Re: [Samba] Samba 3.0.26a Available for Download

2007-09-12 Thread Mogens Kjaer
Guillermo Gutierrez wrote:
> What about debian packages?

Never tried it, but you might want to look
in the folder packaging/Debian in the source
tree.

Mogens

-- 
Mogens Kjaer, Carlsberg A/S, Computer Department
Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark
Phone: +45 33 27 53 25, Fax: +45 33 27 47 08
Email: [EMAIL PROTECTED] Homepage: http://www.crc.dk
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Recycle bin in 2.2.5

2007-09-12 Thread Tim Bates

Terry VanDerMaarel wrote:
Yeah, yeah, I know v2.2.x is no longer supported. However, I have a 
stable running release of this and would rather not upgrade, but I 
need to add a recycle bin. I have successfully added a recycle bin to 
a v3.0.10 release and am wondering when the 'vfs objects = recycle' 
option was introduced. Do I need to upgrade?
It appears it was present as far back as 2.2.5, though I can't find an 
exact version when it was introduced.
You probably don't have to upgrade, but it might be a good idea to 
consider it anyway.


TB

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Integrating Win2k3 into Samba PDC (on OSX 10.4.10)

2007-09-12 Thread Jesse Gilbert
 I have a problem related to what I thought would be a fairly simple
procedure.

We have a working OSX Server 10.4.10 Open Directory system, with Windows
Services enabled via Samba as a PDC. We have joined approximately 20 WinXP
workstations to the Samba domain, and OD users can log into these systems as
expected (i.e. authentication works).

I have a Win2K3 server that was recently purchased and running the File
Server role. We have it joined as a member server to the OD PDC. I want to
set up the Windows Home and Profile directories so that they are located on
the Win2K3 server. File sharing is set up on the Win2k3 server and share
points are valid for local server users (verified via Windows Explorer).

When I log in to the XP workstation (using an account that has its home dir
and profile pointed to the Win2k3 shares) I am told that the user's profile
can't be found. Trying to manually navigate to the share points via the Win
Explorer or via DOS prompt fails, with an error message about a failed RPC
call and a possible permissions issue. The share points both are exported
for "Everyone" with read/write access.

Is it even possible to mount a Win2k3 share using a Samba domain user
account?

I did test this over the summer and everything appeared to work. Of course
now that I want to put this into production it's failing... Confused

Any help or insight would be much appreciated.
Thanks, jg
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Recycle bin in 2.2.5

2007-09-12 Thread Terry VanDerMaarel
Yeah, yeah, I know v2.2.x is no longer supported. However, I have a 
stable running release of this and would rather not upgrade, but I need 
to add a recycle bin. I have successfully added a recycle bin to a 
v3.0.10 release and am wondering when the 'vfs objects = recycle' option 
was introduced. Do I need to upgrade?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Job Opportunity: Sysadmin

2007-09-12 Thread Joel Braverman
The position is located in the area of Santa Cruz, California.

*Strong systems knowledge of Linux operating systems, especially SUSE 10.2
*Strong understanding of network protocols and internet security
*Configuration of Linux LDAP, firewalls, VPN, Samba, Primary Domain 
Controllers
*Strong knowledge of Windows and Macintosh operating systems
*Configuration and maintenance of company server computers.
*Configuration and maintenance of desktop computers.
*Configuration and maintenance of company computer network.
*Ability to learn and apply new technologies quickly.
*Ability to work well with others is important.
*Ability to work independently, guiding projects to completion
*Understanding of email routing, firewalls, tcp/ip

Responsibilities may include:

*Evaluation, recommendation, purchasing of computer related equipment
*Regular backups of all computer systems in company.
*Desktop Support for Windows and Macintosh workstations, Microsoft Outlook

Pluses would include:

*Experience with Retrospect backup server / client software
*Some experience with PHP/MySQL
*Experience with Postfix, Kerio Mail Server
*Experience with CVS, SubVersion
*A personal interest in digital audio and recording technology.

Please send your resume to [EMAIL PROTECTED], include your salary requirments,
note that we are a small company in the audio/recording technology market.

Lack of experience in one or more areas listed above will
not disqualify the right person.

Thanks,

Joel Braverman

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.26a Available for Download

2007-09-12 Thread Dimitri Yioulos
On Wednesday 12 September 2007 5:22 pm, Guillermo Gutierrez wrote:
> Ok, I am trying again with the sernet instructions on
> enterprisesamba.com, this time aptitude is telling me that there is no
> public key for the site.
>
> Can I still install from here? Or do I need to add the key, if so where
> do I get it from?
>
> Guillermo Gutierrez
> Network Administrator
> Market Scan Information Systems, Inc.
> (818) 575-2017
> (818) 324-0871
> [EMAIL PROTECTED]
>
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Dimitri Yioulos
> Sent: Wednesday, September 12, 2007 7:53 AM
> To: samba@lists.samba.org
> Subject: Re: [Samba] Samba 3.0.26a Available for Download
>
> On Tuesday 11 September 2007 8:44 pm, Josh Kelley wrote:
> > On 9/11/07, Ed Kasky <[EMAIL PROTECTED]> wrote:
> > > Not being as adept at building rpm's as I could be if I had the time
> > > to learn it, is there any supporting documentation anywhere that
> > > describes how to go about converting from an rpm install to
> > > installing from src?
> > >
> > > Or is it easier/preferred/better to stick with the rpm's and build
> > > them from the src?
> >
> > I strongly prefer using RPMs on an RPM-based system; I think that
> > there are a lot of advantages to letting the package manager know
> > about all of the software installed on my systems.  For example, it
> > lets you easily switch back and forth between a version that you build
> > yourself and one that's provided by the vendor, and it lets you more
> > easily install and upgrade software across multiple computers.
> >
> > Building RPMs yourself in this case is quite easy:
> >
> > Set up your RPM build environment.  Instructions are available online
> > from several places;
> > http://www.city-fan.org/tips/CreateRPMBuildEnvironment appears to be a
> > good set of instructions.
> >
> > Next, download the SRPM (.src.rpm file) from the Samba site
> > (http://www.samba.org/samba/ftp/Binary_Packages/Fedora/SRPMS/).
> > Although the directory is labeled Fedora, it works quite well for RHEL
> > and CentOS too.
> >
> > Finally, run "rpmbuild --rebuild samba.src.rpm".  The resulting RPMs
> > will be placed in ~/rpmbuild/RPMS.
> >
> > Another poster mentioned sernet's RPMs.  I personally prefer to use
> > the ones from Samba's web site for Fedora / RHEL / CentOS, since their
> > packaging more closely matches RHEL's, but your mileage may vary.
> >
> > Josh Kelley
> > --
>
> Just to point out, it looks like the samba team officially blesses the
> sernet
> RPMs, as from the samba web site:
>
> "http://enterprisesamba.com/  offers Samba packages for SLES, RHEL, and
> Debian."
>
> That's good enough for me.  But, to each his/her own.
>
> Dimitri
>
>

Why not simply DL the RPMs and install them?

Dimitri

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba 3.0.26a Available for Download

2007-09-12 Thread Guillermo Gutierrez
Ok, I am trying again with the sernet instructions on
enterprisesamba.com, this time aptitude is telling me that there is no
public key for the site.

Can I still install from here? Or do I need to add the key, if so where
do I get it from?

Guillermo Gutierrez
Network Administrator
Market Scan Information Systems, Inc.
(818) 575-2017
(818) 324-0871
[EMAIL PROTECTED]


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Dimitri Yioulos
Sent: Wednesday, September 12, 2007 7:53 AM
To: samba@lists.samba.org
Subject: Re: [Samba] Samba 3.0.26a Available for Download

On Tuesday 11 September 2007 8:44 pm, Josh Kelley wrote:
> On 9/11/07, Ed Kasky <[EMAIL PROTECTED]> wrote:
> > Not being as adept at building rpm's as I could be if I had the time
> > to learn it, is there any supporting documentation anywhere that
> > describes how to go about converting from an rpm install to
> > installing from src?
> >
> > Or is it easier/preferred/better to stick with the rpm's and build
> > them from the src?
>
> I strongly prefer using RPMs on an RPM-based system; I think that
> there are a lot of advantages to letting the package manager know
> about all of the software installed on my systems.  For example, it
> lets you easily switch back and forth between a version that you build
> yourself and one that's provided by the vendor, and it lets you more
> easily install and upgrade software across multiple computers.
>
> Building RPMs yourself in this case is quite easy:
>
> Set up your RPM build environment.  Instructions are available online
> from several places;
> http://www.city-fan.org/tips/CreateRPMBuildEnvironment appears to be a
> good set of instructions.
>
> Next, download the SRPM (.src.rpm file) from the Samba site
> (http://www.samba.org/samba/ftp/Binary_Packages/Fedora/SRPMS/).
> Although the directory is labeled Fedora, it works quite well for RHEL
> and CentOS too.
>
> Finally, run "rpmbuild --rebuild samba.src.rpm".  The resulting RPMs
> will be placed in ~/rpmbuild/RPMS.
>
> Another poster mentioned sernet's RPMs.  I personally prefer to use
> the ones from Samba's web site for Fedora / RHEL / CentOS, since their
> packaging more closely matches RHEL's, but your mileage may vary.
>
> Josh Kelley
> --

Just to point out, it looks like the samba team officially blesses the
sernet 
RPMs, as from the samba web site:

"http://enterprisesamba.com/  offers Samba packages for SLES, RHEL, and 
Debian."

That's good enough for me.  But, to each his/her own.

Dimitri



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] [solved]: Re: can't add machine to domain after samba update

2007-09-12 Thread Janicko Zeppelin
Hi all

If someone will have this problem we found solution for us.

When we updated samba to newer version we had problem with one
application. We was try some configuration options and we use:
ldapsam:trusted = yes

Now we try comment this option and after samba restart we don't have any
problem with add machine to domain.

Regards,

Janicko Zeppelin wrote:
> Hi all.
>
> We have big problem with adding new machine to our domain.
> 2 weeks ago we upgrade our machine to Debian 4 (etch). Than we automatic
> update our samba to version 3.0.24 (from debian package).
> We use LDAP backend for samba.
>
> When we try add Windows XP or Windows 2000 to our domain, we got this
> error message on client:
> Security database is corrupted.
> On server we have in log file log.smbd this error messages:
>
> [2007/09/06 22:06:46, 1]
> passdb/pdb_ldap.c:ldapsam_enum_group_memberships(2582)
>   Unable to find the member's gid!
> [2007/09/06 22:06:46, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>   pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2007/09/06 22:06:46, 0] auth/auth_sam.c:check_sam_security(352)
>   check_sam_security: make_server_info_sam() failed with
> 'NT_STATUS_INTERNAL_DB_CORRUPTION'
> [2007/09/06 22:06:46, 3] auth/auth_winbind.c:check_winbind_security(80)
>   check_winbind_security: Not using winbind, requested domain
> [ourdomain] was for this SAM.
> [2007/09/06 22:06:46, 2] auth/auth.c:check_ntlm_password(319)
>   check_ntlm_password:  Authentication for user [administrator] ->
> [user] FAILED with error NT_STATUS_INTERNAL_DB_CORRUPTION
> [2007/09/06 22:06:46, 3] smbd/error.c:error_packet(146)
>   error packet at smbd/sesssetup.c(99) cmd=115 (SMBsesssetupX)
> NT_STATUS_INTERNAL_DB_CORRUPTION
>
> After samba update we had some problem with groups in LDAP and we need
> change last 3 digits in our samba groups SID. For ou=Computers we use
> group "Domain Computers" with gid 553.
>
> Thank you for any answer.
>
> Regards
>
> Janicko
>
>   

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Timezone confusion: net time \\server ...

2007-09-12 Thread Michael Schmitt
Sorry... as I rechecked everything again, I found that the "change
summer / wintertime automatically" was not set at the clients side,
sorry for this.

regards
Michael

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] AD authentication

2007-09-12 Thread Kevin R. Gutch
I am preparing to install samba with using AD  authentication. I have 
done this once before.


I noticed however on this install that smbd -b | grep LDAP does not 
produce the following: " HAVE_LDAP_DOMAIN2HOSTLIST"


Will this cause issues?

Thanks,
Kevin
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [samba] TRUSTS - The conflicting domain portions are not supported for NETLOGON calls

2007-09-12 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Gerald (Jerry) Carter wrote:
> Daniel Wilson wrote:
>> My Windows XP machine is in the Windows 2003 DomainB, and the users home
>> areas are in the Samba DomainA.
> 
>> When i try to access the users home areas i get this error in the Samba
>> log.smbd ???
> 
>> [2007/09/11 16:58:59, 2] auth/auth.c:check_ntlm_password(309)
>>  check_ntlm_password:  authentication for user [ws0dwi] -> [ws0dwi] ->
>> [ws0dwi] succeeded
>> [2007/09/11 16:58:59, 1]
>> rpc_server/srv_netlog_nt.c:_net_sam_logon_internal(1004)
>>  _net_sam_logon: user DomainB\ws0dwi has user sid
>> S-1-5-21-096750-1475201110-303849303-1131
>>   but group sid S-1-5-21-8923-2461359520-1342846908-513.
>>  The conflicting domain portions are not supported for NETLOGON calls
> 
> We (I) don't support trusts on a Samba DC without running Winbind.

So does this mean if I have two domain controllers, A and B, and I want
all A users to be able to log into B machines, and vice-versa, I must
use Winbind? I thought that was what the add user script parameter was
for? Or has this changed in recent versions?

(I ask, primarily, because the cross domain logins seem to only
occasionally work as they are at present).

- --
  _  _ _  _ ___  _  _  _
 |Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Systems Programmer II
 |$&| |__| |  | |__/ | \| _| |[EMAIL PROTECTED] - 973/972.0922 (2-0922)
 \__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG6DbVmb+gadEcsb4RAtCOAJ0Ut8hDNP3CbTDC9hf6yFUpRBuuAgCfdgEg
f8RApoOsoA1LKPMSLwvZ1Ng=
=UCEk
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: samba 3 by example addendum / suggestion, was: Re: [Samba] user / machine / group scripts, some work some don't

2007-09-12 Thread Michael Schmitt
Hi Helmut (greetings on top is ok? ;)

Am Mittwoch, den 12.09.2007, 08:20 +0200 schrieb Helmut Hullen:
> Hallo, Michael,
> 
> Du (mschmitt) meintest am 12.09.07:
> 
> > As I want it to be proofread by some folks, I think writing it as
> > plain text and later on converting it to xml would be better?
> 
> > P.S.: oops... did not notice I did send the mail to you and not to
> > the list, sorry for that
> 
> > Am Dienstag, den 11.09.2007, 19:17 -0500 schrieb John H Terpstra:
> >> On Tuesday 11 September 2007 18:25, Michael Schmitt wrote:
> >>> Hi John, hi list (your opinion too please)
> 
> [etc. - 13 kByte following]
> 
> Please don't toppost!

Sorry... my bad. I hope I will remember that.


> Viele Gruesse!
> Helmut

regards
Michael

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Step By Step PDC with OpenLDAP?

2007-09-12 Thread Kevin R. Gutch
I am preparing to install samba with using AD  authentication. I have 
done this once before.


I noticed however on this install that smbd -b | grep LDAP does not 
produce the following: " HAVE_LDAP_DOMAIN2HOSTLIST"


Will this cause issues?

Thanks,
Kevin
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Step By Step PDC with OpenLDAP?

2007-09-12 Thread Joel Braverman
Thanks to all who responeded for the very helpful suggestions.

Joel

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Timezone confusion: net time \\server ...

2007-09-12 Thread Michael Schmitt
Hi list,

I am a bit confused how the time sync between samba and windows should
be done correctly.
On the samba server I have set the CMOS time to GMT (UTC) and my
timezone is UTC+2 (germany). On windows the CMOS time is set to my
timezone (windows can't handle UTC, did that change? XP here, but
dualboot to linux) and as I issue net time \\server /set /YES it sets
the time but minus one hour... how come? I did not find a solution on
the net, nor in the docs. I did found some threads about this, but as
here all seems to be set up correctly I am a bit lost. Any ideas?

regards
Michael

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] 3.0.26a - sernet packages

2007-09-12 Thread Guillermo Gutierrez
I am having trouble getting the sernet samba packages to work for ubuntu
7.04, are they compatible? I tried following the directions but
"aptitude upgrade" gives me un-met dependency issues. Running 'aptitude
-f install' removed my samba installation so now I have to redo it.

 

If it is not possible to use those packages for ubuntu feisty, please
let me know and I will just have to resort to building /installing it
from source.

 

Thanks,

 

Guillermo Gutierrez

Network Administrator

Market Scan Information Systems, Inc.

(818) 575-2017

(818) 324-0871

[EMAIL PROTECTED]

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problems with BDC-Samba starting with version 3.0.25

2007-09-12 Thread Thomas Blank
I'm running Samba on Solaris 10 Sparc for about one year now (version 3.0.22 
and then updated to 3.0.24). It acts as a BDC.
Now, after updating to 3.0.25c some users cannot log in.
I'm getting this error:
  domain_client_validate: unable to validate password for user myuser in domain 
MYDOMAIN to Domain controller MYPDC. Error was NT_STATUS_NO_SUCH_USER.

The difference between the users is, that one are working on a desktop computer 
logging in to the domain on startup, the other ones are working on a notebook 
not logging in to the domain initially. They use local username and password 
matching the entries in the domain.

No problem so far with 3.0.24 - connecting the shares worked fine. Starting 
with with 3.0.25 it fails.
If I connect the share manually using "net use X: \\mysamba\myshare" and 
specifying "MYDOMAIN\myuser" and password, it works.

What has changed? What am I doing wrong?
If you need the config and/or build options, let me know.

Thanks for your help!
Thomas
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.26a Available for Download

2007-09-12 Thread Dimitri Yioulos
On Tuesday 11 September 2007 8:44 pm, Josh Kelley wrote:
> On 9/11/07, Ed Kasky <[EMAIL PROTECTED]> wrote:
> > Not being as adept at building rpm's as I could be if I had the time
> > to learn it, is there any supporting documentation anywhere that
> > describes how to go about converting from an rpm install to
> > installing from src?
> >
> > Or is it easier/preferred/better to stick with the rpm's and build
> > them from the src?
>
> I strongly prefer using RPMs on an RPM-based system; I think that
> there are a lot of advantages to letting the package manager know
> about all of the software installed on my systems.  For example, it
> lets you easily switch back and forth between a version that you build
> yourself and one that's provided by the vendor, and it lets you more
> easily install and upgrade software across multiple computers.
>
> Building RPMs yourself in this case is quite easy:
>
> Set up your RPM build environment.  Instructions are available online
> from several places;
> http://www.city-fan.org/tips/CreateRPMBuildEnvironment appears to be a
> good set of instructions.
>
> Next, download the SRPM (.src.rpm file) from the Samba site
> (http://www.samba.org/samba/ftp/Binary_Packages/Fedora/SRPMS/).
> Although the directory is labeled Fedora, it works quite well for RHEL
> and CentOS too.
>
> Finally, run "rpmbuild --rebuild samba.src.rpm".  The resulting RPMs
> will be placed in ~/rpmbuild/RPMS.
>
> Another poster mentioned sernet's RPMs.  I personally prefer to use
> the ones from Samba's web site for Fedora / RHEL / CentOS, since their
> packaging more closely matches RHEL's, but your mileage may vary.
>
> Josh Kelley
> --

Just to point out, it looks like the samba team officially blesses the sernet 
RPMs, as from the samba web site:

"http://enterprisesamba.com/  offers Samba packages for SLES, RHEL, and 
Debian."

That's good enough for me.  But, to each his/her own.

Dimitri



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba user Modify passwords on Windows 2003 Enterprise

2007-09-12 Thread Admins Medias

Hi

I have installed a Samba/Openldap serveur for my domain. All user under
Windows XP can modify their password and all user under Linux can also
modiy their password. But all user on Windows 2003 serveur (with TSE)
can't modify password, the messages is the serveur can't find my domain.

thank for your help

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba 3.0.26a Available for Download

2007-09-12 Thread Guillermo Gutierrez
What about debian packages? I get dependency errors trying to install
the sernet binaries. Any steps for creating debian packages from source?

Guillermo Gutierrez
Network Administrator
Market Scan Information Systems, Inc.
(818) 575-2017
(818) 324-0871
[EMAIL PROTECTED]

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Mogens Kjaer
Sent: Tuesday, September 11, 2007 11:52 PM
To: [EMAIL PROTECTED]
Subject: Re: [Samba] Samba 3.0.26a Available for Download

Ed Kasky wrote:
...
> In your migration back to src, any special considerations?  Or will
you
> just remove the rpm and install from the src?  Any considerations for
> the smb.conf?  I can't think of any off hand myself, but thought I'd
put
> it out on the list just in case...

This is what I do (CentOS 5):

1. Get the samba source
2. Unpack
3. cd samba-xxx/packaging/RHEL
4. ./makerpms.sh
5. cd /usr/src/redhat/RPMS/x86_64
6. rpm -Uvh samba...

In this way I get to use the latest samba source
without breaking the rpm setup.

Mogens

-- 
Mogens Kjaer, Carlsberg A/S, Computer Department
Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark
Phone: +45 33 27 53 25, Fax: +45 33 27 47 08
Email: [EMAIL PROTECTED] Homepage: http://www.crc.dk
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Default User not used correctly?

2007-09-12 Thread dahopkins
I have a very bizarre issue with Default User.  I am running the latest version 
of Samba.  I have created the netlogon share, and have added a Default User 
profile to it.  I have Windows Server 2003 member server that is part of the 
domain.  The exact same Default User profile is also located in Documents and 
Settings on this 2003 server.  However, when users log on for the first time,  
sometimes they get the Default User settings, and sometimes they do not.

I can manually go to the profiles directory on the samba server, delete the 
stored profile there, then delete the local copy on the 2003 server, and login 
again with the same account and it is 50/50 if the Default User profile is 
used. 

As an additional confusion, any changes made to the user's profile also may or 
may not be present at the next logon.

I have no idea why.  Using a Windows 2000 server, this worked well, with 
Windows 2003, it doesn't

Sincerely,
Dave Hopkins
Newark Charter School
Newark Del 19713
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Step By Step PDC with OpenLDAP?

2007-09-12 Thread dahopkins
You might have some success using the script found at the link below to set up 
smb/ldap, this is used by those of us using the K12LTSP distribution.

http://www.vcsvikings.org/docuwiki/cgi-bin/moin.cgi/

Sincerely,
Dave Hopkins

 -- Original message --
From: "Joel Braverman" <[EMAIL PROTECTED]>
> Hello,
> 
> We had a linux guy here working on this in his busy schedule, but ultimately, 
> he 
> was unable to make it work before he left the department. 
> 
> Is there a good doc that will help someone without much linux experience 
> other 
> than lots of /etc/init.d/servicename restart, using vi to edit the 
> named.zones 
> DNS entries and other similar stuff to configure an existing Samba server as 
> a 
> PDC with OpenLDAP for single sign-on?
> 
> This is on OpenSUSE 10.2
> 
> Thanks,
> 
> Joel
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Step By Step PDC with OpenLDAP?

2007-09-12 Thread Martin Collins
Hi Joel,

This is a setup I use and anyone looking to start learning about it, just like 
Adam said the Samba-3 by example is a fantastic starting place and reference 
book. I have a hard copy here along with what I believe is another essential: 
LDAP System Administration (O'Reilly). These two books work very well with each 
other and get you through the process quite nicely. 

Kind Regards,
Martin

.

Martin Collins
Systems Specialist
Escape Studios
+44 (0) 20 7348 1920
www.escapestudios.co.uk


-Original Message-
From: Joel Braverman [mailto:[EMAIL PROTECTED] 
Sent: 12 September 2007 01:35
To: samba@lists.samba.org
Subject: [Samba] Step By Step PDC with OpenLDAP?

Hello,

We had a linux guy here working on this in his busy schedule, but ultimately, 
he was unable to make it work before he left the department.

Is there a good doc that will help someone without much linux experience other 
than lots of /etc/init.d/servicename restart, using vi to edit the named.zones 
DNS entries and other similar stuff to configure an existing Samba server as a 
PDC with OpenLDAP for single sign-on?

This is on OpenSUSE 10.2

Thanks,

Joel



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [samba] TRUSTS - The conflicting domain portions are not supported for NETLOGON calls

2007-09-12 Thread Daniel Wilson

Thanks Jerry,

yes i needed to run winbind and also add this to my smb.conf.

idmap backend = ldap:ldap://vila.sunderland.ac.uk
idmap uid = 1-15000
idmap gid = 1-15000
ldap idmap suffix = ou=groups,ou=filestore,dc=sunderland,dc=ac,dc=uk

Daniel Wilson
Systems Manager
Information Technology Services
Student and Learning Support

University of Sunderland
Unit 1, Technology Park
Chester Road
Sunderland, SR2 7PT

Tel: 0191 515 2695
Mobile: 07818 454198



Gerald (Jerry) Carter wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Daniel Wilson wrote:
  

My Windows XP machine is in the Windows 2003 DomainB, and the users home
areas are in the Samba DomainA.

When i try to access the users home areas i get this error in the Samba
log.smbd ???

[2007/09/11 16:58:59, 2] auth/auth.c:check_ntlm_password(309)
 check_ntlm_password:  authentication for user [ws0dwi] -> [ws0dwi] ->
[ws0dwi] succeeded
[2007/09/11 16:58:59, 1]
rpc_server/srv_netlog_nt.c:_net_sam_logon_internal(1004)
 _net_sam_logon: user DomainB\ws0dwi has user sid
S-1-5-21-096750-1475201110-303849303-1131
  but group sid S-1-5-21-8923-2461359520-1342846908-513.
 The conflicting domain portions are not supported for NETLOGON calls



We (I) don't support trusts on a Samba DC without running Winbind.






cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
"What man is a man who does not make the world better?"  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG5tPHIR7qMdg1EfYRAjTMAJ9cGoVMDrGxRj9bSsv0+qRZyWv3cwCfRNZ3
daSTBHy4HtLuo+chFY9hgZI=
=6t/a
-END PGP SIGNATURE-

  


smime.p7s
Description: S/MIME Cryptographic Signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Clearing account lockout

2007-09-12 Thread Gareth Cummings

The following will reset the flags to the default setting clearing the lock:

pdbedit -r -c "[]" administrator

Gaiseric Vandal wrote:

I recently am migrating my PDC from NT4 to Samba 3.025.  Apparently due to a
mismatch between the capitalization of the Windows account and the Unix
account (Administrator vs administrator) I managed to lock the account
before catching the discrepenacy.

# pdbedit -v administrator
Unix username:Administrator
NT username:  Administrator
Account Flags:[ULX 
Bad password count  : 5 



I reset the bad password count"  field with the following command 
	pdbedit -z -u administrator


However, the account is still locked and I can not clear the lock (X) flag.

# pdbedit -v administrator
Unix username:Administrator
NT username:  Administrator
Account Flags:[ULX 
Bad password count  : 5  


# pdbedit -z -u administrator
pdb_update_autolock_flag: Account Administrator administratively locked out
with
 no bad password time. Leaving locked out.

# pdbedit -c [UX administrator
pdb_update_autolock_flag: Account Administrator administratively locked out
with
 no bad password time. Leaving locked out.
Can only set [NDHLX] flags


Resetting the lockout duration doesn't help either

# pdbedit -P "lockout duration" -C 5
account policy "lockout duration" description: Lockout duration in minutes
(defa
ult: 30, -1 => forever)
account policy "lockout duration" value was: 30
account policy "lockout duration" value is now: 5


Any ideas?

I added a 2nd account to the unix "DomainAdmins" group (which is mapped to
the windows group) but that doesn't seem to give automatically add it to the
NT "Domain Admins" group .  This group had been in the Domain Admins group
on the NT4 machine.

Thanks 





  

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Winbind Join AD 2003 failled, why ?

2007-09-12 Thread calvano69
Hi

now, i have resolved the dns problems ;=) thanks
i have change order into smb.conf for put lmhost.

But now, i have a new problems:

Sep 12 10:10:03 gw net:   kerberos_kinit_password [EMAIL PROTECTED] failed: 
Client not found in Kerberos database
Sep 12 10:10:03 gw net: [2007/09/12 10:10:03, 0] 
utils/net_ads.c:ads_startup(191)
Sep 12 10:10:03 gw net:   ads_connect: Client not found in Kerberos database



Anyone know this error ?







> Message du 11/09/07 17:19
> De : "Angelina Paunovic" <[EMAIL PROTECTED]>
> A : [EMAIL PROTECTED]
> Copie à : 
> Objet : Re: [Samba] Winbind Join AD 2003 failled, why ?
>
> email me your config files as well as /etc/host and /etc/nsswitch.conf
> 
> I never used lmhost :)
> 
> @
> 
> On 9/10/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> >
> > Hi
> >
> > thanks for your answer, i have add my server into /etc/hosts and
> > /etc/samba/lmhost but no change:
> >
> >
> > [2007/09/10 22:34:09, 3] libsmb/namequery.c:get_dc_list(1426)
> >   get_dc_list: preferred server list: ", *"
> > [2007/09/10 22:34:09, 1] libads/dns.c:ads_dns_lookup_srv(260)
> >   ads_dns_lookup_srv: Failed to resolve
> > _ldap._tcp.dc._msdcs.INTRANET.SOCIETY.FR (Succès)
> > [2007/09/10 22:34:09, 4] libsmb/namequery.c:get_dc_list(1454)
> >   get_dc_list: no servers found
> > [2007/09/10 22:34:09, 3] libsmb/namequery.c:get_dc_list(1426)
> >   get_dc_list: preferred server list: ", *"
> > [2007/09/10 22:34:09, 4] libsmb/namequery.c:get_dc_list(1529)
> >   get_dc_list: returning 1 ip addresses in an unordered list
> > [2007/09/10 22:34:09, 4] libsmb/namequery.c:get_dc_list(1530)
> >   get_dc_list: 192.168.16.53:0
> > [2007/09/10 22:34:09, 1] libads/cldap.c:recv_cldap_netlogon(215)
> >   no reply received to cldap netlogon
> > [2007/09/10 22:34:09, 3] libads/ldap.c:ads_try_connect(136)
> >   ads_try_connect: CLDAP request 192.168.16.53 failed.
> > [2007/09/10 22:34:09, 0] utils/net_ads.c:ads_startup(289)
> >   ads_connect: Connexion refusée
> > [2007/09/10 22:34:09, 2] utils/net.c:main(988)
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > > Message du 10/09/07 20:28
> > > De : "Peter Gehirnforce" <[EMAIL PROTECTED]>
> > > A : [EMAIL PROTECTED]
> > > Copie à :
> > > Objet : Re: [Samba] Winbind Join AD 2003 failled, why ?
> > >
> > > this looks like beeing a missing /etc/hosts entry. take a look if your
> > machine name and ip adress are mapped somewhere (LinuxSrv to X.X.X.X).
> > >
> > > this happens because your broadcast is not beeing answered.
> > >
> > > Et voila, tout sera bien.
> > >
> > > gm.
> > >
> > >  Original-Nachricht 
> > > > Datum: Mon, 10 Sep 2007 20:10:22 +0200 (CEST)
> > > > Von: [EMAIL PROTECTED]
> > > > An: samba@lists.samba.org
> > > > Betreff: [Samba] Winbind Join AD 2003 failled, why ?
> > >
> > > >
> > > >
> > > > Hi
> > > >
> > > > i want add my linux server to my Active Directory running on Windows
> > 2003
> > > > Server.
> > > >
> > > > My krb:
> > > >
> > > > [libdefaults]
> > > > default_realm = INTRANET.SOCIETY.FR
> > > >
> > > > [realms]
> > > > INTRANET.SOCIETY.FR = {
> > > > kdc = 192.168.16.1
> > > > kdc = 19.168.16.7
> > > > kpasswd_server = 192.168.16.1
> > > > default_domain = SOCIETY}
> > > >
> > > > [domain_realms]
> > > > .cv216.intranet.society.fr = INTRANET.SOCIETY.FR
> > > > .cv217.intranet.society.fr = INTRANET.SOCIETY.FR
> > > > .intranet.society.fr = INTRANET.SOCIETY.FR
> > > >
> > > > [logging]
> > > > kdc = FILE:/var/log/kerberos/krb5kdc.log
> > > > admin_server = FILE:/var/log/kerberos/kadmin.log
> > > > default = FILE:/var/log/kerberos/krb5lib.log
> > > >
> > > >
> > > > when i test with a:
> > > > kinit [EMAIL PROTECTED] it's correct, that's work.
> > > >
> > > > my smb.conf:
> > > > [global]
> > > >workgroup = SOCIETY
> > > >netbios name = LinxSrv
> > > >server string = LinuxSrv Proxy Server
> > > >
> > > >log file = /var/log/samba/log.%m
> > > >max log size = 500
> > > >log level = 10
> > > >
> > > >map to guest = bad user
> > > >
> > > >security = ads
> > > >realm = INTRANET.SOCIETY.FR
> > > >password server = *
> > > >encrypt passwords = yes
> > > >idmap uid = 1-2
> > > >idmap gid = 1-2
> > > >winbind separator = /
> > > >winbind use default domain = yes
> > > >winbind enum users = yes
> > > >winbind enum groups = yes
> > > >
> > > >encrypt passwords = yes
> > > >smb passwd file = /etc/samba/smbpasswd
> > > >socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> > > >
> > > >interfaces = 192.168.16.58/23
> > > >
> > > >
> > > > when i start join:
> > > > net ads join -U administrateur
> > > >
> > > > i have this error
> > > >
> > > > [EMAIL PROTECTED] etc]# net ads join -U administrateur --debuglevel=4
> > > > [2007/09/10 21:09:30, 3] param/loadparm.c:lp_load(4945)
> > > >   lp_load: refreshing parameters
> > > > 

[Samba] very slow transfer with new version

2007-09-12 Thread AStA Technologiereferat

Hello!
I sat up a new serrver containig the newest Samba version available
through Debian-aptitude.
Server:
   Core 2 Duo E6600 2,4GHz
   2Gbyte RAM, 400GB HDD
   Debain 2.6.18-4-686 #1 SMP Mon Mar 26 17:17:36 UTC 2007 i686
   Samba: 3.0.24-6etch4
Clients:
   Win2k PC with min 1.5GHz and 512MByte RAM, *no* NetBIOS isntalled
   share is used as disk "Z:"

Problem:
Since using the new version of Samba filetransfer is very slow. It came
up wehn unsing a program for generating thumbs of pictures. With the old
version (some very early of 2.x) the same folder took about one minute,
now each picture process (~5MByte) takes one minute!
On accident i found out, the behavior returnes tor nearly reagular speed
when a backgrond-transfer (~1,2GByte file) runs.
Problem is not the used program, same with large pdfs in Acrobat-Reader
and other types.

What I tried is installing NetBIOS on one PC, did not help. Looked up
Firewall-settings, Clients have full access to all ports on the server
(clients and server in same subnet).

Thx for comments.
Mcihael Przysucha.

--
Fachhochschule Osnabrueck | fon  +49 541 969 2118
Allgemeiner Studierendenausschuss | fon  +49 541 642 80
AStA-Technologiereferat   | fax  +49 541 683 904
Büro Standort Westerberg  | mail [EMAIL PROTECTED]
Raum AA0221   | web  www.asta.fh-osnabrueck.de
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.26a Available for Download

2007-09-12 Thread Mogens Kjaer
Ed Kasky wrote:
...
> In your migration back to src, any special considerations?  Or will you
> just remove the rpm and install from the src?  Any considerations for
> the smb.conf?  I can't think of any off hand myself, but thought I'd put
> it out on the list just in case...

This is what I do (CentOS 5):

1. Get the samba source
2. Unpack
3. cd samba-xxx/packaging/RHEL
4. ./makerpms.sh
5. cd /usr/src/redhat/RPMS/x86_64
6. rpm -Uvh samba...

In this way I get to use the latest samba source
without breaking the rpm setup.

Mogens

-- 
Mogens Kjaer, Carlsberg A/S, Computer Department
Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark
Phone: +45 33 27 53 25, Fax: +45 33 27 47 08
Email: [EMAIL PROTECTED] Homepage: http://www.crc.dk
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: samba 3 by example addendum / suggestion, was: Re: [Samba] user / machine / group scripts, some work some don't

2007-09-12 Thread Helmut Hullen
Hallo, Michael,

Du (mschmitt) meintest am 12.09.07:

> As I want it to be proofread by some folks, I think writing it as
> plain text and later on converting it to xml would be better?

> P.S.: oops... did not notice I did send the mail to you and not to
> the list, sorry for that

> Am Dienstag, den 11.09.2007, 19:17 -0500 schrieb John H Terpstra:
>> On Tuesday 11 September 2007 18:25, Michael Schmitt wrote:
>>> Hi John, hi list (your opinion too please)

[etc. - 13 kByte following]

Please don't toppost!

Viele Gruesse!
Helmut
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba