[Samba] unable to fetch password

2006-06-23 Thread Bill S
Hello,
 
Less than an hour ago I sent you a message regarding the "Unable to fetch
machine
password" error I was receiving on our new HP9000 11.23 machine. I have
fixed the
problem. The -P parameter that was OK in samba 2.2.5 in the smbclient
command
was causing the error in samba 3.0.14. I removed it and am printing fine.
 
Thank you,
 
- Bill
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] "unable to fetch password"

2006-06-23 Thread Bill S
Hello,
 
We recently moved from an HP9000 running HPUX 11.11 and samba 2.2.25(I
think)
to an HP9000 running HPUX 11.23 and samba 3.0.14a. I copied over the
smb.conf
file. Same printers, users, IP addresses etc. are being used but now I get
the
error "Unable to fetch machine password" when I try to print using the same
command that used to be successful.
 
Advice?
 
- Bill
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] NT_STATUS_SHARING_VIOLATION when trying to delete files

2006-06-23 Thread Peeler, Wade M.
I searched the archives already and couldn't find an answer to this.

I'm running an automated process via a cron job on a SUSE Linux
Enterprise Server 9 box.  The cron runs a Perl script, which uses the
SmbClientParser module.  The Perl script grabs files from clients
running Windows 2000.  The files on the client computers are created by
in-house MFC applications on those computers.

Occasionally, when the Perl script tries to delete files from the client
computers, it gets an NT_STATUS_SHARING_VIOLATION and is unable to
delete the file.  I sometimes even get this error long after the
software on the client that created the file has exited.  However,
sometimes everything works just fine and the Perl script is able to
delete the files without problems.

Does anybody know what causes this, or at least can point me in the
right direction towards solving this problem?

Wade
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.23rc3 Available for Download

2006-06-23 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

==
 > How do you set 'hide unreadable = yes' via the standard
 > RPC calls? We need more than pure Win32 allows.

 RegSetValue() :-)
--  samba-technical ml
-- Samba Management Thread
==
Release Announcements
=

This is the third release candidate of the 3.0.23 code base
and is provided for community testing purposes.  If all goes
well, we hope that this will become the production 3.0.23
release.  Your testing and feedback is greatly appreciated.

We would like to thank the developers of Klocwork for their
analysis of the Samba source tree.  This release candidate
includes fixes for over 170 defects reported by the Klocwork
code analyzer.

Common issues addressed in 3.0.23rc3 include:

   o Warnings from the Klocwork code analyzer.
   o Various portability bugs on AIX, Solaris, and True64.
   o Authorization problems when managing services.
   o Problems joining Windows clients to a Samba/LDAP domain.



Download Details


The uncompressed tarballs and patch files have been signed
using GnuPG (ID 157BC95E).  The source code can be
downloaded from:

http://download.samba.org/samba/ftp/rc/

The release notes are available online at:

http://www.samba.org/samba/ftp/rc/WHATSNEW-3-0-23rc3.txt

Binary packages are available at

http://download.samba.org/samba/ftp/Binary_Packages/

Our Code, Our Bugs, Our Responsibility.
(https://bugzilla.samba.org/)

--Enjoy
The Samba Team
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEnDtzIR7qMdg1EfYRAtqmAKCcxIeZF2TRI6uqxOWywo2hwciNqQCgyReG
Hvl1z9RuOS5XhfvvJeEg30E=
=3S28
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Off topic NSS_LDAP

2006-06-23 Thread Logan Shaw

On Fri, 23 Jun 2006, IT wrote:

   Anybody can copile NSS_LDAP under Solaris 10 ?, i have a trouble compiling 
this tool.


Doesn't Solaris have built-in support for ldap in nsswitch.conf?
Why would you need to compile your own?

  - Logan
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Samba 3.22 system requirements

2006-06-23 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Stephen Boyd wrote:
> I'm the person who posted the bug about 2.2 kernels.  I got 
> past the compile errors but now smbd aborts as soon
> as you try to start it. That is why I am asking
> about minimum gcc & glib versions.

There's no documented.  But I compile of RedHat 7.3
pretty regularly.  That's as far as I go back.






cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
"What man is a man who does not make the world better?"  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEnCdLIR7qMdg1EfYRAhtbAKCtblz36XV/bp8Vma5IPw2vrI2CdwCdFcHY
cQhhA9GJqxrusE/UZyyqqB8=
=4gbp
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Samba 3.22 system requirements

2006-06-23 Thread Stephen Boyd
I'm the person who posted the bug about 2.2 kernels.  I got past the
compile errors but now smbd aborts as soon as you try to start it.
That is why I am asking about minimum gcc & glib versions.


On Fri, 23 Jun 2006 12:04:36 -0500, "Gerald (Jerry) Carter"
<[EMAIL PROTECTED]> wrote:

>-BEGIN PGP SIGNED MESSAGE-
>Hash: SHA1
>
>Stephen Boyd wrote:
>> I have been unable to find anything that will tell 
>> me what the minimum system requirements are to
>> build Samba 3.22.  What version of gcc,
>> glibc, etc.  Can anyone tell me what they are?
>
>It's pretty portable.  I think there's an open bug
>about compiling on a Linux 2.2 kernel.  And SunOS 4
>is not supported :-)
>
>Any recent OS and tool chain is probably OK.
>
>
>
>
>
>cheers, jerry
>=
>Samba--- http://www.samba.org
>Centeris ---  http://www.centeris.com
>"What man is a man who does not make the world better?"  --Balian
>-BEGIN PGP SIGNATURE-
>Version: GnuPG v1.4.2 (GNU/Linux)
>Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org
>
>iD8DBQFEnB8kIR7qMdg1EfYRAklcAKCU0sGU+td7o0NNt0xabEoYhlWegQCffwWb
>lyVf/sfP9G7lKAck2tRUzV8=
>=sbBO
>-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Off topic NSS_LDAP

2006-06-23 Thread IT
Hi 
Anybody can copile NSS_LDAP under Solaris 10 ?, i have a trouble compiling 
this tool.

bash-3.00# make
gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT  -g -O2 
-Wall -fPIC -c ldap-nss.c
ldap-nss.c: In function `do_sasl_interact':
ldap-nss.c:4113: error: `sasl_interact_t' undeclared (first use in this 
function)
ldap-nss.c:4113: error: (Each undeclared identifier is reported only once
ldap-nss.c:4113: error: for each function it appears in.)
ldap-nss.c:4113: error: `interact' undeclared (first use in this function)
ldap-nss.c:4113: error: syntax error before ')' token
ldap-nss.c:4115: error: `SASL_CB_LIST_END' undeclared (first use in this 
function)
ldap-nss.c:4117: error: `SASL_CB_USER' undeclared (first use in this function)
ldap-nss.c: At top level:
ldap-nss.c:21: warning: `rcsId' defined but not used
gmake: *** [ldap-nss.o] Error 1


TIA
Jorge /Ushuaia 
Argentina





-
 Horóscopos, Salud y belleza, Chistes, Consejos de amor.
 El contenido más divertido para tu celular está en
Yahoo! Móvil
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.22 system requirements

2006-06-23 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Stephen Boyd wrote:
> I have been unable to find anything that will tell 
> me what the minimum system requirements are to
> build Samba 3.22.  What version of gcc,
> glibc, etc.  Can anyone tell me what they are?

It's pretty portable.  I think there's an open bug
about compiling on a Linux 2.2 kernel.  And SunOS 4
is not supported :-)

Any recent OS and tool chain is probably OK.





cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
"What man is a man who does not make the world better?"  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEnB8kIR7qMdg1EfYRAklcAKCU0sGU+td7o0NNt0xabEoYhlWegQCffwWb
lyVf/sfP9G7lKAck2tRUzV8=
=sbBO
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Migrated PDC to new server

2006-06-23 Thread Matt Ingram
I just migrated my SMB pdc to a new server (was running 3.0.21c, now 
3.0.22).  Some things seems to be ok. net rpc list; net rpc testjoin 
seem to work. But if I attempt to join a windows system to the domain I 
get "The following error occured while attempting to join to domain 
"DOMAINNAME": The user name could not be found".   The machine name is 
getting loaded into ldap.


LDAP seems to be fine, getent passwd/group returns all the ldap users; 
net groupmap list returns all the groups. I can shell in with ldap accounts/


I copied the old server's /etc/samba to the new server and I set the new 
servers SID to be that of the old server.


Also, I have a logon script on my BDC and my PDC.  The BDC script runs 
on the client boot up, but the PDC one isn't running.


Any ideas?

SMB.CONF
[global]
   workgroup = DOMAINNAME
   netbios name = HOME
   server string = HOME
   passdb backend = ldapsam:ldap://ldap.domain
   username map = /etc/samba/smbusers
   printcap name = cups
   enable privileges = Yes
   log level = 2
   add user script = /usr/local/sbin/smbldap-useradd -m '%u'
   delete user script = /usr/local/sbin/smbldap-userdel %u
   add group script = /usr/local/sbin/smbldap-groupadd -p '%g'
   delete group script = /usr/local/sbin/smbldap-groupdel '%g'
   add user to group script = /usr/local/sbin/smbldap-groupmod -m 
'%u' '%g'
   delete user from group script = /usr/local/sbin/smbldap-groupmod 
-x '%u' '%g'
   set primary group script = /usr/local/sbin/smbldap-usermod -g 
'%g' '%u'

   add machine script = /usr/local/sbin/smbldap-useradd -w '%u'
   logon script = scripts\logon.bat
#   logon path = \\%L\Profiles\%U
   logon path =
   logon drive = H:
   logon home = \\%L\%U
   domain logons = Yes
   os level = 65
   preferred master = Yes
   domain master = Yes
   wins server = 172.30.30.25
   ldap suffix = ou=Accounts,dc=company,dc=com
   ldap machine suffix = ou=Computers
   ldap user suffix = ou=People
   ldap group suffix = ou=Posix,ou=Groups
   ldap idmap suffix = ou=idmap
   ldap admin dn = cn=Manager,dc=company,dc=com
   ldap ssl = no
   ldap passwd sync = No
#   idmap uid = 15000-2
#   idmap gid = 15000-2
   printing = cups
   map acl inherit = Yes


here's my log.smbd when I tried to add the computer:

[2006/06/23 11:28:27, 2] smbd/sesssetup.c:setup_new_vc_session(772)
 setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.

[2006/06/23 11:28:27, 2] smbd/sesssetup.c:setup_new_vc_session(772)
 setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.

[2006/06/23 11:28:27, 2] lib/smbldap.c:smbldap_open_connection(722)
 smbldap_open_connection: connection opened
[2006/06/23 11:28:27, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640)
 init_sam_from_ldap: Entry found for user: root
[2006/06/23 11:28:27, 2] passdb/pdb_ldap.c:init_group_from_ldap(2215)
 init_group_from_ldap: Entry found for group: 512
[2006/06/23 11:28:27, 2] auth/auth.c:check_ntlm_password(307)
 check_ntlm_password:  authentication for user [Administrator] -> 
[root] -> [root] succeeded

[2006/06/23 11:28:28, 2] smbd/server.c:exit_server(614)
 Closing connections
[2006/06/23 11:28:28, 2] smbd/sesssetup.c:setup_new_vc_session(772)
 setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.

[2006/06/23 11:28:28, 2] smbd/sesssetup.c:setup_new_vc_session(772)
 setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.

[2006/06/23 11:28:28, 2] lib/smbldap.c:smbldap_open_connection(722)
 smbldap_open_connection: connection opened
[2006/06/23 11:28:28, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640)
 init_sam_from_ldap: Entry found for user: root
[2006/06/23 11:28:28, 2] passdb/pdb_ldap.c:init_group_from_ldap(2215)
 init_group_from_ldap: Entry found for group: 512
[2006/06/23 11:28:28, 2] auth/auth.c:check_ntlm_password(307)
 check_ntlm_password:  authentication for user [Administrator] -> 
[root] -> [root] succeeded

[2006/06/23 11:28:29, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2670)
 Returning domain sid for domain DOMAINNAME -> 
S-1-5-21-3186883984-1813041273-1898769360

[2006/06/23 11:28:30, 2] smbd/server.c:exit_server(614)
 Closing connections

thanks in advance.




--
Matt Ingram
Intermediate Unix Administrator, IS
Canadian Bank Note Company, Limited
\m/

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba as a time server (newby question): time not updated

2006-06-23 Thread Jonathan Johnson
On 6/21/2006 4:41 AM, Thomas Heiligenmann wrote:
> Ivan Teliatnikov schrieb:
>> On Tue, 2006-06-20 at 08:21 -0500, Adam Williams wrote:
>>> Sorry I haven't followed the thread, but if you use netlogon script,
>>> you can put in it
>>>
>>> net time \\server /set /yes
>> I do use netlogon and the line is in the script. It starts working ONLY
>> if the use who logs in has escalated (PowerUser or Admin) privileges on
>> the machine, this is not possible because we use DOMAIN authentication.
>>
>> I still cannot understand why it does not work? Do you I need to change
>> permissions on each client to allow non-admin users to change time?
> IIRC yes - you have to add 'SeSystemTimePrivilege' to the users. Under
> nt40 it's accessible under UserManager, there's also a command line
> tool named ntrights.exe, or you could try Samba's rpcclient...
Setting the system time is, by default, a right reserved to members of
the local Administrators and Power Users groups on the local machine.
(Note that Domain Admins is a member of the local Administrators group.)

This can be changed in group policy under Windows 2000/XP. In the group
policy editor, look under "Local Computer Policy\Computer
Configuration\Windows Settings\Security Settings\Local Policies\User
Rights Assignment". The policy name is "Change the system time".

This right can be assigned by domain group policy (though I'm not sure
how to globally apply group policy in a Samba domain). It can also be
assigned on Windows NT systems, but at the moment I can't recall how.

As far as the Windows Time service that is included with Windows 2000
and later goes, be aware that it synchronizes to an Internet-based time
server only once a week. In a Windows 2000 (or later) domain, the
Windows Time service synchronizes with the domain controller. For a
discussion of the Windows Time service, please see this Microsoft link:
http://technet2.microsoft.com/WindowsServer/en/Library/a0fcd250-e5f7-41b3-b0e8-240f8236e2101033.mspx

(Note: this link discusses Windows Server 2003, but I believe it mostly
applies to XP and 2000 systems as well.)

I have found that synchronizing once a week is sometimes not often
enough -- a computer's clock can drift considerably in that time (I have
seen anywhere from 1/2 sec per day to several seconds per day). For some
applications, especially where the systems are in a regulated
environment such as securities trading, this is far too much drift to be
acceptable. A very useful utility I have found to improve this is Tom
Horsley's NTPTime, which is an NTP client. You can download it here:
http://home.att.net/~Tom.Horsley/ntptime.html

As others have suggested, on your Samba server, be sure to run an NTP
server. Configuring it can be daunting, so don't give up too easily.
Once configured, it will keep the clock on your Samba server very
accurate. Then configure your workstations and other servers to
synchronize against the Samba server (instead of an Internet server, to
keep the load on those servers down).

-Jon Johnson
Sutinen Consulting, Inc.
www.sutinen.com

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Connecting to Netware 6.5

2006-06-23 Thread Craig Jackson
Hi,

We have a Netware 6.5 server with Windows native protocols installed. I try to 
connect like this from Linux/Ubuntu...

[EMAIL PROTECTED]:~/bin# mount -t smbfs -o username=craig.users.new.askk 
//NO-1/VOL1 /no-1_vol1/
15048: session request to NO-1 failed (Called name not present)
Password:
15048: session setup failed: ERRSRV - ERRerror (Non-specific error code.)
SMB connection failed

More info:

[EMAIL PROTECTED]:~/bin# smbclient -L 192.168.1.25
session request to 192.168.190.25 failed (Called name not present)
session request to 192 failed (Called name not present)
Password:
Anonymous login successful
Domain=[WORKGROUP] OS=[NetWare 6.5] Server=[NetWare 6.5]

Sharename   Type  Comment
-     ---
_ADMIN  Disk  NSS File System
SYS Disk  NSS File System
VOL1Disk  NSS File System
VOL2Disk  NSS File System
IPC$IPC   Remote IPC
session request to 192.168.1.25 failed (Called name not present)
session request to 192 failed (Called name not present)
Anonymous login successful
Domain=[WORKGROUP] OS=[NetWare 6.5] Server=[NetWare 6.5]

Server   Comment
----

WorkgroupMaster
----



I do not know Netware, but I have admin rights. Imanage is not running but 
there is Freecon and Consoleone. 
Can anyone help troubleshoot?

Thanks,
Craig Jackson
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.22 system requirements

2006-06-23 Thread Stephen Boyd
I have been unable to find anything that will tell me what the minimum
system requirements are to build Samba 3.22.  What version of gcc,
glibc, etc.  Can anyone tell me what they are?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Rename computer in a domain

2006-06-23 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Marco D'Ettorre wrote:

> I think that I should run an external script to create 
> the LDAP entry before Samba can do the operation. But how
> can I do this? The script in "add machine script"
> smb.conf key is not executed during this operation,
> only joining a new machine.
> 
> Samba version is 3.0.10, on a linux centos4 box. Can 
> anybody help me?

See the 'rename user script' in the 3.0.23 release candidates.





cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
"What man is a man who does not make the world better?"  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEm+jAIR7qMdg1EfYRAnnZAKCGxiTf4Q9naeGScKlB6lKPGRuUagCfaWdx
nhoTPIL+MFsDAT6q+yNEI5I=
=ERe6
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] linux_set_kernel_oplock: Refused oplock on file. F_SETLEASE semantic problem ?

2006-06-23 Thread Cedric Delfosse

James Kosin a écrit :



From: Cedric Delfosse [mailto:[EMAIL PROTECTED]
Sent: Fri 6/23/2006 03:05 AM
To: James Kosin

Hello,

The SAMBA-VSCAN module I use has been compiled against the installed
SAMBA version. AFAIR SAMBA doesn't load a VFS module that has a
mismatched version.


 
Ok, what kernel version?   'uname -r'

samba version?  'smbd -V'


# uname -r
2.4.27-2-686-smp
# smbd -V
Version 3.0.21c-Debian

Basically, the system is a Debian Sarge, with a backport of Samba 3.0.21c.

Regards,

--
Cédric Delfosse Linbox / Free&ALter Soft
152, rue de Grigy - Technopole Metz   57070 METZ
tél : 03 87 50 87 98   http://linbox.com
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.22: share be r/w for LDAP-authenticated users, r/o for anonymous

2006-06-23 Thread Ralf G. R. Bergs
Hi there,

we need to implement the following scenario:

- Samba server 3.0.22 (NOT acting as a domain controller; we don't use
Windows networking domains)
- users use Linux and Windoze
- anonymous users accessing a certain share should be granted read-only
access
- successfully authenticated users should be given read-write access
- authentication should be performed against an LDAP that contains
entries like this:

dn: cn=rb,dc=intra,dc=ourdom,dc=de
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: jabberuser
jid: [EMAIL PROTECTED]
o: ourcompany
cn: rb
sn: Bergs
givenName: Ralf
telephoneNumber: +49xxx
mobile: +49
userPassword: secret
roomNumber: 4711

The "userPassword" key contains the password that is to be checked, the
"cn" key the username for the respective user.

Can this be accomplished? Is there anyone who would like to share some
config snippets with me?

I did some search on Google and found something pertaining to Samba 2.x,
but this doesn't work anymore since LDAP support seems to have changed
much since then.

Thanks for any help you can give.

Cheers,

Ralf
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] linux_set_kernel_oplock: Refused oplock on file. F_SETLEASE semantic problem ?

2006-06-23 Thread James Kosin


From: Cedric Delfosse [mailto:[EMAIL PROTECTED]
Sent: Fri 6/23/2006 03:05 AM
To: James Kosin

Hello,

The SAMBA-VSCAN module I use has been compiled against the installed
SAMBA version. AFAIR SAMBA doesn't load a VFS module that has a
mismatched version.


 
Ok, what kernel version?   'uname -r'
samba version?  'smbd -V'
 
--James
 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Getting a list of users in a group - how?

2006-06-23 Thread Tobias Bluhm
My crude hack at a solution, but it works for me so here goes . . . . .

#!/bin/sh
# /usr/local/bin/get_grp_mem 
#
#  is derived from:
#
# wbinfo -n 
#
# S-1-2-33-44-5-6-X User (1)
#
#  = S-1-2-33-44-5-6
#
grpid=`wbinfo -n $1 | sed 's/-//' | sed 's/ Domain..*//'`
for i in `rpcclient -W  -U % -c 
"querygroupmem  \ 
$grpid"  | tr -s '\t' ' ' | sed 's/^ rid:\[0x//g' | sed 
's/\] attr:\[0x7\]//g'`
do
wbinfo -s -`echo ${i} | /usr/local/bin/hex2ascii`
done
#end-of-script


#!/usr/bin/perl -w
# /usr/local/bin/hex2ascii
#
use Term::ANSIColor;
$con=hex("$ans");
print "$con\n";
#end-of-script


-
toby bluhm
philips medical systems, cleveland ohio
[EMAIL PROTECTED]
440-483-5323


> Hi all,
> 
> Hopefully this is a simple one - I'm trying to work out how to get a
> list of users in a certain group.  If I have the following set up in
> Active Directory:
> 
>   Group1
>- UserA
>- UserB
> 
>   Group2
>- UserC
>- UserD
> 
>   AllGroups
>- Group1
>- Group2
>- UserX
> 
> Then I want to be able to say "List all users in the AllGroups group"
> and I should get UserA,B,C,D and UserX returned.
> 
> I'm not sure how to go about this - wbinfo only seems able to return
> the groups a single user is a member of, and 'getent group' only
> returns people specifically in that group (i.e. "getent group
> AllGroups" only returns UserX, it ignores the nested groups, even
> if "winbind nested groups = yes" in smb.conf.)
> 
> Any ideas how to list *all* the users in a specific group?
> 
> Thanks,
> Adam.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Rename computer in a domain

2006-06-23 Thread Marco D'Ettorre

Hello,
   when I try to rename a win200x/XP client joined in a Samba domain, I 
get an error (Access is denied), although the user I put in the dialog 
box has privilege to do it.
In LDAP log I see that Samba does first a search with the old machine 
name, after it does a search with new machine name, but the entry does 
not exists on LDAP then it stops with an error.
I then tried to clone the old entry with a new one, changing uid and the 
other attributes. It works. Looking at LDAP logs, I see that Samba 
modifies only one attribute in the new entry (displayname).


I think that I should run an external script to create the LDAP entry 
before Samba can do the operation. But how can I do this?
The script in "add machine script" smb.conf key is not executed during 
this operation, only joining a new machine.


Samba version is 3.0.10, on a linux centos4 box.
Can anybody help me?

Thanks a lot



Ing. Marco D’Ettorre
Consultant 


SysNet s.n.c.
Via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it

Office:   +39.0382.573859 (102)
Mobile:   +39.348.1510674
Email:[EMAIL PROTECTED]


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Usrmgr and add scripts

2006-06-23 Thread TSZ

Hello,

I would like to know will Samba work with usrmgr? And the second 
question: what are "add machine script", "add group script",... for? 
Thank you for your answer.


--
Pozdrawiam

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Active Directory Primary group dont' show users

2006-06-23 Thread Ashish Tyagi
Hi all
 I have configured samba 3.0.11 in a windows 2003 domain
as a domain member (security=ads).issue is, when i issue command
getent group |grep domain users  it shows
DOMAIN+domain users:x:1004:
it don't shows any user in this group while this group contains all
the users in domain.it is primary group of all the users.
if i set primary group of a user to something else then it shows user
in 'domain user' group.

Thanks
Ashish


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba ADS member: using local groups

2006-06-23 Thread Damir Dezeljin

Hi.

I have problems using local groups on a SAMBA ADS member. I encountered 
the problem when I switched from Fedora Core 4 to Fedora Core 5.


I'm using the FC5 samba-3.0.22-1.fc5 package.

The SELinux is set to permissive mode (SELINUX=permissive), so this should 
not cause problems.



I'm using same scripts for generating group mapping and add users to 
groups, as I used on FC4.



The problem is I can not access to a newly created share. I'm getting 
access denied.



Details:

smb.conf:
  workgroup = MYAD
  realm = MYAD.SI
  security = ads
  netbios name = SRV
  use kerberos keytab = True

  local master = no
  domain master = no
  preferred master = no
  domain logons = no

  winbind cache time = 150
  template shell = /bin/false
  template homedir = /dev/null
  idmap uid = 16777216-33554431
  idmap gid = 16777216-33554431

  enable privileges = no
  allow trusted domains = yes
  winbind trusted domains only = no
  winbind use default domain = no
  acl group control = no
  winbind enum groups = yes
  winbind enum users = yes
  winbind nested groups = yes

[testg]
  path = /tmp/testg
  browsable = yes

# net groupmap list | grep testg
testg (S-1-5-21-36326577-213813108-2479972072-35181) -> testg

# net rpc group members testg -U MYAD\\damird%pass
MYAD\damird

# grep testg /etc/group
testg:x:17090:MYAD\damird

# getent group testg
testg:x:17090:MYAD\damird

# getent group SRV\\testg
testg:*:16777937:MYAD\damird

# chown root:testg /tmp/testg
# chmod 770 /tmp/testg
# ls -ald /tmp/testg
drwxrwx--- 17 root testg 4096 Jun 23 11:26 /tmp/testg

# sudo -u MYAD\\damird ls -al /tmp/testg
total 16
drwxrwx--- 2 root testg 4096 Jun 23 11:43 .
drwxrwxrwt 8 root root  4096 Jun 23 11:39 ..

# cat /var/log/samba/10.10.10.100.log
[2006/06/23 11:44:25, 1] smbd/service.c:make_connection_snum(693)
  10.10.10.100 (10.10.10.100) connect to service testg initially as user 
MYAD\damird (uid=16777217, gid=16777217) (pid 6509)

[2006/06/23 11:44:25, 0] smbd/service.c:set_current_service(49)
  chdir (/tmp/testg) failed
[2006/06/23 11:44:25, 0] smbd/service.c:set_current_service(49)
  chdir (/tmp/testg) failed
[2006/06/23 11:44:26, 0] smbd/service.c:set_current_service(49)
  chdir (/tmp/testg) failed



Any hint will be appreciated :)

Thanks and best regards,
Dezo
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Getting a list of users in a group - how?

2006-06-23 Thread Volker Lendecke
On Fri, Jun 23, 2006 at 04:01:52PM +1000, Adam Nielsen wrote:
> Any ideas how to list *all* the users in a specific group?

This is not available via winbind yet. It is also low
priority for us, because doing this correctly is really a
huge mess and not reliably doable anyway. The latter is not
our fault, this is what Windows dictates upon us.

Volker


pgptprk9czkpp.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] linux_set_kernel_oplock: Refused oplock on file. F_SETLEASE semantic problem ?

2006-06-23 Thread Cedric Delfosse

James Kosin a écrit :

Jeremy Allison wrote:
 - there is only one application (a CAO drawing tool) for which only 
some files causes a violation error, even with kernel oplocks = No. 
Looks like there was an interaction with the SAMBA-VSCAN module (version 
0.3.6b) somewhere, as disabling this module removed the violation error.

Interesting. If that the latest version of vscan ?

Jeremy.


It is the latest, although 0.4.0 has been released as a snapshot.  I
think maybe his problem is he may be using an older compiled version of
SAMBA-VSCAN that has not been compiled for the new version of SAMBA
installed.
I do know the source for vscan requires integration with the correct
version of samba; otherwise, unpredictable results happen.


Hello,

The SAMBA-VSCAN module I use has been compiled against the installed 
SAMBA version. AFAIR SAMBA doesn't load a VFS module that has a 
mismatched version.


--
Cédric Delfosse Linbox / Free&ALter Soft
152, rue de Grigy - Technopole Metz   57070 METZ
tél : 03 87 50 87 98   http://linbox.com
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba