Re: [Samba] xfs filesystem corruption

[mourik jan c heupink]

Oops

I worked 14 hours yesterday, and sent this mail to the wrong list

Off course I wanted to send this to the SuSE list, and NOT Samba

I apologise!!

Mourik Jan

gilbertonunes wrote:

Em Ter 12 Jul 2005 20:56, James Peach escreveu:

Hi

Some days ago, I have the same problem with XFS file system...

I just use xfs_repair, after umount the partition...
This's a slow process, so be patience...
I many case, this work very well...
Mount your partition again and there's all your date
I hope :-)

Do you wanna more?
Read man xfs_repair


  

On 7/13/05, mourik jan c heupink <[EMAIL PROTECTED]> wrote:


dear list.

I was just wondering, is there anyone here using sles9 with xfs in an
lvm?

We had severe filesystem corruption on a server today, and only two
things were changed: I updated via yast online update (lot's of updates,
strange enough, including an lvm update) and I had to replace a drive in
my hardware 6 disk raid array. (IBM 5i, raid 5)

Now I was wondering what caused the corruption: the lvm updates, or the
disk change... (or even something else..?) therefore I'm asking here...

Anyone having xfs/lvm problems/corruption after the updates?
  

This could be a lot of things. If you lost a disk, it might be
possible for the volume rebuild to fail. Losing a drive at the same
time as an LVM update sounds a little fishy, but I don't have any
experience with LVM.

You might try asking the XFS folks on [EMAIL PROTECTED] Someone
there will probably have some experience with the XFS/LVM combination.
You'll need to provide the output of xfs_growfs -n for the filesystem
in question, as well as the LVM config details and all the package
version numbers (ie. for the original LVM package and the one you
updated to).

--
James Peach | [EMAIL PROTECTED]



  

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] SUSE 9.3 Winbind+ PAM+AD

[Guille]

Hi Anthony,
Well, I will try and give you my quick and dirty setup for FC3. The
procedure should work with FC4 as well. I don't trust the Samba build Fedora
included with FC4 just yet because of output garbage I received on a
production server while joining the domain. Although the join was
successful, I was troubled by the message.

While I have been able to figure out some of the problems I have had in the
past, I still feel I am a semi-newbie at this stuff. So those who read this
please don't flame me if I am opening up holes in security or making some
other mistake.

My basic setup...

Windows 2000 Server running in Native mode I think (it has been a while).
Fedora core 3, Samba 3.0.14a running in ADS mode with Kerberos, and Pam for
automatic home directory creation.

I am assuming you already have Samba(FC4>client,common,swat,samba)installed
so

Step 1 (Most likely accomplished)
Open the firewall ports tcp 139 & 445, udp 137 & 138, and include the
Windows server in your host file for proper name resolution.

Step 2 (Skip if you choose Server = Domain)
Configure Kerberos 
Edit the following files /etc/krb.conf /etc/krb.realms /etc/krb5.conf
/var/kerberos/krb5kdc/kdc.conf and modify the example.com/EXAMPLE.COM domain
so that they match your Kerberos realm and server. You may only have to
modify krb5.conf and kdc.conf for Kerberos to work properly.

Step 3
Edit /etc/nsswitch.conf and add winbind to passwd and group. 

passwd: files winbind
shadow: files
group:  files winbind

Step 4
Modify pam.d files

/etc/pam.d/login
#%PAM-1.0
auth   required pam_securetty.so
auth   required pam_stack.so service=system-auth
auth   required pam_nologin.so
accountsufficient pam_winbind.so
accountrequired pam_stack.so service=system-auth
password   required pam_stack.so service=system-auth
# pam_selinux.so close should be the first session rule
sessionrequired pam_selinux.so close
sessionrequired pam_stack.so service=system-auth
sessionoptional pam_console.so
# pam_selinux.so open should be the last session rule
sessionrequired pam_selinux.so multiple open

/etc/pam.d/system-auth
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth   required  /lib/security/$ISA/pam_env.so
auth   sufficient/lib/security/$ISA/pam_winbind.so
auth   sufficient/lib/security/$ISA/pam_unix.so likeauth nullok
use_first_pass
auth   required  /lib/security/$ISA/pam_deny.so

account   sufficient/lib/security/$ISA/pam_winbind.so
account   required  /lib/security/$ISA/pam_unix.so
account   sufficient/lib/security/$ISA/pam_succeed_if.so uid < 100 quiet
account   required  /lib/security/$ISA/pam_permit.so

passwordrequisite /lib/security/$ISA/pam_cracklib.so retry=3
passwordsufficient/lib/security/$ISA/pam_unix.so nullok use_authtok
md5 shadow
passwordrequired  /lib/security/$ISA/pam_deny.so
session required  /lib/security/$ISA/pam_limits.so
session required  /lib/security/$ISA/pam_unix.so
  
/etc/pam.d/samba
auth   required /lib/security/pam_stack.so service=system-auth

# Automatic Home Directory Creation
session  sufficient  /lib/security/pam_mkhomedir.so skel=/etc/skel
umask=0022

session  required   /lib/security/pam_stack.so service=system-auth
account  required   /lib/security/pam_stack.so service=system-auth
password required   /lib/security/pam_stack.so service=system-auth


Step 5
Edit smb.conf
[global]
workgroup = (Enter Windows Workgroup Name)
realm = (Enter REALM.NAME in caps)
server string = Samba Server
security = ADS
client schannel = No   (Had to use NO after Windows 2004 SP4 Rollup)
obey pam restrictions = Yes
password server = (Enter Windows server FQDN)
log file = /var/log/samba/%m.log
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = /etc/printcap
logon path = 
preferred master = No
local master = No
domain master = No
dns proxy = No
ldap ssl = no
idmap uid = 1-2
idmap gid = 1-2
template homedir = /home/%U
winbind use default domain = Yes
admin users = "@Domain Admins"
write list = "@Domain Admins"
cups options = raw

[homes]
comment = Home Directories
path = /home/%U
read only = No
create mask = 0760
browseable = No

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No

Step 6
Watch out for SELinux!!! 
For testing purposes, go to console and > setenforce 0
This will disable SELinux (if enabled) for the time being so that the
winbind transactions aren't blocked. setenforce 1 to restart SELinux
protection. To permanently allow the winbind transa

[Samba] McAfee GroupShield Alert

[XRTEASTVirusAlert]

McAfee GroupShield™ Alert 

McAfee GroupShield discovered a problem with the following email. See
your system administrator for further information. 

Date/Time sent: 13 Jul 2005 01:24:48
Subject line: [Samba] Rejected posting to [EMAIL PROTECTED]
From: [EMAIL PROTECTED]
To: samba@lists.samba.org
Action taken: Deleted Message
Reason: Anti-Virus
Rule Group: 


Copyright © 1993-2003, Networks Associates Technology, Inc.
All Rights Reserved.
http://www.mcafeesecurity.com   

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Question regarding printers - problem with current rleease

[Karl Denninger]

Hi folks;

Not sure what's going on here

Running 3.0.14a here, with a fairly default config.  

Base OS is FreeBSD 5.4-STABLE.

FreeBSD 5.4-STABLE #11: Fri Apr  8 09:48:24 CDT 2005 [EMAIL 
PROTECTED]:/usr/obj/usr/src/sys/KSD-SMP 

Here's the output from "testparm"


Load smb config files from /usr/local/etc/smb.conf
Processing section "[homes]"
Processing section "[printers]"
Processing section "[faxserver]"
Processing section "[pics]"
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions
# Global parameters
[global]
workgroup = DENNINGER
server string = Home Office FileServer
interfaces = 192.168.1.0/24
max log size = 50
deadtime = 15
domain logons = Yes
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
remote announce = 192.168.1.255
invalid users = root
hosts allow = 192.168.1.0/255.255.255.0, 127.
printing = bsd
print command = lpr -r -P'%p' %s
lpq command = lpq -P'%p'
lprm command = lprm -P'%p' %j

[homes]
comment = Home Directories
read only = No
browseable = No

[printers]
comment = All Printers
path = /disk/spool/samba
printer admin = @wheel
printable = Yes
browseable = No

[faxserver]
comment = Fax Server Files
path = /disk/system
valid users = system, karl
read only = No
create mask = 0765

[pics]
comment = Picture files
path = /pics
valid users = system, karl
read only = No
create mask = 0765


Ok, now the problem...

Everything works correctly EXCEPT that I cannot see the contents of a print
queue.  I can browse printers (as I specified that was ok), I can connect to
them, .

However, the status comes up as "access denied, unable to connect" when I
look at it from an XP workstation that is signed on and connected to the
printer.  I am completely unable to view the print queue.  Obviously I can't
remove a print job either, since I can't see them.

Local viewing of the queue from Unix works (e.g. "lpq -PLaser" does the
expected thing, and produces the expected output)

Any ideas what I've done wrong?  Read the FAQ and install instructions, I
can't see anything obviously screwed up - and everything else - including
printing itself - works 

Thanks!

--
-- 
Karl Denninger ([EMAIL PROTECTED]) Internet Consultant & Kids Rights Activist
http://www.denninger.netMy home on the net - links to everything I do!
http://scubaforum.org   Your UNCENSORED place to talk about DIVING!
http://homecuda.com Emerald Coast: Buy / sell homes, cars, boats!
http://genesis3.blogspot.comMusings Of A Sentient Mind


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] winbind + pam - caching + intermittant delay ==~ bug?

[Xim Tur i Massanet]

En/na Geoff Oakham ha escrit:
> Hi everybody,
> 
> I think I've found a bug in winbind, or I'm out to lunch and need of
> help.. configuring winbind.  Basically, it's working great except once
> in a while it takes 2-5 minutes for a single authentication.  I've also
> seen symptoms winbind isn't caching credentials.

I had similar symptoms. The problem was that winbind stopped resolving
user and group names for this period. A simple "ps aux" also taked some
minutes if there was a process owned by a domain user.

These delays disappeared after moving security from "domain" to "ads"
and joining the domain as a 2k server. This helped to me.

good luck!

Ximo
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] No Mr. Samba, you are incorrect I do NOT need to change my password

[Steve Jr Ramage]

Basically I migrated my NT4 server to Samba 3 recently. Long story short 
one of the 'secondary accounts' seems to get prompted to change his 
password even with the X set. One of my other accounts seems fine:


Unix username:SJr
NT username:  SJr
Account Flags:[UX ]
Logon time:   Wed, 01 Jun 2005 23:59:57 GMT
Logoff time:  Sat, 08 May 2004 13:04:02 GMT
Kickoff time: Mon, 18 Jan 2038 19:14:07 GMT
Password last set:Fri, 07 Nov 2003 15:57:33 GMT
Password can change:  0
Password must change: Mon, 18 Jan 2038 19:14:07 GMT

Here is the broken account.

Unix username:Work
NT username:  Work
Account Flags:[UX ]
Logoff time:  Mon, 18 Jan 2038 19:14:07 GMT
Kickoff time: Mon, 18 Jan 2038 19:14:07 GMT
Password last set:Thu, 02 Jun 2005 01:07:23 GMT
Password can change:  Thu, 02 Jun 2005 01:07:23 GMT
Password must change: Thu, 14 Jul 2005 23:54:55 GMT

It seems that samba is ignoring the X and just using the Password must 
change field, is this a bug, or am I an idiot?



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] xfs filesystem corruption

[gilbertonunes]

Em Ter 12 Jul 2005 20:56, James Peach escreveu:

Hi

Some days ago, I have the same problem with XFS file system...

I just use xfs_repair, after umount the partition...
This's a slow process, so be patience...
I many case, this work very well...
Mount your partition again and there's all your date
I hope :-)

Do you wanna more?
Read man xfs_repair


> On 7/13/05, mourik jan c heupink <[EMAIL PROTECTED]> wrote:
> > dear list.
> >
> > I was just wondering, is there anyone here using sles9 with xfs in an
> > lvm?
> >
> > We had severe filesystem corruption on a server today, and only two
> > things were changed: I updated via yast online update (lot's of updates,
> > strange enough, including an lvm update) and I had to replace a drive in
> > my hardware 6 disk raid array. (IBM 5i, raid 5)
> >
> > Now I was wondering what caused the corruption: the lvm updates, or the
> > disk change... (or even something else..?) therefore I'm asking here...
> >
> > Anyone having xfs/lvm problems/corruption after the updates?
>
> This could be a lot of things. If you lost a disk, it might be
> possible for the volume rebuild to fail. Losing a drive at the same
> time as an LVM update sounds a little fishy, but I don't have any
> experience with LVM.
>
> You might try asking the XFS folks on [EMAIL PROTECTED] Someone
> there will probably have some experience with the XFS/LVM combination.
> You'll need to provide the output of xfs_growfs -n for the filesystem
> in question, as well as the LVM config details and all the package
> version numbers (ie. for the original LVM package and the one you
> updated to).
>
> --
> James Peach | [EMAIL PROTECTED]

-- 
Acesse o link abaixo para conhecer nossa empresa:
http://www.selbetti.com.br/apresentacao
__


Gilberto Nunes
Administrador de Rede
Selbetti Equip. Escritório
Fone = 441-6034
www.selbetti.com.br
[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Printing Permissions

[Steve Jr Ramage]

I can't seem to print unless I set /var/spool/samba and 
/var/spool/hl1440 to 777, and even then I can't see the printer queue, I 
get 'Access Denied, unable to connect'. Samba, is my NT4 PDC. sjr is an 
admin user. My NT Username is SJr, and my passwd file has an entry for 
SJr as well as sjr (both with the same UID).


Here are the revelant sections of my smb.conf

[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
public = yes
guest ok = yes
writable = no
write list= sjr, SJr
valid users = sjr, SJr
printable = yes

[HL-1440]
comment = Brother HL-1440
printable = yes
path = /var/spool/hl1440/
public = yes
valid users = sjr, SJr
guest ok = yes
printer admin = sjr, SJr
browseable = yes

[print$]
comment = Printer Drivers
path = /etc/samba/drivers/
browseable = yes
guest ok = no
read only = yes

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] xfs filesystem corruption

[James Peach]

On 7/13/05, mourik jan c heupink <[EMAIL PROTECTED]> wrote:
> dear list.
> 
> I was just wondering, is there anyone here using sles9 with xfs in an lvm?
> 
> We had severe filesystem corruption on a server today, and only two
> things were changed: I updated via yast online update (lot's of updates,
> strange enough, including an lvm update) and I had to replace a drive in
> my hardware 6 disk raid array. (IBM 5i, raid 5)
> 
> Now I was wondering what caused the corruption: the lvm updates, or the
> disk change... (or even something else..?) therefore I'm asking here...
> 
> Anyone having xfs/lvm problems/corruption after the updates?

This could be a lot of things. If you lost a disk, it might be
possible for the volume rebuild to fail. Losing a drive at the same
time as an LVM update sounds a little fishy, but I don't have any
experience with LVM.

You might try asking the XFS folks on [EMAIL PROTECTED] Someone
there will probably have some experience with the XFS/LVM combination.
You'll need to provide the output of xfs_growfs -n for the filesystem
in question, as well as the LVM config details and all the package
version numbers (ie. for the original LVM package and the one you
updated to).

-- 
James Peach | [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] unix charset = LOCALE

[Mi]

juliano wrote:

Andrew Bartlett said once that 'unix charset = LOCALE' means to force 
samba to read 'LANG=' from environment.



echo $LANG
en_US



Well, en_US is not UTF8

When i restart smbd/nmbd all my files inside all shares change their 
names.


In which application? On Windows clients? How are the files viewed on 
Unix? In the shell? In KDE or Gnome, if you have it installed?


Can you create new files on Linux correctly?

How are the characters changed?

Do you get UTF8 displayed as plain 8 bit (every accented letter shown as 
2 accented letters, the first one often being an uppercase accented "A")?


What characters do you get, and what should they be?

It's hard to guess what is wrong without having some more info.

Have you tried unix chaset = UTF8 in smb.conf?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] winbind + pam - caching + intermittant delay ==~ bug?

[Geoff Oakham]

Hi everybody,

I think I've found a bug in winbind, or I'm out to lunch and need of 
help.. configuring winbind.  Basically, it's working great except once 
in a while it takes 2-5 minutes for a single authentication.  I've also 
seen symptoms winbind isn't caching credentials.


Here are my details:

* for testing purposes, proftpd was configured only authenticate against 
winbind.  I used this pam config:


   authrequiredpam_winbind.so debug
   account requiredpam_winbind.so debug

* Samba was previously setup to participate in the local domain.  It 
works, you can connect to the file shares and everything's happy.  (The 
configuration file is included below.)


* The domain controllers are running Server 2003, but are otherwise in 
good health.


* There is network activity for each authentication request (successful 
or otherwise).


* There is a log entry on the domain controller for each authentication 
attempt.


* Even with debugging turned on, the logs on the Linux box don't report 
anything insightful.  (Ask me if you want to see them anyways!)


The smb.conf looks like this:

[global]
  workgroup = KEWL
  server string = %h server (Samba %v)
;  wins support = no
  wins server = 10.1.0.2
  dns proxy = no
;  name resolve order = lmhosts host wins bcast
  log file = /var/log/samba/log.%m
  log level = 10
  max log size = 1000
;  syslog only = no
  syslog = 0
  panic action = /usr/share/samba/panic-action %d
  security = domain
  encrypt passwords = true
  passdb backend = tdbsam guest
  obey pam restrictions = yes
  invalid users = root
  passwd program = /usr/bin/passwd %u
  passwd chat = *Enter\snew\sUNIX\spassword:* %n\n 
*Retype\snew\sUNIX\spassword:* %n\n .

  socket options = TCP_NODELAY
;; winbind separator = '\'
  winbind cache time = 300
  template shell = /bin/bash
  template homedir = /home/%D/%U
  idmap uid = 1-2
  idmap gid = 1-2
  winbind use default domain = yes
  password server = 10.1.0.2, 10.1.0.3, *

[shared snipped]
...

If anyone has any suggestions or has had a similar experience, I would 
be happy to hear from you!  Thanks in advance for your help,


Geoff


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Error looking local domain groups

[Xim Tur i Massanet]

Hi all!

I've got a computer with winbind user and group name resolution.

I can list all global groups but I cannot list local domain groups. This
is the error I can see on the log:

[2005/07/12 23:45:52, 1] nsswitch/winbindd_group.c:fill_grent_mem(134)
  could not lookup membership for group rid
S-1-5-21-102064544-280963791-1022575233-31965 in domain UPVNET (error:
NT_STATUS_NO_SUCH_GROUP)


but I can see this group using wbinfo:

$ wbinfo -n "upvnet\ca becarios dsn"
S-1-5-21-102064544-280963791-1022575233-31965 Local Group (4)

$ wbinfo -s S-1-5-21-102064544-280963791-1022575233-31965
UPVNET\CA Becarios DSN 4


Any ideas?

Ximo
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] unix charset = LOCALE

[juliano]

Andrew Bartlett said once that 'unix charset = LOCALE' means to force samba to 
read 'LANG=' from environment.


echo $LANG
en_US



cat /etc/sysconfig/i18n
LANG="en_US.UTF-8"
SUPPORTED="en_US.UTF-8:en_US:en"
SYSFONT="lat1-16"


When i restart smbd/nmbd all my files inside all shares change their names. Its 
looks an charset mis-match for me.

My clients are Windows XP SP2.

My clients are UTF8
My Samba reads charset from Linux
My Linux is 'en_US.UTF-8'

Everything is UTF8? or not?

Why its happens ?

Thanks for any help. Juliano Rodrigues.





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba 3.0.20pre2 Available for Download

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

==
  Sometimes you have to be someone
 else in order to be yourself.
-- Michael Samuel Finn
==
Release Announcements
=
This is a preview release of the Samba 3.0.20 code base and
is provided for testing only.  This release is *not* intended
for production servers.  There has been a substantial amount
of development since the 3.0.14a stable release (and since the
3.0.20pre1 release as well).  We would like to ask the Samba
community for help in testing these changes as we work towards
the next official, production Samba 3.0 release.  This is
the last anticipated preX release before moving onto the
Release Candidate state of testing.

Additional features introduced in Samba 3.0.20pre2 include:

~  o Experimental, asynchronous IO file serving support.
~  o Completed Support for Microsoft Print Migrator.
~  o New Winbind IDmap plugin (ad) for retrieving uid and gid
~from AD servers which maintain the SFU user and group
~attributes.
~  o Rewritten support for POSIX pathnames when utilizing
~the Linux CIFS fs client.


What happened to 3.0.15 - 3.0.19?
==

After some discussion it was deemed that the amount of changes
going into the next Samba 3.0 release needed something to catch
people's attention.  Skipping several releases was chosen as
the best solution with the least overhead.  There will be no
3.0.15 - 3.0.19 ever released.  The next production release
following 3.0.20 should be 3.0.21.

The original announcement about the version number change can
be found in the samba mailing list archives:

http://marc.theaimsgroup.com/?l=samba&m=111721010206997&w=2


Support for Microsoft Print Migrator


Samba 3.0.20pre2 includes full support for migrating printers from
Windows servers or other Samba servers via the Microsoft Print
Migrator tool.  Restoring printers requires a working "add printer
command" defined in smb.conf.  Current; support also allows
administrators to create a master list of printer drivers which
can be restored in bulk on new (or existing) Samba installations.


Asynchronous IO Support
===

Experimental support for async IO has been added to smbd for
certain platforms.  To enable this new feature, Samba must be
compiled to include the --with-aio-support configure option.
In addition, the "aio read size" and "aio write size" to non-zero
values.  See the smb.conf(5) man page for more details on these
settings.



Download Details


The uncompressed tarballs and patch files have been signed
using GnuPG (ID F17F9772).  The source code can be
downloaded from:

http://download.samba.org/samba/ftp/pre/

The release notes are available online at:

http://www.samba.org/samba/ftp/pre/WHATSNEW-3-0-20pre2.txt

Binary packages are available at

http://download.samba.org/samba/ftp/Binary_Packages/

Our Code, Our Bugs, Our Responsibility.
(https://bugzilla.samba.org/)

--Enjoy
The Samba Team
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFC1BJTIR7qMdg1EfYRAkf4AJ9UIZtIQrT+T6RxbCQigBFI0DHFWgCfUskj
Q7n+2kcZnm0B56hixh+JL9U=
=wIfm
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba3, ldap and password expiry

[Adam Tauno Williams]

> New users setup ok and first logon password change works.  Because of
> HIPAA we need the passwords to change every 30 days however this isn't
> happening. 
> I thought that I had this working once upon a time while I was testing
> and getting ready for production but somewhere along the line I must've
> changed something.  At any rate we're moving into production (3
> departments so far!) and this has come to my attention.

Have you tried setting a password change policy via pdbedit?

> Other relevant data:
> ldapsearch -x -b "dc=hrh,dc=org" "(ObjectClass=*)"
> >current_ldapsearch.txt   and looking up my account shows:
> # jslittl, People, hrh.org
> dn: uid=jslittl,ou=People,dc=hrh,dc=org
> objectClass: top
> objectClass: inetOrgPerson
> objectClass: posixAccount
> objectClass: shadowAccount
> objectClass: sambaSamAccount
> cn: jslittl
> sn: jslittl
> uid: jslittl
> uidNumber: 1004
> homeDirectory: /home/jslittl
> loginShell: /bin/bash
> gecos: System User
> sambaSID: S-1-5-21-1418864132-1159184377-506600700-3008
> description: domain admin
> sambaKickoffTime: 0
> sambaPasswordHistory:
> 
>  
> sambaLogonHours: FF
> sambaAcctFlags: [U  ]
> gidNumber: 512
> sambaPrimaryGroupSID: S-1-5-21-1418864132-1159184377-506600700-512
> sambaPwdMustChange: 2147483647

This is way more than 30 days into the future.

> sambaPwdCanChange: 1116358396
> sambaPwdLastSet: 1116358396


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Help replacing Windows 2003 Server

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Pablo Gainza Cirauqui wrote:

| I believe you have to use the samba regedit tool
| to manually disable it.  However you can build up
| a script.  Read the domain controller section
| on the official samba HOWTO.
|
|> Can anyone tell me is there away\if there is a
|> unix version of Microsoft Group Policy or something?
|> I need to stop access to local drives for
|> some users and other things.

I'll bet we could build a gpedit.msc pretty easy
that you could run against remote Windows clients.
If anyone is interested in working on this, let me
know.

And I'll try to get the available projects page
at Samba.org added in the next few days.






cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFC1DHaIR7qMdg1EfYRAv2SAJ93+syvB5vC+PlqHQvVfBtIj3o2PQCgsJj2
Tmtio7UcOt65tCXxHS50LiA=
=ul0o
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] INTERACTIVE logon works, NETWORK logon does not with Samba 3.0.14a

[Constantine Filin]

Greetings -

I have Fedora Core 2 Linux box with Samba 3.0.14a compiled 
and installed there.

Here's output of testparm:


[EMAIL PROTECTED] ~/Downloads/samba-3.0.14a]# /usr/bin/testparm
Load smb config files from /usr/local/samba/lib/smb.conf
Processing section "[homes]"
Processing section "[printers]"
Processing section "[tmp]"
Processing section "[cf]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions

# Global parameters
[global]
 workgroup = INTERMEDIA
 server string = CF LINUX BOX
 password server = None
 smb passwd file = /etc/samba/smbpasswd
 username map = /etc/samba/smbusers
 log level = 10 passdb:5 auth:10
 log file = /var/log/samba/%m.log
 max log size = 200
 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
 printcap name = /etc/printcap
 wins proxy = Yes
 wins server = 207.5.70.254
 hosts allow = 204.147.182.21/255.255.255.0

[homes]
 comment = Home Directories
 read only = No
 browseable = No

[printers]
 comment = All Printers
 path = /var/spool/samba
 printable = Yes
 browseable = No

[tmp]
 comment = Temporary file space
 path = /tmp
 read only = No
 guest ok = Yes

[cf]
 comment = CF Home
 path = /home/cf
 read only = No


Also here is my /etc/samba/smbusers

[EMAIL PROTECTED] /etc/samba]# cat smbusers
root = INTERMEDIA\backup
cf = INTERMEDIA\cf

In smbpasswd I have records for user "cf" and user "root".

I can connect from my Windows 2003 server to share "cf" as user
"INTERMEDIA\cf" when I logon to this Windows station with "INTERACTIVE"
type of logon.

However, when I logon as the same user to the same Windows station with
"NETWORK" type of logon (e.g. to a telnet service), and then from that
Windows station, I cannot connect to the same Samba share on my Linux
box.
The error message I get is "Access Denied".

Further research in the logs shows that when I come to Linux box with
NETWORK logon, Linux box cannot determine that I am coming as
INTERMEDIA\cf user and attempts to connect me to that share as guest,
which is disallowed.
Eventually samba server sends NT_STATUS_ACCESS_DENIED message to the
Windows station. The appropriate log section follows:


[2005/07/12 12:55:22, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
  NativeOS=[Windows Server 2003 3790 Service Pack 1] NativeLanMan=[]
PrimaryDomain=[Windows Server 2003 5.2]
[2005/07/12 12:55:22, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(606)
  Got user=[] domain=[] workstation=[PROMQUEEN] len1=1 len2=0
[2005/07/12 12:55:22, 6] param/loadparm.c:lp_file_list_changed(2707)
  lp_file_list_changed()
  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Tue
Jul 12 11:58:26 2005

[2005/07/12 12:55:22, 5] auth/auth_util.c:make_user_info_map(224)
  make_user_info_map: Mapping user []\[] from workstation [PROMQUEEN]
[2005/07/12 12:55:22, 5] auth/auth_util.c:make_user_info(132)
  attempting to make a user_info for  ()
[2005/07/12 12:55:22, 5] auth/auth_util.c:make_user_info(142)
  making strings for 's user_info struct
[2005/07/12 12:55:22, 5] auth/auth_util.c:make_user_info(184)
  making blobs for 's user_info struct
[2005/07/12 12:55:22, 10] auth/auth_util.c:make_user_info(200)
  made an encrypted user_info for  ()
[2005/07/12 12:55:22, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  Checking password for unmapped user
[EMAIL PROTECTED] with the new password interface
[2005/07/12 12:55:22, 3] auth/auth.c:check_ntlm_password(222)
  check_ntlm_password:  mapped user is: [EMAIL PROTECTED]
[2005/07/12 12:55:22, 10] auth/auth.c:check_ntlm_password(231)


When I connect with INTERACTIVE logon, the same log section looks 
like this:


  user_in_list: checking if user |cf| is in winbind group
|INTERMEDIA\cf|
[2005/07/12 14:05:04, 5] auth/auth_util.c:make_user_info_map(224)
  make_user_info_map: Mapping user [INTERMEDIA]\[cf] from workstation
[PROMQUEEN]
[2005/07/12 14:05:04, 5] auth/auth_util.c:make_user_info(132)
  attempting to make a user_info for cf (cf)
[2005/07/12 14:05:04, 5] auth/auth_util.c:make_user_info(142)
  making strings for cf's user_info struct
[2005/07/12 14:05:04, 5] auth/auth_util.c:make_user_info(184)
  making blobs for cf's user_info struct
[2005/07/12 14:05:04, 10] auth/auth_util.c:make_user_info(200)
  made an encrypted user_info for cf (cf)
[2005/07/12 14:05:04, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  Checking password for unmapped user
[EMAIL PROTECTED] with the new password interface
[2005/07/12 14:05:04, 3] auth/auth.c:check_ntlm_password(222)
  check_ntlm_password:  mapped user is: [EMAIL PROTECTED]
[2005/07/12 14:05:04, 10] auth/auth.c:check_ntlm_password(231)



Question:

How can I connect to Samba shares with NETWORK type of logon?

Thanks in advance.

Constantine
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] xfs filesystem corruption

[mourik jan c heupink]

dear list.

I was just wondering, is there anyone here using sles9 with xfs in an lvm?

We had severe filesystem corruption on a server today, and only two 
things were changed: I updated via yast online update (lot's of updates, 
strange enough, including an lvm update) and I had to replace a drive in 
my hardware 6 disk raid array. (IBM 5i, raid 5)


Now I was wondering what caused the corruption: the lvm updates, or the 
disk change... (or even something else..?) therefore I'm asking here...


Anyone having xfs/lvm problems/corruption after the updates?

Mourik Jan
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] NEWBIE: libsendfile.so.1 missing

[Dave . Turner]

I've installed samba before, but it was an older version. This time I'm
having some trouble. I'm using the Solaris8-Sparc packages from
sunfreeware.com and got the error:
 
/usr/local/samba/sbin/smbd: fatal: libsendfile.so.1:  
 
I made sure that libiconv-1.8-sol8-intel-local was installed and then
reinstalled it anyway, but the libsendfile.so.1 was not located in /usr/bin
where it is located on my other server with the older version of Samba. I
tried manually copying the files over and got this error:
 
fatal: /usr/local/lib/libiconv.so.2: wrong ELF data format: ELFDATA2LSB
 
What could I be screwing up? 
 
Thanks,
Dave
___
The information contained in this message and any attachment may be
proprietary, confidential, and privileged or subject to the work
product doctrine and thus protected from disclosure.  If the reader
of this message is not the intended recipient, or an employee or
agent responsible for delivering this message to the intended
recipient, you are hereby notified that any dissemination,
distribution or copying of this communication is strictly prohibited.
If you have received this communication in error, please notify me
immediately by replying to this message and deleting it and all
copies and backups thereof.  Thank you.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems uploading printer drivers

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Greg Baker wrote:

| I'm using samba v.3.0.10 on Gentoo.
|
| I am using security=user.
|
| Also, as a response to the person who mentioned
| directory permissions...  All  of the directories
| in /var/lib/samba are owned by root:wheel and the
| printer  admin is @wheel.  When I upload the
| drivers, they get owned by  gbaker:cs-study, which
| is my uid and primary gid.  I chmod'd all the
| directories 775, except for /var/lib/samba/private..which
| is 770.
|
| My print$ share is set up as follows..
|
| [print$]
|comment = Printer Driver Download Area
|path = /var/lib/samba/drivers
|browseable = no
|guest ok = no
|read only = yes
|write list = @wheel
|create mask = 0664
|directory mask = 0775

Greg,

In release < 3.0.11 you need to set the printer admin
option in the [global] section of smb.conf to give
user's the necessary permission to update the nt*tdb
files.  CHeck that this is working (sounds like it is).
And make sure that you don't have 'use client driver
= yes' set anywhere in smb.conf.





cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
"I never saved anything for the swim back." Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFC1CqhIR7qMdg1EfYRAtGzAKDVWtcbEdJnH2vizHsbfBPXCbwaMwCg5mJo
zd51hCowuTkRhB+X2K+NYtY=
=AfoQ
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] samba PDC and access to unauthorised shares from w2k client

[J.v.Santen]

I posted this problem before, but still didnt get any solution.
I have a Samba 3.0.14 server as PDC and several w2k clients.
I got a problem when a user tries to access an unauthorised share on the Samba 
server.
Instead of the usual message box 'Access Denied' the user gets a message box 
'Enter network password' on his pc.
When trying to access an unauthorised share on one of the other clients, from 
the same client and with the same user-id i tried to reach the share on the 
Samba server, i get the usual msj box 'Access Denied'.

I dont know what this problem is. Both as well the user and machine have a 
valid account on the PDC.

This problem i never had before with Samba 2.2 and i really have no idea where 
its coming from.
If a user wanna access an unauthorised share the 'Access Denied' has to show up 
in stead of the box asking for name and password, right?
Even if i fill in an user-id which has access rights to this share in the 
format DOMAINNAME\USERNAME and PASSWORD i get a msj box
'The credentials supplied conflict with an existing set of credentials'
Can someone help me with this problem pls. Im really stucked and dont know 
where to look anymore.
If needed i can send log-files, packetdumps and/he smb.conf.

Joshua
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] winbind accepting old passwords

[mcm75]

Hello everyone,

I have winbind running on solaris 9, and it appears to run well. Except for 
after changing a password windows side (or with smbpasswd) then loggin on, ssh 
or dt via winbind accept the old password as well as the new one. While then 
starting a citrix or rdesktop connection confirms that active directory only 
accepts the new password. I am already starting winbind with the -n option to 
stop all caching, any ideas?


PAM Configuration follows...

sshdaccount requisite   pam_roles.so.1
sshdaccount sufficient  pam_winbind.so.1
sshdaccount requiredpam_unix_account.so.1
#
sshdpassword required   pam_dhkeys.so.1
sshdpassword requisite  pam_authtok_get.so.1
sshdpassword requisite  pam_authtok_check.so.1
sshdpassword required   pam_authtok_store.so.1
#sshd   password required   pam_pwexport.so.1 /usr/local/bin/new.test 
try_first_pass
sshdpassword required   pam_winbind.so.1
#
sshdauthrequisite   pam_authtok_get.so.1
#sshd   authrequiredpam_pwexport.so.1 /usr/local/bin/new.test 
try_first_pass
sshdauthsufficient  pam_winbind.so.1
sshdauthrequiredpam_dhkeys.so.1
sshdauthrequiredpam_unix_auth.so.1
#
sshdsession requiredpam_winbind.so.1
sshdsession requiredpam_unix_session.so.1


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] NT4 Server Manager

[Jason Greene]

Where can I get NT4 Server Manager?

All my machines are w2k/XP and my server is Samba 3.x

Do I need NT4 Server Manager? Will the Win2k Server Manager work for 
admining my Samba server?



Regards.

In Christ,

Jason Greene

Angelus Press
IT Manager
2915 Forest Avenue
Kansas City, MO  64109-1516
1.800.966.7337 x306
1.816.753.3557 (fax)
www.angeluspress.org
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] oplocks, QuickBooks (Samba 3)

[Liz Ackerman]

Sorry, didn't mean for that to go to you personally, must remember to choose
reply all and remove personal emails ;o)

I am still curious, I have this for my quickbooks share:

[accting]
comment = Accounting Volume
path = /accting
writeable = yes
valid users = list of valid users
oplocks = no
level2 oplocks = no
force group = group
force user = user
inherit permissions = yes
create mask = 0771
directory mask = 0771
vfs object = recycle:recycle
recycle:repository = .deleted
recycle:keeptree = Yes
recycle:touch = Yes
recycle:versions = Yes

Is there anything in this config you would suggest changing/removing/adding?

Liz

> > Ryan
> >
> > I am continuing to have issues with my users and their Quickbooks
> > application as well as a MS Access shared database.  Can you share
> > with me
> > your setup?  Are your users able to use Quickbooks on a Samba share
> > without
> > corrupting the databases?
>
> Sure, must make the following is in the share dedicated to quickbooks:
>
> oplocks = no
>
> Works fine then, but this disables some caching which will slow down
> other files shared in the same directory.  For now, I'm just creating
> a [quickbooks] share just with Quickbooks inside of it.
>
> Also, I would re-post this question on the list... not just to me.
> It demonstrates other people are having issues and reinforces my
> question.
>
> >
> > I haven't used any previous versions of Samba, and we're on Samb
> > 3.0.14 a
> > RedHat ES installation.
> >
> > Thanks, appreciate any feedback you can provide!
> >
> > Liz
> >

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba3, ldap and password expiry

[John Little]

Hi all!

We are using 1 Samba PDC and 2 bdc (Version
3.0.15pre3-SVN-build-UNKNOWN-PS-SuSE) with openldap2-2.2.6-37.38 on
SLES 9.

New users setup ok and first logon password change works.  Because of
HIPAA we need the passwords to change every 30 days however this isn't
happening. 

I thought that I had this working once upon a time while I was testing
and getting ready for production but somewhere along the line I must've
changed something.  At any rate we're moving into production (3
departments so far!) and this has come to my attention.

Other relevant data:
ldapsearch -x -b "dc=hrh,dc=org" "(ObjectClass=*)"
>current_ldapsearch.txt   and looking up my account shows:
# jslittl, People, hrh.org
dn: uid=jslittl,ou=People,dc=hrh,dc=org
objectClass: top
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
cn: jslittl
sn: jslittl
uid: jslittl
uidNumber: 1004
homeDirectory: /home/jslittl
loginShell: /bin/bash
gecos: System User
sambaSID: S-1-5-21-1418864132-1159184377-506600700-3008
description: domain admin
sambaKickoffTime: 0
sambaPasswordHistory:

 
sambaLogonHours: FF
sambaAcctFlags: [U  ]
gidNumber: 512
sambaPrimaryGroupSID: S-1-5-21-1418864132-1159184377-506600700-512
sambaPwdMustChange: 2147483647
sambaPwdCanChange: 1116358396
sambaPwdLastSet: 1116358396
displayName: little, john
sambaProfilePath: \\hrhdc01\profiles\jslittl

from smbldap-tools.conf:
defaultMaxPasswordAge="30" under the Unix Accounts Configuration
We are using smbldap-tools-0.9.1-1 for this.

Please let me know what else to check/change for this to work.

Regards,
John Little
Hendricks Regional Health
[EMAIL PROTECTED]




Sell on Yahoo! Auctions – no fees. Bid on great items.  
http://auctions.yahoo.com/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba installation

[Stéphane Purnelle]

WINTERBERGER, JOHN A - SSD a écrit :


New to Samba and Linux.

I loaded Samba 3.0.14a
ran ./configure
ran make
ran make install
edited /etc/samba/smb.conf to what I want

I try and run usr/local/samba/bin/smbd -d and I get bash command not
found

What do I need to do?

Thanks!
John W.




This e-mail and any files transmitted with it are proprietary and intended 
solely for the use of the individual or entity to whom they are addressed. If 
you have received this e-mail in error please notify the sender. Please note 
that any views or opinions presented in this e-mail are solely those of the 
author and do not necessarily represent those of ITT Industries, Inc. The 
recipient should check this e-mail and any attachments for the presence of 
viruses. ITT Industries accepts no liability for any damage caused by any virus 
transmitted by this e-mail.

 


The exact command line is :

/usr/local/samba/sbin/smbd -d

--
Stéphane Purnelle <[EMAIL PROTECTED]>
Site Web : http://www.linuxplusvalue.be

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba installation

[WINTERBERGER, JOHN A - SSD]

New to Samba and Linux.

I loaded Samba 3.0.14a
ran ./configure
ran make
ran make install
edited /etc/samba/smb.conf to what I want

I try and run usr/local/samba/bin/smbd -d and I get bash command not
found

What do I need to do?

Thanks!
John W.




This e-mail and any files transmitted with it are proprietary and intended 
solely for the use of the individual or entity to whom they are addressed. If 
you have received this e-mail in error please notify the sender. Please note 
that any views or opinions presented in this e-mail are solely those of the 
author and do not necessarily represent those of ITT Industries, Inc. The 
recipient should check this e-mail and any attachments for the presence of 
viruses. ITT Industries accepts no liability for any damage caused by any virus 
transmitted by this e-mail.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems uploading printer drivers

[Greg Baker]

On July 12, 2005 12:06 pm, Gerald (Jerry) Carter wrote:
> Greg Baker wrote:
> | I'm having trouble uploading printer drivers using Windows
> | XP's APW.  Since  I'm not sure where to look for a
> | solution, perhaps someone here can help.
> |
> | I've tried a few different procedures, but I'll only
> | describe one here.
> |
> | 1) browse to the samba server in windows xp
> | 2) double click on "Printers & Faxes"
> | 3) right click on some blank window area and select "Server Properties"
> | 4) click on the drivers tab
> | 5) click on Add...
> | 6) select the driver for the printer in question
> |
> | Once I select the drivers it appears to upload them to
> | the server.  However, after the progress bar finishes
> | I get the following error:
> |
> | The drivers list was not refreshed.  The driver data may be invalid.
> | Windows cannot locate a suitable printer driver.  Contact your
> | administrator for help locating and installing a suitable driver.
>
> What version of Samba are you using ?  And make sure that you
> are not using 'security = share' since its not really a supported
> configuration when it comes to point-n-print.
>

I'm using samba v.3.0.10 on Gentoo.

I am using security=user.

Also, as a response to the person who mentioned directory permissions...  All 
of the directories in /var/lib/samba are owned by root:wheel and the printer 
admin is @wheel.  When I upload the drivers, they get owned by 
gbaker:cs-study, which is my uid and primary gid.  I chmod'd all the 
directories 775, except for /var/lib/samba/private..which is 770.

My print$ share is set up as follows..

[print$]
   comment = Printer Driver Download Area
   path = /var/lib/samba/drivers
   browseable = no
   guest ok = no
   read only = yes
   write list = @wheel
   create mask = 0664
   directory mask = 0775

Thanks again to everyone.
Greg
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Permissions/ACLs change from Windows

[Pierre Dehaen]

Hi,

Let's try during US office hours.;-)

I'm sorry to nearly spam you all with this but I can't imagine I'm the only one 
having the problem. I use the simplest config: standalone server, no domain, 
no AD, no ldap, no winbindd. You'll find hereafter my two previous 
unanswered mails describing the problem. Please help.

Regards,
Pierre

On 28 Jun 2005 at 17:35, Pierre Dehaen wrote:
> Hi, 
> 
> After three days of googling, searching in this list, reading parts of the 
> pdf, and testing, I  surrender: please help ! 
> 
> Summary: 
> I'm running 3.0.10a (binary from www.sunfreeware.com) on Solaris 
> 2.6 in standalone  mode (security=user). I use ACLs on files. I cannot, 
> from windows (w2k, wxp pro), add  a user to the permissions of a file. 
> 
> 
> Details: 
> - The binary was compiled --with-acl-support as "smbd -b|grep ACL" 
> and the  sunfreeware site confirm. 
> 
> - Solaris UFS supports ACLs. 
> 
> - I don't use winbindd 
> 
> - This is my smb.conf: 
> [global] 
> workgroup = UNIX 
> server string = Samba Server 3.0 
> interfaces = x.x.x.x 
> map to guest = Bad User 
> username map = /usr/local/samba/private/users.map 
> log level = 4 
> log file = /usr/local/samba/var/log.%m 
> max log size = 500 
> deadtime = 30 
> keepalive = 0 
> dns proxy = No 
> ldap ssl = no 
> idmap uid = 1-2 
> idmap gid = 1-2 
> 
> - The users.map did not exist at the beginning, but, as the PDF 
> examples have one, I  created it with: 
> root = Administrator 
> 
> - My users do exist on Solaris and are the same as the Windows users. 
> 
> - The users were added on Samba with smbpasswd -a. 
> 
> - My groups are mapped: 
> # net groupmap list | sort 
> Account Operators (S-1-5-32-548) -> -1 
> Administrators (S-1-5-32-544) -> -1 
> Backup Operators (S-1-5-32-551) -> -1 
> Domain Admins (S-1-5-21-3464024308-2102256894-3995807409-512) -> root 
> Domain Guests (S-1-5-21-3464024308-2102256894-3995807409-514) -> nobody 
> Domain Users (S-1-5-21-3464024308-2102256894-3995807409-513) -> staff 
> Engineer (S-1-5-21-3464024308-2102256894-3995807409-1305) -> engineer 
> Guests (S-1-5-32-546) -> -1 
> Inter (S-1-5-21-3464024308-2102256894-3995807409-1323) -> inter 
> Power Users (S-1-5-32-547) -> -1 
> Print Operators (S-1-5-32-550) -> -1 
> Replicators (S-1-5-32-552) -> -1 
> System Operators (S-1-5-32-549) -> -1 
> Users (S-1-5-32-545) -> -1 
> 
> - A share is defined: 
> [home1] 
> path = /export/home1 
> read only = No 
> guest ok = Yes 
> 
> - A file is created on the share: 
> # touch /export/home1/test 
> # chown vincent:engineer /export/home1/test 
> # ls -l /export/home1/test 
> -rw-rw-r--   1 vincent   engineer   0 Jun 28 15:50 /export/home1/test 
> 
> - From Windows 2K, when I right-click properties, Security, I can see 
> the current  permissions: 
> Engineer (SERVER_NAME\Engineer) 
> Everyone 
> Vincent X (SERVER_NAME\Vincent) 
> 
> - Clicking on Advanced shows the permissions (respectively Special, 
> Read, Special).  Click Cancel to come back to the Security tab. 
> 
> - But when I click on Add, I receive a window saying "You are logged 
> with an account  that does not have access to: SERVER_NAME. Enter 
> the name and password of an  account with permissions for this 
> domain and click ok." 
> 
> - The equivalent test on WinNT4 (Properties, Security, Permissions, 
> Add, Show users  works, Click on a user, Add, Read, Ok) works very 
> well: an acl is created on the file. 
> 
> 
> What's going on ??? I raised the debug level to 3, 4, even 10 but I can't 
> catch anything  useful (to me). 
> 
> TIA for any help, 
> Pierre 
> 
> 
> I hope this is not too long but a level 4 log gives (at the moment I click 
> on the Add  button): 
> [2005/06/28 16:16:02, 3] smbd/process.c:process_smb(1091) 
>   Transaction 2072 of length 88 
> [cut - see original message of June 28th for details]



On 29 Jun 2005 at 10:49, Pierre Dehaen wrote:
> Hi again,
> 
> FYI here are some links talking about the same problem (but no answer):
> 
> 
> 
> 
> Note that on WinNT4 I can partially add permissions to a file: I see the 
> users 
> when I click on "Show users" and I can use them but I cannot see the groups 
> that are available on the Samba server.
> 
> Note also that I see exactly the same when I try to connect a W2K to another 
> W2K (both standalone computers): although I'm connected to the share with 
> a username of the server, from the client I cannot change the permissions on 
> any file of the server !!!
> 
> So I have a basic question now: Is it simply possible, from a W2K/XP, to 
> change the permissions of a file on a share of a standalone server, i.e. 
> without bot

Re: [Samba] Samba PDC problem

[John H Terpstra]

Folks,

The disabling of sign'n'seal and s-channel support is a BAD idea. It is also 
completely unnecessary if you are using Samba-3 correctly.

- John T.

On Tuesday 12 July 2005 08:32, Louis van Belle wrote:
> what you need is a reg file..
>
> like this.
> /CUT HERE and remove this line
> REGEDIT4
>
> ;--MUST
> ; do not roam the following folders
> [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
> "ExcludeProfileDirs"="Temporary Internet Files;History;Temp"
>
> ;--MUST
> ; force Windows XP Professional clients to accept Samba as a PDC
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
> "requiresignorseal"=dword:
> "signsecurechannel"=dword:
>
> ;--MUST
> ; Do not check for user ownership of Roaming Profile Folders
> [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
> "CompatibleRUPSecurity"=dword:0001
>
> ;--OPTIONAL
> ; settings for explorer, full path in header
>
> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Cabin
>e tState]
> "Settings"=hex:0c,00,02,00,0b,01,00,20,60,00,00,00
> "FullPath"=dword:0001
> "FullPathAddress"=dword:0001
>
> ;--OPTIONAL
> ; more custom settings for explorer
>
> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advan
>c ed]
> "Hidden"=dword:0002
> "ShowCompColor"=dword:
> "HideFileExt"=dword:
> "DontPrettyPath"=dword:
> "ShowInfoTip"=dword:0001
> "HideIcons"=dword:
> "MapNetDrvBtn"=dword:
> "WebView"=dword:
> "Filter"=dword:
> "SuperHidden"=dword:0001
> "SeparateProcess"=dword:0001
> "StartMenuInit"=dword:0001
> "ShowSuperHidden"=dword:0001
> "ClassicViewState"=dword:0001
>
> ;OPTIONAL--
> ; show the current user and machine name below the My Computer icon
> ; if you look at this with the regedit it looks much less frigtening
>
> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID
>\ {20D04FE0-3AEA-1069-A2D8-08002B30309D}]
> @=hex(2):25,55,53,45,52,4e,41,4d,45,25,20,25,43,4f,4d,50,55,54,45,52,4e,41,
>4 d,\
>   45,25,20,25,55,53,45,52,44,4f,4d,41,49,4e,25,00
>
> ;-OPTIONAL-
> ; configure the desktop in a sensile manner ... smaller decorations
> ; smooth fonts, no animation
>
>
> [HKEY_CURRENT_USER\Control Panel\Desktop]
> "FontSmoothing"="2"
> "UserPreferencesMask"=hex:90,32,00,80
> "SmoothScroll"=dword:
>
> [HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics]
> "BorderWidth"="0"
> "CaptionHeight"="-270"
> "CaptionWidth"="-270"
> "IconSpacing"="-1125"
> "IconTitleWrap"="1"
> "IconVerticalspacing"="-1125"
> "MenuHeight"="-240"
> "MenuWidth"="-240"
> "ScrollHeight"="-210"
> "ScrollWidth"="-210"
> "Shell Icon BPP"="16"
> "SmCaptionHeight"="-225"
> "SmCaptionWidth"="-225"
> "MinAnimate"="0"
> ;-END
> /CUT HERE and remove this line
>
> >-Oorspronkelijk bericht-
> >Van: [EMAIL PROTECTED]
> >[mailto:[EMAIL PROTECTED]
> >Namens Martin Petersen
> >Verzonden: dinsdag 12 juli 2005 16:26
> >Aan: samba@lists.samba.org
> >Onderwerp: Re: [Samba] Samba PDC problem
> >
> >Hi Nicola,
> >
> >with WinNT, Win2k or WinXP I need to change some permissions.
> >Start on the client machines the Group Policy editor (gpedit.msc) and
> >try to find the switch "Don't check for permissions on profile".
> >
> >I'am sorry but I don't own a Win32 machine right now.
> >
> >Your problem is that the Windows internal permission check
> >fails on the
> >Samba PDC profile.
> >
> >Hope I could help.
> >
> >Martin Petersen
> >--
> >To unsubscribe from this list go to the following URL and read the
> >instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba PDC problem

[John H Terpstra]

Martin,

None of these changes are necessary if the Samba 3.0.x server is correctly 
configured. I have extensively documented Samba PDC configuration in my book 
"Samba-3 by Example". This book can be obtained from:

http://www.samba.org/samba/docs/Samba3-ByExample.pdf

PS: This is part of the official Samba documentation. I would like to believe 
that it is up to date, given that I spent the past 5 months full-time 
updating all the official documentation.

If there are problems with the documentation (and I am not say claiming that 
they are error or defect-free) please let me know so it can be fixed.

- John T.

On Tuesday 12 July 2005 08:31, Martin Petersen wrote:
> Hi Nicola (again :),
>
> found what You were looking for:
>
>
> Some information I found in the Unofficial Samba HowTo
> (http://hr.uoregon.edu/davidrl/samba.html) on XP Pro clients.
>
> Extract from there follows:
>
> ## EXTRACT ##
>
> Windows XP Clients
>
> To force Windows XP Professional clients to accept Samba as a PDC, use
> the built-in XP Group Policy editor (gpedit.msc) and locate the Computer
> Configuration\Windows Settings\Security Settings\Local Policies\Security
> Options branch. Make sure to disable the following policies:
>
> Domain Member: Digitally encrypt or sign secure channel data (always)
> Domain Member: Digitally sign secure channel data (when possible)
>
> Alternately, you can make the following change to the registry:
>
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
> "requiresignorseal"=dword:
> "signsecurechannel"=dword:
>
> To disable annoying Event Viewer notifications about "Automatic
> ertificate enrollment for local system failed to contact the active
> directory" every eight hours, locate the Computer Configuration\Windows
> Settings\Security Settings\Public Key Policies branch and select "Do not
> enroll certificates automatically" under Autoenrollment Settings. Note
> that this policy won't be available until after the XP machine has
> joined the domain.
>
> If you'd like to use Roaming Profiles with Windows XP clients that have
> Service Pack 1 or later installed, use the built-in XP Group Policy
> editor (gpedit.msc) and locate the Computer Configuration\Administrative
> Templates\System\User Profiles branch. This is described in Microsoft's
> Technet Q327462. Make sure to enable the following policy:
>
> Do not check for user ownership of Roaming Profile Folders
>
> Alternately, you can make the following change to the registry:
>
> [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
> "CompatibleRUPSecurity"=dword:0001
>
> Alternately as well, you can make the following addition to your
> smb.conf file:
>
> [profile]
> profile acls = yes
>
> Windows XP Home Edition does not support logging into a Primary Domain
> Controller, so you'll have to use Windows XP Professional instead.
>
> ## END EXTRACT ##
>
> Ciao,
>
> Martin

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba PDC problem

[Nicola Murino]

Sorry, I haven't seen this

thanks for help
Nicola


John H Terpstra ha scritto:

>On Tuesday 12 July 2005 01:50, Nicola Murino wrote:
>  
>
>>My clients are windows xp sp2, however there is the same function:
>>
>>Start->Run->gpedit.msc
>>LocalComputerPolicy -> ComputerConfiguration
>>AdministrativeTemplates -> System -> User Profile -> Do not check for
>>user ownership of Roaming profiles set to enable
>>
>>now a basic PDC works :-),
>>
>>thanks
>>Nicola
>>
>>P.S. If this is a common problem (I have this issue with different samba
>>versions on different distributions) maybe would be a good idea insert
>>this issue in samba faq or in documentation such as samba by example or
>>other samba official doc (excuse me if it is already inserted)
>>
>>
>
>Please refer to the book, "The Official Samba-3 HOWTO and Reference Guide", 
>second edition, Chapter 26, Section 26.2.2.3.
>
>This book is being printed and is due to be released at LinuxWorld San 
>Francisco. You can obtain a PDF of it from:
>http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
>
>Cheers,
>John T.
>
>  
>
>>Пустовалов Леонид Тимофеевич ha scritto:
>>
>>
>>>Hello Nicola,
>>>
>>>Monday, July 11, 2005, 8:16:16 PM, you wrote:
>>>
>>>if client = windows 2000
>>>try to Start -> Run -> gpedit.msc
>>>LocalComputerPolicy -> ComputerConfiguration ->
>>>AdministrativeTemplates -> System -> Logon -> Do not check for user
>>>ownership of Roaming profiles
>>>set to Enable
>>>
>>>NM> Hi all,
>>>
>>>NM> I'm trying to configure samba as PDC, I have a problem when windows
>>>NM> client log in this is the error:
>>>
>>>NM> Windows cannot load the profile and is logging you on with a temporary
>>>NM> profile. Changes you make to this profile will be lost when  you log
>>>off
>>>
>>>NM> I have samba-3.0.11 and smbldap-tools-0.8.8. I tryed also samba-3.0.14
>>>NM> and smbldap-tools-0-9.1, I have the same problem on Gentoo and on
>>>Fedora NM> Core4
>>>
>>>NM> my configuration file
>>>
>>>NM> smb.conf:
>>>
>>>NM> [global]
>>>NM> workgroup = THEOREMATICA
>>>NM> netbios name = FERRARI
>>>NM> enable privileges = yes
>>>NM> interfaces = 10.88.77.201
>>>NM> bind interfaces only = yes
>>>NM> username map = /etc/samba/smbusers
>>>NM> server string = Samba PDC Server
>>>NM> hosts allow = 10.88.77.0/24 127.0.0.0/8
>>>NM> security = user
>>>NM> encrypt passwords = Yes
>>>NM> min passwd length = 3
>>>NM> obey pam restrictions = No
>>>NM> #unix password sync = Yes
>>>NM> #passwd program = /usr/sbin/smbldap-passwd -u %u
>>>NM> #passwd chat = "Changing password for*\nNew password*" %n\n
>>>NM> "*Retype new password*" %n\n"
>>>NM> ldap passwd sync = Yes
>>>NM> log level = 0
>>>NM> syslog = 0
>>>NM> log file = /var/log/samba/log.%m
>>>NM> max log size = 10
>>>NM> time server = Yes
>>>NM> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>>>NM> mangling method = hash2
>>>NM> Dos charset = 850
>>>NM> Unix charset = ISO8859-1
>>>
>>>NM> logon script = STARTUP.BAT
>>>NM> #logon script =
>>>NM> #logon drive = H:
>>>NM> logon drive =
>>>NM> #logon home = \\%L\%U
>>>NM> logon home =
>>>NM> #logon path = \\%L\profiles\%U
>>>NM> logon path =
>>>
>>>NM> domain logons = Yes
>>>NM> #os level = 65
>>>NM> os level = 200
>>>NM> preferred master = Yes
>>>NM> domain master = Yes
>>>NM> wins support = Yes
>>>NM> name resolve order = wins lmhosts hosts bcast
>>>NM> dns proxy = no
>>>NM> passdb backend = ldapsam:ldap://127.0.0.1/
>>>NM> # passdb backend = ldapsam:"ldap://127.0.0.1/
>>>NM> ldap://slave.idealx.com";
>>>NM> # ldap filter = (&(objectclass=sambaSamAccount)(uid=%u))
>>>NM> ldap admin dn = cn=Manager,dc=theorematica,dc=it
>>>NM> ldap suffix = dc=theorematica,dc=it
>>>NM> ldap group suffix = ou=Groups
>>>NM> ldap user suffix = ou=Users
>>>NM> ldap machine suffix = ou=Computers
>>>NM> ldap idmap suffix = ou=Users
>>>NM> #ldap ssl = start tls
>>>NM> add user script = /usr/sbin/smbldap-useradd -m "%u"
>>>NM> ldap delete dn = Yes
>>>NM> #delete user script = /usr/sbin/smbldap-userdel "%u"
>>>NM> add machine script = /usr/sbin/smbldap-useradd -w "%u"
>>>NM> add group script = /usr/sbin/smbldap-groupadd -p "%g"
>>>NM> #delete group script = /usr/sbin/smbldap-groupdel "%g"
>>>NM> add user to group script = /usr/sbin/smbldap-groupmod -m "%u"
>>>"%g" NM> delete user from group script =
>>>/usr/sbin/smbldap-groupmod -x NM> "%u" "%g"
>>>NM> set primary group script = /usr/sbin/smbldap-usermod -g "%g"
>>>"%u"
>>>
>>>NM> # printers configuration
>>>NM> printer admin = @"Print Operators"
>>>NM> load pr

Re: [Samba] Problems uploading printer drivers

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Greg Baker wrote:
| I'm having trouble uploading printer drivers using Windows
| XP's APW.  Since  I'm not sure where to look for a
| solution, perhaps someone here can help.
|
| I've tried a few different procedures, but I'll only
| describe one here.
|
| 1) browse to the samba server in windows xp
| 2) double click on "Printers & Faxes"
| 3) right click on some blank window area and select "Server Properties"
| 4) click on the drivers tab
| 5) click on Add...
| 6) select the driver for the printer in question
|
| Once I select the drivers it appears to upload them to
| the server.  However, after the progress bar finishes
| I get the following error:
|
| The drivers list was not refreshed.  The driver data may be invalid.
| Windows cannot locate a suitable printer driver.  Contact your
| administrator for help locating and installing a suitable driver.

What version of Samba are you using ?  And make sure that you
are not using 'security = share' since its not really a supported
configuration when it comes to point-n-print.





cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
"I never saved anything for the swim back." Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFC09V2IR7qMdg1EfYRAiEVAKDTgcmRzqg6PG/Ddgtydkz3HxEDswCdH7bS
FN00H8FfBAeXvSDD7p79c+U=
=O2mj
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems uploading printer drivers

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Louis van Belle wrote:
| didnt you see my post before..
|
|> 1) browse to the samba server in windows xp
|> 2) double click on "Printers & Faxes"   
|> 3) right click on some blank window area and
|>select "Server Properties"  =>
| = wrong, right = select a printer queue, right
| klik and first klik NO !!!

Actually the server properties work fine.  It does the
same action as uploading via the printer properties
"New Driver" button but without bind the driver to a
specific printer.





cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
"I never saved anything for the swim back." Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFC09TdIR7qMdg1EfYRAiTaAJ9b/lZqJvBnwrWLw0EmFAUrKEph0wCffMQk
2l1pvcazItEAXIGDwwMDBxI=
=L55D
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba PDC problem

[Louis van Belle]

what you need is a reg file.. 

like this.
/CUT HERE and remove this line
REGEDIT4

;--MUST
; do not roam the following folders
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"ExcludeProfileDirs"="Temporary Internet Files;History;Temp"

;--MUST
; force Windows XP Professional clients to accept Samba as a PDC
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
"requiresignorseal"=dword:
"signsecurechannel"=dword: 

;--MUST
; Do not check for user ownership of Roaming Profile Folders
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"CompatibleRUPSecurity"=dword:0001

;--OPTIONAL
; settings for explorer, full path in header

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Cabine
tState]
"Settings"=hex:0c,00,02,00,0b,01,00,20,60,00,00,00
"FullPath"=dword:0001
"FullPathAddress"=dword:0001

;--OPTIONAL
; more custom settings for explorer

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanc
ed]
"Hidden"=dword:0002
"ShowCompColor"=dword:
"HideFileExt"=dword:
"DontPrettyPath"=dword:
"ShowInfoTip"=dword:0001
"HideIcons"=dword:
"MapNetDrvBtn"=dword:
"WebView"=dword:
"Filter"=dword:
"SuperHidden"=dword:0001
"SeparateProcess"=dword:0001
"StartMenuInit"=dword:0001
"ShowSuperHidden"=dword:0001
"ClassicViewState"=dword:0001

;OPTIONAL--
; show the current user and machine name below the My Computer icon
; if you look at this with the regedit it looks much less frigtening

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\
{20D04FE0-3AEA-1069-A2D8-08002B30309D}]
@=hex(2):25,55,53,45,52,4e,41,4d,45,25,20,25,43,4f,4d,50,55,54,45,52,4e,41,4
d,\
  45,25,20,25,55,53,45,52,44,4f,4d,41,49,4e,25,00

;-OPTIONAL-
; configure the desktop in a sensile manner ... smaller decorations
; smooth fonts, no animation


[HKEY_CURRENT_USER\Control Panel\Desktop]
"FontSmoothing"="2"
"UserPreferencesMask"=hex:90,32,00,80
"SmoothScroll"=dword:

[HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics]
"BorderWidth"="0"
"CaptionHeight"="-270"
"CaptionWidth"="-270"
"IconSpacing"="-1125"
"IconTitleWrap"="1"
"IconVerticalspacing"="-1125"
"MenuHeight"="-240"
"MenuWidth"="-240"
"ScrollHeight"="-210"
"ScrollWidth"="-210"
"Shell Icon BPP"="16"
"SmCaptionHeight"="-225"
"SmCaptionWidth"="-225"
"MinAnimate"="0" 
;-END
/CUT HERE and remove this line



>-Oorspronkelijk bericht-
>Van: [EMAIL PROTECTED] 
>[mailto:[EMAIL PROTECTED] 
>Namens Martin Petersen
>Verzonden: dinsdag 12 juli 2005 16:26
>Aan: samba@lists.samba.org
>Onderwerp: Re: [Samba] Samba PDC problem
>
>Hi Nicola,
>
>with WinNT, Win2k or WinXP I need to change some permissions.
>Start on the client machines the Group Policy editor (gpedit.msc) and 
>try to find the switch "Don't check for permissions on profile".
>
>I'am sorry but I don't own a Win32 machine right now.
>
>Your problem is that the Windows internal permission check 
>fails on the 
>Samba PDC profile.
>
>Hope I could help.
>
>Martin Petersen
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/listinfo/samba
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba PDC problem

[Martin Petersen]

Hi Nicola (again :),

found what You were looking for:


Some information I found in the Unofficial Samba HowTo
(http://hr.uoregon.edu/davidrl/samba.html) on XP Pro clients.

Extract from there follows:

## EXTRACT ##

Windows XP Clients

To force Windows XP Professional clients to accept Samba as a PDC, use 
the built-in XP Group Policy editor (gpedit.msc) and locate the Computer
Configuration\Windows Settings\Security Settings\Local Policies\Security 
Options branch. Make sure to disable the following policies:


Domain Member: Digitally encrypt or sign secure channel data (always)
Domain Member: Digitally sign secure channel data (when possible)

Alternately, you can make the following change to the registry:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
"requiresignorseal"=dword:
"signsecurechannel"=dword:

To disable annoying Event Viewer notifications about "Automatic 
ertificate enrollment for local system failed to contact the active 
directory" every eight hours, locate the Computer Configuration\Windows 
Settings\Security Settings\Public Key Policies branch and select "Do not 
enroll certificates automatically" under Autoenrollment Settings. Note 
that this policy won't be available until after the XP machine has 
joined the domain.


If you'd like to use Roaming Profiles with Windows XP clients that have 
Service Pack 1 or later installed, use the built-in XP Group Policy 
editor (gpedit.msc) and locate the Computer Configuration\Administrative 
Templates\System\User Profiles branch. This is described in Microsoft's 
Technet Q327462. Make sure to enable the following policy:


Do not check for user ownership of Roaming Profile Folders

Alternately, you can make the following change to the registry:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"CompatibleRUPSecurity"=dword:0001

Alternately as well, you can make the following addition to your 
smb.conf file:


[profile]
   profile acls = yes

Windows XP Home Edition does not support logging into a Primary Domain
Controller, so you'll have to use Windows XP Professional instead.

## END EXTRACT ##

Ciao,

Martin
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Problems uploading printer drivers

[Louis van Belle]

didnt you see my post before.. 

>1) browse to the samba server in windows xp
>2) double click on "Printers & Faxes"  
>3) right click on some blank window area and select "Server Properties"  =>
= wrong,
right = select a printer queue, right klik and first klik NO !!!

>4) click on the drivers tab
>5) click on Add...
>6) select the driver for the printer in question


this wil work, almost correct.

also make sure that the directory has the correct rights.

i have 775 on /home/samba/printer  ( my driver location )
and rights Administrator:"Domain Admins"

good luck


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba PDC problem

[Martin Petersen]

Hi Nicola,

with WinNT, Win2k or WinXP I need to change some permissions.
Start on the client machines the Group Policy editor (gpedit.msc) and 
try to find the switch "Don't check for permissions on profile".


I'am sorry but I don't own a Win32 machine right now.

Your problem is that the Windows internal permission check fails on the 
Samba PDC profile.


Hope I could help.

Martin Petersen
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba PDC problem

[John H Terpstra]

On Tuesday 12 July 2005 01:50, Nicola Murino wrote:
> My clients are windows xp sp2, however there is the same function:
>
> Start->Run->gpedit.msc
> LocalComputerPolicy -> ComputerConfiguration
> AdministrativeTemplates -> System -> User Profile -> Do not check for
> user ownership of Roaming profiles set to enable
>
> now a basic PDC works :-),
>
> thanks
> Nicola
>
> P.S. If this is a common problem (I have this issue with different samba
> versions on different distributions) maybe would be a good idea insert
> this issue in samba faq or in documentation such as samba by example or
> other samba official doc (excuse me if it is already inserted)

Please refer to the book, "The Official Samba-3 HOWTO and Reference Guide", 
second edition, Chapter 26, Section 26.2.2.3.

This book is being printed and is due to be released at LinuxWorld San 
Francisco. You can obtain a PDF of it from:
http://www.samba.org/samba/docs/Samba3-HOWTO.pdf

Cheers,
John T.

>
> Пустовалов Леонид Тимофеевич ha scritto:
> >Hello Nicola,
> >
> >Monday, July 11, 2005, 8:16:16 PM, you wrote:
> >
> >if client = windows 2000
> >try to Start -> Run -> gpedit.msc
> >LocalComputerPolicy -> ComputerConfiguration ->
> >AdministrativeTemplates -> System -> Logon -> Do not check for user
> >ownership of Roaming profiles
> >set to Enable
> >
> >NM> Hi all,
> >
> >NM> I'm trying to configure samba as PDC, I have a problem when windows
> >NM> client log in this is the error:
> >
> >NM> Windows cannot load the profile and is logging you on with a temporary
> >NM> profile. Changes you make to this profile will be lost when  you log
> > off
> >
> >NM> I have samba-3.0.11 and smbldap-tools-0.8.8. I tryed also samba-3.0.14
> >NM> and smbldap-tools-0-9.1, I have the same problem on Gentoo and on
> > Fedora NM> Core4
> >
> >NM> my configuration file
> >
> >NM> smb.conf:
> >
> >NM> [global]
> >NM> workgroup = THEOREMATICA
> >NM> netbios name = FERRARI
> >NM> enable privileges = yes
> >NM> interfaces = 10.88.77.201
> >NM> bind interfaces only = yes
> >NM> username map = /etc/samba/smbusers
> >NM> server string = Samba PDC Server
> >NM> hosts allow = 10.88.77.0/24 127.0.0.0/8
> >NM> security = user
> >NM> encrypt passwords = Yes
> >NM> min passwd length = 3
> >NM> obey pam restrictions = No
> >NM> #unix password sync = Yes
> >NM> #passwd program = /usr/sbin/smbldap-passwd -u %u
> >NM> #passwd chat = "Changing password for*\nNew password*" %n\n
> >NM> "*Retype new password*" %n\n"
> >NM> ldap passwd sync = Yes
> >NM> log level = 0
> >NM> syslog = 0
> >NM> log file = /var/log/samba/log.%m
> >NM> max log size = 10
> >NM> time server = Yes
> >NM> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> >NM> mangling method = hash2
> >NM> Dos charset = 850
> >NM> Unix charset = ISO8859-1
> >
> >NM> logon script = STARTUP.BAT
> >NM> #logon script =
> >NM> #logon drive = H:
> >NM> logon drive =
> >NM> #logon home = \\%L\%U
> >NM> logon home =
> >NM> #logon path = \\%L\profiles\%U
> >NM> logon path =
> >
> >NM> domain logons = Yes
> >NM> #os level = 65
> >NM> os level = 200
> >NM> preferred master = Yes
> >NM> domain master = Yes
> >NM> wins support = Yes
> >NM> name resolve order = wins lmhosts hosts bcast
> >NM> dns proxy = no
> >NM> passdb backend = ldapsam:ldap://127.0.0.1/
> >NM> # passdb backend = ldapsam:"ldap://127.0.0.1/
> >NM> ldap://slave.idealx.com";
> >NM> # ldap filter = (&(objectclass=sambaSamAccount)(uid=%u))
> >NM> ldap admin dn = cn=Manager,dc=theorematica,dc=it
> >NM> ldap suffix = dc=theorematica,dc=it
> >NM> ldap group suffix = ou=Groups
> >NM> ldap user suffix = ou=Users
> >NM> ldap machine suffix = ou=Computers
> >NM> ldap idmap suffix = ou=Users
> >NM> #ldap ssl = start tls
> >NM> add user script = /usr/sbin/smbldap-useradd -m "%u"
> >NM> ldap delete dn = Yes
> >NM> #delete user script = /usr/sbin/smbldap-userdel "%u"
> >NM> add machine script = /usr/sbin/smbldap-useradd -w "%u"
> >NM> add group script = /usr/sbin/smbldap-groupadd -p "%g"
> >NM> #delete group script = /usr/sbin/smbldap-groupdel "%g"
> >NM> add user to group script = /usr/sbin/smbldap-groupmod -m "%u"
> > "%g" NM> delete user from group script =
> > /usr/sbin/smbldap-groupmod -x NM> "%u" "%g"
> >NM> set primary group script = /usr/sbin/smbldap-usermod -g "%g"
> > "%u"
> >
> >NM> # printers configuration
> >NM> printer admin = @"Print Operators"
> >NM> load printers = Yes
> >NM> create mask = 0640
> >NM> directory mask = 0750
> >NM> nt acl support = No
> >N

[Samba] Problems uploading printer drivers

[Greg Baker]

I'm having trouble uploading printer drivers using Windows XP's APW.  Since 
I'm not sure where to look for a solution, perhaps someone here can help.

I've tried a few different procedures, but I'll only describe one here.

1) browse to the samba server in windows xp
2) double click on "Printers & Faxes"
3) right click on some blank window area and select "Server Properties"
4) click on the drivers tab
5) click on Add...
6) select the driver for the printer in question

Once I select the drivers it appears to upload them to the server.  However, 
after the progress bar finishes I get the following error:

The drivers list was not refreshed.  The driver data may be invalid.
Windows cannot locate a suitable printer driver.  Contact your
administrator for help locating and installing a suitable driver.

On the samba box, I see the drivers in /var/lib/samba/drivers/X32X86/3 and if 
I use rpcclient (enumdrivers) it lists the driver there.  Yet whenever I go 
to the above mentioned "server properties" the driver list is empty.  
Likewise, when I right click on a printer and try to assign this driver to a 
printer the list is empty.

I have also tried right clicking on the printer and adding the driver to the 
specific printer share, but get the same thing.  It always *seems* to work 
but in the end the driver list is empty on the XP machines.

It seems to be a permission problem, but I'm not really sure.  If someone has 
a clue where I can start troubleshooting I'd be grateful.  I already tried 
turning up logging in samba but didn't get much help.  I tried a stack trace 
to see if it was trying to write to a file somewhere but again didn't see 
anything helpful.

Thanks to everyone..
Greg
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Inherit Owner Question Folder Rights

[Michael Gasch]

it seems to be easy:

force create modes for files should be 700
the directory that "owns" the files should be writeable/readable for 
everyone (to copy/create files)


owner (of the directory and new files) should be someone != member of 
your group, where everybody is in (e.g. domain users) -> a dummy user


inherit permissions = yes
inherit acls = yes
inherit owner = yes

just play with it

greez

Aldi wrote:

Hello, I am running Suse Linux 9.3 an Samba 3.0.20pre.

I want to set up a folder where the user can only store files and copy
them to an other folder. The User should not be able to delete modify or
open the stored messages.

Any ideas how I can realize this?

Thanks! Greez





--
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution
Deutscher Platz 6
D-04103 Leipzig
Germany

Phone: 49 (0)341 - 3550 137
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] HELP - PLEASE - COMPILE ERROR - VASPRINTF_MULTIPLE_DEFINED

[Saville, Michael]

NEED HELP ASAP,

Trying to compile samba with ADS/LDAP/KRB5 support.  Followed
instructions to install heimdal, then openldap, then samba.
Getting errors: vasprintf and asprintf multiply-defined, conflict
between /usr/local/lib/libroken.a and lib/snprintf.o
/usr/local/lib/libroken.a is Heimdal library.  Using latest versions for
heimdal, openldap and samba, with gcc_v3.4.

Really appreciate any help.
Thx
Mike
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Mount logon Home dir on Linux (CTM)

[Mi]

So the question for this list would be: how can I query a Windows NT 
PDC (no ldap) about a user's home directory. That script may need to 
have an administrator password to be able to query the PDC.


I found the answer to this one. It should be pretty easy with a few 
lines of Perl. Tthis is how you can use rpcclient to find out:


$ rpcclient -W DomainName -U AnyUserName%ThatUsersPassword -I 
192.168.1.x -c "queryuser $USER_RID" ServerName


This will output info like

   Home Drive  :
   Dir Drive   :
   Profile Path:
   Logon Script:  


etc.

To get the $USER_RID which you need for that query, first do:

$ rpcclient -W DomainName -U AnyUserName%ThatUsersPassword -I 
192.168.1.x -c "lookupnames $USER_NAME" ServerName


it will tell you something like this
...
$USER_NAME S-1-5-21-235741621-998855438-184960113-1063 (User: 1)

The $USER_RID you want is 1063.
To get it with Perl, it would look something like

 my ($USER_RID) = /.*-(\d+)/;

(once you have the right output line in $_)

Once you know where the user's home is, you can mount it through nfs, 
and authentication should be automatic if the Linux side of things is 
configured correctly.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Mount logon Home dir on Linux (CTM)

[Rens]

Hi Cristian,

> So I think probably there is a better way to do it, maybe using
> pam.d, i dont know. Anyone could help me on that?

We use a samba 3 server with a ldap backend on debian. For the linux
workstations (ubuntu) we use pam_mount to mount their shares over cifs.
We use CIFS since they seemed to work better with 'special' files like
lockfiles under kde.

pam_mount can be found here:
http://www.flyn.org/projects/pam_mount/

I hope this gives you a starting point.


-- 
Rens

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] nss_ldap disconnect

[Michael Trimarchi]

Hi all,
I have this log messages in my linux fedora core 3.


smbd[2923]: nss_ldap: reconnecting to LDAP server...
Jul 11 14:45:23 fedoraserver smbd[2923]: nss_ldap: reconnected to LDAP 
server after 1 attempt(s)
Jul 11 14:46:42 fedoraserver smbd[2947]: nss_ldap: reconnecting to 
LDAP server...
Jul 11 14:46:42 fedoraserver smbd[2947]: nss_ldap: reconnected to LDAP 
server after 1 attempt(s)
Jul 11 14:46:43 fedoraserver smbd[2969]: nss_ldap: reconnecting to 
LDAP server...
Jul 11 14:46:43 fedoraserver smbd[2969]: nss_ldap: reconnected to LDAP 
server after 1 attempt(s)
Jul 11 14:48:07 fedoraserver smbd[2970]: nss_ldap: reconnecting to 
LDAP server...
Jul 11 14:48:07 fedoraserver smbd[2970]: nss_ldap: reconnected to LDAP 
server after 1 attempt(s)
Jul 11 14:48:31 fedoraserver smbd[2983]: nss_ldap: reconnecting to 
LDAP server...
Jul 11 14:48:31 fedoraserver smbd[2983]: nss_ldap: reconnected to LDAP 
server after 1 attempt(s)
Jul 11 14:48:42 fedoraserver smbd[2947]: nss_ldap: reconnecting to 
LDAP server...
Jul 11 14:48:42 fedoraserver smbd[2947]: nss_ldap: reconnected to LDAP 
server after 1 attempt(s)
Jul 11 14:49:08 fedoraserver smbd[2948]: nss_ldap: reconnecting to 
LDAP server...
Jul 11 14:49:08 fedoraserver smbd[2948]: nss_ldap: reconnected to LDAP 
server after 1 attempt(s)
Jul 11 14:50:02 fedoraserver smbd[2947]: nss_ldap: reconnecting to 
LDAP server...
Jul 11 14:50:02 fedoraserver smbd[2947]: nss_ldap: reconnected to LDAP 
server after 1 attempt(s)
Jul 11 14:50:50 fedoraserver smbd[2970]: nss_ldap: reconnecting to 
LDAP server...
Jul 11 14:50:50 fedoraserver smbd[2970]: nss_ldap: reconnected to LDAP 
server after 1 attempt(s)
Jul 11 14:51:44 fedoraserver smbd[2969]: nss_ldap: reconnecting to 
LDAP server...
Jul 11 14:51:44 fedoraserver smbd[2969]: nss_ldap: reconnected to LDAP 
server after 1 attempt(s)
Jul 11 14:52:30 fedoraserver smbd[2995]: nss_ldap: reconnecting to 
LDAP server...
Jul 11 14:52:30 fedoraserver smbd[2995]: nss_ldap: reconnected to LDAP 
server after 1 attempt(s)
Jul 11 14:52:37 fedoraserver smbd[2948]: nss_ldap: reconnecting to 
LDAP server...
Jul 11 14:52:37 fedoraserver smbd[2948]: nss_ldap: reconnected to LDAP 
server after 1 attempt(s)
Jul 11 14:54:10 fedoraserver smbd[2993]: nss_ldap: reconnecting to 
LDAP server...
Jul 11 14:54:10 fedoraserver smbd[2993]: nss_ldap: reconnected to LDAP 
server after 1 attempt(s)
Jul 11 14:54:15 fedoraserver smbd[2988]: nss_ldap: reconnecting to 
LDAP server... 




What is the problem?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Mount logon Home dir on Linux (CTM)

[Cristian Thiago Moecke]

I was thinking... if nothing else woks, I will just create a default kde 
desktop shortcut pointing to smb:\\MY_SAMBA_SERVER\username... That i 
think I can do, should be easy! :)
Is there a way to at least make Konqueror stop asking the user and 
password and use the same user and password that was used to log in???


Cristian

If you figure this one out, please let me know. I've been trying to do 
this for at least a year now with no luck.


-Ian

Cristian Thiago Moecke wrote:

Hmmm... Ok... I will be happy to if I can make a script that mounts 
\\MY_SAMBA_SERVER\username siwthout asking the user for the password 
(so, how can I tell the script to use the same password and username 
of the current user?)... Well, for the users that dont have the home 
dir in \\MY_SAMBA_SERVER i will just say "sorry" :D


Cristian

I suppose you will have to add some scripting to manage the Linux 
clients. A script could ask the NT PDC about the user's home, and 
then mount it directly through nfs.


So the question for this list would be: how can I query a Windows NT 
PDC (no ldap) about a user's home directory. That script may need to 
have an administrator password to be able to query the PDC.









--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Mount logon Home dir on Linux (CTM)

[Ian Dees]

If you figure this one out, please let me know. I've been trying to do 
this for at least a year now with no luck.


-Ian

Cristian Thiago Moecke wrote:

Hmmm... Ok... I will be happy to if I can make a script that mounts 
\\MY_SAMBA_SERVER\username siwthout asking the user for the password 
(so, how can I tell the script to use the same password and username 
of the current user?)... Well, for the users that dont have the home 
dir in \\MY_SAMBA_SERVER i will just say "sorry" :D


Cristian

I suppose you will have to add some scripting to manage the Linux 
clients. A script could ask the NT PDC about the user's home, and 
then mount it directly through nfs.


So the question for this list would be: how can I query a Windows NT 
PDC (no ldap) about a user's home directory. That script may need to 
have an administrator password to be able to query the PDC.







--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Mount logon Home dir on Linux (CTM)

[Cristian Thiago Moecke]

Hmmm... Ok... I will be happy to if I can make a script that mounts 
\\MY_SAMBA_SERVER\username siwthout asking the user for the password 
(so, how can I tell the script to use the same password and username of 
the current user?)... Well, for the users that dont have the home dir in 
\\MY_SAMBA_SERVER i will just say "sorry" :D


Cristian

I suppose you will have to add some scripting to manage the Linux 
clients. A script could ask the NT PDC about the user's home, and then 
mount it directly through nfs.


So the question for this list would be: how can I query a Windows NT 
PDC (no ldap) about a user's home directory. That script may need to 
have an administrator password to be able to query the PDC.





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] W2K Workstation not reading NTConfig.pol

[Alejandro Hernández]

You must make sure that, if path directive in the share is, 
/srv/netlogon, both directories (or _any_directory_ in the way to 
NTconfig.POL) have the 'x' bit on its permissions.


For example (and not complete :)

/srv $ ls -ld netlogon

rwxrwx--- owner group 2048 netlogon

will never let you read anything in Samba if your group is not 'group'. 
Because the position bit (execution for files, position/placement for 
directories) is not set and Samba needs it.


If instead of rwxrwx--- you, at least, have

rwx--x--x

Samba will let you read the NTconfig.POL like it or not :) We had tons 
of incidencies regarding our user profiles and most of the time it was 
due to it. Same applies to any other file or directory, like... [homes]!




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Mount logon Home dir on Linux (CTM)

[Mi]

I suppose you will have to add some scripting to manage the Linux 
clients. A script could ask the NT PDC about the user's home, and then 
mount it directly through nfs.


So the question for this list would be: how can I query a Windows NT PDC 
(no ldap) about a user's home directory. That script may need to have an 
administrator password to be able to query the PDC.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Mount logon Home dir on Linux (CTM)

[Cristian Thiago Moecke]

I will try to explian it better this time.

	I have a Windows NT 4.0 Server, that is the PDC on my network. I also 
have a FC3 Samba 3 server that is the file server, where most of logon 
home dirs are stored. In the NT PDC i set up most users to map Z: drive 
to \\MY_SAMBA_SERVER\username
	In the Win XP workstations everithing is wrking realy fine. Now i want 
to set up some Linux Fedora Core 4 Workstations too. I already installed 
the FC4, samba and winbind, everithing working fine too. I can log in in 
linux using my NT password.
	Just what I need now is to mount the logon home dir to the users who 
log in in the linux workstation. I didnt found out reading the docs and 
looking in the internet how can I do it (and IF I can). I can run a 
logon script that mounts \\MY_SAMBA_SERVER\username using smbmount, but 
that has 2 problems: firist, it will ask the password, but how i can 
make the script know the password? And the second problem: some users 
dont have the logon home dir in the MY_SAMBA_SERVER.
	So I think probably there is a better way to do it, maybe using pam.d, 
i dont know. Anyone could help me on that?


   Thanks for any help,
Cristian T. Moecke
LMP-UFSC

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

samba@lists.samba.org

[saito]

Ｑ１．最近楽しいことが無い。
　　　①はい　②いいえ

Ｑ２．自分に自信が無い。
　　　①はい　②いいえ

Ｑ３．日ごろの生活に満足していない。
　　　①はい　②いいえ　

Ｑ４．平凡な毎日に、退屈してる。
　　　①はい　②いいえ

Ｑ５．出会いを求めたパーティーに参加したことがありますか。
　　　①はい　②いいえ

Ｑ６．出会い系サイトを利用したことがありますか。
　　　①はい　②いいえ

Ｑ７．騙された事がある。
　　　①はい　②いいえ

以上の中に「①はい」が１つでも見つかった方は下記へお進み下さい。

突然のメールに驚いたかと思いますが、
VenusNetwork【ヴィーナス・ネットワーク】代表富田ゆかりと申します。
新たな未来をサポートするクラブを設立しております。

簡単な自己紹介をさせて頂きますと、
私は、アメリカ留学 帰国後、 外資系企業に勤務

２４歳で世に言う「ねるとんパーティー」型イベント会社に転職

同会社が５年後出会い系サイトに形を変えるものの、
実際に出会えるまでが遠回りである事に疑問を持ちはじめ、
女性紹介クラブの立ち上げに至っております。

私が体験しました、自らの経験を生かし、
今まで出会えなかった沢山の方々のサポートを行っております。

私は、自らの写真・プロフィールを出していますので、一切嘘は申しません。
当クラブは、女性をご紹介するに当たって一切の料金も頂いておりません。
それは、女性会員様からのご融資でまかなっておりますのでお気軽にご利用下さい。

なぜこの様なクラブを立ち上げたかと申しますと、
私は海外留学や、様々な仕事を行ってきたこともあり、
交流が幅広く、交友関係がとても多くあります。
前職業柄のせいか、多くの女性から“出会い”の相談が絶えません。

そこで、自らクラブを立ち上げました。

当クラブの女性会員様は、セレブな方も多くいらっしゃいまして、お金を
出してまでも男性と知り合いたいと思っている方も多々いらっしゃいます。

真剣に結婚を考えている方、恋人を探している方、
秘密で刺激を求めている方も数多くいらっしゃいます。

是非、この機会に、刺激的な生活を求めてみませんか。


それでは、
アンケートの意味も込めまして、気軽な気持ちで下記の質問にお答え下さい。

Ｑ１．貴方のお住まいもしくは、会いたい都道府県をお教え下さい。


Ｑ２．当クラブをご利用されるにあたっての希望

　　　①《真面目な交際》
　結婚相手・恋人を探す。

　　　②《サポート》
　お金に余裕のあるセレブの方からのサポート。

　　　③《割り切り交際》
　秘密厳守で逢う。刺激的な交際。

  ④《４０歳以上の交際》
　４０歳以上から始まる交際。

メール返信で上記の質問にお答え頂ければ、こちらで希望に合った女性を
ご紹介差し上げます。

このメールは以前ご連絡のあった皆様にご返信しておりますが、万が一
見覚えがない、またはこのメールを信じれない。不審に思うという方は、
そのまま破棄されるか「配信不要」とお書きになり、ご返信頂きます様
お願い致します。

 『VenusNetwork』代表 富田ゆかり 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] nmbd registering itself als DMB is not working

[Dirk.Laurenz]

Hello everybody,
 
i'm just setting up a samba server as pdc with ldap backend.
everything but netbios works fine.
 
The system is called aadmt00 and is a pdc (virtual) and is bound to the ip 
192.168.53.180
 

hgest3201:~ # ip addr list
1: lo:  mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
inet6 ::1/128 scope host
   valid_lft forever preferred_lft forever
2: bond0:  mtu 1500 qdisc noqueue
link/ether 00:c0:9f:56:f5:bf brd ff:ff:ff:ff:ff:ff
inet 192.168.53.44/24 brd 192.168.53.255 scope global bond0
inet 192.168.53.180/24 brd 192.168.53.255 scope global 
secondary bond0
inet6 fe80::2c0:9fff:fe56:f5bf/64 scope link tentative
   valid_lft forever preferred_lft forever
3: eth0:  mtu 1500 qdisc 
pfifo_fast master bond0 qlen 1000
link/ether 00:c0:9f:56:f5:bf brd ff:ff:ff:ff:ff:ff
inet 192.168.53.44/24 brd 192.168.53.255 scope global eth0
inet6 fe80::2c0:9fff:fe56:f5bf/64 scope link
   valid_lft forever preferred_lft forever
4: eth1:  mtu 1500 qdisc 
pfifo_fast master bond0 qlen 1000
link/ether 00:c0:9f:56:f5:bf brd ff:ff:ff:ff:ff:ff
inet 192.168.53.44/24 brd 192.168.53.255 scope global eth1
inet6 fe80::2c0:9fff:fe56:f5bf/64 scope link
   valid_lft forever preferred_lft forever
5: sit0:  mtu 1480 qdisc noqueue
link/sit 0.0.0.0 brd 0.0.0.0

Here's the smb.conf
(testparm -s /samba/aadmt00/conf/etc/smb.conf)

hgest3201:~ # testparm -s /samba/aadmt00/conf/etc/smb.conf
Load smb config files from /samba/aadmt00/conf/etc/smb.conf
Processing section "[netlogon]"
Loaded services file OK.
# Global parameters
[global]
unix charset = UTF8
workgroup = TOPTEST
netbios name = AADMT00
server string = Backoffice Testsystem PDC
interfaces = 192.168.53.180, 127.0.0.1
bind interfaces only = Yes
smb passwd file = /samba/aadmt00/conf/private/smbpasswd
private dir = /samba/aadmt00/conf/private
passdb backend = ldapsam:ldap://hgest3201.dom.test, 
ldapsam:ldap://hgest3202.dom.test
enable privileges = Yes
passwd program = /opt/IDEALX/sbin/smbldap-passwd -o %u
passwd chat = *New*password* %n\n *new*password* %n\n 
*successfully*
username map = /samba/aadmt00/conf/private/smbusers
unix password sync = Yes
log level = 8
syslog = 0
log file = /samba/aadmt00/conf/log/%m.log
max log size = 4096
smb ports = 139 445
name resolve order = wins lmhosts host bcast
printcap name = CUPS
show add printer wizard = No
add user script = /opt/IDEALX/sbin/smbldap-useradd -a 
"%u"
delete user script = /opt/IDEALX/sbin/smbldap-userdel 
"%u"
add group script = /opt/IDEALX/sbin/smbldap-groupadd -p 
"%g"
add user to group script = 
/opt/IDEALX/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = 
/opt/IDEALX/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = 
/opt/IDEALX/sbin/smbldap-usermod -g '%g' '%u'
add machine script = /opt/IDEALX/sbin/smbldap-useradd 
-t 5 -w "%u" -g 515
domain logons = Yes
os level = 255
preferred master = Yes
domain master = Yes
wins support = Yes
ldap admin dn = cn=Samba 
Server,cn=Samba,cn=Applications,o=dom
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmaps
ldap machine suffix = ou=Computers
ldap passwd sync = Yes
ldap replication sleep = 5000
ldap suffix = ou=TOPTEST,o=dom
ldap timeout = 5
ldap user suffix = ou=Users
lock directory = /samba/aadmt00/conf/locks
pid directory = /samba/aadmt00/conf/pids
  

RE: [Samba] trouble with long filename copy

[Louis van Belle]

Well, Dont have this problem at all.
How long is the file , characters and how long is your directory naming.

in total 255 Characters is max for windows XP.

I think its just a setting in your samba.

my works perfectly now, 
here my config, then you have a reference. 
, if you want you can email me directly , im dutch also. 
thats easy debugging.. 

Louis

The setup is as followed: 
Used: 
Debian Sarge, kernel 2.6.8 debian source, custombuild, ACL enabled.
Samba 3.0.14a, ldap, cups, cups-pdf.
Printers are RAW printer, and the Windows drivers are used.
to setup point and print, settings as below, browse to the ADD Printers and
Faxes, klik..
here klik right on a printer queue, and klik NO ! 
klik on the advanced tab and add new driver, select the driver.

good luck..



/snap my smb.conf

# Global parameters
[global]
## NETBIOS / DOMAIN / SERVER SETTINGS
#   realm = ROTTERDAM.BAZUIN.NL
interfaces = eth0 lo
bind interfaces only = yes
netbios name = PDC
server string = MS249-LIN-001
workgroup = BAZUIN
domain logons = Yes
preferred master = Yes
domain master = Yes
os level = 65
min protocol = NT1
lm announce = no
lanman auth = no
disable netbios = no
encrypt passwords = true
admin users = @"Domain Admins"
enable privileges = yes
security = user
time server = yes
dns proxy = yes
socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192
keep alive = 60

## USER/LDAP SETTINGS
username map = /etc/samba/users.map
guest account = nobody
obey pam restrictions = No
ldap passwd sync = yes
passdb backend = ldapsam:ldap://127.0.0.1/

ldap suffix = dc=rotterdam,dc=bazuin,dc=nl
ldap admin dn = cn=admin,dc=rotterdam,dc=bazuin,dc=nl
ldap user suffix = ou=Users
ldap machine suffix = ou=Computers
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Users
ldap delete dn = Yes
ldap ssl = no

add user script = /usr/sbin/smbldap-useradd -m "%u"
delete user script = /usr/sbin/smbldap-userdel "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/sbin/smbldap-groupdel "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u"
"%g"
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
add machine script = /usr/sbin/smbldap-useradd -w "%u"

## WINS/DNS SETTINGS
#
# Also needed when using ACL
#
wins support = Yes
#   password server = PDC
#   idmap uid = 1-2
#   idmap gid = 1-2
#   winbind use default domain = yes
#   winbind separator = \
#   winbind cache time = 15
#   winbind enum users = yes
#   winbind enum groups = yes
#   template shell = /bin/false
#   template homedir = /home/users/%U


## LOGGING
utmp = yes
syslog = 0
log level = 2
panic action = /usr/share/samba/panic-action %d
max log size = 1000
log file = /var/log/samba/log.%m


## MISC FILES/DIRECTORIES
nt acl support = yes
map acl inherit = yes
dos charset = 850
unix charset = ISO8859-1
preserve case = yes
short preserve case = yes
case sensitive = no
directory mask = 0750
hide dot files = yes
hide unreadable = yes
hide files = /desktop.ini/
#   veto files = /*.eml/*.nws/riched20.dll/*.{*}/
veto files = /*.eml/*.nws/*.{*}/
veto oplock files = /*.doc/*.xls/*.mdb/
dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
create mask = 0644

## MISC OTHER
mangling method = hash2
deadtime = 10
map to guest = Bad User

## MISC PROFILE
logon script = logon.cmd
logon home = \\%L\%U
logon path = \\%L\profiles\%U
logon drive = P:

## PRINTING Section 1 !! Global Settings !!  
printing = cups
load printers = Yes
show add printer wizard = Yes
max print jobs = 100
printcap name = cups
printer admin = @"Printer Operators",@"Domain
Admins",Administrator,root
lpq cache time = 20
use client driver = No
disable spoolss = No

# PRINTING Section 2 !! 
# users are able to connect to any printer specified in the Samba host's 
# printcap file  ( /etc/printcap ) provided through cups
[printers]
comment = All Network Printers
printable = yes
path = /home/samba/spool
browseable = No
guest ok = yes
public = yes
read only = yes
writable = no
create mode = 0777
lpq command = /usr/bin/lpq -P'%p'
lprm command = /usr/bin/lprm -P'%p' %j
lppause command = /usr/sbin/lpc hold '%p' %j
   

Re: [Samba] trouble with long filename copy

[Jeremy Allison]

On Tue, Jul 12, 2005 at 12:14:30AM +0200, [EMAIL PROTECTED] wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Dear Jeremy et all,
> 
> Problem is reproduceable
> I manually upgraded all samba utils to 3.0.14 or equiv.

Unfortunately 3.0.14 isn't the latest code :-). 3.0.14a is
the latest "stable" and Jerry is preparing to release a
3.0.20 pre-release. I suggest you try and reproduce
with that first.

Thanks,

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba PDC problem

[Nicola Murino]

My clients are windows xp sp2, however there is the same function:

Start->Run->gpedit.msc
LocalComputerPolicy -> ComputerConfiguration
AdministrativeTemplates -> System -> User Profile -> Do not check for
user ownership of Roaming profiles set to enable

now a basic PDC works :-),

thanks
Nicola

P.S. If this is a common problem (I have this issue with different samba
versions on different distributions) maybe would be a good idea insert
this issue in samba faq or in documentation such as samba by example or
other samba official doc (excuse me if it is already inserted)

Пустовалов Леонид Тимофеевич ha scritto:

>Hello Nicola,
>
>Monday, July 11, 2005, 8:16:16 PM, you wrote:
>
>if client = windows 2000
>try to Start -> Run -> gpedit.msc
>LocalComputerPolicy -> ComputerConfiguration ->
>AdministrativeTemplates -> System -> Logon -> Do not check for user
>ownership of Roaming profiles
>set to Enable
>
>NM> Hi all,
>
>NM> I'm trying to configure samba as PDC, I have a problem when windows
>NM> client log in this is the error:
>
>NM> Windows cannot load the profile and is logging you on with a temporary
>NM> profile. Changes you make to this profile will be lost when  you log off
>
>NM> I have samba-3.0.11 and smbldap-tools-0.8.8. I tryed also samba-3.0.14
>NM> and smbldap-tools-0-9.1, I have the same problem on Gentoo and on Fedora
>NM> Core4
>
>NM> my configuration file
>
>NM> smb.conf:
>
>NM> [global]
>NM> workgroup = THEOREMATICA
>NM> netbios name = FERRARI
>NM> enable privileges = yes
>NM> interfaces = 10.88.77.201
>NM> bind interfaces only = yes
>NM> username map = /etc/samba/smbusers
>NM> server string = Samba PDC Server
>NM> hosts allow = 10.88.77.0/24 127.0.0.0/8
>NM> security = user
>NM> encrypt passwords = Yes
>NM> min passwd length = 3
>NM> obey pam restrictions = No
>NM> #unix password sync = Yes
>NM> #passwd program = /usr/sbin/smbldap-passwd -u %u
>NM> #passwd chat = "Changing password for*\nNew password*" %n\n
>NM> "*Retype new password*" %n\n"
>NM> ldap passwd sync = Yes
>NM> log level = 0
>NM> syslog = 0
>NM> log file = /var/log/samba/log.%m
>NM> max log size = 10
>NM> time server = Yes
>NM> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>NM> mangling method = hash2
>NM> Dos charset = 850
>NM> Unix charset = ISO8859-1
>
>NM> logon script = STARTUP.BAT
>NM> #logon script =
>NM> #logon drive = H:
>NM> logon drive =
>NM> #logon home = \\%L\%U
>NM> logon home =
>NM> #logon path = \\%L\profiles\%U
>NM> logon path =
>
>NM> domain logons = Yes
>NM> #os level = 65
>NM> os level = 200
>NM> preferred master = Yes
>NM> domain master = Yes
>NM> wins support = Yes
>NM> name resolve order = wins lmhosts hosts bcast
>NM> dns proxy = no
>NM> passdb backend = ldapsam:ldap://127.0.0.1/
>NM> # passdb backend = ldapsam:"ldap://127.0.0.1/
>NM> ldap://slave.idealx.com";
>NM> # ldap filter = (&(objectclass=sambaSamAccount)(uid=%u))
>NM> ldap admin dn = cn=Manager,dc=theorematica,dc=it
>NM> ldap suffix = dc=theorematica,dc=it
>NM> ldap group suffix = ou=Groups
>NM> ldap user suffix = ou=Users
>NM> ldap machine suffix = ou=Computers
>NM> ldap idmap suffix = ou=Users
>NM> #ldap ssl = start tls
>NM> add user script = /usr/sbin/smbldap-useradd -m "%u"
>NM> ldap delete dn = Yes
>NM> #delete user script = /usr/sbin/smbldap-userdel "%u"
>NM> add machine script = /usr/sbin/smbldap-useradd -w "%u"
>NM> add group script = /usr/sbin/smbldap-groupadd -p "%g"
>NM> #delete group script = /usr/sbin/smbldap-groupdel "%g"
>NM> add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
>NM> delete user from group script = /usr/sbin/smbldap-groupmod -x
>NM> "%u" "%g"
>NM> set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
>
>NM> # printers configuration
>NM> printer admin = @"Print Operators"
>NM> load printers = Yes
>NM> create mask = 0640
>NM> directory mask = 0750
>NM> nt acl support = No
>NM> printing = cups
>NM> printcap name = cups
>NM> deadtime = 10
>NM> guest account = nobody
>NM> map to guest = Bad User
>NM> dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
>NM> show add printer wizard = yes
>NM> ; to maintain capital letters in shortcuts in any of the profile folders:
>NM> preserve case = yes
>NM> short preserve case = yes
>NM> case sensitive = no
>
>NM> [homes]
>NM> comment = Directory personale di %U, %u
>NM> read only = No
>NM> create mask = 0644
>NM> direc

[Samba] Re: file permission / ACL problems with Office files

[Markus Kopf]

Hi,

Jeremy Allison wrote:

I think this is something we've fixed for the 3.0.20 pre releases.
I'd appreciate it if you could test this in your environment (although
I appreciate that you probably won't want to put this into production).


I'm a colleague of Eduard, and I have been trying to reproduce the 
problem on a non-production system.
Unfortunately, even when using the exact same conf-files for samba and 
setting the same ACLs, we cannot reproduce it.
It seems to me that the problem only occurs when there is some load on 
the machine which we cannot force on our test system.


So I guess that testing with 3.0.20pre would not make much of a 
difference, since we don't run into the same error using 3.0.14a on the 
test machine.


Do you have any other idea what we could try?

Thanks very much,
Markus
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba PDC problem

[Nicola Murino]

My clients are windows xp sp2, however there is the same function:

Start->Run->gpedit.msc
LocalComputerPolicy -> ComputerConfiguration
AdministrativeTemplates -> System -> User Profile -> Do not check for
user ownership of Roaming profiles set to enable

now a basic PDC works :-),

thanks
Nicola

P.S. If this is a common problem (I have this issue with different samba
versions on different distributions) maybe would be a good idea insert
this issue in samba faq or in documentation such as samba by example or
other samba official doc (excuse me if it is already inserted)

Пустовалов Леонид Тимофеевич ha scritto:

>Hello Nicola,
>
>Monday, July 11, 2005, 8:16:16 PM, you wrote:
>
>if client = windows 2000
>try to Start -> Run -> gpedit.msc
>LocalComputerPolicy -> ComputerConfiguration ->
>AdministrativeTemplates -> System -> Logon -> Do not check for user
>ownership of Roaming profiles
>set to Enable
>
>NM> Hi all,
>
>NM> I'm trying to configure samba as PDC, I have a problem when windows
>NM> client log in this is the error:
>
>NM> Windows cannot load the profile and is logging you on with a temporary
>NM> profile. Changes you make to this profile will be lost when  you log off
>
>NM> I have samba-3.0.11 and smbldap-tools-0.8.8. I tryed also samba-3.0.14
>NM> and smbldap-tools-0-9.1, I have the same problem on Gentoo and on Fedora
>NM> Core4
>
>NM> my configuration file
>
>NM> smb.conf:
>
>NM> [global]
>NM> workgroup = THEOREMATICA
>NM> netbios name = FERRARI
>NM> enable privileges = yes
>NM> interfaces = 10.88.77.201
>NM> bind interfaces only = yes
>NM> username map = /etc/samba/smbusers
>NM> server string = Samba PDC Server
>NM> hosts allow = 10.88.77.0/24 127.0.0.0/8
>NM> security = user
>NM> encrypt passwords = Yes
>NM> min passwd length = 3
>NM> obey pam restrictions = No
>NM> #unix password sync = Yes
>NM> #passwd program = /usr/sbin/smbldap-passwd -u %u
>NM> #passwd chat = "Changing password for*\nNew password*" %n\n
>NM> "*Retype new password*" %n\n"
>NM> ldap passwd sync = Yes
>NM> log level = 0
>NM> syslog = 0
>NM> log file = /var/log/samba/log.%m
>NM> max log size = 10
>NM> time server = Yes
>NM> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>NM> mangling method = hash2
>NM> Dos charset = 850
>NM> Unix charset = ISO8859-1
>
>NM> logon script = STARTUP.BAT
>NM> #logon script =
>NM> #logon drive = H:
>NM> logon drive =
>NM> #logon home = \\%L\%U
>NM> logon home =
>NM> #logon path = \\%L\profiles\%U
>NM> logon path =
>
>NM> domain logons = Yes
>NM> #os level = 65
>NM> os level = 200
>NM> preferred master = Yes
>NM> domain master = Yes
>NM> wins support = Yes
>NM> name resolve order = wins lmhosts hosts bcast
>NM> dns proxy = no
>NM> passdb backend = ldapsam:ldap://127.0.0.1/
>NM> # passdb backend = ldapsam:"ldap://127.0.0.1/
>NM> ldap://slave.idealx.com";
>NM> # ldap filter = (&(objectclass=sambaSamAccount)(uid=%u))
>NM> ldap admin dn = cn=Manager,dc=theorematica,dc=it
>NM> ldap suffix = dc=theorematica,dc=it
>NM> ldap group suffix = ou=Groups
>NM> ldap user suffix = ou=Users
>NM> ldap machine suffix = ou=Computers
>NM> ldap idmap suffix = ou=Users
>NM> #ldap ssl = start tls
>NM> add user script = /usr/sbin/smbldap-useradd -m "%u"
>NM> ldap delete dn = Yes
>NM> #delete user script = /usr/sbin/smbldap-userdel "%u"
>NM> add machine script = /usr/sbin/smbldap-useradd -w "%u"
>NM> add group script = /usr/sbin/smbldap-groupadd -p "%g"
>NM> #delete group script = /usr/sbin/smbldap-groupdel "%g"
>NM> add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
>NM> delete user from group script = /usr/sbin/smbldap-groupmod -x
>NM> "%u" "%g"
>NM> set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
>
>NM> # printers configuration
>NM> printer admin = @"Print Operators"
>NM> load printers = Yes
>NM> create mask = 0640
>NM> directory mask = 0750
>NM> nt acl support = No
>NM> printing = cups
>NM> printcap name = cups
>NM> deadtime = 10
>NM> guest account = nobody
>NM> map to guest = Bad User
>NM> dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
>NM> show add printer wizard = yes
>NM> ; to maintain capital letters in shortcuts in any of the profile folders:
>NM> preserve case = yes
>NM> short preserve case = yes
>NM> case sensitive = no
>
>NM> [homes]
>NM> comment = Directory personale di %U, %u
>NM> read only = No
>NM> create mask = 0644
>NM> direc