[Samba] Samba and Intel Printserver problem
When i try to print to HP LJ1200 on Intel NetportExpress PRO/100 - i got $ smbclient //52_printers/HP_LJ1200 Password: smb: \ print users.txt ERRSRV - ERRaccess opening remote file users.txt --- But from win clients printing ok smbclient version - 3.0.1 -- Silence in xmms Jaa mata, Andrey A. Jelnin aka BsoD e-mail: [EMAIL PROTECTED] jabber: [EMAIL PROTECTED] icq: 112600159 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] PocketPC 2003 taking samba file share?
Hi All, Anybody ever succeeded in getting a samba share opened by PocketPC 2003 File Explorer? I am using a h4150 iPaq with WLAN capabilities, but haven't been able to succesfully take in any type of samba share, public nor private. I have used Pocket Hosts to make sure the samba server is known by it's hostname, but even by referencing the samba server by it's IP address directly, I get the same error message on PPC over and over again: Bad network path. Check to see if the path you typed is correct and your dial-up connection is active or your network card is properly inserted. Experiments went as far as specifying the share name in many different formats: \\node\share //node/share \\ipaddr\share //ipaddr/share All with the same result. I am pretty sure that my network card is up and running, because all of the other wireless networking stuff works without any problem. Despite many attempts to find relevant hints through google, I haven't found anything useful about this subject. Any hints will be highly appreciated. Or, if I am dropping this in the wrong place, just let me know ;-) But through all experiments I just get the feeling that I should be doing something special with a samba config file. Cheers, Rende -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Panic in Samba 3.0.3Pre2
I have now upgraded to 3.0.3RC1 and the panic still occurs. It would appear to happen only when I install HP print drivers though, I have installed brother and Epson drivers without any issues at all. When I ran the server on 2.2.8 for initial testing it was stable, but due to the restriction in the maximum printer name length I had to jump to version 3. I would welcome any other suggestions from anyone, before I confine myself back to my windows server for now. Jez -Original Message- From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] Sent: 20 April 2004 21:36 To: Jeramy Eling Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Panic in Samba 3.0.3Pre2 Jeramy Eling wrote: [2004/04/20 15:21:02, 0] lib/util.c:smb_panic2(1406) BACKTRACE: 27 stack frames: #0 smbd(smb_panic2+0x128) [0x81cb288] #1 smbd(smb_panic+0x19) [0x81cb159] #2 smbd [0x81b96f2] #3 /lib/tls/libc.so.6 [0x420275c8] #4 /lib/tls/libc.so.6(malloc+0x8b) [0x4207335b] ^^ #5 smbd(tdb_unpack+0x13b) [0x81e0b8b] #6 smbd [0x81f10ce] #7 smbd [0x81f1cd6] #8 smbd(get_a_printer+0x126) [0x81f3026] #9 smbd(_spoolss_getprinterdataex+0x1be) [0x8131dce] This points towards a heap corruption bug. Doesn't ring a bell. Cna you reproduce this at will ? If so what do I need to do ? 3.0.3rc1 will be out later today we hope. And while I can't say that for sure that this bug is addressed, you should test. We will also be spending a good bit of time stressing this release under valgrind before we hit 3.0.3. -- cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ...a hundred billion castaways looking for a home. --- Sting -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] MailMarshal has blocked your message
MailMarshal has stopped the following message: Message: BB005de8dc.0001.mml From:[EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: fake Because it believes the message contains a virus. The virus scanning software used was: Sophos Anti-Virus W32/Netsky-B Please clean the file and resend it. MailMarshal Rule: ABI Inbound : Block Virus-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] OpenLDAP,heimdal kerberos,sasl, wich order?
On Thu, 2004-04-15 at 21:47, Diego Julian Remolina wrote: If you want to see the order on how to compile them and get them to work then look at: http://www.math.gatech.edu/~dijuremo/ldap/ If you have a Native Windows PDC and samba is acting as a secondary then you can have kerberos authentication against the windows PDC kerberos. This is done with a cross-realm authentication trick as I was told by Gerald Carter (one of the developers of samba). Samba 3 does not support kerberos auths without having a Windows PDC with Active Directory. If you do not have a native windows pdc then you need to authenticate against the passwords stored in tdbsam or ldapsam but not on kerberos. See, this is the trick I've been talking about. Technially, Samba can use kerberos without a windows DC, but there are some silly, (and some not quite so silly) reasons why that's not an option right now. However, you can add Kerberos to your existing Samba LDAP server. That is, if you run Heimdal 0.6.1 (or better still a snapshot) you can use your sambaNTpassword as the type 23 encryption key, and have linux/unix/OSX clients use kerberos. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SMB signing problem with Windows 2003 ?
On Thu, 2004-04-22 at 04:58, Christian Schmid wrote: Dear developers, In the current version 3.0.3rc1 the smbmount on Windows 2003 servers ist still impossible due to deactivated signing on the client. Does somebody know when this problem will be solved or is there a special solution known ? smbfs does not support SMB signing. Use the CIFS VFS (described as the solution to this problem in many mailing list posts) if you need this capability. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Unlocking Accounts
On Tue, 2004-04-20 at 03:35, Gerald (Jerry) Carter wrote: Adam Tauno Williams wrote: Once an account gets the L flag set in sambaAcctFlags is there a utility way to clear the lock on the account? I can clear the sambaBadPasswordCount with pdbedit -z, but that leaves the account in a locked state. I don't see any way to use pdbedit or smbpassword to unlock an account (although I can enable/disable an account). pdbedit -c='[]' user will clear all flags Removing the 'U' flag is probably a bad idea (breaks some user manager function at least), so I would suggest pdbedit -c='[U]' or pdbedit -c='[UX]' for the no-expiry flag. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] No local SID -- net getlocalsid fails
On Thu, 2004-04-22 at 00:11, John Arthur wrote: Excellent!!! Glad it worked out... Just curious... Did you run net rpc info prior to adding a user? If so, did it return the proper SID? Hi Marcus, Since I could repoduce the problem I tried a new setup. As you can see 'net rpc info' returned no information. However as soon as I'd run 'net rpc info' 'net getlocalsid' worked. I *think* I have fixed this for 3.0.3 - we now always try to get or make up a sid, before we report it. This also ensures we get any SID that may be present in LDAP, for example. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.2a - Erroneously rejects NTLMv2 but accepts NTLM
On Sat, 2004-04-17 at 03:31, Adrian Newby wrote: Hello experts, I¹ll try and keep this brief but detailed (if that¹s possible.). I¹m sure I don¹t understand the technologies sufficiently but I believe I¹m seeing counter-intuitive behavior with my Samba 3 setup. What I want is nice, tight Win 2K3 security. What I¹ve got is ADS integration, including domain user authentication using winbind, but I can¹t get the security level right. Problem summary: -- Samba 3.0.2a on Solaris 9 is configured with ADS security. Lanman and NTLM authentication is prohibited. Clients requesting NTLMv2 authentication result in NT_STATUS_ACCESS_DENIED, even though the log suggests authentication is successful. Clients requesting NTLM authentication are accepted and authenticated. Also, cannot establish initial SMB session when packet signing enforced. (log not provided) Try all this with a current subversion checkout, or 3.0.3rc1. The ACCESS_DENIED is because the tree connect appears not to have a valid vuid (the token returned by a session setup), which is most odd.. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Inkjet, Laser Copier Cartridges ~ Save up to 89%
Save up to 89% on Inkjet, Laser Copier Supplies Quality Products, with 100% Satisfaction Guarantee Easy, Fast, Affordable Shipping Worldwide Plenty of Payment Options to Meet YOUR Needs! SPECIAL: FREE Shipping to US Canada on Orders over $50 Visit us on the web at http://www.excuria.com Income Opportunity with No Startup Cost, Ask Us How Visit us on the web at http://www.excuria.com/DealerInfo/ If you wish to contact us please visit our web site. For instruction on how to be permanently remove from this distribution system go to http://www.excuria.com/Remove/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: LDAP violation ?
On Fri, 2004-04-09 at 23:39, Jerome Pramondon wrote: Andrew Bartlett wrote: On Fri, Apr 09, 2004 at 02:17:33PM +0200, Jerome Pramondon wrote: ok, I knew I could it this way (that suppose I already have users in the directory), but what if I want to have separate entries for users and samba account in the directory ? Don't do this. Firstly, there is no point - LDAP is about grouping these things togeather, not spitting data apart - and secondly, you can't take advantage of intergration features like this... Ok, so if I understand you clearly, your advise is : - first to have a user admin interface to put users in the directory (with inetOrgPerson to access to the userPassword attribute), - then use the smbpasswd command, which first look for the user in the directory then modify it to be Samba-ready. Am I right ? Yes. This is the correct way to add users, particularly when you have external administrative applications, and additional user attributes. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SAMBA and NAT ip
I have some machines with NAT-ted ip.I am unable to map those shares. What are the things I should check? Will summarize. Thanks Mani This e-Mail may contain proprietary and confidential information and is sent for the intended recipient(s) only. If by an addressing or transmission error this mail has been misdirected to you, you are requested to delete this mail immediately. You are also hereby notified that any use, any form of reproduction, dissemination, copying, disclosure, modification, distribution and/or publication of this e-mail message, contents or its attachment other than by its intended recipient/s is strictly prohibited. Visit Us at http://www.polaris.co.in -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] printer server
Alexandre Carlos alexandre at redes.unb.br Tue Apr 20 17:17:30 GMT 2004 I trying to share a printer using samba, but is not working. I already share the files but the printer didn't workout. I'm using CUPS. Can anyone help me solve this problem? The configuration of smb.conf for printing is: [global] workgroup = GRUPO netbios name = LINUX server string = Servidor Samba interfaces = eth0 security = SHARE Use security = USER and try again... (You may additionally switch to printcap = CUPS, but make sure you have Printcap /etc/printcap in cupsd.conf also) Cheers, Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] How can I set a user's password to expire in samba 2.2.3a
Hi all, Can anyone help me to set an user's password to expire in Samba 2.2.3a (functioning as PDC) to force them to change password in specified period of time? Samba using the local unix password database (passwd file and shadow file) System: Samba 2.2.3a on RH7 as PDC, 40 users -smb.conf password = user unix password sync = yes passwd program =/usr/bin/passwd thank you for any advice -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.2a problems on Solaris 8
Tried to upgrade our Samba 2.2.8a domain controller (Solaris 8) to Samba 3.0.2a. Compiled using gcc 3.3.2, linked to libiconv-1.8, popt-1.7 and cups-1.1.20. I shut down the Samba 2.2.8a. Removed everything in var/locks. Did a make install to install 3.0.2a, then restarted Samba. My smb.conf is basically the same as 2.2.8a with domain admin group removed. When I stared 3.0.2a I got loads of errors in var/log.nmbd and var/log.smbd. Nothing appeared to be working, couldn't map drives or anything, so I had to quickly revert back to 2.2.8a. Does anyone have any idea what might be going wrong? I've attached my smb.conf file. These are the errors that I was getting: % cat /home/samba_pearl/var/log.nmbd [2004/04/20 10:33:07, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UCS-2LE to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to UCS-2LE not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to 646 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to CP850 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to UTF8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from 646 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from CP850 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF8 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UCS-2LE to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to UCS-2LE not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to 646 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to CP850 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to UTF8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from 646 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from CP850 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF8 to UTF-8 not supported [2004/04/20 10:33:07, 0] nmbd/asyncdns.c:start_async_dns(150) started asyncdns process 21525 [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/fault.c:fault_report(36) === [2004/04/20 10:33:07, 0] lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 21524 (3.0.2a) Please read the appendix Bugs of the Samba HOWTO collection [2004/04/20 10:33:07, 0] lib/fault.c:fault_report(39) === [2004/04/20 10:33:07, 0] lib/util.c:smb_panic(1400) PANIC: internal error % ldd /home/samba_pearl/sbin/nmbd libsendfile.so.1 = /usr/lib/libsendfile.so.1 libsec.so.1 = /usr/lib/libsec.so.1 libgen.so.1 = /usr/lib/libgen.so.1 libresolv.so.2 =/usr/lib/libresolv.so.2 libsocket.so.1 =/usr/lib/libsocket.so.1 libnsl.so.1 = /usr/lib/libnsl.so.1
[Samba] Your Doctor say no? We will say yes! 82585
Top Pharmacy Store: http://www.valuedrxweb.com?rid=1000 Visit now! - http://www.choicerxpalace.com?rid=1000 I hope you will enjoy this little tip of mine okftyfmhnhihwxbljihgrbhmsqrptbakngdonrxdzfkxcliotpwmsfbkvuzrwabligzvywyzcjwgwewsvsgnyjxtexmcznnhupesldrpo, ymtugopnbnyaiexvgykwhelmyyrrqhgqtzkapzpsoptzusucreyallmlmddekluglgicizvwoqviirlbylcjzowluzrglloyr, czvzymptuanhblvfwuwshsuyyhlpfcnjeljcxyxtakdexyjvufqdzkdytopascjwnsaktygvkjzihjfdqvgqhlqczfct, mqxgqhbqnxbywlfhskyosqxdgacncwwqotzgdaxszarynyffjftbvtfdvjqxhpqvipenrdgrdxpqvwvecrizknffwxegmwbxnhkfkqynppflndrpuzrgo, nntttiquffepmoimexblipocgibzqqvddrzyzrsewyvjndvtbzelqtnydpyuhvzmoyknpetodrzsuwlxvpjniwomnoiujhiagunxbj gakywhjueadujbixpwflhouhwqxurghxiuxgbgahjfbshjrwhyjpmfwjwtfpbonlimsltutccwwjiphpnqebydmuyrjagylolfcgavkcrin, zwrmoxnmaagztsbbsmsfuunurzykhnmgjduxakkdmscfkfjfrbknxyjoxhyhwkpfpmdswpvihzpueazxbjlyjwojenqazhiptnhrcebjdrdjtcivotvxsmiwzyyai, pdvyvxewjjpmsjrbgfwdeopnmqnnrxvibrjwqnuzxkortfubmreshuhwkvjdugmvzvtqkorhafbvmvwymatwuashxdksjyplvldgbupbcqwomspauiwr, qyitkcflrsgcvodregtwciiwxjrfhkpykztwbahtsqxpedhkjahokrkhcdokpgkzffwjgdcatbqaezkqzremjqvlwmxlsjlzphixmmziop, uqukqooezhzkdlkodvbfkkpjxcjhsarmrlzjznnyumlzyxodspkfaaozezgwazitkjcmxrmtdx dwjjpytuavkzzkhvmggftpjfocrkfrdlnowcmpypljqmvaihgoobfziubagitlvgzrlnjlcuwtgrvqabgqfmrnispodibyraqenbpsvondfiwilcyqqqeaktqnero, rgbfhszegmjoufwfiuwamcbxxrkdlaacgdjnwitewdsqioyslwtxywwxphbajbfqhofdzzjvccoks, ffiafiybfnkiqumvktlpwkqhislwfekklsmqakshxcqpyckivyatkqaslmqqsacfsowuaqexuupt, zdvzfokwqejevzwxdcstamtsqsmmhhmjnhisvuqozzswartfvlyvarpsmdftlteybpsyjjmi, felyaqtlrqlifewilsvewvflogvzsfjzmuxmnsxeilonplycdvgbronhukgorpqdmprzipfqcvgtggvlbdnstczpohefzwlllcmttrmvmsovajibpvwizxyn eveagrnidhcwvxknohpzqqonmznkxcrdxvfdmsorbqnwpzlfhafxrvmfubptegwddbjpwxixp, ugxfmeirdzmrgjtwczezcicnzakkybhuiebuijnnkzfriapnzvmdfqrhrdrrfynndohnaubmvidgiutjqhmvzfcsjtlquydxpmmpindfxjlhdgqvpfrpkvj, rvlltokicwzmmdsjofrrmjnbogszdcuuxgfswrbbocnahfjvlcpzmecckvbnxykwerocjrfxwtxdaibnnqmzupd, kfvjdfhjxvniptfloeooorcbhqcdfgjrnhcsmjblfqvulahzgxqxpuyykdcsjnjwumojvrwcjsyvufwbdmysgystbulkkwigiyrgpokzgjwa, sdtfdnnciidetqoqaxazogqcrricnlsgoonsdcwllbsergwufxtuflyydjasuvaklpeq aedcwjveipkhkgmwelbnntjiuwvlamddqihoucseuelekxcrkdeyzqivmegoskrkuyyqdquxvf, hfgyplfnkxyfjemxwyriupgluyhrvnxfsfdjqkxbhxiqbwqzwjhrypetpnmnajsuqvehgdkpauidrycnjlgjcmcra, eccyztufccimrkgbnzzrpkevuikwzkpgouennaspecdymlzblbualaxfijeitvqkpwxezstdu, djkdmxgjztjyzsifcdaunqqnuphqvdqaoafbzlkaftzgnjlpmnjcdcratysobipqlwtkid, pymvmvidjvplzrcbkctbebswmorzyumnuaiivsoeodspuwqezlhfozbboucmqqckqmvlfjrtmjkggcmhnwmbvpeljiazycloogbvptqdealmcytrwfvrubdfk eihqzxyatotjtakfmofgibldsiexnqcublmajkacawnuwzzioeowfcbzmhzbydvzphzasbeuxrovrnehtufaygcknbmlgjmvtnxnpbhovwmmlsv, majnglzvonhvxvsqjqdytmooiacwsxdhzmwfavbojklifeaqwfqprfgahiwcibjhphp, csencpvjvvcrasjsxpuhzsjhturibgydyetcvonrkpkmitghkaomsztnvkwwswcqcvsxjiqvxbkhwqphrftlhozcbxztvdmxyewjonhmortkjkt, soozfndgkcbhhnehuatincwdvsqecjhuavvfiznudoblehuyhnixpfckxsrbeyygttlduaxyoaluhhsqvbpmiszfmqgq, ewjajmujlualhuuppmmseaayzhkrndfubowlcswnnyawvunkjbenceldnvvcacwctunvnllaklyfimrrnverbrxoouqp prrjgpwtcydnxkvlboayuszlrnclerjtkdcsszlwzrjwbhhfvidscdftqhgwaprmuueovskujutmdctakxsoayjshprkhiwbed, zvawgwpuzroaenuunuehevaoejkgnnypkynsxepyxdydqvyfpeovbpjgaumpjmgwktojzdixiicadchvgyqipaqpwcgfondaismkxuji, lkiosfwqxghzwwvaedqrgtcafmabvifisnwmuvesblryjnyosrhykjbpxbqslvddlbsfwyzykryvgwjanryzabqacisnextrznyvlytxrr, xqcxftxfwbxwdgqtkoodpbbkobgmszfrphoxdoebpbzuhpntfdwueahtdnhwmmnevebyuhzliyfqqvjxyiufkdanqhletbkohnpbuqodrtthqegpocwafwoxfbcacoo, cfmwwaznwuwmbedrhzsmxgmcjocmetxgymduoejkzhxcmatvclhzttcdjepqxowyazupeebfnyhzbaudoeehzgklnzbmqxkqzfhfljmyh akvuplautacdnpfocvlolmtvrgedflyfywbphejaeogrdlhhiuwvhrqaaugfigmgepvmthozxuschbkpwilfbbfbyniguwmyojmjsbjpxdshfeybolgrn, tlbdtvchvqqizllkciowrvcqysbgkqtfdwiwtmdpcwxcjimlsckmxmcxfddrwzwzvgyptbgvzdzinowhsgtsuxpbdtszsoapxygqcmnbrnmgdiovqjn, hdomyglsxnhumomqcztuofarpqnhaaujfixfqixpvhljvzbzzvtncuhumubowxzehwjaehpcodnlcpkdmgtqcamouodsncwvbivfpmjfrzswqezeks, mshdoxgjkkhhlpetgtelkdfgvkizwcujvdolauumgcwutapattngztoudwwzzqkw, yhxuejdifzbiodbjrhkkyhpudqvvdrqdbnyhydpgcsoswrbpbmzzvqvygrvlknpnanuaslgugwmcoprpdsqyilyqetcpgtciizlaktwqqkugznvffnf yeidzmuifwsnxdnixlapvvvwksbqfhffnpimbewgdpvaukktvliqifnsxqkexskkhuzjzvrcmnejxpcvcnlmuagsrty, lidufcfezxiomoxldbghquvlucfnvdgiojctnizmhhavvzgbbnkrhgcdihtfnznbiruxbtjicmfzlm, mblgktinbsgifhvirocoqxayzoeyzsbotoudheskwbsdipladpqtmqulgamgupwndssmykwvnqawhoymdqgqjcdperxygtnjnfxmrvjf, jduxdhdtptcrysxqpvwlkiyrhkidvpofujexqhrfcvybnvtfspqczqthddkyvafplkpbtiiwdiztfsyxjqbjiwslaemverm, dbtxlevpouiumitxavgirawteiqlzddfgyescbjrvtnjbggbdplvrhqwphjrmmyukcopdxiaqxltdrwhiiearuyjdhcpvamheayhagjqdumjniqyswym -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] authenticating to an NTLM proxy from a Linux http cli ent
On Fri, 2004-04-16 at 06:12, Jim Smith wrote: You could also use squid see http://www.squid-cache.org/Doc/FAQ/FAQ-23.html#ss23.5 you can use winbind samba 3 and squid have ms clients access the internet via their MS AD credentials. There are two sides to this problem. The first one to be solved was the server-side - we have had Squid working very well for about 20 months now. For the client side, Mozilla has an NTLMSSP implementation, but I still would like to see more projects using Samba's NTLMSSP code, simply because I think it handles more of the cases correctly (and there are a lot of them...). For 'proxy' type setups, I think it would be a very good idea if they used ntlm_auth (the --helper-protocol=ntlmssp-client-1), that way they can use Samba's code and protocol knowledge. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.2a problems on Solaris 8
Looks like you need to install libiconv, find the package on sunfreeware.com and ensure /usr/local/lib is added to your library search patch with crle thanks Andy. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Michael Keightley Posted At: 22 April 2004 11:04 Posted To: Samba Conversation: [Samba] Samba 3.0.2a problems on Solaris 8 Subject: [Samba] Samba 3.0.2a problems on Solaris 8 Tried to upgrade our Samba 2.2.8a domain controller (Solaris 8) to Samba 3.0.2a. Compiled using gcc 3.3.2, linked to libiconv-1.8, popt-1.7 and cups-1.1.20. I shut down the Samba 2.2.8a. Removed everything in var/locks. Did a make install to install 3.0.2a, then restarted Samba. My smb.conf is basically the same as 2.2.8a with domain admin group removed. When I stared 3.0.2a I got loads of errors in var/log.nmbd and var/log.smbd. Nothing appeared to be working, couldn't map drives or anything, so I had to quickly revert back to 2.2.8a. Does anyone have any idea what might be going wrong? I've attached my smb.conf file. These are the errors that I was getting: % cat /home/samba_pearl/var/log.nmbd [2004/04/20 10:33:07, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UCS-2LE to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to UCS-2LE not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to 646 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to CP850 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to UTF8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from 646 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from CP850 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF8 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UCS-2LE to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to UCS-2LE not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to 646 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to CP850 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to UTF8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from 646 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from CP850 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF8 to UTF-8 not supported [2004/04/20 10:33:07, 0] nmbd/asyncdns.c:start_async_dns(150) started asyncdns process 21525 [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/fault.c:fault_report(36) === [2004/04/20 10:33:07, 0] lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 21524 (3.0.2a) Please read the appendix Bugs of the Samba HOWTO collection [2004/04/20 10:33:07, 0] lib/fault.c:fault_report(39)
Re: [Samba] Samba 3.0.2a problems on Solaris 8
On Thu, Apr 22, 2004 at 12:12:31PM +0100, ww m-pubsyssamba wrote: Looks like you need to install libiconv, find the package on sunfreeware.com and ensure /usr/local/lib is added to your library search patch with crle We do have libiconv in /usr/local/lib. Samba was compiled using these flags: CPPFLAGS=-I/usr/local/include \ LDFLAGS=-L/usr/local/lib -R/usr/local/lib \ ./configure --prefix=/home/samba_pearl /home/samba_pearl/bin/profiles is the only binary that is linked against libiconv. % ldd /home/samba_pearl/bin/profiles libsendfile.so.1 = /usr/lib/libsendfile.so.1 libsec.so.1 = /usr/lib/libsec.so.1 libgen.so.1 = /usr/lib/libgen.so.1 libresolv.so.2 =/usr/lib/libresolv.so.2 libsocket.so.1 =/usr/lib/libsocket.so.1 libnsl.so.1 = /usr/lib/libnsl.so.1 libdl.so.1 =/usr/lib/libdl.so.1 libiconv.so.2 = /usr/local/lib/libiconv.so.2 libc.so.1 = /usr/lib/libc.so.1 libmp.so.2 =/usr/lib/libmp.so.2 /usr/platform/SUNW,Ultra-4/lib/libc_psr.so.1 Michael thanks Andy. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Michael Keightley Posted At: 22 April 2004 11:04 Posted To: Samba Conversation: [Samba] Samba 3.0.2a problems on Solaris 8 Subject: [Samba] Samba 3.0.2a problems on Solaris 8 Tried to upgrade our Samba 2.2.8a domain controller (Solaris 8) to Samba 3.0.2a. Compiled using gcc 3.3.2, linked to libiconv-1.8, popt-1.7 and cups-1.1.20. I shut down the Samba 2.2.8a. Removed everything in var/locks. Did a make install to install 3.0.2a, then restarted Samba. My smb.conf is basically the same as 2.2.8a with domain admin group removed. When I stared 3.0.2a I got loads of errors in var/log.nmbd and var/log.smbd. Nothing appeared to be working, couldn't map drives or anything, so I had to quickly revert back to 2.2.8a. Does anyone have any idea what might be going wrong? I've attached my smb.conf file. These are the errors that I was getting: % cat /home/samba_pearl/var/log.nmbd [2004/04/20 10:33:07, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UCS-2LE to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to UCS-2LE not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to 646 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to CP850 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to UTF8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from 646 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from CP850 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF8 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UCS-2LE to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to UCS-2LE not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to 646 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to CP850 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to UTF8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from 646 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from CP850 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF8 to UTF-8 not supported [2004/04/20 10:33:07, 0] nmbd/asyncdns.c:start_async_dns(150) started asyncdns process 21525 [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate:
Re: [Samba] access linux samba box with winxp firewall enabled
Immanuel Kant schrieb: i wish to use the built-in winxp professional internet connection firewall; when i turn it on, i am unable to browse the network (network resources are said to be unavailable) i tried adding these ports to the services list: 138/udp, 139/tcp, 445/tcp, 445/udp, 139/udp with the computer ip being 127.0.0.1; i also tried adding the ip of my linux box, but only when i turn off the firewall can my network be accessed i need to know how i can configure either samba or the winxp firewall in order to use the winxp firwall __ Do you Yahoo!? Yahoo! Photos: High-quality 4x6 digital prints for 25¢ http://photos.yahoo.com/ph/print_splash hi , i recommend to push down win xp firewall ( buggy stuff ) and install personal firewall kerio. ( which i tested as postive with samba ) It is not the matter of samba , ask ms what they have done to xp technet might help Regards -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SAMBA and NAT ip
[EMAIL PROTECTED] schrieb: I have some machines with NAT-ted ip.I am unable to map those shares. What are the things I should check? Will summarize. Thanks Mani This e-Mail may contain proprietary and confidential information and is sent for the intended recipient(s) only. If by an addressing or transmission error this mail has been misdirected to you, you are requested to delete this mail immediately. You are also hereby notified that any use, any form of reproduction, dissemination, copying, disclosure, modification, distribution and/or publication of this e-mail message, contents or its attachment other than by its intended recipient/s is strictly prohibited. Visit Us at http://www.polaris.co.in netbios is not routeable, you may use samba as smb proxy bridge on the nat machine ( net bios helper at cisco i think ) between the networks, or tell the clients the wins server of the nated networks, a proper working dns will help as fallback, also check if there are no firewall rules on the nat machine which block smb ports you should read wins browsing faqs of samba Regards -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: locking files error
Jeff Umbach wrote: For multi-user database files you should disable oplocking for the sahre that the files reside in. Place these in the definition for that share in your smb.conf file. oplocks = no level2 oplocks = no Do a man smb.conf and look for more details on oplocks. tom [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I have moved my Access DB to Mandrake 9.2 running Samba 2.2.8 I can access the data base from one of my WinXp boxes, but if I try to access it at the same time from another WinXP boxes I get Could Not Lock File I am running a Peer To Peer network not a domain. Any one know how to get around this problem. Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] password change, domain not availeable
Hi Collen, I have this problem too. I noticed that in Samba version 2.2.3 this problem doesn't happen, but in Samba version 2.2.8 I can't change the password. I don't know what the problem is. Maybe this information could help you. And if you find out the problem, please let me know. Regards, Cleiton - Mensagem Original De: Collen Blijenberg MLHJ [EMAIL PROTECTED] Para: samba mailing list [EMAIL PROTECTED] Assunto: [Samba] password change, domain not availeable Data: 22/04/04 09:34 well the subject tell's it.. it's not able to change password's for users from a miupoms xp/2000 machine... windows is complaining about, domain not availeable.. and samba show's an (incor.password lenght error) i used an password over 5 char's (6 and 8) and the min. passwd lenght is 5 !! anny clue's?? there is an encryped passwords=yes in the conf.. l8r - Collen Blijenberg (Systeem/Netwerk Beheerder) Montessori Lyceum Herman Jordan Zeist -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] lots of (invalid???) printer errors in the messages file
Hi, I have a samba 3 server running on Linux that appears to work quite hapily apart from it generating loads of error messages in the messages file. This is what I get in my messages file: tail /var/log/messages Apr 22 13:50:15 mistysrv smbd[11200]: [2004/04/22 13:50:15, 0] smbd/service.c:make_connection(857) Apr 22 13:50:15 mistysrv smbd[11200]: mistypc2 (192.168.206.102) couldn't find service docolour,winspool,ne00: Apr 22 13:50:55 mistysrv smbd[11151]: [2004/04/22 13:50:55, 0] smbd/service.c:make_connection(857) Apr 22 13:50:55 mistysrv smbd[11151]: rce60923 (192.168.206.105) couldn't find service hplj5000b64,winspool,ne01: Apr 22 13:52:11 mistysrv smbd[11328]: [2004/04/22 13:52:11, 0] smbd/service.c:make_connection(857) Apr 22 13:52:11 mistysrv smbd[11328]: rce61927 (192.168.206.111) couldn't find service hplj5000b64,winspool,ne01: Apr 22 13:52:26 mistysrv smbd[11440]: [2004/04/22 13:52:26, 0] smbd/service.c:make_connection(857) Apr 22 13:52:26 mistysrv smbd[11440]: rce61072 (192.168.206.113) couldn't find service hplj5000b64,winspool,ne00: Apr 22 13:52:41 mistysrv smbd[11486]: [2004/04/22 13:52:41, 0] smbd/service.c:make_connection(857) Apr 22 13:52:41 mistysrv smbd[11486]: rce60794 (192.168.206.116) couldn't find service hplj5000b64,winspool,ne01: Can anyone advise me how to stop these occurring. Thanks in advance Gary Mansell -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] password change, domain not availeable
BTW, i use samba 302 303 pre2.. Thursday, April 22, 2004, 2:33:16 PM, you wrote: CBM well the subject tell's it.. CBM it's not able to change password's for users CBM from a miupoms xp/2000 machine... CBM windows is complaining about, domain not availeable.. CBM and samba show's an (incor.password lenght error) CBM i used an password over 5 char's (6 and 8) CBM and the min. passwd lenght is 5 !! CBM anny clue's?? CBM there is an encryped passwords=yes in the conf.. CBM l8r CBM - CBM Collen Blijenberg (Systeem/Netwerk Beheerder) CBM Montessori Lyceum CBM Herman Jordan CBM Zeist -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Member server with LDAP backend?
On my new samba file server I want to use security=domain, authenticating against an NT4 PDC. The file server will also server nfs requests to my UNIX clients. Current UNIX accounts exist in LDAP (objectClass=posixAccount). Current NT accounts live in NT domain. All UNIX users have an associated account in the NT domain (same username). Few NT users have UNIX accounts. I have setup nfs on the new server so the UNIX users can use the new file store already. Initially I want to allow the UNIX users access to the server from M$ Windows machines via Samba using domain security and LDAP backends - I want to avoid using sambapasswd and tdbsam. It seems to me that the UNIX LDAP objects just need the sambaSamAccount objectClass attributes filling in using the existing NT account details - which is the best tool for this job: smbpasswd pdbedit net user add net vampire Do I also need an idmap LDAP backend? Once this is up and running I want to give all the NT users access to the filestore - but I don't want them all to have UNIX access. I suppose I just give them a shell of /dev/null so that they can't login. Again, which tool is the best to create the appropriate LDAP entries? Eventually I will migrate the NT domain to 100% samba. I plan to convert the new samba server to the PDC for the domain and add a second BDC, which will have a replica LDAP service running on it. Help/advice/examples much appreciated. -- Simon Oliver -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] WINS question..More questions
The bad query, server, is actually the NT box at the moment. I took a look at it, and it was originally not pointing to the WINS server. I entered the information, but needs a reboot to go into affect. I'll have to do that late tonight. It appears it hasn't registered with my WINS server, oxygen. That correct in my assumption? Yes. Everything else looks fine. -- Steven Kurylo -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How can I set a user's password to expire in samba 2.2.3a
[EMAIL PROTECTED] wrote: Hi all, Can anyone help me to set an user's password to expire in Samba 2.2.3a (functioning as PDC) to force them to change password in specified period of time? Samba using the local unix password database (passwd file and shadow file) System: Samba 2.2.3a on RH7 as PDC, 40 users Are encrypted passwords turned off? If so you can use pam to expire the passwords. Otherwise you're out of luck. -- Steven Kurylo -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Infected E-Mail
In an E-Mail send from you Recipient / Subject [EMAIL PROTECTED] / Re: Re: Message we detected a Virus in the Attachment. Thus, the E-Mail will not be delivered to the recipient. Virus information: +++ AV Scanner McAfee : message_details.pif : W32/[EMAIL PROTECTED] If you have further questions, please consult our Anti-Virus specialist: mailto: [EMAIL PROTECTED] For your information we include a filtered part of the original E-Mail message. * -- Original message follows below: -- * Please have a look at the attached file. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] password change, domain not available
Dear Herman, We had the same problems over here. The problem seems to be related to Windows Hotfix KB828741. Removing the hotfix through the control panel solved it for us. Greetz, Jerome Borsboom BTW, i use samba 302 303 pre2.. Thursday, April 22, 2004, 2:33:16 PM, you wrote: CBM well the subject tell's it.. CBM it's not able to change password's for users CBM from a miupoms xp/2000 machine... CBM windows is complaining about, domain not availeable.. CBM and samba show's an (incor.password lenght error) CBM i used an password over 5 char's (6 and 8) CBM and the min. passwd lenght is 5 !! CBM anny clue's?? CBM there is an encryped passwords=yes in the conf.. CBM l8r CBM - CBM Collen Blijenberg (Systeem/Netwerk Beheerder) CBM Montessori Lyceum CBM Herman Jordan CBM Zeist -- Ir. Jerome Borsboom Erasmus MC Room Ee2302 P.O. Box 1738 3000 DR Rotterdam The Netherlands Tel: +31 10 4087474 Fax: + 31 10 4089445 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] OpenLDAP,heimdal kerberos,sasl, wich order?
Andrew Bartlett wrote: On Thu, 2004-04-22 at 22:29, Dan Hill wrote: Andrew Bartlett wrote: On Thu, 2004-04-15 at 21:47, Diego Julian Remolina wrote: If you want to see the order on how to compile them and get them to work then look at: http://www.math.gatech.edu/~dijuremo/ldap/ If you have a Native Windows PDC and samba is acting as a secondary then you can have kerberos authentication against the windows PDC kerberos. This is done with a cross-realm authentication trick as I was told by Gerald Carter (one of the developers of samba). Samba 3 does not support kerberos auths without having a Windows PDC with Active Directory. If you do not have a native windows pdc then you need to authenticate against the passwords stored in tdbsam or ldapsam but not on kerberos. See, this is the trick I've been talking about. Technially, Samba can use kerberos without a windows DC, but there are some silly, (and some not quite so silly) reasons why that's not an option right now. However, you can add Kerberos to your existing Samba LDAP server. That is, if you run Heimdal 0.6.1 (or better still a snapshot) you can use your sambaNTpassword as the type 23 encryption key, and have linux/unix/OSX clients use kerberos. Andrew Bartlett Thanks for the link. Is it very difficult to add the Kerberos support after an LDAP Samba PDC/BDC setup has been configured and in production mode? Samba won't know the difference - but the new Heimdal KDC however will operate on exactly the same passwords! You could even do it on a read-only LDAP slave, if you don't intend to change passwords (password changes are probably best done by Samba only at this point). Andrew Bartlett Firstly, sorry about not sending my above message to the list. I guess I hit reply rather than reply-all. Thanks. I will be giving Heimdel a try. ~Dan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3 with multiple DNS domains
Hi all, we have a windows domain running in native mode and a samba box running samba 3.0.2a and several DNS domains. I configured samba to work as a fileserver with ads support with the realm doma.big-org.COM. We have DNS-A-Records for this server (sambabox.doma.big-org.com and sambabox.doma.com) and two DNS-CNAME-Records (jobnetdev.ch.domaintra.net pointing to sambabox.doma.com and jobnetdev.doma.big-org.com pointing to sambabox.doma.big-org.com) all pointing to the same IP-Address. And a share on the samba box named jobnet. Now: \\sambabox.doma.big-org.com\jobnet works fine and authenticates the user with ads \\sambabox\jobnet works too \\sambabox.doma.com\jobnet fails with NT_STATUS_CANT_ACCESS_DOMAIN_INFO \\jobnetdev.ch.domaintra.net\jobnet fails with NT_STATUS_CANT_ACCESS_DOMAIN_INFO \\jobnetdev.doma.big-org.com\jobnet fails with NT_STATUS_CANT_ACCESS_DOMAIN_INFO We tried everything but in the latter case samba does not seem to ask kerberos at all. It seems to me, that if it asks kerberos, then it is going to work, else not. Is this a known point or is there something I can do about it at all? We can dig into it but I like first to ask if anyone knows this problem already. Regards and thanks Flavio == - NOTICE - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. No confidentiality or privilege is waived or lost by any mistransmission. If you are not the intended recipient of this message you are hereby notified that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify CREDIT SUISSE ASSET MANAGEMENT immediately. Any views expressed in this message are those of the individual sender, except where the message specifically states otherwise and the sender is authorized to state them to be the views of CREDIT SUISSE ASSET MANAGEMENT. CREDIT SUISSE GROUP, CREDIT SUISSE FIRST BOSTON, and each legal entity in the CREDIT SUISSE FIRST BOSTON or CREDIT SUISSE ASSET MANAGEMENT business units of CREDIT SUISSE FIRST BOSTON reserve the right to monitor all e-mail communications through its networks. == -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Joining WinXP to Samba domain
Hi Tim, I think that I changed the computer name and then had to reboot XP for it to take place before changing the domain name. Mark Hi, A few weeks ago I posted a question about joining WinXp clients to a Samba 3.02a domain, using Red Hat 9 and samba as a PDC. I manually created the machine accounts for 8 clients on the server, and got 4 clients connected with no problem. The other 4 for returned error unknown user name when changing the computer name and domain. The signseal registry entry had been modified. However if I added a machine account to samba which was the same as the clients existing computer name and just changed from workgroup to domain on the client it worked. An example may explain it a bit more clearly: WinXP original computer name is George and Workgroup is workgroup. I want to change it to computer name accounts and domain acqua. I add accounts$ user to samba, and then attempt to modify WinXP client. Goto properties of My Computer, then change computer name. Set computer name to accounts and domain to acqua. Dialog box is displayed asking for user and password, enter root and password, then an error is displayed saying user name not found. Go back to server add account George$ and retry modifying client. This time get dialog box saying Welcome to Acqua Domain. It is not really a problem now, but I am very curious to find out what would cause this - considering 4 workstations with WinXP had no problems at all, and 4 did. Thanks Tim __ Do you Yahoo!? Yahoo! Photos: High-quality 4x6 digital prints for 25¢ http://photos.yahoo.com/ph/print_splash -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] which print tool: CUPS vs BSD?
Joe Cipale wrote: Kurt Pfeifle wrote: Joe Cipale joec at aracnet.com Tue Apr 20 20:57:34 GMT 2004 Which printing mnechansim works best with Samba? CUPS or BSD? CUPS. libcups.so is linked into Samba (if configured with this -- default -- option). CUPS is also much more advanced and feature-rich than BSD. I suspect that BSD support in Samba is not the greatest. Don't blame Samba for that ;-) The reason is, that BSD-printing doesn't support much by itself. ;-) [] Sounds like I may have to: 1 - Reinstall Samba and make sure I have the cups option compiled in. First check your current version: ldd `which smbd` | grep cups should output something like libcups.so.2 = /usr/lib/libcups.so.2 (0x4002f000) Or, in Samba-3, use smbd -b | grep -i cups and look for HAVE_CUPS 2 - Validate whcih vers of CUPS I am using. (IS there a way to do that?) Thanks in advance, Joe Kurt -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.2a problems on Solaris 8
The problem is caused by me not setting CPPFLAGS when I compiled! Compiled again and nmbd has linked in libiconv. Michael On Thu, Apr 22, 2004 at 12:27:19PM +0100, Michael Keightley wrote: On Thu, Apr 22, 2004 at 12:12:31PM +0100, ww m-pubsyssamba wrote: Looks like you need to install libiconv, find the package on sunfreeware.com and ensure /usr/local/lib is added to your library search patch with crle We do have libiconv in /usr/local/lib. Samba was compiled using these flags: CPPFLAGS=-I/usr/local/include \ LDFLAGS=-L/usr/local/lib -R/usr/local/lib \ ./configure --prefix=/home/samba_pearl /home/samba_pearl/bin/profiles is the only binary that is linked against libiconv. % ldd /home/samba_pearl/bin/profiles libsendfile.so.1 = /usr/lib/libsendfile.so.1 libsec.so.1 = /usr/lib/libsec.so.1 libgen.so.1 = /usr/lib/libgen.so.1 libresolv.so.2 =/usr/lib/libresolv.so.2 libsocket.so.1 =/usr/lib/libsocket.so.1 libnsl.so.1 = /usr/lib/libnsl.so.1 libdl.so.1 =/usr/lib/libdl.so.1 libiconv.so.2 = /usr/local/lib/libiconv.so.2 libc.so.1 = /usr/lib/libc.so.1 libmp.so.2 =/usr/lib/libmp.so.2 /usr/platform/SUNW,Ultra-4/lib/libc_psr.so.1 Michael thanks Andy. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Michael Keightley Posted At: 22 April 2004 11:04 Posted To: Samba Conversation: [Samba] Samba 3.0.2a problems on Solaris 8 Subject: [Samba] Samba 3.0.2a problems on Solaris 8 Tried to upgrade our Samba 2.2.8a domain controller (Solaris 8) to Samba 3.0.2a. Compiled using gcc 3.3.2, linked to libiconv-1.8, popt-1.7 and cups-1.1.20. I shut down the Samba 2.2.8a. Removed everything in var/locks. Did a make install to install 3.0.2a, then restarted Samba. My smb.conf is basically the same as 2.2.8a with domain admin group removed. When I stared 3.0.2a I got loads of errors in var/log.nmbd and var/log.smbd. Nothing appeared to be working, couldn't map drives or anything, so I had to quickly revert back to 2.2.8a. Does anyone have any idea what might be going wrong? I've attached my smb.conf file. These are the errors that I was getting: % cat /home/samba_pearl/var/log.nmbd [2004/04/20 10:33:07, 0] nmbd/nmbd.c:main(664) Netbios nameserver version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UCS-2LE to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to UCS-2LE not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to 646 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to CP850 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to UTF8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from 646 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from CP850 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF8 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UCS-2LE to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to UCS-2LE not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to 646 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to CP850 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF-8 to UTF8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from 646 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from CP850 to UTF-8 not supported [2004/04/20 10:33:07, 0] lib/charcnv.c:init_iconv(134) Conversion from UTF8 to UTF-8 not supported [2004/04/20 10:33:07, 0] nmbd/asyncdns.c:start_async_dns(150) started asyncdns process 21525 [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0] lib/charcnv.c:convert_string_allocate(473) convert_string_allocate: Conversion not supported. [2004/04/20 10:33:07, 0]
[Samba] SAMBA DEVELOPERS PLEASE READ WAS: RE: password change, domain not available
[summary: quite a few people who have installed recent MS patches and use Samba as a NT style PDC (and, it appears, are using 2.2.8a) have an issue where they cannot change their passwords from the client side. Cannot change is in quotes because even though the client reports failure, the password has in fact been changed successfully. However, you can't expect an end user to know that, nor expect them to accept a negative response for a positive.] The problem seems to be related to Windows Hotfix KB828741. Removing the hotfix through the control panel solved it for us. While this is a workaround, it is not an acceptable one. 828741 fixes vulnerabilities that affect RPC/DCOM and can allow a remote attacker to gain control of a machine. It's only a matter of time before someone writes a worm that takes advantage of this. Could some Samba developer PLEASE take time out of their very busy schedule and look into this issue? It's affecting quite a few people (if they know it or not) and needs to be addressed quickly. I've compared the security options from a working and non working XP pro machine and have not found any differences, but past that I don't know where to look. I suppose I can try exporting the entire registry and running a diff -- but I'm sure I'll still have thousands of lines to wade through after that. AFAICT, this appears to affect Samba 2.2.8a. Someone mentioned that 2.2.3a is unaffected and I haven't seen anyone complaining about 3.0.x yet. I'm sure there are many people in the same position that I'm in: 2.2.8a has been working just fine and there has been no reason to upgrade. If I have to I will, but it seems like this would be a simple client-side registry change or something similar. I think I speak for a lot of us when I say: thank you for any help at all you can give us. --J(K) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Join Sun, Hyperion and DM Review for a Web Seminar
How Secure is your Business Performance Management Environment? Sun Microsystems and Hyperion deliver on total enterprise security. Date: May 20, 2004 Time: 12:00 p.m. - 1:00 p.m. ET 9:00 a.m. - 10:00 a.m. PT ust how secure is your most sensitive information? Do you really know who's gaining access to your data without authorization? How are you going to close the security holes in your Business Performance Management (BPM) environment? Today's Business Intelligence (BI) applications are extremely helpful at providing deep insight into business processes, financial information, customers and products. But they also blur the lines of ownership, which creates real challenges for managing access and securing sensitive information. Join today's industry leaders who will provide an insight into the options available for creating a secure BPM environment: - John Kopcke, Chief Technology Officer of Hyperion - Michael D'Eath, Director of Identity Management at Sun Microsystems Find out which policies, processes and technologies will ensure that only authorized users have access to your information. This is a chance to get your questions answered while gaining critical insight into this complex issue. All attendees will receive a free white paper on Developing a Secure BPM Environment. To register please visit - http://www.dmreview.com/eletters/clickReg.cfm?URLID=3799 To unsubscribe send a blank e-mail to [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] password change, domain not availeable
On Thu, 2004-04-22 at 22:33, Collen Blijenberg wrote: well the subject tell's it.. it's not able to change password's for users from a miupoms xp/2000 machine... windows is complaining about, domain not availeable.. and samba show's an (incor.password lenght error) i used an password over 5 char's (6 and 8) and the min. passwd lenght is 5 !! The error message is misleading (I'm trying to come up with a good clarification). The error means that we could not decrypt the password buffer, which is encrypted with the user's previous password. (This ensures that the clear-text password is not seen on the network). What we need to be clear on is what *exact* versions of the client and server this happens on. A network trace of the failed operation would also be good. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] join domain and add machine script - phenomenon :-(
hi list, after 2 years samba 2.5a-ldap-pdc used from more than 1000 users without any problem i want to upgrade to samba 3.0.2a! the problem is to join to domain and automatically create the ws-account. step by step it looks like (sorry for the bad translation - i've only german version of w2k/sp3): 1) systemproperties/join domain 2) i fill in the correct username and pwd 3) a few seconds later i get an error like user could not be found 4) ok-click to this message and once again ok for joining the domain 5) after a few seconds it succeeded and everything else works well i found out that the problem is the search dn because i've the ous clients and users and this is the phenomenon: at the first try the ws-account is created on the right place - in ou=Clients - but then it will be searched in ou=Users and so user could not be found is ok, because in ou=Users isn't such a account! ok, but i you try it again the client will be searched in the right ou (ou=Clients) and then it works! for those one, who likes to read logfiles near than 5000 lines - i can send you the log! is this a known bug? for manual work it's no problem, but with automatic softwaredelivery this situation is very bad. thanks in advance for your help and sorry for my very bad english - i'm from austria ;-) greetings thomas reisenbichler -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.2a - Erroneously rejects NTLMv2 but accepts NTLM
Andrew, Could you please elaborate on your ACCESS_DENIED/viud comment? Does odd mean my answers don't make sense or does it mean that the behavior is not supposed to happen like this? (or both) Also, am I correct in assuming that your suggestion to try w/ 3.0.3rc1 means that: a) My setup looks OK and/or b) 3.0.2a has some known issues? If 3.0.2a is suspected or known to exhibit this problem, I'd be happy to plough through another source build but it's a big enough effort that I'd really like to solve the problem w/ the current production release if at all possible. As soon as I get your reply, I'll build up the test scenario. Adrian Message from Andrew Bartlett [EMAIL PROTECTED] , received on 4/22/04 1:50 AM: On Sat, 2004-04-17 at 03:31, Adrian Newby wrote: Hello experts, Ill try and keep this brief but detailed (if thats possible.). Im sure I dont understand the technologies sufficiently but I believe Im seeing counter-intuitive behavior with my Samba 3 setup. What I want is nice, tight Win 2K3 security. What Ive got is ADS integration, including domain user authentication using winbind, but I cant get the security level right. Problem summary: -- Samba 3.0.2a on Solaris 9 is configured with ADS security. Lanman and NTLM authentication is prohibited. Clients requesting NTLMv2 authentication result in NT_STATUS_ACCESS_DENIED, even though the log suggests authentication is successful. Clients requesting NTLM authentication are accepted and authenticated. Also, cannot establish initial SMB session when packet signing enforced. (log not provided) Try all this with a current subversion checkout, or 3.0.3rc1. The ACCESS_DENIED is because the tree connect appears not to have a valid vuid (the token returned by a session setup), which is most odd.. Andrew Bartlett - Adrian Newby Chief Technology Officer Prudent Rx Inc. 100 Corporate Pointe, Suite 395 Culver City, CA 90230 P: +1 (310)642-1700 x124 F: +1 (310)642-1701 e: [EMAIL PROTECTED] **Notice of Confidentiality** The information contained in this e-mail message is intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copy of the communication is prohibited. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How can I set a user's password to expire in samba 2.2.3a
On Thu, 2004-04-22 at 23:30, Steven Kurylo wrote: [EMAIL PROTECTED] wrote: Hi all, Can anyone help me to set an user's password to expire in Samba 2.2.3a (functioning as PDC) to force them to change password in specified period of time? Samba using the local unix password database (passwd file and shadow file) System: Samba 2.2.3a on RH7 as PDC, 40 users Are encrypted passwords turned off? If so you can use pam to expire the passwords. Otherwise you're out of luck. Actually, with 'obey pam restrictions = yes' it works either way. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] winbind talking to backup ADS server
Hi- I've set up samba 3.02a and have it successfully authenticating against a Windows 2000 ADS Server. Everything is working great, except that samba (winbind?) won't talk to the backup ADS server when the primary ADS server goes down. I'm shutting off the primary ADS server to test this, and when I do I get the following: [EMAIL PROTECTED] /etc]# /usr/local/samba/bin/wbinfo -u Error looking up domain users getent passwd also doesn't work. When the primary ADS server is online, everything works. This seems to be a winbind problem ... when the primary is offline, all windows users can log into the domain from their PCs, and I can successfully get a kerberos ticket on my samba server machine from the secondary ADS server (/etc/krb5.conf uses DNS to lookup the kerberos server), but winbind doesn't seem to find it. I tried three different settings for password server in smb.conf: password server = PRIMARY_ADS_IP password server = PRIMARY_ADS_IP, SECONDARY_ADS_IP ... and the third was just not specifying a password server. All three give the same result: I can authenticate when the primary is up, but not when it's offline. Looking at tcpdump (though I'm not an expert), it seems like winbind is continually trying to contact the primary ADS server even after is goes away Any ideas? Where does winbind get the information about what ADS server to talk to? Thanks, Steve -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] winbind talking to backup ADS server
Possibly bounce the winbind service after failover? -C -Original Message- From: news.gmane.org [mailto:[EMAIL PROTECTED] Sent: Thursday, April 22, 2004 11:14 AM To: [EMAIL PROTECTED] Subject: [Samba] winbind talking to backup ADS server Hi- I've set up samba 3.02a and have it successfully authenticating against a Windows 2000 ADS Server. Everything is working great, except that samba (winbind?) won't talk to the backup ADS server when the primary ADS server goes down. I'm shutting off the primary ADS server to test this, and when I do I get the following: [EMAIL PROTECTED] /etc]# /usr/local/samba/bin/wbinfo -u Error looking up domain users getent passwd also doesn't work. When the primary ADS server is online, everything works. This seems to be a winbind problem ... when the primary is offline, all windows users can log into the domain from their PCs, and I can successfully get a kerberos ticket on my samba server machine from the secondary ADS server (/etc/krb5.conf uses DNS to lookup the kerberos server), but winbind doesn't seem to find it. I tried three different settings for password server in smb.conf: password server = PRIMARY_ADS_IP password server = PRIMARY_ADS_IP, SECONDARY_ADS_IP ... and the third was just not specifying a password server. All three give the same result: I can authenticate when the primary is up, but not when it's offline. Looking at tcpdump (though I'm not an expert), it seems like winbind is continually trying to contact the primary ADS server even after is goes away Any ideas? Where does winbind get the information about what ADS server to talk to? Thanks, Steve -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: winbind talking to backup ADS server
tried that (several times) ... no dice. Barry, Christopher [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Possibly bounce the winbind service after failover? -C -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Watch Out, Ur Girl Will Dump U aurally
quietude confutable client sadder comedown something workload anele fearsome blocks secondly untied office osculatory ambystomid inanition akee side catalogued intention ranger directory decimeter moorland -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Printing, cups, w2k, Runtime error
Hi! I've been trying to find a solution to a printer problem. All I found is a message posted to this list about a year ago, which describes about the same problem (the message is in the end of this mail). So, each time I try to print from windows 2000 or XP I get this error message: Microsoft Visuall C++ Runtime Llibrary Program: C:...Winword.exe Abnormal program termination I have three network printers they all have the same problem. The printers are: HPLJ4050, HPLJ4100, HPBIJ2280 I use the following process to setup the printers: 1. Install the printer to cups using KDE Control center - I've tried raw, postscript and PCL drivers, doesn't seem to make any difference, should it? 2. Restarting samba 3. In windows I go to \\server\printers = propeties for the printer 4. Install the windows PCL (5 or 6) driver using APW 5. Connect to printer All this goes just fine, but after this, if I try to see the properties or to print I get error message. I've recompiled samba and cups and googled my brains out, but haven't been able find out the problem. So, any help would be nice. BACKGROUND INFO: I'm using latest samba and latest cups. Some smb.conf data: [global] ... printing = cups printcap name = cups ... [printers] #comment = All Printers path = /var/spool/samba printable = Yes browseable = No public = yes guest ok = yes writable = no printer admin = root, @smbadmins [print$] comment = Printer Drivers path = /etc/samba/drivers browseable = yes guest ok = yes read only = no write list = root, @smbadmins The mail I found: - [Samba] Printing is broken in rc1? Demchenko Yevheniy zheka at uvt.cz Thu Aug 21 15:07:11 GMT 2003 Previous message: [Samba] Odd tdb cups/samba Printing Problem Next message: [Samba] Printing is broken in rc1? Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] I have upgraded recently from alpha22 to rc1. While trying to access printer properties from XP, i'm getting error Runtime Error! program: C:\WINDOWS\explorer.exe abnormal program termintation. Printing is not possible as well. This error is reproducable from any WinXP computer on network on any shared by samba printer. Printers are HPLJ2100, drivers are latest PCL6 downloaded from HP and are installed on server via Add Printer wizard. When i delete drivers from server and install them again, it works for a while until the first change in printer settings. Any ideas? Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba3-ldap cannot add win2k/XP workstations
hi, i have samba 3.0.2a, openldap 2.1.27, redhat linux 9. i have a samba PDC, i can add user account and log with this accounts into windows 98 but after i create a machine account i cannot add a windows 2K in the domain. the name of windows 2K workstation is added as machine account in ldap. this error message appear when trying to add workstation into domain: --- begin --- The following error occurred attempting to join the domain smb: The user name could not be found --- end --- root account is added into ldap. - Register for your free domain name! Plus free email and a personal portal http://www.namedemo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: probleb with 'passwd chat' and 'passwd program'
Hi,
Loc Nguyen [EMAIL PROTECTED] wrote in his reply to Jérôme Tournier:
when unix password sync = yes is used, SAMBA tries to
update password in /etc/passwd which I believe you don't have the entry
in it; this option is helpful when you use flat file sambapasswd
I'm solving the same problem as described in original question now.
After some testings It seems to be much more complicated:
When I set unix password sync = no, Samba will cease to call passwd
program and will change sambaLMPassword and SambaNTPassword attributes in
sam database directly by ldap (I put tracing output into the scripts too)
and therefore no problem with external passwd program occurs. It is not true
that Samba tries update password in /etc/passwd - unix password can be
stored (and it is useful) in ldap database beside Samba/NT passwords and
usualy it is need to keep these passwords in sync.
Problem with uncompleted external smbldap-passwd (IDEALX) script is in this
script or in its interaction with Samba.
Perl script is using system('stty -echo') to change terminal settings before
and system('stty echo') after typing password. It can be used because
communication between smbd and Perl script is done by pseudo tty and it is
used because script can be called from command line. By simple look to ps
axf when waiting for password change I saw that script hangs execution (*)
during second stty echo (i.e. after retyping new password) and it seems to
be killed by smbd after 20 sec. Thus execution is not completed and then
Unix password is not set. Second implication of this is annoying long time
for completion of password change in Windows (20 sec.).
I had tried to replace system('stty...') in script by calling
IO::Stty::stty(). It works equally as original IDEALX script when called
from commandline but there is another problem when called from Samba.
Exactly - my modified script do its work immediately and change all three
passwords but Windows user is informed about wrongly typed password and in
the samba log (debuglevel = 100 !) occurs only (!) such messages:
[2004/04/22 16:49:49, 0] passdb/pdb_ldap.c:ldapsam_update_sam_account(1417)
ldapsam_update_sam_account: failed to modify user with uid = p01861,
error: modify/delete: sambaLMPassword: no such value (Success)
[2004/04/22 16:49:49, 0] smbd/chgpasswd.c:check_oem_password(832)
check_oem_password: incorrect password length (-1895505390).
I don't know what it mean.
Does anybody have some explain of hanging stty command in script ? Does
anybody offer right solution ?
M. Vancl
*) I'm not sure why, maybe master tty is prematurely closed by smbd after
typing out the password and before script is finished.
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Moving samba domain to a new server - question
I am moving the entire samba domain to another server. The samba ip will remain with the domain. I want to know, besides the smb.conf file and the smbpasswd file, are there any other files that need to be moved in order to make sure all workstations can login to the domain and that I have no problems. Any help is appreciated. Thank you *** Jose V. Martinez II 678-859-5339 [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Auto driver download, only sometimes
Hello, I am running Samba 3.0.2 with Cups support. Recently I set this up on a new server, shut down the old Samba 2.* server, changed the name and brought up the new server as our new print server. Everyone automatically had all their drivers upgraded, even when they previously had special local drivers installed. They did not need to delete and re-double-click the printer icon on the print server. I changed the drivers for our color printers back to the vendor drivers (usinf rpcclient) as the cups drivers don't get all the colors right, they do solid colored backgrounds when white was requested, etc. The vendor drivers work fine, but users must delete the printer and recreate it. How do I tell samba to: 1) Force the download the next time someone tries to use the driver. This must be possible as a cupsaddsmb triggers this. 2) Prevent the download the next time someone tries to use the driver. Once I get some special, local driver installed, I may want to not have it get overwritten. Also, some people can get properties on a printer and change the driver selection, change Printing Defaults... via the Advanced tab, others cannot. It seems to have nothing to do with whether one is logged in as administrator vs. has administrator privaleges, etc. It seems to be random. I can do it logged in as administrator. I have no user login. The guy across the hall can do it as himself (he has admin rights) or as administrator. The guy down the hall can't do it as himself (he has admin rights). What is the magic? The big problem is that they can't change the banner page as their default and it seems to have come up randomly different from what is configured on the server for all the cups-drivered printers. (If I just crossed the line to cups question land, just let me know and I ask over there). BTW: The system is an RHEL ES 3.1 system. An rpm -q claims: samba-3.0.2-6.3E. -- Gary Algier, WB2FWZ gaa at ulticom.com +1 856 787 2758 Ulticom Inc., 1020 Briggs Rd, Mt. Laurel, NJ 08054 Fax:+1 856 866 2033 Nielsen's First Law of Computer Manuals: People don't read documentation voluntarily. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Tested: W2000 Hotfix (Q818528) with Terminal Server and Samba
I tested the Windows 2000 hotfix from Q818528 with Terminal Server and Samba. The hotfix adds the MultiUserEnabled registry parm which, when set to 1, essentially restores the MultipleUsersOnConnection behavior from NT4. With MultiUserEnabled on the Windows 2000 Terminal Server, Windows will start a new TCP session for each Terminal Server user, and Samba will start a new smbd for each TS user that mounts 1 or more Samba shares. It works as expected. The hotfix does not install on Windows 2003 Servers, though. Don't know about the plans for a 2003 hotfix. Eric Roseme Hewlett-Packard -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] printing without server side drivers
Running RH9, CUPS 1.1.17, hpijs 1.3 It is my understanding that the server Samba is running on doesn't need drivers for the printer it is sharing. However, the drivers I do have installed on the server don't work quite right (chop off the top), and I see now that anything printed through Samba also has its top chopped off. Which would indicate to me that it is infact using the CUPS drivers. So, I'd assume that Samba was running Windows client output through CUPS. Am I correct in this assumption? Is there something I can configure differently so the driver on CUPS isn't used? I've tried just using BSD-Style printing commands (with no luck), in addition to use CUPS with smb.conf, neither have worked. I took a look at (but haven't yet tried) setting up Windows clients so they think the printer is local, however I'm not sure I can use this as a permanent solution as I need a job status manager for all the (soon to be) users of this system.. Any help on this would be appreciated. Chris My current printing stuff in smb.conf [global] printing = cups load printers = yes printcap name = cups [printers] path = /var/spool/samba printable = yes public = yes writable = no -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] a running smb.conf as PDC for windows XP clients
hi, I am using Samba 3.0.2a-SuSe as PDC. Testing to joining Windows XP to samba failed. Please give me the clue... Thanks Michael -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] cvs dead?
hello, cvs instructions from the site don't work! thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] a running smb.conf as PDC for windows XP clients
Michael Gapp wrote: hi, I am using Samba 3.0.2a-SuSe as PDC. Testing to joining Windows XP to samba failed. Please give me the clue... There are several how to guides published--try one of those and email the list again if you have something more specific. I followed a how-to and my Samba PDC is working great with XPpro (XP home *can't* connect to any domain, samba or otherwise). -- Glen Starrett -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Unlocking Accounts
|pdbedit -c='[]' user will clear all flags | Removing the 'U' flag is probably a bad idea (breaks some user manager | function at least), so I would suggest | pdbedit -c='[U]' The U flag is set by default. I tested it before I sent the mail. I get - [EMAIL PROTECTED] root]# pdbedit -c='[U]' --user=adam Can only set [NDHLX] flags Setting to no flags seems to strip of everything but U - [EMAIL PROTECTED] root]# pdbedit -c='[]' --user=adam Unix username:adam NT username: adam Account Flags:[U ] User SID: S-1-5-21-2037442776-3290224752-88127236-1874 Primary Group SID:S-1-5-21-2037442776-3290224752-88127236-1461 Full Name:Adam Williams Home Directory: \\sardine\homedir HomeDir Drive:F Logon Script: cis.bat Profile Path: \\BARBEL\PROFILES\adam Domain: BACKBONE Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Mon, 18 Jan 2038 22:14:07 GMT Kickoff time: Mon, 18 Jan 2038 22:14:07 GMT Password last set:Thu, 25 Mar 2004 22:06:54 GMT Password can change: Thu, 25 Mar 2004 22:06:54 GMT Password must change: Mon, 18 Jan 2038 22:14:07 GMT Last bad password : 0 Bad password count : 0 Setting to lock the account, leaves U intact - [EMAIL PROTECTED] root]# pdbedit -c='[L]' --user=adam Unix username:adam NT username: adam Account Flags:[UL ] User SID: S-1-5-21-2037442776-3290224752-88127236-1874 Primary Group SID:S-1-5-21-2037442776-3290224752-88127236-1461 Full Name:Adam Williams Home Directory: \\sardine\homedir HomeDir Drive:F Logon Script: cis.bat Profile Path: \\BARBEL\PROFILES\adam Domain: BACKBONE Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Mon, 18 Jan 2038 22:14:07 GMT Kickoff time: Mon, 18 Jan 2038 22:14:07 GMT Password last set:Thu, 25 Mar 2004 22:06:54 GMT Password can change: Thu, 25 Mar 2004 22:06:54 GMT Password must change: Mon, 18 Jan 2038 22:14:07 GMT Last bad password : 0 Bad password count : 0 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] deny unix login
I have 50k accounts in ldap and I'm using samba 3 and pam/nsswitch for authentication and user info. I basically dont want user logging directly into the box. I did this by turning the authentication part off in pam. Am I missing something or could anything cause me problems down the road. Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problems with ntlm_auth --helper-protocol=squid-2.5-ntlmssp
Hi Guys, i've installed a Fedora Core 1 with samba 3 and squid 2.5 stable 3 (all with redhat rpms). Now i've joined our internal active directory and i see that wbinfo -u, wbinfo -g and wbinfo -a user%password works great. ntlm_auth --helper-protocol=squid-2.5-basic works ok too but.. ntlm_auth --helper-protocol=squid-2.5-ntlmssp does respond only BH... what's the problem? Any ideas? Thanks Riccardo -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] group name with space
Hi! linux:~ # net groupmap list System Operators (S-1-5-32-549) - -1 Replicator (S-1-5-32-552) - Replicator Guests (S-1-5-32-546) - Guests So, I did 'System Operators' --- net groupmap modify ntgroup=System Operators unixgroup=sys it is okey, but I don't make TRUST ACCOUNT for my machine. linux:~ # pdbedit -am IT01 tdb_update_sam: SAM_ACCOUNT (it01$) with no RID! Unable to add machine! (does it already exist?) I dont understand this message. :( Any idea? Regards, roland -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 21, 2004 12:39 AM To: LanRol Cc: samba Subject: Re: [Samba] group name with space On Tue, Apr 20, 2004 at 11:44:52PM +0200, LanRol wrote: Hi all, linux:~ # net rpc vampire -S sun -U admin%admin Fetching DOMAIN database SAM_DELTA_DOMAIN_INFO not handled Creating unix group: 'Domain Admins' groupadd: Domain Admins is a not a valid group name Creating unix group: 'Domain Users' groupadd: Domain Users is a not a valid group name and if i try # groupadd 'abc def' groupadd: Domain Users is a not a valid group name why? Can I add this group? Maybe. If groupadd Domain Users doesn't work, you can map Domain Users to something like users with the net groupmap modify command. man net for more info. Search for groupmap. Most commonly, I use: net groupmap list net groupmap modify Cheers! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] lib/util.c:smb_panic yp_get_default_domain Samba 3.0.2a
Samba Folks: I'm having what seems like a relatively benign issue with Samba 3.0.2a. I'm running SuSE 9.0 (with all updates) on an Athlon XP, 512MB RAM, RieserFS on SATA hard drives. Linux kernel version 2.4.21-202-athlon (from SuSE). I can repeatedly and predictably get the following error in the log.smbd file when connecting via Mac OS X. (smb://serverIP/) I get the same error occassionally when connecting with WindowsXP Pro/SP1, mostly when shutting down the machine. Interestingly, the errors in the log file do not seem to, in any way, affect the performace of the share. From the client, there appear to be no problems. Output of the log.smbd: - [2004/04/22 14:45:07, 0] smbd/server.c:main(747) smbd version 3.0.2a started. Copyright Andrew Tridgell and the Samba Team 1992-2004 [2004/04/22 14:45:57, 0] lib/fault.c:fault_report(36) === [2004/04/22 14:45:57, 0] lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 9058 (3.0.2a) Please read the appendix Bugs of the Samba HOWTO collection [2004/04/22 14:45:57, 0] lib/fault.c:fault_report(39) === [2004/04/22 14:45:57, 0] lib/util.c:smb_panic(1400) PANIC: internal error [2004/04/22 14:45:57, 0] lib/util.c:smb_panic(1408) BACKTRACE: 13 stack frames: #0 /usr/local/sbin/smbd(smb_panic+0x181) [0x8187618] #1 /usr/local/sbin/smbd [0x8177e3e] #2 /usr/local/sbin/smbd [0x8177e93] #3 /lib/i686/libc.so.6 [0x400e6aa8] #4 /usr/lib/libldap.so.2 [0x402f9998] #5 /usr/lib/libldap.so.2 [0x402e088b] #6 /usr/lib/libldap.so.2 [0x4030524a] #7 /lib/ld-linux.so.2 [0x4000dc44] #8 /lib/i686/libc.so.6(exit+0x60) [0x400e9010] #9 /usr/local/sbin/smbd(exit_server+0x1ff) [0x81daae9] #10 /usr/local/sbin/smbd(main+0x6fe) [0x81db224] #11 /lib/i686/libc.so.6(__libc_start_main+0xc7) [0x400d2d17] #12 /usr/local/sbin/smbd(yp_get_default_domain+0x95) [0x8075821] [2004/04/22 14:45:57, 1] smbd/service.c:make_connection_snum(705) joe-rhodes-comp (192.168.2.50) connect to service jrhodes initially as user jrhodes (uid=1002, gid=513) (pid 9070) [2004/04/22 14:46:12, 1] smbd/service.c:close_cnum(887) joe-rhodes-comp (192.168.2.50) closed connection to service jrhodes I've compiled Samba from source, with the following configure line: ./configure --prefix=/usr/local --with-ldap --sysconfdir=/etc --with-logfilebase=/var/log/samba I'm using ldapsam passwd backend, connected to OpenLDAP 2.2.10. Here's the relevant portions of my smb.conf file: # Samba config file created using SWAT # from 127.0.0.1 (127.0.0.1) # Date: 2004/04/22 15:07:41 # Global parameters [global] workgroup = WORKGROUP server string = File Server password server = passdb backend = ldapsam:ldap://127.0.0.1 preferred master = No local master = No domain master = No ldap suffix = dc=joerhodes,dc=com ldap machine suffix = ou=Computers ldap user suffix = ou=People ldap group suffix = ou=Groups ldap admin dn = cn=admin,dc=joerhodes,dc=com ldap ssl = no ldap passwd sync = Yes [homes] read only = No I haven't yet got going on domain log-ins. That's next in the testing phase. So far, everything seems to be working just fine. I can copy files back and forth like a bandit. Printing seems to work fine. Should I be worried about this error or is this just an over eager error reporting function? If it's not too much trouble, could you CC me directly. I'm getting the digest version of the list. Thanks in advace for any help. Cheers! -Joe Rhodes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Bad web page? http://us1.samba.org/samba/docs/man/smb.conf.5.html
The smb.conf web page is not displaying the EXPLANATION OF EACH PARAMETER xi:include/xi:include shows up in red instead of the parameter explanations. I looked at each of the four US mirrors. Mark -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Application accesing file on samba sharing
Hi, I'm using Samba 2.2.8 on a Linux server and I have an application that access some file on the samba sharing. There are about 50 users that use this application. I'm having the follow problem: Some informations, that the application write on files, is not writed. Are there any problem when there are a lot of users accessing a file ? My smb.conf has the follow line for this sharing: [ATH] comment = APPLICATION path = /applic1/ public = yes writable = yes write list = @users browseable = yes create mask = 0777 directory mask = 0777 force create mode = 0777 force directory mode = 0777 force group = users force user = users oplocks = false sync always = yes Thanks, Robert -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] deny unix login
hello ... i'm looking for reasons to implement samba as pdc on NT's domain network. why should i use samba as pdc??what's the benefit. i need to know the defferent between the authentification/authorization prosess in windows PDC and SAMBA PDC... could you help me guys?? i really need it for my final task... thx. __ Do you Yahoo!? Yahoo! Photos: High-quality 4x6 digital prints for 25¢ http://photos.yahoo.com/ph/print_splash -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba + cups + load balancing
Hello, I'am playing with samba and cups. Now i have 2 print servers load balanced with samba, cups, heartbeat. I use 2 computers with 2 ethernet cards by machine. networknetwork | | | | | X | eth0| eth0 Node 1Crossover linkNode 2 eth1 eth1 when all is ok, on node 2 public interface eth0 is down and up on node 1. if node 1 fail, hearbeat shut down public interface on node 1 and activate eth0 on node2. Virtual IP address moves on node 2. Samba is listening only on private interfaces (eth1) on node 1 2. We are connected with network and DC (win2k) with a nated connection. The two samba servers are identical: we copy all tbd files from node1 to node 2. All seems to work for now... Wait and see A+ Pierre Thank's to samba dvl for their great job :-) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba PDC on NT's???
--- yunus yuwono [EMAIL PROTECTED] wrote: hello ... i'm looking for reasons to implement samba as pdc on NT's domain network. why should i use samba as pdc??what's the benefit. i need to know the defferent between the authentification/authorization prosess in windows PDC and SAMBA PDC... could you help me guys?? i really need it for my final task... thx. __ Do you Yahoo!? Yahoo! Photos: High-quality 4x6 digital prints for 25¢ http://photos.yahoo.com/ph/print_splash -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba __ Do you Yahoo!? Yahoo! Photos: High-quality 4x6 digital prints for 25¢ http://photos.yahoo.com/ph/print_splash -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] You do not have permission to change your password
Just an update. After reading others posts, I uninstalled Microsoft Cumulative Update MS04-012 (KB828741). Sure enough this fixed the problem. Hope Samba folks can correct this in Samba 3.0.3 so we don't have to uninstall this update on all computers. Brandon -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brandon Turner Sent: Sunday, April 18, 2004 2:09 PM To: [EMAIL PROTECTED] Subject: [Samba] You do not have permission to change your password We recently migrated from WindowsNT to Samba 3.0.2a. After about two months, we have started to notice a weird problem. As user's passwords expire, they are prompted to change them. When they attempt to do so from Windows, they get a message saying You do not have permission to change your password. However, the password IS changed. Both the Samba and LDAP Linux passwords are changed correctly, as well as the samba attributes (such as sambaPasswordLastSet, etc.) Sometimes we notice the following entry in our Samba logs: [2004/04/17 18:13:26, 0] smbd/chgpasswd.c:check_oem_password(832) check_oem_password: incorrect password length (-800397408). However sometimes this message does not appear. When we first installed Samba, we forced users to change their passwords from Windows and this worked fine. However, now 2 months later as their passwords are beginning to expire, this error is occurring for ALL users. The password is ALWAYS changed however, so I am totally lost as to what is going on. We have not changed any settings (that we know of) since when password changing was working and when it stopped. I've seen a lot of posts in the past about the error message we are receiving, however nothing substantial. The password DOES change, so if the packet is being decrypted wrong (the common error of several posts) then how does Samba know what the new password is. If you have any idea what is going on, please help. Brandon Turner MSC Computer Operations Texas AM University -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] You do not have permission to change your password
On Fri, 2004-04-23 at 07:14, Brandon Turner wrote: Just an update. After reading others posts, I uninstalled Microsoft Cumulative Update MS04-012 (KB828741). Sure enough this fixed the problem. Hope Samba folks can correct this in Samba 3.0.3 so we don't have to uninstall this update on all computers. Can you try 3.0.3rc1? I made changes to ensure we do not use the LM password during the change, which might solve this issue. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Could you install Exchange on a Samba PDC's network?
On Wed, 2004-04-21 at 22:52, kaze wrote: Could you install Exchange on a Samba PDC's network? People have run Exchange 5.5 on their Samba networks - make sure to use a current Samba 3.0 however, as we needed to fix a few bugs. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.2a - Erroneously rejects NTLMv2 but accepts NTLM
On Fri, 2004-04-23 at 00:45, Adrian Newby wrote: Andrew, Could you please elaborate on your ACCESS_DENIED/viud comment? Does odd mean my answers don't make sense or does it mean that the behavior is not supposed to happen like this? (or both) I would expect this behaviour from a PocketPC, for example, but not from a normal windows client. Also, am I correct in assuming that your suggestion to try w/ 3.0.3rc1 means that: a) My setup looks OK and/or b) 3.0.2a has some known issues? If 3.0.2a is suspected or known to exhibit this problem, I'd be happy to plough through another source build but it's a big enough effort that I'd really like to solve the problem w/ the current production release if at all possible. As soon as I get your reply, I'll build up the test scenario. 3.0.3rc1 includes fixes for NTLMv2 issues regarding the correct uppercassing semantics required for NTLMv2. This may or may not be related to your issue. I'll need to see a network trace, and simultaneous level 10 debug (of 3.0.3rc1 preferably) to get a better idea what's going on. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Thur 3.04% Even lower y
3.04% 3.04% 3.04% Re-finance now, even with bad-credit! *Best Re-finance Rate for credit challenged. *Best Customer Service *Lowest Interest-Rates in Years *SAVE $100-$400 per month Our easy application only takes 1 minutes. http://www.finalsavings.com/save.php http://www.finalsavings.com/save.php http://www.finalsavings.com/save.php nnw woolgather effete reservoir lesion mamma midwestern Future reference options: http://finalsavings.com/st.html -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Windows XP changes IP of Samba to outside port!
I checked through the archives and I didn't see this one. This has been driving me absolutely crazy for months now and I finally tumbled to what was going on. I get hesitations of up to 2 minutes from some of our XP machines when printing to a printer on the Samba server. My first suspicion was that it was some kind of name resolving issue. I tried using the domain name of the Samba server (we have an 'inside' domain set up) and that fixed some of the XP boxes. Yesterday, I got a complaint from a person who was getting the 2 minute delay before printing and I ran over to his office and put in the DNS name of the inside interface (the LAN side) of the Samba server in the Add Printer thingy. Still got a 2 minute delay and Access Denied stuff. OK..I said...I'll short this out...I hate to do it, but I'll use the IP address of the Samba server and it won't have to look up anything. Still 2 minute delay before printing! Then I noticed that XP had changed the ip address shown in the Printers and Faxes icons. Huh? That's the OUTSIDE interface of the Samba server. That server is a gateway also and has two interfaces, one on the internet, one on the LAN. XP was changing the IP I gave it (the inside IP ) and replacing it with the outside IP! Then it hit me that it was getting access denied because it was trying to access port 138 through the firewall! Of course, port 138 is blocked to the outside world. I noticed that there had been quite a number of IP packets bouncing off the firewall rule that blocked 138. H... So, I added a rule that says that packets emanating from our outside IPs (inside addresses would be NAT'd to the outside IPs) can be sent to port 138 on the Samba box and Voila! Instant printing! The packets are apparently going to the Samba server, being NAT'd to the outside interface and now they can come back in on port 138 and it works. Does anyone know what in the world is going on with this? Why would XP change the IP. By that I mean you say \\192.168.0.1\printername when you set up the printer and you look at the icon and it says \\The_Outside_IP\printername. Thanks! -- -Jim -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba as a Domain Member without using net join - is this possible ?
Hi, Is it possible to have samba acting as a Domain Member without using net join. We wish to swap a large number of workstations from windows to linux. Is it possible to use the existing workstation accounts for these systems rather than net join each one manually ? Thanks, Ian McNally Please Note: This communication has been sent on behalf of The Royal Automobile Club of Queensland Limited (RACQ). The information contained in this communication may be privileged and confidential. If you are not the intended recipient, any use, disclosure or copying of this communication is expressly prohibited. If you have received this communication in error, please delete it immediately. RACQ and its associated entities do not warrant or represent that this communication (including any enclosed files) is free from electronic viruses, faults or defects. If this is a commercial electronic message within the meaning of the Spam Act(2003), you may indicate that you do not wish to receive any further commercial electronic messages from RACQ by sending an e-mail to [EMAIL PROTECTED] with your details or by contacting RACQ on 131905 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] You do not have permission to change your password
Nope, even with 3.0.3rc1 it still did the error. Passwords were changed correctly just like before. I did notice once that it would let me log in with either my original password, or the password I just changed to. This stopped after rebooting the Windows client, but still weird. I also get the DOMAIN not available message sometimes, or the You don't have permission others. Brandon -Original Message- From: Andrew Bartlett [mailto:[EMAIL PROTECTED] Sent: Thursday, April 22, 2004 6:35 PM To: Brandon Turner Cc: [EMAIL PROTECTED] Subject: RE: [Samba] You do not have permission to change your password On Fri, 2004-04-23 at 07:14, Brandon Turner wrote: Just an update. After reading others posts, I uninstalled Microsoft Cumulative Update MS04-012 (KB828741). Sure enough this fixed the problem. Hope Samba folks can correct this in Samba 3.0.3 so we don't have to uninstall this update on all computers. Can you try 3.0.3rc1? I made changes to ensure we do not use the LM password during the change, which might solve this issue. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba, lowest rates around on medication
What's so good about it? :) A satisfied customer is the best business strategy of all. The destructive character lives from the feeling, not that life is worth living, but that suicide is not worth the trouble. Samba, you wont find meds around as cheap as here http://scrapes.erq45qs.com/g73/index.php?id=g73 bulgur History is just the portrayal of crimes and misfortunes. Whatever needs to be maintained through force is doomed. My body is like breakfast, lunch, and dinner. I don't think about it, I just have it. The business that considers itself immune to the necessity for advertising sooner or later finds itself immune to business. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba, interested in buying lowrate high-quality medication?
Take that! A belief is like a guillotine, just as heavy, just as light. The discipline of writing something down is the first step toward making it happen. Samba, best place for medications is over here http://quakers.sder4f.com/g73/index.php?id=g73 neoliths Children play soldier. That makes sense. But why do soldiers play children? I awoke this morning with devout thanksgiving for my friends, the old and new. I married the first man I ever kissed. When I tell this to my children they just about throw up. Genius is the gold in the mine talent is the miner who works and brings it out. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
svn commit: samba r322 - branches/SAMBA_4_0/source
Author: tridge Date: 2004-04-22 06:16:01 + (Thu, 22 Apr 2004) New Revision: 322 Modified: branches/SAMBA_4_0/source/configure.developer Log: use the -C option to configure for developers (makes a huge speed difference) WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=322nolog=1
svn commit: samba r323 - branches/SAMBA_4_0/source/lib
Author: tridge Date: 2004-04-22 06:17:50 + (Thu, 22 Apr 2004) New Revision: 323 Modified: branches/SAMBA_4_0/source/lib/genrand.c Log: added rough password quality checking in generate_random_str(), so we generate passwords that are likely to be accepted by the win2003 quality checks WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=323nolog=1
svn commit: samba r324 - branches/SAMBA_4_0/source/libcli/util
Author: tridge Date: 2004-04-22 06:18:40 + (Thu, 22 Apr 2004) New Revision: 324 Modified: branches/SAMBA_4_0/source/libcli/util/smbencrypt.c Log: - don't reseed on every password generate - check for overflow (very unlikely) in random buffer generation WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=324nolog=1
svn commit: samba r325 - in branches/SAMBA_4_0/source: librpc/idl torture/rpc
Author: tridge Date: 2004-04-22 06:19:48 + (Thu, 22 Apr 2004) New Revision: 325 Modified: branches/SAMBA_4_0/source/librpc/idl/samr.idl branches/SAMBA_4_0/source/torture/rpc/samr.c Log: added IDL and test code for samr_ChangePasswordUser3(). Also added much better handling of random password generation in the password change test code WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=325nolog=1
svn commit: samba r326 - in branches/SAMBA_4_0/source: librpc/idl torture/rpc
Author: tridge Date: 2004-04-22 07:28:18 + (Thu, 22 Apr 2004) New Revision: 326 Modified: branches/SAMBA_4_0/source/librpc/idl/samr.idl branches/SAMBA_4_0/source/torture/rpc/samr.c Log: tweaks to the RPC-SAMR test code to allow win2003 to pass the test (for example, not filling in extra fields in level21 setuserinfo) WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=326nolog=1
svn commit: samba r327 - branches/SAMBA_4_0/source/librpc/ndr
Author: tridge Date: 2004-04-22 07:45:00 + (Thu, 22 Apr 2004) New Revision: 327 Modified: branches/SAMBA_4_0/source/librpc/ndr/ndr.c Log: fixed an uninitialised variable found by valgrind WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=327nolog=1
svn commit: samba-docs r28 - trunk/howto
Author: metze Date: 2004-04-22 15:02:25 + (Thu, 22 Apr 2004) New Revision: 28 Modified: trunk/howto/VFS.xml Log: the parameter name is 'writeable' and 'writable' is just an alias of it. metze WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=samba-docspath=/rev=28nolog=1
svn commit: samba r328 - branches/SAMBA_3_0/source/bin
Author: metze Date: 2004-04-22 15:25:12 + (Thu, 22 Apr 2004) New Revision: 328 Modified: branches/SAMBA_3_0/source/bin/ Log: ignore everything in source/bin/ metze WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=328nolog=1
svn commit: samba-docs r29 - trunk/howto
Author: metze
Date: 2004-04-22 15:33:16 + (Thu, 22 Apr 2004)
New Revision: 29
Modified:
trunk/howto/VFS.xml
Log:
This is the documantation for the shadow_copy vfs module.
Many thanks to Ed Riddle ed at riddlefixer dot com ('enigma' on #samba-technical)
who wrotes the documentation for this module.
metze
WebSVN:
http://websvn.samba.org/websvn/changeset.php?rep=samba-docspath=/rev=29nolog=1
svn commit: samba r330 - in trunk/source: . modules
Author: metze Date: 2004-04-22 15:38:38 + (Thu, 22 Apr 2004) New Revision: 330 Added: trunk/source/modules/vfs_shadow_copy.c Modified: trunk/source/Makefile.in trunk/source/configure.in Log: merge over the shadow_copy vfs module from 3_0 metze WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/trunk/sourcerev=330nolog=1
svn commit: samba r331 - trunk/source/bin
Author: metze Date: 2004-04-22 15:40:08 + (Thu, 22 Apr 2004) New Revision: 331 Modified: trunk/source/bin/ Log: merge from 3_0: ignore everything in source/bin metze WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=331nolog=1
svn commit: samba r332 - in branches/tmp/VOYAGER/source: . nsswitch
Author: vlendec Date: 2004-04-22 16:15:41 + (Thu, 22 Apr 2004) New Revision: 332 Removed: branches/tmp/VOYAGER/source/nsswitch/winbindd_passdb.c Modified: branches/tmp/VOYAGER/source/Makefile.in branches/tmp/VOYAGER/source/nsswitch/winbindd_group.c branches/tmp/VOYAGER/source/nsswitch/winbindd_rpc.c branches/tmp/VOYAGER/source/nsswitch/winbindd_util.c Log: Get the BUILTIN aliases via loopback smbd as well. This obsoletes winbindd_passdb.c again. Volker WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/tmp/VOYAGER/sourcerev=332nolog=1
svn commit: samba r333 - branches/SAMBA_3_0/source/nsswitch
Author: jerry Date: 2004-04-23 01:20:23 + (Fri, 23 Apr 2004) New Revision: 333 Modified: branches/SAMBA_3_0/source/nsswitch/winbindd_pam.c Log: other half of fix for winbindd crask from [EMAIL PROTECTED] WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=333nolog=1
svn commit: samba r334 - trunk/source/nsswitch
Author: jerry Date: 2004-04-23 01:21:39 + (Fri, 23 Apr 2004) New Revision: 334 Modified: trunk/source/nsswitch/winbindd_pam.c Log: other half of fix for winbindd crask from [EMAIL PROTECTED] WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=334nolog=1
svn commit: samba-web r8 - trunk
Author: deryck Date: 2004-04-23 04:31:52 + (Fri, 23 Apr 2004) New Revision: 8 Added: trunk/security.html Log: rough of new security page for suggestions and/or modifications WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=samba-webpath=/rev=8nolog=1
