[Samba] variable substitution ?

[ipguy]

is anyone aware how one might grab the "Full Name" variable (if it even 
exists) from a PDC, if Samba is setup as a domain member server using 
winbind, so the variable can be used in preexec scripts ?

e.g

preexec = mkdir /data/%u 

the above will make a dir in the data dir before connecting to the share. the 
problem with this situation is the username is not always the "full name" 
so the creation of the %u dir may not be specific.

if one does a "getend passwd" the full name can be seen but how does one 
use this ?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Memory leak in Samba with APW printing configuration ?

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Yohann Fourteau wrote:
| Hi,
|
| On Samba 3.0.2a on debian stable with a 2.6.5 kernel, each
| time I use APW to configure my printers, smbd takes more and
| more memory and the kernel does an Out of Memory (I have 512
| Mo RAM). It's Xerox printers.
|
| Is the problem known (and corrected in 3.0.3rc1) or is
| it new ?
I don't see any memory leaks using valgrind 2.1.1 on
3.0.3rc1.  Can you provide more information? ps output,
/proc//status, etc
And do you mean the printer properties dialog or are you
really using the APW icon ?




cheers, jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"...a hundred billion castaways looking for a home." --- Sting
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFAkIbcIR7qMdg1EfYRApHVAJ9CZvwXbCqo+G4ckNP3Kx5+GzHHCACeLI8F
kIYmOpR38RqkNo2SJdqgvrk=
=o839
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Good day!

[Sebastian Lim]

Good day creators of Samba!

I wish all of you a very good day. Samba has helped me a lot in my office intranet for 
my colleagues and I now can share files via the Samba box in which I have set up, 
excellent! Thank you all so much !

But I do have one request for help; is there a way in which I can allow users 
connected to the Samba machine to change thier Samba passwords via a web interface? Or 
probably a command in which I can change it from Windows?

I would really appreciate your help.

Once again thanks and thanks in advance!
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] The Ultimate Migration

[Gerald Drouillard]

Kevin Kallsen wrote:

Dear Fellow Samba Users:

 

I have mandrake 9.1 with Samba 2.2.8 running a domain with 500 users.  It
has worked flawlessly for a long time.  However, it is time to set up a new
server.  I have a new server with Mandrake 10 OE and Samba 3.0.2 running.
Please explain to this newbie and very satisfied samba user how to migrate
all my users, groups, sid, domain, etc to the new machine.  My goal is to
rsync the correct folders and then power down the old server and have the
domain clients recognize the new server.
 

Thanks in advance for your detailed reply.

 

Kevin

 

 

The current MDK 10 version of samba 3.x works great except for a major 
problem with the printing from windows clients.  The problem is that 
printers will just stop working in samba, and trying to reconnect does 
not work.  If you simply add another printer in cups with a slightly 
different name, you will be able to print again... well for how long is 
another question, until you have to switch back to the original names. 
My advice is to stick with samba 2.x until we see how well the next RC 
version of samba works.  The 2.6 kernel rocks!

Regards
Gerald Drouillard
http://convert2samba.com
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Howto eliminate the getpeername failed error message

[Gerald Drouillard]

[EMAIL PROTECTED] wrote:

“iptables -I INPUT 1 -p tcp --dport 445 -j DROP”
Be careful running this on a Samba 3.x PDC with other samba servers on 
the network.  It appears that you will loose the ability for windows 
clients to map drives to the other non-PDC servers on the network from 
my test today.

Regards
Gerald Drouillard
http://convert2samba.com
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] I CAN'T CHANGE THE PASSWORD FROM XP STATIONS

[Rafael Paris]

I have seen the log file and found 

NT_STATUS_WRONG_PASSWORD

Check_oem_password: incorrect password length (-358407785)

 

Any light on this

 

Cheers

Rafael Paris

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Using mount -t smbfs in /etc/fstab and can't control chmod

[Keith Edmunds]

On Wed, 28 Apr 2004 19:32:15 +
"Brian Johnson" <[EMAIL PROTECTED]> wrote:

> How can I mount it so the group has full permissions to it?

See the dmask, umask and fmask options to 'mount'.

Keith
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Best QUa1ity and Best PR!CES of -- XX3NICAL__ CI@_LiS__ ULTR@M__ F!0RIC3T__ __ V1AGR0__ TR_AM_AD0L Onl1ne

[Natasha Haney]

Is this a dagger which I see before me, The handle toward my hand? Come, let me clutch 
thee! I have thee not, and yet I see thee still. Art thou not, fatal vision, sensible 
To feeling as to sight? or art thou but A dagger of the mind, a false creation 
Proceeding from the heat-oppressed brain? I see thee yet, in form as palpable As this 
which now I draw. 


http://thesemeds.com/


My people too were scared with eerie sounds, A footstep, a low throbbing in the walls. 
A noise of falling weights that never fell, Weird whispers, bells that rang without a 
hand, Door-handles turn'd when none was at the door, And bolted doors that open'd of 
themselves; And one betwixt the dark and light had seen Her, bending by the cradle of 
her babe.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Using mount -t smbfs in /etc/fstab and can't control chmod

[Brian Johnson]

I'm mounting a FAT partition on a linux ext3 fs server and I can change the
uid and gid of the mount point, but I can't get it to mount it 770 .. it
always mounts without group write permission

How can I mount it so the group has full permissions to it?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Domain members list

[Keith Edmunds]

Using Samba 3.0.2a as a PDC, I wanted to add a domain user to the
workstation's local 'administrators' group. I logged into the
workstation (Win2K) as the local admin, and browsed the domain for
usernames. The domain members list seems to contain every entry in
/etc/passwd - how can I restrict the list to just those people for whom
the command 'smbpasswd -a x' has been run?

Thanks
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] The Ultimate Migration

[Kevin Kallsen]

Dear Fellow Samba Users:

 

I have mandrake 9.1 with Samba 2.2.8 running a domain with 500 users.  It
has worked flawlessly for a long time.  However, it is time to set up a new
server.  I have a new server with Mandrake 10 OE and Samba 3.0.2 running.
Please explain to this newbie and very satisfied samba user how to migrate
all my users, groups, sid, domain, etc to the new machine.  My goal is to
rsync the correct folders and then power down the old server and have the
domain clients recognize the new server.

 

Thanks in advance for your detailed reply.

 

Kevin

 

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] WinXP client can't browse list for the domain it joined

[Jason Zhang]

Hi,

I just configured a RH9 with Samba 3.0.2a as the PDC for XP clients
network. The XP clients can join the domain. When I trying to browse the
"Microsoft Windows Network" on the client XP machines, I can see all the
old Workgroups and the list of XP machines in those workgroups, and I
can see the new domain (ZEUS1) I just created with the PDC's name, which
is "hermes", under this new domain. However, I could not find those XP
machines which newly joined to the new domain. If I search those machine
names, XP can find those machines and browse the share folder of those
machines. But by just browse the network neighborhood, I could not list
the machines under the new domain. How do I make the changes so that the
client XP machines can browse the name list of the domain?

Below is my smb.conf.

Thanks,
Jason


[global]

   workgroup = ZEUS1
   netbios name = hermes
   server string = hermes
   hosts allow = 192.168.1.119, 192.168.1., 192.168.0.10

   log file = /var/log/samba/%m.log
   max log size = 50

   security = user
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd
   passdb backend = smbpasswd

   username map = /etc/samba/smbusers
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

   local master = yes
   os level = 33
   domain master = yes
   preferred master = yes
   domain logons = yes
   logon script = logon.cmd
   logon path = \\%L\Profiles\%U
   logon home = \\homeserver\%U\winprofile
   wins support = yes
   dns proxy = no
   add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s
/bin/false -M %u

[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   valid users = %S
   create mode = 0664
   directory mode = 0775

 [netlogon]
   comment = Network Logon Service
   path = /etc/samba/netlogon
   readonly = yes
   write list = ntadmin

[Profiles]
path = /etc/samba/profiles
browseable = no
guest ok = yes
writeable = yes
create mask = 0600
directory mask = 0700

[printers]
   comment = All Printers
   path = /var/spool/samba
   printer = raw
   browseable = yes
   guest ok = yes
   writable = no
   printable = yes

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Virus encontrado em mensagem enviada "Re: Old photos"

[Administrador de Segurança em Redes]

Atencao: [EMAIL PROTECTED]


Um Virus foi encontrado numa mensagem de Email que acabou de
ser enviada por voce. 
Este scanner de Email a interceptou e impediu a mensagem de chegar
no seu destino.

O Virus foi reportado como sendo: 

 the W32/[EMAIL PROTECTED] virus !!!


Por favor atualize seu antivirus ou contate o seu suporte tecnico
o mais rapido possivel pois voce tem um virus no seu computador.


Sua mensagem foi enviada com o seguinte envelope:

REMETENTE:[EMAIL PROTECTED]
DESTINATARIO: [EMAIL PROTECTED] 

... e com o seguinte cabecalho:

From:[EMAIL PROTECTED]
To:  [EMAIL PROTECTED]
Subject: Re: Old photos
Date:Wed, 28 Apr 2004 13:13:06 -0300



A mensagem original foi armazenada em:

  perseus.aganp.go.gov.br:/var/spool/qmailscan/quarantine

onde o Administrador de Segurança em Redes pode efetuar maiores diagnosticos nela.

O scanner de Email reportou o seguinte enquanto varria a mensagem:

--- 

---uvscan results ---
Scanning /var/spool/qmailscan/perseus.aganp.go.gov.br10831689354068565/*
Scanning file 
/var/spool/qmailscan/perseus.aganp.go.gov.br10831689354068565/1083168942.8659-0.perseus.aganp.go.gov.br
Scanning file 
/var/spool/qmailscan/perseus.aganp.go.gov.br10831689354068565/old_photos.exe
/var/spool/qmailscan/perseus.aganp.go.gov.br10831689354068565/old_photos.exe
Found the W32/[EMAIL PROTECTED] virus !!!
Scanning /var/spool/qmailscan/working/new/perseus.aganp.go.gov.br10831689354068565
Scanning file /var/spool/qmailscan/working/new/perseus.aganp.go.gov.br10831689354068565
/var/spool/qmailscan/working/new/perseus.aganp.go.gov.br10831689354068565
Found the W32/Netsky.p.eml!exe virus !!!

---
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] can't get into home dir share (username stuck on "guest")

[Chris J. Bottaro]

i have my samba-2.2.7a setup to share home dirs as follows:
[homes]
browseable = yes
writable = yes
valid users = %S
create mode = 0664
directory mode = 0775

the problem is that when logged on as a given user in windows, that user will see 
his/her home dir in "my network places", but when he/she tries to enter it, a dialog 
comes up prompting for a password only.  the input field is greyed out but filled in 
with "computername/guest".

how can i remedy this problem?

thanks for the help.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Bug report 3.0.2a; INTERNAL ERROR: Signal 11 in smbd; PANIC: internal error

[Jeramy Eling]

Your not alone on this one, I have had the same issue with samba 3.0.2a and 3.0.3rc1. 
I have logged it in bugzilla but have not heard anything on the matter.

Jez

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Alex de Vaal
Sent: 28 April 2004 16:22
To: [EMAIL PROTECTED]
Subject: [Samba] Bug report 3.0.2a; INTERNAL ERROR: Signal 11 in
smbd;PANIC: internal error


Dear Samba team,
 
 I'd like to a report a bug (INTERNAL ERROR: Signal 11 in smbd) that I 
encountered with Samba after uploading printer drivers to the PRINT$ share, 
while I was configuring the "Printing Defaults"  in the "Advanced" tab.

Here's the overview of the Samba server I use:
RHL9, Samba 3.0.2a compiled with MIT 1.3.1-7 and CUPS. Samba is a 
domain member in a Windows 2003 ADS. No local Linux users. The shares 
are working OK for the ADS users.
The CUPS queues are RAW queues.

Essential info (not complete) of smb.conf [global]
workgroup = TEST
realm = TEST.COM
server string = %h server (Samba %v)
security = ADS
password server = *
socket options = TCP_NODELAY SO_RCVBUF=8192 
SO_SNDBUF=8192
printcap name = cups
domain master = No
dns proxy = No
idmap uid = 1-2
idmap gid = 1-2
template homedir = /data/hom/%U
template shell = /bin/bash
printer admin = root, '@TEST.COM\Domain Admins'
printing = cups
oplocks = No
level2 oplocks = No

[printers]
comment = All Printers
path = /var/spool/samba
guest ok = Yes
printable = Yes
browseable = No

[print$]
comment = Printer Driver Download Area
path = /etc/samba/drivers
write list = root, '@TEST.COM\Domain Admins'
force user = root
guest ok = Yes

Workstation used: Windows XP SP1a English.

The user that I used for uploading the printer drivers and configuring the 
printer is member of Domain Admins.

Uploading of the printer driver on the printer share went Ok. After the upload 
of the printer driver I opened the "Advanced" button to change the "Printing 
Defaults" First I changed the orientation from Portrait to Landscape (as in the 
HOWTO). After that I changed the paper size. At that time I saw in the 
/var/lib/messages file (also in  /var/lib/samba/.log) the 
following messages:

Apr 20 18:16:57 dussel smbd[2601]:   call_nt_transact_ioctl(0x90100): 
Currently not implemented. 
Apr 20 18:17:10 dussel smbd[2601]: Added printer driver. Print driver name: 
HP LaserJet 4200 PCL 5e. Print driver OS: WIN2K. Administrator name: 
TEST\deadmin.
Apr 20 18:17:26 dussel nmbd[1508]: [2004/04/20 18:17:26, 0] 
nmbd/nmbd_namequery.c:query_name_response(101) 
Apr 20 18:17:26 dussel nmbd[1508]:   query_name_response: Multiple (2) 
responses received for a query on subnet 10.20.63.151 for name TEST<1d>. 
Apr 20 18:17:26 dussel nmbd[1508]:   This response was from IP 
10.20.63.40, reporting an IP address of 10.20.63.40. 
Apr 20 18:20:26 dussel smbd[2601]: [2004/04/20 18:20:26, 0] 
lib/fault.c:fault_report(36) 
Apr 20 18:20:26 dussel smbd[2601]:   
===
 
Apr 20 18:20:26 dussel smbd[2601]: [2004/04/20 18:20:26, 0] 
lib/fault.c:fault_report(37) 
Apr 20 18:20:26 dussel smbd[2601]:   INTERNAL ERROR: Signal 11 in pid 
2601 (3.0.2a) 
Apr 20 18:20:26 dussel smbd[2601]:   Please read the appendix Bugs of the 
Samba HOWTO collection 
Apr 20 18:20:26 dussel smbd[2601]: [2004/04/20 18:20:26, 0] 
lib/fault.c:fault_report(39) 
Apr 20 18:20:26 dussel smbd[2601]:   
===
 
Apr 20 18:20:26 dussel smbd[2601]: [2004/04/20 18:20:26, 0] 
lib/util.c:smb_panic(1400) 
Apr 20 18:20:26 dussel smbd[2601]:   PANIC: internal error 
Apr 20 18:20:26 dussel smbd[2601]: [2004/04/20 18:20:26, 0] 
lib/util.c:smb_panic(1408) 
Apr 20 18:20:26 dussel smbd[2601]:   BACKTRACE: 26 stack frames: 
Apr 20 18:20:26 dussel smbd[2601]:#0 smbd(smb_panic+0x11c) 
[0x81c3d6c] 
Apr 20 18:20:26 dussel smbd[2601]:#1 smbd [0x81b24a2] 
Apr 20 18:20:26 dussel smbd[2601]:#2 /lib/tls/libc.so.6 [0x420275c8] 
Apr 20 18:20:26 dussel smbd[2601]:#3 /lib/tls/libc.so.6(malloc+0x8b) 
[0x4207335b] 
Apr 20 18:20:26 dussel smbd[2601]:#4 smbd(tdb_unpack+0x13b) 
[0x81d98ab] 
Apr 20 18:20:26 dussel smbd[2601]:#5 smbd [0x81e9c9e] 
Apr 20 18:20:26 dussel smbd[2601]:#6 smbd [0x81ea8a5] 
Apr 20 18:20:26 dussel smbd[2601]:#7 smbd(get_a_printer+0x126) 
[0x81ebbf6] 
Apr 20 18:20:26 dussel smbd[2601]:#8 
smbd(_spoolss_getprinterdata+0x256) [0x8120256] 
Apr 20 18:20:26 dussel smbd[2601]:#9 smbd [0x811640f] 
Apr 20 18:20:26 dussel smbd[2601]:#10 smbd(api_rpcTNP+0x159) 
[0x814b239] 
Apr 20 18:20:26 dussel smbd[2601]:#11 smbd(api_pipe_request+0xaf) 
[0x814afff] 
Apr 20 18:20:26 dussel smbd[2601]:#12 smbd [0x81446f6] 
Apr 20 18:20:26 dussel smbd[2601]:#13 smbd [

RE: [Samba] RE: winbind/wbinfo not pulling info from W2K AD PDC

[Talwar, Puneet (NIH/NIAID)]

HI,

I am sorry I forgot to post the problem that I am having.  It is the same
issue who posted this e-mail originally. Please let me know what should I do
to fix the problem that I am having. 

Edit /etc/samba/smb.conf
[global]
realm = KERBEROS.REALM
security = ADS
encrypt passwords = yes
password server = kerberos.server
Edit /etc/krb5.conf
[libdefaults]
default_realm = KERBEROS.REALM

[realms]
KERBEROS.REALM = {
kdc = kerberos.server   - should :88 be appended to
this line?
}
[domain_realms]
.kerberos.server=KERBEROS.REALM
#net ads join -U administrator
password:
Joined 'SERVERNAME' to realm 'DOMAIN'
#kinit administrator at KERBEROS.REALM
password:
#smbclient //servername/share -k
smb // >
Up to here everything is OK and the server account can be seen in AD.
#ls -l /lib | grep libnss_winbind
libnss_winbind.so -> libnss_winbind.so.2
Edit /etc/nsswitch.conf
passwd: files winbind
shadow: files
group:  files winbind
#ldconfig -v | grep winbind
libnss_winbind.so -> libnss_winbind.so.2
Edit /etc/samba/smb.conf
[global]
realm = KERBEROS.REALM
security = ADS
encrypt passwords = yes
password server = kerberos.server
winbind separator = +
idmap uid = 1-2
idmap gid = 1-2
winbind enum users = yes
winbind enum groups = yes
template homedir = /home/%D/%U
template shell = /bin/bash
#testparm
Load smb config file from /etc/samba/smb.conf
Loaded services file OK
'winbind separator = +' might cause problems with group membership
server role: ROLE_DOMAIN_MEMBER
#net rpc join -S PDC -U administrator
password:
Joined domain DOMAIN
#winbindd -B
# wbinfo -u
Error looking up domain
#wbinfo -g
Error looking up domain
# wbinfo -t
Checking the trust secret vi RPC calls failed
Error code was (0x0)
Could not check secret
#wbinfo -p
Ping to winbindd failed on fd-1
Could not pin winbindd!
# ps -ae | grep winbindd
PID winbind
PID winbind

This is the output from /var/log/samba/log.winbind
[2004/02/13 13:35:47, 1] nsswitch/winbindd.c:main(843)
  winbindd version 3.0.2 started.
  Copyright The Samba Team 2000-2004
[2004/02/13 13:35:47, 0] libsmb/cliconnect.c:cli_session_setup_spnego(724)
  Kinit failed: Preauthentication failed
[2004/02/13 13:35:47, 1] nsswitch/winbindd_util.c:add_trusted_domain(166)
  Added domain INFORMA-UK uk.informa.com
S-1-5-21-1547161642-839522115-68200333
0
[2004/02/13 13:35:47, 1] libsmb/clikrb5.c:ads_krb5_mk_req(269)
  krb5_cc_get_principal failed (No credentials cache found)
[2004/02/13 13:35:47, 0] libads/kerberos.c:ads_kinit_password(133)
  kerberos_kinit_password HOST/data-cl2a at UK.INFORMA.COM failed:
Preauthenticati
on failed
[2004/02/13 13:35:47, 1] nsswitch/winbindd_ads.c:ads_cached_connection(65)
  ads_connect for domain INFORMA-UK failed: Preauthentication failed
[2004/02/13 13:35:47, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276)
  krb5_get_credentials failed for [EMAIL PROTECTED] (Cannot find KDC
for
requested realm)
[2004/02/13 13:35:47, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(516)
  spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm
[2004/02/13 13:35:47, 1] nsswitch/winbindd_util.c:add_trusted_domain(166)
  Added domain INFORMA informa.com S-1-5-21-872949640-2421699758-2984176268
[2004/02/13 13:35:48, 1] nsswitch/winbindd_util.c:add_trusted_domain(166)
  Added domain DEFAULT  S-1-5-21-2136767079-1738235858-945835055
[2004/02/13 13:35:49, 1] nsswitch/winbindd_util.c:add_trusted_domain(166)
  Added domain AGRA_UK  S-1-5-21-591026277-1029915393-619646970
[2004/02/13 13:35:50, 1] nsswitch/winbindd_util.c:add_trusted_domain(166)
  Added domain MRC_UK  S-1-5-21-1670978810-1498184290-1845911597
[2004/02/13 13:35:50, 1] nsswitch/winbindd_util.c:add_trusted_domain(166)
  Added domain LLP  S-1-5-21-2047764551-82006601-1874078741
[2004/02/13 13:35:51, 1] nsswitch/winbindd_util.c:add_trusted_domain(166)
  Added domain CODA  S-1-5-21-1310659078-2099469345-1236795852
[2004/02/13 13:35:52, 1] nsswitch/winbindd_util.c:add_trusted_domain(166)
  Added domain INFORMA_ASIA  S-1-5-21-1008349960-465597267-314601362
[2004/02/13 13:35:53, 1] nsswitch/winbindd_util.c:add_trusted_domain(166)
  Added domain TEST.COM  S-0-0
[2004/02/13 13:35:53, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276)
  krb5_get_credentials failed for [EMAIL PROTECTED] (Cannot find
KDC for requested realm)
[2004/02/13 13:35:53, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(516)
  spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm
[2004/02/13 13:35:53, 1] nsswitch/winbindd_util.c:add_trusted_domain(166)
  Added domain AGRA agra.informa.com
S-1-5-21-1801674531-2139871995-1177238915
[2004/02/13 13:35:53, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276)
  krb5_get_credentials failed for [EMAIL PROTECTED] (Cannot find
KDC for requested realm)
[2004/02/13 13:35:53, 1] libsmb/cliconnect.c:cli_session_s

[Samba] a matter with winbackup

[enrico]

we tried to use samba to serve a windows network. In that network we use
iomega backup to copy folders from any pc to the server. 

All the network works well, but iomega backup can't create directoryes
and don't works. 

We tried with winbackup, but that software has a much of matters with
winxp. 

Someone knows hot to solve this problem ?
There is a scheduled-backup software for windows that works well on a
linux server ? 

thanks
Enrico Betti


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Bug report 3.0.2a; INTERNAL ERROR: Signal 11 in smbd; PANIC: internal error

[Alex de Vaal]

Dear Samba team,

 I’d like to a report a bug (INTERNAL ERROR: Signal 11 in smbd) that I
encountered with Samba after uploading printer drivers to the PRINT$ share,
while I was configuring the “Printing Defaults”  in the “Advanced” tab.

Here’s the overview of the Samba server I use:
RHL9, Samba 3.0.2a compiled with MIT 1.3.1-7 and CUPS. Samba is a
domain member in a Windows 2003 ADS. No local Linux users. The shares
are working OK for the ADS users.
The CUPS queues are RAW queues.

Essential info (not complete) of smb.conf [global]
workgroup = TEST
realm = TEST.COM
server string = %h server (Samba %v)
security = ADS
password server = *
socket options = TCP_NODELAY SO_RCVBUF=8192
SO_SNDBUF=8192
printcap name = cups
domain master = No
dns proxy = No
idmap uid = 1-2
idmap gid = 1-2
template homedir = /data/hom/%U
template shell = /bin/bash
printer admin = root, '@TEST.COM\Domain Admins'
printing = cups
oplocks = No
level2 oplocks = No

[printers]
comment = All Printers
path = /var/spool/samba
guest ok = Yes
printable = Yes
browseable = No

[print$]
comment = Printer Driver Download Area
path = /etc/samba/drivers
write list = root, '@TEST.COM\Domain Admins'
force user = root
guest ok = Yes

Workstation used: Windows XP SP1a English.

The user that I used for uploading the printer drivers and configuring the
printer is member of Domain Admins.

Uploading of the printer driver on the printer share went Ok. After the upload
of the printer driver I opened the “Advanced” button to change the “Printing
Defaults” First I changed the orientation from Portrait to Landscape (as in the
HOWTO). After that I changed the paper size. At that time I saw in the
/var/lib/messages file (also in  /var/lib/samba/.log) the
following messages:

Apr 20 18:16:57 dussel smbd[2601]:   call_nt_transact_ioctl(0x90100):
Currently not implemented.
Apr 20 18:17:10 dussel smbd[2601]: Added printer driver. Print driver name:
HP LaserJet 4200 PCL 5e. Print driver OS: WIN2K. Administrator name:
TEST\deadmin.
Apr 20 18:17:26 dussel nmbd[1508]: [2004/04/20 18:17:26, 0]
nmbd/nmbd_namequery.c:query_name_response(101)
Apr 20 18:17:26 dussel nmbd[1508]:   query_name_response: Multiple (2)
responses received for a query on subnet 10.20.63.151 for name TEST<1d>.
Apr 20 18:17:26 dussel nmbd[1508]:   This response was from IP
10.20.63.40, reporting an IP address of 10.20.63.40.
Apr 20 18:20:26 dussel smbd[2601]: [2004/04/20 18:20:26, 0]
lib/fault.c:fault_report(36)
Apr 20 18:20:26 dussel smbd[2601]:
===

Apr 20 18:20:26 dussel smbd[2601]: [2004/04/20 18:20:26, 0]
lib/fault.c:fault_report(37)
Apr 20 18:20:26 dussel smbd[2601]:   INTERNAL ERROR: Signal 11 in pid
2601 (3.0.2a)
Apr 20 18:20:26 dussel smbd[2601]:   Please read the appendix Bugs of the
Samba HOWTO collection
Apr 20 18:20:26 dussel smbd[2601]: [2004/04/20 18:20:26, 0]
lib/fault.c:fault_report(39)
Apr 20 18:20:26 dussel smbd[2601]:
===

Apr 20 18:20:26 dussel smbd[2601]: [2004/04/20 18:20:26, 0]
lib/util.c:smb_panic(1400)
Apr 20 18:20:26 dussel smbd[2601]:   PANIC: internal error
Apr 20 18:20:26 dussel smbd[2601]: [2004/04/20 18:20:26, 0]
lib/util.c:smb_panic(1408)
Apr 20 18:20:26 dussel smbd[2601]:   BACKTRACE: 26 stack frames:
Apr 20 18:20:26 dussel smbd[2601]:#0 smbd(smb_panic+0x11c)
[0x81c3d6c]
Apr 20 18:20:26 dussel smbd[2601]:#1 smbd [0x81b24a2]
Apr 20 18:20:26 dussel smbd[2601]:#2 /lib/tls/libc.so.6 [0x420275c8]
Apr 20 18:20:26 dussel smbd[2601]:#3 /lib/tls/libc.so.6(malloc+0x8b)
[0x4207335b]
Apr 20 18:20:26 dussel smbd[2601]:#4 smbd(tdb_unpack+0x13b)
[0x81d98ab]
Apr 20 18:20:26 dussel smbd[2601]:#5 smbd [0x81e9c9e]
Apr 20 18:20:26 dussel smbd[2601]:#6 smbd [0x81ea8a5]
Apr 20 18:20:26 dussel smbd[2601]:#7 smbd(get_a_printer+0x126)
[0x81ebbf6]
Apr 20 18:20:26 dussel smbd[2601]:#8
smbd(_spoolss_getprinterdata+0x256) [0x8120256]
Apr 20 18:20:26 dussel smbd[2601]:#9 smbd [0x811640f]
Apr 20 18:20:26 dussel smbd[2601]:#10 smbd(api_rpcTNP+0x159)
[0x814b239]
Apr 20 18:20:26 dussel smbd[2601]:#11 smbd(api_pipe_request+0xaf)
[0x814afff]
Apr 20 18:20:26 dussel smbd[2601]:#12 smbd [0x81446f6]
Apr 20 18:20:26 dussel smbd[2601]:#13 smbd [0x8144a49]
Apr 20 18:20:26 dussel smbd[2601]:#14 smbd [0x8144c8b]
Apr 20 18:20:26 dussel smbd[2601]:#15 smbd [0x8144e8c]
Apr 20 18:20:26 dussel smbd[2601]:#16 smbd(write_to_pipe+0xf2)
[0x8144de2]
Apr 20 18:20:26 dussel smbd[2601]:#17 smbd [0x8089e1e]
Apr 20 18:20:26 dussel smbd[2601]:#18 smbd(reply_trans+0x54b)
[0x808a7eb]
Apr 20 18:20:26 dussel smbd[2601]:#19 smbd [0x80c85a6]
Apr 20 18:20:26 dussel smbd[2601]:#20 smbd [0x80c8779]
Apr 20 18:

[Samba] RE: winbind/wbinfo not pulling info from W2K AD PDC

[Talwar, Puneet (NIH/NIAID)]

HI,
 
I saw your e-mail on the web and I am having exactly the same problem
running Red Hat AS 3.0.  can you please let me know what security parameter
you have changed in smb.conf to get wbinfo to work properly with -u -t  -g
and as well getent option.
 
Thanks,
 
--
Puneet Talwar
Contractor - CIPS
UNIX Administrator
 
 
A bit of success! I've change the security parameter in smb.conf to domain
and the windbind pipe is created OK and running wbinfo -u -g -t -p and
getent is all good. Obviously this doesn't give me full AD support but it's
better than nothing.
I can only think that because we have multiple DC's for different domains on
our WAN winbindd wasn't starting correctly as it was in the process of still
scanning them - looking at log.winbindd at one point it didn't come back for
close to 4 hours after the process was started.
Does anyone know if there is any way to configure samba/winbind to only
connect to the local AD domain rather than hunting down all the DC's in
every domain.
Thanks
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] page count logging samba/cups

[Kuba Leszewski]

Hi,

I know this subject appeared a few times on this list, but I've tried 
some of solutiuons presented there, and nothing works.

I have a CUPS server and HP LaserJet 2200 printer.
I downloaded postscript driver for this printer from cups.org, installed 
it in CUPS and then installed it using cupsaddsmb in Samba.
This driver now installs automatically on my Windows clients.

Problem is that I need to log number of pages everyone prints.
So far I can log correct numbers for users that have Linux, and use CUPS 
directly (without Samba).
But when I use a printer shared through Samba, then every print job 
appears as single page.

I  read this:
http://lists.suse.com/archive/suse-linux/2002-Jan/2508.html
and this:
http://lists.samba.org/archive/samba/2002-November/056520.html
I understand that the print job must pass through the 'pstops' filter, 
in order to get logged properly.
But all the solutions I found, don't work.

--
Regards
Kuba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] BitDefender found an infected object

[bitdefender]

BitDefender found an infected object in a message addressed to you

From: [EMAIL PROTECTED]
Subject: [[Samba] Autoreply: Protected message]
Object: (body)=>(base64)
Virus: [EMAIL PROTECTED]


The BitDefender Lab
www.bitdefender.com

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Is windbindd necessary?

[Greg Folkert]

On Tue, 2004-04-27 at 22:00, Matthew J. DiBattista wrote:
> Is it necessary?  I am also confused as to what it does.  If I disable it in
> the smb.conf file, I can not say I see any difference.  I am running 6 XP
> pro clients, MDK 9.2 as the file server.

There are few reasons to run winbindd, of which the following is one:

If you have a a real M$ DOMAIN, and this machine you are using is a home
server for the clients. It will need to create the homedirs and accounts
and groups for the users. And then do auth-relay to the domain.

There are other reasons but that is the main one.
-- 
[EMAIL PROTECTED]
REMEMBER ED CURRY! http://www.iwethey.org/ed_curry

Novell's Directory Services is a competitive product to Microsoft's
Active Directory in much the same way that the Saturn V is a competitive
product to those dinky little model rockets that kids light off down at
the playfield. -- Thane Walkup


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] allowing everyone to view shares

[Chris J. Bottaro]

bad topic, i know...couldn't come up with anything better.

i want any windows user to see ALL samba shares, even if they don't have permission cd 
(or login) into them.  for example, if logged in as john on winxp, i want john to see 
chris' samba shared home dir in "my network places".  when john double clicks on 
chris' samba shared home dir, i want a dialog to pop up prompting for a login/pass.

the reason for this is that on my winxp box, i am both chris and root (root has admin 
privs).  sometimes i'm logged as either chris or root and i want to access the home 
dir of the other user (root or chris).

right now, the way its setup to work is each user see only the public samba shares and 
>his/her own< home dir.  but its also messed up because when he/she tries to enter 
his/her home dir, it prompts for a password only (the username input box is greyed out 
and filled in with guest).  so they can't even enter their own home dir share.

thanks for the help.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Winbind AIX

[Luc Birs]

Hello,

I'm trying to use Winbind with Samba.

My system : AIX 5.1 level 05
Samba 3.0.2
I think those files are well-configured :
/usr/lib/security/methods.cfg
/etc/security/user
smb.conf
When a user try to connect to the samba server, the error 
NT_STATUS_CANT_ACCESS_DOMAIN_INFO appears !
wbinfo -u send all domain users
wbinfo-g send all domain groups

wbinfo --authenticate =
plaintext password authentication failed
error code was NT_STATUS_CANT_ACCESS_DOMAIN_INFO (0xc0da)
error messsage was: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Could not authenticate user DOMAINE+USER%PASSWD with plaintext password
challenge/response password authentication failed
error code was NT_STATUS_CANT_ACCESS_DOMAIN_INFO (0xc0da)
error messsage was: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Could not authenticate user DOMAINE+USER with challenge/response
Do you know how to solve this problem ?
Is it a PDC-side problem or Unix-side pb ?
Thanks 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] nttrans.c

[Russel Goehl]

All,
I am running samba versin 3.0.2a on a Solaris 8 system.
I am getting the log message
smbd/nttrans.c:call_nt_transact_ioctl(1990)
call_nt_transact_ioctl(ox90028): Currently not implemented
Can anyone tell me what this means and what I can do about it?

Thanks,
Russel Goehl
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Join NT Domain and Samba Netbios Name problem

[Mehmet Ozgun]

Hi,

I'm using Mandrake 10 CE, Samba 3.02a, Winbind. I have got a strange problem.
My linux machines can not join to our NT 4.0 domain when I define a netbios name which 
includes "I" or "i". 


How can I solve this problem.
Any answers 

Thanks a lot.


Domain Name = DOMAIN1
Netbios Name = LINUX1
---
When the netbios name is "LINUX" the rpc join returns error messages 


# net rpc join -U admin%password
[2004/04/28 16:36:11, 2] lib/interface.c:add_interface(79)
added interface ip=10.13.0.200 bcast=10.13.255.255 nmask=255.255.0.0
[2004/04/28 16:36:11, 2] lib/util_sock.cpen_socket_out(746)
error connecting to 10.201.0.204:445 (Connection refused)
[2004/04/28 16:36:11, 1] utils/net_rpc.c:run_rpc_command(138)
rpc command function failed! (NT_STATUS_ACCESS_DENIED)
[2004/04/28 16:36:11, 2] lib/util_sock.cpen_socket_out(746)
error connecting to 10.201.0.204:445 (Connection refused)
[2004/04/28 16:36:11, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(326)
Error domain join verification (reused connection): NT_STATUS_ACCESS_DENIED

Unable to join domain DOMAIN1.
[2004/04/28 16:36:11, 2] utils/net.c:main(767)
return code = 1
---
Domain Name = DOMAIN1
Netbios Name = LNUX1
---
It can be join to NT domain when the netbios name is "LNUX". And the result of the rpc 

# net rpc -d 2 join -U admin%password
[2004/04/28 16:41:00, 2] lib/interface.c:add_interface(79)
added interface ip=10.13.0.200 bcast=10.13.255.255 nmask=255.255.0.0
[2004/04/28 16:41:00, 2] lib/util_sock.cpen_socket_out(746)
error connecting to 10.201.0.204:445 (Connection refused)
[2004/04/28 16:41:00, 1] utils/net_rpc.c:run_rpc_command(138)
rpc command function failed! (NT_STATUS_ACCESS_DENIED)
[2004/04/28 16:41:00, 2] lib/util_sock.cpen_socket_out(746)
error connecting to 10.201.0.204:445 (Connection refused)
[2004/04/28 16:41:00, 2] lib/util_sock.cpen_socket_out(746)
error connecting to 10.201.0.204:445 (Connection refused)
Joined domain DOMAIN1.
[2004/04/28 16:41:00, 2] utils/net.c:main(767)
return code = 0







Here is my smb.conf file 

[global]
workgroup = DOMAIN1
netbios name = LINUX1
server string = File Server - %v
log file = /var/log/samba/log.%m
max log size = 50
security = domain
password server = *
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
winbind uid = 1-2
winbind gid = 1-2
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes
winbind enable local accounts = yes
template homedir = /home/%D/%U
obey pam restrictions = yes
template shell = /bin/bash
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
idmap uid = 1-2
idmap gid = 1-2
wins server = 10.201.0.201
dns proxy = no

# Share Definitions ==
[homes]
comment = User Homes
browseable = no
writable = yes

[public]
comment = Public Stuff
path = /home/samba/public
public = yes
writable = yes
write list = @"Domain Admins"
vfs object = /usr/lib/samba/vfs/audit.so

#-


























==-
Bu e-posta sadece yukarida isimleri belirtilen kisiler arasinda özel haberlesme 
amacini tasimaktadir. Size yanlislikla ulasmissa lütfen gönderen kisiyi 
bilgilendiriniz ve mesaji sisteminizden siliniz. Turkiye Cumhuriyet Merkez Bankasi 
A.S. bu mesajin icerigi ile ilgili olarak hicbir hukuksal sorumlulugu kabul etmez. 

This e-mail communication is intended for the private use of the people named above. 
If you received this message in error, please immediately notify the sender and delete 
it from your system. The Central Bank of The Republic of Turkey does not accept legal 
responsibility for the contents of this message.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Your mail to feedback@suse.de

[STTS-Feedback]

-

(deutsche Version unten)

Dear SuSE Linux User,

thank you for your message regarding "Re: Your software".

Please note that the email address you sent your message to
([EMAIL PROTECTED]) is no longer in use. Of course you still can send us
your ideas, comments and bug reports related to our products! Please use
our web pages:

http://www.suse.de/feedback

If you need support please contact our installation support
<[EMAIL PROTECTED]>, if you have a valid registration code or consult our
support database at

http://sdb.suse.de/sdb/en/html/


Thank you for your interest in SuSE Linux!

-

Sehr geehrter SuSE Linux-Benutzer,

vielen Dank für Ihre  Nachricht betreffs "Re: Your software".

Bitte beachten Sie, dass die von Ihnen verwendete Emailadresse
([EMAIL PROTECTED]) nicht mehr verwendet wird. Natürlich können Sie uns
auch weiterhin Ihre Anregungen, Fehlermeldungen oder
Verbesserungsvorschläge zusenden. Wir haben für Sie ein Webformular
eingerichtet unter

http://www.suse.de/feedback

Falls Sie Unterstützung benötigen, wenden Sie sich bitte an unseren
Installationssupport <[EMAIL PROTECTED]> oder konsultieren Sie unsere
Supportdatenbank unter:
   
http://sdb.suse.de/


Vielen Dank für Ihr Interesse an SuSE Linux!


Ihr SuSE Linux Feedback Team
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RES: [Samba] WINBIND HELP!!!!

[Estevam Henrique Carvalho]

Could you better describe your scenario ?

Where are you trying to logging on ?
>From where are you trying to logging on ?
What kind of service are you trying to access ?

-Mensagem original-
De: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Em nome de
Talwar, Puneet (NIH/NIAID)
Enviada em: terça-feira, 27 de abril de 2004 00:05
Para: '[EMAIL PROTECTED] '
Assunto: [Samba] WINBIND HELP

HI,

I am trying to setup winbind on Samba 3.0.2 running on Red Hat AS 3.0.  I
have completed most of the steps of setting up winbind successfully but when
it came for me to login in using the AD account username and password, it
didn't allow me to login.  the error message i am getting is incorrect
password or check username. During the setup i tested the wbinfo -u command
and i was successfully able to query the AD username list from the MS PDC
server.

if anyone is encountered similar problem i would glad to listen in on how
fix this issue.

thanks,
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


= 
Esta mensagem pode conter informação confidencial e/ou privilegiada. Se você
não for o destinatário ou a pessoa autorizada a receber esta mensagem, não
deverá utilizar, copiar, alterar, divulgar a informação nela contida ou
tomar qualquer ação baseada nessas informações. Se você recebeu esta
mensagem por engano, por favor avise imediatamente o remetente, respondendo
o e-mail e em seguida apague-o. Agradecemos sua cooperação. 

This message may contain confidential and/or privileged information. If you
are not the addressee or authorized to receive this for the addressee, you
must not use, copy, disclose, change, take any action based on this message
or any information herein. If you have received this message in error,
please advise the sender immediately by reply e-mail and delete this
message. Thank you for your cooperation. 
= 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Enventid 3224: Errors in chaning machine password. (& eventid 3210)

[Collins, Kevin]

> Maybe :-)
> 
> This is from eventid.net: 
> http://www.eventid.net/display.asp?eventid=3224&source=netlogon
> It points us to this Knowledgebase article:
> 
> http://support.microsoft.com/default.aspx?scid=kb;en-us;259736
> #appliesto
> 
> If you got time, can you test the solution described there 
> tomorrow (or today depending on when you read this)?

I checked the KB article, and followed its advice.  My machines were already
configured properly, according to this article.

I did however note that if I restarted the computers in question, at least
for a while, the message goes away.  I rebooted both of my "problem"
machines around 9:00 EDT yesterday and (as yet) have not seen the event ID
re-occur.

Just FYI...

Kevin


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Want to get users with a samba3 domain member from a 2000 AD server ...

[Yohann Ferreira]

Hi everyone !

I'm working with a Mandrake Linux 9.2, and samba 3.0.2a RPMs (with latest 
samba-winbind, too !).

I want to get users from the 2000 AD Domain, and for that, I need to have 
the command :

net ads join -S Domain -U admin
working right ?
here are my smb.conf and nsswitch.conf :

# [ smb.conf ]
[global]
winbind separator = +
   winbind cache time = 10
template shell = /bin/bash
   template homedir = /home/%D/%U
   idmap uid = 1-2
   idmap gid = 1-2
winbind enum users = yes
winbind enum groups = yes
   password server = *

printing = cups
printer = Canon_IRC_2100
socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192
printer admin = @adm
dns proxy = no
netbios name = linux
workgroup = DRAFFCOMTE
log file = /var/log/samba3/log.%m
smb passwd file = /etc/samba3/smbpasswd
server string = Samba Server %v
security = ads
realm = draf.fc
encrypt passwords = yes
max log size = 50
printcap name = cups
load printers = yes
map to guest = bad user
os level = 20
 domain master = no
preferred master = no
domain logons = no
wins server = XXX.XXX.XXX.XXX
# [ nsswitch.conf ]
passwd: files winbind
group:  files winbind
shadow: files
What did I forgot ? Should I install Kerberos or LDAP ?
And What to do with them ?
Thanks for reading

Bertram

_
Hotmail : un compte GRATUIT qui vous suit partout et tout le temps ! 
http://g.msn.fr/FR1000/9493

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Is windbindd necessary?

[Paul Gienger]

winbind is ONLY necessary if you are participating in a windows
controlled domain and need the users defined on your windows domain to
have permissions/logins on your samba server without having local users
set up and mapped manually.

It sounds like it isn't needed in your situation since you appear to be
running with the Mandrake box as your only server.

Litel Wang wrote:

>I think so .In fact it's used for authentication relay .For example 
>your linux smb client need password check from windows nt or 2000
>domain controler through linux smb server. 
>
>Litel
>
>
>===
>  
>
>>Is it necessary?  I am also confused as to what it does.  If I disable it in
>>the smb.conf file, I can not say I see any difference.  I am running 6 XP
>>pro clients, MDK 9.2 as the file server.
>>
>>Sincerely, 
>>
>>Matthew J. DiBattista
>>
>>Matthew J. DiBattista
>>Information   Technology Technicians
>>
>>
>>
>>
>>
>>-- 
>>To unsubscribe from this list go to the following URL and read the
>>instructions:  http://lists.samba.org/mailman/listinfo/samba
>>
>>
>>
>= = = = = = = = = = = = = = = = = = = =
>   
>
>
>  
>

-- 
Paul Gienger Office:701-281-1884
Applied Engineering Inc. Cell:  701-306-6254
Information Systems Consultant   Fax:   701-281-1322
URL: www.ae-solutions.commailto:[EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Is windbindd necessary?

[mike]

On Tue, 27 Apr 2004, Matthew J. DiBattista wrote:

> Is it necessary?  I am also confused as to what it does.  If I disable it in
> the smb.conf file, I can not say I see any difference.  I am running 6 XP
> pro clients, MDK 9.2 as the file server.

As far as I know, it is - winbindd is the component that does lookups by
SID.

-- 
Michael D. Jurney
[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] (no subject)

[mail]

Un message dont vous etes le destinataire a ete refuse par exim
Il contenait un fichier attache non autorise : exe,bat,zip,... 
l'auteur de ce mail est : [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] WINBIND HELP!!!!

[Shannon Johnson]

I had a similar problem when I first set up winbind. Try adding this
line to the smb.conf file:

winbind use default domain = yes

That'll automatically add "domain_" to the beginning of each user login
attempt. 



 
Shannon Johnson
Network Support Specialist / Systems Administrator
Dept. of Mechanical and Nuclear Engineering
224 Reber Building
University Park, PA 16802
Phone: (814) 865-8267

 

> -Original Message-
> From: Sean Kennedy [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, April 27, 2004 4:14 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [Samba] WINBIND HELP
> 
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Talwar, Puneet (NIH/NIAID) wrote:
> 
> |HI,
> |
> |I am trying to setup winbind on Samba 3.0.2 running on Red Hat AS
3.0.  I
> |have completed most of the steps of setting up winbind successfully
> but when
> |it came for me to login in using the AD account username and
password, it
> |didn't allow me to login.  the error message i am getting is
incorrect
> |password or check username. During the setup i tested the wbinfo -u
> command
> |and i was successfully able to query the AD username list from the MS
PDC
> |server.
> |
> |if anyone is encountered similar problem i would glad to listen in on
how
> |fix this issue.
> |
> |thanks,
> 
> Having never used RH AS 3, I'm not sure if this applies, nor do I know
> what you've done thus far, but...
> 
> Have you modified your pam files yet?
> 
> - --
> Sean Kennedy
> PGP public key: http://tpno.org/keys/0xFC1C377F.asc
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.2.3 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQFAjr8PIjyA6vwcN38RAnReAJ0dA41kwEPOK+xb3RKSOHSM0Wia8QCfWMxq
> yq0lgN+aaQyyzWaosrtSnko=
> =b1Kv
> -END PGP SIGNATURE-
> 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Autoreply: Protected message

[null]

This mailbox is unmonitored.  Mail sent to this address is not received or read.  

I am unable to offer support for general technical issues via private e-mail.  I only 
provide support via the newsgroups, so that others may benefit from the solution to a 
given problem.  In addition, many others will see your post, and may have an answer 
that I do not.  If your message was a follow up to a post I made in the newsgroups, 
please post it there, as I and others will see it.

I only offer support via e-mail for any issues related to my web site 
http://www.dougknox.com and/or anything that is downloaded from it.  I will also 
address suggestions for new items and or improvements.  E-mail addressing my web site 
or its contents should be sent to [EMAIL PROTECTED]  E-mail sent to this address for 
any other support issues will simply be deleted.  My apologies, but there are only so 
many hours in a day.
--
Regards,
Doug Knox
Microsoft MVP Windows XP\Smart Display\Media Center
--
The Microsoft MVP Program does not constitute employment or contractual obligation 
with Microsoft Corporation. We do this for fun! :)


Your message reads:

Received: from mailbag.mvps.org (unverified [158.64.24.12]) by edge.zoo.securewave.com
 (Rockliffe SMTPRA 4.5.6) with ESMTP id <[EMAIL PROTECTED]> for <[EMAIL PROTECTED]>;
 Wed, 28 Apr 2004 14:31:09 +0200
Received: from Principal.com (unverified [66.99.140.2]) by mailbag.mvps.org
 (Rockliffe SMTPRA 4.5.6) with SMTP id <[EMAIL PROTECTED]> for <[EMAIL PROTECTED]>;
 Wed, 28 Apr 2004 14:31:09 +0200
Date: Wed, 28 Apr 2004 05:58:26 -0600
To: [EMAIL PROTECTED]
Subject: Protected message
From: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="eagybwsetvmfgusceufx"

--eagybwsetvmfgusceufx
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit


Here  is the file.




--eagybwsetvmfgusceufx
Content-Type: application/octet-stream; name="Details.com"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Details.com"

TVoAAAEC//8AAEAAQAC0TM0h
kKkm3RPtR7NA7UezQO1Hs0DtR7NA7kezQGNYoEBtR7NAEWehQOxHs0AqQbVA
7EezQFJpY2jtR7NAUEUAAEwBAwAVj41A
AADgAA8BCwEFDACQEJAAADApAQAAoDABQAAAEAIAAAQA
BAAAQAEAABACAAAQAAAQABAAABAQ
AACkMwEATAIwAQCkAwAA

AABVUFgwAACQEAACAACAAADg
VVBYMQAAkKCMAgAAQAAA4C5yc3JjABAw
AQAABgAAAI4AAEAAAMAxLjI0AFVQWCEMCQII+/NcKlfXYbvHBwEABYkA
AADgAAAmFAB37e3/2w0KAVVOSVFVRSBQRU9QTAZNQUsE7Nb+YBJUSElOR1MhB0FUDHtz/x8g
U1RBWSBCRVlPTkQSI05PUjKuvdt+TCBMSUYLQRNDT01NG0HunmvuREVSKwY1QWBST0LtsNde
TSBJRFBwRC29fwvYJ1QvYVVDSCBXSUxfNWe29nIsPl1Lm1hvYO2tTxdORVYsMl5F2PZiMYYu
IACHb//tLS1bdXRob3Igb2baYWdsZRb///+7AQAywYrR0ONrCFjQ63IHgPMhgrns4/WIFYTl
8r/9//9BAf/BdOPCVIrtV4pECYp0DYpMEeIZLcDrCTMH3P+x3ST+O4oFJjLDR+PpX8jDDQEr
a+237yr20f50EQINUenB/gANGb/99geCxfVpASE1awHpMUIGiET9xkT/vsW+9YJrATAJ6W1C
DYxE+VH/m697KRL9FT+CfPkBdAPqEv50d2/ukfn16ZFbQ/Xqzg/p5EPbNnNgRiSH9XcFarf2
3G6sGaLhpcjsRwkDt9ne33IFGWsFaRakRv4EC73twbaqMAcy0/ZHkybu9q3cNVb9ivwNwOgD
QPKqCe8+sv2C4ALyq14eCVKKXA0haxvpmPKU/XdJgsFg/atKdPBaHwvpeHfnFjIxsbgA6USp
lVvrfgrBdQ9Ra5R1DLtmQP8sdIODV0V0hHwy2uJVrYYv2//A4RGC+AB1Cq1nCQkDdQCtmg/y
9vDpE+k8mMMJDekyB+ko39q7I+kjBkKC+hNIQme5DAsRWvv/Z6qC6AJ4s/bYKvixPNCRxP//
//+C4T49P3ITPTVyCwVAPVpzDgUH6goF/eoGLT/B4QMFKtY9tIerSVKQaXKhhLP/hg73MorZ
4CL9Ycj+86+BPgF1/22/txiy6SJA03QGWVrtiAeCxwXdGTP36tu5AIgSGP3eaWFX+LkDFVOL
/yRNRkaE7mJ/d7gBE4kVO//D4/gSYsdE/2uN3zZxyMCLBTqJRIUNCCvb7m4wBQ63VAk7iRWL
Bc2+XXg7QDoocwMo/8J01Nh9e8Gdavm5jwmLAjz8i0IAzkZsoQXc+leM+e1faz/kQf8bTwMV
OYlUY9j2vt1U/Q39iwz/F5E5ELa5zrUaCQUDeqSKQNqte/sxFTH+BePBiyMCBP2JYPDtk/Tm
GYpBPQIFDrZBB1nY3YLW4rkpdPZk2lTJeG9tUx0FAsMEiBxs2cqHDRPQ/jwVDRd7wUYuuBEU
3RUNMbrmjkkIUZCbTEu3ry1IWwU5cYpCofC39u3/KsuKUgkC0AJSDYjd/nIRjrYXFQAj3+lr
BT9OET5bazLWfrcpCfT9Eg2OOwUReaEsy/kV/TlCJSHdr5xs4d9n/hlBUdQA02Sb/VFRxoHR
AQAJ1c/C9thGESEJJSnqAjr9JUlufBoNAGv7JkHf7G5rRVgTF/5TCRHojJ1i799U+YkDxkMF
TyP9vYTv1Zn9JC4V9VeMfi0buxPGB4NHMGlrA6sF+8AxigdfYxdMcnKYO4z4EgF7s8gWW4lZ
A4p22cx8Ic62WxkynsZyD4DFeR2tAvhpiMCG6zOBy/g8FbcbBBaoRQOBGYyELckG7NdR5Dc/
5/kYct8IdFoRHsgkMkSW7WREXxPpVubpGWuUL/yXZj58Z8ZE+4Rh+8K3RgsFTPv24OBrQemv
OGX72K2KyQYpwu2ORgUF8Ztm2wzNa2cHDfsPxvZMLcJGET8fnwo/ga2trdIeNOFoAjZ+Ei68
ZgmIRkXGXh/hUlYy/nQ0HfjebrBuXG8VduCNNeEq7vXM0BS/PoaBBtYR6bU/Vg6Fd4gQg4Qd
B44KvDz8OgnByF89K/lkaw/3Xbmx46BV+9njQ0y5DyQftsZtAgId7QKhBeVM8VEbzO1mJsvp
NncTKXruuSTdEiWaixP7YPmZEQfjOkZwgHLd+9yW0YwFov4e1fwKJKNzB+5aahps7XHYhe0h
nt4M8XhCd5pi9brkaw353BZ7rNN3hwAeTJnQfM/32VEawgAJvmn4083AO94akQPpLfjh901n
/gclW2lYxkEgBWspFns3BlM+vQNdAa/585XMSIo+aAfp7Pl3v/1AmrlRzQ/qNIL5AAsBzVGW
ZrcsKAMXzVEcAs1mWW4REf4QBf4hBFr7jL251U8kJIz0jA7c8L0

Re: [Samba] Share problems with NT4 and Samba 3.0.2

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Michel.Correge wrote:

|   New year, new hints...
|   
|   unicode = no
|   
|   was set because of my last post on December 2003.
|   http://lists.samba.org/archive/samba/2003-December/077497.html
|   Without this, I can't see my password in the log (with level 10), but
|   that doesn't solve my problem...
|   
|   Any other suggestion ?
We fixed that bug (plain text auth and unixcode = yes) in 3.0.2.
Might want to retest againat 3.0.3rc1.




cheer,s jerry
- --
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key   http://www.plainjoe.org/gpg_public.asc
"...a hundred billion castaways looking for a home." --- Sting
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFAj59BIR7qMdg1EfYRAiFlAKDzONuQ/57G8uKmQNE3fQDu++BANgCg7v1T
4+t/Tk7vIy9lFBDNX3Mbsg0=
=dunP
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] FW: Re: md5 fail on large file

[Marco Berizzi]

Me again. I think I have found which is the problem.
After I have copied the file from NT4TSE to samba, I have run
df on the filesystem, and the used space was minor than the
filesize printed by ls -l
ls -l priv.edb

-rwxr--r-- 1 user group 5393883136 Apr 28 10:58 priv.edb

du priv.edb

4194364 priv.edb

df

df /dev/hda8 99396660  41994828  95201832  5% /mnt/data

My env: linux-2.4.26. /dev/hda8 is XFS, samba-3.0.2a Slack 9.1

Comments?

Marco Berizzi wrote:

I have switched back to samba 2.2.8a (compiled
from source) on linux 2.6.5: same behaviour.
Marco Berizzi wrote:

> Me again. I have upgraded to linux kernel
> 2.6.5. However this problem hasn't gone away.
> The md5 check is fine, coping the same file
> from NT4TSE to a Windoze 2000sp4.
> Coping the same file from a windoze 2000sp4
> to the samba share is ok. So the problem is
> between NT4TSE and samba.
>
> NT4TSE --> SAMBA = KO
> WIN2k  --> SAMBA = OK
> NT4TSE --> WIN2K = OK
>
> Can anybody help me?
> Marco Berizzi wrote:

> > Hello everybody.
> >
> > I'm experimenting this problem with
> > samba 3.0.2a and linux 2.4.25 with
> > ReiserFS.
> > When I copy (put) a large file (5GB)
> > from a Windows NT terminal server sp6a
> > to the samba-linux box, the md5sum is
> > different between the two file. Files
> > size are identical.
> > I'm using this command to copy these
> > files from windows to samba:
> >
> > xcopy f:\ \\mimas\backup\exchange /e /c /h /r
> >
> > I have also tried to delete the old
> > files from the samba share, but nothing
> > change: I always get two different md5sum.
> > With smaller files (400MB) md5sum is
> > identical.
> > When I transfer this large file with ftp
> > (proftpd 1.2.9 on Linux), md5sum is ok.
> >
> > These two systems are connected to a 3COM
> > 100bit/s switch. No collision/no error are
> > detected at linux side box. Samba doesn't
> > log anything relevant. No kernel error.
> > Nothing. Samba box is running Slackware 9.1
> > + kernel 2.4.25 + samba 3.0.2a compiled
> > from sources.
> >
> > Hints?
> >
> > PS: Please CC me I'm not subscribed to this list.
_
Protect your PC - get McAfee.com VirusScan Online 
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] password change on the domain password server using client tools

[Lieven VAN ACKER]

Hi,

I've setup samba to be a member of a windows 2000 (mixed mode) domain.
I'm using ldap client interface to access the AD on the W2K domain 
controller, in order to add users en groups.

Now, the final step to manage this config is to set the password of the 
users. As it seems hard to use the ldap interface to set the passwords, 
I've thought of using samba client tools, like smbpasswd or pdbedit or net 
commands.

I manage to use smbpasswd -r ADSERVER -U username to set the password 
interactively, pretending being user "username".

Thing is, there should be a way to change (or set initial) password as 
domain admin.

I tried using 

net rap password username "" newpass -U administrator%adminpass

but this doesn't seem to have the intended result (while it doesn't give me 
any indication of success or failure).

So if anybody could give me a clue, how to proceed to be able to change the 
ad password in a scriptable way, I'd be able to finish this integration 
exercise...

Regards,

Lieven


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Printers permissions

[Christian HAESSIG]

Hi Jerry, Hi everybody,

Thanks for your answer.

Yes, I use winbindd.
I had a better look on what happens, and I found out this :

when I run net getlocalsid, the answer is : SID for domain PRINTSRV2 is:

but the domain to which belongs this machine is not PRINTSRV2. Actuellay,
PRINTSRV2 is the netbios name of the samba server ( see conf files below ).

But the net ads join worked without any problem (the computer has been
created in AD), and the getent passwd and getent group returns all
users/groups of the AD domain to which belongs the samba server ; so winbind
seems to work.

Any idea ?
Do you need the log.smbd (in log level 10) ?

Below you will find my smb.conf global section and the krb5.conf file.

Christian


smb.conf :
   workgroup = D_IRCAD
   netbios name = PRINTSRV2
   client use spnego = yes
   unix charset = "UTF8"
   display charset = "UTF8"
   server string = %h server (Samba %v)
   wins support = no
   wins server = 192.168.0.1
   dns proxy = no
   log file = /var/log/samba/log.%m
   log level = 3
   winbind separator = +
   winbind enable local accounts = no
   idmap uid = 1-2
   idmap gid = 1-2
   winbind enum users = yes
   winbind enum groups = yes
   template homedir = /home/%D/%U
   template shell = /bin/bash
   security = ads
   password server = IRCADSRV
   realm = IRCAD.FR
   encrypt passwords = true
   passdb backend = tdbsam guest
   invalid users = root


krb5.conf :
[logging]
  default = FILE:/var/log/krb5/libs.log
  kdc = FILE:/var/log/krb5/kdc.log
  admin_server = FILE:/var/log/krb5/admin.log

[libdefaults]
  ticket_lifetime = 24000
  default_realm = IRCAD.FR
  default_tgs_enctypes = des-cbc-crc des-cbc-md5
  default_tkt_enctypes = des-cbc-crc des-cbc-md5
  forwardable = true
  proxiable = true
  dns_lookup_realm = true
  dns_lookup_kdc = true

[realms]
  IRCAD.FR = {
kdc = ircadsrv.ircad.fr:88
default_domain = ircad.fr
  }

 [domain_realm]
   .ircad.fr = IRCAD.FR
   ircad.fr = IRCAD.FR

 [kdc]
   profile = /var/kerberos/krb5kdc/kdc.conf

 [pam]
   debug = false
   ticket_lifetime = 36000
   renew_lifetime = 36000
   forwardable = true
   krb4_convert = false

> -Message d'origine-
> De : Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED]
> Envoye : lundi 19 avril 2004 19:37
> A : Christian HAESSIG
> Cc : [EMAIL PROTECTED]
> Objet : Re: [Samba] Printers permissions
>
>
> Christian HAESSIG wrote:
>
> > So, after check, I found out that the user SIDs seen on
>  > the samba server ARE NOT THE SAME as the ones on the AD domain
>  > controler ! Is this a samba bug ? The wbinfo command works fine,
>  > and returns me all users an groups from the AD domain ...
>
> Are you running winbindd ?
>
> > Another question : do I have to install the acl if I want
>  > to set specific permissions on the printers ? Or is
>  > acl only necessary for disk sharing ?
>
> smbd handles security descriptors for printers internally.
>
>
>
>
> cheers, jerry
>
> --
> Hewlett-Packard- http://www.hp.com
> SAMBA Team -- http://www.samba.org
> GnuPG Key   http://www.plainjoe.org/gpg_public.asc
> "...a hundred billion castaways looking for a home." --- Sting

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Windows printer drivers and Samba

[Stephen Kuhn]

Sorry ain't been on the list for a while...but I've lost all my archived
mails and need to get the following done on both 2.2.8a and 3.0.2:

* Printer is on linux box
* Need to have drivers for Windows on linux box
* Need to have Windows machines able to get drivers from linux box

I recall there was some way to get this done - or have I drank too much
beer?

stephen kuhn - owner
==
illawarra computer services
a kuhn media australia company
http://kma.0catch.com

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba