[Samba] Re: Global Windows Environment-Variables

[Jim C.]

You can also do it with registry settings.  You can use the regedit 
command to export the settings and then use a script to merge.

Jim C.
Hello,
does anybody know, how to set Global-Variables for a Windows-System?
I would like to set variabels in the login-script and use them in a 
Word-Document.

PS: "set bla=foo" works only for the current shell/cmd.exe, not global
matze

--
-
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Browsing a across subnets

[Lance Levsen]

On Fri, 2004-09-03 at 20:28, [EMAIL PROTECTED] wrote:
> I have installed SAMBA on Server 2 and would like to be able to browse
> shares on Server 2 from both Client 1 and Client 2.
> 
> Can anyone point me at any resources that might help me work this out?

According to O'Reily's "Using Samba" there are 3 rules for browsing
across subnets:

You must have a local master browser on each subnet in the domain.

You must have  a domain master browser somewhere in the domain

You should have a WINS server on the network with each system configured
to use it. 

These are generally set with the election process.

domain master browser (ideally the PDC):

[global]
domain master = yes
os level = 255
preferred master = yes
local master = yes 
remote browse sync = 
(although I'm not sure if the last is necessary on the domain master)


local master browsers:

[global]
preferred master = yes
os level = 33 
local master = yes
remote browse sync =  

> Thanks,
> 
> R.

Cheers,
lance
-- 
Lance Levsen, Catprint Computing
Linux Systems and programming
Saskatoon, SK., CA.
gpg --keyserver wwwkeys.pgp.net --recv-keys 0xF2DA79C8


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbpasswd in samba 3.0

[Jacky Kim]

Try it:

# (echo password; echo password) | smbpasswd -s -a username


Best Regards!
Jacky Kim
.

>For scripting then, what would the appropriate syntax be?
>
>smbpasswd -s -a username password 
>
>this was working fine for me in 2.2.x and 3.0.x until the upgrade 3.0.6
>
>If I want to change password with a script - i.e. single line of code.
>what is the appropriate command syntax in 3.0.6?
>
>Jake Holmquist
>Manhattan College 
>[EMAIL PROTECTED]
>
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  http://lists.samba.org/mailman/listinfo/samba
>



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Browsing a across subnets

[robin-lists]

Hi,

I've got a small network at home with a topology as follows:

-- Cable Modem -- Router 1 -- Switch 1 -- Server 1
|
Router 2/Switch 2 --+-- Server 2
  |  |  |
  WAP 1 --+  +-- WAP 2  +-- Client 1
   |
   +-- Client 2
Router 1 and WAP 1 have NAT enabled.
Router 2 and WAP 2 do not have NAT enabled.

Server 1 and Server 2 are Linux boxes.
Client 1 and Client 2 are Win XP

I use the following sub-nets:

Switch 1 - 192.168.1.0/24
Switch 2 - 192.168.2.0/24
WAP 1- 192.168.3.0/24
WAP 2- 192.168.4.0/24

A caching name server runs on Server 1 and also an internal DNS service.

There is "full" connectivity between all machines on the "internal" side of
router 2, i.e. Client 1, Client 2, and Server 2 can all ping each other.

Even without introducing SAMBA into the equation I am not able to
successfully browse shares/printers on client 1 from client 2. Is this
possible across different subnets? Are there any special steps I need to
take?

I have installed SAMBA on Server 2 and would like to be able to browse
shares on Server 2 from both Client 1 and Client 2.

Can anyone point me at any resources that might help me work this out?

Thanks,

R.
--
http://robinbowes.com 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] kinit username@REALM

[Joseph]

Hello list:

Do I need to do the command "kinit [EMAIL PROTECTED]" every single time I
boot up my system?

Also, why does the kinit "username" not accept the winbind separator
"+"?  For example:  "kinit [EMAIL PROTECTED]" instead of just
"[EMAIL PROTECTED]".

I have my system setup to login via gdm with my domain user account
(which uses the winbind separator "domain+user"), so why can't kinit
login at that time?  This would make it seamless, instead of having to
open a command line each time the system boots and manually running the
kinit command.

Thanks.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbclient -k fails

[fire-eyes]

Basic question but do you have tickets cached from the DC? This would be
done with kinit, and they could be listed with klist. Watch out for
expired ones.

On Fri, 2004-09-03 at 17:23, hunger wrote:
> How do I figure out why "smbclient -k -L " fails with
> "session setup failed: NT_STATUS_OK"?
> 
> I am running Debian "sarge", which has been joined to a Windows 2003
> domain.  When I login via gdm, I login with my domain username and
> password.  "wbinfo -u" and "wbinfo -g" work just fine.
> 
> Would anyone please help me figure out what the issue is with my setup
> that causes smbclient -k to fail?  Thanks.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] smbclient -k fails

[hunger]

How do I figure out why "smbclient -k -L " fails with
"session setup failed: NT_STATUS_OK"?

I am running Debian "sarge", which has been joined to a Windows 2003
domain.  When I login via gdm, I login with my domain username and
password.  "wbinfo -u" and "wbinfo -g" work just fine.

Would anyone please help me figure out what the issue is with my setup
that causes smbclient -k to fail?  Thanks.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] smbpasswd in samba 3.0

[Jake Holmquist]

For scripting then, what would the appropriate syntax be?

smbpasswd -s -a username password 

this was working fine for me in 2.2.x and 3.0.x until the upgrade 3.0.6

If I want to change password with a script - i.e. single line of code.
what is the appropriate command syntax in 3.0.6?

Jake Holmquist
Manhattan College 
[EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Winbindd can't find ldap server

[Tom Skeren]

eric roseme wrote:
Are you actually storing your mappings on the ADS (instead of default 
tdb).  If so, I am interested to see your ADS schema modifications.  I 
have been wondering if anyone has tried that yet. 
Nope, pretty much a default setup.

Otherwise, with "security = ads", you do not need the idmap parm, it 
stores the mappings in the winbindd_idmap.tdb (or the cache).

PS - I think it's "idmap backend", not "idmap_backend". 
Give it a shot, but testparm didn't burp up any errors

Eric Roseme
Hewlett-Packard
Tom Skeren wrote:
Winbindd is erroring out with can't find ldap server.  LDAP is ADS 
W2K, the samba server is 3.0.5 and net join ads succeded.  I have
idmap_backend = ldap:ldap://ldap.mydomain.com.  What am I missing.




--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] HELP

[MUDRANKIT AMAR]

Hi Respected members,
 
  I am a student of computer science. I have in my course of study a 
project to be done. I am interested in doing project related to Samba.
 
 I have got one of the ideas for the project. Can anybody be kindly help 
me regarding this idea? Please do reply about this idea.
 
   In the project I am planning to achieve server independency , means 
---Consider  an organization is having 2 kinds of server SAMBA and VFS, then if a 
request is made from a Samba client and required file is on VFS server then the 
request should get satisfied. I will be planning to convert a SAMBA request into a VFS 
request that is finally be given to the VFS server. The client does not care about the 
thing that to which server it has made request.
   
 Also, I have to make the similar thing in case of VFS client and 
SAMBA server.
 In this way it will help the system administrator to achieve a server 
independency.
 
Can anybody please rate this idea as 
very simple
simple
good to do a project
 very difficult
 best one
 don't do such project.
 
If the ideas is not up to the mark, can anybody please send me a good idea for the 
project.
 
Please
 
Thank You.
 
Regards,
Amar.

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Winbindd can't find ldap server

[eric roseme]

Are you actually storing your mappings on the ADS (instead of default 
tdb).  If so, I am interested to see your ADS schema modifications.  I 
have been wondering if anyone has tried that yet.

Otherwise, with "security = ads", you do not need the idmap parm, it 
stores the mappings in the winbindd_idmap.tdb (or the cache).

PS - I think it's "idmap backend", not "idmap_backend".
Eric Roseme
Hewlett-Packard
Tom Skeren wrote:
Winbindd is erroring out with can't find ldap server.  LDAP is ADS W2K, 
the samba server is 3.0.5 and net join ads succeded.  I have
idmap_backend = ldap:ldap://ldap.mydomain.com.  What am I missing.


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Winbindd - ADS errors

[Tom Skeren]

   Have a Samba 3.0.5 joined to W2K ADS.  Getting very slow logon 
responses due to winbindd problem.  smb.conf and snip of winbindd errors 
follows.  Any help would be appreciated.

smb.conf:
  workgroup = FSK
   realm = FSKLAW.NET
   netbios name = FSKKLAW
   server string = FSKKLAW
   interfaces = 
   security = ADS
   obey pam restrictions = Yes
   pam password change = Yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*al
l*authentication*tokens*updated*successfully*
   unix password sync = Yes
   log file = /var/log/samba/%m.log
   max log size = 0
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   os level = 33
   preferred master = No
   default keytab name = FILE:/etc/krb5.keytab
   local master = No
   domain master = No
   wins server = 192.168.62.1
   remote announce = 192.168.61.1 192.168.62.1
   remote browse sync = 192.168.61.1 192.168.62.1
   ldap server = ldap://ldap.fsklaw.net
   ldap admin dn = tms3
   ldap port = 389
   idmap backend = ldap:ldap://ldap.fsklaw.net
   idmap uid = 1-2
   idmap gid = 1-2
   template homedir = /usr/templates/%D/%U
   template shell = /bin/ssh

winbind errors:
[2004/09/03 10:50:17, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(2239)
 ldapsam_setsamgrent: LDAP search failed: Can't contact LDAP server
[2004/09/03 10:50:17, 0] passdb/pdb_ldap.c:ldapsam_enum_group_mapping(2304)
 ldapsam_enum_group_mapping: Unable to open passdb
[2004/09/03 10:50:17, 1] lib/smbldap.c:smbldap_retry_open(909)
 Connection to LDAP Server failed for the 1 try!
[2004/09/03 10:50:17, 1] lib/smbldap.c:smbldap_retry_open(909)
 Connection to LDAP Server failed for the 2 try!
[2004/09/03 10:50:18, 1] lib/smbldap.c:smbldap_retry_open(909)
 Connection to LDAP Server failed for the 3 try!
[2004/09/03 10:50:19, 1] lib/smbldap.c:smbldap_retry_open(909)
 Connection to LDAP Server failed for the 4 try!
[2004/09/03 10:50:21, 1] lib/smbldap.c:smbldap_retry_open(909)
 Connection to LDAP Server failed for the 5 try!
[2004/09/03 10:50:23, 1] lib/smbldap.c:smbldap_retry_open(909)
 Connection to LDAP Server failed for the 6 try!
[2004/09/03 10:50:25, 1] lib/smbldap.c:smbldap_retry_open(909)
 Connection to LDAP Server failed for the 7 try!
[2004/09/03 10:50:29, 1] lib/smbldap.c:smbldap_retry_open(909)
 Connection to LDAP Server failed for the 8 try!
[2004/09/03 10:50:29, 0] lib/smbldap.c:smbldap_search(971)
 smbldap_search: LDAP server is down!
[2004/09/03 10:50:29, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(2239)
 ldapsam_setsamgrent: LDAP search failed: Can't contact LDAP server
[2004/09/03 10:50:29, 0] passdb/pdb_ldap.c:ldapsam_enum_group_mapping(2304)
 ldapsam_enum_group_mapping: Unable to open passdb

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Forcing RIDs to desired value

[Radek Svoboda]

On Fri, 3 Sep 2004, Matthias Spork wrote:
Radek Svoboda schrieb:
I found that after moving my samba server to different hardware (and
diferent Linux installation), domain logons cannot find their Windows
profiles and created new ones. This is caused by the different RID of
the users. It seems these are calculated as 2*UID + 1000. And my UID's
on new server do not match those on the old one. How to force SAMBA to
provide different RIDs for the users? I do not want to run LDAP for
our 20 stations and 20 users here.
Why don't you use your old samba-databases from /var/lib/samba ?
matze
Actually I did. But this copies only SID of the server (stored in 
secrets.tdb), not the RIDs. It seems that samba calculates them by the 
fixed algorithm as 2*UID+1000. And because I must have different UIDs on 
the new system, the profile mapping in Windows does not work.

  Best regards
 Radek Svoboda
 [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] smbclient: support for long share names..?

[Dabney, Nathan T.]

I am running smbclient: Version 3.0.6-SUSE (SLES 8.0)
 
I am still unable to see any printer shares with names longer than 12
characters.  Does anyone have an idea how to resolve this?
 
[Please cc: me with any replies]
 
-Nathan
 
 
On Fri, 22 Nov 2002, Diana McKenna wrote:
 
> If no one has any further information on this, I'll submit this as a bug.
 
This is a known limitation of the fact that samba-2.x does NOT support
true UniCode on the wire. This limitation should disappear in Samba-3.0.0
since it handles UniCode.
 
- John T.
 
> 
> Thanks!
> 
> Diana
> 
> 
> At 03:07 PM 11/19/2002 11/19/2002, John Benedetto wrote:
> >I thought the 13 character limit was a 'feature' of NT, and thus Samba
> >reflects that "feature", too... anyone know?
> >
> >--On Tuesday, November 19, 2002 4:56 PM -0500 Diana McKenna
> >http://lists.samba.org/mailman/listinfo/samba> > wrote:
> >
> >>Hello All,
> >>
> >>If I create a 13 char long share on a filer or a windows workstation (a
> >>windows 2000 workstation for example) and then run sbmclient to list the
> >>shares on that system smbclient will not list any shares greater than 12
> >>chars long.  I can see and access the long share name on my windows 2000
> >>system and I can see it on the system where the share was created but
> >>smbclient will not list it.
> 
> 
 
-- 
John H Terpstra
Email: jht at samba.org  

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Winbindd can't find ldap server

[Tom Skeren]

Winbindd is erroring out with can't find ldap server.  LDAP is ADS W2K, 
the samba server is 3.0.5 and net join ads succeded.  I have
idmap_backend = ldap:ldap://ldap.mydomain.com.  What am I missing.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] setsockopt returning Invalid argument

[Philip Chambers]

I have built samba 3.0.4 on Solaris 9 and it appeared to compile and build OK.  It 
starts up and runs with a PDC smb.conf.  It becomes the brows master for the domain 
and generally seems to look OK.

However, when I try to join a PC into the domain I get "Invalid argument" logged by 
set_socket_options() in lib/util_sock.c when trying to set TCP_NODELAY and 
SO_KEEPALIVE.

This is followed by get_peer_addr() failing with "Transport endpoint not connected".

The attempt to join the domain fails.  Any ideas please?

Phil.
---
Phil Chambers ([EMAIL PROTECTED])
University of Exeter

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] NTFS-type directory permissions

[Michael Flatley]

so does this mean that I do not have ACL support compiled?

bash-2.05# ./smbd -b | grep -i ACL
   HAVE_SYS_ACL_H
   HAVE_NO_ACLS
   HAVE__ACL
   HAVE__FACL


On Fri, 03 Sep 2004 11:04:56 -0500, Paul Gienger
<[EMAIL PROTECTED]> wrote:
> 
> >
> >You have just, but the kernel and FS used for store data must using ACL...
> >It's just patch kernel (if kernel 2.4.x) for ACL support
> >http://acl.bestbits.at
> >and use a FS which have this possibility :
> >- ext3
> >- ReiserFS
> >- JFS
> >- XFS
> >
> >
> He's on Solaris, which has ACL support built in to UFS.  Just make sure
> that samba was compiled with it like so:
> 
> [fgoserv:/]# /opt/samba/sbin/smbd -b  |grep ACL
>   HAVE_SYS_ACL_H
>   HAVE_SOLARIS_ACLS
>   HAVE__ACL
>   HAVE__FACL
> 
> --
> Paul Gienger Office: 701-281-1884
> Applied Engineering Inc.
> Information Systems Consultant   Fax:701-281-1322
> URL: www.ae-solutions.commailto: [EMAIL PROTECTED]
> 
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] NTFS-type directory permissions

[Tom Skeren]

[EMAIL PROTECTED] wrote:

You have just, but the kernel and FS used for store data must using ACL...
It's just patch kernel (if kernel 2.4.x) for ACL support
Oh yeah forgot that.  If you've got FreeBSD 5.x it's in the default kernel.
http://acl.bestbits.at
and use a FS which have this possibility :
- ext3
- ReiserFS
- JFS
- XFS
 Stéphane
---
Stéphane PURNELLE [EMAIL PROTECTED]
Service Informatique   Corman S.A.   Tel : 00 32 087/342467
  
  
  


Hi,
I think if you choose to compile samba with the acl flag then you will have
the complex access control desired.
When you do a ./configure --help
... the options will be there but I think the option for acl support
is --with-acl-support or something like that.
Both my samba book and a unix terminal are not available to me now.
Bri-

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

 


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] NTFS-type directory permissions

[Paul Gienger]

You have just, but the kernel and FS used for store data must using ACL...
It's just patch kernel (if kernel 2.4.x) for ACL support
http://acl.bestbits.at
and use a FS which have this possibility :
- ext3
- ReiserFS
- JFS
- XFS
 

He's on Solaris, which has ACL support built in to UFS.  Just make sure 
that samba was compiled with it like so:

[fgoserv:/]# /opt/samba/sbin/smbd -b  |grep ACL
  HAVE_SYS_ACL_H
  HAVE_SOLARIS_ACLS
  HAVE__ACL
  HAVE__FACL
--
Paul Gienger Office: 701-281-1884
Applied Engineering Inc. 
Information Systems Consultant   Fax:701-281-1322
URL: www.ae-solutions.commailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: Re: [Samba] NTFS-type directory permissions

[stephane . purnelle]

You have just, but the kernel and FS used for store data must using ACL...
It's just patch kernel (if kernel 2.4.x) for ACL support
http://acl.bestbits.at
and use a FS which have this possibility :
- ext3
- ReiserFS
- JFS
- XFS


  Stéphane

---
Stéphane PURNELLE [EMAIL PROTECTED]
Service Informatique   Corman S.A.   Tel : 00 32 087/342467


   
   
   




Hi,

I think if you choose to compile samba with the acl flag then you will have
the complex access control desired.

When you do a ./configure --help

... the options will be there but I think the option for acl support
is --with-acl-support or something like that.

Both my samba book and a unix terminal are not available to me now.

Bri-



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] NTFS-type directory permissions

[Brian Krusic]

Hi,

I think if you choose to compile samba with the acl flag then you will have
the complex access control desired.

When you do a ./configure --help

... the options will be there but I think the option for acl support
is --with-acl-support or something like that.

Both my samba book and a unix terminal are not available to me now.

Bri-



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] NTFS-type directory permissions

[Tom Skeren]

Michael Flatley wrote:
Yes ACL's
I apologize if this is an easy question.  I am a samba newbie and the
answer was not really clear to me from reading chpt 12 of the
documentation.
We recently moved from a Windows 2000 file server to a Samba(3.0.4)
file server running on Solaris.  We have about 20 top-level
directories with lots of subdirectories.  Right now, we have the
security setup so that people can only get to the top-level
directories that they should have access to.  This is ok for now, but
at some point we would like to get back to the way it was under NT. 
We have not figured out a way to control the permissions underneath
these top-level directories.

For example:
The user is mapped to a single share that contains all of the folders
(can't be more than one share since users need to access the folders
from windows using the same drive letter).
That share contains:
Admin
Helpdesk
Finance
HR
etc.
The particular user only has access to the HR directory which contains:
Paychecks
Personnel
List
etc.
Now, this user should only have read access to List, no access to
Personnel, and write access to Paychecks.  In our current setup, he
has write access to all these folders because they are only controlled
by the top-level, HR, which has the Unix permissions:
rwxrwx---   root  hr
(the user is a member of hr)
Is there a way that we can have more control over the directories and
files?  Can someone give me some example configurations or point me to
a past post or something?
Thanks
 


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] process hang when accessing a mounted smbfs

[Gregoire Pichon]

Hi all,
I installed the samba 3.0.3 on a Fedora Core 2 and then samba 3.0.6-1 
and still have the following problem.

When I mount a smbfs, it sucesses but processes hang when they access 
the mount point and smbumount returns "Device busy". Since even system 
halt fails unmounting the filesystem, I have to switch off the machine.

I tested either with smbmount command, or /etc/fstab entry and mount 
command, as root or common user, with a Linux or Windows server, but the 
problem still occurs.

Note that is happens only with the first smbfs mount of the system. 
Applications that access another smbfs mount point mounted after the 
first one work very well.

Thanks for any help or advice,
Grégoire.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] NTFS-type directory permissions

[Michael Flatley]

I apologize if this is an easy question.  I am a samba newbie and the
answer was not really clear to me from reading chpt 12 of the
documentation.

We recently moved from a Windows 2000 file server to a Samba(3.0.4)
file server running on Solaris.  We have about 20 top-level
directories with lots of subdirectories.  Right now, we have the
security setup so that people can only get to the top-level
directories that they should have access to.  This is ok for now, but
at some point we would like to get back to the way it was under NT. 
We have not figured out a way to control the permissions underneath
these top-level directories.

For example:
The user is mapped to a single share that contains all of the folders
(can't be more than one share since users need to access the folders
from windows using the same drive letter).
That share contains:
Admin
Helpdesk
Finance
HR
etc.

The particular user only has access to the HR directory which contains:
Paychecks
Personnel
List
etc.

Now, this user should only have read access to List, no access to
Personnel, and write access to Paychecks.  In our current setup, he
has write access to all these folders because they are only controlled
by the top-level, HR, which has the Unix permissions:

rwxrwx---   root  hr
(the user is a member of hr)

Is there a way that we can have more control over the directories and
files?  Can someone give me some example configurations or point me to
a past post or something?

Thanks
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Wins sync?

[Derek Harkness]

Has anyone gotten wins sync between samba server working?  I've got two 
Samba 3.0 boxes (PDC and BDC) and I want to run a wins server on each 
and have the two sync up is this possible?  Are there plans to make it 
possible?

Derek
Not one shred of evidence supports the notion that life is serious


PGP.sig
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba Bug?

[Hector Hugo Iturre]

Hi,
  I'm running Samba 3 with Windows XP clients and I
get an extrange problem. I have a share on the server
and XP clients do not show all files in the share,
Linux shows all files but XP doesn't.
  The directory and the files on it has 0770
permissions. 
  The share has the following config
[datos]
   comment = Datos
   path = /datos
   create mask = 0770
   directory mask = 0770
   browseable = yes
   guest ok = no
   writeable = yes
  This is very extrange and I want to know if is this
a bug of samba or a config problem.
Thanks
Hector Iturre






___
100mb gratis, Antivirus y Antispam
Correo Yahoo!, el mejor correo web del mundo
http://correo.yahoo.com.ar
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Can't join Domain on PDC: NT_STATUS_CANT_ACCESS_DOMAIN_INFO (PAM: 4)

[NetWorX Internet]

Hi all,

I've got the following problem when trying to join a domain on a samba pdc
itself:

net rpc join eccag -U root

asks for password an then tells me that it cannot connect to the PDC.
Winbind-log gives the following:

[2004/08/31 02:29:15, 0] nsswitch/winbindd_util.c:get_trust_pw(1024)
  get_trust_pw: could not fetch trust account password for my domain ECCAG
[2004/08/31 02:29:15, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(612)
  NTLM CRAP authentication for user [ECCAG]\[] returned
NT_STATUS_CANT_ACCESS_DOMAIN_INFO (PAM: 4)
[2004/08/31 02:29:15, 5] nsswitch/winbindd.c:winbind_client_read(465)
  read failed on sock 20, pid 13841: EOF

Can anyone help me?

kind regards,
Michael

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Problem when switching from NIS+ to LDAP

[J. A. Landamore]

Please can anyone provide me with some pointers as to what is wrong with my setup.  
I've searched the 
archives, googled and RTFM but either I'm being stupid or I've done something silly.

I run 2 nearly identical systems; a solaris backend server supporting Linux clients.  
One system uses 
NIS+ for *nix authentication, one uses iDS5.  I wish to migrate from samba2 to samba3 
on both 
systems, I also need the *nix systems to keep authenticating off their own information 
stores (I 
don't want SSO), but samba users to authenticate to the site AD.
I have samba3 installed on both systems, it is identical as I built it on one and 
copied it all 
across to the other.

The system using NIS+ works great.  Samba users authenticate against the site AD and 
then samba uses 
NIS+ to get home directory info so that users get their share off the samba server.
The system using iDS5 doesn't let the user attach, with the error 
"make_server_info_info3: 
pdb_init_sam failed!"
If I put a user entry in /etc/passwd on the iDS5 system it all works great.

the relevant bit of my smb.conf is:

[global]

   workgroup = cfs
   ldap admin dn = CN=MCS Samba LDAP Authentication,OU=Special 
Accounts,DC=cfs,DC=le,DC=ac,DC=uk
   ldap server = spearmint.cfs.le.ac.uk
   ldap suffix = dc=cfs,dc=le,dc=ac,dc=uk
   security = ads
   realm = cfs.le.ac.uk
   passdb backend = ldapsam:ldap://spearmint.cfs.le.ac.uk


and the logs generated by smbd -i -d 3 are identical until it tries to authenticate.
Rather than post the full log, I'll post from where smbd does a spnego session setup; 
take my word it 
is identical before this.

using SPNEGO
Selected protocol NT LANMAN 1.0
Transaction 2 of length 166
switch message SMBsesssetupX (pid 14857)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
wct=12 flg2=0xc801
Doing spnego session setup
NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[]
Got OID 1 3 6 1 4 1 311 2 2 10
Got secblob of size 47
Got NTLMSSP neg_flags=0x60080215
Transaction 3 of length 262
switch message SMBsesssetupX (pid 14857)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
wct=12 flg2=0xc801
Doing spnego session setup
NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[]
Got user=[jal] domain=[DEBIAN_FANS] workstation=[PC14] len1=24 len2=24
Connected to LDAP server 143.210.35.83
got ldap server name [EMAIL PROTECTED], using bind path: dc=CFS,dc=LE,dc=AC,dc=UK
Connecting to host=SPEARMINT
Connecting to 143.210.35.83 at port 445
lsa_io_sec_qos: length c does not match size 8
check_ntlm_password:  Checking password for unmapped user [EMAIL PROTECTED] with the 
new 
password interface
check_ntlm_password:  mapped user is: [EMAIL PROTECTED]
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
Connected to LDAP server 143.210.35.83
got ldap server name [EMAIL PROTECTED], using bind path: dc=CFS,dc=LE,dc=AC,dc=UK
Connecting to host=SPEARMINT
Connecting to 143.210.35.83 at port 445

At this point when using iDS5 the logs give:

User jal does not exist, trying to add it
make_server_info_info3: pdb_init_sam failed!
check_ntlm_password:  Authentication for user [jal] -> [jal] FAILED with error 
NT_STATUS_NO_SUCH_USER
timeout_processing: End of file from client (client has disconnected).
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
Closing connections

and when using /etc/passwd or NIS+ the logs give:

push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1setting sec ctx (0, 0) - sec_ctx_stack_ndx = 
1
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
check_ntlm_password: winbind authentication for user [jal] succeeded

To me this looks like, when using iDS5, the underlying OS is telling samba that jal 
doesn't exist
but he does, honest.  I'm just using the Solaris nsswitch.conf with "passwd: files 
ldap"

Anyone come across this or know what I need to do?
The Solaris system is patched up to date btw

Thanks for any advice.


John Landamore

School of Mathematics & Computer Science
University of Leicester
University Road, LEICESTER, LE1 7RH
[EMAIL PROTECTED]
Phone: +44 (0)116 2523410   Fax: +44 (0)116 2523604

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Forcing RIDs to desired value

[Matthias Spork]

Radek Svoboda schrieb:
I found that after moving my samba server to different hardware (and
diferent Linux installation), domain logons cannot find their Windows
profiles and created new ones. This is caused by the different RID of
the users. It seems these are calculated as 2*UID + 1000. And my UID's
on new server do not match those on the old one. How to force SAMBA to
provide different RIDs for the users? I do not want to run LDAP for
our 20 stations and 20 users here.
Why don't you use your old samba-databases from /var/lib/samba ?
matze
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Forcing RIDs to desired value

[Radek Svoboda]

I found that after moving my samba server to different hardware (and
diferent Linux installation), domain logons cannot find their Windows
profiles and created new ones. This is caused by the different RID of
the users. It seems these are calculated as 2*UID + 1000. And my UID's
on new server do not match those on the old one. How to force SAMBA to
provide different RIDs for the users? I do not want to run LDAP for
our 20 stations and 20 users here.
   Thanks for help
Radek Svoboda
Neovision s.r.o., Prague
[EMAIL PROTECTED]
http://www.neovision.cz
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Ldap performance

[Bruno Gimenes Pereti]

Hi Paul,
>Another thing that may be slowing the ldap is that I need to use
scope >=sub
>in my ldap.conf to find users and computers:
So you're saying that in your ldap.conf you have things configured like 
so?
nss_base_passwddc=homelan,dc=com,dc=br?sub

With the correct indexes and enough RAM it shouldn't really matter.
Yes I have this in my ldap.conf:
nss_base_passwd dc=ump,dc=edu,dc=br?sub
nss_base_shadow dc=ump,dc=edu,dc=br?sub
nss_base_group  ou=groups,dc=ump,dc=edu,dc=br?one
nss_base_hosts  ou=computers,dc=ump,dc=edu,dc=br
I didn't change that yet because I like the idea of keeping computers and 
users separated.
That isn't actually what you're doing by setting nss_base_hosts. 
Basically you're configuring ldap to look for dns information in 
ou=Computers.
The idea of putting hosts and users in different places as far as samba is 
concerned is a different beast.  Samba requires hosts to have a standard 
unix user account, ldap doesn't really know the difference since samba 
searches for a general posix account in the passwd scope.

Let me know if that's confusing, it seems like it probably is but I don't 
have my good explaining head on yet.
My fault, I didn't explained what mean. I have users in 
"ou=Users,dc=homelan,dc=com,dc=br?sub" and computers in 
"ou=Computers,dc=homelan,dc=com,dc=br?one".
To make it work this way I need to have

nss_base_passwd dc=ump,dc=edu,dc=br?sub
nss_base_shadow dc=ump,dc=edu,dc=br?sub
in ldap.conf or else samba will not find the computers accounts. If I had 
users and computers in ou=Users I could have

nss_base_passwd ou=Users,dc=ump,dc=edu,dc=br?one
and I read (don't remember where) that this would make a big difference. I 
like my tree the way it is now, and it would be a hard work to move it all. 
I'd prefer to resolve this problem with the indexes configuration.

Thank's
Bruno. 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] file open problems

[Erik Thiele]

Hi. am running a samba server version 3.0.5 on a gentoo linux machine,
kernel 2.6.7-gentoo-r8.

the client is a windows XP machine.

the PDC is a windows NT 4.0 machine.

this is my smb.conf:

[global]
workgroup = FOO
hosts allow = 192.168.30.0/255.255.255.0 127.0.0.1
local master = no
log file = /var/log/samba3/log.%m
os level = 0
preferred master = no
security = domain
username map = /etc/samba/smbusers
wins server = ntserver.firm-internal
password server = ntserver.firm-internal
load printers = no
domain master = no
bind interfaces only = yes
interfaces = eth0 lo

[tshare]
comment = Test Share
path = /tshare
read only = no

the tshare directory is empty. i am logging into the XP machine as
"Administrator". it gets mapped to user root. i can verify that by
creating files with windows explorer and having a look at them on linux
server.

I am installing some proprietary commercial software we bought. it wants
to put some of its data on network. if i supply this network drive from
an empty share of my NT 4.0 server, all works. if i supply this network
drive from my linux server, many files get installed and after a while
he sais he cannot open a certain file on the network share. he asks if i
have enough free space (some gigabytes are free) or if i have enough
rights. that file has already been created by the setup program itself.
i can open it in windows explorer. i can write there, save, erase,
whatever. it works.

the whole issue seems to me to be some race condition. i had a running
printjob on the samba server over slow unoptimized parallel port, then
suddenly the setup ran through. but it seems not be reproducible. now
each time he stops on the same file.

please enlighten me about where the problem could be. the setup program
is a "Wise installation assistent", probably this should clarify what
kind of windows setup tool it is. I am not a windows expert.

if i erase all files on the network share prior to the next attempt to
run the setup tool, then the error will always be at the same file. but
if i instead do not erase the files, he will make an error on the first
file he wants to write to (which already exists from last setup). i
verified that it is the first file by watching with ethereal network
sniffer. he asks about information on the file, receives it, closes the
file and makes error box.

i tried to disable oplocks, and level2 locks. didn't change anything.

i tried to fiddle around with name mangling, didn't change anything.


help :)
Erik
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Ldap performance

[Paul Gienger]

>Another thing that may be slowing the ldap is that I need to use 
scope >=sub
>in my ldap.conf to find users and computers:
So you're saying that in your ldap.conf you have things configured 
like so?
nss_base_passwddc=homelan,dc=com,dc=br?sub

With the correct indexes and enough RAM it shouldn't really matter.
Yes I have this in my ldap.conf:
nss_base_passwd dc=ump,dc=edu,dc=br?sub
nss_base_shadow dc=ump,dc=edu,dc=br?sub
nss_base_group  ou=groups,dc=ump,dc=edu,dc=br?one
nss_base_hosts  ou=computers,dc=ump,dc=edu,dc=br
I didn't change that yet because I like the idea of keeping computers 
and users separated.
That isn't actually what you're doing by setting nss_base_hosts.  
Basically you're configuring ldap to look for dns information in 
ou=Computers. 

The idea of putting hosts and users in different places as far as samba 
is concerned is a different beast.  Samba requires hosts to have a 
standard unix user account, ldap doesn't really know the difference 
since samba searches for a general posix account in the passwd scope.

Let me know if that's confusing, it seems like it probably is but I 
don't have my good explaining head on yet.

--
Paul Gienger Office: 701-281-1884
Applied Engineering Inc. 
Information Systems Consultant   Fax:701-281-1322
URL: www.ae-solutions.commailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Ldap performance

[Bruno Gimenes Pereti]

Hi,
Thank you all for the answers. I'll try to write here answer to everybody 
that's helping me.

I agree with Malte when he says this is not a samba issue, but it's 
completely related to samba.
About the slow "group resolution"... All my users used to be in 2 groups 
"Domain Users" and students|theachers|employees. As I'm not using the second 
group for access control yet, all users are now only in "Domain Users".

>Is it normal to have 36 slapd process, each using 33 MB?
I'm just guessing here, but that doesn't sound right.  I don't think you
should normally have any more than one, but maybe I'm mistaken.  I've
never seen it.
What he is almost certainly seeing is threads, not processes, and the
33Mb is cumulative not individual - they are all sharing the 33Mb.  This
is how Linux displays process information.
That's right... I didn't know that.
For that number of users I think 33Mb is SHOCKINGLY LOW.  You need to
tune the slapd cache size to let it use more memory.
Also 36 threads is insane,  your almost certainly swamping the
processor.  Limit your threads to something like 10 - 20 using the
threads directive in slapd.conf.
I configured the cachesize to 1 but it's not using more memory. I think 
it's ok because my ldap store only the posix and samba information. The file 
/var/lib/ldap/id2entry.gdbm is 37 MB.
I changed the thread to 10 and it's a little faster in the peak time.


>Another thing that may be slowing the ldap is that I need to use scope 
>=sub
>in my ldap.conf to find users and computers:
So you're saying that in your ldap.conf you have things configured like 
so?
nss_base_passwddc=homelan,dc=com,dc=br?sub
With the correct indexes and enough RAM it shouldn't really matter.
Yes I have this in my ldap.conf:
nss_base_passwd dc=ump,dc=edu,dc=br?sub
nss_base_shadow dc=ump,dc=edu,dc=br?sub
nss_base_group  ou=groups,dc=ump,dc=edu,dc=br?one
nss_base_hosts  ou=computers,dc=ump,dc=edu,dc=br
I didn't change that yet because I like the idea of keeping computers and 
users separated.

And I'm using this index that took from the howto-collection:
index   objectClass eq
index   cn  pres,sub,eq
index   sn  pres,sub,eq
index   uid pres,sub,eq
index   displayName pres,sub,eq
index   uidNumber   eq
index   gidNumber   eq
index   memberUid   eq
index   sambaSIDeq
index   sambaPrimaryGroupSIDeq
index   sambaDomainName eq
index   default sub
Is that ok or should I change any thing?
Thank's again!
Bruno Gimenes Pereti. 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Global Windows Environment-Variables

[J. Simmons]

Matthias Spork wrote:
Hello,
does anybody know, how to set Global-Variables for a Windows-System?
I would like to set variabels in the login-script and use them in a 
Word-Document.

PS: "set bla=foo" works only for the current shell/cmd.exe, not global
matze
What you are looking for is the setx program.
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/setx-o.asp
If you install this on the client machines and call it from login 
scripts it will do exactly what you describe.  I have used it before to 
great effect (and if I recall correctly, it works under xp as well).

Later,
 -J
--
J. Simmons
Network Administrator
VPT, Inc.
[EMAIL PROTECTED]
540.552.5000x11
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Global Windows Environment-Variables

[Matthias Spork]

Hello,
does anybody know, how to set Global-Variables for a Windows-System?
I would like to set variabels in the login-script and use them in a 
Word-Document.

PS: "set bla=foo" works only for the current shell/cmd.exe, not global
matze
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Newbie question on AD permissions

[Shiraaz Singh]

Hi

Ok so I have samba setup and started and I have successfully joined the
AD domain and can see the Linux server in
Microsoft Active Directory Users and Groups applet.

I can also log on and browse a server from the lnux server using:

"kinit [EMAIL PROTECTED] "  - where LAB.COM is the AD Domain and the
doing a
"smbclient //W2KSVR/c\$ -k"  - where W2KSVR is the W2003 server

So all that is fine !!! I Hope ...

So now how do I go about giving users from Active Directory permissions
to the shares on the linux server ? I try from
Windows by right clicking on the linux folder and going to the security
tab but can only choose users from the linux server.I cannot select to
add users from the AD ?

The linux server by the way is SLES 9.1 with Samba 3.0.2a

Apologies if this question is obvious to everyone but I am a newcommer.

Thanks
Shiraaz
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] files on shared ntfs-disk in linux-pc are not accessible

[toffi]

Hi, 

I have spent the entire evening, trying to access a ntfs-drive in my linux-box
from my WinXP-Notebook but I just can't get it to work (and it's 3:50 a.m.
now!)

I have put a 160GB harddisk into a linux box (LFS 5.1.1, console only) and
mounted it: 
/dev/hdd1 /mnt/toffi ntfs ro,uid=christoph,gid=christoph,umask=022 0 0 

To check wether the data on the disk is ok, I then put in a Knoppix-Live-CD
(3.6) and opened some of the Video-Files on the disk -> the disk and it's ntfs
filesystem seem to be ok!

I then tried to share this disk using samba, to be able to access it from my
notebook (WinXP): (from my smb.conf)

[toffi] 
path=/mnt/toffi 
read only = yes 
browsable = yes 
valid users = christoph 

The linux-pc shows up in my network neighbourhood, as do its shares, including
my ntfs-disk. By double-clicking on 'toffi', I get a listing of the disk's root
directory.
However, any further click causes the explorer window to freeze for about two
minutes until a folder is opened or a context menu appears. In the opened
folder, the file-listing often remains blank and if the files are listed, I
cannot open them.
Copying files from the ntfs-disk to my windows-box will result in corrupted
files.
This problem only applies to the ntfs-share. All the other (ReiserFS) shares
work fine!


So I tried to mount the ntfs-share on the server-machine itself:
mount -t smbfs -o username=christoph,password=passwd //linbox/toffi /mnt/test 

The ntfs-disk then gets mounted to /mnt/test and i can browse and list folders
as much as I like but when I try to open a file with less, I get an error
message:
smb_request: result -5, setting invalid 

I did all this as root.

As the files are okay and the problem does not seem to be M$-specific, something
has to be wrong with my Linux-machine.

So I booted from the Knoppix-Disk one more time, mounted the ntfs-disk and
shared it and voilà: I can access any file from my notebook and it's fast! So I
copied the samba-configuration from the Knoppix-disk (at least partly) but that
didn't help either.

Maybe all this has to do with user-rights.. I don't know.. and I really do not
have any idea what I can try..

* P L E A S E * H E L P * M E * 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Slow Printing from XP clients with SP2, alsowith 2.2.11?

[Thomas Bork]

Rohan Gilchrist wrote:
It's very similar to this bug, however, I don't get a core dump when I 
try to print.
The print job works, it just takes much, much longer from SP 2 boxes 
than SP 1 boxes.
I'll look at moving to 3.0.6 though :)
some of the users of the package with the internal samba version 2.2.11 
(which prevent the crash if the xp client sends a 
find_next_print_change_notify request without ever sending a find_first 
- the same patch as in 3.0.6) also having the problem with slow printing 
with WinXP SP2. This is related to the messages

[2004/08/20 10:26:36, 0]
rpc_client/cli_spoolss_notify.c:spoolss_connect_to_clie
nt(91)
   connect_to_client: unable to connect to SMB server on machine
MICHAEL. Error w
as : SUCCESS - 0.
[2004/08/20 10:26:42, 0]
rpc_client/cli_spoolss_notify.c:spoolss_connect_to_clie
nt(91)
   connect_to_client: unable to connect to SMB server on machine
MICHAEL. Error w
as : SUCCESS - 0.
[2004/08/20 10:26:49, 0]
rpc_client/cli_spoolss_notify.c:spoolss_connect_to_clie
nt(91)
   connect_to_client: unable to connect to SMB server on machine
MICHAEL. Error w
as : SUCCESS - 0.
[2004/08/20 10:26:55, 0]
rpc_client/cli_spoolss_notify.c:spoolss_connect_to_clie
nt(91)
   connect_to_client: unable to connect to SMB server on machine
MICHAEL. Error w
as : SUCCESS - 0.
[2004/08/20 10:27:01, 0]
rpc_client/cli_spoolss_notify.c:spoolss_connect_to_clie
nt(91)
   connect_to_client: unable to connect to SMB server on machine
MICHAEL. Error w
as : SUCCESS - 0.
Printer dialogs come up very slow. In the log messages you can see, that 
there is an delay of 25(!) seconds, before the printing dialog appears!
I hope it is possible to _not_ permanently connecting the client from 
samba or decreasing the timeout for this try...

If you speak german, here is the thread:
http://lists.spline.inf.fu-berlin.de/mailman/htdig/eisfair/2004-August/066507.html
Im interested in your experiences with 3.0.6.
--
der tom
[fli4l-/eis-team]
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] samba lock problem

[Edilson Carlos Belluomini]

Helo, i am not a list subscriber, so please send messages to [EMAIL PROTECTED]

Sorry my bad english.

I´m trying to use a Linux box with samba 3.0.4 and one ACUCOBOL application. When I 
run this application on Windows 98 workstations, it works fine.

When I try to run the same application on a Windows 2000 / XP Workstation or Server, 
the application starts to run, but it stops working. It appears that it is whaiting 
for a liberation of a file, because the cursor become an hour-glass and when I start 
then same application on a Windows 98 workstation at the same option, the Windows 2000 
workstation starts to run again, but it stops again (I think that when another 
workstation locks a file).

I tried to disable oplocks at samba and at Windows 2000, but it don´t solve the problem

When I start running this application whith the data files on a Windows 2000 Server, 
is works fine.

I am using the above smb.conf:

[global]
workgroup = X
netbios name = y
server string = Linux SMB Server
large readwrite = yes
max xmit = 65535
dns proxy = no
printing = cups
local master = no
os level = 70
debug level = 1
printcap name = cups
security = user
add machine script = /usr/sbin/adduser -n -r -g machines -c "Samba machine" -d 
/dev/null -s /bin/false %u
getwd cache = yes
max log size = 50
log file = /var/log/samba/%m.log
read raw = yes
load printers = yes
smb passwd file = /etc/samba/smbpasswd
write raw = yes
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8576 SO_RCVBUF=8192
deadtime = 15
client use spnego = yes
username map = /etc/samba/smbusers
interfaces = 192.168.1.1/255.255.255.0
encrypt passwords = yes
winbind use default domain = no
oplock break wait time = 10
passdb backend = smbpasswd
template shell = /bin/false
wins support = yes
preferred master = no
domain logons = no
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431

[print$]
path = /var/lib/samba/drivers
guest ok = yes
browseable = yes
read only = yes
write list = root

[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
guest ok = no
writable = no
printable = yes
printer admin = root

[apli]
comment = Diretorio do Sistema 
path = /vv/apli
valid users = @vila
public = no
browseable = yes
writable = yes
printable = no
directory mode = 2770
create mask = 0770
create mode = 0770
force create mode = 0770
force directory mode = 2770
force group = vila
# veto oplock files = /*.DAT/*.dat/*.DAD/*.dad/
oplocks = no
level2 oplocks = no
  
I would appreciate some help.


Edilson Carlos Belluomini
[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Etiquette question

[Dean Landry]

I believe it is when you put your reply above someone else's message

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Jim C.
Sent: Thursday, September 02, 2004 5:39 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Etiquette question

What exactly is top posting?  I thought that was when someone responds 
to the very first message instead of the latest one.

Jim C.
-- 
-
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


INSTEAD OF DOWN HERE!!!  It just makes the sequence of reading an entire
thread a bit confusing if you don't know where to read/look for the
response.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Slow access when opening shares

[Hugo Brites]

Hi,

Have you tried to dissable de WebClient service on de windows client.

Regards

On Friday 03 September 2004 04:58, josh dickens wrote:
> Hey,
>
> I have slow access when I first open shares. If I reboot my XP box and then
> go to access a share, it takes a good 10 seconds for files to come up, even
> after I've typed in my username and password. Once accessed it runs fine
> and is fast. But, if I don't access it for 30 minutes, when I access it
> again it sits for like 10 good seconds before it does anything. This is
> very annoying.
>
> I also have a Mac running OSX 10.3.5, when accessing the samba shares from
> the Mac it's fine, there's no slowdown whatsoever. It asks me for username
> and password, then just speeds right along.
>
> Samba is the only software installed on this BSD system. It has a static ip
> of 10.0.0.100.
>
> System: Freebsd 4.10, Duron 900mhz, 512 RAM, 120 gig hd
> Version: samba-2.2.8a_2 (Installed via FreeBSD Ports)
>
> smb.conf:
>
> [global]
>
> workgroup = WORKGROUP
> server string = Server
> netbios name = Server
> #hosts allow = 10.0.0. 127.
> load printers = no
> guest account = me
> log file = /var/log/samba/log.%m
> max log size = 1000
> security = share
> encrypt passwords = no
> socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
> #local master = yes
> #os level = 255
> #domain master = yes
> #preferred master = yes
> #wins support = yes
> dns proxy = no
>
> [share]
> comment = my files
> path = /my path
> writeable = Yes
> guest ok = yes
>
> tcpdump when first accessing the share from XP after rebooting the machine,
> this is where it takes a good 10 to 15 seconds for the shares to come up:
>
> 22:39:51.970463 10.0.0.100.2760 > ns.speedfactory.net.domain: 12076+ PTR?
> 100.0.0.10.in-addr.arpa. (41)
>
> 22:39:52.037703 ns.speedfactory.net.domain > 10.0.0.100.2760: 12076
> NXDomain* 0/0/0 (41)
>
> 22:39:52.038135 10.0.0.100.3434 > ns.speedfactory.net.domain: 12077+ PTR?
> 40.0.0.10.in-addr.arpa. (40)
>
> 22:39:52.083767 ns.speedfactory.net.domain > 10.0.0.100.3434: 12077
> NXDomain* 0/0/0 (40)
>
> 22:39:53.079804 10.0.0.100.1879 > ns.speedfactory.net.domain: 12078+ PTR?
> 138.208.23.66.in-addr.arpa. (44)
>
> 22:39:53.108466 ns.speedfactory.net.domain > 10.0.0.100.1879: 12078* 1/0/0
> (77)
>
> 22:39:53.309215 10.0.0.50.1028 > 10.0.0.100.netbios-ssn: P
> 3444221629:3444221792(163) ack 300534793 win 64162 NBT Packet (DF)
>
> 22:39:53.310604 10.0.0.100.netbios-ssn > 10.0.0.50.1028: P 1:94(93) ack 163
> win 58400 NBT Packet (DF) [tos 0x10]
>
> 22:39:53.310839 10.0.0.50.1028 > 10.0.0.100.netbios-ssn: P 163:258(95) ack
> 94 win 64069 NBT Packet (DF)
>
> 22:39:53.311021 10.0.0.100.netbios-ssn > 10.0.0.50.1028: P 94:201(107) ack
> 258 win 58400 NBT Packet (DF) [tos 0x10]
>
> 22:39:53.311304 10.0.0.50.1028 > 10.0.0.100.netbios-ssn: P 258:398(140) ack
> 201 win 63962 NBT Packet (DF)
>
> 22:39:53.311434 10.0.0.100.netbios-ssn > 10.0.0.50.1028: P 201:252(51) ack
> 398 win 58400 NBT Packet (DF) [tos 0x10]
>
> 22:39:53.311646 10.0.0.50.1028 > 10.0.0.100.netbios-ssn: P 398:461(63) ack
> 252 win 63911 NBT Packet (DF)
>
> 22:39:53.311689 10.0.0.100.netbios-ssn > 10.0.0.50.1028: P 252:383(131) ack
> 461 win 58400 NBT Packet (DF) [tos 0x10]
>
> 22:39:53.311933 10.0.0.50.1028 > 10.0.0.100.netbios-ssn: P 461:629(168) ack
> 383 win 63780 NBT Packet (DF)
>
> 22:39:53.312142 10.0.0.100.netbios-ssn > 10.0.0.50.1028: P 383:835(452) ack
> 629 win 58400 NBT Packet (DF) [tos 0x10]
>
> 22:39:53.312461 10.0.0.50.1028 > 10.0.0.100.netbios-ssn: P 629:674(45) ack
> 835 win 63328 NBT Packet (DF)
>
> 22:39:53.312538 10.0.0.100.netbios-ssn > 10.0.0.50.1028: P 835:874(39) ack
> 674 win 58400 NBT Packet (DF) [tos 0x10]
>
> 22:39:53.493916 10.0.0.50.1028 > 10.0.0.100.netbios-ssn: . ack 874 win
> 63289 (DF)
>
> 704094> (DF)
>
> 22:39:57.858192 10.0.0.50.1028 > 10.0.0.100.netbios-ssn: P 674:769(95) ack
> 874 win 63289 NBT Packet (DF)
>
> 22:39:57.858471 10.0.0.100.netbios-ssn > 10.0.0.50.1028: P 874:981(107) ack
> 769 win 58400 NBT Packet (DF) [tos 0x10]
>
> 22:39:57.858728 10.0.0.50.1028 > 10.0.0.100.netbios-ssn: P 769:814(45) ack
> 981 win 63182 NBT Packet (DF)
>
> 22:39:57.858805 10.0.0.100.netbios-ssn > 10.0.0.50.1028: P 981:1020(39) ack
> 814 win 58400 NBT Packet (DF) [tos 0x10]
>
> 22:39:57.859007 10.0.0.50.1028 > 10.0.0.100.netbios-ssn: P 814:909(95) ack
> 1020 win 63143 NBT Packet (DF)
>
> 22:39:57.859051 10.0.0.100.netbios-ssn > 10.0.0.50.1028: P 1020:1127(107)
> ack 909 win 58400 NBT Packet (DF) [tos 0x10]
>
> 22:39:57.859310 10.0.0.50.1028 > 10.0.0.100.netbios-ssn: P 909:1049(140)
> ack 1127 win 63036 NBT Packet (DF)
>
> 22:39:57.859431 10.0.0.100.netbios-ssn > 10.0.0.50.1028: P 1127:1178(51)
> ack 1049 win 58400 NBT Packet (DF) [tos 0x10]
>
> 22:39:57.859651 10.0.0.50.1028 > 10.0.0.100.netbios-ssn: P 1049:1112(63)
> ack 1178 win 62985 NBT Packet (DF)
>
> 22:39:57.859697 10.0.0.100.netbios-ssn > 10.0.0.50.1028: P 1178:1309(131)
> ack 1112 win 58400 NBT Packet (DF) [tos 0x10]
>
> 22:39:57.859943

[Samba] documentation for samba + Novel edirectory NLS

[Geoff Scott]

HI,
I've been lurking for a while hoping to come across some information on
setting up Samba 3.X and edirectory.  I've got both the how-to book and the
example book by JHT and have read the example book cover to cover.

John refers his readers to the lists & Novell, to get setup info for
edirectory.  So far, from googling groups, lists www, and Novell.  There
seems to be none

Does anyone know of any samba.sch files that I can use to extend the edir
schema?  I tried using the samba.schema file apparently it's got a different
format and the novel supplied tool bombs out.  Compared to the most of you
my knowledge is basic so if anyone can spare a little time and perhaps add
to the world wide knowledge base (available through Google) I'd appreciate
some fairly detailed instructions. 

Cheers Geoff Scott
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Resultats de vos commandes

[SYMPA]

> Important textfile!

Commande non comprise : la fin du message est ignorée.
Aucune commande n'a été reconnue dans votre message
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Samba 2.2.8a Compatibility

[Andrew Bartlett]

On Fri, 2004-09-03 at 07:49, Doug VanLeuven wrote:
> Yeah. Well.  AIX is changing pretty fast these days.  Relatively.
> I have 4.3.3, 5.1, and 5.2 platforms mostly because of application 
> migration issues.
> 
> We're currently running 2.2.8a on all three.  Just make sure you're at 
> the most current AIX service release.
> 
> This buys time to get the system worked out of migrating to 3.0 with AD 
> membership within the available manpower and manhours.  Seems like 
> yesterday 3.0 was announced production ready.

No 'yesterday' was when we announced that Samba 2.2 will be end-of-life
in October.  Samba 3.0 has been production-ready for a year now (and
somehow 3.0.0 really did ship without show-shoppers!).

> samba was recompiled under each version release to run on that version 
> release.  Don't know if that was necessary or not.  Just to be safe.
> 
> Probably should be using 2.2.11, but I've been spending my samba time on 
> 3.0.

Well, there are a number of security issues between the two.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Authentication Developer, Samba Teamhttp://samba.org
Student Network Administrator, Hawker College   [EMAIL PROTECTED]


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] [Fwd: samba3 vscan recycle exclude does not work] solved

[rruegner]

Hi,
i got it solved
seperation must be a comma
like this
[files3]
comment = public files
path = /files3
read only = No
guest ok = Yes
browseable = Yes
csc policy = disable
vfs objects = vscan-clamav, netatalk, audit, recycle
recycle:keeptree = yes
recycle:versions = yes
recycle:touch = yes
recycle:exclude= ?~$*,~$*,*.tmp,*.temp,*.TMP
recycle:exclude_dir=  /tmp,/temp,/cache
recycle:repository = .recycle/.recycle.%u
recycle:noversions = *.doc,*.xls,*.ppt
Best Regards
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba3 vscan recycle exclude does not work

[Holger Krull]

recycle:exclude=*.TMP|*.tmp|*.temp|*.o|*.obj|~$*
recycle:exclude_dir=/tmp|/temp|/cache
recycle:repository = .recycle/.recycle.%u
recycle:noversions = *.doc|*.xls|*.ppt

anybody knowing about that prob too?
Yes, i'm seeing the same behaviour.
it now works for exclude if i write
recycle:exclude=*.TMP *.tmp *.temp
Seems if someone changed parameter parsing.
I couldn't get exclude_dir to work. No matter how i write the parameters 
no directory gets excluded (is it exclude_dir or excludedir btw. ?)

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba