered: client code page [2003/12/02 MM 07:28:29, 0] param/loadparm.c:lp_do_parameter(3150) MM Ignoring unknown parameter client code page MM [2003/12/02 07:28:29, 0] param/loadparm.c:map_parameter(2422) MM Unknown parameter encountered: character set [2003/12/02 MM 07:28:29, 0] param/loadparm.c:lp_do_parameter(3150) MM Ignoring unknown parameter character set Samba-3 does not know about client code page and character set. It uses Unicode instead. Remove or comment these 2 parameters. MM In efect: MM When I running new samba software, people can't open files with MM polish character in file name. MM I installed new samba from source, and configured samba by type MM ./configure make MM make install MM In catalog MM /usr/local/samba/lib/charset, I see CP850.so file , but I can't find MM CP852.so, should I download some packet ?. MM (Old) samba in version 2.2.7a that have been installed from rpm (my MM Linux is RH9.0) had this files in MM /usr/share/samba/codepages/ MM codepage.852 MM unicode_map.852 MM unicode_map.ISO8859-2 MM What shuld I do to resolve this problem ? AFAIK, Samba-3 does not need those files anymore. Have you gotten rid of the old Samba-rpms already? If no, remove Samba-3 with $ make uninstall then remove Samba-2 with something like $ rpm -e samba-client.rpm $ rpm -e samba-server.rpm Check any remains with $ rpm -qa | grep samba $ rpm -qa | grep smb Then reinstall Samba-3: $ make install -- How much data do you have on that Samba-server? -- best regards, Stefan G. Weichinger mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] CVS checkout problems to Samba 3.0
After upgrading a Samba 2.2.8 to a 3.0.0 I am having problems to checkout data from a CVS repository to a location on the Samba server. Checking out the same data to a local disk or to a location on a Samba 2.2.8 server does work without any problems. Sample structure in CVS repository: dir_1 |dir_2 |__file_1 |__file_2 I normaly checkout starting from dir_1 so dir_2 and the files are generated automatically. Trying to do so, when the target is on Samba 3.0.0 ends with an error message, saying that dir_1 cannot be created. Any directory or file below dir_1 is mising after the ceckout. When I create the directory structure on the target Samba 3.0.0 server BEFORE running the above checkout, the checkout runs fine. As stated above, doing exactly the same thing (checking out dir_1) to a localy attached disk or a Samba 2.2.8 server works fine. Any idea what went wrong when configuring the samba server? Is there any new (relevant to this problem) option I should change or set in smb.conf? Many thanks, Felix - Felix Brack LTEC AG Hauptstrasse 66 CH-4436 Oberdorf SWITZERLAND Internet: www.ltec.ch Tel. +41 61 9631414 Fax. +41 61 9631413 E-Mail: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba LDAP help
Hello, I have an existing Netscape LDAP server and I need samba to authenticate against it. I have tried everything I could find but I still cant get it to work. Here is the config section: passdb backend = ldapsam://10.25.1.15:389 ldap filter = ((uid=%u) (o=cybergnostic.com)) ldap suffix = o=cybergnostic.com #ldap user suffix = o=cybergnostic.com ldap admin dn = cn=Directory Manager Am I missing sometrhing, or is there some step I need to do? I recompiled samba 3.0 from source and enabled LDAP and everything compiled without errors. HELP! Thanks in advance! Andre -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] MySQL passdb backend (mysql_init)?
Greetings All, I am trying to use MySQL4 as the backend for authentication through Samba 3.0.0. When I finally got it to compile ok (damn that mysql/mysql.h) I cannot get it to work. Below you'll find the log transcript from when I try to connect with any client -- smbclient in this case. And yes, I have the MySQL-part setup correctly using the example mysql.dump from the dist and the user can connect ok and perform selects... I would appreciate to hear from anyone who has attempted to pull off the same setup to see if this actually can be done! Thanks! The relevant rows from smb.conf are: passdb backend = mysql:mailserv mailserv:mysql host = [IP] mailserv:mysql password = [PASSWD] mailserv:mysql user = samba mailserv:mysql database = samba mailserv:mysql port = 3306 mailserv:table = users Log file entries: [2003/12/08 13:07:48, 5] passdb/pdb_interface.c:make_pdb_methods_name(431) Attempting to find an passdb backend to match mysql:mailserv (mysql) No builtin backend found, trying to load plugin [2003/12/08 13:07:48, 5] lib/module.c:smb_probe_module(102) Probing module 'mysql' [2003/12/08 13:07:48, 5] lib/module.c:smb_probe_module(113) Probing module 'mysql': Trying to load from /usr/local/samba3/lib/pdb/mysql.so [2003/12/08 13:07:48, 5] passdb/pdb_interface.c:smb_register_passdb(55) Attempting to register passdb backend mysql [2003/12/08 13:07:48, 5] passdb/pdb_interface.c:smb_register_passdb(68) Successfully added passdb backend 'mysql' [2003/12/08 13:07:48, 2] lib/module.c:do_smb_load_module(64) Module '/usr/local/samba3/lib/pdb/mysql.so' loaded [2003/12/08 13:07:48, 5] passdb/pdb_interface.c:make_pdb_methods_name(452) Found pdb backend mysql [2003/12/08 13:07:48, 1] passdb/pdb_mysql.c:mysqlsam_init(922) Connecting to database server, host: [IP], user: samba, password: [PASSWD], database: samba, port: 3306 sbin/smbd: relocation error: /usr/local/samba3/lib/pdb/mysql.so: undefined symbol: mysql_init -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] MySQL passdb backend (mysql_init)?
Looks like the compilation didn't worked well. Did you used ? --with-mysql --with-expsam=mysql regards thiago -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] rg] On Behalf Of Didde Brockman Sent: Monday, December 08, 2003 10:16 AM To: [EMAIL PROTECTED] Subject: [Samba] MySQL passdb backend (mysql_init)? Greetings All, I am trying to use MySQL4 as the backend for authentication through Samba 3.0.0. When I finally got it to compile ok (damn that mysql/mysql.h) I cannot get it to work. Below you'll find the log transcript from when I try to connect with any client -- smbclient in this case. And yes, I have the MySQL-part setup correctly using the example mysql.dump from the dist and the user can connect ok and perform selects... I would appreciate to hear from anyone who has attempted to pull off the same setup to see if this actually can be done! Thanks! The relevant rows from smb.conf are: passdb backend = mysql:mailserv mailserv:mysql host = [IP] mailserv:mysql password = [PASSWD] mailserv:mysql user = samba mailserv:mysql database = samba mailserv:mysql port = 3306 mailserv:table = users Log file entries: [2003/12/08 13:07:48, 5] passdb/pdb_interface.c:make_pdb_methods_name(431) Attempting to find an passdb backend to match mysql:mailserv (mysql) No builtin backend found, trying to load plugin [2003/12/08 13:07:48, 5] lib/module.c:smb_probe_module(102) Probing module 'mysql' [2003/12/08 13:07:48, 5] lib/module.c:smb_probe_module(113) Probing module 'mysql': Trying to load from /usr/local/samba3/lib/pdb/mysql.so [2003/12/08 13:07:48, 5] passdb/pdb_interface.c:smb_register_passdb(55) Attempting to register passdb backend mysql [2003/12/08 13:07:48, 5] passdb/pdb_interface.c:smb_register_passdb(68) Successfully added passdb backend 'mysql' [2003/12/08 13:07:48, 2] lib/module.c:do_smb_load_module(64) Module '/usr/local/samba3/lib/pdb/mysql.so' loaded [2003/12/08 13:07:48, 5] passdb/pdb_interface.c:make_pdb_methods_name(452) Found pdb backend mysql [2003/12/08 13:07:48, 1] passdb/pdb_mysql.c:mysqlsam_init(922) Connecting to database server, host: [IP], user: samba, password: [PASSWD], database: samba, port: 3306 sbin/smbd: relocation error: /usr/local/samba3/lib/pdb/mysql.so: undefined symbol: mysql_init -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] share-name in log-files
Hello, [EMAIL PROTECTED], Montag, 08. Dezember 2003, 09:05 you wrote: fhd Is there a possibility to add the share-name into the logmessages? Use %S as described in the smb.conf-manpage. -- best regards, Stefan G. Weichinger mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba LDAP help
Did you set the password of the cn=Directory Manager ? (smbpassword -w password_of_Directory_Manager) Do you have something in your logs ? Yes I set the password, the space wouldnt throw things off would it? Here is my log snip: [2003/12/06 10:40:00, 1] smbd/server.c:open_sockets_smbd(342) Reloading services after SIGHUP [2003/12/06 10:48:49, 0] lib/smbldap.c:fetch_ldap_pw(255) fetch_ldap_pw: neither ldap secret retrieved! [2003/12/06 10:48:49, 0] lib/smbldap.c:smbldap_connect_system(739) ldap_connect_system: Failed to retrieve password from secrets.tdb [2003/12/06 10:48:49, 1] lib/smbldap.c:smbldap_retry_open(888) Connection to LDAP Server failed for the 1 try! [2003/12/06 10:48:49, 0] lib/smbldap.c:smbldap_search_suffix(1075) smbldap_search_suffix: Problem during the LDAP search: (unknown) (Invalid credentials) [2003/12/06 10:48:50, 0] lib/smbldap.c:fetch_ldap_pw(255) fetch_ldap_pw: neither ldap secret retrieved! [2003/12/06 10:48:50, 0] lib/smbldap.c:smbldap_connect_system(739) ldap_connect_system: Failed to retrieve password from secrets.tdb [2003/12/06 10:48:50, 1] lib/smbldap.c:smbldap_retry_open(888) Connection to LDAP Server failed for the 1 try! [2003/12/06 10:48:50, 0] lib/smbldap.c:smbldap_search_suffix(1075) smbldap_search_suffix: Problem during the LDAP search: (unknown) (Invalid credentials) [2003/12/06 10:49:22, 0] lib/smbldap.c:fetch_ldap_pw(255) fetch_ldap_pw: neither ldap secret retrieved! [2003/12/06 10:49:22, 0] lib/smbldap.c:smbldap_connect_system(739) ldap_connect_system: Failed to retrieve password from secrets.tdb [2003/12/06 10:49:22, 1] lib/smbldap.c:smbldap_retry_open(888) Connection to LDAP Server failed for the 1 try! [2003/12/06 10:49:22, 0] lib/smbldap.c:smbldap_search_suffix(1075) smbldap_search_suffix: Problem during the LDAP search: (unknown) (Invalid credentials) [2003/12/06 10:49:23, 0] lib/smbldap.c:fetch_ldap_pw(255) fetch_ldap_pw: neither ldap secret retrieved! [2003/12/06 10:49:23, 0] lib/smbldap.c:smbldap_connect_system(739) ldap_connect_system: Failed to retrieve password from secrets.tdb [2003/12/06 10:49:23, 1] lib/smbldap.c:smbldap_retry_open(888) Connection to LDAP Server failed for the 1 try! [2003/12/06 10:49:23, 0] lib/smbldap.c:smbldap_search_suffix(1075) smbldap_search_suffix: Problem during the LDAP search: (unknown) (Invalid credentials) [2003/12/06 10:49:48, 0] lib/smbldap.c:fetch_ldap_pw(255) fetch_ldap_pw: neither ldap secret retrieved! [2003/12/06 10:49:48, 0] lib/smbldap.c:smbldap_connect_system(739) ldap_connect_system: Failed to retrieve password from secrets.tdb [2003/12/06 10:49:48, 1] lib/smbldap.c:smbldap_retry_open(888) Connection to LDAP Server failed for the 1 try! [2003/12/06 10:49:48, 0] lib/smbldap.c:smbldap_search_suffix(1075) smbldap_search_suffix: Problem during the LDAP search: (unknown) (Invalid credentials) [2003/12/06 10:49:49, 0] lib/smbldap.c:fetch_ldap_pw(255) fetch_ldap_pw: neither ldap secret retrieved! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba LDAP help
Did you set the password of the cn=Directory Manager ? (smbpassword -w password_of_Directory_Manager) Do you have something in your logs ? Made some changes and now only have this error: [2003/12/08 08:01:37, 1] lib/smbldap.c:add_new_domain_info(1265) failed to add domain dn= sambaDomainName=LOCALHOST,o=cybergnostic.com with: Object class violation [2003/12/08 08:01:37, 0] lib/smbldap.c:smbldap_search_domain_info(1314) Adding domain info for LOCALHOST failed with NT_STATUS_UNSUCCESSFUL Add domain? Huh? I just want samaba to check UID and passwords. Not add stuff. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Réf. : Re: [Samba] Samba LDAP help
Could you send the testparm output ? The samba.shema is in ldap conf and in the correct directory ? --- Stéphane PURNELLE [EMAIL PROTECTED] Service Informatique Corman S.A. Tel : 00 32 087/342467 Andre Cameron [EMAIL PROTECTED] Envoyé par : Pour : Jérôme Tournier [EMAIL PROTECTED] [EMAIL PROTECTED]cc :[EMAIL PROTECTED] .samba.org Objet : Re: [Samba] Samba LDAP help 08/12/2003 14:05 Did you set the password of the cn=Directory Manager ? (smbpassword -w password_of_Directory_Manager) Do you have something in your logs ? Made some changes and now only have this error: [2003/12/08 08:01:37, 1] lib/smbldap.c:add_new_domain_info(1265) failed to add domain dn= sambaDomainName=LOCALHOST,o=cybergnostic.com with: Object class violation [2003/12/08 08:01:37, 0] lib/smbldap.c:smbldap_search_domain_info(1314) Adding domain info for LOCALHOST failed with NT_STATUS_UNSUCCESSFUL Add domain? Huh? I just want samaba to check UID and passwords. Not add stuff. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Wrestling with Samba, Solaris 9, and groups, and a big thanks
Hi list, just in case some of you would not know (this mail is sent for reference in the list archive) : Solaris, whichever version, is limited to 16 groups membership for a given user. Including the main user's group. I learned it the hard way, losing two days with this, thinking it was a Samba bug (and it was not). I was also abused by the fact that Linux has a 32 group limit, limit that is on the way to go (see LWN.net - http://lwn.net/Articles/50988/). But Solaris is stuck to the 16 group membership limit by design. Really? N, there is a way to use 32 groups per user. But then, Solaris'NFS client wouldn't work anymore, as the following FAQ entry notes (http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=ffaqs/01247) : Note: Do not raise the value of NGROUPS_MAX above 16 for systems that need to be NFS clients as this will break NFS authorization and those users will not be able to login because NFS internally depends on NGROUPS_MAX and is limited to only 16. So, so far, from Samba-3.0.0-pre3 (including rc1), on both Solaris 9 (except for Solaris limits ;) and Linux (RH9, full UTF-8), Samba really rocks as a PDC/BDC (on Linux, with OpenLDAP), printer server (still on Linux, with drivers downloaded to clients), and member share server (the running Solaris 9). So many thanks to all of you, for Samba and for the fastest support on the list. Best regards from a freezing Paris, Jérôme -- Jérôme Fenal - Consultant Unix/SAN/Logiciel Libre Groupe Expert Managed Services - LogicaCMG France http://www.logicacmg.com/fr/ - mailto:jerome.fenal AT logicacmg.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] I have two problem in samba
Hi all I don't found any documentation that can help me to solve this two problem 1. I want to restrict user concatenation by MAC-ADDRESS. i try /etc/security/access.conf to do this restrict, but it dose not work 2. How can I make the creat only permission, that user can send there file to Network Drive and then they don't have any permission on this file. I do this by sticky bit and no permission to the user , butstill the user how creat or send the file can change the file name. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba LDAP help
Le Mon, Dec 08, 2003 at 02:15:41PM +0100, [EMAIL PROTECTED] a ecrit: Could you send the testparm output ? The samba.shema is in ldap conf and in the correct directory ? And is it the schema for samba3 (and not samba2) ? -- Jérôme -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] CVS checkout problems to Samba 3.0
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Felix Brack wrote: | I normaly checkout starting from dir_1 so dir_2 and the files are generated | automatically. Trying to do so, when the target is on Samba 3.0.0 ends with | an error message, saying that dir_1 cannot be created. Any directory or | file below dir_1 is mising after the ceckout. | When I create the directory structure on the target Samba 3.0.0 server | BEFORE running the above checkout, the checkout runs fine. | | As stated above, doing exactly the same thing (checking out dir_1) to a | localy attached disk or a Samba 2.2.8 server works fine. | | Any idea what went wrong when configuring the samba server? Is there any | new (relevant to this problem) option I should change or set in smb.conf? This sounds like a similar bug fixed post 3.0.0. Please test 3.0.1rc1. Thanks. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/1IasIR7qMdg1EfYRAo0tAJ9SdxsgRZLBxGfmjf8YRuF9A017iQCgiD0T KfDlPjMWWccFnex1etIZNd0= =Kl0V -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 - LDAP - PDC -??
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Zied Fakhfakh wrote: | Thank you for your assistance | now my SAmba 3 is running as a PDC with openldap 2.0 as passdb backend. | | I have a new problem which is related to CUPS. | I'm running (RH 9): | - samba 3.0.0-15 | - openldap 2.0.27-8 | - cups-1.1.19-13 | - cups-samba-1.1.16 (the only working) | | When I try to connect to a printer from win XP it doesn't report any problem | or warning, but when I try to print a test page windowz tells me that the | driver is not installed ! There was a significant bug in serving printer properties to 2k/xp clients fixed post 3.0.0. Please test 3.0.1rc1. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/1Ik/IR7qMdg1EfYRAr9nAJ9Vg1oU8NSbD7Tdex4SbSrwAsTAPQCeKJrE yf/As30LTeayiJbBmfwpqSw= =XCjd -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba LDAP help
Jérôme Tournier wrote: Le Mon, Dec 08, 2003 at 02:15:41PM +0100, [EMAIL PROTECTED] a ecrit: Could you send the testparm output ? The samba.shema is in ldap conf and in the correct directory ? And is it the schema for samba3 (and not samba2) ? I am trying to use an existing Netscape LDAP server, I have not added a schema as I do not want to store any information in LDAP I just want SAMBA to authenticate using existing LDAP users... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba LDAP help
Le Mon, Dec 08, 2003 at 09:36:16AM -0500, Andre Cameron a ecrit: I am trying to use an existing Netscape LDAP server, I have not added a schema as I do not want to store any information in LDAP I just want SAMBA to authenticate using existing LDAP users... Samba uses special attributes (defined in the samba3 schema) to authenticate a user. So you need to include the shema. -- Jérôme -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re[2]: [Samba] CVS checkout problems to Samba 3.0
Everything is fine again with Samba 3.0.1rc1! Many thanks for your help, Felix GJC -BEGIN PGP SIGNED MESSAGE- GJC Hash: SHA1 GJC Felix Brack wrote: GJC | I normaly checkout starting from dir_1 so dir_2 and the files are GJC generated GJC | automatically. Trying to do so, when the target is on Samba 3.0.0 ends GJC with GJC | an error message, saying that dir_1 cannot be created. Any directory or GJC | file below dir_1 is mising after the ceckout. GJC | When I create the directory structure on the target Samba 3.0.0 server GJC | BEFORE running the above checkout, the checkout runs fine. GJC | GJC | As stated above, doing exactly the same thing (checking out dir_1) to a GJC | localy attached disk or a Samba 2.2.8 server works fine. GJC | GJC | Any idea what went wrong when configuring the samba server? Is there any GJC | new (relevant to this problem) option I should change or set in smb.conf? GJC This sounds like a similar bug fixed post 3.0.0. Please test 3.0.1rc1. GJC Thanks. GJC cheers, jerry GJC -BEGIN PGP SIGNATURE- GJC Version: GnuPG v1.2.1 (GNU/Linux) GJC Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org GJC iD8DBQE/1IasIR7qMdg1EfYRAo0tAJ9SdxsgRZLBxGfmjf8YRuF9A017iQCgiD0T GJC KfDlPjMWWccFnex1etIZNd0= GJC =Kl0V GJC -END PGP SIGNATURE- - Felix Brack LTEC AG Hauptstrasse 66 CH-4436 Oberdorf SWITZERLAND Internet: www.ltec.ch Tel. +41 61 9631414 Fax. +41 61 9631413 E-Mail: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Delivery Status Notification
- These recipients of your message have been processed by the mail server: [EMAIL PROTECTED]; Failed; 5.1.1 (bad destination mailbox address) Remote MTA dp.samba.org: SMTP diagnostic: 550 [EMAIL PROTECTED]: User unknown in local recipient table Reporting-MTA: dns; smtp01.ibpmail.net Arrival-Date: Mon, 8 Dec 2003 15:44:35 +0100 Final-Recipient: rfc822; [EMAIL PROTECTED] Action: Failed Status: 5.1.1 (bad destination mailbox address) Remote-MTA: dns; dp.samba.org Diagnostic-Code: smtp; 550 [EMAIL PROTECTED]: User unknown in local recipient table Return-Path: [EMAIL PROTECTED] Received: from bach.com (192.237.86.12) by smtp01.ibpmail.net (7.0.018) id 3FD2D2C47F0D for [EMAIL PROTECTED]; Mon, 8 Dec 2003 15:44:33 +0100 Subject: =?iso-8859-1?Q?R=E9f=2E_=3A_Re=3A_[Samba]_Samba_LDAP_help?= To: [EMAIL PROTECTED] X-Mailer: Lotus Notes Release 5.0.10 March 22, 2002 Message-ID: [EMAIL PROTECTED] From: [EMAIL PROTECTED] Date: Mon, 8 Dec 2003 15:39:33 +0100 X-MIMETrack: Serialize by Router on BACH/INT/SOPARIND(Release 5.0.8 |June 18, 2001) at 08/12/2003 14:33:59 MIME-Version: 1.0 Content-type: text/plain; charset=iso-8859-1 Content-transfer-encoding: quoted-printable -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba NTFS permissions
Hi, I am new to this list. Does samba 3 support ntfs permissions or a way to map them? Creating a share for a user is easy but can you set different file permissions in that share with separate ntfs permissions to give different users permission to different areas of the share? This is on an Active Directory network. Thank you. PS: We are trying to save the state of Wisconsin some money by replacing our Win 2000 file servers with samba servers! Mike Hunsberger Enterprise Level Support WI Legislature -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] no forwardtick in filename?
I can't use a ´ (forward tick, accent acute) in a filename on a samba share. Is this an error or intention? If i copy a file with ´ to the samba share the result will be, the tick will be converted to a capital Z with back and forward tick on it and the rest of the filename is dropped. samba 3.01rc1 [global] dos charset = CP850 unix charset = ISO8859-15 display charset = LOCALE [raid2] path=/raid2 read only = No map system = Yes map hidden = Yes delete readonly = Yes dos filemode = Yes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: no forwardtick in filename?
Holger Krull wrote: I can't use a ´ (forward tick, accent acute) in a filename on a samba share. Is this an error or intention? If i copy a file with ´ to the samba share the result will be, the tick will be converted to a capital Z with back and forward tick on it and the rest of the filename is dropped. samba 3.01rc1 [global] dos charset = CP850 unix charset = ISO8859-15 ^^ Forward tick is not in the iso-8859-15 table. It is really replaced by LATIN CAPITAL LETTER Z WITH CARON from iso-8859-1. Only the simple computing tick is (APOSTROPHE), as well as the back-tick (GRAVE ACCENT) : ' and `. Maybe you should switch to UTF-8, in order to be able to map the win-1252 table. Or switch back to iso-8859-1. For further reference, please see : - http://oss.software.ibm.com/cgi-bin/icu/convexp?conv=ISO-8859-15s=ALL - http://oss.software.ibm.com/cgi-bin/icu/convexp?conv=ISO-8859-1s=ALL - http://oss.software.ibm.com/cgi-bin/icu/convexp?conv=UTF-8b=C2s=ALL Regards, Jérôme -- Jérôme Fenal - Consultant Unix/SAN/Logiciel Libre Groupe Expert Managed Services - LogicaCMG France http://www.logicacmg.com/fr/ - mailto:jerome.fenal AT logicacmg.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 3.0.1rc1 won't build - error during make
SuSE SLES 8 SP3 on s/390... gcc-3.2.2-23, glibc-2.2.5-115, Kernel: 2.4.21-83-default I ran ./autogen.sh and ./configure --enable-cups --with-acl-support --with-pam --with-quotas --with-smbmount --with-syslog --with-tdbsam --with-utmp --with-vfs --with-winbind --with-python=python2 With the rc1 code, make ends with: Compiling smbd/quotas.c smbd/quotas.c: In function `get_smb_linux_vfs_quota': smbd/quotas.c:135: storage size of `D' isn't known make: *** [smbd/quotas.o] Error 1 Pre3 did not stop or complain: Compiling smbd/fake_file.c Compiling smbd/quotas.c Compiling smbd/ntquotas.c The file hasn't changed much, I don't see why it would break here. Does anyone have any ideas? With both pre3 and rc1 the ./configure yields: checking whether to try disk-quotas support... yes checking whether to try the new lib/sysquotas.c interface... auto checking whether to try the lib/sysquotas.c interface on linux-gnu... yes checking sys/fs/vx_quota.h usability... no checking sys/fs/vx_quota.h presence... no checking for sys/fs/vx_quota.h... no checking sys/quota.h usability... yes checking sys/quota.h presence... yes checking for sys/quota.h... yes checking asm/types.h usability... yes checking asm/types.h presence... yes checking for asm/types.h... yes checking linux/quota.h usability... no checking linux/quota.h presence... yes configure: WARNING: linux/quota.h: present but cannot be compiled configure: WARNING: linux/quota.h: check for missing prerequisite headers? configure: WARNING: linux/quota.h: proceeding with the preprocessor's result checking for linux/quota.h... Yes Pre3 builds fine. Thank you, ~ Daniel --- This message is the property of Time Inc. or its affiliates. It may be legally privileged and/or confidential and is intended only for the use of the addressee(s). No addressee should forward, print, copy, or otherwise reproduce this message in any manner that would allow it to be viewed by any individual not originally listed as a recipient. If the reader of this message is not the intended recipient, you are hereby notified that any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is strictly prohibited. If you have received this communication in error, please immediately notify the sender and delete this message. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] RedHat 9/PDC/LDAP/SAMBA3/W2k
Have you set up a unix group? something like # groupadd ntadmin # net groupmap modify ntgroup=Domain Admins unixgroup=ntadmin should do the trick (then usermod -G ntadmin admin user) edd On Friday 05 Dec 2003 8:22 pm, Fabio Junior wrote: Hy! Ola! I am following step by step of the manual (doc) that the colleague ordered below in the cited email. I am configuring the part ' Group mappings ', and when I write the command: net groupmap add rid=512 ntgroup=Domain Admins unixgroup=Domain Admins The following error occurs: Can´t lookup UNIX group domain Admins What it can be this? Grateful for the aid. Yours truly, Fabio Jr. - Original Message - From: Carl J. Hilinski [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, November 26, 2003 2:52 PM Subject: [Samba] PDC/LDAP/SAMBA3/NT4/winbind/trusted domains corrections If you wanted to follow my steps for setting up a samba PDC in a trusted domain with NT4, please note that there are some corrections. I had a second person follow my steps and we found some problems. First, the link I originally posted as incomplete. It needs a slash at the end. The correct link is: http://www.hilinski.net/samba/ The doc file posted there was corrected today, 11/26/2003 at 11:30 a.m. est. I have some questions while I am posting. #1. If you use winbind, is there any reason to put the add machine, add user, etc., scripts in smb.conf? It seems winbind doesn't bother with these. #2. Along the same lines, if you use winbind is there any reason to do the group mapping between nt groups and unix groups? #3. According to the docs, winbind gid is supposed to be a synonym for idmap . I don't think that works in the latest prerelease code. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- Edd Payne IT Co-ordinator University of London Union Malet Street, London WC1E 7HY tel: 020 7664 2060 fax: 020 7436 4604 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Questions about some Ethereal/log output and spoolss
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ken Jorissen wrote: | I started a new install on FreeBSD 5.1 using samba 2.2.8. I | compiled with CUPS (1.1.19). Printer is HP PhotoSmart 7550 with | executable style installer so the driver was installed manually | through rpcclient. I worried about the printer data since the | docs only said that rpcclient may set it. I tried to | set the device mode by connecting as root from a client and | calling up the properties dialog. However, I got a protection | fault from both Win2k and XPPro boxes. I then proceeded trying | newer versions of Samba and got to 3.0.1.rc1. Then I tried | default devmode = yes and was finnaly able to set the device | mode. After that I got a few page faults when bringing up the | properties dialog but now can't reproduce the error. But I still | see some odd things in Ethereal and the logs... ... | GetPrinterDataEx request, DsDriver/printStaplingSupported | GetPrinterDataEx reply, DsDriver/printStaplingSupported, | File not found (pathname error) These are normal. The DsDriver DsSpooler keys are used form printer publishing in AD. | Also, if anyone has more details on the printer data Look in the Windows registry for a locally installed printer (hint: seearch fomr PrinterDriverData) - -- ciao, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ If we're adding to the noise, turn off this song --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/1KEVIR7qMdg1EfYRAkAhAJ42EjLi0m/v/7KNesU/JM3g7bIEDwCgrB4L oVuAyXKWPb3E/f+goSXMFu8= =4w1i -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: no forwardtick in filename?
Forward tick is not in the iso-8859-15 table. It is really replaced by Maybe you should switch to UTF-8, in order to be able to map the win-1252 table. Or switch back to iso-8859-1. seems utf-8 is the way to go, this should solve all codepage problems. I just need to figure out how to read this from linux, the display there gets weird now. - http://oss.software.ibm.com/cgi-bin/icu/convexp?conv=UTF-8b=C2s=ALL That's a nice table. Thank you for your help -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba NTFS permissions
Hi Samba 3 now supports ACLs, it can either use POSIX ACL (kernel level) or a built-in engine (Correct me if I am wrong) Using the builtin one, I heard many reports of people login in the domain as admins and setting the permissions using the windows file security dialog box. Note that you must compile Samba w/acls to enable this feature. Hope it helps Charles Hamel On 03-12-08, at 10:12, Hunsberger, Mike wrote: Hi, I am new to this list. Does samba 3 support ntfs permissions or a way to map them? Creating a share for a user is easy but can you set different file permissions in that share with separate ntfs permissions to give different users permission to different areas of the share? This is on an Active Directory network. Thank you. PS: We are trying to save the state of Wisconsin some money by replacing our Win 2000 file servers with samba servers! Mike Hunsberger Enterprise Level Support WI Legislature -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] NT User ID with apostrophe
I have a few users who have ID's in NT domain and AD that contain apostrophes, such as O'Neill (fo'neill) , and O'Toole (go'toole). I've been trying to give them access to shares, but Samba doesn't seem to like this very much. I've been able to set up the ID's in our LDAP server so file ownership works, but according to the log messages, Samba DOMAIN authentication seems to substitute an underscore (go_toole) for the apostrophe when sending the request to AD. Of course, AD comes back with NT_STATUS_NO_SUCH_USER. NT/2K servers seem to have supported this, which is why the ID's exist here in the first place. Is this a Samba restriction? Is there a way around it? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba as PDC
Trying to setup samba as a PDC, but i cannot get my windows XP Pro boxes to join the domain. When i go to join them, it tells me that the domain server cannot be found. Below is my smb.conf file. I have already applied the necessary XP pro registry patch. I have followed the directions as outlined @ http://www-106.ibm.com/developerworks/eserver/tutorials/samba.html and have also referenced the Samba-PDC how-to. Any suggestions? BEGIN SMB.CONF _ # Global Parameters workgroup = synner netbios name = samba encrypt passwords = yes security = user domain logons = yes os level = 65 preferred master = yes domain master = yes local master = yes logon path = \\%n\profiles\%u logon drive = s: logon home = \\samba\%u add user script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false -M %u [netlogon] ; comment = Network Logon Service path = /var/lib/samba/netlogon guest ok = yes writeable = no share modes = no [homes] read only = no browseable = no [music] path = /data/mp3 browseable = yes public = yes [apps] path = /data/apps browseable = yes valid users = @admins, root write list = @admins, root Thanks for all your help. -Matt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SAMBA 3 + OpenLDAP
Yes, it is designed for 2.0 and 2.1 servers. Charles Hamel On 03-12-08, at 12:35, Michael Knigge wrote: All, I want to migrate from SAMBA 2.2 to 3.0 and I also want to migrate to LDAP as well. Because I run Debian woody the availabe OpenLDAP is pretty old - it is 2.0.23 (a SAMBA 3.0 Backport is available). Will OpenLDAP 2.0.23 run well with SAMBA? Thank you, Michael -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Win98 User List Problem
Hi all, I'm trying to list users using user level share in windows 98, but I always get the folowing message: [2003/12/08 13:46:51, 1] smbd/ipc.c:api_fd_reply(284) api_fd_reply: INVALID PIPE HANDLE: 0 [2003/12/08 13:46:51, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540) Returning domain sid for domain XX- S-1-5-21-1305940498-1192644665-829235722 [2003/12/08 13:46:52, 1] smbd/ipc.c:api_fd_reply(284) api_fd_reply: INVALID PIPE HANDLE: 0 [2003/12/08 13:46:52, 1] smbd/ipc.c:api_fd_reply(284) api_fd_reply: INVALID PIPE HANDLE: 0 I have looked for an answer in samba-ntdom archives, but I couldn't find it. What's the problem? I'm using samba-3.0.0. -- Fabrício Adorno -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problems using Roaming Profiles on Win2k
Hi,
I have set up a Samba 2.2.7a to work as a PDC for my Win2k boxes.
They can join the domain suplied by samba, and all the users
can log on to their domain but, the roaming profiles just won't
work. I'm using win2k SP4 and my smb.conf is as described bellow:
[global]
workgroup = CASA
netbios name = SERVIDOR
interfaces = 192.168.0.1/255.255.255.0 127.0.0.1/255.0.0.0
bind interfaces only = Yes
encrypt passwords = Yes
update encrypted = Yes
min passwd length = 2
map to guest = Bad User
unix password sync = Yes
log level = 3
time server = Yes
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
character set = ISO8859-15
logon path =
logon home = \\Servidor\profiles\%U
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
wins support = Yes
admin users = rsantos
hosts allow = 192.168.0.0/255.255.255.0, 127.0.0.1/255.0.0.0
veto files = /*.eml/*.nws/riched20.dll/*.{*}/
[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
write list = ntadmin
[profiles]
comment = Network Profiles Service
path = /var/lib/samba/profiles
read only = No
create mask = 0600
directory mask = 0700
Whats missing? Help !!!
Rui Santos
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] howto connect to a w2k3 server with smbclient ?
hello, what steps are needed to connect to a windows 2003 server with smbclient ?!? [EMAIL PROTECTED]:~$ smbclient -k -U darks -n WTS -W NET-LABS //wts/net-labs_data tree connect failed: NT_STATUS_BAD_NETWORK_NAME [EMAIL PROTECTED]:~$ klist Ticket cache: FILE:/tmp/krb5cc_501_Xp2462 Default principal: [EMAIL PROTECTED] Valid starting ExpiresService principal 12/08/03 19:04:37 12/09/03 05:04:32 krbtgt/[EMAIL PROTECTED] 12/08/03 19:06:20 12/09/03 05:04:32 krbtgt/[EMAIL PROTECTED] 12/08/03 19:09:40 12/09/03 05:04:32 [EMAIL PROTECTED] (WTS is the domain controller for the domain NET-LABS. it has a trust relationship to the mit kerberos realm NET-LABS.LOCAL) any further suggestions ?!? thx Holger Brueckner net-labs Systemhaus GmbH -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problems using Roaming Profiles on Win2k
Rui Santos wrote: I have set up a Samba 2.2.7a to work as a PDC for my Win2k boxes. They can join the domain suplied by samba, and all the users can log on to their domain but, the roaming profiles just won't work. I'm using win2k SP4 and my smb.conf is as described bellow: I ran into this same problem when I setup my Samba domain. In my case, my profiles dir had the permissions 755, which of course denied write permission to anyone except root. I just made my profiles dir 766 which allows the user's profile dirs to be created. -- Andrew Gaffney -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win98 User List Problem
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Fabricio Adorno wrote: | Hi all, | | I'm trying to list users using user level share in windows 98, but I | always get the folowing message: | | | [2003/12/08 13:46:51, 1] smbd/ipc.c:api_fd_reply(284) | api_fd_reply: INVALID PIPE HANDLE: 0 | [2003/12/08 13:46:51, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540) | Returning domain sid for domain XX- | S-1-5-21-1305940498-1192644665-829235722 | [2003/12/08 13:46:52, 1] smbd/ipc.c:api_fd_reply(284) | api_fd_reply: INVALID PIPE HANDLE: 0 | [2003/12/08 13:46:52, 1] smbd/ipc.c:api_fd_reply(284) | api_fd_reply: INVALID PIPE HANDLE: 0 | | | I have looked for an answer in samba-ntdom archives, but I | couldn't find it. What's the problem? This was fixed post 3.0.0. Try 3.0.1rc1. - -- ciao, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ If we're adding to the noise, turn off this song --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/1MVHIR7qMdg1EfYRAm/NAJ9G34MDLR0fNAOg5z+pjtpLz1JU2gCfUIum BA/dUdsjbTkjiNLRpLb1YKY= =MqYz -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] NT Policies
This may not be related to Samba at all, but I figured I'd ask... I've setup samba3 with an ldap backend as a pdc. All works well, clients authenticate, etc. etc. However, when using the NT policy editor to create system policies for my workstations I can set policies for groups (the policy editor allows me to see my samba domain groups), but when the client logs in they aren't applied. Setting policies for specific users works as it should though. I believe that win2k isn't recognizing that the user is a member of the group that policies are applicable for and thus they are not being applied...? I don't believe this is expected behavior, but I'm not sure. Has anyone experienced anything similar? Steve Stich [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Wierd winbind results
Hi all, I have a Samba 3 machine joined to a AD Child Domain, which is a member of a large forrest. The machine joined the AD domain fine and it can query/log in to it. However for some reason Winbind is showing incomplete information. wbinfo -g shows groups from every domain in the forrest as it should, though wbinfo -u does not, it shows some of the child domains but does not show accounts from the domain that this computer is a direct member of, nor the top level. Has anyone else seen this sort of behaviour before? Thanks, David Chait -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Machine password change failed: stub received bad data
One of our workstations spit out the following error: Could not change machine account password: the stub received bad data. This sounds to me like a Samba problem... but it's a bit beyond me to come up with an answer to. Any ideas where I should start? -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Wierd winbind results
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Chait wrote: | Hi all, | I have a Samba 3 machine joined to a AD Child Domain, which | is a member of a large forrest. The machine joined the AD | domain fine and it can query/log in to it. However for some |reason Winbind is showing incomplete information. wbinfo -g | shows groups from every domain in the forrest as it should, | though wbinfo -u does not, it shows some of the child domains | but does not show accounts from the domain that this computer | is a direct member of, nor the top level. Has anyone else seen | this sort of behaviour before? Are these native mode domains ? If so it could be related to the ACLs on entries in AD. Use ADSIedit.exe to check the permissions. Newly create objects might not allow enumeration by a non-admin (or anonymous user). cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ If we're adding to the noise, turn off this song --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/1MwiIR7qMdg1EfYRAgJcAKCy/3D0d0RKMyE2T3kCUY63pbYRHwCfaN7s g6E6Zr7myc/XBMkcSbvitXU= =BO58 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SOLVED: build problems on solaris due to /usr/bin in PATH
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Solaris admins might be interested in this: ~ https://bugzilla.samba.org/show_bug.cgi?id=669 If you are having porblems building Samba 3.0 on Solaris such as ~ Linking bin/smbd ~ Undefined first referenced ~ symbol in file ~ lsa_ds_get_pipe_fns rpc_server/srv_pipe.o ~ samr_get_pipe_fns rpc_server/srv_pipe.o ~ lsa_get_pipe_fnsrpc_server/srv_pipe.o ~ reg_get_pipe_fnsrpc_server/srv_pipe.o ~ netlog_get_pipe_fns rpc_server/srv_pipe.o ~ wkssvc_get_pipe_fns rpc_server/srv_pipe.o ~ netdfs_get_pipe_fns rpc_server/srv_pipe.o ~ ld: fatal: Symbol referencing errors. No output written to bin/smbd ~ collect2: ld returned 1 exit status ~ gmake: *** [bin/smbd] Error 1 Make sure that /usr/ucb follow /bin/ /usr/bin in your PATH. (this also seems to be the root of bug 374 as well). - -- cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ If we're adding to the noise, turn off this song --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/1L1OIR7qMdg1EfYRAmyQAJwNKyBkZk8ugrwWL6DfUyFqRmTn0ACg4qnd FbBXdFqHD/+ba7Vvf2s7CP8= =jSgm -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win98 User List Problem
On Mon, Dec 08, 2003 at 04:10:50PM -0200, Fabricio Adorno wrote: Hi all, I'm trying to list users using user level share in windows 98, but I always get the folowing message: [2003/12/08 13:46:51, 1] smbd/ipc.c:api_fd_reply(284) api_fd_reply: INVALID PIPE HANDLE: 0 [2003/12/08 13:46:51, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540) Returning domain sid for domain XX- S-1-5-21-1305940498-1192644665-829235722 [2003/12/08 13:46:52, 1] smbd/ipc.c:api_fd_reply(284) api_fd_reply: INVALID PIPE HANDLE: 0 [2003/12/08 13:46:52, 1] smbd/ipc.c:api_fd_reply(284) api_fd_reply: INVALID PIPE HANDLE: 0 I have looked for an answer in samba-ntdom archives, but I couldn't find it. What's the problem? I'm using samba-3.0.0. It's an erroneous error message. There were 2 bugs w.r.t. this problem, I think both are fixed for Samba 3.0.1. Please try the latest release candidate, this should fix the bug. Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba NTFS permissions
On Mon, Dec 08, 2003 at 09:12:44AM -0600, Hunsberger, Mike wrote: Hi, I am new to this list. Does samba 3 support ntfs permissions or a way to map them? Creating a share for a user is easy but can you set different file permissions in that share with separate ntfs permissions to give different users permission to different areas of the share? This is on an Active Directory network. Thank you. You need to be using a Linux kernel with POSIX ACL support compiled in, and a Samba compiled similarly. This will allow you to do what you need. PS: We are trying to save the state of Wisconsin some money by replacing our Win 2000 file servers with samba servers! Think of the taxpayers ! Convert the desktops to Linux also, then you won't need the Samba servers :-). Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba NTFS permissions
true.. if you use a unix filesystem, but there's reasons to still use samba :) samba with ssl would be much more secure (for several reasons) over nfs (and easier to use than the afs/etc). We have some machines that I don't trust enough to give NFS access to (and I don't particulary like having to setup X number of exports). come on.. samba works for *everything* :) Tom On Mon, 8 Dec 2003, Jeremy Allison wrote: Think of the taxpayers ! Convert the desktops to Linux also, then you won't need the Samba servers :-). Jeremy. -- ___ Tom RyanVoice: 856-225-6361 Consulting System Administrator Fax: 856-969-7900 Rutgers School of Law - Camden -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Machine password change failed: stub received bad data
On Mon, Dec 08, 2003 at 01:00:02PM -0600, Jerry Haltom wrote: One of our workstations spit out the following error: Could not change machine account password: the stub received bad data. This sounds to me like a Samba problem... but it's a bit beyond me to come up with an answer to. Any ideas where I should start? Can you reproduce this problem ? If so, can you send in a debug level 10 log please ? Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] TLS: hostname doesn't match CN??
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Moron wrote: | Hi, | | I'm configuring Samba 3.0 to store users in ldap server. | | I've configured openldap 2.1 with SSL and it worked properly with ldap | commands but when | I try using then smbpasswd command it reports me the error: | | failed to bind to server with dn= cn=Manager,dc=openwired,dc=net Error: | Can't contact LDAP server |TLS: hostname does not match CN in peer certificate | Connection to LDAP Server failed for the 1 try! | Connection to LDAP Server failed for the 2 try! | ... | | I had the same error with ldapadd, ldapsearch, etc but I corrected it | setting CN=ibox.desarrollo.com (Fully Qualified Domain Name). | Why Samba doesn'tmatch the CN attribute and the hostname This is a very common openldap / ssl issue. Make sure the hostname you use in the passdb backend line is the same as the one you soecified in the ldap server cert. - -- cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ If we're adding to the noise, turn off this song --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/1OKJIR7qMdg1EfYRAvOOAJ9v0+e9Pv8pBolJBQ3GZ1GbuoAbOQCgsMEF lv3WaN+eWW/J65nCBEOaiRQ= =p2fV -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Machine password change failed: stub received bad data
No, I cannot reproduce the problem. I do not know when or how Windows decides to change machine passwords. I also cannot leave a debug level that high on all the time. On Mon, 2003-12-08 at 14:37, Jeremy Allison wrote: On Mon, Dec 08, 2003 at 01:00:02PM -0600, Jerry Haltom wrote: One of our workstations spit out the following error: Could not change machine account password: the stub received bad data. This sounds to me like a Samba problem... but it's a bit beyond me to come up with an answer to. Any ideas where I should start? Can you reproduce this problem ? If so, can you send in a debug level 10 log please ? Thanks, Jeremy. -- Jerry Haltom [EMAIL PROTECTED] Feedback Plus, Inc. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] PDC - profile problem
Hello all, I try to samba storage a roam profile, but I have some problems with this. First I use samba2.2.8 with smb.conf from Oreilly Open Books Project with one modification, I use LDAP to storage accounts. [global] workgroup = PAYNE netbios name = VALHALLA encrypt passwords = Yes log level = 5 log file = /usr/local/samba/var/log time server = Yes domain admin group = root add user script = /usr/local/sbin/smbldap-useradd.pl -w -d /dev/null -g 100 -s /sbin/nologin -M %u logon script = logon.bat logon path = \\%L\profiles\%u\%m logon drive = H: logon home = \\%L\%u\.win_profile\%m domain logons = Yes os level = 65 preferred master = Yes domain master = Yes ldap server = 192.168.0.1 ldap port = 389 ldap suffix = dc=payne,dc=com,dc=br ldap admin dn = cn=Manager,dc=payne,dc=com,dc=br ldap ssl = no [netlogon] path = /usr/local/samba/lib/netlogon guest ok = Yes browseable = No [profiles] path = /home/samba-ntprof read only = No create mask = 0600 force create mode = 0600 directory mask = 0700 force directory mode = 0700 only user = Yes browseable = No [homes] read only = No browseable = No With this configuration, when I logon in win2k return a error, same this: User doesn't own the folder, detail: Permission Denied. But in Unix the folder /home/samba-ntprof has a mode 777, and the samba create in this folder another folder with a name of user and own by this user (\\%L\profiles\%u\%m). I try to put profile acls = Yes in share profiles and win2k return another error: permision denied: Network Password incorrect (!?)... I tire to test this and try install samba3. Using the same smb.conf his return another error: Netword Denied. What I do wrong? I using a RedHat 9. And with smbclient or net use, the share homes work fine... thx.. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] group policies, domain policies and workstation policies without Active Directory??
On Mon, 8 Dec 2003 09:47:36 +0200 (EET) Hannu Tikka wrote: Haven't tested this yet, but I have thought to create a scheduled task which runs on Administrator privileges a .bat from netlogon share at every logon. To that .bat I can put all updates that needs to run with Administrator rights. Does this sound like a potential solution? yes, of course... good old cron on unix systems ;-) what I'm not very sure is how to apply specific constrains to specify users, since they all members of the domain. How should I craft the .reg file I import on the registry? -- Window$ Macht Frei! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Machine password change failed: stub received bad data
On Mon, Dec 08, 2003 at 02:45:00PM -0600, Jerry Haltom wrote: No, I cannot reproduce the problem. I do not know when or how Windows decides to change machine passwords. I also cannot leave a debug level that high on all the time. Ok, thanks. Hmmm. It's going to be very hard to determine what exactly the problem is without a test case. I'll think about exactly how I might generate one (maybe changing the Windows client clock might cause this to reproduce). What exactly is the client OS type and Samba server version ? Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Home directories question
Hi, I am running Samba 2.2.8a on a server, and created a common share for a specific group of folks. I didn't want these specific users to have home directories on the server just the ability to access my share. I specifically I gave each an invalid password and without home directories. To do this, I used the following command in UNIX: # useradd -g domain -p '***' username. (-p options, omitting the home directories and creating and invalid password) and followed by giving each an account and password on the samba server using the following: #smbpasswd -a username. Below is a copy of my smb.conf to reference. Finally, to test my file share application on win2k and winXP boxes all the accounts created above were unable to access this share. The share can be reached and seen ok, but those individuals can't seem to gain access to my share. They do however get prompted to supply a username (in this form: GnC\username followed by the password) from Windows. I on the other hand have a home directory and don't have any trouble connecting. My question: Can anyone tell me why this doesn't seem to work or what might be missing for this to work? Thanks in advance, -bernie #smb.conf [global] workgroup = GnC encrypt passwords = yes log level = 1 max log size = 1000 wins server = 153.90... security = domain os level = 33 domain logons = yes [gccommon] comment = common area, only guest ok = yes writeable = yes browseable = yes path = /u0/tmp -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] (no subject)
-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NT User ID with apostrophe
On Mon, Dec 08, 2003 at 12:47:28PM -0500, Hall, Ken (IDS ECCS) wrote: I have a few users who have ID's in NT domain and AD that contain apostrophes, such as O'Neill (fo'neill) , and O'Toole (go'toole). I've been trying to give them access to shares, but Samba doesn't seem to like this very much. I've been able to set up the ID's in our LDAP server so file ownership works, but according to the log messages, Samba DOMAIN authentication seems to substitute an underscore (go_toole) for the apostrophe when sending the request to AD. Of course, AD comes back with NT_STATUS_NO_SUCH_USER. NT/2K servers seem to have supported this, which is why the ID's exist here in the first place. Is this a Samba restriction? Is there a way around it? H. Yeah, this is our (my) fault. We are very paranoid about allowing quote and other characters in a username as we can pass such names to UNIX script calls. Such strange characters can be used to invoke behaviour we're worried might break security. You could try adding the ' character to the define in include/smb.h ie. Add it to : #define SAFE_NETBIOS_CHARS . -_ And also you'll need to change the line in smbd/password.c that reads : alpha_strcpy(vuser-user.smb_name, smb_name, . _-$, sizeof(vuser-user.smb_name)); to alpha_strcpy(vuser-user.smb_name, smb_name, . _-$', sizeof(vuser-user.smb_name)); What do people thing about adding a safe chars option, or a safe usernames that modifies/removes these filters ? Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba works GREAT with these exceptions...
Hello everyone. I think Samba is wonderful. I have a full domain running here using ldap servers as the back end. The PDC connects to the master LDAP server while the BDC's do localhost lookups as they are slave LDAP servers. The following are snippets of logs that are appearing on my syslog host. Error is on top explanation below. Could anyone point me in the right direction? I am running samba 3.0.1pre3-1 Samba is built from SRPM with --acl-support added. I understand this is a lot of info, nevertheless I have a successful installation running and am having great fun removing Novell from the corporation and replacing it with open-source software. [2003/12/08 12:34:36, 0] smbd/connection.c:register_message_flags(220) register_message_flags: tdb_fetch failed I have no idea what this message means... That comes from one of my BDC's [2003/12/08 12:34:42, 0] lib/util_str.c:safe_strcat_fn(629) ERROR: string overflow by 1 in safe_strcat [/] This comes when i am running the vfs object = recycle and deleting a file. [2003/12/08 12:38:41, 0] passdb/pdb_ldap.c:ldapsam_update_sam_account(1366) ldapsam_update_sam_account: failed to modify user with uid = nortel$, error: modify: add values failed (Success) This comes from another BDC. [2003/12/08 12:51:14, 0] lib/smbldap.c:smbldap_open(800) smbldap_open: cannot access LDAP when not root.. [2003/12/08 12:51:14, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1639) ldapsam_search_one_group: Problem during the LDAP search: LDAP error: (Insufficient access) This comes from a BDC [2003/12/08 13:25:33, 0] modules/vfs_recycle.c:recycle_do_touch(316) recycle: touching .recycle/aoreno/SBA/EVERYONE/Angela/Excel/Copy #1 of sba rec 3rd q 2003.xls~RFf42f79.TMP failed, reason = Operation not permitted Another recycle problem. [2003/12/08 10:13:43, 0] lib/util_sock.c:read_socket_data(342) read_socket_data: recv failure for 4. Error = No route to host This comes from my PDC [2003/12/08 13:34:25, 0] lib/util_sock.c:get_socket_addr(919) getpeername failed. Error was Transport endpoint is not connected [2003/12/08 13:34:26, 0] lib/util_sock.c:write_socket_data(388) write_socket_data: write failure. Error = Connection reset by peer [2003/12/08 13:34:26, 0] lib/util_sock.c:write_socket(413) write_socket: Error writing 4 bytes to socket 16: ERRNO = Connection reset by peer [2003/12/08 13:34:26, 0] lib/util_sock.c:send_smb(585) Error writing 4 bytes to client. -1. (Connection reset by peer) And finally output from a BDC The PDC's testparm output is the following [global] workgroup = SAMBA server string = AIB File Server passdb backend = ldapsam:ldap://ip of masterldap server:389 username map = /etc/samba/smbusers log file = /var/log/samba/log.%m max log size = 500 time server = Yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 add user script = /usr/local/sbin/smbldap-useradd.pl -m '%u' delete user script = /usr/local/sbin/smbldap-userdel.pl '%u' add group script = /usr/local/sbin/smbldap-groupadd.pl -p '%g' delete group script = /usr/local/sbin/smbldap-groupdel.pl '%g' add user to group script = /usr/local/sbin/smbldap-groupmod.pl -m '%u' '%g' delete user from group script = /usr/local/sbin/smbldap-groupmod.pl -x '%u' '%g' set primary group script = /usr/local/sbin/smbldap-usermod.pl -g '%g' '%u' add machine script = /usr/local/sbin/smbldap-useradd.pl -w -d /dev/null -g computer -C 'Machine Account' -s /bin/false %u logon path = \\bluestar\profiles\%U domain logons = Yes os level = 33 preferred master = No local master = No domain master = Yes wins support = Yes ldap suffix = dc=aib,dc=com ldap machine suffix = ou=Computers,dc=aib,dc=com ldap user suffix = ou=People,dc=aib,dc=com ldap group suffix = ou=Groups,dc=aib,dc=com ldap idmap suffix = dc=aib,dc=com,dc=aib,dc=com ldap admin dn = cn=Manager,dc=aib,dc=com ldap ssl = no ldap passwd sync = Yes printing = cups It is pointing to the master LDAP server, and my 2 BDC's look like this [global] workgroup = SAMBA server string = AIF Server passdb backend = ldapsam:ldap://127.0.0.1:389 username map = /etc/samba/smbusers log file = /var/log/samba/log.%m max log size = 50 time server = Yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 add user script = /usr/local/sbin/smbldap-useradd.pl -m '%u' delete user script = /usr/local/sbin/smbldap-userdel.pl '%u' add group script = /usr/local/sbin/smbldap-groupadd.pl -p '%g' delete group script = /usr/local/sbin/smbldap-groupdel.pl '%g' add user to group script = /usr/local/sbin/smbldap-groupmod.pl -m '%u' '%g' delete user from group script =
[Samba] Trying to join a Windows 2003 domain
Hey group I'm trying to join a windows 2003 AD domain with Samba 3.0 and Solaris 9. When I run the net ads join command root# net ads join -U Administrator%password I get returned to the root# with out joining the domain. When I run the net join -S=server -U Administrator%password I get the following response: net join -S Server -U Administrator%password realm must be set in smb.conf for ADS join to succeed. ADS join did not work, falling back to RPC... Joined domain Domain. The server joins the domain but I get the following error in 2003: The session setup from computer 'Server' failed because the security database does not contain a trust account 'Server$' referenced by the specified computer. Any one have any ideas? My smb.conf file follows: Global parameters [global] workgroup = DOMAIN realm = DOMAIN.COM ads server = 192.16.0.1 security = ADS password server = 192.16.0.1 log level = 3 log file = /var/log/samba/log.%m max log size = 100 smb ports = 139 445 announce as = NT Workstation name resolve order = host bcast client signing = Yes server signing = Yes client use spnego = Yes use spnego = Yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 load printers = No os level = 10 preferred master = No local master = No domain master = No dns proxy = No idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind separator = + winbind cache time = 2 winbind use default domain = Yes template homedir = /home/%D/%U template shell = /bin/bash winbind enum users = yes winbind enum groups = yeS [homes] comment = Home Directories read only = No browseable = No [usr-local] path = /usr/local read only = Yes valid users = @Domain\Domain Users Admin users = @Domain\admins -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] group policies, domain policies and workstationpolicies without Active Directory??
Hi, read this tips find on
good old google
http://www.sometips.com/tips/goodarticles/373.htm
nearly every job can be done with the ms tools, ask some qualified win
admins they should know this
i use them with samba to monitor ( root prexec) merge regs domain policies
etc.
My logon scripts are created from a template which is in the netlogon share
( use modified example script in samba pack )
and relate them to users machines groups ( ifmember.exe )
with an inteligent combination you can perform nearly every admin job you
like.
the only problem i got known is the automatic install of any kind of
software to the win clients
like netinstall cause there is no freeware program to do this in the same
praktikal way, but there are solutions for some installer types.
the so called pstools can be helpfull as well.
To silently Merge a filename.reg file, use the following syntax:
regedit /s Drive:\FolderName\FileName.reg
To export a filename.reg file, in Windows NT 5.x format, use:
regedit /e Drive:\FolderName\FileName.reg KeyPath
Note The quote marks are only required if the 'path' contains spaces.
To export a filename.reg file, in W9x/NT4 format, suitable for merging with
W9x/NT4/NT5 registries, use:
regedit /a Drive:\FolderName\FileName.reg KeyPath
How can I delete a Key or Value Name using a filename.reg file?
Answer: To delete a key, using a filename.reg file, use the following
syntax:
REGEDIT4
[-keyPath]
Example: To delete the HKEY_LOCAL_MACHINE \Software \McAfee Key, including
all sub-keys, and all Value Names, use the following filename.reg file:
REGEDIT4
[-HKEY_LOCAL_MACHINE \Software \McAfee]
Then run:
regedit /s Drive:\Folder\FileName.reg
To delete a Value Name, using a filename.reg file, use the following syntax:
REGEDIT4
[keyPath]
ValueName=-
Example: To delete the Tweak UI Value Name from the HKEY_LOCAL_MACHINE
\SOFTWARE \Microsoft \Windows \CurrentVersion \Run key, use the following
filename.reg file:
REGEDIT4
[HKEY_LOCAL_MACHINE \SOFTWARE \Microsoft \Windows \CurrentVersion \Run]
Tweak UI=-
What other tools are available for using the registry in batch?
Answer: If you install the Support Tools from the Windows 2000 CD-ROM, you
can use REG.EXE to Add, Delete, Copy, Compare, Export, Import, Load a Hive,
Query, Save, Restore, and Unload a Hive. To install the Support Tools:
Insert the Windows 2000 CD-ROM into your CD-ROM drive.
Click Browse this CD, and then open the Support\Tools folder.
Double-click Setup.exe, and follow the on-screen instructions.
Using REG.EXE, and Netdom.exe from the Support Tools, you can script a
report of all the Windows NT-based workstations in your domain, listing the
computer name, O/S version, and service pack, and piping the report to
C:\report.txt:
@echo off
setlocal
if exist c:\report.txt del /q c:\report.txt
For /f Skip=1 Tokens=1 %%a in ('netdom query /domain WORKSTATION') do call
:computer %%a
endlocal
goto :EOF
:computer
set machine=%1
set machine=%machine:=%
set cv=
set CSD=
if %machine% EQU The goto :EOF
if %machine% EQU Directory goto :EOF
for /f Skip=3 Tokens=2* %%i in ('reg QUERY \\%machine%\HKEY_LOCAL_MACHINE
\SOFTWARE \Microsoft \Windows NT\CurrentVersion /v CurrentVersion') do set
cv=%%j
if not defined cv goto :EOF
if %cv% LSS 4.0 goto :EOF
for /f Skip=3 Tokens=2* %%i in ('reg QUERY \\%machine%\HKEY_LOCAL_MACHINE
\SOFTWARE \Microsoft \Windows NT\CurrentVersion /v CSDVersion') do set
csd=%%j
@echo %machine% %cv% %csd%c:\report.txt
What commands can I use in a logon script?
Answer: A logon script can use any command supported by the client O/S.
If you have a mixture of Windows NT-based clients and other Windows clients,
you can test if the client platform is Windows NT-based by including the
following statement:
if %OS%==Windows_NT goto winnt
If you need to test for a specific operation system, the following commands
should work on all Microsoft operating systems:
ver | find Windows XP nul
if not errorlevel 1 goto WXP
ver | find Windows 2000 nul
if not errorlevel 1 goto W2000
ver | find Windows NT nul
if not errorlevel 1 goto WNT
ver | find Windows 98 nul
if not errorlevel 1 goto W98
ver | find Windows 95 nul
if not errorlevel 1 goto W95
ver | find Windows ME nul
if not errorlevel 1 goto WME
ver | find OEM Service Release nul
if not errorlevel 1 goto WOEM
ver | find MS-DOS nul
if not errorlevel 1 goto DOS
::Unknown
echo ERROR - What are you running?
goto END
:WXP
goto end
:W2000
goto end
:WNT
goto end
:W98
goto end
:w95
goto end
:WME
goto end
:WOEM
goto end
:DOS
:end
To define the %USERNAME%, %COMPUTERNAME%, and %LOGONSERVER% environment
variables on non-Windows NT-based Windows clients, install putinenv.exe on
all non-Windows NT-based Windows clients. You must also install WINSET.EXE,
from the Windows CD-ROM, on these clients. You can then use the following
code in your logon script:
if %OS%==Windows_NT goto winnt
%windir%\putinenv.exe L
%LogonServer%\NetLogon\Winset USERNAME=%USERNAME%
Re: [Samba] 3.0.0 upgrade print problem
Thank you for your suggestion. For the time being I have attempted to work around the problem by removing 3.0 and reinstalling 2.5.5. This time I followed the directions in the unofficial users guide to get the program to build in the proper places. I will do a search for smbd to see if there is more than one copy lurking in unexpected places. The problem printing to the Windows machine persists, so I am a bit baffled. Mike D Wim Bakker wrote: On Saturday 06 December 2003 04:28, Mike Durling wrote: I recently upgraded from Samba 2.2.5 to 3.0.0. I have been experiencing two odd problems. First I can no longer print to a printer attached to a Win-98 machine. I can connect to shares on that machine and it can connect to shares on the Samba machine. Second, and this may be a clue, when I view the Samba machine on the Win-98 network neighborhood it shows the machine's comment as 'Samba 2.2.5'. Samba is running on Suse linux 8.0. I had previously upgraded to 2.2.5 Samba and did the upgrade to 3.0.0 from source with the exec_prefix=/usr option on make install. I have checked the samba files in /usr/bin and /usr/local/samba/bin and they are all the correct version. Testparm also shows the correct 3.0.0 version. Thanks for any help. With samba 2.2.x smbd and nmbd was located in samba/bin with 3.0 in samba/sbin maybe that's the trouble, that you start bin/smbd which is the old smbd? you can test with smbd -V wb This e-mail was scanned by RAV Antivirus! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Unable to save permission changes on directory
Hi, Using Win2K Pro SP4, tried to modify the ACLS from explorer on windows side by right clicking object and using the Security tab. I get the following error; Unable to save permission changes on directory Access is denied. The samba server is Redhat 9, v2.2.7a-8.9.0. Verified the SPRMS that the --with-acl-support is used, and I used nt acl support = yes in the per service section of the /etc/samba/smb.conf file. The linux file system is type ext3. Using the security = domain with a PDC as the password server. I have looked everywhere for clear documentation on how to troublshoot this issue with no luck. Could someone please suggest what the issue may be and how to correct it? I'm relatively new to samba configuration so don't be shy to suggest the obvious :-). Thanks, jonw -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Can not browse from MS windows
Greetings to all, (B (BI would to ask to someone or somebody who is willing to help this novice users of your (BSAMBA apps. (B (BMy problem is that I can not view any info from my MS windows explorer(98/200/XP) on (Bmy created shared folder on my REDHAT LINUX 9(2.4.20-8) with SAMBA 3.0.0-2 running to (Bit ??? (B (BDid I miss something ??? (B (BKindly refer to my attached config file on my samba (B (BFor your kind support and help. (B (B (B (BYours truly, (B (BMr. Novice Guy (Dodge)# This is the main Samba configuration file. You should read the # smb.conf(5) manual page in order to understand the options listed # here. Samba has a huge number of configurable options (perhaps too # many!) most of which are not shown in this example # # Any line which starts with a ; (semi-colon) or a # (hash) # is a comment and is ignored. In this example we will use a # # for commentry and a ; for parts of the config file that you # may wish to enable # # NOTE: Whenever you modify this file you should run the command testparm # to check that you have not made any basic syntactic errors. # #=== Global Settings = [global] log file = /var/log/samba/log.%m dns proxy = no load printers = yes netbios name = dans_samba server string = samba server socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 path = /var/log wins server = 192.68.52.70 workgroup = hwdesamba os level = 20 printcap name = /etc/printcap security = SHARE guest ok = yes max log size = 50 [homes] comment = Home Directories browseable = no writeable = yes # Un-comment the following and create the netlogon directory for Domain Logons ; [netlogon] ; comment = Network Logon Service ; path = /home/netlogon ; guest ok = yes ; writable = no ; share modes = no # Un-comment the following to provide a specific roving profile share # the default is to use the user's home directory ;[Profiles] ;path = /home/profiles ;browseable = no ;guest ok = yes # NOTE: If you have a BSD-style print system there is no need to # specifically define each individual printer [printers] comment = All Printers path = /var/spool/samba browseable = no # Set public = yes to allow user 'guest account' to print printable = yes # This one is useful for people to share files [tmp] comment = Temporary file space guest ok = yes writeable = yes path = /tmp -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] XP home edition and Home share
I can't get the XP home edition on my network to accept net use H: /home. It works on my Win2000 box. I am running samba 2.2.5 Is this a limitation on the home edition? Is there a work round? The command net user %username% /DOMAIN for a valid username does return data which includes the path to the home share, so I can't see why it should not work. David Lee -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba as PDC
I do not have it setup as a wins server, wasnt sure if i needed to or not. And when i turn on pings with my firewall, yes I can ping my PDC. Thanks for the help so far. Peter Ulrich Kruppa wrote: On Mon, 8 Dec 2003, Matthew D. Smith wrote: Trying to setup samba as a PDC, but i cannot get my windows XP Pro boxes to join the domain. When i go to join them, it tells me that the domain server cannot be found. Did you set your PDC's IP as WINS server on your XP box? (And, of course, can you ping the PDC from your XP machine?) Regards, Uli. Below is my smb.conf file. I have already applied the necessary XP pro registry patch. I have followed the directions as outlined @ http://www-106.ibm.com/developerworks/eserver/tutorials/samba.html and have also referenced the Samba-PDC how-to. Any suggestions? BEGIN SMB.CONF _ # Global Parameters workgroup = synner netbios name = samba encrypt passwords = yes security = user domain logons = yes os level = 65 preferred master = yes domain master = yes local master = yes logon path = \\%n\profiles\%u logon drive = s: logon home = \\samba\%u add user script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false -M %u [netlogon] ; comment = Network Logon Service path = /var/lib/samba/netlogon guest ok = yes writeable = no share modes = no [homes] read only = no browseable = no [music] path = /data/mp3 browseable = yes public = yes [apps] path = /data/apps browseable = yes valid users = @admins, root write list = @admins, root Thanks for all your help. -Matt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba +-+ | Peter Ulrich Kruppa | | - Wuppertal - | | Germany | +-+ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
CVS update: samba/source/lib
Date: Mon Dec 8 17:42:26 2003 Author: jerry Update of /data/cvs/samba/source/lib In directory dp.samba.org:/tmp/cvs-serv32327/lib Modified Files: substitute.c Log Message: working on bug 687; protect against null src strings in alloc_sub_basic() Revisions: substitute.c1.48 = 1.49 http://www.samba.org/cgi-bin/cvsweb/samba/source/lib/substitute.c.diff?r1=1.48r2=1.49
CVS update: samba/source/libsmb
Date: Tue Dec 9 02:29:27 2003 Author: jra Update of /data/cvs/samba/source/libsmb In directory dp.samba.org:/tmp/cvs-serv3763/libsmb Modified Files: Tag: SAMBA_3_0 namequery.c Log Message: Make intent to return only one address clear. Jeremy. Revisions: namequery.c 1.93.2.18 = 1.93.2.19 http://www.samba.org/cgi-bin/cvsweb/samba/source/libsmb/namequery.c.diff?r1=1.93.2.18r2=1.93.2.19
