Re: [Samba] recovering files from .recyle

2004-05-21 Thread Matthias Spork
Robin M. wrote:
I have created a recylce bin following the how-to, but I cannot figure out
how end users can restore items from the samba recycle bin.
 

If you have this in your share:
   vfs object = recycle
   recycle:repository=.recycle/%U
   recycle:versions=True
   recycle:keeptree=True
every user can go to his recycle-folder and restore his own data.
matze
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Windows XP machine not connecting to Samba 3.04

2004-05-21 Thread Wolfgang Riedmann
Hi,

after the installation of Samba 3.04 (upgrade from 3.02) a single XP
notebook cannot connect to any share.

The log shows these messages:

[2004/05/17 11:48:18, 0] lib/util_sock.c:read_socket_data(367)
  read_socket_data: recv failure for 4. Error = Connection reset by
peer
[2004/05/17 11:48:18, 1] smbd/service.c:close_cnum(801)
  andreasxp (192.168.1.102) closed connection to service wolfgang
[2004/05/17 11:48:18, 1] smbd/service.c:close_cnum(801)
  andreasxp (192.168.1.102) closed connection to service Daten
[2004/05/17 11:50:46, 0] lib/substitute.c:alloc_sub_basic(505)
  alloc_sub_basic: NULL source string!  This should not happen

As far as I have understand the problem is on the client site, but
there seems to be something on the samba side because before the
upgrade the client could connect without any problem. In the same
network there are other Windows machines (Win98, W2K, XP), all with
the latest updates from Windows Update loaded.

This client can connect fine to another Samba server (2.2.8a) in the
same network (really it's a VMware virtual machine with Debian 8 on
my W2K notebook).

Can anyone point me in the direction where to seek? I have full
access to the notebook and can do any configuration changes.
The notebook is _not_ a part of the Samba owned NT domain (as the
normal PCs are).

Thank you very much for any help!

Wolfgang

--
-- Wolfgang Riedmann
-- Individuelle EDV-Lösungen - Soluzioni informatiche personalizzate
-- I-39012 Meran, V. Laurin-Str. 2d
-- http://www.riedmann.it - [EMAIL PROTECTED]


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] (no subject)

2004-05-21 Thread Scott Zimmerman
Oliver Schulze L. 

 oliver at samera.com.py

 

wrote: 

  

  Hi. 

  In WinXP I can setup the permission of a file so that a user can modify  

  the file, 

  but he can not delete the file. 

  

  

 I was wondering if someone could tell me how do what he is saying because
no matter what I do, using the everyone account, and disabling delete in
special - that disables the ability to edit files.  I have tried everything
I could even adding a second user with the same name denying the delete.
Please advise. 

  

 I want to have a user able to upload a file, edit a file, but not delete a
file.  But if you could at least tell me how to do the first one I would be
glad!

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SID of samba domain?

2004-05-21 Thread Simone
Hi, if I'm not wrong it should be: net getlocalsid
Cheers
Simone
At 19:47 20/05/2004, Jose Martinez wrote:
How do I find out the SID of my samba domain? And how do I migrate this SID
to another machine when I migrate my domain over.
PLEASE HELP!
Thanks
Jose
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

--
Email.it, the professional e-mail, gratis per te: http://www.email.it/f
Sponsor:
Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=d=21-5
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Win98 == Samba printing problem

2004-05-21 Thread Adina S
I used cups and Adobe drivers. I downloaded the
drivers from www.adobe.com, then a PostScript for HP
(I have that kind of printer), instaled localy the
driver on a win 98 machine, stored the files on the
samba server in /usr/share/cups/drivers and after that
cupaddsmb created the driver, pt it in print$ share,
WIN40/0 directory.  
Hope this helps
--- fredex [EMAIL PROTECTED] wrote:
 Using SAmba 3.0.2 and Cups 1.1.17.
 
 How does one configure a W98 box to print to a samba
 shared printer?
 
 Per my previous postings I can't figure it out, and
 the methods I've
 used on older Sambas don't work.
 
 I've been thru the lengthy discussion in the samba
 with cups documentation,
 which tells how to do it for NT or later, but not
 9x.
 
 I've posted the smb.conf before, won't put it here,
 for brevity.
 
 I'd appreciate a clue.
 
 Thanks.
 -- 
  Fred Smith -- [EMAIL PROTECTED]
 -
   The eyes of the Lord are
 everywhere, 
 keeping watch on the wicked and
 the good.
 - Proverbs 15:3 (niv)
 -
 

 ATTACHMENT part 1.2 application/pgp-signature 
 -- 
 To unsubscribe from this list go to the following
 URL and read the
 instructions: 
http://lists.samba.org/mailman/listinfo/samba





__
Do you Yahoo!?
Yahoo! Domains – Claim yours for only $14.70/year
http://smallbusiness.promotions.yahoo.com/offer 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


SV: [Samba] Samba 3.0.3 and NTBackup in WinXP

2004-05-21 Thread Mattias Larsson
Hi all, and myself. =)

I just figured I write a response to myself and others that might have the
same problem.

This problem was resolved by applying a patch for a bug in a path-check code
that also
Resulted in Macromedia Homesite not working with samba shares, seems that
both Homesite
And Ntbackup uses it's own routines for accessing shares.

This problem was resolved in bugID 1345.


 -Ursprungligt meddelande-
 Från: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] För 
 Mattias Larsson
 Skickat: den 14 maj 2004 16:41
 Till: [EMAIL PROTECTED]
 Ämne: [Samba] Samba 3.0.3 and NTBackup in WinXP
 
 Hello.
  
 We are having a really strange problem and I have been 
 searching the net all day for a answer.
  
 We are trying to restore files from NTBackup to a Samba share 
 using alternate pathing in ntbackup.
  
 The samba machine is a Solaris 8 machine with Samba 3.0.3 
 beeing a member of out AD domain.
  
 We map the samba share to Y:\ on the XP machine using a named 
 account in AD, with a local counterpart in the Solaris machine.
  
 When accessing this share through explorer.exe we can browse 
 the share and create files and dirrs without problem, when 
 trying to access it in ntbackup though we get access denied 
 right away.
  
 If I look at the log.smbd it doesn't even reflect this 
 attempt to restore files.
  
 We were using Samba 2.2.8 before but upgraded to be able to 
 support our new AD-users and it work without a problem in 
 samba 2.2.8 but not in samba 3.0.3.
  
 Does anyone know what kind of problem this can be? We have 
 the same configuration for the share in smb.conf as before.
  
 [prearken]
browseable = yes
hosts allow = .lm.se .intra.local
path = /prearken
valid users = djvukop
writeable = yes
  
 // Mattias Larsson
  
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] recovering files from .recyle

2004-05-21 Thread Mike Stewart
Hi Robin, sorry I can't help but I didn't know there was such an option
so I've looked at the how-to and it's not helping me :-( how did you set it
up as it's something I would really like to try.

The how-to I'm looking at is for Samba v3 but I'm using Samba 2.2.8a - do
you know if it's possible in that version ?

ATB

Mike

- Original Message - 
From: Robin M. [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, May 21, 2004 3:55 AM
Subject: [Samba] recovering files from .recyle


 I have created a recylce bin following the how-to, but I cannot figure out
 how end users can restore items from the samba recycle bin.

 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba




---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.687 / Virus Database: 448 - Release Date: 18/05/2004


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Valid users question

2004-05-21 Thread Simone
Hi, this worked for me:
valid users = '@DOMAINNAME\GROUP'
in my smb.conf I have valid users = '@DOMAINNAME\Domain Users' and I mapped 
'Domain Users' to unixgroup domusers.

Hope this helps
Ciao



At 01:05 21/05/2004, Michael Andrewjeski wrote:
Hi,
I've a question about the syntax of the valid users option. Any help is
greatly appreciated!
Here is the Background:
samba 3.0.4
Linux as Domain Member
Active Directory, not in Native Mode
Compiler opions: --with-winbind --with-pam --with-smbmount
The goal is to authenticate via the Windows Domain and allow access via
Windows groups.
The syntax in my smb.conf looks like this:
valid users = DOMAIN\SOMEGROUP
However, it doesn't work no matter what.
I can authenticate individual users thusly:
valid users = DOMAIN\SOMEUSER
I've read about the @ + and   syntax, but they only seem to
represent Unix  Nis groups.
Is there another way to represent Windows groups? Or is my config the
culprit?
Here's the conf file:
 smb.conf:
[global]
# workgroup = NT-Domain-Name or Workgroup-Name
workgroup = DOMAIN
# WINS service
winbind uid = 1-2
winbind gid = 1-2
winbind enum users = yes
winbind enum groups = yes
wins server = XXX.XXX.XXX.XXX
password server = *
server string = SAMBA
log file = /var/log/samba/%m.log
max log size = 0
log level =  10
security = domain
auth methods = guest sam ntdomain

encrypt passwords = yes
local master = no
dns proxy = no
[SOMESHARE]
   comment = Some Share
   path = /d1/articles
   public = no
   writable = yes
   printable = no
   valid users = DOMAIN\SOMEGROUP
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


--
Email.it, the professional e-mail, gratis per te: http://www.email.it/f
Sponsor:
Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=d=21-5
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Printing to Samba/Cups from Windows kills windows application.

2004-05-21 Thread Mark Vodden
Hi People,
 
I have just built a Samba 3.0.2 server using Suse Standard Server 8 and Cups
for printing.  Setting up printers and printing works fine for all of the
more modern printers, but older HP Laserjet 5N / 4 printers do not.  When
trying to print to them from Win 2k/XP the windows app that we're printing
from just dies, or gives a do you want to send error report to Microsoft.

 
I have tried all sorts of drivers and configurations for these printers and
they worked fine under Samba 2.2.8 on an old Caldera Linux server.  It also
seems as though there are no Postscript drivers for these printers, which
may not help!?
 
Any ideas?  Is it a bug with 3.0.2?
 
Many Thanks,
Mark.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] net ads join hangs forever

2004-05-21 Thread ww m-pubsyssamba

I believe this is a bug as I have posted exactly the same problem to this
list already including some debug info, nobody replied though
I have contacted Andrew Bartlett on this with some debug information and
am waiting for a reply. As its not just me I'll raise a bug in bugzilla,

thanks Andy Smith.

PS I've replicated the problem on Linux and Solaris and Kerberos is 
working correctly.



Aaron Grewell wrote:
| I am trying to join my Linux workstation to my ADS domain.
| Unfortunately, I'm not having much success.  net ads
| join hangs forever (or at least for more than 12 hours)
| when run.
...
| [2004/05/20 10:08:47, 0] libads/ldap.c:ads_add_machine_acct(1006)
|   Host account for cygnus already exists - modifying old account
| [2004/05/20 10:08:47, 5] libads/ldap_utils.c:ads_do_search_retry(56)
|   Search for (objectclass=*) gave 1 replies
|
| *
| After the LDAP search it hangs forever. :(
|

I would start by checking for any kerberos misconfigurations.
Just a gut feeling though.  Does kinit run ok ?

BBCi at http://www.bbc.co.uk/

This e-mail (and any attachments) is confidential and may contain personal views which 
are not the views of the BBC unless specifically
stated.
If you have received it in error, please delete it from your system. Do not use, copy 
or disclose the information in any way nor act in
reliance on it and notify the sender immediately. Please note that the BBC monitors 
e-mails sent or received.
Further communication will signify your consent to this.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.4: some problems with SWAT/STATUS and smbstatus

2004-05-21 Thread Toni Verdu Carbo
Hi,
I just installed Samba 3.0.4 on a Solaris 2.6 server. I had no
problem compiling, intalling and configuring it, and everything seems to go
OK. People can connect to all the configured shares without any problem.
But I have some problems when getting server status either via
SWAT/STATUS or using smbstatus:
First, in the Client field of the SWAT/STATUS report I have
problems translating IPs to computer names. Sometimes the client is listed
with its name, but sometimes with its IP. Sometiems the same machine can be
listed by name, and later only by the IP... Usually I have a mixed listing
in the Client colums, with some clients listed by name and others by IP. I
dont know what's wrong. The same occurs with smbstatus...
Second, when using smbstatus I never get any information in the
PID/Username/Group/Machine part of the report, while with SWAT/STATUS I
always get full Active Connections, Active Shares and Open Files parts
of the report. As an example, I copy the output of a tipical smbstatus:
Samba version 3.0.4
PID Username  Group Machine 
---

Service  pid machine   Connected at
---
x16894   computer1Fri May 21 11:46:57 2004
y16894   computer1   Fri May 21 11:46:57 2004
z16940   aaa.bbb.ccc.ddd  Fri May 21 11:45:35 2004
z17071   computer3   Fri May 21 11:48:38 2004
x16908   aaa.bbb.ccc.eee  Fri May 21 11:44:34 2004
Locked files:
PidDenyMode   Access  R/WOplock   Name
--
16908  DENY_NONE  0x2019f RDWR   EXCLUSIVE+BATCH /somepath/somefile
Fri May 21 11:44:34 2004
Here you can see the empty first part of the report (as ALWAYS), and also
the mixed machine listing (with names and IPs instead of only names...).
Any idea?
Thanks!
Toni
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Printing to Samba/Cups from Windows kills windows application.

2004-05-21 Thread [EMAIL PROTECTED]
From: Mark Vodden [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: [Samba] Printing to Samba/Cups from Windows kills
windows application.
Date: Fri, 21 May 2004 10:42:45 +0100

- Original Message Follows -
 Hi People,

 I have just built a Samba 3.0.2 server using Suse Standard
 Server 8 and Cups for printing.  Setting up printers and
 printing works fine for all of the more modern printers,
 but older HP Laserjet 5N / 4 printers do not.  When trying
 to print to them from Win 2k/XP the windows app that we're
 printing from just dies, or gives a do you want to send
 error report to Microsoft.


 I have tried all sorts of drivers and configurations for
 these printers and they worked fine under Samba 2.2.8 on
 an old Caldera Linux server.  It also seems as though
 there are no Postscript drivers for these printers, which
 may not help!?

 Any ideas?  Is it a bug with 3.0.2?

 Many Thanks,
 Mark.
 --
 To unsubscribe from this list go to the following URL and
 read the instructions:
 http://lists.samba.org/mailman/listinfo/samba

I just upgrade a box from 2.2 to 3.0 and had a similar
problem.  I solved as follows.  I used cups to set up a raw
queue for the HP printer.  Changed Windows client to print
via that raw queue.

Prior to that Under Samba 2.2 (cups ?.?) from Suse, my Linux
and Windows boxes could print from the same cups queue which
was set up for a HP printer.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] net ads join hangs forever

2004-05-21 Thread ww m-pubsyssamba
logged on bugzilla, id   1370

thanks Andy.



I believe this is a bug as I have posted exactly the same problem to this
list already including some debug info, nobody replied though
I have contacted Andrew Bartlett on this with some debug information and
am waiting for a reply. As its not just me I'll raise a bug in bugzilla,

thanks Andy Smith.

PS I've replicated the problem on Linux and Solaris and Kerberos is 
working correctly.



Aaron Grewell wrote:
| I am trying to join my Linux workstation to my ADS domain.
| Unfortunately, I'm not having much success.  net ads
| join hangs forever (or at least for more than 12 hours)
| when run.
...
| [2004/05/20 10:08:47, 0] libads/ldap.c:ads_add_machine_acct(1006)
|   Host account for cygnus already exists - modifying old account
| [2004/05/20 10:08:47, 5] libads/ldap_utils.c:ads_do_search_retry(56)
|   Search for (objectclass=*) gave 1 replies
|
| *
| After the LDAP search it hangs forever. :(
|

I would start by checking for any kerberos misconfigurations.
Just a gut feeling though.  Does kinit run ok ?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Printing to Samba/Cups from Windows kills windows app lication.

2004-05-21 Thread Mark Vodden
Hi,

I have tried using a raw print queue with no drivers and printed from the
windows end.  Still Word or other app being printed from dies and no print
request appears in the servers logs.

Any more ideas?

Cheers,
Mark. 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: 21 May 2004 10:27
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] Printing to Samba/Cups from Windows kills windows
application.

From: Mark Vodden [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: [Samba] Printing to Samba/Cups from Windows kills windows
application.
Date: Fri, 21 May 2004 10:42:45 +0100

- Original Message Follows -
 Hi People,

 I have just built a Samba 3.0.2 server using Suse Standard Server 8 
 and Cups for printing.  Setting up printers and printing works fine 
 for all of the more modern printers, but older HP Laserjet 5N / 4 
 printers do not.  When trying to print to them from Win 2k/XP the 
 windows app that we're printing from just dies, or gives a do you 
 want to send error report to Microsoft.


 I have tried all sorts of drivers and configurations for these 
 printers and they worked fine under Samba 2.2.8 on an old Caldera 
 Linux server.  It also seems as though there are no Postscript drivers 
 for these printers, which may not help!?

 Any ideas?  Is it a bug with 3.0.2?

 Many Thanks,
 Mark.
 --
 To unsubscribe from this list go to the following URL and read the 
 instructions:
 http://lists.samba.org/mailman/listinfo/samba

I just upgrade a box from 2.2 to 3.0 and had a similar problem.  I solved as
follows.  I used cups to set up a raw queue for the HP printer.  Changed
Windows client to print via that raw queue.

Prior to that Under Samba 2.2 (cups ?.?) from Suse, my Linux and Windows
boxes could print from the same cups queue which was set up for a HP
printer.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] net ads join hangs forever

2004-05-21 Thread Andrew Bartlett
On Fri, 2004-05-21 at 19:43, ww m-pubsyssamba wrote: 
 
 I believe this is a bug as I have posted exactly the same problem to this
 list already including some debug info, nobody replied though
 I have contacted Andrew Bartlett on this with some debug information and
 am waiting for a reply. As its not just me I'll raise a bug in bugzilla,
Sorry about the delay, and thanks for keeping on it.

   thanks Andy Smith.
 
 PS I've replicated the problem on Linux and Solaris and Kerberos is 
 working correctly.

Did you manage to valgrind it?

 
 
 
 Aaron Grewell wrote:
 | I am trying to join my Linux workstation to my ADS domain.
 | Unfortunately, I'm not having much success.  net ads
 | join hangs forever (or at least for more than 12 hours)
 | when run.
 ...
 | [2004/05/20 10:08:47, 0] libads/ldap.c:ads_add_machine_acct(1006)
 |   Host account for cygnus already exists - modifying old account
 | [2004/05/20 10:08:47, 5] libads/ldap_utils.c:ads_do_search_retry(56)
 |   Search for (objectclass=*) gave 1 replies
 |
 | *
 | After the LDAP search it hangs forever. :(
 |
 
 I would start by checking for any kerberos misconfigurations.
 Just a gut feeling though.  Does kinit run ok ?

In the trace, it appears that the server just never replies to the 'set
password' request.

We sit around forever, waiting for the reply, rather than resending it
(it is a UDP based request) or timing out.

This is krb5_setpw.c:do_krb5_kpasswd_request()

Andrew Bartlett


-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] net ads join hangs forever

2004-05-21 Thread ww m-pubsyssamba

Did you manage to valgrind it?

##
##Yes, I've sent it through to you last week, didn't you recieve it?
##If not I've attached all the out put to the bugzilla bug 1370
## thanks Andy.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem with VFS audit and recycle (fwd)

2004-05-21 Thread William R. Knox
I have included a level 10 debug of the vicinity of the failure in the
debug log - if anyone would like more detail, I would be happy to provide
it. Just so as to help to rule out my environment or how I built samba, is
there anyone using the vfs objects parameter successfully on Solaris 8?
Please feel free to respond to me individually so as to not flood the list
if I am being a bonehead and this is a problem that only Giovanni and I
are having. Thanks.

[2004/05/20 14:52:50, 3] smbd/vfs.c:vfs_init_default(203)
  Initialising default vfs hooks
[2004/05/20 14:52:50, 3] smbd/vfs.c:vfs_init_custom(229)
  Initialising custom vfs hooks from [audit]
[2004/05/20 14:52:50, 5] lib/module.c:smb_probe_module(101)
  Probing module 'audit'
[2004/05/20 14:52:50, 5] lib/module.c:smb_probe_module(112)
  Probing module 'audit': Trying to load from /usr/local/lib/vfs/audit.so
[2004/05/20 14:52:50, 0] lib/module.c:do_smb_load_module(57)
  Error trying to resolve symbol 'init_module' in /usr/local/lib/vfs/audit.so: 
ld.so.1: /usr/local/sbin/smbd: fatal: _nss_files_netgroup_constr: can't find symbol
[2004/05/20 14:52:50, 0] smbd/vfs.c:vfs_init_custom(256)
  Can't find a vfs module [audit]
[2004/05/20 14:52:50, 0] smbd/vfs.c:smbd_vfs_init(319)
  smbd_vfs_init: vfs_init_custom failed for audit
[2004/05/20 14:52:50, 0] smbd/service.c:make_connection_snum(502)
  vfs_init failed for service Windows software

Bill Knox
Lead Operating Systems Programmer/Analyst
The MITRE Corporation

On Tue, 18 May 2004, William R. Knox wrote:

 Date: Tue, 18 May 2004 08:51:39 -0400 (EDT)
 From: William R. Knox [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: [Samba] Problem with VFS audit and recycle (fwd)

 This problem continues under 3.0.4 on Solaris 8 - attempting to use the
 vfs object parameter in a share prevents access to the share and results
 in the following in the log files:

 [2004/05/10 16:04:57, 0] lib/module.c:do_smb_load_module(57)
   Error trying to resolve symbol 'init_module' in
 /usr/local/lib/vfs/audit.so: ld.so.1: /usr/local/sbin/smbd: fatal:
 _nss_files_netgroup_constr: can't find symbol
 [2004/05/10 16:04:57, 0] smbd/vfs.c:vfs_init_custom(256)
   Can't find a vfs module [audit]
 [2004/05/10 16:04:57, 0] smbd/vfs.c:smbd_vfs_init(319)
   smbd_vfs_init: vfs_init_custom failed for audit
 [2004/05/10 16:04:57, 0] smbd/service.c:make_connection_snum(502)
   vfs_init failed for service Admin area

 Access to the other shares remains unaffected. This is currently happening
 with ANY module that I have used, not just audit. I would be happy to
 perform any stack trace that is required - however, smbd does not appear
 to be panicking, so I am unsure exactly how to proceed with that.

   Bill Knox
   Lead Operating Systems Programmer/Analyst
   The MITRE Corporation

 -- Forwarded message --
 Date: Wed, 08 Oct 2003 13:56:18 +0200
 From: Giovanni Romanenghi [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: [Samba] Problem with VFS  audit e recycle

 I have compiled samba 3.0 on solaris 8 with default options. It's ok.
 I have problem with the parameters vfs objects.
 This is my smb.conf
   Global parameters
 [global]
  workgroup = SAMBATESTPDC
  netbios name = samba3sun
  preferred master = Yes
  domain master = Yes
  wins support = Yes
  domain logons = yes
  local master = yes
  encrypt passwords = yes
  security = user
  ldap suffix = o=arcafondi,c=it
  ldap machine suffix = ou=people,o=samba,c=it
  ldap user suffix = ou=people,o=samba,c=it
  ldap group suffix = ou=group
  ldap admin dn = uid=sambauser,cn=config
  ldap ssl = no
  passdb backend =  ldapsam:ldap://10.10.5.160/ guest
  ldap passwd sync = yes
  logon home =
  logon path =
  admin users = @helpdesk

 [netlogon]
  path = /samba/netlogon
  comment = Netlogon

 [home]
  comment = Cartelle Personali
  path = /sambapriv
  read only = No
  create mask = 0777
  directory mask = 0777

 [test]
  comment = Cartelle Condivise dal gruppo
  path = /sambapub
  read only = No
  create mask = 0777
  directory mask = 0777
  vfs object = recycle
  recycle: repository = .recycle
  recycle: version=True
  recycle: touch=True
  recycle: keeptree=True
  recycle: noversion = *.doc|*.xls|*.ppt
  recycle: exclude = *.tmp *.temp *.cache
  recycle: maxsize = 0

 With the home share i don't have a problem . With the test share I have
 this error on the file log.smbd
 Error trying to resolve symbol 'init_module' in
 /sambabin/samba/lib/vfs/recycle.so: ld.so.1: ./smbd: fatal:
 _nss_files_netgroup_constr: can't find symbol
 [2003/10/08 

[Samba] 99% CPU utilization

2004-05-21 Thread Gary MacKay
I've had samba 3.x installed since it came out. It's been working just fine 
until two days ago. I've changed nothing. (I know, you've heard that before, 
but I swear it is true) Two days ago my applications started to drag. I 
putty'd in and saw the smbd process taking over 95% CPU. I searched the 
archives all the way back to September '03. Manually, I might add. I did not 
see a search button anywhere. What a pain. Anyway, I found a lot of people 
with the same problem and NO answers. I've restarted samba, then did the 
Microsoft thing and restarted the whole server. Neither impressed it any. Some 
replies in the ng refer to damaged .tdb files, but again, no way to fix it.

Does anyone have an answer
- Gary
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba 3 + Win2k = Headache

2004-05-21 Thread Shannon Johnson
Well, the ldap/AD part may be moot now... I got the cifs module inserted
into the kernel, but now I can't get anything to mount with it. I issue
the command:

mount -t smbfs //192.168.0.2/home /home/test -o username=test

It asks me for a password, I enter it, and it mounts... everything's
good. However, when I try:

mount -t cifs //192.168.0.2/home /home/test -o user=test (I've
also tried username=test)

It asks for a password, then gives me an error:

mount error 22 = Invalid argument
Refer to the mount.cifs(8) manual page (e.g.man mount.cifs)

In the /var/log/messages (syslog), it says:

CIFS VFS: Error -32 sending data on socket to server.
CIFS VFS: cifs_mount failed w/return code = -5

I've also tried enabling the debug mode:

echo 1  /proc/fs/cifs/cifsFYI

It doesn't give any more information. The server (again, Samba 3.0.5svn)
doesn't record anything in any logs, from what I can tell. 

Does anybody have any idea what's going on and how to fix it?

Shannon


 
Shannon Johnson
Network Support Specialist / Systems Administrator
Dept. of Mechanical and Nuclear Engineering
224 Reber Building
University Park, PA 16802
Phone: (814) 865-8267

 
 -Original Message-
 From: tms3 [mailto:[EMAIL PROTECTED]
 Sent: Thursday, May 20, 2004 5:30 PM
 To: Paul Gienger
 Cc: Shannon Johnson; [EMAIL PROTECTED]
 Subject: Re: [Samba] Samba 3 + Win2k = Headache
 
 Yep.  And you can populate ADS with the ldap stuff, automatically, but
 only one way.  From ldap to W2k.  I've got an overview on this form
the
 University of Michigain, but at the office.  On vacation till tuesday.
 
 Paul Gienger wrote:
 
 
 
  Shannon Johnson wrote:
 
  From what I can gather, you've got
  2003 AD doing user management
  RHEL for a (home) fileserver
  Clients of all flavors
 
  Have you thoroughly investigated just using nfs and autofs to do
home
  directory mounting and decided you can't use it for one reason or
  another?  What are those reasons?  You'd probably have less
headache
  using nfs in a unix client - unix server environment, after all,
 
 
  that's
 
 
  what NFS is good for.
 
 
 
  Win2000 server, not 2k3... but essentially correct. NFS won't work
  because since we're doing authentication through winbind, all of
the
  uid's are different on each linux client. We've tried loading the
  Services for Unix on the server, and assigning UID's, then using
the
  idmap_ad as the idmap backend, but I'm actually not sure how it
works,
  so I can't thoroughly explore it (the documentation apparently
doesn't
  exist?). The only thing I can check is getent passwd which
returns
 the
  UID winbind came up with on its own (through its own methods... not
 from
  AD).
 
 
  For that I would suggest using a central LDAP repository for your
  idmap backend on all machines.  If that's all you need to do to get
it
  going with nfs, that's a not-too-tough situation to solve.  You
don't
  have to go through the (somtimes painful) samba/ldap setup, you just
  need a basic ldap server with one idmap tree in it.  What are you
  using for your unix auth now?  since it sounds like you've got a few
  unix machines, ldap is a good fit there too, unless you've got
  something else that's tied in to your organization that you'd have
to
  rebuild...
 
  Also, we are sharing files in a cross-platform environment... We
needed
  to have the same file space, using the same quota for all of the
users
  in the department.
 
  What is enforcing your quotas?  2K or unix machine?
 
  That's why Samba seemed like such a perfect fit.
  Windows maps the user's home directory from the Samba server via
SMB,
  and the Linux users do the same. That's when the symbolic and hard
link
  problems come into play...
 
 
 
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Renaming user in Samba 3

2004-05-21 Thread Mi
Hello,
I need to rename a few users: change their login, but leave everything else 
as is, like their password, etc.

On the Linux side usermod seems to have done what I wanted:
  usermod -l $newname -c $newfullname -d /home/$newname -m $oldname
For Samba, I cannot find any command or option to pdbedit that would do that.
Before, I could have edited smbpasswd by hand, but now it seems everything 
is in /var/lib/samba/passdb.tdb.

I am using smbd version 3.0.2a-Debian, and my smb.conf has
  passdb backend = tdbsam
Thanks for any help,
Mi
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Having issues with rpcclient's adddriver

2004-05-21 Thread Kurt Pfeifle
Tim Kent tim.kent at wkconsulting.com.au
Tue May 18 01:09:20 GMT 2004
Hi,
I'm trying to add a Windows NT/2000 OKI C5100 print driver to a Samba 
2.2.3a server. 
Can't you try to use a more current Samba version?
(The most current versions have support for the version tag of
printer drivers...)
I've been told that this driver does some server-side 
stuff, so I'll have to use 'adddriver' in rpcclient.

I've read the manual page for rpcclient, and I printed out a 'Windows 
2000 Printer Test Page' to get all the relevant information.

This is probably just something simple, but I've checked this out a 
couple of times and keep getting a syntax error.  Do I have too many 
files listed, and if so do I need all of these listed files?

tim at test:~$ rpcclient test -U root
INFO: Debug class all level = 2   (pid 9287 from pid 9287)
Enter Password:
session setup ok
Domain=[TEST] OS=[Unix] Server=[Samba 2.2.3a-13 for Debian]
rpcclient $ adddriver Windows NT x86 OKI 
C5100:IMFNT4.DLL:OPHCWDDM.SDD:SDNTOK.DLL:OP51ENU.HLP:\
OKI HiperC Language Monitor:RAW:ABEXPW32.DLL,CANLKN.PRF,CNNbapie.DLL,\
CNNsCore.DLL,CNPPDCE.DLL,CNXADR.DLL,CNXCOV1.EMF,CNXCOV2.EMF,\
CNXCOV3.EMF,CNXCOVL.EMF,CNXCR.DLL,CNXDMAN.DLL,CNXECR.DLL,CNXP5EE.DLL,\
CNXP5EE0.CNT,CNXP5EE0.HLP,CNXP5EEP.DLL,CNXP5EEU.DLL,CNXPRASX.DLL,\
CNZ005N.ICC,CNZ006N.ICC,CNZ007N.ICC,CNZE15N.ICC,CNZE18N.ICC,\
CNZE21N.ICC,CNZN15N.ICC,CNZN18N.ICC,CNZN21N.ICC,CNZP15N.ICC,\
CNZP18N.ICC,CNZP21N.ICC,CnP5eE.DLL,CnP5eE0.CNT,CnP5eE0.HLP,\
CnP5eEUI.DLL,CnP5eEUM.DLL,DCS.DLL,DCSTBL.DLL,GP300FK.XPD,GP300PK.XPD,\
IMF32.DLL,IMFPRINT.DLL,ML51NSAR.DLL,OK001U2H.CAP,OK009U0H.CCM,\
OK714NHE.VER,OMRDM32.DLL,OP5100.DAT,OP5100.UNZ,OP51ICB.BIN,\
OPCLB002.DLL,OPCST000.DLL,OPDMN004.DLL,OPDVA002.DLL,OPHCRENU.DLL,\
OPHCSENU.DLL,OPHCWDDM.DLL,OPHCWDUI.DLL,OPHCWINF.DAT,OPHCWM00.DAT,\
OPHCWNXS.DLL,OPHCWNXT.DLL,OPHCWS00.DAT,OPNE000C.SCR,OPRCL000.DLL,\
OPS00ENU.DLL,OPS00JPN.DLL,OPUSB000.DLL,QDPRIOK.DLL,RDMWIN32.DLL,\
SDDM.INI,SDDMOK.DLL,SDDMUK.DLL,SDIMFOK.DLL,SDNTUM4.DLL,SDOK.DLL,\
SQMCODER.DLL,SROK.DLL,ZENOCMM.DLL,ZENOICM.DLL,ZGDIOK.DLL,ZLANG.DLL,\
ZSPOOL.DLL,ZSPOOLOK.EXE,ZTAG32.DLL
Usage: adddriver Environment\
 Long Printer Name:Driver File Name:Data File Name:\
 Config File Name:Help File Name:Language Monitor Name:\
 Default Data Type:Comma Separated list of Files

I know that looks like a very long list, but that's what the 'Windows 
2000 Printer Test Page' told me!  I'm assuming that most of those files 
are related to some kind of monitor that I could perhaps do without.

The adddriver subcommand expects (for Windows NT/2000) to find
all the files in the [print$]/W32X86/ subdirectory. It then
moves the files into [print$]/W32X86/2/ and creates the fake
registry entries (in the *.tdb files) for the driver.
If your adddriver command fails once (for one reason or another,
like mistyping anything), you can't repeat it without makeing sure
that all initial files are still in [print$]/W32X86/. Your failed
first adddriver command may have moved away all or part of the files.
Your second attempt at the adddriver command now will fail because
it doesn't find the files you reference.
Lastly, I'd recommend to run the command all in one:
 rpcclient -Uroot%passwd -c 'adddriver Windows NT x86 OKI:yada:...' 
sambahostname
As far as my syntax is concerned I have the files in the right order.
It looks like your syntax is OK. But I remember having had problems
with 2.2.3a and adddriver. If nothing else works, an upgrade to
3.0.4 should help
Cheers,
Tim
Cheers,
Kurt
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] recovering files from .recyle

2004-05-21 Thread Robin M.
On Fri, 21 May 2004, Mike Stewart Top-Posted:

 Hi Robin, sorry I can't help but I didn't know there was such an option
 so I've looked at the how-to and it's not helping me :-( how did you set it
 up as it's something I would really like to try.

 The how-to I'm looking at is for Samba v3 but I'm using Samba 2.2.8a - do
 you know if it's possible in that version ?

I have not tried version 2 of samba but I have read the documentation for
version two and it seems to have all the same features, althoug the syntax
is slightly different. This is what I have in my smb.conf. So far I can
see that a directory .recycle is created but it does not show up in my
windows browser, yet. I still have to get to the point where users can
restore items.


snip
;recyclebin options for samba version 3
recycle:exclude = *.tmp *.temp *.o *.obj ~$*
recycle:keeptree = True
recycle:touch = True
recycle:versions = True
recycle:noversions = .doc|.xls|.ppt
recycle:repository = .recycle
recycle:maxsize = 1000
create mask = 0777
directory mask = 0777
vfs objects = recycle
/snip
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] pdbedit + ldap doesn't work

2004-05-21 Thread Umberto Zanatta
I have to add new user to samba; I've just upgrade the system to 3.0.4
and smbldap-tools 3.0.4;
# smbldap-useradd pippo
# smblap-usershow pippo
n: uid=pippo,ou=People,o=PROVTV
objectClass: top,inetOrgPerson,posixAccount,shadowAccount
cn: pippo
sn: pippo
uid: pippo
uidNumber: 4000
gidNumber: 513
homeDirectory: /home//pippo
loginShell: /bin/bash
gecos: System User
description: System User
userPassword: {crypt}x
# pdbedit -a -u pippo
ldapsam_add_sam_account: Adding new user
init_ldap_from_sam: Setting entry for user: pippo
ldapsam_modify_entry: Failed to add user dn= uid=pippo,ou=People,
o=PROVTV with: Already exists
ldapsam_add_sam_account: failed to modify/add user with uid = pippo (dn
= uid=pippo,ou=People,o=PROVTV)
Unable to add user! (does it already exist?)
The system's tryng to add a new uid!
# smbldap-userdel pippo
# pdbedit -a -u pippo
Searching for:[((objectClass=sambaDomain)(sambaDomainName=PROVTVNT))]
smbldap_open_connection: connection opened
ldap_connect_system: succesful connection to the LDAP server
Searching for:[((objectClass=sambaDomain)(sambaDomainName=PROVTVNT))]
smbldap_open_connection: connection opened
ldap_connect_system: succesful connection to the LDAP server
could not create account to add new user pippo
any idea?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] pdbedit + ldap doesn't work

2004-05-21 Thread daves-jr




Try use smbpasswd -a pippo

---
Emerson Henrique Kfuri Pereira

Divisão de Atendimento e Consultoria
CECOM - Reitoria - UFMG
Telefone: 34994009
---


   
 Umberto Zanatta   
 [EMAIL PROTECTED] 
 ia.treviso.it   Para
 Enviado Por:  [EMAIL PROTECTED]   
 samba-bounces+dav  cc
 [EMAIL PROTECTED]   
 ts.samba.org  Assunto
   [Samba] pdbedit + ldap doesn't work
   
 21/05/2004 12:09  
   
   
   
   




I have to add new user to samba; I've just upgrade the system to 3.0.4
and smbldap-tools 3.0.4;

# smbldap-useradd pippo
# smblap-usershow pippo
n: uid=pippo,ou=People,o=PROVTV
objectClass: top,inetOrgPerson,posixAccount,shadowAccount
cn: pippo
sn: pippo
uid: pippo
uidNumber: 4000
gidNumber: 513
homeDirectory: /home//pippo
loginShell: /bin/bash
gecos: System User
description: System User
userPassword: {crypt}x

# pdbedit -a -u pippo
ldapsam_add_sam_account: Adding new user
init_ldap_from_sam: Setting entry for user: pippo
ldapsam_modify_entry: Failed to add user dn= uid=pippo,ou=People,
o=PROVTV with: Already exists

ldapsam_add_sam_account: failed to modify/add user with uid = pippo (dn
= uid=pippo,ou=People,o=PROVTV)
Unable to add user! (does it already exist?)

The system's tryng to add a new uid!

# smbldap-userdel pippo
# pdbedit -a -u pippo
Searching for:[((objectClass=sambaDomain)(sambaDomainName=PROVTVNT))]
smbldap_open_connection: connection opened
ldap_connect_system: succesful connection to the LDAP server
Searching for:[((objectClass=sambaDomain)(sambaDomainName=PROVTVNT))]
smbldap_open_connection: connection opened
ldap_connect_system: succesful connection to the LDAP server
could not create account to add new user pippo

any idea?

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] pdbedit + ldap doesn't work

2004-05-21 Thread Umberto Zanatta
I've done it... but it's the same!
provtvlp:~ # smbpasswd -a pippo
New SMB password:
Retype new SMB password:
ldapsam_modify_entry: Failed to add user dn= uid=pippo,ou=People, 
o=PROVTV with: Already exists

ldapsam_add_sam_account: failed to modify/add user with uid = pippo (dn  
= uid=pippo,ou=People,o=PROVTV)
Failed to add entry for user pippo.
Failed to modify password entry for user pippo

On 21/05/2004 17:30:03, [EMAIL PROTECTED] wrote:


Try use smbpasswd -a pippo
---
Emerson Henrique Kfuri Pereira
Divisão de Atendimento e Consultoria
CECOM - Reitoria - UFMG
Telefone: 34994009
---

 Umberto Zanatta
 [EMAIL PROTECTED]
 ia.treviso.it
Para
 Enviado Por:  [EMAIL PROTECTED]
 samba-bounces+dav
 cc
 [EMAIL PROTECTED]
 ts.samba.org
Assunto
   [Samba] pdbedit + ldap doesn't
work
 21/05/2004 12:09






I have to add new user to samba; I've just upgrade the system to  
3.0.4
and smbldap-tools 3.0.4;

# smbldap-useradd pippo
# smblap-usershow pippo
n: uid=pippo,ou=People,o=PROVTV
objectClass: top,inetOrgPerson,posixAccount,shadowAccount
cn: pippo
sn: pippo
uid: pippo
uidNumber: 4000
gidNumber: 513
homeDirectory: /home//pippo
loginShell: /bin/bash
gecos: System User
description: System User
userPassword: {crypt}x
# pdbedit -a -u pippo
ldapsam_add_sam_account: Adding new user
init_ldap_from_sam: Setting entry for user: pippo
ldapsam_modify_entry: Failed to add user dn= uid=pippo,ou=People,
o=PROVTV with: Already exists
ldapsam_add_sam_account: failed to modify/add user with uid = pippo
(dn
= uid=pippo,ou=People,o=PROVTV)
Unable to add user! (does it already exist?)
The system's tryng to add a new uid!
# smbldap-userdel pippo
# pdbedit -a -u pippo
Searching for:[((objectClass=sambaDomain) 
(sambaDomainName=PROVTVNT))]
smbldap_open_connection: connection opened
ldap_connect_system: succesful connection to the LDAP server
Searching for:[((objectClass=sambaDomain) 
(sambaDomainName=PROVTVNT))]
smbldap_open_connection: connection opened
ldap_connect_system: succesful connection to the LDAP server
could not create account to add new user pippo

any idea?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba+cups printing a banner

2004-05-21 Thread Kurt Pfeifle
Vit vmf11 at hotmail.com
Mon May 17 19:46:17 GMT 2004
i set up a print server using samba and cups and 
it seems to be working fine but in my environment 
it is vital for each printjob to have a banner with 
netbios name on it.
eg i have 700 public computers and 4 printers so i 
need each computer to print a banner with the hostname 
to distinguish who prints what. i tried to set it up on 
the client side but it doesnt seem to be working.
any help would be greatly appreciated. 10x

You should use the CUPS PostScript drivers for Win NT/2K/XP
on your clients (Win 95/98/ME are not supported). They are
the only ones to support CUPS banners.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] cupsaddsmb

2004-05-21 Thread Kurt Pfeifle
Matteo matteo at ilteo.it
Thu May 20 21:50:34 GMT 2004
HI!
I've a problem with cupsaddsmb!! :-(
You'd surely harvest a more definite answer if you
had spiced the question seed with some version info
about CUPS, Samba and the OS-s you're using...
At the console I type:
cupsaddsmb -U root -v printername
and after some operations complete correctly appear this error:
[...]
Running command: rpcclient localhost -N -U'root%' -c 'adddriver Windows NT
x86
eps6100l:cupsdrv5.dll:eps6100l.ppd:cupsui5.dll:cups5.hlp:NULL:RAW:NULL'
cmd = adddriver Windows NT x86
eps6100l:cupsdrv5.dll:eps6100l.ppd:cupsui5.dll:cups5.hlp:NULL:RAW:NULL
Printer Driver eps6100l successfully installed.
Running command: rpcclient localhost -N -U'root%' -c 'setdriver eps6100l
eps6100l'
cmd = setdriver eps6100l eps6100l
result was NT_STATUS_UNSUCCESSFUL
This last error is typically showing up if your printer eps61001
is not yet known to Samba. This may happen if you just installed
that printer freshly in CUPS and run cupsaddsmb before doing a
   kill -HUP `pidof smbd`
The most recent Samba version (3.0.4) shouldn't require this any
more. But older versions only learn about these printers which
are available at smbd startup, and don't auto-learn new printers
added during smbd runtime.
Why rpcclient can't associate my shared printer with the successfully
installed printer driver?
Likely because the shared printer doesn't exist from Samba's
point of view...
Check it with
   rpcclient -Uroot%smbpassword -c enumprinters sambahostname
What is the matter?
Any idea?
Thanks!
ilteo
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Peter Bouton

2004-05-21 Thread Yodabesst
Hope I got the right Peter Bouton of Champaign Ill.  My name Cathy 
Suhor...remember me?  Hope God's light is shining on you  your family.  I think of 
you 
often...endearingly.

Cathy Suhor-Weed
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] SaMBa - Converting from NTLM to ADS environment, but not all at once.

2004-05-21 Thread guyverdh
Hi,

We are in the process of migrating from Windows NT4 Servers to Windows 2k/2k03
Servers in an AD environment.

Due to the user count, we are rolling this out in stages.

All of our SaMBa servers currently authenticate to the NT Domain servers.

With some users switching over to XP/AD, they can no longer authenticate/map to
the SaMBa shares.

While I know I can change the security entry to point to ADS, what I need to be
able to do is authenticate to either the NT Domain or the AD environment,
depending on where the user is authenticated.

Can this be done?  If so, how?

Thanks,

Larry
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Valid users question

2004-05-21 Thread Michael Andrewjeski
Ahhh, yes!  Of course!  I should have recognized it!
 
Naturalmente la singola citazione!
Dovrei realizzare questo io stesso. 
 
Grazie molto Simone!
 
Best regards
Mike
-Original Message-
From: Simone [mailto:[EMAIL PROTECTED] 
Sent: Friday, May 21, 2004 2:17 AM
To: Michael Andrewjeski; [EMAIL PROTECTED]
Subject: Re: [Samba] Valid users question



Hi, this worked for me:



valid users = '@DOMAINNAME\GROUP' 

in my smb.conf I have valid users = '@DOMAINNAME\Domain Users'
and I
mapped 'Domain Users' to unixgroup domusers.

Hope this helps

Ciao







At 01:05 21/05/2004, Michael Andrewjeski wrote:



Hi,

I've a question about the syntax of the valid users
option. Any help is
greatly appreciated!

Here is the Background:

samba 3.0.4 
Linux as Domain Member 
Active Directory, not in Native Mode
Compiler opions: --with-winbind --with-pam
--with-smbmount 

The goal is to authenticate via the Windows Domain and
allow access via
Windows groups.

The syntax in my smb.conf looks like this:

valid users = DOMAIN\SOMEGROUP

However, it doesn't work no matter what. 

I can authenticate individual users thusly:

valid users = DOMAIN\SOMEUSER

I've read about the @ + and   syntax, but they
only seem to
represent Unix  Nis groups. 

Is there another way to represent Windows groups? Or is
my config the
culprit?
Here's the conf file:

 smb.conf:

[global]

# workgroup = NT-Domain-Name or Workgroup-Name
workgroup = DOMAIN

# WINS service
winbind uid = 1-2
winbind gid = 1-2
winbind enum users = yes
winbind enum groups = yes
wins server = XXX.XXX.XXX.XXX

password server = *

server string = SAMBA

log file = /var/log/samba/%m.log
max log size = 0
log level =  10

security = domain

auth methods = guest sam ntdomain



encrypt passwords = yes

local master = no

dns proxy = no

[SOMESHARE]
   comment = Some Share
   path = /d1/articles
   public = no
   writable = yes
   printable = no
   valid users = DOMAIN\SOMEGROUP
   
-- 
To unsubscribe from this list go to the following URL
and read the
instructions:
http://lists.samba.org/mailman/listinfo/samba 





Email.it, the professional e-mail, gratis per te:clicca= qui

Sponsor:

Clicca qui




--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] client only build

2004-05-21 Thread Michal Kurowski

Hi,

Is it possible to build samba client side only ? I'm interested in all
testing / user managment stuff (pdbedit, smbclient, etc) with no
daemons and no share data.

I looked briefly at makefiles and it seems it's not. Of course I could
just copy things that I need ...


-- 
Michal Kurowski
perl -e '$_=q#: 13_2: 12/o{: 8_4) (_4: 6/2^-2; 3;-2^\2: 5/7\_/\7: 12m m::#;
y#:#\n#;s#(\D)(\d+)#$1x$2#ge;print'

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] recovering files from .recyle

2004-05-21 Thread Tony Whitmore
Robin M. wrote:
I have created a recylce bin following the how-to, but I cannot figure out
how end users can restore items from the samba recycle bin.

Which particular HOWTO have you been looking at? I've found several out 
there using Google, including one for Samba 2.2.

Cheers,
Tony
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Valid users question

2004-05-21 Thread mike andrewjeski
Hmm,
I'm having the same problem, and the quotes don't help.
I'm running 3.0.4 on RedHat with winbind  pam. Even set up /etc/pam.d/login 
per the docs.

please help
Mario
Hi, this worked for me:
valid users = '@DOMAINNAME\GROUP'
in my smb.conf I have valid users = '@DOMAINNAME\Domain Users' and I mapped
'Domain Users' to unixgroup domusers.
Hope this helps
Ciao



At 01:05 21/05/2004, Michael Andrewjeski wrote:
Hi,
I've a question about the syntax of the valid users option. Any help is 
greatly appreciated!

Here is the Background:
samba 3.0.4
Linux as Domain Member
Active Directory, not in Native Mode
Compiler opions: --with-winbind --with-pam --with-smbmount
The goal is to authenticate via the Windows Domain and allow access via 
Windows groups.

The syntax in my smb.conf looks like this:
valid users = DOMAIN\SOMEGROUP
However, it doesn't work no matter what.
I can authenticate individual users thusly:
valid users = DOMAIN\SOMEUSER
I've read about the @ + and   syntax, but they only seem to 
represent Unix  Nis groups.

Is there another way to represent Windows groups? Or is my config the 
culprit? Here's the conf file:

 smb.conf:
[global]
# workgroup = NT-Domain-Name or Workgroup-Name
workgroup = DOMAIN
# WINS service
winbind uid = 1-2
winbind gid = 1-2
winbind enum users = yes
winbind enum groups = yes
wins server = XXX.XXX.XXX.XXX
password server = *
server string = SAMBA
log file = /var/log/samba/%m.log
max log size = 0
log level =  10
security = domain
auth methods = guest sam ntdomain

encrypt passwords = yes
local master = no
dns proxy = no
[SOMESHARE]
   comment = Some Share
   path = /d1/articles
   public = no
   writable = yes
   printable = no
   valid users = DOMAIN\SOMEGROUP
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


--
Email.it, the professional e-mail, gratis per te: http://www.email.it/f
Sponsor:
Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=d=21-5
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
_
Best Restaurant Giveaway Ever! Vote for your favorites for a chance to win 
$1 million! http://local.msn.com/special/giveaway.asp

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Valid users question

2004-05-21 Thread Michael Andrewjeski
WTF? 

-Original Message-
From: mike andrewjeski [mailto:[EMAIL PROTECTED] 
Sent: Friday, May 21, 2004 9:37 AM
To: [EMAIL PROTECTED]
Subject: Re: [Samba] Valid users question


Hmm,

I'm having the same problem, and the quotes don't help.

I'm running 3.0.4 on RedHat with winbind  pam. Even set up
/etc/pam.d/login 
per the docs.

please help

Mario


Hi, this worked for me:


valid users = '@DOMAINNAME\GROUP'

in my smb.conf I have valid users = '@DOMAINNAME\Domain Users' and I
mapped 'Domain Users' to unixgroup domusers.

Hope this helps

Ciao







At 01:05 21/05/2004, Michael Andrewjeski wrote:

Hi,

I've a question about the syntax of the valid users option. Any help is
greatly appreciated!

Here is the Background:

samba 3.0.4
Linux as Domain Member
Active Directory, not in Native Mode
Compiler opions: --with-winbind --with-pam --with-smbmount

The goal is to authenticate via the Windows Domain and allow access via
Windows groups.

The syntax in my smb.conf looks like this:

valid users = DOMAIN\SOMEGROUP

However, it doesn't work no matter what.

I can authenticate individual users thusly:

valid users = DOMAIN\SOMEUSER

I've read about the @ + and   syntax, but they only seem to
represent Unix  Nis groups.

Is there another way to represent Windows groups? Or is my config the
culprit? Here's the conf file:

  smb.conf:

[global]

# workgroup = NT-Domain-Name or Workgroup-Name
workgroup = DOMAIN

# WINS service
winbind uid = 1-2
winbind gid = 1-2
winbind enum users = yes
winbind enum groups = yes
wins server = XXX.XXX.XXX.XXX

password server = *

server string = SAMBA

log file = /var/log/samba/%m.log
max log size = 0
log level =  10

security = domain

auth methods = guest sam ntdomain



encrypt passwords = yes

local master = no

dns proxy = no

[SOMESHARE]
comment = Some Share
path = /d1/articles
public = no
writable = yes
printable = no
valid users = DOMAIN\SOMEGROUP

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba




--
Email.it, the professional e-mail, gratis per te: http://www.email.it/f

Sponsor:

Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=d=21-5
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

_
Best Restaurant Giveaway Ever! Vote for your favorites for a chance to
win 
$1 million! http://local.msn.com/special/giveaway.asp

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] linux/solaris/windows group management

2004-05-21 Thread Michal Kurowski

Hi,

My second question. Perhaps not strictly samba question but I guess
many people in here are dealing with exactly the same stuff...

I've got Ldap (Sun ONE aka iPlanet) Ldap server on a solaris9 box and
samba (2.2.9, not quite willing to upgrade, no offense) on a linux
box.

Therefore my primary linux group is users (gid 100) and my primary
solaris group is other (gid 1). And AFAIK, primary windows group
should be Domain Users (gid 513, if posixGroup attribute is actually
necessary). 

I'd like to have all these primary groups to be transparent for users
and manipulate them only by means of Ldap groups/roles. So far I just
adds users and Domain Users to ou=Groups and I do further
adjustments in /etc/groups files but I'm not quite happy with it.

I'm looking for an expert opinion and experiences. This basic settings
work OK but I'm just turning samba on for larger scale and I want to
be sure people group membership will be mapped right.

Cheers,

-- 
Michal Kurowski
perl -e '$_=q#: 13_2: 12/o{: 8_4) (_4: 6/2^-2; 3;-2^\2: 5/7\_/\7: 12m m::#;
y#:#\n#;s#(\D)(\d+)#$1x$2#ge;print'

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] pdbedit + ldap doesn't work

2004-05-21 Thread daves-jr




Oh, sorry.
Well, when u have added with smbldap-tools, the script create the samba
objects too, so the created user can logon normaly. You dont need add the
user again.
Remember, if you no set sid on script, the access will be denied.

---
Emerson Henrique Kfuri Pereira

Divisão de Atendimento e Consultoria
CECOM - Reitoria - UFMG
Telefone: 34994009
---


   
 Umberto Zanatta   
 [EMAIL PROTECTED] 
 ia.treviso.it   Para
 Enviado Por:  [EMAIL PROTECTED]  
 samba-bounces+dav  cc
 [EMAIL PROTECTED] [EMAIL PROTECTED] 
 ts.samba.org  Assunto
   Re: [Samba] pdbedit + ldap doesn't
   work
 21/05/2004 12:23  
   
   
   
   
   




I've done it... but it's the same!

provtvlp:~ # smbpasswd -a pippo
New SMB password:
Retype new SMB password:
ldapsam_modify_entry: Failed to add user dn= uid=pippo,ou=People,
o=PROVTV with: Already exists

ldapsam_add_sam_account: failed to modify/add user with uid = pippo (dn
= uid=pippo,ou=People,o=PROVTV)
Failed to add entry for user pippo.
Failed to modify password entry for user pippo


On 21/05/2004 17:30:03, [EMAIL PROTECTED] wrote:




 Try use smbpasswd -a pippo

 ---
 Emerson Henrique Kfuri Pereira

 Divisão de Atendimento e Consultoria
 CECOM - Reitoria - UFMG
 Telefone: 34994009
 ---




  Umberto Zanatta

  [EMAIL PROTECTED]

  ia.treviso.it
 Para
  Enviado Por:  [EMAIL PROTECTED]

  samba-bounces+dav
  cc
  [EMAIL PROTECTED]
  ts.samba.org
 Assunto
[Samba] pdbedit + ldap doesn't
 work


  21/05/2004 12:09













 I have to add new user to samba; I've just upgrade the system to
 3.0.4
 and smbldap-tools 3.0.4;

 # smbldap-useradd pippo
 # smblap-usershow pippo
 n: uid=pippo,ou=People,o=PROVTV
 objectClass: top,inetOrgPerson,posixAccount,shadowAccount
 cn: pippo
 sn: pippo
 uid: pippo
 uidNumber: 4000
 gidNumber: 513
 homeDirectory: /home//pippo
 loginShell: /bin/bash
 gecos: System User
 description: System User
 userPassword: {crypt}x

 # pdbedit -a -u pippo
 ldapsam_add_sam_account: Adding new user
 init_ldap_from_sam: Setting entry for user: pippo
 ldapsam_modify_entry: Failed to add user dn= uid=pippo,ou=People,
 o=PROVTV with: Already exists

 ldapsam_add_sam_account: failed to modify/add user with uid = pippo
 (dn
 = uid=pippo,ou=People,o=PROVTV)
 Unable to add user! (does it already exist?)

 The system's tryng to add a new uid!

 # smbldap-userdel pippo
 # pdbedit -a -u pippo
 Searching for:[((objectClass=sambaDomain)
 (sambaDomainName=PROVTVNT))]
 smbldap_open_connection: connection opened
 ldap_connect_system: succesful connection to the LDAP server
 Searching for:[((objectClass=sambaDomain)
 (sambaDomainName=PROVTVNT))]
 smbldap_open_connection: connection opened
 ldap_connect_system: succesful connection to the LDAP server
 could not create account to add new user pippo

 any idea?

 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Suse 9.1 Samba

2004-05-21 Thread Art Fore
I have been trying for two weeks to get onto a Win2k domain which has 
active directory with no success. The Suse YAST samba client will not do 
ADS, only domain, server, or user, so I went to the command line stuff I 
found the the Samba documentation.

I can do kinit and get back the following:
sha-linux:/etc/samba # kinit [EMAIL PROTECTED]
[EMAIL PROTECTED]'s Password:
kinit: NOTICE: ticket renewable lifetime is 1 week
When I do the net ads join, I get:  (I use the same name and password in 
WinXP, different computer name and it works)

sha-linux:/etc/samba # net ads join -U art_fore
art_fore's password:
[2004/05/20 20:48:47, 0] libads/ldap.c:ads_add_machine_acct(1006)
Host account for sha-linux already exists - modifying old account
[2004/05/20 20:48:47, 0] libads/ldap.c:ads_join_realm(1342)
ads_add_machine_acct: Insufficient access
ads_join_realm: Insufficient access
If I do the klist Tickets, it does not work, so I do klist -T:
sha-linux:/etc/samba # klist -T
Credentials cache: FILE:/tmp/krb5cc_0
Principal: [EMAIL PROTECTED]
Issued Expires Principal
May 20 21:08:26 May 21 07:08:26 krbtgt/[EMAIL PROTECTED]
Below is the global part of the smb.conf file:
[global]
workgroup = 3MTS
realm = 3MTS.COM
interfaces = 127.0.0.1 eth0
bind interfaces only = true
printing = cups
printcap name = cups
printer admin = @ntadmin, root, administrator
map to guest = Bad User
security = ADS
encrypt passwords = yes
password server = mailman
idmap uid = 1-2
idmap gid = 1-2
passdb backend = smbpasswd:/etc/samba/smbpasswd
server string = Samba Server
netbios name = sha-linux
add machine script =
domain master = false
domain logons = no
local master = no
preferred master = auto
load printers = no
ldap suffix = dc=com
We use ldap and do not use PAM. Our local win network guru has no idea 
and is of no help.  Does anyone have any ideas what the problem is? 
Winbind, smb and nmb are running.

Art
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problems since upgrade to 3.0.2a-3 (mandrake rpm)

2004-05-21 Thread Chris
Hey... first time post to this group :s

i have recently upgraded from mandrake 9.1 to 10.0, automatically installing 
samba version 3.0.2a-3 to my system over the previous version, i kept my 
original config file..
all my old directory shares, as well as any new shares i add, are displayed as 
printers in all my clients on the network (WinXP pro, Win98, smb).. 
i have tried manually adding shares to the config file and adding shares 
through swat and webmin, but the keep appearing as printers.
i'm confused to hell and would appreciate any advice.. 
 i have attached my config file  for reference..

thanks in advance..
-CHRIS-


# Samba config file created using SWAT
# from 127.0.0.1 (127.0.0.1)
# Date: 2004/04/28 16:55:31

# Global parameters
[global]
log file = /var/log/samba/log.%m
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
write list = @adm, root
guest ok = Yes
create mask = 0700
map to guest = Bad User
printer admin = @adm
dns proxy = No
netbios name = CHRISPC
browseable = no
print command = /usr/share/samba/scripts/print-pdf %s ~%u //%L/%u %m %I
printing = cups
printable = Yes
server string = Samba Server %v
path = /var/tmp
workgroup = 2CLOSYSTRAD
os level = 20
comment = ChrisPC Share
printcap name = cups
security = share
max log size = 50

[ChrisDir]
 path = /home/Chris
 comment = ChrisDIR
 read only = no
 browseable = yes
 create mode = 0750


[printers]
comment = All Printers
path = /var/spool/samba
print command = lpr-cups -P %p -o raw %s -r   # using client side printer 
drivers.

[print$]
path = /var/lib/samba/printers
inherit permissions = Yes
browseable = Yes

[pdf-generator]
guest ok = No

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Suse 9.1 Samba

2004-05-21 Thread Shannon Johnson

Does the user art_fore have permission to create accounts on the
Windows server? If not, try the Administrator account and see if that
works...


 
Shannon Johnson
Network Support Specialist / Systems Administrator
Dept. of Mechanical and Nuclear Engineering
224 Reber Building
University Park, PA 16802
Phone: (814) 865-8267

 

 -Original Message-
 From: Art Fore [mailto:[EMAIL PROTECTED]
 Sent: Friday, May 21, 2004 1:13 PM
 To: [EMAIL PROTECTED]
 Subject: [Samba] Suse 9.1 Samba
 
 I have been trying for two weeks to get onto a Win2k domain which has
 active directory with no success. The Suse YAST samba client will not
do
 ADS, only domain, server, or user, so I went to the command line stuff
I
 found the the Samba documentation.
 
 I can do kinit and get back the following:
 
 sha-linux:/etc/samba # kinit [EMAIL PROTECTED]
 
 [EMAIL PROTECTED]'s Password:
 
 kinit: NOTICE: ticket renewable lifetime is 1 week
 
 When I do the net ads join, I get:  (I use the same name and password
in
 WinXP, different computer name and it works)
 
 sha-linux:/etc/samba # net ads join -U art_fore
 
 art_fore's password:
 
 [2004/05/20 20:48:47, 0] libads/ldap.c:ads_add_machine_acct(1006)
 
 Host account for sha-linux already exists - modifying old account
 
 [2004/05/20 20:48:47, 0] libads/ldap.c:ads_join_realm(1342)
 
 ads_add_machine_acct: Insufficient access
 
 ads_join_realm: Insufficient access
 
 If I do the klist Tickets, it does not work, so I do klist -T:
 
 sha-linux:/etc/samba # klist -T
 
 Credentials cache: FILE:/tmp/krb5cc_0
 
 Principal: [EMAIL PROTECTED]
 
 Issued Expires Principal
 
 May 20 21:08:26 May 21 07:08:26 krbtgt/[EMAIL PROTECTED]
 
 Below is the global part of the smb.conf file:
 
 [global]
 
 workgroup = 3MTS
 
 realm = 3MTS.COM
 
 interfaces = 127.0.0.1 eth0
 
 bind interfaces only = true
 
 printing = cups
 
 printcap name = cups
 
 printer admin = @ntadmin, root, administrator
 
 map to guest = Bad User
 
 security = ADS
 
 encrypt passwords = yes
 
 password server = mailman
 
 idmap uid = 1-2
 
 idmap gid = 1-2
 
 passdb backend = smbpasswd:/etc/samba/smbpasswd
 
 server string = Samba Server
 
 netbios name = sha-linux
 
 add machine script =
 
 domain master = false
 
 domain logons = no
 
 local master = no
 
 preferred master = auto
 
 load printers = no
 
 ldap suffix = dc=com
 
 We use ldap and do not use PAM. Our local win network guru has no idea
 and is of no help.  Does anyone have any ideas what the problem is?
 Winbind, smb and nmb are running.
 
 Art
 
 
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Suse 9.1 Samba

2004-05-21 Thread Art Fore
I do not have Administrator password, but I use my logon and password in 
XP to create an account when I change machine name.

Art
Shannon Johnson wrote:
Does the user art_fore have permission to create accounts on the
Windows server? If not, try the Administrator account and see if that
works...

Shannon Johnson
Network Support Specialist / Systems Administrator
Dept. of Mechanical and Nuclear Engineering
224 Reber Building
University Park, PA 16802
Phone: (814) 865-8267

 

-Original Message-
From: Art Fore [mailto:[EMAIL PROTECTED]
Sent: Friday, May 21, 2004 1:13 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Suse 9.1 Samba
I have been trying for two weeks to get onto a Win2k domain which has
active directory with no success. The Suse YAST samba client will not
   

do
 

ADS, only domain, server, or user, so I went to the command line stuff
   

I
 

found the the Samba documentation.
I can do kinit and get back the following:
sha-linux:/etc/samba # kinit [EMAIL PROTECTED]
[EMAIL PROTECTED]'s Password:
kinit: NOTICE: ticket renewable lifetime is 1 week
When I do the net ads join, I get:  (I use the same name and password
   

in
 

WinXP, different computer name and it works)
sha-linux:/etc/samba # net ads join -U art_fore
art_fore's password:
[2004/05/20 20:48:47, 0] libads/ldap.c:ads_add_machine_acct(1006)
Host account for sha-linux already exists - modifying old account
[2004/05/20 20:48:47, 0] libads/ldap.c:ads_join_realm(1342)
ads_add_machine_acct: Insufficient access
ads_join_realm: Insufficient access
If I do the klist Tickets, it does not work, so I do klist -T:
sha-linux:/etc/samba # klist -T
Credentials cache: FILE:/tmp/krb5cc_0
Principal: [EMAIL PROTECTED]
Issued Expires Principal
May 20 21:08:26 May 21 07:08:26 krbtgt/[EMAIL PROTECTED]
Below is the global part of the smb.conf file:
[global]
workgroup = 3MTS
realm = 3MTS.COM
interfaces = 127.0.0.1 eth0
bind interfaces only = true
printing = cups
printcap name = cups
printer admin = @ntadmin, root, administrator
map to guest = Bad User
security = ADS
encrypt passwords = yes
password server = mailman
idmap uid = 1-2
idmap gid = 1-2
passdb backend = smbpasswd:/etc/samba/smbpasswd
server string = Samba Server
netbios name = sha-linux
add machine script =
domain master = false
domain logons = no
local master = no
preferred master = auto
load printers = no
ldap suffix = dc=com
We use ldap and do not use PAM. Our local win network guru has no idea
and is of no help.  Does anyone have any ideas what the problem is?
Winbind, smb and nmb are running.
Art
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
   


 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Help.

2004-05-21 Thread Shashidhar SR

Hello,

I am Shashidhar SR Working for Siemens Communication Software in Bangalore,
INDIA as a Configuration Manager for Clearcase.

I need some help regarding the samba configuration at our site.

First Let me Explain our Environment:

- We are Using samba 2.2.8a on Solaris 9.
- We are using samba as an interop from Solaris 9 box to winnt/w2k/win-xp
clients.
- On Solaris we have installed IBM Rational Clearcase and we have around 20
VOBs created.

Now we are successfully able to access the files/directories which are
stored on unix from windows clients.

Some times we get an error saying Incorrect function on the windows
clients, when trying to access some .txt/.cpp/.h or any other text files.
and this error is very sporadic, for some people it's works and for others
it dosen't, eventhough the permissions are same for all the users.

Can we know, what could be the possible problems? even we contacted Rational
for the same and they have confirmed that there is no problem with
clearcase.

Please do let me know if you need any additional information.

With Kind Regards,
Shashi.





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Suse 9.1 Samba

2004-05-21 Thread jack . palmadesso
I am having the same exact problem except I am on Fedora Core 1 with Samba
3.0.4.  Does the machine already exist in the domain/OU ?  

Jack

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Art Fore
Sent: Friday, May 21, 2004 1:44 PM
To: [EMAIL PROTECTED]
Subject: Re: [Samba] Suse 9.1 Samba


I do not have Administrator password, but I use my logon and password in 
XP to create an account when I change machine name.

Art

Shannon Johnson wrote:

Does the user art_fore have permission to create accounts on the
Windows server? If not, try the Administrator account and see if that
works...


 
Shannon Johnson
Network Support Specialist / Systems Administrator
Dept. of Mechanical and Nuclear Engineering
224 Reber Building
University Park, PA 16802
Phone: (814) 865-8267

 

  

-Original Message-
From: Art Fore [mailto:[EMAIL PROTECTED]
Sent: Friday, May 21, 2004 1:13 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Suse 9.1 Samba

I have been trying for two weeks to get onto a Win2k domain which has
active directory with no success. The Suse YAST samba client will not


do
  

ADS, only domain, server, or user, so I went to the command line stuff


I
  

found the the Samba documentation.

I can do kinit and get back the following:

sha-linux:/etc/samba # kinit [EMAIL PROTECTED]

[EMAIL PROTECTED]'s Password:

kinit: NOTICE: ticket renewable lifetime is 1 week

When I do the net ads join, I get:  (I use the same name and password


in
  

WinXP, different computer name and it works)

sha-linux:/etc/samba # net ads join -U art_fore

art_fore's password:

[2004/05/20 20:48:47, 0] libads/ldap.c:ads_add_machine_acct(1006)

Host account for sha-linux already exists - modifying old account

[2004/05/20 20:48:47, 0] libads/ldap.c:ads_join_realm(1342)

ads_add_machine_acct: Insufficient access

ads_join_realm: Insufficient access

If I do the klist Tickets, it does not work, so I do klist -T:

sha-linux:/etc/samba # klist -T

Credentials cache: FILE:/tmp/krb5cc_0

Principal: [EMAIL PROTECTED]

Issued Expires Principal

May 20 21:08:26 May 21 07:08:26 krbtgt/[EMAIL PROTECTED]

Below is the global part of the smb.conf file:

[global]

workgroup = 3MTS

realm = 3MTS.COM

interfaces = 127.0.0.1 eth0

bind interfaces only = true

printing = cups

printcap name = cups

printer admin = @ntadmin, root, administrator

map to guest = Bad User

security = ADS

encrypt passwords = yes

password server = mailman

idmap uid = 1-2

idmap gid = 1-2

passdb backend = smbpasswd:/etc/samba/smbpasswd

server string = Samba Server

netbios name = sha-linux

add machine script =

domain master = false

domain logons = no

local master = no

preferred master = auto

load printers = no

ldap suffix = dc=com

We use ldap and do not use PAM. Our local win network guru has no idea
and is of no help.  Does anyone have any ideas what the problem is?
Winbind, smb and nmb are running.

Art


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba





  


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] net ads join hangs forever

2004-05-21 Thread Aaron Grewell
Thanks all.  At least now I know it's not just me.  I'll be watching
bugzilla with interest, and in the meantime I suppose standard Kerb will
have to do.

Aaron Grewell
Network Administrator
University of Washington Bothell

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of ww
m-pubsyssamba
Sent: Friday, May 21, 2004 6:28 AM
To: Andrew Bartlett
Cc: [EMAIL PROTECTED]; Gerald (Jerry) Carter; Andrew Bartlett
Subject: RE: [Samba] net ads join hangs forever



Did you manage to valgrind it?

##
##Yes, I've sent it through to you last week, didn't you recieve it? ##If
not I've attached all the out put to the bugzilla bug 1370 ## thanks Andy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] remote announce issues?

2004-05-21 Thread samba
All, first off thanks for any advice on this issue. Last night, my fileserver crashed 
on me. When i came in this morning, here is what the syslog was filled up with:

May 20 21:54:26 fileserver1 nmbd[15324]: [2004/05/20 21:54:26, 0] 
nmbd/nmbd_packets.c:process_browse_packet(1063) 
May 20 21:54:26 fileserver1 nmbd[15324]:   process_browse_packet: Discarding datagram 
from IP 192.168.1.6. Source name FILESERVER100 is one of our names ! 
May 20 21:57:28 fileserver1 nmbd[15324]: [2004/05/20 21:57:28, 0] 
nmbd/nmbd_packets.c:process_browse_packet(1063) 
May 20 21:57:28 fileserver1 nmbd[15324]:   process_browse_packet: Discarding datagram 
from IP 192.168.1.6. Source name FILESERVER100 is one of our names ! 
May 20 22:00:28 fileserver1 nmbd[15324]: [2004/05/20 22:00:28, 0] 
nmbd/nmbd_packets.c:process_browse_packet(1063) 
May 20 22:00:28 fileserver1 nmbd[15324]:   process_browse_packet: Discarding datagram 
from IP 192.168.1.6. Source name FILESERVER100 is one of our names ! 

And here is the smb.conf file global section:

workgroup = WORKGROUP
netbios name = FILESERVER1
server string = Main file server
security = SHARE
encrypt passwords = true
enhanced browsing = no
log file = /var/log/smb.log
#max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
os level = 128
domain master = Yes
remote browse sync = 192.168.12.10 192.168.62.10
preferred master = Yes
local master = Yes
dns proxy = yes
wins support = yes
wins proxy = yes
name resolve order = wins lmhosts hosts bcast
interfaces = 192.168.1.255/255.255.255.0 192.168.12.255/255.255.255.0 
192.168.13.255/255.255.255.0 192.168.62.255/255.255.255.0 192.168.1.6/255.255.255.0
remote announce = 192.168.1.255/WORKGROUP 192.168.12.10/WORKGROUP 
192.168.1.6/WORKGROUP 192.168.13.9/WORKGROUP 192.168.62.10/WORKGROUP
debug level = 2

Would that error message be related to the fact that it is remote announcing to 
itself? Also, this server is acting as a wins server in a workgroup environment, no 
pdc's, 2 subnets. If anyone needs more info, please ask!! Thank you.

-chris


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Suse 9.1 Samba

2004-05-21 Thread Art Fore
What do you mean domain/OU? It is on the 3mts domain.
Art
[EMAIL PROTECTED] wrote:
I am having the same exact problem except I am on Fedora Core 1 with Samba
3.0.4.  Does the machine already exist in the domain/OU ?  

Jack
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Art Fore
Sent: Friday, May 21, 2004 1:44 PM
To: [EMAIL PROTECTED]
Subject: Re: [Samba] Suse 9.1 Samba
I do not have Administrator password, but I use my logon and password in 
XP to create an account when I change machine name.

Art
Shannon Johnson wrote:
 

Does the user art_fore have permission to create accounts on the
Windows server? If not, try the Administrator account and see if that
works...

Shannon Johnson
Network Support Specialist / Systems Administrator
Dept. of Mechanical and Nuclear Engineering
224 Reber Building
University Park, PA 16802
Phone: (814) 865-8267


   

-Original Message-
From: Art Fore [mailto:[EMAIL PROTECTED]
Sent: Friday, May 21, 2004 1:13 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Suse 9.1 Samba
I have been trying for two weeks to get onto a Win2k domain which has
active directory with no success. The Suse YAST samba client will not
  

 

do
   

ADS, only domain, server, or user, so I went to the command line stuff
  

 

I
   

found the the Samba documentation.
I can do kinit and get back the following:
sha-linux:/etc/samba # kinit [EMAIL PROTECTED]
[EMAIL PROTECTED]'s Password:
kinit: NOTICE: ticket renewable lifetime is 1 week
When I do the net ads join, I get:  (I use the same name and password
  

 

in
   

WinXP, different computer name and it works)
sha-linux:/etc/samba # net ads join -U art_fore
art_fore's password:
[2004/05/20 20:48:47, 0] libads/ldap.c:ads_add_machine_acct(1006)
Host account for sha-linux already exists - modifying old account
[2004/05/20 20:48:47, 0] libads/ldap.c:ads_join_realm(1342)
ads_add_machine_acct: Insufficient access
ads_join_realm: Insufficient access
If I do the klist Tickets, it does not work, so I do klist -T:
sha-linux:/etc/samba # klist -T
Credentials cache: FILE:/tmp/krb5cc_0
Principal: [EMAIL PROTECTED]
Issued Expires Principal
May 20 21:08:26 May 21 07:08:26 krbtgt/[EMAIL PROTECTED]
Below is the global part of the smb.conf file:
[global]
workgroup = 3MTS
realm = 3MTS.COM
interfaces = 127.0.0.1 eth0
bind interfaces only = true
printing = cups
printcap name = cups
printer admin = @ntadmin, root, administrator
map to guest = Bad User
security = ADS
encrypt passwords = yes
password server = mailman
idmap uid = 1-2
idmap gid = 1-2
passdb backend = smbpasswd:/etc/samba/smbpasswd
server string = Samba Server
netbios name = sha-linux
add machine script =
domain master = false
domain logons = no
local master = no
preferred master = auto
load printers = no
ldap suffix = dc=com
We use ldap and do not use PAM. Our local win network guru has no idea
and is of no help.  Does anyone have any ideas what the problem is?
Winbind, smb and nmb are running.
Art
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
  

 


   

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Ready to try 3.0.4

2004-05-21 Thread Kevin Kallsen
I have samba 2.2.8 installed on mandrake 9.1 as a domain PDC.  I am ready to
upgrade to 3.0.4 and was wondering if I have to make any special changes
before I urpmi samba off the cooker?

 

Thanks

 

Kevin

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Suse 9.1 Samba

2004-05-21 Thread jack . palmadesso
Sorry, What I mean is did you already add the computer account to the domain
from a windows admin console before you issued the command:

net ads join -U art_fore


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Art Fore
Sent: Friday, May 21, 2004 2:06 PM
To: [EMAIL PROTECTED]
Subject: Re: [Samba] Suse 9.1 Samba


What do you mean domain/OU? It is on the 3mts domain.

Art

[EMAIL PROTECTED] wrote:

I am having the same exact problem except I am on Fedora Core 1 with Samba
3.0.4.  Does the machine already exist in the domain/OU ?  

Jack

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Art Fore
Sent: Friday, May 21, 2004 1:44 PM
To: [EMAIL PROTECTED]
Subject: Re: [Samba] Suse 9.1 Samba


I do not have Administrator password, but I use my logon and password in 
XP to create an account when I change machine name.

Art

Shannon Johnson wrote:

  

Does the user art_fore have permission to create accounts on the
Windows server? If not, try the Administrator account and see if that
works...



Shannon Johnson
Network Support Specialist / Systems Administrator
Dept. of Mechanical and Nuclear Engineering
224 Reber Building
University Park, PA 16802
Phone: (814) 865-8267



 



-Original Message-
From: Art Fore [mailto:[EMAIL PROTECTED]
Sent: Friday, May 21, 2004 1:13 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Suse 9.1 Samba

I have been trying for two weeks to get onto a Win2k domain which has
active directory with no success. The Suse YAST samba client will not
   

  

do
 



ADS, only domain, server, or user, so I went to the command line stuff
   

  

I
 



found the the Samba documentation.

I can do kinit and get back the following:

sha-linux:/etc/samba # kinit [EMAIL PROTECTED]

[EMAIL PROTECTED]'s Password:

kinit: NOTICE: ticket renewable lifetime is 1 week

When I do the net ads join, I get:  (I use the same name and password
   

  

in
 



WinXP, different computer name and it works)

sha-linux:/etc/samba # net ads join -U art_fore

art_fore's password:

[2004/05/20 20:48:47, 0] libads/ldap.c:ads_add_machine_acct(1006)

Host account for sha-linux already exists - modifying old account

[2004/05/20 20:48:47, 0] libads/ldap.c:ads_join_realm(1342)

ads_add_machine_acct: Insufficient access

ads_join_realm: Insufficient access

If I do the klist Tickets, it does not work, so I do klist -T:

sha-linux:/etc/samba # klist -T

Credentials cache: FILE:/tmp/krb5cc_0

Principal: [EMAIL PROTECTED]

Issued Expires Principal

May 20 21:08:26 May 21 07:08:26 krbtgt/[EMAIL PROTECTED]

Below is the global part of the smb.conf file:

[global]

workgroup = 3MTS

realm = 3MTS.COM

interfaces = 127.0.0.1 eth0

bind interfaces only = true

printing = cups

printcap name = cups

printer admin = @ntadmin, root, administrator

map to guest = Bad User

security = ADS

encrypt passwords = yes

password server = mailman

idmap uid = 1-2

idmap gid = 1-2

passdb backend = smbpasswd:/etc/samba/smbpasswd

server string = Samba Server

netbios name = sha-linux

add machine script =

domain master = false

domain logons = no

local master = no

preferred master = auto

load printers = no

ldap suffix = dc=com

We use ldap and do not use PAM. Our local win network guru has no idea
and is of no help.  Does anyone have any ideas what the problem is?
Winbind, smb and nmb are running.

Art


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
   

  


 




  


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Problems since upgrade to 3.0.2a-3 (mandrake rpm)

2004-05-21 Thread daniel . jarboe
 Hey... first time post to this group :s
 
 i have recently upgraded from mandrake 9.1 to 10.0, automatically
 installing
 samba version 3.0.2a-3 to my system over the previous version, i kept
my
 original config file..
 all my old directory shares, as well as any new shares i add, are
 displayed as
 printers in all my clients on the network (WinXP pro, Win98, smb)..
 i have tried manually adding shares to the config file and adding
shares
 through swat and webmin, but the keep appearing as printers.
 i'm confused to hell and would appreciate any advice..
  i have attached my config file  for reference..
 
 thanks in advance..
 -CHRIS-


Take this out of [global]:

printable = Yes


~ Daniel














---

This message is the property of Time Inc. or its affiliates. It may be
legally privileged and/or confidential and is intended only for the use
of the addressee(s). No addressee should forward, print, copy, or
otherwise reproduce this message in any manner that would allow it to be
viewed by any individual not originally listed as a recipient. If the
reader of this message is not the intended recipient, you are hereby
notified that any unauthorized disclosure, dissemination, distribution,
copying or the taking of any action in reliance on the information
herein is strictly prohibited. If you have received this communication
in error, please immediately notify the sender and delete this message.
Thank you.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems since upgrade to 3.0.2a-3 (mandrake rpm)

2004-05-21 Thread Chris
shit... that was easy.. thanks matey :)

On Friday 21 May 2004 19:51, [EMAIL PROTECTED] wrote:
  Hey... first time post to this group :s
 
  i have recently upgraded from mandrake 9.1 to 10.0, automatically
  installing
  samba version 3.0.2a-3 to my system over the previous version, i kept

 my

  original config file..
  all my old directory shares, as well as any new shares i add, are
  displayed as
  printers in all my clients on the network (WinXP pro, Win98, smb)..
  i have tried manually adding shares to the config file and adding

 shares

  through swat and webmin, but the keep appearing as printers.
  i'm confused to hell and would appreciate any advice..
   i have attached my config file  for reference..
 
  thanks in advance..
  -CHRIS-

 Take this out of [global]:

 printable = Yes


 ~ Daniel














 ---

 This message is the property of Time Inc. or its affiliates. It may be
 legally privileged and/or confidential and is intended only for the use
 of the addressee(s). No addressee should forward, print, copy, or
 otherwise reproduce this message in any manner that would allow it to be
 viewed by any individual not originally listed as a recipient. If the
 reader of this message is not the intended recipient, you are hereby
 notified that any unauthorized disclosure, dissemination, distribution,
 copying or the taking of any action in reliance on the information
 herein is strictly prohibited. If you have received this communication
 in error, please immediately notify the sender and delete this message.
 Thank you.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Attempting Run As = Failed to unmarshall NET_Q_SAM_LOGON

2004-05-21 Thread Jennifer Zynn


I run a Samba 3.0.2a domain controller under Solaris X86, with
a Windows 2003 server computer joined to the domain.  I am receiving
a problem when I try and schedual a task (using Task Schedular), and 
using the Run As feature.  I attempt to put the user DOMAIN\user
for Run As.  Windows reports the error 0x80070005: Access is denied
and when I check Samba's logs I see:

[2004/05/21 12:34:19, 0] rpc_server/srv_netlog.c:api_net_sam_logon(201)
  api_net_sam_logon: Failed to unmarshall NET_Q_SAM_LOGON.
[2004/05/21 12:34:19, 0] rpc_server/srv_pipe.c:api_rpcTNP(1531)
  api_rpcTNP: NETLOGON: NET_SAMLOGON failed.
[2004/05/21 12:34:19, 0] rpc_server/srv_netlog.c:api_net_sam_logon(201)
  api_net_sam_logon: Failed to unmarshall NET_Q_SAM_LOGON.
[2004/05/21 12:34:19, 0] rpc_server/srv_pipe.c:api_rpcTNP(1531)
  api_rpcTNP: NETLOGON: NET_SAMLOGON failed.

I also have a Samba 2.2.x domain controller on another network
with a Windows 2000 server.  I do not have this problem when attempting
this.  Im pretty sure my windows side is fine.  The user I am attempting
this with is in Administrators group, and can login to the system just
fine.

Thanks for any help.

-- 
Jennifer Zynn
Sys Admin
Center For Communications Research
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] winbind issues with AD domain trust

2004-05-21 Thread Anderson, Eli C
I'm setting up Samba in an environment with 2 Active Directory domains setup
with a one way trust (DOMAINA - DOMAINB).  Samba is in DOMAINA.  From
looking at the logs (see below) it appears that winbind is having troubles
getting the credentials for the domain controller in DOMAINB.

 

I can get tickets, using kinit, for accounts in both domains.  I can join
DOMAINA just fine.  Running wbinfo -m displays the trusts however wbinfo -u
and wbinfo -g hangs.  If I run wbinfo -domain=DOMAINA then run wbinfo -u and
wbinfo -g I get all of the user and group information.

 

The samba server is running on Fedora Core  1 and I have used both the
latest RPM from up2date (3.0.2) and the latest Fedora binary from the samba
download site (3.0.4).

DOMAINA is a Windows 2000 AD Domain and DOMAINB is Windows 2003.

 

Any help will be greatly appreciated.

 

 

This is the relevant information from winbindd.log (machine names changed to
protect the innocent):

 

[2004/05/21 12:16:33, 3] libads/ldap.c:ads_connect(218)

  Connected to LDAP server 172.16.30.1

[2004/05/21 12:16:33, 3] libads/ldap.c:ads_server_info(2030)

  got ldap server name [EMAIL PROTECTED], using bind path: dc=DOMAINB,dc=COM

[2004/05/21 12:16:33, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(107)

  IPC$ connections done anonymously

[2004/05/21 12:16:33, 3] libsmb/cliconnect.c:cli_start_connection(1337)

  Connecting to host=KDCB

[2004/05/21 12:16:33, 3] lib/util_sock.c:open_socket_out(710)

  Connecting to 172.16.30.1 at port 445

[2004/05/21 12:16:33, 3] libsmb/cliconnect.c:cli_session_setup_spnego(676)

  Doing spnego session setup (blob length=107)

[2004/05/21 12:16:33, 3] libsmb/cliconnect.c:cli_session_setup_spnego(701)

  got OID=1 2 840 48018 1 2 2

[2004/05/21 12:16:33, 3] libsmb/cliconnect.c:cli_session_setup_spnego(701)

  got OID=1 2 840 113554 1 2 2

[2004/05/21 12:16:33, 3] libsmb/cliconnect.c:cli_session_setup_spnego(701)

  got OID=1 2 840 113554 1 2 2 3

[2004/05/21 12:16:33, 3] libsmb/cliconnect.c:cli_session_setup_spnego(701)

  got OID=1 3 6 1 4 1 311 2 2 10

[2004/05/21 12:16:33, 3] libsmb/cliconnect.c:cli_session_setup_spnego(708)

  got [EMAIL PROTECTED]

[2004/05/21 12:16:33, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(510)

Doing kerberos session setup

[2004/05/21 12:16:33, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276)

  krb5_get_credentials failed for [EMAIL PROTECTED] (Server not found in
Kerbe

ros database)

[2004/05/21 12:16:33, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(516)

  spnego_gen_negTokenTarg failed: Server not found in Kerberos database

[2004/05/21 12:16:33, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181)

  lsa_io_sec_qos: length c does not match size 8

[2004/05/21 12:16:33, 3] nsswitch/winbindd_util.c:add_trusted_domain(159)

  add_trusted_domain: DOMAINB is an ADS native mode domain

[2004/05/21 12:16:33, 1] nsswitch/winbindd_util.c:add_trusted_domain(166)

  Added domain DOMAINB domainb.com S-1-5-21-842925246-706699826-1801674531

[2004/05/21 12:16:33, 3] nsswitch/winbindd_ads.c:trusted_domains(852)

  ads: trusted_domains

 

my smb.conf file results form testparm:

 

# Global parameters

[global]

workgroup = DOMAINA

realm = DOMAINA.COM

server string = Samba Server

security = ADS

log file = /var/log/samba/%m.log

max log size = 50

client signing = Yes

server signing = Yes

socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

printcap name = /etc/printcap

dns proxy = No

idmap uid = 1-20

idmap gid = 1-20

template homedir = /home/winnt/%D/%U

template shell = /bin/bash

winbind separator = +

 

[homes]

comment = Home Directories

read only = No

browseable = No

 

[printers]

comment = All Printers

path = /var/spool/samba

printable = Yes

browseable = No

 

[testshare]

comment = Test samba share

path = /var/share

read only = No

guest ok = Yes

 

 

And my /etc/krb5.conf:

 

[logging]

 default = FILE:/var/log/krb5libs.log

 kdc = FILE:/var/log/krb5kdc.log

 admin_server = FILE:/var/log/kadmind.log

 

[libdefaults]

 ticket_lifetime = 24000

 default_realm = PASSKEY.CC

 dns_lookup_realm = false

 dns_lookup_kdc = false

 

[realms]

 EXAMPLE.COM = {

  kdc = kerberos.example.com:88

  admin_server = kerberos.example.com:749

  default_domain = example.com

 }

 

 DOMAINA.COM = {

  kdc = kdca.domaina.com:88

  admin_server = kdca.domaina.com:749

 }

 

DOMAINB.COM = {

  kdc = kdcb.domainb.com:88

  admin_server = kdcb.domainb.com:749

 }

 

[domain_realm]

 .example.com = EXAMPLE.COM

 example.com = EXAMPLE.COM

 .doamina.com = DOMAINA.COM

 domaina.com = DOMAINA.COM

 .domainb.com = DOMAINB.COM

 domainb.com = DOMAINB.COM

 

[kdc]

 profile = /var/kerberos/krb5kdc/kdc.conf

 

[appdefaults]

 pam = {

   debug = false

   

[Samba] Insufficient access error

2004-05-21 Thread jack . palmadesso
I've been working on getting Samba 3.0.4-2 to join our test W2k3 Active
Directory for most of the day.  When I try to join with this command :

net ads join -U w702a-palmadesso w702\NonCatComputers

According to my official Samba HowTo Book  this should join the domain
specified in my smb.conf. Instead I get the following output :

[EMAIL PROTECTED] samba]# net ads join -U w702a-palmadesso
w702\NonCatComputers
w702a-palmadesso's password:
[2004/05/21 15:05:23, 0] libads/ldap.c:ads_join_realm(1336)
  ads_add_machine_acct: Insufficient access
ads_join_realm: Insufficient access

I can exchange Kerberos tickets from the output of   klist :


[EMAIL PROTECTED] samba]# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [EMAIL PROTECTED]
 
Valid starting ExpiresService principal
05/21/04 13:20:11  05/21/04 23:20:13
krbtgt/[EMAIL PROTECTED]
renew until 05/22/04 13:20:11
05/21/04 13:20:53  05/21/04 23:20:13  [EMAIL PROTECTED]
renew until 05/22/04 13:20:11

As far as I can tell this means kerberos 5 is working properly and
exchanging tickets with our AD domain controller.   KINIT works as well.

I can confirm that I am at least talking with AD LDAP because when I try to
join a bogus OU I get the following:

[EMAIL PROTECTED] samba]# net ads join -U w702a-palmadesso
W702a\NonCatComputers
w702a-palmadesso's password:
ads_join_realm: organizational unit W702a\NonCatComputers does not exist
(dn:ou=NonCatComputers,ou=W702a,dc=TWW007,dc=SITEST,dc=NET)

If you compare this to the first one you will notice that the difference is
w702   vs   w702a. The w702a  OU does not exist and gives the proper
response.  So to me this is partially working but I still cannot join the
domain.   As an experiment I was added to the administrators group in our
test domain and we added the computer account into the domain manually.
When this object already exists in AD I get a similar error but still
basically the same as follows :

[EMAIL PROTECTED] samba]# net ads join -U w702a-palmadesso
W702\NonCatComputers
w702a-palmadesso's password:
[2004/05/21 13:21:15, 0] libads/ldap.c:ads_add_machine_acct(1006)
  Host account for w72l-tux already exists - modifying old account
[2004/05/21 13:21:15, 0] libads/ldap.c:ads_join_realm(1336)
  ads_add_machine_acct: Insufficient access
ads_join_realm: Insufficient access

Some other people on here seem to be experiencing the same problems.
Thanks for any help.

Jack
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Suse 9.1 Samba

2004-05-21 Thread Art Fore
No, I did not. When logged into XP, it is a different machine name.
Art
[EMAIL PROTECTED] wrote:
Sorry, What I mean is did you already add the computer account to the domain
from a windows admin console before you issued the command:
net ads join -U art_fore
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Art Fore
Sent: Friday, May 21, 2004 2:06 PM
To: [EMAIL PROTECTED]
Subject: Re: [Samba] Suse 9.1 Samba
What do you mean domain/OU? It is on the 3mts domain.
Art
[EMAIL PROTECTED] wrote:
 

I am having the same exact problem except I am on Fedora Core 1 with Samba
3.0.4.  Does the machine already exist in the domain/OU ?  

Jack
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Art Fore
Sent: Friday, May 21, 2004 1:44 PM
To: [EMAIL PROTECTED]
Subject: Re: [Samba] Suse 9.1 Samba
I do not have Administrator password, but I use my logon and password in 
XP to create an account when I change machine name.

Art
Shannon Johnson wrote:

   

Does the user art_fore have permission to create accounts on the
Windows server? If not, try the Administrator account and see if that
works...

Shannon Johnson
Network Support Specialist / Systems Administrator
Dept. of Mechanical and Nuclear Engineering
224 Reber Building
University Park, PA 16802
Phone: (814) 865-8267


  

 

-Original Message-
From: Art Fore [mailto:[EMAIL PROTECTED]
Sent: Friday, May 21, 2004 1:13 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Suse 9.1 Samba
I have been trying for two weeks to get onto a Win2k domain which has
active directory with no success. The Suse YAST samba client will not
 



   

do
  

 

ADS, only domain, server, or user, so I went to the command line stuff
 



   

I
  

 

found the the Samba documentation.
I can do kinit and get back the following:
sha-linux:/etc/samba # kinit [EMAIL PROTECTED]
[EMAIL PROTECTED]'s Password:
kinit: NOTICE: ticket renewable lifetime is 1 week
When I do the net ads join, I get:  (I use the same name and password
 



   

in
  

 

WinXP, different computer name and it works)
sha-linux:/etc/samba # net ads join -U art_fore
art_fore's password:
[2004/05/20 20:48:47, 0] libads/ldap.c:ads_add_machine_acct(1006)
Host account for sha-linux already exists - modifying old account
[2004/05/20 20:48:47, 0] libads/ldap.c:ads_join_realm(1342)
ads_add_machine_acct: Insufficient access
ads_join_realm: Insufficient access
If I do the klist Tickets, it does not work, so I do klist -T:
sha-linux:/etc/samba # klist -T
Credentials cache: FILE:/tmp/krb5cc_0
Principal: [EMAIL PROTECTED]
Issued Expires Principal
May 20 21:08:26 May 21 07:08:26 krbtgt/[EMAIL PROTECTED]
Below is the global part of the smb.conf file:
[global]
workgroup = 3MTS
realm = 3MTS.COM
interfaces = 127.0.0.1 eth0
bind interfaces only = true
printing = cups
printcap name = cups
printer admin = @ntadmin, root, administrator
map to guest = Bad User
security = ADS
encrypt passwords = yes
password server = mailman
idmap uid = 1-2
idmap gid = 1-2
passdb backend = smbpasswd:/etc/samba/smbpasswd
server string = Samba Server
netbios name = sha-linux
add machine script =
domain master = false
domain logons = no
local master = no
preferred master = auto
load printers = no
ldap suffix = dc=com
We use ldap and do not use PAM. Our local win network guru has no idea
and is of no help.  Does anyone have any ideas what the problem is?
Winbind, smb and nmb are running.
Art
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
 



   

  

 


   

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Mapping SIDs to existing UIDs

2004-05-21 Thread Michael St. Laurent
I have a newly upgraded Red Hat 9 Samba server (now ver. 3.04, formerly ver.
2.2.7a) on which I would like to start using ACLs to provide the NTFS style
permissions.  The problem I'm running into is figuring out how to map the NT
User Account SIDs to the Unix UIDs.  Every network user has an account on
the Unix system with a name that matches their NT account name and I would
like for there to be a 1 to 1 mapping between them.  Is this possible?  So
far I've not been able to find anything in the docs except how to map to a
UID from a given range that will not correspond to an already existing Unix
account.  If this info is already documented I would really appreciate a
pointer towards it.

Thanks.

-- 
Michael St. Laurent
Hartwell Corporation
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] add machine script

2004-05-21 Thread Josh Skains
So can I assume there is no opposite action to the add machine script entry in 
smb.conf?

JMS
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] can Xp join samba domain without root smbpasswd..?

2004-05-21 Thread Adina S
I have a samba server for Win XP, 2000 and 98 clients.
All machines joined the domain but I wonder if there
is any way to skip the rootroot_smb password when
joining the domain with an XP or 2000 client. I have
the ´add machine script´ to automatically create the
machine account but I think is uncomfortable for the
administrator to go to each computer and to give root
account and samba password and only after that the
machine to be actualy in that domain. I am looking for
a solution for a school network, where computers are
in 5 buildings. Giving root smb password to students
is not a solution and neither for the network
administrator to go to all those building... And of
course I have to take into consideration laptops,
students who may want sometimes to be on school
domain. If anybody knows a solution... Pliz help. From
what I read so far I didn´t find any.

And another question, about printing from 98. I can
install the printers I have on my samba server, it
only takes 3 mouse clicks, but I´d like to use a
script to automatically install printers, like
rundll32 is for XP. I dond´t know if and what is the
command...

Thank you,
Adina




__
Do you Yahoo!?
Yahoo! Domains – Claim yours for only $14.70/year
http://smallbusiness.promotions.yahoo.com/offer 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Error message when trying to do smbmount

2004-05-21 Thread John Seo
Hi,

Up until a couple weeks ago, I had a working connection between my Linux
and Win2000 machines with Samba.  But nowadays, whenever I type:

smbmount //amiadmin/Scan32 /mnt/scan -o credentials=/root/creds

where amiadmin is the Win2000 machine, I get the following error message:

INFO: Debug class all level = 1  (pid 28704 from pid 28704)
28704: session setup failed: ERRSRV - 2242
SMB connection failed

Any clarification of the error code and maybe a possible fix is very much
appreciated!

Thanks,

John Seo

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] FW: Mapping SIDs to existing UIDs

2004-05-21 Thread Michael St. Laurent
I found part of the problem... the Red Hat 9 kernel does not ship with the
ACL patches installed.  ;-)

Does anyone know if there is a repository that hosts Red Hat kernel RPMs
with the ACL patches applied?

Michael St. Laurent  wrote:
 I have a newly upgraded Red Hat 9 Samba server (now ver. 3.04,
 formerly ver. 2.2.7a) on which I would like to start using ACLs to
 provide the NTFS style permissions.  The problem I'm running into is
 figuring out how to map the NT User Account SIDs to the Unix UIDs. 
 Every network user has an account on the Unix system with a name that
 matches their NT account name and I would like for there to be a 1 to
 1 mapping between them.  Is this possible?  So far I've not been able
 to find anything in the docs except how to map to a UID from a given
 range that will not correspond to an already existing Unix account. 
 If this info is already documented I would really appreciate a
 pointer towards it.  
 
 Thanks.

-- 
Michael St. Laurent
Hartwell Corporation
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] read (and edit?) registry files on Linux

2004-05-21 Thread Mi
Hello,
Is there a way in Linux to read Windows registry files?
I have only ssh access to the Linux/Samba server, and would like to be able 
to check settings in user profiles (in their ntuser.dat files). Best would 
be if I could even edit settings in there.

For now, it seems the only thing I can do is scp the files to a Windows 
machine, and manually load the hives in regedt32. Very cumbersome. I'm 
looking for a more Linux-like solution: command-line, scriptable, etc.

BTW, I have Samba 3.0.2a.
Thanks,
Mi
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Undeliverable message returned to sender

2004-05-21 Thread Content Filter
This message was created automatically by mail delivery software.

Delivery failed for the following recipients(s):
[EMAIL PROTECTED]

The message you sent contained character sets which the recipient has chosen to block. 
The following character sets are blocked:
Windows-1251

- Original Message Header -
Received: by mail36-haw (MessageSwitch) id 1085179708594825_16533; Fri, 21 May 2004 
22:48:28 + (UCT)
Received: from aar.alcatel-alsthom.fr (adsl-64-163-90-85.dsl.snfc21.pacbell.net 
[64.163.90.85])
by mail36-haw.bigfish.com (Postfix) with SMTP id BC3DA2F421B
for [EMAIL PROTECTED]; Fri, 21 May 2004 22:48:18 + (UCT)
Date: Sat, 22 May 2004 09:51:22 +
From: [EMAIL PROTECTED]
Subject: Tsi,  Do you prefer anal sex?
To: Tsi [EMAIL PROTECTED]
References: [EMAIL PROTECTED]
In-Reply-To: [EMAIL PROTECTED]
Message-ID: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: text/html; charset=Windows-1251
Content-Transfer-Encoding: quoted-printable
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] read (and edit?) registry files on Linux

2004-05-21 Thread Jelmer Vernooij
Hi,

On Sat, May 22, 2004 at 12:41:53AM +0200, Mi wrote about '[Samba] read (and edit?) 
registry files on Linux':
 Is there a way in Linux to read Windows registry files?
See the regdiff, regpatch, gregedit, regtree and regshell utilities
included with Samba 4 or editreg included with Samba 3.

 I have only ssh access to the Linux/Samba server, and would like to be able 
 to check settings in user profiles (in their ntuser.dat files). Best would 
 be if I could even edit settings in there.

 For now, it seems the only thing I can do is scp the files to a Windows 
 machine, and manually load the hives in regedt32. Very cumbersome. I'm 
 looking for a more Linux-like solution: command-line, scriptable, etc.
In that case, either editreg or regtree/regshell should do fine.

Cheers,

Jelmer


signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows XP slow access to network places shortcut?

2004-05-21 Thread Clint Sharp
samba wrote:
All, thanks for the help. Clint, here are my conf files as you 
suggested. I do think that your hunch is right due to the fact that 
browsing between the subnets became funky a couple of weeks ago for 
some unknown reason. Thanks for any suggestions or advice:

snip
Your fileserver already has wins support = yes, which means it's acting 
as a WINS server.  Remove all the remote browse announce stuff from all 
your configs, set all your clients to use your fileserver as your WINS 
server, and see what happens to your performance.  Let me know if it 
doesn't improve after doing that.

Clint
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Win2k / Samba 2.2.5-SUSE cant net view

2004-05-21 Thread Mike Caughran
I am able to smbclient -U% -L sambahost with no problem
from sambahost and from other linux boxes.

I cant get win2k to net view \\sambahost
I had this working a few years back with win95/win98se/winnt
but cant get off the ground with win2k

Thanks





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] read (and edit?) registry files on Linux

2004-05-21 Thread Mi

In that case, either editreg or regtree/regshell should do fine.
Hm... I dont't find any of these on my Debian box with Samba 3.0.2a.
Googling for regshell, I seem to only find references to a wsh regshell 
object or something. Is there another regshell for Linux/Samba which I 
would have missed?

On the Samba site, I found a man page about editreg, but it's not very 
clear, and I don't have it on my system.

About editreg, http://www.samba.org/samba/docs/man/editreg.1.html says:
editreg — A utility to report and change SIDs in registry files
and
editreg is a utility that can visualize windows registry files (currently 
only NT4) and apply so-called commandfiles to them.

Thanks for your help.
Mi
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] read (and edit?) registry files on Linux

2004-05-21 Thread Jelmer Vernooij
Hi,

On Sat, May 22, 2004 at 01:40:08AM +0200, Mi wrote about 'Re: [Samba] read (and edit?) 
registry files on Linux':

 In that case, either editreg or regtree/regshell should do fine.
 Hm... I dont't find any of these on my Debian box with Samba 3.0.2a.

 Googling for regshell, I seem to only find references to a wsh regshell 
 object or something. Is there another regshell for Linux/Samba which I 
 would have missed?
regshell is part of Samba4, which is only available from Subversion at
the moment (see http://samba.org/samba/subversion.html)

 On the Samba site, I found a man page about editreg, but it's not very 
 clear, and I don't have it on my system.

editreg is probably not build and installed by default on debian, so
you'll need the source distribution.

 About editreg, http://www.samba.org/samba/docs/man/editreg.1.html says:

 editreg ? A utility to report and change SIDs in registry files
 and
 editreg is a utility that can visualize windows registry files (currently 
 only NT4) and apply so-called commandfiles to them.
Whoops, looks like a type.. I'll fix it.

Cheers,

Jelmer


-- 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Gathering EventLog Information from a remote server or workstation

2004-05-21 Thread Lee W
Hi everyone,

I've recently begun looking into ways of automating the monitoring of all my
servers.  Whilst most of the Linux/BSD stuff is sorted, I am having more
difficulties gathing the details of the Windows Boxes.

The main source of problems is how to retrieve the event log details from a
remote machine.  During my research I came across some old mailling list
articules in 1999 regarding 'rpcclient' and a command that was looking to get
implented onto that for eventvwr.  Does anyone know if this work is still going
on?

If rpcclient eventvwr support is no longer planned, can anyone make any
suggestions of how to get the information using Linux/BSD tools.  I have found a
few tutorials on how to get the information using Perl, but these are when also
running Perl from a win32 operating system, I would like to monitor as much as
possible from the Linux boxes (currently using a mixture of SNMP tools, MRTG 
Nagios).

Thanks in advance for any assistance offered.

Lee.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Gathering EventLog Information from a remote server or workstation

2004-05-21 Thread Clint Sharp
Lee W wrote:
Hi everyone,
I've recently begun looking into ways of automating the monitoring of all my
servers.  Whilst most of the Linux/BSD stuff is sorted, I am having more
difficulties gathing the details of the Windows Boxes.
The main source of problems is how to retrieve the event log details from a
remote machine.  During my research I came across some old mailling list
articules in 1999 regarding 'rpcclient' and a command that was looking to get
implented onto that for eventvwr.  Does anyone know if this work is still going
on?
If rpcclient eventvwr support is no longer planned, can anyone make any
suggestions of how to get the information using Linux/BSD tools.  I have found a
few tutorials on how to get the information using Perl, but these are when also
running Perl from a win32 operating system, I would like to monitor as much as
possible from the Linux boxes (currently using a mixture of SNMP tools, MRTG 
Nagios).
Thanks in advance for any assistance offered.
Lee.
 

Actually, I'm interested in this as well, although the best way I know 
to retrieve event log info remotely is through WMI.  Unfortunately, 
there's no WMI implementation outside of Microsoft's on Windows (Windows 
Scripting Host).  The best way I could see to do it would be to 
consolidate all the Event Logs via polling to a text file on a Windows 
box would could be shared or monitored from your Linux box via 
smbfs/nfs, etc.

Clint
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Lexmark X75, smbpool problem

2004-05-21 Thread necrouser
Hi all.
I've got this Lexmark X75 printer connected to a win 2k pro with Unix print service 
and TCP/IP printing service 
started. On my Freebsd 4.9 release box i have cups and samba installed. using smbspool 
smb://username:[EMAIL PROTECTED]/compname/printername ... file will got me stuck in 
command line forever
for cups, I started cupsd, http://localhost:631/admin, when I use 
lpd://hostname/printername as uri, the print job 
from freebsd will make the printer head back and forth once and it says printing 
complete! but of course it 
prints nothing. If I use smb://username:[EMAIL PROTECTED]/comp/printername, it gave me 
error of  client-error-not-possible
I wonder if I made mistake here?
Thanks for reading.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] show the Debug messages in DEBUG(3, (reply_mv : %s - %s\n, name, newname))

2004-05-21 Thread Hanping Lufei
I am developing Samba source code,
I want to use command 
%smbd -F --debug=3 -l /usr/local/samba/var/
to log the debug information from some source code like:
DEBUG(3, (reply_mv : %s - %s\n,name,newname));
But I can not get them in log file

Any idea?

Lufei
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] problem login W2k-sp2 and 4 to samba 3.0.2: profiles

2004-05-21 Thread Miguel Casas-Sánchez
Hi once again
Now I have almost everything working, that is, Samba 3.0.2 with Ldap 
database (messages ok when reading), and I want it to be a PDC, 
everything seems to work fine when registering machines or users, but 
when logging, I mean, entering W2k-Sp4, my computers (two of them) reset 
themselves: they begin to load the user defined stuff and then when one 
expects the the navigator bar to appear, comes the reset.

When I try to add a user to the domain from a computer, also seems to 
work well but with level-3 debugging appears the 'SAMR_Q_SET_USERINFO' 
sentence. (username: rasuser, machine fmdv-4tpb8aqct4$, domain fmdv, 
machine pdc: linuxtest, mcasas is another user messing around ?)

-
Searching for:[((objectClass=sambaDomain)(sambaDomainName=FMDV))]
smbldap_open_connection: connection opened
netbios connect: name1=LINUXTEST   name2=FMDV-4TPB8AQCT4
netbios connect: local=linuxtest remote=fmdv-4tpb8aqct4, name type = 0
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
init_sam_from_ldap: Entry found for user: mcasas
init_group_from_ldap: Entry found for group: 100
init_sam_from_ldap: Entry found for user: root
check_ntlm_password:  authentication for user [root] - [root] - [root] 
succeeded
Returning domain sid for domain FMDV - 
S-1-5-21-78767638-71612024-1917398797
init_sam_from_ldap: Entry found for user: fmdv-4tpb8aqct4$
init_sam_from_ldap: Entry found for user: fmdv-4tpb8aqct4$
init_sam_from_ldap: Entry found for user: fmdv-4tpb8aqct4$
init_sam_from_ldap: Entry found for user: fmdv-4tpb8aqct4$
samr_io_userinfo_ctr: unknown switch level 0x1a
api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
init_sam_from_ldap: Entry found for user: fmdv-4tpb8aqct4$
init_ldap_from_sam: Setting entry for user: fmdv-4tpb8aqct4$
ldapsam_update_sam_account: successfully modified uid = fmdv-4tpb8aqct4$ 
in the LDAP database
init_sam_from_ldap: Entry found for user: rasuser
-

that seems to say it's impossible to write the profile... but the user 
is ok.

So far I have searched in google, sambalists, and the same 
'SAMR_Q_SET_USERINFO' problem was reported for WXP-Sp1,  (you can see 
the reported problems of W2k-Sp4 in http://www.w2knews.com/anecdotes.htm 
, anecdote 11). The more or less accepted solution is to include in 
smb.conf profiles acls=yes and/or nt acl support = yes.  Even more, 
one machine has W2k-Sp2 so it shouldn't affect it but it does.

So in my case the two modifiers didn't work at all, so I wonder if it 
has sth to do with the profiles or the netlogon, that is, it is supposed 
to exist a file ntconfig.pol in \\server\netlogon, with a default user 
and a default computer defined in it, the way winnt.adm describes, am I 
wrong? and this must be put there by hand, or samba should do it 
automatic? can samba run without it?

Beside, when registering a new user, from any machine, then windows 
should copy a profile in \\server\profiles\%u, with an important file 
ntuser.dat, ok? well my system doesn't, has anybody experienced sth so 
tricky? Or do I have to copy manually the profiles from Win? Anyway I 
had copied it but doesn't work.

Here is the typical level-2 log of a connection attempt (fmdv-domain, 
linuxtest- samba pdc name, mcasas -usrname, FMDV-xxx machine name)
-

netbios connect: name1=LINUXTEST   name2=FMDV-4TPB8AQCT4
netbios connect: local=linuxtest remote=fmdv-4tpb8aqct4, name type = 0
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
init_sam_from_ldap: Entry found for user: mcasas
init_group_from_ldap: Entry found for group: 100
init_sam_from_ldap: Entry found for user: mcasas
netsec_decode: FAILED: packet sequence number:
[000] 49 94 01 FB 41 EE 52 8A   I...A.R.
should be:
[000] 00 00 00 00 80 00 00 00   
failed to decode PDU
process_request_pdu: failed to do schannel processing.
init_sam_from_ldap: Entry found for user: fmdv-4tpb8aqct4$
init_sam_from_ldap: Entry found for user: mcasas
check_ntlm_password:  authentication for user [mcasas] - [mcasas] - 
[mcasas] succeeded
init_sam_from_ldap: Entry found for user: mcasas
check_ntlm_password:  authentication for user [mcasas] - [mcasas] - 
[mcasas] succeeded
fmdv-4tpb8aqct4 (192.168.1.3) connect to service netlogon initially as 
user mcasas (uid=1000, gid=100) (pid 8323)

 here comes the reset ---
netbios connect: name1=LINUXTEST   name2=FMDV-4TPB8AQCT4
netbios connect: local=linuxtest remote=fmdv-4tpb8aqct4, name type = 0
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
init_sam_from_ldap: Entry found 

[Samba] Samba problem of users access

2004-05-21 Thread riviere guillaume
Dear all samba users,

We try to install a Samba files server as a member of a W2K network.
The domain controler is a W2K server with Active Directories, Groups and
users.

We want to shared our linux disk with rigths in function of thoses
groups and users.

We use Samba 3 and a GNU/Debian sarge distribution.

There is no problem to join the W2K network:

$ net rpc join -U Administrator
password: ...
Joined domain MYDOMAIN.

We see all groups and users:

$ wbinfo -u
guillaume
foo
faa
fii
...

$wbinfo -g
mygroup
othergroup
...

We can see the disk from the W2K network, no problems.

The problem is that is I put as a valid users a user name it's not work:
For exemple, my user name is guillaume and my group is mygroup:

1/ If I put in smb.conf the line:

valid users = @mygroup

it work, only members of mygroup (and so guillaume) can access to this
folder

2/ If I put in smb.conf the line:

valid users = guillaume

It doesn't work, I cannot access to this folder with the guillaume user,
and this is the same problem with invalid users, admin users ... only
groups work.

Do you know somthing about this problem, I try to search on google but
it's difficult to explain for search ...




Here is my smb.conf:
# Global parameters
[global]
workgroup = MYDOMAIN
security = DOMAIN
printcap name = cups
disable spoolss = Yes
show add printer wizard = No
idmap uid = 15000-2
idmap gid = 15000-2
winbind separator = +
winbind use default domain = Yes
use sendfile = Yes
printing = cups

[myshared]
comment = This folder is shared
path = /var/shared/
valid users = guillaume
read only = No


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] solving samba error

2004-05-21 Thread M.W. Chang
 You see, what i mean jerry, with the 0.0.0.0 thing!!
 i think the getpeer error comes from
 samba trying to connect to 0.0.0.0 instead of the
 actual ip adress.
 -
 MWC [2004/04/05 10:25:11, 0] lib/util_sock.c:write_socket_data(388)
 MWC write_socket_data: write failure. Error = Connection reset 
by peer
 MWC [2004/04/05 10:25:11, 0] lib/util_sock.c:write_socket(413)
 MWC write_socket: Error writing 5 bytes to socket 16: ERRNO = 
Connection
 MWC reset by
 MWC peer

does it have anything to do with the global option interfaces =?
My original line didn't include 127.0.0.1/8.
--
  .~.http://toylet.homeip.net
 / v \   Linux 2.4.26
/( _ )\  10:56am up 14:45 1 user
  ^ ^1.04 1.02
--
Scanned by ClamAv - http://www.clamav.net
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problems upgrading from 2.2.7a to 3.0.2a

2004-05-21 Thread Jeremy
First, a little background:

For over a year now, we've had a 400 Mhz celeron running Samba 2.2.7 on RedHat
9, acting as a PDC for an office of about 8 Windows XP client PCs.  It has done
a great job, but we recently bought a new Dell Poweredge 400 sc (2.4 Ghz P-4)
to replace it.  I installed Gentoo on it, with Samba 3.0.2a.  I also copied the
entire /home tree from the old box to the new one, preserving permissions. 
(Yes, I copied the users  entries from /etc/passwd, all the UIDs and GIDs
match.)  (Profiles are subdirectories of each users home dir).  I also copied
over the smbpasswd file.  I didn't copy the smb.conf file though, I went
through it, line by line, and copied configuration info by hand, making sure
everything was correct.

Ok, so, after all this, I thought I was good to make the switch.  I thought I'd
be smart and shut down all the client PCs, shut down the old server, configure
the new server to have the same hostname and IP address, start Samba, and start
the client PCs, and hope they'd just use the new machine as the domain server. 
Nope.  Oh well, I'll just go in and re-join the domain...  Wrong again.  The
infamous There cannot be multiple connections to the server... crap.  Took me
several hours of searching the net to figure out that -Shortcuts- to
files/folders on the server can cause that message.  Ok, so I got it to join
the domain.  I log off Administrator, and log in as a domain user.

Login works wonderfully.  I am so happy.  But, after everything is loaded, i
notice things are off.  Background is gone, I get a message about Could not
reconnect all network drives  (There are usually two drives mapped to the
server, Y and Z.  The Z drive maps just fine.  (Y maps to the 'public' shared
directory for all users, while Z maps to the users home directory).

I'm dumbfounded, so I click 'Start' to go into control panel, and another
suprise, the icons on the left side of XP's two sides start menu, are gone.

When I go to the display control panel, the theme box is entirely black, when
you try to change any settings, you get Cannot access C:\Windows\some obscure
file error).

I have dug and dug, I cannot find anything anywhere on the net about anyone
having any problem even remotely similiar to this.

Any help, is -greatly- appreciated.  This is the most confounding issue I've
ever seen.  It's almost like the 'settings' for the profile aren't getting
copied over.

-Jeremy




__
Do you Yahoo!?
Yahoo! Domains – Claim yours for only $14.70/year
http://smallbusiness.promotions.yahoo.com/offer 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] THIS is TRUE for 16 May

2004-05-21 Thread This is True
Dispatched this week to 122,000+ readers in 200 countries, including at
  least 10 in the .si domain (Slovenia), this is...

THIS is TRUE for 16 May 2004 Copyright www.thisistrue.com
-
WILL BE DEMANDING A REMATCH: Thomas Woods, 59, of Davis Park on New
  York's Fire Island, was drinking heavily with his roommate, Rod
  Bennett, when he had an idea for a contest. Let's see which one of us
  leaves first, Woods allegedly said as he set the rug on fire. As the
  flames spread Bennett ran out to a neighbor's house to call the fire
  department. By the time firefighters arrived the house was fully
  engulfed, and Woods was later found burned to death. (New York Newsday)
  ...Then he's the winner, isn't he?

STICKY WICKET: As the Carlisle, England, cricket team took to the pitch
  for a game, player Dick Scott called for a moment of silence to
  remember former player Leonard Bunt Brunton. The flag was even set to
  half-mast. I was really touched when I heard about it, Brunton, 66,
  said later. Huh? Brunton isn't dead: Scott insists another team member
  had mistaken an obituary for another man nicknamed Bunt for their
  former colleague. I stopped playing a few years ago, Brunton said. I
  suppose I should go down again now to prove I exist. (Carlisle News
  and Star) ...What, and spoil the moment?

  --==**O**==--
 GUARANTEED MAILING LISTS

 USA Mailing Lists offers lists to satisfy virtually any Mailing,
 Telemarketing or Emailing need. Guaranteed lists from the most
   recently updated and complete databases available anywhere.
   Fast, Courteous Service - Discounted Prices
   Visit http://www.USAMailingLists.com or call 1-800-207-8306
  --==**O**==--

PROOF THE TERRORISTS HAVE WON II: When a 15-year-old boy at Prosser
  (Wash.) High School turned in his sketchbook to his art teacher, the
  teacher was distressed to see it contained some political art. One
  sketch showed President Bush's head on a stake. Another showed the Bill
  of Rights and the Constitution in flames. Another was captioned End
  the War -- on Terrorism. Protected speech in the Land of the Free,
  right? Of course not! The teacher notified the vice principal, who
  notified the police, who called in the U.S. Secret Service. We assume
  that he deliberately took an action of his own free will, explains
  Prosser Police Chief Win Taylor, which he reasonably should have known
  was against the code of conduct. Secret Service agents interviewed the
  boy, but it's unclear if they took any other action. The boy thinks
  it's all funny, says a family friend. (Seattle Post-Intelligencer,
  Seattle Times) ...Right: so funny it's scary.

NOT QUITE OSCAR MAYER: Robert Scott Stinnett, 13, and Josh Logan Lewis,
  15, were arrested in San Carlos Park, Fla., on suspicion of possessing
  a loaded wiener. Lee County Sheriff's investigators say the duo made a
  bomb and concealed it in a Polish sausage. Described as homemade
  napalm, sheriff's spokeswoman Ileana LiMarzi said they stuffed it into
  the sausage casing so they could call it a wiener bomb, and
  apparently had no intention of trying to detonate it. The boys were
  each charged with one felony count of making a destructive device.
  (Bonita News) ...Typical teen boy: Yeah, this wiener is loaded, but I
  promise not to use it.

THEY'RE IN A PICKLE ALL RIGHT: Sauerkraut Seeks New Image -- Reuters
  headline

DID YOU FIND an error? See http://www.thisistrue.com/errata.html

MY MENTIONING THAT TRUE's new mailing address is PO Box 666 brought a lot
  of amused response. Sallie in Pennsylvania: My husband is a
  Presbyterian pastor and when he went to his first church in Amherst,
  VA, he discovered that the mailbox # was 666. Apparently the Baptist
  postmaster made the assignment as a joke on the Presbyterian assistant
  postmaster. The church still has that post office box and no one has
  trouble remembering it! Jim in California: A few years back our home
  phone number had a 666 prefix. When we got the number, the phone
  company actually asked us hesitantly if we had any objections. I found
  it funny, even though as a Christian I'm apparently not supposed to.
  Every time I gave anyone my phone number, I got a funny look or a
  comment, most frequently a frightened 'h' sound. I always replied,
  'yes, it's true; Pacific Bell is the antichrist.' If they persisted, I
  would say 'do you honestly believe that both God and Satan have nothing
  better to do than play number games?' before launching into a very
  brief explanation of the biblical meaning of '666' as found in
  Revelation. I don't have that phone number anymore since we moved, but
  my address is now 676, and I use the 'neighbor of the beast' line a
  lot. It happens that my next door 

svn commit: samba r806 - branches/SAMBA_4_0/source/build/pidl

2004-05-21 Thread tpot
Author: tpot
Date: 2004-05-21 12:15:04 + (Fri, 21 May 2004)
New Revision: 806

Modified:
   branches/SAMBA_4_0/source/build/pidl/eparser.pm
Log:
Checkin of workarea - tridge gave me some good ideas today for a better
way to do this.


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=806nolog=1


svn commit: samba r807 - branches/SAMBA_4_0/source/build/smb_build

2004-05-21 Thread metze
Author: metze
Date: 2004-05-21 16:02:24 + (Fri, 21 May 2004)
New Revision: 807

Modified:
   branches/SAMBA_4_0/source/build/smb_build/makefile.pl
Log:
compile with PICFLAG by default
(ask tridge why this is better than recompiling only the
 files we need for libraries with PICFLAG)


metze


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=807nolog=1


svn commit: samba r808 - branches/SAMBA_4_0/source/lib/tdb

2004-05-21 Thread idra
Author: idra
Date: 2004-05-21 16:39:12 + (Fri, 21 May 2004)
New Revision: 808

Modified:
   branches/SAMBA_4_0/source/lib/tdb/tdbutil.c
Log:
fix libtdb build by ifedffing out an smb_panic() and copying over CatchSignal fn from 
lib/signal changing it's name to TdbCatchSignal

WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=808nolog=1


svn commit: samba r809 - trunk/source/rpc_server

2004-05-21 Thread jra
Author: jra
Date: 2004-05-21 18:06:20 + (Fri, 21 May 2004)
New Revision: 809

Modified:
   trunk/source/rpc_server/srv_lsa_nt.c
Log:
Fix from Jerome Borsboom [EMAIL PROTECTED] to ensure error status
codes don't get overwritten.
Jeremy.


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=809nolog=1


svn commit: samba r810 - branches/SAMBA_3_0/source/rpc_server

2004-05-21 Thread jra
Author: jra
Date: 2004-05-21 18:06:27 + (Fri, 21 May 2004)
New Revision: 810

Modified:
   branches/SAMBA_3_0/source/rpc_server/srv_lsa_nt.c
Log:
Fix from Jerome Borsboom [EMAIL PROTECTED] to ensure error status
codes don't get overwritten.
Jeremy.


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=810nolog=1


svn commit: samba-docs r75 - trunk/manpages

2004-05-21 Thread jelmer
Author: jelmer
Date: 2004-05-21 23:46:38 + (Fri, 21 May 2004)
New Revision: 75

Modified:
   trunk/manpages/editreg.1.xml
Log:
Fix short description

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=samba-docspath=/rev=75nolog=1


svn commit: samba r811 - branches/SAMBA_4_0/source/lib/ldb/ldb_tdb

2004-05-21 Thread tridge
Author: tridge
Date: 2004-05-22 00:52:04 + (Sat, 22 May 2004)
New Revision: 811

Modified:
   branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_tdb.c
Log:
make the ldb_modify REPLACE semantics better match LDAP (ie. no error
on the attribute not existing and allow an empty replace)



WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=811nolog=1


svn commit: samba r812 - branches/SAMBA_4_0/source/rpc_server/samr

2004-05-21 Thread tridge
Author: tridge
Date: 2004-05-22 00:53:57 + (Sat, 22 May 2004)
New Revision: 812

Modified:
   branches/SAMBA_4_0/source/rpc_server/samr/dcesrv_samr.c
   branches/SAMBA_4_0/source/rpc_server/samr/samdb.c
Log:
added a new samdb_replace() call that simplifies the code in the main samr server a 
bit. 



WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=812nolog=1


svn commit: samba r813 - branches/SAMBA_4_0/source

2004-05-21 Thread tridge
Author: tridge
Date: 2004-05-22 01:29:42 + (Sat, 22 May 2004)
New Revision: 813

Modified:
   branches/SAMBA_4_0/source/configure.in
Log:
gcc has fixed its huge debug sizes with -g now, so drop the -gstabs,
allowing us to use a more standard debug format.

If you want it even smaller than I recommend the
-feliminate-dwarf2-dups option, if your version of gcc supports it.


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=813nolog=1


svn commit: samba r814 - branches/SAMBA_3_0/source/smbd

2004-05-21 Thread herb
Author: herb
Date: 2004-05-22 05:01:25 + (Sat, 22 May 2004)
New Revision: 814

Modified:
   branches/SAMBA_3_0/source/smbd/process.c
   branches/SAMBA_3_0/source/smbd/reply.c
Log:
conn is 0 during ioctl (at least during smbtorture IOCTL test)
fix smbd panic


WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=814nolog=1