[Samba] 3.0.26a RPM install on Suse 10.2 Generates Warnings

[David C. Rankin]

Jerry, All:

Don't know what they mean, but... During install of 3.0.26a on opensuse
10.2 libGammu warning were received as follows:

[root
Rankin-P35a:/home/david/Documents/linux/updates/samba/samba-3.0.26a] #
rpm -Uvh *.rpm
warning: cifs-mount-3.0.26a-0.1.82.i586.rpm: Header V3 DSA signature:
NOKEY, key ID 414a57c3
Preparing...###
[100%]
   1:cifs-mount ###
[  8%]
   2:samba-client   warning: /etc/samba/smb.conf created as
/etc/samba/smb.conf.rpmnew
### [ 15%]
/sbin/ldconfig: /usr/lib/libGammu.so.0 is not a symbolic link

Updating etc/sysconfig/network/dhcp...
   3:samba  ###
[ 23%]
   4:libsmbclient   ###
[ 31%]
/sbin/ldconfig: /usr/lib/libGammu.so.0 is not a symbolic link

   5:libmsrpc   ###
[ 38%]
/sbin/ldconfig: /usr/lib/libGammu.so.0 is not a symbolic link

   6:ldapsmb###
[ 46%]
   7:libmsrpc-devel ###
[ 54%]
   8:libsmbclient-devel ###
[ 62%]
   9:samba-krb-printing ###
[ 69%]
Starting SuSEconfig, the SuSE Configuration Tool...
Running module permissions only
Reading /etc/sysconfig and updating the system...
Executing /sbin/conf.d/SuSEconfig.permissions...
Finished.
  10:samba-pdb  ###
[ 77%]
  11:samba-python   ###
[ 85%]
  12:samba-vscan###
[ 92%]
  13:samba-winbind  ###
[100%]
/sbin/ldconfig: /usr/lib/libGammu.so.0 is not a symbolic link

/sbin/ldconfig: /usr/lib/libGammu.so.0 is not a symbolic link

/sbin/ldconfig: /usr/lib/libGammu.so.0 is not a symbolic link

/sbin/ldconfig: /usr/lib/libGammu.so.0 is not a symbolic link

/sbin/ldconfig: /usr/lib/libGammu.so.0 is not a symbolic link

I believe libGammu was installed via RPM as a requirement for 
kmobiletools.

-- 
David C. Rankin, J.D., P.E.
Rankin Law Firm, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
(936) 715-9333
(936) 715-9339 fax
www.rankinlawfirm.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Migrating to LDAP

[Tim Bates]

Can anyone point me to a guide on migrating Linux and Samba accounts to 
LDAP? I can only find part guides, and I can't figure out how to get the 
account data combined (without a lot of manual effort).


I can get the Linux accounts over no problems. I then tried to do 
"pdbedit -i tdbsam -e ldapsame -s /path/to/modified/smb.conf", but it 
only manages to stuff things up by skipping the real accounts and 
creating the system accounts (which I don't want).
I then tried clearing the LDAP data and doing the pdbedit thing first. 
But it still skips real users and just creates the systems accounts. It 
does say it created the real users, but they don't appear.


I don't really want to have to reset all the passwords and rejoin all 
the PCs to the domain... So I need a method of doing this.


Tim B

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] wbinfo fails

[Guillermo Gutierrez]

I am having trouble with samba 3.0.24 on Ubuntu Feisty (7.04). "net ads
testjoin" returns successful and the actual join to the AD domain works,
but for some reason winbind will not work correctly. Wbinfo -t returns
the following error: 

 

checking the trust secret via RPC calls failed

error code was NT_STATUS_ACCESS_DENIED (0xc022)

Could not check secret

 

I cannot figure out what is wrong and it worked fine before.

 

Guillermo Gutierrez

Network Administrator

Market Scan Information Systems, Inc.

(818) 575-2017

(818) 324-0871

[EMAIL PROTECTED]

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Problem after joining Windows domain: Will Samba support "fallback" to local domain for authentication of local users?

[Windsor Dave L. (AdP/MOE2.12)]

Will Samba support "fallback" to local domain for authentication of
local users?

I joined a RHEL4 server running Samba  3.0.10-1.4E.11 to a Windows
2000/2003 mixed-mode domain today using "security = domain", after
having run for many months in "security = user" mode.  Authentication
works fine for users defined in the Windows domain, but we have a few
users (mainly on manufacturing equipment) who are not in the domain, and
are defined in /etc/passwd and an old-fashioned smbpasswd file only.
When mapping drives (these are old W2K clients), these users must now
use "\" for their username, or the server will try
to authenticate to the domain and get a NT_STATUS_NO_SUCH_USER error.

I seem to recall that an old server we used to have that ran Samba 2.2.x
in "security = domain" mode would try to authenticate against the domain
first, then fall back to the smbpasswd file if that failed, so
authentication of locally defined users was transparent.

Is there a way to make Samba3 "fall back" to the smbpasswd file if the
user is not in the Windows domain?  I've experimented a bit with passdb
backend, but I haven't seen any difference.  Of course, I can just go to
all the production equipment and remap the drives, but there are quite a
few of them, and I'm trying to avoid the downtime.

Thanks for any advice!

Best Regards,

Dave Windsor

Robert Bosch LLC
Team Leader, Test Systems Engineering: Hybrid ECU/TCU (AdP/MOE2.1)
4421 Highway 81 North
Anderson, SC 29621 USA
www.bosch.us 

Tel:  1 (864) 260-8459
Fax: 1 (864) 260-8142
[EMAIL PROTECTED] 



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] pdbedit -P "password history" doesn't work !!

[Felipe Augusto van de Wiel]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hubert Choma wrote, On 19-09-2007 06:36:
> Hi !
> This is my firs post here. I've got a problem with password history 
> policy -C 3 which doesn't work !!
> I set policy
> pdbedit -P "maximum password age" -C 777600 (90days)
> pdbedit -P "minimum password age" -C 691200 (80days)
>"user must logon to change password" -C 2
>"password history" -C 3
> 
> On clients (XP PRO) some of people doesn't see warrning with "password 
> expired" information and password history doesn't work !!! I can set 
> still the same password .

Usually this only affects users _after_ the policy
is in place. In my experience, only after we made all the
users change their passwords, the policy applied to them
all, from time to time, for whatever reason, the policy
lost our setup and fallback to default, I'm using LDAP as
a backend and Samba 3.0.24 in Debian.


> My backend is smbpasswd in smb.conf .I tried with pdbedit but when I 
> changed backend after restarting samba XP cannot login because it must 
> be added to domain again. In my production serwer I use smbpasswd 
> backend. So I don't want to add all computers again to domain!!! SID of 
> domain is the same like before !

I think you can use pdbedit to help you changing
backends, you shouldn't need to rejoin all machines just
because you change the passdb, some people move from
smbpasswd to LDAP and are able to avoid that.


> Why after changing backend i must add again computer to domain??

Because some info got lost in the migration. Try
to use pdbedit to migrate the info from one backend to
the other.


> To use pdbedit policies which backend should I use ??
> Please help!!!
> My ver. of samba
> Version 3.0.26a-0.fc7

Any one. :-)

http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html#pdbeditthing


Kind regards,
- --
Felipe Augusto van de Wiel <[EMAIL PROTECTED]>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG8T7+Cj65ZxU4gPQRCEedAJ9gHrISmyqszhD/vHTVjoohL8Y+mgCfUxuM
kw55AwgJg1OOhcDUXjJFhRc=
=eabD
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba3+openldap:Problem during the LDAP search

[Felipe Augusto van de Wiel]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Edmund Lin wrote, On 19-09-2007 00:04:
> Hi,
> I'm sorry that I'm new to LDAP. We used to use tdbsam as the passdb backend.
> I wish I had time to learn more about LDAP but I need to finish this in
> these few days. I just followed the steps from Samba guide chapter 5 and got
> stucked at the point of joining domain. I also use ldapsearch -x uid=root
> and see the root account's information. If this is not the right way, would
> you tell me how to check it and correct it?  I swear I will study LDAP in
> depth after I get through this. 

You don't need to swear to us, I think Adam is more
concerned with you when he say that it needs "glue", otherwise
you probably will face some troubles finding where exactly is
the problem.

ldapsearch is fine, but you should invest a couple of
hours to read the LDAP Administrator's Guide and a few bits
of the whole LDAP+Samba dance, it can save you hours of hitting
the head against the wall. :-)


> And I can use the root account/password to access the share 
> folders of the server without joining the domain.

My guess is that you are missing the "admin" account
of the Domain. You should use 'net groupmap' or 'net rpc rights'
to give to the LDAP-root user the ability to join machines to
the domain.

But looking for the error you sent in the previous message:
"logon failure:unknown user name or bad password", it seems that
there is still a problem with your account/password configs.

Kind regards,
- --
Felipe Augusto van de Wiel <[EMAIL PROTECTED]>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG8T1kCj65ZxU4gPQRCKv1AJ9bCR62OSp6+0dx6wpZzgUULwAJqACeNyo6
acpG77L7c7Qe2fmBBhbkuhk=
=7f1C
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] What management of samba is available for large scale deployment

[D G Teed]

I'm working for a higher education institution, and we have Novell Netware
for our file sharing services.  We are looking at what migration paths
are available.

I know samba works, we use it on a number of Solaris and Linux boxes and
have it authenticate against our Windows ADS.  Manually editing samba
confiiguration files for up to a hundred users is OK.  The challenge is how
do you manage a few thousand users with backends that auto-populate
the samba config and front ends which administrators can tweak as needed?

Does someone make a product which helps with the management of Samba and
provide features like autocreation of groups to support shared permissions
on folders, etc?  If not a product, has there been a guide on how to
deploy samba with a large number (5000) of users and a large number
(perhaps 300-500) groups?

Having a product which permits users to self-administer their share
and allow read or write access to certain users or groups would be ideal.

--Donald Teed
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Invalid hash for xattr (system.posix_acl_access) associated with [NULL]

[Brad C]

Hi There,

Version 3.0.23c-SerNet-SuSE
Symtoms: extremely extremely slow, high processor usage, in the dmesg,
hundreds of these entries... which direction should I go...


ReiserFS: sdb1: warning: Invalid hash for xattr (system.posix_acl_access)
associated with [NULL]
ReiserFS: sdb1: warning: Invalid hash for xattr (system.posix_acl_access)
associated with [NULL]
ReiserFS: sdb1: warning: Invalid hash for xattr (system.posix_acl_access)
associated with [NULL]
ReiserFS: sdb1: warning: Invalid hash for xattr (system.posix_acl_access)
associated with [NULL]
ReiserFS: sdb1: warning: Invalid hash for xattr (system.posix_acl_access)
associated with [NULL]
ReiserFS: sdb1: warning: Invalid hash for xattr (system.posix_acl_access)
associated with [NULL]
ReiserFS: sdb1: warning: Invalid hash for xattr (system.posix_acl_access)
associated with [NULL]
ReiserFS: sdb1: warning: Invalid hash for xattr (system.posix_acl_access)
associated with [NULL]

Any advice would be appreciated.

Brad
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Invalid hash for xattr (system.posix_acl_access) associated with [NULL]

[Volker Lendecke]

On Wed, Sep 19, 2007 at 03:58:47PM +0200, Brad C wrote:
> Version 3.0.23c-SerNet-SuSE
> Symtoms: extremely extremely slow, high processor usage, in the dmesg,
> hundreds of these entries... which direction should I
> go...

Get the data off reiserfs on a real file system like ext3. QUICK.

Volker


pgpoiAkBwdQbb.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] wbinfo

[Jason Greene]

Yes that works fine.


On 9/19/07, Carlos Rivera-Jones <[EMAIL PROTECTED]> wrote:
>
>
>
>
> Do a "getent passwd". Do you get a list of the local *and* domain users?
>
>  Carlos
>
>
>  -Original Message-
>  From: [EMAIL PROTECTED] on behalf of Jason
> Greene
>  Sent: Wed 9/19/2007 9:03 AM
>  To: samba@lists.samba.org
>  Subject: [Samba] wbinfo
>
>  Hi,
>
>  I am trying to configure a RHEL-4 server with SAMBA.  We need the
>  server to authenticate against our Windows AD servers.   We have
>  several trusted domains.
>
>  I have been working with RedHat's support and so far they have not
>  been able to resolve this issue.
>
>  We can join the domain but we cannot map the shares from any pc
>  (windows or linux) using a domain account (user or admin)
>
>  It takes up to 12 attempts to get a response from wbinfo -u or -g.
>
>  We don't have any local firewalls running and the network firewalls
>  are open on the necessary ports.
>
>   I don't know what else to put in the request for help.
>
>
>  --
>  Jason Greene
>  --
>  To unsubscribe from this list go to the following URL and read the
>  instructions:
> https://lists.samba.org/mailman/listinfo/samba
>
>
>
>


-- 
Jason Greene
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] wbinfo

[Carlos Rivera-Jones]

Do a "getent passwd". Do you get a list of the local *and* domain users?

Carlos

-Original Message-
From: [EMAIL PROTECTED] on behalf of Jason Greene
Sent: Wed 9/19/2007 9:03 AM
To: samba@lists.samba.org
Subject: [Samba] wbinfo
 
Hi,

I am trying to configure a RHEL-4 server with SAMBA.  We need the
server to authenticate against our Windows AD servers.   We have
several trusted domains.

I have been working with RedHat's support and so far they have not
been able to resolve this issue.

We can join the domain but we cannot map the shares from any pc
(windows or linux) using a domain account (user or admin)

It takes up to 12 attempts to get a response from wbinfo -u or -g.

We don't have any local firewalls running and the network firewalls
are open on the necessary ports.

 I don't know what else to put in the request for help.


-- 
Jason Greene
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] wbinfo

[Jason Greene]

Hi,

I am trying to configure a RHEL-4 server with SAMBA.  We need the
server to authenticate against our Windows AD servers.   We have
several trusted domains.

I have been working with RedHat's support and so far they have not
been able to resolve this issue.

We can join the domain but we cannot map the shares from any pc
(windows or linux) using a domain account (user or admin)

It takes up to 12 attempts to get a response from wbinfo -u or -g.

We don't have any local firewalls running and the network firewalls
are open on the necessary ports.

 I don't know what else to put in the request for help.


-- 
Jason Greene
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] pdbedit -P "password history" doesn't work !!

[Hubert Choma]

Hi !
This is my firs post here. I've got a problem with password history 
policy -C 3 which doesn't work !!
I set policy
pdbedit -P "maximum password age" -C 777600 (90days)
pdbedit -P "minimum password age" -C 691200 (80days)
   "user must logon to change password" -C 2
   "password history" -C 3

On clients (XP PRO) some of people doesn't see warrning with "password 
expired" information and password history doesn't work !!! I can set 
still the same password .

My backend is smbpasswd in smb.conf .I tried with pdbedit but when I 
changed backend after restarting samba XP cannot login because it must 
be added to domain again. In my production serwer I use smbpasswd 
backend. So I don't want to add all computers again to domain!!! SID of 
domain is the same like before !
Why after changing backend i must add again computer to domain??
To use pdbedit policies which backend should I use ??

Please help!!!

My ver. of samba
Version 3.0.26a-0.fc7


Są bardzo hetero. I właśnie się pobrali!
Rewelacyjna komedia PAŃSTWO MLODZI: CHUCK i LARRY
W kinach od 21 września!
http://klik.wp.pl/?adr=http%3A%2F%2Fadv.reklama.wp.pl%2Fas%2Fpanstwomlodzi.html&sid=31


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] smbvalid.a and valid.a files.

[Piotr Gajewski]

Hi,

Actually I'm installing Documentum on Linux Debian. Few from the steps:

1. Obtain the GNU SMB library source code.
This is available at Samba sites on the Web.
2. Build the GNU SMB library.
3. Copy the smbvalid.a library from the /smbval directory to the  
$DM_HOME/install/

external_apps/checkpass directory.
4. Copy the valid.h file from the /include directory to the $DM_HOME/ 
install/external_

apps/checkpass directory.

Yep, I downloaded file yesterday (http://us1.samba.org/samba/ftp/ 
samba-latest.tar.gz), configured it with krb5 enabled and compiled,  
but I can't find those two files...


Anyone can tell me where I can find those two?
Thanks for answers.
--
Greetings,
gajos
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] samba - ad domain trust windows 2003 native mode

[werner maes]

Hello

Is it possible to establish an interdomain trust between samba 
3.0.25c and Windows 2003 Active Directory in Windows 2003 native mode?
According to the howto Chapter 18, last phrase it is not: "It works 
with Samba-3 and NT4 domains, and also with Samba-3 and Windows 200x 
ADS in mixed mode ".


But Volcker Lendecke replied on a mail in the samba mailing list:


List:   samba
Subject:Re: [Samba] 
Local accounts and AD

Date:   2007-06-15 15:49:52


> >I can't establish a trust because AD is running in native mode.  To
> > establish a trust domain AD must be running in mixed mode.  At least
> > this is how I understand the problem.
>
That's a wrong assumption. You can certainly use a trust in
native mode. The only thing you can not do anymore is
install an NT4 BDC into the domain that was converted to
native.

So my question: what's the story on this? As for now I cannot make 
the trust work (samba as the trusting domain).




Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba