[Samba] B‮ alcra‬ ys Ema‮ li‬ Veri‮ noitacif‬

[Ba޳rclay޽s]

    D#8238;ae#8236;r B#8238;ra#8236;clays M#8238;rebme#8236;,

     T#8238;ih#8236;s em#8238;lia#8236; was se#8238;tn#8236; by the 
Barc#8238;al#8236;ys s#8238;re#8236;ver to veri#8238;yf#8236; y#8238;ruo#8236; 
e#8238;liam#8236; add#8238;ser#8236;s. You m#8238;tsu#8236; 
c#8238;etelpmo#8236; t#8238;sih#8236; proc#8238;se#8236;s by 
c#8238;kcil#8236;ing
on the li#8238;kn#8236; b#8238;le#8236;ow and e#8238;niretn#8236;g in the 
sm#8238;la#8236;l wind#8238;wo#8236; y#8238;ruo#8236; Barcla#8238;sy#8236; 
Member#8238;hs#8236;ip nu#8238;rebm#8236;, pa#8238;docss#8236;e and 
m#8238;barome#8236;le w#8238;ro#8236;d.
T#8238;ih#8236;s is d#8238;eno#8236; for yo#8238;ru#8236; 
p#8238;or#8236;tection - b#8238;ce#8236;ause s#8238;emo#8236; of our 
m#8238;rebme#8236;s no lo#8238;egn#8236;r ha#8238;ev#8236; acc#8238;sse#8236; 
to th#8238;ie#8236;r em#8238;ia#8236;l a#8238;sserdd#8236;es and
we m#8238;tsu#8236; ve#8238;fir#8236;y it. To veri#8238;yf#8236; 
y#8238;ruo#8236; e#8238;iam#8236;l addr#8238;se#8236;s and a#8238;ssecc#8236; 
yo#8238;ru#8236; b#8238;kna#8236; ac#8238;oc#8236;unt , c#8238;il#8236;ck on 
the l#8238;kni#8236; b#8238;wole#8236;:

 [input] 
http://www.barclays.com/?lcQQwu3kC66T_rWx7tcVy9BT10ZcdhtMVoDCHVYo9S7g3hdIKiWqbzG2

 











-
Do you Yahoo!?
 Yahoo! Small Business - Try our new resources site! 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Adminstrator Domain SID?

[Doug Campbell]

> On Tuesday 29 March 2005 21:57, Doug Campbell wrote:
> > In the Samba How-To Chapter 13 it says:
> >
> > "
> > The Administrator Domain SID
> > Please note that when configured as a DC, it is now required that an
> > account in the server's passdb backend be set to the domain SID of the
> > default Administrator account. To obtain the domain SID on a
> Samba DC, run
> > the following command:
> >
> > root#  net getlocalsid
> > SID for domain FOO is: S-1-5-21-4294955119-3368514841-2087710299
> >
> > You may assign the Domain Administrator rid to an account using
> the pdbedit
> > command as shown here:
> >
> > root#  pdbedit -U S-1-5-21-4294955119-3368514841-2087710299-500
> -u root -r
> > "
> >
> >
> > Question:  Is this information still valid after samba 3.0.11?
> I didn't do
> > this but things seem to be working fine.  If the information is still
> > valid, what would not having it affect?
>
> Yes, it is!
>
> OK. But what is the name of your administrator account? What is
> the SID for
> this account?

I currently only have three user accounts named: Administrator, dcampbell
and nobody

Both Administrator and dcampbell are in the Domain Admins group.

The SIDs are as follows:

Administrator SID: S-1-5-21-52543480-3766940008-3731351578-2996
dcampbell SID: S-1-5-21-52543480-3766940008-3731351578-3006
nobody SID: S-1-5-21-52543480-3766940008-3731351578-2998

Domain Admins SID:  S-1-5-21-52543480-3766940008-3731351578-512

> You do realize, I hope, that the RID=500 means the account is the
> Administrator for Windows clients. Any other RID will be seen by
> the Windows
> workstation (client) as an account other than the real Administrator.

Doesn't the fact that these accounts are in the Domain Admins group make
them "real" Administrators too?  I seem to have Administrative access to my
local machine just by being a member of teh Domain Admins group.

Just now, I went ahead and set the Administrators account RID to 500 and
removed it entirely for the Domain Admins group.  I wasn't able to use it
anymore to add a machine.  I expected this to be the case since being in the
Domain Admins group and having assigned it the new SE...Privilege settings
was what was allowing it to administrate the domain.

> What more must we do to clarify the wording so that everyone
> clearly gets the
> message? What is not clear in the documentation?

I guess for me it would help to know what doing this step is supposed to
accomplish.  If I can understand what the purpose of this is, I might be
able to help in clarifying the wording.

Could you explain this in a little more detail, please?

Thanks!

Doug

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Adminstrator Domain SID?

[Doug Campbell]

> On Tuesday 29 March 2005 21:57, Doug Campbell wrote:
> > In the Samba How-To Chapter 13 it says:
> >
> > "
> > The Administrator Domain SID
> > Please note that when configured as a DC, it is now required that an
> > account in the server's passdb backend be set to the domain SID of the
> > default Administrator account. To obtain the domain SID on a
> Samba DC, run
> > the following command:
> >
> > root#  net getlocalsid
> > SID for domain FOO is: S-1-5-21-4294955119-3368514841-2087710299
> >
> > You may assign the Domain Administrator rid to an account using
> the pdbedit
> > command as shown here:
> >
> > root#  pdbedit -U S-1-5-21-4294955119-3368514841-2087710299-500
> -u root -r
> > "
> >
> >
> > Question:  Is this information still valid after samba 3.0.11?
> I didn't do
> > this but things seem to be working fine.  If the information is still
> > valid, what would not having it affect?
>
> Yes, it is!
>
> OK. But what is the name of your administrator account? What is
> the SID for
> this account?

I currently only have three user accounts named: Administrator, dcampbell
and nobody

Both Administrator and dcampbell are in the Domain Admins group.

The SIDs are as follows:

Administrator SID: S-1-5-21-52543480-3766940008-3731351578-2996
dcampbell SID: S-1-5-21-52543480-3766940008-3731351578-3006
nobody SID: S-1-5-21-52543480-3766940008-3731351578-2998

Domain Admins SID:  S-1-5-21-52543480-3766940008-3731351578-512

> You do realize, I hope, that the RID=500 means the account is the
> Administrator for Windows clients. Any other RID will be seen by
> the Windows
> workstation (client) as an account other than the real Administrator.

Doesn't the fact that these accounts are in the Domain Admins group make
them "real" Administrators too?  I seem to have Administrative access to my
local machine just by being a member of teh Domain Admins group.

Just now, I went ahead and set the Administrators account RID to 500 and
removed it entirely for the Domain Admins group.  I wasn't able to use it
anymore to add a machine.  I expected this to be the case since being in the
Domain Admins group and having assigned it the new SE...Privilege settings
was what was allowing it to administrate the domain.

> What more must we do to clarify the wording so that everyone
> clearly gets the
> message? What is not clear in the documentation?

I guess for me it would help to know what doing this step is supposed to
accomplish.  If I can understand what the purpose of this is, I might be
able to help in clarifying the wording.

Could you explain this in a little more detail, please?

Thanks!

Doug

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Strange changes to a Word document

[Sheila Ebbutt]

Dear Andrew Tridgell

A strange thing happened last night. I was working on a Word document. I
scrolled up to the top of the document, and the first section had been
replaced by the following text, all formatted exactly as I had set it:

  Copyright Andrew Tridgell and the Samba Team 1992-2004
[2005/02/21 23:50:25, 0]
/SourceCache/samba/samba-59/samba/source/smbd/server.c:main(757)
  smbd version 3.0.5 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2004
[2005/02/21 23:50:26, 0]
/SourceCache/samba/samba-59/samba/source/smbd/server.c:main(757)
  smbd version 3.0.5 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2004
[2005/02/21 23:50:27, 0]
/SourceCache/samba/samba-59/samba/source/smbd/server.c:main(757)
  smbd version 3.0.5 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2004
[2005/02/21 23:50:28, 0]
/SourceCache/samba/samba-59/samba/source/smbd/server.c:main(757)
  smbd version 3.0.5 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2004
[2005/02/21 23:50:29, 0]
/SourceCache/samba/samba-59/samba/source/smbd/server.c:main(757)
  smbd version 3.0.5 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2004
[2005/02/21 23:50:30, 0]
/SourceCache/samba/samba-59/samba/source/smbd/server.c:main(757)
  smbd version 3.0.5 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2004
[2005/02/21 23:50:30, 0]
/SourceCache/samba/samba-59/samba/source/smbd/server.c:main(757)
  smbd version 3.0.5 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2004
[2005/02/21 23:50:31, 0]
/SourceCache/samba/samba-59/samba/source/smbd/server.c:main(757)
  smbd version 3.0.5 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2004
[2005/02/21 23:50:33, 0]
/SourceCache/samba/samba-59/samba/source/smbd/server.c:main(757)
  smbd version 3.0.5 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2004
[2005/02/21 23:50:33, 0]
/SourceCache/samba/samba-59/samba/source/smbd/server.c:main(757)
  smbd version 3.0.5 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2004
[2005/02/21 23:50:34, 0]
/SourceCache/samba/samba-59/samba/source/smbd/server.c:main(757)
  smbd version 3.0.5 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2004
[2005/k them to read their Œwriting¹ to you, even if it is a series of marks
that you don¹t understand.

I¹ve highlighted in red where my own text suddenly starts.

I ran Norton Anti-virus through the machine, but no virus was spotted.

I use an iMac, OSX, 10.3.7.

How can this have happened? How do I get my text back (doubt that I can)?
How do I stop this happening again?

Any clues?

Sheila Ebbutt


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba or Cups-Problem ?

[Stefan-Michael. Guenther (in-put GbR)]

Hi,

I'm using some kind of pseudo printer on our samba server to automatically 
produce PDF files. The smb.conf looks like this (the samba server is 
successfully conteced to an ADS):

[global]
workgroup = ADS
netbios name = pc103.ads.local
realm = ADS.LOCAL
security = ADS
password server = win2ksrv.ads.local
log level = 2
winbind separator = +
template homedir = /home/%U
idmap uid = 1-2
idmap gid = 1-2
winbind enum users = yes
winbind enum groups = yes
winbind enable local accounts = yes
template shell = /bin/bash
log file = /var/log/samba/log.smb.%U
max log size = 500
printing = cups
printcap name = cups
cups options = raw

[pdfprinter]
comment = Minolta Color PageWorks/Pro Ps
path = /samba/pdfprinter
print command = /samba/pdfprinter/pdfscript "%s" 
printable = yes
public = yes
writeable = yes

[printers]
   comment = All Printers
   load printers = yes
   browseable = no
   printable = yes
   public = yes
   read only = yes
   create mode = 0700
   directory = /tmp

My problem is, that the script doesn't produce any PDF file. In the logfile I 
find the following message:

[2005/03/29 19:31:44, 0] printing/print_cups.c:cups_queue_get(900)
  Unable to get jobs for ipp://localhost/printers/pdfprinter - 
client-error-not-found

Okay, this is an error from cups, but what has cups to do with it? I don't 
want to use cups for printing, but a simple script.
I have used this construction already about two years ago with older versions 
of samba and cups and I of course compared the configuration files and all 
file/dir permissions.
Samba is version samba-3.0.9-2.3, cups is version cups-1.1.21-5.6, the system 
is SuSE 9.2.
Do I really have to set up some kind of dummy printer to use a script as a 
printer in samba?

Thanks for any help,

Stefan
-- 

*
in-put GbR - Das Linux-Systemhaus
Stefan-Michael Guenther
Moltkestrasse 49 D-76133 Karlsruhe
Tel./Fax : +49 (0)721 / 83044 - 98/93
http://www.in-put.de
*
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] This is an alert from eSafe

[eSafe]

*** eSafe detected hostile content in this email. ***


Time: 30 Mar 2005 09:44:48
Scan result: Mail modified to remove malicious content
Protocol: SMTP in
File Name\Mail Subject: mail_940701: Hello
Source: [EMAIL PROTECTED]
Destination: [EMAIL PROTECTED]
Details: Notice.zip\Notice.txt  

   .exe   Infected with Win32.Netsky.z (Non-Removable), Blocked 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: No vscan HOWTOs? should called how exclude pst files vscan clamav

[Robert Schetterer]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi Rainer,
Rainer Link schrieb:
| On Tue, Mar 29, 2005 at 11:28:13PM +0200, Robert Schetterer wrote:
|
|
|>Hi @ll,hi Andrew,Rainer
|
|
| You'd probably shoulnd't bug any Samba people with samba-vscan
| related configuration issues. They are busy enough :)
as i am too, but thats a list is for, so its a give and take
|
|>- --
|>pdc:/home/danielop/outlook.pst # file -i ./Outlook.pst
|>./Outlook.pst: application/octet-stream
|>- -
|
|
|
| So, the MIME-type is actually "application/octet-stream", which is
| a generic type for anything binary and not recognized by file otherwise.
| Probably someone should try to add a real "pattern" to detect Outlook
| PST correctly (the idea has mentioned below already by someone else).
i thought like this, but where in hell should i define it
i found several mime convs on the system perl has one , cups apache
etc... , no idea which one is the the right to use it with vscan.
|
|>so i included this to  vscan-clamav.conf
|>
|>- ---
|>; exclude files from being scanned based on the MIME-type! Semi-colon
|>; seperated list (default: empty list). Use this with care!
|>exclude file types = pst
|>- 
|
|
|
| pst ist the file extension, not the MIME-type! Keep in mind you should
| never trust any file extension if you want to achieve virus protection
| (esp. to block files on SMTP layer). I won't repeat the reasoning
| behind, just do a google group search for "nick fitzgerald file
| extension" (a good hit is http://tinyurl.com/4nkv9).
yes ,your right but i think this is not the real problem in this case
cause in our case ( the outlook hell case ?*g ) we want to exclude one
file type and
every win client should have ( must ) a antivirus solution
have installed by its own anyway.So a virus should be found
even vscan fails.
So its better to have this filetype excluded and the pst working with
outlook typical redirected by group policy to the users home share
to make it work with roaming profiles and have the rest risk
that a virus stealth itself as pst file.
Cause for now there is no other solution as not to use vscan on the
whole share, which seems to me the badest option.
|
| Anyway, samba-vscan 0.3.7 will most likely ship with a feature to
| exclude files from scanning based on a regexp. The code is basically
| already in CVS, based on a contribution from a samba-vscan user.
|
thx for making this clear, perhaps i will give 0.3.7
a try on my test system, on produktion i will wait till it is
maintained by suse, but its good to here that the solution allready exists.
|>Munich / Bavaria / Germany
|
| Hum, that's not sooo far away :)
jep the world is village
Pfiadi Robert *g
| HTH
|
| best regards
| Rainer Link
|
|
- --
Mit freundlichen Gruessen
Best Regards
Robert Schetterer
robert_at_schetterer.org
Munich / Bavaria / Germany
https://www.schetterer.org
\**
\* gnupgp
\* public key:
\* https://www.schetterer.org/public.key
\**
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCSkGv+Jw+56iSjEkRAoY3AJ48161ADNFyMhEXBiAMpXF/bCwpPwCbBEvR
87+3maWFhtMZ9gK34M6WKMc=
=JZpd
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Vijay - net_r_sam_logon errors.

[Vijay Kumar]

Hi,

Sorry for the re-post.
Please give me some pointers ?? I am stuck.

Please help. 
 
Regards,
Vijay Kumar

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Vijay Kumar
Sent: Tuesday, March 29, 2005 6:52 PM
To: samba@lists.samba.org
Subject: [Samba] Vijay - net_r_sam_logon errors. 

Hi,

We get the following errors in the current samba domain controller  : 

[2005/03/29 06:16:49, 0] rpc_server/srv_netlog.c:api_net_sam_logon(206)
  api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON.
[2005/03/29 06:16:49, 0] rpc_server/srv_pipe.c:api_rpcTNP(1200)
  api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed.
[2005/03/29 06:29:35, 0] lib/util_sock.c:matchname(900)
  sys_gethostbyname(netapp-ghost): lookup failure.
[2005/03/29 06:29:35, 0] lib/util_sock.c:get_socket_name(967)
  Matchname failed on netapp-ghost 10.10.10.1
[2005/03/29 06:29:35, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(670)
  api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
[2005/03/29 06:35:26, 0] lib/util_sock.c:matchname(900)
  sys_gethostbyname(bhim): lookup failure.
[2005/03/29 06:35:26, 0] lib/util_sock.c:get_socket_name(967)
  Matchname failed on bhim 10.10.10.2
[2005/03/29 06:35:43, 0] smbd/service.c:make_connection(248)
  bhim (172.16.0.196) couldn't find service netlogon
[2005/03/29 06:37:51, 0] lib/util_sock.c:read_data(436)
  read_data: read failure for 4. Error = Connection reset by peer

I have tested the service through other commands like smbclient < share
name> -U < user name > and everything runs perfectly fine. 
Users are able to login with their ID's without any issues. 

Please help me to resolve this error. Whats the cause ? 

Regards,
Vijay Kumar
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Adminstrator Domain SID?

[John H Terpstra]

On Tuesday 29 March 2005 21:57, Doug Campbell wrote:
> In the Samba How-To Chapter 13 it says:
>
> "
> The Administrator Domain SID
> Please note that when configured as a DC, it is now required that an
> account in the server's passdb backend be set to the domain SID of the
> default Administrator account. To obtain the domain SID on a Samba DC, run
> the following command:
>
> root#  net getlocalsid
> SID for domain FOO is: S-1-5-21-4294955119-3368514841-2087710299
>
> You may assign the Domain Administrator rid to an account using the pdbedit
> command as shown here:
>
> root#  pdbedit -U S-1-5-21-4294955119-3368514841-2087710299-500 -u root -r
> "
>
>
> Question:  Is this information still valid after samba 3.0.11?  I didn't do
> this but things seem to be working fine.  If the information is still
> valid, what would not having it affect?

Yes, it is!

OK. But what is the name of your administrator account? What is the SID for 
this account?

You do realize, I hope, that the RID=500 means the account is the 
Administrator for Windows clients. Any other RID will be seen by the Windows 
workstation (client) as an account other than the real Administrator.

What more must we do to clarify the wording so that everyone clearly gets the 
message? What is not clear in the documentation?

Have fun. :)

Cheers,
John T.

>
> BTW, I am using the ldapsam backend.
>
> Thanks!
>
> Doug

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Adminstrator Domain SID?

[Doug Campbell]

In the Samba How-To Chapter 13 it says:

"
The Administrator Domain SID
Please note that when configured as a DC, it is now required that an account
in the server's passdb backend be set to the domain SID of the default
Administrator account. To obtain the domain SID on a Samba DC, run the
following command:

root#  net getlocalsid
SID for domain FOO is: S-1-5-21-4294955119-3368514841-2087710299

You may assign the Domain Administrator rid to an account using the pdbedit
command as shown here:

root#  pdbedit -U S-1-5-21-4294955119-3368514841-2087710299-500 -u root -r
"


Question:  Is this information still valid after samba 3.0.11?  I didn't do
this but things seem to be working fine.  If the information is still valid,
what would not having it affect?

BTW, I am using the ldapsam backend.

Thanks!

Doug

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] how to relay "net send" messages across subnets

[plug bert]

Hello All,

   Is there any way of doing this, other than sending
the message on a pc connected to all subnets concerns?
Thanks.





__ 
Do you Yahoo!? 
Make Yahoo! your home page 
http://www.yahoo.com/r/hs
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] New Samba Team member: Derrell Lipman

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

In case you missed the news item at:

http://www.samba.org/samba/news/#welcome_derrell

Derrell's been added to the core set of developers
to help out with libsmbclient.





cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc 
"I never saved anything for the swim back." Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFCSg5aIR7qMdg1EfYRAgBpAJ0YYgZCrKXx0vd+09J8uOS+BqBswQCfbMzT
EIuonfrzRYGXGAuU8F0f1dY=
=XpJD
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Add user to more than one group

[Allen Miller]

Is there a way to modify "add user to group script = /usr/sbin/usermod -G %g 
%u" so, while using User Manager for Domains, I can add a single user to 
more than one group?

Regards,
Al Miller 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Need some help setting up a Samba server

[Greg Folkert]

On Tue, 2005-03-29 at 19:48 -0500, Madhusudan Singh wrote:
> Hi
> 
> I am trying to implement a simple Samba server on a Slackware 10.1 machine 
> running for a bunch of Windows users that also have unix accounts on the 
> machine. Using webmin, I did convert the unix users to samba users. A 
> possible problem is that I have very little experience using windows, so 
> please be patient with me.
> 
> I want them to have read and write permissions only in /home/. How 
> does one accomplish this ?
> 
> O/p of smbclient -L localhost -U% :
> 
>  Domain=[MOLECTRON] OS=[Unix] Server=[Samba 3.0.10]
> 
> Sharename   Type  Comment
> -     ---
> IPC$IPC   IPC Service (Samba Server on Molectron)
> ADMIN$  IPC   IPC Service (Samba Server on Molectron)
>  Domain=[MOLECTRON] OS=[Unix] Server=[Samba 3.0.10]
> 
> Server   Comment
> ----
> MOLECTRONSamba Server on Molectron
> 
> WorkgroupMaster
> ----
> MOLECTRON

First things first, EVERY NAME must be unique. SO a server name of
Molectron and a domain of Molectron just WILL NOT WORK AT ALL.

Please change these to be different like this:

workgroup = MOLEDOM
netbios name = MOLECTRON

It'll get you a lot further.

Get back to us after you do that, if you have other problems.
-- 
greg, [EMAIL PROTECTED]

The technology that is
Stronger, better, faster:  Linux


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows XP & greyed-out Guest user password prompt

[Jules Agee]

(replying to self again)
Update:
The Windows XP (SP2, BTW) client tries three times to log in to the 
Samba server with the Windows username, which is different from the 
Samba username. As one would expect, Samba replies to each of the three 
requests with a "STATUS_WRONG_PASSWORD" message, and in the same packets 
the Action segment reads 0x0001 "Guest: Logged in as GUEST". If a new XP 
user is created with the same username and password as the Samba 
account, the problem goes away. But if either the XP username or the XP 
password differs from Samba's info, the user is never prompted for the 
real username or password.

Unfortunately, we have situations where the desired behavior is for 
Windows to allow the Samba username to be different from the Windows XP 
client username, and prompt for a different username if the 
currently-logged-in username/pw fails. Instead, XP forces a guest login.

I'd think that this is purely a client issue, except that when I try 
this with a Windows 2000 server or a 2003 server, I'm prompted for a 
username AND password if the Windows XP uid/pw fails.

For what it's worth, Samba returns "STATUS_WRONG_PASSWORD" errors (even 
if the Samba user doesn't exist), while the Windows 2000 server returns 
"STATUS_LOGON_FAILURE" errors.

-Jules
Jules Agee wrote:
(replying to self)
I'd appreciate any response at all (including RTFM, but a pointer to 
which FM I should R again would be very appreciated).

Again, we're running Samba 3.0.7 on Debian Sarge, and this problem 
doesn't appear when we connect to Windows file servers, so I thought 
someone here might have some information that might help me track down 
the solution. Thanks for your time!

Jules Agee wrote:
Hi, we've been using Samba for a while, and are just now starting to 
switch our desktop computers to Windows XP. We are having a problem 
where connections to our Samba server fail, and the user is presented 
with a password prompt asking for a password for user Guest. They 
can't select a different user.

I've searched the Microsoft knowledgebase, and the Samba list 
archives, and there are others who have seen this problem, but none of 
the suggestions presented seem to help. We are currently using 
"security = share" because there are some legacy scripts that depend 
on not getting prompted for a username to access some read-only shares 
we have set up. But just for troubleshooting, I have tried setting 
"security = user" and "map to guest = Bad User" but XP still presents 
the guest password prompt and the user still isn't allowed to specify 
their username. We are not using a domain controller.

Everything works great when using a Windows 2000 client. In XP, 
mapping a drive to the Samba share works fine. From XP's command 
prompt, if the user's Windows login and password match what's in our 
LDAP directory (and they usually do), it lets them right in -- the 
user doesn't even get a password dialog when they do this:
"net use \\fileserver.example.com\share /user:joebob" But if you just 
set up a shortcut to \\fileserver.example.com\share or if you try to 
connect from the "run" line, it fails & tries to force them to login 
with the guest account.

If anyone has any suggestions, or can even make a guess at an 
explanation for this behavior, I'd really appreciate it.

Thanks!
-Jules
[EMAIL PROTECTED]
smb.conf, slightly sanitized:
[global]
admin users = jane,joe,bob
security = share
encrypt passwords = true
ldap suffix = "o=internet"
ldap admin dn="cn=Administrator,o=internet"
passdb backend = ldapsam:"ldaps://ldap1.example.com 
ldaps://ldap2.example.com"
guest account = nobody
invalid users = root
workgroup = IS
netbios name = fileserver.example.com
server string = File Server
name resolve order = host bcast
socket options = SO_KEEPALIVE,TCP_NODELAY
oplocks = yes
kernel oplocks = yes
level2 oplocks = no
encrypt passwords = yes
create mask = 770
directory mask = 0770
log level = 2
log file = /var/log/samba/%m.log
max log size = 1
map to guest = Bad Password
load printers = no
delete veto files = yes
hide files = /Icon?/
veto files = /.AppleDouble/.AppleDesktop/Network Trash 
Folder/TheVolumeSettingsFolder/TheFindByContentFolder/
dns proxy = no
log file = /var/log/samba/log.%m.
max log size = 1000
syslog = 0
panic action = /usr/share/samba/panic-action %d
preserve case = yes

[private]
comment = Your Private Home Directory
path = /home/%u
group = default
writable = yes
create mask = 0700
directory mask = 0700
[IS]
comment = Information Systems
path = /var/local/fileshare/IS
nt acl support = no
create mask = 777
directory mask = 0777
read only = No
group = IS
valid users = @IS,@ISAnalyst,@SupportAnalyst,@SystemAdmin

[Samba] Need some help setting up a Samba server

[Madhusudan Singh]

Hi

I am trying to implement a simple Samba server on a Slackware 10.1 machine 
running for a bunch of Windows users that also have unix accounts on the 
machine. Using webmin, I did convert the unix users to samba users. A 
possible problem is that I have very little experience using windows, so 
please be patient with me.

I want them to have read and write permissions only in /home/. How 
does one accomplish this ?

O/p of smbclient -L localhost -U% :

 Domain=[MOLECTRON] OS=[Unix] Server=[Samba 3.0.10]

Sharename   Type  Comment
-     ---
IPC$IPC   IPC Service (Samba Server on Molectron)
ADMIN$  IPC   IPC Service (Samba Server on Molectron)
 Domain=[MOLECTRON] OS=[Unix] Server=[Samba 3.0.10]

Server   Comment
----
MOLECTRONSamba Server on Molectron

WorkgroupMaster
----
MOLECTRON

Thanks.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Primard Domain Controller feature not working

[Mark Ratering]

When i use a username and password that does not have root privilages
in the windows that pops up after i try to join the domain on the
windows box i get the "Access is denied" error.


On Tue, 29 Mar 2005 15:29:22 -0800, Tom Skeren <[EMAIL PROTECTED]> wrote:
>  Mark Ratering wrote: 
>  I already did that. When i type in a user that does not have root
> permissions it says "Access is denied" I don't know what that means.  What
> do you mean by:  
>  When i type in a user that does not have root Where is this done?  By what
> user?  Please be specific as to what you are doing.
> 
>  
>  On Tue, 29 Mar 2005 14:47:50 -0800, Tom Skeren <[EMAIL PROTECTED]> wrote: 
>  Mark Ratering wrote: I tried using root and i get the error "The username
> could not be found" As root type smbpasswd -a root On Tue, 29 Mar 2005
> 16:31:19 -0600, Paul Gienger <[EMAIL PROTECTED]> wrote: problem! I
> am using the 'using samba' book from o'reilly and it says that the parameter
> "domain admin group" is obsoleted in samba 3.0 I A good way to do that would
> be creating a unix group that you want to be mapped to Domain Admins, map it
> and assign it the appropriate SID (you can look into the source for the
> smbldap-tools to get it in plain text). Then you simply add users to it. am
> using 3.0 and i cant add computers to the domain. Either use root (properly
> added as a samba user) or another user with uid=0, or use the privilege
> delegation tools in recent versions. I believe the version that started with
> them was 3.0.9. The documentation at samba.org (the howto and by example)
> should be your guide as they are updated for the current version. On Tue, 29
> Mar 2005 12:35:56 -0800, Mark Ratering <[EMAIL PROTECTED]> wrote: Hey
> guys, I configured Samba do be the domain controller for my network and to
> share folders. the folder sharing works great. The problem is that the
> domain function does not work at all. I cannot join the domain >from any
> workstation. It just says that the controller cannot be contacted. I ran an
> Ethereal sniff on the packets and the computer that i want to be PDC is
> sending ICMP Destination unreachable packets in response to the NBNS Name
> Query. Here is the packet that the workstation is sending to the server.
>  00 11 11 ba 82 1a 00 0a e6 d5 fa b4 08 00 45 00  ..E. 0010
> 00 4e 01 fb 00 00 80 11 b4 53 c0 a8 01 9e c0 a8 .N.. .S.. 0020 01 62
> 00 89 00 89 00 3a 81 4e 80 63 01 00 00 01 .b.: .N.c 0030 00 00 00 00
> 00 00 20 46 46 46 44 45 43 45 4a 45 .. F FFDECEJE 0040 4f 45 48 45 50 43
> 41 43 41 43 41 43 41 43 41 43 OEHEPCAC ACACACAC 0050 41 43 41 43 41 42 4d 00
> 00 20 00 01 ACACABM. . .. The config file that i am using (not including
> shares that have nothing to do with the domain controller). I do not want
> roaming profiles. #NetBIOS settings netbios name = FILESERVER workgroup =
> USBINGO server string = File Server log file = /var/log/samba/log.%m max log
> size = 50 time server = yes hide dot files = yes log level = 1 #Security
> settings security = user domain logons = yes encrypt passwords = yes #Turn
> on the WINS server wins support = yes #Make sure that Samba is the master
> browser and domain master browser domain master = yes local master = yes
> preferred master = yes os level = 65 add user script = /usr/sbin/useradd -d
> /dev/null -g 100 -s /bin/false -M %u [netlogon] path = /files/netlogon
> writable = no browsable = no Thanks, -Mark -- Paul Gienger Office:
> 701-281-1884 Applied Engineering Inc. Systems Architect Fax: 701-281-1322
> URL: www.ae-solutions.com mailto: [EMAIL PROTECTED] 
>  


-- 
Mark Ratering
A+, CCNP
248-437-1938
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] XP Pro and windows 98 clients on single samba 2.2 domain

[Kevin Bailey]

hi,

been running samba 2.2.3 (debian stable) and using it with windows 98
clients no problem.  domain logins, logon.bat and config.pol stuff all
working.

the customer now wants to add XP Pro PC's to the domain.

now, after following the instructions in 'Using Samba' I have set up an
XP PC to log on to a test server.  once the PC has been added to the
domain the users can log in no problem.

however, how should i run win98 and XP clients at the same time on the
main server?

should i create 2 logins for each user?  one for when they are using a
win98 machine and the other for XP.  how would i stop users logging in
with the wrong login?

could the users use a single login? the logon.bat file seems to work the
same on both systems.  the profile data goes into /home/samba-ntprof for
XP and /home/user1/.win_profile for win98 so is kept separate enough.

also - since we're using poledit and not group policies i can set the
machines up to pickup one config.pol file for win98 and a different one
for XP.

apparently there will only ever be win98 and XP Pro on the domain - and
win98 is being phased out.  there are a pair of servers (one acts as a
hot-swap backup) so maybe that gives some options.

any help/comments gratefully received.

-- 
Kevin Bailey

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Primard Domain Controller feature not working

[Mark Ratering]

I already did that.  When i type in a user that does not have root
permissions it says "Access is denied"


On Tue, 29 Mar 2005 14:47:50 -0800, Tom Skeren <[EMAIL PROTECTED]> wrote:
>  Mark Ratering wrote: 
>  I tried using root and i get the error "The username could not be found" As
> root type 
>  
>  smbpasswd -a root
> 
>  
>  On Tue, 29 Mar 2005 16:31:19 -0600, Paul Gienger
> <[EMAIL PROTECTED]> wrote: 
>  
>  problem! I am using the 'using samba' book from o'reilly and it says that
> the parameter "domain admin group" is obsoleted in samba 3.0 I A good way to
> do that would be creating a unix group that you want to be mapped to Domain
> Admins, map it and assign it the appropriate SID (you can look into the
> source for the smbldap-tools to get it in plain text). Then you simply add
> users to it. 
>  am using 3.0 and i cant add computers to the domain. Either use root
> (properly added as a samba user) or another user with uid=0, or use the
> privilege delegation tools in recent versions. I believe the version that
> started with them was 3.0.9. The documentation at samba.org (the howto and
> by example) should be your guide as they are updated for the current
> version. 
>  On Tue, 29 Mar 2005 12:35:56 -0800, Mark Ratering <[EMAIL PROTECTED]>
> wrote: 
>  Hey guys, I configured Samba do be the domain controller for my network and
> to share folders. the folder sharing works great. The problem is that the
> domain function does not work at all. I cannot join the domain >from any
> workstation. It just says that the controller cannot be 
>  contacted. I ran an Ethereal sniff on the packets and the computer that i
> want to be PDC is sending ICMP Destination unreachable packets in response
> to the NBNS Name Query. Here is the packet that the workstation is sending
> to the server.  00 11 11 ba 82 1a 00 0a e6 d5 fa b4 08 00 45 00 
> ..E. 0010 00 4e 01 fb 00 00 80 11 b4 53 c0 a8 01 9e c0 a8 .N..
> .S.. 0020 01 62 00 89 00 89 00 3a 81 4e 80 63 01 00 00 01 .b.:
> .N.c 0030 00 00 00 00 00 00 20 46 46 46 44 45 43 45 4a 45 .. F
> FFDECEJE 0040 4f 45 48 45 50 43 41 43 41 43 41 43 41 43 41 43 OEHEPCAC
> ACACACAC 0050 41 43 41 43 41 42 4d 00 00 20 00 01 ACACABM. . .. The config
> file that i am using (not including shares that have nothing to do with the
> domain controller). I do not want roaming profiles. #NetBIOS settings
> netbios name = FILESERVER workgroup = USBINGO server string = File Server
> log file = /var/log/samba/log.%m max log size = 50 time server = yes hide
> dot files = yes log level = 1 #Security settings security = user domain
> logons = yes encrypt passwords = yes #Turn on the WINS server wins support =
> yes #Make sure that Samba is the master browser and domain master browser
> domain master = yes local master = yes preferred master = yes os level = 65
> add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
> [netlogon] path = /files/netlogon writable = no browsable = no Thanks, -Mark
> -- Paul Gienger Office: 701-281-1884 Applied Engineering Inc. Systems
> Architect Fax: 701-281-1322 URL: www.ae-solutions.com mailto:
> [EMAIL PROTECTED] 
>  


-- 
Mark Ratering
A+, CCNP
248-437-1938
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Recycle error - empty file

[Karl Banasky]

I set up a recycle VFS for my install of SAMBA and it work great except for one 
thing.  I seem to get empty files created. It creates file.doc with 0 bytes.  
Anyone know why this is? I have serched for this but I find the search alittle 
hard to narrow down.  
Any help would be greatly appreciated. 
Thanks
Karl-

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Recycle error - empty file

[Karl Banasky]

I set up a recycle VFS for my install of SAMBA and it work great except for one 
thing.  I seem to get empty files created. It creates file.doc with 0 bytes.  
Anyone know why this is? I have serched for this but I find the search alittle 
hard to narrow down.  
Any help would be greatly appreciated. 
Thanks
Karl-

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] smbd[616]: Can't become connected user! Error

[bhazeldine]

Greetings,

I am hoping that someone can shed some light on this error that is
constantly filling up my syslog.

This is the error:

ar 29 17:39:24 spev smbd[616]:   Can't become connected user!
Mar 29 17:39:24 spev smbd[616]: [2005/03/29 17:39:24, 0]
smbd/service.c:make_connection_snum(570)

The error constantly appears in the syslog as people access the server. 
Access to it works completely fine, but it would be nice to know why this
error is always coming up.

OS: Slackware 10.0
Samba version: 3.0.10

Here is my smb.conf file:
[global]
workgroup = SERVERS
server string = Samba Fileserver
valid users = @techstaff, @childstaff
hosts allow = 127.0.0.1, 192.168.0.0/24
hosts deny = 0.0.0.0/0
security = user
log level = 2
log file = /var/log/samba.log
max log size = 50
debug timestamp = yes
[techcenter]
comment = Techcenter files
path = /fileserver/techcenter
read only = No
force user = techshare
force group = techstaff

[gateplex]
comment = Gateplex
path = /fileserver/gateplex
read only = No
force user = techshare
force group = techstaff

[childrens]
comment = Childrens files
path = /fileserver/childrens
read only = No
force user = childshare
force group = childstaff

Any insight will be greatly appreciated.

-Bob-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Primard Domain Controller feature not working

[Tom Skeren]

Mark Ratering wrote:
I tried using root and i get the error "The username could not be found"
 

As root type
smbpasswd -a root
On Tue, 29 Mar 2005 16:31:19 -0600, Paul Gienger
<[EMAIL PROTECTED]> wrote:
 

problem!  I am using the 'using samba' book from o'reilly and it says
that the parameter "domain admin group" is obsoleted in samba 3.0  I
 

A good way to do that would be creating a unix group that you want to be
mapped to Domain Admins, map it and assign it the appropriate SID (you
can look into the source for the smbldap-tools to get it in plain
text).  Then you simply add users to it.
   

am using 3.0 and i cant add computers to the domain.
 

Either use root (properly added as a samba user) or another user with
uid=0, or use the privilege delegation tools in recent versions.  I
believe the version that started with them was 3.0.9.   The
documentation at samba.org (the howto and by example) should be your
guide as they are updated for the current version.
   

On Tue, 29 Mar 2005 12:35:56 -0800, Mark Ratering
<[EMAIL PROTECTED]> wrote:
 

Hey guys,
I configured Samba do be the domain controller for my network and to
share folders.  the folder sharing works great.  The problem is that
the domain function does not work at all.  I cannot join the domain
   

from any workstation.  It just says that the controller cannot be
 

contacted.  I ran an Ethereal sniff on the packets and the computer
that i want to be PDC is sending ICMP Destination unreachable packets
in response to the NBNS Name Query.  Here is the packet that the
workstation is sending to the server.
  00 11 11 ba 82 1a 00 0a  e6 d5 fa b4 08 00 45 00    ..E.
0010  00 4e 01 fb 00 00 80 11  b4 53 c0 a8 01 9e c0 a8   .N.. .S..
0020  01 62 00 89 00 89 00 3a  81 4e 80 63 01 00 00 01   .b.: .N.c
0030  00 00 00 00 00 00 20 46  46 46 44 45 43 45 4a 45   .. F FFDECEJE
0040  4f 45 48 45 50 43 41 43  41 43 41 43 41 43 41 43   OEHEPCAC ACACACAC
0050  41 43 41 43 41 42 4d 00  00 20 00 01   ACACABM. . ..
The config file that i am using (not including shares that have
nothing to do with the domain controller).  I do not want roaming
profiles.
  #NetBIOS settings
  netbios name=   FILESERVER
  workgroup   =   USBINGO
  server string   =   File Server
  log file=   /var/log/samba/log.%m
  max log size=   50
  time server =   yes
  hide dot files  =   yes
  log level   =   1
  #Security settings
  security=   user
  domain logons   =   yes
  encrypt passwords   =   yes
  #Turn on the WINS server
  wins support=   yes
  #Make sure that Samba is the master browser and domain master browser
  domain master   =   yes
  local master=   yes
  preferred master =   yes
  os level=   65
  add user script =   /usr/sbin/useradd -d /dev/null
-g 100 -s /bin/false -M %u
[netlogon]
  path=   /files/netlogon
  writable=   no
  browsable   =   no
Thanks,
-Mark

   


 

--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]
   


 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Primard Domain Controller feature not working

[Mark Ratering]

I tried using root and i get the error "The username could not be found"


On Tue, 29 Mar 2005 16:31:19 -0600, Paul Gienger
<[EMAIL PROTECTED]> wrote:
> 
> >problem!  I am using the 'using samba' book from o'reilly and it says
> >that the parameter "domain admin group" is obsoleted in samba 3.0  I
> >
> >
> A good way to do that would be creating a unix group that you want to be
> mapped to Domain Admins, map it and assign it the appropriate SID (you
> can look into the source for the smbldap-tools to get it in plain
> text).  Then you simply add users to it.
> 
> >am using 3.0 and i cant add computers to the domain.
> >
> Either use root (properly added as a samba user) or another user with
> uid=0, or use the privilege delegation tools in recent versions.  I
> believe the version that started with them was 3.0.9.   The
> documentation at samba.org (the howto and by example) should be your
> guide as they are updated for the current version.
> 
> 
> >
> >On Tue, 29 Mar 2005 12:35:56 -0800, Mark Ratering
> ><[EMAIL PROTECTED]> wrote:
> >
> >
> >>Hey guys,
> >>
> >>I configured Samba do be the domain controller for my network and to
> >>share folders.  the folder sharing works great.  The problem is that
> >>the domain function does not work at all.  I cannot join the domain
> >>from any workstation.  It just says that the controller cannot be
> >>contacted.  I ran an Ethereal sniff on the packets and the computer
> >>that i want to be PDC is sending ICMP Destination unreachable packets
> >>in response to the NBNS Name Query.  Here is the packet that the
> >>workstation is sending to the server.
> >>
> >>  00 11 11 ba 82 1a 00 0a  e6 d5 fa b4 08 00 45 00    ..E.
> >>0010  00 4e 01 fb 00 00 80 11  b4 53 c0 a8 01 9e c0 a8   .N.. .S..
> >>0020  01 62 00 89 00 89 00 3a  81 4e 80 63 01 00 00 01   .b.: .N.c
> >>0030  00 00 00 00 00 00 20 46  46 46 44 45 43 45 4a 45   .. F FFDECEJE
> >>0040  4f 45 48 45 50 43 41 43  41 43 41 43 41 43 41 43   OEHEPCAC ACACACAC
> >>0050  41 43 41 43 41 42 4d 00  00 20 00 01   ACACABM. . ..
> >>
> >>The config file that i am using (not including shares that have
> >>nothing to do with the domain controller).  I do not want roaming
> >>profiles.
> >>
> >>#NetBIOS settings
> >>netbios name=   FILESERVER
> >>workgroup   =   USBINGO
> >>server string   =   File Server
> >>
> >>log file=   /var/log/samba/log.%m
> >>max log size=   50
> >>time server =   yes
> >>hide dot files  =   yes
> >>log level   =   1
> >>
> >>#Security settings
> >>security=   user
> >>domain logons   =   yes
> >>encrypt passwords   =   yes
> >>
> >>#Turn on the WINS server
> >>wins support=   yes
> >>
> >>#Make sure that Samba is the master browser and domain master 
> >> browser
> >>domain master   =   yes
> >>local master=   yes
> >>preferred master =   yes
> >>os level=   65
> >>
> >>add user script =   /usr/sbin/useradd -d /dev/null
> >>-g 100 -s /bin/false -M %u
> >>
> >>[netlogon]
> >>path=   /files/netlogon
> >>writable=   no
> >>browsable   =   no
> >>
> >>Thanks,
> >>-Mark
> >>
> >>
> >>
> >
> >
> >
> >
> 
> --
> Paul GiengerOffice: 701-281-1884
> Applied Engineering Inc.
> Systems Architect   Fax:701-281-1322
> URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]
> 
> 


-- 
Mark Ratering
A+, CCNP
248-437-1938
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Primard Domain Controller feature not working

[Paul Gienger]

problem!  I am using the 'using samba' book from o'reilly and it says
that the parameter "domain admin group" is obsoleted in samba 3.0  I
 

A good way to do that would be creating a unix group that you want to be 
mapped to Domain Admins, map it and assign it the appropriate SID (you 
can look into the source for the smbldap-tools to get it in plain 
text).  Then you simply add users to it.

am using 3.0 and i cant add computers to the domain.  

Either use root (properly added as a samba user) or another user with 
uid=0, or use the privilege delegation tools in recent versions.  I 
believe the version that started with them was 3.0.9.   The 
documentation at samba.org (the howto and by example) should be your 
guide as they are updated for the current version.


On Tue, 29 Mar 2005 12:35:56 -0800, Mark Ratering
<[EMAIL PROTECTED]> wrote:
 

Hey guys,
I configured Samba do be the domain controller for my network and to
share folders.  the folder sharing works great.  The problem is that
the domain function does not work at all.  I cannot join the domain
from any workstation.  It just says that the controller cannot be
contacted.  I ran an Ethereal sniff on the packets and the computer
that i want to be PDC is sending ICMP Destination unreachable packets
in response to the NBNS Name Query.  Here is the packet that the
workstation is sending to the server.
  00 11 11 ba 82 1a 00 0a  e6 d5 fa b4 08 00 45 00    ..E.
0010  00 4e 01 fb 00 00 80 11  b4 53 c0 a8 01 9e c0 a8   .N.. .S..
0020  01 62 00 89 00 89 00 3a  81 4e 80 63 01 00 00 01   .b.: .N.c
0030  00 00 00 00 00 00 20 46  46 46 44 45 43 45 4a 45   .. F FFDECEJE
0040  4f 45 48 45 50 43 41 43  41 43 41 43 41 43 41 43   OEHEPCAC ACACACAC
0050  41 43 41 43 41 42 4d 00  00 20 00 01   ACACABM. . ..
The config file that i am using (not including shares that have
nothing to do with the domain controller).  I do not want roaming
profiles.
   #NetBIOS settings
   netbios name=   FILESERVER
   workgroup   =   USBINGO
   server string   =   File Server
   log file=   /var/log/samba/log.%m
   max log size=   50
   time server =   yes
   hide dot files  =   yes
   log level   =   1
   #Security settings
   security=   user
   domain logons   =   yes
   encrypt passwords   =   yes
   #Turn on the WINS server
   wins support=   yes
   #Make sure that Samba is the master browser and domain master browser
   domain master   =   yes
   local master=   yes
   preferred master =   yes
   os level=   65
   add user script =   /usr/sbin/useradd -d /dev/null
-g 100 -s /bin/false -M %u
[netlogon]
   path=   /files/netlogon
   writable=   no
   browsable   =   no
Thanks,
-Mark
   


 

--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Primard Domain Controller feature not working

[Mark Ratering]

Well, i fixed it.  nmbd wasn't working.  now i am having another
problem!  I am using the 'using samba' book from o'reilly and it says
that the parameter "domain admin group" is obsoleted in samba 3.0  I
am using 3.0 and i cant add computers to the domain.  What is the
replacement/workaround for it?


On Tue, 29 Mar 2005 12:35:56 -0800, Mark Ratering
<[EMAIL PROTECTED]> wrote:
> Hey guys,
> 
> I configured Samba do be the domain controller for my network and to
> share folders.  the folder sharing works great.  The problem is that
> the domain function does not work at all.  I cannot join the domain
> from any workstation.  It just says that the controller cannot be
> contacted.  I ran an Ethereal sniff on the packets and the computer
> that i want to be PDC is sending ICMP Destination unreachable packets
> in response to the NBNS Name Query.  Here is the packet that the
> workstation is sending to the server.
> 
>   00 11 11 ba 82 1a 00 0a  e6 d5 fa b4 08 00 45 00    ..E.
> 0010  00 4e 01 fb 00 00 80 11  b4 53 c0 a8 01 9e c0 a8   .N.. .S..
> 0020  01 62 00 89 00 89 00 3a  81 4e 80 63 01 00 00 01   .b.: .N.c
> 0030  00 00 00 00 00 00 20 46  46 46 44 45 43 45 4a 45   .. F FFDECEJE
> 0040  4f 45 48 45 50 43 41 43  41 43 41 43 41 43 41 43   OEHEPCAC ACACACAC
> 0050  41 43 41 43 41 42 4d 00  00 20 00 01   ACACABM. . ..
> 
> The config file that i am using (not including shares that have
> nothing to do with the domain controller).  I do not want roaming
> profiles.
> 
> #NetBIOS settings
> netbios name=   FILESERVER
> workgroup   =   USBINGO
> server string   =   File Server
> 
> log file=   /var/log/samba/log.%m
> max log size=   50
> time server =   yes
> hide dot files  =   yes
> log level   =   1
> 
> #Security settings
> security=   user
> domain logons   =   yes
> encrypt passwords   =   yes
> 
> #Turn on the WINS server
> wins support=   yes
> 
> #Make sure that Samba is the master browser and domain master browser
> domain master   =   yes
> local master=   yes
> preferred master =   yes
> os level=   65
> 
> add user script =   /usr/sbin/useradd -d /dev/null
> -g 100 -s /bin/false -M %u
> 
> [netlogon]
> path=   /files/netlogon
> writable=   no
> browsable   =   no
> 
> Thanks,
> -Mark
> 


-- 
Mark Ratering
A+, CCNP
248-437-1938
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: No vscan HOWTOs? should called how exclude pst files vscan clamav

[mourik jan c heupink]

pdc:/home/danielop/outlook.pst # file -i ./Outlook.pst
./Outlook.pst: application/octet-stream
- -
   


So, the MIME-type is actually "application/octet-stream", which is
a generic type for anything binary and not recognized by file otherwise.
Probably someone should try to add a real "pattern" to detect Outlook
PST correctly (the idea has mentioned below already by someone else).
 

probably someone who knows how /etc/magic works could do something with 
the information on this page:
http://filext.com/detaillist.php?extdetail=PST

There it says:
Identifying characters are:
Hex: 21 42 44 4E
ASCII: !BDN
Anyone knows..?
Mourik Jan
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Advice on a samba setup im considering

[Tony Earnshaw]

Jason:


[...]

> I'm not going to setup this up as a PDC at this time. That would be
> something I may revisit in about 6-12 months as well.

Do this first, after thoroughly learning OpenLDAP from first principles.
I.e., start thinking "if any utility/service doesn't work without the
latest, stable LDAP, including Samba, it's useless". Samba does, but so
does anything else that dare to call itself a Unix/Linux service: smtp,
IMAP, shell and gdbm logins, NF, desktop utilities, etc. All give you a
single login ID and password.

--Tonni

--
mail: [EMAIL PROTECTED]
http://www.billy.demon.nl

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Advice on a samba setup im considering

[jonlists]

You need to take a look at the Samba 3 By Example guide provided on the 
www.samba.org web site. It'll step you through much of this. 

Putting user accounts on the system? If it's only going to be you, you can 
use the command line tools provided with the operating system and base 
Samba. If someone else - maybe consider something like easier to use like 
webmin. 

Jon Johnston
Creative Business Solutions
IBM, Microsoft, Novell/Suse, Sophos Consultants
http://www.cbsol.com
blog:http://bingo.cbsol.com

[EMAIL PROTECTED] wrote on 03/29/2005 
02:11:52 PM:

> Hello!
> 
> Was hoping to get some suggestion and ideas for a samba server I will be 

> implementing here in the next couple of weeks. I have gone through the 
> websites documentation, but I was hoping some of the veterans of samba 
could 
> maybe lend some ideas, advice and recommendations. I will try to be as 
> detailed as possible.
> 
> The samba server would server roughly 50-60 people. We have 3, maybe 4 
> departments that I would need to setup shares for (obviously, not all 
> departments would need access to all the shares.) The other thing im 
> considering is maybe trying to design this with the idea in mind of 
future 
> expansion of the company (6-12 months down the road possibly)
> 
> I've already installed the OS and Samba and I am in the process of 
> configuring 
> samba.
> 
> What would be the recommended method for putting user accounts on the 
system? 
> I know I have a few options, but is there one I should consider morethan 
the 
> other?
> 
> All the machines on the network are windows desktop. I would simply 
> just map a 
> drive to the shares needed for each user.
> 
> I'm not going to setup this up as a PDC at this time. That would be 
something 
> I may revisit in about 6-12 months as well.
> 
> I have a lot to consider. Just hoping to get some ideas here.
> 
> Cheers,
> 
> Jason
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] upgrading existing tdbsam to ldap

[jonlists]

moving a system to SLES9 w/OpenLDAP. Existing system used tdbsam. Set up 
new server, configured w/openldap and LAM. Things appear to be working 
fine with the new config, but there are problems in migrating user and 
machine accounts. The new domain, nor users are recognized in LAM. The 
machine accounts are listed as existing, but hostnames are not showing. 

I suppose that this is due to the fact that the migration using the 

pdbedit -v -i tdbsam -e ldapsam 

did not properly assign machines to the proper OU, and users to the proper 
default groups, etc. The pdbedit command was done after the ldap db was 
populated with the IDEALX smbldap-populate tool. 

I had built the new server, then simply moved the /etc/samba and 
/var/lib/samba/*.tdb files into place before doing the pdbedit. Is there a 
method of moving the existing accounts and machine information into the 
proper groups, or do I need to start over and do this in a different 
order? 

Jon Johnston
Creative Business Solutions
IBM, Microsoft, Novell/Suse, Sophos Consultants
http://www.cbsol.com
blog:http://bingo.cbsol.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: No vscan HOWTOs? should called how exclude pst files vscan clamav

[Rainer Link]

On Tue, Mar 29, 2005 at 11:28:13PM +0200, Robert Schetterer wrote:

> Hi @ll,hi Andrew,Rainer

You'd probably shoulnd't bug any Samba people with samba-vscan
related configuration issues. They are busy enough :) 

> - --
> pdc:/home/danielop/outlook.pst # file -i ./Outlook.pst
> ./Outlook.pst: application/octet-stream
> - -


So, the MIME-type is actually "application/octet-stream", which is
a generic type for anything binary and not recognized by file otherwise.
Probably someone should try to add a real "pattern" to detect Outlook
PST correctly (the idea has mentioned below already by someone else).

> so i included this to  vscan-clamav.conf
> 
> - ---
> ; exclude files from being scanned based on the MIME-type! Semi-colon
> ; seperated list (default: empty list). Use this with care!
> exclude file types = pst
> - 


pst ist the file extension, not the MIME-type! Keep in mind you should
never trust any file extension if you want to achieve virus protection
(esp. to block files on SMTP layer). I won't repeat the reasoning
behind, just do a google group search for "nick fitzgerald file
extension" (a good hit is http://tinyurl.com/4nkv9).

Anyway, samba-vscan 0.3.7 will most likely ship with a feature to
exclude files from scanning based on a regexp. The code is basically
already in CVS, based on a contribution from a samba-vscan user.

> Munich / Bavaria / Germany
Hum, that's not sooo far away :)

HTH

best regards
Rainer Link


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] 3.0.13 why is "lpq command=%p" showing with testparm -v ?

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Urs Rau wrote:
| testparm -s -v  | grep lp
| returns
|
| lpq cache time = 30
| lpq command = %p
| lprm command =
| lppause command =
| lpresume command =
|
| I understand that if I do testparm -v this also
| shows me the built-in  defaults. Why does it only
| show %p for the lpq command and nothing else
| for the other lp commands?
See:
"printer name" is not honored in printing.c
https://bugzilla.samba.org/bug/2333

cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
"I never saved anything for the swim back." Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCScqNIR7qMdg1EfYRArGIAKCW3zVRUHFZ3pLfuIdTeQjKFL2pvwCg7bzn
7EXTpM/CsXmG3FYbjzhodnY=
=bQao
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: No vscan HOWTOs? should called how exclude pst files vscan clamav

[Robert Schetterer]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi @ll,hi Andrew,Rainer
sorry that i renamed the subject, but my intention is to make this part
give more notice on the list.
I can confirm the scan problem with clamav vfs and bigger pst file.
As i just have this problem too, i tried google about faqs about this.
I studied the last readme of the vfs and there is just an example
that i should use file -i to find out what mime type my system ( suse
9.2 ) means to a pst file
- --
pdc:/home/danielop/outlook.pst # file -i ./Outlook.pst
./Outlook.pst: application/octet-stream
- -
so i included this to  vscan-clamav.conf
- ---
; exclude files from being scanned based on the MIME-type! Semi-colon
; seperated list (default: empty list). Use this with care!
exclude file types = pst
- 
i havent my win test client up, and no big pst around to do some tests
but i am nearly sure this entry is >>not<< right ( or could it be that
easy???), but future tests will show
so i will cc the mantainer of vscan
to give a more detailed example to us how syntax to  exclude is done
or perhaps somebody on the list knows more
Anyway my thx goes to Rainer for doing such a nice job on vscan
cause pst file a comlicated filetypes by their nature.
Best Regards
Robert
Jim C. schrieb:
| | Does anyone have ANY idea what to put in /etc/magic to identify
| microsoft outlook pst files?
| | scanning larger pst files (100 mb or so) currently raises my clamd cpu
| processor usage to 90% or higher, and 'locks' ms outlook on the
| workstation during the scan, so I'd rather not scan them and have mcafee
| on the workstation take care of that.
| | Insight would really be appreciated.
|
| Not sure why this is required. Can't you just use "file [filename]" to
| find out what mime type /etc/magic currently thinks it is? Or is it the
| case that the mime type actually isn't in there?
|
| Actually, I use ClamWin on the 'doze side and I was hoping that someday
| the developers would put in a tool for discovering if the client host
| was running it.  I mean if it has local protection, why burn up the
| servers CPU cycles, right?  Distributed approach for a distributed net.
|
| Jim C.
- --
Mit freundlichen Gruessen
Best Regards
Robert Schetterer
robert_at_schetterer.org
Munich / Bavaria / Germany
https://www.schetterer.org
\**
\* gnupgp
\* public key:
\* https://www.schetterer.org/public.key
\**
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCScht+Jw+56iSjEkRAlyyAJ9tNhMzZmVXMaQ5uMYNJd9suUEs5QCfYXwp
wGOD4YWpnWYO8Yon79Bmuvk=
=cB+L
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] printers detect

[Greg Folkert]

On Tue, 2005-03-29 at 13:43 +0200, Fabio Marcone wrote:
> Hi!
> I'm designing a web interface to manage samba server (users, shares, 
> printers) 
> and I would known how i can detect printers available in samba. In that way, 
> admin can set rights and others params of a selected printer.

Uh, Fabio have you looked at SWAT? SWAT == Samba Web Administration Tool

Or Webmin with SWAT integration?

I'd hate to see you make all this fuss for something that is already
done and updated every release of Samba as well.
-- 
greg, [EMAIL PROTECTED]

The technology that is
Stronger, better, faster: Linux


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: domain admins group in samba 3.0.7 question

[Tony Earnshaw]

Jim C.:

> | Why in gods name would you do that?  The net groupmap add command is
> | used to configure the windows group <=> unixgroup mapping, much like the
>  | username map works.  You add users to the ntgroup by adding them to
> the | aforementioned unixgroup.
>
>
> Well, that's what I get for indiscriminate cut and paste. Right?;-)
>
>
> I'll clarify.  I meant the net command on the windows side. It should
> accomplish more or less the same thing when applied to the local machine
> via a logon script right?  The parameters would have to be different, of
> course. My bad. Sorry.

The net command on Windows workstations often doesn't have the same
possibilities as it does on a Samba PDC. The command should be run on a
Samba PDC, not the Windows workstation. It is then "once and for all".

> If there is a better tool, ("net use" perhaps?) I am interested in
> knowing. I've no idea how to resolve the password issue (I assume there is
> one) for example.

Following the Samba "HOWTOs" from A to Z is the best alternative. Once
you've learned every possibility by heart (take you a month or six ;)
you're good to go.

--Tonni

-- 
mail: [EMAIL PROTECTED]
http://www.billy.demon.nl

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: domain admins group in samba 3.0.7 question

[Tony Earnshaw]

Jim C.:

> ~ > What makes you think that?  The command should be
> | net groupmap add unixgroup="" ntgroup=" | else>"
> | where the unixgroup parameter is the name of the existing unix group to
> | use and ntgroup is the new name that you want the group to display as in
>  | windows.
>
>
> I've thought of doing this also but the problem that I have is that if I
> put this:
>
> net groupmap add unixgroup="" ntgroup=" else>"
>
> into a logon script won't it add to the group each time the user logs in?
> How would duplicate entries be handled?  Wouldn't I see an entry
> for each login or would duplicate entries be dropped?

'net groupmap add' works for Samba 3 (at least from 3.0.7 on, my
experience up to 3.0.11). It works once and for all for all workstations,
even new ones that you add to the domain - you don't have to keep on doing
it.

This is where the ldapsam backend and using GQ as an LDAP GUI is such a
help; you can see at a glance exactly what you've done and even use GQ and
the Samba tools to start all over again if you've made a mistake.

Your problem is, that you can't see the results of what you're doing and
why it isn't working.

--Tonni

--
mail: [EMAIL PROTECTED]
http://www.billy.demon.nl


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: No vscan HOWTOs?

[Jim C.]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
| Does anyone have ANY idea what to put in /etc/magic to identify
microsoft outlook pst files?
| scanning larger pst files (100 mb or so) currently raises my clamd cpu
processor usage to 90% or higher, and 'locks' ms outlook on the
workstation during the scan, so I'd rather not scan them and have mcafee
on the workstation take care of that.
| Insight would really be appreciated.
Not sure why this is required. Can't you just use "file [filename]" to
find out what mime type /etc/magic currently thinks it is? Or is it the
case that the mime type actually isn't in there?
Actually, I use ClamWin on the 'doze side and I was hoping that someday
the developers would put in a tool for discovering if the client host
was running it.  I mean if it has local protection, why burn up the
servers CPU cycles, right?  Distributed approach for a distributed net.
Jim C.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCSb1H57L0B7uXm9oRArtlAJ4znZ47pFfoC6KpKas4GL+uBxTb+ACdFhFw
l5jrrRQKv0d6qTPVYvmK92M=
=9fIr
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Primard Domain Controller feature not working

[Mark Ratering]

Hey guys,

I configured Samba do be the domain controller for my network and to
share folders.  the folder sharing works great.  The problem is that
the domain function does not work at all.  I cannot join the domain
from any workstation.  It just says that the controller cannot be
contacted.  I ran an Ethereal sniff on the packets and the computer
that i want to be PDC is sending ICMP Destination unreachable packets
in response to the NBNS Name Query.  Here is the packet that the
workstation is sending to the server.

  00 11 11 ba 82 1a 00 0a  e6 d5 fa b4 08 00 45 00    ..E.
0010  00 4e 01 fb 00 00 80 11  b4 53 c0 a8 01 9e c0 a8   .N.. .S..
0020  01 62 00 89 00 89 00 3a  81 4e 80 63 01 00 00 01   .b.: .N.c
0030  00 00 00 00 00 00 20 46  46 46 44 45 43 45 4a 45   .. F FFDECEJE
0040  4f 45 48 45 50 43 41 43  41 43 41 43 41 43 41 43   OEHEPCAC ACACACAC
0050  41 43 41 43 41 42 4d 00  00 20 00 01   ACACABM. . ..

The config file that i am using (not including shares that have
nothing to do with the domain controller).  I do not want roaming
profiles.

#NetBIOS settings
netbios name=   FILESERVER
workgroup   =   USBINGO
server string   =   File Server

log file=   /var/log/samba/log.%m
max log size=   50
time server =   yes
hide dot files  =   yes
log level   =   1

#Security settings
security=   user
domain logons   =   yes
encrypt passwords   =   yes

#Turn on the WINS server
wins support=   yes

#Make sure that Samba is the master browser and domain master browser
domain master   =   yes
local master=   yes
preferred master =   yes
os level=   65

add user script =   /usr/sbin/useradd -d /dev/null
-g 100 -s /bin/false -M %u

[netlogon]
path=   /files/netlogon
writable=   no
browsable   =   no

Thanks,
-Mark
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Errors

[Christopher]

I've tried to find a solution on my own to this problem, but have yet to 
find anything useful.  I have a very simple setup where there is only 
one samba server which is acting as a PDC.  I'm getting quite a few 
errors in smbd.log.  Any ideas would be greatly appreciated.

[2005/03/29 15:28:22, 0] lib/util_sock.c:get_peer_addr(1000)
 getpeername failed. Error was Transport endpoint is not connected
[2005/03/29 15:28:22, 0] lib/access.c:check_access(328)
[2005/03/29 15:28:22, 0] lib/util_sock.c:get_peer_addr(1000)
 getpeername failed. Error was Transport endpoint is not connected
 Denied connection from  (0.0.0.0)
[2005/03/29 15:28:22, 1] smbd/service.c:make_connection_snum(648)
 everest (192.168.0.90) connect to service everest initially as user 
icodeeverest (uid=567, gid=100) (pid 8338)
 write_socket: Error writing 5 bytes to socket 22: ERRNO = Connection 
reset by peer
[2005/03/29 15:28:22, 0] lib/util_sock.c:send_smb(647)
 Error writing 5 bytes to client. -1. (Connection reset by peer)

Here's my smb.conf global section
[global]
   workgroup = B2
   netbios name = B2PDC
   time server = Yes
   add user script = /usr/sbin/useradd -m %u
   delete user script = /usr/sbin/userdel -r %u
   add group script = /usr/sbin/groupadd %g
   delete group script = /usr/sbin/groupdel %g
   add user to group script = /usr/sbin/usermod -G %g %u
   add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u
   logon script = logon.bat
   logon path = \\%L\profiles\%u\%m
   logon drive = H:
   logon home = \\%L\%u\.win_profile\%m
   domain logons = Yes
   os level = 70
   local master = yes
   preferred master = Yes
   domain master = Yes
   wins support = Yes
   interfaces = 192.168.0.70
   hosts allow = 192.168. 127.0.0.1
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] 3.0.13 why is "lpq command=%p" showing with testparm -v ?

[Urs Rau]

the docs say that all lp commands are ignored if one has
printing =cups
printcap name=cups
in the global section and cups support is compiled in.
ldd `which smbd` says I do have cups compiled in and my global section 
does have the two cups lines.

But on 3.0.13 I get
testparm -s | grep lp
returns no output
BUT
testparm -s -v  | grep lp
returns
lpq cache time = 30
lpq command = %p
lprm command =
lppause command =
lpresume command =
I understand that if I do testparm -v this also shows me the built-in 
defaults. Why does it only show %p for the lpq command and nothing else 
for the other lp commands?

Regards,
Urs Rau
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Advice on a samba setup im considering

[Jason]

Hello!

Was hoping to get some suggestion and ideas for a samba server I will be 
implementing here in the next couple of weeks. I have gone through the 
websites documentation, but I was hoping some of the veterans of samba could 
maybe lend some ideas, advice and recommendations. I will try to be as 
detailed as possible.

The samba server would server roughly 50-60 people. We have 3, maybe 4 
departments that I would need to setup shares for (obviously, not all 
departments would need access to all the shares.) The other thing im 
considering is maybe trying to design this with the idea in mind of future 
expansion of the company (6-12 months down the road possibly)

I've already installed the OS and Samba and I am in the process of configuring 
samba.

What would be the recommended method for putting user accounts on the system? 
I know I have a few options, but is there one I should consider more than the 
other?

All the machines on the network are windows desktop. I would simply just map a 
drive to the shares needed for each user.

I'm not going to setup this up as a PDC at this time. That would be something 
I may revisit in about 6-12 months as well.

I have a lot to consider. Just hoping to get some ideas here.

Cheers,

Jason
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Set Samba share permissions...

[Hernani Donato]

Hi!

I'm relatively new in the Linux world.

I use Mandrake 9,1 and I have the following doubt in relation to the
Samba: I have the following sharings:

[home]
read only = yes
available = no
browseable = no

[diretoria]
path = /home/diretoria
browseable = yes
read only = no

[pessoal]
path = /home/pessoal
browseable = yes
read only = no

[vendas]
path = /home/vendas
browseable = yes
read only = no

The question is: how to make so that only the using direction has
access to all the sharings and excessively only to its proper ones?

In the global section of my smb.conf file, I have "guest account = nobody"

ThanX
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Problem with pdf printing

[Urs Rau]

Vincent,
Vincent Mikalinis wrote:
Hello, 
I'm hoping someone can help me.  I have several pdf printers set up and
when I print to them samba becomes unstable and several errors are
dumped to the log.  These pdf printers were working when I was using
version 3.0.6.  When I went to a newer version of samba the queue would
not clear on the windows side and no errors were logged.  Yesterday I
upgraded to version 3.0.13-1 and the errors started and the queue still
will not clear.
I have a very similar problem with my pdf printers. I have the following 
in my [global] section.
printcap name = cups
printing = cups
cups options = "raw"

and my pdf printer share now has
[pdf]
comment=PostScript to PDF Converter
printing=bsd
public=no
guest ok=no
create mode=0600
path=/var/tmp
printable=yes
print command=. /etc/sysconfig/rc.sysadm; \
 ulimit -c 0; \
 ulimit -S -d $PDF_MEM_LIMIT; \
 ps2pdf %s "%H/%J.pdf"; \
 chmod 640 "%H/%J.pdf"; \
 rm -f %s
lppause command=
lpresume command=
lpq command=lpq -P'%p'
lprm command=lprm -P'%p' %j
queuepause command=
queueresume command=
and it now shows the printer as online and the printjobs show up and get 
removed just as they should.

All it took to change the printer status displayed on the windows xp pro 
workstation from offline to online, was to add a "real" lpq command 
line, (lpq -P'%p'). Now all looks fine from the workstations viewpoint. 
BUT on the server I now have repeated entries of cups telling samba that 
it does not know the printer 'pdf'. Win one, loose one. ;-)

level 3 error msg
lpq: Unknown destination "pdf"!
[2005/03/27 22:20:00, 3] printing/print_generic.c:print_run_command(62)
  Running the command `lpq -P'pdf'' gave 1
I start to wonder what "dammage" it would do to set lpq to
lpq command =/bin/true
for my pdf printer? ;-)
HTH
--
Urs Rau
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] apologies for duplicate posts - btw what's the real diff between gmane.network.samba.general and mailing.unix.samba?

[Urs Rau]

Sorry to those of you that have received duplicates of my messages over 
the easter weekend.

I had subscribed to the nntp server of my isp (pipex uk) and searched 
for "samba" it showed a few hits but "gmane.network.samba.general" 
showed as containing no posts but "mailing.unix.samba" showed a bit more 
than 20'000 so I subscribed to that and sent a slurr of messages with 
questions and followups to that newslist over the weekend, and my 
questions did show up in "mailing.unix.samba". But not having received a 
single answer by the end of the weekend I thought something was a little 
strange.

So I went to check the samba.org archives and found that my messages had 
not made it to the official mailing list nor to the email archives. 
That's when I started resending the relevant messages from the past few 
days but this time to "gmane.network.samba.general". So if some have 
seen my posts more than once, I am sorry, but at least I corrected my 
spelling in the second postings and did not resend the level 10 log of 
2.4MB. ;-)

What is the purpose or function of newsgroup "mailing.unix.samba"? And 
is it my ISPs fault that they only offer "mailing.unix.samba" for 
subscription and not "gmane.network.samba.general" and how do the two 
lists relate to each other? It would appear that at least some of the 
posts to "gmane.network.samba.general" do make it to 
"mailing.unix.samba" but no messages appear to travel the "other way".

--
Urs Rau
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problem with wbinfo

[Ricardo Maciel]

In adition, above are the messages that appears at the winbindd.log
(at the client), when this service is started:

#
[2005/03/29 16:30:21, 1] nsswitch/winbindd.c:main(832)
  winbindd version 3.0.0-14.3E started.
  Copyright The Samba Team 2000-2003
[2005/03/29 16:30:22, 1] nsswitch/winbindd_util.c:add_trusted_domain(149)
  Added domain REG
[2005/03/29 16:30:22, 1] nsswitch/winbindd_util.c:init_domain_list(284)
  Could not fetch sid for our domain REG
[2005/03/29 16:30:22, 1] nsswitch/winbindd_util.c:add_trusted_domains(206)
  scanning trusted domain list
#

Thanks for any help!!

Ricardo.


On Tue, 29 Mar 2005 14:34:01 -0300, Ricardo Maciel <[EMAIL PROTECTED]> wrote:
> Michael,
> 
> Here are my nsswitch.conf and smb.conf (I input the syslog=3):
> 
> #
> # /etc/nsswitch.conf
> #
> # Example:
> #passwd:db files nisplus nis
> #shadow:db files nisplus nis
> #group: db files nisplus nis
> 
> passwd: files winbind
> shadow: files winbind
> group:  files winbind
> 
> #
> #--smb.conf
> #
> # Samba config file created using SWAT
> # from 0.0.0.0 (0.0.0.0)
> # Date: 2004/09/17 16:03:56
> # Global parameters
> [global]
> workgroup = REG
> netbios name = Estacao1386000
> security = domain
> password server = *
> winbind uid = 1000-2
> winbind gid = 1000-2
> winbind enum users = yes
> winbind enum groups = yes
> winbind separator = +
> winbind cache time = 10
> template homedir = /home/winnt/%D/%U
> winbind use default domain = yes
> template shell = /bin/bash
> syslog = 3
> #
> 
> 
> > what does wbinfo -p return?
> #
> # wbinfo -p
> Ping to winbindd succeeded on fd 4
> #
> 
> > What OS is your domain controller?
> Red Hat Enterprise Linux AS - 2.4.21-4.EL
> 
> > Have you joined the box the domain?
> Sorry. I didn't understand!
> 
> > Have you turned up logging (syslog = 3) in your smb.conf?
> Yes (see above).
> 
> Still Thanking.
> 
> Ricardo.
> 
> On Tue, 29 Mar 2005 10:48:05 -0500, [EMAIL PROTECTED]
> <[EMAIL PROTECTED]> wrote:
> >
> > Have you already made the changes to nsswitch.conf?
> >
> > passwd: files winbind
> > shadow: files winbind
> > group:  files winbind
> >
> > what does wbinfo -p return?
> >
> > What OS is your domain controller?
> >
> > Have you joined the box the domain?
> >
> > Have you turned up logging (syslog = 3) in your smb.conf?
> >
> > Just some thoughts ... good luck.
> >
> > Michael J Barber
> >  Computer Services Administrator
> >  WPTZ/WNNE
> >  Heart-Argyle Television
> >  p  518-561- x563
> >  m 518-572-6639
> >  f   518-561-5940
> >
> >
> >
> >
> >  Ricardo Maciel <[EMAIL PROTECTED]>
> > Sent by: [EMAIL PROTECTED]
> >
> > 03/29/2005 10:50 AM
> > Please respond to Ricardo Maciel
> > To:samba@lists.samba.org
> > cc:
> > Subject:Re: [Samba] Problem with wbinfo
> >
> >
> > Hamish,
> >
> >  Thanks, but the nscd service was already stopped. Must be another
> >  solution. Any other idea?
> >
> >  Ricardo.
> >
> >
> >  On Tue, 29 Mar 2005 13:27:16 +0100, Hamish <[EMAIL PROTECTED]> wrote:
> >  > On Tuesday 29 March 2005 13:13, Ricardo Maciel wrote:
> >  > > Hello,
> >  > >
> >  > > I'm using a Samba client to access a Samba Server. The "smbclient
> >  > > tool" is ok, both at the client as at the server. I'm having trouble
> >  > > with the "wbinfo" command (winbind service) at the client, as you can
> >  > > see below.
> >  > >
> >  > > Can anybody help me?
> >  > >
> >  > > Thanks!!!
> >  > >
> >  > > =Problem==
> >  > >
> >  > > Samba Server: samba-3.0.10-1.fc2
> >  > > Samba Client: Version 3.0.0-14.3E
> >  > >
> > --
> >  > > # service winbind start
> >  > > Iniciando serviços Winbind:[  OK  ]
> >  > > #
> >  > > #
> >  > > # wbinfo -t
> >  > > checking the trust secret via RPC calls failed
> >  > > error code was NT_STATUS_INTERNAL_ERROR (0xc0e5)
> >  > > Could not check secret
> >  > > #
> >  > > #
> >  > > # wbinfo -u
> >  > > Error looking up domain users
> >  > > #
> >  > > #
> >  > > # wbinfo -g
> >  > > Error looking up domain groups
> >  > > #
> >  > > #
> >  > > # service winbind stop
> >  > >
> >  > > Desligando os serviços Winbind:[  OK  ]
> >  >
> >  > Make sure you do not have nscd running - i had similar problems with it.
> > You
> >  > should be able to do this with `service nscd stop; chkconfig nscd off`
> >  > Hope that helps
> >  > H
> >  >
> >  >
> >  > --
> >  > To unsubscribe from this list go to the following URL and read the
> >  > instructions:  https://lists.samba.org/mailman/listinfo/samba
> >  >
> >  >
> >  >
> 

[Samba] printers offline in 3.0.13 - is it because they are "local printer"s printing to "local port"s ?

[Urs Rau]

Maybe my printers being offline with samba 3.0.13 on some xp pro 
workstations is not a bug after all, maybe it was a (mis)feature in 
samba-2.2?

My problem is that I can't easily test on < 3.0.13, because until a few 
days ago I had been running 2.2.12 and all was fine, then.
No printers showed as offlne.
But then I upgraded to 3.0.7 for a day or two immediately followed by an 
upgrade to 3.0.11 and I only held my breadth to check things when I was 
on 3.0.11 and found that my printers were showing as offline under 
3.0.11, but of course maybe that would have been like that even on 3.0.7?

We have had 3 good reasons to install samba printers on win xp 
workstations as "local printer"s printing to "local port"s (e.g. 
\\linux\printerqueuename)

reason 1 our main email application (pegasus mail) was playing very 
annoying timeout delays with reading emails and going up or down the 
email inbox if the default printer was a smb network printer that was 
unreachable at the time. (for some strange reason pegasus was trying to 
interact with the printer for every msg)

reason 2 just when we thought we should point the finger at pegasus mail 
for this we found that ms word had a similar problem when it came to a 
workstation having the default printer as a smb network printer and it 
wasn't accessible.

reason 3 if we installed the samba network printers as "local printer"s 
printing to a "local port" (e.g \\linux\printerqueuename then we could 
install the printer for all users on that workstation and also set the 
default config for all of those queues once for all, from a script. (so 
no need to set the network printer settings and defaults once every login.)

BUT maybe we have to throw out those gains and stop using printers 
defined as "local printer"s printing to "local port"s which are pointed 
at the samba print queue?

Is there a reason why samba changed it's behaviour showing it's printers 
as being offline if they are accessed in this way? I guess the question 
to ask is, what status does a win2k3 shared printer show as on a win xp 
pro workstation if one sets the workstation printer up as a "local 
printer" with a "local port" of the name 
"\\sambaservername\printerqueuename". I hope somebody can tell me that 
such a setup would result in a printer showing the proper status? 
Because then I am sure samba could be told the same trick, surely?

I am hoping one or two of you can shed some light on this.
Regards,
Urs Rau
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Problems with Excel & MS Word files (still)

[Urs Rau]

Jeremy Allison wrote:
On Tue, Mar 29, 2005 at 07:45:53AM -0500, Nathan Vidican wrote:
No confirmation over here, havn't had a chance to compile a new copy -
rolled back to 3.0.8 for the time being it's been less buggy but still have
occasional file(s) locking up.
A little unclear here, do I need to add a patch to 3.0.13 before compiling,
or simply add 'dos filetime = yes' to the configuration?
Lastly, does it matter if I'm not using ACL's? Just using plain old UNIX
permissions (750/660 dir/file) and the force-group parameter for most
shares - which works quite well thus far.

No, you don't need to add a patch. Simply setting dos filetimes should
do it.
Ohh, I have added the patch you emailed to the newsgroup on 24/3/05, in 
this thread, I guess I should back that out again in my custom rpm? Or 
is it a fix that  will make it into 3.0.14 anyway? (maybe I am confusing 
people with my question about my self-rolled samba rpm, where I included 
your newspost as a patch on top of 3.0.13, sorry)

--
Urs Rau
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Problems with Excel & MS Word files (still)

[Jeremy Allison]

On Tue, Mar 29, 2005 at 07:45:53AM -0500, Nathan Vidican wrote:
> 
> No confirmation over here, havn't had a chance to compile a new copy -
> rolled back to 3.0.8 for the time being it's been less buggy but still have
> occasional file(s) locking up.
> 
> A little unclear here, do I need to add a patch to 3.0.13 before compiling,
> or simply add 'dos filetime = yes' to the configuration?
> 
> Lastly, does it matter if I'm not using ACL's? Just using plain old UNIX
> permissions (750/660 dir/file) and the force-group parameter for most
> shares - which works quite well thus far.

No, you don't need to add a patch. Simply setting dos filetimes should
do it.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Using Lotus Domino LDAP as Samba Backend

[jonlists]

[EMAIL PROTECTED] wrote on 03/29/2005 
09:20:31 AM:

> On Tuesday 29 March 2005 04:18, [EMAIL PROTECTED] wrote:
> > Hello,
> >
> > can I use the Lotus Domino LDAP Server as backend for Samba?
> 
> Any LDAP server can be used so long as it has the right schema 
extensions and 
> uses standard protocols.
> 
> > Has anyone tried this, or some experiences in that?

Do a google search for Alan Bell linux lotus domino and see what you get. 
I know that he had this working at one point, but didn't get the chance to 
put it into production. There was information also available at 
www.openntf.org - but I'm not sure if it's there anymore. 

As John says, it's a matter of adding the right schema extensions. These 
will be added to the person document on the Domino server. 

> 
> Not with Lotus.
> 
> - John T.
> 
> >
> >
> > Mit freundlichen Grüssen / Kind regards
> >
> > Norman Trapp
> >
> > System Management
> >
> > objective partner GmbH
> > Bergstrasse 45
> > D-69469 Weinheim
> >
> > Tel. +49 (0)6201 3986 24
> > Fax. +49 (0)6201 3986 12
> > ___
> > objective partner - keep IT in e.motion
> >
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problem with wbinfo

[Ricardo Maciel]

Michael,

Here are my nsswitch.conf and smb.conf (I input the syslog=3):

#
# /etc/nsswitch.conf
#
# Example:
#passwd:db files nisplus nis
#shadow:db files nisplus nis
#group: db files nisplus nis

passwd: files winbind
shadow: files winbind
group:  files winbind

#
#--smb.conf
#
# Samba config file created using SWAT
# from 0.0.0.0 (0.0.0.0)
# Date: 2004/09/17 16:03:56
# Global parameters
[global]
workgroup = REG
netbios name = Estacao1386000
security = domain
password server = *
winbind uid = 1000-2
winbind gid = 1000-2
winbind enum users = yes
winbind enum groups = yes
winbind separator = +
winbind cache time = 10
template homedir = /home/winnt/%D/%U
winbind use default domain = yes
template shell = /bin/bash
syslog = 3
#


> what does wbinfo -p return? 
#
# wbinfo -p
Ping to winbindd succeeded on fd 4
#

> What OS is your domain controller? 
Red Hat Enterprise Linux AS - 2.4.21-4.EL

> Have you joined the box the domain? 
Sorry. I didn't understand!

> Have you turned up logging (syslog = 3) in your smb.conf? 
Yes (see above).


Still Thanking.

Ricardo.


On Tue, 29 Mar 2005 10:48:05 -0500, [EMAIL PROTECTED]
<[EMAIL PROTECTED]> wrote:
>  
> Have you already made the changes to nsswitch.conf? 
>  
> passwd: files winbind 
> shadow: files winbind 
> group:  files winbind 
>  
> what does wbinfo -p return? 
>  
> What OS is your domain controller? 
>  
> Have you joined the box the domain? 
>  
> Have you turned up logging (syslog = 3) in your smb.conf? 
>  
> Just some thoughts ... good luck. 
>  
> Michael J Barber
>  Computer Services Administrator
>  WPTZ/WNNE
>  Heart-Argyle Television
>  p  518-561- x563
>  m 518-572-6639
>  f   518-561-5940
>  
>  
>  
>  
>  Ricardo Maciel <[EMAIL PROTECTED]> 
> Sent by: [EMAIL PROTECTED] 
> 
> 03/29/2005 10:50 AM 
> Please respond to Ricardo Maciel 
> To:samba@lists.samba.org 
> cc: 
> Subject:Re: [Samba] Problem with wbinfo 
>  
>  
> Hamish,
>  
>  Thanks, but the nscd service was already stopped. Must be another
>  solution. Any other idea?
>  
>  Ricardo.
>  
>  
>  On Tue, 29 Mar 2005 13:27:16 +0100, Hamish <[EMAIL PROTECTED]> wrote:
>  > On Tuesday 29 March 2005 13:13, Ricardo Maciel wrote:
>  > > Hello,
>  > >
>  > > I'm using a Samba client to access a Samba Server. The "smbclient
>  > > tool" is ok, both at the client as at the server. I'm having trouble
>  > > with the "wbinfo" command (winbind service) at the client, as you can
>  > > see below.
>  > >
>  > > Can anybody help me?
>  > >
>  > > Thanks!!!
>  > >
>  > > =Problem==
>  > >
>  > > Samba Server: samba-3.0.10-1.fc2
>  > > Samba Client: Version 3.0.0-14.3E
>  > >
> --
>  > > # service winbind start
>  > > Iniciando serviços Winbind:[  OK  ]
>  > > #
>  > > #
>  > > # wbinfo -t
>  > > checking the trust secret via RPC calls failed
>  > > error code was NT_STATUS_INTERNAL_ERROR (0xc0e5)
>  > > Could not check secret
>  > > #
>  > > #
>  > > # wbinfo -u
>  > > Error looking up domain users
>  > > #
>  > > #
>  > > # wbinfo -g
>  > > Error looking up domain groups
>  > > #
>  > > #
>  > > # service winbind stop
>  > >
>  > > Desligando os serviços Winbind:[  OK  ]
>  > 
>  > Make sure you do not have nscd running - i had similar problems with it.
> You
>  > should be able to do this with `service nscd stop; chkconfig nscd off`
>  > Hope that helps
>  > H
>  > 
>  > 
>  > --
>  > To unsubscribe from this list go to the following URL and read the
>  > instructions:  https://lists.samba.org/mailman/listinfo/samba
>  > 
>  > 
>  >
>  -- 
>  To unsubscribe from this list go to the following URL and read the
>  instructions:  https://lists.samba.org/mailman/listinfo/samba
>  
>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Problems with Excel & MS Word files (still)

[Jeremy Allison]

On Tue, Mar 29, 2005 at 11:01:10AM +0100, Urs Rau wrote:
> Jeremy or Nathan,
> 
> Jeremy Allison wrote:
> 
> >Ok, I have a working theory for this. It concerns ACLs and what 
> >happens when excel wants to update the filetime on a file the user 
> >doesn't own.
> >
> >Normally you just set the "dos filetime" parameter to allow this 
> >(this causes a timestamp to be updated on a file if you can write to 
> >it - normally POSIX only allows this if you're the owner). I've
> >realised the codepath here doesn't check ACL semantics. This is a bug
> >we've had since we introduced ACLs a long time ago but only now seems
> >to have been triggered.
> >
> >Here is a patch to the just released 3.0.13 that causes ACL entries 
> >to be properly checked when "dos filetime= True" has been set.
> >
> >Please try this on top of 3.0.13 and let me know if it fixes the 
> >issues.
> 
> Has this been confirmed, as fixing it? I am rolling a 3.0.13 maintenance 
> release and it would be nice to clear this excel ACL bug. What is the 
> bugzilla entry for this bug, so I can follow it?

Most people have reported this being fixed with dos filetimes=yes
and 3.0.13. There are still a few outstanding issues when people are
using ACLs I'm looking into right now.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba-Guide chapter 10

[John H Terpstra]

On Tuesday 29 March 2005 09:56, Dr. Matthias Schlett (987) wrote:
> Hi John T. et al.,
> here is my comment about the Samba-Guide chapter 10.

The Samba-Guide (Samba-3 by Example) is not intended as a comprehensive 
technical overview of how Samba works. It is meant as a quick guide that will 
help our users to create a working network environment. The premise behind 
the Samba-Guide is "learn be seeing Samba work" - not "see how every nut and 
bolt of Samba works". The nuts and bolts should be covered in the 
Samba-HOWTO-Collection.

> In my opinion this chapter is a good place to explain the nature of Samba:
> joining the unix and the windows world by mapping.

This is handled in the Samba-HOWTO-Collection. Is that the wrong place?

> In most of the cases discussed on this list a unix server is used only as a
> container for the windows world. The Samba team tries to smooth the
> differences between unix and windows and to put windows functionality into
> unix. For me everything is merged into one big cloud. As an administrator I
> want to look behind the scene and to understand the different cases which
> Samba as an all-purpose software can serve for.

Right. Refer to the Samba-HOWTO-Collection and if that is deficient it must be 
updated.

> We don't use Samba as a general tool for everything. For the user and group
> management we have an external Oracle database. From this database we feed
> a mixed mode AD for the windows world and a LDAP for the unix world using
> there nss_ldap.
> A windowsusername = DOMAIN\unixusername and some windowsgroupname =
> DOMAIN\unixgroupname, some windowsgroupnames differ from unixgroupnames.

AS shown in the Samba-Guide and as explained in detail in the 
Samba-HOWTO-Collection a Windows username should be the same as a UNIX 
username. The 'username map' facility is a kludge for handling out-lying 
cases where the names must for a particular reason differ, not as a panacea 
for general use. The 'username map' facility violates one of the principle 
rules of using Samba - that there must be only unique resolution of 
login_ID<=>UID<=>SID as any ambiguity may end up biting the hand off.

The same rules apply to group mappings. The tool for setting up group mappings 
is: 'net groupmap [add | modify | delete] ntgroup=[...] unixgroup=[...]'


> Both group membership trees are identical ( LDAP supports nested unix
> groups). The password entries for unix and windows are managed by the
> external database.
> On our NFS and CIFS fileserver both worlds get in touch with the help of
> winbind: the idmap backend on a LDAP server is also feeded by our database,
> winbind has only to read the mappings. We don't use winbind for name
> resolution or automatic creation of uid/gid.

What do you see as the role of winbind?

> In chapter 10 there are some common phrases about the winbind role, but in
> my opinion we need a more detailed explanation how it manages the mapping
> in different cases. More general, I would like to have a chapter from the
> mapping viewpoint. For my particular case I had to read many different
> places in the documentation (and I'm reading it the third month) to find a
> working configuration (which I'll send to the list if you would like ), but
> there are still some open questions:

Have you referred to the Samba-HOWTO-Collection? Both the HOWTO and the Guide 
have recently been significantly updated. They are available on-line at:

http://www.samba.org/samba/docs/

> - Must the idmap be a one-to-one mapping or can several sid point to one
> uid/gid ? or is the username map the only tool in this case (and what about

IDMAP can handle only single and unambiguous mapping of SID to UID and vica 
versa.

> a groupname map ) ? - Why does the user mapping mechanism differ from the
> group mapping mechanism ? - How is a windows group membership mapped
> automatically to a unix membership (We do it by the external database) ?

Groups are only explicitly mapped since 3.0.0. That is why you need to create 
the mapping using the 'net groupmap' facility.

> - How are the 14 different windows security attributes mapped into the
> Posix ACLs and how are the Posix ACLs displayed in windows ?

Perhaps Jeremy can best answer this.

>
> I hope this email is not too confusingly, but I tried be short.


- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problem with wbinfo

[Herb Lewis]

The wbinfo -t returning an error normally means the machine was
not properly joined to the domain. Did you do a net rpc join?
Is your smb.conf set up properly to be a member of the domain?
Ricardo Maciel wrote:
Hamish,
Thanks, but the nscd service was already stopped. Must be another
solution. Any other idea?
Ricardo.
On Tue, 29 Mar 2005 13:27:16 +0100, Hamish <[EMAIL PROTECTED]> wrote:
On Tuesday 29 March 2005 13:13, Ricardo Maciel wrote:
Hello,
I'm using a Samba client to access a Samba Server. The "smbclient
tool" is ok, both at the client as at the server. I'm having trouble
with the "wbinfo" command (winbind service) at the client, as you can
see below.
Can anybody help me?
Thanks!!!
=Problem==
Samba Server: samba-3.0.10-1.fc2
Samba Client: Version 3.0.0-14.3E
--
# service winbind start
Iniciando serviços Winbind:[  OK  ]
#
#
# wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_INTERNAL_ERROR (0xc0e5)
Could not check secret
#
#
# wbinfo -u
Error looking up domain users
#
#
# wbinfo -g
Error looking up domain groups
#
#
# service winbind stop
Desligando os serviços Winbind:[  OK  ]
Make sure you do not have nscd running - i had similar problems with it. You
should be able to do this with `service nscd stop; chkconfig nscd off`
Hope that helps
H
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba-Guide chapter 10

[Dr. Matthias Schlett (987)]

Hi John T. et al.,
here is my comment about the Samba-Guide chapter 10.
In my opinion this chapter is a good place to explain the nature of Samba:
joining the unix and the windows world by mapping.
In most of the cases discussed on this list a unix server is used only as a 
container
for the windows world. The Samba team tries to smooth the differences between 
unix and
windows and to put windows functionality into unix. For me everything is merged 
into one big cloud.
As an administrator I want to look behind the scene and to understand the 
different cases
which Samba as an all-purpose software can serve for.
We don't use Samba as a general tool for everything. For the user and group 
management we have
an external Oracle database. From this database we feed a mixed mode AD for the 
windows world
and a LDAP for the unix world using there nss_ldap.
A windowsusername = DOMAIN\unixusername and some windowsgroupname = 
DOMAIN\unixgroupname,
some windowsgroupnames differ from unixgroupnames. Both group membership trees 
are identical
( LDAP supports nested unix groups). The password entries for unix and windows 
are managed by
the external database. 
On our NFS and CIFS fileserver both worlds get in touch with the help of 
winbind:
the idmap backend on a LDAP server is also feeded by our database, winbind has 
only to 
read the mappings. We don't use winbind for name resolution or automatic 
creation of uid/gid.

In chapter 10 there are some common phrases about the winbind role, but in my 
opinion
we need a more detailed explanation how it manages the mapping in different 
cases.
More general, I would like to have a chapter from the mapping viewpoint.
For my particular case I had to read many different places in the documentation
(and I'm reading it the third month) to find a working configuration (which 
I'll send to the
list if you would like ), but there are still some open questions:

- Must the idmap be a one-to-one mapping or can several sid point to one 
uid/gid ?
  or is the username map the only tool in this case (and what about a groupname 
map ) ?
- Why does the user mapping mechanism differ from the group mapping mechanism ?
- How is a windows group membership mapped automatically to a unix membership 
  (We do it by the external database) ?
- How are the 14 different windows security attributes mapped into the Posix 
ACLs and
  how are the Posix ACLs displayed in windows ?

I hope this email is not too confusingly, but I tried be short.
Regards
M.Schlett
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Securing "machine auth account"

[info]

On Monday 28 March 2005 23:12, info wrote:
Please give me a sanity check here...
OK. So please check the chapter on "Rights and Privileges" in the 
Samba-HOWTO-Collection. You can obtain the latest build from:

http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf
If this does not solve your problem in a more sane manner please drop me a 
line.

Ahhh:
"Samba 3.0.11 introduces support for the Windows privilege model. This 
model allows certain rights to be assigned to a user or group SID."

So I missed it by a .01 release...
Thanks
(snip)

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Problem with pdf printing

[Vincent Mikalinis]

Hello, 
I'm hoping someone can help me.  I have several pdf printers set up and
when I print to them samba becomes unstable and several errors are
dumped to the log.  These pdf printers were working when I was using
version 3.0.6.  When I went to a newer version of samba the queue would
not clear on the windows side and no errors were logged.  Yesterday I
upgraded to version 3.0.13-1 and the errors started and the queue still
will not clear.  I have deleted several tdb files to no avail.  I am
using "printing = bsd" option as I have in the past.  Below is a clip
from the log. Please let me know if anyone needs more information.

[2005/03/29 10:49:03, 0] tdb/tdbutil.c:tdb_log(725)
  tdb(/var/lib/samba/printing/IT pdf printer.tdb): tdb_lock failed on
list 1409 ltype=0 (Bad file descriptor)
[2005/03/29 10:49:03, 0] tdb/tdbutil.c:tdb_log(725)
  tdb(/var/lib/samba/printing/IT pdf printer.tdb): tdb_lock failed on
list 0 ltype=1 (Bad file descriptor)
[2005/03/29 10:49:03, 0] tdb/tdbutil.c:tdb_log(725)
  tdb(/var/lib/samba/printing/IT pdf printer.tdb): tdb_lock failed on
list 295 ltype=1 (Bad file descriptor)
[2005/03/29 10:49:03, 0] tdb/tdbutil.c:tdb_log(725)
  tdb(/var/lib/samba/printing/IT pdf printer.tdb): tdb_lock failed on
list 4128 ltype=1 (Bad file descriptor)
[2005/03/29 10:49:03, 0] tdb/tdbutil.c:tdb_log(725)
  tdb(/var/lib/samba/printing/IT pdf printer.tdb): tdb_lock failed on
list 3445 ltype=0 (Bad file descriptor)
[2005/03/29 10:49:03, 0] tdb/tdbutil.c:tdb_log(725)
  tdb(/var/lib/samba/printing/IT pdf printer.tdb): tdb_lock failed on
list 4128 ltype=0 (Bad file descriptor)
[2005/03/29 10:49:03, 0] tdb/tdbutil.c:tdb_log(725)
  tdb(/var/lib/samba/printing/IT pdf printer.tdb): tdb_lock failed on
list 3445 ltype=1 (Bad file descriptor)
[2005/03/29 10:49:03, 0] tdb/tdbutil.c:tdb_log(725)
  tdb(/var/lib/samba/printing/IT pdf printer.tdb): tdb_lock failed on
list 1717 ltype=1 (Bad file descriptor)
[2005/03/29 10:49:03, 0] tdb/tdbutil.c:tdb_log(725)
  tdb(/var/lib/samba/printing/IT pdf printer.tdb): tdb_lock failed on
list 480 ltype=1 (Bad file descriptor)
[2005/03/29 10:49:03, 0]
printing/printing.c:print_queue_update_internal(1195)
  print_queue_update: failed to store MSG_PENDING flag for [IT pdf
printer]!
[2005/03/29 10:49:03, 0] tdb/tdbutil.c:tdb_log(725)
  tdb(/var/lib/samba/printing/IT pdf printer.tdb): tdb_lock failed on
list 1321 ltype=1 (Bad file descriptor)
[2005/03/29 10:49:05, 0]
printing/printing_db.c:get_print_db_byname(66)
  get_print_db: Failed to close tdb for printer IT pdf printer
[2005/03/29 10:49:11, 1] smbd/service.c:make_connection_snum(642)
  bmg2001 (192.168.42.106) connect to service public initially as user
NEWYORK+deborahp (uid=10008, gid=10011) (pid 23475)
[2005/03/29 10:50:04, 0] lib/fault.c:fault_report(36)
  ===
[2005/03/29 10:50:04, 0] lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 11 in pid 23459 (3.0.13)
  Please read the appendix Bugs of the Samba HOWTO collection
[2005/03/29 10:50:04, 0] lib/fault.c:fault_report(39)
  ===
[2005/03/29 10:50:04, 0] lib/util.c:smb_panic2(1495)
  PANIC: internal error
[2005/03/29 10:50:04, 0] lib/util.c:smb_panic2(1503)
  BACKTRACE: 14 stack frames:
   #0 smbd(smb_panic2+0x128) [0x81df9d8]
   #1 smbd(smb_panic+0x19) [0x81df8a9]
   #2 smbd [0x81cd252]
   #3 /lib/tls/libc.so.6 [0x420277b8]
   #4 smbd(tdb_fetch_int32_byblob+0x45) [0x81f4f75]
   #5 smbd(tdb_fetch_int32+0x28) [0x81f4fe8]
   #6 smbd [0x81fb637]
   #7 smbd [0x81fbe51]
   #8 smbd [0x81fc06e]
   #9 smbd(message_dispatch+0x13c) [0x81e823c]
   #10 smbd(start_background_queue+0x1cd) [0x81fc28d]
   #11 smbd(main+0x68b) [0x8257abb]
   #12 /lib/tls/libc.so.6(__libc_start_main+0xe4) [0x42015704]
   #13 smbd(ldap_msgfree+0x89) [0x80792a1]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] iconv not working on Sparc Solaris 8

[Graeme Hindmarsh]

Hi,

Thanks for the feedback. I changed the order of my PATH and added an entry
for LD_LIBRARY_PATH and this seems to have solved the problem.

Thanks
Again

Graeme 

-Original Message-
From: Håkan Stefansson [mailto:[EMAIL PROTECTED] 
Sent: 25 March 2005 18:29
To: Graeme Hindmarsh
Cc: 'samba@lists.samba.org'
Subject: Re: [Samba] iconv not working on Sparc Solaris 8

Graeme Hindmarsh wrote:
> Hi,
> 
> I have installed gettext using the configure --with-libiconv-prefix={dir}
> I then reinstalled libiconv, following make distclean, but there was no
> configure option to point to the gettext lib.
> 
> I then recompiled samba but have had the same result and iconv is still
not
> working.
> 
> Is there something that I am doing wrong or missing out, do I need to set
> LDFLAGS or any other environment variables?
> 
> Any help would be greatly appreciated.
> 
> Thanks
> Graeme

I see from your configure output below that iconv was found in /usr/lib.
This is Sun's iconv, that doesn't work with samba. Was that configure 
run before or after you installed libiconv in /usr/local? What did your 
latest samba configure say about this?

My samba 3.0.12 with working libiconv support runs under Solaris 7. I am 
using gcc 3.x.y, GNU make and Sun's linker. I also use 
LD_LIBRARY_PATH=/usr/local/lib and in my PATH I have /usr/local/bin 
before /usr/bin and /usr/ccs/bin. I don't remember what configure 
options I used for libiconv and gettext.

I'm afraid I can't give you much better info about my setup until I'm 
back at work on Tuesday.

Håkan


> -Original Message-
> From: Håkan Stefansson [mailto:[EMAIL PROTECTED] 
> Sent: 25 March 2005 12:50
> To: Graeme Hindmarsh
> Cc: 'samba@lists.samba.org'
> Subject: Re: [Samba] iconv not working on Sparc Solaris 8
> 
> Graeme Hindmarsh wrote:
> 
>>Hi,
>>
>> 
>>
>>I am trying to compile Samba 3.0.13 but when I run configure I get the
>>following in the output.
>>
>> 
>>
>>checking for iconv in /usr/lib... yes
>>
>>checking can we convert from CP850 to UCS2-LE?... no
>>
>>checking can we convert from IBM850 to UCS2-LE?... no
>>
>>checking can we convert from ASCII to UCS2-LE?... no
>>
>>checking can we convert from 646 to UCS2-LE?... 646
>>
>>checking can we convert from UTF-8 to UCS2-LE?... UTF-8
>>
>>checking for iconv in /usr/local/lib... yes
>>
>>checking can we convert from CP850 to UCS2-LE?... no
>>
>>checking can we convert from IBM850 to UCS2-LE?... no
>>
>>checking can we convert from ASCII to UCS2-LE?... no
>>
>>checking can we convert from 646 to UCS2-LE?... no
>>
>>checking can we convert from UTF-8 to UCS2-LE?... no
>>
>>checking can we convert from UTF8 to UCS2-LE?... no
>>
>>configure: WARNING: Sufficient support for iconv function was not found.
>>
>>Install libiconv from http://freshmeat.net/projects/libiconv/ for
> 
> better
> 
>>cha
>>
>>rset compatibility!
>>
>> 
>>
>>I have compiled from source and installed libiconv-1.9.2 in /usr/local but
>>it just does not seem to work.
>>
>>Without iconv Samba will just fill up its log files with character
>>conversion errors and generally not work.
>>
>> 
>>
>>I have tried libiconv-1.9.1, libiconv-1.8 and Samba 3.0.11.
>>
>>GNU gcc 2.95.3 and gcc 3.4.2
>>
>> 
>>
>>Can anybody help?
>>
>> 
>>
>>Thanks
>>
>>Graeme
>>
>> 
>>
>> 
>>
> 
> 
> There is a mutual dependency between libiconv and GNU gettext. That is, 
> gettext is needed to get libiconv to work while gettext neeeds libiconv. 
> (IIRC this is mentioned in a README or INSTALL file.)
> 
> I have tested the following procedure on Solaris 7 and 9 with various 
> versions of samba 3.0.x, most recently with samba 3.0.12 under Solaris 
> 7. (Sorry, I don't remember what libiconv and gettext versions I used 
> and can't check now as I'm at home.)
> 
> 1. Install libiconv from source
> 2. Install gettext fron source
> 3. Remove (make distclean) libiconv and reinstall it
> 
> Then you will need to reinstall samba with the configure parameter 
> --with-libiconv=/usr/local (assuming the libraries are in /usr/local/lib)
> 
> Håkan Stefansson
> 








I

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] add machine script + ldap doesn't work? Please help!

[Bostjan Müller]

Hi,

I have a pdc on samba 3.0.9 with LDAP as backend.
However when I add a machine to domain (via the Windows interface - my
computer->properties->network-identification->properties->domain

The computer is added to the domain (into ldap), but only via
samSambaAccount, and no posix parts.

I have tried to use:
add machine script = /usr/local/bin/smbldap-useradd.pl -w "%u"

And nothing happened - it works just fine if I run it manually. Than I tried:
add machine script = /bin/echo %u >> /tmp/addmachine.txt

and again nothing happened, but the machine account exists in ldap at
that point (allthough I deleted it before joining the domain).

Is there anything more that one would have to do to make samba execute
those scripts (I was joining the domain via root account (uid=0,
gid=0)).

Please help me if you can, because I do not know what to look for any
more (logs also show no errors or clues at this point).

Regards,
Bostjan

-- 
buhdej evridej
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] ACL support

[John H Terpstra]

On Tuesday 29 March 2005 08:00, Meli Marco wrote:
> Hi,
> I have download the latest version samba-3.0.13-1.src.rpm, and I have make
> followings changes:
> Rpm -i samba-3.0.13-1.src.rpm, so I have created the SPEC file.
> I have added --with-acl-support in the CFLAGS section in the SPEC file.
> Rpmbuild -bb specfile.spec.
> It compile the finally rpm without errors but when I install the package
> and make ldd /usr/sbin/smbd, I can't see libattr and libacl compiled in ...
> Where I wrong?
> Thanks.
> Marco.

Have the following packages been installed?

libacl-devel
libxattr-devel

The compiler can only use the libraries that exist on the build machine.

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] wins problem - 2nd and last time post

[John H Terpstra]

On Tuesday 29 March 2005 06:56, Flavio Fonseca wrote:
> Hello list
>
>  I am having the following problem with samba wins server:
>
> 1. my servers record are desapearing from wins database. this
> servers(computers) are never turned off, and once or twice a week the wins
> records just vanish and I have to restart the server to register itself
> again with wins.
>
> 2. when I install a new workstation I do so in a subnet A where is my
> support team. Then I send the workstation to it's final place which is a
> subnet B. while installing it, the workstation register itself on wins
> server with an IP from subnet A. When I send it to its final location it
> gets an IP from subnet B but wins server keeps the record from subnet A. It
> does not update the record. If I stop the server, edit wins.dat and remove
> the record, restart wins e renew the workstation dhcp net configuration it
> register itself again with the correct IP.
>
> I am using Suse 9.2 professional with samba
> smbd version 3.0.9-2.3-SUSE.

Suggest you update to samba-3.0.13 - if the problem persists please file a bug  
report at https://bugzilla.samba.org with details of how the bug can be 
reproduced so that we can schedule to fix this.

Thank you.

- John T.

>
> I am not starting smbd.
>
> Thanks for any help.
> --
> Att.,
>
> Flávio Fonseca
> Equipe Divisão de Redes (DR)
> Diretoria de Processamento de Dados (DirPD)
> Universidade Federal de Uberlandia (UFU)

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbd 100% systemload

[Ulrik Guenther]

Heya,
the growing number of smbd process and therewith the resulting 100% cpu 
usage have their reason in samba not killing processes which are not 
used anymore (since every client causes Samba to spawn a new process).
You can resolve this issue by putting
	deadtime = 60
into your smb.conf. This causes Samba to kill processes which are not 
used anymore after 60 minutes which should be sufficient.
Hope I helped!

Have a nice day,
Ulrik
Matthias Henze wrote:
hi,
i've a debian sarge setup with samba 3.0.10 with ldap as SAM backend. 
every thing used to work as expected, but last week the machine went 
down. an analysis of the problem has showen, that with increasing uptime 
there is a growing number of smbd processes that caus 100% CPU 
utilation. tests have showen, that i can kill these processes without 
harming smb conecctivtiy. this is a workaround but no soulution.

i've absolutely no idea what causes this and what i can/should do to 
track this down.

any suggestions ?
TIA
Matthias Henze[EMAIL PROTECTED]
Use PGP!! http://www.mhcsoftware.de/MatthiasHenze.asc
- - - - - - - - - - - - - - - - - - - - - - - - - - -
MHC SoftWare GmbH  voice: +49-(0)9533-92006-0
Fichtera 17  fax: +49-(0)9533-92006-6
96274 Itzgrund/Germanye-Mail: [EMAIL PROTECTED]
- - - - - - - - - - - - - - - - - - - - - - - - - - -
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Using Lotus Domino LDAP as Samba Backend

[John H Terpstra]

On Tuesday 29 March 2005 04:18, [EMAIL PROTECTED] wrote:
> Hello,
>
> can I use the Lotus Domino LDAP Server as backend for Samba?

Any LDAP server can be used so long as it has the right schema extensions and 
uses standard protocols.

> Has anyone tried this, or some experiences in that?

Not with Lotus.

- John T.

>
>
> Mit freundlichen Grüssen / Kind regards
>
> Norman Trapp
>
> System Management
>
> objective partner GmbH
> Bergstrasse 45
> D-69469 Weinheim
>
> Tel. +49 (0)6201 3986 24
> Fax. +49 (0)6201 3986 12
> ___
> objective partner - keep IT in e.motion
>
>
> Diese eMail enthaelt vertrauliche und/oder rechtlich geschuetzte
> Informationen. Wenn Sie nicht der richtige Adressat sind oder diese eMail
> irrtuemlich erhalten haben, informieren Sie bitte sofort den Absender und
> vernichten Sie diese eMail. Das unerlaubte Kopieren sowie die unbefugte
> Weitergabe dieser eMail ist nicht gestattet.
>
> This email may contain confidential and/or privileged information. If you
> are not the intended recipient (or have received this email in error)
> please notify the sender immediately and destroy this email. Any
> unauthorized copying, disclosure or distribution of the material in this
> email is strictly forbidden.

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] ACL support

[Meli Marco]

Hi,
I have download the latest version samba-3.0.13-1.src.rpm, and I have make
followings changes:
Rpm -i samba-3.0.13-1.src.rpm, so I have created the SPEC file.
I have added --with-acl-support in the CFLAGS section in the SPEC file.
Rpmbuild -bb specfile.spec.
It compile the finally rpm without errors but when I install the package and
make ldd /usr/sbin/smbd, I can't see libattr and libacl compiled in ...
Where I wrong?
Thanks.
Marco. 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Setup Samba

[Jon Jarvis]

I have a FC3 box set up with Samba 3.0.13-1 which has PAM and nsswitch
setup to use an LDAP server for local authentication. I use the getent
passwd command and can see that all of my LDAP users show up with uid
and gid's. Each user has a home directory on the computer that they
own. My question: is there an easy way to make Samba use the normal
UNIX passdb backend with a standalone (no PDC) server for my users? I
set my Windows computer to have plain text passwords, but I don't know
what settings samba should have to achieve this.  I really don't like
the idea of LDAP with the idealx documentation because A.) I'm not
using a PDC, B.) I don't want to maintain the extra password hashes.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] wins problem - 2nd and last time post

[Flavio Fonseca]

Hello list

 I am having the following problem with samba wins server:

1. my servers record are desapearing from wins database. this 
servers(computers) are never turned off, and once or twice a week the wins  
records just vanish and I have to restart the server to register itself again 
with wins.

2. when I install a new workstation I do so in a subnet A where is my support 
team. Then I send the workstation to it's final place which is a subnet B. 
while installing it, the workstation register itself on wins server with an 
IP from subnet A. When I send it to its final location it gets an IP from 
subnet B but wins server keeps the record from subnet A. It does not update 
the record. If I stop the server, edit wins.dat and remove the record, 
restart wins e renew the workstation dhcp net configuration it register 
itself again with the correct IP.

I am using Suse 9.2 professional with samba 
smbd version 3.0.9-2.3-SUSE.

I am not starting smbd.

Thanks for any help.
-- 
Att.,

Flávio Fonseca
Equipe Divisão de Redes (DR)
Diretoria de Processamento de Dados (DirPD)
Universidade Federal de Uberlandia (UFU)
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Smbmnt problem with real path

[Suren Sargsyan]

Dear friends,

The following command

smbmnt //winhost/share /home/myname/share

Produces the error

Failed to find real path for mount point.

What does it mean, and how to fix it.

Regards
Suren

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problem with wbinfo

[Ricardo Maciel]

Hamish,

Thanks, but the nscd service was already stopped. Must be another
solution. Any other idea?

Ricardo.


On Tue, 29 Mar 2005 13:27:16 +0100, Hamish <[EMAIL PROTECTED]> wrote:
> On Tuesday 29 March 2005 13:13, Ricardo Maciel wrote:
> > Hello,
> >
> > I'm using a Samba client to access a Samba Server. The "smbclient
> > tool" is ok, both at the client as at the server. I'm having trouble
> > with the "wbinfo" command (winbind service) at the client, as you can
> > see below.
> >
> > Can anybody help me?
> >
> > Thanks!!!
> >
> > =Problem==
> >
> > Samba Server: samba-3.0.10-1.fc2
> > Samba Client: Version 3.0.0-14.3E
> > --
> > # service winbind start
> > Iniciando serviços Winbind:[  OK  ]
> > #
> > #
> > # wbinfo -t
> > checking the trust secret via RPC calls failed
> > error code was NT_STATUS_INTERNAL_ERROR (0xc0e5)
> > Could not check secret
> > #
> > #
> > # wbinfo -u
> > Error looking up domain users
> > #
> > #
> > # wbinfo -g
> > Error looking up domain groups
> > #
> > #
> > # service winbind stop
> >
> > Desligando os serviços Winbind:[  OK  ]
> 
> Make sure you do not have nscd running - i had similar problems with it. You
> should be able to do this with `service nscd stop; chkconfig nscd off`
> Hope that helps
> H
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 
> 
>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba does not 'see' all the cups printers

[Bert_De_Ridder]

Well it seems I can answer my own question here

Very weird, but if I recreate the printers with shorter names (HPLJ4000 in 
stead of HP-LaserJet-4000), Samba 'sees' them

Can anyone explain ? 




Kind regards,

Bert De Ridder

PeopleWare NV - Head Office
Cdt.Weynsstraat 85 
B-2660 Hoboken 
Tel: +32 3 448.33.38 
Fax: +32 3 448.32.66 

PeopleWare NV - Branch Office Geel
Kleinhoefstraat 5
B-2440 Geel
Tel: +32 14 57.00.90
Fax: +32 14 58.13.25

http://www.peopleware.be 
http://www.mobileware.be 



[EMAIL PROTECTED] 
Sent by: [EMAIL PROTECTED]
29/03/2005 15:09

To
samba@lists.samba.org
cc

Subject
[Samba] Samba does not 'see' all the cups printers






Hi, all,

I have a weird problem; I have 3 working cups printers on Suse linux 9.
All 3 are networked printers. 

I use the following statements in smb.conf : 
printing = cups
load printers = yes
printcap name = /etc/printcap

[printers]
comment = SMB Print Spool
path = /var/spool/samba
guest ok = yes
writeable = no
public = yes
printable = yes
browsable = No
printer admin = root, bdridder
use client driver = Yes

this is the content of /etc/printcap

# This file was automatically generated by cupsd(8) from the
# /etc/cups/printers.conf file.  All changes to this file
# will be lost.
HP-Laserjet-4000|Developers gelijkvloers - soms platvloers 
;-):rm=GOSCINNY:rp=HP-Laserjet-4000:
HP-LaserJet-4100|Sales & Marketing:rm=GOSCINNY:rp=HP-LaserJet-4100:
HPCL2500|Colour Laserjet - use only when needed:rm=GOSCINNY:rp=HPCL2500:

If I use printcap name = cups in smb.conf, NO printers show up at all.
If I use /etc/printcap, only HPCL2500 shows up in the Printers folder of 
the server. 

Does anybody have an idea how this can happen ?




Regards,

Bert De Ridder

PeopleWare NV - Head Office
Cdt.Weynsstraat 85 
B-2660 Hoboken 
Tel: +32 3 448.33.38 
Fax: +32 3 448.32.66 

PeopleWare NV - Branch Office Geel
Kleinhoefstraat 5
B-2440 Geel
Tel: +32 14 57.00.90
Fax: +32 14 58.13.25

http://www.peopleware.be 
http://www.mobileware.be 



John H Terpstra <[EMAIL PROTECTED]> 
Sent by: [EMAIL PROTECTED]
16/03/2005 17:34
Please respond to
[EMAIL PROTECTED]


To
samba@lists.samba.org
cc

Subject
Re: [Samba] Samba and LDAP Base DN






Misty,

If your binddn has changed you need to re-run:

 smbpasswd -w 'secret'

to update your secrets.tdb file.

- John T.

On Wednesday 16 March 2005 09:06, Misty Stanley-Jones wrote:
> More info: I tried deleting ou=corp (after making a backup of course) 
and
> still no dice.  As soon as I put back ou=corp and make the baseDN in
> smb.conf ou=corp, everything works.  If I take all the entries under
> ou=corp and copy them one level up, I can't authenticate to Samba 
anymore. 
> It doesn't make any sense.
>
> On Wednesday 16 March 2005 10:57 am, Misty Stanley-Jones wrote:
> > Right now, I have all of my Samba stuff under
> > ou=corp,dc=mycompany,dc=com. I have it this way because there used to
> > also be
> > ou=furn,dc=mycompany,dc=com with a different domain.  Now that I only
> > have one domain, I would like to move everything to 
dc=mycompany,dc=com. 
> > So I copy all of the subentries of ou=corp (ou=computers, ou=people,
> > ou=grooups, and the sambaDomainName entries) to dc=mycompany,dc=com. I
> > change the /etc/ldap.conf files to all point to the new OU.  Perfect. 
> > However when I change the baseDN in my smb.conf, all of a sudden I 
cannot
> > authenticate. Even when doing smbcontrol smbd reload-config.  The only
> > thing I can figure is that it might be doing a 'sub' search and 
finding
> > two entries for my user, because I left the 'ou=corp' DN as it was. Is
> > it that, or is there something else I have to do in order to 
restructure
> > my LDAP tree?
> >
> > TIA,
> > Misty

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba as domain controller

[Paul Gienger]

I want to setup Linux(Samba) as Domain Controller means no more
Windows NT,2k or 2k3 as domain controller.I have mix of windows and
Linux clients and I want these clients to get authentication from the
Linux .Can anybody tell me any tutorial or How to do it.
 

There are two good ones linked to on the main samba.org webpage.  
There's a HowTo and a By Example guide for your perusal.

--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Client Profile mistake

[Paul Gienger]

Now when I try to log on the domain the client ist no longer trusted by 
the domain.
When I add the client to the domain to solve these problem, I get an new 
profile after login.
And this is my problem. All our client-users are mobile user, they all 
have local profiles.
And the need ther profiles back. They don't accept new profiles.
So what do I have to do to use our old profiles.
 

This sounds a lot like your domain SID changed, if you can find your SID 
on a machine you can change it back and probably save yourself some 
headache, assuming you arent already too far converting profiles to go back.

For starters, get the SID your server is currently using for comparison:
net getlocalsid
Search around on some system for the old SID.  There's two places I can 
think of for ease:
1. In the registry, you should see someplace under HKEY-USERS a key tree 
that starts with a SID looking number, 
(S-x-x-xx--x-x- or thereabouts).  Take this 
number, and chop off the last - and you have the domain SID of the 
domain.
2. Look for your c:\Docs and Settings directory and you should see some 
directories for your old user(s).  Look at the properties, security tab 
and the owner should be a SID like in step 1.  Chop off the end - 
data as above.

Once you have the domain SID, issue
net setlocalsid S-x-x-xx-x-xxx-
restart the samba process and see how logins go on a machine you haven't 
touched yet.

--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE [Samba] NFS and ACL

[spu]

Only NFS v4 have acl support !!!

---
Stéphane PURNELLE [EMAIL PROTECTED]
Service Informatique   Corman S.A.   Tel : 00 32 087/342467


   
 Patrick DUBAU 
 <[EMAIL PROTECTED] 
 sace.iufm.fr>   A
 Envoyé par :  samba@lists.samba.org 
 samba-bounces+ste  cc
 phane.purnelle=co   
 [EMAIL PROTECTED]   Objet
 ba.org[Samba] NFS and ACL 
   
   
 29/03/2005 15:01  
   
   
   




Hi,

i still have no response for my problem, so i try again in another way.

i have a share on with i set ACLs. This work fine.
I mount this share with NFS on another server, but the ACL, can't be
seen on the NFS side (i use getfacl)

Is there a way to keep the ACL threw a NFS export ?
Thanks

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Vijay - net_r_sam_logon errors.

[Vijay Kumar]

Hi,

We get the following errors in the current samba domain controller  : 

[2005/03/29 06:16:49, 0] rpc_server/srv_netlog.c:api_net_sam_logon(206)
  api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON.
[2005/03/29 06:16:49, 0] rpc_server/srv_pipe.c:api_rpcTNP(1200)
  api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed.
[2005/03/29 06:29:35, 0] lib/util_sock.c:matchname(900)
  sys_gethostbyname(netapp-ghost): lookup failure.
[2005/03/29 06:29:35, 0] lib/util_sock.c:get_socket_name(967)
  Matchname failed on netapp-ghost 10.10.10.1
[2005/03/29 06:29:35, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(670)
  api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
[2005/03/29 06:35:26, 0] lib/util_sock.c:matchname(900)
  sys_gethostbyname(bhim): lookup failure.
[2005/03/29 06:35:26, 0] lib/util_sock.c:get_socket_name(967)
  Matchname failed on bhim 10.10.10.2
[2005/03/29 06:35:43, 0] smbd/service.c:make_connection(248)
  bhim (172.16.0.196) couldn't find service netlogon
[2005/03/29 06:37:51, 0] lib/util_sock.c:read_data(436)
  read_data: read failure for 4. Error = Connection reset by peer

I have tested the service through other commands like smbclient < share
name> -U < user name > and everything runs perfectly fine. 
Users are able to login with their ID's without any issues. 

Please help me to resolve this error. Whats the cause ? 

Regards,
Vijay Kumar
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba does not 'see' all the cups printers

[Bert_De_Ridder]

Hi, all,

I have a weird problem; I have 3 working cups printers on Suse linux 9.
All 3 are networked printers. 

I use the following statements in smb.conf : 
printing = cups
load printers = yes
printcap name = /etc/printcap

[printers]
comment = SMB Print Spool
path = /var/spool/samba
guest ok = yes
writeable = no
public = yes
printable = yes
browsable = No
printer admin = root, bdridder
use client driver = Yes

this is the content of /etc/printcap

# This file was automatically generated by cupsd(8) from the
# /etc/cups/printers.conf file.  All changes to this file
# will be lost.
HP-Laserjet-4000|Developers gelijkvloers - soms platvloers 
;-):rm=GOSCINNY:rp=HP-Laserjet-4000:
HP-LaserJet-4100|Sales & Marketing:rm=GOSCINNY:rp=HP-LaserJet-4100:
HPCL2500|Colour Laserjet - use only when needed:rm=GOSCINNY:rp=HPCL2500:

If I use printcap name = cups in smb.conf, NO printers show up at all.
If I use /etc/printcap, only HPCL2500 shows up in the Printers folder of 
the server. 

Does anybody have an idea how this can happen ?




Regards,

Bert De Ridder

PeopleWare NV - Head Office
Cdt.Weynsstraat 85 
B-2660 Hoboken 
Tel: +32 3 448.33.38 
Fax: +32 3 448.32.66 

PeopleWare NV - Branch Office Geel
Kleinhoefstraat 5
B-2440 Geel
Tel: +32 14 57.00.90
Fax: +32 14 58.13.25

http://www.peopleware.be 
http://www.mobileware.be 



John H Terpstra <[EMAIL PROTECTED]> 
Sent by: [EMAIL PROTECTED]
16/03/2005 17:34
Please respond to
[EMAIL PROTECTED]


To
samba@lists.samba.org
cc

Subject
Re: [Samba] Samba and LDAP Base DN






Misty,

If your binddn has changed you need to re-run:

 smbpasswd -w 'secret'

to update your secrets.tdb file.

- John T.

On Wednesday 16 March 2005 09:06, Misty Stanley-Jones wrote:
> More info: I tried deleting ou=corp (after making a backup of course) 
and
> still no dice.  As soon as I put back ou=corp and make the baseDN in
> smb.conf ou=corp, everything works.  If I take all the entries under
> ou=corp and copy them one level up, I can't authenticate to Samba 
anymore. 
> It doesn't make any sense.
>
> On Wednesday 16 March 2005 10:57 am, Misty Stanley-Jones wrote:
> > Right now, I have all of my Samba stuff under
> > ou=corp,dc=mycompany,dc=com. I have it this way because there used to
> > also be
> > ou=furn,dc=mycompany,dc=com with a different domain.  Now that I only
> > have one domain, I would like to move everything to 
dc=mycompany,dc=com. 
> > So I copy all of the subentries of ou=corp (ou=computers, ou=people,
> > ou=grooups, and the sambaDomainName entries) to dc=mycompany,dc=com. I
> > change the /etc/ldap.conf files to all point to the new OU.  Perfect. 
> > However when I change the baseDN in my smb.conf, all of a sudden I 
cannot
> > authenticate. Even when doing smbcontrol smbd reload-config.  The only
> > thing I can figure is that it might be doing a 'sub' search and 
finding
> > two entries for my user, because I left the 'ou=corp' DN as it was. Is
> > it that, or is there something else I have to do in order to 
restructure
> > my LDAP tree?
> >
> > TIA,
> > Misty

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Multiple Domain Controller

[Alfred Payne]

Can anyone point me to a howto/tutorial that will help me setup a 
multiple domain controller ie. one samba server - multiple domains

Thanks!
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Re: No vscan HOWTOs?

[mourik jan c heupink]

Does anyone have ANY idea what to put in /etc/magic to identify microsoft 
outlook pst files?

scanning larger pst files (100 mb or so) currently raises my clamd cpu 
processor usage to 90% or higher, and 'locks' ms outlook on the workstation 
during the scan, so I'd rather not scan them and have mcafee on the workstation 
take care of that.

Insight would really be appreciated.

> -Original Message-
> From: heupink, mourik jan c 
> Sent: 29 March 2005 12:56
> To: samba@lists.samba.org
> Subject: RE: [Samba] Re: No vscan HOWTOs?
> 
> 
> I have been trying to find out how to EXCLUDE certain files 
> from scanning.
> 
> Appearentlty it works by MIME-type. You have to configure 
> your own mime type in /etc/magic, and then add that mime type 
> to vscan-clamav.conf
> 
> Has anyone got this working?
> 
> > -Original Message-
> > From: Karl Banasky [mailto:[EMAIL PROTECTED]
> > Sent: 28 March 2005 05:54
> > To: Jim C.
> > Cc: samba@lists.samba.org
> > Subject: Re: [Samba] Re: No vscan HOWTOs?
> > 
> > 
> > I have been installing it on my Centos 4 box.  Got it working on a
> > quarentine bases. That way I can see if it is working 
> > correctly. There 
> > are some test Virus sites available to download a test 
> virus to your 
> > share and see what happens.  Might be dangerous but useful. 
>  I worked 
> > from src.rpms for all of it except samba-vscan.
> > My issues were:
> > 1) Not having the Samba source (configured and make); Solved it by 
> > "rpmbuild -bc samba-src.rpm"(Source showed in the BUILD directory.
> > 2) Not having the socket configured correctly in the 
> "clamd.conf" and 
> > the "vscan-clamav.conf"; Solved it by enabling it in the 
> "clamd.conf" 
> > file and verified same location in the "vscan-clamav.conf" file
> > 3) Build issues with clamav-.src.rpm; solved by yum'ing in 
> > sendmail-devel and sendmail-cf
> > 
> > Other then that it was straight forward.
> > 
> > Jim C. wrote:
> > 
> > > -BEGIN PGP SIGNED MESSAGE-
> > > Hash: SHA1
> > >
> > > [chuckle]
> > >
> > > I think I've got it working.  Apparently one just has to add the
> > > clamav user to the 'Domain Admins' group so that it can do 
> > it's job.
> > > I've been googleing around and it looks like a whole lot of
> > people are
> > > missing this, i.e. that clamav.
> > >
> > > I could use some pointers on how to be sure it is working
> > though. I'm
> > > not seeing it in my logs, but I'm also not sure where to look.
> > >
> > > Jim C.
> > > -BEGIN PGP SIGNATURE-
> > > Version: GnuPG v1.2.5 (MingW32)
> > > Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
> > >
> > > iD8DBQFCR1vV57L0B7uXm9oRAs+cAJ0RrLMa6Ou/RehR0dprQkK6Tjg7lgCfXz5j
> > > /Mtirt+9h7H6w3joPTw22Dc=
> > > =r98u
> > > -END PGP SIGNATURE-
> > >
> > 
> > 
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/listinfo/samba
> > 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] NFS and ACL

[Patrick DUBAU]

Hi,
i still have no response for my problem, so i try again in another way.
i have a share on with i set ACLs. This work fine.
I mount this share with NFS on another server, but the ACL, can't be 
seen on the NFS side (i use getfacl)

Is there a way to keep the ACL threw a NFS export ?
Thanks
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Re: Problems with Excel & MS Word files (still)

[Nathan Vidican]

No confirmation over here, havn't had a chance to compile a new copy -
rolled back to 3.0.8 for the time being it's been less buggy but still have
occasional file(s) locking up.

A little unclear here, do I need to add a patch to 3.0.13 before compiling,
or simply add 'dos filetime = yes' to the configuration?

Lastly, does it matter if I'm not using ACL's? Just using plain old UNIX
permissions (750/660 dir/file) and the force-group parameter for most
shares - which works quite well thus far.

--
Nathan Vidican
[EMAIL PROTECTED]
Windsor Match Plate & Tool Ltd.
http://www.wmptl.com/


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Urs
Rau
Sent: Tuesday, March 29, 2005 5:01 AM
To: samba@lists.samba.org
Subject: [Samba] Re: Problems with Excel & MS Word files (still)


Jeremy or Nathan,

Jeremy Allison wrote:

> Ok, I have a working theory for this. It concerns ACLs and what
> happens when excel wants to update the filetime on a file the user
> doesn't own.
>
> Normally you just set the "dos filetime" parameter to allow this
> (this causes a timestamp to be updated on a file if you can write to
> it - normally POSIX only allows this if you're the owner). I've
> realised the codepath here doesn't check ACL semantics. This is a bug
> we've had since we introduced ACLs a long time ago but only now seems
> to have been triggered.
>
> Here is a patch to the just released 3.0.13 that causes ACL entries
> to be properly checked when "dos filetime= True" has been set.
>
> Please try this on top of 3.0.13 and let me know if it fixes the
> issues.

Has this been confirmed, as fixing it? I am rolling a 3.0.13 maintenance
release and it would be nice to clear this excel ACL bug. What is the
bugzilla entry for this bug, so I can follow it?

Thanks a lot.

Regards,

--
Urs Rau
Head of Operations
Operation Mobilisation
UK National Office

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problem with wbinfo

[Hamish]

On Tuesday 29 March 2005 13:13, Ricardo Maciel wrote:
> Hello,
>
> I'm using a Samba client to access a Samba Server. The "smbclient
> tool" is ok, both at the client as at the server. I'm having trouble
> with the "wbinfo" command (winbind service) at the client, as you can
> see below.
>
> Can anybody help me?
>
> Thanks!!!
>
> =Problem==
>
> Samba Server: samba-3.0.10-1.fc2
> Samba Client: Version 3.0.0-14.3E
> --
> # service winbind start
> Iniciando serviços Winbind:                                [  OK  ]
> #
> #
> # wbinfo -t
> checking the trust secret via RPC calls failed
> error code was NT_STATUS_INTERNAL_ERROR (0xc0e5)
> Could not check secret
> #
> #
> # wbinfo -u
> Error looking up domain users
> #
> #
> # wbinfo -g
> Error looking up domain groups
> #
> #
> # service winbind stop
>
> Desligando os serviços Winbind:                            [  OK  ]

Make sure you do not have nscd running - i had similar problems with it. You 
should be able to do this with `service nscd stop; chkconfig nscd off`
Hope that helps
H


pgpY3hSJ35I9j.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Problem with wbinfo

[Ricardo Maciel]

Hello,

I'm using a Samba client to access a Samba Server. The "smbclient
tool" is ok, both at the client as at the server. I'm having trouble
with the "wbinfo" command (winbind service) at the client, as you can
see below.

Can anybody help me?

Thanks!!!

=Problem==

Samba Server: samba-3.0.10-1.fc2
Samba Client: Version 3.0.0-14.3E
--
# service winbind start
Iniciando serviços Winbind:[  OK  ]
#
#
# wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_INTERNAL_ERROR (0xc0e5)
Could not check secret
#
#
# wbinfo -u
Error looking up domain users
#
#
# wbinfo -g
Error looking up domain groups
#
#
# service winbind stop

Desligando os serviços Winbind:[  OK  ]
#
#
# winbindd -i -d 4
winbindd version 3.0.0-14.3E started.
Copyright The Samba Team 2000-2003
lp_load: refreshing parameters
Initialising global parameters
params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
Processing section "[global]"
doing parameter workgroup = REG
doing parameter netbios name = Estacao1386000
handle_netbios_name: set global_myname to: ESTACAO1386000
doing parameter security = domain
doing parameter password server = *
doing parameter winbind uid = 1000-2
doing parameter winbind gid = 1000-2
doing parameter winbind enum users = yes
doing parameter winbind enum groups = yes
doing parameter winbind separator = +
doing parameter winbind cache time = 10
doing parameter template homedir = /home/winnt/%D/%U
doing parameter winbind use default domain = yes
doing parameter template shell = /bin/bash
pm_process() returned Yes
adding IPC service
adding IPC service
added interface ip=10.80.100.98 bcast=10.80.100.255 nmask=255.255.255.0
added interface ip=10.80.100.98 bcast=10.80.100.255 nmask=255.255.255.0
Registered MSG_REQ_POOL_USAGE
Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
get_dc_list: returning 1 ip addresses in an unordered list
get_dc_list: 10.80.100.62:0
nmb packet from 10.80.100.62(137) header: id=2081 opcode=Query(0) response=Yes
header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes
header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0
answers: nmb_name=REG<1c> rr_type=33 rr_class=1 ttl=0
answers   0 char .PDC   hex 09504443202020202020202020202020
answers  10 char .d.PDC hex 00640050444320202020202020202020
answers  20 char   .d.PDC   hex 20200364005044432020202020202020
answers  30 char  d...__MSBRO   hex 2020202020640001025F5F4D5342524F
answers  40 char WSE__REG   hex 5753455F5F0201E40052454720202020
answers  50 char ...REG hex 202020202020202000E4005245472020
answers  60 char   .d.REG   hex 202020202020202020201B6400524547
answers  70 char ...R   hex 2020202020202020202020201CE40052
answers  80 char EG.d   hex 45472020202020202020202020201D64
answers  90 char .REG   hex 00524547202020202020202020202020
answers  a0 char    hex 1EE4
answers  b0 char    hex 
answers  c0 char    hex 
answers  d0 char .   hex 00
rpc_dc_name: Returning DC PDC (10.80.100.62) for domain REG
IPC$ connections done anonymously
Connecting to host=PDC
Connecting to 10.80.100.62 at port 445
Serverzone is 10800
add_trusted_domain: REG is a mixed (or NT4) mode domain
Added domain REG
Could not fetch sid for our domain REG
scanning trusted domain list
rpc: trusted_domains
get_dc_list: returning 1 ip addresses in an unordered list
get_dc_list: 10.80.100.62:0
nmb packet from 10.80.100.62(137) header: id=30956 opcode=Query(0) response=Yes
header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes
header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0
answers: nmb_name=REG<1c> rr_type=33 rr_class=1 ttl=0
answers   0 char .PDC   hex 09504443202020202020202020202020
answers  10 char .d.PDC hex 00640050444320202020202020202020
answers  20 char   .d.PDC   hex 20200364005044432020202020202020
answers  30 char  d...__MSBRO   hex 2020202020640001025F5F4D5342524F
answers  40 char WSE__REG   hex 5753455F5F0201E40052454720202020
answers  50 char ...REG hex 202020202020202000E4005245472020
answers  60 char   .d.REG   hex 202020202020202020201B6400524547
answers  70 char ...R   hex 2020202020202020202020201CE40052
answers  80 char EG.d   hex 45472020202020202020202020201D64
answers  90 char .REG   hex 00524547202020202020202020202020
answers  a0 char    hex 1EE4
answers  b0 char    hex 

Re: [Samba] A small question on Winbind

[Daniel Amthor]

Am Dienstag 29 MÃrz 2005 13:12 schrieb Hamish:
> > Â Â 2- Get all groups of one username ?
Maybe I'm oversimplifying, but (given nsswitch and all is in place):
# id username
?
HTH 
Dan

-- 
Daniel Amthor   Linux LPI Level 2 Administrator
Im BrÃhl 10t: +49-06173-935960
61476 Kronberg  e: [EMAIL PROTECTED]  ICQ: 196700332
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] printers detect

[Fabio Marcone]

Hi!
I'm designing a web interface to manage samba server (users, shares, printers) 
and I would known how i can detect printers available in samba. In that way, 
admin can set rights and others params of a selected printer.

Thanks,
Fabio
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows XP & greyed-out Guest user password prompt

[Hamish]

On Monday 28 March 2005 20:07, Jules Agee wrote:
> updates]
>
> >         comment = Software Updates
> >         path = /var/local/fileshare/admin/updates
> >         browsable = no
> >         create mask = 774
> >         group = SystemAdmin
> >         directory mask = 0775
> >         nt acl support = no
> >         read only = yes
> >         guest ok = yes

Hi Jules
This may be way off, but i know how frustrating it can be not getting any 
suggestions! I have a samba server with a guest share, the only difference i 
can see is that i have guest only = yes.
Here is one of the read only shares (sanitised):

[guests]
path = /guest/share
guest only = Yes
guest ok = Yes

This works fine from XPSP2 and SP1 clients, the server is security = domain 
though, so this may make a difference, although non-domain machines/users 
connect with no problems to the guest shares.

Hope this helps!
H


pgpSIHb3jtAHD.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] smbd 100% systemload

[Matthias Henze]

hi,
i've a debian sarge setup with samba 3.0.10 with ldap as SAM backend. every 
thing used to work as expected, but last week the machine went down. an 
analysis of the problem has showen, that with increasing uptime there is a 
growing number of smbd processes that caus 100% CPU utilation. tests have 
showen, that i can kill these processes without harming smb conecctivtiy. 
this is a workaround but no soulution.

i've absolutely no idea what causes this and what i can/should do to track 
this down.

any suggestions ?
TIA
Matthias Henze[EMAIL PROTECTED]
Use PGP!! http://www.mhcsoftware.de/MatthiasHenze.asc
- - - - - - - - - - - - - - - - - - - - - - - - - - -
MHC SoftWare GmbH  voice: +49-(0)9533-92006-0
Fichtera 17  fax: +49-(0)9533-92006-6
96274 Itzgrund/Germanye-Mail: [EMAIL PROTECTED]
- - - - - - - - - - - - - - - - - - - - - - - - - - -
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Using Lotus Domino LDAP as Samba Backend

[Norman . Trapp]

Hello,

can I use the Lotus Domino LDAP Server as backend for Samba?
Has anyone tried this, or some experiences in that?


Mit freundlichen Grüssen / Kind regards

Norman Trapp

System Management

objective partner GmbH 
Bergstrasse 45
D-69469 Weinheim

Tel. +49 (0)6201 3986 24
Fax. +49 (0)6201 3986 12
___
objective partner - keep IT in e.motion


Diese eMail enthaelt vertrauliche und/oder rechtlich geschuetzte 
Informationen. Wenn Sie nicht der richtige Adressat sind oder diese eMail 
irrtuemlich erhalten haben, informieren Sie bitte sofort den Absender und 
vernichten Sie diese eMail. Das unerlaubte Kopieren sowie die unbefugte 
Weitergabe dieser eMail ist nicht gestattet.

This email may contain confidential and/or privileged information. If you 
are not the intended recipient (or have received this email in error) 
please notify the sender immediately and destroy this email. Any 
unauthorized copying, disclosure or distribution of the material in this 
email is strictly forbidden.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] A small question on Winbind

[Hamish]

On Tuesday 29 March 2005 08:29, Phibee NOC wrote:
> Hi
> it's possible with wbinfo that get a information:
>
> 1- Get all users of one Active Directory Group
this can be done with getent passwd {groupname} - not sure how to do it with 
wbinfo
> 2- Get all groups of one username ?
Not 100% sure about this, but a start might be getent group | grep {username} 
- im sure a bit of sed would neaten the results

Hope that helps,
H


pgpqtexElI0DE.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Re: No vscan HOWTOs?

[mourik jan c heupink]

I have been trying to find out how to EXCLUDE certain files from scanning.

Appearentlty it works by MIME-type. You have to configure your own mime type in 
/etc/magic, and then add that mime type to vscan-clamav.conf

Has anyone got this working?

> -Original Message-
> From: Karl Banasky [mailto:[EMAIL PROTECTED] 
> Sent: 28 March 2005 05:54
> To: Jim C.
> Cc: samba@lists.samba.org
> Subject: Re: [Samba] Re: No vscan HOWTOs?
> 
> 
> I have been installing it on my Centos 4 box.  Got it working on a 
> quarentine bases. That way I can see if it is working 
> correctly. There 
> are some test Virus sites available to download a test virus to your 
> share and see what happens.  Might be dangerous but useful.  I worked 
> from src.rpms for all of it except samba-vscan.
> My issues were:
> 1) Not having the Samba source (configured and make); Solved it by 
> "rpmbuild -bc samba-src.rpm"(Source showed in the BUILD directory.
> 2) Not having the socket configured correctly in the "clamd.conf" and 
> the "vscan-clamav.conf"; Solved it by enabling it in the "clamd.conf" 
> file and verified same location in the "vscan-clamav.conf" file
> 3) Build issues with clamav-.src.rpm; solved by yum'ing in 
> sendmail-devel and sendmail-cf
> 
> Other then that it was straight forward.
> 
> Jim C. wrote:
> 
> > -BEGIN PGP SIGNED MESSAGE-
> > Hash: SHA1
> >
> > [chuckle]
> >
> > I think I've got it working.  Apparently one just has to add the 
> > clamav user to the 'Domain Admins' group so that it can do 
> it's job.  
> > I've been googleing around and it looks like a whole lot of 
> people are 
> > missing this, i.e. that clamav.
> >
> > I could use some pointers on how to be sure it is working 
> though. I'm 
> > not seeing it in my logs, but I'm also not sure where to look.
> >
> > Jim C.
> > -BEGIN PGP SIGNATURE-
> > Version: GnuPG v1.2.5 (MingW32)
> > Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
> >
> > iD8DBQFCR1vV57L0B7uXm9oRAs+cAJ0RrLMa6Ou/RehR0dprQkK6Tjg7lgCfXz5j
> > /Mtirt+9h7H6w3joPTw22Dc=
> > =r98u
> > -END PGP SIGNATURE-
> >
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Memory Mapped Files

[Graeme Burnett]

Hi

We have a process on Linux (SLES 8.1 AMD64) which is writing data to a
memory mapped file created on a samba partition smbmounted from a windows
server.

The changes show up on the Linux side but are invisible to a process
reading the same file on windows.

I would be grateful if someone could offer and explanation of this behaviour?

Regards

Graeme





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Joining XP machine error

[jan ardosa]

Hi to all. I would like to ask what are the possible or common causes of 
NT_STATUS_NO_SUCH_USER error? I've been reading other post about the subject 
but none has definitive answer to this problem. I cant join an XP machine to 
the domain either manually or thru XP but I can add user account and used the 
account to logon using SSH. BTW, Im using RH9, Samba ver 3.0.11rc1 and openldap 
2.2.23.
 
Many thanks
 
Jan


-
  Yahoo! Messenger - Communicate instantly..."Ping" your friends today! 
Download Messenger Now
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Problems with Excel & MS Word files (still)

[Urs Rau]

Jeremy or Nathan,
Jeremy Allison wrote:
Ok, I have a working theory for this. It concerns ACLs and what 
happens when excel wants to update the filetime on a file the user 
doesn't own.

Normally you just set the "dos filetime" parameter to allow this 
(this causes a timestamp to be updated on a file if you can write to 
it - normally POSIX only allows this if you're the owner). I've
realised the codepath here doesn't check ACL semantics. This is a bug
we've had since we introduced ACLs a long time ago but only now seems
to have been triggered.

Here is a patch to the just released 3.0.13 that causes ACL entries 
to be properly checked when "dos filetime= True" has been set.

Please try this on top of 3.0.13 and let me know if it fixes the 
issues.
Has this been confirmed, as fixing it? I am rolling a 3.0.13 maintenance 
release and it would be nice to clear this excel ACL bug. What is the 
bugzilla entry for this bug, so I can follow it?

Thanks a lot.
Regards,
--
Urs Rau
Head of Operations
Operation Mobilisation
UK National Office
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Very HUGE binaries!?

[Urs Rau]

Urs Rau wrote:
> It would appear that $RPM_OPT_FLAGS is the one that introduces 
"CFLAGS=-O2 -g -march=i386 -mcpu=i686"
>
> Any advice on the cleanest way to reduce the size of the binaries and 
not have them compiled with "-g"?

For now I have added an "ugly" 2-liner to the beginning of the %prep and
%build sections. (in case rpm builders jump straight to the %build section)
# avoid building huge rpms
RPM_OPT_FLAGS=`echo $RPM_OPT_FLAGS | sed s/-g//`
I know I could have either reset my system wide rpmrc or set my own
~/.rpmrc, but I wanted to make sure that anybody that uses my spec file
to rebuild the rpm would also get small binaries and not have to
remember to set their own system or personal rpmrc
Is this all one can do, it feels like an ugly "hack"?
Regards,
Urs Rau
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Very HUGE binaries!?

[Urs Rau]

Gerald (Jerry) Carter wrote:
> Gerald (Jerry) Carter wrote:
> | Toni Verdu Carbo wrote:
> | | Hi!
> | |
> | | I've been compiling Samba 3.0.x on a Solaris 2.6
> | | server using GCC 3.4.1 without any problem until recently...
> | | The problem started with 3.0.12 version, and reproduced in 3.0.13.
> | | Doing "configure" and then "make" produces with these two
> | | versions VERY HUGE binaries!
> |
> | I've tracked down the change to configure.in that caused this.
> | YOu can work around it by either (a) stripping the resulting
> | binaries, (b) manually removing '-g' from the Makefile, or
> | (c) manually setting CFLAGS to any value before running
> | configure.
> |
> | I'll go ahead and fix this in the SAMBA_3_0 svn tree.
>
> Fixed in svn now.  The patch is at
> http://samba.org/~jerry/patches/post-3.0.13/configure_debug.patch
>
>
Thanks for this fix. However on my FC2 I still get huge binaries and as
a consequence huge rpms even after running your patch and then running
autogen.sh in the rpm building.
I have tried inserting "sh autogen.sh" into the samba.spec file instead
of "script/mkversion.h" in the %prep stage.
Also adding --enable-developer=no to the configure lines in %build was
to no avail.
It would appear that $RPM_OPT_FLAGS is the one that introduces
"CFLAGS=-O2 -g -march=i386 -mcpu=i686", so your patch helps set sane 
defaults for normal compiles but does not fix the problem for a rpm build.

Any advice on the cleanest way to reduce the size of the binaries and
not have them compiled with "-g"?
Thanks in advance.
Regards,
Urs Rau
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] samba as domain controller

[ankush grover]

Hey friends,

I want to setup Linux(Samba) as Domain Controller means no more
Windows NT,2k or 2k3 as domain controller.I have mix of windows and
Linux clients and I want these clients to get authentication from the
Linux .Can anybody tell me any tutorial or How to do it.


Thanks & Regards

Ankush
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Client Profile mistake

[Luca Olivetti]

[EMAIL PROTECTED] wrote:
Hello,
after our harwarechrash we had to change the serversystem to another 
hardware.
I copied all necessary samba files (I hope I did)  to the new hardware and 
restarted Samba.
Now when I try to log on the domain the client ist no longer trusted by 
the domain.
When I add the client to the domain to solve these problem, I get an new 
profile after login.
And this is my problem. All our client-users are mobile user, they all 
have local profiles.
And the need ther profiles back. They don't accept new profiles.
So what do I have to do to use our old profiles.
http://msmvps.com/clustering/archive/2004/10/06/15096.aspx ?
This email may contain confidential and/or privileged information. If you 
are not the intended recipient (or have received this email in error) 
please notify the sender immediately and destroy this email.
Mmm, my bit destroyer is broken, and I'm not sure if I'm the intended 
recipient, what should I do now?

Bye
--
Luca Olivetti
Wetron Automatización S.A. http://www.wetron.es/
Tel. +34 93 5883004  Fax +34 93 5883007
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Client Profile mistake

[Norman . Trapp]

Hello,

after our harwarechrash we had to change the serversystem to another 
hardware.
I copied all necessary samba files (I hope I did)  to the new hardware and 
restarted Samba.
Now when I try to log on the domain the client ist no longer trusted by 
the domain.
When I add the client to the domain to solve these problem, I get an new 
profile after login.
And this is my problem. All our client-users are mobile user, they all 
have local profiles.
And the need ther profiles back. They don't accept new profiles.
So what do I have to do to use our old profiles.

Mit freundlichen Grüssen / Kind regards

Norman Trapp

System Management

objective partner GmbH 
Bergstrasse 45
D-69469 Weinheim

Tel. +49 (0)6201 3986 24
Fax. +49 (0)6201 3986 12
___
objective partner - keep IT in e.motion


Diese eMail enthaelt vertrauliche und/oder rechtlich geschuetzte 
Informationen. Wenn Sie nicht der richtige Adressat sind oder diese eMail 
irrtuemlich erhalten haben, informieren Sie bitte sofort den Absender und 
vernichten Sie diese eMail. Das unerlaubte Kopieren sowie die unbefugte 
Weitergabe dieser eMail ist nicht gestattet.

This email may contain confidential and/or privileged information. If you 
are not the intended recipient (or have received this email in error) 
please notify the sender immediately and destroy this email. Any 
unauthorized copying, disclosure or distribution of the material in this 
email is strictly forbidden.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] SaveAs Problems

[Robert Bartl]

Hy,
We've got some weird Problems with SaveAs from all Programs to a Samba 
Server.

The File get's saved but the user get's three Error Messages (Messagebox 
OK) telling him that the file could not be saved.
The Problem is not easily recreateable and appears randomly.

Any Pointers??
Bye, robert.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] the problem of join samba3.0 to windows2000 doamin

[gzis]

when i want to join the samba3.0 server to the win2k domain, it appear the
errors as below:

[EMAIL PROTECTED] samba]# net join -S gz -U is2000
is2000's password: ie2003bd
[2005/03/29 16:14:58, 0] libads/kerberos.c:ads_kinit_password(146)
  kerberos_kinit_password [EMAIL PROTECTED] failed: Cannot find KDC for
requested realm
[2005/03/29 16:14:58, 0] utils/net_ads.c:ads_startup(186)
  ads_connect: Cannot find KDC for requested realm

Unable to find a suitable server

Unable to find a suitable server

my smb.conf is as below:










-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] $BL$>5Bz9-9p"("#DcMx0lK\2=!*#3#0(B$BF|$G

[$B%]%$%s%H%a!<%k(B]

<$BAw?.;v6H$B!!(BDM$BG[?.Be9T!!(BPOINT$B%a!<%k(B
(B<$B=;=j(B> $BBg:eI\4_OBED;T>eLnD.El(B1-26-1011
$B"(J@$K(B
$B!VG[?.ITMW!W$H5-F~$7$F2<5-%"%I%l%9$XAw?.$7$F$/[EMAIL PROTECTED](B
$BG[?.Dd;_(B $B"*!!([EMAIL PROTECTED]
(BURL$B$h$j2r=|"*!!(Bhttp://www.busiassist.com/kaijo/del.cgi
(B
$B!y!y(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,!y(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,!y!y(B
(B
$B"#DcMx0lK\2=!*#3#0F|$Ghttp://www.tsaxis.com/gokuhi/
(B
$B!y!y(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,!y(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,!y!y(B
(B
(B
$B"##3#0F|$GC/$K$bCN$i$l$:http://www.tsaxis.com/gokuhi/
(B
$B$b$7:#!"$"$J$?MM$,!&!&!&(B
$B"#http://www.tsaxis.com/gokuhi/
(B
(B
$Bhttp://www.tsaxis.com/gokuhi/
(B
(B
$B/$7$G$b%W%i%9$K$J$l$P9,$$$G$9!#(B
(B
(B
(Bhttp://www.tsaxis.com/gokuhi/
(B
(B
$B(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,!y(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(B
(B[EMAIL PROTECTED]eLnD.El(B1-26-1011 
$B1D6H;~4V(B: $B7n!AEZ!!(B($B8aA0#9;~$+$i8a8e#6;~!KF|MKF|!&=K:WF|$O5Y6H(B 
$B%"%I%l%9(B:  [EMAIL PROTECTED] 
(BURL:   http://www.busiassist.com 
$B(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,!y(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(B
$BK\%a!<%kITMW$N>l9g2<5-$h$j2r=|$G$-$^$9!#(B
(Bhttp://www.busiassist.com/kaijo/del.cgi
(B
(B-- 
(BTo unsubscribe from this list go to the following URL and read the
(Binstructions:  https://lists.samba.org/mailman/listinfo/samba