Re: [Samba] winbind-Problem with samba 3.0.14a/3.0.20pre and Solaris

2005-08-09 Thread Charles Bueche
Hi Joerg,

I have had the problem before, see my posts :
http://lists.samba.org/archive/samba/2004-August/090422.html

http://lists.samba.org/archive/samba/2004-June/087291.html

If you have find a solution, please share :-)

Charles

On lun, 2005-07-04 at 12:33 +0200, Joerg Dietze wrote:
> Hi Guys,
> 
> anybody has a idea why getent groups only lists a few groups from my
> NT4-Dom. ?
> I have configured samba with security=domain, uid and gid maps and
> configured nsswitch.conf
> to use windbind.
> wbinfo -g works fine but getent group stops after few domaingroups. I think
> the problem is the
> domain-user - group because i can query all domaingroups with gentent group
>  except
> the group domain-users. This group has more the 2000 members in it, it´s
> possible thats the problem
> under solaris. I have also a linux - based NAS-head for tests here this box
> works fine and lists all groups
> with getent group.
> 
> thank you
> Joerg Dietze


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba3 server tries to sync WINS with itself and fails

2005-08-09 Thread JB Hewitt
No I don't have the the 'wins server=' in my configuration, and here's
a dump of my config.

[global]
unix charset = ISO8859-1
workgroup = DOMAIN
server string = Brisbanq HQ
passdb backend = ldapsam:ldap://localhost
pam password change = Yes
passwd program = /usr/bin/passwd %u
unix password sync = Yes
log level = 1
log file = /var/log/samba/log.%m
max log size = 50
announce version = 4.8
time server = Yes
printcap name = cups
add machine script = "/usr/sbin/smbldap-useradd -w %u"
logon script = logon.bat
logon path = \\%L\%U\profile
logon drive = p:
logon home = \\%L\%U
domain logons = Yes
os level = 60
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
ldap admin dn = cn=admin,dc=soapbox
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmap,ou=Systems
ldap machine suffix = ou=Computers
ldap passwd sync = Yes
ldap suffix = dc=soapbox
ldap user suffix = ou=People
create mask = 0660
directory mask = 0775
hosts allow = 192.168., 127., 10.0.0.
use sendfile = Yes
printing = cups
print command = 
lpq command = %p
lprm command = 
case sensitive = No
short preserve case = No
veto oplock files = /*.QBW/*.bat/*.mdb/

[share]
comment = Shared Directory
path = /srv
read only = No

[companyshared]
comment = Brisbane share
path = /srv/companyshared
read only = No

[homes]
comment = Home Directory for '%u'
read only = No
browseable = No

[home]
path = /home
read only = No
browseable = No

[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
guest ok = Yes
browseable = No

[printers]
comment = All printers
path = /var/spool/samba
printer admin = root, @ntadmins
guest ok = Yes
printable = Yes
browseable = No

[PRINT$]
path = /home/samba/printers
write list = @wheel, root, administrator, rick, pam
create mask = 0644
directory mask = 0755
guest ok = Yes

On 8/10/05, Jason Balicki <[EMAIL PROTECTED]> wrote:
> JB Hewitt <> wrote:
> > I have a Samba 3 server that is trying to sync with itself.  I have
> > wins support = yes in the samba configuration file and there are no
> > other WINS servers on the network.
> >
> > The IP address of the Samba server is 192.168.10.4 and is trying to
> > sync with itself but fails...
> 
> You don't have "wins server = " in there do you?
> That might cause a problem like this.  Actually, you should
> post your smb.conf to the list too.
> 
> --J(K)
> 
> 


-- 
Regards,
  JB Hewitt
Business: http://www.stcpl.com.au
Blog: http://blade.lansmash.com
Best LAN ever: http://www.lansmash.com
How to ask a ?: http://www.catb.org/~esr/faqs/smart-questions.html
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba3 server tries to sync WINS with itself and fails

2005-08-09 Thread JB Hewitt
I have a Samba 3 server that is trying to sync with itself.  I have
wins support = yes in the samba configuration file and there are no
other WINS servers on the network.

The IP address of the Samba server is 192.168.10.4 and is trying to
sync with itself but fails...

Here's the error from log.nmbd

[2005/08/10 12:34:21, 0] nmbd/nmbd_nameregister.c:register_name_response(130)
  register_name_response: WINS server at IP 192.168.10.4 rejected our
name registration of DOMAIN<1b> IP 192.168.10.4 with error code 5.
[2005/08/10 12:34:21, 0] nmbd/nmbd_become_dmb.c:become_domain_master_fail(70)
  become_domain_master_fail: Failed to become a domain master browser
for workgroup DOMAIN on subnet UNICAST_SUBNET. Couldn't register name
DOMAIN<1b>.
[2005/08/10 12:34:21, 0] nmbd/nmbd_namelistdb.c:standard_fail_register(283)
  standard_fail_register: Failed to register/refresh name DOMAIN<1b>
on subnet UNICAST_SUBNET

Any ideas on how I make it the local WINS server?

-- 
Regards,
  JB Hewitt
Business: http://www.stcpl.com.au
Blog: http://blade.lansmash.com
Best LAN ever: http://www.lansmash.com
How to ask a ?: http://www.catb.org/~esr/faqs/smart-questions.html
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Slow browsing from Win2k and WinXP

2005-08-09 Thread Jonathan Johnson
See David Beck's post "Samba - XP performance problem" dated 8/8 and my 
reply dated 8/9.


--Jonathan Johnson

Chuck Theobald wrote:


Hi,

I have Samba 3.0.14a + OpenLDAP 2.2.24 installed on Solaris 8 as a PDC 
for serving files only (no profiles, no printing).  Performance of 
network browsing is slow in Windows 2000 and XP, taking 10-15 seconds 
to open and display the contents of a folder.  The same browsing 
activity from a Mac works fine with no unacceptable delays.  I'm 
trying to sell Samba here, but these delays are not helping.  Any 
suggestions on diagnosing this would be appreciated.  smb.conf to follow.


Thanks,
Chuck


lauterbur{23}# bin/testparm
Load smb config files from /usr/local/samba/lib/smb.conf
Processing section "[homes]"
Processing section "[netlogon]"
Processing section "[profiles]"
Processing section "[staff]"
Processing section "[public]"
Processing section "[office-admin]"
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions

# Global parameters
[global]
workgroup = LCNI
server string = Lauterbur Server
passdb backend = ldapsam:ldap://lauterbur.uoregon.edu
password level = 8
username level = 8
log level = 10 winbind:10
log file = /export/samba/log/smblog.%m
max log size = 500
add user script = /usr/local/samba/sbin/smbldap-useradd -m "%u"
delete user script = /usr/local/samba/sbin/smbldap-userdel "%u"
add group script = /usr/local/samba/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/local/samba/sbin/smbldap-groupdel "%g"
add user to group script = 
/usr/local/samba/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = 
/usr/local/samba/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = 
/usr/local/samba/sbin/smbldap-usermod -g "%g" "%u"
add machine script = /usr/local/samba/sbin/smbldap-useradd -w 
-i "%u"

logon path =
logon drive = H:
logon home =
domain logons = Yes
os level = 33
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
ldap admin dn = cn=smbadmin,ou=People,dc=lcni,dc=uoregon,dc=edu
ldap delete dn = Yes
ldap group suffix = ou=Groups
ldap machine suffix = ou=Computers
ldap passwd sync = Yes
ldap suffix = dc=lcni,dc=uoregon,dc=edu
ldap ssl = start tls
ldap user suffix = ou=People
admin users = chuck
create mask = 0660
directory mask = 0770
inherit acls = Yes

[homes]
comment = Home Directories
read only = No
browseable = No

[netlogon]
comment = Domain Logon
path = /usr/local/samba/lib/netlogon
browseable = No

[profiles]
comment = Roaming Profiles
path = /usr/local/samba/lib/profiles
read only = No
create mask = 0600
directory mask = 0700
browseable = No

[staff]
comment = Lauterbur Staff Share
path = /vxfsvol/staff
read only = No

[public]
comment = Lauterbur Public Share
path = /vxfsvol/public
read only = No

[office-admin]
comment = Office Administrative Share
path = /vxfsvol/home/staff/office-admin
read only = No
lauterbur{24}#


Chuck Theobald
System Administrator
The Robert and Beverly Lewis Center for Neuroimaging
University of Oregon
P: 541-346-0343
F: 541-346-0345


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Tracking users

2005-08-09 Thread AragonX
I'm about to setup a proxy to track a users's Internet usage through our
Linux server.  I would like to be able to tie the IP address to the
users's logon ID.  The only program that I think uses that ID is Samba. 
Does anyone know of a way to tie these pieces of information together?

Sorry if this is not the right place to ask this question.  Thank you in
advance.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba filenames & cpoy

2005-08-09 Thread Maxime Woznicki

Lars a écrit :


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hey

I'm having problems with speciel characters such as Ü, ö and etc. Plus
copying files. I have 2 Harddrive with 2 Partition being shared with
samba on a Debian Sarge server. After googling around i think that this
i a samba problem, and it only occurs on the samba shares.

1)
  The character are being changes from ó to _ or sim.

 


Hello,

For your characters problems, try in the global section of your smb.conf :

display charset = ISO8859-15 (this value is for Western Europe (France), 
use an appropriated one)

unix charset = the value of the default system charset

(for more precisions, man smb.conf)
Restart samba and this should work.

If it doesn't work, look at your kernel supported native languages in 
file systems section, select those which are needed (never uncheck UTF8) 
and recompile it.

I hope it helps you.

For your second issue, I don't know

Max


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.20rc2 Available for Download

2005-08-09 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

==
 My life is driven by bugzilla
 -- Jeremy Allison
==
Release Announcements
=
This is the second release candidate of the 3.0.20 code base
and is provided for testing purposes only.  While close to
the final stable release this snapshot is *not* intended for
production servers.  If all goes well, this could become the
final 3.0.20 release.

Common bugs fixed in 3.0.20rc2 include:

  o Crash bugs in the client spoolss code.
  o Authentication failures caused by unsupported mechanisms.
  o Failures from common MS management tools such as User
Manager, Print Migrator, and Server Manager.


What happened to 3.0.15 - 3.0.19?
==

After some discussion it was deemed that the amount of changes
going into the next Samba 3.0 release needed something to catch
people's attention.  Skipping several releases was chosen as
the best solution with the least overhead.  There will be no
3.0.15 - 3.0.19 ever released.  The next production release
following 3.0.20 should be 3.0.21.

The original announcement about the version number change can
be found in the samba mailing list archives:

http://marc.theaimsgroup.com/?l=samba&m=111721010206997&w=2



Download Details


The uncompressed tarballs and patch files have been signed
using GnuPG (ID F17F9772).  The source code can be
downloaded from:

http://download.samba.org/samba/ftp/rc/

The release notes are available online at:

http://www.samba.org/samba/ftp/rc/WHATSNEW-3-0-20rc2.txt

Binary packages are available at

http://download.samba.org/samba/ftp/Binary_Packages/

Our Code, Our Bugs, Our Responsibility.
(https://bugzilla.samba.org/)

--Enjoy
The Samba Team
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFC+PEsIR7qMdg1EfYRAudIAKCwkujmpsE5pu27lgyjT8bmOra7LQCfXivM
maXatygFu8AFEmMTGvKO2Xk=
=RFNk
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] document request for samba + edirectory

2005-08-09 Thread Tara Chopra
So i have gone through the archives and see a lot of people asking 
if samba can use edirectory as a source for user passwords. No i'm 
down the same road myself =D my company is using edirectory 8.7.3 
on Solaris and redhat enterprise linux 3. the samba server only 
needs to talk to the redhat edirectory server though. From the 
turtorials that i have read a lot pf people hook up edirectory and 
samba for a lot of user info but when it comes time for the 
passwords they rely on smbpasswd command to maintain a seperate 
samba user password database. Is there no secure way of making 
samba fetch user passwords from edirectory directly? -- Tara C.


-- 
___
Sign-up for Ads Free at Mail.com
http://promo.mail.com/adsfreejump.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba filenames & cpoy

2005-08-09 Thread Lars
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hey

I'm having problems with speciel characters such as Ü, ö and etc. Plus
copying files. I have 2 Harddrive with 2 Partition being shared with
samba on a Debian Sarge server. After googling around i think that this
i a samba problem, and it only occurs on the samba shares.

1)
   The character are being changes from ó to _ or sim.

2)
   I can't the files/folders with the changes names/stranges characters.
The error is "cannot stat - no directory". I can move the files with no
problem..

There is a post from 2003, where he has almost the same problem. But no
answer..
http://lists.samba.org/archive/samba/2003-April/065747.html

- --
/Lars
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFC+RcBSdVv6NOAbD4RAlvGAJ0bKYz8bOlOeQr8Pjy84ELHD1JDvACcCfDu
Jjw3SEAifNZ8IpFjfru0RKI=
=v/u1
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] problem after upgrading to samba 3.0.14a

2005-08-09 Thread James Mauser
Hey all, 

I was wondering if anyone could help me out with a problem that I am having
on a share (other than home directory) after upgrading to samba 3.0.14a

 

The situation is this:

  A share is created 

  Like this 

 

[me_office]

browsable = no

comment = ME Front Office

valid users = @me_front

force group = mefront

create mode = 0775

directory mode =0775

read only = no

writeable = yes

path = /home/mestaff/me_front_office

 

 

 

the users in the NIS group me_front get access to files and can read write
with no problem, however they are unable to overwrite an exisiting file
(even if they created it ) 

so programs like MSword that have auto-backup turend on, just end up making
lots of ~tmp files instead of being able to save the file back.  I've had to
turn of the autobackup feature in word. And everytime they save the file it
needs to be given a different file name or the error "access denied" comes
up.  This does NOT happen if writing to the home share.

 

This samba box is joined to a w2k3 AD

The domain its connected to is a child domain where all users are seen from
the getent passwd command

However getent group returns groups with child domain users but NOT parent
domain users in the group (this seems to be broken, thus the use for NIS
groups)

 

 

Any thoughts on what to add to the smb.conf file to fix this?  This was
working fine until the upgrade to 3.0.14a

 

 

Thanks in advance

 

James Mauser

Computer Coordinator 

College of Engineering and Computer Science

Florida Atlantic University

561-239-2546

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Help needed please? SMB 3.0.14a - SMBPASSWD

2005-08-09 Thread Todd Johnson

Hello -

Im having a problem w/ my users being able to change their SMB password. 
What is the best approach to allow users acces to smbpasswd to change 
their own passwords when they want?


Right now Im getting the following error:

machine 127.0.0.1 rejected the (anonymous) password change: Error was : 
Wrong Password.

Failed to change password for donald


Here is my global from the smb.conf

[global]
   netbios name = WOOT
   socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 
SO_SNDBUF=8192

   server string = SMB v3.0.14a
   local master = yes
   preferred master = yes
   domain logons = no
   domain master = no
   workgroup = Puddin
   interfaces = 146.61.201.2
   bind interfaces only = no
   log file = /var/log/samba-log.%m
   log level = 2
   max log size = 50
   lock directory = /var/lock/samba
   printcap name = /etc/printcap
   wins support = no
   wins server = 136.61.203.14
   os level = 62
   remote announce = 136.61.203.255
   deadtime = 15

--
Thank you
Todd Johnson


==
Todd Johnson
State of Alaska
Dept. of Natural Resources
Computer Information Center
MicroComputer/Network Specialist
(907) 269-8831
(907) 269-8920 FAX
[EMAIL PROTECTED]
==









--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Question about SSL/TLS for ldap and samba

2005-08-09 Thread Gavin Henry
On Monday 08 Aug 2005 10:25, [EMAIL PROTECTED] wrote:
> [EMAIL PROTECTED] a écrit sur
>
> 08/08/2005 11:17:59 :
> > > What is the difference between LDAPs and ldapv3 start-tls ?
> >
> > ldaps listens on port 636 and start-tls is used on the standard 389 ldap
> > port.
>
> I know that, but I ask because I read in samba-howto-collection that samba
> prefer to use ldapv3 start-tls that the protocol ldaps.  And I want to know
> why
>
> > > I select the ldaps protocol in my smb.conf because I don't kown how
> > > samba manage certificate.
> >
> > I would use:
> >
> > ldap ssl = start_tls
> >
> > > If samba can use a certficate, it's not a problem.  But I think that
> > > samba use the certificate used with openLDAP client.
> >
> > Samba looks at the standard system ldap.conf, which is in
> > /etc/openldap/ldap.conf
>
> yes, but I don't like this because I cannot specify a certificate for samba
> only, is the certificate specify in /etc/openldap/ldap.conf which is used.

Why do you want a different one?

>
> > You can tell OpenLDAP to only allow TLS connections via the "security"
> > setting.
> >
> > See man slapd.conf
> >
> > Gavin.
> >
> > --
> > Kind Regards,
> >
> > Gavin Henry.
> > Managing Director.
> >
> > T +44 (0) 1224 279484
> > M +44 (0) 7930 323266
> > F +44 (0) 1224 742001
> > E [EMAIL PROTECTED]
> >
> > Open Source. Open Solutions(tm).
> >
> > http://www.suretecsystems.com/
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/listinfo/samba
>
> ---
> Stéphane PURNELLE [EMAIL PROTECTED]
> Service Informatique   Corman S.A.   Tel : 00 32 087/342467

-- 
Kind Regards,

Gavin Henry.
Managing Director.

T +44 (0) 1224 279484
M +44 (0) 7930 323266
F +44 (0) 1224 742001
E [EMAIL PROTECTED]

Open Source. Open Solutions(tm).

http://www.suretecsystems.com/
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] PDC, usrmgr.exe created user lacks profile info

2005-08-09 Thread Stephane Bernaud

I'm finally near the end (I hope) of setting samba 3.0.14a as a PDC on a
debian sarge, but I (and google, and list archive) can't manage to find
a solution.

When I add user with the help of usrmgr on my XP box, user is created
both in linux and samba (thanks user add script), but lacks profile info
(I mean Home Directory, HomeDir Drive, Logon Script and Profile Path),
so roaming profile doesn't work.

If I create user locally (with smbpasswd or pdbedit) profile info are
created correctly.

As a workaround, I tried to add those info from the add user script, but
as the user is not yet created in samba, it doesn't work.

Did I miss something ? Is there a workaround ?

Thanks in advance for your answer.

User created remotly (Usrmgr)
-

ocb:~# pdbedit -Lv test_user
Unix username:test_user
NT username:
Account Flags:[U  ]
User SID: S-1-5-21-230672243-2454288981-608407499-3026
Primary Group SID:S-1-5-21-230672243-2454288981-608407499-513
Full Name:test user
Home Directory:
HomeDir Drive:
Logon Script:
Profile Path:
Domain:   COUSPEAU
Account desc:
Workstations:
Munged dial:
Logon time:   0
Logoff time:  Fri, 13 Dec 1901 21:45:51 GMT
Kickoff time: 0
Password last set:Tue, 09 Aug 2005 21:10:23 GMT
Password can change:  Tue, 09 Aug 2005 21:10:23 GMT
Password must change: Fri, 13 Dec 1901 21:45:51 GMT
Last bad password   : 0
Bad password count  : 0
Logon hours : FF


User created locally :
---

ocb:~# pdbedit -Lv jean
Unix username:jean
NT username:
Account Flags:[U  ]
User SID: S-1-5-21-230672243-2454288981-608407499-3024
Primary Group SID:S-1-5-21-230672243-2454288981-608407499-513
Full Name:
Home Directory:   \\ocb\jean
HomeDir Drive:H:
Logon Script: login.bat
Profile Path: \\ocb\profiles\jean
Domain:   COUSPEAU
Account desc:
Workstations:
Munged dial:
Logon time:   0
Logoff time:  Fri, 13 Dec 1901 21:45:51 GMT
Kickoff time: Fri, 13 Dec 1901 21:45:51 GMT
Password last set:Tue, 09 Aug 2005 20:54:57 GMT
Password can change:  Tue, 09 Aug 2005 20:54:57 GMT
Password must change: Fri, 13 Dec 1901 21:45:51 GMT
Last bad password   : 0
Bad password count  : 0
Logon hours : FF


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] RE: ACl issue with 3.014

2005-08-09 Thread Verlezza, Domenic
My mistake.  We are actually running 3.014a already.

-Original Message-
From: Verlezza, Domenic 
Sent: Tuesday, August 09, 2005 2:42 PM
To: 'samba@lists.samba.org'
Subject: ACl issue with 3.014


Hi,
 
We had Samba v 3.011 installed on Solaris 2.8.  We upgraded to v3.014
and ran into the ACL issue where users can edit their files from Windows
XP, but cannot delete or rename them.
 
Is there a new parameter for this, or is it a known bug?  If it is a
bug, does 3.014a fix it?
 
Thanks,
Dom Verlezza
TIAA-CREF
(704)455-8944



**
This message, including any attachments, contains confidential information 
intended for a specific individual and purpose, and is protected by law.  If 
you are not the intended recipient, please contact sender immediately by reply 
e-mail and destroy all copies.  You are hereby notified that any disclosure, 
copying, or distribution of this message, or the taking of any action based on 
it, is strictly prohibited.
TIAA-CREF
**

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Net RPC Vampire not sucking all groups

2005-08-09 Thread Tim Hodgkinson
I've tried numerous times but cannot get Vampire to bring across all groups
or add users to all groups that they belong to. Sometimes I get every group
except 1, other times not so lucky. 

 

Vampire log is below with an example of what is going wrong.

 

vampire.log

 

Fetching DOMAIN database

Creating unix group: 'skischool'

Creating unix group: 'sales'

Creating unix group: 'Aramark'

Creating unix group: 'purchasing'

Creating unix group: 'MtnOps'

Creating unix group: '2005comptrol'

Creating unix group: 'accounting'

Creating unix group: 'bourgeausrvcs'

Creating unix group: 'guestsrvcs'

Creating unix group: 'inn'

Creating unix group: 'hr'

Creating unix group: 'test'

Creating unix group: 'itWinners'

Creating unix group: 'maintenance'

Creating unix group: 'naudit'

Creating unix group: 'aramarkadmin'

Creating unix group: 'Exec'

Creating unix group: 'aramarkFunctions'

Creating unix group: '2006Comptrol'

Creating unix group: 'payroll'

Creating unix group: 'SecuritySSV'

Creating unix group: 'backups'

Creating account: Administrator

Creating account: Guest

Creating account: LOOKOUT$

Creating account: sql

Creating account: thodgkinson

.

 

Missing one group in the above (public), as well as for example 2006Comptrol
does not populate but 2005comptrol does.

 

adding user thodgkinson to group 2005comptrol

 

getent group

 

2005comptrol:x:1005:Administrator,lchapman,hando,jcarroll,jchesnut,salbrecht
,shaddock,thodgkinson,sp2005,lpatterson,aladha,adore,ossis,cmikkelsen,cburto
n,mhealy,scarscadden,lmccheyne,boardroom,bgamble,lmoore,wsmith,smorice,lkoza
n,dfebbo,dpuff,gstevely,skihub02,kbuffel,krobertson,sp2006,sberry,lirvine,ti
cket01,ticket02,ticket03,ticket04,ticket05,ticket06,ticket07,ticket08,ticket
09,pass01,tent02,pass03,pass04,tent01,pass02,skitech01,rental02,rental03,ren
tal04,rental05,rental01,special01,special02,special03,special04,special05,sk
i01,ski02,ski03,ski04,ski05,ski06,tent03,Valet,hrseason,ebrousseau,hotel_che
ckin,rhoffart,rentalsheadcashier,skiosk01,skiosk02,rkerr,daycare01,daycare02
,slaver,skihub01,rneilson,rgordon,skiosk03,jgillespie,mwatson

accounting:x:1006:

bourgeausrvcs:x:1007:

guestsrvcs:x:1008:

inn:x:1009:

hr:x:1010:

test:x:1011:

itWinners:x:1012:

maintenance:x:1013:

naudit:x:1014:

aramarkadmin:x:1015:

Exec:x:1016:

aramarkFunctions:x:1017:

2006Comptrol:x:1018:

payroll:x:1019:

SecuritySSV:x:1020:

backups:x:1021:

 

I'm suppose to be a member of 2006Comptrol as well.

 

Any help would be most appreciated.

 

Cheers,

 

Tim Hodgkinson

 

Here is my setup:

 

Suse 9.2

Samba-3.0.14a-4.1

Openldap2-2.2.15-5.2

PDC NT4sp6a

 

Smb.conf

 

# Global parameters

[global]

workgroup = SSVMTN

interfaces = eth1, lo

bind interfaces only = Yes

passdb backend = ldapsam:ldap://127.0.0.1

username map = /etc/samba/smbusers

log level = 10

syslog = 0

log file = /var/log/samba/%m

max log size = 50

smb ports = 139 445

name resolve order = wins bcast hosts

time server = Yes

printcap name = CUPS

show add printer wizard = No

add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"

add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g"

add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m "%u"
"%g"

set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g "%g"
"%u"

add machine script = /opt/IDEALX/sbin/smbldap-useradd -w "%u"

logon script = scripts\logon.bat

logon path = ""

logon drive = U:

logon home = \\monarch\%U

domain logons = Yes

domain master = No

wins server = 172.16.1.100

ldap admin dn = cn=Manager,dc=skibanff,dc=com

ldap group suffix = ou=Groups

ldap idmap suffix = ou=Idmap

ldap machine suffix = ou=People

ldap passwd sync = Yes

ldap suffix = dc=skibanff,dc=com

ldap ssl = no

ldap user suffix = ou=People

idmap backend = ldap:ldap://127.0.0.1

idmap uid = 1-2

idmap gid = 1-2

winbind nested groups = Yes

ea support = Yes

map acl inherit = Yes

 

Slapd.conf

 

include /etc/openldap/schema/core.schema

include /etc/openldap/schema/cosine.schema

include /etc/openldap/schema/inetorgperson.schema

include /etc/openldap/schema/nis.schema

include /etc/openldap/schema/samba3.schema

 

pidfile /var/run/slapd/slapd.pid

argsfile/var/run/slapd/slapd.args

 

access to dn.base=""

by self write

by * auth

 

access to attr=userPassword

by self write

by * auth

 

access to attr=shadowLastChange

by self write

by * read

 

access to *

by * read

by anonymous auth

 

loglevel

[Samba] Error loading module '/opt/local/samba/lib/charset/ISO8859-1.so'

2005-08-09 Thread Amor Siempre te amare
I'm trying to install Samba.
I need to put some files on Samba server accessed from
Windows clients and authenticated through our Win2k
Active Directory Server.

I'm following instructions from "Chapter 13_ Identity
Mapping (IDMAP).htm", but at the moment I cannot
connect. I've follow many directions from too much
sites over Internet, and there are a lot of
instructions, buy I cannot get connected. When I type
\\my_smb_server from Start/Run menu on a machine
signed as Administrator, appear a Window asking for
user and password.

When a type net ads join -UAdministrator
Administrator's password:

I get this: 
[2005/08/09 14:22:20, 0]
libads/kerberos.c:ads_kinit_password(146)
  kerberos_kinit_password [EMAIL PROTECTED]
failed: Cannot find KDC for
 requested realm
[2005/08/09 14:22:20, 0]
utils/net_ads.c:ads_startup(191)
  ads_connect: Cannot find KDC for requested realm



Here are my configuration files:
-
File smb.conf
-
[global]
workgroup = MAINWIN2KGROUP
netbios name = SMBHOST
realm = MYDOMAIN.COM
security = ADS
template shell = /bin/bash
idmap uid = 500-1000
idmap gid = 500-1000
winbind use default domain = Yes
winbind nested groups = Yes


# Shares section
[shared1]
comment = Datos compartidos
path = /home/user/toSamba
force user = Administrator
browseable = yes


--
/etc/krb5.conf
--
[logging]
 default = FILE:/var/kerberos/krb5/krb5libs.log
 kdc = FILE=/var/kerberos/krb5/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 default_realm = MYDOMAIN.COM
 dns_lookup_realm = false
 dns_lookup_kdc = false

[appdefaults]
 pam = {
   debug = false
   ticket_lifetime = 36000
   renew_lifetime = 36000
   forwardable = true
   krb4_convert = false
}


log.smbd

[2005/08/09 13:11:26, 5]
lib/module.c:smb_probe_module(104)
  Probing module 'ISO8859-1'
[2005/08/09 13:11:26, 5]
lib/module.c:smb_probe_module(115)
  Probing module 'ISO8859-1': Trying to load from
/opt/local/samba/lib/charset/ISO8859-1.so
[2005/08/09 13:11:26, 3]
lib/module.c:do_smb_load_module(49)
  Error loading module
'opt/local/samba/lib/charset/ISO8859-1.so': ld.so.1
: /opt/local/samba/sbin/smbd: fatal:
/opt/local/samba/lib/charset/ISO8
859-1.so: open failed: No such file or directory
[2005/08/09 13:11:26, 5]
lib/charcnv.c:charset_name(78)
  Locale charset 'ISO8859-1' unsupported, using ASCII
instead


Thank you for any answer.

Regards.






___ 
Do You Yahoo!? 
La mejor conexión a Internet y 2GB extra a tu correo por $100 al mes. 
http://net.yahoo.com.mx 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] User - Changing Own Passwords w/ smbpasswd

2005-08-09 Thread Todd Johnson

Hello -

Im having a problem w/ my users being able to change their SMB password. 
What is the best approach to allow users acces to smbpasswd to change 
their own passwords when they want?


Right now Im getting the following:

machine 127.0.0.1 rejected the (anonymous) password change: Error was : 
Wrong Password.

Failed to change password for donald

--
Thank you
Todd Johnson


==
Todd Johnson
State of Alaska
Dept. of Natural Resources
Computer Information Center
MicroComputer/Network Specialist
(907) 269-8831
(907) 269-8920 FAX
[EMAIL PROTECTED]
==









--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Samba with NIS Authentication

2005-08-09 Thread Saurabh Jain
I have a huge UNIX network. I want to deploy a Samba server using NIS
Authentication mechanism for the growing number of windows machines.
What are the pros and cons of using NIS authentication with Samba?
Also any pointer/docs in setting up Samba with NIS Authentication. I
am pretty much familiar in setting up Samba using the default
smbpasswd authentication.

Thanks in advance

On 8/8/05, Saurabh Jain <[EMAIL PROTECTED]> wrote:
> I have a huge UNIX network. I want to deploy a Samba server using NIS
> Authentication mechanism for the growing number of windows machines.
> What are the pros and cons of using NIS authentication with Samba?
> Also any pointer/docs in setting up Samba with NIS Authentication. I
> am pretty much familiar in setting up Samba using the default
> smbpasswd authentication.
> 
> Thanks in advance
>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Slow sequential write on Samba drive

2005-08-09 Thread Jeremy Allison
On Tue, Aug 09, 2005 at 10:01:32AM -0700, Don wrote:
> 
> Hi,
> 
> I am experiencing very slow writes over samba.  We have a modest linux 
> network (about 6 servers) and a medium sized office (20-30 windows 
> boxes).  We have had a single linux file server that has done us yeoman 
> service for several years.  It is running RH 7.3.  I am trying to set up 
> the next generation file server with a huge (to me anyway) 2TB Promise 
> VTrak 12110 RAID disk.  I've installed Fedora Core 3 and got the file 
> server up and running and it works fine... except it seemed slower than 
> the older system.
> 
> So, I downloaded "Performance Test" from www.passmark.com that tests 
> things like hard drive speeds under Windows.  What the test told me was:

Thanks for that - I'll download and play with this test and see if I
can reproduce the problem.

Thanks,

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] ACl issue with 3.014

2005-08-09 Thread Verlezza, Domenic
Hi,
 
We had Samba v 3.011 installed on Solaris 2.8.  We upgraded to v3.014
and ran into the ACL issue where users can edit their files from Windows
XP, but cannot delete or rename them.
 
Is there a new parameter for this, or is it a known bug?  If it is a
bug, does 3.014a fix it?
 
Thanks,
Dom Verlezza
TIAA-CREF
(704)455-8944


**
This message, including any attachments, contains confidential information 
intended for a specific individual and purpose, and is protected by law.  If 
you are not the intended recipient, please contact sender immediately by reply 
e-mail and destroy all copies.  You are hereby notified that any disclosure, 
copying, or distribution of this message, or the taking of any action based on 
it, is strictly prohibited.
TIAA-CREF
**

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba - XP performance problem

2005-08-09 Thread Jonathan Johnson
I can't say that this will apply in your situation, but I've seen where 
having stale "connections" to non-existent servers can cause a 
performance issue when browsing. Here's a couple of things to try:


1) Remove any shortcuts to non-existent network locations -- this 
applies to broken mapped drives, shortcuts on the desktop and in My 
Documents, and shortcuts in My Network Places


2) Look in the registry at 
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 (or 
...\MountPoints) -- Under this key, there will be several subkeys. Some 
of these are in the form of ##Server##Share -- if there are any of these 
that refer to nonexistent servers or shares, remove them. DO NOT remove 
any of the other keys, else your system might not boot properly. This 
key is seems to be the Windows version of the /etc/fstab file.


Nevertheless, I'm glad to see that you found something interesting. 
Hopefully, your research will help the developers solve some other 
nagging problems!


--Jonathan Johnson

David Beck wrote:


Hello There,

After having googled the whole internet for days I decided to go 
public with this issue.
The result of my google queries so far is that there are plenty of 
others with the very same problem I have and noone posted a reasonable 
answer to this:


Using Samba 3 with XP gets bad performance. I tested this on Tru64 
5.1b and FreeBSD 5.3 with the very same symptoms.
The throughput bw XP and Samba goes up and down. It starts transfering 
with a reasonable speed and after having transfered around 16 megs it 
slows down.
I tried many configuration options regarding locking, tcp settings, 
xmit size and every combination that could make any sense for me.


Then I gave up with this configuration mess as I could lower the 
performnce easily, but the performance jittering was the same.


Now a few notes before I continue: I tested the FreeBSD server on the 
loopback interface and the file write speed was around 43 Megs that is 
close to the disks maximum. I also tested the XP machine with a 
Windows  server and the write performnce was around 10 Megs on a 
100Mbit link. In addition to that the FreeBSD machine is at my home 
and the Tru64 and the Windows server are where I work. I'm pretty sure 
that this is not a network issue.


After spending a lot of time with investigation I decided to go deeper 
in this issue. I installed ethereal to capture the traffic and compare 
the results bw XP-Windows and XP-Tru64. The test was to copy 50Meg 
file to both servers and capture the packets. To my surprise the 
conversation was quite different.


XP-Windows (excerpt):
- nt create and x
- trans2: query file info internal
- set file info
- tcp data stream...

XP-Samba (excerpt):
- nt create and x
- trans2: query file info internal
- (query file info + write and x request) many times, incresing 
offset, one byte length

- tcp data stream

In case of XP-Samba, the last two steps are repeated many times.
Large part of the effective bandwith is filled with query file info 
and 1 byte writes.


The packet data can be downloaded from these links:

http://dbeck.beckground.hu/download/xp-samba.bz2
http://dbeck.beckground.hu/download/xp-win.bz2

I also made a screenshot of a bandwith monitor to show what I mean by 
performance jittering:


http://dbeck.beckground.hu/download/samba-performance-write.PNG
http://dbeck.beckground.hu/download/samba-performance-read.PNG

Please note that the original packet log for the 50 Meg file was very 
large, so I kept only the interesting parts.


Last, could anyone there, Samba and SMB wizards help me, how to solve 
this performance issue?


Thank you in advance,

David.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Update password via windows

2005-08-09 Thread gilbertonunes
Hi all

I have a samba PDC with LDAP work on properly.
If I set ldap passwd sync = yes in smb.conf, all users in the net can update
your password through windows wizard.
But, when I try login through ssh or KDM, it's never work!

I noticed that when I update the passwd in windows wizard, the
smbldap-password command change the authentication method from CRYPT to SSHA.
But when I change the passwd again, the auth method returns to CRYPT, and the
ssh or KDM work properly.

Some one can help me with this!?!?

Thanks.


Acesse o link abaixo para conhecer nossa empresa:  
http://www.selbetti.com.br/apresentacao 
__ 
 
 
Nome: Gilberto Nunes - Analista de Suporte 
Selbetti Equip. Escritorio Ltda 
Fone = 441-6034 
www.selbetti.com.br

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Still having samba join domain problems

2005-08-09 Thread Van Sickler, Jim
Anthony,

Look to see if the RestrictAnonymous setting in
the registry on the XP box is set to 2.  If it is,
set it to 0 or 1, and try to add it again.  Set it
back to 2 when you're done.

Jim

> -Original Message-
> From: Anthony Hess [mailto:[EMAIL PROTECTED]
> Sent: Monday, August 08, 2005 5:46 PM
> To: samba@lists.samba.org
> Subject: [Samba] Still having samba join domain problems
> 
> 
> So I was having problems getting a machine to join to a samba 
> PDC running on
> Solaris 9 using the bundled LDAP server.  Ill skip all my previous
> troubleshooting steps here (Ive tried just about anything and 
> everything).
> 
> Anyway - so I deleted all of the attributes for samba in the 
> directory and
> ran the idealx populate script.  It seemed to go just fine (the other
> scripts seem to work fine too).
> 
> When I try to join the domain using the "root" account the 
> Windows XP PC
> comes back with "The following error occurred attempting to 
> join the domain
> "SUNDEV"; The user name could not be found".
> 
> In the smbd log (at level 10) this is all I get:
> 
> [2005/08/08 17:27:35, 0] 
> rpc_server/srv_samr_nt.c:_samr_create_user(2324)
>   _samr_create_user: Running the command
> `/usr/local/samba/acctscrp/smbldap-useradd t 5 -w "engrpc$"' gave 9
> 
> (and that only happens when I try to add an account twice in 
> a row - Ive
> seen gave 1 show up before but its not happening now)
> 
> It DOES create a posix account in the right ou, just not the 
> samba piece.
> 
> Now Im not sure if Im going off way in the wrong direction 
> here, but when I
> try to add a machine account (with the posix information 
> still there from
> the script) with pdbedit (-a -m) I get:
> 
> ldapsam_modify_entry: Failed to modify user dn=
> uid=engrpc$,ou=Machines,dc=engr, dc=arizona, dc=edu with: Object class
> violation
> 
> ldapsam_add_sam_account: failed to modify/add user with uid = 
> engrpc$ (dn =
> uid=engrpc$,ou=Machines,dc=engr, dc=arizona, dc=edu)
> Unable to add machine! (does it already exist?)
> 
> I get the same error even if the posix information isnt 
> already there.  Here
> is what it gives me in the ldap logs:
> 
> [08/Aug/2005:17:41:22 -0700] - Entry "uid=engrpc$,ou=Machines,dc=engr,
> dc=arizona, dc=edu" missing attribute "sambaSID" required by 
> object class
> "sambaSamAccount"
> 
> It does NOT give me this if Im using the scripts.
> 
> OK, can anyone even point me in the direction I should be 
> looking?  I can
> see a sambaSID in ldap or by using the net getlocalsid command.
> 
> Thanks,
> 
> Tony
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Migrating from samba to win 2k3 pdc

2005-08-09 Thread Jonathan Johnson
I've used Microsoft's Active Directory Migration Tool with reasonably 
good success to migrate user and machine accounts from Samba to ADS. 
ADMT is able to retrieve the passwords from a Windows NT domain, but to 
my knowledge, NOT from a Samba domain. ADMT is on your Windows 2K3 CD.


Some gotchas with regard to migration of workstations:

1) The local Administrator password on the workstations (and the 
Administrator password on the old domain) MUST be the same as the 
Administrator password on the new domain


2) Do not have users logged into the computer when migrating workstations

3) On the workstation, make sure there is no "DNS Suffix" specified

4) There is something else but I can't remember it off the top of my 
head. Search the archives -- I've posted on this before.


--Jonathan Johnson


Ross McInnes wrote:


Yes I know it's a bad thing, but due to several issues I am moving from a
samba pdc to a windows 2k3 pdc

But, im keeping samba as the file store, ive sorted it so that samba will
talk to the w2k3 pdc and auth using winbindd etc that's nps.

But, I need to get the users and passwords off the linux/samba server and
onto the w2k3 server...

Any ideas? Password crackers/hax methods accepted!

Either that or it's a reset over 2000 users passwords job (my poor fingers)

Many thanks

Ross

 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] request for samba + edirectory

2005-08-09 Thread Tara Chopra
So i have gone through the archives and see a lot of
people asking if samba can use edirectory as a source
for user passwords. No i'm down the same road myself
=D my company is using edirectory 8.7.3 on Solaris and
redhat enterprise linux 3. the samba server only needs
to talk to the redhat edirectory server though. From
the 
turtorials that i have read a lot pf people hook up
edirectory and samba for a lot of user info but when
it comes time for the passwords they rely on smbpasswd
command to maintain a seperate samba user password
database. Is there no secure way of making samba fetch
user passwords from edirectory directly? -- Tara C.

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Net RPC Vampire not sucking all groups

2005-08-09 Thread Tim Hodgkinson
I've tried numerous times but cannot get Vampire to bring across all groups
or add users to all groups that they belong to. Sometimes I get everygroup
except 1, other times not so lucky.  Vampire log is below with an example of
what is going wrong.

 

vampire.log

 

Fetching DOMAIN database

Creating unix group: 'skischool'

Creating unix group: 'sales'

Creating unix group: 'Aramark'

Creating unix group: 'purchasing'

Creating unix group: 'MtnOps'

Creating unix group: '2005comptrol'

Creating unix group: 'accounting'

Creating unix group: 'bourgeausrvcs'

Creating unix group: 'guestsrvcs'

Creating unix group: 'inn'

Creating unix group: 'hr'

Creating unix group: 'test'

Creating unix group: 'itWinners'

Creating unix group: 'maintenance'

Creating unix group: 'naudit'

Creating unix group: 'aramarkadmin'

Creating unix group: 'Exec'

Creating unix group: 'aramarkFunctions'

Creating unix group: '2006Comptrol'

Creating unix group: 'payroll'

Creating unix group: 'SecuritySSV'

Creating unix group: 'backups'

Creating account: Administrator

Creating account: Guest

Creating account: LOOKOUT$

Creating account: sql

Creating account: thodgkinson

.

 

Missing one group in the above (public), as well as for example 2006Comptrol
does not populate but 2005comptrol does.

 

adding user thodgkinson to group 2005comptrol

 

getent group

 

2005comptrol:x:1005:Administrator,lchapman,hando,jcarroll,jchesnut,salbrecht
,shaddock,thodgkinson,sp2005,lpatterson,aladha,adore,ossis,cmikkelsen,cburto
n,mhealy,scarscadden,lmccheyne,boardroom,bgamble,lmoore,wsmith,smorice,lkoza
n,dfebbo,dpuff,gstevely,skihub02,kbuffel,krobertson,sp2006,sberry,lirvine,ti
cket01,ticket02,ticket03,ticket04,ticket05,ticket06,ticket07,ticket08,ticket
09,pass01,tent02,pass03,pass04,tent01,pass02,skitech01,rental02,rental03,ren
tal04,rental05,rental01,special01,special02,special03,special04,special05,sk
i01,ski02,ski03,ski04,ski05,ski06,tent03,Valet,hrseason,ebrousseau,hotel_che
ckin,rhoffart,rentalsheadcashier,skiosk01,skiosk02,rkerr,daycare01,daycare02
,slaver,skihub01,rneilson,rgordon,skiosk03,jgillespie,mwatson

accounting:x:1006:

bourgeausrvcs:x:1007:

guestsrvcs:x:1008:

inn:x:1009:

hr:x:1010:

test:x:1011:

itWinners:x:1012:

maintenance:x:1013:

naudit:x:1014:

aramarkadmin:x:1015:

Exec:x:1016:

aramarkFunctions:x:1017:

2006Comptrol:x:1018:

payroll:x:1019:

SecuritySSV:x:1020:

backups:x:1021:

 

 

Any help would be most appreciated.

 

Cheers,

 

Tim Hodgkinson

 

Here is my setup:

 

Suse 9.2

Samba-3.0.14a-4.1

Openldap2-2.2.15-5.2

PDC NT4sp6a

 

Smb.conf

 

# Global parameters

[global]

workgroup = SSVMTN

interfaces = eth1, lo

bind interfaces only = Yes

passdb backend = ldapsam:ldap://127.0.0.1

username map = /etc/samba/smbusers

log level = 10

syslog = 0

log file = /var/log/samba/%m

max log size = 50

smb ports = 139 445

name resolve order = wins bcast hosts

time server = Yes

printcap name = CUPS

show add printer wizard = No

add user script = /opt/IDEALX/sbin/smbldap-useradd -m "%u"

add group script = /opt/IDEALX/sbin/smbldap-groupadd -p "%g"

add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m "%u"
"%g"

set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g "%g"
"%u"

add machine script = /opt/IDEALX/sbin/smbldap-useradd -w "%u"

logon script = scripts\logon.bat

logon path = ""

logon drive = U:

logon home = \\monarch\%U

domain logons = Yes

domain master = No

wins server = 172.16.1.100

ldap admin dn = cn=Manager,dc=skibanff,dc=com

ldap group suffix = ou=Groups

ldap idmap suffix = ou=Idmap

ldap machine suffix = ou=People

ldap passwd sync = Yes

ldap suffix = dc=skibanff,dc=com

ldap ssl = no

ldap user suffix = ou=People

idmap backend = ldap:ldap://127.0.0.1

idmap uid = 1-2

idmap gid = 1-2

winbind nested groups = Yes

ea support = Yes

map acl inherit = Yes

 

Slapd.conf

 

include /etc/openldap/schema/core.schema

include /etc/openldap/schema/cosine.schema

include /etc/openldap/schema/inetorgperson.schema

include /etc/openldap/schema/nis.schema

include /etc/openldap/schema/samba3.schema

 

pidfile /var/run/slapd/slapd.pid

argsfile/var/run/slapd/slapd.args

 

access to dn.base=""

by self write

by * auth

 

access to attr=userPassword

by self write

by * auth

 

access to attr=shadowLastChange

by self write

by * read

 

access to *

by * read

by anonymous auth

 

loglevel296

 

#schemacheckon

idletimeout 30

#backend  

[Samba] Re: wbinfo problem

2005-08-09 Thread Tom Diehl

On Tue, 9 Aug 2005, Pablo wrote:


Tom Diehl wrote:


Hi all,

I am trying to setup a samba pdc using the "making users happy" example 
from
Samba-by-Example. Everything seems to check out fine except that I cannot 
get
wbinfo -u to work. When I do wbinfo -g I get a list of the groups. If I do 
wbinfo -u I get the following:


(pocono pts4) # wbinfo -u
Error looking up domain users
(pocono pts4) #

I tried turning up the logging for samba but wbinfo does not seem to 
generate

any entries.

All of the other tests I have tried work. I can even use smbclient to login
and poke around.

I am using samba-3.0.14a on Red Hat EL4 running on an em64t system. 
In addition I am having the same problem on the bdc. That box is identical 
to

the pdc.

Can someone tell me how to troubleshoot this problem?


Did you set the user credentials that wbinfo should connect as?
Try the following (taken directly from 
http://us5.samba.org/samba/docs/man/Samba-HOWTO-Collection/FastStart.html):


root# wbinfo --set-auth-user=root%'bigsecret'


I had missed that but it did not help. :-) In reading the man pg for wbinfo
that appears to only be for w2k systems anyway.

I am still at a loss for the cause of this problem. Does anyone know a way
to get wbinfo to produce logs? Wtih logging turned up in both samba and ldap
I see nothing when I try to do the wbinfo -u. When I do -g I see the query in 
the
openldap logs.

BTW openldap version == openldap-2.2.13-2

Anyone else have any other suggestions?

Thanks for trying.

Regards,

Tom
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Slow sequential write on Samba drive

2005-08-09 Thread Don


Hi,

I am experiencing very slow writes over samba.  We have a modest linux 
network (about 6 servers) and a medium sized office (20-30 windows 
boxes).  We have had a single linux file server that has done us yeoman 
service for several years.  It is running RH 7.3.  I am trying to set up 
the next generation file server with a huge (to me anyway) 2TB Promise 
VTrak 12110 RAID disk.  I've installed Fedora Core 3 and got the file 
server up and running and it works fine... except it seemed slower than 
the older system.


So, I downloaded "Performance Test" from www.passmark.com that tests 
things like hard drive speeds under Windows.  What the test told me was:


OLD SERVER
sequential read:   6.2 MB/s
sequential write: 6.4 MB/s
random seek + RW: 2 MB/s

NEW SERVER
sequential read:   8.9 MB/s
sequential write: 0.38 MB/s   <=   *OUCH!!!*
random seek + RW: 15.9 MB/s

So, the read time is good, its just the sequential write time that 
really sucks.  What I observed while running this test was the CPU went 
up to 99% using "top" during the write time.


The new server is a Dell rack-mount server with a Xeon 2.8GHz CPU with 
2G of RAM.  My smb.conf is below.


I don't really know what I'm doing in debugging Samba... its always 
worked fine for me in the past and I've never experienced this kind of 
problem so I'm not sure where to start.


Any advice would be appreciated!!

Don


#=== Global Settings 
=

[global]

   netbios aliases = fs3 work2fs
   workgroup = pgr
   server string = Samba Server

   log file = /var/log/samba/%m.log
   max log size = 50

   smb passwd file = /usr/local/samba/private/smbpasswd
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   name resolve order = wins host lmhosts bcast
   dns proxy = no
   preserve case = yes
   short preserve case = yes

# Share Definitions 
==

   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
   template shell = /bin/false
   username map = /etc/samba/smbusers
   password server = None
   winbind use default domain = no
   guest ok = yes

[sample]
   comment = Sample Disk
   path = /work/work2
   writeable = yes
   guest ok = yes
   printable = no


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] wbinfo problem

2005-08-09 Thread Pablo

Tom Diehl wrote:


Hi all,

I am trying to setup a samba pdc using the "making users happy" example from
Samba-by-Example. Everything seems to check out fine except that I cannot get
wbinfo -u to work. When I do wbinfo -g I get a list of the groups. If I do 
wbinfo -u I get the following:


(pocono pts4) # wbinfo -u
Error looking up domain users
(pocono pts4) #

I tried turning up the logging for samba but wbinfo does not seem to generate
any entries.

All of the other tests I have tried work. I can even use smbclient to login
and poke around.

I am using samba-3.0.14a on Red Hat EL4 running on an em64t system. 


In addition I am having the same problem on the bdc. That box is identical to
the pdc.

Can someone tell me how to troubleshoot this problem?

Regards,

Tom Diehl   [EMAIL PROTECTED]   Spamtrap address [EMAIL 
PROTECTED]
 


Did you set the user credentials that wbinfo should connect as?
Try the following (taken directly from 
http://us5.samba.org/samba/docs/man/Samba-HOWTO-Collection/FastStart.html):


root# wbinfo --set-auth-user=root%'bigsecret'

Hope that helps.

Pablo

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Windows can't see my Samba shares...

2005-08-09 Thread Pablo

Vincente Aggrippino wrote:


I'm using hosts allow correctly.  Please read below.


From http://us1.samba.org/samba/docs/man/smb.conf.5.html ...

hosts allow (S)
...
   You can specify the hosts by name or IP number. For example, you
could restrict access to only the hosts on a Class C subnet with
something like allow hosts = 150.203.5. .
...

That's the default location for the smbpasswd file and the one that it
was reading, according to testparm -v, but I tried specifying it as
you suggested anyway... no results.

By the way, I have and can use Ethereal.  I've tried it with a filter
like "port 137 or port 137 or port 138 or port 139 or port 445".  I
just don't know how to interpret the results.  If anyone here
understands the Ethereal output, I can post results.

Thank you,
   Vince

On 8/8/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
 


Two things,
First, your IP hosts allow = 192.168.1.??  is missing the last one or two 
characters.
Second try adding this definition to the [global] section.
"smb passwd file = /etc/samba/smbpasswd"
Let me know if this fixes your problem.
-Raul


-- Vincente Aggrippino <[EMAIL PROTECTED]> wrote:
Ok... I'm really stumped.  I have checked thoroughly.  I've performed
all of the steps in the checklist from the HowTo... except for the
nmblookup parts.  The arguments to nmblookup seem to be based on an
old version.  I'm hoping someone will have an idea.  Here's the whole
situation...

Server:
Fedora Core 3
Linux myserver 2.6.11-1.35_FC3 #1 Mon Jun 13 00:52:08 EDT 2005 i686
i686 i386 GNU/Linux
Samba v3.0.14a latest Fedora RPM available downloaded from samba.org today
-
Client:
Microsoft Windows XP Professional, Service Pack 2
Firewall disabled
Workgroup name: HOME
-
smb.conf:
# Samba config file created using SWAT
# from 127.0.0.1 (127.0.0.1)
# Date: 2005/08/08 14:03:44

# Global parameters
[global]
   workgroup = HOME
   server string = home.aggrippino.com
   security = SHARE
   guest account = testsmb
   username map = /etc/samba/smbusers
   log file = /var/log/samba/%m.log
   hosts allow = 192.168.1.

[tmp]
   comment = temporary files
   path = /tmp
   guest ok = Yes

[homes]
   read only = No
   guest ok = Yes
-
I created a new user named testsmb on both the server and the client
for the purpose of testing this setup.  The password is the same.
-
On the client, if I try to "View Workgroup Computers", there is a long
delay, then it tells me the following:

Home is not accessible.  You might not have permission to use this
network resource.  Contact the administrator of this server to find
out if you have access permissions.

The list of servers for this workgroup is not currently available.
-
I have the server host resolution in the WinXP hosts file.

Ping works perfectly from the client to the server.
-
I have the client host resolution in /etc/hosts.

Ping works perfectly from the server to the client.
-

From the command prompt on the client, the command "net view \\home"

returns the following after a long delay.  I have the same result when
I use the IP address.  I get the same result if I try to use a
specific resource.  i.e.: "net use x: \\home\tmp" ...

System error 53 has occurred.

The network path was not found.

On the server, I have issued the command "smbpasswd -a testsmb" and
typed the same password as used by the Linux user ID and by the WinXP
user ID.  I've also issued the command "smbpasswd -e testsmb".  I've
stopped and re-started the samba daemons.  I've rebooted the client.
-
I know it's not my gateway/firewall/router because because I also use
a vmware virtual machine with WinXP Pro and some shares.  The shares
from the virtual machine on the same physical server are normal on the
client.  Incidentally, the virtual machine can't see the server's
shares either.  However, vmware employs some version of samba
internally and that works perfectly between the server and the VM.

I don't run ipchains or iptables.
-

I must be configuring something wrong.  vmware uses Samba for it's
sharing and that works fine.  The network is working fine.  Otherwise
the VMs shares wouldn't be available.

I'll be very grateful to anyone with a solution.

Thank you,
   Vince Aggrippino
   [EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

__
Surfing so fast you won't believe it's not broadband!
Try NetZero HiSpeed 3G.
Visit http://www.netzero.com to sign up today!


   

I think you don't have an LMB (Local Master Browser) on the subnet. Add 
the following to the samba config file, in the [global] stanza:


domain master = yes   #only add this if there is NOT a domain contoller 
present.

local master = yes
preferred master = yes
os level = 65

This will cause samba's nmbd process to force an election on startup, 
and win the election for the local master browser.



[Samba] Samba 3.0.14.a - Solaris Build

2005-08-09 Thread Todd Johnson

Hello -

Ive recently upgraded our SMB server to 3.0.14.a. I cant go on about how 
great this build has been for us. Thanks again to the fine folks who 
support these releases. Ok my problem...


This is the errors users get when they go to try and change the SMB 
password for them. They log to the SMB server and from % cd over to 
/opt/samba/bin and run just "smbpasswd"


The password chat is working the get the following:

Old SMB password:

New SMB password:

Retype new SMB password:

Upon retyping the last password entry, SMB throws the following error.

machine 127.0.0.1 rejected the (anonymous) password change: Error was : 
Wrong Password.

Failed to change password for gillp

Am I doing something wrong? Ive looked around a bit and found there 
might be an issue when using hosts allow =


I commented this out and tested it and it doesnt seem to make much 
difference.


Thank you in advance for your help.

TJ

--
Thank you
Todd Johnson


==
Todd Johnson
State of Alaska
Dept. of Natural Resources
Computer Information Center
MicroComputer/Network Specialist
(907) 269-8831
(907) 269-8920 FAX
[EMAIL PROTECTED]
==









--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Errors... unknown problem?

2005-08-09 Thread Eric G Ortego
My network currently uses samba version 3.0.14 and doesn't seem to have any 
problems but alot of my logs repeat the following error message:

[2005/08/09 09:29:42, 0] 
rpc_client/cli_trust.c:change_trust_account_password(248)
2005/08/09 09:29:42 : change_trust_account_password: Failed to change 
password for domain SPICE.

There shouldn't be any passwords changing.
What causes this and how might I verify that there is or isn't a problem?

I found several others who have asked the same question of this same error 
but have not been able to find an answer or a solution.
Cheers,
Eric G Ortego
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] SMB 3.0.14a

2005-08-09 Thread Todd Johnson

Hello -

Ive recently upgraded our SMB server to 3.0.14.a. I cant go on about how 
great this build has been for us. Thanks again to the fine folks who 
support these releases. Ok my problem...


This is the error my users get when they try and change the SMB password 
for themselves. They log to the SMB server and from % cd over to 
/opt/samba/bin and run just "smbpasswd"


The password chat looks to be working:

Old SMB password:

New SMB password:

Retype new SMB password:

Upon retyping the last password entry, SMB throws the following error.

machine 127.0.0.1 rejected the (anonymous) password change: Error was : 
Wrong Password.

Failed to change password for gillp

Am I doing something wrong? Ive looked around a bit and found there 
might be an issue when using hosts allow =


I commented this out and tested it and it doesnt seem to make much 
difference.


Thank you in advance for your help.

--
Thank you
Todd Johnson


==
Todd Johnson
State of Alaska
Dept. of Natural Resources
Computer Information Center
MicroComputer/Network Specialist
(907) 269-8831
(907) 269-8920 FAX
[EMAIL PROTECTED]
==









--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.14a-2 on FC4 - Strange order of directories and files

2005-08-09 Thread Marco Brück


Hi!
 
I encouter a stange behaviour with the samba directory listing.
The usual directory listing (e.g. in Windows Explorer) starts with the
directories, folders followed by the files, e.g.:
 
-->Folder
 ---> a-(sub)folder
 ---> b-folder
 ---> c-folder
 ---> a-file
 ---> b-file
 ---> c-file
 
Samba does so with ext3 shares. But with shares on a xfs-filesystem, all
directory items are ordered, eg:
 
-->Folder
 ---> a-folder
 ---> a-file
 ---> b-folder
 ---> b-file
 ---> c-folder
 ---> c-file
 
Is there any possibilty to turn off this behaviour (and stay with the
xfs-filesystem, if this is the cause)??
 
Thanks in advance!
 
Marco Brück
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba 3.0. & Active Directory on AIX 5.2

2005-08-09 Thread Daniel Teklu
I need to re-compile samba to join a Windows Active Directory domain. This is 
on  AIX 5.2 server.

here are the steps I am following

- Install Openssl
- Install OpenLDAP
- Install MIT Kerberos
- re-compile samba

After all this,  is editing the /etc/krbd5.conf and smb.conf enough or do I 
need to make changes on the AIX side? I see on Solaris, we need to change 
/etc/nsswitch.conf but what do we need to do on AIX side for this to work?

I appreciate any ideas.

Thanks

-D
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Join a Linux workstation to a samba domain

2005-08-09 Thread Bahya NASSR EDDINE
Hello all,

How may I join a Linux Red Hat workstation to a samba
domain?

Thanks






___ 
Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger 
Téléchargez cette version sur http://fr.messenger.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Undefined references during compiling

2005-08-09 Thread Douglas Vechinski
I'm attempting to compile the latest samba on an old Mandrake 8.1
system.  (Current samba there is 2.2.? and doesn't allow login from XP).
During compiling I get a  number of error message such as 

modules/vfs_recycle.po: In function `recycle_connect':
modules/vfs_recycle.po(.text+0x23): undefined reference to
`DEBUGLEVEL_CLASS'
modules/vfs_recycle.po(.text+0x31): undefined reference to
`DEBUGLEVEL_CLASS_ISSET'
modules/vfs_recycle.po(.text+0x55): undefined reference to `dbghdr'
modules/vfs_recycle.po(.text+0x6d): undefined reference to `dbgtext'
modules/vfs_recycle.po: In function `recycle_disconnect':
modules/vfs_recycle.po(.text+0xb3): undefined reference to
`DEBUGLEVEL_CLASS'
modules/vfs_recycle.po(.text+0xc1): undefined reference to
`DEBUGLEVEL_CLASS_ISSET'
modules/vfs_recycle.po(.text+0xe5): undefined reference to `dbghdr'
modules/vfs_recycle.po(.text+0x101): undefined reference to
`lp_servicename'
modules/vfs_recycle.po(.text+0x111): undefined reference to `dbgtext'
modules/vfs_recycle.po: In function `recycle_repository':
modules/vfs_recycle.po(.text+0x177): undefined reference to
`lp_parm_const_string'

but it still trudges along and compiles.  Since these appear to be
references to function that can't be found, does this represent a
problem or can I still go ahead and perform an install?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba hold-up

2005-08-09 Thread Seitan end Yvl
Hello lists,
I have a problem while browsing samba shares.
When you try enter any shared directory, client waits for about 5-6
seconds, before showing contents.
This occurs only the first time you enter shares.
It doesn't matter if directory has files in it or is empty.
Maybe samba performs some ident or reverse lookups?
PC IP 3.0Ghz, 512MB RAM
OS Debian Linux
Samba 3.0.14a
-- 
__
Seitan end Yvl

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Mail items not showing in outlook from network shared pst file

2005-08-09 Thread Ron Daniel
We are using a solaris box running samba 

 

We have seen that approximately one month's email is missing from a
user's pst file if the file is located on a samba share.

 

The general and specific sections of our smb.conf file are as below. The
mailboxes are stored in the [mail] share.

 

# Samba config file created using SWAT

# from 10.186.1.254 (10.186.1.254)

# Date: 2005/07/27 10:38:57

 

# Global parameters

[global]

  workgroup = UNIX

  server string = Samba %v on %h

  passwd program = /usr/bin/passwd %u

  unix password sync = Yes

  log level = 1

  log file = /var/samba/log/log.%m

  time server = Yes

  add user script = /usr/sbin/useradd %u

  delete user script = /usr/sbin/userdel %u

  os level = 65

  preferred master = Yes

  wins support = Yes

  username =
@eureka,@user,@accounts,@intldiv,@trading,@infosys,@audit

  create mask = 0660

  directory mask = 0770

  print command = /usr/bin/lp -o nobanner -c -d%p %s >> /tmp/%p.log
; rm %s

 

...other entries

 

[mail]

  comment = User mailboxes

  path = /mailboxes/%u

  read only = No

  create mask = 0700

  directory mask = 0700

 

Can anyone hepl

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] create smbpasswd on remotesystem

2005-08-09 Thread Jan Dworschak
hi,
I have a special problem. First some background.
Running a Diskless Client (no login - just a guest-user) on which Samba
shares some folders.
Want to start a remote session with Xnest.
On that XDM-Server i'm authenticating myself.

Now the problem: I want to create a smbpasswd-file with the credentials
from the login (PAM) and copy it to the Diskless Client.
Is there a way to create that file with that one user?

Btw, I have tried pam_smbpass.so.
But as far as I understood, pam_smbpass awaits smbpasswd and pam-module
 on the same system, or?

Any suggestions?

Jan
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Migrating from samba to win 2k3 pdc

2005-08-09 Thread Ross McInnes
Yes I know it's a bad thing, but due to several issues I am moving from a
samba pdc to a windows 2k3 pdc

But, im keeping samba as the file store, ive sorted it so that samba will
talk to the w2k3 pdc and auth using winbindd etc that's nps.

But, I need to get the users and passwords off the linux/samba server and
onto the w2k3 server...

Any ideas? Password crackers/hax methods accepted!

Either that or it's a reset over 2000 users passwords job (my poor fingers)

Many thanks

Ross

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Accent problem

2005-08-09 Thread Cédric MARCOUX

OK works great.


Here is the solution to convert existaing mistwritten file to utf8
I have found a little software that can convert easyly files.

http://j3e.de/linux/convmv/

convmv can convert files charset to other charset.
In my case, I have used these commands:

Convmv -r -f iso8859-15 -t utf8 *
This command show you what will append...

This one made the change
Convmv -r -f iso8859-15 -t utf8 * --notest


Carlos Vidal wrote:

I just wonder how to setup samba to correctly handling accentued caracter.
...
unix charset = ISO8859-15
display charset = ISO8859-15



The short answer is:



dos charset = 850
unix charset = UTF8



The long answer is more complicated and here it goes :-)

- There is a charset used by the file system to write its directory
entries, this is the "unix charset".
- There is a charset used by Win*, and is the one used by Samba to
send the data over the wire. This is defined with "dos charset".
- There is a charset used to display the file names on your screen.
This depends on your shell and graphical environment (if any). In most
cases it follows your LANG environment variable, but some graphical
terminals like kterm can have their own charset. This means that your
file names may be OK in Win* and in the file system, but when you do
"ls" you see the "?".

Therefore, proceed with care and don´t panic, check one thing at a
time until you get a consistent charset all over the way.

For France I use the setup mentioned above in smb.conf, then the
following lines in /etc/sysconfig/i18n (in Fedora), this defines the
default charsets for Linux:

LANG="fr_FR.UTF-8"
SUPPORTED="en_US.UTF-8:en_US:en:fr_FR.ISO8859-1:fr_FR:fr"
SYSFONT="latarcyrheb-sun16"

Carlos


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] roaming profile

2005-08-09 Thread Erol YILDIZ

Hi,

This can be because of the date/time difference between the client and the 
server. You can try using the time server option of samba.


Hope this helps.

Erol YILDIZ

I'm working about smba 3 as pdc for a client with about 30 workstation. I 
managed in the windows configuration to exclude the documents and the 
desktop from being loaded up and down

at every login/logoff.
Now i have documents and desktop mapped on a disk X: on the server and it 
seems to work, but i still have

some problem with syncronisation, sometimes i lost some documents.
Any idea?

I configured strightly samba3 as pdc with tdbsam backend.
Clients are winxp, i configured the regedit to choose different user's 
profile folders and gpedit.msc to

exclude some folders from being loaded up and down
at every login/logoff.

tia
Lorenzo

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] roaming profile

2005-08-09 Thread Lorenzo Cerini
I'm working about smba 3 as pdc for a client with about 30 workstation. 
I managed in the windows configuration to exclude the documents and the desktop from being loaded up and down

at every login/logoff.
Now i have documents and desktop mapped on a disk X: on the server and it seems 
to work, but i still have
some problem with syncronisation, sometimes i lost some documents.
Any idea?

I configured strightly samba3 as pdc with tdbsam backend.
Clients are winxp, i configured the regedit to choose different user's profile 
folders and gpedit.msc to
exclude some folders from being 
loaded up and down

at every login/logoff.

tia
Lorenzo

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] File locks issue

2005-08-09 Thread Maxime Woznicki


Thx for your help.

Another question :

What does this exactly means :

vfs object = recycle:recycle
recycle:repository = .deleted
recycle:keeptree = Yes
recycle:touch = Yes
recycle:versions = Yes


?

Max

Liz Ackerman wrote:


Maxime, you are still not telling me what files users are accessing and
getting the message.  Are they Microsoft Word and Excel and Access
documents?  Microsoft Office default templates???

I will explain what my users are doing and how I made that work.

Each user has their own folder.  They create, update, change and delete
files in this folder and must have all ownership and accesses.  In a
Terminal session I ran a command of:

chown ownername *.* -R to make the owner the user
chgrp ownername *.* -R to make the group the user (if you setup users as
groups too, I used a group called Everyone which all users are a member of)

Then

chmod g+s *.* -R  to set the group and user on everything.  The -R is to
ensure that the permissions flow down the file structure, so all folders and
files get set.

In my Samba shares, here is how I set permissions:


[home2]- this where all users have their own directory, so me I am liza
comment = Everyone's Home Directory
path = /home2
writeable = yes
guest ok = yes

[accting]
- this is where the Accounting department have their Quickbooks files, you
can see where I commented out things that didn't work :)  I also use the
force group and force user.  Quickbooks is in multiuser mode, and it was the
most challenging to get to work properly.  Make sure you have a good backup
copy of the database files if they get corrupted.  We had several
corruptions before I could get it to work.

comment = Accounting Volume
path = /accting
writeable = yes
valid users = liza, rhea, stephen, tammy
oplocks = no
level2 oplocks = no
;   veto oplock files = /*.*db/*.ldb/*.mde/*.xls/*.qb*/*.QB*/*.LDB/*.L*/*.*/
;   blocking locks = no
;   locking = yes
;   strict locking = no
;   share modes = no
force group = accounting
force user = root
inherit permissions = yes
create mask = 0771
directory mask = 0771
;   force create mode = 0777
;   force directory security mode = 0777
vfs object = recycle:recycle
recycle:repository = .deleted
recycle:keeptree = Yes
recycle:touch = Yes
recycle:versions = Yes

[Data]
- this is where all other folders and documents live.  Anyone can access
here and anyone can do anything to a file.  Mostly Word and Excel,
Powerpoint files.
comment = Data
path = /home2/Data
writeable = yes
guest ok = yes
veto oplock files = /*.mdb/*.ldb/*.mde/
oplocks = no
level2 oplocks = no
blocking locks = no
locking = no
strict locking = no
share modes = yes

Hopefully you can try some of this and see if it works.

Liz


 



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Questions about Browsing and PDC / BDC

2005-08-09 Thread Michael Gasch

hi,

i have a working PDC / BDC setup with both samba v3.
my question is related to failover:

is the following config right for a correctly configured network 
browsing and name resolution (especially for clients)?


PDC Config:
local master = yes
preferred master = yes
domain master = yes
os level = 120
domain logons = yes
wins support = yes

BDC Config:
domain master = auto
os level = 65
domain logons = yes

if PDC fails, normally BDC should recognize that and become a domain 
master with this config, right?


is there any error in reasoning with "wins support = yes" and a failing PDC?

may be you have some more experience and a 100% working smb.conf 
regarding browsing (PDC/BDC).


thx in advance,
greez

--
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT)
Deutscher Platz 6
D-04103 Leipzig
Germany

Phone: 49 (0)341 - 3550 137
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] pdbedit not working as documented

2005-08-09 Thread John McLoskey
Am I building user_sid internally every time? 
We seem to ignore -U argument to pdbedit.
At line 475 of samba-3.0.14a/source/utils/pdbedit.c;

if (user_sid) {
DOM_SID u_sid;
if (!string_to_sid(&u_sid, user_sid)) {
/* not a complete sid, may be a RID, try building a
SID */
int u_rid;

if (sscanf(user_sid, "%d", &u_rid) != 1) {
fprintf(stderr, "Error passed string is not
a complete user SID or RID!\n");
return -1;
}
sid_copy(&u_sid, get_global_sam_sid());
sid_append_rid(&u_sid, u_rid);
}
pdb_set_user_sid (sam_pwent, &u_sid, PDB_CHANGED);
}
if (group_sid) {
DOM_SID g_sid;
if (!string_to_sid(&g_sid, group_sid)) {
/* not a complete sid, may be a RID, try building a
SID */
int g_rid;

if (sscanf(group_sid, "%d", &g_rid) != 1) {
fprintf(stderr, "Error passed string is not
a complete group SID or RID!\n");
return -1;
}
sid_copy(&g_sid, get_global_sam_sid());
sid_append_rid(&g_sid, g_rid);
}
pdb_set_group_sid (sam_pwent, &g_sid, PDB_CHANGED);
}

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
Of John McLoskey
Sent: Tuesday, August 09, 2005 12:46 AM
To: samba@lists.samba.org
Subject: RE: [Samba] pdbedit not working as documented

Modifying account has same behavior;

smbsvr# pdbedit -r test1 -U S-1-5-21-1375268081-527015025-691025275-3010
Unix username:test1
NT username:
Account Flags:[U  ]
User SID: S-1-5-21-1375268081-527015025-691025275-3008
Primary Group SID:S-1-5-21-1375268081-527015025-691025275-3009
Full Name:User &
Home Directory:   \\smbsvr\home\test1
HomeDir Drive:H:
Logon Script:
Profile Path: \\smbsvr\home\test1\profile
Domain:   WORKGROUP
Account desc:
Workstations:
Munged dial:
Logon time:   0
Logoff time:  Mon, 18 Jan 2038 21:14:07 UTC
Kickoff time: Mon, 18 Jan 2038 21:14:07 UTC
Password last set:Tue, 09 Aug 2005 04:53:13 UTC
Password can change:  Tue, 09 Aug 2005 04:53:13 UTC
Password must change: Mon, 18 Jan 2038 21:14:07 UTC
Last bad password   : 0
Bad password count  : 0
Logon hours : FF

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
Of John McLoskey
Sent: Monday, August 08, 2005 11:55 PM
To: samba@lists.samba.org
Subject: [Samba] pdbedit not working as documented

I have am hitting a wall with pdbedit, as shown below. 
Any workarounds would be greatly appreciated. 
I am encountering the inability to change any users (profile) SID on Samba
3.x for Linux and BSD, which causes the accounts to no longer recognize
their local Samba 2 profiles once they join Samba 3 domain. If I add a new
user and pdbedit -a user -U SID it ignores the -U.
The old profiles appear on the Windows clients as "unknown profile". 
The problem is that the profiles are inaccessible. 
If I man pdbedit, it clearly states the ability to;



 smbsvr# man pdbedit

...

  -G SID|rid
  This option can be used while adding or  modifying  a  user
ac-
  count. It will specify the users' new primary group SID
(Securi-
  ty Identifier) or rid.

  Example: -G S-1-5-21-2447931902-1787058256-3961074038-1201


   -U SID|rid
  This option can be used while adding or  modifying  a  user
ac-
  count.  It will specify the users' new SID (Security
Identifier)
  or rid.

  Example: -U S-1-5-21-2447931902-1787058256-3961074038-5004

Last login: Mon Aug  8 22:00:37 2005 from 192.168.1.101
Copyright (c) 1980, 1983, 1986, 1988, 1990, 1991, 1993, 1994
The Regents of the University of California.  All rights reserved.

FreeBSD 5.4-RELEASE (GENERIC) #0: Sun May  8 10:21:06 UTC 2005

smbsvr# pdbedit -V
Version 3.0.12
smbsvr# pdbedit -r Administrator
Unix username:Administrator
NT username:
Account Flags:[U  ]
User SID: S-1-5-21-1375268081-527015025-691025275-3006
Primary Group SID:S-1-5-21-1375268081-527015025-691025275-3007
Full Name:User &
Home Directory:   \\smbsvr\home\Administrator
HomeDir Drive:H:
Logon Script:
Profile Path: \\smbsvr\home\Administrator\profile
Domain:   WORKGROUP
Account desc:
Workstations:
Munged dial:
Logon time:   0
Logoff time:  Mon, 18 Jan 2038 21:14:07 UTC
Kickoff time:

[Samba] Re: samba Digest, Vol 32, Issue 9

2005-08-09 Thread Vincente Aggrippino
I've tried "wins support = true" (and "wins support = yes"... just in
case).  I stopped and restarted the samba daemons and rebooted the
WinXP client.  I have no change in the results.  Based on something I
read in the troubleshooting part of the HowTo, I added the address of
the server to the Wins tab in the advanced section of the TCP/IP
properties... still no results :(

Thank you,
Vince

On 8/9/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
...
-- Forwarded message --
From: Craig White <[EMAIL PROTECTED]>
To: samba@lists.samba.org
Date: Mon, 08 Aug 2005 08:44:51 -0700
Subject: Re: [Samba] Windows can't see my Samba shares...
...

add to smb.conf

wins support = true

restart smbd/nmbd daemons

You need the ability to resolve the name...

Craig
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba