[Samba] changing ACLs only as owner possible

2007-05-31 Thread Bjoern_80
Hello! 

I have the following problem: 

I have an linux file server (member server ADS), with authenticating 
against ADS. It works fine. All user data / memberships are correct. 
ACLs works successfully for reading and so on. 

But I'll can  change ACLs, if i'm the owner of this file/folder. If I'm 
member of an ownerproup or I have full access via ACLs (as user or as a 
member of a group) I always get an error message: 

setfacl: test_unixgrpvoll: Operation not permitted 

Any Ideas? 

Thanks!!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] changing ACLs only as owner possible

2007-05-31 Thread Bjoern_80

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] username map security=user and 3.0.25a

2007-05-31 Thread jhall
On my production servers I am currently using username map= to map the
Windows IDs to the IDs on my FreeBSD system.

This evening, when I upgraded to 3.0.25a, the username map function
stopped working.  Reverting to 3.0.23d fixed the problem.

I found this bugreport, which is similar, but not exactly the setup I am
using since I am using security=user

https://bugzilla.samba.org/show_bug.cgi?id=4620

I did not see anything in the log files which stood out.

What else should I be looking at?

Thanks,


Jay

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbd write failure, kernel

2007-05-31 Thread Shaochun Wang
On Thu, May 31, 2007 at 12:14:36PM +0700, Филипп Филиппов wrote:
> syslog(kern.debug):
> May 22 16:57:37 server kernel: audit(1179827857.498:149): avc:  denied
> { write } for  pid=10734 comm="smbd" name="log" dev=tmpfs ino=24665
> scontext=system_u:system_r:smbd_t:s0 tcontext=root:object_r:device_t:s0
> tclass=sock_file

I think this is an SELinux issue. Maybe you need refine the SELinux
policy or change the sock_file's security context.

-- 
Shaochun Wang(王绍春) <[EMAIL PROTECTED]>
PH.D Candidate
State Key Laboratory of Computer Science,
Institute of Software,
Chinese Academy of Sciences
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Bugzilla and other servers at samba.org upgrades schedule

2007-05-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Gerald (Jerry) Carter wrote:
> This is just a general status update:
> 
> We are doing server upgrades on the following servers beginning
> at 23:59 today (GMT-5):
> 
> * bugzilla.samba.org
> * people.samba.org
> * news.samba.org
> * projects.samba.org
> 
> The upgrade window is around 12 hours so the servers should
> be back online sometime tomorrow afternoon during the CDT US
> timezone.

One more addendum:
  This will include wiki.samba.org as well






jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGX3ykIR7qMdg1EfYRAkmYAJ9CYPd+wK/uuzYYU6JbwnDS0fuhhACdFU7E
/WdAogtlpNfhSpccpFLNsAw=
=i+qr
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Bulk] [Samba] Trying to mount a Linux share on Windows

2007-05-31 Thread Shaun Marolf
On Thursday 31 May 2007 05:34:48 pm Miguel Gonzalez Castaños wrote:
> bhoomikasc escribió:
> > Hi,
> >
> > I am trying to mount a Linux directory onto the Windows box.
>
> I think this is not possible, you can't mount a ntfs partition of a
> Windows box from linux
>
> Am I right?

You can mount Linux file systems on Windows you just have to have the right 
utilities to do so. Linux supports NTFS (NTVFS is another matter) with 
ntfs-3g now.

--Shaun

-- 
It isn't about it being free. Rather, its about the freedom it brings.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Bulk] [Samba] Trying to mount a Linux share on Windows

2007-05-31 Thread Miguel Gonzalez Castaños

bhoomikasc escribió:

Hi,

I am trying to mount a Linux directory onto the Windows box.
I think this is not possible, you can't mount a ntfs partition of a 
Windows box from linux


Am I right?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Trying to mount a Linux share on Windows

2007-05-31 Thread bhoomikasc

Hi,

I am trying to mount a Linux directory onto the Windows box.

The smb.conf file looks like this:

Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[profiles]"
Processing section "[users]"
Processing section "[groups]"
Processing section "[winshare]"
Loaded services file OK.
WARNING: passdb expand explicit = yes is deprecated
Server role: ROLE_STANDALONE
[global]
workgroup = OVE.LOCAL
map to guest = Bad User
valid users = root, linuxbak, amandabackup
force user = amandabackup

[homes]
comment = Home Directories
valid users = %S, %D%w%S
read only = No
inherit acls = Yes

[profiles]
comment = Network Profiles Service
path = %H
read only = No
create mask = 0600
directory mask = 0700
store dos attributes = Yes

[users]
comment = All users
path = /home
read only = No
inherit acls = Yes

[groups]
comment = All groups
path = /home/groups
read only = No
inherit acls = Yes

[winshare]
comment = Share for the Windows server ove-dc3bkup01
path = /media/winshare
write list = root, amandabackup, linuxbak
read only = No
create mask = 0600
directory mask = 0700
inherit acls = Yes 

Also, can't seem to see the share below
AmandaBackup:/media # smbclient -L 10.80.101.15 -U linuxbak
Password:
Domain=[OVE] OS=[Windows Server 2003 R2 3790 Service Pack 1] Server=[Windows
Server 2003 R2 5.2]

Sharename   Type  Comment
-     ---
C$  Disk  Default share
S$  Disk  Default share
F$  Disk  Default share
IPC$IPC   Remote IPC
G$  Disk  Default share
LinuxBakDisk
ADMIN$  Disk  Remote Admin
SQL Bak Disk
E$  Disk  Default share
session request to 10.80.101.15 failed (Called name not present)
session request to 10 failed (Called name not present)
Domain=[OVE] OS=[Windows Server 2003 R2 3790 Service Pack 1] Server=[Windows
Server 2003 R2 5.2]

Server   Comment
----
 OVE-DC3BKUP01
 
WorkgroupMaster
----
OVE  OVE-DC3AD01
OVEDMZ   OVE-DC3ISA02
 
While mounting it,
AmandaBackup:~ # mount -t smbfs -o
username=linuxbak,uid=amandabackup,gid=disk /media/winshare/
//10.80.101.15/LinuxBak
-bash: !,uid=amandabackup,gid=disk: event not found
AmandaBackup:~ # mount -t smbfs -o username=linuxbak /media/winshare/
//10.80.101.15/LinuxBak
Could not resolve mount point //10.80.101.15/LinuxBak
AmandaBackup:~ # mount -t smbfs -o username=linuxbak
10.90.219.64:/media/winshare/ 10.80.101.15:/LinuxBak  
Could not resolve mount point 10.80.101.15:/LinuxBak

Please Help
-- 
View this message in context: 
http://www.nabble.com/Trying-to-mount-a-Linux-share-on-Windows-tf3849150.html#a10902922
Sent from the Samba - General mailing list archive at Nabble.com.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Fwd: Samba 3.025 wbinfo checking the trust secret via RPC calls failed

2007-05-31 Thread Gaiseric Vandal

Some additional info

The unix-level (non samba) authentication is configure for LDAP via
the /etc/nswitch.conf file.  I also have openldap installed from
sunfreeware, although it doesn't seem to have a pkgconfig file.  I am
not using LDAP authentication within samba.I was able to create
samba accounts with pdbedit whether they were local or network
accounts.

Configuration gave me the following ..

# ./configure --prefix=/usr/local/samba.3025a
OR
# ./configure --prefix=/usr/local/samba.3025a  --with-ldap=no

..
configure: WARNING: netinet/ip.h: present but cannot be compiled
configure: WARNING: netinet/ip.h: check for missing prerequisite headers?
configure: WARNING: netinet/ip.h: see the Autoconf documentation
configure: WARNING: netinet/ip.h: section "Present But Cannot Be Compiled"
configure: WARNING: netinet/ip.h: proceeding with the preprocessor's result
configure: WARNING: netinet/ip.h: in the future, the compiler will
take precedence

make command have be lots of warnings about "option -o appears more
than once."
...
make
...
ld: warning: option -o appears more than once, first setting taken
Compiling nsswitch/winbind_nss_solaris.c
Compiling nsswitch/winbind_nss_linux.c
Linking nsswitch/libnss_winbind.so
ld: warning: option -o appears more than once, first setting taken
Compiling nsswitch/wins.c
Linking nsswitch/libnss_wins.so
..


I joined 2 Windows 2003 machines to the domain. I was able to log as
"administrator" and "root" but no other accounts, whether local or
not.   The user accounts them self seem OK-  it just seems to be a
winbind or trusts issue.

#  net user info myusername--server pdc  --user "sambadomain\administrator"
Password: 
myusergroup


# tail log.winbindd-idmap
[2007/05/31 16:29:51, 3] nsswitch/winbindd_async.c:winbindd_dual_sid2gid(xyz)
 [ 6403]: sid to gid S-wxyz
[2007/05/31 16:29:51, 3] nsswitch/winbindd_async.c:winbindd_dual_sid2gid(xyz)
 [ 6403]: sid to gid S-wxyz
[2007/05/31 16:29:51, 3] nsswitch/winbindd_async.c:winbindd_dual_sid2gid(xyz)
 [ 6403]: sid to gid S-wxyz
[2007/05/31 16:29:51, 3] nsswitch/winbindd_async.c:winbindd_dual_sid2gid(xyz)
 [ 6403]: sid to gid S-wxyz
[2007/05/31 16:35:52, 3] nsswitch/winbindd_dual.c:child_read_request(51)
 Got invalid request length: 0

I tried building the software on another solaris 10 machine (which is
the LDAP server but is itself NOT an ldap client)   but got the same
"configure" errors.

I even tried running the autogen.sh file first.

I had no problem when I compiled 3.0.22.  I don't think I saw this
with 3.0.25 either.

Thanks


-- Forwarded message --
From: Gaiseric Vandal <[EMAIL PROTECTED]>
Date: May 30, 2007 4:07 PM
Subject: Samba 3.025 wbinfo checking the trust secret via RPC calls failed
To: samba@lists.samba.org


I have compiled Samba 3.0.25a from source on a Solaris 10 machine.  I
had previously been testing Samba 3.0.24 (from packages on
www.sunfreeware.com) and have reused the smb.conf file.  Otherwise
this is a clean setup, not an upgrade.

The server is configured as a PDC for my domain "SAMBADOMAIN"

I created a samba password for the local root and administrator accounts.

I joined the server machine to its own domain

   pdc# net join sambadomain  -U root
   Password:

   Joined domain SAMBADOMAIN

   pdc#  bin/net rpc testjoin
   Join to SAMBADOMAIN is OK
   gopher#


I joined a Windows 2003 server to the domain.  All seems weel.

I tried establish trusts with another domain.Either way this fails
with a warning that the trust password was incorrect.   going
back a step,  I tried   to verify the trust to my own domain.


   pdc # ./wbinfo -t
   checking the trust secret via RPC calls failed
   error code was NT_STATUS_INVALID_HANDLE (0xc008)
   Could not check secret

   pdc# ./wbinfo --own-domain -t
   SAMBADOMAIN
   checking the trust secret via RPC calls failed
   error code was NT_STATUS_INVALID_HANDLE (0xc008)
   Could not check secret




This had worked with Samba 3.0.24.  Not sure if this is a winbind
issue.  my smb.conf file includes the following:



   idmap uid = 1-2
   idmap gid = 1-2
   winbind enum users = yes
   winbind enum groups = yes

Thanks
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Bugzilla and other servers at samba.org upgrades schedule

2007-05-31 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

This is just a general status update:

We are doing server upgrades on the following servers beginning
at 23:59 today (GMT-5):

* bugzilla.samba.org
* people.samba.org
* news.samba.org
* projects.samba.org

The upgrade window is around 12 hours so the servers should
be back online sometime tomorrow afternoon during the CDT US
timezone.





cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGXzAoIR7qMdg1EfYRAqNkAJwMITkVgxptJyIZ/t9JOeDUFckYqgCgur0P
DtuZdyBOu7XEofi/ZGZhJ6U=
=QswG
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Forcing user/group with winbindd

2007-05-31 Thread jhall
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> [EMAIL PROTECTED] wrote:
>> Is it possible to force a particular user/group to
>> own files when using winbindd?
>
> Yes.  But you have to fully qualify the name.  Depending
> on the version of Samba you are running, this may either be a
> hard or soft requirement.
>
>
>
>
>
> cheer,s jerry

I have tried this, but cannot seem to get it to work right.  I am running
Samba-3.0.23c on FreeBSD 6.2.

When I add:
force user = mo+linda

to my smb.conf, I receive the following error message when I try to connect.
System Error 64.

The specified network name is no longer available.

If I remove the force user statement, I am able to connect to the share
fine, but the user is not set as I would like for it to be.

Following is a copy of the share I am working with.

[Test.Share]
comment = Test Share
valid users = mo+linda, mo+jay
write list = mo+linda, mo+jay
create mode = 0777
directory mode = 0777
#   force user = mo+linda
writeable = Yes
brosweable = Yes
path = /home/linda

I have set the permissions on /home/linda to 777 for testing purposes.

I'm sure this is something simple that I am doing wrong.  Any suggestions
would be greatly appreciated.

Thanks,


Jay

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] roaming profiles in a home environment

2007-05-31 Thread Charles Marcus

On 5/30/2007 Adam Tauno Williams ([EMAIL PROTECTED]) wrote:

I'm assuming that I'd be better off not using roaming profiles, but
instead using folder redirection (in outlook's case simply put the
files on the share).



Yes.


I would recommend against doing this... Microsoft itself recommends 
against it, but I have also had problems with corruption in .pst files 
that are stored on a network share, both on Windows shares *and* Samba 
shares...


--

Best regards,

Charles
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] What makes excel file opening so slow??

2007-05-31 Thread Adam Tauno Williams
>  Despite the question I asked last time (I will re-install the FC3
> with Samba 3.0.14a on another computer for replacement soon), I still
> have one more question on Excel files. I found that Excel file opening
> is extremely slow (especially on slow connections, i.e. VPN). The case
> is really bad, it takes around 2 mins to open a excel file of around
> 400k. Actually we got both side having 4M/4M DSL line. 

Speed doesn't matter so much as latency.  Check out some documents on
windowing, etc... maybe you can improve the efficiency of your link.
http://dsd.lbl.gov/TCP-tuning/tcp-wan-perf.pdf


> However if we build a VPN
> inside Hong Kong, it takes 10~20 seconds to open a 400k excel file.

I don't understand what this means.

> However if I just copy a 400k file, neither of them take such a long
> time. 

Ok, opening is not comparable to copying.

> Both situation can finish the transmission within some seconds.
> So what is so special about opening a excel file, and how can I
> improve the speed? Thanks for comments!

One would have to see a network trace, but I'd wager Excel is reading
the file in a manner that causes lots of round trips - then latency
kills you.  I've seen this kind of thing before.  Make sure oplocks are
enabled.   If you really need to go faster maybe see if accessing the
file via WebDAV instead of CIFS/SMB is sufficient.  We've found WebDAV
to be 'faster' over high-latency VPN links.  But you get less fancy
locking (if any).   

-- 
Adam Tauno Williams, Network & Systems Administrator
Consultant - http://www.whitemiceconsulting.com
Developer - http://www.opengroupware.org

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] What makes excel file opening so slow??

2007-05-31 Thread Chan Jason

Hi list,
Despite the question I asked last time (I will re-install the FC3
with Samba 3.0.14a on another computer for replacement soon), I still
have one more question on Excel files. I found that Excel file opening
is extremely slow (especially on slow connections, i.e. VPN). The case
is really bad, it takes around 2 mins to open a excel file of around
400k. Actually we got both side having 4M/4M DSL line. One side is
Hong Kong, and the other side is China. However if we build a VPN
inside Hong Kong, it takes 10~20 seconds to open a 400k excel file.
However if I just copy a 400k file, neither of them take such a long
time. Both situation can finish the transmission within some seconds.
So what is so special about opening a excel file, and how can I
improve the speed? Thanks for comments!

Yours sincerely,
Jason Chan
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] logon drive problem

2007-05-31 Thread Rune T?nnesen
Cardon Denis skrev:
> Hi Luk,
>
>   
>> I have samba 3 with ldap as a auth backend. And I have a problem with
>> logon drive, when user is loging to domain the logon drive isnt mapped.
>> I dont know where is a problem
>> in smb.con I have
>>logon drive = Z:
>>logon home = \\%L\%u
>>logon script = login.cmd 
>> somebody knows whereis problem?
>> 
>
> Have you tried to specify those values directly in the LDAP tree
> (sambaHomePath, sambaHomeDrive, sambaLogonScript attributes)? I remember
> having a hard time getting the smb.conf parameters used as default for
> ldap users, but it works perfectly if the attributes are defined in the
> ldap tree.
>
> Cheers,
>
> Denis
>   
Hi Denis

what is the result of pdbedit -Lw ?

Cheers Rune
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Backup Domain not working

2007-05-31 Thread Jason Baker

That makes sense. I will try that and report back.

*Jason Baker
*/IT Coordinator/


*Glastender Inc.*
5400 North Michigan Road
Saginaw, Michigan 48604 USA
800.748.0423
Phone: 989.752.4275 ext. 228
Fax: 989.752.
www.glastender.com 

-BEGIN GEEK CODE BLOCK- 
Version: 3.1

GIT$ d- s: a C++$ LU+++$ P+ L++>L !E--- W+++ N o? K?
w !O M !V PS PE++ Y? PGP- t 5? X+ R+ tv+ b- DI-- D++ G e+ h--- 
r+++ y+++

--END GEEK CODE BLOCK--



Gary Dale wrote:
I suspect you need to specify the logon home with actual server name 
(PDC). Otherwise it defaults to the server you logged onto - in this 
case your BDC.


Jason Baker wrote:
I recently set up a backup domain controller using Samba 3.0.23. I 
have a Samba PDC already running, and all is working fine, but once I 
added the BDC, now when people log in to their windows account, their 
home directory is now being mapped to their home on the BDC (which is 
empty) instead of the PDC. Conf files from each below:


PDC Samba Conf:
[global]
  unix charset = LOCALE
  workgroup = mydomain
  netbios name = PDC
  server string = Domain Controller running %v
  interfaces = eth1, lo
  bind interfaces only = yes
  os level = 255
  preferred master = yes
  local master = yes
  domain master = yes
  security = user
  time server = yes
  username map = /etc/samba/smbusers
  wins support = yes
  encrypt passwords = yes
  pam password change = yes
  name resolve order = wins bcast hosts
  winbind nested groups = no
  passdb backend = ldapsam:"ldap://127.0.0.1 ldap://BDC";
  ldap passwd sync = Yes
  ldap suffix = dc=mydomain,dc=com
  ldap admin dn = cn=Manager,dc=mydomain,dc=com
  ldap ssl = no
  ldap group suffix = ou=Groups
  ldap user suffix = ou=People
  ldap machine suffix = ou=People
  ldap idmap suffix = ou=Idmap
  idmap backend = ldap:ldap://127.0.0.1/
  idmap uid = 1-2
  idmap gid = 1-2
  map acl inherit = yes
  add user script = /etc/smbldap-tools/smbldap-useradd -m "%u"
  #delete user script = /etc/smbldap-tools/smbldap-userdel "%u"
  add machine script = /etc/smbldap-tools/smbldap-useradd -w "%u"
  add group script = /etc/smbldap-tools/smbldap-groupadd -p "%g"
  #delete group script = /etc/smbldap-tools/smbldap-groupdel "%g"
  add user to group script = /etc/smbldap-tools/smbldap-groupmod 
-m "%u" "%g"
  delete user from group script = 
/etc/smbldap-tools/smbldap-groupmod -x "%u" "%g"
  set primary group script = /etc/smbldap-tools/smbldap-usermod 
-g "%g" "%u"

  domain logons = yes
  log file = /var/log/samba/log.%m
  log level = 1
  syslog = 0
  max log size = 50
  #smb ports = 139 445
  smb ports = 139
  hosts allow = 127.0.0.1 172.16.0.0/255.255.0.0
  # User profiles and home directories
  logon drive = U:
  logon path = \\%L\profiles\%U
  logon script = %U.bat
  large readwrite = no
  read raw = no
  write raw = no
  printcap name = /etc/printcap
  load printers = no
  printing =
  template shell = /bin/false
  winbind use default domain = no

BDC Samba Conf.
[global]
  unix charset = LOCALE
  workgroup = mydomain
  server string =  Backup Domain Controller
  security = domain
  username map = /etc/samba/smbusers
  log level = 1
  syslog = 0
  log file = /var/log/samba/%m.log
  max log size = 50
  smb ports = 139
  name resolve order = wins bcast hosts
  wins server = 172.16.24.7
  ldap suffix = dc=mydomain,dc=com
  ldap machine suffix = ou=People
  ldap user suffix = ou=People
  ldap group suffix = ou=Groups
  ldap idmap suffix = ou=Idmap
  ldap admin dn = cn=Manager,dc=mydomain,dc=com
  idmap backend = ldap:ldap://PDC
  idmap uid = 1-2
  idmap gid = 1-2
  winbind trusted domains only = yes
  password server = 172.16.24.7
  template shell = /bin/false
  domain master = no
  local master = no
  os level = 0
  preferred master = no
  winbind use default domain = no
  veto oplock files = /*.mbd/
  large readwrite = no
  read raw = no
  write raw = noprintcap name = /etc/printcap
  load printers = no
  printing =




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] logon drive problem

2007-05-31 Thread Cardon Denis
Hi Luk,

> I have samba 3 with ldap as a auth backend. And I have a problem with
> logon drive, when user is loging to domain the logon drive isnt mapped.
> I dont know where is a problem
> in smb.con I have
>logon drive = Z:
>logon home = \\%L\%u
>logon script = login.cmd 
> somebody knows whereis problem?

Have you tried to specify those values directly in the LDAP tree
(sambaHomePath, sambaHomeDrive, sambaLogonScript attributes)? I remember
having a hard time getting the smb.conf parameters used as default for
ldap users, but it works perfectly if the attributes are defined in the
ldap tree.

Cheers,

Denis


> thanks in advance
> luk
> 


-- 
Denis Cardon
Tranquil IT Systems
10 rue du Docteur Bouchard
49400 Saumur
tel : +33 (0) 2.41.67.56.99
http://www.tranquil-it-systems.fr

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Smba with Amanda backup --- permissions

2007-05-31 Thread bhoomikasc

Thanks everybody...solution found. 
Its in the mounting --- add uid and gid to it.



bhoomikasc wrote:
> 
> Hi,
> 
> I am trying to create a Samba share on /media/winshare with the owner as
> amandabackup instead of root. But as soon as I mount the Samba share on to
> the mount point, the permissions for the owner get reverted back to root
> instead of amandabackup.
> 
> Attaching a snapshot of how it looks like.
> http://www.nabble.com/file/p10894282/samba%2Bquery.jpg 
> 

-- 
View this message in context: 
http://www.nabble.com/Smba-with-Amanda-backup-permissions-tf3846638.html#a10897449
Sent from the Samba - General mailing list archive at Nabble.com.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Smba with Amanda backup --- permissions

2007-05-31 Thread Ben Tisdall
bhoomikasc wrote:
> Hi,
> 
> I am trying to create a Samba share on /media/winshare with the owner as
> amandabackup instead of root. But as soon as I mount the Samba share on to
> the mount point, the permissions for the owner get reverted back to root
> instead of amandabackup.
> 
> Attaching a snapshot of how it looks like.
> http://www.nabble.com/file/p10894282/samba%2Bquery.jpg 

I suspect udev is coming into the picture because you're using /media as
your mountpoint.

Try mounting under /mnt & see what happens.

-- 
Ben Tisdall
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Smba with Amanda backup --- permissions

2007-05-31 Thread Josh Kelley

On 5/31/07, bhoomikasc <[EMAIL PROTECTED]> wrote:

I am trying to create a Samba share on /media/winshare with the owner as
amandabackup instead of root. But as soon as I mount the Samba share on to
the mount point, the permissions for the owner get reverted back to root
instead of amandabackup.

Attaching a snapshot of how it looks like.
http://www.nabble.com/file/p10894282/samba%2Bquery.jpg


The permissions on the directory used as the mount point have no
effect on the permissions of the mounted filesystem.  This is the case
for Linux and Unix in general and is not a Samba-specific issue.

You should be able to add the uid= and gid= options to your mount
command to change the permissions of the mounted filesystem:
mount -t cifs -o username=linuxbak,uid=amandabackup,gid=root
//10.80.101.15/linuxbak /media/winshare
Note that the mount type smbfs is generally deprecated in favor of cifs.

Amanda supports backing up Windows shares using smbclient; I've always
used that method instead of mounting a SMB filesystem.

Josh Kelley
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba 3.0.24 + openldap + solaris won't start up

2007-05-31 Thread James Craig

On Wed, 30 May 2007, Gerald (Jerry) Carter wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

James Craig wrote:


sys_getgrouplist: user [nobody]
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
NT user token: (NULL)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
===
INTERNAL ERROR: Signal 11 in pid 27597 (3.0.24)
Please read the Trouble-Shooting section of the Samba3-HOWTO

From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
===
Segmentation Fault


Seems identical to this bug (but doesn't look like you
posted it):
 https://bugzilla.samba.org/show_bug.cgi?id=4629

Do any of my comments/questions in the report apply to you?


That looks like the problem I am seeing too. (sorry I didn't see
that report before posting!)

I compiled samba against the openldap libraries,
but the server I am runing on uses the native client libraries
for itself.


From your comments in the bug, I did check that the system is
running /usr/sbin/nscd.  The system itself is using the native
solaris ldap client,  and it's native nss_ldap

I am not certain how to specify the samba server to use nscd over
nss, so I can't tell you exactly which one is being used during
smbd's startup.


jim craig
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Smba with Amanda backup --- permissions

2007-05-31 Thread bhoomikasc

Hi,

I am trying to create a Samba share on /media/winshare with the owner as
amandabackup instead of root. But as soon as I mount the Samba share on to
the mount point, the permissions for the owner get reverted back to root
instead of amandabackup.

Attaching a snapshot of how it looks like.
http://www.nabble.com/file/p10894282/samba%2Bquery.jpg 
-- 
View this message in context: 
http://www.nabble.com/Smba-with-Amanda-backup-permissions-tf3846638.html#a10894282
Sent from the Samba - General mailing list archive at Nabble.com.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Abnormal Windows behaviour with Samba

2007-05-31 Thread Chris Smith
On Thursday 31 May 2007, Erebus wrote:
> I really agree about the WINS part - that's why I prefer enabling this
> functionality in Samba. It seems that it resolves a lot of issues in
> general. However what do you mean by DNS? Do you believe that I have to
> install Bind on my server and create zone files for each terminal?

Or some DNS server. I've used bind in the past and been using djbdns lately 
with good results. Windows will only use netBIOS resolution as a fallback so 
it may be slower. However, you did state you set up hosts files which should 
be looked at first in all cases. But hosts files are a maintenance nightmare 
(anything over 5 PC's it becomes absurd) and DNS will serve you much better. 
Also if you plan to use hosts in place of DNS then your hosts files should 
contain the name IP mapping, be properly setup (both short and fqdn names 
with a carriage return at the end) for all of the systems and be placed on 
all of the systems. Plus hosts files AFAIK don't provide any reverse 
information (cannot resolve name from IP address). 

> If this 
> is the case, what would be a sample configuration for each zone? I have
> only installed Bind for real domains.. Can I create zones without TLDs
> (i.e. just PC-01)? If a fake TLD is needed, do I have to call the server's
> share using this TLD (i.e. \\server.tld\share\whatever)? Explain this
> please, as it's a little confusing to me...

Not necessary for a "real TLD", ample info is avaliable in numerous places to 
assist with this.

> > Also when using user and group names in smb.conf it's a good idea (and
> > mandatory in some cases) to fully qualify the names as
> > DOMAINNAME\username or
> > DOMAINNAME\groupname, ex: X-NET\x-admin, X-NET\erebus, etc.
>
> Is this also the case if Samba is not configured as a PDC, but just as a
> workgroup server? I don't use a domain in my configuration.

Good question, don't really know, but if it doesn't hurt I would try it that 
way. I always thought that domain logons and domain master went hand in hand. 
Odd that you specified one and not the other. Do you have a Windows NT PDC? 
If so then you shouldn't specify "domain master = yes" and might as well let 
the PDC be the WINS server as well, if not there's no reason I can think of 
not to make Samba a PDC as well by specifying "domain logons = yes". I guess 
I don't see the sense in running a 30 PC network without a domain controller 
as it makes everything so much more manageable.

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Backup Domain not working

2007-05-31 Thread Gary Dale
I suspect you need to specify the logon home with actual server name 
(PDC). Otherwise it defaults to the server you logged onto - in this 
case your BDC.


Jason Baker wrote:
I recently set up a backup domain controller using Samba 3.0.23. I 
have a Samba PDC already running, and all is working fine, but once I 
added the BDC, now when people log in to their windows account, their 
home directory is now being mapped to their home on the BDC (which is 
empty) instead of the PDC. Conf files from each below:


PDC Samba Conf:
[global]
  unix charset = LOCALE
  workgroup = mydomain
  netbios name = PDC
  server string = Domain Controller running %v
  interfaces = eth1, lo
  bind interfaces only = yes
  os level = 255
  preferred master = yes
  local master = yes
  domain master = yes
  security = user
  time server = yes
  username map = /etc/samba/smbusers
  wins support = yes
  encrypt passwords = yes
  pam password change = yes
  name resolve order = wins bcast hosts
  winbind nested groups = no
  passdb backend = ldapsam:"ldap://127.0.0.1 ldap://BDC";
  ldap passwd sync = Yes
  ldap suffix = dc=mydomain,dc=com
  ldap admin dn = cn=Manager,dc=mydomain,dc=com
  ldap ssl = no
  ldap group suffix = ou=Groups
  ldap user suffix = ou=People
  ldap machine suffix = ou=People
  ldap idmap suffix = ou=Idmap
  idmap backend = ldap:ldap://127.0.0.1/
  idmap uid = 1-2
  idmap gid = 1-2
  map acl inherit = yes
  add user script = /etc/smbldap-tools/smbldap-useradd -m "%u"
  #delete user script = /etc/smbldap-tools/smbldap-userdel "%u"
  add machine script = /etc/smbldap-tools/smbldap-useradd -w "%u"
  add group script = /etc/smbldap-tools/smbldap-groupadd -p "%g"
  #delete group script = /etc/smbldap-tools/smbldap-groupdel "%g"
  add user to group script = /etc/smbldap-tools/smbldap-groupmod 
-m "%u" "%g"
  delete user from group script = 
/etc/smbldap-tools/smbldap-groupmod -x "%u" "%g"
  set primary group script = /etc/smbldap-tools/smbldap-usermod -g 
"%g" "%u"

  domain logons = yes
  log file = /var/log/samba/log.%m
  log level = 1
  syslog = 0
  max log size = 50
  #smb ports = 139 445
  smb ports = 139
  hosts allow = 127.0.0.1 172.16.0.0/255.255.0.0
  # User profiles and home directories
  logon drive = U:
  logon path = \\%L\profiles\%U
  logon script = %U.bat
  large readwrite = no
  read raw = no
  write raw = no
  printcap name = /etc/printcap
  load printers = no
  printing =
  template shell = /bin/false
  winbind use default domain = no

BDC Samba Conf.
[global]
  unix charset = LOCALE
  workgroup = mydomain
  server string =  Backup Domain Controller
  security = domain
  username map = /etc/samba/smbusers
  log level = 1
  syslog = 0
  log file = /var/log/samba/%m.log
  max log size = 50
  smb ports = 139
  name resolve order = wins bcast hosts
  wins server = 172.16.24.7
  ldap suffix = dc=mydomain,dc=com
  ldap machine suffix = ou=People
  ldap user suffix = ou=People
  ldap group suffix = ou=Groups
  ldap idmap suffix = ou=Idmap
  ldap admin dn = cn=Manager,dc=mydomain,dc=com
  idmap backend = ldap:ldap://PDC
  idmap uid = 1-2
  idmap gid = 1-2
  winbind trusted domains only = yes
  password server = 172.16.24.7
  template shell = /bin/false
  domain master = no
  local master = no
  os level = 0
  preferred master = no
  winbind use default domain = no
  veto oplock files = /*.mbd/
  large readwrite = no
  read raw = no
  write raw = noprintcap name = /etc/printcap
  load printers = no
  printing =



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] net ads join doesn't work with samba > 3.0.22

2007-05-31 Thread Thibaut Mauger

Hi,

I have a problem joining my Linux servers to my AD with Samba > 3.0.22
I have tested with various distros :

Suse 10.2, smb 3.0.23d
Debian Etch, smb 3.0.24

but always get the same error message :

debian:~# net ads join -U administrateur -S s-dc-acms
administrateur's password:
[2007/05/30 12:27:15, 0] utils/net_ads.c:ads_startup(289)
 ads_connect: Aucun fichier ou rÃ(c)pertoire de ce type

(last line means "No such file or directory")

The problem is quite weird. With a Suse 10.1 (smb 3.0.22) I am able to
join the server to AD flawlessly.

kinit does work, I get a ticket when I do klist

debian:~# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [EMAIL PROTECTED]

Valid starting ExpiresService principal
05/30/07 12:19:43  05/30/07 18:59:43  krbtgt/[EMAIL PROTECTED]


Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached

Any ideas that might help ?

Thanks a lot
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Can not join via ADS using administrator account, succeeded using another account

2007-05-31 Thread Frans Haarman

Hello,

Yesterday I have used Samba to help me authenticate Windows uses
within the Squid Proxy server. ( FreeBSD-6.1 + Samba 3.0.25 )

The Kerberos setup went fine. However I got the
NT_STATUS_PROTOCOL_UNREACHABLE error code when trying to "net join"
the domain.

It seems this is Kerberos related. On the net some emails suggest
using "kdc = tcp/server.name"  syntax to deal with big packets. This
had no effect.

I was able to join the domain using the Administrator account and "net
rpc". The "net ads" would fail each time. Another user was able to
join the domain
via net ads without any problems! I do not understand why that is. Do you ?


After joining the domain wbinfo still didnt do what I hoped it would.

What did work was:
#wbinfo -u
#wbinfo -g
#wbinfo -n
#wbinfo --user-sids

What did not work was:
#wbinfo -r
#wbinfo -i

proxy# wbinfo -r administrator
proxy# wbinfo -r administrator2
Could not get groups for user administrator2

proxy# wbinfo -i administrator
Could not get info for user administrator

proxy# winbindd -V
Version 3.0.25
proxy# wbinfo -V
Version 3.0.25

proxy# net ads status -U administrator
administrator's password:
proxy#
proxy# net ads status -U administrator
administrator's password:
[2007/05/31 13:00:12, 0] libads/kerberos.c:ads_kinit_password(227)
 kerberos_kinit_password [EMAIL PROTECTED] failed: Preauthentication failed
[2007/05/31 13:00:12, 0] libads/kerberos.c:ads_kinit_password(227)
 kerberos_kinit_password [EMAIL PROTECTED] failed: Preauthentication failed
proxy#

So above we see here that when I enter the wrong password I get kerberos errors.

proxy# clear
proxy# net ads status -U giessen
giessen's password:
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
objectClass: computer
[ SNIP ]

With the above username/password I do get a reply! This might be
because I joined the domain using that account ? I have no clue, do
you ?



If someone has an idea what is causing this I'd like to hear. If more
info is needed please tell me and I will see if I can provide mode details.

Thanks,

Frans
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Backup Domain not working

2007-05-31 Thread Jason Baker
I recently set up a backup domain controller using Samba 3.0.23. I have 
a Samba PDC already running, and all is working fine, but once I added 
the BDC, now when people log in to their windows account, their home 
directory is now being mapped to their home on the BDC (which is empty) 
instead of the PDC. Conf files from each below:


PDC Samba Conf:
[global]
  unix charset = LOCALE
  workgroup = mydomain
  netbios name = PDC
  server string = Domain Controller running %v
  interfaces = eth1, lo
  bind interfaces only = yes
  os level = 255
  preferred master = yes
  local master = yes
  domain master = yes
  security = user
  time server = yes
  username map = /etc/samba/smbusers
  wins support = yes
  encrypt passwords = yes
  pam password change = yes
  name resolve order = wins bcast hosts
  winbind nested groups = no
  passdb backend = ldapsam:"ldap://127.0.0.1 ldap://BDC";
  ldap passwd sync = Yes
  ldap suffix = dc=mydomain,dc=com
  ldap admin dn = cn=Manager,dc=mydomain,dc=com
  ldap ssl = no
  ldap group suffix = ou=Groups
  ldap user suffix = ou=People
  ldap machine suffix = ou=People
  ldap idmap suffix = ou=Idmap
  idmap backend = ldap:ldap://127.0.0.1/
  idmap uid = 1-2
  idmap gid = 1-2
  map acl inherit = yes
  add user script = /etc/smbldap-tools/smbldap-useradd -m "%u"
  #delete user script = /etc/smbldap-tools/smbldap-userdel "%u"
  add machine script = /etc/smbldap-tools/smbldap-useradd -w "%u"
  add group script = /etc/smbldap-tools/smbldap-groupadd -p "%g"
  #delete group script = /etc/smbldap-tools/smbldap-groupdel "%g"
  add user to group script = /etc/smbldap-tools/smbldap-groupmod -m 
"%u" "%g"
  delete user from group script = 
/etc/smbldap-tools/smbldap-groupmod -x "%u" "%g"
  set primary group script = /etc/smbldap-tools/smbldap-usermod -g 
"%g" "%u"

  domain logons = yes
  log file = /var/log/samba/log.%m
  log level = 1
  syslog = 0
  max log size = 50
  #smb ports = 139 445
  smb ports = 139
  hosts allow = 127.0.0.1 172.16.0.0/255.255.0.0
  # User profiles and home directories
  logon drive = U:
  logon path = \\%L\profiles\%U
  logon script = %U.bat
  large readwrite = no
  read raw = no
  write raw = no
  printcap name = /etc/printcap
  load printers = no
  printing =
  template shell = /bin/false
  winbind use default domain = no

BDC Samba Conf.
[global]
  unix charset = LOCALE
  workgroup = mydomain
  server string =  Backup Domain Controller
  security = domain
  username map = /etc/samba/smbusers
  log level = 1
  syslog = 0
  log file = /var/log/samba/%m.log
  max log size = 50
  smb ports = 139
  name resolve order = wins bcast hosts
  wins server = 172.16.24.7
  ldap suffix = dc=mydomain,dc=com
  ldap machine suffix = ou=People
  ldap user suffix = ou=People
  ldap group suffix = ou=Groups
  ldap idmap suffix = ou=Idmap
  ldap admin dn = cn=Manager,dc=mydomain,dc=com
  idmap backend = ldap:ldap://PDC
  idmap uid = 1-2
  idmap gid = 1-2
  winbind trusted domains only = yes
  password server = 172.16.24.7
  template shell = /bin/false
  domain master = no
  local master = no
  os level = 0
  preferred master = no
  winbind use default domain = no
  veto oplock files = /*.mbd/
  large readwrite = no
  read raw = no
  write raw = noprintcap name = /etc/printcap
  load printers = no
  printing =

--

*Jason Baker
*/IT Coordinator/


*Glastender Inc.*
5400 North Michigan Road
Saginaw, Michigan 48604 USA
800.748.0423
Phone: 989.752.4275 ext. 228
Fax: 989.752.
www.glastender.com 

-BEGIN GEEK CODE BLOCK- 
Version: 3.1

GIT$ d- s: a C++$ LU+++$ P+ L++>L !E--- W+++ N o? K?
w !O M !V PS PE++ Y? PGP- t 5? X+ R+ tv+ b- DI-- D++ G e+ h--- 
r+++ y+++

--END GEEK CODE BLOCK--

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] logon drive problem

2007-05-31 Thread empirium
I have samba 3 with ldap as a auth backend. And I have a problem with 
logon drive, when user is loging to domain the logon drive isnt mapped.

I dont know where is a problem
in smb.con I have
   logon drive = Z:
   logon home = \\%L\%u
   logon script = login.cmd


somebody knows whereis problem?
thanks in advance
luk

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] policy files

2007-05-31 Thread Adam Tauno Williams
This is a Windows issue, not a Samba issue.

> I don't have anything that mentions the policy file in my samba config, but
> according to http://www.pcc-services.com/custom_poledit.html I don't need to
> (other than having NTConfig.POL readable at \\wilson\netlogon\NTPolicy.POL,
> which it is).  I've seen lots of stuff that suggests I need special windows
> programs (that seem to only be available on NT or 2003) to edit these files,
> and then other pages (such as the link above) that say they are just text
> files.

No, the ADM template files are text files.  The policy file is not.  You
must have POLEDIT.EXE to edit the policy.  It reads the ADM files,
presents a UI, and produces the binary POL file.

> Is there a simple howto that I've missed on this?  Thanks in advance for any
> tips.

Yes, the Windows documentation.  O'Reilly has a title: "Windows NT User
Administration"  you need a book like that.  Most of the HOWTOs and what
not on the Internet are confusing garbage, or at best only half
complete,  my advise is to skip them entirely.

The *OFFICIAL* Samba documentation does cover this to some extend,
beyond that get a book.

http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/PolicyMgmt.html

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] policy files

2007-05-31 Thread Dmitri Colebatch

Hi,

I think I have two questions - one which is samba and one which is windows
policy files.  I'll try to limit this question to the samba side but will
give the full picture for completeness.

I'm trying to implement a simple policy to redirect a few simple folders
(for starters).  I have a policy file called NTConfig.POL that is available
on my share \\wilson\netlogon (wilson is the name of the server running
samba).  I'll append its contents at the end of this email in case that's
where my problem lies (although that's a windows question, so I don't expect
an answer here).

I don't have anything that mentions the policy file in my samba config, but
according to http://www.pcc-services.com/custom_poledit.html I don't need to
(other than having NTConfig.POL readable at \\wilson\netlogon\NTPolicy.POL,
which it is).  I've seen lots of stuff that suggests I need special windows
programs (that seem to only be available on NT or 2003) to edit these files,
and then other pages (such as the link above) that say they are just text
files.

Is there a simple howto that I've missed on this?  Thanks in advance for any
tips.

cheers
dim



CLASS USER

CATEGORY "Custom Folder Redirection"
   KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\User
Shell Folders"

   POLICY "Custom Internet Cookies Folder"
   PART "Path to User's Internet Cookies Folder"
EDITTEXTREQUIREDEXPANDABLETEXT
   DEFAULT "Z:\Cookies"
   VALUENAME "Cookies"
   END PART
   END POLICY

   POLICY "Custom Internet Favorites Folder"
   PART "Path to User's Internet Favorites Folder"
EDITTEXTREQUIREDEXPANDABLETEXT
   DEFAULT "Z:\Favorites"
   VALUENAME "Favorites"
   END PART
   END POLICY

   POLICY "Custom Internet History Folder"
   PART "Path to User's Internet History Folder"
EDITTEXTREQUIREDEXPANDABLETEXT
   DEFAULT "Z:\History"
   VALUENAME "History"
   END PART
   END POLICY

   POLICY "Custom My Documents Folder"
   PART "Path to User's My Documents Folder"
EDITTEXTREQUIREDEXPANDABLETEXT
   DEFAULT "Z:\Documents"
   VALUENAME "Personal"
   END PART
   END POLICY


END CATEGORY ;Custom Folder Redirection
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Abnormal Windows behaviour with Samba

2007-05-31 Thread Erebus


Chris Smith-16 wrote:
> 
> I believe modern Windows versions use DNS first, then WINS. IMO, a modern 
> Samba network should have both WINS and DNS resolution for all systems.
> 

I really agree about the WINS part - that's why I prefer enabling this
functionality in Samba. It seems that it resolves a lot of issues in
general. However what do you mean by DNS? Do you believe that I have to
install Bind on my server and create zone files for each terminal? If this
is the case, what would be a sample configuration for each zone? I have only
installed Bind for real domains.. Can I create zones without TLDs (i.e. just
PC-01)? If a fake TLD is needed, do I have to call the server's share using
this TLD (i.e. \\server.tld\share\whatever)? Explain this please, as it's a
little confusing to me...


Chris Smith-16 wrote:
> 
> Use "ipconfig /all" on the clients to make sure they are configured as you 
> believe. Check your WINS database and see if all the systems are properly 
> registered. Check the nmbd logs for possible clues (such as making sure
> your 
> server is the local master browser). Check the smbd logs for possible
> clues 
> (network issues, etc.). Check (by temporarily disabling) that some AV 
> software on the clients isn't causing an issue (automatic updates for one
> can 
> take a lot of system time at boot).
> 

I will do so in the afternoon and I will post the results.


Chris Smith-16 wrote:
> 
> Also when using user and group names in smb.conf it's a good idea (and 
> mandatory in some cases) to fully qualify the names as DOMAINNAME\username
> or 
> DOMAINNAME\groupname, ex: X-NET\x-admin, X-NET\erebus, etc.
> 

Is this also the case if Samba is not configured as a PDC, but just as a
workgroup server? I don't use a domain in my configuration.

Thank you very much for your response, I really appreciate it.

Best regards,

Konstantinos
-- 
View this message in context: 
http://www.nabble.com/Abnormal-Windows-behaviour-with-Samba-tf3821648.html#a10892296
Sent from the Samba - General mailing list archive at Nabble.com.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Pkg-samba-maint] [Samba] Binary_Packages/Debian

2007-05-31 Thread Jelmer Vernooij
Christian Perrier wrote:
> All this should make both packaging styles to converge together and,
> ideally, the DEB files published on samba.org could then be simple
> backports of the packages in Debian unstable.
> 
> The major obstacle to this are the patches we use. Just after SambaXP,
> I and Steve Langasek examined all of them and commented them. Several
> are marked "forward upstream" so it's just a matter of time for us to
> recover from the recent security fixes/release hype (and the
> associated bug reports mini-flood) and come back at you discussing
> about these patches.
I've committed most that were marked as "forward upstream" a couple of
weeks ago, except for the famous "fix FHS" one and some smbfs stuff.

Cheers,

Jelmer
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SAMBA as PDC - Pls Help!

2007-05-31 Thread Shaochun Wang
If your domain crosses multiple subnets, you'll need WINS server.
Furthermore, you also need the samba PDC machine becoming the main
browser list machine for the subnets. So add the following in your samba
configure:

wins support = yes

remote announce = 


On Tue, May 08, 2007 at 06:58:46PM -0700, chris reyes wrote:
> 
> Hello guys!
> 
> I'm newbie in Linux and particularly in SAMBA.  You can call me
> Microsoft centric but am veering away with MS and so my boss who wishes
> for me to establish a SAMBA PDC Server who will authenticate users,

-- 
Shaochun Wang(王绍春) <[EMAIL PROTECTED]>
PH.D Candidate
State Key Laboratory of Computer Science,
Institute of Software,
Chinese Academy of Sciences
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] need help with group mapping!

2007-05-31 Thread Urs Golla

Hello

I really need help with the group mapping stuff on AIX!

I have domain user A which is member of domain group B. And I have a
local group C.
What I want to do now is: if A maps a smb-share, he should be a member
of group C. Is such a mapping possible?

cheers
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba