[Samba] Cannot print PDF-Files...
Hi, I have a network with a Server running 3.0.14 (Debian sarge), which is doing quite fine as a PDC and as a printer server (using cups). Almost. Printing is working, I can print Windows test pages, I can print from several applications, including MS office. But I cannot print over the network from Acrobat Reader, not at all. If a network printer is selected and used, than _nothing_ happens, not even network traffic (but local printing works quite fine from Acrobat Reader as well) . Has anyone experienced a similar problem? I don't even know where I should start looking at... The Windows machines use the Digital turbo Printserver 20 printer driver, as recommended somewhere in a HOWTO, and cups takes care of the rest. smb.conf is included (though most likely not really useful), if you need some other information, please tell. Regards, Stefan [global] ldap admin dn = ou=samba,dc=lise-meitner,dc=at passdb backend = ldapsam:ldap://ldap.meitner.priv ldap passwd sync = yes ldap delete dn = no ldap ssl = off ldap user suffix = ou=People # ldap group suffix = ou=Group ldap machine suffix = ou=Computers ldap suffix = dc=lise-meitner,dc=at ldap filter = ((uid=%u)(objectclass=sambaSamAccount)) lanman auth = no ntlm auth = yes client NTLMv2 auth = yes client lanman auth = no utmp = yes utmp directory = /var/log/samba/ wtmp directory = /var/log/samba/ private dir = /var/lib/samba # workgroup = MEITNER server string = Lise-Meitner Fileservice netbios aliases = BERTHA SCHUELER LEHRER DIREKTION display charset = ISO8859-15 unix charset = ISO8859-15 dos charset = CP850 #log file = /var/log/samba/log.%L log file = /var/log/samba/samba.log log level = 1 # log level = 3 # log level = 100 # include = /etc/samba/smb.conf.%L netbios name = BERTHA workgroup = MEITNER bind interfaces only = yes interfaces = 10.10.0.8 smb ports = 139 445 time server = true # some defaults preserve case = yes short preserve case = yes deadtime = 15 hosts allow = 10. 127. security = user socket options = TCP_NODELAY os level = 255 preferred master = yes local master = yes domain logons = yes domain master = yes share modes = no admin users = +domadm logon path = \\bertha\profiles\%u logon drive = p: logon script = start.bat logon home = \\bertha\%u wins support = yes dns proxy = yes encrypt passwords = true password level = 0 null passwords = no map to guest = bad user dead time = 0 nt acl support = no printcap name = CUPS printing = cups printer admin = +domadm show add printer wizard = No [printers] comment = Druckerspooler path = /var/spool/samba guest ok = yes printable = yes browseable = no # surf-stations duerfen nicht drucken hosts deny = 10.100.100. [ovid] comment = Sekretariatsdrucker path = /var/spool/samba guest ok = no printable = yes browseable = yes valid users = +Administration +Sekretariat +domadm [LaserJet] comment = Garderobendrucker path = /var/spool/samba guest ok = no printable = yes browseable = yes valid users = +Lehrer +Administration +Sekretariat +domadm [Kleopatra] comment = Konferenzzimmer-Drucker path = /var/spool/samba guest ok = no printable = yes browseable = yes valid users = +Lehrer +Administration +Sekretariat +domadm [print$] comment = Druckertreiber path = /var/lib/samba/drivers browseable = yes guest ok = no readonly = yes write list = +domadm [netlogon] comment = Network Logon Service path = /users/netlogon #read only = yes #write list = +root browseable = no guest ok = yes [profiles] path = /users/profiles read only = no create mask = 0600 directory mask = 0700 browseable = no profile acls = yes -- Spaß mit Stefan, lüstern und stumpf! http://www.sloganizer.de/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Mapping a windows drive to a linux home space as a user
I have got my GNU/Linux user auth working against my 2k3AD but my question is this : Is it possable to map a users windows based home drive share to there GNU/linux home drive? Thanks Brett -- Please avoid sending me Microsoft Office (e.g. Word, PowerPoint) attachments. See http://www.fsf.org/philosophy/no-word-attachments.html No software patents in Europe -- http://nosoftwarepatents.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] userrights
Hi, I have a strange problem when I try to delete a file (e.g. CONFIG.ETP). The windows box says access denied. But the file has the following rights: # ls -n CONFIG.ETP -rwxrwx---+ 1 0 12152 2757 Mar 13 1995 CONFIG.ETP The user (Administrator) is member of the group smbadm (GID:12152). loglevel 10 output when I try to delete the file --- [2005/09/06 10:19:25, 10] smbd/posix_acls.c:check_posix_acl_group_write(3910) check_posix_acl_group_write: ret = -1 before check_stat: [2005/09/06 10:19:25, 10] smbd/posix_acls.c:check_posix_acl_group_write(3920) check_posix_acl_group_write: file TEMP match on owning group 12152 - cannot w rite. [2005/09/06 10:19:25, 10] smbd/posix_acls.c:check_posix_acl_group_write(3934) check_posix_acl_group_write: file TEMP returning (ret = 0). [2005/09/06 10:19:25, 3] smbd/error.c:error_packet(105) error string = No data available [2005/09/06 10:19:25, 3] smbd/error.c:error_packet(129) error packet at smbd/nttrans.c(800) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED SYSTEM: sles9, samba 3.0.14a-21 Sernet, SAMBA Member Server in Active Diretory Can anyone help? Cheers Stefan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: SOLVED [Samba] userrights
Sorry guys for this stupid message. It`s early in the morning :) Cheers Stefan Original Message Subject: [Samba] userrights (06-Sep-2005 10:36) From:[EMAIL PROTECTED] To: samba@lists.samba.org Hi, I have a strange problem when I try to delete a file (e.g. CONFIG.ETP). The windows box says access denied. But the file has the following rights: # ls -n CONFIG.ETP -rwxrwx---+ 1 0 12152 2757 Mar 13 1995 CONFIG.ETP The user (Administrator) is member of the group smbadm (GID:12152). loglevel 10 output when I try to delete the file --- [2005/09/06 10:19:25, 10] smbd/posix_acls.c:check_posix_acl_group_write( 3910) check_posix_acl_group_write: ret = -1 before check_stat: [2005/09/06 10:19:25, 10] smbd/posix_acls.c:check_posix_acl_group_write( 3920) check_posix_acl_group_write: file TEMP match on owning group 12152 - cannot w rite. [2005/09/06 10:19:25, 10] smbd/posix_acls.c:check_posix_acl_group_write( 3934) check_posix_acl_group_write: file TEMP returning (ret = 0). [2005/09/06 10:19:25, 3] smbd/error.c:error_packet(105) error string = No data available [2005/09/06 10:19:25, 3] smbd/error.c:error_packet(129) error packet at smbd/nttrans.c(800) cmd=162 (SMBntcreateX) NT_STATUS_ ACCESS_DENIED SYSTEM: sles9, samba 3.0.14a-21 Sernet, SAMBA Member Server in Active Diretory Can anyone help? Cheers Stefan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Data migration using net rpc share migrate
Hi, On Mon, Sep 05, 2005 at 05:04:04PM +0100, Gibbs, Simon wrote: Hi, I¹m in the process of testing out the net rpc share migrate data migration tool but keep running into an error message when using the --acl option. I¹m testing using the following command: net rpc share migrate files -S 10.36.32.36 --acls --attrs --timestamps -v -U gibbss but get with this error for each file in the share: [2005/09/05 16:50:02, 0] utils/net_rpc_printer.c:net_copy_fileattr(384) could not set secdesc on \WinAXE_Plus_v7\xwpdllid.dll: NT_STATUS_ACCESS_DENIED could not copy file \WinAXE_Plus_v7\xwpdllid.dll: NT_STATUS_ACCESS_DENIED Each file copies OK and the timestamp is correct but none of the ACL¹s are there. ACL/xattrs mount options have already been added to the filesystem and I can use setfacl/getfacl so can¹t see a problem with ACL support and the share is on a PC logged in with the user account specified so all the files are owned by that account. I guess this must be a permission problem somewhere but can¹t think what it may be. Can anyone point me in the right direction? this can happen because of: - smbd not being built with acl-support (verify by setting ACLs manually using Explorer) - a chown failing due to the fact that the owner of that particular file on 10.36.32.36 is a group (and not a user) *and* that the share you are copying to on samba has not set the force unknown acl user option. If this file is owned by a group then set force unknown acl user = yes on the samba share. - the user gibbs cannot set ACLs to files inside that directory due to permissions. You could increase the samba log level to find out where it fails. Guenther -- Günther DeschnerGPG-ID: 8EE11688 Novell / SUSE LINUX [EMAIL PROTECTED] Samba Team [EMAIL PROTECTED] pgp9chrIwKBp3.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Sporadically open from Directorys lasts long
Hi List, I need your experience and help. We use here samba 3.014. Sporadically there are the following problems. It can be that one must wait till 1 minute around to a Directory is opened. Lasts to this waiting period is a Ping on the Samba server without problem. Likewise there is none suspect logs in the log file of samba. What can I do here? Many thanks for every help. Stefan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] More printing problems...
Hi, Printing is working, I can print Windows test pages, I can print from several applications, including MS office. [...] Not everyone can. Some users (but only some) are told that the server has no printer driver when they try to install one of the network printers (which, of course is not true). For others, everything is working fine and es expected. With a sufficiently high log level I can see some suspicious lines: |[2005/09/06 16:29:14, 10] printing/nt_printing.c:get_a_printer(4095) | get_a_printer: [Kleopatra] level 2 |[...] |[2005/09/06 16:29:14, 10] printing/nt_printing.c:get_a_printer(4185) | get_a_printer: [Kleopatra] level 2 returning WERR_OK |[2005/09/06 16:29:14, 5] |rpc_server/srv_spoolss_nt.c:construct_dev_mode(4192) | BONG! There was no device mode! |[2005/09/06 16:29:14, 8] |rpc_server/srv_spoolss_nt.c:construct_printer_info_2(4261) | Returning NULL Devicemode! The BONG messages seems a little bit irritating. Is this critical? What does it mean, and how can I get rid of it? Regards, Stefan -- Stefan: die Lust zu sein! http://www.sloganizer.de/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Password expiration
Hello,
I still can't figure out why my users' passwords are expiring. Ever since we
switched to LDAP, passwords expire every 14 days. Here is an example LDAP user
entry:
version: 1
# LDIF Export for: uid=sgoodrich,ou=Users,dc=trec,dc=us
# Generated by phpLDAPadmin ( http://phpldapadmin.sourceforge.net/ ) on
September 6, 2005 10:56 am
# Server: TREC (localhost)
# Search Scope: base
# Search Filter: (objectClass=*)
# Total Entries: 1
# Entry 1: uid=sgoodrich,ou=Users,dc=trec,dc=us
dn: uid=sgoodrich,ou=Users,dc=trec,dc=us
objectClass: top
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
objectClass: inetLocalMailRecipient
cn: Suzanne Goodrich
sn: Goodrich
uid: sgoodrich
uidNumber: 2046
gidNumber: 100
homeDirectory: /home/sgoodrich
gecos: Suzanne Goodrich
description: Suzanne Goodrich
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 0
displayName: Suzanne Goodrich
sambaSID: S-1-5-21-193596418-479643985-2333711390-5092
mailRoutingAddress: [EMAIL PROTECTED]
sambaPrimaryGroupSID: S-1-5-21-193596418-479643985-2333711390-513
mailLocalAddress: sgoodrich
mail: [EMAIL PROTECTED]
mail: [EMAIL PROTECTED]
mailHost: eastham.trec.us
sambaLMPassword: secret
sambaNTPassword: secret
sambaPwdLastSet: 1117397780
sambaPwdMustChange: 1125951380
userPassword: {SSHA}secret
sambaAcctFlags: [NUX]
loginShell: /bin/false
We're just about ready to put up a bounty on this one. Any ideas?
--
Jacob Elder
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] strange problem with Active directory integration
On Monday 05 September 2005 03:20 am, Markus Feilner wrote: This has been working fine. This morning the system was rebooted and new memory has been added. Maybe it was the reboot and not the new memory? Take the new memory out to verify. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] map to guest = bad password not working as expected
Hi all, I had been trying to use map to guest = bad password to map users from other domains to guest to allow only guest access. But when I try to access the samba server from another domain, I get an error saying that it is not authorized from that machine. I am attaching the smb.conf. Please let me know if I am doing anything wrong. [global] idmap uid = 7-20 idmap gid = 7-20 winbind enum users = no winbind enum groups = no winbind cache time = 10 winbind use default domain = yes printcap name = cups load printers = yes printing = cups cups options = raw force printername = yes lpq cache time = 0 log file = /local/local1/errorlog/samba.log max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 smb ports = 50139 local master = no domain master = no preferred master = no dns proxy = no printer admin = @printeradmin client schannel = no guest ok = yes log level = 10 workgroup = LAB2003DOMAIN netbios name = ODI-MGT-CE1 wins server = server ip password server = password server ip security = domain [print$] path = /state/samba/printers guest ok = yes browseable = yes read only = yes write list = @printeradmin force user = root force group = root [printers] comment = All Printers path = /local/local1/spool/samba browseable = no guest ok = yes writable = no printable = yes Thanks, Guru. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Printing Extremely Slow from Windows XP
- Original Message - From: Cabbar Duzayak [EMAIL PROTECTED] Hi, I have setup samba server on my linux box (Fedora Core 4 with latest samba, just updated via RHN) and has configured file sharing via samba for this server and connecting to it from my windows xp box. So far, everything works fine and it is very fast. Then, I configured a printer, and shared it via samba. And, I can see+connect to it from Windows XP and can even print. But, everything related to printing is extreemeeely slow on Windows XP, i.e. open notepad - File Menu-Print, and at that point notepad just freezes for couple of minutes, and then brings the printer dialog... Send a print out, it just freezes for a while, then prints out fine. Below is the log file I am getting from Samba, and for some reason it tries to connect to the samba server on Windows XP??? Have no idea what this means, and how I can fix this. Can you please provide any suggestions? Cabbar, I am seeing the exact same problem. It first started seeing the problem after moving to 3.0.20a. I have 3.0.20a running on SuSE 9.0 and I have the exact printer problems you describe. I am also running 3.0.13 on Mdk 2005LE and I have *no* problems at all. That pretty much eliminates the problem being the latest xp patch since I connect with a laptop on both systems and I can print fine under 3.0.13, but I have major slowness with printing under 3.0.20. Ethereal shows some looping that seems to be caused by DCERPC error in the communicatons. Since Bartlett did his thesis on DCERPC, maybe he can shed some light on the issue. -- David C. Rankin, J.D., P.E. RANKIN LAW FIRM, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 (936) 715-9333 (936) 715-9339 fax www.rankinlawfirm.com -- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Password expiration
Hello, Jacob Elder schrieb: Hello, I still can't figure out why my users' passwords are expiring. Ever since we switched to LDAP, passwords expire every 14 days. Here is an example LDAP user entry: You can set password-age to 60 days by typing # pdbedit -P maximum password age -C 5007600 Please look at this Thread: http://lists.samba.org/archive/samba/2005-June/106338.html matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Password expiration
But how do I just disable password expiration completely? Isn't that what the X flag is supposed to do in sambaAcctFlags? -- Jacob Elder Quoting Matthias Spork [EMAIL PROTECTED]: Hello, Jacob Elder schrieb: Hello, I still can't figure out why my users' passwords are expiring. Ever since we switched to LDAP, passwords expire every 14 days. Here is an example LDAP user entry: You can set password-age to 60 days by typing # pdbedit -P maximum password age -C 5007600 Please look at this Thread: http://lists.samba.org/archive/samba/2005-June/106338.html matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] map to guest = bad password not working as expected
Guruswamy Namasivayam (gnamasiv) a écrit : Hi all, I had been trying to use map to guest = bad password to map users from other domains to guest to allow only guest access. But when I try to access the samba server from another domain, I get an error saying that it is not authorized from that machine. I am attaching the smb.conf. Please let me know if I am doing anything wrong. [global] idmap uid = 7-20 idmap gid = 7-20 winbind enum users = no winbind enum groups = no winbind cache time = 10 winbind use default domain = yes printcap name = cups load printers = yes printing = cups cups options = raw force printername = yes lpq cache time = 0 log file = /local/local1/errorlog/samba.log max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 smb ports = 50139 local master = no domain master = no preferred master = no dns proxy = no printer admin = @printeradmin client schannel = no guest ok = yes log level = 10 workgroup = LAB2003DOMAIN netbios name = ODI-MGT-CE1 wins server = server ip password server = password server ip security = domain [print$] path = /state/samba/printers guest ok = yes browseable = yes read only = yes write list = @printeradmin force user = root force group = root [printers] comment = All Printers path = /local/local1/spool/samba browseable = no guest ok = yes writable = no printable = yes Thanks, Guru. Hi, you didn't specify a guest account. typicaly, you should write : [global] guest account = nobody Hope this helps, cheers, joris -- Joris De Pooter Tél.: +33(0)164868319 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] completed printjobs stay in queue after upgrade 3.0.20rc2 - 3.0.20
A few weeks ago, I upgraded Samba 3.0.1x to 3.0.14a . After the upgrade, all completed printjobs on all 40 printers stayed in samba's print queue (they were removed from the unix-printqueue). When I installed 3.0.20rc2, everything back to normal. But since the upgrade this weekend to 3.0.20, the same thing happens again: no jobs were removed from the samba printerqueue's. Removing the .tdb files clears the queue, but doesn't solve the problem... Any hints? brecht A sample printer definition from smb.conf. We use lprng to spool the jobs to our lprng printserver. [poco] comment = Kleurprinter path=/var/spool/lp/samba printable = yes browseable = yes writeable = no create mode = 0700 printing = lprng print command = /usr/bin/lpr -r [EMAIL PROTECTED] -J '%J' %s lpq command = /usr/bin/lpq [EMAIL PROTECTED] lprm command = /usr/bin/lprm [EMAIL PROTECTED] %j lppause command = /usr/sbin/lpc [EMAIL PROTECTED] hold printer %j lpresume command = /usr/sbin/lpc [EMAIL PROTECTED] release printer %j -- Brecht Samyn, Systeemgroep Katholieke Universiteit Leuven Campus Kortrijk (KULAK) tel. ++32 56 246 264 Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] strange problem with Active directory integration
Am Dienstag, 6. September 2005 17:14 schrieb Chris: On Monday 05 September 2005 03:20 am, Markus Feilner wrote: This has been working fine. This morning the system was rebooted and new memory has been added. Maybe it was the reboot and not the new memory? Take the new memory out to verify. Well... in fact it was the reboot of the windows box three days earlier...!!! During the weekend nobody had noticed that, perhaps the cache of the samba system helped, but on Monday morning after rebooting the linux system squid would not let anybody have access to the web. On the ADS Server, the local Administrator had installed Service Pack 4 and some bugfixes on friday. One of them, KB899587 [http://www.microsoft.com/technet/security/Bulletin/MS05-042.mspx] (thank you, Leen!) provides an update of kerberos services which keeps older samba versions from work. I updated to samba 3.0.20 and everything works fine now. (before that we had tried: take out the memory, reboot linux, reboot windows, thank you all! -- Mit freundlichen Grüßen Markus Feilner -- Feilner IT Linux GIS Linux Solutions, Training, Seminare und Workshops - auch Inhouse Beraiterweg 4 93047 Regensburg fon +49 941 9465243 fax +49 941 9465244 mobil + +49 170 3027092 skype ID: mfeilner mail: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Printing Extremely Slow from Windows XP
On Tuesday 06 September 2005 11:16 am, david rankin wrote: after moving to 3.0.20a. I have 3.0.20a running 3.0.20a? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Password expiration
We had similar problems after migrating from NT4. The problem was in some of
the sambaAcctFlags. Most of our users have permanent
passwords and the sambaAcctFlags = UX. Did a little research, but couldn't
find anything that defined all the possible values.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
Jacob Elder
Sent: Tuesday, September 06, 2005 9:57 AM
To: samba@lists.samba.org
Subject: [Samba] Password expiration
Hello,
I still can't figure out why my users' passwords are expiring. Ever since we
switched to LDAP, passwords expire every 14 days. Here is an example LDAP user
entry:
version: 1
# LDIF Export for: uid=sgoodrich,ou=Users,dc=trec,dc=us
# Generated by phpLDAPadmin ( http://phpldapadmin.sourceforge.net/ ) on
September 6, 2005 10:56 am
# Server: TREC (localhost)
# Search Scope: base
# Search Filter: (objectClass=*)
# Total Entries: 1
# Entry 1: uid=sgoodrich,ou=Users,dc=trec,dc=us
dn: uid=sgoodrich,ou=Users,dc=trec,dc=us
objectClass: top
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
objectClass: inetLocalMailRecipient
cn: Suzanne Goodrich
sn: Goodrich
uid: sgoodrich
uidNumber: 2046
gidNumber: 100
homeDirectory: /home/sgoodrich
gecos: Suzanne Goodrich
description: Suzanne Goodrich
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 0
displayName: Suzanne Goodrich
sambaSID: S-1-5-21-193596418-479643985-2333711390-5092
mailRoutingAddress: [EMAIL PROTECTED]
sambaPrimaryGroupSID: S-1-5-21-193596418-479643985-2333711390-513
mailLocalAddress: sgoodrich
mail: [EMAIL PROTECTED]
mail: [EMAIL PROTECTED]
mailHost: eastham.trec.us
sambaLMPassword: secret
sambaNTPassword: secret
sambaPwdLastSet: 1117397780
sambaPwdMustChange: 1125951380
userPassword: {SSHA}secret
sambaAcctFlags: [NUX]
loginShell: /bin/false
We're just about ready to put up a bounty on this one. Any ideas?
--
Jacob Elder
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Password expiration
Hi, One way to avoid password expiry is to set the sambaPwdMustChange attribute of each account to 2147483647. This way, the password will last until sometime in 2038. Chuck At 08:37 AM 9/6/2005, Jacob Elder wrote: But how do I just disable password expiration completely? Isn't that what the X flag is supposed to do in sambaAcctFlags? -- Jacob Elder Quoting Matthias Spork [EMAIL PROTECTED]: Hello, Jacob Elder schrieb: Hello, I still can't figure out why my users' passwords are expiring. Ever since we switched to LDAP, passwords expire every 14 days. Here is an example LDAP user entry: You can set password-age to 60 days by typing # pdbedit -P maximum password age -C 5007600 Please look at this Thread: http://lists.samba.org/archive/samba/2005-June/106338.html matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba Chuck Theobald System Administrator The Robert and Beverly Lewis Center for Neuroimaging University of Oregon P: 541-346-0343 F: 541-346-0345 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Password expiration
On Tuesday 06 September 2005 10:33, Chuck Theobald wrote: Hi, One way to avoid password expiry is to set the sambaPwdMustChange attribute of each account to 2147483647. This way, the password will last until sometime in 2038. Where did you obtain this information? Please quote your source so that those who search the mailing list can go back to the source for the next tid-bit they need to know. Thanks. - John T. Chuck At 08:37 AM 9/6/2005, Jacob Elder wrote: But how do I just disable password expiration completely? Isn't that what the X flag is supposed to do in sambaAcctFlags? -- Jacob Elder Quoting Matthias Spork [EMAIL PROTECTED]: Hello, Jacob Elder schrieb: Hello, I still can't figure out why my users' passwords are expiring. Ever since we switched to LDAP, passwords expire every 14 days. Here is an example LDAP user entry: You can set password-age to 60 days by typing # pdbedit -P maximum password age -C 5007600 Please look at this Thread: http://lists.samba.org/archive/samba/2005-June/106338.html matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba Chuck Theobald System Administrator The Robert and Beverly Lewis Center for Neuroimaging University of Oregon P: 541-346-0343 F: 541-346-0345 -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO Reference Guide, 2 Ed., ISBN: 0131882228 Samba-3 by Example, 2 Ed., ISBN: 0131882221X Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba and Linux Passwords Backend
Hello All, I am sure that this has been asked probably a million times on this list, but for our particular setup, I need to see if there is a way to have Samba authenticate its users based upon the Linux accounts password file? The reason is that we have other applications all working together and most of them are also using the Linux password file which make the process of maintaining users much easier and from a central point. Any help would be greatly appreciated. Thanks, Lonnie -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba and Linux Passwords Backend
On Tuesday 06 September 2005 11:20, Lonnie Cumberland wrote: Hello All, I am sure that this has been asked probably a million times on this list, but for our particular setup, I need to see if there is a way to have Samba authenticate its users based upon the Linux accounts password file? Yes, there is a way. That way means that you need to enable the use of plain-text passwords in the registry of all Windows clients. The problem with this is that Microsoft have NOT maintained plain-text password handling since it was disabled as far back as Windows 98 OSR2 and Windows NT4 SP2. As a result plain-text password use is completely incompatible with NT4, ADS and Samba domains. The decision to delpoy plain-text passwords (smb.conf file parameter encrypt passwords = No means that your Windows network clients can really only be workgroup members. This also has horrible security implications. The reason is that we have other applications all working together and most of them are also using the Linux password file which make the process of maintaining users much easier and from a central point. That is why we introduced the various password synchronization methods in Samba, so that the UNIX password and the smbpasswds can be kept in sync. What is wrong with this method? Why does that not suit your needs? Any help would be greatly appreciated. Lonnie, Is this not documented in the Samba3-HOWTO? Have you checked the HOWTO before asking on this list? If you can not find the answer you are looking for in the Samba3-HOWTO I'd like to know how you have conducted your search. Perhaps you can provide the key that will enable us to improve our documentation so that we can get the repeat level of questions and issues on this mailing list down to a more manageble level. I look forward to your feedback. Cheers, - John T. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba and Linux Passwords Backend
Lonnie Cumberland [EMAIL PROTECTED] wrote: I am sure that this has been asked probably a million times on this list, but for our particular setup, I need to see if there is a way to have Samba authenticate its users based upon the Linux accounts password file? No. The reason is that we have other applications all working together and most of them are also using the Linux password file which make the process of maintaining users much easier and from a central point. Nothing prevents you from having same passwords in both unix- and windows- form. Any help would be greatly appreciated. LDAP database is probably the way. And, even more, getting more interested in samba docs. Links available on the front page of the project. Thanks, Cheers, -- Michal Kurowski [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba Over A Wan
Hi All, I have a customer that I need to give access to one of our servers over a WAN. Their box is running some windows server version and they use terminal services to let their employees access their applications. We use Samba in or local office environment where it works quite well. I need to know the following: 1) Will Samba work over the internet? 2) Can Samba connections be encrypted or do I need to look at something like OpenVPN to provide that? 3) Can I restrict connections over the internet to a single IP address? 4) Anything else I should be aware of? TIA, Mike -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Over A Wan
On Tue, Sep 06, 2005 at 10:59:17AM -0700, Mike McMullen wrote: 1) Will Samba work over the internet? Yes. 2) Can Samba connections be encrypted or do I need to look at something like OpenVPN to provide that? No connections are not encrypted, you need another service underneath smb to do that. 3) Can I restrict connections over the internet to a single IP address? Yes. 4) Anything else I should be aware of? Lock it down. Tightly. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Over A Wan
- Original Message - From: Jeremy Allison [EMAIL PROTECTED] On Tue, Sep 06, 2005 at 10:59:17AM -0700, Mike McMullen wrote: 1) Will Samba work over the internet? Yes. 2) Can Samba connections be encrypted or do I need to look at something like OpenVPN to provide that? No connections are not encrypted, you need another service underneath smb to do that. 3) Can I restrict connections over the internet to a single IP address? Yes. 4) Anything else I should be aware of? Lock it down. Tightly. Jeremy. -- Thanks Jeremy! Can you suggest an easy encryption service to use. Is OpenVPN the way to go? Thanks, Mike -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Over A Wan
I'm currently using OpenVPN to allow access to Samba over WAN. Works pretty good but my experience has been that browsing shares and directory structures over the WAN can be somewhat frustrating to users. I believe this is b/c windows file sharing is a pretty heavy protocal and our WAN connection is only 768bps up and down. You'll also want to be using WINS for name resolution unless you're bridging your OpenVPN subnet with your local subnet which I would avoid doing if possible. David On 9/6/05, Mike McMullen [EMAIL PROTECTED] wrote: - Original Message - From: Jeremy Allison [EMAIL PROTECTED] On Tue, Sep 06, 2005 at 10:59:17AM -0700, Mike McMullen wrote: 1) Will Samba work over the internet? Yes. 2) Can Samba connections be encrypted or do I need to look at something like OpenVPN to provide that? No connections are not encrypted, you need another service underneath smb to do that. 3) Can I restrict connections over the internet to a single IP address? Yes. 4) Anything else I should be aware of? Lock it down. Tightly. Jeremy. -- Thanks Jeremy! Can you suggest an easy encryption service to use. Is OpenVPN the way to go? Thanks, Mike -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Date Mismatch
I've posted this problems before but have some new information. Suse 9.1, kernel 2.6.5-7.111-smp, reiserfs, SAMBA 3.0.9 (just upgraded to 3.0.20 today), OpenLDAP backend, as a PDC. I've had a series of files get created in user profiles with a mtime of Dec 13, 1901 14:45. 'stat -c %Y' reports -2147483648. When a user attempts to delete these files from their profile and then log out, the file does not get deleted from the server copy of the profile. I figured out that this was because SAMBA represents this date to Windows as Jan 2038 so it thinks the server copy has a newer file in it. I suspected this was a Windows problem, but it appears in every version of Windows, not just XP. If I touch the file and give it any other date, Say Dec 14, 1901 14:45, Windows correctly displays that date. This is not a filesystem problem, fscheck is clean as a whistle, this must be a SAMBA issue. I suspect that whatever problem causes the misrepresentation in date is also what causes the date to be wrong in the first place. Any help? Thanks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] AFP_AfpInfo:$DATA
How do I stop these files from appearing in my samba shares under Debian 3.0?? This only happens when we copy files from a Win2003 server that has been configured to allow access in from a Mac. AFS has to be turned on to allow the mac to connect to the 2003 server. Is there a way (through samba on the debian server) I can stop them from appearing in my samba shares on the debian server? Thanks, Ed -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Over A Wan
- Original Message - From: David Miller [EMAIL PROTECTED] Subject: Re: [Samba] Samba Over A Wan I'm currently using OpenVPN to allow access to Samba over WAN. Works pretty good but my experience has been that browsing shares and directory structures over the WAN can be somewhat frustrating to users. I believe this is b/c windows file sharing is a pretty heavy protocal and our WAN connection is only 768bps up and down. You'll also want to be using WINS for name resolution unless you're bridging your OpenVPN subnet with your local subnet which I would avoid doing if possible. David Hi David! Thank you for your feedback. Our connection is a T1. The people would be accessing a folder that has 3 folders in it with 200 files in each folder. The connection would be their box to our box only. Would I still need WINS in this scenario? I'm not up on Windows requirements. Thanks, Mike -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Over A Wan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mike McMullen schrieb: | Hi All, | | I have a customer that I need to give access to one of our servers over | a WAN. | Their box is running some windows server version and they use terminal | services | to let their employees access their applications. | | We use Samba in or local office environment where it works quite well. I | need | to know the following: | | 1) Will Samba work over the internet? | | 2) Can Samba connections be encrypted or do I need to look at |something like OpenVPN to provide that? | | 3) Can I restrict connections over the internet to a single IP address? | | 4) Anything else I should be aware of? | | TIA, | | Mike | | Hi, if you use openvpn with tap interface all kind of connections will work include smb Regards - -- Mit freundlichen Gruessen Best Regards Robert Schetterer robert_at_schetterer.org Munich / Bavaria / Germany https://www.schetterer.org \** \* gnupgp \* public key: \* https://www.schetterer.org/public.key \** -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDHeuZb0iqzJq+0MgRAmThAJ4xnoxYbfLlXl8BgPFKlRb2sqI1IQCeKXsg 6oysQdQ4dpkMq4CWCdKAlAI= =RURj -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Over A Wan
Mike McMullen schrieb: - Original Message - From: David Miller [EMAIL PROTECTED] Subject: Re: [Samba] Samba Over A Wan I'm currently using OpenVPN to allow access to Samba over WAN. Works pretty good but my experience has been that browsing shares and directory structures over the WAN can be somewhat frustrating to users. I believe this is b/c windows file sharing is a pretty heavy protocal and our WAN connection is only 768bps up and down. You'll also want to be using WINS for name resolution unless you're bridging your OpenVPN subnet with your local subnet which I would avoid doing if possible. David Hi David! Thank you for your feedback. Our connection is a T1. The people would be accessing a folder that has 3 folders in it with 200 files in each folder. The connection would be their box to our box only. Would I still need WINS in this scenario? I'm not up on Windows requirements. we're too using Samba over the OpenVPN link. using WINS in your case would would be better than just relying on broadcasting - if you want to rely on broadcasting, that means that much more data would be going both ways, and it's be much more difficult to set up (OpenVPN using less efficient tap interfaces (pseudo ethernet; less efficient because ethernet frames would be pushed through = more data, etc.) -- Tomek http://wpkg.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba as win 2k BDC
I would like to know if i could use samba with openldap as BDC for a Windows 2000 AD controller, and if I could import the users database in the openldap server. Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Over A Wan
Mike McMullen wrote: - Original Message - From: David Miller [EMAIL PROTECTED] Subject: Re: [Samba] Samba Over A Wan I'm currently using OpenVPN to allow access to Samba over WAN. Works pretty good but my experience has been that browsing shares and directory structures over the WAN can be somewhat frustrating to users. I believe this is b/c windows file sharing is a pretty heavy protocal and our WAN connection is only 768bps up and down. You'll also want to be using WINS for name resolution unless you're bridging your OpenVPN subnet with your local subnet which I would avoid doing if possible. David Hi David! Thank you for your feedback. Our connection is a T1. The people would be accessing a folder that has 3 folders in it with 200 files in each folder. The connection would be their box to our box only. Would I still need WINS in this scenario? Well you could map the drive by IP addy instead. I have 10 offices connected by IPSEC encapsulated VLan. Users access the resources on the various drives on various servers over the vlan. Sure it can be a bit sluggish, but it's not horrible. I'm not up on Windows requirements. Thanks, Mike -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba + LDAP over the WAN
Since we're on the subject of Samba over the WAN (BTW, I'm running three offices with a Samba 3.0.9 PDC and two Samba 3.0.9 BDCs over an FreeSwan based WAN and it works just fine. The WINS server is a must in my book though.) Last Thursday and Friday, one of the remove office's WAN lines went down. While the outages were significant, nothing major happened because of it. But, it got me thinking about what *could* have happened and that has raised these questions. Background: All servers running RHEL 3.0, up2date'd. Samba version is 3.0.9.something.that.RedHat.Adds OpenLDAP used for ldapsam password backend. Master OpenLDAP server is located in my office, each office has a replica. 1). If someone would have decided to change their password while the line was down, what would have been the net effect? I know the change would not have been applied to the replica LDAP server, but would it have been queued until the Master LDAP server could have been contacted? 2). I know that each workstation in the domain changes its machine password at a random time, what would have happened during this process if the WAN was down? 3). Are there any other problems that could be caused by a WAN outage that can be called disasterous? What would those be? 4). Any recommendations to minimize No. 3 above? -- Kevin L. Collins, MCSE Systems Manager Nesbitt Engineering, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] smb_request: result -104, setting invalid
smb_request: result -104, setting invalid this repeatedly occurs in the messages log and the kernel log. does anyone know how i can look this up and find out what it means? samba appears to be working fine but i'd like to get to the bottom of it. cheers, kev -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Printing Extremely Slow from Windows XP
- Original Message - From: Chris [EMAIL PROTECTED] On Tuesday 06 September 2005 11:16 am, david rankin wrote: after moving to 3.0.20a. I have 3.0.20a running 3.0.20a? Sorry, I meant: [EMAIL PROTECTED]:~ smbclient -U% -L localhost Domain=[RB_LAW] OS=[Unix] Server=[Samba 3.0.20-SUSE] [EMAIL PROTECTED]:~ rpm -qa | grep samba samba3-pdb-3.0.20-1 yast2-samba-client-2.8.10-3 samba3-python-3.0.20-1 samba3-vscan-0.3.6-1 samba3-doc-3.0.7-1 samba3-client-3.0.20-1 samba3-3.0.20-1 samba3-winbind-3.0.20-1 I've got a's on my brain. That sould be -1 not a -- David C. Rankin, J.D., P.E. RANKIN LAW FIRM, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 (936) 715-9333 (936) 715-9339 fax www.rankinlawfirm.com -- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Date Mismatch
Danny Paul wrote: I've had a series of files get created in user profiles with a mtime of Dec 13, 1901 14:45. 'stat -c %Y' reports -2147483648. [...] This is not a filesystem problem, fscheck is clean as a whistle, this must be a SAMBA issue. I suspect that whatever problem causes the misrepresentation in date is also what causes the date to be wrong in the first place. Which application or which program is creating files with an empty mtime? Do you using xcopy bei any chance? A user of samba 3.15.pre2 has the same problem with a mapped network drive using xcopy to copy files from an novell server to the mapped drive. If the copying user is not the owner of a directory with already existing files and 'dos filemode = no' for the share, xcopy failes with 'access denied' while changing the mtime for the directory containing the files. der tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Date Mismatch
The files are getting created on the client by all sorts of different methods, MS Word, Excel, Acrobat, or from an email attachment. It gets created on the server when the user logs out and the profile gets synchronized. Thanks for your reply - can you send me any information about the other people who have had similar problems? Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Date Mismatch
Danny Paul wrote: Thanks for your reply - can you send me any information about the other people who have had similar problems? http://lists.spline.inf.fu-berlin.de/mailman/htdig/eisfair/2005-September/084330.html You can find the mail address from Michael Ebersbach there. der tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Over A Wan
Hey Guys, Im also using openvpn. I would also recommend routed IP rather then ethernet bridging for WAN use. As far as routed subnets go, I was wondering, is it possible to drop WINS and use DNS for name resolution and Would that be a prefered option? Cheers, Rhys On 9/7/05, Thomas M. Skeren III [EMAIL PROTECTED] wrote: Mike McMullen wrote: - Original Message - From: David Miller [EMAIL PROTECTED] Subject: Re: [Samba] Samba Over A Wan I'm currently using OpenVPN to allow access to Samba over WAN. Works pretty good but my experience has been that browsing shares and directory structures over the WAN can be somewhat frustrating to users. I believe this is b/c windows file sharing is a pretty heavy protocal and our WAN connection is only 768bps up and down. You'll also want to be using WINS for name resolution unless you're bridging your OpenVPN subnet with your local subnet which I would avoid doing if possible. David Hi David! Thank you for your feedback. Our connection is a T1. The people would be accessing a folder that has 3 folders in it with 200 files in each folder. The connection would be their box to our box only. Would I still need WINS in this scenario? Well you could map the drive by IP addy instead. I have 10 offices connected by IPSEC encapsulated VLan. Users access the resources on the various drives on various servers over the vlan. Sure it can be a bit sluggish, but it's not horrible. I'm not up on Windows requirements. Thanks, Mike -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba domain member and wheel group
Hi, I have a CentOS 4.1 box at work running Samba 3 which I have added as a domain member to an existing Windows domain with a Windows PDC. The box running Samba has no local unix users and groups except for root and the other builtin accounts. All user authentication is done through pam_winbind and user information is handled by winbind. What I would like to do is have users that are members of the Windows domian's Unix Admin global group gain membership to the local unix wheel group when they login via ssh to the Linux box. Preferably without needing to touch the /etc/groups file at all. I've read chapters 11 and 12 of the Samba How-To and I tried the following on the domain member running Samba based on the How-To: net groupmap add ntgroup=Unix Admin unixgroup=wheel But when I ssh'ed in as my user who is a member of the Unix Admin group and run `groups` I do not see myself as a member of the wheel group. I also can't alter files with wheel write permissions. After looking at the output of `net getdomainsid` and `net groupmap list` (by this time I had already deleted the Unix Admin - wheel groupmap) I realized that the SIDs I see in the groupmap list correspond to the SID of the local machine and not the domain. I also see that Unix Admin is not even listed as a group when I check the groups on the machine. [EMAIL PROTECTED] ~]# net getdomainsid SID for domain PINKFLOYD is: S-1-5-21-3074351591-431869502-3764789074 SID for domain MEDITECH is: S-1-5-21-1698397751-1239680928-390482200 [EMAIL PROTECTED] ~]# net groupmap list System Operators (S-1-5-32-549) - -1 Domain Admins (S-1-5-21-3074351591-431869502-3764789074-512) - -1 Domain Guests (S-1-5-21-3074351591-431869502-3764789074-514) - -1 Domain Users (S-1-5-21-3074351591-431869502-3764789074-513) - -1 Replicators (S-1-5-32-552) - -1 Guests (S-1-5-32-546) - -1 Power Users (S-1-5-32-547) - -1 Print Operators (S-1-5-32-550) - -1 Administrators (S-1-5-32-544) - -1 Account Operators (S-1-5-32-548) - -1 Backup Operators (S-1-5-32-551) - -1 My question is how should I be going about mapping my domain group members so they gain membership to a local Unix group while they're logged in? I've read the chapters in the How-To but I'm definitely missing something. I realize now that I can't simply groupmap Unix Admin to wheel so there must be some intermediate steps in between. Can someone point me in the right direction? Thanks. Tom smb.conf: # Global parameters [global] workgroup = MEDITECH server string = Samba Server security = DOMAIN password server = meditech3 log file = /var/log/samba/%m.log max log size = 50 name resolve order = lmhosts wins bcast socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 printcap name = /etc/printcap os level = 0 preferred master = No local master = No domain master = No dns proxy = No wins server = lb:172.30.48.2, canton:172.30.16.2 idmap uid = 16777216-33554431 idmap gid = 16777216-33554431 template homedir = /home/%U template shell = /bin/bash winbind separator = + winbind use default domain = Yes cups options = raw [homes] comment = Home Directories read only = No browseable = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [public] comment = Public Stuff path = /var/samba/public write list = @Domain Server Admin guest ok = Yes -- BSD# Project - Mono on FreeBSD http://www.mono-project.com/Mono:FreeBSD -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba + LDAP over the WAN
Since we're on the subject of Samba over the WAN (BTW, I'm running three offices with a Samba 3.0.9 PDC and two Samba 3.0.9 BDCs over an FreeSwan based WAN and it works just fine. The WINS server is a must in my book though.) We have a fifteen site WAN with sites linked via Frame Relay, point-to-point T1s, and ISDN Last Thursday and Friday, one of the remove office's WAN lines went down. While the outages were significant, nothing major happened because of it. But, it got me thinking about what *could* have happened and that has raised these questions. Background: All servers running RHEL 3.0, up2date'd. Samba version is 3.0.9.something.that.RedHat.Adds OpenLDAP used for ldapsam password backend. Master OpenLDAP server is located in my office, each office has a replica. Same, we have a central OpenLDAP server on SuSe and various replicants. 1). If someone would have decided to change their password while the line was down, what would have been the net effect? The attempt would fail. I know the change would not have been applied to the replica LDAP server, but would it have been queued until the Master LDAP server could have been contacted? No. 2). I know that each workstation in the domain changes its machine password at a random time, what would have happened during this process if the WAN was down? The change password would fail, it would try again later. 3). Are there any other problems that could be caused by a WAN outage that can be called disasterous? No, we've had sites drop off the WAN for days with no significant issues. What would those be? 4). Any recommendations to minimize No. 3 above? Start your own phone company? :) One that doesn't suck. -- Adam Tauno Williams - http://www.whitemice.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] net groupmap question
Hi, I currently have setup Samba 3.0.10-1.4E on a Centos 4 (RH4 clone) Linux Server. I have setup Samba as a PDC. I have PC clients with Win98, 2000 and XP. I have setup my groupmaps according to the following how-to: http://us1.samba.org/samba/docs/man/Samba-Guide/small.html I would like to know what is the net groupmap command that can make my Domain users to be Local admin of their PCs. I know we can do it locally on the PC but I would like to avoid entering that info manually at each stations. Do I need to use roaming profiles ? Or it's not necessary or it doesn't have anything to do with my problem. Thanks JF Leblond jfleblond _AT_ videotron.ca -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] XP can't read SAMBA shares - can browse and write
Server - Samba 3.0.14 on AMD64 running Gentoo Client - XP professional Can log in, see, browse, and write TO shares according to permissions assigned on server. Just can't read or copy any files FROM server to XP client. Disabled XP firewall to see if it was interfering, no change. Lots of google searching, found a post from 17/11/98 posing a similar question but no answer... http://lists.samba.org/archive/samba/1998-November/009563.html Ideas? __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Help...!
Dear John, Thanks for the reply, I still have problem about the connection. Whenever I log on using DOMAIN\User still error came out saying XSession: Login for DOMAIN\User is disabled. And still cant log on using my DOMAIN User. Any resolution? Btw, thanks for the Clock Skew, now the kinit return a ticket for 1 week everytime I try it, I think it should be like that!! :-) Sincerely, ANRI -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] error when adding a new user
Hi people, i having the following problem: useradd -s /bin/false -g users test smbpasswd -a test New SMB password: Retype new SMB password: tdb_update_sam: Failing to store a SAM_ACCOUNT for [test] without a primary group RID Failed to add entry for user test. Failed to modify password entry for user test The users group exists, grep users /etc/group users:x:100: Any ideas? I fix this adding a new group with the name of the username and adding the user to this group. Then, it works de smbpasswd -a. Why this could happend? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
svn commit: samba r10051 - in branches/tmp/samba4-winsrepl/source: libcli/wins librpc/idl
Author: metze
Date: 2005-09-06 15:39:26 + (Tue, 06 Sep 2005)
New Revision: 10051
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10051
Log:
fix sinple ip's in wins replication, packets
metze
Modified:
branches/tmp/samba4-winsrepl/source/libcli/wins/winsrepl.c
branches/tmp/samba4-winsrepl/source/librpc/idl/winsrepl.idl
Changeset:
Modified: branches/tmp/samba4-winsrepl/source/libcli/wins/winsrepl.c
===
--- branches/tmp/samba4-winsrepl/source/libcli/wins/winsrepl.c 2005-09-06
05:01:26 UTC (rev 10050)
+++ branches/tmp/samba4-winsrepl/source/libcli/wins/winsrepl.c 2005-09-06
15:39:26 UTC (rev 10051)
@@ -672,10 +672,9 @@
name-num_addresses = 1;
name-addresses = talloc(io-out.names, struct
wrepl_address);
if (name-addresses == NULL) goto failed;
- name-addresses[0].owner =
talloc_steal(name-addresses,
-
wname-addresses.address.owner);
+ name-addresses[0].owner = io-in.partner.address;
name-addresses[0].address =
talloc_steal(name-addresses,
-
wname-addresses.address.ip);
+
wname-addresses.ip);
}
}
Modified: branches/tmp/samba4-winsrepl/source/librpc/idl/winsrepl.idl
===
--- branches/tmp/samba4-winsrepl/source/librpc/idl/winsrepl.idl 2005-09-06
05:01:26 UTC (rev 10050)
+++ branches/tmp/samba4-winsrepl/source/librpc/idl/winsrepl.idl 2005-09-06
15:39:26 UTC (rev 10051)
@@ -27,11 +27,10 @@
typedef [flag(NDR_LITTLE_ENDIAN)] struct {
uint32 num_ips;
wrepl_ipips[num_ips];
- ipv4address unknown;
} wrepl_address_list;
typedef [nodiscriminant] union {
- [case(0)] wrepl_ip address;
+ [case(0)] ipv4address ip;
[case(2)] wrepl_address_list addresses;
} wrepl_addresses;
@@ -42,6 +41,7 @@
[flag(NDR_LITTLE_ENDIAN)] uint32 group_flag;
udlongr id;
[switch_is(flags 2)] wrepl_addresses addresses;
+ ipv4address unknown;
} wrepl_wins_name;
typedef struct {
svn commit: samba-web r807 - in trunk/devel: .
Author: jerry Date: 2005-09-06 16:56:41 + (Tue, 06 Sep 2005) New Revision: 807 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=807 Log: removing unused file Removed: trunk/devel/roadmap-3.html Changeset: Deleted: trunk/devel/roadmap-3.html === --- trunk/devel/roadmap-3.html 2005-09-04 22:36:16 UTC (rev 806) +++ trunk/devel/roadmap-3.html 2005-09-06 16:56:41 UTC (rev 807) @@ -1,25 +0,0 @@ -!--#include virtual=/samba/header.html -- - titleSamba 3.0 Roadmap/title -!--#include virtual=/samba/header_columns.html -- - -h3Current development branches/h3 - -pAt the moment, development is ongoing in the following CVS branches: -ul - lisamba (branch: SAMBA_3_0) - lisamba (branch: HEAD) - lisamba4 -/ul - -pThe SAMBA_3_0 branch will eventually become 3.0.1. Several RC's have already been released. - -pHEAD is the base of what will most likely become 3.1. - -psamba4 will eventually become Samba 4.0. Major parts of Samba are rewritten -in this tree and some key features are still missing from it. - -h3Targets/h3 - -pThere has been a discussion on IRC about the targets for future Samba releases. a href=http://irc.vernstok.nl/20031118summary.html;A summary/a and a a href=http://irc.vernstok.nl/20031118logs;full log/a are available. - -!--#include virtual=/samba/footer.html --
svn commit: samba r10055 - in branches/SAMBA_3_0/source: .
Author: jra Date: 2005-09-06 17:59:32 + (Tue, 06 Sep 2005) New Revision: 10055 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10055 Log: Fix typos in smbsharemodes spec. Jeremy. Modified: branches/SAMBA_3_0/source/configure.in Changeset: Modified: branches/SAMBA_3_0/source/configure.in === --- branches/SAMBA_3_0/source/configure.in 2005-09-06 16:52:25 UTC (rev 10054) +++ branches/SAMBA_3_0/source/configure.in 2005-09-06 17:59:32 UTC (rev 10055) @@ -3877,8 +3877,8 @@ INSTALLCLIENTCMD_SH=: INSTALLCLIENTCMD_A=: INSTALLCLIENT= -LIBSMBCLIENT_SHARED= -LIBSMBCLIENT= +LIBSMBSHAREMODES_SHARED= +LIBSMBSHAREMODES= AC_MSG_CHECKING(whether to build the libsmbsharemodes shared library) AC_ARG_WITH(libsmbsharemodes, [ --with-libsmbsharemodes Build the libsmbsharemodes shared library (default=yes if shared libs supported)], @@ -3892,7 +3892,7 @@ ## build the static version of libsmbsharemodes as well INSTALLCLIENTCMD_A=\$(INSTALLCMD) LIBSMBSHAREMODES_SHARED=bin/libsmbsharemodes.$SHLIBEXT -LIBSMBSHAREMODES=libsmbclient +LIBSMBSHAREMODES=libsmbsharemodes AC_MSG_RESULT(yes) else enable_static=yes @@ -3900,7 +3900,7 @@ fi if test $enable_static = yes; then INSTALLCLIENTCMD_A=\$(INSTALLCMD) -LIBSMBCLIENT=libsmbsharemodes +LIBSMBSHAREMODES=libsmbsharemodes fi INSTALLCLIENT=installclientlib ;; @@ -3918,7 +3918,7 @@ fi if test $enable_static = yes; then INSTALLCLIENTCMD_A=\$(INSTALLCMD) - LIBSMBCLIENT=libsmbsharemodes + LIBSMBSHAREMODES=libsmbsharemodes fi] INSTALLCLIENT=installclientlib )
svn commit: samba r10057 - in branches/SOC/SAMBA_4_0: . source/lib/registry/tools
Author: metze
Date: 2005-09-06 19:29:20 + (Tue, 06 Sep 2005)
New Revision: 10057
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10057
Log:
[EMAIL PROTECTED] (orig r10052): jelmer | 2005-09-06 17:44:08 +0200
Add 'print' command
Modified:
branches/SOC/SAMBA_4_0/
branches/SOC/SAMBA_4_0/source/lib/registry/tools/regshell.c
Changeset:
Property changes on: branches/SOC/SAMBA_4_0
___
Name: svk:merge
- 0c0555d6-39d7-0310-84fc-f1cc0bd64818:/branches/SAMBA_4_0:10048
3a72dc49-98ff-0310-ab52-9b7ed7945d91:/local/samba4:9495
a953eb74-4aff-0310-a63c-855d20285ebb:/local/samba4:11627
d349723c-e9fc-0310-b8a8-fdedf1c27407:/local/SAMBA_4_0:5616
d349723c-e9fc-0310-b8a8-fdedf1c27407:/local/samba-SAMBA_4_0:5609
+ 0c0555d6-39d7-0310-84fc-f1cc0bd64818:/branches/SAMBA_4_0:10052
3a72dc49-98ff-0310-ab52-9b7ed7945d91:/local/samba4:9495
a953eb74-4aff-0310-a63c-855d20285ebb:/local/samba4:11627
d349723c-e9fc-0310-b8a8-fdedf1c27407:/local/SAMBA_4_0:5616
d349723c-e9fc-0310-b8a8-fdedf1c27407:/local/samba-SAMBA_4_0:5609
Modified: branches/SOC/SAMBA_4_0/source/lib/registry/tools/regshell.c
===
--- branches/SOC/SAMBA_4_0/source/lib/registry/tools/regshell.c 2005-09-06
18:20:23 UTC (rev 10056)
+++ branches/SOC/SAMBA_4_0/source/lib/registry/tools/regshell.c 2005-09-06
19:29:20 UTC (rev 10057)
@@ -35,6 +35,7 @@
* ch - change hive
* info - show key info
* save - save hive
+ * print - print value
* help
* exit
*/
@@ -123,6 +124,26 @@
return new;
}
+static struct registry_key *cmd_print(TALLOC_CTX *mem_ctx, struct
registry_context *ctx,struct registry_key *cur, int argc, char **argv)
+{
+ struct registry_value *value;
+ WERROR error;
+
+ if (argc != 2) {
+ fprintf(stderr, Usage: print valuename);
+ return NULL;
+ }
+
+ error = reg_key_get_value_by_name(mem_ctx, cur, argv[1], value);
+ if (!W_ERROR_IS_OK(error)) {
+ fprintf(stderr, No such value '%s'\n, argv[1]);
+ return NULL;
+ }
+
+ printf(%s\n%s\n, str_regtype(value-data_type),
reg_val_data_string(mem_ctx, value));
+ return NULL;
+}
+
static struct registry_key *cmd_ls(TALLOC_CTX *mem_ctx, struct
registry_context *ctx,struct registry_key *cur, int argc, char **argv)
{
int i;
@@ -208,6 +229,7 @@
{ck, cd, Change current key, cmd_ck },
{info, i, Show detailed information of a key, cmd_info },
{list, ls, List values/keys in current key, cmd_ls },
+ {print, p, Print value, cmd_print },
{mkkey, mkdir, Make new key, cmd_mkkey },
{rmval, rm, Remove value, cmd_rmval },
{rmkey, rmdir, Remove key, cmd_rmkey },
svn commit: samba r10058 - in branches/tmp/RPCREWRITE/source: include libsmb rpc_client
Author: jra Date: 2005-09-06 22:05:39 + (Tue, 06 Sep 2005) New Revision: 10058 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10058 Log: Update (C) statements, fix passchange code. Remove unused elements from cli struct. Jeremy. Modified: branches/tmp/RPCREWRITE/source/include/client.h branches/tmp/RPCREWRITE/source/libsmb/passchange.c branches/tmp/RPCREWRITE/source/libsmb/pwd_cache.c branches/tmp/RPCREWRITE/source/rpc_client/cli_dfs.c branches/tmp/RPCREWRITE/source/rpc_client/cli_ds.c branches/tmp/RPCREWRITE/source/rpc_client/cli_echo.c branches/tmp/RPCREWRITE/source/rpc_client/cli_lsarpc.c branches/tmp/RPCREWRITE/source/rpc_client/cli_reg.c branches/tmp/RPCREWRITE/source/rpc_client/cli_samr.c branches/tmp/RPCREWRITE/source/rpc_client/cli_spoolss.c branches/tmp/RPCREWRITE/source/rpc_client/cli_spoolss_notify.c branches/tmp/RPCREWRITE/source/rpc_client/cli_srvsvc.c branches/tmp/RPCREWRITE/source/rpc_client/cli_wkssvc.c Changeset: Sorry, the patch is too large (341 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10058
svn commit: samba r10059 - in branches/tmp/RPCREWRITE/source/nsswitch: .
Author: jra Date: 2005-09-07 01:14:06 + (Wed, 07 Sep 2005) New Revision: 10059 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10059 Log: Fix nsswitch/winbindd_cm.c to use the new interface. Jeremy. Modified: branches/tmp/RPCREWRITE/source/nsswitch/winbindd.h branches/tmp/RPCREWRITE/source/nsswitch/winbindd_ads.c branches/tmp/RPCREWRITE/source/nsswitch/winbindd_cm.c branches/tmp/RPCREWRITE/source/nsswitch/winbindd_pam.c Changeset: Sorry, the patch is too large (494 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10059
svn commit: samba r10060 - in branches/tmp/RPCREWRITE/source/nsswitch: .
Author: jra Date: 2005-09-07 01:33:24 + (Wed, 07 Sep 2005) New Revision: 10060 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10060 Log: winbindd now builds (god knows if it works though :-). Jeremy. Modified: branches/tmp/RPCREWRITE/source/nsswitch/winbindd_misc.c branches/tmp/RPCREWRITE/source/nsswitch/winbindd_pam.c Changeset: Sorry, the patch is too large (397 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=10060
