Re: [Samba] Samba 3.0.26a Available for Download
Guillermo Gutierrez wrote: > What about debian packages? Never tried it, but you might want to look in the folder packaging/Debian in the source tree. Mogens -- Mogens Kjaer, Carlsberg A/S, Computer Department Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark Phone: +45 33 27 53 25, Fax: +45 33 27 47 08 Email: [EMAIL PROTECTED] Homepage: http://www.crc.dk -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Recycle bin in 2.2.5
Terry VanDerMaarel wrote: Yeah, yeah, I know v2.2.x is no longer supported. However, I have a stable running release of this and would rather not upgrade, but I need to add a recycle bin. I have successfully added a recycle bin to a v3.0.10 release and am wondering when the 'vfs objects = recycle' option was introduced. Do I need to upgrade? It appears it was present as far back as 2.2.5, though I can't find an exact version when it was introduced. You probably don't have to upgrade, but it might be a good idea to consider it anyway. TB -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Integrating Win2k3 into Samba PDC (on OSX 10.4.10)
I have a problem related to what I thought would be a fairly simple procedure. We have a working OSX Server 10.4.10 Open Directory system, with Windows Services enabled via Samba as a PDC. We have joined approximately 20 WinXP workstations to the Samba domain, and OD users can log into these systems as expected (i.e. authentication works). I have a Win2K3 server that was recently purchased and running the File Server role. We have it joined as a member server to the OD PDC. I want to set up the Windows Home and Profile directories so that they are located on the Win2K3 server. File sharing is set up on the Win2k3 server and share points are valid for local server users (verified via Windows Explorer). When I log in to the XP workstation (using an account that has its home dir and profile pointed to the Win2k3 shares) I am told that the user's profile can't be found. Trying to manually navigate to the share points via the Win Explorer or via DOS prompt fails, with an error message about a failed RPC call and a possible permissions issue. The share points both are exported for "Everyone" with read/write access. Is it even possible to mount a Win2k3 share using a Samba domain user account? I did test this over the summer and everything appeared to work. Of course now that I want to put this into production it's failing... Confused Any help or insight would be much appreciated. Thanks, jg -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Recycle bin in 2.2.5
Yeah, yeah, I know v2.2.x is no longer supported. However, I have a stable running release of this and would rather not upgrade, but I need to add a recycle bin. I have successfully added a recycle bin to a v3.0.10 release and am wondering when the 'vfs objects = recycle' option was introduced. Do I need to upgrade? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Job Opportunity: Sysadmin
The position is located in the area of Santa Cruz, California. *Strong systems knowledge of Linux operating systems, especially SUSE 10.2 *Strong understanding of network protocols and internet security *Configuration of Linux LDAP, firewalls, VPN, Samba, Primary Domain Controllers *Strong knowledge of Windows and Macintosh operating systems *Configuration and maintenance of company server computers. *Configuration and maintenance of desktop computers. *Configuration and maintenance of company computer network. *Ability to learn and apply new technologies quickly. *Ability to work well with others is important. *Ability to work independently, guiding projects to completion *Understanding of email routing, firewalls, tcp/ip Responsibilities may include: *Evaluation, recommendation, purchasing of computer related equipment *Regular backups of all computer systems in company. *Desktop Support for Windows and Macintosh workstations, Microsoft Outlook Pluses would include: *Experience with Retrospect backup server / client software *Some experience with PHP/MySQL *Experience with Postfix, Kerio Mail Server *Experience with CVS, SubVersion *A personal interest in digital audio and recording technology. Please send your resume to [EMAIL PROTECTED], include your salary requirments, note that we are a small company in the audio/recording technology market. Lack of experience in one or more areas listed above will not disqualify the right person. Thanks, Joel Braverman -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.26a Available for Download
On Wednesday 12 September 2007 5:22 pm, Guillermo Gutierrez wrote: > Ok, I am trying again with the sernet instructions on > enterprisesamba.com, this time aptitude is telling me that there is no > public key for the site. > > Can I still install from here? Or do I need to add the key, if so where > do I get it from? > > Guillermo Gutierrez > Network Administrator > Market Scan Information Systems, Inc. > (818) 575-2017 > (818) 324-0871 > [EMAIL PROTECTED] > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Dimitri Yioulos > Sent: Wednesday, September 12, 2007 7:53 AM > To: samba@lists.samba.org > Subject: Re: [Samba] Samba 3.0.26a Available for Download > > On Tuesday 11 September 2007 8:44 pm, Josh Kelley wrote: > > On 9/11/07, Ed Kasky <[EMAIL PROTECTED]> wrote: > > > Not being as adept at building rpm's as I could be if I had the time > > > to learn it, is there any supporting documentation anywhere that > > > describes how to go about converting from an rpm install to > > > installing from src? > > > > > > Or is it easier/preferred/better to stick with the rpm's and build > > > them from the src? > > > > I strongly prefer using RPMs on an RPM-based system; I think that > > there are a lot of advantages to letting the package manager know > > about all of the software installed on my systems. For example, it > > lets you easily switch back and forth between a version that you build > > yourself and one that's provided by the vendor, and it lets you more > > easily install and upgrade software across multiple computers. > > > > Building RPMs yourself in this case is quite easy: > > > > Set up your RPM build environment. Instructions are available online > > from several places; > > http://www.city-fan.org/tips/CreateRPMBuildEnvironment appears to be a > > good set of instructions. > > > > Next, download the SRPM (.src.rpm file) from the Samba site > > (http://www.samba.org/samba/ftp/Binary_Packages/Fedora/SRPMS/). > > Although the directory is labeled Fedora, it works quite well for RHEL > > and CentOS too. > > > > Finally, run "rpmbuild --rebuild samba.src.rpm". The resulting RPMs > > will be placed in ~/rpmbuild/RPMS. > > > > Another poster mentioned sernet's RPMs. I personally prefer to use > > the ones from Samba's web site for Fedora / RHEL / CentOS, since their > > packaging more closely matches RHEL's, but your mileage may vary. > > > > Josh Kelley > > -- > > Just to point out, it looks like the samba team officially blesses the > sernet > RPMs, as from the samba web site: > > "http://enterprisesamba.com/ offers Samba packages for SLES, RHEL, and > Debian." > > That's good enough for me. But, to each his/her own. > > Dimitri > > Why not simply DL the RPMs and install them? Dimitri -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.26a Available for Download
Ok, I am trying again with the sernet instructions on enterprisesamba.com, this time aptitude is telling me that there is no public key for the site. Can I still install from here? Or do I need to add the key, if so where do I get it from? Guillermo Gutierrez Network Administrator Market Scan Information Systems, Inc. (818) 575-2017 (818) 324-0871 [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dimitri Yioulos Sent: Wednesday, September 12, 2007 7:53 AM To: samba@lists.samba.org Subject: Re: [Samba] Samba 3.0.26a Available for Download On Tuesday 11 September 2007 8:44 pm, Josh Kelley wrote: > On 9/11/07, Ed Kasky <[EMAIL PROTECTED]> wrote: > > Not being as adept at building rpm's as I could be if I had the time > > to learn it, is there any supporting documentation anywhere that > > describes how to go about converting from an rpm install to > > installing from src? > > > > Or is it easier/preferred/better to stick with the rpm's and build > > them from the src? > > I strongly prefer using RPMs on an RPM-based system; I think that > there are a lot of advantages to letting the package manager know > about all of the software installed on my systems. For example, it > lets you easily switch back and forth between a version that you build > yourself and one that's provided by the vendor, and it lets you more > easily install and upgrade software across multiple computers. > > Building RPMs yourself in this case is quite easy: > > Set up your RPM build environment. Instructions are available online > from several places; > http://www.city-fan.org/tips/CreateRPMBuildEnvironment appears to be a > good set of instructions. > > Next, download the SRPM (.src.rpm file) from the Samba site > (http://www.samba.org/samba/ftp/Binary_Packages/Fedora/SRPMS/). > Although the directory is labeled Fedora, it works quite well for RHEL > and CentOS too. > > Finally, run "rpmbuild --rebuild samba.src.rpm". The resulting RPMs > will be placed in ~/rpmbuild/RPMS. > > Another poster mentioned sernet's RPMs. I personally prefer to use > the ones from Samba's web site for Fedora / RHEL / CentOS, since their > packaging more closely matches RHEL's, but your mileage may vary. > > Josh Kelley > -- Just to point out, it looks like the samba team officially blesses the sernet RPMs, as from the samba web site: "http://enterprisesamba.com/ offers Samba packages for SLES, RHEL, and Debian." That's good enough for me. But, to each his/her own. Dimitri -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] [solved]: Re: can't add machine to domain after samba update
Hi all If someone will have this problem we found solution for us. When we updated samba to newer version we had problem with one application. We was try some configuration options and we use: ldapsam:trusted = yes Now we try comment this option and after samba restart we don't have any problem with add machine to domain. Regards, Janicko Zeppelin wrote: > Hi all. > > We have big problem with adding new machine to our domain. > 2 weeks ago we upgrade our machine to Debian 4 (etch). Than we automatic > update our samba to version 3.0.24 (from debian package). > We use LDAP backend for samba. > > When we try add Windows XP or Windows 2000 to our domain, we got this > error message on client: > Security database is corrupted. > On server we have in log file log.smbd this error messages: > > [2007/09/06 22:06:46, 1] > passdb/pdb_ldap.c:ldapsam_enum_group_memberships(2582) > Unable to find the member's gid! > [2007/09/06 22:06:46, 3] smbd/sec_ctx.c:pop_sec_ctx(339) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 > [2007/09/06 22:06:46, 0] auth/auth_sam.c:check_sam_security(352) > check_sam_security: make_server_info_sam() failed with > 'NT_STATUS_INTERNAL_DB_CORRUPTION' > [2007/09/06 22:06:46, 3] auth/auth_winbind.c:check_winbind_security(80) > check_winbind_security: Not using winbind, requested domain > [ourdomain] was for this SAM. > [2007/09/06 22:06:46, 2] auth/auth.c:check_ntlm_password(319) > check_ntlm_password: Authentication for user [administrator] -> > [user] FAILED with error NT_STATUS_INTERNAL_DB_CORRUPTION > [2007/09/06 22:06:46, 3] smbd/error.c:error_packet(146) > error packet at smbd/sesssetup.c(99) cmd=115 (SMBsesssetupX) > NT_STATUS_INTERNAL_DB_CORRUPTION > > After samba update we had some problem with groups in LDAP and we need > change last 3 digits in our samba groups SID. For ou=Computers we use > group "Domain Computers" with gid 553. > > Thank you for any answer. > > Regards > > Janicko > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Timezone confusion: net time \\server ...
Sorry... as I rechecked everything again, I found that the "change summer / wintertime automatically" was not set at the clients side, sorry for this. regards Michael -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] AD authentication
I am preparing to install samba with using AD authentication. I have done this once before. I noticed however on this install that smbd -b | grep LDAP does not produce the following: " HAVE_LDAP_DOMAIN2HOSTLIST" Will this cause issues? Thanks, Kevin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [samba] TRUSTS - The conflicting domain portions are not supported for NETLOGON calls
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gerald (Jerry) Carter wrote: > Daniel Wilson wrote: >> My Windows XP machine is in the Windows 2003 DomainB, and the users home >> areas are in the Samba DomainA. > >> When i try to access the users home areas i get this error in the Samba >> log.smbd ??? > >> [2007/09/11 16:58:59, 2] auth/auth.c:check_ntlm_password(309) >> check_ntlm_password: authentication for user [ws0dwi] -> [ws0dwi] -> >> [ws0dwi] succeeded >> [2007/09/11 16:58:59, 1] >> rpc_server/srv_netlog_nt.c:_net_sam_logon_internal(1004) >> _net_sam_logon: user DomainB\ws0dwi has user sid >> S-1-5-21-096750-1475201110-303849303-1131 >> but group sid S-1-5-21-8923-2461359520-1342846908-513. >> The conflicting domain portions are not supported for NETLOGON calls > > We (I) don't support trusts on a Samba DC without running Winbind. So does this mean if I have two domain controllers, A and B, and I want all A users to be able to log into B machines, and vice-versa, I must use Winbind? I thought that was what the add user script parameter was for? Or has this changed in recent versions? (I ask, primarily, because the cross domain logins seem to only occasionally work as they are at present). - -- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Systems Programmer II |$&| |__| | | |__/ | \| _| |[EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFG6DbVmb+gadEcsb4RAtCOAJ0Ut8hDNP3CbTDC9hf6yFUpRBuuAgCfdgEg f8RApoOsoA1LKPMSLwvZ1Ng= =UCEk -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: samba 3 by example addendum / suggestion, was: Re: [Samba] user / machine / group scripts, some work some don't
Hi Helmut (greetings on top is ok? ;) Am Mittwoch, den 12.09.2007, 08:20 +0200 schrieb Helmut Hullen: > Hallo, Michael, > > Du (mschmitt) meintest am 12.09.07: > > > As I want it to be proofread by some folks, I think writing it as > > plain text and later on converting it to xml would be better? > > > P.S.: oops... did not notice I did send the mail to you and not to > > the list, sorry for that > > > Am Dienstag, den 11.09.2007, 19:17 -0500 schrieb John H Terpstra: > >> On Tuesday 11 September 2007 18:25, Michael Schmitt wrote: > >>> Hi John, hi list (your opinion too please) > > [etc. - 13 kByte following] > > Please don't toppost! Sorry... my bad. I hope I will remember that. > Viele Gruesse! > Helmut regards Michael -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Step By Step PDC with OpenLDAP?
I am preparing to install samba with using AD authentication. I have done this once before. I noticed however on this install that smbd -b | grep LDAP does not produce the following: " HAVE_LDAP_DOMAIN2HOSTLIST" Will this cause issues? Thanks, Kevin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Step By Step PDC with OpenLDAP?
Thanks to all who responeded for the very helpful suggestions. Joel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Timezone confusion: net time \\server ...
Hi list, I am a bit confused how the time sync between samba and windows should be done correctly. On the samba server I have set the CMOS time to GMT (UTC) and my timezone is UTC+2 (germany). On windows the CMOS time is set to my timezone (windows can't handle UTC, did that change? XP here, but dualboot to linux) and as I issue net time \\server /set /YES it sets the time but minus one hour... how come? I did not find a solution on the net, nor in the docs. I did found some threads about this, but as here all seems to be set up correctly I am a bit lost. Any ideas? regards Michael -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] 3.0.26a - sernet packages
I am having trouble getting the sernet samba packages to work for ubuntu 7.04, are they compatible? I tried following the directions but "aptitude upgrade" gives me un-met dependency issues. Running 'aptitude -f install' removed my samba installation so now I have to redo it. If it is not possible to use those packages for ubuntu feisty, please let me know and I will just have to resort to building /installing it from source. Thanks, Guillermo Gutierrez Network Administrator Market Scan Information Systems, Inc. (818) 575-2017 (818) 324-0871 [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problems with BDC-Samba starting with version 3.0.25
I'm running Samba on Solaris 10 Sparc for about one year now (version 3.0.22 and then updated to 3.0.24). It acts as a BDC. Now, after updating to 3.0.25c some users cannot log in. I'm getting this error: domain_client_validate: unable to validate password for user myuser in domain MYDOMAIN to Domain controller MYPDC. Error was NT_STATUS_NO_SUCH_USER. The difference between the users is, that one are working on a desktop computer logging in to the domain on startup, the other ones are working on a notebook not logging in to the domain initially. They use local username and password matching the entries in the domain. No problem so far with 3.0.24 - connecting the shares worked fine. Starting with with 3.0.25 it fails. If I connect the share manually using "net use X: \\mysamba\myshare" and specifying "MYDOMAIN\myuser" and password, it works. What has changed? What am I doing wrong? If you need the config and/or build options, let me know. Thanks for your help! Thomas -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.26a Available for Download
On Tuesday 11 September 2007 8:44 pm, Josh Kelley wrote: > On 9/11/07, Ed Kasky <[EMAIL PROTECTED]> wrote: > > Not being as adept at building rpm's as I could be if I had the time > > to learn it, is there any supporting documentation anywhere that > > describes how to go about converting from an rpm install to > > installing from src? > > > > Or is it easier/preferred/better to stick with the rpm's and build > > them from the src? > > I strongly prefer using RPMs on an RPM-based system; I think that > there are a lot of advantages to letting the package manager know > about all of the software installed on my systems. For example, it > lets you easily switch back and forth between a version that you build > yourself and one that's provided by the vendor, and it lets you more > easily install and upgrade software across multiple computers. > > Building RPMs yourself in this case is quite easy: > > Set up your RPM build environment. Instructions are available online > from several places; > http://www.city-fan.org/tips/CreateRPMBuildEnvironment appears to be a > good set of instructions. > > Next, download the SRPM (.src.rpm file) from the Samba site > (http://www.samba.org/samba/ftp/Binary_Packages/Fedora/SRPMS/). > Although the directory is labeled Fedora, it works quite well for RHEL > and CentOS too. > > Finally, run "rpmbuild --rebuild samba.src.rpm". The resulting RPMs > will be placed in ~/rpmbuild/RPMS. > > Another poster mentioned sernet's RPMs. I personally prefer to use > the ones from Samba's web site for Fedora / RHEL / CentOS, since their > packaging more closely matches RHEL's, but your mileage may vary. > > Josh Kelley > -- Just to point out, it looks like the samba team officially blesses the sernet RPMs, as from the samba web site: "http://enterprisesamba.com/ offers Samba packages for SLES, RHEL, and Debian." That's good enough for me. But, to each his/her own. Dimitri -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba user Modify passwords on Windows 2003 Enterprise
Hi I have installed a Samba/Openldap serveur for my domain. All user under Windows XP can modify their password and all user under Linux can also modiy their password. But all user on Windows 2003 serveur (with TSE) can't modify password, the messages is the serveur can't find my domain. thank for your help -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.26a Available for Download
What about debian packages? I get dependency errors trying to install the sernet binaries. Any steps for creating debian packages from source? Guillermo Gutierrez Network Administrator Market Scan Information Systems, Inc. (818) 575-2017 (818) 324-0871 [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mogens Kjaer Sent: Tuesday, September 11, 2007 11:52 PM To: [EMAIL PROTECTED] Subject: Re: [Samba] Samba 3.0.26a Available for Download Ed Kasky wrote: ... > In your migration back to src, any special considerations? Or will you > just remove the rpm and install from the src? Any considerations for > the smb.conf? I can't think of any off hand myself, but thought I'd put > it out on the list just in case... This is what I do (CentOS 5): 1. Get the samba source 2. Unpack 3. cd samba-xxx/packaging/RHEL 4. ./makerpms.sh 5. cd /usr/src/redhat/RPMS/x86_64 6. rpm -Uvh samba... In this way I get to use the latest samba source without breaking the rpm setup. Mogens -- Mogens Kjaer, Carlsberg A/S, Computer Department Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark Phone: +45 33 27 53 25, Fax: +45 33 27 47 08 Email: [EMAIL PROTECTED] Homepage: http://www.crc.dk -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Default User not used correctly?
I have a very bizarre issue with Default User. I am running the latest version of Samba. I have created the netlogon share, and have added a Default User profile to it. I have Windows Server 2003 member server that is part of the domain. The exact same Default User profile is also located in Documents and Settings on this 2003 server. However, when users log on for the first time, sometimes they get the Default User settings, and sometimes they do not. I can manually go to the profiles directory on the samba server, delete the stored profile there, then delete the local copy on the 2003 server, and login again with the same account and it is 50/50 if the Default User profile is used. As an additional confusion, any changes made to the user's profile also may or may not be present at the next logon. I have no idea why. Using a Windows 2000 server, this worked well, with Windows 2003, it doesn't Sincerely, Dave Hopkins Newark Charter School Newark Del 19713 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Step By Step PDC with OpenLDAP?
You might have some success using the script found at the link below to set up smb/ldap, this is used by those of us using the K12LTSP distribution. http://www.vcsvikings.org/docuwiki/cgi-bin/moin.cgi/ Sincerely, Dave Hopkins -- Original message -- From: "Joel Braverman" <[EMAIL PROTECTED]> > Hello, > > We had a linux guy here working on this in his busy schedule, but ultimately, > he > was unable to make it work before he left the department. > > Is there a good doc that will help someone without much linux experience > other > than lots of /etc/init.d/servicename restart, using vi to edit the > named.zones > DNS entries and other similar stuff to configure an existing Samba server as > a > PDC with OpenLDAP for single sign-on? > > This is on OpenSUSE 10.2 > > Thanks, > > Joel > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Step By Step PDC with OpenLDAP?
Hi Joel, This is a setup I use and anyone looking to start learning about it, just like Adam said the Samba-3 by example is a fantastic starting place and reference book. I have a hard copy here along with what I believe is another essential: LDAP System Administration (O'Reilly). These two books work very well with each other and get you through the process quite nicely. Kind Regards, Martin . Martin Collins Systems Specialist Escape Studios +44 (0) 20 7348 1920 www.escapestudios.co.uk -Original Message- From: Joel Braverman [mailto:[EMAIL PROTECTED] Sent: 12 September 2007 01:35 To: samba@lists.samba.org Subject: [Samba] Step By Step PDC with OpenLDAP? Hello, We had a linux guy here working on this in his busy schedule, but ultimately, he was unable to make it work before he left the department. Is there a good doc that will help someone without much linux experience other than lots of /etc/init.d/servicename restart, using vi to edit the named.zones DNS entries and other similar stuff to configure an existing Samba server as a PDC with OpenLDAP for single sign-on? This is on OpenSUSE 10.2 Thanks, Joel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [samba] TRUSTS - The conflicting domain portions are not supported for NETLOGON calls
Thanks Jerry, yes i needed to run winbind and also add this to my smb.conf. idmap backend = ldap:ldap://vila.sunderland.ac.uk idmap uid = 1-15000 idmap gid = 1-15000 ldap idmap suffix = ou=groups,ou=filestore,dc=sunderland,dc=ac,dc=uk Daniel Wilson Systems Manager Information Technology Services Student and Learning Support University of Sunderland Unit 1, Technology Park Chester Road Sunderland, SR2 7PT Tel: 0191 515 2695 Mobile: 07818 454198 Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Daniel Wilson wrote: My Windows XP machine is in the Windows 2003 DomainB, and the users home areas are in the Samba DomainA. When i try to access the users home areas i get this error in the Samba log.smbd ??? [2007/09/11 16:58:59, 2] auth/auth.c:check_ntlm_password(309) check_ntlm_password: authentication for user [ws0dwi] -> [ws0dwi] -> [ws0dwi] succeeded [2007/09/11 16:58:59, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon_internal(1004) _net_sam_logon: user DomainB\ws0dwi has user sid S-1-5-21-096750-1475201110-303849303-1131 but group sid S-1-5-21-8923-2461359520-1342846908-513. The conflicting domain portions are not supported for NETLOGON calls We (I) don't support trusts on a Samba DC without running Winbind. cheers, jerry = Samba--- http://www.samba.org Centeris --- http://www.centeris.com "What man is a man who does not make the world better?" --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFG5tPHIR7qMdg1EfYRAjTMAJ9cGoVMDrGxRj9bSsv0+qRZyWv3cwCfRNZ3 daSTBHy4HtLuo+chFY9hgZI= =6t/a -END PGP SIGNATURE- smime.p7s Description: S/MIME Cryptographic Signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Clearing account lockout
The following will reset the flags to the default setting clearing the lock: pdbedit -r -c "[]" administrator Gaiseric Vandal wrote: I recently am migrating my PDC from NT4 to Samba 3.025. Apparently due to a mismatch between the capitalization of the Windows account and the Unix account (Administrator vs administrator) I managed to lock the account before catching the discrepenacy. # pdbedit -v administrator Unix username:Administrator NT username: Administrator Account Flags:[ULX Bad password count : 5 I reset the bad password count" field with the following command pdbedit -z -u administrator However, the account is still locked and I can not clear the lock (X) flag. # pdbedit -v administrator Unix username:Administrator NT username: Administrator Account Flags:[ULX Bad password count : 5 # pdbedit -z -u administrator pdb_update_autolock_flag: Account Administrator administratively locked out with no bad password time. Leaving locked out. # pdbedit -c [UX administrator pdb_update_autolock_flag: Account Administrator administratively locked out with no bad password time. Leaving locked out. Can only set [NDHLX] flags Resetting the lockout duration doesn't help either # pdbedit -P "lockout duration" -C 5 account policy "lockout duration" description: Lockout duration in minutes (defa ult: 30, -1 => forever) account policy "lockout duration" value was: 30 account policy "lockout duration" value is now: 5 Any ideas? I added a 2nd account to the unix "DomainAdmins" group (which is mapped to the windows group) but that doesn't seem to give automatically add it to the NT "Domain Admins" group . This group had been in the Domain Admins group on the NT4 machine. Thanks -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Winbind Join AD 2003 failled, why ?
Hi now, i have resolved the dns problems ;=) thanks i have change order into smb.conf for put lmhost. But now, i have a new problems: Sep 12 10:10:03 gw net: kerberos_kinit_password [EMAIL PROTECTED] failed: Client not found in Kerberos database Sep 12 10:10:03 gw net: [2007/09/12 10:10:03, 0] utils/net_ads.c:ads_startup(191) Sep 12 10:10:03 gw net: ads_connect: Client not found in Kerberos database Anyone know this error ? > Message du 11/09/07 17:19 > De : "Angelina Paunovic" <[EMAIL PROTECTED]> > A : [EMAIL PROTECTED] > Copie à : > Objet : Re: [Samba] Winbind Join AD 2003 failled, why ? > > email me your config files as well as /etc/host and /etc/nsswitch.conf > > I never used lmhost :) > > @ > > On 9/10/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > > > Hi > > > > thanks for your answer, i have add my server into /etc/hosts and > > /etc/samba/lmhost but no change: > > > > > > [2007/09/10 22:34:09, 3] libsmb/namequery.c:get_dc_list(1426) > > get_dc_list: preferred server list: ", *" > > [2007/09/10 22:34:09, 1] libads/dns.c:ads_dns_lookup_srv(260) > > ads_dns_lookup_srv: Failed to resolve > > _ldap._tcp.dc._msdcs.INTRANET.SOCIETY.FR (Succès) > > [2007/09/10 22:34:09, 4] libsmb/namequery.c:get_dc_list(1454) > > get_dc_list: no servers found > > [2007/09/10 22:34:09, 3] libsmb/namequery.c:get_dc_list(1426) > > get_dc_list: preferred server list: ", *" > > [2007/09/10 22:34:09, 4] libsmb/namequery.c:get_dc_list(1529) > > get_dc_list: returning 1 ip addresses in an unordered list > > [2007/09/10 22:34:09, 4] libsmb/namequery.c:get_dc_list(1530) > > get_dc_list: 192.168.16.53:0 > > [2007/09/10 22:34:09, 1] libads/cldap.c:recv_cldap_netlogon(215) > > no reply received to cldap netlogon > > [2007/09/10 22:34:09, 3] libads/ldap.c:ads_try_connect(136) > > ads_try_connect: CLDAP request 192.168.16.53 failed. > > [2007/09/10 22:34:09, 0] utils/net_ads.c:ads_startup(289) > > ads_connect: Connexion refusée > > [2007/09/10 22:34:09, 2] utils/net.c:main(988) > > > > > > > > > > > > > > > > > > > > > > > Message du 10/09/07 20:28 > > > De : "Peter Gehirnforce" <[EMAIL PROTECTED]> > > > A : [EMAIL PROTECTED] > > > Copie à : > > > Objet : Re: [Samba] Winbind Join AD 2003 failled, why ? > > > > > > this looks like beeing a missing /etc/hosts entry. take a look if your > > machine name and ip adress are mapped somewhere (LinuxSrv to X.X.X.X). > > > > > > this happens because your broadcast is not beeing answered. > > > > > > Et voila, tout sera bien. > > > > > > gm. > > > > > > Original-Nachricht > > > > Datum: Mon, 10 Sep 2007 20:10:22 +0200 (CEST) > > > > Von: [EMAIL PROTECTED] > > > > An: samba@lists.samba.org > > > > Betreff: [Samba] Winbind Join AD 2003 failled, why ? > > > > > > > > > > > > > > > Hi > > > > > > > > i want add my linux server to my Active Directory running on Windows > > 2003 > > > > Server. > > > > > > > > My krb: > > > > > > > > [libdefaults] > > > > default_realm = INTRANET.SOCIETY.FR > > > > > > > > [realms] > > > > INTRANET.SOCIETY.FR = { > > > > kdc = 192.168.16.1 > > > > kdc = 19.168.16.7 > > > > kpasswd_server = 192.168.16.1 > > > > default_domain = SOCIETY} > > > > > > > > [domain_realms] > > > > .cv216.intranet.society.fr = INTRANET.SOCIETY.FR > > > > .cv217.intranet.society.fr = INTRANET.SOCIETY.FR > > > > .intranet.society.fr = INTRANET.SOCIETY.FR > > > > > > > > [logging] > > > > kdc = FILE:/var/log/kerberos/krb5kdc.log > > > > admin_server = FILE:/var/log/kerberos/kadmin.log > > > > default = FILE:/var/log/kerberos/krb5lib.log > > > > > > > > > > > > when i test with a: > > > > kinit [EMAIL PROTECTED] it's correct, that's work. > > > > > > > > my smb.conf: > > > > [global] > > > >workgroup = SOCIETY > > > >netbios name = LinxSrv > > > >server string = LinuxSrv Proxy Server > > > > > > > >log file = /var/log/samba/log.%m > > > >max log size = 500 > > > >log level = 10 > > > > > > > >map to guest = bad user > > > > > > > >security = ads > > > >realm = INTRANET.SOCIETY.FR > > > >password server = * > > > >encrypt passwords = yes > > > >idmap uid = 1-2 > > > >idmap gid = 1-2 > > > >winbind separator = / > > > >winbind use default domain = yes > > > >winbind enum users = yes > > > >winbind enum groups = yes > > > > > > > >encrypt passwords = yes > > > >smb passwd file = /etc/samba/smbpasswd > > > >socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > > > > > > > >interfaces = 192.168.16.58/23 > > > > > > > > > > > > when i start join: > > > > net ads join -U administrateur > > > > > > > > i have this error > > > > > > > > [EMAIL PROTECTED] etc]# net ads join -U administrateur --debuglevel=4 > > > > [2007/09/10 21:09:30, 3] param/loadparm.c:lp_load(4945) > > > > lp_load: refreshing parameters > > > >
[Samba] very slow transfer with new version
Hello! I sat up a new serrver containig the newest Samba version available through Debian-aptitude. Server: Core 2 Duo E6600 2,4GHz 2Gbyte RAM, 400GB HDD Debain 2.6.18-4-686 #1 SMP Mon Mar 26 17:17:36 UTC 2007 i686 Samba: 3.0.24-6etch4 Clients: Win2k PC with min 1.5GHz and 512MByte RAM, *no* NetBIOS isntalled share is used as disk "Z:" Problem: Since using the new version of Samba filetransfer is very slow. It came up wehn unsing a program for generating thumbs of pictures. With the old version (some very early of 2.x) the same folder took about one minute, now each picture process (~5MByte) takes one minute! On accident i found out, the behavior returnes tor nearly reagular speed when a backgrond-transfer (~1,2GByte file) runs. Problem is not the used program, same with large pdfs in Acrobat-Reader and other types. What I tried is installing NetBIOS on one PC, did not help. Looked up Firewall-settings, Clients have full access to all ports on the server (clients and server in same subnet). Thx for comments. Mcihael Przysucha. -- Fachhochschule Osnabrueck | fon +49 541 969 2118 Allgemeiner Studierendenausschuss | fon +49 541 642 80 AStA-Technologiereferat | fax +49 541 683 904 Büro Standort Westerberg | mail [EMAIL PROTECTED] Raum AA0221 | web www.asta.fh-osnabrueck.de -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.26a Available for Download
Ed Kasky wrote: ... > In your migration back to src, any special considerations? Or will you > just remove the rpm and install from the src? Any considerations for > the smb.conf? I can't think of any off hand myself, but thought I'd put > it out on the list just in case... This is what I do (CentOS 5): 1. Get the samba source 2. Unpack 3. cd samba-xxx/packaging/RHEL 4. ./makerpms.sh 5. cd /usr/src/redhat/RPMS/x86_64 6. rpm -Uvh samba... In this way I get to use the latest samba source without breaking the rpm setup. Mogens -- Mogens Kjaer, Carlsberg A/S, Computer Department Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark Phone: +45 33 27 53 25, Fax: +45 33 27 47 08 Email: [EMAIL PROTECTED] Homepage: http://www.crc.dk -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: samba 3 by example addendum / suggestion, was: Re: [Samba] user / machine / group scripts, some work some don't
Hallo, Michael, Du (mschmitt) meintest am 12.09.07: > As I want it to be proofread by some folks, I think writing it as > plain text and later on converting it to xml would be better? > P.S.: oops... did not notice I did send the mail to you and not to > the list, sorry for that > Am Dienstag, den 11.09.2007, 19:17 -0500 schrieb John H Terpstra: >> On Tuesday 11 September 2007 18:25, Michael Schmitt wrote: >>> Hi John, hi list (your opinion too please) [etc. - 13 kByte following] Please don't toppost! Viele Gruesse! Helmut -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba