Re: [Samba] Roaming profiles cannot be used fully unless a member of "Domain Admins"

2006-04-08 Thread sh test
Craig!


Thanks all for your help so far.

I went ahead and tried some crazy workarounds which were successful on my end.  
The procedure is as follows


1)it totally does /not/ matter if the users are member of the "Domain Users" 
group at all

2)I addedd a real user call it 'test', than add it as a samba user

3)Logged in as XP Admin and copied one of my problematic user's profile as the 
  'test' user's profile

4)blew away the problematic user's profile from the /home/samba/samba-netprof 
directory

5)logged in as the 'test' samba user to make sure all my settings, including 

 start-->run history and 100% everything else was there... and it was :)

6)logged off, and 
  
  a)cd /home/samba/samba-netprof
  b)mv 'test''matt' <<---one of my problematic users
  c)usermod -u NEWUID matt
  d)chown -R matt.  matt(note that there's a dot . after the first matt)
  
7)logged as XP admin again and blew away matt's profile

8)logged in as matt and voila...all was there :)

9)blew away matt's profile onto every other XP box that was joined onto the 
domain


Hope this will help anyone with a weird ass problem like mine


This was originated from my actually migrating off a Redhat-->Debian
and did not come to play untill i formated my XP desktops

-albunix


sh test <[EMAIL PROTECTED]> wrote: Craig,

Yup. sid shows as S-1-5-21-2890933770-3660815257-1026551046

and Start => System => Advanced => User Profiles

shows the users as Roaming




Craig White <[EMAIL PROTECTED]> wrote: Are their machines joined to the domain?

What is output of 'net getlocalsid' ?

is it S-1-5-21-2890933770-3660815257-1026551046  ?

if you check on the Windows system where roaming profiles aren't
working...

Start => System => Advanced => User Profiles => do they show as roaming?

Craig

On Sat, 2006-04-08 at 08:08 -0700, sh test wrote:
> Craig!
> 
> Thanks for the reply.
> 
> I addedd 
> 
> profile acls = yes
> csc policy = disable
> 
> also, my 
> 
> drwxrwxrwt  4 root users 4096 Apr  7  21:48 /home/samba/samba-ntprof/
> 
> and all the users are in the users's group
> 
> users:x:100:jeremy,todd,matt
> 
> Restarted samba after the above change and still no-go
> 
> 
> 
> Craig White  wrote:
> On Fri, 2006-04-07 at 20:36 -0700, sh test wrote:
> > Hello!
> > 
> > This is my setup
> > 
> > Using 3.0.14a-3sarge on Deb.
> > 
> > This is my smb.conf file
> > 
> > # Global parameters
> > [global]
> > workgroup = MYWORKGROUP
> > server string = Samba Server
> > obey pam restrictions = Yes
> > passwd program = /usr/bin/passwd %u
> > passwd chat = *New*password* %n\n  *Retype*new*password* %n\n
> *passwd:*all*authentication*tokens*updated*successfully*
> > #turn this on for loggin purposes
> > #log level = 4
> > log file = /var/log/samba/%m.log
> > max log size = 0
> > time server = Yes
> > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> > add user script = /usr/sbin/useradd -m %u
> > delete user script = /usr/sbin/userdel -r %u
> > add group script = /usr/sbin/groupadd %g
> > delete group script = /usr/sbin/groupdel %g
> > add user to group script = /usr/sbin/usermod -G %g %u
> > add machine script = /usr/sbin/useradd -s /bin/false \
> > -d /dev/null %u
> > logon path = \\%L\profiles\%u
> > logon drive = H:
> > domain logons = Yes
>  > os level = 65
> > preferred master = Yes
> > domain master = Yes
> > dns proxy = No
> > wins support = Yes
> > hosts allow = 192.168.
> > ;--000
> > ;--keep this options disabled
> > ;--since they generate a lot of disk space
> > ;--000
> > ;recyclebin options
> > #recycle:exclude = *.tmp *.temp *.o *.obj ~$*
> > #recycle:keeptree = True
> > #recycle:touch = True
> > #recycle:versions = True
> > #recycle:noversions = .doc|.xls|.ppt
> > #recycle:repository = %u's_network_Recycle_Bin
> > #recycle:maxsize = 1000
> > create mask = 0777
> > directory mask = 0777
>  > #vfs objects = recycle
> > [homes]
> > comment = Home Directories
> > read onfiltered= No
> > create mask = 0664
> > directory mask = 0775
> > invalid users = mp3
> > [Shared]
> > comment = Miscellaneous Shared Files
> > read onfiltered= No
> > create mask = 0664
> > directory mask = 0775
> > path = /home/samba/Shared
> > invalid users = mp3
> > 
> > [tmp]
> > comment = Temporary Share
> > path = /tmp
> > read onfiltered= No
> > invalid users = mp3
>   

RES: RES: [Samba] Preventing Multiple Logins in Samba

2006-04-08 Thread Wilson A. Galafassi Jr.
For me the preexec solution work´s fine, but i have alot of shares. Doe´s
exist some other way to don´t permit the workstation to logon in the domain?

-Mensagem original-
De: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Em nome de
Craig White
Enviada em: sábado, 8 de abril de 2006 21:15
Para: samba@lists.samba.org
Assunto: Re: RES: [Samba] Preventing Multiple Logins in Samba

It wouldn't be a login.

You have the start of a script methodology, I would suppose you could
experiment with it.

Craig

On Sat, 2006-04-08 at 20:53 -0300, Wilson A. Galafassi Jr. wrote:
> I have found this solution:
> 
>
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/AdvancedNetworkMa
> nagement.html#id2624319
> 
> but is necessary to do in all shares? Doesn´t exist some other solution?
> 
> Very thanks to all.
> 
> wilson
> 
> -Mensagem original-
> De: Ryan Novosielski [mailto:[EMAIL PROTECTED] 
> Enviada em: sábado, 8 de abril de 2006 13:03
> Para: Wilson A. Galafassi Jr.
> Cc: samba@lists.samba.org
> Assunto: Re: [Samba] Preventing Multiple Logins in Samba
> 
> Search the list archives.
> 
> The short answer is by implementing a login script that will check if
> the user is logged in and deny the second login.
> 
> Wilson A. Galafassi Jr. wrote:
> 
> >Hello to all.
> >
> >Samba is the PDC on my network. 
> >My question is: It´s possible to don´t permit multiple login of the same
> >user on the PDC?
> >
> >Thanks
> >Wilson
> >
> >
> >
> >
> >___
> >Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de e-mail no
celular
> e anti-spam realmente eficaz.
> >http://br.info.mail.yahoo.com/
> >--
> >To unsubscribe from this list go to the following URL and read the
> >instructions:  https://lists.samba.org/mailman/listinfo/samba
> >  
> >
> 
> 
>   
> ___ 
> Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de e-mail no celular
e anti-spam realmente eficaz. 
> http://br.info.mail.yahoo.com/

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba



___
Novidade no Yahoo! Mail: receba alertas de novas mensagens no seu celular. 
Registre seu aparelho agora!
http://br.mobile.yahoo.com/mailalertas/


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: RES: [Samba] Preventing Multiple Logins in Samba

2006-04-08 Thread Craig White
It wouldn't be a login.

You have the start of a script methodology, I would suppose you could
experiment with it.

Craig

On Sat, 2006-04-08 at 20:53 -0300, Wilson A. Galafassi Jr. wrote:
> I have found this solution:
> 
> http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/AdvancedNetworkMa
> nagement.html#id2624319
> 
> but is necessary to do in all shares? Doesn´t exist some other solution?
> 
> Very thanks to all.
> 
> wilson
> 
> -Mensagem original-
> De: Ryan Novosielski [mailto:[EMAIL PROTECTED] 
> Enviada em: sábado, 8 de abril de 2006 13:03
> Para: Wilson A. Galafassi Jr.
> Cc: samba@lists.samba.org
> Assunto: Re: [Samba] Preventing Multiple Logins in Samba
> 
> Search the list archives.
> 
> The short answer is by implementing a login script that will check if
> the user is logged in and deny the second login.
> 
> Wilson A. Galafassi Jr. wrote:
> 
> >Hello to all.
> >
> >Samba is the PDC on my network. 
> >My question is: It´s possible to don´t permit multiple login of the same
> >user on the PDC?
> >
> >Thanks
> >Wilson
> >
> >
> >
> >
> >___
> >Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de e-mail no celular
> e anti-spam realmente eficaz.
> >http://br.info.mail.yahoo.com/
> >--
> >To unsubscribe from this list go to the following URL and read the
> >instructions:  https://lists.samba.org/mailman/listinfo/samba
> >  
> >
> 
> 
>   
> ___ 
> Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de e-mail no celular e 
> anti-spam realmente eficaz. 
> http://br.info.mail.yahoo.com/

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RES: [Samba] Preventing Multiple Logins in Samba

2006-04-08 Thread Wilson A. Galafassi Jr.
I have found this solution:

http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/AdvancedNetworkMa
nagement.html#id2624319

but is necessary to do in all shares? Doesn´t exist some other solution?

Very thanks to all.

wilson

-Mensagem original-
De: Ryan Novosielski [mailto:[EMAIL PROTECTED] 
Enviada em: sábado, 8 de abril de 2006 13:03
Para: Wilson A. Galafassi Jr.
Cc: samba@lists.samba.org
Assunto: Re: [Samba] Preventing Multiple Logins in Samba

Search the list archives.

The short answer is by implementing a login script that will check if
the user is logged in and deny the second login.

Wilson A. Galafassi Jr. wrote:

>Hello to all.
>
>Samba is the PDC on my network. 
>My question is: It´s possible to don´t permit multiple login of the same
>user on the PDC?
>
>Thanks
>Wilson
>
>
>
>
>___
>Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de e-mail no celular
e anti-spam realmente eficaz.
>http://br.info.mail.yahoo.com/
>--
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/listinfo/samba
>  
>



___
Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de e-mail no celular e 
anti-spam realmente eficaz.
http://br.info.mail.yahoo.com/
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RES: [Samba] Preventing Multiple Logins in Samba

2006-04-08 Thread Wilson A. Galafassi Jr.
Can someone tell me some solution really working?
Thanks

-Mensagem original-
De: Ryan Novosielski [mailto:[EMAIL PROTECTED] 
Enviada em: sábado, 8 de abril de 2006 13:03
Para: Wilson A. Galafassi Jr.
Cc: samba@lists.samba.org
Assunto: Re: [Samba] Preventing Multiple Logins in Samba

Search the list archives.

The short answer is by implementing a login script that will check if
the user is logged in and deny the second login.

Wilson A. Galafassi Jr. wrote:

>Hello to all.
>
>Samba is the PDC on my network. 
>My question is: It´s possible to don´t permit multiple login of the same
>user on the PDC?
>
>Thanks
>Wilson
>
>
>
>
>___
>Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de e-mail no celular
e anti-spam realmente eficaz.
>http://br.info.mail.yahoo.com/
>--
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/listinfo/samba
>  
>






___
Yahoo! doce lar. Faça do Yahoo! sua homepage.
http://br.yahoo.com/homepageset.html

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba and Logging Off Windows XP

2006-04-08 Thread Alexander Lazarevich
Whenever I log-off of windows xp.  I dont lose my mapped drive connection but 
I get an error message stating an invalid password.  I enter the exact same 
password for the reconnect but it wont stay.


It is not a problem just strange that I have to enter my password everytime 
even though I set it through the mapped drive settings.


Anyone seen this before?


I've only seen that happen when xp pro has synchronize turned on (file 
options), and it's trying to sync some other users network files who was 
logged in from a previous session.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba and Logging Off Windows XP

2006-04-08 Thread Berlin Brown
Whenever I log-off of windows xp.  I dont lose my mapped drive 
connection but I get an error message stating an invalid password.  I 
enter the exact same password for the reconnect but it wont stay.


It is not a problem just strange that I have to enter my password 
everytime even though I set it through the mapped drive settings.


Anyone seen this before?

--
Berlin Brown
(ramaza3 on freenode)
http://www.newspiritcompany.com
also checkout alpha version of botverse: 
http://www.newspiritcompany.com:8086/universe_home


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Re: If I use "valid users" option, I can't logintothedomain

2006-04-08 Thread Steve A
Gerald (Jerry) Carter wrote:
> Sounds like you are putting the valid users in the [global]
> section.  And it sounds like the machine is getting when
> it tries to connect using the its trust account.
> Make sure that you allow machines to connect in authenticated
> SMB sessions as well as users.  If the machine cannot connect,
> then it cannot validate users to logon at the client CTRL+ALT+DEL
> screen.

Spot on Jerry.  It makes sense now I know how it works, but isn't that 
always the case?

Thank you very much,
Steve :) 



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Re: If I use "valid users" option, I can't log intothe domain

2006-04-08 Thread Steve A
Craig White wrote:
> see Jerry's answer pertaining to valid users = sa in [global] which
> picked up on something I didn't consider.

Thanks Craig, that was indeed the key to the answer.  What I wanted to do 
was to globally allow everyone to "login to the domain, or access shares" 
but only if I specifically allowed them to (ie. they are a member of the 
users group).  I think I can achieve the same thing in many other ways so 
I'll experiment.

Thanks once again,
Steve :) 



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: If I use "valid users" option, I can't log into the domain

2006-04-08 Thread Craig White
On Sat, 2006-04-08 at 18:24 +0100, Steve A wrote:
> Craig White wrote:
> > OK netlogon, homes and profiles are all special shares. They really
> > only mean something to users who log on to the domain via Windows
> > computers that have been 'joined' to the domain.
> 
> I can still see my home shares even though I'm not logged onto the domain. 
> Windows does prompt me for user/password when I access it though, because my 
> Windows password isn't the same as my Unix one.
> 
> > Have you 'joined' any computers to the domain yet? I would suspect not
> > since in the list above created by smbclient -L Samba -U sa, I see 3
> > different computers with 3 different 'workgroups'
> 
> Yes, I've joined a computer called VALIANT.  Actually, it joined itself 
> because of the "add machine script =" line in my smb.conf.
> 
> > I would suggest that you read through the documentation at
> > http://www.samba.org/samba/docs (the Official HowTo and By Example)
> 
> I've got the Samba 3 Howto and Reference Guide book here with me.  As far as 
> I can tell, it doesn't provide the answer.
> 
> To recap:
> 
> - The computer called VALIANT is joined to my Samba domain.
> - I can log in with any user I've added using pdbedit (I'm using tdbsam)
> - These users also have a true Unix account
> - I can change password for both Windows/Linux, from Windows because of 
> "passwd program =" and "passwd chat =" in my smb.conf.
> - If I add "valid users = sa" to my smb.conf, I can still access my shares 
> but cannot log into the domain.
> - root can always log into the domain regardless of the valid users options.

see Jerry's answer pertaining to valid users = sa in [global] which
picked up on something I didn't consider.

also note that 'Valiant' didn't show up in the list when you performed
the 'smbclient -L Samba -U sa' command so I'm not convinced it is joined
to domain.

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: If I use "valid users" option, I can't log into the domain

2006-04-08 Thread Steve A
Craig White wrote:
> OK netlogon, homes and profiles are all special shares. They really
> only mean something to users who log on to the domain via Windows
> computers that have been 'joined' to the domain.

I can still see my home shares even though I'm not logged onto the domain. 
Windows does prompt me for user/password when I access it though, because my 
Windows password isn't the same as my Unix one.

> Have you 'joined' any computers to the domain yet? I would suspect not
> since in the list above created by smbclient -L Samba -U sa, I see 3
> different computers with 3 different 'workgroups'

Yes, I've joined a computer called VALIANT.  Actually, it joined itself 
because of the "add machine script =" line in my smb.conf.

> I would suggest that you read through the documentation at
> http://www.samba.org/samba/docs (the Official HowTo and By Example)

I've got the Samba 3 Howto and Reference Guide book here with me.  As far as 
I can tell, it doesn't provide the answer.

To recap:

- The computer called VALIANT is joined to my Samba domain.
- I can log in with any user I've added using pdbedit (I'm using tdbsam)
- These users also have a true Unix account
- I can change password for both Windows/Linux, from Windows because of 
"passwd program =" and "passwd chat =" in my smb.conf.
- If I add "valid users = sa" to my smb.conf, I can still access my shares 
but cannot log into the domain.
- root can always log into the domain regardless of the valid users options.

Cheers,
Steve :) 



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: If I use "valid users" option, I can't logintothe domain

2006-04-08 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Steve A wrote:
> Craig White wrote:
>> OK - from your original dump of smb.conf, I don't see any shares other
>> than netlogon...do you have others? Do they show in command...
> 
> Yes, I didn't think they were applicable, but here's the shares:

Sounds like you are putting the valid users in the [global]
section.  And it sounds like the machine is getting when
it tries to connect using the its trust account.
Make sure that you allow machines to connect in authenticated
SMB sessions as well as users.  If the machine cannot connect,
then it cannot validate users to logon at the client CTRL+ALT+DEL
screen.




cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEN+9KIR7qMdg1EfYRAguCAJ41c3aw9qZFxHjdi7GYyiD1jKhI+wCeMHrF
hVUEOWJXEcs8UcEwpemgqpI=
=u3CS
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba]

2006-04-08 Thread Craig White
On Sat, 2006-04-08 at 17:57 +0100, Steve A wrote:
> Craig White wrote:
> > OK - from your original dump of smb.conf, I don't see any shares other
> > than netlogon...do you have others? Do they show in command...
> 
> Yes, I didn't think they were applicable, but here's the shares:
> 
> ==
> [netlogon]
> path = /export/netlogon
> browseable = No
> [profiles]
> comment = User profiles
> path = /export/profiles
> read only = No
> create mask = 0600
> directory mask = 0700
> browseable = No
> [homes]
> comment = Home Directory for %u
> path = /home/%u
> read only = No
> browseable = No
> ==
> 
> 
> > smbclient -L samba -U sa
> 
> ==
> [EMAIL PROTECTED] ~]# smbclient -L samba -U sa
> Password:
> Domain=[SAMBA-DOMAIN] OS=[Unix] Server=[Samba 3.0.22-1.fc5]
> 
> Sharename   Type  Comment
> -     ---
> ADMIN$  IPC   IPC Service (KJN Server)
> IPC$IPC   IPC Service (KJN Server)
> sa  Disk  Home Directory for sa
> Domain=[SAMBA-DOMAIN] OS=[Unix] Server=[Samba 3.0.22-1.fc5]
> 
> Server   Comment
> ----
> SAMBAKJN Server
> 
> WorkgroupMaster
> ----
> GEORGE   GEORGINA
> SAMBA-DOMAIN SAMBA
> WORKGROUPDANGERMOUSE
> ==
> 
> 
> > does output of 'testparm -s -v' give you any errors?
> 
> None at all.  I did my changes using swat anyway.  Is there a particular 
> logging setup with Samba that I can change to to give the necessary verbose 
> messages?
> 
> Thanks Craig,
> Steve :) 

forgot to mention... (and this only applies to roaming 'profiles' - the
'profiles' share for users logging in to domain with Windows computers
that have been joined to the domain)

you would want to add...
   profile acls = yes
   csc policy = disable

to the profile section

Craig


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Preventing Multiple Logins in Samba

2006-04-08 Thread Ryan Novosielski
Search the list archives.

The short answer is by implementing a login script that will check if
the user is logged in and deny the second login.

Wilson A. Galafassi Jr. wrote:

>Hello to all.
>
>Samba is the PDC on my network. 
>My question is: It´s possible to don´t permit multiple login of the same
>user on the PDC?
>
>Thanks
>Wilson
>
>
>
>
>___
>Abra sua conta no Yahoo! Mail: 1GB de espaço, alertas de e-mail no celular e 
>anti-spam realmente eficaz.
>http://br.info.mail.yahoo.com/
>--
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/listinfo/samba
>  
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba]

2006-04-08 Thread Craig White
On Sat, 2006-04-08 at 17:57 +0100, Steve A wrote:
> Craig White wrote:
> > OK - from your original dump of smb.conf, I don't see any shares other
> > than netlogon...do you have others? Do they show in command...
> 
> Yes, I didn't think they were applicable, but here's the shares:
> 
> ==
> [netlogon]
> path = /export/netlogon
> browseable = No
> [profiles]
> comment = User profiles
> path = /export/profiles
> read only = No
> create mask = 0600
> directory mask = 0700
> browseable = No
> [homes]
> comment = Home Directory for %u
> path = /home/%u
> read only = No
> browseable = No
> ==
> 
> 
> > smbclient -L samba -U sa
> 
> ==
> [EMAIL PROTECTED] ~]# smbclient -L samba -U sa
> Password:
> Domain=[SAMBA-DOMAIN] OS=[Unix] Server=[Samba 3.0.22-1.fc5]
> 
> Sharename   Type  Comment
> -     ---
> ADMIN$  IPC   IPC Service (KJN Server)
> IPC$IPC   IPC Service (KJN Server)
> sa  Disk  Home Directory for sa
> Domain=[SAMBA-DOMAIN] OS=[Unix] Server=[Samba 3.0.22-1.fc5]
> 
> Server   Comment
> ----
> SAMBAKJN Server
> 
> WorkgroupMaster
> ----
> GEORGE   GEORGINA
> SAMBA-DOMAIN SAMBA
> WORKGROUPDANGERMOUSE
> ==
> 
> 
> > does output of 'testparm -s -v' give you any errors?
> 
> None at all.  I did my changes using swat anyway.  Is there a particular 
> logging setup with Samba that I can change to to give the necessary verbose 
> messages?

OK netlogon, homes and profiles are all special shares. They really only
mean something to users who log on to the domain via Windows computers
that have been 'joined' to the domain.

Have you 'joined' any computers to the domain yet? I would suspect not
since in the list above created by smbclient -L Samba -U sa, I see 3
different computers with 3 different 'workgroups' 

I would suggest that you read through the documentation at
http://www.samba.org/samba/docs (the Official HowTo and By Example)

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: If I use "valid users" option, I can't logintothe domain

2006-04-08 Thread Steve A
Craig White wrote:
> OK - from your original dump of smb.conf, I don't see any shares other
> than netlogon...do you have others? Do they show in command...

Yes, I didn't think they were applicable, but here's the shares:

==
[netlogon]
path = /export/netlogon
browseable = No
[profiles]
comment = User profiles
path = /export/profiles
read only = No
create mask = 0600
directory mask = 0700
browseable = No
[homes]
comment = Home Directory for %u
path = /home/%u
read only = No
browseable = No
==


> smbclient -L samba -U sa

==
[EMAIL PROTECTED] ~]# smbclient -L samba -U sa
Password:
Domain=[SAMBA-DOMAIN] OS=[Unix] Server=[Samba 3.0.22-1.fc5]

Sharename   Type  Comment
-     ---
ADMIN$  IPC   IPC Service (KJN Server)
IPC$IPC   IPC Service (KJN Server)
sa  Disk  Home Directory for sa
Domain=[SAMBA-DOMAIN] OS=[Unix] Server=[Samba 3.0.22-1.fc5]

Server   Comment
----
SAMBAKJN Server

WorkgroupMaster
----
GEORGE   GEORGINA
SAMBA-DOMAIN SAMBA
WORKGROUPDANGERMOUSE
==


> does output of 'testparm -s -v' give you any errors?

None at all.  I did my changes using swat anyway.  Is there a particular 
logging setup with Samba that I can change to to give the necessary verbose 
messages?

Thanks Craig,
Steve :) 



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Roaming profiles cannot be used fully unless a member of "Domain Admins"

2006-04-08 Thread Craig White
what is output of 

ls -l /home/samba/samba-ntprof

I'm wondering of the profiles have been created with permissions that
aren't usable without adjustment.

Craig

On Sat, 2006-04-08 at 09:36 -0700, sh test wrote:
> Craig,
> 
> Yup. sid shows as S-1-5-21-2890933770-3660815257-1026551046
> 
> and Start => System => Advanced => User Profiles
> 
> shows the users as Roaming
> 
> 
> 
> 
> Craig White <[EMAIL PROTECTED]> wrote:
> Are their machines joined to the domain?
> 
> What is output of 'net getlocalsid' ?
> 
> is it S-1-5-21-2890933770-3660815257-1026551046 ?
> 
> if you check on the Windows system where roaming profiles
> aren't
> working...
> 
> Start => System => Advanced => User Profiles => do they show
> as roaming?
> 
> Craig
> 
> On Sat, 2006-04-08 at 08:08 -0700, sh test wrote:
> > Craig!
> > 
> > Thanks for the reply.
> > 
> > I addedd 
> > 
> > profile acls = yes
> > csc policy = disable
> > 
> > also, my 
> > 
> > drwxrwxrwt 4 root users 4096 Apr 7
> 21:48 /home/samba/samba-ntprof/
> > 
> > and all the users are in the users's group
> > 
> > users:x:100:jeremy,todd,matt
> > 
> > Restarted samba after the above change and still no-go
> > 
> > 
> > 
> > Craig White  wrote:
> > On Fri, 2006-04-07 at 20:36 -0700, sh test wrote:
> > > Hello!
> > > 
> > > This is my setup
> > > 
> > > Using 3.0.14a-3sarge on Deb.
> > > 
> > > This is my smb.conf file
> > > 
> > > # Global parameters
> > > [global]
> > > workgroup = MYWORKGROUP
> > > server string = Samba Server
> > > obey pam restrictions = Yes
> > > passwd program = /usr/bin/passwd %u
> > > passwd chat = *New*password* %n\n *Retype*new*password* %n
> \n
> > *passwd:*all*authentication*tokens*updated*successfully*
> > > #turn this on for loggin purposes
> > > #log level = 4
> > > log file = /var/log/samba/%m.log
> > > max log size = 0
> > > time server = Yes
> > > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> > > add user script = /usr/sbin/useradd -m %u
> > > delete user script = /usr/sbin/userdel -r %u
> > > add group script = /usr/sbin/groupadd %g
> > > delete group script = /usr/sbin/groupdel %g
> > > add user to group script = /usr/sbin/usermod -G %g %u
> > > add machine script = /usr/sbin/useradd -s /bin/false \
> > > -d /dev/null %u
> > > logon path = \\%L\profiles\%u
> > > logon drive = H:
> > > domain logons = Yes
> > > os level = 65
> > > preferred master = Yes
> > > domain master = Yes
> > > dns proxy = No
> > > wins support = Yes
> > > hosts allow = 192.168.
> > > ;--000
> > > ;--keep this options disabled
> > > ;--since they generate a lot of disk space
> > > ;--000
> > > ;recyclebin options
> > > #recycle:exclude = *.tmp *.temp *.o *.obj ~$*
> > > #recycle:keeptree = True
> > > #recycle:touch = True
> > > #recycle:versions = True
> > > #recycle:noversions = .doc|.xls|.ppt
> > > #recycle:repository = %u's_network_Recycle_Bin
> > > #recycle:maxsize = 1000
> > > create mask = 0777
> > > directory mask = 0777
> > > #vfs objects = recycle
> > > [homes]
> > > comment = Home Directories
> > > read onfiltered= No
> > > create mask = 0664
> > > directory mask = 0775
> > > invalid users = mp3
> > > [Shared]
> > > comment = Miscellaneous Shared Files
> > > read onfiltered= No
> > > create mask = 0664
> > > directory mask = 0775
> > > path = /home/samba/Shared
> > > invalid users = mp3
> > > 
> > > [tmp]
> > > comment = Temporary Share
> > > path = /tmp
> > > read onfiltered= No
> > > invalid users = mp3
> > > 
> > > [mp3s]
> > > comment = Mp3 files
> > > path = /export/mp3s
> > > 
> > > [netlogon]
> > > comment = Network Logon Service
> > > path = /home/samba/netlogon
> > > browseable = No
> > > [profiles]
> > > path = /home/samba/samba-ntprof
> > > read onfiltered= No
> > > create mask = 0600
> > > directory mask = 0700
> > > browseable = No
> > > invalid users = mp3
> > > [backup]
> > > c

Re: [Samba] Re: Re: Re: If I use "valid users" option, I can't logintothe domain

2006-04-08 Thread Craig White
On Sat, 2006-04-08 at 17:41 +0100, Steve A wrote:
> Craig White wrote:
> > have your rebooted since you 'disabled' SELinux?
> 
> Yes.
> 
> > have you added a samba user sa ?
> 
> Yes.  I can still access the shares when logged in locally using the same 
> name/password I use when I try to log into the domain.
> 

OK - from your original dump of smb.conf, I don't see any shares other
than netlogon...do you have others? Do they show in command...

smbclient -L samba -U sa

does output of 'testparm -s -v' give you any errors?

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Roaming profiles cannot be used fully unless a member of "Domain Admins"

2006-04-08 Thread sh test
Craig,

Yup. sid shows as S-1-5-21-2890933770-3660815257-1026551046

and Start => System => Advanced => User Profiles

shows the users as Roaming




Craig White <[EMAIL PROTECTED]> wrote: Are their machines joined to the domain?

What is output of 'net getlocalsid' ?

is it S-1-5-21-2890933770-3660815257-1026551046  ?

if you check on the Windows system where roaming profiles aren't
working...

Start => System => Advanced => User Profiles => do they show as roaming?

Craig

On Sat, 2006-04-08 at 08:08 -0700, sh test wrote:
> Craig!
> 
> Thanks for the reply.
> 
> I addedd 
> 
> profile acls = yes
> csc policy = disable
> 
> also, my 
> 
> drwxrwxrwt  4 root users 4096 Apr  7 21:48 /home/samba/samba-ntprof/
> 
> and all the users are in the users's group
> 
> users:x:100:jeremy,todd,matt
> 
> Restarted samba after the above change and still no-go
> 
> 
> 
> Craig White  wrote:
> On Fri, 2006-04-07 at 20:36 -0700, sh test wrote:
> > Hello!
> > 
> > This is my setup
> > 
> > Using 3.0.14a-3sarge on Deb.
> > 
> > This is my smb.conf file
> > 
> > # Global parameters
> > [global]
> > workgroup = MYWORKGROUP
> > server string = Samba Server
> > obey pam restrictions = Yes
> > passwd program = /usr/bin/passwd %u
> > passwd chat = *New*password* %n\n *Retype*new*password* %n\n
> *passwd:*all*authentication*tokens*updated*successfully*
> > #turn this on for loggin purposes
> > #log level = 4
> > log file = /var/log/samba/%m.log
> > max log size = 0
> > time server = Yes
> > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> > add user script = /usr/sbin/useradd -m %u
> > delete user script = /usr/sbin/userdel -r %u
> > add group script = /usr/sbin/groupadd %g
> > delete group script = /usr/sbin/groupdel %g
> > add user to group script = /usr/sbin/usermod -G %g %u
> > add machine script = /usr/sbin/useradd -s /bin/false \
> > -d /dev/null %u
> > logon path = \\%L\profiles\%u
> > logon drive = H:
> > domain logons = Yes
> > os level = 65
> > preferred master = Yes
> > domain master = Yes
> > dns proxy = No
> > wins support = Yes
> > hosts allow = 192.168.
> > ;--000
> > ;--keep this options disabled
> > ;--since they generate a lot of disk space
> > ;--000
> > ;recyclebin options
> > #recycle:exclude = *.tmp *.temp *.o *.obj ~$*
> > #recycle:keeptree = True
> > #recycle:touch = True
> > #recycle:versions = True
> > #recycle:noversions = .doc|.xls|.ppt
> > #recycle:repository = %u's_network_Recycle_Bin
> > #recycle:maxsize = 1000
> > create mask = 0777
> > directory mask = 0777
> > #vfs objects = recycle
> > [homes]
> > comment = Home Directories
> > read onfiltered= No
> > create mask = 0664
> > directory mask = 0775
> > invalid users = mp3
> > [Shared]
> > comment = Miscellaneous Shared Files
> > read onfiltered= No
> > create mask = 0664
> > directory mask = 0775
> > path = /home/samba/Shared
> > invalid users = mp3
> > 
> > [tmp]
> > comment = Temporary Share
> > path = /tmp
> > read onfiltered= No
> > invalid users = mp3
> > 
> > [mp3s]
> > comment = Mp3 files
> > path = /export/mp3s
> > 
> > [netlogon]
> > comment = Network Logon Service
> > path = /home/samba/netlogon
> > browseable = No
> > [profiles]
> > path = /home/samba/samba-ntprof
> > read onfiltered= No
> > create mask = 0600
> > directory mask = 0700
> > browseable = No
> > invalid users = mp3
> > [backup]
> > comment = backup files
> > path = /export/backup
> > read onfiltered= No
> > create mask = 0600
> > directory mask = 0700
> > valid users = john
> > invalid users = mp3
> > 
> > --
> > 
> > net groupmap list shows
> > 
> > System Operators (S-1-5-32-549) -> -1
> > Replicators (S-1-5-32-552) -> -1
> > Guests (S-1-5-32-546) -> -1
> > Domain Guests
> (S-1-5-21-2890933770-3660815257-1026551046-514) -> -1
> > Domain Admins
> (S-1-5-21-2890933770-3660815257-1026551046-512) ->
> domainadmins
> > Power Users (S-1-5-32-547) -> -1
> > Print Operators (S-1-5-32-550) -> -1
> > Administrators (S-1

[Samba] Re: Re: Re: If I use "valid users" option, I can't logintothe domain

2006-04-08 Thread Steve A
Craig White wrote:
> have your rebooted since you 'disabled' SELinux?

Yes.

> have you added a samba user sa ?

Yes.  I can still access the shares when logged in locally using the same 
name/password I use when I try to log into the domain.

Steve :) 



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Re: If I use "valid users" option, I can't log intothe domain

2006-04-08 Thread Craig White
On Sat, 2006-04-08 at 17:24 +0100, Steve A wrote:
> Craig White wrote:
> > SELinux
> >
> > http://wiki.samba.org/index.php/Samba_Troubleshooting
> 
> Thanks Craig, but...
> 
> [EMAIL PROTECTED] ~]# grep -i SELINUX= /etc/selinux/config
> # SELINUX= can take one of these three values:
> SELINUX=disabled
> 

have your rebooted since you 'disabled' SELinux?

have you added a samba user sa ?

smbpasswd -a sa

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Re: If I use "valid users" option, I can't log intothe domain

2006-04-08 Thread Steve A
Craig White wrote:
> SELinux
>
> http://wiki.samba.org/index.php/Samba_Troubleshooting

Thanks Craig, but...

[EMAIL PROTECTED] ~]# grep -i SELINUX= /etc/selinux/config
# SELINUX= can take one of these three values:
SELINUX=disabled

Steve :) 



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Roaming profiles cannot be used fully unless a member of "Domain Admins"

2006-04-08 Thread Craig White
Are their machines joined to the domain?

What is output of 'net getlocalsid' ?

is it S-1-5-21-2890933770-3660815257-1026551046  ?

if you check on the Windows system where roaming profiles aren't
working...

Start => System => Advanced => User Profiles => do they show as roaming?

Craig

On Sat, 2006-04-08 at 08:08 -0700, sh test wrote:
> Craig!
> 
> Thanks for the reply.
> 
> I addedd 
> 
> profile acls = yes
> csc policy = disable
> 
> also, my 
> 
> drwxrwxrwt  4 root users 4096 Apr  7 21:48 /home/samba/samba-ntprof/
> 
> and all the users are in the users's group
> 
> users:x:100:jeremy,todd,matt
> 
> Restarted samba after the above change and still no-go
> 
> 
> 
> Craig White <[EMAIL PROTECTED]> wrote:
> On Fri, 2006-04-07 at 20:36 -0700, sh test wrote:
> > Hello!
> > 
> > This is my setup
> > 
> > Using 3.0.14a-3sarge on Deb.
> > 
> > This is my smb.conf file
> > 
> > # Global parameters
> > [global]
> > workgroup = MYWORKGROUP
> > server string = Samba Server
> > obey pam restrictions = Yes
> > passwd program = /usr/bin/passwd %u
> > passwd chat = *New*password* %n\n *Retype*new*password* %n\n
> *passwd:*all*authentication*tokens*updated*successfully*
> > #turn this on for loggin purposes
> > #log level = 4
> > log file = /var/log/samba/%m.log
> > max log size = 0
> > time server = Yes
> > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> > add user script = /usr/sbin/useradd -m %u
> > delete user script = /usr/sbin/userdel -r %u
> > add group script = /usr/sbin/groupadd %g
> > delete group script = /usr/sbin/groupdel %g
> > add user to group script = /usr/sbin/usermod -G %g %u
> > add machine script = /usr/sbin/useradd -s /bin/false \
> > -d /dev/null %u
> > logon path = \\%L\profiles\%u
> > logon drive = H:
> > domain logons = Yes
> > os level = 65
> > preferred master = Yes
> > domain master = Yes
> > dns proxy = No
> > wins support = Yes
> > hosts allow = 192.168.
> > ;--000
> > ;--keep this options disabled
> > ;--since they generate a lot of disk space
> > ;--000
> > ;recyclebin options
> > #recycle:exclude = *.tmp *.temp *.o *.obj ~$*
> > #recycle:keeptree = True
> > #recycle:touch = True
> > #recycle:versions = True
> > #recycle:noversions = .doc|.xls|.ppt
> > #recycle:repository = %u's_network_Recycle_Bin
> > #recycle:maxsize = 1000
> > create mask = 0777
> > directory mask = 0777
> > #vfs objects = recycle
> > [homes]
> > comment = Home Directories
> > read onfiltered= No
> > create mask = 0664
> > directory mask = 0775
> > invalid users = mp3
> > [Shared]
> > comment = Miscellaneous Shared Files
> > read onfiltered= No
> > create mask = 0664
> > directory mask = 0775
> > path = /home/samba/Shared
> > invalid users = mp3
> > 
> > [tmp]
> > comment = Temporary Share
> > path = /tmp
> > read onfiltered= No
> > invalid users = mp3
> > 
> > [mp3s]
> > comment = Mp3 files
> > path = /export/mp3s
> > 
> > [netlogon]
> > comment = Network Logon Service
> > path = /home/samba/netlogon
> > browseable = No
> > [profiles]
> > path = /home/samba/samba-ntprof
> > read onfiltered= No
> > create mask = 0600
> > directory mask = 0700
> > browseable = No
> > invalid users = mp3
> > [backup]
> > comment = backup files
> > path = /export/backup
> > read onfiltered= No
> > create mask = 0600
> > directory mask = 0700
> > valid users = john
> > invalid users = mp3
> > 
> > --
> > 
> > net groupmap list shows
> > 
> > System Operators (S-1-5-32-549) -> -1
> > Replicators (S-1-5-32-552) -> -1
> > Guests (S-1-5-32-546) -> -1
> > Domain Guests
> (S-1-5-21-2890933770-3660815257-1026551046-514) -> -1
> > Domain Admins
> (S-1-5-21-2890933770-3660815257-1026551046-512) ->
> domainadmins
> > Power Users (S-1-5-32-547) -> -1
> > Print Operators (S-1-5-32-550) -> -1
> > Administrators (S-1-5-32-544) -> -1
> > Account Operators (S-1-5-32-548) -> -1
> > Domain Users (S-1-5-21-2890933770-3660815257-1026551046-513)
> -> users
> 

Re: [Samba] Re: If I use "valid users" option, I can't log into the domain

2006-04-08 Thread Craig White
On Sat, 2006-04-08 at 15:05 +0100, Steve A wrote:
> Update:
> 
> I'm running FC5, and Samba was installed as a binary using yum.  If I use 
> the global option, "valid users = sa", where sa is my username, I'm unable 
> to login.
> 
> The strange thing is, root can always log in.
> 
> When login fails, this gets added to syslog
> 
> =
> Apr  8 14:51:19 fedora smbd[4150]: [2006/04/08 14:51:19, 0] 
> smbd/service.c:make_connection_snum(592)
> Apr  8 14:51:19 fedora smbd[4150]:   Can't become connected user!
> =
> 
> Does anyone have any ideas?

SELinux

http://wiki.samba.org/index.php/Samba_Troubleshooting

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] stress testing

2006-04-08 Thread Volker Lendecke
On Sat, Apr 08, 2006 at 09:23:55PM +0930, Chris Anders wrote:
> Does anyone know how to stress test samba without getting a whole  
> room of people to login to all the computers at once ? perhaps some  
> kind person has coded up a nice app that can be run on the server ??

What kind of scenario do you want to test? There's soo many
aspects of SMB and related protocols that a general stress
test is very difficult to design.

Volker


pgpJPmv2RjP0Z.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: If I use "valid users" option, I can't log into the domain

2006-04-08 Thread Steve A
updatemyself . wrote:
> can u copy the smb.conf file..
>
> regards
> robinboby.


[global]
workgroup = SAMBA-DOMAIN
netbios name = SAMBA
server string = KJN Server
smb passwd file = /etc/samba/passdb.tdb
passdb backend = tdbsam
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* 
%n\n *passwd:*all*authentication*tokens*updated*successfully*
unix password sync = Yes
log file = /var/log/samba/%m.log
smb ports = 139
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
load printers = No
show add printer wizard = No
add machine script = /usr/sbin/useradd -n -g machines -c Machine -d 
/dev/null -s /bin/false -M %u
logon path =
logon home =
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
ldap ssl = no
valid users = sa

[netlogon]
path = /export/netlogon
browseable = No




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Roaming profiles cannot be used fully unless a member of "Domain Admins"

2006-04-08 Thread sh test
Craig!

Thanks for the reply.

I addedd 

  profile acls = yes
  csc policy = disable

also, my 

drwxrwxrwt  4 root users 4096 Apr  7 21:48 /home/samba/samba-ntprof/

and all the users are in the users's group

users:x:100:jeremy,todd,matt

Restarted samba after the above change and still no-go



Craig White <[EMAIL PROTECTED]> wrote: On Fri, 2006-04-07 at 20:36 -0700, sh 
test wrote:
>   Hello!
> 
> This is my setup
> 
> Using 3.0.14a-3sarge on Deb.
> 
> This is my smb.conf file
> 
> # Global parameters
> [global]
> workgroup = MYWORKGROUP
> server string = Samba Server
> obey pam restrictions = Yes
> passwd program = /usr/bin/passwd %u
> passwd chat = *New*password* %n\n *Retype*new*password* %n\n 
> *passwd:*all*authentication*tokens*updated*successfully*
> #turn this on for loggin purposes
> #log level = 4
> log file = /var/log/samba/%m.log
> max log size = 0
> time server =  Yes
> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> add user script = /usr/sbin/useradd -m %u
> delete user script = /usr/sbin/userdel -r %u
> add group script = /usr/sbin/groupadd %g
> delete group script = /usr/sbin/groupdel %g
> add user to group script = /usr/sbin/usermod -G %g %u
> add machine script = /usr/sbin/useradd -s /bin/false \
> -d /dev/null %u
> logon path = \\%L\profiles\%u
> logon drive = H:
> domain logons = Yes
> os level =  65
> preferred master = Yes
> domain master = Yes
> dns proxy = No
> wins support = Yes
> hosts allow = 192.168.
> ;--000
> ;--keep this options disabled
> ;--since they generate a lot of disk space
> ;--000
> ;recyclebin options
> #recycle:exclude = *.tmp *.temp *.o *.obj ~$*
> #recycle:keeptree = True
> #recycle:touch =  True
> #recycle:versions = True
> #recycle:noversions = .doc|.xls|.ppt
> #recycle:repository = %u's_network_Recycle_Bin
> #recycle:maxsize = 1000
> create mask = 0777
> directory mask = 0777
> #vfs objects = recycle
> [homes]
> comment = Home Directories
> read onfiltered= No
> create mask = 0664
> directory mask = 0775
> invalid users = mp3
> [Shared]
> comment = Miscellaneous Shared  Files
> read onfiltered= No
> create mask = 0664
> directory mask = 0775
> path = /home/samba/Shared
> invalid users = mp3
> 
> [tmp]
> comment = Temporary Share
> path = /tmp
> read onfiltered= No
> invalid users = mp3
> 
> [mp3s]
> comment = Mp3 files
> path = /export/mp3s
> 
> [netlogon]
> comment = Network Logon Service
> path = /home/samba/netlogon
> browseable =  No
> [profiles]
> path = /home/samba/samba-ntprof
> read onfiltered= No
> create mask = 0600
> directory mask = 0700
> browseable = No
> invalid users = mp3
> [backup]
> comment = backup files
> path = /export/backup
> read onfiltered= No
> create mask = 0600
> directory mask = 0700
> valid users = john
> invalid users = mp3
> 
> --
> 
> net groupmap list  shows
> 
> System Operators (S-1-5-32-549) -> -1
> Replicators (S-1-5-32-552) -> -1
> Guests (S-1-5-32-546) -> -1
> Domain Guests (S-1-5-21-2890933770-3660815257-1026551046-514) -> -1
> Domain Admins (S-1-5-21-2890933770-3660815257-1026551046-512) -> domainadmins
> Power Users (S-1-5-32-547) -> -1
> Print Operators (S-1-5-32-550) -> -1
> Administrators (S-1-5-32-544) -> -1
> Account Operators (S-1-5-32-548) -> -1
> Domain Users (S-1-5-21-2890933770-3660815257-1026551046-513) -> users
> Backup Operators (S-1-5-32-551) -> -1
> Users (S-1-5-32-545) -> -1
> 
> 
> /etc/group contains
> 
> domainadmins:x:112:john
> users:x:100:jeremy,todd,matt
> 
> -
> 
> Issue is: All besides john, who's a member of "Domain Admins" can login
> just fine.  However, the roaming profile seem not to be writeable to it, since
> any changes, say a bookmark on Firefox would not be saved during  next login.
> 
> Also, if one were to hit Start button, there'd be no "history" of previously 
> run programs that displays generally.
> 
> My Start->Run history also is not there
> 
> 
> 
> Please advice on what I'm doing wrong/missing.
> 
> 
> Appreciate the assistance in advance

try adding

[profiles]
> path = /home/samba/samba-ntprof
> read onfiltered= No
> create mask = 0600
> directory mask = 0700
> browseable = No
> invalid users = mp3
 

[Samba] Re: If I use "valid users" option, I can't log into the domain

2006-04-08 Thread Steve A
Update:

I'm running FC5, and Samba was installed as a binary using yum.  If I use 
the global option, "valid users = sa", where sa is my username, I'm unable 
to login.

The strange thing is, root can always log in.

When login fails, this gets added to syslog

=
Apr  8 14:51:19 fedora smbd[4150]: [2006/04/08 14:51:19, 0] 
smbd/service.c:make_connection_snum(592)
Apr  8 14:51:19 fedora smbd[4150]:   Can't become connected user!
=

Does anyone have any ideas?

Thanks,
Steve :) 



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] helping out with documentation?

2006-04-08 Thread Veronica Hill
What would be the best way to help out with Documentation - like 
changing some of the bits in Samba by example or adding pointers to 
other chapters where John Terpstra has missed a step that another 
chapter covers?


I can't find any info on the website that shows me how to write in the 
docbook xml format - I haven't done that before, so I need some 
pointers.  Where can I find some?


bye, rony

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] stress testing

2006-04-08 Thread Chris Anders
Does anyone know how to stress test samba without getting a whole  
room of people to login to all the computers at once ? perhaps some  
kind person has coded up a nice app that can be run on the server ??


just curious..


Kind Regards,


Chris Anders
Network Engineer

Anders Networks
Mobile - 0421 580 017
Email   - [EMAIL PROTECTED]
Web - http://www.anders.net.au




---
This message contains confidential information and is intended only f  
or the individual named. If you are not the named addressee you s  
hould not disseminate, distribute or copy this e-mail. Please notify  
t he sender immediately by e-mail if you have received this e-mail by  
mistake and delete this e-mail from your system. E-mail transmission  
ca n not be guaranteed to be secure or error-free as information  
could be intercepted, corrupted, lost, destroyed, arrive late or  
incomplete, or contain viruses. The sender therefore does not accept  
liability for any errors or omissions in the contents of this  
message, which arise as a result of e-mail transmission. If  
verification is required please request a hard-copy version.




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Cannot join to domain: Username could not be found.

2006-04-08 Thread Hakan BAYINDIR
Since my last post, I've fixed the err=49 cases and I all have is err=0
and the same problem.
I still cannot connect to domain with the same error. I'm attaching my
smb and ldap logs.

Thanks in advance,

Hakan BAYINDIR
  smb_uid=101
  smb_mid=2369
  smt_wct=2
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=0 (0x0)
  smb_bcc=0
[2006/03/17 15:17:55, 3] smbd/process.c:switch_message(900)
  switch message SMBulogoffX (pid 5882) conn 0x0
[2006/03/17 15:17:55, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/03/17 15:17:55, 5] auth/auth_util.c:debug_nt_user_token(452)
  NT user token: (NULL)
[2006/03/17 15:17:55, 5] auth/auth_util.c:debug_unix_user_token(473)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2006/03/17 15:17:55, 5] smbd/uid.c:change_to_root_user(319)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2006/03/17 15:17:55, 5] auth/auth_util.c:free_server_info(1387)
  attempting to free (and zero) a server_info structure
[2006/03/17 15:17:55, 3] smbd/reply.c:reply_ulogoffX(1560)
  ulogoffX vuid=101
[2006/03/17 15:17:55, 5] lib/util.c:show_msg(454)
[2006/03/17 15:17:55, 5] lib/util.c:show_msg(464)
  size=39
  smb_com=0x74
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=0
  smb_pid=65279
  smb_uid=101
  smb_mid=2369
  smt_wct=2
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=0 (0x0)
  smb_bcc=0
[2006/03/17 15:17:55, 10] lib/util_sock.c:read_smb_length_return_keepalive(615)
  got smb length of 35
[2006/03/17 15:17:55, 6] smbd/process.c:process_smb(1113)
  got message type 0x0 of len 0x23
[2006/03/17 15:17:55, 3] smbd/process.c:process_smb(1114)
  Transaction 38 of length 39
[2006/03/17 15:17:55, 5] lib/util.c:show_msg(454)
[2006/03/17 15:17:55, 5] lib/util.c:show_msg(464)
  size=35
  smb_com=0x71
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=65279
  smb_uid=101
  smb_mid=2433
  smt_wct=0
  smb_bcc=0
[2006/03/17 15:17:55, 3] smbd/process.c:switch_message(900)
  switch message SMBtdis (pid 5882) conn 0x803b06e0
[2006/03/17 15:17:55, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/03/17 15:17:55, 5] auth/auth_util.c:debug_nt_user_token(452)
  NT user token: (NULL)
[2006/03/17 15:17:55, 5] auth/auth_util.c:debug_unix_user_token(473)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2006/03/17 15:17:55, 5] smbd/uid.c:change_to_root_user(319)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2006/03/17 15:17:55, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/03/17 15:17:55, 5] auth/auth_util.c:debug_nt_user_token(452)
  NT user token: (NULL)
[2006/03/17 15:17:55, 5] auth/auth_util.c:debug_unix_user_token(473)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2006/03/17 15:17:55, 5] smbd/uid.c:change_to_root_user(319)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2006/03/17 15:17:55, 3] smbd/service.c:close_cnum(835)
  laptop-022778 (10.4.4.85) closed connection to service IPC$
[2006/03/17 15:17:55, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to IPC$
[2006/03/17 15:17:55, 4] smbd/vfs.c:vfs_ChDir(737)
  vfs_ChDir to /
[2006/03/17 15:17:55, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/03/17 15:17:55, 5] auth/auth_util.c:debug_nt_user_token(452)
  NT user token: (NULL)
[2006/03/17 15:17:55, 5] auth/auth_util.c:debug_unix_user_token(473)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2006/03/17 15:17:55, 5] smbd/uid.c:change_to_root_user(319)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2006/03/17 15:17:55, 5] lib/util.c:show_msg(454)
[2006/03/17 15:17:55, 5] lib/util.c:show_msg(464)
  size=35
  smb_com=0x71
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=65279
  smb_uid=101
  smb_mid=2433
  smt_wct=0
  smb_bcc=0
[2006/03/17 15:17:55, 10] lib/util_sock.c:read_data(517)
  read_data: read of 4 returned 0. Error = Success
[2006/03/17 15:17:55, 10] lib/util_sock.c:receive_smb_raw(666)
  receive_smb_raw: length < 0!
[2006/03/17 15:17:55, 3] smbd/process.c:timeout_processing(1366)
  timeout_processing: End of file from client (client has disconnected).
[2006/03/17 15:17:55, 5] lib/gencache.c:gencache_shutdown(88)
  Closing cache file
[2006/03/17 15:17:55, 5] libsmb/namecache.c:namecache_shutdown(79)
  namecache_shutdown: netbios namecache closed successfully.
[2006/03/17 15:17:55, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/03/17 15:17:55, 5] auth/auth_util.c:debug_nt_user_token(452)
  NT user token: (NULL)
[2006/03/17 15:17:55, 5] auth/auth_util.c:debug_unix_user_token(473)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2006/03/17 15:17:55, 5] smbd/uid.c:change_to_root_user(319)
  change_to_root_user: now uid=(0,0) gid