[Samba] Windows XP refresh Problem

2006-11-28 Thread David Schulz

Hello all,

i installed Samba 3 on a FreeBSD 6.1 Machine. Windows XP Users are  
connecting to it. The Problem is that when the XP Users are creating  
or deleting a File or Folder on the Samba Share, the thing doesn't  
appear (or disappear) immediately. The User first has to refresh the  
Window for the Folder Listing to update. Someone suggested to me this  
fix : http://support.microsoft.com/kb/823291 , which i tried, but it  
doesn't resolve the Problem. Is there anything i can do to fix this  
Issue please?


Thanks for any Information,
David

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba and Heimdal Kerberos V Authentication

2006-11-28 Thread Matt Proud

Hello,

I maintain a network of numerous Linux workstations, several Apples,
and a few Windows machines. The Apples and Windows XP machines already
grab shared data via Samba and the remaining data is exported to the
Linux machines via NFS.

I am in the process of migrating the existing authentication system
from XYZ123 to Kerberos and going to place user data---with the
exception of passwords into OpenLDAP.

I am curious whether it is possible to have Samba authenticate against
Kerberos as a password backend, particularly with the Heimdal
implementation. I really am not much of a Windows guru and try to
avoid the OS as much as possible; but I have gathered that from 2000
onwards it has supported Kerberos V for authentication. Would this
mean that the winbind backend could be used to talk to the Kerberos
server?

I really want to avoid having to write any custom scripts or wrappers
to synchronize passwords between Samba and Kerberos.

What are everybody's thoughts?

Thank you,

Matt
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem with Samba 3.0.23c-d

2006-11-28 Thread Nerijus Baliunas
On Mon, 27 Nov 2006 18:58:30 -0800 Jeremy Allison <[EMAIL PROTECTED]> wrote:

> > I think it's the same bug - 
> > https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=208253
> > Does anyone know if it is fixed in 3.0.23d? Or did OP test 3.0.23d (as
> > there is no -d packages in Fedora)?
> 
> This is a bug in the Fedora NISplus nss module - I think
> it needs to be fixed there.

Thanks, I updated the bug report. BTW, workaround is to use 'write list = 
+users'
instead of 'write list = @users' in smb.conf.

Regards,
Nerijus
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Shadow Copy Client blank, with error in logs

2006-11-28 Thread James A. Dinkel
Well, it looks like this only fixed it for admin users.  The Previous
Versions is still showing up blank for regular valid users.  I'll look
more into it, and try to get a debug 10 log tomorrow.

James Dinkel

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Windows XP share charset problem

2006-11-28 Thread Guenter Kukkukk
Am Dienstag, 28. November 2006 19:29 schrieb Arlequín:
> Hello, there
>
>
> I want to connect to a Windows XP share using the following line in my
> fstab
>
> \\WINDOWS-PC\SHARE /dir/to/mount/share smbfs
> auto,umask=0002,credentials=/etc/winpassword,iocharset=utf8,gid=0,noauto 0
> 0
>
> It mounts OK but I can't get the charset shown correctly for non-ASCII
> chars like á ç ñ et cetera.
>
> I've even tried using cpage=850 option when mounting without success.
> I've looked for this issue on Samba documentation but wasn't able to
> find an example on how to solve it.
>
> Does anyone have any idea about how to deal with this kinda shares?
>
> T.I.A.
> --
> Arlequín _o)
> amahoro_AT_adinet_DOT_com_DOT_uy / \\
> http://counter.li.org/ _(___V
> Linux Registered User  #207262

This issue has often been discussed - but you won't get a fix for it.
smbfs is no longer maintained - use cifs instead, which is the
successor of smbfs. (man mount.cifs)
Please note, that the mount.cifs helper stuff is part of the
samba suite, cifs itself is a kernel module!

Cheers, Guenter

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Disconnected network drive

2006-11-28 Thread Paul Abrahams
I have a couple of Linux directories that are being exported via Samba running 
under SuSE 10.0.  On the Windows side, each of them is assigned a (mapped) 
drive letter.  In the "My Computer" list they initially show up as 
"Disconnected Network Drive".  If I attempt to access a file within one of 
them, the access fails with an indication that the drive does not exist.  
(For example, if the drive letter is H:, doing "H:" from a C> prompt gives 
that message.)   However, if in Windows I click on the drive, I get to see 
its contents and the status changes to "Network Drive".  At that point the 
drive contents become available to my Windows applications.

I get this behavior on three different machines, all running Windows XP.  In 
the Windows drive mapping, I've checked the "Reconnect at Logon" box, but 
that makes no difference.

I'm guessing that the problem is on the Linux side since each Windows machine 
can access exported directories from other Windows machines without any 
difficulty.  It's only the drives exported from Linux that have the problem.

I can of course work around the problem by opening up My Computer when I start 
the Windows machine and clicking on the drive in question, but that should 
not be necessary.

Is this a known problem?  Is there a workaround or a fix?

Paul
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Fwd: Prayer "For Fiji Ever Fiji"

2006-11-28 Thread shear khan

-- Forwarded message --
From: ravesi konrote <[EMAIL PROTECTED]>
Date: Nov 29, 2006 9:35 AM
Subject: Prayer "For Fiji Ever Fiji"
To: [EMAIL PROTECTED], Cecilia Frost <[EMAIL PROTECTED]>, Mana
Island Personal Assistant <[EMAIL PROTECTED]>, [EMAIL PROTECTED], Mana
Wedding <[EMAIL PROTECTED]>, reservationsmana <[EMAIL PROTECTED]>, Mere <
[EMAIL PROTECTED]>, Mana - Mere Raoma <[EMAIL PROTECTED]>,
[EMAIL PROTECTED], TuVili Vakaliwaliwa <[EMAIL PROTECTED]>,
Melaia Vakawale Rauga <[EMAIL PROTECTED]>, [EMAIL PROTECTED], Makereta
Soroverata <[EMAIL PROTECTED]>, [EMAIL PROTECTED], [EMAIL PROTECTED]


*Hey I wanted to share this prayer with you .*





*Lord, My Nation is on the verge of strife,*

*They all argue about true leadership,*

*They all speak and none listens,*

*Words passed in anger,*

*Words passed in hate,*

*But Lord your word alone,*

*They don't seem to take,*

*The Commander on the one hand,*

*The Commissioner on the other,*

*And smack dab in the middle,*

*The government seems to play the fiddle,*

*With each passing day,*

*My country grows tense,*

*Wondering where it will all end,*

*So Lord today I pray for a miracle,*

*The miracle of your choosing,*

*The miracle that best fits,*

*The problem that your Fiji faces..*

*In the powerful name of Jesus Christ……Amen*

* *

*Please lets all pray today for a miracle………The God that made the blind man
see continues to work today.*

* *

*Pls forward this mail to all your friends, families, colleagues, etc, etc,
etc and help our beloved nation survive this impasse!   The Almighty Lord do
work wonders!!This will only take a few seconds people!  Every second
counts in this world especially in our Beloved Fiji at the moment!*

* *

*Lets all put our hands together and help show the world that "Fiji is still
the way the World should be"*

* *






--
Sheraiz Ahmad
IT Administrator
P:9997547
Skype: mana.shear
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] PPP + ntlm_auth

2006-11-28 Thread Sebastien

Hello,

I'm trying to authenticate PPP (in fact l2tp...) users with Active 
Directory (windows server 2003 DCs, mixed-mode domain) using winbind / 
ntlm_auth.  I'm using Samba 3.0.22, PPP 2.4.3, Kerberos 1.3.6, with 
Trustix 2.2


What works :
- krb5kinit (and krb5klist -e)
- net ads join
- wbinfo -u, wbinfo -g, wbinfo -a user%pwd, wbinfo -p, wbinfo -t and 
wbinfo -m

- getent passwd and getent group
- ntlm_auth --username=user --domain=domain.x.y
- ntlm_auth --username=user --domain=domain.x.y --request-lm-key
- ntlm_auth --username=user --domain=domain.x.y --request-nt-key
- authentication through ppp (mschap-v2 with chap-secrets)

What is not working :
- ntlm_auth --username=user --domain=domain.x.y --diagnostics (and every 
 other variation...)

- authentication through ppp (mschap-v2 with winbind plugin)

I verified the paths to ntlm_auth in the options.l2tpd file, and it's 
ok.  In the logs, it only says that the host failed CHAP authentication.

The error code for ntlm_auth is 6A (wrong password)

Anyone has an idea?
Thanks in advance!

Sebastien


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Shadow Copy Client blank, with error in logs

2006-11-28 Thread James A. Dinkel
Is this a bug?!

Ok, upon further investigation, I've discovered that the Previous
Versions does not work when access the share through a "nested" drive
mapping.  By "nested" I mean we have the H: drive in Windows mapped to
\\SambaServer\share\DepartmentFolder.  If I create a drive mapping, say
X: drive to \\SambaServer\share, then the Previous Version show up when
going through the X: drive (or the UNC path) but NOT when going through
the H: drive.

However, I have found a fix for this (I'll get to it in a little bit),
but it's sloppy.  This is a big problem for us, because all our users
have the H: drive mapped to a folder below the share based on what
department they are in.

So the fix is:  I created a symlink under the nested folder
("DepartmentFolder" in this case) that pointed to the same folder in the
snapshot.  I gave the symlink the "@GMT-" name that the shadow_copy
module requires, and of course created script that destroys and creates
this link along with the snapshots.

I don't know if this is an issue with the Previous Versions client, but
I would think the shadow_copy module could be patched so that it knows
to look back at the root of the file share for the snapshot.

James Dinkel

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Shadow Copy Client blank, with error in logs

2006-11-28 Thread Jeremy Allison
On Tue, Nov 28, 2006 at 12:19:15PM -0600, James A. Dinkel wrote:
> One computer will show the previous versions of files just fine, but
> every other computer I've installed the Microsoft Shadow Copy Client on
> will not show any previous versions.  The Previous Versions tab is just
> blank.  In the samba log, I get this:
> 
>  
> 
> [2006/11/28 12:02:02, 0]
> modules/vfs_shadow_copy.c:shadow_copy_opendir(81)
> 
>   shadow_copy_opendir: SMB_VFS_NEXT_OPENDIR() failed for
> [Folder/file.txt]
> 
>  
> 
>  
> 
> This is logging in as the same user on each machine.

Can you send in a debug level 10 please ?

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Windows security policy

2006-11-28 Thread admin-listas
Matheus Morais escribió:
> Hello everybody!!
>
> I have a big network here with many machines with different operating
> systems (Linux, Windows 9x/2000/XP and FreeBSD). Currently all of them
> are
> authenticated by a Debian GNU/Linux server running SAMBA with LDAP. It
> works
> perfectly but I have some problems to block some features from Windows
> users.
>
> I'm looking for some tool to control the user rights around his own
> station
> from the server. Acctually I'm using POLEDIT (wich generates two policy
> files named CONFIG.POL NTCONFIG.POL) to do that job but Its a very
> limited
> tool and to be honest its giving me more problems than solutions.
>
> For that specific reason I'm searching for someone who already faced that
> kind of necessity and obtained success to supply it.
> Any tip is very welcomed!
>
>
> Thanks,
>
> Matheus Morais
http://wpkg.org/???

http://ocsinventory.sourceforge.net/   ???
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Shadow Copy Client blank, with error in logs

2006-11-28 Thread Michael Waterman
There's a module for vss on Linux 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
James A. Dinkel
Sent: Tuesday, November 28, 2006 7:19 PM
To: samba@lists.samba.org
Subject: [Samba] Shadow Copy Client blank, with error in logs

One computer will show the previous versions of files just fine, but every
other computer I've installed the Microsoft Shadow Copy Client on will not
show any previous versions.  The Previous Versions tab is just blank.  In
the samba log, I get this:

 

[2006/11/28 12:02:02, 0]
modules/vfs_shadow_copy.c:shadow_copy_opendir(81)

  shadow_copy_opendir: SMB_VFS_NEXT_OPENDIR() failed for [Folder/file.txt]

 

 

This is logging in as the same user on each machine.

 

 

James Dinkel

Network Engineer

Butler County of Kansas

 

There are 10 types of people in the world:  those who understand binary, and
those who don't.

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] suggestion: hide Unix UGO permissions when mode is 0

2006-11-28 Thread James A. Dinkel
I had been thinking this would be a good idea, but figured if it could
be easily done, then it would be done already.  Then I came across this
article:

http://www.suse.de/~agruen/acl/linux-acls/online/

which has this to say:

 

---

The mapping between POSIX and Windows ACLs described here is found in
this form in the SuSE and the UnitedLinux products, while the official
version of Samba has not yet integrated all the improvements recently
made:

[snip] 

*   Minimal POSIX ACLs consist of three ACL entries defining the
permissions for the owner, owning group, and others. These entries are
required. Windows ACLs may contain any number of entries including zero.
If one of the POSIX ACL entries contains no permissions and omitting the
entry does not result in a loss of information, the entry is hidden from
Windows clients. If a Windows client sets an ACL in which required
entries are missing, the permissions of that entry are cleared in the
corresponding POSIX ACL.

--

 

So if it has already been done in Suse, why hasn't this been implemented
upstream?  This article is 3 years old and this seems like a good idea
to me.

 

James Dinkel

Network Engineer

Butler County of Kansas

 

There are 10 types of people in the world:  those who understand binary,
and those who don't.

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] what OS do you use for Samba?

2006-11-28 Thread James A. Dinkel
Oh I wish I would have known that.  I've already got the Ubuntu server
set up and moved one department over to it.  I'm planning on upgrading
to Etch when it comes out anyway, so I think I'll stick to that plan and
use this repo at that point.

James Dinkel

-Original Message-
From: James Zuelow [mailto:[EMAIL PROTECTED] 

Oh, I've been busy and don't usually get into the OS discussions.

But you don't have to use backports for Samba on Debian Sarge.  I'm not
sure why anyone would even do that, since the Samba team maintain their
own Sarge apt repository.  If you still have a Sarge box to test, add
this to your /etc/apt/sources.list

deb http://us5.samba.org/samba/ftp/Binary_Packages/Debian sarge samba

And you'll track the latest stable release.

I have a production Debian Sarge server that does just this.  

Just don't do it with Etch, since in a few days time you'll get the same
package from Debian that you got from Samba, except that the Debian
packages have a few files moved from samba to samba-common.  That
confuses apt.  So with Etch I'd recommend staying plain vanilla Debian
in sources.list until it goes stable and the version number freezes.
Then you can move to using the Samba team repository.

Ubuntu is cool too, especially the LTS version -- you probably won't go
wrong either way.

James ZuelowCBJ MIS (907)586-0236
Network Specialist...Registered Linux User No. 186591

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Install Dependencies - ADS Security Mode

2006-11-28 Thread Henrik Zagerholm

Here ya go
apt-get install libldap2-dev libkrb5-dev acl libacl1-dev
Cheers
henrik
26 nov 2006 kl. 01:29 skrev Michael Casale:


Hi All,



I’m doing a test install on a barebones Debian 3.1 installation. It  
will be configured to join a test Active Directory domain, Windows  
2003 native mode, usind Security=ADS mode.




Can you folks list for me the basic dependencies I need to install?  
I’ll be compiling from source, and would like to install all  
dependencies from source as well – no use of apt-get please….




I’m sure I need openldap, Kerberos (I like the MIT Variety), some  
version of pam libraries, and Samba. Anything else?




Thanks!



Michael Casale

Systems Administrator

Knoa Software

212-807-9608

[EMAIL PROTECTED]




--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.409 / Virus Database: 268.14.13/546 - Release Date:  
11/22/2006


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Shadow Copy Client blank, with error in logs

2006-11-28 Thread James A. Dinkel
One computer will show the previous versions of files just fine, but
every other computer I've installed the Microsoft Shadow Copy Client on
will not show any previous versions.  The Previous Versions tab is just
blank.  In the samba log, I get this:

 

[2006/11/28 12:02:02, 0]
modules/vfs_shadow_copy.c:shadow_copy_opendir(81)

  shadow_copy_opendir: SMB_VFS_NEXT_OPENDIR() failed for
[Folder/file.txt]

 

 

This is logging in as the same user on each machine.

 

 

James Dinkel

Network Engineer

Butler County of Kansas

 

There are 10 types of people in the world:  those who understand binary,
and those who don't.

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Windows security policy

2006-11-28 Thread Matheus Morais

Hello everybody!!

I have a big network here with many machines with different operating
systems (Linux, Windows 9x/2000/XP and FreeBSD). Currently all of them are
authenticated by a Debian GNU/Linux server running SAMBA with LDAP. It works
perfectly but I have some problems to block some features from Windows
users.

I'm looking for some tool to control the user rights around his own station
from the server. Acctually I'm using POLEDIT (wich generates two policy
files named CONFIG.POL NTCONFIG.POL) to do that job but Its a very limited
tool and to be honest its giving me more problems than solutions.

For that specific reason I'm searching for someone who already faced that
kind of necessity and obtained success to supply it.
Any tip is very welcomed!


Thanks,

Matheus Morais
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Windows XP share charset problem

2006-11-28 Thread Arlequín

Hello, there


I want to connect to a Windows XP share using the following line in my fstab

\\WINDOWS-PC\SHARE /dir/to/mount/share smbfs
auto,umask=0002,credentials=/etc/winpassword,iocharset=utf8,gid=0,noauto 0 0

It mounts OK but I can't get the charset shown correctly for non-ASCII
chars like á ç ñ et cetera.

I've even tried using cpage=850 option when mounting without success.
I've looked for this issue on Samba documentation but wasn't able to
find an example on how to solve it.

Does anyone have any idea about how to deal with this kinda shares?

T.I.A.
--
Arlequín _o)
amahoro_AT_adinet_DOT_com_DOT_uy / \\
http://counter.li.org/ _(___V
Linux Registered User  #207262
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Ntlm_auth Problem (resend)

2006-11-28 Thread Drew Daugherty

I sent this message and realized I hadn't included info on the
environment so I am resending it.  I am running red hat enterprise
linux 4 with samba version 3.0.10-1.4E.2.  Apache version is 2.0.52.
I also included output from running ntlm_auth on the command line with
diagnostics.  This fails but it only seems to try plaintext auth which
will not work (see below).

I am having problems with mod_auth_ntlm_winbind. The httpd error_log
shows an NT_STATUS_INVALID_PARAMETER error when I try to log in from
browsers (firefox, ie). Winbind seems to be functioning properly as I
can start smb and log in via smbclient. wbinfo and getent work well
also.  Use NTLMv2 only switch is set on the Windows 2003 domain server.
What am I doing wrong?

-drew

== ntlm_auth ==
ntlm_auth --username  --diagnostics --request-nt-key
password:
Wrong Password (0xc06a)
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:diagnose_ntlm_auth(594)
 Test LM failed!
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_lm_ntlm_broken(117)
 LM Key does not match expectations!
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_lm_ntlm_broken(118)
 lm_key:
[2006/11/28 10:52:09, 1] lib/util.c:dump_data(1999)
 [000] 00 00 00 00 00 00 00 00   
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_lm_ntlm_broken(120)
 expected:
[2006/11/28 10:52:09, 1] lib/util.c:dump_data(1999)
 [000] A4 4D 0C 79 81 C2 0D 7F   .M.y
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:diagnose_ntlm_auth(594)
 Test LM and NTLM failed!
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_lm_ntlm_broken(117)
 LM Key does not match expectations!
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_lm_ntlm_broken(118)
 lm_key:
[2006/11/28 10:52:09, 1] lib/util.c:dump_data(1999)
 [000] 00 00 00 00 00 00 00 00   
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_lm_ntlm_broken(120)
 expected:
[2006/11/28 10:52:09, 1] lib/util.c:dump_data(1999)
 [000] A4 4D 0C 79 81 C2 0D 7F   .M.y
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:diagnose_ntlm_auth(594)
 Test NTLM failed!
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_ntlm_in_lm(216)
 LM Key does not match expectations!
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_ntlm_in_lm(217)
 lm_key:
[2006/11/28 10:52:09, 1] lib/util.c:dump_data(1999)
 [000] 5F F4 27 8C 39 2C 77 68   _.'.9,wh
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_ntlm_in_lm(219)
 expected:
[2006/11/28 10:52:09, 1] lib/util.c:dump_data(1999)
 [000] A4 4D 0C 79 81 C2 0D 7F   .M.y
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_ntlm_in_lm(224)
 Session Key (first 8 lm hash) does not match expectations!
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_ntlm_in_lm(225)
 user_session_key:
[2006/11/28 10:52:09, 1] lib/util.c:dump_data(1999)
 [000] AA D3 B4 35 B5 14 04 EE  00 00 00 00 00 00 00 00  ...5 
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_ntlm_in_lm(227)
 expected:
[2006/11/28 10:52:09, 1] lib/util.c:dump_data(1999)
 [000] A4 4D 0C 79 81 C2 0D 7F   .M.y
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:diagnose_ntlm_auth(594)
 Test NTLM in LM failed!
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_ntlm_in_both(287)
 LM Key does not match expectations!
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_ntlm_in_both(288)
 lm_key:
[2006/11/28 10:52:09, 1] lib/util.c:dump_data(1999)
 [000] 00 00 00 00 00 00 00 00   
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_ntlm_in_both(290)
 expected:
[2006/11/28 10:52:09, 1] lib/util.c:dump_data(1999)
 [000] A4 4D 0C 79 81 C2 0D 7F   .M.y
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:diagnose_ntlm_auth(594)
 Test NTLM in both failed!
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_lm_ntlm_broken(117)
 LM Key does not match expectations!
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_lm_ntlm_broken(118)
 lm_key:
[2006/11/28 10:52:09, 1] lib/util.c:dump_data(1999)
 [000] 00 00 00 00 00 00 00 00   
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:test_lm_ntlm_broken(120)
 expected:
[2006/11/28 10:52:09, 1] lib/util.c:dump_data(1999)
 [000] A4 4D 0C 79 81 C2 0D 7F   .M.y
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:diagnose_ntlm_auth(594)
 Test NTLM and LM, LM broken failed!
Wrong Password (0xc06a)
Wrong Password (0xc06a)
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:diagnose_ntlm_auth(594)
 Test Plaintext failed!
Wrong Password (0xc06a)
[2006/11/28 10:52:09, 1] utils/ntlm_auth_diagnostics.c:diagnose_ntlm_auth(594)
 Test Plaintext LM broken failed!
Wrong Pa

RE: [Samba] what OS do you use for Samba?

2006-11-28 Thread Gautier, B \(Bob\)

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED]
> ] On Behalf Of [EMAIL PROTECTED]
> Sent: 28 November 2006 16:31
> To: samba@lists.samba.org
> Subject: RE: [Samba] what OS do you use for Samba?
> 
> I am currently running samba 3.0.10-1.4E.9 on RHEL 4 and 
> having problems with trusted AD domains using Kerberos 
> authentication. Should I upgrade to 3.0.23c? It seems like 
> many have had issues with the latest samba release so I have 
> been hesitant to upgrade, though cannot figure out why samba 
> cannot pull client credentials from the other trusted domain. 
> Any advice/suggestions would be greatly appreciated. Thanks. 

Well, as far as I could see, without a fix to BZ3661 the ability to pull
client credentials from trusted domains is just plain absent, not just
buggy
or unreliable: winbindd can't do it because the code simply isn't there.

So, IMHO you need to upgrade or at least port the patch, if you want to
use
the idmap_ad backend.

3.0.10 is very old anyway.

Bob G

> Rhiannon
> 
> 
> We use Samba (winbind) for authentication against multiple AD domains.
> We are
> currently using 3.0.23c with a patch to make the trusted 
> domains work (see BZ3661).
> 
> This is running on RHEL4 and in the past it's been tested on 
> Solaris too.
> 
> Bob G
> 
> > 
> > > Yeah, I thought about going with Ubuntu 6.06 (I'd stick
> > with that for
> > > the LTS), but it's so new.  I would feel better going with
> > something
> > > with a longer, proven track record.  However, it is nice
> > being able to
> > > install and set up Ubuntu for free but then have 
> Canonical there in 
> > > case I have an issue I just can't figure out on my own.
> > >
> > >
> > >   
> > I've been using it as our primary file server for about 3 or
> > 4 months now. Other than the famed archive bit problem, 
> there really 
> > hasn't been an issue. My only regret is that Samba 4 isn't out so I 
> > still have to run 2003 as domain controllers.
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/listinfo/samba
> > 
> _
> 
> This email (including any attachments to it) is confidential, 
> legally privileged, subject to copyright and is sent for the 
> personal attention of the intended recipient only. If you 
> have received this email in error, please advise us 
> immediately and delete it. You are notified that disclosing, 
> copying, distributing or taking any action in reliance on the 
> contents of this information is strictly prohibited. Although 
> we have taken reasonable precautions to ensure no viruses are 
> present in this email, we cannot accept responsibility for 
> any loss or damage arising from the viruses in this email or 
> attachments. We exclude any liability for the content of this 
> email, or for the consequences of any actions taken on the 
> basis of the information provided in this email or its 
> attachments, unless that information is subsequently 
> confirmed in writing. If this email contains an offer, that 
> should be considered as an invitation to treat.
> _
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 
> 
> 
> Confidentiality Notice: This email transmission may contain 
> confidential or legally privileged information that is 
> intended only for the individual or entity named in the 
> e-mail address. If you are not the intended recipient, you 
> are hereby notified that any disclosure, copying, 
> distribution, or reliance upon the contents of this e-mail is 
> strictly prohibited. If you have received this e-mail 
> transmission in error, please reply to the sender, so that 
> arrangements can be made for proper delivery, and then please 
> delete the message from your in-box.
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] what OS do you use for Samba?

2006-11-28 Thread Rhiannon.Henning
I am currently running samba 3.0.10-1.4E.9 on RHEL 4 and having problems
with trusted AD domains using Kerberos authentication. Should I upgrade
to 3.0.23c? It seems like many have had issues with the latest samba
release so I have been hesitant to upgrade, though cannot figure out why
samba cannot pull client credentials from the other trusted domain. Any
advice/suggestions would be greatly appreciated. Thanks. 

Rhiannon


We use Samba (winbind) for authentication against multiple AD domains.
We are
currently using 3.0.23c with a patch to make the trusted domains work
(see BZ3661).

This is running on RHEL4 and in the past it's been tested on Solaris
too.

Bob G

> 
> > Yeah, I thought about going with Ubuntu 6.06 (I'd stick 
> with that for 
> > the LTS), but it's so new.  I would feel better going with 
> something 
> > with a longer, proven track record.  However, it is nice 
> being able to 
> > install and set up Ubuntu for free but then have Canonical there in 
> > case I have an issue I just can't figure out on my own.
> >
> >
> >   
> I've been using it as our primary file server for about 3 or 
> 4 months now. Other than the famed archive bit problem, there 
> really hasn't been an issue. My only regret is that Samba 4 
> isn't out so I still have to run 2003 as domain controllers.
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 
_

This email (including any attachments to it) is confidential, legally
privileged, subject to copyright and is sent for the personal attention
of the intended recipient only. If you have received this email in
error, please advise us immediately and delete it. You are notified that
disclosing, copying, distributing or taking any action in reliance on
the contents of this information is strictly prohibited. Although we
have taken reasonable precautions to ensure no viruses are present in
this email, we cannot accept responsibility for any loss or damage
arising from the viruses in this email or attachments. We exclude any
liability for the content of this email, or for the consequences of any
actions taken on the basis of the information provided in this email or
its attachments, unless that information is subsequently confirmed in
writing. If this email contains an offer, that should be considered as
an invitation to treat.
_
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba



Confidentiality Notice: This email transmission may contain confidential or 
legally privileged information that is intended only for the individual or 
entity named in the e-mail address. If you are not the intended recipient, you 
are hereby notified that any disclosure, copying, distribution, or reliance 
upon the contents of this e-mail is strictly prohibited. If you have received 
this e-mail transmission in error, please reply to the sender, so that 
arrangements can be made for proper delivery, and then please delete the 
message from your in-box.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3 PDC Home Folder

2006-11-28 Thread Feris Thia C.

Hi Everybody,

Need to ask something about Samba 3's PDC. I setup my Fedora Samba 3's PDC
for my Windows 2000 & XP Pro's clients.

And when the user logon they have their local home's directory copied from
their correspondend Linux's home directory.  Can I just the Samba to use
just Linux's Home Folder and do not created any local WIndows one ?


Regards,

Dino
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Duplicate Icons on Desktop after Upgrade

2006-11-28 Thread Jeff Ross

Hi,

I'm recently upgraded to samba-3.0.23d from 3.0.21 on an OpenBSD 4.0 
server.  I'm using folder redirection to redirect the Application Data, 
Desktop, My Documents, and Favorites folders off to /profiles/username 
on the server.  Two users now have duplicate file icons on their 
desktops.  For example, if there is a file named test.doc in the 
/profiles/username/Desktop directory on the server, their desktop will 
actually display two icons for the file.  The properties on either icon 
show its location to be \\SAMBA\profiles\username\Desktop, and deleting 
one of the icons will make the other also go away when the desktop is 
refreshed.


For one user I've also switched from roaming profiles to a local profile 
but that hasn't made a difference.


The My Documents folder does not display this double icon problem when I 
open the folder, so I don't think the problem is specific to folder 
redirection.


I didn't have any luck finding anything about this problem on Google, so 
any insights would be greatly appreciated.


My smb.conf file hasn't changed since the upgrade.  It is available at 
http://www.openvistas.net/smb.conf


Thanks,

Jeff Ross
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] to AD or not to AD

2006-11-28 Thread Aaron Kincer
I am not sure if you are using Samba for DC duties as you don't 
explicitly say, but I can give you some general things to be aware of:


-Windows NT < SP3 and Windows 95 clients have issues in native 2003 
domains due to SMB packet signing (if that's what you are moving to). 
You can address that with some updates and/or configuration:


http://technet2.microsoft.com/WindowsServer/en/library/8f492d26-379b-4743-a20a-5c5467108e491033.mspx?mfr=true

-I'm sure you know, but your NT servers can no longer be DCs. So if you 
have DCs at remote locations that are NT, they will have to be upgraded 
or replaced.


-Corruption of your forest/domain IS possible during the upgrade. Backup 
prior to conversion is critical unless you feel like chancing having to 
rebuild your domain and rejoin every PC on your network.


I'm sure others can think of more things to be aware of, but that's my 
short list. If you are using Samba as a DC, I'm pretty sure there are 
more things to take into account.


Franz Strebel wrote:

Greetings folks,

I'm currently using the latest samba 3.x versions but my servers
are in an NT4 domain which has a trust relationship with an AD
in mixed mode.  This has worked flawlessly for the past few years
(I started with samba 2.x series).

I am heavily considering getting rid of the domain and just moving
my servers into the AD itself.  Are there any pitfalls I should be
wary of in doing the transition?

Thanks in advance.

Regards,
Franz


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] to AD or not to AD

2006-11-28 Thread Franz Strebel

Greetings folks,

I'm currently using the latest samba 3.x versions but my servers
are in an NT4 domain which has a trust relationship with an AD
in mixed mode.  This has worked flawlessly for the past few years
(I started with samba 2.x series).

I am heavily considering getting rid of the domain and just moving
my servers into the AD itself.  Are there any pitfalls I should be
wary of in doing the transition?

Thanks in advance.

Regards,
Franz
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba