[Samba] Connecting HOME-Drives
Hello, we are using SAMBA 2.20 on Sun Solaris 8 and we provide all the HOME-Drives for the Users: Configuration: # Samba config file created using SWAT # from UNKNOWN (161.63.17.34) # Date: 2004/06/15 08:42:27 # Global parameters [global] workgroup = MYGROUP server string = Samba Server log file = /var/adm/sambalog.%m max log size = 50 dns proxy = No [homes] comment = Home Directories read only = No create mask = 0775 case sensitive = Yes browseable = No [printers] path = /tmp printable = Yes browseable = No Problem: If we try to connect to different Home-Section on the same Server, all Connections will be done with the same User ( of the first connection) instead of using the individual for the Home-Drive. Example: User-Connection:John, Peter and Steve Home-Pathes:/home/John /data/Peter /usr2/Steve All Connections setup on W2k or WXP configured to use the individual User (Connect as). But after reboot the PC, the connections are all made with the first User. => Wich configuration have to be changed? Thanks. Thomas Schmidt ArvinMeritor [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Password problems with Samba-3.0.4
I'm apparently not the first person to have this problem, but I can't find a fix for it anywhere on the web, or in Usenet. Here's the scenario: I upgraded from 2.2.8a to 3.0.4 during a recent hardware move. All of my client machines are connecting properly, but my users can't change passwords from their WinXP clients now. (Client error message is "bad username or incorrect old password".) This happens with any user account, including newly created test accounts. Here is what I get in the log.%MACHINENAME% file: libsmb/smbencrypt.c:decode_pw_buffer(519) decode_pw_buffer: incorrect password length (12889175). libsmb/smbencrypt.c:decode_pw_buffer(520) decode_pw_buffer: check that 'encrypt passwords = yes' (other versions of this error give lengths of (1000352699) and (-55166985) I already have 'encrypt passwords = yes' in my smb.conf file, and I've applied all the patches to the client machine, as well as the "require_sign_or_seal" registry hack. I've manually set the password from the console, and I can login using that password, so it's definitely not something as simple as the new password being thrown out by PAM. If this weren't a binary install from the latest samba.org RPM file, I'd suspect that one of the executables or libraries were corrupted. Any help would be appreciated. Chris Hunter [EMAIL PROTECTED] __ Do you Yahoo!? Friends. Fun. Try the all-new Yahoo! Messenger. http://messenger.yahoo.com/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Cant create in a subdirectory...
I've battled this one for a few days now and its costing my sanity so I am hoping that someone here has an answer I am running the samba server 3.0.4 on a linux 2.4.25 server. I can connect to my share point and authenticate fine I can create files or directories in the root of the sharepoint fine I can go into subdirectories and look at all the files... But I cannot create in any directories below the sharepoint! If I do a touch filename I get a Permission Denied. But I can do it in the root of my sharepoint. I have several like this. Here is my fstab entry on my client box: //modok/wbchmura/home/wbchmura/mnt/wbchmura smbfs rw,users,owner,noauto,username=wbchmura,password=,uid=500,gid=500 0 0 --- And a chunk of my smb.conf file [wbchmura] comment = Bill's directory path = /home/wbchmura valid users = wbchmura public = no writable = yes read only = no printable = no The uid and gif match the wbchmura uid and gid on the file server. In the sharepoint all of the files and directories are set accordingly. drwxr-xr-x2 wbchmura wbchmura 4096 Jun 15 01:17 testdir drwxrwxr-x2 wbchmura wbchmura 4096 Jun 15 00:10 tmp If I change the rights on a directory to 777 it works fine. Do symlinks affect anyting? The path to my share is a symlink of /home -> /raid1/home I tried coding in /raid1/home and it seemed to not change anything Here are some log files. Let me know if I forgot anything... Thanks Logon## [2004/06/15 01:24:17, 3] smbd/oplock.c:init_oplocks(1226) open_oplock_ipc: opening loopback UDP socket. [2004/06/15 01:24:17, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(303) Linux kernel oplocks enabled [2004/06/15 01:24:17, 3] smbd/oplock.c:init_oplocks(1257) open_oplock ipc: pid = 22982, global_oplock_port = 32907 [2004/06/15 01:24:17, 3] lib/access.c:check_access(313) check_access: no hostnames in host allow/deny list. [2004/06/15 01:24:17, 2] lib/access.c:check_access(324) Allowed connection from (192.168.0.99) [2004/06/15 01:24:17, 3] smbd/process.c:process_smb(890) Transaction 0 of length 183 [2004/06/15 01:24:17, 3] smbd/process.c:switch_message(685) switch message SMBnegprot (pid 22982) [2004/06/15 01:24:17, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/06/15 01:24:17, 3] smbd/negprot.c:reply_negprot(455) Requested protocol [PC NETWORK PROGRAM 1.0] [2004/06/15 01:24:17, 3] smbd/negprot.c:reply_negprot(455) Requested protocol [MICROSOFT NETWORKS 1.03] [2004/06/15 01:24:17, 3] smbd/negprot.c:reply_negprot(455) Requested protocol [MICROSOFT NETWORKS 3.0] [2004/06/15 01:24:17, 3] smbd/negprot.c:reply_negprot(455) Requested protocol [LANMAN1.0] [2004/06/15 01:24:17, 3] smbd/negprot.c:reply_negprot(455) Requested protocol [LM1.2X002] [2004/06/15 01:24:17, 3] smbd/negprot.c:reply_negprot(455) Requested protocol [DOS LANMAN2.1] [2004/06/15 01:24:17, 3] smbd/negprot.c:reply_negprot(455) Requested protocol [Samba] cd into sharepoint and testdir and touch "newtest"# [2004/06/15 01:26:29, 3] smbd/process.c:process_smb(890) Transaction 36 of length 80 [2004/06/15 01:26:29, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 22982) [2004/06/15 01:26:29, 3] smbd/trans2.c:call_trans2qfilepathinfo(2331) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2004/06/15 01:26:29, 3] smbd/trans2.c:call_trans2qfilepathinfo(2362) call_trans2qfilepathinfo . (fnum = -1) level=512 call=5 total_data=0 [2004/06/15 01:26:31, 3] smbd/process.c:process_smb(890) Transaction 37 of length 80 [2004/06/15 01:26:31, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 22982) [2004/06/15 01:26:31, 3] smbd/trans2.c:call_trans2qfilepathinfo(2331) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2004/06/15 01:26:31, 3] smbd/trans2.c:call_trans2qfilepathinfo(2362) call_trans2qfilepathinfo . (fnum = -1) level=512 call=5 total_data=0 [2004/06/15 01:26:31, 3] smbd/process.c:process_smb(890) Transaction 38 of length 87 [2004/06/15 01:26:31, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 22982) [2004/06/15 01:26:31, 3] smbd/trans2.c:call_trans2qfilepathinfo(2331) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2004/06/15 01:26:31, 3] smbd/trans2.c:call_trans2qfilepathinfo(2362) call_trans2qfilepathinfo testdir (fnum = -1) level=512 call=5 total_data=0 [2004/06/15 01:26:37, 3] smbd/process.c:process_smb(890) Transaction 39 of length 95 [2004/06/15 01:26:37, 3] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 22982) [2004/06/15 01:26:37, 3] smbd/trans2.c:call_trans2qfilepathinfo(2331) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 512 [2004/06/15 01:26:37, 3] smbd/trans2.c:call_trans2qfilepathinfo(2349) call_trans2qfilepathinfo: SMB_VFS_LSTAT of testdir/newtest failed (No such
Re: [Samba] Samba shares becoming inactive after a while
>>> Greg Folkert <[EMAIL PROTECTED]> 2004-06-14 17:01:45 >>>
> On Mon, 2004-06-14 at 03:09, Wilfred van Velzen wrote:
> > When a user is not using a samba share, after a while they become
> > "inactive". When a user wants to access the share again, it takes
an
> > irritating long time before they get access again. The (windows)
> > application that does the accessing is not responding during that
> > time. There are no drive letters assigned to the shares in a logon
> > script. When I do assign a drive letter to the share (in a test
> > situation), this problem doesn't seem to exist. But how can I
prevent
> > this without assigning drive letters to all the shares?
> >
> > Here's the global section of my /etc/samba/smb.conf :
> >
> > [global]
> > workgroup = SERCOM
> > server string = Samba Server
> > encrypt passwords = Yes
> > map to guest = Bad User
> > time server = Yes
> > unix extensions = Yes
> > socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
> > keepalive = 0
> > printcap name = CUPS
> > add user script = /usr/sbin/useradd -c Machine -d /dev/null -s
> > /bin/false %m$
> > domain logons = Yes
> > os level = 65
> > preferred master = Yes
> > domain master = Yes
> > printing = cups
> > veto files = /*.eml/*.nws/riched20.dll/*.{*}/
> >
> > I've already experimented with the 'socket options' and
'keepalive'
> > options, but these don't seem to make any difference...
>
> From the included docs for Samba:
>
> deadtime (G)
> The value of the parameter (a decimal integer) represents
the
> number of minutes of inactivity before a connection is
> considered dead, and it is disconnected. The deadtime only
takes
> effect if the number of open files is zero.
>
> This is useful to stop a server's resources being exhausted
by a
> large number of inactive connections.
>
> Most clients have an auto-reconnect feature when a connection
is
> broken so in most cases this parameter should be transparent
to
> users.
>
> Using this parameter with a timeout of a few minutes is
> recommended for most systems.
>
> A deadtime of zero indicates that no auto-disconnection
should
> be performed.
>
> Default: deadtime = 0
>
> Example: deadtime = 15
>
> Hope this helps.
Since 'deadtime = 0' is the default, and I haven't specified it
explicitly, this should already be in effect. But I have now specified
'deadtime = 540' in my global section, as a test value... We'll see...
Met vriendelijke groet / Best regards,
Wilfred van Velzen
Met vriendelijke groet / Best regards,
Wilfred van Velzen
--
SERCOM Regeltechniek b.v.
Heereweg 9
2161 AB Lisse
Nederland
+31 (0)252 416530 (voice)
+31 (0)252 419481 (fax)
Re: [Samba] which XP clients registry hacks are necessary now?
Adam Tauno Williams wrote: I've read alot of dated material about various registry hacks to make various patch levels of XP Clients work. NONE NONE NONE NONE NONE NONE NONE NONE NONE NONE NONE NONE Even Windows 2003 will merrily join a domain controlled by a recent version of Samba. I know, I can show you one. It seems this issue of registry hacks is posted at least once a day - the answer is NONE, NONE, NONE, NONE, NONE, NONE, NONE, NONE, NONE, NONE, NONE, NONE. Thanks, that clears it up. (I should have looked closer at current posts.) I seem to be getting "access denied" when logging in on my remote/server profile, then it says It will use a local cached copy of my profiles. It seems to be caused by a lingering connection to "homes" as I've read. Only when I logout/login I think, when I restart XP it doesn't seem to have this problem. Maybe this is the subject of an entirely different post, but I thought I may need some registry hack. Thanks, -Scott -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] which XP clients registry hacks are necessary now?
> I've read alot of dated material about various registry hacks to make > various patch levels of XP Clients work. NONE NONE NONE NONE NONE NONE NONE NONE NONE NONE NONE NONE Even Windows 2003 will merrily join a domain controlled by a recent version of Samba. I know, I can show you one. It seems this issue of registry hacks is posted at least once a day - the answer is NONE, NONE, NONE, NONE, NONE, NONE, NONE, NONE, NONE, NONE, NONE, NONE. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] which XP clients registry hacks are necessary now?
I've read alot of dated material about various registry hacks to make various patch levels of XP Clients work. Is there a URL that keeps this up to date? I know it seems with each release of Samba there are less hacks necessary on XP Clients but there doesn't seems to be a definitive list. Also with each new XP patch, there is a potential of needing more hacks. If there isn't a source for this information can someone give me their best guess? Latest Samba (3.0.4) and latest XP upgrades (SP1 with all windows updates til now). Thanks, -Scott -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] secrets.tdb
Hi, Would changing the domain password (used to join domain) after net rpc join -U user%'pass' change secrets.tdb? Regards, Norman -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] PRINT$ Problems
I have been trying to setup point and print on a debian testing box. I have a HP5550 printer and am trying to install the drivers through the add printer wizard, the drivers appeared to install fine. Afterwards I right clicked on the printer and clicked connect, per the SAMBA howto, this also appeared to work. When I tried to enter the properties screen of the local printer or on the share I get the following error message: "Function address 0x60630d26 caused a protection fault. (exception code 0xc005) Some or all property page(s) may not be displayed)." After the error message comes up, the properties window does not open. I cannot print either. Here is the relavent section from my smb.conf: - [printers] comment = All Printers browseable = yes printable = yes path = /tmp writable = yes create mode = 0700 [print$] path = /etc/samba/drivers browsable = no guest ok = yes read only = yes write list = aaron root -- Thanks, Aaron Goodman -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Spaces im passwords
I've never heard of any login allowing spaces in passwords. "Matthias Spork" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Hello, > > are there any problems with spaces and other special chars in passwords > like "s#ec re!t" ? > > My users can't use spaces in Password. Error: You are not allowed to > change your password. > > matze > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Member Server in Active Directory
I'm trying to join a Samba 3.0.4 (compiled from source on Debian) to an Active Directory as a member server. I believe Kerberos is configured correctly as kinit creates a ticket for the realm. Executables appear to have support for Kerberos and LDAP (smbd -b | grep KRB and grep LDAP) return OK. When I try to join the AD with net ads join -U myadminusername I'm prompted for my password but then get: libads/ldap.c:ads_add_machine_acct(1006) Host account for inpsamo-debian already exists - modifying old account libads/ldap.c:ads_join_realm(1336) ads_add_machine_acct: No such object ads_join_realm: No such object I only have admin rights for an ou of the Active Directory. Here is a Windows LDP search of my ou: ldap_search_s(ld, "DC=pwr,DC=int,DC=edited,DC=com", 2, "(ou=SAMO)", attrList, 0, &msg) Result <0>: (null) Matched DNs: Getting 1 entries: >> Dn: OU=SAMO,OU=Mediterranean Coast Network,OU=PWR,DC=pwr,DC=int,DC=edited,DC=com 2> objectClass: top; organizationalUnit; 1> ou: SAMO; 1> description: SAMO; 1> distinguishedName: OU=SAMO,OU=Mediterranean Coast Network,OU=PWR,DC=pwr,DC=int,DC=edited,DC=com; 1> name: SAMO; 1> canonicalName: pwr.int.edited.com/PWR/Mediterranean Coast Network/SAMO; I guess my question is could it be how my realm is configured (PWR.INT.EDITED.COM) or what else could keep me from joining the directory? Current smb.conf: [global] unix charset = LOCALE workgroup = PWR realm = PWR.INT.EDITED.COM server string = Samba 3.0.2 security = ADS username map = /etc/samba/smbusers log level = 1 syslog = 0 log file = /var/log/samba/%m max log size = 50 printcap name = CUPS ldap ssl = no idmap uid = 1-2 idmap gid = 1-2 template primary group = "Domain Users" template shell = /bin/bash winbind separator = + printing = cups [homes] comment = Home Directories valid users = %S read only = No browseable = No Thanks for any ideas... Mike -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RES: [Samba] Internet access control through samba ?
Take a lot at http://www.squid-cache.org/Doc/FAQ/FAQ-23.html#winbind -Mensagem original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Em nome de Matthias Spork Enviada em: segunda-feira, 14 de junho de 2004 19:30 Para: Nikhil Parva Cc: Samba Assunto: Re: [Samba] Internet access control through samba ? Hello, > >Hi, >is there a possibility to use a samba pdc for internet access control ? >I want only machines, which are logged in to the domain, to have >internet access. >Currently everybody can use the Internet through the masquerading >functionality >on the server(also pdc). > >Thanks Jeremias M. >-- >To unsubscribe from this list go to the following URL and read the >instructions: http://lists.samba.org/mailman/listinfo/samba > > > try mod_ntlm for Squid matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba = Esta mensagem pode conter informacao confidencial e/ou privilegiada. Se voce nao for o destinatario ou a pessoa autorizada a receber esta mensagem, nao devera utilizar, copiar, alterar, divulgar a informacao nela contida ou tomar qualquer acao baseada nessas informacoes. Se voce recebeu esta mensagem por engano, por favor avise imediatamente o remetente, respondendo o e-mail e em seguida apague-o. Agradecemos sua cooperacao. This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, change, take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. = -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Spaces im passwords
Hello, are there any problems with spaces and other special chars in passwords like "s#ec re!t" ? My users can't use spaces in Password. Error: You are not allowed to change your password. matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Internet access control through samba ?
Hello, Hi, is there a possibility to use a samba pdc for internet access control ? I want only machines, which are logged in to the domain, to have internet access. Currently everybody can use the Internet through the masquerading functionality on the server(also pdc). Thanks Jeremias M. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba try mod_ntlm for Squid matze -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: v3.0.4-5 (Debian Sid) not Samba 3.0.5 - Can't change password
On Mon, 2004-06-14 at 16:51, Laurent CARON wrote: > Greg Folkert wrote: > > > > > > >I had a very similar problem. My only fix I could actually find was to > >completely remove all of the "generated" samba files (the .tbd files and > >such) with samba and winbind not running. Then removing all the machine > >accounts out of /etc/passwd, basically cleaning up to look just like > >"just installed and never run yet" > > > >Then starting joining the machines again, then using a script to > >generate the samba users from /etc/passwd... setting policies proper and > >since then (two weeks ago) haven't had any problems. > > > > > > > > > Unfortunately it is a live environment > > I can't remove the accounts :( Same deal here, neither could *I*. But twas the only solution. As 3.0.4 somehow didn't SIGHUP and rotatelogs on Sunday morning about a month ago. Painful, Painful... I had to keep restarting SAMBA every 4-6 hours. Actually stop and start it. > I'll try on a test environment I did too. Came to the same conclusion. Major bigtime suxxorz. -- [EMAIL PROTECTED] REMEMBER ED CURRY! http://www.iwethey.org/ed_curry Novell's Directory Services is a competitive product to Microsoft's Active Directory in much the same way that the Saturn V is a competitive product to those dinky little model rockets that kids light off down at the playfield. -- Thane Walkup signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: v3.0.4-5 (Debian Sid) not Samba 3.0.5 - Can't change password
On Mon, 14 Jun 2004, Laurent CARON wrote: > Greg Folkert wrote: > > > >I had a very similar problem. My only fix I could actually find was to > >completely remove all of the "generated" samba files (the .tbd files and > >such) with samba and winbind not running. Then removing all the machine > >accounts out of /etc/passwd, basically cleaning up to look just like > >"just installed and never run yet" > > > >Then starting joining the machines again, then using a script to > >generate the samba users from /etc/passwd... setting policies proper and > >since then (two weeks ago) haven't had any problems. > > > > Unfortunately it is a live environment > > I can't remove the accounts :( > > I'll try on a test environment > There's a possibility that your password database (or another .tdb database) may be corrupt. Not saying it is, just saying it could be. Cleaning up the database is *very* easy: 1. Shut down smbd and nmbd (very important! see not below) 2. Go to each of the directories containing samba-related .tdb files (i.e., /etc/samba ; /var/cache/samba or /var/lib/samba ; etc.) and issue 'tdbbackup *' 3. This will create backup copies of your .tdb databases. Part of the backup process is that it creates "clean" backups -- any entries that are not quite right will be cleaned up or removed. 4. Restart Samba. As part of the startup process, Samba will detect the clean .tdb files and use them if it detects that the "real" .tdb are corrupt. 5. Check to make sure that all users are where they should be (hint: 'pdbedit -Lw' -or- 'pdbedit -Lv'). Recreate any users that have been blown away; they've been removed because of corruption. It's very important that Samba NOT be running when you back up your tdb .files. Otherwise, you can not guarantee clean backups. Even if you've done 'service samba stop' or 'rcsamba stop'; do a 'ps -ax' to MAKE SURE smbd and nmbd are not running. As per a tip I received from John Terpstra, it's a good idea to backup these files (using tdbbackup) before starting Samba, every time. --Jon Johnson Sutinen Consulting, Inc. [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Different domains
On Mon, 14 Jun 2004 [EMAIL PROTECTED] wrote: > Can users/computer be part of different Domains? I've > noticed that the user/computer needs that DC Sid in it. I > would like for users/computers to be part of different > Domains at any given time. Is this possible and how within > the same ldap entry. > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > I'm certain I'll be corrected if I'm wrong, but a workstation can have an account in only one domain. A user can be listed in multiple domains, but then you have the issue of password synchronization: the user can change their password on the domain that their workstation has an account on, but this will not propagate to the other domain. If the user 'fred' has an account in DOMAIN02 but not in DOMAIN01, fred cannot log into a workstation that has been joined to DOMAIN01. You may want to investigate domain trusts. This allows workstations and users from one domain access to resources on another domain with a minimum of fuss once it's configured. Note that if you are dealing with domains of different versions (i.e., DOMAIN01 is Windows NT PDC/BDC and DOMAIN02 is Windows 2003 ADS), then the higher-version domain MUST NOT be configured in native mode, but in a compatibility mode. If one domain is a Small Business Server domain, you can forget about it, Microsoft has made it impossible. THAT BEING SAID, I have a customer who has two domains: their workstations are in an NT-style domain (Small Business Server) and their terminal server is in a Windows 2003 ADS domain. Because they have the same user name and password in both domains, they can access resources in either domain from either domain. Because one is SBS, I cannot set up a domain trust. Note that Windows 9x/Me doesn't truly reside in a domain (since it does not participate in domain security); at logon, a user can specify any domain they wish. I realize that this does not address Samba specifically, but I believe it still applies. --Jonathan Johnson [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: v3.0.4-5 (Debian Sid) not Samba 3.0.5 - Can't change password
Greg Folkert wrote: I had a very similar problem. My only fix I could actually find was to completely remove all of the "generated" samba files (the .tbd files and such) with samba and winbind not running. Then removing all the machine accounts out of /etc/passwd, basically cleaning up to look just like "just installed and never run yet" Then starting joining the machines again, then using a script to generate the samba users from /etc/passwd... setting policies proper and since then (two weeks ago) haven't had any problems. Unfortunately it is a live environment I can't remove the accounts :( I'll try on a test environment -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Need help configuring Samba3/LDAP PDC
Craig White wrote:
On Fri, 2004-06-11 at 13:16, [EMAIL PROTECTED] wrote:
Aaron Ogden wrote:
On a related note, I've imported lots of NIS data into this LDAP
directory, so I have lots of valid Unix accounts. These are working
properly on LDAP-enabled linux machines, but how do I 'convert' them
for use with Samba? Ideally I would like to have one record for each
user that contains all of the samba data as well as the unix data. Is
there an easy way to add the appropriate samba fields to 'normal'
posixAccounts? Is there a FAQ that covers the procedure? Any help
would be welcome.
That's a good question and I hope someone has an answer. I tried to do
the same a while back and didn't have any luck either. You can't use
the smbldap-useradd scripts or smbpasswd -a 'cause those will only tell
you that the entry already exists. Oooo... but it looks like you can
use "smbldap-usermod -a" to add the necessary objectclass and whatnot.
Play around with that and see what happens.
I have not played with smbldap-usermod -a but that might very well work.
What I did play with was webmin - www.webmin.com
Properly configured, webmin's LDAP Users & Groups can add all of the
samba properties desired to any user by editing the user and clicking
the samba button. I found this to be a very valuable tool for less than
versant office manager to add/delete accounts, edit passwords, etc. This
is the best solution that I have found to date (though LAM looks pretty
good).
Craig
Thanks Craig. I discovered the joys of Webmin a few weeks ago and I
agree, it's a great tool for managing LDAP data, especially for people
who don't completely understand LDAP yet. I found another tool called
LDAP Browser/Editor which has worked really well... it's java based so
it runs on anything and it allows one to easily edit or delete any
object in the LDAP tree. I have used Webmin to add the Samba fields to
my account and it works great. The problem is that I have lots of users
and I don't want to give myself carpal tunnel syndrome by clicking that
many times. Another problem is that I want to preserve the old Samba
passwords instead of resetting them to some default value. :-) I
worked out a way to do this via shell script, I have used it to enable
samba access for 250 accounts. Works like a charm.
#!/bin/sh
#
# create_samba_accounts.sh 2004-06-14 AAO
#
SMBSBIN=/var/lib/samba/sbin
SMBHOME=/etc/samba
SMBPASSWD=/etc/samba/smbpasswd.old
USERLIST=`grep -v '^#' $SMBPASSWD | awk -F':' '{print $1}'`
LDAPADMIN=""
LDAPPASSWD=""
PEOPLEOU=""
LOGFILE="/tmp/create_samba_accounts.log"
rm $LOGFILE
cd $SMBSBIN
for USER in $USERLIST
do
# grab password hashes from smbpasswd file
USERID=`grep -v '^#' $SMBPASSWD | grep ^$USER: | awk -F':' '{print $2}'`
LMPASSWD=`grep -v '^#' $SMBPASSWD | grep ^$USER: | awk -F':' '{print
$3}'`
NTPASSWD=`grep -v '^#' $SMBPASSWD | grep ^$USER: | awk -F':' '{print
$4}'`
# create LDIF file for modifications
LDIF=/tmp/$USER.LDIF
printf "dn: uid=$USER,$PEOPLEOU\nchangetype: modify\nreplace:
sambaLMPassword\nsambaLMPassword: $LMPASSWD\n-\nreplace:
sambaNTPassword\nsambaNTPassword: $NTPASSWD\n-\n" > $LDIF
#
# print variables to stdout (sanity check)
printf "username: $USER\nuser id : $USERID\nLM password:
$LMPASSWD\nNT password: $NTPASSWD\n"
# printf "contents of $LDIF:\n"
# cat $LDIF
# printf "\n"
#
# check for existing account
if /usr/bin/ldapsearch -x "uid=$USER" | grep uidNumber 2>&1 > /dev/null;
then
printf "$USER: account exists in LDAP database\n" >> $LOGFILE
else
printf "$USER: account not found, creating account now...\n" >>
$LOGFILE
./smbldap-useradd.pl $USER
fi
# check for existing samba records
if /usr/bin/ldapsearch -x "uid=$USER" | grep sambaSamAccount 2>&1 >
/dev/null;
then
printf "$USER: already has samba records\n" >> $LOGFILE
else
# add sambaSamAccount records to user account
printf "$USER: samba records not found, adding them now...\n" >>
$LOGFILE
./smbldap-usermod.pl -a $USER
fi
# enable user account and set initial password
/usr/bin/smbpasswd -a -e $USER $USER
# use ldapmodify to set password
/usr/bin/ldapmodify -x -w $LDAPPASSWD -D "$LDAPADMIN" -f $LDIF
# delete LDIF file
rm $LDIF
# check for null passwords
if [ "$LMPASSWD" = "" ]; then
# user has null password; log it and continue
printf "$USER: sambaLMPassword is not set\n" >> $LOGFILE
fi
if [ "$NTPASSWD" = "" ]; then
# user has null password; log it and continue
printf "$USER: sambaNTPassword is not set\n" >> $LOGFILE
fi
done
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] [3.0.4] Problem with strange characters in file names
I forgot to add, this cleared it up for subsequent files, the one's that can't be read, I had delete or rename manually to get XP to read them. -- Paul Espinosa [EMAIL PROTECTED] IT Supervisor The World Company 785/312-6912 .[ Paul Espinosa wrote ] | | | I had this problem also. I added: | | Dos charset = 850 | Unix charset = ISO8859-1 | | To my smb.conf and it cleared it up. | -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] [3.0.4] Problem with strange characters in file names
I had this problem also. I added: Dos charset = 850 Unix charset = ISO8859-1 To my smb.conf and it cleared it up. -- Paul Espinosa [EMAIL PROTECTED] IT Supervisor The World Company 785/312-6912 .[ Martin Hermanowski wrote ] | | | Hi, | | I'm using samba 3.0.4, with XP clients and server-side-profiles. | Sometimes, my users save bookmarks with strange characters in them. | These files are saved flawlessly on the server, but Windows is unable to | copy them back to the local profile, and so the user can not log in. | | I'm using a iso8859-15 charset. | | I hope this is not a common question, I looked in the archive but I had | been unable to find a similar one. | | One example for a strange characters is in the title of the home page of | the US Department of State (http://www.state.gov/), in firebird, it is | shown as \2013, on the linux server, is is shown as `^S'. | | Is there any way I could modify change these characters to spaces, or | any other solution? | | LLAP, Martin | -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problems with Samba Client
I was hoping some one could help me. I installed and configured Samba 3.0.2 on a Sun U60 running Solaris 9. I had no problems configuring and using my laptop as a client while in my office. My problem is trying to map the drive while VPN'ed in from my home PC. I keep getting the following error: "this account is not authorized to log in from this station". My PC client is a Dell 4550 running XP. Any help would be appreciated. Ken Valis -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem Using Samba
I have a question I hope some one can help me out with. I have Samba 3.0.2 running on a Solaris 9 server. I am sharing a directory calle /support. I have no problems mapping the drive from my laptop while in my office. My problem is I cannot map the drive while VPNed in from home using my desktop PC. I am able to map other Windows drives, but not this Samba shared drive. Here are some specifics: Samba server Sun U60 running Solaris 9 [support] comment = Support file space path = /support read only = no public = yes create mode = 0750 hosts allow = ALL Samba clinet Dell 4550 running XP The error I keep getting is "this account is not authorized to log in from this stationâ Any ideas would be appreciated. Ken -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] [3.0.4] Problem with strange characters in file names
Hi, I'm using samba 3.0.4, with XP clients and server-side-profiles. Sometimes, my users save bookmarks with strange characters in them. These files are saved flawlessly on the server, but Windows is unable to copy them back to the local profile, and so the user can not log in. I'm using a iso8859-15 charset. I hope this is not a common question, I looked in the archive but I had been unable to find a similar one. One example for a strange characters is in the title of the home page of the US Department of State (http://www.state.gov/), in firebird, it is shown as \2013, on the linux server, is is shown as `^S'. Is there any way I could modify change these characters to spaces, or any other solution? LLAP, Martin signature.asc Description: Digital signature -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] installing 'pam_ldap' rpm on Fedora
I have Fedora core 1 and have everything else I need to start configuring LDAP for samba. I am following the Samba 3 documentations on www.samba.org. Here is what I get as I try to install pam_ldap-38-mz1.i386.rpm [EMAIL PROTECTED] rpms]# rpm -i pam_ldap*.rpm error: Failed dependencies: liblber.so is needed by pam_ldap-38-mz1 libldap.so is needed by pam_ldap-38-mz1 [EMAIL PROTECTED] rpms]# cd /usr/lib [EMAIL PROTECTED] lib]# ls | grep libldap.so libldap.so libldap.so.2 libldap.so.2.0.122 [EMAIL PROTECTED] lib]# ls | grep liblber.so liblber.so liblber.so.2 liblber.so.2.0.122 does anybody have any idea what is going on? Thanks Ambex - Do you Yahoo!? Friends. Fun. Try the all-new Yahoo! Messenger -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] LDAP authentication problem
First thing that I noticed was that you need to change your search to include sambaSamAccount not sambaAccount. What does that users whole ebtry look like? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Different domains
Can users/computer be part of different Domains? I've noticed that the user/computer needs that DC Sid in it. I would like for users/computers to be part of different Domains at any given time. Is this possible and how within the same ldap entry. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: v3.0.4-5 (Debian Sid) not Samba 3.0.5 - Can't change password
On Mon, 2004-06-14 at 09:53, Laurent CARON wrote: > Greg Folkert wrote: > >On Mon, 2004-06-14 at 03:21, Laurent CARON wrote: > >>Hello, > >>I upgraded samba to 3.0.5 (debian sid) in the hope of getting windows > >>password change to work, but had no success. > > > >[EMAIL PROTECTED]:greg]$ apt-show-versions -a samba-common > >samba-common3.0.4-5 install ok installed > >samba-common3.0.2a-1testing > >samba-common3.0.4-5 unstable > >samba-common/unstable uptodate 3.0.4-5 > > > >I am sorry, but you have 3.0.4-5 installed. > > > >>The password is changed (fortunately), but the computer still displays a > >>message saying the old password is incorrect. > >> > >>Do you know how to fix it? > > > >Do you have a proper password chat setup? Are you using PAM to change > >the passwords? > > > >You really need to give us more info. > > > I'm using 3.0.4-5 (sorry for the mistake), password chat is correct, but > since microsoft patch, the problem didn't disappear. I had a very similar problem. My only fix I could actually find was to completely remove all of the "generated" samba files (the .tbd files and such) with samba and winbind not running. Then removing all the machine accounts out of /etc/passwd, basically cleaning up to look just like "just installed and never run yet" Then starting joining the machines again, then using a script to generate the samba users from /etc/passwd... setting policies proper and since then (two weeks ago) haven't had any problems. -- [EMAIL PROTECTED] REMEMBER ED CURRY! http://www.iwethey.org/ed_curry Novell's Directory Services is a competitive product to Microsoft's Active Directory in much the same way that the Saturn V is a competitive product to those dinky little model rockets that kids light off down at the playfield. -- Thane Walkup signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] WinXP Client problem (damned tmp files in profile)
sometimes i have the same problems. 100 times the login/logoff works and one times the profile sync fails. during the sync process samba or xp creates tmp files. if it fails, the tmp files prevent the next login and i get the message, that windows cannot load the profile - foo.tmp access denied or whatever. for a login i have to kill these files and i know, that the correspondent file is damaged (maybe). best example ist the Outlook.pst, all emails are lost. alternatively is not possible for me to put the pst file to the home share, because during a long session xp lost the connection and office hangs for 10 seconds, otherwise the connection is always very fast. frustrating ... greetings tom samba 3.0.4 (berlin) with ldap master (munich) / ldap slave (berlin) ; basic server settings netbios name = PDC2 announce version = 5.0 announce as = Windows 2000 Enterprise Server ; oplocks = no ; user and machine account backends passdb backend = ldapsam:"ldap://192.168.52.31 ldap://192.168.80.21"; guest ... ; name resolve order = host lmhosts wins bcast ; should act as the domain and local master browser os level = 64 preferred master = yes ... ; ldap related stuff ldap suffix = o=berlin,dc=esmt,dc=org ldap admin dn = cn=manager,ou=samba,o=berlin,dc=esmt,dc=org ldap filter = "(&(uid=%u)(objectClass=sambaSamAccount))" ldap ssl = start tls #ldap ssl = yes #ldap ssl = no ldap delete dn = no ldap user suffix = ou=users ldap machine suffix = ou=samba ; ldap trust ids = yes On 14.06.2004 13:42 Uhr, "Jason C. Waters" <[EMAIL PROTECTED]> wrote: > > Have you set the profile for that user? Does the directory exist? what > does pdbedit -v username give you? > > JM wrote: > >> Hi, >> >> Can someome help me on this.. I got this on one of my windows XP... >> >> Windows cannot load your profile because it maybe corrupted. >> >> Windows cannot find the local profile and is logging you on with a temporart >> profile. >> >> How can I fix this.. >> >> Addtional info >> Im using samba-3.0.0-2... on Redhat 9 >> >> TIA, >> jm >> >> >> Dipl. Betriebswirt(BA) f. Inf. Thomas Werner Webmaster / Network Administrator ESMT European School of Management and Technology GmbH Schlossplatz 1 D-10178 Berlin Germany Tel: +49 (0)30 21231 - 1085 Fax: +49 (0)30 21231 - 9 E-mail: [EMAIL PROTECTED] Web: http://www.esmt.org -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba 3 and ads
Hey you guys, has anyone an idea about how to pretend an samba & openldap server being something like an ADS? I mean, problem is the DsGetDcName query during the WinLogon Process while trying to retrieve the ADS distinguishedName for resolving the client's domain. We're trying to code up an group policy implementation that should be run as an GP Extension to WinLogon's interface, like Nitrobit or others. Anyone an idea? Cheerio, Sebastian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problems with words accentuated
Hi guys I need help here: I'm using Samba 3.0.2a serving about 50 win98 clients. My problem is: If a client (win98) create a file/directory accentuated (with ` ' ç ^ ~ ") in Linux I see strange characters instead... The clients still see the words accentuated without problems, but in Linux server no... If I create a file, from Linux server, with accents the clients see the file accentuated without problems So I need to make some backups, from Linux server, but like this all files/directories accentuated will be stored with strange characters... I'm using this, in my smb.conf: dos charset = CP850 unix charset = UTF-8 display charset = LOCALE I'm no expert in this options, so I need help... Which option I need to use to resolve this problem ? My idiom is Brazilian Portuguese. I already try 'unix charset' and 'display charset' = pt_BR, ISO-8859-1, UTF-8 both and nothing helps... I'll appreciate any help. Thank you Flávio Henrique -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Batch user creation scripts or tools?
Hi, I'm trying to avoid re-inventing the wheel here if I can. I'm looking for a script or set of scripts that allow me to create a bunch of samba 3.X/posix users and their corresponding LDAP entries from a delimited text file or something similar. If it's web-based, so much the better, esp if some of the functions can be delegated (with reduced permissions) for specified groups or OU's. The ability to handle mail-routing information and remote maintenance of cyrus IMAP accounts and mailboxes would be a REALLY big plus. Thanks, -Jeff -- Jefferson K. Davis Technology and Information Systems Manager Standard School District 1200 North Chester Ave Bakersfield, CA 93308 USA 661-392-2110 ext 120 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] PDC and dividing roaming profile
I have this problem... I am working on implimenting a school network. I have two kinds of users on my network: students and facutly. I have also two types of operating system on my network: win 98 and win XPP. Here is the rights and privilages I am thinking about giving my users Students (usage only in computer labs): - limited roaming profile (basically, deny desktop roaming profile) - give them access to some network devices: printers and file servers. Faculty (usage in offices): - give them access to network devices: mainly file servers - keep profile on local computers (I am afraid roaming profile will take long authentication time as a result of loading profiles) How can I address this issue, especially for Faculty. I don't want the samba PDC to interfere with whatever they have on their local computer. Thanks! Ambex - Do you Yahoo!? Friends. Fun. Try the all-new Yahoo! Messenger -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba, LDAP and machine account weirdness....
Hi Thanx for the replyI am now using 3.0.4. A few questions tho'see below: No, machines will change their password regularly. I noticed this issue, and added a check/hack to make such a change (which does not actually change the password) a no-op. Is the change interval set anywhere (eg: in the registry)? Is it always 15 mins? (as I was seeing). Also, if I were using a local smbpasswd file (and I had not upgraded to 3.0.4) does this mean that the machine account entries would be regularly updated in this file? Or is the 'phenomenon' restricted only to Samba + LDAP? Thanx for your help. Chris. _ The new MSN 8: advanced junk mail protection and 2 months FREE* http://join.msn.com/?page=features/junkmail -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba shares becoming inactive after a while
On Mon, 2004-06-14 at 03:09, Wilfred van Velzen wrote:
> When a user is not using a samba share, after a while they become
> "inactive". When a user wants to access the share again, it takes an
> irritating long time before they get access again. The (windows)
> application that does the accessing is not responding during that
> time. There are no drive letters assigned to the shares in a logon
> script. When I do assign a drive letter to the share (in a test
> situation), this problem doesn't seem to exist. But how can I prevent
> this without assigning drive letters to all the shares?
>
> Here's the global section of my /etc/samba/smb.conf :
>
> [global]
> workgroup = SERCOM
> server string = Samba Server
> encrypt passwords = Yes
> map to guest = Bad User
> time server = Yes
> unix extensions = Yes
> socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
> keepalive = 0
> printcap name = CUPS
> add user script = /usr/sbin/useradd -c Machine -d /dev/null -s
> /bin/false %m$
> domain logons = Yes
> os level = 65
> preferred master = Yes
> domain master = Yes
> printing = cups
> veto files = /*.eml/*.nws/riched20.dll/*.{*}/
>
> I've already experimented with the 'socket options' and 'keepalive'
> options, but these don't seem to make any difference...
From the included docs for Samba:
deadtime (G)
The value of the parameter (a decimal integer) represents the
number of minutes of inactivity before a connection is
considered dead, and it is disconnected. The deadtime only takes
effect if the number of open files is zero.
This is useful to stop a server's resources being exhausted by a
large number of inactive connections.
Most clients have an auto-reconnect feature when a connection is
broken so in most cases this parameter should be transparent to
users.
Using this parameter with a timeout of a few minutes is
recommended for most systems.
A deadtime of zero indicates that no auto-disconnection should
be performed.
Default: deadtime = 0
Example: deadtime = 15
Hope this helps.
--
[EMAIL PROTECTED]
REMEMBER ED CURRY! http://www.iwethey.org/ed_curry
Novell's Directory Services is a competitive product to Microsoft's
Active Directory in much the same way that the Saturn V is a competitive
product to those dinky little model rockets that kids light off down at
the playfield. -- Thane Walkup
signature.asc
Description: This is a digitally signed message part
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: v3.0.4-5 (Debian Sid) not Samba 3.0.5 - Can't change password
Greg Folkert wrote: On Mon, 2004-06-14 at 03:21, Laurent CARON wrote: Hello, I upgraded samba to 3.0.5 (debian sid) in the hope of getting windows password change to work, but had no success. [EMAIL PROTECTED]:greg]$ apt-show-versions -a samba-common samba-common3.0.4-5 install ok installed samba-common3.0.2a-1testing samba-common3.0.4-5 unstable samba-common/unstable uptodate 3.0.4-5 I am sorry, but you have 3.0.4-5 installed. The password is changed (fortunately), but the computer still displays a message saying the old password is incorrect. Do you know how to fix it? Do you have a proper password chat setup? Are you using PAM to change the passwords? You really need to give us more info. Here are the parts of smb.conf - passwd program = /usr/local/sbin/smbldap-passwd.pl %u add machine script = /usr/local/sbin/smbldap-useradd.pl -w -d /dev/null -s /bin/false %u add user script = /usr/local/sbin/smbldap-useradd.pl -a -s /bin/false -m %u add group script = /usr/local/sbin/smbldap-groupadd.pl %g add user to group script = /usr/local/sbin/smbldap-usermod.pl -G %g %u passdb backend = ldapsam:"ldap://127.0.0.1"; unix password sync = yes security = user domain master = yes domain logons = yes preferred master = yes os level = 65 - Laurent -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] devnm.h problem with 3.0.4
I have been using 2.2.5 since soon after its release and all has been well. I decided it was time to go to version 3 if possible, so downloaded 3.0.4. This is on IRIX 6.5. I have tried to build with the same options as before, except I now have to use --without-ads and --without-ldap. However, when I try 'make' it fails on smbd/quotas.c because does not exist. 'configure' tested for and discovered it was not present, so ther is some inconsistency somewhere. Can someone please suggest how I can get smbd/quotas.c to compile? Phil. --- Phil Chambers ([EMAIL PROTECTED]) University of Exeter -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NT Backup can't connect to samba 3.04 share
I have found the answer https://bugzilla.samba.org/show_bug.cgi?id=1404 Olaf -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: v3.0.4-5 (Debian Sid) not Samba 3.0.5 - Can't change password
Greg Folkert wrote: On Mon, 2004-06-14 at 03:21, Laurent CARON wrote: Hello, I upgraded samba to 3.0.5 (debian sid) in the hope of getting windows password change to work, but had no success. [EMAIL PROTECTED]:greg]$ apt-show-versions -a samba-common samba-common3.0.4-5 install ok installed samba-common3.0.2a-1testing samba-common3.0.4-5 unstable samba-common/unstable uptodate 3.0.4-5 I am sorry, but you have 3.0.4-5 installed. The password is changed (fortunately), but the computer still displays a message saying the old password is incorrect. Do you know how to fix it? Do you have a proper password chat setup? Are you using PAM to change the passwords? You really need to give us more info. I'm using 3.0.4-5 (sorry for the mistake), password chat is correct, but since microsoft patch, the problem didn't disappear. Laurent -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: v3.0.4-5 (Debian Sid) not Samba 3.0.5 - Can't change password
On Mon, 2004-06-14 at 03:21, Laurent CARON wrote: > Hello, > > I upgraded samba to 3.0.5 (debian sid) in the hope of getting windows > password change to work, but had no success. [EMAIL PROTECTED]:greg]$ apt-show-versions -a samba-common samba-common3.0.4-5 install ok installed samba-common3.0.2a-1testing samba-common3.0.4-5 unstable samba-common/unstable uptodate 3.0.4-5 I am sorry, but you have 3.0.4-5 installed. > The password is changed (fortunately), but the computer still displays a > message saying the old password is incorrect. > > Do you know how to fix it? Do you have a proper password chat setup? Are you using PAM to change the passwords? You really need to give us more info. -- [EMAIL PROTECTED] REMEMBER ED CURRY! http://www.iwethey.org/ed_curry Novell's Directory Services is a competitive product to Microsoft's Active Directory in much the same way that the Saturn V is a competitive product to those dinky little model rockets that kids light off down at the playfield. -- Thane Walkup signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.3 on FC2: windows machine cannot join domain
Paul, Thanks for the suggestion but after doing this I still get the same problem. I edited my smb.conf and the .ldif that I was importing to reflect the changes. Any more ideas? Tony Paul Gienger wrote: I'm using Samba 3.0.3 on Fedora Core 2 with OpenLDAP 2.1.29 for a backend. I'm getting to typical "The user name could not be found." error upon trying to join a Windows box. I've gone through every digest on lists.samba.org and other sites and nothing has worked yet. Any suggestions: You must have missed the ou=Computers discussion then, it comes up about every 2 weeks. ; User and Machine Account Backends ldap ssl = start_tls passdb backend = ldapsam:ldap://smbtest.soil.ncsu.edu:389 ldap suffix = dc=soil,dc=ncsu,dc=edu ldap admin dn = cn=Manager,dc=soil,dc=ncsu,dc=edu ldap delete dn = no ldap user suffix = ou=People ldap group suffix = ou=Groups ldap machine suffix = ou=Computers change this to ou=People or do one of the workarounds people have suggested, those being to reconfigure your nss library to search to a point in your ldap structure that contains both ou=People and ou=Computers (dc=soil,dc=ncsu,dc=edu). I guess that's the only suggested one, but I've thought about a couple others, one being to make an ou=Accounts which would contain aliases to ou=People and ou=Computers, but I haven't tested it yet... -- Tony Fugere [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Internet access control through samba ?
Jason C. Waters wrote: What you can do is use squid proxy server with authentication. Using wbinfo you can authenticate squid users. It works pretty good, plus you can see what the users are doing on the internet. Hope this helps. Thank you, tonight I'll try to get familar with this squid. Jeremias -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] strace
>could you do a closer look at your smbd (maybe with truss or strace) >to see what exactly happens? Hi Chris. Do you mind if I butt in on this thread? I am currently fighting tooth and nail with Samba and I am attempting to do an strace on it myself...to no avail. When I start Samba with "strace -ff -o trace.out smbd -D", the program starts, but I cannot connect to the service on my Windows box. If I start it up without strace and then run strace to try and attach it to the process id, all I get is "ptrace: Operation not permitted" and then the process hangs so hard, even kill -9 smbd won't work! I still having these process hanging in memory. How in the world can I strace samba? Thanks! Matthew -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.4 BDC LDAP Slave Problem
I've got nss_ldap setup to look at the local ldap directory, but when I have two servers on the passwd backend line, it can't bind. It get to where it trys to bind, and then it just freezes. Any other ideas? I'm sure I had this working before. Thanks for your help Beast wrote: Jason C. Waters wrote: passdb backend = ldapsam:"ldaps://ldap.masterserver.com ldaps://ldap.slaveserver.com" - this does not work This is the correct one. Make sure no other service depends on master ldap when you're bring down the master (ie nss_ldap). Also plse check the log. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] strange copy speed
Hello Götz, could you do a closer look at your smbd (maybe with truss or strace) to see what exactly happens? or maybe it would be enough to watch traffic between your client and server (and traffic between your server and nameserver, domaincotroler (if involved)) best regards, chris -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Auftrag von Götz Reinicke Gesendet: Montag, 14. Juni 2004 14:05 An: [EMAIL PROTECTED] Betreff: Re: [Samba] strange copy speed Imre, Nagy Jr. schrieb: >>To copy the files on the server from the client tooks also about 40 >>minutes! >> >>To copy the files on the server beeing loged in by ssh tooks about 2 sec. >> >>Anny ideas what could be wrong?? > > > I might be wrong, but asymetric speed is most often caused by improper > auto-negotation. Try to set speed on interfaces manually if You can do so. Hi, I don't think that this could be the problem, because if I copy the same files from the same client to the same server using netatalk on the server side or using scp gives me the same speed in both directions (+- 5 sec./100MB) Regards. Götz -- Götz Reinicke IT Koordinator - IT OfficeNet Tel. +49 (0) 7141 - 969 420 Fax +49 (0) 7141 - 969 55 420 [EMAIL PROTECTED] Filmakademie Baden-Württemberg Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Why Database Records Not REFRESHED?
Dear Sir, A have a Application runing on DOSEmu under LTSP environment over a Samba client of RedHat Linux 9.0, which accessing NT4.0/PDC Server. I use the smbmount to dynamically Mounting folder from NT4.0 Server upon user login and map to Dos Drive under DOSEmu environment. We are facing a problem that :- If USER1 of Session1 (over Linux LTSP) are ENTERING new Database Records, sometime USER2 of Session2 (also over Linux LTSP) "CAN NOT" display the REAL-Time records entered by User1. If USER2 logoff and re-login again... then he can see it. Why? Any workaround? Best regards from spchua -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] strange copy speed
Imre, Nagy Jr. schrieb: To copy the files on the server from the client tooks also about 40 minutes! To copy the files on the server beeing loged in by ssh tooks about 2 sec. Anny ideas what could be wrong?? I might be wrong, but asymetric speed is most often caused by improper auto-negotation. Try to set speed on interfaces manually if You can do so. Hi, I don't think that this could be the problem, because if I copy the same files from the same client to the same server using netatalk on the server side or using scp gives me the same speed in both directions (+- 5 sec./100MB) Regards. Götz -- Götz Reinicke IT Koordinator - IT OfficeNet Tel. +49 (0) 7141 - 969 420 Fax +49 (0) 7141 - 969 55 420 [EMAIL PROTECTED] Filmakademie Baden-Württemberg Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] Internet access control through samba ?
Hi, maybe you should use squid or any other proxy-server to restrict your internet-access. arno s. >-Ursprüngliche Nachricht- >Von: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] Auftrag von >Jeremias Müller >Gesendet: Montag, 14. Juni 2004 13:47 >An: Samba >Betreff: [Samba] Internet access control through samba ? > > >Hi, >is there a possibility to use a samba pdc for internet access control ? >I want only machines, which are logged in to the domain, to have >internet access. >Currently everybody can use the Internet through the masquerading >functionality >on the server(also pdc). > >Thanks Jeremias M. >-- >To unsubscribe from this list go to the following URL and read the >instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.4 BDC LDAP Slave Problem
Jason C. Waters wrote: passdb backend = ldapsam:"ldaps://ldap.masterserver.com ldaps://ldap.slaveserver.com" - this does not work This is the correct one. Make sure no other service depends on master ldap when you're bring down the master (ie nss_ldap). Also plse check the log. -- --beast -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Internet access control through samba ?
try squid and squid guard... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeremias Müller Sent: Monday, June 14, 2004 4:47 AM To: Samba Subject: [Samba] Internet access control through samba ? Hi, is there a possibility to use a samba pdc for internet access control ? I want only machines, which are logged in to the domain, to have internet access. Currently everybody can use the Internet through the masquerading functionality on the server(also pdc). Thanks Jeremias M. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Internet access control through samba ?
What you can do is use squid proxy server with authentication. Using wbinfo you can authenticate squid users. It works pretty good, plus you can see what the users are doing on the internet. Hope this helps. Jason Jeremias Müller wrote: Hi, is there a possibility to use a samba pdc for internet access control ? I want only machines, which are logged in to the domain, to have internet access. Currently everybody can use the Internet through the masquerading functionality on the server(also pdc). Thanks Jeremias M. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 Unix Password Sync
Waif Urchin wrote: Working with my first Samba PDC using samba 3.0.3 on FreeBSD 5.2.1. Single subnet, handful of win2k and winxp boxes fully patched. Everything is working fine except the password sync. What do I have to add to samba (or windows) to set it up so when someone changes their password on Windows it updates the passwd and smbpasswd files automatically? Thanks. # The following are needed to allow password changing from Windows to # update the Linux system password also. # NOTE: Use these with 'encrypt passwords' and 'smb passwd file' above. # NOTE2: You do NOT need these to allow workstations to change only #the encrypted SMB passwords. They allow the Unix password #to be kept in sync with the SMB password. ; unix password sync = Yes ; passwd program = /usr/bin/passwd %u ; passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* -- --beast -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Internet access control through samba ?
Hi, is there a possibility to use a samba pdc for internet access control ? I want only machines, which are logged in to the domain, to have internet access. Currently everybody can use the Internet through the masquerading functionality on the server(also pdc). Thanks Jeremias M. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] WinXP Client problem
Have you set the profile for that user? Does the directory exist? what does pdbedit -v username give you? JM wrote: Hi, Can someome help me on this.. I got this on one of my windows XP... Windows cannot load your profile because it maybe corrupted. Windows cannot find the local profile and is logging you on with a temporart profile. How can I fix this.. Addtional info Im using samba-3.0.0-2... on Redhat 9 TIA, jm -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] WinXP Client problem
Hi, Can someome help me on this.. I got this on one of my windows XP... Windows cannot load your profile because it maybe corrupted. Windows cannot find the local profile and is logging you on with a temporart profile. How can I fix this.. Addtional info Im using samba-3.0.0-2... on Redhat 9 TIA, jm -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] strange copy speed
> To copy the files on the server from the client tooks also about 40 > minutes! > > To copy the files on the server beeing loged in by ssh tooks about 2 sec. > > Anny ideas what could be wrong?? I might be wrong, but asymetric speed is most often caused by improper auto-negotation. Try to set speed on interfaces manually if You can do so. -- === The Bug Is Out There Imre, Nagy Jr.while (!sleep) sheep++; -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] strange copy speed
Hi, I recently set up a Fedora Core 2 kernel 2.6.6-1.427, dell poweredge 1650, GBit Ethernet, SCSI 160 RAID 5 server with samba 3.0.3-5. My Client is a Apple Powermac G5 with GBit ethernet. If I copy files from the client to the server, my test 100 MB tooks about 7 Sec. To copy the directory back to the client tooks about 40 minutes! To copy the files on the server from the client tooks also about 40 minutes! To copy the files on the server beeing loged in by ssh tooks about 2 sec. Anny ideas what could be wrong?? regards götz -- Götz Reinicke IT Koordinator - IT OfficeNet Tel. +49 (0) 7141 - 969 420 Fax +49 (0) 7141 - 969 55 420 [EMAIL PROTECTED] Filmakademie Baden-Württemberg Mathildenstr. 20 71638 Ludwigsburg www.filmakademie.de -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] NT Backup can't connect to samba 3.04 share
I have upgraded samba from 3.0.2 to 3.0.4 on our Fedrora core 1 server. (server role = standalone) All programs (e.g OpenOffice.org)on the Winclients work perfect with the servershares. They can read, write... Only the NT-backup program from 2000 and XP can't connect to the mapped networkdrive. But it worked under samba 3.0.2. I know the NT-backuptool isn't very good, but it worked for our needs. Where can I start to troubleshoot?? Olaf -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problems with Samba 3.0.4 and ADS
Hi, I'm am trying to compile Samba 3.0.4 with ADS suuport on solaris 8. I have installed/compiled: cyrus-sasl-1.5.28 db-4.2.52.NC krb5-1.3.3 openldap-2.1.30 samba-3.0.4 To compile samba I ran: ./configure --prefix=/usr/local/samba-3.0.4 --with-configdir=/var/samba/conf --with-lockdir=/var/samba/lock --with-private dir=/var/samba/private --with-swatdir=/var/samba/swat --with-logfilebase=/var/samba/log --localstatedir=/var/run --sharedstate dir=/var/run --with-syslog --with-utmp --with-acl-support --with-krb5=/usr/local/krb5-1.3.3 --with-winbind --with-ads This ran successfuly and I confirmed the following within config.log: #define HAVE_KRB5 1 #define WITH_ADS 1 #define HAVE_LDAP_H 1 Though when I run net ads testjoin it returns "ADS support not compiled in" Anyone got any ideas?? Ben Our name has changed. Please update your address book to the following format: "[EMAIL PROTECTED]". This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Strange problem with 3.0.4
Some time ago there was that problem with accessing the macromdia home site (also robocopy & arcserve) i got a simular problem under samba 304 with 'HP Colorado Backup II'..it worked ok, until samba 303..?? now we can't acces the samba shares annymore.. browsing with exporer and all works fine.. here is some log level 5 debug info.. [2004/06/14 08:22:44, 5] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/06/14 08:22:44, 4] smbd/reply.c:reply_tcon_and_X(381) Client requested device type [?] for share [DATA] [2004/06/14 08:22:44, 5] smbd/service.c:make_connection(783) making a connection to 'normal' service data [2004/06/14 08:22:44, 2] smbd/service.c:make_connection_snum(304) guest user (from session setup) not permitted to access this share (Data) [2004/06/14 08:22:44, 3] smbd/error.c:error_packet(118) error packet at smbd/reply.c(389) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED [2004/06/14 08:22:44, 5] lib/util.c:show_msg(456) [2004/06/14 08:22:44, 5] lib/util.c:show_msg(466) size=35 smb_com=0x75 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=104 smb_mid=59585 smt_wct=0 smb_bcc=0 -- permissions on the share is 0777.. so that must be ok...!! do i need to make an other bugreport, or can i use the https://bugzilla.samba.org/show_bug.cgi?id=1345 for the old macromodia bug.. ?? (or should i do nothing...???) Later.. - Collen Blijenberg (Systeem/Netwerk Beheerder) Montessori Lyceum Herman Jordan Zeist NL -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.5 - Can't change password
Hello, I upgraded samba to 3.0.5 (debian sid) in the hope of getting windows password change to work, but had no success. The password is changed (fortunately), but the computer still displays a message saying the old password is incorrect. Do you know how to fix it? Thanks L.CARON -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba shares becoming inactive after a while
When a user is not using a samba share, after a while they become
"inactive". When a user wants to access the share again, it takes an
irritating long time before they get access again. The (windows)
application that does the accessing is not responding during that
time. There are no drive letters assigned to the shares in a logon
script. When I do assign a drive letter to the share (in a test
situation), this problem doesn't seem to exist. But how can I prevent
this without assigning drive letters to all the shares?
Here's the global section of my /etc/samba/smb.conf :
[global]
workgroup = SERCOM
server string = Samba Server
encrypt passwords = Yes
map to guest = Bad User
time server = Yes
unix extensions = Yes
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
keepalive = 0
printcap name = CUPS
add user script = /usr/sbin/useradd -c Machine -d /dev/null -s
/bin/false %m$
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
printing = cups
veto files = /*.eml/*.nws/riched20.dll/*.{*}/
I've already experimented with the 'socket options' and 'keepalive'
options, but these don't seem to make any difference...
Met vriendelijke groet / Best regards,
Wilfred van Velzen
--
SERCOM Regeltechniek b.v.
Heereweg 9
2161 AB Lisse
Nederland
+31 (0)252 416530 (voice)
+31 (0)252 419481 (fax)
